@heddleagent/execution-host-client 6.7.0 → 8.0.0

package/dist/host/runtime-session/service.d.ts

@@ -1,7 +1,7 @@
 import type { VerifiedExecutionHostMcpCapability, VerifiedExecutionIdentity } from '../types.js';
 import { RuntimeScopeBindingService, type BoundRuntimeScope } from './scope-binding.js';
 import { RuntimeSessionStatusService, type RuntimeSessionStatusSnapshot } from './status.js';
-import type { RuntimeInvocationHandle, RuntimeInvocationRequest, RuntimeSessionConfig, RuntimeWorkflowExecutors } from './types.js';
+import type { RuntimeExecutionInput, RuntimeInvocationHandle, RuntimeInvocationRequest, RuntimeSessionConfig, RuntimeWorkflowExecutors } from './types.js';
 /** Coordinates one process-bound Runtime session without owning product data. */
 export declare class RuntimeSessionService {
     private active?;
@@ -24,7 +24,7 @@ export declare class RuntimeSessionService {
     start(input: {
         identity: VerifiedExecutionIdentity;
         invocation: RuntimeInvocationRequest;
-        modelApiKey: string;
+        modelCredential: RuntimeExecutionInput['modelCredential'];
         mcpCapability?: VerifiedExecutionHostMcpCapability;
         callerSignal: AbortSignal;
     }): Promise<RuntimeInvocationHandle>;

package/dist/host/runtime-session/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kCAAkC,EAClC,yBAAyB,EAC1B,MAAM,aAAa,CAAC;AAMrB,OAAO,EACL,0BAA0B,EAC1B,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,KAAK,4BAA4B,EAClC,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAGV,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAiBpB,iFAAiF;AACjF,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAC,CAAmB;IAClC,OAAO,CAAC,QAAQ,CAAC,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAqB;IAClE,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAgB;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,OAAO,EAAE;QACnB,MAAM,EAAE,oBAAoB,CAAC;QAC7B,SAAS,EAAE,wBAAwB,CAAC;QACpC,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,MAAM,CAAC,EAAE,2BAA2B,CAAC;QACrC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;KAClB;IAcD,UAAU,IAAI,4BAA4B;IAIpC,KAAK,CAAC,KAAK,EAAE;QACjB,QAAQ,EAAE,yBAAyB,CAAC;QACpC,UAAU,EAAE,wBAAwB,CAAC;QACrC,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,kCAAkC,CAAC;QACnD,YAAY,EAAE,WAAW,CAAC;KAC3B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAoG9B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB/B,UAAU,IAAI,iBAAiB,GAAG,SAAS;IAI3C,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,MAAM;IAWd,OAAO,CAAC,2BAA2B;IAYnC,OAAO,CAAC,cAAc;CAcvB"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kCAAkC,EAClC,yBAAyB,EAC1B,MAAM,aAAa,CAAC;AAMrB,OAAO,EACL,0BAA0B,EAC1B,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,KAAK,4BAA4B,EAClC,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAEV,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAiBpB,iFAAiF;AACjF,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAC,CAAmB;IAClC,OAAO,CAAC,QAAQ,CAAC,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAqB;IAClE,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAgB;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,OAAO,EAAE;QACnB,MAAM,EAAE,oBAAoB,CAAC;QAC7B,SAAS,EAAE,wBAAwB,CAAC;QACpC,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,MAAM,CAAC,EAAE,2BAA2B,CAAC;QACrC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;KAClB;IAcD,UAAU,IAAI,4BAA4B;IAIpC,KAAK,CAAC,KAAK,EAAE;QACjB,QAAQ,EAAE,yBAAyB,CAAC;QACpC,UAAU,EAAE,wBAAwB,CAAC;QACrC,eAAe,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC1D,aAAa,CAAC,EAAE,kCAAkC,CAAC;QACnD,YAAY,EAAE,WAAW,CAAC;KAC3B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAoG9B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB/B,UAAU,IAAI,iBAAiB,GAAG,SAAS;IAI3C,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,MAAM;IAWd,OAAO,CAAC,2BAA2B;IAYnC,OAAO,CAAC,cAAc;CAcvB"}

package/dist/host/runtime-session/service.js

@@ -53,7 +53,7 @@ export class RuntimeSessionService {
             scopeKey: binding.scopeKey,
             executionSessionId: binding.executionSessionId,
             request: input.invocation,
-            modelApiKey: input.modelApiKey,
+            modelCredential: input.modelCredential,
             mcpCapability: input.mcpCapability,
             abortSignal: controller.signal,
         };

package/dist/host/runtime-session/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/host/runtime-session/service.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,GAE3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,GAE5B,MAAM,aAAa,CAAC;AAUrB,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAepC,iFAAiF;AACjF,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAoB;IAC1B,QAAQ,CAAsB;IACrB,4BAA4B,GAAG,IAAI,GAAG,EAAU,CAAC;IACjD,8BAA8B,GAAa,EAAE,CAAC;IAC9C,MAAM,CAAuB;IAC7B,SAAS,CAA2B;IACpC,OAAO,CAA6B;IACpC,MAAM,CAA8B;IACpC,GAAG,CAAa;IAEjC,YAAY,OAMX;QACC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;eAClD,OAAO,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,0BAA0B,EAAE,CAAC;QACnE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAMX;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;YACjD,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CACxB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,+BAA+B,CACvC,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1E,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC/B,eAAe,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,aAAa,GAAG,UAAU,CAC9B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CACpB,IAAI,oBAAoB,CAAC,0CAA0C,CAAC,CACrE,EACD,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAC1C,CAAC;QACF,aAAa,CAAC,KAAK,EAAE,CAAC;QAEtB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG;YACrB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;YAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,OAAO,EAAE,KAAK,CAAC,UAAU;YACzB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,UAAU,CAAC,MAAM;SACC,CAAC;QAClC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CACzC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAC1C,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU;YACV,OAAO,EAAE,YAAY;SACtB,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,GAA2B,CAAC;QAChC,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,YAAY,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAqB;YAC/B,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;YACzC,GAAG;YACH,UAAU;YACV,aAAa;YACb,yBAAyB,EAAE,GAAG,EAAE,CAC9B,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC;SACnE,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE;YAC9D,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAE9B,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACpC,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,GAAG,EAAE;gBACX,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC7C,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAChC,CAAC;IAEO,eAAe,CAAC,UAAmB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,oBAAoB,CAC5B,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;IAEO,MAAM,CAAC,MAAwB;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnC,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAEO,2BAA2B,CAAC,YAAoB;QACtD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,8BAA8B,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,8BAA8B,CAAC,KAAK,EAAE,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,cAAc,CACpB,KAA4B;QAE5B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAC3C,GAAG,KAAK;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC;YACxC,GAAG,KAAK;YACR,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import type {\n  VerifiedExecutionHostMcpCapability,\n  VerifiedExecutionIdentity,\n} from '../types.js';\nimport {\n  RuntimeBusyError,\n  RuntimeDeadlineError,\n  RuntimeDuplicateInvocationError,\n} from './errors.js';\nimport {\n  RuntimeScopeBindingService,\n  type BoundRuntimeScope,\n} from './scope-binding.js';\nimport {\n  RuntimeSessionStatusService,\n  type RuntimeSessionStatusSnapshot,\n} from './status.js';\nimport type {\n  RuntimeExecutionHandle,\n  RuntimeExecutionInput,\n  RuntimeInvocationHandle,\n  RuntimeInvocationRequest,\n  RuntimeSessionConfig,\n  RuntimeWorkflowExecutors,\n} from './types.js';\n\nconst RECENT_INVOCATION_LIMIT = 128;\n\ntype ActiveInvocation = {\n  invocationId: string;\n  run: RuntimeExecutionHandle;\n  controller: AbortController;\n  deadlineTimer: ReturnType<typeof setTimeout>;\n  removeCallerAbortListener: () => void;\n};\n\ntype StartingInvocation = {\n  controller: AbortController;\n  promise: Promise<RuntimeExecutionHandle>;\n};\n\n/** Coordinates one process-bound Runtime session without owning product data. */\nexport class RuntimeSessionService {\n  private active?: ActiveInvocation;\n  private starting?: StartingInvocation;\n  private readonly recentCompletedInvocationIds = new Set<string>();\n  private readonly recentCompletedInvocationOrder: string[] = [];\n  private readonly config: RuntimeSessionConfig;\n  private readonly executors: RuntimeWorkflowExecutors;\n  private readonly binding: RuntimeScopeBindingService;\n  private readonly status: RuntimeSessionStatusService;\n  private readonly now: () => Date;\n\n  constructor(options: {\n    config: RuntimeSessionConfig;\n    executors: RuntimeWorkflowExecutors;\n    binding?: RuntimeScopeBindingService;\n    status?: RuntimeSessionStatusService;\n    now?: () => Date;\n  }) {\n    if (\n      !Number.isSafeInteger(options.config.maxInvocationMs)\n      || options.config.maxInvocationMs <= 0\n    ) {\n      throw new Error('maxInvocationMs must be a positive safe integer.');\n    }\n    this.config = options.config;\n    this.executors = options.executors;\n    this.binding = options.binding ?? new RuntimeScopeBindingService();\n    this.now = options.now ?? (() => new Date());\n    this.status = options.status ?? new RuntimeSessionStatusService(this.now);\n  }\n\n  readStatus(): RuntimeSessionStatusSnapshot {\n    return this.status.read();\n  }\n\n  async start(input: {\n    identity: VerifiedExecutionIdentity;\n    invocation: RuntimeInvocationRequest;\n    modelApiKey: string;\n    mcpCapability?: VerifiedExecutionHostMcpCapability;\n    callerSignal: AbortSignal;\n  }): Promise<RuntimeInvocationHandle> {\n    const deadline = this.resolveDeadline(input.invocation.deadlineAt);\n    const binding = this.binding.bind({\n      runtimeSessionId: input.identity.runtimeSessionId,\n      ...input.identity.scope,\n    });\n\n    if (this.active || this.starting) {\n      throw new RuntimeBusyError(\n        'This runtime session already has an active invocation.',\n      );\n    }\n    if (this.recentCompletedInvocationIds.has(input.identity.invocationId)) {\n      throw new RuntimeDuplicateInvocationError(\n        'This recent invocation identifier already completed in the current runtime process.',\n      );\n    }\n\n    const controller = new AbortController();\n    const abortFromCaller = () => controller.abort(input.callerSignal.reason);\n    input.callerSignal.addEventListener('abort', abortFromCaller, { once: true });\n    if (input.callerSignal.aborted) {\n      abortFromCaller();\n    }\n\n    const deadlineTimer = setTimeout(\n      () => controller.abort(\n        new RuntimeDeadlineError('The runtime invocation deadline elapsed.'),\n      ),\n      deadline.getTime() - this.now().getTime(),\n    );\n    deadlineTimer.unref();\n\n    this.status.markExecuting();\n    const executionInput = {\n      scope: input.identity.scope,\n      scopeKey: binding.scopeKey,\n      executionSessionId: binding.executionSessionId,\n      request: input.invocation,\n      modelApiKey: input.modelApiKey,\n      mcpCapability: input.mcpCapability,\n      abortSignal: controller.signal,\n    } satisfies RuntimeExecutionInput;\n    const startPromise = Promise.resolve().then(\n      () => this.startExecution(executionInput),\n    );\n    const starting: StartingInvocation = {\n      controller,\n      promise: startPromise,\n    };\n    this.starting = starting;\n\n    let run: RuntimeExecutionHandle;\n    try {\n      run = await startPromise;\n    } catch (error) {\n      clearTimeout(deadlineTimer);\n      input.callerSignal.removeEventListener('abort', abortFromCaller);\n      this.status.markIdle();\n      throw error;\n    } finally {\n      if (this.starting === starting) {\n        this.starting = undefined;\n      }\n    }\n\n    const active: ActiveInvocation = {\n      invocationId: input.identity.invocationId,\n      run,\n      controller,\n      deadlineTimer,\n      removeCallerAbortListener: () =>\n        input.callerSignal.removeEventListener('abort', abortFromCaller),\n    };\n    this.active = active;\n    controller.signal.addEventListener('abort', () => run.cancel(), {\n      once: true,\n    });\n    if (controller.signal.aborted) {\n      run.cancel();\n    }\n\n    const result = run.result.finally(() => this.settle(active));\n    result.catch(() => undefined);\n\n    return {\n      runId: run.runId,\n      acceptedAt: this.now().toISOString(),\n      // The execution signal cancels the agent, but the event subscription\n      // remains open for the executor's truthful cancelled terminal.\n      events: () => run.events(),\n      cancel: () => {\n        const wasActive = !controller.signal.aborted;\n        controller.abort();\n        return wasActive;\n      },\n      result,\n    };\n  }\n\n  async shutdown(): Promise<void> {\n    const starting = this.starting;\n    if (starting) {\n      starting.controller.abort(new Error('Runtime is shutting down.'));\n      const run = await starting.promise.catch(() => undefined);\n      if (run) {\n        run.cancel();\n        await run.result.catch(() => undefined);\n      }\n    }\n\n    const active = this.active;\n    if (!active) {\n      return;\n    }\n    active.controller.abort(new Error('Runtime is shutting down.'));\n    active.run.cancel();\n    await active.run.result.catch(() => undefined);\n  }\n\n  boundScope(): BoundRuntimeScope | undefined {\n    return this.binding.current();\n  }\n\n  private resolveDeadline(deadlineAt?: string): Date {\n    const now = this.now();\n    const maximum = new Date(now.getTime() + this.config.maxInvocationMs);\n    if (!deadlineAt) {\n      return maximum;\n    }\n\n    const requested = new Date(deadlineAt);\n    if (requested.getTime() <= now.getTime()) {\n      throw new RuntimeDeadlineError(\n        'The runtime invocation deadline has already elapsed.',\n      );\n    }\n    return requested.getTime() < maximum.getTime() ? requested : maximum;\n  }\n\n  private settle(active: ActiveInvocation): void {\n    if (this.active !== active) {\n      return;\n    }\n    clearTimeout(active.deadlineTimer);\n    active.removeCallerAbortListener();\n    this.active = undefined;\n    this.rememberCompletedInvocation(active.invocationId);\n    this.status.markIdle();\n  }\n\n  private rememberCompletedInvocation(invocationId: string): void {\n    this.recentCompletedInvocationIds.add(invocationId);\n    this.recentCompletedInvocationOrder.push(invocationId);\n    if (this.recentCompletedInvocationOrder.length <= RECENT_INVOCATION_LIMIT) {\n      return;\n    }\n    const oldest = this.recentCompletedInvocationOrder.shift();\n    if (oldest) {\n      this.recentCompletedInvocationIds.delete(oldest);\n    }\n  }\n\n  private startExecution(\n    input: RuntimeExecutionInput,\n  ): Promise<RuntimeExecutionHandle> {\n    if (input.request.kind === 'conversation-turn') {\n      return this.executors.conversationTurn.start({\n        ...input,\n        request: input.request,\n      });\n    }\n    return this.executors.heartbeatTask.start({\n      ...input,\n      request: input.request,\n    });\n  }\n}\n"]}
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/host/runtime-session/service.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,GAE3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,GAE5B,MAAM,aAAa,CAAC;AAUrB,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAepC,iFAAiF;AACjF,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAoB;IAC1B,QAAQ,CAAsB;IACrB,4BAA4B,GAAG,IAAI,GAAG,EAAU,CAAC;IACjD,8BAA8B,GAAa,EAAE,CAAC;IAC9C,MAAM,CAAuB;IAC7B,SAAS,CAA2B;IACpC,OAAO,CAA6B;IACpC,MAAM,CAA8B;IACpC,GAAG,CAAa;IAEjC,YAAY,OAMX;QACC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;eAClD,OAAO,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,0BAA0B,EAAE,CAAC;QACnE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAMX;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;YACjD,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CACxB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,+BAA+B,CACvC,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1E,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC/B,eAAe,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,aAAa,GAAG,UAAU,CAC9B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CACpB,IAAI,oBAAoB,CAAC,0CAA0C,CAAC,CACrE,EACD,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAC1C,CAAC;QACF,aAAa,CAAC,KAAK,EAAE,CAAC;QAEtB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG;YACrB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;YAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,OAAO,EAAE,KAAK,CAAC,UAAU;YACzB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,UAAU,CAAC,MAAM;SACC,CAAC;QAClC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CACzC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAC1C,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU;YACV,OAAO,EAAE,YAAY;SACtB,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,GAA2B,CAAC;QAChC,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,YAAY,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAqB;YAC/B,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;YACzC,GAAG;YACH,UAAU;YACV,aAAa;YACb,yBAAyB,EAAE,GAAG,EAAE,CAC9B,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC;SACnE,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE;YAC9D,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAE9B,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACpC,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,GAAG,EAAE;gBACX,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC7C,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAChC,CAAC;IAEO,eAAe,CAAC,UAAmB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,oBAAoB,CAC5B,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;IAEO,MAAM,CAAC,MAAwB;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnC,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAEO,2BAA2B,CAAC,YAAoB;QACtD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,8BAA8B,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,8BAA8B,CAAC,KAAK,EAAE,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,cAAc,CACpB,KAA4B;QAE5B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAC3C,GAAG,KAAK;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC;YACxC,GAAG,KAAK;YACR,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import type {\n  VerifiedExecutionHostMcpCapability,\n  VerifiedExecutionIdentity,\n} from '../types.js';\nimport {\n  RuntimeBusyError,\n  RuntimeDeadlineError,\n  RuntimeDuplicateInvocationError,\n} from './errors.js';\nimport {\n  RuntimeScopeBindingService,\n  type BoundRuntimeScope,\n} from './scope-binding.js';\nimport {\n  RuntimeSessionStatusService,\n  type RuntimeSessionStatusSnapshot,\n} from './status.js';\nimport type {\n  RuntimeExecutionHandle,\n  RuntimeExecutionInput,\n  RuntimeInvocationHandle,\n  RuntimeInvocationRequest,\n  RuntimeSessionConfig,\n  RuntimeWorkflowExecutors,\n} from './types.js';\n\nconst RECENT_INVOCATION_LIMIT = 128;\n\ntype ActiveInvocation = {\n  invocationId: string;\n  run: RuntimeExecutionHandle;\n  controller: AbortController;\n  deadlineTimer: ReturnType<typeof setTimeout>;\n  removeCallerAbortListener: () => void;\n};\n\ntype StartingInvocation = {\n  controller: AbortController;\n  promise: Promise<RuntimeExecutionHandle>;\n};\n\n/** Coordinates one process-bound Runtime session without owning product data. */\nexport class RuntimeSessionService {\n  private active?: ActiveInvocation;\n  private starting?: StartingInvocation;\n  private readonly recentCompletedInvocationIds = new Set<string>();\n  private readonly recentCompletedInvocationOrder: string[] = [];\n  private readonly config: RuntimeSessionConfig;\n  private readonly executors: RuntimeWorkflowExecutors;\n  private readonly binding: RuntimeScopeBindingService;\n  private readonly status: RuntimeSessionStatusService;\n  private readonly now: () => Date;\n\n  constructor(options: {\n    config: RuntimeSessionConfig;\n    executors: RuntimeWorkflowExecutors;\n    binding?: RuntimeScopeBindingService;\n    status?: RuntimeSessionStatusService;\n    now?: () => Date;\n  }) {\n    if (\n      !Number.isSafeInteger(options.config.maxInvocationMs)\n      || options.config.maxInvocationMs <= 0\n    ) {\n      throw new Error('maxInvocationMs must be a positive safe integer.');\n    }\n    this.config = options.config;\n    this.executors = options.executors;\n    this.binding = options.binding ?? new RuntimeScopeBindingService();\n    this.now = options.now ?? (() => new Date());\n    this.status = options.status ?? new RuntimeSessionStatusService(this.now);\n  }\n\n  readStatus(): RuntimeSessionStatusSnapshot {\n    return this.status.read();\n  }\n\n  async start(input: {\n    identity: VerifiedExecutionIdentity;\n    invocation: RuntimeInvocationRequest;\n    modelCredential: RuntimeExecutionInput['modelCredential'];\n    mcpCapability?: VerifiedExecutionHostMcpCapability;\n    callerSignal: AbortSignal;\n  }): Promise<RuntimeInvocationHandle> {\n    const deadline = this.resolveDeadline(input.invocation.deadlineAt);\n    const binding = this.binding.bind({\n      runtimeSessionId: input.identity.runtimeSessionId,\n      ...input.identity.scope,\n    });\n\n    if (this.active || this.starting) {\n      throw new RuntimeBusyError(\n        'This runtime session already has an active invocation.',\n      );\n    }\n    if (this.recentCompletedInvocationIds.has(input.identity.invocationId)) {\n      throw new RuntimeDuplicateInvocationError(\n        'This recent invocation identifier already completed in the current runtime process.',\n      );\n    }\n\n    const controller = new AbortController();\n    const abortFromCaller = () => controller.abort(input.callerSignal.reason);\n    input.callerSignal.addEventListener('abort', abortFromCaller, { once: true });\n    if (input.callerSignal.aborted) {\n      abortFromCaller();\n    }\n\n    const deadlineTimer = setTimeout(\n      () => controller.abort(\n        new RuntimeDeadlineError('The runtime invocation deadline elapsed.'),\n      ),\n      deadline.getTime() - this.now().getTime(),\n    );\n    deadlineTimer.unref();\n\n    this.status.markExecuting();\n    const executionInput = {\n      scope: input.identity.scope,\n      scopeKey: binding.scopeKey,\n      executionSessionId: binding.executionSessionId,\n      request: input.invocation,\n      modelCredential: input.modelCredential,\n      mcpCapability: input.mcpCapability,\n      abortSignal: controller.signal,\n    } satisfies RuntimeExecutionInput;\n    const startPromise = Promise.resolve().then(\n      () => this.startExecution(executionInput),\n    );\n    const starting: StartingInvocation = {\n      controller,\n      promise: startPromise,\n    };\n    this.starting = starting;\n\n    let run: RuntimeExecutionHandle;\n    try {\n      run = await startPromise;\n    } catch (error) {\n      clearTimeout(deadlineTimer);\n      input.callerSignal.removeEventListener('abort', abortFromCaller);\n      this.status.markIdle();\n      throw error;\n    } finally {\n      if (this.starting === starting) {\n        this.starting = undefined;\n      }\n    }\n\n    const active: ActiveInvocation = {\n      invocationId: input.identity.invocationId,\n      run,\n      controller,\n      deadlineTimer,\n      removeCallerAbortListener: () =>\n        input.callerSignal.removeEventListener('abort', abortFromCaller),\n    };\n    this.active = active;\n    controller.signal.addEventListener('abort', () => run.cancel(), {\n      once: true,\n    });\n    if (controller.signal.aborted) {\n      run.cancel();\n    }\n\n    const result = run.result.finally(() => this.settle(active));\n    result.catch(() => undefined);\n\n    return {\n      runId: run.runId,\n      acceptedAt: this.now().toISOString(),\n      // The execution signal cancels the agent, but the event subscription\n      // remains open for the executor's truthful cancelled terminal.\n      events: () => run.events(),\n      cancel: () => {\n        const wasActive = !controller.signal.aborted;\n        controller.abort();\n        return wasActive;\n      },\n      result,\n    };\n  }\n\n  async shutdown(): Promise<void> {\n    const starting = this.starting;\n    if (starting) {\n      starting.controller.abort(new Error('Runtime is shutting down.'));\n      const run = await starting.promise.catch(() => undefined);\n      if (run) {\n        run.cancel();\n        await run.result.catch(() => undefined);\n      }\n    }\n\n    const active = this.active;\n    if (!active) {\n      return;\n    }\n    active.controller.abort(new Error('Runtime is shutting down.'));\n    active.run.cancel();\n    await active.run.result.catch(() => undefined);\n  }\n\n  boundScope(): BoundRuntimeScope | undefined {\n    return this.binding.current();\n  }\n\n  private resolveDeadline(deadlineAt?: string): Date {\n    const now = this.now();\n    const maximum = new Date(now.getTime() + this.config.maxInvocationMs);\n    if (!deadlineAt) {\n      return maximum;\n    }\n\n    const requested = new Date(deadlineAt);\n    if (requested.getTime() <= now.getTime()) {\n      throw new RuntimeDeadlineError(\n        'The runtime invocation deadline has already elapsed.',\n      );\n    }\n    return requested.getTime() < maximum.getTime() ? requested : maximum;\n  }\n\n  private settle(active: ActiveInvocation): void {\n    if (this.active !== active) {\n      return;\n    }\n    clearTimeout(active.deadlineTimer);\n    active.removeCallerAbortListener();\n    this.active = undefined;\n    this.rememberCompletedInvocation(active.invocationId);\n    this.status.markIdle();\n  }\n\n  private rememberCompletedInvocation(invocationId: string): void {\n    this.recentCompletedInvocationIds.add(invocationId);\n    this.recentCompletedInvocationOrder.push(invocationId);\n    if (this.recentCompletedInvocationOrder.length <= RECENT_INVOCATION_LIMIT) {\n      return;\n    }\n    const oldest = this.recentCompletedInvocationOrder.shift();\n    if (oldest) {\n      this.recentCompletedInvocationIds.delete(oldest);\n    }\n  }\n\n  private startExecution(\n    input: RuntimeExecutionInput,\n  ): Promise<RuntimeExecutionHandle> {\n    if (input.request.kind === 'conversation-turn') {\n      return this.executors.conversationTurn.start({\n        ...input,\n        request: input.request,\n      });\n    }\n    return this.executors.heartbeatTask.start({\n      ...input,\n      request: input.request,\n    });\n  }\n}\n"]}

package/dist/host/runtime-session/types.d.ts

@@ -1,4 +1,4 @@
-import type { ExecutionHostConversationTurnRequest, ExecutionHostHeartbeatTaskRequest, ExecutionScope, RuntimePublicResult } from '../../contracts/index.js';
+import type { ExecutionHostConversationTurnRequest, ExecutionHostHeartbeatTaskRequest, ExecutionHostModelCredential, ExecutionScope, RuntimePublicResult } from '../../contracts/index.js';
 import type { VerifiedExecutionHostMcpCapability } from '../types.js';
 type RuntimeExecutionStreamEnvelope = {
     runId: string;
@@ -29,7 +29,7 @@ export type RuntimeExecutionInput<Request extends RuntimeInvocationRequest = Run
     scopeKey: string;
     executionSessionId: string;
     request: Request;
-    modelApiKey: string;
+    modelCredential: ExecutionHostModelCredential;
     mcpCapability?: VerifiedExecutionHostMcpCapability;
     abortSignal: AbortSignal;
 };

package/dist/host/runtime-session/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oCAAoC,EACpC,iCAAiC,EACjC,cAAc,EACd,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AAEtE,KAAK,8BAA8B,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,0BAA0B,CAAC,MAAM,GAAG,OAAO,IACnD,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,MAAM,wBAAwB,GAChC,oCAAoC,GACpC,iCAAiC,CAAC;AAEtC,MAAM,MAAM,qBAAqB,CAC/B,OAAO,SAAS,wBAAwB,GAAG,wBAAwB,IACjE;IACF,yEAAyE;IACzE,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,kCAAkC,CAAC;IACnD,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,MAAM,GAAG,OAAO,IAAI;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,CAAC,OAAO,CAAC,EAAE;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,aAAa,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,OAAO,CAAC;CACnB,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,uBAAuB,CACjC,OAAO,SAAS,wBAAwB,EACxC,MAAM,IACJ;IACF,KAAK,CACH,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACpC,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,eAAe,GAAG,OAAO,IAAI;IAChE,gBAAgB,EAAE,uBAAuB,CACvC,oCAAoC,EACpC,mBAAmB,CACpB,CAAC;IACF,aAAa,EAAE,uBAAuB,CACpC,iCAAiC,EACjC,eAAe,CAChB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,MAAM,GAAG,OAAO,IAAI;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,IAAI,aAAa,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oCAAoC,EACpC,iCAAiC,EACjC,4BAA4B,EAC5B,cAAc,EACd,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AAEtE,KAAK,8BAA8B,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,0BAA0B,CAAC,MAAM,GAAG,OAAO,IACnD,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,MAAM,wBAAwB,GAChC,oCAAoC,GACpC,iCAAiC,CAAC;AAEtC,MAAM,MAAM,qBAAqB,CAC/B,OAAO,SAAS,wBAAwB,GAAG,wBAAwB,IACjE;IACF,yEAAyE;IACzE,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,4BAA4B,CAAC;IAC9C,aAAa,CAAC,EAAE,kCAAkC,CAAC;IACnD,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,MAAM,GAAG,OAAO,IAAI;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,CAAC,OAAO,CAAC,EAAE;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,aAAa,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,OAAO,CAAC;CACnB,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,uBAAuB,CACjC,OAAO,SAAS,wBAAwB,EACxC,MAAM,IACJ;IACF,KAAK,CACH,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACpC,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,eAAe,GAAG,OAAO,IAAI;IAChE,gBAAgB,EAAE,uBAAuB,CACvC,oCAAoC,EACpC,mBAAmB,CACpB,CAAC;IACF,aAAa,EAAE,uBAAuB,CACpC,iCAAiC,EACjC,eAAe,CAChB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,MAAM,GAAG,OAAO,IAAI;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,IAAI,aAAa,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC"}

package/dist/host/runtime-session/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/host/runtime-session/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionHostConversationTurnRequest,\n  ExecutionHostHeartbeatTaskRequest,\n  ExecutionScope,\n  RuntimePublicResult,\n} from '../../contracts/index.js';\nimport type { VerifiedExecutionHostMcpCapability } from '../types.js';\n\ntype RuntimeExecutionStreamEnvelope = {\n  runId: string;\n  sequence: number;\n  timestamp: string;\n};\n\n/** Ordered execution events exposed by any workflow executor. */\nexport type RuntimeExecutionStreamItem<Result = unknown> =\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'activity';\n    activity: unknown;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'result';\n    result: Result;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'cancelled';\n    reason: string;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'error';\n    error: { code: string; message: string };\n  });\n\nexport type RuntimeInvocationRequest =\n  | ExecutionHostConversationTurnRequest\n  | ExecutionHostHeartbeatTaskRequest;\n\nexport type RuntimeExecutionInput<\n  Request extends RuntimeInvocationRequest = RuntimeInvocationRequest,\n> = {\n  /** Verified product identity forwarded unchanged from host admission. */\n  scope: Readonly<ExecutionScope>;\n  scopeKey: string;\n  executionSessionId: string;\n  request: Request;\n  modelApiKey: string;\n  mcpCapability?: VerifiedExecutionHostMcpCapability;\n  abortSignal: AbortSignal;\n};\n\nexport type RuntimeExecutionHandle<Result = unknown> = {\n  runId: string;\n  result: Promise<Result>;\n  events(options?: {\n    signal?: AbortSignal;\n  }): AsyncIterable<RuntimeExecutionStreamItem<Result>>;\n  cancel(): boolean;\n};\n\n/** Outbound execution port for one provider-neutral workflow. */\nexport type RuntimeWorkflowExecutor<\n  Request extends RuntimeInvocationRequest,\n  Result,\n> = {\n  start(\n    input: RuntimeExecutionInput<Request>,\n  ): Promise<RuntimeExecutionHandle<Result>>;\n};\n\nexport type RuntimeWorkflowExecutors<HeartbeatResult = unknown> = {\n  conversationTurn: RuntimeWorkflowExecutor<\n    ExecutionHostConversationTurnRequest,\n    RuntimePublicResult\n  >;\n  heartbeatTask: RuntimeWorkflowExecutor<\n    ExecutionHostHeartbeatTaskRequest,\n    HeartbeatResult\n  >;\n};\n\nexport type RuntimeInvocationHandle<Result = unknown> = {\n  runId: string;\n  acceptedAt: string;\n  events(): AsyncIterable<RuntimeExecutionStreamItem<Result>>;\n  cancel(): boolean;\n  result: Promise<Result>;\n};\n\nexport type RuntimeSessionConfig = {\n  maxInvocationMs: number;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/host/runtime-session/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionHostConversationTurnRequest,\n  ExecutionHostHeartbeatTaskRequest,\n  ExecutionHostModelCredential,\n  ExecutionScope,\n  RuntimePublicResult,\n} from '../../contracts/index.js';\nimport type { VerifiedExecutionHostMcpCapability } from '../types.js';\n\ntype RuntimeExecutionStreamEnvelope = {\n  runId: string;\n  sequence: number;\n  timestamp: string;\n};\n\n/** Ordered execution events exposed by any workflow executor. */\nexport type RuntimeExecutionStreamItem<Result = unknown> =\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'activity';\n    activity: unknown;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'result';\n    result: Result;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'cancelled';\n    reason: string;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'error';\n    error: { code: string; message: string };\n  });\n\nexport type RuntimeInvocationRequest =\n  | ExecutionHostConversationTurnRequest\n  | ExecutionHostHeartbeatTaskRequest;\n\nexport type RuntimeExecutionInput<\n  Request extends RuntimeInvocationRequest = RuntimeInvocationRequest,\n> = {\n  /** Verified product identity forwarded unchanged from host admission. */\n  scope: Readonly<ExecutionScope>;\n  scopeKey: string;\n  executionSessionId: string;\n  request: Request;\n  modelCredential: ExecutionHostModelCredential;\n  mcpCapability?: VerifiedExecutionHostMcpCapability;\n  abortSignal: AbortSignal;\n};\n\nexport type RuntimeExecutionHandle<Result = unknown> = {\n  runId: string;\n  result: Promise<Result>;\n  events(options?: {\n    signal?: AbortSignal;\n  }): AsyncIterable<RuntimeExecutionStreamItem<Result>>;\n  cancel(): boolean;\n};\n\n/** Outbound execution port for one provider-neutral workflow. */\nexport type RuntimeWorkflowExecutor<\n  Request extends RuntimeInvocationRequest,\n  Result,\n> = {\n  start(\n    input: RuntimeExecutionInput<Request>,\n  ): Promise<RuntimeExecutionHandle<Result>>;\n};\n\nexport type RuntimeWorkflowExecutors<HeartbeatResult = unknown> = {\n  conversationTurn: RuntimeWorkflowExecutor<\n    ExecutionHostConversationTurnRequest,\n    RuntimePublicResult\n  >;\n  heartbeatTask: RuntimeWorkflowExecutor<\n    ExecutionHostHeartbeatTaskRequest,\n    HeartbeatResult\n  >;\n};\n\nexport type RuntimeInvocationHandle<Result = unknown> = {\n  runId: string;\n  acceptedAt: string;\n  events(): AsyncIterable<RuntimeExecutionStreamItem<Result>>;\n  cancel(): boolean;\n  result: Promise<Result>;\n};\n\nexport type RuntimeSessionConfig = {\n  maxInvocationMs: number;\n};\n"]}

package/dist/host/schemas.d.ts

@@ -34,4 +34,10 @@ export declare const JwtExecutionHostMcpCapabilityVerifierConfigSchema: z.ZodObj
     maxCapabilityAgeSeconds: z.ZodNumber;
     clockToleranceSeconds: z.ZodNumber;
 }, z.core.$strict>;
+export declare function parseJwtExecutionIdentityVerifierConfig(input: unknown, options: {
+    allowDockerLocalHost: boolean;
+}): z.infer<typeof JwtExecutionIdentityVerifierConfigSchema>;
+export declare function parseJwtExecutionHostMcpCapabilityVerifierConfig(input: unknown, options: {
+    allowDockerLocalHost: boolean;
+}): z.infer<typeof JwtExecutionHostMcpCapabilityVerifierConfigSchema>;
 //# sourceMappingURL=schemas.d.ts.map

package/dist/host/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/host/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,gCAAgC;;;;;mHAI5C,CAAC;AAEF,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;kBAW1C,CAAC;AAEZ,eAAO,MAAM,iDAAiD;;;;;;;;;;;;;;kBAYnD,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/host/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,gCAAgC;;;;;mHAI5C,CAAC;AAEF,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;kBAW1C,CAAC;AAEZ,eAAO,MAAM,iDAAiD;;;;;;;;;;;;;;kBAYnD,CAAC;AAOZ,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,oBAAoB,EAAE,OAAO,CAAA;CAAE,GACzC,CAAC,CAAC,KAAK,CAAC,OAAO,wCAAwC,CAAC,CAO1D;AAED,wBAAgB,gDAAgD,CAC9D,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,oBAAoB,EAAE,OAAO,CAAA;CAAE,GACzC,CAAC,CAAC,KAAK,CAAC,OAAO,iDAAiD,CAAC,CAOnE"}

package/dist/host/schemas.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { JwtAudienceSchema, JwtIssuerSchema, McpServerIdSchema, OpaqueIdSchema, isSafeWebUrl, } from '../contracts/index.js';
+import { JwtAudienceSchema, JwtIssuerSchema, McpServerIdSchema, OpaqueIdSchema, isDockerLocalWebUrl, isSafeWebUrl, } from '../contracts/index.js';
 import { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS } from './types.js';
 export const ExecutionHostJwtAlgorithmsSchema = z.array(z.enum(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS)).min(1).max(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS.length).transform((algorithms) => Object.freeze([...new Set(algorithms)]));
 export const JwtExecutionIdentityVerifierConfigSchema = z.object({
@@ -21,4 +21,21 @@ export const JwtExecutionHostMcpCapabilityVerifierConfigSchema = z.object({
     maxCapabilityAgeSeconds: z.number().int().min(1).max(15 * 60),
     clockToleranceSeconds: z.number().int().min(0).max(60),
 }).strict();
+const DockerLocalJwksUrlSchema = z.instanceof(URL).refine((url) => isSafeWebUrl(url) || isDockerLocalWebUrl(url), 'must use HTTPS, loopback HTTP, or the explicit Docker local-host alias without credentials, query, or fragment');
+export function parseJwtExecutionIdentityVerifierConfig(input, options) {
+    const schema = options.allowDockerLocalHost
+        ? JwtExecutionIdentityVerifierConfigSchema.extend({
+            executionJwksUrl: DockerLocalJwksUrlSchema,
+        })
+        : JwtExecutionIdentityVerifierConfigSchema;
+    return schema.parse(input);
+}
+export function parseJwtExecutionHostMcpCapabilityVerifierConfig(input, options) {
+    const schema = options.allowDockerLocalHost
+        ? JwtExecutionHostMcpCapabilityVerifierConfigSchema.extend({
+            jwksUrl: DockerLocalJwksUrlSchema,
+        })
+        : JwtExecutionHostMcpCapabilityVerifierConfigSchema;
+    return schema.parse(input);
+}
 //# sourceMappingURL=schemas.js.map

package/dist/host/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/host/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACrD,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAChD,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uCAAuC,CAAC,MAAM,CAAC,CAAC,SAAS,CACpE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CACxD,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,eAAe,EAAE,eAAe;IAChC,iBAAiB,EAAE,iBAAiB;IACpC,gBAAgB,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CACxC,YAAY,EACZ,gFAAgF,CACjF;IACD,sBAAsB,EAAE,gCAAgC;IACxD,gBAAgB,EAAE,cAAc;IAChC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC5D,8BAA8B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAC/B,YAAY,EACZ,gFAAgF,CACjF;IACD,aAAa,EAAE,gCAAgC;IAC/C,gBAAgB,EAAE,cAAc;IAChC,QAAQ,EAAE,iBAAiB;IAC3B,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC7D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  isSafeWebUrl,\n} from '../contracts/index.js';\nimport { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS } from './types.js';\n\nexport const ExecutionHostJwtAlgorithmsSchema = z.array(\n  z.enum(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS),\n).min(1).max(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS.length).transform(\n  (algorithms) => Object.freeze([...new Set(algorithms)]),\n);\n\nexport const JwtExecutionIdentityVerifierConfigSchema = z.object({\n  executionIssuer: JwtIssuerSchema,\n  executionAudience: JwtAudienceSchema,\n  executionJwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  executionJwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,\n  trustedAdopterId: OpaqueIdSchema,\n  maxAssertionAgeSeconds: z.number().int().min(1).max(15 * 60),\n  assertionClockToleranceSeconds: z.number().int().min(0).max(60),\n}).strict();\n\nexport const JwtExecutionHostMcpCapabilityVerifierConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  audience: JwtAudienceSchema,\n  jwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  jwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,\n  trustedAdopterId: OpaqueIdSchema,\n  serverId: McpServerIdSchema,\n  maxCapabilityAgeSeconds: z.number().int().min(1).max(15 * 60),\n  clockToleranceSeconds: z.number().int().min(0).max(60),\n}).strict();\n"]}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/host/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACrD,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAChD,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uCAAuC,CAAC,MAAM,CAAC,CAAC,SAAS,CACpE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CACxD,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,eAAe,EAAE,eAAe;IAChC,iBAAiB,EAAE,iBAAiB;IACpC,gBAAgB,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CACxC,YAAY,EACZ,gFAAgF,CACjF;IACD,sBAAsB,EAAE,gCAAgC;IACxD,gBAAgB,EAAE,cAAc;IAChC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC5D,8BAA8B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAC/B,YAAY,EACZ,gFAAgF,CACjF;IACD,aAAa,EAAE,gCAAgC;IAC/C,gBAAgB,EAAE,cAAc;IAChC,QAAQ,EAAE,iBAAiB;IAC3B,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC7D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,wBAAwB,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CACvD,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,EACtD,gHAAgH,CACjH,CAAC;AAEF,MAAM,UAAU,uCAAuC,CACrD,KAAc,EACd,OAA0C;IAE1C,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB;QACzC,CAAC,CAAC,wCAAwC,CAAC,MAAM,CAAC;YAC9C,gBAAgB,EAAE,wBAAwB;SAC3C,CAAC;QACJ,CAAC,CAAC,wCAAwC,CAAC;IAC7C,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gDAAgD,CAC9D,KAAc,EACd,OAA0C;IAE1C,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB;QACzC,CAAC,CAAC,iDAAiD,CAAC,MAAM,CAAC;YACvD,OAAO,EAAE,wBAAwB;SAClC,CAAC;QACJ,CAAC,CAAC,iDAAiD,CAAC;IACtD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  isDockerLocalWebUrl,\n  isSafeWebUrl,\n} from '../contracts/index.js';\nimport { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS } from './types.js';\n\nexport const ExecutionHostJwtAlgorithmsSchema = z.array(\n  z.enum(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS),\n).min(1).max(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS.length).transform(\n  (algorithms) => Object.freeze([...new Set(algorithms)]),\n);\n\nexport const JwtExecutionIdentityVerifierConfigSchema = z.object({\n  executionIssuer: JwtIssuerSchema,\n  executionAudience: JwtAudienceSchema,\n  executionJwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  executionJwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,\n  trustedAdopterId: OpaqueIdSchema,\n  maxAssertionAgeSeconds: z.number().int().min(1).max(15 * 60),\n  assertionClockToleranceSeconds: z.number().int().min(0).max(60),\n}).strict();\n\nexport const JwtExecutionHostMcpCapabilityVerifierConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  audience: JwtAudienceSchema,\n  jwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  jwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,\n  trustedAdopterId: OpaqueIdSchema,\n  serverId: McpServerIdSchema,\n  maxCapabilityAgeSeconds: z.number().int().min(1).max(15 * 60),\n  clockToleranceSeconds: z.number().int().min(0).max(60),\n}).strict();\n\nconst DockerLocalJwksUrlSchema = z.instanceof(URL).refine(\n  (url) => isSafeWebUrl(url) || isDockerLocalWebUrl(url),\n  'must use HTTPS, loopback HTTP, or the explicit Docker local-host alias without credentials, query, or fragment',\n);\n\nexport function parseJwtExecutionIdentityVerifierConfig(\n  input: unknown,\n  options: { allowDockerLocalHost: boolean },\n): z.infer<typeof JwtExecutionIdentityVerifierConfigSchema> {\n  const schema = options.allowDockerLocalHost\n    ? JwtExecutionIdentityVerifierConfigSchema.extend({\n        executionJwksUrl: DockerLocalJwksUrlSchema,\n      })\n    : JwtExecutionIdentityVerifierConfigSchema;\n  return schema.parse(input);\n}\n\nexport function parseJwtExecutionHostMcpCapabilityVerifierConfig(\n  input: unknown,\n  options: { allowDockerLocalHost: boolean },\n): z.infer<typeof JwtExecutionHostMcpCapabilityVerifierConfigSchema> {\n  const schema = options.allowDockerLocalHost\n    ? JwtExecutionHostMcpCapabilityVerifierConfigSchema.extend({\n        jwksUrl: DockerLocalJwksUrlSchema,\n      })\n    : JwtExecutionHostMcpCapabilityVerifierConfigSchema;\n  return schema.parse(input);\n}\n"]}

package/dist/host/types.d.ts

@@ -58,5 +58,7 @@ export type JwtExecutionHostMcpCapabilityVerifierConfig = Readonly<{
 export type ExecutionHostJwtVerifierOptions = Readonly<{
     keyResolver?: JWTVerifyGetKey;
     now?: () => Date;
+    /** Local isolated containers may fetch adopter JWKS through this exact alias. */
+    allowDockerLocalHost?: boolean;
 }>;
 //# sourceMappingURL=types.d.ts.map

package/dist/host/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAC5C,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,uCAAuC,+CAK1C,CAAC;AAEX,MAAM,MAAM,yBAAyB,GACnC,OAAO,uCAAuC,CAAC,MAAM,CAAC,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CAAC;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACxD,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,GAAG,CAAC;IACtB,sBAAsB,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC7D,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,MAAM,CAAC;CACxC,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,6CAA6C,GAAG,QAAQ,CAAC;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,yBAAyB,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,WAAW,kCAAkC;IACjD,MAAM,CACJ,OAAO,EAAE,6CAA6C,GACrD,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAED,MAAM,MAAM,2CAA2C,GAAG,QAAQ,CAAC;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,GAAG,CAAC;IACb,aAAa,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACpD,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAC5C,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,uCAAuC,+CAK1C,CAAC;AAEX,MAAM,MAAM,yBAAyB,GACnC,OAAO,uCAAuC,CAAC,MAAM,CAAC,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CAAC;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACxD,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,GAAG,CAAC;IACtB,sBAAsB,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC7D,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,MAAM,CAAC;CACxC,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,6CAA6C,GAAG,QAAQ,CAAC;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,yBAAyB,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,WAAW,kCAAkC;IACjD,MAAM,CACJ,OAAO,EAAE,6CAA6C,GACrD,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAED,MAAM,MAAM,2CAA2C,GAAG,QAAQ,CAAC;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,GAAG,CAAC;IACb,aAAa,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACpD,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC,CAAC"}

package/dist/host/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,uCAAuC,GAAG;IACrD,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACC,CAAC","sourcesContent":["import type { JWTVerifyGetKey } from 'jose';\nimport type {\n  ExecutionScope,\n  HostedExecutionWorkflow,\n} from '../contracts/index.js';\n\nexport const EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS = [\n  'RS256',\n  'PS256',\n  'ES256',\n  'EdDSA',\n] as const;\n\nexport type ExecutionHostJwtAlgorithm =\n  typeof EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS[number];\n\n/** Authority established from one signed assertion and its request binding. */\nexport type VerifiedExecutionIdentity = Readonly<{\n  scope: Readonly<ExecutionScope>;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  issuedAt: string;\n  expiresAt: string;\n}>;\n\nexport type ExecutionIdentityVerificationRequest = Readonly<{\n  assertion: string;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n}>;\n\nexport interface ExecutionIdentityVerifier {\n  verify(\n    request: ExecutionIdentityVerificationRequest,\n  ): Promise<VerifiedExecutionIdentity>;\n}\n\nexport type JwtExecutionIdentityVerifierConfig = Readonly<{\n  executionIssuer: string;\n  executionAudience: string;\n  executionJwksUrl: URL;\n  executionJwtAlgorithms: readonly ExecutionHostJwtAlgorithm[];\n  trustedAdopterId: string;\n  maxAssertionAgeSeconds: number;\n  assertionClockToleranceSeconds: number;\n}>;\n\n/** Opaque MCP bearer whose claims match the independently verified execution. */\nexport type VerifiedExecutionHostMcpCapability = Readonly<{\n  assertion: string;\n  capabilityId: string;\n  serverId: string;\n  allowedTools: readonly string[];\n  issuedAt: string;\n  expiresAt: string;\n}>;\n\nexport type ExecutionHostMcpCapabilityVerificationRequest = Readonly<{\n  assertion: string;\n  identity: VerifiedExecutionIdentity;\n}>;\n\nexport interface ExecutionHostMcpCapabilityVerifier {\n  verify(\n    request: ExecutionHostMcpCapabilityVerificationRequest,\n  ): Promise<VerifiedExecutionHostMcpCapability>;\n}\n\nexport type JwtExecutionHostMcpCapabilityVerifierConfig = Readonly<{\n  issuer: string;\n  audience: string;\n  jwksUrl: URL;\n  jwtAlgorithms: readonly ExecutionHostJwtAlgorithm[];\n  trustedAdopterId: string;\n  serverId: string;\n  maxCapabilityAgeSeconds: number;\n  clockToleranceSeconds: number;\n}>;\n\nexport type ExecutionHostJwtVerifierOptions = Readonly<{\n  keyResolver?: JWTVerifyGetKey;\n  now?: () => Date;\n}>;\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,uCAAuC,GAAG;IACrD,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACC,CAAC","sourcesContent":["import type { JWTVerifyGetKey } from 'jose';\nimport type {\n  ExecutionScope,\n  HostedExecutionWorkflow,\n} from '../contracts/index.js';\n\nexport const EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS = [\n  'RS256',\n  'PS256',\n  'ES256',\n  'EdDSA',\n] as const;\n\nexport type ExecutionHostJwtAlgorithm =\n  typeof EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS[number];\n\n/** Authority established from one signed assertion and its request binding. */\nexport type VerifiedExecutionIdentity = Readonly<{\n  scope: Readonly<ExecutionScope>;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  issuedAt: string;\n  expiresAt: string;\n}>;\n\nexport type ExecutionIdentityVerificationRequest = Readonly<{\n  assertion: string;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n}>;\n\nexport interface ExecutionIdentityVerifier {\n  verify(\n    request: ExecutionIdentityVerificationRequest,\n  ): Promise<VerifiedExecutionIdentity>;\n}\n\nexport type JwtExecutionIdentityVerifierConfig = Readonly<{\n  executionIssuer: string;\n  executionAudience: string;\n  executionJwksUrl: URL;\n  executionJwtAlgorithms: readonly ExecutionHostJwtAlgorithm[];\n  trustedAdopterId: string;\n  maxAssertionAgeSeconds: number;\n  assertionClockToleranceSeconds: number;\n}>;\n\n/** Opaque MCP bearer whose claims match the independently verified execution. */\nexport type VerifiedExecutionHostMcpCapability = Readonly<{\n  assertion: string;\n  capabilityId: string;\n  serverId: string;\n  allowedTools: readonly string[];\n  issuedAt: string;\n  expiresAt: string;\n}>;\n\nexport type ExecutionHostMcpCapabilityVerificationRequest = Readonly<{\n  assertion: string;\n  identity: VerifiedExecutionIdentity;\n}>;\n\nexport interface ExecutionHostMcpCapabilityVerifier {\n  verify(\n    request: ExecutionHostMcpCapabilityVerificationRequest,\n  ): Promise<VerifiedExecutionHostMcpCapability>;\n}\n\nexport type JwtExecutionHostMcpCapabilityVerifierConfig = Readonly<{\n  issuer: string;\n  audience: string;\n  jwksUrl: URL;\n  jwtAlgorithms: readonly ExecutionHostJwtAlgorithm[];\n  trustedAdopterId: string;\n  serverId: string;\n  maxCapabilityAgeSeconds: number;\n  clockToleranceSeconds: number;\n}>;\n\nexport type ExecutionHostJwtVerifierOptions = Readonly<{\n  keyResolver?: JWTVerifyGetKey;\n  now?: () => Date;\n  /** Local isolated containers may fetch adopter JWKS through this exact alias. */\n  allowDockerLocalHost?: boolean;\n}>;\n"]}

package/dist/http-sse/direct-http-execution-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"direct-http-execution-host.d.ts","sourceRoot":"","sources":["../../src/http-sse/direct-http-execution-host.ts"],"names":[],"mappings":"AACA,OAAO,EAmBL,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EACV,6BAA6B,EAC7B,aAAa,EACb,6BAA6B,EAC7B,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAqCpB;;;GAGG;AACH,qBAAa,uBACb,YAAW,aAAa,EAAE,sBAAsB;;gBAKlC,MAAM,EAAE,6BAA6B;IAO1C,sBAAsB,CAC3B,QAAQ,EAAE,6BAA6B,GACtC,aAAa,CAAC,wBAAwB,CAAC;IAoBnC,mBAAmB,CACxB,QAAQ,EAAE,0BAA0B,GACnC,aAAa,CAAC,iCAAiC,CAAC;CAmEpD"}
+{"version":3,"file":"direct-http-execution-host.d.ts","sourceRoot":"","sources":["../../src/http-sse/direct-http-execution-host.ts"],"names":[],"mappings":"AACA,OAAO,EAqBL,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EACV,6BAA6B,EAC7B,aAAa,EACb,6BAA6B,EAC7B,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAqCpB;;;GAGG;AACH,qBAAa,uBACb,YAAW,aAAa,EAAE,sBAAsB;;gBAKlC,MAAM,EAAE,6BAA6B;IAO1C,sBAAsB,CAC3B,QAAQ,EAAE,6BAA6B,GACtC,aAAa,CAAC,wBAAwB,CAAC;IAoBnC,mBAAmB,CACxB,QAAQ,EAAE,0BAA0B,GACnC,aAAa,CAAC,iCAAiC,CAAC;CAmEpD"}

package/dist/http-sse/direct-http-execution-host.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { AGENTCORE_RUNTIME_SESSION_HEADER, CONVERSATION_TURN_WORKFLOW, EXECUTION_ASSERTION_HEADER, EXECUTION_CONTRACT_VERSION, EXECUTION_HOST_LOCAL_TOKEN_HEADER, ExecutionHostConversationTurnRequestSchema, ExecutionHostHeartbeatStreamEventSchema, ExecutionHostHeartbeatTaskRequestSchema, ExecutionHostStreamEventSchema, HEARTBEAT_TASK_WORKFLOW, MCP_CAPABILITY_HEADER, MODEL_API_KEY_HEADER, OpaqueIdSchema, RuntimeSessionIdSchema, TimestampSchema, isExecutionHostHeartbeatTerminalEvent, isExecutionHostTerminalEvent, isSafeWebUrl, } from '../contracts/index.js';
+import { AGENTCORE_RUNTIME_SESSION_HEADER, CONVERSATION_TURN_WORKFLOW, EXECUTION_ASSERTION_HEADER, EXECUTION_CONTRACT_VERSION, EXECUTION_HOST_LOCAL_TOKEN_HEADER, ExecutionHostConversationTurnRequestSchema, ExecutionHostHeartbeatStreamEventSchema, ExecutionHostHeartbeatTaskRequestSchema, ExecutionHostModelCredentialSchema, ExecutionHostStreamEventSchema, HEARTBEAT_TASK_WORKFLOW, MCP_CAPABILITY_HEADER, MODEL_CREDENTIAL_HEADER, OpaqueIdSchema, RuntimeSessionIdSchema, TimestampSchema, isExecutionHostHeartbeatTerminalEvent, isExecutionHostTerminalEvent, isDockerLocalWebUrl, isSafeWebUrl, } from '../contracts/index.js';
 import { ExecutionHostInvocationCancelledError, ExecutionHostRejectedError, } from './errors.js';
 import { readExecutionHostEventStream, toExecutionHostTransportError, } from '../internal/execution-host-event-stream.js';
 import { readBoundedJsonResponse } from '../internal/http-response.js';
@@ -9,7 +9,7 @@ const InvocationAuthoritySchema = z.object({
     runtimeSessionId: RuntimeSessionIdSchema,
     executionAssertion: z.string().min(32).max(4_096),
     mcpCapability: z.string().min(32).max(4_096).optional(),
-    modelApiKey: SecretSchema,
+    modelCredential: ExecutionHostModelCredentialSchema,
     signal: z.custom((value) => value instanceof AbortSignal, 'signal must be an AbortSignal').optional(),
 }).strict();
 const ConversationTurnSchema = InvocationAuthoritySchema.extend({
@@ -36,7 +36,7 @@ export class DirectHttpExecutionHost {
     #fetch;
     #localToken;
     constructor(config) {
-        assertSafeBaseUrl(config.baseUrl);
+        assertSafeBaseUrl(config.baseUrl, config.allowDockerLocalHost === true);
         this.#localToken = SecretSchema.parse(config.localToken);
         this.#endpoint = new URL('invocations', withTrailingSlash(config.baseUrl));
         this.#fetch = config.fetch ?? globalThis.fetch;
@@ -115,7 +115,7 @@ function createSensitiveHeaders(input, localToken) {
         'Content-Type': 'application/json',
         [AGENTCORE_RUNTIME_SESSION_HEADER]: input.runtimeSessionId,
         [EXECUTION_HOST_LOCAL_TOKEN_HEADER]: localToken,
-        [MODEL_API_KEY_HEADER]: input.modelApiKey,
+        [MODEL_CREDENTIAL_HEADER]: JSON.stringify(input.modelCredential),
         [EXECUTION_ASSERTION_HEADER]: input.executionAssertion,
     });
     if (input.mcpCapability) {
@@ -132,9 +132,10 @@ async function readSafeErrorCode(response) {
         return 'unknown';
     }
 }
-function assertSafeBaseUrl(url) {
-    if (!isSafeWebUrl(url)) {
-        throw new Error('Direct Execution Host URL must use HTTPS or loopback HTTP and contain no credentials, query, or fragment.');
+function assertSafeBaseUrl(url, allowDockerLocalHost) {
+    if (!isSafeWebUrl(url)
+        && !(allowDockerLocalHost && isDockerLocalWebUrl(url))) {
+        throw new Error('Direct Execution Host URL must use HTTPS or loopback HTTP; Docker local-host HTTP requires an explicit opt-in; URLs must contain no credentials, query, or fragment.');
     }
 }
 function withTrailingSlash(url) {

package/dist/http-sse/direct-http-execution-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"direct-http-execution-host.js","sourceRoot":"","sources":["../../src/http-sse/direct-http-execution-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,iCAAiC,EACjC,0CAA0C,EAC1C,uCAAuC,EACvC,uCAAuC,EACvC,8BAA8B,EAC9B,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,qCAAqC,EACrC,4BAA4B,EAC5B,YAAY,GAGb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qCAAqC,EACrC,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAQrB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAClD,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,gBAAgB,EAAE,sBAAsB;IACxC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACvD,WAAW,EAAE,YAAY;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,WAAW,EACvC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,sBAAsB,GAAG,yBAAyB,CAAC,MAAM,CAAC;IAC9D,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC7C,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,MAAM,CAC1D,uCAAuC,CAAC,IAAI,CAAC;IAC3C,aAAa,EAAE,IAAI;IACnB,IAAI,EAAE,IAAI;CACX,CAAC,CAAC,KAAK,CACT,CAAC,MAAM,EAAE,CAAC;AACX,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;QACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAEzB,SAAS,CAAM;IACf,MAAM,CAAe;IACrB,WAAW,CAAS;IAE7B,YAAY,MAAqC;QAC/C,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,CAAC,sBAAsB,CAC3B,QAAuC;QAEvC,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,qCAAqC,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,0CAA0C,CAAC,KAAK,CAAC;YAC5D,aAAa,EAAE,0BAA0B;YACzC,IAAI,EAAE,0BAA0B;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAC3B,KAAK,EACL,IAAI,EACJ,8BAA8B,EAC9B,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,mBAAmB,CACxB,QAAoC;QAEpC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,qCAAqC,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,uCAAuC,CAAC,KAAK,CAAC;YACzD,aAAa,EAAE,0BAA0B;YACzC,IAAI,EAAE,uBAAuB;YAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,KAAK,CAAC,eAAe;gBACvB,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,gBAAgB;gBACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAC3B,KAAK,EACL,IAAI,EACJ,uCAAuC,EACvC,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,iBAAiB,CACtB,KAAsB,EACtB,IAAa,EACb,MAAyB,EACzB,UAAsC;QAEtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,0BAA0B,CAClC,QAAQ,CAAC,MAAM,EACf,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAClC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,4BAA4B,CAAC;YAClC,QAAQ;YACR,MAAM;YACN,UAAU;YACV,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAsB,EAAE,IAAa;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC;gBACxD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF;AAmBD,SAAS,sBAAsB,CAC7B,KAAsB,EACtB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QAC1B,MAAM,EAAE,mBAAmB;QAC3B,cAAc,EAAE,kBAAkB;QAClC,CAAC,gCAAgC,CAAC,EAAE,KAAK,CAAC,gBAAgB;QAC1D,CAAC,iCAAiC,CAAC,EAAE,UAAU;QAC/C,CAAC,oBAAoB,CAAC,EAAE,KAAK,CAAC,WAAW;QACzC,CAAC,0BAA0B,CAAC,EAAE,KAAK,CAAC,kBAAkB;KACvD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,uBAAuB,CACnE,QAAQ,EACR,oBAAoB,CACrB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ;IACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ;IACjC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrD,CAAC,CAAC,UAAU,CAAC,QAAQ;QACrB,CAAC,CAAC,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC;IAC9B,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  AGENTCORE_RUNTIME_SESSION_HEADER,\n  CONVERSATION_TURN_WORKFLOW,\n  EXECUTION_ASSERTION_HEADER,\n  EXECUTION_CONTRACT_VERSION,\n  EXECUTION_HOST_LOCAL_TOKEN_HEADER,\n  ExecutionHostConversationTurnRequestSchema,\n  ExecutionHostHeartbeatStreamEventSchema,\n  ExecutionHostHeartbeatTaskRequestSchema,\n  ExecutionHostStreamEventSchema,\n  HEARTBEAT_TASK_WORKFLOW,\n  MCP_CAPABILITY_HEADER,\n  MODEL_API_KEY_HEADER,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n  TimestampSchema,\n  isExecutionHostHeartbeatTerminalEvent,\n  isExecutionHostTerminalEvent,\n  isSafeWebUrl,\n  type ExecutionHostHeartbeatStreamEvent,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport {\n  ExecutionHostInvocationCancelledError,\n  ExecutionHostRejectedError,\n} from './errors.js';\nimport type {\n  DirectHttpExecutionHostConfig,\n  ExecutionHost,\n  ExecutionHostConversationTurn,\n  ExecutionHostHeartbeatTask,\n  HeartbeatExecutionHost,\n} from './types.js';\nimport {\n  readExecutionHostEventStream,\n  toExecutionHostTransportError,\n} from '../internal/execution-host-event-stream.js';\nimport { readBoundedJsonResponse } from '../internal/http-response.js';\n\nconst MAX_ERROR_BODY_BYTES = 16_384;\nconst SecretSchema = z.string().min(8).max(4_096);\nconst InvocationAuthoritySchema = z.object({\n  runtimeSessionId: RuntimeSessionIdSchema,\n  executionAssertion: z.string().min(32).max(4_096),\n  mcpCapability: z.string().min(32).max(4_096).optional(),\n  modelApiKey: SecretSchema,\n  signal: z.custom<AbortSignal>(\n    (value) => value instanceof AbortSignal,\n    'signal must be an AbortSignal',\n  ).optional(),\n}).strict();\nconst ConversationTurnSchema = InvocationAuthoritySchema.extend({\n  invocationId: OpaqueIdSchema,\n  prompt: z.string().trim().min(1).max(200_000),\n  deadlineAt: TimestampSchema.optional(),\n}).strict();\nconst HeartbeatTaskSchema = InvocationAuthoritySchema.extend(\n  ExecutionHostHeartbeatTaskRequestSchema.omit({\n    schemaVersion: true,\n    kind: true,\n  }).shape,\n).strict();\nconst ApiErrorSchema = z.object({\n  error: z.object({\n    code: z.string().min(1).max(128).regex(/^[a-z0-9_]+$/),\n    message: z.string(),\n  }).strict(),\n}).strict();\n\n/**\n * Strict direct-development HTTP/SSE adapter for the Execution Host v1 wire.\n * It deliberately owns neither AWS SDK nor SigV4 behavior.\n */\nexport class DirectHttpExecutionHost\nimplements ExecutionHost, HeartbeatExecutionHost {\n  readonly #endpoint: URL;\n  readonly #fetch: typeof fetch;\n  readonly #localToken: string;\n\n  constructor(config: DirectHttpExecutionHostConfig) {\n    assertSafeBaseUrl(config.baseUrl);\n    this.#localToken = SecretSchema.parse(config.localToken);\n    this.#endpoint = new URL('invocations', withTrailingSlash(config.baseUrl));\n    this.#fetch = config.fetch ?? globalThis.fetch;\n  }\n\n  async *streamConversationTurn(\n    rawInput: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent> {\n    const input = ConversationTurnSchema.parse(rawInput);\n    if (input.signal?.aborted) {\n      throw new ExecutionHostInvocationCancelledError();\n    }\n    const body = ExecutionHostConversationTurnRequestSchema.parse({\n      schemaVersion: EXECUTION_CONTRACT_VERSION,\n      kind: CONVERSATION_TURN_WORKFLOW,\n      invocationId: input.invocationId,\n      prompt: input.prompt,\n      ...(input.deadlineAt ? { deadlineAt: input.deadlineAt } : {}),\n    });\n    yield* this.#streamInvocation(\n      input,\n      body,\n      ExecutionHostStreamEventSchema,\n      isExecutionHostTerminalEvent,\n    );\n  }\n\n  async *streamHeartbeatTask(\n    rawInput: ExecutionHostHeartbeatTask,\n  ): AsyncIterable<ExecutionHostHeartbeatStreamEvent> {\n    const input = HeartbeatTaskSchema.parse(rawInput);\n    if (input.signal?.aborted) {\n      throw new ExecutionHostInvocationCancelledError();\n    }\n    const body = ExecutionHostHeartbeatTaskRequestSchema.parse({\n      schemaVersion: EXECUTION_CONTRACT_VERSION,\n      kind: HEARTBEAT_TASK_WORKFLOW,\n      invocationId: input.invocationId,\n      taskId: input.taskId,\n      task: input.task,\n      ...(input.checkpoint ? { checkpoint: input.checkpoint } : {}),\n      runContext: input.runContext,\n      ...(input.model ? { model: input.model } : {}),\n      ...(input.reasoningEffort\n        ? { reasoningEffort: input.reasoningEffort }\n        : {}),\n      ...(input.maxSteps !== undefined ? { maxSteps: input.maxSteps } : {}),\n      ...(input.searchIgnoreDirs\n        ? { searchIgnoreDirs: input.searchIgnoreDirs }\n        : {}),\n      ...(input.systemContext ? { systemContext: input.systemContext } : {}),\n      ...(input.deadlineAt ? { deadlineAt: input.deadlineAt } : {}),\n    });\n    yield* this.#streamInvocation(\n      input,\n      body,\n      ExecutionHostHeartbeatStreamEventSchema,\n      isExecutionHostHeartbeatTerminalEvent,\n    );\n  }\n\n  async *#streamInvocation<TEvent extends ValidatedStreamEvent>(\n    input: InvocationInput,\n    body: unknown,\n    schema: z.ZodType<TEvent>,\n    isTerminal: (event: TEvent) => boolean,\n  ): AsyncIterable<TEvent> {\n    const response = await this.#invoke(input, body);\n    if (!response.ok) {\n      throw new ExecutionHostRejectedError(\n        response.status,\n        await readSafeErrorCode(response),\n      );\n    }\n    yield* readExecutionHostEventStream({\n      response,\n      schema,\n      isTerminal,\n      invocationId: input.invocationId,\n      signal: input.signal,\n    });\n  }\n\n  async #invoke(input: InvocationInput, body: unknown): Promise<Response> {\n    try {\n      return await this.#fetch(this.#endpoint, {\n        method: 'POST',\n        redirect: 'error',\n        signal: input.signal,\n        headers: createSensitiveHeaders(input, this.#localToken),\n        body: JSON.stringify(body),\n      });\n    } catch (error) {\n      throw toExecutionHostTransportError(error, input.signal);\n    }\n  }\n}\n\ntype InvocationInput = {\n  invocationId: string;\n  runtimeSessionId: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelApiKey: string;\n  signal?: AbortSignal;\n};\n\ntype ValidatedStreamEvent = {\n  kind: string;\n  invocationId: string;\n  runId: string;\n  sequence: number;\n  timestamp: string;\n};\n\nfunction createSensitiveHeaders(\n  input: InvocationInput,\n  localToken: string,\n): Headers {\n  const headers = new Headers({\n    Accept: 'text/event-stream',\n    'Content-Type': 'application/json',\n    [AGENTCORE_RUNTIME_SESSION_HEADER]: input.runtimeSessionId,\n    [EXECUTION_HOST_LOCAL_TOKEN_HEADER]: localToken,\n    [MODEL_API_KEY_HEADER]: input.modelApiKey,\n    [EXECUTION_ASSERTION_HEADER]: input.executionAssertion,\n  });\n  if (input.mcpCapability) {\n    headers.set(MCP_CAPABILITY_HEADER, input.mcpCapability);\n  }\n  return headers;\n}\n\nasync function readSafeErrorCode(response: Response): Promise<string> {\n  try {\n    const parsed = ApiErrorSchema.safeParse(await readBoundedJsonResponse(\n      response,\n      MAX_ERROR_BODY_BYTES,\n    ));\n    return parsed.success ? parsed.data.error.code : 'unknown';\n  } catch {\n    return 'unknown';\n  }\n}\n\nfunction assertSafeBaseUrl(url: URL): void {\n  if (!isSafeWebUrl(url)) {\n    throw new Error(\n      'Direct Execution Host URL must use HTTPS or loopback HTTP and contain no credentials, query, or fragment.',\n    );\n  }\n}\n\nfunction withTrailingSlash(url: URL): URL {\n  const normalized = new URL(url);\n  normalized.pathname = normalized.pathname.endsWith('/')\n    ? normalized.pathname\n    : `${normalized.pathname}/`;\n  return normalized;\n}\n"]}
+{"version":3,"file":"direct-http-execution-host.js","sourceRoot":"","sources":["../../src/http-sse/direct-http-execution-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,iCAAiC,EACjC,0CAA0C,EAC1C,uCAAuC,EACvC,uCAAuC,EACvC,kCAAkC,EAClC,8BAA8B,EAC9B,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,qCAAqC,EACrC,4BAA4B,EAC5B,mBAAmB,EACnB,YAAY,GAGb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qCAAqC,EACrC,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAQrB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAClD,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,gBAAgB,EAAE,sBAAsB;IACxC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACvD,eAAe,EAAE,kCAAkC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,WAAW,EACvC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,sBAAsB,GAAG,yBAAyB,CAAC,MAAM,CAAC;IAC9D,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC7C,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,MAAM,CAC1D,uCAAuC,CAAC,IAAI,CAAC;IAC3C,aAAa,EAAE,IAAI;IACnB,IAAI,EAAE,IAAI;CACX,CAAC,CAAC,KAAK,CACT,CAAC,MAAM,EAAE,CAAC;AACX,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;QACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAEzB,SAAS,CAAM;IACf,MAAM,CAAe;IACrB,WAAW,CAAS;IAE7B,YAAY,MAAqC;QAC/C,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,oBAAoB,KAAK,IAAI,CAAC,CAAC;QACxE,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,CAAC,sBAAsB,CAC3B,QAAuC;QAEvC,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,qCAAqC,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,0CAA0C,CAAC,KAAK,CAAC;YAC5D,aAAa,EAAE,0BAA0B;YACzC,IAAI,EAAE,0BAA0B;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAC3B,KAAK,EACL,IAAI,EACJ,8BAA8B,EAC9B,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,mBAAmB,CACxB,QAAoC;QAEpC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,qCAAqC,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,uCAAuC,CAAC,KAAK,CAAC;YACzD,aAAa,EAAE,0BAA0B;YACzC,IAAI,EAAE,uBAAuB;YAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,KAAK,CAAC,eAAe;gBACvB,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,gBAAgB;gBACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAC3B,KAAK,EACL,IAAI,EACJ,uCAAuC,EACvC,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,iBAAiB,CACtB,KAAsB,EACtB,IAAa,EACb,MAAyB,EACzB,UAAsC;QAEtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,0BAA0B,CAClC,QAAQ,CAAC,MAAM,EACf,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAClC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,4BAA4B,CAAC;YAClC,QAAQ;YACR,MAAM;YACN,UAAU;YACV,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAsB,EAAE,IAAa;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC;gBACxD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF;AAmBD,SAAS,sBAAsB,CAC7B,KAAsB,EACtB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QAC1B,MAAM,EAAE,mBAAmB;QAC3B,cAAc,EAAE,kBAAkB;QAClC,CAAC,gCAAgC,CAAC,EAAE,KAAK,CAAC,gBAAgB;QAC1D,CAAC,iCAAiC,CAAC,EAAE,UAAU;QAC/C,CAAC,uBAAuB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC;QAChE,CAAC,0BAA0B,CAAC,EAAE,KAAK,CAAC,kBAAkB;KACvD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,uBAAuB,CACnE,QAAQ,EACR,oBAAoB,CACrB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ,EAAE,oBAA6B;IAChE,IACE,CAAC,YAAY,CAAC,GAAG,CAAC;WACf,CAAC,CAAC,oBAAoB,IAAI,mBAAmB,CAAC,GAAG,CAAC,CAAC,EACtD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sKAAsK,CACvK,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ;IACjC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrD,CAAC,CAAC,UAAU,CAAC,QAAQ;QACrB,CAAC,CAAC,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC;IAC9B,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  AGENTCORE_RUNTIME_SESSION_HEADER,\n  CONVERSATION_TURN_WORKFLOW,\n  EXECUTION_ASSERTION_HEADER,\n  EXECUTION_CONTRACT_VERSION,\n  EXECUTION_HOST_LOCAL_TOKEN_HEADER,\n  ExecutionHostConversationTurnRequestSchema,\n  ExecutionHostHeartbeatStreamEventSchema,\n  ExecutionHostHeartbeatTaskRequestSchema,\n  ExecutionHostModelCredentialSchema,\n  ExecutionHostStreamEventSchema,\n  HEARTBEAT_TASK_WORKFLOW,\n  MCP_CAPABILITY_HEADER,\n  MODEL_CREDENTIAL_HEADER,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n  TimestampSchema,\n  isExecutionHostHeartbeatTerminalEvent,\n  isExecutionHostTerminalEvent,\n  isDockerLocalWebUrl,\n  isSafeWebUrl,\n  type ExecutionHostHeartbeatStreamEvent,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport {\n  ExecutionHostInvocationCancelledError,\n  ExecutionHostRejectedError,\n} from './errors.js';\nimport type {\n  DirectHttpExecutionHostConfig,\n  ExecutionHost,\n  ExecutionHostConversationTurn,\n  ExecutionHostHeartbeatTask,\n  HeartbeatExecutionHost,\n} from './types.js';\nimport {\n  readExecutionHostEventStream,\n  toExecutionHostTransportError,\n} from '../internal/execution-host-event-stream.js';\nimport { readBoundedJsonResponse } from '../internal/http-response.js';\n\nconst MAX_ERROR_BODY_BYTES = 16_384;\nconst SecretSchema = z.string().min(8).max(4_096);\nconst InvocationAuthoritySchema = z.object({\n  runtimeSessionId: RuntimeSessionIdSchema,\n  executionAssertion: z.string().min(32).max(4_096),\n  mcpCapability: z.string().min(32).max(4_096).optional(),\n  modelCredential: ExecutionHostModelCredentialSchema,\n  signal: z.custom<AbortSignal>(\n    (value) => value instanceof AbortSignal,\n    'signal must be an AbortSignal',\n  ).optional(),\n}).strict();\nconst ConversationTurnSchema = InvocationAuthoritySchema.extend({\n  invocationId: OpaqueIdSchema,\n  prompt: z.string().trim().min(1).max(200_000),\n  deadlineAt: TimestampSchema.optional(),\n}).strict();\nconst HeartbeatTaskSchema = InvocationAuthoritySchema.extend(\n  ExecutionHostHeartbeatTaskRequestSchema.omit({\n    schemaVersion: true,\n    kind: true,\n  }).shape,\n).strict();\nconst ApiErrorSchema = z.object({\n  error: z.object({\n    code: z.string().min(1).max(128).regex(/^[a-z0-9_]+$/),\n    message: z.string(),\n  }).strict(),\n}).strict();\n\n/**\n * Strict direct-development HTTP/SSE adapter for the Execution Host v1 wire.\n * It deliberately owns neither AWS SDK nor SigV4 behavior.\n */\nexport class DirectHttpExecutionHost\nimplements ExecutionHost, HeartbeatExecutionHost {\n  readonly #endpoint: URL;\n  readonly #fetch: typeof fetch;\n  readonly #localToken: string;\n\n  constructor(config: DirectHttpExecutionHostConfig) {\n    assertSafeBaseUrl(config.baseUrl, config.allowDockerLocalHost === true);\n    this.#localToken = SecretSchema.parse(config.localToken);\n    this.#endpoint = new URL('invocations', withTrailingSlash(config.baseUrl));\n    this.#fetch = config.fetch ?? globalThis.fetch;\n  }\n\n  async *streamConversationTurn(\n    rawInput: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent> {\n    const input = ConversationTurnSchema.parse(rawInput);\n    if (input.signal?.aborted) {\n      throw new ExecutionHostInvocationCancelledError();\n    }\n    const body = ExecutionHostConversationTurnRequestSchema.parse({\n      schemaVersion: EXECUTION_CONTRACT_VERSION,\n      kind: CONVERSATION_TURN_WORKFLOW,\n      invocationId: input.invocationId,\n      prompt: input.prompt,\n      ...(input.deadlineAt ? { deadlineAt: input.deadlineAt } : {}),\n    });\n    yield* this.#streamInvocation(\n      input,\n      body,\n      ExecutionHostStreamEventSchema,\n      isExecutionHostTerminalEvent,\n    );\n  }\n\n  async *streamHeartbeatTask(\n    rawInput: ExecutionHostHeartbeatTask,\n  ): AsyncIterable<ExecutionHostHeartbeatStreamEvent> {\n    const input = HeartbeatTaskSchema.parse(rawInput);\n    if (input.signal?.aborted) {\n      throw new ExecutionHostInvocationCancelledError();\n    }\n    const body = ExecutionHostHeartbeatTaskRequestSchema.parse({\n      schemaVersion: EXECUTION_CONTRACT_VERSION,\n      kind: HEARTBEAT_TASK_WORKFLOW,\n      invocationId: input.invocationId,\n      taskId: input.taskId,\n      task: input.task,\n      ...(input.checkpoint ? { checkpoint: input.checkpoint } : {}),\n      runContext: input.runContext,\n      ...(input.model ? { model: input.model } : {}),\n      ...(input.reasoningEffort\n        ? { reasoningEffort: input.reasoningEffort }\n        : {}),\n      ...(input.maxSteps !== undefined ? { maxSteps: input.maxSteps } : {}),\n      ...(input.searchIgnoreDirs\n        ? { searchIgnoreDirs: input.searchIgnoreDirs }\n        : {}),\n      ...(input.systemContext ? { systemContext: input.systemContext } : {}),\n      ...(input.deadlineAt ? { deadlineAt: input.deadlineAt } : {}),\n    });\n    yield* this.#streamInvocation(\n      input,\n      body,\n      ExecutionHostHeartbeatStreamEventSchema,\n      isExecutionHostHeartbeatTerminalEvent,\n    );\n  }\n\n  async *#streamInvocation<TEvent extends ValidatedStreamEvent>(\n    input: InvocationInput,\n    body: unknown,\n    schema: z.ZodType<TEvent>,\n    isTerminal: (event: TEvent) => boolean,\n  ): AsyncIterable<TEvent> {\n    const response = await this.#invoke(input, body);\n    if (!response.ok) {\n      throw new ExecutionHostRejectedError(\n        response.status,\n        await readSafeErrorCode(response),\n      );\n    }\n    yield* readExecutionHostEventStream({\n      response,\n      schema,\n      isTerminal,\n      invocationId: input.invocationId,\n      signal: input.signal,\n    });\n  }\n\n  async #invoke(input: InvocationInput, body: unknown): Promise<Response> {\n    try {\n      return await this.#fetch(this.#endpoint, {\n        method: 'POST',\n        redirect: 'error',\n        signal: input.signal,\n        headers: createSensitiveHeaders(input, this.#localToken),\n        body: JSON.stringify(body),\n      });\n    } catch (error) {\n      throw toExecutionHostTransportError(error, input.signal);\n    }\n  }\n}\n\ntype InvocationInput = {\n  invocationId: string;\n  runtimeSessionId: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelCredential: z.infer<typeof ExecutionHostModelCredentialSchema>;\n  signal?: AbortSignal;\n};\n\ntype ValidatedStreamEvent = {\n  kind: string;\n  invocationId: string;\n  runId: string;\n  sequence: number;\n  timestamp: string;\n};\n\nfunction createSensitiveHeaders(\n  input: InvocationInput,\n  localToken: string,\n): Headers {\n  const headers = new Headers({\n    Accept: 'text/event-stream',\n    'Content-Type': 'application/json',\n    [AGENTCORE_RUNTIME_SESSION_HEADER]: input.runtimeSessionId,\n    [EXECUTION_HOST_LOCAL_TOKEN_HEADER]: localToken,\n    [MODEL_CREDENTIAL_HEADER]: JSON.stringify(input.modelCredential),\n    [EXECUTION_ASSERTION_HEADER]: input.executionAssertion,\n  });\n  if (input.mcpCapability) {\n    headers.set(MCP_CAPABILITY_HEADER, input.mcpCapability);\n  }\n  return headers;\n}\n\nasync function readSafeErrorCode(response: Response): Promise<string> {\n  try {\n    const parsed = ApiErrorSchema.safeParse(await readBoundedJsonResponse(\n      response,\n      MAX_ERROR_BODY_BYTES,\n    ));\n    return parsed.success ? parsed.data.error.code : 'unknown';\n  } catch {\n    return 'unknown';\n  }\n}\n\nfunction assertSafeBaseUrl(url: URL, allowDockerLocalHost: boolean): void {\n  if (\n    !isSafeWebUrl(url)\n    && !(allowDockerLocalHost && isDockerLocalWebUrl(url))\n  ) {\n    throw new Error(\n      'Direct Execution Host URL must use HTTPS or loopback HTTP; Docker local-host HTTP requires an explicit opt-in; URLs must contain no credentials, query, or fragment.',\n    );\n  }\n}\n\nfunction withTrailingSlash(url: URL): URL {\n  const normalized = new URL(url);\n  normalized.pathname = normalized.pathname.endsWith('/')\n    ? normalized.pathname\n    : `${normalized.pathname}/`;\n  return normalized;\n}\n"]}

package/dist/http-sse/types.d.ts

@@ -1,4 +1,4 @@
-import type { ExecutionHostHeartbeatStreamEvent, ExecutionHostHeartbeatTaskRequest, ExecutionHostStreamEvent } from '../contracts/index.js';
+import type { ExecutionHostModelCredential, ExecutionHostHeartbeatStreamEvent, ExecutionHostHeartbeatTaskRequest, ExecutionHostStreamEvent } from '../contracts/index.js';
 export type ExecutionHostConversationTurn = {
     invocationId: string;
     runtimeSessionId: string;
@@ -6,7 +6,7 @@ export type ExecutionHostConversationTurn = {
     deadlineAt?: string;
     executionAssertion: string;
     mcpCapability?: string;
-    modelApiKey: string;
+    modelCredential: ExecutionHostModelCredential;
     signal?: AbortSignal;
 };
 export interface ExecutionHost {
@@ -16,7 +16,7 @@ export type ExecutionHostHeartbeatTask = Omit<ExecutionHostHeartbeatTaskRequest,
     runtimeSessionId: string;
     executionAssertion: string;
     mcpCapability?: string;
-    modelApiKey: string;
+    modelCredential: ExecutionHostModelCredential;
     signal?: AbortSignal;
 };
 export interface HeartbeatExecutionHost {
@@ -25,6 +25,8 @@ export interface HeartbeatExecutionHost {
 export type DirectHttpExecutionHostConfig = {
     baseUrl: URL;
     localToken: string;
+    /** Allows only Docker's explicit local-host alias over HTTP. */
+    allowDockerLocalHost?: boolean;
     fetch?: typeof fetch;
 };
 //# sourceMappingURL=types.d.ts.map

package/dist/http-sse/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/http-sse/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iCAAiC,EACjC,iCAAiC,EACjC,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,sBAAsB,CACpB,KAAK,EAAE,6BAA6B,GACnC,aAAa,CAAC,wBAAwB,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAC3C,iCAAiC,EACjC,eAAe,GAAG,MAAM,CACzB,GAAG;IACF,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,mBAAmB,CACjB,KAAK,EAAE,0BAA0B,GAChC,aAAa,CAAC,iCAAiC,CAAC,CAAC;CACrD;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,OAAO,EAAE,GAAG,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/http-sse/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,4BAA4B,EAC5B,iCAAiC,EACjC,iCAAiC,EACjC,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,4BAA4B,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,sBAAsB,CACpB,KAAK,EAAE,6BAA6B,GACnC,aAAa,CAAC,wBAAwB,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAC3C,iCAAiC,EACjC,eAAe,GAAG,MAAM,CACzB,GAAG;IACF,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,4BAA4B,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,mBAAmB,CACjB,KAAK,EAAE,0BAA0B,GAChC,aAAa,CAAC,iCAAiC,CAAC,CAAC;CACrD;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,OAAO,EAAE,GAAG,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC"}

package/dist/http-sse/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/http-sse/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionHostHeartbeatStreamEvent,\n  ExecutionHostHeartbeatTaskRequest,\n  ExecutionHostStreamEvent,\n} from '../contracts/index.js';\n\nexport type ExecutionHostConversationTurn = {\n  invocationId: string;\n  runtimeSessionId: string;\n  prompt: string;\n  deadlineAt?: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelApiKey: string;\n  signal?: AbortSignal;\n};\n\nexport interface ExecutionHost {\n  streamConversationTurn(\n    input: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent>;\n}\n\nexport type ExecutionHostHeartbeatTask = Omit<\n  ExecutionHostHeartbeatTaskRequest,\n  'schemaVersion' | 'kind'\n> & {\n  runtimeSessionId: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelApiKey: string;\n  signal?: AbortSignal;\n};\n\nexport interface HeartbeatExecutionHost {\n  streamHeartbeatTask(\n    input: ExecutionHostHeartbeatTask,\n  ): AsyncIterable<ExecutionHostHeartbeatStreamEvent>;\n}\n\nexport type DirectHttpExecutionHostConfig = {\n  baseUrl: URL;\n  localToken: string;\n  fetch?: typeof fetch;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/http-sse/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionHostModelCredential,\n  ExecutionHostHeartbeatStreamEvent,\n  ExecutionHostHeartbeatTaskRequest,\n  ExecutionHostStreamEvent,\n} from '../contracts/index.js';\n\nexport type ExecutionHostConversationTurn = {\n  invocationId: string;\n  runtimeSessionId: string;\n  prompt: string;\n  deadlineAt?: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelCredential: ExecutionHostModelCredential;\n  signal?: AbortSignal;\n};\n\nexport interface ExecutionHost {\n  streamConversationTurn(\n    input: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent>;\n}\n\nexport type ExecutionHostHeartbeatTask = Omit<\n  ExecutionHostHeartbeatTaskRequest,\n  'schemaVersion' | 'kind'\n> & {\n  runtimeSessionId: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelCredential: ExecutionHostModelCredential;\n  signal?: AbortSignal;\n};\n\nexport interface HeartbeatExecutionHost {\n  streamHeartbeatTask(\n    input: ExecutionHostHeartbeatTask,\n  ): AsyncIterable<ExecutionHostHeartbeatStreamEvent>;\n}\n\nexport type DirectHttpExecutionHostConfig = {\n  baseUrl: URL;\n  localToken: string;\n  /** Allows only Docker's explicit local-host alias over HTTP. */\n  allowDockerLocalHost?: boolean;\n  fetch?: typeof fetch;\n};\n"]}

package/dist/node/authority-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"authority-key.d.ts","sourceRoot":"","sources":["../../src/node/authority-key.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAavE,iFAAiF;AACjF,wBAAsB,0CAA0C,IAAI,OAAO,CACzE,yBAAyB,CAC1B,CAMA;AAED;;;GAGG;AACH,wBAAsB,iCAAiC,CACrD,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAsCf;AAED,gFAAgF;AAChF,wBAAsB,qCAAqC,CACzD,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,yBAAyB,CAAC,CAoDpC;AAED,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,QAAQ,CAAC,IAAI,oCAAoC;CAClD"}
+{"version":3,"file":"authority-key.d.ts","sourceRoot":"","sources":["../../src/node/authority-key.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAkBvE,iFAAiF;AACjF,wBAAsB,0CAA0C,IAAI,OAAO,CACzE,yBAAyB,CAC1B,CAEA;AAED;;;GAGG;AACH,wBAAsB,iCAAiC,CACrD,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAkBf;AAED,gFAAgF;AAChF,wBAAsB,qCAAqC,CACzD,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,yBAAyB,CAAC,CA8BpC;AAED,qBAAa,8BAA+B,SAAQ,KAAK;IACvD,QAAQ,CAAC,IAAI,oCAAoC;CAClD"}

package/dist/node/authority-key.js

@@ -1,9 +1,8 @@
-import { constants } from 'node:fs';
-import { open, unlink, } from 'node:fs/promises';
-import { webcrypto } from 'node:crypto';
+import { exportJWK, generateKeyPair, importJWK, } from 'jose';
 import { z } from 'zod';
+import { createOwnerOnlyFile, OwnerOnlyFileError, readOwnerOnlyFile, } from './owner-only-file.js';
 const MAX_PRIVATE_JWK_BYTES = 16 * 1_024;
-const ECDSA_P256 = { name: 'ECDSA', namedCurve: 'P-256' };
+const SIGNING_ALGORITHM = 'ES256';
 const Base64UrlSchema = z.string().min(1).regex(/^[A-Za-z0-9_-]+$/);
 const PrivateP256JwkSchema = z.object({
     kty: z.literal('EC'),
@@ -14,74 +13,50 @@ const PrivateP256JwkSchema = z.object({
 }).passthrough();
 /** Generates a non-persisted ES256 pair for tests and disposable local demos. */
 export async function generateEphemeralExecutionAuthorityKeyPair() {
-    return webcrypto.subtle.generateKey(ECDSA_P256, false, ['sign', 'verify']);
+    return generateKeyPair(SIGNING_ALGORITHM);
 }
 /**
  * Creates a new owner-only ES256 private-JWK file for local development.
  * Existing paths are never overwritten.
  */
 export async function generateExecutionAuthorityKeyFile(filePath) {
-    const keyPair = await webcrypto.subtle.generateKey(ECDSA_P256, true, ['sign', 'verify']);
-    const jwk = PrivateP256JwkSchema.parse(await webcrypto.subtle.exportKey('jwk', keyPair.privateKey));
-    const body = `${JSON.stringify({
-        kty: jwk.kty,
-        crv: jwk.crv,
-        x: jwk.x,
-        y: jwk.y,
-        d: jwk.d,
-    })}\n`;
-    let file;
-    let created = false;
     try {
-        file = await open(filePath, 'wx', 0o600);
-        created = true;
-        await file.writeFile(body, 'utf8');
-        await file.sync();
-        await file.close();
-        file = undefined;
+        const { privateKey } = await generateKeyPair(SIGNING_ALGORITHM, {
+            extractable: true,
+        });
+        const jwk = PrivateP256JwkSchema.parse(await exportJWK(privateKey));
+        await createOwnerOnlyFile(filePath, `${JSON.stringify({
+            kty: jwk.kty,
+            crv: jwk.crv,
+            x: jwk.x,
+            y: jwk.y,
+            d: jwk.d,
+        })}\n`);
     }
     catch {
-        if (created) {
-            await file?.close().catch(() => undefined);
-            file = undefined;
-            await unlink(filePath).catch(() => undefined);
-        }
         throw new ExecutionAuthorityKeyFileError('Execution authority signing JWK could not be generated at the requested path.');
     }
-    finally {
-        await file?.close().catch(() => undefined);
-    }
 }
 /** Loads a non-exportable ES256 signing pair from an owner-only private JWK. */
 export async function loadExecutionAuthorityKeyPairFromFile(filePath) {
-    let file;
     try {
-        file = await open(filePath, constants.O_RDONLY | constants.O_NOFOLLOW);
-        const metadata = await file.stat();
-        if (!metadata.isFile()
-            || metadata.size <= 0
-            || metadata.size > MAX_PRIVATE_JWK_BYTES) {
-            throw new ExecutionAuthorityKeyFileError('Execution authority signing JWK must be a small regular file.');
-        }
-        if (process.platform !== 'win32' && (metadata.mode & 0o077) !== 0) {
-            throw new ExecutionAuthorityKeyFileError('Execution authority signing JWK must not be group- or world-accessible.');
-        }
-        const jwk = PrivateP256JwkSchema.parse(JSON.parse(await file.readFile('utf8')));
-        const privateKey = await webcrypto.subtle.importKey('jwk', { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y, d: jwk.d }, ECDSA_P256, false, ['sign']);
-        const publicKey = await webcrypto.subtle.importKey('jwk', { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y }, ECDSA_P256, true, ['verify']);
-        await file.close();
-        file = undefined;
+        const jwk = PrivateP256JwkSchema.parse(JSON.parse(await readOwnerOnlyFile(filePath, {
+            description: 'Execution authority signing JWK',
+            maxBytes: MAX_PRIVATE_JWK_BYTES,
+        })));
+        const privateKey = await importJWK({ kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y, d: jwk.d }, SIGNING_ALGORITHM, { extractable: false });
+        const publicKey = await importJWK({ kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y }, SIGNING_ALGORITHM, { extractable: true });
         return { privateKey, publicKey };
     }
     catch (error) {
         if (error instanceof ExecutionAuthorityKeyFileError) {
             throw error;
         }
+        if (error instanceof OwnerOnlyFileError) {
+            throw new ExecutionAuthorityKeyFileError(error.message);
+        }
         throw new ExecutionAuthorityKeyFileError('Execution authority signing JWK could not be loaded.');
     }
-    finally {
-        await file?.close().catch(() => undefined);
-    }
 }
 export class ExecutionAuthorityKeyFileError extends Error {
     name = 'ExecutionAuthorityKeyFileError';

package/dist/node/authority-key.js.map

@@ -1 +1 @@
-{"version":3,"file":"authority-key.js","sourceRoot":"","sources":["../../src/node/authority-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EACL,IAAI,EACJ,MAAM,GAEP,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,qBAAqB,GAAG,EAAE,GAAG,KAAK,CAAC;AACzC,MAAM,UAAU,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAW,CAAC;AACnE,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AACpE,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACpB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,CAAC,EAAE,eAAe;IAClB,CAAC,EAAE,eAAe;IAClB,CAAC,EAAE,eAAe;CACnB,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,0CAA0C;IAG9D,OAAO,SAAS,CAAC,MAAM,CAAC,WAAW,CACjC,UAAU,EACV,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,QAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,WAAW,CAChD,UAAU,EACV,IAAI,EACJ,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;IACF,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CACpC,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC,CAC5D,CAAC;IACF,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QAC7B,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,CAAC,EAAE,GAAG,CAAC,CAAC;QACR,CAAC,EAAE,GAAG,CAAC,CAAC;KACT,CAAC,IAAI,CAAC;IAEP,IAAI,IAA4B,CAAC;IACjC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,GAAG,IAAI,CAAC;QACf,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACnC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3C,IAAI,GAAG,SAAS,CAAC;YACjB,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,IAAI,8BAA8B,CACtC,+EAA+E,CAChF,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,QAAgB;IAEhB,IAAI,IAA4B,CAAC;IACjC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CACf,QAAQ,EACR,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAC1C,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,IACE,CAAC,QAAQ,CAAC,MAAM,EAAE;eACf,QAAQ,CAAC,IAAI,IAAI,CAAC;eAClB,QAAQ,CAAC,IAAI,GAAG,qBAAqB,EACxC,CAAC;YACD,MAAM,IAAI,8BAA8B,CACtC,+DAA+D,CAChE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,8BAA8B,CACtC,yEAAyE,CAC1E,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CACpC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CACnD,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CACjD,KAAK,EACL,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAC5D,UAAU,EACV,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAChD,KAAK,EACL,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAClD,UAAU,EACV,IAAI,EACJ,CAAC,QAAQ,CAAC,CACX,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC;QACnB,IAAI,GAAG,SAAS,CAAC;QACjB,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,MAAM,IAAI,8BAA8B,CACtC,sDAAsD,CACvD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAC9C,IAAI,GAAG,gCAAgC,CAAC;CAClD","sourcesContent":["import { constants } from 'node:fs';\nimport {\n  open,\n  unlink,\n  type FileHandle,\n} from 'node:fs/promises';\nimport { webcrypto } from 'node:crypto';\nimport { z } from 'zod';\nimport type { ExecutionAuthorityKeyPair } from '../authority/index.js';\n\nconst MAX_PRIVATE_JWK_BYTES = 16 * 1_024;\nconst ECDSA_P256 = { name: 'ECDSA', namedCurve: 'P-256' } as const;\nconst Base64UrlSchema = z.string().min(1).regex(/^[A-Za-z0-9_-]+$/);\nconst PrivateP256JwkSchema = z.object({\n  kty: z.literal('EC'),\n  crv: z.literal('P-256'),\n  x: Base64UrlSchema,\n  y: Base64UrlSchema,\n  d: Base64UrlSchema,\n}).passthrough();\n\n/** Generates a non-persisted ES256 pair for tests and disposable local demos. */\nexport async function generateEphemeralExecutionAuthorityKeyPair(): Promise<\n  ExecutionAuthorityKeyPair\n> {\n  return webcrypto.subtle.generateKey(\n    ECDSA_P256,\n    false,\n    ['sign', 'verify'],\n  );\n}\n\n/**\n * Creates a new owner-only ES256 private-JWK file for local development.\n * Existing paths are never overwritten.\n */\nexport async function generateExecutionAuthorityKeyFile(\n  filePath: string,\n): Promise<void> {\n  const keyPair = await webcrypto.subtle.generateKey(\n    ECDSA_P256,\n    true,\n    ['sign', 'verify'],\n  );\n  const jwk = PrivateP256JwkSchema.parse(\n    await webcrypto.subtle.exportKey('jwk', keyPair.privateKey),\n  );\n  const body = `${JSON.stringify({\n    kty: jwk.kty,\n    crv: jwk.crv,\n    x: jwk.x,\n    y: jwk.y,\n    d: jwk.d,\n  })}\\n`;\n\n  let file: FileHandle | undefined;\n  let created = false;\n  try {\n    file = await open(filePath, 'wx', 0o600);\n    created = true;\n    await file.writeFile(body, 'utf8');\n    await file.sync();\n    await file.close();\n    file = undefined;\n  } catch {\n    if (created) {\n      await file?.close().catch(() => undefined);\n      file = undefined;\n      await unlink(filePath).catch(() => undefined);\n    }\n    throw new ExecutionAuthorityKeyFileError(\n      'Execution authority signing JWK could not be generated at the requested path.',\n    );\n  } finally {\n    await file?.close().catch(() => undefined);\n  }\n}\n\n/** Loads a non-exportable ES256 signing pair from an owner-only private JWK. */\nexport async function loadExecutionAuthorityKeyPairFromFile(\n  filePath: string,\n): Promise<ExecutionAuthorityKeyPair> {\n  let file: FileHandle | undefined;\n  try {\n    file = await open(\n      filePath,\n      constants.O_RDONLY | constants.O_NOFOLLOW,\n    );\n    const metadata = await file.stat();\n    if (\n      !metadata.isFile()\n      || metadata.size <= 0\n      || metadata.size > MAX_PRIVATE_JWK_BYTES\n    ) {\n      throw new ExecutionAuthorityKeyFileError(\n        'Execution authority signing JWK must be a small regular file.',\n      );\n    }\n    if (process.platform !== 'win32' && (metadata.mode & 0o077) !== 0) {\n      throw new ExecutionAuthorityKeyFileError(\n        'Execution authority signing JWK must not be group- or world-accessible.',\n      );\n    }\n    const jwk = PrivateP256JwkSchema.parse(\n      JSON.parse(await file.readFile('utf8')) as unknown,\n    );\n    const privateKey = await webcrypto.subtle.importKey(\n      'jwk',\n      { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y, d: jwk.d },\n      ECDSA_P256,\n      false,\n      ['sign'],\n    );\n    const publicKey = await webcrypto.subtle.importKey(\n      'jwk',\n      { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y },\n      ECDSA_P256,\n      true,\n      ['verify'],\n    );\n    await file.close();\n    file = undefined;\n    return { privateKey, publicKey };\n  } catch (error) {\n    if (error instanceof ExecutionAuthorityKeyFileError) {\n      throw error;\n    }\n    throw new ExecutionAuthorityKeyFileError(\n      'Execution authority signing JWK could not be loaded.',\n    );\n  } finally {\n    await file?.close().catch(() => undefined);\n  }\n}\n\nexport class ExecutionAuthorityKeyFileError extends Error {\n  readonly name = 'ExecutionAuthorityKeyFileError';\n}\n"]}
+{"version":3,"file":"authority-key.js","sourceRoot":"","sources":["../../src/node/authority-key.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,eAAe,EACf,SAAS,GACV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,qBAAqB,GAAG,EAAE,GAAG,KAAK,CAAC;AACzC,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AACpE,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACpB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,CAAC,EAAE,eAAe;IAClB,CAAC,EAAE,eAAe;IAClB,CAAC,EAAE,eAAe;CACnB,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,0CAA0C;IAG9D,OAAO,eAAe,CAAC,iBAAiB,CAAC,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,iBAAiB,EAAE;YAC9D,WAAW,EAAE,IAAI;SAClB,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QACpE,MAAM,mBAAmB,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;YACpD,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,GAAG,EAAE,GAAG,CAAC,GAAG;YACZ,CAAC,EAAE,GAAG,CAAC,CAAC;YACR,CAAC,EAAE,GAAG,CAAC,CAAC;YACR,CAAC,EAAE,GAAG,CAAC,CAAC;SACT,CAAC,IAAI,CAAC,CAAC;IACV,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,8BAA8B,CACtC,+EAA+E,CAChF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,qCAAqC,CACzD,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CACpC,IAAI,CAAC,KAAK,CAAC,MAAM,iBAAiB,CAAC,QAAQ,EAAE;YAC3C,WAAW,EAAE,iCAAiC;YAC9C,QAAQ,EAAE,qBAAqB;SAChC,CAAC,CAAY,CACf,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,SAAS,CAChC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAC5D,iBAAiB,EACjB,EAAE,WAAW,EAAE,KAAK,EAAE,CACvB,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,SAAS,CAC/B,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAClD,iBAAiB,EACjB,EAAE,WAAW,EAAE,IAAI,EAAE,CACtB,CAAC;QACF,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;IACnC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,8BAA8B,EAAE,CAAC;YACpD,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,YAAY,kBAAkB,EAAE,CAAC;YACxC,MAAM,IAAI,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,IAAI,8BAA8B,CACtC,sDAAsD,CACvD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAC9C,IAAI,GAAG,gCAAgC,CAAC;CAClD","sourcesContent":["import {\n  exportJWK,\n  generateKeyPair,\n  importJWK,\n} from 'jose';\nimport { z } from 'zod';\nimport type { ExecutionAuthorityKeyPair } from '../authority/index.js';\nimport {\n  createOwnerOnlyFile,\n  OwnerOnlyFileError,\n  readOwnerOnlyFile,\n} from './owner-only-file.js';\n\nconst MAX_PRIVATE_JWK_BYTES = 16 * 1_024;\nconst SIGNING_ALGORITHM = 'ES256';\nconst Base64UrlSchema = z.string().min(1).regex(/^[A-Za-z0-9_-]+$/);\nconst PrivateP256JwkSchema = z.object({\n  kty: z.literal('EC'),\n  crv: z.literal('P-256'),\n  x: Base64UrlSchema,\n  y: Base64UrlSchema,\n  d: Base64UrlSchema,\n}).passthrough();\n\n/** Generates a non-persisted ES256 pair for tests and disposable local demos. */\nexport async function generateEphemeralExecutionAuthorityKeyPair(): Promise<\n  ExecutionAuthorityKeyPair\n> {\n  return generateKeyPair(SIGNING_ALGORITHM);\n}\n\n/**\n * Creates a new owner-only ES256 private-JWK file for local development.\n * Existing paths are never overwritten.\n */\nexport async function generateExecutionAuthorityKeyFile(\n  filePath: string,\n): Promise<void> {\n  try {\n    const { privateKey } = await generateKeyPair(SIGNING_ALGORITHM, {\n      extractable: true,\n    });\n    const jwk = PrivateP256JwkSchema.parse(await exportJWK(privateKey));\n    await createOwnerOnlyFile(filePath, `${JSON.stringify({\n      kty: jwk.kty,\n      crv: jwk.crv,\n      x: jwk.x,\n      y: jwk.y,\n      d: jwk.d,\n    })}\\n`);\n  } catch {\n    throw new ExecutionAuthorityKeyFileError(\n      'Execution authority signing JWK could not be generated at the requested path.',\n    );\n  }\n}\n\n/** Loads a non-exportable ES256 signing pair from an owner-only private JWK. */\nexport async function loadExecutionAuthorityKeyPairFromFile(\n  filePath: string,\n): Promise<ExecutionAuthorityKeyPair> {\n  try {\n    const jwk = PrivateP256JwkSchema.parse(\n      JSON.parse(await readOwnerOnlyFile(filePath, {\n        description: 'Execution authority signing JWK',\n        maxBytes: MAX_PRIVATE_JWK_BYTES,\n      })) as unknown,\n    );\n    const privateKey = await importJWK(\n      { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y, d: jwk.d },\n      SIGNING_ALGORITHM,\n      { extractable: false },\n    );\n    const publicKey = await importJWK(\n      { kty: jwk.kty, crv: jwk.crv, x: jwk.x, y: jwk.y },\n      SIGNING_ALGORITHM,\n      { extractable: true },\n    );\n    return { privateKey, publicKey };\n  } catch (error) {\n    if (error instanceof ExecutionAuthorityKeyFileError) {\n      throw error;\n    }\n    if (error instanceof OwnerOnlyFileError) {\n      throw new ExecutionAuthorityKeyFileError(error.message);\n    }\n    throw new ExecutionAuthorityKeyFileError(\n      'Execution authority signing JWK could not be loaded.',\n    );\n  }\n}\n\nexport class ExecutionAuthorityKeyFileError extends Error {\n  readonly name = 'ExecutionAuthorityKeyFileError';\n}\n"]}