@once-agent/sdk 0.1.4 → 0.1.5

package/dist-cjs/runtime/identity.js

@@ -0,0 +1,194 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveHttpOperationIdentity = resolveHttpOperationIdentity;
+const node_crypto_1 = require("node:crypto");
+const BODY_FIELDS = [
+    {
+        key: "once_operation_id",
+        source: "body:once_operation_id"
+    },
+    {
+        key: "onceOperationId",
+        source: "body:onceOperationId"
+    },
+    {
+        key: "operation_id",
+        source: "body:operation_id"
+    },
+    {
+        key: "operationId",
+        source: "body:operationId"
+    },
+    {
+        key: "idempotency_key",
+        source: "body:idempotency_key"
+    },
+    {
+        key: "idempotencyKey",
+        source: "body:idempotencyKey"
+    }
+];
+function clean(value) {
+    if (typeof value !== "string") {
+        return null;
+    }
+    const result = value.trim();
+    return result.length > 0
+        ? result
+        : null;
+}
+function normalizeMethod(value) {
+    return String(value || "")
+        .trim()
+        .toUpperCase();
+}
+function normalizeUrl(value) {
+    try {
+        const url = new URL(value);
+        if (url.protocol !== "https:" &&
+            url.protocol !== "http:") {
+            return null;
+        }
+        url.hash = "";
+        const params = Array.from(url.searchParams.entries()).sort(([ak, av], [bk, bv]) => ak.localeCompare(bk) ||
+            av.localeCompare(bv));
+        url.search = "";
+        for (const [key, item] of params) {
+            url.searchParams.append(key, item);
+        }
+        return url.toString();
+    }
+    catch {
+        return null;
+    }
+}
+function headerValue(headers, wanted) {
+    if (!headers) {
+        return null;
+    }
+    for (const [key, value] of Object.entries(headers)) {
+        if (key.toLowerCase() !==
+            wanted.toLowerCase()) {
+            continue;
+        }
+        if (Array.isArray(value)) {
+            const valid = value
+                .map(clean)
+                .filter((item) => item !== null);
+            return valid.length === 1
+                ? valid[0]
+                : null;
+        }
+        return clean(value);
+    }
+    return null;
+}
+function bodyObject(body) {
+    if (body === null ||
+        body === undefined) {
+        return null;
+    }
+    if (typeof body === "string") {
+        try {
+            const parsed = JSON.parse(body);
+            if (parsed &&
+                typeof parsed === "object" &&
+                !Array.isArray(parsed)) {
+                return parsed;
+            }
+            return null;
+        }
+        catch {
+            return null;
+        }
+    }
+    if (typeof body === "object" &&
+        !Array.isArray(body)) {
+        return body;
+    }
+    return null;
+}
+function candidates(input) {
+    const result = [];
+    const explicit = clean(input.operationId);
+    if (explicit) {
+        result.push({
+            source: "explicit",
+            value: explicit
+        });
+    }
+    const normalHeader = headerValue(input.headers, "idempotency-key");
+    if (normalHeader) {
+        result.push({
+            source: "header:idempotency-key",
+            value: normalHeader
+        });
+    }
+    const alternateHeader = headerValue(input.headers, "x-idempotency-key");
+    if (alternateHeader) {
+        result.push({
+            source: "header:x-idempotency-key",
+            value: alternateHeader
+        });
+    }
+    const body = bodyObject(input.body);
+    if (body) {
+        for (const field of BODY_FIELDS) {
+            const value = clean(body[field.key]);
+            if (value) {
+                result.push({
+                    source: field.source,
+                    value
+                });
+            }
+        }
+    }
+    return result;
+}
+function buildOperationId(method, url, identity) {
+    const hash = (0, node_crypto_1.createHash)("sha256");
+    hash.update("once-runtime-http-id-v1\u0000", "utf8");
+    for (const value of [method, url, identity]) {
+        const bytes = Buffer.from(value, "utf8");
+        const length = Buffer.allocUnsafe(4);
+        length.writeUInt32BE(bytes.length, 0);
+        hash.update(length);
+        hash.update(bytes);
+    }
+    return ("http:" +
+        hash
+            .digest("hex")
+            .slice(0, 32));
+}
+function resolveHttpOperationIdentity(input) {
+    const method = normalizeMethod(input.method);
+    const url = normalizeUrl(input.url);
+    if (!url) {
+        return {
+            status: "REQUIRED",
+            reason: "A valid HTTP(S) destination is required."
+        };
+    }
+    const found = candidates(input);
+    if (found.length === 0) {
+        return {
+            status: "REQUIRED",
+            reason: "No trustworthy stable identity carrier was found. Runtime refuses to guess."
+        };
+    }
+    const values = Array.from(new Set(found.map(item => item.value)));
+    if (values.length !== 1) {
+        return {
+            status: "CONFLICT",
+            sources: found.map(item => item.source),
+            reason: "Stable identity carriers disagree. Runtime refuses ambiguous identity."
+        };
+    }
+    return {
+        status: "FOUND",
+        operationId: buildOperationId(method, url, values[0]),
+        source: found[0].source,
+        reason: "Stable identity found and deterministically bound to this HTTP operation."
+    };
+}
+//# sourceMappingURL=identity.js.map

package/dist-cjs/runtime/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/runtime/identity.ts"],"names":[],"mappings":";;AAuWA,oEAmEC;AA1aD,6CAEqB;AA8CrB,MAAM,WAAW,GAGZ;IACH;QACE,GAAG,EAAE,mBAAmB;QACxB,MAAM,EAAE,wBAAwB;KACjC;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,GAAG,EAAE,cAAc;QACnB,MAAM,EAAE,mBAAmB;KAC5B;IACD;QACE,GAAG,EAAE,aAAa;QAClB,MAAM,EAAE,kBAAkB;KAC3B;IACD;QACE,GAAG,EAAE,iBAAiB;QACtB,MAAM,EAAE,sBAAsB;KAC/B;IACD;QACE,GAAG,EAAE,gBAAgB;QACrB,MAAM,EAAE,qBAAqB;KAC9B;CACF,CAAC;AAEF,SAAS,KAAK,CACZ,KAAc;IAGd,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAE5B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC;QACtB,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,eAAe,CACtB,KAAa;IAGb,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,IAAI,EAAE;SACN,WAAW,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CACnB,KAAa;IAGb,IAAI,CAAC;QAEH,MAAM,GAAG,GACP,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAEjB,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;YACzB,GAAG,CAAC,QAAQ,KAAK,OAAO,EACxB,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QAEd,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,CACR,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAC3B,CAAC,IAAI,CACJ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CACrB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;YACpB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CACvB,CAAC;QAEJ,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;QAEhB,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,EAAE,CAAC;YACjC,GAAG,CAAC,YAAY,CAAC,MAAM,CACrB,GAAG,EACH,IAAI,CACL,CAAC;QACJ,CAAC;QAED,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IAExB,CAAC;IAAC,MAAM,CAAC;QAEP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAClB,OACiC,EACjC,MAAc;IAGd,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KACE,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IACf,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAC1B,CAAC;QAED,IACE,GAAG,CAAC,WAAW,EAAE;YACjB,MAAM,CAAC,WAAW,EAAE,EACpB,CAAC;YACD,SAAS;QACX,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAEzB,MAAM,KAAK,GACT,KAAK;iBACF,GAAG,CAAC,KAAK,CAAC;iBACV,MAAM,CACL,CACE,IAAI,EACY,EAAE,CAClB,IAAI,KAAK,IAAI,CAChB,CAAC;YAEN,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC;gBACvB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;gBACV,CAAC,CAAC,IAAI,CAAC;QACX,CAAC;QAED,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,IAAa;IAGb,IACE,IAAI,KAAK,IAAI;QACb,IAAI,KAAK,SAAS,EAClB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAE7B,IAAI,CAAC;YAEH,MAAM,MAAM,GACV,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAEnB,IACE,MAAM;gBACN,OAAO,MAAM,KAAK,QAAQ;gBAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EACtB,CAAC;gBACD,OAAO,MAGN,CAAC;YACJ,CAAC;YAED,OAAO,IAAI,CAAC;QAEd,CAAC;QAAC,MAAM,CAAC;YAEP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EACpB,CAAC;QACD,OAAO,IAGN,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CACjB,KAA2B;IAG3B,MAAM,MAAM,GAAgB,EAAE,CAAC;IAE/B,MAAM,QAAQ,GACZ,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAE3B,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,YAAY,GAChB,WAAW,CACT,KAAK,CAAC,OAAO,EACb,iBAAiB,CAClB,CAAC;IAEJ,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EACJ,wBAAwB;YAC1B,KAAK,EACH,YAAY;SACf,CAAC,CAAC;IACL,CAAC;IAED,MAAM,eAAe,GACnB,WAAW,CACT,KAAK,CAAC,OAAO,EACb,mBAAmB,CACpB,CAAC;IAEJ,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC;YACV,MAAM,EACJ,0BAA0B;YAC5B,KAAK,EACH,eAAe;SAClB,CAAC,CAAC;IACL,CAAC;IAED,MAAM,IAAI,GACR,UAAU,CACR,KAAK,CAAC,IAAI,CACX,CAAC;IAEJ,IAAI,IAAI,EAAE,CAAC;QAET,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;YAEhC,MAAM,KAAK,GACT,KAAK,CACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAChB,CAAC;YAEJ,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,CAAC,IAAI,CAAC;oBACV,MAAM,EACJ,KAAK,CAAC,MAAM;oBACd,KAAK;iBACN,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAc,EACd,GAAW,EACX,QAAgB;IAGhB,MAAM,IAAI,GACR,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC;IAEvB,IAAI,CAAC,MAAM,CACT,+BAA+B,EAC/B,MAAM,CACP,CAAC;IAEF,KACE,MAAM,KAAK,IACR,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,EAC1B,CAAC;QAED,MAAM,KAAK,GACT,MAAM,CAAC,IAAI,CACT,KAAK,EACL,MAAM,CACP,CAAC;QAEJ,MAAM,MAAM,GACV,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QAExB,MAAM,CAAC,aAAa,CAClB,KAAK,CAAC,MAAM,EACZ,CAAC,CACF,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,OAAO,CACL,OAAO;QACP,IAAI;aACD,MAAM,CAAC,KAAK,CAAC;aACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAChB,CAAC;AACJ,CAAC;AAED,SAAgB,4BAA4B,CAC1C,KAA2B;IAG3B,MAAM,MAAM,GACV,eAAe,CACb,KAAK,CAAC,MAAM,CACb,CAAC;IAEJ,MAAM,GAAG,GACP,YAAY,CACV,KAAK,CAAC,GAAG,CACV,CAAC;IAEJ,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EACJ,0CAA0C;SAC7C,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GACT,UAAU,CAAC,KAAK,CAAC,CAAC;IAEpB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,MAAM,EACJ,6EAA6E;SAChF,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GACV,KAAK,CAAC,IAAI,CACR,IAAI,GAAG,CACL,KAAK,CAAC,GAAG,CACP,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CACnB,CACF,CACF,CAAC;IAEJ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,OAAO,EACL,KAAK,CAAC,GAAG,CACP,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CACpB;YACH,MAAM,EACJ,wEAAwE;SAC3E,CAAC;IACJ,CAAC;IAED,OAAO;QACL,MAAM,EAAE,OAAO;QACf,WAAW,EACT,gBAAgB,CACd,MAAM,EACN,GAAG,EACH,MAAM,CAAC,CAAC,CAAC,CACV;QACH,MAAM,EACJ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM;QACjB,MAAM,EACJ,2EAA2E;KAC9E,CAAC;AACJ,CAAC"}

package/dist-cjs/runtime/pipeline.js

@@ -0,0 +1,124 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prepareHttpExecution = prepareHttpExecution;
+const decision_js_1 = require("./decision.js");
+const identity_js_1 = require("./identity.js");
+function prepareHttpExecution(request) {
+    const identity = (0, identity_js_1.resolveHttpOperationIdentity)({
+        method: request.method,
+        url: request.url,
+        operationId: request.operationId,
+        headers: request.headers,
+        body: request.body
+    });
+    const resolvedOperationId = identity.status === "FOUND"
+        ? identity.operationId
+        : undefined;
+    const gate = (0, decision_js_1.decideHttpExecution)({
+        surface: "http",
+        method: request.method,
+        url: request.url,
+        provider: request.provider,
+        operationId: resolvedOperationId
+    });
+    /*
+     * Safe reads pass normally and do not require
+     * stable operation identity.
+     */
+    if (gate.decision === "PASS") {
+        return {
+            decision: gate.decision,
+            code: gate.code,
+            consequential: gate.consequential,
+            method: gate.method,
+            reason: gate.reason,
+            identityStatus: identity.status
+        };
+    }
+    /*
+     * Structural failures take precedence.
+     */
+    if (gate.code === "INVALID_URL" ||
+        gate.code === "UNSUPPORTED_PROTOCOL" ||
+        gate.code === "UNSUPPORTED_HTTP_METHOD") {
+        return {
+            decision: gate.decision,
+            code: gate.code,
+            consequential: gate.consequential,
+            method: gate.method,
+            reason: gate.reason,
+            identityStatus: identity.status
+        };
+    }
+    /*
+     * Never choose between conflicting identities.
+     */
+    if (identity.status === "CONFLICT") {
+        return {
+            decision: "BLOCK",
+            code: "IDENTITY_CONFLICT",
+            consequential: true,
+            method: gate.method,
+            reason: identity.reason,
+            identityStatus: identity.status
+        };
+    }
+    /*
+     * Provider is required for protected execution.
+     */
+    if (gate.code === "MISSING_PROVIDER") {
+        return {
+            decision: "BLOCK",
+            code: "MISSING_PROVIDER",
+            consequential: true,
+            method: gate.method,
+            reason: gate.reason,
+            identityStatus: identity.status,
+            ...(identity.status === "FOUND"
+                ? {
+                    operationId: identity.operationId,
+                    identitySource: identity.source
+                }
+                : {})
+        };
+    }
+    /*
+     * Consequential writes without trustworthy
+     * stable identity fail closed.
+     */
+    if (identity.status === "REQUIRED") {
+        return {
+            decision: "BLOCK",
+            code: "IDENTITY_REQUIRED",
+            consequential: true,
+            method: gate.method,
+            reason: identity.reason,
+            identityStatus: identity.status
+        };
+    }
+    /*
+     * FOUND identity + provider must result in
+     * protected execution.
+     */
+    if (gate.decision !== "PROTECT") {
+        return {
+            decision: "BLOCK",
+            code: gate.code,
+            consequential: true,
+            method: gate.method,
+            reason: "Runtime reached an unexpected execution state and failed closed.",
+            identityStatus: identity.status
+        };
+    }
+    return {
+        decision: "PROTECT",
+        code: gate.code,
+        consequential: true,
+        method: gate.method,
+        reason: gate.reason,
+        operationId: identity.operationId,
+        identitySource: identity.source,
+        identityStatus: identity.status
+    };
+}
+//# sourceMappingURL=pipeline.js.map

package/dist-cjs/runtime/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/runtime/pipeline.ts"],"names":[],"mappings":";;AA8CA,oDA+PC;AA7SD,+CAIuB;AAEvB,+CAIuB;AAoCvB,SAAgB,oBAAoB,CAClC,OAA+B;IAG/B,MAAM,QAAQ,GACZ,IAAA,0CAA4B,EAAC;QAC3B,MAAM,EACJ,OAAO,CAAC,MAAM;QAEhB,GAAG,EACD,OAAO,CAAC,GAAG;QAEb,WAAW,EACT,OAAO,CAAC,WAAW;QAErB,OAAO,EACL,OAAO,CAAC,OAAO;QAEjB,IAAI,EACF,OAAO,CAAC,IAAI;KACf,CAAC,CAAC;IAEL,MAAM,mBAAmB,GACvB,QAAQ,CAAC,MAAM,KAAK,OAAO;QACzB,CAAC,CAAC,QAAQ,CAAC,WAAW;QACtB,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,IAAI,GACR,IAAA,iCAAmB,EAAC;QAClB,OAAO,EACL,MAAM;QAER,MAAM,EACJ,OAAO,CAAC,MAAM;QAEhB,GAAG,EACD,OAAO,CAAC,GAAG;QAEb,QAAQ,EACN,OAAO,CAAC,QAAQ;QAElB,WAAW,EACT,mBAAmB;KACtB,CAAC,CAAC;IAEL;;;OAGG;IACH,IACE,IAAI,CAAC,QAAQ,KAAK,MAAM,EACxB,CAAC;QAED,OAAO;YACL,QAAQ,EACN,IAAI,CAAC,QAAQ;YAEf,IAAI,EACF,IAAI,CAAC,IAAI;YAEX,aAAa,EACX,IAAI,CAAC,aAAa;YAEpB,MAAM,EACJ,IAAI,CAAC,MAAM;YAEb,MAAM,EACJ,IAAI,CAAC,MAAM;YAEb,cAAc,EACZ,QAAQ,CAAC,MAAM;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IACE,IAAI,CAAC,IAAI,KAAK,aAAa;QAC3B,IAAI,CAAC,IAAI,KAAK,sBAAsB;QACpC,IAAI,CAAC,IAAI,KAAK,yBAAyB,EACvC,CAAC;QAED,OAAO;YACL,QAAQ,EACN,IAAI,CAAC,QAAQ;YAEf,IAAI,EACF,IAAI,CAAC,IAAI;YAEX,aAAa,EACX,IAAI,CAAC,aAAa;YAEpB,MAAM,EACJ,IAAI,CAAC,MAAM;YAEb,MAAM,EACJ,IAAI,CAAC,MAAM;YAEb,cAAc,EACZ,QAAQ,CAAC,MAAM;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IACE,QAAQ,CAAC,MAAM,KAAK,UAAU,EAC9B,CAAC;QAED,OAAO;YACL,QAAQ,EACN,OAAO;YAET,IAAI,EACF,mBAAmB;YAErB,aAAa,EACX,IAAI;YAEN,MAAM,EACJ,IAAI,CAAC,MAAM;YAEb,MAAM,EACJ,QAAQ,CAAC,MAAM;YAEjB,cAAc,EACZ,QAAQ,CAAC,MAAM;SAClB,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,IACE,IAAI,CAAC,IAAI,KAAK,kBAAkB,EAChC,CAAC;QAED,OAAO;YACL,QAAQ,EACN,OAAO;YAET,IAAI,EACF,kBAAkB;YAEpB,aAAa,EACX,IAAI;YAEN,MAAM,EACJ,IAAI,CAAC,MAAM;YAEb,MAAM,EACJ,IAAI,CAAC,MAAM;YAEb,cAAc,EACZ,QAAQ,CAAC,MAAM;YAEjB,GAAG,CACD,QAAQ,CAAC,MAAM,KAAK,OAAO;gBACzB,CAAC,CAAC;oBACE,WAAW,EACT,QAAQ,CAAC,WAAW;oBAEtB,cAAc,EACZ,QAAQ,CAAC,MAAM;iBAClB;gBACH,CAAC,CAAC,EAAE,CACP;SACF,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,IACE,QAAQ,CAAC,MAAM,KAAK,UAAU,EAC9B,CAAC;QAED,OAAO;YACL,QAAQ,EACN,OAAO;YAET,IAAI,EACF,mBAAmB;YAErB,aAAa,EACX,IAAI;YAEN,MAAM,EACJ,IAAI,CAAC,MAAM;YAEb,MAAM,EACJ,QAAQ,CAAC,MAAM;YAEjB,cAAc,EACZ,QAAQ,CAAC,MAAM;SAClB,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,IACE,IAAI,CAAC,QAAQ,KAAK,SAAS,EAC3B,CAAC;QAED,OAAO;YACL,QAAQ,EACN,OAAO;YAET,IAAI,EACF,IAAI,CAAC,IAAI;YAEX,aAAa,EACX,IAAI;YAEN,MAAM,EACJ,IAAI,CAAC,MAAM;YAEb,MAAM,EACJ,kEAAkE;YAEpE,cAAc,EACZ,QAAQ,CAAC,MAAM;SAClB,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EACN,SAAS;QAEX,IAAI,EACF,IAAI,CAAC,IAAI;QAEX,aAAa,EACX,IAAI;QAEN,MAAM,EACJ,IAAI,CAAC,MAAM;QAEb,MAAM,EACJ,IAAI,CAAC,MAAM;QAEb,WAAW,EACT,QAAQ,CAAC,WAAW;QAEtB,cAAc,EACZ,QAAQ,CAAC,MAAM;QAEjB,cAAc,EACZ,QAAQ,CAAC,MAAM;KAClB,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@once-agent/sdk",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Execution safety for side-effecting AI agent tools.",
   "type": "module",
   "main": "./dist/index.js",
@@ -22,7 +22,7 @@
     "typecheck": "tsc --noEmit",
     "benchmark:scan": "npm run build && node ./scripts/scan-benchmark.mjs",
     "test:contract": "npm run build && tsc --noEmit --target ES2022 --module NodeNext --moduleResolution NodeNext --strict --types node ./scripts/sdk-contract-types.ts && node ./scripts/sdk-contract-runtime.mjs",
-    "test:release": "npm run benchmark:scan && npm run test:scanner-declarations && npm run test:contract && npm run test:protect && npm run test:capabilities && npm run test:transformer && npm run test:binding && npm run test:patch-planner && npm run test:transformer-protect && npm run test:apply && npm run test:id-conformance && npm run test:consumer && npm run test:activation && npm run test:package",
+    "test:release": "npm run benchmark:scan && npm run test:scanner-declarations && npm run test:contract && npm run test:protect && npm run test:capabilities && npm run test:transformer && npm run test:binding && npm run test:patch-planner && npm run test:transformer-protect && npm run test:apply && npm run test:id-conformance && npm run test:consumer && npm run test:activation && npm run test:package && npm run test:runtime-setup",
     "test:protect": "npm run build && node ./scripts/protect-regression.mjs",
     "test:capabilities": "npm run build && node ./scripts/capability-regression.mjs",
     "test:transformer": "npm run build && node ./scripts/http-transformer-regression.mjs",
@@ -36,6 +36,7 @@
     "test:id-conformance": "npm run build && node ./scripts/id-conformance-regression.mjs",
     "build:esm": "tsc -p tsconfig.json",
     "build:cjs": "tsc -p tsconfig.cjs.json && node ./scripts/write-cjs-package.mjs",
+    "test:runtime-setup": "npm run build && node ./scripts/runtime-setup-regression.mjs",
     "test:activation": "npm run build && node ./scripts/activation-regression.mjs"
   },
   "keywords": [