byollm 0.1.0-alpha.13 → 0.1.0-alpha.15

package/README.md

@@ -1,5 +1,5 @@
 > [!WARNING]
-> **Alpha (`0.1.0-alpha.13`) — under active development. Don't use this yet.**
+> **Alpha (`0.1.0-alpha.15`) — under active development. Don't use this yet.**
 >
 > Install it deliberately: `npx byollm@alpha`, or `npm install byollm@alpha`.
 >
@@ -11,7 +11,20 @@
 > npm assigns `latest` on a first publish and won't let it be removed, so a
 > bare install resolves here too. This notice is the only guard — deliberately
 > not an npm deprecation, which would read as *abandoned* rather than *early*.
-> Ask for `@alpha` explicitly so your lockfile records that you meant to.
+> Ask for `@alpha` explicitly so your lockfile records that you meant to.>
+> **`alpha.15` is a breaking wire change, and it breaks daemons and relays —
+> not app authors.** If you call `app.enqueue(...)` and read results, nothing
+> in your code changes. If you run a daemon or an upstream, every package must
+> move together: a mixed pair refuses on both sides, because both ends parse
+> `.strict()`.
+>
+> What moved, all of it reconciling the frozen `byollm_009` with its code:
+> `JobStub` gains `site` (the site's identity key id) and loses
+> `audienceAllow`; `ResultRequest` gains `leaseId`; `HeartbeatResponse` loses
+> `leases`, which nothing read; `WireErrorCode` gains `not-ready`,
+> `clock-skew` and `forbidden`, and `403` is `forbidden` rather than
+> `unauthorized`. `RESULT_PROVENANCE` is superseded by
+> `PROVENANCE_NAMES_DEVICE`. See `byollm_009` Amendment A.
 >
 > **`alpha.3` is a breaking change.** A config naming `openai-http` with a
 > remote base URL and an offer scope wider than `self` is narrowed to `self`

package/dist/bin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   main
-} from "./chunk-6XRYOTHC.js";
+} from "./chunk-QHXXCGAJ.js";
 
 // src/bin.ts
 process.exitCode = await main(process.argv.slice(2));

package/dist/{chunk-6XRYOTHC.js → chunk-QHXXCGAJ.js}

@@ -391,7 +391,7 @@ var ProtocolClient = class _ProtocolClient {
       case 401:
         return new ClientError("unauthorized", message, retryAfter);
       case 403:
-        return new ClientError("revoked", message, retryAfter);
+        return new ClientError("forbidden", message, retryAfter);
       case 409:
         return new ClientError("not-ready", message, retryAfter);
       case 429:
@@ -1943,8 +1943,12 @@ var Runner = class {
     const match = matchAudience(
       {
         owner: job.owner,
-        audience: job.audience,
-        audienceAllow: job.audienceAllow
+        audience: job.audience
+        // No `audienceAllow`: it is not on the wire any more (cloud_008
+        // §0.2), and this is the branch that made it look load-bearing. It
+        // narrowed a decision `locallyAllows` below already owns — the site
+        // could only ever agree with the daemon's own list or contradict it,
+        // and nothing wrote down which won.
       },
       {
         owner: this.#options.owner,
@@ -2179,6 +2183,10 @@ var Runner = class {
       () => this.#options.client.result({
         runnerId: this.#options.runnerId,
         jobId: job.id,
+        // The grant this work was done under, not merely who did it. A runner
+        // id survives a claim-release-reclaim cycle; a lease id is the thing
+        // that ended.
+        leaseId: job.lease.id,
         envelope,
         disposition: outcome.outcome,
         model: route?.model ?? "unknown",
@@ -2278,13 +2286,19 @@ var Runner = class {
       );
     }
     const keys = await identity.keys();
+    const pinnedKeyId = keyId(identity.sitePinned.identity);
+    if (job.site !== pinnedKeyId) {
+      throw new Error(
+        `refusing job ${job.id}: it names site ${job.site}, but this machine is paired with ${pinnedKeyId}`
+      );
+    }
     const opened = await open({
       envelope,
       recipientKeys: keys,
       senderIdentityPublic: identity.sitePinned.identity,
       expected: {
         jobId: job.id,
-        senderKeyId: keyId(identity.sitePinned.identity),
+        senderKeyId: pinnedKeyId,
         recipientKeyId: keyId(publicIdentityOf2(keys).identity),
         direction: "payload"
       }
@@ -3059,7 +3073,7 @@ async function main(argv) {
 }
 
 // src/index.ts
-var DAEMON_VERSION = "0.1.0-alpha.13";
+var DAEMON_VERSION = "0.1.0-alpha.15";
 function daemonVersion() {
   return {
     daemon: DAEMON_VERSION,
@@ -3112,4 +3126,4 @@ export {
   runCli,
   main
 };
-//# sourceMappingURL=chunk-6XRYOTHC.js.map
+//# sourceMappingURL=chunk-QHXXCGAJ.js.map