@byollm/relay 0.1.0-alpha.26 → 0.1.0-alpha.27

package/README.md

@@ -1,5 +1,5 @@
 > [!WARNING]
-> **Alpha (`0.1.0-alpha.26`) — under active development. Don't use this yet.**
+> **Alpha (`0.1.0-alpha.27`) — under active development. Don't use this yet.**
 >
 > This is a walking skeleton. It routes real jobs between real daemons and real
 > sites, and it is the fixture byollm_009 freezes against — but it keeps its
@@ -72,7 +72,7 @@
 > packages published and `@byollm/server` did not: a Sigstore
 > transparency-log 409 on its provenance attestation. The workflow's
 > "already published" guard correctly refuses to resume a partial publish,
-> so `0.1.0-alpha.26` is that release, whole.
+> so `0.1.0-alpha.27` is that release, whole.
 >
 > If you run the Supabase adapter, `alpha.21` needs
 > `20260819010000_completed_by_lease_id.sql`: alpha.19 shipped §3.6's
@@ -153,7 +153,7 @@ daemons pin at pairing, verified against the `sites` half of the projection.
 Nothing here trusts a `siteId` in a body or a query string.
 
 That is newer than the rest of this package. The site plane took the caller's
-word for who it was until `0.1.0-alpha.26`, which on a relay reachable from the
+word for who it was until `0.1.0-alpha.27`, which on a relay reachable from the
 internet is an open enqueue endpoint into consenting users' machines and an
 open read of who is online. It was blind the whole time — nothing could open a
 payload — and blind is not the same as safe.
@@ -161,7 +161,7 @@ payload — and blind is not the same as safe.
 If you are running this: the site plane is authenticated but this is still a
 single-tenant relay with in-memory state. One site, one replica.
 
-## Breaking in `0.1.0-alpha.26`: `RelayState` is async
+## Breaking in `0.1.0-alpha.27`: `RelayState` is async
 
 Every method on `RelayState` now returns a `Promise`, and `Relay.sweep()` and
 `debugPage()` with it. `RelayState.requeue` is private — it was only ever a

package/dist/store-contract.js

@@ -105,6 +105,30 @@ function describeStoreContract(name, options) {
       ).toEqual({ envelope: ENVELOPE });
       await done();
     });
+    it("will not answer for one job with another job's lease", async () => {
+      const { store, done } = await make();
+      await store.enqueue({ id: "mine", siteId: SITE, stub: stub("mine") });
+      await store.enqueue({ id: "other", siteId: SITE, stub: stub("other") });
+      const granted = await store.claim(claimArgs());
+      const mine = granted.find((job) => job.id === "mine");
+      const other = granted.find((job) => job.id === "other");
+      await store.seal({ jobId: "other", siteId: SITE, envelope: ENVELOPE });
+      expect(
+        await store.takePayload({
+          jobId: "other",
+          runnerId: "runner_1",
+          leaseId: mine.lease.id
+        })
+      ).toEqual({ refused: "stale-lease" });
+      expect(
+        await store.takePayload({
+          jobId: "other",
+          runnerId: "runner_1",
+          leaseId: other.lease.id
+        })
+      ).toEqual({ envelope: ENVELOPE });
+      await done();
+    });
     it("renews a grant it still holds, and extends the sweep with it", async () => {
       const { store, done } = await make();
       await store.enqueue({ id: "a", siteId: SITE, stub: stub("a") });

package/dist/store-contract.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/store-contract.ts"],"sourcesContent":["import { generateKeys, publicIdentityOf, type JobStub } from \"@byollm/protocol\";\nimport { describe, expect, it } from \"vitest\";\nimport { routeKey } from \"./state.js\";\nimport type { RoutingStore } from \"./store.js\";\n\n/**\n * The routing store's behaviour, written once and run against every\n * implementation — cloud_008 finding 54.\n *\n * There were two copies. This package tested `RelayState`; `byollm-cloud`\n * tested `ValkeyRoutingStore` with a file that opened by explaining it was\n * \"written once and parameterised… a second copy of the scenario is a second\n * place for two implementations to quietly diverge\" — and was itself the\n * second copy. It had drifted to sixteen cases against the eighteen in the\n * ledger, which is exactly the divergence the sentence predicted, happening\n * to the sentence.\n *\n * So the contract lives here, in the package that declares `RoutingStore`,\n * and both repositories import it. A store that cannot pass this is not a\n * routing store, whatever it implements.\n *\n * ## Why this ships in the published package\n *\n * Because the implementation that matters most is in another repository. A\n * contract only the author can run is a description; one a third party runs\n * against their own implementation is a contract. `@byollm/relay/store-contract`\n * is a subpath export so nothing that imports the relay itself pulls in a\n * test framework.\n *\n * ## What this cannot prove\n *\n * `CLAIM_ATOMIC` is a MUST and every case here would pass against a store\n * that read, decided and wrote in three steps — in one process there is\n * nothing to interleave. Concurrency belongs with the implementation that\n * has a network in it, and `byollm-cloud`'s suite runs it against Valkey with\n * many connections. Named here so the omission is a decision rather than an\n * oversight.\n */\n\n/** The control-plane site id these cases route under. */\nexport const CONTRACT_SITE = \"site_store\";\n\n/** A site's identity key id — byollm_009 Amendment A §A.3. */\nconst SITE_KEY_ID = \"BYOLLM-TEST-SITE-KEY-ID\";\n\nconst SITE = CONTRACT_SITE;\n\nconst stub = (id: string, owner = \"alice\"): JobStub => ({\n  id,\n  kind: \"llm.generate\",\n  owner,\n  site: SITE_KEY_ID,\n  audience: \"self\",\n  sizeClass: \"small\",\n  streaming: false,\n  deadlineAt: 4_102_444_800_000,\n});\n\nconst ENVELOPE = {\n  ciphertext: \"AAAA\",\n  recipientKeyId: \"r\",\n  senderKeyId: \"s\",\n  direction: \"payload\" as const,\n  deadlineAt: 4_102_444_800_000,\n};\n\n/**\n * A claim, with its routes written out — cloud_009 §3.\n *\n * `routes` replaced `siteId` + `owners`, and the cases that pass `owners`\n * below now pass the pairs those owners are reachable through. That rewrite\n * is the contract's own statement of the rule: there is no way to express\n * \"this owner, any site\" here, because that is not a thing consent says.\n */\nconst claimArgs = (\n  over: { owners?: string[]; sites?: string[] } & Record<string, unknown> = {},\n) => {\n  const { owners = [\"alice\"], sites = [SITE], ...rest } = over;\n  return {\n    runnerId: \"runner_1\",\n    owner: \"alice\",\n    device: publicIdentityOf(generateKeys(Date.now())),\n    kinds: new Set([\"llm.generate\"]),\n    routes: new Set(\n      sites.flatMap((site) => owners.map((owner) => routeKey(site, owner))),\n    ),\n    max: 10,\n    leaseMs: 60_000,\n    ...rest,\n  };\n};\n\nexport interface StoreContractOptions {\n  /**\n   * A fresh, empty store, and how to dispose of it.\n   *\n   * Arrow-typed rather than a method, because the caller passes these\n   * around: a method signature lets `this` travel with the call, and a\n   * factory read off an options object is exactly where that goes wrong.\n   */\n  readonly make: () => Promise<{\n    store: RoutingStore;\n    done: () => Promise<void>;\n  }>;\n  /**\n   * Whether this store writes stubs as bytes and reads them back.\n   *\n   * An in-process store holds typed objects and cannot hold a stub it cannot\n   * parse; a serialising one can, because what it wrote may have been written\n   * by a previous version. The case that covers it is skipped rather than\n   * hidden — a reader should know which half of this contract each store is\n   * proving (cloud_008 §2.1a).\n   */\n  readonly serialising?: boolean;\n  /** Write a stub's raw bytes, bypassing serialisation. */\n  readonly writeRawStub?: (\n    store: RoutingStore,\n    id: string,\n    raw: string,\n  ) => Promise<void>;\n}\n\n/** Run the contract. Call inside a suite; it declares its own `describe`. */\nexport function describeStoreContract(\n  name: string,\n  options: StoreContractOptions,\n): void {\n  const { make, serialising, writeRawStub } = options;\n  describe(`the routing store — ${name}`, () => {\n    it(\"is idempotent by job id\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      await store.claim(claimArgs());\n      // A republish must not disturb work in flight — byollm_009 §4.2's replay\n      // argument rests on it.\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      expect((await store.job(SITE, \"a\"))?.state).toBe(\"awaiting-payload\");\n      await done();\n    });\n\n    it(\"gives two sites the same id without either seeing the other\", async () => {\n      // cloud_009 §3. Keyed by the bare id, the second site's enqueue returned\n      // the *first* site's job (cloud_008 finding 58), and the refusal that\n      // fixed it was a cross-tenant existence oracle: a site knows its own stub\n      // is well-formed, so any answer it can tell apart from success confirms\n      // somebody else holds that id. Keyed by (site, id), the collision does\n      // not exist and there is nothing to answer.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"shared\", siteId: SITE, stub: stub(\"shared\") });\n      await store.enqueue({\n        id: \"shared\",\n        siteId: \"site_other\",\n        stub: stub(\"shared\", \"bob\"),\n      });\n\n      // Two jobs, each its own site's.\n      expect((await store.job(SITE, \"shared\"))?.stub.owner).toBe(\"alice\");\n      expect((await store.job(\"site_other\", \"shared\"))?.stub.owner).toBe(\"bob\");\n\n      // And a claim for one site does not see the other's, which is the\n      // property the key exists for rather than a restatement of it.\n      const granted = await store.claim(claimArgs());\n      expect(granted.map((job) => job.id)).toEqual([\"shared\"]);\n      expect(granted[0]?.owner).toBe(\"alice\");\n\n      // The same site republishing is still absorbed — byollm_009 §4.2's\n      // replay argument, which is what idempotence is for.\n      const replay = await store.enqueue({\n        id: \"shared\",\n        siteId: SITE,\n        stub: stub(\"shared\"),\n      });\n      expect(replay).toEqual(await store.job(SITE, \"shared\"));\n      await done();\n    });\n\n    it(\"grants only what the owners set allows\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"mine\", siteId: SITE, stub: stub(\"mine\") });\n      await store.enqueue({\n        id: \"theirs\",\n        siteId: SITE,\n        stub: stub(\"theirs\", \"mallory\"),\n      });\n      const granted = await store.claim(claimArgs());\n      expect(granted.map((job) => job.id)).toEqual([\"mine\"]);\n      await done();\n    });\n\n    it(\"refuses a stale lease and honours the current one\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs());\n      await store.seal({ jobId: \"a\", siteId: SITE, envelope: ENVELOPE });\n\n      expect(\n        await store.takePayload({\n          jobId: \"a\",\n          runnerId: \"runner_1\",\n          leaseId: \"an-older-grant\",\n        }),\n      ).toEqual({ refused: \"stale-lease\" });\n\n      expect(\n        await store.takePayload({\n          jobId: \"a\",\n          runnerId: \"runner_1\",\n          leaseId: granted!.lease.id,\n        }),\n      ).toEqual({ envelope: ENVELOPE });\n      await done();\n    });\n\n    it(\"renews a grant it still holds, and extends the sweep with it\", async () => {\n      // cloud_008 §0.6, at the contract level: renewal has to be one operation,\n      // because between a read and a write another replica can sweep the lease\n      // — and the renewal would then resurrect a grant on a job already back in\n      // the queue. In Valkey that is a script; in memory it is a method; the\n      // guarantee is the same one, so it is tested here rather than twice.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs({ leaseMs: 1_000 }));\n\n      const renewed = await store.renewLeases({\n        runnerId: \"runner_1\",\n        leases: [{ jobId: \"a\", leaseId: granted!.lease.id }],\n        leaseMs: 60_000,\n      });\n\n      expect(renewed.lost).toEqual([]);\n      expect(renewed.renewed.map((r) => r.jobId)).toEqual([\"a\"]);\n      // The store's own clock did the arithmetic — the caller passed a duration,\n      // never an instant, which is what keeps two replicas from measuring one\n      // lease against two clocks (cloud_006 §3.4).\n      expect(renewed.renewed[0]!.expiresAt).toBeGreaterThan(\n        granted!.lease.expiresAt,\n      );\n\n      // And it is the *stored* grant that moved, not just the number returned.\n      // Reporting a renewal without performing one is the mutation that\n      // survived the first version of the relay's own test for this.\n      expect((await store.job(SITE, \"a\"))?.claimedBy?.leaseExpiresAt).toBe(\n        renewed.renewed[0]!.expiresAt,\n      );\n      await done();\n    });\n\n    it(\"reports a lease the runner no longer holds as lost, and renews nothing\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs({ leaseMs: 1_000 }));\n      const before = (await store.job(SITE, \"a\"))?.claimedBy?.leaseExpiresAt;\n\n      const renewed = await store.renewLeases({\n        runnerId: \"runner_1\",\n        leases: [{ jobId: \"a\", leaseId: \"a-grant-that-ended\" }],\n        leaseMs: 60_000,\n      });\n\n      expect(renewed.renewed).toEqual([]);\n      expect(renewed.lost).toEqual([\"a\"]);\n      // A refusal must not advance anything — the current holder's grant is\n      // untouched by somebody else's stale renewal.\n      expect((await store.job(SITE, \"a\"))?.claimedBy?.leaseExpiresAt).toBe(\n        before,\n      );\n      expect((await store.job(SITE, \"a\"))?.claimedBy?.leaseId).toBe(\n        granted!.lease.id,\n      );\n      await done();\n    });\n\n    it(\"does not hand out a stub it cannot parse\", async () => {\n      // cloud_008 §2.1a, and the case is not hypothetical: two jobs enqueued\n      // before alpha.15 had no `site`, came back in a claim, and the daemon's\n      // `.strict()` parse rejected the whole response. Two dead rows denied\n      // claims to every device on the hub, and the queue could not drain past\n      // them.\n      //\n      // The store had `JSON.parse(stub) as JobStub` — trusting what it wrote,\n      // when what it wrote was written by a previous version. A routing store\n      // outlives the deployment that filled it, so a wire change to `JobStub`\n      // is a data migration whether or not anyone plans one.\n      //\n      // Only meaningful against a store that serialises: `RelayState` holds\n      // typed objects and cannot reach this state, so it passes by\n      // construction — which is worth saying rather than hiding, because a\n      // reader should know which half of this contract each store is proving.\n      const { store, done } = await make();\n      if (!serialising || writeRawStub === undefined) {\n        await done();\n        return;\n      }\n\n      await store.enqueue({ id: \"good\", siteId: SITE, stub: stub(\"good\") });\n      await store.enqueue({ id: \"old\", siteId: SITE, stub: stub(\"old\") });\n      // Exactly what alpha.14 wrote: a stub with no `site`.\n      const legacy = { ...stub(\"old\") } as Record<string, unknown>;\n      delete legacy[\"site\"];\n      await writeRawStub(store, \"old\", JSON.stringify(legacy));\n\n      const granted = await store.claim(claimArgs({ max: 10 }));\n\n      // The good one is still handed out — \"return nothing\" would pass a test\n      // that only checked the bad one was absent, and would stop all routing.\n      expect(granted.map((job) => job.id)).toEqual([\"good\"]);\n      // And the bad one is back in the queue rather than stuck holding a lease\n      // nobody received.\n      expect((await store.job(SITE, \"old\"))?.state).toBe(\"queued\");\n      await done();\n    });\n\n    it(\"honours a self job's audience\", async () => {\n      // cloud_008 §2.1 at the contract level. The owners set is everyone this\n      // device may run for, which for a Team owner's machine is the whole\n      // roster — right for public and named, wrong for the one audience a user\n      // picks because they want their own machine.\n      const { store, done } = await make();\n      await store.enqueue({\n        id: \"private\",\n        siteId: SITE,\n        stub: { ...stub(\"private\", \"alice\"), audience: \"self\" },\n      });\n\n      // A roster owner's machine: may run alice's work in general.\n      const granted = await store.claim(\n        claimArgs({ owner: \"owner\", owners: [\"owner\", \"alice\"] }),\n      );\n\n      expect(granted).toEqual([]);\n      expect((await store.job(SITE, \"private\"))?.state).toBe(\"queued\");\n      await done();\n    });\n\n    it(\"still offers that job to its owner's own machine\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({\n        id: \"private\",\n        siteId: SITE,\n        stub: { ...stub(\"private\", \"alice\"), audience: \"self\" },\n      });\n      const granted = await store.claim(\n        claimArgs({ owner: \"alice\", owners: [\"alice\"] }),\n      );\n      expect(granted.map((job) => job.id)).toEqual([\"private\"]);\n      await done();\n    });\n\n    it(\"does not offer a job back to the runner that refused it\", async () => {\n      // `REFUSAL_NOT_REOFFERED`. `releaseLeases` gained an **optional** reason,\n      // which means a store can ignore it and still typecheck — this class has\n      // now diverged from the interface that way twice, so the contract is the\n      // only thing that catches it.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs());\n\n      await store.releaseLeases({\n        runnerId: \"runner_1\",\n        leases: [{ jobId: \"a\", leaseId: granted!.lease.id }],\n        reason: \"refused\",\n      });\n\n      expect(await store.claim(claimArgs())).toEqual([]);\n      expect((await store.job(SITE, \"a\"))?.state).toBe(\"queued\");\n      // And somebody else may still run it.\n      expect(\n        (await store.claim(claimArgs({ runnerId: \"runner_2\" }))).map(\n          (j) => j.id,\n        ),\n      ).toEqual([\"a\"]);\n      await done();\n    });\n\n    it(\"keeps a job claimable by a runner that only went away\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs());\n\n      await store.releaseLeases({\n        runnerId: \"runner_1\",\n        leases: [{ jobId: \"a\", leaseId: granted!.lease.id }],\n        reason: \"shutdown\",\n      });\n\n      expect((await store.claim(claimArgs())).map((j) => j.id)).toEqual([\"a\"]);\n      await done();\n    });\n\n    it(\"stops offering a job past its deadline, and drops the ciphertext\", async () => {\n      // cloud_008 §2.2. `deadlineAt` travelled on every stub and nothing read\n      // it, so expired jobs were offered forever and their sealed payloads kept\n      // for as long as the store lived.\n      const { store, done } = await make();\n      await store.enqueue({\n        id: \"late\",\n        siteId: SITE,\n        stub: { ...stub(\"late\"), deadlineAt: Date.now() - 1_000 },\n      });\n\n      expect(await store.claim(claimArgs())).toEqual([]);\n      expect(await store.job(SITE, \"late\")).toBeUndefined();\n      await done();\n    });\n\n    it(\"names a cancelled job to the device holding it, and offers it to nobody\", async () => {\n      // cloud_008 §2.2.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      await store.claim(claimArgs());\n\n      expect(await store.cancel({ jobId: \"a\", siteId: SITE })).toBe(true);\n      expect(await store.cancelRequests(\"runner_1\")).toEqual([\"a\"]);\n\n      // Scoped to the caller's site: a site must not reach another's work by\n      // guessing an id.\n      expect(await store.cancel({ jobId: \"a\", siteId: \"someone_else\" })).toBe(\n        false,\n      );\n      await done();\n    });\n\n    it(\"records a result once\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs());\n\n      const first = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_1\",\n        leaseId: granted!.lease.id,\n        envelope: ENVELOPE,\n        disposition: \"ok\",\n      });\n      const replay = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_1\",\n        leaseId: granted!.lease.id,\n        envelope: { ...ENVELOPE, ciphertext: \"different\" },\n        disposition: \"error\",\n      });\n\n      expect(first).toEqual({ accepted: true, state: \"done\" });\n      // `duplicate` — cloud_008 §3.6. Case 18 above is the one that says why.\n      expect(replay).toEqual({\n        accepted: false,\n        duplicate: true,\n        state: \"done\",\n      });\n      // The property, not the boolean: the second result did not overwrite.\n      expect((await store.job(SITE, \"a\"))?.disposition).toBe(\"ok\");\n      await done();\n    });\n\n    it(\"answers the device that finished it with `duplicate`\", async () => {\n      // Contract case 18 — cloud_008 §3.6, and the eighteenth exists because\n      // the compiler cannot see any of this: the return type's `duplicate` is\n      // optional, so a store that never sets it typechecks perfectly while\n      // enforcing `RESULT_IDEMPOTENT` by accident or not at all.\n      //\n      // A daemon whose acknowledgment was lost hears that its answer is already\n      // recorded, rather than that its lease is stale — the second message\n      // invents a worry about a result safely on disk.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs());\n\n      const first = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_1\",\n        leaseId: granted!.lease.id,\n        envelope: ENVELOPE,\n        disposition: \"ok\",\n      });\n      expect(first).toEqual({ accepted: true, state: \"done\" });\n\n      const replay = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_1\",\n        leaseId: granted!.lease.id,\n        envelope: { ...ENVELOPE, ciphertext: \"a-different-result\" },\n        disposition: \"error\",\n      });\n      expect(replay).toEqual({\n        accepted: false,\n        duplicate: true,\n        state: \"done\",\n      });\n\n      // A *different* device, on a job that is terminal, gets the refusal it\n      // would get for one that is not — otherwise the two answers differ and a\n      // job id becomes a terminality probe.\n      const stranger = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_2\",\n        leaseId: granted!.lease.id,\n        envelope: ENVELOPE,\n        disposition: \"ok\",\n      });\n      expect(stranger).toEqual({ refused: \"not-holder\" });\n\n      // And the first answer is what survived, which is the property rather\n      // than any of the booleans above.\n      expect((await store.job(SITE, \"a\"))?.disposition).toBe(\"ok\");\n      await done();\n    });\n\n    it(\"refuses a result produced under a grant that ended\", async () => {\n      // cloud_008 §1.4a at the contract level, and it belongs here more than\n      // anywhere: `RoutingStore.complete` gained `leaseId` and this class kept\n      // typechecking without it, because a parameter object with fewer\n      // properties is assignable to one with more. The relay would have\n      // enforced LEASE_HONORED on the memory store and not on the store that\n      // runs in production, with nothing red on the way.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      await store.claim(claimArgs());\n\n      const late = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_1\",\n        leaseId: \"a-grant-that-ended\",\n        envelope: ENVELOPE,\n        disposition: \"ok\",\n      });\n\n      expect(late).toEqual({ refused: \"stale-lease\" });\n      // Untouched: the current holder can still finish it.\n      expect((await store.job(SITE, \"a\"))?.state).toBe(\"awaiting-payload\");\n      expect((await store.job(SITE, \"a\"))?.result).toBeUndefined();\n      await done();\n    });\n\n    it(\"stamps deadlines from its own clock\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const before = await store.now();\n      const [granted] = await store.claim(claimArgs({ leaseMs: 45_000 }));\n      const after = await store.now();\n\n      // Bracketed rather than exact: a real store's clock moves between the two\n      // reads, which is the whole reason it is the store's clock and not ours.\n      expect(granted!.lease.expiresAt).toBeGreaterThanOrEqual(before + 45_000);\n      expect(granted!.lease.expiresAt).toBeLessThanOrEqual(after + 45_000);\n      await done();\n    });\n  });\n}\n"],"mappings":";;;;;AAAA,SAAS,cAAc,wBAAsC;AAC7D,SAAS,UAAU,QAAQ,UAAU;AAuC9B,IAAM,gBAAgB;AAG7B,IAAM,cAAc;AAEpB,IAAM,OAAO;AAEb,IAAM,OAAO,CAAC,IAAY,QAAQ,aAAsB;AAAA,EACtD;AAAA,EACA,MAAM;AAAA,EACN;AAAA,EACA,MAAM;AAAA,EACN,UAAU;AAAA,EACV,WAAW;AAAA,EACX,WAAW;AAAA,EACX,YAAY;AACd;AAEA,IAAM,WAAW;AAAA,EACf,YAAY;AAAA,EACZ,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,WAAW;AAAA,EACX,YAAY;AACd;AAUA,IAAM,YAAY,CAChB,OAA0E,CAAC,MACxE;AACH,QAAM,EAAE,SAAS,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,GAAG,GAAG,KAAK,IAAI;AACxD,SAAO;AAAA,IACL,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ,iBAAiB,aAAa,KAAK,IAAI,CAAC,CAAC;AAAA,IACjD,OAAO,oBAAI,IAAI,CAAC,cAAc,CAAC;AAAA,IAC/B,QAAQ,IAAI;AAAA,MACV,MAAM,QAAQ,CAAC,SAAS,OAAO,IAAI,CAAC,UAAU,SAAS,MAAM,KAAK,CAAC,CAAC;AAAA,IACtE;AAAA,IACA,KAAK;AAAA,IACL,SAAS;AAAA,IACT,GAAG;AAAA,EACL;AACF;AAiCO,SAAS,sBACd,MACA,SACM;AACN,QAAM,EAAE,MAAM,aAAa,aAAa,IAAI;AAC5C,WAAS,4BAAuB,IAAI,IAAI,MAAM;AAC5C,OAAG,2BAA2B,YAAY;AACxC,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,MAAM,MAAM,UAAU,CAAC;AAG7B,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,KAAK,EAAE,KAAK,kBAAkB;AACnE,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,+DAA+D,YAAY;AAO5E,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,UAAU,QAAQ,MAAM,MAAM,KAAK,QAAQ,EAAE,CAAC;AACxE,YAAM,MAAM,QAAQ;AAAA,QAClB,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,KAAK;AAAA,MAC5B,CAAC;AAGD,cAAQ,MAAM,MAAM,IAAI,MAAM,QAAQ,IAAI,KAAK,KAAK,EAAE,KAAK,OAAO;AAClE,cAAQ,MAAM,MAAM,IAAI,cAAc,QAAQ,IAAI,KAAK,KAAK,EAAE,KAAK,KAAK;AAIxE,YAAM,UAAU,MAAM,MAAM,MAAM,UAAU,CAAC;AAC7C,aAAO,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;AACvD,aAAO,QAAQ,CAAC,GAAG,KAAK,EAAE,KAAK,OAAO;AAItC,YAAM,SAAS,MAAM,MAAM,QAAQ;AAAA,QACjC,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK,QAAQ;AAAA,MACrB,CAAC;AACD,aAAO,MAAM,EAAE,QAAQ,MAAM,MAAM,IAAI,MAAM,QAAQ,CAAC;AACtD,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,0CAA0C,YAAY;AACvD,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,QAAQ,QAAQ,MAAM,MAAM,KAAK,MAAM,EAAE,CAAC;AACpE,YAAM,MAAM,QAAQ;AAAA,QAClB,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,SAAS;AAAA,MAChC,CAAC;AACD,YAAM,UAAU,MAAM,MAAM,MAAM,UAAU,CAAC;AAC7C,aAAO,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;AACrD,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,qDAAqD,YAAY;AAClE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,CAAC;AAC/C,YAAM,MAAM,KAAK,EAAE,OAAO,KAAK,QAAQ,MAAM,UAAU,SAAS,CAAC;AAEjE;AAAA,QACE,MAAM,MAAM,YAAY;AAAA,UACtB,OAAO;AAAA,UACP,UAAU;AAAA,UACV,SAAS;AAAA,QACX,CAAC;AAAA,MACH,EAAE,QAAQ,EAAE,SAAS,cAAc,CAAC;AAEpC;AAAA,QACE,MAAM,MAAM,YAAY;AAAA,UACtB,OAAO;AAAA,UACP,UAAU;AAAA,UACV,SAAS,QAAS,MAAM;AAAA,QAC1B,CAAC;AAAA,MACH,EAAE,QAAQ,EAAE,UAAU,SAAS,CAAC;AAChC,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,gEAAgE,YAAY;AAM7E,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,EAAE,SAAS,IAAM,CAAC,CAAC;AAEjE,YAAM,UAAU,MAAM,MAAM,YAAY;AAAA,QACtC,UAAU;AAAA,QACV,QAAQ,CAAC,EAAE,OAAO,KAAK,SAAS,QAAS,MAAM,GAAG,CAAC;AAAA,QACnD,SAAS;AAAA,MACX,CAAC;AAED,aAAO,QAAQ,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC/B,aAAO,QAAQ,QAAQ,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC;AAIzD,aAAO,QAAQ,QAAQ,CAAC,EAAG,SAAS,EAAE;AAAA,QACpC,QAAS,MAAM;AAAA,MACjB;AAKA,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW,cAAc,EAAE;AAAA,QAC9D,QAAQ,QAAQ,CAAC,EAAG;AAAA,MACtB;AACA,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,0EAA0E,YAAY;AACvF,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,EAAE,SAAS,IAAM,CAAC,CAAC;AACjE,YAAM,UAAU,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW;AAExD,YAAM,UAAU,MAAM,MAAM,YAAY;AAAA,QACtC,UAAU;AAAA,QACV,QAAQ,CAAC,EAAE,OAAO,KAAK,SAAS,qBAAqB,CAAC;AAAA,QACtD,SAAS;AAAA,MACX,CAAC;AAED,aAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC;AAClC,aAAO,QAAQ,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC;AAGlC,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW,cAAc,EAAE;AAAA,QAC9D;AAAA,MACF;AACA,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW,OAAO,EAAE;AAAA,QACvD,QAAS,MAAM;AAAA,MACjB;AACA,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,4CAA4C,YAAY;AAgBzD,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,UAAI,CAAC,eAAe,iBAAiB,QAAW;AAC9C,cAAM,KAAK;AACX;AAAA,MACF;AAEA,YAAM,MAAM,QAAQ,EAAE,IAAI,QAAQ,QAAQ,MAAM,MAAM,KAAK,MAAM,EAAE,CAAC;AACpE,YAAM,MAAM,QAAQ,EAAE,IAAI,OAAO,QAAQ,MAAM,MAAM,KAAK,KAAK,EAAE,CAAC;AAElE,YAAM,SAAS,EAAE,GAAG,KAAK,KAAK,EAAE;AAChC,aAAO,OAAO,MAAM;AACpB,YAAM,aAAa,OAAO,OAAO,KAAK,UAAU,MAAM,CAAC;AAEvD,YAAM,UAAU,MAAM,MAAM,MAAM,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC;AAIxD,aAAO,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;AAGrD,cAAQ,MAAM,MAAM,IAAI,MAAM,KAAK,IAAI,KAAK,EAAE,KAAK,QAAQ;AAC3D,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,iCAAiC,YAAY;AAK9C,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ;AAAA,QAClB,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,EAAE,GAAG,KAAK,WAAW,OAAO,GAAG,UAAU,OAAO;AAAA,MACxD,CAAC;AAGD,YAAM,UAAU,MAAM,MAAM;AAAA,QAC1B,UAAU,EAAE,OAAO,SAAS,QAAQ,CAAC,SAAS,OAAO,EAAE,CAAC;AAAA,MAC1D;AAEA,aAAO,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC1B,cAAQ,MAAM,MAAM,IAAI,MAAM,SAAS,IAAI,KAAK,EAAE,KAAK,QAAQ;AAC/D,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,oDAAoD,YAAY;AACjE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ;AAAA,QAClB,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,EAAE,GAAG,KAAK,WAAW,OAAO,GAAG,UAAU,OAAO;AAAA,MACxD,CAAC;AACD,YAAM,UAAU,MAAM,MAAM;AAAA,QAC1B,UAAU,EAAE,OAAO,SAAS,QAAQ,CAAC,OAAO,EAAE,CAAC;AAAA,MACjD;AACA,aAAO,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC;AACxD,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,2DAA2D,YAAY;AAKxE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,CAAC;AAE/C,YAAM,MAAM,cAAc;AAAA,QACxB,UAAU;AAAA,QACV,QAAQ,CAAC,EAAE,OAAO,KAAK,SAAS,QAAS,MAAM,GAAG,CAAC;AAAA,QACnD,QAAQ;AAAA,MACV,CAAC;AAED,aAAO,MAAM,MAAM,MAAM,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AACjD,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,KAAK,EAAE,KAAK,QAAQ;AAEzD;AAAA,SACG,MAAM,MAAM,MAAM,UAAU,EAAE,UAAU,WAAW,CAAC,CAAC,GAAG;AAAA,UACvD,CAAC,MAAM,EAAE;AAAA,QACX;AAAA,MACF,EAAE,QAAQ,CAAC,GAAG,CAAC;AACf,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,yDAAyD,YAAY;AACtE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,CAAC;AAE/C,YAAM,MAAM,cAAc;AAAA,QACxB,UAAU;AAAA,QACV,QAAQ,CAAC,EAAE,OAAO,KAAK,SAAS,QAAS,MAAM,GAAG,CAAC;AAAA,QACnD,QAAQ;AAAA,MACV,CAAC;AAED,cAAQ,MAAM,MAAM,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC;AACvE,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,oEAAoE,YAAY;AAIjF,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ;AAAA,QAClB,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,EAAE,GAAG,KAAK,MAAM,GAAG,YAAY,KAAK,IAAI,IAAI,IAAM;AAAA,MAC1D,CAAC;AAED,aAAO,MAAM,MAAM,MAAM,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AACjD,aAAO,MAAM,MAAM,IAAI,MAAM,MAAM,CAAC,EAAE,cAAc;AACpD,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,2EAA2E,YAAY;AAExF,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,MAAM,MAAM,UAAU,CAAC;AAE7B,aAAO,MAAM,MAAM,OAAO,EAAE,OAAO,KAAK,QAAQ,KAAK,CAAC,CAAC,EAAE,KAAK,IAAI;AAClE,aAAO,MAAM,MAAM,eAAe,UAAU,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC;AAI5D,aAAO,MAAM,MAAM,OAAO,EAAE,OAAO,KAAK,QAAQ,eAAe,CAAC,CAAC,EAAE;AAAA,QACjE;AAAA,MACF;AACA,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,yBAAyB,YAAY;AACtC,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,CAAC;AAE/C,YAAM,QAAQ,MAAM,MAAM,SAAS;AAAA,QACjC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS,QAAS,MAAM;AAAA,QACxB,UAAU;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AACD,YAAM,SAAS,MAAM,MAAM,SAAS;AAAA,QAClC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS,QAAS,MAAM;AAAA,QACxB,UAAU,EAAE,GAAG,UAAU,YAAY,YAAY;AAAA,QACjD,aAAa;AAAA,MACf,CAAC;AAED,aAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,MAAM,OAAO,OAAO,CAAC;AAEvD,aAAO,MAAM,EAAE,QAAQ;AAAA,QACrB,UAAU;AAAA,QACV,WAAW;AAAA,QACX,OAAO;AAAA,MACT,CAAC;AAED,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW,EAAE,KAAK,IAAI;AAC3D,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,wDAAwD,YAAY;AASrE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,CAAC;AAE/C,YAAM,QAAQ,MAAM,MAAM,SAAS;AAAA,QACjC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS,QAAS,MAAM;AAAA,QACxB,UAAU;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AACD,aAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,MAAM,OAAO,OAAO,CAAC;AAEvD,YAAM,SAAS,MAAM,MAAM,SAAS;AAAA,QAClC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS,QAAS,MAAM;AAAA,QACxB,UAAU,EAAE,GAAG,UAAU,YAAY,qBAAqB;AAAA,QAC1D,aAAa;AAAA,MACf,CAAC;AACD,aAAO,MAAM,EAAE,QAAQ;AAAA,QACrB,UAAU;AAAA,QACV,WAAW;AAAA,QACX,OAAO;AAAA,MACT,CAAC;AAKD,YAAM,WAAW,MAAM,MAAM,SAAS;AAAA,QACpC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS,QAAS,MAAM;AAAA,QACxB,UAAU;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AACD,aAAO,QAAQ,EAAE,QAAQ,EAAE,SAAS,aAAa,CAAC;AAIlD,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW,EAAE,KAAK,IAAI;AAC3D,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,sDAAsD,YAAY;AAOnE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,MAAM,MAAM,UAAU,CAAC;AAE7B,YAAM,OAAO,MAAM,MAAM,SAAS;AAAA,QAChC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AAED,aAAO,IAAI,EAAE,QAAQ,EAAE,SAAS,cAAc,CAAC;AAE/C,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,KAAK,EAAE,KAAK,kBAAkB;AACnE,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,MAAM,EAAE,cAAc;AAC3D,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,uCAAuC,YAAY;AACpD,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,SAAS,MAAM,MAAM,IAAI;AAC/B,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,EAAE,SAAS,KAAO,CAAC,CAAC;AAClE,YAAM,QAAQ,MAAM,MAAM,IAAI;AAI9B,aAAO,QAAS,MAAM,SAAS,EAAE,uBAAuB,SAAS,IAAM;AACvE,aAAO,QAAS,MAAM,SAAS,EAAE,oBAAoB,QAAQ,IAAM;AACnE,YAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH,CAAC;AACH;","names":[]}
+{"version":3,"sources":["../src/store-contract.ts"],"sourcesContent":["import { generateKeys, publicIdentityOf, type JobStub } from \"@byollm/protocol\";\nimport { describe, expect, it } from \"vitest\";\nimport { routeKey } from \"./state.js\";\nimport type { RoutingStore } from \"./store.js\";\n\n/**\n * The routing store's behaviour, written once and run against every\n * implementation — cloud_008 finding 54.\n *\n * There were two copies. This package tested `RelayState`; `byollm-cloud`\n * tested `ValkeyRoutingStore` with a file that opened by explaining it was\n * \"written once and parameterised… a second copy of the scenario is a second\n * place for two implementations to quietly diverge\" — and was itself the\n * second copy. It had drifted to sixteen cases against the eighteen in the\n * ledger, which is exactly the divergence the sentence predicted, happening\n * to the sentence.\n *\n * So the contract lives here, in the package that declares `RoutingStore`,\n * and both repositories import it. A store that cannot pass this is not a\n * routing store, whatever it implements.\n *\n * ## Why this ships in the published package\n *\n * Because the implementation that matters most is in another repository. A\n * contract only the author can run is a description; one a third party runs\n * against their own implementation is a contract. `@byollm/relay/store-contract`\n * is a subpath export so nothing that imports the relay itself pulls in a\n * test framework.\n *\n * ## What this cannot prove\n *\n * `CLAIM_ATOMIC` is a MUST and every case here would pass against a store\n * that read, decided and wrote in three steps — in one process there is\n * nothing to interleave. Concurrency belongs with the implementation that\n * has a network in it, and `byollm-cloud`'s suite runs it against Valkey with\n * many connections. Named here so the omission is a decision rather than an\n * oversight.\n */\n\n/** The control-plane site id these cases route under. */\nexport const CONTRACT_SITE = \"site_store\";\n\n/** A site's identity key id — byollm_009 Amendment A §A.3. */\nconst SITE_KEY_ID = \"BYOLLM-TEST-SITE-KEY-ID\";\n\nconst SITE = CONTRACT_SITE;\n\nconst stub = (id: string, owner = \"alice\"): JobStub => ({\n  id,\n  kind: \"llm.generate\",\n  owner,\n  site: SITE_KEY_ID,\n  audience: \"self\",\n  sizeClass: \"small\",\n  streaming: false,\n  deadlineAt: 4_102_444_800_000,\n});\n\nconst ENVELOPE = {\n  ciphertext: \"AAAA\",\n  recipientKeyId: \"r\",\n  senderKeyId: \"s\",\n  direction: \"payload\" as const,\n  deadlineAt: 4_102_444_800_000,\n};\n\n/**\n * A claim, with its routes written out — cloud_009 §3.\n *\n * `routes` replaced `siteId` + `owners`, and the cases that pass `owners`\n * below now pass the pairs those owners are reachable through. That rewrite\n * is the contract's own statement of the rule: there is no way to express\n * \"this owner, any site\" here, because that is not a thing consent says.\n */\nconst claimArgs = (\n  over: { owners?: string[]; sites?: string[] } & Record<string, unknown> = {},\n) => {\n  const { owners = [\"alice\"], sites = [SITE], ...rest } = over;\n  return {\n    runnerId: \"runner_1\",\n    owner: \"alice\",\n    device: publicIdentityOf(generateKeys(Date.now())),\n    kinds: new Set([\"llm.generate\"]),\n    routes: new Set(\n      sites.flatMap((site) => owners.map((owner) => routeKey(site, owner))),\n    ),\n    max: 10,\n    leaseMs: 60_000,\n    ...rest,\n  };\n};\n\nexport interface StoreContractOptions {\n  /**\n   * A fresh, empty store, and how to dispose of it.\n   *\n   * Arrow-typed rather than a method, because the caller passes these\n   * around: a method signature lets `this` travel with the call, and a\n   * factory read off an options object is exactly where that goes wrong.\n   */\n  readonly make: () => Promise<{\n    store: RoutingStore;\n    done: () => Promise<void>;\n  }>;\n  /**\n   * Whether this store writes stubs as bytes and reads them back.\n   *\n   * An in-process store holds typed objects and cannot hold a stub it cannot\n   * parse; a serialising one can, because what it wrote may have been written\n   * by a previous version. The case that covers it is skipped rather than\n   * hidden — a reader should know which half of this contract each store is\n   * proving (cloud_008 §2.1a).\n   */\n  readonly serialising?: boolean;\n  /** Write a stub's raw bytes, bypassing serialisation. */\n  readonly writeRawStub?: (\n    store: RoutingStore,\n    id: string,\n    raw: string,\n  ) => Promise<void>;\n}\n\n/** Run the contract. Call inside a suite; it declares its own `describe`. */\nexport function describeStoreContract(\n  name: string,\n  options: StoreContractOptions,\n): void {\n  const { make, serialising, writeRawStub } = options;\n  describe(`the routing store — ${name}`, () => {\n    it(\"is idempotent by job id\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      await store.claim(claimArgs());\n      // A republish must not disturb work in flight — byollm_009 §4.2's replay\n      // argument rests on it.\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      expect((await store.job(SITE, \"a\"))?.state).toBe(\"awaiting-payload\");\n      await done();\n    });\n\n    it(\"gives two sites the same id without either seeing the other\", async () => {\n      // cloud_009 §3. Keyed by the bare id, the second site's enqueue returned\n      // the *first* site's job (cloud_008 finding 58), and the refusal that\n      // fixed it was a cross-tenant existence oracle: a site knows its own stub\n      // is well-formed, so any answer it can tell apart from success confirms\n      // somebody else holds that id. Keyed by (site, id), the collision does\n      // not exist and there is nothing to answer.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"shared\", siteId: SITE, stub: stub(\"shared\") });\n      await store.enqueue({\n        id: \"shared\",\n        siteId: \"site_other\",\n        stub: stub(\"shared\", \"bob\"),\n      });\n\n      // Two jobs, each its own site's.\n      expect((await store.job(SITE, \"shared\"))?.stub.owner).toBe(\"alice\");\n      expect((await store.job(\"site_other\", \"shared\"))?.stub.owner).toBe(\"bob\");\n\n      // And a claim for one site does not see the other's, which is the\n      // property the key exists for rather than a restatement of it.\n      const granted = await store.claim(claimArgs());\n      expect(granted.map((job) => job.id)).toEqual([\"shared\"]);\n      expect(granted[0]?.owner).toBe(\"alice\");\n\n      // The same site republishing is still absorbed — byollm_009 §4.2's\n      // replay argument, which is what idempotence is for.\n      const replay = await store.enqueue({\n        id: \"shared\",\n        siteId: SITE,\n        stub: stub(\"shared\"),\n      });\n      expect(replay).toEqual(await store.job(SITE, \"shared\"));\n      await done();\n    });\n\n    it(\"grants only what the owners set allows\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"mine\", siteId: SITE, stub: stub(\"mine\") });\n      await store.enqueue({\n        id: \"theirs\",\n        siteId: SITE,\n        stub: stub(\"theirs\", \"mallory\"),\n      });\n      const granted = await store.claim(claimArgs());\n      expect(granted.map((job) => job.id)).toEqual([\"mine\"]);\n      await done();\n    });\n\n    it(\"refuses a stale lease and honours the current one\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs());\n      await store.seal({ jobId: \"a\", siteId: SITE, envelope: ENVELOPE });\n\n      expect(\n        await store.takePayload({\n          jobId: \"a\",\n          runnerId: \"runner_1\",\n          leaseId: \"an-older-grant\",\n        }),\n      ).toEqual({ refused: \"stale-lease\" });\n\n      expect(\n        await store.takePayload({\n          jobId: \"a\",\n          runnerId: \"runner_1\",\n          leaseId: granted!.lease.id,\n        }),\n      ).toEqual({ envelope: ENVELOPE });\n      await done();\n    });\n\n    it(\"will not answer for one job with another job's lease\", async () => {\n      // cloud_009 §3. Holder-scoped calls carry a lease id and no site, so the\n      // store resolves the job *from the lease* — and a lease id belonging to a\n      // different job must not be a way to reach that job's payload.\n      //\n      // A mutation that dropped the \"does this lease's job match the id the\n      // caller named\" check survived every other case in this contract, on both\n      // implementations, because nothing else here ever presents a mismatched\n      // pair. The holder of a valid grant is exactly the party who could try\n      // it.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"mine\", siteId: SITE, stub: stub(\"mine\") });\n      await store.enqueue({ id: \"other\", siteId: SITE, stub: stub(\"other\") });\n      const granted = await store.claim(claimArgs());\n      const mine = granted.find((job) => job.id === \"mine\");\n      const other = granted.find((job) => job.id === \"other\");\n      await store.seal({ jobId: \"other\", siteId: SITE, envelope: ENVELOPE });\n\n      // The right runner, a real lease, the wrong job.\n      expect(\n        await store.takePayload({\n          jobId: \"other\",\n          runnerId: \"runner_1\",\n          leaseId: mine!.lease.id,\n        }),\n      ).toEqual({ refused: \"stale-lease\" });\n\n      // And the honest pairing still works, so this is not \"refuse everything\".\n      expect(\n        await store.takePayload({\n          jobId: \"other\",\n          runnerId: \"runner_1\",\n          leaseId: other!.lease.id,\n        }),\n      ).toEqual({ envelope: ENVELOPE });\n      await done();\n    });\n\n    it(\"renews a grant it still holds, and extends the sweep with it\", async () => {\n      // cloud_008 §0.6, at the contract level: renewal has to be one operation,\n      // because between a read and a write another replica can sweep the lease\n      // — and the renewal would then resurrect a grant on a job already back in\n      // the queue. In Valkey that is a script; in memory it is a method; the\n      // guarantee is the same one, so it is tested here rather than twice.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs({ leaseMs: 1_000 }));\n\n      const renewed = await store.renewLeases({\n        runnerId: \"runner_1\",\n        leases: [{ jobId: \"a\", leaseId: granted!.lease.id }],\n        leaseMs: 60_000,\n      });\n\n      expect(renewed.lost).toEqual([]);\n      expect(renewed.renewed.map((r) => r.jobId)).toEqual([\"a\"]);\n      // The store's own clock did the arithmetic — the caller passed a duration,\n      // never an instant, which is what keeps two replicas from measuring one\n      // lease against two clocks (cloud_006 §3.4).\n      expect(renewed.renewed[0]!.expiresAt).toBeGreaterThan(\n        granted!.lease.expiresAt,\n      );\n\n      // And it is the *stored* grant that moved, not just the number returned.\n      // Reporting a renewal without performing one is the mutation that\n      // survived the first version of the relay's own test for this.\n      expect((await store.job(SITE, \"a\"))?.claimedBy?.leaseExpiresAt).toBe(\n        renewed.renewed[0]!.expiresAt,\n      );\n      await done();\n    });\n\n    it(\"reports a lease the runner no longer holds as lost, and renews nothing\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs({ leaseMs: 1_000 }));\n      const before = (await store.job(SITE, \"a\"))?.claimedBy?.leaseExpiresAt;\n\n      const renewed = await store.renewLeases({\n        runnerId: \"runner_1\",\n        leases: [{ jobId: \"a\", leaseId: \"a-grant-that-ended\" }],\n        leaseMs: 60_000,\n      });\n\n      expect(renewed.renewed).toEqual([]);\n      expect(renewed.lost).toEqual([\"a\"]);\n      // A refusal must not advance anything — the current holder's grant is\n      // untouched by somebody else's stale renewal.\n      expect((await store.job(SITE, \"a\"))?.claimedBy?.leaseExpiresAt).toBe(\n        before,\n      );\n      expect((await store.job(SITE, \"a\"))?.claimedBy?.leaseId).toBe(\n        granted!.lease.id,\n      );\n      await done();\n    });\n\n    it(\"does not hand out a stub it cannot parse\", async () => {\n      // cloud_008 §2.1a, and the case is not hypothetical: two jobs enqueued\n      // before alpha.15 had no `site`, came back in a claim, and the daemon's\n      // `.strict()` parse rejected the whole response. Two dead rows denied\n      // claims to every device on the hub, and the queue could not drain past\n      // them.\n      //\n      // The store had `JSON.parse(stub) as JobStub` — trusting what it wrote,\n      // when what it wrote was written by a previous version. A routing store\n      // outlives the deployment that filled it, so a wire change to `JobStub`\n      // is a data migration whether or not anyone plans one.\n      //\n      // Only meaningful against a store that serialises: `RelayState` holds\n      // typed objects and cannot reach this state, so it passes by\n      // construction — which is worth saying rather than hiding, because a\n      // reader should know which half of this contract each store is proving.\n      const { store, done } = await make();\n      if (!serialising || writeRawStub === undefined) {\n        await done();\n        return;\n      }\n\n      await store.enqueue({ id: \"good\", siteId: SITE, stub: stub(\"good\") });\n      await store.enqueue({ id: \"old\", siteId: SITE, stub: stub(\"old\") });\n      // Exactly what alpha.14 wrote: a stub with no `site`.\n      const legacy = { ...stub(\"old\") } as Record<string, unknown>;\n      delete legacy[\"site\"];\n      await writeRawStub(store, \"old\", JSON.stringify(legacy));\n\n      const granted = await store.claim(claimArgs({ max: 10 }));\n\n      // The good one is still handed out — \"return nothing\" would pass a test\n      // that only checked the bad one was absent, and would stop all routing.\n      expect(granted.map((job) => job.id)).toEqual([\"good\"]);\n      // And the bad one is back in the queue rather than stuck holding a lease\n      // nobody received.\n      expect((await store.job(SITE, \"old\"))?.state).toBe(\"queued\");\n      await done();\n    });\n\n    it(\"honours a self job's audience\", async () => {\n      // cloud_008 §2.1 at the contract level. The owners set is everyone this\n      // device may run for, which for a Team owner's machine is the whole\n      // roster — right for public and named, wrong for the one audience a user\n      // picks because they want their own machine.\n      const { store, done } = await make();\n      await store.enqueue({\n        id: \"private\",\n        siteId: SITE,\n        stub: { ...stub(\"private\", \"alice\"), audience: \"self\" },\n      });\n\n      // A roster owner's machine: may run alice's work in general.\n      const granted = await store.claim(\n        claimArgs({ owner: \"owner\", owners: [\"owner\", \"alice\"] }),\n      );\n\n      expect(granted).toEqual([]);\n      expect((await store.job(SITE, \"private\"))?.state).toBe(\"queued\");\n      await done();\n    });\n\n    it(\"still offers that job to its owner's own machine\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({\n        id: \"private\",\n        siteId: SITE,\n        stub: { ...stub(\"private\", \"alice\"), audience: \"self\" },\n      });\n      const granted = await store.claim(\n        claimArgs({ owner: \"alice\", owners: [\"alice\"] }),\n      );\n      expect(granted.map((job) => job.id)).toEqual([\"private\"]);\n      await done();\n    });\n\n    it(\"does not offer a job back to the runner that refused it\", async () => {\n      // `REFUSAL_NOT_REOFFERED`. `releaseLeases` gained an **optional** reason,\n      // which means a store can ignore it and still typecheck — this class has\n      // now diverged from the interface that way twice, so the contract is the\n      // only thing that catches it.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs());\n\n      await store.releaseLeases({\n        runnerId: \"runner_1\",\n        leases: [{ jobId: \"a\", leaseId: granted!.lease.id }],\n        reason: \"refused\",\n      });\n\n      expect(await store.claim(claimArgs())).toEqual([]);\n      expect((await store.job(SITE, \"a\"))?.state).toBe(\"queued\");\n      // And somebody else may still run it.\n      expect(\n        (await store.claim(claimArgs({ runnerId: \"runner_2\" }))).map(\n          (j) => j.id,\n        ),\n      ).toEqual([\"a\"]);\n      await done();\n    });\n\n    it(\"keeps a job claimable by a runner that only went away\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs());\n\n      await store.releaseLeases({\n        runnerId: \"runner_1\",\n        leases: [{ jobId: \"a\", leaseId: granted!.lease.id }],\n        reason: \"shutdown\",\n      });\n\n      expect((await store.claim(claimArgs())).map((j) => j.id)).toEqual([\"a\"]);\n      await done();\n    });\n\n    it(\"stops offering a job past its deadline, and drops the ciphertext\", async () => {\n      // cloud_008 §2.2. `deadlineAt` travelled on every stub and nothing read\n      // it, so expired jobs were offered forever and their sealed payloads kept\n      // for as long as the store lived.\n      const { store, done } = await make();\n      await store.enqueue({\n        id: \"late\",\n        siteId: SITE,\n        stub: { ...stub(\"late\"), deadlineAt: Date.now() - 1_000 },\n      });\n\n      expect(await store.claim(claimArgs())).toEqual([]);\n      expect(await store.job(SITE, \"late\")).toBeUndefined();\n      await done();\n    });\n\n    it(\"names a cancelled job to the device holding it, and offers it to nobody\", async () => {\n      // cloud_008 §2.2.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      await store.claim(claimArgs());\n\n      expect(await store.cancel({ jobId: \"a\", siteId: SITE })).toBe(true);\n      expect(await store.cancelRequests(\"runner_1\")).toEqual([\"a\"]);\n\n      // Scoped to the caller's site: a site must not reach another's work by\n      // guessing an id.\n      expect(await store.cancel({ jobId: \"a\", siteId: \"someone_else\" })).toBe(\n        false,\n      );\n      await done();\n    });\n\n    it(\"records a result once\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs());\n\n      const first = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_1\",\n        leaseId: granted!.lease.id,\n        envelope: ENVELOPE,\n        disposition: \"ok\",\n      });\n      const replay = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_1\",\n        leaseId: granted!.lease.id,\n        envelope: { ...ENVELOPE, ciphertext: \"different\" },\n        disposition: \"error\",\n      });\n\n      expect(first).toEqual({ accepted: true, state: \"done\" });\n      // `duplicate` — cloud_008 §3.6. Case 18 above is the one that says why.\n      expect(replay).toEqual({\n        accepted: false,\n        duplicate: true,\n        state: \"done\",\n      });\n      // The property, not the boolean: the second result did not overwrite.\n      expect((await store.job(SITE, \"a\"))?.disposition).toBe(\"ok\");\n      await done();\n    });\n\n    it(\"answers the device that finished it with `duplicate`\", async () => {\n      // Contract case 18 — cloud_008 §3.6, and the eighteenth exists because\n      // the compiler cannot see any of this: the return type's `duplicate` is\n      // optional, so a store that never sets it typechecks perfectly while\n      // enforcing `RESULT_IDEMPOTENT` by accident or not at all.\n      //\n      // A daemon whose acknowledgment was lost hears that its answer is already\n      // recorded, rather than that its lease is stale — the second message\n      // invents a worry about a result safely on disk.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const [granted] = await store.claim(claimArgs());\n\n      const first = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_1\",\n        leaseId: granted!.lease.id,\n        envelope: ENVELOPE,\n        disposition: \"ok\",\n      });\n      expect(first).toEqual({ accepted: true, state: \"done\" });\n\n      const replay = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_1\",\n        leaseId: granted!.lease.id,\n        envelope: { ...ENVELOPE, ciphertext: \"a-different-result\" },\n        disposition: \"error\",\n      });\n      expect(replay).toEqual({\n        accepted: false,\n        duplicate: true,\n        state: \"done\",\n      });\n\n      // A *different* device, on a job that is terminal, gets the refusal it\n      // would get for one that is not — otherwise the two answers differ and a\n      // job id becomes a terminality probe.\n      const stranger = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_2\",\n        leaseId: granted!.lease.id,\n        envelope: ENVELOPE,\n        disposition: \"ok\",\n      });\n      expect(stranger).toEqual({ refused: \"not-holder\" });\n\n      // And the first answer is what survived, which is the property rather\n      // than any of the booleans above.\n      expect((await store.job(SITE, \"a\"))?.disposition).toBe(\"ok\");\n      await done();\n    });\n\n    it(\"refuses a result produced under a grant that ended\", async () => {\n      // cloud_008 §1.4a at the contract level, and it belongs here more than\n      // anywhere: `RoutingStore.complete` gained `leaseId` and this class kept\n      // typechecking without it, because a parameter object with fewer\n      // properties is assignable to one with more. The relay would have\n      // enforced LEASE_HONORED on the memory store and not on the store that\n      // runs in production, with nothing red on the way.\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      await store.claim(claimArgs());\n\n      const late = await store.complete({\n        jobId: \"a\",\n        runnerId: \"runner_1\",\n        leaseId: \"a-grant-that-ended\",\n        envelope: ENVELOPE,\n        disposition: \"ok\",\n      });\n\n      expect(late).toEqual({ refused: \"stale-lease\" });\n      // Untouched: the current holder can still finish it.\n      expect((await store.job(SITE, \"a\"))?.state).toBe(\"awaiting-payload\");\n      expect((await store.job(SITE, \"a\"))?.result).toBeUndefined();\n      await done();\n    });\n\n    it(\"stamps deadlines from its own clock\", async () => {\n      const { store, done } = await make();\n      await store.enqueue({ id: \"a\", siteId: SITE, stub: stub(\"a\") });\n      const before = await store.now();\n      const [granted] = await store.claim(claimArgs({ leaseMs: 45_000 }));\n      const after = await store.now();\n\n      // Bracketed rather than exact: a real store's clock moves between the two\n      // reads, which is the whole reason it is the store's clock and not ours.\n      expect(granted!.lease.expiresAt).toBeGreaterThanOrEqual(before + 45_000);\n      expect(granted!.lease.expiresAt).toBeLessThanOrEqual(after + 45_000);\n      await done();\n    });\n  });\n}\n"],"mappings":";;;;;AAAA,SAAS,cAAc,wBAAsC;AAC7D,SAAS,UAAU,QAAQ,UAAU;AAuC9B,IAAM,gBAAgB;AAG7B,IAAM,cAAc;AAEpB,IAAM,OAAO;AAEb,IAAM,OAAO,CAAC,IAAY,QAAQ,aAAsB;AAAA,EACtD;AAAA,EACA,MAAM;AAAA,EACN;AAAA,EACA,MAAM;AAAA,EACN,UAAU;AAAA,EACV,WAAW;AAAA,EACX,WAAW;AAAA,EACX,YAAY;AACd;AAEA,IAAM,WAAW;AAAA,EACf,YAAY;AAAA,EACZ,gBAAgB;AAAA,EAChB,aAAa;AAAA,EACb,WAAW;AAAA,EACX,YAAY;AACd;AAUA,IAAM,YAAY,CAChB,OAA0E,CAAC,MACxE;AACH,QAAM,EAAE,SAAS,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,GAAG,GAAG,KAAK,IAAI;AACxD,SAAO;AAAA,IACL,UAAU;AAAA,IACV,OAAO;AAAA,IACP,QAAQ,iBAAiB,aAAa,KAAK,IAAI,CAAC,CAAC;AAAA,IACjD,OAAO,oBAAI,IAAI,CAAC,cAAc,CAAC;AAAA,IAC/B,QAAQ,IAAI;AAAA,MACV,MAAM,QAAQ,CAAC,SAAS,OAAO,IAAI,CAAC,UAAU,SAAS,MAAM,KAAK,CAAC,CAAC;AAAA,IACtE;AAAA,IACA,KAAK;AAAA,IACL,SAAS;AAAA,IACT,GAAG;AAAA,EACL;AACF;AAiCO,SAAS,sBACd,MACA,SACM;AACN,QAAM,EAAE,MAAM,aAAa,aAAa,IAAI;AAC5C,WAAS,4BAAuB,IAAI,IAAI,MAAM;AAC5C,OAAG,2BAA2B,YAAY;AACxC,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,MAAM,MAAM,UAAU,CAAC;AAG7B,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,KAAK,EAAE,KAAK,kBAAkB;AACnE,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,+DAA+D,YAAY;AAO5E,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,UAAU,QAAQ,MAAM,MAAM,KAAK,QAAQ,EAAE,CAAC;AACxE,YAAM,MAAM,QAAQ;AAAA,QAClB,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,KAAK;AAAA,MAC5B,CAAC;AAGD,cAAQ,MAAM,MAAM,IAAI,MAAM,QAAQ,IAAI,KAAK,KAAK,EAAE,KAAK,OAAO;AAClE,cAAQ,MAAM,MAAM,IAAI,cAAc,QAAQ,IAAI,KAAK,KAAK,EAAE,KAAK,KAAK;AAIxE,YAAM,UAAU,MAAM,MAAM,MAAM,UAAU,CAAC;AAC7C,aAAO,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,QAAQ,CAAC;AACvD,aAAO,QAAQ,CAAC,GAAG,KAAK,EAAE,KAAK,OAAO;AAItC,YAAM,SAAS,MAAM,MAAM,QAAQ;AAAA,QACjC,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK,QAAQ;AAAA,MACrB,CAAC;AACD,aAAO,MAAM,EAAE,QAAQ,MAAM,MAAM,IAAI,MAAM,QAAQ,CAAC;AACtD,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,0CAA0C,YAAY;AACvD,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,QAAQ,QAAQ,MAAM,MAAM,KAAK,MAAM,EAAE,CAAC;AACpE,YAAM,MAAM,QAAQ;AAAA,QAClB,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,KAAK,UAAU,SAAS;AAAA,MAChC,CAAC;AACD,YAAM,UAAU,MAAM,MAAM,MAAM,UAAU,CAAC;AAC7C,aAAO,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;AACrD,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,qDAAqD,YAAY;AAClE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,CAAC;AAC/C,YAAM,MAAM,KAAK,EAAE,OAAO,KAAK,QAAQ,MAAM,UAAU,SAAS,CAAC;AAEjE;AAAA,QACE,MAAM,MAAM,YAAY;AAAA,UACtB,OAAO;AAAA,UACP,UAAU;AAAA,UACV,SAAS;AAAA,QACX,CAAC;AAAA,MACH,EAAE,QAAQ,EAAE,SAAS,cAAc,CAAC;AAEpC;AAAA,QACE,MAAM,MAAM,YAAY;AAAA,UACtB,OAAO;AAAA,UACP,UAAU;AAAA,UACV,SAAS,QAAS,MAAM;AAAA,QAC1B,CAAC;AAAA,MACH,EAAE,QAAQ,EAAE,UAAU,SAAS,CAAC;AAChC,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,wDAAwD,YAAY;AAUrE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,QAAQ,QAAQ,MAAM,MAAM,KAAK,MAAM,EAAE,CAAC;AACpE,YAAM,MAAM,QAAQ,EAAE,IAAI,SAAS,QAAQ,MAAM,MAAM,KAAK,OAAO,EAAE,CAAC;AACtE,YAAM,UAAU,MAAM,MAAM,MAAM,UAAU,CAAC;AAC7C,YAAM,OAAO,QAAQ,KAAK,CAAC,QAAQ,IAAI,OAAO,MAAM;AACpD,YAAM,QAAQ,QAAQ,KAAK,CAAC,QAAQ,IAAI,OAAO,OAAO;AACtD,YAAM,MAAM,KAAK,EAAE,OAAO,SAAS,QAAQ,MAAM,UAAU,SAAS,CAAC;AAGrE;AAAA,QACE,MAAM,MAAM,YAAY;AAAA,UACtB,OAAO;AAAA,UACP,UAAU;AAAA,UACV,SAAS,KAAM,MAAM;AAAA,QACvB,CAAC;AAAA,MACH,EAAE,QAAQ,EAAE,SAAS,cAAc,CAAC;AAGpC;AAAA,QACE,MAAM,MAAM,YAAY;AAAA,UACtB,OAAO;AAAA,UACP,UAAU;AAAA,UACV,SAAS,MAAO,MAAM;AAAA,QACxB,CAAC;AAAA,MACH,EAAE,QAAQ,EAAE,UAAU,SAAS,CAAC;AAChC,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,gEAAgE,YAAY;AAM7E,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,EAAE,SAAS,IAAM,CAAC,CAAC;AAEjE,YAAM,UAAU,MAAM,MAAM,YAAY;AAAA,QACtC,UAAU;AAAA,QACV,QAAQ,CAAC,EAAE,OAAO,KAAK,SAAS,QAAS,MAAM,GAAG,CAAC;AAAA,QACnD,SAAS;AAAA,MACX,CAAC;AAED,aAAO,QAAQ,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC/B,aAAO,QAAQ,QAAQ,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC;AAIzD,aAAO,QAAQ,QAAQ,CAAC,EAAG,SAAS,EAAE;AAAA,QACpC,QAAS,MAAM;AAAA,MACjB;AAKA,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW,cAAc,EAAE;AAAA,QAC9D,QAAQ,QAAQ,CAAC,EAAG;AAAA,MACtB;AACA,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,0EAA0E,YAAY;AACvF,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,EAAE,SAAS,IAAM,CAAC,CAAC;AACjE,YAAM,UAAU,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW;AAExD,YAAM,UAAU,MAAM,MAAM,YAAY;AAAA,QACtC,UAAU;AAAA,QACV,QAAQ,CAAC,EAAE,OAAO,KAAK,SAAS,qBAAqB,CAAC;AAAA,QACtD,SAAS;AAAA,MACX,CAAC;AAED,aAAO,QAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC;AAClC,aAAO,QAAQ,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC;AAGlC,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW,cAAc,EAAE;AAAA,QAC9D;AAAA,MACF;AACA,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW,OAAO,EAAE;AAAA,QACvD,QAAS,MAAM;AAAA,MACjB;AACA,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,4CAA4C,YAAY;AAgBzD,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,UAAI,CAAC,eAAe,iBAAiB,QAAW;AAC9C,cAAM,KAAK;AACX;AAAA,MACF;AAEA,YAAM,MAAM,QAAQ,EAAE,IAAI,QAAQ,QAAQ,MAAM,MAAM,KAAK,MAAM,EAAE,CAAC;AACpE,YAAM,MAAM,QAAQ,EAAE,IAAI,OAAO,QAAQ,MAAM,MAAM,KAAK,KAAK,EAAE,CAAC;AAElE,YAAM,SAAS,EAAE,GAAG,KAAK,KAAK,EAAE;AAChC,aAAO,OAAO,MAAM;AACpB,YAAM,aAAa,OAAO,OAAO,KAAK,UAAU,MAAM,CAAC;AAEvD,YAAM,UAAU,MAAM,MAAM,MAAM,UAAU,EAAE,KAAK,GAAG,CAAC,CAAC;AAIxD,aAAO,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC;AAGrD,cAAQ,MAAM,MAAM,IAAI,MAAM,KAAK,IAAI,KAAK,EAAE,KAAK,QAAQ;AAC3D,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,iCAAiC,YAAY;AAK9C,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ;AAAA,QAClB,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,EAAE,GAAG,KAAK,WAAW,OAAO,GAAG,UAAU,OAAO;AAAA,MACxD,CAAC;AAGD,YAAM,UAAU,MAAM,MAAM;AAAA,QAC1B,UAAU,EAAE,OAAO,SAAS,QAAQ,CAAC,SAAS,OAAO,EAAE,CAAC;AAAA,MAC1D;AAEA,aAAO,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC1B,cAAQ,MAAM,MAAM,IAAI,MAAM,SAAS,IAAI,KAAK,EAAE,KAAK,QAAQ;AAC/D,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,oDAAoD,YAAY;AACjE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ;AAAA,QAClB,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,EAAE,GAAG,KAAK,WAAW,OAAO,GAAG,UAAU,OAAO;AAAA,MACxD,CAAC;AACD,YAAM,UAAU,MAAM,MAAM;AAAA,QAC1B,UAAU,EAAE,OAAO,SAAS,QAAQ,CAAC,OAAO,EAAE,CAAC;AAAA,MACjD;AACA,aAAO,QAAQ,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC;AACxD,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,2DAA2D,YAAY;AAKxE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,CAAC;AAE/C,YAAM,MAAM,cAAc;AAAA,QACxB,UAAU;AAAA,QACV,QAAQ,CAAC,EAAE,OAAO,KAAK,SAAS,QAAS,MAAM,GAAG,CAAC;AAAA,QACnD,QAAQ;AAAA,MACV,CAAC;AAED,aAAO,MAAM,MAAM,MAAM,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AACjD,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,KAAK,EAAE,KAAK,QAAQ;AAEzD;AAAA,SACG,MAAM,MAAM,MAAM,UAAU,EAAE,UAAU,WAAW,CAAC,CAAC,GAAG;AAAA,UACvD,CAAC,MAAM,EAAE;AAAA,QACX;AAAA,MACF,EAAE,QAAQ,CAAC,GAAG,CAAC;AACf,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,yDAAyD,YAAY;AACtE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,CAAC;AAE/C,YAAM,MAAM,cAAc;AAAA,QACxB,UAAU;AAAA,QACV,QAAQ,CAAC,EAAE,OAAO,KAAK,SAAS,QAAS,MAAM,GAAG,CAAC;AAAA,QACnD,QAAQ;AAAA,MACV,CAAC;AAED,cAAQ,MAAM,MAAM,MAAM,UAAU,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC;AACvE,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,oEAAoE,YAAY;AAIjF,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ;AAAA,QAClB,IAAI;AAAA,QACJ,QAAQ;AAAA,QACR,MAAM,EAAE,GAAG,KAAK,MAAM,GAAG,YAAY,KAAK,IAAI,IAAI,IAAM;AAAA,MAC1D,CAAC;AAED,aAAO,MAAM,MAAM,MAAM,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;AACjD,aAAO,MAAM,MAAM,IAAI,MAAM,MAAM,CAAC,EAAE,cAAc;AACpD,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,2EAA2E,YAAY;AAExF,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,MAAM,MAAM,UAAU,CAAC;AAE7B,aAAO,MAAM,MAAM,OAAO,EAAE,OAAO,KAAK,QAAQ,KAAK,CAAC,CAAC,EAAE,KAAK,IAAI;AAClE,aAAO,MAAM,MAAM,eAAe,UAAU,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC;AAI5D,aAAO,MAAM,MAAM,OAAO,EAAE,OAAO,KAAK,QAAQ,eAAe,CAAC,CAAC,EAAE;AAAA,QACjE;AAAA,MACF;AACA,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,yBAAyB,YAAY;AACtC,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,CAAC;AAE/C,YAAM,QAAQ,MAAM,MAAM,SAAS;AAAA,QACjC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS,QAAS,MAAM;AAAA,QACxB,UAAU;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AACD,YAAM,SAAS,MAAM,MAAM,SAAS;AAAA,QAClC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS,QAAS,MAAM;AAAA,QACxB,UAAU,EAAE,GAAG,UAAU,YAAY,YAAY;AAAA,QACjD,aAAa;AAAA,MACf,CAAC;AAED,aAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,MAAM,OAAO,OAAO,CAAC;AAEvD,aAAO,MAAM,EAAE,QAAQ;AAAA,QACrB,UAAU;AAAA,QACV,WAAW;AAAA,QACX,OAAO;AAAA,MACT,CAAC;AAED,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW,EAAE,KAAK,IAAI;AAC3D,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,wDAAwD,YAAY;AASrE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,CAAC;AAE/C,YAAM,QAAQ,MAAM,MAAM,SAAS;AAAA,QACjC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS,QAAS,MAAM;AAAA,QACxB,UAAU;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AACD,aAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,MAAM,OAAO,OAAO,CAAC;AAEvD,YAAM,SAAS,MAAM,MAAM,SAAS;AAAA,QAClC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS,QAAS,MAAM;AAAA,QACxB,UAAU,EAAE,GAAG,UAAU,YAAY,qBAAqB;AAAA,QAC1D,aAAa;AAAA,MACf,CAAC;AACD,aAAO,MAAM,EAAE,QAAQ;AAAA,QACrB,UAAU;AAAA,QACV,WAAW;AAAA,QACX,OAAO;AAAA,MACT,CAAC;AAKD,YAAM,WAAW,MAAM,MAAM,SAAS;AAAA,QACpC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS,QAAS,MAAM;AAAA,QACxB,UAAU;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AACD,aAAO,QAAQ,EAAE,QAAQ,EAAE,SAAS,aAAa,CAAC;AAIlD,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,WAAW,EAAE,KAAK,IAAI;AAC3D,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,sDAAsD,YAAY;AAOnE,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,MAAM,MAAM,UAAU,CAAC;AAE7B,YAAM,OAAO,MAAM,MAAM,SAAS;AAAA,QAChC,OAAO;AAAA,QACP,UAAU;AAAA,QACV,SAAS;AAAA,QACT,UAAU;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AAED,aAAO,IAAI,EAAE,QAAQ,EAAE,SAAS,cAAc,CAAC;AAE/C,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,KAAK,EAAE,KAAK,kBAAkB;AACnE,cAAQ,MAAM,MAAM,IAAI,MAAM,GAAG,IAAI,MAAM,EAAE,cAAc;AAC3D,YAAM,KAAK;AAAA,IACb,CAAC;AAED,OAAG,uCAAuC,YAAY;AACpD,YAAM,EAAE,OAAO,KAAK,IAAI,MAAM,KAAK;AACnC,YAAM,MAAM,QAAQ,EAAE,IAAI,KAAK,QAAQ,MAAM,MAAM,KAAK,GAAG,EAAE,CAAC;AAC9D,YAAM,SAAS,MAAM,MAAM,IAAI;AAC/B,YAAM,CAAC,OAAO,IAAI,MAAM,MAAM,MAAM,UAAU,EAAE,SAAS,KAAO,CAAC,CAAC;AAClE,YAAM,QAAQ,MAAM,MAAM,IAAI;AAI9B,aAAO,QAAS,MAAM,SAAS,EAAE,uBAAuB,SAAS,IAAM;AACvE,aAAO,QAAS,MAAM,SAAS,EAAE,oBAAoB,QAAQ,IAAM;AACnE,YAAM,KAAK;AAAA,IACb,CAAC;AAAA,EACH,CAAC;AACH;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@byollm/relay",
-  "version": "0.1.0-alpha.26",
+  "version": "0.1.0-alpha.27",
   "type": "module",
   "description": "The reference relay: routes sealed byollm jobs between sites and daemons, holding no decryption keys by construction.",
   "license": "MIT",
@@ -31,7 +31,7 @@
   ],
   "dependencies": {
     "zod": "^4.1.13",
-    "@byollm/protocol": "0.1.0-alpha.26"
+    "@byollm/protocol": "0.1.0-alpha.27"
   },
   "publishConfig": {
     "access": "public"
@@ -39,9 +39,9 @@
   "devDependencies": {
     "@supabase/supabase-js": "^2.112.2",
     "vitest": "^4.1.10",
-    "byollm": "0.1.0-alpha.26",
-    "@byollm/conformance": "0.1.0-alpha.26",
-    "@byollm/server": "0.1.0-alpha.26"
+    "byollm": "0.1.0-alpha.27",
+    "@byollm/server": "0.1.0-alpha.27",
+    "@byollm/conformance": "0.1.0-alpha.27"
   },
   "peerDependencies": {
     "vitest": ">=3"