@2kw/ai 7.3.0-dev.5 → 7.3.0-dev.8

package/dist/relay-protocol/pairing.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Local bridge pairing (#1377, plan P3, P4, P6, P10): the redeem proof, the pairing poll token,
+ * the six-word fingerprint and the device configHash. The cli copies this file into
+ * `cli/src/relay-protocol/`, so it imports `node:crypto` and siblings only and runs on Node 18.
+ * test/vectors/pairing.json pins every function here for the backend too.
+ */
+import type { KeyObject } from "node:crypto";
+export declare const PAIR_PROOF_PREFIX = "localbridge-pair-v1";
+export declare const PAIRING_TYP = "localbridge-pairing+jwt";
+/** The C8 shape: what the bridge signs to redeem a pairing code. */
+export declare function pairProofInput(code: string, kid: string, publicKey: string, name: string, os: string): string;
+export declare function signPairProof(key: KeyObject, code: string, kid: string, publicKey: string, name: string, os: string): string;
+/** The pairing poll token: `iss` is the pairing id, `aud` is `<issuer>/v1/local-bridge/pairings`. */
+export declare function mintPairingJwt(key: KeyObject, kid: string, pairingId: string, issuer: string, nowSec: number): string;
+/** Six words: the first 66 bits of SHA-256(raw public key), big-endian, as six 11-bit indices. */
+export declare function fingerprintWords(rawPublicKey: Uint8Array): string[];
+export interface DeviceConfig {
+    shell: string | null;
+    workspaces: readonly {
+        name: string;
+        path: string;
+    }[];
+}
+/** C10 over what a device exposes: `{shell: <path or null>, workspaces sorted by name}`. */
+export declare function deviceConfigHash(config: DeviceConfig): string;
+//# sourceMappingURL=pairing.d.ts.map

package/dist/relay-protocol/pairing.js

@@ -0,0 +1,49 @@
+import { b64url, randomHex, sha256, sha256b64url } from "./b64.js";
+import { canonicalJson } from "./canonical-json.js";
+import { signJws } from "./jws.js";
+import { signBytes } from "./keys.js";
+import { MAX_JWT_LIFETIME_SECONDS } from "./wire.js";
+import { WORDLIST } from "./wordlist.js";
+export const PAIR_PROOF_PREFIX = "localbridge-pair-v1";
+export const PAIRING_TYP = "localbridge-pairing+jwt";
+/** The C8 shape: what the bridge signs to redeem a pairing code. */
+export function pairProofInput(code, kid, publicKey, name, os) {
+    return `${PAIR_PROOF_PREFIX}\n${code}\n${kid}\n${publicKey}\n${name}\n${os}`;
+}
+export function signPairProof(key, code, kid, publicKey, name, os) {
+    return b64url(signBytes(key, pairProofInput(code, kid, publicKey, name, os)));
+}
+/** The pairing poll token: `iss` is the pairing id, `aud` is `<issuer>/v1/local-bridge/pairings`. */
+export function mintPairingJwt(key, kid, pairingId, issuer, nowSec) {
+    return signJws(PAIRING_TYP, kid, {
+        iss: pairingId,
+        aud: `${issuer}/v1/local-bridge/pairings`,
+        iat: nowSec,
+        exp: nowSec + MAX_JWT_LIFETIME_SECONDS,
+        jti: randomHex(16),
+    }, key);
+}
+/** Six words: the first 66 bits of SHA-256(raw public key), big-endian, as six 11-bit indices. */
+export function fingerprintWords(rawPublicKey) {
+    if (rawPublicKey.length !== 32) {
+        throw new Error("Ed25519 public key must be 32 bytes");
+    }
+    const digest = sha256(rawPublicKey);
+    const words = [];
+    for (let i = 0; i < 6; i += 1) {
+        let index = 0;
+        for (let bit = i * 11; bit < (i + 1) * 11; bit += 1) {
+            index = (index << 1) | ((digest[bit >> 3] >> (7 - (bit & 7))) & 1);
+        }
+        words.push(WORDLIST[index]);
+    }
+    return words;
+}
+/** C10 over what a device exposes: `{shell: <path or null>, workspaces sorted by name}`. */
+export function deviceConfigHash(config) {
+    const workspaces = config.workspaces
+        .map(({ name, path }) => ({ name, path }))
+        .sort((a, b) => (a.name < b.name ? -1 : a.name > b.name ? 1 : 0));
+    return `sha256:${sha256b64url(canonicalJson({ shell: config.shell, workspaces }))}`;
+}
+//# sourceMappingURL=pairing.js.map

package/dist/relay-protocol/wire.d.ts

@@ -0,0 +1,101 @@
+/** Wire constants and message shapes shared by relay and hub. Spec §6, plan contract C4–C11. */
+export declare const REQUEST_TYP = "mcprelay-request+jwt";
+export declare const RELAY_TYP = "relay+jwt";
+export declare const PROTOCOL_VERSION = 1;
+export declare const MAX_BODY_BYTES: number;
+export declare const MAX_FRAME_PAYLOAD_BYTES: number;
+/**
+ * Frames a single POST to the hub may carry. The hub keeps the signatures of exactly this many
+ * recent frames, refuses a frames POST carrying more, and the relay never batches more — so an
+ * identical retry of the latest POST is always fully inside that window and is answered
+ * idempotently instead of being mistaken for a rewritten frame.
+ */
+export declare const MAX_FRAMES_PER_POST = 64;
+/**
+ * Cancel ids one poll may carry, in either direction. The hub puts at most this many tombstones
+ * into a poll response, oldest first, and the relay acks at most this many per poll — because an
+ * ack rides in the poll's QUERY STRING, and a request line plus headers has to stay inside the
+ * 16 KiB Node allows and the 8 KiB nginx and Apache ship with. An id is `rq_` + 32 hex = 35
+ * characters plus a comma, so 64 ids are 2 304 bytes: under 3 KiB with the rest of the URL,
+ * whatever else a proxy on the hop adds. Anything past the cap simply waits for the next poll.
+ */
+export declare const MAX_CANCELS_PER_POLL = 64;
+export declare const MAX_HEADER_BYTES: number;
+export declare const CLOCK_SKEW_SECONDS = 30;
+export declare const MAX_JWT_LIFETIME_SECONDS = 60;
+export declare const POLL_WAIT_SECONDS = 25;
+export declare const ACCEPTANCE_MS = 10000;
+export declare const OWNER_LEASE_MS = 30000;
+export declare const OFFLINE_MS = 60000;
+export declare const CALL_TOTAL_MS: number;
+export declare const LISTEN_TOTAL_MS: number;
+export declare const MAX_HEAD_DEADLINE_MS: number;
+export declare const CONTROL_RESERVE = 32;
+export type RequestClass = "CALL" | "CONTROL" | "LISTEN";
+export declare const REQUEST_CLASSES: readonly RequestClass[];
+export type HeaderPair = [string, string];
+export interface Envelope {
+    id: string;
+    server: string;
+    method: string;
+    url: string;
+    headers: HeaderPair[];
+    assertion: string;
+    /** base64url of the request body; the empty string for no body. */
+    body: string;
+}
+export interface PolledRequest {
+    requestClass: RequestClass;
+    envelope: Envelope;
+}
+export interface PollBody {
+    generation: string;
+    requests: PolledRequest[];
+    cancels: string[];
+    jwksRefresh: boolean;
+}
+export interface ForwardRequest {
+    relayId: string;
+    requestClass: RequestClass;
+    /** epoch seconds, equal to the assertion's dl claim */
+    headDeadlineAt: number;
+    envelope: Envelope;
+}
+/**
+ * Spec §6.7. The array is the source and the union is derived from it, so the set is enumerable
+ * at run time: the golden vectors publish a row per code and a unit test checks that table
+ * against this list, which is what stops the documented codes and the implemented ones drifting.
+ */
+export declare const ERROR_CODES: readonly ["connector_not_in_inventory", "relay_not_active", "relay_offline", "relay_unavailable", "relay_unknown", "not_allowlisted", "assertion_invalid", "config_changed", "stdio_capacity", "upstream_unreachable", "upstream_timeout", "upstream_incomplete", "outcome_unknown", "response_invalid", "body_too_large", "session_lost", "relay_in_use", "request_unknown", "protocol_unsupported"];
+export type ErrorCode = (typeof ERROR_CODES)[number];
+export type ForwardLine = {
+    kind: "hub";
+    code: ErrorCode;
+    message: string;
+} | {
+    kind: "frame";
+    frame: import("./frames.js").Frame;
+};
+export interface RequestAssertionClaims {
+    iss: string;
+    aud: string;
+    org: string;
+    rid: string;
+    srv: string;
+    cnu: string;
+    cfg: string;
+    cls: RequestClass;
+    htm: string;
+    htu: string;
+    hdh: string;
+    bdh: string;
+    dl: number;
+    sub: string;
+    agt?: string;
+    run?: string;
+    cid?: string;
+    iat: number;
+    exp: number;
+    jti: string;
+}
+//# sourceMappingURL=wire.d.ts.map

package/dist/relay-protocol/wire.js

@@ -0,0 +1,63 @@
+// GENERATED COPY of relay/src/protocol/wire.ts (#1377). Do not edit here: edit the relay's file,
+// then run `npm run sync:relay-protocol` in cli/. `npm run check:relay-protocol` fails on any drift.
+/** Wire constants and message shapes shared by relay and hub. Spec §6, plan contract C4–C11. */
+export const REQUEST_TYP = "mcprelay-request+jwt";
+export const RELAY_TYP = "relay+jwt";
+export const PROTOCOL_VERSION = 1;
+export const MAX_BODY_BYTES = 8 * 1024 * 1024;
+export const MAX_FRAME_PAYLOAD_BYTES = 1024 * 1024;
+/**
+ * Frames a single POST to the hub may carry. The hub keeps the signatures of exactly this many
+ * recent frames, refuses a frames POST carrying more, and the relay never batches more — so an
+ * identical retry of the latest POST is always fully inside that window and is answered
+ * idempotently instead of being mistaken for a rewritten frame.
+ */
+export const MAX_FRAMES_PER_POST = 64;
+/**
+ * Cancel ids one poll may carry, in either direction. The hub puts at most this many tombstones
+ * into a poll response, oldest first, and the relay acks at most this many per poll — because an
+ * ack rides in the poll's QUERY STRING, and a request line plus headers has to stay inside the
+ * 16 KiB Node allows and the 8 KiB nginx and Apache ship with. An id is `rq_` + 32 hex = 35
+ * characters plus a comma, so 64 ids are 2 304 bytes: under 3 KiB with the rest of the URL,
+ * whatever else a proxy on the hop adds. Anything past the cap simply waits for the next poll.
+ */
+export const MAX_CANCELS_PER_POLL = 64;
+export const MAX_HEADER_BYTES = 64 * 1024;
+export const CLOCK_SKEW_SECONDS = 30;
+export const MAX_JWT_LIFETIME_SECONDS = 60;
+export const POLL_WAIT_SECONDS = 25;
+export const ACCEPTANCE_MS = 10_000;
+export const OWNER_LEASE_MS = 30_000;
+export const OFFLINE_MS = 60_000;
+export const CALL_TOTAL_MS = 10 * 60_000;
+export const LISTEN_TOTAL_MS = 60 * 60_000;
+export const MAX_HEAD_DEADLINE_MS = 10 * 60_000;
+export const CONTROL_RESERVE = 32;
+export const REQUEST_CLASSES = ["CALL", "CONTROL", "LISTEN"];
+/**
+ * Spec §6.7. The array is the source and the union is derived from it, so the set is enumerable
+ * at run time: the golden vectors publish a row per code and a unit test checks that table
+ * against this list, which is what stops the documented codes and the implemented ones drifting.
+ */
+export const ERROR_CODES = [
+    "connector_not_in_inventory",
+    "relay_not_active",
+    "relay_offline",
+    "relay_unavailable",
+    "relay_unknown",
+    "not_allowlisted",
+    "assertion_invalid",
+    "config_changed",
+    "stdio_capacity",
+    "upstream_unreachable",
+    "upstream_timeout",
+    "upstream_incomplete",
+    "outcome_unknown",
+    "response_invalid",
+    "body_too_large",
+    "session_lost",
+    "relay_in_use",
+    "request_unknown",
+    "protocol_unsupported",
+];
+//# sourceMappingURL=wire.js.map

package/dist/relay-protocol/wordlist.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The BIP-39 English word list, 2048 words: the alphabet of the six-word pairing fingerprint
+ * (plan P6). Copied unchanged from
+ * https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt, whose SHA-256 (LF line
+ * endings, trailing newline) is 2f5eed53a4727b4bf8880d8f3f199efc90e58503646d9ff8eff3a2ed3b24dbda;
+ * test/unit/pairing.test.ts checks this copy against it. The backend reads the same file as
+ * backend/src/main/resources/localbridge/wordlist-en.txt.
+ *
+ * BIP 39 is published under the MIT License ("License: MIT" in its header,
+ * https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki).
+ *
+ * Copyright (c) 2013 Marek Palatinus, Pavol Rusnak, Aaron Voisine, Sean Bowe (the BIP 39 authors)
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy of this software
+ * and associated documentation files (the "Software"), to deal in the Software without
+ * restriction, including without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the
+ * Software is furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in all copies or
+ * substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
+ * BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
+ * DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+ */
+export declare const WORDLIST: readonly string[];
+//# sourceMappingURL=wordlist.d.ts.map

package/dist/relay-protocol/wordlist.js

@@ -0,0 +1,289 @@
+// GENERATED COPY of relay/src/protocol/wordlist.ts (#1377). Do not edit here: edit the relay's file,
+// then run `npm run sync:relay-protocol` in cli/. `npm run check:relay-protocol` fails on any drift.
+/**
+ * The BIP-39 English word list, 2048 words: the alphabet of the six-word pairing fingerprint
+ * (plan P6). Copied unchanged from
+ * https://github.com/bitcoin/bips/blob/master/bip-0039/english.txt, whose SHA-256 (LF line
+ * endings, trailing newline) is 2f5eed53a4727b4bf8880d8f3f199efc90e58503646d9ff8eff3a2ed3b24dbda;
+ * test/unit/pairing.test.ts checks this copy against it. The backend reads the same file as
+ * backend/src/main/resources/localbridge/wordlist-en.txt.
+ *
+ * BIP 39 is published under the MIT License ("License: MIT" in its header,
+ * https://github.com/bitcoin/bips/blob/master/bip-0039.mediawiki).
+ *
+ * Copyright (c) 2013 Marek Palatinus, Pavol Rusnak, Aaron Voisine, Sean Bowe (the BIP 39 authors)
+ *
+ * Permission is hereby granted, free of charge, to any person obtaining a copy of this software
+ * and associated documentation files (the "Software"), to deal in the Software without
+ * restriction, including without limitation the rights to use, copy, modify, merge, publish,
+ * distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the
+ * Software is furnished to do so, subject to the following conditions:
+ *
+ * The above copyright notice and this permission notice shall be included in all copies or
+ * substantial portions of the Software.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
+ * BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+ * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
+ * DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+ * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+ */
+export const WORDLIST = [
+    "abandon", "ability", "able", "about", "above", "absent", "absorb", "abstract",
+    "absurd", "abuse", "access", "accident", "account", "accuse", "achieve", "acid",
+    "acoustic", "acquire", "across", "act", "action", "actor", "actress", "actual",
+    "adapt", "add", "addict", "address", "adjust", "admit", "adult", "advance",
+    "advice", "aerobic", "affair", "afford", "afraid", "again", "age", "agent",
+    "agree", "ahead", "aim", "air", "airport", "aisle", "alarm", "album",
+    "alcohol", "alert", "alien", "all", "alley", "allow", "almost", "alone",
+    "alpha", "already", "also", "alter", "always", "amateur", "amazing", "among",
+    "amount", "amused", "analyst", "anchor", "ancient", "anger", "angle", "angry",
+    "animal", "ankle", "announce", "annual", "another", "answer", "antenna", "antique",
+    "anxiety", "any", "apart", "apology", "appear", "apple", "approve", "april",
+    "arch", "arctic", "area", "arena", "argue", "arm", "armed", "armor",
+    "army", "around", "arrange", "arrest", "arrive", "arrow", "art", "artefact",
+    "artist", "artwork", "ask", "aspect", "assault", "asset", "assist", "assume",
+    "asthma", "athlete", "atom", "attack", "attend", "attitude", "attract", "auction",
+    "audit", "august", "aunt", "author", "auto", "autumn", "average", "avocado",
+    "avoid", "awake", "aware", "away", "awesome", "awful", "awkward", "axis",
+    "baby", "bachelor", "bacon", "badge", "bag", "balance", "balcony", "ball",
+    "bamboo", "banana", "banner", "bar", "barely", "bargain", "barrel", "base",
+    "basic", "basket", "battle", "beach", "bean", "beauty", "because", "become",
+    "beef", "before", "begin", "behave", "behind", "believe", "below", "belt",
+    "bench", "benefit", "best", "betray", "better", "between", "beyond", "bicycle",
+    "bid", "bike", "bind", "biology", "bird", "birth", "bitter", "black",
+    "blade", "blame", "blanket", "blast", "bleak", "bless", "blind", "blood",
+    "blossom", "blouse", "blue", "blur", "blush", "board", "boat", "body",
+    "boil", "bomb", "bone", "bonus", "book", "boost", "border", "boring",
+    "borrow", "boss", "bottom", "bounce", "box", "boy", "bracket", "brain",
+    "brand", "brass", "brave", "bread", "breeze", "brick", "bridge", "brief",
+    "bright", "bring", "brisk", "broccoli", "broken", "bronze", "broom", "brother",
+    "brown", "brush", "bubble", "buddy", "budget", "buffalo", "build", "bulb",
+    "bulk", "bullet", "bundle", "bunker", "burden", "burger", "burst", "bus",
+    "business", "busy", "butter", "buyer", "buzz", "cabbage", "cabin", "cable",
+    "cactus", "cage", "cake", "call", "calm", "camera", "camp", "can",
+    "canal", "cancel", "candy", "cannon", "canoe", "canvas", "canyon", "capable",
+    "capital", "captain", "car", "carbon", "card", "cargo", "carpet", "carry",
+    "cart", "case", "cash", "casino", "castle", "casual", "cat", "catalog",
+    "catch", "category", "cattle", "caught", "cause", "caution", "cave", "ceiling",
+    "celery", "cement", "census", "century", "cereal", "certain", "chair", "chalk",
+    "champion", "change", "chaos", "chapter", "charge", "chase", "chat", "cheap",
+    "check", "cheese", "chef", "cherry", "chest", "chicken", "chief", "child",
+    "chimney", "choice", "choose", "chronic", "chuckle", "chunk", "churn", "cigar",
+    "cinnamon", "circle", "citizen", "city", "civil", "claim", "clap", "clarify",
+    "claw", "clay", "clean", "clerk", "clever", "click", "client", "cliff",
+    "climb", "clinic", "clip", "clock", "clog", "close", "cloth", "cloud",
+    "clown", "club", "clump", "cluster", "clutch", "coach", "coast", "coconut",
+    "code", "coffee", "coil", "coin", "collect", "color", "column", "combine",
+    "come", "comfort", "comic", "common", "company", "concert", "conduct", "confirm",
+    "congress", "connect", "consider", "control", "convince", "cook", "cool", "copper",
+    "copy", "coral", "core", "corn", "correct", "cost", "cotton", "couch",
+    "country", "couple", "course", "cousin", "cover", "coyote", "crack", "cradle",
+    "craft", "cram", "crane", "crash", "crater", "crawl", "crazy", "cream",
+    "credit", "creek", "crew", "cricket", "crime", "crisp", "critic", "crop",
+    "cross", "crouch", "crowd", "crucial", "cruel", "cruise", "crumble", "crunch",
+    "crush", "cry", "crystal", "cube", "culture", "cup", "cupboard", "curious",
+    "current", "curtain", "curve", "cushion", "custom", "cute", "cycle", "dad",
+    "damage", "damp", "dance", "danger", "daring", "dash", "daughter", "dawn",
+    "day", "deal", "debate", "debris", "decade", "december", "decide", "decline",
+    "decorate", "decrease", "deer", "defense", "define", "defy", "degree", "delay",
+    "deliver", "demand", "demise", "denial", "dentist", "deny", "depart", "depend",
+    "deposit", "depth", "deputy", "derive", "describe", "desert", "design", "desk",
+    "despair", "destroy", "detail", "detect", "develop", "device", "devote", "diagram",
+    "dial", "diamond", "diary", "dice", "diesel", "diet", "differ", "digital",
+    "dignity", "dilemma", "dinner", "dinosaur", "direct", "dirt", "disagree", "discover",
+    "disease", "dish", "dismiss", "disorder", "display", "distance", "divert", "divide",
+    "divorce", "dizzy", "doctor", "document", "dog", "doll", "dolphin", "domain",
+    "donate", "donkey", "donor", "door", "dose", "double", "dove", "draft",
+    "dragon", "drama", "drastic", "draw", "dream", "dress", "drift", "drill",
+    "drink", "drip", "drive", "drop", "drum", "dry", "duck", "dumb",
+    "dune", "during", "dust", "dutch", "duty", "dwarf", "dynamic", "eager",
+    "eagle", "early", "earn", "earth", "easily", "east", "easy", "echo",
+    "ecology", "economy", "edge", "edit", "educate", "effort", "egg", "eight",
+    "either", "elbow", "elder", "electric", "elegant", "element", "elephant", "elevator",
+    "elite", "else", "embark", "embody", "embrace", "emerge", "emotion", "employ",
+    "empower", "empty", "enable", "enact", "end", "endless", "endorse", "enemy",
+    "energy", "enforce", "engage", "engine", "enhance", "enjoy", "enlist", "enough",
+    "enrich", "enroll", "ensure", "enter", "entire", "entry", "envelope", "episode",
+    "equal", "equip", "era", "erase", "erode", "erosion", "error", "erupt",
+    "escape", "essay", "essence", "estate", "eternal", "ethics", "evidence", "evil",
+    "evoke", "evolve", "exact", "example", "excess", "exchange", "excite", "exclude",
+    "excuse", "execute", "exercise", "exhaust", "exhibit", "exile", "exist", "exit",
+    "exotic", "expand", "expect", "expire", "explain", "expose", "express", "extend",
+    "extra", "eye", "eyebrow", "fabric", "face", "faculty", "fade", "faint",
+    "faith", "fall", "false", "fame", "family", "famous", "fan", "fancy",
+    "fantasy", "farm", "fashion", "fat", "fatal", "father", "fatigue", "fault",
+    "favorite", "feature", "february", "federal", "fee", "feed", "feel", "female",
+    "fence", "festival", "fetch", "fever", "few", "fiber", "fiction", "field",
+    "figure", "file", "film", "filter", "final", "find", "fine", "finger",
+    "finish", "fire", "firm", "first", "fiscal", "fish", "fit", "fitness",
+    "fix", "flag", "flame", "flash", "flat", "flavor", "flee", "flight",
+    "flip", "float", "flock", "floor", "flower", "fluid", "flush", "fly",
+    "foam", "focus", "fog", "foil", "fold", "follow", "food", "foot",
+    "force", "forest", "forget", "fork", "fortune", "forum", "forward", "fossil",
+    "foster", "found", "fox", "fragile", "frame", "frequent", "fresh", "friend",
+    "fringe", "frog", "front", "frost", "frown", "frozen", "fruit", "fuel",
+    "fun", "funny", "furnace", "fury", "future", "gadget", "gain", "galaxy",
+    "gallery", "game", "gap", "garage", "garbage", "garden", "garlic", "garment",
+    "gas", "gasp", "gate", "gather", "gauge", "gaze", "general", "genius",
+    "genre", "gentle", "genuine", "gesture", "ghost", "giant", "gift", "giggle",
+    "ginger", "giraffe", "girl", "give", "glad", "glance", "glare", "glass",
+    "glide", "glimpse", "globe", "gloom", "glory", "glove", "glow", "glue",
+    "goat", "goddess", "gold", "good", "goose", "gorilla", "gospel", "gossip",
+    "govern", "gown", "grab", "grace", "grain", "grant", "grape", "grass",
+    "gravity", "great", "green", "grid", "grief", "grit", "grocery", "group",
+    "grow", "grunt", "guard", "guess", "guide", "guilt", "guitar", "gun",
+    "gym", "habit", "hair", "half", "hammer", "hamster", "hand", "happy",
+    "harbor", "hard", "harsh", "harvest", "hat", "have", "hawk", "hazard",
+    "head", "health", "heart", "heavy", "hedgehog", "height", "hello", "helmet",
+    "help", "hen", "hero", "hidden", "high", "hill", "hint", "hip",
+    "hire", "history", "hobby", "hockey", "hold", "hole", "holiday", "hollow",
+    "home", "honey", "hood", "hope", "horn", "horror", "horse", "hospital",
+    "host", "hotel", "hour", "hover", "hub", "huge", "human", "humble",
+    "humor", "hundred", "hungry", "hunt", "hurdle", "hurry", "hurt", "husband",
+    "hybrid", "ice", "icon", "idea", "identify", "idle", "ignore", "ill",
+    "illegal", "illness", "image", "imitate", "immense", "immune", "impact", "impose",
+    "improve", "impulse", "inch", "include", "income", "increase", "index", "indicate",
+    "indoor", "industry", "infant", "inflict", "inform", "inhale", "inherit", "initial",
+    "inject", "injury", "inmate", "inner", "innocent", "input", "inquiry", "insane",
+    "insect", "inside", "inspire", "install", "intact", "interest", "into", "invest",
+    "invite", "involve", "iron", "island", "isolate", "issue", "item", "ivory",
+    "jacket", "jaguar", "jar", "jazz", "jealous", "jeans", "jelly", "jewel",
+    "job", "join", "joke", "journey", "joy", "judge", "juice", "jump",
+    "jungle", "junior", "junk", "just", "kangaroo", "keen", "keep", "ketchup",
+    "key", "kick", "kid", "kidney", "kind", "kingdom", "kiss", "kit",
+    "kitchen", "kite", "kitten", "kiwi", "knee", "knife", "knock", "know",
+    "lab", "label", "labor", "ladder", "lady", "lake", "lamp", "language",
+    "laptop", "large", "later", "latin", "laugh", "laundry", "lava", "law",
+    "lawn", "lawsuit", "layer", "lazy", "leader", "leaf", "learn", "leave",
+    "lecture", "left", "leg", "legal", "legend", "leisure", "lemon", "lend",
+    "length", "lens", "leopard", "lesson", "letter", "level", "liar", "liberty",
+    "library", "license", "life", "lift", "light", "like", "limb", "limit",
+    "link", "lion", "liquid", "list", "little", "live", "lizard", "load",
+    "loan", "lobster", "local", "lock", "logic", "lonely", "long", "loop",
+    "lottery", "loud", "lounge", "love", "loyal", "lucky", "luggage", "lumber",
+    "lunar", "lunch", "luxury", "lyrics", "machine", "mad", "magic", "magnet",
+    "maid", "mail", "main", "major", "make", "mammal", "man", "manage",
+    "mandate", "mango", "mansion", "manual", "maple", "marble", "march", "margin",
+    "marine", "market", "marriage", "mask", "mass", "master", "match", "material",
+    "math", "matrix", "matter", "maximum", "maze", "meadow", "mean", "measure",
+    "meat", "mechanic", "medal", "media", "melody", "melt", "member", "memory",
+    "mention", "menu", "mercy", "merge", "merit", "merry", "mesh", "message",
+    "metal", "method", "middle", "midnight", "milk", "million", "mimic", "mind",
+    "minimum", "minor", "minute", "miracle", "mirror", "misery", "miss", "mistake",
+    "mix", "mixed", "mixture", "mobile", "model", "modify", "mom", "moment",
+    "monitor", "monkey", "monster", "month", "moon", "moral", "more", "morning",
+    "mosquito", "mother", "motion", "motor", "mountain", "mouse", "move", "movie",
+    "much", "muffin", "mule", "multiply", "muscle", "museum", "mushroom", "music",
+    "must", "mutual", "myself", "mystery", "myth", "naive", "name", "napkin",
+    "narrow", "nasty", "nation", "nature", "near", "neck", "need", "negative",
+    "neglect", "neither", "nephew", "nerve", "nest", "net", "network", "neutral",
+    "never", "news", "next", "nice", "night", "noble", "noise", "nominee",
+    "noodle", "normal", "north", "nose", "notable", "note", "nothing", "notice",
+    "novel", "now", "nuclear", "number", "nurse", "nut", "oak", "obey",
+    "object", "oblige", "obscure", "observe", "obtain", "obvious", "occur", "ocean",
+    "october", "odor", "off", "offer", "office", "often", "oil", "okay",
+    "old", "olive", "olympic", "omit", "once", "one", "onion", "online",
+    "only", "open", "opera", "opinion", "oppose", "option", "orange", "orbit",
+    "orchard", "order", "ordinary", "organ", "orient", "original", "orphan", "ostrich",
+    "other", "outdoor", "outer", "output", "outside", "oval", "oven", "over",
+    "own", "owner", "oxygen", "oyster", "ozone", "pact", "paddle", "page",
+    "pair", "palace", "palm", "panda", "panel", "panic", "panther", "paper",
+    "parade", "parent", "park", "parrot", "party", "pass", "patch", "path",
+    "patient", "patrol", "pattern", "pause", "pave", "payment", "peace", "peanut",
+    "pear", "peasant", "pelican", "pen", "penalty", "pencil", "people", "pepper",
+    "perfect", "permit", "person", "pet", "phone", "photo", "phrase", "physical",
+    "piano", "picnic", "picture", "piece", "pig", "pigeon", "pill", "pilot",
+    "pink", "pioneer", "pipe", "pistol", "pitch", "pizza", "place", "planet",
+    "plastic", "plate", "play", "please", "pledge", "pluck", "plug", "plunge",
+    "poem", "poet", "point", "polar", "pole", "police", "pond", "pony",
+    "pool", "popular", "portion", "position", "possible", "post", "potato", "pottery",
+    "poverty", "powder", "power", "practice", "praise", "predict", "prefer", "prepare",
+    "present", "pretty", "prevent", "price", "pride", "primary", "print", "priority",
+    "prison", "private", "prize", "problem", "process", "produce", "profit", "program",
+    "project", "promote", "proof", "property", "prosper", "protect", "proud", "provide",
+    "public", "pudding", "pull", "pulp", "pulse", "pumpkin", "punch", "pupil",
+    "puppy", "purchase", "purity", "purpose", "purse", "push", "put", "puzzle",
+    "pyramid", "quality", "quantum", "quarter", "question", "quick", "quit", "quiz",
+    "quote", "rabbit", "raccoon", "race", "rack", "radar", "radio", "rail",
+    "rain", "raise", "rally", "ramp", "ranch", "random", "range", "rapid",
+    "rare", "rate", "rather", "raven", "raw", "razor", "ready", "real",
+    "reason", "rebel", "rebuild", "recall", "receive", "recipe", "record", "recycle",
+    "reduce", "reflect", "reform", "refuse", "region", "regret", "regular", "reject",
+    "relax", "release", "relief", "rely", "remain", "remember", "remind", "remove",
+    "render", "renew", "rent", "reopen", "repair", "repeat", "replace", "report",
+    "require", "rescue", "resemble", "resist", "resource", "response", "result", "retire",
+    "retreat", "return", "reunion", "reveal", "review", "reward", "rhythm", "rib",
+    "ribbon", "rice", "rich", "ride", "ridge", "rifle", "right", "rigid",
+    "ring", "riot", "ripple", "risk", "ritual", "rival", "river", "road",
+    "roast", "robot", "robust", "rocket", "romance", "roof", "rookie", "room",
+    "rose", "rotate", "rough", "round", "route", "royal", "rubber", "rude",
+    "rug", "rule", "run", "runway", "rural", "sad", "saddle", "sadness",
+    "safe", "sail", "salad", "salmon", "salon", "salt", "salute", "same",
+    "sample", "sand", "satisfy", "satoshi", "sauce", "sausage", "save", "say",
+    "scale", "scan", "scare", "scatter", "scene", "scheme", "school", "science",
+    "scissors", "scorpion", "scout", "scrap", "screen", "script", "scrub", "sea",
+    "search", "season", "seat", "second", "secret", "section", "security", "seed",
+    "seek", "segment", "select", "sell", "seminar", "senior", "sense", "sentence",
+    "series", "service", "session", "settle", "setup", "seven", "shadow", "shaft",
+    "shallow", "share", "shed", "shell", "sheriff", "shield", "shift", "shine",
+    "ship", "shiver", "shock", "shoe", "shoot", "shop", "short", "shoulder",
+    "shove", "shrimp", "shrug", "shuffle", "shy", "sibling", "sick", "side",
+    "siege", "sight", "sign", "silent", "silk", "silly", "silver", "similar",
+    "simple", "since", "sing", "siren", "sister", "situate", "six", "size",
+    "skate", "sketch", "ski", "skill", "skin", "skirt", "skull", "slab",
+    "slam", "sleep", "slender", "slice", "slide", "slight", "slim", "slogan",
+    "slot", "slow", "slush", "small", "smart", "smile", "smoke", "smooth",
+    "snack", "snake", "snap", "sniff", "snow", "soap", "soccer", "social",
+    "sock", "soda", "soft", "solar", "soldier", "solid", "solution", "solve",
+    "someone", "song", "soon", "sorry", "sort", "soul", "sound", "soup",
+    "source", "south", "space", "spare", "spatial", "spawn", "speak", "special",
+    "speed", "spell", "spend", "sphere", "spice", "spider", "spike", "spin",
+    "spirit", "split", "spoil", "sponsor", "spoon", "sport", "spot", "spray",
+    "spread", "spring", "spy", "square", "squeeze", "squirrel", "stable", "stadium",
+    "staff", "stage", "stairs", "stamp", "stand", "start", "state", "stay",
+    "steak", "steel", "stem", "step", "stereo", "stick", "still", "sting",
+    "stock", "stomach", "stone", "stool", "story", "stove", "strategy", "street",
+    "strike", "strong", "struggle", "student", "stuff", "stumble", "style", "subject",
+    "submit", "subway", "success", "such", "sudden", "suffer", "sugar", "suggest",
+    "suit", "summer", "sun", "sunny", "sunset", "super", "supply", "supreme",
+    "sure", "surface", "surge", "surprise", "surround", "survey", "suspect", "sustain",
+    "swallow", "swamp", "swap", "swarm", "swear", "sweet", "swift", "swim",
+    "swing", "switch", "sword", "symbol", "symptom", "syrup", "system", "table",
+    "tackle", "tag", "tail", "talent", "talk", "tank", "tape", "target",
+    "task", "taste", "tattoo", "taxi", "teach", "team", "tell", "ten",
+    "tenant", "tennis", "tent", "term", "test", "text", "thank", "that",
+    "theme", "then", "theory", "there", "they", "thing", "this", "thought",
+    "three", "thrive", "throw", "thumb", "thunder", "ticket", "tide", "tiger",
+    "tilt", "timber", "time", "tiny", "tip", "tired", "tissue", "title",
+    "toast", "tobacco", "today", "toddler", "toe", "together", "toilet", "token",
+    "tomato", "tomorrow", "tone", "tongue", "tonight", "tool", "tooth", "top",
+    "topic", "topple", "torch", "tornado", "tortoise", "toss", "total", "tourist",
+    "toward", "tower", "town", "toy", "track", "trade", "traffic", "tragic",
+    "train", "transfer", "trap", "trash", "travel", "tray", "treat", "tree",
+    "trend", "trial", "tribe", "trick", "trigger", "trim", "trip", "trophy",
+    "trouble", "truck", "true", "truly", "trumpet", "trust", "truth", "try",
+    "tube", "tuition", "tumble", "tuna", "tunnel", "turkey", "turn", "turtle",
+    "twelve", "twenty", "twice", "twin", "twist", "two", "type", "typical",
+    "ugly", "umbrella", "unable", "unaware", "uncle", "uncover", "under", "undo",
+    "unfair", "unfold", "unhappy", "uniform", "unique", "unit", "universe", "unknown",
+    "unlock", "until", "unusual", "unveil", "update", "upgrade", "uphold", "upon",
+    "upper", "upset", "urban", "urge", "usage", "use", "used", "useful",
+    "useless", "usual", "utility", "vacant", "vacuum", "vague", "valid", "valley",
+    "valve", "van", "vanish", "vapor", "various", "vast", "vault", "vehicle",
+    "velvet", "vendor", "venture", "venue", "verb", "verify", "version", "very",
+    "vessel", "veteran", "viable", "vibrant", "vicious", "victory", "video", "view",
+    "village", "vintage", "violin", "virtual", "virus", "visa", "visit", "visual",
+    "vital", "vivid", "vocal", "voice", "void", "volcano", "volume", "vote",
+    "voyage", "wage", "wagon", "wait", "walk", "wall", "walnut", "want",
+    "warfare", "warm", "warrior", "wash", "wasp", "waste", "water", "wave",
+    "way", "wealth", "weapon", "wear", "weasel", "weather", "web", "wedding",
+    "weekend", "weird", "welcome", "west", "wet", "whale", "what", "wheat",
+    "wheel", "when", "where", "whip", "whisper", "wide", "width", "wife",
+    "wild", "will", "win", "window", "wine", "wing", "wink", "winner",
+    "winter", "wire", "wisdom", "wise", "wish", "witness", "wolf", "woman",
+    "wonder", "wood", "wool", "word", "work", "world", "worry", "worth",
+    "wrap", "wreck", "wrestle", "wrist", "write", "wrong", "yard", "year",
+    "yellow", "you", "young", "youth", "zebra", "zero", "zone", "zoo",
+];
+//# sourceMappingURL=wordlist.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@2kw/ai",
-  "version": "7.3.0-dev.5",
+  "version": "7.3.0-dev.8",
   "description": "CLI for 2kw.ai — schema-driven document extraction, an OpenAI-compatible EU LLM gateway, transcription, prompts, datasets, and experiments from your terminal or agentic workflows. Ships as 2kw, backbone, and bb.",
   "keywords": [
     "cli",
@@ -39,6 +39,8 @@
     "fix:generated": "tsx openapi/scripts/check-generated.ts --write",
     "check:coverage": "tsx openapi/scripts/check-coverage.ts",
     "sync:agent-schema": "tsx scripts/sync-agent-schema.ts",
+    "sync:relay-protocol": "tsx scripts/sync-relay-protocol.ts",
+    "check:relay-protocol": "tsx scripts/sync-relay-protocol.ts --check",
     "typecheck": "tsc --noEmit",
     "test": "vitest",
     "test:run": "vitest run",
@@ -55,6 +57,7 @@
     "open": "^10.2.0",
     "openapi-fetch": "^0.13.5",
     "ora": "^8.2.0",
+    "smol-toml": "^1.9.1",
     "yaml": "^2.9.1"
   },
   "devDependencies": {