@apilift/cli 1.4.19 → 1.4.20

package/dist/apilift-collector.js

@@ -129549,6 +129549,7 @@ var errorCategoryByCode = {
   "release-state-conflict": "conflict",
   "action-withheld": "withheld",
   "publication-budget": "limit",
+  "publication-throttled": "limit",
   "session-limit": "limit",
   "client-upgrade-required": "upgrade",
   "backend-unavailable": "unavailable",
@@ -129773,12 +129774,12 @@ var me = external_exports.strictObject({ account: external_exports.strictObject(
 var setupStatus = external_exports.strictObject({ linkCode: external_exports.strictObject({ id: uuid3, agent: knownAgent.nullable(), status: external_exports.enum(["pending", "claimed", "expired"]), expiresAt: iso, installationId: uuid3.nullable() }).nullable(), installation: external_exports.strictObject({ id: uuid3, label: str, readiness, steps: data, agents: external_exports.array(knownAgent) }).nullable() });
 var actionSummary = external_exports.strictObject({ name: str, title: str, summary: external_exports.string(), effect: external_exports.enum(["read", "create", "update", "delete"]).optional(), availability: external_exports.enum(["executable", "unavailable"]), policy: external_exports.enum(["approve", "deny", "disable"]), health: data, documentation: data.optional() });
 var actionDocumentation = external_exports.strictObject({ name: str, title: str, description: external_exports.string(), effect: external_exports.enum(["read", "create", "update", "delete"]).optional(), availability: external_exports.enum(["executable", "unavailable"]), inputs: jsonSchema, output: jsonSchema.optional(), proof: external_exports.enum(["readback", "absence"]).optional(), unavailable: external_exports.strictObject({ reason: str, evidence: str }).optional(), transport: external_exports.strictObject({ name: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str })) }).optional(), version: external_exports.number().int().positive(), executableHash: hash2.optional(), policy: external_exports.enum(["approve", "deny", "disable"]), health: data });
-var bundle = external_exports.strictObject({ decision: external_exports.literal("allow"), app: external_exports.strictObject({ id: uuid3, slug: str, visibility: external_exports.enum(["public", "private"]) }), action: external_exports.strictObject({ name: str, effect: external_exports.enum(["read", "create", "update", "delete"]) }), closure: external_exports.strictObject({ hash: hash2, status: external_exports.enum(["pending", "validated"]), workspaceStatus: external_exports.literal("successful").nullable(), versions: external_exports.array(external_exports.strictObject({ kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), executableHash: hash2, definition })) }), selection: external_exports.strictObject({ channel: external_exports.enum(["latest", "validated"]), fallback: external_exports.boolean(), replaced: external_exports.strictObject({ closureHash: hash2, reason: str }).optional() }), policy: external_exports.literal("approve") });
+var bundle = external_exports.strictObject({ receipt: external_exports.strictObject({ id: uuid3, dispatchBefore: iso }).optional(), decision: external_exports.literal("allow"), app: external_exports.strictObject({ id: uuid3, slug: str, visibility: external_exports.enum(["public", "private"]) }), action: external_exports.strictObject({ name: str, effect: external_exports.enum(["read", "create", "update", "delete"]) }), closure: external_exports.strictObject({ hash: hash2, status: external_exports.enum(["pending", "validated"]), workspaceStatus: external_exports.literal("successful").nullable(), versions: external_exports.array(external_exports.strictObject({ kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), executableHash: hash2, definition })) }), selection: external_exports.strictObject({ channel: external_exports.enum(["latest", "validated"]), fallback: external_exports.boolean(), replaced: external_exports.strictObject({ closureHash: hash2, reason: str, until: iso.optional() }).optional() }), policy: external_exports.literal("approve") });
 var resourceRead = external_exports.strictObject({ ...kindName.shape, definition, version: external_exports.number().int().positive(), executableHash: hash2.optional(), verification: data.optional(), dependents: external_exports.array(kindName).optional() });
-var resourceRequirements = external_exports.strictObject({ name: str, title: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str, prefix: external_exports.string().optional() })) });
+var resourceRequirements = external_exports.strictObject({ legacyCredentialContract: str.optional(), credentialContract: str.optional(), destinations: external_exports.array(str).optional(), name: str, title: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str, prefix: external_exports.string().optional() })) });
 var safetyReview = external_exports.union([external_exports.strictObject({ access: external_exports.literal("locked") }), external_exports.strictObject({ access: external_exports.literal("included"), state: external_exports.enum(["missing", "checking", "ready", "unavailable"]), route: str, findings: data.optional(), checkedAt: iso.optional(), stale: external_exports.boolean().optional(), message: external_exports.string().optional() })]);
 var billing = external_exports.strictObject({ workspaceId: uuid3, paddleCustomerId: str.optional(), entitlement, trial: external_exports.strictObject({ status: external_exports.enum(["active", "ended", "converted"]), startedAt: iso, endsAt: iso, completedAt: iso.optional() }).optional(), subscription: external_exports.strictObject({ id: str, status: str, plan: str, interval: str, currency: str, currentPeriod: external_exports.strictObject({ startsAt: iso, endsAt: iso }), nextBilledAt: iso.optional(), graceEndsAt: iso.optional(), scheduledChange: data.optional() }).optional(), usage: data.optional(), checkout: external_exports.strictObject({ status: external_exports.enum(["pending", "unknown"]), transactionId: str.optional() }).optional(), checkoutAvailable: external_exports.boolean(), paddle: external_exports.strictObject({ environment: external_exports.enum(["sandbox", "production"]), clientToken: str }) });
-var executionReportSchema = external_exports.strictObject({ id: uuid3, appId: uuid3, actionName: str, actionVersion: external_exports.number().int().positive(), closureHash: hash2, purpose: external_exports.enum(["run", "verify"]), clientFamily: external_exports.enum(["cli", "discovery"]), agent, outcome: external_exports.enum(["caller-error", "credential-error", "rate-limit", "app-outage", "interface-error", "uncertain", "network-error", "success", "cancelled"]), diagnostic: external_exports.enum(["operation-unavailable", "response-contract", "proof-failed"]).optional(), httpStatus: external_exports.number().int().optional(), proof: external_exports.enum(["passed", "failed", "unavailable"]).optional(), semanticConfirmed: external_exports.boolean().optional(), connectionFingerprint: hash2.optional(), startedAt: iso, dispatchedAt: iso.optional(), finishedAt: iso });
+var executionReportSchema = external_exports.strictObject({ id: uuid3, receiptId: uuid3.optional(), appId: uuid3, actionName: str, actionVersion: external_exports.number().int().positive(), closureHash: hash2, purpose: external_exports.enum(["run", "verify"]), clientFamily: external_exports.enum(["cli", "discovery"]), agent, outcome: external_exports.enum(["caller-error", "credential-error", "rate-limit", "app-outage", "interface-error", "uncertain", "network-error", "success", "cancelled"]), diagnostic: external_exports.enum(["operation-unavailable", "response-contract", "proof-failed"]).optional(), httpStatus: external_exports.number().int().optional(), proof: external_exports.enum(["passed", "failed", "unavailable"]).optional(), semanticConfirmed: external_exports.boolean().optional(), connectionFingerprint: hash2.optional(), startedAt: iso, dispatchedAt: iso.optional(), finishedAt: iso });
 var sharedMeasure = { durationMs: external_exports.number().min(0).max(864e5).nullable(), tokens: external_exports.strictObject({ input: external_exports.number().min(0).max(1e8), output: external_exports.number().min(0).max(1e8) }).nullable(), coverage: external_exports.enum(["final", "partial", "unavailable"]), timeCoverage: external_exports.enum(["final", "partial", "unavailable"]), provider: external_exports.enum(["openai", "anthropic", "bedrock", "vertex", "custom"]).nullable(), model: external_exports.string().max(120).regex(/^[A-Za-z0-9._<>[\]:/@-]+$/).nullable() };
 var executionMeasurementSchema = external_exports.strictObject({ id: uuid3, executionId: uuid3, revision: external_exports.number().int().positive(), purpose: external_exports.enum(["productive", "discovery", "verification", "setup", "unknown"]), session: hash2.nullable(), worker: hash2.nullable(), ...sharedMeasure });
 var baselineSampleSchema = external_exports.strictObject({ id: uuid3, revision: external_exports.number().int().positive(), appId: uuid3, actionName: str.nullable(), executableHash: hash2.nullable(), method: external_exports.enum(["browser", "direct"]).nullable(), completeness: external_exports.enum(["complete", "prefix"]), occurredAt: iso, ...sharedMeasure });
@@ -129812,8 +129813,8 @@ var apiContracts = {
   getBundle: apiContract("GET", "/api/v1/apps/{app}/actions/{action}/bundle", "installation", actionPath, noQuery, noBody, bundle, ["session-limit", "action-withheld", "action-disabled", "action-denied", "action-unavailable"]),
   listResources: apiContract("GET", "/api/v1/apps/{app}/resources", "installation", path, external_exports.strictObject({ kind: resourceKindSchema.optional(), names: str.optional() }), noBody, page(external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive(), executableHash: hash2.optional(), updatedAt: iso }))),
   getResource: apiContract("GET", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation-or-cookie", resourcePath, external_exports.strictObject({ view: external_exports.literal("requirements").optional() }), noBody, external_exports.union([resourceRead, resourceRequirements])),
-  publishResource: apiContract("PUT", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation", resourcePath, noQuery, external_exports.union([external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive().nullable(), definition, verification: data.optional() }), external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive(), remove: external_exports.literal(true) })]), external_exports.strictObject({ resource: external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive() }), executableHash: hash2.optional(), closureHash: hash2.optional() }), ["definition-invalid", "documentation-incomplete", "reference-unresolved", "reference-cycle", "verification-incomplete", "verification-stale", "version-conflict"]),
-  listChanges: apiContract("GET", "/api/v1/apps/{app}/changes", "installation-or-cookie", path, external_exports.strictObject({ resource: str.optional(), ...pageQuery }), noBody, page(external_exports.strictObject({ change: external_exports.number().int().positive(), kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), event: external_exports.enum(["published", "removed"]), publishedAt: iso }))),
+  publishResource: apiContract("PUT", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation", resourcePath, noQuery, external_exports.union([external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive().nullable(), definition, verification: data.optional() }), external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive(), remove: external_exports.literal(true) })]), external_exports.strictObject({ resource: external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive() }), executableHash: hash2.optional(), closureHash: hash2.optional(), distribution: external_exports.strictObject({ state: external_exports.enum(["available", "testing", "queued", "paused"]), reason: str.optional(), until: iso.optional() }).optional() }), ["definition-invalid", "documentation-incomplete", "reference-unresolved", "reference-cycle", "verification-incomplete", "verification-stale", "version-conflict"]),
+  listChanges: apiContract("GET", "/api/v1/apps/{app}/changes", "installation-or-cookie", path, external_exports.strictObject({ resource: str.optional(), ...pageQuery }), noBody, page(external_exports.strictObject({ change: external_exports.number().int().positive(), kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), event: external_exports.enum(["published", "removed"]), distribution: external_exports.strictObject({ state: external_exports.enum(["available", "testing", "queued", "paused"]), reason: str.optional(), until: iso.optional() }).optional(), publishedAt: iso }))),
   safetyReview: apiContract("GET", "/api/v1/apps/{app}/safety-review", "cookie", path, noQuery, noBody, safetyReview),
   postExecutions: apiContract("POST", "/api/v1/executions", "installation", noParams, noQuery, external_exports.strictObject({ reports: external_exports.array(external_exports.unknown()).min(1).max(100) }), executionAcknowledgement),
   postMeasurements: apiContract("POST", "/api/v1/measurements", "installation", noParams, noQuery, external_exports.strictObject({ executions: external_exports.array(external_exports.unknown()).max(100), baselines: external_exports.array(external_exports.unknown()).max(100) }).refine((body) => body.executions.length + body.baselines.length >= 1 && body.executions.length + body.baselines.length <= 100), measurementAcknowledgement),
@@ -129895,6 +129896,7 @@ function createCliApi(baseUrl, fetcher = fetch, token, sessionId) {
   const transport = async (input2, init) => {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers);
+    headers.set("Apilift-Capabilities", "distributed-rollouts-v1");
     headers.set("Apilift-Client", `cli/${cliVersion}`);
     if (token) headers.set("Authorization", `Bearer ${token}`);
     if (sessionId) headers.set("Apilift-Session", sessionId);

package/dist/apilift-native-host.js

@@ -29360,6 +29360,7 @@ var errorCategoryByCode = {
   "release-state-conflict": "conflict",
   "action-withheld": "withheld",
   "publication-budget": "limit",
+  "publication-throttled": "limit",
   "session-limit": "limit",
   "client-upgrade-required": "upgrade",
   "backend-unavailable": "unavailable",
@@ -29584,12 +29585,12 @@ var me = external_exports.strictObject({ account: external_exports.strictObject(
 var setupStatus = external_exports.strictObject({ linkCode: external_exports.strictObject({ id: uuid3, agent: knownAgent.nullable(), status: external_exports.enum(["pending", "claimed", "expired"]), expiresAt: iso, installationId: uuid3.nullable() }).nullable(), installation: external_exports.strictObject({ id: uuid3, label: str, readiness, steps: data, agents: external_exports.array(knownAgent) }).nullable() });
 var actionSummary = external_exports.strictObject({ name: str, title: str, summary: external_exports.string(), effect: external_exports.enum(["read", "create", "update", "delete"]).optional(), availability: external_exports.enum(["executable", "unavailable"]), policy: external_exports.enum(["approve", "deny", "disable"]), health: data, documentation: data.optional() });
 var actionDocumentation = external_exports.strictObject({ name: str, title: str, description: external_exports.string(), effect: external_exports.enum(["read", "create", "update", "delete"]).optional(), availability: external_exports.enum(["executable", "unavailable"]), inputs: jsonSchema, output: jsonSchema.optional(), proof: external_exports.enum(["readback", "absence"]).optional(), unavailable: external_exports.strictObject({ reason: str, evidence: str }).optional(), transport: external_exports.strictObject({ name: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str })) }).optional(), version: external_exports.number().int().positive(), executableHash: hash3.optional(), policy: external_exports.enum(["approve", "deny", "disable"]), health: data });
-var bundle = external_exports.strictObject({ decision: external_exports.literal("allow"), app: external_exports.strictObject({ id: uuid3, slug: str, visibility: external_exports.enum(["public", "private"]) }), action: external_exports.strictObject({ name: str, effect: external_exports.enum(["read", "create", "update", "delete"]) }), closure: external_exports.strictObject({ hash: hash3, status: external_exports.enum(["pending", "validated"]), workspaceStatus: external_exports.literal("successful").nullable(), versions: external_exports.array(external_exports.strictObject({ kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), executableHash: hash3, definition })) }), selection: external_exports.strictObject({ channel: external_exports.enum(["latest", "validated"]), fallback: external_exports.boolean(), replaced: external_exports.strictObject({ closureHash: hash3, reason: str }).optional() }), policy: external_exports.literal("approve") });
+var bundle = external_exports.strictObject({ receipt: external_exports.strictObject({ id: uuid3, dispatchBefore: iso }).optional(), decision: external_exports.literal("allow"), app: external_exports.strictObject({ id: uuid3, slug: str, visibility: external_exports.enum(["public", "private"]) }), action: external_exports.strictObject({ name: str, effect: external_exports.enum(["read", "create", "update", "delete"]) }), closure: external_exports.strictObject({ hash: hash3, status: external_exports.enum(["pending", "validated"]), workspaceStatus: external_exports.literal("successful").nullable(), versions: external_exports.array(external_exports.strictObject({ kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), executableHash: hash3, definition })) }), selection: external_exports.strictObject({ channel: external_exports.enum(["latest", "validated"]), fallback: external_exports.boolean(), replaced: external_exports.strictObject({ closureHash: hash3, reason: str, until: iso.optional() }).optional() }), policy: external_exports.literal("approve") });
 var resourceRead = external_exports.strictObject({ ...kindName.shape, definition, version: external_exports.number().int().positive(), executableHash: hash3.optional(), verification: data.optional(), dependents: external_exports.array(kindName).optional() });
-var resourceRequirements = external_exports.strictObject({ name: str, title: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str, prefix: external_exports.string().optional() })) });
+var resourceRequirements = external_exports.strictObject({ legacyCredentialContract: str.optional(), credentialContract: str.optional(), destinations: external_exports.array(str).optional(), name: str, title: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str, prefix: external_exports.string().optional() })) });
 var safetyReview = external_exports.union([external_exports.strictObject({ access: external_exports.literal("locked") }), external_exports.strictObject({ access: external_exports.literal("included"), state: external_exports.enum(["missing", "checking", "ready", "unavailable"]), route: str, findings: data.optional(), checkedAt: iso.optional(), stale: external_exports.boolean().optional(), message: external_exports.string().optional() })]);
 var billing = external_exports.strictObject({ workspaceId: uuid3, paddleCustomerId: str.optional(), entitlement, trial: external_exports.strictObject({ status: external_exports.enum(["active", "ended", "converted"]), startedAt: iso, endsAt: iso, completedAt: iso.optional() }).optional(), subscription: external_exports.strictObject({ id: str, status: str, plan: str, interval: str, currency: str, currentPeriod: external_exports.strictObject({ startsAt: iso, endsAt: iso }), nextBilledAt: iso.optional(), graceEndsAt: iso.optional(), scheduledChange: data.optional() }).optional(), usage: data.optional(), checkout: external_exports.strictObject({ status: external_exports.enum(["pending", "unknown"]), transactionId: str.optional() }).optional(), checkoutAvailable: external_exports.boolean(), paddle: external_exports.strictObject({ environment: external_exports.enum(["sandbox", "production"]), clientToken: str }) });
-var executionReportSchema = external_exports.strictObject({ id: uuid3, appId: uuid3, actionName: str, actionVersion: external_exports.number().int().positive(), closureHash: hash3, purpose: external_exports.enum(["run", "verify"]), clientFamily: external_exports.enum(["cli", "discovery"]), agent, outcome: external_exports.enum(["caller-error", "credential-error", "rate-limit", "app-outage", "interface-error", "uncertain", "network-error", "success", "cancelled"]), diagnostic: external_exports.enum(["operation-unavailable", "response-contract", "proof-failed"]).optional(), httpStatus: external_exports.number().int().optional(), proof: external_exports.enum(["passed", "failed", "unavailable"]).optional(), semanticConfirmed: external_exports.boolean().optional(), connectionFingerprint: hash3.optional(), startedAt: iso, dispatchedAt: iso.optional(), finishedAt: iso });
+var executionReportSchema = external_exports.strictObject({ id: uuid3, receiptId: uuid3.optional(), appId: uuid3, actionName: str, actionVersion: external_exports.number().int().positive(), closureHash: hash3, purpose: external_exports.enum(["run", "verify"]), clientFamily: external_exports.enum(["cli", "discovery"]), agent, outcome: external_exports.enum(["caller-error", "credential-error", "rate-limit", "app-outage", "interface-error", "uncertain", "network-error", "success", "cancelled"]), diagnostic: external_exports.enum(["operation-unavailable", "response-contract", "proof-failed"]).optional(), httpStatus: external_exports.number().int().optional(), proof: external_exports.enum(["passed", "failed", "unavailable"]).optional(), semanticConfirmed: external_exports.boolean().optional(), connectionFingerprint: hash3.optional(), startedAt: iso, dispatchedAt: iso.optional(), finishedAt: iso });
 var sharedMeasure = { durationMs: external_exports.number().min(0).max(864e5).nullable(), tokens: external_exports.strictObject({ input: external_exports.number().min(0).max(1e8), output: external_exports.number().min(0).max(1e8) }).nullable(), coverage: external_exports.enum(["final", "partial", "unavailable"]), timeCoverage: external_exports.enum(["final", "partial", "unavailable"]), provider: external_exports.enum(["openai", "anthropic", "bedrock", "vertex", "custom"]).nullable(), model: external_exports.string().max(120).regex(/^[A-Za-z0-9._<>[\]:/@-]+$/).nullable() };
 var executionMeasurementSchema = external_exports.strictObject({ id: uuid3, executionId: uuid3, revision: external_exports.number().int().positive(), purpose: external_exports.enum(["productive", "discovery", "verification", "setup", "unknown"]), session: hash3.nullable(), worker: hash3.nullable(), ...sharedMeasure });
 var baselineSampleSchema = external_exports.strictObject({ id: uuid3, revision: external_exports.number().int().positive(), appId: uuid3, actionName: str.nullable(), executableHash: hash3.nullable(), method: external_exports.enum(["browser", "direct"]).nullable(), completeness: external_exports.enum(["complete", "prefix"]), occurredAt: iso, ...sharedMeasure });
@@ -29623,8 +29624,8 @@ var apiContracts = {
   getBundle: apiContract("GET", "/api/v1/apps/{app}/actions/{action}/bundle", "installation", actionPath, noQuery, noBody, bundle, ["session-limit", "action-withheld", "action-disabled", "action-denied", "action-unavailable"]),
   listResources: apiContract("GET", "/api/v1/apps/{app}/resources", "installation", path, external_exports.strictObject({ kind: resourceKindSchema.optional(), names: str.optional() }), noBody, page(external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive(), executableHash: hash3.optional(), updatedAt: iso }))),
   getResource: apiContract("GET", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation-or-cookie", resourcePath, external_exports.strictObject({ view: external_exports.literal("requirements").optional() }), noBody, external_exports.union([resourceRead, resourceRequirements])),
-  publishResource: apiContract("PUT", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation", resourcePath, noQuery, external_exports.union([external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive().nullable(), definition, verification: data.optional() }), external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive(), remove: external_exports.literal(true) })]), external_exports.strictObject({ resource: external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive() }), executableHash: hash3.optional(), closureHash: hash3.optional() }), ["definition-invalid", "documentation-incomplete", "reference-unresolved", "reference-cycle", "verification-incomplete", "verification-stale", "version-conflict"]),
-  listChanges: apiContract("GET", "/api/v1/apps/{app}/changes", "installation-or-cookie", path, external_exports.strictObject({ resource: str.optional(), ...pageQuery }), noBody, page(external_exports.strictObject({ change: external_exports.number().int().positive(), kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), event: external_exports.enum(["published", "removed"]), publishedAt: iso }))),
+  publishResource: apiContract("PUT", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation", resourcePath, noQuery, external_exports.union([external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive().nullable(), definition, verification: data.optional() }), external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive(), remove: external_exports.literal(true) })]), external_exports.strictObject({ resource: external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive() }), executableHash: hash3.optional(), closureHash: hash3.optional(), distribution: external_exports.strictObject({ state: external_exports.enum(["available", "testing", "queued", "paused"]), reason: str.optional(), until: iso.optional() }).optional() }), ["definition-invalid", "documentation-incomplete", "reference-unresolved", "reference-cycle", "verification-incomplete", "verification-stale", "version-conflict"]),
+  listChanges: apiContract("GET", "/api/v1/apps/{app}/changes", "installation-or-cookie", path, external_exports.strictObject({ resource: str.optional(), ...pageQuery }), noBody, page(external_exports.strictObject({ change: external_exports.number().int().positive(), kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), event: external_exports.enum(["published", "removed"]), distribution: external_exports.strictObject({ state: external_exports.enum(["available", "testing", "queued", "paused"]), reason: str.optional(), until: iso.optional() }).optional(), publishedAt: iso }))),
   safetyReview: apiContract("GET", "/api/v1/apps/{app}/safety-review", "cookie", path, noQuery, noBody, safetyReview),
   postExecutions: apiContract("POST", "/api/v1/executions", "installation", noParams, noQuery, external_exports.strictObject({ reports: external_exports.array(external_exports.unknown()).min(1).max(100) }), executionAcknowledgement),
   postMeasurements: apiContract("POST", "/api/v1/measurements", "installation", noParams, noQuery, external_exports.strictObject({ executions: external_exports.array(external_exports.unknown()).max(100), baselines: external_exports.array(external_exports.unknown()).max(100) }).refine((body) => body.executions.length + body.baselines.length >= 1 && body.executions.length + body.baselines.length <= 100), measurementAcknowledgement),
@@ -29702,6 +29703,7 @@ function createCliApi(baseUrl, fetcher = fetch, token, sessionId) {
   const transport = async (input2, init) => {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers);
+    headers.set("Apilift-Capabilities", "distributed-rollouts-v1");
     headers.set("Apilift-Client", `cli/${cliVersion}`);
     if (token) headers.set("Authorization", `Bearer ${token}`);
     if (sessionId) headers.set("Apilift-Session", sessionId);
@@ -30826,13 +30828,14 @@ var CredentialStore = class {
   constructor(root, vault) {
     this.vault = vault;
     this.state = new LocalState(root);
-    this.state.db.exec(`CREATE TABLE IF NOT EXISTS credential_draft (id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, app_id TEXT NOT NULL, transport_name TEXT NOT NULL, requirements_json TEXT NOT NULL, expires_at TEXT NOT NULL); CREATE TABLE IF NOT EXISTS credential_draft_source (id TEXT PRIMARY KEY, draft_id TEXT NOT NULL, session_id TEXT NOT NULL, fingerprint TEXT NOT NULL); CREATE TABLE IF NOT EXISTS credential_entry (id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, app_id TEXT NOT NULL, transport_name TEXT NOT NULL, name TEXT NOT NULL, name_fold TEXT NOT NULL, requirements_json TEXT NOT NULL, ciphertext BLOB NOT NULL, iv BLOB NOT NULL, tag BLOB NOT NULL, created_at TEXT NOT NULL, UNIQUE(app_id,transport_name,name_fold));`);
+    this.state.db.exec(`CREATE TABLE IF NOT EXISTS credential_scope (id TEXT PRIMARY KEY, contract TEXT NOT NULL); CREATE TABLE IF NOT EXISTS credential_draft (id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, app_id TEXT NOT NULL, transport_name TEXT NOT NULL, requirements_json TEXT NOT NULL, expires_at TEXT NOT NULL); CREATE TABLE IF NOT EXISTS credential_draft_source (id TEXT PRIMARY KEY, draft_id TEXT NOT NULL, session_id TEXT NOT NULL, fingerprint TEXT NOT NULL); CREATE TABLE IF NOT EXISTS credential_entry (id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, app_id TEXT NOT NULL, transport_name TEXT NOT NULL, name TEXT NOT NULL, name_fold TEXT NOT NULL, requirements_json TEXT NOT NULL, ciphertext BLOB NOT NULL, iv BLOB NOT NULL, tag BLOB NOT NULL, created_at TEXT NOT NULL, UNIQUE(app_id,transport_name,name_fold));`);
   }
   state;
   registerDraft(binding) {
     this.verify(binding);
     if (!Number.isFinite(Date.parse(binding.expiresAt)) || (Date.parse(binding.expiresAt) <= Date.now() || Date.parse(binding.expiresAt) > Date.now() + 30 * 6e4)) throw new CredentialError("draft-expired", "Credential draft has expired");
     this.state.db.prepare("INSERT INTO credential_draft (id,workspace_id,app_id,transport_name,requirements_json,expires_at) VALUES (?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET workspace_id=excluded.workspace_id,app_id=excluded.app_id,transport_name=excluded.transport_name,requirements_json=excluded.requirements_json,expires_at=excluded.expires_at").run(binding.draftId, binding.workspaceId, binding.appId, binding.transportName, JSON.stringify(binding.requirements), binding.expiresAt);
+    if (binding.credentialContract) this.state.db.prepare("INSERT OR REPLACE INTO credential_scope (id,contract) VALUES (?,?)").run(binding.draftId, binding.credentialContract);
     if (binding.source) this.state.db.prepare("INSERT INTO credential_draft_source (id,draft_id,session_id,fingerprint) VALUES (?,?,?,?) ON CONFLICT(id) DO UPDATE SET draft_id=excluded.draft_id,session_id=excluded.session_id,fingerprint=excluded.fingerprint").run(binding.draftId, binding.source.draftId, binding.source.sessionId, binding.source.fingerprint);
   }
   resolveDraft(binding) {
@@ -30854,7 +30857,10 @@ var CredentialStore = class {
     }
     const requirements = JSON.parse(row.requirements_json);
     if (!sameRequirements(requirements, binding.requirements)) throw new CredentialError("requirements-mismatch", "Credential requirements changed. Ask the agent for a new link");
-    return { ...binding, requirements };
+    const scope2 = this.state.db.prepare("SELECT contract FROM credential_scope WHERE id=?").get(binding.draftId);
+    const contract = scope2?.contract;
+    const destinations = contract ? JSON.parse(contract).origins : void 0;
+    return { ...binding, requirements, ...contract ? { credentialContract: contract, destinations } : {} };
   }
   verify(binding) {
     if (this.state.installation()?.workspaceId !== binding.workspaceId) throw new CredentialError("workspace-mismatch", "Credential workspace does not match this installation");
@@ -30868,7 +30874,7 @@ var CredentialStore = class {
   }
   async put(binding) {
     if (binding.draftId) {
-      this.resolveDraft(binding);
+      binding = { ...binding, ...this.resolveDraft(binding) };
       const source = this.state.db.prepare("SELECT session_id FROM credential_draft_source WHERE id=?").get(binding.draftId);
       if (source && binding.sessionId !== source.session_id) throw new CredentialError("session-mismatch", "Credential setup belongs to another requesting agent session");
     }
@@ -30885,6 +30891,7 @@ var CredentialStore = class {
       this.state.db.exec("BEGIN EXCLUSIVE");
       if (binding.draftId) this.resolveDraft(binding);
       this.state.db.prepare("INSERT INTO credential_entry (id,workspace_id,app_id,transport_name,name,name_fold,requirements_json,ciphertext,iv,tag,created_at) VALUES (?,?,?,?,?,?,?,?,?,?,?)").run(id2, binding.workspaceId, binding.appId, binding.transportName, name, name.toLocaleLowerCase(), JSON.stringify(binding.requirements), ciphertext, iv, tag, (/* @__PURE__ */ new Date()).toISOString());
+      if (binding.credentialContract) this.state.db.prepare("INSERT INTO credential_scope (id,contract) VALUES (?,?)").run(id2, binding.credentialContract);
       if (binding.sessionId) {
         const current = this.state.useSession(binding.sessionId, binding.appId);
         this.state.saveUseSession({ agentSessionId: binding.sessionId, appId: binding.appId, context: current?.credentials[binding.transportName] === id2 ? current.context : {}, credentials: { ...current?.credentials, [binding.transportName]: id2 } });
@@ -30928,6 +30935,7 @@ var CredentialStore = class {
     if (!sameRequirements(entry2.requirements, binding.requirements)) throw new CredentialError("credential-incompatible", "Saved credential fields do not match the selected transport");
     try {
       this.state.db.prepare("UPDATE credential_entry SET app_id=?,transport_name=? WHERE id=? AND workspace_id=?").run(binding.appId, binding.transportName, id2, binding.workspaceId);
+      if (binding.credentialContract) this.state.db.prepare("INSERT OR REPLACE INTO credential_scope (id,contract) VALUES (?,?)").run(id2, binding.credentialContract);
     } catch (error62) {
       if (error62 instanceof Error && /UNIQUE constraint/.test(error62.message)) throw new CredentialError("credential-label-exists", "A credential with this label already exists for this app and transport");
       throw error62;
@@ -30940,8 +30948,16 @@ var CredentialStore = class {
     if (!row) throw new CredentialError("credential-missing", "Credential entry does not belong to this app and transport");
     const stored = JSON.parse(row.requirements_json);
     if (!sameRequirements(stored, binding.requirements)) throw new CredentialError("credential-requirements-changed", "Credential requirements changed; configure the entry again");
+    let scope2 = this.state.db.prepare("SELECT contract FROM credential_scope WHERE id=?").get(id2);
+    if (!scope2 && binding.credentialContract && binding.legacyCredentialContract === binding.credentialContract) {
+      this.state.db.prepare("INSERT OR IGNORE INTO credential_scope (id,contract) VALUES (?,?)").run(id2, binding.credentialContract);
+      scope2 = this.state.db.prepare("SELECT contract FROM credential_scope WHERE id=?").get(id2);
+    }
+    if (scope2?.contract !== binding.credentialContract) throw new CredentialError("credential-destination-changed", "The saved credential is not bound to this destination and injection contract; complete connection setup");
     const key = Buffer.from(await this.vault.get(id2), "base64");
     if (binding.draftId) this.resolveDraft(binding);
+    const stillBound = this.state.db.prepare("SELECT s.contract FROM credential_entry e LEFT JOIN credential_scope s ON s.id=e.id WHERE e.id=? AND e.workspace_id=? AND e.app_id=? AND e.transport_name=?").get(id2, binding.workspaceId, binding.appId, binding.transportName);
+    if (!stillBound || (stillBound.contract ?? void 0) !== binding.credentialContract) throw new CredentialError("credential-binding-changed", "The selected credential changed while the vault was opening; complete connection setup");
     if (key.length !== 32) throw new CredentialError("vault-key-invalid", "Credential vault key is invalid");
     const decipher = createDecipheriv("aes-256-gcm", key, row.iv);
     decipher.setAuthTag(row.tag);
@@ -30966,6 +30982,7 @@ var CredentialStore = class {
     if (!row) throw new CredentialError("credential-missing", "Credential entry was not found");
     await this.vault.delete(binding.credentialId);
     this.state.db.prepare("DELETE FROM credential_entry WHERE id=?").run(binding.credentialId);
+    this.state.db.prepare("DELETE FROM credential_scope WHERE id=?").run(binding.credentialId);
     const sessions = this.state.db.prepare("SELECT agent_session_id,context_json,credentials_json FROM use_session WHERE app_id=?").all(binding.appId);
     for (const session of sessions) {
       const credentials = JSON.parse(session.credentials_json);
@@ -31337,7 +31354,7 @@ var NativeHost = class {
     const api = createCliApi(this.options.siteUrl, this.options.fetcher ?? fetch, installation.token);
     const resource = await api.call("getResource", { params: { app: payload.appId, kind: "transport", name: payload.transportName }, query: { view: "requirements" } });
     if (!("credentials" in resource)) throw Object.assign(new Error("Transport requirements are unavailable"), { code: "requirements-unavailable" });
-    return { ...payload, requirements: resource.credentials };
+    return { ...payload, requirements: resource.credentials, credentialContract: resource.credentialContract, legacyCredentialContract: resource.legacyCredentialContract, destinations: resource.destinations };
   }
   admit(value) {
     if (this.stopped) return;
@@ -31430,13 +31447,20 @@ var NativeHost = class {
     return result;
   }
   async dispatchJob(envelope) {
+    const checkAuthorization = () => {
+      if (envelope.authorization && (!Number.isFinite(Date.parse(envelope.authorization.dispatchBefore)) || Date.now() > Date.parse(envelope.authorization.dispatchBefore))) throw Object.assign(new Error("Execution authorization expired before native dispatch"), { code: "execution-authorization-expired" });
+    };
+    checkAuthorization();
     const job = nativeJobSchema.parse(envelope.job);
     if (!envelope.credentialRef) return job;
     if (job.kind !== "replay") throw Object.assign(new Error("Credentials can be injected only into replay jobs"), { code: "credential-job-invalid" });
     const installation = this.state.installation();
     if (!installation) throw Object.assign(new Error("Installation is no longer linked"), { code: "installation-required" });
     const binding = await this.resolveBinding({ workspaceId: installation.workspaceId, ...envelope.credentialRef.draftId ? { draftId: envelope.credentialRef.draftId } : {}, appId: envelope.credentialRef.appId, appTitle: envelope.credentialRef.appId, transportName: envelope.credentialRef.transportName, requirements: envelope.credentialRef.requirements });
+    checkAuthorization();
+    if (binding.destinations && !binding.destinations.includes(new URL(job.url).origin)) throw Object.assign(new Error("Credential destination is outside the saved connection contract"), { code: "credential-destination-changed" });
     const values = await this.credentials.read(envelope.credentialRef.credentialId, binding);
+    checkAuthorization();
     const headers = { ...job.headers };
     const credentialHeaderNames = [];
     for (const requirement2 of binding.requirements) {

package/dist/apilift-session-audit.js

@@ -161380,6 +161380,7 @@ var errorCategoryByCode = {
   "release-state-conflict": "conflict",
   "action-withheld": "withheld",
   "publication-budget": "limit",
+  "publication-throttled": "limit",
   "session-limit": "limit",
   "client-upgrade-required": "upgrade",
   "backend-unavailable": "unavailable",
@@ -161604,12 +161605,12 @@ var me2 = external_exports.strictObject({ account: external_exports.strictObject
 var setupStatus = external_exports.strictObject({ linkCode: external_exports.strictObject({ id: uuid3, agent: knownAgent.nullable(), status: external_exports.enum(["pending", "claimed", "expired"]), expiresAt: iso, installationId: uuid3.nullable() }).nullable(), installation: external_exports.strictObject({ id: uuid3, label: str, readiness, steps: data, agents: external_exports.array(knownAgent) }).nullable() });
 var actionSummary = external_exports.strictObject({ name: str, title: str, summary: external_exports.string(), effect: external_exports.enum(["read", "create", "update", "delete"]).optional(), availability: external_exports.enum(["executable", "unavailable"]), policy: external_exports.enum(["approve", "deny", "disable"]), health: data, documentation: data.optional() });
 var actionDocumentation = external_exports.strictObject({ name: str, title: str, description: external_exports.string(), effect: external_exports.enum(["read", "create", "update", "delete"]).optional(), availability: external_exports.enum(["executable", "unavailable"]), inputs: jsonSchema, output: jsonSchema.optional(), proof: external_exports.enum(["readback", "absence"]).optional(), unavailable: external_exports.strictObject({ reason: str, evidence: str }).optional(), transport: external_exports.strictObject({ name: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str })) }).optional(), version: external_exports.number().int().positive(), executableHash: hash2.optional(), policy: external_exports.enum(["approve", "deny", "disable"]), health: data });
-var bundle = external_exports.strictObject({ decision: external_exports.literal("allow"), app: external_exports.strictObject({ id: uuid3, slug: str, visibility: external_exports.enum(["public", "private"]) }), action: external_exports.strictObject({ name: str, effect: external_exports.enum(["read", "create", "update", "delete"]) }), closure: external_exports.strictObject({ hash: hash2, status: external_exports.enum(["pending", "validated"]), workspaceStatus: external_exports.literal("successful").nullable(), versions: external_exports.array(external_exports.strictObject({ kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), executableHash: hash2, definition })) }), selection: external_exports.strictObject({ channel: external_exports.enum(["latest", "validated"]), fallback: external_exports.boolean(), replaced: external_exports.strictObject({ closureHash: hash2, reason: str }).optional() }), policy: external_exports.literal("approve") });
+var bundle = external_exports.strictObject({ receipt: external_exports.strictObject({ id: uuid3, dispatchBefore: iso }).optional(), decision: external_exports.literal("allow"), app: external_exports.strictObject({ id: uuid3, slug: str, visibility: external_exports.enum(["public", "private"]) }), action: external_exports.strictObject({ name: str, effect: external_exports.enum(["read", "create", "update", "delete"]) }), closure: external_exports.strictObject({ hash: hash2, status: external_exports.enum(["pending", "validated"]), workspaceStatus: external_exports.literal("successful").nullable(), versions: external_exports.array(external_exports.strictObject({ kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), executableHash: hash2, definition })) }), selection: external_exports.strictObject({ channel: external_exports.enum(["latest", "validated"]), fallback: external_exports.boolean(), replaced: external_exports.strictObject({ closureHash: hash2, reason: str, until: iso.optional() }).optional() }), policy: external_exports.literal("approve") });
 var resourceRead = external_exports.strictObject({ ...kindName.shape, definition, version: external_exports.number().int().positive(), executableHash: hash2.optional(), verification: data.optional(), dependents: external_exports.array(kindName).optional() });
-var resourceRequirements = external_exports.strictObject({ name: str, title: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str, prefix: external_exports.string().optional() })) });
+var resourceRequirements = external_exports.strictObject({ legacyCredentialContract: str.optional(), credentialContract: str.optional(), destinations: external_exports.array(str).optional(), name: str, title: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str, prefix: external_exports.string().optional() })) });
 var safetyReview = external_exports.union([external_exports.strictObject({ access: external_exports.literal("locked") }), external_exports.strictObject({ access: external_exports.literal("included"), state: external_exports.enum(["missing", "checking", "ready", "unavailable"]), route: str, findings: data.optional(), checkedAt: iso.optional(), stale: external_exports.boolean().optional(), message: external_exports.string().optional() })]);
 var billing = external_exports.strictObject({ workspaceId: uuid3, paddleCustomerId: str.optional(), entitlement, trial: external_exports.strictObject({ status: external_exports.enum(["active", "ended", "converted"]), startedAt: iso, endsAt: iso, completedAt: iso.optional() }).optional(), subscription: external_exports.strictObject({ id: str, status: str, plan: str, interval: str, currency: str, currentPeriod: external_exports.strictObject({ startsAt: iso, endsAt: iso }), nextBilledAt: iso.optional(), graceEndsAt: iso.optional(), scheduledChange: data.optional() }).optional(), usage: data.optional(), checkout: external_exports.strictObject({ status: external_exports.enum(["pending", "unknown"]), transactionId: str.optional() }).optional(), checkoutAvailable: external_exports.boolean(), paddle: external_exports.strictObject({ environment: external_exports.enum(["sandbox", "production"]), clientToken: str }) });
-var executionReportSchema = external_exports.strictObject({ id: uuid3, appId: uuid3, actionName: str, actionVersion: external_exports.number().int().positive(), closureHash: hash2, purpose: external_exports.enum(["run", "verify"]), clientFamily: external_exports.enum(["cli", "discovery"]), agent, outcome: external_exports.enum(["caller-error", "credential-error", "rate-limit", "app-outage", "interface-error", "uncertain", "network-error", "success", "cancelled"]), diagnostic: external_exports.enum(["operation-unavailable", "response-contract", "proof-failed"]).optional(), httpStatus: external_exports.number().int().optional(), proof: external_exports.enum(["passed", "failed", "unavailable"]).optional(), semanticConfirmed: external_exports.boolean().optional(), connectionFingerprint: hash2.optional(), startedAt: iso, dispatchedAt: iso.optional(), finishedAt: iso });
+var executionReportSchema = external_exports.strictObject({ id: uuid3, receiptId: uuid3.optional(), appId: uuid3, actionName: str, actionVersion: external_exports.number().int().positive(), closureHash: hash2, purpose: external_exports.enum(["run", "verify"]), clientFamily: external_exports.enum(["cli", "discovery"]), agent, outcome: external_exports.enum(["caller-error", "credential-error", "rate-limit", "app-outage", "interface-error", "uncertain", "network-error", "success", "cancelled"]), diagnostic: external_exports.enum(["operation-unavailable", "response-contract", "proof-failed"]).optional(), httpStatus: external_exports.number().int().optional(), proof: external_exports.enum(["passed", "failed", "unavailable"]).optional(), semanticConfirmed: external_exports.boolean().optional(), connectionFingerprint: hash2.optional(), startedAt: iso, dispatchedAt: iso.optional(), finishedAt: iso });
 var sharedMeasure = { durationMs: external_exports.number().min(0).max(864e5).nullable(), tokens: external_exports.strictObject({ input: external_exports.number().min(0).max(1e8), output: external_exports.number().min(0).max(1e8) }).nullable(), coverage: external_exports.enum(["final", "partial", "unavailable"]), timeCoverage: external_exports.enum(["final", "partial", "unavailable"]), provider: external_exports.enum(["openai", "anthropic", "bedrock", "vertex", "custom"]).nullable(), model: external_exports.string().max(120).regex(/^[A-Za-z0-9._<>[\]:/@-]+$/).nullable() };
 var executionMeasurementSchema = external_exports.strictObject({ id: uuid3, executionId: uuid3, revision: external_exports.number().int().positive(), purpose: external_exports.enum(["productive", "discovery", "verification", "setup", "unknown"]), session: hash2.nullable(), worker: hash2.nullable(), ...sharedMeasure });
 var baselineSampleSchema = external_exports.strictObject({ id: uuid3, revision: external_exports.number().int().positive(), appId: uuid3, actionName: str.nullable(), executableHash: hash2.nullable(), method: external_exports.enum(["browser", "direct"]).nullable(), completeness: external_exports.enum(["complete", "prefix"]), occurredAt: iso, ...sharedMeasure });
@@ -161643,8 +161644,8 @@ var apiContracts = {
   getBundle: apiContract("GET", "/api/v1/apps/{app}/actions/{action}/bundle", "installation", actionPath, noQuery, noBody, bundle, ["session-limit", "action-withheld", "action-disabled", "action-denied", "action-unavailable"]),
   listResources: apiContract("GET", "/api/v1/apps/{app}/resources", "installation", path, external_exports.strictObject({ kind: resourceKindSchema.optional(), names: str.optional() }), noBody, page(external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive(), executableHash: hash2.optional(), updatedAt: iso }))),
   getResource: apiContract("GET", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation-or-cookie", resourcePath, external_exports.strictObject({ view: external_exports.literal("requirements").optional() }), noBody, external_exports.union([resourceRead, resourceRequirements])),
-  publishResource: apiContract("PUT", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation", resourcePath, noQuery, external_exports.union([external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive().nullable(), definition, verification: data.optional() }), external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive(), remove: external_exports.literal(true) })]), external_exports.strictObject({ resource: external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive() }), executableHash: hash2.optional(), closureHash: hash2.optional() }), ["definition-invalid", "documentation-incomplete", "reference-unresolved", "reference-cycle", "verification-incomplete", "verification-stale", "version-conflict"]),
-  listChanges: apiContract("GET", "/api/v1/apps/{app}/changes", "installation-or-cookie", path, external_exports.strictObject({ resource: str.optional(), ...pageQuery }), noBody, page(external_exports.strictObject({ change: external_exports.number().int().positive(), kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), event: external_exports.enum(["published", "removed"]), publishedAt: iso }))),
+  publishResource: apiContract("PUT", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation", resourcePath, noQuery, external_exports.union([external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive().nullable(), definition, verification: data.optional() }), external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive(), remove: external_exports.literal(true) })]), external_exports.strictObject({ resource: external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive() }), executableHash: hash2.optional(), closureHash: hash2.optional(), distribution: external_exports.strictObject({ state: external_exports.enum(["available", "testing", "queued", "paused"]), reason: str.optional(), until: iso.optional() }).optional() }), ["definition-invalid", "documentation-incomplete", "reference-unresolved", "reference-cycle", "verification-incomplete", "verification-stale", "version-conflict"]),
+  listChanges: apiContract("GET", "/api/v1/apps/{app}/changes", "installation-or-cookie", path, external_exports.strictObject({ resource: str.optional(), ...pageQuery }), noBody, page(external_exports.strictObject({ change: external_exports.number().int().positive(), kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), event: external_exports.enum(["published", "removed"]), distribution: external_exports.strictObject({ state: external_exports.enum(["available", "testing", "queued", "paused"]), reason: str.optional(), until: iso.optional() }).optional(), publishedAt: iso }))),
   safetyReview: apiContract("GET", "/api/v1/apps/{app}/safety-review", "cookie", path, noQuery, noBody, safetyReview),
   postExecutions: apiContract("POST", "/api/v1/executions", "installation", noParams, noQuery, external_exports.strictObject({ reports: external_exports.array(external_exports.unknown()).min(1).max(100) }), executionAcknowledgement),
   postMeasurements: apiContract("POST", "/api/v1/measurements", "installation", noParams, noQuery, external_exports.strictObject({ executions: external_exports.array(external_exports.unknown()).max(100), baselines: external_exports.array(external_exports.unknown()).max(100) }).refine((body) => body.executions.length + body.baselines.length >= 1 && body.executions.length + body.baselines.length <= 100), measurementAcknowledgement),

package/dist/apilift.js

@@ -20447,6 +20447,7 @@ var init_errors3 = __esm({
       "release-state-conflict": "conflict",
       "action-withheld": "withheld",
       "publication-budget": "limit",
+      "publication-throttled": "limit",
       "session-limit": "limit",
       "client-upgrade-required": "upgrade",
       "backend-unavailable": "unavailable",
@@ -28133,6 +28134,17 @@ var init_categories = __esm({
   }
 });
 
+// ../../packages/core/dist/definitions/credential-contract.js
+function credentialContractKey(transport) {
+  return canonicalJson({ mode: transport.mode, origins: [...transport.allowedOrigins].sort(), baseOrigin: transport.baseUrl ? new URL(transport.baseUrl).origin : null, browserContext: transport.browserContext ?? null, credentials: [...transport.credentials ?? []].sort((a, b) => a.name.localeCompare(b.name)), inject: transport.inject ?? [] });
+}
+var init_credential_contract = __esm({
+  "../../packages/core/dist/definitions/credential-contract.js"() {
+    "use strict";
+    init_json();
+  }
+});
+
 // ../../packages/core/dist/definitions/index.js
 var init_definitions = __esm({
   "../../packages/core/dist/definitions/index.js"() {
@@ -28141,6 +28153,7 @@ var init_definitions = __esm({
     init_rules();
     init_analysis();
     init_categories();
+    init_credential_contract();
   }
 });
 
@@ -28185,12 +28198,12 @@ var init_contracts = __esm({
     setupStatus = external_exports.strictObject({ linkCode: external_exports.strictObject({ id: uuid3, agent: knownAgent.nullable(), status: external_exports.enum(["pending", "claimed", "expired"]), expiresAt: iso, installationId: uuid3.nullable() }).nullable(), installation: external_exports.strictObject({ id: uuid3, label: str, readiness, steps: data, agents: external_exports.array(knownAgent) }).nullable() });
     actionSummary = external_exports.strictObject({ name: str, title: str, summary: external_exports.string(), effect: external_exports.enum(["read", "create", "update", "delete"]).optional(), availability: external_exports.enum(["executable", "unavailable"]), policy: external_exports.enum(["approve", "deny", "disable"]), health: data, documentation: data.optional() });
     actionDocumentation = external_exports.strictObject({ name: str, title: str, description: external_exports.string(), effect: external_exports.enum(["read", "create", "update", "delete"]).optional(), availability: external_exports.enum(["executable", "unavailable"]), inputs: jsonSchema, output: jsonSchema.optional(), proof: external_exports.enum(["readback", "absence"]).optional(), unavailable: external_exports.strictObject({ reason: str, evidence: str }).optional(), transport: external_exports.strictObject({ name: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str })) }).optional(), version: external_exports.number().int().positive(), executableHash: hash2.optional(), policy: external_exports.enum(["approve", "deny", "disable"]), health: data });
-    bundle = external_exports.strictObject({ decision: external_exports.literal("allow"), app: external_exports.strictObject({ id: uuid3, slug: str, visibility: external_exports.enum(["public", "private"]) }), action: external_exports.strictObject({ name: str, effect: external_exports.enum(["read", "create", "update", "delete"]) }), closure: external_exports.strictObject({ hash: hash2, status: external_exports.enum(["pending", "validated"]), workspaceStatus: external_exports.literal("successful").nullable(), versions: external_exports.array(external_exports.strictObject({ kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), executableHash: hash2, definition })) }), selection: external_exports.strictObject({ channel: external_exports.enum(["latest", "validated"]), fallback: external_exports.boolean(), replaced: external_exports.strictObject({ closureHash: hash2, reason: str }).optional() }), policy: external_exports.literal("approve") });
+    bundle = external_exports.strictObject({ receipt: external_exports.strictObject({ id: uuid3, dispatchBefore: iso }).optional(), decision: external_exports.literal("allow"), app: external_exports.strictObject({ id: uuid3, slug: str, visibility: external_exports.enum(["public", "private"]) }), action: external_exports.strictObject({ name: str, effect: external_exports.enum(["read", "create", "update", "delete"]) }), closure: external_exports.strictObject({ hash: hash2, status: external_exports.enum(["pending", "validated"]), workspaceStatus: external_exports.literal("successful").nullable(), versions: external_exports.array(external_exports.strictObject({ kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), executableHash: hash2, definition })) }), selection: external_exports.strictObject({ channel: external_exports.enum(["latest", "validated"]), fallback: external_exports.boolean(), replaced: external_exports.strictObject({ closureHash: hash2, reason: str, until: iso.optional() }).optional() }), policy: external_exports.literal("approve") });
     resourceRead = external_exports.strictObject({ ...kindName.shape, definition, version: external_exports.number().int().positive(), executableHash: hash2.optional(), verification: data.optional(), dependents: external_exports.array(kindName).optional() });
-    resourceRequirements = external_exports.strictObject({ name: str, title: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str, prefix: external_exports.string().optional() })) });
+    resourceRequirements = external_exports.strictObject({ legacyCredentialContract: str.optional(), credentialContract: str.optional(), destinations: external_exports.array(str).optional(), name: str, title: str, mode: external_exports.enum(["direct", "browser"]), instructions: str, credentials: external_exports.array(external_exports.strictObject({ name: str, header: str, prefix: external_exports.string().optional() })) });
     safetyReview = external_exports.union([external_exports.strictObject({ access: external_exports.literal("locked") }), external_exports.strictObject({ access: external_exports.literal("included"), state: external_exports.enum(["missing", "checking", "ready", "unavailable"]), route: str, findings: data.optional(), checkedAt: iso.optional(), stale: external_exports.boolean().optional(), message: external_exports.string().optional() })]);
     billing = external_exports.strictObject({ workspaceId: uuid3, paddleCustomerId: str.optional(), entitlement, trial: external_exports.strictObject({ status: external_exports.enum(["active", "ended", "converted"]), startedAt: iso, endsAt: iso, completedAt: iso.optional() }).optional(), subscription: external_exports.strictObject({ id: str, status: str, plan: str, interval: str, currency: str, currentPeriod: external_exports.strictObject({ startsAt: iso, endsAt: iso }), nextBilledAt: iso.optional(), graceEndsAt: iso.optional(), scheduledChange: data.optional() }).optional(), usage: data.optional(), checkout: external_exports.strictObject({ status: external_exports.enum(["pending", "unknown"]), transactionId: str.optional() }).optional(), checkoutAvailable: external_exports.boolean(), paddle: external_exports.strictObject({ environment: external_exports.enum(["sandbox", "production"]), clientToken: str }) });
-    executionReportSchema = external_exports.strictObject({ id: uuid3, appId: uuid3, actionName: str, actionVersion: external_exports.number().int().positive(), closureHash: hash2, purpose: external_exports.enum(["run", "verify"]), clientFamily: external_exports.enum(["cli", "discovery"]), agent, outcome: external_exports.enum(["caller-error", "credential-error", "rate-limit", "app-outage", "interface-error", "uncertain", "network-error", "success", "cancelled"]), diagnostic: external_exports.enum(["operation-unavailable", "response-contract", "proof-failed"]).optional(), httpStatus: external_exports.number().int().optional(), proof: external_exports.enum(["passed", "failed", "unavailable"]).optional(), semanticConfirmed: external_exports.boolean().optional(), connectionFingerprint: hash2.optional(), startedAt: iso, dispatchedAt: iso.optional(), finishedAt: iso });
+    executionReportSchema = external_exports.strictObject({ id: uuid3, receiptId: uuid3.optional(), appId: uuid3, actionName: str, actionVersion: external_exports.number().int().positive(), closureHash: hash2, purpose: external_exports.enum(["run", "verify"]), clientFamily: external_exports.enum(["cli", "discovery"]), agent, outcome: external_exports.enum(["caller-error", "credential-error", "rate-limit", "app-outage", "interface-error", "uncertain", "network-error", "success", "cancelled"]), diagnostic: external_exports.enum(["operation-unavailable", "response-contract", "proof-failed"]).optional(), httpStatus: external_exports.number().int().optional(), proof: external_exports.enum(["passed", "failed", "unavailable"]).optional(), semanticConfirmed: external_exports.boolean().optional(), connectionFingerprint: hash2.optional(), startedAt: iso, dispatchedAt: iso.optional(), finishedAt: iso });
     sharedMeasure = { durationMs: external_exports.number().min(0).max(864e5).nullable(), tokens: external_exports.strictObject({ input: external_exports.number().min(0).max(1e8), output: external_exports.number().min(0).max(1e8) }).nullable(), coverage: external_exports.enum(["final", "partial", "unavailable"]), timeCoverage: external_exports.enum(["final", "partial", "unavailable"]), provider: external_exports.enum(["openai", "anthropic", "bedrock", "vertex", "custom"]).nullable(), model: external_exports.string().max(120).regex(/^[A-Za-z0-9._<>[\]:/@-]+$/).nullable() };
     executionMeasurementSchema = external_exports.strictObject({ id: uuid3, executionId: uuid3, revision: external_exports.number().int().positive(), purpose: external_exports.enum(["productive", "discovery", "verification", "setup", "unknown"]), session: hash2.nullable(), worker: hash2.nullable(), ...sharedMeasure });
     baselineSampleSchema = external_exports.strictObject({ id: uuid3, revision: external_exports.number().int().positive(), appId: uuid3, actionName: str.nullable(), executableHash: hash2.nullable(), method: external_exports.enum(["browser", "direct"]).nullable(), completeness: external_exports.enum(["complete", "prefix"]), occurredAt: iso, ...sharedMeasure });
@@ -28216,8 +28229,8 @@ var init_contracts = __esm({
       getBundle: apiContract("GET", "/api/v1/apps/{app}/actions/{action}/bundle", "installation", actionPath, noQuery, noBody, bundle, ["session-limit", "action-withheld", "action-disabled", "action-denied", "action-unavailable"]),
       listResources: apiContract("GET", "/api/v1/apps/{app}/resources", "installation", path, external_exports.strictObject({ kind: resourceKindSchema.optional(), names: str.optional() }), noBody, page(external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive(), executableHash: hash2.optional(), updatedAt: iso }))),
       getResource: apiContract("GET", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation-or-cookie", resourcePath, external_exports.strictObject({ view: external_exports.literal("requirements").optional() }), noBody, external_exports.union([resourceRead, resourceRequirements])),
-      publishResource: apiContract("PUT", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation", resourcePath, noQuery, external_exports.union([external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive().nullable(), definition, verification: data.optional() }), external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive(), remove: external_exports.literal(true) })]), external_exports.strictObject({ resource: external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive() }), executableHash: hash2.optional(), closureHash: hash2.optional() }), ["definition-invalid", "documentation-incomplete", "reference-unresolved", "reference-cycle", "verification-incomplete", "verification-stale", "version-conflict"]),
-      listChanges: apiContract("GET", "/api/v1/apps/{app}/changes", "installation-or-cookie", path, external_exports.strictObject({ resource: str.optional(), ...pageQuery }), noBody, page(external_exports.strictObject({ change: external_exports.number().int().positive(), kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), event: external_exports.enum(["published", "removed"]), publishedAt: iso }))),
+      publishResource: apiContract("PUT", "/api/v1/apps/{app}/resources/{kind}/{name}", "installation", resourcePath, noQuery, external_exports.union([external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive().nullable(), definition, verification: data.optional() }), external_exports.strictObject({ requestId: uuid3, expectedVersion: external_exports.number().int().positive(), remove: external_exports.literal(true) })]), external_exports.strictObject({ resource: external_exports.strictObject({ ...kindName.shape, version: external_exports.number().int().positive() }), executableHash: hash2.optional(), closureHash: hash2.optional(), distribution: external_exports.strictObject({ state: external_exports.enum(["available", "testing", "queued", "paused"]), reason: str.optional(), until: iso.optional() }).optional() }), ["definition-invalid", "documentation-incomplete", "reference-unresolved", "reference-cycle", "verification-incomplete", "verification-stale", "version-conflict"]),
+      listChanges: apiContract("GET", "/api/v1/apps/{app}/changes", "installation-or-cookie", path, external_exports.strictObject({ resource: str.optional(), ...pageQuery }), noBody, page(external_exports.strictObject({ change: external_exports.number().int().positive(), kind: resourceKindSchema, name: str, version: external_exports.number().int().positive(), event: external_exports.enum(["published", "removed"]), distribution: external_exports.strictObject({ state: external_exports.enum(["available", "testing", "queued", "paused"]), reason: str.optional(), until: iso.optional() }).optional(), publishedAt: iso }))),
       safetyReview: apiContract("GET", "/api/v1/apps/{app}/safety-review", "cookie", path, noQuery, noBody, safetyReview),
       postExecutions: apiContract("POST", "/api/v1/executions", "installation", noParams, noQuery, external_exports.strictObject({ reports: external_exports.array(external_exports.unknown()).min(1).max(100) }), executionAcknowledgement),
       postMeasurements: apiContract("POST", "/api/v1/measurements", "installation", noParams, noQuery, external_exports.strictObject({ executions: external_exports.array(external_exports.unknown()).max(100), baselines: external_exports.array(external_exports.unknown()).max(100) }).refine((body) => body.executions.length + body.baselines.length >= 1 && body.executions.length + body.baselines.length <= 100), measurementAcknowledgement),
@@ -28312,6 +28325,7 @@ function createCliApi(baseUrl, fetcher = fetch, token, sessionId) {
   const transport = async (input2, init) => {
     const method = init?.method ?? "GET";
     const headers = new Headers(init?.headers);
+    headers.set("Apilift-Capabilities", "distributed-rollouts-v1");
     headers.set("Apilift-Client", `cli/${cliVersion}`);
     if (token) headers.set("Authorization", `Bearer ${token}`);
     if (sessionId) headers.set("Apilift-Session", sessionId);
@@ -31136,13 +31150,14 @@ var init_credentials = __esm({
       constructor(root, vault) {
         this.vault = vault;
         this.state = new LocalState(root);
-        this.state.db.exec(`CREATE TABLE IF NOT EXISTS credential_draft (id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, app_id TEXT NOT NULL, transport_name TEXT NOT NULL, requirements_json TEXT NOT NULL, expires_at TEXT NOT NULL); CREATE TABLE IF NOT EXISTS credential_draft_source (id TEXT PRIMARY KEY, draft_id TEXT NOT NULL, session_id TEXT NOT NULL, fingerprint TEXT NOT NULL); CREATE TABLE IF NOT EXISTS credential_entry (id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, app_id TEXT NOT NULL, transport_name TEXT NOT NULL, name TEXT NOT NULL, name_fold TEXT NOT NULL, requirements_json TEXT NOT NULL, ciphertext BLOB NOT NULL, iv BLOB NOT NULL, tag BLOB NOT NULL, created_at TEXT NOT NULL, UNIQUE(app_id,transport_name,name_fold));`);
+        this.state.db.exec(`CREATE TABLE IF NOT EXISTS credential_scope (id TEXT PRIMARY KEY, contract TEXT NOT NULL); CREATE TABLE IF NOT EXISTS credential_draft (id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, app_id TEXT NOT NULL, transport_name TEXT NOT NULL, requirements_json TEXT NOT NULL, expires_at TEXT NOT NULL); CREATE TABLE IF NOT EXISTS credential_draft_source (id TEXT PRIMARY KEY, draft_id TEXT NOT NULL, session_id TEXT NOT NULL, fingerprint TEXT NOT NULL); CREATE TABLE IF NOT EXISTS credential_entry (id TEXT PRIMARY KEY, workspace_id TEXT NOT NULL, app_id TEXT NOT NULL, transport_name TEXT NOT NULL, name TEXT NOT NULL, name_fold TEXT NOT NULL, requirements_json TEXT NOT NULL, ciphertext BLOB NOT NULL, iv BLOB NOT NULL, tag BLOB NOT NULL, created_at TEXT NOT NULL, UNIQUE(app_id,transport_name,name_fold));`);
       }
       state;
       registerDraft(binding2) {
         this.verify(binding2);
         if (!Number.isFinite(Date.parse(binding2.expiresAt)) || (Date.parse(binding2.expiresAt) <= Date.now() || Date.parse(binding2.expiresAt) > Date.now() + 30 * 6e4)) throw new CredentialError("draft-expired", "Credential draft has expired");
         this.state.db.prepare("INSERT INTO credential_draft (id,workspace_id,app_id,transport_name,requirements_json,expires_at) VALUES (?,?,?,?,?,?) ON CONFLICT(id) DO UPDATE SET workspace_id=excluded.workspace_id,app_id=excluded.app_id,transport_name=excluded.transport_name,requirements_json=excluded.requirements_json,expires_at=excluded.expires_at").run(binding2.draftId, binding2.workspaceId, binding2.appId, binding2.transportName, JSON.stringify(binding2.requirements), binding2.expiresAt);
+        if (binding2.credentialContract) this.state.db.prepare("INSERT OR REPLACE INTO credential_scope (id,contract) VALUES (?,?)").run(binding2.draftId, binding2.credentialContract);
         if (binding2.source) this.state.db.prepare("INSERT INTO credential_draft_source (id,draft_id,session_id,fingerprint) VALUES (?,?,?,?) ON CONFLICT(id) DO UPDATE SET draft_id=excluded.draft_id,session_id=excluded.session_id,fingerprint=excluded.fingerprint").run(binding2.draftId, binding2.source.draftId, binding2.source.sessionId, binding2.source.fingerprint);
       }
       resolveDraft(binding2) {
@@ -31164,7 +31179,10 @@ var init_credentials = __esm({
         }
         const requirements = JSON.parse(row.requirements_json);
         if (!sameRequirements(requirements, binding2.requirements)) throw new CredentialError("requirements-mismatch", "Credential requirements changed. Ask the agent for a new link");
-        return { ...binding2, requirements };
+        const scope2 = this.state.db.prepare("SELECT contract FROM credential_scope WHERE id=?").get(binding2.draftId);
+        const contract = scope2?.contract;
+        const destinations = contract ? JSON.parse(contract).origins : void 0;
+        return { ...binding2, requirements, ...contract ? { credentialContract: contract, destinations } : {} };
       }
       verify(binding2) {
         if (this.state.installation()?.workspaceId !== binding2.workspaceId) throw new CredentialError("workspace-mismatch", "Credential workspace does not match this installation");
@@ -31178,7 +31196,7 @@ var init_credentials = __esm({
       }
       async put(binding2) {
         if (binding2.draftId) {
-          this.resolveDraft(binding2);
+          binding2 = { ...binding2, ...this.resolveDraft(binding2) };
           const source = this.state.db.prepare("SELECT session_id FROM credential_draft_source WHERE id=?").get(binding2.draftId);
           if (source && binding2.sessionId !== source.session_id) throw new CredentialError("session-mismatch", "Credential setup belongs to another requesting agent session");
         }
@@ -31195,6 +31213,7 @@ var init_credentials = __esm({
           this.state.db.exec("BEGIN EXCLUSIVE");
           if (binding2.draftId) this.resolveDraft(binding2);
           this.state.db.prepare("INSERT INTO credential_entry (id,workspace_id,app_id,transport_name,name,name_fold,requirements_json,ciphertext,iv,tag,created_at) VALUES (?,?,?,?,?,?,?,?,?,?,?)").run(id2, binding2.workspaceId, binding2.appId, binding2.transportName, name, name.toLocaleLowerCase(), JSON.stringify(binding2.requirements), ciphertext, iv, tag, (/* @__PURE__ */ new Date()).toISOString());
+          if (binding2.credentialContract) this.state.db.prepare("INSERT INTO credential_scope (id,contract) VALUES (?,?)").run(id2, binding2.credentialContract);
           if (binding2.sessionId) {
             const current = this.state.useSession(binding2.sessionId, binding2.appId);
             this.state.saveUseSession({ agentSessionId: binding2.sessionId, appId: binding2.appId, context: current?.credentials[binding2.transportName] === id2 ? current.context : {}, credentials: { ...current?.credentials, [binding2.transportName]: id2 } });
@@ -31238,6 +31257,7 @@ var init_credentials = __esm({
         if (!sameRequirements(entry2.requirements, binding2.requirements)) throw new CredentialError("credential-incompatible", "Saved credential fields do not match the selected transport");
         try {
           this.state.db.prepare("UPDATE credential_entry SET app_id=?,transport_name=? WHERE id=? AND workspace_id=?").run(binding2.appId, binding2.transportName, id2, binding2.workspaceId);
+          if (binding2.credentialContract) this.state.db.prepare("INSERT OR REPLACE INTO credential_scope (id,contract) VALUES (?,?)").run(id2, binding2.credentialContract);
         } catch (error62) {
           if (error62 instanceof Error && /UNIQUE constraint/.test(error62.message)) throw new CredentialError("credential-label-exists", "A credential with this label already exists for this app and transport");
           throw error62;
@@ -31250,8 +31270,16 @@ var init_credentials = __esm({
         if (!row) throw new CredentialError("credential-missing", "Credential entry does not belong to this app and transport");
         const stored = JSON.parse(row.requirements_json);
         if (!sameRequirements(stored, binding2.requirements)) throw new CredentialError("credential-requirements-changed", "Credential requirements changed; configure the entry again");
+        let scope2 = this.state.db.prepare("SELECT contract FROM credential_scope WHERE id=?").get(id2);
+        if (!scope2 && binding2.credentialContract && binding2.legacyCredentialContract === binding2.credentialContract) {
+          this.state.db.prepare("INSERT OR IGNORE INTO credential_scope (id,contract) VALUES (?,?)").run(id2, binding2.credentialContract);
+          scope2 = this.state.db.prepare("SELECT contract FROM credential_scope WHERE id=?").get(id2);
+        }
+        if (scope2?.contract !== binding2.credentialContract) throw new CredentialError("credential-destination-changed", "The saved credential is not bound to this destination and injection contract; complete connection setup");
         const key = Buffer.from(await this.vault.get(id2), "base64");
         if (binding2.draftId) this.resolveDraft(binding2);
+        const stillBound = this.state.db.prepare("SELECT s.contract FROM credential_entry e LEFT JOIN credential_scope s ON s.id=e.id WHERE e.id=? AND e.workspace_id=? AND e.app_id=? AND e.transport_name=?").get(id2, binding2.workspaceId, binding2.appId, binding2.transportName);
+        if (!stillBound || (stillBound.contract ?? void 0) !== binding2.credentialContract) throw new CredentialError("credential-binding-changed", "The selected credential changed while the vault was opening; complete connection setup");
         if (key.length !== 32) throw new CredentialError("vault-key-invalid", "Credential vault key is invalid");
         const decipher = createDecipheriv("aes-256-gcm", key, row.iv);
         decipher.setAuthTag(row.tag);
@@ -31276,6 +31304,7 @@ var init_credentials = __esm({
         if (!row) throw new CredentialError("credential-missing", "Credential entry was not found");
         await this.vault.delete(binding2.credentialId);
         this.state.db.prepare("DELETE FROM credential_entry WHERE id=?").run(binding2.credentialId);
+        this.state.db.prepare("DELETE FROM credential_scope WHERE id=?").run(binding2.credentialId);
         const sessions = this.state.db.prepare("SELECT agent_session_id,context_json,credentials_json FROM use_session WHERE app_id=?").all(binding2.appId);
         for (const session of sessions) {
           const credentials = JSON.parse(session.credentials_json);
@@ -31576,7 +31605,7 @@ async function send(fetcher, prepared, allowNonJsonProbe = false) {
   const body = await responseBody(response, allowNonJsonProbe);
   return { response, body };
 }
-async function sendBrowser(root, appId, contextName, pageOrigin, effect2, transportName, transport, prepared, dispatched, credentialId, credentialDraftId, allowNonJsonProbe = false) {
+async function sendBrowser(root, appId, contextName, pageOrigin, effect2, transportName, transport, prepared, dispatched, credentialId, credentialDraftId, allowNonJsonProbe = false, dispatchBefore) {
   const client = await captureClient(root);
   const inspect = await client.openScope({ kind: "inspect", appId, contextId: contextName, pageOrigin, ownerPid: process.pid, ownerStartedAt: Date.now() - process.uptime() * 1e3 });
   let candidates = [];
@@ -31597,9 +31626,9 @@ async function sendBrowser(root, appId, contextName, pageOrigin, effect2, transp
     const headers = Object.fromEntries(new Headers(prepared.init.headers).entries());
     const authRecipeDefinition = transport.inject?.length ? { inject: transport.inject } : void 0;
     const authRecipeHash = authRecipeDefinition ? await hashJson(authRecipeDefinition) : void 0;
-    const envelope = { job: { id: id2, kind: "replay", effect: effect2, method: prepared.init.method, url: prepared.url.href, headers, ...prepared.init.body ? { body: String(prepared.init.body) } : {}, pageOrigin, allowedRequestOrigin: prepared.url.origin, timeoutMs: 2e4, ...authRecipeDefinition ? { authRecipeDefinition, authRecipeHash, authRecipeId: `recipe-${authRecipeHash.slice(0, 12)}` } : {} }, ...credentialId ? { credentialRef: { appId, transportName, credentialId, ...credentialDraftId ? { draftId: credentialDraftId } : {}, requirements: transport.credentials ?? [] } } : {} };
-    await client.enqueueJob(scope2.id, envelope);
+    const envelope = { ...dispatchBefore ? { authorization: { dispatchBefore } } : {}, job: { id: id2, kind: "replay", effect: effect2, method: prepared.init.method, url: prepared.url.href, headers, ...prepared.init.body ? { body: String(prepared.init.body) } : {}, pageOrigin, allowedRequestOrigin: prepared.url.origin, timeoutMs: 2e4, ...authRecipeDefinition ? { authRecipeDefinition, authRecipeHash, authRecipeId: `recipe-${authRecipeHash.slice(0, 12)}` } : {} }, ...credentialId ? { credentialRef: { appId, transportName, credentialId, ...credentialDraftId ? { draftId: credentialDraftId } : {}, requirements: transport.credentials ?? [] } } : {} };
     dispatched();
+    await client.enqueueJob(scope2.id, envelope);
     const deadline = Date.now() + 45e3;
     do {
       const held = await client.jobResult(id2);
@@ -31672,8 +31701,8 @@ No app request was sent.
 `, 5);
   let browserPage;
   if (transport.mode === "browser") {
-    const page2 = await api.call("getResource", { params: { app: bundle2.app.id, kind: "browser-context", name: transport.browserContext } });
-    if (!("definition" in page2)) return fail2("browser-page-missing \u2014 The published browser page is unavailable. No app request was sent.\n", 5);
+    const page2 = bundle2.closure.versions.find((item) => item.kind === "browser-context" && item.name === transport.browserContext);
+    if (!page2) return fail2("browser-page-missing \u2014 The selected browser page is unavailable. No app request was sent.\n", 5);
     browserPage = page2.definition;
   }
   try {
@@ -31693,16 +31722,18 @@ Inspect current action documentation: ${prefix(`actions show ${appName} ${action
   }
   let dispatchedAt;
   const markDispatched = () => {
+    if (!dispatchedAt && bundle2.receipt && Date.now() > Date.parse(bundle2.receipt.dispatchBefore)) throw new Error("Execution authorization expired before dispatch; start a new invocation");
     dispatchedAt ??= (/* @__PURE__ */ new Date()).toISOString();
   };
   const sendRequest = async (request2, effect2) => {
-    if (transport.mode === "browser") return sendBrowser(root, bundle2.app.id, transport.browserContext, browserPage.pageOrigin, effect2, action.transport, transport, request2, markDispatched, selectedCredential);
+    if (transport.mode === "browser") return sendBrowser(root, bundle2.app.id, transport.browserContext, browserPage.pageOrigin, effect2, action.transport, transport, request2, markDispatched, selectedCredential, void 0, false, bundle2.receipt?.dispatchBefore);
     if (selectedCredential) {
       const store = new CredentialStore(root, new KeyringVault());
       try {
         const installation = state.installation();
         if (!installation) throw new CredentialError("installation-required", "Installation is no longer linked");
-        const values = await store.read(selectedCredential, { workspaceId: installation.workspaceId, appId: bundle2.app.id, appTitle: bundle2.app.slug, transportName: action.transport, requirements: transport.credentials ?? [] });
+        const requirements = await api.call("getResource", { params: { app: bundle2.app.id, kind: "transport", name: action.transport }, query: { view: "requirements" } });
+        const values = await store.read(selectedCredential, { workspaceId: installation.workspaceId, appId: bundle2.app.id, appTitle: bundle2.app.slug, transportName: action.transport, legacyCredentialContract: "legacyCredentialContract" in requirements ? requirements.legacyCredentialContract : void 0, requirements: transport.credentials ?? [], credentialContract: credentialContractKey(transport), destinations: transport.allowedOrigins });
         const headers = new Headers(request2.init.headers);
         for (const requirement2 of transport.credentials ?? []) headers.set(requirement2.header, `${requirement2.prefix ?? ""}${values[requirement2.name]}`);
         request2 = { ...request2, init: { ...request2.init, headers } };
@@ -31763,7 +31794,7 @@ Inspect saved entries: ${prefix(`credentials list ${appName} ${action.transport}
 `, 5, !!dispatchedAt);
     }
   }
-  const report = { id: reportId, appId: bundle2.app.id, actionName, actionVersion: actionVersion.version, closureHash: bundle2.closure.hash, purpose: "run", clientFamily: "cli", agent: session.agent, outcome, ...diagnostic ? { diagnostic } : {}, startedAt, ...dispatchedAt ? { dispatchedAt } : {}, finishedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  const report = { id: reportId, connectionFingerprint: await hashJson({ transport: transportVersion.executableHash, credential: selectedCredential ?? null, browser: browserPage?.pageOrigin ?? null }), ...bundle2.receipt ? { receiptId: bundle2.receipt.id } : {}, ...outcome === "success" && action.effect !== "read" ? { proof: "passed" } : {}, appId: bundle2.app.id, actionName, actionVersion: actionVersion.version, closureHash: bundle2.closure.hash, purpose: "run", clientFamily: "cli", agent: session.agent, outcome, ...diagnostic ? { diagnostic } : {}, startedAt, ...dispatchedAt ? { dispatchedAt } : {}, finishedAt: (/* @__PURE__ */ new Date()).toISOString() };
   state.queueExecutionReport(reportId, report);
   onReport?.(reportId);
   try {
@@ -31791,6 +31822,8 @@ Inspect saved entries: ${prefix(`credentials list ${appName} ${action.transport}
 `, 12, true);
     }
   }
+  if (bundle2.selection.fallback && !["prefer-verified", "pinned-selection"].includes(bundle2.selection.replaced?.reason ?? "")) output2.stderr += `Using a previously working revision (${bundle2.selection.replaced?.reason ?? "compatible-fallback"}). Selection recovers automatically when an eligible revision is available.${bundle2.selection.replaced?.until ? ` Protective pause ends ${bundle2.selection.replaced.until}.` : ""} Inspect distribution with ${prefix(`apps history ${appName}`)}.
+`;
   return output2;
 }
 async function executeDraftVerification(input2) {
@@ -31836,7 +31869,7 @@ async function executeDraftVerification(input2) {
       const store = new CredentialStore(input2.root, new KeyringVault());
       try {
         credentialDraftId = randomUUID3();
-        store.registerDraft({ workspaceId: installation.workspaceId, appId: input2.appId, appTitle: input2.appSlug, transportName: input2.name, requirements: transport.credentials ?? [], draftId: credentialDraftId, expiresAt: new Date(Date.now() + 30 * 6e4).toISOString(), source: { draftId: selected.id, sessionId: input2.session.id, fingerprint: current.fingerprint } });
+        store.registerDraft({ workspaceId: installation.workspaceId, appId: input2.appId, appTitle: input2.appSlug, transportName: input2.name, requirements: transport.credentials ?? [], credentialContract: credentialContractKey(transport), destinations: transport.allowedOrigins, draftId: credentialDraftId, expiresAt: new Date(Date.now() + 30 * 6e4).toISOString(), source: { draftId: selected.id, sessionId: input2.session.id, fingerprint: current.fingerprint } });
       } finally {
         store.close();
       }
@@ -31851,7 +31884,7 @@ async function executeDraftVerification(input2) {
       try {
         const installation = input2.state.installation();
         if (!installation) throw new CredentialError("installation-required", "Installation is no longer linked");
-        const values2 = await store.read(credential2, { workspaceId: installation.workspaceId, ...credentialDraftId ? { draftId: credentialDraftId } : {}, appId: input2.appId, appTitle: input2.appSlug, transportName: input2.kind === "action" && action && "transport" in action ? action.transport : input2.name, requirements: transport.credentials ?? [] });
+        const values2 = await store.read(credential2, { workspaceId: installation.workspaceId, ...credentialDraftId ? { draftId: credentialDraftId } : {}, appId: input2.appId, appTitle: input2.appSlug, transportName: input2.kind === "action" && action && "transport" in action ? action.transport : input2.name, requirements: transport.credentials ?? [], credentialContract: credentialContractKey(transport), destinations: transport.allowedOrigins });
         const headers = new Headers(request2.init.headers);
         for (const requirement2 of transport.credentials ?? []) headers.set(requirement2.header, `${requirement2.prefix ?? ""}${values2[requirement2.name]}`);
         request2 = { ...request2, init: { ...request2.init, headers } };
@@ -31889,6 +31922,7 @@ var import__3, import_ajv_formats, ajv3, result, fail2, ResponseContractFailure,
 var init_run = __esm({
   "src/commands/run.ts"() {
     "use strict";
+    init_definitions();
     init_json();
     init_drafts();
     init_credential_draft();
@@ -32404,7 +32438,7 @@ async function app(api, ref) {
 async function binding(api, appId, appTitle, transportName, workspaceId) {
   const resource = await api.call("getResource", { params: { app: appId, kind: "transport", name: transportName }, query: { view: "requirements" } });
   if (!("credentials" in resource)) throw new CredentialError("transport-missing", "The named connection has no current credential contract");
-  return { workspaceId, appId, appTitle, transportName, requirements: resource.credentials, instructions: resource.instructions, mode: resource.mode };
+  return { workspaceId, appId, appTitle, transportName, requirements: resource.credentials, credentialContract: resource.credentialContract, legacyCredentialContract: resource.legacyCredentialContract, destinations: resource.destinations, instructions: resource.instructions, mode: resource.mode };
 }
 async function unboundEntries(store, api) {
   const entries = store.entries();
@@ -32475,7 +32509,7 @@ Inspect its connections: ${command3(invocation, `transports show ${selectedApp.s
 `, 2);
       }
     }
-    const current = draftContract ? { workspaceId: installation.workspaceId, appId: selectedApp.id, appTitle: selectedApp.title, transportName, requirements: draftContract.transport.credentials ?? [], instructions: draftContract.transport.description, mode: draftContract.transport.mode } : await binding(api, selectedApp.id, selectedApp.title, transportName, installation.workspaceId);
+    const current = draftContract ? { workspaceId: installation.workspaceId, appId: selectedApp.id, appTitle: selectedApp.title, transportName, requirements: draftContract.transport.credentials ?? [], credentialContract: credentialContractKey(draftContract.transport), destinations: draftContract.transport.allowedOrigins, instructions: draftContract.transport.description, mode: draftContract.transport.mode } : await binding(api, selectedApp.id, selectedApp.title, transportName, installation.workspaceId);
     if (invocation.key === "credentialsList") {
       const rows = store.entries(selectedApp.id, transportName);
       const selectedId = session ? state.useSession(session.id, selectedApp.id)?.credentials[transportName] : void 0;
@@ -32564,6 +32598,7 @@ var ok3, fail4, command3, compatible;
 var init_credentials2 = __esm({
   "src/commands/credentials.ts"() {
     "use strict";
+    init_definitions();
     init_drafts();
     init_credential_draft();
     init_json();
@@ -33426,7 +33461,7 @@ Leave discovery: ${command4(invocation, "discover close")}
       const limit = Number(invocation.options.limit ?? 20);
       if (!Number.isInteger(limit) || limit < 1 || limit > 100) return fail5("--limit must be from 1 to 100.\n");
       const page2 = await api.call("listChanges", { params: { app: invocation.positionals[0] }, query: { limit, cursor: invocation.options.cursor, resource: invocation.options.resource } });
-      return ok4(`${page2.items.length ? page2.items.map((item) => `${item.change}: ${item.event} ${item.kind}:${item.name} v${item.version} (${item.publishedAt})`).join("\n") : "No publication history is visible."}
+      return ok4(`${page2.items.length ? page2.items.map((item) => `${item.change}: ${item.event} ${item.kind}:${item.name} v${item.version} (${item.publishedAt})${item.distribution ? ` \u2014 ${item.distribution.state}${item.distribution.until ? ` until ${item.distribution.until}` : ""}` : ""}`).join("\n") : "No publication history is visible."}
 ${page2.nextCursor ? `More publications remain. Continue with the exact cursor returned here:
   ${command4(invocation, `apps history ${invocation.positionals[0]} --limit ${limit} --cursor ${page2.nextCursor}${invocation.options.resource ? ` --resource ${invocation.options.resource}` : ""}`)}
 Keep the same --resource filter when one is set. Choose page size with --limit <number> (default 20; maximum 100).
@@ -33653,6 +33688,10 @@ File: ${draft.filePath}
           });
           if (dependents.length) return blockedRemoval(draft, invocation, dependents, true);
         }
+        if (issue2.category !== "invalid") return fail5(`${issue2.code} \u2014 ${issue2.message}
+${issue2.hint}${typeof issue2.details.retryAfter === "string" ? ` Resume after ${issue2.details.retryAfter}.` : ""}
+Draft retained: ${draft.filePath}
+`, cliExitForError(issue2), true);
         const details = Array.isArray(issue2.details.issues) ? `
 ${issue2.details.issues.map((item) => `  ${item.path ?? "/"}: ${item.message ?? "invalid"}`).join("\n")}` : "";
         return fail5(`${issue2.code} \u2014 ${issue2.message}${details}
@@ -33689,6 +33728,9 @@ If no usable public route is found, record the evidence and use browser transpor
   }
   store.published(session.id, published.resource.version);
   if (!removing && draft.kind === "action" && published.executableHash) withBaselines(root, (baselines) => baselines.published(draft.id, draft.name, published.executableHash));
+  if (published.distribution && published.distribution.state !== "available") return ok4(`Published ${label(draft.kind)} ${draft.name}. Distribution is ${published.distribution.state}. ${published.distribution.reason === "confirmed-defect" ? "This executable revision was withdrawn. Continue developing and submit a corrected definition." : "You can continue developing and using your accepted revision. Wider distribution advances automatically as independent workspaces use it."}${published.distribution.until ? ` Protective pause ends ${published.distribution.until}.` : ""}
+Inspect distribution: ${command4(invocation, `apps history ${draft.appSlug} --resource ${backendKind(draft.kind)}:${draft.name}`)}
+`, true);
   if (removing) return ok4(`Removed ${draft.kind} ${draft.name} from the published interface. App records were unchanged.
 `, true);
   if (draft.kind === "action" && checked.definition && "unavailable" in checked.definition) return ok4(`Published the documented unavailability of ${draft.name}. No app request was sent and this action is not executable.

package/dist/plugin/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "apilift",
-  "version": "1.4.19",
+  "version": "1.4.20",
   "description": "Set up Apilift and use authenticated app interfaces.",
   "author": {
     "name": "Apilift"

package/dist/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "apilift",
-  "version": "1.4.19",
+  "version": "1.4.20",
   "description": "Set up Apilift and use authenticated app interfaces.",
   "author": {
     "name": "Apilift"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apilift/cli",
-  "version": "1.4.19",
+  "version": "1.4.20",
   "private": false,
   "type": "module",
   "bin": {
@@ -36,7 +36,7 @@
   "engines": {
     "node": ">=24.16.0 <27"
   },
-  "gitHead": "fa014e07f68cedb5bbbf5e134ede2f91bd77a6b7",
+  "gitHead": "8afe0b75f8a1e7c75819c5eca0dada8f0c817dc0",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/egor-sergeev/apilift.git",