@agimon-ai/po-core 0.0.0-alpha.52 → 0.0.0-alpha.53

package/README.md

@@ -4,4 +4,29 @@ Reusable runtime logic for Po packages. Main and child systems own session lifec
 
 The `po` package composes these capabilities into the CLI and distribution. Feature packages own their policies and depend on core.
 
+## Federation destination boundary
+
+The portable `packageApi` entry exports verified caller stamp types, SQLite replay/feed
+stores, home-host workspace sharing and provider-consent records, and the calling-host
+grant store. SQLite is supplied through `po/sqlite`. Replay admission never evicts live
+nonces. Grant refresh refusal durably pauses that work's token admission and emits
+`FederationWorkPaused`; new consent is required to resume it.
+
+The Node `remoteRuntime` entry composes the CLI's existing QR-pinned publication signer,
+hub trust store and injected HTTP/SQLite capabilities. Signed-in proofs ride inside the
+existing sealed HTTP channel. Only a claimed hub with a pinned issuer is enabled;
+other signed-in proof requests return 401. Trusted plugin dispatch preserves principal,
+org, account device and calling-host/grant stamps, while legacy callers stay unchanged.
+
+A sealed, fresh QR pairing can submit an account-key-signed enrollment at
+`/api/remote/federation/enroll` before reconnect-key registration. The host re-attests it
+and durably pins the account key and current epoch. `/api/remote/federation/claim` checks
+the pinned account signature and persists the issuer JWKS and owner network. Account
+keys and host-scoped reconnect/biometric keys remain separate.
+
+The default CLI accepts the claim's owner personal org only. Multi-network roster host
+keys and plugin-owned cross-host operation dispatch belong to later phases, so default
+C4 work is refused until those authorities are composed. Native enrollment transport,
+real-issuer deployment and production propagation remain separate verification items.
+
 Public `src/exports` files only forward symbols from their owners. Po-owned Pi authoring and terminal UI exports are retired. The retained agent runtime and `services/piExtensionHost` preserve third-party `@earendil-works/pi-coding-agent` settings, package, and provider compatibility.

package/dist/apiContracts.cjs

@@ -638,6 +638,61 @@ const host = (id, path, method, result, extra = {}) => ({
 	responses: jsonApiResponses(result),
 	...extra
 });
+const Principal = typebox.Type.Object({
+	issuer: Text$3,
+	subject: Text$3
+});
+const ProviderGrant = typebox.Type.Object({
+	tag: typebox.Type.Literal("po/grant/v1"),
+	signature: Text$3,
+	payload: typebox.Type.Object({
+		issuer: Text$3,
+		subject: Text$3,
+		grantId: Text$3,
+		deviceKeyId: Text$3,
+		networkId: Text$3,
+		workspaceId: Text$3,
+		callingHostId: Text$3,
+		targetHostId: Text$3,
+		operations: Strings$1,
+		constraints: typebox.Type.Record(Text$3, typebox.Type.Union([
+			Text$3,
+			NumberValue$2,
+			Flag$2,
+			typebox.Type.Null()
+		])),
+		issuedAt: NumberValue$2,
+		notBefore: NumberValue$2,
+		expiresAt: NumberValue$2,
+		redelegable: typebox.Type.Literal(false),
+		revocationEpoch: Optional$2(NumberValue$2)
+	})
+});
+const ProviderConsent = typebox.Type.Object({
+	workspaceId: Text$3,
+	providerHostId: Text$3,
+	packageName: Text$3,
+	owner: Principal,
+	grants: typebox.Type.Array(ProviderGrant, {
+		minItems: 2,
+		maxItems: 2
+	}),
+	createdAt: NumberValue$2,
+	expiresAt: NumberValue$2
+});
+const ConsentCandidate = typebox.Type.Object({
+	hostId: Text$3,
+	packageName: Text$3,
+	version: Text$3,
+	operations: Strings$1,
+	manifestExpiresAt: NumberValue$2
+});
+const ConsentWorkspaceParameter = {
+	name: "workspaceId",
+	in: "path",
+	required: true,
+	schema: Text$3
+};
 const Binary = typebox.Type.String({ contentEncoding: "binary" });
 const headlessHttpContracts = [
 	host("health", "/api/health", "GET", typebox.Type.Object({
@@ -657,6 +712,13 @@ const headlessHttpContracts = [
 		}), { maxItems: 10 })
 	})) }),
 	host("compositions", "/api/compositions", "GET", typebox.Type.Object({
+		network: Optional$2(typebox.Type.Object({
+			hostId: Text$3,
+			networkId: Text$3,
+			enrollmentGeneration: Optional$2(NumberValue$2)
+		})),
+		/** The computer's own name, which phones show instead of a tunnel address. */
+		displayName: Optional$2(Text$3),
 		global: Optional$2(WebCompositionSchema),
 		nativeGlobal: Optional$2(NativeCompositionSchema),
 		/** App bundles by platform, which a phone loads only when its own fingerprint matches. */
@@ -674,9 +736,85 @@ const headlessHttpContracts = [
 			root: Text$3,
 			/** `null` for a sandboxed workspace: its plugins run in its sandbox, the host has none for it. */
 			webComposition: Optional$2(typebox.Type.Union([WebCompositionSchema, typebox.Type.Null()])),
-			nativeComposition: Optional$2(typebox.Type.Union([NativeCompositionSchema, typebox.Type.Null()]))
+			nativeComposition: Optional$2(typebox.Type.Union([NativeCompositionSchema, typebox.Type.Null()])),
+			providers: Optional$2(typebox.Type.Array(typebox.Type.Object({
+				hostId: Text$3,
+				packageName: Text$3,
+				version: Text$3,
+				operations: typebox.Type.Array(typebox.Type.Object({
+					scope: typebox.Type.Union([
+						typebox.Type.Literal("global"),
+						typebox.Type.Literal("workspace"),
+						typebox.Type.Literal("session")
+					]),
+					names: Strings$1
+				})),
+				provenance: typebox.Type.Union([
+					typebox.Type.Literal("local"),
+					typebox.Type.Literal("own"),
+					typebox.Type.Literal("consented")
+				]),
+				status: typebox.Type.Union([typebox.Type.Literal("available"), typebox.Type.Literal("unavailable")]),
+				reason: Optional$2(typebox.Type.Union([
+					typebox.Type.Literal("manifest-missing"),
+					typebox.Type.Literal("manifest-expired"),
+					typebox.Type.Literal("roster-stale"),
+					typebox.Type.Literal("host-removed"),
+					typebox.Type.Literal("consent-expired")
+				])),
+				expiresAt: Optional$2(NumberValue$2)
+			})))
 		}))
 	})),
+	host("network.voters.propose", "/api/network/voters", "POST", Json$4, { body: body(typebox.Type.Object({
+		change: typebox.Type.Union([typebox.Type.Object({
+			network: Text$3,
+			epoch: NumberValue$2,
+			kind: typebox.Type.Literal("add"),
+			added: Text$3,
+			addedKey: Text$3
+		}), typebox.Type.Object({
+			network: Text$3,
+			epoch: NumberValue$2,
+			kind: typebox.Type.Literal("evict"),
+			removed: Text$3
+		})]),
+		authorization: Text$3
+	})) }),
+	host("network.consents.list", "/api/network/workspaces/{workspaceId}/consents", "GET", typebox.Type.Object({
+		consents: typebox.Type.Array(ProviderConsent),
+		candidates: typebox.Type.Array(ConsentCandidate)
+	}), { parameters: [ConsentWorkspaceParameter] }),
+	host("network.consents.approve", "/api/network/workspaces/{workspaceId}/consents", "POST", ProviderConsent, {
+		parameters: [ConsentWorkspaceParameter],
+		body: body(typebox.Type.Object({
+			providerHostId: Text$3,
+			packageName: Text$3,
+			grants: typebox.Type.Array(ProviderGrant, {
+				minItems: 2,
+				maxItems: 2
+			})
+		})),
+		responses: jsonApiResponses(ProviderConsent, 201)
+	}),
+	host("network.consents.revoke", "/api/network/workspaces/{workspaceId}/consents/{providerHostId}/{packageName}", "DELETE", typebox.Type.Null(), {
+		parameters: [
+			ConsentWorkspaceParameter,
+			{
+				name: "providerHostId",
+				in: "path",
+				required: true,
+				schema: Text$3
+			},
+			{
+				name: "packageName",
+				in: "path",
+				required: true,
+				schema: Text$3
+			}
+		],
+		responses: { "204": { description: "Provider consent revoked" } }
+	}),
 	host("directories", "/api/directories", "GET", typebox.Type.Object({ directories: Strings$1 }), { parameters: [query("q")] }),
 	host("directories.children", "/api/directories/children", "GET", typebox.Type.Object({
 		path: Text$3,