@sentropic/h2a 0.85.25 → 0.87.0

package/dist/runtime/feed/descriptors.js

@@ -0,0 +1,425 @@
+/**
+ * h2a → sentropic session-exposure feed — DESCRIPTOR BUILDERS (P1, step 1).
+ *
+ * Implements Part A of the ratified contract
+ * `docs/superpowers/specs/2026-07-24-h2a-feed-contract-for-sentropic.md`
+ * (RATIFIED by the sentropic architect, 2026-07-24, with three binding
+ * conditions accepted). Sentropic owns the multi-tenant gateway, the 39-auth
+ * broker and the UI panel; this module is h2a's own surface only.
+ *
+ * Everything here is PURE: presence records + registrations in, opaque
+ * descriptors out. No I/O, no network, no auth, no push, and never a clock —
+ * `asOf` is always injected by the caller, so every derivation is
+ * deterministic and unit-testable.
+ *
+ * Governing rule of the contract, enforced structurally in this module:
+ * *if a field can't be shown safely in a browser, it doesn't belong in the
+ * feed.* No message bodies, no negotiation content, no keys or tokens, and no
+ * filesystem path — `workspaceLabel` reads `H2AWorkspaceRef.label` and NEVER
+ * `.path` or `launchContext.cwd` (Part A, "Opacity boundary", non-negotiable).
+ *
+ * NOT wired into the hosted MCP handlers yet: that is step 5 of the P1 plan and
+ * is gated on the architecture lane's per-principal root partition (Part C).
+ */
+import { H2A_ROLES, H2A_SESSION_DEFAULT_EXPIRY_MS, deriveConnectionConfidence, isSessionExpired, sanitizeDeclaredCapabilities } from "@sentropic/h2a";
+/**
+ * The single "not declared" sentinel for every string field whose source may be
+ * absent. Safe precisely because it can never collide with a real value: no
+ * workspace label, host hint or `H2A_ROLES` member is the literal `unknown`, so
+ * a consumer can always tell an undeclared field from an asserted one, and a
+ * row is NEVER dropped to hide one (a dropped row would be a false negative on
+ * presence, and would collide with the ratified "empty arrays = nothing
+ * enrolled" semantic). Architect ruling, 2026-07-25.
+ */
+const UNKNOWN = "unknown";
+/**
+ * AN EMPTY COLLECTION ON THE WIRE IS A FACTUAL CLAIM — "there is nothing" — so
+ * it must be produced by code that actually ESTABLISHED that fact. A default
+ * cannot establish a fact.
+ *
+ * That is why nothing in this module reaches the wire through `?? []`, `|| []`
+ * or an equivalent tail: a DEFAULTED empty array is indistinguishable from an
+ * errored read, a silently-empty query, and a lookup that was never performed.
+ * Every empty value below is a named constant returned from an explicit branch,
+ * and an *unread* source is a THROWN ERROR rather than an empty feed. (Amendment
+ * accepted by the architect, 2026-07-25, raised by the sentropic auth lane; it
+ * governs this feed as well as the binding resolver. Same discipline as
+ * `isoOrUnknown`/`nonEmpty` for scalars, extended to collections.)
+ */
+const NO_COUNTERPART_SOURCE_IN_P1 = Object.freeze([]);
+/** Nothing was declared: absent registration, or the field is absent/empty. */
+const NOTHING_DECLARED = Object.freeze([]);
+/**
+ * Whether ANY counterpart source is wired into this build.
+ *
+ * P1: none exists — no h2a structure records "who is this session is in contact
+ * with", and negotiations are not mirrored (contract Gaps §2; EVO-13 scopes
+ * `h2a_conflict_posture` out until they are). Typed `boolean` deliberately so
+ * both branches of {@link counterpartsOpaqueRefsFor} stay reachable to the type
+ * checker.
+ */
+const COUNTERPART_SOURCE_WIRED = false;
+/**
+ * `counterpartsOpaqueRefs` for one session, from an EXPLICIT branch.
+ *
+ * The empty list is P1's answer to a question we can actually answer: there is
+ * no source at all, so "no counterparts" is established rather than assumed.
+ * When a source IS wired, its derivation must be added ABOVE the throw — the
+ * empty case must never become reachable by falling through, because from that
+ * point on an empty list would mean "we did not look" while claiming "there are
+ * none".
+ */
+function counterpartsOpaqueRefsFor() {
+    if (!COUNTERPART_SOURCE_WIRED)
+        return NO_COUNTERPART_SOURCE_IN_P1;
+    throw new Error("h2a feed: a counterpart source is wired but no derivation is implemented — " +
+        "refusing to emit an empty counterpart list that would read as 'no counterparts'");
+}
+/**
+ * Guard a collection the caller was supposed to have READ.
+ *
+ * A missing array is not an empty one: it means the read never happened or it
+ * failed. Rendering that as an empty feed would tell the owner "you have no
+ * agents" on the strength of a broken read, so fail loudly instead. This is the
+ * one place the pure builders can enforce the distinction, since the read itself
+ * happens in the caller.
+ */
+function requireRead(value, source) {
+    if (!Array.isArray(value)) {
+        throw new Error(`h2a feed: ${source} was not read (got ${value === undefined ? "undefined" : typeof value}) — ` +
+            "an unread source must never render as an empty feed");
+    }
+    return value;
+}
+/**
+ * The instance's declared display list, from an explicit branch on whether a
+ * declaration exists at all — never a `?? []` tail.
+ */
+function declaredCapabilitiesOf(registration) {
+    if (registration === undefined)
+        return NOTHING_DECLARED;
+    if (registration.declaredCapabilities === undefined)
+        return NOTHING_DECLARED;
+    // Present: ALLOWLIST it (intersection with the closed vocabulary). An empty
+    // result here is also a fact — every value offered was outside the vocabulary.
+    return sanitizeDeclaredCapabilities(registration.declaredCapabilities);
+}
+function parseIso(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const at = Date.parse(value);
+    return Number.isNaN(at) ? undefined : at;
+}
+function heartbeatMs(session) {
+    return parseIso(session.heartbeatAt) ?? 0;
+}
+/**
+ * A present, non-empty string, or `undefined`.
+ *
+ * Used by every fallback chain in this module so `""` behaves like absence
+ * everywhere. Without it the `'unknown'` sentinel is defeated by an empty
+ * string: `h2a connect --name ""` writes `registration.name === ""`, and a `??`
+ * chain would happily emit that as the displayName.
+ */
+function nonEmpty(value) {
+    return typeof value === "string" && value.length > 0 ? value : undefined;
+}
+/**
+ * The ONLY reader of a workspace reference in this module — the whole ref
+ * reaches exactly this function, which returns `label` and nothing else.
+ * `H2AWorkspaceRef.path` and `H2ALaunchContext.cwd` are filesystem paths,
+ * excluded from the feed by design, and this single choke point is what makes
+ * that exclusion structural rather than a review-time hope.
+ *
+ * The claim is only true while it is literally the only reader: an earlier
+ * revision of this file also read `workspace?.host` directly at the instance
+ * builder, which made the comment overstate the guarantee. Do not add a second
+ * reader; extend this one.
+ */
+function labelOf(workspace) {
+    return nonEmpty(workspace?.label);
+}
+/**
+ * Validate a declared role against `H2A_ROLES` at the READ boundary.
+ *
+ * Anything unrecognized — `'SUPERADMIN'`, `''`, a non-string — becomes
+ * `'unknown'`. This is the Q1 ruling applied to the read path: never emit a
+ * value outside the declared union, no matter which writer produced the
+ * registry row.
+ */
+function sanitizeRole(role) {
+    if (typeof role !== "string")
+        return UNKNOWN;
+    return H2A_ROLES.includes(role) ? role : UNKNOWN;
+}
+/**
+ * Emit a timestamp only if it actually parses as one; otherwise the sentinel.
+ * The contract types these fields as ISO 8601, so arbitrary text must not pass
+ * through into them.
+ */
+function isoOrUnknown(value) {
+    return parseIso(value) === undefined ? UNKNOWN : value;
+}
+/** Sessions of one instance, most recent heartbeat first. */
+function sessionsOfInstance(sessions, instanceId) {
+    return sessions
+        .filter((session) => session.instance === instanceId)
+        .sort((a, b) => heartbeatMs(b) - heartbeatMs(a));
+}
+/**
+ * Session state per the contract's code block. Reuses h2a's existing
+ * primitives — the 90s keepalive window that already gates
+ * `h2a_discover_sessions`, and WP-F connection confidence. Nothing about
+ * freshness is reimplemented here.
+ */
+export function deriveSessionState(session, asOf) {
+    if (session.state === "closed" || session.state === "expired")
+        return "closed";
+    if (isSessionExpired(session, { now: asOf, expiryMs: H2A_SESSION_DEFAULT_EXPIRY_MS })) {
+        return "closed";
+    }
+    const confidence = deriveConnectionConfidence(session, { now: asOf });
+    // "idle-uncertain" and "unknown" both read as idle: the process lives but the
+    // MCP channel has carried no proven traffic.
+    return confidence === "active" ? "open" : "idle";
+}
+/**
+ * Liveness per the contract's code block. Same two primitives as
+ * {@link deriveSessionState}, plus the one distinction `state` does not need:
+ * `stale`.
+ *
+ * `stale` is the FEED PIPELINE's own freshness bleeding into a row, not an
+ * agent state. A directly-observed local session (no `mirroredAt`) is NEVER
+ * `stale` — the same-machine clock is trustworthy, so it goes straight to
+ * live/idle/closed. A replicated row is `stale` when the daemon that should
+ * keep refreshing it has gone quiet for more than 2x its push interval: at
+ * that point the numerically "fresh" `heartbeatAt`/`lastMcpActivityAt` carried
+ * in the record can no longer be trusted the way a live local read can, so the
+ * honest label is "we don't know", not "live".
+ */
+export function deriveLiveness(session, asOf, pushIntervalMs) {
+    if (session.state === "closed" || session.state === "expired")
+        return "closed";
+    if (isSessionExpired(session, { now: asOf, expiryMs: H2A_SESSION_DEFAULT_EXPIRY_MS })) {
+        return "closed";
+    }
+    // ORDERING IS LOAD-BEARING — do not move this gate below the confidence
+    // check. Because staleness is decided FIRST, any row that later returns
+    // 'idle' has already passed pipeline-freshness: an 'idle' is therefore
+    // genuine, fresh knowledge ("we looked, and it is quiet"), never absence of
+    // knowledge. That is the whole justification for ranking idle ABOVE stale in
+    // the instance roll-up (see LIVENESS_RANK). Reorder these two checks and a
+    // stale-pipeline row would surface as 'idle' — a fresh-looking claim built on
+    // timestamps nobody has refreshed — and the roll-up ordering would become
+    // wrong (stale would have to dominate instead). Pinned by the test named
+    // "the mirroredAt staleness gate strictly precedes the confidence check".
+    //
+    // Replicated/mirrored record (Part C's push-to-root path): `heartbeatAt` is
+    // re-stamped with the receiving clock on ingest, but the payload's own
+    // `lastMcpActivityAt` is a LOCAL clock value copied through verbatim — it is
+    // NOT proof of current liveness once the pipeline itself may have gone quiet.
+    if (session.mirroredAt && pushIntervalMs) {
+        const mirroredAt = parseIso(session.mirroredAt);
+        if (mirroredAt !== undefined && asOf - mirroredAt > 2 * pushIntervalMs) {
+            return "stale"; // pipeline lag, not agent state
+        }
+    }
+    const confidence = deriveConnectionConfidence(session, { now: asOf });
+    return confidence === "active" ? "live" : "idle";
+}
+/**
+ * Best-of ranking for the instance-level roll-up: live > idle > stale > closed.
+ *
+ * `idle` outranks `stale` ONLY because {@link deriveLiveness} decides staleness
+ * before it consults connection confidence, so an `idle` here is always fresh
+ * knowledge rather than absence of it. If that ordering is ever inverted, this
+ * ranking must be inverted with it — `stale` would then have to dominate.
+ */
+const LIVENESS_RANK = {
+    live: 3,
+    idle: 2,
+    // "we don't know" ranks below a KNOWN idle, and above a known-closed row.
+    stale: 1,
+    closed: 0
+};
+/**
+ * Roll several sessions' liveness up to their instance: best-of, per Part A
+ * ("Best-of across the instance's sessions"). An instance with no session at
+ * all reads `closed` — absence is not liveness.
+ */
+export function rollUpLiveness(states) {
+    let best = "closed";
+    for (const state of states) {
+        if (LIVENESS_RANK[state] > LIVENESS_RANK[best])
+            best = state;
+    }
+    return best;
+}
+/**
+ * One presence record → one `SessionDescriptor`.
+ *
+ * `lastActivityAt` prefers `lastMcpActivityAt` (WP-F: proof the MCP channel
+ * carried real traffic) and falls back to `heartbeatAt`. The fallback is
+ * advisory-only — a live process, not proven channel activity — which is why
+ * `activitySource` is baked into the descriptor rather than left to the
+ * consumer's inference (ratification condition #2).
+ */
+export function buildSessionDescriptor(session, options) {
+    const registration = options.registration;
+    const workspaceLabel = labelOf(session.workspace) ?? labelOf(registration?.workspace) ?? UNKNOWN;
+    // DEC-114 per-session mutable display name (host-native customTitle /
+    // thread_name, or `/rename`). May legitimately diverge from the owning
+    // instance's displayName — a session can be renamed independently. `nonEmpty`
+    // keeps `""` behaving as absence, so the chain cannot emit a blank title.
+    const topicOrTitle = nonEmpty(session.name) ?? nonEmpty(registration?.name) ?? workspaceLabel;
+    const mcpActivityAt = parseIso(session.lastMcpActivityAt);
+    const provenMcp = mcpActivityAt !== undefined;
+    return {
+        sessionId: session.sessionId,
+        instanceId: session.instance,
+        topicOrTitle,
+        state: deriveSessionState(session, options.asOf),
+        openedAt: isoOrUnknown(session.startedAt),
+        // When the MCP stamp is absent/unparseable we fall back to the heartbeat,
+        // which is itself validated: an unparseable heartbeat yields the sentinel
+        // rather than leaking arbitrary text into an ISO-typed field. The source is
+        // still reported as 'heartbeat' — that IS the source we consulted, and a
+        // consumer must keep treating it as advisory.
+        lastActivityAt: provenMcp
+            ? session.lastMcpActivityAt
+            : isoOrUnknown(session.heartbeatAt),
+        activitySource: provenMcp ? "mcp" : "heartbeat",
+        // From an explicit branch, never a literal default: an empty list here is
+        // the CLAIM "there are no counterparts", so it must be established.
+        counterpartsOpaqueRefs: counterpartsOpaqueRefsFor()
+    };
+}
+/**
+ * One instance (+ its sessions) → one `InstanceDescriptor`.
+ *
+ * `displayName` order per Part A: the registration's DEC-114 mutable name,
+ * then the most recent LIVE session's host-native name (WP-6), then the
+ * workspace label. `lastSeen` is the max heartbeat across the instance's
+ * sessions. `host` comes from the most recent session's host hint.
+ *
+ * Every chain below matches the contract's declared mapping exactly and adds no
+ * undeclared step: earlier revisions scanned ALL sessions for a label/host and
+ * fell back to `workspace.host` and to `registration.createdAt`, none of which
+ * the spec declares. Code and contract must not disagree, so those were removed
+ * rather than quietly kept.
+ */
+export function buildInstanceDescriptor(instanceId, options) {
+    const registration = options.registration;
+    const ordered = [...options.sessions].sort((a, b) => heartbeatMs(b) - heartbeatMs(a));
+    const mostRecent = ordered[0];
+    // Declared mapping: the session's workspace label (per-session authoritative,
+    // taken from the most recent session), else the registration's, else nothing.
+    const workspaceLabel = labelOf(mostRecent?.workspace) ?? labelOf(registration?.workspace) ?? UNKNOWN;
+    const liveSessionName = ordered
+        .filter((session) => deriveSessionState(session, options.asOf) !== "closed")
+        .map((session) => nonEmpty(session.name))
+        .find((name) => name !== undefined);
+    const displayName = nonEmpty(registration?.name) ?? liveSessionName ?? workspaceLabel;
+    // Declared mapping: the most recent session's host hint, else nothing. A
+    // workspace ref is NOT consulted here — that would be a second reader of the
+    // ref and would break `labelOf`'s choke-point guarantee.
+    const host = nonEmpty(mostRecent?.host) ?? UNKNOWN;
+    // Strictly max(heartbeatAt). No mint-time fallback: `createdAt` is not a
+    // sighting, and presenting it as "last seen" would be an unearned freshness
+    // claim.
+    const lastSeenMs = ordered.reduce((max, session) => Math.max(max, heartbeatMs(session)), 0);
+    const lastSeen = lastSeenMs > 0 ? new Date(lastSeenMs).toISOString() : UNKNOWN;
+    const liveness = rollUpLiveness(ordered.map((session) => deriveLiveness(session, options.asOf, options.pushIntervalMs)));
+    return {
+        instanceId,
+        displayName,
+        host,
+        // Validated against H2A_ROLES on read, and never synthesized for a missing
+        // one (see the field's doc). Whoever wrote the registry, the wire union holds.
+        role: sanitizeRole(registration?.roles?.[0]),
+        workspaceLabel,
+        // Declared DISPLAY list, read from `declaredCapabilities` and ALLOWLISTED
+        // against the closed vocabulary — an intersection, never a denylist. The
+        // authority-bearing `capabilities` is deliberately NOT read here: it is the
+        // subagent ceiling and the attestation right, and it must never surface in a
+        // browser panel nor be conflated with a declaration.
+        declaredCapabilities: declaredCapabilitiesOf(registration),
+        lastSeen,
+        liveness
+    };
+}
+/** Every instance id mentioned by a presence record or a registration. */
+function instanceIds(input) {
+    const ids = [];
+    const seen = new Set();
+    const push = (id) => {
+        if (typeof id !== "string" || id.length === 0 || seen.has(id))
+            return;
+        seen.add(id);
+        ids.push(id);
+    };
+    for (const registration of requireRead(input.registrations, "registrations")) {
+        push(registration.instance);
+    }
+    for (const session of input.sessions)
+        push(session.instance);
+    return ids;
+}
+function registrationIndex(registrations) {
+    const index = new Map();
+    for (const registration of registrations) {
+        if (!index.has(registration.instance))
+            index.set(registration.instance, registration);
+    }
+    return index;
+}
+/**
+ * Presence + registry → `InstanceDescriptor[]`, **ordered by `lastSeen`
+ * descending** (most recently seen agent first). The order is part of the
+ * behaviour, not an accident of input order, and is pinned by a test — a
+ * documented behaviour that can be deleted with the suite still green is not a
+ * behaviour. Rows whose `lastSeen` is the sentinel sort last.
+ */
+export function buildInstanceDescriptors(input) {
+    // Both sources must have been READ. An empty result below is then a fact.
+    requireRead(input.sessions, "sessions");
+    const index = registrationIndex(requireRead(input.registrations, "registrations"));
+    return instanceIds(input)
+        .map((instanceId) => buildInstanceDescriptor(instanceId, {
+        asOf: input.asOf,
+        sessions: sessionsOfInstance(input.sessions, instanceId),
+        registration: index.get(instanceId),
+        pushIntervalMs: input.pushIntervalMs
+    }))
+        .sort((a, b) => (parseIso(b.lastSeen) ?? 0) - (parseIso(a.lastSeen) ?? 0));
+}
+/**
+ * Presence + registry → `SessionDescriptor[]`, **ordered by `lastActivityAt`
+ * descending** (most recently active session first). Pinned by a test, for the
+ * same reason as {@link buildInstanceDescriptors}.
+ */
+export function buildSessionDescriptors(input) {
+    const sessions = requireRead(input.sessions, "sessions");
+    const index = registrationIndex(requireRead(input.registrations, "registrations"));
+    return sessions
+        .map((session) => buildSessionDescriptor(session, {
+        asOf: input.asOf,
+        registration: index.get(session.instance)
+    }))
+        .sort((a, b) => (parseIso(b.lastActivityAt) ?? 0) - (parseIso(a.lastActivityAt) ?? 0));
+}
+/**
+ * Presence + registry → the whole `H2AFeedResponse`.
+ *
+ * The caller decides WHICH sessions and registrations to hand in — this
+ * function never widens that set, and (per P1) principal scoping happens
+ * server-side before the call, never here.
+ */
+export function buildFeedResponse(input) {
+    return {
+        asOf: new Date(input.asOf).toISOString(),
+        instances: buildInstanceDescriptors(input),
+        sessions: buildSessionDescriptors(input)
+    };
+}
+//# sourceMappingURL=descriptors.js.map

package/dist/runtime/feed/descriptors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"descriptors.js","sourceRoot":"","sources":["../../../src/runtime/feed/descriptors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,EACL,SAAS,EACT,6BAA6B,EAC7B,0BAA0B,EAC1B,gBAAgB,EAChB,4BAA4B,EAI7B,MAAM,gBAAgB,CAAC;AAmIxB;;;;;;;;GAQG;AACH,MAAM,OAAO,GAAG,SAAS,CAAC;AAE1B;;;;;;;;;;;;;GAaG;AACH,MAAM,2BAA2B,GAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEzE,+EAA+E;AAC/E,MAAM,gBAAgB,GAAsB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAE9D;;;;;;;;GAQG;AACH,MAAM,wBAAwB,GAAY,KAAK,CAAC;AAEhD;;;;;;;;;GASG;AACH,SAAS,yBAAyB;IAChC,IAAI,CAAC,wBAAwB;QAAE,OAAO,2BAA2B,CAAC;IAClE,MAAM,IAAI,KAAK,CACb,6EAA6E;QAC3E,iFAAiF,CACpF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,WAAW,CAAI,KAA+B,EAAE,MAAc;IACrE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CACb,aAAa,MAAM,sBAAsB,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM;YAC7F,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAC7B,YAA8C;IAE9C,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IACxD,IAAI,YAAY,CAAC,oBAAoB,KAAK,SAAS;QAAE,OAAO,gBAAgB,CAAC;IAC7E,4EAA4E;IAC5E,+EAA+E;IAC/E,OAAO,4BAA4B,CAAC,YAAY,CAAC,oBAAoB,CAAC,CAAC;AACzE,CAAC;AA2BD,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,WAAW,CAAC,OAAmB;IACtC,OAAO,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,QAAQ,CAAC,KAAyB;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAS,OAAO,CAAC,SAAkD;IACjE,OAAO,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;AACpC,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAC7C,OAAQ,SAA+B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAgB,CAAC,CAAC,CAAC,OAAO,CAAC;AACvF,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,KAAyB;IAC7C,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAE,KAAgB,CAAC;AACrE,CAAC;AAED,6DAA6D;AAC7D,SAAS,kBAAkB,CACzB,QAA+B,EAC/B,UAAkB;IAElB,OAAO,QAAQ;SACZ,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,UAAU,CAAC;SACpD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAAmB,EACnB,IAAY;IAEZ,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC/E,IAAI,gBAAgB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,6BAA6B,EAAE,CAAC,EAAE,CAAC;QACtF,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,UAAU,GAAG,0BAA0B,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,8EAA8E;IAC9E,6CAA6C;IAC7C,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAmB,EACnB,IAAY,EACZ,cAAuB;IAEvB,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC/E,IAAI,gBAAgB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,6BAA6B,EAAE,CAAC,EAAE,CAAC;QACtF,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,4EAA4E;IAC5E,6EAA6E;IAC7E,2EAA2E;IAC3E,8EAA8E;IAC9E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,EAAE;IACF,4EAA4E;IAC5E,uEAAuE;IACvE,6EAA6E;IAC7E,8EAA8E;IAC9E,IAAI,OAAO,CAAC,UAAU,IAAI,cAAc,EAAE,CAAC;QACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,UAAU,KAAK,SAAS,IAAI,IAAI,GAAG,UAAU,GAAG,CAAC,GAAG,cAAc,EAAE,CAAC;YACvE,OAAO,OAAO,CAAC,CAAC,gCAAgC;QAClD,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,0BAA0B,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,aAAa,GAAqC;IACtD,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;IACP,0EAA0E;IAC1E,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;CACV,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAmC;IAChE,IAAI,IAAI,GAAqB,QAAQ,CAAC;IACtC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,aAAa,CAAC,KAAK,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC;YAAE,IAAI,GAAG,KAAK,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAQD;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAmB,EACnB,OAAsC;IAEtC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,cAAc,GAClB,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC;IAC5E,sEAAsE;IACtE,uEAAuE;IACvE,8EAA8E;IAC9E,0EAA0E;IAC1E,MAAM,YAAY,GAChB,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,cAAc,CAAC;IAE3E,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,aAAa,KAAK,SAAS,CAAC;IAE9C,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,UAAU,EAAE,OAAO,CAAC,QAAQ;QAC5B,YAAY;QACZ,KAAK,EAAE,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC;QAChD,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC;QACzC,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,yEAAyE;QACzE,8CAA8C;QAC9C,cAAc,EAAE,SAAS;YACvB,CAAC,CAAE,OAAO,CAAC,iBAA4B;YACvC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,WAAW,CAAC;QACrC,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,WAAW;QAC/C,0EAA0E;QAC1E,oEAAoE;QACpE,sBAAsB,EAAE,yBAAyB,EAAE;KACpD,CAAC;AACJ,CAAC;AAUD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CACrC,UAAkB,EAClB,OAAuC;IAEvC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC1C,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACtF,MAAM,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAE9B,8EAA8E;IAC9E,8EAA8E;IAC9E,MAAM,cAAc,GAClB,OAAO,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC,YAAY,EAAE,SAAS,CAAC,IAAI,OAAO,CAAC;IAEhF,MAAM,eAAe,GAAG,OAAO;SAC5B,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC;SAC3E,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SACxC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,IAAI,eAAe,IAAI,cAAc,CAAC;IAEtF,yEAAyE;IACzE,6EAA6E;IAC7E,yDAAyD;IACzD,MAAM,IAAI,GAAG,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,OAAO,CAAC;IAEnD,yEAAyE;IACzE,4EAA4E;IAC5E,SAAS;IACT,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5F,MAAM,QAAQ,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;IAE/E,MAAM,QAAQ,GAAG,cAAc,CAC7B,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CACxF,CAAC;IAEF,OAAO;QACL,UAAU;QACV,WAAW;QACX,IAAI;QACJ,2EAA2E;QAC3E,+EAA+E;QAC/E,IAAI,EAAE,YAAY,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,cAAc;QACd,0EAA0E;QAC1E,yEAAyE;QACzE,4EAA4E;QAC5E,6EAA6E;QAC7E,qDAAqD;QACrD,oBAAoB,EAAE,sBAAsB,CAAC,YAAY,CAAC;QAC1D,QAAQ;QACR,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,WAAW,CAAC,KAAqB;IACxC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,EAAsB,EAAQ,EAAE;QAC5C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO;QACtE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC,CAAC;IACF,KAAK,MAAM,YAAY,IAAI,WAAW,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,CAAC;QAC7E,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ;QAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CACxB,aAA8C;IAE9C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAC;IACtD,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAqB;IAC5D,0EAA0E;IAC1E,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;IACnF,OAAO,WAAW,CAAC,KAAK,CAAC;SACtB,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAClB,uBAAuB,CAAC,UAAU,EAAE;QAClC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,QAAQ,EAAE,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC;QACxD,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QACnC,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC,CACH;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAqB;IAC3D,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,iBAAiB,CAAC,WAAW,CAAC,KAAK,CAAC,aAAa,EAAE,eAAe,CAAC,CAAC,CAAC;IACnF,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACf,sBAAsB,CAAC,OAAO,EAAE;QAC9B,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;KAC1C,CAAC,CACH;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAqB;IACrD,OAAO;QACL,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;QACxC,SAAS,EAAE,wBAAwB,CAAC,KAAK,CAAC;QAC1C,QAAQ,EAAE,uBAAuB,CAAC,KAAK,CAAC;KACzC,CAAC;AACJ,CAAC"}

package/dist/runtime/feed/index.d.ts

@@ -0,0 +1,12 @@
+/**
+ * h2a → sentropic session-exposure feed (P1). Read-only, principal-scoped
+ * presence/session descriptors. Contract:
+ * `docs/superpowers/specs/2026-07-24-h2a-feed-contract-for-sentropic.md`
+ * (ratified 2026-07-24).
+ *
+ * Step 1 = these pure builders only. No HTTP route, no auth, no binding store,
+ * no push daemon, no gateway, no UI — each of those is a separate, separately
+ * gated step of the plan.
+ */
+export { buildFeedResponse, buildInstanceDescriptor, buildInstanceDescriptors, buildSessionDescriptor, buildSessionDescriptors, deriveLiveness, deriveSessionState, rollUpLiveness, type BuildFeedInput, type BuildInstanceDescriptorOptions, type BuildSessionDescriptorOptions, type H2AFeedResponse, type H2ALivenessState, type InstanceDescriptor, type SessionDescriptor } from "./descriptors.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/feed/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/feed/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,eAAe,EACpB,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,iBAAiB,EACvB,MAAM,kBAAkB,CAAC"}

package/dist/runtime/feed/index.js

@@ -0,0 +1,12 @@
+/**
+ * h2a → sentropic session-exposure feed (P1). Read-only, principal-scoped
+ * presence/session descriptors. Contract:
+ * `docs/superpowers/specs/2026-07-24-h2a-feed-contract-for-sentropic.md`
+ * (ratified 2026-07-24).
+ *
+ * Step 1 = these pure builders only. No HTTP route, no auth, no binding store,
+ * no push daemon, no gateway, no UI — each of those is a separate, separately
+ * gated step of the plan.
+ */
+export { buildFeedResponse, buildInstanceDescriptor, buildInstanceDescriptors, buildSessionDescriptor, buildSessionDescriptors, deriveLiveness, deriveSessionState, rollUpLiveness } from "./descriptors.js";
+//# sourceMappingURL=index.js.map

package/dist/runtime/feed/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/feed/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,iBAAiB,EACjB,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,cAAc,EACd,kBAAkB,EAClB,cAAc,EAQf,MAAM,kBAAkB,CAAC"}

package/dist/runtime/identity/index.d.ts

@@ -1,11 +1,11 @@
 export { resolveProviderSession } from "./resolver.js";
 export type { ProviderSession, ProviderSessionReaders, ProviderSessionSource, ResolveProviderSessionInput } from "./resolver.js";
-export { defaultProviderSessionReaders, readHostSessionName } from "./readers.js";
+export { CLAUDE_TITLE_TAIL_BYTES, CODEX_INDEX_TAIL_BYTES, MAX_DISPLAY_NAME_CHARS, createHostSessionNameRefresher, defaultProviderSessionReaders, readHostSessionName } from "./readers.js";
 export type { HostNameReaders } from "./readers.js";
 export { listBindings, findBinding, verifyReclaimProof, reclaimOrMint } from "./bindings.js";
 export type { H2AIdentityBinding, IdentityBindingKey, ReclaimOrMintDeps, ReclaimOrMintResult } from "./bindings.js";
 export { mergeInboxDedup, decideLegacyAdoption, listIdentityAliases, legacyAliasAlreadyAdopted, recordIdentityAlias } from "./migration.js";
 export type { H2AIdentityAlias, LegacyAdoptionInput, LegacyAdoptionDecision } from "./migration.js";
-export { resolveLiveIdentity } from "./live.js";
-export type { ResolveLiveIdentityInput, ResolvedLiveIdentity } from "./live.js";
+export { resolveLiveIdentity, sanitizeDeclaredCapabilities, H2A_CLI_DECLARED_CAPABILITIES, H2A_DECLARED_CAPABILITIES } from "./live.js";
+export type { H2ADeclaredCapability, ResolveLiveIdentityInput, ResolvedLiveIdentity } from "./live.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/runtime/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,YAAY,EACV,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAClF,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,aAAa,EACd,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AACvD,YAAY,EACV,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,6BAA6B,EAC7B,mBAAmB,EACpB,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,aAAa,EACd,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gBAAgB,EAChB,mBAAmB,EACnB,sBAAsB,EACvB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,EAC1B,MAAM,WAAW,CAAC;AACnB,YAAY,EACV,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,EACrB,MAAM,WAAW,CAAC"}

package/dist/runtime/identity/index.js

@@ -1,6 +1,6 @@
 export { resolveProviderSession } from "./resolver.js";
-export { defaultProviderSessionReaders, readHostSessionName } from "./readers.js";
+export { CLAUDE_TITLE_TAIL_BYTES, CODEX_INDEX_TAIL_BYTES, MAX_DISPLAY_NAME_CHARS, createHostSessionNameRefresher, defaultProviderSessionReaders, readHostSessionName } from "./readers.js";
 export { listBindings, findBinding, verifyReclaimProof, reclaimOrMint } from "./bindings.js";
 export { mergeInboxDedup, decideLegacyAdoption, listIdentityAliases, legacyAliasAlreadyAdopted, recordIdentityAlias } from "./migration.js";
-export { resolveLiveIdentity } from "./live.js";
+export { resolveLiveIdentity, sanitizeDeclaredCapabilities, H2A_CLI_DECLARED_CAPABILITIES, H2A_DECLARED_CAPABILITIES } from "./live.js";
 //# sourceMappingURL=index.js.map

package/dist/runtime/identity/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAOvD,OAAO,EAAE,6BAA6B,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAElF,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,aAAa,EACd,MAAM,eAAe,CAAC;AAOvB,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAOvD,OAAO,EACL,uBAAuB,EACvB,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,6BAA6B,EAC7B,mBAAmB,EACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,aAAa,EACd,MAAM,eAAe,CAAC;AAOvB,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,yBAAyB,EACzB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AAMxB,OAAO,EACL,mBAAmB,EACnB,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,EAC1B,MAAM,WAAW,CAAC"}

package/dist/runtime/identity/live.d.ts

@@ -1,5 +1,47 @@
 import { type H2AWorkspaceRef } from "@sentropic/h2a";
 import { type ProviderSessionReaders } from "./resolver.js";
+/**
+ * The CLOSED vocabulary an agent may DECLARE at registration.
+ *
+ * DISPLAY ONLY, and NON-AUTHORITATIVE. Self-reported by the agent, and it MUST
+ * NEVER be an input to any authorization decision, anywhere — not in h2a, not in
+ * a gateway, not in a UI. Authorization is the principal binding plus
+ * server-side scoping; a capability string proves nothing. (Binding condition #3
+ * of the session-exposure feed contract ratified 2026-07-24,
+ * docs/superpowers/specs/2026-07-24-h2a-feed-contract-for-sentropic.md.)
+ *
+ * These values are written to `H2AActorRegistration.declaredCapabilities` and
+ * NEVER to `capabilities` — the latter is the authority-bearing rights list read
+ * by the subagent ceiling (`subagents.ts` `capabilities-exceed-parent`) and by
+ * `canAttestComprehension`. Writing display vocabulary there would widen a
+ * privilege ceiling as a side effect of a display feature, which is exactly the
+ * defect the architect's 2026-07-25 split ruling removes. The two fields must
+ * never be merged.
+ *
+ * Note why "no vocabulary member may ever equal a right string" is NOT a
+ * sufficient guard, and is not relied upon here: the subagent ceiling is a
+ * SUBSET check over the whole field, not a lookup of specific right strings — so
+ * that invariant holds for these three values and the ceiling still widens.
+ * Separation of fields is the mitigation; string choice is not.
+ *
+ * Closed on purpose: an unknown string is DROPPED rather than stored, so the
+ * set a consumer can ever render stays enumerable and reviewable.
+ */
+export declare const H2A_DECLARED_CAPABILITIES: readonly ["h2a.session", "h2a.mcp", "h2a.subagents"];
+export type H2ADeclaredCapability = (typeof H2A_DECLARED_CAPABILITIES)[number];
+/**
+ * What the CLI's own registration path declares. Narrower than the vocabulary
+ * on purpose: these two are true of every h2a CLI agent by construction, while
+ * `h2a.subagents` is host-specific and not knowable at this call site — an
+ * over-claim would be a lie in a browser panel, so it is left to a host plugin
+ * that actually knows.
+ */
+export declare const H2A_CLI_DECLARED_CAPABILITIES: readonly H2ADeclaredCapability[];
+/**
+ * Keep only members of the closed vocabulary, de-duplicated and in vocabulary
+ * order, so what lands in the registry is never caller-shaped free text.
+ */
+export declare function sanitizeDeclaredCapabilities(capabilities: readonly string[] | undefined): H2ADeclaredCapability[];
 export interface ResolveLiveIdentityInput {
     readonly root: string;
     readonly host: string;
@@ -7,6 +49,14 @@ export interface ResolveLiveIdentityInput {
     readonly explicitInstance?: string;
     readonly name?: string;
     readonly scopes?: readonly string[];
+    /**
+     * Capabilities the agent DECLARES at mint (display-only, non-authoritative —
+     * see {@link H2A_DECLARED_CAPABILITIES}). Filtered against the closed
+     * vocabulary; anything else is dropped. Written to the registration's
+     * `declaredCapabilities`, never to the authority-bearing `capabilities`.
+     * Absent → the field is omitted.
+     */
+    readonly declaredCapabilities?: readonly string[];
     readonly readers?: ProviderSessionReaders;
     readonly now?: () => number;
 }
@@ -18,9 +68,27 @@ export interface ResolvedLiveIdentity {
     readonly legacyInstance?: string;
     readonly action: "override" | "reclaim" | "mint";
     readonly providerSessionSource?: string;
+    /**
+     * The host-native provider session id actually read (Claude
+     * CLAUDE_CODE_SESSION_ID / Codex thread id), when one was readable. Exposed so
+     * the caller can build a heartbeat display-name refresher against the same
+     * conversation this identity resolved from (spec
+     * 2026-07-25-h2a-lane-addressing §D1b). Absent when no provider session was
+     * readable — do NOT substitute the synthetic `fallback:` id here, it names no
+     * transcript.
+     */
+    readonly providerSessionId?: string;
     readonly privateKeyPath?: string;
     readonly publicKeyPath?: string;
     readonly migrationNotice?: string;
 }
+/**
+ * Short, stable, NON-SECRET fingerprint of a public key: the first 16 hex chars
+ * of its sha256. Used by the reclaim proof's nonce and by the enrollment
+ * ceremony's owner-facing summary, so the owner can eyeball WHICH key was
+ * proved without ever reading a PEM. It is a label, never an authority: nothing
+ * may accept a fingerprint where it should verify a signature.
+ */
+export declare function publicKeyFingerprint(publicKeyPem: string): string;
 export declare function resolveLiveIdentity(input: ResolveLiveIdentityInput): ResolvedLiveIdentity;
 //# sourceMappingURL=live.d.ts.map

package/dist/runtime/identity/live.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../../../src/runtime/identity/live.ts"],"names":[],"mappings":"AAYA,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAUxB,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAGpF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;IACjD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAmJD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,oBAAoB,CA8GzF"}
+{"version":3,"file":"live.d.ts","sourceRoot":"","sources":["../../../src/runtime/identity/live.ts"],"names":[],"mappings":"AAYA,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,gBAAgB,CAAC;AAUxB,OAAO,EAA0B,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAGpF;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,eAAO,MAAM,yBAAyB,sDAO5B,CAAC;AAEX,MAAM,MAAM,qBAAqB,GAAG,CAAC,OAAO,yBAAyB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/E;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,EAAE,SAAS,qBAAqB,EAGzE,CAAC;AAEF;;;GAGG;AACH,wBAAgB,4BAA4B,CAC1C,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,GAC1C,qBAAqB,EAAE,CAGzB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,MAAM,CAAC;IACjD,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;OAQG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAsCD;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEjE;AAoHD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,oBAAoB,CAqHzF"}