@agenticprimitives/service-host 0.0.0-alpha.2 → 0.0.0-alpha.3

package/dist/host.d.ts

@@ -0,0 +1,50 @@
+import type { Address } from '@agenticprimitives/types';
+import type { ToolSpec, ToolInvoker, Planner, OrchestrationPorts } from '@agenticprimitives/orchestration';
+import type { PlaybookView } from '@agenticprimitives/harness';
+import type { Principal, StandardTaskStore } from '@agenticprimitives/a2a/standard';
+import type { RunStore } from './run-store.js';
+import { type AdmissionPorts, type AdmittedPrincipal } from './routes.js';
+import { standardSurface } from './surface.js';
+import type { TurnDeps } from './run.js';
+import type { ProvenanceSinkDeps } from './provenance-sink.js';
+export interface ServiceHostConfig {
+    /** The agent this host IS — read from the name's records by the app, never configured by hand twice. */
+    agent: Address;
+    /** The origin the surface is served at. */
+    origin: string;
+    /** The live card facts (name, description, skills from the definition, provider). */
+    card: Record<string, unknown>;
+    /** The playbook pinned by digest, loaded per request by the app (`loadPlaybook` through its record port), or fixed. */
+    playbook: (ctx: {
+        asker: AdmittedPrincipal;
+    }) => Promise<PlaybookView | null> | PlaybookView | null;
+    /** The tools this host offers before the playbook narrows them. */
+    tools: ReadonlyArray<ToolSpec>;
+    /** One invoker per tool id — the app's work; may depend on the asker (an engagement signs as them). */
+    invokers: (ctx: {
+        asker: AdmittedPrincipal;
+    }) => Readonly<Record<string, ToolInvoker>>;
+    /** The planner port; a deterministic service that only takes supplied plans may omit it. */
+    planner?: Planner;
+    /** Spec 350 — verifier · ladder · approvals · receipts · effects. */
+    ports?: Omit<OrchestrationPorts, 'events'>;
+    runStore: RunStore;
+    admission: AdmissionPorts;
+    /** The door's principal for `/api/a2a` (a wire-signed agent, a Home bearer). */
+    principal?: (request: Request) => Promise<Principal | null>;
+    /** A routed profile's forwarded credential, verified here as the receiver. */
+    verifyForwarded?: Parameters<typeof standardSurface>[0]['verifyForwarded'];
+    tasks?: StandardTaskStore;
+    provenance?: ProvenanceSinkDeps;
+    mayOversee?: (who: Address) => Promise<boolean>;
+    waitUntil?: (p: Promise<unknown>) => void;
+    /** The turn's words, composer, limits and clock. */
+    turn?: Pick<TurnDeps, 'say' | 'words' | 'maxSteps' | 'maxReplans' | 'now' | 'mandateRef' | 'newRunRef'>;
+    log?: (line: string) => void;
+}
+export interface ServiceHost {
+    /** The handler: `/health`, `/.well-known/agent-card.json`, `/api/a2a`, `/harness/*`; `null` for any other path. */
+    fetch(request: Request): Promise<Response | null>;
+}
+export declare function createServiceHost(config: ServiceHostConfig): ServiceHost;
+//# sourceMappingURL=host.d.ts.map

package/dist/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,kCAAkC,CAAC;AAC3G,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAiB,KAAK,cAAc,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAE/D,MAAM,WAAW,iBAAiB;IAChC,wGAAwG;IACxG,KAAK,EAAE,OAAO,CAAC;IACf,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;IACf,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,uHAAuH;IACvH,QAAQ,EAAE,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAA;KAAE,KAAK,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,YAAY,GAAG,IAAI,CAAC;IACpG,mEAAmE;IACnE,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC/B,uGAAuG;IACvG,QAAQ,EAAE,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAA;KAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACvF,4FAA4F;IAC5F,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qEAAqE;IACrE,KAAK,CAAC,EAAE,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;IAC3C,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,cAAc,CAAC;IAC1B,gFAAgF;IAChF,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC;IAC5D,8EAA8E;IAC9E,eAAe,CAAC,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC3E,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC1C,oDAAoD;IACpD,IAAI,CAAC,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,GAAG,OAAO,GAAG,UAAU,GAAG,YAAY,GAAG,KAAK,GAAG,YAAY,GAAG,WAAW,CAAC,CAAC;IACxG,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,WAAW;IAC1B,mHAAmH;IACnH,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;CACnD;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CA6BxE"}

package/dist/host.js

@@ -0,0 +1,36 @@
+import { harnessRoutes } from './routes.js';
+import { standardSurface } from './surface.js';
+export function createServiceHost(config) {
+    const turnDeps = async (ctx) => ({
+        playbook: await config.playbook(ctx),
+        tools: config.tools,
+        invokers: config.invokers(ctx),
+        ...(config.planner ? { planner: config.planner } : {}),
+        ...(config.ports ? { ports: config.ports } : {}),
+        ...(config.log ? { log: config.log } : {}),
+        ...(config.turn ?? {}),
+    });
+    const surface = standardSurface({
+        agent: config.agent, card: config.card, origin: config.origin, runStore: config.runStore, turnDeps,
+        ...(config.principal ? { principal: config.principal } : {}), ...(config.admission.public ? { public: true } : {}),
+        ...(config.tasks ? { tasks: config.tasks } : {}), ...(config.verifyForwarded ? { verifyForwarded: config.verifyForwarded } : {}), ...(config.log ? { log: config.log } : {}),
+    });
+    const routes = {
+        agent: config.agent, admission: config.admission, runStore: config.runStore, turnDeps,
+        ...(config.provenance ? { provenance: config.provenance } : {}), ...(config.mayOversee ? { mayOversee: config.mayOversee } : {}),
+        ...(config.waitUntil ? { waitUntil: config.waitUntil } : {}), ...(config.log ? { log: config.log } : {}),
+    };
+    return {
+        async fetch(request) {
+            const path = new URL(request.url).pathname;
+            if (path === '/health')
+                return Response.json({ ok: true, agent: config.agent });
+            if (path === '/.well-known/agent-card.json')
+                return Response.json(surface.card());
+            if (path === '/api/a2a' || path.startsWith('/api/a2a/'))
+                return surface.handle(request);
+            return harnessRoutes(request, routes);
+        },
+    };
+}
+//# sourceMappingURL=host.js.map

package/dist/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","sourceRoot":"","sources":["../src/host.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,aAAa,EAA+C,MAAM,aAAa,CAAC;AACzF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAyC/C,MAAM,UAAU,iBAAiB,CAAC,MAAyB;IACzD,MAAM,QAAQ,GAAG,KAAK,EAAE,GAAiC,EAAuC,EAAE,CAAC,CAAC;QAClG,QAAQ,EAAE,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAC9B,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;KACvB,CAAC,CAAC;IACH,MAAM,OAAO,GAAG,eAAe,CAAC;QAC9B,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ;QAClG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClH,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7K,CAAC,CAAC;IACH,MAAM,MAAM,GAAG;QACb,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ;QACrF,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzG,CAAC;IACF,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAgB;YAC1B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC3C,IAAI,IAAI,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;YAChF,IAAI,IAAI,KAAK,8BAA8B;gBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAClF,IAAI,IAAI,KAAK,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxF,OAAO,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export declare const PACKAGE_NAME: "@agenticprimitives/service-host";
-export declare const PACKAGE_STATUS: "w1-run-do";
+export declare const PACKAGE_STATUS: "w1-host";
 export declare const SPEC_REF: "specs/433-service-apps-run-the-harness-service-host.md";
 export { mergeTurn, isExpired, expiryFor, liveRuns, completedStepsOf, canceledRecord, openRunOnThread, runStoreOver, AWAIT_WINDOW_MS, RUN_TTL_MS, } from './run-store.js';
 export type { HarnessRunCheckpointV1, SuspendedRunV1, SelectedOfferBindingV1, AwaitingKind, RunStore, RunStoreOp, RunStoreCall } from './run-store.js';
@@ -7,4 +7,21 @@ export { toolWords, progressLine, PROGRESS_TTL_MS, PROGRESS_MAX_LINES } from './
 export type { ProgressLineV1 } from './progress.js';
 export { runStorage, memoryRunKv, memoryRunStoreCall, RUN_KEY_PREFIX, PROGRESS_KEY_PREFIX, RECORD_KEY_PREFIX, BUDGET_KEY_PREFIX, ASSERTION_KEY_PREFIX, DEFAULT_RECORD_RETENTION_DAYS } from './storage.js';
 export type { RunKv, RunStorage, RunStorageResult, RunStorageOptions, DayCountersV1, RunRecordListingV1 } from './storage.js';
+export { runTurn, suppliedPlanner, defaultSay } from './run.js';
+export type { AskReplyEnvelopeV1, TurnInput, TurnDeps, TurnOutcome, TurnCredentialV1 } from './run.js';
+export { exportRunProvenance, provenanceGraphOf, provenanceJsonLdOf, provenanceProvNOf, hasProvenanceRef, runAnchorRecordKey, runMeasuresRecordKey } from './provenance-sink.js';
+export type { ProvenanceSinkDeps } from './provenance-sink.js';
+export { admit, askRoute, runsRoute, recordsRoute, progressRoute, provenanceRoute, harnessRoutes } from './routes.js';
+export type { AdmissionPorts, AdmittedPrincipal, HarnessRoutesDeps } from './routes.js';
+export { standardSurface } from './surface.js';
+export type { SurfaceDeps } from './surface.js';
+export { createServiceHost } from './host.js';
+export type { ServiceHostConfig, ServiceHost } from './host.js';
+export { DISCOVERY_FIND_CAPABILITY, DISCOVERY_FIND_TOOL, planFind, discoveryFindInvoker } from './tools/find.js';
+export type { ArdSearchBody, FoundAgent, FindDeps } from './tools/find.js';
+export { DISCOVERY_INSPECT_CAPABILITY, DISCOVERY_INSPECT_TOOL, discoveryInspectInvoker } from './tools/inspect.js';
+export { EXTERNAL_AGENT_CAPABILITY, EXTERNAL_AGENT_TOOL, TYPED_NAME, cardOfName, externalAgentInvoker } from './tools/external.js';
+export type { ExternalAgentDeps, NameRecordsPort } from './tools/external.js';
+export { ENGAGEMENT_INVOKE_CAPABILITY, ENGAGEMENT_INVOKE_TOOL, engagementInvokeInvoker, readSubjectReply } from './tools/invoke.js';
+export type { InvokeDeps } from './tools/invoke.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY,EAAG,iCAA0C,CAAC;AACvE,eAAO,MAAM,cAAc,EAAG,WAAoB,CAAC;AACnD,eAAO,MAAM,QAAQ,EAAG,wDAAiE,CAAC;AAE1F,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAC1G,eAAe,EAAE,UAAU,GAC5B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,sBAAsB,EAAE,cAAc,EAAE,sBAAsB,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEvJ,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7F,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC3M,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY,EAAG,iCAA0C,CAAC;AACvE,eAAO,MAAM,cAAc,EAAG,SAAkB,CAAC;AACjD,eAAO,MAAM,QAAQ,EAAG,wDAAiE,CAAC;AAE1F,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAC1G,eAAe,EAAE,UAAU,GAC5B,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,sBAAsB,EAAE,cAAc,EAAE,sBAAsB,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEvJ,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7F,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAC3M,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAE9H,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACvG,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACjL,YAAY,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACtH,YAAY,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACjH,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACnH,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AACnI,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC9E,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACpI,YAAY,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/index.js

@@ -1,9 +1,18 @@
 // @agenticprimitives/service-host — spec 433. The harness run pipeline a service agent embeds, promoted out of the
 // ap-home runtime in the census order (docs/architecture/service-host-census.md §8). W1 step 1: the run store.
 export const PACKAGE_NAME = '@agenticprimitives/service-host';
-export const PACKAGE_STATUS = 'w1-run-do';
+export const PACKAGE_STATUS = 'w1-host';
 export const SPEC_REF = 'specs/433-service-apps-run-the-harness-service-host.md';
 export { mergeTurn, isExpired, expiryFor, liveRuns, completedStepsOf, canceledRecord, openRunOnThread, runStoreOver, AWAIT_WINDOW_MS, RUN_TTL_MS, } from './run-store.js';
 export { toolWords, progressLine, PROGRESS_TTL_MS, PROGRESS_MAX_LINES } from './progress.js';
 export { runStorage, memoryRunKv, memoryRunStoreCall, RUN_KEY_PREFIX, PROGRESS_KEY_PREFIX, RECORD_KEY_PREFIX, BUDGET_KEY_PREFIX, ASSERTION_KEY_PREFIX, DEFAULT_RECORD_RETENTION_DAYS } from './storage.js';
+export { runTurn, suppliedPlanner, defaultSay } from './run.js';
+export { exportRunProvenance, provenanceGraphOf, provenanceJsonLdOf, provenanceProvNOf, hasProvenanceRef, runAnchorRecordKey, runMeasuresRecordKey } from './provenance-sink.js';
+export { admit, askRoute, runsRoute, recordsRoute, progressRoute, provenanceRoute, harnessRoutes } from './routes.js';
+export { standardSurface } from './surface.js';
+export { createServiceHost } from './host.js';
+export { DISCOVERY_FIND_CAPABILITY, DISCOVERY_FIND_TOOL, planFind, discoveryFindInvoker } from './tools/find.js';
+export { DISCOVERY_INSPECT_CAPABILITY, DISCOVERY_INSPECT_TOOL, discoveryInspectInvoker } from './tools/inspect.js';
+export { EXTERNAL_AGENT_CAPABILITY, EXTERNAL_AGENT_TOOL, TYPED_NAME, cardOfName, externalAgentInvoker } from './tools/external.js';
+export { ENGAGEMENT_INVOKE_CAPABILITY, ENGAGEMENT_INVOKE_TOOL, engagementInvokeInvoker, readSubjectReply } from './tools/invoke.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,+GAA+G;AAC/G,MAAM,CAAC,MAAM,YAAY,GAAG,iCAA0C,CAAC;AACvE,MAAM,CAAC,MAAM,cAAc,GAAG,WAAoB,CAAC;AACnD,MAAM,CAAC,MAAM,QAAQ,GAAG,wDAAiE,CAAC;AAE1F,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAC1G,eAAe,EAAE,UAAU,GAC5B,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAG7F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,+GAA+G;AAC/G,MAAM,CAAC,MAAM,YAAY,GAAG,iCAA0C,CAAC;AACvE,MAAM,CAAC,MAAM,cAAc,GAAG,SAAkB,CAAC;AACjD,MAAM,CAAC,MAAM,QAAQ,GAAG,wDAAiE,CAAC;AAE1F,OAAO,EACL,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,eAAe,EAAE,YAAY,EAC1G,eAAe,EAAE,UAAU,GAC5B,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAG7F,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAG3M,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAEjL,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEtH,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAE9C,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEjH,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AACnH,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAEnI,OAAO,EAAE,4BAA4B,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/provenance-sink.d.ts

@@ -0,0 +1,44 @@
+import { type RunRecordV1, type RunExportReportV1 } from '@agenticprimitives/orchestration';
+import { type ProvenanceRecordV1, type ProvenanceStorePort } from '@agenticprimitives/provenance';
+import type { Address, Hex } from '@agenticprimitives/types';
+export declare const runAnchorRecordKey: (runRef: string) => string;
+export declare const runMeasuresRecordKey: (runRef: string) => string;
+export interface ProvenanceSinkDeps {
+    /** Where the record is KEPT — the agent's vault through its own door. Absent ⇒ not kept, and the report says so. */
+    store?: ProvenanceStorePort;
+    /** The published JSON-LD `@context` for a run's provenance (the ontology's `RUN_PROVENANCE_CONTEXT['@context']`). */
+    context: Record<string, unknown>;
+    /** The chain the agents live on, so the record names them the way the public KB does. */
+    chainId?: number;
+    /** Spec 410 §4.4 — the estate this host belongs to. */
+    estate?: string;
+    /** Spec 406 W2 — anchor the bundle's digest on chain; absent ⇒ not anchored, said. */
+    anchor?: (digest: Hex, intentDigest: Hex, mandateRef: Hex) => Promise<{
+        txHash: Hex;
+        registry: Address;
+        anchoredBy: Address;
+        chainId?: number;
+    }>;
+    /** Spec 414 A2 — the measurements beside the provenance (the evaluation package's `measureRun`); absent ⇒ none, said. */
+    measures?: (record: RunRecordV1, agent: string) => Promise<{
+        count: number;
+        doc: Record<string, unknown>;
+    }>;
+    /** The bundle's digest, for the anchor (a deployment's `bundleDigest`: keccak over the canonical bytes). */
+    bundleDigest?: (bundle: Record<string, unknown>) => Hex;
+    now?: () => number;
+}
+/** The PROV-O graph of a run record, as the projector makes it from the firewalled view. */
+export declare function provenanceGraphOf(record: RunRecordV1, agent: string, opts?: Pick<ProvenanceSinkDeps, 'chainId' | 'estate'>): Promise<ProvenanceRecordV1>;
+/** The JSON-LD document that lands in the vault — a stock PROV tool loads it unchanged. */
+export declare function provenanceJsonLdOf(record: RunRecordV1, agent: string, deps: Pick<ProvenanceSinkDeps, 'chainId' | 'estate' | 'context'>): Promise<Record<string, unknown>>;
+/** The same record as PROV-N, for a reader that wants text. */
+export declare function provenanceProvNOf(record: RunRecordV1, agent: string, opts?: Pick<ProvenanceSinkDeps, 'chainId' | 'estate'>): Promise<string>;
+/** A REFERENCE to a run's provenance, never the record: resolving it takes that agent's grant (ADR-0055). */
+export declare function hasProvenanceRef(agent: string, runRef: string): {
+    agent: string;
+    recordType: string;
+};
+/** Export one finished run: the provenance to the vault, the anchor citation beside it, the measurements. */
+export declare function exportRunProvenance(record: RunRecordV1, agent: string, deps: ProvenanceSinkDeps): Promise<RunExportReportV1>;
+//# sourceMappingURL=provenance-sink.d.ts.map

package/dist/provenance-sink.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance-sink.d.ts","sourceRoot":"","sources":["../src/provenance-sink.ts"],"names":[],"mappings":"AASA,OAAO,EAAwC,KAAK,WAAW,EAAE,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAClI,OAAO,EAAkD,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAElJ,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,0BAA0B,CAAC;AAE7D,eAAO,MAAM,kBAAkB,WAAY,MAAM,KAAG,MAAgC,CAAC;AACrF,eAAO,MAAM,oBAAoB,WAAY,MAAM,KAAG,MAAkC,CAAC;AAEzF,MAAM,WAAW,kBAAkB;IACjC,oHAAoH;IACpH,KAAK,CAAC,EAAE,mBAAmB,CAAC;IAC5B,qHAAqH;IACrH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,yFAAyF;IACzF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,GAAG,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,UAAU,EAAE,OAAO,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjJ,yHAAyH;IACzH,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC,CAAC;IAC5G,4GAA4G;IAC5G,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC;IACxD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAID,4FAA4F;AAC5F,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,QAAQ,CAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAGlK;AAED,2FAA2F;AAC3F,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAG/K;AAED,+DAA+D;AAC/D,wBAAsB,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,IAAI,CAAC,kBAAkB,EAAE,SAAS,GAAG,QAAQ,CAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEtJ;AAED,6GAA6G;AAC7G,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAErG;AAED,6GAA6G;AAC7G,wBAAsB,mBAAmB,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAoClI"}

package/dist/provenance-sink.js

@@ -0,0 +1,89 @@
+// THE RECORD — spec 433 W1 step 4 (census §3), promoted from the ap-home runtime's `run-export.ts`. A finished run's
+// durable half goes into the vault of the agent whose authority was spent, through ITS door, under ITS grant (ADR-0055):
+// `run.provenance:<runRef>` as the JSON-LD PROV-O / P-Plan bundle the Ring-0 projector makes (spec 389), the digest's
+// anchor citation beside it when a chain anchor is bound (spec 406 W2), and the run's measurements when a measurer is
+// bound (spec 414 A2). Off the run's path: a failed export is said on the report, never a failed ask.
+//
+// Every projection here is a package's already — orchestration's `provenanceOf` (the structural view: digests,
+// verdicts, the chain by reference; never arguments, results or words), provenance's `projectHarnessRunProvenance` +
+// `toJsonLd`. This module is the glue: the view, the record keys, the ports, the report.
+import { provenanceOf, runProvenanceRecordKey } from '@agenticprimitives/orchestration';
+import { projectHarnessRunProvenance, toJsonLd, toProvN } from '@agenticprimitives/provenance';
+import { intentDigest } from '@agenticprimitives/delegation';
+export const runAnchorRecordKey = (runRef) => `run.anchor:${runRef}`;
+export const runMeasuresRecordKey = (runRef) => `run.measures:${runRef}`;
+const ZERO32 = `0x${'0'.repeat(64)}`;
+/** The PROV-O graph of a run record, as the projector makes it from the firewalled view. */
+export async function provenanceGraphOf(record, agent, opts = {}) {
+    const view = await provenanceOf(record, agent);
+    return projectHarnessRunProvenance({ ...view, ...(opts.chainId ? { chainId: opts.chainId } : {}), ...(opts.estate ? { estate: opts.estate } : {}) });
+}
+/** The JSON-LD document that lands in the vault — a stock PROV tool loads it unchanged. */
+export async function provenanceJsonLdOf(record, agent, deps) {
+    const graph = await provenanceGraphOf(record, agent, deps);
+    return toJsonLd(graph, { context: deps.context, ...(deps.chainId ? { chainId: deps.chainId } : {}) });
+}
+/** The same record as PROV-N, for a reader that wants text. */
+export async function provenanceProvNOf(record, agent, opts = {}) {
+    return toProvN(await provenanceGraphOf(record, agent, opts), opts.chainId ? { chainId: opts.chainId } : {});
+}
+/** A REFERENCE to a run's provenance, never the record: resolving it takes that agent's grant (ADR-0055). */
+export function hasProvenanceRef(agent, runRef) {
+    return { agent: agent.toLowerCase(), recordType: runProvenanceRecordKey(runRef) };
+}
+/** Export one finished run: the provenance to the vault, the anchor citation beside it, the measurements. */
+export async function exportRunProvenance(record, agent, deps) {
+    const now = deps.now ?? Date.now;
+    const recordType = runProvenanceRecordKey(record.runRef);
+    const report = { at: now(), provenance: { written: false, recordType }, spans: { count: 0, sent: false } };
+    let doc = null;
+    if (deps.store) {
+        try {
+            doc = await provenanceJsonLdOf(record, agent, deps);
+            const out = await deps.store.put({ agent, key: recordType }, doc);
+            report.provenance.written = out.ok;
+            if (!out.ok)
+                report.provenance.error = out.error;
+        }
+        catch (e) {
+            report.provenance.error = e instanceof Error ? e.message : String(e);
+        }
+    }
+    else
+        report.provenance.error = 'no vault write door';
+    if (deps.anchor && deps.bundleDigest) {
+        try {
+            const digest = deps.bundleDigest(doc ?? (await provenanceJsonLdOf(record, agent, deps)));
+            const mandateRef = record.presented?.[0]?.ref ?? ZERO32;
+            const out = await deps.anchor(digest, intentDigest(record.intent), /^0x[0-9a-f]{64}$/i.test(mandateRef) ? mandateRef : ZERO32);
+            report.anchor = { digest, registry: out.registry, anchoredBy: out.anchoredBy, txHash: out.txHash, ...(out.chainId ? { chainId: out.chainId } : {}) };
+            if (deps.store) {
+                const key = runAnchorRecordKey(record.runRef);
+                const cite = { runRef: record.runRef, digest, registry: out.chainId ? `eip155:${out.chainId}:${out.registry}` : out.registry, anchoredBy: out.anchoredBy, txHash: out.txHash, ...(deps.estate ? { estate: deps.estate } : {}) };
+                try {
+                    const w = await deps.store.put({ agent, key }, cite);
+                    report.anchorRecord = { written: w.ok, recordType: key, ...(!w.ok ? { error: w.error } : {}) };
+                }
+                catch (e) {
+                    report.anchorRecord = { written: false, recordType: key, error: e instanceof Error ? e.message : String(e) };
+                }
+            }
+        }
+        catch (e) {
+            report.anchor = { error: e instanceof Error ? e.message : String(e) };
+        }
+    }
+    if (deps.store && deps.measures) {
+        const key = runMeasuresRecordKey(record.runRef);
+        try {
+            const { count, doc: m } = await deps.measures(record, agent);
+            const w = await deps.store.put({ agent, key }, m);
+            report.measures = { written: w.ok, recordType: key, count, ...(!w.ok ? { error: w.error } : {}) };
+        }
+        catch (e) {
+            report.measures = { written: false, recordType: key, count: 0, error: e instanceof Error ? e.message : String(e) };
+        }
+    }
+    return report;
+}
+//# sourceMappingURL=provenance-sink.js.map

package/dist/provenance-sink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance-sink.js","sourceRoot":"","sources":["../src/provenance-sink.ts"],"names":[],"mappings":"AAAA,qHAAqH;AACrH,yHAAyH;AACzH,sHAAsH;AACtH,sHAAsH;AACtH,sGAAsG;AACtG,EAAE;AACF,+GAA+G;AAC/G,qHAAqH;AACrH,yFAAyF;AACzF,OAAO,EAAE,YAAY,EAAE,sBAAsB,EAA4C,MAAM,kCAAkC,CAAC;AAClI,OAAO,EAAE,2BAA2B,EAAE,QAAQ,EAAE,OAAO,EAAqD,MAAM,+BAA+B,CAAC;AAClJ,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAG7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,cAAc,MAAM,EAAE,CAAC;AACrF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,gBAAgB,MAAM,EAAE,CAAC;AAoBzF,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAS,CAAC;AAE5C,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAmB,EAAE,KAAa,EAAE,OAAuD,EAAE;IACnI,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/C,OAAO,2BAA2B,CAAC,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACvJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAmB,EAAE,KAAa,EAAE,IAAgE;IAC3I,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3D,OAAO,QAAQ,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxG,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAAmB,EAAE,KAAa,EAAE,OAAuD,EAAE;IACnI,OAAO,OAAO,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9G,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,gBAAgB,CAAC,KAAa,EAAE,MAAc;IAC5D,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,sBAAsB,CAAC,MAAM,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,MAAmB,EAAE,KAAa,EAAE,IAAwB;IACpG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,UAAU,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACzD,MAAM,MAAM,GAAsB,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;IAC9H,IAAI,GAAG,GAAmC,IAAI,CAAC;IAC/C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACpD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,GAAG,CAAC,CAAC;YAClE,MAAM,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC;QACnD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACvF,CAAC;;QAAM,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,qBAAqB,CAAC;IACvD,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,UAAU,GAAI,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,GAAuB,IAAI,MAAM,CAAC;YAC7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAe,CAAQ,EAAE,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC/I,MAAM,CAAC,MAAM,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACrJ,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAC9C,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChO,IAAI,CAAC;oBAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;oBAAC,MAAM,CAAC,YAAY,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAC,CAAC;gBAC7J,OAAO,CAAC,EAAE,CAAC;oBAAC,MAAM,CAAC,YAAY,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;gBAAC,CAAC;YAC7H,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,CAAC;IACxF,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC7D,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACpG,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,CAAC;IACrI,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/routes.d.ts

@@ -0,0 +1,64 @@
+import type { Address } from '@agenticprimitives/types';
+import type { RunStore } from './run-store.js';
+import { type TurnDeps, type TurnCredentialV1 } from './run.js';
+import { type ProvenanceSinkDeps } from './provenance-sink.js';
+export interface AdmittedPrincipal {
+    agent: Address;
+    credential: TurnCredentialV1;
+}
+export interface AdmissionPorts {
+    /** A Home session bearer → the person, or null. */
+    bearer?: (token: string) => Promise<{
+        agent: Address;
+    } | null>;
+    /** An `A2A-Session` request (the raw body is what the assertion hashed) → the person it acts for, or null. */
+    wire?: (request: Request, raw: string) => Promise<{
+        agent: Address;
+    } | null>;
+    /** The surface answers strangers (reads only; every act still parks). Default false — fail closed. */
+    public?: boolean;
+}
+export interface HarnessRoutesDeps {
+    /** The agent this host IS. */
+    agent: Address;
+    admission: AdmissionPorts;
+    runStore: RunStore;
+    /** Everything the turn needs but the input (playbook, tools, invokers, planner, ports, …). May depend on the asker. */
+    turnDeps: (ctx: {
+        asker: AdmittedPrincipal;
+        raw: string;
+    }) => Promise<Omit<TurnDeps, 'runStore'>> | Omit<TurnDeps, 'runStore'>;
+    /** Where a finished run's provenance goes (absent ⇒ runs are recorded on the object only, and the reply says so). */
+    provenance?: ProvenanceSinkDeps;
+    /** Who may see a run beside its asker — the agent's steward(s). Default: only the asker. */
+    mayOversee?: (who: Address) => Promise<boolean>;
+    /** Fire-and-forget work the platform should keep alive (Cloudflare `waitUntil`). */
+    waitUntil?: (p: Promise<unknown>) => void;
+    log?: (line: string) => void;
+}
+/** WHO IS ASKING — the one order, no fallback between mechanisms (ADR-0013): an `A2A-Session` header is judged as a wire
+ *  and never as a session; a `session` in the body is judged as a session; neither ⇒ public or refused. */
+export declare function admit(request: Request, raw: string, body: {
+    session?: string;
+} | null, ports: AdmissionPorts, self: Address): Promise<{
+    ok: true;
+    who: AdmittedPrincipal;
+} | {
+    ok: false;
+    status: number;
+    error: string;
+}>;
+/** `/harness/ask` — one turn. Also `/harness/run` (POST: the same, kept for callers that name it so). */
+export declare function askRoute(request: Request, deps: HarnessRoutesDeps): Promise<Response>;
+/** `/harness/runs` — the unfinished runs this person may pick up: their own; every run when they oversee the agent. */
+export declare function runsRoute(request: Request, deps: HarnessRoutesDeps): Promise<Response>;
+/** `/harness/records` — what this agent did (a week), listed without mandates; `/harness/run` GET-shaped read of one. */
+export declare function recordsRoute(request: Request, deps: HarnessRoutesDeps): Promise<Response>;
+/** `/harness/progress` — the run's lines after `after`, for the asker only (the store gates it). */
+export declare function progressRoute(request: Request, deps: HarnessRoutesDeps): Promise<Response>;
+/** `/harness/provenance` — the run's PROV-O record, projected from the record this object holds (the vault copy is the
+ *  document of record; this is the same projection, served to whoever may see the run). */
+export declare function provenanceRoute(request: Request, deps: HarnessRoutesDeps): Promise<Response>;
+/** The whole `/harness/*` surface as one handler; `null` for any other path so the host's router continues. */
+export declare function harnessRoutes(request: Request, deps: HarnessRoutesDeps): Promise<Response | null>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAIxD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAW,KAAK,QAAQ,EAAkB,KAAK,gBAAgB,EAA2B,MAAM,UAAU,CAAC;AAClH,OAAO,EAA6D,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAI1H,MAAM,WAAW,iBAAiB;IAAG,KAAK,EAAE,OAAO,CAAC;IAAC,UAAU,EAAE,gBAAgB,CAAA;CAAE;AAEnF,MAAM,WAAW,cAAc;IAC7B,mDAAmD;IACnD,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC/D,8GAA8G;IAC9G,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAC,CAAC;IAC7E,sGAAsG;IACtG,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,cAAc,CAAC;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,uHAAuH;IACvH,QAAQ,EAAE,CAAC,GAAG,EAAE;QAAE,KAAK,EAAE,iBAAiB,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAC/H,qHAAqH;IACrH,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,4FAA4F;IAC5F,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,oFAAoF;IACpF,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC;IAC1C,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAKD;2GAC2G;AAC3G,wBAAsB,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,iBAAiB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAchO;AAED,yGAAyG;AACzG,wBAAsB,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAiC3F;AAWD,uHAAuH;AACvH,wBAAsB,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAQ5F;AAED,yHAAyH;AACzH,wBAAsB,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAc/F;AAED,oGAAoG;AACpG,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAShG;AAED;2FAC2F;AAC3F,wBAAsB,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAalG;AAED,+GAA+G;AAC/G,wBAAsB,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAYvG"}

package/dist/routes.js

@@ -0,0 +1,173 @@
+import { traceContextOf } from '@agenticprimitives/orchestration';
+import { runTurn } from './run.js';
+import { exportRunProvenance, provenanceJsonLdOf, hasProvenanceRef } from './provenance-sink.js';
+import { isExpired } from './run-store.js';
+import { projectRunState } from '@agenticprimitives/harness';
+const json = (b, status = 200) => Response.json(b, { status });
+const lower = (a) => (typeof a === 'string' && /^0x[0-9a-fA-F]{40}$/.test(a) ? a.toLowerCase() : null);
+/** WHO IS ASKING — the one order, no fallback between mechanisms (ADR-0013): an `A2A-Session` header is judged as a wire
+ *  and never as a session; a `session` in the body is judged as a session; neither ⇒ public or refused. */
+export async function admit(request, raw, body, ports, self) {
+    const auth = request.headers.get('authorization') ?? '';
+    if (/^A2A-Session\s/i.test(auth)) {
+        if (!ports.wire)
+            return { ok: false, status: 401, error: 'this host admits no app delegation' };
+        const p = await ports.wire(request, raw).catch(() => null);
+        return p ? { ok: true, who: { agent: p.agent.toLowerCase(), credential: { kind: 'app-delegation', authorization: auth, body: raw } } } : { ok: false, status: 401, error: 'the app delegation did not verify' };
+    }
+    if (body?.session) {
+        if (!ports.bearer)
+            return { ok: false, status: 401, error: 'this host admits no Home session' };
+        const p = await ports.bearer(String(body.session)).catch(() => null);
+        return p ? { ok: true, who: { agent: p.agent.toLowerCase(), credential: { kind: 'home-session' } } } : { ok: false, status: 401, error: 'the session did not verify' };
+    }
+    if (ports.public)
+        return { ok: true, who: { agent: self, credential: { kind: 'public' } } };
+    return { ok: false, status: 400, error: 'session (or an A2A-Session app delegation) is required' };
+}
+/** `/harness/ask` — one turn. Also `/harness/run` (POST: the same, kept for callers that name it so). */
+export async function askRoute(request, deps) {
+    const receivedAt = Date.now();
+    const raw = await request.text();
+    const body = (() => { try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    } })();
+    if (!body)
+        return json({ ok: false, error: 'a JSON body is required' }, 400);
+    const addressee = lower(body.addressee) ?? deps.agent;
+    if (addressee !== deps.agent)
+        return json({ ok: false, error: `this host answers for ${deps.agent}, not ${String(body.addressee)}` }, 404);
+    const message = String(body.message ?? '').trim();
+    const runRef = typeof body.runRef === 'string' && body.runRef ? body.runRef : undefined;
+    if (!message && !runRef)
+        return json({ ok: false, error: 'message is required' }, 400);
+    const a = await admit(request, raw, body, deps.admission, deps.agent);
+    if (!a.ok)
+        return json({ ok: false, error: a.error }, a.status);
+    const input = {
+        agent: deps.agent, asker: a.who.agent, credential: a.who.credential, message,
+        ...(body.intent && typeof body.intent === 'object' ? { intent: body.intent } : {}),
+        ...(body.plan && typeof body.plan === 'object' ? { plan: body.plan } : {}),
+        ...(body.presented !== undefined ? { presented: body.presented } : {}),
+        ...(Array.isArray(body.supplied) ? { supplied: body.supplied } : {}),
+        ...(runRef ? { runRef } : {}),
+        traceContext: traceContextOf(request.headers) ?? null, receivedAt,
+    };
+    const turnDeps = await deps.turnDeps({ asker: a.who, raw });
+    const out = await runTurn(input, { ...turnDeps, runStore: deps.runStore });
+    // The durable half, off the run's path: provenance into the agent's vault; the report back onto the record.
+    if (out.record && deps.provenance) {
+        const rec = out.record;
+        const exported = exportRunProvenance(rec, deps.agent, deps.provenance)
+            .then((report) => deps.runStore.putRecord(deps.agent, { ...rec, export: report }))
+            .catch((e) => deps.log?.(`[harness/ask] export failed: ${e instanceof Error ? e.message : String(e)}`));
+        if (deps.waitUntil)
+            deps.waitUntil(exported);
+        else
+            await exported;
+    }
+    const envelope = { ...out.envelope, ...(out.record && deps.provenance?.store ? { hasProvenance: hasProvenanceRef(deps.agent, out.runRef) } : {}) };
+    return json(envelope, out.envelope.ok ? 200 : 200);
+}
+/** The read routes share one admission: the asker, or a steward of the agent, sees the agent's runs. */
+async function reader(request, deps) {
+    const raw = await request.text();
+    const body = (() => { try {
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    } })();
+    const a = await admit(request, raw, (body ?? {}), { ...deps.admission, public: false }, deps.agent);
+    if (!a.ok)
+        return a;
+    return { ok: true, who: a.who.agent, raw, body: body ?? {} };
+}
+/** `/harness/runs` — the unfinished runs this person may pick up: their own; every run when they oversee the agent. */
+export async function runsRoute(request, deps) {
+    const r = await reader(request, deps);
+    if (!r.ok)
+        return json({ ok: false, error: r.error }, r.status);
+    const oversees = r.who === deps.agent || (await deps.mayOversee?.(r.who).catch(() => false)) === true;
+    const now = Date.now();
+    const runs = (await deps.runStore.list(deps.agent)).filter((x) => oversees || x.asker.toLowerCase() === r.who)
+        .map((x) => ({ ...x, expired: isExpired(x, now), state: projectRunState({ kind: 'suspended', awaiting: x.awaiting?.kind, expired: isExpired(x, now) }).state }));
+    return json({ ok: true, runs });
+}
+/** `/harness/records` — what this agent did (a week), listed without mandates; `/harness/run` GET-shaped read of one. */
+export async function recordsRoute(request, deps) {
+    const r = await reader(request, deps);
+    if (!r.ok)
+        return json({ ok: false, error: r.error }, r.status);
+    const oversees = r.who === deps.agent || (await deps.mayOversee?.(r.who).catch(() => false)) === true;
+    if (typeof r.body.runRef === 'string' && r.body.runRef) {
+        const rec = await deps.runStore.getRecord(deps.agent, r.body.runRef);
+        if (!rec)
+            return json({ ok: false, error: 'no such run here' }, 404);
+        const asker = String(rec.asker ?? rec.intent?.context?.asker ?? '').toLowerCase();
+        if (!oversees && asker && asker !== r.who)
+            return json({ ok: false, error: 'no such run here' }, 404);
+        const { presented: _p, ...safe } = rec;
+        return json({ ok: true, record: safe });
+    }
+    const { records, retention } = await deps.runStore.listRecords(deps.agent, { full: r.body.full === true });
+    return json({ ok: true, records: oversees ? records : records.filter((x) => String(x.asker ?? '').toLowerCase() === r.who), retention });
+}
+/** `/harness/progress` — the run's lines after `after`, for the asker only (the store gates it). */
+export async function progressRoute(request, deps) {
+    const r = await reader(request, deps);
+    if (!r.ok)
+        return json({ ok: false, error: r.error }, r.status);
+    const runRef = String(r.body.runRef ?? '');
+    if (!runRef)
+        return json({ ok: false, error: 'runRef is required' }, 400);
+    try {
+        const out = await deps.runStore.readProgress(deps.agent, runRef, r.who, Number(r.body.after ?? 0));
+        return json({ ok: true, ...out });
+    }
+    catch (e) {
+        return json({ ok: false, error: e instanceof Error ? e.message : String(e) }, 403);
+    }
+}
+/** `/harness/provenance` — the run's PROV-O record, projected from the record this object holds (the vault copy is the
+ *  document of record; this is the same projection, served to whoever may see the run). */
+export async function provenanceRoute(request, deps) {
+    const r = await reader(request, deps);
+    if (!r.ok)
+        return json({ ok: false, error: r.error }, r.status);
+    const runRef = String(r.body.runRef ?? '');
+    if (!runRef)
+        return json({ ok: false, error: 'runRef is required' }, 400);
+    const rec = await deps.runStore.getRecord(deps.agent, runRef);
+    if (!rec)
+        return json({ ok: false, error: 'no such run here' }, 404);
+    const oversees = r.who === deps.agent || (await deps.mayOversee?.(r.who).catch(() => false)) === true;
+    const asker = String(rec.asker ?? '').toLowerCase();
+    if (!oversees && asker && asker !== r.who)
+        return json({ ok: false, error: 'no such run here' }, 404);
+    if (!deps.provenance)
+        return json({ ok: false, error: 'this host projects no provenance' }, 503);
+    const doc = await provenanceJsonLdOf(rec, deps.agent, deps.provenance);
+    return json({ ok: true, hasProvenance: hasProvenanceRef(deps.agent, runRef), provenance: doc, export: rec.export ?? null });
+}
+/** The whole `/harness/*` surface as one handler; `null` for any other path so the host's router continues. */
+export async function harnessRoutes(request, deps) {
+    const path = new URL(request.url).pathname;
+    if (!path.startsWith('/harness/'))
+        return null;
+    if (request.method !== 'POST')
+        return json({ ok: false, error: 'POST' }, 405);
+    switch (path) {
+        case '/harness/ask':
+        case '/harness/run': return askRoute(request, deps);
+        case '/harness/runs': return runsRoute(request, deps);
+        case '/harness/records': return recordsRoute(request, deps);
+        case '/harness/progress': return progressRoute(request, deps);
+        case '/harness/provenance': return provenanceRoute(request, deps);
+        default: return json({ ok: false, error: `no such route: ${path}` }, 404);
+    }
+}
+//# sourceMappingURL=routes.js.map

package/dist/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAElE,OAAO,EAAE,OAAO,EAAiF,MAAM,UAAU,CAAC;AAClH,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,gBAAgB,EAA2B,MAAM,sBAAsB,CAAC;AAC1H,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AA6B7D,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,MAAM,GAAG,GAAG,EAAY,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;AAClF,MAAM,KAAK,GAAG,CAAC,CAAU,EAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,WAAW,EAAc,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAE7I;2GAC2G;AAC3G,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,OAAgB,EAAE,GAAW,EAAE,IAAiC,EAAE,KAAqB,EAAE,IAAa;IAChI,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QAChG,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC3D,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAa,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;IAC7N,CAAC;IACD,IAAI,IAAI,EAAE,OAAO,EAAE,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC;QAChG,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACrE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,EAAa,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;IACpL,CAAC;IACD,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC5F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,wDAAwD,EAAE,CAAC;AACrG,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,OAAgB,EAAE,IAAuB;IACtE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC9B,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,GAAmC,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClH,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC;IACtD,IAAI,SAAS,KAAK,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,IAAI,CAAC,KAAK,SAAS,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC3I,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,GAAG,CAAC,CAAC;IACvF,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,IAA4B,EAAE,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,KAAK,GAAc;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO;QAC5E,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAyB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAyD,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtH,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAA6B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,YAAY,EAAE,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,UAAU;KAClE,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC3E,4GAA4G;IAC5G,IAAI,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;QACvB,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC;aACnE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;aACjF,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,gCAAgC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1G,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;;YAAM,MAAM,QAAQ,CAAC;IACpE,CAAC;IACD,MAAM,QAAQ,GAAiF,EAAE,GAAG,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACjO,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,wGAAwG;AACxG,KAAK,UAAU,MAAM,CAAC,OAAgB,EAAE,IAAuB;IAC7D,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,GAAmC,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClH,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAyB,EAAE,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5H,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC;IACpB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC;AAC/D,CAAC;AAED,uHAAuH;AACvH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAgB,EAAE,IAAuB;IACvE,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC;IACtG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC;SAC3G,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACnK,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAClC,CAAC;AAED,yHAAyH;AACzH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAgB,EAAE,IAAuB;IAC1E,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC;IACtG,IAAI,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,MAAM,CAAE,GAA0B,CAAC,KAAK,IAAK,GAAG,CAAC,MAA2C,EAAE,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChJ,IAAI,CAAC,QAAQ,IAAI,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;QACtG,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;QACvC,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAC3G,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAE,CAAwB,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;AACnK,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,IAAuB;IAC3E,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;QACnG,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAAC,CAAC;AACrG,CAAC;AAED;2FAC2F;AAC3F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAgB,EAAE,IAAuB;IAC7E,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC9D,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC;IACtG,MAAM,KAAK,GAAG,MAAM,CAAE,GAA0B,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5E,IAAI,CAAC,QAAQ,IAAI,KAAK,IAAI,KAAK,KAAK,CAAC,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,CAAC;IACtG,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kCAAkC,EAAE,EAAE,GAAG,CAAC,CAAC;IACjG,MAAM,GAAG,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACvE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,gBAAgB,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAG,GAA4B,CAAC,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;AACxJ,CAAC;AAED,+GAA+G;AAC/G,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAgB,EAAE,IAAuB;IAC3E,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;IAC9E,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc,CAAC;QAAC,KAAK,cAAc,CAAC,CAAC,OAAO,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzE,KAAK,eAAe,CAAC,CAAC,OAAO,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACtD,KAAK,kBAAkB,CAAC,CAAC,OAAO,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC5D,KAAK,mBAAmB,CAAC,CAAC,OAAO,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9D,KAAK,qBAAqB,CAAC,CAAC,OAAO,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClE,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,kBAAkB,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC"}