@uns-kit/core 3.0.40 → 3.0.42

package/MIGRATIONS.md

@@ -9,6 +9,44 @@ Agents must inspect the application's existing ownership and shutdown flow
 before editing it. The examples below describe the intended behavior, not a
 mechanical search-and-replace operation.
 
+## 3.0.42 - Opt-in registered operator APIs and Service API body metadata
+
+Existing applications require no operator-API change when crossing this version.
+To expose a protected read or command to generic Controller orchestration, declare
+`operatorOperations` on the existing GET/POST registration. Use bounded request
+schemas and, for commands, a UUID request ID, write domain and application-owned
+durable idempotency receipt. See the shared
+[operator API contract](https://github.com/uns-openhub/uns-kit/blob/master/docs/operator-api.md)
+and [receipt example](https://github.com/uns-openhub/uns-kit/blob/master/docs/examples/operator-command-receipt.ts).
+
+Declarations grant no permissions. Delegated operations require current Controller
+ownership, explicit workload tools and a short-lived purpose-specific credential;
+the SDK checks current parent authorization before invoking the handler. Ordinary
+API bearer credentials remain separate. A missing Controller authority fails a
+delegated call closed without changing standalone drain/signal cleanup. Reconcile
+unknown command outcomes with the same actor/request ID and exact payload instead
+of issuing a new command. Never mark an uncertain effect as not applied.
+
+Shared POST/PUT/PATCH/DELETE registration also synchronizes Service API request-body
+metadata with an explicitly supplied OpenAPI body. Existing catalog schemas and
+examples are retained; the full JSON Schema remains in OpenAPI. No application
+handler or permission change is required for that metadata correction.
+
+## 3.0.41 - Explicit typed null scalar clears
+
+Null publication is opt-in per MQTT publisher (`allowNullData: true`). A null
+`data.value` must declare `data.valueType: "string" | "number"`; it is an explicit
+clear with its own timestamp, not an omitted update, zero, empty string, object or
+delete command. Ordinary scalar inference and non-opted publishers stay unchanged.
+Update every required reader to a compatible SDK before enabling a producer.
+
+The nullable opt-in is bound into peer compatibility without changing ordinary
+format 3 hashes. Old/non-opted peers reject before the source relinquishes ownership.
+Snapshots retain the null plus declared scalar type; null cannot be differentiated.
+Keep the normal reviewed operation/recovery rules. Do not relabel a state contract
+to bypass mixed-peer rejection. See the
+[contract and generic example](https://github.com/uns-openhub/uns-kit/blob/master/docs/mqtt-null-data.md).
+
 ## 3.0.40 - Managed asynchronous MQTT input and bounded RAM output pressure
 
 When crossing `<3.0.40` to `>=3.0.40`, legacy input events and queue rejection

package/README.md

@@ -273,6 +273,14 @@ and apply only the migrations whose version boundaries are crossed. The
 `3.0.0` migration documents the MQTT table-column object contract, while the
 `2.0.71` migration documents MQTT publish and shutdown ownership changes.
 
+## Explicit scalar clears (3.0.41)
+
+An opted-in publisher can send a typed `null` clear with its own timestamp.
+Read the [generic contract and examples](https://github.com/uns-openhub/uns-kit/blob/master/docs/mqtt-null-data.md)
+and the reader-first upgrade requirements in `MIGRATIONS.md`. Ordinary scalar
+publications stay unchanged; no business meaning or universal exactly-once
+guarantee is inferred by the SDK.
+
 ## State-preserving MQTT handover
 
 Correlated-v2 MQTT handover in3.0.38 verifies a uniquely shared input boundary

package/dist/runtime/compatibility/energenti-authorization-v1.d.ts

@@ -17,8 +17,8 @@ export declare const hvAuthorizationSchema: z.ZodObject<{
             [x: string]: string;
         }>;
         role: z.ZodEnum<{
-            source: "source";
             target: "target";
+            source: "source";
             receiver: "receiver";
         }>;
         configurationSha256: z.ZodString;
@@ -51,8 +51,8 @@ export declare const processGroupAuthorizationSchema: z.ZodObject<{
         instanceId: z.ZodString;
         processName: z.ZodString;
         role: z.ZodEnum<{
-            source: "source";
             target: "target";
+            source: "source";
             receiver: "receiver";
         }>;
         configurationSha256: z.ZodString;

package/dist/runtime/configuration-group-authorization.d.ts

@@ -21,8 +21,8 @@ export declare const configurationGroupAuthorizationSchema: z.ZodObject<{
         instanceId: z.ZodString;
         processName: z.ZodString;
         role: z.ZodEnum<{
-            source: "source";
             target: "target";
+            source: "source";
             receiver: "receiver";
         }>;
         configurationSha256: z.ZodString;
@@ -40,7 +40,7 @@ export declare function verifyConfigurationGroupPolicy(context: ProcessGroupAuth
     file: string;
     directory: string;
     journalId: string;
-    role: "source" | "target" | "receiver";
+    role: "target" | "source" | "receiver";
     groupId: string;
     groupProcessName: string;
     namespace: string;

package/dist/runtime/mqtt-handover-state.d.ts

@@ -11,7 +11,11 @@ export declare const mqttProxyHandoverStateSchema: z.ZodObject<{
     compatibility: z.ZodString;
     values: z.ZodArray<z.ZodObject<{
         topic: z.ZodString;
-        value: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>, z.ZodArray<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>]>;
+        value: z.ZodNullable<z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>, z.ZodArray<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>]>>;
+        valueType: z.ZodOptional<z.ZodEnum<{
+            string: "string";
+            number: "number";
+        }>>;
         uom: z.ZodOptional<z.ZodString>;
         timestamp: z.ZodString;
     }, z.core.$strict>>;
@@ -33,7 +37,11 @@ export declare const mqttHandoverStateSchema: z.ZodObject<{
         compatibility: z.ZodString;
         values: z.ZodArray<z.ZodObject<{
             topic: z.ZodString;
-            value: z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>, z.ZodArray<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>]>;
+            value: z.ZodNullable<z.ZodUnion<readonly [z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>, z.ZodArray<z.ZodUnion<readonly [z.ZodNumber, z.ZodString]>>]>>;
+            valueType: z.ZodOptional<z.ZodEnum<{
+                string: "string";
+                number: "number";
+            }>>;
             uom: z.ZodOptional<z.ZodString>;
             timestamp: z.ZodString;
         }, z.core.$strict>>;

package/dist/runtime/mqtt-handover-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mqtt-handover-state.d.ts","sourceRoot":"","sources":["../../src/runtime/mqtt-handover-state.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,6BAA6B,QAAc,CAAC;AAIzD,eAAO,MAAM,uBAAuB;;;;mBAI8E,CAAC;AACnH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;kBASvC,CAAC;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;kBAOlC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAMxE;AACD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAExE;AACD,eAAO,MAAM,4BAA4B;;kBAAoD,CAAC;AAC9F,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAS7E"}
+{"version":3,"file":"mqtt-handover-state.d.ts","sourceRoot":"","sources":["../../src/runtime/mqtt-handover-state.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAC5C,eAAO,MAAM,6BAA6B,QAAc,CAAC;AAIzD,eAAO,MAAM,uBAAuB;;;;mBAI8E,CAAC;AACnH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;kBAgBvC,CAAC;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;kBAOlC,CAAC;AACH,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAMxE;AACD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,CAExE;AACD,eAAO,MAAM,4BAA4B;;kBAAoD,CAAC;AAC9F,wBAAgB,0BAA0B,CAAC,WAAW,EAAE,MAAM,GAAG,CAAC,GAAG,SAAS,CAS7E"}

package/dist/runtime/mqtt-handover-state.js

@@ -19,7 +19,14 @@ export const mqttHandoverOfferSchema = z.array(z.strictObject({
 export const mqttProxyHandoverStateSchema = z.strictObject({
     instanceName: z.string().min(1).max(256),
     compatibility: z.string().regex(/^[a-f0-9]{64}$/),
-    values: z.array(z.strictObject({ topic: text, value, uom: z.string().max(256).optional(), timestamp: z.string().datetime() })).max(10000),
+    values: z.array(z.strictObject({
+        topic: text, value: value.nullable(),
+        valueType: z.enum(["string", "number"]).optional(),
+        uom: z.string().max(256).optional(), timestamp: z.string().datetime(),
+    }).superRefine((entry, ctx) => {
+        if (entry.value === null && !entry.valueType)
+            ctx.addIssue({ code: "custom", message: "Null state requires its declared scalar type" });
+    })).max(10000),
     sequences: z.array(z.tuple([text, z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER)])).max(10000),
     cursor: inputCursorSchema,
 }).superRefine((state, ctx) => {

package/dist/runtime/mqtt-handover-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"mqtt-handover-state.js","sourceRoot":"","sources":["../../src/runtime/mqtt-handover-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAElF,+EAA+E;AAC/E,oFAAoF;AACpF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;IAC5D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACjD,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;AACnH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACzI,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC3G,MAAM,EAAE,iBAAiB;CAC1B,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;AAClH,CAAC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtB,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnG,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;QAC/E,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAGH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,6BAA6B;QAAE,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3H,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,WAAW;QAAE,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACtG,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,KAAwB;IAC9D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClG,CAAC;AACD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9F,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACpD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC3I,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO;QAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACnH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC;IACvF,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC","sourcesContent":["import { createHash } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { z } from 'zod';\nimport { cloneApplicationHandoverState } from './application-handover-state.js';\nimport { inputCursorSchema, inputPreviewSchema } from './input-queue-boundary.js';\n\n// Same contract for every SDK MQTT consumer. No application/profile selectors.\n// Bound into peer compatibility so older cursor/state readers reject before freeze.\nexport const MQTT_HANDOVER_STATE_FORMAT = 3;\nexport const MQTT_HANDOVER_STATE_MAX_BYTES = 1024 * 1024;\nconst text = z.string().min(1).max(65535).refine(v => !v.includes('\\0'));\nconst scalar = z.union([z.number().finite(), z.string().max(65535)]);\nconst value = z.union([scalar, z.array(scalar).max(4096)]);\nexport const mqttHandoverOfferSchema = z.array(z.strictObject({\n  instanceName: z.string().min(1).max(256),\n  compatibility: z.string().regex(/^[a-f0-9]{64}$/),\n  inputPreview: inputPreviewSchema.optional(),\n})).max(64).refine(offer => new Set(offer.map(p => p.instanceName)).size === offer.length, 'Duplicate MQTT proxy');\nexport const mqttProxyHandoverStateSchema = z.strictObject({\n  instanceName: z.string().min(1).max(256),\n  compatibility: z.string().regex(/^[a-f0-9]{64}$/),\n  values: z.array(z.strictObject({ topic: text, value, uom: z.string().max(256).optional(), timestamp: z.string().datetime() })).max(10000),\n  sequences: z.array(z.tuple([text, z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER)])).max(10000),\n  cursor: inputCursorSchema,\n}).superRefine((state, ctx) => {\n  for (const keys of [state.values.map(v => v.topic), state.sequences.map(v => v[0])])\n    if (new Set(keys).size !== keys.length) ctx.addIssue({ code: 'custom', message: 'Duplicate MQTT state key' });\n});\nexport const mqttHandoverStateSchema = z.strictObject({\n  protocol: z.literal(1),\n  application: z.strictObject({ contract: z.string().min(1).max(128), data: z.unknown() }).optional(),\n  proxies: z.array(mqttProxyHandoverStateSchema).max(64),\n}).superRefine((state, ctx) => {\n  if (new Set(state.proxies.map(p => p.instanceName)).size !== state.proxies.length)\n    ctx.addIssue({ code: 'custom', message: 'Duplicate MQTT proxy' });\n});\nexport type MqttProxyHandoverState = z.infer<typeof mqttProxyHandoverStateSchema>;\nexport type MqttHandoverState = z.infer<typeof mqttHandoverStateSchema>;\nexport function parseMqttHandoverState(input: unknown): MqttHandoverState {\n  const json = JSON.stringify(input);\n  if (!json || Buffer.byteLength(json) > MQTT_HANDOVER_STATE_MAX_BYTES) throw Error('MQTT handover state exceeds its bound');\n  const state = mqttHandoverStateSchema.parse(input);\n  if (state.application) state.application.data = cloneApplicationHandoverState(state.application.data);\n  return state;\n}\nexport function mqttHandoverStateDigest(state: MqttHandoverState): string {\n  return createHash('sha256').update(JSON.stringify(parseMqttHandoverState(state))).digest('hex');\n}\nexport const mqttHandoverCapabilitySchema = z.strictObject({ protocolVersion: z.literal(2) });\nexport function readMqttHandoverCapability(packageRoot: string): 2 | undefined {\n  const file = path.join(packageRoot, 'package.json');\n  let stat: fs.Stats;\n  try { stat = fs.lstatSync(file); } catch (error) { if ((error as NodeJS.ErrnoException).code === 'ENOENT') return undefined; throw error; }\n  if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 1048576) throw Error('Unsafe MQTT handover descriptor');\n  const descriptor = JSON.parse(fs.readFileSync(file, 'utf8'))?.unsDatahub?.mqttHandover;\n  if (descriptor === undefined) return undefined;\n  mqttHandoverCapabilitySchema.parse(descriptor);\n  return 2;\n}\n"]}
+{"version":3,"file":"mqtt-handover-state.js","sourceRoot":"","sources":["../../src/runtime/mqtt-handover-state.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,6BAA6B,EAAE,MAAM,iCAAiC,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAElF,+EAA+E;AAC/E,oFAAoF;AACpF,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AAC5C,MAAM,CAAC,MAAM,6BAA6B,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AACzE,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrE,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;IAC5D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACjD,YAAY,EAAE,kBAAkB,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;AACnH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC;IACzD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;QAC7B,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;QACpC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;QAClD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACtE,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC5B,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS;YAC1C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACd,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC3G,MAAM,EAAE,iBAAiB;CAC1B,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;YAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;AAClH,CAAC,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,YAAY,CAAC;IACpD,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtB,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnG,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC5B,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,CAAC,MAAM;QAC/E,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAC;AACtE,CAAC,CAAC,CAAC;AAGH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,6BAA6B;QAAE,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3H,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,KAAK,CAAC,WAAW;QAAE,KAAK,CAAC,WAAW,CAAC,IAAI,GAAG,6BAA6B,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACtG,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,uBAAuB,CAAC,KAAwB;IAC9D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClG,CAAC;AACD,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9F,MAAM,UAAU,0BAA0B,CAAC,WAAmB;IAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;IACpD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAAC,MAAM,KAAK,CAAC;IAAC,CAAC;IAC3I,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO;QAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACnH,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC;IACvF,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,4BAA4B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC/C,OAAO,CAAC,CAAC;AACX,CAAC","sourcesContent":["import { createHash } from 'node:crypto';\nimport fs from 'node:fs';\nimport path from 'node:path';\nimport { z } from 'zod';\nimport { cloneApplicationHandoverState } from './application-handover-state.js';\nimport { inputCursorSchema, inputPreviewSchema } from './input-queue-boundary.js';\n\n// Same contract for every SDK MQTT consumer. No application/profile selectors.\n// Bound into peer compatibility so older cursor/state readers reject before freeze.\nexport const MQTT_HANDOVER_STATE_FORMAT = 3;\nexport const MQTT_HANDOVER_STATE_MAX_BYTES = 1024 * 1024;\nconst text = z.string().min(1).max(65535).refine(v => !v.includes('\\0'));\nconst scalar = z.union([z.number().finite(), z.string().max(65535)]);\nconst value = z.union([scalar, z.array(scalar).max(4096)]);\nexport const mqttHandoverOfferSchema = z.array(z.strictObject({\n  instanceName: z.string().min(1).max(256),\n  compatibility: z.string().regex(/^[a-f0-9]{64}$/),\n  inputPreview: inputPreviewSchema.optional(),\n})).max(64).refine(offer => new Set(offer.map(p => p.instanceName)).size === offer.length, 'Duplicate MQTT proxy');\nexport const mqttProxyHandoverStateSchema = z.strictObject({\n  instanceName: z.string().min(1).max(256),\n  compatibility: z.string().regex(/^[a-f0-9]{64}$/),\n  values: z.array(z.strictObject({\n    topic: text, value: value.nullable(),\n    valueType: z.enum([\"string\", \"number\"]).optional(),\n    uom: z.string().max(256).optional(), timestamp: z.string().datetime(),\n  }).superRefine((entry, ctx) => {\n    if (entry.value === null && !entry.valueType)\n      ctx.addIssue({ code: \"custom\", message: \"Null state requires its declared scalar type\" });\n  })).max(10000),\n  sequences: z.array(z.tuple([text, z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER)])).max(10000),\n  cursor: inputCursorSchema,\n}).superRefine((state, ctx) => {\n  for (const keys of [state.values.map(v => v.topic), state.sequences.map(v => v[0])])\n    if (new Set(keys).size !== keys.length) ctx.addIssue({ code: 'custom', message: 'Duplicate MQTT state key' });\n});\nexport const mqttHandoverStateSchema = z.strictObject({\n  protocol: z.literal(1),\n  application: z.strictObject({ contract: z.string().min(1).max(128), data: z.unknown() }).optional(),\n  proxies: z.array(mqttProxyHandoverStateSchema).max(64),\n}).superRefine((state, ctx) => {\n  if (new Set(state.proxies.map(p => p.instanceName)).size !== state.proxies.length)\n    ctx.addIssue({ code: 'custom', message: 'Duplicate MQTT proxy' });\n});\nexport type MqttProxyHandoverState = z.infer<typeof mqttProxyHandoverStateSchema>;\nexport type MqttHandoverState = z.infer<typeof mqttHandoverStateSchema>;\nexport function parseMqttHandoverState(input: unknown): MqttHandoverState {\n  const json = JSON.stringify(input);\n  if (!json || Buffer.byteLength(json) > MQTT_HANDOVER_STATE_MAX_BYTES) throw Error('MQTT handover state exceeds its bound');\n  const state = mqttHandoverStateSchema.parse(input);\n  if (state.application) state.application.data = cloneApplicationHandoverState(state.application.data);\n  return state;\n}\nexport function mqttHandoverStateDigest(state: MqttHandoverState): string {\n  return createHash('sha256').update(JSON.stringify(parseMqttHandoverState(state))).digest('hex');\n}\nexport const mqttHandoverCapabilitySchema = z.strictObject({ protocolVersion: z.literal(2) });\nexport function readMqttHandoverCapability(packageRoot: string): 2 | undefined {\n  const file = path.join(packageRoot, 'package.json');\n  let stat: fs.Stats;\n  try { stat = fs.lstatSync(file); } catch (error) { if ((error as NodeJS.ErrnoException).code === 'ENOENT') return undefined; throw error; }\n  if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 1048576) throw Error('Unsafe MQTT handover descriptor');\n  const descriptor = JSON.parse(fs.readFileSync(file, 'utf8'))?.unsDatahub?.mqttHandover;\n  if (descriptor === undefined) return undefined;\n  mqttHandoverCapabilitySchema.parse(descriptor);\n  return 2;\n}\n"]}

package/dist/runtime/operator-api.d.ts

@@ -0,0 +1,74 @@
+import { z } from "zod";
+/** Explicit opt-in. OpenAPI paths alone are never operator authority. */
+export declare const OPERATOR_API_EXTENSION = "x-uns-operator-operations";
+export declare const OPERATOR_DELEGATION_CLAIM = "unsOperatorDelegation";
+export declare const OPERATOR_OUTCOME_HEADER = "x-uns-operator-outcome";
+export declare const OPERATOR_AUTH_SCHEME = "UNS-Operator";
+export declare const OPERATOR_JWT_TYPE = "uns-operator-api+jwt";
+export declare const OPERATOR_JWT_AUDIENCE = "uns-operator-api";
+export declare const OPERATOR_JWT_ALGORITHM = "PS256";
+export declare const OPERATOR_JSON_MAX_BYTES = 65536;
+export declare class OperatorApiError extends Error {
+    readonly code: string;
+    readonly status: number;
+    constructor(code: string, status?: number);
+}
+/** Canonical bounded JSON is shared by reviews, wire claims and receipts.
+ * Never hashes JSON with dropped undefined values or non-finite numbers. */
+export declare function operatorJson(value: unknown): string;
+export declare const operatorDigest: (value: unknown) => string;
+/** Protocol 1 deliberately excludes references, executable regex and extensions.
+ * UUID format already enforces the standard UUID constraint without a pattern. */
+export declare function operatorRequestSchema(value: unknown): Record<string, unknown>;
+declare const definitionSchema: z.ZodObject<{
+    protocol: z.ZodLiteral<1>;
+    id: z.ZodString;
+    title: z.ZodString;
+    kind: z.ZodEnum<{
+        read: "read";
+        command: "command";
+    }>;
+    requestSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    writeDomain: z.ZodOptional<z.ZodString>;
+    replay: z.ZodOptional<z.ZodLiteral<"request-id-v1">>;
+    timeoutMs: z.ZodDefault<z.ZodNumber>;
+    maxResponseBytes: z.ZodDefault<z.ZodNumber>;
+}, z.core.$strict>;
+export type OperatorOperationDefinition = z.input<typeof definitionSchema>;
+export type OperatorOperation = z.output<typeof definitionSchema> & {
+    method: "GET" | "POST";
+    path: string;
+};
+export declare function operatorOperation(definition: unknown, method: unknown, path: unknown): OperatorOperation;
+export declare function operatorOperationFromWire(input: unknown): OperatorOperation;
+export declare function assertOperatorPayload(operation: OperatorOperation, value: unknown): void;
+export declare const operatorDeploymentSchema: z.ZodObject<{
+    controllerName: z.ZodString;
+    rttNode: z.ZodString;
+    version: z.ZodString;
+    instanceId: z.ZodString;
+    launchId: z.ZodUUID;
+}, z.core.$strict>;
+export type OperatorDeployment = z.infer<typeof operatorDeploymentSchema>;
+export declare const operatorDelegationSchema: z.ZodObject<{
+    protocol: z.ZodLiteral<1>;
+    operationId: z.ZodString;
+    operationDigest: z.ZodString;
+    requestDigest: z.ZodString;
+    target: z.ZodObject<{
+        controllerName: z.ZodString;
+        rttNode: z.ZodString;
+        version: z.ZodString;
+        instanceId: z.ZodString;
+        launchId: z.ZodUUID;
+    }, z.core.$strict>;
+    tool: z.ZodEnum<{
+        controller_read_runtime_operator_operation: "controller_read_runtime_operator_operation";
+        controller_execute_runtime_operator_command: "controller_execute_runtime_operator_command";
+    }>;
+}, z.core.$strict>;
+export type OperatorDelegation = z.infer<typeof operatorDelegationSchema>;
+/** Called only AFTER normal JWT cryptographic, expiry and route-grant checks. */
+export declare function assertOperatorDelegation(claims: Record<string, unknown>, operation: OperatorOperation, payload: unknown, deployment: OperatorDeployment, nowSeconds?: number): OperatorDelegation;
+export {};
+//# sourceMappingURL=operator-api.d.ts.map

package/dist/runtime/operator-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-api.d.ts","sourceRoot":"","sources":["../../src/runtime/operator-api.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yEAAyE;AACzE,eAAO,MAAM,sBAAsB,8BAA8B,CAAC;AAClE,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AACjE,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAChE,eAAO,MAAM,oBAAoB,iBAAiB,CAAC;AACnD,eAAO,MAAM,iBAAiB,yBAAyB,CAAC;AACxD,eAAO,MAAM,qBAAqB,qBAAqB,CAAC;AACxD,eAAO,MAAM,sBAAsB,UAAU,CAAC;AAC9C,eAAO,MAAM,uBAAuB,QAAQ,CAAC;AAiB7C,qBAAa,gBAAiB,SAAQ,KAAK;aAEvB,IAAI,EAAE,MAAM;aACZ,MAAM;gBADN,IAAI,EAAE,MAAM,EACZ,MAAM,SAAM;CAI/B;AAED;4EAC4E;AAC5E,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAyBnD;AACD,eAAO,MAAM,cAAc,GAAI,OAAO,OAAO,KAAG,MAAwE,CAAC;AAEzH;kFACkF;AAClF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAoE7E;AACD,QAAA,MAAM,gBAAgB;;;;;;;;;;;;;kBAiBlB,CAAC;AACL,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC3E,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gBAAgB,CAAC,GAAG;IAAE,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAC7G,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,GAAG,iBAAiB,CAKxG;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,CAI3E;AACD,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,iBAAiB,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI,CAWxF;AACD,eAAO,MAAM,wBAAwB;;;;;;kBAQ1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC1E,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;kBAS1B,CAAC;AACZ,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,iFAAiF;AACjF,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,SAAS,EAAE,iBAAiB,EAC5B,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,kBAAkB,EAC9B,UAAU,SAAgC,GACzC,kBAAkB,CAkCpB"}

package/dist/runtime/operator-api.js

@@ -0,0 +1,241 @@
+import { createHash } from "node:crypto";
+import { z } from "zod";
+/** Explicit opt-in. OpenAPI paths alone are never operator authority. */
+export const OPERATOR_API_EXTENSION = "x-uns-operator-operations";
+export const OPERATOR_DELEGATION_CLAIM = "unsOperatorDelegation";
+export const OPERATOR_OUTCOME_HEADER = "x-uns-operator-outcome";
+export const OPERATOR_AUTH_SCHEME = "UNS-Operator";
+export const OPERATOR_JWT_TYPE = "uns-operator-api+jwt";
+export const OPERATOR_JWT_AUDIENCE = "uns-operator-api";
+export const OPERATOR_JWT_ALGORITHM = "PS256";
+export const OPERATOR_JSON_MAX_BYTES = 65536;
+const identifier = z
+    .string()
+    .min(1)
+    .max(120)
+    .regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/);
+const digest = z.string().regex(/^[a-f0-9]{64}$/);
+const resource = z.string().min(1).max(256);
+const localPath = z
+    .string()
+    .min(1)
+    .max(2048)
+    .refine((value) => /^\/[a-zA-Z0-9_./-]+$/.test(value) && !value.includes("//") && !value.split("/").some((part) => part === "." || part === ".."), "Expected an exact local API path");
+export class OperatorApiError extends Error {
+    code;
+    status;
+    constructor(code, status = 400) {
+        super(code);
+        this.code = code;
+        this.status = status;
+    }
+}
+/** Canonical bounded JSON is shared by reviews, wire claims and receipts.
+ * Never hashes JSON with dropped undefined values or non-finite numbers. */
+export function operatorJson(value) {
+    let nodes = 0;
+    const visit = (item, depth) => {
+        if (++nodes > 4096 || depth > 20)
+            throw new OperatorApiError("operator_json_budget");
+        if (item === null || typeof item === "boolean")
+            return item;
+        if (typeof item === "number" && Number.isFinite(item))
+            return Object.is(item, -0) ? 0 : item;
+        if (typeof item === "string" && item.length <= 32768)
+            return item;
+        if (Array.isArray(item) && item.length <= 1024)
+            return item.map((entry) => visit(entry, depth + 1));
+        if (item && typeof item === "object" && [Object.prototype, null].includes(Object.getPrototypeOf(item))) {
+            const entries = Object.entries(item);
+            if (entries.length > 128)
+                throw new OperatorApiError("operator_json_budget");
+            return Object.fromEntries(entries
+                .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
+                .map(([key, entry]) => {
+                if (key.length > 256 || ["__proto__", "prototype", "constructor"].includes(key))
+                    throw new OperatorApiError("operator_json_key");
+                return [key, visit(entry, depth + 1)];
+            }));
+        }
+        throw new OperatorApiError("operator_json_value");
+    };
+    const json = JSON.stringify(visit(value, 0));
+    if (Buffer.byteLength(json, "utf8") > OPERATOR_JSON_MAX_BYTES)
+        throw new OperatorApiError("operator_json_budget");
+    return json;
+}
+export const operatorDigest = (value) => createHash("sha256").update(operatorJson(value)).digest("hex");
+/** Protocol 1 deliberately excludes references, executable regex and extensions.
+ * UUID format already enforces the standard UUID constraint without a pattern. */
+export function operatorRequestSchema(value) {
+    operatorJson(value);
+    const vocabulary = new Set([
+        "$schema",
+        "type",
+        "properties",
+        "required",
+        "additionalProperties",
+        "items",
+        "minItems",
+        "maxItems",
+        "minLength",
+        "maxLength",
+        "minimum",
+        "maximum",
+        "exclusiveMinimum",
+        "exclusiveMaximum",
+        "multipleOf",
+        "format",
+        "const",
+        "enum",
+        "oneOf",
+        "anyOf",
+        "allOf",
+        "description",
+        "title",
+        "default",
+        "examples",
+        "pattern",
+    ]);
+    let count = 0;
+    function schema(input, depth = 0) {
+        if (++count > 256 || depth > 12 || !input || typeof input !== "object" || Array.isArray(input))
+            throw new OperatorApiError("operator_schema_budget");
+        const source = input;
+        for (const key of Object.keys(source))
+            if (!vocabulary.has(key))
+                throw new OperatorApiError("operator_schema_keyword");
+        const out = { ...source };
+        if ("pattern" in out) {
+            if (out["format"] !== "uuid")
+                throw new OperatorApiError("operator_schema_pattern");
+            delete out["pattern"];
+        }
+        if (out["format"] && !["uuid", "date-time", "date", "time", "email", "uri"].includes(String(out["format"])))
+            throw new OperatorApiError("operator_schema_format");
+        if (source["properties"]) {
+            if (source["additionalProperties"] !== false || typeof source["properties"] !== "object" || Array.isArray(source["properties"]))
+                throw new OperatorApiError("operator_schema_object_must_be_closed");
+            out["properties"] = Object.fromEntries(Object.entries(source["properties"]).map(([key, item]) => [key, schema(item, depth + 1)]));
+        }
+        if (source["type"] === "object" && source["additionalProperties"] !== false)
+            throw new OperatorApiError("operator_schema_object_must_be_closed");
+        if (source["additionalProperties"] !== undefined && source["additionalProperties"] !== false)
+            throw new OperatorApiError("operator_schema_object_must_be_closed");
+        if (source["items"])
+            out["items"] = schema(source["items"], depth + 1);
+        for (const key of ["oneOf", "anyOf", "allOf"])
+            if (source[key]) {
+                if (!Array.isArray(source[key]) || source[key].length > 16)
+                    throw new OperatorApiError("operator_schema_budget");
+                out[key] = source[key].map((item) => schema(item, depth + 1));
+            }
+        return out;
+    }
+    const normalized = schema(value);
+    try {
+        z.fromJSONSchema(normalized);
+    }
+    catch {
+        throw new OperatorApiError("operator_schema_unsupported");
+    }
+    return normalized;
+}
+const definitionSchema = z
+    .object({
+    protocol: z.literal(1),
+    id: identifier,
+    title: z.string().min(1).max(160),
+    kind: z.enum(["read", "command"]),
+    requestSchema: z.record(z.string(), z.unknown()),
+    writeDomain: identifier.optional(),
+    replay: z.literal("request-id-v1").optional(),
+    timeoutMs: z.number().int().min(500).max(10000).default(5000),
+    maxResponseBytes: z.number().int().min(256).max(262144).default(65536),
+})
+    .strict()
+    .superRefine((d, ctx) => {
+    if (d.kind === "command" && (!d.writeDomain || d.replay !== "request-id-v1"))
+        ctx.addIssue({ code: "custom", message: "Commands require a write domain and application request-id receipt support" });
+    if (d.kind === "read" && (d.writeDomain || d.replay))
+        ctx.addIssue({ code: "custom", message: "Reads cannot declare command authority" });
+});
+export function operatorOperation(definition, method, path) {
+    const parsed = definitionSchema.parse(definition);
+    const checkedMethod = z.enum(["GET", "POST"]).parse(method);
+    if (parsed.kind === "command" && checkedMethod !== "POST")
+        throw new OperatorApiError("operator_command_requires_post");
+    return { ...parsed, requestSchema: operatorRequestSchema(parsed.requestSchema), method: checkedMethod, path: localPath.parse(path) };
+}
+export function operatorOperationFromWire(input) {
+    if (!input || typeof input !== "object" || Array.isArray(input))
+        throw new OperatorApiError("operator_operation_invalid");
+    const { method, path, ...definition } = input;
+    return operatorOperation(definition, method, path);
+}
+export function assertOperatorPayload(operation, value) {
+    operatorJson(value);
+    let valid = false;
+    try {
+        valid = z.fromJSONSchema(operation.requestSchema).safeParse(value).success;
+    }
+    catch {
+        /* fail closed */
+    }
+    if (!valid)
+        throw new OperatorApiError("operator_request_invalid");
+    if (operation.kind === "command" && !z.uuid().safeParse(value?.["requestId"]).success)
+        throw new OperatorApiError("operator_request_id_required");
+}
+export const operatorDeploymentSchema = z
+    .object({
+    controllerName: resource,
+    rttNode: resource,
+    version: resource,
+    instanceId: resource,
+    launchId: z.uuid(),
+})
+    .strict();
+export const operatorDelegationSchema = z
+    .object({
+    protocol: z.literal(1),
+    operationId: identifier,
+    operationDigest: digest,
+    requestDigest: digest,
+    target: operatorDeploymentSchema,
+    tool: z.enum(["controller_read_runtime_operator_operation", "controller_execute_runtime_operator_command"]),
+})
+    .strict();
+/** Called only AFTER normal JWT cryptographic, expiry and route-grant checks. */
+export function assertOperatorDelegation(claims, operation, payload, deployment, nowSeconds = Math.floor(Date.now() / 1000)) {
+    const d = operatorDelegationSchema.parse(claims[OPERATOR_DELEGATION_CLAIM]);
+    if (claims["serviceToken"] !== true ||
+        claims["identityType"] !== "machine" ||
+        claims["workloadIdentityType"] !== "CONTROLLER_MCP" ||
+        claims["sub"] !== claims["machineIdentityId"] ||
+        !z.uuid().safeParse(claims["sub"]).success ||
+        !Number.isSafeInteger(claims["tokenVersion"]) ||
+        Number(claims["tokenVersion"]) < 1 ||
+        claims["role"] !== "operator" ||
+        !Number.isSafeInteger(claims["iat"]) ||
+        !Number.isSafeInteger(claims["exp"]) ||
+        Number(claims["exp"]) <= nowSeconds ||
+        Number(claims["iat"]) > nowSeconds + 2 ||
+        Number(claims["exp"]) - Number(claims["iat"]) > 30 ||
+        Number(claims["exp"]) <= Number(claims["iat"]) ||
+        !Array.isArray(claims["accessRules"]) ||
+        claims["accessRules"].length !== 1 ||
+        claims["accessRules"][0] !== operation.path) {
+        throw new OperatorApiError("operator_delegation_invalid", 403);
+    }
+    if (d.operationId !== operation.id ||
+        d.operationDigest !== operatorDigest(operation) ||
+        d.requestDigest !== operatorDigest(payload) ||
+        operatorDigest(d.target) !== operatorDigest(operatorDeploymentSchema.parse(deployment)) ||
+        d.tool !== (operation.kind === "command" ? "controller_execute_runtime_operator_command" : "controller_read_runtime_operator_operation")) {
+        throw new OperatorApiError("operator_delegation_binding_changed", 403);
+    }
+    assertOperatorPayload(operation, payload);
+    return d;
+}
+//# sourceMappingURL=operator-api.js.map

package/dist/runtime/operator-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operator-api.js","sourceRoot":"","sources":["../../src/runtime/operator-api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yEAAyE;AACzE,MAAM,CAAC,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;AAClE,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,cAAc,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,sBAAsB,CAAC;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,kBAAkB,CAAC;AACxD,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAG,KAAK,CAAC;AAC7C,MAAM,UAAU,GAAG,CAAC;KACjB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACzC,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC5C,MAAM,SAAS,GAAG,CAAC;KAChB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,IAAI,CAAC;KACT,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,CAAC,EACzI,kCAAkC,CACnC,CAAC;AAEJ,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAEvB;IACA;IAFlB,YACkB,IAAY,EACZ,SAAS,GAAG;QAE5B,KAAK,CAAC,IAAI,CAAC,CAAC;QAHI,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAM;IAG9B,CAAC;CACF;AAED;4EAC4E;AAC5E,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,CAAC,IAAa,EAAE,KAAa,EAAW,EAAE;QACtD,IAAI,EAAE,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE;YAAE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;QACrF,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC5D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7F,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC;QAClE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;QACpG,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACvG,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,CAAC;YAChE,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;gBAAE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;YAC7E,OAAO,MAAM,CAAC,WAAW,CACvB,OAAO;iBACJ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;iBAChD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBACpB,IAAI,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,gBAAgB,CAAC,mBAAmB,CAAC,CAAC;gBACjI,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACxC,CAAC,CAAC,CACL,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,qBAAqB,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,uBAAuB;QAAE,MAAM,IAAI,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;IAClH,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEzH;kFACkF;AAClF,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;QACzB,SAAS;QACT,MAAM;QACN,YAAY;QACZ,UAAU;QACV,sBAAsB;QACtB,OAAO;QACP,UAAU;QACV,UAAU;QACV,WAAW;QACX,WAAW;QACX,SAAS;QACT,SAAS;QACT,kBAAkB;QAClB,kBAAkB;QAClB,YAAY;QACZ,QAAQ;QACR,OAAO;QACP,MAAM;QACN,OAAO;QACP,OAAO;QACP,OAAO;QACP,aAAa;QACb,OAAO;QACP,SAAS;QACT,UAAU;QACV,SAAS;KACV,CAAC,CAAC;IACH,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,SAAS,MAAM,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;QACvC,IAAI,EAAE,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,EAAE,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAC5F,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;QACvH,MAAM,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;QAC1B,IAAI,SAAS,IAAI,GAAG,EAAE,CAAC;YACrB,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,MAAM;gBAAE,MAAM,IAAI,gBAAgB,CAAC,yBAAyB,CAAC,CAAC;YACpF,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzG,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;QACvD,IAAI,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;YACzB,IAAI,MAAM,CAAC,sBAAsB,CAAC,KAAK,KAAK,IAAI,OAAO,MAAM,CAAC,YAAY,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC7H,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,CAAC,CAAC;YACtE,GAAG,CAAC,YAAY,CAAC,GAAG,MAAM,CAAC,WAAW,CACpC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAA4B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CACrH,CAAC;QACJ,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,sBAAsB,CAAC,KAAK,KAAK;YAAE,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,CAAC,CAAC;QACjJ,IAAI,MAAM,CAAC,sBAAsB,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,sBAAsB,CAAC,KAAK,KAAK;YAC1F,MAAM,IAAI,gBAAgB,CAAC,uCAAuC,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,OAAO,CAAC;YAAE,GAAG,CAAC,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACvE,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC;YAC3C,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,EAAE;oBAAE,MAAM,IAAI,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;gBACjH,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YAChE,CAAC;QACH,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,CAAC,CAAC,cAAc,CAAC,UAAmB,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AACD,MAAM,gBAAgB,GAAG,CAAC;KACvB,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtB,EAAE,EAAE,UAAU;IACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACjC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACjC,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAChD,WAAW,EAAE,UAAU,CAAC,QAAQ,EAAE;IAClC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC7D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;CACvE,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACtB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,eAAe,CAAC;QAC1E,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,4EAA4E,EAAE,CAAC,CAAC;IAC1H,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC;QAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,wCAAwC,EAAE,CAAC,CAAC;AAC5I,CAAC,CAAC,CAAC;AAGL,MAAM,UAAU,iBAAiB,CAAC,UAAmB,EAAE,MAAe,EAAE,IAAa;IACnF,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,aAAa,KAAK,MAAM;QAAE,MAAM,IAAI,gBAAgB,CAAC,gCAAgC,CAAC,CAAC;IACxH,OAAO,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;AACvI,CAAC;AACD,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;IAC1H,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,UAAU,EAAE,GAAG,KAAgC,CAAC;IACzE,OAAO,iBAAiB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACrD,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,SAA4B,EAAE,KAAc;IAChF,YAAY,CAAC,KAAK,CAAC,CAAC;IACpB,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,aAAsB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,gBAAgB,CAAC,0BAA0B,CAAC,CAAC;IACnE,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAE,KAAiC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;QAChH,MAAM,IAAI,gBAAgB,CAAC,8BAA8B,CAAC,CAAC;AAC/D,CAAC;AACD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,cAAc,EAAE,QAAQ;IACxB,OAAO,EAAE,QAAQ;IACjB,OAAO,EAAE,QAAQ;IACjB,UAAU,EAAE,QAAQ;IACpB,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;CACnB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACtB,WAAW,EAAE,UAAU;IACvB,eAAe,EAAE,MAAM;IACvB,aAAa,EAAE,MAAM;IACrB,MAAM,EAAE,wBAAwB;IAChC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,4CAA4C,EAAE,6CAA6C,CAAC,CAAC;CAC5G,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,iFAAiF;AACjF,MAAM,UAAU,wBAAwB,CACtC,MAA+B,EAC/B,SAA4B,EAC5B,OAAgB,EAChB,UAA8B,EAC9B,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAE1C,MAAM,CAAC,GAAG,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC;IAC5E,IACE,MAAM,CAAC,cAAc,CAAC,KAAK,IAAI;QAC/B,MAAM,CAAC,cAAc,CAAC,KAAK,SAAS;QACpC,MAAM,CAAC,sBAAsB,CAAC,KAAK,gBAAgB;QACnD,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,mBAAmB,CAAC;QAC7C,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO;QAC1C,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,UAAU;QAC7B,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,UAAU;QACnC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,GAAG,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE;QAClD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACrC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC;QAClC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,EAC3C,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,IACE,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,EAAE;QAC9B,CAAC,CAAC,eAAe,KAAK,cAAc,CAAC,SAAS,CAAC;QAC/C,CAAC,CAAC,aAAa,KAAK,cAAc,CAAC,OAAO,CAAC;QAC3C,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,cAAc,CAAC,wBAAwB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACvF,CAAC,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,6CAA6C,CAAC,CAAC,CAAC,4CAA4C,CAAC,EACxI,CAAC;QACD,MAAM,IAAI,gBAAgB,CAAC,qCAAqC,EAAE,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,qBAAqB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1C,OAAO,CAAC,CAAC;AACX,CAAC","sourcesContent":["import { createHash } from \"node:crypto\";\nimport { z } from \"zod\";\n\n/** Explicit opt-in. OpenAPI paths alone are never operator authority. */\nexport const OPERATOR_API_EXTENSION = \"x-uns-operator-operations\";\nexport const OPERATOR_DELEGATION_CLAIM = \"unsOperatorDelegation\";\nexport const OPERATOR_OUTCOME_HEADER = \"x-uns-operator-outcome\";\nexport const OPERATOR_AUTH_SCHEME = \"UNS-Operator\";\nexport const OPERATOR_JWT_TYPE = \"uns-operator-api+jwt\";\nexport const OPERATOR_JWT_AUDIENCE = \"uns-operator-api\";\nexport const OPERATOR_JWT_ALGORITHM = \"PS256\";\nexport const OPERATOR_JSON_MAX_BYTES = 65536;\nconst identifier = z\n  .string()\n  .min(1)\n  .max(120)\n  .regex(/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/);\nconst digest = z.string().regex(/^[a-f0-9]{64}$/);\nconst resource = z.string().min(1).max(256);\nconst localPath = z\n  .string()\n  .min(1)\n  .max(2048)\n  .refine(\n    (value) => /^\\/[a-zA-Z0-9_./-]+$/.test(value) && !value.includes(\"//\") && !value.split(\"/\").some((part) => part === \".\" || part === \"..\"),\n    \"Expected an exact local API path\",\n  );\n\nexport class OperatorApiError extends Error {\n  constructor(\n    public readonly code: string,\n    public readonly status = 400,\n  ) {\n    super(code);\n  }\n}\n\n/** Canonical bounded JSON is shared by reviews, wire claims and receipts.\n * Never hashes JSON with dropped undefined values or non-finite numbers. */\nexport function operatorJson(value: unknown): string {\n  let nodes = 0;\n  const visit = (item: unknown, depth: number): unknown => {\n    if (++nodes > 4096 || depth > 20) throw new OperatorApiError(\"operator_json_budget\");\n    if (item === null || typeof item === \"boolean\") return item;\n    if (typeof item === \"number\" && Number.isFinite(item)) return Object.is(item, -0) ? 0 : item;\n    if (typeof item === \"string\" && item.length <= 32768) return item;\n    if (Array.isArray(item) && item.length <= 1024) return item.map((entry) => visit(entry, depth + 1));\n    if (item && typeof item === \"object\" && [Object.prototype, null].includes(Object.getPrototypeOf(item))) {\n      const entries = Object.entries(item as Record<string, unknown>);\n      if (entries.length > 128) throw new OperatorApiError(\"operator_json_budget\");\n      return Object.fromEntries(\n        entries\n          .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))\n          .map(([key, entry]) => {\n            if (key.length > 256 || [\"__proto__\", \"prototype\", \"constructor\"].includes(key)) throw new OperatorApiError(\"operator_json_key\");\n            return [key, visit(entry, depth + 1)];\n          }),\n      );\n    }\n    throw new OperatorApiError(\"operator_json_value\");\n  };\n  const json = JSON.stringify(visit(value, 0));\n  if (Buffer.byteLength(json, \"utf8\") > OPERATOR_JSON_MAX_BYTES) throw new OperatorApiError(\"operator_json_budget\");\n  return json;\n}\nexport const operatorDigest = (value: unknown): string => createHash(\"sha256\").update(operatorJson(value)).digest(\"hex\");\n\n/** Protocol 1 deliberately excludes references, executable regex and extensions.\n * UUID format already enforces the standard UUID constraint without a pattern. */\nexport function operatorRequestSchema(value: unknown): Record<string, unknown> {\n  operatorJson(value);\n  const vocabulary = new Set([\n    \"$schema\",\n    \"type\",\n    \"properties\",\n    \"required\",\n    \"additionalProperties\",\n    \"items\",\n    \"minItems\",\n    \"maxItems\",\n    \"minLength\",\n    \"maxLength\",\n    \"minimum\",\n    \"maximum\",\n    \"exclusiveMinimum\",\n    \"exclusiveMaximum\",\n    \"multipleOf\",\n    \"format\",\n    \"const\",\n    \"enum\",\n    \"oneOf\",\n    \"anyOf\",\n    \"allOf\",\n    \"description\",\n    \"title\",\n    \"default\",\n    \"examples\",\n    \"pattern\",\n  ]);\n  let count = 0;\n  function schema(input: unknown, depth = 0): Record<string, unknown> {\n    if (++count > 256 || depth > 12 || !input || typeof input !== \"object\" || Array.isArray(input))\n      throw new OperatorApiError(\"operator_schema_budget\");\n    const source = input as Record<string, unknown>;\n    for (const key of Object.keys(source)) if (!vocabulary.has(key)) throw new OperatorApiError(\"operator_schema_keyword\");\n    const out = { ...source };\n    if (\"pattern\" in out) {\n      if (out[\"format\"] !== \"uuid\") throw new OperatorApiError(\"operator_schema_pattern\");\n      delete out[\"pattern\"];\n    }\n    if (out[\"format\"] && ![\"uuid\", \"date-time\", \"date\", \"time\", \"email\", \"uri\"].includes(String(out[\"format\"])))\n      throw new OperatorApiError(\"operator_schema_format\");\n    if (source[\"properties\"]) {\n      if (source[\"additionalProperties\"] !== false || typeof source[\"properties\"] !== \"object\" || Array.isArray(source[\"properties\"]))\n        throw new OperatorApiError(\"operator_schema_object_must_be_closed\");\n      out[\"properties\"] = Object.fromEntries(\n        Object.entries(source[\"properties\"] as Record<string, unknown>).map(([key, item]) => [key, schema(item, depth + 1)]),\n      );\n    }\n    if (source[\"type\"] === \"object\" && source[\"additionalProperties\"] !== false) throw new OperatorApiError(\"operator_schema_object_must_be_closed\");\n    if (source[\"additionalProperties\"] !== undefined && source[\"additionalProperties\"] !== false)\n      throw new OperatorApiError(\"operator_schema_object_must_be_closed\");\n    if (source[\"items\"]) out[\"items\"] = schema(source[\"items\"], depth + 1);\n    for (const key of [\"oneOf\", \"anyOf\", \"allOf\"])\n      if (source[key]) {\n        if (!Array.isArray(source[key]) || source[key].length > 16) throw new OperatorApiError(\"operator_schema_budget\");\n        out[key] = source[key].map((item) => schema(item, depth + 1));\n      }\n    return out;\n  }\n  const normalized = schema(value);\n  try {\n    z.fromJSONSchema(normalized as never);\n  } catch {\n    throw new OperatorApiError(\"operator_schema_unsupported\");\n  }\n  return normalized;\n}\nconst definitionSchema = z\n  .object({\n    protocol: z.literal(1),\n    id: identifier,\n    title: z.string().min(1).max(160),\n    kind: z.enum([\"read\", \"command\"]),\n    requestSchema: z.record(z.string(), z.unknown()),\n    writeDomain: identifier.optional(),\n    replay: z.literal(\"request-id-v1\").optional(),\n    timeoutMs: z.number().int().min(500).max(10000).default(5000),\n    maxResponseBytes: z.number().int().min(256).max(262144).default(65536),\n  })\n  .strict()\n  .superRefine((d, ctx) => {\n    if (d.kind === \"command\" && (!d.writeDomain || d.replay !== \"request-id-v1\"))\n      ctx.addIssue({ code: \"custom\", message: \"Commands require a write domain and application request-id receipt support\" });\n    if (d.kind === \"read\" && (d.writeDomain || d.replay)) ctx.addIssue({ code: \"custom\", message: \"Reads cannot declare command authority\" });\n  });\nexport type OperatorOperationDefinition = z.input<typeof definitionSchema>;\nexport type OperatorOperation = z.output<typeof definitionSchema> & { method: \"GET\" | \"POST\"; path: string };\nexport function operatorOperation(definition: unknown, method: unknown, path: unknown): OperatorOperation {\n  const parsed = definitionSchema.parse(definition);\n  const checkedMethod = z.enum([\"GET\", \"POST\"]).parse(method);\n  if (parsed.kind === \"command\" && checkedMethod !== \"POST\") throw new OperatorApiError(\"operator_command_requires_post\");\n  return { ...parsed, requestSchema: operatorRequestSchema(parsed.requestSchema), method: checkedMethod, path: localPath.parse(path) };\n}\nexport function operatorOperationFromWire(input: unknown): OperatorOperation {\n  if (!input || typeof input !== \"object\" || Array.isArray(input)) throw new OperatorApiError(\"operator_operation_invalid\");\n  const { method, path, ...definition } = input as Record<string, unknown>;\n  return operatorOperation(definition, method, path);\n}\nexport function assertOperatorPayload(operation: OperatorOperation, value: unknown): void {\n  operatorJson(value);\n  let valid = false;\n  try {\n    valid = z.fromJSONSchema(operation.requestSchema as never).safeParse(value).success;\n  } catch {\n    /* fail closed */\n  }\n  if (!valid) throw new OperatorApiError(\"operator_request_invalid\");\n  if (operation.kind === \"command\" && !z.uuid().safeParse((value as Record<string, unknown>)?.[\"requestId\"]).success)\n    throw new OperatorApiError(\"operator_request_id_required\");\n}\nexport const operatorDeploymentSchema = z\n  .object({\n    controllerName: resource,\n    rttNode: resource,\n    version: resource,\n    instanceId: resource,\n    launchId: z.uuid(),\n  })\n  .strict();\nexport type OperatorDeployment = z.infer<typeof operatorDeploymentSchema>;\nexport const operatorDelegationSchema = z\n  .object({\n    protocol: z.literal(1),\n    operationId: identifier,\n    operationDigest: digest,\n    requestDigest: digest,\n    target: operatorDeploymentSchema,\n    tool: z.enum([\"controller_read_runtime_operator_operation\", \"controller_execute_runtime_operator_command\"]),\n  })\n  .strict();\nexport type OperatorDelegation = z.infer<typeof operatorDelegationSchema>;\n\n/** Called only AFTER normal JWT cryptographic, expiry and route-grant checks. */\nexport function assertOperatorDelegation(\n  claims: Record<string, unknown>,\n  operation: OperatorOperation,\n  payload: unknown,\n  deployment: OperatorDeployment,\n  nowSeconds = Math.floor(Date.now() / 1000),\n): OperatorDelegation {\n  const d = operatorDelegationSchema.parse(claims[OPERATOR_DELEGATION_CLAIM]);\n  if (\n    claims[\"serviceToken\"] !== true ||\n    claims[\"identityType\"] !== \"machine\" ||\n    claims[\"workloadIdentityType\"] !== \"CONTROLLER_MCP\" ||\n    claims[\"sub\"] !== claims[\"machineIdentityId\"] ||\n    !z.uuid().safeParse(claims[\"sub\"]).success ||\n    !Number.isSafeInteger(claims[\"tokenVersion\"]) ||\n    Number(claims[\"tokenVersion\"]) < 1 ||\n    claims[\"role\"] !== \"operator\" ||\n    !Number.isSafeInteger(claims[\"iat\"]) ||\n    !Number.isSafeInteger(claims[\"exp\"]) ||\n    Number(claims[\"exp\"]) <= nowSeconds ||\n    Number(claims[\"iat\"]) > nowSeconds + 2 ||\n    Number(claims[\"exp\"]) - Number(claims[\"iat\"]) > 30 ||\n    Number(claims[\"exp\"]) <= Number(claims[\"iat\"]) ||\n    !Array.isArray(claims[\"accessRules\"]) ||\n    claims[\"accessRules\"].length !== 1 ||\n    claims[\"accessRules\"][0] !== operation.path\n  ) {\n    throw new OperatorApiError(\"operator_delegation_invalid\", 403);\n  }\n  if (\n    d.operationId !== operation.id ||\n    d.operationDigest !== operatorDigest(operation) ||\n    d.requestDigest !== operatorDigest(payload) ||\n    operatorDigest(d.target) !== operatorDigest(operatorDeploymentSchema.parse(deployment)) ||\n    d.tool !== (operation.kind === \"command\" ? \"controller_execute_runtime_operator_command\" : \"controller_read_runtime_operator_operation\")\n  ) {\n    throw new OperatorApiError(\"operator_delegation_binding_changed\", 403);\n  }\n  assertOperatorPayload(operation, payload);\n  return d;\n}\n"]}

package/dist/runtime/process-group-authorization.d.ts

@@ -22,8 +22,8 @@ export declare const processGroupAuthorizationSchema: z.ZodObject<{
         instanceId: z.ZodString;
         processName: z.ZodString;
         role: z.ZodEnum<{
-            source: "source";
             target: "target";
+            source: "source";
             receiver: "receiver";
         }>;
         configurationSha256: z.ZodString;
@@ -75,8 +75,8 @@ export declare const hvAuthorizationSchema: z.ZodObject<{
             [x: string]: string;
         }>;
         role: z.ZodEnum<{
-            source: "source";
             target: "target";
+            source: "source";
             receiver: "receiver";
         }>;
         configurationSha256: z.ZodString;

package/dist/runtime/process-group-control-contract.d.ts

@@ -46,8 +46,8 @@ export declare const groupMemberCommandSchema: z.ZodObject<{
     }, z.core.$strict>;
     operationId: z.ZodString;
     role: z.ZodEnum<{
-        source: "source";
         target: "target";
+        source: "source";
     }>;
     expectedConfigurationChecksum: z.ZodOptional<z.ZodString>;
     requestId: z.ZodOptional<z.ZodString>;