waterplane 0.1.6 → 0.1.11

package/node_modules/@waterplane/shared/dist/exposure.d.ts

@@ -0,0 +1,175 @@
+/**
+ * The exposure watch as the phone and the CLI both read it (`tools/exposure.mjs` writes the rows,
+ * the host serves them as setup-checklist rows, the phone draws them). What a person has accepted
+ * is decided HERE and nowhere else: if the CLI and the phone each carried a copy of "is this accept
+ * still live", one would call a finding accepted while the other pages about it.
+ *
+ * Pure, no clock (the caller passes `now`), no file reads. A source the CLI could not read is
+ * `absent` and stays visible as such: absent is never a pass and never a zero.
+ */
+import type { ComplianceAcceptRequest, ComplianceCheck } from "./wire/repo.js";
+export type Severity = "critical" | "high" | "moderate" | "low" | "info";
+/** An accept lasts until a newer version / a date / the reading changes (`change` = the finding's
+ *  text at accept time). Every condition it names must hold; none means forever. */
+export type ExposureUntil = {
+    version?: string;
+} | {
+    date?: string;
+} | {
+    change?: string;
+};
+export interface ExposureAccept {
+    reason: string;
+    at: string;
+    until?: ExposureUntil;
+}
+export interface ExposureFinding {
+    key: string;
+    measure: string;
+    subject: string;
+    version?: string;
+    level: "alert" | "digest";
+    severity?: Severity;
+    direct?: boolean;
+    text: string;
+    sources: string[];
+    advisory?: string;
+    since?: string;
+    accepted?: ExposureAccept & {
+        byMark?: true;
+    };
+    /** D3: the crash group without version or growth bucket (`app/channel/type/location`): what a triage mark sticks to. */
+    group?: string;
+    /** D3: the app version the crashes were reported from. */
+    appVersion?: string;
+    /** Set by `applyTriage` when a mark applies to this finding. */
+    triage?: ExposureTriage;
+}
+export type ExposureTriageState = "seen" | "investigating" | "fixed";
+/** A mark on a finding (or crash group): who set it and when. Nothing is hidden by it; see `applyTriage`. */
+export interface ExposureTriage {
+    state: ExposureTriageState;
+    fixedIn?: string;
+    commit?: string;
+    note?: string;
+    at: string;
+    by: {
+        kind: "person";
+    } | {
+        kind: "agent";
+        session?: string;
+        repo?: string;
+    };
+    /** The finding's `appVersion` when the mark was set: a seen / investigating mark stops holding back the push once a different app version reports the group. */
+    markedVersion?: string;
+}
+/** The triage file: triage id (`exposureTriageId`) to its mark. */
+export type ExposureTriageFile = Record<string, ExposureTriage>;
+/** A measure the run could not read: never a pass, never a zero. */
+export interface ExposureAbsent {
+    measure: string;
+    why: string;
+    unreachable: boolean;
+}
+export interface ExposureRow {
+    v: 1;
+    at: string;
+    repo: string;
+    dir: string;
+    head?: string;
+    findings: ExposureFinding[];
+    absent: ExposureAbsent[];
+    readings: {
+        installScripts?: string[];
+        settings?: Record<string, string>;
+        licences?: string[];
+        stores?: Record<string, string>;
+    };
+    only?: string[];
+    firstRun?: true;
+}
+/**
+ * `POST /api/repos/:id/exposure/run`'s answer (host `exposurerun.ts`): the collector's exit code
+ * (`null` = never started, refused or killed) and the ONE sentence the phone shows for it. `ok` is a
+ * run that wrote a reading (exit 0 or 10). `refused` = nothing was run (not on the watch, no
+ * collector on this desktop); `joined` = this tap joined a run already in flight.
+ */
+export interface ExposureRunResult {
+    ok: boolean;
+    exit: number | null;
+    sentence: string;
+    refused?: true;
+    joined?: true;
+}
+/** Built-in accepts, merged UNDER the accepts file's (the file wins). Keys are what parse.mjs emits. */
+export declare const PRE_ACCEPTED: Record<string, ExposureAccept>;
+/** Semver-ish compare (-1/0/1); a pre-release sorts below its release, `v` and `+build` ignored. */
+export declare function semverCmp(a: string, b: string): number;
+/** What a triage mark sticks to: the crash group when there is one, else the finding key. */
+export declare const exposureTriageId: (f: Pick<ExposureFinding, "key" | "group">) => string;
+/** Is this accept still live for this finding? Every condition it names must hold; none => forever. */
+export declare function acceptLive(f: ExposureFinding, a: ExposureAccept, now: Date | string): boolean;
+/** Set `accepted` on every finding with a live accept; PRE_ACCEPTED sits under the file's (file wins). */
+export declare function applyAccepts(findings: ExposureFinding[], accepts: Record<string, ExposureAccept> | null | undefined, now: Date | string): ExposureFinding[];
+/**
+ * Clean a parsed triage file: keep the entries that are well-formed marks, drop the rest (a hand edit, a shape from
+ * another version). Never throws; a dropped entry reads as "no mark", never as a thrown checklist or sweep.
+ */
+export declare function cleanTriageFile(v: unknown): ExposureTriageFile;
+/** The sentence a seen / investigating / fixed mark adds to a finding's row. */
+export declare function triageWords(t: ExposureTriage): string;
+/**
+ * Apply triage marks (pure). seen / investigating: still open, carries `triage`. fixed + `appVersion` older than
+ * `fixedIn`: listed as `accepted` (not counted, never pushed) with words saying installs still report it. fixed with
+ * no `appVersion` or no `fixedIn`: not counted while the triage id matches (a finding whose key changes is a new one).
+ * fixed + `appVersion` >= `fixedIn`: a REGRESSION, stays an alert with its text prefixed. An existing accept is kept.
+ */
+export declare function applyTriage(findings: ExposureFinding[], triage: ExposureTriageFile | null | undefined): ExposureFinding[];
+/** `<measure>:<subject>@<version>` without its `@<version>`; null for `adv:` keys and keys with no version. */
+export declare function exposureVersionStem(key: string): string | null;
+/** The last parseable JSON line of a JSONL string; a torn last line (a crash mid-append) is skipped. */
+export declare function readLastRow(text: string | null | undefined): ExposureRow | null;
+/**
+ * The line each measure crosses, in words, for the row's detail. Code defaults, one phrase per
+ * measure id the collector emits; a measure not listed has NO threshold text (absent, never made up).
+ */
+export declare const EXPOSURE_THRESHOLD: Record<string, string>;
+export declare const EXPOSURE_SUMMARY_ID = "exposure";
+/**
+ * The fix the `B4:default-branch` finding (no ruleset, no protection) offers: the host creates the
+ * owner's two standard rulesets on GitHub (`protectmain.ts`). Confirm-gated — it changes the remote.
+ */
+export declare const PROTECT_MAIN_FIX = "protect-main";
+/**
+ * The fix every open D3 (Connect IQ crash group) finding offers: the host runs the daily runner's
+ * `era-seen`, which has the ERA checker record EVERY group it lists as seen (its own `--mark-seen`;
+ * a group that grows or recurs comes back) and then reads again. One button per row, one effect for
+ * all of them — the confirm words say "every". Confirm-gated: it marks findings handled in bulk.
+ */
+export declare const ERA_SEEN_FIX = "era-seen";
+/**
+ * Whether a checklist row belongs to the readings sheet's `watch` region (the daily outside view:
+ * advisories, stores, Scorecard) rather than the set-up conventions. The ONE spelling of the split —
+ * both regions, their counts and their bulk buttons cut on it.
+ */
+export declare const isWatchCheck: (c: ComplianceCheck) => boolean;
+/** The finding key inside a check id (inverse of `exposureCheckId`); null when the id is not one. */
+export declare const exposureKeyOf: (id: string) => string | null;
+/** The checklist row id of one finding: the prefix is how the host knows an accept request is ours. */
+export declare const exposureCheckId: (key: string) => string;
+/**
+ * One exposure row as setup-checklist rows: a summary first, then one per finding. Accepted
+ * findings are still sent (marked `accepted`); the phone draws them folded, so "stop accepting"
+ * never has to guess what the row would have said.
+ */
+export declare function exposureChecks(row: ExposureRow, name: string, accepts: Record<string, ExposureAccept> | null, now: Date | string, opts?: {
+    staleMs?: number;
+}, triage?: ExposureTriageFile | null): ComplianceCheck[];
+/** Validate one accept request body: ours, with words for why not. Nothing is stored here. */
+export declare function cleanAcceptRequest(body: unknown, now?: Date | string): {
+    ok: true;
+    value: ComplianceAcceptRequest;
+} | {
+    ok: false;
+    error: string;
+};

package/node_modules/@waterplane/shared/dist/exposure.js

@@ -0,0 +1,357 @@
+/** Built-in accepts, merged UNDER the accepts file's (the file wins). Keys are what parse.mjs emits. */
+export const PRE_ACCEPTED = {
+    "A2:node-pty": { reason: "node-pty is pinned to a pre-release on purpose (SECURITY.md)", at: "2026-10-26" },
+    "A5:web-push": { reason: "MPL-2.0, accepted on purpose", at: "2026-10-26" },
+};
+/** Semver-ish compare (-1/0/1); a pre-release sorts below its release, `v` and `+build` ignored. */
+export function semverCmp(a, b) {
+    const split = (s) => {
+        const [core = "", ...rest] = String(s).trim().replace(/^v/, "").split("+")[0].split("-");
+        return { nums: core.split(".").map((n) => parseInt(n, 10) || 0), pre: rest.length ? rest.join("-").split(".") : null };
+    };
+    const x = split(a), y = split(b);
+    for (let i = 0; i < Math.max(x.nums.length, y.nums.length); i++) {
+        const d = (x.nums[i] ?? 0) - (y.nums[i] ?? 0);
+        if (d)
+            return d < 0 ? -1 : 1;
+    }
+    if (!x.pre && !y.pre)
+        return 0;
+    if (!x.pre)
+        return 1;
+    if (!y.pre)
+        return -1;
+    for (let i = 0; i < Math.max(x.pre.length, y.pre.length); i++) {
+        const p = x.pre[i], q = y.pre[i];
+        if (p === undefined)
+            return -1;
+        if (q === undefined)
+            return 1;
+        const pn = /^\d+$/.test(p), qn = /^\d+$/.test(q);
+        if (pn && qn) {
+            if (+p !== +q)
+                return +p < +q ? -1 : 1;
+        }
+        else if (pn !== qn)
+            return pn ? -1 : 1;
+        else if (p !== q)
+            return p < q ? -1 : 1;
+    }
+    return 0;
+}
+/** What a triage mark sticks to: the crash group when there is one, else the finding key. */
+export const exposureTriageId = (f) => f.group ?? f.key;
+const toMs = (d) => (d instanceof Date ? d.getTime() : Date.parse(d));
+/** Is this accept still live for this finding? Every condition it names must hold; none => forever. */
+export function acceptLive(f, a, now) {
+    const u = a.until;
+    if (!u)
+        return true;
+    if (u.version !== undefined && f.version && semverCmp(f.version, u.version) > 0)
+        return false;
+    if (u.date !== undefined && !(toMs(u.date) > toMs(now)))
+        return false;
+    if (u.change !== undefined && u.change !== f.text)
+        return false;
+    return true;
+}
+/** Set `accepted` on every finding with a live accept; PRE_ACCEPTED sits under the file's (file wins). */
+export function applyAccepts(findings, accepts, now) {
+    const all = { ...PRE_ACCEPTED, ...(accepts ?? {}) };
+    // A key that embeds its version (`A3:left-pad@1.2.3`) changes on every patch release, so an
+    // accept "until a version newer than X" is also found by its stem, `A3:left-pad`.
+    const byStem = new Map();
+    for (const [k, a] of Object.entries(all)) {
+        const stem = exposureVersionStem(k);
+        if (stem && a.until?.version !== undefined)
+            byStem.set(stem, a);
+    }
+    return findings.map((f) => {
+        let a = Object.hasOwn(all, f.key) ? all[f.key] : undefined;
+        if (!a) {
+            const stem = exposureVersionStem(f.key);
+            a = stem ? byStem.get(stem) : undefined;
+        }
+        if (!a || !acceptLive(f, a, now)) {
+            const { accepted: _x, ...rest } = f;
+            return rest;
+        }
+        return { ...f, accepted: { reason: a.reason, at: a.at, ...(a.until ? { until: a.until } : {}) } };
+    });
+}
+const dayOf = (at) => (/^\d{4}-\d{2}-\d{2}/.exec(String(at)) ?? [String(at)])[0];
+const whoWords = (t) => t.by?.kind === "agent" ? `agent session${t.by.repo ? ` in ${t.by.repo}` : ""}` : "you";
+const str = (v, max = 200) => typeof v === "string" && v.length > 0 && v.length <= max;
+/**
+ * Clean a parsed triage file: keep the entries that are well-formed marks, drop the rest (a hand edit, a shape from
+ * another version). Never throws; a dropped entry reads as "no mark", never as a thrown checklist or sweep.
+ */
+export function cleanTriageFile(v) {
+    const out = {};
+    if (!v || typeof v !== "object" || Array.isArray(v))
+        return out;
+    for (const [id, raw] of Object.entries(v)) {
+        if (!raw || typeof raw !== "object" || Array.isArray(raw))
+            continue;
+        const t = raw;
+        if (t.state !== "seen" && t.state !== "investigating" && t.state !== "fixed")
+            continue;
+        if (!str(t.at, 64))
+            continue;
+        const by = t.by;
+        let who;
+        if (by && typeof by === "object" && by.kind === "person")
+            who = { kind: "person" };
+        else if (by && typeof by === "object" && by.kind === "agent") {
+            who = { kind: "agent", ...(str(by.session) ? { session: by.session } : {}), ...(str(by.repo) ? { repo: by.repo } : {}) };
+        }
+        else
+            continue;
+        if (t.state === "fixed" && !str(t.fixedIn, 32))
+            continue;
+        out[id] = {
+            state: t.state, at: t.at, by: who,
+            ...(t.state === "fixed" ? { fixedIn: t.fixedIn } : {}),
+            ...(str(t.commit, 40) ? { commit: t.commit } : {}),
+            ...(str(t.note, 280) ? { note: t.note } : {}),
+            ...(str(t.markedVersion, 64) ? { markedVersion: t.markedVersion } : {}),
+        };
+    }
+    return out;
+}
+/** The sentence a seen / investigating / fixed mark adds to a finding's row. */
+export function triageWords(t) {
+    if (t.state === "fixed") {
+        return `fixed${t.fixedIn ? ` in ${t.fixedIn}` : ""}${t.commit ? ` (commit ${t.commit})` : ""}, ${whoWords(t)}, ${dayOf(t.at)}${t.note ? `: ${t.note}` : ""}`;
+    }
+    return `${t.state} \u2014 ${whoWords(t)}, ${dayOf(t.at)}${t.note ? `: ${t.note}` : ""}`;
+}
+/**
+ * Apply triage marks (pure). seen / investigating: still open, carries `triage`. fixed + `appVersion` older than
+ * `fixedIn`: listed as `accepted` (not counted, never pushed) with words saying installs still report it. fixed with
+ * no `appVersion` or no `fixedIn`: not counted while the triage id matches (a finding whose key changes is a new one).
+ * fixed + `appVersion` >= `fixedIn`: a REGRESSION, stays an alert with its text prefixed. An existing accept is kept.
+ */
+export function applyTriage(findings, triage) {
+    if (!triage)
+        return findings;
+    return findings.map((f) => {
+        const id = exposureTriageId(f);
+        const t = Object.hasOwn(triage, id) ? triage[id] : undefined;
+        if (!t || (t.state !== "seen" && t.state !== "investigating" && t.state !== "fixed"))
+            return f;
+        if (t.state !== "fixed")
+            return { ...f, triage: t };
+        const older = !!f.appVersion && !!t.fixedIn && semverCmp(f.appVersion, t.fixedIn) < 0;
+        if (f.appVersion && t.fixedIn && !older) {
+            return { ...f, triage: t, text: `crashes again in ${f.appVersion} after the fix in ${t.fixedIn}: ${f.text}` };
+        }
+        if (f.accepted)
+            return { ...f, triage: t };
+        const reason = older
+            ? `${triageWords(t)}; installs on ${f.appVersion} still report it`
+            : `${triageWords(t)}; not counted until the reading changes`;
+        return { ...f, triage: t, accepted: { reason, at: t.at, byMark: true } };
+    });
+}
+/** `<measure>:<subject>@<version>` without its `@<version>`; null for `adv:` keys and keys with no version. */
+export function exposureVersionStem(key) {
+    if (key.startsWith("adv:"))
+        return null;
+    const colon = key.indexOf(":");
+    const at = key.lastIndexOf("@");
+    return colon > 0 && at > colon + 1 ? key.slice(0, at) : null;
+}
+/** The last parseable JSON line of a JSONL string; a torn last line (a crash mid-append) is skipped. */
+export function readLastRow(text) {
+    const lines = String(text ?? "").split("\n");
+    for (let i = lines.length - 1; i >= 0; i--) {
+        if (!lines[i].trim())
+            continue;
+        try {
+            const v = JSON.parse(lines[i]);
+            if (v && typeof v === "object")
+                return v;
+        }
+        catch { /* torn line: try the one before */ }
+    }
+    return null;
+}
+/**
+ * The line each measure crosses, in words, for the row's detail. Code defaults, one phrase per
+ * measure id the collector emits; a measure not listed has NO threshold text (absent, never made up).
+ */
+export const EXPOSURE_THRESHOLD = {
+    A1: "a published advisory against an installed version",
+    A2: "a stable release newer than a pre-release pin",
+    A3: "a direct dependency marked deprecated",
+    A4: "a package that gained an install script",
+    A5: "a licence off the allow-list",
+    A6: "a dependency a major version behind",
+    A7: "a runtime within 90 days of end of life",
+    B1: "an open Dependabot alert (high or critical, or open over 14 days)",
+    B2: "secret scanning or push protection changed, or a new alert",
+    B3: "Dependabot security updates changed",
+    B4: "branch protection on main changed",
+    B5: "the workflow token default became write",
+    B6: "the organisation's 2FA requirement changed",
+    B7: "a repo with dependency manifests and no Dependabot config",
+    C1: "the published npm package no longer verifies",
+    C2: "a release asset or the APK signer does not match",
+    C3: "the Marketplace listing is behind the latest release or unlisted",
+    C5: "a privacy-policy URL does not answer 200",
+    C6: "the domain expires within 45 days",
+    C7: "npm 2FA and the trusted publisher not confirmed by hand for 12 months",
+    D1: "targetSdk below the API Play requires within 60 days",
+    D2: "a user-perceived crash rate over 1.09% or ANR rate over 0.47%",
+    D3: "a Connect IQ crash group the ERA check reports, or one that grew tenfold",
+};
+export const EXPOSURE_SUMMARY_ID = "exposure";
+/**
+ * The fix the `B4:default-branch` finding (no ruleset, no protection) offers: the host creates the
+ * owner's two standard rulesets on GitHub (`protectmain.ts`). Confirm-gated — it changes the remote.
+ */
+export const PROTECT_MAIN_FIX = "protect-main";
+const PROTECT_MAIN_KEY = "B4:default-branch";
+/**
+ * The fix every open D3 (Connect IQ crash group) finding offers: the host runs the daily runner's
+ * `era-seen`, which has the ERA checker record EVERY group it lists as seen (its own `--mark-seen`;
+ * a group that grows or recurs comes back) and then reads again. One button per row, one effect for
+ * all of them — the confirm words say "every". Confirm-gated: it marks findings handled in bulk.
+ */
+export const ERA_SEEN_FIX = "era-seen";
+const CHECK_PREFIX = "exposure:";
+/**
+ * Whether a checklist row belongs to the readings sheet's `watch` region (the daily outside view:
+ * advisories, stores, Scorecard) rather than the set-up conventions. The ONE spelling of the split —
+ * both regions, their counts and their bulk buttons cut on it.
+ */
+export const isWatchCheck = (c) => c.watch === true || !!c.exposure || c.id === EXPOSURE_SUMMARY_ID;
+/** The finding key inside a check id (inverse of `exposureCheckId`); null when the id is not one. */
+export const exposureKeyOf = (id) => id.startsWith(CHECK_PREFIX) && id.length > CHECK_PREFIX.length ? id.slice(CHECK_PREFIX.length) : null;
+/** The checklist row id of one finding: the prefix is how the host knows an accept request is ours. */
+export const exposureCheckId = (key) => CHECK_PREFIX + key;
+const DAY_MS = 86_400_000;
+/** "3 hours ago" / "2 days ago": plain words, no precision a daily job cannot back up. */
+function ageWords(ms) {
+    if (ms < 90 * 60_000)
+        return `${Math.max(1, Math.round(ms / 60_000))} minutes ago`;
+    if (ms < 36 * 3_600_000)
+        return `${Math.round(ms / 3_600_000)} hours ago`;
+    return `${Math.round(ms / DAY_MS)} days ago`;
+}
+/**
+ * One exposure row as setup-checklist rows: a summary first, then one per finding. Accepted
+ * findings are still sent (marked `accepted`); the phone draws them folded, so "stop accepting"
+ * never has to guess what the row would have said.
+ */
+export function exposureChecks(row, name, accepts, now, opts, triage) {
+    const staleMs = opts?.staleMs ?? 2 * DAY_MS;
+    const findings = applyTriage(applyAccepts(row.findings ?? [], accepts, now), triage);
+    const open = findings.filter((f) => !f.accepted);
+    const alerts = open.filter((f) => f.level === "alert").length;
+    const digest = open.length - alerts;
+    const accepted = findings.length - open.length;
+    const absent = row.absent ?? [];
+    // Marks whose group is not in this reading: kept (the group may return), listed so a person can clear them.
+    const here = new Set((row.findings ?? []).map(exposureTriageId));
+    const staleMarks = Object.entries(triage ?? {}).filter(([id]) => !here.has(id)).map(([triageId, t]) => ({ triageId, triage: t }));
+    const age = toMs(now) - Date.parse(row.at);
+    const known = Number.isFinite(age);
+    const fresh = known && age <= staleMs;
+    const parts = [
+        known ? `Read ${ageWords(Math.max(0, age))}${fresh ? "" : " (older than the daily reading should be)"}.` : "When this was read is unknown.",
+        `${alerts} open alert${alerts === 1 ? "" : "s"}, ${digest} to consider, ${accepted} accepted.`,
+        ...absent.map((a) => `Not measured, ${a.measure}: ${a.why}.`),
+    ];
+    const out = [{
+            id: EXPOSURE_SUMMARY_ID, label: "Exposure watch", status: fresh && !absent.length ? "pass" : "warn",
+            detail: parts.join(" "), fix: null, advisory: true,
+            ...(staleMarks.length ? { staleMarks } : {}),
+        }];
+    for (const f of findings) {
+        const check = {
+            id: exposureCheckId(f.key),
+            label: `${f.measure} ${f.subject}${f.version ? "@" + f.version : ""}`,
+            status: f.level === "alert" ? (f.severity === "critical" || f.severity === "high" ? "fail" : "warn") : "warn",
+            detail: f.triage && f.triage.state !== "fixed" ? `${f.text} (${triageWords(f.triage)})` : f.text,
+            fix: f.accepted ? null : f.key === PROTECT_MAIN_KEY ? PROTECT_MAIN_FIX : f.measure === "D3" ? ERA_SEEN_FIX : null,
+            ...(f.level === "digest" ? { advisory: true } : {}),
+        };
+        if (f.accepted) {
+            const builtIn = Object.hasOwn(PRE_ACCEPTED, f.key) && !(accepts && Object.hasOwn(accepts, f.key));
+            check.accepted = { ...f.accepted, ...(builtIn ? { builtIn: true } : {}) };
+        }
+        const threshold = Object.hasOwn(EXPOSURE_THRESHOLD, f.measure) ? EXPOSURE_THRESHOLD[f.measure] : undefined;
+        check.exposure = {
+            key: f.key, name, measure: f.measure, subject: f.subject,
+            ...(f.version ? { version: f.version } : {}),
+            ...(f.severity ? { severity: f.severity } : {}),
+            level: f.level, sources: f.sources,
+            ...(f.since ? { since: f.since } : {}),
+            ...(f.group ? { group: f.group } : {}),
+            ...(f.appVersion ? { appVersion: f.appVersion } : {}),
+            ...(f.triage ? { triage: f.triage } : {}),
+            ...(threshold ? { threshold } : {}),
+        };
+        out.push(check);
+    }
+    return out;
+}
+/** Validate one accept request body: ours, with words for why not. Nothing is stored here. */
+export function cleanAcceptRequest(body, now = new Date()) {
+    const no = (error) => ({ ok: false, error });
+    if (!body || typeof body !== "object" || Array.isArray(body))
+        return no("Send an object with an id and accept.");
+    const b = body;
+    const id = b.id;
+    if (typeof id !== "string" || !id.startsWith(CHECK_PREFIX) || id.length === CHECK_PREFIX.length) {
+        return no("That row is not an exposure finding; only those can be accepted.");
+    }
+    if (typeof b.accept !== "boolean")
+        return no("Say whether to accept (true) or stop accepting (false).");
+    if (!b.accept)
+        return { ok: true, value: { id, accept: false } };
+    const reason = typeof b.reason === "string" ? b.reason.trim() : "";
+    if (!reason)
+        return no("Say why you accept it: a reason is required.");
+    if (reason.length > 500)
+        return no("Keep the reason under 500 characters.");
+    const value = { id, accept: true, reason };
+    if (b.until !== undefined && b.until !== null) {
+        const u = b.until;
+        if (typeof u !== "object" || Array.isArray(u))
+            return no("until must be a version, a date or a change.");
+        const keys = Object.keys(u);
+        if (keys.length !== 1)
+            return no("Give exactly one end for the accept: a version, a date or a change.");
+        const [k] = keys;
+        const v = u[k];
+        if (k === "version") {
+            if (typeof v !== "string" || !v.trim())
+                return no("The version to accept up to is empty.");
+            const ver = v.trim();
+            if (ver.length > 64 || !/^v?\d+(\.\d+){0,3}([-+][0-9A-Za-z.-]+)?$/.test(ver)) {
+                return no("That does not read as a version (like 2.0.0, at most 64 characters).");
+            }
+            value.until = { version: ver };
+        }
+        else if (k === "date") {
+            const ms = typeof v === "string" ? Date.parse(v) : NaN;
+            if (!Number.isFinite(ms))
+                return no("That date does not read as a date.");
+            if (!(ms > toMs(now)))
+                return no("That date is already past; pick one in the future.");
+            value.until = { date: v };
+        }
+        else if (k === "change") {
+            if (v !== true)
+                return no("change must be true.");
+            value.until = { change: true };
+        }
+        else
+            return no("until must be a version, a date or a change.");
+    }
+    return { ok: true, value };
+}
+//# sourceMappingURL=exposure.js.map

package/node_modules/@waterplane/shared/dist/exposure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exposure.js","sourceRoot":"","sources":["../src/exposure.ts"],"names":[],"mappings":"AAyEA,wGAAwG;AACxG,MAAM,CAAC,MAAM,YAAY,GAAmC;IAC1D,aAAa,EAAE,EAAE,MAAM,EAAE,8DAA8D,EAAE,EAAE,EAAE,YAAY,EAAE;IAC3G,aAAa,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,EAAE,EAAE,YAAY,EAAE;CAC5E,CAAC;AAEF,oGAAoG;AACpG,MAAM,UAAU,SAAS,CAAC,CAAS,EAAE,CAAS;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE;QAC1B,MAAM,CAAC,IAAI,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC1F,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzH,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC,CAAC;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC;QAC/B,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC;YAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;aACpD,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aAClC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAyC,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC;AAExG,MAAM,IAAI,GAAG,CAAC,CAAgB,EAAU,EAAE,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAE7F,uGAAuG;AACvG,MAAM,UAAU,UAAU,CAAC,CAAkB,EAAE,CAAiB,EAAE,GAAkB;IAClF,MAAM,CAAC,GAAG,CAAC,CAAC,KAAyE,CAAC;IACtF,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9F,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,YAAY,CAC1B,QAA2B,EAC3B,OAA0D,EAC1D,GAAkB;IAElB,MAAM,GAAG,GAAmC,EAAE,GAAG,YAAY,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IACpF,4FAA4F;IAC5F,kFAAkF;IAClF,MAAM,MAAM,GAAG,IAAI,GAAG,EAA0B,CAAC;IACjD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,IAAI,IAAK,CAAC,CAAC,KAA0C,EAAE,OAAO,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,GAA+B,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACvF,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACxC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1C,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;YAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACvF,OAAO,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;IACpG,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;AAClG,MAAM,QAAQ,GAAG,CAAC,CAAiB,EAAU,EAAE,CAC7C,CAAC,CAAC,EAAE,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAEzF,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,GAAG,GAAG,GAAG,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;AAE7G;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC;IAChE,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;QACrE,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,SAAS;QACpE,MAAM,CAAC,GAAG,GAA8B,CAAC;QACzC,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,eAAe,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;YAAE,SAAS;QACvF,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;YAAE,SAAS;QAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,EAAgD,CAAC;QAC9D,IAAI,GAAyB,CAAC;QAC9B,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,KAAK,QAAQ;YAAE,GAAG,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;aAC9E,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC7D,GAAG,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC3H,CAAC;;YAAM,SAAS;QAChB,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YAAE,SAAS;QACzD,GAAG,CAAC,EAAE,CAAC,GAAG;YACR,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG;YACjC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxE,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,WAAW,CAAC,CAAiB;IAC3C,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC/J,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,KAAK,WAAW,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC1F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CACzB,QAA2B,EAC3B,MAA6C;IAE7C,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,MAAM,EAAE,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7D,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,KAAK,eAAe,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC;YAAE,OAAO,CAAC,CAAC;QAC/F,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QACpD,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtF,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,oBAAoB,CAAC,CAAC,UAAU,qBAAqB,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAChH,CAAC;QACD,IAAI,CAAC,CAAC,QAAQ;YAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,KAAK;YAClB,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,UAAU,kBAAkB;YAClE,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,yCAAyC,CAAC;QAC/D,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAa,EAAE,EAAE,CAAC;IACpF,CAAC,CAAC,CAAC;AACL,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAChC,OAAO,KAAK,GAAG,CAAC,IAAI,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/D,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,WAAW,CAAC,IAA+B;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE;YAAE,SAAS;QAChC,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC;YAChC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,OAAO,CAAgB,CAAC;QAC1D,CAAC;QAAC,MAAM,CAAC,CAAC,mCAAmC,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,EAAE,EAAE,mDAAmD;IACvD,EAAE,EAAE,+CAA+C;IACnD,EAAE,EAAE,uCAAuC;IAC3C,EAAE,EAAE,yCAAyC;IAC7C,EAAE,EAAE,8BAA8B;IAClC,EAAE,EAAE,qCAAqC;IACzC,EAAE,EAAE,yCAAyC;IAC7C,EAAE,EAAE,mEAAmE;IACvE,EAAE,EAAE,4DAA4D;IAChE,EAAE,EAAE,qCAAqC;IACzC,EAAE,EAAE,mCAAmC;IACvC,EAAE,EAAE,yCAAyC;IAC7C,EAAE,EAAE,4CAA4C;IAChD,EAAE,EAAE,2DAA2D;IAC/D,EAAE,EAAE,8CAA8C;IAClD,EAAE,EAAE,kDAAkD;IACtD,EAAE,EAAE,kEAAkE;IACtE,EAAE,EAAE,0CAA0C;IAC9C,EAAE,EAAE,mCAAmC;IACvC,EAAE,EAAE,uEAAuE;IAC3E,EAAE,EAAE,sDAAsD;IAC1D,EAAE,EAAE,+DAA+D;IACnE,EAAE,EAAE,0EAA0E;CAC/E,CAAC;AAEF,MAAM,CAAC,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAC9C;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAC/C,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAC7C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,UAAU,CAAC;AACvC,MAAM,YAAY,GAAG,WAAW,CAAC;AACjC;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAkB,EAAW,EAAE,CAC1D,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,KAAK,mBAAmB,CAAC;AACnE,qGAAqG;AACrG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,EAAU,EAAiB,EAAE,CACzD,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxG,uGAAuG;AACvG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,YAAY,GAAG,GAAG,CAAC;AAE3E,MAAM,MAAM,GAAG,UAAU,CAAC;AAE1B,0FAA0F;AAC1F,SAAS,QAAQ,CAAC,EAAU;IAC1B,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM;QAAE,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,cAAc,CAAC;IACnF,IAAI,EAAE,GAAG,EAAE,GAAG,SAAS;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,SAAS,CAAC,YAAY,CAAC;IAC1E,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAgB,EAChB,IAAY,EACZ,OAA8C,EAC9C,GAAkB,EAClB,IAA2B,EAC3B,MAAkC;IAElC,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,CAAC,GAAG,MAAM,CAAC;IAC5C,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACpC,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;IAChC,4GAA4G;IAC5G,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAElI,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,IAAI,GAAG,IAAI,OAAO,CAAC;IACtC,MAAM,KAAK,GAAG;QACZ,KAAK,CAAC,CAAC,CAAC,QAAQ,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,2CAA2C,GAAG,CAAC,CAAC,CAAC,gCAAgC;QAC3I,GAAG,MAAM,cAAc,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,iBAAiB,QAAQ,YAAY;QAC9F,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,GAAG,GAAG,CAAC;KAC9D,CAAC;IACF,MAAM,GAAG,GAAsB,CAAC;YAC9B,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACnG,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI;YAClD,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7C,CAAC,CAAC;IAEH,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAoB;YAC7B,EAAE,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,CAAC;YAC1B,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE;YACrE,MAAM,EAAE,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM;YAC7G,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI;YAChG,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI;YACjH,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC;QACF,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YAClG,KAAK,CAAC,QAAQ,GAAG,EAAE,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACrF,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3G,KAAK,CAAC,QAAQ,GAAG;YACf,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;YACxD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO;YAClC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrD,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpC,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAChC,IAAa,EACb,MAAqB,IAAI,IAAI,EAAE;IAE/B,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC,uCAAuC,CAAC,CAAC;IACjH,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IAChB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QAChG,OAAO,EAAE,CAAC,kEAAkE,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC,yDAAyD,CAAC,CAAC;IACxG,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC,8CAA8C,CAAC,CAAC;IACvE,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC,uCAAuC,CAAC,CAAC;IAC5E,MAAM,KAAK,GAA4B,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACpE,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;QAClB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC,8CAA8C,CAAC,CAAC;QACzG,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAW,CAAC,CAAC;QACtC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC,qEAAqE,CAAC,CAAC;QACxG,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACjB,MAAM,CAAC,GAAI,CAA6B,CAAC,CAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE;gBAAE,OAAO,EAAE,CAAC,uCAAuC,CAAC,CAAC;YAC3F,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;YACrB,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7E,OAAO,EAAE,CAAC,sEAAsE,CAAC,CAAC;YACpF,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;QACjC,CAAC;aAAM,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YACxB,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YACvD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,OAAO,EAAE,CAAC,oCAAoC,CAAC,CAAC;YAC1E,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC,oDAAoD,CAAC,CAAC;YACvF,KAAK,CAAC,KAAK,GAAG,EAAE,IAAI,EAAE,CAAW,EAAE,CAAC;QACtC,CAAC;aAAM,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,sBAAsB,CAAC,CAAC;YAClD,KAAK,CAAC,KAAK,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACjC,CAAC;;YAAM,OAAO,EAAE,CAAC,8CAA8C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC"}

package/node_modules/@waterplane/shared/dist/exposurepush.d.ts

@@ -0,0 +1,60 @@
+/**
+ * **Which exposure findings earn a push, and which keys the host must remember.** The watch's
+ * promise (proposal §2-3): an ALERT is a push the same day, one per new finding, keyed
+ * (repo, measure, subject, version). Pure, no clock but the `now` handed in, no file reads — the
+ * host (`exposurepush.ts`) owns the store and the sending.
+ *
+ *  - **Pushed once FOREVER.** The remembered set is never pruned: an accept that lapses, or a
+ *    finding that clears and comes back with the same key, does not push a second time.
+ *  - **Seeding is silent, per repo.** The store carries a `repos` marker: the first time the sweep
+ *    sees a repo as WATCHED (first run, late add, re-add, missed runs, no store at all) it remembers
+ *    that repo's alert keys, pushes none, and marks the repo. Only a marked repo pushes new keys.
+ *  - **Only open alerts.** `digest` findings and accepted ones (`applyAccepts`, the one reader of an
+ *    accept) are neither pushed nor remembered, so a digest finding is never "spent".
+ *  - **Up to {@link EXPOSURE_PUSH_CAP} pushes per repo per sweep**, one per finding; more than that
+ *    is ONE push naming the count, and every key is remembered.
+ */
+import { type ExposureTriageFile, type ExposureAccept, type ExposureFinding, type ExposureRow } from "./exposure.js";
+export declare const EXPOSURE_PUSH_CAP = 3;
+/** One push to send. `attention` = critical/high severity (a person is asked to look today). */
+export interface ExposurePush {
+    repo: string;
+    dir: string;
+    title: string;
+    body: string;
+    /** The stable tag: a later push for the same finding replaces it in the OS tray. */
+    tag: string;
+    /** The attention key (same spelling as the tag) so the cause can resolve the item. */
+    key: string;
+    attention: boolean;
+    /** The finding keys this push stands for (all of them remembered by the caller). */
+    keys: string[];
+}
+export interface ExposurePushPlan {
+    push: ExposurePush[];
+    /** Keys to add to the store (never already in it). */
+    remember: string[];
+    /** Repos seen as watched for the first time: to add to the store's marker. */
+    seenRepos: string[];
+    /** Attention keys whose finding is no longer open (or whose repo has none left): to resolve. */
+    resolve: string[];
+}
+/** What the store holds: pushed keys, and the repos whose first sight has been seeded. */
+export interface ExposurePushed {
+    keys: ReadonlySet<string>;
+    repos: ReadonlySet<string>;
+}
+/** `unreadable`: the accepts file exists but cannot be read, so nothing is known about this row. */
+export interface ExposureSeries {
+    row: ExposureRow;
+    accepts: Record<string, ExposureAccept> | null;
+    triage?: ExposureTriageFile | null;
+    unreadable?: boolean;
+}
+/** The dedupe key: (repo, finding.key, version), `\u0000`-joined so no field can fake another.
+ *  `finding.key` already carries the advisory id and the subject. */
+export declare const exposurePushKey: (repo: string, f: Pick<ExposureFinding, "key" | "version">) => string;
+/** The attention key of one finding's push, and of a repo's summary push. */
+export declare const exposureAttentionKey: (repo: string, findingKey: string) => string;
+export declare const exposureSummaryKey: (repo: string) => string;
+export declare function exposurePushes(series: readonly ExposureSeries[], watched: (dir: string) => boolean, pushed: ExposurePushed, now: Date | string): ExposurePushPlan;