@airprompter/agent-core 0.1.0

package/dist/esm/release/bundleRelease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundleRelease.js","sourceRoot":"","sources":["../../../src/release/bundleRelease.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAwB,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAkB1E,MAAM,OAAO,aAAa;IAGL;IAER;IACA;IALF,IAAI,GAAG,QAAiB,CAAC;IAClC,YACmB,OAAsB;IACvC,uGAAuG;IAC9F,MAAoB,EACpB,QAAgB;QAHR,YAAO,GAAP,OAAO,CAAe;QAE9B,WAAM,GAAN,MAAM,CAAc;QACpB,aAAQ,GAAR,QAAQ,CAAQ;IACxB,CAAC;IAEJ,8FAA8F;IAC9F,MAAM,CAAC,IAAI,CAAC,KAAyB;QACnC,IAAI,QAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,eAAe,CAAC,CAAC;QAC3H,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,GAAI,KAA0C,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAE,KAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC;YACjI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,IAAI,EAA0B,EAAE,CAAC;QACzE,CAAC;QACD,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACtB,MAAM,WAAW,GAAG,kBAAkB,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACtG,IAAI,WAAW,CAAC,EAAE;YAAE,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC3C,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,cAAc,CAAC;YAC7B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;YAC3B,IAAI;YACJ,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,gBAAgB,EAAE,CAAC;YACnB,QAAQ;YACR,eAAe,EAAE,KAAK,CAAC,eAAe,IAAI,IAAI;YAC9C,GAAG,CAAC,KAAK,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpG,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,aAAa,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtJ,CAAC;IAED,OAAO;QACL,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;CACF"}

package/dist/esm/release/reader.d.ts

@@ -0,0 +1,30 @@
+/**
+ * The seam between the packages (S10): a verified release as a runtime
+ * consumes it, and where one comes from. `@airprompter/agent-sync` produces
+ * a `LoadedRelease` from the encrypted slot store or a daemon;
+ * `@airprompter/agent-core` produces one from a bundle the customer loads
+ * (`loadBundleRelease`); `@airprompter/agent-runtime` renders and assigns
+ * over either without knowing which. Structural, never a class: two copies
+ * of a package in one lockfile must agree on it (S1, the discriminant rule).
+ */
+import type { Manifest } from "../protocol/types.js";
+/** A verified release: the manifest, its generation, and the verified payload bytes by content hash. */
+export interface LoadedRelease {
+    readonly manifest: Manifest;
+    readonly generation: number;
+    /** contentHash → plaintext bytes, every one verified against the manifest before it is here. */
+    readonly payloads: ReadonlyMap<string, Uint8Array>;
+}
+/** Where a runtime reads releases from: the slot store, a daemon, or a bundle the customer loaded. */
+export interface ReleaseReader {
+    /** What the reader is, as data — never branch on a class. */
+    readonly kind: "store" | "daemon" | "bundle" | (string & {});
+    /** The release in force, or null when nothing verified is held. */
+    current(): LoadedRelease | null;
+}
+/** One slot of a release as the runtime resolves it: the manifest slot, and the arm and bucket the subject fell in. */
+export interface ReleaseSlot {
+    slot: Manifest["payload"]["slots"][number];
+    arm: string;
+    bucket: number | null;
+}

package/dist/esm/release/reader.js

@@ -0,0 +1,11 @@
+/**
+ * The seam between the packages (S10): a verified release as a runtime
+ * consumes it, and where one comes from. `@airprompter/agent-sync` produces
+ * a `LoadedRelease` from the encrypted slot store or a daemon;
+ * `@airprompter/agent-core` produces one from a bundle the customer loads
+ * (`loadBundleRelease`); `@airprompter/agent-runtime` renders and assigns
+ * over either without knowing which. Structural, never a class: two copies
+ * of a package in one lockfile must agree on it (S1, the discriminant rule).
+ */
+export {};
+//# sourceMappingURL=reader.js.map

package/dist/esm/release/reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reader.js","sourceRoot":"","sources":["../../../src/release/reader.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/esm/render/runRef.d.ts

@@ -0,0 +1,17 @@
+/**
+ * `runRef`: a compact, content-free token a customer keeps beside their own
+ * trace to attach feedback later. `agent·target·slot·versionId·arm·generation·bucket`,
+ * HMAC-signed with a per-store key so a forged ref cannot file signals
+ * against a version that was never run here. Carries no subject and no text.
+ */
+export interface RunRefFacts {
+    agentId: string;
+    target: string;
+    tag: string;
+    versionId: string;
+    arm: string;
+    generation: number;
+    bucket: number | null;
+}
+export declare function mintRunRef(facts: RunRefFacts, key: Uint8Array): string;
+export declare function parseRunRef(token: string, key: Uint8Array): RunRefFacts | null;

package/dist/esm/render/runRef.js

@@ -0,0 +1,29 @@
+/**
+ * `runRef`: a compact, content-free token a customer keeps beside their own
+ * trace to attach feedback later. `agent·target·slot·versionId·arm·generation·bucket`,
+ * HMAC-signed with a per-store key so a forged ref cannot file signals
+ * against a version that was never run here. Carries no subject and no text.
+ */
+import { createHmac, timingSafeEqual } from "node:crypto";
+const SEP = "·";
+export function mintRunRef(facts, key) {
+    const body = [facts.agentId, facts.target, facts.tag, facts.versionId, facts.arm, String(facts.generation), facts.bucket === null ? "-" : String(facts.bucket)].join(SEP);
+    const mac = createHmac("sha256", key).update(body, "utf8").digest("base64url").slice(0, 22);
+    return `${Buffer.from(body, "utf8").toString("base64url")}.${mac}`;
+}
+export function parseRunRef(token, key) {
+    const dot = token.lastIndexOf(".");
+    if (dot <= 0)
+        return null;
+    const body = Buffer.from(token.slice(0, dot), "base64url").toString("utf8");
+    const mac = token.slice(dot + 1);
+    const expected = createHmac("sha256", key).update(body, "utf8").digest("base64url").slice(0, 22);
+    if (mac.length !== expected.length || !timingSafeEqual(Buffer.from(mac), Buffer.from(expected)))
+        return null;
+    const parts = body.split(SEP);
+    if (parts.length !== 7)
+        return null;
+    const [agentId, target, tag, versionId, arm, generation, bucket] = parts;
+    return { agentId, target, tag, versionId, arm, generation: Number(generation), bucket: bucket === "-" ? null : Number(bucket) };
+}
+//# sourceMappingURL=runRef.js.map

package/dist/esm/render/runRef.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runRef.js","sourceRoot":"","sources":["../../../src/render/runRef.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAY1D,MAAM,GAAG,GAAG,GAAG,CAAC;AAEhB,MAAM,UAAU,UAAU,CAAC,KAAkB,EAAE,GAAe;IAC5D,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1K,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5F,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAa,EAAE,GAAe;IACxD,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5E,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjG,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7G,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,GAAG,KAAiE,CAAC;IACrI,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AAClI,CAAC"}

package/dist/esm/render/template.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Rendering a slot's text with its declared variables.
+ *
+ * `{{name}}` placeholders are the only substitution. A variable declared
+ * `end_user` (D55) is never dropped into the text raw: it is wrapped in the
+ * delimiters declared for it — by default an XML-style element named after
+ * the variable — so the model sees where untrusted input starts and stops,
+ * and the assurance lens can find it. A missing required variable throws:
+ * that is the customer's bug and silence would ship a broken prompt.
+ * Sync and telemetry failures degrade; render contract failures throw.
+ */
+import type { SlotVariable } from "../protocol/types.js";
+export declare class MissingVariableError extends Error {
+    readonly tag: string;
+    readonly missing: string[];
+    constructor(tag: string, missing: string[]);
+}
+export declare class UnknownVariableError extends Error {
+    readonly tag: string;
+    readonly unknown: string[];
+    constructor(tag: string, unknown: string[]);
+}
+export interface Delimiters {
+    open(name: string): string;
+    close(name: string): string;
+}
+/** `<name>…</name>`: visible to the model, easy to find in the text, and never confusable with `{{name}}`. */
+export declare const xmlDelimiters: Delimiters;
+export interface RenderInput {
+    tag: string;
+    text: string;
+    variables: readonly SlotVariable[];
+    values: Readonly<Record<string, string | number | boolean | null | undefined>>;
+    delimiters?: Delimiters;
+    /** Refuse values for variables the slot did not declare (default: true — a typo is a bug, not an optional). */
+    strictVariables?: boolean;
+}
+export declare function renderTemplate(input: RenderInput): string;

package/dist/esm/render/template.js

@@ -0,0 +1,65 @@
+/**
+ * Rendering a slot's text with its declared variables.
+ *
+ * `{{name}}` placeholders are the only substitution. A variable declared
+ * `end_user` (D55) is never dropped into the text raw: it is wrapped in the
+ * delimiters declared for it — by default an XML-style element named after
+ * the variable — so the model sees where untrusted input starts and stops,
+ * and the assurance lens can find it. A missing required variable throws:
+ * that is the customer's bug and silence would ship a broken prompt.
+ * Sync and telemetry failures degrade; render contract failures throw.
+ */
+export class MissingVariableError extends Error {
+    tag;
+    missing;
+    constructor(tag, missing) {
+        super(`render ${tag}: missing required variable${missing.length > 1 ? "s" : ""} ${missing.join(", ")}`);
+        this.tag = tag;
+        this.missing = missing;
+        this.name = "MissingVariableError";
+    }
+}
+export class UnknownVariableError extends Error {
+    tag;
+    unknown;
+    constructor(tag, unknown) {
+        super(`render ${tag}: variable${unknown.length > 1 ? "s" : ""} ${unknown.join(", ")} not declared on this slot`);
+        this.tag = tag;
+        this.unknown = unknown;
+        this.name = "UnknownVariableError";
+    }
+}
+/** `<name>…</name>`: visible to the model, easy to find in the text, and never confusable with `{{name}}`. */
+export const xmlDelimiters = {
+    open: (name) => `<${name}>`,
+    close: (name) => `</${name}>`,
+};
+const PLACEHOLDER = /\{\{\s*([a-zA-Z0-9_.-]{1,64})\s*\}\}/g;
+export function renderTemplate(input) {
+    const declared = new Map(input.variables.map((variable) => [variable.name, variable]));
+    const delimiters = input.delimiters ?? xmlDelimiters;
+    const present = new Set(Object.entries(input.values).filter(([, value]) => value !== undefined && value !== null).map(([name]) => name));
+    const missing = input.variables.filter((variable) => variable.required && !present.has(variable.name)).map((variable) => variable.name);
+    if (missing.length)
+        throw new MissingVariableError(input.tag, missing);
+    if (input.strictVariables !== false) {
+        const unknown = [...present].filter((name) => !declared.has(name));
+        if (unknown.length)
+            throw new UnknownVariableError(input.tag, unknown);
+    }
+    return input.text.replace(PLACEHOLDER, (whole, name) => {
+        const variable = declared.get(name);
+        if (!variable)
+            return whole; // an undeclared placeholder in the text is left for the author to see
+        const value = input.values[name];
+        if (value === undefined || value === null)
+            return "";
+        const rendered = String(value);
+        // End-user text is fenced; a value that carries the closing fence cannot break out of it.
+        return variable.trust === "end_user" ? `${delimiters.open(name)}${escapeFence(rendered, delimiters.close(name))}${delimiters.close(name)}` : rendered;
+    });
+}
+function escapeFence(value, close) {
+    return close ? value.split(close).join(close.replace("<", "&lt;")) : value;
+}
+//# sourceMappingURL=template.js.map

package/dist/esm/render/template.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template.js","sourceRoot":"","sources":["../../../src/render/template.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAElC;IACA;IAFX,YACW,GAAW,EACX,OAAiB;QAE1B,KAAK,CAAC,UAAU,GAAG,8BAA8B,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAH/F,QAAG,GAAH,GAAG,CAAQ;QACX,YAAO,GAAP,OAAO,CAAU;QAG1B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAElC;IACA;IAFX,YACW,GAAW,EACX,OAAiB;QAE1B,KAAK,CAAC,UAAU,GAAG,aAAa,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAHxG,QAAG,GAAH,GAAG,CAAQ;QACX,YAAO,GAAP,OAAO,CAAU;QAG1B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAOD,8GAA8G;AAC9G,MAAM,CAAC,MAAM,aAAa,GAAe;IACvC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,GAAG;IAC3B,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG;CAC9B,CAAC;AAEF,MAAM,WAAW,GAAG,uCAAuC,CAAC;AAY5D,MAAM,UAAU,cAAc,CAAC,KAAkB;IAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,aAAa,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACzI,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxI,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,eAAe,KAAK,KAAK,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QAC7D,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC,CAAC,sEAAsE;QACnG,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QACrD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/B,0FAA0F;QAC1F,OAAO,QAAQ,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC;IACxJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,KAAa;IAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AAC7E,CAAC"}

package/dist/esm/telemetry/feedback.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The feedback catalogue (`protocol/schemas/feedback-signals.schema.json`)
+ * normalised into window outcomes. Numbers, booleans and the declared enums
+ * only; anything else — free text above all — is named in `rejected` and
+ * never reaches the spool. `protocol/vectors/feedback.json` pins every rule.
+ */
+export declare const BOOLEAN_SIGNALS: readonly ["flagged", "accepted", "edited", "regenerated", "copied", "followUp", "escalated", "abandoned", "corrected", "resolved", "reopened", "converted", "refunded", "slaMet"];
+export declare const UNIT_SIGNALS: readonly ["editDistanceRatio", "judgeScore"];
+export declare const COUNT_SIGNALS: readonly ["regenerations", "timeToAcceptMs"];
+/** T34: written by the runtime on a window (a golden-set run), never accepted from `feedback()`; reserved so `custom` cannot shadow it. */
+export declare const RUNTIME_SIGNALS: readonly ["goldenPass"];
+export declare const CATALOGUE: ReadonlySet<string>;
+export declare const OUTCOME_NAME: RegExp;
+export type FeedbackRejection = "invalid_value" | "invalid_name" | "reserved_name" | "unknown_signal" | "needs_slot_enum";
+export interface NormalizedFeedback {
+    /** True when at least one signal became an outcome — the value `feedback()` returns. */
+    accepted: boolean;
+    outcomes: Record<string, number | boolean>;
+    rejected: Record<string, FeedbackRejection>;
+}
+export declare function normalizeFeedback(signals: Record<string, unknown>): NormalizedFeedback;

package/dist/esm/telemetry/feedback.js

@@ -0,0 +1,77 @@
+/**
+ * The feedback catalogue (`protocol/schemas/feedback-signals.schema.json`)
+ * normalised into window outcomes. Numbers, booleans and the declared enums
+ * only; anything else — free text above all — is named in `rejected` and
+ * never reaches the spool. `protocol/vectors/feedback.json` pins every rule.
+ */
+export const BOOLEAN_SIGNALS = ["flagged", "accepted", "edited", "regenerated", "copied", "followUp", "escalated", "abandoned", "corrected", "resolved", "reopened", "converted", "refunded", "slaMet"];
+export const UNIT_SIGNALS = ["editDistanceRatio", "judgeScore"];
+export const COUNT_SIGNALS = ["regenerations", "timeToAcceptMs"];
+/** T34: written by the runtime on a window (a golden-set run), never accepted from `feedback()`; reserved so `custom` cannot shadow it. */
+export const RUNTIME_SIGNALS = ["goldenPass"];
+export const CATALOGUE = new Set(["thumbs", "rating", "correctedValue", "custom", ...BOOLEAN_SIGNALS, ...UNIT_SIGNALS, ...COUNT_SIGNALS, ...RUNTIME_SIGNALS]);
+export const OUTCOME_NAME = /^[a-z][a-zA-Z0-9]{0,31}$/;
+const finite = (value) => typeof value === "number" && Number.isFinite(value);
+export function normalizeFeedback(signals) {
+    const outcomes = {};
+    const rejected = {};
+    for (const [name, value] of Object.entries(signals)) {
+        if (name === "thumbs") {
+            if (value === "up" || value === "down")
+                outcomes.thumbs = value === "up";
+            else
+                rejected[name] = "invalid_value";
+        }
+        else if (name === "rating") {
+            if (Number.isInteger(value) && value >= 1 && value <= 5)
+                outcomes.rating = value;
+            else
+                rejected[name] = "invalid_value";
+        }
+        else if (BOOLEAN_SIGNALS.includes(name)) {
+            if (typeof value === "boolean")
+                outcomes[name] = value;
+            else
+                rejected[name] = "invalid_value";
+        }
+        else if (UNIT_SIGNALS.includes(name)) {
+            if (finite(value) && value >= 0 && value <= 1)
+                outcomes[name] = value;
+            else
+                rejected[name] = "invalid_value";
+        }
+        else if (COUNT_SIGNALS.includes(name)) {
+            if (Number.isInteger(value) && value >= 0)
+                outcomes[name] = value;
+            else
+                rejected[name] = "invalid_value";
+        }
+        else if (name === "correctedValue") {
+            // Aggregating per enum value needs the slot's declared output check, which this writer does not hold yet.
+            rejected[name] = typeof value === "string" && value.length <= 64 ? "needs_slot_enum" : "invalid_value";
+        }
+        else if (RUNTIME_SIGNALS.includes(name)) {
+            rejected[name] = "reserved_name";
+        }
+        else if (name === "custom") {
+            if (typeof value !== "object" || value === null || Array.isArray(value) || Object.keys(value).length > 8) {
+                rejected[name] = "invalid_value";
+                continue;
+            }
+            for (const [customName, customValue] of Object.entries(value)) {
+                if (!OUTCOME_NAME.test(customName))
+                    rejected[`custom.${customName}`] = "invalid_name";
+                else if (CATALOGUE.has(customName))
+                    rejected[`custom.${customName}`] = "reserved_name";
+                else if (typeof customValue === "boolean" || finite(customValue))
+                    outcomes[customName] = customValue;
+                else
+                    rejected[`custom.${customName}`] = "invalid_value";
+            }
+        }
+        else
+            rejected[name] = "unknown_signal";
+    }
+    return { accepted: Object.keys(outcomes).length > 0, outcomes, rejected };
+}
+//# sourceMappingURL=feedback.js.map

package/dist/esm/telemetry/feedback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback.js","sourceRoot":"","sources":["../../../src/telemetry/feedback.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAU,CAAC;AACjN,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,mBAAmB,EAAE,YAAY,CAAU,CAAC;AACzE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAU,CAAC;AAC1E,2IAA2I;AAC3I,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,YAAY,CAAU,CAAC;AACvD,MAAM,CAAC,MAAM,SAAS,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,EAAE,GAAG,eAAe,EAAE,GAAG,YAAY,EAAE,GAAG,aAAa,EAAE,GAAG,eAAe,CAAC,CAAC,CAAC;AACnL,MAAM,CAAC,MAAM,YAAY,GAAG,0BAA0B,CAAC;AAWvD,MAAM,MAAM,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAExG,MAAM,UAAU,iBAAiB,CAAC,OAAgC;IAChE,MAAM,QAAQ,GAAqC,EAAE,CAAC;IACtD,MAAM,QAAQ,GAAsC,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtB,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM;gBAAE,QAAQ,CAAC,MAAM,GAAG,KAAK,KAAK,IAAI,CAAC;;gBACpE,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;QACxC,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,IAAK,KAAgB,IAAI,CAAC;gBAAE,QAAQ,CAAC,MAAM,GAAG,KAAe,CAAC;;gBAC9G,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;QACxC,CAAC;aAAM,IAAK,eAAqC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,IAAI,OAAO,KAAK,KAAK,SAAS;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;;gBAClD,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;QACxC,CAAC;aAAM,IAAK,YAAkC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;;gBACjE,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;QACxC,CAAC;aAAM,IAAK,aAAmC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/D,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAe,CAAC;;gBACnF,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;QACxC,CAAC;aAAM,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACrC,0GAA0G;YAC1G,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,eAAe,CAAC;QACzG,CAAC;aAAM,IAAK,eAAqC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACjE,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;QACnC,CAAC;aAAM,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzG,QAAQ,CAAC,IAAI,CAAC,GAAG,eAAe,CAAC;gBACjC,SAAS;YACX,CAAC;YACD,KAAK,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;gBACzF,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;oBAAE,QAAQ,CAAC,UAAU,UAAU,EAAE,CAAC,GAAG,cAAc,CAAC;qBACjF,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;oBAAE,QAAQ,CAAC,UAAU,UAAU,EAAE,CAAC,GAAG,eAAe,CAAC;qBAClF,IAAI,OAAO,WAAW,KAAK,SAAS,IAAI,MAAM,CAAC,WAAW,CAAC;oBAAE,QAAQ,CAAC,UAAU,CAAC,GAAG,WAAW,CAAC;;oBAChG,QAAQ,CAAC,UAAU,UAAU,EAAE,CAAC,GAAG,eAAe,CAAC;YAC1D,CAAC;QACH,CAAC;;YAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,gBAAgB,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC5E,CAAC"}

package/dist/esm/telemetry/rows.d.ts

@@ -0,0 +1,85 @@
+/**
+ * The telemetry row schemas (`protocol/spool-format.md`, D52/D66): what a
+ * spool segment carries, and nothing else. There is no field for prompt
+ * text, output, or an end-user identifier — the shape is the privacy rule.
+ * Pure: the spool writer (`@airprompter/agent-telemetry`) and the wrap
+ * adapters (`@airprompter/agent-runtime`) both build on these without
+ * importing each other.
+ */
+export declare const LATENCY_BUCKET_EDGES_MS: readonly [1, 2, 4, 8, 16, 32, 64, 128, 256, 512, 1024, 2048, 4096, 8192, 16384, 65536];
+export type ErrorClass = "render_missing_variable" | "context_length_exceeded" | "output_schema_invalid" | "truncated" | "content_filter" | "provider_error" | "provider_timeout" | "provider_rate_limited";
+export interface Observation {
+    tag: string;
+    versionId: string;
+    arm: string;
+    model: string;
+    status: "ok" | "error" | "refused";
+    errorClass?: ErrorClass | null;
+    latencyMs: number;
+    tokens?: {
+        input?: number;
+        cachedInput?: number;
+        output?: number;
+    };
+    usageSource?: "reported" | "measured" | "estimated" | "unavailable";
+    checks?: {
+        passed?: number;
+        failed?: number;
+    };
+    outcomes?: Record<string, number | boolean>;
+}
+export interface WindowRow {
+    type: "window";
+    v: 1;
+    minute: string;
+    instanceId: string;
+    instanceClass: "resident" | "ephemeral";
+    tag: string;
+    versionId: string;
+    arm: string;
+    model: string;
+    status: "ok" | "error" | "refused";
+    errorClass: ErrorClass | null;
+    usageSource: "reported" | "measured" | "estimated" | "unavailable";
+    count: number;
+    latencyMs: {
+        buckets: number[];
+        sum: number;
+    };
+    tokens: {
+        input: number;
+        cachedInput?: number;
+        output: number;
+    };
+    checks?: {
+        passed: number;
+        failed: number;
+    };
+    outcomes?: Record<string, {
+        n: number;
+        sum: number;
+    }>;
+    sdk: string;
+}
+export interface RefusalRow {
+    type: "refusal";
+    v: 1;
+    at: string;
+    instanceId: string;
+    reason: "disabled" | "lease_expired" | "payload_verification_failed" | "forced_downgrade" | "model_unavailable" | "unlock_refused";
+    generation: number;
+    tag: string | null;
+}
+/** Segments (or buffered rows) evicted by a budget: the loss is reported, never silent. */
+export interface DroppedRow {
+    type: "dropped";
+    v: 1;
+    at: string;
+    instanceId: string;
+    segments: number;
+    bytes: number;
+}
+export type SpoolRow = WindowRow | RefusalRow | DroppedRow;
+export declare function latencyBucketIndex(latencyMs: number): number;
+export declare function minuteOf(epochMs: number): string;
+export declare function epochMinute(epochMs: number): number;

package/dist/esm/telemetry/rows.js

@@ -0,0 +1,22 @@
+/**
+ * The telemetry row schemas (`protocol/spool-format.md`, D52/D66): what a
+ * spool segment carries, and nothing else. There is no field for prompt
+ * text, output, or an end-user identifier — the shape is the privacy rule.
+ * Pure: the spool writer (`@airprompter/agent-telemetry`) and the wrap
+ * adapters (`@airprompter/agent-runtime`) both build on these without
+ * importing each other.
+ */
+export const LATENCY_BUCKET_EDGES_MS = [1, 2, 4, 8, 16, 32, 64, 128, 256, 512, 1024, 2048, 4096, 8192, 16384, 65536];
+export function latencyBucketIndex(latencyMs) {
+    const index = LATENCY_BUCKET_EDGES_MS.findIndex((edge) => latencyMs <= edge);
+    return index === -1 ? LATENCY_BUCKET_EDGES_MS.length - 1 : index;
+}
+export function minuteOf(epochMs) {
+    const date = new Date(epochMs);
+    date.setUTCSeconds(0, 0);
+    return date.toISOString().replace(".000Z", "Z");
+}
+export function epochMinute(epochMs) {
+    return Math.floor(epochMs / 60000);
+}
+//# sourceMappingURL=rows.js.map

package/dist/esm/telemetry/rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.js","sourceRoot":"","sources":["../../../src/telemetry/rows.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAU,CAAC;AAqE9H,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,MAAM,KAAK,GAAG,uBAAuB,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC;IAC7E,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACnE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,OAAe;IACtC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;AACrC,CAAC"}

package/dist/esm/telemetry/uploadSink.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Where validated spool segments go (S13): the `UploadSink` port. The
+ * uploader in `@airprompter/agent-telemetry` owns the spool — the sweep, the
+ * budget, the quarantine, the delete-on-ack — and hands each validated
+ * segment to a sink. Two sinks ship: AirPrompter's (a grant per writer from
+ * the heartbeat, a PUT to the customer's own prefix) and the OpenTelemetry
+ * bridge (`@airprompter/otel-bridge`: the windows as OTLP metrics to the
+ * collector the customer already runs, no AirPrompter grant at all). A sink
+ * is data, never a class: `kind` says what it is.
+ */
+import type { SpoolRow } from "./rows.js";
+export interface UploadSegment {
+    /** The writer whose segment this is (the instance id in the file name). */
+    instanceId: string;
+    /** The segment's file name: the object key on AirPrompter's side, a label elsewhere. */
+    segment: string;
+    /** The validated rows, in order. */
+    rows: SpoolRow[];
+    /** Exactly the whole lines, as bytes — what AirPrompter's sink posts. */
+    bytes: Uint8Array;
+}
+/**
+ * What a sink says about one segment:
+ * - `ok`: shipped; the uploader deletes the segment.
+ * - `hold`: not now (a grant is throttled, a collector asked for backoff); the uploader keeps the segment and waits.
+ * - `failed`: try again later under backoff; the segment stays under the budget.
+ * - `dropped`: the sink gave up on this segment for good (the bridge's drop-and-count); the uploader deletes it and counts the loss.
+ * - `too_large`: the receiver refused the size; the segment is quarantined.
+ */
+export type UploadOutcome = {
+    status: "ok";
+} | {
+    status: "hold";
+    retryAfterMs: number;
+    reason?: string;
+} | {
+    status: "failed";
+    reason: string;
+} | {
+    status: "dropped";
+    reason: string;
+} | {
+    status: "too_large";
+    bytes: number;
+};
+export interface UploadSink {
+    /** What the sink is, as data: `"airprompter"`, `"otlp"`, or a customer's own. Never branch on a class. */
+    readonly kind: "airprompter" | "otlp" | (string & {});
+    ship(segment: UploadSegment): Promise<UploadOutcome>;
+    /** Live state for `status` (grants held, the collector's last answer); optional. */
+    status?(): Record<string, unknown>;
+}

package/dist/esm/telemetry/uploadSink.js

@@ -0,0 +1,12 @@
+/**
+ * Where validated spool segments go (S13): the `UploadSink` port. The
+ * uploader in `@airprompter/agent-telemetry` owns the spool — the sweep, the
+ * budget, the quarantine, the delete-on-ack — and hands each validated
+ * segment to a sink. Two sinks ship: AirPrompter's (a grant per writer from
+ * the heartbeat, a PUT to the customer's own prefix) and the OpenTelemetry
+ * bridge (`@airprompter/otel-bridge`: the windows as OTLP metrics to the
+ * collector the customer already runs, no AirPrompter grant at all). A sink
+ * is data, never a class: `kind` says what it is.
+ */
+export {};
+//# sourceMappingURL=uploadSink.js.map

package/dist/esm/telemetry/uploadSink.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"uploadSink.js","sourceRoot":"","sources":["../../../src/telemetry/uploadSink.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG"}

package/dist/esm/testing/controlPlane.d.ts

@@ -0,0 +1,116 @@
+/**
+ * A fake control plane for SDK tests: an offline root ceremony, a signing
+ * key, sealed manifests per generation, payloads by hash, an edge pointer —
+ * served through a `fetch` the SDK takes as an option. Signs exactly as the
+ * hosted service does (canonical payload bytes, ES256, P1363).
+ */
+import type { Manifest, ManifestPayload, ManifestSlot, P256PrivateJwk, RootMetadata, Target } from "../protocol/types.js";
+import type { FetchLike } from "../control/client.js";
+/** The protocol version this checkout of the repository declares; manifests the fake signs carry it. */
+export declare const PROTOCOL = "0.2.5";
+export declare function newKey(): P256PrivateJwk;
+export declare function rootDocument(input: {
+    rootKey: P256PrivateJwk;
+    signingKeys: P256PrivateJwk[];
+    environment: Target;
+    version?: number;
+    expires?: string;
+    purpose?: "platform" | "countersign";
+}): RootMetadata;
+export interface SlotSpec {
+    tag: string;
+    text: string;
+    model?: string;
+    variables?: ManifestSlot["variables"];
+    versionId?: string;
+    steps?: Array<{
+        text: string;
+        versionId?: string;
+    }>;
+}
+export declare class FakeControlPlane {
+    readonly scope: {
+        organizationId: string;
+        agentId: string;
+        target: Target;
+    };
+    readonly apiKey: string;
+    readonly rootKey: P256PrivateJwk;
+    readonly signingKey: P256PrivateJwk;
+    readonly root: RootMetadata;
+    readonly payloads: Map<string, Buffer<ArrayBufferLike>>;
+    readonly requests: string[];
+    private current;
+    generation: number;
+    edgeEtag: number;
+    requireCountersign: boolean;
+    /**
+     * Fresh keys by default (a test). `airprompter dev` (S12) hands in the keys it persisted, so the root a customer
+     * pinned yesterday still verifies today's generations.
+     */
+    constructor(scope: {
+        organizationId: string;
+        agentId: string;
+        target: Target;
+    }, apiKey?: string, keys?: {
+        rootKey?: P256PrivateJwk;
+        signingKey?: P256PrivateJwk;
+    });
+    slot(spec: SlotSpec): ManifestSlot;
+    /** Seal and promote: generation + 1, signed with the signing key. */
+    /** T9: every heartbeat body the fake accepted, and what it answers (a test may change the cadence). */
+    readonly heartbeats: Array<Record<string, unknown>>;
+    heartbeatIntervalSeconds: number;
+    heartbeatRefusal: {
+        status: number;
+        code: string;
+    } | null;
+    /**
+     * T26: the grant issuer and a fake S3 behind it. With `grantBaseUrl` set, every accepted heartbeat answers an
+     * `uploadGrant` for the body's instance prefix (or `retryAfterSeconds` while `grantHold` is set); the POST endpoint at
+     * `<grantBaseUrl>/s3/agent-telemetry` checks the policy the way the bucket would and keeps the objects by key.
+     */
+    grantBaseUrl: string | null;
+    /** S3: a party between the fleet and the edge pins the pointer at this generation; the origin moves on regardless. */
+    pinnedPointer: {
+        generation: number;
+    } | null;
+    /** S3: whether the heartbeat answer names the origin's generation (an older service does not). */
+    heartbeatLatestGeneration: boolean;
+    grantTtlMs: number;
+    grantHold: {
+        retryAfterSeconds: number;
+    } | null;
+    uploadIntervalSeconds: number;
+    readonly grants: Array<{
+        grantId: string;
+        instanceId: string;
+        keyPrefix: string;
+        expiresAt: string;
+    }>;
+    readonly objects: Map<string, Buffer<ArrayBufferLike>>;
+    readonly uploads: string[];
+    /** A test may fail the next N POSTs (a 500) to exercise backoff. */
+    failNextUploads: number;
+    /** The issuer's and the bucket's clock (grant expiry, policy expiry); a test drives it beside the uploader's. */
+    now: () => number;
+    private grantSeq;
+    private issueGrant;
+    /** The bucket's side of a presigned POST: the policy's conditions, the expiry, the size cap; nothing else is looked at. */
+    private acceptUpload;
+    promote(slots: ManifestSlot[], options?: Partial<Pick<ManifestPayload, "applyPolicy" | "leaseSeconds" | "experiment" | "directives" | "onLeaseExpiry" | "unlockWindow">> & {
+        signWith?: P256PrivateJwk;
+        generation?: number;
+    }): Manifest;
+    get manifest(): Manifest | null;
+    /** The `fetch` the SDK sees. */
+    fetch(): FetchLike;
+}
+/** The fake behind a real HTTP listener, for daemons and CLIs that run as their own process — and `airprompter dev` (S12). */
+export declare function serveOverHttp(plane: FakeControlPlane, listen?: {
+    host?: string;
+    port?: number;
+}): Promise<{
+    baseUrl: string;
+    close: () => Promise<void>;
+}>;