@north-light/api 0.3.580 → 0.3.588

package/dist/daemon/api/operations.d.ts

@@ -0,0 +1,18 @@
+import type { Scope } from '@north-light/identity';
+export type CallerClass = 'anonymous' | 'person' | 'app' | 'broker' | 'cron' | 'directory' | 'forwarded' | 'machine' | 'import';
+export type ResourceRule = 'none' | 'node-read' | 'node-write' | 'node-own' | 'nodes-list' | 'canvas-read' | 'cron' | 'profile' | 'human' | 'run' | 'daemon-bash' | 'daemon-control' | 'objects';
+export interface Operation {
+    name: string;
+    method: string;
+    path: string;
+    classes: readonly CallerClass[];
+    scope?: Scope;
+    resource: ResourceRule;
+    stage?: string;
+    idempotency?: string;
+    /** How the response is sent: `true` server-sent run events; `'bytes'` a file's raw bytes (`Range` → 206). */
+    stream?: true | 'bytes';
+}
+export type AppOperation = Operation;
+export declare const OPERATIONS: readonly Operation[];
+export declare function operationFor(method: string, path: string): Operation | undefined;

package/dist/daemon/api/operations.js

@@ -0,0 +1,306 @@
+export const OPERATIONS = [
+    { name: 'conversation.create', method: 'POST', path: '/v1/conversations', classes: ['broker'], resource: 'none' },
+    { name: 'conversation.list', method: 'GET', path: '/v1/conversations', classes: ['broker', 'person'], resource: 'none' },
+    { name: 'conversation.append', method: 'POST', path: '/v1/conversations/:id/entries', classes: ['broker'], resource: 'none' },
+    { name: 'conversation.commit', method: 'POST', path: '/v1/conversations/:id/commit', classes: ['broker'], resource: 'none' },
+    { name: 'conversation.read', method: 'GET', path: '/v1/conversations/:id', classes: ['broker', 'person'], resource: 'none' },
+    { name: 'conversation.header', method: 'GET', path: '/v1/conversations/:id/header', classes: ['broker', 'person'], resource: 'none' },
+    { name: 'conversation.replace', method: 'PUT', path: '/v1/conversations/:id', classes: ['broker'], resource: 'none' },
+    { name: 'conversation.fork', method: 'POST', path: '/v1/conversations/:id/fork', classes: ['broker'], resource: 'none' },
+    { name: 'conversation.delete', method: 'DELETE', path: '/v1/conversations/:id', classes: ['broker'], resource: 'none' },
+    { name: 'health', method: 'GET', path: '/v1/health', classes: ['anonymous'], resource: 'none', stage: 'v0.5' },
+    { name: 'ready', method: 'GET', path: '/v1/ready', classes: ['anonymous'], resource: 'none', stage: 'v0.5' },
+    { name: 'chat-inventory.get.1', method: 'GET', path: '/v1/nodes/:id/chat-inventory', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'settings.get', method: 'GET', path: '/v1/settings', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'settings.put', method: 'PUT', path: '/v1/settings', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'model-config.put.2', method: 'PUT', path: '/v1/model-config', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'files.get.3', method: 'GET', path: '/v1/files/peek', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'files.post.4', method: 'POST', path: '/v1/files/write', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'files.get.5', method: 'GET', path: '/v1/files/list', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'reviews.post.6', method: 'POST', path: '/v1/human/reviews', classes: ['person', 'broker'], resource: 'human', scope: 'crtr:act' },
+    { name: 'reviews.get.7', method: 'GET', path: '/v1/human/reviews', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'reviews.get.8', method: 'GET', path: '/v1/human/reviews/:review_id', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'reviews.post.9', method: 'POST', path: '/v1/human/reviews/:review_id/submit', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'reviews.post.10', method: 'POST', path: '/v1/human/reviews/:review_id/cancel', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'reviews.get.11', method: 'GET', path: '/v1/human/reviews/:review_id/document', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'feedback-comments.post.12', method: 'POST', path: '/v1/human/inbox/:ticket_id/feedback-comments', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'feedback-comments.post.13', method: 'POST', path: '/v1/human/inbox/:ticket_id/feedback-comments/:comment_id/resolve', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'node.log.append', method: 'POST', path: '/v1/nodes/:id/records/log', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'node.summaries.put', method: 'PUT', path: '/v1/nodes/:id/records/summaries', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'node.attachments.list', method: 'GET', path: '/v1/nodes/:id/attachments', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'node.attachments.read', method: 'GET', path: '/v1/nodes/:id/attachments/:sha256', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'node.telemetry.put', method: 'PUT', path: '/v1/nodes/:id/records/telemetry', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'node.recap.put', method: 'PUT', path: '/v1/nodes/:id/records/recap', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'node.inbox.read', method: 'GET', path: '/v1/nodes/:id/records/inbox', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'node.passive.read', method: 'GET', path: '/v1/nodes/:id/records/passive', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'node.pushed-final', method: 'POST', path: '/v1/nodes/:id/records/pushed-final', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-ops.post.14', method: 'POST', path: '/v1/nodes/:id/broker/session-bound', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-ops.post.15', method: 'POST', path: '/v1/nodes/:id/broker/settle', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker.idle', method: 'POST', path: '/v1/nodes/:id/broker/idle', classes: ['broker'], resource: 'node-own' },
+    { name: 'broker-ops.post.16', method: 'POST', path: '/v1/nodes/:id/broker/park-complete', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-ops.post.17', method: 'POST', path: '/v1/nodes/:id/broker/park-activity', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-ops.post.18', method: 'POST', path: '/v1/nodes/:id/broker/telemetry', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-ops.post.19', method: 'POST', path: '/v1/nodes/:id/broker/model', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-ops.get.20', method: 'GET', path: '/v1/nodes/:id/broker/extension-state', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker.signals', method: 'GET', path: '/v1/nodes/:id/broker/signals', classes: ['broker'], resource: 'node-own', stream: true },
+    { name: 'nodes.broker-structured-request', method: 'GET', path: '/v1/nodes/:id/broker/structured-request', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'nodes.broker-goal', method: 'POST', path: '/v1/nodes/:id/broker/goal', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-ops.post.21', method: 'POST', path: '/v1/nodes/:id/broker/generated-name', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-ops.post.22', method: 'POST', path: '/v1/nodes/:id/broker/persona-ack', classes: ['person', 'broker'], resource: 'node-own' },
+    // `objects`: the handler applies graph-core's one access check; the router adds no rule.
+    { name: 'objects.read', method: 'GET', path: '/v1/objects/:ref', classes: ['person', 'app', 'broker', 'cron', 'forwarded'], resource: 'objects', stage: 'objects' },
+    { name: 'objects.list', method: 'GET', path: '/v1/objects', classes: ['person', 'app', 'broker', 'cron', 'forwarded'], resource: 'objects', stage: 'objects' },
+    { name: 'objects.search', method: 'POST', path: '/v1/objects/search', classes: ['person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'objects.watch', method: 'POST', path: '/v1/objects/:ref/watch', classes: ['anonymous', 'person', 'app', 'broker', 'cron', 'forwarded'], resource: 'objects', stage: 'objects' },
+    { name: 'objects.unwatch', method: 'DELETE', path: '/v1/objects/:ref/watch', classes: ['anonymous', 'person', 'app', 'broker', 'cron', 'forwarded'], resource: 'objects', stage: 'objects' },
+    { name: 'objects.shares', method: 'GET', path: '/v1/objects/:ref/shares', classes: ['person', 'broker'], resource: 'objects', stage: 'objects' },
+    { name: 'objects.share', method: 'POST', path: '/v1/objects/:ref/shares', classes: ['person', 'broker'], resource: 'objects', stage: 'objects' },
+    { name: 'objects.unshare', method: 'DELETE', path: '/v1/objects/:ref/shares', classes: ['person', 'broker'], resource: 'objects', stage: 'objects' },
+    { name: 'custom-objects.register', method: 'POST', path: '/v1/custom-objects', classes: ['person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'custom-objects.publish', method: 'POST', path: '/v1/custom-objects/:ref/events', classes: ['anonymous', 'person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'custom-objects.unregister', method: 'DELETE', path: '/v1/custom-objects/:ref', classes: ['anonymous', 'person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'custom-objects.receive', method: 'GET', path: '/v1/custom-objects/:ref/deliveries', classes: ['anonymous', 'person', 'app', 'broker', 'cron'], resource: 'objects', stream: true, stage: 'objects' },
+    { name: 'custom-objects.ack', method: 'POST', path: '/v1/custom-objects/:ref/deliveries/ack', classes: ['anonymous', 'person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'objects.edges', method: 'GET', path: '/v1/objects/:ref/edges', classes: ['person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'docs.write', method: 'POST', path: '/v1/docs', classes: ['person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'docs.edit', method: 'PATCH', path: '/v1/docs/:ref', classes: ['person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'docs.move', method: 'POST', path: '/v1/docs/:ref/move', classes: ['person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'docs.delete', method: 'DELETE', path: '/v1/docs/:ref', classes: ['person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'docs.history', method: 'GET', path: '/v1/docs/:ref/history', classes: ['person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    // App-server routes: an app registers its schema, writes facts of its own namespace and asks `check` for a person.
+    { name: 'schemas.register', method: 'POST', path: '/v1/schemas', classes: ['app'], resource: 'objects', stage: 'objects' },
+    { name: 'relations.write', method: 'POST', path: '/v1/relations', classes: ['app'], resource: 'objects', stage: 'objects' },
+    { name: 'relations.replace', method: 'PUT', path: '/v1/relations', classes: ['app'], resource: 'objects', stage: 'objects' },
+    { name: 'relations.list', method: 'GET', path: '/v1/relations', classes: ['app'], resource: 'objects', stage: 'objects' },
+    { name: 'check', method: 'POST', path: '/v1/check', classes: ['app'], resource: 'objects', stage: 'objects' },
+    { name: 'docs.lint', method: 'POST', path: '/v1/docs/lint', classes: ['person', 'app', 'broker', 'cron'], resource: 'objects', stage: 'objects' },
+    { name: 'plugins.app-token', method: 'GET', path: '/v1/plugins/:name/app-token', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'plugins.call-headers', method: 'POST', path: '/v1/plugins/:name/call-headers', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'documents.browser-access', method: 'GET', path: '/v1/documents/browser-access', classes: ['person'], resource: 'none' },
+    { name: 'documents.reconcile-packages', method: 'POST', path: '/v1/documents/reconcile-packages', classes: ['person', 'broker'], resource: 'none' },
+    // Person class reaches only the dry run (the handler fences live calls by execution id).
+    { name: 'nodes.delivery', method: 'POST', path: '/v1/nodes/:id/delivery', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'delivery.dry-run', method: 'POST', path: '/v1/delivery/dry-run', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'bash-jobs.background', method: 'POST', path: '/v1/nodes/:id/jobs/:jobId/background', classes: ['broker'], resource: 'node-own', scope: 'crtr:act' },
+    { name: 'health.get.33', method: 'GET', path: '/healthz', classes: ['anonymous'], resource: 'none' },
+    { name: 'health.get.34', method: 'GET', path: '/v1/status', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'daemon.due', method: 'GET', path: '/v1/due', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'bash-jobs.report', method: 'POST', path: '/v1/nodes/:id/jobs/:jobId/report', classes: ['broker'], resource: 'node-own', scope: 'crtr:act' },
+    { name: 'bash-jobs.patch', method: 'PATCH', path: '/v1/nodes/:id/jobs/:jobId', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'bash-jobs.start', method: 'POST', path: '/v1/nodes/:id/jobs/start', classes: ['broker'], resource: 'node-own', scope: 'crtr:act' },
+    { name: 'hooks.plan', method: 'GET', path: '/v1/nodes/:id/hooks/plan', classes: ['broker'], resource: 'node-own' },
+    { name: 'hooks.exec', method: 'POST', path: '/v1/nodes/:id/hooks/exec', classes: ['broker'], resource: 'node-own' },
+    { name: 'hooks.exec.person', method: 'POST', path: '/v1/hooks/exec', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'bash-jobs.get.35', method: 'GET', path: '/v1/nodes/:id/jobs', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'bash-jobs.output', method: 'GET', path: '/v1/nodes/:id/jobs/:jobId/output', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'bash-jobs.delete.36', method: 'DELETE', path: '/v1/nodes/:id/jobs/:jobId', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'prospective-chat-inventory.get.37', method: 'GET', path: '/v1/prospective-chat-inventory', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'node-events.get.38', method: 'GET', path: '/v1/nodes/:id/events', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'bash.post.39', method: 'POST', path: '/v1/bash', classes: ['person', 'broker'], resource: 'daemon-bash', scope: 'crtr:act' },
+    { name: 'subscriptions.post.40', method: 'POST', path: '/v1/nodes/:id/subscriptions', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'subscriptions.delete.41', method: 'DELETE', path: '/v1/nodes/:id/subscriptions/:target', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'attach.post.42', method: 'POST', path: '/v1/nodes/:id/attach', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'review-comments.post.44', method: 'POST', path: '/v1/human/reviews/self/comments', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.get.45', method: 'GET', path: '/v1/human/reviews/self/comments', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.post.46', method: 'POST', path: '/v1/human/reviews/:review_id/comments', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.get.47', method: 'GET', path: '/v1/human/reviews/:review_id/comments', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.get.48', method: 'GET', path: '/v1/human/reviews/:review_id/comment-events', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.post.49', method: 'POST', path: '/v1/human/reviews/:review_id/comment-ranges', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.get.50', method: 'GET', path: '/v1/human/comments/:comment_id', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.post.51', method: 'POST', path: '/v1/human/comments/:comment_id/edit', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.post.52', method: 'POST', path: '/v1/human/comments/:comment_id/resolve', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.post.53', method: 'POST', path: '/v1/human/comments/:comment_id/reopen', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.post.54', method: 'POST', path: '/v1/human/comments/:comment_id/delete', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'review-comments.post.55', method: 'POST', path: '/v1/human/comments/:comment_id/fork', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'messages.post.56', method: 'POST', path: '/v1/nodes/:id/mail/claim', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'messages.post.57', method: 'POST', path: '/v1/nodes/:id/mail/acknowledge', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'messages.post.58', method: 'POST', path: '/v1/nodes/:id/messages', classes: ['person', 'broker', 'cron', 'forwarded'], resource: 'node-write' },
+    { name: 'messages.post.59', method: 'POST', path: '/v1/nodes/:id/interrupt', classes: ['person', 'broker', 'cron', 'forwarded'], resource: 'node-write' },
+    { name: 'reports.post.60', method: 'POST', path: '/v1/nodes/:id/reports', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'reports.get.61', method: 'GET', path: '/v1/nodes/:id/reports', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'reports.post.62', method: 'POST', path: '/v1/nodes/:id/result', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'inbox.get.63', method: 'GET', path: '/v1/human/inbox', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'inbox.get.64', method: 'GET', path: '/v1/human/inbox/history', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'inbox.get.65', method: 'GET', path: '/v1/human/inbox/:ticket_id', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'inbox.get.66', method: 'GET', path: '/v1/human/inbox/:ticket_id/response', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'inbox.post.67', method: 'POST', path: '/v1/human/inbox/:ticket_id/respond', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'inbox.post.68', method: 'POST', path: '/v1/human/inbox/:ticket_id/progress', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'inbox.post.69', method: 'POST', path: '/v1/human/inbox/:ticket_id/cancel', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'worktree.post.70', method: 'POST', path: '/v1/nodes/:id/worktree/close', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'worktree.post.71', method: 'POST', path: '/v1/nodes/:id/worktree/abandon', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'worktree.get.72', method: 'GET', path: '/v1/worktrees/quarantined', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'crons.post.73', method: 'POST', path: '/v1/crons', classes: ['person', 'app', 'broker', 'cron'], resource: 'cron', scope: 'crtr:schedule' },
+    { name: 'crons.get.74', method: 'GET', path: '/v1/crons', classes: ['person', 'app', 'broker', 'cron'], resource: 'cron' },
+    { name: 'crons.get.75', method: 'GET', path: '/v1/crons/:cronId', classes: ['person', 'app', 'broker', 'cron'], resource: 'cron' },
+    { name: 'crons.post.76', method: 'POST', path: '/v1/crons/:cronId/pause', classes: ['person', 'app', 'broker', 'cron'], resource: 'cron', scope: 'crtr:schedule' },
+    { name: 'crons.post.77', method: 'POST', path: '/v1/crons/:cronId/resume', classes: ['person', 'app', 'broker', 'cron'], resource: 'cron', scope: 'crtr:schedule' },
+    { name: 'crons.post.78', method: 'POST', path: '/v1/crons/poke', classes: ['person', 'app', 'broker', 'cron'], resource: 'cron', scope: 'crtr:schedule' },
+    { name: 'crons.post.79', method: 'POST', path: '/v1/crons/:cronId/run', classes: ['person', 'app', 'broker', 'cron'], resource: 'cron', scope: 'crtr:schedule' },
+    { name: 'crons.delete.80', method: 'DELETE', path: '/v1/crons/:cronId', classes: ['person', 'app', 'broker', 'cron'], resource: 'cron', scope: 'crtr:schedule' },
+    { name: 'modelauth.get.81', method: 'GET', path: '/v1/model-auth', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'modelauth.get.82', method: 'GET', path: '/v1/model-auth/readiness', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'modelauth.put.83', method: 'PUT', path: '/v1/model-auth/:provider', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'modelauth.delete.84', method: 'DELETE', path: '/v1/model-auth/:provider', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'modelauth.delete.account', method: 'DELETE', path: '/v1/model-auth/:provider/accounts/:label', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'modelauth.patch.account', method: 'PATCH', path: '/v1/model-auth/:provider/accounts/:label', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'model_auth.start', method: 'POST', path: '/v1/model-auth/flows', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'model_auth.complete', method: 'POST', path: '/v1/model-auth/flows/:flow_id/complete', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'model_auth.cancel', method: 'POST', path: '/v1/model-auth/flows/:flow_id/cancel', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'model_auth.get', method: 'GET', path: '/v1/model-auth/flows/:flow_id', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'nodes.post.85', method: 'POST', path: '/v1/nodes', classes: ['person', 'broker', 'cron'], resource: 'node-own', scope: 'crtr:act' },
+    { name: 'nodes.get.86', method: 'GET', path: '/v1/nodes', classes: ['person', 'broker'], resource: 'nodes-list' },
+    { name: 'nodes.post.87', method: 'POST', path: '/v1/nodes/revive-all', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'nodes.get.88', method: 'GET', path: '/v1/nodes/:id', classes: ['person', 'broker', 'cron', 'forwarded'], resource: 'node-read' },
+    { name: 'nodes.get.89', method: 'GET', path: '/v1/nodes/:id/snapshot', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'nodes.get.90', method: 'GET', path: '/v1/nodes/:id/subject', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'nodes.get.91', method: 'GET', path: '/v1/nodes/:id/messages', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'nodes.get.92', method: 'GET', path: '/v1/nodes/:id/session', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'nodes.get.93', method: 'GET', path: '/v1/nodes/:id/transcript', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'nodes.get.94', method: 'GET', path: '/v1/nodes/:id/context', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'nodes.post.96', method: 'POST', path: '/v1/nodes/:id/fork', classes: ['person', 'broker'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'nodes.post.97', method: 'POST', path: '/v1/nodes/:id/revive', classes: ['person', 'broker'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'nodes.post.98', method: 'POST', path: '/v1/nodes/:id/relaunch-root', classes: ['person', 'broker'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'nodes.post.99', method: 'POST', path: '/v1/nodes/:id/close', classes: ['person', 'broker'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'nodes.post.read', method: 'POST', path: '/v1/nodes/:id/read', classes: ['person'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'nodes.post.100', method: 'POST', path: '/v1/nodes/:id/recycle', classes: ['person', 'broker'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'nodes.post.101', method: 'POST', path: '/v1/nodes/:id/demote', classes: ['person', 'broker'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'nodes.post.102', method: 'POST', path: '/v1/nodes/:id/promote', classes: ['person', 'broker'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'nodes.post.103', method: 'POST', path: '/v1/nodes/:id/yield', classes: ['person', 'broker'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'nodes.post.104', method: 'POST', path: '/v1/nodes/:id/wait', classes: ['person', 'broker'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'nodes.patch.105', method: 'PATCH', path: '/v1/nodes/:id/config', classes: ['person', 'broker'], resource: 'node-write', scope: 'crtr:act' },
+    { name: 'broker-recovery.post.106', method: 'POST', path: '/v1/broker/:id/turn', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-recovery.post.107', method: 'POST', path: '/v1/broker/:id/provider-retry', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-recovery.post.108', method: 'POST', path: '/v1/broker/:id/fault', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-recovery.get.109', method: 'GET', path: '/v1/broker/:id/recovery', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'broker-recovery.post.110', method: 'POST', path: '/v1/nodes/:id/fault', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'broker-recovery.delete.111', method: 'DELETE', path: '/v1/nodes/:id/fault', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'profiles.put.112', method: 'PUT', path: '/v1/profiles/:name', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'profiles.post.113', method: 'POST', path: '/v1/profiles/:name/pause', classes: ['person', 'broker'], resource: 'profile' },
+    { name: 'profiles.post.114', method: 'POST', path: '/v1/profiles/:name/resume', classes: ['person', 'broker'], resource: 'profile' },
+    { name: 'profiles.patch.115', method: 'PATCH', path: '/v1/profiles/:name/metadata', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'profile.create', method: 'POST', path: '/v1/profiles', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'profile.update', method: 'PATCH', path: '/v1/profiles/:name', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'app.env.list', method: 'GET', path: '/v1/apps/self/env', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'app.env.set', method: 'PUT', path: '/v1/apps/self/env/:var', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'app.env.remove', method: 'DELETE', path: '/v1/apps/self/env/:var', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'profile.env.list', method: 'GET', path: '/v1/profiles/:name/env', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'profile.env.set', method: 'PUT', path: '/v1/profiles/:name/env/:var', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'profile.env.remove', method: 'DELETE', path: '/v1/profiles/:name/env/:var', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'profiles.delete.116', method: 'DELETE', path: '/v1/profiles/:name', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'profile.list', method: 'GET', path: '/v1/profiles', classes: ['person', 'app', 'broker'], resource: 'profile', stage: 'chat' },
+    { name: 'profiles.get.118', method: 'GET', path: '/v1/profiles/:name', classes: ['person', 'app', 'broker'], resource: 'profile' },
+    { name: 'import.start', method: 'POST', path: '/v1/imports', classes: ['person', 'import'], resource: 'none' },
+    { name: 'import.upload-urls', method: 'POST', path: '/v1/imports/:run_id/upload-urls', classes: ['person', 'import'], resource: 'none' },
+    { name: 'import.store', method: 'PUT', path: '/v1/imports/:run_id/stores/:name', classes: ['person', 'import'], resource: 'none' },
+    { name: 'import.load', method: 'POST', path: '/v1/imports/:run_id/load', classes: ['person', 'import'], resource: 'none' },
+    { name: 'import.get', method: 'GET', path: '/v1/imports/:run_id', classes: ['person', 'import'], resource: 'none' },
+    { name: 'import.rollback', method: 'POST', path: '/v1/imports/:run_id/rollback', classes: ['person'], resource: 'none' },
+    { name: 'import.machine-credential', method: 'POST', path: '/v1/imports/:run_id/machine-credential', classes: ['person'], resource: 'none' },
+    { name: 'execution.import-unpacked', method: 'POST', path: '/v1/executions/:execution_id/import-unpacked', classes: ['broker'], resource: 'none' },
+    { name: 'execution.start', method: 'GET', path: '/v1/executions/:execution_id/start', classes: ['broker'], resource: 'none' },
+    { name: 'environment.git-credential', method: 'POST', path: '/v1/environments/:environment_id/git-credential', classes: ['broker'], resource: 'none' },
+    { name: 'node-outcomes.get.119', method: 'GET', path: '/v1/nodes/:id/outcome', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'node-outcomes.put.120', method: 'PUT', path: '/v1/nodes/:id/outcome-delivery', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'node-outcomes.get.121', method: 'GET', path: '/v1/nodes/:id/outcome-delivery', classes: ['person', 'broker', 'cron'], resource: 'node-read' },
+    { name: 'node-outcomes.delete.122', method: 'DELETE', path: '/v1/nodes/:id/outcome-delivery', classes: ['person', 'broker'], resource: 'node-write' },
+    { name: 'canvas.get.123', method: 'GET', path: '/v1/canvas/attention', classes: ['person', 'broker', 'forwarded'], resource: 'canvas-read' },
+    { name: 'canvas.post.124', method: 'POST', path: '/v1/canvas/attention/counts', classes: ['person', 'broker', 'forwarded'], resource: 'canvas-read' },
+    { name: 'canvas.post.125', method: 'POST', path: '/v1/canvas/history/search', classes: ['person', 'broker', 'forwarded'], resource: 'canvas-read' },
+    { name: 'canvas.post.126', method: 'POST', path: '/v1/canvas/history/grep', classes: ['person', 'broker', 'forwarded'], resource: 'canvas-read' },
+    { name: 'canvas.get.127', method: 'GET', path: '/v1/canvas/history/read', classes: ['person', 'broker', 'forwarded'], resource: 'canvas-read' },
+    { name: 'canvas.post.128', method: 'POST', path: '/v1/canvas/history/stats', classes: ['person', 'broker', 'forwarded'], resource: 'canvas-read' },
+    { name: 'canvas.get.129', method: 'GET', path: '/v1/canvas/snapshot', classes: ['person', 'broker', 'forwarded'], resource: 'canvas-read' },
+    { name: 'canvas.get.130', method: 'GET', path: '/v1/canvas/roster', classes: ['person', 'broker'], resource: 'canvas-read' },
+    { name: 'canvas.get.live-roots', method: 'GET', path: '/v1/canvas/live-roots', classes: ['person'], resource: 'canvas-read' },
+    { name: 'canvas.get.browse', method: 'GET', path: '/v1/canvas/browse', classes: ['person', 'broker'], resource: 'canvas-read' },
+    { name: 'canvas.get.analytics', method: 'GET', path: '/v1/canvas/analytics', classes: ['person', 'broker'], resource: 'canvas-read' },
+    { name: 'memory-reads.post', method: 'POST', path: '/v1/nodes/:id/memory-reads', classes: ['person', 'broker'], resource: 'node-own' },
+    { name: 'canvas.get.131', method: 'GET', path: '/v1/canvas/graph', classes: ['person', 'broker'], resource: 'canvas-read' },
+    { name: 'canvas.post.132', method: 'POST', path: '/v1/canvas/prune', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'daemon.post.133', method: 'POST', path: '/v1/daemon/restart', classes: ['person', 'broker'], resource: 'daemon-control' },
+    { name: 'daemon.post.134', method: 'POST', path: '/v1/daemon/migrate', classes: ['person', 'broker'], resource: 'daemon-control' },
+    { name: 'daemon.drain.start', method: 'POST', path: '/v1/daemon/drain', classes: ['person'], resource: 'daemon-control' },
+    { name: 'daemon.drain.end', method: 'DELETE', path: '/v1/daemon/drain', classes: ['person'], resource: 'daemon-control' },
+    { name: 'daemon.post.135', method: 'POST', path: '/v1/daemon/admit', classes: ['person', 'broker'], resource: 'daemon-control' },
+    { name: 'human.components.list', method: 'GET', path: '/v1/human/components', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'human-requests.post.136', method: 'POST', path: '/v1/human/requests', classes: ['person', 'broker'], resource: 'human', scope: 'crtr:act' },
+    { name: 'human-requests.get.137', method: 'GET', path: '/v1/human/requests/:request_id', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'human-requests.post.138', method: 'POST', path: '/v1/human/requests/:request_id/replace', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'human-requests.post.139', method: 'POST', path: '/v1/human/requests/:request_id/respond', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'human-requests.post.140', method: 'POST', path: '/v1/human/requests/:request_id/dismiss', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'human-requests.post.141', method: 'POST', path: '/v1/human/requests/:request_id/cancel', classes: ['person', 'broker'], resource: 'human' },
+    { name: 'focus.get.142', method: 'GET', path: '/v1/focuses', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'focus.post.143', method: 'POST', path: '/v1/focuses', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'focus.get.144', method: 'GET', path: '/v1/focuses/by-node', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'focus.get.145', method: 'GET', path: '/v1/focuses/by-pane', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'focus.patch.146', method: 'PATCH', path: '/v1/focuses/:focus_id', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'focus.delete.147', method: 'DELETE', path: '/v1/focuses/:focus_id', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'delivery.retry', method: 'POST', path: '/v1/deliveries/:delivery_id/retry', classes: ['person', 'broker'], resource: 'none' },
+    // Person only: an app (or a broker acting for one) never sets its own limits.
+    { name: 'limits.show', method: 'GET', path: '/v1/limits', classes: ['person'], resource: 'none' },
+    { name: 'limits.set', method: 'PUT', path: '/v1/limits/apps/:app', classes: ['person'], resource: 'none' },
+    { name: 'limits.remove', method: 'DELETE', path: '/v1/limits/apps/:app', classes: ['person'], resource: 'none' },
+    // The money ledger. `charges.list` is stage `objects` so the app listener serves it (an app sees only rows whose grantee it is).
+    { name: 'charges.list', method: 'GET', path: '/v1/charges', classes: ['person', 'app', 'broker'], resource: 'none', stage: 'objects' },
+    // Dollar limits, distinct from the per-app memory and disk limits above. Person only.
+    { name: 'spend_limits.list', method: 'GET', path: '/v1/spend-limits', classes: ['person'], resource: 'none' },
+    { name: 'spend_limits.set', method: 'PUT', path: '/v1/spend-limits/:id', classes: ['person'], resource: 'none' },
+    { name: 'spend_limits.remove', method: 'DELETE', path: '/v1/spend-limits/:id', classes: ['person'], resource: 'none' },
+    { name: 'space.list', method: 'GET', path: '/v1/spaces', classes: ['person', 'broker'], resource: 'none' },
+    { name: 'kinds.list', method: 'GET', path: '/v1/kinds', classes: ['person', 'app', 'broker'], resource: 'none' },
+    { name: 'grant.get', method: 'GET', path: '/v1/grant', classes: ['app'], resource: 'none', stage: 'v0.5' },
+    { name: 'exec', method: 'POST', path: '/v1/exec', classes: ['app'], scope: 'crtr:act', resource: 'none', stage: 'v0.5' },
+    { name: 'usage.get', method: 'GET', path: '/v1/usage', classes: ['person', 'app', 'broker'], resource: 'none', stage: 'v1' },
+    { name: 'llm', method: 'POST', path: '/v1/llm', classes: ['app', 'person', 'broker'], scope: 'crtr:llm', resource: 'none', stage: 'v1' },
+    { name: 'structured-request.create', method: 'POST', path: '/v1/structured-requests', classes: ['person', 'app', 'broker'], scope: 'crtr:act', resource: 'none' },
+    { name: 'structured-request.get', method: 'GET', path: '/v1/structured-requests/:request_id', classes: ['person', 'app', 'broker'], resource: 'none' },
+    { name: 'structured-request.cancel', method: 'POST', path: '/v1/structured-requests/:request_id/cancel', classes: ['person', 'app', 'broker'], scope: 'crtr:act', resource: 'none' },
+    { name: 'run.start', method: 'POST', path: '/v1/runs', classes: ['app'], scope: 'crtr:act', resource: 'none', stage: 'v0.5', idempotency: '24h' },
+    { name: 'run.list', method: 'GET', path: '/v1/runs', classes: ['app', 'person', 'broker', 'cron'], resource: 'run', stage: 'v0.5' },
+    { name: 'run.get', method: 'GET', path: '/v1/runs/:run_id', classes: ['app', 'person', 'broker', 'cron'], resource: 'run', stage: 'v0.5' },
+    { name: 'run.message', method: 'POST', path: '/v1/runs/:run_id/messages', classes: ['app', 'person', 'broker', 'cron'], scope: 'crtr:act', resource: 'run', stage: 'v0.5', idempotency: '24h' },
+    { name: 'run.events', method: 'GET', path: '/v1/runs/:run_id/events', classes: ['app', 'person', 'broker', 'cron'], resource: 'run', stage: 'v0.5', stream: true },
+    { name: 'run.interrupt', method: 'POST', path: '/v1/runs/:run_id/interrupt', classes: ['app', 'person', 'broker'], resource: 'run', stage: 'v0.5' },
+    { name: 'run.cancel', method: 'POST', path: '/v1/runs/:run_id/cancel', classes: ['app', 'person', 'broker'], resource: 'run', stage: 'v0.5' },
+    { name: 'run.delete', method: 'DELETE', path: '/v1/runs/:run_id', classes: ['app', 'person', 'broker'], resource: 'run', stage: 'v0.5' },
+    { name: 'run.rename', method: 'POST', path: '/v1/runs/:run_id/rename', classes: ['app'], resource: 'run', stage: 'chat' },
+    { name: 'question.get', method: 'GET', path: '/v1/questions/:question_id', classes: ['app'], resource: 'none', stage: 'chat' },
+    { name: 'question.answer', method: 'POST', path: '/v1/questions/:question_id/answer', classes: ['app'], resource: 'none', stage: 'chat' },
+    { name: 'question.cancel', method: 'POST', path: '/v1/questions/:question_id/cancel', classes: ['app'], resource: 'none', stage: 'chat' },
+    { name: 'trace.get', method: 'GET', path: '/v1/runs/:run_id/trace', classes: ['app', 'person', 'broker'], resource: 'run', stage: 'v0.5' },
+    { name: 'upload.create', method: 'POST', path: '/v1/uploads', classes: ['app'], scope: 'crtr:act', resource: 'none', stage: 'file-transfer' },
+    { name: 'attachment.link', method: 'GET', path: '/v1/attachments/link', classes: ['app'], resource: 'none', stage: 'file-transfer' },
+    { name: 'file.download', method: 'GET', path: '/v1/files/download', classes: ['app'], resource: 'none', stage: 'file-transfer', stream: 'bytes' },
+    { name: 'share.create', method: 'POST', path: '/v1/shares', classes: ['app'], resource: 'none', stage: 'file-transfer' },
+    { name: 'share.list', method: 'GET', path: '/v1/shares', classes: ['app'], resource: 'none', stage: 'file-transfer' },
+    { name: 'share.delete', method: 'DELETE', path: '/v1/shares/:share_id', classes: ['app'], resource: 'none', stage: 'file-transfer' },
+    // M13: the person's memory (`store: "user"` only). No scope: the person space's read rule is the one filter.
+    { name: 'memory.list', method: 'GET', path: '/v1/memory', classes: ['person', 'app', 'broker'], resource: 'none', stage: 'm13' },
+    { name: 'memory.get', method: 'GET', path: '/v1/memory/document', classes: ['person', 'app', 'broker'], resource: 'none', stage: 'm13' },
+    // Contract 3. No static scope: the covering scope is `<provider>:<group>` for the
+    // tool's group, so the handler checks it (handlers/providers.ts). No `user` class
+    // yet (contract 2 owns adding it). v0 (no issuer) answers `not_found`.
+    { name: 'audit.list', method: 'GET', path: '/v1/audit', classes: ['person', 'app'], resource: 'none', stage: 'v1' },
+    { name: 'provider.tools', method: 'GET', path: '/v1/providers/tools', classes: ['person', 'app', 'broker', 'cron'], resource: 'none', stage: 'v1' },
+    { name: 'provider.tools', method: 'GET', path: '/v1/providers/:provider/tools', classes: ['person', 'app', 'broker', 'cron'], resource: 'none', stage: 'v1' },
+    { name: 'provider.call', method: 'POST', path: '/v1/provider/call', classes: ['person', 'app', 'broker', 'cron'], resource: 'none', stage: 'v1' },
+    // Authenticated by the directory's own signed notice token, not an access token.
+    // The app listener handles this row before the class/scope/resource check: no
+    // access-token resolver yields a `directory` caller, so the notice verifier is
+    // this route's only admission (runtime spec §15).
+    // Peer-only rows (spec-machines §15): a machine token with no envelope. Their handlers are `src/daemon/peer/handlers.ts`;
+    // C4 and C5 replace the `501` bodies. No person, app or forwarded caller reaches them.
+    { name: 'peer.events', method: 'POST', path: '/v1/peer/events', classes: ['machine'], resource: 'none' },
+    { name: 'peer.outbox.claim', method: 'POST', path: '/v1/peer/outbox/claim', classes: ['machine'], resource: 'none' },
+    { name: 'peer.outbox.ack', method: 'POST', path: '/v1/peer/outbox/ack', classes: ['machine'], resource: 'none' },
+    { name: 'peer.locate', method: 'POST', path: '/v1/peer/locate', classes: ['machine'], resource: 'none' },
+    { name: 'runtime.sync-notice', method: 'POST', path: '/v1/runtime/sync-notice', classes: ['directory'], resource: 'none', stage: 'v1' },
+    // Authenticated by a directory token with `purpose: vendor_status`, handled before
+    // the access-token check like the sync notice. App listener only.
+    { name: 'runtime.vendor-status', method: 'GET', path: '/v1/runtime/vendor-status', classes: ['directory'], resource: 'none', stage: 'v1' },
+    // Authenticated by a directory token with `purpose: vendor_account_remove`; body `{ vendor, account_id }`, answers the vendor status after the removal.
+    { name: 'runtime.vendor-account-remove', method: 'POST', path: '/v1/runtime/vendor-account-remove', classes: ['directory'], resource: 'none', stage: 'v1' },
+];
+export function operationFor(method, path) {
+    return OPERATIONS.find((row) => row.method === method.toUpperCase() && row.path === path);
+}

package/dist/daemon/api/principal.d.ts

@@ -0,0 +1,65 @@
+import { JwksCache, type CallToken, type Scope } from '@north-light/identity';
+import type { ActiveGrant, GrantDependencies, GrantScope } from '../../core/grants/mirror.js';
+import { type NoticeTicket } from './sync-notice.js';
+export interface AppPrincipal {
+    sub: string;
+    grantee: string;
+    client_id: string;
+    grant: string;
+    rev: number;
+    resolved: Scope[];
+    resolved_scopes: GrantScope[];
+    spend_cap: number | null;
+    dependencies: GrantDependencies;
+    exp: number;
+}
+/** A verified vendor sign-in handoff (directory spec, Interfaces → Runtime). */
+export interface VendorHandoff {
+    sub: string;
+    jti: string;
+    exp: number;
+}
+export declare class AppPrincipalResolver {
+    readonly issuer: string;
+    readonly audience: string;
+    private readonly syncGrants;
+    private readonly cache;
+    private ready;
+    private timer;
+    constructor(issuer: string, audience: string, syncGrants: (options?: {
+        fresh?: boolean;
+    }) => Promise<void>, jwksUrl?: string);
+    private load;
+    isReady(): boolean;
+    /** The directory key set, for the peer ingress's call-token check. */
+    get jwks(): JwksCache;
+    close(): void;
+    private readonly ledger;
+    /** A directory sync notice authorizes one grant sync and nothing else.
+     *  Returns null for a replay of a notice already accepted. */
+    verifySyncNotice(authorization: string | undefined): Promise<NoticeTicket | null>;
+    /** Verify a directory `vendor_sign_in` handoff: ES256 signature against the
+     *  JWKS mirror, `iss`, `aud`, `exp`, `purpose`, and that `jti` and `sub` are
+     *  present (runtime spec §7 "Vendor sign-in page", RT-LLM-52). The owner and
+     *  single-use `jti` checks are the caller's. Every failure is 401. */
+    verifyHandoff(token: string | undefined): Promise<VendorHandoff>;
+    /** Verify a directory read token (`Authorization: Bearer <ES256 JWT>`): signature
+     *  against the JWKS mirror, `iss`, `aud`, `exp`, and that `purpose` is exactly
+     *  the one this route accepts. It names no owner and is not single-use, so
+     *  there is no `sub` or `jti` requirement. Every failure is 401. */
+    verifyDirectoryRead(authorization: string | undefined, purpose: string): Promise<void>;
+    /** Verify a bearer once as a call token: ES256 signature against the JWKS mirror and every check of
+     *  `verifyCallToken` (a token with no `act` is refused). The caller routes on `chain[0]`. Authorizes nothing.
+     *  503 before the mirror loads; every other failure is 401. */
+    verifyCall(authorization: string | undefined): Promise<CallToken>;
+    resolve(authorization: string | undefined, scope?: string): Promise<AppPrincipal>;
+    /** The caller an already-verified app token names. Grantee, grant and rev come from the token's app link
+     *  (`chain[0]`, which must be the whole chain); the mirror is made to cover the link's `rev` and the grant
+     *  is read now (`coverGrant`). A token whose presenter is not an app link holding a grant is refused 401. */
+    resolveVerified(token: CallToken, scope?: string): Promise<AppPrincipal>;
+}
+/** The mirrored grant a caller's token names, read now, when it is still the
+ *  caller's: active, the same `sub` and `grantee`, and not past `expires_at`.
+ *  Otherwise 401 `grant_revoked`. `resolve()` and every later re-read during a
+ *  request (a `grant.get` long-poll waking) apply this one check. */
+export declare function callerGrant(caller: Pick<AppPrincipal, 'grant' | 'sub' | 'grantee'>): Promise<ActiveGrant>;

package/dist/daemon/api/principal.js

@@ -0,0 +1,143 @@
+import { covers, JwksCache, MissingRevClaimError, verifyCallToken } from '@north-light/identity';
+import { createLocalJWKSet, decodeProtectedHeader, jwtVerify } from 'jose';
+import { callerGrantOf, coverGrant } from '../../core/grants/cover.js';
+import { RunError } from '../../core/runs/operations.js';
+import { NoticeLedger } from './sync-notice.js';
+export class AppPrincipalResolver {
+    issuer;
+    audience;
+    syncGrants;
+    cache;
+    ready = false;
+    timer;
+    constructor(issuer, audience, syncGrants, jwksUrl) {
+        this.issuer = issuer;
+        this.audience = audience;
+        this.syncGrants = syncGrants;
+        this.cache = new JwksCache(issuer, fetch, jwksUrl);
+        void this.load();
+        this.timer = setInterval(() => { if (!this.ready)
+            void this.load(); }, 5000);
+        this.timer.unref();
+    }
+    async load() {
+        try {
+            await this.cache.load();
+            this.ready = true;
+        }
+        catch { /* Not ready; the next interval tries again. */ }
+    }
+    isReady() { return this.ready; }
+    /** The directory key set, for the peer ingress's call-token check. */
+    get jwks() { return this.cache; }
+    close() { if (this.timer)
+        clearInterval(this.timer); }
+    ledger = new NoticeLedger();
+    /** A directory sync notice authorizes one grant sync and nothing else.
+     *  Returns null for a replay of a notice already accepted. */
+    async verifySyncNotice(authorization) {
+        if (!this.ready)
+            throw new RunError(503, 'runtime_starting', 'runtime_starting');
+        return this.ledger.accept(authorization, this.cache, this.issuer, this.audience);
+    }
+    /** Verify a directory `vendor_sign_in` handoff: ES256 signature against the
+     *  JWKS mirror, `iss`, `aud`, `exp`, `purpose`, and that `jti` and `sub` are
+     *  present (runtime spec §7 "Vendor sign-in page", RT-LLM-52). The owner and
+     *  single-use `jti` checks are the caller's. Every failure is 401. */
+    async verifyHandoff(token) {
+        if (!this.ready)
+            throw new RunError(503, 'runtime_starting', 'runtime_starting');
+        const refuse = () => new RunError(401, 'unauthorized', 'invalid vendor sign-in handoff');
+        if (!token)
+            throw refuse();
+        let payload;
+        try {
+            const header = decodeProtectedHeader(token);
+            if (header.alg !== 'ES256')
+                throw refuse();
+            const keys = await this.cache.forKid(header.kid);
+            ({ payload } = await jwtVerify(token, createLocalJWKSet(keys), { issuer: this.issuer, audience: this.audience, algorithms: ['ES256'], requiredClaims: ['exp', 'jti', 'sub'] }));
+        }
+        catch {
+            throw refuse();
+        }
+        const { sub, jti, exp, purpose, aud } = payload;
+        if (purpose !== 'vendor_sign_in' || aud !== this.audience || typeof sub !== 'string' || typeof jti !== 'string' || jti === '' || typeof exp !== 'number')
+            throw refuse();
+        return { sub, jti, exp };
+    }
+    /** Verify a directory read token (`Authorization: Bearer <ES256 JWT>`): signature
+     *  against the JWKS mirror, `iss`, `aud`, `exp`, and that `purpose` is exactly
+     *  the one this route accepts. It names no owner and is not single-use, so
+     *  there is no `sub` or `jti` requirement. Every failure is 401. */
+    async verifyDirectoryRead(authorization, purpose) {
+        if (!this.ready)
+            throw new RunError(503, 'runtime_starting', 'runtime_starting');
+        const refuse = () => new RunError(401, 'unauthorized', 'invalid directory token');
+        if (!authorization?.startsWith('Bearer ') || authorization.length <= 7)
+            throw refuse();
+        const token = authorization.slice(7);
+        let payload;
+        try {
+            const header = decodeProtectedHeader(token);
+            if (header.alg !== 'ES256')
+                throw refuse();
+            const keys = await this.cache.forKid(header.kid);
+            ({ payload } = await jwtVerify(token, createLocalJWKSet(keys), { issuer: this.issuer, audience: this.audience, algorithms: ['ES256'], requiredClaims: ['exp'] }));
+        }
+        catch {
+            throw refuse();
+        }
+        if (payload['purpose'] !== purpose || payload['aud'] !== this.audience)
+            throw refuse();
+    }
+    /** Verify a bearer once as a call token: ES256 signature against the JWKS mirror and every check of
+     *  `verifyCallToken` (a token with no `act` is refused). The caller routes on `chain[0]`. Authorizes nothing.
+     *  503 before the mirror loads; every other failure is 401. */
+    async verifyCall(authorization) {
+        if (!this.ready)
+            throw new RunError(503, 'runtime_starting', 'runtime_starting');
+        if (!authorization?.startsWith('Bearer ') || authorization.length <= 7)
+            throw new RunError(401, 'unauthorized', 'a directory access token is required');
+        const token = authorization.slice(7);
+        try {
+            // The directory signs these with ES256 only; RS256 is accepted by the shared verifier for provider tokens, not here.
+            if (decodeProtectedHeader(token).alg !== 'ES256')
+                throw new Error('Invalid call token header');
+            return await verifyCallToken({ token, jwks: this.cache, issuer: this.issuer, audience: this.audience });
+        }
+        catch (error) {
+            if (error instanceof MissingRevClaimError)
+                throw new RunError(401, 'unauthorized', error.message);
+            throw new RunError(401, 'unauthorized', 'invalid directory access token');
+        }
+    }
+    async resolve(authorization, scope) {
+        return this.resolveVerified(await this.verifyCall(authorization), scope);
+    }
+    /** The caller an already-verified app token names. Grantee, grant and rev come from the token's app link
+     *  (`chain[0]`, which must be the whole chain); the mirror is made to cover the link's `rev` and the grant
+     *  is read now (`coverGrant`). A token whose presenter is not an app link holding a grant is refused 401. */
+    async resolveVerified(token, scope) {
+        const link = token.chain[0];
+        const claims = token.claims;
+        if (token.chain.length !== 1 || !link || !link.sub.startsWith('app:') || link.grant === undefined || link.rev === undefined || !/^[A-Za-z0-9_-]{1,64}$/.test(claims.client_id) ||
+            (claims.grantee !== undefined && claims.grantee !== link.sub) || (claims['rev'] !== undefined && claims['rev'] !== link.rev)) {
+            throw new RunError(401, 'unauthorized', 'invalid directory access token');
+        }
+        const grant = await coverGrant(link.grant, link.rev, token.sub, link.sub, this.syncGrants);
+        if (scope && !grant.resolved.some((held) => covers(held, scope))) {
+            throw new RunError(403, 'scope_missing', `missing scope ${scope}`, undefined, undefined, scope);
+        }
+        return { sub: token.sub, grantee: link.sub, client_id: claims.client_id, grant: link.grant,
+            rev: grant.rev, resolved: grant.resolved, resolved_scopes: grant.resolved_scopes,
+            spend_cap: grant.spend_cap, dependencies: grant.dependencies ?? {}, exp: claims.exp };
+    }
+}
+/** The mirrored grant a caller's token names, read now, when it is still the
+ *  caller's: active, the same `sub` and `grantee`, and not past `expires_at`.
+ *  Otherwise 401 `grant_revoked`. `resolve()` and every later re-read during a
+ *  request (a `grant.get` long-poll waking) apply this one check. */
+export async function callerGrant(caller) {
+    return await callerGrantOf(caller.grant, caller.sub, caller.grantee);
+}