@pellux/goodvibes-sdk 0.38.0 → 1.1.0

package/dist/platform/control-plane/method-catalog-fleet.js

@@ -0,0 +1,65 @@
+import { EMPTY_OBJECT_SCHEMA, methodDescriptor } from './method-catalog-shared.js';
+import { CHECKPOINTS_CREATE_INPUT_SCHEMA, CHECKPOINTS_CREATE_OUTPUT_SCHEMA, CHECKPOINTS_DIFF_INPUT_SCHEMA, CHECKPOINTS_DIFF_OUTPUT_SCHEMA, CHECKPOINTS_LIST_INPUT_SCHEMA, CHECKPOINTS_LIST_OUTPUT_SCHEMA, CHECKPOINTS_RESTORE_INPUT_SCHEMA, CHECKPOINTS_RESTORE_OUTPUT_SCHEMA, FLEET_LIST_INPUT_SCHEMA, FLEET_LIST_OUTPUT_SCHEMA, FLEET_SNAPSHOT_OUTPUT_SCHEMA, } from './operator-contract-schemas.js';
+export const builtinGatewayFleetMethodDescriptors = [
+    methodDescriptor({
+        id: 'fleet.snapshot',
+        title: 'Fleet Snapshot',
+        description: 'Return a point-in-time capture of every live/completed runtime process (agents, WRFC chains/subtasks, workflow FSMs/triggers/schedules, watchers, background processes) as a flat, parentId-linked node list. Capped at 2000 nodes (truncated:true + totalCount when the live fleet exceeds the cap) — use fleet.list to page through a larger fleet.',
+        category: 'fleet',
+        scopes: ['read:fleet'],
+        transport: ['ws'],
+        inputSchema: EMPTY_OBJECT_SCHEMA,
+        outputSchema: FLEET_SNAPSHOT_OUTPUT_SCHEMA,
+    }),
+    methodDescriptor({
+        id: 'fleet.list',
+        title: 'List Fleet Processes',
+        description: 'Paginated, filtered (kinds/states) query over the live process registry. Cursor pagination returns disjoint pages that union to the full matching set at query time.',
+        category: 'fleet',
+        scopes: ['read:fleet'],
+        transport: ['ws'],
+        inputSchema: FLEET_LIST_INPUT_SCHEMA,
+        outputSchema: FLEET_LIST_OUTPUT_SCHEMA,
+    }),
+    methodDescriptor({
+        id: 'checkpoints.list',
+        title: 'List Workspace Checkpoints',
+        description: 'Return workspace checkpoints (whole-workspace filesystem snapshots), newest first, optionally filtered by kind/since and capped by limit.',
+        category: 'checkpoints',
+        scopes: ['read:checkpoints'],
+        transport: ['ws'],
+        inputSchema: CHECKPOINTS_LIST_INPUT_SCHEMA,
+        outputSchema: CHECKPOINTS_LIST_OUTPUT_SCHEMA,
+    }),
+    methodDescriptor({
+        id: 'checkpoints.create',
+        title: 'Create Workspace Checkpoint',
+        description: 'Create a new workspace checkpoint. Returns checkpoint:null, noop:true (not an error) when the workspace tree is identical to the most recent checkpoint — no commit, ref, or manifest entry is created in that case.',
+        category: 'checkpoints',
+        scopes: ['write:checkpoints'],
+        transport: ['ws'],
+        inputSchema: CHECKPOINTS_CREATE_INPUT_SCHEMA,
+        outputSchema: CHECKPOINTS_CREATE_OUTPUT_SCHEMA,
+    }),
+    methodDescriptor({
+        id: 'checkpoints.diff',
+        title: 'Diff Workspace Checkpoints',
+        description: 'Diff two checkpoints, or one checkpoint against the live working tree when `b` is omitted. An unknown/gc\'d checkpoint id is an honest 404, not a silent empty diff.',
+        category: 'checkpoints',
+        scopes: ['read:checkpoints'],
+        transport: ['ws'],
+        inputSchema: CHECKPOINTS_DIFF_INPUT_SCHEMA,
+        outputSchema: CHECKPOINTS_DIFF_OUTPUT_SCHEMA,
+    }),
+    methodDescriptor({
+        id: 'checkpoints.restore',
+        title: 'Restore Workspace Checkpoint',
+        description: 'DESTRUCTIVE: restore the workspace to the state captured by a checkpoint (git-backed workspace rewrite). Executes immediately with NO server-side confirmation — the calling surface (TUI/webui) owns the confirm UX before invoking this verb. An unknown/gc\'d checkpoint id is an honest 404, not a silent no-op.',
+        category: 'checkpoints',
+        scopes: ['write:checkpoints'],
+        dangerous: true,
+        transport: ['ws'],
+        inputSchema: CHECKPOINTS_RESTORE_INPUT_SCHEMA,
+        outputSchema: CHECKPOINTS_RESTORE_OUTPUT_SCHEMA,
+    }),
+];

package/dist/platform/control-plane/method-catalog-push.d.ts

@@ -0,0 +1,30 @@
+/**
+ * method-catalog-push.ts
+ *
+ * Browser-push (Web Push) verb descriptors: the VAPID public-key read, and the
+ * subscription lifecycle (register / list / delete / verify) a PWA uses to
+ * receive approvals and completions as notifications.
+ *
+ * These are pure descriptors so `buildOperatorContract` / the generated catalog
+ * / api docs see them; the handlers are attached at RuntimeServices construction
+ * time in routes/push.ts (the same `catalog.register(descriptor, handler)`
+ * pattern fleet.* uses), reached over HTTP through the generic
+ * `/api/control-plane/methods/{id}/invoke` endpoint.
+ *
+ * Verb tails follow docs/decisions/2026-07-06-core-verb-spec.md: register is
+ * `create`, unregister is `delete`, the collection read is `list`, the public
+ * key read is `get`. `verify` (send a live test push to prove the round trip)
+ * is not a generic CRUD word — it is documented in the `push-delivery` exempt
+ * category in packages/contracts/src/core-verbs.ts.
+ *
+ * Like the other handler-registered verb groups (fleet.*, checkpoints.*,
+ * sessions.search) these declare `transport: ['ws']` and carry NO dedicated
+ * REST `http` binding: they are served by the registered in-process handler
+ * through the generic `/api/control-plane/methods/{id}/invoke` endpoint, not by
+ * a path route in the external daemon-sdk package. Advertising an `http` path
+ * that no route serves would trip the capability-advertisement honesty gate
+ * (method-catalog-route-reconcile.ts), so it is deliberately omitted.
+ */
+import type { GatewayMethodDescriptor } from './method-catalog-shared.js';
+export declare const builtinGatewayPushMethodDescriptors: readonly GatewayMethodDescriptor[];
+//# sourceMappingURL=method-catalog-push.d.ts.map

package/dist/platform/control-plane/method-catalog-push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"method-catalog-push.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog-push.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAkC1E,eAAO,MAAM,mCAAmC,EAAE,SAAS,uBAAuB,EAyDjF,CAAC"}

package/dist/platform/control-plane/method-catalog-push.js

@@ -0,0 +1,80 @@
+import { BOOLEAN_SCHEMA, NUMBER_SCHEMA, STRING_SCHEMA, arraySchema, methodDescriptor, objectSchema, } from './method-catalog-shared.js';
+const PUSH_SUBSCRIPTION_KEYS_SCHEMA = objectSchema({
+    p256dh: STRING_SCHEMA,
+    auth: STRING_SCHEMA,
+}, ['p256dh', 'auth']);
+/** The wire-safe (redacted) subscription view — no capability URL, no key material. */
+const PUBLIC_PUSH_SUBSCRIPTION_SCHEMA = objectSchema({
+    id: STRING_SCHEMA,
+    principalId: STRING_SCHEMA,
+    endpointOrigin: STRING_SCHEMA,
+    endpointHash: STRING_SCHEMA,
+    createdAt: NUMBER_SCHEMA,
+    lastDeliveryAt: NUMBER_SCHEMA,
+    lastOutcome: STRING_SCHEMA,
+}, ['id', 'principalId', 'endpointOrigin', 'endpointHash', 'createdAt']);
+const PUSH_DELIVERY_RECEIPT_SCHEMA = objectSchema({
+    subscriptionId: STRING_SCHEMA,
+    endpointOrigin: STRING_SCHEMA,
+    outcome: STRING_SCHEMA,
+    httpStatus: NUMBER_SCHEMA,
+    detail: STRING_SCHEMA,
+}, ['subscriptionId', 'endpointOrigin', 'outcome']);
+export const builtinGatewayPushMethodDescriptors = [
+    methodDescriptor({
+        id: 'push.vapid.get',
+        title: 'Get Web Push Public Key',
+        description: 'Return the daemon\'s public VAPID key (base64url application-server key) that a browser client passes to pushManager.subscribe(). The matching private key never leaves the daemon and is never returned by any verb.',
+        category: 'push',
+        scopes: ['read:push'],
+        transport: ['ws'],
+        outputSchema: objectSchema({ publicKey: STRING_SCHEMA }, ['publicKey']),
+    }),
+    methodDescriptor({
+        id: 'push.subscriptions.create',
+        title: 'Register Web Push Subscription',
+        description: 'Store a browser Push subscription (endpoint capability URL + p256dh/auth keys) for the authenticated operator so the daemon can deliver notifications to that device. Re-registering the same endpoint updates its keys in place rather than duplicating it. The stored endpoint and keys are never returned over the wire; the response is the redacted subscription view.',
+        category: 'push',
+        scopes: ['write:push'],
+        transport: ['ws'],
+        inputSchema: objectSchema({
+            endpoint: STRING_SCHEMA,
+            keys: PUSH_SUBSCRIPTION_KEYS_SCHEMA,
+        }, ['endpoint', 'keys']),
+        outputSchema: objectSchema({ subscription: PUBLIC_PUSH_SUBSCRIPTION_SCHEMA }, ['subscription']),
+    }),
+    methodDescriptor({
+        id: 'push.subscriptions.list',
+        title: 'List Web Push Subscriptions',
+        description: 'List the authenticated operator\'s registered push devices as redacted subscription views (id, endpoint origin + hash, timestamps, last delivery outcome). The capability URL and key material are never included.',
+        category: 'push',
+        scopes: ['read:push'],
+        transport: ['ws'],
+        outputSchema: objectSchema({
+            subscriptions: arraySchema(PUBLIC_PUSH_SUBSCRIPTION_SCHEMA),
+        }, ['subscriptions']),
+    }),
+    methodDescriptor({
+        id: 'push.subscriptions.delete',
+        title: 'Delete Web Push Subscription',
+        description: 'Permanently remove one of the authenticated operator\'s push subscriptions: the stored record (endpoint + keys) is dropped and cannot be listed afterward. An unknown id, or one owned by another principal, is a 404 SUBSCRIPTION_NOT_FOUND, never a 200-noop.',
+        category: 'push',
+        scopes: ['write:push'],
+        transport: ['ws'],
+        inputSchema: objectSchema({ subscriptionId: STRING_SCHEMA }, ['subscriptionId']),
+        outputSchema: objectSchema({
+            subscriptionId: STRING_SCHEMA,
+            deleted: BOOLEAN_SCHEMA,
+        }, ['subscriptionId', 'deleted']),
+    }),
+    methodDescriptor({
+        id: 'push.subscriptions.verify',
+        title: 'Send Test Web Push',
+        description: 'Send a live test notification to one of the authenticated operator\'s subscriptions and return an honest delivery receipt (delivered / pruned / failed). A subscription whose endpoint reports 404/410 gone is pruned as part of the attempt and the receipt says so. An unknown id, or one owned by another principal, is a 404 SUBSCRIPTION_NOT_FOUND.',
+        category: 'push',
+        scopes: ['write:push'],
+        transport: ['ws'],
+        inputSchema: objectSchema({ subscriptionId: STRING_SCHEMA }, ['subscriptionId']),
+        outputSchema: objectSchema({ receipt: PUSH_DELIVERY_RECEIPT_SCHEMA }, ['receipt']),
+    }),
+];

package/dist/platform/control-plane/method-catalog-route-reconcile.d.ts

@@ -0,0 +1,84 @@
+import type { GatewayMethodDescriptor } from './method-catalog-shared.js';
+/**
+ * method-catalog-route-reconcile.ts
+ *
+ * Advertisement-vs-route reconciliation. Every method descriptor that
+ * carries an `http` binding is a promise to a caller: "this daemon actually
+ * serves this endpoint." Nothing previously checked that promise against
+ * the real dispatch table. method-catalog-email.ts's four email.* methods
+ * advertised /api/email/* paths that no route handler anywhere has ever
+ * served, so a caller invoking one through the generic method-dispatch
+ * endpoint (control-plane.ts's invokeGatewayMethodCall, which synthesizes a
+ * request from `http.path` and feeds it back into the real router) got a
+ * plain 404 instead of an honest "this capability isn't wired up." The ad
+ * lied; only a caller's own skepticism about the 404 stood between it and
+ * treating the capability as real.
+ *
+ * This module answers, for a batch of descriptors, whether each one's http
+ * binding actually resolves against the real dispatch pipeline:
+ * `dispatchDaemonApiRoutes` from @pellux/goodvibes-daemon-sdk, the function
+ * DaemonHttpRouter.dispatchApiRoutes (packages/sdk/src/platform/daemon/http/
+ * router.ts — read as this reconcile's route authority, never edited by it)
+ * ultimately delegates to for every method-catalog family except a short
+ * list of specialized sub-routers wired directly in router.ts ahead of that
+ * delegation (see SPECIALIZED_SUB_ROUTER_PREFIXES). The probe dispatches a
+ * synthetic Request against handler stubs that only ever return a fixed
+ * marker Response — no real service, manager, or handler body ever runs, so
+ * probing stays side-effect free even for `dangerous: true` write methods
+ * (email.send, automation job mutation, etc.).
+ *
+ * Scope note (read before extending): dispatchDaemonApiRoutes covers the
+ * operator / automation / remote / session / task route families, which is
+ * most of the catalog (control-core, media, channels, remote, runtime,
+ * knowledge). A handful of catalogs point at specialized sub-routers that
+ * router.ts special-cases before it ever reaches dispatchDaemonApiRoutes
+ * (MCP config, batch, Cloudflare, Home Assistant, model routes, companion
+ * chat, project planning). This module has no evidence either way for
+ * those paths, so it marks them 'unchecked' rather than guessing — a false
+ * "unavailable" verdict would just be a different flavor of the same
+ * dishonesty this module exists to catch.
+ */
+export type RouteReconcileStatus = 'live' | 'unavailable' | 'unchecked';
+export interface RouteReconcileResult {
+    readonly methodId: string;
+    readonly status: RouteReconcileStatus;
+    readonly http: {
+        readonly method: string;
+        readonly path: string;
+    } | null;
+    readonly reason: string;
+}
+export type RouteProbe = (method: string, path: string) => boolean | Promise<boolean>;
+/**
+ * Path prefixes served by a specialized sub-router that router.ts dispatches
+ * to BEFORE falling through to dispatchDaemonApiRoutes. Kept as an explicit,
+ * short allowlist (not inferred) so growth here is a deliberate, reviewed
+ * decision rather than silent scope creep.
+ */
+export declare const SPECIALIZED_SUB_ROUTER_PREFIXES: readonly string[];
+/**
+ * Builds a dispatchDaemonApiRoutes-backed probe: does *any* route in the
+ * operator/automation/remote/session/task dispatch chain match this
+ * method+path? Every handler in the stub is inert — a Proxy that returns a
+ * single marker function for any property access, so it never needs
+ * updating when DaemonApiRouteHandlers gains a field (the exact kind of
+ * drift this reconcile exists to avoid reintroducing elsewhere).
+ */
+export declare function createDaemonSdkRouteProbe(): RouteProbe;
+/** Reconciles a single descriptor's http binding (if any) against a probe. */
+export declare function reconcileHttpDescriptor(descriptor: GatewayMethodDescriptor, probe: RouteProbe): Promise<RouteReconcileResult>;
+/** Reconciles a full descriptor list against a probe, in catalog order. */
+export declare function reconcileCatalogRoutes(descriptors: readonly GatewayMethodDescriptor[], probe: RouteProbe): Promise<RouteReconcileResult[]>;
+/**
+ * The regression gate. Every descriptor whose http binding was actually
+ * checked (status !== 'unchecked') and resolved to no live route must
+ * already be marked `invokable: false` at the source — i.e. the
+ * advertisement itself must already say "don't call this" instead of
+ * silently 404ing a caller who trusted it. Returns the ids that violate
+ * that rule. A non-empty result means some descriptor is advertised as
+ * live but isn't backed by a route, and isn't marked unavailable either —
+ * an email.inbox.list-shaped regression. Wire this into a test (or a boot
+ * self-check, once one exists) and fail loudly on a non-empty result.
+ */
+export declare function findUnreconciledAdvertisements(descriptors: readonly GatewayMethodDescriptor[], results: readonly RouteReconcileResult[]): string[];
+//# sourceMappingURL=method-catalog-route-reconcile.d.ts.map

package/dist/platform/control-plane/method-catalog-route-reconcile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"method-catalog-route-reconcile.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog-route-reconcile.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAE1E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,aAAa,GAAG,WAAW,CAAC;AAExE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACzE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,UAAU,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEtF;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAQ5D,CAAC;AAkBF;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,IAAI,UAAU,CAYtD;AAED,8EAA8E;AAC9E,wBAAsB,uBAAuB,CAC3C,UAAU,EAAE,uBAAuB,EACnC,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,oBAAoB,CAAC,CAuB/B;AAED,2EAA2E;AAC3E,wBAAsB,sBAAsB,CAC1C,WAAW,EAAE,SAAS,uBAAuB,EAAE,EAC/C,KAAK,EAAE,UAAU,GAChB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAMjC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,SAAS,uBAAuB,EAAE,EAC/C,OAAO,EAAE,SAAS,oBAAoB,EAAE,GACvC,MAAM,EAAE,CAWV"}

package/dist/platform/control-plane/method-catalog-route-reconcile.js

@@ -0,0 +1,103 @@
+import { dispatchDaemonApiRoutes } from '@pellux/goodvibes-daemon-sdk';
+/**
+ * Path prefixes served by a specialized sub-router that router.ts dispatches
+ * to BEFORE falling through to dispatchDaemonApiRoutes. Kept as an explicit,
+ * short allowlist (not inferred) so growth here is a deliberate, reviewed
+ * decision rather than silent scope creep.
+ */
+export const SPECIALIZED_SUB_ROUTER_PREFIXES = [
+    '/api/mcp',
+    '/api/batch',
+    '/api/cloudflare',
+    '/api/homeassistant',
+    '/api/models',
+    '/api/companion/chat',
+    '/api/projects/planning',
+];
+const RECONCILE_PROBE_MARKER = { reconcileProbeMarker: true };
+function isSpecializedSubRouterPath(path) {
+    return SPECIALIZED_SUB_ROUTER_PREFIXES.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));
+}
+/**
+ * Replaces every `{param}` template segment with an opaque single-segment
+ * placeholder. Every path-matching regex in the dispatch chain matches "one
+ * non-slash segment" for a param slot, so a placeholder resolves the same
+ * way a real id would without needing one.
+ */
+function resolveTemplatePath(template) {
+    return template.replace(/\{[^/}]+\}/g, 'reconcile-probe-placeholder');
+}
+/**
+ * Builds a dispatchDaemonApiRoutes-backed probe: does *any* route in the
+ * operator/automation/remote/session/task dispatch chain match this
+ * method+path? Every handler in the stub is inert — a Proxy that returns a
+ * single marker function for any property access, so it never needs
+ * updating when DaemonApiRouteHandlers gains a field (the exact kind of
+ * drift this reconcile exists to avoid reintroducing elsewhere).
+ */
+export function createDaemonSdkRouteProbe() {
+    const marker = () => Response.json(RECONCILE_PROBE_MARKER);
+    const inertHandlers = new Proxy({}, { get: () => marker });
+    return async (method, path) => {
+        const request = new Request(`http://reconcile-probe.invalid${path}`, { method });
+        const response = await dispatchDaemonApiRoutes(request, inertHandlers);
+        return response !== null;
+    };
+}
+/** Reconciles a single descriptor's http binding (if any) against a probe. */
+export async function reconcileHttpDescriptor(descriptor, probe) {
+    if (!descriptor.http) {
+        return { methodId: descriptor.id, status: 'unchecked', http: null, reason: 'no http binding to reconcile' };
+    }
+    const http = { method: descriptor.http.method, path: descriptor.http.path };
+    if (isSpecializedSubRouterPath(descriptor.http.path)) {
+        return {
+            methodId: descriptor.id,
+            status: 'unchecked',
+            http,
+            reason: `path is served by a specialized sub-router outside this reconcile's checked scope: ${descriptor.http.path}`,
+        };
+    }
+    const probePath = resolveTemplatePath(descriptor.http.path);
+    const resolved = await probe(descriptor.http.method, probePath);
+    return resolved
+        ? { methodId: descriptor.id, status: 'live', http, reason: 'route resolved via dispatchDaemonApiRoutes' }
+        : {
+            methodId: descriptor.id,
+            status: 'unavailable',
+            http,
+            reason: `no registered route serves ${descriptor.http.method} ${descriptor.http.path}`,
+        };
+}
+/** Reconciles a full descriptor list against a probe, in catalog order. */
+export async function reconcileCatalogRoutes(descriptors, probe) {
+    const results = [];
+    for (const descriptor of descriptors) {
+        results.push(await reconcileHttpDescriptor(descriptor, probe));
+    }
+    return results;
+}
+/**
+ * The regression gate. Every descriptor whose http binding was actually
+ * checked (status !== 'unchecked') and resolved to no live route must
+ * already be marked `invokable: false` at the source — i.e. the
+ * advertisement itself must already say "don't call this" instead of
+ * silently 404ing a caller who trusted it. Returns the ids that violate
+ * that rule. A non-empty result means some descriptor is advertised as
+ * live but isn't backed by a route, and isn't marked unavailable either —
+ * an email.inbox.list-shaped regression. Wire this into a test (or a boot
+ * self-check, once one exists) and fail loudly on a non-empty result.
+ */
+export function findUnreconciledAdvertisements(descriptors, results) {
+    const descriptorsById = new Map(descriptors.map((descriptor) => [descriptor.id, descriptor]));
+    const violations = [];
+    for (const result of results) {
+        if (result.status !== 'unavailable')
+            continue;
+        const descriptor = descriptorsById.get(result.methodId);
+        if (descriptor && descriptor.invokable !== false) {
+            violations.push(result.methodId);
+        }
+    }
+    return violations;
+}

package/dist/platform/control-plane/method-catalog-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"method-catalog-runtime.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAqH1E,eAAO,MAAM,sCAAsC,EAAE,SAAS,uBAAuB,EAyXpF,CAAC"}
+{"version":3,"file":"method-catalog-runtime.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AA6H1E,eAAO,MAAM,sCAAsC,EAAE,SAAS,uBAAuB,EA2cpF,CAAC"}

package/dist/platform/control-plane/method-catalog-runtime.js

@@ -1,6 +1,6 @@
 import { EMPTY_OBJECT_SCHEMA, BOOLEAN_SCHEMA, STRING_SCHEMA, NUMBER_SCHEMA, objectSchema, listOutputSchema, entityOutputSchema, bodyEnvelopeSchema, methodDescriptor, runtimeEventId, arraySchema, } from './method-catalog-shared.js';
 import { enumSchema, nullableSchema } from './operator-contract-schemas-shared.js';
-import { CONTINUITY_SNAPSHOT_SCHEMA, DISTRIBUTED_NODE_HOST_CONTRACT_SCHEMA, HEALTH_SNAPSHOT_SCHEMA, INTELLIGENCE_SNAPSHOT_SCHEMA, MEMORY_DOCTOR_REPORT_SCHEMA, MEMORY_VECTOR_STATS_SCHEMA, PROVIDER_ACCOUNT_SNAPSHOT_SCHEMA, PROVIDER_RUNTIME_SNAPSHOT_SCHEMA, PROVIDER_USAGE_SNAPSHOT_SCHEMA, REMOTE_PAIR_APPROVAL_OUTPUT_SCHEMA, REMOTE_PAIR_REQUEST_OUTPUT_SCHEMA, REMOTE_PAIR_REQUESTS_OUTPUT_SCHEMA, REMOTE_PEERS_OUTPUT_SCHEMA, REMOTE_PAIR_REQUEST_ACTION_INPUT_SCHEMA, REMOTE_PEER_DISCONNECT_INPUT_SCHEMA, REMOTE_PEER_INVOKE_INPUT_SCHEMA, REMOTE_PEER_INVOKE_OUTPUT_SCHEMA, REMOTE_PEER_OUTPUT_SCHEMA, REMOTE_PEER_TOKEN_REVOKE_INPUT_SCHEMA, REMOTE_PEER_TOKEN_ROTATE_INPUT_SCHEMA, REMOTE_PEER_TOKEN_ROTATE_OUTPUT_SCHEMA, REMOTE_SNAPSHOT_SCHEMA, REMOTE_WORK_LIST_OUTPUT_SCHEMA, REMOTE_WORK_CANCEL_INPUT_SCHEMA, REMOTE_WORK_OUTPUT_SCHEMA, SECURITY_SETTINGS_REPORT_SCHEMA, SETTINGS_SNAPSHOT_SCHEMA, WORKTREE_SNAPSHOT_SCHEMA, } from './operator-contract-schemas.js';
+import { CONTINUITY_SNAPSHOT_SCHEMA, DISTRIBUTED_NODE_HOST_CONTRACT_SCHEMA, HEALTH_SNAPSHOT_SCHEMA, INTELLIGENCE_SNAPSHOT_SCHEMA, MEMORY_DOCTOR_REPORT_SCHEMA, MEMORY_VECTOR_STATS_SCHEMA, MEMORY_CLASS_SCHEMA, MEMORY_SCOPE_SCHEMA, MEMORY_REVIEW_STATE_SCHEMA, MEMORY_PROVENANCE_KIND_SCHEMA, MEMORY_PROVENANCE_LINK_SCHEMA, MEMORY_RECORD_SCHEMA, MEMORY_RECORD_SEARCH_OUTPUT_SCHEMA, MEMORY_RECORD_DELETE_OUTPUT_SCHEMA, PROVIDER_ACCOUNT_SNAPSHOT_SCHEMA, PROVIDER_RUNTIME_SNAPSHOT_SCHEMA, PROVIDER_USAGE_SNAPSHOT_SCHEMA, REMOTE_PAIR_APPROVAL_OUTPUT_SCHEMA, REMOTE_PAIR_REQUEST_OUTPUT_SCHEMA, REMOTE_PAIR_REQUESTS_OUTPUT_SCHEMA, REMOTE_PEERS_OUTPUT_SCHEMA, REMOTE_PAIR_REQUEST_ACTION_INPUT_SCHEMA, REMOTE_PEER_DISCONNECT_INPUT_SCHEMA, REMOTE_PEER_INVOKE_INPUT_SCHEMA, REMOTE_PEER_INVOKE_OUTPUT_SCHEMA, REMOTE_PEER_OUTPUT_SCHEMA, REMOTE_PEER_TOKEN_REVOKE_INPUT_SCHEMA, REMOTE_PEER_TOKEN_ROTATE_INPUT_SCHEMA, REMOTE_PEER_TOKEN_ROTATE_OUTPUT_SCHEMA, REMOTE_SNAPSHOT_SCHEMA, REMOTE_WORK_LIST_OUTPUT_SCHEMA, REMOTE_WORK_CANCEL_INPUT_SCHEMA, REMOTE_WORK_OUTPUT_SCHEMA, SECURITY_SETTINGS_REPORT_SCHEMA, SETTINGS_SNAPSHOT_SCHEMA, WORKTREE_SNAPSHOT_SCHEMA, } from './operator-contract-schemas.js';
 const MCP_SCOPE_SCHEMA = enumSchema(['project', 'global']);
 const MCP_SERVER_CONFIG_SCHEMA = objectSchema({
     name: STRING_SCHEMA,
@@ -433,6 +433,88 @@ export const builtinGatewayRuntimeMethodDescriptors = [
         }),
         outputSchema: objectSchema({ records: arraySchema(objectSchema({}, [], { additionalProperties: true })) }, ['records']),
     }),
+    methodDescriptor({
+        id: 'memory.records.add',
+        title: 'Add Memory Record',
+        description: 'Add a memory record to the daemon-owned canonical store. The daemon is the single writer for its store; a client surface routes its writes here instead of opening the store file, so two processes never write the same sql.js file. New records default to confidence 60 (the recall floor) and reviewState fresh unless the review block overrides them.',
+        category: 'memory',
+        scopes: ['write:memory'],
+        http: { method: 'POST', path: '/api/memory/records' },
+        inputSchema: bodyEnvelopeSchema({
+            cls: MEMORY_CLASS_SCHEMA,
+            summary: STRING_SCHEMA,
+            scope: MEMORY_SCOPE_SCHEMA,
+            detail: STRING_SCHEMA,
+            tags: arraySchema(STRING_SCHEMA),
+            provenance: arraySchema(MEMORY_PROVENANCE_LINK_SCHEMA),
+            review: objectSchema({
+                state: MEMORY_REVIEW_STATE_SCHEMA,
+                confidence: NUMBER_SCHEMA,
+                reviewedBy: STRING_SCHEMA,
+                staleReason: STRING_SCHEMA,
+            }),
+        }, ['cls', 'summary']),
+        outputSchema: entityOutputSchema('record', MEMORY_RECORD_SCHEMA),
+    }),
+    methodDescriptor({
+        id: 'memory.records.search',
+        title: 'Search Memory Records',
+        description: 'Search the canonical store, literal or semantic. When semantic is requested but the semantic index cannot be consulted, the search falls back to a literal scan and states the reason in indexUnavailableReason rather than returning a silent empty result that reads as "nothing was ever stored". With recall=true the cross-surface recall-honesty contract is applied: flagged (stale/contradicted) records are excluded outright and records below the 60% confidence floor are dropped, each exclusion counted honestly.',
+        category: 'memory',
+        scopes: ['read:memory'],
+        http: { method: 'POST', path: '/api/memory/records/search' },
+        inputSchema: bodyEnvelopeSchema({
+            scope: MEMORY_SCOPE_SCHEMA,
+            cls: MEMORY_CLASS_SCHEMA,
+            tags: arraySchema(STRING_SCHEMA),
+            query: STRING_SCHEMA,
+            semantic: BOOLEAN_SCHEMA,
+            since: NUMBER_SCHEMA,
+            reviewState: arraySchema(MEMORY_REVIEW_STATE_SCHEMA),
+            minConfidence: NUMBER_SCHEMA,
+            provenanceKinds: arraySchema(MEMORY_PROVENANCE_KIND_SCHEMA),
+            staleOnly: BOOLEAN_SCHEMA,
+            limit: NUMBER_SCHEMA,
+            recall: BOOLEAN_SCHEMA,
+        }),
+        outputSchema: MEMORY_RECORD_SEARCH_OUTPUT_SCHEMA,
+    }),
+    methodDescriptor({
+        id: 'memory.records.get',
+        title: 'Get Memory Record',
+        description: 'Return a single memory record by id from the canonical store, or 404 when no record with that id exists.',
+        category: 'memory',
+        scopes: ['read:memory'],
+        http: { method: 'GET', path: '/api/memory/records/{id}' },
+        inputSchema: objectSchema({ id: STRING_SCHEMA }, ['id']),
+        outputSchema: entityOutputSchema('record', MEMORY_RECORD_SCHEMA),
+    }),
+    methodDescriptor({
+        id: 'memory.records.update-review',
+        title: 'Update Memory Record Review',
+        description: 'Update a record\'s review signal (reviewState, confidence, reviewer, staleReason) in the canonical store. Marking a record stale or contradicted flags it so the recall-honesty contract will never inject it into a prompt again regardless of confidence. Returns 404 when no record with that id exists.',
+        category: 'memory',
+        scopes: ['write:memory'],
+        http: { method: 'POST', path: '/api/memory/records/{id}/review' },
+        inputSchema: bodyEnvelopeSchema({
+            id: STRING_SCHEMA,
+            state: MEMORY_REVIEW_STATE_SCHEMA,
+            confidence: NUMBER_SCHEMA,
+            reviewedBy: STRING_SCHEMA,
+            staleReason: STRING_SCHEMA,
+        }, ['id']),
+        outputSchema: entityOutputSchema('record', MEMORY_RECORD_SCHEMA),
+    }),
+    methodDescriptor({
+        id: 'memory.records.delete',
+        title: 'Delete Memory Record',
+        description: 'Permanently delete a memory record and its links from the canonical store. Delete means delete: the record is removed from the store and the semantic index, not merely flagged. Returns { deleted: false } when no record with that id existed — an honest boolean, never a 200 that pretends a phantom row was removed.',
+        category: 'memory',
+        scopes: ['write:memory'],
+        http: { method: 'DELETE', path: '/api/memory/records/{id}' },
+        inputSchema: objectSchema({ id: STRING_SCHEMA }, ['id']),
+        outputSchema: MEMORY_RECORD_DELETE_OUTPUT_SCHEMA,
+    }),
     methodDescriptor({
         id: 'scheduler.capacity',
         title: 'Scheduler Capacity',

package/dist/platform/control-plane/method-catalog-shared.d.ts

@@ -22,6 +22,35 @@ export interface GatewayMethodDescriptor {
     readonly outputSchema?: Record<string, unknown> | undefined;
     readonly pluginId?: string | undefined;
     readonly dangerous?: boolean | undefined;
+    /**
+     * Defaults to `true`. When explicitly `false`, this method is NOT dispatchable
+     * through the generic HTTP/WS method-invocation surface
+     * (`invokeGatewayMethodCall`/`invokeWebSocketControlPlaneCall` in
+     * `../daemon/control-plane.ts`, guarded by `validateGatewayInvocation`, which
+     * rejects it with an honest 400 `NOT_INVOKABLE` before any handler or route is
+     * even considered) — nothing more, nothing less.
+     *
+     * This is a statement about ONE dispatch path, not a claim that the method can
+     * never run anywhere. Two independent reasons a descriptor carries
+     * `invokable: false`:
+     *  - No route or internal handler exists at all for this build (e.g. `email.*`,
+     *    `calendar.*` — cataloged so the contract is honest about the capability's
+     *    shape, but genuinely unavailable everywhere).
+     *  - A real route DOES exist and IS served (e.g. `voice.tts.stream`,
+     *    `control.events.stream`, `artifacts.content.get`), just not through the
+     *    generic JSON-envelope invoke path — the response is binary/streaming/HTML
+     *    (see `metadata.responseKind`) and callers must use the direct HTTP path
+     *    instead.
+     *
+     * A runtime that registers a real in-process handler for this method id (via
+     * `GatewayMethodCatalog.register(descriptor, handler)`) and calls
+     * `GatewayMethodCatalog.invoke()` DIRECTLY (bypassing `validateGatewayInvocation`)
+     * still serves it — `invoke()` itself does not consult this flag, by design: a
+     * consuming runtime that has wired up a genuine handler is authoritative over
+     * whether the method actually works, this descriptor is not. `invoke()` only
+     * refuses when BOTH `invokable === false` AND no handler is registered — see
+     * `method-catalog.ts`'s `invoke()`.
+     */
     readonly invokable?: boolean | undefined;
     readonly metadata?: Record<string, unknown> | undefined;
 }

package/dist/platform/control-plane/method-catalog-shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"method-catalog-shared.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog-shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,IAAI,GAAG,UAAU,CAAC;AAChE,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,QAAQ,CAAC;AACvD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,eAAe,GAAG,OAAO,GAAG,aAAa,CAAC;AACvF,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG,IAAI,GAAG,UAAU,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC;CAClD;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAClG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAClD;AAED,eAAO,MAAM,mBAAmB;;;;CAA2E,CAAC;AAC5G,eAAO,MAAM,aAAa;;CAA8B,CAAC;AACzD,eAAO,MAAM,cAAc;;CAA+B,CAAC;AAC3D,eAAO,MAAM,aAAa;;CAA8B,CAAC;AAEzD,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,CAAC;AAC7D,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAGtD,CAAC;AACF,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAGrD,CAAC;AAaF,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAExF;AAED,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACnD,QAAQ,GAAE,SAAS,MAAM,EAAO,EAChC,OAAO,GAAE;IAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAO,GACxD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAED,eAAO,MAAM,2BAA2B,yBAGlB,CAAC;AAEvB,eAAO,MAAM,wBAAwB,yBAiBoD,CAAC;AAE1F,eAAO,MAAM,uBAAuB,yBAa2C,CAAC;AAEhF,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzB;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzB;AAED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIzB;AAED,wBAAgB,kBAAkB,CAChC,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM,EACxD,QAAQ,GAAE,SAAS,MAAM,EAAO,GAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIzB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC,CAAC,GAAG,uBAAuB,CAO7M;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,sBAAsB,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC,GAAG,sBAAsB,CAKvJ;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAEjE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,GAAG,sBAAsB,CAY1G"}
+{"version":3,"file":"method-catalog-shared.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog-shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAErE,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,IAAI,GAAG,UAAU,CAAC;AAChE,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,QAAQ,CAAC;AACvD,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,eAAe,GAAG,OAAO,GAAG,aAAa,CAAC;AACvF,MAAM,MAAM,qBAAqB,GAAG,KAAK,GAAG,IAAI,GAAG,UAAU,CAAC;AAE9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACrD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,SAAS,CAAC;IAC1F,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;IACrD,QAAQ,CAAC,OAAO,EAAE,8BAA8B,CAAC;CAClD;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,uBAAuB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAClG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,GAAG,SAAS,CAAC;CAClD;AAED,eAAO,MAAM,mBAAmB;;;;CAA2E,CAAC;AAC5G,eAAO,MAAM,aAAa;;CAA8B,CAAC;AACzD,eAAO,MAAM,cAAc;;CAA+B,CAAC;AAC3D,eAAO,MAAM,aAAa;;CAA8B,CAAC;AAEzD,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,CAAC;AAC7D,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAGtD,CAAC;AACF,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAGrD,CAAC;AAaF,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAExF;AAED,wBAAgB,YAAY,CAC1B,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACnD,QAAQ,GAAE,SAAS,MAAM,EAAO,EAChC,OAAO,GAAE;IAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAAO,GACxD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAOzB;AAED,eAAO,MAAM,2BAA2B,yBAGlB,CAAC;AAEvB,eAAO,MAAM,wBAAwB,yBAiBoD,CAAC;AAE1F,eAAO,MAAM,uBAAuB,yBAa2C,CAAC;AAEhF,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAClC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzB;AAED,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzB;AAED,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIzB;AAED,wBAAgB,kBAAkB,CAChC,UAAU,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAM,EACxD,QAAQ,GAAE,SAAS,MAAM,EAAO,GAC/B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIzB;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,uBAAuB,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,uBAAuB,EAAE,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC,CAAC,GAAG,uBAAuB,CAO7M;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,sBAAsB,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,EAAE,QAAQ,CAAC,CAAC,GAAG,sBAAsB,CAKvJ;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAEjE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,GAAG,sBAAsB,CAY1G"}

package/dist/platform/control-plane/method-catalog.d.ts

@@ -24,6 +24,15 @@ export declare class GatewayMethodCatalog {
     getAllScopes(options?: {
         readonly includeWrite?: boolean;
     }): string[];
+    /**
+     * Run a method's registered internal handler directly. Note this does NOT consult
+     * `descriptor.invokable` for a method that HAS a handler — see the field's doc
+     * comment in method-catalog-shared.ts: a runtime that registered a real handler is
+     * authoritative over whether the method works, the descriptor's `invokable` flag
+     * is not. `invokeGatewayMethodCall` (../daemon/control-plane.ts) is what enforces
+     * `invokable` for the generic HTTP/WS dispatch surface, via
+     * `validateGatewayInvocation`, BEFORE ever reaching here.
+     */
     invoke(id: string, invocation: GatewayMethodInvocation): Promise<unknown>;
 }
 //# sourceMappingURL=method-catalog.d.ts.map

package/dist/platform/control-plane/method-catalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"method-catalog.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,4BAA4B,CAAC;AAKpC,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,8BAA8B,EAC9B,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AA6DpC,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8C;IACtE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;gBAExD,OAAO,GAAE;QAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAO;IAWhE,QAAQ,CACN,UAAU,EAAE,uBAAuB,EACnC,OAAO,CAAC,EAAE,oBAAoB,EAC9B,OAAO,GAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAC3C,MAAM,IAAI;IAcb,aAAa,CACX,UAAU,EAAE,sBAAsB,EAClC,OAAO,GAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAC3C,MAAM,IAAI;IAcb,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI/B,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIpC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAa1C,IAAI,CAAC,OAAO,GAAE,wBAA6B,GAAG,uBAAuB,EAAE;IASvE,UAAU,CAAC,OAAO,GAAE,uBAA4B,GAAG,sBAAsB,EAAE;IAU3E,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI;IAI/C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI;IAInD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI/B,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI;IAUnF,YAAY,CAAC,OAAO,GAAE;QAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,MAAM,EAAE;IAiBnE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC;CAMhF"}
+{"version":3,"file":"method-catalog.d.ts","sourceRoot":"","sources":["../../../src/platform/control-plane/method-catalog.ts"],"names":[],"mappings":"AA2BA,OAAO,KAAK,EACV,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACzB,MAAM,4BAA4B,CAAC;AAOpC,YAAY,EACV,sBAAsB,EACtB,uBAAuB,EACvB,qBAAqB,EACrB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,8BAA8B,EAC9B,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,4BAA4B,CAAC;AA8DpC,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA8C;IACtE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6C;gBAExD,OAAO,GAAE;QAAE,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;KAAO;IAWhE,QAAQ,CACN,UAAU,EAAE,uBAAuB,EACnC,OAAO,CAAC,EAAE,oBAAoB,EAC9B,OAAO,GAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAC3C,MAAM,IAAI;IAcb,aAAa,CACX,UAAU,EAAE,sBAAsB,EAClC,OAAO,GAAE;QAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAO,GAC3C,MAAM,IAAI;IAcb,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI/B,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAIpC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAa1C,IAAI,CAAC,OAAO,GAAE,wBAA6B,GAAG,uBAAuB,EAAE;IASvE,UAAU,CAAC,OAAO,GAAE,uBAA4B,GAAG,sBAAsB,EAAE;IAU3E,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI;IAI/C,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI;IAInD,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAI/B,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,uBAAuB,GAAG,IAAI;IAUnF,YAAY,CAAC,OAAO,GAAE;QAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,MAAM,EAAE;IAiBzE;;;;;;;;OAQG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC;CA8BhF"}

package/dist/platform/control-plane/method-catalog.js

@@ -6,7 +6,10 @@ import { builtinGatewayCalendarMethodDescriptors, } from './method-catalog-calen
 import { builtinGatewayEventDescriptors, } from './method-catalog-events.js';
 import { builtinGatewayKnowledgeMethodDescriptors, } from './method-catalog-knowledge.js';
 import { builtinGatewayMediaMethodDescriptors, } from './method-catalog-media.js';
+import { builtinGatewayPushMethodDescriptors, } from './method-catalog-push.js';
 import { builtinGatewayRuntimeMethodDescriptors, } from './method-catalog-runtime.js';
+import { GatewayVerbError } from './routes/gateway-verb-error.js';
+import { SDKErrorCodes } from '@pellux/goodvibes-errors';
 const BUILTIN_GATEWAY_EVENTS = builtinGatewayEventDescriptors;
 const BUILTIN_GATEWAY_METHODS = [
     ...builtinGatewayControlMethodDescriptors,
@@ -17,6 +20,7 @@ const BUILTIN_GATEWAY_METHODS = [
     ...builtinGatewayKnowledgeMethodDescriptors,
     ...builtinGatewayMediaMethodDescriptors,
     ...builtinGatewayAdminMethodDescriptors,
+    ...builtinGatewayPushMethodDescriptors,
 ];
 function normalizeDescriptor(descriptor) {
     const id = descriptor.id.trim();
@@ -168,12 +172,39 @@ export class GatewayMethodCatalog {
         }
         return [...scopes].sort();
     }
+    /**
+     * Run a method's registered internal handler directly. Note this does NOT consult
+     * `descriptor.invokable` for a method that HAS a handler — see the field's doc
+     * comment in method-catalog-shared.ts: a runtime that registered a real handler is
+     * authoritative over whether the method works, the descriptor's `invokable` flag
+     * is not. `invokeGatewayMethodCall` (../daemon/control-plane.ts) is what enforces
+     * `invokable` for the generic HTTP/WS dispatch surface, via
+     * `validateGatewayInvocation`, BEFORE ever reaching here.
+     */
     async invoke(id, invocation) {
         const entry = this.methods.get(id);
-        if (!entry)
-            throw new Error(`Unknown gateway method: ${id}`);
-        if (!entry.handler)
+        // Uncataloged id — a real machine code (METHOD_NOT_FOUND), not a prose Error, so
+        // any direct caller of invoke() (bypassing the HTTP dispatch's own 404 below) gets
+        // the same code-driven signal as invokeGatewayMethod/getGatewayMethod
+        // (daemon-sdk/control-routes.ts) and invokeGatewayMethodCall (../daemon/control-
+        // plane.ts) — distinct from NOT_INVOKABLE (cataloged but not invokable), which is
+        // the id existing but refusing dispatch, not the id being unknown outright.
+        if (!entry) {
+            throw new GatewayVerbError(`Unknown gateway method: ${id}`, SDKErrorCodes.METHOD_NOT_FOUND, 404);
+        }
+        if (!entry.handler) {
+            // A method explicitly marked invokable:false with no registered handler is
+            // honestly "not invokable anywhere" (see the field's doc comment) — distinct
+            // from a method that a caller expected to have a handler here but doesn't (a
+            // real bug in that caller's wiring). A GatewayVerbError flows straight through
+            // invokeGatewayMethodCall's existing catch into an honest 400/NOT_INVOKABLE
+            // instead of a generic 500 — and gives any OTHER caller of `invoke()` directly
+            // (bypassing the HTTP gate) the same honest, typed signal.
+            if (entry.descriptor.invokable === false) {
+                throw new GatewayVerbError(`Gateway method is not invokable and has no registered handler: ${id}`, 'NOT_INVOKABLE', 400);
+            }
             throw new Error(`Gateway method has no internal handler: ${id}`);
+        }
         return entry.handler(invocation);
     }
 }