@jinn-network/client 0.1.2 → 0.1.3-canary.2d6b2676

package/dist/harnesses/engine/registry.js

@@ -0,0 +1,62 @@
+/**
+ * HarnessRegistry — Harness registration + SolverNet-aware dispatch.
+ *
+ * §6.7 of spec/2026-04-17-portfolio-v0-design.md
+ *
+ * Dispatch priority:
+ *   1. solverTypeHarnesses[task.solverType] — SolverNet-selected Harness
+ *   2. config.default — named fallback impl
+ *   3. First-match — iterate registered Harnesses, return first whose supports()
+ *      returns true
+ *
+ * Disabled Harnesses (config.disabled[]) are filtered out before dispatch.
+ */
+// ── HarnessRegistry ──────────────────────────────────────────────────────
+export class HarnessRegistry {
+    harnesses = [];
+    config;
+    constructor(config = {}) {
+        this.config = config;
+    }
+    /**
+     * Register a Harness. Later registrations appear later in the list for
+     * first-match fallback dispatch.
+     */
+    register(harness) {
+        this.harnesses.push(harness);
+    }
+    /**
+     * Find the Harness to use for the given solverType, applying operator config
+     * dispatch rules.
+     *
+     * Returns undefined if no suitable impl is found (all disabled, none
+     * support the kind, or registry is empty).
+     */
+    findFor(ctx) {
+        const disabled = new Set(this.config.disabled ?? []);
+        const active = this.harnesses.filter((harness) => !disabled.has(harness.name));
+        // 1. SolverNet-selected Harness — but ONLY honor it if the named Harness supports
+        //    the requested ctx. Otherwise fall through (e.g., restoration Harness selected,
+        //    but ctx asks for an evaluation).
+        const harnessName = this.config.solverTypeHarnesses?.[ctx.solverType];
+        if (harnessName) {
+            const named = active.find((harness) => harness.name === harnessName);
+            if (named && named.supports(ctx))
+                return named;
+        }
+        // 2. default fallback name
+        if (this.config.default) {
+            const defaultHarness = active.find((harness) => harness.name === this.config.default);
+            if (defaultHarness && defaultHarness.supports(ctx)) {
+                return defaultHarness;
+            }
+        }
+        // 3. First-match by supports()
+        return active.find((harness) => harness.supports(ctx));
+    }
+    /** All registered Harnesses (including disabled ones). */
+    list() {
+        return [...this.harnesses];
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/harnesses/engine/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/harnesses/engine/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAuBH,4EAA4E;AAE5E,MAAM,OAAO,eAAe;IACT,SAAS,GAAc,EAAE,CAAC;IAC1B,MAAM,CAAwB;IAE/C,YAAY,SAAgC,EAAE;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,OAAgB;QACvB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,OAAO,CAAC,GAAgE;QACtE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/E,kFAAkF;QAClF,oFAAoF;QACpF,sCAAsC;QACtC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;YACrE,IAAI,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;QACjD,CAAC;QAED,2BAA2B;QAC3B,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACxB,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACtF,IAAI,cAAc,IAAI,cAAc,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBACnD,OAAO,cAAc,CAAC;YACxB,CAAC;QACH,CAAC;QAED,+BAA+B;QAC/B,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,0DAA0D;IAC1D,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7B,CAAC;CACF"}

package/dist/{restorer → harnesses}/engine/signing.d.ts

@@ -1,5 +1,5 @@
 /**
- * Shared canonical signing helper for the restorer engine.
+ * Shared canonical signing helper for the harness engine.
  *
  * Extracted from manifest-assembly.ts and portfolio-v0-evaluator/index.ts to
  * eliminate duplicated keccak256 → secp256k1 sign → assemble-recovery-byte logic.

package/dist/{restorer → harnesses}/engine/signing.js

@@ -1,5 +1,5 @@
 /**
- * Shared canonical signing helper for the restorer engine.
+ * Shared canonical signing helper for the harness engine.
  *
  * Extracted from manifest-assembly.ts and portfolio-v0-evaluator/index.ts to
  * eliminate duplicated keccak256 → secp256k1 sign → assemble-recovery-byte logic.

package/dist/harnesses/engine/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../../../src/harnesses/engine/signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAY,MAAM,MAAM,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAepD,iFAAiF;AAEjF;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAY,EACZ,UAAyB,EACzB,aAA4B;IAE5B,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,SAAS,CAAC,cAAc,CAAkB,CAAC;IAExD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;IACnD,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,GAAG,GAAG,KAAK,CACf,IAAI,UAAU,CAAC;QACb,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1B,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1B,YAAY;KACb,CAAC,CACc,CAAC;IAEnB,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACxE,CAAC"}

package/dist/{restorer → harnesses}/engine/state.d.ts

@@ -1,11 +1,11 @@
 /**
- * Restorer engine — state machine definitions.
+ * Harness engine — state machine definitions.
  *
  * §6.3 of spec/2026-04-17-portfolio-v0-design.md
  *
  * Pure logic; no I/O, no persistence.
  */
-export declare const IntentState: {
+export declare const TaskRunState: {
     readonly DISCOVERED: "DISCOVERED";
     readonly CLAIMED: "CLAIMED";
     readonly WAITING: "WAITING";
@@ -17,21 +17,21 @@ export declare const IntentState: {
     readonly COMPLETE: "COMPLETE";
     readonly FAILED: "FAILED";
 };
-export type IntentState = (typeof IntentState)[keyof typeof IntentState];
-export declare const TERMINAL_STATES: ReadonlySet<IntentState>;
-export declare const IN_FLIGHT_STATES: ReadonlySet<IntentState>;
+export type TaskRunState = (typeof TaskRunState)[keyof typeof TaskRunState];
+export declare const TERMINAL_STATES: ReadonlySet<TaskRunState>;
+export declare const IN_FLIGHT_STATES: ReadonlySet<TaskRunState>;
 /**
  * Returns true if the transition from → to is permitted by the state machine.
  */
-export declare function isValidTransition(from: IntentState, to: IntentState): boolean;
+export declare function isValidTransition(from: TaskRunState, to: TaskRunState): boolean;
 /**
  * Asserts that a transition is valid; throws if not.
  */
-export declare function assertValidTransition(from: IntentState, to: IntentState): void;
+export declare function assertValidTransition(from: TaskRunState, to: TaskRunState): void;
 /**
  * All state values as an array, useful for exhaustive checks.
  */
-export declare const ALL_STATES: readonly IntentState[];
+export declare const ALL_STATES: readonly TaskRunState[];
 /**
  * Thrown by deliver() when claimDeliveryVariant is 'v2' but evidenceHash is
  * null/undefined. A zero fallback would silently submit bytes32(0) on-chain

package/dist/{restorer → harnesses}/engine/state.js

@@ -1,12 +1,12 @@
 /**
- * Restorer engine — state machine definitions.
+ * Harness engine — state machine definitions.
  *
  * §6.3 of spec/2026-04-17-portfolio-v0-design.md
  *
  * Pure logic; no I/O, no persistence.
  */
 // ── State enum ────────────────────────────────────────────────────────────────
-export const IntentState = {
+export const TaskRunState = {
     DISCOVERED: 'DISCOVERED',
     CLAIMED: 'CLAIMED',
     WAITING: 'WAITING',
@@ -19,18 +19,18 @@ export const IntentState = {
     FAILED: 'FAILED',
 };
 export const TERMINAL_STATES = new Set([
-    IntentState.COMPLETE,
-    IntentState.FAILED,
+    TaskRunState.COMPLETE,
+    TaskRunState.FAILED,
 ]);
 export const IN_FLIGHT_STATES = new Set([
-    IntentState.DISCOVERED,
-    IntentState.CLAIMED,
-    IntentState.WAITING,
-    IntentState.PRE_SNAPSHOT,
-    IntentState.RUNNING,
-    IntentState.POST_SNAPSHOT,
-    IntentState.PACKAGING,
-    IntentState.DELIVERING,
+    TaskRunState.DISCOVERED,
+    TaskRunState.CLAIMED,
+    TaskRunState.WAITING,
+    TaskRunState.PRE_SNAPSHOT,
+    TaskRunState.RUNNING,
+    TaskRunState.POST_SNAPSHOT,
+    TaskRunState.PACKAGING,
+    TaskRunState.DELIVERING,
 ]);
 // ── Transition table ──────────────────────────────────────────────────────────
 /**
@@ -38,16 +38,16 @@ export const IN_FLIGHT_STATES = new Set([
  * The table below lists non-FAILED successors only.
  */
 const TRANSITIONS = new Map([
-    [IntentState.DISCOVERED, new Set([IntentState.CLAIMED, IntentState.FAILED])],
-    [IntentState.CLAIMED, new Set([IntentState.WAITING, IntentState.FAILED])],
-    [IntentState.WAITING, new Set([IntentState.PRE_SNAPSHOT, IntentState.FAILED])],
-    [IntentState.PRE_SNAPSHOT, new Set([IntentState.RUNNING, IntentState.FAILED])],
-    [IntentState.RUNNING, new Set([IntentState.POST_SNAPSHOT, IntentState.FAILED])],
-    [IntentState.POST_SNAPSHOT, new Set([IntentState.PACKAGING, IntentState.FAILED])],
-    [IntentState.PACKAGING, new Set([IntentState.DELIVERING, IntentState.FAILED])],
-    [IntentState.DELIVERING, new Set([IntentState.COMPLETE, IntentState.FAILED])],
-    [IntentState.COMPLETE, new Set()],
-    [IntentState.FAILED, new Set()],
+    [TaskRunState.DISCOVERED, new Set([TaskRunState.CLAIMED, TaskRunState.FAILED])],
+    [TaskRunState.CLAIMED, new Set([TaskRunState.WAITING, TaskRunState.FAILED])],
+    [TaskRunState.WAITING, new Set([TaskRunState.PRE_SNAPSHOT, TaskRunState.FAILED])],
+    [TaskRunState.PRE_SNAPSHOT, new Set([TaskRunState.RUNNING, TaskRunState.FAILED])],
+    [TaskRunState.RUNNING, new Set([TaskRunState.POST_SNAPSHOT, TaskRunState.FAILED])],
+    [TaskRunState.POST_SNAPSHOT, new Set([TaskRunState.PACKAGING, TaskRunState.FAILED])],
+    [TaskRunState.PACKAGING, new Set([TaskRunState.DELIVERING, TaskRunState.FAILED])],
+    [TaskRunState.DELIVERING, new Set([TaskRunState.COMPLETE, TaskRunState.FAILED])],
+    [TaskRunState.COMPLETE, new Set()],
+    [TaskRunState.FAILED, new Set()],
 ]);
 /**
  * Returns true if the transition from → to is permitted by the state machine.
@@ -70,7 +70,7 @@ export function assertValidTransition(from, to) {
 /**
  * All state values as an array, useful for exhaustive checks.
  */
-export const ALL_STATES = Object.values(IntentState);
+export const ALL_STATES = Object.values(TaskRunState);
 // ── Delivery errors ───────────────────────────────────────────────────────────
 /**
  * Thrown by deliver() when claimDeliveryVariant is 'v2' but evidenceHash is

package/dist/harnesses/engine/state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.js","sourceRoot":"","sources":["../../../src/harnesses/engine/state.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,iFAAiF;AAEjF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,UAAU,EAAE,YAAY;IACxB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,cAAc;IAC5B,OAAO,EAAE,SAAS;IAClB,aAAa,EAAE,eAAe;IAC9B,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;CACR,CAAC;AAIX,MAAM,CAAC,MAAM,eAAe,GAA8B,IAAI,GAAG,CAAC;IAChE,YAAY,CAAC,QAAQ;IACrB,YAAY,CAAC,MAAM;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAA8B,IAAI,GAAG,CAAC;IACjE,YAAY,CAAC,UAAU;IACvB,YAAY,CAAC,OAAO;IACpB,YAAY,CAAC,OAAO;IACpB,YAAY,CAAC,YAAY;IACzB,YAAY,CAAC,OAAO;IACpB,YAAY,CAAC,aAAa;IAC1B,YAAY,CAAC,SAAS;IACtB,YAAY,CAAC,UAAU;CACxB,CAAC,CAAC;AAEH,iFAAiF;AAEjF;;;GAGG;AACH,MAAM,WAAW,GAAyD,IAAI,GAAG,CAAC;IAChF,CAAC,YAAY,CAAC,UAAU,EAAK,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,EAAQ,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,OAAO,EAAQ,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,EAAQ,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,OAAO,EAAQ,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,YAAY,EAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,YAAY,EAAG,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,EAAQ,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,OAAO,EAAQ,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,aAAa,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,aAAa,EAAE,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,SAAS,EAAM,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,SAAS,EAAM,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,UAAU,EAAK,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,UAAU,EAAK,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,QAAQ,EAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC,YAAY,CAAC,QAAQ,EAAO,IAAI,GAAG,EAAE,CAAC;IACvC,CAAC,YAAY,CAAC,MAAM,EAAS,IAAI,GAAG,EAAE,CAAC;CACxC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAkB,EAAE,EAAgB;IACpE,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAkB,EAAE,EAAgB;IACxE,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,6BAA6B,IAAI,MAAM,EAAE,IAAI;YAC7C,gBAAgB,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC3E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAA4B,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAE/E,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IACjD,YAAY,SAAiB;QAC3B,KAAK,CACH,wEAAwE;YACxE,cAAc,SAAS,2DAA2D,CACnF,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF"}

package/dist/harnesses/engine/validate-manifest.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Pre-publish validation that the envelope is fit for the corpus.
+ *
+ * Belt-and-suspenders against code paths that could bypass the OUTPUTS.json /
+ * config-driven access resolution and emit a manifest with under-populated
+ * artifact descriptors. Phase A.1, jinn-mono-vy37.1.3.
+ *
+ * Spec: spec/2026-04-30-phase-a-umbrella.md §6.3.
+ */
+import type { SignedEnvelope } from '../../types/envelope.js';
+export declare class ManifestValidationError extends Error {
+    readonly artifactIndex: number;
+    constructor(artifactIndex: number, message: string);
+}
+/**
+ * Throws `ManifestValidationError` if any artifact descriptor in the envelope
+ * is missing required `access` fields, has a non-http(s) endpoint, or carries
+ * a malformed sha256/priceUsdc. The Zod schema in `types/envelope.ts` already
+ * enforces these at parse time; this validator runs the same checks against
+ * already-typed values so the engine can fail fast with a clear, structured
+ * error before publishing the envelope.
+ */
+export declare function validateManifestForPublish(env: SignedEnvelope): void;

package/dist/harnesses/engine/validate-manifest.js

@@ -0,0 +1,49 @@
+/**
+ * Pre-publish validation that the envelope is fit for the corpus.
+ *
+ * Belt-and-suspenders against code paths that could bypass the OUTPUTS.json /
+ * config-driven access resolution and emit a manifest with under-populated
+ * artifact descriptors. Phase A.1, jinn-mono-vy37.1.3.
+ *
+ * Spec: spec/2026-04-30-phase-a-umbrella.md §6.3.
+ */
+export class ManifestValidationError extends Error {
+    artifactIndex;
+    constructor(artifactIndex, message) {
+        super(`artifacts[${artifactIndex}]: ${message}`);
+        this.artifactIndex = artifactIndex;
+        this.name = 'ManifestValidationError';
+    }
+}
+/**
+ * Throws `ManifestValidationError` if any artifact descriptor in the envelope
+ * is missing required `access` fields, has a non-http(s) endpoint, or carries
+ * a malformed sha256/priceUsdc. The Zod schema in `types/envelope.ts` already
+ * enforces these at parse time; this validator runs the same checks against
+ * already-typed values so the engine can fail fast with a clear, structured
+ * error before publishing the envelope.
+ */
+export function validateManifestForPublish(env) {
+    for (let i = 0; i < env.artifacts.length; i++) {
+        const a = env.artifacts[i];
+        if (!a.access || typeof a.access !== 'object') {
+            throw new ManifestValidationError(i, 'access is required');
+        }
+        if (!a.access.endpoint || typeof a.access.endpoint !== 'string') {
+            throw new ManifestValidationError(i, 'access.endpoint must be a non-empty string');
+        }
+        if (!/^https?:\/\//i.test(a.access.endpoint)) {
+            throw new ManifestValidationError(i, 'access.endpoint must be an http(s) URL');
+        }
+        if (!a.access.priceUsdc || typeof a.access.priceUsdc !== 'string') {
+            throw new ManifestValidationError(i, 'access.priceUsdc must be a non-empty string');
+        }
+        if (!/^\d+(\.\d+)?$/.test(a.access.priceUsdc)) {
+            throw new ManifestValidationError(i, 'access.priceUsdc must be a decimal string');
+        }
+        if (!a.sha256 || !/^[0-9a-f]{64}$/.test(a.sha256)) {
+            throw new ManifestValidationError(i, 'sha256 must be a 64-char hex string');
+        }
+    }
+}
+//# sourceMappingURL=validate-manifest.js.map

package/dist/harnesses/engine/validate-manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-manifest.js","sourceRoot":"","sources":["../../../src/harnesses/engine/validate-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACpB;IAA5B,YAA4B,aAAqB,EAAE,OAAe;QAChE,KAAK,CAAC,aAAa,aAAa,MAAM,OAAO,EAAE,CAAC,CAAC;QADvB,kBAAa,GAAb,aAAa,CAAQ;QAE/C,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,GAAmB;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,4CAA4C,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,wCAAwC,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;YAClE,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,6CAA6C,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,2CAA2C,CAAC,CAAC;QACpF,CAAC;QACD,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,MAAM,IAAI,uBAAuB,CAAC,CAAC,EAAE,qCAAqC,CAAC,CAAC;QAC9E,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/harnesses/engine/verification-stub.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Shared stub for verificationOfRestoration.
+ *
+ * TODO(plan-d): replace with real SDK verification — read tier from restoration
+ * envelope, supply actual SDK version, run real checks, and return a real outcome.
+ * Until then every evaluator returns this identical placeholder so there is a single
+ * site to update when Plan-D lands.
+ */
+export declare function buildVerificationStub(): {
+    claimedTier: 'self-signed';
+    sdkVersion: string;
+    timestamp: number;
+    checks: Array<{
+        name: string;
+        passed: boolean;
+    }>;
+    overall: 'valid';
+};

package/dist/harnesses/engine/verification-stub.js

@@ -0,0 +1,18 @@
+/**
+ * Shared stub for verificationOfRestoration.
+ *
+ * TODO(plan-d): replace with real SDK verification — read tier from restoration
+ * envelope, supply actual SDK version, run real checks, and return a real outcome.
+ * Until then every evaluator returns this identical placeholder so there is a single
+ * site to update when Plan-D lands.
+ */
+export function buildVerificationStub() {
+    return {
+        claimedTier: 'self-signed',
+        sdkVersion: '0.0.0-stub',
+        timestamp: Date.now(),
+        checks: [{ name: 'stub', passed: true }],
+        overall: 'valid',
+    };
+}
+//# sourceMappingURL=verification-stub.js.map

package/dist/harnesses/engine/verification-stub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-stub.js","sourceRoot":"","sources":["../../../src/harnesses/engine/verification-stub.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB;IAOnC,OAAO;QACL,WAAW,EAAE,aAAa;QAC1B,UAAU,EAAE,YAAY;QACxB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QACxC,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC"}

package/dist/harnesses/external-impls/index.d.ts

@@ -0,0 +1,3 @@
+export { loadExternalImpl } from './loader.js';
+export type { LoadResult, LoadFailureReason, LoadExternalImplArgs, ExternalHarnessEnv, ExternalHarnessFactory, } from './loader.js';
+export type { ExternalImplEntry, SignerTrust, HarnessesConfig, } from './types.js';

package/dist/harnesses/external-impls/index.js

@@ -0,0 +1,2 @@
+export { loadExternalImpl } from './loader.js';
+//# sourceMappingURL=index.js.map

package/dist/harnesses/external-impls/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/harnesses/external-impls/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/harnesses/external-impls/loader.d.ts

@@ -0,0 +1,50 @@
+/**
+ * External-impl loader. Reads a signed manifest from disk, verifies
+ * it against the trusted-signer list, dynamically imports the
+ * entry module, calls the factory with `ExternalHarnessEnv`, and
+ * validates that the resulting impl matches the manifest's
+ * (name, version, supportedSolverTypes) identity.
+ *
+ * Spec: `spec/2026-05-external-restorer-impls.md` §3, now expressed through
+ * the Harness vocabulary in `spec/2026-05-01-harness-pack-architecture.md`.
+ */
+import { type JinnManifest } from '../manifest/index.js';
+import type { ScopedSecrets } from '../capability/index.js';
+import type { Harness } from '../types.js';
+import type { ExternalImplEntry, SignerTrust } from './types.js';
+/**
+ * Daemon-side mirror of the SDK's `ExternalHarnessEnv`. Kept local
+ * (not imported from the SDK at runtime) so the client doesn't add a
+ * runtime dependency on @jinn-network/harness-sdk; the shape is part
+ * of the published Path 2 contract.
+ */
+export interface ExternalHarnessEnv {
+    readonly implName: string;
+    readonly implVersion: string;
+    readonly network: string;
+    readonly implStateDir: string;
+    readonly secrets: ScopedSecrets;
+    readonly log: (event: {
+        level: 'info' | 'warn' | 'error';
+        msg: string;
+        data?: unknown;
+    }) => void;
+    readonly stub: boolean;
+}
+export type ExternalHarnessFactory = (env: ExternalHarnessEnv) => Harness;
+export type LoadFailureReason = 'impl-trust' | 'impl-load-failed' | 'impl-construction-failed' | 'impl-identity-mismatch' | 'impl-supports-mismatch' | 'impl-package-hash-mismatch' | 'impl-entry-escape' | 'impl-version-mismatch';
+export type LoadResult = {
+    kind: 'ok';
+    impl: Harness;
+    manifest: JinnManifest;
+} | {
+    kind: 'error';
+    reason: LoadFailureReason;
+    detail?: string;
+};
+export interface LoadExternalImplArgs {
+    entry: ExternalImplEntry;
+    trustedSigners: readonly SignerTrust[];
+    env: ExternalHarnessEnv;
+}
+export declare function loadExternalImpl({ entry, trustedSigners, env, }: LoadExternalImplArgs): Promise<LoadResult>;

package/dist/harnesses/external-impls/loader.js

@@ -0,0 +1,139 @@
+/**
+ * External-impl loader. Reads a signed manifest from disk, verifies
+ * it against the trusted-signer list, dynamically imports the
+ * entry module, calls the factory with `ExternalHarnessEnv`, and
+ * validates that the resulting impl matches the manifest's
+ * (name, version, supportedSolverTypes) identity.
+ *
+ * Spec: `spec/2026-05-external-restorer-impls.md` §3, now expressed through
+ * the Harness vocabulary in `spec/2026-05-01-harness-pack-architecture.md`.
+ */
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { loadManifest, verifyManifestSignature, } from '../manifest/index.js';
+import { verifyPackageHash } from './package-hash.js';
+import { isInsidePackageDir } from '../../util/path-safety.js';
+const SOLVER_TYPE_PATTERN = /^([a-z][a-z0-9-]*\.v[0-9]+)/;
+export async function loadExternalImpl({ entry, trustedSigners, env, }) {
+    const manifestPath = join(entry.entry, 'jinn.manifest.json');
+    let manifest;
+    try {
+        manifest = await loadManifest(manifestPath);
+    }
+    catch (err) {
+        return {
+            kind: 'error',
+            reason: 'impl-load-failed',
+            detail: err.message,
+        };
+    }
+    const trusted = await verifyManifestSignature(manifest, trustedSigners);
+    if (!trusted) {
+        return { kind: 'error', reason: 'impl-trust' };
+    }
+    // Recompute the package-content hash and compare to the manifest's
+    // claim. This binds the signed manifest to the bytes on disk —
+    // without it a signed manifest could be paired with arbitrary code
+    // so long as the manifest itself is unmodified. See Finding 2 in the
+    // PR review.
+    const hashOk = await verifyPackageHash(entry.entry, manifest);
+    if (!hashOk) {
+        return {
+            kind: 'error',
+            reason: 'impl-package-hash-mismatch',
+            detail: `recomputed package hash does not match manifest.package.hash (${manifest.package.hash})`,
+        };
+    }
+    if (manifest.name !== entry.name) {
+        return {
+            kind: 'error',
+            reason: 'impl-identity-mismatch',
+            detail: `entry.name=${entry.name} != manifest.name=${manifest.name}`,
+        };
+    }
+    // Operator-pinned version: if the entry pins a specific version, the
+    // manifest MUST match it exactly. Prevents silent upgrades of the
+    // on-disk package without an explicit operator config change.
+    // (Finding 10.)
+    if (entry.version !== undefined && manifest.version !== entry.version) {
+        return {
+            kind: 'error',
+            reason: 'impl-version-mismatch',
+            detail: `entry.version=${entry.version} != manifest.version=${manifest.version}`,
+        };
+    }
+    const entryAbs = join(entry.entry, manifest.entry);
+    // Defence-in-depth against `..` traversal: the schema regex forbids
+    // `..` segments, but we also enforce containment at runtime in case
+    // the schema changes or the manifest is loaded from a non-validated
+    // source. (Finding 4a.)
+    if (!isInsidePackageDir(entry.entry, entryAbs)) {
+        return {
+            kind: 'error',
+            reason: 'impl-entry-escape',
+            detail: `manifest.entry=${manifest.entry} resolves outside the package root`,
+        };
+    }
+    let mod;
+    try {
+        mod = (await import(pathToFileURL(entryAbs).href));
+    }
+    catch (err) {
+        return {
+            kind: 'error',
+            reason: 'impl-load-failed',
+            detail: err.message,
+        };
+    }
+    if (typeof mod.default !== 'function') {
+        return {
+            kind: 'error',
+            reason: 'impl-load-failed',
+            detail: 'default export is not a function',
+        };
+    }
+    let impl;
+    try {
+        impl = mod.default(env);
+    }
+    catch (err) {
+        return {
+            kind: 'error',
+            reason: 'impl-construction-failed',
+            detail: err.message,
+        };
+    }
+    if (impl.name !== manifest.name) {
+        return {
+            kind: 'error',
+            reason: 'impl-identity-mismatch',
+            detail: `impl.name=${impl.name} != manifest.name=${manifest.name}`,
+        };
+    }
+    if (impl.version !== manifest.version) {
+        return {
+            kind: 'error',
+            reason: 'impl-identity-mismatch',
+            detail: `impl.version=${impl.version} != manifest.version=${manifest.version}`,
+        };
+    }
+    // Every solverType the manifest claims must be `supports()`-positive
+    // for at least one role.
+    for (const supported of manifest.supportedSolverTypes) {
+        const solverTypeMatch = SOLVER_TYPE_PATTERN.exec(supported);
+        if (!solverTypeMatch)
+            continue;
+        const solverType = solverTypeMatch[1];
+        const restorationOk = impl.supports({ solverType, role: 'restoration' });
+        const evaluationOk = impl.supports({ solverType, role: 'evaluation' });
+        if (!restorationOk && !evaluationOk) {
+            return {
+                kind: 'error',
+                reason: 'impl-supports-mismatch',
+                detail: `manifest claims ${solverType} but impl rejects both restoration and evaluation`,
+            };
+        }
+    }
+    return { kind: 'ok', impl, manifest };
+}
+//# sourceMappingURL=loader.js.map

package/dist/harnesses/external-impls/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/harnesses/external-impls/loader.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EACL,YAAY,EACZ,uBAAuB,GAExB,MAAM,sBAAsB,CAAC;AAI9B,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AA8C/D,MAAM,mBAAmB,GAAG,6BAA6B,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,EACrC,KAAK,EACL,cAAc,EACd,GAAG,GACkB;IACrB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAE7D,IAAI,QAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAG,GAAa,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACxE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACjD,CAAC;IAED,mEAAmE;IACnE,+DAA+D;IAC/D,mEAAmE;IACnE,qEAAqE;IACrE,aAAa;IACb,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,4BAA4B;YACpC,MAAM,EAAE,iEAAiE,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG;SAClG,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,cAAc,KAAK,CAAC,IAAI,qBAAqB,QAAQ,CAAC,IAAI,EAAE;SACrE,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,kEAAkE;IAClE,8DAA8D;IAC9D,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACtE,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,uBAAuB;YAC/B,MAAM,EAAE,iBAAiB,KAAK,CAAC,OAAO,wBAAwB,QAAQ,CAAC,OAAO,EAAE;SACjF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,oEAAoE;IACpE,oEAAoE;IACpE,oEAAoE;IACpE,wBAAwB;IACxB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC/C,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE,kBAAkB,QAAQ,CAAC,KAAK,oCAAoC;SAC7E,CAAC;IACJ,CAAC;IAED,IAAI,GAAyC,CAAC;IAC9C,IAAI,CAAC;QACH,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAEhD,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAG,GAAa,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,kBAAkB;YAC1B,MAAM,EAAE,kCAAkC;SAC3C,CAAC;IACJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,0BAA0B;YAClC,MAAM,EAAG,GAAa,CAAC,OAAO;SAC/B,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,aAAa,IAAI,CAAC,IAAI,qBAAqB,QAAQ,CAAC,IAAI,EAAE;SACnE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,EAAE,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,wBAAwB;YAChC,MAAM,EAAE,gBAAgB,IAAI,CAAC,OAAO,wBAAwB,QAAQ,CAAC,OAAO,EAAE;SAC/E,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,yBAAyB;IACzB,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,oBAAoB,EAAE,CAAC;QACtD,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5D,IAAI,CAAC,eAAe;YAAE,SAAS;QAC/B,MAAM,UAAU,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC;QACzE,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,EAAE,CAAC;YACpC,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE,wBAAwB;gBAChC,MAAM,EAAE,mBAAmB,UAAU,mDAAmD;aACzF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACxC,CAAC"}

package/dist/harnesses/external-impls/package-hash.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Deterministic recursive package-content hash for `manifest.package.hash`
+ * verification. Walks the package directory in sorted order, hashes each
+ * file's `relPath + "\0" + contents`, and folds the per-file digests into
+ * a rolling sha256 to produce a single hex digest the daemon can compare
+ * against the manifest's claimed `sha256:<64hex>`.
+ *
+ * Exclusions mirror `walkArtifacts` / `createWorkdirTarball` in
+ * `engine/packaging.ts`: `node_modules/`, `.git/`, `test/`, dotfiles,
+ * symlinks. Absolute paths and symlinks short-circuit (we never follow
+ * them) — the publisher must produce a pure tree of regular files.
+ *
+ * The relative path is normalised to forward-slash form before hashing so
+ * the digest is stable across Linux / macOS / Windows publishers.
+ */
+import type { JinnManifest } from '../manifest/index.js';
+/**
+ * Compute the deterministic package-content sha256 for `packageDir`.
+ * Returned as `sha256:<64hex>` to match the manifest field shape.
+ */
+export declare function computePackageHash(packageDir: string): `sha256:${string}`;
+/**
+ * Verify the package directory matches `manifest.package.hash`.
+ * Returns true iff the recomputed digest matches exactly.
+ */
+export declare function verifyPackageHash(packageDir: string, manifest: JinnManifest): Promise<boolean>;