@songsid/agend 2.3.5-alpha.4 → 2.3.5-alpha.5

package/dist/hub/execution/store.d.ts

@@ -0,0 +1,61 @@
+/** No file opening/migration on import. Composition supplies a private DB, independent floor and transactional audit. */
+import type Database from "better-sqlite3";
+import { z } from "zod";
+import { type HubRestrictedOutbox } from "../member-journal.js";
+import type { HubVersionFloor } from "../store.js";
+import type { HubAuthorizationRequest, HubQuestion } from "../types.js";
+declare const contextSchema: z.ZodObject<{
+    id: z.ZodString;
+    source: z.ZodString;
+    messageId: z.ZodString;
+    exposureId: z.ZodString;
+    bindingDigest: z.ZodString;
+    state: z.ZodEnum<{
+        finished: "finished";
+        held: "held";
+        prepared: "prepared";
+        running: "running";
+    }>;
+    bootId: z.ZodString;
+    agent: z.ZodString;
+}, z.core.$strict>;
+export type ExecutionContextRecord = z.infer<typeof contextSchema>;
+export interface ExecutionAuditEvent {
+    kind: string;
+    contextId?: string;
+    messageId?: string;
+    operationId?: string;
+    reason?: string;
+}
+export interface ExecutionStoreOptions {
+    floor: HubVersionFloor;
+    /** Synchronous insert in this exact transaction. Throw on required audit failure. */
+    audit(event: ExecutionAuditEvent, db: Database.Database): void;
+}
+export declare function migrateHubExecution(db: Database.Database): void;
+export declare class HubExecutionStore {
+    readonly database: Database.Database;
+    private readonly options;
+    private failed;
+    constructor(database: Database.Database, options: ExecutionStoreOptions);
+    initialize(): void;
+    check(): number;
+    private audit;
+    private change;
+    outbox(binding: (question: HubQuestion) => string): HubRestrictedOutbox;
+    queued(source: string): {
+        id: string;
+        digest: string;
+        binding_digest: string;
+    } | null;
+    claim(record: ExecutionContextRecord): void;
+    context(id: string): ExecutionContextRecord;
+    contexts(): ExecutionContextRecord[];
+    note(event: ExecutionAuditEvent): void;
+    state(id: string, state: ExecutionContextRecord["state"]): void;
+    reserve(contextId: string, request: HubAuthorizationRequest): void;
+    consume(contextId: string, request: HubAuthorizationRequest): void;
+    attention(contextId: string, id: string, value: unknown): void;
+    attentionItems(): unknown[];
+}
+export {};

package/dist/hub/execution/store.js

@@ -0,0 +1,182 @@
+import { randomUUID } from "node:crypto";
+import { z } from "zod";
+import { operationDigest } from "../identity.js";
+import { questionContextDigest } from "../member-journal.js";
+import { authorizationSchema } from "../protocol.js";
+import { epoch, hash, identifier, uuid, validated, parseStrictJson, HubProtocolError } from "../validation.js";
+const contextSchema = z.strictObject({ id: uuid, source: z.string().max(128), messageId: uuid, exposureId: uuid,
+    bindingDigest: hash, state: z.enum(["prepared", "running", "held", "finished"]), bootId: uuid, agent: identifier });
+export function migrateHubExecution(db) {
+    db.exec(`CREATE TABLE IF NOT EXISTS hub_execution_meta(singleton INTEGER PRIMARY KEY CHECK(singleton=1), revision INTEGER NOT NULL);
+    CREATE TABLE IF NOT EXISTS hub_execution_queue(source TEXT PRIMARY KEY, id TEXT UNIQUE NOT NULL, digest TEXT NOT NULL, binding_digest TEXT NOT NULL);
+    CREATE TABLE IF NOT EXISTS hub_execution_contexts(id TEXT PRIMARY KEY, source TEXT UNIQUE NOT NULL, value TEXT NOT NULL);
+    CREATE TABLE IF NOT EXISTS hub_execution_operations(id TEXT PRIMARY KEY, context_id TEXT NOT NULL, request TEXT NOT NULL, state TEXT NOT NULL);
+    CREATE TABLE IF NOT EXISTS hub_execution_attention(id TEXT PRIMARY KEY, context_id TEXT NOT NULL, value TEXT NOT NULL);`);
+}
+export class HubExecutionStore {
+    database;
+    options;
+    failed = false;
+    constructor(database, options) {
+        this.database = database;
+        this.options = options;
+    }
+    initialize() {
+        if (this.options.floor.read() !== 0 || this.database.prepare("SELECT 1 FROM hub_execution_meta").get())
+            throw new HubProtocolError("uncertain");
+        this.database.prepare("INSERT INTO hub_execution_meta VALUES(1,0)").run();
+    }
+    check() {
+        if (this.failed)
+            throw new HubProtocolError("uncertain");
+        try {
+            const row = this.database.prepare("SELECT revision FROM hub_execution_meta WHERE singleton=1").get();
+            if (!row || validated(epoch, row.revision) !== this.options.floor.read())
+                throw Error();
+            return row.revision;
+        }
+        catch {
+            this.failed = true;
+            throw new HubProtocolError("uncertain");
+        }
+    }
+    audit(event) {
+        try {
+            // A void callback type also accepts async functions. Required audit must finish in THIS transaction.
+            const result = this.options.audit(event, this.database);
+            if (result && typeof result.then === "function") {
+                void Promise.resolve(result).catch(() => { });
+                throw new HubProtocolError("uncertain");
+            }
+        }
+        catch (error) {
+            this.failed = true;
+            throw error;
+        }
+    }
+    change(event, work) {
+        let writing = false;
+        try {
+            return this.database.transaction(() => {
+                const revision = this.check(), value = work();
+                writing = true;
+                this.audit(event);
+                this.options.floor.raise(revision + 1);
+                this.database.prepare("UPDATE hub_execution_meta SET revision=? WHERE singleton=1").run(revision + 1);
+                return value;
+            }).immediate();
+        }
+        catch (error) {
+            if (writing)
+                this.failed = true;
+            throw error;
+        }
+    }
+    outbox(binding) {
+        const checkSource = (q, source) => {
+            if (source !== `hub:${q.identity.issuer}:${q.identity.messageId}`)
+                throw new HubProtocolError("denied");
+        };
+        return {
+            insert: (db, q, source) => {
+                // The S1 journal's floor/audit transaction owns this insertion. Never advance another floor inside it.
+                this.check();
+                checkSource(q, source);
+                if (db !== this.database || !db.inTransaction)
+                    throw new HubProtocolError("denied");
+                if (db.prepare("SELECT COUNT(*) AS n FROM hub_execution_queue").get().n >= 4096)
+                    throw new HubProtocolError("backpressure");
+                const digest = validated(hash, binding(q)), id = randomUUID();
+                this.audit({ kind: "question.queued", messageId: q.identity.messageId });
+                db.prepare("INSERT INTO hub_execution_queue VALUES(?,?,?,?)").run(source, id, questionContextDigest(q), digest);
+                return id;
+            },
+            lookup: (db, q, source) => {
+                this.check();
+                checkSource(q, source);
+                if (db !== this.database)
+                    throw new HubProtocolError("denied");
+                const row = this.queued(source);
+                if (row && row.digest !== questionContextDigest(q))
+                    throw new HubProtocolError("conflict");
+                return row?.id ?? null;
+            },
+        };
+    }
+    queued(source) {
+        this.check();
+        const row = this.database.prepare("SELECT id,digest,binding_digest FROM hub_execution_queue WHERE source=?").get(source);
+        return row ? validated(z.strictObject({ id: uuid, digest: hash, binding_digest: hash }), row) : null;
+    }
+    claim(record) {
+        validated(contextSchema, record);
+        this.change({ kind: "context.prepared", contextId: record.id, messageId: record.messageId }, () => {
+            if (this.database.prepare("SELECT COUNT(*) AS n FROM hub_execution_contexts").get().n >= 4096)
+                throw new HubProtocolError("backpressure");
+            this.database.prepare("INSERT INTO hub_execution_contexts VALUES(?,?,?)").run(record.id, record.source, JSON.stringify(record));
+        });
+    }
+    context(id) {
+        this.check();
+        validated(uuid, id);
+        const row = this.database.prepare("SELECT value FROM hub_execution_contexts WHERE id=?").get(id);
+        if (!row)
+            throw new HubProtocolError("denied");
+        const value = validated(contextSchema, parseStrictJson(row.value));
+        if (value.id !== id)
+            throw new HubProtocolError("uncertain");
+        return value;
+    }
+    contexts() {
+        this.check();
+        return this.database.prepare("SELECT id FROM hub_execution_contexts LIMIT 4096").all().map(r => this.context(r.id));
+    }
+    note(event) { this.change(event, () => { }); }
+    state(id, state) {
+        this.change({ kind: `context.${state}`, contextId: id }, () => {
+            const row = this.context(id);
+            if (row.state === "held" && state !== "held" || row.state === "finished" && state !== "held")
+                throw new HubProtocolError("stale");
+            row.state = state;
+            this.database.prepare("UPDATE hub_execution_contexts SET value=? WHERE id=?").run(JSON.stringify(row), id);
+        });
+    }
+    reserve(contextId, request) {
+        const r = validated(authorizationSchema, request);
+        this.change({ kind: "operation.reserved", contextId, messageId: r.messageId, operationId: r.operationId }, () => {
+            const row = this.context(contextId);
+            if (row.messageId !== r.messageId || !["prepared", "running"].includes(row.state))
+                throw new HubProtocolError("stale");
+            if (this.database.prepare("SELECT COUNT(*) AS n FROM hub_execution_operations WHERE context_id=?").get(contextId).n >= 128)
+                throw new HubProtocolError("backpressure");
+            this.database.prepare("INSERT INTO hub_execution_operations VALUES(?,?,?,?)").run(r.operationId, contextId, JSON.stringify(r), "reserved");
+        });
+    }
+    consume(contextId, request) {
+        this.change({ kind: "operation.consumed", contextId, operationId: request.operationId }, () => {
+            const row = this.database.prepare("SELECT context_id,request,state FROM hub_execution_operations WHERE id=?").get(request.operationId);
+            if (!row || row.context_id !== contextId || row.state !== "reserved" || operationDigest(validated(authorizationSchema, parseStrictJson(row.request))) !== operationDigest(request))
+                throw new HubProtocolError("uncertain");
+            this.database.prepare("UPDATE hub_execution_operations SET state='consumed' WHERE id=?").run(request.operationId);
+        });
+    }
+    attention(contextId, id, value) {
+        this.change({ kind: "owner.attention", contextId }, () => {
+            const existing = this.database.prepare("SELECT context_id,value FROM hub_execution_attention WHERE id=?").get(id);
+            const bytes = JSON.stringify(value);
+            if (existing && (existing.context_id !== contextId || existing.value !== bytes))
+                throw new HubProtocolError("conflict");
+            if (!existing) {
+                if (this.database.prepare("SELECT COUNT(*) AS n FROM hub_execution_attention").get().n >= 256
+                    || this.database.prepare("SELECT COUNT(*) AS n FROM hub_execution_attention WHERE context_id=?").get(contextId).n >= 32)
+                    throw new HubProtocolError("backpressure");
+                this.database.prepare("INSERT INTO hub_execution_attention VALUES(?,?,?)").run(id, contextId, bytes);
+            }
+        });
+    }
+    attentionItems() {
+        this.check();
+        return this.database.prepare("SELECT value FROM hub_execution_attention LIMIT 4096").all().map(r => parseStrictJson(r.value));
+    }
+}
+//# sourceMappingURL=store.js.map

package/dist/hub/execution/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/hub/execution/store.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,qBAAqB,EAA4B,MAAM,sBAAsB,CAAC;AACvF,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAI/G,MAAM,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI;IAC7G,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;AAQtH,MAAM,UAAU,mBAAmB,CAAC,EAAqB;IACvD,EAAE,CAAC,IAAI,CAAC;;;;4HAIkH,CAAC,CAAC;AAC9H,CAAC;AAED,MAAM,OAAO,iBAAiB;IAEP,QAAQ;IAAsC,OAAO;IADlE,MAAM,GAAG,KAAK,CAAC;IACvB,YAAqB,QAA2B,EAAmB,OAA8B;wBAA5E,QAAQ;uBAAsC,OAAO;IAA0B,CAAC;IACrG,UAAU;QACR,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAChJ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,4CAA4C,CAAC,CAAC,GAAG,EAAE,CAAC;IAC5E,CAAC;IACD,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,EAAsC,CAAC;YACzI,IAAI,CAAC,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE;gBAAE,MAAM,KAAK,EAAE,CAAC;YACxF,OAAO,GAAG,CAAC,QAAQ,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAAC,CAAC;IAC1E,CAAC;IACO,KAAK,CAAC,KAA0B;QACtC,IAAI,CAAC;YACH,qGAAqG;YACrG,MAAM,MAAM,GAAY,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;YACjE,IAAI,MAAM,IAAI,OAAQ,MAA6B,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxE,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC7C,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACtD,CAAC;IACO,MAAM,CAAI,KAA0B,EAAE,IAAa;QACzD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,EAAE;gBACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,EAAE,EAAE,KAAK,GAAG,IAAI,EAAE,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;gBAC9D,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClB,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBACvC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,4DAA4D,CAAC,CAAC,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC;gBACtG,OAAO,KAAK,CAAC;YACf,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,OAAO;gBAAE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IACnE,CAAC;IACD,MAAM,CAAC,OAA0C;QAC/C,MAAM,WAAW,GAAG,CAAC,CAAc,EAAE,MAAc,EAAE,EAAE;YACrD,IAAI,MAAM,KAAK,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1G,CAAC,CAAC;QACF,OAAO;YACL,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE;gBACxB,uGAAuG;gBACvG,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBACrC,IAAI,EAAE,KAAK,IAAI,CAAC,QAAQ,IAAI,CAAC,EAAE,CAAC,aAAa;oBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACpF,IAAK,EAAE,CAAC,OAAO,CAAC,+CAA+C,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,IAAI,IAAI;oBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;gBAC/I,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,UAAU,EAAE,CAAC;gBAC9D,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,CAAC;gBACzE,EAAE,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBAChH,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE;gBACxB,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;gBAAC,IAAI,EAAE,KAAK,IAAI,CAAC,QAAQ;oBAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;gBACrG,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,qBAAqB,CAAC,CAAC,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;gBAC3F,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;YACzB,CAAC;SACF,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,MAAc;QACnB,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,yEAAyE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvI,OAAO,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,CAAC;IACD,KAAK,CAAC,MAA8B;QAClC,SAAS,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE;YAChG,IAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,IAAI,IAAI;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAC7J,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QAClI,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,EAAU;QAChB,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,qDAAqD,CAAC,CAAC,GAAG,CAAC,EAAE,CAAkC,CAAC;QAClI,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,SAAS,CAAC,aAAa,EAAE,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;IACD,QAAQ;QACN,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,kDAAkD,CAAC,CAAC,GAAG,EAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5I,CAAC;IACD,IAAI,CAAC,KAA0B,IAAU,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxE,KAAK,CAAC,EAAU,EAAE,KAAsC;QACtD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,WAAW,KAAK,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE;YAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,IAAI,KAAK,KAAK,MAAM;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAClI,GAAG,CAAC,KAAK,GAAG,KAAK,CAAC;YAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;QAChI,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,SAAiB,EAAE,OAAgC;QACzD,MAAM,CAAC,GAAG,SAAS,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE;YAC9G,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACpC,IAAI,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;YACvH,IAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAmB,CAAC,CAAC,IAAI,GAAG;gBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;YAC1L,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;QAC7I,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,SAAiB,EAAE,OAAgC;QACzD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,GAAG,EAAE;YAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,0EAA0E,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAuE,CAAC;YAC7M,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,UAAU,IAAI,eAAe,CAAC,SAAS,CAAC,mBAAmB,EAAE,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YAC5N,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACpH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,SAAS,CAAC,SAAiB,EAAE,EAAU,EAAE,KAAc;QACrD,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE;YACvD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAsD,CAAC;YACvK,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,CAAC,CAAC;YACxH,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,IAAK,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,EAAoB,CAAC,CAAC,IAAI,GAAG;uBAC1G,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAmB,CAAC,CAAC,IAAI,EAAE;oBAAE,MAAM,IAAI,gBAAgB,CAAC,cAAc,CAAC,CAAC;gBACzL,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,mDAAmD,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YACvG,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IACD,cAAc;QACZ,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,sDAAsD,CAAC,CAAC,GAAG,EAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzJ,CAAC;CACF"}

package/dist/hub/execution/views.d.ts

@@ -0,0 +1,20 @@
+/** P1 data tools read an owner-approved immutable snapshot, never a path, URL or SQL string. */
+import { z } from "zod";
+export declare const HUB_READ_TOOLS: readonly ["documents.list", "documents.read"];
+declare const documentSchema: z.ZodObject<{
+    id: z.ZodString;
+    title: z.ZodString;
+    text: z.ZodString;
+}, z.core.$strict>;
+export type HubViewDocument = z.infer<typeof documentSchema>;
+export declare class HubDocumentView {
+    readonly id: string;
+    readonly digest: string;
+    private readonly documents;
+    constructor(id: string, documents: readonly HubViewDocument[]);
+    static installed(view: unknown): view is HubDocumentView;
+    arguments(name: string, input: unknown): unknown;
+    read(name: string, input: unknown): unknown;
+}
+export declare function executionPolicyDigest(view: HubDocumentView, allowedTools: readonly string[]): string;
+export {};

package/dist/hub/execution/views.js

@@ -0,0 +1,48 @@
+/** P1 data tools read an owner-approved immutable snapshot, never a path, URL or SQL string. */
+import { z } from "zod";
+import { canonicalArguments, sha256 } from "../identity.js";
+import { identifier, plain, validated, HubProtocolError } from "../validation.js";
+export const HUB_READ_TOOLS = ["documents.list", "documents.read"];
+const documentSchema = z.strictObject({ id: identifier, title: plain(256), text: plain(64 * 1024) });
+const views = new WeakSet();
+export class HubDocumentView {
+    id;
+    digest;
+    documents;
+    constructor(id, documents) {
+        this.id = id;
+        validated(identifier, id);
+        this.documents = validated(z.array(documentSchema).max(64), documents).map(d => Object.freeze(d));
+        if (new Set(this.documents.map(d => d.id)).size !== this.documents.length)
+            throw new HubProtocolError();
+        const bytes = canonicalArguments(this.documents);
+        this.digest = sha256(bytes);
+        views.add(this);
+        Object.freeze(this.documents);
+        Object.freeze(this);
+    }
+    static installed(view) { return !!view && typeof view === "object" && views.has(view); }
+    arguments(name, input) {
+        if (name === "documents.list")
+            return validated(z.strictObject({}), input);
+        if (name === "documents.read")
+            return validated(z.strictObject({ documentId: identifier }), input);
+        throw new HubProtocolError("denied");
+    }
+    read(name, input) {
+        const args = this.arguments(name, input);
+        if (name === "documents.list")
+            return this.documents.map(({ id, title }) => ({ id, title }));
+        const document = this.documents.find(d => d.id === args.documentId);
+        if (!document)
+            throw new HubProtocolError("denied");
+        return { ...document };
+    }
+}
+export function executionPolicyDigest(view, allowedTools) {
+    if (!HubDocumentView.installed(view) || allowedTools.length > 2 || new Set(allowedTools).size !== allowedTools.length
+        || !allowedTools.every(name => HUB_READ_TOOLS.includes(name)))
+        throw new HubProtocolError("denied");
+    return sha256(canonicalArguments(["agend-hub-read-policy-v1", view.id, view.digest, [...allowedTools].sort(), true]));
+}
+//# sourceMappingURL=views.js.map

package/dist/hub/execution/views.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"views.js","sourceRoot":"","sources":["../../../src/hub/execution/views.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAElF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,gBAAgB,EAAE,gBAAgB,CAAU,CAAC;AAC5E,MAAM,cAAc,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;AAErG,MAAM,KAAK,GAAG,IAAI,OAAO,EAAU,CAAC;AAEpC,MAAM,OAAO,eAAe;IAGL,EAAE;IAFd,MAAM,CAAS;IACP,SAAS,CAA6B;IACvD,YAAqB,EAAU,EAAE,SAAqC;kBAAjD,EAAE;QACrB,SAAS,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM;YAAE,MAAM,IAAI,gBAAgB,EAAE,CAAC;QACxG,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,CAAC,SAAS,CAAC,IAAa,IAA6B,OAAO,CAAC,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1H,SAAS,CAAC,IAAY,EAAE,KAAc;QACpC,IAAI,IAAI,KAAK,gBAAgB;YAAE,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3E,IAAI,IAAI,KAAK,gBAAgB;YAAE,OAAO,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;QACnG,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,CAAC,IAAY,EAAE,KAAc;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,gBAAgB;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAM,IAA+B,CAAC,UAAU,CAAC,CAAC;QAChG,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACpD,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IACzB,CAAC;CACF;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAqB,EAAE,YAA+B;IAC1F,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,MAAM;WAChH,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC,IAAqC,CAAC,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACvI,OAAO,MAAM,CAAC,kBAAkB,CAAC,CAAC,0BAA0B,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACxH,CAAC"}

package/dist/hub/http/compose.d.ts

@@ -0,0 +1,20 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { HubMemberFrame, HubServerFrame } from "../types.js";
+import type { HubLinkContext } from "../server.js";
+import { HUB_HTTP_MIGRATIONS } from "./schema.js";
+import type { HubHttpDeps, HubTxDatabase } from "./deps.js";
+export { HUB_HTTP_MIGRATIONS };
+/** S5's lazy entry (HubHttpEntry): this module itself — `createHubHttp` and `migrations`. */
+export declare const migrations: readonly import("./schema.js").HubHttpMigration[];
+export type { HubHttpDeps, HubTxDatabase };
+/** The Hub's lazy modules a Hub page may load (the fleet's /ui/js/ modules are never served here). */
+export declare const HUB_UI_MODULES: readonly string[];
+export interface HubHttp {
+    handle(req: IncomingMessage, res: ServerResponse): boolean;
+    receive(frame: Exclude<HubMemberFrame, {
+        type: "hello";
+    }>, link: HubLinkContext): Promise<HubServerFrame | void>;
+    close(): Promise<void>;
+}
+/** Build S3's HTTP handler and member receiver over S5's deps. `sql` is S5's `hubTxDatabase`. */
+export declare function createHubHttp(deps: HubHttpDeps, sql: HubTxDatabase): HubHttp;