@agenticprimitives/fabric 0.0.0-alpha.1

package/dist/cloudflare/channel-store.d.ts

@@ -0,0 +1,61 @@
+export interface ChannelV1 {
+    channelId: string;
+    org: string;
+    title: string;
+    createdAt: string;
+    /** Token-gate (spec 318 C3): an entitlement requirement a joiner's credential must satisfy (opaque to the
+     *  store — the DO's injected `verifyEntitlement` interprets it). Absent ⇒ open join. */
+    joinGate?: string;
+}
+/** The actions a `ConversationRoleProjection` can cache authority for (spec 324 §8). NOT an ordinal hierarchy —
+ *  an explicit capability bundle: `post` (participate), `moderate` (remove/pin), `manage` (assign roles / set
+ *  projections). A projection lists exactly the actions its underlying delegation authorizes. */
+export type ConversationRoleAction = 'post' | 'moderate' | 'manage';
+/** spec 324 §8 — a CACHE of an org-issued `RoleAssignment` + the delegation it materializes, scoped to one
+ *  conversation. Never authority's source: `roleAssignmentRef`/`delegationHash` point AT the real artifacts and
+ *  `authorizedActions` is the resolved bundle re-derived on refresh. The org changes a member's in-conversation
+ *  authority by re-issuing / revoking the delegation, then re-projecting — the DO only gates on the cache. */
+export interface ConversationRoleProjection {
+    conversationId: string;
+    agentId: string;
+    roleAssignmentRef: string;
+    delegationHash: string;
+    authorizedActions: ConversationRoleAction[];
+    /** Cache staleness bound (ISO), matching the materializing delegation's validity. Absent ⇒ no cached expiry. */
+    expiresAt?: string;
+    /** Monotonic revision for staleness / CAS against the projecting writer. */
+    projectionRevision: number;
+}
+/** Does the cached projection authorize `action` at instant `at`? Fail-closed: no projection ⇒ false; an
+ *  expired cache ⇒ false (a refresh from the live delegation is required). The action must be in the bundle —
+ *  there is NO ordinal fall-through (an `admin` is not implicitly a `moderator`; the bundle lists every action). */
+export declare function projectionAuthorizes(p: ConversationRoleProjection | null, action: ConversationRoleAction, at?: string): boolean;
+export interface ChannelStore {
+    createChannel(channel: ChannelV1): Promise<void>;
+    getChannel(channelId: string): Promise<ChannelV1 | null>;
+    join(channelId: string, member: string): Promise<void>;
+    leave(channelId: string, member: string): Promise<void>;
+    isMember(channelId: string, member: string): Promise<boolean>;
+    members(channelId: string): Promise<string[]>;
+    /** Upsert the cached role projection for an agent in a conversation (the org's projecting writer calls this
+     *  after issuing the RoleAssignment + materializing delegation). */
+    putRoleProjection(projection: ConversationRoleProjection): Promise<void>;
+    /** The agent's cached projection, or `null` if none is projected. */
+    roleProjection(conversationId: string, agentId: string): Promise<ConversationRoleProjection | null>;
+    /** Drop the cached projection (the org revoked the underlying delegation / demoted the assignment). */
+    clearRoleProjection(conversationId: string, agentId: string): Promise<void>;
+    /** All cached projections for a conversation. */
+    roleProjections(conversationId: string): Promise<ConversationRoleProjection[]>;
+    /** Index a post (the full exchange lives in the exchange store). */
+    addPost(channelId: string, exchangeId: string, at: string): Promise<void>;
+    /** Un-index a post (moderation remove). */
+    removePost(channelId: string, exchangeId: string): Promise<void>;
+    /** The channel's post exchange ids, newest first. */
+    postIds(channelId: string): Promise<string[]>;
+    addBot(channelId: string, botSA: string): Promise<void>;
+    removeBot(channelId: string, botSA: string): Promise<void>;
+    isBot(channelId: string, botSA: string): Promise<boolean>;
+    bots(channelId: string): Promise<string[]>;
+}
+export declare function createDurableObjectChannelStore(sql: SqlStorage): ChannelStore;
+//# sourceMappingURL=channel-store.d.ts.map

package/dist/cloudflare/channel-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-store.d.ts","sourceRoot":"","sources":["../../src/cloudflare/channel-store.ts"],"names":[],"mappings":"AAyCA,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB;4FACwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;iGAEiG;AACjG,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEpE;;;8GAG8G;AAC9G,MAAM,WAAW,0BAA0B;IACzC,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,sBAAsB,EAAE,CAAC;IAC5C,gHAAgH;IAChH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED;;oHAEoH;AACpH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,0BAA0B,GAAG,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAI/H;AAED,MAAM,WAAW,YAAY;IAC3B,aAAa,CAAC,OAAO,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IACzD,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9D,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE9C;wEACoE;IACpE,iBAAiB,CAAC,UAAU,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,qEAAqE;IACrE,cAAc,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IACpG,uGAAuG;IACvG,mBAAmB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,iDAAiD;IACjD,eAAe,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC;IAC/E,oEAAoE;IACpE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E,2CAA2C;IAC3C,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,qDAAqD;IACrD,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE9C,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC5C;AAcD,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,UAAU,GAAG,YAAY,CAkF7E"}

package/dist/cloudflare/channel-store.js

@@ -0,0 +1,124 @@
+/// <reference types="@cloudflare/workers-types" />
+// Channel store (spec 318 C1 / spec 316 Blocker 6 Defect B — the org SA's gateway DO as a shared board, L2).
+//
+// A channel is a shared CONTEXT resident in the ORG SA's own `PrincipalGatewayDO`: posts are exchanges on the
+// org's single-writer stream (the exchange store holds the full record); this store holds the channel's
+// membership + its post index. Membership is the ORG's policy (projected from the app's directory listing —
+// spec 313); the store tracks the set and gates posting fail-closed. Replaces the ad-hoc per-community KV doc
+// (`channels.ts` `CHANNELS_KEY`). Stored on `state.storage.sql`, co-located with the exchange stream + vault.
+//
+// spec 324 §8 — ROLES ARE NOT AUTHORITY. The old `channel_members.role` ordinal (member/moderator/admin) is
+// GONE: membership is now a plain set, and a member's authority-in-conversation is a
+// `ConversationRoleProjection` — a CACHE of a real org-issued RoleAssignment + its materializing delegation,
+// never authority's source (ADR-0048 #4/#10). The DO gates locally on the cached bundle; the org re-issues /
+// revokes the underlying delegation to change it.
+const CREATE_CHANNELS = `CREATE TABLE IF NOT EXISTS channels (
+  channel_id TEXT PRIMARY KEY, org TEXT NOT NULL, title TEXT NOT NULL, created_at TEXT NOT NULL, join_gate TEXT
+)`;
+const CREATE_BOTS = `CREATE TABLE IF NOT EXISTS channel_bots (
+  channel_id TEXT NOT NULL, bot_sa TEXT NOT NULL, PRIMARY KEY (channel_id, bot_sa)
+)`;
+const CREATE_MEMBERS = `CREATE TABLE IF NOT EXISTS channel_members (
+  channel_id TEXT NOT NULL, member TEXT NOT NULL, PRIMARY KEY (channel_id, member)
+)`;
+const CREATE_ROLE_PROJECTIONS = `CREATE TABLE IF NOT EXISTS conversation_role_projections (
+  conversation_id TEXT NOT NULL, agent_id TEXT NOT NULL, role_assignment_ref TEXT NOT NULL,
+  delegation_hash TEXT NOT NULL, authorized_actions TEXT NOT NULL, expires_at TEXT, projection_revision INTEGER NOT NULL DEFAULT 0,
+  PRIMARY KEY (conversation_id, agent_id)
+)`;
+const CREATE_POSTS = `CREATE TABLE IF NOT EXISTS channel_posts (
+  channel_id TEXT NOT NULL, exchange_id TEXT NOT NULL, at TEXT NOT NULL, PRIMARY KEY (channel_id, exchange_id)
+)`;
+/** Does the cached projection authorize `action` at instant `at`? Fail-closed: no projection ⇒ false; an
+ *  expired cache ⇒ false (a refresh from the live delegation is required). The action must be in the bundle —
+ *  there is NO ordinal fall-through (an `admin` is not implicitly a `moderator`; the bundle lists every action). */
+export function projectionAuthorizes(p, action, at) {
+    if (!p)
+        return false;
+    if (p.expiresAt && at && p.expiresAt <= at)
+        return false;
+    return p.authorizedActions.includes(action);
+}
+function rowToProjection(conversationId, r) {
+    return {
+        conversationId,
+        agentId: r.agent_id,
+        roleAssignmentRef: r.role_assignment_ref,
+        delegationHash: r.delegation_hash,
+        authorizedActions: JSON.parse(r.authorized_actions),
+        ...(r.expires_at ? { expiresAt: r.expires_at } : {}),
+        projectionRevision: r.projection_revision,
+    };
+}
+export function createDurableObjectChannelStore(sql) {
+    sql.exec(CREATE_CHANNELS);
+    sql.exec(CREATE_MEMBERS);
+    sql.exec(CREATE_ROLE_PROJECTIONS);
+    sql.exec(CREATE_POSTS);
+    sql.exec(CREATE_BOTS);
+    const lc = (s) => s.toLowerCase();
+    return {
+        async createChannel(c) {
+            sql.exec(`INSERT INTO channels (channel_id, org, title, created_at, join_gate) VALUES (?, ?, ?, ?, ?)
+         ON CONFLICT(channel_id) DO UPDATE SET title = excluded.title, join_gate = excluded.join_gate`, c.channelId, lc(c.org), c.title, c.createdAt, c.joinGate ?? null);
+        },
+        async getChannel(channelId) {
+            const r = sql.exec('SELECT * FROM channels WHERE channel_id = ?', channelId).toArray()[0];
+            return r ? { channelId: r.channel_id, org: r.org, title: r.title, createdAt: r.created_at, joinGate: r.join_gate ?? undefined } : null;
+        },
+        async join(channelId, member) {
+            sql.exec('INSERT OR IGNORE INTO channel_members (channel_id, member) VALUES (?, ?)', channelId, lc(member));
+        },
+        async leave(channelId, member) {
+            sql.exec('DELETE FROM channel_members WHERE channel_id = ? AND member = ?', channelId, lc(member));
+            sql.exec('DELETE FROM conversation_role_projections WHERE conversation_id = ? AND agent_id = ?', channelId, lc(member));
+        },
+        async isMember(channelId, member) {
+            return sql.exec('SELECT 1 FROM channel_members WHERE channel_id = ? AND member = ?', channelId, lc(member)).toArray().length > 0;
+        },
+        async members(channelId) {
+            return sql.exec('SELECT member FROM channel_members WHERE channel_id = ? ORDER BY member', channelId).toArray().map((r) => r.member);
+        },
+        async putRoleProjection(p) {
+            sql.exec(`INSERT INTO conversation_role_projections
+           (conversation_id, agent_id, role_assignment_ref, delegation_hash, authorized_actions, expires_at, projection_revision)
+         VALUES (?, ?, ?, ?, ?, ?, ?)
+         ON CONFLICT(conversation_id, agent_id) DO UPDATE SET
+           role_assignment_ref = excluded.role_assignment_ref, delegation_hash = excluded.delegation_hash,
+           authorized_actions = excluded.authorized_actions, expires_at = excluded.expires_at,
+           projection_revision = excluded.projection_revision`, p.conversationId, lc(p.agentId), p.roleAssignmentRef, p.delegationHash, JSON.stringify(p.authorizedActions), p.expiresAt ?? null, p.projectionRevision);
+        },
+        async roleProjection(conversationId, agentId) {
+            const r = sql.exec('SELECT * FROM conversation_role_projections WHERE conversation_id = ? AND agent_id = ?', conversationId, lc(agentId)).toArray()[0];
+            return r ? rowToProjection(conversationId, r) : null;
+        },
+        async clearRoleProjection(conversationId, agentId) {
+            sql.exec('DELETE FROM conversation_role_projections WHERE conversation_id = ? AND agent_id = ?', conversationId, lc(agentId));
+        },
+        async roleProjections(conversationId) {
+            return sql.exec('SELECT * FROM conversation_role_projections WHERE conversation_id = ? ORDER BY agent_id', conversationId).toArray().map((r) => rowToProjection(conversationId, r));
+        },
+        async addPost(channelId, exchangeId, at) {
+            sql.exec('INSERT OR IGNORE INTO channel_posts (channel_id, exchange_id, at) VALUES (?, ?, ?)', channelId, exchangeId, at);
+        },
+        async removePost(channelId, exchangeId) {
+            sql.exec('DELETE FROM channel_posts WHERE channel_id = ? AND exchange_id = ?', channelId, exchangeId);
+        },
+        async postIds(channelId) {
+            return sql.exec('SELECT exchange_id FROM channel_posts WHERE channel_id = ? ORDER BY at DESC', channelId).toArray().map((r) => r.exchange_id);
+        },
+        async addBot(channelId, botSA) {
+            sql.exec('INSERT OR IGNORE INTO channel_bots (channel_id, bot_sa) VALUES (?, ?)', channelId, lc(botSA));
+        },
+        async removeBot(channelId, botSA) {
+            sql.exec('DELETE FROM channel_bots WHERE channel_id = ? AND bot_sa = ?', channelId, lc(botSA));
+        },
+        async isBot(channelId, botSA) {
+            return sql.exec('SELECT 1 FROM channel_bots WHERE channel_id = ? AND bot_sa = ?', channelId, lc(botSA)).toArray().length > 0;
+        },
+        async bots(channelId) {
+            return sql.exec('SELECT bot_sa FROM channel_bots WHERE channel_id = ? ORDER BY bot_sa', channelId).toArray().map((r) => r.bot_sa);
+        },
+    };
+}
+//# sourceMappingURL=channel-store.js.map

package/dist/cloudflare/channel-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channel-store.js","sourceRoot":"","sources":["../../src/cloudflare/channel-store.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,6GAA6G;AAC7G,EAAE;AACF,8GAA8G;AAC9G,wGAAwG;AACxG,4GAA4G;AAC5G,8GAA8G;AAC9G,8GAA8G;AAC9G,EAAE;AACF,4GAA4G;AAC5G,qFAAqF;AACrF,6GAA6G;AAC7G,6GAA6G;AAC7G,kDAAkD;AAElD,MAAM,eAAe,GAAG;;EAEtB,CAAC;AACH,MAAM,WAAW,GAAG;;EAElB,CAAC;AACH,MAAM,cAAc,GAAG;;EAErB,CAAC;AACH,MAAM,uBAAuB,GAAG;;;;EAI9B,CAAC;AACH,MAAM,YAAY,GAAG;;EAEnB,CAAC;AAyCH;;oHAEoH;AACpH,MAAM,UAAU,oBAAoB,CAAC,CAAoC,EAAE,MAA8B,EAAE,EAAW;IACpH,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE,IAAI,CAAC,CAAC,SAAS,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC;IACzD,OAAO,CAAC,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC9C,CAAC;AAgCD,SAAS,eAAe,CAAC,cAAsB,EAAE,CAAoB;IACnE,OAAO;QACL,cAAc;QACd,OAAO,EAAE,CAAC,CAAC,QAAQ;QACnB,iBAAiB,EAAE,CAAC,CAAC,mBAAmB;QACxC,cAAc,EAAE,CAAC,CAAC,eAAe;QACjC,iBAAiB,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAA6B;QAC/E,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,kBAAkB,EAAE,CAAC,CAAC,mBAAmB;KAC1C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,GAAe;IAC7D,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1B,GAAG,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IACzB,GAAG,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAClC,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvB,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtB,MAAM,EAAE,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAE1C,OAAO;QACL,KAAK,CAAC,aAAa,CAAC,CAAC;YACnB,GAAG,CAAC,IAAI,CACN;sGAC8F,EAC9F,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,IAAI,IAAI,CACjE,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,SAAS;YACxB,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAa,6CAA6C,EAAE,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACtG,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACzI,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM;YAC1B,GAAG,CAAC,IAAI,CAAC,0EAA0E,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9G,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM;YAC3B,GAAG,CAAC,IAAI,CAAC,iEAAiE,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACnG,GAAG,CAAC,IAAI,CAAC,sFAAsF,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QAC1H,CAAC;QACD,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM;YAC9B,OAAO,GAAG,CAAC,IAAI,CAAC,mEAAmE,EAAE,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QACnI,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAAS;YACrB,OAAO,GAAG,CAAC,IAAI,CAAY,yEAAyE,EAAE,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClJ,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACvB,GAAG,CAAC,IAAI,CACN;;;;;;8DAMsD,EACtD,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,cAAc,EACtE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC,kBAAkB,CAC/E,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,cAAc,CAAC,cAAc,EAAE,OAAO;YAC1C,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAChB,wFAAwF,EAAE,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,CACtH,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACf,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvD,CAAC;QACD,KAAK,CAAC,mBAAmB,CAAC,cAAc,EAAE,OAAO;YAC/C,GAAG,CAAC,IAAI,CAAC,sFAAsF,EAAE,cAAc,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;QAChI,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,cAAc;YAClC,OAAO,GAAG,CAAC,IAAI,CACb,yFAAyF,EAAE,cAAc,CAC1G,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE;YACrC,GAAG,CAAC,IAAI,CAAC,oFAAoF,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QAC5H,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU;YACpC,GAAG,CAAC,IAAI,CAAC,oEAAoE,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QACxG,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,SAAS;YACrB,OAAO,GAAG,CAAC,IAAI,CAAU,6EAA6E,EAAE,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;QACzJ,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK;YAC3B,GAAG,CAAC,IAAI,CAAC,uEAAuE,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1G,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK;YAC9B,GAAG,CAAC,IAAI,CAAC,8DAA8D,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;QACjG,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK;YAC1B,OAAO,GAAG,CAAC,IAAI,CAAC,gEAAgE,EAAE,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;QAC/H,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,SAAS;YAClB,OAAO,GAAG,CAAC,IAAI,CAAS,sEAAsE,EAAE,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC5I,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cloudflare/exchange-store.d.ts

@@ -0,0 +1,16 @@
+import type { ExchangeRecordV1, ExchangeEventV1, ExchangeId } from '../exchange-record.js';
+import { type ExchangeApplyResult } from '../exchange-reducer.js';
+/** Durable, single-writer store of `ExchangeRecordV1` snapshots for one principal's gateway DO. */
+export interface ExchangeStore {
+    /** Seed / overwrite an exchange (e.g. T0 delivery persisting a freshly-built record). Single-writer. */
+    put(record: ExchangeRecordV1): Promise<void>;
+    /** The current record, or `null`. */
+    get(exchangeId: ExchangeId | string): Promise<ExchangeRecordV1 | null>;
+    /** Append one event: load → `applyExchangeEvent` → persist on success; the reducer's result is returned
+     *  (a rejection does NOT mutate the row — fail-closed). `null` if the exchange is unknown. */
+    append(exchangeId: ExchangeId | string, event: ExchangeEventV1): Promise<ExchangeApplyResult | null>;
+    /** All exchanges, newest activity first (the inbox-projection source). */
+    list(): Promise<ExchangeRecordV1[]>;
+}
+export declare function createDurableObjectExchangeStore(sql: SqlStorage): ExchangeStore;
+//# sourceMappingURL=exchange-store.d.ts.map

package/dist/cloudflare/exchange-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange-store.d.ts","sourceRoot":"","sources":["../../src/cloudflare/exchange-store.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC3F,OAAO,EAAsB,KAAK,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAiBtF,mGAAmG;AACnG,MAAM,WAAW,aAAa;IAC5B,wGAAwG;IACxG,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,qCAAqC;IACrC,GAAG,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACvE;kGAC8F;IAC9F,MAAM,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IACrG,0EAA0E;IAC1E,IAAI,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;CACrC;AAED,wBAAgB,gCAAgC,CAAC,GAAG,EAAE,UAAU,GAAG,aAAa,CAyC/E"}

package/dist/cloudflare/exchange-store.js

@@ -0,0 +1,45 @@
+import { applyExchangeEvent } from '../exchange-reducer.js';
+const CREATE_TABLE = `CREATE TABLE IF NOT EXISTS exchange_records (
+  exchange_id  TEXT PRIMARY KEY,
+  record_json  TEXT NOT NULL,
+  rev          INTEGER NOT NULL,
+  updated_at   TEXT NOT NULL
+)`;
+const CREATE_INDEX = `CREATE INDEX IF NOT EXISTS idx_exchange_records_updated ON exchange_records (updated_at DESC)`;
+export function createDurableObjectExchangeStore(sql) {
+    sql.exec(CREATE_TABLE);
+    sql.exec(CREATE_INDEX);
+    const save = (record) => {
+        sql.exec(`INSERT INTO exchange_records (exchange_id, record_json, rev, updated_at)
+       VALUES (?, ?, ?, ?)
+       ON CONFLICT(exchange_id) DO UPDATE SET
+         record_json = excluded.record_json, rev = excluded.rev, updated_at = excluded.updated_at`, record.exchangeId, JSON.stringify(record), record.rev, record.updatedAt);
+    };
+    return {
+        async put(record) {
+            save(record);
+        },
+        async get(exchangeId) {
+            const rows = sql
+                .exec('SELECT record_json FROM exchange_records WHERE exchange_id = ?', String(exchangeId))
+                .toArray();
+            return rows[0] ? JSON.parse(rows[0].record_json) : null;
+        },
+        async append(exchangeId, event) {
+            const current = await this.get(exchangeId);
+            if (!current)
+                return null;
+            const result = applyExchangeEvent(current, event);
+            if (result.ok)
+                save(result.record);
+            return result;
+        },
+        async list() {
+            const rows = sql
+                .exec('SELECT record_json FROM exchange_records ORDER BY updated_at DESC')
+                .toArray();
+            return rows.map((r) => JSON.parse(r.record_json));
+        },
+    };
+}
+//# sourceMappingURL=exchange-store.js.map

package/dist/cloudflare/exchange-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange-store.js","sourceRoot":"","sources":["../../src/cloudflare/exchange-store.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,kBAAkB,EAA4B,MAAM,wBAAwB,CAAC;AAEtF,MAAM,YAAY,GAAG;;;;;EAKnB,CAAC;AACH,MAAM,YAAY,GAAG,+FAA+F,CAAC;AAsBrH,MAAM,UAAU,gCAAgC,CAAC,GAAe;IAC9D,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEvB,MAAM,IAAI,GAAG,CAAC,MAAwB,EAAQ,EAAE;QAC9C,GAAG,CAAC,IAAI,CACN;;;kGAG4F,EAC5F,MAAM,CAAC,UAAU,EACjB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EACtB,MAAM,CAAC,GAAG,EACV,MAAM,CAAC,SAAS,CACjB,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,MAAM;YACd,IAAI,CAAC,MAAM,CAAC,CAAC;QACf,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,UAAU;YAClB,MAAM,IAAI,GAAG,GAAG;iBACb,IAAI,CAAc,gEAAgE,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;iBACvG,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK;YAC5B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAC;YAC1B,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAClD,IAAI,MAAM,CAAC,EAAE;gBAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACnC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,IAAI;YACR,MAAM,IAAI,GAAG,GAAG;iBACb,IAAI,CAAc,mEAAmE,CAAC;iBACtF,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW,CAAqB,CAAC,CAAC;QACxE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/cloudflare/gateway-tools.d.ts

@@ -0,0 +1,28 @@
+import type { Vault } from '@agenticprimitives/vault';
+export interface GatewayToolContext {
+    /** The verified principal (the delegation's delegator) the op runs as. */
+    principal: string;
+    /** The co-resident vault, already bound to `principal`'s owner-scope by the DO. */
+    vault: Vault;
+    args: Record<string, unknown>;
+}
+export interface GatewayTool {
+    name: string;
+    /** `read` tools are T1-fast-lane eligible (with `sensitivity=public`); `write` forces T2 (§3). */
+    effect: 'read' | 'write';
+    run(ctx: GatewayToolContext): Promise<unknown>;
+}
+export interface GatewayToolRegistry {
+    get(name: string): GatewayTool | undefined;
+    list(): GatewayTool[];
+}
+export declare function createToolRegistry(tools: GatewayTool[]): GatewayToolRegistry;
+/**
+ * The built-in co-resident vault tools: `get_vault_record` / `set_vault_record` / `list_vault_record`,
+ * mirroring demo-mcp's surface but over the DO-local vault. `resource === recordType` directly (the DO vault
+ * is generic — no `vault:` prefix; the record-scope caveat that gates WHICH recordType is the DO's per-call
+ * caveat pass B, not the tool). `data: null` on set tombstones (fail-closed delete). Delegation authority is
+ * re-verified by the DO before any of these run (ADR-0041).
+ */
+export declare function buildVaultTools(): GatewayTool[];
+//# sourceMappingURL=gateway-tools.d.ts.map

package/dist/cloudflare/gateway-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-tools.d.ts","sourceRoot":"","sources":["../../src/cloudflare/gateway-tools.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEtD,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,SAAS,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,KAAK,EAAE,KAAK,CAAC;IACb,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,kGAAkG;IAClG,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,GAAG,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IAC3C,IAAI,IAAI,WAAW,EAAE,CAAC;CACvB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,mBAAmB,CAG5E;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,IAAI,WAAW,EAAE,CA8B/C"}

package/dist/cloudflare/gateway-tools.js

@@ -0,0 +1,45 @@
+export function createToolRegistry(tools) {
+    const map = new Map(tools.map((t) => [t.name, t]));
+    return { get: (name) => map.get(name), list: () => [...map.values()] };
+}
+/**
+ * The built-in co-resident vault tools: `get_vault_record` / `set_vault_record` / `list_vault_record`,
+ * mirroring demo-mcp's surface but over the DO-local vault. `resource === recordType` directly (the DO vault
+ * is generic — no `vault:` prefix; the record-scope caveat that gates WHICH recordType is the DO's per-call
+ * caveat pass B, not the tool). `data: null` on set tombstones (fail-closed delete). Delegation authority is
+ * re-verified by the DO before any of these run (ADR-0041).
+ */
+export function buildVaultTools() {
+    return [
+        {
+            name: 'get_vault_record',
+            effect: 'read',
+            async run({ principal, vault, args }) {
+                const recordType = String(args.recordType ?? '');
+                if (!recordType)
+                    throw new Error('recordType required');
+                const obj = await vault.read({ owner: principal, resource: recordType });
+                return { recordType, data: obj?.data ?? null };
+            },
+        },
+        {
+            name: 'set_vault_record',
+            effect: 'write',
+            async run({ principal, vault, args }) {
+                const recordType = String(args.recordType ?? '');
+                if (!recordType)
+                    throw new Error('recordType required');
+                await vault.write({ owner: principal, resource: recordType, data: args.data ?? null });
+                return { recordType, ok: true };
+            },
+        },
+        {
+            name: 'list_vault_record',
+            effect: 'read',
+            async run({ principal, vault }) {
+                return { records: await vault.list(principal) };
+            },
+        },
+    ];
+}
+//# sourceMappingURL=gateway-tools.js.map

package/dist/cloudflare/gateway-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-tools.js","sourceRoot":"","sources":["../../src/cloudflare/gateway-tools.ts"],"names":[],"mappings":"AA+BA,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe;IAC7B,OAAO;QACL;YACE,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,MAAM;YACd,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE;gBAClC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBACxD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;gBACzE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;YACjD,CAAC;SACF;QACD;YACE,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,OAAO;YACf,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE;gBAClC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;gBACjD,IAAI,CAAC,UAAU;oBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;gBACxD,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC;gBACvF,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;YAClC,CAAC;SACF;QACD;YACE,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,MAAM;YACd,KAAK,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;gBAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAClD,CAAC;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/cloudflare/index.d.ts

@@ -0,0 +1,13 @@
+export { createDurableObjectSqlVault } from './sql-vault.js';
+export { createDurableObjectExchangeStore, type ExchangeStore } from './exchange-store.js';
+export { createDurableObjectOutboxStore, type OutboxStore, type OutboxEntry } from './outbox-store.js';
+export { createDurableObjectProvenanceStore, type ProvenanceStore } from './provenance-store.js';
+export { createDurableObjectChannelStore, projectionAuthorizes, type ChannelStore, type ChannelV1, type ConversationRoleProjection, type ConversationRoleAction, } from './channel-store.js';
+export { createDurableObjectAuthorityVerdictCache, type AuthorityVerdictCache, type AuthorityVerdict, type AuthorityVerdictKey, } from './authority-verdict-cache.js';
+export { createDurableObjectRequestIdLedger, type RequestIdLedger, type RequestIdReservation } from './request-id-ledger.js';
+export { createDurableObjectReceiptSigner, verifyDeliveryReceipt, type DeliveryReceiptSigner, type DeliveryReceiptInput, type SignedDeliveryReceiptV1, } from './receipt-signer.js';
+export { PrincipalGatewayDO, type PrincipalGatewayEnv, type GatewayDeps } from './principal-gateway-do.js';
+export { buildVaultTools, createToolRegistry, type GatewayTool, type GatewayToolContext, type GatewayToolRegistry, } from './gateway-tools.js';
+export { runGatewayOrchestration, gatewayToolSpecs, bindGatewayToolInvoker } from './orchestration-runtime.js';
+export declare const FABRIC_CLOUDFLARE_ADAPTER_STATUS: "w2-coresident-mcp";
+//# sourceMappingURL=index.d.ts.map

package/dist/cloudflare/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,gCAAgC,EAAE,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,8BAA8B,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,kCAAkC,EAAE,KAAK,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACjG,OAAO,EACL,+BAA+B,EAAE,oBAAoB,EACrD,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,KAAK,0BAA0B,EAAE,KAAK,sBAAsB,GAChG,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wCAAwC,EACxC,KAAK,qBAAqB,EAC1B,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,KAAK,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC7H,OAAO,EACL,gCAAgC,EAChC,qBAAqB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,GAC7B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC3G,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,KAAK,WAAW,EAChB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE/G,eAAO,MAAM,gCAAgC,EAAG,mBAA4B,CAAC"}

package/dist/cloudflare/index.js

@@ -0,0 +1,20 @@
+// @agenticprimitives/fabric/cloudflare — the Cloudflare adapter for the PrincipalGatewayDO (spec 316 W2).
+//
+// The ONLY fabric subtree that touches `@cloudflare/workers-types`; the transport-agnostic core (`../`)
+// never imports it (spec 316 §8 boundary — `.` = pure types/reducers, `./cloudflare` = the DO adapter).
+// W2 lands incrementally: the DO-local SQLite vault (co-residency keystone, L2/§4.0) is the first piece;
+// the `PrincipalGatewayDO` class + co-resident MCP + inbox/session/AuthorityVerdictCache/RequestIdLedger
+// absorption follow in subsequent W2 steps.
+export { createDurableObjectSqlVault } from './sql-vault.js';
+export { createDurableObjectExchangeStore } from './exchange-store.js';
+export { createDurableObjectOutboxStore } from './outbox-store.js';
+export { createDurableObjectProvenanceStore } from './provenance-store.js';
+export { createDurableObjectChannelStore, projectionAuthorizes, } from './channel-store.js';
+export { createDurableObjectAuthorityVerdictCache, } from './authority-verdict-cache.js';
+export { createDurableObjectRequestIdLedger } from './request-id-ledger.js';
+export { createDurableObjectReceiptSigner, verifyDeliveryReceipt, } from './receipt-signer.js';
+export { PrincipalGatewayDO } from './principal-gateway-do.js';
+export { buildVaultTools, createToolRegistry, } from './gateway-tools.js';
+export { runGatewayOrchestration, gatewayToolSpecs, bindGatewayToolInvoker } from './orchestration-runtime.js';
+export const FABRIC_CLOUDFLARE_ADAPTER_STATUS = 'w2-coresident-mcp';
+//# sourceMappingURL=index.js.map

package/dist/cloudflare/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAAA,0GAA0G;AAC1G,EAAE;AACF,wGAAwG;AACxG,wGAAwG;AACxG,yGAAyG;AACzG,yGAAyG;AACzG,4CAA4C;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,gCAAgC,EAAsB,MAAM,qBAAqB,CAAC;AAC3F,OAAO,EAAE,8BAA8B,EAAsC,MAAM,mBAAmB,CAAC;AACvG,OAAO,EAAE,kCAAkC,EAAwB,MAAM,uBAAuB,CAAC;AACjG,OAAO,EACL,+BAA+B,EAAE,oBAAoB,GAEtD,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,wCAAwC,GAIzC,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAmD,MAAM,wBAAwB,CAAC;AAC7H,OAAO,EACL,gCAAgC,EAChC,qBAAqB,GAItB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAA8C,MAAM,2BAA2B,CAAC;AAC3G,OAAO,EACL,eAAe,EACf,kBAAkB,GAInB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAE/G,MAAM,CAAC,MAAM,gCAAgC,GAAG,mBAA4B,CAAC"}

package/dist/cloudflare/orchestration-runtime.d.ts

@@ -0,0 +1,28 @@
+import type { Vault } from '@agenticprimitives/vault';
+import { type Intent, type Planner, type RunResult, type ToolInvoker, type ToolSpec } from '@agenticprimitives/orchestration';
+import type { GatewayToolRegistry } from './gateway-tools.js';
+/** The co-resident tools as the planner's tool catalog (id + description; the plan may only reference these). */
+export declare function gatewayToolSpecs(registry: GatewayToolRegistry): ToolSpec[];
+/** Bind the co-resident tool registry as an orchestration `ToolInvoker`: each planned step dispatches to a
+ *  DO tool, run over `vault` under `principal`. Fail-closed on an unknown tool (the plan is validated against
+ *  the tool catalog too, but this is the last line). */
+export declare function bindGatewayToolInvoker(opts: {
+    registry: GatewayToolRegistry;
+    vault: Vault;
+    principal: string;
+}): ToolInvoker;
+/**
+ * Run a T2 intent to completion over the co-resident tools. `planner` is injected (LLM adapter in prod, the
+ * deterministic rule-based planner in tests). The loop is bounded (`maxSteps`); authority is NOT the loop's
+ * concern — the tools run under the already-verified `principal` (ADR-0041). Returns the orchestration
+ * `RunResult` (outcome + observations + composed result) the DO records onto the exchange stream.
+ */
+export declare function runGatewayOrchestration(intent: Intent, opts: {
+    planner: Planner;
+    registry: GatewayToolRegistry;
+    vault: Vault;
+    principal: string;
+    maxSteps?: number;
+    maxReplans?: number;
+}): Promise<RunResult>;
+//# sourceMappingURL=orchestration-runtime.d.ts.map

package/dist/cloudflare/orchestration-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestration-runtime.d.ts","sourceRoot":"","sources":["../../src/cloudflare/orchestration-runtime.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAa,KAAK,MAAM,EAAE,KAAK,OAAO,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACzI,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,iHAAiH;AACjH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,QAAQ,EAAE,CAK1E;AAED;;wDAEwD;AACxD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAAG,WAAW,CAM5H;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACjI,OAAO,CAAC,SAAS,CAAC,CAQpB"}

package/dist/cloudflare/orchestration-runtime.js

@@ -0,0 +1,35 @@
+import { runIntent } from '@agenticprimitives/orchestration';
+/** The co-resident tools as the planner's tool catalog (id + description; the plan may only reference these). */
+export function gatewayToolSpecs(registry) {
+    return registry.list().map((t) => ({
+        id: t.name,
+        description: `${t.effect === 'read' ? 'Read' : 'Write'} co-resident vault tool ${t.name}.`,
+    }));
+}
+/** Bind the co-resident tool registry as an orchestration `ToolInvoker`: each planned step dispatches to a
+ *  DO tool, run over `vault` under `principal`. Fail-closed on an unknown tool (the plan is validated against
+ *  the tool catalog too, but this is the last line). */
+export function bindGatewayToolInvoker(opts) {
+    return async (toolId, args) => {
+        const tool = opts.registry.get(toolId);
+        if (!tool)
+            throw new Error(`orchestration: unknown tool ${toolId}`);
+        return tool.run({ principal: opts.principal, vault: opts.vault, args });
+    };
+}
+/**
+ * Run a T2 intent to completion over the co-resident tools. `planner` is injected (LLM adapter in prod, the
+ * deterministic rule-based planner in tests). The loop is bounded (`maxSteps`); authority is NOT the loop's
+ * concern — the tools run under the already-verified `principal` (ADR-0041). Returns the orchestration
+ * `RunResult` (outcome + observations + composed result) the DO records onto the exchange stream.
+ */
+export function runGatewayOrchestration(intent, opts) {
+    return runIntent(intent, {
+        planner: opts.planner,
+        tools: gatewayToolSpecs(opts.registry),
+        invoke: bindGatewayToolInvoker({ registry: opts.registry, vault: opts.vault, principal: opts.principal }),
+        maxSteps: opts.maxSteps,
+        maxReplans: opts.maxReplans,
+    });
+}
+//# sourceMappingURL=orchestration-runtime.js.map

package/dist/cloudflare/orchestration-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestration-runtime.js","sourceRoot":"","sources":["../../src/cloudflare/orchestration-runtime.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,SAAS,EAA8E,MAAM,kCAAkC,CAAC;AAGzI,iHAAiH;AACjH,MAAM,UAAU,gBAAgB,CAAC,QAA6B;IAC5D,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjC,EAAE,EAAE,CAAC,CAAC,IAAI;QACV,WAAW,EAAE,GAAG,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,2BAA2B,CAAC,CAAC,IAAI,GAAG;KAC3F,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;wDAEwD;AACxD,MAAM,UAAU,sBAAsB,CAAC,IAAwE;IAC7G,OAAO,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,EAAE,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAc,EACd,IAAkI;IAElI,OAAO,SAAS,CAAC,MAAM,EAAE;QACvB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,KAAK,EAAE,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACtC,MAAM,EAAE,sBAAsB,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QACzG,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC,CAAC;AACL,CAAC"}

package/dist/cloudflare/outbox-store.d.ts

@@ -0,0 +1,24 @@
+import type { DeliveryEnvelopeV1 } from '../delivery-envelope.js';
+export interface OutboxEntry {
+    delivery: DeliveryEnvelopeV1;
+    nextAttemptAt: string;
+    attempts: number;
+    enqueuedAt: string;
+}
+export interface OutboxStore {
+    /** Enqueue (or re-enqueue) an undelivered peer delivery, idempotent by `delivery.nonce`. */
+    enqueue(delivery: DeliveryEnvelopeV1, opts: {
+        nextAttemptAt: string;
+        at: string;
+    }): Promise<void>;
+    /** Entries whose `nextAttemptAt <= now`, oldest-due first (the `alarm()` drain set). */
+    due(now: string): Promise<OutboxEntry[]>;
+    /** Remove on successful delivery. */
+    markDelivered(nonce: string): Promise<void>;
+    /** Backoff after a failed attempt: bump `attempts` + set the next attempt time. */
+    reschedule(nonce: string, nextAttemptAt: string): Promise<void>;
+    /** All queued entries. */
+    list(): Promise<OutboxEntry[]>;
+}
+export declare function createDurableObjectOutboxStore(sql: SqlStorage): OutboxStore;
+//# sourceMappingURL=outbox-store.d.ts.map

package/dist/cloudflare/outbox-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox-store.d.ts","sourceRoot":"","sources":["../../src/cloudflare/outbox-store.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAmBlE,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,4FAA4F;IAC5F,OAAO,CAAC,QAAQ,EAAE,kBAAkB,EAAE,IAAI,EAAE;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClG,wFAAwF;IACxF,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACzC,qCAAqC;IACrC,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,mFAAmF;IACnF,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,0BAA0B;IAC1B,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;CAChC;AASD,wBAAgB,8BAA8B,CAAC,GAAG,EAAE,UAAU,GAAG,WAAW,CAiC3E"}

package/dist/cloudflare/outbox-store.js

@@ -0,0 +1,42 @@
+const CREATE_TABLE = `CREATE TABLE IF NOT EXISTS outbox (
+  nonce           TEXT PRIMARY KEY,
+  delivery_json   TEXT NOT NULL,
+  next_attempt_at TEXT NOT NULL,
+  attempts        INTEGER NOT NULL DEFAULT 0,
+  enqueued_at     TEXT NOT NULL
+)`;
+const CREATE_IDX = `CREATE INDEX IF NOT EXISTS idx_outbox_due ON outbox (next_attempt_at)`;
+const toEntry = (r) => ({
+    delivery: JSON.parse(r.delivery_json),
+    nextAttemptAt: r.next_attempt_at,
+    attempts: r.attempts,
+    enqueuedAt: r.enqueued_at,
+});
+export function createDurableObjectOutboxStore(sql) {
+    sql.exec(CREATE_TABLE);
+    sql.exec(CREATE_IDX);
+    return {
+        async enqueue(delivery, opts) {
+            sql.exec(`INSERT INTO outbox (nonce, delivery_json, next_attempt_at, attempts, enqueued_at)
+         VALUES (?, ?, ?, 0, ?)
+         ON CONFLICT(nonce) DO UPDATE SET
+           delivery_json = excluded.delivery_json, next_attempt_at = excluded.next_attempt_at`, delivery.nonce, JSON.stringify(delivery), opts.nextAttemptAt, opts.at);
+        },
+        async due(now) {
+            return sql
+                .exec('SELECT * FROM outbox WHERE next_attempt_at <= ? ORDER BY next_attempt_at', now)
+                .toArray()
+                .map(toEntry);
+        },
+        async markDelivered(nonce) {
+            sql.exec('DELETE FROM outbox WHERE nonce = ?', nonce);
+        },
+        async reschedule(nonce, nextAttemptAt) {
+            sql.exec('UPDATE outbox SET next_attempt_at = ?, attempts = attempts + 1 WHERE nonce = ?', nextAttemptAt, nonce);
+        },
+        async list() {
+            return sql.exec('SELECT * FROM outbox ORDER BY enqueued_at').toArray().map(toEntry);
+        },
+    };
+}
+//# sourceMappingURL=outbox-store.js.map

package/dist/cloudflare/outbox-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"outbox-store.js","sourceRoot":"","sources":["../../src/cloudflare/outbox-store.ts"],"names":[],"mappings":"AAUA,MAAM,YAAY,GAAG;;;;;;EAMnB,CAAC;AACH,MAAM,UAAU,GAAG,uEAAuE,CAAC;AA8B3F,MAAM,OAAO,GAAG,CAAC,CAAY,EAAe,EAAE,CAAC,CAAC;IAC9C,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAuB;IAC3D,aAAa,EAAE,CAAC,CAAC,eAAe;IAChC,QAAQ,EAAE,CAAC,CAAC,QAAQ;IACpB,UAAU,EAAE,CAAC,CAAC,WAAW;CAC1B,CAAC,CAAC;AAEH,MAAM,UAAU,8BAA8B,CAAC,GAAe;IAC5D,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvB,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAErB,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI;YAC1B,GAAG,CAAC,IAAI,CACN;;;8FAGsF,EACtF,QAAQ,CAAC,KAAK,EACd,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EACxB,IAAI,CAAC,aAAa,EAClB,IAAI,CAAC,EAAE,CACR,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,GAAG;YACX,OAAO,GAAG;iBACP,IAAI,CAAY,0EAA0E,EAAE,GAAG,CAAC;iBAChG,OAAO,EAAE;iBACT,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,KAAK;YACvB,GAAG,CAAC,IAAI,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;QACxD,CAAC;QACD,KAAK,CAAC,UAAU,CAAC,KAAK,EAAE,aAAa;YACnC,GAAG,CAAC,IAAI,CAAC,gFAAgF,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QACnH,CAAC;QACD,KAAK,CAAC,IAAI;YACR,OAAO,GAAG,CAAC,IAAI,CAAY,2CAA2C,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjG,CAAC;KACF,CAAC;AACJ,CAAC"}