@relayflows/sdk 2.0.9 → 2.0.10

package/dist/authored-worker-step.js

@@ -0,0 +1,136 @@
+import { parseBudget } from './budget.js';
+import { compileSpec, toKernelSpec } from './compile.js';
+import { checkAuthoredFlow } from './cli/check.js';
+import { classifyOutcome } from './cli/run.js';
+import { AuthoredFlowExecutionError } from './authored-flow-error.js';
+import { SPEC_SCHEMA_VERSION } from './spec.js';
+import { isSurfaceCompletionReason, readCompletedStepOutput, readSuccessfulOutput } from './authored-step-output.js';
+import { snapshotJsonValue } from './json-value.js';
+const WORKSPACE_PERMISSION_ANNOTATION = /:\s*(readonly|readwrite)\s*$/i;
+/** Agent and LLM calls share the exact declarative preflight and lease wait. */
+export function authoredWorkerRunner(definition, journal, flowPath, journalSteps, waitOptions, localAgentStream, budget, headerBudget) {
+    async function run(step) {
+        const id = step.id;
+        const authoring = { version: SPEC_SCHEMA_VERSION, name: `${definition.name}/${id}`, steps: [step], ...(headerBudget === undefined ? {} : { budget: parseBudget(headerBudget) }) };
+        // The kernel never resolves a `cli` on its own — every declarative
+        // `flows run`/`flows check` binds it first via this exact function
+        // (cli/check.ts), searching for the nearest flows.json from `flowPath`
+        // and real-probing auth/model readiness. An authored agent step gets
+        // nothing for free just because it was declared in TS instead of YAML.
+        const { report, flow: resolved } = checkAuthoredFlow(authoring, flowPath);
+        if (!report.ok || resolved === undefined) {
+            const refusal = report.diagnostics.find((diagnostic) => diagnostic.severity === 'refusal');
+            throw new AuthoredFlowExecutionError(refusal?.kind === 'budget_missing_price' || refusal?.kind === 'budget_syntax_invalid' ? refusal.kind
+                : step.type === 'llm' ? 'llm_cli_unresolved' : 'agent_cli_unresolved', refusal?.message
+                ?? `flow "${definition.name}" step "${id}": no CLI could be resolved for f.${step.type} `
+                    + `(searched for flows.json from "${flowPath}")`);
+        }
+        const spec = toKernelSpec(resolved);
+        const consume = async (outcome) => {
+            // Reuse the declarative CLI's own wait/classification (cli/run.ts) rather
+            // than a hand-rolled poll: `step.completed` and the run's own terminal
+            // state are appended as two SEPARATE actions (kernel/relayflowd-core/src/machine.rs
+            // completion_actions vs complete_run_actions), so a naive read right
+            // after runStart can race a real, valid completion — and a genuinely
+            // long-running agent has no reason to be bounded by anything other than
+            // its own worker's lease, which classifyOutcome already follows
+            // (renewing as the lease renews, per docs/SURFACE.md §5's WAITING
+            // [worker_lease] contract), never an unrelated fixed deadline.
+            const execution = await classifyOutcome(journal, 'run', outcome, report, '', waitOptions);
+            if (execution.exitCode === 3) {
+                const parked = execution.report.parkedStep;
+                throw new AuthoredFlowExecutionError(step.type === 'llm' ? 'llm_parked' : 'agent_parked', execution.report.diagnostics.at(-1)?.message
+                    ?? `flow "${definition.name}" step "${id}" parked`
+                        + (parked !== undefined ? ` (${parked.type})` : '')
+                        + ': no worker is attached to run it.', undefined, outcome.run_id);
+            }
+            if (execution.exitCode !== 0) {
+                const reason = execution.report.completionReason;
+                throw new AuthoredFlowExecutionError('step_failed', execution.report.diagnostics.at(-1)?.message
+                    ?? `flow "${definition.name}" step "${id}" did not complete successfully `
+                        + `(status: ${execution.report.status ?? 'unknown'})`, isSurfaceCompletionReason(reason) ? reason : undefined, outcome.run_id);
+            }
+            return readCompletedStepOutput(journal, outcome.run_id, id, journalSteps);
+        };
+        return budget === undefined ? consume(await journal.runStart(spec)) : budget.execute(journal, spec, consume);
+    }
+    return {
+        async agent(id, options, verification) {
+            if (options.workspace !== undefined && localAgentStream !== undefined) {
+                throw new AuthoredFlowExecutionError('unsupported_workspace_permission', 'The local agent worker accepts stream-only steps. Remove workspace or attach a worker that holds its revision pins.');
+            }
+            if (options.workspace !== undefined && WORKSPACE_PERMISSION_ANNOTATION.test(options.workspace)) {
+                throw new AuthoredFlowExecutionError('unsupported_workspace_permission', `flow "${definition.name}" step "${id}": workspace "${options.workspace}" declares a `
+                    + 'permission annotation ("...: readonly" / "...: readwrite"), but nothing enforces it — '
+                    + 'no parser anywhere in this package turns that annotation into a real restriction '
+                    + '(kernel/DAEMON-LIFECYCLE.md\'s permission model is untouched by f.agent). '
+                    + 'Silently accepting and ignoring it would let a flow believe a restriction is in effect '
+                    + "when it is not. Declare a bare surface name (no trailing \": readonly\"/\": readwrite\") "
+                    + 'if you do not need enforcement, or use the declarative spec\'s `permissions` field, which is real.');
+            }
+            if (options.cli !== undefined && typeof options.cli !== 'string') {
+                throw new AuthoredFlowExecutionError('agent_cli_unresolved', `f.agent options.cli must be a string when set (got ${typeof options.cli}).`);
+            }
+            if (options.model !== undefined && typeof options.model !== 'string') {
+                throw new AuthoredFlowExecutionError('agent_cli_unresolved', `f.agent options.model must be a string when set (got ${typeof options.model}).`);
+            }
+            if (options.cwd !== undefined && typeof options.cwd !== 'string') {
+                throw new AuthoredFlowExecutionError('agent_cli_unresolved', `f.agent options.cwd must be a string when set (got ${typeof options.cwd}).`);
+            }
+            if (options.transport !== undefined && options.transport !== 'direct' && options.transport !== 'relay') {
+                throw new AuthoredFlowExecutionError('agent_cli_unresolved', `f.agent options.transport must be 'direct' or 'relay' (got ${JSON.stringify(options.transport)}).`);
+            }
+            const output = await run({
+                id, type: 'agent', instruction: options.task,
+                ...(localAgentStream === undefined ? {} : { surfaces: { streams: [{ stream: localAgentStream }] } }),
+                ...(options.workspace === undefined ? {} : { surfaces: { workspace: [{ surface: options.workspace }] } }),
+                ...(options.cli === undefined ? {} : { cli: options.cli }),
+                ...(options.model === undefined ? {} : { model: options.model }),
+                ...(options.cwd === undefined ? {} : { cwd: options.cwd }),
+                ...(options.transport === undefined ? {} : { transport: options.transport }),
+                ...(verification === undefined ? {} : { verification }),
+            });
+            if (typeof output !== 'object' || output === null || Array.isArray(output)) {
+                throw new AuthoredFlowExecutionError('journal_protocol_violation', `step "${id}" produced a non-object output`);
+            }
+            const stdout = 'stdout_tail' in output ? output.stdout_tail : undefined;
+            return { summary: typeof stdout === 'string' ? stdout : JSON.stringify(output), artifacts: [] };
+        },
+        async llm(id, prompt, options, verification) {
+            if (options !== undefined && (typeof options !== 'object' || options === null || options.output === undefined)) {
+                throw new AuthoredFlowExecutionError('llm_cli_unresolved', 'f.llm(prompt, options) requires an output JSON Schema.');
+            }
+            const snapshot = options === undefined ? undefined : snapshotJsonValue(options, 'f.llm options');
+            if (snapshot !== undefined && (typeof snapshot !== 'object' || snapshot === null || Array.isArray(snapshot)
+                || Object.keys(snapshot).some(key => !['output', 'cli', 'model'].includes(key)))) {
+                throw new AuthoredFlowExecutionError('llm_cli_unresolved', 'f.llm options accepts only output, cli, and model.');
+            }
+            const output = await run({
+                id, type: 'llm', prompt, ...snapshot,
+                ...(verification === undefined ? {} : { verification }),
+            });
+            if (options === undefined && typeof output !== 'string') {
+                throw new AuthoredFlowExecutionError('journal_protocol_violation', `text step "${id}" produced a non-string output`);
+            }
+            return output;
+        },
+    };
+}
+/** Deterministic commands execute inline under their per-invocation lease. */
+export function authoredDeterministicRunner(name, journal, journalSteps, budget) {
+    return async (id, command, terminal = false, leaseMs, verification) => {
+        const spec = toKernelSpec(compileSpec({
+            version: SPEC_SCHEMA_VERSION,
+            name: `${name}/${id}`,
+            steps: [{
+                    id, type: 'deterministic', command,
+                    ...(leaseMs === undefined ? {} : { lease_ms: leaseMs }),
+                    ...(verification === undefined ? {} : { verification }),
+                }],
+        }));
+        if (terminal)
+            return readSuccessfulOutput(journal, await journal.runStart(spec), id, journalSteps);
+        return budget.execute(journal, spec, outcome => readSuccessfulOutput(journal, outcome, id, journalSteps));
+    };
+}
+//# sourceMappingURL=authored-worker-step.js.map

package/dist/authored-worker-step.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authored-worker-step.js","sourceRoot":"","sources":["../src/authored-worker-step.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,eAAe,EAA4B,MAAM,cAAc,CAAC;AAEzE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAEtE,OAAO,EAAE,mBAAmB,EAAgC,MAAM,WAAW,CAAC;AAC9E,OAAO,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAErH,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,MAAM,+BAA+B,GAAG,+BAA+B,CAAC;AAExE,gFAAgF;AAChF,MAAM,UAAU,oBAAoB,CAClC,UAA4B,EAAE,OAAsB,EAAE,QAAgB,EACtE,YAAuC,EAAE,WAAgC,EACzE,gBAAyB,EAAE,MAAuB,EAAE,YAAsB;IAE1E,KAAK,UAAU,GAAG,CAAC,IAAc;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;QACnB,MAAM,SAAS,GAAa,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5L,mEAAmE;QACnE,mEAAmE;QACnE,uEAAuE;QACvE,qEAAqE;QACrE,uEAAuE;QACvE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1E,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CACrC,CAAC,UAAU,EAA+D,EAAE,CAC1E,UAAU,CAAC,QAAQ,KAAK,SAAS,CACpC,CAAC;YACF,MAAM,IAAI,0BAA0B,CAClC,OAAO,EAAE,IAAI,KAAK,sBAAsB,IAAI,OAAO,EAAE,IAAI,KAAK,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI;gBAClG,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,EACvE,OAAO,EAAE,OAAO;mBACX,SAAS,UAAU,CAAC,IAAI,WAAW,EAAE,qCAAqC,IAAI,CAAC,IAAI,GAAG;sBACrF,kCAAkC,QAAQ,IAAI,CACrD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,KAAK,EAAE,OAA2C,EAAE,EAAE;YACtE,0EAA0E;YAC1E,uEAAuE;YACvE,oFAAoF;YACpF,qEAAqE;YACrE,qEAAqE;YACrE,wEAAwE;YACxE,gEAAgE;YAChE,kEAAkE;YAClE,+DAA+D;YAC/D,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,CAAC,CAAC;YAC1F,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;gBAC3C,MAAM,IAAI,0BAA0B,CAClC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,EACnD,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO;uBACvC,SAAS,UAAU,CAAC,IAAI,WAAW,EAAE,UAAU;0BAC9C,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;0BACjD,oCAAoC,EAC1C,SAAS,EACT,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBACjD,MAAM,IAAI,0BAA0B,CAClC,aAAa,EACb,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO;uBACvC,SAAS,UAAU,CAAC,IAAI,WAAW,EAAE,kCAAkC;0BACtE,YAAY,SAAS,CAAC,MAAM,CAAC,MAAM,IAAI,SAAS,GAAG,EACzD,yBAAyB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EACtD,OAAO,CAAC,MAAM,CACf,CAAC;YACJ,CAAC;YACD,OAAO,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;QAC1E,CAAC,CAAC;QACF,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/G,CAAC;IAED,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,EAAU,EAAE,OAAqB,EAAE,YAAwB;YACrE,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACtE,MAAM,IAAI,0BAA0B,CAAC,kCAAkC,EACrE,qHAAqH,CAAC,CAAC;YAC3H,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/F,MAAM,IAAI,0BAA0B,CAClC,kCAAkC,EAClC,SAAS,UAAU,CAAC,IAAI,WAAW,EAAE,iBAAiB,OAAO,CAAC,SAAS,eAAe;sBAClF,wFAAwF;sBACxF,mFAAmF;sBACnF,4EAA4E;sBAC5E,yFAAyF;sBACzF,2FAA2F;sBAC3F,oGAAoG,CACzG,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACjE,MAAM,IAAI,0BAA0B,CAClC,sBAAsB,EACtB,sDAAsD,OAAO,OAAO,CAAC,GAAG,IAAI,CAC7E,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;gBACrE,MAAM,IAAI,0BAA0B,CAClC,sBAAsB,EACtB,wDAAwD,OAAO,OAAO,CAAC,KAAK,IAAI,CACjF,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACjE,MAAM,IAAI,0BAA0B,CAClC,sBAAsB,EACtB,sDAAsD,OAAO,OAAO,CAAC,GAAG,IAAI,CAC7E,CAAC;YACJ,CAAC;YACD,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;gBACvG,MAAM,IAAI,0BAA0B,CAClC,sBAAsB,EACtB,8DAA8D,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CACpG,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC;gBACvB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,IAAI;gBAC5C,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC,EAAE,EAAE,CAAC;gBACpG,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;gBACzG,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC1D,GAAG,CAAC,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChE,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;gBAC1D,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;gBAC5E,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;aACxD,CAAC,CAAC;YACH,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3E,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE,SAAS,EAAE,gCAAgC,CAAC,CAAC;YAClH,CAAC;YACD,MAAM,MAAM,GAAG,aAAa,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,OAAO,EAAE,OAAO,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAClG,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,EAAU,EAAE,MAAc,EAAE,OAAoB,EAAE,YAAwB;YAClF,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,EAAE,CAAC;gBAC/G,MAAM,IAAI,0BAA0B,CAAC,oBAAoB,EAAE,wDAAwD,CAAC,CAAC;YACvH,CAAC;YACD,MAAM,QAAQ,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACjG,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;mBACtG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,MAAM,IAAI,0BAA0B,CAAC,oBAAoB,EAAE,oDAAoD,CAAC,CAAC;YACnH,CAAC;YACD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC;gBACvB,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,QAAiC;gBAC7D,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;aACxD,CAAC,CAAC;YACH,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;gBACxD,MAAM,IAAI,0BAA0B,CAAC,4BAA4B,EAAE,cAAc,EAAE,gCAAgC,CAAC,CAAC;YACvH,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,2BAA2B,CACzC,IAAY,EAAE,OAAsB,EAAE,YAAuC,EAAE,MAAsB;IAErG,OAAO,KAAK,EAAE,EAAU,EAAE,OAAe,EAAE,QAAQ,GAAG,KAAK,EAAE,OAAgB,EAAE,YAAwB,EAAmB,EAAE;QAC1H,MAAM,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC;YACpC,OAAO,EAAE,mBAAmB;YAC5B,IAAI,EAAE,GAAG,IAAI,IAAI,EAAE,EAAE;YACrB,KAAK,EAAE,CAAC;oBACN,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO;oBAClC,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;oBACvD,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;iBACxD,CAAC;SACH,CAAC,CAAC,CAAC;QACJ,IAAI,QAAQ;YAAE,OAAO,oBAAoB,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;QACnG,OAAO,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IAC5G,CAAC,CAAC;AACJ,CAAC"}

package/dist/budget-preflight.d.ts

@@ -0,0 +1,5 @@
+import type { CompiledFlowSpec } from './compile.js';
+import type { PreflightRefusal } from './preflight.js';
+/** Legacy explicit envelopes keep their worker-supplied pricing contract. */
+export declare function budgetDiagnostics(flow: CompiledFlowSpec): PreflightRefusal[];
+//# sourceMappingURL=budget-preflight.d.ts.map

package/dist/budget-preflight.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-preflight.d.ts","sourceRoot":"","sources":["../src/budget-preflight.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGvD,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,gBAAgB,EAAE,CAyB5E"}

package/dist/budget-preflight.js

@@ -0,0 +1,33 @@
+import { MODEL_PRICING } from './model-pricing.js';
+/** Legacy explicit envelopes keep their worker-supplied pricing contract. */
+export function budgetDiagnostics(flow) {
+    if (flow.budget?.pricing !== 'frozen')
+        return [];
+    const diagnostics = [];
+    const declared = [
+        ...Object.entries(flow.agents ?? {}).map(([agent, d]) => ({ agent, model: d.model })),
+        ...flow.steps.flatMap(s => s.type !== 'deterministic' && s.model !== undefined
+            ? [{ stepId: s.id, model: s.model }] : []),
+    ];
+    for (const step of flow.steps) {
+        if (step.type === 'deterministic' || flow.budget.maxDollars === undefined)
+            continue;
+        const model = step.model ?? (step.type === 'agent' && step.agent !== undefined
+            ? flow.agents?.[step.agent]?.model : undefined);
+        if (model === undefined)
+            diagnostics.push({
+                severity: 'refusal', kind: 'budget_missing_price', stepId: step.id,
+                message: `Step "${step.id}" needs a declared, priced model for its dollar budget.`,
+            });
+    }
+    for (const declaration of declared) {
+        if (Object.hasOwn(MODEL_PRICING, declaration.model))
+            continue;
+        diagnostics.push({
+            severity: 'refusal', kind: 'budget_missing_price', ...declaration,
+            message: `Model "${declaration.model}" has no frozen price for budget accounting.`,
+        });
+    }
+    return diagnostics;
+}
+//# sourceMappingURL=budget-preflight.js.map

package/dist/budget-preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-preflight.js","sourceRoot":"","sources":["../src/budget-preflight.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,IAAsB;IACtD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACjD,MAAM,WAAW,GAAuB,EAAE,CAAC;IAC3C,MAAM,QAAQ,GAAG;QACf,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACrF,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAC5E,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;YAAE,SAAS;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAC5E,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS;YAAE,WAAW,CAAC,IAAI,CAAC;gBACxC,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;gBAClE,OAAO,EAAE,SAAS,IAAI,CAAC,EAAE,yDAAyD;aACnF,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,WAAW,IAAI,QAAQ,EAAE,CAAC;QACnC,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9D,WAAW,CAAC,IAAI,CAAC;YACf,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,WAAW;YACjE,OAAO,EAAE,UAAU,WAAW,CAAC,KAAK,8CAA8C;SACnF,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/budget.d.ts

@@ -0,0 +1,14 @@
+import type { BudgetSpec, KernelBudgetSpec } from './spec.js';
+export type HeaderBudget = string | {
+    tokens?: number;
+    dollars?: number;
+    wallclock?: string;
+};
+export declare class BudgetSyntaxError extends Error {
+    constructor();
+}
+/** Normalize surface sugar; existing explicit envelopes remain supported. */
+export declare function parseBudget(value: unknown): BudgetSpec;
+/** Lower a normalized envelope to the existing kernel protocol. */
+export declare function toKernelBudget(budget: BudgetSpec): KernelBudgetSpec;
+//# sourceMappingURL=budget.d.ts.map

package/dist/budget.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.d.ts","sourceRoot":"","sources":["../src/budget.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE9D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9F,qBAAa,iBAAkB,SAAQ,KAAK;;CAE3C;AAED,6EAA6E;AAC7E,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CA0BtD;AAED,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,gBAAgB,CAUnE"}

package/dist/budget.js

@@ -0,0 +1,52 @@
+export class BudgetSyntaxError extends Error {
+    constructor() { super('budget_syntax_invalid: expected $<amount>/run, $<amount>/day, or { tokens, dollars, wallclock }'); }
+}
+/** Normalize surface sugar; existing explicit envelopes remain supported. */
+export function parseBudget(value) {
+    if (typeof value === 'string') {
+        const match = /^\$(\d+(?:\.\d{1,6})?)\/(run|day)$/.exec(value);
+        if (!match)
+            throw new BudgetSyntaxError();
+        return { pricing: 'frozen', maxDollars: match[1], ...(match[2] === 'day' ? { window: 'day' } : {}) };
+    }
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        throw new BudgetSyntaxError();
+    const b = value;
+    const legacy = ['maxTokensIn', 'maxTokensOut', 'maxTokens', 'maxDollars', 'maxWallclockMs', 'window', 'pricing'];
+    if (Object.keys(b).some(k => legacy.includes(k))) {
+        if (Object.keys(b).some(k => !legacy.includes(k)))
+            throw new BudgetSyntaxError();
+        return b;
+    }
+    if (Object.keys(b).some(k => !['tokens', 'dollars', 'wallclock'].includes(k)))
+        throw new BudgetSyntaxError();
+    if (b.tokens !== undefined && (!Number.isSafeInteger(b.tokens) || b.tokens < 0))
+        throw new BudgetSyntaxError();
+    if (b.dollars !== undefined && (typeof b.dollars !== 'number' || !Number.isFinite(b.dollars) || b.dollars < 0 || !/^\d+(?:\.\d{1,6})?$/.test(String(b.dollars))))
+        throw new BudgetSyntaxError();
+    let ms;
+    if (b.wallclock !== undefined) {
+        const match = typeof b.wallclock === 'string' && /^(\d+)(ms|s|m|h|d)$/.exec(b.wallclock);
+        if (!match)
+            throw new BudgetSyntaxError();
+        ms = Number(match[1]) * ({ ms: 1, s: 1000, m: 60000, h: 3600000, d: 86400000 }[match[2]]);
+        if (!Number.isSafeInteger(ms))
+            throw new BudgetSyntaxError();
+    }
+    return { pricing: 'frozen', ...(b.tokens === undefined ? {} : { maxTokens: b.tokens }),
+        ...(b.dollars === undefined ? {} : { maxDollars: String(b.dollars) }),
+        ...(ms === undefined ? {} : { maxWallclockMs: ms }) };
+}
+/** Lower a normalized envelope to the existing kernel protocol. */
+export function toKernelBudget(budget) {
+    return {
+        ...(budget.pricing !== undefined ? { pricing: budget.pricing } : {}),
+        ...(budget.maxTokens !== undefined ? { max_tokens: budget.maxTokens } : {}),
+        ...(budget.maxWallclockMs !== undefined ? { max_wallclock_ms: budget.maxWallclockMs } : {}),
+        ...(budget.window !== undefined ? { window: budget.window } : {}),
+        ...(budget.maxTokensIn !== undefined ? { max_tokens_in: budget.maxTokensIn } : {}),
+        ...(budget.maxTokensOut !== undefined ? { max_tokens_out: budget.maxTokensOut } : {}),
+        ...(budget.maxDollars !== undefined ? { max_dollars: budget.maxDollars } : {}),
+    };
+}
+//# sourceMappingURL=budget.js.map

package/dist/budget.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget.js","sourceRoot":"","sources":["../src/budget.ts"],"names":[],"mappings":"AAIA,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,gBAAgB,KAAK,CAAC,iGAAiG,CAAC,CAAC,CAAC,CAAC;CAC5H;AAED,6EAA6E;AAC7E,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,oCAAoC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC/D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAC1C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;IACvG,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjH,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;QACjF,OAAO,CAAe,CAAC;IACzB,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAC7G,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,IAAK,CAAC,CAAC,MAAiB,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAC3H,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAChM,IAAI,EAAsB,CAAC;IAC3B,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAC1C,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAC,EAAE,EAAC,CAAC,EAAC,CAAC,EAAC,IAAI,EAAC,CAAC,EAAC,KAAK,EAAC,CAAC,EAAC,OAAO,EAAC,CAAC,EAAC,QAAQ,EAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAE,CAAC,CAAC;QACjF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,SAAS,EAAE,CAAC,CAAC,MAAgB,EAAC,CAAC;QAC5F,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAC,CAAC;QACnE,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAC,cAAc,EAAE,EAAE,EAAC,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,cAAc,CAAC,MAAkB;IAC/C,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrF,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC"}

package/dist/bundle-transport.d.ts

@@ -0,0 +1,18 @@
+export type BundleFailureKind = 'bucket_unconfigured' | 'bucket_unreachable' | 'bundle_missing_locally' | 'bundle_signature_invalid' | 'bundle_unsupported' | 'deploy_partial';
+export declare class BundleFailure extends Error {
+    readonly kind: BundleFailureKind;
+    constructor(kind: BundleFailureKind, message: string);
+}
+export interface DigestReference {
+    name: string;
+    digest: string;
+}
+export declare function parseDigestReference(value: string): DigestReference | undefined;
+export declare function bucketDirectory(uri: string, ref: DigestReference): string;
+export declare function exists(path: string): Promise<boolean>;
+export declare function verifyDigest(directory: string, digest: string): Promise<void>;
+/** Publish only a complete, verified directory. Concurrent identical writers converge. */
+export declare function copyBundle(source: string, target: string, digest: string): Promise<boolean>;
+export declare function writableBucket(target: string): Promise<void>;
+export declare function fetchBundle(ref: DigestReference, bucket: string): Promise<string>;
+//# sourceMappingURL=bundle-transport.d.ts.map

package/dist/bundle-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-transport.d.ts","sourceRoot":"","sources":["../src/bundle-transport.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,iBAAiB,GAAG,qBAAqB,GAAG,oBAAoB,GACxE,wBAAwB,GAAG,0BAA0B,GAAG,oBAAoB,GAAG,gBAAgB,CAAC;AACpG,qBAAa,aAAc,SAAQ,KAAK;IAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB;gBAAvB,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM;CAC9D;AACD,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AACjE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAI/E;AACD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,eAAe,GAAG,MAAM,CAUzE;AACD,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3D;AACD,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGnF;AACD,0FAA0F;AAC1F,wBAAsB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAejG;AACD,wBAAsB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOlE;AACD,wBAAsB,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAgBvF"}

package/dist/bundle-transport.js

@@ -0,0 +1,111 @@
+import { constants } from 'node:fs';
+import { access, cp, lstat, mkdir, mkdtemp, rename, rm } from 'node:fs/promises';
+import { dirname, isAbsolute, join } from 'node:path';
+import { homedir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { verifyBundle } from './bundle.js';
+export class BundleFailure extends Error {
+    kind;
+    constructor(kind, message) {
+        super(message);
+        this.kind = kind;
+    }
+}
+export function parseDigestReference(value) {
+    // Match the safe single-component name grammar used by sealBundle.
+    const match = /^([A-Za-z0-9][A-Za-z0-9._-]*)@sha256:([0-9a-f]{64})$/.exec(value);
+    return match ? { name: match[1], digest: match[2] } : undefined;
+}
+export function bucketDirectory(uri, ref) {
+    try {
+        const url = new URL(uri);
+        if (url.protocol !== 'file:' || url.search || url.hash)
+            throw new Error('expected file:// URI');
+        const path = fileURLToPath(url);
+        if (!isAbsolute(path))
+            throw new Error('expected absolute bucket path');
+        return join(path, ref.name, 'sha256', ref.digest);
+    }
+    catch {
+        throw new BundleFailure('bucket_unreachable', 'This slice requires an absolute file:// bucket URI.');
+    }
+}
+export async function exists(path) {
+    try {
+        await lstat(path);
+        return true;
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return false;
+        throw error;
+    }
+}
+export async function verifyDigest(directory, digest) {
+    try {
+        await verifyBundle(directory, digest);
+    }
+    catch (error) {
+        throw new BundleFailure('bundle_signature_invalid', String(error));
+    }
+}
+/** Publish only a complete, verified directory. Concurrent identical writers converge. */
+export async function copyBundle(source, target, digest) {
+    if (await exists(target)) {
+        await verifyDigest(target, digest);
+        return false;
+    }
+    await mkdir(dirname(target), { recursive: true });
+    const staging = await mkdtemp(join(dirname(target), '.bundle-'));
+    try {
+        await cp(source, staging, { recursive: true, dereference: false, verbatimSymlinks: true });
+        await verifyDigest(staging, digest);
+        try {
+            await rename(staging, target);
+        }
+        catch (error) {
+            if (!['EEXIST', 'ENOTEMPTY'].includes(error.code ?? ''))
+                throw error;
+            await verifyDigest(target, digest);
+            return false;
+        }
+        return true;
+    }
+    finally {
+        await rm(staging, { recursive: true, force: true });
+    }
+}
+export async function writableBucket(target) {
+    try {
+        await mkdir(dirname(target), { recursive: true });
+        await access(dirname(target), constants.W_OK);
+        const probe = await mkdtemp(join(dirname(target), '.probe-'));
+        await rm(probe, { recursive: true });
+    }
+    catch (error) {
+        throw new BundleFailure('bucket_unreachable', String(error));
+    }
+}
+export async function fetchBundle(ref, bucket) {
+    const cacheRoot = process.env['XDG_CACHE_HOME'];
+    const cache = join(cacheRoot && isAbsolute(cacheRoot) ? cacheRoot : join(homedir(), '.cache'), 'flows', 'bundles', ref.digest);
+    // Verify every hit; a corrupt cache never executes or silently falls back.
+    if (await exists(cache)) {
+        await verifyDigest(cache, ref.digest);
+        return cache;
+    }
+    const source = bucketDirectory(bucket, ref);
+    try {
+        if (!await exists(source))
+            throw new BundleFailure('bucket_unreachable', `Bundle is absent at ${bucket}.`);
+        await verifyDigest(source, ref.digest);
+        await copyBundle(source, cache, ref.digest);
+        return cache;
+    }
+    catch (error) {
+        if (error instanceof BundleFailure)
+            throw error;
+        throw new BundleFailure('bucket_unreachable', String(error));
+    }
+}
+//# sourceMappingURL=bundle-transport.js.map

package/dist/bundle-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-transport.js","sourceRoot":"","sources":["../src/bundle-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACjF,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,MAAM,OAAO,aAAc,SAAQ,KAAK;IACjB;IAArB,YAAqB,IAAuB,EAAE,OAAe;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAA3D,SAAI,GAAJ,IAAI,CAAmB;IAAqC,CAAC;CACnF;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,mEAAmE;IACnE,MAAM,KAAK,GAAG,sDAAsD,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,GAAoB;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAChG,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACxE,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,qDAAqD,CAAC,CAAC;IACvG,CAAC;AACH,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IACvC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;AACtG,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAAiB,EAAE,MAAc;IAClE,IAAI,CAAC;QAAC,MAAM,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAC9C,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,0BAA0B,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;AACvF,CAAC;AACD,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,MAAc,EAAE,MAAc;IAC7E,IAAI,MAAM,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAAC,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IAC/E,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3F,MAAM,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QACtC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,MAAM,KAAK,CAAC;YAChG,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YACnC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACpE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAc;IACjD,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClD,MAAM,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC9D,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;AACnF,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAoB,EAAE,MAAc;IACpE,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,EAC3F,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,2EAA2E;IAC3E,IAAI,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAAC,MAAM,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACjF,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,uBAAuB,MAAM,GAAG,CAAC,CAAC;QAC3G,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC"}

package/dist/bundle-typescript.d.ts

@@ -0,0 +1,8 @@
+import type { BundleFile } from './bundle.js';
+export declare function buildTypescript(input: string): Promise<{
+    spec: import("./compile.js").CompiledFlowSpec;
+    authored: boolean;
+    compiler: string;
+    files: BundleFile[];
+}>;
+//# sourceMappingURL=bundle-typescript.d.ts.map

package/dist/bundle-typescript.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-typescript.d.ts","sourceRoot":"","sources":["../src/bundle-typescript.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAc9C,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM;;;;;GA6ClD"}

package/dist/bundle-typescript.js

@@ -0,0 +1,108 @@
+import { spawnSync } from 'node:child_process';
+import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { canonicalize } from './canonical.js';
+import { compileSpec } from './compile.js';
+/** Bun is an explicit build dependency, never an implicit install. */
+function bun(args, cwd) {
+    const result = spawnSync('bun', ['--no-env-file', ...args], {
+        cwd, encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024,
+        env: { PATH: process.env['PATH'], NODE_ENV: 'production', TZ: 'UTC' },
+    });
+    if (result.error || result.status !== 0) {
+        throw new Error(`TypeScript build requires Bun: ${result.error?.message ?? result.stderr}`);
+    }
+    return result.stdout.trim();
+}
+export async function buildTypescript(input) {
+    const directory = dirname(input);
+    const lockPath = await findLock(directory);
+    const lock = JSON.parse(await readFile(lockPath, 'utf8'));
+    if (![2, 3].includes(lock.lockfileVersion) || !lock.packages) {
+        throw new Error('package-lock.json: expected npm lockfile version 2 or 3 with pinned packages');
+    }
+    await checkInstalledVersions(dirname(lockPath), lock.packages);
+    const compiler = `bun@${bun(['--version'], directory)}`;
+    const staging = await mkdtemp(join(tmpdir(), 'flows-ts-'));
+    try {
+        // Evaluate module declarations, never the authored body. Resolve the runtime
+        // beside the input, keeping flow()'s WeakMap identity in the same module.
+        const probe = `
+import { createRequire } from 'node:module';
+import { pathToFileURL } from 'node:url';
+const module = await import(${JSON.stringify(pathToFileURL(input).href)});
+let spec = module.default;
+let authored = false;
+if (!spec || !Array.isArray(spec.steps)) {
+  const require = createRequire(${JSON.stringify(pathToFileURL(input).href)});
+  const { getFlowDefinition } = await import(pathToFileURL(require.resolve('@relayflows/surface/runtime')).href);
+  const definition = getFlowDefinition(spec);
+  if (Object.keys(definition.header).length) throw new Error('unsupported authored flow header');
+  if (!module.spec) throw new Error('authored flow() requires an exported spec declaration for build-time preflight; the body is not executed during build');
+  spec = module.spec;
+  if (spec.name !== definition.name) throw new Error('exported spec name must match flow() name');
+  authored = true;
+}
+
+process.stdout.write(JSON.stringify({ spec, authored }));
+`;
+        const probePath = join(staging, 'inspect.ts');
+        await writeFile(probePath, probe);
+        const inspected = JSON.parse(bun([probePath], directory));
+        const spec = compileSpec(inspected.spec);
+        const executable = join(staging, 'flow');
+        bun(['build', '--compile', '--env=disable', '--no-compile-autoload-dotenv',
+            '--no-compile-autoload-bunfig', '--outfile', executable, input], directory);
+        const files = [
+            { path: 'flow', data: await readFile(executable) },
+            { path: 'lockfile.json', data: canonicalize(lock) },
+        ];
+        return { spec, authored: inspected.authored === true, compiler, files };
+    }
+    finally {
+        await rm(staging, { recursive: true, force: true });
+    }
+}
+/** Do not label a stale node_modules tree with a newer lockfile's pins. */
+async function checkInstalledVersions(root, packages) {
+    for (const [path, entry] of Object.entries(packages)) {
+        if (path === '')
+            continue;
+        if (path.startsWith('/') || path.includes('\\') || path.split('/').includes('..')
+            || (entry.resolved !== undefined && /^(?:file:|\/|[A-Za-z]:)/.test(entry.resolved))) {
+            throw new Error(`package-lock.json: ${path} must use portable, pinned dependency locations`);
+        }
+        if (entry.link)
+            continue; // Workspace source is captured by the compiler.
+        let installed;
+        try {
+            installed = JSON.parse(await readFile(join(root, path, 'package.json'), 'utf8'));
+        }
+        catch (error) {
+            if (error.code === 'ENOENT' && (entry.optional || entry.dev))
+                continue;
+            throw new Error(`package-lock.json: ${path} is missing; run npm ci before building`);
+        }
+        if (typeof entry.version !== 'string' || installed.version !== entry.version) {
+            throw new Error(`package-lock.json: ${path} does not match its pinned version; run npm ci before building`);
+        }
+    }
+}
+async function findLock(start) {
+    for (let directory = start;; directory = dirname(directory)) {
+        const candidate = join(directory, 'package-lock.json');
+        try {
+            await readFile(candidate);
+            return candidate;
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        if (dirname(directory) === directory)
+            throw new Error('package-lock.json: no workspace lockfile found for TS flow');
+    }
+}
+//# sourceMappingURL=bundle-typescript.js.map

package/dist/bundle-typescript.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle-typescript.js","sourceRoot":"","sources":["../src/bundle-typescript.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAG3C,sEAAsE;AACtE,SAAS,GAAG,CAAC,IAAc,EAAE,GAAW;IACtC,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,eAAe,EAAE,GAAG,IAAI,CAAC,EAAE;QAC1D,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QACpE,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,EAAE,KAAK,EAAE;KACtE,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;IACxD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC;QACH,6EAA6E;QAC7E,0EAA0E;QAC1E,MAAM,KAAK,GAAG;;;8BAGY,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;;;;kCAIrC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;;;;;;;;;;;CAW1E,CAAC;QACE,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC9C,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAClC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;QAC1D,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzC,GAAG,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,8BAA8B;YACxE,8BAA8B,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAiB;YAC1B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC,UAAU,CAAC,EAAE;YAClD,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE;SACpD,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,KAAK,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC1E,CAAC;YAAS,CAAC;QAAC,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,2EAA2E;AAC3E,KAAK,UAAU,sBAAsB,CAAC,IAAY,EAAE,QAElD;IACA,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACrD,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS;QAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;eAC5E,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,iDAAiD,CAAC,CAAC;QAC/F,CAAC;QACD,IAAI,KAAK,CAAC,IAAI;YAAE,SAAS,CAAC,gDAAgD;QAC1E,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QACzF,OAAO,KAAK,EAAE,CAAC;YACb,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC;gBAAE,SAAS;YAClG,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,yCAAyC,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,gEAAgE,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;AACH,CAAC;AACD,KAAK,UAAU,QAAQ,CAAC,KAAa;IACnC,KAAK,IAAI,SAAS,GAAG,KAAK,GAAI,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,mBAAmB,CAAC,CAAC;QACvD,IAAI,CAAC;YAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;YAAC,OAAO,SAAS,CAAC;QAAC,CAAC;QACpD,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QAAC,CAAC;QACtF,IAAI,OAAO,CAAC,SAAS,CAAC,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IACtH,CAAC;AACH,CAAC"}

package/dist/bundle.d.ts

@@ -0,0 +1,25 @@
+export interface BundleEntry {
+    path: string;
+    sha256: string;
+    bytes: number;
+}
+export interface BundleFile {
+    path: string;
+    data: Uint8Array | string;
+    executable?: boolean;
+}
+export interface BundleOptions {
+    name: string;
+    out: string;
+    repo: string;
+    files: BundleFile[];
+    env?: NodeJS.ProcessEnv;
+    warn(message: string): void;
+}
+export declare function sha256(data: Uint8Array | string): string;
+/** Manifest and identity are envelopes, excluded to avoid circular hashing. */
+export declare function sealBundle(options: BundleOptions): Promise<string>;
+/** Verify an untrusted directory without following symlinks or manifest traversal.
+ * Bucket/cache readers supply the requested digest; local builds bind it to the directory name. */
+export declare function verifyBundle(directory: string, expectedDigest?: string): Promise<string>;
+//# sourceMappingURL=bundle.d.ts.map

package/dist/bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../src/bundle.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,WAAW;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAC5E,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE;AAC7F,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,MAAM,CAExD;AAQD,+EAA+E;AAC/E,wBAAsB,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CA2CxE;AA4CD;mGACmG;AACnG,wBAAsB,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAsD9F"}