@uns-kit/core 3.0.28 → 3.0.31

package/dist/runtime/configuration-group-contract.js

@@ -0,0 +1,233 @@
+import { createHash } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import { z } from "zod";
+import { readConfigurationSelector } from "./process-group-contract.js";
+import { readProcessGroupResource } from "./process-group-resources.js";
+const identity = z.string().regex(/^[a-z][a-z0-9-]{0,99}$/);
+const digest = z.string().regex(/^[a-f0-9]{64}$/);
+const selector = z
+    .array(z
+    .string()
+    .regex(/^[a-zA-Z][a-zA-Z0-9_-]{0,99}$/)
+    .refine((v) => !["__proto__", "prototype", "constructor"].includes(v)))
+    .min(1)
+    .max(8);
+const MAX_BYTES = 1024 * 1024;
+/** Versioned canonical JSON: binary key order, no locale, executable values or accessors. */
+export function configurationResourceJson(value) {
+    let nodes = 0, bytes = 0;
+    const ancestors = new Set();
+    const charge = (size) => {
+        bytes += size;
+        if (bytes > MAX_BYTES)
+            throw Error("Configuration resource exceeds 1 MiB");
+    };
+    function visit(v, depth) {
+        if (++nodes > 65536 || depth > 32)
+            throw Error("Configuration resource exceeds its structural budget");
+        if (v === null || typeof v === "boolean") {
+            charge(v === null ? 4 : v ? 4 : 5);
+            return JSON.stringify(v);
+        }
+        if (typeof v === "string") {
+            if (Buffer.byteLength(v) > MAX_BYTES)
+                throw Error("Configuration resource string exceeds 1 MiB");
+            const encoded = JSON.stringify(v);
+            charge(Buffer.byteLength(encoded));
+            return encoded;
+        }
+        if (typeof v === "number" && Number.isFinite(v)) {
+            const encoded = JSON.stringify(v);
+            charge(encoded.length);
+            return encoded;
+        }
+        if (!v || typeof v !== "object" || ancestors.has(v))
+            throw Error("Configuration resource must contain finite plain JSON only");
+        if (Array.isArray(v)
+            ? Object.getPrototypeOf(v) !== Array.prototype
+            : Object.getPrototypeOf(v) !== Object.prototype && Object.getPrototypeOf(v) !== null)
+            throw Error("Configuration resource must contain plain JSON objects");
+        if (Object.getOwnPropertySymbols(v).length)
+            throw Error("Configuration resource cannot contain symbol properties");
+        const descriptors = Object.getOwnPropertyDescriptors(v);
+        for (const [key, d] of Object.entries(descriptors)) {
+            if (Array.isArray(v) && key === "length")
+                continue;
+            if (!d.enumerable || !Object.hasOwn(d, "value"))
+                throw Error("Configuration resource cannot contain hidden properties or accessors");
+        }
+        ancestors.add(v);
+        charge(2); // Container brackets/braces.
+        let result;
+        if (Array.isArray(v)) {
+            if (v.length > 65536 || Object.keys(v).length !== v.length || Object.keys(v).some((k, i) => k !== String(i)))
+                throw Error("Configuration resource arrays must be dense JSON arrays");
+            charge(Math.max(0, v.length - 1));
+            result = "[" + Array.from({ length: v.length }, (_, i) => visit(descriptors[String(i)].value, depth + 1)).join(",") + "]";
+        }
+        else
+            result =
+                "{" +
+                    Object.keys(v)
+                        .sort()
+                        .map((k, i) => {
+                        if (Buffer.byteLength(k) > MAX_BYTES)
+                            throw Error("Configuration resource key exceeds 1 MiB");
+                        charge(Buffer.byteLength(JSON.stringify(k)) + 1 + (i ? 1 : 0));
+                        return JSON.stringify(k) + ":" + visit(descriptors[k].value, depth + 1);
+                    })
+                        .join(",") +
+                    "}";
+        ancestors.delete(v);
+        return result;
+    }
+    const json = visit(value, 0);
+    if (Buffer.byteLength(json) > MAX_BYTES)
+        throw Error("Configuration resource exceeds 1 MiB");
+    return json;
+}
+export function configurationResourceHash(value) {
+    return createHash("sha256").update("uns-configuration-json-v1\n").update(configurationResourceJson(value)).digest("hex");
+}
+export const configurationGroupProfileSchema = z.strictObject({
+    id: identity,
+    processName: identity,
+    dataGroup: identity,
+    resource: z.unknown(),
+});
+export const configurationGroupSchema = z.strictObject({
+    schemaVersion: z.literal(2),
+    id: identity,
+    inputTopic: z
+        .string()
+        .min(1)
+        .max(512)
+        .regex(/^[^#+\0]+$/),
+    processName: identity,
+    receiverProcessName: identity,
+    profiles: z.array(configurationGroupProfileSchema).min(2).max(16),
+});
+export const configurationGroupDescriptorSchema = z
+    .strictObject({
+    protocolVersion: z.literal(2),
+    namespace: identity,
+    publisherPath: selector,
+    groupPath: selector,
+    memberPath: selector,
+    journalPath: selector,
+    runtimeRolePath: selector,
+    receiverRole: identity,
+    match: z.strictObject({ path: selector, value: z.string().min(1).max(100) }).optional(),
+})
+    .superRefine((d, context) => {
+    const independent = [d.publisherPath, d.journalPath, d.runtimeRolePath].map((p) => p.join("."));
+    if (new Set(independent).size !== independent.length || independent.some((p, i) => independent.some((q, j) => i !== j && q.startsWith(p + "."))))
+        context.addIssue({ code: "custom", message: "Independent publisher, journal and role selectors required" });
+    const parent = d.publisherPath.join(".") + ".", group = d.groupPath.join("."), member = d.memberPath.join(".");
+    if (!group.startsWith(parent) ||
+        !member.startsWith(parent) ||
+        group === member ||
+        group.startsWith(member + ".") ||
+        member.startsWith(group + "."))
+        context.addIssue({ code: "custom", message: "Distinct group/member selectors within the publisher required" });
+});
+const snapshots = new WeakSet();
+function freeze(value) {
+    if (value && typeof value === "object") {
+        for (const child of Object.values(value))
+            freeze(child);
+        Object.freeze(value);
+    }
+    return value;
+}
+export function configurationGroupSnapshot(value) {
+    // Bound and copy before schema traversal; caller mutation cannot change a running revision.
+    const group = configurationGroupSchema.parse(JSON.parse(configurationResourceJson(value)));
+    const names = [group.processName, group.receiverProcessName, ...group.profiles.map((p) => p.processName)];
+    if (new Set(names).size !== names.length || new Set(group.profiles.map((p) => p.id)).size !== group.profiles.length)
+        throw Error("Configuration group identities overlap");
+    const profiles = group.profiles.map((p) => ({ ...p, resourceSha256: configurationResourceHash(p.resource) }));
+    const result = freeze({ group, sha256: configurationResourceHash(group), profiles });
+    snapshots.add(result);
+    return result;
+}
+export function assertConfigurationGroupSnapshot(value) {
+    if (!snapshots.has(value))
+        throw Error("Exact SDK-issued configuration group snapshot required");
+}
+/** Optional data-only capability; packages without it keep their existing behavior. */
+export function configurationGroupDescriptor(packageRoot) {
+    const file = path.join(packageRoot, "package.json");
+    // Ordinary Node/Python deployments do not opt in by existing on the host.
+    if (!fs.existsSync(file))
+        return undefined;
+    const fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
+    let bytes;
+    try {
+        const stat = fs.fstatSync(fd);
+        if (!stat.isFile() || stat.size > MAX_BYTES)
+            throw Error("Invalid installed runtime metadata");
+        bytes = fs.readFileSync(fd);
+        if (bytes.length > MAX_BYTES)
+            throw Error("Installed runtime metadata is too large");
+    }
+    finally {
+        fs.closeSync(fd);
+    }
+    const pkg = JSON.parse(bytes.toString());
+    const value = pkg.unsDatahub?.processGroupConfigurationRuntime;
+    if (value !== undefined && !readProcessGroupResource(file).equals(bytes))
+        throw Error("Installed runtime metadata changed during discovery");
+    return value === undefined ? undefined : configurationGroupDescriptorSchema.parse(value);
+}
+export function selectedConfigurationGroup(packageRoot, raw) {
+    const descriptor = configurationGroupDescriptor(packageRoot);
+    if (!descriptor)
+        return undefined;
+    const value = readConfigurationSelector(raw, descriptor.groupPath);
+    if (value === undefined)
+        return undefined;
+    if (descriptor.match && readConfigurationSelector(raw, descriptor.match.path) !== descriptor.match.value)
+        throw Error("Configuration group capability selector does not match");
+    return { descriptor, snapshot: configurationGroupSnapshot(value) };
+}
+export const configurationGroupJournalSchema = z.strictObject({
+    directory: z.string().startsWith("/").max(512),
+    journalId: z.string().uuid().optional(),
+    generationId: identity,
+    groupSha256: digest,
+    minFreeBytes: z
+        .number()
+        .int()
+        .min(1024 * 1024)
+        .max(1024 * 1024 * 1024)
+        .default(64 * 1024 * 1024),
+    maxRecords: z.number().int().min(1).max(100000).default(20000),
+    maxBytes: z
+        .number()
+        .int()
+        .min(1024)
+        .max(256 * 1024 * 1024)
+        .default(32 * 1024 * 1024),
+});
+export function configurationGroupJournalContract(snapshot, sourceIdentity, config, profiles) {
+    assertConfigurationGroupSnapshot(snapshot);
+    const journal = configurationGroupJournalSchema.parse(config);
+    if (journal.groupSha256 !== snapshot.sha256 || !digest.safeParse(sourceIdentity).success)
+        throw Error("Configuration group journal revision differs");
+    const expected = snapshot.profiles.map(({ processName, resourceSha256, dataGroup }) => ({ processName, resourceSha256, dataGroup }));
+    const normalize = (v) => [...v].sort((a, b) => (a.processName < b.processName ? -1 : a.processName > b.processName ? 1 : 0));
+    if (configurationResourceHash(normalize([...profiles])) !== configurationResourceHash(normalize(expected)))
+        throw Error("Configuration group journal profiles differ");
+    return configurationResourceJson({
+        version: 2,
+        generationId: journal.generationId,
+        groupSha256: snapshot.sha256,
+        sourceIdentity,
+        maxRecords: journal.maxRecords,
+        maxBytes: journal.maxBytes,
+        profiles: normalize(expected),
+    });
+}
+//# sourceMappingURL=configuration-group-contract.js.map

package/dist/runtime/configuration-group-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"configuration-group-contract.js","sourceRoot":"","sources":["../../src/runtime/configuration-group-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC5D,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,MAAM,QAAQ,GAAG,CAAC;KACf,KAAK,CACJ,CAAC;KACE,MAAM,EAAE;KACR,KAAK,CAAC,+BAA+B,CAAC;KACtC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CACzE;KACA,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,CAAC,CAAC,CAAC;AACV,MAAM,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;AAE9B,6FAA6F;AAC7F,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,KAAK,GAAG,CAAC,EACX,KAAK,GAAG,CAAC,CAAC;IACZ,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;QAC9B,KAAK,IAAI,IAAI,CAAC;QACd,IAAI,KAAK,GAAG,SAAS;YAAE,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC7E,CAAC,CAAC;IACF,SAAS,KAAK,CAAC,CAAU,EAAE,KAAa;QACtC,IAAI,EAAE,KAAK,GAAG,KAAK,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,KAAK,CAAC,sDAAsD,CAAC,CAAC;QACvG,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YACzC,MAAM,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC1B,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS;gBAAE,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjG,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;YACnC,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAC/H,IACE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YACd,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,SAAS;YAC9C,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,IAAI;YAEtF,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACxE,IAAI,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,yDAAyD,CAAC,CAAC;QACnH,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YACnD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,QAAQ;gBAAE,SAAS;YACnD,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC;gBAAE,MAAM,KAAK,CAAC,sEAAsE,CAAC,CAAC;QACvI,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACjB,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,6BAA6B;QACxC,IAAI,MAAc,CAAC;QACnB,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YACrB,IAAI,CAAC,CAAC,MAAM,GAAG,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC;gBAC1G,MAAM,KAAK,CAAC,yDAAyD,CAAC,CAAC;YACzE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAClC,MAAM,GAAG,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;QAC7H,CAAC;;YACC,MAAM;gBACJ,GAAG;oBACH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;yBACX,IAAI,EAAE;yBACN,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;wBACZ,IAAI,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,SAAS;4BAAE,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;wBAC9F,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;wBAC/D,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;oBAC3E,CAAC,CAAC;yBACD,IAAI,CAAC,GAAG,CAAC;oBACZ,GAAG,CAAC;QACR,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS;QAAE,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC7F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,6BAA6B,CAAC,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3H,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5D,EAAE,EAAE,QAAQ;IACZ,WAAW,EAAE,QAAQ;IACrB,SAAS,EAAE,QAAQ;IACnB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,YAAY,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,EAAE,EAAE,QAAQ;IACZ,UAAU,EAAE,CAAC;SACV,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,YAAY,CAAC;IACtB,WAAW,EAAE,QAAQ;IACrB,mBAAmB,EAAE,QAAQ;IAC7B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAClE,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC;KAChD,YAAY,CAAC;IACZ,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,QAAQ;IACnB,aAAa,EAAE,QAAQ;IACvB,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,QAAQ;IACpB,WAAW,EAAE,QAAQ;IACrB,eAAe,EAAE,QAAQ;IACzB,YAAY,EAAE,QAAQ;IACtB,KAAK,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACxF,CAAC;KACD,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE;IAC1B,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAChG,IAAI,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,MAAM,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;QAC9I,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,4DAA4D,EAAE,CAAC,CAAC;IAC9G,MAAM,MAAM,GAAG,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAC5C,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAC7B,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,IACE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;QACzB,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1B,KAAK,KAAK,MAAM;QAChB,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG,CAAC;QAC9B,MAAM,CAAC,UAAU,CAAC,KAAK,GAAG,GAAG,CAAC;QAE9B,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,+DAA+D,EAAE,CAAC,CAAC;AACnH,CAAC,CAAC,CAAC;AAeL,MAAM,SAAS,GAAG,IAAI,OAAO,EAAU,CAAC;AACxC,SAAS,MAAM,CAAI,KAAQ;IACzB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACxD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,mBAAmB,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1G,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,QAAQ,CAAC,MAAM;QACjH,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,yBAAyB,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9G,MAAM,MAAM,GAAG,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACrF,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,gCAAgC,CAAC,KAAiC;IAChF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAC;AACnG,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,4BAA4B,CAAC,WAAmB;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACpD,0EAA0E;IAC1E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,SAAS;YAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC/F,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS;YAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACvF,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU,EAAE,gCAAgC,CAAC;IAC/D,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC7I,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kCAAkC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC3F,CAAC;AACD,MAAM,UAAU,0BAA0B,CACxC,WAAmB,EACnB,GAA4B;IAO5B,MAAM,UAAU,GAAG,4BAA4B,CAAC,WAAW,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,KAAK,GAAG,yBAAyB,CAAC,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC;IACnE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,UAAU,CAAC,KAAK,IAAI,yBAAyB,CAAC,GAAG,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,CAAC,KAAK;QACtG,MAAM,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACxE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,0BAA0B,CAAC,KAAK,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC5D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,QAAQ;IACtB,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,CAAC;SACZ,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;SAChB,GAAG,CAAC,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;SACvB,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9D,QAAQ,EAAE,CAAC;SACR,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,IAAI,CAAC;SACT,GAAG,CAAC,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;SACtB,OAAO,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,UAAU,iCAAiC,CAC/C,QAAoC,EACpC,cAAsB,EACtB,MAAiC,EACjC,QAAuF;IAEvF,gCAAgC,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,+BAA+B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,OAAO;QACtF,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACrI,MAAM,SAAS,GAAG,CAAC,CAAkB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9I,IAAI,yBAAyB,CAAC,SAAS,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,yBAAyB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACxG,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC7D,OAAO,yBAAyB,CAAC;QAC/B,OAAO,EAAE,CAAC;QACV,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,WAAW,EAAE,QAAQ,CAAC,MAAM;QAC5B,cAAc;QACd,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,SAAS,CAAC,QAAQ,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport fs from \"node:fs\";\nimport path from \"node:path\";\nimport { z } from \"zod\";\n\nimport { readConfigurationSelector } from \"./process-group-contract.js\";\nimport { readProcessGroupResource } from \"./process-group-resources.js\";\n\nconst identity = z.string().regex(/^[a-z][a-z0-9-]{0,99}$/);\nconst digest = z.string().regex(/^[a-f0-9]{64}$/);\nconst selector = z\n  .array(\n    z\n      .string()\n      .regex(/^[a-zA-Z][a-zA-Z0-9_-]{0,99}$/)\n      .refine((v) => ![\"__proto__\", \"prototype\", \"constructor\"].includes(v)),\n  )\n  .min(1)\n  .max(8);\nconst MAX_BYTES = 1024 * 1024;\n\n/** Versioned canonical JSON: binary key order, no locale, executable values or accessors. */\nexport function configurationResourceJson(value: unknown): string {\n  let nodes = 0,\n    bytes = 0;\n  const ancestors = new Set<object>();\n  const charge = (size: number) => {\n    bytes += size;\n    if (bytes > MAX_BYTES) throw Error(\"Configuration resource exceeds 1 MiB\");\n  };\n  function visit(v: unknown, depth: number): string {\n    if (++nodes > 65536 || depth > 32) throw Error(\"Configuration resource exceeds its structural budget\");\n    if (v === null || typeof v === \"boolean\") {\n      charge(v === null ? 4 : v ? 4 : 5);\n      return JSON.stringify(v);\n    }\n    if (typeof v === \"string\") {\n      if (Buffer.byteLength(v) > MAX_BYTES) throw Error(\"Configuration resource string exceeds 1 MiB\");\n      const encoded = JSON.stringify(v);\n      charge(Buffer.byteLength(encoded));\n      return encoded;\n    }\n    if (typeof v === \"number\" && Number.isFinite(v)) {\n      const encoded = JSON.stringify(v);\n      charge(encoded.length);\n      return encoded;\n    }\n    if (!v || typeof v !== \"object\" || ancestors.has(v)) throw Error(\"Configuration resource must contain finite plain JSON only\");\n    if (\n      Array.isArray(v)\n        ? Object.getPrototypeOf(v) !== Array.prototype\n        : Object.getPrototypeOf(v) !== Object.prototype && Object.getPrototypeOf(v) !== null\n    )\n      throw Error(\"Configuration resource must contain plain JSON objects\");\n    if (Object.getOwnPropertySymbols(v).length) throw Error(\"Configuration resource cannot contain symbol properties\");\n    const descriptors = Object.getOwnPropertyDescriptors(v);\n    for (const [key, d] of Object.entries(descriptors)) {\n      if (Array.isArray(v) && key === \"length\") continue;\n      if (!d.enumerable || !Object.hasOwn(d, \"value\")) throw Error(\"Configuration resource cannot contain hidden properties or accessors\");\n    }\n    ancestors.add(v);\n    charge(2); // Container brackets/braces.\n    let result: string;\n    if (Array.isArray(v)) {\n      if (v.length > 65536 || Object.keys(v).length !== v.length || Object.keys(v).some((k, i) => k !== String(i)))\n        throw Error(\"Configuration resource arrays must be dense JSON arrays\");\n      charge(Math.max(0, v.length - 1));\n      result = \"[\" + Array.from({ length: v.length }, (_, i) => visit(descriptors[String(i)]!.value, depth + 1)).join(\",\") + \"]\";\n    } else\n      result =\n        \"{\" +\n        Object.keys(v)\n          .sort()\n          .map((k, i) => {\n            if (Buffer.byteLength(k) > MAX_BYTES) throw Error(\"Configuration resource key exceeds 1 MiB\");\n            charge(Buffer.byteLength(JSON.stringify(k)) + 1 + (i ? 1 : 0));\n            return JSON.stringify(k) + \":\" + visit(descriptors[k]!.value, depth + 1);\n          })\n          .join(\",\") +\n        \"}\";\n    ancestors.delete(v);\n    return result;\n  }\n  const json = visit(value, 0);\n  if (Buffer.byteLength(json) > MAX_BYTES) throw Error(\"Configuration resource exceeds 1 MiB\");\n  return json;\n}\n\nexport function configurationResourceHash(value: unknown): string {\n  return createHash(\"sha256\").update(\"uns-configuration-json-v1\\n\").update(configurationResourceJson(value)).digest(\"hex\");\n}\n\nexport const configurationGroupProfileSchema = z.strictObject({\n  id: identity,\n  processName: identity,\n  dataGroup: identity,\n  resource: z.unknown(),\n});\nexport const configurationGroupSchema = z.strictObject({\n  schemaVersion: z.literal(2),\n  id: identity,\n  inputTopic: z\n    .string()\n    .min(1)\n    .max(512)\n    .regex(/^[^#+\\0]+$/),\n  processName: identity,\n  receiverProcessName: identity,\n  profiles: z.array(configurationGroupProfileSchema).min(2).max(16),\n});\nexport const configurationGroupDescriptorSchema = z\n  .strictObject({\n    protocolVersion: z.literal(2),\n    namespace: identity,\n    publisherPath: selector,\n    groupPath: selector,\n    memberPath: selector,\n    journalPath: selector,\n    runtimeRolePath: selector,\n    receiverRole: identity,\n    match: z.strictObject({ path: selector, value: z.string().min(1).max(100) }).optional(),\n  })\n  .superRefine((d, context) => {\n    const independent = [d.publisherPath, d.journalPath, d.runtimeRolePath].map((p) => p.join(\".\"));\n    if (new Set(independent).size !== independent.length || independent.some((p, i) => independent.some((q, j) => i !== j && q.startsWith(p + \".\"))))\n      context.addIssue({ code: \"custom\", message: \"Independent publisher, journal and role selectors required\" });\n    const parent = d.publisherPath.join(\".\") + \".\",\n      group = d.groupPath.join(\".\"),\n      member = d.memberPath.join(\".\");\n    if (\n      !group.startsWith(parent) ||\n      !member.startsWith(parent) ||\n      group === member ||\n      group.startsWith(member + \".\") ||\n      member.startsWith(group + \".\")\n    )\n      context.addIssue({ code: \"custom\", message: \"Distinct group/member selectors within the publisher required\" });\n  });\nexport type ConfigurationGroupDescriptor = z.infer<typeof configurationGroupDescriptorSchema>;\nexport type ConfigurationGroup = z.infer<typeof configurationGroupSchema>;\nexport interface ConfigurationGroupProfile {\n  readonly id: string;\n  readonly processName: string;\n  readonly dataGroup: string;\n  readonly resourceSha256: string;\n  readonly resource: unknown;\n}\nexport interface ConfigurationGroupSnapshot {\n  readonly group: Readonly<ConfigurationGroup>;\n  readonly sha256: string;\n  readonly profiles: readonly ConfigurationGroupProfile[];\n}\nconst snapshots = new WeakSet<object>();\nfunction freeze<T>(value: T): T {\n  if (value && typeof value === \"object\") {\n    for (const child of Object.values(value)) freeze(child);\n    Object.freeze(value);\n  }\n  return value;\n}\nexport function configurationGroupSnapshot(value: unknown): ConfigurationGroupSnapshot {\n  // Bound and copy before schema traversal; caller mutation cannot change a running revision.\n  const group = configurationGroupSchema.parse(JSON.parse(configurationResourceJson(value)));\n  const names = [group.processName, group.receiverProcessName, ...group.profiles.map((p) => p.processName)];\n  if (new Set(names).size !== names.length || new Set(group.profiles.map((p) => p.id)).size !== group.profiles.length)\n    throw Error(\"Configuration group identities overlap\");\n  const profiles = group.profiles.map((p) => ({ ...p, resourceSha256: configurationResourceHash(p.resource) }));\n  const result = freeze({ group, sha256: configurationResourceHash(group), profiles });\n  snapshots.add(result);\n  return result;\n}\nexport function assertConfigurationGroupSnapshot(value: ConfigurationGroupSnapshot): void {\n  if (!snapshots.has(value)) throw Error(\"Exact SDK-issued configuration group snapshot required\");\n}\n\n/** Optional data-only capability; packages without it keep their existing behavior. */\nexport function configurationGroupDescriptor(packageRoot: string): ConfigurationGroupDescriptor | undefined {\n  const file = path.join(packageRoot, \"package.json\");\n  // Ordinary Node/Python deployments do not opt in by existing on the host.\n  if (!fs.existsSync(file)) return undefined;\n  const fd = fs.openSync(file, fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);\n  let bytes: Buffer;\n  try {\n    const stat = fs.fstatSync(fd);\n    if (!stat.isFile() || stat.size > MAX_BYTES) throw Error(\"Invalid installed runtime metadata\");\n    bytes = fs.readFileSync(fd);\n    if (bytes.length > MAX_BYTES) throw Error(\"Installed runtime metadata is too large\");\n  } finally {\n    fs.closeSync(fd);\n  }\n  const pkg = JSON.parse(bytes.toString());\n  const value = pkg.unsDatahub?.processGroupConfigurationRuntime;\n  if (value !== undefined && !readProcessGroupResource(file).equals(bytes)) throw Error(\"Installed runtime metadata changed during discovery\");\n  return value === undefined ? undefined : configurationGroupDescriptorSchema.parse(value);\n}\nexport function selectedConfigurationGroup(\n  packageRoot: string,\n  raw: Record<string, unknown>,\n):\n  | {\n      descriptor: ConfigurationGroupDescriptor;\n      snapshot: ConfigurationGroupSnapshot;\n    }\n  | undefined {\n  const descriptor = configurationGroupDescriptor(packageRoot);\n  if (!descriptor) return undefined;\n  const value = readConfigurationSelector(raw, descriptor.groupPath);\n  if (value === undefined) return undefined;\n  if (descriptor.match && readConfigurationSelector(raw, descriptor.match.path) !== descriptor.match.value)\n    throw Error(\"Configuration group capability selector does not match\");\n  return { descriptor, snapshot: configurationGroupSnapshot(value) };\n}\n\nexport const configurationGroupJournalSchema = z.strictObject({\n  directory: z.string().startsWith(\"/\").max(512),\n  journalId: z.string().uuid().optional(),\n  generationId: identity,\n  groupSha256: digest,\n  minFreeBytes: z\n    .number()\n    .int()\n    .min(1024 * 1024)\n    .max(1024 * 1024 * 1024)\n    .default(64 * 1024 * 1024),\n  maxRecords: z.number().int().min(1).max(100000).default(20000),\n  maxBytes: z\n    .number()\n    .int()\n    .min(1024)\n    .max(256 * 1024 * 1024)\n    .default(32 * 1024 * 1024),\n});\nexport type ConfigurationGroupJournal = z.infer<typeof configurationGroupJournalSchema>;\nexport function configurationGroupJournalContract(\n  snapshot: ConfigurationGroupSnapshot,\n  sourceIdentity: string,\n  config: ConfigurationGroupJournal,\n  profiles: readonly { processName: string; resourceSha256: string; dataGroup: string }[],\n): string {\n  assertConfigurationGroupSnapshot(snapshot);\n  const journal = configurationGroupJournalSchema.parse(config);\n  if (journal.groupSha256 !== snapshot.sha256 || !digest.safeParse(sourceIdentity).success)\n    throw Error(\"Configuration group journal revision differs\");\n  const expected = snapshot.profiles.map(({ processName, resourceSha256, dataGroup }) => ({ processName, resourceSha256, dataGroup }));\n  const normalize = (v: typeof expected) => [...v].sort((a, b) => (a.processName < b.processName ? -1 : a.processName > b.processName ? 1 : 0));\n  if (configurationResourceHash(normalize([...profiles])) !== configurationResourceHash(normalize(expected)))\n    throw Error(\"Configuration group journal profiles differ\");\n  return configurationResourceJson({\n    version: 2,\n    generationId: journal.generationId,\n    groupSha256: snapshot.sha256,\n    sourceIdentity,\n    maxRecords: journal.maxRecords,\n    maxBytes: journal.maxBytes,\n    profiles: normalize(expected),\n  });\n}\n"]}

package/dist/runtime/mqtt-output-state-contract.d.ts

@@ -0,0 +1,27 @@
+import { z } from "zod";
+export declare const mqttOutputStateLimits: Readonly<{
+    schemaVersion: 1;
+    maximumQueues: 32;
+    maximumRecordsPerQueue: 100000;
+    maximumManifestBytes: 262144;
+    maximumSnapshotBytes: 536870912;
+    maximumCapsuleBytes: 1073741824;
+}>;
+export declare const mqttOutputStateBackupSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    state: z.ZodEnum<{
+        included: "included";
+        empty: "empty";
+    }>;
+    rootSha256: z.ZodString;
+    queues: z.ZodNumber;
+    records: z.ZodNumber;
+    bytes: z.ZodNumber;
+    sha256: z.ZodString;
+}, z.core.$strict>;
+/** Controller inspection of standard SDK configuration, without application code. */
+export declare function managedMqttOutputBinding(config: unknown, root: string | undefined): {
+    directory: string;
+    relative: string;
+} | undefined;
+//# sourceMappingURL=mqtt-output-state-contract.d.ts.map

package/dist/runtime/mqtt-output-state-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mqtt-output-state-contract.d.ts","sourceRoot":"","sources":["../../src/runtime/mqtt-output-state-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,eAAO,MAAM,qBAAqB;;;;;;;EAA2B,CAAC;AAC9D,eAAO,MAAM,2BAA2B;;;;;;;;;;;kBAcqD,CAAC;AAE9F,qFAAqF;AACrF,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAOvI"}

package/dist/runtime/mqtt-output-state-contract.js

@@ -0,0 +1,32 @@
+import { z } from "zod";
+import { mqttPublishQueueSchema } from "../uns-mqtt/publish-queue-contract.js";
+import fixed from "./mqtt-output-state-contract.json" with { type: "json" };
+import { outputStateLimits } from "./mqtt-output-state-program.mjs";
+import { outputStateRelative } from "./mqtt-output-state-program.mjs";
+export const mqttOutputStateLimits = outputStateLimits(fixed);
+export const mqttOutputStateBackupSchema = z
+    .strictObject({
+    schemaVersion: z.literal(1),
+    state: z.enum(["included", "empty"]),
+    rootSha256: z.string().regex(/^[a-f0-9]{64}$/),
+    queues: z.number().int().min(0).max(mqttOutputStateLimits.maximumQueues),
+    records: z
+        .number()
+        .int()
+        .min(0)
+        .max(mqttOutputStateLimits.maximumQueues * mqttOutputStateLimits.maximumRecordsPerQueue),
+    bytes: z.number().int().positive().max(mqttOutputStateLimits.maximumCapsuleBytes),
+    sha256: z.string().regex(/^[a-f0-9]{64}$/),
+})
+    .refine((v) => (v.state === "included" ? v.queues > 0 : v.queues === 0 && v.records === 0));
+/** Controller inspection of standard SDK configuration, without application code. */
+export function managedMqttOutputBinding(config, root) {
+    const value = config;
+    if (value?.output?.publishQueue === undefined)
+        return undefined;
+    const queue = mqttPublishQueueSchema.parse(value.output.publishQueue);
+    if (queue.storage !== "runtime" || !root)
+        throw Error("Controller-managed MQTT output requires storage=runtime and a reviewed persistent Runtime mount");
+    return { directory: queue.directory, relative: outputStateRelative(root, queue.directory) };
+}
+//# sourceMappingURL=mqtt-output-state-contract.js.map

package/dist/runtime/mqtt-output-state-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mqtt-output-state-contract.js","sourceRoot":"","sources":["../../src/runtime/mqtt-output-state-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC;AAC/E,OAAO,KAAK,MAAM,mCAAmC,CAAC,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;AAC9D,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,YAAY,CAAC;IACZ,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,qBAAqB,CAAC,aAAa,CAAC;IACxE,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,qBAAqB,CAAC,aAAa,GAAG,qBAAqB,CAAC,sBAAsB,CAAC;IAC1F,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,qBAAqB,CAAC,mBAAmB,CAAC;IACjF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;CAC3C,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAE9F,qFAAqF;AACrF,MAAM,UAAU,wBAAwB,CAAC,MAAe,EAAE,IAAwB;IAChF,MAAM,KAAK,GAAG,MAAiD,CAAC;IAChE,IAAI,KAAK,EAAE,MAAM,EAAE,YAAY,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI;QACtC,MAAM,KAAK,CAAC,iGAAiG,CAAC,CAAC;IACjH,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;AAC9F,CAAC","sourcesContent":["import { z } from \"zod\";\n\nimport { mqttPublishQueueSchema } from \"../uns-mqtt/publish-queue-contract.js\";\nimport fixed from \"./mqtt-output-state-contract.json\" with { type: \"json\" };\nimport { outputStateLimits } from \"./mqtt-output-state-program.mjs\";\nimport { outputStateRelative } from \"./mqtt-output-state-program.mjs\";\n\nexport const mqttOutputStateLimits = outputStateLimits(fixed);\nexport const mqttOutputStateBackupSchema = z\n  .strictObject({\n    schemaVersion: z.literal(1),\n    state: z.enum([\"included\", \"empty\"]),\n    rootSha256: z.string().regex(/^[a-f0-9]{64}$/),\n    queues: z.number().int().min(0).max(mqttOutputStateLimits.maximumQueues),\n    records: z\n      .number()\n      .int()\n      .min(0)\n      .max(mqttOutputStateLimits.maximumQueues * mqttOutputStateLimits.maximumRecordsPerQueue),\n    bytes: z.number().int().positive().max(mqttOutputStateLimits.maximumCapsuleBytes),\n    sha256: z.string().regex(/^[a-f0-9]{64}$/),\n  })\n  .refine((v) => (v.state === \"included\" ? v.queues > 0 : v.queues === 0 && v.records === 0));\n\n/** Controller inspection of standard SDK configuration, without application code. */\nexport function managedMqttOutputBinding(config: unknown, root: string | undefined): { directory: string; relative: string } | undefined {\n  const value = config as { output?: { publishQueue?: unknown } };\n  if (value?.output?.publishQueue === undefined) return undefined;\n  const queue = mqttPublishQueueSchema.parse(value.output.publishQueue);\n  if (queue.storage !== \"runtime\" || !root)\n    throw Error(\"Controller-managed MQTT output requires storage=runtime and a reviewed persistent Runtime mount\");\n  return { directory: queue.directory, relative: outputStateRelative(root, queue.directory) };\n}\n"]}

package/dist/runtime/mqtt-output-state-contract.json

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": 1,
+  "maximumQueues": 32,
+  "maximumRecordsPerQueue": 100000,
+  "maximumManifestBytes": 262144,
+  "maximumSnapshotBytes": 536870912,
+  "maximumCapsuleBytes": 1073741824
+}

package/dist/runtime/mqtt-output-state-program.d.mts

@@ -0,0 +1,28 @@
+export function openManagedOutputRoot(
+  directory: string,
+  root: string | undefined,
+): { rootId: string; relative: string; schema: "2"; close(): void } | undefined;
+export function validateOutputRow(row: unknown): {
+  seq: number;
+  id: string;
+  topic: string;
+  message: string;
+  options: { qos: 1 | 2; retain: boolean };
+  bytes: number;
+};
+export function outputStateLimits(
+  value: unknown,
+): Readonly<{
+  schemaVersion: 1;
+  maximumQueues: 32;
+  maximumRecordsPerQueue: 100000;
+  maximumManifestBytes: 262144;
+  maximumSnapshotBytes: 536870912;
+  maximumCapsuleBytes: 1073741824;
+}>;
+export function runOutputStateProgram(args: string[]): Promise<unknown>;
+export function validateOutputSnapshot(directory: string, limits: unknown): { queues: unknown[]; rootId: string };
+
+export function outputStateRelative(root: string, directory: string): string;
+
+export function outputStateMain(args?: string[]): Promise<void>;