@jinn-network/client 0.1.2 → 0.1.3-canary.24b69ea4

package/dist/harnesses/engine/signing.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Shared canonical signing helper for the harness engine.
+ *
+ * Extracted from manifest-assembly.ts and portfolio-v0-evaluator/index.ts to
+ * eliminate duplicated keccak256 → secp256k1 sign → assemble-recovery-byte logic.
+ *
+ * Signing method: raw secp256k1 ECDSA, no EIP-191 prefix.
+ * Uses viem `sign({ hash, privateKey })` from `viem/accounts`.
+ */
+export interface SignedCanonical {
+    /** Canonical JSON string of the object (sorted keys, no whitespace). */
+    canonicalJson: string;
+    /** keccak256 hash of the canonical JSON bytes. */
+    hash: `0x${string}`;
+    /** 65-byte secp256k1 signature: r ++ s ++ recoveryByte, hex-encoded. */
+    sig: `0x${string}`;
+    /** Address of the signing key (passed through from caller). */
+    signer: `0x${string}`;
+}
+/**
+ * Serialise `obj` to canonical JSON, hash it with keccak256, sign with
+ * `privateKey`, and return the hash + 65-byte signature.
+ *
+ * @param obj           Object to sign (must be JSON-serialisable).
+ * @param privateKey    Agent EOA private key.
+ * @param signerAddress Address corresponding to `privateKey` (caller-supplied
+ *                      to avoid a redundant `privateKeyToAccount` call when the
+ *                      caller already has it).
+ */
+export declare function signCanonical(obj: unknown, privateKey: `0x${string}`, signerAddress: `0x${string}`): Promise<SignedCanonical>;

package/dist/harnesses/engine/signing.js

@@ -0,0 +1,39 @@
+/**
+ * Shared canonical signing helper for the harness engine.
+ *
+ * Extracted from manifest-assembly.ts and portfolio-v0-evaluator/index.ts to
+ * eliminate duplicated keccak256 → secp256k1 sign → assemble-recovery-byte logic.
+ *
+ * Signing method: raw secp256k1 ECDSA, no EIP-191 prefix.
+ * Uses viem `sign({ hash, privateKey })` from `viem/accounts`.
+ */
+import { keccak256, toHex, hexToBytes } from 'viem';
+import { sign } from 'viem/accounts';
+import { canonicalJson } from './canonical-json.js';
+// ── signCanonical ─────────────────────────────────────────────────────────────
+/**
+ * Serialise `obj` to canonical JSON, hash it with keccak256, sign with
+ * `privateKey`, and return the hash + 65-byte signature.
+ *
+ * @param obj           Object to sign (must be JSON-serialisable).
+ * @param privateKey    Agent EOA private key.
+ * @param signerAddress Address corresponding to `privateKey` (caller-supplied
+ *                      to avoid a redundant `privateKeyToAccount` call when the
+ *                      caller already has it).
+ */
+export async function signCanonical(obj, privateKey, signerAddress) {
+    const canonical = canonicalJson(obj);
+    const canonicalBytes = new TextEncoder().encode(canonical);
+    const hash = keccak256(canonicalBytes);
+    const sigResult = await sign({ hash, privateKey });
+    // viem sign() returns { r, s, v, yParity } — use yParity (canonical) with
+    // fallback to v for older viem versions that may not populate yParity.
+    const recoveryByte = sigResult.yParity ?? (sigResult.v === 28n ? 1 : 0);
+    const sig = toHex(new Uint8Array([
+        ...hexToBytes(sigResult.r),
+        ...hexToBytes(sigResult.s),
+        recoveryByte,
+    ]));
+    return { canonicalJson: canonical, hash, sig, signer: signerAddress };
+}
+//# sourceMappingURL=signing.js.map

package/dist/harnesses/engine/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../../../src/harnesses/engine/signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAY,MAAM,MAAM,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAepD,iFAAiF;AAEjF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAY,EACZ,UAAyB,EACzB,aAA4B;IAE5B,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,SAAS,CAAC,cAAc,CAAkB,CAAC;IAExD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACnD,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,KAAK,CACf,IAAI,UAAU,CAAC;QACb,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1B,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1B,YAAY;KACb,CAAC,CACc,CAAC;IAEnB,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACxE,CAAC"}

package/dist/harnesses/engine/state.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Harness engine — state machine definitions.
+ *
+ * §6.3 of spec/2026-04-17-portfolio-v0-design.md
+ *
+ * Pure logic; no I/O, no persistence.
+ */
+export declare const TaskRunState: {
+    readonly DISCOVERED: "DISCOVERED";
+    readonly CLAIMED: "CLAIMED";
+    readonly WAITING: "WAITING";
+    readonly PRE_SNAPSHOT: "PRE_SNAPSHOT";
+    readonly RUNNING: "RUNNING";
+    readonly POST_SNAPSHOT: "POST_SNAPSHOT";
+    readonly PACKAGING: "PACKAGING";
+    readonly DELIVERING: "DELIVERING";
+    readonly COMPLETE: "COMPLETE";
+    readonly FAILED: "FAILED";
+};
+export type TaskRunState = (typeof TaskRunState)[keyof typeof TaskRunState];
+export declare const TERMINAL_STATES: ReadonlySet<TaskRunState>;
+export declare const IN_FLIGHT_STATES: ReadonlySet<TaskRunState>;
+/**
+ * Returns true if the transition from → to is permitted by the state machine.
+ */
+export declare function isValidTransition(from: TaskRunState, to: TaskRunState): boolean;
+/**
+ * Asserts that a transition is valid; throws if not.
+ */
+export declare function assertValidTransition(from: TaskRunState, to: TaskRunState): void;
+/**
+ * All state values as an array, useful for exhaustive checks.
+ */
+export declare const ALL_STATES: readonly TaskRunState[];
+/**
+ * Thrown by deliver() when claimDeliveryVariant is 'v2' but evidenceHash is
+ * null/undefined. A zero fallback would silently submit bytes32(0) on-chain
+ * and brick staking rewards; we prefer a loud FAILED transition instead.
+ */
+export declare class MissingEvidenceHashError extends Error {
+    constructor(requestId: string);
+}

package/dist/harnesses/engine/state.js

@@ -0,0 +1,87 @@
+/**
+ * Harness engine — state machine definitions.
+ *
+ * §6.3 of spec/2026-04-17-portfolio-v0-design.md
+ *
+ * Pure logic; no I/O, no persistence.
+ */
+// ── State enum ────────────────────────────────────────────────────────────────
+export const TaskRunState = {
+    DISCOVERED: 'DISCOVERED',
+    CLAIMED: 'CLAIMED',
+    WAITING: 'WAITING',
+    PRE_SNAPSHOT: 'PRE_SNAPSHOT',
+    RUNNING: 'RUNNING',
+    POST_SNAPSHOT: 'POST_SNAPSHOT',
+    PACKAGING: 'PACKAGING',
+    DELIVERING: 'DELIVERING',
+    COMPLETE: 'COMPLETE',
+    FAILED: 'FAILED',
+};
+export const TERMINAL_STATES = new Set([
+    TaskRunState.COMPLETE,
+    TaskRunState.FAILED,
+]);
+export const IN_FLIGHT_STATES = new Set([
+    TaskRunState.DISCOVERED,
+    TaskRunState.CLAIMED,
+    TaskRunState.WAITING,
+    TaskRunState.PRE_SNAPSHOT,
+    TaskRunState.RUNNING,
+    TaskRunState.POST_SNAPSHOT,
+    TaskRunState.PACKAGING,
+    TaskRunState.DELIVERING,
+]);
+// ── Transition table ──────────────────────────────────────────────────────────
+/**
+ * Allowed transitions. Any state can transition to FAILED (terminal error path).
+ * The table below lists non-FAILED successors only.
+ */
+const TRANSITIONS = new Map([
+    [TaskRunState.DISCOVERED, new Set([TaskRunState.CLAIMED, TaskRunState.FAILED])],
+    [TaskRunState.CLAIMED, new Set([TaskRunState.WAITING, TaskRunState.FAILED])],
+    [TaskRunState.WAITING, new Set([TaskRunState.PRE_SNAPSHOT, TaskRunState.FAILED])],
+    [TaskRunState.PRE_SNAPSHOT, new Set([TaskRunState.RUNNING, TaskRunState.FAILED])],
+    [TaskRunState.RUNNING, new Set([TaskRunState.POST_SNAPSHOT, TaskRunState.FAILED])],
+    [TaskRunState.POST_SNAPSHOT, new Set([TaskRunState.PACKAGING, TaskRunState.FAILED])],
+    [TaskRunState.PACKAGING, new Set([TaskRunState.DELIVERING, TaskRunState.FAILED])],
+    [TaskRunState.DELIVERING, new Set([TaskRunState.COMPLETE, TaskRunState.FAILED])],
+    [TaskRunState.COMPLETE, new Set()],
+    [TaskRunState.FAILED, new Set()],
+]);
+/**
+ * Returns true if the transition from → to is permitted by the state machine.
+ */
+export function isValidTransition(from, to) {
+    const allowed = TRANSITIONS.get(from);
+    if (!allowed)
+        return false;
+    return allowed.has(to);
+}
+/**
+ * Asserts that a transition is valid; throws if not.
+ */
+export function assertValidTransition(from, to) {
+    if (!isValidTransition(from, to)) {
+        throw new Error(`Invalid state transition: ${from} → ${to}. ` +
+            `Allowed from ${from}: [${[...(TRANSITIONS.get(from) ?? [])].join(', ')}]`);
+    }
+}
+/**
+ * All state values as an array, useful for exhaustive checks.
+ */
+export const ALL_STATES = Object.values(TaskRunState);
+// ── Delivery errors ───────────────────────────────────────────────────────────
+/**
+ * Thrown by deliver() when claimDeliveryVariant is 'v2' but evidenceHash is
+ * null/undefined. A zero fallback would silently submit bytes32(0) on-chain
+ * and brick staking rewards; we prefer a loud FAILED transition instead.
+ */
+export class MissingEvidenceHashError extends Error {
+    constructor(requestId) {
+        super(`deliver: evidenceHash is required for v2 claimDelivery but is missing ` +
+            `(requestId=${requestId}). Ensure pack() completed successfully before deliver().`);
+        this.name = 'MissingEvidenceHashError';
+    }
+}
+//# sourceMappingURL=state.js.map

package/dist/harnesses/engine/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/harnesses/engine/state.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,iFAAiF;AAEjF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,aAAa,EAAE,eAAe;IAC9B,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;CACR,CAAC;AAIX,MAAM,CAAC,MAAM,eAAe,GAA8B,IAAI,GAAG,CAAC;IAChE,YAAY,CAAC,QAAQ;IACrB,YAAY,CAAC,MAAM;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAA8B,IAAI,GAAG,CAAC;IACjE,YAAY,CAAC,UAAU;IACvB,YAAY,CAAC,OAAO;IACpB,YAAY,CAAC,OAAO;IACpB,YAAY,CAAC,YAAY;IACzB,YAAY,CAAC,OAAO;IACpB,YAAY,CAAC,aAAa;IAC1B,YAAY,CAAC,SAAS;IACtB,YAAY,CAAC,UAAU;CACxB,CAAC,CAAC;AAEH,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,WAAW,GAAyD,IAAI,GAAG,CAAC;IAChF,CAAC,YAAY,CAAC,UAAU,EAAK,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,EAAQ,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,OAAO,EAAQ,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,EAAQ,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,OAAO,EAAQ,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,YAAY,EAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,YAAY,EAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,EAAQ,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,OAAO,EAAQ,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,aAAa,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,SAAS,EAAM,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,SAAS,EAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,UAAU,EAAK,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,UAAU,EAAK,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,QAAQ,EAAO,IAAI,GAAG,EAAE,CAAC;IACvC,CAAC,YAAY,CAAC,MAAM,EAAS,IAAI,GAAG,EAAE,CAAC;CACxC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkB,EAAE,EAAgB;IACpE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAkB,EAAE,EAAgB;IACxE,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,MAAM,EAAE,IAAI;YAC7C,gBAAgB,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAA4B,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAE/E,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,SAAiB;QAC3B,KAAK,CACH,wEAAwE;YACxE,cAAc,SAAS,2DAA2D,CACnF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF"}

package/dist/harnesses/engine/validate-manifest.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Pre-publish validation that the envelope is fit for the corpus.
+ *
+ * Belt-and-suspenders against code paths that could bypass the OUTPUTS.json /
+ * config-driven access resolution and emit a manifest with under-populated
+ * artifact descriptors. Phase A.1, jinn-mono-vy37.1.3.
+ *
+ * Spec: spec/2026-04-30-phase-a-umbrella.md §6.3.
+ */
+import type { SignedEnvelope } from '../../types/envelope.js';
+export declare class ManifestValidationError extends Error {
+    readonly artifactIndex: number;
+    constructor(artifactIndex: number, message: string);
+}
+/**
+ * Throws `ManifestValidationError` if any artifact descriptor in the envelope
+ * is missing required `access` fields, has a non-http(s) endpoint, or carries
+ * a malformed sha256/priceUsdc. The Zod schema in `types/envelope.ts` already
+ * enforces these at parse time; this validator runs the same checks against
+ * already-typed values so the engine can fail fast with a clear, structured
+ * error before publishing the envelope.
+ */
+export declare function validateManifestForPublish(env: SignedEnvelope): void;

package/dist/harnesses/engine/validate-manifest.js

@@ -0,0 +1,63 @@
+/**
+ * Pre-publish validation that the envelope is fit for the corpus.
+ *
+ * Belt-and-suspenders against code paths that could bypass the OUTPUTS.json /
+ * config-driven access resolution and emit a manifest with under-populated
+ * artifact descriptors. Phase A.1, jinn-mono-vy37.1.3.
+ *
+ * Spec: spec/2026-04-30-phase-a-umbrella.md §6.3.
+ */
+export class ManifestValidationError extends Error {
+    artifactIndex;
+    constructor(artifactIndex, message) {
+        super(`artifacts[${artifactIndex}]: ${message}`);
+        this.artifactIndex = artifactIndex;
+        this.name = 'ManifestValidationError';
+    }
+}
+/**
+ * Throws `ManifestValidationError` if any artifact descriptor in the envelope
+ * is missing required `access` fields, has a non-http(s) endpoint, or carries
+ * a malformed sha256/priceUsdc. The Zod schema in `types/envelope.ts` already
+ * enforces these at parse time; this validator runs the same checks against
+ * already-typed values so the engine can fail fast with a clear, structured
+ * error before publishing the envelope.
+ */
+export function validateManifestForPublish(env) {
+    for (let i = 0; i < env.artifacts.length; i++) {
+        const a = env.artifacts[i];
+        if (!a.access || typeof a.access !== 'object') {
+            throw new ManifestValidationError(i, 'access is required');
+        }
+        if (!a.access.endpoint || typeof a.access.endpoint !== 'string') {
+            throw new ManifestValidationError(i, 'access.endpoint must be a non-empty string');
+        }
+        if (!/^https?:\/\//i.test(a.access.endpoint)) {
+            throw new ManifestValidationError(i, 'access.endpoint must be an http(s) URL');
+        }
+        if (!a.access.priceUsdc || typeof a.access.priceUsdc !== 'string') {
+            throw new ManifestValidationError(i, 'access.priceUsdc must be a non-empty string');
+        }
+        if (!/^\d+(\.\d+)?$/.test(a.access.priceUsdc)) {
+            throw new ManifestValidationError(i, 'access.priceUsdc must be a decimal string');
+        }
+        if (!a.sha256 || !/^[0-9a-f]{64}$/.test(a.sha256)) {
+            throw new ManifestValidationError(i, 'sha256 must be a 64-char hex string');
+        }
+        for (const source of a.sources ?? []) {
+            if (source.kind !== 'ipfs') {
+                throw new ManifestValidationError(i, 'sources[].kind must be ipfs');
+            }
+            if (!source.cid || typeof source.cid !== 'string') {
+                throw new ManifestValidationError(i, 'sources[].cid must be a non-empty string');
+            }
+            if (source.encoding !== 'jinn.artifact.donation.v1') {
+                throw new ManifestValidationError(i, 'sources[].encoding must be jinn.artifact.donation.v1');
+            }
+            if (source.sha256 !== a.sha256) {
+                throw new ManifestValidationError(i, 'sources[].sha256 must match artifact sha256');
+            }
+        }
+    }
+}
+//# sourceMappingURL=validate-manifest.js.map

package/dist/harnesses/engine/validate-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-manifest.js","sourceRoot":"","sources":["../../../src/harnesses/engine/validate-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACpB;IAA5B,YAA4B,aAAqB,EAAE,OAAe;QAChE,KAAK,CAAC,aAAa,aAAa,MAAM,OAAO,EAAE,CAAC,CAAC;QADvB,kBAAa,GAAb,aAAa,CAAQ;QAE/C,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAmB;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,4CAA4C,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClE,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,2CAA2C,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,qCAAqC,CAAC,CAAC;QAC9E,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACrC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC3B,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC;YACtE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAClD,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,0CAA0C,CAAC,CAAC;YACnF,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,KAAK,2BAA2B,EAAE,CAAC;gBACpD,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,sDAAsD,CAAC,CAAC;YAC/F,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;gBAC/B,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC;YACtF,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/harnesses/engine/verification-stub.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shared stub for verificationOfRestoration.
+ *
+ * TODO(plan-d): replace with real SDK verification — read tier from restoration
+ * envelope, supply actual SDK version, run real checks, and return a real outcome.
+ * Until then every evaluator returns this identical placeholder so there is a single
+ * site to update when Plan-D lands.
+ */
+export declare function buildVerificationStub(): {
+    claimedTier: 'self-signed';
+    sdkVersion: string;
+    timestamp: number;
+    checks: Array<{
+        name: string;
+        passed: boolean;
+    }>;
+    overall: 'valid';
+};

package/dist/harnesses/engine/verification-stub.js

@@ -0,0 +1,18 @@
+/**
+ * Shared stub for verificationOfRestoration.
+ *
+ * TODO(plan-d): replace with real SDK verification — read tier from restoration
+ * envelope, supply actual SDK version, run real checks, and return a real outcome.
+ * Until then every evaluator returns this identical placeholder so there is a single
+ * site to update when Plan-D lands.
+ */
+export function buildVerificationStub() {
+    return {
+        claimedTier: 'self-signed',
+        sdkVersion: '0.0.0-stub',
+        timestamp: Date.now(),
+        checks: [{ name: 'stub', passed: true }],
+        overall: 'valid',
+    };
+}
+//# sourceMappingURL=verification-stub.js.map

package/dist/harnesses/engine/verification-stub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-stub.js","sourceRoot":"","sources":["../../../src/harnesses/engine/verification-stub.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB;IAOnC,OAAO;QACL,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,YAAY;QACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACxC,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC"}

package/dist/harnesses/external-impls/index.d.ts

@@ -0,0 +1,3 @@
+export { loadExternalImpl } from './loader.js';
+export type { LoadResult, LoadFailureReason, LoadExternalImplArgs, ExternalHarnessEnv, ExternalHarnessFactory, } from './loader.js';
+export type { ExternalImplEntry, SignerTrust, HarnessesConfig, } from './types.js';

package/dist/harnesses/external-impls/index.js

@@ -0,0 +1,2 @@
+export { loadExternalImpl } from './loader.js';
+//# sourceMappingURL=index.js.map

package/dist/harnesses/external-impls/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/harnesses/external-impls/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/harnesses/external-impls/loader.d.ts

@@ -0,0 +1,50 @@
+/**
+ * External-impl loader. Reads a signed manifest from disk, verifies
+ * it against the trusted-signer list, dynamically imports the
+ * entry module, calls the factory with `ExternalHarnessEnv`, and
+ * validates that the resulting impl matches the manifest's
+ * (name, version, supportedSolverTypes) identity.
+ *
+ * Spec: `spec/2026-05-external-restorer-impls.md` §3, now expressed through
+ * the Harness vocabulary in `spec/2026-05-01-harness-pack-architecture.md`.
+ */
+import { type JinnManifest } from '../manifest/index.js';
+import type { ScopedSecrets } from '../capability/index.js';
+import type { Harness } from '../types.js';
+import type { ExternalImplEntry, SignerTrust } from './types.js';
+/**
+ * Daemon-side mirror of the SDK's `ExternalHarnessEnv`. Kept local
+ * (not imported from the SDK at runtime) so the client doesn't add a
+ * runtime dependency on @jinn-network/sdk/harness; the shape is part
+ * of the published Path 2 contract.
+ */
+export interface ExternalHarnessEnv {
+    readonly implName: string;
+    readonly implVersion: string;
+    readonly network: string;
+    readonly implStateDir: string;
+    readonly secrets: ScopedSecrets;
+    readonly log: (event: {
+        level: 'info' | 'warn' | 'error';
+        msg: string;
+        data?: unknown;
+    }) => void;
+    readonly stub: boolean;
+}
+export type ExternalHarnessFactory = (env: ExternalHarnessEnv) => Harness;
+export type LoadFailureReason = 'impl-trust' | 'impl-load-failed' | 'impl-construction-failed' | 'impl-identity-mismatch' | 'impl-supports-mismatch' | 'impl-package-hash-mismatch' | 'impl-entry-escape' | 'impl-version-mismatch';
+export type LoadResult = {
+    kind: 'ok';
+    impl: Harness;
+    manifest: JinnManifest;
+} | {
+    kind: 'error';
+    reason: LoadFailureReason;
+    detail?: string;
+};
+export interface LoadExternalImplArgs {
+    entry: ExternalImplEntry;
+    trustedSigners: readonly SignerTrust[];
+    env: ExternalHarnessEnv;
+}
+export declare function loadExternalImpl({ entry, trustedSigners, env, }: LoadExternalImplArgs): Promise<LoadResult>;

package/dist/harnesses/external-impls/loader.js

@@ -0,0 +1,139 @@
+/**
+ * External-impl loader. Reads a signed manifest from disk, verifies
+ * it against the trusted-signer list, dynamically imports the
+ * entry module, calls the factory with `ExternalHarnessEnv`, and
+ * validates that the resulting impl matches the manifest's
+ * (name, version, supportedSolverTypes) identity.
+ *
+ * Spec: `spec/2026-05-external-restorer-impls.md` §3, now expressed through
+ * the Harness vocabulary in `spec/2026-05-01-harness-pack-architecture.md`.
+ */
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { loadManifest, verifyManifestSignature, } from '../manifest/index.js';
+import { verifyPackageHash } from './package-hash.js';
+import { isInsidePackageDir } from '../../util/path-safety.js';
+const SOLVER_TYPE_PATTERN = /^([a-z][a-z0-9-]*\.v[0-9]+)/;
+export async function loadExternalImpl({ entry, trustedSigners, env, }) {
+    const manifestPath = join(entry.entry, 'jinn.manifest.json');
+    let manifest;
+    try {
+        manifest = await loadManifest(manifestPath);
+    }
+    catch (err) {
+        return {
+            kind: 'error',
+            reason: 'impl-load-failed',
+            detail: err.message,
+        };
+    }
+    const trusted = await verifyManifestSignature(manifest, trustedSigners);
+    if (!trusted) {
+        return { kind: 'error', reason: 'impl-trust' };
+    }
+    // Recompute the package-content hash and compare to the manifest's
+    // claim. This binds the signed manifest to the bytes on disk —
+    // without it a signed manifest could be paired with arbitrary code
+    // so long as the manifest itself is unmodified. See Finding 2 in the
+    // PR review.
+    const hashOk = await verifyPackageHash(entry.entry, manifest);
+    if (!hashOk) {
+        return {
+            kind: 'error',
+            reason: 'impl-package-hash-mismatch',
+            detail: `recomputed package hash does not match manifest.package.hash (${manifest.package.hash})`,
+        };
+    }
+    if (manifest.name !== entry.name) {
+        return {
+            kind: 'error',
+            reason: 'impl-identity-mismatch',
+            detail: `entry.name=${entry.name} != manifest.name=${manifest.name}`,
+        };
+    }
+    // Operator-pinned version: if the entry pins a specific version, the
+    // manifest MUST match it exactly. Prevents silent upgrades of the
+    // on-disk package without an explicit operator config change.
+    // (Finding 10.)
+    if (entry.version !== undefined && manifest.version !== entry.version) {
+        return {
+            kind: 'error',
+            reason: 'impl-version-mismatch',
+            detail: `entry.version=${entry.version} != manifest.version=${manifest.version}`,
+        };
+    }
+    const entryAbs = join(entry.entry, manifest.entry);
+    // Defence-in-depth against `..` traversal: the schema regex forbids
+    // `..` segments, but we also enforce containment at runtime in case
+    // the schema changes or the manifest is loaded from a non-validated
+    // source. (Finding 4a.)
+    if (!isInsidePackageDir(entry.entry, entryAbs)) {
+        return {
+            kind: 'error',
+            reason: 'impl-entry-escape',
+            detail: `manifest.entry=${manifest.entry} resolves outside the package root`,
+        };
+    }
+    let mod;
+    try {
+        mod = (await import(pathToFileURL(entryAbs).href));
+    }
+    catch (err) {
+        return {
+            kind: 'error',
+            reason: 'impl-load-failed',
+            detail: err.message,
+        };
+    }
+    if (typeof mod.default !== 'function') {
+        return {
+            kind: 'error',
+            reason: 'impl-load-failed',
+            detail: 'default export is not a function',
+        };
+    }
+    let impl;
+    try {
+        impl = mod.default(env);
+    }
+    catch (err) {
+        return {
+            kind: 'error',
+            reason: 'impl-construction-failed',
+            detail: err.message,
+        };
+    }
+    if (impl.name !== manifest.name) {
+        return {
+            kind: 'error',
+            reason: 'impl-identity-mismatch',
+            detail: `impl.name=${impl.name} != manifest.name=${manifest.name}`,
+        };
+    }
+    if (impl.version !== manifest.version) {
+        return {
+            kind: 'error',
+            reason: 'impl-identity-mismatch',
+            detail: `impl.version=${impl.version} != manifest.version=${manifest.version}`,
+        };
+    }
+    // Every solverType the manifest claims must be `supports()`-positive
+    // for at least one role.
+    for (const supported of manifest.supportedSolverTypes) {
+        const solverTypeMatch = SOLVER_TYPE_PATTERN.exec(supported);
+        if (!solverTypeMatch)
+            continue;
+        const solverType = solverTypeMatch[1];
+        const restorationOk = impl.supports({ solverType, role: 'restoration' });
+        const evaluationOk = impl.supports({ solverType, role: 'evaluation' });
+        if (!restorationOk && !evaluationOk) {
+            return {
+                kind: 'error',
+                reason: 'impl-supports-mismatch',
+                detail: `manifest claims ${solverType} but impl rejects both restoration and evaluation`,
+            };
+        }
+    }
+    return { kind: 'ok', impl, manifest };
+}
+//# sourceMappingURL=loader.js.map

package/dist/harnesses/external-impls/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/harnesses/external-impls/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,YAAY,EACZ,uBAAuB,GAExB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AA8C/D,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,KAAK,EACL,cAAc,EACd,GAAG,GACkB;IACrB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAE7D,IAAI,QAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAG,GAAa,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACjD,CAAC;IAED,mEAAmE;IACnE,+DAA+D;IAC/D,mEAAmE;IACnE,qEAAqE;IACrE,aAAa;IACb,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,4BAA4B;YACpC,MAAM,EAAE,iEAAiE,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG;SAClG,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,cAAc,KAAK,CAAC,IAAI,qBAAqB,QAAQ,CAAC,IAAI,EAAE;SACrE,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,kEAAkE;IAClE,8DAA8D;IAC9D,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACtE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,uBAAuB;YAC/B,MAAM,EAAE,iBAAiB,KAAK,CAAC,OAAO,wBAAwB,QAAQ,CAAC,OAAO,EAAE;SACjF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,wBAAwB;IACxB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,kBAAkB,QAAQ,CAAC,KAAK,oCAAoC;SAC7E,CAAC;IACJ,CAAC;IAED,IAAI,GAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAEhD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAG,GAAa,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,kCAAkC;SAC3C,CAAC;IACJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,0BAA0B;YAClC,MAAM,EAAG,GAAa,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,aAAa,IAAI,CAAC,IAAI,qBAAqB,QAAQ,CAAC,IAAI,EAAE;SACnE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,gBAAgB,IAAI,CAAC,OAAO,wBAAwB,QAAQ,CAAC,OAAO,EAAE;SAC/E,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,yBAAyB;IACzB,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,oBAAoB,EAAE,CAAC;QACtD,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,eAAe;YAAE,SAAS;QAC/B,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,EAAE,CAAC;YACpC,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,wBAAwB;gBAChC,MAAM,EAAE,mBAAmB,UAAU,mDAAmD;aACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC"}

package/dist/harnesses/external-impls/package-hash.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Deterministic recursive package-content hash for `manifest.package.hash`
+ * verification. Walks the package directory in sorted order, hashes each
+ * file's `relPath + "\0" + contents`, and folds the per-file digests into
+ * a rolling sha256 to produce a single hex digest the daemon can compare
+ * against the manifest's claimed `sha256:<64hex>`.
+ *
+ * Exclusions mirror `walkArtifacts` / `createWorkdirTarball` in
+ * `engine/packaging.ts`: `node_modules/`, `.git/`, `test/`, dotfiles,
+ * symlinks. Absolute paths and symlinks short-circuit (we never follow
+ * them) — the publisher must produce a pure tree of regular files.
+ *
+ * The relative path is normalised to forward-slash form before hashing so
+ * the digest is stable across Linux / macOS / Windows publishers.
+ */
+import type { JinnManifest } from '../manifest/index.js';
+/**
+ * Compute the deterministic package-content sha256 for `packageDir`.
+ * Returned as `sha256:<64hex>` to match the manifest field shape.
+ */
+export declare function computePackageHash(packageDir: string): `sha256:${string}`;
+/**
+ * Verify the package directory matches `manifest.package.hash`.
+ * Returns true iff the recomputed digest matches exactly.
+ */
+export declare function verifyPackageHash(packageDir: string, manifest: JinnManifest): Promise<boolean>;