@angriff36/manifest 2.18.0

package/dist/manifest/federation/descriptor.js

@@ -0,0 +1,97 @@
+/**
+ * IR-to-descriptor conversion — builds ServiceDescriptors from Manifest IRs.
+ *
+ * Extracts exposed entities and commands from a compiled IR so services
+ * can advertise their federation surface to peers.
+ *
+ * @module federation/descriptor
+ */
+/**
+ * Build a ServiceDescriptor from a compiled IR and a service identity.
+ * Only entities and commands explicitly listed in `expose` are advertised;
+ * if `expose` is omitted, all entities with commands are exposed.
+ */
+export function buildDescriptor(serviceId, ir, options) {
+    const commandsByEntity = indexCommands(ir);
+    const policyByName = indexPolicies(ir);
+    const entityFilter = options.exposeEntities
+        ? new Set(options.exposeEntities)
+        : null;
+    const exposedEntities = [];
+    for (const entity of ir.entities) {
+        if (entityFilter && !entityFilter.has(entity.name))
+            continue;
+        const commands = commandsByEntity.get(entity.name) ?? [];
+        if (commands.length === 0 && !entityFilter)
+            continue;
+        const exposedCommands = commands.map((cmd) => {
+            const requiredPolicies = options.commandPolicies?.[cmd.name]
+                ?? resolveCommandPolicies(cmd, entity, policyByName);
+            return {
+                name: cmd.name,
+                idempotent: !cmd.async && isIdempotentCommand(cmd),
+                requiredPolicies,
+            };
+        });
+        if (exposedCommands.length > 0 || entityFilter) {
+            exposedEntities.push({
+                name: entity.name,
+                module: entity.module,
+                commands: exposedCommands,
+            });
+        }
+    }
+    return {
+        serviceId,
+        displayName: options.displayName,
+        endpoint: options.endpoint,
+        schemaVersion: ir.provenance.schemaVersion,
+        entities: exposedEntities,
+        auth: options.auth,
+    };
+}
+/**
+ * Heuristic: a command is idempotent if it has no `async` flag
+ * and its actions are all create/set (no increment, no random, no effect).
+ * This is a conservative default — callers can override via commandPolicies.
+ */
+function isIdempotentCommand(cmd) {
+    for (const action of cmd.actions) {
+        const k = action.kind;
+        if (k === 'emit' || k === 'effect' || k === 'publish') {
+            return false;
+        }
+    }
+    return true;
+}
+function resolveCommandPolicies(cmd, entity, policyByName) {
+    const policies = [];
+    if (cmd.policies)
+        policies.push(...cmd.policies);
+    if (entity.defaultPolicies)
+        policies.push(...entity.defaultPolicies);
+    for (const name of policies) {
+        if (!policyByName.has(name))
+            continue;
+    }
+    return policies;
+}
+function indexCommands(ir) {
+    const map = new Map();
+    for (const cmd of ir.commands) {
+        if (!cmd.entity)
+            continue;
+        if (!map.has(cmd.entity))
+            map.set(cmd.entity, []);
+        map.get(cmd.entity).push(cmd);
+    }
+    return map;
+}
+function indexPolicies(ir) {
+    const map = new Map();
+    for (const policy of ir.policies) {
+        map.set(policy.name, policy);
+    }
+    return map;
+}
+//# sourceMappingURL=descriptor.js.map

package/dist/manifest/federation/descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptor.js","sourceRoot":"","sources":["../../../src/manifest/federation/descriptor.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AASH;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAiB,EACjB,EAAM,EACN,OAQC;IAED,MAAM,gBAAgB,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;IAEvC,MAAM,YAAY,GAAG,OAAO,CAAC,cAAc;QACzC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC;IAET,MAAM,eAAe,GAAoB,EAAE,CAAC;IAE5C,KAAK,MAAM,MAAM,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;QACjC,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,SAAS;QAE7D,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY;YAAE,SAAS;QAErD,MAAM,eAAe,GAAqB,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC7D,MAAM,gBAAgB,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC;mBACvD,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;YACvD,OAAO;gBACL,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,UAAU,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,mBAAmB,CAAC,GAAG,CAAC;gBAClD,gBAAgB;aACjB,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,YAAY,EAAE,CAAC;YAC/C,eAAe,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,QAAQ,EAAE,eAAe;aAC1B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS;QACT,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,aAAa,EAAE,EAAE,CAAC,UAAU,CAAC,aAAa;QAC1C,QAAQ,EAAE,eAAe;QACzB,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,GAAc;IACzC,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QACtB,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAC7B,GAAc,EACd,MAAgB,EAChB,YAAmC;IAEnC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,GAAG,CAAC,QAAQ;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,eAAe;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;IACxC,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,EAAM;IAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,SAAS;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAClD,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,EAAM;IAC3B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,KAAK,MAAM,MAAM,IAAI,EAAE,CAAC,QAAQ,EAAE,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/manifest/federation/http-adapter.d.ts

@@ -0,0 +1,26 @@
+/**
+ * HTTP adapter generator — produces typed client code for remote services.
+ *
+ * Given a ServiceDescriptor, generates a TypeScript module with strongly-typed
+ * methods for each exposed command. The generated adapter handles:
+ * - Base URL configuration
+ * - Auth token injection
+ * - Policy bridge header propagation
+ * - Timeout and error handling
+ *
+ * The generator is pure: same descriptor in → same code out. No side effects.
+ *
+ * @module federation/http-adapter
+ */
+import type { ServiceDescriptor, TypedClientAdapter } from './types';
+/**
+ * Generate a typed HTTP client adapter from a service descriptor.
+ * The generated source is a self-contained TypeScript module.
+ */
+export declare function generateHttpAdapter(descriptor: ServiceDescriptor): TypedClientAdapter;
+/**
+ * Render the TypeScript source code for a typed HTTP adapter.
+ * The output is deterministic for a given descriptor.
+ */
+export declare function renderAdapterSource(descriptor: ServiceDescriptor): string;
+//# sourceMappingURL=http-adapter.d.ts.map

package/dist/manifest/federation/http-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-adapter.d.ts","sourceRoot":"","sources":["../../../src/manifest/federation/http-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EACV,iBAAiB,EAGjB,kBAAkB,EACnB,MAAM,SAAS,CAAC;AAIjB;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,iBAAiB,GAAG,kBAAkB,CAUrF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,iBAAiB,GAAG,MAAM,CAgGzE"}

package/dist/manifest/federation/http-adapter.js

@@ -0,0 +1,209 @@
+/**
+ * HTTP adapter generator — produces typed client code for remote services.
+ *
+ * Given a ServiceDescriptor, generates a TypeScript module with strongly-typed
+ * methods for each exposed command. The generated adapter handles:
+ * - Base URL configuration
+ * - Auth token injection
+ * - Policy bridge header propagation
+ * - Timeout and error handling
+ *
+ * The generator is pure: same descriptor in → same code out. No side effects.
+ *
+ * @module federation/http-adapter
+ */
+import { buildBridgeHeaders } from './client.js';
+/**
+ * Generate a typed HTTP client adapter from a service descriptor.
+ * The generated source is a self-contained TypeScript module.
+ */
+export function generateHttpAdapter(descriptor) {
+    const source = renderAdapterSource(descriptor);
+    return {
+        serviceId: descriptor.serviceId,
+        source,
+        create(baseUrl, options) {
+            const client = createRuntimeClient(descriptor, baseUrl, options?.authToken, options?.timeoutMs ?? 30000);
+            return client;
+        },
+    };
+}
+/**
+ * Render the TypeScript source code for a typed HTTP adapter.
+ * The output is deterministic for a given descriptor.
+ */
+export function renderAdapterSource(descriptor) {
+    const lines = [];
+    lines.push(`/**`);
+    lines.push(` * Typed HTTP client adapter for service "${descriptor.serviceId}".`);
+    if (descriptor.displayName) {
+        lines.push(` * Display name: ${descriptor.displayName}`);
+    }
+    lines.push(` * Schema version: ${descriptor.schemaVersion}`);
+    lines.push(` * Auto-generated by Manifest federation — do not edit manually.`);
+    lines.push(` */`);
+    lines.push(``);
+    lines.push(`export interface BridgeHeaders {`);
+    lines.push(`  actorId?: string;`);
+    lines.push(`  tenantId?: string;`);
+    lines.push(`  orgId?: string;`);
+    lines.push(`  actorRoles?: string[];`);
+    lines.push(`  requestId?: string;`);
+    lines.push(`  correlationId?: string;`);
+    lines.push(`  bearerToken?: string;`);
+    lines.push(`}`);
+    lines.push(``);
+    lines.push(`export interface FederationResult<T = unknown> {`);
+    lines.push(`  success: boolean;`);
+    lines.push(`  result?: T;`);
+    lines.push(`  error?: string;`);
+    lines.push(`  deniedBy?: string;`);
+    lines.push(`  guardFailure?: { index: number; expression: string };`);
+    lines.push(`  emittedEvents: Array<{ name: string; channel: string; payload: unknown }>;`);
+    lines.push(`  correlationId?: string;`);
+    lines.push(`  handledBy: string;`);
+    lines.push(`  respondedAt: number;`);
+    lines.push(`}`);
+    lines.push(``);
+    // Group commands by entity
+    for (const entity of descriptor.entities) {
+        lines.push(`// ── Entity: ${entity.name}${entity.module ? ` (module: ${entity.module})` : ''} ──`);
+        for (const cmd of entity.commands) {
+            const methodName = toMethodName(entity.name, cmd.name);
+            lines.push(...renderCommandMethod(methodName, entity, cmd));
+            lines.push(``);
+        }
+    }
+    // Factory function
+    const className = toPascalCase(descriptor.serviceId) + 'Client';
+    lines.push(`export class ${className} {`);
+    lines.push(`  constructor(`);
+    lines.push(`    private baseUrl: string,`);
+    lines.push(`    private options: { authToken?: string; timeoutMs?: number; fetchImpl?: typeof fetch } = {}`);
+    lines.push(`  ) {}`);
+    lines.push(``);
+    for (const entity of descriptor.entities) {
+        for (const cmd of entity.commands) {
+            const methodName = toMethodName(entity.name, cmd.name);
+            lines.push(`  ${methodName}(input: Record<string, unknown>, bridge: BridgeHeaders): Promise<FederationResult> {`);
+            lines.push(`    return invokeCommand(this, "${entity.name}", "${cmd.name}", input, bridge, ${cmd.idempotent});`);
+            lines.push(`  }`);
+        }
+    }
+    lines.push(`}`);
+    lines.push(``);
+    // Shared invoke helper
+    lines.push(`async function invokeCommand(`);
+    lines.push(`  client: { baseUrl: string; options: { authToken?: string; timeoutMs?: number; fetchImpl?: typeof fetch } },`);
+    lines.push(`  entity: string,`);
+    lines.push(`  command: string,`);
+    lines.push(`  input: Record<string, unknown>,`);
+    lines.push(`  bridge: BridgeHeaders,`);
+    lines.push(`  idempotent: boolean`);
+    lines.push(`): Promise<FederationResult> {`);
+    lines.push(`  const fetchImpl = client.options.fetchImpl ?? globalThis.fetch;`);
+    lines.push(`  const controller = new AbortController();`);
+    lines.push(`  const timeout = setTimeout(() => controller.abort(), client.options.timeoutMs ?? 30000);`);
+    lines.push(`  const headers: Record<string, string> = { "Content-Type": "application/json" };`);
+    lines.push(`  if (bridge.actorId) headers["X-Manifest-Actor"] = bridge.actorId;`);
+    lines.push(`  if (bridge.tenantId) headers["X-Manifest-Tenant"] = bridge.tenantId;`);
+    lines.push(`  if (bridge.orgId) headers["X-Manifest-Org"] = bridge.orgId;`);
+    lines.push(`  if (bridge.actorRoles?.length) headers["X-Manifest-Roles"] = bridge.actorRoles.join(",");`);
+    lines.push(`  if (bridge.requestId) headers["X-Request-Id"] = bridge.requestId;`);
+    lines.push(`  if (bridge.correlationId) headers["X-Correlation-Id"] = bridge.correlationId;`);
+    lines.push(`  if (client.options.authToken) headers["Authorization"] = \`Bearer \${client.options.authToken}\`;`);
+    lines.push(`  try {`);
+    lines.push(`    const url = \`\${client.baseUrl}/__manifest/federation/\${encodeURIComponent(entity)}/\${encodeURIComponent(command)}\`;`);
+    lines.push(`    const res = await fetchImpl(url, { method: "POST", headers, body: JSON.stringify({ input }), signal: controller.signal });`);
+    lines.push(`    clearTimeout(timeout);`);
+    lines.push(`    return await res.json() as FederationResult;`);
+    lines.push(`  } catch (err) {`);
+    lines.push(`    clearTimeout(timeout);`);
+    lines.push(`    return { success: false, error: err instanceof Error ? err.message : String(err), emittedEvents: [], handledBy: "${descriptor.serviceId}", respondedAt: Date.now() };`);
+    lines.push(`  }`);
+    lines.push(`}`);
+    lines.push(``);
+    return lines.join('\n');
+}
+function renderCommandMethod(methodName, entity, cmd) {
+    const lines = [];
+    lines.push(`/**`);
+    lines.push(` * ${cmd.description ?? `Invoke ${entity.name}.${cmd.name} on the remote service.`}`);
+    if (cmd.requiredPolicies.length > 0) {
+        lines.push(` * Required policies: ${cmd.requiredPolicies.join(', ')}`);
+    }
+    if (cmd.idempotent) {
+        lines.push(` * Idempotent: safe to retry on transient failure.`);
+    }
+    lines.push(` */`);
+    lines.push(`export function ${methodName}(`);
+    lines.push(`  client: { baseUrl: string; options: { authToken?: string; timeoutMs?: number; fetchImpl?: typeof fetch } },`);
+    lines.push(`  input: Record<string, unknown>,`);
+    lines.push(`  bridge: BridgeHeaders`);
+    lines.push(`): Promise<FederationResult> {`);
+    lines.push(`  return invokeCommand(client, "${entity.name}", "${cmd.name}", input, bridge, ${cmd.idempotent});`);
+    lines.push(`}`);
+    return lines;
+}
+function createRuntimeClient(descriptor, baseUrl, authToken, timeoutMs) {
+    const client = {};
+    for (const entity of descriptor.entities) {
+        for (const cmd of entity.commands) {
+            const methodName = toMethodName(entity.name, cmd.name);
+            client[methodName] = async (...args) => {
+                const input = args[0];
+                const bridge = args[1];
+                const fetchImpl = globalThis.fetch;
+                const controller = new AbortController();
+                const timeout = setTimeout(() => controller.abort(), timeoutMs);
+                const headers = { 'Content-Type': 'application/json' };
+                for (const [k, v] of Object.entries(buildBridgeHeaders(bridge))) {
+                    if (v !== undefined)
+                        headers[k] = v;
+                }
+                if (authToken)
+                    headers['Authorization'] = `Bearer ${authToken}`;
+                try {
+                    const url = `${baseUrl}/__manifest/federation/${encodeURIComponent(entity.name)}/${encodeURIComponent(cmd.name)}`;
+                    const res = await fetchImpl(url, {
+                        method: 'POST',
+                        headers,
+                        body: JSON.stringify({ input }),
+                        signal: controller.signal,
+                    });
+                    clearTimeout(timeout);
+                    return await res.json();
+                }
+                catch (err) {
+                    clearTimeout(timeout);
+                    return {
+                        success: false,
+                        error: err instanceof Error ? err.message : String(err),
+                        emittedEvents: [],
+                        handledBy: descriptor.serviceId,
+                        respondedAt: Date.now(),
+                    };
+                }
+            };
+        }
+    }
+    return client;
+}
+/**
+ * Convert (entityName, commandName) into a camelCase method name.
+ * Example: ("Order", "CreateOrder") → "orderCreateOrder"
+ */
+function toMethodName(entityName, commandName) {
+    return entityName.charAt(0).toLowerCase() + entityName.slice(1) +
+        commandName.charAt(0).toUpperCase() + commandName.slice(1);
+}
+/**
+ * Convert a serviceId to PascalCase for class names.
+ */
+function toPascalCase(str) {
+    return str
+        .split(/[-_\s]+/)
+        .map((s) => s.charAt(0).toUpperCase() + s.slice(1))
+        .join('');
+}
+//# sourceMappingURL=http-adapter.js.map

package/dist/manifest/federation/http-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-adapter.js","sourceRoot":"","sources":["../../../src/manifest/federation/http-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAQH,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAGjD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAA6B;IAC/D,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO;QACL,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,MAAM;QACN,MAAM,CAAC,OAAe,EAAE,OAAoD;YAC1E,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,IAAI,KAAK,CAAC,CAAC;YACzG,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,UAA6B;IAC/D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,6CAA6C,UAAU,CAAC,SAAS,IAAI,CAAC,CAAC;IAClF,IAAI,UAAU,CAAC,WAAW,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,oBAAoB,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,sBAAsB,UAAU,CAAC,aAAa,EAAE,CAAC,CAAC;IAC7D,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAC/E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC/C,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAC5B,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,yDAAyD,CAAC,CAAC;IACtE,KAAK,CAAC,IAAI,CAAC,8EAA8E,CAAC,CAAC;IAC3F,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,2BAA2B;IAC3B,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACnG,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,GAAG,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YAC5D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,MAAM,SAAS,GAAG,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;IAChE,KAAK,CAAC,IAAI,CAAC,gBAAgB,SAAS,IAAI,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC7B,KAAK,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;IAC3C,KAAK,CAAC,IAAI,CAAC,gGAAgG,CAAC,CAAC;IAC7G,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,sFAAsF,CAAC,CAAC;YAClH,KAAK,CAAC,IAAI,CAAC,mCAAmC,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,qBAAqB,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;YACjH,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,uBAAuB;IACvB,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;IAC5H,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACjC,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAChF,KAAK,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAC1D,KAAK,CAAC,IAAI,CAAC,4FAA4F,CAAC,CAAC;IACzG,KAAK,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAC;IAChG,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IACrF,KAAK,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;IAC5E,KAAK,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;IAC1G,KAAK,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAClF,KAAK,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAC9F,KAAK,CAAC,IAAI,CAAC,qGAAqG,CAAC,CAAC;IAClH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,CAAC,IAAI,CAAC,8HAA8H,CAAC,CAAC;IAC3I,KAAK,CAAC,IAAI,CAAC,gIAAgI,CAAC,CAAC;IAC7I,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IAC/D,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAChC,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,wHAAwH,UAAU,CAAC,SAAS,+BAA+B,CAAC,CAAC;IACxL,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,mBAAmB,CAAC,UAAkB,EAAE,MAAqB,EAAE,GAAmB;IACzF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,IAAI,UAAU,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,yBAAyB,EAAE,CAAC,CAAC;IAClG,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,yBAAyB,GAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,KAAK,CAAC,IAAI,CAAC,mBAAmB,UAAU,GAAG,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAC;IAC5H,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC;IAChD,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACtC,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CAAC,mCAAmC,MAAM,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,qBAAqB,GAAG,CAAC,UAAU,IAAI,CAAC,CAAC;IACjH,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAC1B,UAA6B,EAC7B,OAAe,EACf,SAA6B,EAC7B,SAAiB;IAEjB,MAAM,MAAM,GAA6D,EAAE,CAAC;IAC5E,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,QAAQ,EAAE,CAAC;QACzC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClC,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACvD,MAAM,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,GAAG,IAAe,EAAE,EAAE;gBAChD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAA4B,CAAC;gBACjD,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAwB,CAAC;gBAC9C,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC;gBACnC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;gBACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;gBAChE,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;gBAC/E,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;oBAChE,IAAI,CAAC,KAAK,SAAS;wBAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACtC,CAAC;gBACD,IAAI,SAAS;oBAAE,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,SAAS,EAAE,CAAC;gBAChE,IAAI,CAAC;oBACH,MAAM,GAAG,GAAG,GAAG,OAAO,0BAA0B,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;wBAC/B,MAAM,EAAE,MAAM;wBACd,OAAO;wBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;wBAC/B,MAAM,EAAE,UAAU,CAAC,MAAM;qBAC1B,CAAC,CAAC;oBACH,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC1B,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACvD,aAAa,EAAE,EAAE;wBACjB,SAAS,EAAE,UAAU,CAAC,SAAS;wBAC/B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;qBACxB,CAAC;gBACJ,CAAC;YACH,CAAC,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,UAAkB,EAAE,WAAmB;IAC3D,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG;SACP,KAAK,CAAC,SAAS,CAAC;SAChB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/manifest/federation/index.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Federation module — public API for cross-service Manifest runtime communication.
+ *
+ * @module federation
+ *
+ * Federation enables multiple Manifest runtime instances (microservices) to:
+ * - Discover each other's entity schemas and available commands
+ * - Invoke commands across service boundaries with policy-enforced authorization
+ * - Propagate actor identity and tenant context through a policy bridge
+ * - Generate typed HTTP client adapters from remote IRs
+ *
+ * Main exports:
+ * - {@link FederationRegistry} — service discovery and health tracking
+ * - {@link FederationClient} — cross-service command invocation
+ * - {@link HttpFederationTransport} — default fetch-based transport
+ * - {@link buildDescriptor} — build a ServiceDescriptor from a compiled IR
+ * - {@link generateHttpAdapter} — generate typed TypeScript client code
+ * - {@link buildBridgeFromContext} / {@link contextFromBridgeHeaders} — policy bridge
+ *
+ * @example
+ * ```typescript
+ * import { FederationRegistry, FederationClient, buildDescriptor } from '@angriff36/manifest/federation';
+ *
+ * // Build a descriptor from a compiled IR
+ * const ordersDescriptor = buildDescriptor('orders', ordersIR, {
+ *   endpoint: 'https://orders.svc.cluster:8080',
+ * });
+ *
+ * // Register and discover
+ * const registry = new FederationRegistry();
+ * registry.register(ordersDescriptor);
+ *
+ * // Invoke a command on the remote service
+ * const client = new FederationClient(registry);
+ * const response = await client.invoke({
+ *   serviceId: 'orders',
+ *   entity: 'Order',
+ *   command: 'createOrder',
+ *   input: { customerId: 'c-1', items: [...] },
+ *   bridge: { actorId: 'user-1', tenantId: 'tenant-1' },
+ * });
+ * ```
+ */
+export type { ServiceDescriptor, ExposedEntity, ExposedCommand, ServiceHealth, ServiceAuthConfig, FederationRequest, FederationResponse, PolicyBridgeHeaders, FederationClientOptions, FederationRegistryOptions, FederationTransport, TypedClientAdapter, } from './types';
+export { FederationRegistry } from './registry.js';
+export type { ExposedCommandRef } from './registry.js';
+export { FederationClient, HttpFederationTransport, buildBridgeHeaders, isTransientFailure, } from './client.js';
+export { buildBridgeFromContext, contextFromBridgeHeaders, parseBridgeHeaders, validateBridgeHeaders, ensureCorrelationId, } from './policy-bridge.js';
+export { buildDescriptor } from './descriptor.js';
+export { generateHttpAdapter, renderAdapterSource } from './http-adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/manifest/federation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/manifest/federation/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,YAAY,EACV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,aAAa,EACb,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,yBAAyB,EACzB,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,SAAS,CAAC;AAEjB,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,YAAY,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEvD,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/manifest/federation/index.js

@@ -0,0 +1,49 @@
+/**
+ * Federation module — public API for cross-service Manifest runtime communication.
+ *
+ * @module federation
+ *
+ * Federation enables multiple Manifest runtime instances (microservices) to:
+ * - Discover each other's entity schemas and available commands
+ * - Invoke commands across service boundaries with policy-enforced authorization
+ * - Propagate actor identity and tenant context through a policy bridge
+ * - Generate typed HTTP client adapters from remote IRs
+ *
+ * Main exports:
+ * - {@link FederationRegistry} — service discovery and health tracking
+ * - {@link FederationClient} — cross-service command invocation
+ * - {@link HttpFederationTransport} — default fetch-based transport
+ * - {@link buildDescriptor} — build a ServiceDescriptor from a compiled IR
+ * - {@link generateHttpAdapter} — generate typed TypeScript client code
+ * - {@link buildBridgeFromContext} / {@link contextFromBridgeHeaders} — policy bridge
+ *
+ * @example
+ * ```typescript
+ * import { FederationRegistry, FederationClient, buildDescriptor } from '@angriff36/manifest/federation';
+ *
+ * // Build a descriptor from a compiled IR
+ * const ordersDescriptor = buildDescriptor('orders', ordersIR, {
+ *   endpoint: 'https://orders.svc.cluster:8080',
+ * });
+ *
+ * // Register and discover
+ * const registry = new FederationRegistry();
+ * registry.register(ordersDescriptor);
+ *
+ * // Invoke a command on the remote service
+ * const client = new FederationClient(registry);
+ * const response = await client.invoke({
+ *   serviceId: 'orders',
+ *   entity: 'Order',
+ *   command: 'createOrder',
+ *   input: { customerId: 'c-1', items: [...] },
+ *   bridge: { actorId: 'user-1', tenantId: 'tenant-1' },
+ * });
+ * ```
+ */
+export { FederationRegistry } from './registry.js';
+export { FederationClient, HttpFederationTransport, buildBridgeHeaders, isTransientFailure, } from './client.js';
+export { buildBridgeFromContext, contextFromBridgeHeaders, parseBridgeHeaders, validateBridgeHeaders, ensureCorrelationId, } from './policy-bridge.js';
+export { buildDescriptor } from './descriptor.js';
+export { generateHttpAdapter, renderAdapterSource } from './http-adapter.js';
+//# sourceMappingURL=index.js.map

package/dist/manifest/federation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/manifest/federation/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAiBH,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGnD,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/manifest/federation/policy-bridge.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Policy bridge — enforces authorization across service boundaries.
+ *
+ * The policy bridge solves a critical federation problem: when Service A
+ * invokes a command on Service B, Service B must still enforce its own
+ * authorization policies. The bridge:
+ *
+ * 1. Extracts the caller's identity from the local RuntimeContext
+ * 2. Propagates it across the network as policy bridge headers
+ * 3. On the receiving side, reconstructs a RuntimeContext from those headers
+ * 4. The receiving service's policy engine evaluates against the reconstructed context
+ *
+ * The bridge NEVER trusts the caller to enforce its own policies — every
+ * service is responsible for evaluating its own authorization rules using
+ * the forwarded identity.
+ *
+ * @module federation/policy-bridge
+ */
+import type { PolicyBridgeHeaders } from './types';
+import type { RuntimeContext } from '../runtime-engine';
+/**
+ * Build policy bridge headers from a local RuntimeContext.
+ * Extracts actor identity, tenant, org, and roles for cross-service propagation.
+ */
+export declare function buildBridgeFromContext(context: RuntimeContext): PolicyBridgeHeaders;
+/**
+ * Reconstruct a RuntimeContext from incoming policy bridge headers.
+ * The receiving service uses this to evaluate its own policies against
+ * the caller's identity.
+ *
+ * Strict by default: missing actor identity is preserved as undefined
+ * (policies that require actor checks will fail closed).
+ */
+export declare function contextFromBridgeHeaders(headers: PolicyBridgeHeaders): RuntimeContext;
+/**
+ * Extract policy bridge headers from a standard Headers object or plain object.
+ * Handles both case-insensitive HTTP headers and the canonical camelCase form.
+ */
+export declare function parseBridgeHeaders(source: Headers | Record<string, string>): PolicyBridgeHeaders;
+/**
+ * Validate that a set of bridge headers carries the minimum required
+ * identity information for cross-service policy enforcement.
+ * Returns null if valid, or a string explaining the validation failure.
+ */
+export declare function validateBridgeHeaders(headers: PolicyBridgeHeaders): string | null;
+/**
+ * Compute a correlation ID for a cross-service workflow if one isn't provided.
+ * Uses a deterministic prefix + timestamp + counter for tracing.
+ */
+export declare function ensureCorrelationId(existing?: string): string;
+//# sourceMappingURL=policy-bridge.d.ts.map

package/dist/manifest/federation/policy-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-bridge.d.ts","sourceRoot":"","sources":["../../../src/manifest/federation/policy-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,cAAc,GAAG,mBAAmB,CAQnF;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,mBAAmB,GAAG,cAAc,CAYrF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,mBAAmB,CA0BhG;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAKjF;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAK7D"}

package/dist/manifest/federation/policy-bridge.js

@@ -0,0 +1,122 @@
+/**
+ * Policy bridge — enforces authorization across service boundaries.
+ *
+ * The policy bridge solves a critical federation problem: when Service A
+ * invokes a command on Service B, Service B must still enforce its own
+ * authorization policies. The bridge:
+ *
+ * 1. Extracts the caller's identity from the local RuntimeContext
+ * 2. Propagates it across the network as policy bridge headers
+ * 3. On the receiving side, reconstructs a RuntimeContext from those headers
+ * 4. The receiving service's policy engine evaluates against the reconstructed context
+ *
+ * The bridge NEVER trusts the caller to enforce its own policies — every
+ * service is responsible for evaluating its own authorization rules using
+ * the forwarded identity.
+ *
+ * @module federation/policy-bridge
+ */
+/**
+ * Build policy bridge headers from a local RuntimeContext.
+ * Extracts actor identity, tenant, org, and roles for cross-service propagation.
+ */
+export function buildBridgeFromContext(context) {
+    const headers = {};
+    if (context.actorId)
+        headers.actorId = context.actorId;
+    if (context.tenantId)
+        headers.tenantId = context.tenantId;
+    if (context.orgId)
+        headers.orgId = context.orgId;
+    if (context.requestId)
+        headers.requestId = context.requestId;
+    if (context.user?.role)
+        headers.actorRoles = [context.user.role];
+    return headers;
+}
+/**
+ * Reconstruct a RuntimeContext from incoming policy bridge headers.
+ * The receiving service uses this to evaluate its own policies against
+ * the caller's identity.
+ *
+ * Strict by default: missing actor identity is preserved as undefined
+ * (policies that require actor checks will fail closed).
+ */
+export function contextFromBridgeHeaders(headers) {
+    const context = {};
+    if (headers.actorId)
+        context.actorId = headers.actorId;
+    if (headers.tenantId)
+        context.tenantId = headers.tenantId;
+    if (headers.orgId)
+        context.orgId = headers.orgId;
+    if (headers.requestId)
+        context.requestId = headers.requestId;
+    if (headers.correlationId)
+        context.correlationId = headers.correlationId;
+    if (headers.actorRoles && headers.actorRoles.length > 0) {
+        context.user = { id: headers.actorId ?? 'unknown', role: headers.actorRoles[0] };
+        context.user = { ...context.user, roles: headers.actorRoles };
+    }
+    return context;
+}
+/**
+ * Extract policy bridge headers from a standard Headers object or plain object.
+ * Handles both case-insensitive HTTP headers and the canonical camelCase form.
+ */
+export function parseBridgeHeaders(source) {
+    const get = (key) => {
+        if (source instanceof Headers) {
+            return source.get(key) ?? undefined;
+        }
+        // Case-insensitive lookup for plain objects
+        const found = Object.keys(source).find((k) => k.toLowerCase() === key.toLowerCase());
+        return found ? source[found] : undefined;
+    };
+    const headers = {};
+    const actor = get('X-Manifest-Actor');
+    if (actor)
+        headers.actorId = actor;
+    const tenant = get('X-Manifest-Tenant');
+    if (tenant)
+        headers.tenantId = tenant;
+    const org = get('X-Manifest-Org');
+    if (org)
+        headers.orgId = org;
+    const roles = get('X-Manifest-Roles');
+    if (roles)
+        headers.actorRoles = roles.split(',').map((r) => r.trim()).filter(Boolean);
+    const reqId = get('X-Request-Id');
+    if (reqId)
+        headers.requestId = reqId;
+    const corrId = get('X-Correlation-Id');
+    if (corrId)
+        headers.correlationId = corrId;
+    const bearer = get('Authorization');
+    if (bearer && bearer.startsWith('Bearer '))
+        headers.bearerToken = bearer.slice(7);
+    return headers;
+}
+/**
+ * Validate that a set of bridge headers carries the minimum required
+ * identity information for cross-service policy enforcement.
+ * Returns null if valid, or a string explaining the validation failure.
+ */
+export function validateBridgeHeaders(headers) {
+    if (!headers.actorId) {
+        return 'Policy bridge missing actor identity (X-Manifest-Actor)';
+    }
+    return null;
+}
+/**
+ * Compute a correlation ID for a cross-service workflow if one isn't provided.
+ * Uses a deterministic prefix + timestamp + counter for tracing.
+ */
+export function ensureCorrelationId(existing) {
+    if (existing)
+        return existing;
+    const ts = Date.now().toString(36);
+    const rand = Math.random().toString(36).slice(2, 8);
+    return `fed-${ts}-${rand}`;
+}
+//# sourceMappingURL=policy-bridge.js.map

package/dist/manifest/federation/policy-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-bridge.js","sourceRoot":"","sources":["../../../src/manifest/federation/policy-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAKH;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAuB;IAC5D,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACvD,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1D,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACjD,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC7D,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI;QAAE,OAAO,CAAC,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,wBAAwB,CAAC,OAA4B;IACnE,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IACvD,IAAI,OAAO,CAAC,QAAQ;QAAE,OAAO,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC1D,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IACjD,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;IAC7D,IAAI,OAAO,CAAC,aAAa;QAAE,OAAO,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IACzE,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,OAAO,CAAC,OAAO,IAAI,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,OAAO,CAAC,IAAI,GAAG,EAAE,GAAG,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC;IAChE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAwC;IACzE,MAAM,GAAG,GAAG,CAAC,GAAW,EAAsB,EAAE;QAC9C,IAAI,MAAM,YAAY,OAAO,EAAE,CAAC;YAC9B,OAAO,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;QACtC,CAAC;QACD,4CAA4C;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACrF,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3C,CAAC,CAAC;IAEF,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,MAAM,KAAK,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACtC,IAAI,KAAK;QAAE,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACxC,IAAI,MAAM;QAAE,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAClC,IAAI,GAAG;QAAE,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC;IAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACtC,IAAI,KAAK;QAAE,OAAO,CAAC,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC;IAClC,IAAI,KAAK;QAAE,OAAO,CAAC,SAAS,GAAG,KAAK,CAAC;IACrC,MAAM,MAAM,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC;IACvC,IAAI,MAAM;QAAE,OAAO,CAAC,aAAa,GAAG,MAAM,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IACpC,IAAI,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAA4B;IAChE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,yDAAyD,CAAC;IACnE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,OAAO,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;AAC7B,CAAC"}