@czap/astro 0.1.0

package/dist/runtime/llm.js

@@ -0,0 +1,273 @@
+import { Diagnostics } from '@czap/core';
+import { createLLMSession } from './llm-session.js';
+import { readRuntimeHtmlPolicy, readRuntimeEndpointPolicy } from './policy.js';
+import { allowRuntimeEndpointUrl } from './url-policy.js';
+const SAFE_LLM_TARGET_SELECTOR = /^(?:#[A-Za-z][\w-]*|\.[A-Za-z_][\w-]*|\[data-czap-target="[-:A-Za-z0-9_]+"\])$/;
+const parseJSONUnknown = (text) => JSON.parse(text);
+function normalizeToolDeltaContent(content, toolArgs) {
+    if (typeof content === 'string') {
+        return content;
+    }
+    if (typeof toolArgs === 'string') {
+        return toolArgs;
+    }
+    if (toolArgs && typeof toolArgs === 'object') {
+        return JSON.stringify(toolArgs);
+    }
+    return undefined;
+}
+function firstMeaningfulCharCode(raw) {
+    for (let index = 0; index < raw.length; index++) {
+        const code = raw.charCodeAt(index);
+        if (code !== 32 && code !== 9 && code !== 10 && code !== 13) {
+            return code;
+        }
+    }
+    return -1;
+}
+function toStructuredChunk(type, partial, content, toolName, toolArgs) {
+    const normalizedToolName = typeof toolName === 'string' ? toolName : undefined;
+    const normalizedContent = type === 'tool-call-delta'
+        ? normalizeToolDeltaContent(content, toolArgs)
+        : typeof content === 'string'
+            ? content
+            : undefined;
+    return {
+        type,
+        partial: partial === true,
+        content: normalizedContent,
+        toolName: normalizedToolName,
+        toolArgs,
+    };
+}
+/**
+ * Parse a raw `MessageEvent` payload into an {@link LLMChunk}. Returns
+ * `null` when the payload is unrecognised so callers can drop
+ * non-chunk events (metrics, heartbeats, ...) silently.
+ */
+export function parseLLMChunk(event) {
+    const decoded = decodeLLMEventData(event.data);
+    return decoded.type === 'chunk' ? decoded.chunk : null;
+}
+function mapDeviceTier() {
+    switch (document.documentElement.getAttribute('data-czap-tier')) {
+        case 'static':
+            return 'none';
+        case 'styled':
+            return 'transitions';
+        case 'gpu':
+            return 'compute';
+        case 'animated':
+            return 'physics';
+        default:
+            return 'animations';
+    }
+}
+function parseLLMError(error) {
+    if (typeof error.content === 'string') {
+        return error.content;
+    }
+    if (typeof error.message === 'string') {
+        return error.message;
+    }
+    return 'unknown error';
+}
+function isStructuredLLMEvent(value) {
+    return typeof value === 'object' && value !== null;
+}
+function decodeStructuredLLMEventData(data) {
+    if (!isStructuredLLMEvent(data)) {
+        return { type: 'ignored' };
+    }
+    switch (data.type) {
+        case 'receipt':
+            return isReceiptEnvelope(data.data) ? { type: 'receipt', envelope: data.data } : { type: 'ignored' };
+        case 'error': {
+            return { type: 'error', message: parseLLMError(data) };
+        }
+        case 'text':
+        case 'tool-call-start':
+        case 'tool-call-delta':
+        case 'tool-call-end':
+        case 'done':
+            return {
+                type: 'chunk',
+                chunk: toStructuredChunk(data.type, data.partial, data.content, data.toolName, data.toolArgs),
+            };
+        default:
+            return { type: 'ignored' };
+    }
+}
+function decodeLLMEventData(data) {
+    if (typeof data === 'string') {
+        const firstChar = firstMeaningfulCharCode(data);
+        if (firstChar === -1) {
+            return { type: 'ignored' };
+        }
+        if (firstChar !== 123 && firstChar !== 91) {
+            return {
+                type: 'chunk',
+                chunk: {
+                    type: 'text',
+                    partial: false,
+                    content: data,
+                    toolName: undefined,
+                    toolArgs: undefined,
+                },
+            };
+        }
+        let parsed;
+        let syntaxError = false;
+        try {
+            parsed = parseJSONUnknown(data);
+        }
+        catch (error) {
+            if (error instanceof SyntaxError) {
+                syntaxError = true;
+            }
+            else {
+                throw error;
+            }
+        }
+        if (syntaxError) {
+            return { type: 'ignored' };
+        }
+        return decodeStructuredLLMEventData(parsed);
+    }
+    return decodeStructuredLLMEventData(data);
+}
+function isReceiptEnvelope(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    if (!('hash' in value) || !('previous' in value))
+        return false;
+    return typeof value.hash === 'string';
+}
+function resolveLLMTarget(element, selector) {
+    if (!selector || !SAFE_LLM_TARGET_SELECTOR.test(selector)) {
+        return element;
+    }
+    try {
+        const found = element.querySelector(selector);
+        return found instanceof HTMLElement ? found : element;
+    }
+    catch {
+        return element;
+    }
+}
+/**
+ * Entry point used by the `client:llm` directive to start a streaming
+ * LLM session on `element`. Reads `data-czap-llm-url` (plus optional
+ * target / mode attributes), validates it against the runtime
+ * endpoint policy, opens an SSE stream, and drives an
+ * {@link LLMSessionShape} to completion.
+ */
+export function initLLMDirective(load, element) {
+    const endpointPolicy = readRuntimeEndpointPolicy();
+    const htmlPolicy = readRuntimeHtmlPolicy();
+    const llmUrl = allowRuntimeEndpointUrl(element.getAttribute('data-czap-llm-url'), 'llm', 'czap/astro.llm', {
+        crossOriginRejected: 'llm-cross-origin-url-rejected',
+        malformedUrl: 'llm-malformed-url-rejected',
+        originNotAllowed: 'llm-origin-not-allowed',
+        endpointKindNotPermitted: 'llm-endpoint-kind-not-permitted',
+    }, endpointPolicy);
+    if (!llmUrl) {
+        return;
+    }
+    const mode = element.getAttribute('data-czap-llm-mode') ?? 'append';
+    const targetSelector = element.getAttribute('data-czap-llm-target');
+    const resolveTarget = () => resolveLLMTarget(element, targetSelector);
+    const resetTarget = (target) => {
+        target.replaceChildren();
+    };
+    let source = null;
+    const session = createLLMSession({
+        element,
+        target: resolveTarget(),
+        mode,
+        getDeviceTier: mapDeviceTier,
+        htmlPolicy: htmlPolicy.llmDefault,
+        allowTrustedHtml: htmlPolicy.allowTrustedHtml,
+    });
+    const cleanupSource = () => {
+        if (source) {
+            source.onopen = null;
+            source.onmessage = null;
+            source.onerror = null;
+        }
+        source?.close();
+        source = null;
+    };
+    const cleanup = () => {
+        cleanupSource();
+        session.dispose();
+    };
+    const handleDisconnect = () => {
+        cleanupSource();
+        session.beginReconnect();
+        const strategy = session.replayGap();
+        if (strategy.type === 'replay') {
+            return;
+        }
+        element.dispatchEvent(new CustomEvent('czap:llm-error', {
+            detail: { reason: 'connection-error', strategy: strategy.type },
+            bubbles: true,
+        }));
+    };
+    const connect = () => {
+        cleanupSource();
+        const target = resolveTarget();
+        resetTarget(target);
+        session.reset(target);
+        source = new EventSource(llmUrl);
+        source.onopen = () => {
+            session.activate();
+            element.dispatchEvent(new CustomEvent('czap:llm-start', { bubbles: true }));
+        };
+        source.onmessage = (event) => {
+            const decoded = decodeLLMEventData(event.data);
+            switch (decoded.type) {
+                case 'receipt':
+                    session.rememberEnvelope(decoded.envelope);
+                    return;
+                case 'error':
+                    element.dispatchEvent(new CustomEvent('czap:llm-error', {
+                        detail: { message: decoded.message },
+                        bubbles: true,
+                    }));
+                    cleanupSource();
+                    return;
+                case 'ignored':
+                    return;
+                case 'chunk':
+                    if (session.ingest(decoded.chunk) === 'done') {
+                        cleanupSource();
+                    }
+                    return;
+            }
+        };
+        source.onerror = () => {
+            handleDisconnect();
+        };
+    };
+    try {
+        connect();
+    }
+    catch (error) {
+        Diagnostics.error({
+            source: 'czap/astro.llm',
+            code: 'llm-runtime-init-failed',
+            message: 'The shared LLM runtime could not initialize.',
+            detail: error instanceof Error ? error.message : String(error),
+        });
+        cleanup();
+    }
+    element.addEventListener('czap:reinit', () => {
+        connect();
+    });
+    element.addEventListener('czap:dispose', () => {
+        cleanup();
+    });
+    load();
+}
+//# sourceMappingURL=llm.js.map

package/dist/runtime/llm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm.js","sourceRoot":"","sources":["../../src/runtime/llm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAGzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAE1D,MAAM,wBAAwB,GAAG,gFAAgF,CAAC;AAElH,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;AAErE,SAAS,yBAAyB,CAAC,OAAgB,EAAE,QAAiB;IACpE,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAChC,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAW;IAC1C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,CAAC,CAAC,CAAC;AACZ,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAsB,EACtB,OAAgB,EAChB,OAAgB,EAChB,QAAiB,EACjB,QAAiB;IAEjB,MAAM,kBAAkB,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,MAAM,iBAAiB,GACrB,IAAI,KAAK,iBAAiB;QACxB,CAAC,CAAC,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC9C,CAAC,CAAC,OAAO,OAAO,KAAK,QAAQ;YAC3B,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,SAAS,CAAC;IAElB,OAAO;QACL,IAAI;QACJ,OAAO,EAAE,OAAO,KAAK,IAAI;QACzB,OAAO,EAAE,iBAAiB;QAC1B,QAAQ,EAAE,kBAAkB;QAC5B,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAiC;IAC7D,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACzD,CAAC;AAED,SAAS,aAAa;IACpB,QAAQ,QAAQ,CAAC,eAAe,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAChE,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC;QACvB,KAAK,KAAK;YACR,OAAO,SAAS,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,SAAS,CAAC;QACnB;YACE,OAAO,YAAY,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAA+C;IACpE,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,OAAO,CAAC;IACvB,CAAC;IAED,OAAO,eAAe,CAAC;AACzB,CAAC;AAkBD,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED,SAAS,4BAA4B,CAAC,IAAa;IACjD,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC7B,CAAC;IAED,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QACvG,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACzD,CAAC;QACD,KAAK,MAAM,CAAC;QACZ,KAAK,iBAAiB,CAAC;QACvB,KAAK,iBAAiB,CAAC;QACvB,KAAK,eAAe,CAAC;QACrB,KAAK,MAAM;YACT,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC;aAC9F,CAAC;QACJ;YACE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/B,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,uBAAuB,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,SAAS,KAAK,CAAC,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QAED,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YAC1C,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,KAAK,EAAE;oBACL,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,KAAK;oBACd,OAAO,EAAE,IAAI;oBACb,QAAQ,EAAE,SAAS;oBACnB,QAAQ,EAAE,SAAS;iBACpB;aACF,CAAC;QACJ,CAAC;QAED,IAAI,MAAe,CAAC;QACpB,IAAI,WAAW,GAAG,KAAK,CAAC;QAExB,IAAI,CAAC;YACH,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;gBACjC,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;QAC7B,CAAC;QAED,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/D,OAAO,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;AACxC,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAoB,EAAE,QAAuB;IACrE,IAAI,CAAC,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9C,OAAO,KAAK,YAAY,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;IACxD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAA4B,EAAE,OAAoB;IACjF,MAAM,cAAc,GAAG,yBAAyB,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,qBAAqB,EAAE,CAAC;IAC3C,MAAM,MAAM,GAAG,uBAAuB,CACpC,OAAO,CAAC,YAAY,CAAC,mBAAmB,CAAC,EACzC,KAAK,EACL,gBAAgB,EAChB;QACE,mBAAmB,EAAE,+BAA+B;QACpD,YAAY,EAAE,4BAA4B;QAC1C,gBAAgB,EAAE,wBAAwB;QAC1C,wBAAwB,EAAE,iCAAiC;KAC5D,EACD,cAAc,CACf,CAAC;IACF,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,oBAAoB,CAAC,IAAI,QAAQ,CAAC;IACpE,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,sBAAsB,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,GAAgB,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACnF,MAAM,WAAW,GAAG,CAAC,MAAmB,EAAQ,EAAE;QAChD,MAAM,CAAC,eAAe,EAAE,CAAC;IAC3B,CAAC,CAAC;IAEF,IAAI,MAAM,GAAuB,IAAI,CAAC;IACtC,MAAM,OAAO,GAAG,gBAAgB,CAAC;QAC/B,OAAO;QACP,MAAM,EAAE,aAAa,EAAE;QACvB,IAAI;QACJ,aAAa,EAAE,aAAa;QAC5B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;KAC9C,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,GAAS,EAAE;QAC/B,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;YACrB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;YACxB,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,CAAC;QAChB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,aAAa,EAAE,CAAC;QAChB,OAAO,CAAC,OAAO,EAAE,CAAC;IACpB,CAAC,CAAC;IAEF,MAAM,gBAAgB,GAAG,GAAS,EAAE;QAClC,aAAa,EAAE,CAAC;QAChB,OAAO,CAAC,cAAc,EAAE,CAAC;QAEzB,MAAM,QAAQ,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,QAAQ,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC/B,OAAO;QACT,CAAC;QAED,OAAO,CAAC,aAAa,CACnB,IAAI,WAAW,CAAC,gBAAgB,EAAE;YAChC,MAAM,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;YAC/D,OAAO,EAAE,IAAI;SACd,CAAC,CACH,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,GAAS,EAAE;QACzB,aAAa,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;QAC/B,WAAW,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtB,MAAM,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC;QAEjC,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE;YACnB,OAAO,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,CAAC,aAAa,CAAC,IAAI,WAAW,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9E,CAAC,CAAC;QAEF,MAAM,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;YACzC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC/C,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,KAAK,SAAS;oBACZ,OAAO,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;oBAC3C,OAAO;gBACT,KAAK,OAAO;oBACV,OAAO,CAAC,aAAa,CACnB,IAAI,WAAW,CAAC,gBAAgB,EAAE;wBAChC,MAAM,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;wBACpC,OAAO,EAAE,IAAI;qBACd,CAAC,CACH,CAAC;oBACF,aAAa,EAAE,CAAC;oBAChB,OAAO;gBACT,KAAK,SAAS;oBACZ,OAAO;gBACT,KAAK,OAAO;oBACV,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;wBAC7C,aAAa,EAAE,CAAC;oBAClB,CAAC;oBACD,OAAO;YACX,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE;YACpB,gBAAgB,EAAE,CAAC;QACrB,CAAC,CAAC;IACJ,CAAC,CAAC;IAEF,IAAI,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,KAAK,CAAC;YAChB,MAAM,EAAE,gBAAgB;YACxB,IAAI,EAAE,yBAAyB;YAC/B,OAAO,EAAE,8CAA8C;YACvD,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC/D,CAAC,CAAC;QACH,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,CAAC,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3C,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,gBAAgB,CAAC,cAAc,EAAE,GAAG,EAAE;QAC5C,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/runtime/policy.d.ts

@@ -0,0 +1,100 @@
+/**
+ * Runtime security-policy data model: how `@czap/astro`'s client
+ * directives decide which endpoints they may fetch and how to treat
+ * HTML returned from those endpoints.
+ *
+ * @module
+ */
+import type { HtmlPolicy, RuntimeEndpointKind, RuntimeEndpointPolicy } from '@czap/web';
+/**
+ * User-supplied HTML policy. Directives fall back to conservative
+ * defaults (`text` for LLM output, `sanitized-html` for stream
+ * payloads) when individual fields are omitted.
+ */
+export interface RuntimeHtmlPolicy {
+    /** Default HTML trust level for `client:llm` text sinks. */
+    readonly llmDefault?: HtmlPolicy;
+    /** Default HTML trust level for `client:stream` payloads. */
+    readonly streamDefault?: HtmlPolicy;
+    /** Opt-in to `trusted-html` system-wide. */
+    readonly allowTrustedHtml?: boolean;
+}
+/**
+ * Combined runtime security policy (endpoint + HTML). Passed to
+ * {@link configureRuntimePolicy} and persisted on `window` for
+ * directive consumption.
+ */
+export interface RuntimeSecurityPolicy {
+    /** Endpoint allowlist configuration. */
+    readonly endpointPolicy?: RuntimeEndpointPolicy;
+    /** HTML policy configuration. */
+    readonly htmlPolicy?: RuntimeHtmlPolicy;
+}
+/**
+ * Frozen, fully-populated form of {@link RuntimeEndpointPolicy}. Every
+ * `RuntimeEndpointKind` has an allowlist (possibly empty) so callers
+ * can index safely without presence checks.
+ */
+export interface NormalizedRuntimeEndpointPolicy {
+    readonly mode: RuntimeEndpointPolicy['mode'];
+    readonly allowOrigins: readonly string[];
+    readonly byKind: Readonly<Record<RuntimeEndpointKind, readonly string[]>>;
+}
+/**
+ * Frozen form of {@link RuntimeSecurityPolicy} with every optional
+ * field materialised to its default. Produced by
+ * {@link normalizeRuntimeSecurityPolicy}.
+ */
+export interface NormalizedRuntimeSecurityPolicy {
+    readonly endpointPolicy: NormalizedRuntimeEndpointPolicy;
+    readonly htmlPolicy: {
+        readonly llmDefault: HtmlPolicy;
+        readonly streamDefault: HtmlPolicy;
+        readonly allowTrustedHtml: boolean;
+    };
+}
+/**
+ * Freeze a user-supplied security policy into the fully-populated
+ * {@link NormalizedRuntimeSecurityPolicy} form. Applies conservative
+ * defaults for any missing fields.
+ */
+export declare function normalizeRuntimeSecurityPolicy(policy?: RuntimeSecurityPolicy): NormalizedRuntimeSecurityPolicy;
+/**
+ * Normalise `policy` and install it as the active runtime configuration.
+ *
+ * The first call in a given realm publishes the value to
+ * `window.__CZAP_RUNTIME_POLICY__` with `configurable: false` and
+ * `writable: false`, so an attacker cannot redefine the global via
+ * `Object.defineProperty` to install a permissive policy. Subsequent
+ * calls (HMR, test re-initialisation) update the module-private store
+ * only — the window global stays locked at the first published value.
+ *
+ * Production callers run `configureRuntimePolicy` once during the
+ * integration boot script. Test harnesses re-call it freely; reads
+ * via `readRuntimePolicy()` return the latest configured value
+ * because the module-private store is checked first.
+ */
+export declare function configureRuntimePolicy(policy?: RuntimeSecurityPolicy): NormalizedRuntimeSecurityPolicy;
+/**
+ * Read the active runtime policy. Prefers the module-private store
+ * (the canonical source of truth), falls back to the cross-bundle
+ * window broadcast for consumers loaded as a separate bundle, and
+ * finally to a default normalised policy when nothing has been
+ * configured (e.g. in tests that haven't called
+ * `configureRuntimePolicy` yet).
+ */
+export declare function readRuntimePolicy(): NormalizedRuntimeSecurityPolicy;
+/**
+ * Reset the module-private policy store to its uninitialised state.
+ * Test-only: production code must not call this. The window-global
+ * broadcast is intentionally NOT cleared (the descriptor is
+ * non-configurable and cannot be redefined within a single realm).
+ *
+ * @internal
+ */
+export declare function _resetRuntimePolicyForTests(): void;
+/** Convenience accessor for the endpoint sub-policy. */
+export declare function readRuntimeEndpointPolicy(): NormalizedRuntimeEndpointPolicy;
+/** Convenience accessor for the HTML sub-policy. */
+export declare function readRuntimeHtmlPolicy(): NormalizedRuntimeSecurityPolicy['htmlPolicy'];
+//# sourceMappingURL=policy.d.ts.map

package/dist/runtime/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/runtime/policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,WAAW,CAAC;AAGxF;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC;IACpC,4CAA4C;IAC5C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CACrC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,wCAAwC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,qBAAqB,CAAC;IAChD,iCAAiC;IACjC,QAAQ,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC;CAC3E;AAED;;;;GAIG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,cAAc,EAAE,+BAA+B,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;QAChC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;QACnC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;KACpC,CAAC;CACH;AAiED;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,+BAA+B,CAS9G;AA4BD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,CAAC,EAAE,qBAAqB,GAAG,+BAA+B,CAUtG;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,+BAA+B,CAKnE;AAED;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,IAAI,IAAI,CAElD;AAED,wDAAwD;AACxD,wBAAgB,yBAAyB,IAAI,+BAA+B,CAE3E;AAED,oDAAoD;AACpD,wBAAgB,qBAAqB,IAAI,+BAA+B,CAAC,YAAY,CAAC,CAErF"}

package/dist/runtime/policy.js

@@ -0,0 +1,147 @@
+import { readRuntimeGlobal, writeRuntimeGlobal } from './globals.js';
+function isNormalizedRuntimeSecurityPolicy(value) {
+    return (typeof value === 'object' &&
+        value !== null &&
+        'endpointPolicy' in value &&
+        'htmlPolicy' in value &&
+        typeof value.endpointPolicy === 'object' &&
+        value.endpointPolicy !== null &&
+        typeof value.htmlPolicy === 'object' &&
+        value.htmlPolicy !== null);
+}
+const DEFAULT_ENDPOINT_POLICY = Object.freeze({
+    mode: 'same-origin',
+    allowOrigins: Object.freeze([]),
+    byKind: Object.freeze({
+        stream: Object.freeze([]),
+        snapshot: Object.freeze([]),
+        replay: Object.freeze([]),
+        llm: Object.freeze([]),
+        'gpu-shader': Object.freeze([]),
+        wasm: Object.freeze([]),
+    }),
+});
+const DEFAULT_HTML_POLICY = Object.freeze({
+    llmDefault: 'text',
+    streamDefault: 'sanitized-html',
+    allowTrustedHtml: false,
+});
+function freezeOrigins(origins) {
+    return Object.freeze((origins ?? []).map((origin) => origin.trim()).filter((origin) => origin.length > 0));
+}
+function freezeEndpointPolicy(policy) {
+    if (!policy) {
+        return DEFAULT_ENDPOINT_POLICY;
+    }
+    // Fully populate every kind up-front so the record is typed correctly
+    // from the initializer, without an empty-literal cast.
+    const byKind = {
+        stream: freezeOrigins(policy.byKind?.stream),
+        snapshot: freezeOrigins(policy.byKind?.snapshot),
+        replay: freezeOrigins(policy.byKind?.replay),
+        llm: freezeOrigins(policy.byKind?.llm),
+        'gpu-shader': freezeOrigins(policy.byKind?.['gpu-shader']),
+        wasm: freezeOrigins(policy.byKind?.wasm),
+    };
+    return Object.freeze({
+        mode: policy.mode,
+        allowOrigins: freezeOrigins(policy.allowOrigins),
+        byKind: Object.freeze(byKind),
+    });
+}
+/**
+ * Freeze a user-supplied security policy into the fully-populated
+ * {@link NormalizedRuntimeSecurityPolicy} form. Applies conservative
+ * defaults for any missing fields.
+ */
+export function normalizeRuntimeSecurityPolicy(policy) {
+    return Object.freeze({
+        endpointPolicy: freezeEndpointPolicy(policy?.endpointPolicy),
+        htmlPolicy: Object.freeze({
+            llmDefault: policy?.htmlPolicy?.llmDefault ?? DEFAULT_HTML_POLICY.llmDefault,
+            streamDefault: policy?.htmlPolicy?.streamDefault ?? DEFAULT_HTML_POLICY.streamDefault,
+            allowTrustedHtml: policy?.htmlPolicy?.allowTrustedHtml ?? DEFAULT_HTML_POLICY.allowTrustedHtml,
+        }),
+    });
+}
+/**
+ * Module-private source of truth for the active runtime policy. Lives
+ * in a closure no external script can `Object.defineProperty` past;
+ * the window global is a discoverable broadcast and a cross-bundle
+ * bridge, not the canonical store. Production callers always go
+ * through `configureRuntimePolicy` / `readRuntimePolicy`, both of
+ * which read the closure first.
+ *
+ * @internal
+ */
+let _currentPolicy = null;
+/**
+ * Tracks whether the cross-bundle window broadcast has been published.
+ * The broadcast happens once per realm with `configurable: false` so
+ * an attacker with script execution cannot redefine the property on
+ * later loaders. Subsequent `configureRuntimePolicy` calls (HMR,
+ * tests) update the module-private store but skip a re-broadcast,
+ * which would throw against the locked descriptor. The broadcast is
+ * informational; consumers in the same module-graph see updates
+ * through the closure regardless.
+ *
+ * @internal
+ */
+let _windowGlobalPublished = false;
+/**
+ * Normalise `policy` and install it as the active runtime configuration.
+ *
+ * The first call in a given realm publishes the value to
+ * `window.__CZAP_RUNTIME_POLICY__` with `configurable: false` and
+ * `writable: false`, so an attacker cannot redefine the global via
+ * `Object.defineProperty` to install a permissive policy. Subsequent
+ * calls (HMR, test re-initialisation) update the module-private store
+ * only — the window global stays locked at the first published value.
+ *
+ * Production callers run `configureRuntimePolicy` once during the
+ * integration boot script. Test harnesses re-call it freely; reads
+ * via `readRuntimePolicy()` return the latest configured value
+ * because the module-private store is checked first.
+ */
+export function configureRuntimePolicy(policy) {
+    const normalized = normalizeRuntimeSecurityPolicy(policy);
+    _currentPolicy = normalized;
+    if (!_windowGlobalPublished) {
+        writeRuntimeGlobal('__CZAP_RUNTIME_POLICY__', normalized, { configurable: false });
+        _windowGlobalPublished = true;
+    }
+    return normalized;
+}
+/**
+ * Read the active runtime policy. Prefers the module-private store
+ * (the canonical source of truth), falls back to the cross-bundle
+ * window broadcast for consumers loaded as a separate bundle, and
+ * finally to a default normalised policy when nothing has been
+ * configured (e.g. in tests that haven't called
+ * `configureRuntimePolicy` yet).
+ */
+export function readRuntimePolicy() {
+    if (_currentPolicy)
+        return _currentPolicy;
+    return (readRuntimeGlobal('__CZAP_RUNTIME_POLICY__', isNormalizedRuntimeSecurityPolicy) ?? normalizeRuntimeSecurityPolicy());
+}
+/**
+ * Reset the module-private policy store to its uninitialised state.
+ * Test-only: production code must not call this. The window-global
+ * broadcast is intentionally NOT cleared (the descriptor is
+ * non-configurable and cannot be redefined within a single realm).
+ *
+ * @internal
+ */
+export function _resetRuntimePolicyForTests() {
+    _currentPolicy = null;
+}
+/** Convenience accessor for the endpoint sub-policy. */
+export function readRuntimeEndpointPolicy() {
+    return readRuntimePolicy().endpointPolicy;
+}
+/** Convenience accessor for the HTML sub-policy. */
+export function readRuntimeHtmlPolicy() {
+    return readRuntimePolicy().htmlPolicy;
+}
+//# sourceMappingURL=policy.js.map

package/dist/runtime/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/runtime/policy.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAqDrE,SAAS,iCAAiC,CAAC,KAAc;IACvD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,gBAAgB,IAAI,KAAK;QACzB,YAAY,IAAI,KAAK;QACrB,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ;QACxC,KAAK,CAAC,cAAc,KAAK,IAAI;QAC7B,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ;QACpC,KAAK,CAAC,UAAU,KAAK,IAAI,CAC1B,CAAC;AACJ,CAAC;AAED,MAAM,uBAAuB,GAAoC,MAAM,CAAC,MAAM,CAAC;IAC7E,IAAI,EAAE,aAAa;IACnB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;KACxB,CAAC;CACH,CAAC,CAAC;AAEH,MAAM,mBAAmB,GAIrB,MAAM,CAAC,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM;IAClB,aAAa,EAAE,gBAAgB;IAC/B,gBAAgB,EAAE,KAAK;CACxB,CAAC,CAAC;AAEH,SAAS,aAAa,CAAC,OAA2B;IAChD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;AAC7G,CAAC;AAED,SAAS,oBAAoB,CAAC,MAA8B;IAC1D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,uBAAuB,CAAC;IACjC,CAAC;IAED,sEAAsE;IACtE,uDAAuD;IACvD,MAAM,MAAM,GAAmD;QAC7D,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;QAC5C,QAAQ,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;QAChD,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;QAC5C,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;QACtC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,YAAY,CAAC,CAAC;QAC1D,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;KACzC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC;QAChD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,8BAA8B,CAAC,MAA8B;IAC3E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,cAAc,EAAE,oBAAoB,CAAC,MAAM,EAAE,cAAc,CAAC;QAC5D,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC;YACxB,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,IAAI,mBAAmB,CAAC,UAAU;YAC5E,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,aAAa,IAAI,mBAAmB,CAAC,aAAa;YACrF,gBAAgB,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,IAAI,mBAAmB,CAAC,gBAAgB;SAC/F,CAAC;KACH,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,IAAI,cAAc,GAA2C,IAAI,CAAC;AAElE;;;;;;;;;;;GAWG;AACH,IAAI,sBAAsB,GAAG,KAAK,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA8B;IACnE,MAAM,UAAU,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC1D,cAAc,GAAG,UAAU,CAAC;IAE5B,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,kBAAkB,CAAC,yBAAyB,EAAE,UAAU,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;QACnF,sBAAsB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,cAAc;QAAE,OAAO,cAAc,CAAC;IAC1C,OAAO,CACL,iBAAiB,CAAC,yBAAyB,EAAE,iCAAiC,CAAC,IAAI,8BAA8B,EAAE,CACpH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,2BAA2B;IACzC,cAAc,GAAG,IAAI,CAAC;AACxB,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,yBAAyB;IACvC,OAAO,iBAAiB,EAAE,CAAC,cAAc,CAAC;AAC5C,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,qBAAqB;IACnC,OAAO,iBAAiB,EAAE,CAAC,UAAU,CAAC;AACxC,CAAC"}

package/dist/runtime/receipt-chain.d.ts

@@ -0,0 +1,22 @@
+import type { Receipt, UIFrame } from '@czap/core';
+type ReceiptEnvelope = Receipt.Envelope;
+type ReceiptTrustMode = 'advisory-unverified';
+interface ReceiptChainShape {
+    rememberFrame(frame: UIFrame): void;
+    ingestEnvelope(envelope: ReceiptEnvelope): boolean;
+    hasFramesAfter(receiptId: string | null): boolean;
+    getFramesAfter(receiptId: string | null): readonly UIFrame[];
+    latestReceiptId(): string | null;
+    trustMode(): ReceiptTrustMode;
+}
+/**
+ * Build a new in-memory receipt chain. Owns a DAG of ingested receipt
+ * envelopes plus a map of remembered frames keyed by receipt id, so
+ * the LLM directive can replay gaps when the SSE stream reconnects.
+ *
+ * The chain currently treats signatures as advisory; a diagnostic is
+ * emitted when signed envelopes arrive without a configured verifier.
+ */
+export declare function createReceiptChain(): ReceiptChainShape;
+export {};
+//# sourceMappingURL=receipt-chain.d.ts.map

package/dist/runtime/receipt-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-chain.d.ts","sourceRoot":"","sources":["../../src/runtime/receipt-chain.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEnD,KAAK,eAAe,GAAG,OAAO,CAAC,QAAQ,CAAC;AACxC,KAAK,gBAAgB,GAAG,qBAAqB,CAAC;AAE9C,UAAU,iBAAiB;IACzB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,cAAc,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC;IACnD,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IAClD,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,OAAO,EAAE,CAAC;IAC7D,eAAe,IAAI,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,IAAI,gBAAgB,CAAC;CAC/B;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,IAAI,iBAAiB,CAkFtD"}

package/dist/runtime/receipt-chain.js

@@ -0,0 +1,80 @@
+import { DAG, Diagnostics } from '@czap/core';
+/**
+ * Build a new in-memory receipt chain. Owns a DAG of ingested receipt
+ * envelopes plus a map of remembered frames keyed by receipt id, so
+ * the LLM directive can replay gaps when the SSE stream reconnects.
+ *
+ * The chain currently treats signatures as advisory; a diagnostic is
+ * emitted when signed envelopes arrive without a configured verifier.
+ */
+export function createReceiptChain() {
+    let dag = DAG.empty();
+    const framesByReceipt = new Map();
+    const orderedReceipts = [];
+    const orderedFrameIds = () => {
+        if (DAG.size(dag) > 0) {
+            const ids = DAG.linearize(dag)
+                .map((envelope) => envelope.hash)
+                .filter((hash) => framesByReceipt.has(hash));
+            if (ids.length > 0) {
+                return ids;
+            }
+        }
+        return orderedReceipts;
+    };
+    return {
+        rememberFrame(frame) {
+            framesByReceipt.set(frame.receiptId, frame);
+            if (!orderedReceipts.includes(frame.receiptId)) {
+                orderedReceipts.push(frame.receiptId);
+            }
+        },
+        ingestEnvelope(envelope) {
+            if (envelope.signature) {
+                Diagnostics.warnOnce({
+                    source: 'czap/astro.receipt-chain',
+                    code: 'receipt-signature-unverified',
+                    message: 'Receipt signatures are present but runtime ingestion treats them as advisory metadata until verification is configured.',
+                });
+            }
+            dag = DAG.ingest(dag, envelope);
+            return true;
+        },
+        hasFramesAfter(receiptId) {
+            const ids = orderedFrameIds();
+            if (ids.length === 0) {
+                return false;
+            }
+            if (receiptId === null) {
+                return ids.length > 0;
+            }
+            const index = ids.indexOf(receiptId);
+            if (index === -1) {
+                return false;
+            }
+            return index < ids.length - 1;
+        },
+        getFramesAfter(receiptId) {
+            const ids = orderedFrameIds();
+            if (receiptId === null) {
+                return ids.map((id) => framesByReceipt.get(id)).filter(Boolean);
+            }
+            const index = ids.indexOf(receiptId);
+            if (index === -1) {
+                return [];
+            }
+            return ids
+                .slice(index + 1)
+                .map((id) => framesByReceipt.get(id))
+                .filter(Boolean);
+        },
+        latestReceiptId() {
+            const ids = orderedFrameIds();
+            return ids.length > 0 ? ids[ids.length - 1] : null;
+        },
+        trustMode() {
+            return 'advisory-unverified';
+        },
+    };
+}
+//# sourceMappingURL=receipt-chain.js.map

package/dist/runtime/receipt-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt-chain.js","sourceRoot":"","sources":["../../src/runtime/receipt-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAe9C;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB;IAChC,IAAI,GAAG,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC;IACtB,MAAM,eAAe,GAAG,IAAI,GAAG,EAAmB,CAAC;IACnD,MAAM,eAAe,GAAa,EAAE,CAAC;IAErC,MAAM,eAAe,GAAG,GAAsB,EAAE;QAC9C,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC;iBAC3B,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;iBAChC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/C,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnB,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;QAED,OAAO,eAAe,CAAC;IACzB,CAAC,CAAC;IAEF,OAAO;QACL,aAAa,CAAC,KAAK;YACjB,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;YAC5C,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/C,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QAED,cAAc,CAAC,QAAQ;YACrB,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACvB,WAAW,CAAC,QAAQ,CAAC;oBACnB,MAAM,EAAE,0BAA0B;oBAClC,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EACL,yHAAyH;iBAC5H,CAAC,CAAC;YACL,CAAC;YAED,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,cAAc,CAAC,SAAS;YACtB,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;YAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACxB,CAAC;YAED,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;QAChC,CAAC;QAED,cAAc,CAAC,SAAS;YACtB,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;YAC9B,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACnE,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACrC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;gBACjB,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,OAAO,GAAG;iBACP,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;iBAChB,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC;iBACrC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,CAAC;QAED,eAAe;YACb,MAAM,GAAG,GAAG,eAAe,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;QAED,SAAS;YACP,OAAO,qBAAqB,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC"}