@amalgm/core 0.1.0

package/dist/transport/routing.js

@@ -0,0 +1,288 @@
+/**
+ * ONE routing table (axiom 4). The engine carries three drifted copies
+ * of these laws — local-gateway.js:133-176,627-654 (the gateway's own
+ * dispatch), tunnel-events.js:58-89,279-353 and tunnel-chat.js:33-64,
+ * 138-194,286-300 (each tunnel's local delivery) — and every incident
+ * where a new REST prefix worked over the tunnel but 404'd locally (or
+ * vice versa) is that drift cashing out. This module is the one
+ * definition; the table CONTENTS are injected product configuration
+ * (the kernel routes, it does not know what chat is — axiom 3), with
+ * the engine's shipped lists exported from shipped-routes.ts.
+ *
+ * The pipe never reads the mail: everything here classifies pathnames
+ * and port numbers. Nothing inspects a payload.
+ */
+/**
+ * The declared-port probe order — tunnel-events.js:315, byte-order
+ * preserved (mcp before chat; the sets never overlap in practice, but
+ * order is contract until proven dead).
+ */
+export const RUNTIME_SERVICES = ['gateway', 'portMonitor', 'mcp', 'chat'];
+/**
+ * The prefix law — tunnel-events.js:279-281, identical in chat and
+ * gateway: a prefix claims itself and everything below a '/'
+ * boundary. '/chat' claims '/chat' and '/chat/x', never
+ * '/chat-payloads' — segment-honest matching is what lets '/chat' and
+ * '/chat-payloads' live in different buckets.
+ */
+export function prefixMatches(pathname, prefix) {
+    return pathname === prefix || pathname.startsWith(`${prefix}/`);
+}
+/**
+ * tunnel-events.js:283-289 (framePathname) / runtime-auth.js:102-108
+ * (pathnameFor) — one copy. Tunnel frame paths and req.url both carry
+ * query strings; routing decisions are over the pathname alone.
+ * Unparseable input routes as '/'.
+ */
+export function pathnameOf(path) {
+    try {
+        return new URL(path || '/', 'http://127.0.0.1').pathname || '/';
+    }
+    catch {
+        return '/';
+    }
+}
+/**
+ * The classifier — canonical order is the TUNNEL order
+ * (tunnel-events.js:291-300): gateway (exact paths first, then
+ * prefixes) → portMonitor → chat → mcp → null.
+ *
+ * The engine's gateway checks chat → mcp → portMonitor instead
+ * (local-gateway.js:627-647, after handling its own routes). The two
+ * orders are currently indistinguishable because no prefix in one
+ * bucket sits under a prefix in another — no pathname can match two
+ * buckets, so match order never decides a winner. That is an
+ * assumption about table CONTENTS, so assertNoBucketCollisions below
+ * makes it executable: run it over any injected table and the
+ * "order doesn't matter" claim is proven, not remembered.
+ */
+export function serviceForRuntimePath(pathname, table) {
+    if (table.gatewayExactPaths.includes(pathname)
+        || table.gatewayPrefixes.some((prefix) => prefixMatches(pathname, prefix))) {
+        return 'gateway';
+    }
+    if (table.portMonitorPrefixes.some((prefix) => prefixMatches(pathname, prefix)))
+        return 'portMonitor';
+    if (table.chatPrefixes.some((prefix) => prefixMatches(pathname, prefix)))
+        return 'chat';
+    if (table.mcpPrefixes.some((prefix) => prefixMatches(pathname, prefix)))
+        return 'mcp';
+    return null;
+}
+/**
+ * The executable form of the order-indistinguishability assumption:
+ * two prefixes from different buckets may never claim the same
+ * pathname. Prefix a and prefix b share a claimable pathname exactly
+ * when one prefix-matches the other (then the deeper prefix itself is
+ * such a pathname), so that is the whole check. Gateway exact paths
+ * are also checked against the other buckets' prefixes: both shipped
+ * orders test gateway first, and this keeps even that ordering
+ * non-load-bearing.
+ */
+export function assertNoBucketCollisions(table) {
+    const buckets = [
+        ['gateway', table.gatewayPrefixes],
+        ['portMonitor', table.portMonitorPrefixes],
+        ['chat', table.chatPrefixes],
+        ['mcp', table.mcpPrefixes],
+    ];
+    buckets.forEach(([nameA, prefixesA], index) => {
+        for (const [nameB, prefixesB] of buckets.slice(index + 1)) {
+            for (const a of prefixesA) {
+                for (const b of prefixesB) {
+                    if (prefixMatches(a, b) || prefixMatches(b, a)) {
+                        throw new Error(`Route-table bucket collision: ${nameA} '${a}' and ${nameB} '${b}' can claim the same pathname; match order would decide the winner`);
+                    }
+                }
+            }
+        }
+    });
+    for (const exact of table.gatewayExactPaths) {
+        for (const [name, prefixes] of buckets) {
+            if (name === 'gateway')
+                continue;
+            for (const prefix of prefixes) {
+                if (prefixMatches(exact, prefix)) {
+                    throw new Error(`Route-table bucket collision: gateway exact path '${exact}' sits under ${name} '${prefix}'; gateway-first ordering would become load-bearing`);
+                }
+            }
+        }
+    }
+}
+/**
+ * The gateway's prefix-strip law — local-gateway.js:637-645: before
+ * proxying to the port monitor it strips '/port-monitor', else
+ * '/ports' (first match wins, checked in this order), but deliberately
+ * NOT '/api/ports' — that one is the port monitor's own native prefix
+ * and forwards verbatim. '/chat' and '/mcp'-bucket paths always
+ * forward verbatim (stripPrefix '').
+ */
+export const PORT_MONITOR_STRIP_PREFIXES = ['/port-monitor', '/ports'];
+/**
+ * Classify a pathname and compute the path to forward upstream —
+ * local-gateway.js:627-647 (serviceForPath) + :687-692 (proxiedPath,
+ * slice then `|| '/'`), generalized over the injected table. Pathname
+ * in, pathname out: the host re-attaches the query string, as
+ * proxiedPath does.
+ *
+ * DRIFT, documented as a wound the cutover closes: the tunnels
+ * forward frame paths VERBATIM to the resolved service
+ * (tunnel-events.js:678-684 passes frame.path straight to
+ * http.request), so '/ports/x' reaches the port monitor as '/ports/x'
+ * over a tunnel but as '/x' through the gateway. The gateway behavior
+ * ported here is canonical; when the tunnels adopt this function the
+ * two paths converge.
+ *
+ * Two deliberate departures from the engine's serviceForPath, both
+ * because this is the whole table rather than the gateway's slice of
+ * it: gateway-bucket paths return {service:'gateway'} instead of null
+ * (the engine returns null there because the gateway has already
+ * handled its own routes by that line), and the strip test uses the
+ * classified pathname, where the engine's raw startsWith is
+ * indistinguishable ('/portsfoo' never classifies as portMonitor).
+ */
+export function forwardPathForService(pathname, table) {
+    const service = serviceForRuntimePath(pathname, table);
+    if (service === null)
+        return null;
+    if (service === 'portMonitor') {
+        const strip = PORT_MONITOR_STRIP_PREFIXES.find((prefix) => pathname.startsWith(prefix)) ?? '';
+        return { service, forwardPath: strip ? pathname.slice(strip.length) || '/' : pathname };
+    }
+    return { service, forwardPath: pathname };
+}
+// ---------------------------------------------------------------------------
+// Ports
+// ---------------------------------------------------------------------------
+/** tunnel-events.js:274-277 — a port is an integer in (0, 65535], or it is nothing. */
+export function validPort(value) {
+    const port = Number(value);
+    return Number.isInteger(port) && port > 0 && port <= 65535 ? port : null;
+}
+/**
+ * The runtime-state port mapping — the tunnels' `readRuntimePorts`
+ * (tunnel-events.js:255-272, byte-identical in tunnel-chat.js:114-131;
+ * the engine name is kept — the manifest's declaration-driven
+ * `runtimePortsFromState` is a different law and lives in
+ * `supervision/service-registration.ts`). Top-level `gateway_port` wins
+ * over `ports.gateway` (older writers only wrote the former); the
+ * other services live only under `ports.*` in snake_case. `Number(x)
+ * || fallback` verbatim: absent, unparseable, and zero all fall back.
+ * The engine's catch-branch (unreadable file) is the host's: pass no
+ * state and the fallbacks come through whole.
+ */
+export function readRuntimePorts(state, fallbacks) {
+    return {
+        gateway: Number(state?.gateway_port || state?.ports?.gateway) || fallbacks.gateway,
+        portMonitor: Number(state?.ports?.port_monitor) || fallbacks.portMonitor,
+        mcp: Number(state?.ports?.amalgm_mcp) || fallbacks.mcp,
+        chat: Number(state?.ports?.chat_server) || fallbacks.chat,
+    };
+}
+/**
+ * The mirror-write shape — local-gateway.js:395-402: what the gateway
+ * writes is exactly what readRuntimePorts reads, top-level
+ * `gateway_port` doubled into `ports.gateway` included.
+ */
+export function runtimeStatePortsPatch(ports) {
+    return {
+        gateway_port: ports.gateway,
+        ports: {
+            gateway: ports.gateway,
+            port_monitor: ports.portMonitor,
+            amalgm_mcp: ports.mcp,
+            chat_server: ports.chat,
+        },
+    };
+}
+/** tunnel-events.js:302-308 — which service does a well-known DEFAULT port imply? Checked against defaults, never live ports. */
+export function defaultServiceForPort(port, defaults) {
+    if (port === defaults.gateway)
+        return 'gateway';
+    if (port === defaults.portMonitor)
+        return 'portMonitor';
+    if (port === defaults.mcp)
+        return 'mcp';
+    if (port === defaults.chat)
+        return 'chat';
+    return null;
+}
+/** tunnel-events.js:310-312 — live port if valid, else the default; null when both are broken. */
+export function runtimePortForService(runtimePorts, defaults, service) {
+    return validPort(runtimePorts[service]) || validPort(defaults[service]);
+}
+/** tunnel-events.js:314-316 — is this port one the live runtime actually declared? Order-sensitive over RUNTIME_SERVICES. */
+export function isDeclaredRuntimePort(port, runtimePorts) {
+    return RUNTIME_SERVICES.some((service) => validPort(runtimePorts[service]) === port);
+}
+/**
+ * The full set of ports a tunnel frame may target —
+ * tunnel-events.js:318-326: every resolvable service port plus, on
+ * the events tunnel, every advertised app-route port. DRIFT:
+ * tunnel-chat.js:177-184 omits the app ports (chat frames never
+ * target apps); that divergence is this parameter, not a second copy
+ * — pass no appRoutePorts and you have the chat version.
+ */
+export function allowedTargetPorts(runtimePorts, defaults, appRoutePorts = []) {
+    const ports = new Set();
+    for (const service of RUNTIME_SERVICES) {
+        const port = runtimePortForService(runtimePorts, defaults, service);
+        if (port)
+            ports.add(port);
+    }
+    for (const port of appRoutePorts)
+        ports.add(port);
+    return ports;
+}
+/**
+ * The target-port law — canonical form is tunnel-events.js:338-353
+ * (tunnel-chat.js:286-300 is the same law with fallbackService
+ * 'chat' and no app ports):
+ *  1. a requested port the live runtime declared is honored verbatim;
+ *  2. otherwise the frame's PATH picks the service — but only when no
+ *     port was requested, or the requested port is a well-known
+ *     default (a stale peer aiming at where a service used to live:
+ *     the path outranks the stale number and both remap to the live
+ *     port);
+ *  3. a requested port that names neither a declared port, a default,
+ *     nor a routable path must be in the allowed set (app routes) or
+ *     it resolves to null — and null is the denial contract below.
+ */
+export function resolveTargetPort(frame, options) {
+    const { runtimePorts, defaults, table } = options;
+    const requested = validPort(frame.target_port);
+    if (requested && isDeclaredRuntimePort(requested, runtimePorts))
+        return requested;
+    const defaultService = requested ? defaultServiceForPort(requested, defaults) : options.fallbackService;
+    const pathService = (!requested || defaultService)
+        ? serviceForRuntimePath(pathnameOf(frame.path), table)
+        : null;
+    const service = pathService || defaultService;
+    if (service) {
+        return runtimePortForService(runtimePorts, defaults, service);
+    }
+    if (!requested)
+        return null;
+    return allowedTargetPorts(runtimePorts, defaults, options.appRoutePorts ?? []).has(requested)
+        ? requested
+        : null;
+}
+// ---------------------------------------------------------------------------
+// Denial contracts — byte-exact (axiom 8)
+// ---------------------------------------------------------------------------
+/** Tunnel res-frame denial — tunnel-events.js:668-674 (and stream/ws variants at :710-715,:778-779). */
+export const TARGET_PORT_DENIED_STATUS = 403;
+export const TARGET_PORT_DENIED_MESSAGE = 'Target port is not allowed';
+/** The frozen body bytes of the non-stream denial (JSON.stringify({ error: ... }) at :673). */
+export const TARGET_PORT_DENIED_BODY = '{"error":"Target port is not allowed"}';
+/** WebSocket denial — tunnel-events.js:779: policy-violation close with the same reason. */
+export const WS_CLOSE_TARGET_PORT_DENIED = { code: 1008, reason: TARGET_PORT_DENIED_MESSAGE };
+/** Gateway preview denial — local-gateway.js:675. */
+export function previewPortDeniedError(port) {
+    return { status: 403, message: `Preview port is not allowed: ${port}` };
+}
+/** Gateway app denial — local-gateway.js:662. */
+export function appNotRoutableError(appRef) {
+    return { status: 404, message: `App is not routable: ${appRef}` };
+}
+//# sourceMappingURL=routing.js.map

package/dist/transport/routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../src/transport/routing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AASH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAenF;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAc;IAC5D,OAAO,QAAQ,KAAK,MAAM,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAA+B;IACxD,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,IAAI,GAAG,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,KAAiB;IACvE,IACE,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC;WACvC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,EAC1E,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,aAAa,CAAC;IACtG,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACxF,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAiB;IACxD,MAAM,OAAO,GAAgE;QAC3E,CAAC,SAAS,EAAE,KAAK,CAAC,eAAe,CAAC;QAClC,CAAC,aAAa,EAAE,KAAK,CAAC,mBAAmB,CAAC;QAC1C,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC;QAC5B,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC;KAC3B,CAAC;IACF,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE;QAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;YAC1D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;oBAC1B,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;wBAC/C,MAAM,IAAI,KAAK,CACb,iCAAiC,KAAK,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,oEAAoE,CACrI,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;YACvC,IAAI,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjC,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;gBAC9B,IAAI,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;oBACjC,MAAM,IAAI,KAAK,CACb,qDAAqD,KAAK,gBAAgB,IAAI,KAAK,MAAM,qDAAqD,CAC/I,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAU,CAAC;AAOhF;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,KAAiB;IACvE,MAAM,OAAO,GAAG,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,OAAO,KAAK,aAAa,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,2BAA2B,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9F,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AAC5C,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,uFAAuF;AACvF,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC3E,CAAC;AA0BD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAA0C,EAC1C,SAAuB;IAEvB,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,YAAY,IAAI,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,SAAS,CAAC,OAAO;QAClF,WAAW,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,IAAI,SAAS,CAAC,WAAW;QACxE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,SAAS,CAAC,GAAG;QACtD,IAAI,EAAE,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,SAAS,CAAC,IAAI;KAC1D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAmB;IAIxD,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,OAAO;QAC3B,KAAK,EAAE;YACL,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,WAAW;YAC/B,UAAU,EAAE,KAAK,CAAC,GAAG;YACrB,WAAW,EAAE,KAAK,CAAC,IAAI;SACxB;KACF,CAAC;AACJ,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,QAAsB;IACxE,IAAI,IAAI,KAAK,QAAQ,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAChD,IAAI,IAAI,KAAK,QAAQ,CAAC,WAAW;QAAE,OAAO,aAAa,CAAC;IACxD,IAAI,IAAI,KAAK,QAAQ,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,KAAK,QAAQ,CAAC,IAAI;QAAE,OAAO,MAAM,CAAC;IAC1C,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CACnC,YAA8B,EAC9B,QAAsB,EACtB,OAAuB;IAEvB,OAAO,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,6HAA6H;AAC7H,MAAM,UAAU,qBAAqB,CAAC,IAAY,EAAE,YAA8B;IAChF,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AACvF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,YAA8B,EAC9B,QAAsB,EACtB,gBAAkC,EAAE;IAEpC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,qBAAqB,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACpE,IAAI,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,aAAa;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AA0BD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAwB,EACxB,OAAiC;IAEjC,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC;IAClD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,SAAS,IAAI,qBAAqB,CAAC,SAAS,EAAE,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IAElF,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IACxG,MAAM,WAAW,GAAG,CAAC,CAAC,SAAS,IAAI,cAAc,CAAC;QAChD,CAAC,CAAC,qBAAqB,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;QACtD,CAAC,CAAC,IAAI,CAAC;IACT,MAAM,OAAO,GAAG,WAAW,IAAI,cAAc,CAAC;IAC9C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,qBAAqB,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,kBAAkB,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;QAC3F,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,wGAAwG;AACxG,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAC7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,4BAA4B,CAAC;AACvE,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,wCAAwC,CAAC;AAChF,4FAA4F;AAC5F,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAW,CAAC;AAEvG,qDAAqD;AACrD,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,gCAAgC,IAAI,EAAE,EAAE,CAAC;AAC1E,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,mBAAmB,CAAC,MAAc;IAChD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,wBAAwB,MAAM,EAAE,EAAE,CAAC;AACpE,CAAC"}

package/dist/transport/shipped-routes.d.ts

@@ -0,0 +1,21 @@
+/**
+ * The engine's shipped routing table, copied byte-for-byte from
+ * tunnel-events.js:58-89 — the canonical of the three engine copies
+ * (the other two: tunnel-chat.js:33-64, identical; local-gateway.js:
+ * 133-176, which carries only the chat/mcp/portMonitor buckets
+ * because the gateway dispatches its own routes before consulting a
+ * table, and treats only '/', '/healthz', '/runtime-state' as
+ * self-owned exact paths — '/pty/session' and '/pty/resize' fall
+ * under its own '/pty' handling).
+ *
+ * Counts, pinned by tests: 3 gateway prefixes, 5 gateway exact paths,
+ * 3 port-monitor prefixes, 7 chat prefixes, 26 MCP prefixes.
+ *
+ * This is product configuration riding in the kernel repo for the
+ * cutover: the table SHAPE is core's; these CONTENTS belong to the
+ * products that own the prefixes. A new runtime REST prefix goes here
+ * (and, until cutover, in all three engine copies) or UI calls 404.
+ */
+import type { RouteTable } from './routing.js';
+export declare const shippedRouteTable: RouteTable;
+//# sourceMappingURL=shipped-routes.d.ts.map

package/dist/transport/shipped-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipped-routes.d.ts","sourceRoot":"","sources":["../../src/transport/shipped-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,eAAO,MAAM,iBAAiB,EAAE,UAiC/B,CAAC"}

package/dist/transport/shipped-routes.js

@@ -0,0 +1,53 @@
+/**
+ * The engine's shipped routing table, copied byte-for-byte from
+ * tunnel-events.js:58-89 — the canonical of the three engine copies
+ * (the other two: tunnel-chat.js:33-64, identical; local-gateway.js:
+ * 133-176, which carries only the chat/mcp/portMonitor buckets
+ * because the gateway dispatches its own routes before consulting a
+ * table, and treats only '/', '/healthz', '/runtime-state' as
+ * self-owned exact paths — '/pty/session' and '/pty/resize' fall
+ * under its own '/pty' handling).
+ *
+ * Counts, pinned by tests: 3 gateway prefixes, 5 gateway exact paths,
+ * 3 port-monitor prefixes, 7 chat prefixes, 26 MCP prefixes.
+ *
+ * This is product configuration riding in the kernel repo for the
+ * cutover: the table SHAPE is core's; these CONTENTS belong to the
+ * products that own the prefixes. A new runtime REST prefix goes here
+ * (and, until cutover, in all three engine copies) or UI calls 404.
+ */
+export const shippedRouteTable = {
+    gatewayPrefixes: ['/__amalgm', '/diagnostics', '/pty'],
+    gatewayExactPaths: ['/', '/healthz', '/runtime-state', '/pty/session', '/pty/resize'],
+    portMonitorPrefixes: ['/api/ports', '/ports', '/port-monitor'],
+    chatPrefixes: ['/chat', '/raw-temp', '/active', '/stop', '/destroy', '/egress', '/mcp-relay'],
+    mcpPrefixes: [
+        '/mcp',
+        '/events',
+        '/tasks',
+        '/automations',
+        '/event-triggers',
+        '/workspace',
+        '/project-context',
+        '/github',
+        '/fs',
+        '/mcp-connections',
+        '/toolbox',
+        '/state',
+        '/local',
+        '/credentials',
+        '/chat-payloads',
+        '/email',
+        '/slack',
+        '/user-api-keys',
+        '/apps',
+        '/artifacts',
+        '/agents',
+        '/agent-config',
+        '/agent-bundles',
+        '/skills',
+        '/user-preferences',
+        '/browser',
+    ],
+};
+//# sourceMappingURL=shipped-routes.js.map

package/dist/transport/shipped-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shipped-routes.js","sourceRoot":"","sources":["../../src/transport/shipped-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,MAAM,CAAC,MAAM,iBAAiB,GAAe;IAC3C,eAAe,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,CAAC;IACtD,iBAAiB,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,gBAAgB,EAAE,cAAc,EAAE,aAAa,CAAC;IACrF,mBAAmB,EAAE,CAAC,YAAY,EAAE,QAAQ,EAAE,eAAe,CAAC;IAC9D,YAAY,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,CAAC;IAC7F,WAAW,EAAE;QACX,MAAM;QACN,SAAS;QACT,QAAQ;QACR,cAAc;QACd,iBAAiB;QACjB,YAAY;QACZ,kBAAkB;QAClB,SAAS;QACT,KAAK;QACL,kBAAkB;QAClB,UAAU;QACV,QAAQ;QACR,QAAQ;QACR,cAAc;QACd,gBAAgB;QAChB,QAAQ;QACR,QAAQ;QACR,gBAAgB;QAChB,OAAO;QACP,YAAY;QACZ,SAAS;QACT,eAAe;QACf,gBAAgB;QAChB,SAAS;QACT,mBAAmB;QACnB,UAAU;KACX;CACF,CAAC"}

package/package.json

@@ -0,0 +1,51 @@
+{
+  "name": "@amalgm/core",
+  "version": "0.1.0",
+  "description": "The Amalgm kernel SDK — identity, transport, supervision, and host capability contracts behind host-injected adapters.",
+  "type": "module",
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/amalgm-inc/amalgm-core.git"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./identity": {
+      "types": "./dist/identity/index.d.ts",
+      "default": "./dist/identity/index.js"
+    },
+    "./transport": {
+      "types": "./dist/transport/index.d.ts",
+      "default": "./dist/transport/index.js"
+    },
+    "./supervision": {
+      "types": "./dist/supervision/index.d.ts",
+      "default": "./dist/supervision/index.js"
+    },
+    "./adapters": {
+      "types": "./dist/adapters/index.d.ts",
+      "default": "./dist/adapters/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "PURPOSE.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "test": "npm run build && node --test tests/",
+    "test:parity": "npm run build && node --test tests/parity/"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.3"
+  }
+}