@cotal-ai/core 0.54.0 → 0.56.0

package/dist/remote-manager-authority.d.ts

@@ -89,6 +89,10 @@ export interface RemoteManagerAuthorityMaterial {
     registrationProof?: string;
     retirement?: RemoteManagerAuthorityRequest["retirement"];
     issuedAt: number;
+    /** Earliest `exp` among the envelope's credentials, in milliseconds, as the issuer computes it.
+     * The manager never compares it with a clock: each credential is a signed JWT whose `exp` the
+     * broker verifies at connect, which is where expiry is enforced. Locally it is a coherence
+     * bound: `materialCredential` refuses a credential whose own `exp` disagrees with it. */
     expiresAt: number;
     actors: RemoteManagerActors;
     identities: RemoteManagerAuthorityRequest["identities"];
@@ -248,10 +252,117 @@ export interface RemoteManagerAdminAuthorizationResult {
     caller: RemoteManagerAdminAuthorizationRequest["caller"];
     authorized: boolean;
 }
+/**
+ * Closed wire request for host-owned managed agent enrollment (#1972).
+ *
+ * The participant generates the standing `actorToken` locally, persists it at 0600 BEFORE the
+ * request, and sends ONLY its SHA-256 digest. The plaintext secret never leaves the participant
+ * machine. The host alone picks the lifecycle UID, so the request carries none: a participant that
+ * could name the UID could aim a fresh grant at a retired or retiring incarnation.
+ */
+export interface RemoteManagedAgentEnrollmentRequest {
+    v: 1;
+    kind: "manager-managed-agent-enrollment";
+    space: string;
+    /** The interactive actor whose fresh `supervise` grant authorizes this manager lifecycle. */
+    actor: string;
+    instanceId: string;
+    managerLifecycleUid: string;
+    requestId: string;
+    registrationProof: string;
+    serveEpoch: number;
+    target: {
+        actor: string;
+        /** SHA-256 hash of the locally generated actorToken. Plaintext never leaves the participant. */
+        tokenHash: string;
+        role?: string;
+        label?: string;
+        capabilities?: string[];
+        subscribe?: string[];
+        allowSubscribe?: string[];
+        allowPublish?: string[];
+    };
+    identities: RemoteManagerAuthorityRequest["identities"];
+}
+/** Host-issued authority material returned to the remote manager upon enrollment. */
+export interface RemoteManagedAgentEnrollmentResult {
+    v: 1;
+    kind: "manager-managed-agent-enrollment";
+    space: string;
+    owner: string;
+    actor: string;
+    instanceId: string;
+    managerLifecycleUid: string;
+    requestId: string;
+    registrationProof: string;
+    serveEpoch: number;
+    material: {
+        owner: string;
+        actor: string;
+        lifecycleUid: string;
+        /** Space-wide callout sentinel credentials, NOT per-agent material. */
+        sentinelCreds: string;
+        subscribe: string[];
+        allowSubscribe: string[];
+        allowPublish: string[];
+        /** Pinned public auth-service base URL for agent bearer exchange. */
+        agentBearerExchangeUrl: string;
+    };
+}
+/**
+ * Closed wire request for host preparation of terminal managed agent retirement (#1972 P0/P1).
+ *
+ * The opId is derived from the target lifecycle UID, never selected: the participant's retries,
+ * the host's release, and the terminal auth barrier all converge on one operation.
+ */
+export interface RemoteManagedAgentPrepareRetirementRequest {
+    v: 1;
+    kind: "manager-managed-agent-prepare-retirement";
+    space: string;
+    actor: string;
+    instanceId: string;
+    managerLifecycleUid: string;
+    requestId: string;
+    registrationProof: string;
+    serveEpoch: number;
+    target: {
+        owner: string;
+        actor: string;
+        lifecycleUid: string;
+    };
+    opId: string;
+    identities: RemoteManagerAuthorityRequest["identities"];
+}
+/** Release confirmation returned once the host committed phase P1. */
+export interface RemoteManagedAgentPrepareRetirementResult {
+    v: 1;
+    kind: "manager-managed-agent-prepare-retirement";
+    space: string;
+    owner: string;
+    actor: string;
+    instanceId: string;
+    managerLifecycleUid: string;
+    requestId: string;
+    target: RemoteManagedAgentPrepareRetirementRequest["target"];
+    opId: string;
+    prepared: true;
+}
 export declare function remoteManagerActors(instanceId: string): RemoteManagerActors;
 /** Deterministic proof binding one remote Manager lifecycle to its owner, identities, and artifacts. */
 export declare function remoteManagerRegistrationProof(owner: string, request: RemoteManagerAuthorityRequest): string;
 /** The one terminal operation identity for a managed lifecycle. It is derived, never selected:
  * manager retries, hosted authority issuance, and the auth barrier therefore converge on one op. */
 export declare function managedRetirementOpId(lifecycleUid: string): string;
+/**
+ * Parse the enrollment request without retaining unknown input fields. The host derives the
+ * lifecycle UID, the role, and the effective ACLs itself, so this parser proves only that what
+ * arrived is in-grammar and bounded; it never widens a grant.
+ */
+export declare function parseRemoteManagedAgentEnrollmentRequest(raw: unknown): RemoteManagedAgentEnrollmentRequest;
+/**
+ * Parse the prepare-retirement request without retaining unknown input fields. The opId is checked
+ * against {@link managedRetirementOpId} here, so a caller cannot name a second operation for one
+ * lifecycle and split the terminal barrier in two.
+ */
+export declare function parseRemoteManagedAgentPrepareRetirementRequest(raw: unknown): RemoteManagedAgentPrepareRetirementRequest;
 //# sourceMappingURL=remote-manager-authority.d.ts.map

package/dist/remote-manager-authority.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote-manager-authority.d.ts","sourceRoot":"","sources":["../src/remote-manager-authority.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AACH,MAAM,WAAW,6BAA6B;IAC5C,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,2BAA2B,CAAC;IAClC,SAAS,EAAE,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB;yEACqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+FAA+F;IAC/F,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1F;uGACmG;IACnG,UAAU,CAAC,EAAE;QACX,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/D,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF;;uFAEmF;IACnF,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC;IAC9B,UAAU,EAAE;QACV,UAAU,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,QAAQ,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACzB,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACtB,UAAU,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,aAAa,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/B,CAAC;CACH;AAED;8FAC8F;AAC9F,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,sGAAsG;AACtG,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,2EAA2E;AAC3E,MAAM,WAAW,8BAA8B;IAC7C,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,2BAA2B,CAAC;IAClC,SAAS,EAAE,6BAA6B,CAAC,WAAW,CAAC,CAAC;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD;iGAC6F;IAC7F,4FAA4F;IAC5F,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC;QACnB,UAAU,EAAE,uBAAuB,CAAC;QACpC,QAAQ,EAAE,uBAAuB,CAAC;QAClC,KAAK,EAAE,uBAAuB,CAAC;QAC/B,UAAU,EAAE,uBAAuB,CAAC;QACpC,aAAa,EAAE,uBAAuB,CAAC;QACvC,cAAc,EAAE,uBAAuB,CAAC;QACxC,mBAAmB,EAAE,uBAAuB,CAAC;KAC9C,CAAC,CAAC;CACJ;AAED;;oFAEoF;AACpF,MAAM,WAAW,+BAA+B;IAC9C,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,6BAA6B,CAAC;IACpC,SAAS,EAAE,wBAAwB,GAAG,wBAAwB,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD;sGACkG;IAClG,gBAAgB,EAAE,MAAM,CAAC;IACzB,gGAAgG;IAChG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,8BAA8B;IAC7C,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,6BAA6B,CAAC;IACpC,SAAS,EAAE,+BAA+B,CAAC,WAAW,CAAC,CAAC;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,YAAY,EAAE,cAAc,CAAC;IAC/C,cAAc,CAAC,EAAE,OAAO,yBAAyB,EAAE,mBAAmB,CAAC;CACxE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oCAAoC;IACnD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,mCAAmC,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,6FAA6F;IAC7F,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wEAAwE;AACxE,MAAM,WAAW,mCAAmC;IAClD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,mCAAmC,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,oCAAoC,CAAC,QAAQ,CAAC,CAAC;IACvD,SAAS,EAAE,OAAO,oBAAoB,EAAE,sBAAsB,CAAC;CAChE;AAED;kGACkG;AAClG,MAAM,WAAW,iCAAiC;IAChD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,yBAAyB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,gCAAgC;IAC/C,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,yBAAyB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,sBAAsB,EAAE,cAAc,EAAE,CAAC;CAC1D;AAED,wFAAwF;AACxF,MAAM,WAAW,sCAAsC;IACrD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,6BAA6B,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD,kFAAkF;IAClF,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CAChE;AAED,yFAAyF;AACzF,MAAM,WAAW,qCAAqC;IACpD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,6BAA6B,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,EAAE,sCAAsC,CAAC,QAAQ,CAAC,CAAC;IACzD,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,CAQ3E;AAED,wGAAwG;AACxG,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,6BAA6B,GAAG,MAAM,CAY5G;AAED;oGACoG;AACpG,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAElE"}
+{"version":3,"file":"remote-manager-authority.d.ts","sourceRoot":"","sources":["../src/remote-manager-authority.ts"],"names":[],"mappings":"AAIA;;;;;;;GAOG;AACH,MAAM,WAAW,6BAA6B;IAC5C,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,2BAA2B,CAAC;IAClC,SAAS,EAAE,SAAS,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,CAAC;IACnE,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB;yEACqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,+FAA+F;IAC/F,OAAO,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1F;uGACmG;IACnG,UAAU,CAAC,EAAE;QACX,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAC;YAAC,YAAY,EAAE,MAAM,CAAA;SAAE,CAAC;QAC/D,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF;;uFAEmF;IACnF,iBAAiB,CAAC,EAAE,OAAO,EAAE,CAAC;IAC9B,UAAU,EAAE;QACV,UAAU,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,QAAQ,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACzB,KAAK,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QACtB,UAAU,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;QAC3B,aAAa,EAAE;YAAE,EAAE,EAAE,MAAM,CAAA;SAAE,CAAC;KAC/B,CAAC;CACH;AAED;8FAC8F;AAC9F,MAAM,WAAW,uBAAuB;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;CACb;AAED,sGAAsG;AACtG,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,2EAA2E;AAC3E,MAAM,WAAW,8BAA8B;IAC7C,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,2BAA2B,CAAC;IAClC,SAAS,EAAE,6BAA6B,CAAC,WAAW,CAAC,CAAC;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;6FAGyF;IACzF,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD;iGAC6F;IAC7F,4FAA4F;IAC5F,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,WAAW,EAAE,OAAO,CAAC;QACnB,UAAU,EAAE,uBAAuB,CAAC;QACpC,QAAQ,EAAE,uBAAuB,CAAC;QAClC,KAAK,EAAE,uBAAuB,CAAC;QAC/B,UAAU,EAAE,uBAAuB,CAAC;QACpC,aAAa,EAAE,uBAAuB,CAAC;QACvC,cAAc,EAAE,uBAAuB,CAAC;QACxC,mBAAmB,EAAE,uBAAuB,CAAC;KAC9C,CAAC,CAAC;CACJ;AAED;;oFAEoF;AACpF,MAAM,WAAW,+BAA+B;IAC9C,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,6BAA6B,CAAC;IACpC,SAAS,EAAE,wBAAwB,GAAG,wBAAwB,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD;sGACkG;IAClG,gBAAgB,EAAE,MAAM,CAAC;IACzB,gGAAgG;IAChG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,iEAAiE;AACjE,MAAM,WAAW,8BAA8B;IAC7C,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,6BAA6B,CAAC;IACpC,SAAS,EAAE,+BAA+B,CAAC,WAAW,CAAC,CAAC;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,YAAY,EAAE,cAAc,CAAC;IAC/C,cAAc,CAAC,EAAE,OAAO,yBAAyB,EAAE,mBAAmB,CAAC;CACxE;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oCAAoC;IACnD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,mCAAmC,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,6FAA6F;IAC7F,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wEAAwE;AACxE,MAAM,WAAW,mCAAmC;IAClD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,mCAAmC,CAAC;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,oCAAoC,CAAC,QAAQ,CAAC,CAAC;IACvD,SAAS,EAAE,OAAO,oBAAoB,EAAE,sBAAsB,CAAC;CAChE;AAED;kGACkG;AAClG,MAAM,WAAW,iCAAiC;IAChD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,yBAAyB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,gCAAgC;IAC/C,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,yBAAyB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,OAAO,sBAAsB,EAAE,cAAc,EAAE,CAAC;CAC1D;AAED,wFAAwF;AACxF,MAAM,WAAW,sCAAsC;IACrD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,6BAA6B,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,2FAA2F;IAC3F,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD,kFAAkF;IAClF,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;CAChE;AAED,yFAAyF;AACzF,MAAM,WAAW,qCAAqC;IACpD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,6BAA6B,CAAC;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,EAAE,sCAAsC,CAAC,QAAQ,CAAC,CAAC;IACzD,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,mCAAmC;IAClD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,kCAAkC,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,6FAA6F;IAC7F,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QACN,KAAK,EAAE,MAAM,CAAC;QACd,gGAAgG;QAChG,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;KACzB,CAAC;IACF,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;CACzD;AAED,qFAAqF;AACrF,MAAM,WAAW,kCAAkC;IACjD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,kCAAkC,CAAC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE;QACR,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,YAAY,EAAE,MAAM,CAAC;QACrB,uEAAuE;QACvE,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,EAAE,CAAC;QACpB,cAAc,EAAE,MAAM,EAAE,CAAC;QACzB,YAAY,EAAE,MAAM,EAAE,CAAC;QACvB,qEAAqE;QACrE,sBAAsB,EAAE,MAAM,CAAC;KAChC,CAAC;CACH;AAED;;;;;GAKG;AACH,MAAM,WAAW,0CAA0C;IACzD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,0CAA0C,CAAC;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,6BAA6B,CAAC,YAAY,CAAC,CAAC;CACzD;AAED,sEAAsE;AACtE,MAAM,WAAW,yCAAyC;IACxD,CAAC,EAAE,CAAC,CAAC;IACL,IAAI,EAAE,0CAA0C,CAAC;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,0CAA0C,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,IAAI,CAAC;CAChB;AAED,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,CAQ3E;AAED,wGAAwG;AACxG,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,6BAA6B,GAAG,MAAM,CAY5G;AAED;oGACoG;AACpG,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAElE;AA6ED;;;;GAIG;AACH,wBAAgB,wCAAwC,CAAC,GAAG,EAAE,OAAO,GAAG,mCAAmC,CAqD1G;AAED;;;;GAIG;AACH,wBAAgB,+CAA+C,CAAC,GAAG,EAAE,OAAO,GAAG,0CAA0C,CAkCxH"}

package/dist/remote-manager-authority.js

@@ -1,5 +1,6 @@
 import { rawDigest } from "./canonical.js";
-import { assertLifecycleToken } from "./subjects.js";
+import { EpEnvelopeError } from "./endpoint-error.js";
+import { assertDerivedOwnerToken, assertLifecycleToken, assertValidChannel, assertValidOwnerToken } from "./subjects.js";
 export function remoteManagerActors(instanceId) {
     return {
         supervisor: `manager_${instanceId}`,
@@ -28,4 +29,177 @@ export function remoteManagerRegistrationProof(owner, request) {
 export function managedRetirementOpId(lifecycleUid) {
     return rawDigest(`retire:${assertLifecycleToken(lifecycleUid)}`).slice("sha256:".length, "sha256:".length + 26);
 }
+const IDENTITY_NAMES = ["supervisor", "executor", "serve", "goalWriter", "sessionLedger"];
+/** The bound on one enrollment ACL list. A grant wider than this is a configuration mistake, and a
+ *  request carrying thousands of patterns is a body-size attack on the host's derivation. */
+const MAX_ENROLLMENT_LIST = 64;
+function enrollmentError(what, detail) {
+    throw new EpEnvelopeError("bad-request", `${what} request ${detail}`);
+}
+/** The envelope fields every managed-agent request shares, validated once for both parsers. */
+function parseManagedAgentEnvelope(o, what, kind) {
+    if (o.v !== 1 || o.kind !== kind)
+        enrollmentError(what, `must carry { v: 1, kind: ${JSON.stringify(kind)} }`);
+    for (const key of ["space", "actor", "instanceId", "managerLifecycleUid", "requestId", "registrationProof"])
+        if (typeof o[key] !== "string" || o[key].length === 0)
+            enrollmentError(what, `requires non-empty ${key}`);
+    assertValidOwnerToken(o.actor);
+    assertLifecycleToken(o.instanceId, `${what} instanceId`);
+    assertLifecycleToken(o.managerLifecycleUid, `${what} lifecycleUid`);
+    if (!/^[A-Za-z0-9_-]{22,64}$/.test(o.requestId))
+        enrollmentError(what, "requestId must be a 22-64 character idempotency token");
+    if (!/^sha256:[0-9a-f]{64}$/.test(o.registrationProof))
+        enrollmentError(what, "requires a sha256 registrationProof");
+    if (typeof o.serveEpoch !== "number" || !Number.isSafeInteger(o.serveEpoch) || o.serveEpoch < 0)
+        enrollmentError(what, "serveEpoch must be a non-negative safe integer");
+    const ids = o.identities;
+    if (ids === null || typeof ids !== "object" || Array.isArray(ids))
+        enrollmentError(what, "requires identities");
+    const idObj = ids;
+    if (Object.keys(idObj).sort().join(",") !== [...IDENTITY_NAMES].sort().join(","))
+        enrollmentError(what, `identities must contain exactly ${IDENTITY_NAMES.join(", ")}`);
+    const identities = {};
+    for (const name of IDENTITY_NAMES) {
+        const item = idObj[name];
+        if (item === null || typeof item !== "object" || Array.isArray(item) || Object.keys(item).join(",") !== "id")
+            enrollmentError(what, `identities.${name} must be exactly { id }`);
+        const id = item.id;
+        if (typeof id !== "string" || !/^U[A-Z2-7]{55}$/.test(id))
+            enrollmentError(what, `identities.${name}.id must be a user nkey`);
+        identities[name] = { id };
+    }
+    return {
+        space: o.space,
+        actor: o.actor,
+        instanceId: o.instanceId,
+        managerLifecycleUid: o.managerLifecycleUid,
+        requestId: o.requestId,
+        registrationProof: o.registrationProof,
+        serveEpoch: o.serveEpoch,
+        identities,
+    };
+}
+/** One optional channel/pattern list on an enrollment target: bounded, string-only, in-grammar. */
+function parseEnrollmentList(value, what, field) {
+    if (value === undefined)
+        return undefined;
+    if (!Array.isArray(value))
+        enrollmentError(what, `target.${field} must be an array of channel patterns when present`);
+    if (value.length > MAX_ENROLLMENT_LIST)
+        enrollmentError(what, `target.${field} carries ${value.length} entries, more than the ${MAX_ENROLLMENT_LIST}-entry bound`);
+    for (const item of value) {
+        if (typeof item !== "string" || item.length === 0)
+            enrollmentError(what, `target.${field} must contain only non-empty strings`);
+        assertValidChannel(item);
+    }
+    return [...value];
+}
+/**
+ * Parse the enrollment request without retaining unknown input fields. The host derives the
+ * lifecycle UID, the role, and the effective ACLs itself, so this parser proves only that what
+ * arrived is in-grammar and bounded; it never widens a grant.
+ */
+export function parseRemoteManagedAgentEnrollmentRequest(raw) {
+    const what = "managed agent enrollment";
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+        enrollmentError(what, "must be an object");
+    const o = raw;
+    const allowed = new Set([
+        "v", "kind", "space", "actor", "instanceId", "managerLifecycleUid", "requestId",
+        "registrationProof", "serveEpoch", "target", "identities",
+    ]);
+    for (const key of Object.keys(o))
+        if (!allowed.has(key))
+            enrollmentError(what, `carries unknown field ${JSON.stringify(key)} (the protocol is closed)`);
+    const envelope = parseManagedAgentEnvelope(o, what, "manager-managed-agent-enrollment");
+    const target = o.target;
+    if (target === null || typeof target !== "object" || Array.isArray(target))
+        enrollmentError(what, "requires a target");
+    const t = target;
+    const targetAllowed = new Set(["actor", "tokenHash", "role", "label", "capabilities", "subscribe", "allowSubscribe", "allowPublish"]);
+    for (const key of Object.keys(t))
+        if (!targetAllowed.has(key))
+            enrollmentError(what, `target carries unknown field ${JSON.stringify(key)} (the protocol is closed)`);
+    if (typeof t.actor !== "string" || t.actor.length === 0)
+        enrollmentError(what, "target requires a non-empty actor");
+    assertValidOwnerToken(t.actor);
+    // The digest, never the secret: a request that carried the plaintext standing token would put an
+    // agent's whole exchange authority on the wire and in the host's logs.
+    if (typeof t.tokenHash !== "string" || !/^[0-9a-f]{64}$/.test(t.tokenHash))
+        enrollmentError(what, "target.tokenHash must be a lowercase hex sha256 digest of the locally held actorToken");
+    if (t.role !== undefined && (typeof t.role !== "string" || !/^[A-Za-z0-9_-]{1,64}$/.test(t.role)))
+        enrollmentError(what, "target.role must be a 1-64 character role token when present");
+    if (t.label !== undefined && (typeof t.label !== "string" || t.label.length === 0 || t.label.length > 256))
+        enrollmentError(what, "target.label must be a 1-256 character string when present");
+    if (t.capabilities !== undefined) {
+        if (!Array.isArray(t.capabilities))
+            enrollmentError(what, "target.capabilities must be an array when present");
+        if (t.capabilities.length > MAX_ENROLLMENT_LIST)
+            enrollmentError(what, `target.capabilities carries ${t.capabilities.length} entries, more than the ${MAX_ENROLLMENT_LIST}-entry bound`);
+        for (const cap of t.capabilities)
+            if (typeof cap !== "string" || !/^[A-Za-z0-9_:-]{1,64}$/.test(cap))
+                enrollmentError(what, "target.capabilities must contain only 1-64 character capability tokens");
+    }
+    const subscribe = parseEnrollmentList(t.subscribe, what, "subscribe");
+    const allowSubscribe = parseEnrollmentList(t.allowSubscribe, what, "allowSubscribe");
+    const allowPublish = parseEnrollmentList(t.allowPublish, what, "allowPublish");
+    return {
+        v: 1,
+        kind: "manager-managed-agent-enrollment",
+        ...envelope,
+        target: {
+            actor: t.actor,
+            tokenHash: t.tokenHash,
+            ...(t.role !== undefined ? { role: t.role } : {}),
+            ...(t.label !== undefined ? { label: t.label } : {}),
+            ...(t.capabilities !== undefined ? { capabilities: [...t.capabilities] } : {}),
+            ...(subscribe !== undefined ? { subscribe } : {}),
+            ...(allowSubscribe !== undefined ? { allowSubscribe } : {}),
+            ...(allowPublish !== undefined ? { allowPublish } : {}),
+        },
+    };
+}
+/**
+ * Parse the prepare-retirement request without retaining unknown input fields. The opId is checked
+ * against {@link managedRetirementOpId} here, so a caller cannot name a second operation for one
+ * lifecycle and split the terminal barrier in two.
+ */
+export function parseRemoteManagedAgentPrepareRetirementRequest(raw) {
+    const what = "managed agent prepare-retirement";
+    if (raw === null || typeof raw !== "object" || Array.isArray(raw))
+        enrollmentError(what, "must be an object");
+    const o = raw;
+    const allowed = new Set([
+        "v", "kind", "space", "actor", "instanceId", "managerLifecycleUid", "requestId",
+        "registrationProof", "serveEpoch", "target", "opId", "identities",
+    ]);
+    for (const key of Object.keys(o))
+        if (!allowed.has(key))
+            enrollmentError(what, `carries unknown field ${JSON.stringify(key)} (the protocol is closed)`);
+    const envelope = parseManagedAgentEnvelope(o, what, "manager-managed-agent-prepare-retirement");
+    const target = o.target;
+    if (target === null || typeof target !== "object" || Array.isArray(target) ||
+        Object.keys(target).sort().join(",") !== "actor,lifecycleUid,owner")
+        enrollmentError(what, "target must be exactly { owner, actor, lifecycleUid }");
+    const t = target;
+    if (typeof t.owner !== "string" || typeof t.actor !== "string" || typeof t.lifecycleUid !== "string")
+        enrollmentError(what, "target must contain string owner, actor, and lifecycleUid");
+    const parsedTarget = {
+        owner: assertDerivedOwnerToken(t.owner),
+        actor: assertValidOwnerToken(t.actor),
+        lifecycleUid: assertLifecycleToken(t.lifecycleUid, `${what} target lifecycleUid`),
+    };
+    if (typeof o.opId !== "string" || o.opId.length === 0)
+        enrollmentError(what, "requires a non-empty opId");
+    assertLifecycleToken(o.opId, `${what} opId`);
+    if (o.opId !== managedRetirementOpId(parsedTarget.lifecycleUid))
+        enrollmentError(what, `opId must be the derived terminal operation id for lifecycle ${parsedTarget.lifecycleUid}`);
+    return {
+        v: 1,
+        kind: "manager-managed-agent-prepare-retirement",
+        ...envelope,
+        target: parsedTarget,
+        opId: o.opId,
+    };
+}
 //# sourceMappingURL=remote-manager-authority.js.map

package/dist/remote-manager-authority.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote-manager-authority.js","sourceRoot":"","sources":["../src/remote-manager-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AA4OrD,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,OAAO;QACL,UAAU,EAAE,WAAW,UAAU,EAAE;QACnC,QAAQ,EAAE,gBAAgB,UAAU,EAAE;QACtC,KAAK,EAAE,iBAAiB,UAAU,EAAE;QACpC,UAAU,EAAE,gBAAgB,UAAU,EAAE;QACxC,aAAa,EAAE,mBAAmB,UAAU,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,8BAA8B,CAAC,KAAa,EAAE,OAAsC;IAClG,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClJ,OAAO,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9B,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK;QACL,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,OAAO,CAAC,mBAAmB;QACzC,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,eAAe;KAChB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,OAAO,SAAS,CAAC,UAAU,oBAAoB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAClH,CAAC"}
+{"version":3,"file":"remote-manager-authority.js","sourceRoot":"","sources":["../src/remote-manager-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AA+UzH,MAAM,UAAU,mBAAmB,CAAC,UAAkB;IACpD,OAAO;QACL,UAAU,EAAE,WAAW,UAAU,EAAE;QACnC,QAAQ,EAAE,gBAAgB,UAAU,EAAE;QACtC,KAAK,EAAE,iBAAiB,UAAU,EAAE;QACpC,UAAU,EAAE,gBAAgB,UAAU,EAAE;QACxC,aAAa,EAAE,mBAAmB,UAAU,EAAE;KAC/C,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,8BAA8B,CAAC,KAAa,EAAE,OAAsC;IAClG,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClJ,OAAO,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;QAC9B,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK;QACL,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,YAAY,EAAE,OAAO,CAAC,mBAAmB;QACzC,MAAM,EAAE,mBAAmB,CAAC,OAAO,CAAC,UAAU,CAAC;QAC/C,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,eAAe;KAChB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;oGACoG;AACpG,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,OAAO,SAAS,CAAC,UAAU,oBAAoB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAClH,CAAC;AAED,MAAM,cAAc,GAAG,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,eAAe,CAAU,CAAC;AAEnG;6FAC6F;AAC7F,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,SAAS,eAAe,CAAC,IAAY,EAAE,MAAc;IACnD,MAAM,IAAI,eAAe,CAAC,aAAa,EAAE,GAAG,IAAI,YAAY,MAAM,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,+FAA+F;AAC/F,SAAS,yBAAyB,CAChC,CAA0B,EAC1B,IAAY,EACZ,IAAY;IAWZ,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;QAAE,eAAe,CAAC,IAAI,EAAE,4BAA4B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9G,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW,EAAE,mBAAmB,CAAU;QAClH,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,KAAK,QAAQ,IAAK,CAAC,CAAC,GAAG,CAAY,CAAC,MAAM,KAAK,CAAC;YAAE,eAAe,CAAC,IAAI,EAAE,sBAAsB,GAAG,EAAE,CAAC,CAAC;IACxH,qBAAqB,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC;IACzC,oBAAoB,CAAC,CAAC,CAAC,UAAoB,EAAE,GAAG,IAAI,aAAa,CAAC,CAAC;IACnE,oBAAoB,CAAC,CAAC,CAAC,mBAA6B,EAAE,GAAG,IAAI,eAAe,CAAC,CAAC;IAC9E,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAmB,CAAC;QACvD,eAAe,CAAC,IAAI,EAAE,uDAAuD,CAAC,CAAC;IACjF,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,iBAA2B,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,qCAAqC,CAAC,CAAC;IAC/H,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC;QAC7F,eAAe,CAAC,IAAI,EAAE,gDAAgD,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC;IACzB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC;IAChH,MAAM,KAAK,GAAG,GAA8B,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;QAC9E,eAAe,CAAC,IAAI,EAAE,mCAAmC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,EAAiD,CAAC;IACrE,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI;YACpH,eAAe,CAAC,IAAI,EAAE,cAAc,IAAI,yBAAyB,CAAC,CAAC;QACrE,MAAM,EAAE,GAAI,IAAyB,CAAC,EAAE,CAAC;QACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,eAAe,CAAC,IAAI,EAAE,cAAc,IAAI,yBAAyB,CAAC,CAAC;QAC9H,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,KAAK,EAAE,CAAC,CAAC,KAAe;QACxB,UAAU,EAAE,CAAC,CAAC,UAAoB;QAClC,mBAAmB,EAAE,CAAC,CAAC,mBAA6B;QACpD,SAAS,EAAE,CAAC,CAAC,SAAmB;QAChC,iBAAiB,EAAE,CAAC,CAAC,iBAA2B;QAChD,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,UAAU;KACX,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,SAAS,mBAAmB,CAAC,KAAc,EAAE,IAAY,EAAE,KAAa;IACtE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,UAAU,KAAK,oDAAoD,CAAC,CAAC;IACtH,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB;QACpC,eAAe,CAAC,IAAI,EAAE,UAAU,KAAK,YAAY,KAAK,CAAC,MAAM,2BAA2B,mBAAmB,cAAc,CAAC,CAAC;IAC7H,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,eAAe,CAAC,IAAI,EAAE,UAAU,KAAK,sCAAsC,CAAC,CAAC;QAChI,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,GAAI,KAAkB,CAAC,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wCAAwC,CAAC,GAAY;IACnE,MAAM,IAAI,GAAG,0BAA0B,CAAC;IACxC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC9G,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW;QAC/E,mBAAmB,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY;KAC1D,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,eAAe,CAAC,IAAI,EAAE,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACxH,MAAM,QAAQ,GAAG,yBAAyB,CAAC,CAAC,EAAE,IAAI,EAAE,kCAAkC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACvH,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,CAAC,CAAC,CAAC;IACtI,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,eAAe,CAAC,IAAI,EAAE,gCAAgC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACrI,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,mCAAmC,CAAC,CAAC;IACpH,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC/B,iGAAiG;IACjG,uEAAuE;IACvE,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,eAAe,CAAC,IAAI,EAAE,uFAAuF,CAAC,CAAC;IACjH,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/F,eAAe,CAAC,IAAI,EAAE,8DAA8D,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;QACxG,eAAe,CAAC,IAAI,EAAE,4DAA4D,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;YAAE,eAAe,CAAC,IAAI,EAAE,mDAAmD,CAAC,CAAC;QAC/G,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,mBAAmB;YAC7C,eAAe,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC,YAAY,CAAC,MAAM,2BAA2B,mBAAmB,cAAc,CAAC,CAAC;QAC1I,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,YAAY;YAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC;gBAChE,eAAe,CAAC,IAAI,EAAE,wEAAwE,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,SAAS,GAAG,mBAAmB,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACtE,MAAM,cAAc,GAAG,mBAAmB,CAAC,CAAC,CAAC,cAAc,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG,mBAAmB,CAAC,CAAC,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;IAC/E,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,kCAAkC;QACxC,GAAG,QAAQ;QACX,MAAM,EAAE;YACN,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,GAAI,CAAC,CAAC,YAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,+CAA+C,CAAC,GAAY;IAC1E,MAAM,IAAI,GAAG,kCAAkC,CAAC;IAChD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC9G,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC;QACtB,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,qBAAqB,EAAE,WAAW;QAC/E,mBAAmB,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,YAAY;KAClE,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,eAAe,CAAC,IAAI,EAAE,yBAAyB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC;IACxH,MAAM,QAAQ,GAAG,yBAAyB,CAAC,CAAC,EAAE,IAAI,EAAE,0CAA0C,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,MAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,0BAA0B;QAC/E,eAAe,CAAC,IAAI,EAAE,uDAAuD,CAAC,CAAC;IACjF,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ;QAClG,eAAe,CAAC,IAAI,EAAE,2DAA2D,CAAC,CAAC;IACrF,MAAM,YAAY,GAAG;QACnB,KAAK,EAAE,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC;QACvC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,KAAK,CAAC;QACrC,YAAY,EAAE,oBAAoB,CAAC,CAAC,CAAC,YAAY,EAAE,GAAG,IAAI,sBAAsB,CAAC;KAClF,CAAC;IACF,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,eAAe,CAAC,IAAI,EAAE,2BAA2B,CAAC,CAAC;IAC1G,oBAAoB,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,CAAC;IAC7C,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAAC,YAAY,CAAC,YAAY,CAAC;QAC7D,eAAe,CAAC,IAAI,EAAE,gEAAgE,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC;IACrH,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,0CAA0C;QAChD,GAAG,QAAQ;QACX,MAAM,EAAE,YAAY;QACpB,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC;AACJ,CAAC"}

package/dist/resolve.d.ts

@@ -43,6 +43,19 @@ export declare class AmbiguousPeerError extends Error {
 export declare function resolvePeer(roster: Presence[], target: string, opts?: {
     selfId?: string;
 }): Presence | undefined;
+/** Maximum length of a display name, in UTF-16 code units.
+ *
+ *  Derived from the transport budget, not picked. The client's CONNECT line carries the user JWT
+ *  plus every payload the identity rides into (presence rows, message envelopes), and the broker
+ *  caps that line at `max_control_line` (65536 in the generated config, provision.ts). A name is
+ *  display data on that path, so an unbounded name is an unbounded CONNECT line: a 70,000-char
+ *  name was accepted end to end and the connect then hung (issue #375) — the broker drops the
+ *  oversized line silently and the client retries forever. 128 leaves every human name (~40 chars
+ *  at the extreme) 3× headroom while keeping dozens of in-flight name-bearing rows an order of
+ *  magnitude inside the 64 KB line. The grants themselves key on the principal, never the name
+ *  (event-channel.ts), so this bound guards the payload side of the budget.
+ */
+export declare const MAX_NAME_LENGTH = 128;
 /**
  * Validate a display name. A name must be non-empty, single-line, and free of surrounding
  * whitespace; `/` is reserved as the future `owner/name` separator (and already means "a path"

package/dist/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE3D;6FAC6F;AAC7F,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;0FAC0F;AAC1F,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,UAAU,EAAE,aAAa,EAAE;gBAD3B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,aAAa,EAAE;CASvC;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,QAAQ,EAAE,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,QAAQ,GAAG,SAAS,CAetB;AAuBD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CA2BlD"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE3D;6FAC6F;AAC7F,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,cAAc,CAAC;IACvB,6CAA6C;IAC7C,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;0FAC0F;AAC1F,qBAAa,kBAAmB,SAAQ,KAAK;IAEzC,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,UAAU,EAAE,aAAa,EAAE;gBAD3B,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,aAAa,EAAE;CASvC;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,WAAW,CACzB,MAAM,EAAE,QAAQ,EAAE,EAClB,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,QAAQ,GAAG,SAAS,CAetB;AAuBD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAgClD"}

package/dist/resolve.js

@@ -66,6 +66,19 @@ function isWellFormedUtf16(s) {
     }
     return true;
 }
+/** Maximum length of a display name, in UTF-16 code units.
+ *
+ *  Derived from the transport budget, not picked. The client's CONNECT line carries the user JWT
+ *  plus every payload the identity rides into (presence rows, message envelopes), and the broker
+ *  caps that line at `max_control_line` (65536 in the generated config, provision.ts). A name is
+ *  display data on that path, so an unbounded name is an unbounded CONNECT line: a 70,000-char
+ *  name was accepted end to end and the connect then hung (issue #375) — the broker drops the
+ *  oversized line silently and the client retries forever. 128 leaves every human name (~40 chars
+ *  at the extreme) 3× headroom while keeping dozens of in-flight name-bearing rows an order of
+ *  magnitude inside the 64 KB line. The grants themselves key on the principal, never the name
+ *  (event-channel.ts), so this bound guards the payload side of the budget.
+ */
+export const MAX_NAME_LENGTH = 128;
 /**
  * Validate a display name. A name must be non-empty, single-line, and free of surrounding
  * whitespace; `/` is reserved as the future `owner/name` separator (and already means "a path"
@@ -75,6 +88,9 @@ function isWellFormedUtf16(s) {
 export function assertValidName(name) {
     if (name.length === 0 || name !== name.trim())
         throw new Error(`invalid name ${JSON.stringify(name)}: must be non-empty with no surrounding whitespace`);
+    if (name.length > MAX_NAME_LENGTH)
+        throw new Error(`invalid name ${JSON.stringify(name.slice(0, 32))}…: ${name.length} characters exceeds the ` +
+            `${MAX_NAME_LENGTH}-character limit (the CONNECT line budget that carries it)`);
     if (/[\r\n]/.test(name))
         throw new Error(`invalid name ${JSON.stringify(name)}: must be a single line`);
     if (name.includes("/"))

package/dist/resolve.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAyBA;0FAC0F;AAC1F,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEhC;IACA;IAFX,YACW,MAAc,EACd,UAA2B;QAEpC,KAAK,CACH,IAAI,MAAM,oBAAoB,UAAU,CAAC,MAAM,0BAA0B;YACvE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACpE,qCAAqC,CACxC,CAAC;QAPO,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAiB;QAOpC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,SAAS,SAAS,CAAC,CAAW;IAC5B,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;AAC7F,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CACzB,MAAkB,EAClB,MAAc,EACd,OAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAErF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACrD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,CAAS;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,2CAA2C;QACzF,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,2CAA2C;YAClG,CAAC,EAAE,CAAC,CAAC,mBAAmB;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE;QAC3C,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAC5G,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACtG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACvG,6FAA6F;IAC7F,sFAAsF;IACtF,EAAE;IACF,kGAAkG;IAClG,mGAAmG;IACnG,mDAAmD;IACnD,gGAAgG;IAChG,oGAAoG;IACpG,+FAA+F;IAC/F,uFAAuF;IACvF,kGAAkG;IAClG,6EAA6E;IAC7E,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uDAAuD;YACzF,uFAAuF;YACvF,+BAA+B,CAClC,CAAC;AACN,CAAC"}
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAyBA;0FAC0F;AAC1F,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAEhC;IACA;IAFX,YACW,MAAc,EACd,UAA2B;QAEpC,KAAK,CACH,IAAI,MAAM,oBAAoB,UAAU,CAAC,MAAM,0BAA0B;YACvE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACpE,qCAAqC,CACxC,CAAC;QAPO,WAAM,GAAN,MAAM,CAAQ;QACd,eAAU,GAAV,UAAU,CAAiB;QAOpC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AAED,SAAS,SAAS,CAAC,CAAW;IAC5B,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC;AAC7F,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CACzB,MAAkB,EAClB,MAAc,EACd,OAA4B,EAAE;IAE9B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAErF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;IACrD,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzC,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE3C,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,IAAI,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,CAAS;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM;YAAE,OAAO,KAAK,CAAC,CAAC,2CAA2C;QACzF,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,IAAI,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAC,CAAC,2CAA2C;YAClG,CAAC,EAAE,CAAC,CAAC,mBAAmB;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE;QAC3C,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAC5G,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe;QAC/B,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,MAAM,0BAA0B;YAC1F,GAAG,eAAe,4DAA4D,CACjF,CAAC;IACJ,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACtG,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;IACvG,6FAA6F;IAC7F,sFAAsF;IACtF,EAAE;IACF,kGAAkG;IAClG,mGAAmG;IACnG,mDAAmD;IACnD,gGAAgG;IAChG,oGAAoG;IACpG,+FAA+F;IAC/F,uFAAuF;IACvF,kGAAkG;IAClG,6EAA6E;IAC7E,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,gBAAgB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uDAAuD;YACzF,uFAAuF;YACvF,+BAA+B,CAClC,CAAC;AACN,CAAC"}

package/dist/schema-profile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema-profile.d.ts","sourceRoot":"","sources":["../src/schema-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAW,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAIlE;;6EAE6E;AAC7E,eAAO,MAAM,cAAc;IACzB,mDAAmD;;IAEnD,+EAA+E;;IAE/E,gDAAgD;;IA8ChD,+DAA+D;;IAE/D,sCAAsC;;IAEtC,+FAA+F;;IAE/F;;0DAEsD;;IAEtD,0EAA0E;;EAEjE,CAAC;AA+CZ;;cAEc;AACd,eAAO,MAAM,WAAW;;EAA2C,CAAC;AACpE,qFAAqF;AACrF,eAAO,MAAM,2BAA2B,QAA8B,CAAC;AACvE;8EAC8E;AAC9E,eAAO,MAAM,kBAAkB,QAA2E,CAAC;AAK3G;wFACwF;AACxF,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAG,kBAAkB,CAAU;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAqED;mFACmF;AACnF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AA0HD;;;;;;;;;;gCAUgC;AAChC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;CACvB;AAaD,2FAA2F;AAC3F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,gBAAgB,CAEpE;AAED;gGACgG;AAChG,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAIjF;AAgHD;;8DAE8D;AAC9D,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAGtE;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAE5E;AAED;;;;4BAI4B;AAC5B,wBAAgB,2BAA2B,CAAC,QAAQ,GAAE,MAA4C,GAAG;IACnG,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,gBAAgB,CAAC;IACpD,IAAI,EAAE,MAAM,MAAM,CAAC;CACpB,CAmBA"}
+{"version":3,"file":"schema-profile.d.ts","sourceRoot":"","sources":["../src/schema-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAW,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAIlE;;6EAE6E;AAC7E,eAAO,MAAM,cAAc;IACzB,mDAAmD;;IAEnD,+EAA+E;;IAE/E,gDAAgD;;IAoDhD,+DAA+D;;IAE/D,sCAAsC;;IAEtC,+FAA+F;;IAE/F;;0DAEsD;;IAEtD,0EAA0E;;EAEjE,CAAC;AAuEZ;;cAEc;AACd,eAAO,MAAM,WAAW;;EAA2C,CAAC;AACpE,qFAAqF;AACrF,eAAO,MAAM,2BAA2B,QAA8B,CAAC;AACvE;8EAC8E;AAC9E,eAAO,MAAM,kBAAkB,QAA2E,CAAC;AAK3G;wFACwF;AACxF,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAG,kBAAkB,CAAU;gBAChC,OAAO,EAAE,MAAM;CAI5B;AAqED;mFACmF;AACnF,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,OAAO,CAAC;IACd,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AA0HD;;;;;;;;;;gCAUgC;AAChC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;CACvB;AAaD,2FAA2F;AAC3F,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,gBAAgB,CAEpE;AAED;gGACgG;AAChG,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAIjF;AA8JD;;8DAE8D;AAC9D,wBAAgB,eAAe,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAGtE;AAED,8FAA8F;AAC9F,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,YAAY,GAAG,gBAAgB,CAE5E;AAED;;;;4BAI4B;AAC5B,wBAAgB,2BAA2B,CAAC,QAAQ,GAAE,MAA4C,GAAG;IACnG,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,gBAAgB,CAAC;IACpD,IAAI,EAAE,MAAM,MAAM,CAAC;CACpB,CAmBA"}

package/dist/schema-profile.js

@@ -40,11 +40,15 @@ export const SCHEMA_PROFILE = Object.freeze({
     //
     //   CRASH. A 2048-node patterned-properties document was observed to RangeError in Ajv's codegen
     //   at ~186KB — inside `maxDocumentBytes` — which looked like a hard edge worth standing in front
-    //   of. It is not an edge, and it failed to reproduce twice over. THE SAME SCHEMA IN THE SAME
-    //   PROCESS threw after 95.7ms cold and then COMPILED in 1035.5ms on the immediate warm retry;
-    //   and on the host these figures were taken from it does not throw at all, compiling in 679.8ms
-    //   cold and 544.8ms warm. A boundary that moves between two consecutive runs of one process, and
-    //   is absent on the next host, cannot be the basis of a frozen constant.
+    //   of. It is not an edge — not because it is unstable (re-measured for #1551: the SAME 2062-
+    //   property/187545-byte document RangeErrors 15/15 fresh processes at this profile's default
+    //   stack, and the reported cold-then-warm-compiles pattern did not reproduce once) — but because
+    //   the edge is a function of the STACK BUDGET, not the schema: it moves linearly with
+    //   `--stack-size` (measured 256KB→~460, 8MB default→~2050, on the pin this profile ships;
+    //   flattening ajv's codegen with `allErrors: true` moves the same edge to roughly 3.4x wider at
+    //   any given stack budget, never removes it) and by a fraction of a property per extra caller
+    //   frame burned before the compile call. A frozen node-count constant cannot express an edge that
+    //   moves with the CALLER's stack depth, which is outside this module's control.
     //
     //   AND THE VALUE WAS UNSAFE ON AN AXIS NOBODY MEASURED. Under `node --stack-size=256` a 512-node
     //   object RangeErrors, while 384 compiles — so the proposed `maxSchemaNodes: 512` did not hold
@@ -54,8 +58,10 @@ export const SCHEMA_PROFILE = Object.freeze({
     // WHAT STANDS IN ITS PLACE is what was doing the work the whole time: `maxDocumentBytes` and
     // `maxClosureBytes`, `maxDepth`, `maxRefChain`, `maxPatternChars`, the admitted-vocabulary
     // refusal, and — for exactly the codegen overflow above — the compile-error catch in
-    // `compileWithinBudget`, which has been normalising these to `contract-invalid` all along. That
-    // set refuses everything it refused before; removing an unfounded bound only LOOSENS, and
+    // `compileWithinBudget`, which normalises a stack overflow to `contract-invalid` naming the
+    // COMPILER's generated-code shape and the property count that triggered it, never the caller's
+    // schema (#1551). That set refuses everything it refused before; removing an unfounded bound only
+    // LOOSENS, and
     // loosening cannot break a contract that was already valid.
     //
     // BEFORE PROPOSING ONE AGAIN, run `implementations/manager/smoke/_probe-nodecount-rejected.ts`.
@@ -91,7 +97,31 @@ export const SCHEMA_PROFILE = Object.freeze({
  */
 const AJV_PROFILE_OPTIONS = Object.freeze({
     strict: false, // the wire accepts full 2020-12, not ajv's strict-mode dialect subset
-    allErrors: false,
+    // PINNED TRUE, not ajv's `false` default, for the flat code shape it produces (#1551).
+    // `allErrors: false` makes ajv nest one continuation `if` per property in the generated
+    // validator, so the compile of a wide object schema overflows the host call stack at a width
+    // set by the STACK BUDGET, not by any ceiling this profile enforces — every document this
+    // profile admits (bytes, depth, ref-chain, pattern length, vocabulary) can still fail to
+    // compile purely on shape. `allErrors: true` builds the same validations as a flat sequence
+    // instead, which does not remove the stack-bounded ceiling (ajv's codegen still recurses while
+    // it builds the code tree) but moves it about 3.4x wider at any given stack budget: measured on
+    // this pin, default 8MB stack SMALLEST_FAIL moved from 2055 properties to 6946, and
+    // `--stack-size=256` moved from 494 to 1769 (one host, Node 24; the ratio is the stable
+    // quantity, not the absolute counts — re-measure with a child process per candidate width, one
+    // `--stack-size` per row, per issue #1551's method).
+    //
+    // Safe to flip only because it changes NO VERDICT this profile's own checks depend on: ajv
+    // orders keyword/property evaluation identically regardless of `allErrors`, so `errors[0]` —
+    // the only field any caller-facing message reads (`endpoint-envelope.ts` firstErrorDetail,
+    // `endpoint-traits.ts` readSchema) — is byte-identical between the two settings for every
+    // schema/instance pair tried, and `packages/core/smoke/schema-profile.smoke.ts`'s full 67-check
+    // suite (every `refuses`/`ok` assertion, including the pattern safe-subset gate and the
+    // admitted-vocabulary walk) passes unchanged under either setting. Nothing on the wire ever
+    // reads ajv's full `errors` array, only its first entry, so `allErrors`'s extra collected
+    // errors are never observed by a caller. If a future change makes any of that no longer true —
+    // a caller starts reading `errors.length`, or a verdict diverges between the settings — this
+    // pin must be re-measured before it stays.
+    allErrors: true,
     validateFormats: false,
     loadSchema: undefined,
     // PINNED, never inherited from Ajv's default: the safe-pattern analyzer models `/u`
@@ -401,6 +431,41 @@ function assertClosureProfile(bundle) {
         throw new ContractInvalidError(`bundle carries ${extras.length} member(s) unreachable from the root (${extras.slice(0, 3).join(", ")}${extras.length > 3 ? ", …" : ""})`);
     return contractDigest({ v: 1, root: digestOrInvalid(bundle.root, "root schema"), members: [...seen].sort() });
 }
+/** The size of the widest map-valued keyword (`properties`, `patternProperties`, `$defs`,
+ *  `definitions`, `dependentSchemas`, `dependencies`) anywhere in one document — the shape that
+ *  drives ajv's per-property codegen (SPEC §13.7). Used only to NAME a codegen overflow after it
+ *  happens; every ceiling in {@link SCHEMA_PROFILE} has already admitted this document by the time
+ *  anything calls this, so it never gates anything itself. */
+function widestMapKeywordSize(doc, max = 0) {
+    if (doc === null || typeof doc !== "object" || Array.isArray(doc))
+        return max;
+    for (const [k, v] of Object.entries(doc)) {
+        if (SCHEMA_VALUED_MAP_KEYS.includes(k) && v && typeof v === "object" && !Array.isArray(v)) {
+            const size = Object.keys(v).length;
+            if (size > max)
+                max = size;
+            for (const sub of Object.values(v))
+                max = widestMapKeywordSize(sub, max);
+        }
+        else if (SCHEMA_VALUED_KEYS.includes(k)) {
+            max = widestMapKeywordSize(v, max);
+        }
+        else if (SCHEMA_VALUED_LIST_KEYS.includes(k) && Array.isArray(v)) {
+            for (const sub of v)
+                max = widestMapKeywordSize(sub, max);
+        }
+    }
+    return max;
+}
+/** The widest map-valued keyword across the whole closure (root plus every bundle member) — the
+ *  quantity {@link widestMapKeywordSize} measures, maximised over every document a compile call
+ *  actually sees. */
+function widestClosurePropertyCount(bundle) {
+    let max = widestMapKeywordSize(bundle.root);
+    for (const member of Object.values(bundle.members ?? {}))
+        max = widestMapKeywordSize(member, max);
+    return max;
+}
 function compileWithinBudget(bundle) {
     // NOTHING HERE REFUSES A SCHEMA FOR BEING EXPENSIVE, and that is deliberate rather than
     // overlooked. The timing below is an OBSERVATION and refuses nothing; the node ceiling that was
@@ -456,6 +521,20 @@ function compileWithinBudget(bundle) {
         validate = ajv.compile(bundle.root);
     }
     catch (e) {
+        // A `RangeError` here is the compiler's own generated code overflowing the host's call
+        // stack (SPEC §13.7) — every ceiling above already admitted this document, so the schema is
+        // not what failed. Naming the caller's schema in that case (as the generic branch below does
+        // for every other compile failure) sends the caller to rewrite something that was never
+        // wrong. Named instead: the shape that overflowed (ajv's per-property codegen), and the width
+        // that did it (the widest `properties`/`patternProperties`/`$defs`/… map anywhere in the
+        // closure) — the two facts a caller needs to know this is not their schema's fault.
+        if (e instanceof RangeError) {
+            const width = widestClosurePropertyCount(bundle);
+            throw new ContractInvalidError(`schema does not compile under the 2020-12 profile: the generated validator's code shape overflowed `
+                + `the call stack (${e.message}) compiling a ${width}-property object, which every profile `
+                + `ceiling (document/closure bytes, depth, ref-chain, pattern length, admitted vocabulary) had already `
+                + `admitted; this is the compiler's generated-code shape running out of stack, not a defect in the schema`);
+        }
         throw new ContractInvalidError(`schema does not compile under the 2020-12 profile: ${e.message}`);
     }
     const cpu = process.cpuUsage(startedCpu);