@atmem/architect 0.0.0-stage → 0.2.0-alpha.4.1

package/src/runtime/state-contract-check-source.json

@@ -0,0 +1,4 @@
+{
+  "source": "\"\"\"Local synthetic HTTP-state protocol check; never opens a project backend.\n\nThis fixture is not a production state service. All state, credentials, databases\nand native workspaces are created in one fresh directory. No apply, migration,\nprovider, cloud credential or caller-supplied endpoint is used.\n\"\"\"\nimport argparse\nimport base64\nimport contextlib\nimport hashlib\nimport http.server\nimport json\nimport os\nfrom pathlib import Path\nimport secrets\nimport shutil\nimport sqlite3\nimport subprocess\nimport threading\nimport urllib.error\nimport urllib.parse\nimport urllib.request\nimport uuid\n\n\ndef encoded(value):\n    return json.dumps(value, sort_keys=True, separators=(',', ':')).encode()\n\n\ndef digest(value):\n    return hashlib.sha256(value).hexdigest()\n\n\nclass FixtureStore:\n    def __init__(self, path, initial):\n        self.path = path\n        with self.connection() as db:\n            db.executescript('''CREATE TABLE IF NOT EXISTS versions(\n                id INTEGER PRIMARY KEY, payload BLOB NOT NULL, sha TEXT NOT NULL);\n                CREATE TABLE IF NOT EXISTS head(id INTEGER PRIMARY KEY CHECK(id=1),version INTEGER NOT NULL);\n                CREATE TABLE IF NOT EXISTS lease(id INTEGER PRIMARY KEY CHECK(id=1),actor TEXT,info TEXT);''')\n            if not db.execute('SELECT 1 FROM head').fetchone():\n                db.execute('INSERT INTO versions VALUES(1,?,?)', (initial, digest(initial)))\n                db.execute('INSERT INTO head VALUES(1,1)')\n\n    @contextlib.contextmanager\n    def connection(self):\n        db = sqlite3.connect(self.path, timeout=5)\n        try:\n            db.execute('PRAGMA journal_mode=WAL')\n            db.execute('PRAGMA synchronous=FULL')\n            db.execute('BEGIN IMMEDIATE')\n            yield db\n            db.commit()\n        except BaseException:\n            db.rollback()\n            raise\n        finally:\n            db.close()\n\n    def read(self):\n        with self.connection() as db:\n            row = db.execute('SELECT payload,sha FROM versions JOIN head ON versions.id=head.version').fetchone()\n            if digest(row[0]) != row[1]:\n                raise ValueError('Fixture state digest mismatch')\n            return row[0]\n\n    def lock(self):\n        with self.connection() as db:\n            row = db.execute('SELECT actor,info FROM lease').fetchone()\n            return (row[0], json.loads(row[1])) if row else None\n\n    def acquire(self, actor, info):\n        if not isinstance(info.get('ID'), str) or not info['ID'] or len(info['ID']) > 100:\n            return 400, {}\n        with self.connection() as db:\n            row = db.execute('SELECT actor,info FROM lease').fetchone()\n            if row:\n                return 409, json.loads(row[1])\n            db.execute('INSERT INTO lease VALUES(1,?,?)', (actor, json.dumps(info)))\n            return 200, {}\n\n    def unlock(self, actor, info):\n        with self.connection() as db:\n            row = db.execute('SELECT actor,info FROM lease').fetchone()\n            if not row:\n                return 409, {}\n            current = json.loads(row[1])\n            if actor != row[0] or info.get('ID') != current['ID']:\n                return 409, current\n            db.execute('DELETE FROM lease')\n            return 200, {}\n\n    def denied_write(self, actor, lock_id):\n        with self.connection() as db:\n            row = db.execute('SELECT actor,info FROM lease').fetchone()\n            # Fixture intentionally has no HTTP write implementation. Plans and\n            # state pull must not write; only the test controller adds versions.\n            if not row or row[0] != actor or json.loads(row[1])['ID'] != lock_id:\n                return 409\n            return 405\n\n    def add_fixture_version(self, payload):\n        with self.connection() as db:\n            if db.execute('SELECT 1 FROM lease').fetchone():\n                raise ValueError('An active writer forbids fixture version changes')\n            cursor = db.execute('INSERT INTO versions(payload,sha) VALUES(?,?)', (payload, digest(payload)))\n            db.execute('UPDATE head SET version=?', (cursor.lastrowid,))\n            return cursor.lastrowid\n\n    def restore_fixture_version(self, version):\n        with self.connection() as db:\n            if db.execute('SELECT 1 FROM lease').fetchone():\n                raise ValueError('An active writer forbids fixture recovery')\n            row = db.execute('SELECT payload,sha FROM versions WHERE id=?', (version,)).fetchone()\n            if not row or digest(row[0]) != row[1]:\n                raise ValueError('Unverified fixture backup')\n            json.loads(row[0])\n            db.execute('UPDATE head SET version=?', (version,))\n\n\nclass Control:\n    def __init__(self):\n        self.pause = False\n        self.read_held = threading.Event()\n        self.release = threading.Event()\n        self.events = []\n\n\ndef fixture_server(store, credentials, control):\n    class Handler(http.server.BaseHTTPRequestHandler):\n        def log_message(self, *_):\n            pass\n\n        def respond(self, status, value=None):\n            body = value if isinstance(value, bytes) else encoded(value or {})\n            self.send_response(status)\n            self.send_header('Content-Type', 'application/json')\n            self.send_header('Content-Length', str(len(body)))\n            self.end_headers()\n            try:\n                self.wfile.write(body)\n            except (BrokenPipeError, ConnectionResetError):\n                pass\n\n        def actor(self):\n            header = self.headers.get('Authorization', '')\n            for actor, password in credentials.items():\n                expected = 'Basic ' + base64.b64encode((actor + ':' + password).encode()).decode()\n                if secrets.compare_digest(header, expected):\n                    return actor\n            return None\n\n        def dispatch(self):\n            actor = self.actor()\n            route = urllib.parse.urlsplit(self.path)\n            if not actor:\n                self.respond(401)\n                return\n            control.events.append({'method': self.command, 'path': route.path, 'actor': actor})\n            if self.command == 'GET' and route.path == '/state':\n                lease = store.lock()\n                if control.pause and lease and lease[0] == actor:\n                    control.read_held.set()\n                    if not control.release.wait(25):\n                        self.respond(503)\n                        return\n                self.respond(200, store.read())\n                return\n            length = int(self.headers.get('Content-Length', '0'))\n            if length < 0 or length > 65536:\n                self.respond(413)\n                return\n            try:\n                value = json.loads(self.rfile.read(length)) if length else {}\n            except ValueError:\n                self.respond(400)\n                return\n            if not isinstance(value, dict):\n                self.respond(400)\n                return\n            if route.path == '/lock' and self.command in {'POST', 'DELETE'}:\n                status, response = (store.acquire if self.command == 'POST' else store.unlock)(actor, value)\n                self.respond(status, response)\n            elif route.path == '/state' and self.command == 'POST':\n                lock_id = urllib.parse.parse_qs(route.query).get('ID', [None])[0]\n                self.respond(store.denied_write(actor, lock_id))\n            else:\n                self.respond(405)\n\n        do_GET = dispatch\n        do_POST = dispatch\n        do_DELETE = dispatch\n\n    server = http.server.ThreadingHTTPServer(('127.0.0.1', 0), Handler)\n    server.daemon_threads = True\n    return server\n\n\ndef run_probe(terraform, folder):\n    folder.mkdir(parents=True, exist_ok=False)\n    private = folder / 'private'\n    private.mkdir(mode=0o700)\n    os.chmod(folder, 0o700)\n    credentials = {actor: secrets.token_urlsafe(32) for actor in ['writer-a', 'writer-b']}\n    base_env = {'PATH': str(terraform.parent), 'HOME': str(private), 'TMPDIR': str(private),\n                'TF_IN_AUTOMATION': '1', 'CHECKPOINT_DISABLE': '1', 'TF_INPUT': '0',\n                'TF_HTTP_RETRY_MAX': '0', 'AWS_EC2_METADATA_DISABLED': 'true'}\n    cli = private / 'empty.tfrc'\n    cli.write_text('provider_installation { filesystem_mirror { path = ' + json.dumps(str(private)) + ' } }\\n')\n    base_env['TF_CLI_CONFIG_FILE'] = str(cli)\n    version = json.loads(subprocess.check_output([str(terraform), 'version', '-json'], env=base_env, timeout=15))\n    initial = encoded({'version': 4, 'terraform_version': version['terraform_version'], 'serial': 1,\n                       'lineage': str(uuid.uuid4()), 'outputs': {'fixture': {'value': 'synthetic-state', 'type': 'string'}}, 'resources': []})\n    store = FixtureStore(private / 'fixture.sqlite', initial)\n    control = Control()\n    server = fixture_server(store, credentials, control)\n    base = 'http://127.0.0.1:' + str(server.server_port)\n    thread = threading.Thread(target=server.serve_forever, daemon=True)\n    thread.start()\n    checks, commands = [], []\n    active = None\n\n    def check(name, condition):\n        checks.append({'name': name, 'passed': bool(condition)})\n        if not condition:\n            raise AssertionError(name)\n\n    def environment(actor):\n        return {**base_env, 'TF_HTTP_USERNAME': actor, 'TF_HTTP_PASSWORD': credentials[actor]}\n\n    def native(actor, arguments, expected_exit=0):\n        result = subprocess.run([str(terraform), *arguments], cwd=private / actor,\n                                env=environment(actor), capture_output=True, text=True, timeout=20)\n        commands.append({'actor': actor, 'arguments': arguments, 'exitCode': result.returncode, 'expectedExitCode': expected_exit})\n        (private / ('command-' + str(len(commands)) + '.log')).write_text(result.stdout + '\\n' + result.stderr)\n        return result\n\n    def request(actor, method, path, value=None, password=None):\n        header = base64.b64encode((actor + ':' + (password or credentials[actor])).encode()).decode()\n        req = urllib.request.Request(base + path, data=encoded(value) if value is not None else None,\n                                     method=method, headers={'Authorization': 'Basic ' + header})\n        opener = urllib.request.build_opener(urllib.request.ProxyHandler({}))\n        try:\n            with opener.open(req, timeout=5) as response:\n                return response.status\n        except urllib.error.HTTPError as error:\n            return error.code\n\n    try:\n        for actor in credentials:\n            workspace = private / actor\n            workspace.mkdir()\n            (workspace / 'main.tf.json').write_text(json.dumps({'terraform': {'required_version': '>= 1.10.0, < 2.0.0', 'backend': {'http': {}}}, 'output': {'fixture': {'value': 'synthetic-state'}}}))\n            (workspace / 'backend.hcl').write_text('address = ' + json.dumps(base + '/state') + '\\nlock_address = ' + json.dumps(base + '/lock') + '\\nunlock_address = ' + json.dumps(base + '/lock') + '\\nlock_method = \"POST\"\\nunlock_method = \"DELETE\"\\n')\n            check('native init ' + actor, native(actor, ['init', '-input=false', '-no-color', '-backend-config=backend.hcl']).returncode == 0)\n        pulled = native('writer-a', ['state', 'pull'])\n        check('native reads synthetic lineage and payload', pulled.returncode == 0 and all(json.loads(pulled.stdout).get(k) == json.loads(initial)[k] for k in ['version', 'serial', 'lineage', 'outputs', 'resources']))\n        check('unknown credential denied', request('writer-a', 'GET', '/state', password='invalid-fixture-password') == 401)\n        control.pause = True\n        active = subprocess.Popen([str(terraform), 'plan', '-input=false', '-no-color', '-lock-timeout=0s'], cwd=private / 'writer-a', env=environment('writer-a'), stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True)\n        check('real native plan holds lock while reading', control.read_held.wait(12) and active.poll() is None and store.lock() is not None)\n        current = store.lock()[1]\n        competing = native('writer-b', ['plan', '-input=false', '-no-color', '-lock-timeout=0s'], expected_exit=1)\n        check('second native writer excluded', competing.returncode == 1 and 'Error acquiring the state lock' in competing.stderr + competing.stdout)\n        check('foreign actor cannot unlock owner', request('writer-b', 'DELETE', '/lock', {'ID': current['ID']}) == 409 and store.lock()[1]['ID'] == current['ID'])\n        check('incorrect lock ID cannot unlock owner', request('writer-a', 'DELETE', '/lock', {'ID': 'wrong-fixture-lock'}) == 409 and store.lock()[1]['ID'] == current['ID'])\n        check('foreign writer cannot replace state', request('writer-b', 'POST', '/state?ID=' + current['ID'], {}) == 409 and store.read() == initial)\n        try:\n            store.restore_fixture_version(1)\n            refused = False\n        except ValueError:\n            refused = True\n        check('recovery refuses an active writer', refused)\n        control.pause = False\n        control.release.set()\n        output, _ = active.communicate(timeout=15)\n        (private / 'writer-a-plan.log').write_text(output)\n        commands.append({'actor': 'writer-a', 'arguments': ['plan', '-input=false', '-no-color', '-lock-timeout=0s'], 'exitCode': active.returncode, 'expectedExitCode': 0})\n        check('native plan succeeds and releases owned lock', active.returncode == 0 and store.lock() is None)\n        check('plan-only clients never write state', not any(e['method'] == 'POST' and e['path'] == '/state' and e['actor'] == 'writer-a' for e in control.events) and store.read() == initial)\n        changed = json.loads(initial)\n        changed['serial'] = 2\n        changed['outputs']['fixture']['value'] = 'synthetic-new-version'\n        changed_id = store.add_fixture_version(encoded(changed))\n        reopened = FixtureStore(private / 'fixture.sqlite', b'not-a-new-seed')\n        check('local fixture versions survive reopen', json.loads(reopened.read())['serial'] == 2)\n        reopened.restore_fixture_version(1)\n        check('verified fixture recovery restores exact bytes', reopened.read() == initial)\n        restored = native('writer-b', ['state', 'pull'])\n        check('native observes restored lineage and payload', restored.returncode == 0 and json.loads(restored.stdout) == json.loads(pulled.stdout))\n        with reopened.connection() as db:\n            db.execute('UPDATE versions SET payload=? WHERE id=?', (b'corrupted-synthetic-backup', changed_id))\n        try:\n            reopened.restore_fixture_version(changed_id)\n            refused = False\n        except ValueError:\n            refused = True\n        check('corrupt fixture backup cannot replace good state', refused and reopened.read() == initial)\n        abandoned = {'ID': str(uuid.uuid4()), 'Operation': 'synthetic-abandoned-writer'}\n        reopened.acquire('writer-a', abandoned)\n        restarted = FixtureStore(private / 'fixture.sqlite', b'not-a-new-seed')\n        check('uncertain abandoned lock persists across reopen', restarted.lock()[1]['ID'] == abandoned['ID'])\n        check('abandoned lock still needs matching owner and ID', restarted.unlock('writer-b', abandoned)[0] == 409 and restarted.unlock('writer-a', abandoned)[0] == 200)\n    finally:\n        control.pause = False\n        control.release.set()\n        if active is not None and active.poll() is None:\n            active.terminate()\n            try:\n                active.communicate(timeout=5)\n            except subprocess.TimeoutExpired:\n                active.kill()\n                active.communicate(timeout=5)\n        server.shutdown()\n        server.server_close()\n        thread.join(timeout=5)\n    report = {'passed': all(c['passed'] for c in checks), 'scope': 'isolated-loopback-http-state-protocol',\n              'sourceSha256': digest(Path(__file__).read_bytes()), 'terraformVersion': version['terraform_version'],\n              'terraformSha256': digest(terraform.read_bytes()), 'checks': checks, 'commands': commands,\n              'initialSyntheticStateSha256': digest(initial), 'selectedBackendVerified': False,\n              'migrationAuthorized': False, 'boundary': 'Actual Terraform init/plan/state pull against a synthetic loopback HTTP fixture and local SQLite version/lock store. No apply, project backend, TLS, cloud authentication, S3/Azure/GCS behavior, migration or application-system qualification.'}\n    serialized = json.dumps(report, indent=2) + '\\n'\n    if any(secret in serialized for secret in credentials.values()):\n        raise ValueError('Credential appeared in public fixture evidence')\n    (folder / 'report.json').write_text(serialized)\n    return report\n\n\nif __name__ == '__main__':\n    parser = argparse.ArgumentParser(description=__doc__)\n    parser.add_argument('--terraform', type=Path, default=shutil.which('terraform'))\n    parser.add_argument('--work-dir', type=Path, required=True)\n    args = parser.parse_args()\n    if not args.terraform:\n        parser.error('Install a local Terraform executable or provide --terraform.')\n    result = run_probe(Path(args.terraform).resolve(strict=True), args.work_dir.resolve())\n    print(json.dumps({'passed': result['passed'], 'checks': len(result['checks']), 'report': str(args.work_dir / 'report.json'), 'selectedBackendVerified': False}))\n",
+  "sha256": "c82017b8ef1cf30113d0e0bd0c28268b975cf54ab2208261b7c5610b57a96b28"
+}

package/src/runtime/state_contract_check.py

@@ -0,0 +1,338 @@
+"""Local synthetic HTTP-state protocol check; never opens a project backend.
+
+This fixture is not a production state service. All state, credentials, databases
+and native workspaces are created in one fresh directory. No apply, migration,
+provider, cloud credential or caller-supplied endpoint is used.
+"""
+import argparse
+import base64
+import contextlib
+import hashlib
+import http.server
+import json
+import os
+from pathlib import Path
+import secrets
+import shutil
+import sqlite3
+import subprocess
+import threading
+import urllib.error
+import urllib.parse
+import urllib.request
+import uuid
+
+
+def encoded(value):
+    return json.dumps(value, sort_keys=True, separators=(',', ':')).encode()
+
+
+def digest(value):
+    return hashlib.sha256(value).hexdigest()
+
+
+class FixtureStore:
+    def __init__(self, path, initial):
+        self.path = path
+        with self.connection() as db:
+            db.executescript('''CREATE TABLE IF NOT EXISTS versions(
+                id INTEGER PRIMARY KEY, payload BLOB NOT NULL, sha TEXT NOT NULL);
+                CREATE TABLE IF NOT EXISTS head(id INTEGER PRIMARY KEY CHECK(id=1),version INTEGER NOT NULL);
+                CREATE TABLE IF NOT EXISTS lease(id INTEGER PRIMARY KEY CHECK(id=1),actor TEXT,info TEXT);''')
+            if not db.execute('SELECT 1 FROM head').fetchone():
+                db.execute('INSERT INTO versions VALUES(1,?,?)', (initial, digest(initial)))
+                db.execute('INSERT INTO head VALUES(1,1)')
+
+    @contextlib.contextmanager
+    def connection(self):
+        db = sqlite3.connect(self.path, timeout=5)
+        try:
+            db.execute('PRAGMA journal_mode=WAL')
+            db.execute('PRAGMA synchronous=FULL')
+            db.execute('BEGIN IMMEDIATE')
+            yield db
+            db.commit()
+        except BaseException:
+            db.rollback()
+            raise
+        finally:
+            db.close()
+
+    def read(self):
+        with self.connection() as db:
+            row = db.execute('SELECT payload,sha FROM versions JOIN head ON versions.id=head.version').fetchone()
+            if digest(row[0]) != row[1]:
+                raise ValueError('Fixture state digest mismatch')
+            return row[0]
+
+    def lock(self):
+        with self.connection() as db:
+            row = db.execute('SELECT actor,info FROM lease').fetchone()
+            return (row[0], json.loads(row[1])) if row else None
+
+    def acquire(self, actor, info):
+        if not isinstance(info.get('ID'), str) or not info['ID'] or len(info['ID']) > 100:
+            return 400, {}
+        with self.connection() as db:
+            row = db.execute('SELECT actor,info FROM lease').fetchone()
+            if row:
+                return 409, json.loads(row[1])
+            db.execute('INSERT INTO lease VALUES(1,?,?)', (actor, json.dumps(info)))
+            return 200, {}
+
+    def unlock(self, actor, info):
+        with self.connection() as db:
+            row = db.execute('SELECT actor,info FROM lease').fetchone()
+            if not row:
+                return 409, {}
+            current = json.loads(row[1])
+            if actor != row[0] or info.get('ID') != current['ID']:
+                return 409, current
+            db.execute('DELETE FROM lease')
+            return 200, {}
+
+    def denied_write(self, actor, lock_id):
+        with self.connection() as db:
+            row = db.execute('SELECT actor,info FROM lease').fetchone()
+            # Fixture intentionally has no HTTP write implementation. Plans and
+            # state pull must not write; only the test controller adds versions.
+            if not row or row[0] != actor or json.loads(row[1])['ID'] != lock_id:
+                return 409
+            return 405
+
+    def add_fixture_version(self, payload):
+        with self.connection() as db:
+            if db.execute('SELECT 1 FROM lease').fetchone():
+                raise ValueError('An active writer forbids fixture version changes')
+            cursor = db.execute('INSERT INTO versions(payload,sha) VALUES(?,?)', (payload, digest(payload)))
+            db.execute('UPDATE head SET version=?', (cursor.lastrowid,))
+            return cursor.lastrowid
+
+    def restore_fixture_version(self, version):
+        with self.connection() as db:
+            if db.execute('SELECT 1 FROM lease').fetchone():
+                raise ValueError('An active writer forbids fixture recovery')
+            row = db.execute('SELECT payload,sha FROM versions WHERE id=?', (version,)).fetchone()
+            if not row or digest(row[0]) != row[1]:
+                raise ValueError('Unverified fixture backup')
+            json.loads(row[0])
+            db.execute('UPDATE head SET version=?', (version,))
+
+
+class Control:
+    def __init__(self):
+        self.pause = False
+        self.read_held = threading.Event()
+        self.release = threading.Event()
+        self.events = []
+
+
+def fixture_server(store, credentials, control):
+    class Handler(http.server.BaseHTTPRequestHandler):
+        def log_message(self, *_):
+            pass
+
+        def respond(self, status, value=None):
+            body = value if isinstance(value, bytes) else encoded(value or {})
+            self.send_response(status)
+            self.send_header('Content-Type', 'application/json')
+            self.send_header('Content-Length', str(len(body)))
+            self.end_headers()
+            try:
+                self.wfile.write(body)
+            except (BrokenPipeError, ConnectionResetError):
+                pass
+
+        def actor(self):
+            header = self.headers.get('Authorization', '')
+            for actor, password in credentials.items():
+                expected = 'Basic ' + base64.b64encode((actor + ':' + password).encode()).decode()
+                if secrets.compare_digest(header, expected):
+                    return actor
+            return None
+
+        def dispatch(self):
+            actor = self.actor()
+            route = urllib.parse.urlsplit(self.path)
+            if not actor:
+                self.respond(401)
+                return
+            control.events.append({'method': self.command, 'path': route.path, 'actor': actor})
+            if self.command == 'GET' and route.path == '/state':
+                lease = store.lock()
+                if control.pause and lease and lease[0] == actor:
+                    control.read_held.set()
+                    if not control.release.wait(25):
+                        self.respond(503)
+                        return
+                self.respond(200, store.read())
+                return
+            length = int(self.headers.get('Content-Length', '0'))
+            if length < 0 or length > 65536:
+                self.respond(413)
+                return
+            try:
+                value = json.loads(self.rfile.read(length)) if length else {}
+            except ValueError:
+                self.respond(400)
+                return
+            if not isinstance(value, dict):
+                self.respond(400)
+                return
+            if route.path == '/lock' and self.command in {'POST', 'DELETE'}:
+                status, response = (store.acquire if self.command == 'POST' else store.unlock)(actor, value)
+                self.respond(status, response)
+            elif route.path == '/state' and self.command == 'POST':
+                lock_id = urllib.parse.parse_qs(route.query).get('ID', [None])[0]
+                self.respond(store.denied_write(actor, lock_id))
+            else:
+                self.respond(405)
+
+        do_GET = dispatch
+        do_POST = dispatch
+        do_DELETE = dispatch
+
+    server = http.server.ThreadingHTTPServer(('127.0.0.1', 0), Handler)
+    server.daemon_threads = True
+    return server
+
+
+def run_probe(terraform, folder):
+    folder.mkdir(parents=True, exist_ok=False)
+    private = folder / 'private'
+    private.mkdir(mode=0o700)
+    os.chmod(folder, 0o700)
+    credentials = {actor: secrets.token_urlsafe(32) for actor in ['writer-a', 'writer-b']}
+    base_env = {'PATH': str(terraform.parent), 'HOME': str(private), 'TMPDIR': str(private),
+                'TF_IN_AUTOMATION': '1', 'CHECKPOINT_DISABLE': '1', 'TF_INPUT': '0',
+                'TF_HTTP_RETRY_MAX': '0', 'AWS_EC2_METADATA_DISABLED': 'true'}
+    cli = private / 'empty.tfrc'
+    cli.write_text('provider_installation { filesystem_mirror { path = ' + json.dumps(str(private)) + ' } }\n')
+    base_env['TF_CLI_CONFIG_FILE'] = str(cli)
+    version = json.loads(subprocess.check_output([str(terraform), 'version', '-json'], env=base_env, timeout=15))
+    initial = encoded({'version': 4, 'terraform_version': version['terraform_version'], 'serial': 1,
+                       'lineage': str(uuid.uuid4()), 'outputs': {'fixture': {'value': 'synthetic-state', 'type': 'string'}}, 'resources': []})
+    store = FixtureStore(private / 'fixture.sqlite', initial)
+    control = Control()
+    server = fixture_server(store, credentials, control)
+    base = 'http://127.0.0.1:' + str(server.server_port)
+    thread = threading.Thread(target=server.serve_forever, daemon=True)
+    thread.start()
+    checks, commands = [], []
+    active = None
+
+    def check(name, condition):
+        checks.append({'name': name, 'passed': bool(condition)})
+        if not condition:
+            raise AssertionError(name)
+
+    def environment(actor):
+        return {**base_env, 'TF_HTTP_USERNAME': actor, 'TF_HTTP_PASSWORD': credentials[actor]}
+
+    def native(actor, arguments, expected_exit=0):
+        result = subprocess.run([str(terraform), *arguments], cwd=private / actor,
+                                env=environment(actor), capture_output=True, text=True, timeout=20)
+        commands.append({'actor': actor, 'arguments': arguments, 'exitCode': result.returncode, 'expectedExitCode': expected_exit})
+        (private / ('command-' + str(len(commands)) + '.log')).write_text(result.stdout + '\n' + result.stderr)
+        return result
+
+    def request(actor, method, path, value=None, password=None):
+        header = base64.b64encode((actor + ':' + (password or credentials[actor])).encode()).decode()
+        req = urllib.request.Request(base + path, data=encoded(value) if value is not None else None,
+                                     method=method, headers={'Authorization': 'Basic ' + header})
+        opener = urllib.request.build_opener(urllib.request.ProxyHandler({}))
+        try:
+            with opener.open(req, timeout=5) as response:
+                return response.status
+        except urllib.error.HTTPError as error:
+            return error.code
+
+    try:
+        for actor in credentials:
+            workspace = private / actor
+            workspace.mkdir()
+            (workspace / 'main.tf.json').write_text(json.dumps({'terraform': {'required_version': '>= 1.10.0, < 2.0.0', 'backend': {'http': {}}}, 'output': {'fixture': {'value': 'synthetic-state'}}}))
+            (workspace / 'backend.hcl').write_text('address = ' + json.dumps(base + '/state') + '\nlock_address = ' + json.dumps(base + '/lock') + '\nunlock_address = ' + json.dumps(base + '/lock') + '\nlock_method = "POST"\nunlock_method = "DELETE"\n')
+            check('native init ' + actor, native(actor, ['init', '-input=false', '-no-color', '-backend-config=backend.hcl']).returncode == 0)
+        pulled = native('writer-a', ['state', 'pull'])
+        check('native reads synthetic lineage and payload', pulled.returncode == 0 and all(json.loads(pulled.stdout).get(k) == json.loads(initial)[k] for k in ['version', 'serial', 'lineage', 'outputs', 'resources']))
+        check('unknown credential denied', request('writer-a', 'GET', '/state', password='invalid-fixture-password') == 401)
+        control.pause = True
+        active = subprocess.Popen([str(terraform), 'plan', '-input=false', '-no-color', '-lock-timeout=0s'], cwd=private / 'writer-a', env=environment('writer-a'), stdout=subprocess.PIPE, stderr=subprocess.STDOUT, text=True)
+        check('real native plan holds lock while reading', control.read_held.wait(12) and active.poll() is None and store.lock() is not None)
+        current = store.lock()[1]
+        competing = native('writer-b', ['plan', '-input=false', '-no-color', '-lock-timeout=0s'], expected_exit=1)
+        check('second native writer excluded', competing.returncode == 1 and 'Error acquiring the state lock' in competing.stderr + competing.stdout)
+        check('foreign actor cannot unlock owner', request('writer-b', 'DELETE', '/lock', {'ID': current['ID']}) == 409 and store.lock()[1]['ID'] == current['ID'])
+        check('incorrect lock ID cannot unlock owner', request('writer-a', 'DELETE', '/lock', {'ID': 'wrong-fixture-lock'}) == 409 and store.lock()[1]['ID'] == current['ID'])
+        check('foreign writer cannot replace state', request('writer-b', 'POST', '/state?ID=' + current['ID'], {}) == 409 and store.read() == initial)
+        try:
+            store.restore_fixture_version(1)
+            refused = False
+        except ValueError:
+            refused = True
+        check('recovery refuses an active writer', refused)
+        control.pause = False
+        control.release.set()
+        output, _ = active.communicate(timeout=15)
+        (private / 'writer-a-plan.log').write_text(output)
+        commands.append({'actor': 'writer-a', 'arguments': ['plan', '-input=false', '-no-color', '-lock-timeout=0s'], 'exitCode': active.returncode, 'expectedExitCode': 0})
+        check('native plan succeeds and releases owned lock', active.returncode == 0 and store.lock() is None)
+        check('plan-only clients never write state', not any(e['method'] == 'POST' and e['path'] == '/state' and e['actor'] == 'writer-a' for e in control.events) and store.read() == initial)
+        changed = json.loads(initial)
+        changed['serial'] = 2
+        changed['outputs']['fixture']['value'] = 'synthetic-new-version'
+        changed_id = store.add_fixture_version(encoded(changed))
+        reopened = FixtureStore(private / 'fixture.sqlite', b'not-a-new-seed')
+        check('local fixture versions survive reopen', json.loads(reopened.read())['serial'] == 2)
+        reopened.restore_fixture_version(1)
+        check('verified fixture recovery restores exact bytes', reopened.read() == initial)
+        restored = native('writer-b', ['state', 'pull'])
+        check('native observes restored lineage and payload', restored.returncode == 0 and json.loads(restored.stdout) == json.loads(pulled.stdout))
+        with reopened.connection() as db:
+            db.execute('UPDATE versions SET payload=? WHERE id=?', (b'corrupted-synthetic-backup', changed_id))
+        try:
+            reopened.restore_fixture_version(changed_id)
+            refused = False
+        except ValueError:
+            refused = True
+        check('corrupt fixture backup cannot replace good state', refused and reopened.read() == initial)
+        abandoned = {'ID': str(uuid.uuid4()), 'Operation': 'synthetic-abandoned-writer'}
+        reopened.acquire('writer-a', abandoned)
+        restarted = FixtureStore(private / 'fixture.sqlite', b'not-a-new-seed')
+        check('uncertain abandoned lock persists across reopen', restarted.lock()[1]['ID'] == abandoned['ID'])
+        check('abandoned lock still needs matching owner and ID', restarted.unlock('writer-b', abandoned)[0] == 409 and restarted.unlock('writer-a', abandoned)[0] == 200)
+    finally:
+        control.pause = False
+        control.release.set()
+        if active is not None and active.poll() is None:
+            active.terminate()
+            try:
+                active.communicate(timeout=5)
+            except subprocess.TimeoutExpired:
+                active.kill()
+                active.communicate(timeout=5)
+        server.shutdown()
+        server.server_close()
+        thread.join(timeout=5)
+    report = {'passed': all(c['passed'] for c in checks), 'scope': 'isolated-loopback-http-state-protocol',
+              'sourceSha256': digest(Path(__file__).read_bytes()), 'terraformVersion': version['terraform_version'],
+              'terraformSha256': digest(terraform.read_bytes()), 'checks': checks, 'commands': commands,
+              'initialSyntheticStateSha256': digest(initial), 'selectedBackendVerified': False,
+              'migrationAuthorized': False, 'boundary': 'Actual Terraform init/plan/state pull against a synthetic loopback HTTP fixture and local SQLite version/lock store. No apply, project backend, TLS, cloud authentication, S3/Azure/GCS behavior, migration or application-system qualification.'}
+    serialized = json.dumps(report, indent=2) + '\n'
+    if any(secret in serialized for secret in credentials.values()):
+        raise ValueError('Credential appeared in public fixture evidence')
+    (folder / 'report.json').write_text(serialized)
+    return report
+
+
+if __name__ == '__main__':
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--terraform', type=Path, default=shutil.which('terraform'))
+    parser.add_argument('--work-dir', type=Path, required=True)
+    args = parser.parse_args()
+    if not args.terraform:
+        parser.error('Install a local Terraform executable or provide --terraform.')
+    result = run_probe(Path(args.terraform).resolve(strict=True), args.work_dir.resolve())
+    print(json.dumps({'passed': result['passed'], 'checks': len(result['checks']), 'report': str(args.work_dir / 'report.json'), 'selectedBackendVerified': False}))

package/src/runtime/structured-source.json

@@ -0,0 +1 @@
+"\"\"\"Provider-neutral flat output boundary. Never executes model-supplied actions.\"\"\"\nimport json\nimport math\n\nclass InvalidModelOutput(ValueError):\n    pass\n\ndef _object(pairs):\n    result = {}\n    for key, value in pairs:\n        if key in result:\n            raise InvalidModelOutput('Duplicate field')\n        result[key] = value\n    return result\n\ndef decode_output(text, fields):\n    if not isinstance(text, str):\n        raise InvalidModelOutput('Expected JSON text')\n    try:\n        if len(text.encode('utf-8')) > 131072:\n            raise InvalidModelOutput('Oversized output')\n        value = json.loads(text, object_pairs_hook=_object,\n                           parse_constant=lambda _: (_ for _ in ()).throw(InvalidModelOutput('Non-finite number')))\n    except (ValueError, UnicodeError, RecursionError) as error:\n        raise InvalidModelOutput('Invalid JSON output') from None\n    if not isinstance(value, dict) or set(value) != {f['name'] for f in fields}:\n        raise InvalidModelOutput('Output fields do not match contract')\n    for field in fields:\n        item = value[field['name']]\n        kind = field['type']\n        if kind == 'string':\n            if not isinstance(item, str) or len(item) > field.get('maxLength', 4096):\n                raise InvalidModelOutput('Invalid string output')\n            try:\n                item.encode('utf-8')\n            except UnicodeError:\n                raise InvalidModelOutput('Invalid Unicode output') from None\n            if 'values' in field and item not in field['values']:\n                raise InvalidModelOutput('Value outside enumeration')\n        elif kind == 'boolean':\n            if type(item) is not bool:\n                raise InvalidModelOutput('Invalid boolean output')\n        elif kind == 'number':\n            if type(item) not in (int, float) or abs(item) > 1e308 or not math.isfinite(item):\n                raise InvalidModelOutput('Invalid numeric output')\n        else:\n            raise InvalidModelOutput('Unsupported output contract')\n    return value\n"

package/src/runtime/structured-web-app.js

@@ -0,0 +1,71 @@
+'use strict';
+const byId=id=>document.getElementById(id);
+let config,accessToken=null,expiresAt=0,pending=null,sessionEpoch=0;
+const status=text=>{byId('status').textContent=text;};
+const signedIn=()=>!!accessToken&&Date.now()<expiresAt;
+function ready(){
+ const enabled=signedIn();byId('question').disabled=!enabled;byId('submit').disabled=!enabled||!!pending;
+ byId('sign-in').hidden=enabled;byId('sign-out').hidden=!enabled;
+}
+function clearPrivateView(){byId('question').value='';byId('answer').replaceChildren();byId('citations').replaceChildren();}
+function endSession(){sessionEpoch++;accessToken=null;expiresAt=0;if(pending)pending.abort();pending=null;sessionStorage.removeItem('atmem-oauth');clearPrivateView();ready();}
+const random=()=>Array.from(crypto.getRandomValues(new Uint8Array(32)),b=>b.toString(16).padStart(2,'0')).join('');
+function endpoint(value,fallback){const result=new URL(value||fallback,config.authOrigin);if(result.protocol!=='https:')throw Error('Invalid sign-in endpoint');return result;}
+async function signIn(){
+ const verifier=random(),state=random();sessionStorage.setItem('atmem-oauth',JSON.stringify({verifier,state,created:Date.now()}));
+ const digest=new Uint8Array(await crypto.subtle.digest('SHA-256',new TextEncoder().encode(verifier)));
+ const challenge=btoa(String.fromCharCode(...digest)).replaceAll('+','-').replaceAll('/','_').replaceAll('=','');
+ const url=endpoint(config.authorizationEndpoint,'/oauth2/authorize');
+ url.search=new URLSearchParams({client_id:config.clientId,response_type:'code',scope:config.scopes||'openid atmem/ask',redirect_uri:location.origin+'/',state,code_challenge:challenge,code_challenge_method:'S256'});location.assign(url);
+}
+async function initialize(){
+ const response=await fetch('/config.json',{cache:'no-store'});if(!response.ok)throw Error('Configuration unavailable');config=await response.json();
+ if(new URL(config.authOrigin).protocol!=='https:'||typeof config.clientId!=='string'||!Number.isInteger(config.maxInputBytes)||config.maxInputBytes<1||config.maxInputBytes>1000000)throw Error('Invalid configuration');
+ config.fields=JSON.parse(new TextDecoder().decode(Uint8Array.from(atob(config.fieldsBase64),c=>c.charCodeAt(0))));
+ if(!Array.isArray(config.fields)||!config.fields.length||config.fields.length>24||config.fields.some(f=>!f||typeof f.name!=='string'||typeof f.description!=='string'||!['string','boolean','number'].includes(f.type)))throw Error('Invalid result configuration');
+ byId('question').maxLength=config.maxInputBytes;
+ const query=new URLSearchParams(location.search),code=query.get('code');
+ if(query.has('error')){history.replaceState(null,'','/');sessionStorage.removeItem('atmem-oauth');throw Error('Sign-in was not completed');}
+ if(code){
+  const saved=JSON.parse(sessionStorage.getItem('atmem-oauth')||'null');sessionStorage.removeItem('atmem-oauth');history.replaceState(null,'','/');
+  if(!saved||saved.state!==query.get('state')||!Number.isFinite(saved.created)||Date.now()-saved.created>600000||saved.created>Date.now()+5000)throw Error('Sign-in state expired or mismatched');
+  const tokenResponse=await fetch(endpoint(config.tokenEndpoint,'/oauth2/token'),{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded'},body:new URLSearchParams({grant_type:'authorization_code',client_id:config.clientId,code,redirect_uri:location.origin+'/',code_verifier:saved.verifier})});
+  if(!tokenResponse.ok)throw Error('Sign-in could not be completed');const tokens=await tokenResponse.json();
+  if(typeof tokens.access_token!=='string'||!tokens.access_token||!Number.isFinite(tokens.expires_in)||tokens.expires_in<=0)throw Error('Invalid sign-in response');
+  accessToken=tokens.access_token;expiresAt=Date.now()+tokens.expires_in*1000;sessionEpoch++;ready();status('Signed in. Submit input for a result you can review.');
+ }else{ready();status('Sign in to use this workspace.');}
+}
+function renderResult(result){
+ if(!result.result||typeof result.result!=='object'||Array.isArray(result.result)||result.requiresHumanReview!==true)throw Error('The result could not be verified.');
+ const valid=Object.keys(result.result).length===config.fields.length&&config.fields.every(field=>{
+  const value=result.result[field.name];return typeof value===field.type&&(field.type!=='number'||Number.isFinite(value))&&(field.type!=='string'||Array.from(value).length<=(field.maxLength||4096))&&(!field.values||field.values.includes(value));
+ });
+ if(!valid)throw Error('The result could not be verified.');
+ const fragment=document.createDocumentFragment();
+ for(const field of config.fields){const value=result.result[field.name],label=document.createElement('dt'),item=document.createElement('dd');label.textContent=field.description;item.textContent=typeof value==='boolean'?(value?'Yes':'No'):String(value);fragment.append(label,item);}
+ byId('answer').replaceChildren(fragment);status('Result prepared. Review it before taking action.');
+}
+byId('sign-in').addEventListener('click',()=>signIn().catch(()=>status('Sign-in could not be started. Please retry.')));
+byId('sign-out').addEventListener('click',()=>{
+ endSession();
+ if(config.localLogout===true){status('Workspace cleared. Your identity-provider session may still be active. Close this browser on a shared device.');return;}
+ const url=endpoint(config.logoutEndpoint,'/logout');url.search=new URLSearchParams({client_id:config.clientId,[config.logoutParameter||'logout_uri']:location.origin+'/'});location.assign(url);
+});
+byId('ask').addEventListener('submit',async event=>{
+ event.preventDefault();if(pending)return;
+ if(!signedIn()){endSession();status('Your session expired. Sign in again.');return;}
+ const text=byId('question').value.trim();if(!text||new TextEncoder().encode(text).length>config.maxInputBytes){status('Use input of at most '+config.maxInputBytes.toLocaleString()+' UTF-8 bytes.');return;}
+ const epoch=sessionEpoch,token=accessToken,controller=new AbortController();pending=controller;ready();byId('answer').replaceChildren();status('Preparing a result…');
+ const timer=setTimeout(()=>controller.abort(),config.requestDeadlineMs||28000);
+ try{
+  const response=await fetch('/api/ask',{method:'POST',headers:{'Content-Type':'application/json',Authorization:'Bearer '+token},body:JSON.stringify({text}),signal:controller.signal,cache:'no-store'});
+  if(epoch!==sessionEpoch||accessToken!==token)return;
+  if(response.status===401){endSession();status('Your session expired. Sign in again.');return;}
+  if(response.status===403){endSession();status('Access is unavailable or permissions changed. Sign in again or contact the app owner.');return;}
+  const result=await response.json();if(epoch!==sessionEpoch||accessToken!==token)return;
+  if(!response.ok){if(result.error==='data_retention_unverified')throw Error('This workspace needs its data-handling setup checked by the app owner. Your input was not sent to the AI.');throw Error('The AI result is unavailable or could not be verified. Please try again later.');}
+  renderResult(result);
+ }catch(error){if(epoch===sessionEpoch&&accessToken===token)status(error.name==='AbortError'?'The request timed out. Please try again later.':error.message);}
+ finally{clearTimeout(timer);if(pending===controller)pending=null;ready();}
+});
+initialize().catch(()=>{endSession();status('Sign-in or configuration could not be verified. Please retry sign-in.');});

package/src/runtime/structured-web-source.json

@@ -0,0 +1 @@
+"'use strict';\nconst byId=id=>document.getElementById(id);\nlet config,accessToken=null,expiresAt=0,pending=null,sessionEpoch=0;\nconst status=text=>{byId('status').textContent=text;};\nconst signedIn=()=>!!accessToken&&Date.now()<expiresAt;\nfunction ready(){\n const enabled=signedIn();byId('question').disabled=!enabled;byId('submit').disabled=!enabled||!!pending;\n byId('sign-in').hidden=enabled;byId('sign-out').hidden=!enabled;\n}\nfunction clearPrivateView(){byId('question').value='';byId('answer').replaceChildren();byId('citations').replaceChildren();}\nfunction endSession(){sessionEpoch++;accessToken=null;expiresAt=0;if(pending)pending.abort();pending=null;sessionStorage.removeItem('atmem-oauth');clearPrivateView();ready();}\nconst random=()=>Array.from(crypto.getRandomValues(new Uint8Array(32)),b=>b.toString(16).padStart(2,'0')).join('');\nfunction endpoint(value,fallback){const result=new URL(value||fallback,config.authOrigin);if(result.protocol!=='https:')throw Error('Invalid sign-in endpoint');return result;}\nasync function signIn(){\n const verifier=random(),state=random();sessionStorage.setItem('atmem-oauth',JSON.stringify({verifier,state,created:Date.now()}));\n const digest=new Uint8Array(await crypto.subtle.digest('SHA-256',new TextEncoder().encode(verifier)));\n const challenge=btoa(String.fromCharCode(...digest)).replaceAll('+','-').replaceAll('/','_').replaceAll('=','');\n const url=endpoint(config.authorizationEndpoint,'/oauth2/authorize');\n url.search=new URLSearchParams({client_id:config.clientId,response_type:'code',scope:config.scopes||'openid atmem/ask',redirect_uri:location.origin+'/',state,code_challenge:challenge,code_challenge_method:'S256'});location.assign(url);\n}\nasync function initialize(){\n const response=await fetch('/config.json',{cache:'no-store'});if(!response.ok)throw Error('Configuration unavailable');config=await response.json();\n if(new URL(config.authOrigin).protocol!=='https:'||typeof config.clientId!=='string'||!Number.isInteger(config.maxInputBytes)||config.maxInputBytes<1||config.maxInputBytes>1000000)throw Error('Invalid configuration');\n config.fields=JSON.parse(new TextDecoder().decode(Uint8Array.from(atob(config.fieldsBase64),c=>c.charCodeAt(0))));\n if(!Array.isArray(config.fields)||!config.fields.length||config.fields.length>24||config.fields.some(f=>!f||typeof f.name!=='string'||typeof f.description!=='string'||!['string','boolean','number'].includes(f.type)))throw Error('Invalid result configuration');\n byId('question').maxLength=config.maxInputBytes;\n const query=new URLSearchParams(location.search),code=query.get('code');\n if(query.has('error')){history.replaceState(null,'','/');sessionStorage.removeItem('atmem-oauth');throw Error('Sign-in was not completed');}\n if(code){\n  const saved=JSON.parse(sessionStorage.getItem('atmem-oauth')||'null');sessionStorage.removeItem('atmem-oauth');history.replaceState(null,'','/');\n  if(!saved||saved.state!==query.get('state')||!Number.isFinite(saved.created)||Date.now()-saved.created>600000||saved.created>Date.now()+5000)throw Error('Sign-in state expired or mismatched');\n  const tokenResponse=await fetch(endpoint(config.tokenEndpoint,'/oauth2/token'),{method:'POST',headers:{'Content-Type':'application/x-www-form-urlencoded'},body:new URLSearchParams({grant_type:'authorization_code',client_id:config.clientId,code,redirect_uri:location.origin+'/',code_verifier:saved.verifier})});\n  if(!tokenResponse.ok)throw Error('Sign-in could not be completed');const tokens=await tokenResponse.json();\n  if(typeof tokens.access_token!=='string'||!tokens.access_token||!Number.isFinite(tokens.expires_in)||tokens.expires_in<=0)throw Error('Invalid sign-in response');\n  accessToken=tokens.access_token;expiresAt=Date.now()+tokens.expires_in*1000;sessionEpoch++;ready();status('Signed in. Submit input for a result you can review.');\n }else{ready();status('Sign in to use this workspace.');}\n}\nfunction renderResult(result){\n if(!result.result||typeof result.result!=='object'||Array.isArray(result.result)||result.requiresHumanReview!==true)throw Error('The result could not be verified.');\n const valid=Object.keys(result.result).length===config.fields.length&&config.fields.every(field=>{\n  const value=result.result[field.name];return typeof value===field.type&&(field.type!=='number'||Number.isFinite(value))&&(field.type!=='string'||Array.from(value).length<=(field.maxLength||4096))&&(!field.values||field.values.includes(value));\n });\n if(!valid)throw Error('The result could not be verified.');\n const fragment=document.createDocumentFragment();\n for(const field of config.fields){const value=result.result[field.name],label=document.createElement('dt'),item=document.createElement('dd');label.textContent=field.description;item.textContent=typeof value==='boolean'?(value?'Yes':'No'):String(value);fragment.append(label,item);}\n byId('answer').replaceChildren(fragment);status('Result prepared. Review it before taking action.');\n}\nbyId('sign-in').addEventListener('click',()=>signIn().catch(()=>status('Sign-in could not be started. Please retry.')));\nbyId('sign-out').addEventListener('click',()=>{\n endSession();\n if(config.localLogout===true){status('Workspace cleared. Your identity-provider session may still be active. Close this browser on a shared device.');return;}\n const url=endpoint(config.logoutEndpoint,'/logout');url.search=new URLSearchParams({client_id:config.clientId,[config.logoutParameter||'logout_uri']:location.origin+'/'});location.assign(url);\n});\nbyId('ask').addEventListener('submit',async event=>{\n event.preventDefault();if(pending)return;\n if(!signedIn()){endSession();status('Your session expired. Sign in again.');return;}\n const text=byId('question').value.trim();if(!text||new TextEncoder().encode(text).length>config.maxInputBytes){status('Use input of at most '+config.maxInputBytes.toLocaleString()+' UTF-8 bytes.');return;}\n const epoch=sessionEpoch,token=accessToken,controller=new AbortController();pending=controller;ready();byId('answer').replaceChildren();status('Preparing a result…');\n const timer=setTimeout(()=>controller.abort(),config.requestDeadlineMs||28000);\n try{\n  const response=await fetch('/api/ask',{method:'POST',headers:{'Content-Type':'application/json',Authorization:'Bearer '+token},body:JSON.stringify({text}),signal:controller.signal,cache:'no-store'});\n  if(epoch!==sessionEpoch||accessToken!==token)return;\n  if(response.status===401){endSession();status('Your session expired. Sign in again.');return;}\n  if(response.status===403){endSession();status('Access is unavailable or permissions changed. Sign in again or contact the app owner.');return;}\n  const result=await response.json();if(epoch!==sessionEpoch||accessToken!==token)return;\n  if(!response.ok){if(result.error==='data_retention_unverified')throw Error('This workspace needs its data-handling setup checked by the app owner. Your input was not sent to the AI.');throw Error('The AI result is unavailable or could not be verified. Please try again later.');}\n  renderResult(result);\n }catch(error){if(epoch===sessionEpoch&&accessToken===token)status(error.name==='AbortError'?'The request timed out. Please try again later.':error.message);}\n finally{clearTimeout(timer);if(pending===controller)pending=null;ready();}\n});\ninitialize().catch(()=>{endSession();status('Sign-in or configuration could not be verified. Please retry sign-in.');});\n"

package/src/runtime/structured_http.py

@@ -0,0 +1,105 @@
+"""Provider-neutral HTTP boundary; identity and model transports are explicit adapters."""
+import asyncio
+import json
+import threading
+from pathlib import Path
+from fastapi import FastAPI, Request
+from fastapi.responses import FileResponse, JSONResponse
+from starlette.concurrency import run_in_threadpool
+from structured_output import _object
+
+class PolicyUnverified(Exception):
+    pass
+
+class AccessDenied(Exception):
+    pass
+
+def create_app(config, verify, infer, public_config, static_root=None, token_header=None, protect_assets=False, require_origin=False, origin_validator=None):
+    root = Path(static_root or Path(__file__).parent / "web")
+    app = FastAPI(docs_url=None, redoc_url=None, openapi_url=None)
+    # Small internal apps admit a burst of five model requests per process.
+    # Capacity is bounded; excess callers receive a retryable 429, never a hidden
+    # unbounded queue. Destination quota/latency still needs real qualification.
+    slots = threading.BoundedSemaphore(5)
+
+    @app.middleware("http")
+    async def headers(request, next_handler):
+        denied = False
+        if protect_assets and request.url.path != "/healthz":
+            try:
+                await run_in_threadpool(verify, request.headers.get(token_header, ""))
+            except Exception:
+                denied = True
+        response = JSONResponse({"error": "access_denied"}, status_code=401) if denied else await next_handler(request)
+        response.headers.update({"Cache-Control": "no-store", "X-Content-Type-Options": "nosniff", "Referrer-Policy": "no-referrer",
+                                 "Content-Security-Policy": config.get("csp", "default-src 'self'; script-src 'self'; style-src 'self'; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'"), "Strict-Transport-Security": "max-age=31536000"})
+        return response
+
+    @app.get("/healthz")
+    def health():
+        # Startup liveness, not proof that identity/model/account policy is ready.
+        return {"status": "running"}
+
+    @app.get("/config.json")
+    def get_public_config():
+        return public_config()
+
+
+    @app.get("/")
+    def index():
+        return FileResponse(root / "index.html")
+
+    @app.get("/app.js")
+    def script():
+        return FileResponse(root / "app.js", media_type="text/javascript")
+
+    @app.get("/app.css")
+    def style():
+        return FileResponse(root / "app.css", media_type="text/css")
+
+    @app.post("/api/ask")
+    async def ask(request: Request):
+        origin = request.headers.get("origin")
+        origin_ok=origin_validator(origin,request.headers.get('host','')) if origin_validator else not ((require_origin and not origin) or (origin and origin != config["PUBLIC_ORIGIN"]))
+        if not origin_ok:
+            return JSONResponse({"error": "access_denied"}, status_code=403)
+        auth = request.headers.get("authorization", "")
+        token = request.headers.get(token_header, "") if token_header else auth[7:] if auth.startswith("Bearer ") else ""
+        try:
+            await run_in_threadpool(verify, token)
+        except Exception:
+            return JSONResponse({"error": "access_denied"}, status_code=401)
+        if request.headers.get("content-type", "").split(";")[0].lower() != "application/json":
+            return JSONResponse({"error": "invalid_request"}, status_code=400)
+        if not slots.acquire(blocking=False):
+            return JSONResponse({"error": "busy"}, status_code=429)
+        try:
+            raw = bytearray()
+            async with asyncio.timeout(5):
+                async for chunk in request.stream():
+                    raw.extend(chunk)
+                    if len(raw) > config["max_input"] * 6 + 100:
+                        return JSONResponse({"error": "input_too_large"}, status_code=413)
+            body = json.loads(raw.decode("utf-8"), object_pairs_hook=_object)
+            text = body.get("text") if isinstance(body, dict) and set(body) == {"text"} else None
+            if not isinstance(text, str) or not text.strip() or len(text.encode("utf-8")) > config["max_input"]:
+                return JSONResponse({"error": "invalid_request"}, status_code=400)
+            try:
+                result = await run_in_threadpool(infer, text)
+            except (ValueError, UnicodeError, RecursionError):
+                return JSONResponse({"error": "invalid_model_output"}, status_code=503)
+            # Never return an inference result after expiry, or if injected verification fails.
+            await run_in_threadpool(verify, token)
+            return {"result": result, "requiresHumanReview": True}
+        except PolicyUnverified:
+            return JSONResponse({"error": "data_retention_unverified"}, status_code=503)
+        except AccessDenied:
+            return JSONResponse({"error": "access_denied"}, status_code=403)
+        except (ValueError, UnicodeError, RecursionError):
+            return JSONResponse({"error": "invalid_request_or_output"}, status_code=400)
+        except Exception:
+            return JSONResponse({"error": "temporarily_unavailable"}, status_code=503)
+        finally:
+            slots.release()
+    return app
+