@heddleagent/execution-host-client 6.0.0 → 6.2.0

package/README.md

@@ -1,13 +1,13 @@
 # `@heddleagent/execution-host-client`
 
-`@heddleagent/execution-host-client` is the lightweight backend-side SDK for
+`@heddleagent/execution-host-client` is the backend-side SDK for
 products that invoke a separately deployed Heddle Execution Host. It lets an
 adopter keep its own language stack, authentication, database, product policy,
 MCP tools, and UI while reusing the security-sensitive v1 contract machinery.
 
-> **Current availability:** stable version `6.0.0`. The former
-> `@roackb2/heddle-adopter@5.13.0` coordinate remains installable during
-> migration. Heddle does not currently distribute
+> **Current availability:** stable version `6.2.0`. The former
+> `@roackb2/heddle-adopter@5.13.0` coordinate is deprecated and remains
+> installable only for existing consumers. Heddle does not currently distribute
 > the compatible Execution Host implementation or offer a hosted service. The
 > public surface documents and tests the adopter boundary without implying a
 > generally available deployment.
@@ -18,10 +18,10 @@ Install the package:
 npm install @heddleagent/execution-host-client
 ```
 
-The package does **not** contain Heddle's agent loop, AgentCore deployment,
-Terraform, product MCP tools, or product logic. It uses the official MCP SDK,
-plus `jose`, `zod`, `dayjs`, and `eventsource-parser`, for its optional
-reference edges.
+The package does **not** contain Heddle's agent loop, AgentCore Runtime
+deployment, Terraform, product MCP tools, or product logic. It uses the
+modular AWS SDK for its AgentCore transport and the official MCP SDK, plus
+`jose`, `zod`, `dayjs`, and `eventsource-parser`, for its other edges.
 
 ## What it owns
 
@@ -30,9 +30,11 @@ reference edges.
 | `@heddleagent/execution-host-client/contracts` | Runtime-validated v1 request, stream, identity, capability, and header contracts |
 | `@heddleagent/execution-host-client/authority` | ES256 execution assertion and optional MCP capability issuance plus public JWKS projection |
 | `@heddleagent/execution-host-client/conversation` | Turn orchestration across authority, model credentials, optional MCP policy, an `ExecutionHost`, and an optional adopter-implemented durable lifecycle store |
+| `@heddleagent/execution-host-client/heartbeat` | Remote heartbeat orchestration that keeps durable task authority in a coordinator while a compatible Execution Host runs the agent cycle |
 | `@heddleagent/execution-host-client/mcp` | Independent capability verification at the adopter's MCP edge |
 | `@heddleagent/execution-host-client/mcp/node` | Stateless official-SDK Streamable HTTP lifecycle around adopter-defined toolsets |
-| `@heddleagent/execution-host-client/http-sse` | Transport-neutral `ExecutionHost` port and strict direct-development HTTP/SSE client |
+| `@heddleagent/execution-host-client/http-sse` | Transport-neutral conversation and heartbeat ports plus the strict direct-development HTTP/SSE client |
+| `@heddleagent/execution-host-client/agentcore` | Official AWS AgentCore/SigV4 implementation of the same conversation and heartbeat ports |
 | `@heddleagent/execution-host-client/testing` | Node-only loopback v1 fixture plus durable-turn store conformance for real adapters |
 | `@heddleagent/execution-host-client/node` | Optional Node JWKS/conversation HTTP edge plus safe local signing-key helpers |
 
@@ -53,7 +55,8 @@ The adopter still owns:
   allocation, the lifecycle-store implementation/schema/migrations, retention,
   and history queries;
 - implementing and hosting product MCP tools against its own APIs and data;
-- choosing an AgentCore/SigV4 transport, applying results, and rendering UI.
+- choosing and provisioning its AgentCore Runtime, applying results, and
+  rendering UI.
 
 ## Issue one invocation's authority
 
@@ -225,11 +228,32 @@ const productMcp = new NodeStreamableHttpMcpService({
 Use the lower-level `NodeMcpToolset` interface only when a tool needs custom MCP
 content or lifecycle semantics.
 
-## Invoke the direct development host
+## Invoke an Execution Host
 
-The direct client is useful for local and reviewed HTTPS deployments. A
-managed AgentCore deployment should supply a separate SigV4/AWS SDK transport
-which implements the same `ExecutionHost` port.
+Use the official AgentCore client for a Runtime deployed in the adopter's AWS
+account. It uses the normal AWS credential chain, signs the required Heddle
+authority headers, streams the response through the same strict protocol
+validation as the direct client, and deliberately makes only one ambiguous
+streaming attempt.
+
+```ts
+import {
+  AgentCoreExecutionHost,
+} from '@heddleagent/execution-host-client/agentcore'
+
+const host = new AgentCoreExecutionHost({
+  region: process.env.AWS_REGION!,
+  runtimeArn: process.env.AGENTCORE_RUNTIME_ARN!,
+  qualifier: process.env.AGENTCORE_RUNTIME_QUALIFIER,
+})
+```
+
+The product still owns the AWS account, Runtime deployment, IAM policy,
+configuration, and credentials environment. Heddle owns only the reusable
+invocation transport.
+
+For local development and reviewed direct HTTPS deployments, use the direct
+client:
 
 ```ts
 import { DirectHttpExecutionHost } from '@heddleagent/execution-host-client/http-sse'
@@ -255,6 +279,44 @@ The client refuses redirects, bounds parser and error bodies, validates ordered
 SSE identity, streams accepted/activity events incrementally, and withholds the
 terminal event until clean EOF. It never retries an ambiguous invocation.
 
+## Delegate heartbeat agent cycles
+
+For autonomous work, keep the durable task store and scheduler in one
+long-running coordinator. Inject the hosted transport only at the point where
+the scheduler would otherwise run the local heartbeat agent:
+
+```ts
+import { HeartbeatSchedulerService } from '@heddleagent/runtime/advanced'
+import {
+  HostedHeartbeatAgentExecutionTransport,
+  HostedHeartbeatTaskService,
+} from '@heddleagent/execution-host-client/heartbeat'
+
+const hostedHeartbeat = new HostedHeartbeatTaskService({
+  authority,
+  executionHost: agentCoreExecutionHost,
+  modelCredentials,
+  mcp: { allowedTools: ['read_workspace_snapshot'] },
+})
+const agentExecutionTransport = new HostedHeartbeatAgentExecutionTransport({
+  runner: hostedHeartbeat,
+  resolveInvocationContext: ({ taskId, executionId, signal }) => (
+    resolveAuthorizedHeartbeatInvocation({ taskId, executionId, signal })
+  ),
+})
+
+const scheduler = HeartbeatSchedulerService.start({
+  store: heddleHeartbeatStore,
+  agentExecutionTransport,
+})
+```
+
+The coordinator still owns task lookup, claims, checkpoint loading, cancellation,
+claim-fenced settlement, history, and recovery. The Runtime receives a bounded
+task/checkpoint request plus invocation-scoped authority and model credentials;
+it receives no Heddle database credential. Omitting `agentExecutionTransport`
+preserves the existing in-process runner.
+
 ## Verify an adopter integration locally
 
 The explicit `testing` subpath provides a real loopback implementation of the

package/dist/agentcore/agentcore-execution-host.d.ts

@@ -0,0 +1,17 @@
+import { type ExecutionHostHeartbeatStreamEvent, type ExecutionHostStreamEvent } from '../contracts/index.js';
+import { type ExecutionHost, type ExecutionHostConversationTurn, type ExecutionHostHeartbeatTask, type HeartbeatExecutionHost } from '../http-sse/index.js';
+import type { AgentCoreExecutionHostConfig } from './types.js';
+/**
+ * Invokes one compatible Heddle Execution Host through AWS AgentCore while
+ * reusing the package's strict request and SSE protocol validation.
+ */
+export declare class AgentCoreExecutionHost implements ExecutionHost, HeartbeatExecutionHost {
+    #private;
+    constructor(config: AgentCoreExecutionHostConfig);
+    streamConversationTurn(input: ExecutionHostConversationTurn): AsyncIterable<ExecutionHostStreamEvent>;
+    streamHeartbeatTask(input: ExecutionHostHeartbeatTask): AsyncIterable<ExecutionHostHeartbeatStreamEvent>;
+    close(): void;
+}
+export declare const AGENTCORE_FORWARDED_HEADER_NAMES: readonly ["x-heddle-execution-host-assertion", "x-heddle-execution-host-mcp-capability", "x-heddle-execution-host-model-api-key"];
+export declare const AGENTCORE_EXCLUDED_HEADER_NAMES: readonly ["x-heddle-execution-host-local-token"];
+//# sourceMappingURL=agentcore-execution-host.d.ts.map

package/dist/agentcore/agentcore-execution-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcore-execution-host.d.ts","sourceRoot":"","sources":["../../src/agentcore/agentcore-execution-host.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,4BAA4B,EAE7B,MAAM,YAAY,CAAC;AAoBpB;;;GAGG;AACH,qBAAa,sBACb,YAAW,aAAa,EAAE,sBAAsB;;gBAMlC,MAAM,EAAE,4BAA4B;IAgBhD,sBAAsB,CACpB,KAAK,EAAE,6BAA6B,GACnC,aAAa,CAAC,wBAAwB,CAAC;IAK1C,mBAAmB,CACjB,KAAK,EAAE,0BAA0B,GAChC,aAAa,CAAC,iCAAiC,CAAC;IAKnD,KAAK,IAAI,IAAI;CAiEd;AAsGD,eAAO,MAAM,gCAAgC,mIAIlC,CAAC;AAEZ,eAAO,MAAM,+BAA+B,kDAEjC,CAAC"}

package/dist/agentcore/agentcore-execution-host.js

@@ -0,0 +1,201 @@
+import { BedrockAgentCoreClient, InvokeAgentRuntimeCommand, } from '@aws-sdk/client-bedrock-agentcore';
+import { HttpRequest } from '@smithy/protocol-http';
+import { AGENTCORE_RUNTIME_SESSION_HEADER, EXECUTION_ASSERTION_HEADER, EXECUTION_HOST_LOCAL_TOKEN_HEADER, MCP_CAPABILITY_HEADER, MODEL_API_KEY_HEADER, } from '../contracts/index.js';
+import { DirectHttpExecutionHost, } from '../http-sse/index.js';
+const CONTENT_TYPE = 'application/json';
+const ACCEPT = 'text/event-stream';
+const MIN_RUNTIME_SESSION_ID_LENGTH = 33;
+const MAX_RUNTIME_SESSION_ID_LENGTH = 256;
+const RUNTIME_SESSION_ID_PATTERN = /^[A-Za-z0-9](?:-*[A-Za-z0-9])+$/;
+const WIRE_BRIDGE_URL = new URL('http://127.0.0.1/agentcore-bridge');
+const NON_FORWARDED_LOCAL_TOKEN = 'agentcore-bridge-token-never-forwarded';
+const SERVICE_ERROR_CODES = new Map([
+    ['AccessDeniedException', 'access_denied'],
+    ['InternalServerException', 'runtime_internal'],
+    ['ResourceNotFoundException', 'runtime_not_found'],
+    ['RetryableConflictException', 'runtime_conflict'],
+    ['RuntimeClientError', 'runtime_client_error'],
+    ['ServiceQuotaExceededException', 'quota_exceeded'],
+    ['ThrottlingException', 'throttled'],
+    ['ValidationException', 'invalid_request'],
+]);
+/**
+ * Invokes one compatible Heddle Execution Host through AWS AgentCore while
+ * reusing the package's strict request and SSE protocol validation.
+ */
+export class AgentCoreExecutionHost {
+    #client;
+    #runtimeArn;
+    #qualifier;
+    #wire;
+    constructor(config) {
+        this.#runtimeArn = config.runtimeArn;
+        this.#qualifier = config.qualifier;
+        this.#client = config.client ?? new BedrockAgentCoreClient({
+            region: config.region,
+            // Invocation settlement is ambiguous after a transport interruption.
+            // Product policy, not the AWS client, decides whether a turn may retry.
+            maxAttempts: 1,
+        });
+        this.#wire = new DirectHttpExecutionHost({
+            baseUrl: WIRE_BRIDGE_URL,
+            localToken: NON_FORWARDED_LOCAL_TOKEN,
+            fetch: (_input, init) => this.#invoke(init),
+        });
+    }
+    streamConversationTurn(input) {
+        assertAgentCoreRuntimeSessionId(input.runtimeSessionId);
+        return this.#wire.streamConversationTurn(input);
+    }
+    streamHeartbeatTask(input) {
+        assertAgentCoreRuntimeSessionId(input.runtimeSessionId);
+        return this.#wire.streamHeartbeatTask(input);
+    }
+    close() {
+        this.#client.destroy?.();
+    }
+    async #invoke(init) {
+        if (init?.method !== 'POST' || typeof init.body !== 'string') {
+            throw new Error('AgentCore wire bridge received an invalid request.');
+        }
+        const headers = new Headers(init.headers);
+        const runtimeSessionId = requireHeader(headers, AGENTCORE_RUNTIME_SESSION_HEADER);
+        const customHeaders = Object.fromEntries([
+            [
+                EXECUTION_ASSERTION_HEADER,
+                requireHeader(headers, EXECUTION_ASSERTION_HEADER),
+            ],
+            [MODEL_API_KEY_HEADER, requireHeader(headers, MODEL_API_KEY_HEADER)],
+            ...(headers.has(MCP_CAPABILITY_HEADER)
+                ? [[MCP_CAPABILITY_HEADER, headers.get(MCP_CAPABILITY_HEADER)]]
+                : []),
+        ]);
+        const command = new InvokeAgentRuntimeCommand({
+            agentRuntimeArn: this.#runtimeArn,
+            runtimeSessionId,
+            qualifier: this.#qualifier,
+            contentType: CONTENT_TYPE,
+            accept: ACCEPT,
+            payload: new TextEncoder().encode(init.body),
+        });
+        addSignedCustomHeaders(command, customHeaders);
+        const signal = init.signal ?? undefined;
+        try {
+            const output = await this.#client.send(command, { abortSignal: signal });
+            return new Response(output.response ? toReadableStream(output.response) : null, {
+                status: output.statusCode ?? output.$metadata.httpStatusCode ?? 200,
+                headers: {
+                    'content-type': output.contentType ?? 'application/octet-stream',
+                },
+            });
+        }
+        catch (error) {
+            if (signal?.aborted) {
+                throw error;
+            }
+            const status = readServiceStatus(error);
+            if (!status) {
+                throw error;
+            }
+            const code = SERVICE_ERROR_CODES.get(readErrorName(error)) ?? 'unknown';
+            return new Response(JSON.stringify({
+                error: {
+                    code,
+                    message: 'AgentCore rejected the invocation.',
+                },
+            }), {
+                status,
+                headers: { 'content-type': CONTENT_TYPE },
+            });
+        }
+    }
+}
+function assertAgentCoreRuntimeSessionId(value) {
+    if (value.length < MIN_RUNTIME_SESSION_ID_LENGTH
+        || value.length > MAX_RUNTIME_SESSION_ID_LENGTH
+        || !RUNTIME_SESSION_ID_PATTERN.test(value)) {
+        throw new Error('AgentCore runtime session ID is not provider-compatible.');
+    }
+}
+function addSignedCustomHeaders(command, headers) {
+    command.middlewareStack.add((next) => async (args) => {
+        if (!HttpRequest.isInstance(args.request)) {
+            throw new Error('AgentCore invocation did not produce an HTTP request.');
+        }
+        Object.assign(args.request.headers, headers);
+        return await next(args);
+    }, {
+        step: 'build',
+        priority: 'low',
+        name: 'heddleAgentCoreCustomHeaders',
+    });
+}
+function requireHeader(headers, name) {
+    const value = headers.get(name);
+    if (!value) {
+        throw new Error('AgentCore wire bridge omitted required authority.');
+    }
+    return value;
+}
+function toReadableStream(source) {
+    if (source instanceof Blob) {
+        return source.stream();
+    }
+    if (source instanceof ReadableStream) {
+        return source;
+    }
+    if (!isAsyncIterable(source)) {
+        throw new Error('AgentCore returned an unsupported stream type.');
+    }
+    const iterator = source[Symbol.asyncIterator]();
+    return new ReadableStream({
+        async pull(controller) {
+            try {
+                const item = await iterator.next();
+                if (item.done) {
+                    controller.close();
+                    return;
+                }
+                if (!(item.value instanceof Uint8Array)) {
+                    throw new Error('AgentCore returned a non-binary stream chunk.');
+                }
+                controller.enqueue(item.value);
+            }
+            catch (error) {
+                controller.error(error);
+            }
+        },
+        async cancel() {
+            await iterator.return?.();
+        },
+    });
+}
+function isAsyncIterable(value) {
+    return Boolean(value
+        && typeof value === 'object'
+        && Symbol.asyncIterator in value
+        && typeof value[Symbol.asyncIterator] === 'function');
+}
+function readServiceStatus(error) {
+    if (!error || typeof error !== 'object' || !('$metadata' in error)) {
+        return undefined;
+    }
+    const metadata = error
+        .$metadata;
+    const status = metadata?.httpStatusCode;
+    return typeof status === 'number' && status >= 400 && status <= 599
+        ? status
+        : undefined;
+}
+function readErrorName(error) {
+    return error instanceof Error ? error.name : '';
+}
+export const AGENTCORE_FORWARDED_HEADER_NAMES = Object.freeze([
+    EXECUTION_ASSERTION_HEADER,
+    MCP_CAPABILITY_HEADER,
+    MODEL_API_KEY_HEADER,
+]);
+export const AGENTCORE_EXCLUDED_HEADER_NAMES = Object.freeze([
+    EXECUTION_HOST_LOCAL_TOKEN_HEADER,
+]);
+//# sourceMappingURL=agentcore-execution-host.js.map

package/dist/agentcore/agentcore-execution-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcore-execution-host.js","sourceRoot":"","sources":["../../src/agentcore/agentcore-execution-host.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAC1B,iCAAiC,EACjC,qBAAqB,EACrB,oBAAoB,GAGrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,GAKxB,MAAM,sBAAsB,CAAC;AAM9B,MAAM,YAAY,GAAG,kBAAkB,CAAC;AACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AACrE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,mCAAmC,CAAC,CAAC;AACrE,MAAM,yBAAyB,GAAG,wCAAwC,CAAC;AAC3E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAiB;IAClD,CAAC,uBAAuB,EAAE,eAAe,CAAC;IAC1C,CAAC,yBAAyB,EAAE,kBAAkB,CAAC;IAC/C,CAAC,2BAA2B,EAAE,mBAAmB,CAAC;IAClD,CAAC,4BAA4B,EAAE,kBAAkB,CAAC;IAClD,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;IAC9C,CAAC,+BAA+B,EAAE,gBAAgB,CAAC;IACnD,CAAC,qBAAqB,EAAE,WAAW,CAAC;IACpC,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;CAC3C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IAExB,OAAO,CAAyB;IAChC,WAAW,CAAS;IACpB,UAAU,CAAU;IACpB,KAAK,CAA0B;IAExC,YAAY,MAAoC;QAC9C,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,sBAAsB,CAAC;YACzD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,qEAAqE;YACrE,wEAAwE;YACxE,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,uBAAuB,CAAC;YACvC,OAAO,EAAE,eAAe;YACxB,UAAU,EAAE,yBAAyB;YACrC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB,CACpB,KAAoC;QAEpC,+BAA+B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,mBAAmB,CACjB,KAAiC;QAEjC,+BAA+B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAkB;QAC9B,IAAI,IAAI,EAAE,MAAM,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,gBAAgB,GAAG,aAAa,CACpC,OAAO,EACP,gCAAgC,CACjC,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC;YACvC;gBACE,0BAA0B;gBAC1B,aAAa,CAAC,OAAO,EAAE,0BAA0B,CAAC;aACnD;YACD,CAAC,oBAAoB,EAAE,aAAa,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;gBACpC,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAE,CAAC,CAAC;gBAChE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,yBAAyB,CAAC;YAC5C,eAAe,EAAE,IAAI,CAAC,WAAW;YACjC,gBAAgB;YAChB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,WAAW,EAAE,YAAY;YACzB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SAC7C,CAAC,CAAC;QACH,sBAAsB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YACzE,OAAO,IAAI,QAAQ,CACjB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAC1D;gBACE,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,IAAI,GAAG;gBACnE,OAAO,EAAE;oBACP,cAAc,EAAE,MAAM,CAAC,WAAW,IAAI,0BAA0B;iBACjE;aACF,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;YACxE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gBACjC,KAAK,EAAE;oBACL,IAAI;oBACJ,OAAO,EAAE,oCAAoC;iBAC9C;aACF,CAAC,EAAE;gBACF,MAAM;gBACN,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAED,SAAS,+BAA+B,CAAC,KAAa;IACpD,IACE,KAAK,CAAC,MAAM,GAAG,6BAA6B;WACzC,KAAK,CAAC,MAAM,GAAG,6BAA6B;WAC5C,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAkC,EAClC,OAAyC;IAEzC,OAAO,CAAC,eAAe,CAAC,GAAG,CACzB,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,EACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,8BAA8B;KACrC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,IAAY;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAgE;IAEhE,IAAI,MAAM,YAAY,IAAI,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,MAAM,YAAY,cAAc,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IAChD,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;gBACD,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM;YACV,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,KAAc;IAEd,OAAO,OAAO,CACZ,KAAK;WACF,OAAO,KAAK,KAAK,QAAQ;WACzB,MAAM,CAAC,aAAa,IAAI,KAAK;WAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,UAAU,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAI,KAAsD;SACrE,SAAS,CAAC;IACb,MAAM,MAAM,GAAG,QAAQ,EAAE,cAAc,CAAC;IACxC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QACjE,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5D,0BAA0B;IAC1B,qBAAqB;IACrB,oBAAoB;CACZ,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,iCAAiC;CACzB,CAAC,CAAC","sourcesContent":["import {\n  BedrockAgentCoreClient,\n  InvokeAgentRuntimeCommand,\n  type InvokeAgentRuntimeCommandOutput,\n} from '@aws-sdk/client-bedrock-agentcore';\nimport { HttpRequest } from '@smithy/protocol-http';\nimport {\n  AGENTCORE_RUNTIME_SESSION_HEADER,\n  EXECUTION_ASSERTION_HEADER,\n  EXECUTION_HOST_LOCAL_TOKEN_HEADER,\n  MCP_CAPABILITY_HEADER,\n  MODEL_API_KEY_HEADER,\n  type ExecutionHostHeartbeatStreamEvent,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport {\n  DirectHttpExecutionHost,\n  type ExecutionHost,\n  type ExecutionHostConversationTurn,\n  type ExecutionHostHeartbeatTask,\n  type HeartbeatExecutionHost,\n} from '../http-sse/index.js';\nimport type {\n  AgentCoreExecutionHostConfig,\n  AgentCoreRuntimeClient,\n} from './types.js';\n\nconst CONTENT_TYPE = 'application/json';\nconst ACCEPT = 'text/event-stream';\nconst MIN_RUNTIME_SESSION_ID_LENGTH = 33;\nconst MAX_RUNTIME_SESSION_ID_LENGTH = 256;\nconst RUNTIME_SESSION_ID_PATTERN = /^[A-Za-z0-9](?:-*[A-Za-z0-9])+$/;\nconst WIRE_BRIDGE_URL = new URL('http://127.0.0.1/agentcore-bridge');\nconst NON_FORWARDED_LOCAL_TOKEN = 'agentcore-bridge-token-never-forwarded';\nconst SERVICE_ERROR_CODES = new Map<string, string>([\n  ['AccessDeniedException', 'access_denied'],\n  ['InternalServerException', 'runtime_internal'],\n  ['ResourceNotFoundException', 'runtime_not_found'],\n  ['RetryableConflictException', 'runtime_conflict'],\n  ['RuntimeClientError', 'runtime_client_error'],\n  ['ServiceQuotaExceededException', 'quota_exceeded'],\n  ['ThrottlingException', 'throttled'],\n  ['ValidationException', 'invalid_request'],\n]);\n\n/**\n * Invokes one compatible Heddle Execution Host through AWS AgentCore while\n * reusing the package's strict request and SSE protocol validation.\n */\nexport class AgentCoreExecutionHost\nimplements ExecutionHost, HeartbeatExecutionHost {\n  readonly #client: AgentCoreRuntimeClient;\n  readonly #runtimeArn: string;\n  readonly #qualifier?: string;\n  readonly #wire: DirectHttpExecutionHost;\n\n  constructor(config: AgentCoreExecutionHostConfig) {\n    this.#runtimeArn = config.runtimeArn;\n    this.#qualifier = config.qualifier;\n    this.#client = config.client ?? new BedrockAgentCoreClient({\n      region: config.region,\n      // Invocation settlement is ambiguous after a transport interruption.\n      // Product policy, not the AWS client, decides whether a turn may retry.\n      maxAttempts: 1,\n    });\n    this.#wire = new DirectHttpExecutionHost({\n      baseUrl: WIRE_BRIDGE_URL,\n      localToken: NON_FORWARDED_LOCAL_TOKEN,\n      fetch: (_input, init) => this.#invoke(init),\n    });\n  }\n\n  streamConversationTurn(\n    input: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent> {\n    assertAgentCoreRuntimeSessionId(input.runtimeSessionId);\n    return this.#wire.streamConversationTurn(input);\n  }\n\n  streamHeartbeatTask(\n    input: ExecutionHostHeartbeatTask,\n  ): AsyncIterable<ExecutionHostHeartbeatStreamEvent> {\n    assertAgentCoreRuntimeSessionId(input.runtimeSessionId);\n    return this.#wire.streamHeartbeatTask(input);\n  }\n\n  close(): void {\n    this.#client.destroy?.();\n  }\n\n  async #invoke(init?: RequestInit): Promise<Response> {\n    if (init?.method !== 'POST' || typeof init.body !== 'string') {\n      throw new Error('AgentCore wire bridge received an invalid request.');\n    }\n    const headers = new Headers(init.headers);\n    const runtimeSessionId = requireHeader(\n      headers,\n      AGENTCORE_RUNTIME_SESSION_HEADER,\n    );\n    const customHeaders = Object.fromEntries([\n      [\n        EXECUTION_ASSERTION_HEADER,\n        requireHeader(headers, EXECUTION_ASSERTION_HEADER),\n      ],\n      [MODEL_API_KEY_HEADER, requireHeader(headers, MODEL_API_KEY_HEADER)],\n      ...(headers.has(MCP_CAPABILITY_HEADER)\n        ? [[MCP_CAPABILITY_HEADER, headers.get(MCP_CAPABILITY_HEADER)!]]\n        : []),\n    ]);\n    const command = new InvokeAgentRuntimeCommand({\n      agentRuntimeArn: this.#runtimeArn,\n      runtimeSessionId,\n      qualifier: this.#qualifier,\n      contentType: CONTENT_TYPE,\n      accept: ACCEPT,\n      payload: new TextEncoder().encode(init.body),\n    });\n    addSignedCustomHeaders(command, customHeaders);\n    const signal = init.signal ?? undefined;\n\n    try {\n      const output = await this.#client.send(command, { abortSignal: signal });\n      return new Response(\n        output.response ? toReadableStream(output.response) : null,\n        {\n          status: output.statusCode ?? output.$metadata.httpStatusCode ?? 200,\n          headers: {\n            'content-type': output.contentType ?? 'application/octet-stream',\n          },\n        },\n      );\n    } catch (error) {\n      if (signal?.aborted) {\n        throw error;\n      }\n      const status = readServiceStatus(error);\n      if (!status) {\n        throw error;\n      }\n      const code = SERVICE_ERROR_CODES.get(readErrorName(error)) ?? 'unknown';\n      return new Response(JSON.stringify({\n        error: {\n          code,\n          message: 'AgentCore rejected the invocation.',\n        },\n      }), {\n        status,\n        headers: { 'content-type': CONTENT_TYPE },\n      });\n    }\n  }\n}\n\nfunction assertAgentCoreRuntimeSessionId(value: string): void {\n  if (\n    value.length < MIN_RUNTIME_SESSION_ID_LENGTH\n    || value.length > MAX_RUNTIME_SESSION_ID_LENGTH\n    || !RUNTIME_SESSION_ID_PATTERN.test(value)\n  ) {\n    throw new Error('AgentCore runtime session ID is not provider-compatible.');\n  }\n}\n\nfunction addSignedCustomHeaders(\n  command: InvokeAgentRuntimeCommand,\n  headers: Readonly<Record<string, string>>,\n): void {\n  command.middlewareStack.add(\n    (next) => async (args) => {\n      if (!HttpRequest.isInstance(args.request)) {\n        throw new Error('AgentCore invocation did not produce an HTTP request.');\n      }\n      Object.assign(args.request.headers, headers);\n      return await next(args);\n    },\n    {\n      step: 'build',\n      priority: 'low',\n      name: 'heddleAgentCoreCustomHeaders',\n    },\n  );\n}\n\nfunction requireHeader(headers: Headers, name: string): string {\n  const value = headers.get(name);\n  if (!value) {\n    throw new Error('AgentCore wire bridge omitted required authority.');\n  }\n  return value;\n}\n\nfunction toReadableStream(\n  source: NonNullable<InvokeAgentRuntimeCommandOutput['response']>,\n): ReadableStream<Uint8Array> {\n  if (source instanceof Blob) {\n    return source.stream();\n  }\n  if (source instanceof ReadableStream) {\n    return source;\n  }\n  if (!isAsyncIterable(source)) {\n    throw new Error('AgentCore returned an unsupported stream type.');\n  }\n  const iterator = source[Symbol.asyncIterator]();\n  return new ReadableStream<Uint8Array>({\n    async pull(controller) {\n      try {\n        const item = await iterator.next();\n        if (item.done) {\n          controller.close();\n          return;\n        }\n        if (!(item.value instanceof Uint8Array)) {\n          throw new Error('AgentCore returned a non-binary stream chunk.');\n        }\n        controller.enqueue(item.value);\n      } catch (error) {\n        controller.error(error);\n      }\n    },\n    async cancel() {\n      await iterator.return?.();\n    },\n  });\n}\n\nfunction isAsyncIterable(\n  value: unknown,\n): value is AsyncIterable<Uint8Array> {\n  return Boolean(\n    value\n    && typeof value === 'object'\n    && Symbol.asyncIterator in value\n    && typeof value[Symbol.asyncIterator] === 'function',\n  );\n}\n\nfunction readServiceStatus(error: unknown): number | undefined {\n  if (!error || typeof error !== 'object' || !('$metadata' in error)) {\n    return undefined;\n  }\n  const metadata = (error as { $metadata?: { httpStatusCode?: unknown } })\n    .$metadata;\n  const status = metadata?.httpStatusCode;\n  return typeof status === 'number' && status >= 400 && status <= 599\n    ? status\n    : undefined;\n}\n\nfunction readErrorName(error: unknown): string {\n  return error instanceof Error ? error.name : '';\n}\n\nexport const AGENTCORE_FORWARDED_HEADER_NAMES = Object.freeze([\n  EXECUTION_ASSERTION_HEADER,\n  MCP_CAPABILITY_HEADER,\n  MODEL_API_KEY_HEADER,\n] as const);\n\nexport const AGENTCORE_EXCLUDED_HEADER_NAMES = Object.freeze([\n  EXECUTION_HOST_LOCAL_TOKEN_HEADER,\n] as const);\n"]}

package/dist/agentcore/index.d.ts

@@ -0,0 +1,3 @@
+export { AGENTCORE_EXCLUDED_HEADER_NAMES, AGENTCORE_FORWARDED_HEADER_NAMES, AgentCoreExecutionHost, } from './agentcore-execution-host.js';
+export type { AgentCoreExecutionHostConfig, AgentCoreRuntimeClient, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/agentcore/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agentcore/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,EAChC,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AACvC,YAAY,EACV,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,YAAY,CAAC"}

package/dist/agentcore/index.js

@@ -0,0 +1,2 @@
+export { AGENTCORE_EXCLUDED_HEADER_NAMES, AGENTCORE_FORWARDED_HEADER_NAMES, AgentCoreExecutionHost, } from './agentcore-execution-host.js';
+//# sourceMappingURL=index.js.map

package/dist/agentcore/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agentcore/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,EAC/B,gCAAgC,EAChC,sBAAsB,GACvB,MAAM,+BAA+B,CAAC","sourcesContent":["export {\n  AGENTCORE_EXCLUDED_HEADER_NAMES,\n  AGENTCORE_FORWARDED_HEADER_NAMES,\n  AgentCoreExecutionHost,\n} from './agentcore-execution-host.js';\nexport type {\n  AgentCoreExecutionHostConfig,\n  AgentCoreRuntimeClient,\n} from './types.js';\n"]}

package/dist/agentcore/types.d.ts

@@ -0,0 +1,14 @@
+import type { InvokeAgentRuntimeCommand, InvokeAgentRuntimeCommandOutput } from '@aws-sdk/client-bedrock-agentcore';
+export interface AgentCoreRuntimeClient {
+    send(command: InvokeAgentRuntimeCommand, options?: {
+        abortSignal?: AbortSignal;
+    }): Promise<InvokeAgentRuntimeCommandOutput>;
+    destroy?(): void;
+}
+export type AgentCoreExecutionHostConfig = {
+    region: string;
+    runtimeArn: string;
+    qualifier?: string;
+    client?: AgentCoreRuntimeClient;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/agentcore/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/agentcore/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,yBAAyB,EACzB,+BAA+B,EAChC,MAAM,mCAAmC,CAAC;AAE3C,MAAM,WAAW,sBAAsB;IACrC,IAAI,CACF,OAAO,EAAE,yBAAyB,EAClC,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,WAAW,CAAA;KAAE,GACtC,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,IAAI,CAAC;CAClB;AAED,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,sBAAsB,CAAC;CACjC,CAAC"}

package/dist/agentcore/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/agentcore/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/agentcore/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  InvokeAgentRuntimeCommand,\n  InvokeAgentRuntimeCommandOutput,\n} from '@aws-sdk/client-bedrock-agentcore';\n\nexport interface AgentCoreRuntimeClient {\n  send(\n    command: InvokeAgentRuntimeCommand,\n    options?: { abortSignal?: AbortSignal },\n  ): Promise<InvokeAgentRuntimeCommandOutput>;\n  destroy?(): void;\n}\n\nexport type AgentCoreExecutionHostConfig = {\n  region: string;\n  runtimeArn: string;\n  qualifier?: string;\n  client?: AgentCoreRuntimeClient;\n};\n"]}

package/dist/authority/jose-execution-authority.js

@@ -1,7 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { CompactSign, SignJWT, compactVerify, exportJWK, } from 'jose';
 import { z } from 'zod';
-import { CONVERSATION_TURN_WORKFLOW, EXECUTION_ASSERTION_TYPE, EXECUTION_CONTRACT_VERSION, ExecutionScopeSchema, JwtAudienceSchema, JwtIssuerSchema, MCP_CAPABILITY_TYPE, McpAllowedToolsSchema, McpServerIdSchema, OpaqueIdSchema, RuntimeSessionIdSchema, } from '../contracts/index.js';
+import { EXECUTION_ASSERTION_TYPE, EXECUTION_CONTRACT_VERSION, ExecutionScopeSchema, HostedExecutionWorkflowSchema, JwtAudienceSchema, JwtIssuerSchema, MCP_CAPABILITY_TYPE, McpAllowedToolsSchema, McpServerIdSchema, OpaqueIdSchema, RuntimeSessionIdSchema, } from '../contracts/index.js';
 const SIGNING_ALGORITHM = 'ES256';
 const ExecutionAuthorityMcpConfigSchema = z.object({
     audience: JwtAudienceSchema,
@@ -39,7 +39,7 @@ const ExecutionAuthorityIssueInputSchema = z.object({
     scope: ExecutionIssueScopeSchema,
     runtimeSessionId: RuntimeSessionIdSchema,
     invocationId: OpaqueIdSchema,
-    workflow: z.literal(CONVERSATION_TURN_WORKFLOW),
+    workflow: HostedExecutionWorkflowSchema,
     mcp: z.object({
         allowedTools: McpAllowedToolsSchema,
     }).strict().optional(),

package/dist/authority/jose-execution-authority.js.map

@@ -1 +1 @@
-{"version":3,"file":"jose-execution-authority.js","sourceRoot":"","sources":["../../src/authority/jose-execution-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,WAAW,EACX,OAAO,EACP,aAAa,EACb,SAAS,GAIV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAW/B,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,iBAAiB;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,eAAe;IACvB,SAAS,EAAE,cAAc;IACzB,iBAAiB,EAAE,iBAAiB;IACpC,KAAK,EAAE,cAAc;IACrB,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IACzD,GAAG,EAAE,iCAAiC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;YACzB,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACvD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;YAC3B,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACjF,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,yBAAyB;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,YAAY,EAAE,qBAAqB;KACpC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACpB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACxC,CAAC,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;IAC5C,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACpE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACxB,OAAO,CAAiD;IACxD,WAAW,CAAY;IACvB,UAAU,CAAgB;IAC1B,IAAI,CAAa;IACjB,mBAAmB,CAAe;IAE3C,YACE,MAAgC,EAChC,GAA8C,EAC9C,OAAsC;QAEtC,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,IAAI,UAAU,CAAC;IACtE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,MAAgC,EAChC,OAAkC,EAClC,UAAyC,EAAE;QAE3C,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,2BAA2B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,IAAI,sBAAsB,CAC/B,MAAM,EACN;YACE,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;SAC9C,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,KAAmC;QAEnC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,kBAAkB,GAAG,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACvE,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAC3D,SAAS,EACT,QAAQ,EACR,kBAAkB,CACnB,CAAC;QAEF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG;YAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAC9B,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,EACpC,QAAQ,CACT;YACD,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,IAAI,iCAAiC,CAC1C,kBAAkB,EAClB,GAAG,EAAE,SAAS,EACd,oBAAoB,CAAC;YACnB,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,GAAG,SAAS,CAAC,KAAK;aACnB;YACD,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;YAClC,kBAAkB,EAAE,cAAc,CAAC,kBAAkB,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,UAAU;QACR,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,uBAAuB,CACrB,KAAyD,EACzD,QAAgB,EAChB,SAAiB;QAEjB,OAAO,IAAI,OAAO,CAAC;YACjB,eAAe,EAAE,0BAA0B;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,wBAAwB;SAC9B,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aAC9B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;aAC3C,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;aAC1B,WAAW,CAAC,QAAQ,CAAC;aACrB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,KAEC,EACD,QAAgB;QAKhB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAI,CAAC;QACpC,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACtE,IAAI,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAC;YAClC,eAAe,EAAE,0BAA0B;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;SAC1C,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,mBAAmB;SACzB,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aAC9B,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC/B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjC,MAAM,CAAC,YAAY,CAAC;aACpB,WAAW,CAAC,QAAQ,CAAC;aACrB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE1B,OAAO;YACL,SAAS;YACT,QAAQ,EAAE;gBACR,YAAY;gBACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACxD,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;aACrC;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,iCAAiC;IAC5B,QAAQ,CAAmC;IAC3C,mBAAmB,CAAS;IAC5B,cAAc,CAAqB;IAE5C,YACE,kBAA0B,EAC1B,aAAiC,EACjC,QAA0C;QAE1C,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,GAAQ,EAAE,KAAa;IAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,GAAG,EAAE,iBAAiB;QACtB,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK;KACX,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAc;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS;WAClC,SAAS,CAAC,IAAI,KAAK,OAAO;WAC1B,SAAS,CAAC,UAAU,KAAK,OAAO;WAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAc;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,QAAQ;WACjC,SAAS,CAAC,IAAI,KAAK,OAAO;WAC1B,SAAS,CAAC,UAAU,KAAK,OAAO;WAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAkC;IAElC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,WAAW,CACjC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CACxE;aACE,kBAAkB,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;aAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5B,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;YAC5C,UAAU,EAAE,CAAC,iBAAiB,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAW;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB;IAC1C,OAAO,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAsD;IAEtD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA0C;IAE1C,MAAM,KAAK,GAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG;QACtB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACd,GAAG,QAAQ,CAAC,GAAG;YACf,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;SAC5D,CAAC;QACF,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import { randomUUID } from 'node:crypto';\nimport {\n  CompactSign,\n  SignJWT,\n  compactVerify,\n  exportJWK,\n  type CryptoKey,\n  type JWK,\n  type JSONWebKeySet,\n} from 'jose';\nimport { z } from 'zod';\nimport {\n  CONVERSATION_TURN_WORKFLOW,\n  EXECUTION_ASSERTION_TYPE,\n  EXECUTION_CONTRACT_VERSION,\n  ExecutionScopeSchema,\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  MCP_CAPABILITY_TYPE,\n  McpAllowedToolsSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n  type ExecutionScope,\n} from '../contracts/index.js';\nimport type {\n  ExecutionAuthority,\n  ExecutionAuthorityConfig,\n  ExecutionAuthorityIssueInput,\n  ExecutionAuthorityKeyPair,\n  IssuedExecutionAuthority,\n  IssuedExecutionAuthorityMetadata,\n  JoseExecutionAuthorityOptions,\n} from './types.js';\n\nconst SIGNING_ALGORITHM = 'ES256';\nconst ExecutionAuthorityMcpConfigSchema = z.object({\n  audience: JwtAudienceSchema,\n  serverId: McpServerIdSchema,\n  ttlSeconds: z.number().int().min(1).max(15 * 60),\n}).strict();\nconst ExecutionAuthorityConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  adopterId: OpaqueIdSchema,\n  executionAudience: JwtAudienceSchema,\n  keyId: OpaqueIdSchema,\n  executionTtlSeconds: z.number().int().min(1).max(15 * 60),\n  mcp: ExecutionAuthorityMcpConfigSchema.optional(),\n}).strict().superRefine((config, context) => {\n  if (!config.mcp) {\n    return;\n  }\n  if (config.executionAudience === config.mcp.audience) {\n    context.addIssue({\n      code: 'custom',\n      path: ['mcp', 'audience'],\n      message: 'must be distinct from the execution audience',\n    });\n  }\n  if (config.mcp.ttlSeconds < config.executionTtlSeconds) {\n    context.addIssue({\n      code: 'custom',\n      path: ['mcp', 'ttlSeconds'],\n      message: 'must not expire before execution admission authority',\n    });\n  }\n});\nconst ExecutionIssueScopeSchema = ExecutionScopeSchema.omit({ adopterId: true });\nconst ExecutionAuthorityIssueInputSchema = z.object({\n  scope: ExecutionIssueScopeSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: OpaqueIdSchema,\n  workflow: z.literal(CONVERSATION_TURN_WORKFLOW),\n  mcp: z.object({\n    allowedTools: McpAllowedToolsSchema,\n  }).strict().optional(),\n}).strict();\nconst PublicP256JwkSchema = z.object({\n  kty: z.literal('EC'),\n  crv: z.literal('P-256'),\n  x: z.string().regex(/^[A-Za-z0-9_-]+$/),\n  y: z.string().regex(/^[A-Za-z0-9_-]+$/),\n}).passthrough().superRefine((jwk, context) => {\n  const privateFields = ['d', 'p', 'q', 'dp', 'dq', 'qi', 'oth', 'k'];\n  if (privateFields.some((field) => field in jwk)) {\n    context.addIssue({\n      code: 'custom',\n      message: 'must not contain private key material',\n    });\n  }\n});\n\n/**\n * ES256 reference adapter for issuing one invocation's admission assertion and\n * optional product-MCP capability.\n */\nexport class JoseExecutionAuthority implements ExecutionAuthority {\n  readonly #config: z.infer<typeof ExecutionAuthorityConfigSchema>;\n  readonly #privateKey: CryptoKey;\n  readonly #publicJwk: Readonly<JWK>;\n  readonly #now: () => Date;\n  readonly #createCapabilityId: () => string;\n\n  private constructor(\n    config: ExecutionAuthorityConfig,\n    key: { privateKey: CryptoKey; publicJwk: JWK },\n    options: JoseExecutionAuthorityOptions,\n  ) {\n    this.#config = deepFreezeConfig(ExecutionAuthorityConfigSchema.parse(config));\n    assertPrivateSigningKey(key.privateKey);\n    this.#privateKey = key.privateKey;\n    this.#publicJwk = projectPublicJwk(key.publicJwk, this.#config.keyId);\n    this.#now = options.now ?? (() => new Date());\n    this.#createCapabilityId = options.createCapabilityId ?? randomUUID;\n  }\n\n  static async create(\n    config: ExecutionAuthorityConfig,\n    keyPair: ExecutionAuthorityKeyPair,\n    options: JoseExecutionAuthorityOptions = {},\n  ): Promise<JoseExecutionAuthority> {\n    assertPrivateSigningKey(keyPair.privateKey);\n    assertPublicVerificationKey(keyPair.publicKey);\n    await assertMatchingKeyPair(keyPair);\n    return new JoseExecutionAuthority(\n      config,\n      {\n        privateKey: keyPair.privateKey,\n        publicJwk: await exportJWK(keyPair.publicKey),\n      },\n      options,\n    );\n  }\n\n  async issue(\n    input: ExecutionAuthorityIssueInput,\n  ): Promise<IssuedExecutionAuthority> {\n    const authority = ExecutionAuthorityIssueInputSchema.parse(input);\n    if (authority.mcp && !this.#config.mcp) {\n      throw new Error(\n        'Execution authority cannot issue an MCP capability without MCP deployment configuration.',\n      );\n    }\n\n    const issuedAt = toEpochSeconds(this.#now());\n    const executionExpiresAt = issuedAt + this.#config.executionTtlSeconds;\n    const executionAssertion = await this.#signExecutionAssertion(\n      authority,\n      issuedAt,\n      executionExpiresAt,\n    );\n\n    const mcp = authority.mcp && this.#config.mcp\n      ? await this.#issueMcpCapability(\n        { ...authority, mcp: authority.mcp },\n        issuedAt,\n      )\n      : undefined;\n\n    return new ProtectedIssuedExecutionAuthority(\n      executionAssertion,\n      mcp?.assertion,\n      freezeIssuedMetadata({\n        scope: {\n          adopterId: this.#config.adopterId,\n          ...authority.scope,\n        },\n        runtimeSessionId: authority.runtimeSessionId,\n        invocationId: authority.invocationId,\n        workflow: authority.workflow,\n        issuedAt: toIsoTimestamp(issuedAt),\n        executionExpiresAt: toIsoTimestamp(executionExpiresAt),\n        ...(mcp ? { mcp: mcp.metadata } : {}),\n      }),\n    );\n  }\n\n  publicJwks(): JSONWebKeySet {\n    return { keys: [{ ...this.#publicJwk }] };\n  }\n\n  #signExecutionAssertion(\n    input: z.infer<typeof ExecutionAuthorityIssueInputSchema>,\n    issuedAt: number,\n    expiresAt: number,\n  ): Promise<string> {\n    return new SignJWT({\n      contractVersion: EXECUTION_CONTRACT_VERSION,\n      adopterId: this.#config.adopterId,\n      tenantId: input.scope.tenantId,\n      productSessionId: input.scope.productSessionId,\n      runtimeSessionId: input.runtimeSessionId,\n      workflow: input.workflow,\n    })\n      .setProtectedHeader({\n        alg: SIGNING_ALGORITHM,\n        kid: this.#config.keyId,\n        typ: EXECUTION_ASSERTION_TYPE,\n      })\n      .setIssuer(this.#config.issuer)\n      .setAudience(this.#config.executionAudience)\n      .setSubject(input.scope.subjectId)\n      .setJti(input.invocationId)\n      .setIssuedAt(issuedAt)\n      .setExpirationTime(expiresAt)\n      .sign(this.#privateKey);\n  }\n\n  async #issueMcpCapability(\n    input: z.infer<typeof ExecutionAuthorityIssueInputSchema> & {\n      mcp: { allowedTools: string[] };\n    },\n    issuedAt: number,\n  ): Promise<{\n    assertion: string;\n    metadata: NonNullable<IssuedExecutionAuthorityMetadata['mcp']>;\n  }> {\n    const mcpConfig = this.#config.mcp!;\n    const capabilityId = OpaqueIdSchema.parse(this.#createCapabilityId());\n    if (capabilityId === input.invocationId) {\n      throw new Error(\n        'MCP capability identity must be distinct from the invocation identity.',\n      );\n    }\n    const expiresAt = issuedAt + mcpConfig.ttlSeconds;\n    const assertion = await new SignJWT({\n      contractVersion: EXECUTION_CONTRACT_VERSION,\n      adopterId: this.#config.adopterId,\n      tenantId: input.scope.tenantId,\n      productSessionId: input.scope.productSessionId,\n      runtimeSessionId: input.runtimeSessionId,\n      invocationId: input.invocationId,\n      workflow: input.workflow,\n      serverId: mcpConfig.serverId,\n      allowedTools: [...input.mcp.allowedTools],\n    })\n      .setProtectedHeader({\n        alg: SIGNING_ALGORITHM,\n        kid: this.#config.keyId,\n        typ: MCP_CAPABILITY_TYPE,\n      })\n      .setIssuer(this.#config.issuer)\n      .setAudience(mcpConfig.audience)\n      .setSubject(input.scope.subjectId)\n      .setJti(capabilityId)\n      .setIssuedAt(issuedAt)\n      .setExpirationTime(expiresAt)\n      .sign(this.#privateKey);\n\n    return {\n      assertion,\n      metadata: {\n        capabilityId,\n        serverId: mcpConfig.serverId,\n        allowedTools: Object.freeze([...input.mcp.allowedTools]),\n        expiresAt: toIsoTimestamp(expiresAt),\n      },\n    };\n  }\n}\n\nclass ProtectedIssuedExecutionAuthority implements IssuedExecutionAuthority {\n  readonly metadata: IssuedExecutionAuthorityMetadata;\n  readonly #executionAssertion: string;\n  readonly #mcpCapability: string | undefined;\n\n  constructor(\n    executionAssertion: string,\n    mcpCapability: string | undefined,\n    metadata: IssuedExecutionAuthorityMetadata,\n  ) {\n    this.#executionAssertion = executionAssertion;\n    this.#mcpCapability = mcpCapability;\n    this.metadata = metadata;\n  }\n\n  executionAssertion(): string {\n    return this.#executionAssertion;\n  }\n\n  mcpCapability(): string | undefined {\n    return this.#mcpCapability;\n  }\n\n  toJSON(): IssuedExecutionAuthorityMetadata {\n    return this.metadata;\n  }\n}\n\nfunction projectPublicJwk(jwk: JWK, keyId: string): Readonly<JWK> {\n  const parsed = PublicP256JwkSchema.parse(jwk);\n  return Object.freeze({\n    kty: parsed.kty,\n    crv: parsed.crv,\n    x: parsed.x,\n    y: parsed.y,\n    alg: SIGNING_ALGORITHM,\n    kid: keyId,\n    use: 'sig',\n  });\n}\n\nfunction assertPrivateSigningKey(key: CryptoKey): void {\n  const algorithm = key.algorithm as { name: string; namedCurve?: string };\n  const accepted = key.type === 'private'\n    && algorithm.name === 'ECDSA'\n    && algorithm.namedCurve === 'P-256'\n    && key.usages.includes('sign');\n  if (!accepted) {\n    throw new Error(\n      'Execution authority requires an ES256 private signing key.',\n    );\n  }\n}\n\nfunction assertPublicVerificationKey(key: CryptoKey): void {\n  const algorithm = key.algorithm as { name: string; namedCurve?: string };\n  const accepted = key.type === 'public'\n    && algorithm.name === 'ECDSA'\n    && algorithm.namedCurve === 'P-256'\n    && key.usages.includes('verify');\n  if (!accepted) {\n    throw new Error(\n      'Execution authority requires an ES256 public verification key.',\n    );\n  }\n}\n\nasync function assertMatchingKeyPair(\n  keyPair: ExecutionAuthorityKeyPair,\n): Promise<void> {\n  try {\n    const probe = await new CompactSign(\n      new TextEncoder().encode('heddle-adopter-execution-authority-key-pair'),\n    )\n      .setProtectedHeader({ alg: SIGNING_ALGORITHM })\n      .sign(keyPair.privateKey);\n    await compactVerify(probe, keyPair.publicKey, {\n      algorithms: [SIGNING_ALGORITHM],\n    });\n  } catch {\n    throw new Error('Execution authority signing keys do not match.');\n  }\n}\n\nfunction toEpochSeconds(value: Date): number {\n  const seconds = Math.floor(value.getTime() / 1_000);\n  if (!Number.isSafeInteger(seconds) || seconds < 0) {\n    throw new Error('Execution authority could not resolve a valid issue time.');\n  }\n  return seconds;\n}\n\nfunction toIsoTimestamp(epochSeconds: number): string {\n  return new Date(epochSeconds * 1_000).toISOString();\n}\n\nfunction deepFreezeConfig(\n  config: z.infer<typeof ExecutionAuthorityConfigSchema>,\n): z.infer<typeof ExecutionAuthorityConfigSchema> {\n  const mcp = config.mcp ? Object.freeze({ ...config.mcp }) : undefined;\n  return Object.freeze({ ...config, ...(mcp ? { mcp } : {}) });\n}\n\nfunction freezeIssuedMetadata(\n  metadata: IssuedExecutionAuthorityMetadata,\n): IssuedExecutionAuthorityMetadata {\n  const scope: ExecutionScope = Object.freeze({ ...metadata.scope });\n  const mcp = metadata.mcp\n    ? Object.freeze({\n      ...metadata.mcp,\n      allowedTools: Object.freeze([...metadata.mcp.allowedTools]),\n    })\n    : undefined;\n  return Object.freeze({ ...metadata, scope, ...(mcp ? { mcp } : {}) });\n}\n"]}
+{"version":3,"file":"jose-execution-authority.js","sourceRoot":"","sources":["../../src/authority/jose-execution-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,WAAW,EACX,OAAO,EACP,aAAa,EACb,SAAS,GAIV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,oBAAoB,EACpB,6BAA6B,EAC7B,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAW/B,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,iBAAiB;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,eAAe;IACvB,SAAS,EAAE,cAAc;IACzB,iBAAiB,EAAE,iBAAiB;IACpC,KAAK,EAAE,cAAc;IACrB,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IACzD,GAAG,EAAE,iCAAiC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;YACzB,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACvD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;YAC3B,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACjF,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,yBAAyB;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,6BAA6B;IACvC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,YAAY,EAAE,qBAAqB;KACpC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACpB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACxC,CAAC,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;IAC5C,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACpE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACxB,OAAO,CAAiD;IACxD,WAAW,CAAY;IACvB,UAAU,CAAgB;IAC1B,IAAI,CAAa;IACjB,mBAAmB,CAAe;IAE3C,YACE,MAAgC,EAChC,GAA8C,EAC9C,OAAsC;QAEtC,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,IAAI,UAAU,CAAC;IACtE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,MAAgC,EAChC,OAAkC,EAClC,UAAyC,EAAE;QAE3C,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,2BAA2B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,IAAI,sBAAsB,CAC/B,MAAM,EACN;YACE,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;SAC9C,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,KAAmC;QAEnC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,kBAAkB,GAAG,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACvE,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAC3D,SAAS,EACT,QAAQ,EACR,kBAAkB,CACnB,CAAC;QAEF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG;YAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAC9B,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,EACpC,QAAQ,CACT;YACD,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,IAAI,iCAAiC,CAC1C,kBAAkB,EAClB,GAAG,EAAE,SAAS,EACd,oBAAoB,CAAC;YACnB,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,GAAG,SAAS,CAAC,KAAK;aACnB;YACD,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;YAClC,kBAAkB,EAAE,cAAc,CAAC,kBAAkB,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,UAAU;QACR,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,uBAAuB,CACrB,KAAyD,EACzD,QAAgB,EAChB,SAAiB;QAEjB,OAAO,IAAI,OAAO,CAAC;YACjB,eAAe,EAAE,0BAA0B;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,wBAAwB;SAC9B,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aAC9B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;aAC3C,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;aAC1B,WAAW,CAAC,QAAQ,CAAC;aACrB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,KAEC,EACD,QAAgB;QAKhB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAI,CAAC;QACpC,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACtE,IAAI,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAC;YAClC,eAAe,EAAE,0BAA0B;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;SAC1C,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,mBAAmB;SACzB,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aAC9B,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC/B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjC,MAAM,CAAC,YAAY,CAAC;aACpB,WAAW,CAAC,QAAQ,CAAC;aACrB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE1B,OAAO;YACL,SAAS;YACT,QAAQ,EAAE;gBACR,YAAY;gBACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACxD,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;aACrC;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,iCAAiC;IAC5B,QAAQ,CAAmC;IAC3C,mBAAmB,CAAS;IAC5B,cAAc,CAAqB;IAE5C,YACE,kBAA0B,EAC1B,aAAiC,EACjC,QAA0C;QAE1C,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,GAAQ,EAAE,KAAa;IAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,GAAG,EAAE,iBAAiB;QACtB,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK;KACX,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAc;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS;WAClC,SAAS,CAAC,IAAI,KAAK,OAAO;WAC1B,SAAS,CAAC,UAAU,KAAK,OAAO;WAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAc;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,QAAQ;WACjC,SAAS,CAAC,IAAI,KAAK,OAAO;WAC1B,SAAS,CAAC,UAAU,KAAK,OAAO;WAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAkC;IAElC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,WAAW,CACjC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CACxE;aACE,kBAAkB,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;aAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5B,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;YAC5C,UAAU,EAAE,CAAC,iBAAiB,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAW;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB;IAC1C,OAAO,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAsD;IAEtD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA0C;IAE1C,MAAM,KAAK,GAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG;QACtB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACd,GAAG,QAAQ,CAAC,GAAG;YACf,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;SAC5D,CAAC;QACF,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import { randomUUID } from 'node:crypto';\nimport {\n  CompactSign,\n  SignJWT,\n  compactVerify,\n  exportJWK,\n  type CryptoKey,\n  type JWK,\n  type JSONWebKeySet,\n} from 'jose';\nimport { z } from 'zod';\nimport {\n  EXECUTION_ASSERTION_TYPE,\n  EXECUTION_CONTRACT_VERSION,\n  ExecutionScopeSchema,\n  HostedExecutionWorkflowSchema,\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  MCP_CAPABILITY_TYPE,\n  McpAllowedToolsSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n  type ExecutionScope,\n} from '../contracts/index.js';\nimport type {\n  ExecutionAuthority,\n  ExecutionAuthorityConfig,\n  ExecutionAuthorityIssueInput,\n  ExecutionAuthorityKeyPair,\n  IssuedExecutionAuthority,\n  IssuedExecutionAuthorityMetadata,\n  JoseExecutionAuthorityOptions,\n} from './types.js';\n\nconst SIGNING_ALGORITHM = 'ES256';\nconst ExecutionAuthorityMcpConfigSchema = z.object({\n  audience: JwtAudienceSchema,\n  serverId: McpServerIdSchema,\n  ttlSeconds: z.number().int().min(1).max(15 * 60),\n}).strict();\nconst ExecutionAuthorityConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  adopterId: OpaqueIdSchema,\n  executionAudience: JwtAudienceSchema,\n  keyId: OpaqueIdSchema,\n  executionTtlSeconds: z.number().int().min(1).max(15 * 60),\n  mcp: ExecutionAuthorityMcpConfigSchema.optional(),\n}).strict().superRefine((config, context) => {\n  if (!config.mcp) {\n    return;\n  }\n  if (config.executionAudience === config.mcp.audience) {\n    context.addIssue({\n      code: 'custom',\n      path: ['mcp', 'audience'],\n      message: 'must be distinct from the execution audience',\n    });\n  }\n  if (config.mcp.ttlSeconds < config.executionTtlSeconds) {\n    context.addIssue({\n      code: 'custom',\n      path: ['mcp', 'ttlSeconds'],\n      message: 'must not expire before execution admission authority',\n    });\n  }\n});\nconst ExecutionIssueScopeSchema = ExecutionScopeSchema.omit({ adopterId: true });\nconst ExecutionAuthorityIssueInputSchema = z.object({\n  scope: ExecutionIssueScopeSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: OpaqueIdSchema,\n  workflow: HostedExecutionWorkflowSchema,\n  mcp: z.object({\n    allowedTools: McpAllowedToolsSchema,\n  }).strict().optional(),\n}).strict();\nconst PublicP256JwkSchema = z.object({\n  kty: z.literal('EC'),\n  crv: z.literal('P-256'),\n  x: z.string().regex(/^[A-Za-z0-9_-]+$/),\n  y: z.string().regex(/^[A-Za-z0-9_-]+$/),\n}).passthrough().superRefine((jwk, context) => {\n  const privateFields = ['d', 'p', 'q', 'dp', 'dq', 'qi', 'oth', 'k'];\n  if (privateFields.some((field) => field in jwk)) {\n    context.addIssue({\n      code: 'custom',\n      message: 'must not contain private key material',\n    });\n  }\n});\n\n/**\n * ES256 reference adapter for issuing one invocation's admission assertion and\n * optional product-MCP capability.\n */\nexport class JoseExecutionAuthority implements ExecutionAuthority {\n  readonly #config: z.infer<typeof ExecutionAuthorityConfigSchema>;\n  readonly #privateKey: CryptoKey;\n  readonly #publicJwk: Readonly<JWK>;\n  readonly #now: () => Date;\n  readonly #createCapabilityId: () => string;\n\n  private constructor(\n    config: ExecutionAuthorityConfig,\n    key: { privateKey: CryptoKey; publicJwk: JWK },\n    options: JoseExecutionAuthorityOptions,\n  ) {\n    this.#config = deepFreezeConfig(ExecutionAuthorityConfigSchema.parse(config));\n    assertPrivateSigningKey(key.privateKey);\n    this.#privateKey = key.privateKey;\n    this.#publicJwk = projectPublicJwk(key.publicJwk, this.#config.keyId);\n    this.#now = options.now ?? (() => new Date());\n    this.#createCapabilityId = options.createCapabilityId ?? randomUUID;\n  }\n\n  static async create(\n    config: ExecutionAuthorityConfig,\n    keyPair: ExecutionAuthorityKeyPair,\n    options: JoseExecutionAuthorityOptions = {},\n  ): Promise<JoseExecutionAuthority> {\n    assertPrivateSigningKey(keyPair.privateKey);\n    assertPublicVerificationKey(keyPair.publicKey);\n    await assertMatchingKeyPair(keyPair);\n    return new JoseExecutionAuthority(\n      config,\n      {\n        privateKey: keyPair.privateKey,\n        publicJwk: await exportJWK(keyPair.publicKey),\n      },\n      options,\n    );\n  }\n\n  async issue(\n    input: ExecutionAuthorityIssueInput,\n  ): Promise<IssuedExecutionAuthority> {\n    const authority = ExecutionAuthorityIssueInputSchema.parse(input);\n    if (authority.mcp && !this.#config.mcp) {\n      throw new Error(\n        'Execution authority cannot issue an MCP capability without MCP deployment configuration.',\n      );\n    }\n\n    const issuedAt = toEpochSeconds(this.#now());\n    const executionExpiresAt = issuedAt + this.#config.executionTtlSeconds;\n    const executionAssertion = await this.#signExecutionAssertion(\n      authority,\n      issuedAt,\n      executionExpiresAt,\n    );\n\n    const mcp = authority.mcp && this.#config.mcp\n      ? await this.#issueMcpCapability(\n        { ...authority, mcp: authority.mcp },\n        issuedAt,\n      )\n      : undefined;\n\n    return new ProtectedIssuedExecutionAuthority(\n      executionAssertion,\n      mcp?.assertion,\n      freezeIssuedMetadata({\n        scope: {\n          adopterId: this.#config.adopterId,\n          ...authority.scope,\n        },\n        runtimeSessionId: authority.runtimeSessionId,\n        invocationId: authority.invocationId,\n        workflow: authority.workflow,\n        issuedAt: toIsoTimestamp(issuedAt),\n        executionExpiresAt: toIsoTimestamp(executionExpiresAt),\n        ...(mcp ? { mcp: mcp.metadata } : {}),\n      }),\n    );\n  }\n\n  publicJwks(): JSONWebKeySet {\n    return { keys: [{ ...this.#publicJwk }] };\n  }\n\n  #signExecutionAssertion(\n    input: z.infer<typeof ExecutionAuthorityIssueInputSchema>,\n    issuedAt: number,\n    expiresAt: number,\n  ): Promise<string> {\n    return new SignJWT({\n      contractVersion: EXECUTION_CONTRACT_VERSION,\n      adopterId: this.#config.adopterId,\n      tenantId: input.scope.tenantId,\n      productSessionId: input.scope.productSessionId,\n      runtimeSessionId: input.runtimeSessionId,\n      workflow: input.workflow,\n    })\n      .setProtectedHeader({\n        alg: SIGNING_ALGORITHM,\n        kid: this.#config.keyId,\n        typ: EXECUTION_ASSERTION_TYPE,\n      })\n      .setIssuer(this.#config.issuer)\n      .setAudience(this.#config.executionAudience)\n      .setSubject(input.scope.subjectId)\n      .setJti(input.invocationId)\n      .setIssuedAt(issuedAt)\n      .setExpirationTime(expiresAt)\n      .sign(this.#privateKey);\n  }\n\n  async #issueMcpCapability(\n    input: z.infer<typeof ExecutionAuthorityIssueInputSchema> & {\n      mcp: { allowedTools: string[] };\n    },\n    issuedAt: number,\n  ): Promise<{\n    assertion: string;\n    metadata: NonNullable<IssuedExecutionAuthorityMetadata['mcp']>;\n  }> {\n    const mcpConfig = this.#config.mcp!;\n    const capabilityId = OpaqueIdSchema.parse(this.#createCapabilityId());\n    if (capabilityId === input.invocationId) {\n      throw new Error(\n        'MCP capability identity must be distinct from the invocation identity.',\n      );\n    }\n    const expiresAt = issuedAt + mcpConfig.ttlSeconds;\n    const assertion = await new SignJWT({\n      contractVersion: EXECUTION_CONTRACT_VERSION,\n      adopterId: this.#config.adopterId,\n      tenantId: input.scope.tenantId,\n      productSessionId: input.scope.productSessionId,\n      runtimeSessionId: input.runtimeSessionId,\n      invocationId: input.invocationId,\n      workflow: input.workflow,\n      serverId: mcpConfig.serverId,\n      allowedTools: [...input.mcp.allowedTools],\n    })\n      .setProtectedHeader({\n        alg: SIGNING_ALGORITHM,\n        kid: this.#config.keyId,\n        typ: MCP_CAPABILITY_TYPE,\n      })\n      .setIssuer(this.#config.issuer)\n      .setAudience(mcpConfig.audience)\n      .setSubject(input.scope.subjectId)\n      .setJti(capabilityId)\n      .setIssuedAt(issuedAt)\n      .setExpirationTime(expiresAt)\n      .sign(this.#privateKey);\n\n    return {\n      assertion,\n      metadata: {\n        capabilityId,\n        serverId: mcpConfig.serverId,\n        allowedTools: Object.freeze([...input.mcp.allowedTools]),\n        expiresAt: toIsoTimestamp(expiresAt),\n      },\n    };\n  }\n}\n\nclass ProtectedIssuedExecutionAuthority implements IssuedExecutionAuthority {\n  readonly metadata: IssuedExecutionAuthorityMetadata;\n  readonly #executionAssertion: string;\n  readonly #mcpCapability: string | undefined;\n\n  constructor(\n    executionAssertion: string,\n    mcpCapability: string | undefined,\n    metadata: IssuedExecutionAuthorityMetadata,\n  ) {\n    this.#executionAssertion = executionAssertion;\n    this.#mcpCapability = mcpCapability;\n    this.metadata = metadata;\n  }\n\n  executionAssertion(): string {\n    return this.#executionAssertion;\n  }\n\n  mcpCapability(): string | undefined {\n    return this.#mcpCapability;\n  }\n\n  toJSON(): IssuedExecutionAuthorityMetadata {\n    return this.metadata;\n  }\n}\n\nfunction projectPublicJwk(jwk: JWK, keyId: string): Readonly<JWK> {\n  const parsed = PublicP256JwkSchema.parse(jwk);\n  return Object.freeze({\n    kty: parsed.kty,\n    crv: parsed.crv,\n    x: parsed.x,\n    y: parsed.y,\n    alg: SIGNING_ALGORITHM,\n    kid: keyId,\n    use: 'sig',\n  });\n}\n\nfunction assertPrivateSigningKey(key: CryptoKey): void {\n  const algorithm = key.algorithm as { name: string; namedCurve?: string };\n  const accepted = key.type === 'private'\n    && algorithm.name === 'ECDSA'\n    && algorithm.namedCurve === 'P-256'\n    && key.usages.includes('sign');\n  if (!accepted) {\n    throw new Error(\n      'Execution authority requires an ES256 private signing key.',\n    );\n  }\n}\n\nfunction assertPublicVerificationKey(key: CryptoKey): void {\n  const algorithm = key.algorithm as { name: string; namedCurve?: string };\n  const accepted = key.type === 'public'\n    && algorithm.name === 'ECDSA'\n    && algorithm.namedCurve === 'P-256'\n    && key.usages.includes('verify');\n  if (!accepted) {\n    throw new Error(\n      'Execution authority requires an ES256 public verification key.',\n    );\n  }\n}\n\nasync function assertMatchingKeyPair(\n  keyPair: ExecutionAuthorityKeyPair,\n): Promise<void> {\n  try {\n    const probe = await new CompactSign(\n      new TextEncoder().encode('heddle-adopter-execution-authority-key-pair'),\n    )\n      .setProtectedHeader({ alg: SIGNING_ALGORITHM })\n      .sign(keyPair.privateKey);\n    await compactVerify(probe, keyPair.publicKey, {\n      algorithms: [SIGNING_ALGORITHM],\n    });\n  } catch {\n    throw new Error('Execution authority signing keys do not match.');\n  }\n}\n\nfunction toEpochSeconds(value: Date): number {\n  const seconds = Math.floor(value.getTime() / 1_000);\n  if (!Number.isSafeInteger(seconds) || seconds < 0) {\n    throw new Error('Execution authority could not resolve a valid issue time.');\n  }\n  return seconds;\n}\n\nfunction toIsoTimestamp(epochSeconds: number): string {\n  return new Date(epochSeconds * 1_000).toISOString();\n}\n\nfunction deepFreezeConfig(\n  config: z.infer<typeof ExecutionAuthorityConfigSchema>,\n): z.infer<typeof ExecutionAuthorityConfigSchema> {\n  const mcp = config.mcp ? Object.freeze({ ...config.mcp }) : undefined;\n  return Object.freeze({ ...config, ...(mcp ? { mcp } : {}) });\n}\n\nfunction freezeIssuedMetadata(\n  metadata: IssuedExecutionAuthorityMetadata,\n): IssuedExecutionAuthorityMetadata {\n  const scope: ExecutionScope = Object.freeze({ ...metadata.scope });\n  const mcp = metadata.mcp\n    ? Object.freeze({\n      ...metadata.mcp,\n      allowedTools: Object.freeze([...metadata.mcp.allowedTools]),\n    })\n    : undefined;\n  return Object.freeze({ ...metadata, scope, ...(mcp ? { mcp } : {}) });\n}\n"]}