@namzu/sdk 48.3.1 → 50.0.0

package/dist/pals/channels/routing.js

@@ -0,0 +1,150 @@
+import { isDeepStrictEqual } from 'node:util';
+import { z } from 'zod';
+import { isEntityId } from '../../utils/id.js';
+import { ingressInboxSchema } from '../communication/ingress-schema.js';
+import { PAL_CHANNEL_NAMESPACE, ingressMessageRef } from '../communication/ingress-types.js';
+import { addressSchema, freezeCommunicationValue, label } from '../communication/schema.js';
+import { verifyIngressRecorded } from '../communication/verify.js';
+import { captureConnection, nativeTuple, verifiedActionSchema } from './schema.js';
+const contextSchema = z
+    .object({
+    recipient: addressSchema,
+    sessionId: z.custom((value) => isEntityId(value, 'session')),
+    profileRevision: z.number().int().positive().safe(),
+})
+    .strict();
+const refSchema = z
+    .object({
+    namespace: z.literal(PAL_CHANNEL_NAMESPACE),
+    id: z.string().regex(/^[a-f0-9]{64}$/),
+    digest: z.string().regex(/^[a-f0-9]{64}$/),
+})
+    .strict();
+/** Resolves original authenticated destinations. It does not imply remote delivery. */
+export class PalChannelRouter {
+    options;
+    connection;
+    constructor(options) {
+        if (typeof options.verify !== 'function' || typeof options.authorize !== 'function')
+            throw new Error('Channel routing requires trusted verification and current authorization.');
+        this.options = Object.freeze({ ...options });
+        this.connection = captureConnection(options.connection);
+    }
+    assertRecipient(context) {
+        if (context.recipient.tenantId !== this.connection.tenantId)
+            throw new Error('Foreign channel response tenant.');
+        const pal = this.options.pals.get(context.recipient.palId);
+        if (!pal || pal.paused)
+            throw new Error('Channel response Pal is paused or unavailable.');
+        return this.options.pals.getRevision(pal.id, context.profileRevision);
+    }
+    async recorded(input, context, signal) {
+        const ref = freezeCommunicationValue(refSchema.parse(input));
+        const definition = this.assertRecipient(context);
+        const snapshot = await this.options.store.readIngress(context.recipient);
+        const found = snapshot?.messages.find((message) => message.id === ref.id);
+        if (!found)
+            throw new Error('Channel response does not name an accepted delivery.');
+        const message = freezeCommunicationValue(ingressInboxSchema.parse(found));
+        if (!('kind' in message) ||
+            message.kind !== 'channel' ||
+            message.phase !== 'recorded' ||
+            !message.receipt ||
+            !isDeepStrictEqual(ingressMessageRef(message), ref))
+            throw new Error('Channel response requires the exact recorded channel delivery.');
+        if (message.source.tenantId !== this.connection.tenantId ||
+            message.source.provider !== this.connection.provider ||
+            message.source.connectionId !== this.connection.connectionId ||
+            message.source.externalTenantId !== this.connection.externalTenantId)
+            throw new Error('Channel response belongs to another connection.');
+        if (!isDeepStrictEqual(nativeTuple(message.source), nativeTuple(message.routeKey)))
+            throw new Error('Channel message source does not match its original native route.');
+        const binding = await this.options.store.routeIngress(message.routeKey);
+        if (!binding ||
+            binding.id !== message.routeId ||
+            binding.phase !== 'active' ||
+            binding.sessionId !== context.sessionId ||
+            binding.profileRevision !== context.profileRevision ||
+            binding.key.recipient.palId !== context.recipient.palId ||
+            binding.key.recipient.tenantId !== context.recipient.tenantId)
+            throw new Error('Channel response belongs to another Pal conversation or profile.');
+        signal.throwIfAborted();
+        await verifyIngressRecorded(message, message.receipt, {
+            binding,
+            definition,
+            access: await this.options.host.openConversation(binding, signal),
+        });
+        signal.throwIfAborted();
+        this.assertRecipient(context);
+        return { ...message, receipt: message.receipt };
+    }
+    async resolve(input, context, signal, action) {
+        const message = await this.recorded(input, context, signal);
+        if (action &&
+            (action.externalTenantId !== message.source.externalTenantId ||
+                !isDeepStrictEqual(nativeTuple({
+                    ...action,
+                    provider: this.connection.provider,
+                    connectionId: this.connection.connectionId,
+                }), nativeTuple(message.source))))
+            throw new Error('Channel action belongs to another native conversation, channel or thread.');
+        const allowed = await this.options.authorize(freezeCommunicationValue({
+            phase: action ? 'action' : 'reply',
+            message: message,
+            context,
+            actorId: action?.actorId ?? message.source.actorId,
+            ...(action ? { action } : {}),
+        }));
+        signal.throwIfAborted();
+        if (allowed.allow !== true)
+            throw new Error(`Channel routing refused: ${allowed.reason}`);
+        this.assertRecipient(context);
+        return freezeCommunicationValue({
+            connection: this.connection,
+            identity: {
+                provider: message.source.provider,
+                connectionId: message.source.connectionId,
+                externalTenantId: message.source.externalTenantId,
+                nativeConversationId: message.source.nativeConversationId,
+                nativeChannelId: message.source.nativeChannelId,
+                nativeThreadId: message.source.nativeThreadId,
+            },
+            deliveryRef: {
+                namespace: PAL_CHANNEL_NAMESPACE,
+                id: message.id,
+                digest: message.digest,
+            },
+            recordedReceipt: message.receipt,
+            eventActorId: message.source.actorId,
+            currentActorId: action?.actorId ?? message.source.actorId,
+            context,
+        });
+    }
+    async replyRoute(input, execution, signal = new AbortController().signal) {
+        const context = freezeCommunicationValue(contextSchema.parse(execution));
+        const ref = refSchema.parse(input);
+        signal.throwIfAborted();
+        return this.resolve(ref, context, signal);
+    }
+    async actionRoute(raw, execution, signal = new AbortController().signal) {
+        const context = freezeCommunicationValue(contextSchema.parse(execution));
+        signal.throwIfAborted();
+        const action = freezeCommunicationValue(verifiedActionSchema.parse(await this.options.verify(structuredClone(raw), this.connection, signal)));
+        signal.throwIfAborted();
+        const route = await this.resolve(action.deliveryRef, context, signal, action);
+        return freezeCommunicationValue({ route, action });
+    }
+    async executeAction(raw, execution, signal = new AbortController().signal) {
+        if (!this.options.actions)
+            throw new Error('Channel action execution is unsupported by this host.');
+        const context = await this.actionRoute(raw, execution, signal);
+        signal.throwIfAborted();
+        this.assertRecipient(context.route.context);
+        const result = await this.options.actions.execute(context, signal);
+        return freezeCommunicationValue(z
+            .object({ status: z.enum(['applied', 'rejected']), receiptId: label })
+            .strict()
+            .parse(result));
+    }
+}
+//# sourceMappingURL=routing.js.map

package/dist/pals/channels/routing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routing.js","sourceRoot":"","sources":["../../../src/pals/channels/routing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC7C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAA;AAEvE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AAC5F,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,MAAM,4BAA4B,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAQlF,MAAM,aAAa,GAAG,CAAC;KACrB,MAAM,CAAC;IACP,SAAS,EAAE,aAAa;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,CAAY,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACvE,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;CACnD,CAAC;KACD,MAAM,EAAE,CAAA;AACV,MAAM,SAAS,GAAG,CAAC;KACjB,MAAM,CAAC;IACP,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAA;AAEV,uFAAuF;AACvF,MAAM,OAAO,gBAAgB;IACX,OAAO,CAAyB;IAChC,UAAU,CAAA;IAC3B,YAAY,OAAgC;QAC3C,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,UAAU;YAClF,MAAM,IAAI,KAAK,CAAC,0EAA0E,CAAC,CAAA;QAC5F,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAA;QAC5C,IAAI,CAAC,UAAU,GAAG,iBAAiB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAA;IACxD,CAAC;IACO,eAAe,CAAC,OAAmC;QAC1D,IAAI,OAAO,CAAC,SAAS,CAAC,QAAQ,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ;YAC1D,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;QAC1D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACzF,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,eAAe,CAAC,CAAA;IACtE,CAAC;IACO,KAAK,CAAC,QAAQ,CACrB,KAAyB,EACzB,OAAmC,EACnC,MAAmB;QAEnB,MAAM,GAAG,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;QAChD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACxE,MAAM,KAAK,GAAG,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,CAAC,CAAA;QACzE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;QACnF,MAAM,OAAO,GAAG,wBAAwB,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QACzE,IACC,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC;YACpB,OAAO,CAAC,IAAI,KAAK,SAAS;YAC1B,OAAO,CAAC,KAAK,KAAK,UAAU;YAC5B,CAAC,OAAO,CAAC,OAAO;YAChB,CAAC,iBAAiB,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC;YAEnD,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAA;QAClF,IACC,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ;YACpD,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,UAAU,CAAC,QAAQ;YACpD,OAAO,CAAC,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,UAAU,CAAC,YAAY;YAC5D,OAAO,CAAC,MAAM,CAAC,gBAAgB,KAAK,IAAI,CAAC,UAAU,CAAC,gBAAgB;YAEpE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;QACnE,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;QACpF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QACvE,IACC,CAAC,OAAO;YACR,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO;YAC9B,OAAO,CAAC,KAAK,KAAK,QAAQ;YAC1B,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YACvC,OAAO,CAAC,eAAe,KAAK,OAAO,CAAC,eAAe;YACnD,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,KAAK,OAAO,CAAC,SAAS,CAAC,KAAK;YACvD,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,OAAO,CAAC,SAAS,CAAC,QAAQ;YAE7D,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAA;QACpF,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,qBAAqB,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE;YACrD,OAAO;YACP,UAAU;YACV,MAAM,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC;SACjE,CAAC,CAAA;QACF,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;QAC7B,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAA;IAChD,CAAC;IACO,KAAK,CAAC,OAAO,CACpB,KAAyB,EACzB,OAAmC,EACnC,MAAmB,EACnB,MAAiC;QAEjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;QAC3D,IACC,MAAM;YACN,CAAC,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,MAAM,CAAC,gBAAgB;gBAC3D,CAAC,iBAAiB,CACjB,WAAW,CAAC;oBACX,GAAG,MAAM;oBACT,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ;oBAClC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,YAAY;iBAC1C,CAAC,EACF,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAC3B,CAAC;YAEH,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAA;QAC7F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAC3C,wBAAwB,CAAC;YACxB,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO;YAClC,OAAO,EAAE,OAA2B;YACpC,OAAO;YACP,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAClD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7B,CAAC,CACF,CAAA;QACD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,OAAO,CAAC,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;QACzF,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;QAC7B,OAAO,wBAAwB,CAAC;YAC/B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,QAAQ,EAAE;gBACT,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ;gBACjC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY;gBACzC,gBAAgB,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB;gBACjD,oBAAoB,EAAE,OAAO,CAAC,MAAM,CAAC,oBAAoB;gBACzD,eAAe,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe;gBAC/C,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc;aAC7C;YACD,WAAW,EAAE;gBACZ,SAAS,EAAE,qBAAqB;gBAChC,EAAE,EAAE,OAAO,CAAC,EAAE;gBACd,MAAM,EAAE,OAAO,CAAC,MAAM;aACtB;YACD,eAAe,EAAE,OAAO,CAAC,OAAO;YAChC,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO;YACpC,cAAc,EAAE,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YACzD,OAAO;SACP,CAAC,CAAA;IACH,CAAC;IACD,KAAK,CAAC,UAAU,CACf,KAAyB,EACzB,SAAqC,EACrC,SAAsB,IAAI,eAAe,EAAE,CAAC,MAAM;QAElD,MAAM,OAAO,GAAG,wBAAwB,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QACxE,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAClC,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;IAC1C,CAAC;IACD,KAAK,CAAC,WAAW,CAChB,GAAY,EACZ,SAAqC,EACrC,SAAsB,IAAI,eAAe,EAAE,CAAC,MAAM;QAElD,MAAM,OAAO,GAAG,wBAAwB,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;QACxE,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,MAAM,GAAG,wBAAwB,CACtC,oBAAoB,CAAC,KAAK,CACzB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,CACxE,CACD,CAAA;QACD,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QAC7E,OAAO,wBAAwB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IACnD,CAAC;IACD,KAAK,CAAC,aAAa,CAClB,GAAY,EACZ,SAAqC,EACrC,SAAsB,IAAI,eAAe,EAAE,CAAC,MAAM;QAElD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO;YACxB,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QACzE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,CAAA;QAC9D,MAAM,CAAC,cAAc,EAAE,CAAA;QACvB,IAAI,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAClE,OAAO,wBAAwB,CAC9B,CAAC;aACC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;aACrE,MAAM,EAAE;aACR,KAAK,CAAC,MAAM,CAAC,CACf,CAAA;IACF,CAAC;CACD"}

package/dist/pals/channels/schema.d.ts

@@ -0,0 +1,234 @@
+import { z } from 'zod';
+import type { PalChannelIdentity } from '../communication/ingress-types.js';
+import type { PalChannelConnection, PalChannelRouteDecision } from './types.js';
+export declare const connectionSchema: z.ZodObject<{
+    tenantId: z.ZodType<import("../../public-types.js").TenantId, z.ZodTypeDef, import("../../public-types.js").TenantId>;
+    provider: z.ZodEffects<z.ZodString, string, string>;
+    connectionId: z.ZodEffects<z.ZodString, string, string>;
+    externalTenantId: z.ZodEffects<z.ZodString, string, string>;
+}, "strict", z.ZodTypeAny, {
+    provider: string;
+    tenantId: string & import("../../types/ids/brand.js").IdBrand<"TenantId">;
+    connectionId: string;
+    externalTenantId: string;
+}, {
+    provider: string;
+    tenantId: string & import("../../types/ids/brand.js").IdBrand<"TenantId">;
+    connectionId: string;
+    externalTenantId: string;
+}>;
+export declare const verifiedMessageSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"message">;
+    body: z.ZodEffects<z.ZodString, string, string>;
+    externalTenantId: z.ZodEffects<z.ZodString, string, string>;
+    nativeConversationId: z.ZodEffects<z.ZodString, string, string>;
+    nativeChannelId: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+    nativeThreadId: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+    actorId: z.ZodEffects<z.ZodString, string, string>;
+    eventId: z.ZodEffects<z.ZodString, string, string>;
+}, "strict", z.ZodTypeAny, {
+    kind: "message";
+    body: string;
+    externalTenantId: string;
+    nativeConversationId: string;
+    nativeChannelId: string | null;
+    nativeThreadId: string | null;
+    actorId: string;
+    eventId: string;
+}, {
+    kind: "message";
+    body: string;
+    externalTenantId: string;
+    nativeConversationId: string;
+    nativeChannelId: string | null;
+    nativeThreadId: string | null;
+    actorId: string;
+    eventId: string;
+}>;
+export declare const verifiedActionSchema: z.ZodEffects<z.ZodObject<{
+    kind: z.ZodLiteral<"action">;
+    deliveryRef: z.ZodObject<{
+        namespace: z.ZodLiteral<"namzu-pal-channel/1">;
+        id: z.ZodString;
+        digest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        digest: string;
+        namespace: "namzu-pal-channel/1";
+    }, {
+        id: string;
+        digest: string;
+        namespace: "namzu-pal-channel/1";
+    }>;
+    actionId: z.ZodEffects<z.ZodString, string, string>;
+    payloadDigest: z.ZodString;
+    payload: z.ZodEffects<z.ZodString, string, string>;
+    externalTenantId: z.ZodEffects<z.ZodString, string, string>;
+    nativeConversationId: z.ZodEffects<z.ZodString, string, string>;
+    nativeChannelId: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+    nativeThreadId: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+    actorId: z.ZodEffects<z.ZodString, string, string>;
+    eventId: z.ZodEffects<z.ZodString, string, string>;
+}, "strict", z.ZodTypeAny, {
+    kind: "action";
+    payload: string;
+    externalTenantId: string;
+    nativeConversationId: string;
+    nativeChannelId: string | null;
+    nativeThreadId: string | null;
+    actorId: string;
+    eventId: string;
+    deliveryRef: {
+        id: string;
+        digest: string;
+        namespace: "namzu-pal-channel/1";
+    };
+    actionId: string;
+    payloadDigest: string;
+}, {
+    kind: "action";
+    payload: string;
+    externalTenantId: string;
+    nativeConversationId: string;
+    nativeChannelId: string | null;
+    nativeThreadId: string | null;
+    actorId: string;
+    eventId: string;
+    deliveryRef: {
+        id: string;
+        digest: string;
+        namespace: "namzu-pal-channel/1";
+    };
+    actionId: string;
+    payloadDigest: string;
+}>, {
+    kind: "action";
+    payload: string;
+    externalTenantId: string;
+    nativeConversationId: string;
+    nativeChannelId: string | null;
+    nativeThreadId: string | null;
+    actorId: string;
+    eventId: string;
+    deliveryRef: {
+        id: string;
+        digest: string;
+        namespace: "namzu-pal-channel/1";
+    };
+    actionId: string;
+    payloadDigest: string;
+}, {
+    kind: "action";
+    payload: string;
+    externalTenantId: string;
+    nativeConversationId: string;
+    nativeChannelId: string | null;
+    nativeThreadId: string | null;
+    actorId: string;
+    eventId: string;
+    deliveryRef: {
+        id: string;
+        digest: string;
+        namespace: "namzu-pal-channel/1";
+    };
+    actionId: string;
+    payloadDigest: string;
+}>;
+export declare const routeDecisionSchema: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    revision: z.ZodLiteral<1>;
+    identity: z.ZodObject<Omit<{
+        v: z.ZodLiteral<1>;
+        kind: z.ZodLiteral<"channel">;
+        recipient: z.ZodObject<{
+            tenantId: z.ZodType<import("../../public-types.js").TenantId, z.ZodTypeDef, import("../../public-types.js").TenantId>;
+            palId: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            tenantId: string & import("../../types/ids/brand.js").IdBrand<"TenantId">;
+            palId: string;
+        }, {
+            tenantId: string & import("../../types/ids/brand.js").IdBrand<"TenantId">;
+            palId: string;
+        }>;
+        provider: z.ZodEffects<z.ZodString, string, string>;
+        connectionId: z.ZodEffects<z.ZodString, string, string>;
+        externalTenantId: z.ZodEffects<z.ZodString, string, string>;
+        nativeConversationId: z.ZodEffects<z.ZodString, string, string>;
+        nativeChannelId: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+        nativeThreadId: z.ZodNullable<z.ZodEffects<z.ZodString, string, string>>;
+    }, "v" | "kind" | "recipient">, "strict", z.ZodTypeAny, {
+        provider: string;
+        connectionId: string;
+        externalTenantId: string;
+        nativeConversationId: string;
+        nativeChannelId: string | null;
+        nativeThreadId: string | null;
+    }, {
+        provider: string;
+        connectionId: string;
+        externalTenantId: string;
+        nativeConversationId: string;
+        nativeChannelId: string | null;
+        nativeThreadId: string | null;
+    }>;
+    recipient: z.ZodObject<{
+        tenantId: z.ZodType<import("../../public-types.js").TenantId, z.ZodTypeDef, import("../../public-types.js").TenantId>;
+        palId: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        tenantId: string & import("../../types/ids/brand.js").IdBrand<"TenantId">;
+        palId: string;
+    }, {
+        tenantId: string & import("../../types/ids/brand.js").IdBrand<"TenantId">;
+        palId: string;
+    }>;
+    profileRevision: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    v: 1;
+    identity: {
+        provider: string;
+        connectionId: string;
+        externalTenantId: string;
+        nativeConversationId: string;
+        nativeChannelId: string | null;
+        nativeThreadId: string | null;
+    };
+    revision: 1;
+    recipient: {
+        tenantId: string & import("../../types/ids/brand.js").IdBrand<"TenantId">;
+        palId: string;
+    };
+    profileRevision: number;
+}, {
+    v: 1;
+    identity: {
+        provider: string;
+        connectionId: string;
+        externalTenantId: string;
+        nativeConversationId: string;
+        nativeChannelId: string | null;
+        nativeThreadId: string | null;
+    };
+    revision: 1;
+    recipient: {
+        tenantId: string & import("../../types/ids/brand.js").IdBrand<"TenantId">;
+        palId: string;
+    };
+    profileRevision: number;
+}>;
+export declare function captureConnection(input: PalChannelConnection): PalChannelConnection;
+export declare function checkedIdentity(connection: PalChannelConnection, event: unknown): {
+    kind: "channel";
+    provider: string;
+    tenantId: string & import("../../types/ids/brand.js").IdBrand<"TenantId">;
+    connectionId: string;
+    externalTenantId: string;
+    nativeConversationId: string;
+    nativeChannelId: string | null;
+    nativeThreadId: string | null;
+    actorId: string;
+    eventId: string;
+};
+export declare function nativeTuple(identity: PalChannelIdentity): readonly unknown[];
+export declare function decisionId(decision: Pick<PalChannelRouteDecision, 'identity' | 'recipient'>): string;
+export declare function checkedDecision(input: unknown): PalChannelRouteDecision;
+//# sourceMappingURL=schema.d.ts.map

package/dist/pals/channels/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/pals/channels/schema.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAA;AAE3E,OAAO,KAAK,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAA;AAE/E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;EAOnB,CAAA;AASV,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAUxB,CAAA;AACV,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuB/B,CAAA;AACF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYtB,CAAA;AAEV,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,CAEnF;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,oBAAoB,EAAE,KAAK,EAAE,OAAO;;;;;;;;;;;EAU/E;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,kBAAkB,GAAG,SAAS,OAAO,EAAE,CAS5E;AAED,wBAAgB,UAAU,CACzB,QAAQ,EAAE,IAAI,CAAC,uBAAuB,EAAE,UAAU,GAAG,WAAW,CAAC,GAC/D,MAAM,CAER;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAEvE"}

package/dist/pals/channels/schema.js

@@ -0,0 +1,94 @@
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+import { channelRouteKeySchema, channelSourceSchema } from '../communication/ingress-schema.js';
+import { addressSchema, freezeCommunicationValue, hash, label } from '../communication/schema.js';
+export const connectionSchema = z
+    .object({
+    tenantId: addressSchema.shape.tenantId,
+    provider: label,
+    connectionId: label,
+    externalTenantId: label,
+})
+    .strict();
+const verifiedIdentity = {
+    externalTenantId: label,
+    nativeConversationId: label,
+    nativeChannelId: label.nullable(),
+    nativeThreadId: label.nullable(),
+    actorId: label,
+    eventId: label,
+};
+export const verifiedMessageSchema = z
+    .object({
+    ...verifiedIdentity,
+    kind: z.literal('message'),
+    body: z
+        .string()
+        .min(1)
+        .max(32_000)
+        .refine((value) => !value.includes('\0')),
+})
+    .strict();
+export const verifiedActionSchema = z
+    .object({
+    ...verifiedIdentity,
+    kind: z.literal('action'),
+    deliveryRef: z
+        .object({
+        namespace: z.literal('namzu-pal-channel/1'),
+        id: z.string().regex(/^[a-f0-9]{64}$/),
+        digest: z.string().regex(/^[a-f0-9]{64}$/),
+    })
+        .strict(),
+    actionId: label,
+    payloadDigest: z.string().regex(/^[a-f0-9]{64}$/),
+    payload: z
+        .string()
+        .min(1)
+        .max(32_000)
+        .refine((value) => !value.includes('\0')),
+})
+    .strict()
+    .refine((value) => createHash('sha256').update(value.payload).digest('hex') === value.payloadDigest, 'Channel action payload does not match its authenticated digest.');
+export const routeDecisionSchema = z
+    .object({
+    v: z.literal(1),
+    revision: z.literal(1),
+    identity: channelRouteKeySchema.omit({
+        v: true,
+        kind: true,
+        recipient: true,
+    }),
+    recipient: addressSchema,
+    profileRevision: z.number().int().positive().safe(),
+})
+    .strict();
+export function captureConnection(input) {
+    return freezeCommunicationValue(connectionSchema.parse(input));
+}
+export function checkedIdentity(connection, event) {
+    const source = channelSourceSchema.parse(event);
+    if (source.tenantId !== connection.tenantId ||
+        source.provider !== connection.provider ||
+        source.connectionId !== connection.connectionId ||
+        source.externalTenantId !== connection.externalTenantId)
+        throw new Error('Channel identity does not belong to the authenticated connection.');
+    return freezeCommunicationValue(source);
+}
+export function nativeTuple(identity) {
+    return [
+        identity.provider,
+        identity.connectionId,
+        identity.externalTenantId,
+        identity.nativeConversationId,
+        identity.nativeChannelId,
+        identity.nativeThreadId,
+    ];
+}
+export function decisionId(decision) {
+    return hash([1, decision.recipient.tenantId, nativeTuple(decision.identity)]);
+}
+export function checkedDecision(input) {
+    return freezeCommunicationValue(routeDecisionSchema.parse(input));
+}
+//# sourceMappingURL=schema.js.map

package/dist/pals/channels/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/pals/channels/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAA;AAE/F,OAAO,EAAE,aAAa,EAAE,wBAAwB,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAA;AAGjG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACP,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ;IACtC,QAAQ,EAAE,KAAK;IACf,YAAY,EAAE,KAAK;IACnB,gBAAgB,EAAE,KAAK;CACvB,CAAC;KACD,MAAM,EAAE,CAAA;AACV,MAAM,gBAAgB,GAAG;IACxB,gBAAgB,EAAE,KAAK;IACvB,oBAAoB,EAAE,KAAK;IAC3B,eAAe,EAAE,KAAK,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,KAAK,CAAC,QAAQ,EAAE;IAChC,OAAO,EAAE,KAAK;IACd,OAAO,EAAE,KAAK;CACd,CAAA;AACD,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACpC,MAAM,CAAC;IACP,GAAG,gBAAgB;IACnB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,MAAM,CAAC;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAA;AACV,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KACnC,MAAM,CAAC;IACP,GAAG,gBAAgB;IACnB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,WAAW,EAAE,CAAC;SACZ,MAAM,CAAC;QACP,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;QAC3C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;KAC1C,CAAC;SACD,MAAM,EAAE;IACV,QAAQ,EAAE,KAAK;IACf,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACjD,OAAO,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,MAAM,CAAC;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CACN,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,aAAa,EAC3F,iEAAiE,CACjE,CAAA;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KAClC,MAAM,CAAC;IACP,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACf,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtB,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC;QACpC,CAAC,EAAE,IAAI;QACP,IAAI,EAAE,IAAI;QACV,SAAS,EAAE,IAAI;KACf,CAAC;IACF,SAAS,EAAE,aAAa;IACxB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;CACnD,CAAC;KACD,MAAM,EAAE,CAAA;AAEV,MAAM,UAAU,iBAAiB,CAAC,KAA2B;IAC5D,OAAO,wBAAwB,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;AAC/D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,UAAgC,EAAE,KAAc;IAC/E,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAC/C,IACC,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ;QACvC,MAAM,CAAC,QAAQ,KAAK,UAAU,CAAC,QAAQ;QACvC,MAAM,CAAC,YAAY,KAAK,UAAU,CAAC,YAAY;QAC/C,MAAM,CAAC,gBAAgB,KAAK,UAAU,CAAC,gBAAgB;QAEvD,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;IACrF,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAA;AACxC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,QAA4B;IACvD,OAAO;QACN,QAAQ,CAAC,QAAQ;QACjB,QAAQ,CAAC,YAAY;QACrB,QAAQ,CAAC,gBAAgB;QACzB,QAAQ,CAAC,oBAAoB;QAC7B,QAAQ,CAAC,eAAe;QACxB,QAAQ,CAAC,cAAc;KACvB,CAAA;AACF,CAAC;AAED,MAAM,UAAU,UAAU,CACzB,QAAiE;IAEjE,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAc;IAC7C,OAAO,wBAAwB,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;AAClE,CAAC"}

package/dist/pals/channels/types.d.ts

@@ -0,0 +1,115 @@
+import type { SessionId } from '../../types/ids/index.js';
+import type { InboundDeliveryReceipt, InboundDeliveryRef } from '../../types/message/inbound-delivery.js';
+import type { PalChannelIdentity, PalChannelIntent, PalChannelSource, PalIngressAcceptanceReceipt, PalIngressHostPort, PalIngressStore } from '../communication/ingress-types.js';
+import type { PalAddress, PalMessageAuthorization } from '../communication/types.js';
+import type { PalStore } from '../types.js';
+/** Host-selected connection identity. Credentials belong only to the verifier closure. */
+export interface PalChannelConnection {
+    readonly tenantId: PalAddress['tenantId'];
+    readonly provider: string;
+    readonly connectionId: string;
+    readonly externalTenantId: string;
+}
+export interface PalChannelVerifiedIdentity {
+    readonly externalTenantId: string;
+    readonly nativeConversationId: string;
+    readonly nativeChannelId: string | null;
+    readonly nativeThreadId: string | null;
+    readonly actorId: string;
+    readonly eventId: string;
+}
+/** Only new, authenticated messages enter the inbox. Edits and service events require another port. */
+export interface PalChannelVerifiedMessage extends PalChannelVerifiedIdentity {
+    readonly kind: 'message';
+    readonly body: string;
+}
+/** Authentication must cover the action reference, identity and exact action payload. */
+export interface PalChannelVerifiedAction extends PalChannelVerifiedIdentity {
+    readonly kind: 'action';
+    readonly deliveryRef: InboundDeliveryRef;
+    readonly actionId: string;
+    readonly payloadDigest: string;
+    /** Exact authenticated JSON payload; the host action port must parse its native action schema. */
+    readonly payload: string;
+}
+export type PalChannelVerifiedEvent = PalChannelVerifiedMessage | PalChannelVerifiedAction;
+/** Required trusted host callback; raw events cannot select a connection or its credentials. */
+export type PalChannelVerifier = (raw: unknown, connection: PalChannelConnection, signal: AbortSignal) => Promise<PalChannelVerifiedEvent>;
+export interface PalChannelRouteDecision {
+    readonly v: 1;
+    readonly revision: 1;
+    readonly identity: PalChannelIdentity;
+    readonly recipient: PalAddress;
+    readonly profileRevision: number;
+}
+/** One immutable decision per tenant and full native tuple. The inbox owns the actual session. */
+export interface PalChannelRoutes {
+    get(connection: PalChannelConnection, identity: PalChannelIdentity): Promise<PalChannelRouteDecision | null>;
+    reserve(decision: PalChannelRouteDecision): Promise<PalChannelRouteDecision>;
+}
+export interface PalChannelAuthorizationRequest {
+    readonly phase: 'accept' | 'deliver' | 'wake';
+    readonly kind: 'channel';
+    readonly source: PalChannelSource;
+    readonly recipient: PalAddress;
+    readonly routeKey: PalChannelIntent['routeKey'];
+    readonly body: string;
+    readonly replyTo: null;
+}
+export interface PalChannelIngressOptions {
+    readonly connection: PalChannelConnection;
+    readonly verify: PalChannelVerifier;
+    readonly routes: PalChannelRoutes;
+    readonly store: PalIngressStore;
+    readonly pals: PalStore;
+    /** Host selection is used only before the first immutable route decision. */
+    readonly selectRecipient: (event: PalChannelVerifiedMessage, connection: PalChannelConnection) => Promise<PalAddress>;
+    readonly authorize: (request: PalChannelAuthorizationRequest) => Promise<PalMessageAuthorization>;
+    readonly host?: PalIngressHostPort;
+    readonly now?: () => number;
+    readonly onNotificationError?: (error: unknown, receipt: PalIngressAcceptanceReceipt) => void | Promise<void>;
+}
+export interface PalChannelExecutionContext {
+    readonly recipient: PalAddress;
+    readonly sessionId: SessionId;
+    readonly profileRevision: number;
+}
+export interface PalChannelRouteAuthorizationRequest {
+    readonly phase: 'reply' | 'action';
+    readonly message: PalChannelIntent;
+    readonly context: PalChannelExecutionContext;
+    /** Reply uses its triggering event actor; actions authenticate their current actor independently. */
+    readonly actorId: string;
+    readonly action?: PalChannelVerifiedAction;
+}
+export interface PalChannelResolvedRoute {
+    readonly connection: PalChannelConnection;
+    readonly identity: PalChannelIdentity;
+    readonly deliveryRef: InboundDeliveryRef;
+    readonly recordedReceipt: InboundDeliveryReceipt;
+    readonly eventActorId: string;
+    readonly currentActorId: string;
+    readonly context: PalChannelExecutionContext;
+}
+export interface PalChannelRouterOptions {
+    readonly connection: PalChannelConnection;
+    readonly verify: PalChannelVerifier;
+    readonly store: PalIngressStore;
+    readonly pals: PalStore;
+    readonly host: PalIngressHostPort;
+    readonly authorize: (request: PalChannelRouteAuthorizationRequest) => Promise<PalMessageAuthorization>;
+    /** Must durably consume an exact native action once and confirm its result. No transport default. */
+    readonly actions?: PalChannelActionPort;
+}
+export interface PalChannelActionContext {
+    readonly route: PalChannelResolvedRoute;
+    readonly action: PalChannelVerifiedAction;
+}
+export interface PalChannelActionPort {
+    execute(context: PalChannelActionContext, signal: AbortSignal): Promise<PalChannelActionResult>;
+}
+export interface PalChannelActionResult {
+    readonly status: 'applied' | 'rejected';
+    readonly receiptId: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/pals/channels/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/pals/channels/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAA;AACzD,OAAO,KAAK,EACX,sBAAsB,EACtB,kBAAkB,EAClB,MAAM,yCAAyC,CAAA;AAChD,OAAO,KAAK,EACX,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAChB,2BAA2B,EAC3B,kBAAkB,EAClB,eAAe,EACf,MAAM,mCAAmC,CAAA;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAA;AACpF,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,0FAA0F;AAC1F,MAAM,WAAW,oBAAoB;IACpC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CACjC;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAA;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED,uGAAuG;AACvG,MAAM,WAAW,yBAA0B,SAAQ,0BAA0B;IAC5E,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACrB;AAED,yFAAyF;AACzF,MAAM,WAAW,wBAAyB,SAAQ,0BAA0B;IAC3E,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IACxC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,kGAAkG;IAClG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,MAAM,uBAAuB,GAAG,yBAAyB,GAAG,wBAAwB,CAAA;AAE1F,gGAAgG;AAChG,MAAM,MAAM,kBAAkB,GAAG,CAChC,GAAG,EAAE,OAAO,EACZ,UAAU,EAAE,oBAAoB,EAChC,MAAM,EAAE,WAAW,KACf,OAAO,CAAC,uBAAuB,CAAC,CAAA;AAErC,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAA;IACb,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAA;IACpB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CAChC;AAED,kGAAkG;AAClG,MAAM,WAAW,gBAAgB;IAChC,GAAG,CACF,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,kBAAkB,GAC1B,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAA;IAC1C,OAAO,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;CAC5E;AAED,MAAM,WAAW,8BAA8B;IAC9C,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAA;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC,UAAU,CAAC,CAAA;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;CACtB;AAED,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,eAAe,EAAE,CACzB,KAAK,EAAE,yBAAyB,EAChC,UAAU,EAAE,oBAAoB,KAC5B,OAAO,CAAC,UAAU,CAAC,CAAA;IACxB,QAAQ,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,8BAA8B,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACjG,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,CAAA;IAClC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAC9B,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,2BAA2B,KAChC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB;AAED,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,mCAAmC;IACnD,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAA;IAClC,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAA;IAC5C,qGAAqG;IACrG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,wBAAwB,CAAA;CAC1C;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;IACrC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAA;IACxC,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAA;IAChD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,0BAA0B,CAAA;CAC5C;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,UAAU,EAAE,oBAAoB,CAAA;IACzC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;IACnC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAA;IAC/B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,CACnB,OAAO,EAAE,mCAAmC,KACxC,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACrC,qGAAqG;IACrG,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAA;CACvC;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAA;IACvC,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAA;CACzC;AAED,MAAM,WAAW,oBAAoB;IACpC,OAAO,CAAC,OAAO,EAAE,uBAAuB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;CAC/F;AAED,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,CAAA;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC1B"}

package/dist/pals/channels/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/pals/channels/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/pals/channels/types.ts"],"names":[],"mappings":""}

package/dist/pals/communication/broker.d.ts

@@ -0,0 +1,8 @@
+import { type PalMessageBrokerOptions, type PalMessageSender, type PalMessageSenderContext } from './types.js';
+/** Host-owned identity and current policy; model text never selects its sender. */
+export declare class PalMessageBroker {
+    private readonly options;
+    constructor(options: PalMessageBrokerOptions);
+    sender(input: PalMessageSenderContext): PalMessageSender;
+}
+//# sourceMappingURL=broker.d.ts.map

package/dist/pals/communication/broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.d.ts","sourceRoot":"","sources":["../../../src/pals/communication/broker.ts"],"names":[],"mappings":"AAUA,OAAO,EACN,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAI5B,MAAM,YAAY,CAAA;AAGnB,mFAAmF;AACnF,qBAAa,gBAAgB;IAChB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,uBAAuB;IAI7D,MAAM,CAAC,KAAK,EAAE,uBAAuB,GAAG,gBAAgB;CAwGxD"}