zigmini 1.0.0-beta.3 → 1.1.0-beta.1

package/src/security-allow.ts

@@ -37,14 +37,88 @@ export interface SecurityIntent {
 }
 export type SecurityReceipt =
 	| { readonly kind: "message"; readonly conv: string; readonly messageSeq: number }
-	| { readonly kind: "answer"; readonly decisionId: string; readonly submissionId: string };
-export interface SecurityHoldRecord {
+	| { readonly kind: "answer"; readonly decisionId: string; readonly submissionId: string }
+	| ArtifactReviewReceipt | ArtifactReleaseReceipt;
+export interface MessageSecurityHoldRecord {
 	readonly state: HeldState;
 	readonly key: string | null;
 	readonly intent: SecurityIntent | null;
 	readonly dispatchReserved: boolean;
 	readonly receipt: SecurityReceipt | null;
 }
+export type SecurityHoldRecord = MessageSecurityHoldRecord | ArtifactSecurityHold;
+export interface ArtifactReadBinding {
+	readonly inputId: string;
+	readonly activationId: string | null;
+	readonly managedBindingDigest: string;
+}
+export interface ArtifactReviewReceipt {
+	readonly kind: "collaboration_artifact_review";
+	readonly holdId: string;
+	readonly decisionId: string;
+	readonly revision: number;
+	readonly submissionId: string;
+	readonly scopeDigest: string;
+	readonly reviewState: "allowed" | "denied" | "cancelled";
+	readonly resource: { readonly requestId: string; readonly artifactId: string; readonly resultId: string };
+	readonly effect: "review_recorded";
+	readonly contentReleased: false;
+}
+export interface ArtifactReleaseReceipt {
+	readonly kind: "collaboration_artifact";
+	readonly readOperationId: string;
+	readonly holdId: string;
+	readonly requestId: string;
+	readonly artifactId: string;
+	readonly grantRevision: number;
+	readonly representationSha256: string;
+	readonly scopeDigest: string;
+	readonly continuationId: string | null;
+	readonly boundScopeDigest: string | null;
+	readonly releaseState: "claimed" | "released" | "unknown";
+}
+/**
+ * What the owner is told about a held read: the finding kinds with their counts (never a flagged value) and the pages
+ * the native reader rendered without any text layer, which no check could cover (held fail-closed).
+ */
+export interface ArtifactReviewSummary {
+	readonly findings: readonly { readonly kind: string; readonly count: number }[];
+	readonly unscannedPages: readonly number[];
+}
+export interface ArtifactSecurityHold {
+	readonly id: string;
+	readonly decisionId: string;
+	readonly revision: number;
+	readonly source: "collaboration_artifact";
+	readonly purpose: "collaboration_artifact_review";
+	readonly state: "pending" | "allowed" | "denied" | "cancelled" | "invalidated";
+	/** Absent on a hold written before summaries were recorded. */
+	readonly summary?: ArtifactReviewSummary;
+	readonly resourceRef: { readonly kind: "collaboration_artifact"; readonly requestId: string; readonly artifactId: string; readonly resultId: string; readonly originalSha256: string };
+	readonly representation: {
+		readonly sha256: string; readonly revision: number; readonly view: "raw" | "text" | "pages";
+		readonly range: { readonly start: number; readonly end: number }; readonly coverageDigest: string; readonly scanRevision: string;
+	};
+	readonly readScope: ArtifactReadBinding & {
+		readonly artifactGrantId: string; readonly grantRevision: number; readonly granteeConv: string;
+		readonly lifecycleEpoch: number; readonly recipientAuthorityEpoch?: number;
+	};
+	readonly scopeDigest: string;
+	readonly readOperationId: string;
+	readonly ownerPrincipalRef: string;
+	readonly answerSubmissionId: string | null;
+	readonly reviewReceipt: { readonly decisionRevision: number; readonly choice: "allow" | "deny" | "cancel" } | null;
+	readonly readArguments: { readonly requestId: string; readonly artifactId: string; readonly view?: "text" | "pages"; readonly cursor?: string; readonly limit?: number };
+	readonly continuation: {
+		readonly id: string; readonly originInputSeq: number; readonly originOwnerInputRevision: number;
+		readonly settledReceipt: (ArtifactReadBinding & { readonly settlementId: string }) | null;
+		readonly state: "unrequested" | "queued" | "dispatched" | "released" | "cancelled" | "invalidated" | "unknown";
+		readonly resumeSubmissionId: string | null; readonly reviewedScopeDigest: string | null;
+		readonly targetBinding: ArtifactReadBinding | null; readonly boundScopeDigest: string | null;
+		readonly dispatchReceiptId: string | null; readonly releaseReceiptId: string | null;
+	};
+	readonly invalidationReason: string | null;
+}
 export class SecurityRuntimeError extends Error {
 	constructor(
 		readonly code: "held_conflict" | "allowlist_conflict" | SecurityErrorCode,
@@ -55,6 +129,9 @@ export class SecurityRuntimeError extends Error {
 export const securityDecision = (decision: { readonly payload: unknown }): boolean =>
 	typeof decision.payload === "object" && decision.payload !== null &&
 	"kind" in decision.payload && decision.payload.kind === "security-check";
+/** The security decision of a held collaboration artifact read; every other security decision is a message or answer hold. */
+export const artifactReviewDecision = (decision: { readonly payload: unknown }): boolean =>
+	securityDecision(decision) && (decision.payload as { readonly purpose?: unknown }).purpose === "collaboration_artifact_review";
 
 /** A delimiter is meaningful only if its matching quote can be proved. No decoding or normalization. */
 function quotedEnd(text: string, start: number, quote: string): number | null {

package/src/security-check.ts

@@ -3,7 +3,7 @@ import ruleConfig from "../scripts/secret-scan.rules.json";
 import allowConfig from "../scripts/secret-scan.allow.json";
 import { readVoiceSetting, writeVoiceSetting } from "./voice-setting.ts";
 import { isDeepStrictEqual } from "node:util";
-import { canonicalSecurityValue, SecurityRuntimeError, type HeldState, type SecurityApprover, type SecurityHoldRecord, type SecurityIntent, type SecurityReceipt } from "./security-allow.ts";
+import { canonicalSecurityValue, SecurityRuntimeError, type HeldState, type SecurityApprover, type MessageSecurityHoldRecord as SecurityHoldRecord, type SecurityIntent, type SecurityReceipt } from "./security-allow.ts";
 import { SecurityBaselineError, type Store } from "./store.ts";
 import type { SecurityBaseline } from "./security-baseline.ts";
 import { say, type Text } from "./server-text.ts";