@agenticprimitives/service-host 0.0.0-alpha.1 → 0.0.0-alpha.10

package/dist/cloudflare/index.d.ts

@@ -1,14 +1,43 @@
-import { type RunStorage } from '../storage.js';
+import { type RunStorage, type RunStorageOptions } from '../storage.js';
 import { type RunStore } from '../run-store.js';
 /** The path a DO answers the store on. The Worker-side client posts here; a DO's `fetch` routes it to `handle`. */
 export declare const RUN_STORE_PATH = "/internal/harness-run/";
-/** Inside the agent's Durable Object: the checkpoint + progress storage over `state.storage`. */
-export declare function durableObjectRunStorage(storage: DurableObjectStorage): RunStorage;
-/** The DO-side route: `fetch(request)` → `handleRunStoreRequest(request, runs)` for any `/internal/harness-run/<op>`.
- *  Returns `null` when the request is not a run-store call, so the DO's own routing continues. The in-Worker marker that
- *  gates this path is the app's (spec 341 §7) and is checked BEFORE this is called. */
+/** The ops the store answers; anything else under the path is the host's own. */
+export declare const RUN_STORE_OPS: ReadonlySet<string>;
+/** Inside the agent's Durable Object: checkpoint + progress + record + counters + assertion storage over `state.storage`. */
+export declare function durableObjectRunStorage(storage: DurableObjectStorage, options?: RunStorageOptions): RunStorage;
+/** The DO-side route: `fetch(request)` → `handleRunStoreRequest(request, runs)` for any `/internal/harness-run/<op>` the
+ *  store owns. Returns `null` for another path or an op the host owns, so the DO's own routing continues. The in-Worker
+ *  marker that gates this path is the app's (spec 341 §7) and is checked BEFORE this is called. */
 export declare function handleRunStoreRequest(request: Request, runs: RunStorage): Promise<Response | null>;
 /** In the Worker: the `RunStore` over the agent's own stub, one DO per agent (`idFromName(agent)`). `headers` supplies
  *  the in-Worker marker the DO requires — the app's secret, read through a function so it is never captured here. */
 export declare function durableObjectRunStore(ns: DurableObjectNamespace, headers: () => Record<string, string>): RunStore;
+/**
+ * THE RUN DO — spec 433 W1 step 2 (census §2): the Durable Object core every service agent's runs live in. One object per
+ * agent (`idFromName(agent)`), holding the checkpoint, the progress lines, the run record (a week), the day's counters and
+ * the assertion ledger — all serving-plane, all a rebuild (ADR-0055). The record of record is the agent's vault.
+ *
+ * A host SUBCLASSES it: the runtime's task DO adds its own routes (triggers, routing, the search index on save) and calls
+ * `super.fetch` for everything under `/internal/harness-run/` it does not own. Two things the subclass supplies:
+ *   · `isInternalCall(request)` — the in-Worker marker check (spec 341 §7): the marker is the app's secret, so the base
+ *     class cannot know it and refuses every store call until the subclass says who is inside;
+ *   · `runStorageOptions()` — retention and the hooks (what to index when a checkpoint or record lands).
+ * The class is exported, never a binding name: `wrangler.toml` binds it under whatever name the app chooses.
+ */
+export declare abstract class HarnessRunDO<Env = unknown> {
+    protected readonly state: DurableObjectState;
+    protected readonly env: Env;
+    constructor(state: DurableObjectState, env: Env);
+    /** The in-Worker marker check. Fail closed: the base class admits nothing on its own. */
+    protected abstract isInternalCall(request: Request): boolean;
+    /** Retention and hooks; override to index what lands. */
+    protected runStorageOptions(): RunStorageOptions;
+    private _runs;
+    /** The storage over this object's `state.storage`, built once. */
+    protected get runs(): RunStorage;
+    /** Answers the store's ops under `/internal/harness-run/`; 404 for anything else, so a subclass routes its own first
+     *  and delegates here last. */
+    fetch(request: Request): Promise<Response>;
+}
 //# sourceMappingURL=index.d.ts.map

package/dist/cloudflare/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAc,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAgB,KAAK,QAAQ,EAAmB,MAAM,iBAAiB,CAAC;AAG/E,mHAAmH;AACnH,eAAO,MAAM,cAAc,2BAA2B,CAAC;AAEvD,iGAAiG;AACjG,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,GAAG,UAAU,CAEjF;AAED;;uFAEuF;AACvF,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAOxG;AAED;qHACqH;AACrH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,CAUjH"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAc,KAAK,UAAU,EAAE,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACpF,OAAO,EAAgB,KAAK,QAAQ,EAAmB,MAAM,iBAAiB,CAAC;AAG/E,mHAAmH;AACnH,eAAO,MAAM,cAAc,2BAA2B,CAAC;AAEvD,iFAAiF;AACjF,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,CAE5C,CAAC;AAEH,6HAA6H;AAC7H,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,oBAAoB,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,UAAU,CAE9G;AAED;;mGAEmG;AACnG,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAQxG;AAED;qHACqH;AACrH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,CAUjH;AAED;;;;;;;;;;;GAWG;AACH,8BAAsB,YAAY,CAAC,GAAG,GAAG,OAAO;IAClC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB;IAAE,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG;gBAAtD,KAAK,EAAE,kBAAkB,EAAqB,GAAG,EAAE,GAAG;IAErF,yFAAyF;IACzF,SAAS,CAAC,QAAQ,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO;IAE5D,yDAAyD;IACzD,SAAS,CAAC,iBAAiB,IAAI,iBAAiB;IAEhD,OAAO,CAAC,KAAK,CAA2B;IACxC,kEAAkE;IAClE,SAAS,KAAK,IAAI,IAAI,UAAU,CAG/B;IAED;mCAC+B;IACzB,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;CAOjD"}

package/dist/cloudflare/index.js

@@ -6,19 +6,25 @@ import { runStorage } from '../storage.js';
 import { runStoreOver } from '../run-store.js';
 /** The path a DO answers the store on. The Worker-side client posts here; a DO's `fetch` routes it to `handle`. */
 export const RUN_STORE_PATH = '/internal/harness-run/';
-/** Inside the agent's Durable Object: the checkpoint + progress storage over `state.storage`. */
-export function durableObjectRunStorage(storage) {
-    return runStorage(storage);
+/** The ops the store answers; anything else under the path is the host's own. */
+export const RUN_STORE_OPS = new Set([
+    'save', 'load', 'drop', 'list', 'progress-append', 'progress-read', 'record-put', 'record-get', 'record-list', 'budget-ask', 'budget-get', 'assertion-claim',
+]);
+/** Inside the agent's Durable Object: checkpoint + progress + record + counters + assertion storage over `state.storage`. */
+export function durableObjectRunStorage(storage, options) {
+    return runStorage(storage, options);
 }
-/** The DO-side route: `fetch(request)` → `handleRunStoreRequest(request, runs)` for any `/internal/harness-run/<op>`.
- *  Returns `null` when the request is not a run-store call, so the DO's own routing continues. The in-Worker marker that
- *  gates this path is the app's (spec 341 §7) and is checked BEFORE this is called. */
+/** The DO-side route: `fetch(request)` → `handleRunStoreRequest(request, runs)` for any `/internal/harness-run/<op>` the
+ *  store owns. Returns `null` for another path or an op the host owns, so the DO's own routing continues. The in-Worker
+ *  marker that gates this path is the app's (spec 341 §7) and is checked BEFORE this is called. */
 export async function handleRunStoreRequest(request, runs) {
     const url = new URL(request.url);
     if (!url.pathname.startsWith(RUN_STORE_PATH))
         return null;
     const op = url.pathname.slice(RUN_STORE_PATH.length);
-    const body = (await request.json().catch(() => null));
+    if (!RUN_STORE_OPS.has(op))
+        return null;
+    const body = (await request.clone().json().catch(() => null));
     const r = await runs.handle(op, body);
     return r.ok ? Response.json(r) : Response.json({ ok: false, error: r.error }, { status: r.status });
 }
@@ -36,4 +42,44 @@ export function durableObjectRunStore(ns, headers) {
         return out;
     });
 }
+/**
+ * THE RUN DO — spec 433 W1 step 2 (census §2): the Durable Object core every service agent's runs live in. One object per
+ * agent (`idFromName(agent)`), holding the checkpoint, the progress lines, the run record (a week), the day's counters and
+ * the assertion ledger — all serving-plane, all a rebuild (ADR-0055). The record of record is the agent's vault.
+ *
+ * A host SUBCLASSES it: the runtime's task DO adds its own routes (triggers, routing, the search index on save) and calls
+ * `super.fetch` for everything under `/internal/harness-run/` it does not own. Two things the subclass supplies:
+ *   · `isInternalCall(request)` — the in-Worker marker check (spec 341 §7): the marker is the app's secret, so the base
+ *     class cannot know it and refuses every store call until the subclass says who is inside;
+ *   · `runStorageOptions()` — retention and the hooks (what to index when a checkpoint or record lands).
+ * The class is exported, never a binding name: `wrangler.toml` binds it under whatever name the app chooses.
+ */
+export class HarnessRunDO {
+    state;
+    env;
+    constructor(state, env) {
+        this.state = state;
+        this.env = env;
+    }
+    /** Retention and hooks; override to index what lands. */
+    runStorageOptions() { return {}; }
+    _runs = null;
+    /** The storage over this object's `state.storage`, built once. */
+    get runs() {
+        if (!this._runs)
+            this._runs = runStorage(this.state.storage, this.runStorageOptions());
+        return this._runs;
+    }
+    /** Answers the store's ops under `/internal/harness-run/`; 404 for anything else, so a subclass routes its own first
+     *  and delegates here last. */
+    async fetch(request) {
+        const url = new URL(request.url);
+        if (!url.pathname.startsWith(RUN_STORE_PATH))
+            return Response.json({ ok: false, error: 'not found' }, { status: 404 });
+        if (!this.isInternalCall(request))
+            return Response.json({ ok: false, error: 'internal op — not authorized' }, { status: 403 });
+        const handled = await handleRunStoreRequest(request, this.runs);
+        return handled ?? Response.json({ ok: false, error: `unknown harness-run op: ${url.pathname.slice(RUN_STORE_PATH.length)}` }, { status: 404 });
+    }
+}
 //# sourceMappingURL=index.js.map

package/dist/cloudflare/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAAA,0HAA0H;AAC1H,wHAAwH;AACxH,0FAA0F;AAC1F,mDAAmD;AACnD,OAAO,EAAE,UAAU,EAAmB,MAAM,eAAe,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAkC,MAAM,iBAAiB,CAAC;AAG/E,mHAAmH;AACnH,MAAM,CAAC,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEvD,iGAAiG;AACjG,MAAM,UAAU,uBAAuB,CAAC,OAA6B;IACnE,OAAO,UAAU,CAAC,OAAO,CAAC,CAAC;AAC7B,CAAC;AAED;;uFAEuF;AACvF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAgB,EAAE,IAAgB;IAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAe,CAAC;IACnE,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAmC,CAAC;IACxF,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACtG,CAAC;AAED;qHACqH;AACrH,MAAM,UAAU,qBAAqB,CAAC,EAA0B,EAAE,OAAqC;IACrG,OAAO,YAAY,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,yBAAyB,cAAc,GAAG,EAAE,EAAE,EAAE;YACvF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC1G,CAAC,CAAC,CAAC;QACJ,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA+D,CAAC;QAC/G,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,eAAe,EAAE,YAAY,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClH,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cloudflare/index.ts"],"names":[],"mappings":"AAAA,0HAA0H;AAC1H,wHAAwH;AACxH,0FAA0F;AAC1F,mDAAmD;AACnD,OAAO,EAAE,UAAU,EAA2C,MAAM,eAAe,CAAC;AACpF,OAAO,EAAE,YAAY,EAAkC,MAAM,iBAAiB,CAAC;AAG/E,mHAAmH;AACnH,MAAM,CAAC,MAAM,cAAc,GAAG,wBAAwB,CAAC;AAEvD,iFAAiF;AACjF,MAAM,CAAC,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAa;IACpE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,eAAe,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,YAAY,EAAE,iBAAiB;CAC7J,CAAC,CAAC;AAEH,6HAA6H;AAC7H,MAAM,UAAU,uBAAuB,CAAC,OAA6B,EAAE,OAA2B;IAChG,OAAO,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACtC,CAAC;AAED;;mGAEmG;AACnG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAgB,EAAE,IAAgB;IAC5E,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAe,CAAC;IACnE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAmC,CAAC;IAChG,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACtC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACtG,CAAC;AAED;qHACqH;AACrH,MAAM,UAAU,qBAAqB,CAAC,EAA0B,EAAE,OAAqC;IACrG,OAAO,YAAY,CAAC,KAAK,EAAE,KAAc,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,yBAAyB,cAAc,GAAG,EAAE,EAAE,EAAE;YACvF,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC1G,CAAC,CAAC,CAAC;QACJ,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA+D,CAAC;QAC/G,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,eAAe,EAAE,YAAY,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClH,OAAO,GAAG,CAAC;IACb,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAgB,YAAY;IACD;IAA8C;IAA7E,YAA+B,KAAyB,EAAqB,GAAQ;QAAtD,UAAK,GAAL,KAAK,CAAoB;QAAqB,QAAG,GAAH,GAAG,CAAK;IAAG,CAAC;IAKzF,yDAAyD;IAC/C,iBAAiB,KAAwB,OAAO,EAAE,CAAC,CAAC,CAAC;IAEvD,KAAK,GAAsB,IAAI,CAAC;IACxC,kEAAkE;IAClE,IAAc,IAAI;QAChB,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;mCAC+B;IAC/B,KAAK,CAAC,KAAK,CAAC,OAAgB;QAC1B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvH,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC/H,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,OAAO,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,2BAA2B,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACjJ,CAAC;CACF"}

package/dist/host.d.ts

@@ -0,0 +1,50 @@
+import type { Address } from '@agenticprimitives/types';
+import type { ToolSpec, ToolInvoker, Planner, OrchestrationPorts } from '@agenticprimitives/orchestration';
+import type { PlaybookView } from '@agenticprimitives/harness';
+import type { Principal, StandardTaskStore } from '@agenticprimitives/a2a/standard';
+import type { RunStore } from './run-store.js';
+import { type AdmissionPorts, type AdmittedPrincipal } from './routes.js';
+import { standardSurface } from './surface.js';
+import type { TurnDeps } from './run.js';
+import type { ProvenanceSinkDeps } from './provenance-sink.js';
+export interface ServiceHostConfig {
+    /** The agent this host IS — read from the name's records by the app, never configured by hand twice. */
+    agent: Address;
+    /** The origin the surface is served at. */
+    origin: string;
+    /** The live card facts (name, description, skills from the definition, provider). */
+    card: Record<string, unknown>;
+    /** The playbook pinned by digest, loaded per request by the app (`loadPlaybook` through its record port), or fixed. */
+    playbook: (ctx: {
+        asker: AdmittedPrincipal;
+    }) => Promise<PlaybookView | null> | PlaybookView | null;
+    /** The tools this host offers before the playbook narrows them. */
+    tools: ReadonlyArray<ToolSpec>;
+    /** One invoker per tool id — the app's work; may depend on the asker (an engagement signs as them). */
+    invokers: (ctx: {
+        asker: AdmittedPrincipal;
+    }) => Readonly<Record<string, ToolInvoker>>;
+    /** The planner port; a deterministic service that only takes supplied plans may omit it. */
+    planner?: Planner;
+    /** Spec 350 — verifier · ladder · approvals · receipts · effects. */
+    ports?: Omit<OrchestrationPorts, 'events'>;
+    runStore: RunStore;
+    admission: AdmissionPorts;
+    /** The door's principal for `/api/a2a` (a wire-signed agent, a Home bearer). */
+    principal?: (request: Request) => Promise<Principal | null>;
+    /** A routed profile's forwarded credential, verified here as the receiver. */
+    verifyForwarded?: Parameters<typeof standardSurface>[0]['verifyForwarded'];
+    tasks?: StandardTaskStore;
+    provenance?: ProvenanceSinkDeps;
+    mayOversee?: (who: Address) => Promise<boolean>;
+    waitUntil?: (p: Promise<unknown>) => void;
+    /** The turn's words, composer, limits and clock. */
+    turn?: Pick<TurnDeps, 'say' | 'words' | 'maxSteps' | 'maxReplans' | 'now' | 'mandateRef' | 'newRunRef'>;
+    log?: (line: string) => void;
+}
+export interface ServiceHost {
+    /** The handler: `/health`, `/.well-known/agent-card.json`, `/api/a2a`, `/harness/*`; `null` for any other path. */
+    fetch(request: Request): Promise<Response | null>;
+}
+export declare function createServiceHost(config: ServiceHostConfig): ServiceHost;
+//# sourceMappingURL=host.d.ts.map

package/dist/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3G,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,WAAW,iBAAiB;IAChC,wGAAwG;IACxG,KAAK,EAAE,OAAO,CAAC;IACf,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,uHAAuH;IACvH,QAAQ,EAAE,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAA;KAAE,KAAK,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,YAAY,GAAG,IAAI,CAAC;IACpG,mEAAmE;IACnE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/B,uGAAuG;IACvG,QAAQ,EAAE,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAA;KAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACvF,4FAA4F;IAC5F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,KAAK,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAC3C,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,cAAc,CAAC;IAC1B,gFAAgF;IAChF,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC5D,8EAA8E;IAC9E,eAAe,CAAC,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC3E,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC1C,oDAAoD;IACpD,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,OAAO,GAAG,UAAU,GAAG,YAAY,GAAG,KAAK,GAAG,YAAY,GAAG,WAAW,CAAC,CAAC;IACxG,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,mHAAmH;IACnH,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;CACnD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CA6BxE"}

package/dist/host.js

@@ -0,0 +1,36 @@
+import { harnessRoutes } from './routes.js';
+import { standardSurface } from './surface.js';
+export function createServiceHost(config) {
+    const turnDeps = async (ctx) => ({
+        playbook: await config.playbook(ctx),
+        tools: config.tools,
+        invokers: config.invokers(ctx),
+        ...(config.planner ? { planner: config.planner } : {}),
+        ...(config.ports ? { ports: config.ports } : {}),
+        ...(config.log ? { log: config.log } : {}),
+        ...(config.turn ?? {}),
+    });
+    const surface = standardSurface({
+        agent: config.agent, card: config.card, origin: config.origin, runStore: config.runStore, turnDeps,
+        ...(config.principal ? { principal: config.principal } : {}), ...(config.admission.public ? { public: true } : {}),
+        ...(config.tasks ? { tasks: config.tasks } : {}), ...(config.verifyForwarded ? { verifyForwarded: config.verifyForwarded } : {}), ...(config.log ? { log: config.log } : {}),
+    });
+    const routes = {
+        agent: config.agent, admission: config.admission, runStore: config.runStore, turnDeps,
+        ...(config.provenance ? { provenance: config.provenance } : {}), ...(config.mayOversee ? { mayOversee: config.mayOversee } : {}),
+        ...(config.waitUntil ? { waitUntil: config.waitUntil } : {}), ...(config.log ? { log: config.log } : {}),
+    };
+    return {
+        async fetch(request) {
+            const path = new URL(request.url).pathname;
+            if (path === '/health')
+                return Response.json({ ok: true, agent: config.agent });
+            if (path === '/.well-known/agent-card.json')
+                return Response.json(surface.card());
+            if (path === '/api/a2a' || path.startsWith('/api/a2a/'))
+                return surface.handle(request);
+            return harnessRoutes(request, routes);
+        },
+    };
+}
+//# sourceMappingURL=host.js.map

package/dist/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,aAAa,EAA+C,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAyC/C,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAiC,EAAuC,EAAE,CAAC,CAAC;QAClG,QAAQ,EAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC9B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,eAAe,CAAC;QAC9B,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ;QAClG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClH,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7K,CAAC,CAAC;IACH,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ;QACrF,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzG,CAAC;IACF,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAgB;YAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC3C,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAChF,IAAI,IAAI,KAAK,8BAA8B;gBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClF,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxF,OAAO,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,10 +1,29 @@
 export declare const PACKAGE_NAME: "@agenticprimitives/service-host";
-export declare const PACKAGE_STATUS: "w1-run-store";
+export declare const PACKAGE_STATUS: "w1-host";
 export declare const SPEC_REF: "specs/433-service-apps-run-the-harness-service-host.md";
 export { mergeTurn, isExpired, expiryFor, liveRuns, completedStepsOf, canceledRecord, openRunOnThread, runStoreOver, AWAIT_WINDOW_MS, RUN_TTL_MS, } from './run-store.js';
 export type { HarnessRunCheckpointV1, SuspendedRunV1, SelectedOfferBindingV1, AwaitingKind, RunStore, RunStoreOp, RunStoreCall } from './run-store.js';
 export { toolWords, progressLine, PROGRESS_TTL_MS, PROGRESS_MAX_LINES } from './progress.js';
 export type { ProgressLineV1 } from './progress.js';
-export { runStorage, memoryRunKv, memoryRunStoreCall, RUN_KEY_PREFIX, PROGRESS_KEY_PREFIX } from './storage.js';
-export type { RunKv, RunStorage, RunStorageResult } from './storage.js';
+export { runStorage, memoryRunKv, memoryRunStoreCall, RUN_KEY_PREFIX, PROGRESS_KEY_PREFIX, RECORD_KEY_PREFIX, BUDGET_KEY_PREFIX, ASSERTION_KEY_PREFIX, DEFAULT_RECORD_RETENTION_DAYS } from './storage.js';
+export type { RunKv, RunStorage, RunStorageResult, RunStorageOptions, DayCountersV1, RunRecordListingV1 } from './storage.js';
+export { runTurn, suppliedPlanner, defaultSay } from './run.js';
+export type { AskReplyEnvelopeV1, TurnInput, TurnDeps, TurnOutcome, TurnCredentialV1 } from './run.js';
+export { exportRunProvenance, provenanceGraphOf, provenanceJsonLdOf, provenanceProvNOf, provenanceViewOf, hasProvenanceRef, runAnchorRecordKey, runMeasuresRecordKey } from './provenance-sink.js';
+export type { ProvenanceSinkDeps } from './provenance-sink.js';
+export { admit, askRoute, runsRoute, recordsRoute, progressRoute, provenanceRoute, harnessRoutes } from './routes.js';
+export type { AdmissionPorts, AdmittedPrincipal, HarnessRoutesDeps } from './routes.js';
+export { standardSurface } from './surface.js';
+export type { SurfaceDeps } from './surface.js';
+export { createServiceHost } from './host.js';
+export type { ServiceHostConfig, ServiceHost } from './host.js';
+export { DISCOVERY_FIND_CAPABILITY, DISCOVERY_FIND_TOOL, planFind, discoveryFindInvoker } from './tools/find.js';
+export type { ArdSearchBody, FoundAgent, FindDeps } from './tools/find.js';
+export { DISCOVERY_INSPECT_CAPABILITY, DISCOVERY_INSPECT_TOOL, discoveryInspectInvoker } from './tools/inspect.js';
+export { EXTERNAL_AGENT_CAPABILITY, EXTERNAL_AGENT_TOOL, TYPED_NAME, cardOfName, externalAgentInvoker } from './tools/external.js';
+export type { ExternalAgentDeps, NameRecordsPort } from './tools/external.js';
+export { ENGAGEMENT_INVOKE_CAPABILITY, ENGAGEMENT_INVOKE_TOOL, engagementInvokeInvoker, readSubjectReply } from './tools/invoke.js';
+export type { InvokeDeps } from './tools/invoke.js';
+export { HARNESS_READ_SKILL, skillForMethod, wireAdmission, wireReadRequest } from './wire-admission.js';
+export type { WireAdmissionDeps } from './wire-admission.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY,EAAG,iCAA0C,CAAC;AACvE,eAAO,MAAM,cAAc,EAAG,cAAuB,CAAC;AACtD,eAAO,MAAM,QAAQ,EAAG,wDAAiE,CAAC;AAE1F,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAC1G,eAAe,EAAE,UAAU,GAC5B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,sBAAsB,EAAE,cAAc,EAAE,sBAAsB,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEvJ,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7F,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAChH,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY,EAAG,iCAA0C,CAAC;AACvE,eAAO,MAAM,cAAc,EAAG,SAAkB,CAAC;AACjD,eAAO,MAAM,QAAQ,EAAG,wDAAiE,CAAC;AAE1F,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAC1G,eAAe,EAAE,UAAU,GAC5B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,sBAAsB,EAAE,cAAc,EAAE,sBAAsB,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEvJ,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7F,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC3M,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE9H,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACnM,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACtH,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACjH,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACnH,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACnI,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACpI,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACzG,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/index.js

@@ -1,9 +1,19 @@
 // @agenticprimitives/service-host — spec 433. The harness run pipeline a service agent embeds, promoted out of the
 // ap-home runtime in the census order (docs/architecture/service-host-census.md §8). W1 step 1: the run store.
 export const PACKAGE_NAME = '@agenticprimitives/service-host';
-export const PACKAGE_STATUS = 'w1-run-store';
+export const PACKAGE_STATUS = 'w1-host';
 export const SPEC_REF = 'specs/433-service-apps-run-the-harness-service-host.md';
 export { mergeTurn, isExpired, expiryFor, liveRuns, completedStepsOf, canceledRecord, openRunOnThread, runStoreOver, AWAIT_WINDOW_MS, RUN_TTL_MS, } from './run-store.js';
 export { toolWords, progressLine, PROGRESS_TTL_MS, PROGRESS_MAX_LINES } from './progress.js';
-export { runStorage, memoryRunKv, memoryRunStoreCall, RUN_KEY_PREFIX, PROGRESS_KEY_PREFIX } from './storage.js';
+export { runStorage, memoryRunKv, memoryRunStoreCall, RUN_KEY_PREFIX, PROGRESS_KEY_PREFIX, RECORD_KEY_PREFIX, BUDGET_KEY_PREFIX, ASSERTION_KEY_PREFIX, DEFAULT_RECORD_RETENTION_DAYS } from './storage.js';
+export { runTurn, suppliedPlanner, defaultSay } from './run.js';
+export { exportRunProvenance, provenanceGraphOf, provenanceJsonLdOf, provenanceProvNOf, provenanceViewOf, hasProvenanceRef, runAnchorRecordKey, runMeasuresRecordKey } from './provenance-sink.js';
+export { admit, askRoute, runsRoute, recordsRoute, progressRoute, provenanceRoute, harnessRoutes } from './routes.js';
+export { standardSurface } from './surface.js';
+export { createServiceHost } from './host.js';
+export { DISCOVERY_FIND_CAPABILITY, DISCOVERY_FIND_TOOL, planFind, discoveryFindInvoker } from './tools/find.js';
+export { DISCOVERY_INSPECT_CAPABILITY, DISCOVERY_INSPECT_TOOL, discoveryInspectInvoker } from './tools/inspect.js';
+export { EXTERNAL_AGENT_CAPABILITY, EXTERNAL_AGENT_TOOL, TYPED_NAME, cardOfName, externalAgentInvoker } from './tools/external.js';
+export { ENGAGEMENT_INVOKE_CAPABILITY, ENGAGEMENT_INVOKE_TOOL, engagementInvokeInvoker, readSubjectReply } from './tools/invoke.js';
+export { HARNESS_READ_SKILL, skillForMethod, wireAdmission, wireReadRequest } from './wire-admission.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,+GAA+G;AAC/G,MAAM,CAAC,MAAM,YAAY,GAAG,iCAA0C,CAAC;AACvE,MAAM,CAAC,MAAM,cAAc,GAAG,cAAuB,CAAC;AACtD,MAAM,CAAC,MAAM,QAAQ,GAAG,wDAAiE,CAAC;AAE1F,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAC1G,eAAe,EAAE,UAAU,GAC5B,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAG7F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,+GAA+G;AAC/G,MAAM,CAAC,MAAM,YAAY,GAAG,iCAA0C,CAAC;AACvE,MAAM,CAAC,MAAM,cAAc,GAAG,SAAkB,CAAC;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,wDAAiE,CAAC;AAE1F,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAC1G,eAAe,EAAE,UAAU,GAC5B,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAG7F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAG3M,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEnM,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEtH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEjH,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACnH,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEnI,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEpI,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/provenance-sink.d.ts

@@ -0,0 +1,48 @@
+import { type RunRecordV1, type RunExportReportV1 } from '@agenticprimitives/orchestration';
+import { type ProvenanceRecordV1, type ProvenanceStorePort } from '@agenticprimitives/provenance';
+import type { Address, Hex } from '@agenticprimitives/types';
+export declare const runAnchorRecordKey: (runRef: string) => string;
+export declare const runMeasuresRecordKey: (runRef: string) => string;
+export interface ProvenanceSinkDeps {
+    /** Where the record is KEPT — the agent's vault through its own door. Absent ⇒ not kept, and the report says so. */
+    store?: ProvenanceStorePort;
+    /** The published JSON-LD `@context` for a run's provenance (the ontology's `RUN_PROVENANCE_CONTEXT['@context']`). */
+    context: Record<string, unknown>;
+    /** The chain the agents live on, so the record names them the way the public KB does. */
+    chainId?: number;
+    /** Spec 410 §4.4 — the estate this host belongs to. */
+    estate?: string;
+    /** Spec 406 W2 — anchor the bundle's digest on chain; absent ⇒ not anchored, said. */
+    anchor?: (digest: Hex, intentDigest: Hex, mandateRef: Hex) => Promise<{
+        txHash: Hex;
+        registry: Address;
+        anchoredBy: Address;
+        chainId?: number;
+    }>;
+    /** Spec 414 A2 — the measurements beside the provenance (the evaluation package's `measureRun`); absent ⇒ none, said. */
+    measures?: (record: RunRecordV1, agent: string) => Promise<{
+        count: number;
+        doc: Record<string, unknown>;
+    }>;
+    /** The bundle's digest, for the anchor (a deployment's `bundleDigest`: keccak over the canonical bytes). */
+    bundleDigest?: (bundle: Record<string, unknown>) => Hex;
+    now?: () => number;
+}
+/** The PROV-O graph of a run record, as the projector makes it from the firewalled view. */
+export declare function provenanceGraphOf(record: RunRecordV1, agent: string, opts?: Pick<ProvenanceSinkDeps, 'chainId' | 'estate'>): Promise<ProvenanceRecordV1>;
+/** The JSON-LD document that lands in the vault — a stock PROV tool loads it unchanged. */
+export declare function provenanceJsonLdOf(record: RunRecordV1, agent: string, deps: Pick<ProvenanceSinkDeps, 'chainId' | 'estate' | 'context'>): Promise<Record<string, unknown>>;
+/** The same record as PROV-N, for a reader that wants text. */
+export declare function provenanceProvNOf(record: RunRecordV1, agent: string, opts?: Pick<ProvenanceSinkDeps, 'chainId' | 'estate'>): Promise<string>;
+/** The inspector's RECORD form — the firewalled structural view (`provenanceOf`: digests, verdicts, the chain by reference;
+ *  never arguments, results or words) plus what a reader of the run wants beside it: the chain, the bill, a cancel mark, each
+ *  model call's step. What a Home's run inspector reads (`/harness/provenance` with `format: 'record'`). */
+export declare function provenanceViewOf(record: RunRecordV1, agent: string, opts?: Pick<ProvenanceSinkDeps, 'chainId'>): Promise<Record<string, unknown>>;
+/** A REFERENCE to a run's provenance, never the record: resolving it takes that agent's grant (ADR-0055). */
+export declare function hasProvenanceRef(agent: string, runRef: string): {
+    agent: string;
+    recordType: string;
+};
+/** Export one finished run: the provenance to the vault, the anchor citation beside it, the measurements. */
+export declare function exportRunProvenance(record: RunRecordV1, agent: string, deps: ProvenanceSinkDeps): Promise<RunExportReportV1>;
+//# sourceMappingURL=provenance-sink.d.ts.map

package/dist/provenance-sink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance-sink.d.ts","sourceRoot":"","sources":["../src/provenance-sink.ts"],"names":[],"mappings":"AASA,OAAO,EAAwC,KAAK,WAAW,EAAE,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAClI,OAAO,EAAkD,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAElJ,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAE7D,eAAO,MAAM,kBAAkB,WAAY,MAAM,KAAG,MAAgC,CAAC;AACrF,eAAO,MAAM,oBAAoB,WAAY,MAAM,KAAG,MAAkC,CAAC;AAEzF,MAAM,WAAW,kBAAkB;IACjC,oHAAoH;IACpH,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,qHAAqH;IACrH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjJ,yHAAyH;IACzH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAC5G,4GAA4G;IAC5G,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC;IACxD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAID,4FAA4F;AAC5F,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,QAAQ,CAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAGlK;AAED,2FAA2F;AAC3F,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAG/K;AAED,+DAA+D;AAC/D,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,QAAQ,CAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEtJ;AAED;;4GAE4G;AAC5G,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,CAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAK3J;AAED,6GAA6G;AAC7G,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAErG;AAED,6GAA6G;AAC7G,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAoClI"}

package/dist/provenance-sink.js

@@ -0,0 +1,98 @@
+// THE RECORD — spec 433 W1 step 4 (census §3), promoted from the ap-home runtime's `run-export.ts`. A finished run's
+// durable half goes into the vault of the agent whose authority was spent, through ITS door, under ITS grant (ADR-0055):
+// `run.provenance:<runRef>` as the JSON-LD PROV-O / P-Plan bundle the Ring-0 projector makes (spec 389), the digest's
+// anchor citation beside it when a chain anchor is bound (spec 406 W2), and the run's measurements when a measurer is
+// bound (spec 414 A2). Off the run's path: a failed export is said on the report, never a failed ask.
+//
+// Every projection here is a package's already — orchestration's `provenanceOf` (the structural view: digests,
+// verdicts, the chain by reference; never arguments, results or words), provenance's `projectHarnessRunProvenance` +
+// `toJsonLd`. This module is the glue: the view, the record keys, the ports, the report.
+import { provenanceOf, runProvenanceRecordKey } from '@agenticprimitives/orchestration';
+import { projectHarnessRunProvenance, toJsonLd, toProvN } from '@agenticprimitives/provenance';
+import { intentDigest } from '@agenticprimitives/delegation';
+export const runAnchorRecordKey = (runRef) => `run.anchor:${runRef}`;
+export const runMeasuresRecordKey = (runRef) => `run.measures:${runRef}`;
+const ZERO32 = `0x${'0'.repeat(64)}`;
+/** The PROV-O graph of a run record, as the projector makes it from the firewalled view. */
+export async function provenanceGraphOf(record, agent, opts = {}) {
+    const view = await provenanceOf(record, agent);
+    return projectHarnessRunProvenance({ ...view, ...(opts.chainId ? { chainId: opts.chainId } : {}), ...(opts.estate ? { estate: opts.estate } : {}) });
+}
+/** The JSON-LD document that lands in the vault — a stock PROV tool loads it unchanged. */
+export async function provenanceJsonLdOf(record, agent, deps) {
+    const graph = await provenanceGraphOf(record, agent, deps);
+    return toJsonLd(graph, { context: deps.context, ...(deps.chainId ? { chainId: deps.chainId } : {}) });
+}
+/** The same record as PROV-N, for a reader that wants text. */
+export async function provenanceProvNOf(record, agent, opts = {}) {
+    return toProvN(await provenanceGraphOf(record, agent, opts), opts.chainId ? { chainId: opts.chainId } : {});
+}
+/** The inspector's RECORD form — the firewalled structural view (`provenanceOf`: digests, verdicts, the chain by reference;
+ *  never arguments, results or words) plus what a reader of the run wants beside it: the chain, the bill, a cancel mark, each
+ *  model call's step. What a Home's run inspector reads (`/harness/provenance` with `format: 'record'`). */
+export async function provenanceViewOf(record, agent, opts = {}) {
+    const view = (await provenanceOf(record, agent));
+    const r = record;
+    const calls = view.modelCalls?.map((m, i) => { const c = r.modelCalls?.[i]; return { ...m, ...(c?.stepRef ? { stepRef: c.stepRef } : {}), ...(c?.failed ? { failed: true } : {}) }; });
+    return { ...view, ...(calls ? { modelCalls: calls } : {}), ...(opts.chainId ? { chainId: opts.chainId } : {}), ...(r.bill ? { bill: r.bill } : {}), ...(r.canceled ? { canceled: r.canceled } : {}) };
+}
+/** A REFERENCE to a run's provenance, never the record: resolving it takes that agent's grant (ADR-0055). */
+export function hasProvenanceRef(agent, runRef) {
+    return { agent: agent.toLowerCase(), recordType: runProvenanceRecordKey(runRef) };
+}
+/** Export one finished run: the provenance to the vault, the anchor citation beside it, the measurements. */
+export async function exportRunProvenance(record, agent, deps) {
+    const now = deps.now ?? Date.now;
+    const recordType = runProvenanceRecordKey(record.runRef);
+    const report = { at: now(), provenance: { written: false, recordType }, spans: { count: 0, sent: false } };
+    let doc = null;
+    if (deps.store) {
+        try {
+            doc = await provenanceJsonLdOf(record, agent, deps);
+            const out = await deps.store.put({ agent, key: recordType }, doc);
+            report.provenance.written = out.ok;
+            if (!out.ok)
+                report.provenance.error = out.error;
+        }
+        catch (e) {
+            report.provenance.error = e instanceof Error ? e.message : String(e);
+        }
+    }
+    else
+        report.provenance.error = 'no vault write door';
+    if (deps.anchor && deps.bundleDigest) {
+        try {
+            const digest = deps.bundleDigest(doc ?? (await provenanceJsonLdOf(record, agent, deps)));
+            const mandateRef = record.presented?.[0]?.ref ?? ZERO32;
+            const out = await deps.anchor(digest, intentDigest(record.intent), /^0x[0-9a-f]{64}$/i.test(mandateRef) ? mandateRef : ZERO32);
+            report.anchor = { digest, registry: out.registry, anchoredBy: out.anchoredBy, txHash: out.txHash, ...(out.chainId ? { chainId: out.chainId } : {}) };
+            if (deps.store) {
+                const key = runAnchorRecordKey(record.runRef);
+                const cite = { runRef: record.runRef, digest, registry: out.chainId ? `eip155:${out.chainId}:${out.registry}` : out.registry, anchoredBy: out.anchoredBy, txHash: out.txHash, ...(deps.estate ? { estate: deps.estate } : {}) };
+                try {
+                    const w = await deps.store.put({ agent, key }, cite);
+                    report.anchorRecord = { written: w.ok, recordType: key, ...(!w.ok ? { error: w.error } : {}) };
+                }
+                catch (e) {
+                    report.anchorRecord = { written: false, recordType: key, error: e instanceof Error ? e.message : String(e) };
+                }
+            }
+        }
+        catch (e) {
+            report.anchor = { error: e instanceof Error ? e.message : String(e) };
+        }
+    }
+    if (deps.store && deps.measures) {
+        const key = runMeasuresRecordKey(record.runRef);
+        try {
+            const { count, doc: m } = await deps.measures(record, agent);
+            const w = await deps.store.put({ agent, key }, m);
+            report.measures = { written: w.ok, recordType: key, count, ...(!w.ok ? { error: w.error } : {}) };
+        }
+        catch (e) {
+            report.measures = { written: false, recordType: key, count: 0, error: e instanceof Error ? e.message : String(e) };
+        }
+    }
+    return report;
+}
+//# sourceMappingURL=provenance-sink.js.map

package/dist/provenance-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance-sink.js","sourceRoot":"","sources":["../src/provenance-sink.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,yHAAyH;AACzH,sHAAsH;AACtH,sHAAsH;AACtH,sGAAsG;AACtG,EAAE;AACF,+GAA+G;AAC/G,qHAAqH;AACrH,yFAAyF;AACzF,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAA4C,MAAM,kCAAkC,CAAC;AAClI,OAAO,EAAE,2BAA2B,EAAE,QAAQ,EAAE,OAAO,EAAqD,MAAM,+BAA+B,CAAC;AAClJ,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAG7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,cAAc,MAAM,EAAE,CAAC;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,gBAAgB,MAAM,EAAE,CAAC;AAoBzF,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAS,CAAC;AAE5C,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAmB,EAAE,KAAa,EAAE,OAAuD,EAAE;IACnI,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,OAAO,2BAA2B,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACvJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAmB,EAAE,KAAa,EAAE,IAAgE;IAC3I,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3D,OAAO,QAAQ,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAmB,EAAE,KAAa,EAAE,OAAuD,EAAE;IACnI,OAAO,OAAO,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9G,CAAC;AAED;;4GAE4G;AAC5G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAmB,EAAE,KAAa,EAAE,OAA4C,EAAE;IACvH,MAAM,IAAI,GAAG,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAyF,CAAC;IACzI,MAAM,CAAC,GAAG,MAA0H,CAAC;IACrI,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvL,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACxM,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,MAAc;IAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAmB,EAAE,KAAa,EAAE,IAAwB;IACpG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAsB,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;IAC9H,IAAI,GAAG,GAAmC,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;YAClE,MAAM,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACnD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACvF,CAAC;;QAAM,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,qBAAqB,CAAC;IACvD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,UAAU,GAAI,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAuB,IAAI,MAAM,CAAC;YAC7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAe,CAAQ,EAAE,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC/I,MAAM,CAAC,MAAM,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACrJ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9C,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChO,IAAI,CAAC;oBAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;oBAAC,MAAM,CAAC,YAAY,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAC,CAAC;gBAC7J,OAAO,CAAC,EAAE,CAAC;oBAAC,MAAM,CAAC,YAAY,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;YAC7H,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,CAAC;IACxF,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACpG,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,CAAC;IACrI,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes.d.ts

@@ -0,0 +1,64 @@
+import type { Address } from '@agenticprimitives/types';
+import type { RunStore } from './run-store.js';
+import { type TurnDeps, type TurnCredentialV1 } from './run.js';
+import { type ProvenanceSinkDeps } from './provenance-sink.js';
+export interface AdmittedPrincipal {
+    agent: Address;
+    credential: TurnCredentialV1;
+}
+export interface AdmissionPorts {
+    /** A Home session bearer → the person, or null. */
+    bearer?: (token: string) => Promise<{
+        agent: Address;
+    } | null>;
+    /** An `A2A-Session` request (the raw body is what the assertion hashed) → the person it acts for, or null. */
+    wire?: (request: Request, raw: string) => Promise<{
+        agent: Address;
+    } | null>;
+    /** The surface answers strangers (reads only; every act still parks). Default false — fail closed. */
+    public?: boolean;
+}
+export interface HarnessRoutesDeps {
+    /** The agent this host IS. */
+    agent: Address;
+    admission: AdmissionPorts;
+    runStore: RunStore;
+    /** Everything the turn needs but the input (playbook, tools, invokers, planner, ports, …). May depend on the asker. */
+    turnDeps: (ctx: {
+        asker: AdmittedPrincipal;
+        raw: string;
+    }) => Promise<Omit<TurnDeps, 'runStore'>> | Omit<TurnDeps, 'runStore'>;
+    /** Where a finished run's provenance goes (absent ⇒ runs are recorded on the object only, and the reply says so). */
+    provenance?: ProvenanceSinkDeps;
+    /** Who may see a run beside its asker — the agent's steward(s). Default: only the asker. */
+    mayOversee?: (who: Address) => Promise<boolean>;
+    /** Fire-and-forget work the platform should keep alive (Cloudflare `waitUntil`). */
+    waitUntil?: (p: Promise<unknown>) => void;
+    log?: (line: string) => void;
+}
+/** WHO IS ASKING — the one order, no fallback between mechanisms (ADR-0013): an `A2A-Session` header is judged as a wire
+ *  and never as a session; a `session` in the body is judged as a session; neither ⇒ public or refused. */
+export declare function admit(request: Request, raw: string, body: {
+    session?: string;
+} | null, ports: AdmissionPorts, self: Address): Promise<{
+    ok: true;
+    who: AdmittedPrincipal;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+}>;
+/** `/harness/ask` — one turn. Also `/harness/run` (POST: the same, kept for callers that name it so). */
+export declare function askRoute(request: Request, deps: HarnessRoutesDeps): Promise<Response>;
+/** `/harness/runs` — the unfinished runs this person may pick up: their own; every run when they oversee the agent. */
+export declare function runsRoute(request: Request, deps: HarnessRoutesDeps): Promise<Response>;
+/** `/harness/records` — what this agent did (a week), listed without mandates; `/harness/run` GET-shaped read of one. */
+export declare function recordsRoute(request: Request, deps: HarnessRoutesDeps): Promise<Response>;
+/** `/harness/progress` — the run's lines after `after`, for the asker only (the store gates it). */
+export declare function progressRoute(request: Request, deps: HarnessRoutesDeps): Promise<Response>;
+/** `/harness/provenance` — the run's PROV-O record, projected from the record this object holds (the vault copy is the
+ *  document of record; this is the same projection, served to whoever may see the run). */
+export declare function provenanceRoute(request: Request, deps: HarnessRoutesDeps): Promise<Response>;
+/** The whole `/harness/*` surface as one handler; `null` for any other path so the host's router continues. */
+export declare function harnessRoutes(request: Request, deps: HarnessRoutesDeps): Promise<Response | null>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAW,KAAK,QAAQ,EAAkB,KAAK,gBAAgB,EAA2B,MAAM,UAAU,CAAC;AAClH,OAAO,EAA6D,KAAK,kBAAkB,EAAuC,MAAM,sBAAsB,CAAC;AAI/J,MAAM,WAAW,iBAAiB;IAAG,KAAK,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,gBAAgB,CAAA;CAAE;AAEnF,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC/D,8GAA8G;IAC9G,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC7E,sGAAsG;IACtG,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,cAAc,CAAC;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,uHAAuH;IACvH,QAAQ,EAAE,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/H,qHAAqH;IACrH,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,4FAA4F;IAC5F,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,oFAAoF;IACpF,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC1C,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAKD;2GAC2G;AAC3G,wBAAsB,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAchO;AAED,yGAAyG;AACzG,wBAAsB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiC3F;AAWD,uHAAuH;AACvH,wBAAsB,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQ5F;AAED,yHAAyH;AACzH,wBAAsB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAc/F;AAED,oGAAoG;AACpG,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAShG;AAED;2FAC2F;AAC3F,wBAAsB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAuBlG;AAED,+GAA+G;AAC/G,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAYvG"}