@phosphorco/bb-identity 0.3.0 → 0.3.1

package/README.md

@@ -477,3 +477,7 @@ V1 receipts confirm the frozen `externalContribution`. Reconcile V1 exclusively
 The default host rendering policy adds the integration sender envelope once. A producer such as Rosetta must select `externalMessageRendering: 'producer'` at binding construction; its prompt bytes remain unchanged. A capable native host projects the person into the native timeline while contribution/attempt history keeps the external origin and optional `personAttribution`. This does not add native-message history queries.
 
 Native history containing integration-asserted person authors requires a capable runtime even after queues drain or plugins are downgraded. Do not roll back to a host that only accepts provider-verified person authors. Package-only rollback retains the legacy external path; it does not make old native readers understand newer stored authorship.
+
+### 0.3.1 decoder corrections
+
+V1 external subjects are opaque nonempty strings of at most256 characters, including email-shaped or percent-encoded subjects. They are not BB resource IDs. Contribution and attempt-history output normalize additive person snapshot, identity, and presentation fields while preserving strict V1 input decoding. `externalContributionOutcomeV1Codec` from `/host` validates and normalizes persisted V1 outcomes; consumers must additionally compare submitted receipts with the reserved operation ID and frozen contribution. A stored final lacking that evidence remains uncertainty and must not trigger a resend.

package/dist/bb-entry-runtime.js

@@ -64,6 +64,29 @@ function retainIdentityHttpResponse(response, invocationSignal, requestSignal, r
 // bb-upstream-runtime.ts
 import { z } from "zod";
 
+// external-person-output-runtime.ts
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeExternalPersonOutput(value) {
+  if (!record(value) || !record(value.identity) || !record(value.presentation))
+    return value;
+  return {
+    identity: { kind: value.identity.kind, key: value.identity.key, issuer: value.identity.issuer, subject: value.identity.subject },
+    presentation: { displayName: value.presentation.displayName, handle: value.presentation.handle, avatarUrl: value.presentation.avatarUrl },
+    evidence: value.evidence
+  };
+}
+function normalizeContributionOutput(value) {
+  return record(value) && value.personAttribution !== undefined ? { ...value, personAttribution: normalizeExternalPersonOutput(value.personAttribution) } : value;
+}
+function normalizeProvenanceOutput(value) {
+  return record(value) && Array.isArray(value.contributions) ? { ...value, contributions: value.contributions.map(normalizeContributionOutput) } : value;
+}
+function normalizeEvidencePageOutput(value, normalize) {
+  return record(value) && Array.isArray(value.items) ? { ...value, items: value.items.map(normalize) } : value;
+}
+
 // model-runtime.ts
 var ID_MAX_LENGTH = 256;
 var ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/;
@@ -230,6 +253,7 @@ function hasCompleteCausality(groups, contributions, missing) {
 }
 var provenanceCodec = {
   decode(input) {
+    input = normalizeProvenanceOutput(input);
     if (!isRecord(input) || input.status !== "known" && input.status !== "partial" && input.status !== "unknown") {
       return err("invalid-input", "Invalid execution provenance.");
     }
@@ -407,39 +431,39 @@ function createBbUpstreamDriver(options) {
   const active = new Set;
   const listeners = new Set;
   const labelledExternal = new WeakSet;
-  const terminateScope = (record, scope) => {
+  const terminateScope = (record2, scope) => {
     if (!scope || scope.released)
       return;
     scope.released = true;
-    record.controller.signal.removeEventListener("abort", scope.parentAbort);
+    record2.controller.signal.removeEventListener("abort", scope.parentAbort);
     scope.controller.abort();
-    record.scopes.delete(scope);
+    record2.scopes.delete(scope);
   };
-  const terminate = (record) => {
-    for (const scope of [...record.scopes])
-      terminateScope(record, scope);
-    record.controller.abort();
-    active.delete(record);
+  const terminate = (record2) => {
+    for (const scope of [...record2.scopes])
+      terminateScope(record2, scope);
+    record2.controller.abort();
+    active.delete(record2);
   };
   const known = (context) => {
-    const record = records.get(context);
-    return !record ? err("invalid-input", "Invocation context was not issued by this binding.") : disposed ? err("disposed", "Upstream binding is disposed.") : record.controller.signal.aborted ? err("expired", "Invocation context has expired.") : ok(record);
+    const record2 = records.get(context);
+    return !record2 ? err("invalid-input", "Invocation context was not issued by this binding.") : disposed ? err("disposed", "Upstream binding is disposed.") : record2.controller.signal.aborted ? err("expired", "Invocation context has expired.") : ok(record2);
   };
   const admission = (context) => {
-    const record = known(context);
-    if (!record.ok)
-      return record;
-    if (record.value.origin === "external")
+    const record2 = known(context);
+    if (!record2.ok)
+      return record2;
+    if (record2.value.origin === "external")
       return err("unauthenticated", "External upstream work uses an explicit external source.");
-    return record;
+    return record2;
   };
   const session = (context) => {
-    const record = known(context);
-    if (!record.ok)
-      return unavailableSession(instanceId, record.error.code === "invalid-input" ? "incompatible" : "unauthenticated", record.error.message);
-    if (record.value.origin === "interactive-user")
+    const record2 = known(context);
+    if (!record2.ok)
+      return unavailableSession(instanceId, record2.error.code === "invalid-input" ? "incompatible" : "unauthenticated", record2.error.message);
+    if (record2.value.origin === "interactive-user")
       return readySession();
-    return record.value.origin === "background" ? machineSession() : unavailableSession(instanceId, "unauthenticated", "External upstream work uses an explicit external source.");
+    return record2.value.origin === "background" ? machineSession() : unavailableSession(instanceId, "unauthenticated", "External upstream work uses an explicit external source.");
   };
   const driver = {
     instanceId,
@@ -457,20 +481,20 @@ function createBbUpstreamDriver(options) {
       const allowed = admission(context);
       if (!allowed.ok)
         return allowed;
-      const record = allowed.value;
+      const record2 = allowed.value;
       let scope;
-      const parentAbort = () => terminateScope(record, scope);
+      const parentAbort = () => terminateScope(record2, scope);
       scope = { controller: new AbortController, parentAbort, released: false };
-      record.scopes.add(scope);
-      const expire = () => terminateScope(record, scope);
-      record.controller.signal.addEventListener("abort", parentAbort, { once: true });
-      const exposedSession = record.origin === "background" ? machineSession() : readySession();
-      const expectedKey = record.origin === "background" ? machineKey.value : singletonKey;
+      record2.scopes.add(scope);
+      const expire = () => terminateScope(record2, scope);
+      record2.controller.signal.addEventListener("abort", parentAbort, { once: true });
+      const exposedSession = record2.origin === "background" ? machineSession() : readySession();
+      const expectedKey = record2.origin === "background" ? machineKey.value : singletonKey;
       return ok({
         signal: scope.controller.signal,
         session: exposedSession,
         validate(expected) {
-          if (scope.released || scope.controller.signal.aborted || record.controller.signal.aborted || disposed) {
+          if (scope.released || scope.controller.signal.aborted || record2.controller.signal.aborted || disposed) {
             return err("expired", "Upstream request context is no longer live.");
           }
           return expected.actor === expectedKey && expected.session === stamp.value ? ok(undefined) : err("stale-context", "Request expectation does not match the singleton session.");
@@ -554,22 +578,22 @@ function createBbUpstreamDriver(options) {
         throw new Error("Upstream binding is disposed.");
       const controller = new AbortController;
       const invocation = Object.freeze({ origin, signal: controller.signal });
-      const record = { origin, controller, scopes: new Set };
-      records.set(invocation, record);
-      active.add(record);
+      const record2 = { origin, controller, scopes: new Set };
+      records.set(invocation, record2);
+      active.add(record2);
       return invocation;
     },
     release(invocation) {
-      const record = records.get(invocation);
-      if (record)
-        terminate(record);
+      const record2 = records.get(invocation);
+      if (record2)
+        terminate(record2);
     },
     dispose() {
       if (disposed)
         return;
       disposed = true;
-      for (const record of [...active])
-        terminate(record);
+      for (const record2 of [...active])
+        terminate(record2);
       for (const listener of [...listeners]) {
         try {
           listener({ kind: "disposed" });
@@ -858,11 +882,11 @@ function createEnhancedDirectory(protocol) {
     }
     mappings.set(key, mapping);
   };
-  const profile = (source, record, revision) => {
-    if (!isRecord3(record) || !source.issuers.includes(record.issuer) || !idCodec("issuer").decode(record.issuer).ok || !idCodec("subject").decode(record.subject).ok || !isProfilePresentation(record.presentation) || record.status !== "current" && record.status !== "historical" || !idCodec("revision").decode(revision).ok)
+  const profile = (source, record2, revision) => {
+    if (!isRecord3(record2) || !source.issuers.includes(record2.issuer) || !idCodec("issuer").decode(record2.issuer).ok || !idCodec("subject").decode(record2.subject).ok || !isProfilePresentation(record2.presentation) || record2.status !== "current" && record2.status !== "historical" || !idCodec("revision").decode(revision).ok)
       return err("incompatible", "Provider directory record is malformed.");
-    const issuer = record.issuer;
-    const subject = record.subject;
+    const issuer = record2.issuer;
+    const subject = record2.subject;
     if (typeof issuer !== "string" || typeof subject !== "string")
       return err("incompatible", "Provider directory record is malformed.");
     let person;
@@ -873,10 +897,10 @@ function createEnhancedDirectory(protocol) {
     }
     if (!person.ok)
       return person;
-    if (person.value.kind !== "person" || person.value.issuer !== record.issuer || person.value.subject !== record.subject || !identityKeyCodec.decode(person.value.key).ok) {
+    if (person.value.kind !== "person" || person.value.issuer !== record2.issuer || person.value.subject !== record2.subject || !identityKeyCodec.decode(person.value.key).ok) {
       return err("incompatible", "Provider directory returned an invalid person reference.");
     }
-    return profileCodec.decode({ identity: person.value, presentation: record.presentation, revision, status: record.status });
+    return profileCodec.decode({ identity: person.value, presentation: record2.presentation, revision, status: record2.status });
   };
   return {
     async search(input, options) {
@@ -902,8 +926,8 @@ function createEnhancedDirectory(protocol) {
       if (!Array.isArray(result.value.records) || result.value.records.length > input.limit || result.value.nextCursor !== null && !idCodec("cursor").decode(result.value.nextCursor).ok || !idCodec("revision").decode(result.value.revision).ok)
         return err("incompatible", "Provider directory page is malformed.");
       const profiles = [];
-      for (const record of result.value.records) {
-        const decoded = profile(current.value, record, result.value.revision);
+      for (const record2 of result.value.records) {
+        const decoded = profile(current.value, record2, result.value.revision);
         if (!decoded.ok)
           return decoded;
         if (input.history === "current" && decoded.value.status !== "current")
@@ -1212,7 +1236,7 @@ function createHostAdapter(options) {
       } catch {
         return err("unavailable", "Contribution history is unavailable.", "after-reconnect");
       }
-      return result.ok ? decodeEvidencePage(result.value, isContribution2) : result;
+      return result.ok ? decodeEvidencePage(normalizeEvidencePageOutput(result.value, normalizeContributionOutput), isContribution2) : result;
     },
     async attempts(query, readOptions) {
       if (!validAttemptQuery(query))
@@ -1225,7 +1249,7 @@ function createHostAdapter(options) {
       } catch {
         return err("unavailable", "Execution history is unavailable.", "after-reconnect");
       }
-      return result.ok ? decodeEvidencePage(result.value, (item) => provenanceCodec.decode(item).ok) : result;
+      return result.ok ? decodeEvidencePage(normalizeEvidencePageOutput(result.value, normalizeProvenanceOutput), (item) => provenanceCodec.decode(item).ok) : result;
     }
   };
   const subscription = protocol.subscribe((event) => {
@@ -1322,16 +1346,12 @@ function createHostAdapter(options) {
   };
 }
 function decodeExternalContribution(value, strict = true) {
-  if (!isRecord3(value) || value.version !== 1 || !isRecord3(value.author) || strict && Object.keys(value).some((key) => !["version", "author", "personAttribution"].includes(key)) || strict && Object.keys(value.author).some((key) => !["subject", "presentation"].includes(key)) || strict && isRecord3(value.author.presentation) && Object.keys(value.author.presentation).some((key) => !["displayName", "handle", "avatarUrl"].includes(key)) || !idCodec("subject").decode(value.author.subject).ok || !isProfilePresentation(value.author.presentation)) {
+  if (!isRecord3(value) || value.version !== 1 || !isRecord3(value.author) || strict && Object.keys(value).some((key) => !["version", "author", "personAttribution"].includes(key)) || strict && Object.keys(value.author).some((key) => !["subject", "presentation"].includes(key)) || strict && isRecord3(value.author.presentation) && Object.keys(value.author.presentation).some((key) => !["displayName", "handle", "avatarUrl"].includes(key)) || (typeof value.author.subject !== "string" || value.author.subject.length === 0 || value.author.subject.length > 256) || !isProfilePresentation(value.author.presentation)) {
     return err("invalid-input", "Invalid V1 external contribution.");
   }
   let person = value.personAttribution;
-  if (!strict && isRecord3(person) && isRecord3(person.identity))
-    person = {
-      identity: { kind: person.identity.kind, key: person.identity.key, issuer: person.identity.issuer, subject: person.identity.subject },
-      presentation: isRecord3(person.presentation) ? { displayName: person.presentation.displayName, handle: person.presentation.handle, avatarUrl: person.presentation.avatarUrl } : person.presentation,
-      evidence: person.evidence
-    };
+  if (!strict)
+    person = normalizeExternalPersonOutput(person);
   if (strict && isRecord3(person) && isRecord3(person.presentation) && Object.keys(person.presentation).some((key) => !["displayName", "handle", "avatarUrl"].includes(key)))
     return err("invalid-input", "Unexpected presentation field.");
   const decoded = person === undefined ? null : externalPersonSnapshotCodec.decode(person);
@@ -1354,6 +1374,16 @@ function canonicalExternal(value) {
     return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonicalExternal(value[key])}`).join(",")}}`;
   return JSON.stringify(value);
 }
+function decodeExternalContributionOutcomeV1(raw) {
+  const decoded = decodeAcceptance(raw);
+  if (!decoded.ok || decoded.value.status !== "submitted")
+    return decoded;
+  if (decoded.value.receipt.evidence !== "host-accepted")
+    return err("incompatible", "V1 needs durable native acceptance.");
+  const receipt = decoded.value.receipt;
+  const contribution = decodeExternalContribution(receipt.externalContribution, false);
+  return contribution.ok ? ok({ status: "submitted", receipt: { ...decoded.value.receipt, externalContribution: contribution.value } }) : err("incompatible", "Host receipt omitted or changed V1 attribution.");
+}
 function externalContributionMethods(upstream, extension, disposed) {
   const support = () => {
     if (disposed())
@@ -1373,16 +1403,6 @@ function externalContributionMethods(upstream, extension, disposed) {
       return err("incompatible", "Malformed V1 external contribution capability.");
     return ok(value);
   };
-  const outcome = (raw) => {
-    const decoded = decodeAcceptance(raw);
-    if (!decoded.ok || decoded.value.status !== "submitted")
-      return decoded;
-    if (decoded.value.receipt.evidence !== "host-accepted")
-      return err("incompatible", "V1 needs durable native acceptance.");
-    const receipt = decoded.value.receipt;
-    const contribution = decodeExternalContribution(receipt.externalContribution, false);
-    return contribution.ok ? ok({ status: "submitted", receipt: { ...decoded.value.receipt, externalContribution: contribution.value } }) : err("incompatible", "Host receipt omitted or changed V1 attribution.");
-  };
   return {
     externalContributionCapabilities() {
       const negotiated = support();
@@ -1403,7 +1423,7 @@ function externalContributionMethods(upstream, extension, disposed) {
       const frozen = JSON.parse(JSON.stringify(decoded.value));
       const wire = JSON.parse(JSON.stringify(wireInput(input, upstream.inputCodec)));
       try {
-        const result = outcome(await negotiated.value.acceptV1({ contribution: frozen, input: wire }, options));
+        const result = decodeExternalContributionOutcomeV1(await negotiated.value.acceptV1({ contribution: frozen, input: wire }, options));
         if (!result.ok)
           return { status: "indeterminate", operationId, message: result.error.message };
         if (result.value.status === "submitted" && (result.value.receipt.operationId !== operationId || canonicalExternal(result.value.receipt.externalContribution) !== canonicalExternal(frozen))) {
@@ -1425,7 +1445,7 @@ function externalContributionMethods(upstream, extension, disposed) {
         if (!result.ok)
           return result;
         if (isRecord3(result.value) && result.value.status === "final") {
-          const decoded = outcome(result.value.outcome);
+          const decoded = decodeExternalContributionOutcomeV1(result.value.outcome);
           if (decoded.ok && decoded.value.status === "submitted" && decoded.value.receipt.operationId !== operationId) {
             return err("incompatible", "Host lookup returned a receipt for another operation.");
           }
@@ -2417,8 +2437,8 @@ function createBbIdentityServerBinding(options) {
   const invocations = new WeakMap;
   const expired = () => err("expired", "Invocation has already settled.");
   const recordFor = (invocation) => {
-    const record = invocations.get(invocation);
-    return disposed || !record || record.settled || record.signal.aborted ? expired() : ok(record);
+    const record2 = invocations.get(invocation);
+    return disposed || !record2 || record2.settled || record2.signal.aborted ? expired() : ok(record2);
   };
   const unavailableSession2 = () => ({
     status: "unavailable",
@@ -2426,25 +2446,25 @@ function createBbIdentityServerBinding(options) {
     error: { code: "expired", message: "Invocation has already settled.", retry: "after-refresh" }
   });
   const openPerson = async (invocation) => {
-    const record = recordFor(invocation);
-    if (!record.ok)
-      return record;
-    const opened = await server.personRequest(record.value.request);
-    if (record.value.settled || record.value.signal.aborted) {
+    const record2 = recordFor(invocation);
+    if (!record2.ok)
+      return record2;
+    const opened = await server.personRequest(record2.value.request);
+    if (record2.value.settled || record2.value.signal.aborted) {
       if (opened.ok)
         opened.value.dispose();
       return expired();
     }
     if (opened.ok)
-      record.value.people.add(opened.value);
+      record2.value.people.add(opened.value);
     return opened;
   };
   const guardEndpoint = async (invocation, operation) => {
-    const record = recordFor(invocation);
-    if (!record.ok)
-      return record;
-    const result = await operation(record.value.request);
-    return record.value.settled || record.value.signal.aborted ? expired() : result;
+    const record2 = recordFor(invocation);
+    if (!record2.ok)
+      return record2;
+    const result = await operation(record2.value.request);
+    return record2.value.settled || record2.value.signal.aborted ? expired() : result;
   };
   let disposeBinding = () => {};
   const guardedHistory = {
@@ -2465,11 +2485,11 @@ function createBbIdentityServerBinding(options) {
     instanceId: server.instanceId,
     commits: server.commits,
     async session(invocation) {
-      const record = recordFor(invocation);
-      if (!record.ok)
+      const record2 = recordFor(invocation);
+      if (!record2.ok)
         return unavailableSession2();
-      const session = await server.session(record.value.request);
-      return record.value.settled || record.value.signal.aborted ? unavailableSession2() : session;
+      const session = await server.session(record2.value.request);
+      return record2.value.settled || record2.value.signal.aborted ? unavailableSession2() : session;
     },
     selfProfile: (invocation) => guardEndpoint(invocation, (request) => server.selfProfile(request)),
     personRequest: openPerson,
@@ -2546,18 +2566,18 @@ function createBbIdentityServerBinding(options) {
     return endpointRegistered;
   }
   const createInvocation = (context) => {
-    const record = { request: context.request, signal: context.signal, people: new Set, settled: false };
+    const record2 = { request: context.request, signal: context.signal, people: new Set, settled: false };
     const invocation = {
       origin: context.origin,
       signal: context.signal,
       person: () => context.origin === "external" ? Promise.resolve(err("unauthenticated", "External invocation uses an explicit external source.")) : openPerson(invocation)
     };
-    invocations.set(invocation, record);
+    invocations.set(invocation, record2);
     const finish = () => {
-      record.settled = true;
-      for (const request of record.people)
+      record2.settled = true;
+      for (const request of record2.people)
         request.dispose();
-      record.people.clear();
+      record2.people.clear();
     };
     return { invocation, finish };
   };

package/dist/host-runtime.js

@@ -1,4 +1,27 @@
 // @bun
+// external-person-output-runtime.ts
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeExternalPersonOutput(value) {
+  if (!record(value) || !record(value.identity) || !record(value.presentation))
+    return value;
+  return {
+    identity: { kind: value.identity.kind, key: value.identity.key, issuer: value.identity.issuer, subject: value.identity.subject },
+    presentation: { displayName: value.presentation.displayName, handle: value.presentation.handle, avatarUrl: value.presentation.avatarUrl },
+    evidence: value.evidence
+  };
+}
+function normalizeContributionOutput(value) {
+  return record(value) && value.personAttribution !== undefined ? { ...value, personAttribution: normalizeExternalPersonOutput(value.personAttribution) } : value;
+}
+function normalizeProvenanceOutput(value) {
+  return record(value) && Array.isArray(value.contributions) ? { ...value, contributions: value.contributions.map(normalizeContributionOutput) } : value;
+}
+function normalizeEvidencePageOutput(value, normalize) {
+  return record(value) && Array.isArray(value.items) ? { ...value, items: value.items.map(normalize) } : value;
+}
+
 // model-runtime.ts
 var ID_MAX_LENGTH = 256;
 var ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/;
@@ -165,6 +188,7 @@ function hasCompleteCausality(groups, contributions, missing) {
 }
 var provenanceCodec = {
   decode(input) {
+    input = normalizeProvenanceOutput(input);
     if (!isRecord(input) || input.status !== "known" && input.status !== "partial" && input.status !== "unknown") {
       return err("invalid-input", "Invalid execution provenance.");
     }
@@ -467,11 +491,11 @@ function createEnhancedDirectory(protocol) {
     }
     mappings.set(key, mapping);
   };
-  const profile = (source, record, revision) => {
-    if (!isRecord2(record) || !source.issuers.includes(record.issuer) || !idCodec("issuer").decode(record.issuer).ok || !idCodec("subject").decode(record.subject).ok || !isProfilePresentation(record.presentation) || record.status !== "current" && record.status !== "historical" || !idCodec("revision").decode(revision).ok)
+  const profile = (source, record2, revision) => {
+    if (!isRecord2(record2) || !source.issuers.includes(record2.issuer) || !idCodec("issuer").decode(record2.issuer).ok || !idCodec("subject").decode(record2.subject).ok || !isProfilePresentation(record2.presentation) || record2.status !== "current" && record2.status !== "historical" || !idCodec("revision").decode(revision).ok)
       return err("incompatible", "Provider directory record is malformed.");
-    const issuer = record.issuer;
-    const subject = record.subject;
+    const issuer = record2.issuer;
+    const subject = record2.subject;
     if (typeof issuer !== "string" || typeof subject !== "string")
       return err("incompatible", "Provider directory record is malformed.");
     let person;
@@ -482,10 +506,10 @@ function createEnhancedDirectory(protocol) {
     }
     if (!person.ok)
       return person;
-    if (person.value.kind !== "person" || person.value.issuer !== record.issuer || person.value.subject !== record.subject || !identityKeyCodec.decode(person.value.key).ok) {
+    if (person.value.kind !== "person" || person.value.issuer !== record2.issuer || person.value.subject !== record2.subject || !identityKeyCodec.decode(person.value.key).ok) {
       return err("incompatible", "Provider directory returned an invalid person reference.");
     }
-    return profileCodec.decode({ identity: person.value, presentation: record.presentation, revision, status: record.status });
+    return profileCodec.decode({ identity: person.value, presentation: record2.presentation, revision, status: record2.status });
   };
   return {
     async search(input, options) {
@@ -511,8 +535,8 @@ function createEnhancedDirectory(protocol) {
       if (!Array.isArray(result.value.records) || result.value.records.length > input.limit || result.value.nextCursor !== null && !idCodec("cursor").decode(result.value.nextCursor).ok || !idCodec("revision").decode(result.value.revision).ok)
         return err("incompatible", "Provider directory page is malformed.");
       const profiles = [];
-      for (const record of result.value.records) {
-        const decoded = profile(current.value, record, result.value.revision);
+      for (const record2 of result.value.records) {
+        const decoded = profile(current.value, record2, result.value.revision);
         if (!decoded.ok)
           return decoded;
         if (input.history === "current" && decoded.value.status !== "current")
@@ -821,7 +845,7 @@ function createHostAdapter(options) {
       } catch {
         return err("unavailable", "Contribution history is unavailable.", "after-reconnect");
       }
-      return result.ok ? decodeEvidencePage(result.value, isContribution2) : result;
+      return result.ok ? decodeEvidencePage(normalizeEvidencePageOutput(result.value, normalizeContributionOutput), isContribution2) : result;
     },
     async attempts(query, readOptions) {
       if (!validAttemptQuery(query))
@@ -834,7 +858,7 @@ function createHostAdapter(options) {
       } catch {
         return err("unavailable", "Execution history is unavailable.", "after-reconnect");
       }
-      return result.ok ? decodeEvidencePage(result.value, (item) => provenanceCodec.decode(item).ok) : result;
+      return result.ok ? decodeEvidencePage(normalizeEvidencePageOutput(result.value, normalizeProvenanceOutput), (item) => provenanceCodec.decode(item).ok) : result;
     }
   };
   const subscription = protocol.subscribe((event) => {
@@ -931,16 +955,12 @@ function createHostAdapter(options) {
   };
 }
 function decodeExternalContribution(value, strict = true) {
-  if (!isRecord2(value) || value.version !== 1 || !isRecord2(value.author) || strict && Object.keys(value).some((key) => !["version", "author", "personAttribution"].includes(key)) || strict && Object.keys(value.author).some((key) => !["subject", "presentation"].includes(key)) || strict && isRecord2(value.author.presentation) && Object.keys(value.author.presentation).some((key) => !["displayName", "handle", "avatarUrl"].includes(key)) || !idCodec("subject").decode(value.author.subject).ok || !isProfilePresentation(value.author.presentation)) {
+  if (!isRecord2(value) || value.version !== 1 || !isRecord2(value.author) || strict && Object.keys(value).some((key) => !["version", "author", "personAttribution"].includes(key)) || strict && Object.keys(value.author).some((key) => !["subject", "presentation"].includes(key)) || strict && isRecord2(value.author.presentation) && Object.keys(value.author.presentation).some((key) => !["displayName", "handle", "avatarUrl"].includes(key)) || (typeof value.author.subject !== "string" || value.author.subject.length === 0 || value.author.subject.length > 256) || !isProfilePresentation(value.author.presentation)) {
     return err("invalid-input", "Invalid V1 external contribution.");
   }
   let person = value.personAttribution;
-  if (!strict && isRecord2(person) && isRecord2(person.identity))
-    person = {
-      identity: { kind: person.identity.kind, key: person.identity.key, issuer: person.identity.issuer, subject: person.identity.subject },
-      presentation: isRecord2(person.presentation) ? { displayName: person.presentation.displayName, handle: person.presentation.handle, avatarUrl: person.presentation.avatarUrl } : person.presentation,
-      evidence: person.evidence
-    };
+  if (!strict)
+    person = normalizeExternalPersonOutput(person);
   if (strict && isRecord2(person) && isRecord2(person.presentation) && Object.keys(person.presentation).some((key) => !["displayName", "handle", "avatarUrl"].includes(key)))
     return err("invalid-input", "Unexpected presentation field.");
   const decoded = person === undefined ? null : externalPersonSnapshotCodec.decode(person);
@@ -963,6 +983,20 @@ function canonicalExternal(value) {
     return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonicalExternal(value[key])}`).join(",")}}`;
   return JSON.stringify(value);
 }
+function decodeExternalContributionOutcomeV1(raw) {
+  const decoded = decodeAcceptance(raw);
+  if (!decoded.ok || decoded.value.status !== "submitted")
+    return decoded;
+  if (decoded.value.receipt.evidence !== "host-accepted")
+    return err("incompatible", "V1 needs durable native acceptance.");
+  const receipt = decoded.value.receipt;
+  const contribution = decodeExternalContribution(receipt.externalContribution, false);
+  return contribution.ok ? ok({ status: "submitted", receipt: { ...decoded.value.receipt, externalContribution: contribution.value } }) : err("incompatible", "Host receipt omitted or changed V1 attribution.");
+}
+var externalContributionOutcomeV1Codec = {
+  decode: decodeExternalContributionOutcomeV1,
+  encode: (value) => value
+};
 function externalContributionMethods(upstream, extension, disposed) {
   const support = () => {
     if (disposed())
@@ -982,16 +1016,6 @@ function externalContributionMethods(upstream, extension, disposed) {
       return err("incompatible", "Malformed V1 external contribution capability.");
     return ok(value);
   };
-  const outcome = (raw) => {
-    const decoded = decodeAcceptance(raw);
-    if (!decoded.ok || decoded.value.status !== "submitted")
-      return decoded;
-    if (decoded.value.receipt.evidence !== "host-accepted")
-      return err("incompatible", "V1 needs durable native acceptance.");
-    const receipt = decoded.value.receipt;
-    const contribution = decodeExternalContribution(receipt.externalContribution, false);
-    return contribution.ok ? ok({ status: "submitted", receipt: { ...decoded.value.receipt, externalContribution: contribution.value } }) : err("incompatible", "Host receipt omitted or changed V1 attribution.");
-  };
   return {
     externalContributionCapabilities() {
       const negotiated = support();
@@ -1012,7 +1036,7 @@ function externalContributionMethods(upstream, extension, disposed) {
       const frozen = JSON.parse(JSON.stringify(decoded.value));
       const wire = JSON.parse(JSON.stringify(wireInput(input, upstream.inputCodec)));
       try {
-        const result = outcome(await negotiated.value.acceptV1({ contribution: frozen, input: wire }, options));
+        const result = decodeExternalContributionOutcomeV1(await negotiated.value.acceptV1({ contribution: frozen, input: wire }, options));
         if (!result.ok)
           return { status: "indeterminate", operationId, message: result.error.message };
         if (result.value.status === "submitted" && (result.value.receipt.operationId !== operationId || canonicalExternal(result.value.receipt.externalContribution) !== canonicalExternal(frozen))) {
@@ -1034,7 +1058,7 @@ function externalContributionMethods(upstream, extension, disposed) {
         if (!result.ok)
           return result;
         if (isRecord2(result.value) && result.value.status === "final") {
-          const decoded = outcome(result.value.outcome);
+          const decoded = decodeExternalContributionOutcomeV1(result.value.outcome);
           if (decoded.ok && decoded.value.status === "submitted" && decoded.value.receipt.operationId !== operationId) {
             return err("incompatible", "Host lookup returned a receipt for another operation.");
           }
@@ -1060,5 +1084,6 @@ export {
   serverSessionCodec,
   inspectForkExtension,
   externalContributionV1Codec,
+  externalContributionOutcomeV1Codec,
   createHostAdapter
 };

package/dist/index-runtime.js

@@ -1,4 +1,24 @@
 // @bun
+// external-person-output-runtime.ts
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeExternalPersonOutput(value) {
+  if (!record(value) || !record(value.identity) || !record(value.presentation))
+    return value;
+  return {
+    identity: { kind: value.identity.kind, key: value.identity.key, issuer: value.identity.issuer, subject: value.identity.subject },
+    presentation: { displayName: value.presentation.displayName, handle: value.presentation.handle, avatarUrl: value.presentation.avatarUrl },
+    evidence: value.evidence
+  };
+}
+function normalizeContributionOutput(value) {
+  return record(value) && value.personAttribution !== undefined ? { ...value, personAttribution: normalizeExternalPersonOutput(value.personAttribution) } : value;
+}
+function normalizeProvenanceOutput(value) {
+  return record(value) && Array.isArray(value.contributions) ? { ...value, contributions: value.contributions.map(normalizeContributionOutput) } : value;
+}
+
 // model-runtime.ts
 var ID_MAX_LENGTH = 256;
 var ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/;
@@ -165,6 +185,7 @@ function hasCompleteCausality(groups, contributions, missing) {
 }
 var provenanceCodec = {
   decode(input) {
+    input = normalizeProvenanceOutput(input);
     if (!isRecord(input) || input.status !== "known" && input.status !== "partial" && input.status !== "unknown") {
       return err("invalid-input", "Invalid execution provenance.");
     }

package/dist/model-runtime.js

@@ -1,4 +1,24 @@
 // @bun
+// external-person-output-runtime.ts
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeExternalPersonOutput(value) {
+  if (!record(value) || !record(value.identity) || !record(value.presentation))
+    return value;
+  return {
+    identity: { kind: value.identity.kind, key: value.identity.key, issuer: value.identity.issuer, subject: value.identity.subject },
+    presentation: { displayName: value.presentation.displayName, handle: value.presentation.handle, avatarUrl: value.presentation.avatarUrl },
+    evidence: value.evidence
+  };
+}
+function normalizeContributionOutput(value) {
+  return record(value) && value.personAttribution !== undefined ? { ...value, personAttribution: normalizeExternalPersonOutput(value.personAttribution) } : value;
+}
+function normalizeProvenanceOutput(value) {
+  return record(value) && Array.isArray(value.contributions) ? { ...value, contributions: value.contributions.map(normalizeContributionOutput) } : value;
+}
+
 // model-runtime.ts
 var ID_MAX_LENGTH = 256;
 var ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/;
@@ -165,6 +185,7 @@ function hasCompleteCausality(groups, contributions, missing) {
 }
 var provenanceCodec = {
   decode(input) {
+    input = normalizeProvenanceOutput(input);
     if (!isRecord(input) || input.status !== "known" && input.status !== "partial" && input.status !== "unknown") {
       return err("invalid-input", "Invalid execution provenance.");
     }

package/dist/testing-runtime.js

@@ -1,4 +1,27 @@
 // @bun
+// external-person-output-runtime.ts
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function normalizeExternalPersonOutput(value) {
+  if (!record(value) || !record(value.identity) || !record(value.presentation))
+    return value;
+  return {
+    identity: { kind: value.identity.kind, key: value.identity.key, issuer: value.identity.issuer, subject: value.identity.subject },
+    presentation: { displayName: value.presentation.displayName, handle: value.presentation.handle, avatarUrl: value.presentation.avatarUrl },
+    evidence: value.evidence
+  };
+}
+function normalizeContributionOutput(value) {
+  return record(value) && value.personAttribution !== undefined ? { ...value, personAttribution: normalizeExternalPersonOutput(value.personAttribution) } : value;
+}
+function normalizeProvenanceOutput(value) {
+  return record(value) && Array.isArray(value.contributions) ? { ...value, contributions: value.contributions.map(normalizeContributionOutput) } : value;
+}
+function normalizeEvidencePageOutput(value, normalize) {
+  return record(value) && Array.isArray(value.items) ? { ...value, items: value.items.map(normalize) } : value;
+}
+
 // model-runtime.ts
 var ID_MAX_LENGTH = 256;
 var ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:@/-]*$/;
@@ -165,6 +188,7 @@ function hasCompleteCausality(groups, contributions, missing) {
 }
 var provenanceCodec = {
   decode(input) {
+    input = normalizeProvenanceOutput(input);
     if (!isRecord(input) || input.status !== "known" && input.status !== "partial" && input.status !== "unknown") {
       return err("invalid-input", "Invalid execution provenance.");
     }
@@ -470,11 +494,11 @@ function createEnhancedDirectory(protocol) {
     }
     mappings.set(key, mapping);
   };
-  const profile = (source, record, revision) => {
-    if (!isRecord2(record) || !source.issuers.includes(record.issuer) || !idCodec("issuer").decode(record.issuer).ok || !idCodec("subject").decode(record.subject).ok || !isProfilePresentation(record.presentation) || record.status !== "current" && record.status !== "historical" || !idCodec("revision").decode(revision).ok)
+  const profile = (source, record2, revision) => {
+    if (!isRecord2(record2) || !source.issuers.includes(record2.issuer) || !idCodec("issuer").decode(record2.issuer).ok || !idCodec("subject").decode(record2.subject).ok || !isProfilePresentation(record2.presentation) || record2.status !== "current" && record2.status !== "historical" || !idCodec("revision").decode(revision).ok)
       return err("incompatible", "Provider directory record is malformed.");
-    const issuer = record.issuer;
-    const subject = record.subject;
+    const issuer = record2.issuer;
+    const subject = record2.subject;
     if (typeof issuer !== "string" || typeof subject !== "string")
       return err("incompatible", "Provider directory record is malformed.");
     let person;
@@ -485,10 +509,10 @@ function createEnhancedDirectory(protocol) {
     }
     if (!person.ok)
       return person;
-    if (person.value.kind !== "person" || person.value.issuer !== record.issuer || person.value.subject !== record.subject || !identityKeyCodec.decode(person.value.key).ok) {
+    if (person.value.kind !== "person" || person.value.issuer !== record2.issuer || person.value.subject !== record2.subject || !identityKeyCodec.decode(person.value.key).ok) {
       return err("incompatible", "Provider directory returned an invalid person reference.");
     }
-    return profileCodec.decode({ identity: person.value, presentation: record.presentation, revision, status: record.status });
+    return profileCodec.decode({ identity: person.value, presentation: record2.presentation, revision, status: record2.status });
   };
   return {
     async search(input, options) {
@@ -514,8 +538,8 @@ function createEnhancedDirectory(protocol) {
       if (!Array.isArray(result.value.records) || result.value.records.length > input.limit || result.value.nextCursor !== null && !idCodec("cursor").decode(result.value.nextCursor).ok || !idCodec("revision").decode(result.value.revision).ok)
         return err("incompatible", "Provider directory page is malformed.");
       const profiles = [];
-      for (const record of result.value.records) {
-        const decoded = profile(current.value, record, result.value.revision);
+      for (const record2 of result.value.records) {
+        const decoded = profile(current.value, record2, result.value.revision);
         if (!decoded.ok)
           return decoded;
         if (input.history === "current" && decoded.value.status !== "current")
@@ -824,7 +848,7 @@ function createHostAdapter(options) {
       } catch {
         return err("unavailable", "Contribution history is unavailable.", "after-reconnect");
       }
-      return result.ok ? decodeEvidencePage(result.value, isContribution2) : result;
+      return result.ok ? decodeEvidencePage(normalizeEvidencePageOutput(result.value, normalizeContributionOutput), isContribution2) : result;
     },
     async attempts(query, readOptions) {
       if (!validAttemptQuery(query))
@@ -837,7 +861,7 @@ function createHostAdapter(options) {
       } catch {
         return err("unavailable", "Execution history is unavailable.", "after-reconnect");
       }
-      return result.ok ? decodeEvidencePage(result.value, (item) => provenanceCodec.decode(item).ok) : result;
+      return result.ok ? decodeEvidencePage(normalizeEvidencePageOutput(result.value, normalizeProvenanceOutput), (item) => provenanceCodec.decode(item).ok) : result;
     }
   };
   const subscription = protocol.subscribe((event) => {
@@ -934,16 +958,12 @@ function createHostAdapter(options) {
   };
 }
 function decodeExternalContribution(value, strict = true) {
-  if (!isRecord2(value) || value.version !== 1 || !isRecord2(value.author) || strict && Object.keys(value).some((key) => !["version", "author", "personAttribution"].includes(key)) || strict && Object.keys(value.author).some((key) => !["subject", "presentation"].includes(key)) || strict && isRecord2(value.author.presentation) && Object.keys(value.author.presentation).some((key) => !["displayName", "handle", "avatarUrl"].includes(key)) || !idCodec("subject").decode(value.author.subject).ok || !isProfilePresentation(value.author.presentation)) {
+  if (!isRecord2(value) || value.version !== 1 || !isRecord2(value.author) || strict && Object.keys(value).some((key) => !["version", "author", "personAttribution"].includes(key)) || strict && Object.keys(value.author).some((key) => !["subject", "presentation"].includes(key)) || strict && isRecord2(value.author.presentation) && Object.keys(value.author.presentation).some((key) => !["displayName", "handle", "avatarUrl"].includes(key)) || (typeof value.author.subject !== "string" || value.author.subject.length === 0 || value.author.subject.length > 256) || !isProfilePresentation(value.author.presentation)) {
     return err("invalid-input", "Invalid V1 external contribution.");
   }
   let person = value.personAttribution;
-  if (!strict && isRecord2(person) && isRecord2(person.identity))
-    person = {
-      identity: { kind: person.identity.kind, key: person.identity.key, issuer: person.identity.issuer, subject: person.identity.subject },
-      presentation: isRecord2(person.presentation) ? { displayName: person.presentation.displayName, handle: person.presentation.handle, avatarUrl: person.presentation.avatarUrl } : person.presentation,
-      evidence: person.evidence
-    };
+  if (!strict)
+    person = normalizeExternalPersonOutput(person);
   if (strict && isRecord2(person) && isRecord2(person.presentation) && Object.keys(person.presentation).some((key) => !["displayName", "handle", "avatarUrl"].includes(key)))
     return err("invalid-input", "Unexpected presentation field.");
   const decoded = person === undefined ? null : externalPersonSnapshotCodec.decode(person);
@@ -966,6 +986,16 @@ function canonicalExternal(value) {
     return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${canonicalExternal(value[key])}`).join(",")}}`;
   return JSON.stringify(value);
 }
+function decodeExternalContributionOutcomeV1(raw) {
+  const decoded = decodeAcceptance(raw);
+  if (!decoded.ok || decoded.value.status !== "submitted")
+    return decoded;
+  if (decoded.value.receipt.evidence !== "host-accepted")
+    return err("incompatible", "V1 needs durable native acceptance.");
+  const receipt = decoded.value.receipt;
+  const contribution = decodeExternalContribution(receipt.externalContribution, false);
+  return contribution.ok ? ok({ status: "submitted", receipt: { ...decoded.value.receipt, externalContribution: contribution.value } }) : err("incompatible", "Host receipt omitted or changed V1 attribution.");
+}
 function externalContributionMethods(upstream, extension, disposed) {
   const support = () => {
     if (disposed())
@@ -985,16 +1015,6 @@ function externalContributionMethods(upstream, extension, disposed) {
       return err("incompatible", "Malformed V1 external contribution capability.");
     return ok(value);
   };
-  const outcome = (raw) => {
-    const decoded = decodeAcceptance(raw);
-    if (!decoded.ok || decoded.value.status !== "submitted")
-      return decoded;
-    if (decoded.value.receipt.evidence !== "host-accepted")
-      return err("incompatible", "V1 needs durable native acceptance.");
-    const receipt = decoded.value.receipt;
-    const contribution = decodeExternalContribution(receipt.externalContribution, false);
-    return contribution.ok ? ok({ status: "submitted", receipt: { ...decoded.value.receipt, externalContribution: contribution.value } }) : err("incompatible", "Host receipt omitted or changed V1 attribution.");
-  };
   return {
     externalContributionCapabilities() {
       const negotiated = support();
@@ -1015,7 +1035,7 @@ function externalContributionMethods(upstream, extension, disposed) {
       const frozen = JSON.parse(JSON.stringify(decoded.value));
       const wire = JSON.parse(JSON.stringify(wireInput(input, upstream.inputCodec)));
       try {
-        const result = outcome(await negotiated.value.acceptV1({ contribution: frozen, input: wire }, options));
+        const result = decodeExternalContributionOutcomeV1(await negotiated.value.acceptV1({ contribution: frozen, input: wire }, options));
         if (!result.ok)
           return { status: "indeterminate", operationId, message: result.error.message };
         if (result.value.status === "submitted" && (result.value.receipt.operationId !== operationId || canonicalExternal(result.value.receipt.externalContribution) !== canonicalExternal(frozen))) {
@@ -1037,7 +1057,7 @@ function externalContributionMethods(upstream, extension, disposed) {
         if (!result.ok)
           return result;
         if (isRecord2(result.value) && result.value.status === "final") {
-          const decoded = outcome(result.value.outcome);
+          const decoded = decodeExternalContributionOutcomeV1(result.value.outcome);
           if (decoded.ok && decoded.value.status === "submitted" && decoded.value.receipt.operationId !== operationId) {
             return err("incompatible", "Host lookup returned a receipt for another operation.");
           }
@@ -1991,39 +2011,39 @@ function createBbUpstreamDriver(options) {
   const active = new Set;
   const listeners = new Set;
   const labelledExternal = new WeakSet;
-  const terminateScope = (record, scope) => {
+  const terminateScope = (record2, scope) => {
     if (!scope || scope.released)
       return;
     scope.released = true;
-    record.controller.signal.removeEventListener("abort", scope.parentAbort);
+    record2.controller.signal.removeEventListener("abort", scope.parentAbort);
     scope.controller.abort();
-    record.scopes.delete(scope);
+    record2.scopes.delete(scope);
   };
-  const terminate = (record) => {
-    for (const scope of [...record.scopes])
-      terminateScope(record, scope);
-    record.controller.abort();
-    active.delete(record);
+  const terminate = (record2) => {
+    for (const scope of [...record2.scopes])
+      terminateScope(record2, scope);
+    record2.controller.abort();
+    active.delete(record2);
   };
   const known = (context) => {
-    const record = records.get(context);
-    return !record ? err("invalid-input", "Invocation context was not issued by this binding.") : disposed ? err("disposed", "Upstream binding is disposed.") : record.controller.signal.aborted ? err("expired", "Invocation context has expired.") : ok(record);
+    const record2 = records.get(context);
+    return !record2 ? err("invalid-input", "Invocation context was not issued by this binding.") : disposed ? err("disposed", "Upstream binding is disposed.") : record2.controller.signal.aborted ? err("expired", "Invocation context has expired.") : ok(record2);
   };
   const admission = (context) => {
-    const record = known(context);
-    if (!record.ok)
-      return record;
-    if (record.value.origin === "external")
+    const record2 = known(context);
+    if (!record2.ok)
+      return record2;
+    if (record2.value.origin === "external")
       return err("unauthenticated", "External upstream work uses an explicit external source.");
-    return record;
+    return record2;
   };
   const session = (context) => {
-    const record = known(context);
-    if (!record.ok)
-      return unavailableSession(instanceId, record.error.code === "invalid-input" ? "incompatible" : "unauthenticated", record.error.message);
-    if (record.value.origin === "interactive-user")
+    const record2 = known(context);
+    if (!record2.ok)
+      return unavailableSession(instanceId, record2.error.code === "invalid-input" ? "incompatible" : "unauthenticated", record2.error.message);
+    if (record2.value.origin === "interactive-user")
       return readySession();
-    return record.value.origin === "background" ? machineSession() : unavailableSession(instanceId, "unauthenticated", "External upstream work uses an explicit external source.");
+    return record2.value.origin === "background" ? machineSession() : unavailableSession(instanceId, "unauthenticated", "External upstream work uses an explicit external source.");
   };
   const driver = {
     instanceId,
@@ -2041,20 +2061,20 @@ function createBbUpstreamDriver(options) {
       const allowed = admission(context);
       if (!allowed.ok)
         return allowed;
-      const record = allowed.value;
+      const record2 = allowed.value;
       let scope;
-      const parentAbort = () => terminateScope(record, scope);
+      const parentAbort = () => terminateScope(record2, scope);
       scope = { controller: new AbortController, parentAbort, released: false };
-      record.scopes.add(scope);
-      const expire = () => terminateScope(record, scope);
-      record.controller.signal.addEventListener("abort", parentAbort, { once: true });
-      const exposedSession = record.origin === "background" ? machineSession() : readySession();
-      const expectedKey = record.origin === "background" ? machineKey.value : singletonKey;
+      record2.scopes.add(scope);
+      const expire = () => terminateScope(record2, scope);
+      record2.controller.signal.addEventListener("abort", parentAbort, { once: true });
+      const exposedSession = record2.origin === "background" ? machineSession() : readySession();
+      const expectedKey = record2.origin === "background" ? machineKey.value : singletonKey;
       return ok({
         signal: scope.controller.signal,
         session: exposedSession,
         validate(expected) {
-          if (scope.released || scope.controller.signal.aborted || record.controller.signal.aborted || disposed) {
+          if (scope.released || scope.controller.signal.aborted || record2.controller.signal.aborted || disposed) {
             return err("expired", "Upstream request context is no longer live.");
           }
           return expected.actor === expectedKey && expected.session === stamp.value ? ok(undefined) : err("stale-context", "Request expectation does not match the singleton session.");
@@ -2138,22 +2158,22 @@ function createBbUpstreamDriver(options) {
         throw new Error("Upstream binding is disposed.");
       const controller = new AbortController;
       const invocation = Object.freeze({ origin, signal: controller.signal });
-      const record = { origin, controller, scopes: new Set };
-      records.set(invocation, record);
-      active.add(record);
+      const record2 = { origin, controller, scopes: new Set };
+      records.set(invocation, record2);
+      active.add(record2);
       return invocation;
     },
     release(invocation) {
-      const record = records.get(invocation);
-      if (record)
-        terminate(record);
+      const record2 = records.get(invocation);
+      if (record2)
+        terminate(record2);
     },
     dispose() {
       if (disposed)
         return;
       disposed = true;
-      for (const record of [...active])
-        terminate(record);
+      for (const record2 of [...active])
+        terminate(record2);
       for (const listener of [...listeners]) {
         try {
           listener({ kind: "disposed" });
@@ -2780,8 +2800,8 @@ function createBbIdentityServerBinding(options) {
   const invocations = new WeakMap;
   const expired = () => err("expired", "Invocation has already settled.");
   const recordFor = (invocation) => {
-    const record = invocations.get(invocation);
-    return disposed || !record || record.settled || record.signal.aborted ? expired() : ok(record);
+    const record2 = invocations.get(invocation);
+    return disposed || !record2 || record2.settled || record2.signal.aborted ? expired() : ok(record2);
   };
   const unavailableSession2 = () => ({
     status: "unavailable",
@@ -2789,25 +2809,25 @@ function createBbIdentityServerBinding(options) {
     error: { code: "expired", message: "Invocation has already settled.", retry: "after-refresh" }
   });
   const openPerson = async (invocation) => {
-    const record = recordFor(invocation);
-    if (!record.ok)
-      return record;
-    const opened = await server.personRequest(record.value.request);
-    if (record.value.settled || record.value.signal.aborted) {
+    const record2 = recordFor(invocation);
+    if (!record2.ok)
+      return record2;
+    const opened = await server.personRequest(record2.value.request);
+    if (record2.value.settled || record2.value.signal.aborted) {
       if (opened.ok)
         opened.value.dispose();
       return expired();
     }
     if (opened.ok)
-      record.value.people.add(opened.value);
+      record2.value.people.add(opened.value);
     return opened;
   };
   const guardEndpoint = async (invocation, operation) => {
-    const record = recordFor(invocation);
-    if (!record.ok)
-      return record;
-    const result = await operation(record.value.request);
-    return record.value.settled || record.value.signal.aborted ? expired() : result;
+    const record2 = recordFor(invocation);
+    if (!record2.ok)
+      return record2;
+    const result = await operation(record2.value.request);
+    return record2.value.settled || record2.value.signal.aborted ? expired() : result;
   };
   let disposeBinding = () => {};
   const guardedHistory = {
@@ -2828,11 +2848,11 @@ function createBbIdentityServerBinding(options) {
     instanceId: server.instanceId,
     commits: server.commits,
     async session(invocation) {
-      const record = recordFor(invocation);
-      if (!record.ok)
+      const record2 = recordFor(invocation);
+      if (!record2.ok)
         return unavailableSession2();
-      const session = await server.session(record.value.request);
-      return record.value.settled || record.value.signal.aborted ? unavailableSession2() : session;
+      const session = await server.session(record2.value.request);
+      return record2.value.settled || record2.value.signal.aborted ? unavailableSession2() : session;
     },
     selfProfile: (invocation) => guardEndpoint(invocation, (request) => server.selfProfile(request)),
     personRequest: openPerson,
@@ -2909,18 +2929,18 @@ function createBbIdentityServerBinding(options) {
     return endpointRegistered;
   }
   const createInvocation = (context) => {
-    const record = { request: context.request, signal: context.signal, people: new Set, settled: false };
+    const record2 = { request: context.request, signal: context.signal, people: new Set, settled: false };
     const invocation = {
       origin: context.origin,
       signal: context.signal,
       person: () => context.origin === "external" ? Promise.resolve(err("unauthenticated", "External invocation uses an explicit external source.")) : openPerson(invocation)
     };
-    invocations.set(invocation, record);
+    invocations.set(invocation, record2);
     const finish = () => {
-      record.settled = true;
-      for (const request of record.people)
+      record2.settled = true;
+      for (const request of record2.people)
         request.dispose();
-      record.people.clear();
+      record2.people.clear();
     };
     return { invocation, finish };
   };
@@ -3136,7 +3156,7 @@ function createMultiUserProtocol(instanceId, initial) {
       }
     };
   };
-  const record = (subject) => {
+  const record2 = (subject) => {
     const person = people.get(subject);
     return person ? { issuer: ISSUER, subject, presentation: { displayName: person.name, handle: null, avatarUrl: null }, status: "current" } : null;
   };
@@ -3146,11 +3166,11 @@ function createMultiUserProtocol(instanceId, initial) {
     generation: brand("provider-generation", "wire-fake-provider"),
     async directory(input) {
       const query = input.query.toLowerCase();
-      const records = [...people.keys()].map(record).filter((r) => r !== null && (r.subject.includes(query) || r.presentation.displayName.toLowerCase().includes(query))).slice(0, input.limit);
+      const records = [...people.keys()].map(record2).filter((r) => r !== null && (r.subject.includes(query) || r.presentation.displayName.toLowerCase().includes(query))).slice(0, input.limit);
       return ok({ records, nextCursor: null, revision: revision() });
     },
     async lookup(subjects) {
-      return ok({ revision: revision(), records: subjects.map((s) => ({ issuer: s.issuer, subject: s.subject, record: s.issuer === ISSUER ? record(s.subject) : null })) });
+      return ok({ revision: revision(), records: subjects.map((s) => ({ issuer: s.issuer, subject: s.subject, record: s.issuer === ISSUER ? record2(s.subject) : null })) });
     },
     person(issuer, subject) {
       const key = identityKeyCodec.decode(`${issuer}:${subject}`);
@@ -3402,8 +3422,8 @@ function canonical(value) {
     return JSON.stringify(value) ?? "undefined";
   if (Array.isArray(value))
     return "[" + value.map(canonical).join(",") + "]";
-  const record = value;
-  return "{" + Object.keys(record).filter((k) => record[k] !== undefined).sort().map((k) => JSON.stringify(k) + ":" + canonical(record[k])).join(",") + "}";
+  const record2 = value;
+  return "{" + Object.keys(record2).filter((k) => record2[k] !== undefined).sort().map((k) => JSON.stringify(k) + ":" + canonical(record2[k])).join(",") + "}";
 }
 function id(kind, value) {
   const decoded = idCodec(kind).decode(value);

package/host.d.ts

@@ -49,6 +49,7 @@ export type ExternalContributionOutcomeV1 = Exclude<AcceptanceOutcome, { status:
     readonly externalContribution: ExternalContributionV1;
   };
 };
+export declare const externalContributionOutcomeV1Codec: Codec<ExternalContributionOutcomeV1>;
 /** Context-free support; native storage written by V1 requires a capable host on rollback. */
 export interface ExternalContributionCapabilityV1 {
   readonly version: 1; readonly personKinds: readonly ['person'];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@phosphorco/bb-identity",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "type": "module",
   "license": "MIT",
   "description": "Portable identity, provenance, and state contracts for BB integrations.",