@byollm/conformance 0.1.0-alpha.2 → 0.1.0-alpha.20

package/dist/index.js

@@ -4,18 +4,28 @@ import {
   advance,
   certify,
   formatReport,
+  miscoveredMusts,
   ownerIdFor,
   pairDaemon,
   sleep,
   uncoveredMusts,
   waitFor
-} from "./chunk-PDQJJ3Q2.js";
+} from "./chunk-XBHNJDI7.js";
+import {
+  POSTURE_CHECKS,
+  auditDeployment,
+  formatPostureReport
+} from "./chunk-C4OR4KM5.js";
 export {
   CHECKS,
   EchoBackend,
+  POSTURE_CHECKS,
   advance,
+  auditDeployment,
   certify,
+  formatPostureReport,
   formatReport,
+  miscoveredMusts,
   ownerIdFor,
   pairDaemon,
   sleep,

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@byollm/conformance",
-  "version": "0.1.0-alpha.2",
+  "version": "0.1.0-alpha.20",
   "description": "The BYOLLM compatibility contract — drive a real daemon against any server and assert every protocol MUST.",
   "license": "MIT",
   "type": "module",
   "bin": {
-    "byollm-certify": "./dist/cli.js"
+    "byollm-certify": "./dist/cli.js",
+    "byollm-audit-deployment": "./dist/audit-cli.js"
   },
   "exports": {
     ".": {
@@ -21,15 +22,15 @@
     "README.md"
   ],
   "engines": {
-    "node": ">=22.12"
+    "node": ">=22.14"
   },
   "dependencies": {
-    "@byollm/protocol": "0.1.0-alpha.2",
-    "byollm": "0.1.0-alpha.2"
+    "@byollm/protocol": "0.1.0-alpha.20",
+    "byollm": "0.1.0-alpha.20"
   },
   "devDependencies": {
     "@supabase/supabase-js": "^2.112.2",
-    "@byollm/server": "0.1.0-alpha.2"
+    "@byollm/server": "0.1.0-alpha.20"
   },
   "publishConfig": {
     "access": "public"
@@ -46,6 +47,7 @@
     "build": "tsup",
     "clean": "rm -rf dist .tsbuild",
     "certify:reference": "vitest run --project conformance --root ../..",
-    "certify:supabase": "node --experimental-strip-types targets/supabase.ts"
+    "certify:supabase": "node --experimental-strip-types targets/supabase.ts",
+    "audit:deployed": "node dist/audit-cli.js"
   }
 }

package/targets/supabase.ts

@@ -24,7 +24,11 @@ import {
 // The built package, not `../src`: Node's type stripping does not rewrite the
 // `.js` specifiers the source uses, and certifying the published entry points
 // is closer to what a consumer actually gets.
-import { ByollmApp, createFetchHandler } from "@byollm/server";
+import {
+  ByollmApp,
+  createFetchHandler,
+  generateSiteKeys,
+} from "@byollm/server";
 import { supabaseStore } from "@byollm/server/supabase";
 
 const SUPABASE_URL = process.env["SUPABASE_URL"] ?? "http://127.0.0.1:54421";
@@ -37,6 +41,12 @@ const ORIGIN = "https://supabase.byollm.test";
 /** Short, because a real Postgres clock cannot be faked forward. */
 const LEASE_MS = 2_000;
 const TTL_MS = 1_500;
+/**
+ * Short for the same reason as the two above: with no fakeable clock, an
+ * expiry check waits for real. The product default is ten minutes, which is
+ * right for a human reading a code off a screen and wrong for a suite.
+ */
+const PAIRING_TTL_MS = 2_000;
 
 if (SERVICE_KEY === "") {
   process.stderr.write(
@@ -89,12 +99,18 @@ async function ensureUser(name: string): Promise<string> {
 
 const toName = (id: string): string => ownerNames.get(id) ?? id;
 
+// Generated per run: this target is one process, so there is no scale-out
+// identity problem to model here. A real deployment supplies these.
+const SITE_KEYS = generateSiteKeys();
+
 const store = supabaseStore({ client, defaultTtlMs: TTL_MS });
-const app = new ByollmApp({ store });
+const app = new ByollmApp({ store, siteKeys: SITE_KEYS });
 const handler = createFetchHandler({
   store,
   verificationUrl: `${ORIGIN}/settings/runners`,
+  siteKeys: SITE_KEYS,
   leaseMs: LEASE_MS,
+  pairingTtlMs: PAIRING_TTL_MS,
 });
 
 const target: ConformanceTarget = {