slybrowser 0.1.0

package/dist/manifest.js

@@ -0,0 +1,292 @@
+import { createHash, createPublicKey, verify as verifySignature } from "node:crypto";
+import { createReadStream } from "node:fs";
+import { stat } from "node:fs/promises";
+import { canonicalJson, decodeBase64Url } from "./canonical.js";
+import { ArtifactError, ManifestError } from "./errors.js";
+const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
+function fail(message, code) {
+    throw new ManifestError(message, code);
+}
+function numericVersion(value) {
+    if (!/^\d+(\.\d+){0,7}$/.test(value))
+        fail("SDK version is invalid", "sdk_version_invalid");
+    return value.split(".").map(Number);
+}
+function compareNumericVersions(left, right) {
+    const a = numericVersion(left);
+    const b = numericVersion(right);
+    for (let index = 0; index < Math.max(a.length, b.length); index += 1) {
+        const difference = (a[index] ?? 0) - (b[index] ?? 0);
+        if (difference !== 0)
+            return Math.sign(difference);
+    }
+    return 0;
+}
+export function isSdkCompatible(range, version) {
+    numericVersion(version);
+    const tokens = range.trim().split(/\s+/).filter(Boolean);
+    if (!tokens.length)
+        fail("Manifest SDK compatibility is invalid", "manifest_invalid");
+    return tokens.every((token) => {
+        if (token.startsWith("^"))
+            return isCaretCompatible(token.slice(1), version);
+        const match = /^(>=|<=|>|<|=)?(\d+(?:\.\d+){0,7})$/.exec(token);
+        if (!match)
+            fail("Manifest SDK compatibility is invalid", "manifest_invalid");
+        const comparison = compareNumericVersions(version, match[2]);
+        switch (match[1] ?? "=") {
+            case ">=": return comparison >= 0;
+            case "<=": return comparison <= 0;
+            case ">": return comparison > 0;
+            case "<": return comparison < 0;
+            default: return comparison === 0;
+        }
+    });
+}
+function isCaretCompatible(base, version) {
+    const parts = numericVersion(base);
+    const major = parts[0] ?? 0;
+    const minor = parts[1] ?? 0;
+    const patch = parts[2] ?? 0;
+    const upper = major > 0
+        ? `${major + 1}.0.0`
+        : minor > 0
+            ? `0.${minor + 1}.0`
+            : `0.0.${patch + 1}`;
+    return compareNumericVersions(version, base) >= 0 && compareNumericVersions(version, upper) < 0;
+}
+export function verifyReleaseManifest(value, trustedKeys) {
+    let document;
+    try {
+        const parsed = typeof value === "object" && !Buffer.isBuffer(value)
+            ? value
+            : JSON.parse(Buffer.isBuffer(value) ? value.toString("utf8") : value);
+        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+            throw new TypeError();
+        document = { ...parsed };
+    }
+    catch {
+        fail("Manifest is not valid JSON", "manifest_invalid");
+    }
+    const signature = document.signature;
+    if (!signature || typeof signature !== "object" || Array.isArray(signature)) {
+        fail("Manifest signature block is invalid", "manifest_invalid_signature");
+    }
+    const signatureDocument = signature;
+    if (Object.keys(signatureDocument).sort().join(",") !== "algorithm,keyId,value") {
+        fail("Manifest signature block is invalid", "manifest_invalid_signature");
+    }
+    if (signatureDocument.algorithm !== "ed25519") {
+        fail("Manifest signature algorithm is unsupported", "manifest_algorithm_unsupported");
+    }
+    const keyId = signatureDocument.keyId;
+    if (typeof keyId !== "string")
+        fail("Manifest signing key is unknown", "manifest_key_unknown");
+    const keySource = trustedKeys instanceof Map
+        ? trustedKeys.get(keyId)
+        : trustedKeys[keyId];
+    if (!keySource || keySource.length !== 32)
+        fail("Manifest signing key is unknown", "manifest_key_unknown");
+    let signatureBytes;
+    try {
+        signatureBytes = decodeBase64Url(signatureDocument.value, 64);
+    }
+    catch {
+        fail("Manifest signature encoding is invalid", "manifest_invalid_signature");
+    }
+    const payload = { ...document };
+    delete payload.signature;
+    const publicKey = createPublicKey({
+        key: Buffer.concat([ED25519_SPKI_PREFIX, Buffer.from(keySource)]),
+        format: "der",
+        type: "spki",
+    });
+    if (!verifySignature(null, canonicalJson(payload), publicKey, signatureBytes)) {
+        fail("Manifest signature is invalid", "manifest_invalid_signature");
+    }
+    if (document.schemaVersion !== 1)
+        fail("Manifest schema is unsupported", "manifest_schema_unsupported");
+    if (typeof document.browserVersion !== "string" || !document.browserVersion) {
+        fail("Manifest browser version is invalid", "manifest_invalid");
+    }
+    if (typeof document.sdkCompatibility !== "string" || !document.sdkCompatibility) {
+        fail("Manifest SDK compatibility is invalid", "manifest_invalid");
+    }
+    if (document.status !== "available" && document.status !== "revoked") {
+        fail("Manifest release status is invalid", "manifest_invalid");
+    }
+    if (!Array.isArray(document.artifacts) || document.artifacts.length === 0) {
+        fail("Manifest artifacts are invalid", "manifest_invalid");
+    }
+    const artifacts = document.artifacts.map(parseArtifact);
+    const identities = artifacts.map((item) => `${item.platform}/${item.arch}`);
+    if (new Set(identities).size !== identities.length) {
+        fail("Manifest has duplicate platform artifacts", "manifest_duplicate_artifact");
+    }
+    const evidence = document.evidence === undefined ? undefined : parseEvidence(document.evidence);
+    return { ...document, artifacts, ...(evidence === undefined ? {} : { evidence }) };
+}
+function parseEvidenceArtifact(value, mediaType) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        fail("Release evidence is invalid", "manifest_evidence_invalid");
+    const document = value;
+    if (Object.keys(document).sort().join(",") !== "mediaType,sha256,size,url" ||
+        typeof document.url !== "string" || !document.url.startsWith("https://") ||
+        typeof document.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(document.sha256) ||
+        !Number.isSafeInteger(document.size) || document.size <= 0 || document.mediaType !== mediaType) {
+        fail("Release evidence is invalid", "manifest_evidence_invalid");
+    }
+    return document;
+}
+function parseEvidence(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        fail("Release evidence is missing", "manifest_evidence_missing");
+    const document = value;
+    if (Object.keys(document).sort().join(",") !== "chromiumPatchInventory,provenance,sbom,sourceBoundary") {
+        fail("Release evidence fields are invalid", "manifest_evidence_invalid");
+    }
+    const boundary = document.sourceBoundary;
+    if (!boundary || typeof boundary !== "object" || Array.isArray(boundary))
+        fail("Source boundary is invalid", "manifest_evidence_invalid");
+    const sourceBoundary = boundary;
+    if (Object.keys(sourceBoundary).sort().join(",") !== "chromiumPatches,proprietaryCore,sdk" ||
+        sourceBoundary.sdk !== "open-source" || sourceBoundary.chromiumPatches !== "inventory-and-approved-patches" ||
+        sourceBoundary.proprietaryCore !== "private") {
+        fail("Source boundary is invalid", "manifest_evidence_invalid");
+    }
+    return {
+        sbom: parseEvidenceArtifact(document.sbom, "application/vnd.cyclonedx+json"),
+        provenance: parseEvidenceArtifact(document.provenance, "application/vnd.in-toto+json"),
+        chromiumPatchInventory: parseEvidenceArtifact(document.chromiumPatchInventory, "application/vnd.slybrowser.chromium-patch-inventory+json"),
+        sourceBoundary: sourceBoundary,
+    };
+}
+function parseArtifact(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        fail("Artifact is invalid", "manifest_invalid");
+    const document = value;
+    const keys = Object.keys(document);
+    const requiredKeys = [
+        "arch", "archiveFormat", "browserExecutable", "browserSha256", "driverExecutable",
+        "driverSha256", "platform", "privateModules", "resources", "sha256", "size", "url",
+    ];
+    const allowedKeys = new Set([...requiredKeys, "codeSignature"]);
+    if (requiredKeys.some((key) => !keys.includes(key)) || keys.some((key) => !allowedKeys.has(key))) {
+        fail("Artifact fields are invalid", "manifest_invalid");
+    }
+    if (!new Set(["windows", "linux", "macos"]).has(document.platform)) {
+        fail("Artifact platform is invalid", "manifest_invalid");
+    }
+    if (!new Set(["x64", "arm64"]).has(document.arch)) {
+        fail("Artifact architecture is invalid", "manifest_invalid");
+    }
+    if (typeof document.url !== "string" || !document.url.startsWith("https://")) {
+        fail("Artifact URL must use HTTPS", "manifest_invalid");
+    }
+    if (typeof document.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(document.sha256)) {
+        fail("Artifact SHA-256 is invalid", "manifest_invalid");
+    }
+    if (!Number.isSafeInteger(document.size) || document.size <= 0) {
+        fail("Artifact size is invalid", "manifest_invalid");
+    }
+    if ((document.archiveFormat !== "7z" && document.archiveFormat !== "zip") ||
+        typeof document.browserExecutable !== "string" || !safeRelativePath(document.browserExecutable) ||
+        typeof document.driverExecutable !== "string" || !safeRelativePath(document.driverExecutable) ||
+        typeof document.browserSha256 !== "string" || !/^[a-f0-9]{64}$/.test(document.browserSha256) ||
+        typeof document.driverSha256 !== "string" || !/^[a-f0-9]{64}$/.test(document.driverSha256)) {
+        fail("Artifact runtime metadata is invalid", "manifest_invalid");
+    }
+    const privateModules = parsePrivateModules(document.privateModules);
+    const resources = parseResources(document.resources);
+    const codeSignature = Object.hasOwn(document, "codeSignature")
+        ? parseCodeSignature(document.codeSignature)
+        : undefined;
+    return {
+        ...document,
+        privateModules,
+        resources,
+        ...(codeSignature === undefined ? {} : { codeSignature }),
+    };
+}
+function safeRelativePath(value) {
+    return value.length > 0 && value.length <= 512 && !value.startsWith("/") && !value.startsWith("\\") &&
+        !/^[A-Za-z]:/.test(value) && !value.replaceAll("\\", "/").split("/").includes("..");
+}
+function parsePrivateModules(value) {
+    if (!Array.isArray(value) || value.length === 0)
+        fail("Artifact private module metadata is invalid", "manifest_invalid");
+    return value.map((item) => {
+        if (!item || typeof item !== "object" || Array.isArray(item))
+            fail("Artifact private module metadata is invalid", "manifest_invalid");
+        const document = item;
+        if (Object.keys(document).sort().join(",") !== "abi,path,sha256,size" ||
+            typeof document.path !== "string" || !safeRelativePath(document.path) ||
+            typeof document.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(document.sha256) ||
+            !Number.isSafeInteger(document.size) || document.size <= 0 ||
+            typeof document.abi !== "string" || document.abi.length === 0 || document.abi.length > 128) {
+            fail("Artifact private module metadata is invalid", "manifest_invalid");
+        }
+        return document;
+    });
+}
+function parseResources(value) {
+    if (!Array.isArray(value) || value.length === 0)
+        fail("Artifact resource metadata is invalid", "manifest_invalid");
+    return value.map((item) => {
+        if (!item || typeof item !== "object" || Array.isArray(item))
+            fail("Artifact resource metadata is invalid", "manifest_invalid");
+        const document = item;
+        if (Object.keys(document).sort().join(",") !== "path,sha256,size" ||
+            typeof document.path !== "string" || !safeRelativePath(document.path) ||
+            typeof document.sha256 !== "string" || !/^[a-f0-9]{64}$/.test(document.sha256) ||
+            !Number.isSafeInteger(document.size) || document.size <= 0) {
+            fail("Artifact resource metadata is invalid", "manifest_invalid");
+        }
+        return document;
+    });
+}
+function parseCodeSignature(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        fail("Artifact code signature metadata is invalid", "manifest_invalid");
+    const document = value;
+    if (Object.keys(document).sort().join(",") !== "certificateSha256,scheme,subject,timestampRequired" ||
+        !new Set(["authenticode", "apple-developer-id", "x509-code-signing"]).has(document.scheme) ||
+        typeof document.subject !== "string" || document.subject.length === 0 || document.subject.length > 512 ||
+        typeof document.certificateSha256 !== "string" || !/^[a-f0-9]{64}$/.test(document.certificateSha256) ||
+        typeof document.timestampRequired !== "boolean") {
+        fail("Artifact code signature metadata is invalid", "manifest_invalid");
+    }
+    return document;
+}
+export function selectArtifact(manifest, platform, arch) {
+    const matches = manifest.artifacts.filter((item) => item.platform === platform && item.arch === arch);
+    if (matches.length !== 1) {
+        const available = manifest.artifacts.map((item) => `${item.platform}/${item.arch}`).sort().join(", ");
+        fail(`No signed artifact supports ${platform}/${arch}; available targets: ${available}`, "artifact_not_found");
+    }
+    return matches[0];
+}
+export async function verifyArtifact(path, artifact) {
+    let info;
+    try {
+        info = await stat(path);
+    }
+    catch {
+        throw new ArtifactError("Browser artifact is missing", "artifact_missing");
+    }
+    if (!info.isFile())
+        throw new ArtifactError("Browser artifact is missing", "artifact_missing");
+    if (info.size !== artifact.size)
+        throw new ArtifactError("Browser artifact size does not match", "artifact_size_mismatch");
+    const digest = createHash("sha256");
+    await new Promise((resolve, reject) => {
+        const stream = createReadStream(path);
+        stream.on("data", (chunk) => digest.update(chunk));
+        stream.on("error", reject);
+        stream.on("end", resolve);
+    });
+    if (digest.digest("hex") !== artifact.sha256) {
+        throw new ArtifactError("Browser artifact checksum does not match", "artifact_hash_mismatch");
+    }
+}
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,aAAa,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AAmE3E,SAAS,IAAI,CAAC,OAAe,EAAE,IAAY;IACzC,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,wBAAwB,EAAE,qBAAqB,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAa;IACzD,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAChC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACrE,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACrD,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAa,EAAE,OAAe;IAC5D,cAAc,CAAC,OAAO,CAAC,CAAC;IACxB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,IAAI,CAAC,uCAAuC,EAAE,kBAAkB,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC7E,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,uCAAuC,EAAE,kBAAkB,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;QAC9D,QAAQ,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC;YACxB,KAAK,IAAI,CAAC,CAAC,OAAO,UAAU,IAAI,CAAC,CAAC;YAClC,KAAK,IAAI,CAAC,CAAC,OAAO,UAAU,IAAI,CAAC,CAAC;YAClC,KAAK,GAAG,CAAC,CAAC,OAAO,UAAU,GAAG,CAAC,CAAC;YAChC,KAAK,GAAG,CAAC,CAAC,OAAO,UAAU,GAAG,CAAC,CAAC;YAChC,OAAO,CAAC,CAAC,OAAO,UAAU,KAAK,CAAC,CAAC;QACnC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,OAAe;IACtD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,GAAG,CAAC;QACrB,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,MAAM;QACpB,CAAC,CAAC,KAAK,GAAG,CAAC;YACT,CAAC,CAAC,KAAK,KAAK,GAAG,CAAC,IAAI;YACpB,CAAC,CAAC,OAAO,KAAK,GAAG,CAAC,EAAE,CAAC;IACzB,OAAO,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,sBAAsB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;AAClG,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,KAAgD,EAChD,WAAyE;IAEzE,IAAI,QAAiC,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC1E,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,SAAS,EAAE,CAAC;QAC1F,QAAQ,GAAG,EAAE,GAAI,MAAkC,EAAE,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,4BAA4B,EAAE,kBAAkB,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC;IACrC,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,qCAAqC,EAAE,4BAA4B,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,iBAAiB,GAAG,SAAoC,CAAC;IAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,uBAAuB,EAAE,CAAC;QAChF,IAAI,CAAC,qCAAqC,EAAE,4BAA4B,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,iBAAiB,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9C,IAAI,CAAC,6CAA6C,EAAE,gCAAgC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,IAAI,CAAC,iCAAiC,EAAE,sBAAsB,CAAC,CAAC;IAC/F,MAAM,SAAS,GAAG,WAAW,YAAY,GAAG;QAC1C,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;QACxB,CAAC,CAAE,WAA0C,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE;QAAE,IAAI,CAAC,iCAAiC,EAAE,sBAAsB,CAAC,CAAC;IAC3G,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,eAAe,CAAC,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,wCAAwC,EAAE,4BAA4B,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;IAChC,OAAO,OAAO,CAAC,SAAS,CAAC;IACzB,MAAM,SAAS,GAAG,eAAe,CAAC;QAChC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACjE,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,MAAM;KACb,CAAC,CAAC;IACH,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,CAAC;QAC9E,IAAI,CAAC,+BAA+B,EAAE,4BAA4B,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC;QAAE,IAAI,CAAC,gCAAgC,EAAE,6BAA6B,CAAC,CAAC;IACxG,IAAI,OAAO,QAAQ,CAAC,cAAc,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;QAC5E,IAAI,CAAC,qCAAqC,EAAE,kBAAkB,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAChF,IAAI,CAAC,uCAAuC,EAAE,kBAAkB,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACrE,IAAI,CAAC,oCAAoC,EAAE,kBAAkB,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1E,IAAI,CAAC,gCAAgC,EAAE,kBAAkB,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACxD,MAAM,UAAU,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5E,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,IAAI,CAAC,2CAA2C,EAAE,6BAA6B,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChG,OAAO,EAAE,GAAI,QAAuC,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACrH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc,EAAE,SAA+C;IAC5F,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,6BAA6B,EAAE,2BAA2B,CAAC,CAAC;IAClI,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,2BAA2B;QACtE,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC;QACxE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC9E,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAK,QAAQ,CAAC,IAAe,IAAI,CAAC,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/G,IAAI,CAAC,6BAA6B,EAAE,2BAA2B,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,QAA8C,CAAC;AACxD,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,6BAA6B,EAAE,2BAA2B,CAAC,CAAC;IAClI,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,uDAAuD,EAAE,CAAC;QACvG,IAAI,CAAC,qCAAqC,EAAE,2BAA2B,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC;IACzC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,IAAI,CAAC,4BAA4B,EAAE,2BAA2B,CAAC,CAAC;IAC1I,MAAM,cAAc,GAAG,QAAmC,CAAC;IAC3D,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,qCAAqC;QACtF,cAAc,CAAC,GAAG,KAAK,aAAa,IAAI,cAAc,CAAC,eAAe,KAAK,gCAAgC;QAC3G,cAAc,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACjD,IAAI,CAAC,4BAA4B,EAAE,2BAA2B,CAAC,CAAC;IAClE,CAAC;IACD,OAAO;QACL,IAAI,EAAE,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,gCAAgC,CAAC;QAC5E,UAAU,EAAE,qBAAqB,CAAC,QAAQ,CAAC,UAAU,EAAE,8BAA8B,CAAC;QACtF,sBAAsB,EAAE,qBAAqB,CAC3C,QAAQ,CAAC,sBAAsB,EAC/B,0DAA0D,CAC3D;QACD,cAAc,EAAE,cAA8D;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,qBAAqB,EAAE,kBAAkB,CAAC,CAAC;IACjH,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,YAAY,GAAG;QACnB,MAAM,EAAE,eAAe,EAAE,mBAAmB,EAAE,eAAe,EAAE,kBAAkB;QACjF,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK;KACnF,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;IAChE,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACjG,IAAI,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAkB,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,8BAA8B,EAAE,kBAAkB,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAc,CAAC,EAAE,CAAC;QAC5D,IAAI,CAAC,kCAAkC,EAAE,kBAAkB,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACnF,IAAI,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAK,QAAQ,CAAC,IAAe,IAAI,CAAC,EAAE,CAAC;QAC3E,IAAI,CAAC,0BAA0B,EAAE,kBAAkB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,aAAa,KAAK,IAAI,IAAI,QAAQ,CAAC,aAAa,KAAK,KAAK,CAAC;QACrE,OAAO,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC/F,OAAO,QAAQ,CAAC,gBAAgB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAC7F,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC5F,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC/F,IAAI,CAAC,sCAAsC,EAAE,kBAAkB,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,cAAc,GAAG,mBAAmB,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC;QAC5D,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,aAAa,CAAC;QAC5C,CAAC,CAAC,SAAS,CAAC;IACd,OAAO;QACL,GAAI,QAAuC;QAC3C,cAAc;QACd,SAAS;QACT,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa;IACrC,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QACjG,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,6CAA6C,EAAE,kBAAkB,CAAC,CAAC;IACzH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,6CAA6C,EAAE,kBAAkB,CAAC,CAAC;QACtI,MAAM,QAAQ,GAAG,IAA+B,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,sBAAsB;YACjE,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC9E,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAK,QAAQ,CAAC,IAAe,IAAI,CAAC;YACtE,OAAO,QAAQ,CAAC,GAAG,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,EAAE,CAAC;YAC/F,IAAI,CAAC,6CAA6C,EAAE,kBAAkB,CAAC,CAAC;QAC1E,CAAC;QACD,OAAO,QAA2C,CAAC;IACrD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,uCAAuC,EAAE,kBAAkB,CAAC,CAAC;IACnH,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,uCAAuC,EAAE,kBAAkB,CAAC,CAAC;QAChI,MAAM,QAAQ,GAAG,IAA+B,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,kBAAkB;YAC7D,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC;YACrE,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC9E,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAK,QAAQ,CAAC,IAAe,IAAI,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC,uCAAuC,EAAE,kBAAkB,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,QAA0C,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,6CAA6C,EAAE,kBAAkB,CAAC,CAAC;IACzI,MAAM,QAAQ,GAAG,KAAgC,CAAC;IAClD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,oDAAoD;QAC/F,CAAC,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAgB,CAAC;QACpG,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG;QACtG,OAAO,QAAQ,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACpG,OAAO,QAAQ,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpD,IAAI,CAAC,6CAA6C,EAAE,kBAAkB,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,QAA2C,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAyB,EAAE,QAAgB,EAAE,IAAY;IACtF,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IACtG,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtG,IAAI,CAAC,+BAA+B,QAAQ,IAAI,IAAI,wBAAwB,SAAS,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,QAAyB;IAC1E,IAAI,IAAI,CAAC;IACT,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,aAAa,CAAC,6BAA6B,EAAE,kBAAkB,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,sCAAsC,EAAE,wBAAwB,CAAC,CAAC;IAC3H,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC7C,MAAM,IAAI,aAAa,CAAC,0CAA0C,EAAE,wBAAwB,CAAC,CAAC;IAChG,CAAC;AACH,CAAC"}

package/dist/service.d.ts

@@ -0,0 +1,206 @@
+import type { AutomationBackend } from "./automation.js";
+import { type LicenseEnvelope, type LicenseClaims } from "./license.js";
+import { type ReleaseArtifact, type ReleaseManifest } from "./manifest.js";
+export interface LicenseAuthorization {
+    schemaVersion: 1;
+    serviceUrl: string;
+    licenseKey: string;
+    channel: "stable";
+}
+export interface LicenseFileReadOptions {
+    allowInsecureLocalhost?: boolean;
+    licenseFilePassphrase?: string;
+    licenseFileTrustedKeys?: ReadonlyMap<string, Uint8Array> | Record<string, Uint8Array>;
+    licenseFileResolutionServiceUrl?: string;
+    trustedServiceUrls?: readonly string[];
+    fetch?: typeof fetch;
+}
+export interface SealedLicenseImportResult {
+    output: string;
+    serviceUrl: string;
+    channel: "stable";
+    protection: "windows-dpapi-current-user";
+    licenseKeySha256: string;
+}
+export interface LicensedSessionGrant {
+    sessionId: string;
+    sessionToken: string;
+    heartbeatAfterSeconds: number;
+    expiresAt: number;
+    plan: "free" | "basic" | "pro" | "max" | "ultra";
+    features: readonly string[];
+    concurrencyLimit: number;
+    activeSessions: number;
+    browserVersion: string;
+    requestedBrowserVersion?: string;
+    requestedKernelMajor?: KernelMajor;
+    versionPolicy: BrowserVersionPolicy;
+    selectionReason: "latest" | "exact" | "rollback";
+    selectionMode?: SelectionMode;
+    availableBrowserVersions: string[];
+    latestAvailableVersion?: string;
+    updateAvailable?: boolean;
+    updateRequired?: boolean;
+    updateRights: {
+        status: "active";
+        channel: "stable";
+        updatesThrough: number | null;
+        exactVersion: true;
+        rollback: true;
+    };
+    lease: LicenseEnvelope;
+    claims: LicenseClaims;
+    manifest: ReleaseManifest;
+    artifact: ReleaseArtifact;
+    platform: "windows" | "linux" | "macos";
+    arch: "x64" | "arm64";
+}
+export interface LicenseInfo {
+    schemaVersion: 1;
+    channel: "stable";
+    licenseStatus: "active" | "hold" | "revoked";
+    plan: "free" | "basic" | "pro" | "max" | "ultra";
+    effectivePlan: "free" | "basic" | "pro" | "max" | "ultra";
+    paidThrough: number | null;
+    features: readonly string[];
+    concurrencyLimit: number;
+    activeSessions: number;
+    availableSessions: number;
+    sessionState: {
+        activeBrowserProcesses: number;
+        limit: number;
+        available: number;
+    };
+    browserVersion: string;
+    requestedBrowserVersion?: string;
+    requestedKernelMajor?: KernelMajor;
+    versionPolicy: BrowserVersionPolicy;
+    selectionReason: "latest" | "exact" | "rollback";
+    selectionMode?: SelectionMode;
+    availableBrowserVersions: string[];
+    latestAvailableVersion?: string;
+    updateAvailable?: boolean;
+    updateRequired?: boolean;
+    updateRights: {
+        status: "active";
+        channel: "stable";
+        updatesThrough: number | null;
+        exactVersion: true;
+        rollback: true;
+    };
+    stableErrorCode: null;
+}
+export interface RuntimeDownloadTicket {
+    token: string;
+    expiresAt: number;
+    artifactSha256: string;
+    artifactUrl: string;
+}
+export interface RuntimeSessionGrant extends Omit<LicensedSessionGrant, "sessionToken"> {
+    schemaVersion: 2;
+    state: "reserved" | "active" | "closing";
+    startupId: string;
+    bootstrapToken: string;
+    activationTicket: string;
+    driverActivationTicket?: string;
+    automationBackend?: AutomationBackend;
+    downloadTicket: RuntimeDownloadTicket;
+}
+export interface RuntimeActivationGrant {
+    schemaVersion: 2;
+    state: "active";
+    startupId: string;
+    sessionId: string;
+    runtimeToken: string;
+    heartbeatAfterSeconds: number;
+    expiresAt: number;
+    plan: LicensedSessionGrant["plan"];
+    features: readonly string[];
+    concurrencyLimit: number;
+    activeSessions: number;
+    browserVersion: string;
+    automationBackend?: AutomationBackend;
+    lease: LicenseEnvelope;
+    claims: LicenseClaims;
+}
+export interface RuntimeHeartbeatGrant {
+    schemaVersion: 2;
+    state: "reserved" | "active" | "closing";
+    startupId: string;
+    sessionId: string;
+    heartbeatAfterSeconds: number;
+    expiresAt: number;
+    plan: LicensedSessionGrant["plan"];
+    features: readonly string[];
+    concurrencyLimit: number;
+    activeSessions: number;
+    browserVersion: string;
+    automationBackend?: AutomationBackend;
+    lease: LicenseEnvelope;
+    claims: LicenseClaims;
+}
+export type BrowserVersionPolicy = "latest" | "exact" | "at-or-before";
+export type KernelMajor = number | "latest";
+export type SelectionMode = "latest" | "latest-in-major" | "cached-approved" | "exact" | "rollback";
+export interface LicenseServiceClientOptions {
+    licenseTrustedKeys: ReadonlyMap<string, Uint8Array> | Record<string, Uint8Array>;
+    releaseTrustedKeys: ReadonlyMap<string, Uint8Array> | Record<string, Uint8Array>;
+    licenseFileTrustedKeys?: ReadonlyMap<string, Uint8Array> | Record<string, Uint8Array>;
+    licenseFilePassphrase?: string;
+    trustedServiceUrls?: readonly string[];
+    fetch?: typeof fetch;
+    allowInsecureLocalhost?: boolean;
+}
+export declare function importLicenseFileToSealedAuthorization(inputPath: string, outputPath: string, options?: LicenseFileReadOptions): Promise<SealedLicenseImportResult>;
+export declare function readLicenseAuthorization(path: string, options?: LicenseFileReadOptions): Promise<LicenseAuthorization>;
+export declare class LicenseServiceClient {
+    #private;
+    readonly authorization: LicenseAuthorization;
+    constructor(authorization: LicenseAuthorization, options: LicenseServiceClientOptions);
+    licenseInfo(options?: {
+        platform?: "windows" | "linux" | "macos";
+        arch?: "x64" | "arm64";
+        sdkVersion?: string;
+        deviceHash?: string;
+        kernelMajor?: KernelMajor;
+        updateKernel?: boolean;
+        browserVersion?: string;
+        versionPolicy?: BrowserVersionPolicy;
+    }): Promise<LicenseInfo>;
+    createSession(options?: {
+        platform?: "windows" | "linux" | "macos";
+        arch?: "x64" | "arm64";
+        sdkVersion?: string;
+        deviceHash?: string;
+        kernelMajor?: KernelMajor;
+        updateKernel?: boolean;
+        browserVersion?: string;
+        versionPolicy?: BrowserVersionPolicy;
+    }): Promise<LicensedSessionGrant>;
+    createRuntimeSession(options?: {
+        startupId?: string;
+        automationBackend?: AutomationBackend;
+        platform?: "windows" | "linux" | "macos";
+        arch?: "x64" | "arm64";
+        sdkVersion?: string;
+        deviceHash?: string;
+        kernelMajor?: KernelMajor;
+        updateKernel?: boolean;
+        browserVersion?: string;
+        versionPolicy?: BrowserVersionPolicy;
+    }): Promise<RuntimeSessionGrant>;
+    heartbeat(grant: LicensedSessionGrant): Promise<{
+        expiresAt: number;
+        lease: LicenseEnvelope;
+        claims: LicenseClaims;
+    }>;
+    bootstrapHeartbeat(grant: RuntimeSessionGrant): Promise<RuntimeHeartbeatGrant>;
+    activateRuntimeSession(grant: RuntimeSessionGrant): Promise<RuntimeActivationGrant>;
+    runtimeHeartbeat(grant: RuntimeActivationGrant): Promise<RuntimeHeartbeatGrant>;
+    closeRuntimeSession(grant: RuntimeActivationGrant): Promise<RuntimeHeartbeatGrant>;
+    release(grant: Pick<LicensedSessionGrant, "sessionId" | "sessionToken">): Promise<void>;
+    releaseRuntimeSession(grant: RuntimeSessionGrant | RuntimeActivationGrant): Promise<void>;
+    downloadArtifact(grant: LicensedSessionGrant): Promise<Response>;
+    downloadRuntimeArtifact(grant: RuntimeSessionGrant): Promise<Response>;
+}
+//# sourceMappingURL=service.d.ts.map

package/dist/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../src/service.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGzD,OAAO,EAAE,KAAK,eAAe,EAAE,KAAK,aAAa,EAAmB,MAAM,cAAc,CAAC;AACzF,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,eAAe,EAIrB,MAAM,eAAe,CAAC;AAEvB,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,CAAC,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,QAAQ,CAAC;CACnB;AAED,MAAM,WAAW,sBAAsB;IACrC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,sBAAsB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtF,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,QAAQ,CAAC;IAClB,UAAU,EAAE,4BAA4B,CAAC;IACzC,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;IACjD,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,oBAAoB,CAAC,EAAE,WAAW,CAAC;IACnC,aAAa,EAAE,oBAAoB,CAAC;IACpC,eAAe,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;IACjD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE;QACZ,MAAM,EAAE,QAAQ,CAAC;QACjB,OAAO,EAAE,QAAQ,CAAC;QAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,YAAY,EAAE,IAAI,CAAC;QACnB,QAAQ,EAAE,IAAI,CAAC;KAChB,CAAC;IACF,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,eAAe,CAAC;IAC1B,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;IACxC,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,WAAW;IAC1B,aAAa,EAAE,CAAC,CAAC;IACjB,OAAO,EAAE,QAAQ,CAAC;IAClB,aAAa,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;IAC7C,IAAI,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;IACjD,aAAa,EAAE,MAAM,GAAG,OAAO,GAAG,KAAK,GAAG,KAAK,GAAG,OAAO,CAAC;IAC1D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,YAAY,EAAE;QACZ,sBAAsB,EAAE,MAAM,CAAC;QAC/B,KAAK,EAAE,MAAM,CAAC;QACd,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,cAAc,EAAE,MAAM,CAAC;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,oBAAoB,CAAC,EAAE,WAAW,CAAC;IACnC,aAAa,EAAE,oBAAoB,CAAC;IACpC,eAAe,EAAE,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC;IACjD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,wBAAwB,EAAE,MAAM,EAAE,CAAC;IACnC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,EAAE;QACZ,MAAM,EAAE,QAAQ,CAAC;QACjB,OAAO,EAAE,QAAQ,CAAC;QAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,YAAY,EAAE,IAAI,CAAC;QACnB,QAAQ,EAAE,IAAI,CAAC;KAChB,CAAC;IACF,eAAe,EAAE,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAoB,SAAQ,IAAI,CAAC,oBAAoB,EAAE,cAAc,CAAC;IACrF,aAAa,EAAE,CAAC,CAAC;IACjB,KAAK,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,cAAc,EAAE,qBAAqB,CAAC;CACvC;AAED,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,CAAC,CAAC;IACjB,KAAK,EAAE,QAAQ,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,CAAC,CAAC;IACjB,KAAK,EAAE,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACnC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE,MAAM,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;IACtC,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED,MAAM,MAAM,oBAAoB,GAAG,QAAQ,GAAG,OAAO,GAAG,cAAc,CAAC;AACvE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,QAAQ,CAAC;AAC5C,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,iBAAiB,GAAG,iBAAiB,GAAG,OAAO,GAAG,UAAU,CAAC;AAEpG,MAAM,WAAW,2BAA2B;IAC1C,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjF,kBAAkB,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjF,sBAAsB,CAAC,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACtF,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,sBAAsB,CAAC,EAAE,OAAO,CAAC;CAClC;AAghBD,wBAAsB,sCAAsC,CAC1D,SAAS,EAAE,MAAM,EACjB,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,yBAAyB,CAAC,CA6CpC;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,oBAAoB,CAAC,CA6B/B;AAyGD,qBAAa,oBAAoB;;IAC/B,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;gBAKjC,aAAa,EAAE,oBAAoB,EAAE,OAAO,EAAE,2BAA2B;IAO/E,WAAW,CAAC,OAAO,GAAE;QACzB,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;QACzC,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,WAAW,CAAC;QAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,oBAAoB,CAAC;KACjC,GAAG,OAAO,CAAC,WAAW,CAAC;IA0GvB,aAAa,CAAC,OAAO,GAAE;QAC3B,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;QACzC,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,WAAW,CAAC;QAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,oBAAoB,CAAC;KACjC,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA8HhC,oBAAoB,CAAC,OAAO,GAAE;QAClC,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,iBAAiB,CAAC,EAAE,iBAAiB,CAAC;QACtC,QAAQ,CAAC,EAAE,SAAS,GAAG,OAAO,GAAG,OAAO,CAAC;QACzC,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,WAAW,CAAC;QAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,aAAa,CAAC,EAAE,oBAAoB,CAAC;KACjC,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAqK/B,SAAS,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,eAAe,CAAC;QAAC,MAAM,EAAE,aAAa,CAAA;KAAE,CAAC;IAwBrH,kBAAkB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAO9E,sBAAsB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAYnF,gBAAgB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAO/E,mBAAmB,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC;IAOlF,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,oBAAoB,EAAE,WAAW,GAAG,cAAc,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAMvF,qBAAqB,CAAC,KAAK,EAAE,mBAAmB,GAAG,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAYzF,gBAAgB,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC;IAUhE,uBAAuB,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,QAAQ,CAAC;CA8F7E"}