youmd 0.10.2 → 0.12.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/commands/brain.d.ts.map +1 -1
- package/dist/commands/brain.js +91 -28
- package/dist/commands/brain.js.map +1 -1
- package/dist/commands/chat.d.ts.map +1 -1
- package/dist/commands/chat.js +6 -1
- package/dist/commands/chat.js.map +1 -1
- package/dist/commands/conversations.d.ts +5 -0
- package/dist/commands/conversations.d.ts.map +1 -0
- package/dist/commands/conversations.js +116 -0
- package/dist/commands/conversations.js.map +1 -0
- package/dist/commands/doctor.d.ts +1 -0
- package/dist/commands/doctor.d.ts.map +1 -1
- package/dist/commands/doctor.js +16 -1
- package/dist/commands/doctor.js.map +1 -1
- package/dist/commands/founder.d.ts +13 -0
- package/dist/commands/founder.d.ts.map +1 -0
- package/dist/commands/founder.js +189 -0
- package/dist/commands/founder.js.map +1 -0
- package/dist/commands/handoff.d.ts +5 -0
- package/dist/commands/handoff.d.ts.map +1 -0
- package/dist/commands/handoff.js +432 -0
- package/dist/commands/handoff.js.map +1 -0
- package/dist/commands/orchestrate.d.ts +15 -0
- package/dist/commands/orchestrate.d.ts.map +1 -1
- package/dist/commands/orchestrate.js +294 -0
- package/dist/commands/orchestrate.js.map +1 -1
- package/dist/commands/project.d.ts.map +1 -1
- package/dist/commands/project.js +8 -1
- package/dist/commands/project.js.map +1 -1
- package/dist/commands/reconcile.d.ts +15 -0
- package/dist/commands/reconcile.d.ts.map +1 -0
- package/dist/commands/reconcile.js +260 -0
- package/dist/commands/reconcile.js.map +1 -0
- package/dist/commands/session.d.ts +28 -0
- package/dist/commands/session.d.ts.map +1 -0
- package/dist/commands/session.js +895 -0
- package/dist/commands/session.js.map +1 -0
- package/dist/commands/stack.d.ts +2 -0
- package/dist/commands/stack.d.ts.map +1 -1
- package/dist/commands/stack.js +26 -0
- package/dist/commands/stack.js.map +1 -1
- package/dist/commands/sync.d.ts.map +1 -1
- package/dist/commands/sync.js +11 -0
- package/dist/commands/sync.js.map +1 -1
- package/dist/commands/tasks.d.ts +57 -0
- package/dist/commands/tasks.d.ts.map +1 -1
- package/dist/commands/tasks.js +236 -31
- package/dist/commands/tasks.js.map +1 -1
- package/dist/generated/capability-registry.d.ts +311 -71
- package/dist/generated/capability-registry.d.ts.map +1 -1
- package/dist/generated/capability-registry.js +346 -71
- package/dist/generated/capability-registry.js.map +1 -1
- package/dist/index.js +113 -2
- package/dist/index.js.map +1 -1
- package/dist/lib/api.d.ts +362 -1
- package/dist/lib/api.d.ts.map +1 -1
- package/dist/lib/api.js +171 -0
- package/dist/lib/api.js.map +1 -1
- package/dist/lib/brain/adapters.d.ts +20 -1
- package/dist/lib/brain/adapters.d.ts.map +1 -1
- package/dist/lib/brain/adapters.js +113 -2
- package/dist/lib/brain/adapters.js.map +1 -1
- package/dist/lib/brain/approval-key-trust.d.ts +29 -0
- package/dist/lib/brain/approval-key-trust.d.ts.map +1 -0
- package/dist/lib/brain/approval-key-trust.js +139 -0
- package/dist/lib/brain/approval-key-trust.js.map +1 -0
- package/dist/lib/brain/cache.d.ts +2 -2
- package/dist/lib/brain/cache.d.ts.map +1 -1
- package/dist/lib/brain/cache.js +4 -4
- package/dist/lib/brain/cache.js.map +1 -1
- package/dist/lib/brain/content.d.ts +56 -0
- package/dist/lib/brain/content.d.ts.map +1 -0
- package/dist/lib/brain/content.js +362 -0
- package/dist/lib/brain/content.js.map +1 -0
- package/dist/lib/brain/descriptor-validator.d.ts +11 -0
- package/dist/lib/brain/descriptor-validator.d.ts.map +1 -0
- package/dist/lib/brain/descriptor-validator.js +185 -0
- package/dist/lib/brain/descriptor-validator.js.map +1 -0
- package/dist/lib/brain/discovery.d.ts.map +1 -1
- package/dist/lib/brain/discovery.js +103 -60
- package/dist/lib/brain/discovery.js.map +1 -1
- package/dist/lib/brain/index.d.ts +2 -0
- package/dist/lib/brain/index.d.ts.map +1 -1
- package/dist/lib/brain/index.js +8 -2
- package/dist/lib/brain/index.js.map +1 -1
- package/dist/lib/brain/proposal.d.ts +53 -5
- package/dist/lib/brain/proposal.d.ts.map +1 -1
- package/dist/lib/brain/proposal.js +341 -64
- package/dist/lib/brain/proposal.js.map +1 -1
- package/dist/lib/brain/safe-file.d.ts +25 -1
- package/dist/lib/brain/safe-file.d.ts.map +1 -1
- package/dist/lib/brain/safe-file.js +250 -30
- package/dist/lib/brain/safe-file.js.map +1 -1
- package/dist/lib/brain/safe-open.d.ts +2 -0
- package/dist/lib/brain/safe-open.d.ts.map +1 -0
- package/dist/lib/brain/safe-open.js +77 -0
- package/dist/lib/brain/safe-open.js.map +1 -0
- package/dist/lib/brain/safety.d.ts.map +1 -1
- package/dist/lib/brain/safety.js +5 -0
- package/dist/lib/brain/safety.js.map +1 -1
- package/dist/lib/brain/staged-apply.d.ts +2 -1
- package/dist/lib/brain/staged-apply.d.ts.map +1 -1
- package/dist/lib/brain/staged-apply.js +6 -3
- package/dist/lib/brain/staged-apply.js.map +1 -1
- package/dist/lib/brain/store.d.ts +3 -0
- package/dist/lib/brain/store.d.ts.map +1 -1
- package/dist/lib/brain/store.js +68 -0
- package/dist/lib/brain/store.js.map +1 -1
- package/dist/lib/brain/sync.d.ts +87 -0
- package/dist/lib/brain/sync.d.ts.map +1 -0
- package/dist/lib/brain/sync.js +238 -0
- package/dist/lib/brain/sync.js.map +1 -0
- package/dist/lib/brain/types.d.ts +23 -0
- package/dist/lib/brain/types.d.ts.map +1 -1
- package/dist/lib/config.d.ts +7 -0
- package/dist/lib/config.d.ts.map +1 -1
- package/dist/lib/config.js +3 -0
- package/dist/lib/config.js.map +1 -1
- package/dist/lib/daemon.js +1 -1
- package/dist/lib/daemon.js.map +1 -1
- package/dist/lib/goalRegistryFile.d.ts +169 -0
- package/dist/lib/goalRegistryFile.d.ts.map +1 -0
- package/dist/lib/goalRegistryFile.js +518 -0
- package/dist/lib/goalRegistryFile.js.map +1 -0
- package/dist/lib/goalsFile.d.ts +101 -0
- package/dist/lib/goalsFile.d.ts.map +1 -0
- package/dist/lib/goalsFile.js +413 -0
- package/dist/lib/goalsFile.js.map +1 -0
- package/dist/lib/handoff.d.ts +170 -0
- package/dist/lib/handoff.d.ts.map +1 -0
- package/dist/lib/handoff.js +316 -0
- package/dist/lib/handoff.js.map +1 -0
- package/dist/lib/machine-identity.d.ts +2 -0
- package/dist/lib/machine-identity.d.ts.map +1 -1
- package/dist/lib/machine-identity.js +13 -6
- package/dist/lib/machine-identity.js.map +1 -1
- package/dist/lib/onboarding.d.ts +4 -1
- package/dist/lib/onboarding.d.ts.map +1 -1
- package/dist/lib/onboarding.js +11 -3
- package/dist/lib/onboarding.js.map +1 -1
- package/dist/lib/orchestrator/loop.d.ts +7 -0
- package/dist/lib/orchestrator/loop.d.ts.map +1 -1
- package/dist/lib/orchestrator/loop.js +53 -0
- package/dist/lib/orchestrator/loop.js.map +1 -1
- package/dist/lib/orchestrator/run-journal.d.ts +178 -0
- package/dist/lib/orchestrator/run-journal.d.ts.map +1 -0
- package/dist/lib/orchestrator/run-journal.js +912 -0
- package/dist/lib/orchestrator/run-journal.js.map +1 -0
- package/dist/lib/orchestrator/supervisor.d.ts +11 -0
- package/dist/lib/orchestrator/supervisor.d.ts.map +1 -1
- package/dist/lib/orchestrator/supervisor.js +304 -116
- package/dist/lib/orchestrator/supervisor.js.map +1 -1
- package/dist/lib/orchestrator/tools.d.ts +2 -0
- package/dist/lib/orchestrator/tools.d.ts.map +1 -1
- package/dist/lib/orchestrator/tools.js +214 -1
- package/dist/lib/orchestrator/tools.js.map +1 -1
- package/dist/lib/redact.d.ts.map +1 -1
- package/dist/lib/redact.js +31 -6
- package/dist/lib/redact.js.map +1 -1
- package/dist/lib/remote-agent-event.d.ts +19 -0
- package/dist/lib/remote-agent-event.d.ts.map +1 -0
- package/dist/lib/remote-agent-event.js +85 -0
- package/dist/lib/remote-agent-event.js.map +1 -0
- package/dist/lib/remote-command.d.ts.map +1 -1
- package/dist/lib/remote-command.js +19 -0
- package/dist/lib/remote-command.js.map +1 -1
- package/dist/lib/remote-executor.d.ts +7 -1
- package/dist/lib/remote-executor.d.ts.map +1 -1
- package/dist/lib/remote-executor.js +391 -0
- package/dist/lib/remote-executor.js.map +1 -1
- package/dist/lib/sessionCheckpoint.d.ts +104 -0
- package/dist/lib/sessionCheckpoint.d.ts.map +1 -0
- package/dist/lib/sessionCheckpoint.js +191 -0
- package/dist/lib/sessionCheckpoint.js.map +1 -0
- package/dist/lib/sessionHandoff.d.ts +47 -0
- package/dist/lib/sessionHandoff.d.ts.map +1 -0
- package/dist/lib/sessionHandoff.js +305 -0
- package/dist/lib/sessionHandoff.js.map +1 -0
- package/dist/lib/stream.d.ts +3 -1
- package/dist/lib/stream.d.ts.map +1 -1
- package/dist/lib/stream.js +8 -3
- package/dist/lib/stream.js.map +1 -1
- package/dist/lib/taskLedgerProposal.d.ts +102 -0
- package/dist/lib/taskLedgerProposal.d.ts.map +1 -0
- package/dist/lib/taskLedgerProposal.js +408 -0
- package/dist/lib/taskLedgerProposal.js.map +1 -0
- package/dist/lib/tasksFile.d.ts +23 -2
- package/dist/lib/tasksFile.d.ts.map +1 -1
- package/dist/lib/tasksFile.js +122 -10
- package/dist/lib/tasksFile.js.map +1 -1
- package/dist/mcp/registry.d.ts.map +1 -1
- package/dist/mcp/registry.js +110 -0
- package/dist/mcp/registry.js.map +1 -1
- package/native/prebuilds/darwin-universal/youmd_safe_open.node +0 -0
- package/native/safe-open/youmd_safe_open.c +224 -0
- package/package.json +11 -3
- package/scripts/build-safe-open.mjs +63 -0
- package/scripts/skillstack-sync/com.you.context-sync.plist +1 -1
- package/scripts/skillstack-sync/com.you.identity-sync.plist +1 -1
- package/scripts/skillstack-sync/com.you.orchestrator-watch.plist +1 -1
- package/scripts/skillstack-sync/com.you.realtime-sync.plist +7 -1
- package/scripts/skillstack-sync/com.you.skillstack-sync.plist +1 -1
- package/scripts/skillstack-sync/context-sync.sh +19 -7
- package/scripts/skillstack-sync/install-daemons-linux.sh +6 -0
- package/scripts/smoke-safe-open-node.cjs +50 -0
|
@@ -0,0 +1,362 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
3
|
+
if (k2 === undefined) k2 = k;
|
|
4
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
5
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
6
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
7
|
+
}
|
|
8
|
+
Object.defineProperty(o, k2, desc);
|
|
9
|
+
}) : (function(o, m, k, k2) {
|
|
10
|
+
if (k2 === undefined) k2 = k;
|
|
11
|
+
o[k2] = m[k];
|
|
12
|
+
}));
|
|
13
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
14
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
15
|
+
}) : function(o, v) {
|
|
16
|
+
o["default"] = v;
|
|
17
|
+
});
|
|
18
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
19
|
+
var ownKeys = function(o) {
|
|
20
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
21
|
+
var ar = [];
|
|
22
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
23
|
+
return ar;
|
|
24
|
+
};
|
|
25
|
+
return ownKeys(o);
|
|
26
|
+
};
|
|
27
|
+
return function (mod) {
|
|
28
|
+
if (mod && mod.__esModule) return mod;
|
|
29
|
+
var result = {};
|
|
30
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
31
|
+
__setModuleDefault(result, mod);
|
|
32
|
+
return result;
|
|
33
|
+
};
|
|
34
|
+
})();
|
|
35
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
36
|
+
exports.PROJECT_BRAIN_CONTENT_MAX_PROJECT_BYTES = exports.PROJECT_BRAIN_CONTENT_MAX_ARTIFACTS = exports.PROJECT_BRAIN_CONTENT_MAX_FILE_BYTES = exports.PROJECT_BRAIN_CONTENT_VERSION = exports.PROJECT_BRAIN_CONTENT_SCHEMA = void 0;
|
|
37
|
+
exports.isProjectBrainContentCandidatePath = isProjectBrainContentCandidatePath;
|
|
38
|
+
exports.verifiedProjectBrainUtf8Read = verifiedProjectBrainUtf8Read;
|
|
39
|
+
exports.collectProjectBrainArtifactContents = collectProjectBrainArtifactContents;
|
|
40
|
+
const crypto_1 = require("crypto");
|
|
41
|
+
const fs = __importStar(require("fs"));
|
|
42
|
+
const path = __importStar(require("path"));
|
|
43
|
+
const redact_1 = require("../redact");
|
|
44
|
+
const adapters_1 = require("./adapters");
|
|
45
|
+
const discovery_1 = require("./discovery");
|
|
46
|
+
const safe_open_1 = require("./safe-open");
|
|
47
|
+
exports.PROJECT_BRAIN_CONTENT_SCHEMA = "https://you.md/schemas/project-brain-content/v1";
|
|
48
|
+
exports.PROJECT_BRAIN_CONTENT_VERSION = "you-md/project-brain-content/v1";
|
|
49
|
+
// Canonical task ledgers regularly exceed 64 KiB once a real portfolio is
|
|
50
|
+
// represented. Keep the lane bounded, but large enough for one repository's
|
|
51
|
+
// declared PRD/task/goal source while the existing 512 KiB project budget
|
|
52
|
+
// continues to cap aggregate persistence.
|
|
53
|
+
exports.PROJECT_BRAIN_CONTENT_MAX_FILE_BYTES = 128 * 1024;
|
|
54
|
+
exports.PROJECT_BRAIN_CONTENT_MAX_ARTIFACTS = 32;
|
|
55
|
+
exports.PROJECT_BRAIN_CONTENT_MAX_PROJECT_BYTES = 512 * 1024;
|
|
56
|
+
const CONTENT_BASENAMES = new Set([
|
|
57
|
+
"prd.md",
|
|
58
|
+
"vision.md",
|
|
59
|
+
"goals.md",
|
|
60
|
+
"goals.json",
|
|
61
|
+
"design.md",
|
|
62
|
+
"design.json",
|
|
63
|
+
"stack.md",
|
|
64
|
+
"stack.json",
|
|
65
|
+
"current_state.md",
|
|
66
|
+
"architecture.md",
|
|
67
|
+
"features.md",
|
|
68
|
+
"changelog.md",
|
|
69
|
+
"todo.md",
|
|
70
|
+
"tasks.json",
|
|
71
|
+
"tasks.md",
|
|
72
|
+
]);
|
|
73
|
+
const PRIVATE_PARTS = new Set([
|
|
74
|
+
".private",
|
|
75
|
+
"private",
|
|
76
|
+
"secrets",
|
|
77
|
+
"secret",
|
|
78
|
+
"credentials",
|
|
79
|
+
"vault",
|
|
80
|
+
]);
|
|
81
|
+
function normalizedRelative(value) {
|
|
82
|
+
return value.split(path.sep).join("/").replace(/^\.\//, "");
|
|
83
|
+
}
|
|
84
|
+
/** Shared with discovery so uploadable claims carry an exact byte SHA-256. */
|
|
85
|
+
function isProjectBrainContentCandidatePath(value, contextRoot) {
|
|
86
|
+
const relative = normalizedRelative(value);
|
|
87
|
+
if (!(0, discovery_1.isSafeRelativePath)(relative) || (0, adapters_1.isBrainAdapterGeneratedPath)(relative))
|
|
88
|
+
return false;
|
|
89
|
+
const parts = relative.toLowerCase().split("/");
|
|
90
|
+
const basename = parts[parts.length - 1];
|
|
91
|
+
if (parts.some((part) => PRIVATE_PARTS.has(part)))
|
|
92
|
+
return false;
|
|
93
|
+
if (parts.some((part) => part === ".env" || part === ".envrc" || part.startsWith(".env.")))
|
|
94
|
+
return false;
|
|
95
|
+
if (CONTENT_BASENAMES.has(basename))
|
|
96
|
+
return basename !== "tasks.md"; // generated companion
|
|
97
|
+
return Boolean(contextRoot && (0, adapters_1.isHydratableProjectContextPath)(relative, contextRoot));
|
|
98
|
+
}
|
|
99
|
+
const CORE_CONTENT_ORDER = [
|
|
100
|
+
"prd.md", "vision.md", "goals.md", "goals.json", "design.md", "design.json",
|
|
101
|
+
"stack.md", "stack.json", "current_state.md", "architecture.md", "features.md",
|
|
102
|
+
"todo.md", "changelog.md", "tasks.json",
|
|
103
|
+
];
|
|
104
|
+
function contentPriority(value) {
|
|
105
|
+
const basename = normalizedRelative(value).toLowerCase().split("/").pop() || "";
|
|
106
|
+
const fixed = CORE_CONTENT_ORDER.indexOf(basename);
|
|
107
|
+
return fixed === -1 ? CORE_CONTENT_ORDER.length : fixed;
|
|
108
|
+
}
|
|
109
|
+
function sha256(buffer) {
|
|
110
|
+
return `sha256:${(0, crypto_1.createHash)("sha256").update(buffer).digest("hex")}`;
|
|
111
|
+
}
|
|
112
|
+
function sameFileIdentity(left, right) {
|
|
113
|
+
return left.dev === right.dev && left.ino === right.ino;
|
|
114
|
+
}
|
|
115
|
+
function assertVerifiedContentRuntime() {
|
|
116
|
+
// Node does not expose openat/openat2. Linux uses held procfd directories;
|
|
117
|
+
// Darwin delegates to the packaged Node-API openat/O_NOFOLLOW adapter.
|
|
118
|
+
const noFollow = fs.constants.O_NOFOLLOW || 0;
|
|
119
|
+
const directory = fs.constants.O_DIRECTORY || 0;
|
|
120
|
+
if (process.platform === "darwin")
|
|
121
|
+
return;
|
|
122
|
+
if (process.platform !== "linux" || !noFollow || !directory) {
|
|
123
|
+
throw new Error("metadata_only");
|
|
124
|
+
}
|
|
125
|
+
let probe;
|
|
126
|
+
try {
|
|
127
|
+
probe = fs.openSync("/", fs.constants.O_RDONLY | directory | noFollow);
|
|
128
|
+
const descriptor = fs.fstatSync(probe);
|
|
129
|
+
const procBinding = fs.statSync(`/proc/self/fd/${probe}`);
|
|
130
|
+
if (!descriptor.isDirectory() || !sameFileIdentity(descriptor, procBinding))
|
|
131
|
+
throw new Error("metadata_only");
|
|
132
|
+
}
|
|
133
|
+
catch {
|
|
134
|
+
throw new Error("metadata_only");
|
|
135
|
+
}
|
|
136
|
+
finally {
|
|
137
|
+
if (probe !== undefined)
|
|
138
|
+
fs.closeSync(probe);
|
|
139
|
+
}
|
|
140
|
+
}
|
|
141
|
+
function descriptorRelativeOpen(parentFd, segment, flags) {
|
|
142
|
+
if (!segment || segment === "." || segment === ".." || segment.includes("/") || segment.includes("\0")) {
|
|
143
|
+
throw new Error("unsafe_path");
|
|
144
|
+
}
|
|
145
|
+
try {
|
|
146
|
+
return fs.openSync(`/proc/self/fd/${parentFd}/${segment}`, flags);
|
|
147
|
+
}
|
|
148
|
+
catch (error) {
|
|
149
|
+
const code = error.code;
|
|
150
|
+
if (code === "ELOOP")
|
|
151
|
+
throw new Error("symlink_rejected");
|
|
152
|
+
if (code === "ENOTDIR")
|
|
153
|
+
throw new Error("unsafe_path");
|
|
154
|
+
throw error;
|
|
155
|
+
}
|
|
156
|
+
}
|
|
157
|
+
/** Descriptor-relative, no-follow read shared by bounded project-context contracts. */
|
|
158
|
+
function verifiedProjectBrainUtf8Read(rootValue, relativeValue, contextRoot, maxBytes) {
|
|
159
|
+
assertVerifiedContentRuntime();
|
|
160
|
+
const relative = normalizedRelative(relativeValue);
|
|
161
|
+
if (!isProjectBrainContentCandidatePath(relative, contextRoot))
|
|
162
|
+
throw new Error("unsafe_path");
|
|
163
|
+
const root = path.resolve(rootValue);
|
|
164
|
+
if (process.platform === "darwin") {
|
|
165
|
+
// Give callers a stable budget diagnostic before entering the native
|
|
166
|
+
// descriptor-relative traversal. The native adapter independently
|
|
167
|
+
// re-checks the limit on the held descriptor, so this is not authority.
|
|
168
|
+
const candidate = fs.lstatSync(path.resolve(root, relative));
|
|
169
|
+
if (candidate.isSymbolicLink())
|
|
170
|
+
throw new Error("symlink_rejected");
|
|
171
|
+
if (!candidate.isFile())
|
|
172
|
+
throw new Error("unsafe_path");
|
|
173
|
+
if (candidate.size > maxBytes)
|
|
174
|
+
throw new Error("budget_exceeded");
|
|
175
|
+
const bytes = (0, safe_open_1.darwinVerifiedRead)(root, relative, maxBytes);
|
|
176
|
+
let content;
|
|
177
|
+
try {
|
|
178
|
+
content = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
|
|
179
|
+
}
|
|
180
|
+
catch {
|
|
181
|
+
throw new Error("binary_rejected");
|
|
182
|
+
}
|
|
183
|
+
if (content.includes("\0"))
|
|
184
|
+
throw new Error("binary_rejected");
|
|
185
|
+
return { content, bytes };
|
|
186
|
+
}
|
|
187
|
+
const rootStat = fs.lstatSync(root);
|
|
188
|
+
if (!rootStat.isDirectory() || rootStat.isSymbolicLink())
|
|
189
|
+
throw new Error("unsafe_path");
|
|
190
|
+
const noFollow = fs.constants.O_NOFOLLOW;
|
|
191
|
+
const directoryFlags = fs.constants.O_RDONLY | fs.constants.O_DIRECTORY | noFollow;
|
|
192
|
+
const fileFlags = fs.constants.O_RDONLY | noFollow;
|
|
193
|
+
const rootSegments = root.split(path.sep).filter(Boolean);
|
|
194
|
+
const relativeSegments = relative.split("/");
|
|
195
|
+
let directoryFd;
|
|
196
|
+
let fileFd;
|
|
197
|
+
try {
|
|
198
|
+
directoryFd = fs.openSync("/", directoryFlags);
|
|
199
|
+
for (const segment of rootSegments) {
|
|
200
|
+
const next = descriptorRelativeOpen(directoryFd, segment, directoryFlags);
|
|
201
|
+
fs.closeSync(directoryFd);
|
|
202
|
+
directoryFd = next;
|
|
203
|
+
}
|
|
204
|
+
const openedRoot = fs.fstatSync(directoryFd);
|
|
205
|
+
if (!openedRoot.isDirectory() || !sameFileIdentity(openedRoot, rootStat))
|
|
206
|
+
throw new Error("stale_claim");
|
|
207
|
+
for (const segment of relativeSegments.slice(0, -1)) {
|
|
208
|
+
const next = descriptorRelativeOpen(directoryFd, segment, directoryFlags);
|
|
209
|
+
fs.closeSync(directoryFd);
|
|
210
|
+
directoryFd = next;
|
|
211
|
+
}
|
|
212
|
+
fileFd = descriptorRelativeOpen(directoryFd, relativeSegments[relativeSegments.length - 1], fileFlags);
|
|
213
|
+
const opened = fs.fstatSync(fileFd);
|
|
214
|
+
if (!opened.isFile())
|
|
215
|
+
throw new Error("unsafe_path");
|
|
216
|
+
if (opened.size > maxBytes)
|
|
217
|
+
throw new Error("budget_exceeded");
|
|
218
|
+
const bytes = Buffer.alloc(opened.size);
|
|
219
|
+
let offset = 0;
|
|
220
|
+
while (offset < opened.size) {
|
|
221
|
+
const count = fs.readSync(fileFd, bytes, offset, opened.size - offset, offset);
|
|
222
|
+
if (!count)
|
|
223
|
+
break;
|
|
224
|
+
offset += count;
|
|
225
|
+
}
|
|
226
|
+
if (offset !== opened.size)
|
|
227
|
+
throw new Error("unreadable");
|
|
228
|
+
let content;
|
|
229
|
+
try {
|
|
230
|
+
content = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
|
|
231
|
+
}
|
|
232
|
+
catch {
|
|
233
|
+
throw new Error("binary_rejected");
|
|
234
|
+
}
|
|
235
|
+
if (content.includes("\0"))
|
|
236
|
+
throw new Error("binary_rejected");
|
|
237
|
+
return { content, bytes };
|
|
238
|
+
}
|
|
239
|
+
finally {
|
|
240
|
+
if (fileFd !== undefined)
|
|
241
|
+
fs.closeSync(fileFd);
|
|
242
|
+
if (directoryFd !== undefined)
|
|
243
|
+
fs.closeSync(directoryFd);
|
|
244
|
+
}
|
|
245
|
+
}
|
|
246
|
+
function diagnostic(diagnostics, project, artifact, code, message) {
|
|
247
|
+
diagnostics.push({
|
|
248
|
+
code,
|
|
249
|
+
projectRef: project.projectRef,
|
|
250
|
+
artifactRef: artifact.artifactRef,
|
|
251
|
+
path: artifact.path,
|
|
252
|
+
message,
|
|
253
|
+
});
|
|
254
|
+
}
|
|
255
|
+
function mappedReadFailure(error) {
|
|
256
|
+
const code = error instanceof Error ? error.message : "unreadable";
|
|
257
|
+
return new Set([
|
|
258
|
+
"metadata_only", "unsafe_path", "symlink_rejected", "binary_rejected", "budget_exceeded", "stale_claim", "unreadable",
|
|
259
|
+
]).has(code)
|
|
260
|
+
? code
|
|
261
|
+
: "unreadable";
|
|
262
|
+
}
|
|
263
|
+
/**
|
|
264
|
+
* Collect bounded source text only from claims in the supplied latest scan.
|
|
265
|
+
* This function never persists or uploads data and returns stable, sorted DTOs.
|
|
266
|
+
*/
|
|
267
|
+
function collectProjectBrainArtifactContents(scan, rootValue, options = {}) {
|
|
268
|
+
const maxFileBytes = Math.min(options.maxFileBytes ?? exports.PROJECT_BRAIN_CONTENT_MAX_FILE_BYTES, exports.PROJECT_BRAIN_CONTENT_MAX_FILE_BYTES);
|
|
269
|
+
const maxArtifacts = Math.min(options.maxArtifactsPerProject ?? exports.PROJECT_BRAIN_CONTENT_MAX_ARTIFACTS, exports.PROJECT_BRAIN_CONTENT_MAX_ARTIFACTS);
|
|
270
|
+
const maxProjectBytes = Math.min(options.maxProjectBytes ?? exports.PROJECT_BRAIN_CONTENT_MAX_PROJECT_BYTES, exports.PROJECT_BRAIN_CONTENT_MAX_PROJECT_BYTES);
|
|
271
|
+
const canaries = (options.canaries || []).filter(Boolean);
|
|
272
|
+
const diagnostics = [];
|
|
273
|
+
const payloads = [];
|
|
274
|
+
for (const project of [...scan.projects].sort((a, b) => a.projectRef.localeCompare(b.projectRef))) {
|
|
275
|
+
const contents = [];
|
|
276
|
+
let projectBytes = 0;
|
|
277
|
+
let safetyRejected = false;
|
|
278
|
+
const artifacts = [...project.artifacts].sort((a, b) => contentPriority(a.path) - contentPriority(b.path)
|
|
279
|
+
|| a.path.localeCompare(b.path)
|
|
280
|
+
|| a.artifactRef.localeCompare(b.artifactRef));
|
|
281
|
+
for (const artifact of artifacts) {
|
|
282
|
+
if (!(0, discovery_1.isSafeRelativePath)(normalizedRelative(artifact.path))) {
|
|
283
|
+
diagnostic(diagnostics, project, artifact, "unsafe_path", "artifact claim path is unsafe");
|
|
284
|
+
continue;
|
|
285
|
+
}
|
|
286
|
+
if (!isProjectBrainContentCandidatePath(artifact.path, project.contextRoot)) {
|
|
287
|
+
diagnostic(diagnostics, project, artifact, "ineligible", "artifact is outside the bounded canonical-context and research/decisions/evidence content lane");
|
|
288
|
+
continue;
|
|
289
|
+
}
|
|
290
|
+
if (artifact.authority === "derived") {
|
|
291
|
+
diagnostic(diagnostics, project, artifact, "ineligible", "derived/generated artifacts are not uploaded as source content");
|
|
292
|
+
continue;
|
|
293
|
+
}
|
|
294
|
+
if (contents.length >= maxArtifacts) {
|
|
295
|
+
diagnostic(diagnostics, project, artifact, "budget_exceeded", "project artifact count budget exceeded");
|
|
296
|
+
continue;
|
|
297
|
+
}
|
|
298
|
+
if (!/^sha256:[a-f0-9]{64}$/.test(artifact.provenance.sourceRevision)) {
|
|
299
|
+
diagnostic(diagnostics, project, artifact, "stale_claim", "artifact claim is metadata-only or does not carry an exact content revision");
|
|
300
|
+
continue;
|
|
301
|
+
}
|
|
302
|
+
let read;
|
|
303
|
+
try {
|
|
304
|
+
read = verifiedProjectBrainUtf8Read(rootValue, artifact.path, project.contextRoot, maxFileBytes);
|
|
305
|
+
}
|
|
306
|
+
catch (error) {
|
|
307
|
+
const code = mappedReadFailure(error);
|
|
308
|
+
diagnostic(diagnostics, project, artifact, code, code === "metadata_only"
|
|
309
|
+
? "verified content unavailable: runtime lacks descriptor-relative no-follow traversal"
|
|
310
|
+
: `verified content read rejected: ${code}`);
|
|
311
|
+
continue;
|
|
312
|
+
}
|
|
313
|
+
if (projectBytes + read.bytes.length > maxProjectBytes) {
|
|
314
|
+
diagnostic(diagnostics, project, artifact, "budget_exceeded", "project content byte budget exceeded");
|
|
315
|
+
continue;
|
|
316
|
+
}
|
|
317
|
+
const contentHash = sha256(read.bytes);
|
|
318
|
+
if (contentHash !== artifact.provenance.sourceRevision) {
|
|
319
|
+
diagnostic(diagnostics, project, artifact, "hash_mismatch", "file content no longer matches the latest scan claim");
|
|
320
|
+
continue;
|
|
321
|
+
}
|
|
322
|
+
const redaction = (0, redact_1.redactText)(read.content);
|
|
323
|
+
if (redaction.hits > 0) {
|
|
324
|
+
diagnostic(diagnostics, project, artifact, "secret_rejected", "artifact contains a secret or private-data pattern");
|
|
325
|
+
safetyRejected = true;
|
|
326
|
+
continue;
|
|
327
|
+
}
|
|
328
|
+
if (canaries.some((canary) => read.content.includes(canary))) {
|
|
329
|
+
diagnostic(diagnostics, project, artifact, "canary_rejected", "artifact contains a persistence canary");
|
|
330
|
+
safetyRejected = true;
|
|
331
|
+
continue;
|
|
332
|
+
}
|
|
333
|
+
contents.push({
|
|
334
|
+
artifactRef: artifact.artifactRef,
|
|
335
|
+
path: artifact.path,
|
|
336
|
+
kind: artifact.kind,
|
|
337
|
+
content: read.content,
|
|
338
|
+
contentHash,
|
|
339
|
+
sourceRevision: artifact.provenance.sourceRevision,
|
|
340
|
+
encoding: "utf-8",
|
|
341
|
+
});
|
|
342
|
+
projectBytes += read.bytes.length;
|
|
343
|
+
}
|
|
344
|
+
payloads.push({
|
|
345
|
+
$schema: exports.PROJECT_BRAIN_CONTENT_SCHEMA,
|
|
346
|
+
schemaVersion: exports.PROJECT_BRAIN_CONTENT_VERSION,
|
|
347
|
+
kind: "project-brain-content",
|
|
348
|
+
projectRef: project.projectRef,
|
|
349
|
+
workspaceRef: scan.workspaceRef,
|
|
350
|
+
revision: scan.revision.digest,
|
|
351
|
+
artifacts: safetyRejected ? [] : contents,
|
|
352
|
+
secretValuesExposed: false,
|
|
353
|
+
});
|
|
354
|
+
}
|
|
355
|
+
return {
|
|
356
|
+
payloads,
|
|
357
|
+
diagnostics: diagnostics.sort((a, b) => a.projectRef.localeCompare(b.projectRef)
|
|
358
|
+
|| a.artifactRef.localeCompare(b.artifactRef)
|
|
359
|
+
|| a.code.localeCompare(b.code)),
|
|
360
|
+
};
|
|
361
|
+
}
|
|
362
|
+
//# sourceMappingURL=content.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"content.js","sourceRoot":"","sources":["../../../src/lib/brain/content.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyGA,gFASC;AA2DD,oEAgEC;AA+BD,kFA2GC;AAvXD,mCAAoC;AACpC,uCAAyB;AACzB,2CAA6B;AAC7B,sCAAuC;AACvC,yCAAyF;AACzF,2CAAiD;AACjD,2CAAiD;AAGpC,QAAA,4BAA4B,GAAG,iDAA0D,CAAC;AAC1F,QAAA,6BAA6B,GAAG,iCAA0C,CAAC;AACxF,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,0CAA0C;AAC7B,QAAA,oCAAoC,GAAG,GAAG,GAAG,IAAI,CAAC;AAClD,QAAA,mCAAmC,GAAG,EAAE,CAAC;AACzC,QAAA,uCAAuC,GAAG,GAAG,GAAG,IAAI,CAAC;AAwDlE,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,QAAQ;IACR,WAAW;IACX,UAAU;IACV,YAAY;IACZ,WAAW;IACX,aAAa;IACb,UAAU;IACV,YAAY;IACZ,kBAAkB;IAClB,iBAAiB;IACjB,aAAa;IACb,cAAc;IACd,SAAS;IACT,YAAY;IACZ,UAAU;CACX,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,UAAU;IACV,SAAS;IACT,SAAS;IACT,QAAQ;IACR,aAAa;IACb,OAAO;CACR,CAAC,CAAC;AAEH,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED,8EAA8E;AAC9E,SAAgB,kCAAkC,CAAC,KAAa,EAAE,WAAoB;IACpF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAA,8BAAkB,EAAC,QAAQ,CAAC,IAAI,IAAA,sCAA2B,EAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACzF,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACzG,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,sBAAsB;IAC3F,OAAO,OAAO,CAAC,WAAW,IAAI,IAAA,yCAA8B,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,kBAAkB,GAAG;IACzB,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa;IAC3E,UAAU,EAAE,YAAY,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,aAAa;IAC9E,SAAS,EAAE,cAAc,EAAE,YAAY;CACxC,CAAC;AAEF,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1D,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,UAAU,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAc,EAAE,KAAe;IACvD,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AAC1D,CAAC;AAED,SAAS,4BAA4B;IACnC,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,QAAQ,GAAI,EAAE,CAAC,SAAoC,CAAC,UAAU,IAAI,CAAC,CAAC;IAC1E,MAAM,SAAS,GAAI,EAAE,CAAC,SAAoC,CAAC,WAAW,IAAI,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,KAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC,CAAC;QACvE,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,WAAW,GAAG,EAAE,CAAC,QAAQ,CAAC,iBAAiB,KAAK,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,WAAW,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IAChH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAgB,EAAE,OAAe,EAAE,KAAa;IAC9E,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACvG,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,iBAAiB,QAAQ,IAAI,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAI,KAA+B,CAAC,IAAI,CAAC;QACnD,IAAI,IAAI,KAAK,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC1D,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,uFAAuF;AACvF,SAAgB,4BAA4B,CAAC,SAAiB,EAAE,aAAqB,EAAE,WAAmB,EAAE,QAAgB;IAC1H,4BAA4B,EAAE,CAAC;IAC/B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,kCAAkC,CAAC,QAAQ,EAAE,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IAC/F,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,qEAAqE;QACrE,kEAAkE;QAClE,wEAAwE;QACxE,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC7D,IAAI,SAAS,CAAC,cAAc,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACpE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACxD,IAAI,SAAS,CAAC,IAAI,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,IAAA,8BAAkB,EAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3D,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC1E,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAI,EAAE,CAAC,SAAoC,CAAC,UAAU,CAAC;IACrE,MAAM,cAAc,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAI,EAAE,CAAC,SAAoC,CAAC,WAAW,GAAG,QAAQ,CAAC;IAC/G,MAAM,SAAS,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACnD,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,gBAAgB,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,WAA+B,CAAC;IACpC,IAAI,MAA0B,CAAC;IAC/B,IAAI,CAAC;QACH,WAAW,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC/C,KAAK,MAAM,OAAO,IAAI,YAAY,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;YAC1E,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC1B,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,MAAM,UAAU,GAAG,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACzG,KAAK,MAAM,OAAO,IAAI,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;YAC1E,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;YAC1B,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,MAAM,GAAG,sBAAsB,CAAC,WAAW,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACvG,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACrD,IAAI,MAAM,CAAC,IAAI,GAAG,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YAC/E,IAAI,CAAC,KAAK;gBAAE,MAAM;YAClB,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC;QACD,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;QAC1D,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YAAC,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC1E,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAAC,CAAC;QAC7C,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;QAC/D,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;YAAS,CAAC;QACT,IAAI,MAAM,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,WAAW,KAAK,SAAS;YAAE,EAAE,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,WAA4C,EAC5C,OAA4B,EAC5B,QAA4B,EAC5B,IAAuC,EACvC,OAAe;IAEf,WAAW,CAAC,IAAI,CAAC;QACf,IAAI;QACJ,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,OAAO;KACR,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;IACnE,OAAO,IAAI,GAAG,CAAoC;QAChD,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,aAAa,EAAE,YAAY;KACtH,CAAC,CAAC,GAAG,CAAC,IAAyC,CAAC;QAC/C,CAAC,CAAC,IAAyC;QAC3C,CAAC,CAAC,YAAY,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,SAAgB,mCAAmC,CACjD,IAAsB,EACtB,SAAiB,EACjB,UAAsC,EAAE;IAExC,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,4CAAoC,EAAE,4CAAoC,CAAC,CAAC;IAClI,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,sBAAsB,IAAI,2CAAmC,EAAE,2CAAmC,CAAC,CAAC;IAC1I,MAAM,eAAe,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,IAAI,+CAAuC,EAAE,+CAAuC,CAAC,CAAC;IAC9I,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAoC,EAAE,CAAC;IACxD,MAAM,QAAQ,GAAiC,EAAE,CAAC;IAElD,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAClG,MAAM,QAAQ,GAAkC,EAAE,CAAC;QACnD,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,MAAM,SAAS,GAAG,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACrD,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC;eAC9C,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC;eAC5B,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QACjD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC,IAAA,8BAAkB,EAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;gBAC3D,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,+BAA+B,CAAC,CAAC;gBAC3F,SAAS;YACX,CAAC;YACD,IAAI,CAAC,kCAAkC,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC5E,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,gGAAgG,CAAC,CAAC;gBAC3J,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACrC,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,gEAAgE,CAAC,CAAC;gBAC3H,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;gBACpC,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,wCAAwC,CAAC,CAAC;gBACxG,SAAS;YACX,CAAC;YACD,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtE,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,6EAA6E,CAAC,CAAC;gBACzI,SAAS;YACX,CAAC;YAED,IAAI,IAAwC,CAAC;YAC7C,IAAI,CAAC;gBAAC,IAAI,GAAG,4BAA4B,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;YAAC,CAAC;YACzG,OAAO,KAAK,EAAE,CAAC;gBACb,MAAM,IAAI,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;gBACtC,UAAU,CACR,WAAW,EACX,OAAO,EACP,QAAQ,EACR,IAAI,EACJ,IAAI,KAAK,eAAe;oBACtB,CAAC,CAAC,qFAAqF;oBACvF,CAAC,CAAC,mCAAmC,IAAI,EAAE,CAC9C,CAAC;gBACF,SAAS;YACX,CAAC;YACD,IAAI,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;gBACvD,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,sCAAsC,CAAC,CAAC;gBACtG,SAAS;YACX,CAAC;YACD,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACvC,IAAI,WAAW,KAAK,QAAQ,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;gBACvD,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,sDAAsD,CAAC,CAAC;gBACpH,SAAS;YACX,CAAC;YACD,MAAM,SAAS,GAAG,IAAA,mBAAU,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC3C,IAAI,SAAS,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBACvB,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,oDAAoD,CAAC,CAAC;gBACpH,cAAc,GAAG,IAAI,CAAC;gBACtB,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;gBAC7D,UAAU,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,wCAAwC,CAAC,CAAC;gBACxG,cAAc,GAAG,IAAI,CAAC;gBACtB,SAAS;YACX,CAAC;YAED,QAAQ,CAAC,IAAI,CAAC;gBACZ,WAAW,EAAE,QAAQ,CAAC,WAAW;gBACjC,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,WAAW;gBACX,cAAc,EAAE,QAAQ,CAAC,UAAU,CAAC,cAAc;gBAClD,QAAQ,EAAE,OAAO;aAClB,CAAC,CAAC;YACH,YAAY,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QACpC,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,OAAO,EAAE,oCAA4B;YACrC,aAAa,EAAE,qCAA6B;YAC5C,IAAI,EAAE,uBAAuB;YAC7B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC9B,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ;YACzC,mBAAmB,EAAE,KAAK;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,QAAQ;QACR,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC;eAC3E,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC;eAC1C,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KACnC,CAAC;AACJ,CAAC"}
|
|
@@ -0,0 +1,11 @@
|
|
|
1
|
+
import { type ProjectBrainDescriptor } from "./types";
|
|
2
|
+
export declare const PROJECT_DESCRIPTOR_REVISION_FIELDS: readonly ["$schema", "schemaVersion", "kind", "projectRef", "slug", "name", "aliases", "contextRoot", "agentRoots", "workspaces", "repositoryBinding", "legacySource", "artifacts", "relationships", "writePolicy", "generatedExcludes", "provenance"];
|
|
3
|
+
export declare const PROJECT_DESCRIPTOR_VOLATILE_EXCLUSIONS: readonly ["provenance.indexedAt", "provenance.freshness.checkedAt", "artifacts[*].provenance.indexedAt", "artifacts[*].provenance.freshness.checkedAt"];
|
|
4
|
+
export interface ProjectBrainDescriptorValidation {
|
|
5
|
+
valid: boolean;
|
|
6
|
+
errors: string[];
|
|
7
|
+
descriptor?: ProjectBrainDescriptor;
|
|
8
|
+
}
|
|
9
|
+
/** Executable authority contract used by scanner, proposal generation, and local apply. */
|
|
10
|
+
export declare function validateProjectBrainDescriptor(value: unknown): ProjectBrainDescriptorValidation;
|
|
11
|
+
//# sourceMappingURL=descriptor-validator.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"descriptor-validator.d.ts","sourceRoot":"","sources":["../../../src/lib/brain/descriptor-validator.ts"],"names":[],"mappings":"AACA,OAAO,EAAsB,KAAK,sBAAsB,EAAE,MAAM,SAAS,CAAC;AAa1E,eAAO,MAAM,kCAAkC,wPAIrC,CAAC;AACX,eAAO,MAAM,sCAAsC,yJAGzC,CAAC;AA6CX,MAAM,WAAW,gCAAgC;IAC/C,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,UAAU,CAAC,EAAE,sBAAsB,CAAC;CACrC;AAED,2FAA2F;AAC3F,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,OAAO,GAAG,gCAAgC,CA+G/F"}
|
|
@@ -0,0 +1,185 @@
|
|
|
1
|
+
"use strict";
|
|
2
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
3
|
+
exports.PROJECT_DESCRIPTOR_VOLATILE_EXCLUSIONS = exports.PROJECT_DESCRIPTOR_REVISION_FIELDS = void 0;
|
|
4
|
+
exports.validateProjectBrainDescriptor = validateProjectBrainDescriptor;
|
|
5
|
+
const canonical_1 = require("./canonical");
|
|
6
|
+
const types_1 = require("./types");
|
|
7
|
+
const SAFE_PATH = /^(?!\/)(?![A-Za-z]:)(?!.*\\)(?!.*\/\/)(?!.*(?:^|\/)(?:\.{1,2})(?:\/|$))(?!.*[\u0000-\u001f\u007f])(?!.*\/$)[^/]+(?:\/[^/]+)*$/;
|
|
8
|
+
const GENERATED_PATH = /^(?!\/)(?![A-Za-z]:)(?!.*\\)(?!.*\/\/)(?!.*(?:^|\/)\.{1,2}(?:\/|$))(?!.*[\u0000-\u001f\u007f])(?!.*\/$)[A-Za-z0-9._*?-]+(?:\/[A-Za-z0-9._*?-]+)*$/;
|
|
9
|
+
const PROJECT_REF = /^project:[a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?$/;
|
|
10
|
+
const ARTIFACT_REF = /^artifact:([a-z0-9](?:[a-z0-9-]{0,62}[a-z0-9])?)\/[a-z0-9][a-z0-9._-]{0,95}$/;
|
|
11
|
+
const SUBJECT_REF = /^subject:(repository|youmd|foldermd|eve|custom)\/[a-z0-9](?:[a-z0-9._-]{0,94}[a-z0-9])?(?:\/[a-z0-9](?:[a-z0-9._-]{0,94}[a-z0-9])?)*$/;
|
|
12
|
+
const SOURCE_REVISION = /^(git|sha256|foldermd|eve|heuristic):[A-Za-z0-9._-]{7,128}$/;
|
|
13
|
+
const SHA256_REF = /^sha256:[a-f0-9]{64}$/;
|
|
14
|
+
const LEGACY_FIELDS = [
|
|
15
|
+
"$schema", "schemaVersion", "kind", "projectRef", "slug", "name", "contextRoot", "agentRoots",
|
|
16
|
+
"artifacts", "relationships", "writePolicy", "generatedExcludes", "provenance",
|
|
17
|
+
];
|
|
18
|
+
exports.PROJECT_DESCRIPTOR_REVISION_FIELDS = [
|
|
19
|
+
"$schema", "schemaVersion", "kind", "projectRef", "slug", "name", "aliases", "contextRoot",
|
|
20
|
+
"agentRoots", "workspaces", "repositoryBinding", "legacySource", "artifacts", "relationships",
|
|
21
|
+
"writePolicy", "generatedExcludes", "provenance",
|
|
22
|
+
];
|
|
23
|
+
exports.PROJECT_DESCRIPTOR_VOLATILE_EXCLUSIONS = [
|
|
24
|
+
"provenance.indexedAt", "provenance.freshness.checkedAt",
|
|
25
|
+
"artifacts[*].provenance.indexedAt", "artifacts[*].provenance.freshness.checkedAt",
|
|
26
|
+
];
|
|
27
|
+
const descriptorKeys = new Set([...exports.PROJECT_DESCRIPTOR_REVISION_FIELDS, "revision"]);
|
|
28
|
+
const artifactKeys = new Set(["artifactRef", "subjectRef", "kind", "path", "owner", "authority", "writePolicy", "provenance"]);
|
|
29
|
+
const provenanceKeys = new Set(["source", "sourceRef", "sourceRevision", "indexedAt", "freshness"]);
|
|
30
|
+
const freshnessKeys = new Set(["status", "checkedAt", "staleAfter"]);
|
|
31
|
+
const requiredExcludes = types_1.GENERATED_EXCLUDES.filter((value) => value !== ".reference-repos/**");
|
|
32
|
+
function record(value) {
|
|
33
|
+
return value && typeof value === "object" && !Array.isArray(value) ? value : null;
|
|
34
|
+
}
|
|
35
|
+
function exact(value, allowed, required) {
|
|
36
|
+
const candidate = record(value);
|
|
37
|
+
return Boolean(candidate) && Object.keys(candidate).every((key) => allowed.has(key))
|
|
38
|
+
&& required.every((key) => Object.prototype.hasOwnProperty.call(candidate, key));
|
|
39
|
+
}
|
|
40
|
+
function unique(values) { return new Set(values.map((value) => (0, canonical_1.canonicalize)(value))).size === values.length; }
|
|
41
|
+
function validDate(value) { return typeof value === "string" && Number.isFinite(Date.parse(value)); }
|
|
42
|
+
function validPath(value) { return typeof value === "string" && value.length <= 500 && SAFE_PATH.test(value); }
|
|
43
|
+
function validFreshness(value) {
|
|
44
|
+
if (!exact(value, freshnessKeys, ["status", "checkedAt"]))
|
|
45
|
+
return false;
|
|
46
|
+
return ["fresh", "stale", "unavailable", "unknown"].includes(String(value.status))
|
|
47
|
+
&& validDate(value.checkedAt) && (value.staleAfter === undefined || validDate(value.staleAfter));
|
|
48
|
+
}
|
|
49
|
+
function withoutVolatile(value) {
|
|
50
|
+
if (Array.isArray(value))
|
|
51
|
+
return value.map(withoutVolatile);
|
|
52
|
+
const candidate = record(value);
|
|
53
|
+
if (!candidate)
|
|
54
|
+
return value;
|
|
55
|
+
return Object.fromEntries(Object.entries(candidate).filter(([key]) => key !== "indexedAt" && key !== "checkedAt")
|
|
56
|
+
.map(([key, child]) => [key, withoutVolatile(child)]));
|
|
57
|
+
}
|
|
58
|
+
function generatedMatch(candidate, exclude) {
|
|
59
|
+
if (exclude.startsWith("**/")) {
|
|
60
|
+
const directory = exclude.slice(3).replace(/\/\*\*$/, "");
|
|
61
|
+
return candidate === directory || candidate.startsWith(`${directory}/`) || candidate.includes(`/${directory}/`);
|
|
62
|
+
}
|
|
63
|
+
const prefix = exclude.replace(/\/\*\*$/, "");
|
|
64
|
+
return candidate === prefix || candidate.startsWith(`${prefix}/`);
|
|
65
|
+
}
|
|
66
|
+
/** Executable authority contract used by scanner, proposal generation, and local apply. */
|
|
67
|
+
function validateProjectBrainDescriptor(value) {
|
|
68
|
+
const errors = new Set();
|
|
69
|
+
if (!exact(value, descriptorKeys, [
|
|
70
|
+
"$schema", "schemaVersion", "kind", "projectRef", "slug", "name", "contextRoot", "agentRoots",
|
|
71
|
+
"artifacts", "relationships", "writePolicy", "generatedExcludes", "provenance", "revision",
|
|
72
|
+
]))
|
|
73
|
+
return { valid: false, errors: ["PROJECT_BRAIN_INVALID_DESCRIPTOR"] };
|
|
74
|
+
const descriptor = value;
|
|
75
|
+
const slug = descriptor.slug;
|
|
76
|
+
if (descriptor.$schema !== "https://you.md/schemas/project-brain/v1"
|
|
77
|
+
|| descriptor.schemaVersion !== "you-md/project-brain/v1" || descriptor.kind !== "project"
|
|
78
|
+
|| typeof slug !== "string" || !PROJECT_REF.test(`project:${slug}`) || descriptor.projectRef !== `project:${slug}`
|
|
79
|
+
|| typeof descriptor.name !== "string" || !descriptor.name.trim() || descriptor.name.length > 160
|
|
80
|
+
|| !validPath(descriptor.contextRoot) || !Array.isArray(descriptor.agentRoots)
|
|
81
|
+
|| !unique(descriptor.agentRoots) || descriptor.agentRoots.some((path) => !validPath(path)))
|
|
82
|
+
errors.add("PROJECT_BRAIN_INVALID_DESCRIPTOR");
|
|
83
|
+
if (descriptor.aliases !== undefined && (!Array.isArray(descriptor.aliases) || !unique(descriptor.aliases)
|
|
84
|
+
|| descriptor.aliases.some((alias) => typeof alias !== "string" || !alias.trim() || alias.length > 160)))
|
|
85
|
+
errors.add("PROJECT_BRAIN_INVALID_DESCRIPTOR");
|
|
86
|
+
if (descriptor.workspaces !== undefined) {
|
|
87
|
+
if (!Array.isArray(descriptor.workspaces) || descriptor.workspaces.length === 0 || !unique(descriptor.workspaces)
|
|
88
|
+
|| descriptor.workspaces.some((workspace) => !exact(workspace, new Set(["workspaceRef", "machineRef", "repositoryRef", "worktreeRef", "branchRef", "sourceRevision"]), ["workspaceRef", "machineRef", "repositoryRef", "worktreeRef", "branchRef", "sourceRevision"])
|
|
89
|
+
|| !/^workspace:[a-f0-9]{64}$/.test(String(workspace.workspaceRef))
|
|
90
|
+
|| !/^machine:sha256:[a-f0-9]{64}$/.test(String(workspace.machineRef))
|
|
91
|
+
|| !/^repository:sha256:[a-f0-9]{64}$/.test(String(workspace.repositoryRef))
|
|
92
|
+
|| !/^worktree:sha256:[a-f0-9]{64}$/.test(String(workspace.worktreeRef))
|
|
93
|
+
|| !/^branch:sha256:[a-f0-9]{64}$/.test(String(workspace.branchRef))
|
|
94
|
+
|| !SHA256_REF.test(String(workspace.sourceRevision))))
|
|
95
|
+
errors.add("PROJECT_BRAIN_INVALID_WORKSPACE");
|
|
96
|
+
}
|
|
97
|
+
if (descriptor.repositoryBinding !== undefined) {
|
|
98
|
+
const binding = record(descriptor.repositoryBinding);
|
|
99
|
+
const evidence = record(binding?.evidence);
|
|
100
|
+
if (!exact(binding, new Set(["repositoryRef", "subjectRef", "evidence"]), ["repositoryRef", "evidence"])
|
|
101
|
+
|| !exact(evidence, new Set(["source", "sourceRevision"]), ["source", "sourceRevision"])
|
|
102
|
+
|| !/^repository:sha256:[a-f0-9]{64}$/.test(String(binding?.repositoryRef))
|
|
103
|
+
|| (binding?.subjectRef !== undefined && !/^subject:repository\/[a-z0-9](?:[a-z0-9._-]{0,94}[a-z0-9])?(?:\/[a-z0-9](?:[a-z0-9._-]{0,94}[a-z0-9])?)*$/.test(String(binding.subjectRef)))
|
|
104
|
+
|| !["git_remote", "local_workspace"].includes(String(evidence?.source)) || !SHA256_REF.test(String(evidence?.sourceRevision))) {
|
|
105
|
+
errors.add("PROJECT_BRAIN_INVALID_DESCRIPTOR");
|
|
106
|
+
}
|
|
107
|
+
}
|
|
108
|
+
if (descriptor.legacySource !== undefined && descriptor.legacySource !== null
|
|
109
|
+
&& (!exact(descriptor.legacySource, new Set(["path", "baseContentHash", "preserved"]), ["path", "baseContentHash", "preserved"])
|
|
110
|
+
|| descriptor.legacySource.path !== ".youmd-project" || descriptor.legacySource.preserved !== true
|
|
111
|
+
|| !SHA256_REF.test(String(descriptor.legacySource.baseContentHash))))
|
|
112
|
+
errors.add("PROJECT_BRAIN_INVALID_DESCRIPTOR");
|
|
113
|
+
const policy = record(descriptor.writePolicy);
|
|
114
|
+
const taskWrite = record(policy?.taskWrite);
|
|
115
|
+
const managedPaths = Array.isArray(policy?.managedPaths) ? policy.managedPaths : [];
|
|
116
|
+
if (!exact(policy, new Set(["default", "managedPaths", "taskWrite"]), ["default", "managedPaths", "taskWrite"])
|
|
117
|
+
|| !["read_only", "propose"].includes(String(policy?.default)) || !Array.isArray(policy?.managedPaths)
|
|
118
|
+
|| !unique(managedPaths) || managedPaths.some((path) => !validPath(path))
|
|
119
|
+
|| !exact(taskWrite, new Set(["enabled", "artifactRef"]), ["enabled"]) || typeof taskWrite?.enabled !== "boolean"
|
|
120
|
+
|| (taskWrite?.enabled === false && Object.prototype.hasOwnProperty.call(taskWrite, "artifactRef")))
|
|
121
|
+
errors.add("PROJECT_BRAIN_WRITE_POLICY");
|
|
122
|
+
const artifacts = Array.isArray(descriptor.artifacts) ? descriptor.artifacts : [];
|
|
123
|
+
const artifactMap = new Map();
|
|
124
|
+
if (artifacts.length === 0)
|
|
125
|
+
errors.add("PROJECT_BRAIN_INVALID_ARTIFACT");
|
|
126
|
+
for (const rawArtifact of artifacts) {
|
|
127
|
+
const artifact = record(rawArtifact);
|
|
128
|
+
const provenance = record(artifact?.provenance);
|
|
129
|
+
const ref = String(artifact?.artifactRef || "");
|
|
130
|
+
const match = ARTIFACT_REF.exec(ref);
|
|
131
|
+
if (!exact(artifact, artifactKeys, [...artifactKeys]) || !match || match[1] !== slug || artifactMap.has(ref)
|
|
132
|
+
|| !SUBJECT_REF.test(String(artifact?.subjectRef)) || !validPath(artifact?.path)
|
|
133
|
+
|| !["context", "tasks", "instructions", "agent", "stack", "api", "deployment", "storage", "other"].includes(String(artifact?.kind))
|
|
134
|
+
|| !["repository", "youmd", "foldermd", "eve", "custom"].includes(String(artifact?.owner))
|
|
135
|
+
|| !["canonical", "mirror", "derived", "reference"].includes(String(artifact?.authority))
|
|
136
|
+
|| !["read_only", "propose", "managed_write", "task_write"].includes(String(artifact?.writePolicy)))
|
|
137
|
+
errors.add("PROJECT_BRAIN_INVALID_ARTIFACT");
|
|
138
|
+
if (!exact(provenance, provenanceKeys, [...provenanceKeys])
|
|
139
|
+
|| !["descriptor", "repository", "project-context", "foldermd", "eve", "legacy", "heuristic", "youmd", "custom"].includes(String(provenance?.source))
|
|
140
|
+
|| !SUBJECT_REF.test(String(provenance?.sourceRef)) || !SOURCE_REVISION.test(String(provenance?.sourceRevision))
|
|
141
|
+
|| !validDate(provenance?.indexedAt) || !validFreshness(provenance?.freshness))
|
|
142
|
+
errors.add("PROJECT_BRAIN_INVALID_PROVENANCE");
|
|
143
|
+
if (artifact?.writePolicy === "managed_write" && !managedPaths.includes(artifact.path))
|
|
144
|
+
errors.add("PROJECT_BRAIN_WRITE_POLICY");
|
|
145
|
+
artifactMap.set(ref, artifact || {});
|
|
146
|
+
}
|
|
147
|
+
const taskTarget = typeof taskWrite?.artifactRef === "string" ? artifactMap.get(taskWrite.artifactRef) : undefined;
|
|
148
|
+
if (taskWrite?.enabled && (!taskTarget || taskTarget.kind !== "tasks" || taskTarget.writePolicy !== "task_write"))
|
|
149
|
+
errors.add("PROJECT_BRAIN_WRITE_POLICY");
|
|
150
|
+
for (const artifact of artifactMap.values())
|
|
151
|
+
if (artifact.writePolicy === "task_write"
|
|
152
|
+
&& (!taskWrite?.enabled || artifact.artifactRef !== taskWrite.artifactRef))
|
|
153
|
+
errors.add("PROJECT_BRAIN_WRITE_POLICY");
|
|
154
|
+
if (!Array.isArray(descriptor.relationships) || descriptor.relationships.some((relationship) => !exact(relationship, new Set(["type", "subjectRef"]), ["type", "subjectRef"])
|
|
155
|
+
|| !["depends_on", "provides", "references", "mirrors"].includes(String(relationship.type))
|
|
156
|
+
|| !SUBJECT_REF.test(String(relationship.subjectRef))))
|
|
157
|
+
errors.add("PROJECT_BRAIN_INVALID_DESCRIPTOR");
|
|
158
|
+
const excludes = Array.isArray(descriptor.generatedExcludes) ? descriptor.generatedExcludes : [];
|
|
159
|
+
if (!Array.isArray(descriptor.generatedExcludes) || !unique(excludes)
|
|
160
|
+
|| requiredExcludes.some((required) => !excludes.includes(required))
|
|
161
|
+
|| excludes.some((exclude) => typeof exclude !== "string" || !GENERATED_PATH.test(exclude)))
|
|
162
|
+
errors.add("PROJECT_BRAIN_GENERATED_EXCLUDES");
|
|
163
|
+
for (const artifact of artifactMap.values())
|
|
164
|
+
if (excludes.some((exclude) => generatedMatch(String(artifact.path), String(exclude)))) {
|
|
165
|
+
errors.add("PROJECT_BRAIN_GENERATED_ARTIFACT");
|
|
166
|
+
}
|
|
167
|
+
const provenance = record(descriptor.provenance);
|
|
168
|
+
if (!exact(provenance, new Set(["source", "descriptorPath", "sourceRevision", "indexedAt", "freshness"]), ["source", "descriptorPath", "sourceRevision", "indexedAt", "freshness"])
|
|
169
|
+
|| !["declared", "legacy-adoption", "heuristic-adoption"].includes(String(provenance?.source))
|
|
170
|
+
|| provenance?.descriptorPath !== ".you-project" || !/^(git|sha256):[A-Za-z0-9._-]{7,128}$/.test(String(provenance?.sourceRevision))
|
|
171
|
+
|| !validDate(provenance?.indexedAt) || !validFreshness(provenance?.freshness))
|
|
172
|
+
errors.add("PROJECT_BRAIN_INVALID_PROVENANCE");
|
|
173
|
+
const revision = record(descriptor.revision);
|
|
174
|
+
const legacy = (0, canonical_1.canonicalize)(revision?.preimageFields) === (0, canonical_1.canonicalize)([...LEGACY_FIELDS]);
|
|
175
|
+
const fields = legacy ? LEGACY_FIELDS : exports.PROJECT_DESCRIPTOR_REVISION_FIELDS;
|
|
176
|
+
const preimage = Object.fromEntries(fields.map((field) => [field, withoutVolatile(descriptor[field])]));
|
|
177
|
+
if (!exact(revision, new Set(["canonicalization", "hashAlgorithm", "preimageFields", "volatileExclusions", "digest"]), ["canonicalization", "hashAlgorithm", "preimageFields", "volatileExclusions", "digest"])
|
|
178
|
+
|| revision?.canonicalization !== "RFC8785" || revision.hashAlgorithm !== "SHA-256"
|
|
179
|
+
|| (0, canonical_1.canonicalize)(revision.preimageFields) !== (0, canonical_1.canonicalize)([...fields])
|
|
180
|
+
|| (0, canonical_1.canonicalize)(revision.volatileExclusions) !== (0, canonical_1.canonicalize)([...exports.PROJECT_DESCRIPTOR_VOLATILE_EXCLUSIONS])
|
|
181
|
+
|| revision.digest !== `sha256:${(0, canonical_1.sha256)((0, canonical_1.canonicalize)(preimage))}`)
|
|
182
|
+
errors.add("PROJECT_BRAIN_REVISION_MISMATCH");
|
|
183
|
+
return errors.size ? { valid: false, errors: [...errors] } : { valid: true, errors: [], descriptor: value };
|
|
184
|
+
}
|
|
185
|
+
//# sourceMappingURL=descriptor-validator.js.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"descriptor-validator.js","sourceRoot":"","sources":["../../../src/lib/brain/descriptor-validator.ts"],"names":[],"mappings":";;;AA0EA,wEA+GC;AAzLD,2CAAmD;AACnD,mCAA0E;AAE1E,MAAM,SAAS,GAAG,+HAA+H,CAAC;AAClJ,MAAM,cAAc,GAAG,mJAAmJ,CAAC;AAC3K,MAAM,WAAW,GAAG,gDAAgD,CAAC;AACrE,MAAM,YAAY,GAAG,8EAA8E,CAAC;AACpG,MAAM,WAAW,GAAG,uIAAuI,CAAC;AAC5J,MAAM,eAAe,GAAG,6DAA6D,CAAC;AACtF,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAC3C,MAAM,aAAa,GAAG;IACpB,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY;IAC7F,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,mBAAmB,EAAE,YAAY;CACtE,CAAC;AACE,QAAA,kCAAkC,GAAG;IAChD,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa;IAC1F,YAAY,EAAE,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe;IAC7F,aAAa,EAAE,mBAAmB,EAAE,YAAY;CACxC,CAAC;AACE,QAAA,sCAAsC,GAAG;IACpD,sBAAsB,EAAE,gCAAgC;IACxD,mCAAmC,EAAE,6CAA6C;CAC1E,CAAC;AAEX,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,0CAAkC,EAAE,UAAU,CAAC,CAAC,CAAC;AACpF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CAAC;AAC/H,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AACpG,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AACrE,MAAM,gBAAgB,GAAG,0BAAkB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,qBAAqB,CAAC,CAAC;AAE/F,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/G,CAAC;AAED,SAAS,KAAK,CAAC,KAAc,EAAE,OAAoB,EAAE,QAA2B;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,OAAO,OAAO,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,SAAU,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;WAChF,QAAQ,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAU,EAAE,GAAG,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,MAAM,CAAC,MAAiB,IAAa,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,wBAAY,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AAClI,SAAS,SAAS,CAAC,KAAc,IAAqB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/H,SAAS,SAAS,CAAC,KAAc,IAAqB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAEzI,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;WAC7E,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7B,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,WAAW,CAAC;SAC9G,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,cAAc,CAAC,SAAiB,EAAE,OAAe;IACxD,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAC1D,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClH,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC9C,OAAO,SAAS,KAAK,MAAM,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AACpE,CAAC;AAQD,2FAA2F;AAC3F,SAAgB,8BAA8B,CAAC,KAAc;IAC3D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,cAAc,EAAE;QAChC,SAAS,EAAE,eAAe,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY;QAC7F,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,mBAAmB,EAAE,YAAY,EAAE,UAAU;KAC3F,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,kCAAkC,CAAC,EAAE,CAAC;IAC1E,MAAM,UAAU,GAAG,KAAK,CAAC;IACzB,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC;IAC7B,IAAI,UAAU,CAAC,OAAO,KAAK,yCAAyC;WAC/D,UAAU,CAAC,aAAa,KAAK,yBAAyB,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS;WACvF,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,IAAI,UAAU,CAAC,UAAU,KAAK,WAAW,IAAI,EAAE;WAC/G,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG;WAC9F,CAAC,SAAS,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC;WAC3E,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAC9I,IAAI,UAAU,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;WACrG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAE3J,IAAI,UAAU,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC;eAC5G,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,EAC3D,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,EACtG,CAAC,cAAc,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC;mBAC3F,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;mBAChE,CAAC,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;mBACnE,CAAC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;mBACzE,CAAC,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;mBACrE,CAAC,8BAA8B,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;mBACjE,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC5G,CAAC;IAED,IAAI,UAAU,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,YAAY,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC,eAAe,EAAE,UAAU,CAAC,CAAC;eACnG,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;eACrF,CAAC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;eACxE,CAAC,OAAO,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,2GAA2G,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;eACpL,CAAC,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC;YACjI,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,KAAK,SAAS,IAAI,UAAU,CAAC,YAAY,KAAK,IAAI;WACxE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC;eAC3H,UAAU,CAAC,YAAY,CAAC,IAAI,KAAK,gBAAgB,IAAI,UAAU,CAAC,YAAY,CAAC,SAAS,KAAK,IAAI;eAC/F,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAE1H,MAAM,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;IACpF,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;WAC1G,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,YAAY,CAAC;WACnG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;WACtE,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,OAAO,SAAS,EAAE,OAAO,KAAK,SAAS;WAC9G,CAAC,SAAS,EAAE,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAEhJ,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;IAC/D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IACzE,KAAK,MAAM,WAAW,IAAI,SAAS,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAChD,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;eACvG,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC;eAC7E,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;eACjI,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;eACvF,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;eACtF,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;QACpJ,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC,GAAG,cAAc,CAAC,CAAC;eACtD,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;eAClJ,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;eAC7G,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACjI,IAAI,QAAQ,EAAE,WAAW,KAAK,eAAe,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACjI,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,SAAS,EAAE,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnH,IAAI,SAAS,EAAE,OAAO,IAAI,CAAC,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,WAAW,KAAK,YAAY,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAC5J,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,MAAM,EAAE;QAAE,IAAI,QAAQ,CAAC,WAAW,KAAK,YAAY;eACjF,CAAC,CAAC,SAAS,EAAE,OAAO,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,CAAC,WAAW,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IAEvH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,EAAE,CAC7F,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;WAC1E,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;WACxF,CAAC,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IACzG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;IACjG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;WAChE,gBAAgB,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;WACjE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAC9I,KAAK,MAAM,QAAQ,IAAI,WAAW,CAAC,MAAM,EAAE;QAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACpI,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;QACjD,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,EACtG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;WACtE,CAAC,CAAC,UAAU,EAAE,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;WAC3F,UAAU,EAAE,cAAc,KAAK,cAAc,IAAI,CAAC,sCAAsC,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;WACjI,CAAC,SAAS,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC;QAAE,MAAM,CAAC,GAAG,CAAC,kCAAkC,CAAC,CAAC;IAEjI,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAA,wBAAY,EAAC,QAAQ,EAAE,cAAc,CAAC,KAAK,IAAA,wBAAY,EAAC,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,0CAAkC,CAAC;IAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAA4B,CAAC;IACnI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC,EACnH,CAAC,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,QAAQ,CAAC,CAAC;WACrF,QAAQ,EAAE,gBAAgB,KAAK,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS;WAChF,IAAA,wBAAY,EAAC,QAAQ,CAAC,cAAc,CAAC,KAAK,IAAA,wBAAY,EAAC,CAAC,GAAG,MAAM,CAAC,CAAC;WACnE,IAAA,wBAAY,EAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,IAAA,wBAAY,EAAC,CAAC,GAAG,8CAAsC,CAAC,CAAC;WACvG,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAA,kBAAM,EAAC,IAAA,wBAAY,EAAC,QAAQ,CAAC,CAAC,EAAE;QAAE,MAAM,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IACnH,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,KAA+B,EAAE,CAAC;AACxI,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/lib/brain/discovery.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;
|
|
1
|
+
{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/lib/brain/discovery.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAG5C,OAAO,EAIL,eAAe,EAQf,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,SAAS,CAAC;AAWjB,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAElE;AA4DD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,QAAQ,SAAI,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,MAAM,EAAE,CAwBlG;AAoRD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAUrF;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,EAAE,KAAK,CAAC,EAAE,iBAAiB,GAAG,mBAAmB,CAsH5K;AAED,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAInH;AAED,wBAAgB,wBAAwB,CAAC,KAAK,GAAE,MAAM,EAAO,GAAG,MAAM,EAAE,CAEvE"}
|