@ixo/flow-work 0.5.0 → 0.7.0

package/dist/bounded-protocol.d.ts

@@ -0,0 +1,461 @@
+import { z } from 'zod';
+import { BOUNDED_PROTOCOL, RESOURCE_PROFILE, recordDigest } from './bounded-contracts.js';
+import { decodeBoundedJson, encodeBoundedJson, readBoundedRecord, type BoundedJson } from './bounded-codec.js';
+export { BOUNDED_PROTOCOL, RESOURCE_PROFILE, decodeBoundedJson, encodeBoundedJson, recordDigest, readBoundedRecord, };
+export type { BoundedJson };
+export declare const id: z.ZodString;
+export declare const digest: z.ZodString;
+export declare const admissionSchema: z.ZodObject<{
+    id: z.ZodString;
+    flowId: z.ZodString;
+    roomId: z.ZodString;
+    runId: z.ZodString;
+    stepId: z.ZodString;
+    operationId: z.ZodString;
+    fingerprint: z.ZodString;
+    inputDigest: z.ZodString;
+    eligibilityDigest: z.ZodString;
+    grantDigest: z.ZodString;
+    definitionRevision: z.ZodString;
+    actor: z.ZodString;
+    audience: z.ZodString;
+    epoch: z.ZodNumber;
+    stateVersion: z.ZodNumber;
+    safety: z.ZodEnum<{
+        pure: "pure";
+        provider_idempotent: "provider_idempotent";
+        fenced: "fenced";
+        approval_only: "approval_only";
+    }>;
+}, z.core.$strict>;
+export declare const effectSchema: z.ZodObject<{
+    admission: z.ZodObject<{
+        id: z.ZodString;
+        flowId: z.ZodString;
+        roomId: z.ZodString;
+        runId: z.ZodString;
+        stepId: z.ZodString;
+        operationId: z.ZodString;
+        fingerprint: z.ZodString;
+        inputDigest: z.ZodString;
+        eligibilityDigest: z.ZodString;
+        grantDigest: z.ZodString;
+        definitionRevision: z.ZodString;
+        actor: z.ZodString;
+        audience: z.ZodString;
+        epoch: z.ZodNumber;
+        stateVersion: z.ZodNumber;
+        safety: z.ZodEnum<{
+            pure: "pure";
+            provider_idempotent: "provider_idempotent";
+            fenced: "fenced";
+            approval_only: "approval_only";
+        }>;
+    }, z.core.$strict>;
+    sequence: z.ZodNumber;
+    fence: z.ZodNumber;
+    state: z.ZodEnum<{
+        reserved: "reserved";
+        armed: "armed";
+        needs_verification: "needs_verification";
+        prepared: "prepared";
+        succeeded: "succeeded";
+        failed_before_effect: "failed_before_effect";
+    }>;
+    owner: z.ZodNullable<z.ZodString>;
+    expiresAt: z.ZodNumber;
+    startEvent: z.ZodNullable<z.ZodString>;
+    outputDigest: z.ZodNullable<z.ZodString>;
+    outcomesDigest: z.ZodNullable<z.ZodString>;
+    successEvent: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export type Admission = z.infer<typeof admissionSchema>;
+export type Effect = z.infer<typeof effectSchema>;
+export declare const executionRequestSchema: z.ZodObject<{
+    effect: z.ZodObject<{
+        admission: z.ZodObject<{
+            id: z.ZodString;
+            flowId: z.ZodString;
+            roomId: z.ZodString;
+            runId: z.ZodString;
+            stepId: z.ZodString;
+            operationId: z.ZodString;
+            fingerprint: z.ZodString;
+            inputDigest: z.ZodString;
+            eligibilityDigest: z.ZodString;
+            grantDigest: z.ZodString;
+            definitionRevision: z.ZodString;
+            actor: z.ZodString;
+            audience: z.ZodString;
+            epoch: z.ZodNumber;
+            stateVersion: z.ZodNumber;
+            safety: z.ZodEnum<{
+                pure: "pure";
+                provider_idempotent: "provider_idempotent";
+                fenced: "fenced";
+                approval_only: "approval_only";
+            }>;
+        }, z.core.$strict>;
+        sequence: z.ZodNumber;
+        fence: z.ZodNumber;
+        state: z.ZodEnum<{
+            reserved: "reserved";
+            armed: "armed";
+            needs_verification: "needs_verification";
+            prepared: "prepared";
+            succeeded: "succeeded";
+            failed_before_effect: "failed_before_effect";
+        }>;
+        owner: z.ZodNullable<z.ZodString>;
+        expiresAt: z.ZodNumber;
+        startEvent: z.ZodNullable<z.ZodString>;
+        outputDigest: z.ZodNullable<z.ZodString>;
+        outcomesDigest: z.ZodNullable<z.ZodString>;
+        successEvent: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    inputs: z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>;
+}, z.core.$strict>;
+export type ExecutionRequest = z.infer<typeof executionRequestSchema>;
+export declare const resultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    outcome: z.ZodLiteral<"succeeded">;
+    output: z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>;
+    outcomes: z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>;
+}, z.core.$strict>, z.ZodObject<{
+    outcome: z.ZodLiteral<"failed_before_effect">;
+    error: z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>;
+}, z.core.$strict>, z.ZodObject<{
+    outcome: z.ZodLiteral<"needs_verification">;
+}, z.core.$strict>], "outcome">;
+export type ExecutionResult = z.infer<typeof resultSchema>;
+/** The signed domain grant repeats the complete execution identity. */
+export declare const bindingSchema: z.ZodObject<{
+    protocol: z.ZodLiteral<"bounded-v1">;
+    resourceProfile: z.ZodLiteral<"bounded-v1-60mib">;
+    admission: z.ZodObject<{
+        id: z.ZodString;
+        flowId: z.ZodString;
+        roomId: z.ZodString;
+        runId: z.ZodString;
+        stepId: z.ZodString;
+        operationId: z.ZodString;
+        fingerprint: z.ZodString;
+        inputDigest: z.ZodString;
+        eligibilityDigest: z.ZodString;
+        grantDigest: z.ZodString;
+        definitionRevision: z.ZodString;
+        actor: z.ZodString;
+        audience: z.ZodString;
+        epoch: z.ZodNumber;
+        stateVersion: z.ZodNumber;
+        safety: z.ZodEnum<{
+            pure: "pure";
+            provider_idempotent: "provider_idempotent";
+            fenced: "fenced";
+            approval_only: "approval_only";
+        }>;
+    }, z.core.$strict>;
+    invocationId: z.ZodString;
+    attempt: z.ZodNumber;
+    managerDid: z.ZodString;
+    managerMatrixId: z.ZodString;
+    helperDid: z.ZodString;
+    helperMatrixId: z.ZodString;
+    capability: z.ZodString;
+    actionType: z.ZodString;
+    resource: z.ZodString;
+    deadline: z.ZodNumber;
+    contractCaveats: z.ZodRecord<z.ZodString, z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>>;
+}, z.core.$strict>;
+export type BoundedWorkBinding = z.infer<typeof bindingSchema>;
+export declare const eventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    phase: z.ZodLiteral<"assign">;
+    binding: z.ZodObject<{
+        protocol: z.ZodLiteral<"bounded-v1">;
+        resourceProfile: z.ZodLiteral<"bounded-v1-60mib">;
+        admission: z.ZodObject<{
+            id: z.ZodString;
+            flowId: z.ZodString;
+            roomId: z.ZodString;
+            runId: z.ZodString;
+            stepId: z.ZodString;
+            operationId: z.ZodString;
+            fingerprint: z.ZodString;
+            inputDigest: z.ZodString;
+            eligibilityDigest: z.ZodString;
+            grantDigest: z.ZodString;
+            definitionRevision: z.ZodString;
+            actor: z.ZodString;
+            audience: z.ZodString;
+            epoch: z.ZodNumber;
+            stateVersion: z.ZodNumber;
+            safety: z.ZodEnum<{
+                pure: "pure";
+                provider_idempotent: "provider_idempotent";
+                fenced: "fenced";
+                approval_only: "approval_only";
+            }>;
+        }, z.core.$strict>;
+        invocationId: z.ZodString;
+        attempt: z.ZodNumber;
+        managerDid: z.ZodString;
+        managerMatrixId: z.ZodString;
+        helperDid: z.ZodString;
+        helperMatrixId: z.ZodString;
+        capability: z.ZodString;
+        actionType: z.ZodString;
+        resource: z.ZodString;
+        deadline: z.ZodNumber;
+        contractCaveats: z.ZodRecord<z.ZodString, z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>>;
+    }, z.core.$strict>;
+    delegation: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    phase: z.ZodLiteral<"ready">;
+    binding: z.ZodObject<{
+        protocol: z.ZodLiteral<"bounded-v1">;
+        resourceProfile: z.ZodLiteral<"bounded-v1-60mib">;
+        admission: z.ZodObject<{
+            id: z.ZodString;
+            flowId: z.ZodString;
+            roomId: z.ZodString;
+            runId: z.ZodString;
+            stepId: z.ZodString;
+            operationId: z.ZodString;
+            fingerprint: z.ZodString;
+            inputDigest: z.ZodString;
+            eligibilityDigest: z.ZodString;
+            grantDigest: z.ZodString;
+            definitionRevision: z.ZodString;
+            actor: z.ZodString;
+            audience: z.ZodString;
+            epoch: z.ZodNumber;
+            stateVersion: z.ZodNumber;
+            safety: z.ZodEnum<{
+                pure: "pure";
+                provider_idempotent: "provider_idempotent";
+                fenced: "fenced";
+                approval_only: "approval_only";
+            }>;
+        }, z.core.$strict>;
+        invocationId: z.ZodString;
+        attempt: z.ZodNumber;
+        managerDid: z.ZodString;
+        managerMatrixId: z.ZodString;
+        helperDid: z.ZodString;
+        helperMatrixId: z.ZodString;
+        capability: z.ZodString;
+        actionType: z.ZodString;
+        resource: z.ZodString;
+        deadline: z.ZodNumber;
+        contractCaveats: z.ZodRecord<z.ZodString, z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>>;
+    }, z.core.$strict>;
+    requestEventId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    phase: z.ZodLiteral<"invoke">;
+    binding: z.ZodObject<{
+        protocol: z.ZodLiteral<"bounded-v1">;
+        resourceProfile: z.ZodLiteral<"bounded-v1-60mib">;
+        admission: z.ZodObject<{
+            id: z.ZodString;
+            flowId: z.ZodString;
+            roomId: z.ZodString;
+            runId: z.ZodString;
+            stepId: z.ZodString;
+            operationId: z.ZodString;
+            fingerprint: z.ZodString;
+            inputDigest: z.ZodString;
+            eligibilityDigest: z.ZodString;
+            grantDigest: z.ZodString;
+            definitionRevision: z.ZodString;
+            actor: z.ZodString;
+            audience: z.ZodString;
+            epoch: z.ZodNumber;
+            stateVersion: z.ZodNumber;
+            safety: z.ZodEnum<{
+                pure: "pure";
+                provider_idempotent: "provider_idempotent";
+                fenced: "fenced";
+                approval_only: "approval_only";
+            }>;
+        }, z.core.$strict>;
+        invocationId: z.ZodString;
+        attempt: z.ZodNumber;
+        managerDid: z.ZodString;
+        managerMatrixId: z.ZodString;
+        helperDid: z.ZodString;
+        helperMatrixId: z.ZodString;
+        capability: z.ZodString;
+        actionType: z.ZodString;
+        resource: z.ZodString;
+        deadline: z.ZodNumber;
+        contractCaveats: z.ZodRecord<z.ZodString, z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>>;
+    }, z.core.$strict>;
+    requestEventId: z.ZodString;
+    inputs: z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>;
+}, z.core.$strict>, z.ZodObject<{
+    phase: z.ZodLiteral<"receipt">;
+    binding: z.ZodObject<{
+        protocol: z.ZodLiteral<"bounded-v1">;
+        resourceProfile: z.ZodLiteral<"bounded-v1-60mib">;
+        admission: z.ZodObject<{
+            id: z.ZodString;
+            flowId: z.ZodString;
+            roomId: z.ZodString;
+            runId: z.ZodString;
+            stepId: z.ZodString;
+            operationId: z.ZodString;
+            fingerprint: z.ZodString;
+            inputDigest: z.ZodString;
+            eligibilityDigest: z.ZodString;
+            grantDigest: z.ZodString;
+            definitionRevision: z.ZodString;
+            actor: z.ZodString;
+            audience: z.ZodString;
+            epoch: z.ZodNumber;
+            stateVersion: z.ZodNumber;
+            safety: z.ZodEnum<{
+                pure: "pure";
+                provider_idempotent: "provider_idempotent";
+                fenced: "fenced";
+                approval_only: "approval_only";
+            }>;
+        }, z.core.$strict>;
+        invocationId: z.ZodString;
+        attempt: z.ZodNumber;
+        managerDid: z.ZodString;
+        managerMatrixId: z.ZodString;
+        helperDid: z.ZodString;
+        helperMatrixId: z.ZodString;
+        capability: z.ZodString;
+        actionType: z.ZodString;
+        resource: z.ZodString;
+        deadline: z.ZodNumber;
+        contractCaveats: z.ZodRecord<z.ZodString, z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>>;
+    }, z.core.$strict>;
+    requestEventId: z.ZodString;
+    result: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        outcome: z.ZodLiteral<"succeeded">;
+        output: z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>;
+        outcomes: z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"failed_before_effect">;
+        error: z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>;
+    }, z.core.$strict>, z.ZodObject<{
+        outcome: z.ZodLiteral<"needs_verification">;
+    }, z.core.$strict>], "outcome">;
+}, z.core.$strict>, z.ZodObject<{
+    phase: z.ZodLiteral<"input_request">;
+    binding: z.ZodObject<{
+        protocol: z.ZodLiteral<"bounded-v1">;
+        resourceProfile: z.ZodLiteral<"bounded-v1-60mib">;
+        admission: z.ZodObject<{
+            id: z.ZodString;
+            flowId: z.ZodString;
+            roomId: z.ZodString;
+            runId: z.ZodString;
+            stepId: z.ZodString;
+            operationId: z.ZodString;
+            fingerprint: z.ZodString;
+            inputDigest: z.ZodString;
+            eligibilityDigest: z.ZodString;
+            grantDigest: z.ZodString;
+            definitionRevision: z.ZodString;
+            actor: z.ZodString;
+            audience: z.ZodString;
+            epoch: z.ZodNumber;
+            stateVersion: z.ZodNumber;
+            safety: z.ZodEnum<{
+                pure: "pure";
+                provider_idempotent: "provider_idempotent";
+                fenced: "fenced";
+                approval_only: "approval_only";
+            }>;
+        }, z.core.$strict>;
+        invocationId: z.ZodString;
+        attempt: z.ZodNumber;
+        managerDid: z.ZodString;
+        managerMatrixId: z.ZodString;
+        helperDid: z.ZodString;
+        helperMatrixId: z.ZodString;
+        capability: z.ZodString;
+        actionType: z.ZodString;
+        resource: z.ZodString;
+        deadline: z.ZodNumber;
+        contractCaveats: z.ZodRecord<z.ZodString, z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>>;
+    }, z.core.$strict>;
+    requestKey: z.ZodString;
+    request: z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>;
+    responders: z.ZodArray<z.ZodString>;
+    deadline: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    phase: z.ZodLiteral<"input_response">;
+    binding: z.ZodObject<{
+        protocol: z.ZodLiteral<"bounded-v1">;
+        resourceProfile: z.ZodLiteral<"bounded-v1-60mib">;
+        admission: z.ZodObject<{
+            id: z.ZodString;
+            flowId: z.ZodString;
+            roomId: z.ZodString;
+            runId: z.ZodString;
+            stepId: z.ZodString;
+            operationId: z.ZodString;
+            fingerprint: z.ZodString;
+            inputDigest: z.ZodString;
+            eligibilityDigest: z.ZodString;
+            grantDigest: z.ZodString;
+            definitionRevision: z.ZodString;
+            actor: z.ZodString;
+            audience: z.ZodString;
+            epoch: z.ZodNumber;
+            stateVersion: z.ZodNumber;
+            safety: z.ZodEnum<{
+                pure: "pure";
+                provider_idempotent: "provider_idempotent";
+                fenced: "fenced";
+                approval_only: "approval_only";
+            }>;
+        }, z.core.$strict>;
+        invocationId: z.ZodString;
+        attempt: z.ZodNumber;
+        managerDid: z.ZodString;
+        managerMatrixId: z.ZodString;
+        helperDid: z.ZodString;
+        helperMatrixId: z.ZodString;
+        capability: z.ZodString;
+        actionType: z.ZodString;
+        resource: z.ZodString;
+        deadline: z.ZodNumber;
+        contractCaveats: z.ZodRecord<z.ZodString, z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>>;
+    }, z.core.$strict>;
+    requestKey: z.ZodString;
+    requestEventId: z.ZodString;
+    response: z.ZodCustom<import("./bounded-canonical.js").CanonicalJsonValue, import("./bounded-canonical.js").CanonicalJsonValue>;
+}, z.core.$strict>], "phase">;
+export type BoundedWorkEvent = z.infer<typeof eventSchema>;
+export type GatewayEvent = {
+    eventId: string;
+    roomId: string;
+    sender: string;
+    type: string;
+    content: BoundedJson;
+    encrypted: boolean;
+    originServerTs: number;
+};
+export declare const EVENT_TYPES: {
+    readonly assign: "ixo.flow.work.assign";
+    readonly ready: "ixo.flow.work.ready";
+    readonly invoke: "ixo.flow.work.invoke";
+    readonly receipt: "ixo.flow.work.receipt";
+    readonly input_request: "ixo.flow.work.input.request";
+    readonly input_response: "ixo.flow.work.input.response";
+};
+/** Validate allocation limits before schema traversal or provider execution. */
+export declare function bounded<T>(schema: z.ZodType<T>, value: unknown): T;
+export declare function text(value: unknown): string;
+export declare function parse<T>(schema: z.ZodType<T>, value: string): T;
+export declare function same(left: unknown, right: unknown): boolean;
+export declare function hash(value: unknown): Promise<string>;
+export declare function validateRequest(value: unknown): Promise<ExecutionRequest>;
+export declare function grantCaveats(binding: BoundedWorkBinding): Record<string, unknown>;
+/** Run and admission may change; an operation's business and authority identity may not. */
+export declare function operationIdentity(binding: BoundedWorkBinding): unknown;
+//# sourceMappingURL=bounded-protocol.d.ts.map

package/dist/bounded-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-protocol.d.ts","sourceRoot":"","sources":["../src/bounded-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,KAAK,WAAW,EACjB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,GAClB,CAAC;AACF,YAAY,EAAE,WAAW,EAAE,CAAC;AAC5B,eAAO,MAAM,EAAE,aAIiB,CAAC;AACjC,eAAO,MAAM,MAAM,aAA4C,CAAC;AAEhE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;kBAmBjB,CAAC;AACZ,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAoBd,CAAC;AACZ,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGlD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAExB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,eAAO,MAAM,YAAY;;;;;;;;;+BAQvB,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAE3D,uEAAuE;AACvE,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiBf,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAC/D,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;6BAkDtB,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAC3D,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,WAAW,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AACF,eAAO,MAAM,WAAW;;;;;;;CAOd,CAAC;AAEX,gFAAgF;AAChF,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAIlE;AACD,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE3C;AACD,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,CAE/D;AACD,wBAAgB,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAE3D;AACD,wBAAsB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAE1D;AACD,wBAAsB,eAAe,CACnC,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,gBAAgB,CAAC,CAK3B;AACD,wBAAgB,YAAY,CAC1B,OAAO,EAAE,kBAAkB,GAC1B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAGzB;AAED,4FAA4F;AAC5F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAqBtE"}

package/dist/bounded-protocol.js

@@ -0,0 +1,193 @@
+import { z } from 'zod';
+import { BOUNDED_PROTOCOL, RESOURCE_PROFILE, recordDigest, } from './bounded-contracts.js';
+import { decodeBoundedJson, encodeBoundedJson, readBoundedRecord, } from './bounded-codec.js';
+export { BOUNDED_PROTOCOL, RESOURCE_PROFILE, decodeBoundedJson, encodeBoundedJson, recordDigest, readBoundedRecord, };
+export const id = z
+    .string()
+    .min(1)
+    .max(480)
+    .refine((v) => v.trim() === v);
+export const digest = z.string().regex(/^sha256:[0-9a-f]{64}$/);
+const integer = z.number().int().safe().nonnegative();
+export const admissionSchema = z
+    .object({
+    id,
+    flowId: id,
+    roomId: id,
+    runId: id,
+    stepId: id,
+    operationId: id,
+    fingerprint: digest,
+    inputDigest: digest,
+    eligibilityDigest: digest,
+    grantDigest: digest,
+    definitionRevision: digest,
+    actor: id,
+    audience: id,
+    epoch: integer.positive(),
+    stateVersion: integer.positive(),
+    safety: z.enum(['pure', 'provider_idempotent', 'fenced', 'approval_only']),
+})
+    .strict();
+export const effectSchema = z
+    .object({
+    admission: admissionSchema,
+    sequence: integer,
+    fence: integer,
+    state: z.enum([
+        'reserved',
+        'armed',
+        'needs_verification',
+        'prepared',
+        'succeeded',
+        'failed_before_effect',
+    ]),
+    owner: id.nullable(),
+    expiresAt: integer,
+    startEvent: id.nullable(),
+    outputDigest: digest.nullable(),
+    outcomesDigest: digest.nullable(),
+    successEvent: id.nullable(),
+})
+    .strict();
+const json = z.custom(() => true);
+export const executionRequestSchema = z
+    .object({ effect: effectSchema, inputs: json })
+    .strict();
+export const resultSchema = z.discriminatedUnion('outcome', [
+    z
+        .object({ outcome: z.literal('succeeded'), output: json, outcomes: json })
+        .strict(),
+    z
+        .object({ outcome: z.literal('failed_before_effect'), error: json })
+        .strict(),
+    z.object({ outcome: z.literal('needs_verification') }).strict(),
+]);
+/** The signed domain grant repeats the complete execution identity. */
+export const bindingSchema = z
+    .object({
+    protocol: z.literal(BOUNDED_PROTOCOL),
+    resourceProfile: z.literal(RESOURCE_PROFILE.id),
+    admission: admissionSchema,
+    invocationId: id,
+    attempt: integer.positive().max(RESOURCE_PROFILE.retryAttempts),
+    managerDid: id,
+    managerMatrixId: id,
+    helperDid: id,
+    helperMatrixId: id,
+    capability: id,
+    actionType: id,
+    resource: id,
+    deadline: integer.positive(),
+    contractCaveats: z.record(z.string(), json),
+})
+    .strict();
+export const eventSchema = z.discriminatedUnion('phase', [
+    z
+        .object({
+        phase: z.literal('assign'),
+        binding: bindingSchema,
+        delegation: z.string().min(1).max(RESOURCE_PROFILE.proofBytes),
+    })
+        .strict(),
+    z
+        .object({
+        phase: z.literal('ready'),
+        binding: bindingSchema,
+        requestEventId: id,
+    })
+        .strict(),
+    z
+        .object({
+        phase: z.literal('invoke'),
+        binding: bindingSchema,
+        requestEventId: id,
+        inputs: json,
+    })
+        .strict(),
+    z
+        .object({
+        phase: z.literal('receipt'),
+        binding: bindingSchema,
+        requestEventId: id,
+        result: resultSchema,
+    })
+        .strict(),
+    z
+        .object({
+        phase: z.literal('input_request'),
+        binding: bindingSchema,
+        requestKey: id,
+        request: json,
+        responders: z.array(id).min(1).max(32),
+        deadline: integer.positive(),
+    })
+        .strict(),
+    z
+        .object({
+        phase: z.literal('input_response'),
+        binding: bindingSchema,
+        requestKey: id,
+        requestEventId: id,
+        response: json,
+    })
+        .strict(),
+]);
+export const EVENT_TYPES = {
+    assign: 'ixo.flow.work.assign',
+    ready: 'ixo.flow.work.ready',
+    invoke: 'ixo.flow.work.invoke',
+    receipt: 'ixo.flow.work.receipt',
+    input_request: 'ixo.flow.work.input.request',
+    input_response: 'ixo.flow.work.input.response',
+};
+/** Validate allocation limits before schema traversal or provider execution. */
+export function bounded(schema, value) {
+    return schema.parse(decodeBoundedJson(encodeBoundedJson(value)));
+}
+export function text(value) {
+    return new TextDecoder().decode(encodeBoundedJson(value));
+}
+export function parse(schema, value) {
+    return schema.parse(decodeBoundedJson(new TextEncoder().encode(value)));
+}
+export function same(left, right) {
+    return text(left) === text(right);
+}
+export async function hash(value) {
+    return recordDigest(encodeBoundedJson(value));
+}
+export async function validateRequest(value) {
+    const request = bounded(executionRequestSchema, value);
+    if ((await hash(request.inputs)) !== request.effect.admission.inputDigest)
+        throw new Error('INPUT_DIGEST_MISMATCH');
+    return request;
+}
+export function grantCaveats(binding) {
+    // Domain caveats remain nested: they cannot replace any execution binding.
+    return { ...binding, delegationDepth: 0 };
+}
+/** Run and admission may change; an operation's business and authority identity may not. */
+export function operationIdentity(binding) {
+    const a = binding.admission;
+    return {
+        flowId: a.flowId,
+        operationId: a.operationId,
+        fingerprint: a.fingerprint,
+        roomId: a.roomId,
+        stepId: a.stepId,
+        safety: a.safety,
+        inputDigest: a.inputDigest,
+        actor: a.actor,
+        audience: a.audience,
+        helperDid: binding.helperDid,
+        helperMatrixId: binding.helperMatrixId,
+        managerDid: binding.managerDid,
+        managerMatrixId: binding.managerMatrixId,
+        capability: binding.capability,
+        actionType: binding.actionType,
+        resource: binding.resource,
+        contractCaveats: binding.contractCaveats,
+    };
+}
+//# sourceMappingURL=bounded-protocol.js.map

package/dist/bounded-protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-protocol.js","sourceRoot":"","sources":["../src/bounded-protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GACb,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,GAClB,CAAC;AAEF,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;KAChB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;AACjC,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AAChE,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;AACtD,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,EAAE;IACF,MAAM,EAAE,EAAE;IACV,MAAM,EAAE,EAAE;IACV,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;IACV,WAAW,EAAE,EAAE;IACf,WAAW,EAAE,MAAM;IACnB,WAAW,EAAE,MAAM;IACnB,iBAAiB,EAAE,MAAM;IACzB,WAAW,EAAE,MAAM;IACnB,kBAAkB,EAAE,MAAM;IAC1B,KAAK,EAAE,EAAE;IACT,QAAQ,EAAE,EAAE;IACZ,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE;IACzB,YAAY,EAAE,OAAO,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,qBAAqB,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;CAC3E,CAAC;KACD,MAAM,EAAE,CAAC;AACZ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,CAAC;IACN,SAAS,EAAE,eAAe;IAC1B,QAAQ,EAAE,OAAO;IACjB,KAAK,EAAE,OAAO;IACd,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;QACZ,UAAU;QACV,OAAO;QACP,oBAAoB;QACpB,UAAU;QACV,WAAW;QACX,sBAAsB;KACvB,CAAC;IACF,KAAK,EAAE,EAAE,CAAC,QAAQ,EAAE;IACpB,SAAS,EAAE,OAAO;IAClB,UAAU,EAAE,EAAE,CAAC,QAAQ,EAAE;IACzB,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,EAAE,CAAC,QAAQ,EAAE;CAC5B,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAc,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;AAC/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;KAC9C,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE;IAC1D,CAAC;SACE,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;SACzE,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACnE,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;CAChE,CAAC,CAAC;AAGH,uEAAuE;AACvE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;IACrC,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAC/C,SAAS,EAAE,eAAe;IAC1B,YAAY,EAAE,EAAE;IAChB,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,aAAa,CAAC;IAC/D,UAAU,EAAE,EAAE;IACd,eAAe,EAAE,EAAE;IACnB,SAAS,EAAE,EAAE;IACb,cAAc,EAAE,EAAE;IAClB,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE,EAAE;IACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC5B,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE;IACvD,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1B,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,gBAAgB,CAAC,UAAU,CAAC;KAC/D,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACzB,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,EAAE;KACnB,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC1B,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,EAAE;QAClB,MAAM,EAAE,IAAI;KACb,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC3B,OAAO,EAAE,aAAa;QACtB,cAAc,EAAE,EAAE;QAClB,MAAM,EAAE,YAAY;KACrB,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;QACjC,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE;KAC7B,CAAC;SACD,MAAM,EAAE;IACX,CAAC;SACE,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAClC,OAAO,EAAE,aAAa;QACtB,UAAU,EAAE,EAAE;QACd,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE,IAAI;KACf,CAAC;SACD,MAAM,EAAE;CACZ,CAAC,CAAC;AAWH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,MAAM,EAAE,sBAAsB;IAC9B,KAAK,EAAE,qBAAqB;IAC5B,MAAM,EAAE,sBAAsB;IAC9B,OAAO,EAAE,uBAAuB;IAChC,aAAa,EAAE,6BAA6B;IAC5C,cAAc,EAAE,8BAA8B;CACtC,CAAC;AAEX,gFAAgF;AAChF,MAAM,UAAU,OAAO,CAAI,MAAoB,EAAE,KAAc;IAC7D,OAAO,MAAM,CAAC,KAAK,CACjB,iBAAiB,CAAC,iBAAiB,CAAC,KAAoB,CAAC,CAAC,CAC3D,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,KAAc;IACjC,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAoB,CAAC,CAAC,CAAC;AAC3E,CAAC;AACD,MAAM,UAAU,KAAK,CAAI,MAAoB,EAAE,KAAa;IAC1D,OAAO,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AACD,MAAM,UAAU,IAAI,CAAC,IAAa,EAAE,KAAc;IAChD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,KAAc;IACvC,OAAO,YAAY,CAAC,iBAAiB,CAAC,KAAoB,CAAC,CAAC,CAAC;AAC/D,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAc;IAEd,MAAM,OAAO,GAAG,OAAO,CAAC,sBAAsB,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW;QACvE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,MAAM,UAAU,YAAY,CAC1B,OAA2B;IAE3B,2EAA2E;IAC3E,OAAO,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC;IAC5B,OAAO;QACL,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,eAAe,EAAE,OAAO,CAAC,eAAe;KACzC,CAAC;AACJ,CAAC"}