reviewflow 3.36.1 → 3.37.1

package/dist/tests/acceptance/197-trusted-actor-provenance-gate.acceptance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"197-trusted-actor-provenance-gate.acceptance.test.js","sourceRoot":"","sources":["../../../src/tests/acceptance/197-trusted-actor-provenance-gate.acceptance.test.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAI5B,MAAM,UAAU,GAAG;IACjB,MAAM,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;IACtB,IAAI,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE;IACpE,KAAK,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,qBAAqB,EAAE,KAAK,EAAE;IACzD,YAAY,EAAE,EAAE;CACjB,CAAC;AAEF,MAAM,cAAc,GAAqB;IACvC,IAAI,EAAE,cAAc;IACpB,QAAQ,EAAE,QAAQ;IAClB,SAAS,EAAE,kCAAkC;IAC7C,SAAS,EAAE,8CAA8C;IACzD,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,IAAI;CACd,CAAC;AAEF,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC;IACnC,2BAA2B,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC;CACzD,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC;IACvC,qBAAqB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC;IACrD,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;CAC3C,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,qCAAqC,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC;IAC3D,aAAa,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC1B,SAAS,EAAE,EAAE,CAAC,EAAE,EAAE;CACnB,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE;IAC3B,gBAAgB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC1B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;IACpC,0BAA0B,EAAE,EAAE,CAAC,EAAE,EAAE;IACnC,yBAAyB,EAAE,EAAE,CAAC,EAAE,EAAE;CACnC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IACpC,gBAAgB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IACnC,+BAA+B,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IAClD,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;IACpC,kBAAkB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;CACtC,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CACL,4FAA4F,EAC5F,GAAG,EAAE,CAAC,CAAC;IACL,8BAA8B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QAChE,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACvB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,cAAc,EAAE,EAAE,CAAC,EAAE,EAAE;KACxB,CAAC,CAAC;CACJ,CAAC,CACH,CAAC;AAEF,EAAE,CAAC,IAAI,CACL,0FAA0F,EAC1F,GAAG,EAAE,CAAC,CAAC;IACL,wBAAwB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QAC1D,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IACH,qBAAqB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC/B,CAAC,CACH,CAAC;AAEF,EAAE,CAAC,IAAI,CACL,gGAAgG,EAChG,GAAG,EAAE,CAAC,CAAC;IACL,8BAA8B,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC;QAChE,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;KAC1C,CAAC,CAAC;CACJ,CAAC,CACH,CAAC;AAEF,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sEAAsE,CAAC;AAC5G,OAAO,EAAE,mBAAmB,EAAE,MAAM,4FAA4F,CAAC;AACjI,OAAO,EAAE,qBAAqB,EAAE,MAAM,mEAAmE,CAAC;AAC1G,OAAO,EAAE,2BAA2B,EAAE,MAAM,qEAAqE,CAAC;AAElH,OAAO,EAAE,0BAA0B,EAAE,MAAM,qEAAqE,CAAC;AACjH,OAAO,EAAE,6BAA6B,EAAE,MAAM,wEAAwE,CAAC;AACvH,OAAO,EAAE,mBAAmB,EAAE,MAAM,8DAA8D,CAAC;AACnG,OAAO,EAAE,iBAAiB,EAAE,MAAM,4DAA4D,CAAC;AAC/F,OAAO,EAAE,6BAA6B,EAAE,MAAM,wEAAwE,CAAC;AACvH,OAAO,EAAE,kBAAkB,EAAE,MAAM,6DAA6D,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAE,MAAM,iEAAiE,CAAC;AACzG,OAAO,EAAE,sBAAsB,EAAE,MAAM,iEAAiE,CAAC;AACzG,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,0CAA0C,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,OAAO,EAAE,6BAA6B,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAC7E,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,+BAA+B,EAAE,MAAM,4CAA4C,CAAC;AAE7F,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;AAElC,MAAM,aAAa,GAAG,iCAAiC,CAAC;AACxD,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAE7C,SAAS,yBAAyB,CAAC,SAA2B;IAC5D,OAAO;QACL,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,GAAqB,EAAE,CAAC,SAAS,CAAC;QACjD,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAqB,EAAE,CAAC,IAAI,CAAC;QAChD,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE;QACf,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC3B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC7B,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACzB,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QAC1B,iBAAiB,EAAE,EAAE,CAAC,EAAE,EAAE;QAC1B,UAAU,EAAE,EAAE,CAAC,EAAE,CAAC,GAAqB,EAAE,CAAC,IAAI,CAAC;QAC/C,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QAC/B,YAAY,EAAE,EAAE,CAAC,EAAE,EAAE;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB;IAC/B,OAAO;QACL,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACtD,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;QACvB,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;QAC1B,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC5B,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAChD,SAAS,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B;IACnC,OAAO;QACL,OAAO,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;YAC1B,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE;gBACN,QAAQ,EAAE,GAAG;gBACb,WAAW,EAAE,CAAC;gBACd,YAAY,EAAE,GAAG;gBACjB,WAAW,EAAE,CAAC;gBACd,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,0BAA0B;aACxC;SACF,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,eAA6D;IAClF,MAAM,kBAAkB,GAAG,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7D,OAAO;QACL,oBAAoB,EAAE,wBAAwB,EAAE;QAChD,kBAAkB;QAClB,wBAAwB,EAAE;YACxB,iBAAiB,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;SACtF;QACD,qBAAqB,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE;QAC5D,eAAe,EAAE,IAAI,sBAAsB,CAAC,eAAe,CAAC;QAC5D,gBAAgB,EAAE,IAAI,6BAA6B,CAAC,eAAe,CAAC;QACpE,UAAU,EAAE,IAAI,iBAAiB,CAAC,eAAe,CAAC;QAClD,eAAe,EAAE,IAAI,sBAAsB,CAAC,eAAe,CAAC;QAC5D,mBAAmB,EAAE,IAAI,0BAA0B,CAAC,eAAe,CAAC;QACpE,WAAW,EAAE,IAAI,kBAAkB,CAAC,eAAe,EAAE,kBAAkB,CAAC;QACxE,aAAa,EAAE,4BAA4B,EAAE;QAC7C,uBAAuB,EAAE,EAAE,CAAC,EAAE,EAAE;QAChC,eAAe,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAChC,cAAc,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,SAAkB,EAAE,CAAC,CAAC;QACnE,YAAY,EAAE,IAAI,mBAAmB,CAAC,eAAe,CAAC;QACtD,sBAAsB,EAAE,IAAI,0BAA0B,EAAE;QACxD,sBAAsB,EAAE,IAAI,6BAA6B,CAAC,eAAe,CAAC;QAC1E,yBAAyB,EAAE,IAAI,6BAA6B,EAAE;QAC9D,mBAAmB,EAAE,GAAkB,EAAE,CAAC,IAAI;QAC9C,GAAG,EAAE,GAAW,EAAE,CAAC,0BAA0B;KAC9C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,cAAc,CACrB,eAA6D,EAC7D,YAAqC,EACrC,cAA+C;IAE/C,MAAM,oBAAoB,GAAG,IAAI,2BAA2B,CAAC;QAC3D,cAAc,EAAE,GAAG,EAAE,CAAC,WAAW;QACjC,2BAA2B,EAAE,cAAc;QAC3C,OAAO,EAAE,aAAa;QACtB,uBAAuB,EAAE,GAAG,EAAE,GAAE,CAAC;QACjC,MAAM;KACP,CAAC,CAAC;IACH,OAAO;QACL,GAAG,aAAa,CAAC,eAAe,CAAC;QACjC,oBAAoB;QACpB,cAAc,EAAE,IAAI,qBAAqB,CAAC,YAAY,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,eAAe;IACtB,OAAO,gBAAgB,CAAC,MAAM,CAAC;QAC7B,EAAE,EAAE,aAAa;QACjB,QAAQ,EAAE,EAAE;QACZ,QAAQ,EAAE,QAAQ;QAClB,OAAO,EAAE,YAAY;QACrB,KAAK,EAAE,gBAAgB;QACvB,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,IAAI;QAClB,UAAU,EAAE,0BAA0B;QACtC,YAAY,EAAE,0BAA0B;KACzC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO;QACL,WAAW,EAAE,MAAM;QACnB,UAAU,EAAE,MAAM;QAClB,IAAI,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE;QACtD,OAAO,EAAE;YACP,EAAE,EAAE,CAAC;YACL,IAAI,EAAE,cAAc;YACpB,mBAAmB,EAAE,YAAY;YACjC,OAAO,EAAE,0CAA0C;YACnD,YAAY,EAAE,8CAA8C;SAC7D;QACD,iBAAiB,EAAE;YACjB,EAAE,EAAE,CAAC;YACL,IAAI;YACJ,aAAa,EAAE,cAAc;YAC7B,WAAW,EAAE,EAAE;SAChB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,EAAE;YACP,KAAK,EAAE,SAAS;YAChB,KAAK,EAAE,QAAQ;YACf,aAAa,EAAE,cAAc;YAC7B,aAAa,EAAE,MAAM;YACrB,GAAG,EAAE,8DAA8D;SACpE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC9B,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAA+B,CAAC;AAC5D,CAAC;AAED,QAAQ,CAAC,mGAAmG,EAAE,GAAG,EAAE;IACjH,IAAI,SAAuB,CAAC;IAE5B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,SAAS,GAAG;YACV,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;YAChC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;SACJ,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,aAAa,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,EAAE,CAAC,kFAAkF,EAAE,KAAK,IAAI,EAAE;YAChG,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,eAAe,GAAG,IAAI,uBAAuB,EAAE,CAAC;YACtD,eAAe,CAAC,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAC3E,MAAM,eAAe,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAC9D,MAAM,YAAY,GAAG,cAAc,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;YAExF,MAAM,aAAa,GAAG,kBAAkB,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YAC/E,aAAa,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;YAE5E,MAAM,mBAAmB,CACvB,SAAS,CAAC,aAAa,CAAC,EACxB,SAAS,EACT,MAAM,EACN,gBAAgB,EAChB,YAAY,CACb,CAAC;YAEF,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAE1C,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YAC1D,MAAM,gBAAgB,GAAG,IAAI,uBAAuB,EAAE,CAAC;YACvD,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACxE,MAAM,gBAAgB,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAC/D,MAAM,aAAa,GAAG,cAAc,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;YAE5F,MAAM,cAAc,GAAG,kBAAkB,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YAChF,cAAc,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAEnE,MAAM,mBAAmB,CACvB,SAAS,CAAC,cAAc,CAAC,EACzB,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,aAAa,CACd,CAAC;YAEF,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;QAC/C,EAAE,CAAC,uGAAuG,EAAE,KAAK,IAAI,EAAE;YACrH,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,eAAe,EAAE,CAAC,CAAC;YACtE,gBAAgB,CAAC,WAAW,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;YAChE,gBAAgB,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;YAC/D,MAAM,eAAe,GAAG,IAAI,uBAAuB,EAAE,CAAC;YACtD,eAAe,CAAC,SAAS,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YAC3E,MAAM,eAAe,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAC9D,MAAM,YAAY,GAAG,cAAc,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;YAExF,MAAM,aAAa,GAAG,kBAAkB,CAAC,cAAc,EAAE,CAAC;YAC1D,aAAa,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;YAE5E,MAAM,mBAAmB,CACvB,SAAS,CAAC,aAAa,CAAC,EACxB,SAAS,EACT,MAAM,EACN,gBAAgB,EAChB,YAAY,CACb,CAAC;YAEF,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAE1C,MAAM,iBAAiB,GAAG,yBAAyB,CAAC,eAAe,EAAE,CAAC,CAAC;YACvE,iBAAiB,CAAC,WAAW,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;YACjE,iBAAiB,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;YAChE,MAAM,gBAAgB,GAAG,IAAI,uBAAuB,EAAE,CAAC;YACvD,gBAAgB,CAAC,SAAS,CAAC,WAAW,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACxE,MAAM,gBAAgB,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAC/D,MAAM,aAAa,GAAG,cAAc,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;YAE5F,MAAM,cAAc,GAAG,kBAAkB,CAAC,cAAc,EAAE,CAAC;YAC3D,cAAc,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAEnE,MAAM,mBAAmB,CACvB,SAAS,CAAC,cAAc,CAAC,EACzB,SAAS,EACT,MAAM,EACN,iBAAiB,EACjB,aAAa,CACd,CAAC;YAEF,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACzC,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;YACvG,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAE3D,MAAM,gBAAgB,GAAG,yBAAyB,CAChD,gBAAgB,CAAC,MAAM,CAAC;gBACtB,EAAE,EAAE,aAAa;gBACjB,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,YAAY;aACtB,CAAC,CACH,CAAC;YACF,MAAM,eAAe,GAAG,IAAI,uBAAuB,EAAE,CAAC;YACtD,eAAe,CAAC,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC,QAAQ,CAAC,CAAC;YACxE,MAAM,eAAe,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAC9D,MAAM,YAAY,GAAG,cAAc,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;YAExF,MAAM,mBAAmB,CACvB,SAAS,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAAC,EAC1D,SAAS,EACT,MAAM,EACN,gBAAgB,EAChB,YAAY,CACb,CAAC;YAEF,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CACvF,CAAC;YACF,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAEvD,MAAM,iBAAiB,GAAG,yBAAyB,CACjD,gBAAgB,CAAC,MAAM,CAAC;gBACtB,EAAE,EAAE,aAAa;gBACjB,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,YAAY;aACtB,CAAC,CACH,CAAC;YACF,MAAM,gBAAgB,GAAG,IAAI,uBAAuB,EAAE,CAAC;YACvD,gBAAgB,CAAC,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;YAC1E,MAAM,gBAAgB,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAC/D,MAAM,aAAa,GAAG,cAAc,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;YAC5F,MAAM,cAAc,GAAG;gBACrB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAChC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;aACJ,CAAC;YAE7B,MAAM,mBAAmB,CACvB,SAAS,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAAC,EAC1D,cAAc,EACd,MAAM,EACN,iBAAiB,EACjB,aAAa,CACd,CAAC;YAEF,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;YAC5D,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAC9C,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CACvD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACvD,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;YAC1E,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,eAAe,GAAG,IAAI,uBAAuB,EAAE,CAAC;YACtD,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,eAAe,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAC9D,MAAM,YAAY,GAAG,cAAc,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;YAExF,MAAM,aAAa,GAAG,kBAAkB,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YAC/E,aAAa,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAElE,MAAM,mBAAmB,CACvB,SAAS,CAAC,aAAa,CAAC,EACxB,SAAS,EACT,MAAM,EACN,gBAAgB,EAChB,YAAY,CACb,CAAC;YAEF,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAE1C,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,eAAe,EAAE,CAAC,CAAC;YACtE,gBAAgB,CAAC,WAAW,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;YAChE,gBAAgB,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,EAAE,CAAC,CAAC;YAC/D,MAAM,eAAe,GAAG,IAAI,uBAAuB,EAAE,CAAC;YACtD,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YACpC,MAAM,eAAe,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAC9D,MAAM,YAAY,GAAG,cAAc,CAAC,gBAAgB,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;YAExF,MAAM,aAAa,GAAG,kBAAkB,CAAC,cAAc,EAAE,CAAC;YAC1D,aAAa,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAElE,MAAM,mBAAmB,CACvB,SAAS,CAAC,aAAa,CAAC,EACxB,SAAS,EACT,MAAM,EACN,gBAAgB,EAChB,YAAY,CACb,CAAC;YAEF,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAE1C,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC;YAC3D,MAAM,YAAY,GAAG,yBAAyB,CAC5C,gBAAgB,CAAC,MAAM,CAAC;gBACtB,EAAE,EAAE,aAAa;gBACjB,QAAQ,EAAE,EAAE;gBACZ,QAAQ,EAAE,QAAQ;gBAClB,OAAO,EAAE,YAAY;aACtB,CAAC,CACH,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,uBAAuB,EAAE,CAAC;YAClD,WAAW,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAChC,MAAM,WAAW,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAC1D,MAAM,QAAQ,GAAG,cAAc,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;YACxE,MAAM,SAAS,GAAG;gBAChB,MAAM,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;gBAChC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,EAAE;aACJ,CAAC;YAE7B,MAAM,mBAAmB,CACvB,SAAS,CAAC,cAAc,CAAC,+BAA+B,CAAC,CAAC,EAC1D,SAAS,EACT,MAAM,EACN,YAAY,EACZ,QAAQ,CACT,CAAC;YAEF,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,oBAAoB,CACzC,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CACvF,CAAC;YACF,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACrD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;YACxG,MAAM,YAAY,GAAG,IAAI,uBAAuB,EAAE,CAAC;YACnD,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACpE,MAAM,cAAc,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAE7D,MAAM,eAAe,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,cAAc,CAAC,eAAe,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;YAClF,MAAM,YAAY,GAAG,kBAAkB,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YAC9E,YAAY,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAEjE,MAAM,mBAAmB,CACvB,SAAS,CAAC,YAAY,CAAC,EACvB,SAAS,EACT,MAAM,EACN,eAAe,EACf,WAAW,CACZ,CAAC;YAEF,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAEzC,MAAM,eAAe,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YACxD,MAAM,WAAW,GAAG,cAAc,CAAC,eAAe,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;YAClF,MAAM,YAAY,GAAG,kBAAkB,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YAC9E,YAAY,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAE7D,MAAM,mBAAmB,CACvB,SAAS,CAAC,YAAY,CAAC,EACvB,SAAS,EACT,MAAM,EACN,eAAe,EACf,WAAW,CACZ,CAAC;YAEF,MAAM,CAAC,aAAa,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;gBACjC,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE;gBACpD,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE;aACnD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;QAC7C,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;YAClG,EAAE,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,mBAAmB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YAC3F,MAAM,QAAQ,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YACjD,MAAM,YAAY,GAAG,IAAI,uBAAuB,EAAE,CAAC;YACnD,YAAY,CAAC,SAAS,CAAC,WAAW,EAAE,oBAAoB,CAAC,SAAS,CAAC,CAAC;YACpE,MAAM,cAAc,GAAG,IAAI,+BAA+B,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;YAEpE,MAAM,KAAK,GAAG,kBAAkB,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;YACvE,KAAK,CAAC,IAAI,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;YAE1D,MAAM,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;YAE/E,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,CAAC;YACnD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;YACpE,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YAC7C,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/acceptance/198-constrained-action-surface.acceptance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=198-constrained-action-surface.acceptance.test.d.ts.map

package/dist/tests/acceptance/198-constrained-action-surface.acceptance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"198-constrained-action-surface.acceptance.test.d.ts","sourceRoot":"","sources":["../../../src/tests/acceptance/198-constrained-action-surface.acceptance.test.ts"],"names":[],"mappings":""}

package/dist/tests/acceptance/198-constrained-action-surface.acceptance.test.js

@@ -0,0 +1,185 @@
+import { dispatchConstrainedActions } from '../../modules/review-execution/services/dispatchConstrainedActions.js';
+class RecordingExecutor {
+    calls = [];
+    run = (command, args) => {
+        this.calls.push({ command, args });
+    };
+}
+class RecordingLogger {
+    errors = [];
+    info() { }
+    warn() { }
+    debug() { }
+    error(_obj, message) {
+        this.errors.push(message);
+    }
+}
+class StubInventoryGateway {
+    pages = [];
+    failure = null;
+    setPages(pages) {
+        this.pages = pages;
+    }
+    setFailure(error) {
+        this.failure = error;
+    }
+    fetchPage(_projectPath, _mergeRequestNumber, page) {
+        if (this.failure)
+            throw this.failure;
+        const found = this.pages.find((candidate) => candidate.page === page);
+        if (!found)
+            throw new Error(`no page ${page}`);
+        return found;
+    }
+}
+const baseContext = {
+    platform: 'gitlab',
+    projectPath: 'group/project',
+    mrNumber: 42,
+    localPath: '/tmp/repo',
+};
+function postCommentCalls(executor) {
+    return executor.calls.filter((call) => call.args.includes('POST') &&
+        call.args.some((arg) => arg.endsWith('/notes') && arg.includes('/discussions/') === false));
+}
+function resolveCalls(executor) {
+    return executor.calls.filter((call) => call.args.includes('PUT') && call.args.some((arg) => arg.includes('/discussions/')));
+}
+function replyCalls(executor) {
+    return executor.calls.filter((call) => call.args.includes('POST') &&
+        call.args.some((arg) => arg.endsWith('/notes') && arg.includes('/discussions/')));
+}
+function discussionTargets(calls) {
+    return calls.map((call) => call.args.find((arg) => arg.includes('/discussions/')) ?? '');
+}
+describe('SPEC-198 constrained action surface (acceptance — full chokepoint dispatchConstrainedActions)', () => {
+    it('AC-2 + AC-5: untrusted job with one of each verb executes only postComment; resolve/reply/fetch record zero live writes', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setPages([{ page: 1, totalPages: 1, threadIds: ['10'] }]);
+        const actions = [
+            { type: 'POST_COMMENT', body: 'review summary' },
+            { type: 'THREAD_RESOLVE', threadId: '10' },
+            { type: 'THREAD_REPLY', threadId: '10', message: 'addressed' },
+            { type: 'FETCH_THREADS' },
+        ];
+        await dispatchConstrainedActions(actions, {
+            context: baseContext,
+            provenance: 'untrusted',
+            inventoryGateway: inventory,
+            logger: new RecordingLogger(),
+            executor: executor.run,
+        });
+        expect(executor.calls.length).toBe(1);
+        expect(postCommentCalls(executor).length).toBe(1);
+        expect(resolveCalls(executor).length).toBe(0);
+        expect(replyCalls(executor).length).toBe(0);
+    });
+    it('AC-6 + AC-7 + AC-8: trusted job resolves and replies only for in-set ids, never for out-of-set ids', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setPages([{ page: 1, totalPages: 1, threadIds: ['10'] }]);
+        const actions = [
+            { type: 'THREAD_RESOLVE', threadId: '10' },
+            { type: 'THREAD_RESOLVE', threadId: '999' },
+            { type: 'THREAD_REPLY', threadId: '10', message: 'in-set reply' },
+            { type: 'THREAD_REPLY', threadId: '999', message: 'out-of-set reply' },
+        ];
+        await dispatchConstrainedActions(actions, {
+            context: baseContext,
+            provenance: 'trusted',
+            inventoryGateway: inventory,
+            logger: new RecordingLogger(),
+            executor: executor.run,
+        });
+        const resolveTargets = discussionTargets(resolveCalls(executor));
+        const replyTargets = discussionTargets(replyCalls(executor));
+        expect(resolveTargets.filter((target) => target.endsWith('/discussions/10')).length).toBe(1);
+        expect(resolveTargets.some((target) => target.includes('/discussions/999'))).toBe(false);
+        expect(replyTargets.filter((target) => target.includes('/discussions/10/notes')).length).toBe(1);
+        expect(replyTargets.some((target) => target.includes('/discussions/999'))).toBe(false);
+    });
+    it('AC-5: trusted FETCH_THREADS survives the read-amplification gate and is dispatched exactly once', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setPages([{ page: 1, totalPages: 1, threadIds: ['10'] }]);
+        const trustedResult = await dispatchConstrainedActions([{ type: 'FETCH_THREADS' }], {
+            context: baseContext,
+            provenance: 'trusted',
+            inventoryGateway: inventory,
+            logger: new RecordingLogger(),
+            executor: executor.run,
+        });
+        const untrustedExecutor = new RecordingExecutor();
+        const untrustedResult = await dispatchConstrainedActions([{ type: 'FETCH_THREADS' }], {
+            context: baseContext,
+            provenance: 'untrusted',
+            inventoryGateway: inventory,
+            logger: new RecordingLogger(),
+            executor: untrustedExecutor.run,
+        });
+        expect(trustedResult.total).toBe(1);
+        expect(untrustedResult.total).toBe(0);
+    });
+    it('AC-9 + AC-10.1: forged payload ids absent from the authenticated inventory produce zero resolve/reply side effects', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setPages([{ page: 1, totalPages: 1, threadIds: ['authentic-1'] }]);
+        const actions = [
+            { type: 'THREAD_RESOLVE', threadId: 'forged-1' },
+            { type: 'THREAD_REPLY', threadId: 'forged-2', message: 'forged' },
+        ];
+        await dispatchConstrainedActions(actions, {
+            context: baseContext,
+            provenance: 'trusted',
+            inventoryGateway: inventory,
+            logger: new RecordingLogger(),
+            executor: executor.run,
+        });
+        expect(resolveCalls(executor).length).toBe(0);
+        expect(replyCalls(executor).length).toBe(0);
+    });
+    it('AC-10.2: fail-closed on fetch failure — empty inventory, zero resolve/reply side effects, failure logged', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setFailure(new Error('non-2xx from threads API'));
+        const logger = new RecordingLogger();
+        const actions = [
+            { type: 'THREAD_RESOLVE', threadId: '10' },
+            { type: 'THREAD_REPLY', threadId: '10', message: 'should not run' },
+        ];
+        await dispatchConstrainedActions(actions, {
+            context: baseContext,
+            provenance: 'trusted',
+            inventoryGateway: inventory,
+            logger,
+            executor: executor.run,
+        });
+        expect(resolveCalls(executor).length).toBe(0);
+        expect(replyCalls(executor).length).toBe(0);
+        expect(executor.calls.length).toBe(0);
+        expect(logger.errors.length).toBeGreaterThan(0);
+    });
+    it('AC-10.3: fail-closed on incomplete pagination — undelivered page yields empty inventory, in-set id from that page records zero side effects', async () => {
+        const executor = new RecordingExecutor();
+        const inventory = new StubInventoryGateway();
+        inventory.setPages([{ page: 1, totalPages: 2, threadIds: ['10'] }]);
+        const logger = new RecordingLogger();
+        const actions = [
+            { type: 'THREAD_RESOLVE', threadId: '10' },
+            { type: 'THREAD_RESOLVE', threadId: '20' },
+            { type: 'THREAD_REPLY', threadId: '20', message: 'from the missing page' },
+        ];
+        await dispatchConstrainedActions(actions, {
+            context: baseContext,
+            provenance: 'trusted',
+            inventoryGateway: inventory,
+            logger,
+            executor: executor.run,
+        });
+        expect(resolveCalls(executor).length).toBe(0);
+        expect(replyCalls(executor).length).toBe(0);
+        expect(logger.errors.length).toBeGreaterThan(0);
+    });
+});
+//# sourceMappingURL=198-constrained-action-surface.acceptance.test.js.map

package/dist/tests/acceptance/198-constrained-action-surface.acceptance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"198-constrained-action-surface.acceptance.test.js","sourceRoot":"","sources":["../../../src/tests/acceptance/198-constrained-action-surface.acceptance.test.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,0BAA0B,EAAE,MAAM,mEAAmE,CAAC;AAE/G,MAAM,iBAAiB;IACZ,KAAK,GAA+C,EAAE,CAAC;IAChE,GAAG,GAAG,CAAC,OAAe,EAAE,IAAc,EAAQ,EAAE;QAC9C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC;CACH;AAED,MAAM,eAAe;IACV,MAAM,GAAa,EAAE,CAAC;IAC/B,IAAI,KAAU,CAAC;IACf,IAAI,KAAU,CAAC;IACf,KAAK,KAAU,CAAC;IAChB,KAAK,CAAC,IAAY,EAAE,OAAe;QACjC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;CACF;AAED,MAAM,oBAAoB;IAChB,KAAK,GAA0B,EAAE,CAAC;IAClC,OAAO,GAAiB,IAAI,CAAC;IACrC,QAAQ,CAAC,KAA4B;QACnC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,UAAU,CAAC,KAAY;QACrB,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,SAAS,CAAC,YAAoB,EAAE,mBAA2B,EAAE,IAAY;QACvE,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACtE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAC/C,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AAED,MAAM,WAAW,GAAG;IAClB,QAAQ,EAAE,QAAiB;IAC3B,WAAW,EAAE,eAAe;IAC5B,QAAQ,EAAE,EAAE;IACZ,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF,SAAS,gBAAgB,CAAC,QAA2B;IACnD,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,KAAK,KAAK,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,QAA2B;IAC/C,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,QAA2B;IAC7C,OAAO,QAAQ,CAAC,KAAK,CAAC,MAAM,CAC1B,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC1B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CACnF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAiD;IAC1E,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED,QAAQ,CAAC,+FAA+F,EAAE,GAAG,EAAE;IAC7G,EAAE,CAAC,yHAAyH,EAAE,KAAK,IAAI,EAAE;QACvI,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,gBAAgB,EAAE;YAChD,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1C,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE;YAC9D,EAAE,IAAI,EAAE,eAAe,EAAE;SAC1B,CAAC;QAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;YACxC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,WAAW;YACvB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;YAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,KAAK,IAAI,EAAE;QAClH,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1C,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE;YAC3C,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE;YACjE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,kBAAkB,EAAE;SACvE,CAAC;QAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;YACxC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;YAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,cAAc,GAAG,iBAAiB,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE7D,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7F,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAC3F,CAAC,CACF,CAAC;QACF,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iGAAiG,EAAE,KAAK,IAAI,EAAE;QAC/G,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,aAAa,GAAG,MAAM,0BAA0B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE;YAClF,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;YAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,iBAAiB,GAAG,IAAI,iBAAiB,EAAE,CAAC;QAClD,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,EAAE;YACpF,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,WAAW;YACvB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;YAC7B,QAAQ,EAAE,iBAAiB,CAAC,GAAG;SAChC,CAAC,CAAC;QAEH,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oHAAoH,EAAE,KAAK,IAAI,EAAE;QAClI,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC;QAE7E,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,UAAU,EAAE;YAChD,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE;SAClE,CAAC;QAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;YACxC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,SAAS;YAC3B,MAAM,EAAE,IAAI,eAAe,EAAE;YAC7B,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0GAA0G,EAAE,KAAK,IAAI,EAAE;QACxH,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAErC,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1C,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE;SACpE,CAAC;QAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;YACxC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,SAAS;YAC3B,MAAM;YACN,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6IAA6I,EAAE,KAAK,IAAI,EAAE;QAC3J,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC7C,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAErC,MAAM,OAAO,GAAmB;YAC9B,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1C,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC1C,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,uBAAuB,EAAE;SAC3E,CAAC;QAEF,MAAM,0BAA0B,CAAC,OAAO,EAAE;YACxC,OAAO,EAAE,WAAW;YACpB,UAAU,EAAE,SAAS;YACrB,gBAAgB,EAAE,SAAS;YAC3B,MAAM;YACN,QAAQ,EAAE,QAAQ,CAAC,GAAG;SACvB,CAAC,CAAC;QAEH,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/acceptance/199-review-output-egress-scan.acceptance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=199-review-output-egress-scan.acceptance.test.d.ts.map

package/dist/tests/acceptance/199-review-output-egress-scan.acceptance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"199-review-output-egress-scan.acceptance.test.d.ts","sourceRoot":"","sources":["../../../src/tests/acceptance/199-review-output-egress-scan.acceptance.test.ts"],"names":[],"mappings":""}

package/dist/tests/acceptance/199-review-output-egress-scan.acceptance.test.js

@@ -0,0 +1,159 @@
+import { describe, it, expect } from 'vitest';
+import { buildRecoveryExecuteActions } from '../../main/server.js';
+import { defaultEgressScanConfig } from '../../modules/platform-integration/entities/egressScan/egressScan.defaults.js';
+import { createEgressScanner } from '../../modules/platform-integration/entities/egressScan/egressScan.scanner.js';
+import { EgressBlockedError, EgressScannedNoteCommentPostGateway, } from '../../modules/platform-integration/interface-adapters/gateways/egressScanned.noteCommentPost.gateway.js';
+import { executeActionsFromContext } from '../../modules/review-execution/services/contextActionsExecutor.js';
+import { executeThreadActions, } from '../../modules/review-execution/services/threadActionsExecutor.js';
+import { StubEgressScanGateway, StubEgressTraceGateway } from '../../tests/stubs/egressScan.stub.js';
+import { StubNoteCommentPostGateway } from '../../tests/stubs/noteCommentPost.stub.js';
+const SECRET = 'glpat-abcdefghij1234567890';
+const redactConfig = {
+    secretShapeMode: 'redact',
+    lengthMode: 'redact',
+    outOfScopeMode: 'redact',
+    maxBodyLength: 10000,
+    redactionMarker: '[REDACTED]',
+    truncationMarker: '…[TRUNCATED]',
+};
+const blockConfig = {
+    ...redactConfig,
+    secretShapeMode: 'block',
+};
+const silentLogger = {
+    info: () => { },
+    warn: () => { },
+    error: () => { },
+    debug: () => { },
+};
+class RecordingExecutor {
+    calls = [];
+    run = (_command, args) => {
+        this.calls.push(args);
+    };
+    secretBearingArgs() {
+        return this.calls.filter((args) => args.some((arg) => arg.includes(SECRET)));
+    }
+}
+function buildDecoratedSink(config = redactConfig) {
+    const sink = new StubNoteCommentPostGateway();
+    const trace = new StubEgressTraceGateway();
+    const scanner = createEgressScanner(config);
+    const gateway = new EgressScannedNoteCommentPostGateway(sink, scanner, trace);
+    return { sink, trace, gateway };
+}
+const gitlabExecutionContext = {
+    platform: 'gitlab',
+    projectPath: 'group/app',
+    mrNumber: 7,
+    localPath: '/tmp/repo',
+};
+const baseContext = {
+    version: '1.0',
+    mergeRequestId: 'gitlab-group/app-7',
+    platform: 'gitlab',
+    projectPath: 'group/app',
+    mergeRequestNumber: 7,
+    createdAt: '2026-02-02T10:00:00Z',
+    threads: [],
+    actions: [],
+    progress: { phase: 'completed', currentStep: null },
+};
+const publicOutputVerbs = [
+    { name: 'POST_COMMENT', action: { type: 'POST_COMMENT', body: `## Review\ntoken ${SECRET}` } },
+    {
+        name: 'THREAD_REPLY',
+        action: { type: 'THREAD_REPLY', threadId: 'abc', message: `fixed ${SECRET}` },
+    },
+];
+describe('SPEC-199 review output egress scan (acceptance — shared chokepoint across all callers)', () => {
+    describe('AC9 — every auto-path public-output verb is scanned before reaching the sink', () => {
+        for (const { name, action } of publicOutputVerbs) {
+            it(`scans a ${name} body driven through executeThreadActions, never the raw note primitive`, async () => {
+                const { sink, trace, gateway } = buildDecoratedSink();
+                const executor = new RecordingExecutor();
+                await executeThreadActions([action], gitlabExecutionContext, silentLogger, executor.run, gateway);
+                expect(sink.calls).toHaveLength(1);
+                expect(sink.calls[0].body).toContain('[REDACTED]');
+                expect(sink.calls[0].body).not.toContain(SECRET);
+                expect(executor.secretBearingArgs()).toHaveLength(0);
+                expect(trace.traces).toHaveLength(1);
+            });
+            it(`scans a ${name} body persisted in a ReviewContext through executeActionsFromContext`, async () => {
+                const { sink, trace, gateway } = buildDecoratedSink();
+                const executor = new RecordingExecutor();
+                const context = { ...baseContext, actions: [action] };
+                await executeActionsFromContext(context, '/tmp/repo', silentLogger, executor.run, null, gateway);
+                expect(sink.calls).toHaveLength(1);
+                expect(sink.calls[0].body).toContain('[REDACTED]');
+                expect(sink.calls[0].body).not.toContain(SECRET);
+                expect(executor.secretBearingArgs()).toHaveLength(0);
+                expect(trace.traces).toHaveLength(1);
+            });
+        }
+    });
+    describe('AC2 / AC5 — block and fail-closed end-to-end', () => {
+        it('raises EgressBlockedError and never reaches the sink for a secret body in block mode', async () => {
+            const { sink, gateway } = buildDecoratedSink(blockConfig);
+            const executor = new RecordingExecutor();
+            await expect(executeThreadActions([{ type: 'POST_COMMENT', body: `summary ${SECRET}` }], gitlabExecutionContext, silentLogger, executor.run, gateway)).rejects.toBeInstanceOf(EgressBlockedError);
+            expect(sink.calls).toHaveLength(0);
+            expect(executor.secretBearingArgs()).toHaveLength(0);
+        });
+        it('fails closed when the scanner throws — no post, error raised', async () => {
+            const sink = new StubNoteCommentPostGateway();
+            const trace = new StubEgressTraceGateway();
+            const scanner = new StubEgressScanGateway();
+            scanner.setShouldFail(true);
+            const gateway = new EgressScannedNoteCommentPostGateway(sink, scanner, trace);
+            const executor = new RecordingExecutor();
+            await expect(executeThreadActions([{ type: 'POST_COMMENT', body: `summary ${SECRET}` }], gitlabExecutionContext, silentLogger, executor.run, gateway)).rejects.toThrow();
+            expect(sink.calls).toHaveLength(0);
+        });
+    });
+    describe('AC9 — the boot-time recovery path is scanned (GAP-1 close-loop)', () => {
+        it('scans a recovered POST_COMMENT so the secret never reaches the raw CLI note primitive', async () => {
+            const cliCalls = [];
+            const noteCommands = [];
+            const trace = new StubEgressTraceGateway();
+            const recoveredContext = {
+                ...baseContext,
+                actions: [{ type: 'POST_COMMENT', body: `## Recovered review\ntoken ${SECRET}` }],
+            };
+            const executeActions = buildRecoveryExecuteActions(silentLogger, trace, {
+                cliExecutor: (_command, args) => {
+                    cliCalls.push(args);
+                },
+                gitLabNoteExecutor: (command) => {
+                    noteCommands.push(command);
+                    return '';
+                },
+            });
+            await executeActions(recoveredContext, '/tmp/repo');
+            expect(noteCommands).toHaveLength(1);
+            expect(noteCommands[0]).toContain('[redacted]');
+            expect(noteCommands[0]).not.toContain(SECRET);
+            expect(cliCalls.some((args) => args.some((arg) => arg.includes(SECRET)))).toBe(false);
+            expect(trace.traces).toHaveLength(1);
+        });
+    });
+    describe('AC8 — out-of-scope-by-design: no auto revoke whose comment could egress (SPEC-196 unwire)', () => {
+        it('drops THREAD_RESOLVE / ADD_LABEL from the auto path, recording zero CLI writes for them', async () => {
+            const { sink, gateway } = buildDecoratedSink();
+            const executor = new RecordingExecutor();
+            const context = {
+                ...baseContext,
+                actions: [
+                    { type: 'POST_COMMENT', body: 'clean summary' },
+                    { type: 'THREAD_RESOLVE', threadId: 't1' },
+                    { type: 'ADD_LABEL', label: 'approved' },
+                ],
+            };
+            await executeActionsFromContext(context, '/tmp/repo', silentLogger, executor.run, null, gateway);
+            expect(sink.calls).toHaveLength(1);
+            expect(executor.calls.some((args) => args.includes('resolved=true'))).toBe(false);
+            expect(defaultEgressScanConfig.secretShapeMode).toBe('redact');
+        });
+    });
+});
+//# sourceMappingURL=199-review-output-egress-scan.acceptance.test.js.map

package/dist/tests/acceptance/199-review-output-egress-scan.acceptance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"199-review-output-egress-scan.acceptance.test.js","sourceRoot":"","sources":["../../../src/tests/acceptance/199-review-output-egress-scan.acceptance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,2EAA2E,CAAC;AACpH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0EAA0E,CAAC;AAE/G,OAAO,EACL,kBAAkB,EAClB,mCAAmC,GACpC,MAAM,qGAAqG,CAAC;AAG7G,OAAO,EAAE,yBAAyB,EAAE,MAAM,+DAA+D,CAAC;AAC1G,OAAO,EACL,oBAAoB,GAErB,MAAM,8DAA8D,CAAC;AAEtE,OAAO,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AACjG,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AAEnF,MAAM,MAAM,GAAG,4BAA4B,CAAC;AAE5C,MAAM,YAAY,GAAqB;IACrC,eAAe,EAAE,QAAQ;IACzB,UAAU,EAAE,QAAQ;IACpB,cAAc,EAAE,QAAQ;IACxB,aAAa,EAAE,KAAK;IACpB,eAAe,EAAE,YAAY;IAC7B,gBAAgB,EAAE,cAAc;CACjC,CAAC;AAEF,MAAM,WAAW,GAAqB;IACpC,GAAG,YAAY;IACf,eAAe,EAAE,OAAO;CACzB,CAAC;AAEF,MAAM,YAAY,GAAG;IACnB,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,IAAI,EAAE,GAAG,EAAE,GAAE,CAAC;IACd,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;IACf,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;CAChB,CAAC;AAEF,MAAM,iBAAiB;IACZ,KAAK,GAAe,EAAE,CAAC;IAChC,GAAG,GAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;QACxC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC,CAAC;IAEF,iBAAiB;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC;CACF;AAED,SAAS,kBAAkB,CAAC,SAA2B,YAAY;IACjE,MAAM,IAAI,GAAG,IAAI,0BAA0B,EAAE,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,sBAAsB,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,IAAI,mCAAmC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC9E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAClC,CAAC;AAED,MAAM,sBAAsB,GAAqB;IAC/C,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,WAAW;IACxB,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,WAAW;CACvB,CAAC;AAEF,MAAM,WAAW,GAAkB;IACjC,OAAO,EAAE,KAAK;IACd,cAAc,EAAE,oBAAoB;IACpC,QAAQ,EAAE,QAAQ;IAClB,WAAW,EAAE,WAAW;IACxB,kBAAkB,EAAE,CAAC;IACrB,SAAS,EAAE,sBAAsB;IACjC,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE;CACpD,CAAC;AAEF,MAAM,iBAAiB,GAAkD;IACvE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,MAAM,EAAE,EAAE,EAAE;IAC9F;QACE,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,EAAE;KAC9E;CACF,CAAC;AAEF,QAAQ,CAAC,wFAAwF,EAAE,GAAG,EAAE;IACtG,QAAQ,CAAC,8EAA8E,EAAE,GAAG,EAAE;QAC5F,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,iBAAiB,EAAE,CAAC;YACjD,EAAE,CAAC,WAAW,IAAI,yEAAyE,EAAE,KAAK,IAAI,EAAE;gBACtG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;gBACtD,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;gBAEzC,MAAM,oBAAoB,CACxB,CAAC,MAAM,CAAC,EACR,sBAAsB,EACtB,YAAY,EACZ,QAAQ,CAAC,GAAG,EACZ,OAAO,CACR,CAAC;gBAEF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACjD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;YAEH,EAAE,CAAC,WAAW,IAAI,sEAAsE,EAAE,KAAK,IAAI,EAAE;gBACnG,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;gBACtD,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAkB,EAAE,GAAG,WAAW,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;gBAErE,MAAM,yBAAyB,CAC7B,OAAO,EACP,WAAW,EACX,YAAY,EACZ,QAAQ,CAAC,GAAG,EACZ,IAAI,EACJ,OAAO,CACR,CAAC;gBAEF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;gBACnD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBACjD,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;gBACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACvC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;QAC5D,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;YACpG,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;YAEzC,MAAM,MAAM,CACV,oBAAoB,CAClB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,MAAM,EAAE,EAAE,CAAC,EACrD,sBAAsB,EACtB,YAAY,EACZ,QAAQ,CAAC,GAAG,EACZ,OAAO,CACR,CACF,CAAC,OAAO,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;YAE7C,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;YAC5E,MAAM,IAAI,GAAG,IAAI,0BAA0B,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAI,sBAAsB,EAAE,CAAC;YAC3C,MAAM,OAAO,GAAG,IAAI,qBAAqB,EAAE,CAAC;YAC5C,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,OAAO,GAAG,IAAI,mCAAmC,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC9E,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;YAEzC,MAAM,MAAM,CACV,oBAAoB,CAClB,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,WAAW,MAAM,EAAE,EAAE,CAAC,EACrD,sBAAsB,EACtB,YAAY,EACZ,QAAQ,CAAC,GAAG,EACZ,OAAO,CACR,CACF,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YAEpB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACrC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iEAAiE,EAAE,GAAG,EAAE;QAC/E,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;YACrG,MAAM,QAAQ,GAAe,EAAE,CAAC;YAChC,MAAM,YAAY,GAAa,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,IAAI,sBAAsB,EAAE,CAAC;YAC3C,MAAM,gBAAgB,GAAkB;gBACtC,GAAG,WAAW;gBACd,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,8BAA8B,MAAM,EAAE,EAAE,CAAC;aAClF,CAAC;YAEF,MAAM,cAAc,GAAG,2BAA2B,CAAC,YAAY,EAAE,KAAK,EAAE;gBACtE,WAAW,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE;oBAC9B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtB,CAAC;gBACD,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE;oBAC9B,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBAC3B,OAAO,EAAE,CAAC;gBACZ,CAAC;aACF,CAAC,CAAC;YACH,MAAM,cAAc,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;YAEpD,MAAM,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACrC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAChD,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC9C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,2FAA2F,EAAE,GAAG,EAAE;QACzG,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;YACvG,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;YAC/C,MAAM,QAAQ,GAAG,IAAI,iBAAiB,EAAE,CAAC;YACzC,MAAM,OAAO,GAAkB;gBAC7B,GAAG,WAAW;gBACd,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,EAAE;oBAC/C,EAAE,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE;oBAC1C,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,UAAU,EAAE;iBACzC;aACF,CAAC;YAEF,MAAM,yBAAyB,CAC7B,OAAO,EACP,WAAW,EACX,YAAY,EACZ,QAAQ,CAAC,GAAG,EACZ,IAAI,EACJ,OAAO,CACR,CAAC;YAEF,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClF,MAAM,CAAC,uBAAuB,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/tests/acceptance/200-webhook-event-idempotency.acceptance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=200-webhook-event-idempotency.acceptance.test.d.ts.map

package/dist/tests/acceptance/200-webhook-event-idempotency.acceptance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"200-webhook-event-idempotency.acceptance.test.d.ts","sourceRoot":"","sources":["../../../src/tests/acceptance/200-webhook-event-idempotency.acceptance.test.ts"],"names":[],"mappings":""}