@intentic/sandbox-contract 1.337.0 → 1.339.0

package/dist/models/agent-lanes.js

@@ -0,0 +1,67 @@
+import { parentOf } from "./agent-starter.js";
+import { blocked, heardByParent, limitScheduled, onlyOwnerCanAnswer, scheduledSend, turnInFlight, turnWorking, watching, } from "./agent-standing.js";
+export const callsOwner = (child, family) => onlyOwnerCanAnswer(child) || (family.child === "attention" && family.parent !== "active" && !heardByParent(child, family.parentAt));
+export const NO_ATTENTION = {
+    plan: false,
+    question: false,
+    permission: false,
+    capability: false,
+    credential: false,
+    conflict: false,
+};
+export const laneOf = (agent) => {
+    if (blocked(agent) || agent.status === "awaiting" || agent.status === "conflict") {
+        return "attention";
+    }
+    if (agent.status === "dismissing" || agent.status === "landing") {
+        return "finished";
+    }
+    if (turnInFlight(agent) || agent.status === "draft") {
+        return "active";
+    }
+    if (watching(agent)) {
+        return "active";
+    }
+    if (limitScheduled(agent)) {
+        return "active";
+    }
+    if (scheduledSend(agent)) {
+        return "active";
+    }
+    return "finished";
+};
+export const attentionCards = (agents) => new Set(attentionCalls(agents).map((call) => call.card)).size;
+export const attentionCalls = (agents) => {
+    const byId = new Map(agents.map((agent) => [agent.id, agent]));
+    const parentIn = (agent) => {
+        const id = parentOf(agent.startedBy);
+        return id === undefined ? undefined : byId.get(id);
+    };
+    const familyOf = (agent) => {
+        const seen = new Set([agent.id]);
+        let top = agent;
+        for (let above = parentIn(top); above !== undefined && !seen.has(above.id); above = parentIn(top)) {
+            seen.add(above.id);
+            top = above;
+        }
+        return top.id;
+    };
+    const calls = [];
+    for (const agent of agents) {
+        const parent = parentIn(agent);
+        if (parent === undefined || agent.unsent === true) {
+            if (laneOf(agent) === "attention") {
+                calls.push({ id: agent.id, card: agent.id });
+            }
+        }
+        else if (callsOwner(agent, { child: laneOf(agent), parent: laneOf(parent), parentAt: parent.updatedAt })) {
+            calls.push({ id: agent.id, card: familyOf(agent) });
+        }
+    }
+    return calls;
+};
+export const fleetAttention = (agents, held) => ({
+    needsYou: attentionCards(agents) + held.length,
+    working: agents.filter(turnWorking).length,
+});
+//# sourceMappingURL=agent-lanes.js.map

package/dist/models/agent-lanes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-lanes.js","sourceRoot":"","sources":["../../src/models/agent-lanes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAEH,OAAO,EACP,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,YAAY,EACZ,WAAW,EACX,QAAQ,GACX,MAAM,qBAAqB,CAAC;AAa7B,MAAM,CAAC,MAAM,UAAU,GAAG,CACtB,KAAqD,EACrD,MAA4F,EACrF,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AAMlJ,MAAM,CAAC,MAAM,YAAY,GAAmB;IACxC,IAAI,EAAE,KAAK;IACX,QAAQ,EAAE,KAAK;IACf,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE,KAAK;IACjB,UAAU,EAAE,KAAK;IACjB,QAAQ,EAAE,KAAK;CAClB,CAAC;AAKF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAoB,EAAa,EAAE;IAItD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QAC/E,OAAO,WAAW,CAAC;IACvB,CAAC;IAID,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC9D,OAAO,UAAU,CAAC;IACtB,CAAC;IAGD,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAClD,OAAO,QAAQ,CAAC;IACpB,CAAC;IAKD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClB,OAAO,QAAQ,CAAC;IACpB,CAAC;IAID,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,QAAQ,CAAC;IACpB,CAAC;IAGD,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,QAAQ,CAAC;IACpB,CAAC;IAID,OAAO,UAAU,CAAC;AACtB,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAiC,EAAU,EAAE,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAa3I,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAiC,EAA6D,EAAE;IAE3H,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAU,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAwB,EAAE;QACvD,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACrC,OAAO,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC;IAGF,MAAM,QAAQ,GAAG,CAAC,KAAe,EAAU,EAAE;QACzC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,GAAG,GAAG,KAAK,CAAC;QAChB,KAAK,IAAI,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAChG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACnB,GAAG,GAAG,KAAK,CAAC;QAChB,CAAC;QACD,OAAO,GAAG,CAAC,EAAE,CAAC;IAClB,CAAC,CAAC;IACF,MAAM,KAAK,GAAqD,EAAE,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YAChD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,WAAW,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACjD,CAAC;QACL,CAAC;aAAM,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC;YACzG,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC,CAAC;AAUF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAiC,EAAE,IAA+C,EAAkB,EAAE,CAAC,CAAC;IACnI,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM;IAC9C,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM;CAC7C,CAAC,CAAC"}

package/dist/models/agent-standing.d.ts

@@ -0,0 +1,55 @@
+import { type AgentAttention, type AgentJob, type AgentStatus, type AgentWatch, type LandConflictReason, type LandFailure } from "../schemas/agents.js";
+import type { QueuePause } from "../schemas/agent.js";
+export type ClientAgentStatus = "draft" | "starting" | "failed" | "resumed";
+export interface AgentStanding {
+    readonly status: AgentStatus | ClientAgentStatus;
+    readonly attention: AgentAttention;
+    readonly watches?: readonly AgentWatch[] | undefined;
+    readonly awaitingWake?: boolean | undefined;
+    readonly jobs?: readonly AgentJob[] | undefined;
+    readonly conflictCauses?: readonly LandConflictReason[] | undefined;
+    readonly failureCode?: string | undefined;
+    readonly failure?: string | undefined;
+    readonly limitResetsAt?: number | undefined;
+    readonly limitHeld?: boolean | undefined;
+    readonly limitScheduled?: boolean | undefined;
+    readonly limitMoving?: string | undefined;
+    readonly landFailure?: LandFailure | undefined;
+    readonly queue?: QueueHold | undefined;
+}
+export interface QueueHold {
+    readonly paused?: QueuePause | undefined;
+    readonly until?: number | undefined;
+    readonly after?: string | undefined;
+    readonly items?: readonly {
+        readonly until?: number | undefined;
+        readonly after?: string | undefined;
+    }[] | undefined;
+}
+export declare const soonestHold: (queue: QueueHold | undefined) => QueueHold | undefined;
+export declare const scheduledSend: (agent: Pick<AgentStanding, "queue">) => boolean;
+export declare const scheduledCount: (agent: Pick<AgentStanding, "queue">) => number;
+export declare const limited: (agent: AgentStanding) => boolean;
+export declare const memoryHeld: (agent: Pick<AgentStanding, "status" | "failureCode">) => boolean;
+export declare const limitClosed: (agent: AgentStanding, now?: number) => boolean;
+export declare const limitScheduled: (agent: AgentStanding) => boolean;
+export declare const limitMoveBooked: (agent: AgentStanding) => boolean;
+export declare const conflictIsYours: (agent: AgentStanding) => boolean;
+export declare const watching: (agent: AgentStanding) => boolean;
+export declare const promptHeldJob: (agent: AgentStanding) => AgentJob | undefined;
+export declare const heldByPrompt: (agent: AgentStanding) => boolean;
+export declare const unregistered: (status: AgentStatus | ClientAgentStatus) => boolean;
+export declare const turnInFlight: (agent: AgentStanding) => boolean;
+export type EndingByHand = Extract<AgentStatus, "stopping" | "dismissing">;
+export declare const endingOf: (agent: AgentStanding) => EndingByHand | undefined;
+export declare const endingByHand: (agent: AgentStanding) => boolean;
+export declare const turnWorking: (agent: AgentStanding) => boolean;
+export declare const writingNow: (agent: AgentStanding) => boolean;
+export declare const landBroken: (agent: AgentStanding) => boolean;
+export declare const blocked: (agent: AgentStanding) => boolean;
+export declare const awaitingUser: (agent: AgentStanding) => boolean;
+export declare const onlyOwnerCanAnswer: (agent: AgentStanding) => boolean;
+export declare const heardByParent: (child: AgentStanding & {
+    readonly updatedAt: number;
+}, parentAt: number) => boolean;
+//# sourceMappingURL=agent-standing.d.ts.map

package/dist/models/agent-standing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-standing.d.ts","sourceRoot":"","sources":["../../src/models/agent-standing.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,WAAW,EAChB,KAAK,UAAU,EAEf,KAAK,kBAAkB,EACvB,KAAK,WAAW,EACnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAetD,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,GAAG,SAAS,CAAC;AAK5E,MAAM,WAAW,aAAa;IAC1B,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,iBAAiB,CAAC;IACjD,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAGnC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,CAAC;IAErD,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAG5C,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,QAAQ,EAAE,GAAG,SAAS,CAAC;IAGhD,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,CAAC;IAIpE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE1C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAEtC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAE5C,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAEzC,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAE9C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAG1C,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;IAI/C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,GAAG,SAAS,CAAC;CAC1C;AAMD,MAAM,WAAW,SAAS;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAAE,GAAG,SAAS,CAAC;CACxH;AAID,eAAO,MAAM,WAAW,UAAW,SAAS,GAAG,SAAS,KAAG,SAAS,GAAG,SActE,CAAC;AAIF,eAAO,MAAM,aAAa,UAAW,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,KAAG,OAAiD,CAAC;AAItH,eAAO,MAAM,cAAc,UAAW,IAAI,CAAC,aAAa,EAAE,OAAO,CAAC,KAAG,MAGpE,CAAC;AAKF,eAAO,MAAM,OAAO,UAAW,aAAa,KAAG,OAAyE,CAAC;AAKzH,eAAO,MAAM,UAAU,UAAW,IAAI,CAAC,aAAa,EAAE,QAAQ,GAAG,aAAa,CAAC,KAAG,OACR,CAAC;AAI3E,eAAO,MAAM,WAAW,UAAW,aAAa,QAAO,MAAM,KAAgB,OACe,CAAC;AAM7F,eAAO,MAAM,cAAc,UAAW,aAAa,KAAG,OAA0D,CAAC;AAIjH,eAAO,MAAM,eAAe,UAAW,aAAa,KAAG,OAAmE,CAAC;AAQ3H,eAAO,MAAM,eAAe,UAAW,aAAa,KAAG,OACkF,CAAC;AAK1I,eAAO,MAAM,QAAQ,UAAW,aAAa,KAAG,OAA4B,CAAC;AAK7E,eAAO,MAAM,aAAa,UAAW,aAAa,KAAG,QAAQ,GAAG,SAG/D,CAAC;AAMF,eAAO,MAAM,YAAY,UAAW,aAAa,KAAG,OAWnD,CAAC;AAMF,eAAO,MAAM,YAAY,WAAY,WAAW,GAAG,iBAAiB,KAAG,OACuB,CAAC;AAQ/F,eAAO,MAAM,YAAY,UAAW,aAAa,KAAG,OAMtB,CAAC;AAI/B,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,UAAU,GAAG,YAAY,CAAC,CAAC;AAI3E,eAAO,MAAM,QAAQ,UAAW,aAAa,KAAG,YAAY,GAAG,SAC4B,CAAC;AAI5F,eAAO,MAAM,YAAY,UAAW,aAAa,KAAG,OAAwC,CAAC;AAM7F,eAAO,MAAM,WAAW,UAAW,aAAa,KAAG,OAAoF,CAAC;AAKxI,eAAO,MAAM,UAAU,UAAW,aAAa,KAAG,OAAoE,CAAC;AAWvH,eAAO,MAAM,UAAU,UAAW,aAAa,KAAG,OAAkE,CAAC;AAErH,eAAO,MAAM,OAAO,UAAW,aAAa,KAAG,OAaH,CAAC;AAK7C,eAAO,MAAM,YAAY,UAAW,aAAa,KAAG,OAC2F,CAAC;AAMhJ,eAAO,MAAM,kBAAkB,UAAW,aAAa,KAAG,OAO+B,CAAC;AAU1F,eAAO,MAAM,aAAa,UAAW,aAAa,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,YAAY,MAAM,KAAG,OAS1E,CAAC"}

package/dist/models/agent-standing.js

@@ -0,0 +1,82 @@
+import { awaitsWake, } from "../schemas/agents.js";
+export const soonestHold = (queue) => {
+    if (queue?.paused === "scheduled") {
+        if (queue.after !== undefined) {
+            return { paused: "scheduled", after: queue.after };
+        }
+        return queue.until === undefined ? { paused: "scheduled" } : { paused: "scheduled", until: queue.until };
+    }
+    const items = queue?.items ?? [];
+    const instants = items.flatMap((item) => (item.until === undefined ? [] : [item.until]));
+    if (instants.length > 0) {
+        return { paused: "scheduled", until: Math.min(...instants) };
+    }
+    const after = items.find((item) => item.after !== undefined)?.after;
+    return after === undefined ? undefined : { paused: "scheduled", after };
+};
+export const scheduledSend = (agent) => soonestHold(agent.queue) !== undefined;
+export const scheduledCount = (agent) => {
+    const items = agent.queue?.items ?? [];
+    return agent.queue?.paused === "scheduled" ? items.length : items.filter((item) => item.until !== undefined || item.after !== undefined).length;
+};
+export const limited = (agent) => agent.status === "error" && agent.failureCode === "rate_limit";
+export const memoryHeld = (agent) => agent.status === "error" && agent.failureCode === "sandbox-memory-low";
+export const limitClosed = (agent, now = Date.now()) => limited(agent) && agent.limitResetsAt !== undefined && agent.limitResetsAt * 1_000 > now;
+export const limitScheduled = (agent) => limited(agent) && agent.limitScheduled === true;
+export const limitMoveBooked = (agent) => limitScheduled(agent) && agent.limitMoving !== undefined;
+export const conflictIsYours = (agent) => agent.conflictCauses !== undefined && agent.conflictCauses.length > 0 && agent.conflictCauses.every((cause) => cause === "workspace");
+export const watching = (agent) => awaitsWake(agent);
+export const promptHeldJob = (agent) => {
+    const armed = new Set((agent.watches ?? []).map((watch) => watch.id));
+    return agent.jobs?.find((job) => job.endedAt === undefined && job.inputWait !== undefined && job.watch !== undefined && armed.has(job.watch));
+};
+export const heldByPrompt = (agent) => {
+    const watches = agent.watches ?? [];
+    if (watches.length === 0 || turnInFlight(agent)) {
+        return false;
+    }
+    const prompts = new Set((agent.jobs ?? [])
+        .filter((job) => job.endedAt === undefined && job.inputWait !== undefined && job.watch !== undefined)
+        .map((job) => job.watch));
+    return watches.every((watch) => prompts.has(watch.id));
+};
+export const unregistered = (status) => status === "draft" || status === "starting" || status === "failed" || status === "resumed";
+export const turnInFlight = (agent) => agent.status === "running" ||
+    agent.status === "starting" ||
+    agent.status === "stopping" ||
+    agent.status === "dismissing" ||
+    agent.status === "resuming" ||
+    agent.status === "landing";
+export const endingOf = (agent) => agent.status === "stopping" || agent.status === "dismissing" ? agent.status : undefined;
+export const endingByHand = (agent) => endingOf(agent) !== undefined;
+export const turnWorking = (agent) => turnInFlight(agent) && agent.status !== "landing" && !endingByHand(agent);
+export const writingNow = (agent) => agent.status === "running" || agent.status === "starting";
+const BLOCKING_ENDINGS = new Set(["error", "interrupted", "stopping", "stopped", "failed"]);
+export const landBroken = (agent) => agent.landFailure !== undefined && !turnInFlight(agent);
+export const blocked = (agent) => limitScheduled(agent)
+    ? false
+    : agent.attention.plan ||
+        agent.attention.question ||
+        agent.attention.permission ||
+        agent.attention.capability ||
+        agent.attention.conflict ||
+        (agent.attention.need === true && agent.status !== "running") ||
+        landBroken(agent) ||
+        heldByPrompt(agent) ||
+        BLOCKING_ENDINGS.has(agent.status);
+export const awaitingUser = (agent) => agent.attention.plan || agent.attention.question || agent.attention.permission || agent.attention.capability || agent.status === "awaiting";
+export const onlyOwnerCanAnswer = (agent) => agent.attention.plan ||
+    agent.attention.permission ||
+    agent.attention.capability ||
+    agent.attention.credential ||
+    agent.attention.need === true ||
+    (agent.status === "awaiting" && !agent.attention.question) ||
+    ((agent.attention.conflict || agent.status === "conflict") && conflictIsYours(agent));
+export const heardByParent = (child, parentAt) => BLOCKING_ENDINGS.has(child.status) &&
+    child.status !== "stopping" &&
+    !limitScheduled(child) &&
+    !child.attention.question &&
+    !child.attention.conflict &&
+    !landBroken(child) &&
+    child.updatedAt < parentAt;
+//# sourceMappingURL=agent-standing.js.map

package/dist/models/agent-standing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-standing.js","sourceRoot":"","sources":["../../src/models/agent-standing.ts"],"names":[],"mappings":"AAAA,OAAO,EAKH,UAAU,GAGb,MAAM,sBAAsB,CAAC;AAuE9B,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAA4B,EAAyB,EAAE;IAC/E,IAAI,KAAK,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;QAChC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;QACvD,CAAC;QACD,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC7G,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,KAAK,CAAC;IACpE,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AAC5E,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAmC,EAAW,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;AAItH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAmC,EAAU,EAAE;IAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC;IACvC,OAAO,KAAK,CAAC,KAAK,EAAE,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;AACpJ,CAAC,CAAC;AAKF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAoB,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,WAAW,KAAK,YAAY,CAAC;AAKzH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAoD,EAAW,EAAE,CACxF,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,WAAW,KAAK,oBAAoB,CAAC;AAI3E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAoB,EAAE,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE,EAAW,EAAE,CACnF,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,GAAG,KAAK,GAAG,GAAG,CAAC;AAM7F,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAoB,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,IAAI,CAAC;AAIjH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAoB,EAAW,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC;AAQ3H,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAoB,EAAW,EAAE,CAC7D,KAAK,CAAC,cAAc,KAAK,SAAS,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC;AAK1I,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAoB,EAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAK7E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAoB,EAAwB,EAAE;IACxE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAClJ,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAoB,EAAW,EAAE;IAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,KAAK,CAAC;IACjB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,GAAG,CACnB,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;SACb,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC;SACpG,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAC/B,CAAC;IACF,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC,CAAC;AAMF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAuC,EAAW,EAAE,CAC7E,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS,CAAC;AAQ/F,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAoB,EAAW,EAAE,CAC1D,KAAK,CAAC,MAAM,KAAK,SAAS;IAC1B,KAAK,CAAC,MAAM,KAAK,UAAU;IAC3B,KAAK,CAAC,MAAM,KAAK,UAAU;IAC3B,KAAK,CAAC,MAAM,KAAK,YAAY;IAC7B,KAAK,CAAC,MAAM,KAAK,UAAU;IAC3B,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;AAQ/B,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAoB,EAA4B,EAAE,CACvE,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAI5F,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAoB,EAAW,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC;AAM7F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAoB,EAAW,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;AAKxI,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAoB,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;AAOvH,MAAM,gBAAgB,GAAiD,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAI1I,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAoB,EAAW,EAAE,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;AAErH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,KAAoB,EAAW,EAAE,CACrD,cAAc,CAAC,KAAK,CAAC;IACjB,CAAC,CAAC,KAAK;IACP,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI;QACpB,KAAK,CAAC,SAAS,CAAC,QAAQ;QACxB,KAAK,CAAC,SAAS,CAAC,UAAU;QAC1B,KAAK,CAAC,SAAS,CAAC,UAAU;QAC1B,KAAK,CAAC,SAAS,CAAC,QAAQ;QAGxB,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC;QAC7D,UAAU,CAAC,KAAK,CAAC;QACjB,YAAY,CAAC,KAAK,CAAC;QACnB,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAK7C,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAoB,EAAW,EAAE,CAC1D,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,UAAU,IAAI,KAAK,CAAC,SAAS,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC;AAMhJ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAoB,EAAW,EAAE,CAChE,KAAK,CAAC,SAAS,CAAC,IAAI;IACpB,KAAK,CAAC,SAAS,CAAC,UAAU;IAC1B,KAAK,CAAC,SAAS,CAAC,UAAU;IAC1B,KAAK,CAAC,SAAS,CAAC,UAAU;IAC1B,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,IAAI;IAC7B,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC;IAC1D,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAU1F,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAqD,EAAE,QAAgB,EAAW,EAAE,CAC9G,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC;IAElC,KAAK,CAAC,MAAM,KAAK,UAAU;IAE3B,CAAC,cAAc,CAAC,KAAK,CAAC;IACtB,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ;IACzB,CAAC,KAAK,CAAC,SAAS,CAAC,QAAQ;IACzB,CAAC,UAAU,CAAC,KAAK,CAAC;IAClB,KAAK,CAAC,SAAS,GAAG,QAAQ,CAAC"}

package/dist/models/agent-starter.d.ts

@@ -0,0 +1,10 @@
+export type StarterLook = {
+    readonly kind: "token";
+    readonly label: string;
+} | {
+    readonly kind: "child";
+    readonly parent: string;
+};
+export declare const starterLook: (startedBy: string | undefined) => StarterLook | undefined;
+export declare const parentOf: (startedBy: string | undefined) => string | undefined;
+//# sourceMappingURL=agent-starter.d.ts.map

package/dist/models/agent-starter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-starter.d.ts","sourceRoot":"","sources":["../../src/models/agent-starter.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,WAAW,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAKnI,eAAO,MAAM,WAAW,cAAe,MAAM,GAAG,SAAS,KAAG,WAAW,GAAG,SAQzE,CAAC;AAIF,eAAO,MAAM,QAAQ,cAAe,MAAM,GAAG,SAAS,KAAG,MAAM,GAAG,SAGjE,CAAC"}

package/dist/models/agent-starter.js

@@ -0,0 +1,16 @@
+const TOKEN_PREFIX = "token:";
+const CHILD_PREFIX = "agent:";
+export const starterLook = (startedBy) => {
+    if (startedBy?.startsWith(TOKEN_PREFIX) === true) {
+        return { kind: "token", label: startedBy.slice(TOKEN_PREFIX.length) };
+    }
+    if (startedBy?.startsWith(CHILD_PREFIX) === true) {
+        return { kind: "child", parent: startedBy.slice(CHILD_PREFIX.length) };
+    }
+    return undefined;
+};
+export const parentOf = (startedBy) => {
+    const look = starterLook(startedBy);
+    return look?.kind === "child" ? look.parent : undefined;
+};
+//# sourceMappingURL=agent-starter.js.map

package/dist/models/agent-starter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-starter.js","sourceRoot":"","sources":["../../src/models/agent-starter.ts"],"names":[],"mappings":"AAOA,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,SAA6B,EAA2B,EAAE;IAClF,IAAI,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,SAAS,EAAE,UAAU,CAAC,YAAY,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/C,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,SAAS,CAAC;AACrB,CAAC,CAAC;AAIF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,SAA6B,EAAsB,EAAE;IAC1E,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IACpC,OAAO,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC,CAAC"}

package/dist/netd/generated/wire.d.ts

@@ -64,7 +64,7 @@ export type NetdAnswer = {
     "answer": "sync";
     generations: Array<number | null>;
 };
-export type NetdHeader = "x-intentic-preview" | "x-intentic-preview-unreachable";
+export type NetdHeader = "x-intentic-preview" | "x-intentic-preview-unreachable" | "x-intentic-listener";
 export type NetdQuestion = {
     "question": "sync";
     dirs: Array<string>;

package/dist/netd/generated/wire.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../../src/netd/generated/wire.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,MAAM,GAAG;IAAE,QAAQ,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,YAAY,CAAC;CAAE,GAAG;IAAE,QAAQ,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAIhH,MAAM,CAAC,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAK1C,MAAM,MAAM,WAAW,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;CAAE,CAAC;AAEvE,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CAAE,CAAC;AAKvD,MAAM,MAAM,QAAQ,GAAG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;CAAE,CAAC;AAKthB,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAIvF,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAI9B,gBAAgB,EAAE,MAAM,CAAC;CAAE,CAAC;AAE5B,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAAE,CAAC;AAMlF,MAAM,MAAM,UAAU,GAAG,oBAAoB,GAAG,gCAAgC,CAAC;AAKjF,MAAM,MAAM,YAAY,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAAE,CAAC;AAKxE,MAAM,MAAM,IAAI,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE;SAAG,GAAG,IAAI,MAAM,GAAG,MAAM;KAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CAAE,CAAC;AAK3F,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAC;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAK1H,MAAM,MAAM,QAAQ,GAAG;IAAE,UAAU,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;CAAE,GAAG;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtJ,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAKtC,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;CAAE,CAAC;AAKlO,MAAM,MAAM,MAAM,GAAG;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,aAAa,CAAC;CAAE,CAAC;AAM5Q,MAAM,MAAM,YAAY,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAAE,CAAC;AAKhF,MAAM,MAAM,aAAa,GAAG;IAAE,SAAS,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC;AAKjG,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAIpE,SAAS,EAAE,OAAO,CAAC;IAInB,SAAS,EAAE,OAAO,CAAC;CAAE,CAAC;AAMtB,MAAM,MAAM,eAAe,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;CAAE,CAAC"}
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../../src/netd/generated/wire.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,MAAM,GAAG;IAAE,QAAQ,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,YAAY,CAAC;CAAE,GAAG;IAAE,QAAQ,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,YAAY,CAAC;IAIhH,MAAM,CAAC,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAK1C,MAAM,MAAM,WAAW,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;CAAE,CAAC;AAEvE,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CAAE,CAAC;AAKvD,MAAM,MAAM,QAAQ,GAAG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,YAAY,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,YAAY,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,eAAe,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;CAAE,CAAC;AAKthB,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAIvF,SAAS,CAAC,EAAE,MAAM,CAAC;IAInB,cAAc,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAI9B,gBAAgB,EAAE,MAAM,CAAC;CAAE,CAAC;AAE5B,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;CAAE,CAAC;AAMlF,MAAM,MAAM,UAAU,GAAG,oBAAoB,GAAG,gCAAgC,GAAG,qBAAqB,CAAC;AAKzG,MAAM,MAAM,YAAY,GAAG;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAAE,CAAC;AAKxE,MAAM,MAAM,IAAI,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE;SAAG,GAAG,IAAI,MAAM,GAAG,MAAM;KAAE,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CAAE,CAAC;AAK3F,MAAM,MAAM,YAAY,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAC;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;CAAE,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAK1H,MAAM,MAAM,QAAQ,GAAG;IAAE,UAAU,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;CAAE,GAAG;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtJ,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAKtC,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;CAAE,CAAC;AAKlO,MAAM,MAAM,MAAM,GAAG;IAAE,MAAM,EAAE,KAAK,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,aAAa,CAAC;CAAE,CAAC;AAM5Q,MAAM,MAAM,YAAY,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;CAAE,CAAC;AAKhF,MAAM,MAAM,aAAa,GAAG;IAAE,SAAS,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;CAAE,GAAG;IAAE,SAAS,EAAE,SAAS,CAAA;CAAE,CAAC;AAKjG,MAAM,MAAM,QAAQ,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAIpE,SAAS,EAAE,OAAO,CAAC;IAInB,SAAS,EAAE,OAAO,CAAC;CAAE,CAAC;AAMtB,MAAM,MAAM,eAAe,GAAG;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;CAAE,CAAC"}

package/dist/policy/identity-assertion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity-assertion.d.ts","sourceRoot":"","sources":["../../src/policy/identity-assertion.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,eAAO,MAAM,yBAAyB,QAAa,CAAC;AAGpD,eAAO,MAAM,6BAA6B,QAAa,CAAC;AAIxD,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAGjE,eAAO,MAAM,6BAA6B;;;EAA8B,CAAC;AACzE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAGpF,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CAC1B;AAQD,eAAO,MAAM,mBAAmB,WAAY,MAAM,KAAG,OAAoD,CAAC;AAE1G,eAAO,MAAM,qBAAqB,kBACf,MAAM,SACd;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B,KACF,MA2BF,CAAC;AAyBF,eAAO,MAAM,uBAAuB,iBAAkB,MAAM,SAAS,MAAM,SAAS,MAAM,KAAG,iBAAiB,GAAG,SAuBhH,CAAC"}
+{"version":3,"file":"identity-assertion.d.ts","sourceRoot":"","sources":["../../src/policy/identity-assertion.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB,eAAO,MAAM,yBAAyB,QAAa,CAAC;AAGpD,eAAO,MAAM,6BAA6B,QAAa,CAAC;AAIxD,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAGjE,eAAO,MAAM,6BAA6B;;;EAA8B,CAAC;AACzE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAGpF,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CAC1B;AAQD,eAAO,MAAM,mBAAmB,WAAY,MAAM,KAAG,OAAoD,CAAC;AAE1G,eAAO,MAAM,qBAAqB,kBACf,MAAM,SACd;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CAC3B,KACF,MA2BF,CAAC;AAkBF,eAAO,MAAM,uBAAuB,iBAAkB,MAAM,SAAS,MAAM,SAAS,MAAM,KAAG,iBAAiB,GAAG,SAuBhH,CAAC"}

package/dist/policy/identity-assertion.js

@@ -1,4 +1,5 @@
 import { createPrivateKey, createPublicKey, randomBytes, sign as edSign, verify as edVerify } from "node:crypto";
+import { parseJsonWith } from "@intentic/base/json";
 import { z } from "zod";
 import { SANDBOX_ID } from "../ids/tunnel-ids.js";
 const ASSERTION_PREFIX = "pa1";
@@ -43,14 +44,7 @@ const AssertionPayloadSchema = z.object({
     exp: z.number(),
     jti: z.string().min(16),
 });
-const parsePayload = (payload) => {
-    try {
-        return AssertionPayloadSchema.safeParse(JSON.parse(payload.toString("utf8"))).data;
-    }
-    catch {
-        return undefined;
-    }
-};
+const parsePayload = (payload) => parseJsonWith(payload.toString("utf8"), AssertionPayloadSchema);
 export const verifyIdentityAssertion = (publicKeyPem, token, nowMs) => {
     const [prefix, encodedPayload, encodedSignature, ...rest] = token.split(".");
     if (prefix !== ASSERTION_PREFIX || encodedPayload === undefined || encodedSignature === undefined || rest.length > 0) {

package/dist/policy/identity-assertion.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-assertion.js","sourceRoot":"","sources":["../../src/policy/identity-assertion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AASlD,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAG/B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC;AAGpD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAG,MAAM,CAAC;AAIxD,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAGjE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAazE,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAIzE,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,CAAC,CAAC;AAE1G,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,aAAqB,EACrB,KAMC,EACK,EAAE;IACR,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,yDAAyD,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,yBAAyB,CAAC;IACvD,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,6BAA6B,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,6BAA6B,KAAK,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACvB,IAAI,CAAC,SAAS,CAAC;QACX,CAAC,EAAE,CAAC;QACJ,GAAG,EAAE,KAAK,CAAC,SAAS;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QACvC,GAAG,EAAE,KAAK,CAAC,MAAM;QACjB,GAAG;QACH,GAAG;QACH,GAAG,EAAE,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;KAClC,CAAC,EACF,MAAM,CACT,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;IACtF,OAAO,GAAG,gBAAgB,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;AAC/E,CAAC,CAAC;AAGF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,GAAG,EAAE,6BAA6B;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,OAAe,EAAsD,EAAE;IACzF,IAAI,CAAC;QACD,OAAO,sBAAsB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QAEL,OAAO,SAAS,CAAC;IACrB,CAAC;AACL,CAAC,CAAC;AAKF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,YAAoB,EAAE,KAAa,EAAE,KAAa,EAAiC,EAAE;IACzH,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,MAAM,KAAK,gBAAgB,IAAI,cAAc,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnH,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YACnH,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QAEL,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,6BAA6B,EAAE,CAAC;QACnI,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;AACxI,CAAC,CAAC"}
+{"version":3,"file":"identity-assertion.js","sourceRoot":"","sources":["../../src/policy/identity-assertion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,WAAW,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,MAAM,aAAa,CAAC;AACjH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AASlD,MAAM,gBAAgB,GAAG,KAAK,CAAC;AAG/B,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAC;AAGpD,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAG,MAAM,CAAC;AAIxD,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAGjE,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAazE,MAAM,SAAS,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAIzE,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,gBAAgB,GAAG,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,MAAc,EAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,gBAAgB,GAAG,CAAC,CAAC;AAE1G,MAAM,CAAC,MAAM,qBAAqB,GAAG,CACjC,aAAqB,EACrB,KAMC,EACK,EAAE;IACR,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,yDAAyD,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,yBAAyB,CAAC;IACvD,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,GAAG,6BAA6B,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,uCAAuC,6BAA6B,KAAK,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CACvB,IAAI,CAAC,SAAS,CAAC;QACX,CAAC,EAAE,CAAC;QACJ,GAAG,EAAE,KAAK,CAAC,SAAS;QACpB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE;QACvC,GAAG,EAAE,KAAK,CAAC,MAAM;QACjB,GAAG;QACH,GAAG;QACH,GAAG,EAAE,SAAS,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;KAClC,CAAC,EACF,MAAM,CACT,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC;IACtF,OAAO,GAAG,gBAAgB,IAAI,SAAS,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;AAC/E,CAAC,CAAC;AAGF,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;IACjC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,GAAG,EAAE,6BAA6B;IAClC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;CAC1B,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,OAAe,EAAsD,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAK9J,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,YAAoB,EAAE,KAAa,EAAE,KAAa,EAAiC,EAAE;IACzH,MAAM,CAAC,MAAM,EAAE,cAAc,EAAE,gBAAgB,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,MAAM,KAAK,gBAAgB,IAAI,cAAc,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnH,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACzD,IAAI,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,eAAe,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YACnH,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QAEL,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG,GAAG,IAAI,GAAG,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,6BAA6B,EAAE,CAAC;QACnI,OAAO,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;AACxI,CAAC,CAAC"}

package/dist/policy/keyring-seal.d.ts

@@ -0,0 +1,48 @@
+import { type KeyringGrant, type SealedBox, type SignedKeyringGrant } from "../schemas/keyring.js";
+export interface KeyringKeyPair {
+    readonly publicKey: string;
+    readonly privateKey: string;
+}
+export declare const newSealKeyPair: () => KeyringKeyPair;
+export declare const newSignKeyPair: () => KeyringKeyPair;
+export type SealPurpose = {
+    readonly kind: "release";
+    readonly sandbox: string;
+    readonly secret: string;
+    readonly nonce: string;
+} | {
+    readonly kind: "type";
+    readonly sandbox: string;
+    readonly secret: string;
+    readonly nonce: string;
+} | {
+    readonly kind: "inbox";
+    readonly sandbox: string;
+    readonly secret: string;
+} | {
+    readonly kind: "copy";
+    readonly sandbox: string;
+    readonly secret: string;
+    readonly updatedAt: number;
+} | {
+    readonly kind: "sync";
+    readonly account: string;
+    readonly device: string;
+    readonly revision: number;
+};
+export declare const sealAad: (purpose: SealPurpose) => Buffer;
+export declare const seal: (recipient: string, plaintext: string, purpose: SealPurpose) => SealedBox;
+export declare const unseal: (pair: KeyringKeyPair, box: SealedBox, purpose: SealPurpose) => string;
+export declare const grantNonce: () => string;
+export declare const signGrant: (pair: KeyringKeyPair, grant: KeyringGrant) => SignedKeyringGrant;
+export type GrantVerdict = {
+    readonly ok: true;
+    readonly grant: KeyringGrant;
+} | {
+    readonly ok: false;
+    readonly code: "bad-grant" | "expired";
+    readonly reason: string;
+};
+export declare const verifyGrant: (signKey: string, signed: SignedKeyringGrant, nowMs: number) => GrantVerdict;
+export declare const keyFingerprint: (key: string) => string;
+//# sourceMappingURL=keyring-seal.d.ts.map

package/dist/policy/keyring-seal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring-seal.d.ts","sourceRoot":"","sources":["../../src/policy/keyring-seal.ts"],"names":[],"mappings":"AAEA,OAAO,EAIH,KAAK,YAAY,EACjB,KAAK,SAAS,EAEd,KAAK,kBAAkB,EAC1B,MAAM,uBAAuB,CAAC;AAa/B,MAAM,WAAW,cAAc;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC/B;AAaD,eAAO,MAAM,cAAc,QAAO,cAAkC,CAAC;AACrE,eAAO,MAAM,cAAc,QAAO,cAAmC,CAAC;AAQtE,MAAM,MAAM,WAAW,GACjB;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACpG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7E;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACxG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9G,eAAO,MAAM,OAAO,YAAa,WAAW,KAAG,MAY9C,CAAC;AAMF,eAAO,MAAM,IAAI,cAAe,MAAM,aAAa,MAAM,WAAW,WAAW,KAAG,SAQjF,CAAC;AAGF,eAAO,MAAM,MAAM,SAAU,cAAc,OAAO,SAAS,WAAW,WAAW,KAAG,MAOnF,CAAC;AAGF,eAAO,MAAM,UAAU,QAAO,MAA+C,CAAC;AAE9E,eAAO,MAAM,SAAS,SAAU,cAAc,SAAS,YAAY,KAAG,kBAQrE,CAAC;AAEF,MAAM,MAAM,YAAY,GAClB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAI9F,eAAO,MAAM,WAAW,YAAa,MAAM,UAAU,kBAAkB,SAAS,MAAM,KAAG,YA4BxF,CAAC;AAGF,eAAO,MAAM,cAAc,QAAS,MAAM,KAAG,MAI5C,CAAC"}

package/dist/policy/keyring-seal.js

@@ -0,0 +1,94 @@
+import { createCipheriv, createDecipheriv, createPrivateKey, createPublicKey, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes, sign, verify } from "node:crypto";
+import { z } from "zod";
+import { KEYRING_GRANT_TTL_MAX_MS, KEYRING_KEY_RE, KeyringGrantSchema, SealedBoxSchema, } from "../schemas/keyring.js";
+const SEAL_INFO = Buffer.from("intentic-keyring/seal/v1", "utf8");
+const GRANT_DOMAIN = Buffer.from("intentic-keyring/grant/v1\0", "utf8");
+const GRANT_SKEW_MS = 30_000;
+const OkpJwkSchema = z.object({ x: z.string().regex(KEYRING_KEY_RE), d: z.string().regex(KEYRING_KEY_RE) });
+const pairOf = (curve) => {
+    const { privateKey } = curve === "X25519" ? generateKeyPairSync("x25519") : generateKeyPairSync("ed25519");
+    const jwk = OkpJwkSchema.parse(privateKey.export({ format: "jwk" }));
+    return { publicKey: jwk.x, privateKey: jwk.d };
+};
+export const newSealKeyPair = () => pairOf("X25519");
+export const newSignKeyPair = () => pairOf("Ed25519");
+const publicKeyOf = (curve, x) => createPublicKey({ key: { kty: "OKP", crv: curve, x }, format: "jwk" });
+const privateKeyOf = (curve, pair) => createPrivateKey({ key: { kty: "OKP", crv: curve, x: pair.publicKey, d: pair.privateKey }, format: "jwk" });
+export const sealAad = (purpose) => {
+    switch (purpose.kind) {
+        case "release":
+        case "type":
+            return Buffer.from(`${purpose.kind}\0${purpose.sandbox}\0${purpose.secret}\0${purpose.nonce}`, "utf8");
+        case "inbox":
+            return Buffer.from(`inbox\0${purpose.sandbox}\0${purpose.secret}`, "utf8");
+        case "copy":
+            return Buffer.from(`copy\0${purpose.sandbox}\0${purpose.secret}\0${String(purpose.updatedAt)}`, "utf8");
+        case "sync":
+            return Buffer.from(`sync\0${purpose.account}\0${purpose.device}\0${String(purpose.revision)}`, "utf8");
+    }
+};
+const boxKey = (shared, epk, recipient) => Buffer.from(hkdfSync("sha256", shared, Buffer.concat([Buffer.from(epk, "base64url"), Buffer.from(recipient, "base64url")]), SEAL_INFO, 32));
+export const seal = (recipient, plaintext, purpose) => {
+    const ephemeral = newSealKeyPair();
+    const shared = diffieHellman({ privateKey: privateKeyOf("X25519", ephemeral), publicKey: publicKeyOf("X25519", recipient) });
+    const iv = randomBytes(12);
+    const cipher = createCipheriv("aes-256-gcm", boxKey(shared, ephemeral.publicKey, recipient), iv);
+    cipher.setAAD(sealAad(purpose));
+    const data = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+    return { v: 1, epk: ephemeral.publicKey, iv: iv.toString("base64url"), tag: cipher.getAuthTag().toString("base64url"), data: data.toString("base64url") };
+};
+export const unseal = (pair, box, purpose) => {
+    const parsed = SealedBoxSchema.parse(box);
+    const shared = diffieHellman({ privateKey: privateKeyOf("X25519", pair), publicKey: publicKeyOf("X25519", parsed.epk) });
+    const decipher = createDecipheriv("aes-256-gcm", boxKey(shared, parsed.epk, pair.publicKey), Buffer.from(parsed.iv, "base64url"));
+    decipher.setAAD(sealAad(purpose));
+    decipher.setAuthTag(Buffer.from(parsed.tag, "base64url"));
+    return Buffer.concat([decipher.update(Buffer.from(parsed.data, "base64url")), decipher.final()]).toString("utf8");
+};
+export const grantNonce = () => randomBytes(16).toString("base64url");
+export const signGrant = (pair, grant) => {
+    const body = KeyringGrantSchema.parse(grant);
+    if (body.expiresAt - body.issuedAt > KEYRING_GRANT_TTL_MAX_MS || body.expiresAt <= body.issuedAt) {
+        throw new Error(`a keyring grant lives at most ${String(KEYRING_GRANT_TTL_MAX_MS / 1000)} s`);
+    }
+    const payload = Buffer.from(JSON.stringify(body), "utf8");
+    const sig = sign(null, Buffer.concat([GRANT_DOMAIN, payload]), privateKeyOf("Ed25519", pair));
+    return { payload: payload.toString("base64url"), sig: sig.toString("base64url") };
+};
+export const verifyGrant = (signKey, signed, nowMs) => {
+    let payload;
+    try {
+        payload = Buffer.from(signed.payload, "base64url");
+        if (!verify(null, Buffer.concat([GRANT_DOMAIN, payload]), publicKeyOf("Ed25519", signKey), Buffer.from(signed.sig, "base64url"))) {
+            return { ok: false, code: "bad-grant", reason: "the grant's signature is not the sandbox's" };
+        }
+    }
+    catch {
+        return { ok: false, code: "bad-grant", reason: "the grant could not be read" };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(payload.toString("utf8"));
+    }
+    catch {
+        return { ok: false, code: "bad-grant", reason: "the grant is not JSON" };
+    }
+    const grant = KeyringGrantSchema.safeParse(parsed);
+    if (!grant.success) {
+        return { ok: false, code: "bad-grant", reason: "the grant is not one this keyring knows how to read" };
+    }
+    const { issuedAt, expiresAt } = grant.data;
+    if (expiresAt - issuedAt > KEYRING_GRANT_TTL_MAX_MS || expiresAt <= issuedAt || issuedAt > nowMs + GRANT_SKEW_MS) {
+        return { ok: false, code: "bad-grant", reason: "the grant's times are not ones this sandbox would sign" };
+    }
+    if (expiresAt <= nowMs) {
+        return { ok: false, code: "expired", reason: "the grant has expired: the sandbox asks again" };
+    }
+    return { ok: true, grant: grant.data };
+};
+export const keyFingerprint = (key) => {
+    const raw = Buffer.from(key, "base64url");
+    const hex = raw.subarray(0, 8).toString("hex").toUpperCase();
+    return hex.replace(/(.{4})(?=.)/gu, "$1-");
+};
+//# sourceMappingURL=keyring-seal.js.map

package/dist/policy/keyring-seal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring-seal.js","sourceRoot":"","sources":["../../src/policy/keyring-seal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe,EAAE,aAAa,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAkB,MAAM,aAAa,CAAC;AAC3L,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACH,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAGlB,eAAe,GAElB,MAAM,uBAAuB,CAAC;AAO/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC;AAClE,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE,MAAM,CAAC,CAAC;AAExE,MAAM,aAAa,GAAG,MAAM,CAAC;AAW7B,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;AAE5G,MAAM,MAAM,GAAG,CAAC,KAAY,EAAkB,EAAE;IAC5C,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IAC3G,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;AACnD,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,cAAc,GAAG,GAAmB,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,GAAmB,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;AAEtE,MAAM,WAAW,GAAG,CAAC,KAAY,EAAE,CAAS,EAAa,EAAE,CAAC,eAAe,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AACnI,MAAM,YAAY,GAAG,CAAC,KAAY,EAAE,IAAoB,EAAa,EAAE,CACnE,gBAAgB,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAWhH,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAoB,EAAU,EAAE;IACpD,QAAQ,OAAO,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,SAAS,CAAC;QACf,KAAK,MAAM;YACP,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,KAAK,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3G,KAAK,OAAO;YACR,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/E,KAAK,MAAM;YACP,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAC5G,KAAK,MAAM;YACP,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,OAAO,CAAC,OAAO,KAAK,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/G,CAAC;AACL,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,GAAW,EAAE,SAAiB,EAAU,EAAE,CACtE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;AAGhJ,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,SAAiB,EAAE,SAAiB,EAAE,OAAoB,EAAa,EAAE;IAC1F,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;IAC7H,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;IACjG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/E,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AAC9J,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,IAAoB,EAAE,GAAc,EAAE,OAAoB,EAAU,EAAE;IACzF,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAClI,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAClC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACtH,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,UAAU,GAAG,GAAW,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAE9E,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAoB,EAAE,KAAmB,EAAsB,EAAE;IACvF,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,GAAG,wBAAwB,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC/F,MAAM,IAAI,KAAK,CAAC,iCAAiC,MAAM,CAAC,wBAAwB,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9F,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;AACtF,CAAC,CAAC;AAQF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,MAA0B,EAAE,KAAa,EAAgB,EAAE;IACpG,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACD,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,EAAE,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC;YAC/H,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;QAClG,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IAC3G,CAAC;IACD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;IAC3C,IAAI,SAAS,GAAG,QAAQ,GAAG,wBAAwB,IAAI,SAAS,IAAI,QAAQ,IAAI,QAAQ,GAAG,KAAK,GAAG,aAAa,EAAE,CAAC;QAC/G,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,wDAAwD,EAAE,CAAC;IAC9G,CAAC;IACD,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,+CAA+C,EAAE,CAAC;IACnG,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC,CAAC;AAGF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAW,EAAU,EAAE;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7D,OAAO,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC,CAAC"}

package/dist/policy/message-limits.d.ts

@@ -1,11 +1,13 @@
 export declare const MESSAGE_LIMITS: {
     readonly bluesky: 300;
     readonly discord: 2000;
+    readonly facebook: 63206;
     readonly instagram: 2200;
     readonly linkedin: 3000;
     readonly mastodon: 500;
     readonly slack: 4000;
     readonly telegram: 4096;
+    readonly tiktok: 4000;
     readonly whatsapp: 65536;
     readonly x: 280;
     readonly youtube: 5000;

package/dist/policy/message-limits.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-limits.d.ts","sourceRoot":"","sources":["../../src/policy/message-limits.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc;sBACd,GAAG;sBACH,IAAK;wBACH,IAAK;uBACN,IAAK;uBACL,GAAG;oBAEN,IAAK;uBAEF,IAAK;uBAEL,KAAM;gBACb,GAAG;sBACG,IAAK;CACmC,CAAC;AAMtD,eAAO,MAAM,cAAc,aAAc,MAAM,KAAG,MAAM,GAAG,SAA+C,CAAC"}
+{"version":3,"file":"message-limits.d.ts","sourceRoot":"","sources":["../../src/policy/message-limits.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,cAAc;sBACd,GAAG;sBACH,IAAK;uBACJ,KAAM;wBACL,IAAK;uBACN,IAAK;uBACL,GAAG;oBAEN,IAAK;uBAEF,IAAK;qBAEP,IAAK;uBAEH,KAAM;gBACb,GAAG;sBACG,IAAK;CACmC,CAAC;AAMtD,eAAO,MAAM,cAAc,aAAc,MAAM,KAAG,MAAM,GAAG,SAA+C,CAAC"}

package/dist/policy/message-limits.js

@@ -1,11 +1,13 @@
 export const MESSAGE_LIMITS = {
     bluesky: 300,
     discord: 2_000,
+    facebook: 63_206,
     instagram: 2_200,
     linkedin: 3_000,
     mastodon: 500,
     slack: 4_000,
     telegram: 4_096,
+    tiktok: 4_000,
     whatsapp: 65_536,
     x: 280,
     youtube: 5_000,

package/dist/policy/message-limits.js.map

@@ -1 +1 @@
-{"version":3,"file":"message-limits.js","sourceRoot":"","sources":["../../src/policy/message-limits.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,OAAO,EAAE,GAAG;IACZ,OAAO,EAAE,KAAK;IACd,SAAS,EAAE,KAAK;IAChB,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,GAAG;IAEb,KAAK,EAAE,KAAK;IAEZ,QAAQ,EAAE,KAAK;IAEf,QAAQ,EAAE,MAAM;IAChB,CAAC,EAAE,GAAG;IACN,OAAO,EAAE,KAAK;CACmC,CAAC;AAItD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAiB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAsB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC"}
+{"version":3,"file":"message-limits.js","sourceRoot":"","sources":["../../src/policy/message-limits.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,cAAc,GAAG;IAC1B,OAAO,EAAE,GAAG;IACZ,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,KAAK;IAChB,QAAQ,EAAE,KAAK;IACf,QAAQ,EAAE,GAAG;IAEb,KAAK,EAAE,KAAK;IAEZ,QAAQ,EAAE,KAAK;IAEf,MAAM,EAAE,KAAK;IAEb,QAAQ,EAAE,MAAM;IAChB,CAAC,EAAE,GAAG;IACN,OAAO,EAAE,KAAK;CACmC,CAAC;AAItD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAiB,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;AAEvE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAgB,EAAsB,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC"}

package/dist/policy/org-locks.d.ts

@@ -0,0 +1,58 @@
+import { type OrgPolicy, type OrgSection } from "../schemas/organisation.js";
+export declare const ORG_SECTION_ROUTES: {
+    readonly models: {
+        readonly changes: readonly ["accounts.start", "accounts.complete", "accounts.rename", "accounts.disconnect"];
+    };
+    readonly agent: {
+        readonly changes: readonly ["settings.set", "settings.setAgentDomain", "privacy.setPolicy", "privacy.forget", "safety.setPolicy", "skills.save", "skills.remove"];
+        readonly reveals: readonly ["privacy.reveal"];
+    };
+    readonly environment: {
+        readonly changes: readonly ["POST /environment/approve", "POST /environment/runtime-install", "POST /environment/remove", "POST /engines/channel", "POST /engines/update", "POST /engines/revert"];
+    };
+    readonly secrets: {
+        readonly changes: readonly ["secrets.set", "secrets.generate", "secrets.remove", "secrets.setGate", "secrets.removeGate", "secrets.setHosts", "secrets.setPolicy", "capabilities.add", "capabilities.remove", "capabilities.rename", "capabilities.setSecret", "capabilities.sshKey", "capabilities.login"];
+        readonly reveals: readonly ["secrets.reveal"];
+    };
+    readonly "data-protection": {
+        readonly changes: readonly ["compliance.applyPreset"];
+    };
+    readonly extensions: {
+        readonly changes: readonly ["extensions.create", "extensions.remove", "extensions.setSettings", "extensions.approve", "extensions.setEnabled", "extensions.applyUpdate", "extensions.revert", "extensions.setUpdatePolicy", "extensions.devSet", "extensions.devClear", "extensions.devReload"];
+    };
+    readonly access: {
+        readonly changes: readonly ["POST /members", "DELETE /members"];
+    };
+    readonly areas: {
+        readonly changes: readonly ["areas.save", "areas.remove"];
+    };
+    readonly personas: {
+        readonly changes: readonly ["personas.save", "personas.remove", "personas.savePrompt", "personas.saveSkill", "personas.removeSkill"];
+    };
+    readonly updates: {
+        readonly changes: readonly ["system.autoUpdate", "system.skipUpdate"];
+    };
+};
+export declare const ORG_BOUND_ROUTES: readonly string[];
+export declare const orgSectionOfRoute: (routeName: string) => OrgSection | undefined;
+export interface OrgLockRefusal {
+    readonly error: string;
+    readonly reason: "org-locked";
+    readonly section: OrgSection;
+    readonly org: string;
+}
+export declare const orgLockRefusal: (policy: OrgPolicy | undefined, routeName: string | undefined) => OrgLockRefusal | undefined;
+export interface OrgPinRefusal {
+    readonly error: string;
+    readonly reason: "org-pinned";
+    readonly items: readonly string[];
+    readonly org: string;
+}
+export declare const orgPinRefusal: (policy: Pick<OrgPolicy, "orgName">, items: readonly string[]) => OrgPinRefusal;
+export interface OrgMembersOnlyRefusal {
+    readonly error: string;
+    readonly reason: "org-members-only";
+    readonly org: string;
+}
+export declare const orgMembersOnlyRefusal: (policy: Pick<OrgPolicy, "orgName">) => OrgMembersOnlyRefusal;
+//# sourceMappingURL=org-locks.d.ts.map