@harrylabsj/kiwi-merchant-cloud 0.12.0

package/app/discovery/ucp/validate.js

@@ -0,0 +1,232 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * UCP Profile 运行时校验（UCP 2026-04-08 platform MUST validate 语义）。
+ *
+ * 两层校验：
+ *   1. 硬结构错误（profile 非对象、ucp 缺失、ucp.version 非 YYYY-MM-DD、services /
+ *      capabilities 非对象、signing_keys 非对象数组）→ 抛 UcpError("profile_malformed")，
+ *      整份 profile 拒绝（fail-closed，§4.6）；
+ *   2. 逐条校验（namespace 三段式、transport 枚举、a2a endpoint MUST 指向 Agent Card
+ *      URL、spec/schema origin 与 namespace authority 绑定）→ 越权/非法的那一条
+ *      capability 或 service 被丢弃并在 `rejected` 中记录，其余合法条目照常保留——
+ *      UCP 要求 platform 只使用能验证通过的条目，而不是整份 profile 连带失败。
+ *
+ * forward-compat：未知字段（顶层 / ucp 内 / 条目内）原样保留，不做 additionalProperties
+ * 拒绝。
+ */
+import { UcpError } from "./error.js";
+import { UCP_TRANSPORTS, isHttpsUrl, originHostFor, parseCapabilityNamespace, parseServiceNamespace, } from "./types.js";
+const SPEC_DATE_RE = /^(\d{4})-(\d{2})-(\d{2})$/;
+function isValidSpecDate(s) {
+    const match = SPEC_DATE_RE.exec(s);
+    if (match === null)
+        return false;
+    const year = Number(match[1]);
+    const month = Number(match[2]);
+    const day = Number(match[3]);
+    const date = new Date(Date.UTC(year, month - 1, day));
+    return (date.getUTCFullYear() === year && date.getUTCMonth() === month - 1 && date.getUTCDate() === day);
+}
+function requireObject(value, path) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        throw new UcpError("profile_malformed", `${path} must be an object`);
+    }
+    return value;
+}
+function requireArray(value, path) {
+    if (!Array.isArray(value)) {
+        throw new UcpError("profile_malformed", `${path} must be an array`);
+    }
+    return value;
+}
+function reject(rejected, kind, name, index, path, code, message) {
+    rejected.push({ kind, name, index, path, code, message });
+}
+function validateServiceEntry(value, path, authorityHost, rejected, name, index) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        reject(rejected, "service", name, index, path, "entry_malformed", `${path} must be an object`);
+        return undefined;
+    }
+    const obj = value;
+    const decl = { ...obj };
+    const version = obj.version;
+    if (typeof version !== "string" || version.length === 0) {
+        reject(rejected, "service", name, index, path, "entry_malformed", `${path}/version must be a non-empty string`);
+        return undefined;
+    }
+    decl.version = version;
+    const spec = obj.spec;
+    if (!isHttpsUrl(spec)) {
+        reject(rejected, "service", name, index, path, "spec_invalid", `${path}/spec must be an https URL`);
+        return undefined;
+    }
+    if (originHostFor(spec) !== authorityHost) {
+        reject(rejected, "service", name, index, path, "spec_origin_mismatch", `${path}/spec origin ${originHostFor(spec)} must equal namespace authority ${authorityHost}`);
+        return undefined;
+    }
+    decl.spec = spec;
+    const transport = obj.transport;
+    if (typeof transport !== "string" || !UCP_TRANSPORTS.includes(transport)) {
+        reject(rejected, "service", name, index, path, "transport_unsupported", `${path}/transport must be one of ${UCP_TRANSPORTS.join(" | ")} (got ${String(transport)})`);
+        return undefined;
+    }
+    decl.transport = transport;
+    const endpoint = obj.endpoint;
+    if (endpoint !== undefined) {
+        if (!isHttpsUrl(endpoint)) {
+            reject(rejected, "service", name, index, path, "endpoint_invalid", `${path}/endpoint must be an https URL`);
+            return undefined;
+        }
+        decl.endpoint = endpoint;
+    }
+    if (decl.transport === "a2a" && decl.endpoint === undefined) {
+        reject(rejected, "service", name, index, path, "a2a_endpoint_required", `${path}: a2a transport requires an endpoint pointing to the Agent Card URL`);
+        return undefined;
+    }
+    const schema = obj.schema;
+    if (schema !== undefined) {
+        if (!isHttpsUrl(schema)) {
+            reject(rejected, "service", name, index, path, "schema_invalid", `${path}/schema must be an https URL`);
+            return undefined;
+        }
+        if (originHostFor(schema) !== authorityHost) {
+            reject(rejected, "service", name, index, path, "schema_origin_mismatch", `${path}/schema origin ${originHostFor(schema)} must equal namespace authority ${authorityHost}`);
+            return undefined;
+        }
+        decl.schema = schema;
+    }
+    return decl;
+}
+function validateCapabilityEntry(value, path, authorityHost, rejected, name, index) {
+    if (value === null || typeof value !== "object" || Array.isArray(value)) {
+        reject(rejected, "capability", name, index, path, "entry_malformed", `${path} must be an object`);
+        return undefined;
+    }
+    const obj = value;
+    const decl = { ...obj };
+    const version = obj.version;
+    if (typeof version !== "string" || version.length === 0) {
+        reject(rejected, "capability", name, index, path, "entry_malformed", `${path}/version must be a non-empty string`);
+        return undefined;
+    }
+    decl.version = version;
+    const spec = obj.spec;
+    if (!isHttpsUrl(spec)) {
+        reject(rejected, "capability", name, index, path, "spec_invalid", `${path}/spec must be an https URL`);
+        return undefined;
+    }
+    if (originHostFor(spec) !== authorityHost) {
+        reject(rejected, "capability", name, index, path, "spec_origin_mismatch", `${path}/spec origin ${originHostFor(spec)} must equal namespace authority ${authorityHost}`);
+        return undefined;
+    }
+    decl.spec = spec;
+    const schema = obj.schema;
+    if (!isHttpsUrl(schema)) {
+        reject(rejected, "capability", name, index, path, "schema_invalid", `${path}/schema must be an https URL`);
+        return undefined;
+    }
+    if (originHostFor(schema) !== authorityHost) {
+        reject(rejected, "capability", name, index, path, "schema_origin_mismatch", `${path}/schema origin ${originHostFor(schema)} must equal namespace authority ${authorityHost}`);
+        return undefined;
+    }
+    decl.schema = schema;
+    if (obj.extends !== undefined) {
+        const ext = obj.extends;
+        const valid = (typeof ext === "string" && ext.length > 0) ||
+            (Array.isArray(ext) && ext.length > 0 && ext.every((e) => typeof e === "string" && e.length > 0));
+        if (!valid) {
+            reject(rejected, "capability", name, index, path, "extends_invalid", `${path}/extends must be a non-empty string or non-empty array of strings`);
+            return undefined;
+        }
+        decl.extends = ext;
+    }
+    return decl;
+}
+/**
+ * 运行时校验。返回 `{ profile, rejected }`；硬结构错误抛 UcpError("profile_malformed")。
+ * profile 是过滤后的可用版本（非法条目剔除、未知字段保留）。
+ */
+export function validateUcpProfile(value) {
+    const root = requireObject(value, "/");
+    const ucpRaw = root.ucp;
+    if (ucpRaw === undefined) {
+        throw new UcpError("profile_malformed", "/ucp must be present");
+    }
+    const ucp = requireObject(ucpRaw, "/ucp");
+    const version = ucp.version;
+    if (typeof version !== "string" || !isValidSpecDate(version)) {
+        throw new UcpError("profile_malformed", `/ucp/version must be a YYYY-MM-DD spec date (got ${String(version)})`);
+    }
+    const rejected = [];
+    const ucpOut = { ...ucp, version };
+    if (ucp.services !== undefined) {
+        const services = requireObject(ucp.services, "/ucp/services");
+        const out = {};
+        for (const [name, entries] of Object.entries(services)) {
+            const ns = parseServiceNamespace(name);
+            if (ns === undefined) {
+                reject(rejected, "service", name, -1, `/ucp/services/${name}`, "namespace_invalid", `service name "${name}" is not a valid {reverse-domain}.{service} namespace`);
+                continue;
+            }
+            const arr = requireArray(entries, `/ucp/services/${name}`);
+            const kept = [];
+            arr.forEach((entry, i) => {
+                const decl = validateServiceEntry(entry, `/ucp/services/${name}/${i}`, ns.authorityHost, rejected, name, i);
+                if (decl !== undefined)
+                    kept.push(decl);
+            });
+            if (kept.length > 0)
+                out[name] = kept;
+        }
+        ucpOut.services = out;
+    }
+    if (ucp.capabilities !== undefined) {
+        const capabilities = requireObject(ucp.capabilities, "/ucp/capabilities");
+        const out = {};
+        for (const [name, entries] of Object.entries(capabilities)) {
+            const ns = parseCapabilityNamespace(name);
+            if (ns === undefined) {
+                reject(rejected, "capability", name, -1, `/ucp/capabilities/${name}`, "namespace_invalid", `capability name "${name}" is not a valid {reverse-domain}.{service}.{capability} namespace`);
+                continue;
+            }
+            const arr = requireArray(entries, `/ucp/capabilities/${name}`);
+            const kept = [];
+            arr.forEach((entry, i) => {
+                const decl = validateCapabilityEntry(entry, `/ucp/capabilities/${name}/${i}`, ns.authorityHost, rejected, name, i);
+                if (decl !== undefined)
+                    kept.push(decl);
+            });
+            if (kept.length > 0)
+                out[name] = kept;
+        }
+        ucpOut.capabilities = out;
+    }
+    const profileOut = { ...root, ucp: ucpOut };
+    if (root.signing_keys !== undefined) {
+        const keys = requireArray(root.signing_keys, "/signing_keys");
+        const outKeys = [];
+        for (const key of keys) {
+            if (key === null || typeof key !== "object" || Array.isArray(key)) {
+                throw new UcpError("profile_malformed", "/signing_keys entries must be objects");
+            }
+            outKeys.push(key);
+        }
+        profileOut.signing_keys = outKeys;
+    }
+    return { profile: profileOut, rejected };
+}
+//# sourceMappingURL=validate.js.map

package/app/discovery/ucp/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/discovery/ucp/validate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AACtC,OAAO,EACL,cAAc,EACd,UAAU,EACV,aAAa,EACb,wBAAwB,EACxB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AASpB,MAAM,YAAY,GAAG,2BAA2B,CAAC;AAgCjD,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IACtD,OAAO,CACL,IAAI,CAAC,cAAc,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,EAAE,KAAK,GAAG,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,IAAY;IACjD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,GAAG,IAAI,mBAAmB,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CACb,QAA4B,EAC5B,IAA8B,EAC9B,IAAY,EACZ,KAAa,EACb,IAAY,EACZ,IAAsB,EACtB,OAAe;IAEf,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAAc,EACd,IAAY,EACZ,aAAqB,EACrB,QAA4B,EAC5B,IAAY,EACZ,KAAa;IAEb,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,IAAI,oBAAoB,CAAC,CAAC;QAC/F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAA2B,CAAC;IAEjD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,CACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,iBAAiB,EACjB,GAAG,IAAI,qCAAqC,CAC7C,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAEvB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,IAAI,4BAA4B,CAAC,CAAC;QACpG,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;QAC1C,MAAM,CACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,sBAAsB,EACtB,GAAG,IAAI,gBAAgB,aAAa,CAAC,IAAI,CAAC,mCAAmC,aAAa,EAAE,CAC7F,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAEjB,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IAChC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAE,cAAoC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChG,MAAM,CACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,uBAAuB,EACvB,GAAG,IAAI,6BAA6B,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,MAAM,CAAC,SAAS,CAAC,GAAG,CAC5F,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,SAAS,GAAG,SAAyB,CAAC;IAE3C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,CACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,kBAAkB,EAClB,GAAG,IAAI,gCAAgC,CACxC,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,KAAK,KAAK,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC5D,MAAM,CACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,uBAAuB,EACvB,GAAG,IAAI,qEAAqE,CAC7E,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxB,MAAM,CACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,gBAAgB,EAChB,GAAG,IAAI,8BAA8B,CACtC,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC;YAC5C,MAAM,CACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,wBAAwB,EACxB,GAAG,IAAI,kBAAkB,aAAa,CAAC,MAAM,CAAC,mCAAmC,aAAa,EAAE,CACjG,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAc,EACd,IAAY,EACZ,aAAqB,EACrB,QAA4B,EAC5B,IAAY,EACZ,KAAa;IAEb,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,MAAM,CACJ,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,iBAAiB,EACjB,GAAG,IAAI,oBAAoB,CAC5B,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAA8B,CAAC;IAEpD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,CACJ,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,iBAAiB,EACjB,GAAG,IAAI,qCAAqC,CAC7C,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAEvB,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,CACJ,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,cAAc,EACd,GAAG,IAAI,4BAA4B,CACpC,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,aAAa,EAAE,CAAC;QAC1C,MAAM,CACJ,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,sBAAsB,EACtB,GAAG,IAAI,gBAAgB,aAAa,CAAC,IAAI,CAAC,mCAAmC,aAAa,EAAE,CAC7F,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IAEjB,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,MAAM,CACJ,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,gBAAgB,EAChB,GAAG,IAAI,8BAA8B,CACtC,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,aAAa,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC;QAC5C,MAAM,CACJ,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,wBAAwB,EACxB,GAAG,IAAI,kBAAkB,aAAa,CAAC,MAAM,CAAC,mCAAmC,aAAa,EAAE,CACjG,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IAErB,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC;QACxB,MAAM,KAAK,GACT,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CACJ,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,KAAK,EACL,IAAI,EACJ,iBAAiB,EACjB,GAAG,IAAI,mEAAmE,CAC3E,CAAC;YACF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,GAAwB,CAAC;IAC1C,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC;IACxB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC5B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,QAAQ,CAChB,mBAAmB,EACnB,oDAAoD,MAAM,CAAC,OAAO,CAAC,GAAG,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,MAAM,MAAM,GAA4B,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,CAAC;IAE5D,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,GAAG,GAA4C,EAAE,CAAC;QACxD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;YACvD,MAAM,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YACvC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,MAAM,CACJ,QAAQ,EACR,SAAS,EACT,IAAI,EACJ,CAAC,CAAC,EACF,iBAAiB,IAAI,EAAE,EACvB,mBAAmB,EACnB,iBAAiB,IAAI,uDAAuD,CAC7E,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;YAC3D,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;gBACvB,MAAM,IAAI,GAAG,oBAAoB,CAC/B,KAAK,EACL,iBAAiB,IAAI,IAAI,CAAC,EAAE,EAC5B,EAAE,CAAC,aAAa,EAChB,QAAQ,EACR,IAAI,EACJ,CAAC,CACF,CAAC;gBACF,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxC,CAAC;QACD,MAAM,CAAC,QAAQ,GAAG,GAAG,CAAC;IACxB,CAAC;IAED,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACnC,MAAM,YAAY,GAAG,aAAa,CAAC,GAAG,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAC;QAC1E,MAAM,GAAG,GAA+C,EAAE,CAAC;QAC3D,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;YAC3D,MAAM,EAAE,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC1C,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACrB,MAAM,CACJ,QAAQ,EACR,YAAY,EACZ,IAAI,EACJ,CAAC,CAAC,EACF,qBAAqB,IAAI,EAAE,EAC3B,mBAAmB,EACnB,oBAAoB,IAAI,oEAAoE,CAC7F,CAAC;gBACF,SAAS;YACX,CAAC;YACD,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,EAAE,qBAAqB,IAAI,EAAE,CAAC,CAAC;YAC/D,MAAM,IAAI,GAA+B,EAAE,CAAC;YAC5C,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;gBACvB,MAAM,IAAI,GAAG,uBAAuB,CAClC,KAAK,EACL,qBAAqB,IAAI,IAAI,CAAC,EAAE,EAChC,EAAE,CAAC,aAAa,EAChB,QAAQ,EACR,IAAI,EACJ,CAAC,CACF,CAAC;gBACF,IAAI,IAAI,KAAK,SAAS;oBAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;YACH,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxC,CAAC;QACD,MAAM,CAAC,YAAY,GAAG,GAAG,CAAC;IAC5B,CAAC;IAED,MAAM,UAAU,GAA4B,EAAE,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IAErE,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAoB,EAAE,CAAC;QACpC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;gBAClE,MAAM,IAAI,QAAQ,CAAC,mBAAmB,EAAE,uCAAuC,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,GAAoB,CAAC,CAAC;QACrC,CAAC;QACD,UAAU,CAAC,YAAY,GAAG,OAAO,CAAC;IACpC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,UAAwB,EAAE,QAAQ,EAAE,CAAC;AACzD,CAAC"}

package/app/discovery/ucp/vendor.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Kiwi vendor capability 构造器（基线 §8.3 / §25.2 / §43）。
+ *
+ * capability 名：`com.harrylabsj.kiwi.shopping.negotiation`（真实 authority
+ * `kiwi.harrylabsj.com`，对齐 §8.2 的 A2A Extension URI）。**生产发布前 MUST 把
+ * authority 与 capability/service 名替换为 Kiwi 实际控制域名对应的 reverse-domain
+ * namespace，并在该域名上真实托管 spec / schema**（§8.3，spec / schema origin 由
+ * 构造器按 authority 推导，替换后自动满足 origin 绑定）。
+ *
+ * spec 用 §8.2 Extension URI；schema 用同 origin 的 JSON Schema 地址。negotiation 是
+ * Vendor Root Capability（不带 extends，§25.2）。
+ */
+import type { UcpCapabilityDeclaration, UcpProfile } from "./types.js";
+/**
+ * 真实 authority（§8.2 / §8.3）。`kiwi.harrylabsj.com` 为 Kiwi 项目实际控制域名
+ * （harrylabsj.com 的子域）；spec / schema 须托管在该域名上（UCP origin 绑定）。
+ */
+export declare const KIWI_VENDOR_AUTHORITY = "kiwi.harrylabsj.com";
+export declare const KIWI_VENDOR_SERVICE_NAME = "com.harrylabsj.kiwi.shopping";
+export declare const KIWI_VENDOR_CAPABILITY_NAME = "com.harrylabsj.kiwi.shopping.negotiation";
+export declare const KIWI_NEGOTIATION_SPEC_PATH = "/a2a/extensions/negotiation/1.0";
+export declare const KIWI_NEGOTIATION_SCHEMA_PATH = "/schemas/negotiation/1.0/schema.json";
+export interface KiwiVendorBuildOptions {
+    /** 实际控制域名的 reverse-domain authority（默认 kiwi.harrylabsj.com）。 */
+    authority?: string;
+    /** 声明版本（默认 "1.0"）。 */
+    version?: string;
+    /** capability 名（默认 com.harrylabsj.kiwi.shopping.negotiation）。换 authority 时必须同步替换。 */
+    capabilityName?: string;
+    /** service 名（默认 com.harrylabsj.kiwi.shopping）。换 authority 时必须同步替换。 */
+    serviceName?: string;
+}
+export interface KiwiVendorCapability {
+    name: string;
+    declaration: UcpCapabilityDeclaration;
+}
+export declare function buildKiwiNegotiationCapability(opts?: KiwiVendorBuildOptions): KiwiVendorCapability;
+export interface KiwiVendorProfileOptions extends KiwiVendorBuildOptions {
+    /** 本机 A2A 服务的 Agent Card URL（a2a transport endpoint，基线 §25）。 */
+    agentCardUrl: string;
+    /** ucp.version spec family 日期（默认 2026-04-08，§43 pin）。 */
+    ucpVersion?: string;
+}
+/** 组装完整的 Kiwi vendor UCP Profile（merchant 侧发布用，后续 WP2 服务端直接复用）。 */
+export declare function buildKiwiVendorProfile(opts: KiwiVendorProfileOptions): UcpProfile;

package/app/discovery/ucp/vendor.js

@@ -0,0 +1,61 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * 真实 authority（§8.2 / §8.3）。`kiwi.harrylabsj.com` 为 Kiwi 项目实际控制域名
+ * （harrylabsj.com 的子域）；spec / schema 须托管在该域名上（UCP origin 绑定）。
+ */
+export const KIWI_VENDOR_AUTHORITY = "kiwi.harrylabsj.com";
+export const KIWI_VENDOR_SERVICE_NAME = "com.harrylabsj.kiwi.shopping";
+export const KIWI_VENDOR_CAPABILITY_NAME = "com.harrylabsj.kiwi.shopping.negotiation";
+export const KIWI_NEGOTIATION_SPEC_PATH = "/a2a/extensions/negotiation/1.0";
+export const KIWI_NEGOTIATION_SCHEMA_PATH = "/schemas/negotiation/1.0/schema.json";
+export function buildKiwiNegotiationCapability(opts = {}) {
+    const authority = opts.authority ?? KIWI_VENDOR_AUTHORITY;
+    const name = opts.capabilityName ?? KIWI_VENDOR_CAPABILITY_NAME;
+    return {
+        name,
+        declaration: {
+            version: opts.version ?? "1.0",
+            spec: `https://${authority}${KIWI_NEGOTIATION_SPEC_PATH}`,
+            schema: `https://${authority}${KIWI_NEGOTIATION_SCHEMA_PATH}`,
+        },
+    };
+}
+/** 组装完整的 Kiwi vendor UCP Profile（merchant 侧发布用，后续 WP2 服务端直接复用）。 */
+export function buildKiwiVendorProfile(opts) {
+    const authority = opts.authority ?? KIWI_VENDOR_AUTHORITY;
+    const serviceName = opts.serviceName ?? KIWI_VENDOR_SERVICE_NAME;
+    const capability = buildKiwiNegotiationCapability(opts);
+    return {
+        ucp: {
+            version: opts.ucpVersion ?? "2026-04-08",
+            services: {
+                [serviceName]: [
+                    {
+                        version: "1.0",
+                        spec: `https://${authority}${KIWI_NEGOTIATION_SPEC_PATH}`,
+                        transport: "a2a",
+                        endpoint: opts.agentCardUrl,
+                    },
+                ],
+            },
+            capabilities: {
+                [capability.name]: [capability.declaration],
+            },
+        },
+    };
+}
+//# sourceMappingURL=vendor.js.map

package/app/discovery/ucp/vendor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor.js","sourceRoot":"","sources":["../../../src/discovery/ucp/vendor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiBH;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAC3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,8BAA8B,CAAC;AACvE,MAAM,CAAC,MAAM,2BAA2B,GAAG,0CAA0C,CAAC;AACtF,MAAM,CAAC,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,sCAAsC,CAAC;AAkBnF,MAAM,UAAU,8BAA8B,CAC5C,OAA+B,EAAE;IAEjC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,IAAI,2BAA2B,CAAC;IAChE,OAAO;QACL,IAAI;QACJ,WAAW,EAAE;YACX,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,KAAK;YAC9B,IAAI,EAAE,WAAW,SAAS,GAAG,0BAA0B,EAAE;YACzD,MAAM,EAAE,WAAW,SAAS,GAAG,4BAA4B,EAAE;SAC9D;KACF,CAAC;AACJ,CAAC;AASD,mEAAmE;AACnE,MAAM,UAAU,sBAAsB,CAAC,IAA8B;IACnE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,qBAAqB,CAAC;IAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,wBAAwB,CAAC;IACjE,MAAM,UAAU,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO;QACL,GAAG,EAAE;YACH,OAAO,EAAE,IAAI,CAAC,UAAU,IAAI,YAAY;YACxC,QAAQ,EAAE;gBACR,CAAC,WAAW,CAAC,EAAE;oBACb;wBACE,OAAO,EAAE,KAAK;wBACd,IAAI,EAAE,WAAW,SAAS,GAAG,0BAA0B,EAAE;wBACzD,SAAS,EAAE,KAAK;wBAChB,QAAQ,EAAE,IAAI,CAAC,YAAY;qBAC5B;iBACF;aACF;YACD,YAAY,EAAE;gBACZ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;aAC5C;SACF;KACF,CAAC;AACJ,CAAC"}

package/app/doctor.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { CommerceClient } from "./commerce/types.js";
+export interface DoctorCheck {
+    name: string;
+    ok: boolean;
+    detail: string;
+}
+export interface DoctorReport {
+    ok: boolean;
+    checks: DoctorCheck[];
+}
+export declare function runDoctor(profilePath: string, client?: CommerceClient): Promise<DoctorReport>;

package/app/doctor.js

@@ -0,0 +1,113 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * `kiwi doctor` — read-only diagnostics. Never performs negotiation writes
+ * and never prints secret values.
+ */
+import { readFileSync } from "node:fs";
+import { parse as parseYaml } from "yaml";
+import { findInlineSecrets, loadProfile, ProfileError, } from "./config/profile.js";
+import { CommerceError } from "./commerce/types.js";
+import { PROTOCOL_VERSION } from "./negotiation/types.js";
+import { toolAllowlistForRole } from "./runtime/tools.js";
+import { buildModel, isFakeProvider } from "./runtime/model.js";
+export function runDoctor(profilePath, client) {
+    const checks = [];
+    const add = (name, ok, detail) => {
+        checks.push({ name, ok, detail });
+    };
+    // 1. Profile loads and validates.
+    let profile;
+    try {
+        profile = loadProfile(profilePath);
+        add("profile", true, `${profile.agent_id} role=${profile.role}`);
+    }
+    catch (err) {
+        if (err instanceof ProfileError) {
+            add("profile", false, err.message);
+            return Promise.resolve({ ok: false, checks });
+        }
+        throw err;
+    }
+    // 2. No inline secrets in the profile file.
+    try {
+        const raw = parseYaml(readFileSync(profilePath, "utf-8"));
+        const leaks = findInlineSecrets(raw);
+        add("secrets", leaks.length === 0, leaks.length === 0
+            ? "secrets referenced via env vars only"
+            : `possible inline secrets at: ${leaks.join(", ")}`);
+    }
+    catch {
+        add("secrets", false, "could not re-parse profile for secret scan");
+    }
+    // 3. Env vars present (presence only — values are never read or printed).
+    const tokenSet = Boolean(process.env[profile.commerce.token_env]);
+    add("commerce_token_env", tokenSet, tokenSet ? `${profile.commerce.token_env} is set` : `${profile.commerce.token_env} is NOT set`);
+    if (!isFakeProvider(profile) && profile.model.api_key_env !== undefined) {
+        const keySet = Boolean(process.env[profile.model.api_key_env]);
+        add("model_api_key_env", keySet, keySet ? `${profile.model.api_key_env} is set` : `${profile.model.api_key_env} is NOT set`);
+    }
+    else {
+        add("model_api_key_env", true, isFakeProvider(profile) ? "fake provider: no key needed" : "no api_key_env configured");
+    }
+    // 4. Model resolution.
+    try {
+        const model = buildModel(profile);
+        add("model", true, `provider=${model.provider} api=${model.api} model=${model.id}`);
+    }
+    catch (err) {
+        add("model", false, err instanceof Error ? err.message : String(err));
+    }
+    // 5. Tool allowlist.
+    add("tools", true, `allowlist: ${toolAllowlistForRole(profile.role).join(", ")}`);
+    // 6. Commerce API health + protocol/capability compatibility.
+    return (async () => {
+        if (client) {
+            try {
+                const health = await client.health();
+                add("commerce_health", health.ok, health.ok
+                    ? `${health.service ?? "commerce"} ${health.version ?? ""}`.trim()
+                    : "health check failed");
+            }
+            catch (err) {
+                add("commerce_health", false, describeError(err));
+            }
+            try {
+                const caps = await client.getCapabilities();
+                const protoOk = caps.protocol_versions.includes(PROTOCOL_VERSION);
+                add("protocol", protoOk, protoOk
+                    ? `gateway supports ${PROTOCOL_VERSION}`
+                    : `gateway protocols: ${caps.protocol_versions.join(", ")}`);
+                const missing = ["consultation_read", "consultation_write", "inventory_read"].filter((c) => !caps.capabilities[c]);
+                add("capabilities", missing.length === 0 && caps.capabilities.orders === false, missing.length === 0
+                    ? caps.capabilities.orders === false
+                        ? "required capabilities present; orders=false (no-order boundary)"
+                        : "orders capability must be false"
+                    : `missing capabilities: ${missing.join(", ")}`);
+            }
+            catch (err) {
+                add("capabilities", false, describeError(err));
+            }
+        }
+        return { ok: checks.every((c) => c.ok), checks };
+    })();
+}
+function describeError(err) {
+    if (err instanceof CommerceError)
+        return `${err.kind}: ${err.message}`;
+    return err instanceof Error ? err.message : String(err);
+}
+//# sourceMappingURL=doctor.js.map

package/app/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../src/doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;;GAGG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C,OAAO,EACL,iBAAiB,EACjB,WAAW,EACX,YAAY,GAEb,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAahE,MAAM,UAAU,SAAS,CAAC,WAAmB,EAAE,MAAuB;IACpE,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,EAAW,EAAE,MAAc,EAAQ,EAAE;QAC9D,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC;IAEF,kCAAkC;IAClC,IAAI,OAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC;QACnC,GAAG,CAAC,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,QAAQ,SAAS,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,YAAY,EAAE,CAAC;YAChC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;YACnC,OAAO,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,4CAA4C;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAY,CAAC;QACrE,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACrC,GAAG,CACD,SAAS,EACT,KAAK,CAAC,MAAM,KAAK,CAAC,EAClB,KAAK,CAAC,MAAM,KAAK,CAAC;YAChB,CAAC,CAAC,sCAAsC;YACxC,CAAC,CAAC,+BAA+B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACtD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,4CAA4C,CAAC,CAAC;IACtE,CAAC;IAED,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAClE,GAAG,CACD,oBAAoB,EACpB,QAAQ,EACR,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,aAAa,CAC/F,CAAC;IACF,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACxE,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QAC/D,GAAG,CACD,mBAAmB,EACnB,MAAM,EACN,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,aAAa,CAC3F,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,GAAG,CACD,mBAAmB,EACnB,IAAI,EACJ,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,2BAA2B,CACvF,CAAC;IACJ,CAAC;IAED,uBAAuB;IACvB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAClC,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,KAAK,CAAC,QAAQ,QAAQ,KAAK,CAAC,GAAG,UAAU,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,CAAC;IAED,qBAAqB;IACrB,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,cAAc,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAElF,8DAA8D;IAC9D,OAAO,CAAC,KAAK,IAAI,EAAE;QACjB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;gBACrC,GAAG,CACD,iBAAiB,EACjB,MAAM,CAAC,EAAE,EACT,MAAM,CAAC,EAAE;oBACP,CAAC,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,UAAU,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;oBAClE,CAAC,CAAC,qBAAqB,CAC1B,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;YACpD,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;gBAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;gBAClE,GAAG,CACD,UAAU,EACV,OAAO,EACP,OAAO;oBACL,CAAC,CAAC,oBAAoB,gBAAgB,EAAE;oBACxC,CAAC,CAAC,sBAAsB,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9D,CAAC;gBACF,MAAM,OAAO,GAAG,CAAC,mBAAmB,EAAE,oBAAoB,EAAE,gBAAgB,CAAC,CAAC,MAAM,CAClF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAmC,CAAC,CAC/D,CAAC;gBACF,GAAG,CACD,cAAc,EACd,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK,EAC1D,OAAO,CAAC,MAAM,KAAK,CAAC;oBAClB,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK;wBAClC,CAAC,CAAC,iEAAiE;wBACnE,CAAC,CAAC,iCAAiC;oBACrC,CAAC,CAAC,yBAAyB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAClD,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC,CAAC,EAAE,CAAC;AACP,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,YAAY,aAAa;QAAE,OAAO,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;IACvE,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC"}

package/app/exit-codes.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Exit codes (design §12.4).
+ */
+export declare const EXIT: {
+    readonly OK: 0;
+    readonly CONFIG: 2;
+    readonly AUTH: 3;
+    readonly MODEL: 4;
+    readonly HUMAN: 5;
+    readonly TRANSIENT: 10;
+};

package/app/exit-codes.js

@@ -0,0 +1,27 @@
+/**
+ * Copyright 2026 harrylabsj
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Exit codes (design §12.4).
+ */
+export const EXIT = {
+    OK: 0,
+    CONFIG: 2,
+    AUTH: 3,
+    MODEL: 4,
+    HUMAN: 5,
+    TRANSIENT: 10,
+};
+//# sourceMappingURL=exit-codes.js.map

package/app/exit-codes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-codes.js","sourceRoot":"","sources":["../src/exit-codes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,IAAI,GAAG;IAClB,EAAE,EAAE,CAAC;IACL,MAAM,EAAE,CAAC;IACT,IAAI,EAAE,CAAC;IACP,KAAK,EAAE,CAAC;IACR,KAAK,EAAE,CAAC;IACR,SAAS,EAAE,EAAE;CACL,CAAC"}