@heddleagent/execution-host-client 6.3.0 → 6.5.0

package/dist/coordinator/runtime-session.d.ts

@@ -0,0 +1,13 @@
+import { z } from 'zod';
+declare const ProductExecutionScopeSchema: z.ZodObject<{
+    tenantId: z.ZodString;
+    subjectId: z.ZodString;
+    productSessionId: z.ZodString;
+}, z.core.$strict>;
+/** Stable Runtime session identity derived only from product-owned scope. */
+export declare function createHostedRuntimeSessionId(rawInput: {
+    namespace: string;
+    scope: z.infer<typeof ProductExecutionScopeSchema>;
+}): string;
+export {};
+//# sourceMappingURL=runtime-session.d.ts.map

package/dist/coordinator/runtime-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-session.d.ts","sourceRoot":"","sources":["../../src/coordinator/runtime-session.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,QAAA,MAAM,2BAA2B;;;;kBAE/B,CAAC;AAOH,6EAA6E;AAC7E,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE;IACrD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;CACpD,GAAG,MAAM,CAYT"}

package/dist/coordinator/runtime-session.js

@@ -0,0 +1,23 @@
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+import { ExecutionScopeSchema, OpaqueIdSchema, RuntimeSessionIdSchema, } from '../contracts/index.js';
+const ProductExecutionScopeSchema = ExecutionScopeSchema.omit({
+    adopterId: true,
+});
+const HostedRuntimeSessionInputSchema = z.object({
+    namespace: OpaqueIdSchema,
+    scope: ProductExecutionScopeSchema,
+}).strict();
+/** Stable Runtime session identity derived only from product-owned scope. */
+export function createHostedRuntimeSessionId(rawInput) {
+    const input = HostedRuntimeSessionInputSchema.parse(rawInput);
+    const digest = createHash('sha256')
+        .update(JSON.stringify([
+        input.scope.tenantId,
+        input.scope.subjectId,
+        input.scope.productSessionId,
+    ]))
+        .digest('hex');
+    return RuntimeSessionIdSchema.parse(`${input.namespace}-runtime-session-${digest}`);
+}
+//# sourceMappingURL=runtime-session.js.map

package/dist/coordinator/runtime-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-session.js","sourceRoot":"","sources":["../../src/coordinator/runtime-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,2BAA2B,GAAG,oBAAoB,CAAC,IAAI,CAAC;IAC5D,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC;AAEH,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,cAAc;IACzB,KAAK,EAAE,2BAA2B;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,6EAA6E;AAC7E,MAAM,UAAU,4BAA4B,CAAC,QAG5C;IACC,MAAM,KAAK,GAAG,+BAA+B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC;SAChC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACrB,KAAK,CAAC,KAAK,CAAC,QAAQ;QACpB,KAAK,CAAC,KAAK,CAAC,SAAS;QACrB,KAAK,CAAC,KAAK,CAAC,gBAAgB;KAC7B,CAAC,CAAC;SACF,MAAM,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,sBAAsB,CAAC,KAAK,CACjC,GAAG,KAAK,CAAC,SAAS,oBAAoB,MAAM,EAAE,CAC/C,CAAC;AACJ,CAAC","sourcesContent":["import { createHash } from 'node:crypto';\nimport { z } from 'zod';\nimport {\n  ExecutionScopeSchema,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n} from '../contracts/index.js';\n\nconst ProductExecutionScopeSchema = ExecutionScopeSchema.omit({\n  adopterId: true,\n});\n\nconst HostedRuntimeSessionInputSchema = z.object({\n  namespace: OpaqueIdSchema,\n  scope: ProductExecutionScopeSchema,\n}).strict();\n\n/** Stable Runtime session identity derived only from product-owned scope. */\nexport function createHostedRuntimeSessionId(rawInput: {\n  namespace: string;\n  scope: z.infer<typeof ProductExecutionScopeSchema>;\n}): string {\n  const input = HostedRuntimeSessionInputSchema.parse(rawInput);\n  const digest = createHash('sha256')\n    .update(JSON.stringify([\n      input.scope.tenantId,\n      input.scope.subjectId,\n      input.scope.productSessionId,\n    ]))\n    .digest('hex');\n  return RuntimeSessionIdSchema.parse(\n    `${input.namespace}-runtime-session-${digest}`,\n  );\n}\n"]}

package/dist/coordinator/service-token.d.ts

@@ -0,0 +1,3 @@
+import { z } from 'zod';
+export declare const HostedHeartbeatServiceTokenSchema: z.ZodString;
+//# sourceMappingURL=service-token.d.ts.map

package/dist/coordinator/service-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-token.d.ts","sourceRoot":"","sources":["../../src/coordinator/service-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,iCAAiC,aAIjC,CAAC"}

package/dist/coordinator/service-token.js

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+export const HostedHeartbeatServiceTokenSchema = z
+    .string()
+    .trim()
+    .min(32)
+    .max(4_096);
+//# sourceMappingURL=service-token.js.map

package/dist/coordinator/service-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-token.js","sourceRoot":"","sources":["../../src/coordinator/service-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC;KAC/C,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,EAAE,CAAC;KACP,GAAG,CAAC,KAAK,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\nexport const HostedHeartbeatServiceTokenSchema = z\n  .string()\n  .trim()\n  .min(32)\n  .max(4_096);\n"]}

package/dist/coordinator/types.d.ts

@@ -0,0 +1,63 @@
+import type { ExecutionAuthorityIssuer } from '../authority/index.js';
+import type { HostedModelCredentialProvider } from '../conversation/index.js';
+import type { HostedHeartbeatAgentExecutionTransportInput } from '../heartbeat/index.js';
+import type { HeartbeatExecutionHost } from '../http-sse/index.js';
+import type { HostedHeartbeatCoordinatorTaskInput, HostedHeartbeatCoordinatorTaskSummary, HostedHeartbeatDelegation, HostedHeartbeatDelegationAuthorization, HostedHeartbeatDelegationRequest, HostedHeartbeatDesiredTask } from './contracts.js';
+export type HostedHeartbeatCoordinatorClientConfig = {
+    baseUrl: URL;
+    apiToken: string;
+    fetch?: typeof globalThis.fetch;
+};
+export interface HostedHeartbeatCoordinatorTaskApi {
+    listTasks(signal?: AbortSignal): Promise<HostedHeartbeatCoordinatorTaskSummary[]>;
+    upsertTask(taskId: string, task: HostedHeartbeatCoordinatorTaskInput, signal?: AbortSignal): Promise<void>;
+    deleteTask(taskId: string, signal?: AbortSignal): Promise<void>;
+    pause(signal?: AbortSignal): Promise<void>;
+    resume(signal?: AbortSignal): Promise<void>;
+}
+export type HostedHeartbeatTaskReconciliationInput = {
+    desiredTasks: readonly HostedHeartbeatDesiredTask[];
+    resume: boolean;
+    signal?: AbortSignal;
+};
+export type HostedHeartbeatTaskReconciliation = {
+    deleted: number;
+    upserted: number;
+    resumed: boolean;
+};
+export type HostedHeartbeatTaskReconcilerConfig = {
+    coordinator: HostedHeartbeatCoordinatorTaskApi;
+};
+export type HostedHeartbeatDelegationAuthorizationInput = {
+    taskId: string;
+    executionId: string;
+    signal: AbortSignal;
+};
+export interface HostedHeartbeatDelegationAuthorizer {
+    authorize(input: HostedHeartbeatDelegationAuthorizationInput): HostedHeartbeatDelegationAuthorization | undefined | Promise<HostedHeartbeatDelegationAuthorization | undefined>;
+}
+export type HostedHeartbeatDelegationServiceConfig = {
+    authority: ExecutionAuthorityIssuer;
+    authorizer: HostedHeartbeatDelegationAuthorizer;
+    runtimeSessionNamespace: string;
+    maxExecutionMs: number;
+    now?: () => Date;
+};
+export interface HostedHeartbeatDelegationIssuer {
+    issue(input: HostedHeartbeatDelegationRequest, signal?: AbortSignal): Promise<HostedHeartbeatDelegation>;
+}
+export type HostedHeartbeatDelegationClientConfig = {
+    baseUrl: URL;
+    apiToken: string;
+    fetch?: typeof globalThis.fetch;
+    path?: string;
+};
+export type HostedHeartbeatDelegatedExecutionTransportConfig = {
+    delegations: HostedHeartbeatDelegationIssuer;
+    executionHost: HeartbeatExecutionHost;
+    modelCredentials: HostedModelCredentialProvider;
+};
+export interface HostedHeartbeatDelegatedExecutionTransportPort {
+    execute(input: HostedHeartbeatAgentExecutionTransportInput): Promise<unknown>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/coordinator/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/coordinator/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,6BAA6B,EAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACV,2CAA2C,EAC5C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EACV,mCAAmC,EACnC,qCAAqC,EACrC,yBAAyB,EACzB,sCAAsC,EACtC,gCAAgC,EAChC,0BAA0B,EAC3B,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,sCAAsC,GAAG;IACnD,OAAO,EAAE,GAAG,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC,CAAC;AAEF,MAAM,WAAW,iCAAiC;IAChD,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CACtC,qCAAqC,EAAE,CACxC,CAAC;IACF,UAAU,CACR,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,mCAAmC,EACzC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,MAAM,MAAM,sCAAsC,GAAG;IACnD,YAAY,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACpD,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAChD,WAAW,EAAE,iCAAiC,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACrB,CAAC;AAEF,MAAM,WAAW,mCAAmC;IAClD,SAAS,CACP,KAAK,EAAE,2CAA2C,GACjD,sCAAsC,GACrC,SAAS,GACT,OAAO,CAAC,sCAAsC,GAAG,SAAS,CAAC,CAAC;CACjE;AAED,MAAM,MAAM,sCAAsC,GAAG;IACnD,SAAS,EAAE,wBAAwB,CAAC;IACpC,UAAU,EAAE,mCAAmC,CAAC;IAChD,uBAAuB,EAAE,MAAM,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,WAAW,+BAA+B;IAC9C,KAAK,CACH,KAAK,EAAE,gCAAgC,EACvC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,qCAAqC,GAAG;IAClD,OAAO,EAAE,GAAG,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,gDAAgD,GAAG;IAC7D,WAAW,EAAE,+BAA+B,CAAC;IAC7C,aAAa,EAAE,sBAAsB,CAAC;IACtC,gBAAgB,EAAE,6BAA6B,CAAC;CACjD,CAAC;AAEF,MAAM,WAAW,8CAA8C;IAC7D,OAAO,CACL,KAAK,EAAE,2CAA2C,GACjD,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB"}

package/dist/coordinator/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/coordinator/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/coordinator/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionAuthorityIssuer,\n} from '../authority/index.js';\nimport type {\n  HostedModelCredentialProvider,\n} from '../conversation/index.js';\nimport type {\n  HostedHeartbeatAgentExecutionTransportInput,\n} from '../heartbeat/index.js';\nimport type { HeartbeatExecutionHost } from '../http-sse/index.js';\nimport type {\n  HostedHeartbeatCoordinatorTaskInput,\n  HostedHeartbeatCoordinatorTaskSummary,\n  HostedHeartbeatDelegation,\n  HostedHeartbeatDelegationAuthorization,\n  HostedHeartbeatDelegationRequest,\n  HostedHeartbeatDesiredTask,\n} from './contracts.js';\n\nexport type HostedHeartbeatCoordinatorClientConfig = {\n  baseUrl: URL;\n  apiToken: string;\n  fetch?: typeof globalThis.fetch;\n};\n\nexport interface HostedHeartbeatCoordinatorTaskApi {\n  listTasks(signal?: AbortSignal): Promise<\n    HostedHeartbeatCoordinatorTaskSummary[]\n  >;\n  upsertTask(\n    taskId: string,\n    task: HostedHeartbeatCoordinatorTaskInput,\n    signal?: AbortSignal,\n  ): Promise<void>;\n  deleteTask(taskId: string, signal?: AbortSignal): Promise<void>;\n  pause(signal?: AbortSignal): Promise<void>;\n  resume(signal?: AbortSignal): Promise<void>;\n}\n\nexport type HostedHeartbeatTaskReconciliationInput = {\n  desiredTasks: readonly HostedHeartbeatDesiredTask[];\n  resume: boolean;\n  signal?: AbortSignal;\n};\n\nexport type HostedHeartbeatTaskReconciliation = {\n  deleted: number;\n  upserted: number;\n  resumed: boolean;\n};\n\nexport type HostedHeartbeatTaskReconcilerConfig = {\n  coordinator: HostedHeartbeatCoordinatorTaskApi;\n};\n\nexport type HostedHeartbeatDelegationAuthorizationInput = {\n  taskId: string;\n  executionId: string;\n  signal: AbortSignal;\n};\n\nexport interface HostedHeartbeatDelegationAuthorizer {\n  authorize(\n    input: HostedHeartbeatDelegationAuthorizationInput,\n  ): HostedHeartbeatDelegationAuthorization\n    | undefined\n    | Promise<HostedHeartbeatDelegationAuthorization | undefined>;\n}\n\nexport type HostedHeartbeatDelegationServiceConfig = {\n  authority: ExecutionAuthorityIssuer;\n  authorizer: HostedHeartbeatDelegationAuthorizer;\n  runtimeSessionNamespace: string;\n  maxExecutionMs: number;\n  now?: () => Date;\n};\n\nexport interface HostedHeartbeatDelegationIssuer {\n  issue(\n    input: HostedHeartbeatDelegationRequest,\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatDelegation>;\n}\n\nexport type HostedHeartbeatDelegationClientConfig = {\n  baseUrl: URL;\n  apiToken: string;\n  fetch?: typeof globalThis.fetch;\n  path?: string;\n};\n\nexport type HostedHeartbeatDelegatedExecutionTransportConfig = {\n  delegations: HostedHeartbeatDelegationIssuer;\n  executionHost: HeartbeatExecutionHost;\n  modelCredentials: HostedModelCredentialProvider;\n};\n\nexport interface HostedHeartbeatDelegatedExecutionTransportPort {\n  execute(\n    input: HostedHeartbeatAgentExecutionTransportInput,\n  ): Promise<unknown>;\n}\n"]}

package/dist/host/errors.d.ts

@@ -0,0 +1,23 @@
+import type { JwtVerificationUnavailableCategory } from '../internal/jwt-verification.js';
+export declare class ExecutionIdentityVerificationError extends Error {
+    readonly name = "ExecutionIdentityVerificationError";
+    constructor(options?: ErrorOptions);
+}
+export declare class ExecutionIdentityUnavailableError extends Error {
+    readonly category: JwtVerificationUnavailableCategory;
+    readonly name = "ExecutionIdentityUnavailableError";
+    constructor(category: JwtVerificationUnavailableCategory, options?: ErrorOptions);
+}
+export declare class ExecutionHostMcpCapabilityVerificationError extends Error {
+    readonly name = "ExecutionHostMcpCapabilityVerificationError";
+    constructor(options?: ErrorOptions);
+}
+export declare class ExecutionHostMcpCapabilityUnavailableError extends Error {
+    readonly category: JwtVerificationUnavailableCategory;
+    readonly name = "ExecutionHostMcpCapabilityUnavailableError";
+    constructor(category: JwtVerificationUnavailableCategory, options?: ErrorOptions);
+}
+export declare class UnexpectedExecutionHostMcpCapabilityError extends Error {
+    readonly name = "UnexpectedExecutionHostMcpCapabilityError";
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/host/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/host/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AAE1F,qBAAa,kCAAmC,SAAQ,KAAK;IAC3D,QAAQ,CAAC,IAAI,wCAAwC;gBAEzC,OAAO,CAAC,EAAE,YAAY;CAGnC;AAED,qBAAa,iCAAkC,SAAQ,KAAK;IAIxD,QAAQ,CAAC,QAAQ,EAAE,kCAAkC;IAHvD,QAAQ,CAAC,IAAI,uCAAuC;gBAGzC,QAAQ,EAAE,kCAAkC,EACrD,OAAO,CAAC,EAAE,YAAY;CAIzB;AAED,qBAAa,2CAA4C,SAAQ,KAAK;IACpE,QAAQ,CAAC,IAAI,iDAAiD;gBAElD,OAAO,CAAC,EAAE,YAAY;CAGnC;AAED,qBAAa,0CAA2C,SAAQ,KAAK;IAIjE,QAAQ,CAAC,QAAQ,EAAE,kCAAkC;IAHvD,QAAQ,CAAC,IAAI,gDAAgD;gBAGlD,QAAQ,EAAE,kCAAkC,EACrD,OAAO,CAAC,EAAE,YAAY;CAIzB;AAED,qBAAa,yCAA0C,SAAQ,KAAK;IAClE,QAAQ,CAAC,IAAI,+CAA+C;CAC7D"}

package/dist/host/errors.js

@@ -0,0 +1,32 @@
+export class ExecutionIdentityVerificationError extends Error {
+    name = 'ExecutionIdentityVerificationError';
+    constructor(options) {
+        super('Execution identity verification failed.', options);
+    }
+}
+export class ExecutionIdentityUnavailableError extends Error {
+    category;
+    name = 'ExecutionIdentityUnavailableError';
+    constructor(category, options) {
+        super('Execution identity verification is temporarily unavailable.', options);
+        this.category = category;
+    }
+}
+export class ExecutionHostMcpCapabilityVerificationError extends Error {
+    name = 'ExecutionHostMcpCapabilityVerificationError';
+    constructor(options) {
+        super('MCP capability verification failed.', options);
+    }
+}
+export class ExecutionHostMcpCapabilityUnavailableError extends Error {
+    category;
+    name = 'ExecutionHostMcpCapabilityUnavailableError';
+    constructor(category, options) {
+        super('MCP capability verification is temporarily unavailable.', options);
+        this.category = category;
+    }
+}
+export class UnexpectedExecutionHostMcpCapabilityError extends Error {
+    name = 'UnexpectedExecutionHostMcpCapabilityError';
+}
+//# sourceMappingURL=errors.js.map

package/dist/host/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/host/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAClD,IAAI,GAAG,oCAAoC,CAAC;IAErD,YAAY,OAAsB;QAChC,KAAK,CAAC,yCAAyC,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAI/C;IAHF,IAAI,GAAG,mCAAmC,CAAC;IAEpD,YACW,QAA4C,EACrD,OAAsB;QAEtB,KAAK,CAAC,6DAA6D,EAAE,OAAO,CAAC,CAAC;QAHrE,aAAQ,GAAR,QAAQ,CAAoC;IAIvD,CAAC;CACF;AAED,MAAM,OAAO,2CAA4C,SAAQ,KAAK;IAC3D,IAAI,GAAG,6CAA6C,CAAC;IAE9D,YAAY,OAAsB;QAChC,KAAK,CAAC,qCAAqC,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;CACF;AAED,MAAM,OAAO,0CAA2C,SAAQ,KAAK;IAIxD;IAHF,IAAI,GAAG,4CAA4C,CAAC;IAE7D,YACW,QAA4C,EACrD,OAAsB;QAEtB,KAAK,CAAC,yDAAyD,EAAE,OAAO,CAAC,CAAC;QAHjE,aAAQ,GAAR,QAAQ,CAAoC;IAIvD,CAAC;CACF;AAED,MAAM,OAAO,yCAA0C,SAAQ,KAAK;IACzD,IAAI,GAAG,2CAA2C,CAAC;CAC7D","sourcesContent":["import type { JwtVerificationUnavailableCategory } from '../internal/jwt-verification.js';\n\nexport class ExecutionIdentityVerificationError extends Error {\n  readonly name = 'ExecutionIdentityVerificationError';\n\n  constructor(options?: ErrorOptions) {\n    super('Execution identity verification failed.', options);\n  }\n}\n\nexport class ExecutionIdentityUnavailableError extends Error {\n  readonly name = 'ExecutionIdentityUnavailableError';\n\n  constructor(\n    readonly category: JwtVerificationUnavailableCategory,\n    options?: ErrorOptions,\n  ) {\n    super('Execution identity verification is temporarily unavailable.', options);\n  }\n}\n\nexport class ExecutionHostMcpCapabilityVerificationError extends Error {\n  readonly name = 'ExecutionHostMcpCapabilityVerificationError';\n\n  constructor(options?: ErrorOptions) {\n    super('MCP capability verification failed.', options);\n  }\n}\n\nexport class ExecutionHostMcpCapabilityUnavailableError extends Error {\n  readonly name = 'ExecutionHostMcpCapabilityUnavailableError';\n\n  constructor(\n    readonly category: JwtVerificationUnavailableCategory,\n    options?: ErrorOptions,\n  ) {\n    super('MCP capability verification is temporarily unavailable.', options);\n  }\n}\n\nexport class UnexpectedExecutionHostMcpCapabilityError extends Error {\n  readonly name = 'UnexpectedExecutionHostMcpCapabilityError';\n}\n"]}

package/dist/host/index.d.ts

@@ -0,0 +1,7 @@
+export { ExecutionHostMcpCapabilityUnavailableError, ExecutionHostMcpCapabilityVerificationError, ExecutionIdentityUnavailableError, ExecutionIdentityVerificationError, UnexpectedExecutionHostMcpCapabilityError, } from './errors.js';
+export { JwtExecutionIdentityVerifier } from './jwt-execution-identity-verifier.js';
+export { JwtExecutionHostMcpCapabilityVerifier } from './jwt-execution-host-mcp-capability-verifier.js';
+export { ExecutionHostJwtAlgorithmsSchema, JwtExecutionHostMcpCapabilityVerifierConfigSchema, JwtExecutionIdentityVerifierConfigSchema, } from './schemas.js';
+export { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS, } from './types.js';
+export type { ExecutionHostJwtAlgorithm, ExecutionHostJwtVerifierOptions, ExecutionHostMcpCapabilityVerificationRequest, ExecutionHostMcpCapabilityVerifier, ExecutionIdentityVerificationRequest, ExecutionIdentityVerifier, JwtExecutionHostMcpCapabilityVerifierConfig, JwtExecutionIdentityVerifierConfig, VerifiedExecutionHostMcpCapability, VerifiedExecutionIdentity, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/host/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,iCAAiC,EACjC,kCAAkC,EAClC,yCAAyC,GAC1C,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,qCAAqC,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EACL,gCAAgC,EAChC,iDAAiD,EACjD,wCAAwC,GACzC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uCAAuC,GACxC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,6CAA6C,EAC7C,kCAAkC,EAClC,oCAAoC,EACpC,yBAAyB,EACzB,2CAA2C,EAC3C,kCAAkC,EAClC,kCAAkC,EAClC,yBAAyB,GAC1B,MAAM,YAAY,CAAC"}

package/dist/host/index.js

@@ -0,0 +1,6 @@
+export { ExecutionHostMcpCapabilityUnavailableError, ExecutionHostMcpCapabilityVerificationError, ExecutionIdentityUnavailableError, ExecutionIdentityVerificationError, UnexpectedExecutionHostMcpCapabilityError, } from './errors.js';
+export { JwtExecutionIdentityVerifier } from './jwt-execution-identity-verifier.js';
+export { JwtExecutionHostMcpCapabilityVerifier } from './jwt-execution-host-mcp-capability-verifier.js';
+export { ExecutionHostJwtAlgorithmsSchema, JwtExecutionHostMcpCapabilityVerifierConfigSchema, JwtExecutionIdentityVerifierConfigSchema, } from './schemas.js';
+export { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS, } from './types.js';
+//# sourceMappingURL=index.js.map

package/dist/host/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,iCAAiC,EACjC,kCAAkC,EAClC,yCAAyC,GAC1C,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,qCAAqC,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EACL,gCAAgC,EAChC,iDAAiD,EACjD,wCAAwC,GACzC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uCAAuC,GACxC,MAAM,YAAY,CAAC","sourcesContent":["export {\n  ExecutionHostMcpCapabilityUnavailableError,\n  ExecutionHostMcpCapabilityVerificationError,\n  ExecutionIdentityUnavailableError,\n  ExecutionIdentityVerificationError,\n  UnexpectedExecutionHostMcpCapabilityError,\n} from './errors.js';\nexport { JwtExecutionIdentityVerifier } from './jwt-execution-identity-verifier.js';\nexport { JwtExecutionHostMcpCapabilityVerifier } from './jwt-execution-host-mcp-capability-verifier.js';\nexport {\n  ExecutionHostJwtAlgorithmsSchema,\n  JwtExecutionHostMcpCapabilityVerifierConfigSchema,\n  JwtExecutionIdentityVerifierConfigSchema,\n} from './schemas.js';\nexport {\n  EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS,\n} from './types.js';\nexport type {\n  ExecutionHostJwtAlgorithm,\n  ExecutionHostJwtVerifierOptions,\n  ExecutionHostMcpCapabilityVerificationRequest,\n  ExecutionHostMcpCapabilityVerifier,\n  ExecutionIdentityVerificationRequest,\n  ExecutionIdentityVerifier,\n  JwtExecutionHostMcpCapabilityVerifierConfig,\n  JwtExecutionIdentityVerifierConfig,\n  VerifiedExecutionHostMcpCapability,\n  VerifiedExecutionIdentity,\n} from './types.js';\n"]}

package/dist/host/jwt-execution-host-mcp-capability-verifier.d.ts

@@ -0,0 +1,8 @@
+import type { ExecutionHostJwtVerifierOptions, ExecutionHostMcpCapabilityVerificationRequest, ExecutionHostMcpCapabilityVerifier, JwtExecutionHostMcpCapabilityVerifierConfig, VerifiedExecutionHostMcpCapability } from './types.js';
+/** Verifies MCP authority against an independently verified host invocation. */
+export declare class JwtExecutionHostMcpCapabilityVerifier implements ExecutionHostMcpCapabilityVerifier {
+    #private;
+    constructor(config: JwtExecutionHostMcpCapabilityVerifierConfig, options?: ExecutionHostJwtVerifierOptions);
+    verify(rawRequest: ExecutionHostMcpCapabilityVerificationRequest): Promise<VerifiedExecutionHostMcpCapability>;
+}
+//# sourceMappingURL=jwt-execution-host-mcp-capability-verifier.d.ts.map

package/dist/host/jwt-execution-host-mcp-capability-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-execution-host-mcp-capability-verifier.d.ts","sourceRoot":"","sources":["../../src/host/jwt-execution-host-mcp-capability-verifier.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,+BAA+B,EAC/B,6CAA6C,EAC7C,kCAAkC,EAClC,2CAA2C,EAC3C,kCAAkC,EACnC,MAAM,YAAY,CAAC;AAOpB,gFAAgF;AAChF,qBAAa,qCACb,YAAW,kCAAkC;;gBAMzC,MAAM,EAAE,2CAA2C,EACnD,OAAO,GAAE,+BAAoC;IAczC,MAAM,CACV,UAAU,EAAE,6CAA6C,GACxD,OAAO,CAAC,kCAAkC,CAAC;CAkF/C"}

package/dist/host/jwt-execution-host-mcp-capability-verifier.js

@@ -0,0 +1,86 @@
+import { jwtVerify } from 'jose';
+import { z } from 'zod';
+import { MCP_CAPABILITY_TYPE, McpCapabilityClaimsSchema, } from '../contracts/index.js';
+import { createJwtKeyResolver, resolveJwtVerificationUnavailableCategory, } from '../internal/jwt-verification.js';
+import { ExecutionHostMcpCapabilityUnavailableError, ExecutionHostMcpCapabilityVerificationError, } from './errors.js';
+import { JwtExecutionHostMcpCapabilityVerifierConfigSchema } from './schemas.js';
+const AssertionSchema = z.string().trim().min(32).max(4_096);
+/** Verifies MCP authority against an independently verified host invocation. */
+export class JwtExecutionHostMcpCapabilityVerifier {
+    #config;
+    #keyResolver;
+    #now;
+    constructor(config, options = {}) {
+        const parsed = JwtExecutionHostMcpCapabilityVerifierConfigSchema.parse(config);
+        this.#config = Object.freeze({
+            ...parsed,
+            jwksUrl: new URL(parsed.jwksUrl),
+        });
+        this.#keyResolver = options.keyResolver
+            ?? createJwtKeyResolver(this.#config.jwksUrl);
+        this.#now = options.now ?? (() => new Date());
+    }
+    async verify(rawRequest) {
+        try {
+            const request = Object.freeze({
+                ...rawRequest,
+                assertion: AssertionSchema.parse(rawRequest.assertion),
+            });
+            const { payload } = await jwtVerify(request.assertion, this.#keyResolver, {
+                algorithms: [...this.#config.jwtAlgorithms],
+                audience: this.#config.audience,
+                clockTolerance: this.#config.clockToleranceSeconds,
+                currentDate: this.#now(),
+                issuer: this.#config.issuer,
+                maxTokenAge: this.#config.maxCapabilityAgeSeconds,
+                requiredClaims: ['exp', 'iat', 'jti', 'sub'],
+                typ: MCP_CAPABILITY_TYPE,
+            });
+            const claims = McpCapabilityClaimsSchema.parse(payload);
+            this.#assertInvocationBinding(claims, request);
+            this.#assertBoundedLifetime(claims);
+            return Object.freeze({
+                assertion: request.assertion,
+                capabilityId: claims.jti,
+                serverId: claims.serverId,
+                allowedTools: Object.freeze([...claims.allowedTools]),
+                issuedAt: new Date(claims.iat * 1_000).toISOString(),
+                expiresAt: new Date(claims.exp * 1_000).toISOString(),
+            });
+        }
+        catch (error) {
+            if (error instanceof ExecutionHostMcpCapabilityVerificationError
+                || error instanceof ExecutionHostMcpCapabilityUnavailableError) {
+                throw error;
+            }
+            const category = resolveJwtVerificationUnavailableCategory(error);
+            if (category) {
+                throw new ExecutionHostMcpCapabilityUnavailableError(category, { cause: error });
+            }
+            throw new ExecutionHostMcpCapabilityVerificationError({ cause: error });
+        }
+    }
+    #assertInvocationBinding(claims, request) {
+        const { identity } = request;
+        if (claims.adopterId !== this.#config.trustedAdopterId
+            || claims.adopterId !== identity.scope.adopterId
+            || claims.tenantId !== identity.scope.tenantId
+            || claims.sub !== identity.scope.subjectId
+            || claims.productSessionId !== identity.scope.productSessionId
+            || claims.runtimeSessionId !== identity.runtimeSessionId
+            || claims.invocationId !== identity.invocationId
+            || claims.workflow !== identity.workflow
+            || claims.serverId !== this.#config.serverId
+            || claims.jti === identity.invocationId) {
+            throw new ExecutionHostMcpCapabilityVerificationError();
+        }
+    }
+    #assertBoundedLifetime(claims) {
+        const lifetimeSeconds = claims.exp - claims.iat;
+        if (lifetimeSeconds <= 0
+            || lifetimeSeconds > this.#config.maxCapabilityAgeSeconds) {
+            throw new ExecutionHostMcpCapabilityVerificationError();
+        }
+    }
+}
+//# sourceMappingURL=jwt-execution-host-mcp-capability-verifier.js.map

package/dist/host/jwt-execution-host-mcp-capability-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-execution-host-mcp-capability-verifier.js","sourceRoot":"","sources":["../../src/host/jwt-execution-host-mcp-capability-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,yCAAyC,GAC1C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,GAC5C,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iDAAiD,EAAE,MAAM,cAAc,CAAC;AASjF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAK7D,gFAAgF;AAChF,MAAM,OAAO,qCAAqC;IAEvC,OAAO,CAAyB;IAChC,YAAY,CAA8D;IAC1E,IAAI,CAAa;IAE1B,YACE,MAAmD,EACnD,UAA2C,EAAE;QAE7C,MAAM,MAAM,GAAG,iDAAiD,CAAC,KAAK,CACpE,MAAM,CACP,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,MAAM;YACT,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW;eAClC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,UAAyD;QAEzD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,GAAG,UAAU;gBACb,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CACjC,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,YAAY,EACjB;gBACE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;gBAC3C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAC/B,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB;gBAClD,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,uBAAuB;gBACjD,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBAC5C,GAAG,EAAE,mBAAmB;aACzB,CACF,CAAC;YACF,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAEpC,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,MAAM,CAAC,GAAG;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;gBACrD,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;gBACpD,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,2CAA2C;mBACzD,KAAK,YAAY,0CAA0C,EAC9D,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,yCAAyC,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,0CAA0C,CAClD,QAAQ,EACR,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,2CAA2C,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,wBAAwB,CACtB,MAAiD,EACjD,OAAsD;QAEtD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC7B,IACE,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB;eAC/C,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,KAAK,CAAC,SAAS;eAC7C,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,QAAQ;eAC3C,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,SAAS;eACvC,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,KAAK,CAAC,gBAAgB;eAC3D,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;eACrD,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;eAC7C,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;eACrC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ;eACzC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,YAAY,EACvC,CAAC;YACD,MAAM,IAAI,2CAA2C,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,sBAAsB,CACpB,MAAiD;QAEjD,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QAChD,IACE,eAAe,IAAI,CAAC;eACjB,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EACzD,CAAC;YACD,MAAM,IAAI,2CAA2C,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;CACF","sourcesContent":["import { jwtVerify } from 'jose';\nimport { z } from 'zod';\nimport {\n  MCP_CAPABILITY_TYPE,\n  McpCapabilityClaimsSchema,\n} from '../contracts/index.js';\nimport {\n  createJwtKeyResolver,\n  resolveJwtVerificationUnavailableCategory,\n} from '../internal/jwt-verification.js';\nimport {\n  ExecutionHostMcpCapabilityUnavailableError,\n  ExecutionHostMcpCapabilityVerificationError,\n} from './errors.js';\nimport { JwtExecutionHostMcpCapabilityVerifierConfigSchema } from './schemas.js';\nimport type {\n  ExecutionHostJwtVerifierOptions,\n  ExecutionHostMcpCapabilityVerificationRequest,\n  ExecutionHostMcpCapabilityVerifier,\n  JwtExecutionHostMcpCapabilityVerifierConfig,\n  VerifiedExecutionHostMcpCapability,\n} from './types.js';\n\nconst AssertionSchema = z.string().trim().min(32).max(4_096);\ntype ParsedConfig = z.infer<\n  typeof JwtExecutionHostMcpCapabilityVerifierConfigSchema\n>;\n\n/** Verifies MCP authority against an independently verified host invocation. */\nexport class JwtExecutionHostMcpCapabilityVerifier\nimplements ExecutionHostMcpCapabilityVerifier {\n  readonly #config: Readonly<ParsedConfig>;\n  readonly #keyResolver: NonNullable<ExecutionHostJwtVerifierOptions['keyResolver']>;\n  readonly #now: () => Date;\n\n  constructor(\n    config: JwtExecutionHostMcpCapabilityVerifierConfig,\n    options: ExecutionHostJwtVerifierOptions = {},\n  ) {\n    const parsed = JwtExecutionHostMcpCapabilityVerifierConfigSchema.parse(\n      config,\n    );\n    this.#config = Object.freeze({\n      ...parsed,\n      jwksUrl: new URL(parsed.jwksUrl),\n    });\n    this.#keyResolver = options.keyResolver\n      ?? createJwtKeyResolver(this.#config.jwksUrl);\n    this.#now = options.now ?? (() => new Date());\n  }\n\n  async verify(\n    rawRequest: ExecutionHostMcpCapabilityVerificationRequest,\n  ): Promise<VerifiedExecutionHostMcpCapability> {\n    try {\n      const request = Object.freeze({\n        ...rawRequest,\n        assertion: AssertionSchema.parse(rawRequest.assertion),\n      });\n      const { payload } = await jwtVerify(\n        request.assertion,\n        this.#keyResolver,\n        {\n          algorithms: [...this.#config.jwtAlgorithms],\n          audience: this.#config.audience,\n          clockTolerance: this.#config.clockToleranceSeconds,\n          currentDate: this.#now(),\n          issuer: this.#config.issuer,\n          maxTokenAge: this.#config.maxCapabilityAgeSeconds,\n          requiredClaims: ['exp', 'iat', 'jti', 'sub'],\n          typ: MCP_CAPABILITY_TYPE,\n        },\n      );\n      const claims = McpCapabilityClaimsSchema.parse(payload);\n      this.#assertInvocationBinding(claims, request);\n      this.#assertBoundedLifetime(claims);\n\n      return Object.freeze({\n        assertion: request.assertion,\n        capabilityId: claims.jti,\n        serverId: claims.serverId,\n        allowedTools: Object.freeze([...claims.allowedTools]),\n        issuedAt: new Date(claims.iat * 1_000).toISOString(),\n        expiresAt: new Date(claims.exp * 1_000).toISOString(),\n      });\n    } catch (error) {\n      if (\n        error instanceof ExecutionHostMcpCapabilityVerificationError\n        || error instanceof ExecutionHostMcpCapabilityUnavailableError\n      ) {\n        throw error;\n      }\n      const category = resolveJwtVerificationUnavailableCategory(error);\n      if (category) {\n        throw new ExecutionHostMcpCapabilityUnavailableError(\n          category,\n          { cause: error },\n        );\n      }\n      throw new ExecutionHostMcpCapabilityVerificationError({ cause: error });\n    }\n  }\n\n  #assertInvocationBinding(\n    claims: z.infer<typeof McpCapabilityClaimsSchema>,\n    request: ExecutionHostMcpCapabilityVerificationRequest,\n  ): void {\n    const { identity } = request;\n    if (\n      claims.adopterId !== this.#config.trustedAdopterId\n      || claims.adopterId !== identity.scope.adopterId\n      || claims.tenantId !== identity.scope.tenantId\n      || claims.sub !== identity.scope.subjectId\n      || claims.productSessionId !== identity.scope.productSessionId\n      || claims.runtimeSessionId !== identity.runtimeSessionId\n      || claims.invocationId !== identity.invocationId\n      || claims.workflow !== identity.workflow\n      || claims.serverId !== this.#config.serverId\n      || claims.jti === identity.invocationId\n    ) {\n      throw new ExecutionHostMcpCapabilityVerificationError();\n    }\n  }\n\n  #assertBoundedLifetime(\n    claims: z.infer<typeof McpCapabilityClaimsSchema>,\n  ): void {\n    const lifetimeSeconds = claims.exp - claims.iat;\n    if (\n      lifetimeSeconds <= 0\n      || lifetimeSeconds > this.#config.maxCapabilityAgeSeconds\n    ) {\n      throw new ExecutionHostMcpCapabilityVerificationError();\n    }\n  }\n}\n"]}

package/dist/host/jwt-execution-identity-verifier.d.ts

@@ -0,0 +1,8 @@
+import type { ExecutionIdentityVerificationRequest, ExecutionIdentityVerifier, ExecutionHostJwtVerifierOptions, JwtExecutionIdentityVerifierConfig, VerifiedExecutionIdentity } from './types.js';
+/** Verifies adopter authority and binds it to one exact host invocation. */
+export declare class JwtExecutionIdentityVerifier implements ExecutionIdentityVerifier {
+    #private;
+    constructor(config: JwtExecutionIdentityVerifierConfig, options?: ExecutionHostJwtVerifierOptions);
+    verify(rawRequest: ExecutionIdentityVerificationRequest): Promise<VerifiedExecutionIdentity>;
+}
+//# sourceMappingURL=jwt-execution-identity-verifier.d.ts.map

package/dist/host/jwt-execution-identity-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-execution-identity-verifier.d.ts","sourceRoot":"","sources":["../../src/host/jwt-execution-identity-verifier.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,oCAAoC,EACpC,yBAAyB,EACzB,+BAA+B,EAC/B,kCAAkC,EAClC,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AAKpB,4EAA4E;AAC5E,qBAAa,4BAA6B,YAAW,yBAAyB;;gBAM1E,MAAM,EAAE,kCAAkC,EAC1C,OAAO,GAAE,+BAAoC;IAYzC,MAAM,CACV,UAAU,EAAE,oCAAoC,GAC/C,OAAO,CAAC,yBAAyB,CAAC;CAgEtC"}

package/dist/host/jwt-execution-identity-verifier.js

@@ -0,0 +1,76 @@
+import { jwtVerify } from 'jose';
+import { z } from 'zod';
+import { EXECUTION_ASSERTION_TYPE, ExecutionAssertionClaimsSchema, } from '../contracts/index.js';
+import { createJwtKeyResolver, resolveJwtVerificationUnavailableCategory, } from '../internal/jwt-verification.js';
+import { ExecutionIdentityUnavailableError, ExecutionIdentityVerificationError, } from './errors.js';
+import { JwtExecutionIdentityVerifierConfigSchema } from './schemas.js';
+const AssertionSchema = z.string().trim().min(32).max(4_096);
+/** Verifies adopter authority and binds it to one exact host invocation. */
+export class JwtExecutionIdentityVerifier {
+    #config;
+    #keyResolver;
+    #now;
+    constructor(config, options = {}) {
+        const parsed = JwtExecutionIdentityVerifierConfigSchema.parse(config);
+        this.#config = Object.freeze({
+            ...parsed,
+            executionJwksUrl: new URL(parsed.executionJwksUrl),
+        });
+        this.#keyResolver = options.keyResolver
+            ?? createJwtKeyResolver(this.#config.executionJwksUrl);
+        this.#now = options.now ?? (() => new Date());
+    }
+    async verify(rawRequest) {
+        try {
+            const request = Object.freeze({
+                ...rawRequest,
+                assertion: AssertionSchema.parse(rawRequest.assertion),
+            });
+            const { payload } = await jwtVerify(request.assertion, this.#keyResolver, {
+                algorithms: [...this.#config.executionJwtAlgorithms],
+                audience: this.#config.executionAudience,
+                clockTolerance: this.#config.assertionClockToleranceSeconds,
+                currentDate: this.#now(),
+                issuer: this.#config.executionIssuer,
+                maxTokenAge: this.#config.maxAssertionAgeSeconds,
+                requiredClaims: ['exp', 'iat', 'jti', 'sub'],
+                typ: EXECUTION_ASSERTION_TYPE,
+            });
+            const claims = ExecutionAssertionClaimsSchema.parse(payload);
+            this.#assertRequestBinding(claims, request);
+            return Object.freeze({
+                scope: Object.freeze({
+                    adopterId: claims.adopterId,
+                    tenantId: claims.tenantId,
+                    subjectId: claims.sub,
+                    productSessionId: claims.productSessionId,
+                }),
+                runtimeSessionId: claims.runtimeSessionId,
+                invocationId: claims.jti,
+                workflow: claims.workflow,
+                issuedAt: new Date(claims.iat * 1_000).toISOString(),
+                expiresAt: new Date(claims.exp * 1_000).toISOString(),
+            });
+        }
+        catch (error) {
+            if (error instanceof ExecutionIdentityVerificationError
+                || error instanceof ExecutionIdentityUnavailableError) {
+                throw error;
+            }
+            const category = resolveJwtVerificationUnavailableCategory(error);
+            if (category) {
+                throw new ExecutionIdentityUnavailableError(category, { cause: error });
+            }
+            throw new ExecutionIdentityVerificationError({ cause: error });
+        }
+    }
+    #assertRequestBinding(claims, request) {
+        if (claims.adopterId !== this.#config.trustedAdopterId
+            || claims.runtimeSessionId !== request.runtimeSessionId
+            || claims.jti !== request.invocationId
+            || claims.workflow !== request.workflow) {
+            throw new ExecutionIdentityVerificationError();
+        }
+    }
+}
+//# sourceMappingURL=jwt-execution-identity-verifier.js.map

package/dist/host/jwt-execution-identity-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-execution-identity-verifier.js","sourceRoot":"","sources":["../../src/host/jwt-execution-identity-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,yCAAyC,GAC1C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AASxE,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAG7D,4EAA4E;AAC5E,MAAM,OAAO,4BAA4B;IAC9B,OAAO,CAAyB;IAChC,YAAY,CAA8D;IAC1E,IAAI,CAAa;IAE1B,YACE,MAA0C,EAC1C,UAA2C,EAAE;QAE7C,MAAM,MAAM,GAAG,wCAAwC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,MAAM;YACT,gBAAgB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW;eAClC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,UAAgD;QAEhD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,GAAG,UAAU;gBACb,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CACjC,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,YAAY,EACjB;gBACE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;gBACpD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;gBACxC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,8BAA8B;gBAC3D,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACpC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;gBAChD,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBAC5C,GAAG,EAAE,wBAAwB;aAC9B,CACF,CAAC;YACF,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAE5C,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,SAAS,EAAE,MAAM,CAAC,GAAG;oBACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,CAAC;gBACF,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,YAAY,EAAE,MAAM,CAAC,GAAG;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;gBACpD,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,kCAAkC;mBAChD,KAAK,YAAY,iCAAiC,EACrD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,yCAAyC,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAiC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,kCAAkC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,qBAAqB,CACnB,MAAsD,EACtD,OAA6C;QAE7C,IACE,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB;eAC/C,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB;eACpD,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,YAAY;eACnC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EACvC,CAAC;YACD,MAAM,IAAI,kCAAkC,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;CACF","sourcesContent":["import { jwtVerify } from 'jose';\nimport { z } from 'zod';\nimport {\n  EXECUTION_ASSERTION_TYPE,\n  ExecutionAssertionClaimsSchema,\n} from '../contracts/index.js';\nimport {\n  createJwtKeyResolver,\n  resolveJwtVerificationUnavailableCategory,\n} from '../internal/jwt-verification.js';\nimport {\n  ExecutionIdentityUnavailableError,\n  ExecutionIdentityVerificationError,\n} from './errors.js';\nimport { JwtExecutionIdentityVerifierConfigSchema } from './schemas.js';\nimport type {\n  ExecutionIdentityVerificationRequest,\n  ExecutionIdentityVerifier,\n  ExecutionHostJwtVerifierOptions,\n  JwtExecutionIdentityVerifierConfig,\n  VerifiedExecutionIdentity,\n} from './types.js';\n\nconst AssertionSchema = z.string().trim().min(32).max(4_096);\ntype ParsedConfig = z.infer<typeof JwtExecutionIdentityVerifierConfigSchema>;\n\n/** Verifies adopter authority and binds it to one exact host invocation. */\nexport class JwtExecutionIdentityVerifier implements ExecutionIdentityVerifier {\n  readonly #config: Readonly<ParsedConfig>;\n  readonly #keyResolver: NonNullable<ExecutionHostJwtVerifierOptions['keyResolver']>;\n  readonly #now: () => Date;\n\n  constructor(\n    config: JwtExecutionIdentityVerifierConfig,\n    options: ExecutionHostJwtVerifierOptions = {},\n  ) {\n    const parsed = JwtExecutionIdentityVerifierConfigSchema.parse(config);\n    this.#config = Object.freeze({\n      ...parsed,\n      executionJwksUrl: new URL(parsed.executionJwksUrl),\n    });\n    this.#keyResolver = options.keyResolver\n      ?? createJwtKeyResolver(this.#config.executionJwksUrl);\n    this.#now = options.now ?? (() => new Date());\n  }\n\n  async verify(\n    rawRequest: ExecutionIdentityVerificationRequest,\n  ): Promise<VerifiedExecutionIdentity> {\n    try {\n      const request = Object.freeze({\n        ...rawRequest,\n        assertion: AssertionSchema.parse(rawRequest.assertion),\n      });\n      const { payload } = await jwtVerify(\n        request.assertion,\n        this.#keyResolver,\n        {\n          algorithms: [...this.#config.executionJwtAlgorithms],\n          audience: this.#config.executionAudience,\n          clockTolerance: this.#config.assertionClockToleranceSeconds,\n          currentDate: this.#now(),\n          issuer: this.#config.executionIssuer,\n          maxTokenAge: this.#config.maxAssertionAgeSeconds,\n          requiredClaims: ['exp', 'iat', 'jti', 'sub'],\n          typ: EXECUTION_ASSERTION_TYPE,\n        },\n      );\n      const claims = ExecutionAssertionClaimsSchema.parse(payload);\n      this.#assertRequestBinding(claims, request);\n\n      return Object.freeze({\n        scope: Object.freeze({\n          adopterId: claims.adopterId,\n          tenantId: claims.tenantId,\n          subjectId: claims.sub,\n          productSessionId: claims.productSessionId,\n        }),\n        runtimeSessionId: claims.runtimeSessionId,\n        invocationId: claims.jti,\n        workflow: claims.workflow,\n        issuedAt: new Date(claims.iat * 1_000).toISOString(),\n        expiresAt: new Date(claims.exp * 1_000).toISOString(),\n      });\n    } catch (error) {\n      if (\n        error instanceof ExecutionIdentityVerificationError\n        || error instanceof ExecutionIdentityUnavailableError\n      ) {\n        throw error;\n      }\n      const category = resolveJwtVerificationUnavailableCategory(error);\n      if (category) {\n        throw new ExecutionIdentityUnavailableError(category, { cause: error });\n      }\n      throw new ExecutionIdentityVerificationError({ cause: error });\n    }\n  }\n\n  #assertRequestBinding(\n    claims: z.infer<typeof ExecutionAssertionClaimsSchema>,\n    request: ExecutionIdentityVerificationRequest,\n  ): void {\n    if (\n      claims.adopterId !== this.#config.trustedAdopterId\n      || claims.runtimeSessionId !== request.runtimeSessionId\n      || claims.jti !== request.invocationId\n      || claims.workflow !== request.workflow\n    ) {\n      throw new ExecutionIdentityVerificationError();\n    }\n  }\n}\n"]}

package/dist/host/schemas.d.ts

@@ -0,0 +1,37 @@
+import { z } from 'zod';
+export declare const ExecutionHostJwtAlgorithmsSchema: z.ZodPipe<z.ZodArray<z.ZodEnum<{
+    ES256: "ES256";
+    RS256: "RS256";
+    PS256: "PS256";
+    EdDSA: "EdDSA";
+}>>, z.ZodTransform<readonly ("ES256" | "RS256" | "PS256" | "EdDSA")[], ("ES256" | "RS256" | "PS256" | "EdDSA")[]>>;
+export declare const JwtExecutionIdentityVerifierConfigSchema: z.ZodObject<{
+    executionIssuer: z.ZodURL;
+    executionAudience: z.ZodString;
+    executionJwksUrl: z.ZodCustom<URL, URL>;
+    executionJwtAlgorithms: z.ZodPipe<z.ZodArray<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+        PS256: "PS256";
+        EdDSA: "EdDSA";
+    }>>, z.ZodTransform<readonly ("ES256" | "RS256" | "PS256" | "EdDSA")[], ("ES256" | "RS256" | "PS256" | "EdDSA")[]>>;
+    trustedAdopterId: z.ZodString;
+    maxAssertionAgeSeconds: z.ZodNumber;
+    assertionClockToleranceSeconds: z.ZodNumber;
+}, z.core.$strict>;
+export declare const JwtExecutionHostMcpCapabilityVerifierConfigSchema: z.ZodObject<{
+    issuer: z.ZodURL;
+    audience: z.ZodString;
+    jwksUrl: z.ZodCustom<URL, URL>;
+    jwtAlgorithms: z.ZodPipe<z.ZodArray<z.ZodEnum<{
+        ES256: "ES256";
+        RS256: "RS256";
+        PS256: "PS256";
+        EdDSA: "EdDSA";
+    }>>, z.ZodTransform<readonly ("ES256" | "RS256" | "PS256" | "EdDSA")[], ("ES256" | "RS256" | "PS256" | "EdDSA")[]>>;
+    trustedAdopterId: z.ZodString;
+    serverId: z.ZodString;
+    maxCapabilityAgeSeconds: z.ZodNumber;
+    clockToleranceSeconds: z.ZodNumber;
+}, z.core.$strict>;
+//# sourceMappingURL=schemas.d.ts.map

package/dist/host/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/host/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,gCAAgC;;;;;mHAI5C,CAAC;AAEF,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;kBAW1C,CAAC;AAEZ,eAAO,MAAM,iDAAiD;;;;;;;;;;;;;;kBAYnD,CAAC"}

package/dist/host/schemas.js

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+import { JwtAudienceSchema, JwtIssuerSchema, McpServerIdSchema, OpaqueIdSchema, isSafeWebUrl, } from '../contracts/index.js';
+import { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS } from './types.js';
+export const ExecutionHostJwtAlgorithmsSchema = z.array(z.enum(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS)).min(1).max(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS.length).transform((algorithms) => Object.freeze([...new Set(algorithms)]));
+export const JwtExecutionIdentityVerifierConfigSchema = z.object({
+    executionIssuer: JwtIssuerSchema,
+    executionAudience: JwtAudienceSchema,
+    executionJwksUrl: z.instanceof(URL).refine(isSafeWebUrl, 'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment'),
+    executionJwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,
+    trustedAdopterId: OpaqueIdSchema,
+    maxAssertionAgeSeconds: z.number().int().min(1).max(15 * 60),
+    assertionClockToleranceSeconds: z.number().int().min(0).max(60),
+}).strict();
+export const JwtExecutionHostMcpCapabilityVerifierConfigSchema = z.object({
+    issuer: JwtIssuerSchema,
+    audience: JwtAudienceSchema,
+    jwksUrl: z.instanceof(URL).refine(isSafeWebUrl, 'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment'),
+    jwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,
+    trustedAdopterId: OpaqueIdSchema,
+    serverId: McpServerIdSchema,
+    maxCapabilityAgeSeconds: z.number().int().min(1).max(15 * 60),
+    clockToleranceSeconds: z.number().int().min(0).max(60),
+}).strict();
+//# sourceMappingURL=schemas.js.map

package/dist/host/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/host/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACrD,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAChD,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uCAAuC,CAAC,MAAM,CAAC,CAAC,SAAS,CACpE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CACxD,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,eAAe,EAAE,eAAe;IAChC,iBAAiB,EAAE,iBAAiB;IACpC,gBAAgB,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CACxC,YAAY,EACZ,gFAAgF,CACjF;IACD,sBAAsB,EAAE,gCAAgC;IACxD,gBAAgB,EAAE,cAAc;IAChC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC5D,8BAA8B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAC/B,YAAY,EACZ,gFAAgF,CACjF;IACD,aAAa,EAAE,gCAAgC;IAC/C,gBAAgB,EAAE,cAAc;IAChC,QAAQ,EAAE,iBAAiB;IAC3B,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC7D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  isSafeWebUrl,\n} from '../contracts/index.js';\nimport { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS } from './types.js';\n\nexport const ExecutionHostJwtAlgorithmsSchema = z.array(\n  z.enum(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS),\n).min(1).max(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS.length).transform(\n  (algorithms) => Object.freeze([...new Set(algorithms)]),\n);\n\nexport const JwtExecutionIdentityVerifierConfigSchema = z.object({\n  executionIssuer: JwtIssuerSchema,\n  executionAudience: JwtAudienceSchema,\n  executionJwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  executionJwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,\n  trustedAdopterId: OpaqueIdSchema,\n  maxAssertionAgeSeconds: z.number().int().min(1).max(15 * 60),\n  assertionClockToleranceSeconds: z.number().int().min(0).max(60),\n}).strict();\n\nexport const JwtExecutionHostMcpCapabilityVerifierConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  audience: JwtAudienceSchema,\n  jwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  jwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,\n  trustedAdopterId: OpaqueIdSchema,\n  serverId: McpServerIdSchema,\n  maxCapabilityAgeSeconds: z.number().int().min(1).max(15 * 60),\n  clockToleranceSeconds: z.number().int().min(0).max(60),\n}).strict();\n"]}

package/dist/host/types.d.ts

@@ -0,0 +1,62 @@
+import type { JWTVerifyGetKey } from 'jose';
+import type { ExecutionScope, HostedExecutionWorkflow } from '../contracts/index.js';
+export declare const EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS: readonly ["RS256", "PS256", "ES256", "EdDSA"];
+export type ExecutionHostJwtAlgorithm = typeof EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS[number];
+/** Authority established from one signed assertion and its request binding. */
+export type VerifiedExecutionIdentity = Readonly<{
+    scope: Readonly<ExecutionScope>;
+    runtimeSessionId: string;
+    invocationId: string;
+    workflow: HostedExecutionWorkflow;
+    issuedAt: string;
+    expiresAt: string;
+}>;
+export type ExecutionIdentityVerificationRequest = Readonly<{
+    assertion: string;
+    runtimeSessionId: string;
+    invocationId: string;
+    workflow: HostedExecutionWorkflow;
+}>;
+export interface ExecutionIdentityVerifier {
+    verify(request: ExecutionIdentityVerificationRequest): Promise<VerifiedExecutionIdentity>;
+}
+export type JwtExecutionIdentityVerifierConfig = Readonly<{
+    executionIssuer: string;
+    executionAudience: string;
+    executionJwksUrl: URL;
+    executionJwtAlgorithms: readonly ExecutionHostJwtAlgorithm[];
+    trustedAdopterId: string;
+    maxAssertionAgeSeconds: number;
+    assertionClockToleranceSeconds: number;
+}>;
+/** Opaque MCP bearer whose claims match the independently verified execution. */
+export type VerifiedExecutionHostMcpCapability = Readonly<{
+    assertion: string;
+    capabilityId: string;
+    serverId: string;
+    allowedTools: readonly string[];
+    issuedAt: string;
+    expiresAt: string;
+}>;
+export type ExecutionHostMcpCapabilityVerificationRequest = Readonly<{
+    assertion: string;
+    identity: VerifiedExecutionIdentity;
+}>;
+export interface ExecutionHostMcpCapabilityVerifier {
+    verify(request: ExecutionHostMcpCapabilityVerificationRequest): Promise<VerifiedExecutionHostMcpCapability>;
+}
+export type JwtExecutionHostMcpCapabilityVerifierConfig = Readonly<{
+    issuer: string;
+    audience: string;
+    jwksUrl: URL;
+    jwtAlgorithms: readonly ExecutionHostJwtAlgorithm[];
+    trustedAdopterId: string;
+    serverId: string;
+    maxCapabilityAgeSeconds: number;
+    clockToleranceSeconds: number;
+}>;
+export type ExecutionHostJwtVerifierOptions = Readonly<{
+    keyResolver?: JWTVerifyGetKey;
+    now?: () => Date;
+}>;
+//# sourceMappingURL=types.d.ts.map