@byollm/conformance 0.1.0-alpha.56 → 0.1.0-alpha.58

package/README.md

@@ -1,5 +1,5 @@
 > [!WARNING]
-> **Alpha (`0.1.0-alpha.56`) — under active development. Don't use this yet.**
+> **Alpha (`0.1.0-alpha.58`) — under active development. Don't use this yet.**
 >
 > Install it deliberately: `npm install @byollm/conformance@alpha`.
 >
@@ -79,7 +79,7 @@
 > packages published and `@byollm/server` did not: a Sigstore
 > transparency-log 409 on its provenance attestation. The workflow's
 > "already published" guard correctly refuses to resume a partial publish,
-> so `0.1.0-alpha.56` is that release, whole.
+> so `0.1.0-alpha.58` is that release, whole.
 >
 > If you run the Supabase adapter, `alpha.21` needs
 > `20260819010000_completed_by_lease_id.sql`: alpha.19 shipped §3.6's

package/dist/{chunk-FCX5R4LZ.js → chunk-3N7FYXDP.js}

@@ -29,7 +29,6 @@ import {
   signRequest
 } from "@byollm/protocol";
 import {
-  Allowlist,
   Budgets,
   IngressLog,
   SpendLedger,
@@ -116,12 +115,10 @@ function daemonConfig(options) {
 async function pairDaemon(target, options) {
   const home = await mkdtemp(join(tmpdir(), "byollm-conformance-"));
   const loaded = daemonConfig({
-    offer: options.offer ?? "private",
+    offer: options.offer,
     subscription: options.subscription ?? false,
     ...options.metered === void 0 ? {} : { metered: options.metered }
   });
-  const allowlist = new Allowlist(join(home, "allow.json"));
-  await allowlist.load();
   const budgets = new Budgets(
     join(home, "budgets.json"),
     loaded.config.community
@@ -139,7 +136,6 @@ async function pairDaemon(target, options) {
   const capabilities = loaded.routes.map((route) => ({
     kind: route.kind,
     service: route.service,
-    isDefault: true,
     backendId: route.backendId,
     backendClass: route.backendClass,
     model: route.model,
@@ -210,7 +206,6 @@ async function pairDaemon(target, options) {
     },
     daemonVersion: "conformance",
     loaded,
-    allowlist,
     budgets,
     spend,
     ingress,
@@ -219,7 +214,6 @@ async function pairDaemon(target, options) {
   return {
     runner,
     backend,
-    allowlist,
     runnerId: result.pairing.runnerId,
     owner: result.pairing.owner,
     keys: await deviceIdentity.load(Date.now()),
@@ -509,13 +503,19 @@ var CHECKS = [
     title: "a runner token is bound to exactly the approving user",
     musts: ["PAIR_ONE_USER", "PAIR_INTERACTIVE"],
     async run(target) {
-      const alice = await pairDaemon(target, { owner: "alice" });
+      const alice = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         assert(
           alice.owner === await ownerIdFor(target, "alice"),
           `runner was bound to "${alice.owner}", not to the approving user`
         );
-        const bob = await pairDaemon(target, { owner: "bob" });
+        const bob = await pairDaemon(target, {
+          owner: "bob",
+          offer: "private"
+        });
         assert(
           bob.owner !== alice.owner,
           "two different approvers produced the same runner owner"
@@ -547,7 +547,10 @@ var CHECKS = [
     title: "an enqueued job runs on the owner's daemon and the result comes back",
     musts: ["CLAIM_REQUIRES_CAPABILITY", "RESULT_IDEMPOTENT"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         const job = await target.enqueue({
           kind: "llm.generate",
@@ -577,7 +580,10 @@ var CHECKS = [
     title: "a daemon is never handed a kind it did not advertise",
     musts: ["KIND_TYPED_ONLY", "CLAIM_REQUIRES_CAPABILITY"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         const job = await target.enqueue({
           kind: "llm.chat",
@@ -605,7 +611,6 @@ var CHECKS = [
           {
             kind: "llm.generate",
             service: "local",
-            isDefault: true,
             backendId: "openai-http",
             backendClass: "http",
             model: "echo-model",
@@ -626,7 +631,11 @@ var CHECKS = [
     title: "a job whose runner vanished is offered again, losing nothing",
     musts: ["LEASE_RECLAIMABLE", "LEASE_HONORED"],
     async run(target) {
-      const dead = await pairDaemon(target, { owner: "alice", label: "dead" });
+      const dead = await pairDaemon(target, {
+        owner: "alice",
+        label: "dead",
+        offer: "private"
+      });
       const job = await target.enqueue({
         kind: "llm.generate",
         payload: prompt("work"),
@@ -645,7 +654,8 @@ var CHECKS = [
       await advance(target, target.leaseMs + 500);
       const alive = await pairDaemon(target, {
         owner: "alice",
-        label: "alive"
+        label: "alive",
+        offer: "private"
       });
       try {
         const reclaimed = await claimOne(target, alive);
@@ -690,21 +700,15 @@ var CHECKS = [
   },
   {
     id: "C005_AUDIENCE_MATRIX",
-    title: "all nine audience \xD7 offer-scope combinations behave as specified",
+    title: "all four audience x offer-scope combinations behave as specified",
     musts: ["AUDIENCE_BOTH_SIDES", "NAMED_LOCAL_ALLOWLIST"],
     async run(target) {
       const expected = {
         "private:private": false,
         "private:team": false,
-        "private:public": false,
         "team:private": false,
-        "team:team": false,
-        // refused locally — allowlist is empty
-        "team:public": true,
-        "public:private": false,
-        "public:team": false,
-        // refused locally — allowlist is empty
-        "public:public": true
+        "team:team": false
+        // refused locally — nothing admits alice
       };
       for (const audience of AUDIENCES) {
         for (const offer of OFFER_SCOPES) {
@@ -735,7 +739,21 @@ var CHECKS = [
   },
   {
     id: "C006_NAMED_LOCAL_ALLOWLIST",
-    title: "a named job runs only once the daemon's own allowlist admits it",
+    /**
+     * Renamed with the release that made the sentence true — Amendment G, B2.
+     *
+     * The old title read "a named job runs only once the daemon's own
+     * allowlist admits it", which was true only under a generous reading of
+     * "own": the list was per-person and local, and a team member had to be
+     * enrolled on every machine by hand.
+     *
+     * The id does not change, per the id-stability law. What changes is the
+     * sentence, and it now names all three of the things a reader would
+     * otherwise take on faith — that the list is local, that its authority was
+     * established out of band, and that admission is a property of the asker
+     * rather than of the request.
+     */
+    title: "a team job is refused by a device whose upstream cannot say who the asker is, and is not offered to it again",
     musts: ["NAMED_LOCAL_ALLOWLIST", "REFUSAL_NOT_REOFFERED"],
     async run(target) {
       const bob = await pairDaemon(target, { owner: "bob", offer: "team" });
@@ -757,21 +775,6 @@ var CHECKS = [
           !reoffered.some((job) => job.id === refused.id),
           "a server re-offered a job to the runner that refused it"
         );
-        await bob.allowlist.add(
-          { origin: target.origin, owner: await ownerIdFor(target, "alice") },
-          Date.now()
-        );
-        const allowed = await target.enqueue({
-          kind: "llm.generate",
-          payload: prompt("after"),
-          owner: "alice",
-          audience: "team"
-        });
-        await bob.runner.tick();
-        await waitFor(
-          async () => (await target.job(allowed.id))?.state === "ok",
-          { what: "the allowed named job to run" }
-        );
       } finally {
         await bob.dispose();
       }
@@ -784,19 +787,15 @@ var CHECKS = [
     async run(target) {
       const bob = await pairDaemon(target, {
         owner: "bob",
-        offer: "public",
+        offer: "team",
         subscription: true
       });
       try {
-        await bob.allowlist.add(
-          { origin: target.origin, owner: await ownerIdFor(target, "alice") },
-          Date.now()
-        );
         const job = await target.enqueue({
           kind: "llm.generate",
           payload: prompt("someone else's work"),
           owner: "alice",
-          audience: "public"
+          audience: "team"
         });
         await bob.runner.tick();
         await sleep(80);
@@ -834,7 +833,10 @@ var CHECKS = [
     // declared in a spec, absent from the registry, and tested all along.
     musts: ["REVOCATION_HONORED", "REVOCATION_IMMEDIATE"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         await target.revokeRunner(daemon.runnerId);
         const job = await target.enqueue({
@@ -862,7 +864,10 @@ var CHECKS = [
     title: "cancel aborts a running job's backend call",
     musts: ["CANCEL_HONORED"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         daemon.backend.hangMs = 3e4;
         const job = await target.enqueue({
@@ -890,7 +895,10 @@ var CHECKS = [
     title: "the first terminal outcome wins",
     musts: ["RESULT_IDEMPOTENT"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         const job = await target.enqueue({
           kind: "llm.generate",
@@ -931,7 +939,10 @@ var CHECKS = [
           after?.outcome?.text === "the answer that counts",
           `a second result overwrote the first (${String(after?.outcome?.text)})`
         );
-        const stranger = await pairDaemon(target, { owner: "alice" });
+        const stranger = await pairDaemon(target, {
+          owner: "alice",
+          offer: "private"
+        });
         try {
           const foreign = await postResult(target, stranger, {
             jobId: job.id,
@@ -961,8 +972,11 @@ var CHECKS = [
     title: "a dependent job waits for its dependency, across two daemons",
     musts: ["DEPENDS_ON_GATING", "TTL_EXPIRY"],
     async run(target) {
-      const alice = await pairDaemon(target, { owner: "alice" });
-      const bob = await pairDaemon(target, { owner: "bob" });
+      const alice = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
+      const bob = await pairDaemon(target, { owner: "bob", offer: "private" });
       try {
         const first = await target.enqueue({
           kind: "llm.generate",
@@ -1035,7 +1049,10 @@ var CHECKS = [
     title: "a dependent job's TTL starts when it becomes claimable, not at enqueue",
     musts: ["TTL_EXPIRY"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         daemon.backend.hangMs = target.ttlMs * 2;
         const first = await target.enqueue({
@@ -1071,28 +1088,8 @@ var CHECKS = [
     // the granted device is refused rather than recorded.
     musts: ["PROVENANCE_NAMES_DEVICE"],
     async run(target) {
-      const bob = await pairDaemon(target, { owner: "bob", offer: "public" });
+      const bob = await pairDaemon(target, { owner: "bob", offer: "team" });
       try {
-        const community = await target.enqueue({
-          kind: "llm.generate",
-          payload: prompt("run this anywhere"),
-          owner: "alice",
-          audience: "public"
-        });
-        await bob.runner.tick();
-        await waitFor(
-          async () => (await target.job(community.id))?.state === "ok",
-          { what: "the community job to complete" }
-        );
-        const delivered = await target.job(community.id);
-        assert(
-          delivered?.provenance?.untrusted === true,
-          "a public result was not marked untrusted"
-        );
-        assert(
-          delivered.provenance.runnerOwner === "bob",
-          "the result did not carry the runner's owner"
-        );
         const own = await target.enqueue({
           kind: "llm.generate",
           payload: prompt("my own"),
@@ -1117,7 +1114,10 @@ var CHECKS = [
     title: "every executed prompt is in the ingress log before it runs",
     musts: ["INGRESS_LOGGED_BEFORE_EXECUTION"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       let ticking = Promise.resolve();
       try {
         daemon.backend.hangMs = 3e4;
@@ -1192,7 +1192,7 @@ var CHECKS = [
     async run(target) {
       const bob = await pairDaemon(target, {
         owner: "bob",
-        offer: "public",
+        offer: "team",
         // Pointed at localhost — which changes nothing, because a named
         // provider's cost comes from the registry, not from an address
         // ({@link MUSTS.COST_NOT_CONFIGURABLE}).
@@ -1207,15 +1207,11 @@ var CHECKS = [
           bob.loaded.routes.every((route) => route.cost === "metered"),
           "a metered provider was read as free because of its base URL"
         );
-        await bob.allowlist.add(
-          { origin: target.origin, owner: await ownerIdFor(target, "alice") },
-          Date.now()
-        );
         const job = await target.enqueue({
           kind: "llm.generate",
           payload: prompt("spend someone else's money"),
           owner: "alice",
-          audience: "public"
+          audience: "team"
         });
         await bob.runner.tick();
         await sleep(80);
@@ -1231,7 +1227,7 @@ var CHECKS = [
         const availability = await target.runnerAvailability({
           kind: "llm.generate",
           owner: "alice",
-          audience: "public"
+          audience: "team"
         });
         assert(
           !availability.available,
@@ -1259,7 +1255,7 @@ var CHECKS = [
     async run(target) {
       const bob = await pairDaemon(target, {
         owner: "bob",
-        offer: "public",
+        offer: "team",
         metered: {
           // The generic backend pointed at a remote address. No registry entry
           // says what this costs; it is metered because of where it goes
@@ -1276,30 +1272,15 @@ var CHECKS = [
           "a remote backend was treated as free"
         );
         assert(
-          bob.loaded.routes.every((route) => route.offerScope === "public"),
+          bob.loaded.routes.every((route) => route.offerScope === "team"),
           "a deliberately shared metered backend was narrowed anyway"
         );
-        await bob.allowlist.add(
-          { origin: target.origin, owner: await ownerIdFor(target, "alice") },
-          Date.now()
-        );
-        const first = await target.enqueue({
-          kind: "llm.generate",
-          payload: prompt("work bob agreed to pay for"),
-          owner: "alice",
-          audience: "public"
-        });
-        await bob.runner.tick();
-        await waitFor(
-          async () => (await target.job(first.id))?.state === "ok",
-          { what: "a consented metered job to run" }
-        );
         await bob.spend.record("primary", 900, Date.now());
         const second = await target.enqueue({
           kind: "llm.generate",
           payload: prompt("work past the ceiling"),
           owner: "alice",
-          audience: "public"
+          audience: "team"
         });
         const seenBefore = bob.backend.seen.length;
         await bob.runner.tick();
@@ -1333,8 +1314,16 @@ var CHECKS = [
     title: "two runners racing one job \u2014 exactly one gets it",
     musts: ["CLAIM_ATOMIC"],
     async run(target) {
-      const a = await pairDaemon(target, { owner: "alice", label: "laptop" });
-      const b = await pairDaemon(target, { owner: "alice", label: "desktop" });
+      const a = await pairDaemon(target, {
+        owner: "alice",
+        label: "laptop",
+        offer: "private"
+      });
+      const b = await pairDaemon(target, {
+        owner: "alice",
+        label: "desktop",
+        offer: "private"
+      });
       try {
         const job = await target.enqueue({
           kind: "llm.generate",
@@ -1415,7 +1404,10 @@ var CHECKS = [
     title: "a runner advertises only what is installed and healthy",
     musts: ["CAPABILITY_IS_DETECTED"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         daemon.backend.healthy = false;
         const advertised = await daemon.runner.detectCapabilities();
@@ -1453,7 +1445,10 @@ var CHECKS = [
     // check does not establish.
     musts: ["KIND_NO_CODE"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       const SMUGGLED = ["command", "argv", "model", "baseUrl"];
       try {
         let refused = false;
@@ -1638,7 +1633,10 @@ var CHECKS = [
     title: "authentication is a signature over the request, not a secret",
     musts: ["REQUESTS_SIGNED_NOT_BEARER"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         const body = JSON.stringify({
           protocolVersion: PROTOCOL_VERSION2,
@@ -1710,7 +1708,10 @@ var CHECKS = [
     title: "a release acts on the lease it names, not whatever lease exists",
     musts: ["LEASE_SCOPED_BY_GRANT"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         const job = await target.enqueue({
           kind: "llm.generate",
@@ -1750,7 +1751,10 @@ var CHECKS = [
     title: "a claim carries routing metadata and no work",
     musts: ["STUB_METADATA_EXHAUSTIVE"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         await target.enqueue({
           kind: "llm.generate",
@@ -1815,7 +1819,10 @@ var CHECKS = [
     musts: ["ENVELOPE_SEALED_AND_SIGNED"],
     async run(target) {
       const secret = "a prompt nobody should read from storage";
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         const job = await target.enqueue({
           kind: "llm.generate",
@@ -1854,7 +1861,10 @@ var CHECKS = [
     title: "a daemon refuses work not signed by the site it pinned",
     musts: ["ENVELOPE_SEALED_AND_SIGNED"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         const keys = await daemon.identityKeys();
         const relay = generateKeys(Date.now());
@@ -1905,7 +1915,10 @@ var CHECKS = [
     // is not proving possession, and a forger writes whatever it likes.
     musts: ["ENVELOPE_SEALED_AND_SIGNED", "PROVENANCE_NAMES_DEVICE"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         const job = await target.enqueue({
           kind: "llm.generate",
@@ -1964,7 +1977,7 @@ var CHECKS = [
     title: "a claim is not answered with work the claimer may not run",
     musts: ["AUDIENCE_BOTH_SIDES"],
     async run(target) {
-      const bob = await pairDaemon(target, { owner: "bob", offer: "public" });
+      const bob = await pairDaemon(target, { owner: "bob", offer: "team" });
       try {
         const priv = await target.enqueue({
           kind: "llm.generate",
@@ -1981,7 +1994,7 @@ var CHECKS = [
           kind: "llm.generate",
           payload: prompt("anyone may run this"),
           owner: "alice",
-          audience: "public"
+          audience: "team"
         });
         const second = await claimRaw(target, bob);
         assert(
@@ -1998,7 +2011,10 @@ var CHECKS = [
     title: "a claimed stub carries no list of who may run the job",
     musts: ["ROSTER_NOT_DISCLOSED"],
     async run(target) {
-      const daemon = await pairDaemon(target, { owner: "alice" });
+      const daemon = await pairDaemon(target, {
+        owner: "alice",
+        offer: "private"
+      });
       try {
         const job = await target.enqueue({
           kind: "llm.generate",
@@ -2150,4 +2166,4 @@ export {
   miscoveredMusts,
   formatReport
 };
-//# sourceMappingURL=chunk-FCX5R4LZ.js.map
+//# sourceMappingURL=chunk-3N7FYXDP.js.map