@agenticprimitives/runtime-member 0.0.0-alpha.10

package/dist/loop.js

@@ -0,0 +1,151 @@
+// THE LOOP'S BODY, wake-agnostic (spec 400 §5.3 / W1c). One object holds the ACP host, the sessions (one per
+// conversation) and the inbox cursor; `pollOnce` reads what arrived since the cursor as the member itself and answers
+// each message from someone else with one ACP prompt and one reply that PARKS. Who calls `pollOnce` is the host's
+// business: `ap runtime run` calls it on a timer (a laptop), `ap runtime serve` calls it when the Worker's queue wakes
+// the Container (W1c). Either way the WORKSPACE never polls and the Worker never speaks ACP.
+//
+// What the loop never does: hold anyone's session, decide an act, answer a permission prompt with "allow" for the
+// agent's own shell (the host's policy does that, refusing by default), or retry a parked act.
+import { AcpHost, collectText } from '@agenticprimitives/acp';
+import { askAs, continueAs, recordSigner } from './client.js';
+import { loadRuntimeMember } from './keystore.js';
+import { deriveForNeed, parkedNeedOf } from './standing.js';
+import { describeOutcome, inboxPlan, replyPlan, topicReplyPlan, topicOf } from './workspace-mcp.js';
+/** The context the agent gets with every prompt — who it is, where it stands, what waits on whom (§5.3). */
+export function promptFor(rec, m) {
+    const who = m.fromName ?? m.from;
+    const topic = topicOf(m.conversationId);
+    const where = topic ? `a TOPIC of ${rec.workspace.name} (id ${topic.channelId}) where you were mentioned — your answer is posted in that topic for every member` : `thread ${m.conversationId}`;
+    return [
+        `[workspace: ${rec.workspace.name} · ${where} · you are ${rec.name}, a member; your grant lets you read the workspace's records and work, offer to do a step, and send messages as yourself — every write waits for the steward's signature. Use the workspace tools to read before you answer; answer briefly, in the workspace's words.]`,
+        `${who}: ${m.text}`,
+    ].join('\n');
+}
+export class RuntimeMemberLoop {
+    o;
+    rec;
+    host;
+    mcp;
+    sessions = new Map(); // conversationId → ACP sessionId
+    log;
+    cursor;
+    busy = Promise.resolve([]);
+    started = false;
+    constructor(o) {
+        this.o = o;
+        this.rec = loadRuntimeMember(o.member);
+        this.log = o.log ?? ((l) => process.stderr.write(`${l}\n`));
+        this.mcp = { name: 'workspace', ...(o.mcpCommand ?? { command: 'ap', args: ['runtime', 'mcp', '--member', this.rec.name] }) };
+        this.host = new AcpHost({ command: o.agent[0], args: o.agent.slice(1), workspaceServerName: 'workspace', ...(o.permission ? { permission: o.permission } : {}), ...(o.cwd ? { cwd: o.cwd } : {}), onStderr: (l) => this.log(`  [agent] ${l}`) });
+        this.cursor = o.since;
+    }
+    get cursorNow() { return this.cursor; }
+    ask(text, plan) {
+        return askAs(this.rec, this.rec.name, text, { plan, fetch: this.o.fetch, signer: this.o.signer });
+    }
+    /** Start the agent; take the cursor from "now" unless one was given — a runtime that joins today does not answer last month. */
+    async start() {
+        if (this.started)
+            return;
+        const init = await this.host.start();
+        this.log(`${this.rec.name} · agent ${init.agentInfo?.name ?? this.o.agent[0]} (ACP v${init.protocolVersion}) · workspace ${this.rec.workspace.name} · edge ${this.rec.edge}`);
+        this.host.on('permission', (r, out) => this.log(`  permission ${r.toolCall.title ?? r.toolCall.toolCallId} → ${'optionId' in out.outcome ? out.outcome.optionId : 'cancelled'}`));
+        if (!this.cursor && !this.o.woken) {
+            const first = await this.ask("what's new for me", inboxPlan(undefined, 1));
+            this.cursor = first.data?.cursor ?? undefined;
+        }
+        this.started = true;
+    }
+    async sessionFor(conversationId) {
+        const have = this.sessions.get(conversationId);
+        if (have)
+            return have;
+        const s = await this.host.newSession(this.o.cwd ?? process.cwd(), [this.mcp]);
+        this.sessions.set(conversationId, s.sessionId);
+        return s.sessionId;
+    }
+    /** One pass: everything since the cursor, each message from someone else answered. Serialized — a wake that lands
+     *  while a pass runs waits for it (the cursor is the dedupe; two wakes for one message cost one turn). */
+    pollOnce(maxTurns, wake) {
+        const next = this.busy.then(() => this.pass(maxTurns, wake), () => this.pass(maxTurns, wake));
+        this.busy = next;
+        return next;
+    }
+    async pass(maxTurns, wake) {
+        if (!this.started)
+            await this.start();
+        const cold = !this.cursor;
+        const polled = await this.ask(`what's new for me${this.cursor ? ` since ${this.cursor}` : ''}`, inboxPlan(this.cursor, 20)).catch((e) => { this.log(`  poll failed: ${e.message}`); return null; });
+        const data = polled?.data;
+        let listed = data?.messages ?? [];
+        if (cold && this.o.woken) {
+            // A COLD, WOKEN start: everything up to the waking message is history; the waking message and what followed it
+            // are the pass. Woken without a message id (or the id not in the newest page) → history only, cursor at the end.
+            const at = wake?.messageId ? listed.findIndex((m) => m.id === wake.messageId) : -1;
+            listed = at >= 0 ? listed.slice(at) : [];
+            if (at < 0 && wake?.messageId)
+                this.log(`  woken for ${wake.messageId}, which is not among the newest ${data?.messages?.length ?? 0} — nothing to answer`);
+        }
+        const fresh = listed.filter((m) => !m.mine);
+        if (data?.cursor)
+            this.cursor = data.cursor;
+        const reports = [];
+        for (const m of fresh) {
+            if (maxTurns !== undefined && reports.length >= maxTurns)
+                break;
+            reports.push(await this.turn(m));
+        }
+        return reports;
+    }
+    async turn(m) {
+        const sessionId = await this.sessionFor(m.conversationId);
+        const prompt = promptFor(this.rec, m);
+        this.log(`→ ${m.fromName ?? m.from}: ${m.text.slice(0, 80)}`);
+        const text = collectText(this.host, sessionId);
+        const done = await this.host.prompt(sessionId, [{ type: 'text', text: prompt }]);
+        text.stop();
+        const answer = text.text().trim();
+        this.log(`← ${this.rec.name} (${done.stopReason}): ${answer.slice(0, 120)}`);
+        let reply = '(no answer)';
+        let parkedRunRef;
+        let underStandingGrant;
+        if (answer) {
+            const to = m.fromName ?? m.from;
+            // WHERE THE REPLY GOES (spec 400 W2, B3): a mention in a topic is answered IN THAT TOPIC, as the member; a DM is
+            // answered with a DM to whoever wrote. The thread id says which.
+            const topic = topicOf(m.conversationId);
+            let sent = await (topic
+                ? this.ask(`post in the topic: ${answer}`, topicReplyPlan(topic.org, topic.channelId, answer))
+                : this.ask(`send ${to} a message: ${answer}`, replyPlan(to, answer))).catch((e) => ({ text: e.message, state: 'ERROR', parked: false }));
+            // Spec 400 W2a — THE OPEN MANDATE. The reply parked for a mandate; the custodian granted this runtime a standing
+            // one for exactly this capability. Derive the child for THIS intent, sign it with our key, continue the same run
+            // presenting the chain. The harness verifies it there; a chain that does not verify leaves the run parked, and
+            // the report says so. No grant, or a need outside it (a commit, a payment) → parked, as before.
+            const need = sent.parked && sent.state === 'TASK_STATE_AUTH_REQUIRED' && sent.taskId ? parkedNeedOf(sent.data) : null;
+            if (need && this.rec.standing) {
+                const derived = await deriveForNeed(this.rec.standing, need, this.rec.agent, this.o.signer ?? recordSigner(this.rec)).catch((e) => ({ ok: false, reason: e.message }));
+                if (derived.ok) {
+                    const cont = await continueAs(this.rec, this.rec.name, sent.taskId, derived.presented, { fetch: this.o.fetch, signer: this.o.signer }).catch((e) => ({ text: e.message, state: 'ERROR', parked: false }));
+                    this.log(`  standing grant → child ${derived.childRef.slice(0, 12)}… → ${cont.state}`);
+                    if (!cont.parked && cont.state !== 'ERROR') {
+                        sent = cont;
+                        underStandingGrant = { childRef: derived.childRef, standingRef: this.rec.standing.ref };
+                    }
+                    else
+                        sent = { ...sent, text: `${sent.text} (the standing grant did not carry it: ${cont.text || cont.state})` };
+                }
+                else
+                    this.log(`  standing grant does not cover this: ${derived.reason}`);
+            }
+            reply = describeOutcome(sent);
+            if (sent.parked)
+                parkedRunRef = sent.runRef ?? sent.taskId;
+            this.log(`  reply → ${reply.slice(0, 140)}`);
+        }
+        const report = { messageId: m.id, from: m.from, fromName: m.fromName, conversationId: m.conversationId, prompt, answer, reply, ...(parkedRunRef ? { parkedRunRef } : {}), ...(underStandingGrant ? { underStandingGrant } : {}) };
+        this.o.onTurn?.(report);
+        return report;
+    }
+    async stop() { await this.busy.catch(() => undefined); await this.host.stop(); }
+}
+//# sourceMappingURL=loop.js.map

package/dist/loop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loop.js","sourceRoot":"","sources":["../src/loop.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,sHAAsH;AACtH,kHAAkH;AAClH,uHAAuH;AACvH,6FAA6F;AAC7F,EAAE;AACF,kHAAkH;AAClH,+FAA+F;AAC/F,OAAO,EAAE,OAAO,EAAE,WAAW,EAA8C,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAgC,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAA8B,MAAM,eAAe,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AA8BpG,4GAA4G;AAC5G,MAAM,UAAU,SAAS,CAAC,GAA0B,EAAE,CAAe;IACnE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,cAAc,GAAG,CAAC,SAAS,CAAC,IAAI,QAAQ,KAAK,CAAC,SAAS,mFAAmF,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,cAAc,EAAE,CAAC;IAChM,OAAO;QACL,eAAe,GAAG,CAAC,SAAS,CAAC,IAAI,MAAM,KAAK,cAAc,GAAG,CAAC,IAAI,yQAAyQ;QAC3U,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE;KACpB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,MAAM,OAAO,iBAAiB;IAUC;IATpB,GAAG,CAAwB;IACnB,IAAI,CAAU;IACd,GAAG,CAAiB;IACpB,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAG,iCAAiC;IACzE,GAAG,CAAyB;IACrC,MAAM,CAAqB;IAC3B,IAAI,GAA0B,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClD,OAAO,GAAG,KAAK,CAAC;IAExB,YAA6B,CAAc;QAAd,MAAC,GAAD,CAAC,CAAa;QACzC,IAAI,CAAC,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9H,IAAI,CAAC,IAAI,GAAG,IAAI,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAClP,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,IAAI,SAAS,KAAyB,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAEnD,GAAG,CAAC,IAAY,EAAE,IAAkC;QAC1D,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACpG,CAAC;IAED,gIAAgI;IAChI,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QACzB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,YAAY,IAAI,CAAC,SAAS,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,eAAe,iBAAiB,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,WAAW,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9K,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,MAAM,UAAU,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAClL,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3E,IAAI,CAAC,MAAM,GAAI,KAAK,CAAC,IAAwC,EAAE,MAAM,IAAI,SAAS,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACtB,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,cAAsB;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/C,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,CAAC,CAAC,SAAS,CAAC;IACrB,CAAC;IAED;8GAC0G;IAC1G,QAAQ,CAAC,QAAiB,EAAE,IAA6B;QACvD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9F,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,QAAiB,EAAE,IAA6B;QACjE,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3M,MAAM,IAAI,GAAG,MAAM,EAAE,IAAkE,CAAC;QACxF,IAAI,MAAM,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;YACzB,+GAA+G;YAC/G,iHAAiH;YACjH,MAAM,EAAE,GAAG,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnF,MAAM,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,SAAS,mCAAmC,IAAI,EAAE,QAAQ,EAAE,MAAM,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC7J,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,IAAI,EAAE,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC5C,MAAM,OAAO,GAAiB,EAAE,CAAC;QACjC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ;gBAAE,MAAM;YAChE,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,CAAe;QAChC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;QACjF,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7E,IAAI,KAAK,GAAG,aAAa,CAAC;QAAC,IAAI,YAAgC,CAAC;QAAC,IAAI,kBAAoD,CAAC;QAC1H,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC;YAChC,iHAAiH;YACjH,iEAAiE;YACjE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;YACxC,IAAI,IAAI,GAAG,MAAM,CAAC,KAAK;gBACrB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,MAAM,EAAE,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;gBAC9F,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,MAAM,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CACrE,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YACxF,iHAAiH;YACjH,iHAAiH;YACjH,+GAA+G;YAC/G,gGAAgG;YAChG,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,0BAA0B,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACtH,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAC9B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;gBACvL,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;oBACf,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,MAAO,EAAE,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;oBAC9N,IAAI,CAAC,GAAG,CAAC,4BAA4B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;oBACvF,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;wBAAC,IAAI,GAAG,IAAI,CAAC;wBAAC,kBAAkB,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC;oBAAC,CAAC;;wBAChJ,IAAI,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,0CAA0C,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;gBAClH,CAAC;;oBAAM,IAAI,CAAC,GAAG,CAAC,yCAAyC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM;gBAAE,YAAY,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;YAC3D,IAAI,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,MAAM,GAAe,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC9O,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,KAAoB,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;CAChG"}

package/dist/messaging.d.ts

@@ -0,0 +1,19 @@
+import { type Address, type Hex } from 'viem';
+import type { Contracts, CustodianSigner } from './equip.js';
+export declare const MESSAGING_WIRE_SKILLS: readonly ["messaging.deliver", "interactions.respond", "interactions.deliverCredential"];
+export interface EnableMessagingInput {
+    a2a: string;
+    member: Address;
+    recipients: Address[];
+    contracts: Contracts;
+    custodian: CustodianSigner;
+    stewardship?: unknown;
+    validForSeconds?: number;
+    fetch?: typeof fetch;
+}
+/** Enable (or widen) the member's messaging rail to `recipients`. Returns the recipients now covered. */
+export declare function enableMessaging(i: EnableMessagingInput): Promise<{
+    recipients: Address[];
+    hash: Hex;
+}>;
+//# sourceMappingURL=messaging.d.ts.map

package/dist/messaging.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging.d.ts","sourceRoot":"","sources":["../src/messaging.ts"],"names":[],"mappings":"AASA,OAAO,EAAS,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAIrD,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7D,eAAO,MAAM,qBAAqB,0FAA2F,CAAC;AAiB9H,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,EAAE,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;IACrB,SAAS,EAAE,eAAe,CAAC;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,yGAAyG;AACzG,wBAAsB,eAAe,CAAC,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC;IAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE,CAAC,CAe5G"}

package/dist/messaging.js

@@ -0,0 +1,51 @@
+// THE MEMBER'S MESSAGING RAIL (spec 400 W2a) — what the Home's ceremony does for a person or an organization, done by
+// `ap runtime` for the runtime member: its custodian signs (1) the SIGNING WIRE, member → the deployment's
+// interactions-session key, pinned to the messaging skills, and (2) the TRANSPORT GRANT, member → member, naming the
+// recipients it may deliver to. Both are installed on the member's own object (`messaging.wireEnable`, self or
+// steward), and re-verified there: delegator, delegate, shape, signature, on-chain revocation. Without this rail a
+// reply the harness has authorized still cannot leave (`wire_absent`) — an open mandate needs a rail to run on.
+//
+// THE UNION IS THE POINT (the Home's rule): installing a wire replaces the previous one, so the recipients already
+// covered are read first and carried forward; a new contact widens, never narrows.
+import { toHex } from 'viem';
+import { buildCaveat, encodeAllowedMethodsTerms, encodeAllowedTargetsTerms, encodeTimestampTerms, hashDelegation, ROOT_AUTHORITY } from '@agenticprimitives/delegation';
+import { skillSelector } from '@agenticprimitives/a2a';
+export const MESSAGING_WIRE_SKILLS = ['messaging.deliver', 'interactions.respond', 'interactions.deliverCredential'];
+const j = async (r) => { const t = await r.text(); try {
+    return JSON.parse(t);
+}
+catch {
+    return { _raw: t.slice(0, 200), _status: r.status };
+} };
+function messagingCaveats(c, recipients, validUntil) {
+    return [
+        buildCaveat(c.timestampEnforcer, encodeTimestampTerms(0, validUntil)),
+        buildCaveat(c.allowedTargetsEnforcer, encodeAllowedTargetsTerms(recipients)),
+        buildCaveat(c.allowedMethodsEnforcer, encodeAllowedMethodsTerms(MESSAGING_WIRE_SKILLS.map((s) => skillSelector(s)))),
+    ];
+}
+async function signed(d, c, sign) {
+    d.signature = await sign(hashDelegation(d, c.chainId, c.delegationManager));
+    return { ...d, salt: d.salt.toString() };
+}
+/** Enable (or widen) the member's messaging rail to `recipients`. Returns the recipients now covered. */
+export async function enableMessaging(i) {
+    const f = i.fetch ?? fetch;
+    const a2a = i.a2a.replace(/\/$/, '');
+    const op = async (name, body) => j(await f(`${a2a}/interactions/${i.member}/${name}`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ session: i.custodian.bearer, ...(i.stewardship ? { stewardship: i.stewardship } : {}), ...body }) }));
+    const status = await op('messaging.wireStatus', {});
+    if (status.ok !== true || !status.sessionKey)
+        throw new Error(`the member's rail could not be read: ${status.error ?? JSON.stringify(status).slice(0, 160)}`);
+    const recipients = [...new Set([...(status.recipients ?? []), ...i.recipients].map((r) => r.toLowerCase()))].filter((r) => r !== i.member.toLowerCase());
+    if (!recipients.length)
+        throw new Error('name at least one recipient');
+    const validUntil = Math.floor(Date.now() / 1000) + (i.validForSeconds ?? 90 * 86_400);
+    const salt = () => BigInt(toHex(crypto.getRandomValues(new Uint8Array(16))));
+    const wire = await signed({ delegator: i.member, delegate: status.sessionKey, authority: ROOT_AUTHORITY, caveats: messagingCaveats(i.contracts, recipients, validUntil), salt: salt(), signature: '0x' }, i.contracts, i.custodian.signDigest);
+    const transport = await signed({ delegator: i.member, delegate: i.member, authority: ROOT_AUTHORITY, caveats: messagingCaveats(i.contracts, recipients, validUntil), salt: salt(), signature: '0x' }, i.contracts, i.custodian.signDigest);
+    const put = await op('messaging.wireEnable', { delegation: wire, transport });
+    if (put.ok !== true || !put.hash)
+        throw new Error(`the messaging rail was not enabled: ${put.error ?? JSON.stringify(put).slice(0, 200)}`);
+    return { recipients: (put.recipients ?? recipients).map((r) => r.toLowerCase()), hash: put.hash };
+}
+//# sourceMappingURL=messaging.js.map

package/dist/messaging.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging.js","sourceRoot":"","sources":["../src/messaging.ts"],"names":[],"mappings":"AAAA,sHAAsH;AACtH,2GAA2G;AAC3G,qHAAqH;AACrH,+GAA+G;AAC/G,mHAAmH;AACnH,gHAAgH;AAChH,EAAE;AACF,mHAAmH;AACnH,mFAAmF;AACnF,OAAO,EAAE,KAAK,EAA0B,MAAM,MAAM,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,cAAc,EAAE,cAAc,EAAmB,MAAM,+BAA+B,CAAC;AACzL,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAIvD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,gCAAgC,CAAU,CAAC;AAE9H,MAAM,CAAC,GAAG,KAAK,EAAE,CAAW,EAAoC,EAAE,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAA4B,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAAC,CAAC,CAAC,CAAC,CAAC;AAEzN,SAAS,gBAAgB,CAAC,CAAY,EAAE,UAAqB,EAAE,UAAkB;IAC/E,OAAO;QACL,WAAW,CAAC,CAAC,CAAC,iBAAiB,EAAE,oBAAoB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QACrE,WAAW,CAAC,CAAC,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,UAAU,CAAC,CAAC;QAC5E,WAAW,CAAC,CAAC,CAAC,sBAAsB,EAAE,yBAAyB,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACrH,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,MAAM,CAAC,CAAa,EAAE,CAAY,EAAE,IAAY;IAC7D,CAAC,CAAC,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC5E,OAAO,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC3C,CAAC;AAaD,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,CAAuB;IAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;IAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,EAAE,GAAG,KAAK,EAAE,IAAY,EAAE,IAA6B,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,GAAG,iBAAiB,CAAC,CAAC,MAAM,IAAI,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACvT,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,sBAAsB,EAAE,EAAE,CAAiF,CAAC;IACpI,IAAI,MAAM,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC9J,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACpK,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,EAAE,GAAG,MAAM,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAqB,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC1P,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3O,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,sBAAsB,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAwE,CAAC;IACrJ,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC3I,OAAO,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,UAAU,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAa,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;AAC/G,CAAC"}

package/dist/pair.d.ts

@@ -0,0 +1,19 @@
+import type { RuntimeMemberRecordV1 } from './record.js';
+import type { RuntimeHostV1 } from './equip.js';
+export interface PairOptions {
+    home: string;
+    code: string;
+    /** How this runtime is hosted — what the Worker should wake. Omitted: the custodian's minted choice stands. */
+    wake?: RuntimeHostV1 | null;
+    /** Which ACP agent this runtime runs (informational, shown on the Home). */
+    agent?: string;
+    pollMs?: number;
+    timeoutMs?: number;
+    fetch?: typeof fetch;
+    log?: (line: string) => void;
+}
+export declare function runtimePair(o: PairOptions): Promise<{
+    path: string;
+    record: RuntimeMemberRecordV1;
+}>;
+//# sourceMappingURL=pair.d.ts.map

package/dist/pair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair.d.ts","sourceRoot":"","sources":["../src/pair.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,+GAA+G;IAC/G,IAAI,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAC5B,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAID,wBAAsB,WAAW,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,CAAC,CA4B1G"}

package/dist/pair.js

@@ -0,0 +1,51 @@
+// `ap runtime pair <code> --home <url>` — join a workspace with a PAIRING CODE the custodian minted at her Home
+// (spec 400 W1b). The runtime generates its key HERE, claims the code with the key's address, and waits while the
+// custodian approves on her Home — every signature hers, in her browser — then takes the finished record ONCE and
+// keeps it with the key. No Home session, no persona key, no secret but the code — and the code grants nothing.
+import { generatePrivateKey, privateKeyToAccount } from 'viem/accounts';
+import { saveRuntimeMember } from './keystore.js';
+import { PAIRING_CODE_RE, pairingHandleOf } from './pairing.js';
+const j = async (r) => { const t = await r.text(); try {
+    return JSON.parse(t);
+}
+catch {
+    return { _raw: t.slice(0, 200), _status: r.status };
+} };
+export async function runtimePair(o) {
+    const f = o.fetch ?? fetch;
+    const log = o.log ?? (() => undefined);
+    const code = o.code.trim();
+    if (!PAIRING_CODE_RE.test(code))
+        throw new Error(`not a pairing code: ${code} (expected <handle>-XXXXXX, as the Home shows it)`);
+    const home = o.home.replace(/\/$/, '');
+    const key = generatePrivateKey();
+    const address = privateKeyToAccount(key).address;
+    log(`key ${address} generated here — never leaves this machine`);
+    const claim = await j(await f(`${home}/connect/runtime-pair/claim`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ code, address, ...(o.wake !== undefined ? { wake: o.wake } : {}), ...(o.agent ? { agent: o.agent } : {}) }) }));
+    if (claim.ok !== true)
+        throw new Error(`the code was not accepted at ${home}: ${claim.error ?? JSON.stringify(claim).slice(0, 200)}`);
+    log(`claimed ${code} — ${pairingHandleOf(code)} sees the request on their Home; waiting for approval…`);
+    const started = Date.now();
+    for (;;) {
+        if (Date.now() - started > (o.timeoutMs ?? 15 * 60_000))
+            throw new Error('pairing timed out — mint a new code at the Home and try again');
+        await new Promise((r) => setTimeout(r, o.pollMs ?? 3000));
+        const got = await j(await f(`${home}/connect/runtime-pair/take`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ code, address }) }));
+        if (got.ok !== true)
+            throw new Error(`pairing failed: ${got.error ?? JSON.stringify(got).slice(0, 200)}`);
+        if (got.state === 'completed' && got.record) {
+            if (got.record.address.toLowerCase() !== address.toLowerCase())
+                throw new Error('the record names another key — refusing it');
+            const record = { ...got.record, key };
+            const path = saveRuntimeMember(record);
+            log(`✓ paired — ${record.name} in ${record.workspace.name}; wire until ${new Date(record.validUntil * 1000).toISOString().slice(0, 10)}${record.standing ? `; open mandate ${record.standing.requirement.actions.join(', ')}` : '; every write parks'}\n  kept at ${path} (0600)`);
+            return { path, record };
+        }
+        if (got.state === 'claimed')
+            continue;
+        if (got.state === 'minted')
+            continue;
+        throw new Error(`unexpected pairing state ${String(got.state)}`);
+    }
+}
+//# sourceMappingURL=pair.js.map

package/dist/pair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pair.js","sourceRoot":"","sources":["../src/pair.ts"],"names":[],"mappings":"AAAA,gHAAgH;AAChH,kHAAkH;AAClH,kHAAkH;AAClH,gHAAgH;AAChH,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAAE,eAAe,EAAE,eAAe,EAAuB,MAAM,cAAc,CAAC;AAgBrF,MAAM,CAAC,GAAG,KAAK,EAAE,CAAW,EAAoC,EAAE,GAAG,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAA4B,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAAC,CAAC,CAAC,CAAC,CAAC;AAEzN,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAc;IAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC;IAAC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,IAAI,mDAAmD,CAAC,CAAC;IACjI,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,kBAAkB,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACjD,GAAG,CAAC,OAAO,OAAO,6CAA6C,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,6BAA6B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAA6D,CAAC;IAC1U,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,IAAI,KAAK,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IACtI,GAAG,CAAC,WAAW,IAAI,MAAM,eAAe,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;IACxG,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,SAAS,CAAC;QACR,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,GAAG,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC1I,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC;QAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,4BAA4B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAkG,CAAC;QACjR,IAAI,GAAG,CAAC,EAAE,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1G,IAAI,GAAG,CAAC,KAAK,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YAC5C,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;YAC9H,MAAM,MAAM,GAA0B,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC;YAC7D,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YACvC,GAAG,CAAC,cAAc,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,eAAe,IAAI,SAAS,CAAC,CAAC;YACnR,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS;YAAE,SAAS;QACtC,IAAI,GAAG,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QACrC,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}

package/dist/pairing.d.ts

@@ -0,0 +1,61 @@
+import type { Address } from 'viem';
+import type { RuntimeMemberRecordV1 } from './record.js';
+import type { RuntimeHostV1 } from './equip.js';
+/** `<handle>-<6 base32 chars>` — the handle names whose Home holds the code, so a runtime needs only the code + the Home. */
+export declare const PAIRING_CODE_RE: RegExp;
+export declare const pairingHandleOf: (code: string) => string | null;
+/** What the custodian chose when minting — everything the equip step needs except the runtime's key. */
+export interface PairingOptionsV1 {
+    member: string;
+    workspace: string;
+    validForSeconds: number;
+    openMandate: string[];
+    messagingTo: Address[];
+    /** `container` is the app's own Container binding; `poll` = the runtime polls (no host declared). */
+    wake: 'container' | 'poll' | {
+        url: string;
+    };
+}
+export interface PairingClaimV1 {
+    address: Address;
+    wake?: RuntimeHostV1 | null;
+    agent?: string;
+    claimedAt: string;
+}
+export type PairingStateV1 = {
+    v: 1;
+    code: string;
+    state: 'minted';
+    options: PairingOptionsV1;
+    mintedAt: string;
+    expiresAt: string;
+} | {
+    v: 1;
+    code: string;
+    state: 'claimed';
+    options: PairingOptionsV1;
+    mintedAt: string;
+    expiresAt: string;
+    claim: PairingClaimV1;
+} | {
+    v: 1;
+    code: string;
+    state: 'completed';
+    options: PairingOptionsV1;
+    mintedAt: string;
+    expiresAt: string;
+    claim: PairingClaimV1;
+    record: Omit<RuntimeMemberRecordV1, 'key'>;
+    completedAt: string;
+} | {
+    v: 1;
+    code: string;
+    state: 'taken';
+    options: PairingOptionsV1;
+    mintedAt: string;
+    expiresAt: string;
+    claim: PairingClaimV1;
+    completedAt: string;
+    takenAt: string;
+};
+//# sourceMappingURL=pairing.d.ts.map

package/dist/pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../src/pairing.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,6HAA6H;AAC7H,eAAO,MAAM,eAAe,QAAoD,CAAC;AACjF,eAAO,MAAM,eAAe,SAAU,MAAM,KAAG,MAAM,GAAG,IAAsD,CAAC;AAE/G,wGAAwG;AACxG,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,OAAO,EAAE,CAAC;IACvB,qGAAqG;IACrG,IAAI,EAAE,WAAW,GAAG,MAAM,GAAG;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9C;AAED,MAAM,WAAW,cAAc;IAAG,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAEpH,MAAM,MAAM,cAAc,GACtB;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACvG;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAA;CAAE,GAC/H;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,WAAW,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAClM;IAAE,CAAC,EAAE,CAAC,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/pairing.js

@@ -0,0 +1,4 @@
+/** `<handle>-<6 base32 chars>` — the handle names whose Home holds the code, so a runtime needs only the code + the Home. */
+export const PAIRING_CODE_RE = /^([a-z0-9][a-z0-9-]{0,62})-([A-HJ-NP-Z2-9]{6})$/;
+export const pairingHandleOf = (code) => PAIRING_CODE_RE.exec(code.trim())?.[1] ?? null;
+//# sourceMappingURL=pairing.js.map

package/dist/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../src/pairing.ts"],"names":[],"mappings":"AAYA,6HAA6H;AAC7H,MAAM,CAAC,MAAM,eAAe,GAAG,iDAAiD,CAAC;AACjF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAiB,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC"}

package/dist/record.d.ts

@@ -0,0 +1,33 @@
+export interface RuntimeMemberRecordV1 {
+    v: 1;
+    /** The member's typed name (`goose-1.svc`) and Smart Agent address. */
+    name: string;
+    agent: `0x${string}`;
+    /** The workspace the runtime belongs to — the organization's typed name and address. */
+    workspace: {
+        name: string;
+        agent: `0x${string}`;
+    };
+    /** The runtime's own key (hex private key) — generated on this machine; its address is the wire's delegate.
+     *  Absent from a record that travels (a Container's `AP_RUNTIME_RECORD`): the key then comes from `AP_RUNTIME_KEY`
+     *  or a signer port, never from the record. */
+    key?: `0x${string}`;
+    address: `0x${string}`;
+    /** The session wire: member SA → this key, pinned to `harness.ask`, signed by the member's custodian. */
+    wire: Record<string, unknown>;
+    wireRef: `0x${string}`;
+    validUntil: number;
+    /** The standard A2A surface: `<edge>/api/a2a/<name>` answers for any agent by name; `audience` is its origin. */
+    edge: string;
+    audience: string;
+    /** The agent runtime's host, for the steward-side ops `ap runtime` drives on the member's own object. */
+    a2a: string;
+    chainId: number;
+    /** The Home that minted the wire (for `ap runtime status`, never for a session). */
+    home: string;
+    joinedAt: string;
+    /** Spec 400 W2a — the OPEN MANDATE: a standing grant (member → this key, named capabilities, no intent binding)
+     *  the custodian signed once; the loop derives a child per parked reply. Absent: every write parks. */
+    standing?: import('./standing.js').StandingGrantV1;
+}
+//# sourceMappingURL=record.d.ts.map

package/dist/record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.d.ts","sourceRoot":"","sources":["../src/record.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,qBAAqB;IACpC,CAAC,EAAE,CAAC,CAAC;IACL,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,wFAAwF;IACxF,SAAS,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,MAAM,EAAE,CAAA;KAAE,CAAC;IAClD;;mDAE+C;IAC/C,GAAG,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,yGAAyG;IACzG,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,iHAAiH;IACjH,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,yGAAyG;IACzG,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB;2GACuG;IACvG,QAAQ,CAAC,EAAE,OAAO,eAAe,EAAE,eAAe,CAAC;CACpD"}

package/dist/record.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=record.js.map

package/dist/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../src/record.ts"],"names":[],"mappings":""}

package/dist/run.d.ts

@@ -0,0 +1,8 @@
+import { type LoopOptions } from './loop.js';
+export interface RunOptions extends LoopOptions {
+    pollMs?: number;
+    /** Stop after this many turns (tests, gates); default: forever. */
+    maxTurns?: number;
+}
+export declare function runRuntimeMember(o: RunOptions): Promise<void>;
+//# sourceMappingURL=run.d.ts.map

package/dist/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAGA,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,WAAW,CAAC;AAEhE,MAAM,WAAW,UAAW,SAAQ,WAAW;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBnE"}

package/dist/run.js

@@ -0,0 +1,24 @@
+// `ap runtime run` — THE LOOP ON A TIMER (spec 400 §5.3): the laptop shape. Poll the member's own inbox as itself
+// every few seconds and hand each pass to `RuntimeMemberLoop`. The Container shape (`ap runtime serve`, W1c) runs
+// the same loop woken by the Worker instead of by a clock.
+import { RuntimeMemberLoop } from './loop.js';
+export async function runRuntimeMember(o) {
+    const loop = new RuntimeMemberLoop(o);
+    const log = o.log ?? ((l) => process.stderr.write(`${l}\n`));
+    await loop.start();
+    log(`polling every ${(o.pollMs ?? 15_000) / 1000}s from cursor ${loop.cursorNow ?? '(start)'}`);
+    let turns = 0;
+    try {
+        while (o.maxTurns === undefined || turns < o.maxTurns) {
+            const reports = await loop.pollOnce(o.maxTurns === undefined ? undefined : o.maxTurns - turns);
+            turns += reports.length;
+            if (o.maxTurns !== undefined && turns >= o.maxTurns)
+                break;
+            await new Promise((r) => setTimeout(r, o.pollMs ?? 15_000));
+        }
+    }
+    finally {
+        await loop.stop();
+    }
+}
+//# sourceMappingURL=run.js.map

package/dist/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../src/run.ts"],"names":[],"mappings":"AAAA,kHAAkH;AAClH,kHAAkH;AAClH,2DAA2D;AAC3D,OAAO,EAAE,iBAAiB,EAAoB,MAAM,WAAW,CAAC;AAQhE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,CAAa;IAClD,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACnB,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,IAAI,iBAAiB,IAAI,CAAC,SAAS,IAAI,SAAS,EAAE,CAAC,CAAC;IAChG,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,CAAC;QACH,OAAO,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC;YAC/F,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;YACxB,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,IAAI,CAAC,CAAC,QAAQ;gBAAE,MAAM;YAC3D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/serve.d.ts

@@ -0,0 +1,26 @@
+import { type Server } from 'node:http';
+import { RuntimeMemberLoop, type LoopOptions, type TurnReport } from './loop.js';
+export interface ServeOptions extends LoopOptions {
+    port?: number;
+    host?: string;
+    /** A slow safety pass in case a wake is lost (Queues are at-least-once; default: none). */
+    fallbackPollMs?: number;
+}
+export interface WakeRequestV1 {
+    v?: 1;
+    member?: string;
+    conversationId?: string;
+    messageId?: string;
+}
+export interface WakeReplyV1 {
+    ok: true;
+    member: string;
+    cursor: string | null;
+    turns: TurnReport[];
+}
+export declare function serveRuntimeMember(o: ServeOptions): Promise<{
+    server: Server;
+    loop: RuntimeMemberLoop;
+    close: () => Promise<void>;
+}>;
+//# sourceMappingURL=serve.d.ts.map

package/dist/serve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.d.ts","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAQA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,WAAW,CAAC;AAEjF,MAAM,WAAW,YAAa,SAAQ,WAAW;IAC/C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,2FAA2F;IAC3F,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,aAAa;IAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE;AACtG,MAAM,WAAW,WAAW;IAAG,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,UAAU,EAAE,CAAA;CAAE;AAErG,wBAAsB,kBAAkB,CAAC,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAC;IAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE,CAAC,CA2B1I"}

package/dist/serve.js

@@ -0,0 +1,51 @@
+// `ap runtime serve` — THE LOOP WOKEN, NOT CLOCKED (spec 400 W1c): the Container shape. The Worker's queue consumer
+// calls `POST /wake {member, conversationId, messageId}` after a message is ADMITTED into the member's inbox; this
+// host runs one pass of the same loop the laptop runs on a timer and answers with the turn reports, which the Worker
+// keeps as the wake's receipt. The wake carries no content and no authority — the loop reads the message itself,
+// under its own wire; a stray wake costs one inbox read and finds nothing new.
+//
+// The Worker never speaks ACP: stdio stays between this process and the agent it spawned. The Container never IS the
+// identity: the wire is the custodian's to revoke, and after that every read here is refused.
+import { createServer } from 'node:http';
+import { RuntimeMemberLoop } from './loop.js';
+export async function serveRuntimeMember(o) {
+    const loop = new RuntimeMemberLoop({ ...o, woken: true });
+    const log = o.log ?? ((l) => process.stderr.write(`${l}\n`));
+    await loop.start();
+    const server = createServer(async (req, res) => {
+        const reply = (status, body) => { res.writeHead(status, { 'content-type': 'application/json' }); res.end(JSON.stringify(body)); };
+        if (req.method === 'GET' && req.url === '/healthz')
+            return reply(200, { ok: true, member: loop.rec.name, cursor: loop.cursorNow ?? null });
+        if (req.method === 'POST' && req.url === '/wake') {
+            let raw = '';
+            for await (const c of req)
+                raw += c;
+            let wake = {};
+            try {
+                wake = raw ? JSON.parse(raw) : {};
+            }
+            catch {
+                return reply(400, { error: 'wake body is not JSON' });
+            }
+            if (wake.member && wake.member !== loop.rec.name)
+                return reply(404, { error: `this host serves ${loop.rec.name}, not ${wake.member}` });
+            log(`wake${wake.messageId ? ` for ${wake.messageId}` : ''}${wake.conversationId ? ` in ${wake.conversationId}` : ''}`);
+            const turns = await loop.pollOnce(undefined, { ...(wake.messageId ? { messageId: wake.messageId } : {}) }).catch((e) => { log(`  pass failed: ${e.message}`); return null; });
+            if (!turns)
+                return reply(502, { error: 'the pass failed — see the host log' });
+            const out = { ok: true, member: loop.rec.name, cursor: loop.cursorNow ?? null, turns };
+            return reply(200, out);
+        }
+        reply(404, { error: 'POST /wake or GET /healthz' });
+    });
+    await new Promise((r) => server.listen(o.port ?? 8080, o.host ?? '0.0.0.0', r));
+    const addr = server.address();
+    log(`${loop.rec.name} serving wakes on ${typeof addr === 'object' && addr ? `${addr.address}:${addr.port}` : String(addr)}`);
+    const timer = o.fallbackPollMs ? setInterval(() => { void loop.pollOnce().catch(() => undefined); }, o.fallbackPollMs) : null;
+    return {
+        server, loop,
+        close: async () => { if (timer)
+            clearInterval(timer); await new Promise((r) => server.close(() => r())); await loop.stop(); },
+    };
+}
+//# sourceMappingURL=serve.js.map

package/dist/serve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"serve.js","sourceRoot":"","sources":["../src/serve.ts"],"names":[],"mappings":"AAAA,oHAAoH;AACpH,mHAAmH;AACnH,qHAAqH;AACrH,iHAAiH;AACjH,+EAA+E;AAC/E,EAAE;AACF,qHAAqH;AACrH,8FAA8F;AAC9F,OAAO,EAAE,YAAY,EAAe,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAqC,MAAM,WAAW,CAAC;AAYjF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,CAAe;IACtD,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;IACnB,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC7C,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,IAAa,EAAE,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnJ,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,GAAG,KAAK,UAAU;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC;QAC3I,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;YACjD,IAAI,GAAG,GAAG,EAAE,CAAC;YAAC,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,GAAG;gBAAE,GAAG,IAAI,CAAC,CAAC;YAClD,IAAI,IAAI,GAAkB,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;YAAC,CAAC;YAC1J,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI;gBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,oBAAoB,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACxI,GAAG,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACvH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAQ,EAAE,EAAE,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YACrL,IAAI,CAAC,KAAK;gBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;YAC/E,MAAM,GAAG,GAAgB,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YACpG,OAAO,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACzB,CAAC;QACD,KAAK,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IAC9B,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,qBAAqB,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7H,MAAM,KAAK,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9H,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,KAAK,IAAI,EAAE,GAAG,IAAI,KAAK;YAAE,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;KACpI,CAAC;AACJ,CAAC"}