@weave-kit/engine 0.1.0

package/dist/runtime/tools/policies.js

@@ -0,0 +1,107 @@
+import { readdir, stat } from 'node:fs/promises';
+import { join } from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { evaluatePolicies } from '../../core/index.js';
+/** deterministic approval key (repeat calls don't duplicate) — mirror of the executor helper */
+export function policyApprovalKey(actorKey, action, args) {
+    const raw = JSON.stringify([actorKey, action, args]);
+    let hash = 0;
+    for (let i = 0; i < raw.length; i += 1) {
+        hash = (hash << 5) - hash + raw.charCodeAt(i);
+        hash |= 0;
+    }
+    return `ap-${Math.abs(hash).toString(36)}`;
+}
+/**
+ * Run the decision pipeline and resolve the approval lifecycle for one call:
+ * already approved → allow (client retry path); rejected → deny; unknown →
+ * enqueue pending → report `pending`. The caller (executor) turns deny/pending
+ * into isError results + audits.
+ */
+export async function evaluateCall(policies, approvals, ctx) {
+    if (policies.length === 0)
+        return { kind: 'allow' };
+    const decision = await evaluatePolicies(policies, ctx);
+    if (decision.allow === false) {
+        if ('requireApproval' in decision) {
+            const key = decision.approvalKey ?? policyApprovalKey(ctx.actor.key, ctx.action, ctx.args);
+            const existing = (await approvals.query()).find((a) => a.approvalKey === key);
+            if (existing?.status === 'approved')
+                return { kind: 'allow' };
+            if (existing?.status === 'rejected') {
+                return { kind: 'deny', reason: 'approval was rejected', errorCode: 'mcp.approval.notFound' };
+            }
+            if (existing === undefined) {
+                await approvals.pending(ctx.action, ctx.args, ctx.actor, key);
+            }
+            return { kind: 'pending', approvalKey: key };
+        }
+        return { kind: 'deny', reason: decision.reason, errorCode: decision.errorCode ?? 'mcp.policy.denied' };
+    }
+    return { kind: 'allow', mask: decision.mask };
+}
+/** mask a tool result's JSON top-level fields (A4): non-JSON / parse failure passes through */
+export function applyMask(result, mask) {
+    const text = result.content.find((b) => b.type === 'text')?.text;
+    if (text === undefined)
+        return result;
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        return result;
+    }
+    if (parsed === null || typeof parsed !== 'object' || Array.isArray(parsed))
+        return result;
+    const out = { ...parsed };
+    let changed = false;
+    for (const [field, replacement] of Object.entries(mask)) {
+        if (field in out) {
+            out[field] = replacement;
+            changed = true;
+        }
+    }
+    if (!changed)
+        return result;
+    return {
+        content: [{ type: 'text', text: JSON.stringify(out) }],
+        isError: result.isError,
+    };
+}
+const POLICY_FILE_EXTENSIONS = ['.js', '.mjs', '.cjs'];
+/** load a policies directory: each module's default export is a policy or a policy array */
+export async function loadPoliciesDir(dir) {
+    let isDir = false;
+    try {
+        isDir = (await stat(dir)).isDirectory();
+    }
+    catch {
+        isDir = false;
+    }
+    if (!isDir)
+        return [];
+    const entries = await readdir(dir, { withFileTypes: true });
+    const files = entries.filter((e) => e.isFile() && POLICY_FILE_EXTENSIONS.some((ext) => e.name.endsWith(ext))).map((e) => join(dir, e.name)).sort();
+    const policies = [];
+    for (const file of files) {
+        const mod = (await import(pathToFileURL(file).href));
+        const value = mod.default;
+        if (Array.isArray(value)) {
+            policies.push(...value);
+        }
+        else if (value !== undefined && typeof value === 'object') {
+            policies.push(value);
+        }
+    }
+    return policies;
+}
+/** resolve `tools.guardrails.policies` (array or directory path) into an array */
+export async function resolvePolicies(source, baseDir) {
+    if (source === undefined)
+        return [];
+    if (Array.isArray(source))
+        return source;
+    return loadPoliciesDir(join(baseDir, source));
+}
+//# sourceMappingURL=policies.js.map

package/dist/runtime/tools/policies.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policies.js","sourceRoot":"","sources":["../../../src/runtime/tools/policies.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAqBvD,gGAAgG;AAChG,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAAc,EAAE,IAA6B;IAC/F,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACrD,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAA2B,EAC3B,SAA0B,EAC1B,GAAqB;IAErB,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAEpD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC7B,IAAI,iBAAiB,IAAI,QAAQ,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3F,MAAM,QAAQ,GAAG,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,GAAG,CAAC,CAAC;YAC9E,IAAI,QAAQ,EAAE,MAAM,KAAK,UAAU;gBAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAC9D,IAAI,QAAQ,EAAE,MAAM,KAAK,UAAU,EAAE,CAAC;gBACpC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,uBAAuB,EAAE,CAAC;YAC/F,CAAC;YACD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAChE,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;QAC/C,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,mBAAmB,EAAE,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AAChD,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,SAAS,CAAC,MAAkB,EAAE,IAA4B;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC;IACjE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC1F,MAAM,GAAG,GAAG,EAAE,GAAI,MAAkC,EAAE,CAAC;IACvD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxD,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;YACjB,GAAG,CAAC,KAAK,CAAC,GAAG,WAAW,CAAC;YACzB,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAC5B,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,MAAM,sBAAsB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAEvD,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAW;IAC/C,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAEtB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACnJ,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAA0B,CAAC;QAC9E,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC;QAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,IAAI,CAAC,GAAI,KAA2B,CAAC,CAAC;QACjD,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,KAAwB,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kFAAkF;AAClF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAA8C,EAAE,OAAe;IACnG,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IACzC,OAAO,eAAe,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC"}

package/dist/runtime/tunnel/connector.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Connector / agent (P1, MIT): the customer-side outbound half of the tunnel.
+ * Runs beside the customer engine, dials the governance tunnel endpoint over a
+ * persistent HTTP/2 CONNECT stream, and forwards each proxied request the
+ * governance side sends to the local engine via `fetch`. Responses (including
+ * SSE streams) are chunked back as `data` frames.
+ *
+ * The connector only ever reaches the customer engine on localhost — the
+ * governance side routes by `tunnel_id` and never needs a routable `url`.
+ */
+export interface ConnectorOptions {
+    /** governance tunnel endpoint, e.g. `http://127.0.0.1:3010` (h2c) or `https://...`. */
+    endpoint: string;
+    tunnelId: string;
+    pairingToken: string;
+    /** local customer engine base url, e.g. `http://localhost:3000`. */
+    engineUrl: string;
+    /** customer engine api key used as the outbound Bearer (auth to the local engine). */
+    engineApiKey: string;
+    /** engine REST path prefix (default `/api`). */
+    pathPrefix?: string;
+    /** skip TLS certificate verification (dev/self-hosted h2c or self-signed). */
+    insecure?: boolean;
+}
+export interface ConnectorHandle {
+    /** resolves when the tunnel handshake returns 200, rejects otherwise. */
+    ready: Promise<void>;
+    close(): void;
+}
+export declare function connectTunnel(opts: ConnectorOptions): ConnectorHandle;
+//# sourceMappingURL=connector.d.ts.map

package/dist/runtime/tunnel/connector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.d.ts","sourceRoot":"","sources":["../../../src/runtime/tunnel/connector.ts"],"names":[],"mappings":"AAKA;;;;;;;;;GASG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,uFAAuF;IACvF,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,sFAAsF;IACtF,YAAY,EAAE,MAAM,CAAC;IACrB,gDAAgD;IAChD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACrB,KAAK,IAAI,IAAI,CAAC;CACf;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,gBAAgB,GAAG,eAAe,CA6FrE"}

package/dist/runtime/tunnel/connector.js

@@ -0,0 +1,114 @@
+import { connect as http2Connect } from 'node:http2';
+import { TunnelSession } from './framing.js';
+import { fromB64, toB64 } from './framing.js';
+export function connectTunnel(opts) {
+    const pathPrefix = opts.pathPrefix ?? '/api';
+    const session = http2Connect(opts.endpoint, {
+        ...(opts.insecure === true ? { rejectUnauthorized: false } : {}),
+    });
+    const authority = new URL(opts.endpoint).host;
+    const headers = {
+        ':method': 'CONNECT',
+        ':authority': authority,
+        'x-weavekit-tunnel': opts.tunnelId,
+        authorization: `Bearer ${opts.pairingToken}`,
+    };
+    const stream = session.request(headers);
+    const tunnel = new TunnelSession(stream);
+    let closed = false;
+    const ready = new Promise((resolve, reject) => {
+        const onResponse = (h) => {
+            const status = Number(h[':status'] ?? 0);
+            if (status === 200)
+                resolve();
+            else
+                reject(new Error(`tunnel handshake failed: ${status}`));
+        };
+        stream.once('response', onResponse);
+        stream.once('error', reject);
+        stream.once('close', () => {
+            if (!closed) {
+                closed = true;
+                reject(new Error('tunnel closed before handshake'));
+            }
+        });
+    });
+    void readLoop();
+    async function readLoop() {
+        try {
+            for (;;) {
+                const frame = await tunnel.read();
+                if (frame === null)
+                    break;
+                if (frame.kind === 'request')
+                    void handleRequest(frame);
+                // `cancel` is advisory; individual in-flight handlers track it implicitly
+            }
+        }
+        catch {
+            // peer dropped — stop
+        }
+        finally {
+            closed = true;
+            session.close();
+        }
+    }
+    async function handleRequest(frame) {
+        const url = buildEngineUrl(opts.engineUrl, pathPrefix, frame);
+        // the governance side serializes JSON request bodies → decode to a string here
+        const body = frame.body === undefined ? undefined : new TextDecoder().decode(fromB64(frame.body));
+        const reqHeaders = { ...frame.headers };
+        reqHeaders.authorization = `Bearer ${opts.engineApiKey}`;
+        if (body !== undefined && reqHeaders['content-type'] === undefined)
+            reqHeaders['content-type'] = 'application/json';
+        let resp;
+        try {
+            resp = await fetch(url, { method: frame.method, headers: reqHeaders, body });
+        }
+        catch (error) {
+            tunnel.write({ kind: 'error', id: frame.id, message: error instanceof Error ? error.message : String(error) });
+            return;
+        }
+        if (closed)
+            return;
+        tunnel.write({ kind: 'response-start', id: frame.id, status: resp.status, headers: Object.fromEntries(resp.headers.entries()) });
+        if (resp.body === null) {
+            tunnel.write({ kind: 'response-end', id: frame.id });
+            return;
+        }
+        const reader = resp.body.getReader();
+        try {
+            for (;;) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                tunnel.write({ kind: 'data', id: frame.id, data: toB64(value) });
+            }
+            tunnel.write({ kind: 'response-end', id: frame.id });
+        }
+        catch (error) {
+            tunnel.write({ kind: 'error', id: frame.id, message: error instanceof Error ? error.message : String(error) });
+        }
+    }
+    return {
+        ready,
+        close() {
+            closed = true;
+            tunnel.close();
+            session.close();
+        },
+    };
+}
+function buildEngineUrl(engineUrl, pathPrefix, frame) {
+    if (typeof URL !== 'undefined') {
+        const base = new URL(engineUrl);
+        const prefix = pathPrefix.replace(/\/+$/, '');
+        const basePath = base.pathname.replace(/\/+$/, '');
+        const path = frame.path.startsWith('/') ? frame.path : `/${frame.path}`;
+        base.pathname = `${basePath}${prefix}${path}`.replace(/\/{2,}/g, '/') || '/';
+        base.search = frame.query;
+        return base.toString();
+    }
+    return `${engineUrl.replace(/\/+$/, '')}${pathPrefix}${frame.path}${frame.query ? `?${frame.query}` : ''}`;
+}
+//# sourceMappingURL=connector.js.map

package/dist/runtime/tunnel/connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../src/runtime/tunnel/connector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAmC9C,MAAM,UAAU,aAAa,CAAC,IAAsB;IAClD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;IAC7C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE;QAC1C,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjE,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC;IAC9C,MAAM,OAAO,GAA2B;QACtC,SAAS,EAAE,SAAS;QACpB,YAAY,EAAE,SAAS;QACvB,mBAAmB,EAAE,IAAI,CAAC,QAAQ;QAClC,aAAa,EAAE,UAAU,IAAI,CAAC,YAAY,EAAE;KAC7C,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC,MAAiD,CAAC,CAAC;IACpF,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,KAAK,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,MAAM,UAAU,GAAG,CAAC,CAA0B,EAAQ,EAAE;YACtD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACzC,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;;gBACzB,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;YACxB,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,GAAG,IAAI,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAC;YACtD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,KAAK,QAAQ,EAAE,CAAC;IAEhB,KAAK,UAAU,QAAQ;QACrB,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAClC,IAAI,KAAK,KAAK,IAAI;oBAAE,MAAM;gBAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;oBAAE,KAAK,aAAa,CAAC,KAAK,CAAC,CAAC;gBACxD,0EAA0E;YAC5E,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;gBAAS,CAAC;YACT,MAAM,GAAG,IAAI,CAAC;YACd,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,KAAK,UAAU,aAAa,CAAC,KAAgD;QAC3E,MAAM,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9D,+EAA+E;QAC/E,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAClG,MAAM,UAAU,GAA2B,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;QAChE,UAAU,CAAC,aAAa,GAAG,UAAU,IAAI,CAAC,YAAY,EAAE,CAAC;QACzD,IAAI,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,cAAc,CAAC,KAAK,SAAS;YAAE,UAAU,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAEpH,IAAI,IAAc,CAAC;QACnB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAC/G,OAAO;QACT,CAAC;QAED,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;QACjI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACrD,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAC5C,IAAI,IAAI;oBAAE,MAAM;gBAChB,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,KAAmB,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;YACD,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjH,CAAC;IACH,CAAC;IAED,OAAO;QACL,KAAK;QACL,KAAK;YACH,MAAM,GAAG,IAAI,CAAC;YACd,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,SAAiB,EACjB,UAAkB,EAClB,KAAgD;IAEhD,IAAI,OAAO,GAAG,KAAK,WAAW,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QACxE,IAAI,CAAC,QAAQ,GAAG,GAAG,QAAQ,GAAG,MAAM,GAAG,IAAI,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,IAAI,GAAG,CAAC;QAC7E,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,UAAU,GAAG,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC7G,CAAC"}

package/dist/runtime/tunnel/forwarder.d.ts

@@ -0,0 +1,12 @@
+import type { Locale } from '../../core/index.js';
+import type { ProxyForwarder } from '../../runtime/proxy/index.js';
+import type { TunnelRegistry } from './registry.js';
+export interface TunnelForwarderOptions {
+    registry: TunnelRegistry;
+    /** base (fetch) forwarder used for non-tunnel targets. */
+    base: ProxyForwarder;
+    locale?: Locale;
+}
+export declare function encodeQuery(query: Record<string, string | undefined> | undefined): string;
+export declare function createTunnelForwarder(options: TunnelForwarderOptions): ProxyForwarder;
+//# sourceMappingURL=forwarder.d.ts.map

package/dist/runtime/tunnel/forwarder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forwarder.d.ts","sourceRoot":"","sources":["../../../src/runtime/tunnel/forwarder.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElD,OAAO,KAAK,EAAE,cAAc,EAAe,MAAM,8BAA8B,CAAC;AAGhF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAapD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,cAAc,CAAC;IACzB,0DAA0D;IAC1D,IAAI,EAAE,cAAc,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAcD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,GAAG,MAAM,CAMzF;AAcD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,sBAAsB,GAAG,cAAc,CAoBrF"}

package/dist/runtime/tunnel/forwarder.js

@@ -0,0 +1,64 @@
+import { SchemaError } from '../../core/index.js';
+import { toB64 } from './framing.js';
+/**
+ * Tunnel-aware proxy forwarder (P1, MIT): for a `target.transport === 'tunnel'`
+ * it multiplexes the proxied request over the live connector session in the
+ * {@link TunnelRegistry} (instead of `fetch(url)`); for `direct` (and anything
+ * else) it delegates to the passed base forwarder. The customer engine url/key
+ * is never used on the tunnel path — the connector performs the outbound call.
+ */
+let ticket = 0;
+const nextId = () => (ticket += 1);
+function toRequestFrame(req) {
+    return {
+        kind: 'request',
+        id: nextId(),
+        method: req.method,
+        path: req.path,
+        query: encodeQuery(req.query),
+        headers: { ...req.headers },
+        ...(req.body === undefined ? {} : { body: toB64(new TextEncoder().encode(JSON.stringify(req.body))) }),
+    };
+}
+export function encodeQuery(query) {
+    const qs = new URLSearchParams();
+    for (const [k, v] of Object.entries(query ?? {})) {
+        if (v !== undefined)
+            qs.set(k, v);
+    }
+    return qs.toString();
+}
+function parseBody(res) {
+    const contentType = res.headers['content-type'] ?? '';
+    if (contentType.includes('json')) {
+        try {
+            return res.body === '' ? undefined : JSON.parse(res.body);
+        }
+        catch {
+            return res.body;
+        }
+    }
+    return res.body;
+}
+export function createTunnelForwarder(options) {
+    const { registry, base, locale } = options;
+    const loc = locale ?? 'en';
+    return {
+        async forward(target, req) {
+            if (target.transport !== 'tunnel')
+                return base.forward(target, req);
+            const res = await registry.request(target.id, toRequestFrame(req));
+            if (res.status === 503 || res.status === 499) {
+                throw new SchemaError('proxy.unreachable', { instance: req.instance, target: target.id }, loc);
+            }
+            return { status: res.status, body: parseBody(res) };
+        },
+        async forwardStream(target, req) {
+            if (target.transport !== 'tunnel')
+                return base.forwardStream(target, req);
+            const { response, abort } = await registry.openStream(target.id, toRequestFrame(req));
+            return { response, abort };
+        },
+    };
+}
+//# sourceMappingURL=forwarder.js.map

package/dist/runtime/tunnel/forwarder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forwarder.js","sourceRoot":"","sources":["../../../src/runtime/tunnel/forwarder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAKlD,OAAO,EAAE,KAAK,EAAE,MAAM,cAAc,CAAC;AAGrC;;;;;;GAMG;AAEH,IAAI,MAAM,GAAG,CAAC,CAAC;AACf,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;AAS3C,SAAS,cAAc,CAAC,GAAiB;IACvC,OAAO;QACL,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,MAAM,EAAE;QACZ,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC;QAC7B,OAAO,EAAE,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE;QAC3B,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;KACvG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAqD;IAC/E,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;IACjC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,KAAK,SAAS;YAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC;AACvB,CAAC;AAED,SAAS,SAAS,CAAC,GAAsE;IACvF,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IACtD,IAAI,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACH,OAAO,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,OAA+B;IACnE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,IAAI,CAAC;IAE3B,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,MAAmB,EAAE,GAAiB;YAClD,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YACpE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;YACnE,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;YACjG,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,MAAmB,EAAE,GAAiB;YACxD,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC1E,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;YACtF,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC7B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime/tunnel/framing.d.ts

@@ -0,0 +1,63 @@
+import type { Duplex } from 'node:stream';
+/**
+ * Tunnel framing (P1, MIT): a lightweight length-prefixed JSON codec multiplexed
+ * over a full-duplex HTTP/2 `CONNECT` stream. Each frame is
+ * `[4-byte big-endian length][JSON payload]`. Both directions (governance →
+ * connector and back) use the same `TunnelSession` wrapper, so requests and
+ * responses are correlated by a monotonic `id`.
+ *
+ * Keep it tiny + dependency-free (engine MIT ethos). Body/data are carried as
+ * base64 strings so frames are always a single JSON object (no partial binary
+ * parsing). Large bodies are chunked by the sender into multiple `data` frames.
+ */
+export type TunnelFrame = ({
+    kind: 'request';
+    id: number;
+    method: string;
+    /** engine REST path under `/api` (whitelisted by the proxy allowlist). */
+    path: string;
+    query: string;
+    headers: Record<string, string>;
+    /** request body as base64 (absent = no body). */
+    body?: string;
+}) | ({
+    kind: 'response-start';
+    id: number;
+    status: number;
+    headers: Record<string, string>;
+}) | ({
+    kind: 'data';
+    id: number;
+    data: string;
+}) | ({
+    kind: 'response-end';
+    id: number;
+}) | ({
+    kind: 'error';
+    id: number;
+    message: string;
+}) | ({
+    kind: 'cancel';
+    id: number;
+});
+export declare function toB64(input: Uint8Array): string;
+export declare function fromB64(value: string): Uint8Array;
+export declare function encodeFrame(frame: TunnelFrame): Buffer;
+export declare class TunnelSession {
+    private readonly stream;
+    private buffer;
+    private readonly queue;
+    private readonly waiters;
+    private closed;
+    private ended;
+    constructor(stream: Duplex);
+    write(frame: TunnelFrame): void;
+    /** Read the next complete frame; `null` when the peer ends/closes the stream. */
+    read(): Promise<TunnelFrame | null>;
+    close(): void;
+    private append;
+    private parseAll;
+    private drain;
+    private finish;
+}
+//# sourceMappingURL=framing.d.ts.map

package/dist/runtime/tunnel/framing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framing.d.ts","sourceRoot":"","sources":["../../../src/runtime/tunnel/framing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,WAAW,GACnB,CAAC;IACC,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,iDAAiD;IACjD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC,GACF,CAAC;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC,GACzF,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,GAC5C,CAAC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,GACtC,CAAC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAChD,CAAC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAIrC,wBAAgB,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAE/C;AAED,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAEjD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAKtD;AAED,qBAAa,aAAa;IAOZ,OAAO,CAAC,QAAQ,CAAC,MAAM;IANnC,OAAO,CAAC,MAAM,CAA2B;IACzC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAkD;IAC1E,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,KAAK,CAAS;gBAEO,MAAM,EAAE,MAAM;IAU3C,KAAK,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAK/B,iFAAiF;IACjF,IAAI,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC;IAMnC,KAAK,IAAI,IAAI;IAKb,OAAO,CAAC,MAAM;IAMd,OAAO,CAAC,QAAQ;IAgBhB,OAAO,CAAC,KAAK;IASb,OAAO,CAAC,MAAM;CAIf"}

package/dist/runtime/tunnel/framing.js

@@ -0,0 +1,86 @@
+const MAX_FRAME = 16 * 1024 * 1024; // sanity cap against a malformed length prefix
+export function toB64(input) {
+    return Buffer.from(input).toString('base64');
+}
+export function fromB64(value) {
+    return new Uint8Array(Buffer.from(value, 'base64'));
+}
+export function encodeFrame(frame) {
+    const json = Buffer.from(JSON.stringify(frame), 'utf8');
+    const head = Buffer.alloc(4);
+    head.writeUInt32BE(json.length, 0);
+    return Buffer.concat([head, json]);
+}
+export class TunnelSession {
+    stream;
+    buffer = Buffer.alloc(0);
+    queue = [];
+    waiters = [];
+    closed = false;
+    ended = false;
+    constructor(stream) {
+        this.stream = stream;
+        // http2 duplex streams are paused until read; attach listeners to pull bytes
+        this.stream.on('data', (chunk) => this.append(chunk));
+        this.stream.on('end', () => this.finish());
+        this.stream.on('close', () => this.finish());
+        this.stream.on('error', () => {
+            /* reader callers observe 'end'/'close' + error frames */
+        });
+    }
+    write(frame) {
+        if (this.closed || !this.stream.writable)
+            return;
+        this.stream.write(encodeFrame(frame));
+    }
+    /** Read the next complete frame; `null` when the peer ends/closes the stream. */
+    read() {
+        if (this.queue.length > 0)
+            return Promise.resolve(this.queue.shift());
+        if (this.ended)
+            return Promise.resolve(null);
+        return new Promise((resolve) => this.waiters.push(resolve));
+    }
+    close() {
+        this.closed = true;
+        this.stream.destroy();
+    }
+    append(chunk) {
+        this.buffer = Buffer.concat([this.buffer, Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)]);
+        this.parseAll();
+        this.drain();
+    }
+    parseAll() {
+        for (;;) {
+            if (this.buffer.length < 4)
+                return;
+            const len = this.buffer.readUInt32BE(0);
+            if (len > MAX_FRAME)
+                throw new Error('tunnel frame too large');
+            if (this.buffer.length < 4 + len)
+                return;
+            const payload = this.buffer.subarray(4, 4 + len);
+            this.buffer = this.buffer.subarray(4 + len);
+            try {
+                this.queue.push(JSON.parse(payload.toString('utf8')));
+            }
+            catch {
+                // malformed frame — drop and continue
+            }
+        }
+    }
+    drain() {
+        while (this.queue.length > 0 && this.waiters.length > 0) {
+            this.waiters.shift()(this.queue.shift());
+        }
+        if (this.ended && this.queue.length === 0 && this.waiters.length > 0) {
+            while (this.waiters.length > 0)
+                this.waiters.shift()(null);
+        }
+    }
+    finish() {
+        this.ended = true;
+        this.drain();
+    }
+}
+//# sourceMappingURL=framing.js.map

package/dist/runtime/tunnel/framing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framing.js","sourceRoot":"","sources":["../../../src/runtime/tunnel/framing.ts"],"names":[],"mappings":"AAgCA,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,+CAA+C;AAEnF,MAAM,UAAU,KAAK,CAAC,KAAiB;IACrC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAa;IACnC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAkB;IAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC7B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,MAAM,OAAO,aAAa;IAOK;IANrB,MAAM,GAAW,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxB,KAAK,GAAkB,EAAE,CAAC;IAC1B,OAAO,GAA+C,EAAE,CAAC;IAClE,MAAM,GAAG,KAAK,CAAC;IACf,KAAK,GAAG,KAAK,CAAC;IAEtB,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QACzC,6EAA6E;QAC7E,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACvE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC3B,yDAAyD;QAC3D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAkB;QACtB,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,OAAO;QACjD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;IACxC,CAAC;IAED,iFAAiF;IACjF,IAAI;QACF,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAG,CAAC,CAAC;QACvE,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACxB,CAAC;IAEO,MAAM,CAAC,KAAsB;QACnC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChG,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEO,QAAQ;QACd,SAAS,CAAC;YACR,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO;YACnC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACxC,IAAI,GAAG,GAAG,SAAS;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAC/D,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG;gBAAE,OAAO;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;YAC5C,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAgB,CAAC,CAAC;YACvE,CAAC;YAAC,MAAM,CAAC;gBACP,sCAAsC;YACxC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAG,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAG,CAAC,IAAI,CAAC,CAAC;QAC9D,CAAC;IACH,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;CACF"}

package/dist/runtime/tunnel/index.d.ts

@@ -0,0 +1,11 @@
+export { TunnelSession, encodeFrame, toB64, fromB64 } from './framing.js';
+export type { TunnelFrame } from './framing.js';
+export { TunnelRegistry } from './registry.js';
+export type { TunnelResponse } from './registry.js';
+export { createTunnelForwarder } from './forwarder.js';
+export type { TunnelForwarderOptions } from './forwarder.js';
+export { connectTunnel } from './connector.js';
+export type { ConnectorOptions, ConnectorHandle } from './connector.js';
+export { createTunnelServer } from './server.js';
+export type { TunnelServerDeps, TunnelServerHandle } from './server.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/runtime/tunnel/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/runtime/tunnel/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC1E,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,YAAY,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AACvD,YAAY,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,YAAY,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,YAAY,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/runtime/tunnel/index.js

@@ -0,0 +1,6 @@
+export { TunnelSession, encodeFrame, toB64, fromB64 } from './framing.js';
+export { TunnelRegistry } from './registry.js';
+export { createTunnelForwarder } from './forwarder.js';
+export { connectTunnel } from './connector.js';
+export { createTunnelServer } from './server.js';
+//# sourceMappingURL=index.js.map

package/dist/runtime/tunnel/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/runtime/tunnel/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/runtime/tunnel/registry.d.ts

@@ -0,0 +1,36 @@
+import type { TunnelFrame, TunnelSession } from './framing.js';
+/**
+ * Registry of live connector sessions keyed by `tunnel_id` (= connections id for
+ * `transport: 'tunnel'`). A tunnel is a full-duplex HTTP/2 CONNECT stream; the
+ * `TunnelRegistry` owns the reader loop and dispatches every inbound frame to the
+ * waiter correlated by frame `id`, so many proxied requests (buffered or SSE) can
+ * be in flight concurrently over one tunnel.
+ */
+export interface TunnelResponse {
+    status: number;
+    headers: Record<string, string>;
+    body: string;
+}
+export declare class TunnelRegistry {
+    private readonly entries;
+    register(tunnelId: string, session: TunnelSession): void;
+    get(tunnelId: string): TunnelSession | undefined;
+    has(tunnelId: string): boolean;
+    unregister(tunnelId: string, session: TunnelSession): void;
+    /** Send one buffered request frame and resolve with the complete response. */
+    request(tunnelId: string, frame: Extract<TunnelFrame, {
+        kind: 'request';
+    }>): Promise<TunnelResponse>;
+    /** Open a streaming (SSE) request: resolve on response-start with `{ response, abort }`. */
+    openStream(tunnelId: string, frame: Extract<TunnelFrame, {
+        kind: 'request';
+    }>): Promise<{
+        response: Response;
+        abort: () => void;
+    }>;
+    close(tunnelId: string): void;
+    closeAll(): void;
+    private readLoop;
+    private route;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/runtime/tunnel/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/runtime/tunnel/registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAG/D;;;;;;GAMG;AAEH,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAeD,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA4B;IAEpD,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI;IAOxD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS;IAIhD,GAAG,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAI9B,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,IAAI;IAK1D,8EAA8E;IACxE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC;IAmC1G,4FAA4F;IAC5F,UAAU,CACR,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC,GAC/C,OAAO,CAAC;QAAE,QAAQ,EAAE,QAAQ,CAAC;QAAC,KAAK,EAAE,MAAM,IAAI,CAAA;KAAE,CAAC;IA2DrD,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAQ7B,QAAQ,IAAI,IAAI;YAOF,QAAQ;IAatB,OAAO,CAAC,KAAK;CAad"}