@clowder-ai/plugin-contract 0.1.0-beta.1 → 0.1.0-beta.10

package/dist/wire/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/wire/envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACrB,WAAW,EACX,oBAAoB,EACpB,wBAAwB,EACxB,UAAU,EACV,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,aAAa,EACd,MAAM,aAAa,CAAC;AAMrB;;;;;GAKG;AACH,MAAM,WAAW,QAAQ;IACvB;;;;;;OAMG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,OAAO;IACjE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;KACnB,CAAC;CACH;AAMD;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,EAAE,CAAC,GAAG,OAAO;IACtE,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACnB,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;KACnB,CAAC;CACH;AAMD;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB,CAAC,CAAC,GAAG,OAAO;IAC9C,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;CACpB;AAMD;;;;;;;;;GASG;AACH,MAAM,WAAW,4BAA4B,CAAC,CAAC,GAAG,OAAO;IACvD,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;KAClB,CAAC;CACH;AAMD;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,2EAA2E;IAC3E,QAAQ,CAAC,EAAE,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAMD;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;CACxC;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;CACvC;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;CACtC;AAED;;;GAGG;AACH,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;CAC1C;AAMD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC5B;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;CACpC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC;IACxB,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;CAC/B;AAMD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,uBAAuB,GAC/B,yBAAyB,GACzB,wBAAwB,GACxB,mBAAmB,GACnB,uBAAuB,GACvB,2BAA2B,GAC3B,kBAAkB,GAClB,4BAA4B,GAC5B,6BAA6B,GAC7B,sBAAsB,GACtB,qBAAqB,GACrB,qBAAqB,CAAC;AAM1B;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAExD;;;GAGG;AACH,MAAM,MAAM,YAAY,GAAG,mBAAmB,GAAG,iBAAiB,CAAC"}

package/dist/wire/envelope.js

@@ -0,0 +1,19 @@
+/**
+ * Wire envelope family — closed outer JSON-RPC structures.
+ * Mechanized from #1165 R23/R24/R26.
+ *
+ * The outer envelope family is closed (additionalProperties: false):
+ *   - WireRequest:                  id + method + params (request/response)
+ *   - WireNotification:             method + params, no id (row 10 only in v0)
+ *   - WireSuccessResponse:          id + result, no error
+ *   - WireApplicationErrorResponse: id + error (with data)
+ *   - WireStandardErrorResponse:    id|null + error (no data)
+ *
+ * Result/error mutual exclusivity is structural — a response carries
+ * exactly one of result or error, never both, never neither.
+ *
+ * This module defines nothing new — every shape traces to a frozen
+ * #1165 revision.
+ */
+export {};
+//# sourceMappingURL=envelope.js.map

package/dist/wire/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/wire/envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG"}

package/dist/wire/errors.d.ts

@@ -0,0 +1,222 @@
+/**
+ * Wire-protocol error types — application and standard variants.
+ * Mechanized verbatim from the #1165 frozen shape.
+ *
+ * Application errors (R2 co-signed):
+ *   HANDSHAKE_REJECTED (-32090), DELIVERY_REJECTED (-32091),
+ *   DOMAIN_ERROR (-32092), DEADLINE_EXPIRED (-32093),
+ *   SNAPSHOT_UNAVAILABLE (-32094).
+ *
+ * Standard JSON-RPC errors (R29):
+ *   Parse error (-32700), Invalid Request (-32600, two id arms),
+ *   Method not found (-32601), Invalid params (-32602),
+ *   Internal error (-32603).
+ *
+ * Total: 5 application classes + 5 standard error body types = 10 error
+ * body types. Invalid Request has two id arms at the ENVELOPE level
+ * (valid-id echo vs null), but the error body is identical — yielding
+ * 11 closed envelope-level variants for byte-proof purposes.
+ *
+ * This module defines nothing new — every value traces to a frozen
+ * #1165 revision.
+ */
+import type { MessagingErrorCode } from '../generated/contract.generated.js';
+/** Handshake rejected by host or plugin. */
+export declare const HANDSHAKE_REJECTED_CODE: -32090;
+/** Delivery rejected — message could not be dispatched to handler. */
+export declare const DELIVERY_REJECTED_CODE: -32091;
+/** Domain-level error surfaced through the messaging layer. */
+export declare const DOMAIN_ERROR_CODE: -32092;
+/** Operation exceeded its time budget. */
+export declare const DEADLINE_EXPIRED_CODE: -32093;
+/** Requested snapshot state is not available. */
+export declare const SNAPSHOT_UNAVAILABLE_CODE: -32094;
+/** Canonical message for HANDSHAKE_REJECTED. */
+export declare const HANDSHAKE_REJECTED_MESSAGE: "handshake rejected";
+/** Canonical message for DELIVERY_REJECTED. */
+export declare const DELIVERY_REJECTED_MESSAGE: "delivery rejected";
+/** Canonical message for DOMAIN_ERROR. */
+export declare const DOMAIN_ERROR_MESSAGE: "domain error";
+/** Canonical message for DEADLINE_EXPIRED. */
+export declare const DEADLINE_EXPIRED_MESSAGE: "deadline expired";
+/** Canonical message for SNAPSHOT_UNAVAILABLE. */
+export declare const SNAPSHOT_UNAVAILABLE_MESSAGE: "snapshot unavailable";
+/** JSON could not be parsed. */
+export declare const PARSE_ERROR_CODE: -32700;
+/** The JSON sent is not a valid Request object. */
+export declare const INVALID_REQUEST_CODE: -32600;
+/** The method does not exist or is not available. */
+export declare const METHOD_NOT_FOUND_CODE: -32601;
+/** Invalid method parameter(s). */
+export declare const INVALID_PARAMS_CODE: -32602;
+/** Internal JSON-RPC error. */
+export declare const INTERNAL_ERROR_CODE: -32603;
+/** Canonical message for Parse error. */
+export declare const PARSE_ERROR_MESSAGE: "Parse error";
+/** Canonical message for Invalid Request. */
+export declare const INVALID_REQUEST_MESSAGE: "Invalid Request";
+/** Canonical message for Method not found. */
+export declare const METHOD_NOT_FOUND_MESSAGE: "Method not found";
+/** Canonical message for Invalid params. */
+export declare const INVALID_PARAMS_MESSAGE: "Invalid params";
+/** Canonical message for Internal error. */
+export declare const INTERNAL_ERROR_MESSAGE: "Internal error";
+/**
+ * Maps every wire error code to its canonical error message constant.
+ * Covers all 10 distinct codes (Invalid Request's two id-arms share one code).
+ */
+export declare const ERROR_CODE_TO_MESSAGE: {
+    readonly [-32090]: "handshake rejected";
+    readonly [-32091]: "delivery rejected";
+    readonly [-32092]: "domain error";
+    readonly [-32093]: "deadline expired";
+    readonly [-32094]: "snapshot unavailable";
+    readonly [-32700]: "Parse error";
+    readonly [-32600]: "Invalid Request";
+    readonly [-32601]: "Method not found";
+    readonly [-32602]: "Invalid params";
+    readonly [-32603]: "Internal error";
+};
+/**
+ * Closed set of reasons a handshake may be rejected.
+ * Mechanized from #1165 R2.
+ */
+export declare const HANDSHAKE_REJECT_REASONS: readonly ["MALFORMED_HELLO", "PACKAGE_MISMATCH", "CONTRACT_INCOMPATIBLE", "WIRE_INCOMPATIBLE", "AUTHORITY_VIOLATION", "DEADLINE_EXPIRED", "BINDING_REPLAY"];
+/** Union of all handshake-rejection reasons. */
+export type HandshakeRejectReason = (typeof HANDSHAKE_REJECT_REASONS)[number];
+/**
+ * Closed set of reasons a delivery may be rejected.
+ * Mechanized from #1165 R2.
+ */
+export declare const DELIVERY_REJECT_REASONS: readonly ["UNSUPPORTED_PAYLOAD", "NO_HANDLER", "PLUGIN_BUSY", "PLUGIN_INTERNAL"];
+/** Union of all delivery-rejection reasons. */
+export type DeliveryRejectReason = (typeof DELIVERY_REJECT_REASONS)[number];
+/**
+ * Closed set of reasons a snapshot may be unavailable.
+ * Mechanized from #1165 R2.
+ */
+export declare const SNAPSHOT_UNAVAILABLE_REASONS: readonly ["OVERSIZED_ITEM", "VIEW_EXPIRED", "STORE_UNAVAILABLE"];
+/** Union of all snapshot-unavailability reasons. */
+export type SnapshotUnavailableReason = (typeof SNAPSHOT_UNAVAILABLE_REASONS)[number];
+export type { MessagingErrorCode } from '../generated/contract.generated.js';
+/**
+ * HANDSHAKE_REJECTED (-32090).
+ * Sent when the handshake is refused for a well-typed reason.
+ */
+export type HandshakeRejectedError = {
+    readonly code: typeof HANDSHAKE_REJECTED_CODE;
+    readonly message: typeof HANDSHAKE_REJECTED_MESSAGE;
+    readonly data: {
+        readonly reason: HandshakeRejectReason;
+    };
+};
+/**
+ * DELIVERY_REJECTED (-32091).
+ * Sent when a dispatched message cannot be accepted by the plugin.
+ */
+export type DeliveryRejectedError = {
+    readonly code: typeof DELIVERY_REJECTED_CODE;
+    readonly message: typeof DELIVERY_REJECTED_MESSAGE;
+    readonly data: {
+        readonly reason: DeliveryRejectReason;
+    };
+};
+/**
+ * DOMAIN_ERROR (-32092).
+ * Domain-level failure surfaced through the messaging error taxonomy.
+ */
+export type DomainError = {
+    readonly code: typeof DOMAIN_ERROR_CODE;
+    readonly message: typeof DOMAIN_ERROR_MESSAGE;
+    readonly data: {
+        readonly code: MessagingErrorCode;
+    };
+};
+/**
+ * DEADLINE_EXPIRED (-32093).
+ * The operation's time budget was exhausted. Data is an empty object.
+ */
+export type DeadlineExpiredError = {
+    readonly code: typeof DEADLINE_EXPIRED_CODE;
+    readonly message: typeof DEADLINE_EXPIRED_MESSAGE;
+    readonly data: Record<string, never>;
+};
+/**
+ * SNAPSHOT_UNAVAILABLE (-32094).
+ * Requested snapshot state cannot be provided.
+ */
+export type SnapshotUnavailableError = {
+    readonly code: typeof SNAPSHOT_UNAVAILABLE_CODE;
+    readonly message: typeof SNAPSHOT_UNAVAILABLE_MESSAGE;
+    readonly data: {
+        readonly reason: SnapshotUnavailableReason;
+    };
+};
+/** Union of all 5 application wire errors. */
+export type ApplicationWireError = HandshakeRejectedError | DeliveryRejectedError | DomainError | DeadlineExpiredError | SnapshotUnavailableError;
+/**
+ * Parse error (-32700).
+ * JSON could not be parsed. id is always null, no data field.
+ */
+export type ParseError = {
+    readonly code: typeof PARSE_ERROR_CODE;
+    readonly message: typeof PARSE_ERROR_MESSAGE;
+};
+/**
+ * Invalid Request (-32600).
+ * The JSON sent is not a valid Request object.
+ *
+ * Two id arms at the envelope level (WireErrorResponse):
+ *   - valid-id arm: envelope id = byte-equal RequestId echo
+ *   - no-id arm: envelope id = null (true detection failure)
+ * The error body itself is identical for both arms.
+ */
+export type InvalidRequestError = {
+    readonly code: typeof INVALID_REQUEST_CODE;
+    readonly message: typeof INVALID_REQUEST_MESSAGE;
+};
+/**
+ * Method not found (-32601).
+ * The requested method does not exist.
+ * Envelope id = byte-equal RequestId echo.
+ */
+export type MethodNotFoundError = {
+    readonly code: typeof METHOD_NOT_FOUND_CODE;
+    readonly message: typeof METHOD_NOT_FOUND_MESSAGE;
+};
+/**
+ * Invalid params (-32602).
+ * Method parameters are invalid.
+ * Envelope id = byte-equal RequestId echo.
+ */
+export type InvalidParamsError = {
+    readonly code: typeof INVALID_PARAMS_CODE;
+    readonly message: typeof INVALID_PARAMS_MESSAGE;
+};
+/**
+ * Internal error (-32603).
+ * Internal JSON-RPC processing failure.
+ * Envelope id = byte-equal RequestId echo.
+ */
+export type InternalError = {
+    readonly code: typeof INTERNAL_ERROR_CODE;
+    readonly message: typeof INTERNAL_ERROR_MESSAGE;
+};
+/** Union of all 5 standard wire-error body types. */
+export type StandardWireError = ParseError | InvalidRequestError | MethodNotFoundError | InvalidParamsError | InternalError;
+/**
+ * The complete closed union of all wire-protocol error variants.
+ * 5 application + 6 standard = 11 variants.
+ *
+ * This type is exhaustive: any wire error returned on the protocol
+ * MUST be narrowable to one of these 11 shapes. Adding a variant
+ * requires a contract revision.
+ */
+export type WireError = ApplicationWireError | StandardWireError;
+/** All application error codes. */
+export declare const APPLICATION_ERROR_CODES: readonly [-32090, -32091, -32092, -32093, -32094];
+/** All standard JSON-RPC error codes. */
+export declare const STANDARD_ERROR_CODES: readonly [-32700, -32600, -32601, -32602, -32603];
+/** All wire error codes (application + standard). */
+export declare const ALL_ERROR_CODES: readonly [-32090, -32091, -32092, -32093, -32094, -32700, -32600, -32601, -32602, -32603];
+//# sourceMappingURL=errors.d.ts.map

package/dist/wire/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/wire/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAM7E,4CAA4C;AAC5C,eAAO,MAAM,uBAAuB,EAAG,CAAC,KAAc,CAAC;AAEvD,sEAAsE;AACtE,eAAO,MAAM,sBAAsB,EAAG,CAAC,KAAc,CAAC;AAEtD,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,EAAG,CAAC,KAAc,CAAC;AAEjD,0CAA0C;AAC1C,eAAO,MAAM,qBAAqB,EAAG,CAAC,KAAc,CAAC;AAErD,iDAAiD;AACjD,eAAO,MAAM,yBAAyB,EAAG,CAAC,KAAc,CAAC;AAMzD,gDAAgD;AAChD,eAAO,MAAM,0BAA0B,EAAG,oBAA6B,CAAC;AAExE,+CAA+C;AAC/C,eAAO,MAAM,yBAAyB,EAAG,mBAA4B,CAAC;AAEtE,0CAA0C;AAC1C,eAAO,MAAM,oBAAoB,EAAG,cAAuB,CAAC;AAE5D,8CAA8C;AAC9C,eAAO,MAAM,wBAAwB,EAAG,kBAA2B,CAAC;AAEpE,kDAAkD;AAClD,eAAO,MAAM,4BAA4B,EAAG,sBAA+B,CAAC;AAM5E,gCAAgC;AAChC,eAAO,MAAM,gBAAgB,EAAG,CAAC,KAAc,CAAC;AAEhD,mDAAmD;AACnD,eAAO,MAAM,oBAAoB,EAAG,CAAC,KAAc,CAAC;AAEpD,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,EAAG,CAAC,KAAc,CAAC;AAErD,mCAAmC;AACnC,eAAO,MAAM,mBAAmB,EAAG,CAAC,KAAc,CAAC;AAEnD,+BAA+B;AAC/B,eAAO,MAAM,mBAAmB,EAAG,CAAC,KAAc,CAAC;AAMnD,yCAAyC;AACzC,eAAO,MAAM,mBAAmB,EAAG,aAAsB,CAAC;AAE1D,6CAA6C;AAC7C,eAAO,MAAM,uBAAuB,EAAG,iBAA0B,CAAC;AAElE,8CAA8C;AAC9C,eAAO,MAAM,wBAAwB,EAAG,kBAA2B,CAAC;AAEpE,4CAA4C;AAC5C,eAAO,MAAM,sBAAsB,EAAG,gBAAyB,CAAC;AAEhE,4CAA4C;AAC5C,eAAO,MAAM,sBAAsB,EAAG,gBAAyB,CAAC;AAMhE;;;GAGG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;CAWxB,CAAC;AAMX;;;GAGG;AACH,eAAO,MAAM,wBAAwB,6JAQ3B,CAAC;AAEX,gDAAgD;AAChD,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9E;;;GAGG;AACH,eAAO,MAAM,uBAAuB,kFAK1B,CAAC;AAEX,+CAA+C;AAC/C,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,4BAA4B,kEAI/B,CAAC;AAEX,oDAAoD;AACpD,MAAM,MAAM,yBAAyB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAGtF,YAAY,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAM7E;;;GAGG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,QAAQ,CAAC,IAAI,EAAE,OAAO,uBAAuB,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,OAAO,0BAA0B,CAAC;IACpD,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAA;KAAE,CAAC;CAC3D,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,IAAI,EAAE,OAAO,sBAAsB,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,OAAO,yBAAyB,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAA;KAAE,CAAC;CAC1D,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,iBAAiB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,oBAAoB,CAAC;IAC9C,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;KAAE,CAAC;CACtD,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,IAAI,EAAE,OAAO,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,OAAO,wBAAwB,CAAC;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;CACtC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,QAAQ,CAAC,IAAI,EAAE,OAAO,yBAAyB,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,OAAO,4BAA4B,CAAC;IACtD,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,yBAAyB,CAAA;KAAE,CAAC;CAC/D,CAAC;AAEF,8CAA8C;AAC9C,MAAM,MAAM,oBAAoB,GAC5B,sBAAsB,GACtB,qBAAqB,GACrB,WAAW,GACX,oBAAoB,GACpB,wBAAwB,CAAC;AAM7B;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,IAAI,EAAE,OAAO,gBAAgB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,mBAAmB,CAAC;CAC9C,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,oBAAoB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,uBAAuB,CAAC;CAClD,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,qBAAqB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,OAAO,wBAAwB,CAAC;CACnD,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,IAAI,EAAE,OAAO,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,sBAAsB,CAAC;CACjD,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,OAAO,EAAE,OAAO,sBAAsB,CAAC;CACjD,CAAC;AAEF,qDAAqD;AACrD,MAAM,MAAM,iBAAiB,GACzB,UAAU,GACV,mBAAmB,GACnB,mBAAmB,GACnB,kBAAkB,GAClB,aAAa,CAAC;AAMlB;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,oBAAoB,GAAG,iBAAiB,CAAC;AAMjE,mCAAmC;AACnC,eAAO,MAAM,uBAAuB,mDAM1B,CAAC;AAEX,yCAAyC;AACzC,eAAO,MAAM,oBAAoB,mDAMvB,CAAC;AAEX,qDAAqD;AACrD,eAAO,MAAM,eAAe,2FAGlB,CAAC"}

package/dist/wire/errors.js

@@ -0,0 +1,153 @@
+/**
+ * Wire-protocol error types — application and standard variants.
+ * Mechanized verbatim from the #1165 frozen shape.
+ *
+ * Application errors (R2 co-signed):
+ *   HANDSHAKE_REJECTED (-32090), DELIVERY_REJECTED (-32091),
+ *   DOMAIN_ERROR (-32092), DEADLINE_EXPIRED (-32093),
+ *   SNAPSHOT_UNAVAILABLE (-32094).
+ *
+ * Standard JSON-RPC errors (R29):
+ *   Parse error (-32700), Invalid Request (-32600, two id arms),
+ *   Method not found (-32601), Invalid params (-32602),
+ *   Internal error (-32603).
+ *
+ * Total: 5 application classes + 5 standard error body types = 10 error
+ * body types. Invalid Request has two id arms at the ENVELOPE level
+ * (valid-id echo vs null), but the error body is identical — yielding
+ * 11 closed envelope-level variants for byte-proof purposes.
+ *
+ * This module defines nothing new — every value traces to a frozen
+ * #1165 revision.
+ */
+// ---------------------------------------------------------------------------
+// Application error codes (R2)
+// ---------------------------------------------------------------------------
+/** Handshake rejected by host or plugin. */
+export const HANDSHAKE_REJECTED_CODE = -32090;
+/** Delivery rejected — message could not be dispatched to handler. */
+export const DELIVERY_REJECTED_CODE = -32091;
+/** Domain-level error surfaced through the messaging layer. */
+export const DOMAIN_ERROR_CODE = -32092;
+/** Operation exceeded its time budget. */
+export const DEADLINE_EXPIRED_CODE = -32093;
+/** Requested snapshot state is not available. */
+export const SNAPSHOT_UNAVAILABLE_CODE = -32094;
+// ---------------------------------------------------------------------------
+// Application error messages (R2, exact const strings)
+// ---------------------------------------------------------------------------
+/** Canonical message for HANDSHAKE_REJECTED. */
+export const HANDSHAKE_REJECTED_MESSAGE = 'handshake rejected';
+/** Canonical message for DELIVERY_REJECTED. */
+export const DELIVERY_REJECTED_MESSAGE = 'delivery rejected';
+/** Canonical message for DOMAIN_ERROR. */
+export const DOMAIN_ERROR_MESSAGE = 'domain error';
+/** Canonical message for DEADLINE_EXPIRED. */
+export const DEADLINE_EXPIRED_MESSAGE = 'deadline expired';
+/** Canonical message for SNAPSHOT_UNAVAILABLE. */
+export const SNAPSHOT_UNAVAILABLE_MESSAGE = 'snapshot unavailable';
+// ---------------------------------------------------------------------------
+// Standard JSON-RPC error codes (R29)
+// ---------------------------------------------------------------------------
+/** JSON could not be parsed. */
+export const PARSE_ERROR_CODE = -32700;
+/** The JSON sent is not a valid Request object. */
+export const INVALID_REQUEST_CODE = -32600;
+/** The method does not exist or is not available. */
+export const METHOD_NOT_FOUND_CODE = -32601;
+/** Invalid method parameter(s). */
+export const INVALID_PARAMS_CODE = -32602;
+/** Internal JSON-RPC error. */
+export const INTERNAL_ERROR_CODE = -32603;
+// ---------------------------------------------------------------------------
+// Standard JSON-RPC error messages (R29, exact const strings)
+// ---------------------------------------------------------------------------
+/** Canonical message for Parse error. */
+export const PARSE_ERROR_MESSAGE = 'Parse error';
+/** Canonical message for Invalid Request. */
+export const INVALID_REQUEST_MESSAGE = 'Invalid Request';
+/** Canonical message for Method not found. */
+export const METHOD_NOT_FOUND_MESSAGE = 'Method not found';
+/** Canonical message for Invalid params. */
+export const INVALID_PARAMS_MESSAGE = 'Invalid params';
+/** Canonical message for Internal error. */
+export const INTERNAL_ERROR_MESSAGE = 'Internal error';
+// ---------------------------------------------------------------------------
+// Code-to-message mapping
+// ---------------------------------------------------------------------------
+/**
+ * Maps every wire error code to its canonical error message constant.
+ * Covers all 10 distinct codes (Invalid Request's two id-arms share one code).
+ */
+export const ERROR_CODE_TO_MESSAGE = {
+    [HANDSHAKE_REJECTED_CODE]: HANDSHAKE_REJECTED_MESSAGE,
+    [DELIVERY_REJECTED_CODE]: DELIVERY_REJECTED_MESSAGE,
+    [DOMAIN_ERROR_CODE]: DOMAIN_ERROR_MESSAGE,
+    [DEADLINE_EXPIRED_CODE]: DEADLINE_EXPIRED_MESSAGE,
+    [SNAPSHOT_UNAVAILABLE_CODE]: SNAPSHOT_UNAVAILABLE_MESSAGE,
+    [PARSE_ERROR_CODE]: PARSE_ERROR_MESSAGE,
+    [INVALID_REQUEST_CODE]: INVALID_REQUEST_MESSAGE,
+    [METHOD_NOT_FOUND_CODE]: METHOD_NOT_FOUND_MESSAGE,
+    [INVALID_PARAMS_CODE]: INVALID_PARAMS_MESSAGE,
+    [INTERNAL_ERROR_CODE]: INTERNAL_ERROR_MESSAGE,
+};
+// ---------------------------------------------------------------------------
+// Reject-reason taxonomies (closed enums, R2)
+// ---------------------------------------------------------------------------
+/**
+ * Closed set of reasons a handshake may be rejected.
+ * Mechanized from #1165 R2.
+ */
+export const HANDSHAKE_REJECT_REASONS = [
+    'MALFORMED_HELLO',
+    'PACKAGE_MISMATCH',
+    'CONTRACT_INCOMPATIBLE',
+    'WIRE_INCOMPATIBLE',
+    'AUTHORITY_VIOLATION',
+    'DEADLINE_EXPIRED',
+    'BINDING_REPLAY',
+];
+/**
+ * Closed set of reasons a delivery may be rejected.
+ * Mechanized from #1165 R2.
+ */
+export const DELIVERY_REJECT_REASONS = [
+    'UNSUPPORTED_PAYLOAD',
+    'NO_HANDLER',
+    'PLUGIN_BUSY',
+    'PLUGIN_INTERNAL',
+];
+/**
+ * Closed set of reasons a snapshot may be unavailable.
+ * Mechanized from #1165 R2.
+ */
+export const SNAPSHOT_UNAVAILABLE_REASONS = [
+    'OVERSIZED_ITEM',
+    'VIEW_EXPIRED',
+    'STORE_UNAVAILABLE',
+];
+// ---------------------------------------------------------------------------
+// All error codes collected for iteration
+// ---------------------------------------------------------------------------
+/** All application error codes. */
+export const APPLICATION_ERROR_CODES = [
+    HANDSHAKE_REJECTED_CODE,
+    DELIVERY_REJECTED_CODE,
+    DOMAIN_ERROR_CODE,
+    DEADLINE_EXPIRED_CODE,
+    SNAPSHOT_UNAVAILABLE_CODE,
+];
+/** All standard JSON-RPC error codes. */
+export const STANDARD_ERROR_CODES = [
+    PARSE_ERROR_CODE,
+    INVALID_REQUEST_CODE,
+    METHOD_NOT_FOUND_CODE,
+    INVALID_PARAMS_CODE,
+    INTERNAL_ERROR_CODE,
+];
+/** All wire error codes (application + standard). */
+export const ALL_ERROR_CODES = [
+    ...APPLICATION_ERROR_CODES,
+    ...STANDARD_ERROR_CODES,
+];
+//# sourceMappingURL=errors.js.map

package/dist/wire/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/wire/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,8EAA8E;AAC9E,+BAA+B;AAC/B,8EAA8E;AAE9E,4CAA4C;AAC5C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,KAAc,CAAC;AAEvD,sEAAsE;AACtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,KAAc,CAAC;AAEtD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAc,CAAC;AAEjD,0CAA0C;AAC1C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAc,CAAC;AAErD,iDAAiD;AACjD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,KAAc,CAAC;AAEzD,8EAA8E;AAC9E,uDAAuD;AACvD,8EAA8E;AAE9E,gDAAgD;AAChD,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAA6B,CAAC;AAExE,+CAA+C;AAC/C,MAAM,CAAC,MAAM,yBAAyB,GAAG,mBAA4B,CAAC;AAEtE,0CAA0C;AAC1C,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAuB,CAAC;AAE5D,8CAA8C;AAC9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAA2B,CAAC;AAEpE,kDAAkD;AAClD,MAAM,CAAC,MAAM,4BAA4B,GAAG,sBAA+B,CAAC;AAE5E,8EAA8E;AAC9E,sCAAsC;AACtC,8EAA8E;AAE9E,gCAAgC;AAChC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,CAAC;AAEhD,mDAAmD;AACnD,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAc,CAAC;AAEpD,qDAAqD;AACrD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,KAAc,CAAC;AAErD,mCAAmC;AACnC,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAc,CAAC;AAEnD,+BAA+B;AAC/B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,KAAc,CAAC;AAEnD,8EAA8E;AAC9E,8DAA8D;AAC9D,8EAA8E;AAE9E,yCAAyC;AACzC,MAAM,CAAC,MAAM,mBAAmB,GAAG,aAAsB,CAAC;AAE1D,6CAA6C;AAC7C,MAAM,CAAC,MAAM,uBAAuB,GAAG,iBAA0B,CAAC;AAElE,8CAA8C;AAC9C,MAAM,CAAC,MAAM,wBAAwB,GAAG,kBAA2B,CAAC;AAEpE,4CAA4C;AAC5C,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAyB,CAAC;AAEhE,4CAA4C;AAC5C,MAAM,CAAC,MAAM,sBAAsB,GAAG,gBAAyB,CAAC;AAEhE,8EAA8E;AAC9E,0BAA0B;AAC1B,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,CAAC,uBAAuB,CAAC,EAAE,0BAA0B;IACrD,CAAC,sBAAsB,CAAC,EAAE,yBAAyB;IACnD,CAAC,iBAAiB,CAAC,EAAE,oBAAoB;IACzC,CAAC,qBAAqB,CAAC,EAAE,wBAAwB;IACjD,CAAC,yBAAyB,CAAC,EAAE,4BAA4B;IACzD,CAAC,gBAAgB,CAAC,EAAE,mBAAmB;IACvC,CAAC,oBAAoB,CAAC,EAAE,uBAAuB;IAC/C,CAAC,qBAAqB,CAAC,EAAE,wBAAwB;IACjD,CAAC,mBAAmB,CAAC,EAAE,sBAAsB;IAC7C,CAAC,mBAAmB,CAAC,EAAE,sBAAsB;CACrC,CAAC;AAEX,8EAA8E;AAC9E,8CAA8C;AAC9C,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,iBAAiB;IACjB,kBAAkB;IAClB,uBAAuB;IACvB,mBAAmB;IACnB,qBAAqB;IACrB,kBAAkB;IAClB,gBAAgB;CACR,CAAC;AAKX;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,qBAAqB;IACrB,YAAY;IACZ,aAAa;IACb,iBAAiB;CACT,CAAC;AAKX;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,gBAAgB;IAChB,cAAc;IACd,mBAAmB;CACX,CAAC;AAqJX,8EAA8E;AAC9E,0CAA0C;AAC1C,8EAA8E;AAE9E,mCAAmC;AACnC,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,uBAAuB;IACvB,sBAAsB;IACtB,iBAAiB;IACjB,qBAAqB;IACrB,yBAAyB;CACjB,CAAC;AAEX,yCAAyC;AACzC,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;IACrB,mBAAmB;IACnB,mBAAmB;CACX,CAAC;AAEX,qDAAqD;AACrD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,GAAG,uBAAuB;IAC1B,GAAG,oBAAoB;CACf,CAAC"}

package/dist/wire/grants.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Grant snapshot types — GrantSnapshot for SessionBinding and host.grants.changed.
+ * Mechanized verbatim from #1165 frozen shape.
+ *
+ * GrantSnapshot represents the effective capability set at a point in time.
+ * It appears in two locations:
+ *   - SessionBinding (initial grant state at handshake)
+ *   - host.grants.changed notification (runtime grant mutations)
+ *
+ * grantRevision is strictly monotonic per plugin instance — the Host
+ * increments it on every grant mutation. A plugin that observes
+ * revision N may discard any notification with revision < N.
+ */
+import type { Capability } from '../generated/contract.generated.js';
+/**
+ * Maximum number of items in effectiveGrants.
+ * Derived from the 17-value Capability enum — a plugin cannot hold
+ * more capabilities than exist.
+ */
+export declare const MAX_GRANT_ITEMS: 17;
+/**
+ * GrantSnapshot captures a versioned capability set.
+ *
+ * Used in SessionBinding (handshake) and host.grants.changed (notification).
+ * The two fields are always paired and always travel together.
+ */
+export interface GrantSnapshot {
+    /**
+     * WireUInt53(0, 9_007_199_254_740_991).
+     * Monotonically increasing per plugin instance.
+     * The Host is the sole writer; plugins observe only.
+     */
+    readonly grantRevision: number;
+    /**
+     * Unique Capability[], 0..17 items.
+     * Duplicates are a protocol violation (Host guarantees uniqueness).
+     * Empty array is valid (plugin has no capabilities).
+     */
+    readonly effectiveGrants: readonly Capability[];
+}
+/**
+ * Frozen set of all valid Capability values, derived from the generated
+ * L0/L1/L2 capability arrays. Used for closed-enum membership checks.
+ */
+export declare const VALID_CAPABILITIES: ReadonlySet<string>;
+/**
+ * Validate that effectiveGrants:
+ *   1. Does not exceed MAX_GRANT_ITEMS (17).
+ *   2. Contains no duplicates.
+ *   3. Contains only valid Capability enum members (closed-enum check).
+ *
+ * Fail-closed: any unrecognized capability value returns false.
+ * This is an authorization boundary — fail-open would allow
+ * uncontrolled privilege escalation.
+ */
+export declare function validateEffectiveGrants(grants: readonly string[]): boolean;
+//# sourceMappingURL=grants.d.ts.map

package/dist/wire/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/wire/grants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAWrE;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAG,EAAW,CAAC;AAM3C;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,UAAU,EAAE,CAAC;CACjD;AAMD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAIjD,CAAC;AAEH;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAS1E"}

package/dist/wire/grants.js

@@ -0,0 +1,59 @@
+/**
+ * Grant snapshot types — GrantSnapshot for SessionBinding and host.grants.changed.
+ * Mechanized verbatim from #1165 frozen shape.
+ *
+ * GrantSnapshot represents the effective capability set at a point in time.
+ * It appears in two locations:
+ *   - SessionBinding (initial grant state at handshake)
+ *   - host.grants.changed notification (runtime grant mutations)
+ *
+ * grantRevision is strictly monotonic per plugin instance — the Host
+ * increments it on every grant mutation. A plugin that observes
+ * revision N may discard any notification with revision < N.
+ */
+import { L0_CAPABILITIES, L1_CAPABILITIES, L2_CAPABILITIES, } from '../generated/contract.generated.js';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/**
+ * Maximum number of items in effectiveGrants.
+ * Derived from the 17-value Capability enum — a plugin cannot hold
+ * more capabilities than exist.
+ */
+export const MAX_GRANT_ITEMS = 17;
+// ---------------------------------------------------------------------------
+// Validators
+// ---------------------------------------------------------------------------
+/**
+ * Frozen set of all valid Capability values, derived from the generated
+ * L0/L1/L2 capability arrays. Used for closed-enum membership checks.
+ */
+export const VALID_CAPABILITIES = new Set([
+    ...L0_CAPABILITIES,
+    ...L1_CAPABILITIES,
+    ...L2_CAPABILITIES,
+]);
+/**
+ * Validate that effectiveGrants:
+ *   1. Does not exceed MAX_GRANT_ITEMS (17).
+ *   2. Contains no duplicates.
+ *   3. Contains only valid Capability enum members (closed-enum check).
+ *
+ * Fail-closed: any unrecognized capability value returns false.
+ * This is an authorization boundary — fail-open would allow
+ * uncontrolled privilege escalation.
+ */
+export function validateEffectiveGrants(grants) {
+    if (grants.length > MAX_GRANT_ITEMS)
+        return false;
+    const seen = new Set();
+    for (const g of grants) {
+        if (!VALID_CAPABILITIES.has(g))
+            return false; // unknown capability
+        if (seen.has(g))
+            return false; // duplicate
+        seen.add(g);
+    }
+    return true;
+}
+//# sourceMappingURL=grants.js.map

package/dist/wire/grants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.js","sourceRoot":"","sources":["../../src/wire/grants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,GAChB,MAAM,oCAAoC,CAAC;AAE5C,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAW,CAAC;AA2B3C,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAS;IACrE,GAAG,eAAe;IAClB,GAAG,eAAe;IAClB,GAAG,eAAe;CACnB,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAyB;IAC/D,IAAI,MAAM,CAAC,MAAM,GAAG,eAAe;QAAE,OAAO,KAAK,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,CAAC,qBAAqB;QACnE,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,CAAgB,YAAY;QAC1D,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/wire/handshake-byte-bounds.d.ts

@@ -0,0 +1,69 @@
+/**
+ * Derived compact-JSON byte bounds for the beta.8 handshake rows.
+ *
+ * This production module owns only the published summary metadata. The
+ * generic byte-proof kernel remains test-only; keeping it out of the packed
+ * artifact prevents consumers from accidentally treating a proof generator
+ * as a runtime protocol dependency. The test-only templates independently
+ * recompute these values from the same closed grammar.
+ */
+/** Encoding families used for raw UTF-8 boundary evidence. */
+export declare const HANDSHAKE_BYTE_PROOF_ENCODING_FAMILIES: readonly ["ascii", "multibyte", "escaping"];
+export type HandshakeByteProofEncodingFamily = (typeof HANDSHAKE_BYTE_PROOF_ENCODING_FAMILIES)[number];
+/** One rejected N+1 candidate measured alongside a maximum frame. */
+export interface HandshakeNPlusOneByteProof {
+    readonly leaf: string;
+    readonly encodedBytes: number;
+    readonly fitsFrame: boolean;
+}
+/** Raw UTF-8 measurement for one encoding family. */
+export interface HandshakeEncodedByteProofCase {
+    readonly family: HandshakeByteProofEncodingFamily;
+    readonly encodedBytes: number;
+    readonly fitsFrame: boolean;
+    readonly nPlusOne: readonly HandshakeNPlusOneByteProof[];
+}
+/** Published max plus the raw-family proof cases from which it is derived. */
+export interface HandshakeEncodedByteProof {
+    readonly maxEncodedBytes: number;
+    readonly cases: readonly HandshakeEncodedByteProofCase[];
+}
+/** Per-row frame maxima consumed by the public method registry. */
+export interface HandshakeRowEncodedByteBounds {
+    readonly maxEncodedRequestBytes: number;
+    readonly maxEncodedResultBytes: number;
+    readonly maxEncodedErrorBytes: number;
+}
+/** Raw proof of the largest legal broker.hello request. */
+export declare const BROKER_HELLO_REQUEST_BYTE_PROOF: HandshakeEncodedByteProof;
+/** Raw proof of the largest legal broker.hello success result. */
+export declare const BROKER_HELLO_RESULT_BYTE_PROOF: HandshakeEncodedByteProof;
+/** Raw proof of the largest legal broker.ready request. */
+export declare const BROKER_READY_REQUEST_BYTE_PROOF: HandshakeEncodedByteProof;
+/** Raw proof of the largest handshake rejection envelope. */
+export declare const HANDSHAKE_REJECTED_ERROR_BYTE_PROOF: HandshakeEncodedByteProof;
+/** broker.ready succeeds with the exact JSON-RPC result `null`. */
+export declare const BROKER_READY_MAX_ENCODED_RESULT_BYTES: number;
+export declare const BROKER_HELLO_MAX_ENCODED_REQUEST_BYTES: number;
+export declare const BROKER_HELLO_MAX_ENCODED_RESULT_BYTES: number;
+export declare const BROKER_HELLO_MAX_ENCODED_ERROR_BYTES: number;
+export declare const BROKER_READY_MAX_ENCODED_REQUEST_BYTES: number;
+export declare const BROKER_READY_MAX_ENCODED_ERROR_BYTES: number;
+/**
+ * The exact per-row summary consumed by the registry. No byte value is
+ * hand-entered in the registry; all maxima are derived above from the closed
+ * grammar and raw UTF-8 serialization.
+ */
+export declare const HANDSHAKE_ROW_ENCODED_BYTE_BOUNDS: {
+    readonly 'broker.hello': {
+        readonly maxEncodedRequestBytes: number;
+        readonly maxEncodedResultBytes: number;
+        readonly maxEncodedErrorBytes: number;
+    };
+    readonly 'broker.ready': {
+        readonly maxEncodedRequestBytes: number;
+        readonly maxEncodedResultBytes: number;
+        readonly maxEncodedErrorBytes: number;
+    };
+};
+//# sourceMappingURL=handshake-byte-bounds.d.ts.map

package/dist/wire/handshake-byte-bounds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handshake-byte-bounds.d.ts","sourceRoot":"","sources":["../../src/wire/handshake-byte-bounds.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmBH,8DAA8D;AAC9D,eAAO,MAAM,sCAAsC,6CAIzC,CAAC;AAEX,MAAM,MAAM,gCAAgC,GAC1C,CAAC,OAAO,sCAAsC,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,qEAAqE;AACrE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,qDAAqD;AACrD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,MAAM,EAAE,gCAAgC,CAAC;IAClD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,0BAA0B,EAAE,CAAC;CAC1D;AAED,8EAA8E;AAC9E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,6BAA6B,EAAE,CAAC;CAC1D;AAED,mEAAmE;AACnE,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AA6KD,2DAA2D;AAC3D,eAAO,MAAM,+BAA+B,2BAG3C,CAAC;AAEF,kEAAkE;AAClE,eAAO,MAAM,8BAA8B,2BAG1C,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,+BAA+B,2BAG3C,CAAC;AAEF,6DAA6D;AAC7D,eAAO,MAAM,mCAAmC,2BAG/C,CAAC;AAEF,mEAAmE;AACnE,eAAO,MAAM,qCAAqC,QAGjD,CAAC;AAEF,eAAO,MAAM,sCAAsC,QACF,CAAC;AAClD,eAAO,MAAM,qCAAqC,QACF,CAAC;AACjD,eAAO,MAAM,oCAAoC,QACI,CAAC;AACtD,eAAO,MAAM,sCAAsC,QACF,CAAC;AAClD,eAAO,MAAM,oCAAoC,QACI,CAAC;AAEtD;;;;GAIG;AACH,eAAO,MAAM,iCAAiC;;;;;;;;;;;CAW6C,CAAC"}