agent-hitch 0.1.1 → 0.2.1

package/dist/src/cli/main.js

@@ -0,0 +1,48 @@
+import path from "node:path";
+import { defaultRoot, invalidInput, packageVersion as readPackageVersion } from "../foundation/index.js";
+import { takeOption } from "./arguments.js";
+import { helpText } from "./output.js";
+import { runsCommand } from "./commands/runs.js";
+import { compareCommand } from "./commands/compare.js";
+import { listCommand } from "./commands/list.js";
+import { inspectCommand } from "./commands/inspect.js";
+import { resolveCommand } from "./commands/resolve.js";
+import { prepareCommand } from "./commands/prepare.js";
+import { runCommand } from "./commands/run.js";
+import { evalCommand } from "./commands/eval.js";
+import { workspaceCommand } from "./commands/workspace.js";
+import { trajectoryCommand } from "./commands/trajectory.js";
+import { feedbackCommand } from "./commands/feedback.js";
+import { daemonCommand } from "./commands/daemon.js";
+export async function main(argv) {
+    const args = [...argv];
+    const root = path.resolve(takeOption(args, "--root") || defaultRoot());
+    const command = args.shift();
+    switch (command) {
+        case "list": return listCommand(args);
+        case "inspect": return inspectCommand(args, root);
+        case "resolve": return resolveCommand(args, root);
+        case "prepare": return prepareCommand(args, root);
+        case "run": return runCommand(args, root);
+        case "runs": return runsCommand(args, root);
+        case "compare": return compareCommand(args, root);
+        case "eval": return evalCommand(args, root);
+        case "workspace": return workspaceCommand(args, root);
+        case "trajectory": return trajectoryCommand(args, root);
+        case "feedback": return feedbackCommand(args, root);
+        case "daemon": return daemonCommand(args, root);
+        case "help":
+        case "--help":
+        case "-h":
+        case undefined:
+            process.stdout.write(helpText());
+            return;
+        case "--version":
+        case "-V":
+            process.stdout.write(`hitch ${readPackageVersion()}\n`);
+            return;
+        default:
+            throw invalidInput(`unknown command: ${command}`);
+    }
+}
+//# sourceMappingURL=main.js.map

package/dist/src/cli/main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"main.js","sourceRoot":"","sources":["../../../src/cli/main.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,IAAI,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACzG,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAErD,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc;IACvC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;IAE7B,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,IAAI,CAAC,CAAC;QACtC,KAAK,SAAS,CAAC,CAAC,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,KAAK,SAAS,CAAC,CAAC,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,KAAK,SAAS,CAAC,CAAC,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,KAAK,KAAK,CAAC,CAAC,OAAO,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC1C,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,KAAK,SAAS,CAAC,CAAC,OAAO,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,CAAC,OAAO,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,KAAK,WAAW,CAAC,CAAC,OAAO,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtD,KAAK,YAAY,CAAC,CAAC,OAAO,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACxD,KAAK,UAAU,CAAC,CAAC,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,KAAK,QAAQ,CAAC,CAAC,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC;QACZ,KAAK,QAAQ,CAAC;QACd,KAAK,IAAI,CAAC;QACV,KAAK,SAAS;YACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjC,OAAO;QACT,KAAK,WAAW,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,kBAAkB,EAAE,IAAI,CAAC,CAAC;YACxD,OAAO;QACT;YACE,MAAM,YAAY,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;IACtD,CAAC;AACH,CAAC"}

package/dist/src/cli/output.js

@@ -0,0 +1,96 @@
+import { delay } from "../foundation/index.js";
+export function revisionLabel(resolved) {
+    if (resolved.revision.type === "commit")
+        return resolved.revision.commit || "";
+    if (resolved.revision.type === "version")
+        return resolved.revision.version || "";
+    return resolved.revision.version || resolved.source.integrity || "";
+}
+export async function waitForDaemonRun(client, runId, output) {
+    let eventOffset = 0;
+    for (;;) {
+        const status = await client.request(`/v1/runs/${runId}`);
+        if (output === "jsonl") {
+            try {
+                const response = await client.requestWithMetadata(`/v1/runs/${runId}/events?offset=${eventOffset}`);
+                const raw = response.payload;
+                for (const line of String(raw).trim().split(/\r?\n/).filter(Boolean)) {
+                    JSON.parse(line);
+                    process.stdout.write(`${line}\n`);
+                }
+                eventOffset = Number(response.headers.get("x-hitch-next-offset") || eventOffset);
+            }
+            catch (error) {
+                if (error.status !== 404)
+                    throw error;
+            }
+        }
+        if (status.result) {
+            if (output === "json")
+                process.stdout.write(`${JSON.stringify(status.result, null, 2)}\n`);
+            return status.result;
+        }
+        await delay(200);
+    }
+}
+export function helpText() {
+    return `Hitch — content-addressed version control and evidence storage for agent harnesses
+
+Usage:
+  hitch list [--json]
+  hitch inspect <harness> [--json]
+  hitch resolve <harness-ref> [--json]
+  hitch prepare <harness-ref> [--json]
+  hitch run --harness <ref> [--model <id>] [--context-file <json>] [--workspace-mode <mode>] --prompt <text> [--daemon]
+  hitch runs list [filters] [--json]
+  hitch runs inspect <run-id> [--json]
+  hitch runs rebuild-index [--json]
+  hitch compare model|harness [filters] [--reference-run <run-id>] [--json]
+  hitch eval setup harbor [--version <version>] [--python <path>] [--force] [--json]
+  hitch eval doctor [--harbor <path>] [--python <path>] [--docker <path>] [--json]
+  hitch eval run [--backend harbor] --dataset <ref> --harness <immutable-ref> [--model <id>] [--attempts <n>]
+  hitch eval list [--json]
+  hitch eval inspect <eval-id> [--json]
+  hitch workspace inspect <run-id> [--json]
+  hitch workspace path <run-id>
+  hitch workspace remove <run-id> [--force] [--json]
+  hitch trajectory inspect <run-id> [--json]
+  hitch feedback list <run-id> [--json]
+  hitch feedback put <run-id> --message <id> --rating positive|negative [--note <text>] [--if-version <v>] [--json]
+  hitch feedback delete <run-id> --message <id> [--if-version <v>] [--json]
+  hitch daemon start [--foreground] [--port <port>] [--max-concurrent <n>]
+  hitch daemon stop | status [--json] | logs [-n <lines>]
+  hitch daemon submit --harness <ref> --prompt <text> [--workspace-mode <mode>] [--wait]
+  hitch daemon cancel <run-id>
+
+Eval:
+  Harbor runs each task in Docker; Hitch executes the selected harness inside that task container.
+  Use 'hitch eval setup harbor' for an isolated managed install and 'hitch eval doctor' to verify it.
+  Eval accepts exact version:, registered commit:, or full lowercase local git+file commit refs.
+  Local Git evals transport only committed Git objects; the source repository must be clean.
+  Use --pass-env NAME for extra credentials.
+  Every eval references a shared read-only controller runtime bundle by SHA-256 id
+  (see 'hitch eval inspect' for the runtime storage kind).
+
+Trajectory and feedback:
+  Structured adapters preserve provider-native events plus a DSH-compatible canonical view
+  under runs/<run>/trajectory/, bound by trajectory.ref.json V2 checksums.
+  Message feedback is a lifecycle-bound sidecar.
+
+Workspace modes:
+  shared    Use the source directory directly (compatibility default)
+  worktree  Create a detached worktree from a clean Git HEAD
+  copy      Copy the current filesystem state into an independent workspace
+
+Harness refs:
+  codex                         Installed executable (compatibility default)
+  codex@installed               Installed executable
+  codex@version:0.42.1          Exact published version
+  codex@commit:abc1234          Commit from the registered Git source
+  codex@git+file:///src#abc1234 Commit from a clean local Git repository
+
+Global:
+  --root <path>    Relocate all Hitch state (default: ~/.hitch)
+`;
+}
+//# sourceMappingURL=output.js.map

package/dist/src/cli/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../../src/cli/output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,wBAAwB,CAAC;AAE/C,MAAM,UAAU,aAAa,CAAC,QAAkH;IAC9I,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC;IAC/E,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;IACjF,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAA8O,EAAE,KAAa,EAAE,MAAc;IAClT,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,SAAS,CAAC;QACR,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,YAAY,KAAK,kBAAkB,WAAW,EAAE,CAAC,CAAC;gBACpG,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC;gBAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;oBACrE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;gBACpC,CAAC;gBACD,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,WAAW,CAAC,CAAC;YACnF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAK,KAA6B,CAAC,MAAM,KAAK,GAAG;oBAAE,MAAM,KAAK,CAAC;YACjE,CAAC;QACH,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,MAAM,KAAK,MAAM;gBAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC3F,OAAO,MAAM,CAAC,MAAiC,CAAC;QAClD,CAAC;QACD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAyDR,CAAC;AACF,CAAC"}

package/dist/src/controller-runtime/hash.js

@@ -0,0 +1,353 @@
+/**
+ * Controller runtime bundle: canonical hashing, manifest construction, and
+ * integrity verification (spec §4).
+ *
+ * The runtime identity is a content-addressed SHA-256 over an explicit
+ * allowlist of compiled payload files, excluding cache path, source path,
+ * mtime, uid/gid, creation time, and host-specific metadata. The executable
+ * bit is included.
+ */
+import { createHash } from "node:crypto";
+import { lstat, readdir } from "node:fs/promises";
+import path from "node:path";
+export const RUNTIME_SCHEMA_VERSION = "2";
+export const RUNTIME_NODE_RANGE = ">=22";
+/**
+ * Directories of the compiled payload that are part of every runtime. This is
+ * the execution closure the Harbor bridge actually runs — not a mechanical
+ * copy of the published package. Runtime tooling (`dist/scripts`, release
+ * checkers) is deliberately excluded so editing a release script never changes
+ * a controller `runtime_id` (spec §4.4).
+ */
+export const RUNTIME_PAYLOAD_DIRECTORIES = ["dist/bin", "dist/src"];
+/**
+ * The declared CLI entrypoint, relative to the upload root (`/opt/hitch`).
+ * The bridge reads this from the manifest instead of hardcoding the TypeScript
+ * build layout (spec §4.3, §8.5).
+ */
+export const RUNTIME_CLI_ENTRYPOINT = "dist/bin/hitch.js";
+/** The compiled payload allowlist. V1 keeps zero runtime npm dependencies. */
+export const RUNTIME_PAYLOAD_RULES = [
+    { path: "package.json" },
+    ...RUNTIME_PAYLOAD_DIRECTORIES.map((directory) => ({ directory })),
+];
+export class ControllerRuntimeIntegrityError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ControllerRuntimeIntegrityError";
+    }
+}
+/**
+ * Compute the canonical runtime identity and manifest for a payload tree.
+ * Validates the allowlist, rejects undeclared/special files, and hashes each
+ * file's original bytes. The `entrypoints` declaration participates in the
+ * canonical `runtime_id` hash (spec §4.4).
+ */
+export async function hashRuntimePayload(input) {
+    const rules = input.rules || RUNTIME_PAYLOAD_RULES;
+    const declared = await enumerateAllowlist(input.payloadRoot, rules);
+    const files = await hashDeclaredFiles(input.payloadRoot, declared);
+    // Entrypoints are recorded as executable regardless of the build-time mode;
+    // promotion sets them to 0555 (spec §4.5). Any byte or executable-bit
+    // change after promotion then fails integrity verification (spec §11.1).
+    for (const file of files) {
+        if (isEntrypointPath(file.path))
+            file.executable = true;
+    }
+    const entrypoints = {
+        cli: { path: RUNTIME_CLI_ENTRYPOINT, launcher: "node" },
+    };
+    const canonical = canonicalEncodeManifest({ entrypoints, files });
+    const runtimeId = createHash("sha256").update(canonical).digest("hex");
+    const created_at = new Date().toISOString();
+    const manifest = {
+        schema_version: RUNTIME_SCHEMA_VERSION,
+        runtime_id: `sha256:${runtimeId}`,
+        node_range: RUNTIME_NODE_RANGE,
+        entrypoints,
+        files,
+        created_at,
+    };
+    return {
+        manifest,
+        runtimeId: `sha256:${runtimeId}`,
+        fileCount: files.length,
+        totalBytes: files.reduce((sum, file) => sum + file.size, 0),
+    };
+}
+/**
+ * True when a payload path is THE declared CLI entrypoint. Only
+ * `entrypoints.cli.path` is marked executable after promotion; sibling files
+ * in the same directory (e.g. `.map` sources) stay non-executable (spec §4.5).
+ */
+export function isEntrypointPath(normalizedPath) {
+    return normalizedPath === RUNTIME_CLI_ENTRYPOINT;
+}
+/**
+ * Enumerate the explicit allowlist into normalized declared paths, rejecting
+ * symlinks, hardlinks, devices, FIFOs, sockets, path traversal, duplicate
+ * paths, and undeclared files (spec §4.4.2).
+ */
+export async function enumerateAllowlist(payloadRoot, rules) {
+    const root = path.resolve(payloadRoot);
+    const seen = new Set();
+    const declared = [];
+    const push = (rawPath) => {
+        const normalized = normalizePath(rawPath);
+        if (!normalized || normalized === "." || normalized.startsWith("..") || normalized.startsWith("/")) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload path escapes the payload root: ${rawPath}`);
+        }
+        if (seen.has(normalized)) {
+            throw new ControllerRuntimeIntegrityError(`duplicate runtime payload path: ${normalized}`);
+        }
+        seen.add(normalized);
+    };
+    const infoByPath = new Map();
+    for (const rule of rules) {
+        const rulePath = rule.path || rule.directory || "";
+        const absolute = path.resolve(root, rulePath);
+        if (absolute !== root && !isWithin(root, absolute)) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload rule escapes the payload root: ${rulePath}`);
+        }
+        let info;
+        try {
+            info = await lstat(absolute);
+        }
+        catch (error) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload rule is missing: ${rulePath}`);
+        }
+        if (info.isDirectory()) {
+            await walkDirectory(root, absolute, rulePath, push, infoByPath, rule.executable === true);
+        }
+        else if (info.isFile()) {
+            push(rulePath);
+            infoByPath.set(normalizePath(rulePath), { size: info.size, executable: rule.executable === true || isExecutableMode(info.mode) });
+        }
+        else if (info.isSymbolicLink()) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload must not contain symlinks: ${rulePath}`);
+        }
+        else {
+            throw new ControllerRuntimeIntegrityError(`runtime payload must not contain special files: ${rulePath}`);
+        }
+    }
+    // Reject undeclared files inside the allowlisted payload trees. The payload
+    // root itself may contain non-payload files (docs, tests, tooling) that are
+    // not part of the runtime bundle, so only declared trees are scanned here;
+    // the staged payload (which contains only allowlisted content) is scanned
+    // again during verification (spec §4.4.2, §4.6).
+    for (const rule of rules) {
+        const rulePath = rule.path || rule.directory || "";
+        if (!rulePath)
+            continue;
+        const absolute = path.resolve(root, ...rulePath.split("/"));
+        const relative = normalizePath(rulePath);
+        const info = await lstat(absolute);
+        if (info.isDirectory()) {
+            await rejectUndeclaredFiles(root, absolute, relative, seen, new Set());
+        }
+    }
+    for (const normalized of [...seen].sort(compareUtf8)) {
+        const meta = infoByPath.get(normalized);
+        if (!meta)
+            throw new ControllerRuntimeIntegrityError(`declared payload file has no metadata: ${normalized}`);
+        declared.push({
+            path: normalized,
+            size: meta.size,
+            executable: meta.executable,
+            sha256: "",
+        });
+    }
+    return declared;
+}
+async function walkDirectory(root, absolute, relative, push, infoByPath, forceExecutable) {
+    const entries = await readdir(absolute, { withFileTypes: true });
+    entries.sort((left, right) => compareUtf8(left.name, right.name));
+    for (const entry of entries) {
+        const childAbsolute = path.join(absolute, entry.name);
+        const childRelative = relative ? `${relative}/${entry.name}` : entry.name;
+        const info = await lstat(childAbsolute);
+        if (info.isDirectory()) {
+            await walkDirectory(root, childAbsolute, childRelative, push, infoByPath, forceExecutable);
+        }
+        else if (info.isFile()) {
+            push(childRelative);
+            infoByPath.set(normalizePath(childRelative), {
+                size: info.size,
+                executable: forceExecutable || isExecutableMode(info.mode),
+            });
+        }
+        else if (info.isSymbolicLink()) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload must not contain symlinks: ${childRelative}`);
+        }
+        else {
+            throw new ControllerRuntimeIntegrityError(`runtime payload must not contain special files: ${childRelative}`);
+        }
+    }
+}
+async function rejectUndeclaredFiles(root, absolute, relative, declared, visited) {
+    const real = await realpathOrThrow(absolute);
+    if (visited.has(real))
+        return; // A symlink-free tree cannot alias, but guard anyway.
+    visited.add(real);
+    const entries = await readdir(absolute, { withFileTypes: true });
+    for (const entry of entries) {
+        const childAbsolute = path.join(absolute, entry.name);
+        const childRelative = relative ? `${relative}/${entry.name}` : entry.name;
+        const info = await lstat(childAbsolute);
+        if (info.isDirectory()) {
+            await rejectUndeclaredFiles(root, childAbsolute, childRelative, declared, visited);
+        }
+        else {
+            const normalized = normalizePath(childRelative);
+            if (!declared.has(normalized)) {
+                throw new ControllerRuntimeIntegrityError(`undeclared file in runtime payload: ${childRelative}`);
+            }
+        }
+    }
+}
+async function realpathOrThrow(file) {
+    const { realpath } = await import("node:fs/promises");
+    return realpath(file);
+}
+async function hashDeclaredFiles(payloadRoot, declared) {
+    const root = path.resolve(payloadRoot);
+    const files = [];
+    for (const entry of declared) {
+        const absolute = path.join(root, ...entry.path.split("/"));
+        let info;
+        try {
+            info = await lstat(absolute);
+        }
+        catch (error) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload file is not readable: ${entry.path}`);
+        }
+        if (info.isSymbolicLink()) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload must not contain symlinks: ${entry.path}`);
+        }
+        if (!info.isFile()) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload entry is not a regular file: ${entry.path}`);
+        }
+        if (info.nlink > 1) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload must not contain hardlinks: ${entry.path}`);
+        }
+        const digest = await hashFile(absolute);
+        files.push({
+            path: entry.path,
+            size: info.size,
+            executable: entry.executable,
+            sha256: `sha256:${digest}`,
+        });
+    }
+    return files;
+}
+async function hashFile(file) {
+    const { createReadStream } = await import("node:fs");
+    const hash = createHash("sha256");
+    for await (const chunk of createReadStream(file))
+        hash.update(chunk);
+    return hash.digest("hex");
+}
+/**
+ * Verify a manifest against its payload tree: declared file set, sizes,
+ * executable bits, and SHA-256 digests (spec §4.6).
+ */
+export async function verifyRuntimePayload(payloadRoot, manifest) {
+    const root = path.resolve(payloadRoot);
+    const seen = new Set();
+    for (const file of manifest.files) {
+        if (seen.has(file.path)) {
+            throw new ControllerRuntimeIntegrityError(`duplicate manifest path: ${file.path}`);
+        }
+        seen.add(file.path);
+        const normalized = normalizePath(file.path);
+        if (normalized.startsWith("..") || normalized.startsWith("/")) {
+            throw new ControllerRuntimeIntegrityError(`manifest path escapes the payload root: ${file.path}`);
+        }
+        const absolute = path.join(root, ...normalized.split("/"));
+        let info;
+        try {
+            info = await lstat(absolute);
+        }
+        catch {
+            throw new ControllerRuntimeIntegrityError(`runtime payload file is missing: ${file.path}`);
+        }
+        if (info.isSymbolicLink()) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload must not contain symlinks: ${file.path}`);
+        }
+        if (!info.isFile()) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload entry is not a regular file: ${file.path}`);
+        }
+        if (info.nlink > 1) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload must not contain hardlinks: ${file.path}`);
+        }
+        if (info.size !== file.size) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload size mismatch for ${file.path}: expected ${file.size}, got ${info.size}`);
+        }
+        if (file.executable !== isExecutableMode(info.mode)) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload executable bit mismatch for ${file.path}`);
+        }
+        const digest = await hashFile(absolute);
+        if (`sha256:${digest}` !== file.sha256) {
+            throw new ControllerRuntimeIntegrityError(`runtime payload digest mismatch for ${file.path}`);
+        }
+    }
+    // Reject undeclared files in the payload tree.
+    await rejectUndeclaredFiles(root, root, "", seen, new Set());
+}
+/**
+ * Canonically encode the runtime identity `{ schema_version, node_range,
+ * entrypoints, files }` with sorted object keys and no insignificant
+ * whitespace (spec §4.4.6). The `entrypoints` declaration participates in the
+ * identity hash.
+ */
+export function canonicalEncodeManifest(input) {
+    const sortedFiles = [...input.files].sort((left, right) => compareUtf8(left.path, right.path));
+    const payload = {
+        schema_version: RUNTIME_SCHEMA_VERSION,
+        node_range: RUNTIME_NODE_RANGE,
+        entrypoints: {
+            cli: {
+                path: input.entrypoints.cli.path,
+                launcher: input.entrypoints.cli.launcher,
+            },
+        },
+        files: sortedFiles.map((file) => ({
+            path: file.path,
+            size: file.size,
+            executable: file.executable,
+            sha256: file.sha256,
+        })),
+    };
+    return canonicalStringify(payload);
+}
+/** Encode a full manifest (identity fields plus descriptive created_at) canonically. */
+export function canonicalEncodeManifestWithCreatedAt(manifest) {
+    return canonicalEncodeManifest({ entrypoints: manifest.entrypoints, files: manifest.files });
+}
+function canonicalStringify(value) {
+    if (Array.isArray(value))
+        return `[${value.map(canonicalStringify).join(",")}]`;
+    if (value && typeof value === "object") {
+        const record = value;
+        const keys = Object.keys(record).sort(compareUtf8);
+        return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalStringify(record[key])}`).join(",")}}`;
+    }
+    return JSON.stringify(value);
+}
+/** Normalize a manifest path to NFC with `/` separators. */
+export function normalizePath(rawPath) {
+    const withSeparators = rawPath.split("\\").join("/");
+    const nfc = withSeparators.normalize("NFC");
+    return path.posix.normalize(nfc).replace(/^\.\//, "");
+}
+function compareUtf8(left, right) {
+    return Buffer.compare(Buffer.from(left, "utf8"), Buffer.from(right, "utf8"));
+}
+function isExecutableMode(mode) {
+    return (mode & 0o111) !== 0;
+}
+function isWithin(parent, candidate) {
+    const relative = path.relative(parent, candidate);
+    return relative === "" || (!relative.startsWith(`..${path.sep}`) && relative !== "..");
+}
+//# sourceMappingURL=hash.js.map

package/dist/src/controller-runtime/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../src/controller-runtime/hash.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,UAAU,EAAE,UAAU,CAAU,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAW1D,8EAA8E;AAC9E,MAAM,CAAC,MAAM,qBAAqB,GAAyB;IACzD,EAAE,IAAI,EAAE,cAAc,EAAE;IACxB,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;CACnE,CAAC;AA2BF,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IACxD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAuB;IAC9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,qBAAqB,CAAC;IACnD,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAEnE,4EAA4E;IAC5E,sEAAsE;IACtE,yEAAyE;IACzE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;IAC1D,CAAC;IAED,MAAM,WAAW,GAAiC;QAChD,GAAG,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,QAAQ,EAAE,MAAM,EAAE;KACxD,CAAC;IACF,MAAM,SAAS,GAAG,uBAAuB,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAA8B;QAC1C,cAAc,EAAE,sBAAsB;QACtC,UAAU,EAAE,UAAU,SAAS,EAAE;QACjC,UAAU,EAAE,kBAAkB;QAC9B,WAAW;QACX,KAAK;QACL,UAAU;KACX,CAAC;IACF,OAAO;QACL,QAAQ;QACR,SAAS,EAAE,UAAU,SAAS,EAAE;QAChC,SAAS,EAAE,KAAK,CAAC,MAAM;QACvB,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;KAC5D,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,cAAsB;IACrD,OAAO,cAAc,KAAK,sBAAsB,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,WAAmB,EAAE,KAA2B;IACvF,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,OAAe,EAAQ,EAAE;QACrC,MAAM,UAAU,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACnG,MAAM,IAAI,+BAA+B,CAAC,kDAAkD,OAAO,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,+BAA+B,CAAC,mCAAmC,UAAU,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACvB,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,IAAI,GAAG,EAAiD,CAAC;IAE5E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,+BAA+B,CAAC,kDAAkD,QAAQ,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,+BAA+B,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC;QAC5F,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,QAAQ,CAAC,CAAC;YACf,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpI,CAAC;aAAM,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,+BAA+B,CAAC,8CAA8C,QAAQ,EAAE,CAAC,CAAC;QACtG,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,+BAA+B,CAAC,mDAAmD,QAAQ,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,iDAAiD;IACjD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,CAAC;QACnD,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,UAAU,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,+BAA+B,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;QAC7G,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,UAAU;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,EAAE;SACX,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,IAAY,EACZ,QAAgB,EAChB,QAAgB,EAChB,IAA+B,EAC/B,UAA8D,EAC9D,eAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,aAAa,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC7F,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,IAAI,CAAC,aAAa,CAAC,CAAC;YACpB,UAAU,CAAC,GAAG,CAAC,aAAa,CAAC,aAAa,CAAC,EAAE;gBAC3C,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,eAAe,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;aAC3D,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjC,MAAM,IAAI,+BAA+B,CAAC,8CAA8C,aAAa,EAAE,CAAC,CAAC;QAC3G,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,+BAA+B,CAAC,mDAAmD,aAAa,EAAE,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAY,EACZ,QAAgB,EAChB,QAAgB,EAChB,QAAqB,EACrB,OAAoB;IAEpB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,sDAAsD;IACrF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,aAAa,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,qBAAqB,CAAC,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrF,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC9B,MAAM,IAAI,+BAA+B,CAAC,uCAAuC,aAAa,EAAE,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY;IACzC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;IACtD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,WAAmB,EAAE,QAAwB;IAC5E,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,+BAA+B,CAAC,yCAAyC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,+BAA+B,CAAC,8CAA8C,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,+BAA+B,CAAC,gDAAgD,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1G,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,+BAA+B,CAAC,+CAA+C,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,MAAM,EAAE,UAAU,MAAM,EAAE;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY;IAClC,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC;QAAE,IAAI,CAAC,MAAM,CAAC,KAAe,CAAC,CAAC;IAC/E,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,WAAmB,EAAE,QAAmC;IACjG,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,+BAA+B,CAAC,4BAA4B,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,+BAA+B,CAAC,2CAA2C,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpG,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3D,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,+BAA+B,CAAC,oCAAoC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YAC1B,MAAM,IAAI,+BAA+B,CAAC,8CAA8C,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;YACnB,MAAM,IAAI,+BAA+B,CAAC,gDAAgD,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACzG,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;YACnB,MAAM,IAAI,+BAA+B,CAAC,+CAA+C,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,+BAA+B,CAAC,qCAAqC,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,IAAI,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACvI,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,KAAK,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpD,MAAM,IAAI,+BAA+B,CAAC,+CAA+C,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACxG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACxC,IAAI,UAAU,MAAM,EAAE,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,+BAA+B,CAAC,uCAAuC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAChG,CAAC;IACH,CAAC;IACD,+CAA+C;IAC/C,MAAM,qBAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAGvC;IACC,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG;QACd,cAAc,EAAE,sBAAsB;QACtC,UAAU,EAAE,kBAAkB;QAC9B,WAAW,EAAE;YACX,GAAG,EAAE;gBACH,IAAI,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI;gBAChC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ;aACzC;SACF;QACD,KAAK,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChC,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;KACJ,CAAC;IACF,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,oCAAoC,CAAC,QAAmC;IACtF,OAAO,uBAAuB,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAChF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACnD,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACzG,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAa;IAC9C,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc,EAAE,SAAiB;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClD,OAAO,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC;AACzF,CAAC"}

package/dist/src/controller-runtime/index.js

@@ -0,0 +1,3 @@
+export { ControllerRuntimeIntegrityError, RUNTIME_CLI_ENTRYPOINT, RUNTIME_NODE_RANGE, RUNTIME_PAYLOAD_DIRECTORIES, RUNTIME_PAYLOAD_RULES, RUNTIME_SCHEMA_VERSION, canonicalEncodeManifest, canonicalEncodeManifestWithCreatedAt, enumerateAllowlist, hashRuntimePayload, isEntrypointPath, normalizePath, verifyRuntimePayload } from "./hash.js";
+export { PACKAGE_ROOT, ensureControllerRuntime, inspectEvalRuntimeKind, useControllerRuntimeById, writeRuntimeReference } from "./store.js";
+//# sourceMappingURL=index.js.map

package/dist/src/controller-runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/controller-runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,+BAA+B,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,oCAAoC,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAC;AAElV,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC"}