@intentic/sandbox-contract 1.307.0 → 1.308.0

package/dist/contracts/ports.contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"ports.contract.js","sourceRoot":"","sources":["../../src/contracts/ports.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAKhD,MAAM,CAAC,MAAM,aAAa,GAAG;IACzB,IAAI,EAAE,EAAE;SACH,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,uFAAuF;KACvG,CAAC;SACD,MAAM,CAAC,eAAe,CAAC;IAC5B,OAAO,EAAE,EAAE;SACN,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,uBAAuB;QAChC,WAAW,EACP,gIAAgI;KACvI,CAAC;SACD,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,uBAAuB,CAAC;IACpC,SAAS,EAAE,EAAE;SACR,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EAAE,wFAAwF;KACxG,CAAC;SACD,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,QAAQ,CAAC;CACxB,CAAC"}
+{"version":3,"file":"ports.contract.js","sourceRoot":"","sources":["../../src/contracts/ports.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAKhD,MAAM,CAAC,MAAM,aAAa,GAAG;IACzB,IAAI,EAAE,SAAS;SACV,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EAAE,uFAAuF;KACvG,CAAC;SAED,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;SACtB,MAAM,CAAC,eAAe,CAAC;IAC5B,OAAO,EAAE,SAAS;SACb,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,uBAAuB;QAChC,WAAW,EACP,gIAAgI;KACvI,CAAC;SACD,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,uBAAuB,CAAC;IACpC,SAAS,EAAE,SAAS;SACf,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,sBAAsB;QAC/B,WAAW,EAAE,wFAAwF;KACxG,CAAC;SACD,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,QAAQ,CAAC;CACxB,CAAC"}

package/dist/contracts/prepush.contract.d.ts

@@ -19,14 +19,14 @@ export declare const prepushContract: {
         timedOut: z.ZodOptional<z.ZodBoolean>;
         session: z.ZodOptional<z.ZodString>;
         output: z.ZodString;
-    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    }, z.core.$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     run: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodPrefault<z.ZodObject<{
         repos: z.ZodDefault<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>, z.ZodObject<{
         ok: z.ZodLiteral<true>;
-    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    }, z.core.$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     cancel: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
         ok: z.ZodLiteral<true>;
-    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    }, z.core.$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
 };
 //# sourceMappingURL=prepush.contract.d.ts.map

package/dist/contracts/prepush.contract.js

@@ -1,4 +1,4 @@
-import { oc } from "@orpc/contract";
+import { procedure } from "../protocol/route-meta.js";
 import { z } from "zod";
 import { CommandRunSchema } from "../schemas/ci.js";
 import { OkSchema } from "../schemas/shared.js";
@@ -12,7 +12,7 @@ export const PrepushRunSchema = z
 })
     .prefault({});
 export const prepushContract = {
-    state: oc
+    state: procedure
         .route({
         method: "GET",
         path: "/prepush/state",
@@ -20,7 +20,7 @@ export const prepushContract = {
         description: "The verdict, or the progress so far. Nothing is addressed by id here, because there is one working tree and so exactly one check.",
     })
         .output(CommandRunSchema),
-    run: oc
+    run: procedure
         .route({
         method: "POST",
         path: "/prepush/run",
@@ -29,7 +29,7 @@ export const prepushContract = {
     })
         .input(PrepushRunSchema)
         .output(OkSchema),
-    cancel: oc
+    cancel: procedure
         .route({
         method: "POST",
         path: "/prepush/cancel",

package/dist/contracts/prepush.contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"prepush.contract.js","sourceRoot":"","sources":["../../src/contracts/prepush.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAOhD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACJ,KAAK,EAAE,CAAC;SACH,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,GAAG,CAAC;SACR,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,sHAAsH,CAAC;CACxI,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAWlB,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,KAAK,EAAE,EAAE;SACJ,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EACP,mIAAmI;KAC1I,CAAC;SACD,MAAM,CAAC,gBAAgB,CAAC;IAC7B,GAAG,EAAE,EAAE;SACF,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,+BAA+B;QACxC,WAAW,EACP,iVAAiV;KACxV,CAAC;SACD,KAAK,CAAC,gBAAgB,CAAC;SACvB,MAAM,CAAC,QAAQ,CAAC;IACrB,MAAM,EAAE,EAAE;SACL,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,gFAAgF;KAChG,CAAC;SACD,MAAM,CAAC,QAAQ,CAAC;CACxB,CAAC"}
+{"version":3,"file":"prepush.contract.js","sourceRoot":"","sources":["../../src/contracts/prepush.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAOhD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC5B,MAAM,CAAC;IACJ,KAAK,EAAE,CAAC;SACH,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACxB,GAAG,CAAC,GAAG,CAAC;SACR,OAAO,CAAC,EAAE,CAAC;SACX,QAAQ,CAAC,sHAAsH,CAAC;CACxI,CAAC;KACD,QAAQ,CAAC,EAAE,CAAC,CAAC;AAWlB,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,KAAK,EAAE,SAAS;SACX,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EACP,mIAAmI;KAC1I,CAAC;SACD,MAAM,CAAC,gBAAgB,CAAC;IAC7B,GAAG,EAAE,SAAS;SACT,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,+BAA+B;QACxC,WAAW,EACP,iVAAiV;KACxV,CAAC;SACD,KAAK,CAAC,gBAAgB,CAAC;SACvB,MAAM,CAAC,QAAQ,CAAC;IACrB,MAAM,EAAE,SAAS;SACZ,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,gFAAgF;KAChG,CAAC;SACD,MAAM,CAAC,QAAQ,CAAC;CACxB,CAAC"}

package/dist/contracts/providers.contract.d.ts

@@ -48,7 +48,7 @@ export declare const providersContract: {
                 localmodel: "localmodel";
             }>;
         }, z.core.$strip>>;
-    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    }, z.core.$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     models: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         provider: z.ZodEnum<{
             claude: "claude";
@@ -74,6 +74,6 @@ export declare const providersContract: {
             availableAt: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strip>>;
         default: z.ZodString;
-    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    }, z.core.$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
 };
 //# sourceMappingURL=providers.contract.d.ts.map

package/dist/contracts/providers.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/providers.contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;iBAoBlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAKxE,eAAO,MAAM,iBAAiB;IAC1B,IAAI;;;;;;;;;;;;;;;;;;;;;;;;IAUJ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;CAUT,CAAC"}
+{"version":3,"file":"providers.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/providers.contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;iBAoBlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAKxE,eAAO,MAAM,iBAAiB;IAC1B,IAAI;;;;;;;;;;;;;;;;;;;;;;;;IAWJ,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;CAWT,CAAC"}

package/dist/contracts/providers.contract.js

@@ -1,4 +1,4 @@
-import { oc } from "@orpc/contract";
+import { procedure } from "../protocol/route-meta.js";
 import { z } from "zod";
 import { NativeProviderParamSchema } from "../schemas/agent.js";
 import { ModelsSchema } from "../schemas/providers/provider-oauth.js";
@@ -16,21 +16,23 @@ export const RunnableProvidersSchema = z.object({
         .describe("Model endpoints, already prefixed `endpoint/`, including the daemon-provisioned free trial."),
 });
 export const providersContract = {
-    list: oc
+    list: procedure
         .route({
         method: "GET",
         path: "/providers",
         summary: "Providers a chat can run on here",
         description: "The installed ACP agents and model endpoints, which are the providers this sandbox adds to the fixed native list. A read for anyone who may watch or drive a turn: it names what a message can be addressed to, not what credential stands behind it.",
     })
+        .meta({ guest: true })
         .output(RunnableProvidersSchema),
-    models: oc
+    models: procedure
         .route({
         method: "GET",
         path: "/providers/{provider}/models",
         summary: "Models one provider offers",
         description: "Every model this provider serves and which one it defaults to. Never empty: it is discovered live with a stored list behind it. The order is the provider's own preference and is not rearranged here.",
     })
+        .meta({ guest: true })
         .input(NativeProviderParamSchema)
         .output(ModelsSchema),
 };

package/dist/contracts/providers.contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"providers.contract.js","sourceRoot":"","sources":["../../src/contracts/providers.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAKtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAK5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IAClJ,MAAM,EAAE,CAAC;SACJ,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SACtD,QAAQ,CAAC,0FAA0F,CAAC;IACzG,SAAS,EAAE,CAAC;SACP,KAAK,CACF,CAAC,CAAC,MAAM,CAAC;QACL,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QAGjB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;KAC3C,CAAC,CACL;SACA,QAAQ,CAAC,6FAA6F,CAAC;CAC/G,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC7B,IAAI,EAAE,EAAE;SACH,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EACP,uPAAuP;KAC9P,CAAC;SACD,MAAM,CAAC,uBAAuB,CAAC;IAEpC,MAAM,EAAE,EAAE;SACL,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,4BAA4B;QACrC,WAAW,EACP,wMAAwM;KAC/M,CAAC;SACD,KAAK,CAAC,yBAAyB,CAAC;SAChC,MAAM,CAAC,YAAY,CAAC;CAC5B,CAAC"}
+{"version":3,"file":"providers.contract.js","sourceRoot":"","sources":["../../src/contracts/providers.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,wCAAwC,CAAC;AAKtE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAK5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,8EAA8E,CAAC;IAClJ,MAAM,EAAE,CAAC;SACJ,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;SACtD,QAAQ,CAAC,0FAA0F,CAAC;IACzG,SAAS,EAAE,CAAC;SACP,KAAK,CACF,CAAC,CAAC,MAAM,CAAC;QACL,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QAGjB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;KAC3C,CAAC,CACL;SACA,QAAQ,CAAC,6FAA6F,CAAC;CAC/G,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC7B,IAAI,EAAE,SAAS;SACV,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EACP,uPAAuP;KAC9P,CAAC;SACD,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACrB,MAAM,CAAC,uBAAuB,CAAC;IAEpC,MAAM,EAAE,SAAS;SACZ,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,4BAA4B;QACrC,WAAW,EACP,wMAAwM;KAC/M,CAAC;SACD,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACrB,KAAK,CAAC,yBAAyB,CAAC;SAChC,MAAM,CAAC,YAAY,CAAC;CAC5B,CAAC"}

package/dist/contracts/public.contract.d.ts

@@ -8,17 +8,17 @@ export declare const publicContract: {
             url: import("zod").ZodOptional<import("zod").ZodString>;
             blocked: import("zod").ZodOptional<import("zod").ZodString>;
         }, import("zod/v4/core").$strip>>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     publish: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         path: import("zod").ZodString;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         path: import("zod").ZodString;
         url: import("zod").ZodOptional<import("zod").ZodString>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     unpublish: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         path: import("zod").ZodString;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         ok: import("zod").ZodLiteral<true>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
 };
 //# sourceMappingURL=public.contract.d.ts.map

package/dist/contracts/public.contract.js

@@ -1,8 +1,8 @@
-import { oc } from "@orpc/contract";
+import { procedure } from "../protocol/route-meta.js";
 import { PublicListSchema, PublishResultSchema, PublishSchema, UnpublishSchema } from "../schemas/public.js";
 import { OkSchema } from "../schemas/shared.js";
 export const publicContract = {
-    list: oc
+    list: procedure
         .route({
         method: "GET",
         path: "/public",
@@ -10,7 +10,7 @@ export const publicContract = {
         description: "Everything currently in the outbox and the address it answers on. There is no call to read a published file back: it is served openly to anyone with the link, which is the entire point of having put it there.",
     })
         .output(PublicListSchema),
-    publish: oc
+    publish: procedure
         .route({
         method: "POST",
         path: "/public/publish",
@@ -19,7 +19,7 @@ export const publicContract = {
     })
         .input(PublishSchema)
         .output(PublishResultSchema),
-    unpublish: oc
+    unpublish: procedure
         .route({
         method: "POST",
         path: "/public/unpublish",

package/dist/contracts/public.contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"public.contract.js","sourceRoot":"","sources":["../../src/contracts/public.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC7G,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAQhD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,IAAI,EAAE,EAAE;SACH,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EACP,kNAAkN;KACzN,CAAC;SACD,MAAM,CAAC,gBAAgB,CAAC;IAC7B,OAAO,EAAE,EAAE;SACN,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,4BAA4B;QACrC,WAAW,EACP,yIAAyI;KAChJ,CAAC;SACD,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,mBAAmB,CAAC;IAChC,SAAS,EAAE,EAAE;SACR,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EACP,6IAA6I;KACpJ,CAAC;SACD,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,QAAQ,CAAC;CACxB,CAAC"}
+{"version":3,"file":"public.contract.js","sourceRoot":"","sources":["../../src/contracts/public.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC7G,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAQhD,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,IAAI,EAAE,SAAS;SACV,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EACP,kNAAkN;KACzN,CAAC;SACD,MAAM,CAAC,gBAAgB,CAAC;IAC7B,OAAO,EAAE,SAAS;SACb,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,4BAA4B;QACrC,WAAW,EACP,yIAAyI;KAChJ,CAAC;SACD,KAAK,CAAC,aAAa,CAAC;SACpB,MAAM,CAAC,mBAAmB,CAAC;IAChC,SAAS,EAAE,SAAS;SACf,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,iCAAiC;QAC1C,WAAW,EACP,6IAA6I;KACpJ,CAAC;SACD,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,QAAQ,CAAC;CACxB,CAAC"}

package/dist/contracts/push.contract.d.ts

@@ -4,7 +4,7 @@ export declare const pushContract: {
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         publicKey: import("zod").ZodString;
         subscribed: import("zod").ZodBoolean;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     subscribe: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodDiscriminatedUnion<[import("zod").ZodObject<{
         kind: import("zod").ZodLiteral<"webpush">;
         endpoint: import("zod").ZodURL;
@@ -19,14 +19,14 @@ export declare const pushContract: {
         secret: import("zod").ZodString;
     }, import("zod/v4/core").$strip>], "kind">, import("zod").ZodObject<{
         ok: import("zod").ZodLiteral<true>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     unsubscribe: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         id: import("zod").ZodString;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         ok: import("zod").ZodLiteral<true>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     test: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, import("zod").ZodObject<{
         delivered: import("zod").ZodNumber;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
 };
 //# sourceMappingURL=push.contract.d.ts.map

package/dist/contracts/push.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"push.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/push.contract.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,YAAY;IACrB,MAAM;;;;;;IASN,SAAS;;;;;;;;;;;;;;;IAUT,WAAW;;;;;IASX,IAAI;;;CASP,CAAC"}
+{"version":3,"file":"push.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/push.contract.ts"],"names":[],"mappings":"AAgBA,eAAO,MAAM,YAAY;IACrB,MAAM;;;;;;IASN,SAAS;;;;;;;;;;;;;;;IAYT,WAAW;;;;;IAUX,IAAI;;;CAUP,CAAC"}

package/dist/contracts/push.contract.js

@@ -1,8 +1,9 @@
-import { oc } from "@orpc/contract";
+import { procedure } from "../protocol/route-meta.js";
 import { PushChannelIdSchema, PushChannelSchema, PushConfigQuerySchema, PushConfigSchema, PushTestSchema } from "../schemas/push.js";
 import { OkSchema } from "../schemas/shared.js";
+const pushRoute = procedure.meta({ control: "never" });
 export const pushContract = {
-    config: oc
+    config: pushRoute
         .route({
         method: "GET",
         path: "/push/config",
@@ -11,31 +12,34 @@ export const pushContract = {
     })
         .input(PushConfigQuerySchema)
         .output(PushConfigSchema),
-    subscribe: oc
+    subscribe: pushRoute
         .route({
         method: "POST",
         path: "/push/subscribe",
         summary: "Send notifications to this device",
         description: "Registers one device. The sandbox only interrupts you on the three moments where attention is genuinely wanted: a turn has finished, the agent is stuck on a question, and something is waiting for approval.",
     })
+        .meta({ floor: "collaborator" })
         .input(PushChannelSchema)
         .output(OkSchema),
-    unsubscribe: oc
+    unsubscribe: pushRoute
         .route({
         method: "POST",
         path: "/push/unsubscribe",
         summary: "Stop notifying a device",
         description: "Removes one registered device. Others keep receiving.",
     })
+        .meta({ floor: "collaborator" })
         .input(PushChannelIdSchema)
         .output(OkSchema),
-    test: oc
+    test: pushRoute
         .route({
         method: "POST",
         path: "/push/test",
         summary: "Send a test notification",
         description: "Proves the whole chain end to end. Worth having, because there are four separate places a notification can be lost that nobody can inspect from the outside: the device's permission, its registration, the sandbox's key, and the delivery service.",
     })
+        .meta({ floor: "collaborator" })
         .output(PushTestSchema),
 };
 //# sourceMappingURL=push.contract.js.map

package/dist/contracts/push.contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"push.contract.js","sourceRoot":"","sources":["../../src/contracts/push.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACrI,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAWhD,MAAM,CAAC,MAAM,YAAY,GAAG;IACxB,MAAM,EAAE,EAAE;SACL,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,gHAAgH;KAChI,CAAC;SACD,KAAK,CAAC,qBAAqB,CAAC;SAC5B,MAAM,CAAC,gBAAgB,CAAC;IAC7B,SAAS,EAAE,EAAE;SACR,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EACP,+MAA+M;KACtN,CAAC;SACD,KAAK,CAAC,iBAAiB,CAAC;SACxB,MAAM,CAAC,QAAQ,CAAC;IACrB,WAAW,EAAE,EAAE;SACV,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,uDAAuD;KACvE,CAAC;SACD,KAAK,CAAC,mBAAmB,CAAC;SAC1B,MAAM,CAAC,QAAQ,CAAC;IACrB,IAAI,EAAE,EAAE;SACH,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,0BAA0B;QACnC,WAAW,EACP,sPAAsP;KAC7P,CAAC;SACD,MAAM,CAAC,cAAc,CAAC;CAC9B,CAAC"}
+{"version":3,"file":"push.contract.js","sourceRoot":"","sources":["../../src/contracts/push.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACrI,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAWvD,MAAM,CAAC,MAAM,YAAY,GAAG;IACxB,MAAM,EAAE,SAAS;SACZ,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,cAAc;QACpB,OAAO,EAAE,kCAAkC;QAC3C,WAAW,EAAE,gHAAgH;KAChI,CAAC;SACD,KAAK,CAAC,qBAAqB,CAAC;SAC5B,MAAM,CAAC,gBAAgB,CAAC;IAC7B,SAAS,EAAE,SAAS;SACf,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,mCAAmC;QAC5C,WAAW,EACP,+MAA+M;KACtN,CAAC;SAED,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;SAC/B,KAAK,CAAC,iBAAiB,CAAC;SACxB,MAAM,CAAC,QAAQ,CAAC;IACrB,WAAW,EAAE,SAAS;SACjB,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,yBAAyB;QAClC,WAAW,EAAE,uDAAuD;KACvE,CAAC;SACD,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;SAC/B,KAAK,CAAC,mBAAmB,CAAC;SAC1B,MAAM,CAAC,QAAQ,CAAC;IACrB,IAAI,EAAE,SAAS;SACV,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,0BAA0B;QACnC,WAAW,EACP,sPAAsP;KAC7P,CAAC;SACD,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;SAC/B,MAAM,CAAC,cAAc,CAAC;CAC9B,CAAC"}

package/dist/contracts/safety.contract.d.ts

@@ -3,12 +3,12 @@ export declare const safetyContract: {
     policy: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodObject<{
         text: z.ZodString;
         custom: z.ZodBoolean;
-    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    }, z.core.$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     setPolicy: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         text: z.ZodString;
     }, z.core.$strip>, z.ZodObject<{
         ok: z.ZodLiteral<true>;
-    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    }, z.core.$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     log: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, z.ZodArray<z.ZodObject<{
         at: z.ZodNumber;
         program: z.ZodString;
@@ -30,6 +30,6 @@ export declare const safetyContract: {
             unanswered: "unanswered";
         }>>;
         machine: z.ZodOptional<z.ZodString>;
-    }, z.core.$strip>>, Record<never, never>, Record<never, never>>;
+    }, z.core.$strip>>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
 };
 //# sourceMappingURL=safety.contract.d.ts.map

package/dist/contracts/safety.contract.js

@@ -1,9 +1,9 @@
-import { oc } from "@orpc/contract";
+import { procedure } from "../protocol/route-meta.js";
 import { SafetyLogEntrySchema, SafetyPolicySchema } from "../policy/safety-policy.js";
 import { OkSchema } from "../schemas/shared.js";
 import { z } from "zod";
 export const safetyContract = {
-    policy: oc
+    policy: procedure
         .route({
         method: "GET",
         path: "/safety/policy",
@@ -11,7 +11,7 @@ export const safetyContract = {
         description: "The document that decides when an agent stops to ask you before running something. Prose, not settings: it is read by the model that judges each command. When nobody has written one, this is the text the product ships with, and it describes the behaviour a fresh sandbox already has.",
     })
         .output(SafetyPolicySchema),
-    setPolicy: oc
+    setPolicy: procedure
         .route({
         method: "POST",
         path: "/safety/policy",
@@ -20,7 +20,7 @@ export const safetyContract = {
     })
         .input(z.object({ text: z.string().describe("The policy, as you want it written.") }))
         .output(OkSchema),
-    log: oc
+    log: procedure
         .route({
         method: "GET",
         path: "/safety/log",

package/dist/contracts/safety.contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"safety.contract.js","sourceRoot":"","sources":["../../src/contracts/safety.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,MAAM,EAAE,EAAE;SACL,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACP,6RAA6R;KACpS,CAAC;SACD,MAAM,CAAC,kBAAkB,CAAC;IAC/B,SAAS,EAAE,EAAE;SACR,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,2BAA2B;QACpC,WAAW,EACP,+LAA+L;KACtM,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;SACrF,MAAM,CAAC,QAAQ,CAAC;IAErB,GAAG,EAAE,EAAE;SACF,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,wBAAwB;QACjC,WAAW,EACP,iOAAiO;KACxO,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;CAC7C,CAAC"}
+{"version":3,"file":"safety.contract.js","sourceRoot":"","sources":["../../src/contracts/safety.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AACtF,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,MAAM,EAAE,SAAS;SACZ,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACP,6RAA6R;KACpS,CAAC;SACD,MAAM,CAAC,kBAAkB,CAAC;IAC/B,SAAS,EAAE,SAAS;SACf,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,2BAA2B;QACpC,WAAW,EACP,+LAA+L;KACtM,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,qCAAqC,CAAC,EAAE,CAAC,CAAC;SACrF,MAAM,CAAC,QAAQ,CAAC;IAErB,GAAG,EAAE,SAAS;SACT,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,wBAAwB;QACjC,WAAW,EACP,iOAAiO;KACxO,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;CAC7C,CAAC"}

package/dist/contracts/secrets.contract.d.ts

@@ -4,15 +4,15 @@ export declare const secretsContract: {
         value: import("zod").ZodString;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         ok: import("zod").ZodLiteral<true>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     list: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, import("zod").ZodObject<{
         keys: import("zod").ZodArray<import("zod").ZodString>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         key: import("zod").ZodString;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         ok: import("zod").ZodLiteral<true>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     inventory: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, import("zod").ZodObject<{
         entries: import("zod").ZodArray<import("zod").ZodObject<{
             key: import("zod").ZodString;
@@ -56,12 +56,12 @@ export declare const secretsContract: {
                 }>;
             }, import("zod/v4/core").$strip>>;
         }, import("zod/v4/core").$strip>>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     reveal: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         key: import("zod").ZodString;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         value: import("zod").ZodString;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     gates: import("@orpc/contract").ContractProcedureBuilderWithOutput<import("@orpc/contract").Schema<unknown, unknown>, import("zod").ZodObject<{
         gates: import("zod").ZodArray<import("zod").ZodObject<{
             subject: import("zod").ZodString;
@@ -75,7 +75,7 @@ export declare const secretsContract: {
                 use: "use";
             }>;
         }, import("zod/v4/core").$strip>>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     setGate: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         subject: import("zod").ZodString;
         kind: import("zod").ZodEnum<{
@@ -89,12 +89,12 @@ export declare const secretsContract: {
         }>;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         ok: import("zod").ZodLiteral<true>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     removeGate: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         subject: import("zod").ZodString;
     }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
         ok: import("zod").ZodLiteral<true>;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     request: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
         subject: import("zod").ZodString;
         why: import("zod").ZodOptional<import("zod").ZodString>;
@@ -103,6 +103,6 @@ export declare const secretsContract: {
         granted: import("zod").ZodLiteral<true>;
         approvedBy: import("zod").ZodString;
         message: import("zod").ZodString;
-    }, import("zod/v4/core").$strip>, Record<never, never>, Record<never, never>>;
+    }, import("zod/v4/core").$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
 };
 //# sourceMappingURL=secrets.contract.d.ts.map

package/dist/contracts/secrets.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/secrets.contract.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,eAAe;IACxB,GAAG;;;;;;IAUH,IAAI;;;IAQJ,MAAM;;;;;IASN,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAST,MAAM;;;;;IAWN,KAAK;;;;;;;;;;;;;;IASL,OAAO;;;;;;;;;;;;;;IAUP,UAAU;;;;;IASV,OAAO;;;;;;;;;CAUV,CAAC"}
+{"version":3,"file":"secrets.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/secrets.contract.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,eAAe;IACxB,GAAG;;;;;;IAUH,IAAI;;;IAQJ,MAAM;;;;;IASN,SAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAST,MAAM;;;;;IAWN,KAAK;;;;;;;;;;;;;;IAWL,OAAO;;;;;;;;;;;;;;IAUP,UAAU;;;;;IASV,OAAO;;;;;;;;;CAWV,CAAC"}

package/dist/contracts/secrets.contract.js

@@ -1,8 +1,9 @@
-import { oc } from "@orpc/contract";
+import { procedure } from "../protocol/route-meta.js";
 import { CredentialGateSchema, CredentialGuardSubjectParamSchema, CredentialGatesSchema, CredentialGrantSchema, CredentialRequestSchema, SecretInventorySchema, SecretKeyParamSchema, SecretKeysSchema, SecretRevealSchema, SecretSetSchema, } from "../schemas/secrets.js";
 import { OkSchema } from "../schemas/shared.js";
+const secretRoute = procedure.meta({ floor: "maintainer", control: "never" });
 export const secretsContract = {
-    set: oc
+    set: secretRoute
         .route({
         method: "POST",
         path: "/secrets",
@@ -11,7 +12,7 @@ export const secretsContract = {
     })
         .input(SecretSetSchema)
         .output(OkSchema),
-    list: oc
+    list: secretRoute
         .route({
         method: "GET",
         path: "/secrets",
@@ -19,7 +20,7 @@ export const secretsContract = {
         description: "Which secrets exist here. Names only, never values.",
     })
         .output(SecretKeysSchema),
-    remove: oc
+    remove: secretRoute
         .route({
         method: "DELETE",
         path: "/secrets/{key}",
@@ -28,7 +29,7 @@ export const secretsContract = {
     })
         .input(SecretKeyParamSchema)
         .output(OkSchema),
-    inventory: oc
+    inventory: secretRoute
         .route({
         method: "GET",
         path: "/secrets/inventory",
@@ -36,7 +37,7 @@ export const secretsContract = {
         description: "One view across all the places secrets live here: what exists, where it came from and whether it is working. Never any values. This one always answers, even before there is a store to write to.",
     })
         .output(SecretInventorySchema),
-    reveal: oc
+    reveal: secretRoute
         .route({
         method: "POST",
         path: "/secrets/reveal",
@@ -45,15 +46,16 @@ export const secretsContract = {
     })
         .input(SecretKeyParamSchema)
         .output(SecretRevealSchema),
-    gates: oc
+    gates: secretRoute
         .route({
         method: "GET",
         path: "/secrets/gates",
         summary: "Which credentials need somebody's approval",
         description: "What is gated and who may release it. Names and addresses only, never values, and the agent may read it too: knowing a credential needs Bob is what stops it concluding the account is simply not connected.",
     })
+        .meta({ agent: true })
         .output(CredentialGatesSchema),
-    setGate: oc
+    setGate: secretRoute
         .route({
         method: "PUT",
         path: "/secrets/gates/{subject}",
@@ -62,7 +64,7 @@ export const secretsContract = {
     })
         .input(CredentialGateSchema)
         .output(OkSchema),
-    removeGate: oc
+    removeGate: secretRoute
         .route({
         method: "DELETE",
         path: "/secrets/gates/{subject}",
@@ -71,13 +73,14 @@ export const secretsContract = {
     })
         .input(CredentialGuardSubjectParamSchema)
         .output(OkSchema),
-    request: oc
+    request: secretRoute
         .route({
         method: "POST",
         path: "/secrets/request",
         summary: "Ask a named person to release a credential",
         description: "Raises the release card in the live conversation and waits for one of the people named on it. Refused, rather than held, when there is nobody to ask: an unattended turn, no live conversation, or a click with no verified identity behind it.",
     })
+        .meta({ agent: true })
         .input(CredentialRequestSchema)
         .output(CredentialGrantSchema),
 };

package/dist/contracts/secrets.contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"secrets.contract.js","sourceRoot":"","sources":["../../src/contracts/secrets.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EACH,oBAAoB,EACpB,iCAAiC,EACjC,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAKhD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,GAAG,EAAE,EAAE;SACF,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,gBAAgB;QACzB,WAAW,EACP,qKAAqK;KAC5K,CAAC;SACD,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,QAAQ,CAAC;IACrB,IAAI,EAAE,EAAE;SACH,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,qDAAqD;KACrE,CAAC;SACD,MAAM,CAAC,gBAAgB,CAAC;IAC7B,MAAM,EAAE,EAAE;SACL,KAAK,CAAC;QACH,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,sBAAsB;KACtC,CAAC;SACD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,QAAQ,CAAC;IACrB,SAAS,EAAE,EAAE;SACR,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACP,mMAAmM;KAC1M,CAAC;SACD,MAAM,CAAC,qBAAqB,CAAC;IAClC,MAAM,EAAE,EAAE;SACL,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,yBAAyB;QAClC,WAAW,EACP,6KAA6K;KACpL,CAAC;SACD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,kBAAkB,CAAC;IAE/B,KAAK,EAAE,EAAE;SACJ,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,4CAA4C;QACrD,WAAW,EACP,8MAA8M;KACrN,CAAC;SACD,MAAM,CAAC,qBAAqB,CAAC;IAClC,OAAO,EAAE,EAAE;SACN,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,yCAAyC;QAClD,WAAW,EACP,6PAA6P;KACpQ,CAAC;SACD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,QAAQ,CAAC;IACrB,UAAU,EAAE,EAAE;SACT,KAAK,CAAC;QACH,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,0CAA0C;QACnD,WAAW,EAAE,2GAA2G;KAC3H,CAAC;SACD,KAAK,CAAC,iCAAiC,CAAC;SACxC,MAAM,CAAC,QAAQ,CAAC;IACrB,OAAO,EAAE,EAAE;SACN,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,4CAA4C;QACrD,WAAW,EACP,iPAAiP;KACxP,CAAC;SACD,KAAK,CAAC,uBAAuB,CAAC;SAC9B,MAAM,CAAC,qBAAqB,CAAC;CACrC,CAAC"}
+{"version":3,"file":"secrets.contract.js","sourceRoot":"","sources":["../../src/contracts/secrets.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EACH,oBAAoB,EACpB,iCAAiC,EACjC,qBAAqB,EACrB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,gBAAgB,EAChB,kBAAkB,EAClB,eAAe,GAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhD,MAAM,WAAW,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAK9E,MAAM,CAAC,MAAM,eAAe,GAAG;IAC3B,GAAG,EAAE,WAAW;SACX,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,gBAAgB;QACzB,WAAW,EACP,qKAAqK;KAC5K,CAAC;SACD,KAAK,CAAC,eAAe,CAAC;SACtB,MAAM,CAAC,QAAQ,CAAC;IACrB,IAAI,EAAE,WAAW;SACZ,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,6BAA6B;QACtC,WAAW,EAAE,qDAAqD;KACrE,CAAC;SACD,MAAM,CAAC,gBAAgB,CAAC;IAC7B,MAAM,EAAE,WAAW;SACd,KAAK,CAAC;QACH,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,iBAAiB;QAC1B,WAAW,EAAE,sBAAsB;KACtC,CAAC;SACD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,QAAQ,CAAC;IACrB,SAAS,EAAE,WAAW;SACjB,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,kDAAkD;QAC3D,WAAW,EACP,mMAAmM;KAC1M,CAAC;SACD,MAAM,CAAC,qBAAqB,CAAC;IAClC,MAAM,EAAE,WAAW;SACd,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,yBAAyB;QAClC,WAAW,EACP,6KAA6K;KACpL,CAAC;SACD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,kBAAkB,CAAC;IAE/B,KAAK,EAAE,WAAW;SACb,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,4CAA4C;QACrD,WAAW,EACP,8MAA8M;KACrN,CAAC;SAED,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACrB,MAAM,CAAC,qBAAqB,CAAC;IAClC,OAAO,EAAE,WAAW;SACf,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,yCAAyC;QAClD,WAAW,EACP,6PAA6P;KACpQ,CAAC;SACD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,QAAQ,CAAC;IACrB,UAAU,EAAE,WAAW;SAClB,KAAK,CAAC;QACH,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,0BAA0B;QAChC,OAAO,EAAE,0CAA0C;QACnD,WAAW,EAAE,2GAA2G;KAC3H,CAAC;SACD,KAAK,CAAC,iCAAiC,CAAC;SACxC,MAAM,CAAC,QAAQ,CAAC;IACrB,OAAO,EAAE,WAAW;SACf,KAAK,CAAC;QACH,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,4CAA4C;QACrD,WAAW,EACP,iPAAiP;KACxP,CAAC;SACD,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACrB,KAAK,CAAC,uBAAuB,CAAC;SAC9B,MAAM,CAAC,qBAAqB,CAAC;CACrC,CAAC"}

package/dist/contracts/sessions.contract.d.ts

@@ -16,7 +16,7 @@ export declare const sessionsContract: {
                 }>;
             }, z.core.$strip>>;
         }, z.core.$strip>>;
-    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    }, z.core.$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
     get: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         id: z.ZodString;
     }, z.core.$strip>, z.ZodObject<{
@@ -282,6 +282,6 @@ export declare const sessionsContract: {
                 }, z.core.$strip>>;
             }, z.core.$strip>>;
         }, z.core.$strip>>;
-    }, z.core.$strip>, Record<never, never>, Record<never, never>>;
+    }, z.core.$strip>, Record<never, never>, import("../protocol/route-meta.js").RouteMeta & Record<never, never>>;
 };
 //# sourceMappingURL=sessions.contract.d.ts.map

package/dist/contracts/sessions.contract.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/sessions.contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,eAAO,MAAM,gBAAgB;IACzB,IAAI;;;;;;;;;;;;;;;;;IAUJ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CASN,CAAC"}
+{"version":3,"file":"sessions.contract.d.ts","sourceRoot":"","sources":["../../src/contracts/sessions.contract.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAYxB,eAAO,MAAM,gBAAgB;IACzB,IAAI;;;;;;;;;;;;;;;;;IAYJ,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAUN,CAAC"}

package/dist/contracts/sessions.contract.js

@@ -1,24 +1,26 @@
-import { oc } from "@orpc/contract";
+import { procedure } from "../protocol/route-meta.js";
 import { z } from "zod";
 import { SessionTranscriptSchema } from "../events/transcript.js";
 import { SessionIdParamSchema, SessionsListSchema } from "../schemas/sessions.js";
 export const sessionsContract = {
-    list: oc
+    list: procedure
         .route({
         method: "GET",
         path: "/sessions",
         summary: "Past conversations in this workspace",
         description: "Summaries for a history menu, filtered when you pass a search. Covers conversations that worked in their own private copies too, so nothing is hidden just because it happened on a branch.",
     })
+        .meta({ control: "editor" })
         .input(z.object({ query: z.string().optional(), caseSensitive: z.stringbool().optional() }))
         .output(SessionsListSchema),
-    get: oc
+    get: procedure
         .route({
         method: "GET",
         path: "/sessions/{id}",
         summary: "Read one past conversation",
         description: "The full record of a single conversation, restored for display.",
     })
+        .meta({ control: "editor" })
         .input(SessionIdParamSchema)
         .output(SessionTranscriptSchema),
 };

package/dist/contracts/sessions.contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.contract.js","sourceRoot":"","sources":["../../src/contracts/sessions.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,gBAAgB,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAUlF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC5B,IAAI,EAAE,EAAE;SACH,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EACP,6LAA6L;KACpM,CAAC;SACD,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SAC3F,MAAM,CAAC,kBAAkB,CAAC;IAC/B,GAAG,EAAE,EAAE;SACF,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,iEAAiE;KACjF,CAAC;SACD,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,uBAAuB,CAAC;CACvC,CAAC"}
+{"version":3,"file":"sessions.contract.js","sourceRoot":"","sources":["../../src/contracts/sessions.contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAUlF,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC5B,IAAI,EAAE,SAAS;SACV,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,sCAAsC;QAC/C,WAAW,EACP,6LAA6L;KACpM,CAAC;SAED,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;SAC3B,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;SAC3F,MAAM,CAAC,kBAAkB,CAAC;IAC/B,GAAG,EAAE,SAAS;SACT,KAAK,CAAC;QACH,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,4BAA4B;QACrC,WAAW,EAAE,iEAAiE;KACjF,CAAC;SACD,IAAI,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;SAC3B,KAAK,CAAC,oBAAoB,CAAC;SAC3B,MAAM,CAAC,uBAAuB,CAAC;CACvC,CAAC"}