@jini-ai/core 0.1.2 → 0.3.0

package/README.md

@@ -0,0 +1,101 @@
+# `@jini-ai/core`
+
+The Jini kernel: typed DI tokens, pack composition and lifecycle, the tool registry, redaction,
+and origin/API-token auth primitives. It has zero runtime dependencies and is not lifted from
+Open Design — it's a from-scratch implementation of the typed composition contract described in
+the extraction plan (a deliberate rejection of the "structural dependency bag" pattern, e.g. OD's
+`ServerContext`, that decays into dozens of `any` fields). A `Pack` is the one composition unit:
+a named bundle of `services`, plus the optional `tools`/`http`/`cli` transports and `dispose`
+teardown that belong to those services. `createDaemon` composes a set of packs against a bound
+set of tokens, and fails to typecheck if any pack's declared dependency is left unbound.
+
+## Install
+
+```sh
+npm install @jini-ai/core
+```
+
+No peer dependencies — this package is pure TypeScript with no runtime dependencies at all.
+
+## What you get
+
+- **DI tokens** — `token<T>(id)` / `manyToken<T>(id)`, nominal and versioned, plus `bindings()`
+  building a typed `Bindings<BoundIds>` set (`.bind`, `.bindMany`) that tracks which ids are bound
+  in its own type parameter.
+- **Pack composition** — `definePack({ name, deps, services, tools?, http?, cli?, dispose? })`,
+  the `Pack`/`PackContainer` types, and `createDaemon({ packs, bindings, transports? })`, which
+  composes packs against bound tokens and resolves each pack's `services` against a container
+  scoped to only that pack's declared `deps`.
+- **Pack lifecycle helpers** — `registerPackTools` (walks composed packs' `tools()` into a shared
+  `ToolRegistry`) and `disposePacks` (best-effort reverse-order teardown; one pack's `dispose`
+  failure never blocks another's, recorded as `PackDisposalFailure`).
+- **Tool registry** — `createToolRegistry()` and the `ToolRegistry`/`ToolDescriptor`/`ToolPolicy`/
+  `ToolHandler`/`ToolRegistration`/`ToolAuthorizationContext`/`AuthorizationDecision` types. The
+  registry's public surface (`register`/`has`/`list`) exposes descriptors only — handlers and
+  policies are never publicly retrievable, so holding a `ToolRegistry` reference lets you enumerate
+  what's available but never run a tool yourself; only `@jini-ai/daemon`'s `ToolExecutor` can.
+- **Principal** — the minimal `Principal` interface (`id` + optional `roles`) a tool call or run is
+  performed on behalf of.
+- **Security/auth primitives** — `redact` (PII/secret redaction, including Luhn-checked card
+  numbers), `api-token-auth`, and `origin-validation` (same-origin decision tree, private-IP/
+  loopback classification), each genericized to take env-var names as config rather than hardcoded
+  product constants.
+
+## Usage
+
+```ts
+import { bindings, definePack, createDaemon, token, createToolRegistry, registerPackTools } from '@jini-ai/core';
+
+interface Logger {
+  log(msg: string): void;
+}
+
+const LoggerToken = token<Logger>('app.logger');
+
+const loggerPack = definePack({
+  name: 'logger',
+  deps: [],
+  services: () => ({ logger: { log: (m: string) => console.log(m) } }),
+});
+
+const consumerPack = definePack({
+  name: 'consumer',
+  deps: [LoggerToken],
+  services: (c) => ({ logger: c.get(LoggerToken) }),
+});
+
+const bound = bindings().bind(LoggerToken, { log: (m: string) => console.log(m) });
+
+const daemon = createDaemon({
+  packs: [loggerPack, consumerPack] as const,
+  bindings: bound,
+});
+
+const registry = createToolRegistry();
+registerPackTools([loggerPack, consumerPack], daemon.services, registry);
+```
+
+## Entry points
+
+| subpath | what's behind it |
+|---|---|
+| `.` | The public surface above: tokens, packs, daemon composition, tool registry (descriptors only), principal, redact, auth primitives. |
+| `./internal` | **Not part of the public contract.** Exposes `authorizeToolInvocation` (resolves a registry's tool and runs its authorization gate — a security-sensitive value export, but one that only ever hands back a handler alongside an `'allow'` decision) plus type-only `AnyPack`/`RequiredTokenIds`/`MissingTokenIds` re-derivation helpers. Its sole intended consumers are `@jini-ai/daemon`'s `ToolExecutor` and `@jini-ai/server`'s `createLocalNodeDaemon`. Node's resolver will happily let any consumer import it — the boundary is enforced by `scripts/check-engine-boundaries.ts`, not by the exports map — so external adopters should treat it as off-limits regardless. |
+
+## What's swappable
+
+Everything a pack declares as a `deps` token is a swap point by construction: bind any
+implementation that satisfies the token's type via `bindings().bind(...)`, and `createDaemon`
+resolves it into that pack's `PackContainer` with no other change. `ToolPolicy.authorize` is
+likewise a seam you supply per tool registration. The kernel logic itself (composition ordering,
+the missing-binding compile-time gate, the tool registry's append-only enforcement) is fixed and
+not meant to be replaced.
+
+## Runtime
+
+Universal — no Node/browser-specific APIs.
+ESM only — ships `"type": "module"` with no CommonJS `require` build.
+
+## Provenance
+
+See [source-map.md](./source-map.md) for per-file provenance and scope decisions. Apache-2.0.

package/dist/daemon.d.ts

@@ -3,9 +3,9 @@ import type { Pack } from './pack.js';
 /**
  * Exported (not just used locally) so `./internal.js` can re-derive `createDaemon`'s exact
  * compile-time "missing binding" gate for a wrapper composition function (today:
- * `@jini-ai/node-host`'s `createLocalNodeDaemon`) without duplicating the type-level logic. Not
+ * `@jini-ai/server`'s `createLocalNodeDaemon`) without duplicating the type-level logic. Not
  * re-exported from `index.ts` — see `./internal.ts`'s module doc for why this stays off the
- * public surface (same boundary pattern as `tool-registry.ts`'s `getToolRegistration`).
+ * public surface (same boundary pattern as `tool-registry.ts`'s `authorizeToolInvocation`).
  */
 export type AnyPack = Pack<any, any, string>;
 export type RequiredTokenIds<Packs extends readonly AnyPack[]> = Packs[number]['deps'][number]['id'];

package/dist/index.d.ts

@@ -3,11 +3,13 @@ export * from './pack.js';
 export * from './bindings.js';
 export type { Daemon, DaemonConfig } from './daemon.js';
 export { createDaemon } from './daemon.js';
+export type { PackDisposalFailure } from './pack-lifecycle.js';
+export { disposePacks, registerPackTools } from './pack-lifecycle.js';
 export * from './redact.js';
 export * from './api-token-auth.js';
 export * from './origin-validation.js';
 export * from './principal.js';
-export type { AuthorizationDecision, RunRef, ToolAuthorizationContext, ToolDescriptor, ToolExecutionContext, ToolHandler, ToolPolicy, ToolRegistration, ToolRegistry, } from './tool-registry.js';
-export { createToolRegistry } from './tool-registry.js';
+export type { AuthorizationDecision, RunRef, SurfaceEmission, SurfaceEmitter, ToolAuthorizationContext, ToolDescriptor, ToolExecutionContext, ToolHandler, ToolPolicy, ToolRegistration, ToolRegistry, } from './tool-registry.js';
+export { createToolRegistry, ToolInputError } from './tool-registry.js';
 export * from './tool-tokens.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAI9B,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,YAAY,EACV,qBAAqB,EACrB,MAAM,EACN,wBAAwB,EACxB,cAAc,EACd,oBAAoB,EACpB,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAI9B,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,YAAY,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACtE,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAC/B,YAAY,EACV,qBAAqB,EACrB,MAAM,EACN,eAAe,EACf,cAAc,EACd,wBAAwB,EACxB,cAAc,EACd,oBAAoB,EACpB,WAAW,EACX,UAAU,EACV,gBAAgB,EAChB,YAAY,GACb,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACxE,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -2,10 +2,11 @@ export * from './token.js';
 export * from './pack.js';
 export * from './bindings.js';
 export { createDaemon } from './daemon.js';
+export { disposePacks, registerPackTools } from './pack-lifecycle.js';
 export * from './redact.js';
 export * from './api-token-auth.js';
 export * from './origin-validation.js';
 export * from './principal.js';
-export { createToolRegistry } from './tool-registry.js';
+export { createToolRegistry, ToolInputError } from './tool-registry.js';
 export * from './tool-tokens.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAK9B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAY/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAK9B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACtE,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC;AACvC,cAAc,gBAAgB,CAAC;AAc/B,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACxE,cAAc,kBAAkB,CAAC"}

package/dist/internal.d.ts

@@ -5,18 +5,22 @@
  * contract. Two unrelated escape hatches live here, each for its own
  * single intended consumer:
  *
- * - {@link getToolRegistration} so `@jini-ai/daemon`'s `ToolExecutor` can
- *   resolve a registered tool's full `{descriptor, handler, policy}`
- *   triple. This is the security-sensitive one: it is a runtime *value*
- *   export that returns live handler closures, and it is what the
- *   `ToolExecutor` authorization gate exists to guard.
- * - `AnyPack`/`RequiredTokenIds`/`MissingTokenIds` so `@jini-ai/node-host`'s
+ * - {@link authorizeToolInvocation} so `@jini-ai/daemon`'s `ToolExecutor` can
+ *   resolve a registered tool and run its authorization gate — the tool's
+ *   own `ToolPolicy`, then an optional transport-level veto — before ever
+ *   receiving the handler. This is the security-sensitive one: it is a
+ *   runtime *value* export, but unlike the `getToolRegistration` it
+ *   replaced (2026-07-29 hardening pass), it only ever returns a handler
+ *   closure alongside a `decision: 'allow'` — a denied or unauthorized call
+ *   gets no handler at all, so the authorization gate cannot be bypassed by
+ *   calling this export directly instead of going through `ToolExecutor`.
+ * - `AnyPack`/`RequiredTokenIds`/`MissingTokenIds` so `@jini-ai/server`'s
  *   `createLocalNodeDaemon` can re-derive `createDaemon`'s exact
  *   compile-time "missing binding" gate on its own wrapper config type,
  *   instead of either duplicating the type-level logic or losing the
  *   compile-time check through the wrapper. These are `import type`-only —
  *   erased at build time, carry no runtime capability, and are not a
- *   security boundary the way {@link getToolRegistration} is.
+ *   security boundary the way {@link authorizeToolInvocation} is.
  *
  * **Correction (2026-07-19 hardening pass):** a package.json `exports` map
  * subpath is NOT a language-level or per-consumer access modifier — Node's
@@ -25,12 +29,13 @@
  * Earlier revisions of this doc comment claimed this boundary was
  * "enforced" by the exports map; that was inaccurate and left the leak
  * undetected. The actual enforcement is `scripts/check-engine-boundaries.ts`'s
- * rule forbidding any *value* import of `getToolRegistration` from
- * `@jini-ai/core/internal` outside `packages/daemon/**` (type-only imports of
- * the DI-token-derivation types remain unrestricted, since they carry no
- * runtime capability). Until that guard is finished and wired into CI, this
- * boundary is documentation-only — treat it as such.
+ * rule forbidding any *value* import from `@jini-ai/core/internal` outside
+ * `packages/daemon/**` (type-only imports of the DI-token-derivation types
+ * remain unrestricted, since they carry no runtime capability) — that guard
+ * is wired in, but is a second, independent layer on top of the 2026-07-29
+ * structural fix above, not a substitute for it.
  */
-export { getToolRegistration } from './tool-registry.js';
+export { authorizeToolInvocation } from './tool-registry.js';
+export type { ToolAuthorizationDelegate, ToolInvocationAuthorization } from './tool-registry.js';
 export type { AnyPack, MissingTokenIds, RequiredTokenIds } from './daemon.js';
 //# sourceMappingURL=internal.d.ts.map

package/dist/internal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../src/internal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}
+{"version":3,"file":"internal.d.ts","sourceRoot":"","sources":["../src/internal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,YAAY,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,oBAAoB,CAAC;AACjG,YAAY,EAAE,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/internal.js

@@ -5,18 +5,22 @@
  * contract. Two unrelated escape hatches live here, each for its own
  * single intended consumer:
  *
- * - {@link getToolRegistration} so `@jini-ai/daemon`'s `ToolExecutor` can
- *   resolve a registered tool's full `{descriptor, handler, policy}`
- *   triple. This is the security-sensitive one: it is a runtime *value*
- *   export that returns live handler closures, and it is what the
- *   `ToolExecutor` authorization gate exists to guard.
- * - `AnyPack`/`RequiredTokenIds`/`MissingTokenIds` so `@jini-ai/node-host`'s
+ * - {@link authorizeToolInvocation} so `@jini-ai/daemon`'s `ToolExecutor` can
+ *   resolve a registered tool and run its authorization gate — the tool's
+ *   own `ToolPolicy`, then an optional transport-level veto — before ever
+ *   receiving the handler. This is the security-sensitive one: it is a
+ *   runtime *value* export, but unlike the `getToolRegistration` it
+ *   replaced (2026-07-29 hardening pass), it only ever returns a handler
+ *   closure alongside a `decision: 'allow'` — a denied or unauthorized call
+ *   gets no handler at all, so the authorization gate cannot be bypassed by
+ *   calling this export directly instead of going through `ToolExecutor`.
+ * - `AnyPack`/`RequiredTokenIds`/`MissingTokenIds` so `@jini-ai/server`'s
  *   `createLocalNodeDaemon` can re-derive `createDaemon`'s exact
  *   compile-time "missing binding" gate on its own wrapper config type,
  *   instead of either duplicating the type-level logic or losing the
  *   compile-time check through the wrapper. These are `import type`-only —
  *   erased at build time, carry no runtime capability, and are not a
- *   security boundary the way {@link getToolRegistration} is.
+ *   security boundary the way {@link authorizeToolInvocation} is.
  *
  * **Correction (2026-07-19 hardening pass):** a package.json `exports` map
  * subpath is NOT a language-level or per-consumer access modifier — Node's
@@ -25,11 +29,11 @@
  * Earlier revisions of this doc comment claimed this boundary was
  * "enforced" by the exports map; that was inaccurate and left the leak
  * undetected. The actual enforcement is `scripts/check-engine-boundaries.ts`'s
- * rule forbidding any *value* import of `getToolRegistration` from
- * `@jini-ai/core/internal` outside `packages/daemon/**` (type-only imports of
- * the DI-token-derivation types remain unrestricted, since they carry no
- * runtime capability). Until that guard is finished and wired into CI, this
- * boundary is documentation-only — treat it as such.
+ * rule forbidding any *value* import from `@jini-ai/core/internal` outside
+ * `packages/daemon/**` (type-only imports of the DI-token-derivation types
+ * remain unrestricted, since they carry no runtime capability) — that guard
+ * is wired in, but is a second, independent layer on top of the 2026-07-29
+ * structural fix above, not a substitute for it.
  */
-export { getToolRegistration } from './tool-registry.js';
+export { authorizeToolInvocation } from './tool-registry.js';
 //# sourceMappingURL=internal.js.map

package/dist/internal.js.map

@@ -1 +1 @@
-{"version":3,"file":"internal.js","sourceRoot":"","sources":["../src/internal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"internal.js","sourceRoot":"","sources":["../src/internal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/origin-validation.d.ts

@@ -36,8 +36,24 @@ export interface OriginValidationEnvConfig {
     /** Env var carrying the host the daemon itself is bound to (default `'127.0.0.1'`). */
     bindHostEnvVar: string;
 }
-/** Parses and validates {@link OriginValidationEnvConfig.allowedOriginsEnvVar} into normalized origins. */
+/**
+ * Parses {@link OriginValidationEnvConfig.allowedOriginsEnvVar} into normalized origins.
+ *
+ * Deliberately never throws — this is on the hot path of {@link isLocalSameOrigin}, called fresh
+ * on every same-origin decision a host makes. A malformed entry is dropped and logged instead of
+ * aborting the whole parse (see the twin `@jini-ai/http-kit` copy of this module for the fuller
+ * incident history this mirrors: a request-time throw here used to turn one config typo into
+ * either a 500 on every request, or — on a route with no enclosing catch — an unhandled
+ * rejection). Call {@link assertValidAllowedOrigins} once at host startup instead, to fail loudly
+ * before any request-serving traffic exists.
+ */
 export declare function configuredAllowedOrigins(config: OriginValidationEnvConfig, env?: NodeJS.ProcessEnv): string[];
+/**
+ * Boot-time companion to {@link configuredAllowedOrigins}: throws, naming every malformed entry,
+ * instead of silently dropping them. Call once, early in host startup, before the HTTP server
+ * accepts connections.
+ */
+export declare function assertValidAllowedOrigins(config: OriginValidationEnvConfig, env?: NodeJS.ProcessEnv): void;
 /** The `host` (hostname:port) component of each configured allowed origin. */
 export declare function configuredAllowedHosts(origins: string[]): string[];
 /** The set of browser-facing ports considered "local": the daemon's own port plus an optional configured web port. */

package/dist/origin-validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"origin-validation.d.ts","sourceRoot":"","sources":["../src/origin-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;CACH;AAED,0CAA0C;AAC1C,MAAM,WAAW,yBAAyB;IACxC,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,CAAC;IAC7B,6GAA6G;IAC7G,aAAa,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,2GAA2G;AAC3G,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,yBAAyB,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAcV;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAElE;AAED,sHAAsH;AACtH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,yBAAyB,EACjC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAOV;AAUD,4FAA4F;AAC5F,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CASvE;AAED,uHAAuH;AACvH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAQxD;AAED,yGAAyG;AACzG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAQ9D;AAED,6EAA6E;AAC7E,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAWrE;AAED,gGAAgG;AAChG,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,yBAAyB,EACjC,UAAU,EAAE,OAAO,EACnB,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,EAChB,mBAAmB,EAAE,MAAM,EAAE,GAC5B,OAAO,CAaT;AAED,iGAAiG;AACjG,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,yBAAyB,EACjC,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,OAAO,EACnB,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,EAChB,mBAAmB,EAAE,MAAM,EAAE,GAC5B,OAAO,CA4BT;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,yBAAyB,EACjC,GAAG,EAAE,wBAAwB,EAC7B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAmCT"}
+{"version":3,"file":"origin-validation.d.ts","sourceRoot":"","sources":["../src/origin-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE;QACR,IAAI,CAAC,EAAE,OAAO,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;CACH;AAED,0CAA0C;AAC1C,MAAM,WAAW,yBAAyB;IACxC,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,CAAC;IAC7B,6GAA6G;IAC7G,aAAa,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,cAAc,EAAE,MAAM,CAAC;CACxB;AAsBD;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,yBAAyB,EACjC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAaV;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,yBAAyB,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,IAAI,CAOvH;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAElE;AAED,sHAAsH;AACtH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,yBAAyB,EACjC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,MAAM,EAAE,CAOV;AAUD,4FAA4F;AAC5F,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CASvE;AAED,uHAAuH;AACvH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAQxD;AAED,yGAAyG;AACzG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAQ9D;AAED,6EAA6E;AAC7E,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,OAAO,GAAG,OAAO,CAWrE;AAED,gGAAgG;AAChG,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,yBAAyB,EACjC,UAAU,EAAE,OAAO,EACnB,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,EAChB,mBAAmB,EAAE,MAAM,EAAE,GAC5B,OAAO,CAaT;AAED,iGAAiG;AACjG,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,yBAAyB,EACjC,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,OAAO,EACnB,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,EAAE,MAAM,EAChB,mBAAmB,EAAE,MAAM,EAAE,GAC5B,OAAO,CA4BT;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,yBAAyB,EACjC,GAAG,EAAE,wBAAwB,EAC7B,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,EACxC,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAmCT"}

package/dist/origin-validation.js

@@ -15,22 +15,61 @@
  * it names a specific product route and product feature with no generic
  * equivalent; see `source-map.md`.
  */
-/** Parses and validates {@link OriginValidationEnvConfig.allowedOriginsEnvVar} into normalized origins. */
-export function configuredAllowedOrigins(config, env = process.env) {
+function splitAllowedOriginsEnv(config, env) {
     const raw = env[config.allowedOriginsEnvVar] || '';
     if (!raw.trim())
         return [];
     return raw
         .split(',')
         .map((origin) => origin.trim())
-        .filter(Boolean)
-        .map((origin) => {
-        const parsed = new URL(origin);
-        if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
-            throw new Error(`${config.allowedOriginsEnvVar} only supports http:// and https:// origins`);
+        .filter(Boolean);
+}
+function parseAllowedOrigin(entry) {
+    let parsed;
+    try {
+        parsed = new URL(entry);
+    }
+    catch {
+        return undefined;
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:')
+        return undefined;
+    return parsed.origin;
+}
+/**
+ * Parses {@link OriginValidationEnvConfig.allowedOriginsEnvVar} into normalized origins.
+ *
+ * Deliberately never throws — this is on the hot path of {@link isLocalSameOrigin}, called fresh
+ * on every same-origin decision a host makes. A malformed entry is dropped and logged instead of
+ * aborting the whole parse (see the twin `@jini-ai/http-kit` copy of this module for the fuller
+ * incident history this mirrors: a request-time throw here used to turn one config typo into
+ * either a 500 on every request, or — on a route with no enclosing catch — an unhandled
+ * rejection). Call {@link assertValidAllowedOrigins} once at host startup instead, to fail loudly
+ * before any request-serving traffic exists.
+ */
+export function configuredAllowedOrigins(config, env = process.env) {
+    const origins = [];
+    for (const entry of splitAllowedOriginsEnv(config, env)) {
+        const origin = parseAllowedOrigin(entry);
+        if (origin === undefined) {
+            console.warn(`[@jini-ai/core] ignoring malformed ${config.allowedOriginsEnvVar} entry (must be an http:// or https:// origin): ${entry}`);
+            continue;
         }
-        return parsed.origin;
-    });
+        origins.push(origin);
+    }
+    return origins;
+}
+/**
+ * Boot-time companion to {@link configuredAllowedOrigins}: throws, naming every malformed entry,
+ * instead of silently dropping them. Call once, early in host startup, before the HTTP server
+ * accepts connections.
+ */
+export function assertValidAllowedOrigins(config, env = process.env) {
+    const invalid = splitAllowedOriginsEnv(config, env).filter((entry) => parseAllowedOrigin(entry) === undefined);
+    if (invalid.length === 0)
+        return;
+    throw new Error(`${config.allowedOriginsEnvVar} has ${invalid.length} invalid entr${invalid.length === 1 ? 'y' : 'ies'} ` +
+        `(must be http:// or https:// origins): ${invalid.join(', ')}`);
 }
 /** The `host` (hostname:port) component of each configured allowed origin. */
 export function configuredAllowedHosts(origins) {

package/dist/origin-validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"origin-validation.js","sourceRoot":"","sources":["../src/origin-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA0BH,2GAA2G;AAC3G,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3B,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;QACd,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,CAAC,oBAAoB,6CAA6C,CAAC,CAAC;QAC/F,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC,CAAC,CAAC;AACP,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,OAAiB;IACtD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,mBAAmB,CACjC,MAAiC,EACjC,IAAwC,EACxC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,aAAa,CAAC,QAAiB;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAA0C,CAAC;IAC1D,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;AAC/G,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;AACnF,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,0BAA0B,CAAC,QAAiB;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,OAAO,CACL,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,KAAK;QACd,IAAI,KAAK,OAAO;QAChB,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,IAAI;QACb,aAAa,CAAC,IAAI,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAClC,MAAiC,EACjC,UAAmB,EACnB,KAAe,EACf,QAAgB,EAChB,mBAA6B;IAE7B,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC;QACvF,GAAG,sBAAsB,CAAC,mBAAmB,CAAC;KAC/C,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,0BAA0B,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,sBAAsB,CACpC,MAAiC,EACjC,MAAe,EACf,UAAmB,EACnB,KAAe,EACf,QAAgB,EAChB,mBAA6B;IAE7B,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9D,IAAI,YAAY,CAAC;IACjB,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,KAAK,OAAO,IAAI,YAAY,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE1F,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACnB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,QAAQ,IAAI,CAAC,EAAE,CAAC;KACjD,CAAC,CACH,CAAC;IACF,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,YAAY,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,0BAA0B,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAiC,EACjC,GAA6B,EAC7B,IAAwC,EACxC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC;IAC3D,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClE,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEvG,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACjG,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QACpC,IAAI,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAClC,wEAAwE;QACxE,mEAAmE;QACnE,mEAAmE;QACnE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,8DAA8D;QAC9D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC/D,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,sEAAsE;IACtE,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5F,OAAO,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAC5F,CAAC"}
+{"version":3,"file":"origin-validation.js","sourceRoot":"","sources":["../src/origin-validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AA0BH,SAAS,sBAAsB,CAAC,MAAiC,EAAE,GAAsB;IACvF,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,CAAC;IAC3B,OAAO,GAAG;SACP,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;SAC9B,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAClF,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAiC,EACjC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CACV,sCAAsC,MAAM,CAAC,oBAAoB,mDAAmD,KAAK,EAAE,CAC5H,CAAC;YACF,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAiC,EAAE,MAAyB,OAAO,CAAC,GAAG;IAC/G,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;IAC/G,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IACjC,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,CAAC,oBAAoB,QAAQ,OAAO,CAAC,MAAM,gBAAgB,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG;QACvG,0CAA0C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACjE,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,sBAAsB,CAAC,OAAiB;IACtD,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AACvD,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,mBAAmB,CACjC,MAAiC,EACjC,IAAwC,EACxC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,KAAK,GAAG,EAAE,CAAC;IACjB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IAClD,IAAI,OAAO,IAAI,OAAO,KAAK,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;QACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE,CAAC;IACrF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,aAAa,CAAC,QAAiB;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAClF,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAA0C,CAAC;IAC1D,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;AAC/G,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,mBAAmB,CAAC,QAAiB;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7D,OAAO,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;AACnF,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,0BAA0B,CAAC,QAAiB;IAC1D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAClD,OAAO,CACL,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,WAAW;QACpB,IAAI,KAAK,KAAK;QACd,IAAI,KAAK,OAAO;QAChB,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,IAAI;QACb,aAAa,CAAC,IAAI,CAAC,CACpB,CAAC;AACJ,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,oBAAoB,CAClC,MAAiC,EACjC,UAAmB,EACnB,KAAe,EACf,QAAgB,EAChB,mBAA6B;IAE7B,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;QAC5B,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,QAAQ,IAAI,CAAC,EAAE,CAAC,CAAC;QACvF,GAAG,sBAAsB,CAAC,mBAAmB,CAAC;KAC/C,CAAC,CAAC;IACH,IAAI,aAAa,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChE,OAAO,0BAA0B,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;AAC1D,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,sBAAsB,CACpC,MAAiC,EACjC,MAAe,EACf,UAAmB,EACnB,KAAe,EACf,QAAgB,EAChB,mBAA6B;IAE7B,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9D,IAAI,YAAY,CAAC;IACjB,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,YAAY,CAAC,QAAQ,KAAK,OAAO,IAAI,YAAY,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE1F,MAAM,WAAW,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,WAAW;QAAE,OAAO,KAAK,CAAC;IAE/B,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,MAAM,aAAa,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,eAAe,GAAG,IAAI,GAAG,CAC7B,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACnB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,QAAQ,IAAI,CAAC,EAAE,CAAC;KACjD,CAAC,CACH,CAAC;IACF,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAErD,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,YAAY,CAAC,QAAQ,KAAK,WAAW,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IACjE,OAAO,0BAA0B,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;AAC3D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAiC,EACjC,GAA6B,EAC7B,IAAwC,EACxC,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,WAAW,CAAC;IAC3D,MAAM,mBAAmB,GAAG,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClE,MAAM,kBAAkB,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAEvG,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACjG,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QACpC,IAAI,gBAAgB;YAAE,OAAO,IAAI,CAAC;QAClC,wEAAwE;QACxE,mEAAmE;QACnE,mEAAmE;QACnE,uEAAuE;QACvE,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,8DAA8D;QAC9D,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAC/D,IAAI,SAAS,KAAK,aAAa,EAAE,CAAC;YAChC,OAAO,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,0EAA0E;IAC1E,0EAA0E;IAC1E,uEAAuE;IACvE,sEAAsE;IACtE,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,IAAI,mBAAmB,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,CAAC,oBAAoB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5F,OAAO,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;AAC5F,CAAC"}

package/dist/pack-lifecycle.d.ts

@@ -0,0 +1,58 @@
+/**
+ * @module pack-lifecycle
+ *
+ * The non-HTTP half of pack mounting: `registerPackTools` drains every composed pack's `tools`
+ * contribution into one shared `ToolRegistry`, and `disposePacks` runs every composed pack's
+ * `dispose` in reverse composition order.
+ *
+ * These live in `@jini-ai/core` rather than beside `@jini-ai/http-kit`'s `mountPackHttp` because
+ * neither has anything to do with a transport — a CLI-only or headless composition needs the tool
+ * registry and the teardown just as much as an HTTP one does. `mountPackHttp` stays where it is for
+ * the same reason in reverse: it is the only one of the three that touches an `app`.
+ */
+import type { Daemon } from './daemon.js';
+import type { Pack } from './pack.js';
+import type { ToolRegistration, ToolRegistry } from './tool-registry.js';
+type AnyPack = Pack<any, any, string>;
+/**
+ * Registers `pack.tools(services)` for every pack in `packs` that declares one, in pack order,
+ * into the single shared `registry`.
+ *
+ * Order matters and is deliberately the caller's to choose: `ToolRegistry.register` throws on a
+ * duplicate descriptor id, so whichever pack registers second is the one named in the error. A
+ * composition root that wants a host's own tools to win that message registers the host's packs
+ * last.
+ *
+ * @param registry - The shared registry every composed pack contributes into.
+ * @param packs - The composed packs, in composition order.
+ * @param daemon - The `createDaemon` result holding each pack's already-built services.
+ * @returns Every registration that was added, in the order it was added — so a caller can seed a
+ * catalog, log an inventory, or assert on the composition without re-deriving it.
+ * @throws Whatever `ToolRegistry.register` throws (notably a duplicate descriptor id), at the
+ * moment of the offending registration. Composition roots should treat this as fatal: a partially
+ * registered tool set is not a state anything downstream can reason about.
+ * @complexity O(t) in total contributed tools.
+ */
+export declare function registerPackTools<const Packs extends readonly AnyPack[]>(registry: ToolRegistry, packs: Packs, daemon: Daemon<Packs>): readonly ToolRegistration[];
+/** One pack's teardown failure, kept with the pack's name so a caller can report which one failed. */
+export interface PackDisposalFailure {
+    readonly pack: string;
+    readonly error: unknown;
+}
+/**
+ * Runs `pack.dispose(services)` for every pack that declares one, in **reverse** composition order
+ * (a pack composed later may depend on an earlier pack's resources, so it must release first).
+ *
+ * Best-effort by design: one pack throwing must never prevent the rest from disposing, or a single
+ * misbehaving pack would leak every other pack's file handles and listeners. Failures are collected
+ * and returned rather than thrown, leaving the composition root free to decide whether a teardown
+ * failure is worth surfacing to its own caller.
+ *
+ * @param packs - The composed packs, in composition order (this function reverses them itself).
+ * @param daemon - The `createDaemon` result holding each pack's already-built services.
+ * @returns The failures, in the order they occurred. Empty when every pack disposed cleanly.
+ * @complexity O(p) in pack count, plus each pack's own teardown cost.
+ */
+export declare function disposePacks<const Packs extends readonly AnyPack[]>(packs: Packs, daemon: Daemon<Packs>): Promise<readonly PackDisposalFailure[]>;
+export {};
+//# sourceMappingURL=pack-lifecycle.d.ts.map

package/dist/pack-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-lifecycle.d.ts","sourceRoot":"","sources":["../src/pack-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEzE,KAAK,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAEtC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,OAAO,EAAE,EACtE,QAAQ,EAAE,YAAY,EACtB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GACpB,SAAS,gBAAgB,EAAE,CAU7B;AAED,sGAAsG;AACtG,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,YAAY,CAAC,KAAK,CAAC,KAAK,SAAS,SAAS,OAAO,EAAE,EACvE,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,GACpB,OAAO,CAAC,SAAS,mBAAmB,EAAE,CAAC,CAazC"}

package/dist/pack-lifecycle.js

@@ -0,0 +1,61 @@
+/**
+ * Registers `pack.tools(services)` for every pack in `packs` that declares one, in pack order,
+ * into the single shared `registry`.
+ *
+ * Order matters and is deliberately the caller's to choose: `ToolRegistry.register` throws on a
+ * duplicate descriptor id, so whichever pack registers second is the one named in the error. A
+ * composition root that wants a host's own tools to win that message registers the host's packs
+ * last.
+ *
+ * @param registry - The shared registry every composed pack contributes into.
+ * @param packs - The composed packs, in composition order.
+ * @param daemon - The `createDaemon` result holding each pack's already-built services.
+ * @returns Every registration that was added, in the order it was added — so a caller can seed a
+ * catalog, log an inventory, or assert on the composition without re-deriving it.
+ * @throws Whatever `ToolRegistry.register` throws (notably a duplicate descriptor id), at the
+ * moment of the offending registration. Composition roots should treat this as fatal: a partially
+ * registered tool set is not a state anything downstream can reason about.
+ * @complexity O(t) in total contributed tools.
+ */
+export function registerPackTools(registry, packs, daemon) {
+    const services = daemon.services;
+    const registered = [];
+    for (const pack of packs) {
+        for (const registration of pack.tools?.(services[pack.name]) ?? []) {
+            registry.register(registration);
+            registered.push(registration);
+        }
+    }
+    return registered;
+}
+/**
+ * Runs `pack.dispose(services)` for every pack that declares one, in **reverse** composition order
+ * (a pack composed later may depend on an earlier pack's resources, so it must release first).
+ *
+ * Best-effort by design: one pack throwing must never prevent the rest from disposing, or a single
+ * misbehaving pack would leak every other pack's file handles and listeners. Failures are collected
+ * and returned rather than thrown, leaving the composition root free to decide whether a teardown
+ * failure is worth surfacing to its own caller.
+ *
+ * @param packs - The composed packs, in composition order (this function reverses them itself).
+ * @param daemon - The `createDaemon` result holding each pack's already-built services.
+ * @returns The failures, in the order they occurred. Empty when every pack disposed cleanly.
+ * @complexity O(p) in pack count, plus each pack's own teardown cost.
+ */
+export async function disposePacks(packs, daemon) {
+    const services = daemon.services;
+    const failures = [];
+    for (let index = packs.length - 1; index >= 0; index -= 1) {
+        const pack = packs[index];
+        if (!pack.dispose)
+            continue;
+        try {
+            await pack.dispose(services[pack.name]);
+        }
+        catch (error) {
+            failures.push({ pack: pack.name, error });
+        }
+    }
+    return failures;
+}
+//# sourceMappingURL=pack-lifecycle.js.map

package/dist/pack-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pack-lifecycle.js","sourceRoot":"","sources":["../src/pack-lifecycle.ts"],"names":[],"mappings":"AAkBA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAsB,EACtB,KAAY,EACZ,MAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;IAC5D,MAAM,UAAU,GAAuB,EAAE,CAAC;IAC1C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACnE,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAQD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAY,EACZ,MAAqB;IAErB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAmC,CAAC;IAC5D,MAAM,QAAQ,GAA0B,EAAE,CAAC;IAC3C,KAAK,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAE,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,SAAS;QAC5B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/pack.d.ts

@@ -1,3 +1,23 @@
+/**
+ * @module pack
+ *
+ * A `Pack` is this kernel's one composition unit: a named bundle of services, plus the optional
+ * transports (`http`/`cli`), **tool registrations** (`tools`), and teardown (`dispose`) that belong
+ * to those services.
+ *
+ * `tools` and `dispose` were added 2026-07-29 to close the **Route-vs-Tool Gap**. Before them a
+ * pack could contribute an HTTP surface but had no way to contribute a `ToolRegistration`, so every
+ * real composition (notably `@jini-ai/server`'s `createLocalNodeDaemon`) registered a feature's
+ * tools in one place and mounted that feature's routes in another. Those two steps could then be
+ * gated independently — turning a route family "off" while leaving its tool registered and
+ * reachable through the always-mounted delegated-tool-call route. Putting both contributions on one
+ * object makes that failure unrepresentable: a pack that is not composed contributes neither, and
+ * there is no separate mounting step for a caller to forget.
+ *
+ * The rule for pack authors is therefore: **a capability's tools and its routes belong to the same
+ * pack.** Splitting them across two packs re-opens the gap by hand.
+ */
+import type { ToolRegistration } from './tool-registry.js';
 import type { AnyToken, ManyToken, Token } from './token.js';
 /**
  * The only resolver a pack's `services` factory ever sees. Scoped to that
@@ -13,14 +33,32 @@ export interface Pack<Deps extends readonly AnyToken<unknown, string>[] = readon
     readonly name: Name;
     readonly deps: Deps;
     readonly services: (c: PackContainer) => Services;
+    /**
+     * `{descriptor, handler, policy}` triples this pack contributes to the composition's shared
+     * `ToolRegistry`. Called exactly once per composed pack, before any transport is mounted, so a
+     * pack's routes can assume its own tools are already registered.
+     *
+     * Atomic with `http`/`cli` by construction: a pack that is not composed contributes neither its
+     * tools nor its routes. See this module's own doc for the failure mode that makes this
+     * load-bearing rather than a convenience.
+     */
+    readonly tools?: (services: Services) => readonly ToolRegistration[];
     readonly http?: (app: unknown, services: Services) => void;
     readonly cli?: (reg: unknown, services: Services) => void;
+    /**
+     * Releases whatever this pack's `services` acquired (a pty manager, a database handle, an OAuth
+     * callback listener). Composition roots call these in reverse composition order, best-effort:
+     * one pack's failure to dispose must never prevent another's from running.
+     */
+    readonly dispose?: (services: Services) => Promise<void> | void;
 }
 export declare function definePack<const Name extends string, const Deps extends readonly AnyToken<unknown, string>[], Services>(def: {
     name: Name;
     deps: Deps;
     services: (c: PackContainer) => Services;
+    tools?: (services: Services) => readonly ToolRegistration[];
     http?: (app: unknown, services: Services) => void;
     cli?: (reg: unknown, services: Services) => void;
+    dispose?: (services: Services) => Promise<void> | void;
 }): Pack<Deps, Services, Name>;
 //# sourceMappingURL=pack.d.ts.map

package/dist/pack.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pack.d.ts","sourceRoot":"","sources":["../src/pack.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,IAAI,CACnB,IAAI,SAAS,SAAS,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,SAAS,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EACxF,QAAQ,GAAG,OAAO,EAClB,IAAI,SAAS,MAAM,GAAG,MAAM;IAE5B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,QAAQ,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3D,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;CAC3D;AAED,wBAAgB,UAAU,CACxB,KAAK,CAAC,IAAI,SAAS,MAAM,EACzB,KAAK,CAAC,IAAI,SAAS,SAAS,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EACvD,QAAQ,EACR,GAAG,EAAE;IACL,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,QAAQ,CAAC;IACzC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAClD,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;CAClD,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAE7B"}
+{"version":3,"file":"pack.d.ts","sourceRoot":"","sources":["../src/pack.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,IAAI,CACnB,IAAI,SAAS,SAAS,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,SAAS,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EACxF,QAAQ,GAAG,OAAO,EAClB,IAAI,SAAS,MAAM,GAAG,MAAM;IAE5B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,QAAQ,CAAC;IAClD;;;;;;;;OAQG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,SAAS,gBAAgB,EAAE,CAAC;IACrE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC3D,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAC1D;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACjE;AAED,wBAAgB,UAAU,CACxB,KAAK,CAAC,IAAI,SAAS,MAAM,EACzB,KAAK,CAAC,IAAI,SAAS,SAAS,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,EACvD,QAAQ,EACR,GAAG,EAAE;IACL,IAAI,EAAE,IAAI,CAAC;IACX,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,QAAQ,CAAC;IACzC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,SAAS,gBAAgB,EAAE,CAAC;IAC5D,IAAI,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IAClD,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACxD,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAE7B"}

package/dist/pack.js.map

@@ -1 +1 @@
-{"version":3,"file":"pack.js","sourceRoot":"","sources":["../src/pack.ts"],"names":[],"mappings":"AAyBA,MAAM,UAAU,UAAU,CAIxB,GAMD;IACC,OAAO,GAA4C,CAAC;AACtD,CAAC"}
+{"version":3,"file":"pack.js","sourceRoot":"","sources":["../src/pack.ts"],"names":[],"mappings":"AA6DA,MAAM,UAAU,UAAU,CAIxB,GAQD;IACC,OAAO,GAA4C,CAAC;AACtD,CAAC"}

package/dist/tool-registry.d.ts

@@ -12,11 +12,18 @@
  * or an agent holding a `ToolRegistry` reference can enumerate what's
  * available and check membership, but the only way to actually *run* a
  * tool is through `@jini-ai/daemon`'s `ToolExecutor`, which is the sole
- * consumer of {@link getToolRegistration} — a function deliberately
+ * consumer of {@link authorizeToolInvocation} — a function deliberately
  * exported from `./internal.js` (a package-internal entry point, see this
  * package's `package.json` `exports` map and `source-map.md`) rather than
  * from the public `index.ts` barrel. Every other caller of
  * `@jini-ai/core`'s default entry point gets descriptors only.
+ * `authorizeToolInvocation` itself runs the tool's `ToolPolicy` (and an
+ * optional transport veto) before ever handing back a handler, so a
+ * runtime handler closure is unobtainable without already having passed
+ * authorization — the earlier design (a separate `getToolRegistration`
+ * that returned the handler unconditionally) let any caller of this
+ * package-internal entry point skip the gate entirely; see this package's
+ * `source-map.md` for the 2026-07-29 hardening note.
  */
 import type { Principal } from './principal.js';
 /** A structural run reference — anything with a stable `id` satisfies this (e.g. `@jini-ai/protocol`'s `RunStatus`). No import needed to satisfy it; see the module doc. */
@@ -25,7 +32,7 @@ export interface RunRef {
 }
 /**
  * The public, non-secret shape of a registered tool. Never carries the
- * handler or policy — those are only reachable via {@link getToolRegistration}.
+ * handler or policy — those are only reachable via {@link authorizeToolInvocation}.
  */
 export interface ToolDescriptor {
     readonly id: string;
@@ -48,6 +55,49 @@ export interface ToolDescriptor {
     /** Byte/character ceiling `ToolExecutor` truncates string output to. Omit for no truncation. */
     readonly maxOutputBytes?: number;
 }
+/**
+ * One human-facing message a handler pushes out mid-call.
+ *
+ * `channel` becomes the run event payload's `type`, and `payload` is merged in beside it. It is
+ * deliberately NOT a union of the known channels: `@jini-ai/protocol` sits below every package in
+ * the graph and already types each channel's own body as `unknown` for exactly this reason —
+ * structural validation belongs where the concrete type is known (`@jini-ai/ui`'s `parseUIResource`
+ * for mcp-ui, `@jini-ai/agentic/a2ui`'s `parseAgentToRendererMessage` for a2ui). Naming the channel
+ * as a string is what lets a handler drive `mcp-ui`, `a2ui`, or `surface_request` — or a channel
+ * that does not exist yet — through one seam.
+ *
+ * @example mcp-ui — a sandboxed HTML surface; the transport supplies `toolUseId`
+ * `{ channel: 'mcp-ui', payload: { resource } }`
+ * @example a2ui — a component tree that can be updated repeatedly on one held-open call
+ * `{ channel: 'a2ui', payload: { message: createSurface(exchangeId, ...) } }`
+ * @example the protocol-neutral human-in-the-loop pair
+ * `{ channel: 'surface_request', payload: { surfaceId, surfaceKind: 'form', payload: {...} } }`
+ */
+export interface SurfaceEmission {
+    /** The run event payload `type` this belongs on. */
+    readonly channel: string;
+    /** The channel's own fields, merged into the emitted event beside `type`. */
+    readonly payload: Readonly<Record<string, unknown>>;
+}
+/**
+ * Pushes a human-facing message into the run's event stream *while the call is still in flight*.
+ *
+ * A handler's return value is the only other way to reach a human, and that route is useless to a
+ * handler that must WAIT for one: the daemon reads surfaces out of the completed result, so a
+ * handler that parks first never emits the thing being answered, and the park can never resolve.
+ * That is a deadlock by construction, not a race. This is the seam that breaks it — emit, then await.
+ *
+ * Callable any number of times before the call settles, which is what makes a multi-turn exchange
+ * (A2UI's `createSurface` → action → `updateComponents` → action) expressible on a single tool call
+ * rather than only a one-shot ask.
+ *
+ * Human-only in both directions: emitting never puts anything into model context.
+ *
+ * Optional because it is transport-supplied. A caller with no run event stream to emit into (a
+ * headless or synthetic execution) omits it, and a handler that finds it absent must fall back to
+ * returning its surface rather than parking — see the `@jini-ai/daemon` bridge for the supplying end.
+ */
+export type SurfaceEmitter = (emission: SurfaceEmission) => Promise<void>;
 /** What a `ToolHandler` receives — everything it needs and nothing it could use to bypass the gate (no registry access, no other tools' state). */
 export interface ToolExecutionContext {
     /** The id `ToolExecutor` assigned this call — for the handler's own logging/correlation; carries no authority (the gate already ran before the handler is invoked). */
@@ -56,9 +106,27 @@ export interface ToolExecutionContext {
     readonly run: RunRef;
     readonly input: unknown;
     readonly signal: AbortSignal;
+    /** Present only when the invoking transport owns a run event stream — see {@link SurfaceEmitter}. */
+    readonly emitSurface?: SurfaceEmitter;
 }
 /** Runs the tool's actual side effect. Only ever invoked by `ToolExecutor`, never called directly by a route/agent holding the registry. */
 export type ToolHandler = (ctx: ToolExecutionContext) => Promise<unknown>;
+/**
+ * Thrown by a `ToolHandler` (or a validator it calls, e.g. `@jini-ai/cms`'s `registration-kit.ts`
+ * `requireString`/`requireInputRecord`/etc.) to mean "the caller's input was malformed or missing a
+ * required field" — a fact about the CALL, not the server. `@jini-ai/daemon`'s `ToolExecutor.execute`
+ * tags a handler rejection's `ToolExecutionResult.errorKind` as `'validation'` when the thrown error
+ * is `instanceof ToolInputError`, and every HTTP-facing mapping of a `'failed'` execution (today:
+ * `@jini-ai/http-kit`'s `delegated-tools.ts`) uses that tag to answer with a 4xx instead of folding
+ * it into the same redacted 500 an actual internal/infrastructure failure gets.
+ *
+ * Deliberately a plain marker with no extra fields: the message itself is already caller-actionable
+ * (`withSchemaOnRejection` appends the tool's own input schema to it), so nothing beyond "this IS one
+ * of these" needs to survive the `instanceof` check.
+ */
+export declare class ToolInputError extends Error {
+    constructor(message: string);
+}
 export type AuthorizationDecision = 'allow' | 'deny';
 export interface ToolAuthorizationContext {
     readonly principal: Principal;
@@ -95,20 +163,53 @@ export interface ToolRegistry {
  *
  * @returns A `ToolRegistry` whose backing `{descriptor, handler, policy}`
  * map is held in a module-private `WeakMap` keyed by the returned instance
- * — reachable only via {@link getToolRegistration}, not through any method
+ * — reachable only via {@link authorizeToolInvocation}, not through any method
  * on the returned object itself.
  * @complexity `register`/`has` O(1); `list` O(n) in registered tool count.
  * @overallScore 100/100
  */
 export declare function createToolRegistry(): ToolRegistry;
+/** Transport-level authorization veto, structurally matching `@jini-ai/daemon`'s `ExecutionDelegate.onAuthorize` without either package importing the other's type. */
+export interface ToolAuthorizationDelegate {
+    onAuthorize?(ctx: ToolAuthorizationContext): AuthorizationDecision | Promise<AuthorizationDecision>;
+}
 /**
- * Package-internal escape hatch: resolves a tool's full `{descriptor,
- * handler, policy}` registration. Exported only from `./internal.js` (see
- * this package's `package.json` `exports` map) — `@jini-ai/daemon`'s
+ * Outcome of {@link authorizeToolInvocation} — a union discriminated on
+ * `decision`, deliberately rather than one shape with an optional `handler`.
+ * "A handler exists if and only if the call was allowed" is the whole point
+ * of this function, so it is expressed as something the compiler enforces:
+ * the `'deny'` arm has no `handler` property to read at all, and the
+ * `'allow'` arm's is non-optional, so the caller needs no non-null assertion
+ * to use it after checking the decision.
+ */
+export type ToolInvocationAuthorization = {
+    readonly descriptor: ToolDescriptor;
+    readonly decision: 'allow';
+    readonly handler: ToolHandler;
+} | {
+    readonly descriptor: ToolDescriptor;
+    readonly decision: 'deny';
+};
+/**
+ * Package-internal escape hatch: resolves `toolId` in `registry` and runs
+ * its authorization gate — the tool's own {@link ToolPolicy}, then an
+ * optional transport-level `delegate.onAuthorize` veto — before ever
+ * exposing the handler. Exported only from `./internal.js` (see this
+ * package's `package.json` `exports` map) — `@jini-ai/daemon`'s
  * `ToolExecutor` is the one and only intended caller. Not re-exported from
  * `index.ts`, so it never reaches `@jini-ai/core`'s public consumers.
  *
+ * Replaces an earlier `getToolRegistration` that returned the full
+ * `{descriptor, handler, policy}` triple unconditionally — since a
+ * package.json `exports` subpath is not an access modifier (see this
+ * package's `source-map.md`), that let any consumer able to `import` this
+ * package-internal entry point retrieve a live handler closure without
+ * ever calling a policy. Bundling resolution with authorization here means
+ * the handler itself is now unobtainable without already having passed the
+ * gate — the leak closes structurally rather than by convention.
+ *
+ * @returns `undefined` if `toolId` isn't registered on `registry`.
  * @internal
  */
-export declare function getToolRegistration(registry: ToolRegistry, toolId: string): ToolRegistration | undefined;
+export declare function authorizeToolInvocation(registry: ToolRegistry, toolId: string, principal: Principal, run: RunRef, input: unknown, delegate?: ToolAuthorizationDelegate): Promise<ToolInvocationAuthorization | undefined>;
 //# sourceMappingURL=tool-registry.d.ts.map

package/dist/tool-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool-registry.d.ts","sourceRoot":"","sources":["../src/tool-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,4KAA4K;AAC5K,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;OASG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,iIAAiI;IACjI,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,kHAAkH;IAClH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gGAAgG;IAChG,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,mJAAmJ;AACnJ,MAAM,WAAW,oBAAoB;IACnC,uKAAuK;IACvK,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED,4IAA4I;AAC5I,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE1E,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,GAAG,EAAE,wBAAwB,GAAG,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAClG;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,oHAAoH;AACpH,MAAM,WAAW,YAAY;IAC3B,yPAAyP;IACzP,QAAQ,CAAC,YAAY,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC/C,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B,uFAAuF;IACvF,IAAI,IAAI,SAAS,cAAc,EAAE,CAAC;CACnC;AAID;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAoBjD;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAExG"}
+{"version":3,"file":"tool-registry.d.ts","sourceRoot":"","sources":["../src/tool-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,4KAA4K;AAC5K,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;;;;;;OASG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,iIAAiI;IACjI,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;IACxC,kHAAkH;IAClH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,gGAAgG;IAChG,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,eAAe;IAC9B,oDAAoD;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,eAAe,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAE1E,mJAAmJ;AACnJ,MAAM,WAAW,oBAAoB;IACnC,uKAAuK;IACvK,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,qGAAqG;IACrG,QAAQ,CAAC,WAAW,CAAC,EAAE,cAAc,CAAC;CACvC;AAED,4IAA4I;AAC5I,MAAM,MAAM,WAAW,GAAG,CAAC,GAAG,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE1E;;;;;;;;;;;;GAYG;AACH,qBAAa,cAAe,SAAQ,KAAK;gBAC3B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,SAAS,CAAC,GAAG,EAAE,wBAAwB,GAAG,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAClG;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B;AAED,oHAAoH;AACpH,MAAM,WAAW,YAAY;IAC3B,yPAAyP;IACzP,QAAQ,CAAC,YAAY,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAC/C,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B,uFAAuF;IACvF,IAAI,IAAI,SAAS,cAAc,EAAE,CAAC;CACnC;AAID;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,IAAI,YAAY,CAoBjD;AAED,uKAAuK;AACvK,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,CAAC,GAAG,EAAE,wBAAwB,GAAG,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACrG;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,2BAA2B,GACnC;IAAE,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,GAClG;IAAE,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,uBAAuB,CAC3C,QAAQ,EAAE,YAAY,EACtB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,SAAS,EACpB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,OAAO,EACd,QAAQ,CAAC,EAAE,yBAAyB,GACnC,OAAO,CAAC,2BAA2B,GAAG,SAAS,CAAC,CAWlD"}

package/dist/tool-registry.js

@@ -1,10 +1,29 @@
+/**
+ * Thrown by a `ToolHandler` (or a validator it calls, e.g. `@jini-ai/cms`'s `registration-kit.ts`
+ * `requireString`/`requireInputRecord`/etc.) to mean "the caller's input was malformed or missing a
+ * required field" — a fact about the CALL, not the server. `@jini-ai/daemon`'s `ToolExecutor.execute`
+ * tags a handler rejection's `ToolExecutionResult.errorKind` as `'validation'` when the thrown error
+ * is `instanceof ToolInputError`, and every HTTP-facing mapping of a `'failed'` execution (today:
+ * `@jini-ai/http-kit`'s `delegated-tools.ts`) uses that tag to answer with a 4xx instead of folding
+ * it into the same redacted 500 an actual internal/infrastructure failure gets.
+ *
+ * Deliberately a plain marker with no extra fields: the message itself is already caller-actionable
+ * (`withSchemaOnRejection` appends the tool's own input schema to it), so nothing beyond "this IS one
+ * of these" needs to survive the `instanceof` check.
+ */
+export class ToolInputError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ToolInputError';
+    }
+}
 const registrationsByRegistry = new WeakMap();
 /**
  * Creates an empty, append-only `ToolRegistry`.
  *
  * @returns A `ToolRegistry` whose backing `{descriptor, handler, policy}`
  * map is held in a module-private `WeakMap` keyed by the returned instance
- * — reachable only via {@link getToolRegistration}, not through any method
+ * — reachable only via {@link authorizeToolInvocation}, not through any method
  * on the returned object itself.
  * @complexity `register`/`has` O(1); `list` O(n) in registered tool count.
  * @overallScore 100/100
@@ -29,15 +48,36 @@ export function createToolRegistry() {
     return registry;
 }
 /**
- * Package-internal escape hatch: resolves a tool's full `{descriptor,
- * handler, policy}` registration. Exported only from `./internal.js` (see
- * this package's `package.json` `exports` map) — `@jini-ai/daemon`'s
+ * Package-internal escape hatch: resolves `toolId` in `registry` and runs
+ * its authorization gate — the tool's own {@link ToolPolicy}, then an
+ * optional transport-level `delegate.onAuthorize` veto — before ever
+ * exposing the handler. Exported only from `./internal.js` (see this
+ * package's `package.json` `exports` map) — `@jini-ai/daemon`'s
  * `ToolExecutor` is the one and only intended caller. Not re-exported from
  * `index.ts`, so it never reaches `@jini-ai/core`'s public consumers.
  *
+ * Replaces an earlier `getToolRegistration` that returned the full
+ * `{descriptor, handler, policy}` triple unconditionally — since a
+ * package.json `exports` subpath is not an access modifier (see this
+ * package's `source-map.md`), that let any consumer able to `import` this
+ * package-internal entry point retrieve a live handler closure without
+ * ever calling a policy. Bundling resolution with authorization here means
+ * the handler itself is now unobtainable without already having passed the
+ * gate — the leak closes structurally rather than by convention.
+ *
+ * @returns `undefined` if `toolId` isn't registered on `registry`.
  * @internal
  */
-export function getToolRegistration(registry, toolId) {
-    return registrationsByRegistry.get(registry)?.get(toolId);
+export async function authorizeToolInvocation(registry, toolId, principal, run, input, delegate) {
+    const registration = registrationsByRegistry.get(registry)?.get(toolId);
+    if (!registration) {
+        return undefined;
+    }
+    const { descriptor, handler, policy } = registration;
+    let decision = await policy.authorize({ principal, run, tool: descriptor, input });
+    if (decision === 'allow' && delegate?.onAuthorize) {
+        decision = await delegate.onAuthorize({ principal, run, tool: descriptor, input });
+    }
+    return decision === 'allow' ? { descriptor, decision, handler } : { descriptor, decision: 'deny' };
 }
 //# sourceMappingURL=tool-registry.js.map

package/dist/tool-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-registry.js","sourceRoot":"","sources":["../src/tool-registry.ts"],"names":[],"mappings":"AAsGA,MAAM,uBAAuB,GAAG,IAAI,OAAO,EAA+C,CAAC;AAE3F;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE1D,MAAM,QAAQ,GAAiB;QAC7B,QAAQ,CAAC,YAA8B;YACrC,IAAI,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAC9F,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC9D,CAAC;QACD,GAAG,CAAC,MAAc;YAChB,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,IAAI;YACF,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACjE,CAAC;KACF,CAAC;IAEF,uBAAuB,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAsB,EAAE,MAAc;IACxE,OAAO,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"tool-registry.js","sourceRoot":"","sources":["../src/tool-registry.ts"],"names":[],"mappings":"AAwHA;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAsCD,MAAM,uBAAuB,GAAG,IAAI,OAAO,EAA+C,CAAC;AAE3F;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,aAAa,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE1D,MAAM,QAAQ,GAAiB;QAC7B,QAAQ,CAAC,YAA8B;YACrC,IAAI,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,uBAAuB,YAAY,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;YAC9F,CAAC;YACD,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;QAC9D,CAAC;QACD,GAAG,CAAC,MAAc;YAChB,OAAO,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;QACD,IAAI;YACF,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QACjE,CAAC;KACF,CAAC;IAEF,uBAAuB,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACrD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAoBD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAsB,EACtB,MAAc,EACd,SAAoB,EACpB,GAAW,EACX,KAAc,EACd,QAAoC;IAEpC,MAAM,YAAY,GAAG,uBAAuB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACxE,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,YAAY,CAAC;IACrD,IAAI,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,IAAI,QAAQ,KAAK,OAAO,IAAI,QAAQ,EAAE,WAAW,EAAE,CAAC;QAClD,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACrG,CAAC"}

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@jini-ai/core",
-  "version": "0.1.2",
+  "version": "0.3.0",
+  "description": "The Jini kernel: typed DI tokens, pack composition and lifecycle, the tool registry, redaction, and origin/API-token auth primitives. Zero dependencies.",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -10,10 +11,10 @@
   "jini": {
     "domain": "engine",
     "kind": "kernel",
-    "runtime": "universal",
-    "admission": "locked"
+    "runtime": "universal"
   },
   "type": "module",
+  "sideEffects": false,
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
   "exports": {