agenthooksprotocol 0.0.0-stage → 0.1.1

package/dist/src/draft-runtime.js

@@ -0,0 +1,240 @@
+import { validateEffect } from "./draft/index.js";
+import { validateUploadReceipt } from "./content-upload.js";
+/** Synthetic semantic harness. Wire acceptance remains the canonical validator's job. */
+import { stageResponse, object } from "./draft-atomic.js";
+export function stageBoundary(before, effects, caps, supplier, validateInput = () => true) {
+    // Stage all state, including scheduling and user-facing messages, before the single commit.
+    let staged = structuredClone(before);
+    if (staged.continuationRemaining === undefined &&
+        caps.flow?.remainingContinuations !== undefined)
+        staged.continuationRemaining = caps.flow.remainingContinuations;
+    const ordinary = [];
+    for (const effect of effects) {
+        if (!validateEffect(effect).ok)
+            throw Error("Invalid effect");
+        if (!caps.effects.includes(effect.type))
+            throw Error("Unsupported effect");
+        if (effect.type === "flow") {
+            const operation = effect.operation;
+            if (typeof operation !== "string" ||
+                !caps.flow?.operations.includes(operation))
+                throw Error("Unsupported flow operation");
+            if (operation === "continue") {
+                if ((!(Number(staged.continuationRemaining) > 0) &&
+                    before.flow !== "continue") ||
+                    (caps.flow.maxContinuations !== undefined &&
+                        (caps.flow.continuationCount ?? 0) >= caps.flow.maxContinuations))
+                    throw Error("Continuation unavailable");
+                if (staged.flow !== "stop")
+                    staged.flow = "continue";
+                if (typeof effect.instruction === "string")
+                    staged.instructions = [
+                        ...(staged.instructions ?? []),
+                        effect.instruction,
+                    ];
+            }
+            else if (operation === "stop" && typeof effect.reason === "string")
+                staged.flow = "stop";
+            else
+                throw Error("Invalid flow");
+        }
+        else if (effect.type === "inject") {
+            if (typeof effect.deliverAt !== "string" ||
+                !caps.inject?.context.deliverAt.includes(effect.deliverAt) ||
+                caps.inject.context.append !== true ||
+                effect.target !== "context" ||
+                effect.operation !== "append" ||
+                !Object.hasOwn(effect, "value"))
+                throw Error("Unsupported injection");
+            staged.injections = [
+                ...(staged.injections ?? []),
+                structuredClone(effect),
+            ];
+        }
+        else if (effect.type === "modify") {
+            const target = effect.target, operation = effect.operation;
+            if (typeof target !== "string" ||
+                (operation !== "replace" && operation !== "merge"))
+                throw Error("Unsupported modification");
+            const targetCaps = caps.modify?.[target];
+            if (!(targetCaps?.[operation] === true ||
+                targetCaps?.operations?.includes(operation)))
+                throw Error("Unsupported target or operation");
+            if (target === "input")
+                ordinary.push(effect);
+            else {
+                if (!staged.values || !Object.hasOwn(staged.values, target))
+                    throw Error("Target unavailable");
+                const previous = staged.values[target];
+                if (operation === "merge" &&
+                    (!object(previous) || !object(effect.value)))
+                    throw Error("Merge requires objects");
+                staged.values[target] =
+                    operation === "merge"
+                        ? {
+                            ...previous,
+                            ...structuredClone(effect.value),
+                        }
+                        : structuredClone(effect.value);
+            }
+        }
+        else
+            ordinary.push(effect);
+    }
+    if (!sameValue(before.values, staged.values)) {
+        staged.candidate = null;
+        if (staged.permission === "allow")
+            staged.permission = "native";
+        if (staged.approval === "approved")
+            staged.approval = "pending";
+    }
+    const inputCaps = caps.modify?.input;
+    const normalized = {
+        effects: caps.effects,
+        modify: {
+            input: {
+                replace: inputCaps?.replace === true ||
+                    inputCaps?.operations?.includes("replace") === true,
+                merge: inputCaps?.merge === true ||
+                    inputCaps?.operations?.includes("merge") === true,
+            },
+        },
+    };
+    staged = stageResponse(staged, ordinary, normalized, supplier, validateInput);
+    if (staged.continuationRemaining !== undefined) {
+        if (staged.flow === "continue" && before.flow !== "continue")
+            staged.continuationRemaining--;
+        else if (staged.flow === "stop" && before.flow === "continue")
+            staged.continuationRemaining++;
+    }
+    return staged;
+}
+export async function dispatchBoundary(eventId, initial, deliveries) {
+    let state = structuredClone(initial);
+    for (const [index, delivery] of deliveries.entries())
+        if (delivery.mode === "intercept") {
+            const effects = await delivery.receive({
+                ...structuredClone(state),
+                eventId,
+            });
+            state = stageBoundary(state, effects, delivery.capabilities, String(index));
+        }
+    // Observation is a settled snapshot, not a second effect channel or execution gate.
+    void Promise.all(deliveries
+        .filter((d) => d.mode === "observe")
+        .map(async (delivery) => {
+        try {
+            await delivery.receive({ ...structuredClone(state), eventId });
+        }
+        catch {
+            /* best effort */
+        }
+    }));
+    return state;
+}
+/** Receiver storage scoped by the host's authenticated principal, not wire claims. */
+export class ContentReceiver {
+    stored = new Map();
+    async upload(scope, bytes) {
+        if (!scope || !(bytes instanceof Uint8Array))
+            throw Error("Authenticated scope and binary bytes required");
+        const snapshot = bytes.slice();
+        const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", snapshot));
+        const sha256 = Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join("");
+        const ref = "urn:ahp:content:" + crypto.randomUUID();
+        this.stored.set(JSON.stringify([scope, ref]), snapshot);
+        return { ref, size: snapshot.length, sha256 };
+    }
+    read(scope, ref) {
+        return this.stored.get(JSON.stringify([scope, ref]))?.slice();
+    }
+}
+export async function prepareContent(items, options) {
+    const result = [];
+    for (const item of items) {
+        const view = { id: item.id, kind: item.kind };
+        if (!options.requested.includes(item.kind))
+            view.gap = "not_requested";
+        else if (!options.authorized.includes(item.kind))
+            view.gap = "permission_withheld";
+        else if (item.bytes === undefined)
+            view.gap = "source_unavailable";
+        else if (item.bytes.length > options.maxBytes)
+            view.gap = "limit_exceeded";
+        else
+            try {
+                const bytes = new Uint8Array(item.bytes);
+                const hash = new Uint8Array(await crypto.subtle.digest("SHA-256", bytes));
+                let timer;
+                let confirmed;
+                try {
+                    confirmed = await Promise.race([
+                        options.upload(bytes.slice()),
+                        new Promise((_, reject) => {
+                            timer = setTimeout(() => reject(Error("Upload timeout")), options.timeoutMs ?? 1000);
+                        }),
+                    ]);
+                }
+                finally {
+                    if (timer !== undefined)
+                        clearTimeout(timer);
+                }
+                const sha256 = Array.from(hash, (byte) => byte.toString(16).padStart(2, "0")).join("");
+                const body = validateUploadReceipt(confirmed, bytes.length, sha256);
+                view.ref = body.ref;
+            }
+            catch {
+                view.gap = "transfer_failed";
+            }
+        if (view.gap &&
+            view.gap !== "not_requested" &&
+            options.mode === "intercept" &&
+            options.failClosed)
+            throw Error("Content delivery failure");
+        result.push(view);
+    }
+    return result;
+}
+export class Lineage {
+    parents = new Map();
+    add(id, parent) {
+        if (this.parents.has(id))
+            throw Error("Duplicate event");
+        const seen = new Set([id]);
+        for (let cursor = parent; cursor !== undefined; cursor = this.parents.get(cursor)) {
+            if (seen.has(cursor))
+                throw Error("Cyclic lineage");
+            seen.add(cursor);
+        }
+        this.parents.set(id, parent);
+    }
+}
+function sameValue(a, b) {
+    if (a === b)
+        return true;
+    if (a === null ||
+        b === null ||
+        typeof a !== "object" ||
+        typeof b !== "object" ||
+        Array.isArray(a) !== Array.isArray(b))
+        return false;
+    const left = a, right = b;
+    return (Object.keys(left).length === Object.keys(right).length &&
+        Object.keys(left).every((key) => Object.hasOwn(right, key) && sameValue(left[key], right[key])));
+}
+export function actualTaskChange(before, after, id, parentEventId) {
+    // Arguments are committed snapshots, not proposed values. Denial with no write
+    // has equal snapshots; actual partial changes remain observable after refusal.
+    if (sameValue(before, after))
+        return null;
+    return {
+        id,
+        type: "task.change.after",
+        ...(parentEventId === undefined ? {} : { parentEventId }),
+        before: structuredClone(before),
+        after: structuredClone(after),
+    };
+}
+export { uploadContent, prepareWireContent, contentReference } from "./content-upload.js";
+export { dispatchObservations } from "./observation.js";
+//# sourceMappingURL=draft-runtime.js.map

package/dist/src/draft-runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"draft-runtime.js","sourceRoot":"","sources":["../../src/draft-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,qBAAqB,EAA6B,MAAM,qBAAqB,CAAC;AACvF,yFAAyF;AACzF,OAAO,EAAE,aAAa,EAAE,MAAM,EAAqB,MAAM,mBAAmB,CAAC;AAwB7E,MAAM,UAAU,aAAa,CAC3B,MAAqB,EACrB,OAAkC,EAClC,IAA0B,EAC1B,QAAgB,EAChB,gBAA6D,GAAG,EAAE,CAAC,IAAI;IAEvE,4FAA4F;IAC5F,IAAI,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IACrC,IACE,MAAM,CAAC,qBAAqB,KAAK,SAAS;QAC1C,IAAI,CAAC,IAAI,EAAE,sBAAsB,KAAK,SAAS;QAE/C,MAAM,CAAC,qBAAqB,GAAG,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC;IAClE,MAAM,QAAQ,GAAqB,EAAE,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,EAAE;YAAE,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YACnC,IACE,OAAO,SAAS,KAAK,QAAQ;gBAC7B,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAE1C,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC5C,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;gBAC7B,IACE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;oBAC1C,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC;oBAC7B,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,KAAK,SAAS;wBACvC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC;oBAEnE,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;gBAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM;oBAAE,MAAM,CAAC,IAAI,GAAG,UAAU,CAAC;gBACrD,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ;oBACxC,MAAM,CAAC,YAAY,GAAG;wBACpB,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC;wBAC9B,MAAM,CAAC,WAAW;qBACnB,CAAC;YACN,CAAC;iBAAM,IAAI,SAAS,KAAK,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;gBAClE,MAAM,CAAC,IAAI,GAAG,MAAM,CAAC;;gBAClB,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC;QACnC,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,IACE,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;gBACpC,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;gBAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI;gBACnC,MAAM,CAAC,MAAM,KAAK,SAAS;gBAC3B,MAAM,CAAC,SAAS,KAAK,QAAQ;gBAC7B,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;gBAE/B,MAAM,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACvC,MAAM,CAAC,UAAU,GAAG;gBAClB,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;gBAC5B,eAAe,CAAC,MAAM,CAAC;aACxB,CAAC;QACJ,CAAC;aAAM,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAC1B,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;YAC/B,IACE,OAAO,MAAM,KAAK,QAAQ;gBAC1B,CAAC,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,OAAO,CAAC;gBAElD,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;YACzC,IACE,CAAC,CACC,UAAU,EAAE,CAAC,SAAS,CAAC,KAAK,IAAI;gBAChC,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,CAC5C;gBAED,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACjD,IAAI,MAAM,KAAK,OAAO;gBAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;iBACzC,CAAC;gBACJ,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;oBACzD,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC;gBACpC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACvC,IACE,SAAS,KAAK,OAAO;oBACrB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAE5C,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;gBACxC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;oBACnB,SAAS,KAAK,OAAO;wBACnB,CAAC,CAAC;4BACE,GAAI,QAAmB;4BACvB,GAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAY;yBAC7C;wBACH,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;;YAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO;YAAE,MAAM,CAAC,UAAU,GAAG,QAAQ,CAAC;QAChE,IAAI,MAAM,CAAC,QAAQ,KAAK,UAAU;YAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;IAClE,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;IACrC,MAAM,UAAU,GAAG;QACjB,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,OAAO,EACL,SAAS,EAAE,OAAO,KAAK,IAAI;oBAC3B,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,SAAS,CAAC,KAAK,IAAI;gBACrD,KAAK,EACH,SAAS,EAAE,KAAK,KAAK,IAAI;oBACzB,SAAS,EAAE,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,IAAI;aACpD;SACF;KACF,CAAC;IACF,MAAM,GAAG,aAAa,CACpB,MAAM,EACN,QAAoB,EACpB,UAA0B,EAC1B,QAAQ,EACR,aAAa,CACd,CAAC;IACF,IAAI,MAAM,CAAC,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC/C,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAC1D,MAAM,CAAC,qBAAqB,EAAE,CAAC;aAC5B,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU;YAC3D,MAAM,CAAC,qBAAqB,EAAE,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAMD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,OAAe,EACf,OAAsB,EACtB,UAAsB;IAEtB,IAAI,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACrC,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,UAAU,CAAC,OAAO,EAAE;QAClD,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC;gBACrC,GAAG,eAAe,CAAC,KAAK,CAAC;gBACzB,OAAO;aACR,CAAC,CAAC;YACH,KAAK,GAAG,aAAa,CACnB,KAAK,EACL,OAAO,EACP,QAAQ,CAAC,YAAY,EACrB,MAAM,CAAC,KAAK,CAAC,CACd,CAAC;QACJ,CAAC;IACH,oFAAoF;IACpF,KAAK,OAAO,CAAC,GAAG,CACd,UAAU;SACP,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;SACnC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QACtB,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC,CAAC,CACL,CAAC;IACF,OAAO,KAAK,CAAC;AACf,CAAC;AAoBD,sFAAsF;AACtF,MAAM,OAAO,eAAe;IAClB,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC/C,KAAK,CAAC,MAAM,CAAC,KAAa,EAAE,KAAiB;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;YAC1C,MAAM,KAAK,CAAC,+CAA+C,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,UAAU,CAC3B,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAChD,CAAC;QACF,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CACzC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CACnC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACX,MAAM,GAAG,GAAG,kBAAkB,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QACrD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QACxD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,KAAa,EAAE,GAAW;QAC7B,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;IAChE,CAAC;CACF;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAAoB,EACpB,OASC;IAED,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAgB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,GAAG,eAAe,CAAC;aAClE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAC9C,IAAI,CAAC,GAAG,GAAG,qBAAqB,CAAC;aAC9B,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,GAAG,GAAG,oBAAoB,CAAC;aAC9D,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,QAAQ;YAAE,IAAI,CAAC,GAAG,GAAG,gBAAgB,CAAC;;YAEzE,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACzC,MAAM,IAAI,GAAG,IAAI,UAAU,CACzB,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAC7C,CAAC;gBACF,IAAI,KAAgD,CAAC;gBACrD,IAAI,SAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;wBAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;wBAC7B,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;4BAC/B,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,EACrC,OAAO,CAAC,SAAS,IAAI,IAAI,CAC1B,CAAC;wBACJ,CAAC,CAAC;qBACH,CAAC,CAAC;gBACL,CAAC;wBAAS,CAAC;oBACT,IAAI,KAAK,KAAK,SAAS;wBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;gBAC/C,CAAC;gBACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CACvC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CACnC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACX,MAAM,IAAI,GAAG,qBAAqB,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBACpE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;YACtB,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,GAAG,GAAG,iBAAiB,CAAC;YAC/B,CAAC;QACH,IACE,IAAI,CAAC,GAAG;YACR,IAAI,CAAC,GAAG,KAAK,eAAe;YAC5B,OAAO,CAAC,IAAI,KAAK,WAAW;YAC5B,OAAO,CAAC,UAAU;YAElB,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,OAAO,OAAO;IACV,OAAO,GAAG,IAAI,GAAG,EAA8B,CAAC;IACxD,GAAG,CAAC,EAAU,EAAE,MAAe;QAC7B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3B,KACE,IAAI,MAAM,GAAG,MAAM,EACnB,MAAM,KAAK,SAAS,EACpB,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EACjC,CAAC;YACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;gBAAE,MAAM,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACpD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnB,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC/B,CAAC;CACF;AACD,SAAS,SAAS,CAAC,CAAU,EAAE,CAAU;IACvC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,IACE,CAAC,KAAK,IAAI;QACV,CAAC,KAAK,IAAI;QACV,OAAO,CAAC,KAAK,QAAQ;QACrB,OAAO,CAAC,KAAK,QAAQ;QACrB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAErC,OAAO,KAAK,CAAC;IACf,MAAM,IAAI,GAAG,CAA4B,EACvC,KAAK,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;QACtD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CACrB,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CACvE,CACF,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,gBAAgB,CAC9B,MAAS,EACT,KAAQ,EACR,EAAU,EACV,aAAsB;IAQtB,+EAA+E;IAC/E,+EAA+E;IAC/E,IAAI,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO;QACL,EAAE;QACF,IAAI,EAAE,mBAAmB;QACzB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;QACzD,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC;QAC/B,KAAK,EAAE,eAAe,CAAC,KAAK,CAAC;KAC9B,CAAC;AACJ,CAAC;AACD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAO1F,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/src/elicitation.d.ts

@@ -0,0 +1,18 @@
+/** MCP 2025-11-25 body binding. Host-owned resolver must verify upload ownership,
+ * length and digest before returning bytes. Identity comes from authentication,
+ * never event.source or elicitation.server. */
+export declare function validateElicitationExchange(request: any, result: any, resolve: (reference: any) => Uint8Array, validate: (schema: string, value: unknown) => void, principal: string, effect?: {
+    type: string;
+    target?: string;
+    operation?: string;
+}): Record<string, unknown>;
+export declare function validateElicitationAnswer(request: any, answer: any, validate: (name: string, value: any) => void): void;
+export declare function validateElicitationMode(mode: string, capabilities?: Record<string, unknown>, origin?: string): Record<string, unknown>;
+/** Stage the complete effect list on a snapshot; publish only after validation.
+ * The caller uploads the resulting complete JSON before emitting a result event. */
+export declare function applyElicitationEffects(request: any, result: any | null, resolve: (reference: any) => Uint8Array, validate: (schema: string, value: any) => void, principal: string, effects: any[]): Record<string, any>;
+/** Metadata and omit never resolve or parse content. Selected gaps fail closed. */
+export declare function readSelectedElicitation(meta: any, stage: "request" | "result", resolve: (reference: any) => Uint8Array, validate: (schema: string, value: any) => void): any | null;
+/** Require source-scoped parent identity and identical session scope before IO. */
+export declare function validateElicitationCorrelation(request: any, result: any): void;
+//# sourceMappingURL=elicitation.d.ts.map

package/dist/src/elicitation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elicitation.d.ts","sourceRoot":"","sources":["../../src/elicitation.ts"],"names":[],"mappings":"AAAA;;+CAE+C;AAC/C,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,GAAG,EACZ,MAAM,EAAE,GAAG,EACX,OAAO,EAAE,CAAC,SAAS,EAAE,GAAG,KAAK,UAAU,EACvC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,EAClD,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAwEzB;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,GAAG,EACZ,MAAM,EAAE,GAAG,EACX,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,GAC3C,IAAI,CAUN;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACtC,MAAM,SAAQ,GACb,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAuBzB;AAED;oFACoF;AACpF,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,GAAG,EACZ,MAAM,EAAE,GAAG,GAAG,IAAI,EAClB,OAAO,EAAE,CAAC,SAAS,EAAE,GAAG,KAAK,UAAU,EACvC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,EAC9C,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,GAAG,EAAE,GACb,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAoErB;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,GAAG,EACT,KAAK,EAAE,SAAS,GAAG,QAAQ,EAC3B,OAAO,EAAE,CAAC,SAAS,EAAE,GAAG,KAAK,UAAU,EACvC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,IAAI,GAC7C,GAAG,GAAG,IAAI,CAuBZ;AAED,mFAAmF;AACnF,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,GAAG,EACZ,MAAM,EAAE,GAAG,GACV,IAAI,CAUN"}

package/dist/src/elicitation.js

@@ -0,0 +1,191 @@
+/** MCP 2025-11-25 body binding. Host-owned resolver must verify upload ownership,
+ * length and digest before returning bytes. Identity comes from authentication,
+ * never event.source or elicitation.server. */
+export function validateElicitationExchange(request, result, resolve, validate, principal, effect) {
+    if (!principal)
+        throw Error("Authenticated principal required");
+    for (const envelope of [request, result]) {
+        validate("intercept-request", envelope);
+        if (envelope.id !== envelope.params.event.id)
+            throw Error("Request/event ID mismatch");
+    }
+    if (request.params.event.type !== "user.elicitation.request" ||
+        result.params.event.type !== "user.elicitation.result")
+        throw Error("Wrong elicitation boundary");
+    validateElicitationCorrelation(request, result);
+    const req = request.params.event.elicitation, res = result.params.event.elicitation;
+    const payload = readSelectedElicitation(req, "request", resolve, validate);
+    const answer = readSelectedElicitation(res, "result", resolve, validate);
+    if (req.mode !== res.mode || req.server !== res.server)
+        throw Error("Normalized metadata mismatch");
+    if (payload === null || answer === null) {
+        if (effect !== undefined)
+            throw Error("Effects require selected bodies");
+        return {
+            selection: {
+                request: req.request?.selection ?? "omit",
+                result: res.result?.selection ?? "omit",
+            },
+            bodyValidation: "not-selected",
+            provenance: { kind: "mcp", authenticatedSource: principal },
+            externalCompletion: false,
+        };
+    }
+    validateElicitationAnswer(payload, answer, validate);
+    const mode = payload.mode ?? "form";
+    if (req.mode !== mode ||
+        res.mode !== mode ||
+        req.server !== res.server ||
+        res.action !== answer.action)
+        throw Error("Normalized metadata mismatch");
+    if ((mode === "url" || answer.action !== "accept") && "content" in answer)
+        throw Error("Content is only permitted for accepted forms");
+    let provenance = {
+        kind: "mcp",
+        authenticatedSource: principal,
+    };
+    if (effect !== undefined) {
+        validate("effect", effect);
+        const kind = effect.type, boundary = kind === "modify" ? result : request;
+        if (!["return", "deny", "modify"].includes(kind) ||
+            !boundary.params.capabilities.effects.includes(kind))
+            throw Error("Effect not granted at this boundary");
+        if (kind === "modify" &&
+            (effect.target !== "content" ||
+                !["replace", "merge"].includes(effect.operation ?? "") ||
+                boundary.params.capabilities.modify?.content?.[effect.operation ?? ""] !== true))
+            throw Error("Modify target/operation not granted");
+        provenance = { kind: "hook", authenticatedSource: principal, effect: kind };
+    }
+    return structuredClone({
+        request: payload,
+        result: answer,
+        provenance,
+        externalCompletion: false,
+    });
+}
+export function validateElicitationAnswer(request, answer, validate) {
+    validate("mcp-elicitation#result", answer);
+    const mode = request.mode ?? "form";
+    if ((mode === "url" || answer.action !== "accept") && "content" in answer)
+        throw Error("Content is only permitted for accepted forms");
+    if (mode === "form" && answer.action === "accept")
+        validate("form-answer", {
+            schema: request.requestedSchema,
+            value: answer.content ?? {},
+        });
+}
+export function validateElicitationMode(mode, capabilities, origin = "ahp") {
+    if (!["ahp", "mcp"].includes(origin) || !["form", "url"].includes(mode))
+        throw Error("Unknown origin or mode");
+    let caps = structuredClone(capabilities ?? {});
+    if (typeof caps !== "object" ||
+        caps === null ||
+        Array.isArray(caps) ||
+        Object.entries(caps).some(([k, v]) => ["form", "url"].includes(k) &&
+            (typeof v !== "object" || v === null || Array.isArray(v))))
+        throw Error("Invalid elicitation capabilities");
+    if (origin === "mcp" &&
+        capabilities !== undefined &&
+        Object.keys(capabilities).length === 0)
+        caps = { form: {} };
+    if (!(mode in caps))
+        throw Error("Elicitation mode not registered");
+    return caps;
+}
+/** Stage the complete effect list on a snapshot; publish only after validation.
+ * The caller uploads the resulting complete JSON before emitting a result event. */
+export function applyElicitationEffects(request, result, resolve, validate, principal, effects) {
+    if (!principal || !Array.isArray(effects) || !effects.length)
+        throw Error("Authenticated effects required");
+    validate("intercept-request", request);
+    if (request.id !== request.params.event.id ||
+        request.params.event.type !== "user.elicitation.request")
+        throw Error("Invalid request boundary");
+    if (result !== null)
+        validateElicitationCorrelation(request, result);
+    const meta = request.params.event.elicitation;
+    const payload = readSelectedElicitation(meta, "request", resolve, validate);
+    if (payload === null)
+        throw Error("Effects require selected request body");
+    if (meta.mode !== (payload.mode ?? "form"))
+        throw Error("Mode mismatch");
+    const boundary = result ?? request, caps = boundary.params.capabilities, kinds = [];
+    let staged = result === null
+        ? null
+        : validateElicitationExchange(request, result, resolve, validate, principal).result;
+    if (result !== null && staged === undefined)
+        throw Error("Effects require selected bodies");
+    for (const effect of effects) {
+        validate("effect", effect);
+        const kind = effect.type;
+        if (!caps.effects.includes(kind) ||
+            !(result === null ? ["return", "deny"] : ["modify"]).includes(kind))
+            throw Error("Effect not granted at this boundary");
+        if (kind === "return" || kind === "deny") {
+            if (kinds.length)
+                throw Error("Conflicting terminal effects");
+            staged =
+                kind === "return"
+                    ? structuredClone(effect.value)
+                    : { action: "decline" };
+        }
+        else {
+            if (effect.target !== "content" ||
+                !["replace", "merge"].includes(effect.operation) ||
+                caps.modify?.content?.[effect.operation] !== true)
+                throw Error("Modify target/operation not granted");
+            staged.content =
+                effect.operation === "replace"
+                    ? structuredClone(effect.value)
+                    : { ...staged.content, ...structuredClone(effect.value) };
+        }
+        kinds.push(kind);
+    }
+    validateElicitationAnswer(payload, staged, validate);
+    return {
+        request: payload,
+        result: staged,
+        provenance: {
+            kind: "hook",
+            authenticatedSource: principal,
+            effects: kinds,
+        },
+        externalCompletion: false,
+    };
+}
+/** Metadata and omit never resolve or parse content. Selected gaps fail closed. */
+export function readSelectedElicitation(meta, stage, resolve, validate) {
+    const item = meta[stage];
+    if (item === undefined)
+        return null;
+    validate("content-item", item);
+    if (item.mediaType !== "application/json")
+        throw Error("MCP body must be application/json");
+    if (item.selection !== "body")
+        return null;
+    if (!item.body)
+        throw Error("Selected body unavailable (fail closed)");
+    const payload = JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(resolve(item.body)));
+    validate("mcp-elicitation#" + stage, payload);
+    if (stage === "request" && meta.mode !== (payload.mode ?? "form"))
+        throw Error("Mode mismatch");
+    if (stage === "result") {
+        if (meta.action !== payload.action)
+            throw Error("Action mismatch");
+        if ((meta.mode === "url" || payload.action !== "accept") &&
+            "content" in payload)
+            throw Error("Forbidden content");
+    }
+    return payload;
+}
+/** Require source-scoped parent identity and identical session scope before IO. */
+export function validateElicitationCorrelation(request, result) {
+    const req = request.params.event, res = result.params.event;
+    if (typeof res.parentEventId !== "string" ||
+        res.parentEventId !== req.id ||
+        res.source !== req.source ||
+        res.session?.id !== req.session?.id)
+        throw Error("Elicitation parent/source/session mismatch");
+}
+//# sourceMappingURL=elicitation.js.map

package/dist/src/elicitation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elicitation.js","sourceRoot":"","sources":["../../src/elicitation.ts"],"names":[],"mappings":"AAAA;;+CAE+C;AAC/C,MAAM,UAAU,2BAA2B,CACzC,OAAY,EACZ,MAAW,EACX,OAAuC,EACvC,QAAkD,EAClD,SAAiB,EACjB,MAA8D;IAE9D,IAAI,CAAC,SAAS;QAAE,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAChE,KAAK,MAAM,QAAQ,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACzC,QAAQ,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC;QACxC,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;YAC1C,MAAM,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAC7C,CAAC;IACD,IACE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,0BAA0B;QACxD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,yBAAyB;QAEtD,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC5C,8BAA8B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,EAC1C,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;IACxC,MAAM,OAAO,GAAG,uBAAuB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;QACpD,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,IAAI,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACzE,OAAO;YACL,SAAS,EAAE;gBACT,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,MAAM;gBACzC,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,IAAI,MAAM;aACxC;YACD,cAAc,EAAE,cAAc;YAC9B,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE;YAC3D,kBAAkB,EAAE,KAAK;SAC1B,CAAC;IACJ,CAAC;IACD,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;IACpC,IACE,GAAG,CAAC,IAAI,KAAK,IAAI;QACjB,GAAG,CAAC,IAAI,KAAK,IAAI;QACjB,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;QACzB,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;QAE5B,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,SAAS,IAAI,MAAM;QACvE,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC9D,IAAI,UAAU,GAA2B;QACvC,IAAI,EAAE,KAAK;QACX,mBAAmB,EAAE,SAAS;KAC/B,CAAC;IACF,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EACtB,QAAQ,GAAG,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;QAClD,IACE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC5C,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEpD,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrD,IACE,IAAI,KAAK,QAAQ;YACjB,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS;gBAC1B,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;gBACtD,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,CAC5C,MAAM,CAAC,SAAS,IAAI,EAAE,CACvB,KAAK,IAAI,CAAC;YAEb,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrD,UAAU,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC9E,CAAC;IACD,OAAO,eAAe,CAAC;QACrB,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,MAAM;QACd,UAAU;QACV,kBAAkB,EAAE,KAAK;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAY,EACZ,MAAW,EACX,QAA4C;IAE5C,QAAQ,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;IACpC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,SAAS,IAAI,MAAM;QACvE,MAAM,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAC9D,IAAI,IAAI,KAAK,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QAC/C,QAAQ,CAAC,aAAa,EAAE;YACtB,MAAM,EAAE,OAAO,CAAC,eAAe;YAC/B,KAAK,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE;SAC5B,CAAC,CAAC;AACP,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,YAAsC,EACtC,MAAM,GAAG,KAAK;IAEd,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACxC,IAAI,IAAI,GAAG,eAAe,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;IAC/C,IACE,OAAO,IAAI,KAAK,QAAQ;QACxB,IAAI,KAAK,IAAI;QACb,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CACvB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CACT,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC3B,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAC5D;QAED,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAClD,IACE,MAAM,KAAK,KAAK;QAChB,YAAY,KAAK,SAAS;QAC1B,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,CAAC;QAEtC,IAAI,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtB,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC;AACd,CAAC;AAED;oFACoF;AACpF,MAAM,UAAU,uBAAuB,CACrC,OAAY,EACZ,MAAkB,EAClB,OAAuC,EACvC,QAA8C,EAC9C,SAAiB,EACjB,OAAc;IAEd,IAAI,CAAC,SAAS,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;QAC1D,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAChD,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;IACvC,IACE,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACtC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,0BAA0B;QAExD,MAAM,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,IAAI;QAAE,8BAA8B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC;IAC9C,MAAM,OAAO,GAAG,uBAAuB,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC5E,IAAI,OAAO,KAAK,IAAI;QAAE,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3E,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;QAAE,MAAM,KAAK,CAAC,eAAe,CAAC,CAAC;IACzE,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,EAChC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,EACnC,KAAK,GAAa,EAAE,CAAC;IACvB,IAAI,MAAM,GACR,MAAM,KAAK,IAAI;QACb,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,2BAA2B,CACzB,OAAO,EACP,MAAM,EACN,OAAO,EACP,QAAQ,EACR,SAAS,CACV,CAAC,MAAM,CAAC;IACf,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,SAAS;QACzC,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACjD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IACE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC5B,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEnE,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACzC,IAAI,KAAK,CAAC,MAAM;gBAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;YAC9D,MAAM;gBACJ,IAAI,KAAK,QAAQ;oBACf,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/B,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,IACE,MAAM,CAAC,MAAM,KAAK,SAAS;gBAC3B,CAAC,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC;gBAChD,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI;gBAEjD,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;YACrD,MAAM,CAAC,OAAO;gBACZ,MAAM,CAAC,SAAS,KAAK,SAAS;oBAC5B,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC;oBAC/B,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;IACD,yBAAyB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACrD,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,MAAM,EAAE,MAAM;QACd,UAAU,EAAE;YACV,IAAI,EAAE,MAAM;YACZ,mBAAmB,EAAE,SAAS;YAC9B,OAAO,EAAE,KAAK;SACf;QACD,kBAAkB,EAAE,KAAK;KAC1B,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,uBAAuB,CACrC,IAAS,EACT,KAA2B,EAC3B,OAAuC,EACvC,QAA8C;IAE9C,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,SAAS,KAAK,kBAAkB;QACvC,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACnD,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,IAAI;QAAE,MAAM,KAAK,CAAC,yCAAyC,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CACxB,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CACrE,CAAC;IACF,QAAQ,CAAC,kBAAkB,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9C,IAAI,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,MAAM,CAAC;QAC/D,MAAM,KAAK,CAAC,eAAe,CAAC,CAAC;IAC/B,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACnE,IACE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC;YACpD,SAAS,IAAI,OAAO;YAEpB,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,8BAA8B,CAC5C,OAAY,EACZ,MAAW;IAEX,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAC9B,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;IAC5B,IACE,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ;QACrC,GAAG,CAAC,aAAa,KAAK,GAAG,CAAC,EAAE;QAC5B,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;QACzB,GAAG,CAAC,OAAO,EAAE,EAAE,KAAK,GAAG,CAAC,OAAO,EAAE,EAAE;QAEnC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;AAC9D,CAAC"}

package/dist/src/errors.d.ts

@@ -0,0 +1,7 @@
+export type HookErrorCode = "INVALID_CONFIG" | "SPAWN_ERROR" | "IO_ERROR" | "TIMEOUT" | "MALFORMED_UTF8" | "MALFORMED_JSON" | "MALFORMED_JSON_RPC" | "ID_MISMATCH" | "JSON_RPC_ERROR" | "INCOMPATIBLE_VERSION" | "UNSUPPORTED_EVENT" | "UNSUPPORTED_EFFECT" | "MULTIPLE_EFFECTS";
+export declare class HookOperationalError extends Error {
+    readonly code: HookErrorCode;
+    constructor(code: HookErrorCode, message: string, options?: ErrorOptions);
+}
+export declare function asOperationalError(error: unknown): HookOperationalError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/src/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,aAAa,GACrB,gBAAgB,GAChB,aAAa,GACb,UAAU,GACV,SAAS,GACT,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,GACpB,aAAa,GACb,gBAAgB,GAChB,sBAAsB,GACtB,mBAAmB,GACnB,oBAAoB,GACpB,kBAAkB,CAAC;AAEvB,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;gBAEjB,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAKzE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,CAIvE"}

package/dist/src/errors.js

@@ -0,0 +1,15 @@
+export class HookOperationalError extends Error {
+    code;
+    constructor(code, message, options) {
+        super(message, options);
+        this.name = "HookOperationalError";
+        this.code = code;
+    }
+}
+export function asOperationalError(error) {
+    if (error instanceof HookOperationalError)
+        return error;
+    const message = error instanceof Error ? error.message : String(error);
+    return new HookOperationalError("IO_ERROR", message, { cause: error });
+}
+//# sourceMappingURL=errors.js.map

package/dist/src/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,CAAgB;IAE7B,YAAY,IAAmB,EAAE,OAAe,EAAE,OAAsB;QACtE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,KAAK,YAAY,oBAAoB;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,IAAI,oBAAoB,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AACzE,CAAC"}

package/dist/src/framing.d.ts

@@ -0,0 +1,7 @@
+/** Incremental, strict UTF-8 NDJSON decoder. Empty lines are not frames. */
+export declare class NdjsonDecoder {
+    #private;
+    push(chunk: Uint8Array): string[];
+    end(): void;
+}
+//# sourceMappingURL=framing.d.ts.map

package/dist/src/framing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"framing.d.ts","sourceRoot":"","sources":["../../src/framing.ts"],"names":[],"mappings":"AAIA,4EAA4E;AAC5E,qBAAa,aAAa;;IAIxB,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE;IAsCjC,GAAG,IAAI,IAAI;CAQZ"}

package/dist/src/framing.js

@@ -0,0 +1,39 @@
+import { HookOperationalError } from "./errors.js";
+const MAX_LINE_BYTES = 1024 * 1024;
+/** Incremental, strict UTF-8 NDJSON decoder. Empty lines are not frames. */
+export class NdjsonDecoder {
+    #buffer = Buffer.alloc(0);
+    #decoder = new TextDecoder("utf-8", { fatal: true });
+    push(chunk) {
+        this.#buffer = Buffer.concat([this.#buffer, chunk]);
+        if (this.#buffer.length > MAX_LINE_BYTES && !this.#buffer.includes(0x0a)) {
+            throw new HookOperationalError("MALFORMED_JSON_RPC", "NDJSON frame exceeds 1 MiB");
+        }
+        const lines = [];
+        let newline;
+        while ((newline = this.#buffer.indexOf(0x0a)) !== -1) {
+            let frame = this.#buffer.subarray(0, newline);
+            this.#buffer = this.#buffer.subarray(newline + 1);
+            if (frame.length > MAX_LINE_BYTES)
+                throw new HookOperationalError("MALFORMED_JSON_RPC", "NDJSON frame exceeds 1 MiB");
+            if (frame.at(-1) === 0x0d)
+                frame = frame.subarray(0, -1);
+            if (frame.length === 0) {
+                throw new HookOperationalError("MALFORMED_JSON_RPC", "Empty NDJSON frame");
+            }
+            try {
+                lines.push(this.#decoder.decode(frame));
+            }
+            catch (error) {
+                throw new HookOperationalError("MALFORMED_UTF8", "NDJSON frame is not valid UTF-8", { cause: error });
+            }
+        }
+        return lines;
+    }
+    end() {
+        if (this.#buffer.length !== 0) {
+            throw new HookOperationalError("MALFORMED_JSON_RPC", "Output ended with an incomplete NDJSON frame");
+        }
+    }
+}
+//# sourceMappingURL=framing.js.map

package/dist/src/framing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framing.js","sourceRoot":"","sources":["../../src/framing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnC,4EAA4E;AAC5E,MAAM,OAAO,aAAa;IACxB,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjB,QAAQ,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAE9D,IAAI,CAAC,KAAiB;QACpB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,4BAA4B,CAC7B,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,OAAe,CAAC;QACpB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACrD,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;YAClD,IAAI,KAAK,CAAC,MAAM,GAAG,cAAc;gBAC/B,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,4BAA4B,CAC7B,CAAC;YACJ,IAAI,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;gBAAE,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YACzD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACvB,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,oBAAoB,CACrB,CAAC;YACJ,CAAC;YACD,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC1C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,oBAAoB,CAC5B,gBAAgB,EAChB,iCAAiC,EACjC,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,GAAG;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,oBAAoB,CAC5B,oBAAoB,EACpB,8CAA8C,CAC/C,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}