@byok-sdk/core 0.30.1 → 0.31.0

package/dist/index.js

@@ -1,3170 +1,15 @@
 import { z } from 'zod';
 
-// src/errors.ts
-var CORE_ERROR_CODES = {
-  routine_schedule_invalid: "routine_schedule_invalid",
-  retention_input_invalid: "retention_input_invalid",
-  retention_collect_failed: "retention_collect_failed",
-  // identity + content addressing
-  tenant_id_invalid: "tenant_id_invalid",
-  content_hash_invalid: "content_hash_invalid",
-  // caller-supplied instants (see `time.ts`)
-  timestamp_not_canonical: "timestamp_not_canonical",
-  // capability declaration (ADR-010)
-  capability_declaration_invalid: "capability_declaration_invalid",
-  capability_unavailable: "capability_unavailable",
-  // device proof (§12.6.3)
-  proof_envelope_invalid: "proof_envelope_invalid",
-  proof_canonicalization_failed: "proof_canonicalization_failed",
-  // device assertion (plan device-assertion-broker) — deliberately its own
-  // code rather than reusing `proof_envelope_invalid`: the two envelopes are
-  // non-interchangeable by design, and one shared "envelope was bad" code is
-  // exactly how a log stops being able to say which authentication surface was
-  // probed.
-  assertion_envelope_invalid: "assertion_envelope_invalid",
-  // sealed provider provisioning (plan web-sealed-provisioning). Messages
-  // never carry plaintext, ciphertext, or key material — only which check
-  // failed.
-  webcrypto_unavailable: "webcrypto_unavailable",
-  sealed_secret_invalid: "sealed_secret_invalid",
-  sealed_secret_open_failed: "sealed_secret_open_failed",
-  provider_provisioning_request_invalid: "provider_provisioning_request_invalid",
-  // mailbox (§12.7.3)
-  mailbox_message_not_found: "mailbox_message_not_found",
-  mailbox_cursor_regression: "mailbox_cursor_regression",
-  mailbox_cursor_ahead_of_delivery: "mailbox_cursor_ahead_of_delivery",
-  // board coordination (§12.3)
-  board_item_not_found: "board_item_not_found",
-  board_item_exists: "board_item_exists",
-  board_transition_invalid: "board_transition_invalid",
-  board_status_conflict: "board_status_conflict",
-  board_claim_conflict: "board_claim_conflict",
-  board_not_held: "board_not_held",
-  // truth records (§12.3, §12.6.4)
-  truth_record_not_found: "truth_record_not_found",
-  terminal_conflict: "terminal_conflict",
-  truth_revision_conflict: "truth_revision_conflict",
-  // presence + activity hints (§12.3)
-  activity_capacity_invalid: "activity_capacity_invalid",
-  activity_batch_invalid: "activity_batch_invalid",
-  hint_ttl_invalid: "hint_ttl_invalid",
-  hint_rate_limited: "hint_rate_limited",
-  // object manifest (§12.7.4, §12.7.8)
-  object_key_prefix_invalid: "object_key_prefix_invalid",
-  object_not_found: "object_not_found",
-  object_state_invalid: "object_state_invalid",
-  // storage entitlement / usage / reservation (§12.7.6-12.7.7)
-  storage_entitlement_missing: "storage_entitlement_missing",
-  storage_entitlement_version_conflict: "storage_entitlement_version_conflict",
-  storage_reservation_not_found: "storage_reservation_not_found",
-  storage_object_too_large: "storage_object_too_large",
-  storage_quota_exceeded: "storage_quota_exceeded",
-  storage_reservation_expired: "storage_reservation_expired",
-  storage_integrity_mismatch: "storage_integrity_mismatch",
-  storage_write_suspended: "storage_write_suspended",
-  // skill packs (plan `skill-pack-delivery-channel`)
-  skill_pack_manifest_invalid: "skill_pack_manifest_invalid",
-  skill_pack_frontmatter_invalid: "skill_pack_frontmatter_invalid"
-};
-var ByokCoreError = class extends Error {
-  code;
-  constructor(code, message, options) {
-    super(message, options);
-    this.name = "ByokCoreError";
-    this.code = code;
-  }
-};
-var CoreConflictError = class extends ByokCoreError {
-  current;
-  observedAt;
-  constructor(code, message, current, observedAt, options) {
-    super(code, message, options);
-    this.name = "CoreConflictError";
-    this.current = current;
-    this.observedAt = observedAt;
-  }
-};
-function isCoreError(value, code) {
-  if (!(value instanceof ByokCoreError)) return false;
-  return code === void 0 || value.code === code;
-}
-function isCoreConflictError(value, code) {
-  if (!(value instanceof CoreConflictError)) return false;
-  return code === void 0 || value.code === code;
-}
-
-// src/tenant.ts
-var TENANT_ID_MAX_LENGTH = 200;
-var TENANT_KEY_SEPARATOR = "\0";
-function tenantId(value) {
-  const candidate = value;
-  if (typeof candidate !== "string") {
-    throw new ByokCoreError(
-      "tenant_id_invalid",
-      `Tenant id must be a string, received ${typeof candidate}.`
-    );
-  }
-  if (candidate.length === 0) {
-    throw new ByokCoreError("tenant_id_invalid", "Tenant id must not be empty.");
-  }
-  if (candidate.trim() !== candidate) {
-    throw new ByokCoreError(
-      "tenant_id_invalid",
-      "Tenant id must not have leading or trailing whitespace."
-    );
-  }
-  if (candidate.length > TENANT_ID_MAX_LENGTH) {
-    throw new ByokCoreError(
-      "tenant_id_invalid",
-      `Tenant id must be at most ${TENANT_ID_MAX_LENGTH} characters.`
-    );
-  }
-  if (candidate.includes(TENANT_KEY_SEPARATOR)) {
-    throw new ByokCoreError("tenant_id_invalid", "Tenant id must not contain a NUL character.");
-  }
-  return candidate;
-}
-function isTenantId(value) {
-  if (typeof value !== "string") return false;
-  return value.length > 0 && value.trim() === value && value.length <= TENANT_ID_MAX_LENGTH && !value.includes(TENANT_KEY_SEPARATOR);
-}
-function tenantKey(tenant, ...parts) {
-  return [tenant, ...parts].join(TENANT_KEY_SEPARATOR);
-}
-
-// src/principals.ts
-var PRINCIPAL_KINDS = ["device", "control-plane"];
-function isDevicePrincipal(principal) {
-  return principal.kind === "device";
-}
-function isControlPlanePrincipal(principal) {
-  return principal.kind === "control-plane";
-}
-function principalTenant(principal) {
-  return principal.tenantId;
-}
-
-// src/time.ts
-var CANONICAL_TIMESTAMP_PATTERN = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;
-function isCanonicalTimestamp(value) {
-  if (typeof value !== "string") return false;
-  if (!CANONICAL_TIMESTAMP_PATTERN.test(value)) return false;
-  const parsed = Date.parse(value);
-  if (!Number.isFinite(parsed)) return false;
-  return new Date(parsed).toISOString() === value;
-}
-function assertCanonicalTimestamp(value, field) {
-  if (!isCanonicalTimestamp(value)) {
-    throw new ByokCoreError(
-      "timestamp_not_canonical",
-      `${field} must be a canonical ISO-8601 UTC instant (YYYY-MM-DDTHH:mm:ss.sssZ), received ${JSON.stringify(value)}.`
-    );
-  }
-  return value;
-}
-
-// src/mailbox.ts
-var MAILBOX_MESSAGE_STATES = ["pending", "acked", "expired"];
-
-// src/board.ts
-var BOARD_STATUSES = ["todo", "in_progress", "in_review", "done", "closed"];
-var BOARD_TRANSITIONS = {
-  todo: ["in_progress", "closed"],
-  in_progress: ["todo", "in_review", "closed"],
-  in_review: ["in_progress", "done", "closed"],
-  done: [],
-  closed: []
-};
-function isLegalBoardTransition(from, to) {
-  return BOARD_TRANSITIONS[from].includes(to);
-}
-
-// src/truth.ts
-var TRUTH_RECORD_KINDS = ["task.terminal", "profile", "memory"];
-
-// src/presence.ts
-var PRESENCE_LEVELS = ["online", "thinking", "working", "error", "offline"];
-
-// src/blob.ts
-var CONTENT_HASH_PATTERN = /^sha256:[0-9a-f]{64}$/;
-function contentHash(value) {
-  if (!CONTENT_HASH_PATTERN.test(value)) {
-    throw new ByokCoreError(
-      "content_hash_invalid",
-      `Content hash must match ${CONTENT_HASH_PATTERN.source}, received ${JSON.stringify(value)}.`
-    );
-  }
-  return value;
-}
-function isContentHash(value) {
-  return typeof value === "string" && CONTENT_HASH_PATTERN.test(value);
-}
-var OBJECT_KEY_PREFIX_PATTERN = /^[a-z0-9][a-z0-9._-]*(\/[a-z0-9][a-z0-9._-]*)*$/;
-function objectKeyPrefix(value) {
-  if (!OBJECT_KEY_PREFIX_PATTERN.test(value)) {
-    throw new ByokCoreError(
-      "object_key_prefix_invalid",
-      `Object key prefix must match ${OBJECT_KEY_PREFIX_PATTERN.source}, received ${JSON.stringify(value)}.`
-    );
-  }
-  return value;
-}
-function tenantObjectKey(tenant, hash, prefix) {
-  const hex2 = hash.slice("sha256:".length);
-  const key = `tenants/${tenant}/objects/sha256/${hex2}`;
-  return prefix === void 0 ? key : `${prefix}/${key}`;
-}
-var OBJECT_STATES = ["pending", "committed", "delete_pending", "deleted"];
-var OBJECT_STATE_TRANSITIONS = {
-  pending: ["committed", "delete_pending"],
-  committed: ["delete_pending"],
-  delete_pending: ["deleted", "committed"],
-  deleted: []
-};
-function isLegalObjectTransition(from, to) {
-  return OBJECT_STATE_TRANSITIONS[from].includes(to);
-}
-
-// src/quota.ts
-var STORAGE_WRITE_KINDS = ["object", "inline"];
-var STORAGE_RESERVATION_STATES = [
-  "reserved",
-  "committed",
-  "aborted",
-  "expired"
-];
-var STORAGE_WRITE_POSTURES = ["normal", "warning", "blocked", "suspended"];
-var STORAGE_ERROR_CODES = [
-  "storage_object_too_large",
-  "storage_quota_exceeded",
-  "storage_reservation_expired",
-  "storage_integrity_mismatch",
-  "storage_write_suspended"
-];
-var STORAGE_ERROR_HTTP_STATUS = {
-  storage_object_too_large: 413,
-  storage_quota_exceeded: 507,
-  storage_reservation_expired: 409,
-  storage_integrity_mismatch: 422,
-  storage_write_suspended: 423
-};
-var CAPABILITY_DECLARATION_SCHEMA_ID = "byok-capabilities-v1";
-var CAPABILITY_NAME_PATTERN = /^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;
-var CapabilityDeclarationSchema = z.object({
-  schema: z.literal(CAPABILITY_DECLARATION_SCHEMA_ID),
-  /** Monotonic per deployment. Lets a client cache and detect a rollout. */
-  version: z.number().int().nonnegative(),
-  capabilities: z.array(z.string().regex(CAPABILITY_NAME_PATTERN))
-}).superRefine((declaration, ctx) => {
-  const seen = /* @__PURE__ */ new Set();
-  for (const [index, name] of declaration.capabilities.entries()) {
-    if (seen.has(name)) {
-      ctx.addIssue({
-        code: "custom",
-        path: ["capabilities", index],
-        message: `Duplicate capability ${JSON.stringify(name)}.`
-      });
-    }
-    seen.add(name);
-  }
-});
-function parseCapabilityDeclaration(input) {
-  const result = CapabilityDeclarationSchema.safeParse(input);
-  if (!result.success) {
-    throw new ByokCoreError(
-      "capability_declaration_invalid",
-      `Invalid capability declaration: ${result.error.issues.map((issue) => `${issue.path.join(".") || "<root>"}: ${issue.message}`).join("; ")}`,
-      { cause: result.error }
-    );
-  }
-  return result.data;
-}
-function hasCapability(declaration, capability) {
-  return declaration.capabilities.includes(capability);
-}
-function assertCapability(declaration, capability) {
-  if (!hasCapability(declaration, capability)) {
-    throw new ByokCoreError(
-      "capability_unavailable",
-      `Capability ${JSON.stringify(capability)} is not declared by this deployment.`
-    );
-  }
-}
-var SKILL_PACK_MANIFEST_SCHEMA_ID = "byok-skill-pack-v1";
-var SKILL_PACK_NAME_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
-var SKILL_PACK_NAME_MAX_LENGTH = 64;
-var SKILL_PACK_DESCRIPTION_MAX_LENGTH = 1024;
-var SKILL_PACK_VERSION_PATTERN = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;
-var SKILL_PACK_FILE_PATH_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*(\/[A-Za-z0-9][A-Za-z0-9._-]*)*$/;
-var SKILL_PACK_FILE_PATH_MAX_LENGTH = 200;
-var SKILL_PACK_ENTRY_PATH = "SKILL.md";
-var SKILL_PACK_FILE_MAX_BYTES = 262144;
-var SKILL_PACK_MAX_BYTES = 1048576;
-var SKILL_PACK_MAX_FILES = 64;
-var SKILL_PACK_FORBIDDEN_FIELDS = [
-  "exec",
-  "command",
-  "entrypoint",
-  "run",
-  "script",
-  "shell",
-  "env",
-  "environment",
-  "credential",
-  "credentials",
-  "secret",
-  "secrets",
-  "token",
-  "apiKey",
-  "api_key",
-  "allowedTools",
-  "allowed-tools",
-  "hooks",
-  "preinstall",
-  "postinstall"
-];
-var ContentHashSchema = z.string().regex(CONTENT_HASH_PATTERN).transform((value) => contentHash(value));
-var SkillPackFileSchema = z.strictObject({
-  path: z.string().min(1).max(SKILL_PACK_FILE_PATH_MAX_LENGTH).regex(SKILL_PACK_FILE_PATH_PATTERN),
-  contentHash: ContentHashSchema,
-  byteSize: z.number().int().nonnegative().max(SKILL_PACK_FILE_MAX_BYTES)
-});
-var SkillPackManifestSchema = z.strictObject({
-  schema: z.literal(SKILL_PACK_MANIFEST_SCHEMA_ID),
-  name: z.string().min(1).max(SKILL_PACK_NAME_MAX_LENGTH).regex(SKILL_PACK_NAME_PATTERN),
-  version: z.string().regex(SKILL_PACK_VERSION_PATTERN),
-  description: z.string().min(1).max(SKILL_PACK_DESCRIPTION_MAX_LENGTH),
-  files: z.array(SkillPackFileSchema).min(1).max(SKILL_PACK_MAX_FILES),
-  contentHash: ContentHashSchema
-});
-function parseSkillPackManifest(input) {
-  if (typeof input === "object" && input !== null) {
-    const present = SKILL_PACK_FORBIDDEN_FIELDS.filter(
-      (field) => Object.prototype.hasOwnProperty.call(input, field)
-    );
-    if (present.length > 0) {
-      throw new ByokCoreError(
-        "skill_pack_manifest_invalid",
-        `A skill pack manifest carries no executable or credential surface; refusing ${present.map((field) => JSON.stringify(field)).join(", ")}.`
-      );
-    }
-  }
-  const result = SkillPackManifestSchema.safeParse(input);
-  if (!result.success) {
-    throw new ByokCoreError(
-      "skill_pack_manifest_invalid",
-      `Invalid skill pack manifest: ${result.error.issues.map((issue) => `${issue.path.join(".") || "<root>"}: ${issue.message}`).join("; ")}`,
-      { cause: result.error }
-    );
-  }
-  return result.data;
-}
-function skillPackContentHashInput(manifest) {
-  const rows = [...manifest.files].sort((left, right) => left.path < right.path ? -1 : left.path > right.path ? 1 : 0).map((file) => `${file.path}
+var CORE_ERROR_CODES={routine_schedule_invalid:"routine_schedule_invalid",retention_input_invalid:"retention_input_invalid",retention_collect_failed:"retention_collect_failed",tenant_id_invalid:"tenant_id_invalid",content_hash_invalid:"content_hash_invalid",timestamp_not_canonical:"timestamp_not_canonical",capability_declaration_invalid:"capability_declaration_invalid",capability_unavailable:"capability_unavailable",proof_envelope_invalid:"proof_envelope_invalid",proof_canonicalization_failed:"proof_canonicalization_failed",assertion_envelope_invalid:"assertion_envelope_invalid",webcrypto_unavailable:"webcrypto_unavailable",sealed_secret_invalid:"sealed_secret_invalid",sealed_secret_open_failed:"sealed_secret_open_failed",provider_provisioning_request_invalid:"provider_provisioning_request_invalid",mailbox_message_not_found:"mailbox_message_not_found",mailbox_cursor_regression:"mailbox_cursor_regression",mailbox_cursor_ahead_of_delivery:"mailbox_cursor_ahead_of_delivery",board_item_not_found:"board_item_not_found",board_item_exists:"board_item_exists",board_transition_invalid:"board_transition_invalid",board_status_conflict:"board_status_conflict",board_claim_conflict:"board_claim_conflict",board_not_held:"board_not_held",truth_record_not_found:"truth_record_not_found",terminal_conflict:"terminal_conflict",truth_revision_conflict:"truth_revision_conflict",activity_capacity_invalid:"activity_capacity_invalid",activity_batch_invalid:"activity_batch_invalid",hint_ttl_invalid:"hint_ttl_invalid",hint_rate_limited:"hint_rate_limited",object_key_prefix_invalid:"object_key_prefix_invalid",object_not_found:"object_not_found",object_state_invalid:"object_state_invalid",storage_entitlement_missing:"storage_entitlement_missing",storage_entitlement_version_conflict:"storage_entitlement_version_conflict",storage_reservation_not_found:"storage_reservation_not_found",storage_object_too_large:"storage_object_too_large",storage_quota_exceeded:"storage_quota_exceeded",storage_reservation_expired:"storage_reservation_expired",storage_integrity_mismatch:"storage_integrity_mismatch",storage_write_suspended:"storage_write_suspended",skill_pack_manifest_invalid:"skill_pack_manifest_invalid",skill_pack_frontmatter_invalid:"skill_pack_frontmatter_invalid"};var ByokCoreError=class extends Error{code;constructor(code,message,options){super(message,options);this.name="ByokCoreError";this.code=code;}};var CoreConflictError=class extends ByokCoreError{current;observedAt;constructor(code,message,current,observedAt,options){super(code,message,options);this.name="CoreConflictError";this.current=current;this.observedAt=observedAt;}};function isCoreError(value,code){if(!(value instanceof ByokCoreError))return false;return code===void 0||value.code===code}function isCoreConflictError(value,code){if(!(value instanceof CoreConflictError))return false;return code===void 0||value.code===code}var TENANT_ID_MAX_LENGTH=200;var TENANT_KEY_SEPARATOR="\0";function tenantId(value){const candidate=value;if(typeof candidate!=="string"){throw new ByokCoreError("tenant_id_invalid",`Tenant id must be a string, received ${typeof candidate}.`)}if(candidate.length===0){throw new ByokCoreError("tenant_id_invalid","Tenant id must not be empty.")}if(candidate.trim()!==candidate){throw new ByokCoreError("tenant_id_invalid","Tenant id must not have leading or trailing whitespace.")}if(candidate.length>TENANT_ID_MAX_LENGTH){throw new ByokCoreError("tenant_id_invalid",`Tenant id must be at most ${TENANT_ID_MAX_LENGTH} characters.`)}if(candidate.includes(TENANT_KEY_SEPARATOR)){throw new ByokCoreError("tenant_id_invalid","Tenant id must not contain a NUL character.")}return candidate}function isTenantId(value){if(typeof value!=="string")return false;return value.length>0&&value.trim()===value&&value.length<=TENANT_ID_MAX_LENGTH&&!value.includes(TENANT_KEY_SEPARATOR)}function tenantKey(tenant,...parts){return [tenant,...parts].join(TENANT_KEY_SEPARATOR)}var PRINCIPAL_KINDS=["device","control-plane"];function isDevicePrincipal(principal){return principal.kind==="device"}function isControlPlanePrincipal(principal){return principal.kind==="control-plane"}function principalTenant(principal){return principal.tenantId}var CANONICAL_TIMESTAMP_PATTERN=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/;function isCanonicalTimestamp(value){if(typeof value!=="string")return false;if(!CANONICAL_TIMESTAMP_PATTERN.test(value))return false;const parsed=Date.parse(value);if(!Number.isFinite(parsed))return false;return new Date(parsed).toISOString()===value}function assertCanonicalTimestamp(value,field){if(!isCanonicalTimestamp(value)){throw new ByokCoreError("timestamp_not_canonical",`${field} must be a canonical ISO-8601 UTC instant (YYYY-MM-DDTHH:mm:ss.sssZ), received ${JSON.stringify(value)}.`)}return value}var MAILBOX_MESSAGE_STATES=["pending","acked","expired"];var BOARD_STATUSES=["todo","in_progress","in_review","done","closed"];var BOARD_TRANSITIONS={todo:["in_progress","closed"],in_progress:["todo","in_review","closed"],in_review:["in_progress","done","closed"],done:[],closed:[]};function isLegalBoardTransition(from,to){return BOARD_TRANSITIONS[from].includes(to)}var TRUTH_RECORD_KINDS=["task.terminal","profile","memory"];var PRESENCE_LEVELS=["online","thinking","working","error","offline"];var CONTENT_HASH_PATTERN=/^sha256:[0-9a-f]{64}$/;function contentHash(value){if(!CONTENT_HASH_PATTERN.test(value)){throw new ByokCoreError("content_hash_invalid",`Content hash must match ${CONTENT_HASH_PATTERN.source}, received ${JSON.stringify(value)}.`)}return value}function isContentHash(value){return typeof value==="string"&&CONTENT_HASH_PATTERN.test(value)}var OBJECT_KEY_PREFIX_PATTERN=/^[a-z0-9][a-z0-9._-]*(\/[a-z0-9][a-z0-9._-]*)*$/;function objectKeyPrefix(value){if(!OBJECT_KEY_PREFIX_PATTERN.test(value)){throw new ByokCoreError("object_key_prefix_invalid",`Object key prefix must match ${OBJECT_KEY_PREFIX_PATTERN.source}, received ${JSON.stringify(value)}.`)}return value}function tenantObjectKey(tenant,hash,prefix){const hex2=hash.slice("sha256:".length);const key=`tenants/${tenant}/objects/sha256/${hex2}`;return prefix===void 0?key:`${prefix}/${key}`}var OBJECT_STATES=["pending","committed","delete_pending","deleted"];var OBJECT_STATE_TRANSITIONS={pending:["committed","delete_pending"],committed:["delete_pending"],delete_pending:["deleted","committed"],deleted:[]};function isLegalObjectTransition(from,to){return OBJECT_STATE_TRANSITIONS[from].includes(to)}var STORAGE_WRITE_KINDS=["object","inline"];var STORAGE_RESERVATION_STATES=["reserved","committed","aborted","expired"];var STORAGE_WRITE_POSTURES=["normal","warning","blocked","suspended"];var STORAGE_ERROR_CODES=["storage_object_too_large","storage_quota_exceeded","storage_reservation_expired","storage_integrity_mismatch","storage_write_suspended"];var STORAGE_ERROR_HTTP_STATUS={storage_object_too_large:413,storage_quota_exceeded:507,storage_reservation_expired:409,storage_integrity_mismatch:422,storage_write_suspended:423};var CAPABILITY_DECLARATION_SCHEMA_ID="byok-capabilities-v1";var CAPABILITY_NAME_PATTERN=/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/;var CapabilityDeclarationSchema=z.object({schema:z.literal(CAPABILITY_DECLARATION_SCHEMA_ID),version:z.number().int().nonnegative(),capabilities:z.array(z.string().regex(CAPABILITY_NAME_PATTERN))}).superRefine((declaration,ctx)=>{const seen=new Set;for(const[index,name]of declaration.capabilities.entries()){if(seen.has(name)){ctx.addIssue({code:"custom",path:["capabilities",index],message:`Duplicate capability ${JSON.stringify(name)}.`});}seen.add(name);}});function parseCapabilityDeclaration(input){const result=CapabilityDeclarationSchema.safeParse(input);if(!result.success){throw new ByokCoreError("capability_declaration_invalid",`Invalid capability declaration: ${result.error.issues.map(issue=>`${issue.path.join(".")||"<root>"}: ${issue.message}`).join("; ")}`,{cause:result.error})}return result.data}function hasCapability(declaration,capability){return declaration.capabilities.includes(capability)}function assertCapability(declaration,capability){if(!hasCapability(declaration,capability)){throw new ByokCoreError("capability_unavailable",`Capability ${JSON.stringify(capability)} is not declared by this deployment.`)}}var SKILL_PACK_MANIFEST_SCHEMA_ID="byok-skill-pack-v1";var SKILL_PACK_NAME_PATTERN=/^[a-z0-9][a-z0-9._-]*$/;var SKILL_PACK_NAME_MAX_LENGTH=64;var SKILL_PACK_DESCRIPTION_MAX_LENGTH=1024;var SKILL_PACK_VERSION_PATTERN=/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/;var SKILL_PACK_FILE_PATH_PATTERN=/^[A-Za-z0-9][A-Za-z0-9._-]*(\/[A-Za-z0-9][A-Za-z0-9._-]*)*$/;var SKILL_PACK_FILE_PATH_MAX_LENGTH=200;var SKILL_PACK_ENTRY_PATH="SKILL.md";var SKILL_PACK_FILE_MAX_BYTES=262144;var SKILL_PACK_MAX_BYTES=1048576;var SKILL_PACK_MAX_FILES=64;var SKILL_PACK_FORBIDDEN_FIELDS=["exec","command","entrypoint","run","script","shell","env","environment","credential","credentials","secret","secrets","token","apiKey","api_key","allowedTools","allowed-tools","hooks","preinstall","postinstall"];var ContentHashSchema=z.string().regex(CONTENT_HASH_PATTERN).transform(value=>contentHash(value));var SkillPackFileSchema=z.strictObject({path:z.string().min(1).max(SKILL_PACK_FILE_PATH_MAX_LENGTH).regex(SKILL_PACK_FILE_PATH_PATTERN),contentHash:ContentHashSchema,byteSize:z.number().int().nonnegative().max(SKILL_PACK_FILE_MAX_BYTES)});var SkillPackManifestSchema=z.strictObject({schema:z.literal(SKILL_PACK_MANIFEST_SCHEMA_ID),name:z.string().min(1).max(SKILL_PACK_NAME_MAX_LENGTH).regex(SKILL_PACK_NAME_PATTERN),version:z.string().regex(SKILL_PACK_VERSION_PATTERN),description:z.string().min(1).max(SKILL_PACK_DESCRIPTION_MAX_LENGTH),files:z.array(SkillPackFileSchema).min(1).max(SKILL_PACK_MAX_FILES),contentHash:ContentHashSchema});function parseSkillPackManifest(input){if(typeof input==="object"&&input!==null){const present=SKILL_PACK_FORBIDDEN_FIELDS.filter(field=>Object.prototype.hasOwnProperty.call(input,field));if(present.length>0){throw new ByokCoreError("skill_pack_manifest_invalid",`A skill pack manifest carries no executable or credential surface; refusing ${present.map(field=>JSON.stringify(field)).join(", ")}.`)}}const result=SkillPackManifestSchema.safeParse(input);if(!result.success){throw new ByokCoreError("skill_pack_manifest_invalid",`Invalid skill pack manifest: ${result.error.issues.map(issue=>`${issue.path.join(".")||"<root>"}: ${issue.message}`).join("; ")}`,{cause:result.error})}return result.data}function skillPackContentHashInput(manifest){const rows=[...manifest.files].sort((left,right)=>left.path<right.path?-1:left.path>right.path?1:0).map(file=>`${file.path}
 ${file.contentHash}
 ${file.byteSize}
-`);
-  return [
-    `${SKILL_PACK_MANIFEST_SCHEMA_ID}
-`,
-    `${manifest.name}
-`,
-    `${manifest.version}
-`,
-    `${manifest.description.length}
-`,
-    `${manifest.description}
-`,
-    `${manifest.files.length}
-`,
-    ...rows
-  ].join("");
-}
-var SKILL_PACK_REJECTIONS = [
-  "path-unsafe",
-  "duplicate-path",
-  "entry-missing",
-  "file-count-over-cap",
-  "file-over-cap",
-  "pack-over-cap",
-  "size-mismatch",
-  "hash-mismatch",
-  "name-mismatch"
-];
-function isSkillPackPathSafe(path) {
-  return path.length > 0 && path.length <= SKILL_PACK_FILE_PATH_MAX_LENGTH && SKILL_PACK_FILE_PATH_PATTERN.test(path);
-}
-function checkSkillPackManifest(manifest) {
-  if (manifest.files.length > SKILL_PACK_MAX_FILES) {
-    return {
-      ok: false,
-      reason: "file-count-over-cap",
-      detail: `${manifest.files.length} files exceeds the ${SKILL_PACK_MAX_FILES} file limit.`
-    };
-  }
-  const seen = /* @__PURE__ */ new Set();
-  let bytes = 0;
-  for (const file of manifest.files) {
-    if (!isSkillPackPathSafe(file.path)) {
-      return { ok: false, reason: "path-unsafe", detail: `${JSON.stringify(file.path)} is not a safe relative path.` };
-    }
-    if (seen.has(file.path)) {
-      return { ok: false, reason: "duplicate-path", detail: `${JSON.stringify(file.path)} is declared twice.` };
-    }
-    seen.add(file.path);
-    if (file.byteSize > SKILL_PACK_FILE_MAX_BYTES) {
-      return {
-        ok: false,
-        reason: "file-over-cap",
-        detail: `${JSON.stringify(file.path)} declares ${file.byteSize} bytes, over the ${SKILL_PACK_FILE_MAX_BYTES} byte per-file limit.`
-      };
-    }
-    bytes += file.byteSize;
-  }
-  if (!seen.has(SKILL_PACK_ENTRY_PATH)) {
-    return {
-      ok: false,
-      reason: "entry-missing",
-      detail: `A skill pack must carry ${SKILL_PACK_ENTRY_PATH}.`
-    };
-  }
-  if (bytes > SKILL_PACK_MAX_BYTES) {
-    return {
-      ok: false,
-      reason: "pack-over-cap",
-      detail: `${bytes} declared bytes exceeds the ${SKILL_PACK_MAX_BYTES} byte pack limit.`
-    };
-  }
-  return { ok: true, bytes };
-}
-function checkSkillPackFileContent(declared, observed) {
-  if (!isSkillPackPathSafe(declared.path)) {
-    return { ok: false, reason: "path-unsafe", detail: `${JSON.stringify(declared.path)} is not a safe relative path.` };
-  }
-  if (observed.byteSize > SKILL_PACK_FILE_MAX_BYTES) {
-    return {
-      ok: false,
-      reason: "file-over-cap",
-      detail: `${JSON.stringify(declared.path)} delivered ${observed.byteSize} bytes, over the ${SKILL_PACK_FILE_MAX_BYTES} byte per-file limit.`
-    };
-  }
-  if (observed.byteSize !== declared.byteSize) {
-    return {
-      ok: false,
-      reason: "size-mismatch",
-      detail: `${JSON.stringify(declared.path)} declared ${declared.byteSize} bytes and delivered ${observed.byteSize}.`
-    };
-  }
-  if (observed.contentHash !== declared.contentHash) {
-    return {
-      ok: false,
-      reason: "hash-mismatch",
-      detail: `${JSON.stringify(declared.path)} declared ${declared.contentHash} and delivered ${observed.contentHash}.`
-    };
-  }
-  return { ok: true, bytes: observed.byteSize };
-}
-var SKILL_FRONTMATTER_FIELDS = ["name", "description"];
-var FRONTMATTER_DELIMITER = "---";
-var FRONTMATTER_LINE_PATTERN = /^([A-Za-z][A-Za-z0-9_-]*):[ \t]*(.*)$/;
-function unquote(value) {
-  const trimmed = value.trim();
-  if (trimmed.length >= 2) {
-    const first = trimmed[0];
-    const last = trimmed[trimmed.length - 1];
-    if (first === '"' && last === '"' || first === "'" && last === "'") {
-      const inner = trimmed.slice(1, -1);
-      return inner.includes(first) ? void 0 : inner;
-    }
-  }
-  return trimmed;
-}
-function parseSkillFrontmatter(text) {
-  const reject = (message) => {
-    throw new ByokCoreError("skill_pack_frontmatter_invalid", message);
-  };
-  const lines = text.split("\n");
-  if (lines[0]?.trimEnd() !== FRONTMATTER_DELIMITER) {
-    reject(`A skill file must open with a ${FRONTMATTER_DELIMITER} frontmatter delimiter.`);
-  }
-  const closing = lines.findIndex((line, index) => index > 0 && line.trimEnd() === FRONTMATTER_DELIMITER);
-  if (closing < 0) reject(`The frontmatter block is not closed by a ${FRONTMATTER_DELIMITER} line.`);
-  const fields = /* @__PURE__ */ new Map();
-  for (const line of lines.slice(1, closing)) {
-    if (line.trim().length === 0) continue;
-    const match = FRONTMATTER_LINE_PATTERN.exec(line);
-    if (match === null) reject(`Frontmatter line ${JSON.stringify(line)} is not a \`key: value\` pair.`);
-    const key = match[1];
-    if (!SKILL_FRONTMATTER_FIELDS.includes(key)) {
-      reject(
-        `Frontmatter key ${JSON.stringify(key)} is not one of ${SKILL_FRONTMATTER_FIELDS.join(", ")}; a skill declares no tools, hooks, or environment.`
-      );
-    }
-    if (fields.has(key)) reject(`Frontmatter key ${JSON.stringify(key)} is declared twice.`);
-    const value = unquote(match[2]);
-    if (value === void 0 || value.length === 0) {
-      reject(`Frontmatter key ${JSON.stringify(key)} has no usable value.`);
-    }
-    fields.set(key, value);
-  }
-  const name = fields.get("name");
-  const description = fields.get("description");
-  if (name === void 0) reject("Frontmatter is missing `name`.");
-  if (description === void 0) reject("Frontmatter is missing `description`.");
-  if (name.length > SKILL_PACK_NAME_MAX_LENGTH || !SKILL_PACK_NAME_PATTERN.test(name)) {
-    reject(
-      `Frontmatter \`name\` must match ${SKILL_PACK_NAME_PATTERN.source} and be at most ${SKILL_PACK_NAME_MAX_LENGTH} characters.`
-    );
-  }
-  if (description.length > SKILL_PACK_DESCRIPTION_MAX_LENGTH) {
-    reject(`Frontmatter \`description\` exceeds ${SKILL_PACK_DESCRIPTION_MAX_LENGTH} characters.`);
-  }
-  return { name, description };
-}
-function checkSkillPackEntry(manifest, entryText) {
-  const frontmatter = parseSkillFrontmatter(entryText);
-  if (frontmatter.name !== manifest.name) {
-    return {
-      ok: false,
-      reason: "name-mismatch",
-      detail: `${SKILL_PACK_ENTRY_PATH} declares ${JSON.stringify(frontmatter.name)} but the manifest declares ${JSON.stringify(manifest.name)}.`
-    };
-  }
-  return { ok: true, bytes: new TextEncoder().encode(entryText).length };
-}
-
-// src/stores.ts
-var CORE_STORE_NAMES = [
-  "mailbox",
-  "board",
-  "truth",
-  "presence",
-  "objects",
-  "quota",
-  "skillPacks"
-];
-
-// src/ports-contract.ts
-var CORE_NON_COMPOSITION_PORT_NAMES = [];
-var CORE_PORT_METHODS = {
-  mailbox: [
-    "append",
-    "readUsage",
-    "readAfter",
-    "recordDelivery",
-    "advanceCursor",
-    "readCursor",
-    "collectExpired"
-  ],
-  board: ["create", "get", "list", "claim", "unclaim", "updateStatus"],
-  truth: ["writeTerminal", "writeSnapshot", "getRecord", "listManifest"],
-  presence: ["publish", "read", "list", "collectExpired"],
-  objects: [
-    "putManifest",
-    "commit",
-    "get",
-    "list",
-    "addReference",
-    "removeReference",
-    "markDeletePending",
-    "markDeleted",
-    "collectExpired"
-  ],
-  quota: [
-    "readEntitlement",
-    "writeEntitlement",
-    "readUsage",
-    "readStatus",
-    "readReservation",
-    "reserve",
-    "finalizeReservation",
-    "abortReservation",
-    "collectExpired"
-  ],
-  skillPacks: ["publish", "get", "list", "readFile"]
-};
-var CORE_PORT_INTERFACES = {
-  mailbox: "MailboxStore",
-  board: "BoardStore",
-  truth: "TruthStore",
-  presence: "PresenceStore",
-  objects: "ObjectStore",
-  quota: "QuotaStore",
-  skillPacks: "SkillPackStore"
-};
-var DEVICE_PROOF_SCHEMA_ID = "byok-device-proof-v1";
-var DEVICE_PROOF_DOMAIN_PREFIX = "byok-device-proof-v1\n";
-var DEVICE_PROOF_VERSION = 1;
-var DEVICE_PROOF_ALGORITHMS = ["ed25519"];
-var DEVICE_PROOF_HEADER = "x-byok-device-proof";
-var BASE64URL_PATTERN = /^[A-Za-z0-9_-]+$/;
-var HTTP_METHOD_PATTERN = /^[A-Z]+$/;
-function canonicalizationFailure(path, reason) {
-  return new ByokCoreError(
-    "proof_canonicalization_failed",
-    `Cannot canonicalize ${path}: ${reason}`
-  );
-}
-function isPlainObject(value) {
-  const prototype = Object.getPrototypeOf(value);
-  return prototype === Object.prototype || prototype === null;
-}
-function canonicalizeValue(value, path, seen) {
-  if (value === null) return "null";
-  switch (typeof value) {
-    case "boolean":
-      return value ? "true" : "false";
-    case "string":
-      return JSON.stringify(value);
-    case "number": {
-      if (!Number.isSafeInteger(value)) {
-        throw canonicalizationFailure(
-          path,
-          `only safe integers are canonicalizable, received ${String(value)}`
-        );
-      }
-      return String(value === 0 ? 0 : value);
-    }
-    case "undefined":
-      throw canonicalizationFailure(path, "undefined has no canonical form");
-    case "bigint":
-      throw canonicalizationFailure(path, "bigint is not a JSON type");
-    case "function":
-    case "symbol":
-      throw canonicalizationFailure(path, `${typeof value} is not a JSON type`);
-    case "object":
-      break;
-    default:
-      throw canonicalizationFailure(path, `unsupported type ${typeof value}`);
-  }
-  const objectValue = value;
-  if (seen.has(objectValue)) {
-    throw canonicalizationFailure(path, "circular reference");
-  }
-  seen.add(objectValue);
-  try {
-    if (Array.isArray(objectValue)) {
-      const parts2 = objectValue.map(
-        (entry, index) => canonicalizeValue(entry, `${path}[${index}]`, seen)
-      );
-      return `[${parts2.join(",")}]`;
-    }
-    if (!isPlainObject(objectValue)) {
-      throw canonicalizationFailure(
-        path,
-        "only plain objects and arrays are canonicalizable"
-      );
-    }
-    const keys = Object.keys(objectValue).sort();
-    const record = objectValue;
-    const parts = keys.map((key) => {
-      const encodedKey = JSON.stringify(key);
-      const encodedValue = canonicalizeValue(record[key], `${path}.${key}`, seen);
-      return `${encodedKey}:${encodedValue}`;
-    });
-    return `{${parts.join(",")}}`;
-  } finally {
-    seen.delete(objectValue);
-  }
-}
-function canonicalizeJson(value) {
-  return canonicalizeValue(value, "<root>", /* @__PURE__ */ new Set());
-}
-function canonicalizeJsonBytes(value) {
-  return new TextEncoder().encode(canonicalizeJson(value));
-}
-var DeviceProofProtectedClaimsSchema = z.strictObject({
-  version: z.literal(DEVICE_PROOF_VERSION),
-  tenantId: z.string().min(1),
-  productId: z.string().min(1),
-  deviceId: z.string().min(1),
-  /** Identity of the signing key, resolved against the device row at verify time. */
-  keyId: z.string().min(1),
-  /** Rotation generation. An older epoch is rejected by the verifier, not here. */
-  keyEpoch: z.number().int().nonnegative(),
-  /** Idempotency key: exact replay returns the original result, reuse with a different body is a conflict. */
-  requestId: z.string().min(1),
-  /** Logical operation, e.g. `truth.write`. */
-  operation: z.string().min(1),
-  /** Tenant-scoped resource the operation targets. */
-  resource: z.string().min(1),
-  method: z.string().regex(HTTP_METHOD_PATTERN).optional(),
-  path: z.string().startsWith("/").optional(),
-  operationId: z.string().min(1).optional(),
-  bodySha256: z.string().regex(CONTENT_HASH_PATTERN),
-  /** Bound alongside the hash so a truncation attack cannot hide behind a hash collision claim. */
-  bodySize: z.number().int().nonnegative(),
-  issuedAt: z.iso.datetime(),
-  expiresAt: z.iso.datetime().optional(),
-  nonce: z.string().min(1).optional()
-}).superRefine((claims, ctx) => {
-  const hasRequestLine = claims.method !== void 0 && claims.path !== void 0;
-  const hasOperationId = claims.operationId !== void 0;
-  if (hasRequestLine === hasOperationId) {
-    ctx.addIssue({
-      code: "custom",
-      message: "Claims must carry exactly one request binding: both `method` and `path`, or `operationId`."
-    });
-  }
-  if (!hasRequestLine && (claims.method !== void 0 || claims.path !== void 0)) {
-    ctx.addIssue({
-      code: "custom",
-      message: "`method` and `path` must be supplied together."
-    });
-  }
-});
-var DeviceProofEnvelopeV1Schema = z.strictObject({
-  schema: z.literal(DEVICE_PROOF_SCHEMA_ID),
-  algorithm: z.enum(DEVICE_PROOF_ALGORITHMS),
-  protected: DeviceProofProtectedClaimsSchema,
-  /** base64url, unpadded. */
-  signature: z.string().regex(BASE64URL_PATTERN)
-});
-function parseDeviceProofEnvelope(input) {
-  const result = DeviceProofEnvelopeV1Schema.safeParse(input);
-  if (!result.success) {
-    throw new ByokCoreError(
-      "proof_envelope_invalid",
-      `Invalid device proof envelope: ${result.error.issues.map((issue) => `${issue.path.join(".") || "<root>"}: ${issue.message}`).join("; ")}`,
-      { cause: result.error }
-    );
-  }
-  return result.data;
-}
-function deviceProofCanonicalClaims(claims) {
-  const canonical = {
-    version: claims.version,
-    tenantId: claims.tenantId,
-    productId: claims.productId,
-    deviceId: claims.deviceId,
-    keyId: claims.keyId,
-    keyEpoch: claims.keyEpoch,
-    requestId: claims.requestId,
-    operation: claims.operation,
-    resource: claims.resource,
-    bodySha256: claims.bodySha256,
-    bodySize: claims.bodySize,
-    issuedAt: claims.issuedAt
-  };
-  if (claims.method !== void 0) canonical["method"] = claims.method;
-  if (claims.path !== void 0) canonical["path"] = claims.path;
-  if (claims.operationId !== void 0) canonical["operationId"] = claims.operationId;
-  if (claims.expiresAt !== void 0) canonical["expiresAt"] = claims.expiresAt;
-  if (claims.nonce !== void 0) canonical["nonce"] = claims.nonce;
-  return canonical;
-}
-function deviceProofCanonicalJson(claims) {
-  return canonicalizeJson(deviceProofCanonicalClaims(claims));
-}
-function deviceProofSigningInput(claims) {
-  return new TextEncoder().encode(
-    DEVICE_PROOF_DOMAIN_PREFIX + deviceProofCanonicalJson(claims)
-  );
-}
-var DEVICE_ASSERTION_SCHEMA_ID = "byok-device-assertion-v1";
-var DEVICE_ASSERTION_DOMAIN_PREFIX = "byok-device-assertion-v1\n";
-var DEVICE_ASSERTION_VERSION = 1;
-var TASK_ASSERTION_SCHEMA_ID = "byok-task-assertion-v1";
-var TASK_ASSERTION_DOMAIN_PREFIX = "byok-task-assertion-v1\n";
-var TASK_ASSERTION_VERSION = 1;
-var DEVICE_ASSERTION_ALGORITHMS = ["ed25519"];
-var DEVICE_ASSERTION_DEFAULT_TTL_MS = 12e4;
-var DEVICE_ASSERTION_MAX_TTL_MS = 3e5;
-var DEVICE_ASSERTION_AUDIENCE_MAX_BYTES = 256;
-var JTI_PATTERN = /^[A-Za-z0-9_-]{22}$/;
-var SIGNATURE_PATTERN = /^[A-Za-z0-9_-]{86}$/;
-function utf8ByteLength(value) {
-  return new TextEncoder().encode(value).length;
-}
-var ASSERTION_AUDIENCE = z.string().min(1).refine((value) => utf8ByteLength(value) <= DEVICE_ASSERTION_AUDIENCE_MAX_BYTES, {
-  message: `audience must be at most ${DEVICE_ASSERTION_AUDIENCE_MAX_BYTES} UTF-8 bytes`
-});
-var DeviceAssertionClaimsSchema = z.strictObject({
-  version: z.literal(DEVICE_ASSERTION_VERSION),
-  /** The paired server's origin, normalized (`new URL(serverUrl).origin`). */
-  issuer: z.string().min(1),
-  productId: z.string().min(1),
-  /** The device row this assertion claims to be. A lookup key, never authority — the row is the authority. */
-  deviceId: z.string().min(1),
-  /** Exactly one audience, compared with `===` by every verifier. Never an array, never a prefix. */
-  audience: ASSERTION_AUDIENCE,
-  /** 128-bit CSPRNG token, base64url unpadded. The verifier burns it; the signer never reuses one. */
-  jti: z.string().regex(JTI_PATTERN),
-  issuedAt: z.iso.datetime(),
-  expiresAt: z.iso.datetime()
-});
-var DeviceAssertionEnvelopeV1Schema = z.strictObject({
-  schema: z.literal(DEVICE_ASSERTION_SCHEMA_ID),
-  algorithm: z.enum(DEVICE_ASSERTION_ALGORITHMS),
-  protected: DeviceAssertionClaimsSchema,
-  /** Raw 64-byte Ed25519 signature, base64url unpadded. */
-  signature: z.string().regex(SIGNATURE_PATTERN)
-});
-function parseDeviceAssertionEnvelope(input) {
-  const result = DeviceAssertionEnvelopeV1Schema.safeParse(input);
-  if (!result.success) {
-    throw new ByokCoreError(
-      "assertion_envelope_invalid",
-      `Invalid device assertion envelope: ${result.error.issues.map((issue) => `${issue.path.join(".") || "<root>"}: ${issue.message}`).join("; ")}`,
-      { cause: result.error }
-    );
-  }
-  return result.data;
-}
-function deviceAssertionCanonicalClaims(claims) {
-  const canonical = {
-    version: claims.version,
-    issuer: claims.issuer,
-    productId: claims.productId,
-    deviceId: claims.deviceId,
-    audience: claims.audience,
-    jti: claims.jti,
-    issuedAt: claims.issuedAt,
-    expiresAt: claims.expiresAt
-  };
-  return canonical;
-}
-function deviceAssertionCanonicalJson(claims) {
-  return canonicalizeJson(deviceAssertionCanonicalClaims(claims));
-}
-function deviceAssertionSigningInput(claims) {
-  return new TextEncoder().encode(
-    DEVICE_ASSERTION_DOMAIN_PREFIX + deviceAssertionCanonicalJson(claims)
-  );
-}
-function parseInstant(value) {
-  const parsed = Date.parse(value);
-  return Number.isFinite(parsed) ? parsed : void 0;
-}
-var EDDSA_JWK_X_PATTERN = /^[A-Za-z0-9_-]{43}$/;
-function isUsableDeviceRow(row) {
-  if (row === null || typeof row !== "object") return false;
-  if (row.revoked !== false) return false;
-  const key = row.publicKeyJwkX;
-  return typeof key === "string" && EDDSA_JWK_X_PATTERN.test(key);
-}
-function resolveMaxLifetimeMs(requested) {
-  const maxLifetimeMs = requested ?? DEVICE_ASSERTION_MAX_TTL_MS;
-  if (!Number.isSafeInteger(maxLifetimeMs) || maxLifetimeMs <= 0 || maxLifetimeMs > DEVICE_ASSERTION_MAX_TTL_MS) {
-    return void 0;
-  }
-  return maxLifetimeMs;
-}
-function assertionWindowAdmits(claims, now, maxLifetimeMs) {
-  const issuedAt = parseInstant(claims.issuedAt);
-  const expiresAt = parseInstant(claims.expiresAt);
-  if (issuedAt === void 0 || expiresAt === void 0) return false;
-  if (expiresAt <= issuedAt) return false;
-  if (expiresAt - issuedAt > maxLifetimeMs) return false;
-  const instant = now.getTime();
-  if (!Number.isFinite(instant)) return false;
-  return instant >= issuedAt && instant < expiresAt;
-}
-async function verifyDeviceAssertion(input, deps) {
-  const maxLifetimeMs = resolveMaxLifetimeMs(deps.maxLifetimeMs);
-  if (maxLifetimeMs === void 0) return void 0;
-  let envelope;
-  try {
-    envelope = parseDeviceAssertionEnvelope(input);
-  } catch {
-    return void 0;
-  }
-  const claims = envelope.protected;
-  const row = await deps.lookupDevice(claims.deviceId);
-  if (!isUsableDeviceRow(row)) return void 0;
-  if (!assertionWindowAdmits(claims, deps.now, maxLifetimeMs)) return void 0;
-  const verified = await deps.verifier.verify({
-    algorithm: envelope.algorithm,
-    // The row's key, never an envelope-supplied one.
-    publicKey: row.publicKeyJwkX,
-    signature: envelope.signature,
-    signingInput: deviceAssertionSigningInput(claims)
-  });
-  if (!verified) return void 0;
-  return claims;
-}
-function isNonEmptyExactString(value) {
-  return typeof value === "string" && value.length > 0 && value.trim() === value;
-}
-function isAuthorityRow(row, requestedDeviceId) {
-  if (row === null || typeof row !== "object") return false;
-  const candidate = row;
-  return isTenantId(candidate.tenantId) && isNonEmptyExactString(candidate.productId) && candidate.deviceId === requestedDeviceId;
-}
-async function authenticateDeviceAssertion(input, deps) {
-  if (!isNonEmptyExactString(deps.expected.issuer) || !isNonEmptyExactString(deps.expected.productId) || !isNonEmptyExactString(deps.expected.audience) || utf8ByteLength(deps.expected.audience) > DEVICE_ASSERTION_AUDIENCE_MAX_BYTES) {
-    return void 0;
-  }
-  let authorityRow;
-  const claims = await verifyDeviceAssertion(input, {
-    verifier: deps.verifier,
-    lookupDevice: async (deviceId) => {
-      const row = await deps.lookupDevice(deviceId);
-      if (!isAuthorityRow(row, deviceId)) return void 0;
-      authorityRow = row;
-      return { publicKeyJwkX: row.publicKeyJwkX, revoked: row.revoked };
-    },
-    now: deps.now,
-    ...deps.maxLifetimeMs === void 0 ? {} : { maxLifetimeMs: deps.maxLifetimeMs }
-  });
-  if (claims === void 0 || authorityRow === void 0) return void 0;
-  if (claims.issuer !== deps.expected.issuer || claims.productId !== deps.expected.productId || claims.audience !== deps.expected.audience || authorityRow.productId !== deps.expected.productId || authorityRow.deviceId !== claims.deviceId) {
-    return void 0;
-  }
-  const consumed = await deps.replay.consume({
-    schema: DEVICE_ASSERTION_SCHEMA_ID,
-    tenantId: authorityRow.tenantId,
-    issuer: claims.issuer,
-    productId: authorityRow.productId,
-    deviceId: authorityRow.deviceId,
-    audience: claims.audience,
-    jti: claims.jti,
-    expiresAt: claims.expiresAt
-  });
-  if (!consumed) return void 0;
-  return {
-    lane: "device",
-    device: {
-      kind: "device",
-      tenantId: authorityRow.tenantId,
-      productId: authorityRow.productId,
-      deviceId: authorityRow.deviceId
-    },
-    issuer: claims.issuer,
-    audience: claims.audience,
-    jti: claims.jti,
-    issuedAt: claims.issuedAt,
-    expiresAt: claims.expiresAt
-  };
-}
-var TASK_ASSERTION_AGENT_REF_MAX_BYTES = 160;
-var TASK_ASSERTION_TOOLSET_ID_MAX_LENGTH = 128;
-var AGENT_REF_VALUE = z.string().min(1).max(TASK_ASSERTION_AGENT_REF_MAX_BYTES).refine((value) => utf8ByteLength(value) <= TASK_ASSERTION_AGENT_REF_MAX_BYTES, {
-  message: `AgentRef values must not exceed ${TASK_ASSERTION_AGENT_REF_MAX_BYTES} UTF-8 bytes`
-}).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u, "AgentRef values must not contain control characters");
-var WINDOWS_RESERVED_AGENT_SEGMENT = /^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\..*)?$/iu;
-var TaskAssertionAgentRefSchema = z.object({
-  agentId: AGENT_REF_VALUE.regex(/^[^\\/:<>"|?*]+$/u, "agentId must be one portable pathname segment").refine((value) => value !== "." && value !== "..", "agentId must not be a dot segment").refine(
-    (value) => !/[. ]$/u.test(value) && !WINDOWS_RESERVED_AGENT_SEGMENT.test(value),
-    "agentId must be a portable Windows-safe pathname segment"
-  ),
-  /**
-   * From the FROZEN offer. Contract §8.1 forbids substituting the current
-   * revision read from a working directory's `profile.json`; this module
-   * cannot enforce that (it never reads a file) — the signer's contract does.
-   */
-  profileRevision: AGENT_REF_VALUE
-}).strict();
-var TOOLSET_ID_VALUE = z.string().min(1).max(TASK_ASSERTION_TOOLSET_ID_MAX_LENGTH).regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/u, "toolset ids must be lowercase logical identifiers");
-var TASK_ID_VALUE = z.string().min(1);
-var TaskAssertionClaimsSchema = z.strictObject({
-  version: z.literal(TASK_ASSERTION_VERSION),
-  /** The paired server's origin, normalized (`new URL(serverUrl).origin`). */
-  issuer: z.string().min(1),
-  productId: z.string().min(1),
-  /** The device row this assertion claims to be. A lookup key, never authority. */
-  deviceId: z.string().min(1),
-  /** Exactly one audience, compared with `===`. Participates in the replay key (§8.2(2)). */
-  audience: ASSERTION_AUDIENCE,
-  /** Same 128-bit CSPRNG token shape the device lane uses; burned once per `schema` segment. */
-  jti: z.string().regex(JTI_PATTERN),
-  issuedAt: z.iso.datetime(),
-  expiresAt: z.iso.datetime(),
-  /** The only execution locator (§8.1). No attemptId is minted beside it. */
-  taskId: TASK_ID_VALUE,
-  /** The frozen offer's Agent identity, at the SDK's full AgentRef strength. */
-  agentRef: TaskAssertionAgentRefSchema,
-  /** The frozen toolset this invocation belongs to (the wire's `toolset` field). */
-  toolsetId: TOOLSET_ID_VALUE
-});
-var TaskAssertionEnvelopeV1Schema = z.strictObject({
-  schema: z.literal(TASK_ASSERTION_SCHEMA_ID),
-  algorithm: z.enum(DEVICE_ASSERTION_ALGORITHMS),
-  protected: TaskAssertionClaimsSchema,
-  /** Raw 64-byte Ed25519 signature, base64url unpadded — the device lane's encoding, unchanged. */
-  signature: z.string().regex(SIGNATURE_PATTERN)
-});
-function parseTaskAssertionEnvelope(input) {
-  const result = TaskAssertionEnvelopeV1Schema.safeParse(input);
-  if (!result.success) {
-    throw new ByokCoreError(
-      "assertion_envelope_invalid",
-      `Invalid task assertion envelope: ${result.error.issues.map((issue) => `${issue.path.join(".") || "<root>"}: ${issue.message}`).join("; ")}`,
-      { cause: result.error }
-    );
-  }
-  return result.data;
-}
-function taskAssertionCanonicalClaims(claims) {
-  const canonical = {
-    version: claims.version,
-    issuer: claims.issuer,
-    productId: claims.productId,
-    deviceId: claims.deviceId,
-    audience: claims.audience,
-    jti: claims.jti,
-    issuedAt: claims.issuedAt,
-    expiresAt: claims.expiresAt,
-    taskId: claims.taskId,
-    agentRef: {
-      agentId: claims.agentRef.agentId,
-      profileRevision: claims.agentRef.profileRevision
-    },
-    toolsetId: claims.toolsetId
-  };
-  return canonical;
-}
-function taskAssertionCanonicalJson(claims) {
-  return canonicalizeJson(taskAssertionCanonicalClaims(claims));
-}
-function taskAssertionSigningInput(claims) {
-  return new TextEncoder().encode(
-    TASK_ASSERTION_DOMAIN_PREFIX + taskAssertionCanonicalJson(claims)
-  );
-}
-async function verifyTaskAssertion(input, deps) {
-  const maxLifetimeMs = resolveMaxLifetimeMs(deps.maxLifetimeMs);
-  if (maxLifetimeMs === void 0) return void 0;
-  let envelope;
-  try {
-    envelope = parseTaskAssertionEnvelope(input);
-  } catch {
-    return void 0;
-  }
-  const claims = envelope.protected;
-  const row = await deps.lookupDevice(claims.deviceId);
-  if (!isUsableDeviceRow(row)) return void 0;
-  if (!assertionWindowAdmits(claims, deps.now, maxLifetimeMs)) return void 0;
-  const verified = await deps.verifier.verify({
-    algorithm: envelope.algorithm,
-    publicKey: row.publicKeyJwkX,
-    signature: envelope.signature,
-    signingInput: taskAssertionSigningInput(claims)
-  });
-  if (!verified) return void 0;
-  return claims;
-}
-async function authenticateTaskAssertion(input, deps) {
-  if (!isNonEmptyExactString(deps.expected.issuer) || !isNonEmptyExactString(deps.expected.productId) || !isNonEmptyExactString(deps.expected.audience) || utf8ByteLength(deps.expected.audience) > DEVICE_ASSERTION_AUDIENCE_MAX_BYTES) {
-    return void 0;
-  }
-  let authorityRow;
-  const claims = await verifyTaskAssertion(input, {
-    verifier: deps.verifier,
-    lookupDevice: async (deviceId) => {
-      const row = await deps.lookupDevice(deviceId);
-      if (!isAuthorityRow(row, deviceId)) return void 0;
-      authorityRow = row;
-      return { publicKeyJwkX: row.publicKeyJwkX, revoked: row.revoked };
-    },
-    now: deps.now,
-    ...deps.maxLifetimeMs === void 0 ? {} : { maxLifetimeMs: deps.maxLifetimeMs }
-  });
-  if (claims === void 0 || authorityRow === void 0) return void 0;
-  if (claims.issuer !== deps.expected.issuer || claims.productId !== deps.expected.productId || claims.audience !== deps.expected.audience || authorityRow.productId !== deps.expected.productId || authorityRow.deviceId !== claims.deviceId) {
-    return void 0;
-  }
-  const consumed = await deps.replay.consume({
-    schema: TASK_ASSERTION_SCHEMA_ID,
-    tenantId: authorityRow.tenantId,
-    issuer: claims.issuer,
-    productId: authorityRow.productId,
-    deviceId: authorityRow.deviceId,
-    audience: claims.audience,
-    jti: claims.jti,
-    expiresAt: claims.expiresAt
-  });
-  if (!consumed) return void 0;
-  return {
-    lane: "task",
-    device: {
-      kind: "device",
-      tenantId: authorityRow.tenantId,
-      productId: authorityRow.productId,
-      deviceId: authorityRow.deviceId
-    },
-    issuer: claims.issuer,
-    audience: claims.audience,
-    jti: claims.jti,
-    issuedAt: claims.issuedAt,
-    expiresAt: claims.expiresAt,
-    taskId: claims.taskId,
-    agentRef: claims.agentRef,
-    toolsetId: claims.toolsetId
-  };
-}
-
-// src/webcrypto.ts
-function webCryptoSubtle() {
-  const subtle = globalThis.crypto?.subtle;
-  if (subtle === void 0) {
-    throw new ByokCoreError("webcrypto_unavailable", "WebCrypto subtle is unavailable in this runtime");
-  }
-  return subtle;
-}
-
-// src/hpke.ts
-var KEM_ID = 16;
-var KDF_ID = 1;
-var AEAD_ID = 1;
-var HPKE_P256_PUBLIC_KEY_BYTES = 65;
-var N_SECRET = 32;
-var N_K = 16;
-var N_N = 12;
-var N_H = 32;
-var HPKE_AEAD_TAG_BYTES = 16;
-var MODE_BASE = 0;
-var HPKE_V1 = utf8("HPKE-v1");
-var KEM_SUITE_ID = concat(utf8("KEM"), i2osp(KEM_ID, 2));
-var HPKE_SUITE_ID = concat(utf8("HPKE"), i2osp(KEM_ID, 2), i2osp(KDF_ID, 2), i2osp(AEAD_ID, 2));
-var EMPTY = new Uint8Array(0);
-var ZERO_SALT = new Uint8Array(N_H);
-function utf8(value) {
-  return new TextEncoder().encode(value);
-}
-function concat(...parts) {
-  const length = parts.reduce((total, part) => total + part.byteLength, 0);
-  const out = new Uint8Array(length);
-  let offset = 0;
-  for (const part of parts) {
-    out.set(part, offset);
-    offset += part.byteLength;
-  }
-  return out;
-}
-function i2osp(value, length) {
-  if (!Number.isSafeInteger(value) || value < 0) {
-    throw new ByokCoreError("sealed_secret_invalid", "HPKE integer encoding requires a non-negative safe integer");
-  }
-  const out = new Uint8Array(length);
-  let remaining = value;
-  for (let index = length - 1; index >= 0; index -= 1) {
-    out[index] = remaining % 256;
-    remaining = Math.floor(remaining / 256);
-  }
-  if (remaining !== 0) {
-    throw new ByokCoreError("sealed_secret_invalid", "HPKE integer does not fit the requested width");
-  }
-  return out;
-}
-function copy(bytes) {
-  return new Uint8Array(bytes);
-}
-async function hmacSha256(key, data) {
-  const subtle = webCryptoSubtle();
-  const hmacKey = await subtle.importKey("raw", copy(key), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
-  return new Uint8Array(await subtle.sign("HMAC", hmacKey, copy(data)));
-}
-async function hkdfExpand(prk, info, length) {
-  if (length > 255 * N_H) {
-    throw new ByokCoreError("sealed_secret_invalid", "HKDF output length exceeds its limit");
-  }
-  const out = new Uint8Array(length);
-  let previous = EMPTY;
-  let offset = 0;
-  for (let counter = 1; offset < length; counter += 1) {
-    previous = await hmacSha256(prk, concat(previous, info, Uint8Array.of(counter)));
-    const take = Math.min(previous.byteLength, length - offset);
-    out.set(previous.subarray(0, take), offset);
-    offset += take;
-  }
-  return out;
-}
-async function labeledExtract(suiteId, salt, label, ikm) {
-  return hmacSha256(salt.byteLength === 0 ? ZERO_SALT : salt, concat(HPKE_V1, suiteId, utf8(label), ikm));
-}
-async function labeledExpand(suiteId, prk, label, info, length) {
-  return hkdfExpand(prk, concat(i2osp(length, 2), HPKE_V1, suiteId, utf8(label), info), length);
-}
-async function importP256PublicKey(raw) {
-  if (raw.byteLength !== HPKE_P256_PUBLIC_KEY_BYTES || raw[0] !== 4) {
-    throw new ByokCoreError("sealed_secret_invalid", "P-256 public key must be a 65-byte uncompressed point");
-  }
-  try {
-    return await webCryptoSubtle().importKey("raw", copy(raw), { name: "ECDH", namedCurve: "P-256" }, true, []);
-  } catch (cause) {
-    throw new ByokCoreError("sealed_secret_invalid", "P-256 public key is not a valid curve point", { cause });
-  }
-}
-async function ecdhP256(privateKey, publicKey) {
-  const bits = await webCryptoSubtle().deriveBits({ name: "ECDH", public: publicKey }, privateKey, N_SECRET * 8);
-  return new Uint8Array(bits);
-}
-async function extractAndExpand(dh, kemContext) {
-  const eaePrk = await labeledExtract(KEM_SUITE_ID, EMPTY, "eae_prk", dh);
-  return labeledExpand(KEM_SUITE_ID, eaePrk, "shared_secret", kemContext, N_SECRET);
-}
-async function keyScheduleBase(sharedSecret, info) {
-  const pskIdHash = await labeledExtract(HPKE_SUITE_ID, EMPTY, "psk_id_hash", EMPTY);
-  const infoHash = await labeledExtract(HPKE_SUITE_ID, EMPTY, "info_hash", info);
-  const context = concat(Uint8Array.of(MODE_BASE), pskIdHash, infoHash);
-  const secret = await labeledExtract(HPKE_SUITE_ID, sharedSecret, "secret", EMPTY);
-  return {
-    sharedSecret,
-    key: await labeledExpand(HPKE_SUITE_ID, secret, "key", context, N_K),
-    baseNonce: await labeledExpand(HPKE_SUITE_ID, secret, "base_nonce", context, N_N),
-    exporterSecret: await labeledExpand(HPKE_SUITE_ID, secret, "exp", context, N_H)
-  };
-}
-async function setupBaseSender(recipientPublicKey, info, ephemeral) {
-  const pkR = await importP256PublicKey(recipientPublicKey);
-  let pair = ephemeral;
-  if (pair === void 0) {
-    const subtle = webCryptoSubtle();
-    const generated = await subtle.generateKey({ name: "ECDH", namedCurve: "P-256" }, true, ["deriveBits"]);
-    pair = {
-      privateKey: generated.privateKey,
-      publicKey: new Uint8Array(await subtle.exportKey("raw", generated.publicKey))
-    };
-  }
-  const enc = copy(pair.publicKey);
-  const dh = await ecdhP256(pair.privateKey, pkR);
-  const sharedSecret = await extractAndExpand(dh, concat(enc, recipientPublicKey));
-  return { enc, schedule: await keyScheduleBase(sharedSecret, info) };
-}
-async function setupBaseRecipient(enc, recipientPrivateKey, recipientPublicKey, info) {
-  if (recipientPublicKey.byteLength !== HPKE_P256_PUBLIC_KEY_BYTES || recipientPublicKey[0] !== 4) {
-    throw new ByokCoreError("sealed_secret_invalid", "P-256 recipient public key must be a 65-byte uncompressed point");
-  }
-  const pkE = await importP256PublicKey(enc);
-  let dh;
-  try {
-    dh = await ecdhP256(recipientPrivateKey, pkE);
-  } catch (cause) {
-    throw new ByokCoreError("sealed_secret_open_failed", "HPKE decapsulation failed", { cause });
-  }
-  const sharedSecret = await extractAndExpand(dh, concat(enc, recipientPublicKey));
-  return keyScheduleBase(sharedSecret, info);
-}
-function hpkeNonce(baseNonce, sequence) {
-  const seq = i2osp(sequence, N_N);
-  const out = new Uint8Array(N_N);
-  for (let index = 0; index < N_N; index += 1) out[index] = baseNonce[index] ^ seq[index];
-  return out;
-}
-async function aesGcmKey(key, usage) {
-  return webCryptoSubtle().importKey("raw", copy(key), { name: "AES-GCM" }, false, [usage]);
-}
-async function hpkeAeadSeal(schedule, sequence, aad, plaintext) {
-  const ciphertext = await webCryptoSubtle().encrypt(
-    { name: "AES-GCM", iv: hpkeNonce(schedule.baseNonce, sequence), additionalData: copy(aad), tagLength: 128 },
-    await aesGcmKey(schedule.key, "encrypt"),
-    copy(plaintext)
-  );
-  return new Uint8Array(ciphertext);
-}
-async function hpkeAeadOpen(schedule, sequence, aad, ciphertext) {
-  if (ciphertext.byteLength < HPKE_AEAD_TAG_BYTES) {
-    throw new ByokCoreError("sealed_secret_invalid", "HPKE ciphertext is shorter than its authentication tag");
-  }
-  try {
-    const plaintext = await webCryptoSubtle().decrypt(
-      { name: "AES-GCM", iv: hpkeNonce(schedule.baseNonce, sequence), additionalData: copy(aad), tagLength: 128 },
-      await aesGcmKey(schedule.key, "decrypt"),
-      copy(ciphertext)
-    );
-    return new Uint8Array(plaintext);
-  } catch (cause) {
-    throw new ByokCoreError("sealed_secret_open_failed", "HPKE ciphertext failed authentication", { cause });
-  }
-}
-async function hpkeSealBase(input) {
-  const { enc, schedule } = await setupBaseSender(input.recipientPublicKey, input.info);
-  return { enc, ciphertext: await hpkeAeadSeal(schedule, 0, input.aad, input.plaintext) };
-}
-async function hpkeOpenBase(input) {
-  const schedule = await setupBaseRecipient(input.enc, input.recipientPrivateKey, input.recipientPublicKey, input.info);
-  return hpkeAeadOpen(schedule, 0, input.aad, input.ciphertext);
-}
-
-// src/total-parse.ts
-function safeParseTotal(schema, value) {
-  try {
-    return schema.safeParse(value);
-  } catch {
-    return { success: false };
-  }
-}
-
-// src/sealed-provider-secret.ts
-var PROVIDER_SECRET_HPKE_SUITE = "hpke-base.dhkem-p256-hkdf-sha256.hkdf-sha256.aes-128-gcm";
-var PROVIDER_SECRET_HPKE_INFO = "byok-sdk.provider-secret.v1";
-var PROVIDER_PROVISIONING_REQUEST_VERSION = 1;
-var PROVIDER_PROVISIONING_OPERATIONS = ["configure", "update_model", "replace_secret", "delete"];
-var PROVIDER_PROVISIONING_SECRET_OPERATIONS = ["configure", "replace_secret"];
-var PROVIDER_PROVISIONING_MAX_TTL_MS = 15 * 60 * 1e3;
-var PROVIDER_SECRET_PAD_BLOCK_BYTES = 256;
-var PROVIDER_SECRET_MAX_PADDED_BYTES = 4096;
-var PROVIDER_SECRET_MAX_BYTES = PROVIDER_SECRET_MAX_PADDED_BYTES - 2;
-var SEALING_KEY_ID_LENGTH = 22;
-var B64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
-var B64URL_PATTERN = /^[A-Za-z0-9_-]*$/;
-function encodeBase64Url(bytes) {
-  let out = "";
-  let index = 0;
-  for (; index + 3 <= bytes.length; index += 3) {
-    const value = bytes[index] << 16 | bytes[index + 1] << 8 | bytes[index + 2];
-    out += B64URL_ALPHABET[value >> 18 & 63] + B64URL_ALPHABET[value >> 12 & 63] + B64URL_ALPHABET[value >> 6 & 63] + B64URL_ALPHABET[value & 63];
-  }
-  const rest = bytes.length - index;
-  if (rest === 1) {
-    const value = bytes[index] << 16;
-    out += B64URL_ALPHABET[value >> 18 & 63] + B64URL_ALPHABET[value >> 12 & 63];
-  } else if (rest === 2) {
-    const value = bytes[index] << 16 | bytes[index + 1] << 8;
-    out += B64URL_ALPHABET[value >> 18 & 63] + B64URL_ALPHABET[value >> 12 & 63] + B64URL_ALPHABET[value >> 6 & 63];
-  }
-  return out;
-}
-function decodeBase64Url(value, field) {
-  if (!B64URL_PATTERN.test(value) || value.length % 4 === 1) {
-    throw new ByokCoreError("sealed_secret_invalid", `${field} is not canonical base64url`);
-  }
-  const out = new Uint8Array(Math.floor(value.length * 3 / 4));
-  let buffer = 0;
-  let bits = 0;
-  let offset = 0;
-  for (const char of value) {
-    buffer = buffer << 6 | B64URL_ALPHABET.indexOf(char);
-    bits += 6;
-    if (bits >= 8) {
-      bits -= 8;
-      out[offset] = buffer >> bits & 255;
-      offset += 1;
-    }
-  }
-  if (encodeBase64Url(out) !== value) {
-    throw new ByokCoreError("sealed_secret_invalid", `${field} is not canonical base64url`);
-  }
-  return out;
-}
-function base64UrlField(bytes) {
-  return z.string().superRefine((value, ctx) => {
-    try {
-      const decoded = decodeBase64Url(value, "field");
-      if (bytes.exact !== void 0 && decoded.byteLength !== bytes.exact) {
-        ctx.addIssue({ code: "custom", message: `must decode to exactly ${bytes.exact} bytes` });
-      }
-      if (bytes.max !== void 0 && decoded.byteLength > bytes.max) {
-        ctx.addIssue({ code: "custom", message: `must decode to at most ${bytes.max} bytes` });
-      }
-    } catch {
-      ctx.addIssue({ code: "custom", message: "must be canonical unpadded base64url" });
-    }
-  });
-}
-async function sha256(bytes) {
-  return new Uint8Array(await webCryptoSubtle().digest("SHA-256", new Uint8Array(bytes)));
-}
-function hex(bytes) {
-  let out = "";
-  for (const byte of bytes) out += byte.toString(16).padStart(2, "0");
-  return out;
-}
-async function contentDigest(value) {
-  return `sha256:${hex(await sha256(canonicalizeJsonBytes(value)))}`;
-}
-var SealingPublicJwkSchema = z.strictObject({
-  kty: z.literal("EC"),
-  crv: z.literal("P-256"),
-  x: base64UrlField({ exact: 32 }),
-  y: base64UrlField({ exact: 32 })
-});
-var SealingKeyIdSchema = z.string().regex(new RegExp(`^[A-Za-z0-9_-]{${SEALING_KEY_ID_LENGTH}}$`));
-function parseSealingPublicJwk(input) {
-  const result = safeParseTotal(SealingPublicJwkSchema, input);
-  if (!result.success) {
-    throw new ByokCoreError("sealed_secret_invalid", "Sealing public key must be a strict P-256 EC public JWK");
-  }
-  return result.data;
-}
-function sealingPublicKeyBytes(publicJwk) {
-  const jwk = parseSealingPublicJwk(publicJwk);
-  const raw = new Uint8Array(HPKE_P256_PUBLIC_KEY_BYTES);
-  raw[0] = 4;
-  raw.set(decodeBase64Url(jwk.x, "x"), 1);
-  raw.set(decodeBase64Url(jwk.y, "y"), 33);
-  return raw;
-}
-async function deriveSealingKeyId(publicJwk) {
-  const raw = sealingPublicKeyBytes(publicJwk);
-  await importP256PublicKey(raw);
-  return encodeBase64Url(await sha256(raw)).slice(0, SEALING_KEY_ID_LENGTH);
-}
-var SealingKeyClaimV1Schema = z.strictObject({
-  version: z.literal(1),
-  keyId: SealingKeyIdSchema,
-  epoch: z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
-  publicJwk: SealingPublicJwkSchema
-});
-function sealingKeyClaimCanonicalBytes(claim) {
-  const result = safeParseTotal(SealingKeyClaimV1Schema, claim);
-  if (!result.success) {
-    throw new ByokCoreError("sealed_secret_invalid", "Sealing key claim is invalid");
-  }
-  const parsed = result.data;
-  return canonicalizeJsonBytes({
-    version: parsed.version,
-    keyId: parsed.keyId,
-    epoch: parsed.epoch,
-    publicJwk: { kty: parsed.publicJwk.kty, crv: parsed.publicJwk.crv, x: parsed.publicJwk.x, y: parsed.publicJwk.y }
-  });
-}
-var OpaqueIdSchema = z.string().min(1).max(200).superRefine((value, ctx) => {
-  if (value.trim() !== value || /[\u0000-\u001f\u007f]/u.test(value)) {
-    ctx.addIssue({ code: "custom", message: "must not carry surrounding whitespace or control characters" });
-  }
-});
-var CanonicalTimestampSchema = z.string().refine(isCanonicalTimestamp, "must be a canonical ISO-8601 UTC instant");
-var ProfileRefSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/u);
-var ProviderKindSchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/u);
-var ModelIdSchema = z.string().min(1).max(160).refine((value) => value.trim() === value && !/[\u0000-\u001f\u007f]/u.test(value), "model id is invalid");
-var CapabilitySchema = z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u);
-var PiModelJsonSchema = z.custom((value) => {
-  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
-  try {
-    canonicalizeJson(value);
-    return true;
-  } catch {
-    return false;
-  }
-}, "piModel must be a canonical JSON object");
-var ModelConfigFields = {
-  agentId: OpaqueIdSchema,
-  providerKind: ProviderKindSchema,
-  modelId: ModelIdSchema,
-  piModel: PiModelJsonSchema,
-  capabilities: z.array(CapabilitySchema).max(8).refine((values) => new Set(values).size === values.length, "capabilities must be unique")
-};
-var ProviderProvisioningConfigV1Schema = z.discriminatedUnion("operation", [
-  z.strictObject({ operation: z.literal("configure"), ...ModelConfigFields }),
-  z.strictObject({ operation: z.literal("update_model"), ...ModelConfigFields }),
-  z.strictObject({ operation: z.literal("replace_secret"), agentId: OpaqueIdSchema, providerKind: ProviderKindSchema }),
-  z.strictObject({ operation: z.literal("delete"), agentId: OpaqueIdSchema })
-]);
-var ProviderProvisioningExpectedProfileSchema = z.union([
-  z.null(),
-  z.strictObject({
-    profileRef: ProfileRefSchema,
-    profileRevision: z.string().regex(/^(?:0|[1-9][0-9]{0,19})$/u),
-    profileHash: z.string().regex(CONTENT_HASH_PATTERN)
-  })
-]);
-var ProviderProvisioningIdentityRevisionSchema = z.string().min(1).max(128).regex(/^[A-Za-z0-9._:-]+$/u);
-var ProviderProvisioningHeaderV1Schema = z.strictObject({
-  tenantId: OpaqueIdSchema,
-  deviceId: OpaqueIdSchema,
-  agentId: OpaqueIdSchema,
-  requestId: OpaqueIdSchema,
-  operation: z.enum(PROVIDER_PROVISIONING_OPERATIONS),
-  /** Non-secret, strictly increasing per bot (A3); a device rejects anything not above its high-watermark. */
-  operationGeneration: z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
-  expectedProfile: ProviderProvisioningExpectedProfileSchema,
-  /** The device enrollment revision the Host authorized against (F2). */
-  expectedEnrollmentRevision: ProviderProvisioningIdentityRevisionSchema,
-  /** The agent placement revision the Host authorized against (F2). */
-  expectedPlacementRevision: ProviderProvisioningIdentityRevisionSchema,
-  configDigest: z.string().regex(CONTENT_HASH_PATTERN),
-  issuedAt: CanonicalTimestampSchema,
-  expiresAt: CanonicalTimestampSchema
-});
-var MAX_CIPHERTEXT_BYTES = PROVIDER_SECRET_MAX_PADDED_BYTES + HPKE_AEAD_TAG_BYTES;
-var SealedProviderSecretV1Schema = z.strictObject({
-  suite: z.literal(PROVIDER_SECRET_HPKE_SUITE),
-  keyId: SealingKeyIdSchema,
-  enc: base64UrlField({ exact: HPKE_P256_PUBLIC_KEY_BYTES }),
-  ciphertext: base64UrlField({ max: MAX_CIPHERTEXT_BYTES })
-});
-function isSecretOperation(operation) {
-  return PROVIDER_PROVISIONING_SECRET_OPERATIONS.includes(operation);
-}
-var ProviderProvisioningRequestV1Schema = z.strictObject({
-  version: z.literal(PROVIDER_PROVISIONING_REQUEST_VERSION),
-  header: ProviderProvisioningHeaderV1Schema,
-  config: ProviderProvisioningConfigV1Schema,
-  sealed: SealedProviderSecretV1Schema.optional()
-}).superRefine((request, ctx) => {
-  if (request.header.operation !== request.config.operation) {
-    ctx.addIssue({ code: "custom", path: ["config", "operation"], message: "config operation must equal header operation" });
-  }
-  if (request.header.agentId !== request.config.agentId) {
-    ctx.addIssue({ code: "custom", path: ["config", "agentId"], message: "config agentId must equal header agentId" });
-  }
-  if (isSecretOperation(request.header.operation) !== (request.sealed !== void 0)) {
-    ctx.addIssue({ code: "custom", path: ["sealed"], message: "a sealed secret is required exactly for configure and replace_secret" });
-  }
-});
-function parseProviderProvisioningRequest(input) {
-  const result = safeParseTotal(ProviderProvisioningRequestV1Schema, input);
-  if (!result.success) {
-    throw new ByokCoreError(
-      "provider_provisioning_request_invalid",
-      `Invalid provider provisioning request: ${(result.error?.issues ?? [{ path: [], message: "is not readable" }]).map((issue) => `${issue.path.join(".") || "<root>"}: ${issue.message}`).join("; ")}`
-    );
-  }
-  return result.data;
-}
-function configJson(config) {
-  return config;
-}
-async function providerProvisioningConfigDigest(config) {
-  const result = safeParseTotal(ProviderProvisioningConfigV1Schema, config);
-  if (!result.success) {
-    throw new ByokCoreError("provider_provisioning_request_invalid", "Provider provisioning config is invalid");
-  }
-  return contentDigest(configJson(result.data));
-}
-function providerSecretAadBytes(header, keyId) {
-  const parsed = safeParseTotal(ProviderProvisioningHeaderV1Schema, header);
-  if (!parsed.success || !safeParseTotal(SealingKeyIdSchema, keyId).success) {
-    throw new ByokCoreError("provider_provisioning_request_invalid", "Provider provisioning AAD input is invalid");
-  }
-  const value = parsed.data;
-  return canonicalizeJsonBytes({
-    v: PROVIDER_PROVISIONING_REQUEST_VERSION,
-    tenantId: value.tenantId,
-    deviceId: value.deviceId,
-    keyId,
-    requestId: value.requestId,
-    agentId: value.agentId,
-    operation: value.operation,
-    operationGeneration: value.operationGeneration,
-    expectedProfile: value.expectedProfile === null ? null : {
-      profileRef: value.expectedProfile.profileRef,
-      profileRevision: value.expectedProfile.profileRevision,
-      profileHash: value.expectedProfile.profileHash
-    },
-    expectedEnrollmentRevision: value.expectedEnrollmentRevision,
-    expectedPlacementRevision: value.expectedPlacementRevision,
-    configDigest: value.configDigest,
-    issuedAt: value.issuedAt,
-    expiresAt: value.expiresAt
-  });
-}
-async function providerProvisioningRequestDigest(request) {
-  const parsed = parseProviderProvisioningRequest(request);
-  return contentDigest(parsed);
-}
-async function assertProviderProvisioningConfigDigest(request) {
-  const parsed = parseProviderProvisioningRequest(request);
-  if (await providerProvisioningConfigDigest(parsed.config) !== parsed.header.configDigest) {
-    throw new ByokCoreError("provider_provisioning_request_invalid", "Provider provisioning config digest does not match its header");
-  }
-}
-function padProviderSecret(secret) {
-  const bytes = new TextEncoder().encode(secret);
-  if (bytes.byteLength === 0 || bytes.byteLength > PROVIDER_SECRET_MAX_BYTES) {
-    throw new ByokCoreError("sealed_secret_invalid", `Provider secret must be 1 to ${PROVIDER_SECRET_MAX_BYTES} UTF-8 bytes`);
-  }
-  const total = Math.ceil((bytes.byteLength + 2) / PROVIDER_SECRET_PAD_BLOCK_BYTES) * PROVIDER_SECRET_PAD_BLOCK_BYTES;
-  const out = new Uint8Array(total);
-  out[0] = bytes.byteLength >> 8;
-  out[1] = bytes.byteLength & 255;
-  out.set(bytes, 2);
-  return out;
-}
-function unpadProviderSecret(padded) {
-  if (padded.byteLength < PROVIDER_SECRET_PAD_BLOCK_BYTES || padded.byteLength > PROVIDER_SECRET_MAX_PADDED_BYTES || padded.byteLength % PROVIDER_SECRET_PAD_BLOCK_BYTES !== 0) {
-    throw new ByokCoreError("sealed_secret_invalid", "Padded provider secret has an invalid length");
-  }
-  const length = padded[0] << 8 | padded[1];
-  if (length === 0 || length + 2 > padded.byteLength || padded.byteLength - (length + 2) >= PROVIDER_SECRET_PAD_BLOCK_BYTES) {
-    throw new ByokCoreError("sealed_secret_invalid", "Padded provider secret has an invalid length prefix");
-  }
-  for (let index = length + 2; index < padded.byteLength; index += 1) {
-    if (padded[index] !== 0) {
-      throw new ByokCoreError("sealed_secret_invalid", "Padded provider secret has non-zero padding");
-    }
-  }
-  try {
-    return new TextDecoder("utf-8", { fatal: true, ignoreBOM: true }).decode(padded.subarray(2, length + 2));
-  } catch {
-    throw new ByokCoreError("sealed_secret_invalid", "Provider secret is not valid UTF-8");
-  }
-}
-var INFO_BYTES = () => new TextEncoder().encode(PROVIDER_SECRET_HPKE_INFO);
-async function sealProviderProvisioningRequest(input) {
-  const configResult = safeParseTotal(ProviderProvisioningConfigV1Schema, input.config);
-  if (!configResult.success) {
-    throw new ByokCoreError("provider_provisioning_request_invalid", "Provider provisioning config is invalid");
-  }
-  const config = configResult.data;
-  const headerResult = safeParseTotal(ProviderProvisioningHeaderV1Schema, {
-    ...input.header,
-    configDigest: await providerProvisioningConfigDigest(config)
-  });
-  if (!headerResult.success) {
-    throw new ByokCoreError("provider_provisioning_request_invalid", "Provider provisioning header is invalid");
-  }
-  const header = headerResult.data;
-  const needsSecret = isSecretOperation(header.operation);
-  if (needsSecret !== (input.secret !== void 0) || needsSecret !== (input.recipient !== void 0)) {
-    throw new ByokCoreError(
-      "provider_provisioning_request_invalid",
-      "A secret and recipient are required exactly for configure and replace_secret"
-    );
-  }
-  let sealed;
-  if (needsSecret) {
-    const recipient = input.recipient;
-    const publicJwk = parseSealingPublicJwk(recipient.publicJwk);
-    if (await deriveSealingKeyId(publicJwk) !== recipient.keyId) {
-      throw new ByokCoreError("sealed_secret_invalid", "Sealing key id does not match its public key");
-    }
-    const { enc, ciphertext } = await hpkeSealBase({
-      recipientPublicKey: sealingPublicKeyBytes(publicJwk),
-      info: INFO_BYTES(),
-      aad: providerSecretAadBytes(header, recipient.keyId),
-      plaintext: padProviderSecret(input.secret)
-    });
-    sealed = {
-      suite: PROVIDER_SECRET_HPKE_SUITE,
-      keyId: recipient.keyId,
-      enc: encodeBase64Url(enc),
-      ciphertext: encodeBase64Url(ciphertext)
-    };
-  }
-  return parseProviderProvisioningRequest({
-    version: PROVIDER_PROVISIONING_REQUEST_VERSION,
-    header,
-    config,
-    ...sealed === void 0 ? {} : { sealed }
-  });
-}
-async function openProviderProvisioningSecret(input) {
-  const request = parseProviderProvisioningRequest(input.request);
-  const sealed = request.sealed;
-  if (sealed === void 0) {
-    throw new ByokCoreError("provider_provisioning_request_invalid", "Provider provisioning request carries no sealed secret");
-  }
-  const publicJwk = parseSealingPublicJwk(input.recipient.publicJwk);
-  if (sealed.keyId !== input.recipient.keyId || await deriveSealingKeyId(publicJwk) !== input.recipient.keyId) {
-    throw new ByokCoreError("sealed_secret_invalid", "Sealed secret is not addressed to this sealing key");
-  }
-  await assertProviderProvisioningConfigDigest(request);
-  const ciphertext = decodeBase64Url(sealed.ciphertext, "ciphertext");
-  const paddedLength = ciphertext.byteLength - HPKE_AEAD_TAG_BYTES;
-  if (paddedLength < PROVIDER_SECRET_PAD_BLOCK_BYTES || paddedLength > PROVIDER_SECRET_MAX_PADDED_BYTES || paddedLength % PROVIDER_SECRET_PAD_BLOCK_BYTES !== 0) {
-    throw new ByokCoreError("sealed_secret_invalid", "Sealed secret ciphertext has an invalid length");
-  }
-  const padded = await hpkeOpenBase({
-    recipientPrivateKey: input.recipient.privateKey,
-    recipientPublicKey: sealingPublicKeyBytes(publicJwk),
-    enc: decodeBase64Url(sealed.enc, "enc"),
-    info: INFO_BYTES(),
-    aad: providerSecretAadBytes(request.header, sealed.keyId),
-    ciphertext
-  });
-  try {
-    return unpadProviderSecret(padded);
-  } finally {
-    padded.fill(0);
-  }
-}
-
-// src/agent-memory-intent.ts
-var AGENT_MEMORY_INTENT_DIGEST_VERSION = "byok-agent-memory-intent-v1";
-async function agentMemoryIntentOperationDigest(input) {
-  const canonical = {
-    v: AGENT_MEMORY_INTENT_DIGEST_VERSION,
-    tenantId: input.tenantId,
-    deviceId: input.deviceId,
-    intentId: input.intentId,
-    agentRef: { agentId: input.agentRef.agentId, profileRevision: input.agentRef.profileRevision },
-    path: input.path,
-    operation: input.operation,
-    baseRevision: input.baseRevision,
-    targetRevision: input.targetRevision,
-    approvalRef: input.approvalRef
-  };
-  const digest = new Uint8Array(
-    await webCryptoSubtle().digest("SHA-256", new Uint8Array(canonicalizeJsonBytes(canonical)))
-  );
-  let hex2 = "";
-  for (const byte of digest) hex2 += byte.toString(16).padStart(2, "0");
-  return `sha256:${hex2}`;
-}
-
-// src/pairing.ts
-var NONCE_SIGNING_DOMAIN = "byok-nonce-v1\n";
-function nonceSigningBytes(nonce) {
-  return new TextEncoder().encode(NONCE_SIGNING_DOMAIN + nonce);
-}
-
-// src/in-memory/storage-ledger.ts
-var InMemoryStorageLedger = class {
-  constructor(clock) {
-    this.clock = clock;
-  }
-  clock;
-  #usage = /* @__PURE__ */ new Map();
-  #reservations = /* @__PURE__ */ new Map();
-  #committed = /* @__PURE__ */ new Map();
-  readReservation(key) {
-    return this.#reservations.get(key);
-  }
-  writeReservation(key, record) {
-    this.#reservations.set(key, record);
-  }
-  deleteReservation(key) {
-    this.#reservations.delete(key);
-  }
-  reservations() {
-    return this.#reservations.entries();
-  }
-  readUsage(tenant) {
-    let usage = this.#usage.get(tenant);
-    if (usage === void 0) {
-      usage = { committedObjectBytes: 0n, committedInlineBytes: 0n, reservedBytes: 0n, objectCount: 0n, updatedAt: this.clock.now().toISOString() };
-      this.#usage.set(tenant, usage);
-    }
-    return usage;
-  }
-  writeUsage(tenant, usage) {
-    this.#usage.set(tenant, usage);
-  }
-  isCounted(tenant, hash) {
-    return this.#committed.get(tenant)?.has(hash) === true;
-  }
-  recordCommitted(tenant, reservation) {
-    let hashes = this.#committed.get(tenant);
-    if (hashes === void 0) {
-      hashes = /* @__PURE__ */ new Map();
-      this.#committed.set(tenant, hashes);
-    }
-    hashes.set(reservation.contentHash, { kind: reservation.kind, bytes: reservation.expectedBytes });
-  }
-  hasReservedObject(tenant, hash) {
-    for (const { reservation } of this.#reservations.values()) {
-      if (reservation.tenantId === tenant && reservation.kind === "object" && reservation.contentHash === hash && reservation.state === "reserved") return true;
-    }
-    return false;
-  }
-  reservedObjectHashes(tenant) {
-    return [...this.#reservations.values()].filter(({ reservation }) => reservation.tenantId === tenant && reservation.kind === "object" && reservation.state === "reserved").map(({ reservation }) => reservation.contentHash);
-  }
-  prepareCollectedObjectRelease(tenant, hash, byteSize, now) {
-    const hashes = this.#committed.get(tenant);
-    const accounted = hashes?.get(hash);
-    if (accounted === void 0 || accounted.kind === "inline") return { releasedBytes: 0n, commit: () => {
-    } };
-    const usage = this.#usage.get(tenant);
-    if (usage === void 0 || accounted.bytes !== byteSize || usage.committedObjectBytes < accounted.bytes || usage.objectCount < 1n) {
-      throw new ByokCoreError("storage_integrity_mismatch", "Collected object accounting does not match the storage ledger.");
-    }
-    return { releasedBytes: accounted.bytes, commit: () => {
-      hashes.delete(hash);
-      this.writeUsage(tenant, { ...usage, committedObjectBytes: usage.committedObjectBytes - accounted.bytes, objectCount: usage.objectCount - 1n, updatedAt: now });
-    } };
-  }
-  releaseCollectedObject(tenant, hash, byteSize, now) {
-    const release = this.prepareCollectedObjectRelease(tenant, hash, byteSize, now);
-    release.commit();
-    return release.releasedBytes;
-  }
-};
-
-// src/retention.ts
-function assertCollectExpiredInput(input) {
-  assertCanonicalTimestamp(input.now, "now");
-  if (!Number.isSafeInteger(input.limit) || input.limit <= 0) {
-    throw new ByokCoreError("retention_input_invalid", "collectExpired limit must be a positive safe integer.");
-  }
-}
-var CollectExpiredFailure = class extends ByokCoreError {
-  constructor(committed, failedRows, more, options) {
-    super("retention_collect_failed", "Retention collection did not complete.", options);
-    this.committed = committed;
-    this.failedRows = failedRows;
-    this.more = more;
-  }
-  committed;
-  failedRows;
-  more;
-};
-
-// src/in-memory/presence.ts
-function assertTtl(ttlMs) {
-  if (!Number.isFinite(ttlMs) || ttlMs <= 0) {
-    throw new ByokCoreError(
-      "hint_ttl_invalid",
-      `Hint ttl must be a positive number of milliseconds, received ${String(ttlMs)}.`
-    );
-  }
-}
-function assertMinimumInterval(minimumIntervalMs) {
-  if (!Number.isFinite(minimumIntervalMs) || minimumIntervalMs < 0) {
-    throw new ByokCoreError(
-      "hint_ttl_invalid",
-      `Hint minimum interval must be a non-negative number of milliseconds, received ${String(minimumIntervalMs)}.`
-    );
-  }
-}
-var InMemoryPresenceStore = class {
-  #hints = /* @__PURE__ */ new Map();
-  #clock;
-  constructor(clock) {
-    this.#clock = clock;
-  }
-  async publish(tenant, input) {
-    assertTtl(input.ttlMs);
-    assertMinimumInterval(input.minimumIntervalMs);
-    const now = this.#clock.now();
-    const key = tenantKey(tenant, input.deviceId);
-    const existing = this.#hints.get(key);
-    if (existing && now.toISOString() < existing.expiresAt && Math.max(0, Number(now) - Date.parse(existing.observedAt)) < input.minimumIntervalMs) {
-      throw new ByokCoreError(
-        "hint_rate_limited",
-        `Presence for ${input.deviceId} was published more recently than the configured minimum interval.`
-      );
-    }
-    const hint = {
-      tenantId: tenant,
-      deviceId: input.deviceId,
-      level: input.level,
-      ...input.detail === void 0 ? {} : { detail: input.detail },
-      ...input.configuredToolsets === void 0 ? {} : { configuredToolsets: Object.freeze([...input.configuredToolsets]) },
-      ...input.clientVersion === void 0 ? {} : { clientVersion: input.clientVersion },
-      ...input.protocolVersions === void 0 ? {} : { protocolVersions: Object.freeze([...input.protocolVersions]) },
-      ...input.runtimes === void 0 ? {} : {
-        runtimes: Object.freeze(
-          input.runtimes.map(
-            (runtime) => Object.freeze({
-              id: runtime.id,
-              ...runtime.version === void 0 ? {} : { version: runtime.version },
-              ...runtime.authPresent === void 0 ? {} : { authPresent: runtime.authPresent }
-            })
-          )
-        )
-      },
-      observedAt: now.toISOString(),
-      expiresAt: new Date(now.getTime() + input.ttlMs).toISOString()
-    };
-    this.#hints.set(key, hint);
-    return hint;
-  }
-  async read(tenant, deviceId) {
-    const key = tenantKey(tenant, deviceId);
-    const hint = this.#hints.get(key);
-    if (hint === void 0) return void 0;
-    if (this.#isExpired(hint.expiresAt)) {
-      this.#hints.delete(key);
-      return void 0;
-    }
-    return hint;
-  }
-  async list(tenant) {
-    const prefix = tenantKey(tenant, "");
-    const live = [];
-    for (const [key, hint] of [...this.#hints.entries()]) {
-      if (!key.startsWith(prefix)) continue;
-      if (this.#isExpired(hint.expiresAt)) {
-        this.#hints.delete(key);
-        continue;
-      }
-      live.push(hint);
-    }
-    live.sort((left, right) => left.deviceId.localeCompare(right.deviceId));
-    return live;
-  }
-  async collectExpired(tenant, input) {
-    assertCollectExpiredInput(input);
-    let removed = 0, more = false;
-    for (const [key, hint] of this.#hints) {
-      if (hint.tenantId !== tenant || hint.expiresAt > input.now) continue;
-      if (removed === input.limit) {
-        more = true;
-        break;
-      }
-      this.#hints.delete(key);
-      removed++;
-    }
-    return { removed, expired: 0, releasedBytes: 0n, more };
-  }
-  #isExpired(expiresAt) {
-    return this.#clock.now().toISOString() >= expiresAt;
-  }
-};
-
-// src/in-memory/board.ts
-var DEFAULT_LIST_LIMIT = 50;
-var InMemoryBoardStore = class {
-  #items = /* @__PURE__ */ new Map();
-  #seqByTenant = /* @__PURE__ */ new Map();
-  #clock;
-  constructor(clock) {
-    this.#clock = clock;
-  }
-  async create(tenant, input) {
-    const key = tenantKey(tenant, input.itemId);
-    if (this.#items.has(key)) {
-      throw new ByokCoreError(
-        "board_item_exists",
-        `Board item ${input.itemId} already exists in this tenant.`
-      );
-    }
-    const now = this.#now();
-    const item = {
-      tenantId: tenant,
-      itemId: input.itemId,
-      channel: input.channel,
-      title: input.title,
-      status: input.status ?? "todo",
-      boardSeq: this.#nextSeq(tenant),
-      createdAt: now,
-      updatedAt: now
-    };
-    this.#items.set(key, item);
-    return item;
-  }
-  async get(tenant, itemId) {
-    return this.#items.get(tenantKey(tenant, itemId));
-  }
-  async list(tenant, query) {
-    const afterSeq = query.afterSeq ?? 0;
-    const limit = query.limit ?? DEFAULT_LIST_LIMIT;
-    const prefix = tenantKey(tenant, "");
-    const matches = [];
-    for (const [key, item] of this.#items.entries()) {
-      if (!key.startsWith(prefix)) continue;
-      if (item.boardSeq <= afterSeq) continue;
-      if (query.channel !== void 0 && item.channel !== query.channel) continue;
-      if (query.status !== void 0 && item.status !== query.status) continue;
-      matches.push(item);
-    }
-    matches.sort((left, right) => left.boardSeq - right.boardSeq);
-    const page = matches.slice(0, limit);
-    return {
-      items: page,
-      nextSeq: page.at(-1)?.boardSeq ?? afterSeq,
-      hasMore: matches.length > page.length
-    };
-  }
-  async claim(tenant, input) {
-    const item = this.#require(tenant, input.itemId);
-    const expectedStatus = input.expectedStatus ?? "todo";
-    if (item.assignee !== void 0) {
-      if (item.assignee.holderId === input.holderId) {
-        if (input.expectedStatus !== void 0 && item.status !== input.expectedStatus) {
-          throw new CoreConflictError(
-            "board_status_conflict",
-            `Board item ${input.itemId} is ${item.status}, not ${input.expectedStatus}.`,
-            item,
-            this.#now()
-          );
-        }
-        return item;
-      }
-      throw new CoreConflictError(
-        "board_claim_conflict",
-        `Board item ${input.itemId} is held by ${item.assignee.holderId}.`,
-        item,
-        this.#now()
-      );
-    }
-    if (item.status !== expectedStatus) {
-      throw new CoreConflictError(
-        "board_status_conflict",
-        `Board item ${input.itemId} is ${item.status}, not ${expectedStatus}.`,
-        item,
-        this.#now()
-      );
-    }
-    if (item.status !== "todo" && item.status !== "in_progress") {
-      throw new CoreConflictError(
-        "board_transition_invalid",
-        `Board item ${input.itemId} cannot be claimed from ${item.status}.`,
-        item,
-        this.#now()
-      );
-    }
-    const now = this.#now();
-    const claimed = {
-      ...item,
-      status: item.status === "todo" ? "in_progress" : item.status,
-      assignee: { holderId: input.holderId, heldSince: now },
-      boardSeq: this.#nextSeq(tenant),
-      updatedAt: now
-    };
-    this.#items.set(tenantKey(tenant, input.itemId), claimed);
-    return claimed;
-  }
-  async unclaim(tenant, input) {
-    const item = this.#require(tenant, input.itemId);
-    if (item.assignee === void 0) {
-      throw new ByokCoreError(
-        "board_not_held",
-        `Board item ${input.itemId} is not held by anyone.`
-      );
-    }
-    if (item.assignee.holderId !== input.holderId) {
-      throw new CoreConflictError(
-        "board_claim_conflict",
-        `Board item ${input.itemId} is held by ${item.assignee.holderId}, not ${input.holderId}.`,
-        item,
-        this.#now()
-      );
-    }
-    const now = this.#now();
-    const released = {
-      tenantId: item.tenantId,
-      itemId: item.itemId,
-      channel: item.channel,
-      title: item.title,
-      status: item.status === "in_progress" ? "todo" : item.status,
-      boardSeq: this.#nextSeq(tenant),
-      createdAt: item.createdAt,
-      updatedAt: now
-    };
-    this.#items.set(tenantKey(tenant, input.itemId), released);
-    return released;
-  }
-  async updateStatus(tenant, input) {
-    const item = this.#require(tenant, input.itemId);
-    if (item.status !== input.expectedStatus) {
-      throw new CoreConflictError(
-        "board_status_conflict",
-        `Board item ${input.itemId} is ${item.status}, not ${input.expectedStatus}.`,
-        item,
-        this.#now()
-      );
-    }
-    if (input.holderId !== void 0 && item.assignee?.holderId !== input.holderId) {
-      throw new CoreConflictError(
-        "board_claim_conflict",
-        `Board item ${input.itemId} is not held by ${input.holderId}.`,
-        item,
-        this.#now()
-      );
-    }
-    if (!isLegalBoardTransition(input.expectedStatus, input.status)) {
-      throw new CoreConflictError(
-        "board_transition_invalid",
-        `${input.expectedStatus} to ${input.status} is not a legal board transition.`,
-        item,
-        this.#now()
-      );
-    }
-    const now = this.#now();
-    const updated = {
-      ...item,
-      status: input.status,
-      boardSeq: this.#nextSeq(tenant),
-      updatedAt: now
-    };
-    this.#items.set(tenantKey(tenant, input.itemId), updated);
-    return updated;
-  }
-  #require(tenant, itemId) {
-    const item = this.#items.get(tenantKey(tenant, itemId));
-    if (item === void 0) {
-      throw new ByokCoreError(
-        "board_item_not_found",
-        `Board item ${itemId} does not exist in this tenant.`
-      );
-    }
-    return item;
-  }
-  #nextSeq(tenant) {
-    const next = (this.#seqByTenant.get(tenant) ?? 0) + 1;
-    this.#seqByTenant.set(tenant, next);
-    return next;
-  }
-  #now() {
-    return this.#clock.now().toISOString();
-  }
-};
-
-// src/in-memory/mailbox.ts
-var DEFAULT_READ_LIMIT = 50;
-var InMemoryMailboxStore = class {
-  #devices = /* @__PURE__ */ new Map();
-  #clock;
-  #quota;
-  /** The mailbox reads its limit from quota; quota never reads the mailbox. */
-  constructor(clock, quota) {
-    this.#clock = clock;
-    this.#quota = quota;
-  }
-  async append(tenant, input) {
-    const device = this.#device(tenant, input.deviceId);
-    const appended = device.mutationTail.then(async () => {
-      const existing = device.byMessageId.get(input.messageId);
-      if (existing !== void 0) return existing;
-      const limit = input.admission === "cancellation" ? void 0 : await this.#mailboxLimit(tenant);
-      const seq = device.nextSeq;
-      const materialized = await input.materialize(seq);
-      if (limit !== void 0) {
-        const used = this.#usedBytes(tenant);
-        if (used + materialized.byteSize > limit) {
-          throw new ByokCoreError(
-            "storage_quota_exceeded",
-            `Mailbox would reach ${String(used + materialized.byteSize)} bytes, over the limit of ${String(limit)} bytes.`
-          );
-        }
-      }
-      const message = {
-        tenantId: tenant,
-        deviceId: input.deviceId,
-        seq,
-        messageId: input.messageId,
-        ...materialized,
-        state: "pending",
-        appendedAt: this.#now()
-      };
-      device.nextSeq += 1;
-      device.messages.push(message);
-      device.byMessageId.set(message.messageId, message);
-      return message;
-    });
-    device.mutationTail = appended.then(
-      () => void 0,
-      () => void 0
-    );
-    return appended;
-  }
-  async readUsage(tenant) {
-    return { bytes: this.#usedBytes(tenant) };
-  }
-  async readAfter(tenant, query) {
-    const device = this.#devices.get(tenantKey(tenant, query.deviceId));
-    const limit = query.limit ?? DEFAULT_READ_LIMIT;
-    if (device === void 0) {
-      return { messages: [], nextSeq: query.afterSeq, hasMore: false, recoverableFrom: 1 };
-    }
-    const pending = device.messages.filter((message) => message.state === "pending" && message.seq > query.afterSeq).sort((left, right) => left.seq - right.seq);
-    const page = pending.slice(0, limit);
-    const last = page.at(-1);
-    return {
-      messages: page,
-      // Reading is not acknowledging: the returned position is a *read* cursor.
-      // Nothing above was mutated, so an identical call replays the same page.
-      nextSeq: last?.seq ?? query.afterSeq,
-      hasMore: pending.length > page.length,
-      // Computed over the WHOLE mailbox, not the queried slice: the floor is a
-      // property of the device's history, and reporting it relative to
-      // `afterSeq` would make every cursor look recoverable from itself.
-      recoverableFrom: this.#recoverableFrom(device)
-    };
-  }
-  async advanceCursor(tenant, input) {
-    const device = this.#device(tenant, input.deviceId);
-    const advanced = device.mutationTail.then(() => {
-      if (input.ackedSeq < device.ackedSeq) {
-        throw new CoreConflictError(
-          "mailbox_cursor_regression",
-          `Cursor for device ${input.deviceId} is at ${device.ackedSeq}; refusing to move it back to ${input.ackedSeq}.`,
-          this.#cursorState(tenant, input.deviceId, device),
-          this.#now()
-        );
-      }
-      if (input.ackedSeq > device.deliveredSeq) {
-        throw new CoreConflictError(
-          "mailbox_cursor_ahead_of_delivery",
-          `Cursor for device ${input.deviceId} was delivered through ${device.deliveredSeq}; refusing to acknowledge future cursor ${input.ackedSeq}.`,
-          this.#cursorState(tenant, input.deviceId, device),
-          this.#now()
-        );
-      }
-      device.ackedSeq = input.ackedSeq;
-      device.cursorUpdatedAt = this.#now();
-      for (const [index, message] of device.messages.entries()) {
-        if (message.state === "pending" && message.seq <= input.ackedSeq) {
-          device.messages[index] = { ...message, state: "acked" };
-          device.byMessageId.set(message.messageId, device.messages[index]);
-        }
-      }
-      return this.#cursorState(tenant, input.deviceId, device);
-    });
-    device.mutationTail = advanced.then(
-      () => void 0,
-      () => void 0
-    );
-    return advanced;
-  }
-  async recordDelivery(tenant, input) {
-    const device = this.#device(tenant, input.deviceId);
-    const recorded = device.mutationTail.then(() => {
-      if (input.deliveredSeq > device.deliveredSeq) {
-        device.deliveredSeq = input.deliveredSeq;
-      }
-      return this.#cursorState(tenant, input.deviceId, device);
-    });
-    device.mutationTail = recorded.then(
-      () => void 0,
-      () => void 0
-    );
-    return recorded;
-  }
-  async readCursor(tenant, deviceId) {
-    const device = this.#devices.get(tenantKey(tenant, deviceId));
-    if (device === void 0) {
-      return { tenantId: tenant, deviceId, deliveredSeq: 0, ackedSeq: 0, updatedAt: this.#now() };
-    }
-    return this.#cursorState(tenant, deviceId, device);
-  }
-  async collectExpired(tenant, input) {
-    assertCollectExpiredInput(input);
-    assertCanonicalTimestamp(input.ackedBefore, "ackedBefore");
-    assertCanonicalTimestamp(input.expireUnackedBefore, "expireUnackedBefore");
-    let removed = 0, expired = 0, more = false;
-    try {
-      phases: for (const phase of ["acked", "pending"]) {
-        for (const [key, device] of this.#devices) {
-          if (!key.startsWith(tenantKey(tenant, ""))) continue;
-          const collected = device.mutationTail.then(() => {
-            for (let index = 0; index < device.messages.length; ) {
-              const message = device.messages[index];
-              const cutoff = phase === "acked" ? input.ackedBefore : input.expireUnackedBefore;
-              if (message.state !== phase || message.appendedAt >= cutoff) {
-                index++;
-                continue;
-              }
-              if (removed + expired === input.limit) {
-                more = true;
-                return;
-              }
-              if (phase === "acked") {
-                device.messages.splice(index, 1);
-                device.byMessageId.delete(message.messageId);
-                removed++;
-              } else {
-                const retired = { ...message, state: "expired" };
-                device.messages[index] = retired;
-                device.byMessageId.set(retired.messageId, retired);
-                expired++;
-                index++;
-              }
-            }
-          });
-          device.mutationTail = collected.then(() => void 0, () => void 0);
-          await collected;
-          if (more) break phases;
-        }
-      }
-    } catch (cause) {
-      throw new CollectExpiredFailure({ removed, expired, releasedBytes: 0n }, 0, void 0, { cause });
-    }
-    return { removed, expired, releasedBytes: 0n, more };
-  }
-  async #mailboxLimit(tenant) {
-    const entitlement = await this.#quota.readEntitlement(tenant);
-    if (entitlement === void 0) {
-      throw new ByokCoreError(
-        "storage_entitlement_missing",
-        "No storage entitlement has been issued for this tenant."
-      );
-    }
-    return entitlement.mailboxLimitBytes;
-  }
-  /** Every retained row of the tenant, in any state, on any device. */
-  #usedBytes(tenant) {
-    const prefix = tenantKey(tenant, "");
-    let bytes = 0n;
-    for (const [key, device] of this.#devices.entries()) {
-      if (!key.startsWith(prefix)) continue;
-      for (const message of device.messages) bytes += message.byteSize;
-    }
-    return bytes;
-  }
-  #device(tenant, deviceId) {
-    if (deviceId.length === 0) {
-      throw new ByokCoreError("mailbox_message_not_found", "Device id must not be empty.");
-    }
-    const key = tenantKey(tenant, deviceId);
-    const existing = this.#devices.get(key);
-    if (existing !== void 0) return existing;
-    const created = {
-      nextSeq: 1,
-      deliveredSeq: 0,
-      ackedSeq: 0,
-      cursorUpdatedAt: this.#now(),
-      mutationTail: Promise.resolve(),
-      messages: [],
-      byMessageId: /* @__PURE__ */ new Map()
-    };
-    this.#devices.set(key, created);
-    return created;
-  }
-  /**
-   * One past the highest row this device lost, which is exactly the highest
-   * `expired` seq: dead-lettered rows are kept rather than deleted (§12.7.5),
-   * so the loss stays observable and needs no column of its own to remember it.
-   *
-   * `acked` is deliberately not counted. A consumed row is not a lost one, and
-   * counting it would turn a daemon re-polling from an old cursor — which the
-   * at-least-once contract explicitly allows — into a hard failure.
-   */
-  #recoverableFrom(device) {
-    let lost = 0;
-    for (const message of device.messages) {
-      if (message.state === "expired" && message.seq > lost) lost = message.seq;
-    }
-    return lost + 1;
-  }
-  #cursorState(tenant, deviceId, device) {
-    return {
-      tenantId: tenant,
-      deviceId,
-      deliveredSeq: device.deliveredSeq,
-      ackedSeq: device.ackedSeq,
-      updatedAt: device.cursorUpdatedAt
-    };
-  }
-  #now() {
-    return this.#clock.now().toISOString();
-  }
-};
-
-// src/in-memory/blob.ts
-var DEFAULT_LIST_LIMIT2 = 100;
-var InMemoryObjectStore = class {
-  constructor(clock, maintenance) {
-    this.maintenance = maintenance;
-    this.#clock = clock;
-    if (maintenance === void 0 || maintenance.ledger === void 0 || typeof maintenance.bytes?.deleteObject !== "function") {
-      throw new ByokCoreError("retention_input_invalid", "ObjectStore requires its shared ledger and an explicit byte authority.");
-    }
-  }
-  maintenance;
-  #manifest = /* @__PURE__ */ new Map();
-  #references = /* @__PURE__ */ new Map();
-  #clock;
-  #deleteCursor = /* @__PURE__ */ new Map();
-  async putManifest(tenant, input) {
-    const key = tenantKey(tenant, input.hash);
-    const existing = this.#manifest.get(key);
-    if (existing !== void 0 && existing.state !== "deleted") return existing;
-    const now = this.#now();
-    const entry = {
-      tenantId: tenant,
-      hash: input.hash,
-      byteSize: input.byteSize,
-      contentType: input.contentType,
-      state: "pending",
-      refCount: 0,
-      createdAt: now,
-      updatedAt: now
-    };
-    this.#manifest.set(key, entry);
-    return entry;
-  }
-  async commit(tenant, input) {
-    const entry = this.#require(tenant, input.hash);
-    if (entry.byteSize !== input.observedByteSize || entry.contentType !== input.observedContentType) {
-      throw new ByokCoreError(
-        "storage_integrity_mismatch",
-        `Observed object ${input.hash} (${String(input.observedByteSize)} bytes, ${input.observedContentType}) does not match the declared manifest.`
-      );
-    }
-    if (entry.state === "committed") return entry;
-    return this.#transition(tenant, entry, "committed");
-  }
-  async get(tenant, hash) {
-    return this.#manifest.get(tenantKey(tenant, hash));
-  }
-  async list(tenant, query) {
-    if (query.deletePendingBefore !== void 0) {
-      assertCanonicalTimestamp(query.deletePendingBefore, "deletePendingBefore");
-    }
-    const prefix = tenantKey(tenant, "");
-    const matches = [];
-    for (const [key, entry] of this.#manifest.entries()) {
-      if (!key.startsWith(prefix)) continue;
-      if (query.state !== void 0 && entry.state !== query.state) continue;
-      if (query.deletePendingBefore !== void 0) {
-        if (entry.deletePendingAt === void 0) continue;
-        if (entry.deletePendingAt >= query.deletePendingBefore) continue;
-      }
-      matches.push(entry);
-    }
-    matches.sort((left, right) => left.hash.localeCompare(right.hash));
-    return matches.slice(0, query.limit ?? DEFAULT_LIST_LIMIT2);
-  }
-  async addReference(tenant, input) {
-    const entry = this.#require(tenant, input.hash);
-    if (entry.state !== "committed") {
-      throw new ByokCoreError(
-        "object_state_invalid",
-        `Only committed objects can be referenced; ${input.hash} is ${entry.state}.`
-      );
-    }
-    const refKey = tenantKey(tenant, input.hash, input.refKind, input.refId);
-    if (!this.#references.has(refKey)) {
-      this.#references.set(refKey, {
-        tenantId: tenant,
-        hash: input.hash,
-        refKind: input.refKind,
-        refId: input.refId,
-        createdAt: this.#now()
-      });
-    }
-    return this.#recount(tenant, entry);
-  }
-  async removeReference(tenant, input) {
-    const entry = this.#require(tenant, input.hash);
-    this.#references.delete(tenantKey(tenant, input.hash, input.refKind, input.refId));
-    return this.#recount(tenant, entry);
-  }
-  async markDeletePending(tenant, hash) {
-    const entry = this.#require(tenant, hash);
-    if (entry.refCount !== 0) {
-      throw new ByokCoreError(
-        "object_state_invalid",
-        `Object ${hash} still has ${entry.refCount} reference(s).`
-      );
-    }
-    return this.#transition(tenant, entry, "delete_pending");
-  }
-  async markDeleted(tenant, hash) {
-    const entry = this.#require(tenant, hash);
-    return this.#transition(tenant, entry, "deleted");
-  }
-  async collectExpired(tenant, input) {
-    assertCollectExpiredInput(input);
-    assertCanonicalTimestamp(input.orphanBefore, "orphanBefore");
-    const eligible = (entry) => entry.tenantId === tenant && entry.refCount === 0 && !this.maintenance.ledger.hasReservedObject(tenant, entry.hash) && (entry.state === "delete_pending" || (entry.state === "pending" || entry.state === "committed") && entry.updatedAt < input.orphanBefore);
-    let removed = 0, releasedBytes = 0n, more = false, visited = 0, failures = 0;
-    let firstFailure;
-    const cursor = this.#deleteCursor.get(tenant) ?? "";
-    const entries = [...this.#manifest.values()].filter(eligible);
-    const pending = entries.filter((entry) => entry.state === "delete_pending").sort((a, b) => a.hash.localeCompare(b.hash));
-    const first = pending.filter((entry) => entry.hash > cursor).slice(0, input.limit);
-    const fresh = entries.filter((entry) => entry.state !== "delete_pending").sort((a, b) => a.updatedAt.localeCompare(b.updatedAt) || a.hash.localeCompare(b.hash)).slice(0, input.limit - first.length);
-    const wrapped = pending.filter((entry) => entry.hash <= cursor).slice(0, input.limit - first.length - fresh.length);
-    const candidates = [...first, ...fresh, ...wrapped];
-    more = entries.length > candidates.length;
-    for (const candidate of candidates) {
-      if (visited++ === input.limit) {
-        more = true;
-        break;
-      }
-      const entry = this.#manifest.get(tenantKey(tenant, candidate.hash));
-      if (!eligible(entry)) continue;
-      const pending2 = entry.state === "delete_pending" ? entry : { ...entry, state: "delete_pending", deletePendingAt: input.now, updatedAt: input.now };
-      this.#manifest.set(tenantKey(tenant, entry.hash), pending2);
-      try {
-        const release = this.maintenance.ledger.prepareCollectedObjectRelease(tenant, entry.hash, entry.byteSize, input.now);
-        this.maintenance.bytes.deleteObject(tenant, entry.hash);
-        release.commit();
-        const released = release.releasedBytes;
-        this.#manifest.set(tenantKey(tenant, entry.hash), { ...pending2, state: "deleted", updatedAt: input.now });
-        removed++;
-        releasedBytes += released;
-      } catch (cause) {
-        failures++;
-        firstFailure ??= cause;
-      }
-    }
-    this.#deleteCursor.set(tenant, wrapped.at(-1)?.hash ?? first.at(-1)?.hash ?? "");
-    if (failures > 0) throw new CollectExpiredFailure({ removed, expired: 0, releasedBytes }, failures, true, { cause: firstFailure });
-    return { removed, expired: 0, releasedBytes, more };
-  }
-  #transition(tenant, entry, next) {
-    if (!isLegalObjectTransition(entry.state, next)) {
-      throw new ByokCoreError(
-        "object_state_invalid",
-        `${entry.state} to ${next} is not a legal object manifest transition.`
-      );
-    }
-    const now = this.#now();
-    const updated = {
-      ...entry,
-      state: next,
-      updatedAt: now,
-      ...next === "delete_pending" ? { deletePendingAt: now } : {}
-    };
-    this.#manifest.set(tenantKey(tenant, entry.hash), updated);
-    return updated;
-  }
-  #recount(tenant, entry) {
-    const refPrefix = tenantKey(tenant, entry.hash, "");
-    let refCount = 0;
-    for (const key of this.#references.keys()) {
-      if (key.startsWith(refPrefix)) refCount += 1;
-    }
-    const updated = { ...entry, refCount, updatedAt: this.#now() };
-    this.#manifest.set(tenantKey(tenant, entry.hash), updated);
-    return updated;
-  }
-  #require(tenant, hash) {
-    const entry = this.#manifest.get(tenantKey(tenant, hash));
-    if (entry === void 0) {
-      throw new ByokCoreError(
-        "object_not_found",
-        `Object ${hash} has no manifest row in this tenant.`
-      );
-    }
-    return entry;
-  }
-  #now() {
-    return this.#clock.now().toISOString();
-  }
-};
-
-// src/in-memory/quota.ts
-var WARNING_NUMERATOR = 80n;
-var WARNING_DENOMINATOR = 100n;
-var InMemoryQuotaStore = class {
-  constructor(clock, objects, ledger) {
-    this.ledger = ledger;
-    this.#clock = clock;
-    this.#objects = objects;
-  }
-  ledger;
-  #entitlements = /* @__PURE__ */ new Map();
-  #clock;
-  #objects;
-  async readEntitlement(tenant) {
-    return this.#entitlements.get(tenant);
-  }
-  async writeEntitlement(tenant, input) {
-    if (input.downgradeGraceUntil !== void 0) {
-      assertCanonicalTimestamp(input.downgradeGraceUntil, "downgradeGraceUntil");
-    }
-    const existing = this.#entitlements.get(tenant);
-    if (existing !== void 0 && input.version <= existing.version) {
-      throw new CoreConflictError(
-        "storage_entitlement_version_conflict",
-        `Entitlement is at version ${String(existing.version)}; refusing to apply version ${String(input.version)}.`,
-        existing,
-        this.#now()
-      );
-    }
-    const entitlement = {
-      tenantId: tenant,
-      version: input.version,
-      hardLimitBytes: input.hardLimitBytes,
-      maxObjectBytes: input.maxObjectBytes,
-      maxInlineBytes: input.maxInlineBytes,
-      mailboxLimitBytes: input.mailboxLimitBytes,
-      retentionPolicyId: input.retentionPolicyId,
-      ...input.downgradeGraceUntil === void 0 ? {} : { downgradeGraceUntil: input.downgradeGraceUntil }
-    };
-    this.#entitlements.set(tenant, entitlement);
-    return entitlement;
-  }
-  async readUsage(tenant) {
-    return this.#usageOf(tenant);
-  }
-  async readStatus(tenant) {
-    const entitlement = this.#requireEntitlement(tenant);
-    const usage = this.#usageOf(tenant);
-    const used = this.#usedBytes(usage);
-    const graceActive = entitlement.downgradeGraceUntil !== void 0 && this.#now() < entitlement.downgradeGraceUntil;
-    return {
-      entitlement,
-      usage,
-      posture: this.#posture(entitlement, usage, graceActive),
-      availableBytes: used >= entitlement.hardLimitBytes ? 0n : entitlement.hardLimitBytes - used,
-      graceActive
-    };
-  }
-  async readReservation(tenant, reservationId) {
-    return this.ledger.readReservation(tenantKey(tenant, reservationId))?.reservation;
-  }
-  async reserve(tenant, input) {
-    const entitlement = this.#requireEntitlement(tenant);
-    await Array.from(this.#expireReservations(tenant));
-    const key = tenantKey(tenant, input.reservationId);
-    const existing = this.ledger.readReservation(key);
-    if (existing !== void 0) {
-      if (existing.reservation.state === "reserved") {
-        if (existing.reservation.kind !== input.kind || existing.reservation.expectedBytes !== input.expectedBytes || existing.reservation.contentHash !== input.contentHash || existing.reservation.contentType !== input.contentType) {
-          throw new ByokCoreError(
-            "storage_integrity_mismatch",
-            `Reservation ${input.reservationId} already binds a different storage declaration.`
-          );
-        }
-        return existing.reservation;
-      }
-      throw new ByokCoreError(
-        "storage_reservation_expired",
-        `Reservation ${input.reservationId} is already ${existing.reservation.state}.`
-      );
-    }
-    const usage = this.#usageOf(tenant);
-    const graceActive = entitlement.downgradeGraceUntil !== void 0 && this.#now() < entitlement.downgradeGraceUntil;
-    if (this.#posture(entitlement, usage, graceActive) === "suspended") {
-      throw new ByokCoreError(
-        "storage_write_suspended",
-        "Tenant is over its hard limit and its downgrade grace has ended; durable writes are suspended."
-      );
-    }
-    const perObjectLimit = input.kind === "object" ? entitlement.maxObjectBytes : entitlement.maxInlineBytes;
-    if (input.expectedBytes > perObjectLimit) {
-      throw new ByokCoreError(
-        "storage_object_too_large",
-        `${String(input.expectedBytes)} bytes exceeds the ${input.kind} limit of ${String(perObjectLimit)} bytes.`
-      );
-    }
-    if (this.#usedBytes(usage) + input.expectedBytes > entitlement.hardLimitBytes) {
-      throw new ByokCoreError(
-        "storage_quota_exceeded",
-        `Reserving ${String(input.expectedBytes)} bytes would exceed the hard limit of ${String(entitlement.hardLimitBytes)} bytes.`
-      );
-    }
-    const now = this.#now();
-    const reservation = {
-      tenantId: tenant,
-      reservationId: input.reservationId,
-      state: "reserved",
-      kind: input.kind,
-      expectedBytes: input.expectedBytes,
-      contentHash: input.contentHash,
-      contentType: input.contentType,
-      createdAt: now,
-      expiresAt: new Date(this.#clock.now().getTime() + input.ttlMs).toISOString()
-    };
-    this.ledger.writeReservation(key, { reservation, deduplicated: false });
-    this.#setUsage(tenant, { ...usage, reservedBytes: usage.reservedBytes + input.expectedBytes });
-    return reservation;
-  }
-  async finalizeReservation(tenant, input) {
-    const key = tenantKey(tenant, input.reservationId);
-    const record = this.#requireReservation(tenant, input.reservationId);
-    const reservation = record.reservation;
-    if (reservation.state === "committed") {
-      return {
-        reservation,
-        usage: this.#usageOf(tenant),
-        deduplicated: record.deduplicated
-      };
-    }
-    if (reservation.state !== "reserved") {
-      throw new ByokCoreError(
-        "storage_reservation_expired",
-        `Reservation ${input.reservationId} is ${reservation.state}.`
-      );
-    }
-    if (this.#now() >= reservation.expiresAt) {
-      this.#settle(tenant, key, record, "expired");
-      throw new ByokCoreError(
-        "storage_reservation_expired",
-        `Reservation ${input.reservationId} expired at ${reservation.expiresAt}.`
-      );
-    }
-    if (input.observedByteSize !== reservation.expectedBytes || input.observedContentType !== reservation.contentType) {
-      this.#settle(tenant, key, record, "aborted");
-      throw new ByokCoreError(
-        "storage_integrity_mismatch",
-        `Observed object does not match reservation ${input.reservationId}.`
-      );
-    }
-    if (reservation.kind === "object") {
-      try {
-        await this.#objects.commit(tenant, {
-          hash: reservation.contentHash,
-          observedByteSize: input.observedByteSize,
-          observedContentType: input.observedContentType
-        });
-      } catch (error) {
-        this.#settle(tenant, key, record, "aborted");
-        if (error instanceof ByokCoreError && (error.code === "object_not_found" || error.code === "object_state_invalid")) {
-          throw new ByokCoreError(
-            "storage_integrity_mismatch",
-            `Reservation ${input.reservationId} has no committable object manifest.`,
-            { cause: error }
-          );
-        }
-        throw error;
-      }
-    }
-    const deduplicated = this.ledger.isCounted(tenant, reservation.contentHash);
-    const settled = this.#settle(tenant, key, record, "committed", deduplicated);
-    if (!deduplicated) {
-      this.ledger.recordCommitted(tenant, reservation);
-      const current = this.#usageOf(tenant);
-      this.#setUsage(tenant, {
-        ...current,
-        committedObjectBytes: reservation.kind === "object" ? current.committedObjectBytes + reservation.expectedBytes : current.committedObjectBytes,
-        committedInlineBytes: reservation.kind === "inline" ? current.committedInlineBytes + reservation.expectedBytes : current.committedInlineBytes,
-        objectCount: reservation.kind === "object" ? current.objectCount + 1n : current.objectCount
-      });
-    }
-    return { reservation: settled, usage: this.#usageOf(tenant), deduplicated };
-  }
-  async abortReservation(tenant, reservationId) {
-    const key = tenantKey(tenant, reservationId);
-    const record = this.#requireReservation(tenant, reservationId);
-    if (record.reservation.state !== "reserved") return record.reservation;
-    return this.#settle(tenant, key, record, "aborted");
-  }
-  *#expireReservations(tenant, now = this.#now(), limit = Number.MAX_SAFE_INTEGER) {
-    const prefix = tenantKey(tenant, "");
-    let expired = 0;
-    for (const [key, record] of this.ledger.reservations()) {
-      if (!key.startsWith(prefix) || record.reservation.state !== "reserved" || now < record.reservation.expiresAt) continue;
-      yield this.#settle(tenant, key, record, "expired", false, now);
-      if (++expired === limit) return;
-    }
-  }
-  async collectExpired(tenant, input) {
-    assertCollectExpiredInput(input);
-    assertCanonicalTimestamp(input.settledBefore, "settledBefore");
-    let expired = 0, releasedBytes = 0n, removed = 0, more = false;
-    try {
-      for (const reservation of this.#expireReservations(tenant, input.now, input.limit)) {
-        expired++;
-        releasedBytes += reservation.expectedBytes;
-      }
-    } catch (cause) {
-      throw new CollectExpiredFailure({ removed, expired, releasedBytes }, 1, true, { cause });
-    }
-    const prefix = tenantKey(tenant, "");
-    try {
-      for (const [key, record] of this.ledger.reservations()) {
-        if (!key.startsWith(prefix)) continue;
-        const row = record.reservation;
-        const shouldExpire = row.state === "reserved" && row.expiresAt <= input.now;
-        const shouldRemove = (row.state === "expired" || row.state === "aborted") && row.settledAt !== void 0 && row.settledAt < input.settledBefore;
-        if (!shouldExpire && !shouldRemove) continue;
-        if (shouldExpire || removed + expired === input.limit) {
-          more = true;
-          continue;
-        }
-        this.ledger.deleteReservation(key);
-        removed++;
-      }
-    } catch (cause) {
-      throw new CollectExpiredFailure({ removed, expired, releasedBytes }, 0, void 0, { cause });
-    }
-    return { removed, expired, releasedBytes, more };
-  }
-  #settle(tenant, key, record, state, deduplicated = false, settledAt = this.#now()) {
-    const settled = {
-      ...record.reservation,
-      state,
-      settledAt
-    };
-    const usage = this.#usageOf(tenant);
-    if (usage.reservedBytes < record.reservation.expectedBytes) {
-      throw new ByokCoreError("storage_integrity_mismatch", "Reservation settlement would underflow reserved usage.");
-    }
-    this.ledger.writeReservation(key, { reservation: settled, deduplicated });
-    this.#setUsage(tenant, { ...usage, reservedBytes: usage.reservedBytes - record.reservation.expectedBytes });
-    return settled;
-  }
-  #posture(entitlement, usage, graceActive) {
-    const used = this.#usedBytes(usage);
-    if (used >= entitlement.hardLimitBytes) {
-      const graceConfigured = entitlement.downgradeGraceUntil !== void 0;
-      return graceConfigured && !graceActive ? "suspended" : "blocked";
-    }
-    if (entitlement.hardLimitBytes > 0n && used * WARNING_DENOMINATOR >= entitlement.hardLimitBytes * WARNING_NUMERATOR) {
-      return "warning";
-    }
-    return "normal";
-  }
-  #usedBytes(usage) {
-    return usage.committedObjectBytes + usage.committedInlineBytes + usage.reservedBytes;
-  }
-  #usageOf(tenant) {
-    return this.ledger.readUsage(tenant);
-  }
-  #setUsage(tenant, usage) {
-    this.ledger.writeUsage(tenant, { ...usage, updatedAt: this.#now() });
-  }
-  #requireEntitlement(tenant) {
-    const entitlement = this.#entitlements.get(tenant);
-    if (entitlement === void 0) {
-      throw new ByokCoreError(
-        "storage_entitlement_missing",
-        "No storage entitlement has been issued for this tenant."
-      );
-    }
-    return entitlement;
-  }
-  #requireReservation(tenant, reservationId) {
-    const record = this.ledger.readReservation(tenantKey(tenant, reservationId));
-    if (record === void 0) {
-      throw new ByokCoreError(
-        "storage_reservation_not_found",
-        `Reservation ${reservationId} does not exist in this tenant.`
-      );
-    }
-    return record;
-  }
-  #now() {
-    return this.#clock.now().toISOString();
-  }
-};
-
-// src/in-memory/skill-pack.ts
-var DEFAULT_LIST_LIMIT3 = 50;
-var InMemorySkillPackStore = class {
-  #packs = /* @__PURE__ */ new Map();
-  async publish(tenant, input) {
-    const { manifest } = input;
-    const structural = checkSkillPackManifest(manifest);
-    if (!structural.ok) {
-      throw new ByokCoreError(
-        "skill_pack_manifest_invalid",
-        `Refusing to publish ${JSON.stringify(manifest.name)}: ${structural.reason} \u2014 ${structural.detail}`
-      );
-    }
-    const contents = /* @__PURE__ */ new Map();
-    for (const file of input.files) {
-      if (contents.has(file.path)) {
-        throw new ByokCoreError(
-          "skill_pack_manifest_invalid",
-          `Refusing to publish ${JSON.stringify(manifest.name)}: ${JSON.stringify(file.path)} was supplied twice.`
-        );
-      }
-      contents.set(file.path, file.content);
-    }
-    for (const declared of manifest.files) {
-      const content = contents.get(declared.path);
-      if (content === void 0) {
-        throw new ByokCoreError(
-          "skill_pack_manifest_invalid",
-          `Refusing to publish ${JSON.stringify(manifest.name)}: ${JSON.stringify(declared.path)} is declared but was not supplied.`
-        );
-      }
-      const bytes = new TextEncoder().encode(content).length;
-      if (bytes !== declared.byteSize) {
-        throw new ByokCoreError(
-          "skill_pack_manifest_invalid",
-          `Refusing to publish ${JSON.stringify(manifest.name)}: ${JSON.stringify(declared.path)} declares ${declared.byteSize} bytes and supplies ${bytes}.`
-        );
-      }
-    }
-    if (contents.size !== manifest.files.length) {
-      throw new ByokCoreError(
-        "skill_pack_manifest_invalid",
-        `Refusing to publish ${JSON.stringify(manifest.name)}: ${contents.size} files were supplied for ${manifest.files.length} declared rows.`
-      );
-    }
-    const entry = checkSkillPackEntry(manifest, contents.get(SKILL_PACK_ENTRY_PATH));
-    if (!entry.ok) {
-      throw new ByokCoreError(
-        "skill_pack_manifest_invalid",
-        `Refusing to publish ${JSON.stringify(manifest.name)}: ${entry.reason} \u2014 ${entry.detail}`
-      );
-    }
-    this.#packs.set(tenantKey(tenant, manifest.name), { manifest, contents });
-    return manifest;
-  }
-  async get(tenant, name) {
-    return this.#packs.get(tenantKey(tenant, name))?.manifest;
-  }
-  async list(tenant, query) {
-    const prefix = tenantKey(tenant, "");
-    const manifests = [];
-    for (const [key, pack] of this.#packs.entries()) {
-      if (!key.startsWith(prefix)) continue;
-      manifests.push(pack.manifest);
-    }
-    manifests.sort((left, right) => left.name < right.name ? -1 : left.name > right.name ? 1 : 0);
-    return manifests.slice(0, query.limit ?? DEFAULT_LIST_LIMIT3);
-  }
-  async readFile(tenant, name, path) {
-    const pack = this.#packs.get(tenantKey(tenant, name));
-    if (pack === void 0) return void 0;
-    const declared = pack.manifest.files.find((file) => file.path === path);
-    const content = pack.contents.get(path);
-    if (declared === void 0 || content === void 0) return void 0;
-    return {
-      path: declared.path,
-      contentHash: declared.contentHash,
-      byteSize: declared.byteSize,
-      content
-    };
-  }
-};
-
-// src/in-memory/truth.ts
-var DEFAULT_MANIFEST_LIMIT = 100;
-var InMemoryTruthStore = class {
-  #records = /* @__PURE__ */ new Map();
-  #clock;
-  constructor(clock) {
-    this.#clock = clock;
-  }
-  async writeTerminal(tenant, input) {
-    const key = tenantKey(tenant, "task.terminal", input.taskId);
-    const existing = this.#records.get(key);
-    if (existing !== void 0) {
-      if (existing.contentHash === input.contentHash) {
-        return existing;
-      }
-      throw new CoreConflictError(
-        "terminal_conflict",
-        `Task ${input.taskId} already has an immutable terminal record with a different hash.`,
-        existing,
-        this.#now()
-      );
-    }
-    const record = {
-      tenantId: tenant,
-      kind: "task.terminal",
-      recordKey: input.taskId,
-      rev: 1,
-      contentHash: input.contentHash,
-      byteSize: input.byteSize,
-      body: input.body,
-      ...input.label === void 0 ? {} : { label: input.label },
-      ...input.requestId === void 0 ? {} : { requestId: input.requestId },
-      writtenAt: this.#now()
-    };
-    this.#records.set(key, record);
-    return record;
-  }
-  async writeSnapshot(tenant, input) {
-    const key = tenantKey(tenant, input.kind, input.recordKey);
-    const existing = this.#records.get(key);
-    const currentRev = existing?.rev ?? 0;
-    if (input.expectedRev !== currentRev) {
-      throw new CoreConflictError(
-        "truth_revision_conflict",
-        `Record ${input.kind}/${input.recordKey} is at rev ${currentRev}, not ${input.expectedRev}.`,
-        existing,
-        this.#now()
-      );
-    }
-    const record = {
-      tenantId: tenant,
-      kind: input.kind,
-      recordKey: input.recordKey,
-      rev: currentRev + 1,
-      contentHash: input.contentHash,
-      byteSize: input.byteSize,
-      body: input.body,
-      ...input.label === void 0 ? {} : { label: input.label },
-      ...input.requestId === void 0 ? {} : { requestId: input.requestId },
-      writtenAt: this.#now()
-    };
-    this.#records.set(key, record);
-    return record;
-  }
-  async getRecord(tenant, selector) {
-    return this.#records.get(tenantKey(tenant, selector.kind, selector.recordKey));
-  }
-  async listManifest(tenant, query) {
-    const prefix = tenantKey(tenant, "");
-    const entries = [];
-    for (const [key, record] of this.#records.entries()) {
-      if (!key.startsWith(prefix)) continue;
-      if (query.kind !== void 0 && record.kind !== query.kind) continue;
-      if (query.keyPrefix !== void 0 && !record.recordKey.startsWith(query.keyPrefix)) {
-        continue;
-      }
-      entries.push({
-        kind: record.kind,
-        recordKey: record.recordKey,
-        rev: record.rev,
-        contentHash: record.contentHash,
-        byteSize: record.byteSize,
-        ...record.label === void 0 ? {} : { label: record.label },
-        updatedAt: record.writtenAt
-      });
-    }
-    entries.sort(
-      (left, right) => left.kind.localeCompare(right.kind) || left.recordKey.localeCompare(right.recordKey)
-    );
-    return entries.slice(0, query.limit ?? DEFAULT_MANIFEST_LIMIT);
-  }
-  #now() {
-    return this.#clock.now().toISOString();
-  }
-};
-
-// src/in-memory/clock.ts
-var IN_MEMORY_CLOCK_EPOCH = "2026-01-01T00:00:00.000Z";
-function createMutableClock(start = new Date(IN_MEMORY_CLOCK_EPOCH)) {
-  let current = start.getTime();
-  return {
-    now() {
-      return new Date(current);
-    },
-    advance(ms) {
-      current += ms;
-    },
-    set(instant) {
-      current = instant.getTime();
-    }
-  };
-}
-
-// src/in-memory/device-assertion-replay.ts
-function replayKey(input) {
-  return JSON.stringify([
-    input.tenantId,
-    input.issuer,
-    input.productId,
-    input.deviceId,
-    input.audience,
-    input.schema,
-    input.jti
-  ]);
-}
-var InMemoryDeviceAssertionReplayAuthority = class {
-  #expiresAtByKey = /* @__PURE__ */ new Map();
-  async consume(input) {
-    const expiresAt = Date.parse(input.expiresAt);
-    if (!Number.isFinite(expiresAt)) throw new Error("device assertion replay expiry is invalid");
-    const key = replayKey(input);
-    if (this.#expiresAtByKey.has(key)) return false;
-    this.#expiresAtByKey.set(key, expiresAt);
-    return true;
-  }
-  async collectExpired(tenant, input) {
-    assertCollectExpiredInput(input);
-    const cutoff = Date.parse(input.now);
-    let removed = 0, more = false;
-    for (const [key, expiresAt] of this.#expiresAtByKey) {
-      if (JSON.parse(key)[0] !== tenant || expiresAt > cutoff) continue;
-      if (removed === input.limit) {
-        more = true;
-        break;
-      }
-      this.#expiresAtByKey.delete(key);
-      removed++;
-    }
-    return { removed, expired: 0, releasedBytes: 0n, more };
-  }
-};
-
-// src/in-memory/index.ts
-function createInMemoryCoreStores(options) {
-  const clock = options.clock ?? createMutableClock();
-  const ledger = new InMemoryStorageLedger(clock);
-  const objects = new InMemoryObjectStore(clock, { ledger, bytes: options.objectBytes });
-  const quota = new InMemoryQuotaStore(clock, objects, ledger);
-  const stores = {
-    mailbox: new InMemoryMailboxStore(clock, quota),
-    board: new InMemoryBoardStore(clock),
-    truth: new InMemoryTruthStore(clock),
-    presence: new InMemoryPresenceStore(clock),
-    objects,
-    quota,
-    skillPacks: new InMemorySkillPackStore()
-  };
-  return { stores, clock };
-}
-function createInMemoryCoreCompositionWithClock(objectBytes) {
-  const clock = createMutableClock();
-  return { stores: createInMemoryCoreStores({ clock, objectBytes }).stores, clock };
-}
-
-// src/routine-schedule.ts
-var ROUTINE_DAYS_OF_WEEK = Object.freeze(["mon", "tue", "wed", "thu", "fri", "sat", "sun"]);
-var ROUTINE_HORIZON_MS = 368 * 864e5;
-var ROUTINE_MIN_NOW = Date.UTC(2e3, 0, 1);
-var ROUTINE_MAX_NOW = Date.UTC(2200, 0, 1);
-var KEYS = /* @__PURE__ */ new Set(["minute", "hour", "daysOfWeek", "dayOfMonth", "month", "tz"]);
-var COMMON_YEAR_DAYS = [31, 28, 31, 30, 31, 30, 31, 31, 30, 31, 30, 31];
-var TZ_NAME = /^[A-Za-z][A-Za-z0-9_+-]*(?:\/[A-Za-z0-9_+-]+)*$/;
-var DAY_MS = 864e5;
-var UTC_DAY_NAME = ["sun", "mon", "tue", "wed", "thu", "fri", "sat"];
-var ScheduleError = class extends Error {
-  code;
-  constructor(code, message) {
-    super(message);
-    this.code = code;
-  }
-};
-var invalid = (message) => new ScheduleError("schedule_invalid", message);
-function integer(value, name, min, max) {
-  if (typeof value !== "number" || !Number.isInteger(value) || value < min || value > max) throw invalid(`${name} must be an integer ${min}-${max}`);
-  return value;
-}
-var formatters = /* @__PURE__ */ new Map();
-function formatter(tz) {
-  let f = formatters.get(tz);
-  if (!f) {
-    f = new Intl.DateTimeFormat("en-US", { timeZone: tz, hourCycle: "h23", year: "numeric", month: "numeric", day: "numeric", hour: "numeric", minute: "numeric", second: "numeric" });
-    if (formatters.size >= 64) formatters.delete(formatters.keys().next().value);
-    formatters.set(tz, f);
-  }
-  return f;
-}
-function checkTz(tz) {
-  if (typeof tz !== "string" || !TZ_NAME.test(tz)) throw new ScheduleError("tz_invalid", `${JSON.stringify(tz)} is not an IANA zone name`);
-  try {
-    formatter(tz);
-  } catch {
-    throw new ScheduleError("tz_invalid", `"${tz}" is not a known IANA zone`);
-  }
-  return tz;
-}
-function parse(schedule) {
-  if (schedule === null || typeof schedule !== "object" || Array.isArray(schedule)) throw invalid("schedule must be an object");
-  for (const key of Object.keys(schedule)) if (!KEYS.has(key)) throw invalid(`unknown field ${key}`);
-  const p = { minute: integer(schedule.minute, "minute", 0, 59), hour: integer(schedule.hour, "hour", 0, 23), tz: checkTz(schedule.tz) };
-  const s = schedule;
-  if (s.daysOfWeek !== void 0 && s.dayOfMonth !== void 0) throw invalid("daysOfWeek and dayOfMonth cannot both appear");
-  if (s.month !== void 0 && s.dayOfMonth === void 0) throw invalid("month needs dayOfMonth");
-  if (s.daysOfWeek !== void 0) {
-    if (!Array.isArray(s.daysOfWeek) || s.daysOfWeek.length < 1 || s.daysOfWeek.length > 7) throw invalid("daysOfWeek must list 1-7 days");
-    for (const d of s.daysOfWeek) if (!ROUTINE_DAYS_OF_WEEK.includes(d)) throw invalid(`unknown day ${JSON.stringify(d)}`);
-    p.days = new Set(s.daysOfWeek);
-  }
-  if (s.dayOfMonth !== void 0) {
-    p.dayOfMonth = integer(s.dayOfMonth, "dayOfMonth", 1, 31);
-    if (s.month !== void 0) {
-      p.month = integer(s.month, "month", 1, 12);
-      if (p.month === 2 && p.dayOfMonth === 29) {
-        throw new ScheduleError("schedule_beyond_horizon", "February 29 exists only in leap years; the next one can be up to 8 years away, beyond the 368-day horizon");
-      }
-      if (p.dayOfMonth > COMMON_YEAR_DAYS[p.month - 1]) {
-        throw new ScheduleError("schedule_unreachable", `month ${p.month} has no day ${p.dayOfMonth}`);
-      }
-    }
-  }
-  return p;
-}
-function checkRoutineSchedule(schedule) {
-  try {
-    parse(schedule);
-    return { ok: true };
-  } catch (e) {
-    if (e instanceof ScheduleError) return { ok: false, code: e.code, message: e.message };
-    throw e;
-  }
-}
-function localAsUtc(tz, instant) {
-  const p = {};
-  for (const part of formatter(tz).formatToParts(instant)) if (part.type !== "literal") p[part.type] = Number(part.value);
-  return Date.UTC(p.year, p.month - 1, p.day, p.hour, p.minute, p.second);
-}
-var offsetAt = (tz, instant) => localAsUtc(tz, instant) - Math.floor(instant / 1e3) * 1e3;
-function resolve(tz, local) {
-  const before = offsetAt(tz, local - DAY_MS);
-  const offsets = /* @__PURE__ */ new Set([before, offsetAt(tz, local), offsetAt(tz, local + DAY_MS)]);
-  const valid = [...offsets].map((o) => local - o).filter((i) => offsetAt(tz, i) === local - i);
-  return valid.length ? { instant: Math.min(...valid), shifted: false } : { instant: local - before, shifted: true };
-}
-function matchesDate(p, y, m, d) {
-  if (p.days) return p.days.has(UTC_DAY_NAME[new Date(Date.UTC(y, m - 1, d)).getUTCDay()]);
-  if (p.dayOfMonth !== void 0) return d === p.dayOfMonth && (p.month === void 0 || m === p.month);
-  return true;
-}
-function nextRoutineOccurrence(schedule, now) {
-  if (!Number.isSafeInteger(now) || now < ROUTINE_MIN_NOW || now >= ROUTINE_MAX_NOW) {
-    throw new RangeError("now must be a safe integer epoch ms in [2000-01-01, 2200-01-01)");
-  }
-  let p;
-  try {
-    p = parse(schedule);
-  } catch (error) {
-    if (error instanceof ScheduleError) throw new ByokCoreError("routine_schedule_invalid", error.message);
-    throw error;
-  }
-  const start = localAsUtc(p.tz, now);
-  const day0 = Date.UTC(new Date(start).getUTCFullYear(), new Date(start).getUTCMonth(), new Date(start).getUTCDate());
-  let best = Infinity;
-  for (let k = -1; k <= 368; k += 1) {
-    const day = new Date(day0 + k * DAY_MS);
-    const y = day.getUTCFullYear(), m = day.getUTCMonth() + 1, d = day.getUTCDate();
-    if (!matchesDate(p, y, m, d)) continue;
-    const { instant, shifted } = resolve(p.tz, Date.UTC(y, m - 1, d, p.hour, p.minute));
-    if (instant <= now) continue;
-    best = Math.min(best, instant);
-    if (!shifted) break;
-  }
-  return best - now <= ROUTINE_HORIZON_MS ? best : null;
-}
+`);return [`${SKILL_PACK_MANIFEST_SCHEMA_ID}
+`,`${manifest.name}
+`,`${manifest.version}
+`,`${manifest.description.length}
+`,`${manifest.description}
+`,`${manifest.files.length}
+`,...rows].join("")}var SKILL_PACK_REJECTIONS=["path-unsafe","duplicate-path","entry-missing","file-count-over-cap","file-over-cap","pack-over-cap","size-mismatch","hash-mismatch","name-mismatch"];function isSkillPackPathSafe(path){return path.length>0&&path.length<=SKILL_PACK_FILE_PATH_MAX_LENGTH&&SKILL_PACK_FILE_PATH_PATTERN.test(path)}function checkSkillPackManifest(manifest){if(manifest.files.length>SKILL_PACK_MAX_FILES){return {ok:false,reason:"file-count-over-cap",detail:`${manifest.files.length} files exceeds the ${SKILL_PACK_MAX_FILES} file limit.`}}const seen=new Set;let bytes=0;for(const file of manifest.files){if(!isSkillPackPathSafe(file.path)){return {ok:false,reason:"path-unsafe",detail:`${JSON.stringify(file.path)} is not a safe relative path.`}}if(seen.has(file.path)){return {ok:false,reason:"duplicate-path",detail:`${JSON.stringify(file.path)} is declared twice.`}}seen.add(file.path);if(file.byteSize>SKILL_PACK_FILE_MAX_BYTES){return {ok:false,reason:"file-over-cap",detail:`${JSON.stringify(file.path)} declares ${file.byteSize} bytes, over the ${SKILL_PACK_FILE_MAX_BYTES} byte per-file limit.`}}bytes+=file.byteSize;}if(!seen.has(SKILL_PACK_ENTRY_PATH)){return {ok:false,reason:"entry-missing",detail:`A skill pack must carry ${SKILL_PACK_ENTRY_PATH}.`}}if(bytes>SKILL_PACK_MAX_BYTES){return {ok:false,reason:"pack-over-cap",detail:`${bytes} declared bytes exceeds the ${SKILL_PACK_MAX_BYTES} byte pack limit.`}}return {ok:true,bytes}}function checkSkillPackFileContent(declared,observed){if(!isSkillPackPathSafe(declared.path)){return {ok:false,reason:"path-unsafe",detail:`${JSON.stringify(declared.path)} is not a safe relative path.`}}if(observed.byteSize>SKILL_PACK_FILE_MAX_BYTES){return {ok:false,reason:"file-over-cap",detail:`${JSON.stringify(declared.path)} delivered ${observed.byteSize} bytes, over the ${SKILL_PACK_FILE_MAX_BYTES} byte per-file limit.`}}if(observed.byteSize!==declared.byteSize){return {ok:false,reason:"size-mismatch",detail:`${JSON.stringify(declared.path)} declared ${declared.byteSize} bytes and delivered ${observed.byteSize}.`}}if(observed.contentHash!==declared.contentHash){return {ok:false,reason:"hash-mismatch",detail:`${JSON.stringify(declared.path)} declared ${declared.contentHash} and delivered ${observed.contentHash}.`}}return {ok:true,bytes:observed.byteSize}}var SKILL_FRONTMATTER_FIELDS=["name","description"];var FRONTMATTER_DELIMITER="---";var FRONTMATTER_LINE_PATTERN=/^([A-Za-z][A-Za-z0-9_-]*):[ \t]*(.*)$/;function unquote(value){const trimmed=value.trim();if(trimmed.length>=2){const first=trimmed[0];const last=trimmed[trimmed.length-1];if(first==='"'&&last==='"'||first==="'"&&last==="'"){const inner=trimmed.slice(1,-1);return inner.includes(first)?void 0:inner}}return trimmed}function parseSkillFrontmatter(text){const reject=message=>{throw new ByokCoreError("skill_pack_frontmatter_invalid",message)};const lines=text.split("\n");if(lines[0]?.trimEnd()!==FRONTMATTER_DELIMITER){reject(`A skill file must open with a ${FRONTMATTER_DELIMITER} frontmatter delimiter.`);}const closing=lines.findIndex((line,index)=>index>0&&line.trimEnd()===FRONTMATTER_DELIMITER);if(closing<0)reject(`The frontmatter block is not closed by a ${FRONTMATTER_DELIMITER} line.`);const fields=new Map;for(const line of lines.slice(1,closing)){if(line.trim().length===0)continue;const match=FRONTMATTER_LINE_PATTERN.exec(line);if(match===null)reject(`Frontmatter line ${JSON.stringify(line)} is not a \`key: value\` pair.`);const key=match[1];if(!SKILL_FRONTMATTER_FIELDS.includes(key)){reject(`Frontmatter key ${JSON.stringify(key)} is not one of ${SKILL_FRONTMATTER_FIELDS.join(", ")}; a skill declares no tools, hooks, or environment.`);}if(fields.has(key))reject(`Frontmatter key ${JSON.stringify(key)} is declared twice.`);const value=unquote(match[2]);if(value===void 0||value.length===0){reject(`Frontmatter key ${JSON.stringify(key)} has no usable value.`);}fields.set(key,value);}const name=fields.get("name");const description=fields.get("description");if(name===void 0)reject("Frontmatter is missing `name`.");if(description===void 0)reject("Frontmatter is missing `description`.");if(name.length>SKILL_PACK_NAME_MAX_LENGTH||!SKILL_PACK_NAME_PATTERN.test(name)){reject(`Frontmatter \`name\` must match ${SKILL_PACK_NAME_PATTERN.source} and be at most ${SKILL_PACK_NAME_MAX_LENGTH} characters.`);}if(description.length>SKILL_PACK_DESCRIPTION_MAX_LENGTH){reject(`Frontmatter \`description\` exceeds ${SKILL_PACK_DESCRIPTION_MAX_LENGTH} characters.`);}return {name,description}}function checkSkillPackEntry(manifest,entryText){const frontmatter=parseSkillFrontmatter(entryText);if(frontmatter.name!==manifest.name){return {ok:false,reason:"name-mismatch",detail:`${SKILL_PACK_ENTRY_PATH} declares ${JSON.stringify(frontmatter.name)} but the manifest declares ${JSON.stringify(manifest.name)}.`}}return {ok:true,bytes:new TextEncoder().encode(entryText).length}}var CORE_STORE_NAMES=["mailbox","board","truth","presence","objects","quota","skillPacks"];var CORE_NON_COMPOSITION_PORT_NAMES=[];var CORE_PORT_METHODS={mailbox:["append","readUsage","readAfter","recordDelivery","advanceCursor","readCursor","collectExpired"],board:["create","get","list","claim","unclaim","updateStatus"],truth:["writeTerminal","writeSnapshot","getRecord","listManifest"],presence:["publish","read","list","collectExpired"],objects:["putManifest","commit","get","list","addReference","removeReference","markDeletePending","markDeleted","collectExpired"],quota:["readEntitlement","writeEntitlement","readUsage","readStatus","readReservation","reserve","finalizeReservation","abortReservation","collectExpired"],skillPacks:["publish","get","list","readFile"]};var CORE_PORT_INTERFACES={mailbox:"MailboxStore",board:"BoardStore",truth:"TruthStore",presence:"PresenceStore",objects:"ObjectStore",quota:"QuotaStore",skillPacks:"SkillPackStore"};var DEVICE_PROOF_SCHEMA_ID="byok-device-proof-v1";var DEVICE_PROOF_DOMAIN_PREFIX="byok-device-proof-v1\n";var DEVICE_PROOF_VERSION=1;var DEVICE_PROOF_ALGORITHMS=["ed25519"];var DEVICE_PROOF_HEADER="x-byok-device-proof";var BASE64URL_PATTERN=/^[A-Za-z0-9_-]+$/;var HTTP_METHOD_PATTERN=/^[A-Z]+$/;function canonicalizationFailure(path,reason){return new ByokCoreError("proof_canonicalization_failed",`Cannot canonicalize ${path}: ${reason}`)}function isPlainObject(value){const prototype=Object.getPrototypeOf(value);return prototype===Object.prototype||prototype===null}function canonicalizeValue(value,path,seen){if(value===null)return "null";switch(typeof value){case "boolean":return value?"true":"false";case "string":return JSON.stringify(value);case "number":{if(!Number.isSafeInteger(value)){throw canonicalizationFailure(path,`only safe integers are canonicalizable, received ${String(value)}`)}return String(value===0?0:value)}case "undefined":throw canonicalizationFailure(path,"undefined has no canonical form");case "bigint":throw canonicalizationFailure(path,"bigint is not a JSON type");case "function":case "symbol":throw canonicalizationFailure(path,`${typeof value} is not a JSON type`);case "object":break;default:throw canonicalizationFailure(path,`unsupported type ${typeof value}`)}const objectValue=value;if(seen.has(objectValue)){throw canonicalizationFailure(path,"circular reference")}seen.add(objectValue);try{if(Array.isArray(objectValue)){const parts2=objectValue.map((entry,index)=>canonicalizeValue(entry,`${path}[${index}]`,seen));return `[${parts2.join(",")}]`}if(!isPlainObject(objectValue)){throw canonicalizationFailure(path,"only plain objects and arrays are canonicalizable")}const keys=Object.keys(objectValue).sort();const record=objectValue;const parts=keys.map(key=>{const encodedKey=JSON.stringify(key);const encodedValue=canonicalizeValue(record[key],`${path}.${key}`,seen);return `${encodedKey}:${encodedValue}`});return `{${parts.join(",")}}`}finally{seen.delete(objectValue);}}function canonicalizeJson(value){return canonicalizeValue(value,"<root>",new Set)}function canonicalizeJsonBytes(value){return new TextEncoder().encode(canonicalizeJson(value))}var DeviceProofProtectedClaimsSchema=z.strictObject({version:z.literal(DEVICE_PROOF_VERSION),tenantId:z.string().min(1),productId:z.string().min(1),deviceId:z.string().min(1),keyId:z.string().min(1),keyEpoch:z.number().int().nonnegative(),requestId:z.string().min(1),operation:z.string().min(1),resource:z.string().min(1),method:z.string().regex(HTTP_METHOD_PATTERN).optional(),path:z.string().startsWith("/").optional(),operationId:z.string().min(1).optional(),bodySha256:z.string().regex(CONTENT_HASH_PATTERN),bodySize:z.number().int().nonnegative(),issuedAt:z.iso.datetime(),expiresAt:z.iso.datetime().optional(),nonce:z.string().min(1).optional()}).superRefine((claims,ctx)=>{const hasRequestLine=claims.method!==void 0&&claims.path!==void 0;const hasOperationId=claims.operationId!==void 0;if(hasRequestLine===hasOperationId){ctx.addIssue({code:"custom",message:"Claims must carry exactly one request binding: both `method` and `path`, or `operationId`."});}if(!hasRequestLine&&(claims.method!==void 0||claims.path!==void 0)){ctx.addIssue({code:"custom",message:"`method` and `path` must be supplied together."});}});var DeviceProofEnvelopeV1Schema=z.strictObject({schema:z.literal(DEVICE_PROOF_SCHEMA_ID),algorithm:z.enum(DEVICE_PROOF_ALGORITHMS),protected:DeviceProofProtectedClaimsSchema,signature:z.string().regex(BASE64URL_PATTERN)});function parseDeviceProofEnvelope(input){const result=DeviceProofEnvelopeV1Schema.safeParse(input);if(!result.success){throw new ByokCoreError("proof_envelope_invalid",`Invalid device proof envelope: ${result.error.issues.map(issue=>`${issue.path.join(".")||"<root>"}: ${issue.message}`).join("; ")}`,{cause:result.error})}return result.data}function deviceProofCanonicalClaims(claims){const canonical={version:claims.version,tenantId:claims.tenantId,productId:claims.productId,deviceId:claims.deviceId,keyId:claims.keyId,keyEpoch:claims.keyEpoch,requestId:claims.requestId,operation:claims.operation,resource:claims.resource,bodySha256:claims.bodySha256,bodySize:claims.bodySize,issuedAt:claims.issuedAt};if(claims.method!==void 0)canonical["method"]=claims.method;if(claims.path!==void 0)canonical["path"]=claims.path;if(claims.operationId!==void 0)canonical["operationId"]=claims.operationId;if(claims.expiresAt!==void 0)canonical["expiresAt"]=claims.expiresAt;if(claims.nonce!==void 0)canonical["nonce"]=claims.nonce;return canonical}function deviceProofCanonicalJson(claims){return canonicalizeJson(deviceProofCanonicalClaims(claims))}function deviceProofSigningInput(claims){return new TextEncoder().encode(DEVICE_PROOF_DOMAIN_PREFIX+deviceProofCanonicalJson(claims))}var DEVICE_ASSERTION_SCHEMA_ID="byok-device-assertion-v1";var DEVICE_ASSERTION_DOMAIN_PREFIX="byok-device-assertion-v1\n";var DEVICE_ASSERTION_VERSION=1;var TASK_ASSERTION_SCHEMA_ID="byok-task-assertion-v1";var TASK_ASSERTION_DOMAIN_PREFIX="byok-task-assertion-v1\n";var TASK_ASSERTION_VERSION=1;var DEVICE_ASSERTION_ALGORITHMS=["ed25519"];var DEVICE_ASSERTION_DEFAULT_TTL_MS=12e4;var DEVICE_ASSERTION_MAX_TTL_MS=3e5;var DEVICE_ASSERTION_AUDIENCE_MAX_BYTES=256;var JTI_PATTERN=/^[A-Za-z0-9_-]{22}$/;var SIGNATURE_PATTERN=/^[A-Za-z0-9_-]{86}$/;function utf8ByteLength(value){return new TextEncoder().encode(value).length}var ASSERTION_AUDIENCE=z.string().min(1).refine(value=>utf8ByteLength(value)<=DEVICE_ASSERTION_AUDIENCE_MAX_BYTES,{message:`audience must be at most ${DEVICE_ASSERTION_AUDIENCE_MAX_BYTES} UTF-8 bytes`});var DeviceAssertionClaimsSchema=z.strictObject({version:z.literal(DEVICE_ASSERTION_VERSION),issuer:z.string().min(1),productId:z.string().min(1),deviceId:z.string().min(1),audience:ASSERTION_AUDIENCE,jti:z.string().regex(JTI_PATTERN),issuedAt:z.iso.datetime(),expiresAt:z.iso.datetime()});var DeviceAssertionEnvelopeV1Schema=z.strictObject({schema:z.literal(DEVICE_ASSERTION_SCHEMA_ID),algorithm:z.enum(DEVICE_ASSERTION_ALGORITHMS),protected:DeviceAssertionClaimsSchema,signature:z.string().regex(SIGNATURE_PATTERN)});function parseDeviceAssertionEnvelope(input){const result=DeviceAssertionEnvelopeV1Schema.safeParse(input);if(!result.success){throw new ByokCoreError("assertion_envelope_invalid",`Invalid device assertion envelope: ${result.error.issues.map(issue=>`${issue.path.join(".")||"<root>"}: ${issue.message}`).join("; ")}`,{cause:result.error})}return result.data}function deviceAssertionCanonicalClaims(claims){const canonical={version:claims.version,issuer:claims.issuer,productId:claims.productId,deviceId:claims.deviceId,audience:claims.audience,jti:claims.jti,issuedAt:claims.issuedAt,expiresAt:claims.expiresAt};return canonical}function deviceAssertionCanonicalJson(claims){return canonicalizeJson(deviceAssertionCanonicalClaims(claims))}function deviceAssertionSigningInput(claims){return new TextEncoder().encode(DEVICE_ASSERTION_DOMAIN_PREFIX+deviceAssertionCanonicalJson(claims))}function parseInstant(value){const parsed=Date.parse(value);return Number.isFinite(parsed)?parsed:void 0}var EDDSA_JWK_X_PATTERN=/^[A-Za-z0-9_-]{43}$/;function isUsableDeviceRow(row){if(row===null||typeof row!=="object")return false;if(row.revoked!==false)return false;const key=row.publicKeyJwkX;return typeof key==="string"&&EDDSA_JWK_X_PATTERN.test(key)}function resolveMaxLifetimeMs(requested){const maxLifetimeMs=requested??DEVICE_ASSERTION_MAX_TTL_MS;if(!Number.isSafeInteger(maxLifetimeMs)||maxLifetimeMs<=0||maxLifetimeMs>DEVICE_ASSERTION_MAX_TTL_MS){return void 0}return maxLifetimeMs}function assertionWindowAdmits(claims,now,maxLifetimeMs){const issuedAt=parseInstant(claims.issuedAt);const expiresAt=parseInstant(claims.expiresAt);if(issuedAt===void 0||expiresAt===void 0)return false;if(expiresAt<=issuedAt)return false;if(expiresAt-issuedAt>maxLifetimeMs)return false;const instant=now.getTime();if(!Number.isFinite(instant))return false;return instant>=issuedAt&&instant<expiresAt}async function verifyDeviceAssertion(input,deps){const maxLifetimeMs=resolveMaxLifetimeMs(deps.maxLifetimeMs);if(maxLifetimeMs===void 0)return void 0;let envelope;try{envelope=parseDeviceAssertionEnvelope(input);}catch{return void 0}const claims=envelope.protected;const row=await deps.lookupDevice(claims.deviceId);if(!isUsableDeviceRow(row))return void 0;if(!assertionWindowAdmits(claims,deps.now,maxLifetimeMs))return void 0;const verified=await deps.verifier.verify({algorithm:envelope.algorithm,publicKey:row.publicKeyJwkX,signature:envelope.signature,signingInput:deviceAssertionSigningInput(claims)});if(!verified)return void 0;return claims}function isNonEmptyExactString(value){return typeof value==="string"&&value.length>0&&value.trim()===value}function isAuthorityRow(row,requestedDeviceId){if(row===null||typeof row!=="object")return false;const candidate=row;return isTenantId(candidate.tenantId)&&isNonEmptyExactString(candidate.productId)&&candidate.deviceId===requestedDeviceId}async function authenticateDeviceAssertion(input,deps){if(!isNonEmptyExactString(deps.expected.issuer)||!isNonEmptyExactString(deps.expected.productId)||!isNonEmptyExactString(deps.expected.audience)||utf8ByteLength(deps.expected.audience)>DEVICE_ASSERTION_AUDIENCE_MAX_BYTES){return void 0}let authorityRow;const claims=await verifyDeviceAssertion(input,{verifier:deps.verifier,lookupDevice:async deviceId=>{const row=await deps.lookupDevice(deviceId);if(!isAuthorityRow(row,deviceId))return void 0;authorityRow=row;return {publicKeyJwkX:row.publicKeyJwkX,revoked:row.revoked}},now:deps.now,...deps.maxLifetimeMs===void 0?{}:{maxLifetimeMs:deps.maxLifetimeMs}});if(claims===void 0||authorityRow===void 0)return void 0;if(claims.issuer!==deps.expected.issuer||claims.productId!==deps.expected.productId||claims.audience!==deps.expected.audience||authorityRow.productId!==deps.expected.productId||authorityRow.deviceId!==claims.deviceId){return void 0}const consumed=await deps.replay.consume({schema:DEVICE_ASSERTION_SCHEMA_ID,tenantId:authorityRow.tenantId,issuer:claims.issuer,productId:authorityRow.productId,deviceId:authorityRow.deviceId,audience:claims.audience,jti:claims.jti,expiresAt:claims.expiresAt});if(!consumed)return void 0;return {lane:"device",device:{kind:"device",tenantId:authorityRow.tenantId,productId:authorityRow.productId,deviceId:authorityRow.deviceId},issuer:claims.issuer,audience:claims.audience,jti:claims.jti,issuedAt:claims.issuedAt,expiresAt:claims.expiresAt}}var TASK_ASSERTION_AGENT_REF_MAX_BYTES=160;var TASK_ASSERTION_TOOLSET_ID_MAX_LENGTH=128;var AGENT_REF_VALUE=z.string().min(1).max(TASK_ASSERTION_AGENT_REF_MAX_BYTES).refine(value=>utf8ByteLength(value)<=TASK_ASSERTION_AGENT_REF_MAX_BYTES,{message:`AgentRef values must not exceed ${TASK_ASSERTION_AGENT_REF_MAX_BYTES} UTF-8 bytes`}).regex(/^[^\u0000-\u001f\u007f\r\n]+$/u,"AgentRef values must not contain control characters");var WINDOWS_RESERVED_AGENT_SEGMENT=/^(?:con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\..*)?$/iu;var TaskAssertionAgentRefSchema=z.object({agentId:AGENT_REF_VALUE.regex(/^[^\\/:<>"|?*]+$/u,"agentId must be one portable pathname segment").refine(value=>value!=="."&&value!=="..","agentId must not be a dot segment").refine(value=>!/[. ]$/u.test(value)&&!WINDOWS_RESERVED_AGENT_SEGMENT.test(value),"agentId must be a portable Windows-safe pathname segment"),profileRevision:AGENT_REF_VALUE}).strict();var TOOLSET_ID_VALUE=z.string().min(1).max(TASK_ASSERTION_TOOLSET_ID_MAX_LENGTH).regex(/^[a-z0-9]+(?:[._-][a-z0-9]+)*$/u,"toolset ids must be lowercase logical identifiers");var TASK_ID_VALUE=z.string().min(1);var TaskAssertionClaimsSchema=z.strictObject({version:z.literal(TASK_ASSERTION_VERSION),issuer:z.string().min(1),productId:z.string().min(1),deviceId:z.string().min(1),audience:ASSERTION_AUDIENCE,jti:z.string().regex(JTI_PATTERN),issuedAt:z.iso.datetime(),expiresAt:z.iso.datetime(),taskId:TASK_ID_VALUE,agentRef:TaskAssertionAgentRefSchema,toolsetId:TOOLSET_ID_VALUE});var TaskAssertionEnvelopeV1Schema=z.strictObject({schema:z.literal(TASK_ASSERTION_SCHEMA_ID),algorithm:z.enum(DEVICE_ASSERTION_ALGORITHMS),protected:TaskAssertionClaimsSchema,signature:z.string().regex(SIGNATURE_PATTERN)});function parseTaskAssertionEnvelope(input){const result=TaskAssertionEnvelopeV1Schema.safeParse(input);if(!result.success){throw new ByokCoreError("assertion_envelope_invalid",`Invalid task assertion envelope: ${result.error.issues.map(issue=>`${issue.path.join(".")||"<root>"}: ${issue.message}`).join("; ")}`,{cause:result.error})}return result.data}function taskAssertionCanonicalClaims(claims){const canonical={version:claims.version,issuer:claims.issuer,productId:claims.productId,deviceId:claims.deviceId,audience:claims.audience,jti:claims.jti,issuedAt:claims.issuedAt,expiresAt:claims.expiresAt,taskId:claims.taskId,agentRef:{agentId:claims.agentRef.agentId,profileRevision:claims.agentRef.profileRevision},toolsetId:claims.toolsetId};return canonical}function taskAssertionCanonicalJson(claims){return canonicalizeJson(taskAssertionCanonicalClaims(claims))}function taskAssertionSigningInput(claims){return new TextEncoder().encode(TASK_ASSERTION_DOMAIN_PREFIX+taskAssertionCanonicalJson(claims))}async function verifyTaskAssertion(input,deps){const maxLifetimeMs=resolveMaxLifetimeMs(deps.maxLifetimeMs);if(maxLifetimeMs===void 0)return void 0;let envelope;try{envelope=parseTaskAssertionEnvelope(input);}catch{return void 0}const claims=envelope.protected;const row=await deps.lookupDevice(claims.deviceId);if(!isUsableDeviceRow(row))return void 0;if(!assertionWindowAdmits(claims,deps.now,maxLifetimeMs))return void 0;const verified=await deps.verifier.verify({algorithm:envelope.algorithm,publicKey:row.publicKeyJwkX,signature:envelope.signature,signingInput:taskAssertionSigningInput(claims)});if(!verified)return void 0;return claims}async function authenticateTaskAssertion(input,deps){if(!isNonEmptyExactString(deps.expected.issuer)||!isNonEmptyExactString(deps.expected.productId)||!isNonEmptyExactString(deps.expected.audience)||utf8ByteLength(deps.expected.audience)>DEVICE_ASSERTION_AUDIENCE_MAX_BYTES){return void 0}let authorityRow;const claims=await verifyTaskAssertion(input,{verifier:deps.verifier,lookupDevice:async deviceId=>{const row=await deps.lookupDevice(deviceId);if(!isAuthorityRow(row,deviceId))return void 0;authorityRow=row;return {publicKeyJwkX:row.publicKeyJwkX,revoked:row.revoked}},now:deps.now,...deps.maxLifetimeMs===void 0?{}:{maxLifetimeMs:deps.maxLifetimeMs}});if(claims===void 0||authorityRow===void 0)return void 0;if(claims.issuer!==deps.expected.issuer||claims.productId!==deps.expected.productId||claims.audience!==deps.expected.audience||authorityRow.productId!==deps.expected.productId||authorityRow.deviceId!==claims.deviceId){return void 0}const consumed=await deps.replay.consume({schema:TASK_ASSERTION_SCHEMA_ID,tenantId:authorityRow.tenantId,issuer:claims.issuer,productId:authorityRow.productId,deviceId:authorityRow.deviceId,audience:claims.audience,jti:claims.jti,expiresAt:claims.expiresAt});if(!consumed)return void 0;return {lane:"task",device:{kind:"device",tenantId:authorityRow.tenantId,productId:authorityRow.productId,deviceId:authorityRow.deviceId},issuer:claims.issuer,audience:claims.audience,jti:claims.jti,issuedAt:claims.issuedAt,expiresAt:claims.expiresAt,taskId:claims.taskId,agentRef:claims.agentRef,toolsetId:claims.toolsetId}}function webCryptoSubtle(){const subtle=globalThis.crypto?.subtle;if(subtle===void 0){throw new ByokCoreError("webcrypto_unavailable","WebCrypto subtle is unavailable in this runtime")}return subtle}var KEM_ID=16;var KDF_ID=1;var AEAD_ID=1;var HPKE_P256_PUBLIC_KEY_BYTES=65;var N_SECRET=32;var N_K=16;var N_N=12;var N_H=32;var HPKE_AEAD_TAG_BYTES=16;var MODE_BASE=0;var HPKE_V1=utf8("HPKE-v1");var KEM_SUITE_ID=concat(utf8("KEM"),i2osp(KEM_ID,2));var HPKE_SUITE_ID=concat(utf8("HPKE"),i2osp(KEM_ID,2),i2osp(KDF_ID,2),i2osp(AEAD_ID,2));var EMPTY=new Uint8Array(0);var ZERO_SALT=new Uint8Array(N_H);function utf8(value){return new TextEncoder().encode(value)}function concat(...parts){const length=parts.reduce((total,part)=>total+part.byteLength,0);const out=new Uint8Array(length);let offset=0;for(const part of parts){out.set(part,offset);offset+=part.byteLength;}return out}function i2osp(value,length){if(!Number.isSafeInteger(value)||value<0){throw new ByokCoreError("sealed_secret_invalid","HPKE integer encoding requires a non-negative safe integer")}const out=new Uint8Array(length);let remaining=value;for(let index=length-1;index>=0;index-=1){out[index]=remaining%256;remaining=Math.floor(remaining/256);}if(remaining!==0){throw new ByokCoreError("sealed_secret_invalid","HPKE integer does not fit the requested width")}return out}function copy(bytes){return new Uint8Array(bytes)}async function hmacSha256(key,data){const subtle=webCryptoSubtle();const hmacKey=await subtle.importKey("raw",copy(key),{name:"HMAC",hash:"SHA-256"},false,["sign"]);return new Uint8Array(await subtle.sign("HMAC",hmacKey,copy(data)))}async function hkdfExpand(prk,info,length){if(length>255*N_H){throw new ByokCoreError("sealed_secret_invalid","HKDF output length exceeds its limit")}const out=new Uint8Array(length);let previous=EMPTY;let offset=0;for(let counter=1;offset<length;counter+=1){previous=await hmacSha256(prk,concat(previous,info,Uint8Array.of(counter)));const take=Math.min(previous.byteLength,length-offset);out.set(previous.subarray(0,take),offset);offset+=take;}return out}async function labeledExtract(suiteId,salt,label,ikm){return hmacSha256(salt.byteLength===0?ZERO_SALT:salt,concat(HPKE_V1,suiteId,utf8(label),ikm))}async function labeledExpand(suiteId,prk,label,info,length){return hkdfExpand(prk,concat(i2osp(length,2),HPKE_V1,suiteId,utf8(label),info),length)}async function importP256PublicKey(raw){if(raw.byteLength!==HPKE_P256_PUBLIC_KEY_BYTES||raw[0]!==4){throw new ByokCoreError("sealed_secret_invalid","P-256 public key must be a 65-byte uncompressed point")}try{return await webCryptoSubtle().importKey("raw",copy(raw),{name:"ECDH",namedCurve:"P-256"},true,[])}catch(cause){throw new ByokCoreError("sealed_secret_invalid","P-256 public key is not a valid curve point",{cause})}}async function ecdhP256(privateKey,publicKey){const bits=await webCryptoSubtle().deriveBits({name:"ECDH",public:publicKey},privateKey,N_SECRET*8);return new Uint8Array(bits)}async function extractAndExpand(dh,kemContext){const eaePrk=await labeledExtract(KEM_SUITE_ID,EMPTY,"eae_prk",dh);return labeledExpand(KEM_SUITE_ID,eaePrk,"shared_secret",kemContext,N_SECRET)}async function keyScheduleBase(sharedSecret,info){const pskIdHash=await labeledExtract(HPKE_SUITE_ID,EMPTY,"psk_id_hash",EMPTY);const infoHash=await labeledExtract(HPKE_SUITE_ID,EMPTY,"info_hash",info);const context=concat(Uint8Array.of(MODE_BASE),pskIdHash,infoHash);const secret=await labeledExtract(HPKE_SUITE_ID,sharedSecret,"secret",EMPTY);return {sharedSecret,key:await labeledExpand(HPKE_SUITE_ID,secret,"key",context,N_K),baseNonce:await labeledExpand(HPKE_SUITE_ID,secret,"base_nonce",context,N_N),exporterSecret:await labeledExpand(HPKE_SUITE_ID,secret,"exp",context,N_H)}}async function setupBaseSender(recipientPublicKey,info,ephemeral){const pkR=await importP256PublicKey(recipientPublicKey);let pair=ephemeral;if(pair===void 0){const subtle=webCryptoSubtle();const generated=await subtle.generateKey({name:"ECDH",namedCurve:"P-256"},true,["deriveBits"]);pair={privateKey:generated.privateKey,publicKey:new Uint8Array(await subtle.exportKey("raw",generated.publicKey))};}const enc=copy(pair.publicKey);const dh=await ecdhP256(pair.privateKey,pkR);const sharedSecret=await extractAndExpand(dh,concat(enc,recipientPublicKey));return {enc,schedule:await keyScheduleBase(sharedSecret,info)}}async function setupBaseRecipient(enc,recipientPrivateKey,recipientPublicKey,info){if(recipientPublicKey.byteLength!==HPKE_P256_PUBLIC_KEY_BYTES||recipientPublicKey[0]!==4){throw new ByokCoreError("sealed_secret_invalid","P-256 recipient public key must be a 65-byte uncompressed point")}const pkE=await importP256PublicKey(enc);let dh;try{dh=await ecdhP256(recipientPrivateKey,pkE);}catch(cause){throw new ByokCoreError("sealed_secret_open_failed","HPKE decapsulation failed",{cause})}const sharedSecret=await extractAndExpand(dh,concat(enc,recipientPublicKey));return keyScheduleBase(sharedSecret,info)}function hpkeNonce(baseNonce,sequence){const seq=i2osp(sequence,N_N);const out=new Uint8Array(N_N);for(let index=0;index<N_N;index+=1)out[index]=baseNonce[index]^seq[index];return out}async function aesGcmKey(key,usage){return webCryptoSubtle().importKey("raw",copy(key),{name:"AES-GCM"},false,[usage])}async function hpkeAeadSeal(schedule,sequence,aad,plaintext){const ciphertext=await webCryptoSubtle().encrypt({name:"AES-GCM",iv:hpkeNonce(schedule.baseNonce,sequence),additionalData:copy(aad),tagLength:128},await aesGcmKey(schedule.key,"encrypt"),copy(plaintext));return new Uint8Array(ciphertext)}async function hpkeAeadOpen(schedule,sequence,aad,ciphertext){if(ciphertext.byteLength<HPKE_AEAD_TAG_BYTES){throw new ByokCoreError("sealed_secret_invalid","HPKE ciphertext is shorter than its authentication tag")}try{const plaintext=await webCryptoSubtle().decrypt({name:"AES-GCM",iv:hpkeNonce(schedule.baseNonce,sequence),additionalData:copy(aad),tagLength:128},await aesGcmKey(schedule.key,"decrypt"),copy(ciphertext));return new Uint8Array(plaintext)}catch(cause){throw new ByokCoreError("sealed_secret_open_failed","HPKE ciphertext failed authentication",{cause})}}async function hpkeSealBase(input){const{enc,schedule}=await setupBaseSender(input.recipientPublicKey,input.info);return {enc,ciphertext:await hpkeAeadSeal(schedule,0,input.aad,input.plaintext)}}async function hpkeOpenBase(input){const schedule=await setupBaseRecipient(input.enc,input.recipientPrivateKey,input.recipientPublicKey,input.info);return hpkeAeadOpen(schedule,0,input.aad,input.ciphertext)}function safeParseTotal(schema,value){try{return schema.safeParse(value)}catch{return {success:false}}}var PROVIDER_SECRET_HPKE_SUITE="hpke-base.dhkem-p256-hkdf-sha256.hkdf-sha256.aes-128-gcm";var PROVIDER_SECRET_HPKE_INFO="byok-sdk.provider-secret.v1";var PROVIDER_PROVISIONING_REQUEST_VERSION=1;var PROVIDER_PROVISIONING_OPERATIONS=["configure","update_model","replace_secret","delete"];var PROVIDER_PROVISIONING_SECRET_OPERATIONS=["configure","replace_secret"];var PROVIDER_PROVISIONING_MAX_TTL_MS=15*60*1e3;var PROVIDER_SECRET_PAD_BLOCK_BYTES=256;var PROVIDER_SECRET_MAX_PADDED_BYTES=4096;var PROVIDER_SECRET_MAX_BYTES=PROVIDER_SECRET_MAX_PADDED_BYTES-2;var SEALING_KEY_ID_LENGTH=22;var B64URL_ALPHABET="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";var B64URL_PATTERN=/^[A-Za-z0-9_-]*$/;function encodeBase64Url(bytes){let out="";let index=0;for(;index+3<=bytes.length;index+=3){const value=bytes[index]<<16|bytes[index+1]<<8|bytes[index+2];out+=B64URL_ALPHABET[value>>18&63]+B64URL_ALPHABET[value>>12&63]+B64URL_ALPHABET[value>>6&63]+B64URL_ALPHABET[value&63];}const rest=bytes.length-index;if(rest===1){const value=bytes[index]<<16;out+=B64URL_ALPHABET[value>>18&63]+B64URL_ALPHABET[value>>12&63];}else if(rest===2){const value=bytes[index]<<16|bytes[index+1]<<8;out+=B64URL_ALPHABET[value>>18&63]+B64URL_ALPHABET[value>>12&63]+B64URL_ALPHABET[value>>6&63];}return out}function decodeBase64Url(value,field){if(!B64URL_PATTERN.test(value)||value.length%4===1){throw new ByokCoreError("sealed_secret_invalid",`${field} is not canonical base64url`)}const out=new Uint8Array(Math.floor(value.length*3/4));let buffer=0;let bits=0;let offset=0;for(const char of value){buffer=buffer<<6|B64URL_ALPHABET.indexOf(char);bits+=6;if(bits>=8){bits-=8;out[offset]=buffer>>bits&255;offset+=1;}}if(encodeBase64Url(out)!==value){throw new ByokCoreError("sealed_secret_invalid",`${field} is not canonical base64url`)}return out}function base64UrlField(bytes){return z.string().superRefine((value,ctx)=>{try{const decoded=decodeBase64Url(value,"field");if(bytes.exact!==void 0&&decoded.byteLength!==bytes.exact){ctx.addIssue({code:"custom",message:`must decode to exactly ${bytes.exact} bytes`});}if(bytes.max!==void 0&&decoded.byteLength>bytes.max){ctx.addIssue({code:"custom",message:`must decode to at most ${bytes.max} bytes`});}}catch{ctx.addIssue({code:"custom",message:"must be canonical unpadded base64url"});}})}async function sha256(bytes){return new Uint8Array(await webCryptoSubtle().digest("SHA-256",new Uint8Array(bytes)))}function hex(bytes){let out="";for(const byte of bytes)out+=byte.toString(16).padStart(2,"0");return out}async function contentDigest(value){return `sha256:${hex(await sha256(canonicalizeJsonBytes(value)))}`}var SealingPublicJwkSchema=z.strictObject({kty:z.literal("EC"),crv:z.literal("P-256"),x:base64UrlField({exact:32}),y:base64UrlField({exact:32})});var SealingKeyIdSchema=z.string().regex(new RegExp(`^[A-Za-z0-9_-]{${SEALING_KEY_ID_LENGTH}}$`));function parseSealingPublicJwk(input){const result=safeParseTotal(SealingPublicJwkSchema,input);if(!result.success){throw new ByokCoreError("sealed_secret_invalid","Sealing public key must be a strict P-256 EC public JWK")}return result.data}function sealingPublicKeyBytes(publicJwk){const jwk=parseSealingPublicJwk(publicJwk);const raw=new Uint8Array(HPKE_P256_PUBLIC_KEY_BYTES);raw[0]=4;raw.set(decodeBase64Url(jwk.x,"x"),1);raw.set(decodeBase64Url(jwk.y,"y"),33);return raw}async function deriveSealingKeyId(publicJwk){const raw=sealingPublicKeyBytes(publicJwk);await importP256PublicKey(raw);return encodeBase64Url(await sha256(raw)).slice(0,SEALING_KEY_ID_LENGTH)}var SealingKeyClaimV1Schema=z.strictObject({version:z.literal(1),keyId:SealingKeyIdSchema,epoch:z.number().int().positive().max(Number.MAX_SAFE_INTEGER),publicJwk:SealingPublicJwkSchema});function sealingKeyClaimCanonicalBytes(claim){const result=safeParseTotal(SealingKeyClaimV1Schema,claim);if(!result.success){throw new ByokCoreError("sealed_secret_invalid","Sealing key claim is invalid")}const parsed=result.data;return canonicalizeJsonBytes({version:parsed.version,keyId:parsed.keyId,epoch:parsed.epoch,publicJwk:{kty:parsed.publicJwk.kty,crv:parsed.publicJwk.crv,x:parsed.publicJwk.x,y:parsed.publicJwk.y}})}var OpaqueIdSchema=z.string().min(1).max(200).superRefine((value,ctx)=>{if(value.trim()!==value||/[\u0000-\u001f\u007f]/u.test(value)){ctx.addIssue({code:"custom",message:"must not carry surrounding whitespace or control characters"});}});var CanonicalTimestampSchema=z.string().refine(isCanonicalTimestamp,"must be a canonical ISO-8601 UTC instant");var ProfileRefSchema=z.string().min(1).max(64).regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/u);var ProviderKindSchema=z.string().min(1).max(64).regex(/^[a-z0-9]+(?:[-_][a-z0-9]+)*$/u);var ModelIdSchema=z.string().min(1).max(160).refine(value=>value.trim()===value&&!/[\u0000-\u001f\u007f]/u.test(value),"model id is invalid");var CapabilitySchema=z.string().min(1).max(64).regex(/^[a-z0-9]+(?:-[a-z0-9]+)*$/u);var PiModelJsonSchema=z.custom(value=>{if(value===null||typeof value!=="object"||Array.isArray(value))return false;try{canonicalizeJson(value);return true}catch{return false}},"piModel must be a canonical JSON object");var ModelConfigFields={agentId:OpaqueIdSchema,providerKind:ProviderKindSchema,modelId:ModelIdSchema,piModel:PiModelJsonSchema,capabilities:z.array(CapabilitySchema).max(8).refine(values=>new Set(values).size===values.length,"capabilities must be unique")};var ProviderProvisioningConfigV1Schema=z.discriminatedUnion("operation",[z.strictObject({operation:z.literal("configure"),...ModelConfigFields}),z.strictObject({operation:z.literal("update_model"),...ModelConfigFields}),z.strictObject({operation:z.literal("replace_secret"),agentId:OpaqueIdSchema,providerKind:ProviderKindSchema}),z.strictObject({operation:z.literal("delete"),agentId:OpaqueIdSchema})]);var ProviderProvisioningExpectedProfileSchema=z.union([z.null(),z.strictObject({profileRef:ProfileRefSchema,profileRevision:z.string().regex(/^(?:0|[1-9][0-9]{0,19})$/u),profileHash:z.string().regex(CONTENT_HASH_PATTERN)})]);var ProviderProvisioningIdentityRevisionSchema=z.string().min(1).max(128).regex(/^[A-Za-z0-9._:-]+$/u);var ProviderProvisioningHeaderV1Schema=z.strictObject({tenantId:OpaqueIdSchema,deviceId:OpaqueIdSchema,agentId:OpaqueIdSchema,requestId:OpaqueIdSchema,operation:z.enum(PROVIDER_PROVISIONING_OPERATIONS),operationGeneration:z.number().int().positive().max(Number.MAX_SAFE_INTEGER),expectedProfile:ProviderProvisioningExpectedProfileSchema,expectedEnrollmentRevision:ProviderProvisioningIdentityRevisionSchema,expectedPlacementRevision:ProviderProvisioningIdentityRevisionSchema,configDigest:z.string().regex(CONTENT_HASH_PATTERN),issuedAt:CanonicalTimestampSchema,expiresAt:CanonicalTimestampSchema});var MAX_CIPHERTEXT_BYTES=PROVIDER_SECRET_MAX_PADDED_BYTES+HPKE_AEAD_TAG_BYTES;var SealedProviderSecretV1Schema=z.strictObject({suite:z.literal(PROVIDER_SECRET_HPKE_SUITE),keyId:SealingKeyIdSchema,enc:base64UrlField({exact:HPKE_P256_PUBLIC_KEY_BYTES}),ciphertext:base64UrlField({max:MAX_CIPHERTEXT_BYTES})});function isSecretOperation(operation){return PROVIDER_PROVISIONING_SECRET_OPERATIONS.includes(operation)}var ProviderProvisioningRequestV1Schema=z.strictObject({version:z.literal(PROVIDER_PROVISIONING_REQUEST_VERSION),header:ProviderProvisioningHeaderV1Schema,config:ProviderProvisioningConfigV1Schema,sealed:SealedProviderSecretV1Schema.optional()}).superRefine((request,ctx)=>{if(request.header.operation!==request.config.operation){ctx.addIssue({code:"custom",path:["config","operation"],message:"config operation must equal header operation"});}if(request.header.agentId!==request.config.agentId){ctx.addIssue({code:"custom",path:["config","agentId"],message:"config agentId must equal header agentId"});}if(isSecretOperation(request.header.operation)!==(request.sealed!==void 0)){ctx.addIssue({code:"custom",path:["sealed"],message:"a sealed secret is required exactly for configure and replace_secret"});}});function parseProviderProvisioningRequest(input){const result=safeParseTotal(ProviderProvisioningRequestV1Schema,input);if(!result.success){throw new ByokCoreError("provider_provisioning_request_invalid",`Invalid provider provisioning request: ${(result.error?.issues??[{path:[],message:"is not readable"}]).map(issue=>`${issue.path.join(".")||"<root>"}: ${issue.message}`).join("; ")}`)}return result.data}function configJson(config){return config}async function providerProvisioningConfigDigest(config){const result=safeParseTotal(ProviderProvisioningConfigV1Schema,config);if(!result.success){throw new ByokCoreError("provider_provisioning_request_invalid","Provider provisioning config is invalid")}return contentDigest(configJson(result.data))}function providerSecretAadBytes(header,keyId){const parsed=safeParseTotal(ProviderProvisioningHeaderV1Schema,header);if(!parsed.success||!safeParseTotal(SealingKeyIdSchema,keyId).success){throw new ByokCoreError("provider_provisioning_request_invalid","Provider provisioning AAD input is invalid")}const value=parsed.data;return canonicalizeJsonBytes({v:PROVIDER_PROVISIONING_REQUEST_VERSION,tenantId:value.tenantId,deviceId:value.deviceId,keyId,requestId:value.requestId,agentId:value.agentId,operation:value.operation,operationGeneration:value.operationGeneration,expectedProfile:value.expectedProfile===null?null:{profileRef:value.expectedProfile.profileRef,profileRevision:value.expectedProfile.profileRevision,profileHash:value.expectedProfile.profileHash},expectedEnrollmentRevision:value.expectedEnrollmentRevision,expectedPlacementRevision:value.expectedPlacementRevision,configDigest:value.configDigest,issuedAt:value.issuedAt,expiresAt:value.expiresAt})}async function providerProvisioningRequestDigest(request){const parsed=parseProviderProvisioningRequest(request);return contentDigest(parsed)}async function assertProviderProvisioningConfigDigest(request){const parsed=parseProviderProvisioningRequest(request);if(await providerProvisioningConfigDigest(parsed.config)!==parsed.header.configDigest){throw new ByokCoreError("provider_provisioning_request_invalid","Provider provisioning config digest does not match its header")}}function padProviderSecret(secret){const bytes=new TextEncoder().encode(secret);if(bytes.byteLength===0||bytes.byteLength>PROVIDER_SECRET_MAX_BYTES){throw new ByokCoreError("sealed_secret_invalid",`Provider secret must be 1 to ${PROVIDER_SECRET_MAX_BYTES} UTF-8 bytes`)}const total=Math.ceil((bytes.byteLength+2)/PROVIDER_SECRET_PAD_BLOCK_BYTES)*PROVIDER_SECRET_PAD_BLOCK_BYTES;const out=new Uint8Array(total);out[0]=bytes.byteLength>>8;out[1]=bytes.byteLength&255;out.set(bytes,2);return out}function unpadProviderSecret(padded){if(padded.byteLength<PROVIDER_SECRET_PAD_BLOCK_BYTES||padded.byteLength>PROVIDER_SECRET_MAX_PADDED_BYTES||padded.byteLength%PROVIDER_SECRET_PAD_BLOCK_BYTES!==0){throw new ByokCoreError("sealed_secret_invalid","Padded provider secret has an invalid length")}const length=padded[0]<<8|padded[1];if(length===0||length+2>padded.byteLength||padded.byteLength-(length+2)>=PROVIDER_SECRET_PAD_BLOCK_BYTES){throw new ByokCoreError("sealed_secret_invalid","Padded provider secret has an invalid length prefix")}for(let index=length+2;index<padded.byteLength;index+=1){if(padded[index]!==0){throw new ByokCoreError("sealed_secret_invalid","Padded provider secret has non-zero padding")}}try{return new TextDecoder("utf-8",{fatal:true,ignoreBOM:true}).decode(padded.subarray(2,length+2))}catch{throw new ByokCoreError("sealed_secret_invalid","Provider secret is not valid UTF-8")}}var INFO_BYTES=()=>new TextEncoder().encode(PROVIDER_SECRET_HPKE_INFO);async function sealProviderProvisioningRequest(input){const configResult=safeParseTotal(ProviderProvisioningConfigV1Schema,input.config);if(!configResult.success){throw new ByokCoreError("provider_provisioning_request_invalid","Provider provisioning config is invalid")}const config=configResult.data;const headerResult=safeParseTotal(ProviderProvisioningHeaderV1Schema,{...input.header,configDigest:await providerProvisioningConfigDigest(config)});if(!headerResult.success){throw new ByokCoreError("provider_provisioning_request_invalid","Provider provisioning header is invalid")}const header=headerResult.data;const needsSecret=isSecretOperation(header.operation);if(needsSecret!==(input.secret!==void 0)||needsSecret!==(input.recipient!==void 0)){throw new ByokCoreError("provider_provisioning_request_invalid","A secret and recipient are required exactly for configure and replace_secret")}let sealed;if(needsSecret){const recipient=input.recipient;const publicJwk=parseSealingPublicJwk(recipient.publicJwk);if(await deriveSealingKeyId(publicJwk)!==recipient.keyId){throw new ByokCoreError("sealed_secret_invalid","Sealing key id does not match its public key")}const{enc,ciphertext}=await hpkeSealBase({recipientPublicKey:sealingPublicKeyBytes(publicJwk),info:INFO_BYTES(),aad:providerSecretAadBytes(header,recipient.keyId),plaintext:padProviderSecret(input.secret)});sealed={suite:PROVIDER_SECRET_HPKE_SUITE,keyId:recipient.keyId,enc:encodeBase64Url(enc),ciphertext:encodeBase64Url(ciphertext)};}return parseProviderProvisioningRequest({version:PROVIDER_PROVISIONING_REQUEST_VERSION,header,config,...sealed===void 0?{}:{sealed}})}async function openProviderProvisioningSecret(input){const request=parseProviderProvisioningRequest(input.request);const sealed=request.sealed;if(sealed===void 0){throw new ByokCoreError("provider_provisioning_request_invalid","Provider provisioning request carries no sealed secret")}const publicJwk=parseSealingPublicJwk(input.recipient.publicJwk);if(sealed.keyId!==input.recipient.keyId||await deriveSealingKeyId(publicJwk)!==input.recipient.keyId){throw new ByokCoreError("sealed_secret_invalid","Sealed secret is not addressed to this sealing key")}await assertProviderProvisioningConfigDigest(request);const ciphertext=decodeBase64Url(sealed.ciphertext,"ciphertext");const paddedLength=ciphertext.byteLength-HPKE_AEAD_TAG_BYTES;if(paddedLength<PROVIDER_SECRET_PAD_BLOCK_BYTES||paddedLength>PROVIDER_SECRET_MAX_PADDED_BYTES||paddedLength%PROVIDER_SECRET_PAD_BLOCK_BYTES!==0){throw new ByokCoreError("sealed_secret_invalid","Sealed secret ciphertext has an invalid length")}const padded=await hpkeOpenBase({recipientPrivateKey:input.recipient.privateKey,recipientPublicKey:sealingPublicKeyBytes(publicJwk),enc:decodeBase64Url(sealed.enc,"enc"),info:INFO_BYTES(),aad:providerSecretAadBytes(request.header,sealed.keyId),ciphertext});try{return unpadProviderSecret(padded)}finally{padded.fill(0);}}var AGENT_MEMORY_INTENT_DIGEST_VERSION="byok-agent-memory-intent-v1";async function agentMemoryIntentOperationDigest(input){const canonical={v:AGENT_MEMORY_INTENT_DIGEST_VERSION,tenantId:input.tenantId,deviceId:input.deviceId,intentId:input.intentId,agentRef:{agentId:input.agentRef.agentId,profileRevision:input.agentRef.profileRevision},path:input.path,operation:input.operation,baseRevision:input.baseRevision,targetRevision:input.targetRevision,approvalRef:input.approvalRef};const digest=new Uint8Array(await webCryptoSubtle().digest("SHA-256",new Uint8Array(canonicalizeJsonBytes(canonical))));let hex2="";for(const byte of digest)hex2+=byte.toString(16).padStart(2,"0");return `sha256:${hex2}`}var NONCE_SIGNING_DOMAIN="byok-nonce-v1\n";function nonceSigningBytes(nonce){return new TextEncoder().encode(NONCE_SIGNING_DOMAIN+nonce)}var InMemoryStorageLedger=class{constructor(clock){this.clock=clock;}clock;#usage=new Map;#reservations=new Map;#committed=new Map;readReservation(key){return this.#reservations.get(key)}writeReservation(key,record){this.#reservations.set(key,record);}deleteReservation(key){this.#reservations.delete(key);}reservations(){return this.#reservations.entries()}readUsage(tenant){let usage=this.#usage.get(tenant);if(usage===void 0){usage={committedObjectBytes:0n,committedInlineBytes:0n,reservedBytes:0n,objectCount:0n,updatedAt:this.clock.now().toISOString()};this.#usage.set(tenant,usage);}return usage}writeUsage(tenant,usage){this.#usage.set(tenant,usage);}isCounted(tenant,hash){return this.#committed.get(tenant)?.has(hash)===true}recordCommitted(tenant,reservation){let hashes=this.#committed.get(tenant);if(hashes===void 0){hashes=new Map;this.#committed.set(tenant,hashes);}hashes.set(reservation.contentHash,{kind:reservation.kind,bytes:reservation.expectedBytes});}hasReservedObject(tenant,hash){for(const{reservation}of this.#reservations.values()){if(reservation.tenantId===tenant&&reservation.kind==="object"&&reservation.contentHash===hash&&reservation.state==="reserved")return true}return false}reservedObjectHashes(tenant){return [...this.#reservations.values()].filter(({reservation})=>reservation.tenantId===tenant&&reservation.kind==="object"&&reservation.state==="reserved").map(({reservation})=>reservation.contentHash)}prepareCollectedObjectRelease(tenant,hash,byteSize,now){const hashes=this.#committed.get(tenant);const accounted=hashes?.get(hash);if(accounted===void 0||accounted.kind==="inline")return {releasedBytes:0n,commit:()=>{}};const usage=this.#usage.get(tenant);if(usage===void 0||accounted.bytes!==byteSize||usage.committedObjectBytes<accounted.bytes||usage.objectCount<1n){throw new ByokCoreError("storage_integrity_mismatch","Collected object accounting does not match the storage ledger.")}return {releasedBytes:accounted.bytes,commit:()=>{hashes.delete(hash);this.writeUsage(tenant,{...usage,committedObjectBytes:usage.committedObjectBytes-accounted.bytes,objectCount:usage.objectCount-1n,updatedAt:now});}}}releaseCollectedObject(tenant,hash,byteSize,now){const release=this.prepareCollectedObjectRelease(tenant,hash,byteSize,now);release.commit();return release.releasedBytes}};function assertCollectExpiredInput(input){assertCanonicalTimestamp(input.now,"now");if(!Number.isSafeInteger(input.limit)||input.limit<=0){throw new ByokCoreError("retention_input_invalid","collectExpired limit must be a positive safe integer.")}}var CollectExpiredFailure=class extends ByokCoreError{constructor(committed,failedRows,more,options){super("retention_collect_failed","Retention collection did not complete.",options);this.committed=committed;this.failedRows=failedRows;this.more=more;}committed;failedRows;more};function assertTtl(ttlMs){if(!Number.isFinite(ttlMs)||ttlMs<=0){throw new ByokCoreError("hint_ttl_invalid",`Hint ttl must be a positive number of milliseconds, received ${String(ttlMs)}.`)}}function assertMinimumInterval(minimumIntervalMs){if(!Number.isFinite(minimumIntervalMs)||minimumIntervalMs<0){throw new ByokCoreError("hint_ttl_invalid",`Hint minimum interval must be a non-negative number of milliseconds, received ${String(minimumIntervalMs)}.`)}}var InMemoryPresenceStore=class{#hints=new Map;#clock;constructor(clock){this.#clock=clock;}async publish(tenant,input){assertTtl(input.ttlMs);assertMinimumInterval(input.minimumIntervalMs);const now=this.#clock.now();const key=tenantKey(tenant,input.deviceId);const existing=this.#hints.get(key);if(existing&&now.toISOString()<existing.expiresAt&&Math.max(0,Number(now)-Date.parse(existing.observedAt))<input.minimumIntervalMs){throw new ByokCoreError("hint_rate_limited",`Presence for ${input.deviceId} was published more recently than the configured minimum interval.`)}const hint={tenantId:tenant,deviceId:input.deviceId,level:input.level,...input.detail===void 0?{}:{detail:input.detail},...input.configuredToolsets===void 0?{}:{configuredToolsets:Object.freeze([...input.configuredToolsets])},...input.clientVersion===void 0?{}:{clientVersion:input.clientVersion},...input.protocolVersions===void 0?{}:{protocolVersions:Object.freeze([...input.protocolVersions])},...input.runtimes===void 0?{}:{runtimes:Object.freeze(input.runtimes.map(runtime=>Object.freeze({id:runtime.id,...runtime.version===void 0?{}:{version:runtime.version},...runtime.authPresent===void 0?{}:{authPresent:runtime.authPresent}})))},observedAt:now.toISOString(),expiresAt:new Date(now.getTime()+input.ttlMs).toISOString()};this.#hints.set(key,hint);return hint}async read(tenant,deviceId){const key=tenantKey(tenant,deviceId);const hint=this.#hints.get(key);if(hint===void 0)return void 0;if(this.#isExpired(hint.expiresAt)){this.#hints.delete(key);return void 0}return hint}async list(tenant){const prefix=tenantKey(tenant,"");const live=[];for(const[key,hint]of [...this.#hints.entries()]){if(!key.startsWith(prefix))continue;if(this.#isExpired(hint.expiresAt)){this.#hints.delete(key);continue}live.push(hint);}live.sort((left,right)=>left.deviceId.localeCompare(right.deviceId));return live}async collectExpired(tenant,input){assertCollectExpiredInput(input);let removed=0,more=false;for(const[key,hint]of this.#hints){if(hint.tenantId!==tenant||hint.expiresAt>input.now)continue;if(removed===input.limit){more=true;break}this.#hints.delete(key);removed++;}return {removed,expired:0,releasedBytes:0n,more}}#isExpired(expiresAt){return this.#clock.now().toISOString()>=expiresAt}};var DEFAULT_LIST_LIMIT=50;var InMemoryBoardStore=class{#items=new Map;#seqByTenant=new Map;#clock;constructor(clock){this.#clock=clock;}async create(tenant,input){const key=tenantKey(tenant,input.itemId);if(this.#items.has(key)){throw new ByokCoreError("board_item_exists",`Board item ${input.itemId} already exists in this tenant.`)}const now=this.#now();const item={tenantId:tenant,itemId:input.itemId,channel:input.channel,title:input.title,status:input.status??"todo",boardSeq:this.#nextSeq(tenant),createdAt:now,updatedAt:now};this.#items.set(key,item);return item}async get(tenant,itemId){return this.#items.get(tenantKey(tenant,itemId))}async list(tenant,query){const afterSeq=query.afterSeq??0;const limit=query.limit??DEFAULT_LIST_LIMIT;const prefix=tenantKey(tenant,"");const matches=[];for(const[key,item]of this.#items.entries()){if(!key.startsWith(prefix))continue;if(item.boardSeq<=afterSeq)continue;if(query.channel!==void 0&&item.channel!==query.channel)continue;if(query.status!==void 0&&item.status!==query.status)continue;matches.push(item);}matches.sort((left,right)=>left.boardSeq-right.boardSeq);const page=matches.slice(0,limit);return {items:page,nextSeq:page.at(-1)?.boardSeq??afterSeq,hasMore:matches.length>page.length}}async claim(tenant,input){const item=this.#require(tenant,input.itemId);const expectedStatus=input.expectedStatus??"todo";if(item.assignee!==void 0){if(item.assignee.holderId===input.holderId){if(input.expectedStatus!==void 0&&item.status!==input.expectedStatus){throw new CoreConflictError("board_status_conflict",`Board item ${input.itemId} is ${item.status}, not ${input.expectedStatus}.`,item,this.#now())}return item}throw new CoreConflictError("board_claim_conflict",`Board item ${input.itemId} is held by ${item.assignee.holderId}.`,item,this.#now())}if(item.status!==expectedStatus){throw new CoreConflictError("board_status_conflict",`Board item ${input.itemId} is ${item.status}, not ${expectedStatus}.`,item,this.#now())}if(item.status!=="todo"&&item.status!=="in_progress"){throw new CoreConflictError("board_transition_invalid",`Board item ${input.itemId} cannot be claimed from ${item.status}.`,item,this.#now())}const now=this.#now();const claimed={...item,status:item.status==="todo"?"in_progress":item.status,assignee:{holderId:input.holderId,heldSince:now},boardSeq:this.#nextSeq(tenant),updatedAt:now};this.#items.set(tenantKey(tenant,input.itemId),claimed);return claimed}async unclaim(tenant,input){const item=this.#require(tenant,input.itemId);if(item.assignee===void 0){throw new ByokCoreError("board_not_held",`Board item ${input.itemId} is not held by anyone.`)}if(item.assignee.holderId!==input.holderId){throw new CoreConflictError("board_claim_conflict",`Board item ${input.itemId} is held by ${item.assignee.holderId}, not ${input.holderId}.`,item,this.#now())}const now=this.#now();const released={tenantId:item.tenantId,itemId:item.itemId,channel:item.channel,title:item.title,status:item.status==="in_progress"?"todo":item.status,boardSeq:this.#nextSeq(tenant),createdAt:item.createdAt,updatedAt:now};this.#items.set(tenantKey(tenant,input.itemId),released);return released}async updateStatus(tenant,input){const item=this.#require(tenant,input.itemId);if(item.status!==input.expectedStatus){throw new CoreConflictError("board_status_conflict",`Board item ${input.itemId} is ${item.status}, not ${input.expectedStatus}.`,item,this.#now())}if(input.holderId!==void 0&&item.assignee?.holderId!==input.holderId){throw new CoreConflictError("board_claim_conflict",`Board item ${input.itemId} is not held by ${input.holderId}.`,item,this.#now())}if(!isLegalBoardTransition(input.expectedStatus,input.status)){throw new CoreConflictError("board_transition_invalid",`${input.expectedStatus} to ${input.status} is not a legal board transition.`,item,this.#now())}const now=this.#now();const updated={...item,status:input.status,boardSeq:this.#nextSeq(tenant),updatedAt:now};this.#items.set(tenantKey(tenant,input.itemId),updated);return updated}#require(tenant,itemId){const item=this.#items.get(tenantKey(tenant,itemId));if(item===void 0){throw new ByokCoreError("board_item_not_found",`Board item ${itemId} does not exist in this tenant.`)}return item}#nextSeq(tenant){const next=(this.#seqByTenant.get(tenant)??0)+1;this.#seqByTenant.set(tenant,next);return next}#now(){return this.#clock.now().toISOString()}};var DEFAULT_READ_LIMIT=50;var InMemoryMailboxStore=class{#devices=new Map;#clock;#quota;constructor(clock,quota){this.#clock=clock;this.#quota=quota;}async append(tenant,input){const device=this.#device(tenant,input.deviceId);const appended=device.mutationTail.then(async()=>{const existing=device.byMessageId.get(input.messageId);if(existing!==void 0)return existing;const limit=input.admission==="cancellation"?void 0:await this.#mailboxLimit(tenant);const seq=device.nextSeq;const materialized=await input.materialize(seq);if(limit!==void 0){const used=this.#usedBytes(tenant);if(used+materialized.byteSize>limit){throw new ByokCoreError("storage_quota_exceeded",`Mailbox would reach ${String(used+materialized.byteSize)} bytes, over the limit of ${String(limit)} bytes.`)}}const message={tenantId:tenant,deviceId:input.deviceId,seq,messageId:input.messageId,...materialized,state:"pending",appendedAt:this.#now()};device.nextSeq+=1;device.messages.push(message);device.byMessageId.set(message.messageId,message);return message});device.mutationTail=appended.then(()=>void 0,()=>void 0);return appended}async readUsage(tenant){return {bytes:this.#usedBytes(tenant)}}async readAfter(tenant,query){const device=this.#devices.get(tenantKey(tenant,query.deviceId));const limit=query.limit??DEFAULT_READ_LIMIT;if(device===void 0){return {messages:[],nextSeq:query.afterSeq,hasMore:false,recoverableFrom:1}}const pending=device.messages.filter(message=>message.state==="pending"&&message.seq>query.afterSeq).sort((left,right)=>left.seq-right.seq);const page=pending.slice(0,limit);const last=page.at(-1);return {messages:page,nextSeq:last?.seq??query.afterSeq,hasMore:pending.length>page.length,recoverableFrom:this.#recoverableFrom(device)}}async advanceCursor(tenant,input){const device=this.#device(tenant,input.deviceId);const advanced=device.mutationTail.then(()=>{if(input.ackedSeq<device.ackedSeq){throw new CoreConflictError("mailbox_cursor_regression",`Cursor for device ${input.deviceId} is at ${device.ackedSeq}; refusing to move it back to ${input.ackedSeq}.`,this.#cursorState(tenant,input.deviceId,device),this.#now())}if(input.ackedSeq>device.deliveredSeq){throw new CoreConflictError("mailbox_cursor_ahead_of_delivery",`Cursor for device ${input.deviceId} was delivered through ${device.deliveredSeq}; refusing to acknowledge future cursor ${input.ackedSeq}.`,this.#cursorState(tenant,input.deviceId,device),this.#now())}device.ackedSeq=input.ackedSeq;device.cursorUpdatedAt=this.#now();for(const[index,message]of device.messages.entries()){if(message.state==="pending"&&message.seq<=input.ackedSeq){device.messages[index]={...message,state:"acked"};device.byMessageId.set(message.messageId,device.messages[index]);}}return this.#cursorState(tenant,input.deviceId,device)});device.mutationTail=advanced.then(()=>void 0,()=>void 0);return advanced}async recordDelivery(tenant,input){const device=this.#device(tenant,input.deviceId);const recorded=device.mutationTail.then(()=>{if(input.deliveredSeq>device.deliveredSeq){device.deliveredSeq=input.deliveredSeq;}return this.#cursorState(tenant,input.deviceId,device)});device.mutationTail=recorded.then(()=>void 0,()=>void 0);return recorded}async readCursor(tenant,deviceId){const device=this.#devices.get(tenantKey(tenant,deviceId));if(device===void 0){return {tenantId:tenant,deviceId,deliveredSeq:0,ackedSeq:0,updatedAt:this.#now()}}return this.#cursorState(tenant,deviceId,device)}async collectExpired(tenant,input){assertCollectExpiredInput(input);assertCanonicalTimestamp(input.ackedBefore,"ackedBefore");assertCanonicalTimestamp(input.expireUnackedBefore,"expireUnackedBefore");let removed=0,expired=0,more=false;try{phases:for(const phase of ["acked","pending"]){for(const[key,device]of this.#devices){if(!key.startsWith(tenantKey(tenant,"")))continue;const collected=device.mutationTail.then(()=>{for(let index=0;index<device.messages.length;){const message=device.messages[index];const cutoff=phase==="acked"?input.ackedBefore:input.expireUnackedBefore;if(message.state!==phase||message.appendedAt>=cutoff){index++;continue}if(removed+expired===input.limit){more=true;return}if(phase==="acked"){device.messages.splice(index,1);device.byMessageId.delete(message.messageId);removed++;}else {const retired={...message,state:"expired"};device.messages[index]=retired;device.byMessageId.set(retired.messageId,retired);expired++;index++;}}});device.mutationTail=collected.then(()=>void 0,()=>void 0);await collected;if(more)break phases}}}catch(cause){throw new CollectExpiredFailure({removed,expired,releasedBytes:0n},0,void 0,{cause})}return {removed,expired,releasedBytes:0n,more}}async#mailboxLimit(tenant){const entitlement=await this.#quota.readEntitlement(tenant);if(entitlement===void 0){throw new ByokCoreError("storage_entitlement_missing","No storage entitlement has been issued for this tenant.")}return entitlement.mailboxLimitBytes}#usedBytes(tenant){const prefix=tenantKey(tenant,"");let bytes=0n;for(const[key,device]of this.#devices.entries()){if(!key.startsWith(prefix))continue;for(const message of device.messages)bytes+=message.byteSize;}return bytes}#device(tenant,deviceId){if(deviceId.length===0){throw new ByokCoreError("mailbox_message_not_found","Device id must not be empty.")}const key=tenantKey(tenant,deviceId);const existing=this.#devices.get(key);if(existing!==void 0)return existing;const created={nextSeq:1,deliveredSeq:0,ackedSeq:0,cursorUpdatedAt:this.#now(),mutationTail:Promise.resolve(),messages:[],byMessageId:new Map};this.#devices.set(key,created);return created}#recoverableFrom(device){let lost=0;for(const message of device.messages){if(message.state==="expired"&&message.seq>lost)lost=message.seq;}return lost+1}#cursorState(tenant,deviceId,device){return {tenantId:tenant,deviceId,deliveredSeq:device.deliveredSeq,ackedSeq:device.ackedSeq,updatedAt:device.cursorUpdatedAt}}#now(){return this.#clock.now().toISOString()}};var DEFAULT_LIST_LIMIT2=100;var InMemoryObjectStore=class{constructor(clock,maintenance){this.maintenance=maintenance;this.#clock=clock;if(maintenance===void 0||maintenance.ledger===void 0||typeof maintenance.bytes?.deleteObject!=="function"){throw new ByokCoreError("retention_input_invalid","ObjectStore requires its shared ledger and an explicit byte authority.")}}maintenance;#manifest=new Map;#references=new Map;#clock;#deleteCursor=new Map;async putManifest(tenant,input){const key=tenantKey(tenant,input.hash);const existing=this.#manifest.get(key);if(existing!==void 0&&existing.state!=="deleted")return existing;const now=this.#now();const entry={tenantId:tenant,hash:input.hash,byteSize:input.byteSize,contentType:input.contentType,state:"pending",refCount:0,createdAt:now,updatedAt:now};this.#manifest.set(key,entry);return entry}async commit(tenant,input){const entry=this.#require(tenant,input.hash);if(entry.byteSize!==input.observedByteSize||entry.contentType!==input.observedContentType){throw new ByokCoreError("storage_integrity_mismatch",`Observed object ${input.hash} (${String(input.observedByteSize)} bytes, ${input.observedContentType}) does not match the declared manifest.`)}if(entry.state==="committed")return entry;return this.#transition(tenant,entry,"committed")}async get(tenant,hash){return this.#manifest.get(tenantKey(tenant,hash))}async list(tenant,query){if(query.deletePendingBefore!==void 0){assertCanonicalTimestamp(query.deletePendingBefore,"deletePendingBefore");}const prefix=tenantKey(tenant,"");const matches=[];for(const[key,entry]of this.#manifest.entries()){if(!key.startsWith(prefix))continue;if(query.state!==void 0&&entry.state!==query.state)continue;if(query.deletePendingBefore!==void 0){if(entry.deletePendingAt===void 0)continue;if(entry.deletePendingAt>=query.deletePendingBefore)continue}matches.push(entry);}matches.sort((left,right)=>left.hash.localeCompare(right.hash));return matches.slice(0,query.limit??DEFAULT_LIST_LIMIT2)}async addReference(tenant,input){const entry=this.#require(tenant,input.hash);if(entry.state!=="committed"){throw new ByokCoreError("object_state_invalid",`Only committed objects can be referenced; ${input.hash} is ${entry.state}.`)}const refKey=tenantKey(tenant,input.hash,input.refKind,input.refId);if(!this.#references.has(refKey)){this.#references.set(refKey,{tenantId:tenant,hash:input.hash,refKind:input.refKind,refId:input.refId,createdAt:this.#now()});}return this.#recount(tenant,entry)}async removeReference(tenant,input){const entry=this.#require(tenant,input.hash);this.#references.delete(tenantKey(tenant,input.hash,input.refKind,input.refId));return this.#recount(tenant,entry)}async markDeletePending(tenant,hash){const entry=this.#require(tenant,hash);if(entry.refCount!==0){throw new ByokCoreError("object_state_invalid",`Object ${hash} still has ${entry.refCount} reference(s).`)}return this.#transition(tenant,entry,"delete_pending")}async markDeleted(tenant,hash){const entry=this.#require(tenant,hash);return this.#transition(tenant,entry,"deleted")}async collectExpired(tenant,input){assertCollectExpiredInput(input);assertCanonicalTimestamp(input.orphanBefore,"orphanBefore");const eligible=entry=>entry.tenantId===tenant&&entry.refCount===0&&!this.maintenance.ledger.hasReservedObject(tenant,entry.hash)&&(entry.state==="delete_pending"||(entry.state==="pending"||entry.state==="committed")&&entry.updatedAt<input.orphanBefore);let removed=0,releasedBytes=0n,more=false,visited=0,failures=0;let firstFailure;const cursor=this.#deleteCursor.get(tenant)??"";const entries=[...this.#manifest.values()].filter(eligible);const pending=entries.filter(entry=>entry.state==="delete_pending").sort((a,b)=>a.hash.localeCompare(b.hash));const first=pending.filter(entry=>entry.hash>cursor).slice(0,input.limit);const fresh=entries.filter(entry=>entry.state!=="delete_pending").sort((a,b)=>a.updatedAt.localeCompare(b.updatedAt)||a.hash.localeCompare(b.hash)).slice(0,input.limit-first.length);const wrapped=pending.filter(entry=>entry.hash<=cursor).slice(0,input.limit-first.length-fresh.length);const candidates=[...first,...fresh,...wrapped];more=entries.length>candidates.length;for(const candidate of candidates){if(visited++===input.limit){more=true;break}const entry=this.#manifest.get(tenantKey(tenant,candidate.hash));if(!eligible(entry))continue;const pending2=entry.state==="delete_pending"?entry:{...entry,state:"delete_pending",deletePendingAt:input.now,updatedAt:input.now};this.#manifest.set(tenantKey(tenant,entry.hash),pending2);try{const release=this.maintenance.ledger.prepareCollectedObjectRelease(tenant,entry.hash,entry.byteSize,input.now);this.maintenance.bytes.deleteObject(tenant,entry.hash);release.commit();const released=release.releasedBytes;this.#manifest.set(tenantKey(tenant,entry.hash),{...pending2,state:"deleted",updatedAt:input.now});removed++;releasedBytes+=released;}catch(cause){failures++;firstFailure??=cause;}}this.#deleteCursor.set(tenant,wrapped.at(-1)?.hash??first.at(-1)?.hash??"");if(failures>0)throw new CollectExpiredFailure({removed,expired:0,releasedBytes},failures,true,{cause:firstFailure});return {removed,expired:0,releasedBytes,more}}#transition(tenant,entry,next){if(!isLegalObjectTransition(entry.state,next)){throw new ByokCoreError("object_state_invalid",`${entry.state} to ${next} is not a legal object manifest transition.`)}const now=this.#now();const updated={...entry,state:next,updatedAt:now,...next==="delete_pending"?{deletePendingAt:now}:{}};this.#manifest.set(tenantKey(tenant,entry.hash),updated);return updated}#recount(tenant,entry){const refPrefix=tenantKey(tenant,entry.hash,"");let refCount=0;for(const key of this.#references.keys()){if(key.startsWith(refPrefix))refCount+=1;}const updated={...entry,refCount,updatedAt:this.#now()};this.#manifest.set(tenantKey(tenant,entry.hash),updated);return updated}#require(tenant,hash){const entry=this.#manifest.get(tenantKey(tenant,hash));if(entry===void 0){throw new ByokCoreError("object_not_found",`Object ${hash} has no manifest row in this tenant.`)}return entry}#now(){return this.#clock.now().toISOString()}};var WARNING_NUMERATOR=80n;var WARNING_DENOMINATOR=100n;var InMemoryQuotaStore=class{constructor(clock,objects,ledger){this.ledger=ledger;this.#clock=clock;this.#objects=objects;}ledger;#entitlements=new Map;#clock;#objects;async readEntitlement(tenant){return this.#entitlements.get(tenant)}async writeEntitlement(tenant,input){if(input.downgradeGraceUntil!==void 0){assertCanonicalTimestamp(input.downgradeGraceUntil,"downgradeGraceUntil");}const existing=this.#entitlements.get(tenant);if(existing!==void 0&&input.version<=existing.version){throw new CoreConflictError("storage_entitlement_version_conflict",`Entitlement is at version ${String(existing.version)}; refusing to apply version ${String(input.version)}.`,existing,this.#now())}const entitlement={tenantId:tenant,version:input.version,hardLimitBytes:input.hardLimitBytes,maxObjectBytes:input.maxObjectBytes,maxInlineBytes:input.maxInlineBytes,mailboxLimitBytes:input.mailboxLimitBytes,retentionPolicyId:input.retentionPolicyId,...input.downgradeGraceUntil===void 0?{}:{downgradeGraceUntil:input.downgradeGraceUntil}};this.#entitlements.set(tenant,entitlement);return entitlement}async readUsage(tenant){return this.#usageOf(tenant)}async readStatus(tenant){const entitlement=this.#requireEntitlement(tenant);const usage=this.#usageOf(tenant);const used=this.#usedBytes(usage);const graceActive=entitlement.downgradeGraceUntil!==void 0&&this.#now()<entitlement.downgradeGraceUntil;return {entitlement,usage,posture:this.#posture(entitlement,usage,graceActive),availableBytes:used>=entitlement.hardLimitBytes?0n:entitlement.hardLimitBytes-used,graceActive}}async readReservation(tenant,reservationId){return this.ledger.readReservation(tenantKey(tenant,reservationId))?.reservation}async reserve(tenant,input){const entitlement=this.#requireEntitlement(tenant);await Array.from(this.#expireReservations(tenant));const key=tenantKey(tenant,input.reservationId);const existing=this.ledger.readReservation(key);if(existing!==void 0){if(existing.reservation.state==="reserved"){if(existing.reservation.kind!==input.kind||existing.reservation.expectedBytes!==input.expectedBytes||existing.reservation.contentHash!==input.contentHash||existing.reservation.contentType!==input.contentType){throw new ByokCoreError("storage_integrity_mismatch",`Reservation ${input.reservationId} already binds a different storage declaration.`)}return existing.reservation}throw new ByokCoreError("storage_reservation_expired",`Reservation ${input.reservationId} is already ${existing.reservation.state}.`)}const usage=this.#usageOf(tenant);const graceActive=entitlement.downgradeGraceUntil!==void 0&&this.#now()<entitlement.downgradeGraceUntil;if(this.#posture(entitlement,usage,graceActive)==="suspended"){throw new ByokCoreError("storage_write_suspended","Tenant is over its hard limit and its downgrade grace has ended; durable writes are suspended.")}const perObjectLimit=input.kind==="object"?entitlement.maxObjectBytes:entitlement.maxInlineBytes;if(input.expectedBytes>perObjectLimit){throw new ByokCoreError("storage_object_too_large",`${String(input.expectedBytes)} bytes exceeds the ${input.kind} limit of ${String(perObjectLimit)} bytes.`)}if(this.#usedBytes(usage)+input.expectedBytes>entitlement.hardLimitBytes){throw new ByokCoreError("storage_quota_exceeded",`Reserving ${String(input.expectedBytes)} bytes would exceed the hard limit of ${String(entitlement.hardLimitBytes)} bytes.`)}const now=this.#now();const reservation={tenantId:tenant,reservationId:input.reservationId,state:"reserved",kind:input.kind,expectedBytes:input.expectedBytes,contentHash:input.contentHash,contentType:input.contentType,createdAt:now,expiresAt:new Date(this.#clock.now().getTime()+input.ttlMs).toISOString()};this.ledger.writeReservation(key,{reservation,deduplicated:false});this.#setUsage(tenant,{...usage,reservedBytes:usage.reservedBytes+input.expectedBytes});return reservation}async finalizeReservation(tenant,input){const key=tenantKey(tenant,input.reservationId);const record=this.#requireReservation(tenant,input.reservationId);const reservation=record.reservation;if(reservation.state==="committed"){return {reservation,usage:this.#usageOf(tenant),deduplicated:record.deduplicated}}if(reservation.state!=="reserved"){throw new ByokCoreError("storage_reservation_expired",`Reservation ${input.reservationId} is ${reservation.state}.`)}if(this.#now()>=reservation.expiresAt){this.#settle(tenant,key,record,"expired");throw new ByokCoreError("storage_reservation_expired",`Reservation ${input.reservationId} expired at ${reservation.expiresAt}.`)}if(input.observedByteSize!==reservation.expectedBytes||input.observedContentType!==reservation.contentType){this.#settle(tenant,key,record,"aborted");throw new ByokCoreError("storage_integrity_mismatch",`Observed object does not match reservation ${input.reservationId}.`)}if(reservation.kind==="object"){try{await this.#objects.commit(tenant,{hash:reservation.contentHash,observedByteSize:input.observedByteSize,observedContentType:input.observedContentType});}catch(error){this.#settle(tenant,key,record,"aborted");if(error instanceof ByokCoreError&&(error.code==="object_not_found"||error.code==="object_state_invalid")){throw new ByokCoreError("storage_integrity_mismatch",`Reservation ${input.reservationId} has no committable object manifest.`,{cause:error})}throw error}}const deduplicated=this.ledger.isCounted(tenant,reservation.contentHash);const settled=this.#settle(tenant,key,record,"committed",deduplicated);if(!deduplicated){this.ledger.recordCommitted(tenant,reservation);const current=this.#usageOf(tenant);this.#setUsage(tenant,{...current,committedObjectBytes:reservation.kind==="object"?current.committedObjectBytes+reservation.expectedBytes:current.committedObjectBytes,committedInlineBytes:reservation.kind==="inline"?current.committedInlineBytes+reservation.expectedBytes:current.committedInlineBytes,objectCount:reservation.kind==="object"?current.objectCount+1n:current.objectCount});}return {reservation:settled,usage:this.#usageOf(tenant),deduplicated}}async abortReservation(tenant,reservationId){const key=tenantKey(tenant,reservationId);const record=this.#requireReservation(tenant,reservationId);if(record.reservation.state!=="reserved")return record.reservation;return this.#settle(tenant,key,record,"aborted")}*#expireReservations(tenant,now=this.#now(),limit=Number.MAX_SAFE_INTEGER){const prefix=tenantKey(tenant,"");let expired=0;for(const[key,record]of this.ledger.reservations()){if(!key.startsWith(prefix)||record.reservation.state!=="reserved"||now<record.reservation.expiresAt)continue;yield this.#settle(tenant,key,record,"expired",false,now);if(++expired===limit)return}}async collectExpired(tenant,input){assertCollectExpiredInput(input);assertCanonicalTimestamp(input.settledBefore,"settledBefore");let expired=0,releasedBytes=0n,removed=0,more=false;try{for(const reservation of this.#expireReservations(tenant,input.now,input.limit)){expired++;releasedBytes+=reservation.expectedBytes;}}catch(cause){throw new CollectExpiredFailure({removed,expired,releasedBytes},1,true,{cause})}const prefix=tenantKey(tenant,"");try{for(const[key,record]of this.ledger.reservations()){if(!key.startsWith(prefix))continue;const row=record.reservation;const shouldExpire=row.state==="reserved"&&row.expiresAt<=input.now;const shouldRemove=(row.state==="expired"||row.state==="aborted")&&row.settledAt!==void 0&&row.settledAt<input.settledBefore;if(!shouldExpire&&!shouldRemove)continue;if(shouldExpire||removed+expired===input.limit){more=true;continue}this.ledger.deleteReservation(key);removed++;}}catch(cause){throw new CollectExpiredFailure({removed,expired,releasedBytes},0,void 0,{cause})}return {removed,expired,releasedBytes,more}}#settle(tenant,key,record,state,deduplicated=false,settledAt=this.#now()){const settled={...record.reservation,state,settledAt};const usage=this.#usageOf(tenant);if(usage.reservedBytes<record.reservation.expectedBytes){throw new ByokCoreError("storage_integrity_mismatch","Reservation settlement would underflow reserved usage.")}this.ledger.writeReservation(key,{reservation:settled,deduplicated});this.#setUsage(tenant,{...usage,reservedBytes:usage.reservedBytes-record.reservation.expectedBytes});return settled}#posture(entitlement,usage,graceActive){const used=this.#usedBytes(usage);if(used>=entitlement.hardLimitBytes){const graceConfigured=entitlement.downgradeGraceUntil!==void 0;return graceConfigured&&!graceActive?"suspended":"blocked"}if(entitlement.hardLimitBytes>0n&&used*WARNING_DENOMINATOR>=entitlement.hardLimitBytes*WARNING_NUMERATOR){return "warning"}return "normal"}#usedBytes(usage){return usage.committedObjectBytes+usage.committedInlineBytes+usage.reservedBytes}#usageOf(tenant){return this.ledger.readUsage(tenant)}#setUsage(tenant,usage){this.ledger.writeUsage(tenant,{...usage,updatedAt:this.#now()});}#requireEntitlement(tenant){const entitlement=this.#entitlements.get(tenant);if(entitlement===void 0){throw new ByokCoreError("storage_entitlement_missing","No storage entitlement has been issued for this tenant.")}return entitlement}#requireReservation(tenant,reservationId){const record=this.ledger.readReservation(tenantKey(tenant,reservationId));if(record===void 0){throw new ByokCoreError("storage_reservation_not_found",`Reservation ${reservationId} does not exist in this tenant.`)}return record}#now(){return this.#clock.now().toISOString()}};var DEFAULT_LIST_LIMIT3=50;var InMemorySkillPackStore=class{#packs=new Map;async publish(tenant,input){const{manifest}=input;const structural=checkSkillPackManifest(manifest);if(!structural.ok){throw new ByokCoreError("skill_pack_manifest_invalid",`Refusing to publish ${JSON.stringify(manifest.name)}: ${structural.reason} \u2014 ${structural.detail}`)}const contents=new Map;for(const file of input.files){if(contents.has(file.path)){throw new ByokCoreError("skill_pack_manifest_invalid",`Refusing to publish ${JSON.stringify(manifest.name)}: ${JSON.stringify(file.path)} was supplied twice.`)}contents.set(file.path,file.content);}for(const declared of manifest.files){const content=contents.get(declared.path);if(content===void 0){throw new ByokCoreError("skill_pack_manifest_invalid",`Refusing to publish ${JSON.stringify(manifest.name)}: ${JSON.stringify(declared.path)} is declared but was not supplied.`)}const bytes=new TextEncoder().encode(content).length;if(bytes!==declared.byteSize){throw new ByokCoreError("skill_pack_manifest_invalid",`Refusing to publish ${JSON.stringify(manifest.name)}: ${JSON.stringify(declared.path)} declares ${declared.byteSize} bytes and supplies ${bytes}.`)}}if(contents.size!==manifest.files.length){throw new ByokCoreError("skill_pack_manifest_invalid",`Refusing to publish ${JSON.stringify(manifest.name)}: ${contents.size} files were supplied for ${manifest.files.length} declared rows.`)}const entry=checkSkillPackEntry(manifest,contents.get(SKILL_PACK_ENTRY_PATH));if(!entry.ok){throw new ByokCoreError("skill_pack_manifest_invalid",`Refusing to publish ${JSON.stringify(manifest.name)}: ${entry.reason} \u2014 ${entry.detail}`)}this.#packs.set(tenantKey(tenant,manifest.name),{manifest,contents});return manifest}async get(tenant,name){return this.#packs.get(tenantKey(tenant,name))?.manifest}async list(tenant,query){const prefix=tenantKey(tenant,"");const manifests=[];for(const[key,pack]of this.#packs.entries()){if(!key.startsWith(prefix))continue;manifests.push(pack.manifest);}manifests.sort((left,right)=>left.name<right.name?-1:left.name>right.name?1:0);return manifests.slice(0,query.limit??DEFAULT_LIST_LIMIT3)}async readFile(tenant,name,path){const pack=this.#packs.get(tenantKey(tenant,name));if(pack===void 0)return void 0;const declared=pack.manifest.files.find(file=>file.path===path);const content=pack.contents.get(path);if(declared===void 0||content===void 0)return void 0;return {path:declared.path,contentHash:declared.contentHash,byteSize:declared.byteSize,content}}};var DEFAULT_MANIFEST_LIMIT=100;var InMemoryTruthStore=class{#records=new Map;#clock;constructor(clock){this.#clock=clock;}async writeTerminal(tenant,input){const key=tenantKey(tenant,"task.terminal",input.taskId);const existing=this.#records.get(key);if(existing!==void 0){if(existing.contentHash===input.contentHash){return existing}throw new CoreConflictError("terminal_conflict",`Task ${input.taskId} already has an immutable terminal record with a different hash.`,existing,this.#now())}const record={tenantId:tenant,kind:"task.terminal",recordKey:input.taskId,rev:1,contentHash:input.contentHash,byteSize:input.byteSize,body:input.body,...input.label===void 0?{}:{label:input.label},...input.requestId===void 0?{}:{requestId:input.requestId},writtenAt:this.#now()};this.#records.set(key,record);return record}async writeSnapshot(tenant,input){const key=tenantKey(tenant,input.kind,input.recordKey);const existing=this.#records.get(key);const currentRev=existing?.rev??0;if(input.expectedRev!==currentRev){throw new CoreConflictError("truth_revision_conflict",`Record ${input.kind}/${input.recordKey} is at rev ${currentRev}, not ${input.expectedRev}.`,existing,this.#now())}const record={tenantId:tenant,kind:input.kind,recordKey:input.recordKey,rev:currentRev+1,contentHash:input.contentHash,byteSize:input.byteSize,body:input.body,...input.label===void 0?{}:{label:input.label},...input.requestId===void 0?{}:{requestId:input.requestId},writtenAt:this.#now()};this.#records.set(key,record);return record}async getRecord(tenant,selector){return this.#records.get(tenantKey(tenant,selector.kind,selector.recordKey))}async listManifest(tenant,query){const prefix=tenantKey(tenant,"");const entries=[];for(const[key,record]of this.#records.entries()){if(!key.startsWith(prefix))continue;if(query.kind!==void 0&&record.kind!==query.kind)continue;if(query.keyPrefix!==void 0&&!record.recordKey.startsWith(query.keyPrefix)){continue}entries.push({kind:record.kind,recordKey:record.recordKey,rev:record.rev,contentHash:record.contentHash,byteSize:record.byteSize,...record.label===void 0?{}:{label:record.label},updatedAt:record.writtenAt});}entries.sort((left,right)=>left.kind.localeCompare(right.kind)||left.recordKey.localeCompare(right.recordKey));return entries.slice(0,query.limit??DEFAULT_MANIFEST_LIMIT)}#now(){return this.#clock.now().toISOString()}};var IN_MEMORY_CLOCK_EPOCH="2026-01-01T00:00:00.000Z";function createMutableClock(start=new Date(IN_MEMORY_CLOCK_EPOCH)){let current=start.getTime();return {now(){return new Date(current)},advance(ms){current+=ms;},set(instant){current=instant.getTime();}}}function replayKey(input){return JSON.stringify([input.tenantId,input.issuer,input.productId,input.deviceId,input.audience,input.schema,input.jti])}var InMemoryDeviceAssertionReplayAuthority=class{#expiresAtByKey=new Map;async consume(input){const expiresAt=Date.parse(input.expiresAt);if(!Number.isFinite(expiresAt))throw new Error("device assertion replay expiry is invalid");const key=replayKey(input);if(this.#expiresAtByKey.has(key))return false;this.#expiresAtByKey.set(key,expiresAt);return true}async collectExpired(tenant,input){assertCollectExpiredInput(input);const cutoff=Date.parse(input.now);let removed=0,more=false;for(const[key,expiresAt]of this.#expiresAtByKey){if(JSON.parse(key)[0]!==tenant||expiresAt>cutoff)continue;if(removed===input.limit){more=true;break}this.#expiresAtByKey.delete(key);removed++;}return {removed,expired:0,releasedBytes:0n,more}}};function createInMemoryCoreStores(options){const clock=options.clock??createMutableClock();const ledger=new InMemoryStorageLedger(clock);const objects=new InMemoryObjectStore(clock,{ledger,bytes:options.objectBytes});const quota=new InMemoryQuotaStore(clock,objects,ledger);const stores={mailbox:new InMemoryMailboxStore(clock,quota),board:new InMemoryBoardStore(clock),truth:new InMemoryTruthStore(clock),presence:new InMemoryPresenceStore(clock),objects,quota,skillPacks:new InMemorySkillPackStore};return {stores,clock}}function createInMemoryCoreCompositionWithClock(objectBytes){const clock=createMutableClock();return {stores:createInMemoryCoreStores({clock,objectBytes}).stores,clock}}var ROUTINE_DAYS_OF_WEEK=Object.freeze(["mon","tue","wed","thu","fri","sat","sun"]);var ROUTINE_HORIZON_MS=368*864e5;var ROUTINE_MIN_NOW=Date.UTC(2e3,0,1);var ROUTINE_MAX_NOW=Date.UTC(2200,0,1);var KEYS=new Set(["minute","hour","daysOfWeek","dayOfMonth","month","tz"]);var COMMON_YEAR_DAYS=[31,28,31,30,31,30,31,31,30,31,30,31];var TZ_NAME=/^[A-Za-z][A-Za-z0-9_+-]*(?:\/[A-Za-z0-9_+-]+)*$/;var DAY_MS=864e5;var UTC_DAY_NAME=["sun","mon","tue","wed","thu","fri","sat"];var ScheduleError=class extends Error{code;constructor(code,message){super(message);this.code=code;}};var invalid=message=>new ScheduleError("schedule_invalid",message);function integer(value,name,min,max){if(typeof value!=="number"||!Number.isInteger(value)||value<min||value>max)throw invalid(`${name} must be an integer ${min}-${max}`);return value}var formatters=new Map;function formatter(tz){let f=formatters.get(tz);if(!f){f=new Intl.DateTimeFormat("en-US",{timeZone:tz,hourCycle:"h23",year:"numeric",month:"numeric",day:"numeric",hour:"numeric",minute:"numeric",second:"numeric"});if(formatters.size>=64)formatters.delete(formatters.keys().next().value);formatters.set(tz,f);}return f}function checkTz(tz){if(typeof tz!=="string"||!TZ_NAME.test(tz))throw new ScheduleError("tz_invalid",`${JSON.stringify(tz)} is not an IANA zone name`);try{formatter(tz);}catch{throw new ScheduleError("tz_invalid",`"${tz}" is not a known IANA zone`)}return tz}function parse(schedule){if(schedule===null||typeof schedule!=="object"||Array.isArray(schedule))throw invalid("schedule must be an object");for(const key of Object.keys(schedule))if(!KEYS.has(key))throw invalid(`unknown field ${key}`);const p={minute:integer(schedule.minute,"minute",0,59),hour:integer(schedule.hour,"hour",0,23),tz:checkTz(schedule.tz)};const s=schedule;if(s.daysOfWeek!==void 0&&s.dayOfMonth!==void 0)throw invalid("daysOfWeek and dayOfMonth cannot both appear");if(s.month!==void 0&&s.dayOfMonth===void 0)throw invalid("month needs dayOfMonth");if(s.daysOfWeek!==void 0){if(!Array.isArray(s.daysOfWeek)||s.daysOfWeek.length<1||s.daysOfWeek.length>7)throw invalid("daysOfWeek must list 1-7 days");for(const d of s.daysOfWeek)if(!ROUTINE_DAYS_OF_WEEK.includes(d))throw invalid(`unknown day ${JSON.stringify(d)}`);p.days=new Set(s.daysOfWeek);}if(s.dayOfMonth!==void 0){p.dayOfMonth=integer(s.dayOfMonth,"dayOfMonth",1,31);if(s.month!==void 0){p.month=integer(s.month,"month",1,12);if(p.month===2&&p.dayOfMonth===29){throw new ScheduleError("schedule_beyond_horizon","February 29 exists only in leap years; the next one can be up to 8 years away, beyond the 368-day horizon")}if(p.dayOfMonth>COMMON_YEAR_DAYS[p.month-1]){throw new ScheduleError("schedule_unreachable",`month ${p.month} has no day ${p.dayOfMonth}`)}}}return p}function checkRoutineSchedule(schedule){try{parse(schedule);return {ok:true}}catch(e){if(e instanceof ScheduleError)return {ok:false,code:e.code,message:e.message};throw e}}function localAsUtc(tz,instant){const p={};for(const part of formatter(tz).formatToParts(instant))if(part.type!=="literal")p[part.type]=Number(part.value);return Date.UTC(p.year,p.month-1,p.day,p.hour,p.minute,p.second)}var offsetAt=(tz,instant)=>localAsUtc(tz,instant)-Math.floor(instant/1e3)*1e3;function resolve(tz,local){const before=offsetAt(tz,local-DAY_MS);const offsets=new Set([before,offsetAt(tz,local),offsetAt(tz,local+DAY_MS)]);const valid=[...offsets].map(o=>local-o).filter(i=>offsetAt(tz,i)===local-i);return valid.length?{instant:Math.min(...valid),shifted:false}:{instant:local-before,shifted:true}}function matchesDate(p,y,m,d){if(p.days)return p.days.has(UTC_DAY_NAME[new Date(Date.UTC(y,m-1,d)).getUTCDay()]);if(p.dayOfMonth!==void 0)return d===p.dayOfMonth&&(p.month===void 0||m===p.month);return true}function nextRoutineOccurrence(schedule,now){if(!Number.isSafeInteger(now)||now<ROUTINE_MIN_NOW||now>=ROUTINE_MAX_NOW){throw new RangeError("now must be a safe integer epoch ms in [2000-01-01, 2200-01-01)")}let p;try{p=parse(schedule);}catch(error){if(error instanceof ScheduleError)throw new ByokCoreError("routine_schedule_invalid",error.message);throw error}const start=localAsUtc(p.tz,now);const day0=Date.UTC(new Date(start).getUTCFullYear(),new Date(start).getUTCMonth(),new Date(start).getUTCDate());let best=Infinity;for(let k=-1;k<=368;k+=1){const day=new Date(day0+k*DAY_MS);const y=day.getUTCFullYear(),m=day.getUTCMonth()+1,d=day.getUTCDate();if(!matchesDate(p,y,m,d))continue;const{instant,shifted}=resolve(p.tz,Date.UTC(y,m-1,d,p.hour,p.minute));if(instant<=now)continue;best=Math.min(best,instant);if(!shifted)break}return best-now<=ROUTINE_HORIZON_MS?best:null}
 
 export { AGENT_MEMORY_INTENT_DIGEST_VERSION, BOARD_STATUSES, BOARD_TRANSITIONS, ByokCoreError, CANONICAL_TIMESTAMP_PATTERN, CAPABILITY_DECLARATION_SCHEMA_ID, CAPABILITY_NAME_PATTERN, CONTENT_HASH_PATTERN, CORE_ERROR_CODES, CORE_NON_COMPOSITION_PORT_NAMES, CORE_PORT_INTERFACES, CORE_PORT_METHODS, CORE_STORE_NAMES, CapabilityDeclarationSchema, CollectExpiredFailure, CoreConflictError, DEVICE_ASSERTION_ALGORITHMS, DEVICE_ASSERTION_AUDIENCE_MAX_BYTES, DEVICE_ASSERTION_DEFAULT_TTL_MS, DEVICE_ASSERTION_DOMAIN_PREFIX, DEVICE_ASSERTION_MAX_TTL_MS, DEVICE_ASSERTION_SCHEMA_ID, DEVICE_ASSERTION_VERSION, DEVICE_PROOF_ALGORITHMS, DEVICE_PROOF_DOMAIN_PREFIX, DEVICE_PROOF_HEADER, DEVICE_PROOF_SCHEMA_ID, DEVICE_PROOF_VERSION, DeviceAssertionClaimsSchema, DeviceAssertionEnvelopeV1Schema, DeviceProofEnvelopeV1Schema, DeviceProofProtectedClaimsSchema, IN_MEMORY_CLOCK_EPOCH, InMemoryBoardStore, InMemoryDeviceAssertionReplayAuthority, InMemoryMailboxStore, InMemoryObjectStore, InMemoryPresenceStore, InMemoryQuotaStore, InMemorySkillPackStore, InMemoryStorageLedger, InMemoryTruthStore, MAILBOX_MESSAGE_STATES, NONCE_SIGNING_DOMAIN, OBJECT_KEY_PREFIX_PATTERN, OBJECT_STATES, OBJECT_STATE_TRANSITIONS, PRESENCE_LEVELS, PRINCIPAL_KINDS, PROVIDER_PROVISIONING_MAX_TTL_MS, PROVIDER_PROVISIONING_OPERATIONS, PROVIDER_PROVISIONING_REQUEST_VERSION, PROVIDER_PROVISIONING_SECRET_OPERATIONS, PROVIDER_SECRET_HPKE_INFO, PROVIDER_SECRET_HPKE_SUITE, PROVIDER_SECRET_MAX_BYTES, PROVIDER_SECRET_MAX_PADDED_BYTES, PROVIDER_SECRET_PAD_BLOCK_BYTES, ProviderProvisioningConfigV1Schema, ProviderProvisioningExpectedProfileSchema, ProviderProvisioningHeaderV1Schema, ProviderProvisioningIdentityRevisionSchema, ProviderProvisioningRequestV1Schema, ROUTINE_DAYS_OF_WEEK, ROUTINE_HORIZON_MS, ROUTINE_MAX_NOW, ROUTINE_MIN_NOW, SEALING_KEY_ID_LENGTH, SKILL_FRONTMATTER_FIELDS, SKILL_PACK_DESCRIPTION_MAX_LENGTH, SKILL_PACK_ENTRY_PATH, SKILL_PACK_FILE_MAX_BYTES, SKILL_PACK_FILE_PATH_MAX_LENGTH, SKILL_PACK_FILE_PATH_PATTERN, SKILL_PACK_FORBIDDEN_FIELDS, SKILL_PACK_MANIFEST_SCHEMA_ID, SKILL_PACK_MAX_BYTES, SKILL_PACK_MAX_FILES, SKILL_PACK_NAME_MAX_LENGTH, SKILL_PACK_NAME_PATTERN, SKILL_PACK_REJECTIONS, SKILL_PACK_VERSION_PATTERN, STORAGE_ERROR_CODES, STORAGE_ERROR_HTTP_STATUS, STORAGE_RESERVATION_STATES, STORAGE_WRITE_KINDS, STORAGE_WRITE_POSTURES, SealedProviderSecretV1Schema, SealingKeyClaimV1Schema, SealingKeyIdSchema, SealingPublicJwkSchema, SkillPackFileSchema, SkillPackManifestSchema, TASK_ASSERTION_AGENT_REF_MAX_BYTES, TASK_ASSERTION_DOMAIN_PREFIX, TASK_ASSERTION_SCHEMA_ID, TASK_ASSERTION_TOOLSET_ID_MAX_LENGTH, TASK_ASSERTION_VERSION, TENANT_ID_MAX_LENGTH, TENANT_KEY_SEPARATOR, TRUTH_RECORD_KINDS, TaskAssertionAgentRefSchema, TaskAssertionClaimsSchema, TaskAssertionEnvelopeV1Schema, agentMemoryIntentOperationDigest, assertCanonicalTimestamp, assertCapability, assertCollectExpiredInput, assertProviderProvisioningConfigDigest, authenticateDeviceAssertion, authenticateTaskAssertion, canonicalizeJson, canonicalizeJsonBytes, checkRoutineSchedule, checkSkillPackEntry, checkSkillPackFileContent, checkSkillPackManifest, contentHash, createInMemoryCoreCompositionWithClock, createInMemoryCoreStores, createMutableClock, deriveSealingKeyId, deviceAssertionCanonicalClaims, deviceAssertionCanonicalJson, deviceAssertionSigningInput, deviceProofCanonicalClaims, deviceProofCanonicalJson, deviceProofSigningInput, hasCapability, isCanonicalTimestamp, isContentHash, isControlPlanePrincipal, isCoreConflictError, isCoreError, isDevicePrincipal, isLegalBoardTransition, isLegalObjectTransition, isSkillPackPathSafe, isTenantId, nextRoutineOccurrence, nonceSigningBytes, objectKeyPrefix, openProviderProvisioningSecret, parseCapabilityDeclaration, parseDeviceAssertionEnvelope, parseDeviceProofEnvelope, parseProviderProvisioningRequest, parseSkillFrontmatter, parseSkillPackManifest, parseTaskAssertionEnvelope, principalTenant, providerProvisioningConfigDigest, providerProvisioningRequestDigest, providerSecretAadBytes, sealProviderProvisioningRequest, sealingKeyClaimCanonicalBytes, skillPackContentHashInput, taskAssertionCanonicalClaims, taskAssertionCanonicalJson, taskAssertionSigningInput, tenantId, tenantKey, tenantObjectKey, verifyDeviceAssertion, verifyTaskAssertion };
 //# sourceMappingURL=index.js.map