@polpo-ai/core 0.15.144 → 0.16.1

package/README.md

@@ -8,6 +8,36 @@ Pure business logic, types, schemas, and store interfaces for the [Polpo](https:
 npm install @polpo-ai/core
 ```
 
+## Durable Task execution
+
+First-party file and SQL stores expose `TaskExecutionStore` from
+`@polpo-ai/core/task-execution`. TaskRunner claims a persisted pending Task and
+creates its Run atomically before asynchronous preparation. Configure TaskStore
+and RunStore against the same project/database using the matching store factory.
+A claim uses the persisted input and principal; competing dispatchers cannot both
+start the same pending generation.
+
+Result collection passes a `TaskExecutionReference` to the assessment callback;
+forward that third argument when composing your own engine. Assessment, retry,
+fix, clarification and escalation writes retain that reference through awaits.
+Cancellation or requeue invalidates it. Obsolete results are acknowledged without
+attaching their session, outcomes or completion to the next attempt. Requeue
+publishes its complete input and retry counter in one transaction.
+
+TaskManager cancellation commits the captured Task/Run state before notifying
+`Spawner.cancelRun(runId)`. Node and in-process spawners notify only their local
+owner for that exact Run; they do not infer ownership from a persisted PID.
+Hosts must also observe durable cancellation while executing. Cross-host polling,
+Cloud cold cancellation, approval resolution and Mission abort still need their
+own integration; this contract alone does not prove a remote process has stopped.
+
+Task creation, Mission admission, scheduling and spawning await asynchronous
+before-hooks. A human spawn gate invalidates the claimed attempt and retains
+`awaiting_approval`; a generic veto requeues without consuming a retry. Custom
+stores without execution persistence retain legacy behavior only for unversioned
+Tasks. Stop old writers during upgrade or rollback, and never force a status
+change as a fallback for an execution conflict.
+
 ## Agentic loops
 
 Use `defineProjectLoop` for code-first loop definitions that compile to the same JSON-compatible contract used by the API, CLI, dashboard, and runtime. Project files can live in `.polpo/loops/*.ts`; `polpo deploy` sends the source to the server, which compiles it statically and persists canonical JSON.

package/dist/__tests__/custom-tool-runner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=custom-tool-runner.test.d.ts.map

package/dist/__tests__/custom-tool-runner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-tool-runner.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/custom-tool-runner.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/custom-tool-runner.test.js

@@ -0,0 +1,121 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { createToolInvocationContext } from "../tool-invocation.js";
+import { createRemoteCustomTools, CustomToolRunnerRequestSchema, MAX_CUSTOM_TOOL_RUNNER_REQUEST_BYTES, MAX_CUSTOM_TOOL_RUNNER_RESPONSE_BYTES } from "../custom-tool-runner.js";
+const lease = () => ({ version: 1, url: "https://host.test/internal/tools", token: "fixture_private_bearer",
+    sandboxId: "sandbox", agentName: "support", agentIdentity: { name: "support", incarnation: "original" },
+    runId: "run", expiresAt: new Date(Date.now() + 60_000).toISOString() });
+const invocation = createToolInvocationContext({ requestId: "request", runId: "run", surface: "task",
+    agent: { name: "support", incarnation: "original" }, user: "customer" });
+const inventory = [{ name: "read_mail", label: "Read mail", description: "Read", parameters: { type: "object", properties: {} } }];
+afterEach(() => vi.useRealTimers());
+describe("remote custom-tool host port", () => {
+    it("transmits only inventory/call intent, preserving private run authority outside model schemas", async () => {
+        const requests = [];
+        const fetcher = vi.fn(async (_url, options) => {
+            const request = JSON.parse(String(options?.body));
+            requests.push(request);
+            expect(new Headers(options?.headers).get("authorization")).toBe("Bearer fixture_private_bearer");
+            expect(options?.redirect).toBe("error");
+            return Response.json({ ok: true, data: request.operation === "inventory" ? inventory : { content: [{ type: "text", text: "mail" }], details: null } });
+        });
+        const tools = await createRemoteCustomTools(lease(), { fetch: fetcher })({ agentName: "support", allowedTools: ["read_mail"], invocation });
+        expect(JSON.stringify(tools)).not.toContain("fixture_private_bearer");
+        expect(await tools[0].execute("call", { user: "forged" })).toMatchObject({ content: [{ text: "mail" }] });
+        expect(requests).toEqual([{ operation: "inventory" }, { operation: "call", toolName: "read_mail", toolCallId: "call", arguments: { user: "forged" } }]);
+    });
+    it("retains exact custom-tool allowlists without expanding built-in wildcards", async () => {
+        const fetcher = vi.fn(async () => Response.json({ ok: true, data: inventory }));
+        const resolve = createRemoteCustomTools(lease(), { fetch: fetcher });
+        expect(await resolve({ agentName: "support", allowedTools: ["read_*"], invocation })).toEqual([]);
+    });
+    it.each(["run", "agent", "incarnation", "expired"])("denies mismatched %s before sending a request", async (mismatch) => {
+        const value = lease();
+        if (mismatch === "run")
+            value.runId = "different";
+        if (mismatch === "agent") {
+            value.agentName = "different";
+            value.agentIdentity.name = "different";
+        }
+        if (mismatch === "incarnation")
+            value.agentIdentity.incarnation = "replacement";
+        if (mismatch === "expired")
+            value.expiresAt = "2000-01-01T00:00:00.000Z";
+        const fetcher = vi.fn();
+        await expect(createRemoteCustomTools(value, { fetch: fetcher })({ agentName: "support", allowedTools: ["*"], invocation })).rejects.toThrow();
+        expect(fetcher).not.toHaveBeenCalled();
+    });
+    it("does not reflect transport exceptions, remote error messages or retry a failed call", async () => {
+        const fetcher = vi.fn().mockResolvedValueOnce(Response.json({ ok: true, data: inventory }))
+            .mockRejectedValueOnce(new Error("fixture_private_bearer in SDK request"));
+        const [tool] = await createRemoteCustomTools(lease(), { fetch: fetcher })({ agentName: "support", allowedTools: ["*"], invocation });
+        await expect(tool.execute("call", {})).rejects.toThrow(/^Custom tool broker request failed$/);
+        expect(fetcher).toHaveBeenCalledTimes(2);
+    });
+    it("honors invocation cancellation before a later call", async () => {
+        const controller = new AbortController();
+        const fetcher = vi.fn(async () => Response.json({ ok: true, data: inventory }));
+        const [tool] = await createRemoteCustomTools(lease(), { fetch: fetcher })({ agentName: "support", allowedTools: ["*"], invocation, signal: controller.signal });
+        controller.abort();
+        await expect(tool.execute("call", {})).rejects.toThrow();
+        expect(fetcher).toHaveBeenCalledOnce();
+    });
+    it.each(["http://remote.test", "https://secret@host.test", "https://host.test?secret=value", "https://host.test#secret", "not-a-url"])("rejects unsafe broker URL %s", url => {
+        expect(() => createRemoteCustomTools({ ...lease(), url })).toThrow(/^Custom tool broker request failed$/);
+    });
+    it.each(["duplicate", "private-metadata", "remote-error", "oversized", "bad-json"])("rejects %s responses without reflecting their content", async (scenario) => {
+        const fetcher = vi.fn(async () => {
+            if (scenario === "remote-error")
+                return Response.json({ ok: false, error: { message: "private_secret" } }, { status: 403 });
+            if (scenario === "bad-json")
+                return new Response("private_secret");
+            if (scenario === "oversized")
+                return new Response("private_secret", { headers: { "content-length": String(MAX_CUSTOM_TOOL_RUNNER_RESPONSE_BYTES + 1) } });
+            return Response.json({ ok: true, data: scenario === "duplicate" ? [...inventory, ...inventory] : [{ ...inventory[0], token: "private_secret" }] });
+        });
+        await expect(createRemoteCustomTools(lease(), { fetch: fetcher })({ agentName: "support", allowedTools: ["*"], invocation }))
+            .rejects.toThrow(/^Custom tool broker request failed$/);
+        expect(fetcher).toHaveBeenCalledOnce();
+    });
+    it("denies oversized arguments before delivery and malformed tool results after delivery", async () => {
+        const fetcher = vi.fn().mockResolvedValueOnce(Response.json({ ok: true, data: inventory }))
+            .mockResolvedValueOnce(Response.json({ ok: true, data: { token: "private_secret" } }));
+        const [tool] = await createRemoteCustomTools(lease(), { fetch: fetcher })({ agentName: "support", allowedTools: ["*"], invocation });
+        await expect(tool.execute("call", { value: "x".repeat(MAX_CUSTOM_TOOL_RUNNER_REQUEST_BYTES) })).rejects.toThrow();
+        expect(fetcher).toHaveBeenCalledOnce();
+        await expect(tool.execute("call-2", {})).rejects.toThrow(/^Custom tool broker request failed$/);
+    });
+    it("enforces the byte limit even when content-length is absent", async () => {
+        const fetcher = vi.fn(async () => new Response(new ReadableStream({ start(controller) {
+                controller.enqueue(new Uint8Array(MAX_CUSTOM_TOOL_RUNNER_RESPONSE_BYTES + 1));
+                controller.close();
+            } })));
+        await expect(createRemoteCustomTools(lease(), { fetch: fetcher })({ agentName: "support", invocation }))
+            .rejects.toThrow(/^Custom tool broker request failed$/);
+    });
+    it("bounds a stuck inventory fetch even if the transport ignores cancellation", async () => {
+        vi.useFakeTimers();
+        const fetcher = vi.fn(async () => new Promise(() => { }));
+        const work = createRemoteCustomTools(lease(), { fetch: fetcher })({ agentName: "support", invocation });
+        const check = expect(work).rejects.toThrow(/^Custom tool capability is no longer available$/);
+        await vi.advanceTimersByTimeAsync(30_001);
+        await check;
+        expect(fetcher).toHaveBeenCalledOnce();
+    });
+    it("allows a long-running custom tool past MCP's timeout, then aborts at lease expiry", async () => {
+        vi.useFakeTimers();
+        let signal;
+        const fetcher = vi.fn().mockResolvedValueOnce(Response.json({ ok: true, data: inventory }))
+            .mockImplementationOnce(async (_url, options) => { signal = options.signal; return new Promise(() => { }); });
+        const [tool] = await createRemoteCustomTools(lease(), { fetch: fetcher })({ agentName: "support", allowedTools: ["*"], invocation });
+        const check = expect(tool.execute("call", {})).rejects.toThrow(/^Custom tool capability is no longer available$/);
+        await vi.advanceTimersByTimeAsync(30_001);
+        expect(signal?.aborted).toBe(false);
+        await vi.advanceTimersByTimeAsync(30_000);
+        await check;
+        expect(signal?.aborted).toBe(true);
+    });
+    it.each(["provider", "slot", "mode", "connectionId", "invocation", "sandboxId"])("rejects a runner-supplied %s authority override", key => {
+        expect(CustomToolRunnerRequestSchema.safeParse({ operation: "call", toolName: "read_mail", toolCallId: "call", arguments: {}, [key]: "forged" }).success).toBe(false);
+    });
+});
+//# sourceMappingURL=custom-tool-runner.test.js.map

package/dist/__tests__/custom-tool-runner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-tool-runner.test.js","sourceRoot":"","sources":["../../src/__tests__/custom-tool-runner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,uBAAuB,EAAE,6BAA6B,EAAE,oCAAoC,EACnG,qCAAqC,EAAE,MAAM,0BAA0B,CAAC;AAE1E,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAU,EAAE,GAAG,EAAE,kCAAkC,EAAE,KAAK,EAAE,wBAAwB;IAClH,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE;IACvG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC1E,MAAM,UAAU,GAAG,2BAA2B,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM;IAClG,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;AAC3E,MAAM,SAAS,GAAG,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;AACnI,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;AAEpC,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,MAAM,QAAQ,GAAc,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,IAAa,EAAE,OAAgC,EAAE,EAAE;YAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC1E,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;YACjG,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACxC,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACzJ,CAAC,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAuB,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5J,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QACtE,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1G,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1J,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,OAAO,GAAG,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,MAAM,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC,+CAA+C,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;QACpH,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC;QACtB,IAAI,QAAQ,KAAK,KAAK;YAAE,KAAK,CAAC,KAAK,GAAG,WAAW,CAAC;QAClD,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YAAC,KAAK,CAAC,SAAS,GAAG,WAAW,CAAC;YAAC,KAAK,CAAC,aAAa,CAAC,IAAI,GAAG,WAAW,CAAC;QAAC,CAAC;QACpG,IAAI,QAAQ,KAAK,aAAa;YAAE,KAAK,CAAC,aAAa,CAAC,WAAW,GAAG,aAAa,CAAC;QAChF,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,SAAS,GAAG,0BAA0B,CAAC;QACzE,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QACxB,MAAM,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9I,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,KAAK,IAAI,EAAE;QACnG,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;aACxF,qBAAqB,CAAC,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC,CAAC;QAC7E,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QACrI,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QAC9F,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAChF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QAChK,UAAU,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACzD,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,oBAAoB,EAAE,0BAA0B,EAAE,gCAAgC,EAAE,0BAA0B,EAAE,WAAW,CAAC,CAAC,CAAC,8BAA8B,EAAE,GAAG,CAAC,EAAE;QAC3K,MAAM,CAAC,GAAG,EAAE,CAAC,uBAAuB,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,kBAAkB,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC,CAAC,uDAAuD,EAAE,KAAK,EAAC,QAAQ,EAAC,EAAE;QAC5J,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE;YAC/B,IAAI,QAAQ,KAAK,cAAc;gBAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5H,IAAI,QAAQ,KAAK,UAAU;gBAAE,OAAO,IAAI,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACnE,IAAI,QAAQ,KAAK,WAAW;gBAAE,OAAO,IAAI,QAAQ,CAAC,gBAAgB,EAAE,EAAE,OAAO,EAAE,EAAE,gBAAgB,EAAE,MAAM,CAAC,qCAAqC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1J,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC;QACrJ,CAAC,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;aAC1H,OAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;aACxF,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC;QACzF,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QACrI,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,oCAAoC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAClH,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACvC,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,cAAc,CAAC,EAAE,KAAK,CAAC,UAAU;gBAClF,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,qCAAqC,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC9E,UAAU,CAAC,KAAK,EAAE,CAAC;YACrB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACP,MAAM,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;aACrG,OAAO,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,OAAO,CAAW,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC;QACnE,MAAM,IAAI,GAAG,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QACxG,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;QAC9F,MAAM,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC;QACZ,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,MAA+B,CAAC;QACpC,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;aACxF,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/G,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,uBAAuB,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC;QACrI,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC;QAClH,MAAM,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC;QACZ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC,iDAAiD,EAAE,GAAG,CAAC,EAAE;QACxI,MAAM,CAAC,6BAA6B,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxK,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/mcp-runner-client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mcp-runner-client.test.d.ts.map

package/dist/__tests__/mcp-runner-client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-runner-client.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/mcp-runner-client.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/mcp-runner-client.test.js

@@ -0,0 +1,144 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { createRemoteMcpRuntimeCapabilities, McpRunnerRequestSchema } from "../mcp-runner.js";
+import { createToolInvocationContext } from "../tool-invocation.js";
+const invocation = createToolInvocationContext({ requestId: "request", runId: "run", user: "forged-user", surface: "task", agent: { name: "support", incarnation: "original" } });
+const lease = () => ({ version: 2, url: "https://polpo.example/mcp", token: "fixture-bearer",
+    sandboxId: "sandbox", agentName: "support", agentIdentity: { name: "support", incarnation: "original" }, runId: "run", expiresAt: new Date(Date.now() + 60_000).toISOString() });
+const inventory = [{ serverName: "docs", tools: [{ name: "read", inputSchema: { type: "object" } }] }, { serverName: "revoked", tools: [] }];
+const json = (data) => Response.json({ ok: true, data });
+const request = { serverName: "docs", toolName: "read", toolCallId: "call", invocation };
+const load = (factory) => factory({ agentName: "support", invocation });
+afterEach(() => vi.useRealTimers());
+describe("MCP subprocess protocol", () => {
+    it("exposes only a validated rate limit to the agent and never retries", async () => {
+        const fetcher = vi.fn().mockResolvedValueOnce(json(inventory)).mockResolvedValueOnce(Response.json({
+            ok: false, error: { code: "rate_limited", message: "private upstream text", retryAfterSeconds: 7, secret: "private" },
+        }, { status: 429 }));
+        const providers = await load(createRemoteMcpRuntimeCapabilities(lease(), { fetch: fetcher }));
+        const capability = await providers.docs.resolver.resolve(request);
+        const error = await capability.call({}).catch(error => error);
+        expect(error).toMatchObject({ code: "rate_limited", retryAfterSeconds: 7, message: "Connection request limit exceeded; retry after 7 seconds" });
+        expect(JSON.stringify(error)).not.toContain("private");
+        expect(fetcher).toHaveBeenCalledTimes(2);
+    });
+    it.each([0, -1, 1.5, 86401, "7", null])("redacts malformed rate-limit retry %j", async (retryAfterSeconds) => {
+        const fetcher = vi.fn().mockResolvedValue(Response.json({
+            ok: false, error: { code: "rate_limited", message: "private", retryAfterSeconds },
+        }, { status: 429 }));
+        await expect(load(createRemoteMcpRuntimeCapabilities(lease(), { fetch: fetcher }))).rejects.toThrow(/^MCP broker request failed$/);
+    });
+    it.each(["missing", "malformed", "extra-field", "wrong-name", "old-protocol"])("rejects %s lease identity before any request", scenario => {
+        const input = lease();
+        if (scenario === "missing")
+            delete input.agentIdentity;
+        if (scenario === "malformed")
+            input.agentIdentity.incarnation = "invalid identity";
+        if (scenario === "extra-field")
+            input.agentIdentity.version = 2;
+        if (scenario === "wrong-name")
+            input.agentIdentity.name = "other";
+        if (scenario === "old-protocol")
+            input.version = 1;
+        const fetcher = vi.fn();
+        expect(() => createRemoteMcpRuntimeCapabilities(input, { fetch: fetcher })).toThrow(/^MCP broker request failed$/);
+        expect(fetcher).not.toHaveBeenCalled();
+    });
+    it.each([undefined, { name: "support", incarnation: "replacement" }])("denies missing/substituted identity before inventory (%j)", async (agent) => {
+        const fetcher = vi.fn().mockResolvedValue(json(inventory));
+        const factory = createRemoteMcpRuntimeCapabilities(lease(), { fetch: fetcher });
+        await expect(factory({ agentName: "support", invocation: { ...invocation, agent } })).rejects.toThrow();
+        expect(fetcher).not.toHaveBeenCalled();
+    });
+    it("denies a replaced identity at tool acquisition after valid inventory", async () => {
+        const fetcher = vi.fn().mockResolvedValue(json(inventory));
+        const providers = await load(createRemoteMcpRuntimeCapabilities(lease(), { fetch: fetcher }));
+        await expect(providers.docs.resolver.resolve({ ...request, invocation: { ...invocation, agent: { name: "support", incarnation: "replacement" } } })).rejects.toThrow();
+        expect(fetcher).toHaveBeenCalledOnce();
+    });
+    it("rejects caller-controlled identity, destinations and authorization fields", () => {
+        for (const field of ["user", "invocation", "agentName", "url", "connectionId", "headers", "allowedTools"]) {
+            expect(McpRunnerRequestSchema.safeParse({ operation: "inventory", [field]: "forged" }).success).toBe(false);
+            expect(McpRunnerRequestSchema.safeParse({ operation: "call", capability: "mcp__docs__read", toolCallId: "call", arguments: {}, [field]: "forged" }).success).toBe(false);
+        }
+        expect(McpRunnerRequestSchema.safeParse({ operation: "call", capability: "mcp__docs__read", toolCallId: "call", arguments: [] }).success).toBe(false);
+    });
+    it("only sends an opaque lease and logical operation; each capability is single use", async () => {
+        const fetcher = vi.fn().mockResolvedValueOnce(json(inventory)).mockResolvedValueOnce(json({ content: [{ type: "text", text: "result" }] }));
+        const input = lease();
+        const factory = createRemoteMcpRuntimeCapabilities(input, { fetch: fetcher });
+        input.token = "mutated";
+        input.agentIdentity.incarnation = "mutated-after-construction";
+        const providers = await load(factory);
+        expect(providers.revoked.tools).toEqual([]);
+        const capability = await providers.docs.resolver.resolve(request);
+        expect(fetcher).toHaveBeenCalledTimes(1);
+        expect(await capability.call({ user: "tool-data" })).toEqual({ content: [{ type: "text", text: "result" }] });
+        await expect(capability.call({})).rejects.toThrow("no longer available");
+        const init = fetcher.mock.calls[1][1];
+        expect(JSON.parse(init.body)).toEqual({ operation: "call", capability: "mcp__docs__read", toolCallId: "call", arguments: { user: "tool-data" } });
+        expect(new Headers(init.headers).get("authorization")).toBe("Bearer fixture-bearer");
+        expect(new Headers(init.headers).get("x-polpo-sandbox-id")).toBe("sandbox");
+        expect(init.redirect).toBe("error");
+        await capability.dispose();
+    });
+    it("rejects mismatched agent/run, unknown tool, expired lease and unsafe endpoint before network", async () => {
+        const fetcher = vi.fn().mockResolvedValue(json(inventory));
+        const factory = createRemoteMcpRuntimeCapabilities(lease(), { fetch: fetcher });
+        await expect(factory({ agentName: "other", invocation })).rejects.toThrow();
+        await expect(factory({ agentName: "support", invocation: { ...invocation, runId: "other" } })).rejects.toThrow();
+        expect(fetcher).not.toHaveBeenCalled();
+        const providers = await load(factory);
+        await expect(providers.docs.resolver.resolve({ ...request, toolName: "write" })).rejects.toThrow();
+        await expect(providers.docs.resolver.resolve({ ...request, serverName: "other" })).rejects.toThrow();
+        for (const url of ["http://polpo.example/mcp", "https://u:p@polpo.example/mcp", "https://polpo.example/mcp?secret=x", "https://polpo.example/mcp#x", "file:///tmp/mcp"]) {
+            expect(() => createRemoteMcpRuntimeCapabilities({ ...lease(), url })).toThrow();
+        }
+        const expired = createRemoteMcpRuntimeCapabilities({ ...lease(), expiresAt: "2000-01-01T00:00:00.000Z" }, { fetch: fetcher });
+        await expect(load(expired)).rejects.toThrow();
+        expect(fetcher).toHaveBeenCalledTimes(1);
+    });
+    it("redacts remote errors and never retries a possibly completed mutation", async () => {
+        const fetcher = vi.fn().mockResolvedValueOnce(json(inventory))
+            .mockRejectedValueOnce(new Error("provider secret fixture-bearer https://secret.example"));
+        const providers = await load(createRemoteMcpRuntimeCapabilities(lease(), { fetch: fetcher }));
+        const capability = await providers.docs.resolver.resolve(request);
+        await expect(capability.call({})).rejects.toThrow(/^MCP broker request failed$/);
+        await expect(capability.call({})).rejects.toThrow();
+        expect(fetcher).toHaveBeenCalledTimes(2);
+    });
+    it("disposal cancels an in-flight call even when the fetch adapter ignores abort", async () => {
+        const fetcher = vi.fn().mockResolvedValueOnce(json(inventory))
+            .mockImplementationOnce(() => new Promise(() => { }));
+        const providers = await load(createRemoteMcpRuntimeCapabilities(lease(), { fetch: fetcher }));
+        const capability = await providers.docs.resolver.resolve(request);
+        const pending = capability.call({});
+        const check = expect(pending).rejects.toThrow();
+        capability.dispose();
+        await check;
+        expect(fetcher.mock.calls[1]?.[1]?.signal?.aborted ?? true).toBe(true);
+    });
+    it("bounds inventory stalls and response body reads", async () => {
+        vi.useFakeTimers();
+        const fetcher = vi.fn().mockResolvedValue(new Response(new ReadableStream({ start() { } })));
+        const pending = load(createRemoteMcpRuntimeCapabilities(lease(), { fetch: fetcher }));
+        const check = expect(pending).rejects.toThrow();
+        await vi.advanceTimersByTimeAsync(30_001);
+        await check;
+        expect(fetcher).toHaveBeenCalledOnce();
+    });
+    it("rejects oversized, malformed and ambiguous inventories without exposing response data", async () => {
+        const responses = [
+            json([...inventory, inventory[0]]),
+            json([{ serverName: "docs", tools: [{ name: "read", inputSchema: {}, token: "secret" }] }]),
+            json([{ serverName: "a__b", tools: [{ name: "c", inputSchema: {} }] }, { serverName: "a", tools: [{ name: "b__c", inputSchema: {} }] }]),
+            new Response("provider secret", { status: 403 }),
+            new Response("x".repeat(2 * 1024 * 1024 + 1)),
+        ];
+        for (const response of responses) {
+            const fetcher = vi.fn().mockResolvedValue(response);
+            await expect(load(createRemoteMcpRuntimeCapabilities(lease(), { fetch: fetcher }))).rejects.toThrow(/^MCP /);
+            expect(fetcher).toHaveBeenCalledOnce();
+        }
+    });
+});
+//# sourceMappingURL=mcp-runner-client.test.js.map

package/dist/__tests__/mcp-runner-client.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcp-runner-client.test.js","sourceRoot":"","sources":["../../src/__tests__/mcp-runner-client.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,kCAAkC,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC9F,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAEpE,MAAM,UAAU,GAAG,2BAA2B,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;AAClL,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAU,EAAE,GAAG,EAAE,2BAA2B,EAAE,KAAK,EAAE,gBAAgB;IACnG,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACnL,MAAM,SAAS,GAAG,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAC7I,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;AAClE,MAAM,OAAO,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AACzF,MAAM,IAAI,GAAG,CAAC,OAA8D,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;AAE/H,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;AAEpC,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;QAClF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC/G,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE;SACtH,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;QAC9D,MAAM,CAAC,KAAK,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC,CAAC;QACjJ,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,uCAAuC,EAAE,KAAK,EAAC,iBAAiB,EAAC,EAAE;QACzG,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC;YACpE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE;SAClF,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,MAAM,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;IACrI,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC,8CAA8C,EAAE,QAAQ,CAAC,EAAE;QACxI,MAAM,KAAK,GAAQ,KAAK,EAAE,CAAC;QAC3B,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,aAAa,CAAC;QACvD,IAAI,QAAQ,KAAK,WAAW;YAAE,KAAK,CAAC,aAAa,CAAC,WAAW,GAAG,kBAAkB,CAAC;QACnF,IAAI,QAAQ,KAAK,aAAa;YAAE,KAAK,CAAC,aAAa,CAAC,OAAO,GAAG,CAAC,CAAC;QAChE,IAAI,QAAQ,KAAK,YAAY;YAAE,KAAK,CAAC,aAAa,CAAC,IAAI,GAAG,OAAO,CAAC;QAClE,IAAI,QAAQ,KAAK,cAAc;YAAE,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,CAAC,kCAAkC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACnH,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,2DAA2D,EAAE,KAAK,EAAC,KAAK,EAAC,EAAE;QAC/I,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,kCAAkC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACxG,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,KAAK,IAAI,EAAE;QACpF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACvK,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,CAAC;YAC1G,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5G,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3K,CAAC;QACD,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1J,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,kCAAkC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9E,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC;QACxB,KAAK,CAAC,aAAa,CAAC,WAAW,GAAG,4BAA4B,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9G,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACzE,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAc,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;QAC5J,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;QACrF,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC5E,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,UAAU,CAAC,OAAO,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8FAA8F,EAAE,KAAK,IAAI,EAAE;QAC5G,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,kCAAkC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAChF,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5E,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,GAAG,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACjH,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACnG,MAAM,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrG,KAAK,MAAM,GAAG,IAAI,CAAC,0BAA0B,EAAE,+BAA+B,EAAE,oCAAoC,EAAE,6BAA6B,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACxK,MAAM,CAAC,GAAG,EAAE,CAAC,kCAAkC,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAClF,CAAC;QACD,MAAM,OAAO,GAAG,kCAAkC,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,SAAS,EAAE,0BAA0B,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9H,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9C,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;aACzE,qBAAqB,CAAC,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC,CAAC;QAC7F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,CAAC,CAAC;QACjF,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACpD,MAAM,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;aACzE,sBAAsB,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,kCAAkC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC9F,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAChD,UAAU,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,KAAK,CAAC;QACZ,MAAM,CAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAsB,EAAE,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC,iBAAiB,CAAC,IAAI,QAAQ,CAAC,IAAI,cAAc,CAAC,EAAE,KAAK,KAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAG,IAAI,CAAC,kCAAkC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAChD,MAAM,EAAE,CAAC,wBAAwB,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,KAAK,CAAC;QACZ,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,SAAS,GAAG;YAChB,IAAI,CAAC,CAAC,GAAG,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAC3F,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;YACxI,IAAI,QAAQ,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;YAChD,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;SAC9C,CAAC;QACF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,EAAgB,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;YAClE,MAAM,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC7G,MAAM,CAAC,OAAO,CAAC,CAAC,oBAAoB,EAAE,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/mission-execution.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mission-execution.test.d.ts.map

package/dist/__tests__/mission-execution.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-execution.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/mission-execution.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/mission-execution.test.js

@@ -0,0 +1,68 @@
+import { describe, expect, it } from "vitest";
+import { admitMissionExecution, normalizeMissionExecutionCommit, validateMissionExecutionKey } from "../mission-execution.js";
+function plan() {
+    const now = "2026-10-11T06:00:00.000Z";
+    return {
+        expected: { id: "mission", name: "Example", data: "{}", status: "draft", user: "customer-a", createdAt: now, updatedAt: now },
+        receipt: { executionId: "execution", missionId: "mission", idempotencyKey: "occurrence", group: "Example", sequence: 1,
+            user: "customer-a", createdAt: now, tasks: [{ id: "task", title: "Work", description: "Do work", assignTo: "support",
+                    missionId: "mission", group: "Example", user: "customer-a", status: "pending", dependsOn: [], expectations: [], metrics: [],
+                    retries: 0, maxRetries: 2, createdAt: now, updatedAt: now }] },
+    };
+}
+describe("Mission execution admission contract", () => {
+    it("rejects changed or missing application metadata in task snapshots", () => {
+        const input = plan();
+        input.expected.metadata = { connectionNamespace: "app-a" };
+        input.receipt.metadata = { connectionNamespace: "app-a" };
+        for (const task of input.receipt.tasks)
+            task.metadata = { connectionNamespace: "app-a" };
+        expect(normalizeMissionExecutionCommit(input)).toEqual(input);
+        input.receipt.tasks[0].metadata = { connectionNamespace: "app-b" };
+        expect(() => normalizeMissionExecutionCommit(input)).toThrowError(expect.objectContaining({ code: "mission_execution_invalid" }));
+        delete input.receipt.tasks[0].metadata;
+        expect(() => normalizeMissionExecutionCommit(input)).toThrowError(expect.objectContaining({ code: "mission_execution_invalid" }));
+    });
+    it.each([undefined, null, [], {}, { expected: {} }, { receipt: {} }])("rejects a malformed plan: %j", input => {
+        expect(() => normalizeMissionExecutionCommit(input)).toThrowError(expect.objectContaining({ code: "mission_execution_invalid" }));
+    });
+    it.each(["", " ", " padded", "padded ", "line\nbreak", "x".repeat(201)])("rejects an invalid occurrence key: %j", key => {
+        expect(() => validateMissionExecutionKey("mission", key)).toThrowError(expect.objectContaining({ code: "mission_execution_invalid" }));
+    });
+    it.each(["principal", "forward dependency", "sparse dependencies", "duplicate id", "duplicate title", "status", "counter", "oversize"])("rejects %s without admission", kind => {
+        const input = plan();
+        if (kind === "principal")
+            input.receipt.tasks[0].user = "other-customer";
+        if (kind === "forward dependency")
+            input.receipt.tasks[0].dependsOn = ["not-yet-created"];
+        if (kind === "sparse dependencies")
+            input.receipt.tasks[0].dependsOn = new Array(1);
+        if (kind === "duplicate id")
+            input.receipt.tasks.push({ ...input.receipt.tasks[0], title: "Other" });
+        if (kind === "duplicate title")
+            input.receipt.tasks.push({ ...input.receipt.tasks[0], id: "other" });
+        if (kind === "status")
+            input.receipt.tasks[0].status = "in_progress";
+        if (kind === "counter")
+            input.receipt.sequence = 2;
+        if (kind === "oversize")
+            input.expected.data = "x".repeat(4 * 1024 * 1024);
+        expect(() => normalizeMissionExecutionCommit(input)).toThrowError(expect.objectContaining({ code: "mission_execution_invalid" }));
+    });
+    it("takes an independent JSON snapshot and compares optional defaults consistently", () => {
+        const input = plan(), captured = normalizeMissionExecutionCommit(input);
+        input.expected.user = "other-customer";
+        input.receipt.tasks[0].dependsOn.push("injected");
+        expect(captured.expected.user).toBe("customer-a");
+        expect(captured.receipt.tasks[0].dependsOn).toEqual([]);
+        expect(admitMissionExecution(captured, { ...captured.expected, executionCount: 0 }, [])).toMatchObject({ status: "active", executionCount: 1 });
+        expect(() => admitMissionExecution(captured, input.expected, [])).toThrowError(expect.objectContaining({ code: "mission_execution_conflict" }));
+    });
+    it.each([null, {}, { volatileAgents: [null] }, { volatileAgents: [{ name: "helper" }, { name: "helper" }] },
+        { volatileAgents: [], taskTitles: [] }, { volatileAgents: [], taskTitles: [{ authored: "Work", accepted: "Unknown" }] },
+    ])("rejects runtime recovery metadata that cannot describe the accepted task plan: %j", runtime => {
+        const input = plan();
+        expect(() => normalizeMissionExecutionCommit({ ...input, runtime })).toThrowError(expect.objectContaining({ code: "mission_execution_invalid" }));
+    });
+});
+//# sourceMappingURL=mission-execution.test.js.map

package/dist/__tests__/mission-execution.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mission-execution.test.js","sourceRoot":"","sources":["../../src/__tests__/mission-execution.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,+BAA+B,EAAE,2BAA2B,EAA+B,MAAM,yBAAyB,CAAC;AAE3J,SAAS,IAAI;IACX,MAAM,GAAG,GAAG,0BAA0B,CAAC;IACvC,OAAO;QACL,QAAQ,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE;QAC7H,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;YACpH,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS;oBAClH,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE;oBAC3H,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE;KACnE,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,sCAAsC,EAAE,GAAG,EAAE;IACpD,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;QACrB,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC;QAC3D,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC;QAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK;YAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC;QACzF,MAAM,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC9D,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC;QACnE,MAAM,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;QAClI,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,8BAA8B,EAAE,KAAK,CAAC,EAAE;QAC5G,MAAM,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,uCAAuC,EAAE,GAAG,CAAC,EAAE;QACtH,MAAM,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;IACzI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,cAAc,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC,8BAA8B,EAAE,IAAI,CAAC,EAAE;QAC7K,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;QACrB,IAAI,IAAI,KAAK,WAAW;YAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,gBAAgB,CAAC;QACzE,IAAI,IAAI,KAAK,oBAAoB;YAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,iBAAiB,CAAC,CAAC;QAC1F,IAAI,IAAI,KAAK,qBAAqB;YAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;QACpF,IAAI,IAAI,KAAK,cAAc;YAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QACrG,IAAI,IAAI,KAAK,iBAAiB;YAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;QACrG,IAAI,IAAI,KAAK,QAAQ;YAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,aAAa,CAAC;QACrE,IAAI,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACnD,IAAI,IAAI,KAAK,UAAU;YAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,KAAK,GAAG,IAAI,EAAE,EAAE,QAAQ,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;QACxE,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,gBAAgB,CAAC;QACvC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAClD,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,MAAM,CAAC,qBAAqB,CAAC,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;QAChJ,MAAM,CAAC,GAAG,EAAE,CAAC,qBAAqB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC,CAAC;IAClJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE;QACzG,EAAE,cAAc,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE;KACxH,CAAC,CAAC,mFAAmF,EAAE,OAAO,CAAC,EAAE;QAChG,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,EAAE,CAAC,+BAA+B,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;IACpJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/run-state-monitor.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=run-state-monitor.test.d.ts.map

package/dist/__tests__/run-state-monitor.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-state-monitor.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/run-state-monitor.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/run-state-monitor.test.js

@@ -0,0 +1,59 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+import { watchRunState } from "../run-state-monitor.js";
+afterEach(() => vi.useRealTimers());
+const record = (status) => ({ id: "run-a", status });
+describe("durable Run state observation", () => {
+    it.each(["killed", "failed", "completed"])("stops the exact Run on persisted %s", async (status) => {
+        vi.useFakeTimers();
+        const getRun = vi.fn().mockResolvedValueOnce(record("running")).mockResolvedValue(record(status));
+        const observer = watchRunState({ runId: "run-a", runStore: { getRun }, pollIntervalMs: 10 });
+        await vi.advanceTimersByTimeAsync(10);
+        expect(observer.signal.aborted).toBe(false);
+        await vi.advanceTimersByTimeAsync(10);
+        expect(observer.signal.reason).toBe("run_terminal");
+        await vi.advanceTimersByTimeAsync(1000);
+        expect(getRun.mock.calls).toEqual([["run-a"], ["run-a"]]);
+        expect(vi.getTimerCount()).toBe(0);
+        observer.dispose();
+    });
+    it.each(["missing", "rejected", "hung"])("fails closed on %s persistence without leaking storage errors", async (mode) => {
+        vi.useFakeTimers();
+        const getRun = vi.fn(() => mode === "hung" ? new Promise(() => { })
+            : mode === "rejected" ? Promise.reject(new Error("private driver information")) : Promise.resolve(undefined));
+        const observer = watchRunState({ runId: "run-a", runStore: { getRun }, pollIntervalMs: 10, readTimeoutMs: 25 });
+        await vi.advanceTimersByTimeAsync(35);
+        expect(observer.signal.reason).toBe(mode === "missing" ? "run_missing" : "run_unavailable");
+        await vi.advanceTimersByTimeAsync(1000);
+        expect(getRun).toHaveBeenCalledTimes(1);
+        expect(vi.getTimerCount()).toBe(0);
+        observer.dispose();
+    });
+    it("does not overlap slow reads or apply their late result after disposal", async () => {
+        vi.useFakeTimers();
+        let resolve;
+        const getRun = vi.fn(() => new Promise(done => { resolve = done; }));
+        const observer = watchRunState({ runId: "run-a", runStore: { getRun }, pollIntervalMs: 10, readTimeoutMs: 100 });
+        await vi.advanceTimersByTimeAsync(50);
+        expect(getRun).toHaveBeenCalledTimes(1);
+        observer.dispose();
+        resolve(record("killed"));
+        await vi.advanceTimersByTimeAsync(1000);
+        expect(observer.signal.aborted).toBe(false);
+        expect(getRun).toHaveBeenCalledTimes(1);
+        expect(vi.getTimerCount()).toBe(0);
+    });
+    it("does not reactivate after a timed-out read eventually returns running", async () => {
+        vi.useFakeTimers();
+        let resolve;
+        const getRun = vi.fn(() => new Promise(done => { resolve = done; }));
+        const observer = watchRunState({ runId: "run-a", runStore: { getRun }, pollIntervalMs: 10, readTimeoutMs: 20 });
+        await vi.advanceTimersByTimeAsync(30);
+        resolve(record("running"));
+        await vi.advanceTimersByTimeAsync(100);
+        expect(observer.signal.reason).toBe("run_unavailable");
+        expect(getRun).toHaveBeenCalledTimes(1);
+        expect(vi.getTimerCount()).toBe(0);
+        observer.dispose();
+    });
+});
+//# sourceMappingURL=run-state-monitor.test.js.map

package/dist/__tests__/run-state-monitor.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-state-monitor.test.js","sourceRoot":"","sources":["../../src/__tests__/run-state-monitor.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAGxD,SAAS,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;AACpC,MAAM,MAAM,GAAG,CAAC,MAA2B,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAgB,CAAA,CAAC;AACvF,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAU,CAAC,CAAC,qCAAqC,EAAE,KAAK,EAAC,MAAM,EAAC,EAAE;QACxG,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAClG,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7F,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnF,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC3F,MAAM,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAU,CAAC,CAAC,+DAA+D,EAAE,KAAK,EAAC,IAAI,EAAC,EAAE;QAC9H,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,CAAwB,GAAG,EAAE,GAAE,CAAC,CAAC;YACvF,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAChH,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QAChH,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC;QAC5F,MAAM,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,OAAkC,CAAC;QACvC,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAY,IAAI,CAAC,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;QACjH,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC/E,QAAQ,CAAC,OAAO,EAAE,CAAC;QAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,MAAM,EAAE,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,KAAK,IAAI,EAAE;QACrF,EAAE,CAAC,aAAa,EAAE,CAAC;QACnB,IAAI,OAAkC,CAAC;QACvC,MAAM,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,IAAI,OAAO,CAAY,IAAI,CAAC,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;QAChH,MAAM,EAAE,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAClE,MAAM,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAChG,MAAM,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/runtime-metadata.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runtime-metadata.test.d.ts.map

package/dist/__tests__/runtime-metadata.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-metadata.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/runtime-metadata.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/runtime-metadata.test.js

@@ -0,0 +1,17 @@
+import { describe, expect, it } from "vitest";
+import { normalizeRuntimeMetadata, sameRuntimeMetadata } from "../runtime-metadata.js";
+describe("caller metadata snapshots", () => {
+    it("compares independent JSON/JSONB key orderings without changing special keys", () => {
+        const source = JSON.parse('{"connectionNamespace":"app-a","__proto__":"data","z":"last","A":"first"}');
+        const captured = normalizeRuntimeMetadata(source);
+        source.connectionNamespace = "mutated";
+        expect(captured.connectionNamespace).toBe("app-a");
+        expect(Object.isFrozen(captured)).toBe(true);
+        expect(Object.getPrototypeOf(captured)).toBe(Object.prototype);
+        expect(Object.hasOwn(captured, "__proto__")).toBe(true);
+        expect(sameRuntimeMetadata(captured, JSON.parse('{"A":"first","z":"last","__proto__":"data","connectionNamespace":"app-a"}'))).toBe(true);
+        expect(sameRuntimeMetadata(captured, source)).toBe(false);
+        expect(sameRuntimeMetadata(undefined, {})).toBe(false);
+    });
+});
+//# sourceMappingURL=runtime-metadata.test.js.map

package/dist/__tests__/runtime-metadata.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-metadata.test.js","sourceRoot":"","sources":["../../src/__tests__/runtime-metadata.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAEvF,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC;QACvG,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAE,CAAC;QACnD,MAAM,CAAC,mBAAmB,GAAG,SAAS,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,2EAA2E,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1I,MAAM,CAAC,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/task-execution-router.test.js

@@ -104,7 +104,7 @@ function harness(overrides = {}) {
             }),
         },
         hooks: {
-            runBeforeSync: vi.fn(() => ({ cancelled: false })),
+            runBefore: vi.fn(async () => ({ cancelled: false })),
         },
         spawner: {
             spawn: vi.fn(async (config) => {