@cat-factory/gatekeeper-worker 0.3.1

package/dist/webhook/delivery.js

@@ -0,0 +1,162 @@
+// Reading one delivery, and deciding what (if anything) it means for the approval inbox.
+//
+// The three families share an endpoint and are told apart by SHAPE (`notification` / `run` /
+// `alert`), which is what this module does first. It deliberately validates only what it reads:
+// the wire contract grows additively, so a delivery carrying a family or a notification type this
+// package has never heard of is a thing to pass through as unrecognised, never a parse failure.
+// A Gatekeeper that 400s an unknown shape would page an operator for a platform upgrade.
+//
+// The card derivation is the second half, and its rule is the one from the docs: the webhook is a
+// TRIGGER and the API is the truth. So a card carries only what routes an answer (the run) and
+// what a human reads (the title and body). The parked decision itself, with its ids and its quorum
+// tally, is re-read from `/runs/:runId/decisions` at answer time, because between the delivery and
+// the answer the run may have moved on entirely.
+/**
+ * The card types that mean "a run is parked and a person has to answer", with what answering one
+ * would take.
+ *
+ * Deliberately a SMALL map rather than "anything with a runId": `pipeline_complete` and
+ * `ci_failed` also carry one and are reports, not questions. Raising an approval card for a report
+ * trains people to dismiss cards, which is how a real one gets missed. A deployment that registers
+ * its own gate and wants its card here adds the type; that is an edit to this constant, in review,
+ * rather than a behaviour that widens on its own.
+ *
+ * It is keyed by the SDK's own `NotificationType`, so a type this deployment retires fails the
+ * build here rather than becoming a card that silently stops arriving. Its keys are also the list
+ * `enroll()` SUBSCRIBES to, so what a Gatekeeper asks for and what it can act on are one value.
+ */
+export const PARKED_DECISION_CARD_TYPES = {
+    requirement_review: 'decision',
+    clarity_review: 'decision',
+    decision_required: 'decision',
+    fork_decision_pending: 'decision',
+    judge_review: 'decision',
+    human_test_ready: 'decision',
+    visual_confirmation_ready: 'decision',
+    pr_review_ready: 'decision',
+    followup_pending: 'decision',
+    // The one notice. Settling it is a real merge through `notifications_act`, which no tier here
+    // grants: a shared credential is not one of the people a merge policy named. The card says a
+    // human has to finish the run in the cat-factory app.
+    merge_review: 'notice',
+};
+/** Every type this Gatekeeper subscribes to, answerable or not. */
+export const SUBSCRIBED_CARD_TYPES = Object.keys(PARKED_DECISION_CARD_TYPES);
+/**
+ * How a delivered card type is dispositioned, or `null` for one this Gatekeeper raises nothing for.
+ *
+ * Takes a plain `string` because the wire vocabulary grows additively: a deployment one release
+ * ahead of this package delivers a type the SDK's union has never heard of, and narrowing the
+ * ARGUMENT would make that a type error at the one place that must instead answer "no, not one of
+ * mine" and pass the delivery through.
+ */
+export function dispositionOf(type) {
+    return PARKED_DECISION_CARD_TYPES[type] ?? null;
+}
+/** The lifecycle events a `run` delivery can carry, and whether each ends the run. */
+const TERMINAL_RUN_EVENTS = new Set(['run.completed', 'run.failed']);
+function asRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+function asString(value) {
+    return typeof value === 'string' && value.length > 0 ? value : null;
+}
+/**
+ * Classify a parsed delivery body.
+ *
+ * Returns `null` only when the envelope itself is unusable (no `deliveryId`), which is the one
+ * case where nothing can be done with it at all: the id is what dedupe keys on, so a delivery
+ * without one cannot be admitted safely even as unrecognised.
+ */
+export function readDelivery(body) {
+    const envelope = asRecord(body);
+    if (envelope === null)
+        return null;
+    const deliveryId = asString(envelope.deliveryId);
+    if (deliveryId === null)
+        return null;
+    const sentAt = typeof envelope.sentAt === 'number' ? envelope.sentAt : 0;
+    const notification = asRecord(envelope.notification);
+    if (notification !== null) {
+        return {
+            family: 'notification',
+            deliveryId,
+            sentAt,
+            runId: asString(envelope.runId),
+            taskId: asString(envelope.taskId),
+            notification: {
+                id: asString(notification.id) ?? deliveryId,
+                type: asString(notification.type) ?? 'unknown',
+                status: asString(notification.status) ?? 'open',
+                title: asString(notification.title) ?? '',
+                body: asString(notification.body) ?? '',
+            },
+        };
+    }
+    const event = asString(envelope.event);
+    const run = asRecord(envelope.run);
+    if (event !== null && run !== null)
+        return { family: 'run', deliveryId, sentAt, event, run };
+    const alert = asRecord(envelope.alert);
+    if (event !== null && alert !== null)
+        return { family: 'alert', deliveryId, sentAt, event, alert };
+    return { family: 'unrecognised', deliveryId, sentAt };
+}
+/**
+ * Decide what a delivery asks durable state to do.
+ *
+ * A card is keyed on the NOTIFICATION id rather than the delivery id, because the platform
+ * re-delivers the same card as it resolves (`ntf_123-open` then `ntf_123-acted`) and those two
+ * deliveries are one question with an answer, not two questions. Dedupe still runs on the delivery
+ * id upstream of this: the two ids do different jobs and collapsing them would either drop the
+ * resolution or re-raise the card.
+ *
+ * A `run` delivery lands as a lifecycle record rather than nothing. That leg is why the
+ * subscription asks for all three run events: a status Gadget reads `runs_watched()` instead of
+ * polling, and a terminal event settles the run's open cards, so an inbox never holds a question
+ * about a run that has ended.
+ */
+export function cardEffectOf(delivery) {
+    if (delivery.family === 'run') {
+        const runId = asString(delivery.run.id) ?? asString(delivery.run.runId);
+        if (runId === null)
+            return { kind: 'none' };
+        return {
+            kind: 'run-event',
+            state: {
+                runId,
+                event: delivery.event,
+                terminal: TERMINAL_RUN_EVENTS.has(delivery.event),
+                run: delivery.run,
+            },
+        };
+    }
+    if (delivery.family !== 'notification')
+        return { kind: 'none' };
+    const { notification, runId } = delivery;
+    const disposition = dispositionOf(notification.type);
+    if (disposition === null)
+        return { kind: 'none' };
+    if (notification.status !== 'open')
+        return { kind: 'supersede', cardId: notification.id };
+    if (runId === null)
+        return { kind: 'none' };
+    return {
+        kind: 'open',
+        card: {
+            cardId: notification.id,
+            runId,
+            taskId: delivery.taskId,
+            type: notification.type,
+            disposition,
+            title: notification.title,
+            body: notification.body,
+            raisedAt: delivery.sentAt,
+            resolvedAt: null,
+            resolution: null,
+        },
+    };
+}
+//# sourceMappingURL=delivery.js.map

package/dist/webhook/delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery.js","sourceRoot":"","sources":["../../src/webhook/delivery.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,EAAE;AACF,6FAA6F;AAC7F,gGAAgG;AAChG,kGAAkG;AAClG,gGAAgG;AAChG,yFAAyF;AACzF,EAAE;AACF,kGAAkG;AAClG,+FAA+F;AAC/F,mGAAmG;AACnG,mGAAmG;AACnG,iDAAiD;AAyDjD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAEnC;IACF,kBAAkB,EAAE,UAAU;IAC9B,cAAc,EAAE,UAAU;IAC1B,iBAAiB,EAAE,UAAU;IAC7B,qBAAqB,EAAE,UAAU;IACjC,YAAY,EAAE,UAAU;IACxB,gBAAgB,EAAE,UAAU;IAC5B,yBAAyB,EAAE,UAAU;IACrC,eAAe,EAAE,UAAU;IAC3B,gBAAgB,EAAE,UAAU;IAC5B,8FAA8F;IAC9F,6FAA6F;IAC7F,sDAAsD;IACtD,YAAY,EAAE,QAAQ;CACvB,CAAA;AAED,mEAAmE;AACnE,MAAM,CAAC,MAAM,qBAAqB,GAAgC,MAAM,CAAC,IAAI,CAC3E,0BAA0B,CACL,CAAA;AAEvB;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,OAAQ,0BAA0E,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;AAClG,CAAC;AAED,sFAAsF;AACtF,MAAM,mBAAmB,GAAwB,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAA;AAEzF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,IAAI,CAAA;AACV,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AACrE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAa;IACxC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAA;IAChD,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACpC,MAAM,MAAM,GAAG,OAAO,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAExE,MAAM,YAAY,GAAG,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IACpD,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,cAAc;YACtB,UAAU;YACV,MAAM;YACN,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YAC/B,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YACjC,YAAY,EAAE;gBACZ,EAAE,EAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,UAAU;gBAC3C,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,SAAS;gBAC9C,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,MAAM;gBAC/C,KAAK,EAAE,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE;gBACzC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE;aACxC;SACF,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACtC,MAAM,GAAG,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,KAAK,KAAK,IAAI,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;IAE5F,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAA;IAElG,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,CAAA;AACvD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,YAAY,CAAC,QAAkB;IAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACvE,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;QAC3C,OAAO;YACL,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE;gBACL,KAAK;gBACL,KAAK,EAAE,QAAQ,CAAC,KAAK;gBACrB,QAAQ,EAAE,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACjD,GAAG,EAAE,QAAQ,CAAC,GAAG;aAClB;SACF,CAAA;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAC/D,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAA;IACxC,MAAM,WAAW,GAAG,aAAa,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;IACpD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAEjD,IAAI,YAAY,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,EAAE,CAAA;IACzF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;IAE3C,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE;YACJ,MAAM,EAAE,YAAY,CAAC,EAAE;YACvB,KAAK;YACL,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,WAAW;YACX,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,IAAI;SACM;KACzB,CAAA;AACH,CAAC"}

package/dist/webhook/signature.d.ts

@@ -0,0 +1,17 @@
+/** Why a delivery was refused, or that it was accepted. */
+export type VerificationResult = {
+    ok: true;
+} | {
+    ok: false;
+    reason: 'missing_signature' | 'malformed_signature' | 'missing_timestamp' | 'stale_timestamp' | 'bad_signature';
+};
+/** Default replay window: the platform's own documented example. */
+export declare const DEFAULT_MAX_SKEW_MS: number;
+/**
+ * Verify one delivery.
+ *
+ * `rawBody` must be the exact text the request carried. `now` is injected so the skew check is
+ * testable without waiting; production passes `Date.now()`.
+ */
+export declare function verifyDelivery(headers: Headers, rawBody: string, secret: string, now: number, maxSkewMs?: number): Promise<VerificationResult>;
+//# sourceMappingURL=signature.d.ts.map

package/dist/webhook/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/webhook/signature.ts"],"names":[],"mappings":"AAgBA,2DAA2D;AAC3D,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GACZ;IACE,EAAE,EAAE,KAAK,CAAA;IACT,MAAM,EACF,mBAAmB,GACnB,qBAAqB,GACrB,mBAAmB,GACnB,iBAAiB,GACjB,eAAe,CAAA;CACpB,CAAA;AAEL,oEAAoE;AACpE,eAAO,MAAM,mBAAmB,QAAgB,CAAA;AAIhD;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,SAAS,GAAE,MAA4B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAyB7B"}

package/dist/webhook/signature.js

@@ -0,0 +1,73 @@
+// Verifying an outbound-webhook delivery, over the RAW request bytes.
+//
+// The platform signs `"<timestamp>.<raw body>"` with the endpoint's own secret and sends the MAC
+// as `x-cat-factory-signature: v1=<hex>` beside `x-cat-factory-timestamp`. Two properties of that
+// contract decide how this is written:
+//
+//   - The timestamp is bound INTO the MAC, so it can be trusted, which is what makes a skew
+//     window a real replay defence rather than a field an attacker sets.
+//   - The MAC covers bytes, not a parsed value. So the body is read once, as text, and verified
+//     BEFORE any JSON parse. Re-serializing a parsed body to check it would compare a
+//     reconstruction against a signature over the original.
+//
+// The verdict is a discriminated result rather than a boolean because a receiver that cannot tell
+// "no signature was sent" from "the signature was wrong" cannot tell an unconfigured endpoint
+// from an attacker, and those need opposite reactions.
+/** Default replay window: the platform's own documented example. */
+export const DEFAULT_MAX_SKEW_MS = 5 * 60 * 1000;
+const encoder = new TextEncoder();
+/**
+ * Verify one delivery.
+ *
+ * `rawBody` must be the exact text the request carried. `now` is injected so the skew check is
+ * testable without waiting; production passes `Date.now()`.
+ */
+export async function verifyDelivery(headers, rawBody, secret, now, maxSkewMs = DEFAULT_MAX_SKEW_MS) {
+    const signature = headers.get('x-cat-factory-signature');
+    if (signature === null || signature.length === 0)
+        return { ok: false, reason: 'missing_signature' };
+    if (!signature.startsWith('v1='))
+        return { ok: false, reason: 'malformed_signature' };
+    const provided = hexToBytes(signature.slice('v1='.length));
+    if (provided === null)
+        return { ok: false, reason: 'malformed_signature' };
+    const timestampHeader = headers.get('x-cat-factory-timestamp');
+    const timestamp = timestampHeader === null ? Number.NaN : Number(timestampHeader);
+    if (!Number.isFinite(timestamp))
+        return { ok: false, reason: 'missing_timestamp' };
+    if (Math.abs(now - timestamp) > maxSkewMs)
+        return { ok: false, reason: 'stale_timestamp' };
+    const key = await crypto.subtle.importKey('raw', encoder.encode(secret), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    const expected = new Uint8Array(await crypto.subtle.sign('HMAC', key, encoder.encode(`${timestampHeader}.${rawBody}`)));
+    return equalBytes(expected, provided) ? { ok: true } : { ok: false, reason: 'bad_signature' };
+}
+/**
+ * Constant-time byte comparison.
+ *
+ * Hand-written rather than reached for from a library because workerd exposes no
+ * `timingSafeEqual` on the WebCrypto surface. The length check leaks only the LENGTH of the
+ * supplied signature, which the attacker already chose; the bytes themselves are compared with no
+ * early exit.
+ */
+function equalBytes(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++)
+        diff |= a[i] ^ b[i];
+    return diff === 0;
+}
+/** Decode a lowercase-or-uppercase hex string, or `null` if it is not one. */
+function hexToBytes(hex) {
+    if (hex.length === 0 || hex.length % 2 !== 0)
+        return null;
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < bytes.length; i++) {
+        const byte = Number.parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+        if (!Number.isInteger(byte))
+            return null;
+        bytes[i] = byte;
+    }
+    return /^[0-9a-fA-F]+$/.test(hex) ? bytes : null;
+}
+//# sourceMappingURL=signature.js.map

package/dist/webhook/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/webhook/signature.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,EAAE;AACF,iGAAiG;AACjG,kGAAkG;AAClG,uCAAuC;AACvC,EAAE;AACF,4FAA4F;AAC5F,yEAAyE;AACzE,gGAAgG;AAChG,sFAAsF;AACtF,4DAA4D;AAC5D,EAAE;AACF,kGAAkG;AAClG,8FAA8F;AAC9F,uDAAuD;AAevD,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAA;AAEhD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;AAEjC;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAgB,EAChB,OAAe,EACf,MAAc,EACd,GAAW,EACX,SAAS,GAAW,mBAAmB;IAEvC,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;IACxD,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAC9C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IACnD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IACrF,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA;IAC1D,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;IAE1E,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAA;IAC9D,MAAM,SAAS,GAAG,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;IACjF,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAA;IAClF,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,SAAS,CAAC,GAAG,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAA;IAE1F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EACtB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;IACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAC7B,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,GAAG,eAAe,IAAI,OAAO,EAAE,CAAC,CAAC,CACvF,CAAA;IAED,OAAO,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAA;AAC/F,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAK,CAAC,CAAC,CAAC,CAAY,GAAI,CAAC,CAAC,CAAC,CAAY,CAAA;IAC9E,OAAO,IAAI,KAAK,CAAC,CAAA;AACnB,CAAC;AAED,8EAA8E;AAC9E,SAAS,UAAU,CAAC,GAAW;IAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACzD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QAC7D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACxC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;IACjB,CAAC;IACD,OAAO,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AAClD,CAAC"}

package/dist/worker.d.ts

@@ -0,0 +1,21 @@
+import { type GatekeeperEnv } from './env.js';
+import type { GatekeeperPolicy } from './policy/compile.js';
+/** What a deployment supplies to get a Worker. */
+export interface GatekeeperWorkerOptions {
+    /**
+     * The tiers, the grants and the default, as the deployment wrote them.
+     *
+     * Compiled against the LIVE operation table on every assembly, so a policy naming a retired or
+     * above-scope operation refuses to serve rather than serving methods that 403.
+     */
+    policy: GatekeeperPolicy;
+}
+/**
+ * Build the Worker a deployment exports as its default.
+ *
+ * Everything it needs beyond the policy comes from the environment, so the returned handler is the
+ * same one this package tests: an operator's Worker and the suite in `test/` differ only in which
+ * policy they were given.
+ */
+export declare function createGatekeeperWorker(options: GatekeeperWorkerOptions): ExportedHandler<GatekeeperEnv>;
+//# sourceMappingURL=worker.d.ts.map

package/dist/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AA4BA,OAAO,EAAyD,KAAK,aAAa,EAAE,MAAM,UAAU,CAAA;AAIpG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAE3D,kDAAkD;AAClD,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,MAAM,EAAE,gBAAgB,CAAA;CACzB;AAwDD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,uBAAuB,GAC/B,eAAe,CAAC,aAAa,CAAC,CAqGhC"}

package/dist/worker.js

@@ -0,0 +1,155 @@
+// The Worker handler: five routes and a cron, and no logic of its own beyond translating between
+// HTTP and the Gatekeeper.
+//
+// It is a FACTORY over the deployment's policy rather than a module-level `export default`, which
+// is the whole shape of the base/template split. A deployment's entry point is then three lines
+// (its policy, this factory, and the re-exported Durable Object class), so upgrading the machinery
+// is a dependency bump instead of a re-merge against a file the operator has edited.
+//
+//   POST /webhook        the platform's outbound delivery receiver
+//   ALL  /rpc            the Cap'n Web endpoint the paired Cloudflare OS talks to
+//   POST /admin/enroll   re-assert this Worker's webhook registration on demand
+//   POST /admin/retire   revoke every key minted for one OS user, for offboarding
+//   GET  /health         liveness plus whether this deployment could serve at all
+//
+// Two conventions are worth stating because they look like sloppiness and are not.
+//
+// A REFUSED DELIVERY STILL ANSWERS 2xx-ADJACENT ONLY WHERE IT SHOULD. A delivery that fails its
+// signature check is a 401: it is not from the platform, and telling the sender otherwise would
+// make an attacker's probe indistinguishable from a real endpoint. Everything the platform DID
+// sign is a 202, duplicates and unrecognised families included, because the platform's delivery
+// contract retries a 5xx and gives up on a 4xx: reporting "I already have this one" as an error
+// would spend a receiver's retry budget arguing about a message it has already handled.
+//
+// THE RPC ROUTE IS BEARER-GATED even though the intended path is a Worker service binding, which
+// never traverses the internet. A Worker with a route attached is reachable by anyone who finds
+// it, and a capability surface whose only defence is obscurity is not one.
+import { newWorkersRpcResponse, RpcTarget } from 'capnweb';
+import { ConfigError, describeMissingBindings, missingBindings } from './env.js';
+import { GatekeeperError, PolicyError } from './errors.js';
+import { Gatekeeper } from './gatekeeper.js';
+/** The root capability: the only thing reachable before an actor is named. */
+class GatekeeperApi extends RpcTarget {
+    #gatekeeper;
+    constructor(gatekeeper) {
+        super();
+        this.#gatekeeper = gatekeeper;
+    }
+    connect(request) {
+        const actorId = typeof request?.actorId === 'string' ? request.actorId : '';
+        if (actorId.length === 0) {
+            throw new GatekeeperError('unknown_actor', 'connect() needs the OS user identity as `actorId`. It is the value every minted key is ' +
+                'stamped with, so a run can be traced back to a person.');
+        }
+        const actor = {
+            id: actorId,
+            ...(typeof request.label === 'string' ? { label: request.label } : {}),
+        };
+        return this.#gatekeeper.capabilityFor(actor);
+    }
+}
+function problem(status, reason, message) {
+    return Response.json({ error: { reason, message } }, { status });
+}
+/**
+ * Turn a configuration or policy failure into the refusal an operator can act on.
+ *
+ * Both are 503 rather than 500 because neither is a fault in the request: the deployment is not
+ * wired, which is exactly what the status class means, and the `reason` is what a monitor keys on.
+ */
+function refuseSetup(error) {
+    if (error instanceof ConfigError)
+        return problem(503, 'not_configured', error.message);
+    if (error instanceof PolicyError)
+        return problem(503, 'policy_invalid', error.message);
+    return null;
+}
+/**
+ * Build the Worker a deployment exports as its default.
+ *
+ * Everything it needs beyond the policy comes from the environment, so the returned handler is the
+ * same one this package tests: an operator's Worker and the suite in `test/` differ only in which
+ * policy they were given.
+ */
+export function createGatekeeperWorker(options) {
+    const { policy } = options;
+    return {
+        async fetch(request, env) {
+            const url = new URL(request.url);
+            try {
+                // Health runs BEFORE the assembly below, and asks the whole configuration rather than the
+                // two bindings that assembly happens to read. A monitor keyed on this route is asking
+                // "could a call served right now get past setup", and a Gatekeeper missing only its
+                // WEBHOOK_SECRET or OS_SHARED_TOKEN answers every /rpc call with a 503 while its liveness
+                // is perfect: green here and refusing everything there is the one answer this route must
+                // never give.
+                if (url.pathname === '/health') {
+                    const missing = missingBindings(env);
+                    if (missing.length > 0) {
+                        return problem(503, 'not_configured', describeMissingBindings(missing));
+                    }
+                    // Assembling IS the rest of the check: it compiles the policy against the live operation
+                    // table, and a policy that does not compile is a Gatekeeper that serves nothing.
+                    Gatekeeper.create(env, policy);
+                    return Response.json({ ok: true });
+                }
+                const gatekeeper = Gatekeeper.create(env, policy);
+                if (url.pathname === '/webhook') {
+                    if (request.method !== 'POST')
+                        return problem(405, 'method_not_allowed', 'POST only.');
+                    const outcome = await gatekeeper.takeDelivery(request, Date.now());
+                    if (outcome.handled === 'rejected') {
+                        return problem(401, outcome.reason, 'This delivery did not verify against the endpoint secret.');
+                    }
+                    if (outcome.handled === 'unparseable') {
+                        return problem(400, 'unparseable_delivery', 'The signed body is not a delivery envelope.');
+                    }
+                    return Response.json(outcome, { status: 202 });
+                }
+                if (!gatekeeper.authorize(request.headers.get('authorization'))) {
+                    return problem(401, 'unauthorized', 'Present the paired deployment’s shared token.');
+                }
+                if (url.pathname === '/admin/enroll') {
+                    if (request.method !== 'POST')
+                        return problem(405, 'method_not_allowed', 'POST only.');
+                    return Response.json(await gatekeeper.enroll());
+                }
+                // Offboarding. It sits on the admin surface rather than on a capability because it is a
+                // decision the OS deployment makes ABOUT a person, and an agent acting as one of them must
+                // not be able to make it for the others.
+                if (url.pathname === '/admin/retire') {
+                    if (request.method !== 'POST')
+                        return problem(405, 'method_not_allowed', 'POST only.');
+                    const actorId = url.searchParams.get('actorId') ?? '';
+                    if (actorId.length === 0) {
+                        return problem(400, 'unknown_actor', 'Name the OS user identity to retire as `?actorId=`. It is the same value connect() ' +
+                            'takes, and the value every key minted for them is stamped with.');
+                    }
+                    return Response.json(await gatekeeper.retire(actorId));
+                }
+                if (url.pathname === '/rpc') {
+                    return await newWorkersRpcResponse(request, new GatekeeperApi(gatekeeper));
+                }
+                return problem(404, 'no_such_route', `Nothing is served at ${url.pathname}.`);
+            }
+            catch (error) {
+                const refusal = refuseSetup(error);
+                if (refusal !== null)
+                    return refusal;
+                throw error;
+            }
+        },
+        /**
+         * Re-assert the webhook registration.
+         *
+         * A cron rather than a one-shot at first boot: the registration lives on the cat-factory side,
+         * where it can be edited, disabled or dropped by someone tidying a workspace, and a Gatekeeper
+         * that enrolled once would then go quiet with nothing failing. Re-asserting is idempotent by the
+         * caller-chosen id, so it can never displace another integration's endpoint.
+         */
+        async scheduled(_controller, env, ctx) {
+            ctx.waitUntil(Gatekeeper.create(env, policy).enroll());
+        },
+    };
+}
+//# sourceMappingURL=worker.js.map

package/dist/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../src/worker.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,2BAA2B;AAC3B,EAAE;AACF,kGAAkG;AAClG,gGAAgG;AAChG,mGAAmG;AACnG,qFAAqF;AACrF,EAAE;AACF,mEAAmE;AACnE,kFAAkF;AAClF,gFAAgF;AAChF,kFAAkF;AAClF,kFAAkF;AAClF,EAAE;AACF,mFAAmF;AACnF,EAAE;AACF,gGAAgG;AAChG,gGAAgG;AAChG,+FAA+F;AAC/F,gGAAgG;AAChG,gGAAgG;AAChG,wFAAwF;AACxF,EAAE;AACF,iGAAiG;AACjG,gGAAgG;AAChG,2EAA2E;AAE3E,OAAO,EAAE,qBAAqB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AAC1D,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,eAAe,EAAsB,MAAM,UAAU,CAAA;AACpG,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AA2B5C,8EAA8E;AAC9E,MAAM,aAAc,SAAQ,SAAS;IAC1B,WAAW,CAAY;IAEhC,YAAY,UAAsB;QAChC,KAAK,EAAE,CAAA;QACP,IAAI,CAAC,WAAW,GAAG,UAAU,CAAA;IAC/B,CAAC;IAED,OAAO,CAAC,OAAuB;QAC7B,MAAM,OAAO,GAAG,OAAO,OAAO,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAA;QAC3E,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,yFAAyF;gBACvF,wDAAwD,CAC3D,CAAA;QACH,CAAC;QACD,MAAM,KAAK,GAAU;YACnB,EAAE,EAAE,OAAO;YACX,GAAG,CAAC,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvE,CAAA;QACD,OAAO,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IAC9C,CAAC;CACF;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,MAAc,EAAE,OAAe;IAC9D,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAA;AAClE,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACtF,IAAI,KAAK,YAAY,WAAW;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IACtF,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAgC;IAEhC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;IAE1B,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,GAAkB;YAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;YAEhC,IAAI,CAAC;gBACH,0FAA0F;gBAC1F,sFAAsF;gBACtF,oFAAoF;gBACpF,0FAA0F;gBAC1F,yFAAyF;gBACzF,cAAc;gBACd,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC/B,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAA;oBACpC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvB,OAAO,OAAO,CAAC,GAAG,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAA;oBACzE,CAAC;oBACD,yFAAyF;oBACzF,iFAAiF;oBACjF,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;oBAC9B,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;gBACpC,CAAC;gBAED,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;gBAEjD,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;oBAChC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;wBAAE,OAAO,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAA;oBACtF,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;oBAClE,IAAI,OAAO,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;wBACnC,OAAO,OAAO,CACZ,GAAG,EACH,OAAO,CAAC,MAAM,EACd,2DAA2D,CAC5D,CAAA;oBACH,CAAC;oBACD,IAAI,OAAO,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;wBACtC,OAAO,OAAO,CACZ,GAAG,EACH,sBAAsB,EACtB,6CAA6C,CAC9C,CAAA;oBACH,CAAC;oBACD,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAA;gBAChD,CAAC;gBAED,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;oBAChE,OAAO,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,+CAA+C,CAAC,CAAA;gBACtF,CAAC;gBAED,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;oBACrC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;wBAAE,OAAO,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAA;oBACtF,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;gBACjD,CAAC;gBAED,wFAAwF;gBACxF,2FAA2F;gBAC3F,yCAAyC;gBACzC,IAAI,GAAG,CAAC,QAAQ,KAAK,eAAe,EAAE,CAAC;oBACrC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;wBAAE,OAAO,OAAO,CAAC,GAAG,EAAE,oBAAoB,EAAE,YAAY,CAAC,CAAA;oBACtF,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAA;oBACrD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACzB,OAAO,OAAO,CACZ,GAAG,EACH,eAAe,EACf,qFAAqF;4BACnF,iEAAiE,CACpE,CAAA;oBACH,CAAC;oBACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAA;gBACxD,CAAC;gBAED,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;oBAC5B,OAAO,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC,CAAA;gBAC5E,CAAC;gBAED,OAAO,OAAO,CAAC,GAAG,EAAE,eAAe,EAAE,wBAAwB,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAA;YAC/E,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;gBAClC,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,OAAO,CAAA;gBACpC,MAAM,KAAK,CAAA;YACb,CAAC;QACH,CAAC;QAED;;;;;;;WAOG;QACH,KAAK,CAAC,SAAS,CACb,WAAgC,EAChC,GAAkB,EAClB,GAAqB;YAErB,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;QACxD,CAAC;KACF,CAAA;AACH,CAAC"}

package/package.json

@@ -0,0 +1,62 @@
+{
+  "name": "@cat-factory/gatekeeper-worker",
+  "version": "0.3.1",
+  "description": "The Cloudflare OS Gatekeeper machinery for cat-factory as an installable library: policy-compiled Cap'n Web capabilities over the /api/v1 operation table, per-actor API-key minting, a verified outbound-webhook receiver and the approval inbox that answers every park a run stops on. A deployment supplies only its policy; deploy/gatekeeper is the template it copies.",
+  "keywords": [
+    "capnweb",
+    "cat-factory",
+    "cloudflare-os",
+    "cloudflare-workers",
+    "gatekeeper"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/kibertoad/cat-factory.git",
+    "directory": "sdk/gatekeeper-worker"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    },
+    "./policy": {
+      "types": "./dist/policy/index.d.ts",
+      "default": "./dist/policy/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "capnweb": "^0.10.0",
+    "@cat-factory/gatekeeper-bindings": "0.6.0",
+    "@cat-factory/sdk": "0.25.0"
+  },
+  "devDependencies": {
+    "@cloudflare/vitest-pool-workers": "^0.20.1",
+    "@cloudflare/workers-types": "^5.20260804.1",
+    "typescript": "7.0.2",
+    "vitest": "^4.1.10"
+  },
+  "peerDependencies": {
+    "@cloudflare/workers-types": ">=4"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -b tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit && tsc -p tsconfig.dev.json --noEmit",
+    "test": "vitest",
+    "test:run": "vitest run",
+    "test:live": "vitest run --config vitest.live.config.ts"
+  }
+}