npm - @kya-os/cli - Versions diffs - 2.1.0 → 2.1.2 - Mend

@kya-os/cli 2.1.0 → 2.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (19) hide show

package/dist/sidecar/sidecar/src/dev-identity-file.js ADDED Viewed

@@ -0,0 +1,131 @@
+/**
+ * The development identity file (`.mcpi/identity.json` by default), created
+ * and rotated in exactly the format `@kya-os/mcp-i`'s runtime
+ * `IdentityManager` reads and writes.
+ *
+ * This is a copy of that class's development path, not an import of it.
+ * `@kya-os/mcp-i` is the MCP server framework, and as a dependency of
+ * `@kya-os/cli` it installed the framework's whole toolchain (webpack, swc,
+ * esbuild, tsx, express, the MCP Inspector's React app) with every
+ * `npm install @kya-os/cli`: 389 MB across 359 packages, for about 250 lines.
+ * `kya-os build` and `kya-os dev` run the target project's own
+ * `@kya-os/mcp-i` (`bin/run-compile.mjs`), so nothing else here needed it.
+ *
+ * The keys, the DID's hash and the kid's base58 come from `@kya-os/mcp`, the
+ * protocol's reference implementation, which the CLI already depends on: a
+ * `CryptoProvider` (`NodeCryptoProvider` unless the caller passes another,
+ * such as `WebCryptoProvider` off Node) and its `base58Encode`.
+ *
+ * `__tests__/dev-identity-parity.test.ts` checks each file this module
+ * writes against the runtime's `IdentityManager` and each file the runtime
+ * writes against this module, including rotation and the `keyId` migration,
+ * so the copy cannot drift from the runtime unnoticed. Keep the two in step:
+ * a format change in either fails that test.
+ */
+import { existsSync } from "node:fs";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, isAbsolute, resolve } from "node:path";
+import { base58Encode, NodeCryptoProvider } from "@kya-os/mcp";
+/** The Ed25519 multicodec prefix a multibase key identifier starts with. */
+const ED25519_MULTICODEC = Buffer.from([0xed, 0x01]);
+const nodeCrypto = new NodeCryptoProvider();
+/** A relative path is taken from the working directory, as the runtime takes it. */
+function absolute(identityPath) {
+    return isAbsolute(identityPath)
+        ? identityPath
+        : resolve(process.cwd(), identityPath);
+}
+/**
+ * The identity at `identityPath`, generating and saving a fresh one when
+ * there is none or it cannot be read. A file with a legacy `keyId` of the
+ * form `key-…` is migrated to a multibase `kid` and saved again.
+ */
+export async function ensureDevIdentity(identityPath, crypto = nodeCrypto) {
+    const path = absolute(identityPath);
+    try {
+        if (existsSync(path)) {
+            const devIdentity = JSON.parse(await readFile(path, "utf-8"));
+            let kid = devIdentity.kid || devIdentity.keyId;
+            if (devIdentity.keyId && !devIdentity.kid && kid.startsWith("key-")) {
+                kid = multibaseKid(devIdentity.publicKey);
+                const migrated = {
+                    did: devIdentity.did,
+                    kid,
+                    privateKey: devIdentity.privateKey,
+                    publicKey: devIdentity.publicKey,
+                    createdAt: devIdentity.createdAt,
+                    lastRotated: devIdentity.lastRotated,
+                };
+                await saveDevIdentity(path, migrated);
+                console.error(`✅ Migrated identity to new multibase kid format: ${kid}`);
+                return migrated;
+            }
+            return {
+                did: devIdentity.did,
+                kid,
+                privateKey: devIdentity.privateKey,
+                publicKey: devIdentity.publicKey,
+                createdAt: devIdentity.createdAt,
+                lastRotated: devIdentity.lastRotated,
+            };
+        }
+    }
+    catch (error) {
+        console.warn(`Warning: Could not load identity from ${path}, generating new one`, error instanceof Error ? error.message : error);
+    }
+    return generateDevIdentity(path, crypto);
+}
+/**
+ * A fresh Ed25519 keypair saved over whatever is at `identityPath`, with
+ * `lastRotated` set to its `createdAt`. `preserveDid` keeps the agent's DID;
+ * without it a new `did:web:localhost` DID is minted.
+ */
+export async function rotateDevIdentity(identityPath, preserveDid, crypto = nodeCrypto) {
+    const path = absolute(identityPath);
+    const identity = await generateDevIdentity(path, crypto, preserveDid);
+    const rotated = { ...identity, lastRotated: identity.createdAt };
+    await saveDevIdentity(path, rotated);
+    return rotated;
+}
+async function generateDevIdentity(path, crypto, preserveDid) {
+    // Base64 raw 32-byte Ed25519 keys, the form the file stores.
+    const { privateKey, publicKey } = await crypto.generateKeyPair();
+    // A development DID names the agent by the first 8 hex digits of the
+    // SHA-256 of its base64 public key; the provider answers `sha256:<hex>`.
+    const digest = await crypto.hash(new TextEncoder().encode(publicKey));
+    if (!digest.startsWith("sha256:")) {
+        throw new Error(`Unexpected hash format from the crypto provider: ${digest.slice(0, 16)}`);
+    }
+    const shortId = digest.slice("sha256:".length, "sha256:".length + 8);
+    const identity = {
+        did: preserveDid ?? `did:web:localhost:3000:agents:${shortId}`,
+        kid: multibaseKid(publicKey),
+        privateKey,
+        publicKey,
+        createdAt: new Date().toISOString(),
+    };
+    await saveDevIdentity(path, identity);
+    return identity;
+}
+/** The key's multibase identifier: `z` + base58btc of the Ed25519 multicodec and key. */
+function multibaseKid(base64PublicKey) {
+    const prefixed = Buffer.concat([ED25519_MULTICODEC, Buffer.from(base64PublicKey, "base64")]);
+    return `z${base58Encode(prefixed)}`;
+}
+async function saveDevIdentity(path, identity) {
+    await mkdir(dirname(path), { recursive: true });
+    const file = {
+        version: "1.0",
+        did: identity.did,
+        kid: identity.kid,
+        privateKey: identity.privateKey,
+        publicKey: identity.publicKey,
+        createdAt: identity.createdAt,
+        lastRotated: identity.lastRotated,
+    };
+    await writeFile(path, JSON.stringify(file, null, 2), { mode: 0o600 });
+    console.error(`✅ Identity saved to ${path}`);
+    console.error(`   DID: ${identity.did}`);
+    console.error(`   Key ID: ${identity.kid}`);
+}
+//# sourceMappingURL=dev-identity-file.js.map

package/dist/sidecar/sidecar/src/dev-identity-file.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"dev-identity-file.js","sourceRoot":"","sources":["../../../../sidecar/src/dev-identity-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAuB,MAAM,aAAa,CAAC;AAEpF,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD,MAAM,UAAU,GAAG,IAAI,kBAAkB,EAAE,CAAC;AAa5C,oFAAoF;AACpF,SAAS,QAAQ,CAAC,YAAoB;IACpC,OAAO,UAAU,CAAC,YAAY,CAAC;QAC7B,CAAC,CAAC,YAAY;QACd,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,YAAoB,EACpB,SAAyB,UAAU;IAEnC,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACpC,IAAI,CAAC;QACH,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAC9D,IAAI,GAAG,GAAG,WAAW,CAAC,GAAG,IAAI,WAAW,CAAC,KAAK,CAAC;YAC/C,IAAI,WAAW,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACpE,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;gBAC1C,MAAM,QAAQ,GAAgB;oBAC5B,GAAG,EAAE,WAAW,CAAC,GAAG;oBACpB,GAAG;oBACH,UAAU,EAAE,WAAW,CAAC,UAAU;oBAClC,SAAS,EAAE,WAAW,CAAC,SAAS;oBAChC,SAAS,EAAE,WAAW,CAAC,SAAS;oBAChC,WAAW,EAAE,WAAW,CAAC,WAAW;iBACrC,CAAC;gBACF,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;gBACtC,OAAO,CAAC,KAAK,CACX,oDAAoD,GAAG,EAAE,CAC1D,CAAC;gBACF,OAAO,QAAQ,CAAC;YAClB,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,WAAW,CAAC,GAAG;gBACpB,GAAG;gBACH,UAAU,EAAE,WAAW,CAAC,UAAU;gBAClC,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,SAAS,EAAE,WAAW,CAAC,SAAS;gBAChC,WAAW,EAAE,WAAW,CAAC,WAAW;aACrC,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,IAAI,CACV,yCAAyC,IAAI,sBAAsB,EACnE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,mBAAmB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,YAAoB,EACpB,WAAoB,EACpB,SAAyB,UAAU;IAEnC,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IACtE,MAAM,OAAO,GAAgB,EAAE,GAAG,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,SAAS,EAAE,CAAC;IAC9E,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACrC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,MAAsB,EACtB,WAAoB;IAEpB,6DAA6D;IAC7D,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,EAAE,CAAC;IACjE,qEAAqE;IACrE,yEAAyE;IACzE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,oDAAoD,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAgB;QAC5B,GAAG,EAAE,WAAW,IAAI,iCAAiC,OAAO,EAAE;QAC9D,GAAG,EAAE,YAAY,CAAC,SAAS,CAAC;QAC5B,UAAU;QACV,SAAS;QACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IACF,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,yFAAyF;AACzF,SAAS,YAAY,CAAC,eAAuB;IAC3C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC7F,OAAO,IAAI,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,QAAqB;IAErB,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG;QACX,OAAO,EAAE,KAAK;QACd,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;KAClC,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACtE,OAAO,CAAC,KAAK,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAC;IAC7C,OAAO,CAAC,KAAK,CAAC,WAAW,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;IACzC,OAAO,CAAC,KAAK,CAAC,cAAc,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;AAC9C,CAAC"}

package/dist/sidecar/sidecar/src/ops/ensure-identity.js CHANGED Viewed

@@ -1,16 +1,11 @@
-// A thin wrapper around @kya-os/mcp-i's own IdentityManager -- reused
-// as-is, matching ops/sign-with-ed25519-seed.ts's precedent of reusing
-// existing crypto/identity logic rather than reimplementing it. Unlike
-// that op (which reaches up into this package's own src/utils/dco/ via a
-// relative import), @kya-os/mcp-i is a real, already-resolvable npm
-// dependency of @kya-os/cli (verified: packages/cli/node_modules/@kya-os/mcp-i
-// symlinks to the built packages/mcp-i, whose dist/index.js exports
-// IdentityManager), so this imports it as a normal package specifier.
-import { IdentityManager } from "@kya-os/mcp-i";
+// A thin wrapper around dev-identity-file.ts, which writes the identity file
+// in exactly the format @kya-os/mcp-i's runtime IdentityManager reads (see
+// that module for why it is a copy, and its parity test).
+import { ensureDevIdentity } from "../dev-identity-file.js";
 /**
  * Load `identityPath` if it already holds a valid identity, generating a
  * fresh Ed25519 keypair (and a placeholder `did:web:localhost:3000:agents:*`
- * DID) otherwise -- IdentityManager.ensureIdentity()'s own exact behavior,
+ * DID) otherwise -- ensureDevIdentity()'s own exact behavior,
  * including its corrupted-file-regenerates fallback and its keyId->kid
  * migration, none of which this wrapper reimplements.
  *
@@ -23,8 +18,7 @@ export async function ensureIdentity(params) {
     if (typeof identityPath !== "string" || identityPath.length === 0) {
         throw new Error("ensureIdentity: identityPath is required");
     }
-    const manager = new IdentityManager({ environment: "development", devIdentityPath: identityPath });
-    const identity = await manager.ensureIdentity();
+    const identity = await ensureDevIdentity(identityPath);
     return {
         did: identity.did,
         kid: identity.kid,

package/dist/sidecar/sidecar/src/ops/ensure-identity.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"ensure-identity.js","sourceRoot":"","sources":["../../../../../sidecar/src/ops/ensure-identity.ts"],"names":[],"mappings":"AAAA,~~sEAAsE~~;~~AACtE~~,~~uEAAuE~~;~~AACvE~~,~~uEAAuE~~;~~AACvE~~,~~yEAAyE;AACzE,oEAAoE;AACpE,+EAA+E;AAC/E,oEAAoE;AACpE,sEAAsE;AACtE,~~OAAO,EAAE,~~eAAe~~,EAAE,MAAM,~~eAAe~~,CAAC;~~AAchD~~;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAe;IAClD,MAAM,EAAE,YAAY,EAAE,GAAG,MAA8B,CAAC;IACxD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,~~OAAO~~,GAAG,~~IAAI~~,~~eAAe~~,CAAC,~~EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,~~YAAY,~~EAAE,~~CAAC,CAAC;~~IACnG~~,~~MAAM,QAAQ,GAAG,MAAM,~~OAAO~~,CAAC,cAAc,EAAE,CAAC~~;~~IAChD,OAAO;~~QACL,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,gBAAgB,EAAE,QAAQ,CAAC,UAAU;QACrC,eAAe,EAAE,QAAQ,CAAC,SAAS;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC"}
1	+ {"version":3,"file":"ensure-identity.js","sourceRoot":"","sources":["../../../../../sidecar/src/ops/ensure-identity.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,2EAA2E;AAC3E,0DAA0D;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAc5D;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAe;IAClD,MAAM,EAAE,YAAY,EAAE,GAAG,MAA8B,CAAC;IACxD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACvD,OAAO;QACL,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,gBAAgB,EAAE,QAAQ,CAAC,UAAU;QACrC,eAAe,EAAE,QAAQ,CAAC,SAAS;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;KAC9B,CAAC;AACJ,CAAC"}

package/dist/sidecar/sidecar/src/ops/rotate-identity.js CHANGED Viewed

@@ -1,9 +1,6 @@
-// A thin wrapper around @kya-os/mcp-i's own IdentityManager.rotateDevIdentity
-// -- mirrors ops/ensure-identity.ts's own precedent of reusing existing
-// crypto/identity logic rather than reimplementing it, and its own doc
-// comment's reasoning for importing @kya-os/mcp-i as a normal package
-// specifier.
-import { IdentityManager } from "@kya-os/mcp-i";
+// A thin wrapper around dev-identity-file.ts's rotateDevIdentity, as
+// ops/ensure-identity.ts wraps its ensureDevIdentity.
+import { rotateDevIdentity } from "../dev-identity-file.js";
 /**
  * Force-generate a fresh Ed25519 keypair and persist it to `identityPath`,
  * unconditionally overwriting whatever identity (if any) is already there.
@@ -21,8 +18,7 @@ export async function rotateIdentity(params) {
     if (typeof identityPath !== "string" || identityPath.length === 0) {
         throw new Error("rotateIdentity: identityPath is required");
     }
-    const manager = new IdentityManager({ environment: "development", devIdentityPath: identityPath });
-    const identity = await manager.rotateDevIdentity(typeof preserveDid === "string" && preserveDid.length > 0 ? preserveDid : undefined);
+    const identity = await rotateDevIdentity(identityPath, typeof preserveDid === "string" && preserveDid.length > 0 ? preserveDid : undefined);
     return {
         did: identity.did,
         kid: identity.kid,
@@ -30,7 +26,7 @@ export async function rotateIdentity(params) {
         publicKeyBase64: identity.publicKey,
         createdAt: identity.createdAt,
         // rotateDevIdentity() always sets lastRotated to the new identity's own
-        // createdAt -- see identity.ts's own doc comment.
+        // createdAt -- see dev-identity-file.ts.
         lastRotated: identity.lastRotated,
     };
 }

package/dist/sidecar/sidecar/src/ops/rotate-identity.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"rotate-identity.js","sourceRoot":"","sources":["../../../../../sidecar/src/ops/rotate-identity.ts"],"names":[],"mappings":"AAAA,~~8EAA8E~~;~~AAC9E~~,~~wEAAwE~~;~~AACxE~~,~~uEAAuE;AACvE,sEAAsE;AACtE,aAAa;AACb,~~OAAO,EAAE,~~eAAe~~,EAAE,MAAM,~~eAAe~~,CAAC;~~AAgBhD~~;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAe;IAClD,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,MAA8B,CAAC;IACrE,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,~~OAAO,GAAG,IAAI,eAAe,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC,CAAC;IACnG,MAAM,~~QAAQ,GAAG,MAAM,~~OAAO~~,~~CAAC~~,~~iBAAiB~~,~~CAC9C~~,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CACpF,CAAC;IACF,OAAO;QACL,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,gBAAgB,EAAE,QAAQ,CAAC,UAAU;QACrC,eAAe,EAAE,QAAQ,CAAC,SAAS;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,wEAAwE;QACxE,~~kDAAkD~~;~~QAClD~~,WAAW,EAAE,QAAQ,CAAC,WAAqB;KAC5C,CAAC;AACJ,CAAC"}
1	+ {"version":3,"file":"rotate-identity.js","sourceRoot":"","sources":["../../../../../sidecar/src/ops/rotate-identity.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,sDAAsD;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAgB5D;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAe;IAClD,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,GAAG,MAA8B,CAAC;IACrE,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CACtC,YAAY,EACZ,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CACpF,CAAC;IACF,OAAO;QACL,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,gBAAgB,EAAE,QAAQ,CAAC,UAAU;QACrC,eAAe,EAAE,QAAQ,CAAC,SAAS;QACnC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,wEAAwE;QACxE,yCAAyC;QACzC,WAAW,EAAE,QAAQ,CAAC,WAAqB;KAC5C,CAAC;AACJ,CAAC"}

package/dist/sidecar/sidecar/src/ssh-key.js CHANGED Viewed

@@ -131,7 +131,8 @@ export function sshFingerprintFromPublicKeyLine(publicKeyLine) {
 /**
  * Decode a stored Ed25519 public key into its raw 32 bytes, tolerating the two
  * encodings that appear across the ecosystem:
- *  - raw base64 (32 bytes) as written by the local mcp-i IdentityManager, and
+ *  - raw base64 (32 bytes) as written by the development identity file
+ *    (dev-identity-file.ts, in mcp-i's IdentityManager format), and
  *  - multibase base64url with an "m" prefix as returned by the KTA registry
  *    (see know-that-ai cli-register `encodePublicKey`).
  * Returns null when the value is neither, so a defense-in-depth cross-check can

package/dist/sidecar/sidecar/src/ssh-key.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"ssh-key.js","sourceRoot":"","sources":["../../../../sidecar/src/ssh-key.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,aAAa,GAAG,kBAAkB,CAAC;AACzC,MAAM,QAAQ,GAAG,aAAa,CAAC;AAE/B,6EAA6E;AAC7E,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CACtC,kCAAkC,EAClC,KAAK,CACN,CAAC;AAaF,SAAS,SAAS,CAAC,IAAqB;IACtC,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,aAAa,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,gBAAgB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAE/D,CAAC;IACF,uEAAuE;IACvE,4DAA4D;IAC5D,qBAAqB;IACrB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,oBAAoB;IACpB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAY,EACZ,SAAiB,EACjB,OAAe,EACf,UAAkB;IAElB,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;QACjC,KAAK;QACL,KAAK;QACL,SAAS,CAAC,QAAQ,CAAC;QACnB,SAAS,CAAC,SAAS,CAAC;QACpB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3C,SAAS,CAAC,OAAO,CAAC;KACnB,CAAC,CAAC;IAEH,iEAAiE;IACjE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;QAClC,SAAS,CAAC,MAAM,CAAC;QACjB,SAAS,CAAC,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,CAAC;QACb,MAAM,CAAC,CAAC,CAAC;QACT,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACnC,SAAS,CAAC,cAAc,CAAC;KAC1B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,wCAAwC,OAAO,uCAAuC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9E,OAAO,UAAU,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,+BAA+B,CAAC,aAAqB;IACnE,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1D,OAAO,UAAU,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;AAClE,CAAC;AAED~~;;;;;;;;;;GAUG~~;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,OAAe;IACjE,OAAO,GAAG,QAAQ,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;AACxF,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,gBAAwB,EACxB,OAAe,EACf,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,IAAI,GAAG,OAAO,CAAC;IACjB,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACjC,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,CAAC,MAAM,4BAA4B,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE/C,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;QACpC,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACzE,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,UAAU,GACd,OAAO,CAAC,UAAU;QAClB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEjE,OAAO;QACL,aAAa,EAAE,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;QACvE,aAAa,EAAE,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC;QACnD,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC;QACtC,eAAe,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,aAAa,CAAC,GAAW,EAAE,MAAuB;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,MAAuB;IACzD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAAW;IAItD,MAAM,IAAI,GAAG,GAAG;SACb,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC;SAClD,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC;SAChD,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAE1B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC;IAClC,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5D,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,uCAAuC;IACnE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,UAAU,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,oDAAoD;IAChF,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,aAAa,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,GAAG,EAAE,KAAK;QACV,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACtC,CAAC"}
1	+ {"version":3,"file":"ssh-key.js","sourceRoot":"","sources":["../../../../sidecar/src/ssh-key.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAE7E;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,aAAa,GAAG,kBAAkB,CAAC;AACzC,MAAM,QAAQ,GAAG,aAAa,CAAC;AAE/B,6EAA6E;AAC7E,MAAM,oBAAoB,GAAG,MAAM,CAAC,IAAI,CACtC,kCAAkC,EAClC,KAAK,CACN,CAAC;AAaF,SAAS,SAAS,CAAC,IAAqB;IACtC,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5B,GAAG,CAAC,aAAa,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO,gBAAgB,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACxE,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,sBAAsB,CAAC,IAAY;IACjD,MAAM,UAAU,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAE/D,CAAC;IACF,uEAAuE;IACvE,4DAA4D;IAC5D,qBAAqB;IACrB,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,oBAAoB;IACpB,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,aAAa,CAAC,SAAiB;IACtC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAY,EACZ,SAAiB,EACjB,OAAe,EACf,UAAkB;IAElB,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,IAAI,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;QACjC,KAAK;QACL,KAAK;QACL,SAAS,CAAC,QAAQ,CAAC;QACnB,SAAS,CAAC,SAAS,CAAC;QACpB,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3C,SAAS,CAAC,OAAO,CAAC;KACnB,CAAC,CAAC;IAEH,iEAAiE;IACjE,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACxD,IAAI,SAAS,GAAG,CAAC,EAAE,CAAC;QAClB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QACD,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC;QAClC,SAAS,CAAC,MAAM,CAAC;QACjB,SAAS,CAAC,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,CAAC;QACb,MAAM,CAAC,CAAC,CAAC;QACT,SAAS,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACnC,SAAS,CAAC,cAAc,CAAC;KAC1B,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACvC,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3C,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACvC,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,wCAAwC,OAAO,uCAAuC,CAAC;AAChG,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAiB;IAC9C,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC9E,OAAO,UAAU,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,+BAA+B,CAAC,aAAqB;IACnE,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1D,OAAO,UAAU,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC3D,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC5B,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,OAAe;IACjE,OAAO,GAAG,QAAQ,IAAI,aAAa,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;AACxF,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,gBAAwB,EACxB,OAAe,EACf,UAA0B,EAAE;IAE5B,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACxD,IAAI,IAAY,CAAC;IACjB,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,IAAI,GAAG,OAAO,CAAC;IACjB,CAAC;SAAM,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACjC,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CACb,2CAA2C,OAAO,CAAC,MAAM,4BAA4B,CACtF,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAE/C,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,uBAAuB,EAAE,CAAC;QACpC,wEAAwE;QACxE,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QACzE,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,2EAA2E;IAC3E,uEAAuE;IACvE,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtE,MAAM,UAAU,GACd,OAAO,CAAC,UAAU;QAClB,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEjE,OAAO;QACL,aAAa,EAAE,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,CAAC;QACvE,aAAa,EAAE,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC;QACnD,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC;QACtC,eAAe,EAAE,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,yFAAyF;AACzF,SAAS,aAAa,CAAC,GAAW,EAAE,MAAuB;IACzD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAChB,IAAI,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;IACzD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,MAAuB;IACzD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAAW;IAItD,MAAM,IAAI,GAAG,GAAG;SACb,OAAO,CAAC,qCAAqC,EAAE,EAAE,CAAC;SAClD,OAAO,CAAC,mCAAmC,EAAE,EAAE,CAAC;SAChD,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAE1B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrE,MAAM,CAAC,GAAG,GAAG,aAAa,CAAC,MAAM,CAAC;IAClC,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC5D,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,uCAAuC;IACnE,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3C,IAAI,UAAU,KAAK,MAAM,IAAI,OAAO,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,oDAAoD;IAChF,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxE,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,yCAAyC,OAAO,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,aAAa,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC7D,IAAI,aAAa,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,0EAA0E,CAC3E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,MAAM,QAAQ,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,oBAAoB,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,gBAAgB,CAAC;QAClC,GAAG,EAAE,KAAK;QACV,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AACtC,CAAC"}

package/node_modules/@kya-os/contracts/dist/workbench/economics.d.ts CHANGED Viewed

@@ -1086,6 +1086,15 @@ export declare const BudgetSettlementSchema: z.ZodDiscriminatedUnion<"state", [z
 }, {
     state: "not_started";
     evidenceRef: string;
+}>, z.ZodObject<{
+    state: z.ZodLiteral<"not_dispatched">;
+    startOperationId: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    state: "not_dispatched";
+    startOperationId: string;
+}, {
+    state: "not_dispatched";
+    startOperationId: string;
 }>]>;
 export type PriceSchedule = z.infer<typeof PriceScheduleSchema>;
 export type CostQuantities = z.infer<typeof CostQuantitiesSchema>;

package/node_modules/@kya-os/contracts/dist/workbench/economics.js CHANGED Viewed

@@ -84,4 +84,6 @@ exports.BudgetSettlementSchema = zod_1.z.discriminatedUnion('state', [
     zod_1.z.object({ state: zod_1.z.literal('known'), costRecordId: id }).strict(),
     zod_1.z.object({ state: zod_1.z.literal('unknown'), costRecordId: id.nullable() }).strict(),
     zod_1.z.object({ state: zod_1.z.literal('not_started'), evidenceRef: id }).strict(),
+    /** A standing start proven never dispatched, or refused by Checkpoint on its first send. */
+    zod_1.z.object({ state: zod_1.z.literal('not_dispatched'), startOperationId: id }).strict(),
 ]);

package/node_modules/@kya-os/contracts/dist/workbench/execution.d.ts CHANGED Viewed

@@ -357,16 +357,24 @@ export declare const WorkbenchSourceBindingSchema: z.ZodObject<{
     sourceRevision: z.ZodNumber;
     inputDigest: z.ZodString;
     operationId: z.ZodString;
+    /**
+     * The Checkpoint task this work is admitted, started, finished and reported under, set only
+     * when it differs from the manifest's taskId (a tracker item bound to a received source).
+     * Omitted otherwise, so existing manifest digests are unchanged.
+     */
+    taskId: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
     sourceId: string;
     sourceRevision: number;
     inputDigest: string;
     operationId: string;
+    taskId?: string | undefined;
 }, {
     sourceId: string;
     sourceRevision: number;
     inputDigest: string;
     operationId: string;
+    taskId?: string | undefined;
 }>;
 /** At most 32 KiB of UTF-8, as the Rust manifest bounds it. */
 export declare const WORKBENCH_TASK_INSTRUCTIONS_MAX_BYTES: number;
@@ -401,16 +409,24 @@ export declare const WorkbenchTaskManifestSchema: z.ZodEffects<z.ZodObject<{
         sourceRevision: z.ZodNumber;
         inputDigest: z.ZodString;
         operationId: z.ZodString;
+        /**
+         * The Checkpoint task this work is admitted, started, finished and reported under, set only
+         * when it differs from the manifest's taskId (a tracker item bound to a received source).
+         * Omitted otherwise, so existing manifest digests are unchanged.
+         */
+        taskId: z.ZodOptional<z.ZodString>;
     }, "strict", z.ZodTypeAny, {
         sourceId: string;
         sourceRevision: number;
         inputDigest: string;
         operationId: string;
+        taskId?: string | undefined;
     }, {
         sourceId: string;
         sourceRevision: number;
         inputDigest: string;
         operationId: string;
+        taskId?: string | undefined;
     }>>;
     /** The reviewed dependency binding a dependent tracker task consumes; part of the manifest digest. */
     dependencyBinding: z.ZodOptional<z.ZodString>;
@@ -475,6 +491,7 @@ export declare const WorkbenchTaskManifestSchema: z.ZodEffects<z.ZodObject<{
         sourceRevision: number;
         inputDigest: string;
         operationId: string;
+        taskId?: string | undefined;
     } | undefined;
     instructions?: string | undefined;
     dependencyBinding?: string | undefined;
@@ -507,6 +524,7 @@ export declare const WorkbenchTaskManifestSchema: z.ZodEffects<z.ZodObject<{
         sourceRevision: number;
         inputDigest: string;
         operationId: string;
+        taskId?: string | undefined;
     } | undefined;
     instructions?: string | undefined;
     dependencyBinding?: string | undefined;
@@ -539,6 +557,7 @@ export declare const WorkbenchTaskManifestSchema: z.ZodEffects<z.ZodObject<{
         sourceRevision: number;
         inputDigest: string;
         operationId: string;
+        taskId?: string | undefined;
     } | undefined;
     instructions?: string | undefined;
     dependencyBinding?: string | undefined;
@@ -571,6 +590,7 @@ export declare const WorkbenchTaskManifestSchema: z.ZodEffects<z.ZodObject<{
         sourceRevision: number;
         inputDigest: string;
         operationId: string;
+        taskId?: string | undefined;
     } | undefined;
     instructions?: string | undefined;
     dependencyBinding?: string | undefined;

package/node_modules/@kya-os/contracts/dist/workbench/execution.js CHANGED Viewed

@@ -42,6 +42,12 @@ exports.WorkbenchTaskRoutingSchema = zod_1.z.discriminatedUnion('mode', [
 exports.WorkbenchSourceBindingSchema = zod_1.z.object({
     sourceId: zod_1.z.string().min(1), sourceRevision: zod_1.z.number().int().positive(),
     inputDigest: zod_1.z.string().regex(/^sha256:[a-f0-9]{64}$/), operationId: zod_1.z.string().uuid(),
+    /**
+     * The Checkpoint task this work is admitted, started, finished and reported under, set only
+     * when it differs from the manifest's taskId (a tracker item bound to a received source).
+     * Omitted otherwise, so existing manifest digests are unchanged.
+     */
+    taskId: zod_1.z.string().uuid().optional(),
 }).strict();
 /** At most 32 KiB of UTF-8, as the Rust manifest bounds it. */
 exports.WORKBENCH_TASK_INSTRUCTIONS_MAX_BYTES = 32 * 1024;
@@ -78,6 +84,11 @@ exports.WorkbenchTaskManifestSchema = zod_1.z.object({
             code: zod_1.z.ZodIssueCode.custom, path: ['acceptanceCriteria'],
             message: 'Acceptance criteria require unique IDs',
         });
+    if (manifest.source?.taskId !== undefined && manifest.source.taskId === manifest.taskId)
+        context.addIssue({
+            code: zod_1.z.ZodIssueCode.custom, path: ['source', 'taskId'],
+            message: 'A source binding names its Checkpoint task only when it differs from the task',
+        });
 });
 exports.WorkbenchExecutionLeaseSchema = zod_1.z.object({
     operationId: zod_1.z.string().min(1), taskId: zod_1.z.string().min(1),

package/node_modules/@kya-os/contracts/dist/workbench/governed.d.ts CHANGED Viewed

@@ -269,16 +269,19 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: z.ZodNumber;
                 inputDigest: z.ZodString;
                 operationId: z.ZodString;
+                taskId: z.ZodOptional<z.ZodString>;
             }, "strict", z.ZodTypeAny, {
                 sourceId: string;
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             }, {
                 sourceId: string;
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             }>>;
             dependencyBinding: z.ZodOptional<z.ZodString>;
             acceptanceCriteria: z.ZodArray<z.ZodObject<{
@@ -342,6 +345,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -374,6 +378,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -406,6 +411,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -438,6 +444,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -894,6 +901,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -1007,6 +1015,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -1120,6 +1129,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -1233,6 +1243,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -1349,6 +1360,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -1371,6 +1383,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
         permittedOperations: string[];
         prohibitedExternalOperations: string[];
     };
+    startOperationId: string;
     admissionRef: string;
     admission: {
         projectId: string;
@@ -1420,7 +1433,6 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
         acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
     };
     workerProfile: string;
-    startOperationId: string;
 }, {
     schemaVersion: 1;
     review: {
@@ -1515,6 +1527,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -1537,6 +1550,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
         permittedOperations: string[];
         prohibitedExternalOperations: string[];
     };
+    startOperationId: string;
     admissionRef: string;
     admission: {
         projectId: string;
@@ -1586,7 +1600,6 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
         acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
     };
     workerProfile: string;
-    startOperationId: string;
 }>, {
     schemaVersion: 1;
     review: {
@@ -1681,6 +1694,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -1703,6 +1717,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
         permittedOperations: string[];
         prohibitedExternalOperations: string[];
     };
+    startOperationId: string;
     admissionRef: string;
     admission: {
         projectId: string;
@@ -1752,7 +1767,6 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
         acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
     };
     workerProfile: string;
-    startOperationId: string;
 }, {
     schemaVersion: 1;
     review: {
@@ -1847,6 +1861,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -1869,6 +1884,7 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
         permittedOperations: string[];
         prohibitedExternalOperations: string[];
     };
+    startOperationId: string;
     admissionRef: string;
     admission: {
         projectId: string;
@@ -1918,7 +1934,6 @@ export declare const GovernedExecutionSchema: z.ZodEffects<z.ZodObject<{
         acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
     };
     workerProfile: string;
-    startOperationId: string;
 }>;
 export type GovernedExecution = z.infer<typeof GovernedExecutionSchema>;
 /** Metadata projection, with gate status separate from local outcome. It does
@@ -2300,16 +2315,19 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: z.ZodNumber;
                     inputDigest: z.ZodString;
                     operationId: z.ZodString;
+                    taskId: z.ZodOptional<z.ZodString>;
                 }, "strict", z.ZodTypeAny, {
                     sourceId: string;
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 }, {
                     sourceId: string;
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 }>>;
                 dependencyBinding: z.ZodOptional<z.ZodString>;
                 acceptanceCriteria: z.ZodArray<z.ZodObject<{
@@ -2373,6 +2391,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -2405,6 +2424,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -2437,6 +2457,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -2469,6 +2490,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -2925,6 +2947,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -3038,6 +3061,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -3151,6 +3175,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -3264,6 +3289,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -3380,6 +3406,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -3402,6 +3429,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             permittedOperations: string[];
             prohibitedExternalOperations: string[];
         };
+        startOperationId: string;
         admissionRef: string;
         admission: {
             projectId: string;
@@ -3451,7 +3479,6 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
         };
         workerProfile: string;
-        startOperationId: string;
     }, {
         schemaVersion: 1;
         review: {
@@ -3546,6 +3573,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -3568,6 +3596,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             permittedOperations: string[];
             prohibitedExternalOperations: string[];
         };
+        startOperationId: string;
         admissionRef: string;
         admission: {
             projectId: string;
@@ -3617,7 +3646,6 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
         };
         workerProfile: string;
-        startOperationId: string;
     }>, {
         schemaVersion: 1;
         review: {
@@ -3712,6 +3740,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -3734,6 +3763,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             permittedOperations: string[];
             prohibitedExternalOperations: string[];
         };
+        startOperationId: string;
         admissionRef: string;
         admission: {
             projectId: string;
@@ -3783,7 +3813,6 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
         };
         workerProfile: string;
-        startOperationId: string;
     }, {
         schemaVersion: 1;
         review: {
@@ -3878,6 +3907,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -3900,6 +3930,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             permittedOperations: string[];
             prohibitedExternalOperations: string[];
         };
+        startOperationId: string;
         admissionRef: string;
         admission: {
             projectId: string;
@@ -3949,7 +3980,6 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
         };
         workerProfile: string;
-        startOperationId: string;
     }>;
     leadConfig: z.ZodObject<{
         origin: z.ZodString;
@@ -4073,6 +4103,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -4095,6 +4126,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             permittedOperations: string[];
             prohibitedExternalOperations: string[];
         };
+        startOperationId: string;
         admissionRef: string;
         admission: {
             projectId: string;
@@ -4144,7 +4176,6 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
         };
         workerProfile: string;
-        startOperationId: string;
     };
     leadConfig: {
         projectId: string;
@@ -4254,6 +4285,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
                     sourceRevision: number;
                     inputDigest: string;
                     operationId: string;
+                    taskId?: string | undefined;
                 } | undefined;
                 instructions?: string | undefined;
                 dependencyBinding?: string | undefined;
@@ -4276,6 +4308,7 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             permittedOperations: string[];
             prohibitedExternalOperations: string[];
         };
+        startOperationId: string;
         admissionRef: string;
         admission: {
             projectId: string;
@@ -4325,7 +4358,6 @@ export declare const StandingSupervisorBindingSchema: z.ZodObject<{
             acceptedProviders?: ("discord" | "linear" | "github" | "didcomm" | "a2a")[] | undefined;
         };
         workerProfile: string;
-        startOperationId: string;
     };
     leadConfig: {
         projectId: string;

package/node_modules/@kya-os/contracts/dist/workbench/lead-planner.d.ts CHANGED Viewed

@@ -4951,16 +4951,19 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: z.ZodNumber;
                 inputDigest: z.ZodString;
                 operationId: z.ZodString;
+                taskId: z.ZodOptional<z.ZodString>;
             }, "strict", z.ZodTypeAny, {
                 sourceId: string;
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             }, {
                 sourceId: string;
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             }>>;
             dependencyBinding: z.ZodOptional<z.ZodString>;
             acceptanceCriteria: z.ZodArray<z.ZodObject<{
@@ -5024,6 +5027,7 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -5056,6 +5060,7 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -5088,6 +5093,7 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -5120,6 +5126,7 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -5576,6 +5583,7 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -5689,6 +5697,7 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -5802,6 +5811,7 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -5915,6 +5925,7 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -7195,6 +7206,7 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;
@@ -7583,6 +7595,7 @@ export declare const LeadPlanSchema: z.ZodObject<{
                 sourceRevision: number;
                 inputDigest: string;
                 operationId: string;
+                taskId?: string | undefined;
             } | undefined;
             instructions?: string | undefined;
             dependencyBinding?: string | undefined;

package/node_modules/@kya-os/contracts/dist/workbench/mailbox.d.ts CHANGED Viewed

@@ -222,13 +222,13 @@ export declare const TaskModelReceiptSchema: z.ZodObject<{
         coverage: "unknown" | "complete" | "partial";
     }>>;
     outputDigest: z.ZodOptional<z.ZodString>;
-    code: z.ZodEnum<["MODEL_STARTED", "MODEL_COMPLETED", "MODEL_OUTCOME_UNKNOWN"]>;
+    code: z.ZodEnum<["MODEL_STARTED", "MODEL_COMPLETED", "MODEL_REFUSED", "MODEL_OUTCOME_UNKNOWN"]>;
     durationMs: z.ZodNullable<z.ZodNumber>;
     requestStartedAtMs: z.ZodNullable<z.ZodNumber>;
     costBasis: z.ZodLiteral<"unknown">;
     billingVerified: z.ZodLiteral<false>;
 }, "strict", z.ZodTypeAny, {
-    code: "MODEL_STARTED" | "MODEL_COMPLETED" | "MODEL_OUTCOME_UNKNOWN";
+    code: "MODEL_STARTED" | "MODEL_COMPLETED" | "MODEL_REFUSED" | "MODEL_OUTCOME_UNKNOWN";
     provider: "anthropic";
     credentialId: string;
     model: string;
@@ -255,7 +255,7 @@ export declare const TaskModelReceiptSchema: z.ZodObject<{
     billingVerified: false;
     outputDigest?: string | undefined;
 }, {
-    code: "MODEL_STARTED" | "MODEL_COMPLETED" | "MODEL_OUTCOME_UNKNOWN";
+    code: "MODEL_STARTED" | "MODEL_COMPLETED" | "MODEL_REFUSED" | "MODEL_OUTCOME_UNKNOWN";
     provider: "anthropic";
     credentialId: string;
     model: string;

package/node_modules/@kya-os/contracts/dist/workbench/mailbox.js CHANGED Viewed

@@ -102,7 +102,8 @@ exports.TaskModelReceiptSchema = zod_1.z
         .string()
         .regex(/^sha256:[a-f0-9]{64}$/)
         .optional(),
-    code: zod_1.z.enum(['MODEL_STARTED', 'MODEL_COMPLETED', 'MODEL_OUTCOME_UNKNOWN']),
+    // A definite refusal keeps its allocation spent without making the admission uncertain.
+    code: zod_1.z.enum(['MODEL_STARTED', 'MODEL_COMPLETED', 'MODEL_REFUSED', 'MODEL_OUTCOME_UNKNOWN']),
     durationMs: zod_1.z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).nullable(),
     requestStartedAtMs: zod_1.z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).nullable(),
     costBasis: zod_1.z.literal('unknown'),

package/node_modules/@kya-os/contracts/dist/workbench/review.d.ts CHANGED Viewed

@@ -27,16 +27,19 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             sourceRevision: z.ZodNumber;
             inputDigest: z.ZodString;
             operationId: z.ZodString;
+            taskId: z.ZodOptional<z.ZodString>;
         }, "strict", z.ZodTypeAny, {
             sourceId: string;
             sourceRevision: number;
             inputDigest: string;
             operationId: string;
+            taskId?: string | undefined;
         }, {
             sourceId: string;
             sourceRevision: number;
             inputDigest: string;
             operationId: string;
+            taskId?: string | undefined;
         }>>;
         dependencyBinding: z.ZodOptional<z.ZodString>;
         acceptanceCriteria: z.ZodArray<z.ZodObject<{
@@ -100,6 +103,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             sourceRevision: number;
             inputDigest: string;
             operationId: string;
+            taskId?: string | undefined;
         } | undefined;
         instructions?: string | undefined;
         dependencyBinding?: string | undefined;
@@ -132,6 +136,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             sourceRevision: number;
             inputDigest: string;
             operationId: string;
+            taskId?: string | undefined;
         } | undefined;
         instructions?: string | undefined;
         dependencyBinding?: string | undefined;
@@ -164,6 +169,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             sourceRevision: number;
             inputDigest: string;
             operationId: string;
+            taskId?: string | undefined;
         } | undefined;
         instructions?: string | undefined;
         dependencyBinding?: string | undefined;
@@ -196,6 +202,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             sourceRevision: number;
             inputDigest: string;
             operationId: string;
+            taskId?: string | undefined;
         } | undefined;
         instructions?: string | undefined;
         dependencyBinding?: string | undefined;
@@ -652,6 +659,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             sourceRevision: number;
             inputDigest: string;
             operationId: string;
+            taskId?: string | undefined;
         } | undefined;
         instructions?: string | undefined;
         dependencyBinding?: string | undefined;
@@ -765,6 +773,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             sourceRevision: number;
             inputDigest: string;
             operationId: string;
+            taskId?: string | undefined;
         } | undefined;
         instructions?: string | undefined;
         dependencyBinding?: string | undefined;
@@ -878,6 +887,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             sourceRevision: number;
             inputDigest: string;
             operationId: string;
+            taskId?: string | undefined;
         } | undefined;
         instructions?: string | undefined;
         dependencyBinding?: string | undefined;
@@ -991,6 +1001,7 @@ export declare const ExecutionReviewSchema: z.ZodEffects<z.ZodObject<{
             sourceRevision: number;
             inputDigest: string;
             operationId: string;
+            taskId?: string | undefined;
         } | undefined;
         instructions?: string | undefined;
         dependencyBinding?: string | undefined;

package/node_modules/@kya-os/contracts/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/contracts",
-  "version": "1.13.0",
+  "version": "1.13.1",
   "description": "Shared contracts, types, and schemas for MCP-I framework",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -152,6 +152,7 @@
   },
   "scripts": {
     "build": "tsc -p tsconfig.build.json && npm run emit-schemas && npm run check-exports-integrity",
+    "typecheck": "tsc --noEmit -p tsconfig.build.json",
     "emit-schemas": "node scripts/emit-schemas.mjs",
     "check-exports-integrity": "node scripts/check-exports-integrity.mjs",
     "test": "vitest run",
@@ -164,7 +165,7 @@
   },
   "sideEffects": false,
   "dependencies": {
-    "@kya-os/consent": "^0.1.23",
+    "@kya-os/consent": "^0.1.50",
     "zod": "^3.25.67"
   },
   "devDependencies": {

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@kya-os/cli",
-  "version": "2.1.0",
+  "version": "2.1.2",
   "description": "CLI for KYA-OS setup and management",
   "keywords": [
     "cli",
@@ -32,6 +32,7 @@
   ],
   "scripts": {
     "build": "npm run build:sidecar && node scripts/fix-esm-imports.js && node scripts/smoke-test-dist.js",
+    "typecheck": "tsc --noEmit -p tsconfig.sidecar.json",
     "build:rust": "cargo build --locked --release",
     "build:sidecar": "tsc -p tsconfig.sidecar.json",
     "build:foundation": "npm run build:rust && npm run build:sidecar",
@@ -46,14 +47,14 @@
     "test:coverage": "vitest --coverage --run"
   },
   "dependencies": {
-    "@kya-os/contracts": "1.13.0",
+    "@kya-os/contracts": "1.13.1",
     "@kya-os/mcp": "1.15.0",
-    "@kya-os/mcp-i": "^1.12.0",
     "didwebvh-ts": "2.8.0",
     "json-canonicalize": "2.0.0",
     "zod": "^3.25.67"
   },
   "devDependencies": {
+    "@kya-os/mcp-i": "^1.13.1",
     "@types/node": "^20.0.0",
     "@vitest/coverage-v8": "^4.0.18",
     "typescript": "^5.0.0",
@@ -63,9 +64,9 @@
     "node": ">=20.19.0"
   },
   "optionalDependencies": {
-    "@kya-os/cli-darwin-arm64": "2.1.0",
-    "@kya-os/cli-darwin-x64": "2.1.0",
-    "@kya-os/cli-linux-arm64-gnu": "2.1.0",
-    "@kya-os/cli-linux-x64-gnu": "2.1.0"
+    "@kya-os/cli-darwin-arm64": "2.1.2",
+    "@kya-os/cli-darwin-x64": "2.1.2",
+    "@kya-os/cli-linux-arm64-gnu": "2.1.2",
+    "@kya-os/cli-linux-x64-gnu": "2.1.2"
   }
 }