@vendoai/apps 0.4.0

package/dist/machine-lifecycle.js

@@ -0,0 +1,360 @@
+import { VendoError, safeErrorMessage, } from "@vendoai/core";
+import { rowFromRecord, updateAppRow } from "./persistence.js";
+/** Execution-v2 wake/sleep policy: auto-sleep after 5 minutes idle. */
+const DEFAULT_IDLE_MS = 5 * 60_000;
+export const createMachineLifecycle = (config) => {
+    const records = config.store.records("vendo_apps");
+    const buildEnv = config.buildEnv ?? (() => ({}));
+    const idleMs = config.idleMs ?? DEFAULT_IDLE_MS;
+    const clock = config.clock ?? {
+        setTimeout: (fn, ms) => globalThis.setTimeout(fn, ms),
+        clearTimeout: (handle) => globalThis.clearTimeout(handle),
+    };
+    const live = new Map();
+    const waking = new Map();
+    const provisioning = new Map();
+    const requireAdapter = () => {
+        if (config.sandbox === undefined) {
+            throw new VendoError("sandbox-unavailable", "sandbox execution is unavailable");
+        }
+        return config.sandbox;
+    };
+    /** Authoritative document read — the caller's copy may predate a sleep's re-snapshot. */
+    const currentDocument = async (appId) => {
+        const record = await records.get(appId);
+        if (record === null) {
+            throw new VendoError("not-found", `app ${appId} does not exist`, { appId });
+        }
+        return rowFromRecord(record).doc;
+    };
+    /** Read-mutate-CAS on the app row; the store's revision receipt arbitrates racers. */
+    const updateDocument = (appId, mutate) => updateAppRow(records, appId, mutate);
+    const armIdleTimer = (appId) => {
+        const entry = live.get(appId);
+        if (entry === undefined)
+            return;
+        if (entry.timer !== undefined)
+            clock.clearTimeout(entry.timer);
+        entry.timer = clock.setTimeout(() => {
+            // A request still inside the box means the machine is not idle: a request
+            // outliving idleMs must never be snapshotted mid-flight. Its completion
+            // re-arms; this re-arm only covers a request outliving several idleMs.
+            if ((live.get(appId)?.inflight ?? 0) > 0) {
+                armIdleTimer(appId);
+                return;
+            }
+            void sleepById(appId).catch(() => undefined);
+        }, idleMs);
+    };
+    /** The seam's dead-machine signal (sandbox.ts): a request() throwing
+     *  not-found means the PROVIDER lost the machine (TTL, sweep) — an app-level
+     *  status never throws through the seam. */
+    const isMachineGone = (error) => error instanceof VendoError && error.code === "not-found";
+    /** One tracked request against a specific live raw machine (no recovery). */
+    const requestOnce = async (appId, raw, req) => {
+        const entry = live.get(appId);
+        const tracked = entry !== undefined && entry.raw === raw;
+        if (tracked)
+            entry.inflight += 1;
+        armIdleTimer(appId);
+        try {
+            return await raw.request(req);
+        }
+        finally {
+            if (tracked)
+                entry.inflight -= 1;
+            armIdleTimer(appId);
+        }
+    };
+    /** Wave 7 — drop a live entry whose provider state died out from under us.
+     *  Guarded on the exact raw machine so a racing recovery (or a fresh wake)
+     *  is never evicted by a stale handle's late failure. */
+    const evictDead = async (appId, raw) => {
+        const entry = live.get(appId);
+        if (entry === undefined || entry.raw !== raw)
+            return;
+        live.delete(appId);
+        if (entry.timer !== undefined)
+            clock.clearTimeout(entry.timer);
+        // Best-effort: the provider already reaped it; never snapshot a dead box.
+        await entry.raw.destroy().catch(() => undefined);
+    };
+    /** Every request through the machine counts as activity and re-arms the idle
+     *  timer. A dead-machine failure (provider TTL/sweep) evicts the live entry
+     *  and retries ONCE from the durable snapshot ref; a second failure
+     *  surfaces. */
+    const withIdleTracking = (appId, raw) => ({
+        id: raw.id,
+        request: async (req) => {
+            try {
+                return await requestOnce(appId, raw, req);
+            }
+            catch (error) {
+                if (!isMachineGone(error))
+                    throw error;
+                await evictDead(appId, raw);
+                // Re-wake from the stored snapshot ref (concurrent recoveries coalesce
+                // on the waking single-flight); the retry targets the fresh raw
+                // machine directly so a second dead-machine failure surfaces instead
+                // of recursing into another recovery.
+                await wakeById(appId);
+                const fresh = live.get(appId);
+                if (fresh === undefined)
+                    throw error;
+                return await requestOnce(appId, fresh.raw, req);
+            }
+        },
+        url: (port) => raw.url(port),
+        snapshot: () => raw.snapshot(),
+        stop: () => raw.stop(),
+        destroy: () => raw.destroy(),
+    });
+    /** Remove an app's live entry (if any), cancel its timer, and return it. */
+    const takeLive = async (appId) => {
+        const pending = waking.get(appId);
+        if (pending !== undefined)
+            await pending.catch(() => undefined);
+        const entry = live.get(appId);
+        if (entry === undefined)
+            return undefined;
+        live.delete(appId);
+        if (entry.timer !== undefined)
+            clock.clearTimeout(entry.timer);
+        return entry;
+    };
+    const sleepById = async (appId) => {
+        const entry = await takeLive(appId);
+        if (entry === undefined)
+            return null;
+        try {
+            const snapshotRef = await entry.raw.snapshot();
+            // provisionedAt keeps recording provisioning; only the ref moves forward.
+            // A machine field cleared by a concurrent destroy stays cleared.
+            let superseded;
+            const updated = await updateDocument(appId, (doc) => {
+                if (doc.machine === undefined)
+                    return doc;
+                superseded = doc.machine.snapshotRef;
+                return { ...doc, machine: { ...doc.machine, snapshotRef } };
+            });
+            // Snapshots are independent provider resources: release whichever ref
+            // lost — the superseded one normally, or ours if a concurrent destroy
+            // cleared the field while we were snapshotting.
+            const orphan = updated.machine?.snapshotRef === snapshotRef ? superseded : snapshotRef;
+            if (orphan !== undefined && orphan !== updated.machine?.snapshotRef) {
+                await config.sandbox?.destroy(orphan).catch(() => undefined);
+            }
+            return updated;
+        }
+        finally {
+            // snapshot() leaves the source machine RUNNING (e2b semantics): the
+            // checkpoint is what survives, so the live source is destroyed — a mere
+            // stop would leave a paused provider resource lingering beside the ref.
+            await entry.raw.destroy().catch(() => undefined);
+        }
+    };
+    const provision = async (app) => {
+        const inflight = provisioning.get(app.id);
+        if (inflight !== undefined)
+            return inflight;
+        const run = (async () => {
+            const doc = await currentDocument(app.id);
+            if (doc.machine !== undefined)
+                return doc;
+            const adapter = requireAdapter();
+            // Lane E — the egress policy gates provisioning BEFORE any provider
+            // call: an unapproved declared domain throws here and no machine exists.
+            const allowlist = await config.allowedDomains?.(doc);
+            const machine = await adapter.create({
+                ...(config.template === undefined ? {} : { template: config.template }),
+                env: await buildEnv(doc),
+                ...(allowlist === undefined ? {} : { allowedDomains: allowlist }),
+            });
+            try {
+                const snapshotRef = await machine.snapshot();
+                const provisionedAt = new Date().toISOString();
+                // A CAS retry can re-read a document another app server already
+                // provisioned; the winner's machine stays, and our snapshot is released.
+                const updated = await updateDocument(app.id, (current) => current.machine === undefined
+                    ? { ...current, machine: { snapshotRef, provisionedAt } }
+                    : current);
+                if (updated.machine?.snapshotRef !== snapshotRef) {
+                    await adapter.destroy(snapshotRef).catch(() => undefined);
+                }
+                return updated;
+            }
+            finally {
+                // Provision ends asleep: the snapshot IS the machine until a wake, and
+                // snapshot() leaves the source running — destroy it, don't just stop.
+                await machine.destroy().catch(() => undefined);
+            }
+        })();
+        provisioning.set(app.id, run);
+        try {
+            return await run;
+        }
+        finally {
+            provisioning.delete(app.id);
+        }
+    };
+    const wake = async (app) => wakeById(app.id);
+    /**
+     * Wave 7 — rebuild a machine's boundary env when its document carries the
+     * env-stale marker (a secret grant changed after the last injection), then
+     * clear the marker. Clearing is guarded on the marker VALUE seen — a grant
+     * committed during the rebuild keeps its own fresher marker for the next
+     * wake (markers are strictly increasing, so values never collide). A failed
+     * clear is benign: the env is fresh and the re-push is idempotent. Throws
+     * on injection failure; the CALLER owns tearing the machine down (fail
+     * closed — a box we cannot re-police must not serve).
+     */
+    const rebuildStaleEnv = async (appId, doc, machine) => {
+        const staleAt = doc.machine?.envStaleAt;
+        if (staleAt === undefined || config.injectEnv === undefined)
+            return;
+        try {
+            await config.injectEnv(machine, await buildEnv(doc));
+        }
+        catch (error) {
+            throw new VendoError("sandbox-unavailable", `machine env rebuild failed for ${appId} after a grant change`, { appId, reason: safeErrorMessage(error) });
+        }
+        await updateDocument(appId, (current) => {
+            if (current.machine === undefined || current.machine.envStaleAt !== staleAt)
+                return current;
+            const { envStaleAt: _stale, ...rest } = current.machine;
+            return { ...current, machine: rest };
+        }).catch(() => undefined);
+    };
+    const wakeById = async (appId) => {
+        const entry = live.get(appId);
+        if (entry !== undefined) {
+            // Lane E — a live machine answers to the CURRENT policy too: a
+            // declaration that lost (or never had) approval refuses here rather
+            // than riding the warm entry. (A running provider machine's network
+            // policy cannot be re-tightened in place — the refusal plus the idle
+            // sleep is the containment; the next wake re-applies the policy.)
+            // Evaluated over the authoritative row, not the caller's copy — a
+            // grant committed since the caller loaded its document must count.
+            if (config.allowedDomains !== undefined || config.injectEnv !== undefined) {
+                const doc = await currentDocument(appId);
+                if (config.allowedDomains !== undefined)
+                    await config.allowedDomains(doc);
+                // Wave 7 — a durable env-stale marker written by ANOTHER process
+                // (whose grant commit cannot reach this process's live entry to
+                // sleep it) must not ride the warm entry until the idle sweep.
+                try {
+                    await rebuildStaleEnv(appId, doc, entry.raw);
+                }
+                catch (error) {
+                    const taken = await takeLive(appId);
+                    await taken?.raw.destroy().catch(() => undefined);
+                    throw error;
+                }
+            }
+            armIdleTimer(appId);
+            return entry.wrapped;
+        }
+        const pending = waking.get(appId);
+        if (pending !== undefined)
+            return pending;
+        const run = (async () => {
+            const doc = await currentDocument(appId);
+            if (doc.machine === undefined) {
+                throw new VendoError("validation", `app ${appId} has no machine to wake`, { appId });
+            }
+            const adapter = requireAdapter();
+            // Lane E — a wake applies the CURRENT egress policy over the snapshot's
+            // stored one (grants may have changed while the machine slept); it also
+            // refuses loudly when a declared domain lost or never had approval.
+            const raw = config.allowedDomains === undefined
+                ? await adapter.resume(doc.machine.snapshotRef)
+                : await adapter.resume(doc.machine.snapshotRef, {
+                    allowedDomains: await config.allowedDomains(doc),
+                });
+            // Wave 7 — a grant changed while the machine slept: the resumed snapshot
+            // carries the OLD env (every provider restores snapshot env), so rebuild
+            // the boundary env through the control port before anything rides this
+            // wake. A failed rebuild fails the wake CLOSED — registering the machine
+            // live would let a revoked secret keep serving until the idle sweep. The
+            // marker and the document ref survive, so the next wake retries.
+            try {
+                await rebuildStaleEnv(appId, doc, raw);
+            }
+            catch (error) {
+                await raw.destroy().catch(() => undefined);
+                throw error;
+            }
+            const wrapped = withIdleTracking(appId, raw);
+            live.set(appId, { raw, wrapped, inflight: 0 });
+            armIdleTimer(appId);
+            return wrapped;
+        })();
+        waking.set(appId, run);
+        try {
+            return await run;
+        }
+        finally {
+            waking.delete(appId);
+        }
+    };
+    const sleep = async (app) => {
+        const slept = await sleepById(app.id);
+        return slept ?? await currentDocument(app.id);
+    };
+    const discard = async (app) => {
+        // Rollback: take the live machine off the books and destroy it WITHOUT a
+        // snapshot, so the document keeps pointing at its pre-edit ref. A mere
+        // stop would leave a paused provider resource beside the untouched ref.
+        const entry = await takeLive(app.id);
+        if (entry !== undefined)
+            await entry.raw.destroy().catch(() => undefined);
+    };
+    const destroyMachine = async (app) => {
+        const doc = await currentDocument(app.id);
+        if (doc.machine === undefined && !live.has(app.id) && !waking.has(app.id)) {
+            return doc;
+        }
+        const adapter = requireAdapter();
+        const entry = await takeLive(app.id);
+        // A live machine is its own provider resource — destroy it, not just stop.
+        if (entry !== undefined)
+            await entry.raw.destroy().catch(() => undefined);
+        // Clear the field FIRST, capturing the ref from the winning write: a sleep
+        // racing this destroy may have just stored a newer ref, and destroying a
+        // stale read's ref would orphan the newer snapshot.
+        let clearedRef;
+        const updated = await updateDocument(app.id, (current) => {
+            clearedRef = current.machine?.snapshotRef;
+            const { machine: _machine, ...rest } = current;
+            return rest;
+        });
+        if (clearedRef !== undefined)
+            await adapter.destroy(clearedRef);
+        return updated;
+    };
+    const buildAppEnv = async (app) => buildEnv(await currentDocument(app.id));
+    const destroyResources = async (app) => {
+        const entry = await takeLive(app.id);
+        if (entry !== undefined)
+            await entry.raw.destroy().catch(() => undefined);
+        // Read the stored ref (the caller's copy may predate a sleep's re-snapshot)
+        // and reap it directly — no document write, so a machine-cleared tree that
+        // still names fn: refs cannot fail validation and strand the snapshot.
+        const doc = await currentDocument(app.id).catch(() => app);
+        const ref = doc.machine?.snapshotRef;
+        if (ref !== undefined)
+            await config.sandbox?.destroy(ref).catch(() => undefined);
+    };
+    return {
+        available: () => config.sandbox !== undefined,
+        peek: (appId) => live.get(appId)?.wrapped,
+        provision,
+        wake,
+        sleep,
+        discard,
+        destroyMachine,
+        destroyResources,
+        buildAppEnv,
+    };
+};
+//# sourceMappingURL=machine-lifecycle.js.map

package/dist/machine-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"machine-lifecycle.js","sourceRoot":"","sources":["../src/machine-lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,gBAAgB,GAIjB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAG/D,uEAAuE;AACvE,MAAM,eAAe,GAAG,CAAC,GAAG,MAAM,CAAC;AAuHnC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,MAA8B,EAAoB,EAAE;IACzF,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAoB,MAAM,CAAC,QAAQ,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,eAAe,CAAC;IAChD,MAAM,KAAK,GAAmB,MAAM,CAAC,KAAK,IAAI;QAC5C,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC;QACrD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,MAAuD,CAAC;KAC3G,CAAC;IAEF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkC,CAAC;IACzD,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE5D,MAAM,cAAc,GAAG,GAAmB,EAAE;QAC1C,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,IAAI,UAAU,CAAC,qBAAqB,EAAE,kCAAkC,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC,CAAC;IAEF,yFAAyF;IACzF,MAAM,eAAe,GAAG,KAAK,EAAE,KAAY,EAAwB,EAAE;QACnE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,UAAU,CAAC,WAAW,EAAE,OAAO,KAAK,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC;IACnC,CAAC,CAAC;IAEF,sFAAsF;IACtF,MAAM,cAAc,GAAG,CACrB,KAAY,EACZ,MAAyC,EACnB,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAEhE,MAAM,YAAY,GAAG,CAAC,KAAY,EAAQ,EAAE;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO;QAChC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE;YAClC,0EAA0E;YAC1E,wEAAwE;YACxE,uEAAuE;YACvE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzC,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/C,CAAC,EAAE,MAAM,CAAC,CAAC;IACb,CAAC,CAAC;IAEF;;gDAE4C;IAC5C,MAAM,aAAa,GAAG,CAAC,KAAc,EAAW,EAAE,CAChD,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,CAAC;IAE5D,6EAA6E;IAC7E,MAAM,WAAW,GAAG,KAAK,EACvB,KAAY,EACZ,GAAmB,EACnB,GAA6C,EACY,EAAE;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,OAAO,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG,CAAC;QACzD,IAAI,OAAO;YAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;QACjC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YACjC,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC,CAAC;IAEF;;6DAEyD;IACzD,MAAM,SAAS,GAAG,KAAK,EAAE,KAAY,EAAE,GAAmB,EAAiB,EAAE;QAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;YAAE,OAAO;QACrD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,0EAA0E;QAC1E,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC;IAEF;;;oBAGgB;IAChB,MAAM,gBAAgB,GAAG,CAAC,KAAY,EAAE,GAAmB,EAAkB,EAAE,CAAC,CAAC;QAC/E,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,IAAI,CAAC;gBACH,OAAO,MAAM,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;oBAAE,MAAM,KAAK,CAAC;gBACvC,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC5B,uEAAuE;gBACvE,gEAAgE;gBAChE,qEAAqE;gBACrE,sCAAsC;gBACtC,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;gBACtB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC9B,IAAI,KAAK,KAAK,SAAS;oBAAE,MAAM,KAAK,CAAC;gBACrC,OAAO,MAAM,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;QACD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;QAC5B,QAAQ,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;QAC9B,IAAI,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE;QACtB,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE;KAC7B,CAAC,CAAC;IAEH,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAY,EAAkC,EAAE;QACtE,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC/D,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,EAAE,KAAY,EAA+B,EAAE;QACpE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC/C,0EAA0E;YAC1E,iEAAiE;YACjE,IAAI,UAA8B,CAAC;YACnC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE,EAAE;gBAClD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;oBAAE,OAAO,GAAG,CAAC;gBAC1C,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;gBACrC,OAAO,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,EAAE,CAAC;YAC9D,CAAC,CAAC,CAAC;YACH,sEAAsE;YACtE,sEAAsE;YACtE,gDAAgD;YAChD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW,KAAK,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;YACvF,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC;gBACpE,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC/D,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;gBAAS,CAAC;YACT,oEAAoE;YACpE,wEAAwE;YACxE,wEAAwE;YACxE,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnD,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,SAAS,GAAG,KAAK,EAAE,GAAgB,EAAwB,EAAE;QACjE,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,QAAQ,CAAC;QAC5C,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE;YACtB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1C,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,GAAG,CAAC;YAC1C,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;YACjC,oEAAoE;YACpE,yEAAyE;YACzE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,GAAG,CAAC,CAAC;YACrD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,CAAC;gBACnC,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACvE,GAAG,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC;gBACxB,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC;aAClE,CAAC,CAAC;YACH,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC7C,MAAM,aAAa,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;gBAC/C,gEAAgE;gBAChE,yEAAyE;gBACzE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS;oBACrF,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,EAAE,WAAW,EAAE,aAAa,EAAE,EAAE;oBACzD,CAAC,CAAC,OAAO,CAAC,CAAC;gBACb,IAAI,OAAO,CAAC,OAAO,EAAE,WAAW,KAAK,WAAW,EAAE,CAAC;oBACjD,MAAM,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC5D,CAAC;gBACD,OAAO,OAAO,CAAC;YACjB,CAAC;oBAAS,CAAC;gBACT,uEAAuE;gBACvE,sEAAsE;gBACtE,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YACjD,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,GAAgB,EAA2B,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAEnF;;;;;;;;;OASG;IACH,MAAM,eAAe,GAAG,KAAK,EAC3B,KAAY,EACZ,GAAgB,EAChB,OAAuB,EACR,EAAE;QACjB,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO;QACpE,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,UAAU,CAClB,qBAAqB,EACrB,kCAAkC,KAAK,uBAAuB,EAC9D,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAC3C,CAAC;QACJ,CAAC;QACD,MAAM,cAAc,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;YACtC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,KAAK,OAAO;gBAAE,OAAO,OAAO,CAAC;YAC5F,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;YACxD,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACvC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAY,EAA2B,EAAE;QAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,+DAA+D;YAC/D,oEAAoE;YACpE,oEAAoE;YACpE,qEAAqE;YACrE,kEAAkE;YAClE,kEAAkE;YAClE,mEAAmE;YACnE,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC1E,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;gBACzC,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;oBAAE,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;gBAC1E,iEAAiE;gBACjE,gEAAgE;gBAChE,+DAA+D;gBAC/D,IAAI,CAAC;oBACH,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC/C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;oBACpC,MAAM,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;oBAClD,MAAM,KAAK,CAAC;gBACd,CAAC;YACH,CAAC;YACD,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,KAAK,CAAC,OAAO,CAAC;QACvB,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC1C,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE;YACtB,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC9B,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,OAAO,KAAK,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YACvF,CAAC;YACD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;YACjC,wEAAwE;YACxE,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,GAAG,GAAG,MAAM,CAAC,cAAc,KAAK,SAAS;gBAC7C,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC;gBAC/C,CAAC,CAAC,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE;oBAC9C,cAAc,EAAE,MAAM,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC;iBACjD,CAAC,CAAC;YACL,yEAAyE;YACzE,yEAAyE;YACzE,uEAAuE;YACvE,yEAAyE;YACzE,yEAAyE;YACzE,iEAAiE;YACjE,IAAI,CAAC;gBACH,MAAM,eAAe,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;YACzC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC;YAC/C,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,OAAO,CAAC;QACjB,CAAC,CAAC,EAAE,CAAC;QACL,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACvB,IAAI,CAAC;YACH,OAAO,MAAM,GAAG,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,EAAE,GAAgB,EAAwB,EAAE;QAC7D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtC,OAAO,KAAK,IAAI,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EAAE,GAAgB,EAAiB,EAAE;QACxD,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAAE,GAAgB,EAAwB,EAAE;QACtE,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1E,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,OAAO,GAAG,cAAc,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,2EAA2E;QAC3E,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1E,2EAA2E;QAC3E,yEAAyE;QACzE,oDAAoD;QACpD,IAAI,UAA8B,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE;YACvD,UAAU,GAAG,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC;YAC1C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;YAC/C,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,IAAI,UAAU,KAAK,SAAS;YAAE,MAAM,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChE,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,KAAK,EAAE,GAAgB,EAAmC,EAAE,CAC9E,QAAQ,CAAC,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAE1C,MAAM,gBAAgB,GAAG,KAAK,EAAE,GAAgB,EAAiB,EAAE;QACjE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1E,4EAA4E;QAC5E,2EAA2E;QAC3E,uEAAuE;QACvE,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC;QACrC,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnF,CAAC,CAAC;IAEF,OAAO;QACL,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;QAC7C,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO;QACzC,SAAS;QACT,IAAI;QACJ,KAAK;QACL,OAAO;QACP,cAAc;QACd,gBAAgB;QAChB,WAAW;KACZ,CAAC;AACJ,CAAC,CAAC"}

package/dist/manifest.d.ts

@@ -0,0 +1,42 @@
+import { z } from "zod";
+export interface VendoManifestSchedule {
+    cron: string;
+    fn: string;
+}
+export interface VendoManifest {
+    schedules?: VendoManifestSchedule[];
+    egress?: string[];
+}
+/** Strict on every level: an unknown key is a loud validation error, so a
+ * manifest written against a future contract fails at the seam that reads it
+ * instead of being silently half-honored. */
+export declare const vendoManifestSchema: z.ZodObject<{
+    schedules: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        cron: z.ZodEffects<z.ZodString, string, string>;
+        fn: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        cron: string;
+        fn: string;
+    }, {
+        cron: string;
+        fn: string;
+    }>, "many">>;
+    egress: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+}, "strict", z.ZodTypeAny, {
+    egress?: string[] | undefined;
+    schedules?: {
+        cron: string;
+        fn: string;
+    }[] | undefined;
+}, {
+    egress?: string[] | undefined;
+    schedules?: {
+        cron: string;
+        fn: string;
+    }[] | undefined;
+}>;
+/** Parse + validate a `vendo.json` source. Every seam that reads the manifest
+ * calls this; an invalid manifest is a loud VendoError("validation"), never a
+ * silently-dropped declaration. */
+export declare function parseVendoManifest(source: string): VendoManifest;
+//# sourceMappingURL=manifest.d.ts.map

package/dist/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsBxB,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACpC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB;AAED;;6CAE6C;AAC7C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;EAYc,CAAC;AAE/C;;mCAEmC;AACnC,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,aAAa,CAchE"}

package/dist/manifest.js

@@ -0,0 +1,53 @@
+import { VendoError } from "@vendoai/core";
+import { z } from "zod";
+/** execution-v2 spec ("The skin of the box") — `vendo.json`, the manifest an
+ * app ships at its box root. v2 carries exactly two declarations and nothing
+ * else (YAGNI): `schedules` ("at this cron, POST /fn/<name>"), read by the
+ * scheduler broker (Wave 2 Lane D), and `egress`, the outbound-domain
+ * allowlist the sandbox network layer enforces (Wave 2 Lane E). Declarative
+ * only — no runtime library is required inside the box. */
+/** The fn-name half of core's 01 §8 `fn:<name>` grammar, bounded like tool
+ * route names — a schedule targets `POST /fn/<name>`, never a `fn:` ref. */
+const FN_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_-]{0,63}$/;
+/** Five whitespace-separated cron fields ("0 8 * * *"). Field syntax stays the
+ * broker's concern; the manifest gate pins the shape so a typo\'d schedule
+ * fails at parse time, not silently at fire time. */
+const CRON_FIELD_PATTERN = /^[0-9A-Za-z*,/-]+$/;
+const isCronExpression = (value) => {
+    const fields = value.trim().split(/\s+/);
+    return fields.length === 5 && fields.every((field) => CRON_FIELD_PATTERN.test(field));
+};
+/** Strict on every level: an unknown key is a loud validation error, so a
+ * manifest written against a future contract fails at the seam that reads it
+ * instead of being silently half-honored. */
+export const vendoManifestSchema = z.object({
+    schedules: z.array(z.object({
+        cron: z.string().refine(isCronExpression, {
+            message: "cron must be five whitespace-separated fields (e.g. \"0 8 * * *\")",
+        }),
+        fn: z.string().regex(FN_NAME_PATTERN, {
+            message: "fn must be a bare fn name (POST /fn/<name> target), matching [A-Za-z_][A-Za-z0-9_-]{0,63}",
+        }),
+    }).strict()).optional(),
+    egress: z.array(z.string().min(1)).optional(),
+}).strict();
+/** Parse + validate a `vendo.json` source. Every seam that reads the manifest
+ * calls this; an invalid manifest is a loud VendoError("validation"), never a
+ * silently-dropped declaration. */
+export function parseVendoManifest(source) {
+    let raw;
+    try {
+        raw = JSON.parse(source);
+    }
+    catch {
+        throw new VendoError("validation", "vendo.json is not valid JSON");
+    }
+    const parsed = vendoManifestSchema.safeParse(raw);
+    if (!parsed.success) {
+        const issue = parsed.error.issues[0];
+        const path = issue === undefined || issue.path.length === 0 ? "manifest" : issue.path.join(".");
+        throw new VendoError("validation", `invalid vendo.json: ${path}: ${issue?.message ?? "invalid"}`);
+    }
+    return parsed.data;
+}
+//# sourceMappingURL=manifest.js.map

package/dist/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../src/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;2DAK2D;AAE3D;4EAC4E;AAC5E,MAAM,eAAe,GAAG,gCAAgC,CAAC;AAEzD;;qDAEqD;AACrD,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAChD,MAAM,gBAAgB,GAAG,CAAC,KAAa,EAAW,EAAE;IAClD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACxF,CAAC,CAAC;AAYF;;6CAE6C;AAC7C,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAChB,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE;YACxC,OAAO,EAAE,oEAAoE;SAC9E,CAAC;QACF,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE;YACpC,OAAO,EAAE,2FAA2F;SACrG,CAAC;KACH,CAAC,CAAC,MAAM,EAAE,CACZ,CAAC,QAAQ,EAAE;IACZ,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC,MAAM,EAAqC,CAAC;AAE/C;;mCAEmC;AACnC,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,8BAA8B,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChG,MAAM,IAAI,UAAU,CAAC,YAAY,EAAE,uBAAuB,IAAI,KAAK,KAAK,EAAE,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC;IACpG,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC"}

package/dist/open.d.ts

@@ -0,0 +1,45 @@
+import { VendoError, type AppDocument, type Json, type RunContext, type TreeV2 } from "@vendoai/core";
+import type { AppCaller } from "./call.js";
+import type { InClientVenueState } from "./inclient.js";
+import { type PinBaseline } from "./pins.js";
+import type { OpenSurface } from "./runtime.js";
+export interface ProgressiveQueryResolver {
+    update(tree: TreeV2): void;
+    complete(): Promise<Record<string, Json>>;
+}
+/**
+ * Start queries as soon as they appear. Results may arrive in any order, but
+ * every emitted/final data model is rebuilt in source order so later queries
+ * retain the same deterministic last-write behavior as the old serial loop.
+ */
+export declare const createProgressiveQueryResolver: (caller: AppCaller, app: AppDocument, ctx: RunContext, onData?: (data: Record<string, Json>) => void) => ProgressiveQueryResolver;
+/**
+ * 06-apps §§8–9 — the in-client venue field and the pin-drift report are
+ * SERVER-AUTHORITATIVE. The stored tree is model-written or imported from an
+ * untrusted `.vendoapp`, so a forged `inClient` or `pinDrift` riding the
+ * document must never reach the client: strip both before the verified
+ * verdict and the computed drift (when any) are attached — and strip at
+ * persist time too (the runtime shares this helper), streamed or at rest.
+ */
+export declare const stripServerAuthoritativeFields: <T extends object>(payload: T) => T;
+/**
+ * execution-v2 Wave 4 — the layer-3 served surface seam the runtime injects:
+ * `enabled` mirrors the host's experimental flag, and `urlFor` wakes the app's
+ * machine (wake-on-open) and resolves its public ingress URL for $PORT.
+ */
+export interface ServedSurface {
+    enabled: boolean;
+    urlFor(app: AppDocument): Promise<string>;
+}
+/** Wave 4 — the one refusal for every layer-3 path while the flag is off. */
+export declare const servedAppsDisabledError: () => VendoError;
+/** Wave 9 — the one refusal for NEW layer-2 box work while machines are off
+ *  (same house pattern as {@link servedAppsDisabledError}). The escalation
+ *  ladder only lands here when no automation can express the request, so the
+ *  message says exactly that instead of silently degrading to a broken
+ *  automation. Already-provisioned machines are never gated by this — only
+ *  new graduation/provisioning is. */
+export declare const machinesDisabledError: () => VendoError;
+/** 06-apps §§1–2 — construct the open surface. */
+export declare const createAppOpener: (caller: AppCaller, pinBaselines?: readonly PinBaseline[], inClientVenue?: (app: AppDocument) => Promise<InClientVenueState | undefined>, served?: ServedSurface) => ((app: AppDocument, ctx: RunContext) => Promise<OpenSurface>);
+//# sourceMappingURL=open.d.ts.map

package/dist/open.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open.d.ts","sourceRoot":"","sources":["../src/open.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,UAAU,EAEV,KAAK,WAAW,EAChB,KAAK,IAAI,EACT,KAAK,UAAU,EAEf,KAAK,MAAM,EAEZ,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxD,OAAO,EAAoC,KAAK,WAAW,EAAiB,MAAM,WAAW,CAAC;AAC9F,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAiFhD,MAAM,WAAW,wBAAwB;IACvC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;CAC3C;AAED;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,GACzC,QAAQ,SAAS,EACjB,KAAK,WAAW,EAChB,KAAK,UAAU,EACf,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,IAAI,KAC5C,wBAwDF,CAAC;AAEF;;;;;;;GAOG;AACH,eAAO,MAAM,8BAA8B,GAAI,CAAC,SAAS,MAAM,EAAE,SAAS,CAAC,KAAG,CAI7E,CAAC;AAwBF;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC3C;AAED,6EAA6E;AAC7E,eAAO,MAAM,uBAAuB,QAAO,UAI1C,CAAC;AAEF;;;;;sCAKsC;AACtC,eAAO,MAAM,qBAAqB,QAAO,UAIxC,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,eAAe,GAC1B,QAAQ,SAAS,EACjB,eAAc,SAAS,WAAW,EAAO,EACzC,gBAAgB,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,EAC7E,SAAS,aAAa,KACrB,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,WAAW,CAAC,CA+D9D,CAAC"}