@sentropic/h2a 0.85.25 → 0.87.0

package/dist/runtime/mcp-registry/broker.js

@@ -0,0 +1,203 @@
+/**
+ * Internal groundwork for a principal-scoped third-party MCP broker.
+ *
+ * This module deliberately has no stdio, HTTP, or public h2a MCP wiring. The
+ * future gateway owns authenticated ingress and turns its authenticated `sub`
+ * into an AuthenticatedPrincipal before it creates this broker.
+ */
+/** Construct server-side opaque values at trusted integration boundaries. */
+export function authenticatedPrincipal(sub) {
+    return sub;
+}
+/** Construct a server-side vault handle; no credential value is accepted. */
+export function secretRef(ref) {
+    return ref;
+}
+export function established(value, asOf = new Date().toISOString()) {
+    return { kind: "established", state: "success", value, asOf };
+}
+export function isEstablished(resolution) {
+    return resolution.kind === "established" && resolution.state === "success" && "value" in resolution;
+}
+function unavailableSource(source) {
+    if (source === "catalogue" ||
+        source === "binding" ||
+        source === "grant" ||
+        source === "credential" ||
+        source === "upstream" ||
+        source === "adapter") {
+        return source;
+    }
+    return "upstream";
+}
+function unavailableCode(code) {
+    if (code === "upstream_timeout" ||
+        code === "upstream_protocol_error" ||
+        code === "adapter_not_available") {
+        return code;
+    }
+    return "source_unavailable";
+}
+function unavailable(resolution) {
+    return {
+        kind: "unavailable",
+        source: unavailableSource(resolution.source),
+        code: unavailableCode(resolution.code),
+        retryable: resolution.retryable,
+        observedAt: resolution.observedAt
+    };
+}
+function failed(source, observedAt, code = "source_unavailable", retryable = true) {
+    return {
+        kind: "unexpected_failure",
+        state: "failure",
+        source,
+        code,
+        retryable,
+        observedAt
+    };
+}
+function hasAgentVisibleArguments(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        Object.keys(value).length === 1 &&
+        "query" in value &&
+        typeof value.query === "string");
+}
+function toAgentVisibleOutput(value) {
+    if (typeof value !== "object" ||
+        value === null ||
+        !("messages" in value) ||
+        !Array.isArray(value.messages)) {
+        return undefined;
+    }
+    const messages = [];
+    for (const message of value.messages) {
+        if (typeof message !== "object" ||
+            message === null ||
+            typeof message.id !== "string" ||
+            typeof message.subject !== "string") {
+            return undefined;
+        }
+        messages.push({
+            id: message.id,
+            subject: message.subject
+        });
+    }
+    return { kind: "mail.search.result", messages };
+}
+function effectiveTools(catalogue, resolution) {
+    if (!isEstablished(resolution)) {
+        return resolution;
+    }
+    const servers = new Map(catalogue.map((server) => [server.id, server]));
+    const effective = [];
+    for (const grant of resolution.value) {
+        if (!grant.active)
+            continue;
+        const server = servers.get(grant.serverId);
+        if (!server)
+            continue;
+        const allowed = new Set(grant.mayUseToolNames);
+        for (const tool of server.tools) {
+            if (allowed.has(tool.name)) {
+                effective.push({ grant, tool });
+            }
+        }
+    }
+    return established(effective, resolution.asOf);
+}
+/**
+ * Creates one broker projection for one ingress-authenticated principal.
+ * The caller supplies the principal at construction time, not as agent data.
+ */
+export function createPrincipalScopedRegistryBroker(options) {
+    const now = options.now ?? (() => new Date().toISOString());
+    function audit(outcome, connectorRef, toolName, correlationId) {
+        options.audit?.({
+            principalRef: options.principal,
+            connectorRef,
+            toolName,
+            outcome,
+            correlationId,
+            observedAt: now()
+        });
+    }
+    function resolveEffectiveTools() {
+        try {
+            return effectiveTools(options.catalogue, options.grantResolver.resolve(options.principal));
+        }
+        catch {
+            return failed("grant", now());
+        }
+    }
+    return {
+        listTools() {
+            const resolved = resolveEffectiveTools();
+            if (!isEstablished(resolved)) {
+                const result = unavailable(resolved);
+                audit("unavailable", undefined, undefined, undefined);
+                return result;
+            }
+            const tools = resolved.value.map(({ tool }) => tool);
+            audit("listed", undefined, undefined, undefined);
+            return { kind: "established", tools, asOf: resolved.asOf };
+        },
+        callTool(input) {
+            if (!hasAgentVisibleArguments(input.arguments)) {
+                audit("invalid_arguments", undefined, input.name, input.correlationId);
+                return { kind: "invalid_arguments" };
+            }
+            const resolved = resolveEffectiveTools();
+            if (!isEstablished(resolved)) {
+                const result = unavailable(resolved);
+                audit("unavailable", undefined, input.name, input.correlationId);
+                return result;
+            }
+            const selected = resolved.value.find(({ tool }) => tool.name === input.name);
+            if (!selected) {
+                audit("not_authorized", undefined, input.name, input.correlationId);
+                return { kind: "not_authorized" };
+            }
+            const adapter = options.adapters[selected.grant.serverId];
+            if (!adapter) {
+                const result = {
+                    kind: "unavailable",
+                    source: "adapter",
+                    code: "adapter_not_available",
+                    retryable: false,
+                    observedAt: now()
+                };
+                audit("unavailable", selected.grant.connectorRef, input.name, input.correlationId);
+                return result;
+            }
+            let upstream;
+            try {
+                upstream = adapter.invoke({
+                    connectorRef: selected.grant.connectorRef,
+                    secretRef: selected.grant.secretRef,
+                    tool: selected.tool,
+                    arguments: input.arguments,
+                    correlationId: input.correlationId
+                });
+            }
+            catch {
+                upstream = failed("upstream", now());
+            }
+            if (!isEstablished(upstream)) {
+                const result = unavailable(upstream);
+                audit("unavailable", selected.grant.connectorRef, input.name, input.correlationId);
+                return result;
+            }
+            const output = toAgentVisibleOutput(upstream.value);
+            if (!output) {
+                const result = unavailable(failed("upstream", now(), "upstream_protocol_error", false));
+                audit("unavailable", selected.grant.connectorRef, input.name, input.correlationId);
+                return result;
+            }
+            audit("called", selected.grant.connectorRef, input.name, input.correlationId);
+            return { kind: "completed", output };
+        }
+    };
+}
+//# sourceMappingURL=broker.js.map

package/dist/runtime/mcp-registry/broker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.js","sourceRoot":"","sources":["../../../src/runtime/mcp-registry/broker.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAiBH,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,OAAO,GAA6B,CAAC;AACvC,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,GAAgB,CAAC;AAC1B,CAAC;AAuFD,MAAM,UAAU,WAAW,CAAI,KAAQ,EAAE,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACtE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAChE,CAAC;AAED,MAAM,UAAU,aAAa,CAAI,UAAiC;IAChE,OAAO,UAAU,CAAC,IAAI,KAAK,aAAa,IAAI,UAAU,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,IAAI,UAAU,CAAC;AACtG,CAAC;AA0GD,SAAS,iBAAiB,CAAC,MAAc;IACvC,IACE,MAAM,KAAK,WAAW;QACtB,MAAM,KAAK,SAAS;QACpB,MAAM,KAAK,OAAO;QAClB,MAAM,KAAK,YAAY;QACvB,MAAM,KAAK,UAAU;QACrB,MAAM,KAAK,SAAS,EACpB,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,IACE,IAAI,KAAK,kBAAkB;QAC3B,IAAI,KAAK,yBAAyB;QAClC,IAAI,KAAK,uBAAuB,EAChC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,UAAoC;IACvD,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,iBAAiB,CAAC,UAAU,CAAC,MAAM,CAAC;QAC5C,IAAI,EAAE,eAAe,CAAC,UAAU,CAAC,IAAI,CAAC;QACtC,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,UAAU,EAAE,UAAU,CAAC,UAAU;KAClC,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CACb,MAAc,EACd,UAAkB,EAClB,IAAI,GAAG,oBAAoB,EAC3B,SAAS,GAAG,IAAI;IAEhB,OAAO;QACL,IAAI,EAAE,oBAAoB;QAC1B,KAAK,EAAE,SAAS;QAChB,MAAM;QACN,IAAI;QACJ,SAAS;QACT,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;QAC/B,OAAO,IAAI,KAAK;QAChB,OAAQ,KAA6B,CAAC,KAAK,KAAK,QAAQ,CACzD,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,CAAC,CAAC,UAAU,IAAI,KAAK,CAAC;QACtB,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAC9B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAA2C,EAAE,CAAC;IAC5D,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,IACE,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,KAAK,IAAI;YAChB,OAAQ,OAA4B,CAAC,EAAE,KAAK,QAAQ;YACpD,OAAQ,OAAiC,CAAC,OAAO,KAAK,QAAQ,EAC9D,CAAC;YACD,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC;YACZ,EAAE,EAAG,OAA0B,CAAC,EAAE;YAClC,OAAO,EAAG,OAA+B,CAAC,OAAO;SAClD,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,QAAQ,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,cAAc,CACrB,SAA4C,EAC5C,UAAyD;IAEzD,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACxE,MAAM,SAAS,GAAoB,EAAE,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,UAAU,CAAC,KAAK,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,SAAS;QAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,WAAW,CAAC,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;AACjD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CACjD,OAA6C;IAE7C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAE5D,SAAS,KAAK,CACZ,OAAsC,EACtC,YAAgC,EAChC,QAA4B,EAC5B,aAAiC;QAEjC,OAAO,CAAC,KAAK,EAAE,CAAC;YACd,YAAY,EAAE,OAAO,CAAC,SAAS;YAC/B,YAAY;YACZ,QAAQ;YACR,OAAO;YACP,aAAa;YACb,UAAU,EAAE,GAAG,EAAE;SAClB,CAAC,CAAC;IACL,CAAC;IAED,SAAS,qBAAqB;QAC5B,IAAI,CAAC;YACH,OAAO,cAAc,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7F,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,OAAO;QACL,SAAS;YACP,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;YACzC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;gBACrC,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBACtD,OAAO,MAAM,CAAC;YAChB,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YACrD,KAAK,CAAC,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;YACjD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC7D,CAAC;QAED,QAAQ,CAAC,KAAK;YACZ,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/C,KAAK,CAAC,mBAAmB,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;gBACvE,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;YACvC,CAAC;YACD,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;YACzC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;gBACrC,KAAK,CAAC,aAAa,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;gBACjE,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7E,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,KAAK,CAAC,gBAAgB,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;gBACpE,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC;YACpC,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC1D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,MAAM,GAAwB;oBAClC,IAAI,EAAE,aAAa;oBACnB,MAAM,EAAE,SAAS;oBACjB,IAAI,EAAE,uBAAuB;oBAC7B,SAAS,EAAE,KAAK;oBAChB,UAAU,EAAE,GAAG,EAAE;iBAClB,CAAC;gBACF,KAAK,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;gBACnF,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,IAAI,QAAsD,CAAC;YAC3D,IAAI,CAAC;gBACH,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;oBACxB,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY;oBACzC,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,SAAS;oBACnC,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,SAAS,EAAE,KAAK,CAAC,SAAS;oBAC1B,aAAa,EAAE,KAAK,CAAC,aAAa;iBACnC,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;YACvC,CAAC;YACD,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;gBACrC,KAAK,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;gBACnF,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE,yBAAyB,EAAE,KAAK,CAAC,CAAC,CAAC;gBACxF,KAAK,CAAC,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;gBACnF,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YAC9E,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QACvC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/mcp-registry/broker.typecheck.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=broker.typecheck.d.ts.map

package/dist/runtime/mcp-registry/broker.typecheck.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.typecheck.d.ts","sourceRoot":"","sources":["../../../src/runtime/mcp-registry/broker.typecheck.ts"],"names":[],"mappings":""}

package/dist/runtime/mcp-registry/broker.typecheck.js

@@ -0,0 +1,48 @@
+const reviewedInput = {
+    type: "object",
+    properties: { query: { type: "string" } },
+    required: ["query"],
+    additionalProperties: false
+};
+const reviewedOutput = {
+    kind: "mail.search.result",
+    messages: [{ id: "message-1", subject: "Quarterly report" }]
+};
+void reviewedInput;
+void reviewedOutput;
+const rejectedCredentialSchema = {
+    type: "object",
+    properties: {
+        query: { type: "string" },
+        // @ts-expect-error The agent-visible input type cannot gain a credential field.
+        accessToken: { type: "string" }
+    },
+    required: ["query"],
+    additionalProperties: false
+};
+const rejectedCredentialOutput = {
+    kind: "mail.search.result",
+    messages: [],
+    // @ts-expect-error The agent-visible result type cannot gain a credential field.
+    accessToken: "never-a-credential"
+};
+void rejectedCredentialSchema;
+void rejectedCredentialOutput;
+const rejectedAdapterResult = {
+    messages: [],
+    // @ts-expect-error The adapter result type cannot carry a credential field.
+    accessToken: "never-a-credential"
+};
+void rejectedAdapterResult;
+const rejectedDiagnostic = {
+    kind: "unavailable",
+    // @ts-expect-error Agent-visible failures use a closed source vocabulary.
+    source: "upstream response included fake-access-token",
+    // @ts-expect-error Agent-visible failures use a closed code vocabulary.
+    code: "fake-access-token",
+    retryable: true,
+    observedAt: "2026-07-26T12:00:00.000Z"
+};
+void rejectedDiagnostic;
+export {};
+//# sourceMappingURL=broker.typecheck.js.map

package/dist/runtime/mcp-registry/broker.typecheck.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broker.typecheck.js","sourceRoot":"","sources":["../../../src/runtime/mcp-registry/broker.typecheck.ts"],"names":[],"mappings":"AAOA,MAAM,aAAa,GAA4B;IAC7C,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IACzC,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAEF,MAAM,cAAc,GAA+B;IACjD,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC7D,CAAC;AAEF,KAAK,aAAa,CAAC;AACnB,KAAK,cAAc,CAAC;AAEpB,MAAM,wBAAwB,GAA4B;IACxD,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,gFAAgF;QAChF,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAChC;IACD,QAAQ,EAAE,CAAC,OAAO,CAAC;IACnB,oBAAoB,EAAE,KAAK;CAC5B,CAAC;AAEF,MAAM,wBAAwB,GAA+B;IAC3D,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,EAAE;IACZ,iFAAiF;IACjF,WAAW,EAAE,oBAAoB;CAClC,CAAC;AAEF,KAAK,wBAAwB,CAAC;AAC9B,KAAK,wBAAwB,CAAC;AAE9B,MAAM,qBAAqB,GAA6B;IACtD,QAAQ,EAAE,EAAE;IACZ,4EAA4E;IAC5E,WAAW,EAAE,oBAAoB;CAClC,CAAC;AAEF,KAAK,qBAAqB,CAAC;AAE3B,MAAM,kBAAkB,GAAwB;IAC9C,IAAI,EAAE,aAAa;IACnB,0EAA0E;IAC1E,MAAM,EAAE,8CAA8C;IACtD,wEAAwE;IACxE,IAAI,EAAE,mBAAmB;IACzB,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,0BAA0B;CACvC,CAAC;AAEF,KAAK,kBAAkB,CAAC"}

package/dist/runtime/mirror/accept.d.ts

@@ -12,13 +12,42 @@
  *      key — an agent can mirror ONLY its own identity (no namespace squatting).
  *
  * Never throws on rejection; only the caller-supplied `applyRegistration` may.
+ *
+ * ── INGEST BOUNDARY (2026-07-25) ───────────────────────────────────────────
+ *
+ * Verification says the bytes came from a key we trust. It says nothing about
+ * what is IN them, and a trusted sender running an older CLI sends raw records —
+ * `workspace.path`, `launchContext`, `pid`, `file://` endpoints. So every record
+ * is narrowed by `ingest.ts` (which reuses the SEND plans) before it reaches a
+ * caller's apply callback.
+ *
+ * That narrowing is made structural by the callback TYPES: they take
+ * `H2AMirrored*`, not the local record types, so no caller of this function can
+ * be handed an unnarrowed record even by writing its callback carelessly. Same
+ * instrument as `sanitizeActorForMirror` on the send side — the raw value is not
+ * in scope at the point it would be used, so "it cannot leak here" is a
+ * consequence of the signature rather than a claim in a comment.
+ *
+ * Ordering, since a signed payload forces it: narrowing is strictly AFTER
+ * signature verification (narrowing first would alter the signed bytes and every
+ * push would fail), and strictly after the `publicKeys` authorization filter, so
+ * it can never change an authorization outcome. See `ingest.ts` for the full
+ * argument and for what this consequently does NOT claim.
  */
-import { type H2AActorRegistration, type H2AReplayGuard, type H2ASession, type H2ASubagentBinding } from "@sentropic/h2a";
+import { type H2AReplayGuard } from "@sentropic/h2a";
+import { type H2AMirroredRegistration, type H2AMirroredSession, type H2AMirroredSubagentBinding, type MirrorNarrowingReport } from "./ingest.js";
 export type H2AMirrorRejection = "malformed" | "not-mirror" | "no-signature" | "unauthorized-key" | "bad-signature" | "invalid-timestamp" | "expired" | "future" | "replayed" | "stale-sequence" | "instance-key-mismatch";
 export type H2AMirrorResult = {
     ok: true;
     applied: string[];
     signer: string;
+    /**
+     * What the ingest boundary removed from this push. `records: 0` means the
+     * sender already sends narrowed records — i.e. it is running a CLI with the
+     * send boundary. Anything higher is an un-upgraded sender, and this is the
+     * signal that makes that visible instead of silent.
+     */
+    narrowed: MirrorNarrowingReport;
 } | {
     ok: false;
     reason: H2AMirrorRejection;
@@ -30,14 +59,21 @@ export interface AcceptMirrorOptions {
     enrolledKeys: readonly string[];
     /** Replay guard (DEC-074) — its freshness window also enforces timestamp checks. */
     guard: H2AReplayGuard;
-    /** Apply an authorized registration to the local (remote-side) store. */
-    applyRegistration: (registration: H2AActorRegistration) => void;
+    /**
+     * Apply an authorized registration to the local (remote-side) store.
+     *
+     * Receives the NARROWED row (`H2AMirroredRegistration`), never the raw one —
+     * see the ingest-boundary note in the module header. The type is the boundary.
+     */
+    applyRegistration: (registration: H2AMirroredRegistration) => void;
     /**
      * P2: apply a presence session (the impl RE-STAMPS heartbeatAt with the remote
      * clock so freshness derives from the beat). Only called for sessions whose
      * instance is owned by the verified key. Omit to ignore presence (P1 behavior).
+     *
+     * Receives the NARROWED record (`H2AMirroredSession`), never the raw one.
      */
-    applyPresence?: (session: H2ASession) => void;
+    applyPresence?: (session: H2AMirroredSession) => void;
     /**
      * P2 fencing: return true iff `seq` is strictly newer than the last applied
      * for `signerInstance` (and record it). Return false to reject a stale/replayed
@@ -48,8 +84,10 @@ export interface AcceptMirrorOptions {
      * P3: apply a subagent binding (the impl is idempotent — a known binding is a
      * no-op). Only called for bindings whose `parentInstance` is owned by the
      * verified key. Omit to ignore subagents (P1/P2 behavior).
+     *
+     * Receives the NARROWED binding (`H2AMirroredSubagentBinding`).
      */
-    applySubagent?: (binding: H2ASubagentBinding) => void;
+    applySubagent?: (binding: H2AMirroredSubagentBinding) => void;
     /** Reference time (ms epoch) for the guard. Defaults to `Date.now()`. */
     now?: number;
 }

package/dist/runtime/mirror/accept.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"accept.d.ts","sourceRoot":"","sources":["../../../src/runtime/mirror/accept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAGL,KAAK,oBAAoB,EAGzB,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAC;AAIxB,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,YAAY,GACZ,cAAc,GACd,kBAAkB,GAClB,eAAe,GACf,mBAAmB,GACnB,SAAS,GACT,QAAQ,GACR,UAAU,GACV,gBAAgB,GAChB,uBAAuB,CAAC;AAE5B,MAAM,MAAM,eAAe,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAE9C,MAAM,WAAW,mBAAmB;IAClC,oGAAoG;IACpG,iBAAiB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACxD,oGAAoG;IACpG,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,oFAAoF;IACpF,KAAK,EAAE,cAAc,CAAC;IACtB,yEAAyE;IACzE,iBAAiB,EAAE,CAAC,YAAY,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAChE;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,IAAI,CAAC;IAC9C;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACjE;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACtD,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,eAAe,CAsDpG"}
+{"version":3,"file":"accept.d.ts","sourceRoot":"","sources":["../../../src/runtime/mirror/accept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAKL,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,YAAY,GACZ,cAAc,GACd,kBAAkB,GAClB,eAAe,GACf,mBAAmB,GACnB,SAAS,GACT,QAAQ,GACR,UAAU,GACV,gBAAgB,GAChB,uBAAuB,CAAC;AAE5B,MAAM,MAAM,eAAe,GACvB;IACE,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,QAAQ,EAAE,qBAAqB,CAAC;CACjC,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAE9C,MAAM,WAAW,mBAAmB;IAClC,oGAAoG;IACpG,iBAAiB,EAAE,CAAC,cAAc,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IACxD,oGAAoG;IACpG,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,oFAAoF;IACpF,KAAK,EAAE,cAAc,CAAC;IACtB;;;;;OAKG;IACH,iBAAiB,EAAE,CAAC,YAAY,EAAE,uBAAuB,KAAK,IAAI,CAAC;IACnE;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACtD;;;;OAIG;IACH,aAAa,CAAC,EAAE,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC;IACjE;;;;;;OAMG;IACH,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,0BAA0B,KAAK,IAAI,CAAC;IAC9D,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,eAAe,CAiFpG"}

package/dist/runtime/mirror/accept.js

@@ -12,9 +12,31 @@
  *      key — an agent can mirror ONLY its own identity (no namespace squatting).
  *
  * Never throws on rejection; only the caller-supplied `applyRegistration` may.
+ *
+ * ── INGEST BOUNDARY (2026-07-25) ───────────────────────────────────────────
+ *
+ * Verification says the bytes came from a key we trust. It says nothing about
+ * what is IN them, and a trusted sender running an older CLI sends raw records —
+ * `workspace.path`, `launchContext`, `pid`, `file://` endpoints. So every record
+ * is narrowed by `ingest.ts` (which reuses the SEND plans) before it reaches a
+ * caller's apply callback.
+ *
+ * That narrowing is made structural by the callback TYPES: they take
+ * `H2AMirrored*`, not the local record types, so no caller of this function can
+ * be handed an unnarrowed record even by writing its callback carelessly. Same
+ * instrument as `sanitizeActorForMirror` on the send side — the raw value is not
+ * in scope at the point it would be used, so "it cannot leak here" is a
+ * consequence of the signature rather than a claim in a comment.
+ *
+ * Ordering, since a signed payload forces it: narrowing is strictly AFTER
+ * signature verification (narrowing first would alter the signed bytes and every
+ * push would fail), and strictly after the `publicKeys` authorization filter, so
+ * it can never change an authorization outcome. See `ingest.ts` for the full
+ * argument and for what this consequently does NOT claim.
  */
 import { isH2AEnvelope, verifyEnvelopeSignature } from "@sentropic/h2a";
 import { H2A_MIRROR_BODY_KIND } from "./build.js";
+import { createNarrowingTally, narrowIngestedPresence, narrowIngestedRegistration, narrowIngestedSubagent } from "./ingest.js";
 export function acceptMirrorEnvelope(payload, options) {
     if (!isH2AEnvelope(payload))
         return { ok: false, reason: "malformed" };
@@ -48,23 +70,49 @@ export function acceptMirrorEnvelope(payload, options) {
         if (!options.fenceSequence(signer, body.seq))
             return { ok: false, reason: "stale-sequence" };
     }
-    for (const reg of authorized)
+    // ── INGEST BOUNDARY ───────────────────────────────────────────────────────
+    // Everything below narrows before it applies. The tally observes what the
+    // plans removed, so an un-upgraded sender is a number on the response instead
+    // of a silent repair. Narrowing starts only HERE: every authorization decision
+    // above (key ownership, replay, fencing) has already been taken on the record
+    // as the sender signed it, so no narrowing step can have influenced one.
+    const tally = createNarrowingTally();
+    const narrowedRegistrations = authorized.map((reg) => {
+        const narrowed = narrowIngestedRegistration(reg);
+        tally.note(reg, narrowed);
+        return narrowed;
+    });
+    for (const reg of narrowedRegistrations)
         options.applyRegistration(reg);
-    const owned = new Set(authorized.map((r) => r.instance ?? r.id));
+    // Ownership derives from the NARROWED rows: `id`/`instance` are transmitted by
+    // the registration plan, so this is the same set either way — taken from the
+    // narrowed rows so the raw list is not read again after this point.
+    const owned = new Set(narrowedRegistrations.map((r) => r.instance ?? r.id));
     // P2 presence — only sessions whose instance the verified key owns.
     if (options.applyPresence && Array.isArray(body.presence)) {
         for (const session of body.presence) {
-            if (owned.has(session.instance))
-                options.applyPresence(session);
+            if (!owned.has(session.instance))
+                continue;
+            const narrowed = narrowIngestedPresence(session);
+            tally.note(session, narrowed);
+            options.applyPresence(narrowed);
         }
     }
     // P3 subagents — only bindings whose parent the verified key owns.
     if (options.applySubagent && Array.isArray(body.subagents)) {
         for (const binding of body.subagents) {
-            if (owned.has(binding.parentInstance))
-                options.applySubagent(binding);
+            if (!owned.has(binding.parentInstance))
+                continue;
+            const narrowed = narrowIngestedSubagent(binding);
+            tally.note(binding, narrowed);
+            options.applySubagent(narrowed);
         }
     }
-    return { ok: true, applied: authorized.map((r) => r.instance ?? r.id), signer };
+    return {
+        ok: true,
+        applied: narrowedRegistrations.map((r) => r.instance ?? r.id),
+        signer,
+        narrowed: tally.report()
+    };
 }
 //# sourceMappingURL=accept.js.map

package/dist/runtime/mirror/accept.js.map

@@ -1 +1 @@
-{"version":3,"file":"accept.js","sourceRoot":"","sources":["../../../src/runtime/mirror/accept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EACL,aAAa,EACb,uBAAuB,EAOxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAA8B,MAAM,YAAY,CAAC;AAkD9E,MAAM,UAAU,oBAAoB,CAAC,OAAgB,EAAE,OAA4B;IACjF,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,OAA6C,CAAC;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IACvC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC9E,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAEhE,8EAA8E;IAC9E,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC/E,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAEnF,MAAM,MAAM,GAAmB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAA4B,EAAE,CAAC;IAElF,+EAA+E;IAC/E,4EAA4E;IAC5E,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC/F,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,UAAU;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEjE,oEAAoE;IACpE,IAAI,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,IAAI,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;gBAAE,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;AAClF,CAAC"}
+{"version":3,"file":"accept.js","sourceRoot":"","sources":["../../../src/runtime/mirror/accept.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,OAAO,EACL,aAAa,EACb,uBAAuB,EAIxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAA8B,MAAM,YAAY,CAAC;AAC9E,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EAKvB,MAAM,aAAa,CAAC;AAsErB,MAAM,UAAU,oBAAoB,CAAC,OAAgB,EAAE,OAA4B;IACjF,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACvE,MAAM,QAAQ,GAAG,OAA6C,CAAC;IAC/D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,oBAAoB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QACtF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;IACvC,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/C,CAAC;IAED,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC9E,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,uBAAuB,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAEhE,8EAA8E;IAC9E,4EAA4E;IAC5E,gEAAgE;IAChE,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAC1C,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,CAC/E,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAEnF,MAAM,MAAM,GAAmB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAA4B,EAAE,CAAC;IAElF,+EAA+E;IAC/E,4EAA4E;IAC5E,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC/F,CAAC;IAED,6EAA6E;IAC7E,0EAA0E;IAC1E,8EAA8E;IAC9E,+EAA+E;IAC/E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,KAAK,GAAG,oBAAoB,EAAE,CAAC;IAErC,MAAM,qBAAqB,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACnD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,GAAG,CAAC,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;IACH,KAAK,MAAM,GAAG,IAAI,qBAAqB;QAAE,OAAO,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAExE,+EAA+E;IAC/E,6EAA6E;IAC7E,oEAAoE;IACpE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAE5E,oEAAoE;IACpE,IAAI,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;gBAAE,SAAS;YAC3C,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC9B,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,IAAI,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3D,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;gBAAE,SAAS;YACjD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC9B,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM;QACN,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE;KACzB,CAAC;AACJ,CAAC"}

package/dist/runtime/mirror/build.d.ts

@@ -7,20 +7,39 @@
  * same envelope with more event kinds. The private key never leaves the agent;
  * `buildInstanceMirror` returns an UNSIGNED envelope — the caller signs it with
  * `signEnvelope` (DEC-116: possession of the key is the sole authority anchor).
+ *
+ * SEND BOUNDARY: nothing local reaches the body verbatim. Every member goes
+ * through `sanitize.ts`, which ALLOWLISTS the fields that may leave the machine
+ * — so `launchContext.cwd`, the command line, the tmux coordinates, the pid,
+ * `workspace.path` and `file://` endpoint uris do not travel. This happens
+ * BEFORE signing, so the signature still covers exactly what is transmitted.
+ *
+ * The ENVELOPE is inside that boundary too, which it was not at first. `actor`
+ * is built from the SANITIZED registration by `sanitizeActorForMirror`, not from
+ * the raw registry row — see the note in `sanitize.ts`. The other envelope
+ * fields really are constants, the instance id, or the injected clock.
  */
-import { type H2AActorRegistration, type H2AEnvelope, type H2ASession, type H2ASubagentBinding } from "@sentropic/h2a";
+import { type H2AEnvelope } from "@sentropic/h2a";
 import { type LocalStore } from "../local-files/index.js";
+import { type H2AMirroredRegistration, type H2AMirroredSession, type H2AMirroredSubagentBinding } from "./sanitize.js";
 export declare const H2A_MIRROR_BODY_KIND: "mirror.instances";
+/**
+ * The mirror payload. Every member is a `H2AMirrored*` type, NOT the local
+ * record type: the send boundary narrows what leaves the machine, and the wire
+ * types are what make that structural rather than a review-time hope. See
+ * `sanitize.ts` for the field plans and for why an allowlist (not a scrub) is
+ * the only version of this that stays correct as the local types grow.
+ */
 export interface H2AInstanceMirrorBody {
     readonly kind: typeof H2A_MIRROR_BODY_KIND;
     /** Append-only registration events. P1: the sender's own registration only. */
-    readonly registrations: H2AActorRegistration[];
+    readonly registrations: H2AMirroredRegistration[];
     /**
      * P2: the sender's live sessions. The remote RE-STAMPS `heartbeatAt` with its
      * own clock on arrival (freshness is derived from the mirror beat, not the
      * local clock — no ghost/skew/resurrection). Omitted in P1-only callers.
      */
-    readonly presence?: H2ASession[];
+    readonly presence?: H2AMirroredSession[];
     /**
      * P2: monotonic per-instance sequence (the CLI uses epoch ms — increases
      * across restarts). The remote rejects a mirror with `seq <= last applied`
@@ -32,7 +51,7 @@ export interface H2AInstanceMirrorBody {
      * remote (idempotent — re-mirroring a known binding is a no-op). Only bindings
      * whose `parentInstance` the verified key owns are applied. Omitted in P1/P2.
      */
-    readonly subagents?: H2ASubagentBinding[];
+    readonly subagents?: H2AMirroredSubagentBinding[];
 }
 /**
  * Build the unsigned mirror envelope for `instance` from the local store.

package/dist/runtime/mirror/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/runtime/mirror/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACxB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAExE,eAAO,MAAM,oBAAoB,EAAG,kBAA2B,CAAC;AAEhE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,OAAO,oBAAoB,CAAC;IAC3C,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,oBAAoB,EAAE,CAAC;IAC/C;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,kBAAkB,EAAE,CAAC;CAC3C;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,WAAW,CAAC,qBAAqB,CAAC,CAiBpC"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../src/runtime/mirror/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAA6B,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7E,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAKL,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,0BAA0B,EAChC,MAAM,eAAe,CAAC;AAEvB,eAAO,MAAM,oBAAoB,EAAG,kBAA2B,CAAC;AAEhE;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,OAAO,oBAAoB,CAAC;IAC3C,+EAA+E;IAC/E,QAAQ,CAAC,aAAa,EAAE,uBAAuB,EAAE,CAAC;IAClD;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,EAAE,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,0BAA0B,EAAE,CAAC;CACnD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,WAAW,CAAC,qBAAqB,CAAC,CAiCpC"}

package/dist/runtime/mirror/build.js

@@ -7,9 +7,21 @@
  * same envelope with more event kinds. The private key never leaves the agent;
  * `buildInstanceMirror` returns an UNSIGNED envelope — the caller signs it with
  * `signEnvelope` (DEC-116: possession of the key is the sole authority anchor).
+ *
+ * SEND BOUNDARY: nothing local reaches the body verbatim. Every member goes
+ * through `sanitize.ts`, which ALLOWLISTS the fields that may leave the machine
+ * — so `launchContext.cwd`, the command line, the tmux coordinates, the pid,
+ * `workspace.path` and `file://` endpoint uris do not travel. This happens
+ * BEFORE signing, so the signature still covers exactly what is transmitted.
+ *
+ * The ENVELOPE is inside that boundary too, which it was not at first. `actor`
+ * is built from the SANITIZED registration by `sanitizeActorForMirror`, not from
+ * the raw registry row — see the note in `sanitize.ts`. The other envelope
+ * fields really are constants, the instance id, or the injected clock.
  */
 import { H2A_PROTOCOL, H2A_VERSION } from "@sentropic/h2a";
 import { listPresence } from "../local-files/index.js";
+import { sanitizeActorForMirror, sanitizePresenceForMirror, sanitizeRegistrationForMirror, sanitizeSubagentForMirror } from "./sanitize.js";
 export const H2A_MIRROR_BODY_KIND = "mirror.instances";
 /**
  * Build the unsigned mirror envelope for `instance` from the local store.
@@ -21,16 +33,34 @@ export function buildInstanceMirror(store, instance, nowMs) {
     const reg = store.findInstance(instance);
     if (!reg)
         throw new Error(`mirror: unknown local instance ${instance}`);
-    const presence = listPresence(store.paths.root, { now: nowMs }).filter((s) => s.instance === instance);
-    const subagents = store.listSubagentsOf(instance);
+    // Sanitize EVERY member at the send boundary. `sanitize*ForMirror` iterates a
+    // field plan, so a field added to the local record later cannot travel until
+    // it is explicitly classified (an omission fails the build, not a review).
+    const presence = listPresence(store.paths.root, { now: nowMs })
+        .filter((s) => s.instance === instance)
+        .map(sanitizePresenceForMirror);
+    const subagents = store.listSubagentsOf(instance).map(sanitizeSubagentForMirror);
+    // Sanitize ONCE and reuse, so the envelope's `actor` is derived from the same
+    // narrowed record the body carries. The actor used to be assembled from `reg`
+    // directly (`role: reg.roles?.[0]`), which put a source record's field on the
+    // wire outside every field plan — the envelope was the one place with no plan
+    // and no ratchet. `sanitizeActorForMirror` takes the MIRRORED registration, so
+    // the raw record is not reachable from it at all.
+    const mirroredReg = sanitizeRegistrationForMirror(reg);
     return {
         protocol: H2A_PROTOCOL,
         version: H2A_VERSION,
         id: `mirror:${instance}:${nowMs}`,
         type: "event",
-        actor: { instance, role: reg.roles?.[0] ?? "AGENTS", scope: "scope:default" },
+        actor: sanitizeActorForMirror(instance, mirroredReg),
         target: { instance },
-        body: { kind: H2A_MIRROR_BODY_KIND, registrations: [reg], presence, seq: nowMs, subagents },
+        body: {
+            kind: H2A_MIRROR_BODY_KIND,
+            registrations: [mirroredReg],
+            presence,
+            seq: nowMs,
+            subagents
+        },
         createdAt: new Date(nowMs).toISOString()
     };
 }

package/dist/runtime/mirror/build.js.map

@@ -1 +1 @@
-{"version":3,"file":"build.js","sourceRoot":"","sources":["../../../src/runtime/mirror/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,YAAY,EACZ,WAAW,EAKZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,YAAY,EAAmB,MAAM,yBAAyB,CAAC;AAExE,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAA2B,CAAC;AA0BhE;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAiB,EACjB,QAAgB,EAChB,KAAa;IAEb,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CACpE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAC/B,CAAC;IACF,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;IAClD,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,WAAW;QACpB,EAAE,EAAE,UAAU,QAAQ,IAAI,KAAK,EAAE;QACjC,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE;QAC7E,MAAM,EAAE,EAAE,QAAQ,EAAE;QACpB,IAAI,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,aAAa,EAAE,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE;QAC3F,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;KACzC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"build.js","sourceRoot":"","sources":["../../../src/runtime/mirror/build.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAE,YAAY,EAAE,WAAW,EAAoB,MAAM,gBAAgB,CAAC;AAE7E,OAAO,EAAE,YAAY,EAAmB,MAAM,yBAAyB,CAAC;AACxE,OAAO,EACL,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,yBAAyB,EAI1B,MAAM,eAAe,CAAC;AAEvB,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAA2B,CAAC;AAiChE;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CACjC,KAAiB,EACjB,QAAgB,EAChB,KAAa;IAEb,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IACxE,8EAA8E;IAC9E,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,QAAQ,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAC5D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC;SACtC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACjF,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,8EAA8E;IAC9E,+EAA+E;IAC/E,kDAAkD;IAClD,MAAM,WAAW,GAAG,6BAA6B,CAAC,GAAG,CAAC,CAAC;IACvD,OAAO;QACL,QAAQ,EAAE,YAAY;QACtB,OAAO,EAAE,WAAW;QACpB,EAAE,EAAE,UAAU,QAAQ,IAAI,KAAK,EAAE;QACjC,IAAI,EAAE,OAAO;QACb,KAAK,EAAE,sBAAsB,CAAC,QAAQ,EAAE,WAAW,CAAC;QACpD,MAAM,EAAE,EAAE,QAAQ,EAAE;QACpB,IAAI,EAAE;YACJ,IAAI,EAAE,oBAAoB;YAC1B,aAAa,EAAE,CAAC,WAAW,CAAC;YAC5B,QAAQ;YACR,GAAG,EAAE,KAAK;YACV,SAAS;SACV;QACD,SAAS,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE;KACzC,CAAC;AACJ,CAAC"}

package/dist/runtime/mirror/index.d.ts

@@ -4,6 +4,9 @@
  * P1: instances only. Core stays dep-free; this lives in @sentropic/h2a.
  */
 export { buildInstanceMirror, H2A_MIRROR_BODY_KIND, type H2AInstanceMirrorBody } from "./build.js";
+export { MIRROR_ENDPOINT_PLAN, MIRROR_INTERESTS_PLAN, MIRROR_PRESENCE_PLAN, MIRROR_REGISTRATION_PLAN, MIRROR_SUBAGENT_PLAN, MIRROR_TEST_HOOKS, MIRROR_VERSION_PLAN, MIRROR_WORKSPACE_PLAN, sanitizeActorForMirror, sanitizePresenceForMirror, sanitizeRegistrationForMirror, sanitizeSubagentForMirror, sanitizeWorkspaceRefForMirror, unclassifiedMirrorFields, type H2AMirroredEndpoint, type H2AMirroredRegistration, type H2AMirroredSession, type H2AMirroredSessionInterests, type H2AMirroredSubagentBinding, type H2AMirroredWorkspaceRef, type MirrorFieldPlan, type MirrorWithholdReason } from "./sanitize.js";
 export { acceptMirrorEnvelope, type AcceptMirrorOptions, type H2AMirrorRejection, type H2AMirrorResult } from "./accept.js";
+export { INGEST_NARROWERS, createNarrowingTally, droppedKeyPaths, narrowIngestedPresence, narrowIngestedRegistration, narrowIngestedSubagent, type MirrorBodyRecordMember, type MirrorNarrowingReport } from "./ingest.js";
 export { mirrorServerForStore, mirrorRejectionStatus, type MirrorServerForStoreOptions } from "./serve.js";
+export { createMirrorPushRunner, isPushableHttpUrl, mirrorPushGloballyDisabled, redactEndpoint, runMirrorPushDaemon, sanitizeForLog, DEFAULT_MIRROR_AUTH_FAILURE_LIMIT, DEFAULT_MIRROR_BUILD_FAILURE_LIMIT, DEFAULT_MIRROR_PUSH_INTERVAL_MS, DEFAULT_MIRROR_REJECT_LIMIT, MIN_MIRROR_PUSH_INTERVAL_MS, MIRROR_PUSH_BACKOFF_BASE_MS, MIRROR_PUSH_BACKOFF_MAX_MS, MIRROR_PUSH_BUILD_FAILED_MESSAGE, MIRROR_PUSH_INVALID_URL_MESSAGE, MIRROR_PUSH_JITTER_FRACTION, MIRROR_PUSH_OFF_ENV, MIRROR_PUSH_REENROLLMENT_MESSAGE, MIRROR_PUSH_REJECTED_MESSAGE, type MirrorEnvelopeBuilder, type MirrorEnvelopeSender, type MirrorPushCycleLog, type MirrorPushCycleResult, type MirrorPushDaemonOptions, type MirrorPushDaemonSummary, type MirrorPushOutcome, type MirrorPushPayloadShape, type MirrorPushRunnerOptions, type MirrorPushStopReason } from "./push-daemon.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/mirror/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/mirror/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,qBAAqB,EAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,2BAA2B,EACjC,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/mirror/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,qBAAqB,EAC3B,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,oBAAoB,EACpB,wBAAwB,EACxB,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,yBAAyB,EACzB,6BAA6B,EAC7B,yBAAyB,EACzB,6BAA6B,EAC7B,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,2BAA2B,EAChC,KAAK,0BAA0B,EAC/B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,oBAAoB,EAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,oBAAoB,EACpB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,eAAe,EACf,sBAAsB,EACtB,0BAA0B,EAC1B,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,KAAK,2BAA2B,EACjC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,0BAA0B,EAC1B,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,iCAAiC,EACjC,kCAAkC,EAClC,+BAA+B,EAC/B,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,0BAA0B,EAC1B,gCAAgC,EAChC,+BAA+B,EAC/B,2BAA2B,EAC3B,mBAAmB,EACnB,gCAAgC,EAChC,4BAA4B,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAC"}