@happyvertical/smrt-app-runtime 0.51.31 → 0.51.33

package/dist/deployed-runtime.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Application-side composition for public self-hosted and managed-cloud
+ * runtimes. Provider credentials and vendor clients remain in their owning
+ * adapters; this module validates the selected seams, owns the PostgreSQL
+ * connection lifecycle, and exposes orchestration-safe diagnostics.
+ */
+import { type ApplicationRuntimeProfile, type AssetStorageProvider, type AuthenticationProvider, type ResolvedApplicationRuntime, type RuntimeProviderOverrides, type SecretProvider } from '@happyvertical/smrt-config';
+import { ScheduleRunner, type ScheduleRunnerConfig, TaskRunner, type TaskRunnerConfig } from '@happyvertical/smrt-jobs';
+import { SessionService } from '@happyvertical/smrt-users';
+import type { DatabaseInterface } from '@happyvertical/sql';
+export type DeployedApplicationRuntimeProfile = Exclude<ApplicationRuntimeProfile, 'local'>;
+export type PublicAuthenticationProvider = Exclude<AuthenticationProvider, 'owner-bootstrap'>;
+export type DeployedRuntimeComponent = 'database' | 'authentication' | 'assets' | 'secrets';
+/**
+ * A provider-owned readiness boundary.
+ *
+ * The callback should prove that required configuration is present and that
+ * the provider is usable. It must not return credentials or secret values.
+ */
+export interface DeployedProviderBinding<Provider extends string> {
+    readonly provider: Provider;
+    readonly readiness: () => Promise<void>;
+}
+/** PostgreSQL connection factory. URLs and credentials stay in this adapter. */
+export interface DeployedDatabaseBinding {
+    readonly engine: 'postgres';
+    readonly connect: () => Promise<DatabaseInterface>;
+    readonly readiness?: (db: DatabaseInterface) => Promise<void>;
+    /**
+     * Provider-owned cleanup boundary, required before a connection is opened.
+     * Keeping cleanup on the binding also covers malformed connection handles.
+     */
+    readonly close: (db: DatabaseInterface) => Promise<void>;
+}
+export interface DeployedApplicationRuntimeOptions {
+    readonly profile: DeployedApplicationRuntimeProfile;
+    /** Validated selector overrides; never put credentials in this object. */
+    readonly providers?: RuntimeProviderOverrides;
+    readonly database: DeployedDatabaseBinding;
+    readonly authentication: DeployedProviderBinding<PublicAuthenticationProvider>;
+    readonly assets: DeployedProviderBinding<AssetStorageProvider>;
+    readonly secrets: DeployedProviderBinding<SecretProvider>;
+    /** Explicit, idempotent application migration hook. */
+    readonly prepareDatabase?: (db: DatabaseInterface) => Promise<void>;
+}
+export interface DeployedProviderDiagnostic {
+    readonly provider: string;
+    readonly configured: true;
+}
+export interface DeployedRuntimeDiagnostics {
+    readonly schemaVersion: 1;
+    readonly runtime: ResolvedApplicationRuntime;
+    readonly providers: {
+        readonly database: DeployedProviderDiagnostic;
+        readonly authentication: DeployedProviderDiagnostic;
+        readonly assets: DeployedProviderDiagnostic;
+        readonly secrets: DeployedProviderDiagnostic;
+    };
+    readonly tenancy: {
+        readonly mode: 'single-tenant' | 'multi-tenant';
+        readonly context: 'defaulted' | 'required';
+        readonly isolation: 'application' | 'database-rls';
+        readonly rootTenantFallback: 'disabled';
+    };
+    readonly workers: {
+        readonly topology: 'external' | 'scalable';
+        readonly taskProcess: 'separate';
+        readonly scheduleProcess: 'separate';
+        readonly replicas: 'operator-managed' | 'horizontal';
+    };
+    readonly secretValuesIncluded: false;
+}
+export interface DeployedRuntimeHealth {
+    readonly schemaVersion: 1;
+    readonly profile: DeployedApplicationRuntimeProfile;
+    readonly status: 'healthy' | 'stopped';
+}
+export interface DeployedComponentReadiness {
+    readonly status: 'ready' | 'not-ready';
+}
+export interface DeployedRuntimeReadiness {
+    readonly schemaVersion: 1;
+    readonly profile: DeployedApplicationRuntimeProfile;
+    readonly status: 'ready' | 'not-ready';
+    readonly components: Readonly<Record<DeployedRuntimeComponent, DeployedComponentReadiness>>;
+    readonly secretValuesIncluded: false;
+}
+export type DeployedRuntimeErrorCode = 'invalid_configuration' | 'provider_mismatch' | 'provider_unavailable' | 'tenant_context_required' | 'tenant_context_unauthorized' | 'runtime_stopped';
+/** Stable failure that never includes a provider's underlying error text. */
+export declare class DeployedRuntimeError extends Error {
+    readonly code: DeployedRuntimeErrorCode;
+    readonly component?: DeployedRuntimeComponent | undefined;
+    constructor(code: DeployedRuntimeErrorCode, message: string, component?: DeployedRuntimeComponent | undefined);
+}
+/** Startup failure that retains the only safe retry path for database cleanup. */
+export declare class DeployedRuntimeCleanupError extends DeployedRuntimeError {
+    private readonly cleanup;
+    private cleaned;
+    private cleanupAttempt?;
+    constructor(cleanup: () => Promise<void>);
+    retryCleanup(): Promise<void>;
+}
+export interface DeployedApplicationRuntime {
+    readonly db: DatabaseInterface;
+    readonly resolvedRuntime: ResolvedApplicationRuntime;
+    restoreSession(sessionId: string): ReturnType<SessionService['loadSessionContext']>;
+    createTaskWorker(config?: TaskRunnerConfig): Promise<TaskRunner>;
+    createScheduleWorker(config?: ScheduleRunnerConfig): Promise<ScheduleRunner>;
+    diagnostics(): DeployedRuntimeDiagnostics;
+    health(): DeployedRuntimeHealth;
+    readiness(): Promise<DeployedRuntimeReadiness>;
+    close(): Promise<void>;
+}
+/**
+ * Initialize a self-hosted or cloud application composition.
+ *
+ * Configuration and provider identity are validated before a connection is
+ * opened. Provider readiness and database migrations complete before the
+ * runtime is returned. A failed initialization closes the acquired connection.
+ */
+export declare function initializeDeployedApplicationRuntime(options: DeployedApplicationRuntimeOptions): Promise<DeployedApplicationRuntime>;
+//# sourceMappingURL=deployed-runtime.d.ts.map

package/dist/deployed-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deployed-runtime.d.ts","sourceRoot":"","sources":["../src/deployed-runtime.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAIH,OAAO,EACL,KAAK,yBAAyB,EAC9B,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAE7B,KAAK,cAAc,EACpB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,cAAc,EACd,KAAK,oBAAoB,EACzB,UAAU,EACV,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE5D,MAAM,MAAM,iCAAiC,GAAG,OAAO,CACrD,yBAAyB,EACzB,OAAO,CACR,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG,OAAO,CAChD,sBAAsB,EACtB,iBAAiB,CAClB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAChC,UAAU,GACV,gBAAgB,GAChB,QAAQ,GACR,SAAS,CAAC;AAEd;;;;;GAKG;AACH,MAAM,WAAW,uBAAuB,CAAC,QAAQ,SAAS,MAAM;IAC9D,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACzC;AAED,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACnD,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;IACpD,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,wBAAwB,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,uBAAuB,CAAC,4BAA4B,CAAC,CAAC;IAC/E,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;IAC/D,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC,cAAc,CAAC,CAAC;IAC1D,uDAAuD;IACvD,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;QAC9C,QAAQ,CAAC,cAAc,EAAE,0BAA0B,CAAC;QACpD,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;QAC5C,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;KAC9C,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,eAAe,GAAG,cAAc,CAAC;QAChD,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,UAAU,CAAC;QAC3C,QAAQ,CAAC,SAAS,EAAE,aAAa,GAAG,cAAc,CAAC;QACnD,QAAQ,CAAC,kBAAkB,EAAE,UAAU,CAAC;KACzC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,UAAU,CAAC;QAC3C,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;QACjC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;QACrC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,YAAY,CAAC;KACtD,CAAC;IACF,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;CACxC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAC3B,MAAM,CAAC,wBAAwB,EAAE,0BAA0B,CAAC,CAC7D,CAAC;IACF,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC;CACtC;AAED,MAAM,MAAM,wBAAwB,GAChC,uBAAuB,GACvB,mBAAmB,GACnB,sBAAsB,GACtB,yBAAyB,GACzB,6BAA6B,GAC7B,iBAAiB,CAAC;AAEtB,6EAA6E;AAC7E,qBAAa,oBAAqB,SAAQ,KAAK;IAE3C,QAAQ,CAAC,IAAI,EAAE,wBAAwB;IAEvC,QAAQ,CAAC,SAAS,CAAC,EAAE,wBAAwB;gBAFpC,IAAI,EAAE,wBAAwB,EACvC,OAAO,EAAE,MAAM,EACN,SAAS,CAAC,EAAE,wBAAwB,YAAA;CAKhD;AAED,kFAAkF;AAClF,qBAAa,2BAA4B,SAAQ,oBAAoB;IAIvD,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,cAAc,CAAC,CAAgB;gBAEV,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC;IASnD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;CAiBpC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,0BAA0B,CAAC;IACrD,cAAc,CACZ,SAAS,EAAE,MAAM,GAChB,UAAU,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACpD,gBAAgB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACjE,oBAAoB,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7E,WAAW,IAAI,0BAA0B,CAAC;IAC1C,MAAM,IAAI,qBAAqB,CAAC;IAChC,SAAS,IAAI,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AASD;;;;;;GAMG;AACH,wBAAsB,oCAAoC,CACxD,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,0BAA0B,CAAC,CA0DrC"}

package/dist/index.d.ts

@@ -1,394 +1,173 @@
-import { ApplicationRuntimeProfile } from '@happyvertical/smrt-config';
-import { AssetStorageProvider } from '@happyvertical/smrt-config';
-import { AuthenticationProvider } from '@happyvertical/smrt-config';
-import { DatabaseInterface } from '@happyvertical/sql';
-import { ResolvedApplicationRuntime } from '@happyvertical/smrt-config';
-import { RuntimeProviderOverrides } from '@happyvertical/smrt-config';
-import { ScheduleRunner } from '@happyvertical/smrt-jobs';
-import { ScheduleRunnerConfig } from '@happyvertical/smrt-jobs';
-import { SecretProvider } from '@happyvertical/smrt-config';
-import { SessionService } from '@happyvertical/smrt-users';
-import { TaskRunner } from '@happyvertical/smrt-jobs';
-import { TaskRunnerConfig } from '@happyvertical/smrt-jobs';
-
-declare const CAPABILITY_IDS: readonly ["asset-storage", "authentication", "background-jobs", "database", "paid-capabilities", "secret-storage"];
-
-declare type CapabilityId = (typeof CAPABILITY_IDS)[number];
-
-declare type CapabilityStatus = 'available' | 'disabled' | 'unavailable' | 'unknown';
-
-export declare interface ClaimLocalOwnerInput {
-    token: string;
-    name: string;
-    email: string;
-    tenantName?: string;
-    userAgent?: string;
-    ipAddress?: string;
-}
-
-export declare interface DeployedApplicationRuntime {
-    readonly db: DatabaseInterface;
-    readonly resolvedRuntime: ResolvedApplicationRuntime;
-    restoreSession(sessionId: string): ReturnType<SessionService['loadSessionContext']>;
-    createTaskWorker(config?: TaskRunnerConfig): Promise<TaskRunner>;
-    createScheduleWorker(config?: ScheduleRunnerConfig): Promise<ScheduleRunner>;
-    diagnostics(): DeployedRuntimeDiagnostics;
-    health(): DeployedRuntimeHealth;
-    readiness(): Promise<DeployedRuntimeReadiness>;
-    close(): Promise<void>;
-}
-
-export declare interface DeployedApplicationRuntimeOptions {
-    readonly profile: DeployedApplicationRuntimeProfile;
-    /** Validated selector overrides; never put credentials in this object. */
-    readonly providers?: RuntimeProviderOverrides;
-    readonly database: DeployedDatabaseBinding;
-    readonly authentication: DeployedProviderBinding<PublicAuthenticationProvider>;
-    readonly assets: DeployedProviderBinding<AssetStorageProvider>;
-    readonly secrets: DeployedProviderBinding<SecretProvider>;
-    /** Explicit, idempotent application migration hook. */
-    readonly prepareDatabase?: (db: DatabaseInterface) => Promise<void>;
-}
-
-export declare type DeployedApplicationRuntimeProfile = Exclude<ApplicationRuntimeProfile, 'local'>;
-
-export declare interface DeployedComponentReadiness {
-    readonly status: 'ready' | 'not-ready';
-}
-
-/** PostgreSQL connection factory. URLs and credentials stay in this adapter. */
-export declare interface DeployedDatabaseBinding {
-    readonly engine: 'postgres';
-    readonly connect: () => Promise<DatabaseInterface>;
-    readonly readiness?: (db: DatabaseInterface) => Promise<void>;
-    /**
-     * Provider-owned cleanup boundary, required before a connection is opened.
-     * Keeping cleanup on the binding also covers malformed connection handles.
-     */
-    readonly close: (db: DatabaseInterface) => Promise<void>;
-}
-
-/**
- * A provider-owned readiness boundary.
- *
- * The callback should prove that required configuration is present and that
- * the provider is usable. It must not return credentials or secret values.
- */
-export declare interface DeployedProviderBinding<Provider extends string> {
-    readonly provider: Provider;
-    readonly readiness: () => Promise<void>;
-}
-
-export declare interface DeployedProviderDiagnostic {
-    readonly provider: string;
-    readonly configured: true;
-}
-
-/** Startup failure that retains the only safe retry path for database cleanup. */
-export declare class DeployedRuntimeCleanupError extends DeployedRuntimeError {
-    private readonly cleanup;
-    private cleaned;
-    private cleanupAttempt?;
-    constructor(cleanup: () => Promise<void>);
-    retryCleanup(): Promise<void>;
-}
-
-export declare type DeployedRuntimeComponent = 'database' | 'authentication' | 'assets' | 'secrets';
-
-export declare interface DeployedRuntimeDiagnostics {
-    readonly schemaVersion: 1;
-    readonly runtime: ResolvedApplicationRuntime;
-    readonly providers: {
-        readonly database: DeployedProviderDiagnostic;
-        readonly authentication: DeployedProviderDiagnostic;
-        readonly assets: DeployedProviderDiagnostic;
-        readonly secrets: DeployedProviderDiagnostic;
-    };
-    readonly tenancy: {
-        readonly mode: 'single-tenant' | 'multi-tenant';
-        readonly context: 'defaulted' | 'required';
-        readonly isolation: 'application' | 'database-rls';
-        readonly rootTenantFallback: 'disabled';
-    };
-    readonly workers: {
-        readonly topology: 'external' | 'scalable';
-        readonly taskProcess: 'separate';
-        readonly scheduleProcess: 'separate';
-        readonly replicas: 'operator-managed' | 'horizontal';
-    };
-    readonly secretValuesIncluded: false;
-}
-
-/** Stable failure that never includes a provider's underlying error text. */
-export declare class DeployedRuntimeError extends Error {
-    readonly code: DeployedRuntimeErrorCode;
-    readonly component?: DeployedRuntimeComponent | undefined;
-    constructor(code: DeployedRuntimeErrorCode, message: string, component?: DeployedRuntimeComponent | undefined);
-}
-
-export declare type DeployedRuntimeErrorCode = 'invalid_configuration' | 'provider_mismatch' | 'provider_unavailable' | 'tenant_context_required' | 'tenant_context_unauthorized' | 'runtime_stopped';
-
-export declare interface DeployedRuntimeHealth {
-    readonly schemaVersion: 1;
-    readonly profile: DeployedApplicationRuntimeProfile;
-    readonly status: 'healthy' | 'stopped';
-}
-
-export declare interface DeployedRuntimeReadiness {
-    readonly schemaVersion: 1;
-    readonly profile: DeployedApplicationRuntimeProfile;
-    readonly status: 'ready' | 'not-ready';
-    readonly components: Readonly<Record<DeployedRuntimeComponent, DeployedComponentReadiness>>;
-    readonly secretValuesIncluded: false;
-}
-
-/** Encode a package/project identity into a collision-resistant runtime ID. */
-export declare function encodeApplicationId(value: string): string;
-
-declare const ERROR_CODES: readonly ["authentication_unavailable", "database_unavailable", "migration_required", "provider_unavailable", "runtime_stopped", "worker_stale"];
-
-/**
- * Initialize a self-hosted or cloud application composition.
- *
- * Configuration and provider identity are validated before a connection is
- * opened. Provider readiness and database migrations complete before the
- * runtime is returned. A failed initialization closes the acquired connection.
- */
-export declare function initializeDeployedApplicationRuntime(options: DeployedApplicationRuntimeOptions): Promise<DeployedApplicationRuntime>;
-
-/**
- * Initialize or reopen a local application runtime.
- *
- * A plaintext bootstrap token is returned only when this call creates a new
- * invitation. Existing unexpired invitations remain valid but cannot be read
- * back because only their HMAC is stored.
- */
-export declare function initializeLocalApplicationRuntime(options: LocalApplicationRuntimeOptions): Promise<LocalRuntimeInitialization>;
-
-/** Initialized local runtime used by server startup and onboarding handlers. */
-export declare interface LocalApplicationRuntime {
-    readonly db: DatabaseInterface;
-    readonly paths: LocalRuntimePaths;
-    readonly bindHost: string;
-    readonly resolvedRuntime: ResolvedApplicationRuntime;
-    readonly backgroundJobsEnabled: boolean;
-    readonly paidCapabilitiesEnabled: boolean;
-    ensureBootstrapInvitation(): Promise<LocalOwnerBootstrapInvitation | null>;
-    rotateBootstrapInvitation(): Promise<LocalOwnerBootstrapInvitation>;
-    claimOwner(input: ClaimLocalOwnerInput): Promise<LocalOwnerClaimResult>;
-    restoreSession(sessionId: string): ReturnType<SessionService['loadSessionContext']>;
-    createEmbeddedJobRunner(config?: TaskRunnerConfig): Promise<TaskRunner>;
-    diagnostics(): Promise<LocalRuntimeDiagnostics>;
-}
-
-export declare interface LocalApplicationRuntimeOptions extends ResolveLocalRuntimePathsOptions {
-    /** Actual HTTP bind host. Owner bootstrap refuses non-loopback values. */
-    bindHost?: string;
-    /**
-     * Explicit application migration/schema hook, invoked before identity access.
-     * It must be idempotent; runtime code never synthesizes application tables.
-     */
-    prepareDatabase?: (db: DatabaseInterface) => Promise<void>;
-    /** Local profile provider overrides (only validated local combinations survive). */
-    providers?: RuntimeProviderOverrides;
-    /** Short-lived bootstrap token lifetime. Range: 1..900 seconds. */
-    bootstrapTtlSeconds?: number;
-    /** Normal authenticated session lifetime in whole seconds. Minimum 1. */
-    sessionTtlSeconds?: number;
-    /** Explicit opt-in for persisted background work. Default false. */
-    backgroundJobs?: boolean;
-    /** Explicit opt-in for application-defined paid capabilities. Default false. */
-    paidCapabilities?: boolean;
-    /** Testable clock. */
-    now?: () => Date;
-}
-
-export declare type LocalBootstrapStatus = 'available' | 'expired' | 'claimed' | 'unavailable';
-
-export declare interface LocalOwnerBootstrapInvitation {
-    /** Plaintext is returned exactly when a new claim is issued; it is never persisted. */
-    readonly token: string;
-    readonly expiresAt: string;
-}
-
-export declare interface LocalOwnerClaimResult {
-    readonly profileId: string;
-    readonly userId: string;
-    readonly tenantId: string;
-    readonly membershipId: string;
-    readonly sessionId: string;
-}
-
-/** Secret-free, machine-readable local runtime state. */
-export declare interface LocalRuntimeDiagnostics {
-    readonly schemaVersion: 1;
-    readonly runtime: ResolvedApplicationRuntime;
-    readonly bind: {
-        readonly host: string;
-        readonly loopback: true;
-    };
-    readonly paths: LocalRuntimePaths;
-    readonly storage: {
-        readonly database: 'sqlite-file';
-        readonly assets: 'user-owned-directory';
-        readonly secrets: 'mode-0600-local-file';
-    };
-    readonly bootstrap: {
-        readonly status: LocalBootstrapStatus;
-        readonly expiresAt: string | null;
-        readonly tokenValuesIncluded: false;
-        readonly tokenHashesIncluded: false;
-    };
-    readonly tenancy: {
-        readonly mode: 'real-default-tenant';
-        readonly ui: 'hidden';
-    };
-    readonly jobs: {
-        readonly topology: 'inline' | 'embedded';
-        readonly backgroundEnabled: boolean;
-    };
-    readonly paidCapabilitiesEnabled: boolean;
-    readonly secretValuesIncluded: false;
-}
-
-/** Stable, secret-free local-runtime failure. */
-export declare class LocalRuntimeError extends Error {
-    readonly code: LocalRuntimeErrorCode;
-    constructor(code: LocalRuntimeErrorCode, message: string);
-}
-
-export declare type LocalRuntimeErrorCode = 'bootstrap_claimed' | 'bootstrap_expired' | 'bootstrap_invalid' | 'bootstrap_unavailable' | 'capability_disabled' | 'invalid_configuration' | 'migration_failed' | 'unsafe_public_exposure';
-
-export declare interface LocalRuntimeInitialization {
-    readonly runtime: LocalApplicationRuntime;
-    readonly bootstrap: LocalOwnerBootstrapInvitation | null;
-    readonly diagnostics: LocalRuntimeDiagnostics;
-}
-
-/** Paths owned by the local user, outside the source tree by default. */
-export declare interface LocalRuntimePaths {
-    readonly root: string;
-    readonly database: string;
-    readonly assets: string;
-    readonly secrets: string;
-    readonly applicationSecret: string;
-}
-
-export declare const MAX_RUNTIME_DIAGNOSTIC_ERRORS = 8;
-
-export declare const MAX_RUNTIME_DIAGNOSTIC_TOOLS = 64;
-
-/**
- * Fixed, secret-free surface for a failed application migration.
- *
- * A migration driver message is a likely carrier of a connection string,
- * credential, filesystem path, or environment value, so the caller's text is
- * never surfaced. The original error is retained as a non-enumerable `cause`
- * for private logs only.
- */
-export declare const MIGRATION_FAILED_MESSAGE = "The application migration step failed; run pnpm app:setup and inspect the private migration logs.";
-
-/**
- * Claim the secure local database root before a standalone migration command
- * opens SQLite. This does not create application schema or bootstrap records.
- */
-export declare function prepareLocalDatabaseStorage(options: ResolveLocalRuntimePathsOptions): Promise<LocalRuntimePaths>;
-
-/**
- * Project private local/deployed state into the deterministic public contract.
- * Unknown, oversized, nested, accessor-backed, or prohibited values are never
- * copied. Invalid error codes become `runtime_error` at ingestion.
- */
-export declare function projectRuntimeDiagnostics(input: RuntimeDiagnosticsProjectionInput): RuntimeDiagnostics;
-
-export declare type PublicAuthenticationProvider = Exclude<AuthenticationProvider, 'owner-bootstrap'>;
-
-/**
- * Resolve deterministic user-owned paths and reject source-tree placement.
- */
-export declare function resolveLocalRuntimePaths(options: ResolveLocalRuntimePathsOptions): LocalRuntimePaths;
-
-export declare interface ResolveLocalRuntimePathsOptions {
-    /** Stable application identifier, e.g. `lolaus`. */
-    appId: string;
-    /** Explicit user-owned data directory. Defaults to the OS application-data directory. */
-    dataDirectory?: string;
-    /** Source checkout to protect from accidental data placement. Defaults to cwd. */
-    sourceRoot?: string;
-    /** Testable default-root and filesystem case-sensitivity override. */
-    platform?: NodeJS.Platform;
-    /** Testable home-directory override. */
-    homeDirectory?: string;
-    /** Testable environment override. */
-    env?: NodeJS.ProcessEnv;
-}
-
-export declare const RUNTIME_DIAGNOSTICS_SCHEMA_VERSION: 1;
-
-export declare const RUNTIME_WORKER_FRESHNESS_SECONDS = 120;
-
-declare type RuntimeDiagnosticErrorCode = (typeof ERROR_CODES)[number] | 'runtime_error';
-
-/**
- * Versioned public diagnostics returned only after application authorization.
- * Every field is a fixed allowlist projection; this is intentionally not a
- * cleaned or serialized form of either private runtime diagnostics object.
- */
-export declare interface RuntimeDiagnostics {
-    readonly schemaVersion: 1;
-    readonly profile: ApplicationRuntimeProfile | 'unknown';
-    readonly health: 'healthy' | 'degraded' | 'stopped' | 'unknown';
-    readonly schema: {
-        readonly status: 'ready' | 'not-ready' | 'unknown';
-        readonly migrations: 'current' | 'failed' | 'pending' | 'unknown';
-    };
-    readonly capabilities: readonly {
-        readonly id: CapabilityId;
-        readonly status: CapabilityStatus;
-    }[];
-    readonly tools: {
-        readonly names: readonly string[];
-        readonly count: number;
-        readonly digest: string;
-    };
-    readonly operationalDifferences: {
-        readonly backgroundJobs: 'disabled' | 'enabled';
-        readonly workerTopology: WorkerTopology;
-    };
-    readonly worker: {
-        readonly topology: WorkerTopology;
-        readonly liveness: 'alive' | 'not-required' | 'stale' | 'unknown';
-        readonly heartbeatAt: string | null;
-        readonly observedAt: string;
-    };
-    readonly recentErrors: readonly {
-        readonly code: RuntimeDiagnosticErrorCode;
-        readonly at: string;
-    }[];
-}
-
-export declare interface RuntimeDiagnosticsProjectionInput {
-    readonly profile?: unknown;
-    readonly health?: unknown;
-    readonly schema?: unknown;
-    readonly capabilities?: unknown;
-    readonly toolNames?: unknown;
-    readonly worker?: unknown;
-    readonly recentErrors?: unknown;
-    /** Required explicit clock seam; the projector never reads the process clock. */
-    readonly observedAt?: unknown;
-}
-
-/** Validate an explicit runtime identity. */
-export declare function validateApplicationId(value: string): string;
-
-/**
- * Verify an already-initialized local database root without creating or
- * changing any filesystem/database artifact. Operator read/copy/import paths
- * use this boundary before opening SQLite outside the runtime bootstrap.
- */
-export declare function validateLocalDatabaseStorage(options: ResolveLocalRuntimePathsOptions): Promise<LocalRuntimePaths>;
-
-declare type WorkerTopology = 'embedded' | 'external' | 'inline' | 'scalable';
-
-export { }
+/**
+ * Safe, private, single-owner application runtime for the `local` profile.
+ *
+ * This Node-only subpath owns the small amount of operational composition that
+ * does not belong in a generated application: user-owned paths, restrictive
+ * local secret material, SQLite tuning, owner bootstrap, and an optional
+ * embedded job runner. Domain schema preparation remains an explicit startup
+ * step supplied by the application migration layer.
+ */
+import { type ResolvedApplicationRuntime, type RuntimeProviderOverrides } from '@happyvertical/smrt-config';
+import { TaskRunner, type TaskRunnerConfig } from '@happyvertical/smrt-jobs';
+import { SessionService } from '@happyvertical/smrt-users';
+import { type DatabaseInterface } from '@happyvertical/sql';
+export * from './deployed-runtime.js';
+export * from './runtime-diagnostics.js';
+/** Paths owned by the local user, outside the source tree by default. */
+export interface LocalRuntimePaths {
+    readonly root: string;
+    readonly database: string;
+    readonly assets: string;
+    readonly secrets: string;
+    readonly applicationSecret: string;
+}
+export interface ResolveLocalRuntimePathsOptions {
+    /** Stable application identifier, e.g. `lolaus`. */
+    appId: string;
+    /** Explicit user-owned data directory. Defaults to the OS application-data directory. */
+    dataDirectory?: string;
+    /** Source checkout to protect from accidental data placement. Defaults to cwd. */
+    sourceRoot?: string;
+    /** Testable default-root and filesystem case-sensitivity override. */
+    platform?: NodeJS.Platform;
+    /** Testable home-directory override. */
+    homeDirectory?: string;
+    /** Testable environment override. */
+    env?: NodeJS.ProcessEnv;
+}
+export interface LocalApplicationRuntimeOptions extends ResolveLocalRuntimePathsOptions {
+    /** Actual HTTP bind host. Owner bootstrap refuses non-loopback values. */
+    bindHost?: string;
+    /**
+     * Explicit application migration/schema hook, invoked before identity access.
+     * It must be idempotent; runtime code never synthesizes application tables.
+     */
+    prepareDatabase?: (db: DatabaseInterface) => Promise<void>;
+    /** Local profile provider overrides (only validated local combinations survive). */
+    providers?: RuntimeProviderOverrides;
+    /** Short-lived bootstrap token lifetime. Range: 1..900 seconds. */
+    bootstrapTtlSeconds?: number;
+    /** Normal authenticated session lifetime in whole seconds. Minimum 1. */
+    sessionTtlSeconds?: number;
+    /** Explicit opt-in for persisted background work. Default false. */
+    backgroundJobs?: boolean;
+    /** Explicit opt-in for application-defined paid capabilities. Default false. */
+    paidCapabilities?: boolean;
+    /** Testable clock. */
+    now?: () => Date;
+}
+/**
+ * Claim the secure local database root before a standalone migration command
+ * opens SQLite. This does not create application schema or bootstrap records.
+ */
+export declare function prepareLocalDatabaseStorage(options: ResolveLocalRuntimePathsOptions): Promise<LocalRuntimePaths>;
+/**
+ * Verify an already-initialized local database root without creating or
+ * changing any filesystem/database artifact. Operator read/copy/import paths
+ * use this boundary before opening SQLite outside the runtime bootstrap.
+ */
+export declare function validateLocalDatabaseStorage(options: ResolveLocalRuntimePathsOptions): Promise<LocalRuntimePaths>;
+export interface LocalOwnerBootstrapInvitation {
+    /** Plaintext is returned exactly when a new claim is issued; it is never persisted. */
+    readonly token: string;
+    readonly expiresAt: string;
+}
+export interface LocalRuntimeInitialization {
+    readonly runtime: LocalApplicationRuntime;
+    readonly bootstrap: LocalOwnerBootstrapInvitation | null;
+    readonly diagnostics: LocalRuntimeDiagnostics;
+}
+export interface ClaimLocalOwnerInput {
+    token: string;
+    name: string;
+    email: string;
+    tenantName?: string;
+    userAgent?: string;
+    ipAddress?: string;
+}
+export interface LocalOwnerClaimResult {
+    readonly profileId: string;
+    readonly userId: string;
+    readonly tenantId: string;
+    readonly membershipId: string;
+    readonly sessionId: string;
+}
+export type LocalBootstrapStatus = 'available' | 'expired' | 'claimed' | 'unavailable';
+/** Secret-free, machine-readable local runtime state. */
+export interface LocalRuntimeDiagnostics {
+    readonly schemaVersion: 1;
+    readonly runtime: ResolvedApplicationRuntime;
+    readonly bind: {
+        readonly host: string;
+        readonly loopback: true;
+    };
+    readonly paths: LocalRuntimePaths;
+    readonly storage: {
+        readonly database: 'sqlite-file';
+        readonly assets: 'user-owned-directory';
+        readonly secrets: 'mode-0600-local-file';
+    };
+    readonly bootstrap: {
+        readonly status: LocalBootstrapStatus;
+        readonly expiresAt: string | null;
+        readonly tokenValuesIncluded: false;
+        readonly tokenHashesIncluded: false;
+    };
+    readonly tenancy: {
+        readonly mode: 'real-default-tenant';
+        readonly ui: 'hidden';
+    };
+    readonly jobs: {
+        readonly topology: 'inline' | 'embedded';
+        readonly backgroundEnabled: boolean;
+    };
+    readonly paidCapabilitiesEnabled: boolean;
+    readonly secretValuesIncluded: false;
+}
+export type LocalRuntimeErrorCode = 'bootstrap_claimed' | 'bootstrap_expired' | 'bootstrap_invalid' | 'bootstrap_unavailable' | 'capability_disabled' | 'invalid_configuration' | 'migration_failed' | 'unsafe_public_exposure';
+/**
+ * Fixed, secret-free surface for a failed application migration.
+ *
+ * A migration driver message is a likely carrier of a connection string,
+ * credential, filesystem path, or environment value, so the caller's text is
+ * never surfaced. The original error is retained as a non-enumerable `cause`
+ * for private logs only.
+ */
+export declare const MIGRATION_FAILED_MESSAGE = "The application migration step failed; run pnpm app:setup and inspect the private migration logs.";
+/** Stable, secret-free local-runtime failure. */
+export declare class LocalRuntimeError extends Error {
+    readonly code: LocalRuntimeErrorCode;
+    constructor(code: LocalRuntimeErrorCode, message: string);
+}
+/**
+ * Resolve deterministic user-owned paths and reject source-tree placement.
+ */
+export declare function resolveLocalRuntimePaths(options: ResolveLocalRuntimePathsOptions): LocalRuntimePaths;
+/**
+ * Initialize or reopen a local application runtime.
+ *
+ * A plaintext bootstrap token is returned only when this call creates a new
+ * invitation. Existing unexpired invitations remain valid but cannot be read
+ * back because only their HMAC is stored.
+ */
+export declare function initializeLocalApplicationRuntime(options: LocalApplicationRuntimeOptions): Promise<LocalRuntimeInitialization>;
+/** Initialized local runtime used by server startup and onboarding handlers. */
+export interface LocalApplicationRuntime {
+    readonly db: DatabaseInterface;
+    readonly paths: LocalRuntimePaths;
+    readonly bindHost: string;
+    readonly resolvedRuntime: ResolvedApplicationRuntime;
+    readonly backgroundJobsEnabled: boolean;
+    readonly paidCapabilitiesEnabled: boolean;
+    ensureBootstrapInvitation(): Promise<LocalOwnerBootstrapInvitation | null>;
+    rotateBootstrapInvitation(): Promise<LocalOwnerBootstrapInvitation>;
+    claimOwner(input: ClaimLocalOwnerInput): Promise<LocalOwnerClaimResult>;
+    restoreSession(sessionId: string): ReturnType<SessionService['loadSessionContext']>;
+    createEmbeddedJobRunner(config?: TaskRunnerConfig): Promise<TaskRunner>;
+    diagnostics(): Promise<LocalRuntimeDiagnostics>;
+}
+/** Validate an explicit runtime identity. */
+export declare function validateApplicationId(value: string): string;
+/** Encode a package/project identity into a collision-resistant runtime ID. */
+export declare function encodeApplicationId(value: string): string;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAoBH,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAE9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAG7E,OAAO,EAML,cAAc,EAIf,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,KAAK,iBAAiB,EAAe,MAAM,oBAAoB,CAAC;AAEzE,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AAwDzC,yEAAyE;AACzE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,+BAA+B;IAC9C,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,yFAAyF;IACzF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IAC3B,wCAAwC;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED,MAAM,WAAW,8BACf,SAAQ,+BAA+B;IACvC,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,oFAAoF;IACpF,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,mEAAmE;IACnE,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,yEAAyE;IACzE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oEAAoE;IACpE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,gFAAgF;IAChF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,sBAAsB;IACtB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,iBAAiB,CAAC,CAgC5B;AAED;;;;GAIG;AACH,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,+BAA+B,GACvC,OAAO,CAAC,iBAAiB,CAAC,CAwB5B;AAED,MAAM,WAAW,6BAA6B;IAC5C,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,6BAA6B,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,WAAW,EAAE,uBAAuB,CAAC;CAC/C;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,oBAAoB,GAC5B,WAAW,GACX,SAAS,GACT,SAAS,GACT,aAAa,CAAC;AAElB,yDAAyD;AACzD,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAC;IAC7C,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;QACjC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;QACxC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;KAC1C,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;QACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,QAAQ,CAAC,mBAAmB,EAAE,KAAK,CAAC;QACpC,QAAQ,CAAC,mBAAmB,EAAE,KAAK,CAAC;KACrC,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;QACrC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;KACvB,CAAC;IACF,QAAQ,CAAC,IAAI,EAAE;QACb,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,UAAU,CAAC;QACzC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;KACrC,CAAC;IACF,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,EAAE,KAAK,CAAC;CACtC;AAED,MAAM,MAAM,qBAAqB,GAC7B,mBAAmB,GACnB,mBAAmB,GACnB,mBAAmB,GACnB,uBAAuB,GACvB,qBAAqB,GACrB,uBAAuB,GACvB,kBAAkB,GAClB,wBAAwB,CAAC;AAE7B;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,sGACgE,CAAC;AAEtG,iDAAiD;AACjD,qBAAa,iBAAkB,SAAQ,KAAK;IAExC,QAAQ,CAAC,IAAI,EAAE,qBAAqB;gBAA3B,IAAI,EAAE,qBAAqB,EACpC,OAAO,EAAE,MAAM;CAKlB;AAYD;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,+BAA+B,GACvC,iBAAiB,CAgCnB;AAED;;;;;;GAMG;AACH,wBAAsB,iCAAiC,CACrD,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,0BAA0B,CAAC,CAsFrC;AAeD,gFAAgF;AAChF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,iBAAiB,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,0BAA0B,CAAC;IACrD,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IACxC,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,yBAAyB,IAAI,OAAO,CAAC,6BAA6B,GAAG,IAAI,CAAC,CAAC;IAC3E,yBAAyB,IAAI,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACpE,UAAU,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACxE,cAAc,CACZ,SAAS,EAAE,MAAM,GAChB,UAAU,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACpD,uBAAuB,CAAC,MAAM,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACxE,WAAW,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACjD;AAk2CD,6CAA6C;AAC7C,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAS3D;AAED,+EAA+E;AAC/E,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAczD"}

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-app-runtime",
-  "packageVersion": "0.51.31",
+  "packageVersion": "0.51.33",
   "objects": {},
   "moduleType": "smrt",
   "smrtDependencies": [

package/dist/runtime-diagnostics.d.ts

@@ -0,0 +1,67 @@
+import type { ApplicationRuntimeProfile } from '@happyvertical/smrt-config';
+export declare const RUNTIME_DIAGNOSTICS_SCHEMA_VERSION: 1;
+export declare const MAX_RUNTIME_DIAGNOSTIC_TOOLS = 64;
+export declare const MAX_RUNTIME_DIAGNOSTIC_ERRORS = 8;
+export declare const RUNTIME_WORKER_FRESHNESS_SECONDS = 120;
+declare const CAPABILITY_IDS: readonly ["asset-storage", "authentication", "background-jobs", "database", "paid-capabilities", "secret-storage"];
+declare const ERROR_CODES: readonly ["authentication_unavailable", "database_unavailable", "migration_required", "provider_unavailable", "runtime_stopped", "worker_stale"];
+type CapabilityId = (typeof CAPABILITY_IDS)[number];
+type CapabilityStatus = 'available' | 'disabled' | 'unavailable' | 'unknown';
+type RuntimeDiagnosticErrorCode = (typeof ERROR_CODES)[number] | 'runtime_error';
+type WorkerTopology = 'embedded' | 'external' | 'inline' | 'scalable';
+/**
+ * Versioned public diagnostics returned only after application authorization.
+ * Every field is a fixed allowlist projection; this is intentionally not a
+ * cleaned or serialized form of either private runtime diagnostics object.
+ */
+export interface RuntimeDiagnostics {
+    readonly schemaVersion: 1;
+    readonly profile: ApplicationRuntimeProfile | 'unknown';
+    readonly health: 'healthy' | 'degraded' | 'stopped' | 'unknown';
+    readonly schema: {
+        readonly status: 'ready' | 'not-ready' | 'unknown';
+        readonly migrations: 'current' | 'failed' | 'pending' | 'unknown';
+    };
+    readonly capabilities: readonly {
+        readonly id: CapabilityId;
+        readonly status: CapabilityStatus;
+    }[];
+    readonly tools: {
+        readonly names: readonly string[];
+        readonly count: number;
+        readonly digest: string;
+    };
+    readonly operationalDifferences: {
+        readonly backgroundJobs: 'disabled' | 'enabled';
+        readonly workerTopology: WorkerTopology;
+    };
+    readonly worker: {
+        readonly topology: WorkerTopology;
+        readonly liveness: 'alive' | 'not-required' | 'stale' | 'unknown';
+        readonly heartbeatAt: string | null;
+        readonly observedAt: string;
+    };
+    readonly recentErrors: readonly {
+        readonly code: RuntimeDiagnosticErrorCode;
+        readonly at: string;
+    }[];
+}
+export interface RuntimeDiagnosticsProjectionInput {
+    readonly profile?: unknown;
+    readonly health?: unknown;
+    readonly schema?: unknown;
+    readonly capabilities?: unknown;
+    readonly toolNames?: unknown;
+    readonly worker?: unknown;
+    readonly recentErrors?: unknown;
+    /** Required explicit clock seam; the projector never reads the process clock. */
+    readonly observedAt?: unknown;
+}
+/**
+ * Project private local/deployed state into the deterministic public contract.
+ * Unknown, oversized, nested, accessor-backed, or prohibited values are never
+ * copied. Invalid error codes become `runtime_error` at ingestion.
+ */
+export declare function projectRuntimeDiagnostics(input: RuntimeDiagnosticsProjectionInput): RuntimeDiagnostics;
+export {};
+//# sourceMappingURL=runtime-diagnostics.d.ts.map

package/dist/runtime-diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-diagnostics.d.ts","sourceRoot":"","sources":["../src/runtime-diagnostics.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AAE5E,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAC7D,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAC/C,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAC/C,eAAO,MAAM,gCAAgC,MAAM,CAAC;AAEpD,QAAA,MAAM,cAAc,oHAOV,CAAC;AAEX,QAAA,MAAM,WAAW,kJAOP,CAAC;AAyBX,KAAK,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AACpD,KAAK,gBAAgB,GAAG,WAAW,GAAG,UAAU,GAAG,aAAa,GAAG,SAAS,CAAC;AAC7E,KAAK,0BAA0B,GAC3B,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,GAC5B,eAAe,CAAC;AACpB,KAAK,cAAc,GAAG,UAAU,GAAG,UAAU,GAAG,QAAQ,GAAG,UAAU,CAAC;AAEtE;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,yBAAyB,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;QACnD,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;KACnE,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;KACnC,EAAE,CAAC;IACJ,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;QAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,QAAQ,CAAC,sBAAsB,EAAE;QAC/B,QAAQ,CAAC,cAAc,EAAE,UAAU,GAAG,SAAS,CAAC;QAChD,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;KACzC,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;QAClC,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,cAAc,GAAG,OAAO,GAAG,SAAS,CAAC;QAClE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;QACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,YAAY,EAAE,SAAS;QAC9B,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;QAC1C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;KACrB,EAAE,CAAC;CACL;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,iFAAiF;IACjF,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,iCAAiC,GACvC,kBAAkB,CAmCpB"}

package/dist/smrt-knowledge.json

@@ -3,12 +3,12 @@
   "sensitiveFieldsExcluded": true,
   "generatedAt": "1970-01-01T00:00:00.000Z",
   "packageName": "@happyvertical/smrt-app-runtime",
-  "packageVersion": "0.51.31",
+  "packageVersion": "0.51.33",
   "sourceManifestPath": "dist/manifest.json",
   "agentDocPath": "AGENTS.md",
   "sourceHashes": {
-    "manifest": "b509c150cfbc61f57a261c1b51c86f8adbc9bffe857ca6a2e4b924ef8b50454a",
-    "packageJson": "e7f8deaed07536bb2fbd5f8c2db04f5e6f77e1765fca476434632e96cf8b78d5",
+    "manifest": "bf904ecc41773498b5c98c418296e3e5fa8922394ba57fb43b6b3ea6ac5a054f",
+    "packageJson": "b593168b379c1cfe4de3e4a34229b89efc5bd733ea9102fe696945b03c2cda3e",
     "agents": "d8202c6d897a78eaf23c048682bd922899605e7ddad595c1341be65544b7000b"
   },
   "exports": [
@@ -24,7 +24,7 @@
     "@happyvertical/sql": "catalog:",
     "@happyvertical/smrt-vitest": "workspace:*",
     "@types/node": "24.13.6",
-    "typescript": "5.9.3",
+    "typescript": "6.0.3",
     "vite": "8.1.4",
     "vitest": "4.1.10"
   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-app-runtime",
-  "version": "0.51.31",
+  "version": "0.51.33",
   "description": "Validated local, self-hosted, and cloud runtime composition for s-m-r-t applications",
   "type": "module",
   "main": "./dist/index.js",
@@ -17,18 +17,18 @@
     "AGENTS.md"
   ],
   "dependencies": {
-    "@happyvertical/smrt-config": "0.51.31",
-    "@happyvertical/smrt-core": "0.51.31",
-    "@happyvertical/smrt-jobs": "0.51.31",
-    "@happyvertical/smrt-profiles": "0.51.31",
-    "@happyvertical/smrt-tenancy": "0.51.31",
-    "@happyvertical/smrt-users": "0.51.31",
+    "@happyvertical/smrt-config": "0.51.33",
+    "@happyvertical/smrt-core": "0.51.33",
+    "@happyvertical/smrt-jobs": "0.51.33",
+    "@happyvertical/smrt-profiles": "0.51.33",
+    "@happyvertical/smrt-tenancy": "0.51.33",
+    "@happyvertical/smrt-users": "0.51.33",
     "@happyvertical/sql": "^0.94.1"
   },
   "devDependencies": {
-    "@happyvertical/smrt-vitest": "0.51.31",
+    "@happyvertical/smrt-vitest": "0.51.33",
     "@types/node": "24.13.6",
-    "typescript": "5.9.3",
+    "typescript": "6.0.3",
     "vite": "8.1.4",
     "vitest": "4.1.10"
   },