@cats-inc/cats-platform 0.1.10 → 0.2.8

package/build/server/platform/auth/loginMethods.js

@@ -0,0 +1,19 @@
+import { normalizePlatformAccountEmail } from './googleAccount.js';
+export function summarizePlatformLoginMethods(state, accountId) {
+    const identities = state.identities.filter((identity) => identity.accountId === accountId);
+    const googleIdentity = identities.find((identity) => identity.provider === 'google') ?? null;
+    return {
+        localPassword: {
+            linked: identities.some((identity) => identity.provider === 'local_password'
+                && Boolean(identity.passwordHash)
+                && Boolean(identity.passwordHashAlgorithm)),
+        },
+        google: {
+            linked: googleIdentity !== null,
+            email: googleIdentity
+                ? normalizePlatformAccountEmail(googleIdentity.email)
+                : null,
+        },
+    };
+}
+//# sourceMappingURL=loginMethods.js.map

package/build/server/platform/auth/loginMethods.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loginMethods.js","sourceRoot":"","sources":["../../../../src/platform/auth/loginMethods.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AAmBnE,MAAM,UAAU,6BAA6B,CAC3C,KAAwB,EACxB,SAAiB;IAEjB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CACxC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS,CAC/C,CAAC;IACF,MAAM,cAAc,GAAG,UAAU,CAAC,IAAI,CACpC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAC7C,IAAI,IAAI,CAAC;IACV,OAAO;QACL,aAAa,EAAE;YACb,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CACnC,QAAQ,CAAC,QAAQ,KAAK,gBAAgB;mBACnC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;mBAC9B,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAC3C;SACF;QACD,MAAM,EAAE;YACN,MAAM,EAAE,cAAc,KAAK,IAAI;YAC/B,KAAK,EAAE,cAAc;gBACnB,CAAC,CAAC,6BAA6B,CAAC,cAAc,CAAC,KAAK,CAAC;gBACrD,CAAC,CAAC,IAAI;SACT;KACF,CAAC;AACJ,CAAC"}

package/build/server/platform/auth/securityEvents.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Secret-free identity-lifecycle security events.
+ *
+ * ADR-111 section 7 requires these to be emitted through an injected reporter
+ * so a later audit sink can persist the same events without rewriting the auth
+ * routes. The payload is deliberately narrow: stable Cats identifiers, an
+ * outcome, and a bounded reason code. Passwords, raw session or action tokens,
+ * Google credentials, and provider-token claims must never reach a reporter.
+ */
+export declare const PLATFORM_AUTH_SECURITY_EVENT_KINDS: readonly ["first_admin_created", "step_up_succeeded", "step_up_failed", "google_link_succeeded", "google_link_failed", "google_unlink_succeeded", "google_unlink_failed"];
+export type PlatformAuthSecurityEventKind = (typeof PLATFORM_AUTH_SECURITY_EVENT_KINDS)[number];
+export type PlatformAuthSecurityEventOutcome = 'success' | 'failure';
+export interface PlatformAuthSecurityEvent {
+    kind: PlatformAuthSecurityEventKind;
+    outcome: PlatformAuthSecurityEventOutcome;
+    occurredAt: string;
+    accountId: string | null;
+    sessionId: string | null;
+    reason: string | null;
+}
+export type PlatformAuthSecurityEventReporter = (event: PlatformAuthSecurityEvent) => void | Promise<void>;
+export interface CreatePlatformAuthSecurityEventInput {
+    kind: PlatformAuthSecurityEventKind;
+    outcome: PlatformAuthSecurityEventOutcome;
+    now: Date;
+    accountId?: string | null;
+    sessionId?: string | null;
+    reason?: string | null;
+}
+export declare function createPlatformAuthSecurityEvent(input: CreatePlatformAuthSecurityEventInput): PlatformAuthSecurityEvent;
+//# sourceMappingURL=securityEvents.d.ts.map

package/build/server/platform/auth/securityEvents.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityEvents.d.ts","sourceRoot":"","sources":["../../../../src/platform/auth/securityEvents.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,kCAAkC,2KAQrC,CAAC;AAEX,MAAM,MAAM,6BAA6B,GACvC,CAAC,OAAO,kCAAkC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtD,MAAM,MAAM,gCAAgC,GAAG,SAAS,GAAG,SAAS,CAAC;AAErE,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,gCAAgC,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,MAAM,iCAAiC,GAAG,CAC9C,KAAK,EAAE,yBAAyB,KAC7B,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1B,MAAM,WAAW,oCAAoC;IACnD,IAAI,EAAE,6BAA6B,CAAC;IACpC,OAAO,EAAE,gCAAgC,CAAC;IAC1C,GAAG,EAAE,IAAI,CAAC;IACV,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAID,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,oCAAoC,GAC1C,yBAAyB,CAS3B"}

package/build/server/platform/auth/securityEvents.js

@@ -0,0 +1,45 @@
+/**
+ * Secret-free identity-lifecycle security events.
+ *
+ * ADR-111 section 7 requires these to be emitted through an injected reporter
+ * so a later audit sink can persist the same events without rewriting the auth
+ * routes. The payload is deliberately narrow: stable Cats identifiers, an
+ * outcome, and a bounded reason code. Passwords, raw session or action tokens,
+ * Google credentials, and provider-token claims must never reach a reporter.
+ */
+export const PLATFORM_AUTH_SECURITY_EVENT_KINDS = [
+    'first_admin_created',
+    'step_up_succeeded',
+    'step_up_failed',
+    'google_link_succeeded',
+    'google_link_failed',
+    'google_unlink_succeeded',
+    'google_unlink_failed',
+];
+const MAX_REASON_LENGTH = 64;
+export function createPlatformAuthSecurityEvent(input) {
+    return {
+        kind: input.kind,
+        outcome: input.outcome,
+        occurredAt: input.now.toISOString(),
+        accountId: input.accountId ?? null,
+        sessionId: input.sessionId ?? null,
+        reason: normalizeReason(input.reason),
+    };
+}
+/**
+ * Reason codes are machine-readable slugs, never free text a caller supplied.
+ * Anything longer than a slug is dropped rather than truncated so an unexpected
+ * value cannot smuggle credential material into a log line.
+ */
+function normalizeReason(reason) {
+    const trimmed = reason?.trim();
+    if (!trimmed) {
+        return null;
+    }
+    if (trimmed.length > MAX_REASON_LENGTH || !/^[a-z0-9_]+$/u.test(trimmed)) {
+        return 'unspecified';
+    }
+    return trimmed;
+}
+//# sourceMappingURL=securityEvents.js.map

package/build/server/platform/auth/securityEvents.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"securityEvents.js","sourceRoot":"","sources":["../../../../src/platform/auth/securityEvents.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,qBAAqB;IACrB,mBAAmB;IACnB,gBAAgB;IAChB,uBAAuB;IACvB,oBAAoB;IACpB,yBAAyB;IACzB,sBAAsB;CACd,CAAC;AA6BX,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,MAAM,UAAU,+BAA+B,CAC7C,KAA2C;IAE3C,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC;KACtC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,eAAe,CAAC,MAAiC;IACxD,MAAM,OAAO,GAAG,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,GAAG,iBAAiB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACzE,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/build/server/platform/runtime/deliveryClient.d.ts

@@ -0,0 +1,111 @@
+/**
+ * A narrow client for the `cats-runtime` delivery API.
+ *
+ * The runtime is the only execution boundary, so every repository and artifact
+ * side effect goes through these endpoints rather than through a git or
+ * filesystem call made here.
+ *
+ * Responses are parsed defensively: this is a cross-repository contract, and a
+ * shape change in `cats-runtime` must degrade to "no evidence" rather than
+ * throw somewhere deep inside a supervised run.
+ *
+ * Note: `src/products/code/state/deliveryProxy.ts` predates this module and
+ * speaks the same endpoints. They should converge on this client; the Code
+ * proxy is left untouched here to keep this change out of another product tree.
+ */
+export interface RuntimeRepoSnapshot {
+    supported: boolean;
+    repository: boolean;
+    clean: boolean | null;
+    branch: string | null;
+    headOid: string | null;
+    stagedCount: number;
+    modifiedCount: number;
+    untrackedCount: number;
+}
+export interface RuntimeCommitOutcome {
+    state: string;
+    commitId: string | null;
+    blockedReasons: string[];
+}
+export interface RuntimeArtifactSummary {
+    id: string;
+    label: string | null;
+    path: string | null;
+    mediaType: string | null;
+}
+/**
+ * Outcome of one externally-visible publish action.
+ *
+ * `pending` is its own state rather than a kind of failure: a wait that has not
+ * finished has performed no side effect and must not be retried from the start,
+ * so the caller needs to tell it apart from a refusal.
+ */
+export interface RuntimePublishOutcome {
+    state: 'completed' | 'pending' | 'blocked';
+    /** Branch, pull-request URL, or preview URL, depending on the action. */
+    reference: string | null;
+    /** Set when `state` is `pending`; resumes the same runtime operation. */
+    pendingOperationId: string | null;
+    blockedReasons: string[];
+}
+export interface RuntimeDeliveryClient {
+    inspectRepo(input: {
+        workspacePath?: string | null;
+        sessionId?: string | null;
+    }): Promise<RuntimeRepoSnapshot>;
+    createCommit(input: {
+        workspacePath?: string | null;
+        sessionId?: string | null;
+        message: string;
+    }): Promise<RuntimeCommitOutcome>;
+    /** Non-mutating listing of a session's artifacts. Never publishes (FR-38). */
+    previewArtifacts(input: {
+        workspacePath?: string | null;
+        sessionId?: string | null;
+    }): Promise<RuntimeArtifactSummary[]>;
+    /**
+     * Pushes the current branch. `approvalRef` carries the Core approval id that
+     * authorized this, so the runtime records who allowed the side effect rather
+     * than being told only that someone did.
+     */
+    pushBranch(input: {
+        workspacePath?: string | null;
+        sessionId?: string | null;
+        approvalRef: string;
+    }): Promise<RuntimePublishOutcome>;
+    openPullRequest(input: {
+        workspacePath?: string | null;
+        sessionId?: string | null;
+        approvalRef: string;
+        title: string;
+        body: string;
+    }): Promise<RuntimePublishOutcome>;
+    /**
+     * Waits for the pull request's checks, bounded.
+     *
+     * Returns `pending` with an operation id when the budget runs out before the
+     * checks do, and `blocked` when a check actually failed — a red build is a
+     * real answer, not a timeout.
+     */
+    waitForChecks(input: {
+        workspacePath?: string | null;
+        sessionId?: string | null;
+        approvalRef: string;
+        timeoutMs?: number;
+        resumeOperationId?: string | null;
+    }): Promise<RuntimePublishOutcome>;
+    publishPreview(input: {
+        workspacePath?: string | null;
+        sessionId?: string | null;
+        approvalRef: string;
+    }): Promise<RuntimePublishOutcome>;
+}
+export interface CreateRuntimeDeliveryClientInput {
+    baseUrl: string;
+    apiKey?: string;
+    timeoutMs?: number;
+    fetchImpl?: typeof fetch;
+}
+export declare function createRuntimeDeliveryClient(input: CreateRuntimeDeliveryClientInput): RuntimeDeliveryClient;
+//# sourceMappingURL=deliveryClient.d.ts.map

package/build/server/platform/runtime/deliveryClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliveryClient.d.ts","sourceRoot":"","sources":["../../../../src/platform/runtime/deliveryClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;IAC3C,yEAAyE;IACzE,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,yEAAyE;IACzE,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,qBAAqB;IACpC,WAAW,CAAC,KAAK,EAAE;QAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CACvF,mBAAmB,CACpB,CAAC;IACF,YAAY,CAAC,KAAK,EAAE;QAClB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClC,8EAA8E;IAC9E,gBAAgB,CAAC,KAAK,EAAE;QACtB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACtC;;;;OAIG;IACH,UAAU,CAAC,KAAK,EAAE;QAChB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,eAAe,CAAC,KAAK,EAAE;QACrB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;KACd,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC;;;;;;OAMG;IACH,aAAa,CAAC,KAAK,EAAE;QACnB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACnC,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACnC,cAAc,CAAC,KAAK,EAAE;QACpB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;KACrB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAiJD,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,gCAAgC,GACtC,qBAAqB,CAsJvB"}

package/build/server/platform/runtime/deliveryClient.js

@@ -0,0 +1,289 @@
+/**
+ * A narrow client for the `cats-runtime` delivery API.
+ *
+ * The runtime is the only execution boundary, so every repository and artifact
+ * side effect goes through these endpoints rather than through a git or
+ * filesystem call made here.
+ *
+ * Responses are parsed defensively: this is a cross-repository contract, and a
+ * shape change in `cats-runtime` must degrade to "no evidence" rather than
+ * throw somewhere deep inside a supervised run.
+ *
+ * Note: `src/products/code/state/deliveryProxy.ts` predates this module and
+ * speaks the same endpoints. They should converge on this client; the Code
+ * proxy is left untouched here to keep this change out of another product tree.
+ */
+const DEFAULT_TIMEOUT_MS = 30_000;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function readString(value) {
+    return typeof value === 'string' && value.trim() !== '' ? value : null;
+}
+function readCount(value) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : 0;
+}
+function readBlockedReasons(value) {
+    if (!Array.isArray(value)) {
+        return [];
+    }
+    return value.flatMap((entry) => {
+        if (typeof entry === 'string') {
+            return [entry];
+        }
+        if (isRecord(entry)) {
+            return [readString(entry.code) ?? readString(entry.message) ?? 'blocked'];
+        }
+        return [];
+    });
+}
+function parseRepoSnapshot(body) {
+    const repo = isRecord(body) && isRecord(body.repo) ? body.repo : null;
+    if (repo === null) {
+        return {
+            supported: false,
+            repository: false,
+            clean: null,
+            branch: null,
+            headOid: null,
+            stagedCount: 0,
+            modifiedCount: 0,
+            untrackedCount: 0,
+        };
+    }
+    return {
+        supported: repo.supported === true,
+        repository: repo.repository === true,
+        clean: typeof repo.clean === 'boolean' ? repo.clean : null,
+        branch: readString(repo.branch),
+        headOid: readString(repo.headOid),
+        stagedCount: readCount(repo.stagedCount),
+        modifiedCount: readCount(repo.modifiedCount),
+        untrackedCount: readCount(repo.untrackedCount),
+    };
+}
+/**
+ * The runtime's states are wider than a publish cares about; anything that is
+ * not an explicit completion is treated as blocked so an ambiguous state can
+ * never be mistaken for a landed side effect.
+ */
+function readPublishState(value) {
+    const state = readString(value);
+    if (state === 'completed') {
+        return 'completed';
+    }
+    return state === 'degraded' || state === 'polling' ? 'pending' : 'blocked';
+}
+/**
+ * Interprets a checks wait.
+ *
+ * `completed` from the runtime only means the checks stopped running, so the
+ * conclusions still have to be read: a finished red build is a blocked publish,
+ * not a successful one.
+ */
+function parseChecksOutcome(body) {
+    const record = isRecord(body) ? body : {};
+    const state = readPublishState(record.state);
+    const operation = isRecord(record.operation) ? record.operation : {};
+    const pendingOperationId = readString(operation.operationId);
+    if (state === 'pending') {
+        return { state: 'pending', reference: null, pendingOperationId, blockedReasons: [] };
+    }
+    if (state !== 'completed') {
+        return {
+            state: 'blocked',
+            reference: null,
+            pendingOperationId,
+            blockedReasons: readBlockedReasons(record.blockedReasons),
+        };
+    }
+    const outputs = isRecord(record.outputs) ? record.outputs : {};
+    const checks = Array.isArray(outputs.checks) ? outputs.checks : [];
+    const failed = checks.filter((entry) => {
+        if (!isRecord(entry)) {
+            return false;
+        }
+        const conclusion = String(entry.conclusion ?? entry.state ?? '').toUpperCase();
+        return conclusion !== '' && conclusion !== 'SUCCESS' && conclusion !== 'NEUTRAL'
+            && conclusion !== 'SKIPPED';
+    });
+    if (failed.length > 0) {
+        return {
+            state: 'blocked',
+            reference: null,
+            pendingOperationId: null,
+            blockedReasons: failed.map((entry) => {
+                const record_ = entry;
+                const name = readString(record_.name) ?? 'check';
+                const conclusion = readString(record_.conclusion) ?? 'failed';
+                return `check_failed:${name}:${conclusion}`;
+            }),
+        };
+    }
+    return { state: 'completed', reference: null, pendingOperationId: null, blockedReasons: [] };
+}
+function parseArtifacts(body) {
+    if (!isRecord(body) || !Array.isArray(body.artifacts)) {
+        return [];
+    }
+    return body.artifacts.flatMap((entry) => {
+        if (!isRecord(entry)) {
+            return [];
+        }
+        // The runtime wraps published records; a preview returns the artifact
+        // directly. Accept either.
+        const artifact = isRecord(entry.artifact) ? entry.artifact : entry;
+        const id = readString(artifact.id);
+        if (id === null) {
+            return [];
+        }
+        return [{
+                id,
+                label: readString(artifact.label),
+                path: readString(artifact.path),
+                mediaType: readString(artifact.mediaType),
+            }];
+    });
+}
+export function createRuntimeDeliveryClient(input) {
+    const fetchImpl = input.fetchImpl ?? fetch;
+    const timeoutMs = input.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    async function post(path, body) {
+        const headers = { 'content-type': 'application/json' };
+        if (input.apiKey) {
+            headers.authorization = `Bearer ${input.apiKey}`;
+        }
+        const response = await fetchImpl(`${input.baseUrl}${path}`, {
+            method: 'POST',
+            headers,
+            body: JSON.stringify(body),
+            signal: AbortSignal.timeout(timeoutMs),
+        });
+        if (!response.ok) {
+            const text = await response.text().catch(() => '');
+            throw new Error(`Runtime delivery request failed: ${response.status} ${response.statusText}`
+                + (text ? ` — ${text.slice(0, 200)}` : ''));
+        }
+        return await response.json();
+    }
+    return {
+        async inspectRepo({ workspacePath, sessionId }) {
+            return parseRepoSnapshot(await post('/delivery/repo/status', {
+                action: 'inspect-repo-status',
+                ...(workspacePath ? { workspacePath } : {}),
+                ...(sessionId ? { sessionId } : {}),
+            }));
+        },
+        async createCommit({ workspacePath, sessionId, message }) {
+            const body = await post('/delivery/repo/commit', {
+                action: 'create-commit',
+                ...(workspacePath ? { workspacePath } : {}),
+                apply: true,
+                actorRole: 'owner',
+                approved: true,
+                // cats-runtime reads commit options from `repo`, not `context`.
+                // Golden-path sessions run in a runtime-managed isolated worktree. Cats
+                // stages that entire clean-baseline sandbox itself; the provider has no
+                // git/shell tool and cannot sweep the operator's original worktree.
+                repo: { message, stageAll: true },
+                context: { source: 'cats_work_golden_path', isolatedWorktree: true },
+                ...(sessionId ? { sessionId } : {}),
+            });
+            const record = isRecord(body) ? body : {};
+            const metadata = isRecord(record.metadata) ? record.metadata : {};
+            const commit = isRecord(metadata.commit) ? metadata.commit : {};
+            return {
+                state: readString(record.state) ?? 'unknown',
+                commitId: readString(commit.oid)
+                    ?? parseRepoSnapshot(body).headOid,
+                blockedReasons: readBlockedReasons(record.blockedReasons),
+            };
+        },
+        async pushBranch({ workspacePath, sessionId, approvalRef }) {
+            const body = await post('/delivery/repo/push', {
+                action: 'push-branch',
+                ...(workspacePath ? { workspacePath } : {}),
+                apply: true,
+                // cats-runtime authorizes delivery from top-level fields. Preserve the
+                // Core approval reference as delivery context for audit correlation.
+                actorRole: 'owner',
+                approved: true,
+                context: { approvalRef },
+                ...(sessionId ? { sessionId } : {}),
+            });
+            const record = isRecord(body) ? body : {};
+            const repo = parseRepoSnapshot(body);
+            return {
+                state: readPublishState(record.state),
+                reference: repo.branch,
+                pendingOperationId: null,
+                blockedReasons: readBlockedReasons(record.blockedReasons),
+            };
+        },
+        async openPullRequest({ workspacePath, sessionId, approvalRef, title, body: prBody }) {
+            const body = await post('/management/review/open-pr', {
+                ...(workspacePath ? { workspacePath } : {}),
+                apply: true,
+                actorClass: 'owner',
+                approvalRef,
+                ...(sessionId ? { sessionId } : {}),
+                target: { title, body: prBody },
+            });
+            const record = isRecord(body) ? body : {};
+            const result = isRecord(record.result) ? record.result : record;
+            return {
+                state: readPublishState(record.state ?? result.state),
+                reference: readString(result.url)
+                    ?? readString(result.pullRequestUrl)
+                    ?? readString(result.reference),
+                pendingOperationId: null,
+                blockedReasons: readBlockedReasons(record.blockedReasons ?? result.blockedReasons),
+            };
+        },
+        async waitForChecks({ workspacePath, sessionId, approvalRef, timeoutMs, resumeOperationId }) {
+            const body = resumeOperationId
+                ? await post(`/management/operations/${encodeURIComponent(resumeOperationId)}/resume`, {
+                    ...(timeoutMs === undefined ? {} : { timeoutMs }),
+                })
+                : await post('/management/review/wait-checks', {
+                    ...(workspacePath ? { workspacePath } : {}),
+                    apply: true,
+                    actorClass: 'owner',
+                    approvalRef,
+                    ...(sessionId ? { sessionId } : {}),
+                    ...(timeoutMs === undefined ? {} : { target: { timeoutMs } }),
+                });
+            return parseChecksOutcome(body);
+        },
+        async publishPreview({ workspacePath, sessionId, approvalRef }) {
+            const body = await post('/management/deployment/create', {
+                ...(workspacePath ? { workspacePath } : {}),
+                apply: true,
+                actorClass: 'owner',
+                approvalRef,
+                ...(sessionId ? { sessionId } : {}),
+            });
+            const record = isRecord(body) ? body : {};
+            const outputs = isRecord(record.outputs) ? record.outputs : {};
+            return {
+                state: readPublishState(record.state),
+                reference: readString(outputs.url)
+                    ?? readString(outputs.previewUrl)
+                    ?? readString(outputs.deploymentUrl),
+                pendingOperationId: null,
+                blockedReasons: readBlockedReasons(record.blockedReasons),
+            };
+        },
+        async previewArtifacts({ workspacePath, sessionId }) {
+            return parseArtifacts(await post('/delivery/artifacts/publish', {
+                action: 'publish-artifacts',
+                // `apply: false` resolves the session's artifacts without copying them,
+                // which is what keeps a declaration at `ready` rather than `published`.
+                apply: false,
+                ...(workspacePath ? { workspacePath } : {}),
+                ...(sessionId ? { sessionId } : {}),
+            }));
+        },
+    };
+}
+//# sourceMappingURL=deliveryClient.js.map

package/build/server/platform/runtime/deliveryClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliveryClient.js","sourceRoot":"","sources":["../../../../src/platform/runtime/deliveryClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAqGH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzE,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QACD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,CAAC;QAC5E,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa;IACtC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACtE,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO;YACL,SAAS,EAAE,KAAK;YAChB,UAAU,EAAE,KAAK;YACjB,KAAK,EAAE,IAAI;YACX,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,CAAC;YAChB,cAAc,EAAE,CAAC;SAClB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,SAAS,KAAK,IAAI;QAClC,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,KAAK,EAAE,OAAO,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;QAC1D,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC;QAC/B,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QACjC,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC;QACxC,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC;QAC5C,cAAc,EAAE,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,gBAAgB,CAAC,KAAc;IACtC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC1B,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAED;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,IAAa;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,MAAM,kBAAkB,GAAG,UAAU,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAE7D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC1B,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,SAAS,EAAE,IAAI;YACf,kBAAkB;YAClB,cAAc,EAAE,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC;SAC1D,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QACrC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/E,OAAO,UAAU,KAAK,EAAE,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS;eAC3E,UAAU,KAAK,SAAS,CAAC;IAChC,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,KAAK,EAAE,SAAS;YAChB,SAAS,EAAE,IAAI;YACf,kBAAkB,EAAE,IAAI;YACxB,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACnC,MAAM,OAAO,GAAG,KAAgC,CAAC;gBACjD,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC;gBACjD,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,QAAQ,CAAC;gBAC9D,OAAO,gBAAgB,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9C,CAAC,CAAC;SACH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC;AAC/F,CAAC;AAED,SAAS,cAAc,CAAC,IAAa;IACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;QACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,sEAAsE;QACtE,2BAA2B;QAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,MAAM,EAAE,GAAG,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,OAAO,CAAC;gBACN,EAAE;gBACF,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;gBACjC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAC/B,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;aAC1C,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAAuC;IAEvC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC;IAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAExD,KAAK,UAAU,IAAI,CAAC,IAAY,EAAE,IAA6B;QAC7D,MAAM,OAAO,GAA2B,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;QAC/E,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,aAAa,GAAG,UAAU,KAAK,CAAC,MAAM,EAAE,CAAC;QACnD,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,KAAK,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,IAAI,KAAK,CACb,oCAAoC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE;kBAC1E,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC3C,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,OAAO;QACL,KAAK,CAAC,WAAW,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE;YAC5C,OAAO,iBAAiB,CAAC,MAAM,IAAI,CAAC,uBAAuB,EAAE;gBAC3D,MAAM,EAAE,qBAAqB;gBAC7B,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC,CAAC;QACN,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE;YACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE;gBAC/C,MAAM,EAAE,eAAe;gBACvB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,KAAK,EAAE,IAAI;gBACX,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,IAAI;gBACd,gEAAgE;gBAChE,wEAAwE;gBACxE,wEAAwE;gBACxE,oEAAoE;gBACpE,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACjC,OAAO,EAAE,EAAE,MAAM,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,IAAI,EAAE;gBACpE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO;gBACL,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS;gBAC5C,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;uBAC3B,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO;gBACpC,cAAc,EAAE,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC;aAC1D,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE;YACxD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE;gBAC7C,MAAM,EAAE,aAAa;gBACrB,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,KAAK,EAAE,IAAI;gBACX,uEAAuE;gBACvE,qEAAqE;gBACrE,SAAS,EAAE,OAAO;gBAClB,QAAQ,EAAE,IAAI;gBACd,OAAO,EAAE,EAAE,WAAW,EAAE;gBACxB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;YACrC,OAAO;gBACL,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC;gBACrC,SAAS,EAAE,IAAI,CAAC,MAAM;gBACtB,kBAAkB,EAAE,IAAI;gBACxB,cAAc,EAAE,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC;aAC1D,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;YAClF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,4BAA4B,EAAE;gBACpD,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,KAAK,EAAE,IAAI;gBACX,UAAU,EAAE,OAAO;gBACnB,WAAW;gBACX,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE;aAChC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAChE,OAAO;gBACL,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC;gBACrD,SAAS,EAAE,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC;uBAC5B,UAAU,CAAC,MAAM,CAAC,cAAc,CAAC;uBACjC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;gBACjC,kBAAkB,EAAE,IAAI;gBACxB,cAAc,EAAE,kBAAkB,CAAC,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC;aACnF,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE;YACzF,MAAM,IAAI,GAAG,iBAAiB;gBAC5B,CAAC,CAAC,MAAM,IAAI,CAAC,0BAA0B,kBAAkB,CAAC,iBAAiB,CAAC,SAAS,EAAE;oBACrF,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;iBAClD,CAAC;gBACF,CAAC,CAAC,MAAM,IAAI,CAAC,gCAAgC,EAAE;oBAC7C,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC3C,KAAK,EAAE,IAAI;oBACX,UAAU,EAAE,OAAO;oBACnB,WAAW;oBACX,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC;iBAC9D,CAAC,CAAC;YACL,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,WAAW,EAAE;YAC5D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,+BAA+B,EAAE;gBACvD,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,KAAK,EAAE,IAAI;gBACX,UAAU,EAAE,OAAO;gBACnB,WAAW;gBACX,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC;YACH,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO;gBACL,KAAK,EAAE,gBAAgB,CAAC,MAAM,CAAC,KAAK,CAAC;gBACrC,SAAS,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC;uBAC7B,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC;uBAC9B,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC;gBACtC,kBAAkB,EAAE,IAAI;gBACxB,cAAc,EAAE,kBAAkB,CAAC,MAAM,CAAC,cAAc,CAAC;aAC1D,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE;YACjD,OAAO,cAAc,CAAC,MAAM,IAAI,CAAC,6BAA6B,EAAE;gBAC9D,MAAM,EAAE,mBAAmB;gBAC3B,wEAAwE;gBACxE,wEAAwE;gBACxE,KAAK,EAAE,KAAK;gBACZ,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3C,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpC,CAAC,CAAC,CAAC;QACN,CAAC;KACF,CAAC;AACJ,CAAC"}

package/build/server/platform/supervision/providerCapabilityBootstrapYaml.d.ts

@@ -1,4 +1,5 @@
 import { type ProviderCapabilityBootstrapConfigResult } from './providerCapabilityBootstrapConfig.js';
+export declare function serializeProviderCapabilityBootstrapConfigYaml(config: NonNullable<ProviderCapabilityBootstrapConfigResult['config']>): string;
 export declare function parseProviderCapabilityBootstrapConfigYaml(yamlText: string, options: {
     observedAt: string;
     configPath?: string | null;

package/build/server/platform/supervision/providerCapabilityBootstrapYaml.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providerCapabilityBootstrapYaml.d.ts","sourceRoot":"","sources":["../../../../src/platform/supervision/providerCapabilityBootstrapYaml.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,uCAAuC,EAC7C,MAAM,wCAAwC,CAAC;AAQhD,wBAAgB,0CAA0C,CACxD,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IACP,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GACA,uCAAuC,CAkBzC;AAED,wBAAgB,6CAA6C,CAAC,KAAK,EAAE;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC,GAAG,uCAAuC,CAiC1C"}
+{"version":3,"file":"providerCapabilityBootstrapYaml.d.ts","sourceRoot":"","sources":["../../../../src/platform/supervision/providerCapabilityBootstrapYaml.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,uCAAuC,EAC7C,MAAM,wCAAwC,CAAC;AAShD,wBAAgB,8CAA8C,CAC5D,MAAM,EAAE,WAAW,CAAC,uCAAuC,CAAC,QAAQ,CAAC,CAAC,GACrE,MAAM,CAYR;AAED,wBAAgB,0CAA0C,CACxD,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE;IACP,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,GACA,uCAAuC,CAkBzC;AAED,wBAAgB,6CAA6C,CAAC,KAAK,EAAE;IACnE,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACpC,GAAG,uCAAuC,CAiC1C"}

package/build/server/platform/supervision/providerCapabilityBootstrapYaml.js

@@ -3,6 +3,16 @@ import { existsSync, readFileSync } from 'node:fs';
 import { parseProviderCapabilityBootstrapConfigDocument, } from './providerCapabilityBootstrapConfig.js';
 const require = createRequire(import.meta.url);
 const yaml = require('js-yaml');
+export function serializeProviderCapabilityBootstrapConfigYaml(config) {
+    return yaml.dump({
+        version: config.version,
+        profiles: config.profiles,
+    }, {
+        noRefs: true,
+        lineWidth: 100,
+        sortKeys: false,
+    });
+}
 export function parseProviderCapabilityBootstrapConfigYaml(yamlText, options) {
     try {
         return parseProviderCapabilityBootstrapConfigDocument(yaml.load(yamlText), options);

package/build/server/platform/supervision/providerCapabilityBootstrapYaml.js.map

@@ -1 +1 @@
-{"version":3,"file":"providerCapabilityBootstrapYaml.js","sourceRoot":"","sources":["../../../../src/platform/supervision/providerCapabilityBootstrapYaml.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EACL,8CAA8C,GAE/C,MAAM,wCAAwC,CAAC;AAGhD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAE7B,CAAC;AAEF,MAAM,UAAU,0CAA0C,CACxD,QAAgB,EAChB,OAGC;IAED,IAAI,CAAC;QACH,OAAO,8CAA8C,CACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EACnB,OAAO,CACR,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE;gBACX,4BAA4B,CAAC;oBAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,KAAK;iBACN,CAAC;aACH;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6CAA6C,CAAC,KAI7D;IACC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,kBAAkB;YACnC,CAAC,CAAC,SAAS,KAAK,CAAC,kBAAkB,OAAO,KAAK,CAAC,UAAU,aAAa;YACvE,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE;gBACX;oBACE,EAAE,EACA,+CAA+C;wBAC/C,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC;oBAC5C,IAAI,EAAE,sCAAsC;oBAC5C,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,gBAAgB;oBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO,EACL,wDAAwD,KAAK,CAAC,UAAU,IAAI;wBAC5E,sCAAsC;wBACtC,IAAI;iBACP;aACF;SACF,CAAC;IACJ,CAAC;IAED,OAAO,0CAA0C,CAC/C,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,EACtC;QACE,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CACF,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,KAIrC;IACC,OAAO;QACL,EAAE,EAAE,8CAA8C,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;QAC9F,IAAI,EAAE,sCAAsC;QAC5C,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;QACzC,OAAO,EACL,sDAAsD;YACtD,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,KAAK;SACT,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;WACrB,SAAS,CAAC;AACjB,CAAC"}
+{"version":3,"file":"providerCapabilityBootstrapYaml.js","sourceRoot":"","sources":["../../../../src/platform/supervision/providerCapabilityBootstrapYaml.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EACL,8CAA8C,GAE/C,MAAM,wCAAwC,CAAC;AAGhD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,SAAS,CAG7B,CAAC;AAEF,MAAM,UAAU,8CAA8C,CAC5D,MAAsE;IAEtE,OAAO,IAAI,CAAC,IAAI,CACd;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,EACD;QACE,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,GAAG;QACd,QAAQ,EAAE,KAAK;KAChB,CACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,0CAA0C,CACxD,QAAgB,EAChB,OAGC;IAED,IAAI,CAAC;QACH,OAAO,8CAA8C,CACnD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EACnB,OAAO,CACR,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE;gBACX,4BAA4B,CAAC;oBAC3B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;oBAC9B,KAAK;iBACN,CAAC;aACH;SACF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6CAA6C,CAAC,KAI7D;IACC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,kBAAkB;YACnC,CAAC,CAAC,SAAS,KAAK,CAAC,kBAAkB,OAAO,KAAK,CAAC,UAAU,aAAa;YACvE,CAAC,CAAC,EAAE,CAAC;QACP,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE;gBACX;oBACE,EAAE,EACA,+CAA+C;wBAC/C,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC;oBAC5C,IAAI,EAAE,sCAAsC;oBAC5C,QAAQ,EAAE,SAAS;oBACnB,IAAI,EAAE,gBAAgB;oBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;oBAC5B,OAAO,EACL,wDAAwD,KAAK,CAAC,UAAU,IAAI;wBAC5E,sCAAsC;wBACtC,IAAI;iBACP;aACF;SACF,CAAC;IACJ,CAAC;IAED,OAAO,0CAA0C,CAC/C,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,EACtC;QACE,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CACF,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CAAC,KAIrC;IACC,OAAO;QACL,EAAE,EAAE,8CAA8C,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE;QAC9F,IAAI,EAAE,sCAAsC;QAC5C,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,cAAc;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,SAAS;QACzC,OAAO,EACL,sDAAsD;YACtD,CAAC,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;KAC7E,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAa;IAC7C,OAAO,KAAK;SACT,IAAI,EAAE;SACN,WAAW,EAAE;SACb,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC;SAC9B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;WACrB,SAAS,CAAC;AACjB,CAAC"}

package/build/server/platform/supervision/runtimeBoundary.d.ts

@@ -1,6 +1,6 @@
 import type { RuntimeClient, RuntimeMessageResult, RuntimeSendMessageInput, RuntimeSessionCreateInput, RuntimeSessionInfo } from '../runtime/client.js';
 import { type ToolBoundaryEvidenceSink } from './toolBoundary.js';
-import type { BudgetEnvelope, SupervisedToolManifest, SupervisionPolicySnapshot } from './contracts.js';
+import type { BudgetEnvelope, SupervisedToolManifest, SupervisionPolicySnapshot, SupervisionToolScope } from './contracts.js';
 export declare const RUNTIME_SESSION_CREATE_TOOL: "cats.runtime.session.create";
 export declare const RUNTIME_MESSAGE_SEND_TOOL: "cats.runtime.message.send";
 export declare const RUNTIME_SUPERVISION_BOUNDARY: "cats-supervision-runtime-boundary";
@@ -14,6 +14,16 @@ export interface RuntimeSupervisionContext {
     policySnapshot?: SupervisionPolicySnapshot;
     evidenceSink?: ToolBoundaryEvidenceSink;
     budget?: BudgetEnvelope;
+    /**
+     * The caller's effective permission envelope, intersected with the parent
+     * grant by the tool registry.
+     *
+     * Defaults to `broad_write`, which is what every caller assumed before this
+     * existed. A caller that knows its envelope is narrower should say so: that
+     * is what lets the boundary refuse with `E_TOOL_SCOPE_DENIED` instead of
+     * letting an under-permissioned run reach the provider.
+     */
+    policyToolScope?: SupervisionToolScope;
 }
 export interface SupervisedRuntimeSessionCreateInput {
     runtimeClient: RuntimeClient;

package/build/server/platform/supervision/runtimeBoundary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtimeBoundary.d.ts","sourceRoot":"","sources":["../../../../src/platform/supervision/runtimeBoundary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,EAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,mBAAmB,CAAC;AAI3B,OAAO,KAAK,EACV,cAAc,EACd,sBAAsB,EACtB,yBAAyB,EAE1B,MAAM,gBAAgB,CAAC;AAGxB,eAAO,MAAM,2BAA2B,EAAG,6BAAsC,CAAC;AAClF,eAAO,MAAM,yBAAyB,EAAG,2BAAoC,CAAC;AAC9E,eAAO,MAAM,4BAA4B,EAAG,mCAA4C,CAAC;AAEzF,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,YAAY,CAAC,EAAE,wBAAwB,CAAC;IACxC,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,MAAM,WAAW,mCAAmC;IAClD,aAAa,EAAE,aAAa,CAAC;IAC7B,KAAK,EAAE,yBAAyB,CAAC;IACjC,WAAW,EAAE,yBAAyB,CAAC;CACxC;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,uBAAuB,CAAC;IAChC,WAAW,EAAE,yBAAyB,CAAC;CACxC;AAED,qBAAa,+BAAgC,SAAQ,KAAK;IAEtD,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM;gBADrB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAQD,wBAAgB,iCAAiC,IAAI,sBAAsB,EAAE,CAiD5E;AAED,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,kBAAkB,CAAC,CAwB7B;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAgC/B"}
+{"version":3,"file":"runtimeBoundary.d.ts","sourceRoot":"","sources":["../../../../src/platform/supervision/runtimeBoundary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,EAEnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,mBAAmB,CAAC;AAI3B,OAAO,KAAK,EACV,cAAc,EACd,sBAAsB,EACtB,yBAAyB,EACzB,oBAAoB,EAErB,MAAM,gBAAgB,CAAC;AAGxB,eAAO,MAAM,2BAA2B,EAAG,6BAAsC,CAAC;AAClF,eAAO,MAAM,yBAAyB,EAAG,2BAAoC,CAAC;AAC9E,eAAO,MAAM,4BAA4B,EAAG,mCAA4C,CAAC;AAEzF,MAAM,WAAW,yBAAyB;IACxC,OAAO,EAAE,WAAW,GAAG,WAAW,GAAG,MAAM,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,cAAc,CAAC,EAAE,yBAAyB,CAAC;IAC3C,YAAY,CAAC,EAAE,wBAAwB,CAAC;IACxC,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACxC;AAED,MAAM,WAAW,mCAAmC;IAClD,aAAa,EAAE,aAAa,CAAC;IAC7B,KAAK,EAAE,yBAAyB,CAAC;IACjC,WAAW,EAAE,yBAAyB,CAAC;CACxC;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,aAAa,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,uBAAuB,CAAC;IAChC,WAAW,EAAE,yBAAyB,CAAC;CACxC;AAED,qBAAa,+BAAgC,SAAQ,KAAK;IAEtD,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM;gBADrB,QAAQ,EAAE,MAAM,EAChB,aAAa,EAAE,MAAM,EAC9B,OAAO,EAAE,MAAM;CAKlB;AAQD,wBAAgB,iCAAiC,IAAI,sBAAsB,EAAE,CAiD5E;AAED,wBAAsB,8BAA8B,CAClD,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC,kBAAkB,CAAC,CAwB7B;AAED,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,oBAAoB,CAAC,CAgC/B"}

package/build/server/platform/supervision/runtimeBoundary.js

@@ -74,7 +74,7 @@ export async function createSupervisedRuntimeSession(input) {
         actorRef: input.supervision.actorRef,
         grant: {
             parentToolScope: 'broad_write',
-            policyToolScope: 'broad_write',
+            policyToolScope: input.supervision.policyToolScope ?? 'broad_write',
         },
         policySnapshot: input.supervision.policySnapshot,
         execute: async (toolInput) => ({
@@ -98,7 +98,7 @@ export async function sendSupervisedRuntimeMessage(input) {
         actorRef: input.supervision.actorRef,
         grant: {
             parentToolScope: 'broad_write',
-            policyToolScope: 'broad_write',
+            policyToolScope: input.supervision.policyToolScope ?? 'broad_write',
         },
         policySnapshot: input.supervision.policySnapshot,
         execute: async (toolInput) => ({