@privos_ai/app-server 0.1.0 → 0.3.1

package/dist/workload/dispatch-assertion.d.ts

@@ -0,0 +1,167 @@
+import { type JsonWebKey } from 'node:crypto';
+import type { WorkloadBrokerContext } from './workload-identity.js';
+export type VerifiedDispatchActor = Readonly<{
+    subject: string;
+    username?: string;
+    roomId?: string;
+}>;
+export type VerifiedDispatchAssertion = Readonly<{
+    jti: string;
+    issuedAt: number;
+    expiresAt: number;
+    actor?: VerifiedDispatchActor;
+}>;
+export type RuntimeDispatchExecutionModeV3 = 'SELF_HOSTED_LOCAL' | 'PUBLISHER_HOSTED';
+export type RuntimeDispatchAffinityV3 = Readonly<{
+    workspaceId: string;
+    deploymentId: string;
+    mcpAppId: string;
+    executionMode: RuntimeDispatchExecutionModeV3;
+    generationId: string;
+    generationNumber: number;
+    runtimeInstallationId: string;
+    manifestDigest: string;
+    resourceManifestHash: string;
+    /** Optional post-readiness expectation. The signed assertion always contains this field. */
+    runtimeResourceInventoryHash?: string;
+    /** Optional post-readiness expectation. The signed assertion always contains this field. */
+    runtimeApprovalReceiptHash?: string;
+    /** Optional current-state expectation. The signed assertion always contains this field. */
+    runtimeAuthorizationEpoch?: number;
+}>;
+export type RuntimeDispatchTrustV3 = Readonly<{
+    hubKid: string;
+    hubPublicJwk: JsonWebKey;
+    affinity: RuntimeDispatchAffinityV3;
+}>;
+export type RuntimeDispatchTrustHintV3 = Readonly<{
+    kid: string;
+    workspaceId: string;
+    deploymentId: string;
+    mcpAppId: string;
+    executionMode: RuntimeDispatchExecutionModeV3;
+    generationId: string;
+    generationNumber: number;
+    runtimeInstallationId: string;
+    authorizationContext: 'workspace' | 'room';
+    roomId?: string;
+    authorizationBindingId?: string;
+    /** True only when the actual RPC body is one of the three frozen readiness messages. */
+    preactivationReadiness?: true;
+}>;
+export type RuntimeDispatchReplayInputV3 = Readonly<{
+    issuer: string;
+    jti: string;
+    nonce: string;
+    expiresAt: number;
+    now: number;
+}>;
+/** Implementations must atomically return true only when both the JTI and nonce are live-unseen. */
+export interface RuntimeDispatchReplayConsumerV3 {
+    consume(input: RuntimeDispatchReplayInputV3): boolean | Promise<boolean>;
+}
+/** Process-local bounded replay protection. Publishers with multiple replicas must inject a shared atomic consumer. */
+export declare class BoundedRuntimeDispatchReplayConsumerV3 implements RuntimeDispatchReplayConsumerV3 {
+    private readonly capacity;
+    private readonly jtis;
+    private readonly nonces;
+    constructor(capacity?: number);
+    consume(input: RuntimeDispatchReplayInputV3): boolean;
+}
+export type RuntimeDispatchTrustResolverV3 = (hint: RuntimeDispatchTrustHintV3) => RuntimeDispatchTrustV3 | Promise<RuntimeDispatchTrustV3>;
+export type RuntimeDispatchSecurityV3 = Readonly<{
+    mode: 'required';
+    trust: RuntimeDispatchTrustV3 | RuntimeDispatchTrustResolverV3;
+    replayConsumer?: RuntimeDispatchReplayConsumerV3;
+    /** Unix seconds. Primarily useful for deterministic conformance tests. */
+    now?: () => number;
+    /** Default 5 seconds. Applies only to future `iat`, never to expiration. */
+    clockSkewSeconds?: number;
+    /** Explicit pre-activation exception. Never permits tools/call, resources/read, or custom methods. */
+    unsignedReadiness?: 'initialize-and-tools-list';
+}>;
+type CompleteRuntimeDispatchAffinityV3 = RuntimeDispatchAffinityV3 & Readonly<{
+    runtimeResourceInventoryHash: string;
+    runtimeApprovalReceiptHash: string;
+    runtimeAuthorizationEpoch: number;
+}>;
+type RuntimeDispatchCommonV3 = CompleteRuntimeDispatchAffinityV3 & Readonly<{
+    protocolVersion: 3;
+    type: 'hub-runtime-dispatch-assertion';
+    iss: string;
+    aud: string;
+    jti: string;
+    nonce: string;
+    iat: number;
+    exp: number;
+    authorizationContext: 'workspace' | 'room';
+    htm: 'POST';
+    htu: '/mcp';
+    bodyDigest: string;
+}>;
+export type VerifiedRuntimeDispatchAssertionV3 = (RuntimeDispatchCommonV3 & Readonly<{
+    authorizationContext: 'workspace';
+}>) | (RuntimeDispatchCommonV3 & Readonly<{
+    authorizationContext: 'room';
+    roomId: string;
+    authorizationBindingId: string;
+    bindingReceiptHash: string;
+    bindingGrantHash: string;
+    bindingEpoch: number;
+    bindingTokenVersion: number;
+}>);
+export type RuntimeDispatchRelayAuthorizationV3 = Readonly<{
+    assertion: string;
+    runtimeInstallationId: string;
+    authorizationBindingId?: string;
+}>;
+export type RuntimeDispatchRelayEnvelopeV3 = Readonly<{
+    logicalRpc: Record<string, unknown>;
+    authorization: RuntimeDispatchRelayAuthorizationV3;
+    userMetadata?: unknown;
+}>;
+export declare function assertRuntimeDispatchTrustConfigurationV3(value: unknown): asserts value is RuntimeDispatchTrustV3;
+export declare function parseRuntimeDispatchTrustV3Json(raw: string): RuntimeDispatchTrustV3;
+export declare function sha256RuntimeDispatchBodyV3(body: unknown): string;
+export declare function isUnsignedRuntimeReadinessRpcV3(body: unknown, security: RuntimeDispatchSecurityV3): boolean;
+/** Exact readiness classification; it grants no authority without a verified signed assertion. */
+export declare function isExactRuntimeReadinessRpcV3(body: unknown): boolean;
+export declare function verifyRuntimeDispatchAssertionV3(input: {
+    compact: string;
+    body: unknown;
+    security: RuntimeDispatchSecurityV3;
+    /** When present, wrapper affinity is checked before the assertion is consumed for replay. */
+    relayAuthorization?: RuntimeDispatchRelayAuthorizationV3;
+    now?: number;
+}): Promise<VerifiedRuntimeDispatchAssertionV3>;
+export declare function extractRuntimeDispatchRelayEnvelopeV3(value: unknown): RuntimeDispatchRelayEnvelopeV3;
+export declare function assertRuntimeDispatchRelayAffinityV3(authorization: RuntimeDispatchRelayAuthorizationV3, verified: VerifiedRuntimeDispatchAssertionV3): void;
+export type VerifiedClusterDispatchAssertionV3 = Readonly<{
+    jti: string;
+    issuedAt: number;
+    expiresAt: number;
+    authorizationContext: 'workspace' | 'room';
+    roomId?: string;
+    authorizationBindingId?: string;
+}>;
+/**
+ * Verify the dispatch a Hub routes to an App Library runtime through its
+ * cluster. The assertion reuses the replica `typ` but carries generation
+ * affinity instead of replica affinity, so every field is checked against the
+ * generation the node attested — the runtime trusts no claim the broker did
+ * not already bind it to.
+ */
+export declare function verifyClusterDispatchAssertionV3(input: {
+    compact: string;
+    body: unknown;
+    context: WorkloadBrokerContext;
+    now?: number;
+}): VerifiedClusterDispatchAssertionV3;
+export declare function verifyDispatchAssertion(input: {
+    compact: string;
+    body: unknown;
+    context: WorkloadBrokerContext;
+    now?: number;
+}): VerifiedDispatchAssertion;
+export {};
+//# sourceMappingURL=dispatch-assertion.d.ts.map

package/dist/workload/dispatch-assertion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch-assertion.d.ts","sourceRoot":"","sources":["../../src/workload/dispatch-assertion.ts"],"names":[],"mappings":"AAAA,OAAe,EAAE,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAEtD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAyEpE,MAAM,MAAM,qBAAqB,GAAG,QAAQ,CAAC;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,qBAAqB,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,MAAM,8BAA8B,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAEtF,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,8BAA8B,CAAC;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,4FAA4F;IAC5F,4BAA4B,CAAC,EAAE,MAAM,CAAC;IACtC,4FAA4F;IAC5F,0BAA0B,CAAC,EAAE,MAAM,CAAC;IACpC,2FAA2F;IAC3F,yBAAyB,CAAC,EAAE,MAAM,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC7C,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,UAAU,CAAC;IACzB,QAAQ,EAAE,yBAAyB,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,8BAA8B,CAAC;IAC9C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,WAAW,GAAG,MAAM,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sBAAsB,CAAC,EAAE,MAAM,CAAC;IAChC,wFAAwF;IACxF,sBAAsB,CAAC,EAAE,IAAI,CAAC;CAC9B,CAAC,CAAC;AAEH,MAAM,MAAM,4BAA4B,GAAG,QAAQ,CAAC;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;CACZ,CAAC,CAAC;AAEH,oGAAoG;AACpG,MAAM,WAAW,+BAA+B;IAC/C,OAAO,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzE;AAED,uHAAuH;AACvH,qBAAa,sCAAuC,YAAW,+BAA+B;IAIjF,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAHrC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;IAClD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;gBAEvB,QAAQ,SAAkC;IAIvE,OAAO,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO;CAerD;AAED,MAAM,MAAM,8BAA8B,GAAG,CAC5C,IAAI,EAAE,0BAA0B,KAC5B,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAE9D,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAChD,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,sBAAsB,GAAG,8BAA8B,CAAC;IAC/D,cAAc,CAAC,EAAE,+BAA+B,CAAC;IACjD,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,sGAAsG;IACtG,iBAAiB,CAAC,EAAE,2BAA2B,CAAC;CAChD,CAAC,CAAC;AAEH,KAAK,iCAAiC,GAAG,yBAAyB,GAAG,QAAQ,CAAC;IAC7E,4BAA4B,EAAE,MAAM,CAAC;IACrC,0BAA0B,EAAE,MAAM,CAAC;IACnC,yBAAyB,EAAE,MAAM,CAAC;CAClC,CAAC,CAAC;AAEH,KAAK,uBAAuB,GAAG,iCAAiC,GAAG,QAAQ,CAAC;IAC3E,eAAe,EAAE,CAAC,CAAC;IACnB,IAAI,EAAE,gCAAgC,CAAC;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,oBAAoB,EAAE,WAAW,GAAG,MAAM,CAAC;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,kCAAkC,GAC3C,CAAC,uBAAuB,GAAG,QAAQ,CAAC;IAAE,oBAAoB,EAAE,WAAW,CAAA;CAAE,CAAC,CAAC,GAC3E,CAAC,uBAAuB,GACxB,QAAQ,CAAC;IACR,oBAAoB,EAAE,MAAM,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,sBAAsB,EAAE,MAAM,CAAC;IAC/B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;CAC5B,CAAC,CAAC,CAAC;AAEP,MAAM,MAAM,mCAAmC,GAAG,QAAQ,CAAC;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC,CAAC;AAEH,MAAM,MAAM,8BAA8B,GAAG,QAAQ,CAAC;IACrD,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACpC,aAAa,EAAE,mCAAmC,CAAC;IACnD,YAAY,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC,CAAC;AAqKH,wBAAgB,yCAAyC,CACxD,KAAK,EAAE,OAAO,GACZ,OAAO,CAAC,KAAK,IAAI,sBAAsB,CAkEzC;AAED,wBAAgB,+BAA+B,CAAC,GAAG,EAAE,MAAM,GAAG,sBAAsB,CAanF;AAsBD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAEjE;AAED,wBAAgB,+BAA+B,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,yBAAyB,GAAG,OAAO,CAO3G;AAED,kGAAkG;AAClG,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAmBnE;AAED,wBAAsB,gCAAgC,CAAC,KAAK,EAAE;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,yBAAyB,CAAC;IACpC,6FAA6F;IAC7F,kBAAkB,CAAC,EAAE,mCAAmC,CAAC;IACzD,GAAG,CAAC,EAAE,MAAM,CAAC;CACb,GAAG,OAAO,CAAC,kCAAkC,CAAC,CA+D9C;AAED,wBAAgB,qCAAqC,CAAC,KAAK,EAAE,OAAO,GAAG,8BAA8B,CAqCpG;AAED,wBAAgB,oCAAoC,CACnD,aAAa,EAAE,mCAAmC,EAClD,QAAQ,EAAE,kCAAkC,GAC1C,IAAI,CAQN;AA0CD,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACzD,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,WAAW,GAAG,MAAM,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sBAAsB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACvD,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,qBAAqB,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;CACb,GAAG,kCAAkC,CA4FrC;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,qBAAqB,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,CAAC;CACb,GAAG,yBAAyB,CA6D5B"}