@clowder-ai/plugin-contract 0.1.0-beta.1 → 0.1.0-beta.10

package/dist/wire/signal-byte-bounds.d.ts

@@ -0,0 +1,97 @@
+/**
+ * Derived compact-JSON byte bounds for the beta.9 C-2 events.publish row.
+ *
+ * Signal payloads are bounded by their compact encoded byte length, not by a
+ * string code-point count. That makes the generic leaf proof insufficient for
+ * row 13: this module constructs an exactly 64 KiB JSON object independently
+ * for ASCII, multibyte, and escaped-string families, then measures the entire
+ * request envelope and one rejected N+1 witness for every bounded leaf.
+ */
+import type { EventsPublishInput, EventsPublishResult } from '../generated/contract.generated.js';
+export declare const EVENTS_PUBLISH_BYTE_PROOF_ENCODING_FAMILIES: readonly ["ascii", "multibyte", "escaping"];
+export type EventsPublishByteProofEncodingFamily = (typeof EVENTS_PUBLISH_BYTE_PROOF_ENCODING_FAMILIES)[number];
+export declare const SIGNAL_TYPE_MAX_LENGTH: 128;
+export declare const SIGNAL_EVENT_ID_MAX_LENGTH: 128;
+export declare const SIGNAL_IDEMPOTENCY_KEY_MAX_LENGTH: 256;
+export declare const SIGNAL_OCCURRED_AT_MAX_LENGTH: 30;
+export declare const SIGNAL_SOURCE_HANDLE_MAX_LENGTH: 512;
+interface EventsPublishProofInput {
+    readonly requestId: string;
+    readonly input: EventsPublishInput;
+    readonly payloadEncodedBytes: number;
+}
+export interface EventsPublishNPlusOneWitness extends EventsPublishProofInput {
+    readonly leaf: 'requestId' | 'signalType' | 'eventId' | 'idempotencyKey' | 'occurredAt' | 'payloadBytes' | 'sourceHandle';
+    readonly encodedBytes: number;
+    readonly fitsFrame: boolean;
+}
+export interface EventsPublishEncodedByteProofCase {
+    readonly family: EventsPublishByteProofEncodingFamily;
+    readonly encodedBytes: number;
+    readonly fitsFrame: boolean;
+    readonly nPlusOne: readonly {
+        readonly leaf: string;
+        readonly encodedBytes: number;
+        readonly fitsFrame: boolean;
+    }[];
+}
+export interface EventsPublishEncodedByteProof {
+    readonly maxEncodedBytes: number;
+    readonly cases: readonly EventsPublishEncodedByteProofCase[];
+}
+export interface EventsPublishRowEncodedByteBounds {
+    readonly maxEncodedRequestBytes: number;
+    readonly maxEncodedResultBytes: number;
+    readonly maxEncodedErrorBytes: number;
+}
+export declare function eventsPublishMaximumInput(family: EventsPublishByteProofEncodingFamily): EventsPublishProofInput;
+export declare function eventsPublishNPlusOneInputs(family: EventsPublishByteProofEncodingFamily): readonly EventsPublishNPlusOneWitness[];
+export declare function eventsPublishMaximumResult(): {
+    readonly requestId: string;
+    readonly result: EventsPublishResult;
+};
+export declare function eventsPublishResultNPlusOneWitnesses(): readonly [{
+    readonly leaf: "requestId";
+    readonly requestId: string;
+    readonly result: EventsPublishResult;
+}, {
+    readonly leaf: "publicationId";
+    readonly result: {
+        readonly publicationId: string;
+        readonly disposition: import("../generated/contract.generated.js").EventsPublishDisposition;
+    };
+    readonly requestId: string;
+}];
+export declare function eventsPublishStandardErrorEnvelopes(): ({
+    arm: string;
+    id: null;
+    error: {
+        code: -32700 | -32600 | -32601 | -32602 | -32603;
+        message: "Parse error" | "Invalid Request" | "Method not found" | "Invalid params" | "Internal error";
+    };
+} | {
+    arm: string;
+    id: string;
+    error: {
+        code: -32700 | -32600 | -32601 | -32602 | -32603;
+        message: "Parse error" | "Invalid Request" | "Method not found" | "Invalid params" | "Internal error";
+    };
+})[];
+export declare function eventsPublishStandardErrorNPlusOneWitnesses(): {
+    id: string;
+    arm: string;
+    error: {
+        code: -32700 | -32600 | -32601 | -32602 | -32603;
+        message: "Parse error" | "Invalid Request" | "Method not found" | "Invalid params" | "Internal error";
+    };
+}[];
+export declare const EVENTS_PUBLISH_REQUEST_BYTE_PROOF: EventsPublishEncodedByteProof;
+export declare const EVENTS_PUBLISH_RESULT_BYTE_PROOF: EventsPublishEncodedByteProof;
+export declare const EVENTS_PUBLISH_ERROR_BYTE_PROOF: EventsPublishEncodedByteProof;
+export declare const EVENTS_PUBLISH_ROW_ENCODED_BYTE_BOUNDS: {
+    readonly maxEncodedRequestBytes: number;
+    readonly maxEncodedResultBytes: number;
+    readonly maxEncodedErrorBytes: number;
+};
+export {};
+//# sourceMappingURL=signal-byte-bounds.d.ts.map

package/dist/wire/signal-byte-bounds.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal-byte-bounds.d.ts","sourceRoot":"","sources":["../../src/wire/signal-byte-bounds.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,oCAAoC,CAAC;AAY5C,eAAO,MAAM,2CAA2C,6CAI9C,CAAC;AAEX,MAAM,MAAM,oCAAoC,GAC9C,CAAC,OAAO,2CAA2C,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,eAAO,MAAM,sBAAsB,EAAG,GAAY,CAAC;AACnD,eAAO,MAAM,0BAA0B,EAAG,GAAY,CAAC;AACvD,eAAO,MAAM,iCAAiC,EAAG,GAAY,CAAC;AAC9D,eAAO,MAAM,6BAA6B,EAAG,EAAW,CAAC;AACzD,eAAO,MAAM,+BAA+B,EAAG,GAAY,CAAC;AAI5D,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,4BAA6B,SAAQ,uBAAuB;IAC3E,QAAQ,CAAC,IAAI,EACT,WAAW,GACX,YAAY,GACZ,SAAS,GACT,gBAAgB,GAChB,YAAY,GACZ,cAAc,GACd,cAAc,CAAC;IACnB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,oCAAoC,CAAC;IACtD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS;QAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;KAC7B,EAAE,CAAC;CACL;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,SAAS,iCAAiC,EAAE,CAAC;CAC9D;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;CACvC;AAwED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,oCAAoC,GAC3C,uBAAuB,CAOzB;AAED,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,oCAAoC,GAC3C,SAAS,4BAA4B,EAAE,CAuDzC;AA6BD,wBAAgB,0BAA0B,IAAI;IAC5C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;CACtC,CAKA;AAED,wBAAgB,oCAAoC;;;qBARjC,mBAAmB;;;;;;;wBADhB,MAAM;GAmB3B;AAED,wBAAgB,mCAAmC;;;;;;;;;;;;;;KAWlD;AAED,wBAAgB,2CAA2C;;;;;;;IAI1D;AAoBD,eAAO,MAAM,iCAAiC,+BAAiB,CAAC;AAGhE,eAAO,MAAM,gCAAgC,+BAM5C,CAAC;AAEF,eAAO,MAAM,+BAA+B,+BAO3C,CAAC;AAEF,eAAO,MAAM,sCAAsC;;;;CAIG,CAAC"}

package/dist/wire/signal-byte-bounds.js

@@ -0,0 +1,229 @@
+/**
+ * Derived compact-JSON byte bounds for the beta.9 C-2 events.publish row.
+ *
+ * Signal payloads are bounded by their compact encoded byte length, not by a
+ * string code-point count. That makes the generic leaf proof insufficient for
+ * row 13: this module constructs an exactly 64 KiB JSON object independently
+ * for ASCII, multibyte, and escaped-string families, then measures the entire
+ * request envelope and one rejected N+1 witness for every bounded leaf.
+ */
+import { SIGNAL_PAYLOAD_MAX_ENCODED_BYTES } from '../validation/signals.js';
+import { MAX_FRAME_BYTES } from './constants.js';
+import { ERROR_CODE_TO_MESSAGE, INVALID_REQUEST_CODE, PARSE_ERROR_CODE, STANDARD_ERROR_CODES, } from './errors.js';
+import { REQUEST_ID_MAX_LENGTH } from './request-id.js';
+import { WIRE_UINT53_MAX } from './wire-uint53.js';
+export const EVENTS_PUBLISH_BYTE_PROOF_ENCODING_FAMILIES = [
+    'ascii',
+    'multibyte',
+    'escaping',
+];
+export const SIGNAL_TYPE_MAX_LENGTH = 128;
+export const SIGNAL_EVENT_ID_MAX_LENGTH = 128;
+export const SIGNAL_IDEMPOTENCY_KEY_MAX_LENGTH = 256;
+export const SIGNAL_OCCURRED_AT_MAX_LENGTH = 30;
+export const SIGNAL_SOURCE_HANDLE_MAX_LENGTH = 512;
+const MAX_OCCURRED_AT = '2026-08-09T04:12:31.123456789Z';
+function byteLength(value) {
+    return Buffer.byteLength(JSON.stringify(value), 'utf8');
+}
+function familyCharacter(family) {
+    switch (family) {
+        case 'ascii':
+            return 'a';
+        case 'multibyte':
+            return '😀';
+        case 'escaping':
+            // Quote is admissible in idempotency/source handles and requires JSON
+            // escaping. Control characters would be a larger escape but are forbidden
+            // by those leaf grammars, so using them would not prove a legal maximum.
+            return '"';
+    }
+}
+function exactPayload(family, extraBytes = 0) {
+    const targetBytes = SIGNAL_PAYLOAD_MAX_ENCODED_BYTES + extraBytes;
+    const dataCharacter = family === 'escaping' ? '\u0000' : familyCharacter(family);
+    const empty = { data: '', pad: '' };
+    const staticBytes = byteLength(empty);
+    const unitBytes = byteLength({ data: dataCharacter, pad: '' }) - staticBytes;
+    const repetitions = Math.floor((targetBytes - staticBytes) / unitBytes);
+    const data = dataCharacter.repeat(repetitions);
+    const usedBytes = byteLength({ data, pad: '' });
+    const payload = { data, pad: 'a'.repeat(targetBytes - usedBytes) };
+    if (byteLength(payload) !== targetBytes) {
+        throw new Error(`failed to construct exact ${targetBytes}-byte signal payload`);
+    }
+    return payload;
+}
+function signalType(length = SIGNAL_TYPE_MAX_LENGTH) {
+    return `a.${'a'.repeat(length - 2)}`;
+}
+function inputFor(family, overrides = {}, payloadExtraBytes = 0) {
+    const character = familyCharacter(family);
+    return {
+        signalType: signalType(),
+        eventId: 'a'.repeat(SIGNAL_EVENT_ID_MAX_LENGTH),
+        idempotencyKey: character.repeat(SIGNAL_IDEMPOTENCY_KEY_MAX_LENGTH),
+        occurredAt: MAX_OCCURRED_AT,
+        payload: exactPayload(family, payloadExtraBytes),
+        source: { handle: character.repeat(SIGNAL_SOURCE_HANDLE_MAX_LENGTH) },
+        ...overrides,
+    };
+}
+function requestFrame(requestId, input) {
+    return {
+        jsonrpc: '2.0',
+        id: requestId,
+        method: 'events.publish',
+        params: {
+            meta: { deadlineUnixMs: WIRE_UINT53_MAX },
+            input,
+        },
+    };
+}
+export function eventsPublishMaximumInput(family) {
+    const input = inputFor(family);
+    return {
+        requestId: 'a'.repeat(REQUEST_ID_MAX_LENGTH),
+        input,
+        payloadEncodedBytes: byteLength(input.payload),
+    };
+}
+export function eventsPublishNPlusOneInputs(family) {
+    const maximum = eventsPublishMaximumInput(family);
+    const character = familyCharacter(family);
+    const occurredAtNPlusOne = `${MAX_OCCURRED_AT.slice(0, -1)}0Z`;
+    const candidates = [
+        {
+            leaf: 'requestId',
+            requestId: 'a'.repeat(REQUEST_ID_MAX_LENGTH + 1),
+            input: maximum.input,
+        },
+        {
+            leaf: 'signalType',
+            input: inputFor(family, { signalType: signalType(SIGNAL_TYPE_MAX_LENGTH + 1) }),
+        },
+        {
+            leaf: 'eventId',
+            input: inputFor(family, { eventId: 'a'.repeat(SIGNAL_EVENT_ID_MAX_LENGTH + 1) }),
+        },
+        {
+            leaf: 'idempotencyKey',
+            input: inputFor(family, {
+                idempotencyKey: character.repeat(SIGNAL_IDEMPOTENCY_KEY_MAX_LENGTH + 1),
+            }),
+        },
+        {
+            leaf: 'occurredAt',
+            input: inputFor(family, { occurredAt: occurredAtNPlusOne }),
+        },
+        {
+            leaf: 'payloadBytes',
+            input: inputFor(family, {}, 1),
+        },
+        {
+            leaf: 'sourceHandle',
+            input: inputFor(family, {
+                source: { handle: character.repeat(SIGNAL_SOURCE_HANDLE_MAX_LENGTH + 1) },
+            }),
+        },
+    ];
+    return candidates.map(({ leaf, requestId = maximum.requestId, input }) => {
+        const encodedBytes = byteLength(requestFrame(requestId, input));
+        return {
+            leaf,
+            requestId,
+            input,
+            payloadEncodedBytes: byteLength(input.payload),
+            encodedBytes,
+            fitsFrame: encodedBytes <= MAX_FRAME_BYTES,
+        };
+    });
+}
+function requestProof() {
+    const cases = EVENTS_PUBLISH_BYTE_PROOF_ENCODING_FAMILIES.map((family) => {
+        const maximum = eventsPublishMaximumInput(family);
+        const encodedBytes = byteLength(requestFrame(maximum.requestId, maximum.input));
+        return {
+            family,
+            encodedBytes,
+            fitsFrame: encodedBytes <= MAX_FRAME_BYTES,
+            nPlusOne: eventsPublishNPlusOneInputs(family).map(({ leaf, encodedBytes: witnessBytes, fitsFrame }) => ({
+                leaf,
+                encodedBytes: witnessBytes,
+                fitsFrame,
+            })),
+        };
+    });
+    return {
+        maxEncodedBytes: Math.max(...cases.map(({ encodedBytes }) => encodedBytes)),
+        cases,
+    };
+}
+function responseFrame(requestId, result) {
+    return { jsonrpc: '2.0', id: requestId, result };
+}
+export function eventsPublishMaximumResult() {
+    return {
+        requestId: 'a'.repeat(REQUEST_ID_MAX_LENGTH),
+        result: { publicationId: 'a'.repeat(SIGNAL_EVENT_ID_MAX_LENGTH), disposition: 'duplicate' },
+    };
+}
+export function eventsPublishResultNPlusOneWitnesses() {
+    const maximum = eventsPublishMaximumResult();
+    return [
+        { ...maximum, leaf: 'requestId', requestId: 'a'.repeat(REQUEST_ID_MAX_LENGTH + 1) },
+        {
+            ...maximum,
+            leaf: 'publicationId',
+            result: { ...maximum.result, publicationId: 'a'.repeat(SIGNAL_EVENT_ID_MAX_LENGTH + 1) },
+        },
+    ];
+}
+export function eventsPublishStandardErrorEnvelopes() {
+    const requestId = 'a'.repeat(REQUEST_ID_MAX_LENGTH);
+    return STANDARD_ERROR_CODES.flatMap((code) => {
+        const error = { code, message: ERROR_CODE_TO_MESSAGE[code] };
+        const arm = `standard:${code}`;
+        if (code === PARSE_ERROR_CODE)
+            return [{ arm, id: null, error }];
+        if (code === INVALID_REQUEST_CODE) {
+            return [{ arm: `${arm}:null`, id: null, error }, { arm, id: requestId, error }];
+        }
+        return [{ arm, id: requestId, error }];
+    });
+}
+export function eventsPublishStandardErrorNPlusOneWitnesses() {
+    return eventsPublishStandardErrorEnvelopes()
+        .filter((envelope) => envelope.id !== null)
+        .map((envelope) => ({ ...envelope, id: 'a'.repeat(REQUEST_ID_MAX_LENGTH + 1) }));
+}
+function repeatedProof(encodedBytes, nPlusOne) {
+    return {
+        maxEncodedBytes: encodedBytes,
+        cases: EVENTS_PUBLISH_BYTE_PROOF_ENCODING_FAMILIES.map((family) => ({
+            family,
+            encodedBytes,
+            fitsFrame: encodedBytes <= MAX_FRAME_BYTES,
+            nPlusOne: nPlusOne.map((witness) => ({
+                ...witness,
+                fitsFrame: witness.encodedBytes <= MAX_FRAME_BYTES,
+            })),
+        })),
+    };
+}
+export const EVENTS_PUBLISH_REQUEST_BYTE_PROOF = requestProof();
+const maximumResult = eventsPublishMaximumResult();
+export const EVENTS_PUBLISH_RESULT_BYTE_PROOF = repeatedProof(byteLength(responseFrame(maximumResult.requestId, maximumResult.result)), eventsPublishResultNPlusOneWitnesses().map(({ leaf, requestId, result }) => ({
+    leaf,
+    encodedBytes: byteLength(responseFrame(requestId, result)),
+})));
+export const EVENTS_PUBLISH_ERROR_BYTE_PROOF = repeatedProof(Math.max(...eventsPublishStandardErrorEnvelopes().map(({ id, error }) => byteLength({ jsonrpc: '2.0', id, error }))), eventsPublishStandardErrorNPlusOneWitnesses().map(({ arm, id, error }) => ({
+    leaf: `${arm}.requestId`,
+    encodedBytes: byteLength({ jsonrpc: '2.0', id, error }),
+})));
+export const EVENTS_PUBLISH_ROW_ENCODED_BYTE_BOUNDS = {
+    maxEncodedRequestBytes: EVENTS_PUBLISH_REQUEST_BYTE_PROOF.maxEncodedBytes,
+    maxEncodedResultBytes: EVENTS_PUBLISH_RESULT_BYTE_PROOF.maxEncodedBytes,
+    maxEncodedErrorBytes: EVENTS_PUBLISH_ERROR_BYTE_PROOF.maxEncodedBytes,
+};
+//# sourceMappingURL=signal-byte-bounds.js.map

package/dist/wire/signal-byte-bounds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signal-byte-bounds.js","sourceRoot":"","sources":["../../src/wire/signal-byte-bounds.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,OAAO,EAAE,gCAAgC,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,CAAC,MAAM,2CAA2C,GAAG;IACzD,OAAO;IACP,WAAW;IACX,UAAU;CACF,CAAC;AAKX,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAY,CAAC;AACnD,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAY,CAAC;AACvD,MAAM,CAAC,MAAM,iCAAiC,GAAG,GAAY,CAAC;AAC9D,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAW,CAAC;AACzD,MAAM,CAAC,MAAM,+BAA+B,GAAG,GAAY,CAAC;AAE5D,MAAM,eAAe,GAAG,gCAAgC,CAAC;AA2CzD,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,MAA4C;IACnE,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,GAAG,CAAC;QACb,KAAK,WAAW;YACd,OAAO,IAAI,CAAC;QACd,KAAK,UAAU;YACb,sEAAsE;YACtE,0EAA0E;YAC1E,yEAAyE;YACzE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CACnB,MAA4C,EAC5C,UAAU,GAAG,CAAC;IAEd,MAAM,WAAW,GAAG,gCAAgC,GAAG,UAAU,CAAC;IAClE,MAAM,aAAa,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACpC,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC;IAC7E,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,SAAS,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,UAAU,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC;IACnE,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,WAAW,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,6BAA6B,WAAW,sBAAsB,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,SAAiB,sBAAsB;IACzD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CACf,MAA4C,EAC5C,YAAyC,EAAE,EAC3C,iBAAiB,GAAG,CAAC;IAErB,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO;QACL,UAAU,EAAE,UAAU,EAAE;QACxB,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,0BAA0B,CAAC;QAC/C,cAAc,EAAE,SAAS,CAAC,MAAM,CAAC,iCAAiC,CAAC;QACnE,UAAU,EAAE,eAAe;QAC3B,OAAO,EAAE,YAAY,CAAC,MAAM,EAAE,iBAAiB,CAAC;QAChD,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,+BAA+B,CAAC,EAAE;QACrE,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,SAAiB,EAAE,KAAyB;IAChE,OAAO;QACL,OAAO,EAAE,KAAK;QACd,EAAE,EAAE,SAAS;QACb,MAAM,EAAE,gBAAgB;QACxB,MAAM,EAAE;YACN,IAAI,EAAE,EAAE,cAAc,EAAE,eAAe,EAAE;YACzC,KAAK;SACN;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAA4C;IAE5C,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAC5C,KAAK;QACL,mBAAmB,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,MAA4C;IAE5C,MAAM,OAAO,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,kBAAkB,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/D,MAAM,UAAU,GAIX;QACH;YACE,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,GAAG,CAAC,CAAC;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK;SACrB;QACD;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC,sBAAsB,GAAG,CAAC,CAAC,EAAE,CAAC;SAChF;QACD;YACE,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,0BAA0B,GAAG,CAAC,CAAC,EAAE,CAAC;SACjF;QACD;YACE,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACtB,cAAc,EAAE,SAAS,CAAC,MAAM,CAAC,iCAAiC,GAAG,CAAC,CAAC;aACxE,CAAC;SACH;QACD;YACE,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,CAAC;SAC5D;QACD;YACE,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;SAC/B;QACD;YACE,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE;gBACtB,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,+BAA+B,GAAG,CAAC,CAAC,EAAE;aAC1E,CAAC;SACH;KACF,CAAC;IAEF,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE;QACvE,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QAChE,OAAO;YACL,IAAI;YACJ,SAAS;YACT,KAAK;YACL,mBAAmB,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC;YAC9C,YAAY;YACZ,SAAS,EAAE,YAAY,IAAI,eAAe;SAC3C,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,2CAA2C,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACvE,MAAM,OAAO,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAChF,OAAO;YACL,MAAM;YACN,YAAY;YACZ,SAAS,EAAE,YAAY,IAAI,eAAe;YAC1C,QAAQ,EAAE,2BAA2B,CAAC,MAAM,CAAC,CAAC,GAAG,CAC/C,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;gBACpD,IAAI;gBACJ,YAAY,EAAE,YAAY;gBAC1B,SAAS;aACV,CAAC,CACH;SACF,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO;QACL,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC;QAC3E,KAAK;KACN,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB,EAAE,MAA2B;IACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,0BAA0B;IAIxC,OAAO;QACL,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC;QAC5C,MAAM,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,0BAA0B,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE;KAC5F,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oCAAoC;IAClD,MAAM,OAAO,GAAG,0BAA0B,EAAE,CAAC;IAC7C,OAAO;QACL,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,GAAG,CAAC,CAAC,EAAE;QACnF;YACE,GAAG,OAAO;YACV,IAAI,EAAE,eAAe;YACrB,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,0BAA0B,GAAG,CAAC,CAAC,EAAE;SACzF;KACO,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mCAAmC;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC;IACpD,OAAO,oBAAoB,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,GAAG,GAAG,YAAY,IAAI,EAAE,CAAC;QAC/B,IAAI,IAAI,KAAK,gBAAgB;YAAE,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAClC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,2CAA2C;IACzD,OAAO,mCAAmC,EAAE;SACzC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,IAAI,CAAC;SAC1C,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,qBAAqB,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,aAAa,CACpB,YAAoB,EACpB,QAA6E;IAE7E,OAAO;QACL,eAAe,EAAE,YAAY;QAC7B,KAAK,EAAE,2CAA2C,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAClE,MAAM;YACN,YAAY;YACZ,SAAS,EAAE,YAAY,IAAI,eAAe;YAC1C,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBACnC,GAAG,OAAO;gBACV,SAAS,EAAE,OAAO,CAAC,YAAY,IAAI,eAAe;aACnD,CAAC,CAAC;SACJ,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,iCAAiC,GAAG,YAAY,EAAE,CAAC;AAEhE,MAAM,aAAa,GAAG,0BAA0B,EAAE,CAAC;AACnD,MAAM,CAAC,MAAM,gCAAgC,GAAG,aAAa,CAC3D,UAAU,CAAC,aAAa,CAAC,aAAa,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,EACxE,oCAAoC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI;IACJ,YAAY,EAAE,UAAU,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;CAC3D,CAAC,CAAC,CACJ,CAAC;AAEF,MAAM,CAAC,MAAM,+BAA+B,GAAG,aAAa,CAC1D,IAAI,CAAC,GAAG,CAAC,GAAG,mCAAmC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CACtE,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAC7C,2CAA2C,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,EAAE,GAAG,GAAG,YAAY;IACxB,YAAY,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;CACxD,CAAC,CAAC,CACJ,CAAC;AAEF,MAAM,CAAC,MAAM,sCAAsC,GAAG;IACpD,sBAAsB,EAAE,iCAAiC,CAAC,eAAe;IACzE,qBAAqB,EAAE,gCAAgC,CAAC,eAAe;IACvE,oBAAoB,EAAE,+BAA+B,CAAC,eAAe;CACjB,CAAC"}

package/dist/wire/wire-uint53.d.ts

@@ -0,0 +1,26 @@
+/**
+ * WireUInt53 — the single contract-owned numeric profile.
+ * Mechanized from the #1165 frozen shape.
+ *
+ * Raw JSON lexeme: canonical decimal digits 0|[1-9][0-9]*
+ * No sign, no decimal point, no exponent, no leading zeros.
+ * Raw token length ≤ 16 characters.
+ * Parsed value: non-negative safe integer.
+ */
+/** Maximum safe integer (2^53 - 1). */
+export declare const WIRE_UINT53_MAX: 9007199254740991;
+/** Pattern for canonical decimal integer raw tokens. */
+export declare const WIRE_UINT53_RAW_PATTERN: RegExp;
+/** Maximum raw token length (digit count of 2^53-1). */
+export declare const WIRE_UINT53_MAX_RAW_LENGTH: 16;
+/**
+ * Validate a parsed number as a WireUInt53.
+ * Checks Number.isSafeInteger and non-negative.
+ */
+export declare function isWireUInt53(value: number, min?: number, max?: number): boolean;
+/**
+ * Validate a raw JSON token as a canonical WireUInt53 lexeme.
+ * Must be checked BEFORE JSON.parse (pre-dispatch).
+ */
+export declare function isCanonicalUInt53Token(rawToken: string): boolean;
+//# sourceMappingURL=wire-uint53.d.ts.map

package/dist/wire/wire-uint53.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-uint53.d.ts","sourceRoot":"","sources":["../../src/wire/wire-uint53.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,uCAAuC;AACvC,eAAO,MAAM,eAAe,EAAG,gBAA8B,CAAC;AAE9D,wDAAwD;AACxD,eAAO,MAAM,uBAAuB,QAAwB,CAAC;AAE7D,wDAAwD;AACxD,eAAO,MAAM,0BAA0B,EAAG,EAAW,CAAC;AAEtD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAU,EAAE,GAAG,GAAE,MAAwB,GAAG,OAAO,CAEnG;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGhE"}

package/dist/wire/wire-uint53.js

@@ -0,0 +1,32 @@
+/**
+ * WireUInt53 — the single contract-owned numeric profile.
+ * Mechanized from the #1165 frozen shape.
+ *
+ * Raw JSON lexeme: canonical decimal digits 0|[1-9][0-9]*
+ * No sign, no decimal point, no exponent, no leading zeros.
+ * Raw token length ≤ 16 characters.
+ * Parsed value: non-negative safe integer.
+ */
+/** Maximum safe integer (2^53 - 1). */
+export const WIRE_UINT53_MAX = 9_007_199_254_740_991;
+/** Pattern for canonical decimal integer raw tokens. */
+export const WIRE_UINT53_RAW_PATTERN = /^(?:0|[1-9][0-9]*)$/;
+/** Maximum raw token length (digit count of 2^53-1). */
+export const WIRE_UINT53_MAX_RAW_LENGTH = 16;
+/**
+ * Validate a parsed number as a WireUInt53.
+ * Checks Number.isSafeInteger and non-negative.
+ */
+export function isWireUInt53(value, min = 0, max = WIRE_UINT53_MAX) {
+    return Number.isSafeInteger(value) && value >= min && value <= max;
+}
+/**
+ * Validate a raw JSON token as a canonical WireUInt53 lexeme.
+ * Must be checked BEFORE JSON.parse (pre-dispatch).
+ */
+export function isCanonicalUInt53Token(rawToken) {
+    if (rawToken.length === 0 || rawToken.length > WIRE_UINT53_MAX_RAW_LENGTH)
+        return false;
+    return WIRE_UINT53_RAW_PATTERN.test(rawToken);
+}
+//# sourceMappingURL=wire-uint53.js.map

package/dist/wire/wire-uint53.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-uint53.js","sourceRoot":"","sources":["../../src/wire/wire-uint53.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,uCAAuC;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG,qBAA8B,CAAC;AAE9D,wDAAwD;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAE7D,wDAAwD;AACxD,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAW,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,MAAc,CAAC,EAAE,MAAc,eAAe;IACxF,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,0BAA0B;QAAE,OAAO,KAAK,CAAC;IACxF,OAAO,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC"}

package/fixtures/behavior/messaging/adversarial-invariants.json

@@ -79,7 +79,7 @@
         "handles": {
           "foreignMessage": { "kind": "message_handle", "token": "message-handle-b", "ownerPluginInstanceId": "plugin-b", "threadId": "thread-1", "messageId": "message-1" }
         },
-        "state": { "messages": [{ "messageId": "message-1", "revision": 1 }] }
+        "state": { "messages": [{ "messageId": "message-1", "threadId": "thread-1", "revision": 1 }] }
       },
       "when": {
         "operation": "appendElements",
@@ -141,7 +141,7 @@
         "handles": {
           "message": { "kind": "message_handle", "token": "message-handle-a", "ownerPluginInstanceId": "plugin-a", "threadId": "thread-1", "messageId": "message-1" }
         },
-        "state": { "messages": [{ "messageId": "message-1", "revision": 2 }] }
+        "state": { "messages": [{ "messageId": "message-1", "threadId": "thread-1", "revision": 2 }] }
       },
       "when": {
         "operation": "appendElements",
@@ -253,7 +253,7 @@
         "handles": {
           "message": { "kind": "message_handle", "token": "message-handle-a", "ownerPluginInstanceId": "plugin-a", "threadId": "thread-1", "messageId": "message-1" }
         },
-        "state": { "messages": [{ "messageId": "message-1", "revision": 1, "elements": [{ "elementId": "source-1", "epistemicStatus": "inference" }] }] }
+        "state": { "messages": [{ "messageId": "message-1", "threadId": "thread-1", "revision": 1, "elements": [{ "elementId": "source-1", "epistemicStatus": "inference" }] }] }
       },
       "when": {
         "operation": "appendElements",
@@ -357,7 +357,7 @@
         "handles": {
           "message": { "kind": "message_handle", "token": "message-handle-a", "ownerPluginInstanceId": "plugin-a", "threadId": "thread-1", "messageId": "message-1" }
         },
-        "state": { "messages": [{ "messageId": "message-1", "revision": 1 }] }
+        "state": { "messages": [{ "messageId": "message-1", "threadId": "thread-1", "revision": 1 }] }
       },
       "when": {
         "operation": "appendElements",
@@ -456,7 +456,7 @@
         },
         "state": {
           "messages": [{ "messageId": "message-1", "threadId": "thread-1" }],
-          "replayEvents": [{ "eventId": "event-1", "sequence": 1 }]
+          "replayEvents": [{ "eventId": "event-1", "subscriptionId": "subscription-a", "sequence": 1 }]
         }
       },
       "when": {
@@ -470,6 +470,57 @@
           { "target": "messages", "assertion": "unchanged" }
         ]
       }
+    },
+    {
+      "id": "snapshot-without-grant-rejected",
+      "invariant": "A subscription identifier cannot bypass the message.event.subscribe grant for snapshots.",
+      "given": {
+        "caller": { "pluginInstanceId": "plugin-a" },
+        "grants": [],
+        "handles": {
+          "subscription": { "kind": "subscription", "token": "subscription-token-a", "ownerPluginInstanceId": "plugin-a", "threadId": "thread-1", "subscriptionId": "subscription-a" }
+        },
+        "state": { "subscription": { "cursorSequence": 4 } }
+      },
+      "when": {
+        "operation": "snapshot",
+        "input": { "subscriptionId": "subscription-a" }
+      },
+      "expect": {
+        "status": "error",
+        "errorCode": "PERMISSION",
+        "sideEffects": [
+          { "target": "snapshot", "assertion": "none" },
+          { "target": "subscription", "assertion": "unchanged" }
+        ]
+      }
+    },
+    {
+      "id": "foreign-replay-delete-rejected",
+      "invariant": "A caller cannot delete another plugin instance's subscription replay buffer.",
+      "given": {
+        "caller": { "pluginInstanceId": "plugin-b" },
+        "grants": ["message.event.subscribe"],
+        "handles": {
+          "subscription": { "kind": "subscription", "token": "subscription-token-a", "ownerPluginInstanceId": "plugin-a", "threadId": "thread-1", "subscriptionId": "subscription-a" }
+        },
+        "state": {
+          "messages": [{ "messageId": "message-1", "threadId": "thread-1" }],
+          "replayEvents": [{ "eventId": "event-1", "subscriptionId": "subscription-a", "sequence": 1 }]
+        }
+      },
+      "when": {
+        "operation": "deleteReplayEvents",
+        "input": { "subscriptionId": "subscription-a", "throughSequence": 1 }
+      },
+      "expect": {
+        "status": "error",
+        "errorCode": "PERMISSION",
+        "sideEffects": [
+          { "target": "replay_events", "assertion": "unchanged" },
+          { "target": "messages", "assertion": "unchanged" }
+        ]
+      }
     }
   ]
 }

package/fixtures/manifest/invalid/duplicate-signal-type.json

@@ -0,0 +1,33 @@
+{
+  "pluginId": "example.duplicate-signal",
+  "version": "1.0.0",
+  "contractVersion": "0.1.0",
+  "name": "Duplicate Signal Type",
+  "features": [
+    {
+      "id": "meeting-intake",
+      "name": "Meeting intake",
+      "resources": [],
+      "capabilities": ["events.publish"]
+    }
+  ],
+  "signals": {
+    "provides": [
+      {
+        "type": "feishu.meeting_artifact.generated.v1",
+        "schemaRef": "schemas/meeting-a.schema.json",
+        "epistemicStatus": "observation",
+        "privacyClass": "content-adjacent",
+        "sourceClass": "remote-service"
+      },
+      {
+        "type": "feishu.meeting_artifact.generated.v1",
+        "schemaRef": "schemas/meeting-b.schema.json",
+        "epistemicStatus": "inference",
+        "privacyClass": "content",
+        "sourceClass": "remote-service"
+      }
+    ]
+  },
+  "runtime": { "transport": "builtin" }
+}

package/fixtures/signals/invalid/destination-injection.json

@@ -0,0 +1,15 @@
+{
+  "_meta": {
+    "schemaRef": "EventsPublishInput"
+  },
+  "signalType": "feishu.meeting_artifact.generated.v1",
+  "eventId": "feishu-minute-om_abc123-v7",
+  "idempotencyKey": "feishu:minute:om_abc123:7",
+  "occurredAt": "2026-08-09T04:12:31Z",
+  "payload": {
+    "artifactId": "om_abc123"
+  },
+  "destination": {
+    "threadId": "thread_user_selected"
+  }
+}

package/fixtures/signals/invalid/dynamic-schema-url.json

@@ -0,0 +1,10 @@
+{
+  "_meta": {
+    "schemaRef": "SignalDeclaration"
+  },
+  "type": "feishu.meeting_artifact.generated.v1",
+  "schemaRef": "https://attacker.example/schemas/meeting.json",
+  "epistemicStatus": "observation",
+  "privacyClass": "content-adjacent",
+  "sourceClass": "remote-service"
+}

package/fixtures/signals/invalid/forbidden-raw-privacy.json

@@ -0,0 +1,10 @@
+{
+  "_meta": {
+    "schemaRef": "SignalDeclaration"
+  },
+  "type": "local.microphone.frame.v1",
+  "schemaRef": "schemas/microphone-frame.schema.json",
+  "epistemicStatus": "observation",
+  "privacyClass": "av-raw",
+  "sourceClass": "os-metadata"
+}

package/fixtures/signals/invalid/non-utc-occurred-at.json

@@ -0,0 +1,12 @@
+{
+  "_meta": {
+    "schemaRef": "EventsPublishInput"
+  },
+  "signalType": "feishu.meeting_artifact.generated.v1",
+  "eventId": "feishu-minute-om_abc123-v7",
+  "idempotencyKey": "feishu:minute:om_abc123:7",
+  "occurredAt": "2026-08-09T12:12:31+08:00",
+  "payload": {
+    "artifactId": "om_abc123"
+  }
+}

package/fixtures/signals/valid/feishu-meeting-artifact.json

@@ -0,0 +1,18 @@
+{
+  "_meta": {
+    "schemaRef": "EventsPublishInput"
+  },
+  "signalType": "feishu.meeting_artifact.generated.v1",
+  "eventId": "feishu-minute-om_abc123-v7",
+  "idempotencyKey": "feishu:minute:om_abc123:7",
+  "occurredAt": "2026-08-09T04:12:31Z",
+  "payload": {
+    "artifactId": "om_abc123",
+    "artifactKind": "minute",
+    "revision": "7",
+    "title": "F292 design review"
+  },
+  "source": {
+    "handle": "feishu://meeting-artifacts/minute/om_abc123?revision=7"
+  }
+}

package/fixtures/signals/valid/remote-service-declaration.json

@@ -0,0 +1,10 @@
+{
+  "_meta": {
+    "schemaRef": "SignalDeclaration"
+  },
+  "type": "feishu.meeting_artifact.generated.v1",
+  "schemaRef": "schemas/feishu-meeting-artifact.schema.json",
+  "epistemicStatus": "observation",
+  "privacyClass": "content-adjacent",
+  "sourceClass": "remote-service"
+}