@miakapp/cli 4.0.0-alpha.3 → 4.0.0-alpha.5

package/dist/project.js

@@ -0,0 +1,90 @@
+import { isAbsolute, join, normalize, resolve, sep } from 'node:path';
+import { projectError } from './errors.js';
+import { canonicalHttpsUrl } from './internal/http.js';
+import { isHomeId, isRelease } from './internal/names.js';
+import { canonicalRequirements } from './internal/requirements.js';
+import { parseYaml } from './internal/yaml.js';
+export const PROJECT_FILE = 'miakapp.yaml';
+export const PROJECT_SCHEMA = 'miakapp.project/1';
+function mapping(value, label) {
+    if (value === null || value === undefined || Array.isArray(value) || typeof value !== 'object') {
+        throw projectError(`${label} must be a mapping`);
+    }
+    return value;
+}
+function exactKeys(source, allowed, label) {
+    const unknown = Object.keys(source).filter((key) => !allowed.includes(key));
+    if (unknown.length > 0) {
+        throw projectError(`${label} has unknown keys: ${unknown.join(', ')}`);
+    }
+}
+/**
+ * Resolves a declared path inside the project root. An absolute path or one that
+ * escapes the root is rejected so a published artifact always comes from the
+ * repository the agent is working in.
+ */
+export function resolveProjectPath(root, declared, label) {
+    if (typeof declared !== 'string' || declared === '') {
+        throw projectError(`${label} must be a relative path inside the project`);
+    }
+    if (isAbsolute(declared) || declared.includes('\0')) {
+        throw projectError(`${label} must be relative to the project root`);
+    }
+    const normalized = normalize(declared);
+    if (normalized === '..' || normalized.startsWith(`..${sep}`)) {
+        throw projectError(`${label} must not leave the project root`);
+    }
+    return join(root, normalized);
+}
+export function parseProject(root, source) {
+    const document = parseYaml(source);
+    exactKeys(document, ['schema', 'home', 'control_plane', 'component', 'coordinator'], PROJECT_FILE);
+    if (document.schema !== PROJECT_SCHEMA) {
+        throw projectError(`${PROJECT_FILE} must declare schema: ${PROJECT_SCHEMA}`, 'Run miakapp init to generate a current project file.');
+    }
+    if (!isHomeId(document.home)) {
+        throw projectError('home must be a Miakapp home ID of 3..63 bytes matching [a-z][a-z0-9-]*[a-z0-9]');
+    }
+    const issuer = canonicalHttpsUrl(document.control_plane, 'control_plane');
+    if (issuer.endsWith('/'))
+        throw projectError('control_plane must not have a trailing slash');
+    const component = mapping(document.component, 'component');
+    exactKeys(component, ['artifact', 'release', 'requires'], 'component');
+    if (!isRelease(component.release)) {
+        throw projectError('component.release must be 1..64 UTF-8 bytes without control characters');
+    }
+    const requires = canonicalRequirements(component.requires === undefined || component.requires === null ? {} : component.requires);
+    let coordinatorEntry;
+    if (document.coordinator !== undefined && document.coordinator !== null) {
+        const coordinator = mapping(document.coordinator, 'coordinator');
+        exactKeys(coordinator, ['entry'], 'coordinator');
+        coordinatorEntry = resolveProjectPath(root, coordinator.entry, 'coordinator.entry');
+    }
+    return Object.freeze({
+        root,
+        homeId: document.home,
+        issuer,
+        artifactPath: resolveProjectPath(root, component.artifact, 'component.artifact'),
+        release: component.release,
+        requires,
+        coordinatorEntry,
+    });
+}
+/**
+ * Walks up from `start` to find the project root. An agent may run the CLI from
+ * any subdirectory of the repository it is editing.
+ */
+export async function findProjectFile(start, exists) {
+    let directory = resolve(start);
+    while (true) {
+        const candidate = join(directory, PROJECT_FILE);
+        if (await exists(candidate))
+            return candidate;
+        const parent = resolve(directory, '..');
+        if (parent === directory) {
+            throw projectError(`No ${PROJECT_FILE} found in ${start} or any parent directory`, 'Run miakapp init to create one.');
+        }
+        directory = parent;
+    }
+}
+//# sourceMappingURL=project.js.map

package/dist/project.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project.js","sourceRoot":"","sources":["../src/project.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAqB,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,EAAE,SAAS,EAAoC,MAAM,oBAAoB,CAAC;AAEjF,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAC3C,MAAM,CAAC,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAYlD,SAAS,OAAO,CAAC,KAA4B,EAAE,KAAa;IAC1D,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/F,MAAM,YAAY,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,MAAmB,EAAE,OAA0B,EAAE,KAAa;IAC/E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,YAAY,CAAC,GAAG,KAAK,sBAAsB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,QAAiB,EAAE,KAAa;IAC/E,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpD,MAAM,YAAY,CAAC,GAAG,KAAK,6CAA6C,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,YAAY,CAAC,GAAG,KAAK,uCAAuC,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,UAAU,KAAK,IAAI,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,EAAE,CAAC;QAC7D,MAAM,YAAY,CAAC,GAAG,KAAK,kCAAkC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,MAAc;IACvD,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACnC,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,aAAa,CAAC,EAAE,YAAY,CAAC,CAAC;IACnG,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;QACvC,MAAM,YAAY,CAChB,GAAG,YAAY,yBAAyB,cAAc,EAAE,EACxD,sDAAsD,CACvD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,YAAY,CAChB,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,YAAY,CAAC,8CAA8C,CAAC,CAAC;IAE7F,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC3D,SAAS,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,WAAW,CAAC,CAAC;IACvE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,MAAM,YAAY,CAAC,wEAAwE,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,QAAQ,GAAG,qBAAqB,CACpC,SAAS,CAAC,QAAQ,KAAK,SAAS,IAAI,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAC1F,CAAC;IAEF,IAAI,gBAAoC,CAAC;IACzC,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,KAAK,IAAI,EAAE,CAAC;QACxE,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACjE,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,CAAC;QACjD,gBAAgB,GAAG,kBAAkB,CAAC,IAAI,EAAE,WAAW,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,MAAM,EAAE,QAAQ,CAAC,IAAI;QACrB,MAAM;QACN,YAAY,EAAE,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,EAAE,oBAAoB,CAAC;QAChF,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,QAAQ;QACR,gBAAgB;KACjB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAAa,EACb,MAA0C;IAE1C,IAAI,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;QAChD,IAAI,MAAM,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,YAAY,CAChB,MAAM,YAAY,aAAa,KAAK,0BAA0B,EAC9D,iCAAiC,CAClC,CAAC;QACJ,CAAC;QACD,SAAS,GAAG,MAAM,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/publication.d.ts

@@ -0,0 +1,95 @@
+import { type FetchLike } from './internal/http.js';
+import { type Requirements } from './internal/names.js';
+import type { Artifact } from './artifact.js';
+export declare const COMPONENT_ABI = "miakapp.component/1";
+export type UploadStatus = 'awaiting_upload' | 'delivered' | 'finalized';
+export interface UploadCapability {
+    readonly uploadId: string;
+    readonly uploadUrl: string;
+    readonly uploadToken: string;
+    readonly expiresAt: string;
+}
+export interface UploadState {
+    readonly uploadId: string;
+    readonly status: UploadStatus;
+    readonly release: string;
+    readonly abi: string;
+    readonly sha256: string;
+    readonly size: number;
+    readonly requires: Requirements;
+    readonly expiresAt: string;
+}
+export interface ComponentRelease {
+    readonly release: string;
+    readonly abi: string;
+    readonly sha256: string;
+    readonly size: number;
+    readonly requires: Requirements;
+    readonly finalizedAt: string;
+}
+export interface ComponentPointer {
+    readonly homeId: string;
+    readonly generation: number;
+    readonly release: string;
+    readonly abi: string;
+    readonly url: string;
+    readonly sha256: string;
+    readonly size: number;
+    readonly requires: Requirements;
+}
+export interface PublicationTarget {
+    /** Control-plane issuer, without a trailing slash. */
+    readonly issuer: string;
+    readonly homeId: string;
+    /** Five-minute `components:publish` access token. */
+    readonly token: string;
+    readonly fetch?: FetchLike;
+    readonly signal?: AbortSignal;
+}
+export interface UploadRequest {
+    readonly release: string;
+    readonly requires: Requirements;
+}
+/** Step 1: request one capability bound to the complete publication tuple. */
+export declare function requestUpload(target: PublicationTarget, artifact: Artifact, request: UploadRequest): Promise<UploadCapability>;
+/**
+ * Step 2: deliver the exact bytes once.
+ *
+ * A lost response is never retried with a new capability: the caller reconciles
+ * through {@link readUpload}, which distinguishes `awaiting_upload` from
+ * `delivered`.
+ */
+export declare function deliverArtifact(target: PublicationTarget, capability: UploadCapability, artifact: Artifact): Promise<void>;
+/** Step 3: finalize only the delivered, content-addressed object. */
+export declare function finalizeUpload(target: PublicationTarget, uploadId: string): Promise<ComponentRelease>;
+/** Reconciliation read that tells a lost `PUT` from an undelivered upload. */
+export declare function readUpload(target: PublicationTarget, uploadId: string): Promise<UploadState>;
+/** Reconciliation read for a lost finalization response. */
+export declare function readRelease(target: PublicationTarget, sha256: string): Promise<ComponentRelease | undefined>;
+/**
+ * Step 4: compare-and-set the home pointer to a strictly greater generation.
+ *
+ * Activation is one transaction and is never blindly retried: a stale
+ * `expected_generation` fails with `generation_conflict` rather than
+ * last-write-wins.
+ */
+export declare function activateRelease(target: PublicationTarget, activation: {
+    readonly sha256: string;
+    readonly expectedGeneration: number;
+    readonly generation: number;
+}): Promise<ComponentPointer>;
+/**
+ * Publishes one artifact: capability, delivery, finalization, activation.
+ *
+ * Every step is checked against the locally computed digest, size and
+ * requirements, so a control plane that echoes different metadata is rejected
+ * rather than trusted.
+ */
+export declare function publish(target: PublicationTarget, artifact: Artifact, request: UploadRequest & {
+    readonly expectedGeneration: number;
+    readonly generation: number;
+}): Promise<{
+    readonly release: ComponentRelease;
+    readonly pointer: ComponentPointer;
+}>;
+//# sourceMappingURL=publication.d.ts.map

package/dist/publication.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication.d.ts","sourceRoot":"","sources":["../src/publication.ts"],"names":[],"mappings":"AAQA,OAAO,EAOL,KAAK,SAAS,EACf,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,EASL,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAE9C,eAAO,MAAM,aAAa,wBAAwB,CAAC;AAKnD,MAAM,MAAM,YAAY,GAAG,iBAAiB,GAAG,WAAW,GAAG,WAAW,CAAC;AAEzE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC;AAgQD,8EAA8E;AAC9E,wBAAsB,aAAa,CACjC,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,gBAAgB,CAAC,CAoB3B;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,iBAAiB,EACzB,UAAU,EAAE,gBAAgB,EAC5B,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,IAAI,CAAC,CA2Bf;AAED,qEAAqE;AACrE,wBAAsB,cAAc,CAClC,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,gBAAgB,CAAC,CAW3B;AAED,8EAA8E;AAC9E,wBAAsB,UAAU,CAC9B,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,WAAW,CAAC,CAWtB;AAED,4DAA4D;AAC5D,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,EACzB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAgBvC;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,iBAAiB,EACzB,UAAU,EAAE;IACV,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACA,OAAO,CAAC,gBAAgB,CAAC,CAyB3B;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CAC3B,MAAM,EAAE,iBAAiB,EACzB,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,aAAa,GAAG;IACvB,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B,GACA,OAAO,CAAC;IAAE,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAA;CAAE,CAAC,CAgCrF"}

package/dist/publication.js

@@ -0,0 +1,408 @@
+import { artifactError, authorizationError, conflictError, contractError, unknownOutcomeError, } from './errors.js';
+import { MAXIMUM_RESPONSE_BYTES, cancelBody, jsonRequestInit, readBoundedBody, readJsonBody, requestBody, } from './internal/http.js';
+import { boundedString, exactRecord, instant, parseJson, positiveInteger, } from './internal/json.js';
+import { MAXIMUM_ARTIFACT_BYTES, isDigest, isGeneration, isHomeId, isRandomId, isRelease, isUploadToken, REQUIREMENT_KINDS, } from './internal/names.js';
+import { canonicalRequirements, sameRequirements } from './internal/requirements.js';
+export const COMPONENT_ABI = 'miakapp.component/1';
+/** RFC 0004 §13.2 expires an upload capability within fifteen minutes. */
+const MAXIMUM_CAPABILITY_LIFETIME_MS = 900_000;
+function client(target) {
+    if (!isHomeId(target.homeId))
+        throw contractError('homeId is not a valid Miakapp home ID');
+    const fetcher = target.fetch ?? globalThis.fetch;
+    return {
+        fetcher,
+        signal: target.signal ?? new AbortController().signal,
+        base: `${target.issuer}/v1/homes/${target.homeId}`,
+    };
+}
+async function readFailure(response) {
+    let parsed;
+    try {
+        parsed = parseJson(await readBoundedBody(response, MAXIMUM_RESPONSE_BYTES));
+    }
+    catch {
+        return {
+            code: 'unparseable',
+            retryable: false,
+            requestId: '',
+            message: `HTTP ${response.status} with no closed error body`,
+        };
+    }
+    const envelope = exactRecord(parsed, ['error']);
+    const error = exactRecord(envelope.error, ['code', 'message', 'retryable', 'request_id']);
+    if (typeof error.retryable !== 'boolean') {
+        throw contractError('Error envelope has a non-boolean retryable field');
+    }
+    return {
+        code: boundedString(error.code, 1, 64),
+        retryable: error.retryable,
+        requestId: boundedString(error.request_id, 0, 64),
+        message: boundedString(error.message, 1, 1_024),
+    };
+}
+/**
+ * Maps the RFC 0004 §16 closed failure table onto CLI outcomes.
+ *
+ * `temporarily_unavailable` after a mutating request is deliberately
+ * `unknown_outcome`: §17 states the effect may already have crossed its commit
+ * boundary, so the caller reconciles with a read instead of repeating it.
+ */
+function failure(operation, status, error, mutating) {
+    const detail = `${operation} failed with HTTP ${status} ${error.code}`
+        + (error.requestId === '' ? '' : ` (request ${error.requestId})`);
+    switch (error.code) {
+        case 'invalid_home_key':
+        case 'invalid_access_token':
+        case 'insufficient_scope':
+        case 'not_home_owner':
+        case 'publisher_mismatch':
+        case 'recent_authentication_required':
+            return authorizationError(detail, error.message);
+        case 'invalid_upload_capability':
+            return authorizationError(detail, 'The capability is absent, expired, replayed or bound to another tuple. '
+                + 'Read the upload status before requesting a new one.');
+        case 'generation_conflict':
+            return conflictError(detail, 'Another publication advanced the pointer. Read the active generation and retry the '
+                + 'activation with the observed expected_generation.');
+        case 'digest_quarantined':
+            return artifactError(detail, 'A quarantined digest cannot be activated, even by the owner.');
+        case 'invalid_artifact':
+            return artifactError(detail, error.message);
+        case 'limit_exceeded':
+            return artifactError(detail, error.message);
+        case 'temporarily_unavailable':
+            return mutating
+                ? unknownOutcomeError(detail, 'The effect may already have committed. Reconcile with the upload-status or '
+                    + 'release read before acting again.')
+                : contractError(detail, error.message);
+        default:
+            return contractError(detail, error.message);
+    }
+}
+function decodeRequirements(value) {
+    const record = exactRecord(value, [...REQUIREMENT_KINDS]);
+    return canonicalRequirements(record);
+}
+function decodeUploadCapability(value, uploadBase) {
+    const document = exactRecord(value, [
+        'schema',
+        'upload_id',
+        'upload_url',
+        'upload_token',
+        'expires_at',
+    ]);
+    if (document.schema !== 'miakapp.component-upload/1') {
+        throw contractError('Upload response has an unsupported schema');
+    }
+    const uploadId = document.upload_id;
+    if (!isRandomId(uploadId))
+        throw contractError('upload_id is not a 22-character random ID');
+    if (!isUploadToken(document.upload_token)) {
+        throw contractError('upload_token is not a 43-character capability secret');
+    }
+    const uploadUrl = boundedString(document.upload_url, 1, 2_048);
+    let parsed;
+    try {
+        parsed = new URL(uploadUrl);
+    }
+    catch {
+        throw contractError('upload_url is not a URL');
+    }
+    if (parsed.protocol !== 'https:'
+        || parsed.username !== ''
+        || parsed.password !== ''
+        || parsed.search !== ''
+        || parsed.hash !== ''
+        || parsed.href !== uploadUrl
+        || !uploadUrl.endsWith(`/${uploadId}`)
+        || !uploadUrl.startsWith(uploadBase)) {
+        throw contractError('upload_url is not a credential-free HTTPS identifier for this home ending in its upload ID');
+    }
+    const expiresAt = instant(document.expires_at);
+    const lifetime = Date.parse(expiresAt) - Date.now();
+    if (lifetime <= 0 || lifetime > MAXIMUM_CAPABILITY_LIFETIME_MS) {
+        throw contractError('Upload capability is expired or exceeds the fifteen-minute ceiling');
+    }
+    return Object.freeze({
+        uploadId,
+        uploadUrl,
+        uploadToken: document.upload_token,
+        expiresAt,
+    });
+}
+function decodeUploadState(value) {
+    const document = exactRecord(value, [
+        'schema',
+        'upload_id',
+        'status',
+        'release',
+        'abi',
+        'sha256',
+        'size',
+        'requires',
+        'expires_at',
+    ]);
+    if (document.schema !== 'miakapp.component-upload-status/1') {
+        throw contractError('Upload-status response has an unsupported schema');
+    }
+    const status = document.status;
+    if (status !== 'awaiting_upload' && status !== 'delivered' && status !== 'finalized') {
+        throw contractError('Upload status is outside the closed set');
+    }
+    if (!isRandomId(document.upload_id))
+        throw contractError('upload_id is invalid');
+    if (!isRelease(document.release))
+        throw contractError('release is invalid');
+    if (!isDigest(document.sha256))
+        throw contractError('sha256 is not a base64url SHA-256 digest');
+    if (document.abi !== COMPONENT_ABI)
+        throw contractError('abi is not the supported ABI');
+    return Object.freeze({
+        uploadId: document.upload_id,
+        status,
+        release: document.release,
+        abi: COMPONENT_ABI,
+        sha256: document.sha256,
+        size: positiveInteger(document.size, MAXIMUM_ARTIFACT_BYTES),
+        requires: decodeRequirements(document.requires),
+        expiresAt: instant(document.expires_at),
+    });
+}
+function decodeRelease(value) {
+    const document = exactRecord(value, [
+        'schema',
+        'release',
+        'abi',
+        'sha256',
+        'size',
+        'requires',
+        'finalized_at',
+    ]);
+    if (document.schema !== 'miakapp.component-release/1') {
+        throw contractError('Release response has an unsupported schema');
+    }
+    if (!isRelease(document.release))
+        throw contractError('release is invalid');
+    if (!isDigest(document.sha256))
+        throw contractError('sha256 is not a base64url SHA-256 digest');
+    if (document.abi !== COMPONENT_ABI)
+        throw contractError('abi is not the supported ABI');
+    return Object.freeze({
+        release: document.release,
+        abi: COMPONENT_ABI,
+        sha256: document.sha256,
+        size: positiveInteger(document.size, MAXIMUM_ARTIFACT_BYTES),
+        requires: decodeRequirements(document.requires),
+        finalizedAt: instant(document.finalized_at),
+    });
+}
+function decodePointer(value, target) {
+    const document = exactRecord(value, [
+        'schema',
+        'home_id',
+        'generation',
+        'release',
+        'abi',
+        'url',
+        'sha256',
+        'size',
+        'requires',
+    ]);
+    if (document.schema !== 'miakapp.component-pointer/1') {
+        throw contractError('Pointer response has an unsupported schema');
+    }
+    if (document.home_id !== target.homeId) {
+        throw contractError('Pointer names a different home');
+    }
+    if (!isGeneration(document.generation)) {
+        throw contractError('Pointer generation is not a positive safe integer');
+    }
+    if (!isRelease(document.release))
+        throw contractError('Pointer release is invalid');
+    if (!isDigest(document.sha256))
+        throw contractError('Pointer sha256 is invalid');
+    if (document.abi !== COMPONENT_ABI)
+        throw contractError('Pointer abi is not the supported ABI');
+    const url = boundedString(document.url, 1, 2_048);
+    if (url !== `${target.issuer}/v1/components/${document.sha256}.js`) {
+        throw contractError('Pointer url is not the token-free control-plane artifact resource');
+    }
+    return Object.freeze({
+        homeId: target.homeId,
+        generation: document.generation,
+        release: document.release,
+        abi: COMPONENT_ABI,
+        url,
+        sha256: document.sha256,
+        size: positiveInteger(document.size, MAXIMUM_ARTIFACT_BYTES),
+        requires: decodeRequirements(document.requires),
+    });
+}
+/** Step 1: request one capability bound to the complete publication tuple. */
+export async function requestUpload(target, artifact, request) {
+    const { fetcher, signal, base } = client(target);
+    if (!isRelease(request.release)) {
+        throw contractError('release must be 1..64 UTF-8 bytes without control characters');
+    }
+    const body = requestBody({
+        release: request.release,
+        abi: COMPONENT_ABI,
+        sha256: artifact.sha256,
+        size: artifact.size,
+        requires: request.requires,
+    });
+    const response = await fetcher(`${base}/component-uploads`, jsonRequestInit('POST', target.token, body, signal));
+    if (response.status !== 201) {
+        throw failure('Upload capability request', response.status, await readFailure(response), false);
+    }
+    return decodeUploadCapability(await readJsonBody(response), `${base}/component-uploads/`);
+}
+/**
+ * Step 2: deliver the exact bytes once.
+ *
+ * A lost response is never retried with a new capability: the caller reconciles
+ * through {@link readUpload}, which distinguishes `awaiting_upload` from
+ * `delivered`.
+ */
+export async function deliverArtifact(target, capability, artifact) {
+    const { fetcher, signal } = client(target);
+    let response;
+    try {
+        response = await fetcher(capability.uploadUrl, {
+            method: 'PUT',
+            headers: {
+                authorization: `Bearer ${capability.uploadToken}`,
+                'content-type': 'application/javascript; charset=utf-8',
+                'content-length': String(artifact.size),
+            },
+            body: artifact.bytes,
+            redirect: 'error',
+            credentials: 'omit',
+            signal,
+        });
+    }
+    catch {
+        throw unknownOutcomeError('Artifact delivery did not return a response', 'Read the upload status before deciding whether to deliver again.');
+    }
+    if (response.status === 204) {
+        cancelBody(response);
+        return;
+    }
+    throw failure('Artifact delivery', response.status, await readFailure(response), true);
+}
+/** Step 3: finalize only the delivered, content-addressed object. */
+export async function finalizeUpload(target, uploadId) {
+    const { fetcher, signal, base } = client(target);
+    if (!isRandomId(uploadId))
+        throw contractError('uploadId is not a 22-character random ID');
+    const response = await fetcher(`${base}/component-uploads/${uploadId}:finalize`, jsonRequestInit('POST', target.token, requestBody({}), signal));
+    if (response.status !== 200) {
+        throw failure('Finalization', response.status, await readFailure(response), true);
+    }
+    return decodeRelease(await readJsonBody(response));
+}
+/** Reconciliation read that tells a lost `PUT` from an undelivered upload. */
+export async function readUpload(target, uploadId) {
+    const { fetcher, signal, base } = client(target);
+    if (!isRandomId(uploadId))
+        throw contractError('uploadId is not a 22-character random ID');
+    const response = await fetcher(`${base}/component-uploads/${uploadId}`, jsonRequestInit('GET', target.token, undefined, signal));
+    if (response.status !== 200) {
+        throw failure('Upload-status read', response.status, await readFailure(response), false);
+    }
+    return decodeUploadState(await readJsonBody(response));
+}
+/** Reconciliation read for a lost finalization response. */
+export async function readRelease(target, sha256) {
+    const { fetcher, signal, base } = client(target);
+    if (!isDigest(sha256))
+        throw contractError('sha256 is not a base64url SHA-256 digest');
+    const response = await fetcher(`${base}/component-releases/${sha256}`, jsonRequestInit('GET', target.token, undefined, signal));
+    if (response.status === 422) {
+        const error = await readFailure(response);
+        if (error.code === 'invalid_artifact')
+            return undefined;
+        throw failure('Release read', response.status, error, false);
+    }
+    if (response.status !== 200) {
+        throw failure('Release read', response.status, await readFailure(response), false);
+    }
+    return decodeRelease(await readJsonBody(response));
+}
+/**
+ * Step 4: compare-and-set the home pointer to a strictly greater generation.
+ *
+ * Activation is one transaction and is never blindly retried: a stale
+ * `expected_generation` fails with `generation_conflict` rather than
+ * last-write-wins.
+ */
+export async function activateRelease(target, activation) {
+    const { fetcher, signal, base } = client(target);
+    if (!isDigest(activation.sha256)) {
+        throw contractError('sha256 is not a base64url SHA-256 digest');
+    }
+    if (!Number.isSafeInteger(activation.expectedGeneration) || activation.expectedGeneration < 0) {
+        throw contractError('expected_generation must be a non-negative safe integer');
+    }
+    if (!isGeneration(activation.generation)
+        || activation.generation <= activation.expectedGeneration) {
+        throw contractError('generation must be a positive safe integer above expected_generation');
+    }
+    const body = requestBody({
+        sha256: activation.sha256,
+        expected_generation: activation.expectedGeneration,
+        generation: activation.generation,
+    });
+    const response = await fetcher(`${base}/component-releases:activate`, jsonRequestInit('POST', target.token, body, signal));
+    if (response.status !== 200) {
+        throw failure('Activation', response.status, await readFailure(response), true);
+    }
+    return decodePointer(await readJsonBody(response), target);
+}
+/**
+ * Publishes one artifact: capability, delivery, finalization, activation.
+ *
+ * Every step is checked against the locally computed digest, size and
+ * requirements, so a control plane that echoes different metadata is rejected
+ * rather than trusted.
+ */
+export async function publish(target, artifact, request) {
+    const requires = canonicalRequirements(request.requires);
+    const capability = await requestUpload(target, artifact, { release: request.release, requires });
+    await deliverArtifact(target, capability, artifact);
+    const state = await readUpload(target, capability.uploadId);
+    if (state.sha256 !== artifact.sha256
+        || state.size !== artifact.size
+        || state.release !== request.release
+        || !sameRequirements(state.requires, requires)) {
+        throw contractError('Upload state does not match the tuple the capability was bound to');
+    }
+    if (state.status === 'awaiting_upload') {
+        throw unknownOutcomeError('The control plane still reports the upload as awaiting delivery', 'Request a new capability and deliver the bytes again; do not finalize this upload.');
+    }
+    const release = state.status === 'finalized'
+        ? await requireRelease(target, artifact.sha256)
+        : await finalizeUpload(target, capability.uploadId);
+    if (release.sha256 !== artifact.sha256 || release.size !== artifact.size) {
+        throw contractError('Finalized release does not match the delivered artifact');
+    }
+    const pointer = await activateRelease(target, {
+        sha256: artifact.sha256,
+        expectedGeneration: request.expectedGeneration,
+        generation: request.generation,
+    });
+    if (pointer.sha256 !== artifact.sha256 || !sameRequirements(pointer.requires, requires)) {
+        throw contractError('Activated pointer does not match the published release');
+    }
+    return { release, pointer };
+}
+async function requireRelease(target, sha256) {
+    const release = await readRelease(target, sha256);
+    if (release === undefined) {
+        throw unknownOutcomeError('The upload reports finalized but no release record is readable', 'Re-read the release before publishing again; the control plane is mid-commit or '
+            + 'has quarantined the digest.');
+    }
+    return release;
+}
+//# sourceMappingURL=publication.js.map

package/dist/publication.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publication.js","sourceRoot":"","sources":["../src/publication.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,aAAa,EACb,mBAAmB,GAEpB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,sBAAsB,EACtB,UAAU,EACV,eAAe,EACf,eAAe,EACf,YAAY,EACZ,WAAW,GAEZ,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,aAAa,EACb,WAAW,EACX,OAAO,EACP,SAAS,EACT,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,EACtB,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,UAAU,EACV,SAAS,EACT,aAAa,EACb,iBAAiB,GAElB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAGrF,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAEnD,0EAA0E;AAC1E,MAAM,8BAA8B,GAAG,OAAO,CAAC;AAgE/C,SAAS,MAAM,CAAC,MAAyB;IAKvC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,aAAa,CAAC,uCAAuC,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,OAAO;QACL,OAAO;QACP,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,IAAI,eAAe,EAAE,CAAC,MAAM;QACrD,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,aAAa,MAAM,CAAC,MAAM,EAAE;KACnD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,QAAkB;IAC3C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,MAAM,eAAe,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,SAAS,EAAE,KAAK;YAChB,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,QAAQ,QAAQ,CAAC,MAAM,4BAA4B;SAC7D,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;IAC1F,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,aAAa,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO;QACL,IAAI,EAAE,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,EAAE,KAAK,CAAC;KAChD,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,OAAO,CACd,SAAiB,EACjB,MAAc,EACd,KAA0B,EAC1B,QAAiB;IAEjB,MAAM,MAAM,GAAG,GAAG,SAAS,qBAAqB,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE;UAClE,CAAC,KAAK,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;IACpE,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,kBAAkB,CAAC;QACxB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,oBAAoB,CAAC;QAC1B,KAAK,gBAAgB,CAAC;QACtB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,gCAAgC;YACnC,OAAO,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QACnD,KAAK,2BAA2B;YAC9B,OAAO,kBAAkB,CACvB,MAAM,EACN,yEAAyE;kBACvE,qDAAqD,CACxD,CAAC;QACJ,KAAK,qBAAqB;YACxB,OAAO,aAAa,CAClB,MAAM,EACN,qFAAqF;kBACnF,mDAAmD,CACtD,CAAC;QACJ,KAAK,oBAAoB;YACvB,OAAO,aAAa,CAAC,MAAM,EAAE,8DAA8D,CAAC,CAAC;QAC/F,KAAK,kBAAkB;YACrB,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,gBAAgB;YACnB,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,yBAAyB;YAC5B,OAAO,QAAQ;gBACb,CAAC,CAAC,mBAAmB,CACnB,MAAM,EACN,6EAA6E;sBAC3E,mCAAmC,CACtC;gBACD,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C;YACE,OAAO,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,GAAG,iBAAiB,CAAC,CAAC,CAAC;IAC1D,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,UAAkB;IAChE,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE;QAClC,QAAQ;QACR,WAAW;QACX,YAAY;QACZ,cAAc;QACd,YAAY;KACb,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,4BAA4B,EAAE,CAAC;QACrD,MAAM,aAAa,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,aAAa,CAAC,2CAA2C,CAAC,CAAC;IAC5F,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1C,MAAM,aAAa,CAAC,sDAAsD,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC/D,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,CAAC,yBAAyB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;WAC3B,MAAM,CAAC,QAAQ,KAAK,EAAE;WACtB,MAAM,CAAC,QAAQ,KAAK,EAAE;WACtB,MAAM,CAAC,MAAM,KAAK,EAAE;WACpB,MAAM,CAAC,IAAI,KAAK,EAAE;WAClB,MAAM,CAAC,IAAI,KAAK,SAAS;WACzB,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC;WACnC,CAAC,SAAS,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,aAAa,CACjB,4FAA4F,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACpD,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,GAAG,8BAA8B,EAAE,CAAC;QAC/D,MAAM,aAAa,CAAC,oEAAoE,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ;QACR,SAAS;QACT,WAAW,EAAE,QAAQ,CAAC,YAAY;QAClC,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE;QAClC,QAAQ;QACR,WAAW;QACX,QAAQ;QACR,SAAS;QACT,KAAK;QACL,QAAQ;QACR,MAAM;QACN,UAAU;QACV,YAAY;KACb,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,mCAAmC,EAAE,CAAC;QAC5D,MAAM,aAAa,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,IAAI,MAAM,KAAK,iBAAiB,IAAI,MAAM,KAAK,WAAW,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QACrF,MAAM,aAAa,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,MAAM,aAAa,CAAC,sBAAsB,CAAC,CAAC;IACjF,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,aAAa,CAAC,oBAAoB,CAAC,CAAC;IAC5E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,aAAa,CAAC,0CAA0C,CAAC,CAAC;IAChG,IAAI,QAAQ,CAAC,GAAG,KAAK,aAAa;QAAE,MAAM,aAAa,CAAC,8BAA8B,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,QAAQ,CAAC,SAAS;QAC5B,MAAM;QACN,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;QAC5D,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/C,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;KACxC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE;QAClC,QAAQ;QACR,SAAS;QACT,KAAK;QACL,QAAQ;QACR,MAAM;QACN,UAAU;QACV,cAAc;KACf,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,6BAA6B,EAAE,CAAC;QACtD,MAAM,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,aAAa,CAAC,oBAAoB,CAAC,CAAC;IAC5E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,aAAa,CAAC,0CAA0C,CAAC,CAAC;IAChG,IAAI,QAAQ,CAAC,GAAG,KAAK,aAAa;QAAE,MAAM,aAAa,CAAC,8BAA8B,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;QAC5D,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC/C,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAC;KAC5C,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,MAAyB;IAC9D,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE;QAClC,QAAQ;QACR,SAAS;QACT,YAAY;QACZ,SAAS;QACT,KAAK;QACL,KAAK;QACL,QAAQ;QACR,MAAM;QACN,UAAU;KACX,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,6BAA6B,EAAE,CAAC;QACtD,MAAM,aAAa,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACvC,MAAM,aAAa,CAAC,gCAAgC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvC,MAAM,aAAa,CAAC,mDAAmD,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,aAAa,CAAC,2BAA2B,CAAC,CAAC;IACjF,IAAI,QAAQ,CAAC,GAAG,KAAK,aAAa;QAAE,MAAM,aAAa,CAAC,sCAAsC,CAAC,CAAC;IAChG,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAClD,IAAI,GAAG,KAAK,GAAG,MAAM,CAAC,MAAM,kBAAkB,QAAQ,CAAC,MAAM,KAAK,EAAE,CAAC;QACnE,MAAM,aAAa,CAAC,mEAAmE,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,GAAG,EAAE,aAAa;QAClB,GAAG;QACH,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;QAC5D,QAAQ,EAAE,kBAAkB,CAAC,QAAQ,CAAC,QAAQ,CAAC;KAChD,CAAC,CAAC;AACL,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAyB,EACzB,QAAkB,EAClB,OAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,aAAa,CAAC,8DAA8D,CAAC,CAAC;IACtF,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC;QACvB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,OAAO,CAAC,QAAQ;KAC3B,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,oBAAoB,EAC3B,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CACpD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,CAAC,2BAA2B,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAClG,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,qBAAqB,CAAC,CAAC;AAC5F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAyB,EACzB,UAA4B,EAC5B,QAAkB;IAElB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE;YAC7C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,UAAU,CAAC,WAAW,EAAE;gBACjD,cAAc,EAAE,uCAAuC;gBACvD,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;aACxC;YACD,IAAI,EAAE,QAAQ,CAAC,KAAK;YACpB,QAAQ,EAAE,OAAO;YACjB,WAAW,EAAE,MAAM;YACnB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,mBAAmB,CACvB,6CAA6C,EAC7C,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC,mBAAmB,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;AACzF,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAyB,EACzB,QAAgB;IAEhB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,aAAa,CAAC,0CAA0C,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,sBAAsB,QAAQ,WAAW,EAChD,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAC/D,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAyB,EACzB,QAAgB;IAEhB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,aAAa,CAAC,0CAA0C,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,sBAAsB,QAAQ,EAAE,EACvC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CACxD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,CAAC,oBAAoB,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAyB,EACzB,MAAc;IAEd,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,aAAa,CAAC,0CAA0C,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,uBAAuB,MAAM,EAAE,EACtC,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CACxD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB;YAAE,OAAO,SAAS,CAAC;QACxD,MAAM,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAyB,EACzB,UAIC;IAED,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,aAAa,CAAC,0CAA0C,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,kBAAkB,CAAC,IAAI,UAAU,CAAC,kBAAkB,GAAG,CAAC,EAAE,CAAC;QAC9F,MAAM,aAAa,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,UAAU,CAAC;WACnC,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,kBAAkB,EAAE,CAAC;QAC5D,MAAM,aAAa,CAAC,sEAAsE,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC;QACvB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,mBAAmB,EAAE,UAAU,CAAC,kBAAkB;QAClD,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAC5B,GAAG,IAAI,8BAA8B,EACrC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CACpD,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QAC5B,MAAM,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,WAAW,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,YAAY,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAyB,EACzB,QAAkB,EAClB,OAGC;IAED,MAAM,QAAQ,GAAG,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjG,MAAM,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;WAC/B,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;WAC5B,KAAK,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO;WACjC,CAAC,gBAAgB,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,aAAa,CAAC,mEAAmE,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACvC,MAAM,mBAAmB,CACvB,iEAAiE,EACjE,oFAAoF,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,WAAW;QAC1C,CAAC,CAAC,MAAM,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;QAC/C,CAAC,CAAC,MAAM,cAAc,CAAC,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzE,MAAM,aAAa,CAAC,yDAAyD,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE;QAC5C,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACxF,MAAM,aAAa,CAAC,wDAAwD,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,MAAyB,EACzB,MAAc;IAEd,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,mBAAmB,CACvB,gEAAgE,EAChE,kFAAkF;cAChF,6BAA6B,CAChC,CAAC;IACJ,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The package's own identity, in one place.
+ *
+ * `main.ts` imports `agent-pack.ts`, so the constants cannot live in `main.ts`
+ * without a cycle: the pack needs them to write a runnable MCP entry.
+ *
+ * Both values are duplicates of `package.json`, which cannot be imported here
+ * without a JSON import assertion the build does not emit. `test/version.test.ts`
+ * compares them to the manifest, because the drift is not cosmetic: the pack
+ * writes `PACKAGE_NAME@CLI_VERSION` into a repository, and a stale version
+ * would resolve a different release than the guide shipped beside it.
+ */
+export declare const PACKAGE_NAME = "@miakapp/cli";
+export declare const CLI_VERSION = "4.0.0-alpha.5";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAE3C,eAAO,MAAM,WAAW,kBAAkB,CAAC"}