dsh-agora-plugin 0.6.0

package/lib/extension-sdk.js

@@ -0,0 +1,160 @@
+import { createHash, createPublicKey, verify as verifySignature } from 'node:crypto';
+export const DSH_AGORA_EXTENSION_PROTOCOL = 'dsh-agora.extension/v1';
+export const DSH_AGORA_RUNTIME_PROTOCOL = 'dsh-agora.runtime/v1';
+export const DSH_AGORA_EXTENSION_MANIFEST_PROTOCOL = 'dsh-agora.extension-manifest/v1';
+export class DshAgoraExtensionRegistry {
+    trustPolicy;
+    extensions = new Map();
+    manifests = new Map();
+    constructor(trustPolicy = {}) {
+        this.trustPolicy = trustPolicy;
+    }
+    registerExtension(extension, manifest, packageBytes) {
+        validateExtension(extension);
+        const builtIn = new Set(this.trustPolicy.builtInExtensionIds ?? ['dsh-runtime']).has(extension.id);
+        if (manifest) {
+            validateExtensionManifest(manifest, extension);
+            if (this.trustPolicy.requireSignedThirdParty && !builtIn && packageBytes === undefined) {
+                throw new Error(`extension "${extension.id}" requires package bytes for integrity verification`);
+            }
+            verifyExtensionManifest(manifest, this.trustPolicy, packageBytes);
+        }
+        else if (this.trustPolicy.requireSignedThirdParty && !builtIn) {
+            throw new Error(`extension "${extension.id}" requires a signed manifest`);
+        }
+        if (this.extensions.has(extension.id))
+            throw new Error(`dsh-agora extension "${extension.id}" is already registered`);
+        const frozen = Object.freeze({
+            ...extension,
+            capabilities: Object.freeze(unique(extension.capabilities)),
+        });
+        this.extensions.set(frozen.id, frozen);
+        if (manifest)
+            this.manifests.set(frozen.id, Object.freeze({ ...manifest }));
+        return () => {
+            if (this.extensions.get(frozen.id) === frozen) {
+                this.extensions.delete(frozen.id);
+                this.manifests.delete(frozen.id);
+            }
+        };
+    }
+    manifestFor(id) {
+        return this.manifests.get(id) ?? null;
+    }
+    listExtensions() {
+        return [...this.extensions.values()].sort((left, right) => left.id.localeCompare(right.id));
+    }
+    runtimeForTarget(runtimeTargetRef) {
+        const runtimes = [...this.extensions.values()].filter(extension => (extension.runtime && extension.capabilities.includes('runtime.execute')));
+        const explicit = runtimes.find(extension => extension.runtime.supportsTarget?.(runtimeTargetRef) === true);
+        if (explicit?.runtime)
+            return explicit.runtime;
+        if (runtimeTargetRef.startsWith('dsh:')) {
+            const builtIn = runtimes.find(extension => extension.id === 'dsh-runtime');
+            if (builtIn?.runtime)
+                return builtIn.runtime;
+        }
+        const legacy = runtimes.filter(extension => extension.runtime.supportsTarget === undefined);
+        return legacy.length === 1 ? legacy[0].runtime : null;
+    }
+}
+export function verifyExtensionManifest(manifest, policy, packageBytes) {
+    if (packageBytes && createHash('sha256').update(packageBytes).digest('hex') !== manifest.integrity_sha256) {
+        throw new Error(`extension manifest integrity mismatch for ${manifest.id}`);
+    }
+    if (!manifest.signature) {
+        if (policy.requireSignedThirdParty)
+            throw new Error(`extension manifest ${manifest.id} is unsigned`);
+        return false;
+    }
+    const keyRef = `${manifest.publisher.id}:${manifest.publisher.key_id}`;
+    const publicKey = policy.trustedPublicKeys?.[keyRef];
+    if (!publicKey)
+        throw new Error(`extension publisher key ${keyRef} is not trusted`);
+    const valid = verifySignature(null, Buffer.from(canonicalManifest(manifest)), createPublicKey(publicKey), Buffer.from(manifest.signature.value, 'base64url'));
+    if (!valid)
+        throw new Error(`extension manifest signature is invalid for ${manifest.id}`);
+    return true;
+}
+export async function runExtensionConformance(extension, manifest) {
+    validateExtension(extension);
+    if (manifest)
+        validateExtensionManifest(manifest, extension);
+    const checks = ['extension-shape', 'capability-uniqueness'];
+    if (extension.runtime) {
+        const first = normalizeAgents(await extension.runtime.describeAgents());
+        const second = normalizeAgents(await extension.runtime.describeAgents());
+        if (JSON.stringify(first) !== JSON.stringify(second))
+            throw new Error('runtime describeAgents must be deterministic');
+        if (new Set(first.map(agent => agent.agent_ref)).size !== first.length)
+            throw new Error('runtime describeAgents returned duplicate agent_ref values');
+        checks.push('runtime-protocol', 'runtime-deterministic-agents', 'runtime-unique-agent-refs');
+    }
+    if (manifest)
+        checks.push('manifest-capability-permissions');
+    return { ok: true, checks };
+}
+function validateExtension(extension) {
+    if (extension.protocol !== DSH_AGORA_EXTENSION_PROTOCOL) {
+        throw new TypeError(`extension protocol must be ${DSH_AGORA_EXTENSION_PROTOCOL}`);
+    }
+    if (!/^[a-z0-9][a-z0-9._-]{0,127}$/u.test(extension.id))
+        throw new TypeError('extension id is invalid');
+    if (!Array.isArray(extension.capabilities) || extension.capabilities.some(value => typeof value !== 'string' || value.trim() === '')) {
+        throw new TypeError('extension capabilities must be non-empty strings');
+    }
+    if (unique(extension.capabilities).length !== extension.capabilities.length)
+        throw new TypeError('extension capabilities must be unique');
+    if (extension.runtime !== undefined && extension.runtime.protocol !== DSH_AGORA_RUNTIME_PROTOCOL) {
+        throw new TypeError(`runtime adapter protocol must be ${DSH_AGORA_RUNTIME_PROTOCOL}`);
+    }
+}
+function validateExtensionManifest(manifest, extension) {
+    if (manifest.protocol !== DSH_AGORA_EXTENSION_MANIFEST_PROTOCOL)
+        throw new TypeError(`manifest protocol must be ${DSH_AGORA_EXTENSION_MANIFEST_PROTOCOL}`);
+    if (manifest.id !== extension.id || manifest.kind !== extension.kind)
+        throw new TypeError('manifest identity does not match extension');
+    if (!/^\d+\.\d+\.\d+(?:[-+][A-Za-z0-9.-]+)?$/u.test(manifest.version))
+        throw new TypeError('manifest version must be semantic');
+    if (!/^[a-f0-9]{64}$/u.test(manifest.integrity_sha256))
+        throw new TypeError('manifest integrity_sha256 is invalid');
+    const capabilities = unique(extension.capabilities);
+    if (JSON.stringify(unique(manifest.capabilities)) !== JSON.stringify(capabilities))
+        throw new TypeError('manifest capabilities do not match extension capabilities');
+    const granted = new Set(manifest.permissions.map(permission => permission.capability));
+    if (granted.size !== manifest.permissions.length)
+        throw new TypeError('manifest permissions contain duplicate capabilities');
+    for (const capability of capabilities)
+        if (!granted.has(capability))
+            throw new TypeError(`manifest permission missing for capability ${capability}`);
+    for (const permission of manifest.permissions) {
+        if (!capabilities.includes(permission.capability))
+            throw new TypeError(`manifest permission exceeds declared capability ${permission.capability}`);
+        if (permission.resources.length === 0 || permission.resources.some(resource => !resource.trim())) {
+            throw new TypeError(`manifest permission ${permission.capability} requires explicit resources`);
+        }
+    }
+    if (!/^[a-z0-9][a-z0-9._-]{0,127}$/u.test(manifest.publisher.id) || !manifest.publisher.key_id.trim())
+        throw new TypeError('manifest publisher is invalid');
+    if (manifest.signature && manifest.signature.algorithm !== 'Ed25519')
+        throw new TypeError('only Ed25519 extension signatures are supported');
+}
+function canonicalManifest(manifest) {
+    const { signature: _signature, ...unsigned } = manifest;
+    return stableJson(unsigned);
+}
+function stableJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map(stableJson).join(',')}]`;
+    if (value && typeof value === 'object')
+        return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stableJson(item)}`).join(',')}}`;
+    return JSON.stringify(value) ?? 'null';
+}
+function normalizeAgents(agents) {
+    return agents.map(agent => ({ ...agent, roles: unique(agent.roles), capabilities: unique(agent.capabilities) }))
+        .sort((left, right) => left.agent_ref.localeCompare(right.agent_ref));
+}
+function unique(values) {
+    return [...new Set(values.map(value => value.trim()).filter(Boolean))].sort();
+}
+//# sourceMappingURL=extension-sdk.js.map

package/lib/extension-sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-sdk.js","sourceRoot":"","sources":["../src/extension-sdk.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,aAAa,CAAA;AAQpF,MAAM,CAAC,MAAM,4BAA4B,GAAG,wBAAiC,CAAA;AAC7E,MAAM,CAAC,MAAM,0BAA0B,GAAG,sBAA+B,CAAA;AACzE,MAAM,CAAC,MAAM,qCAAqC,GAAG,iCAA0C,CAAA;AA+D/F,MAAM,OAAO,yBAAyB;IAIP;IAHZ,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAA;IACnD,SAAS,GAAG,IAAI,GAAG,EAAuC,CAAA;IAE3E,YAA6B,cAA4C,EAAE;QAA9C,gBAAW,GAAX,WAAW,CAAmC;IAAG,CAAC;IAE/E,iBAAiB,CAAC,SAA8B,EAAE,QAAsC,EAAE,YAAyB;QACjH,iBAAiB,CAAC,SAAS,CAAC,CAAA;QAC5B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,mBAAmB,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;QAClG,IAAI,QAAQ,EAAE,CAAC;YACb,yBAAyB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;YAC9C,IAAI,IAAI,CAAC,WAAW,CAAC,uBAAuB,IAAI,CAAC,OAAO,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;gBACvF,MAAM,IAAI,KAAK,CAAC,cAAc,SAAS,CAAC,EAAE,qDAAqD,CAAC,CAAA;YAClG,CAAC;YACD,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAA;QACnE,CAAC;aAAM,IAAI,IAAI,CAAC,WAAW,CAAC,uBAAuB,IAAI,CAAC,OAAO,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,cAAc,SAAS,CAAC,EAAE,8BAA8B,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,SAAS,CAAC,EAAE,yBAAyB,CAAC,CAAA;QACrH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,SAAS;YACZ,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;SAC5D,CAAC,CAAA;QACF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;QACtC,IAAI,QAAQ;YAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAA;QAC3E,OAAO,GAAG,EAAE;YACV,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,EAAE,CAAC;gBAC9C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;gBACjC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAClC,CAAC;QACH,CAAC,CAAA;IACH,CAAC;IAED,WAAW,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,CAAA;IACvC,CAAC;IAED,cAAc;QACZ,OAAO,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAA;IAC7F,CAAC;IAED,gBAAgB,CAAC,gBAAwB;QACvC,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CACjE,SAAS,CAAC,OAAO,IAAI,SAAS,CAAC,YAAY,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CACxE,CAAC,CAAA;QACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,OAAQ,CAAC,cAAc,EAAE,CAAC,gBAAgB,CAAC,KAAK,IAAI,CAAC,CAAA;QAC3G,IAAI,QAAQ,EAAE,OAAO;YAAE,OAAO,QAAQ,CAAC,OAAO,CAAA;QAC9C,IAAI,gBAAgB,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,aAAa,CAAC,CAAA;YAC1E,IAAI,OAAO,EAAE,OAAO;gBAAE,OAAO,OAAO,CAAC,OAAO,CAAA;QAC9C,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,OAAQ,CAAC,cAAc,KAAK,SAAS,CAAC,CAAA;QAC5F,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAE,CAAC,OAAQ,CAAC,CAAC,CAAC,IAAI,CAAA;IACzD,CAAC;CACF;AAED,MAAM,UAAU,uBAAuB,CACrC,QAAqC,EACrC,MAAoC,EACpC,YAAyB;IAEzB,IAAI,YAAY,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,QAAQ,CAAC,gBAAgB,EAAE,CAAC;QAC1G,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IAC7E,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxB,IAAI,MAAM,CAAC,uBAAuB;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,QAAQ,CAAC,EAAE,cAAc,CAAC,CAAA;QACpG,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,CAAA;IACtE,MAAM,SAAS,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAA;IACpD,IAAI,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,iBAAiB,CAAC,CAAA;IACnF,MAAM,KAAK,GAAG,eAAe,CAC3B,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,EACxC,eAAe,CAAC,SAAS,CAAC,EAC1B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CACnD,CAAA;IACD,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAA;IACzF,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAA8B,EAC9B,QAAsC;IAEtC,iBAAiB,CAAC,SAAS,CAAC,CAAA;IAC5B,IAAI,QAAQ;QAAE,yBAAyB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAA;IAC5D,MAAM,MAAM,GAAG,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAA;IAC3D,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC;QACtB,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;QACvE,MAAM,MAAM,GAAG,eAAe,CAAC,MAAM,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAA;QACxE,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;QACrH,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAA;QACrJ,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,8BAA8B,EAAE,2BAA2B,CAAC,CAAA;IAC9F,CAAC;IACD,IAAI,QAAQ;QAAE,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IAC5D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAA;AAC7B,CAAC;AAED,SAAS,iBAAiB,CAAC,SAA8B;IACvD,IAAI,SAAS,CAAC,QAAQ,KAAK,4BAA4B,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CAAC,8BAA8B,4BAA4B,EAAE,CAAC,CAAA;IACnF,CAAC;IACD,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAA;IACvG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACrI,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,YAAY,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;IACzI,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,QAAQ,KAAK,0BAA0B,EAAE,CAAC;QACjG,MAAM,IAAI,SAAS,CAAC,oCAAoC,0BAA0B,EAAE,CAAC,CAAA;IACvF,CAAC;AACH,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAqC,EAAE,SAA8B;IACtG,IAAI,QAAQ,CAAC,QAAQ,KAAK,qCAAqC;QAAE,MAAM,IAAI,SAAS,CAAC,6BAA6B,qCAAqC,EAAE,CAAC,CAAA;IAC1J,IAAI,QAAQ,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAA;IACvI,IAAI,CAAC,yCAAyC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAA;IAC/H,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAA;IACnH,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAA;IACnD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,2DAA2D,CAAC,CAAA;IACpK,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAA;IACtF,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ,CAAC,WAAW,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAA;IAC5H,KAAK,MAAM,UAAU,IAAI,YAAY;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,UAAU,EAAE,CAAC,CAAA;IACpJ,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,mDAAmD,UAAU,CAAC,UAAU,EAAE,CAAC,CAAA;QAClJ,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,SAAS,CAAC,uBAAuB,UAAU,CAAC,UAAU,8BAA8B,CAAC,CAAA;QACjG,CAAC;IACH,CAAC;IACD,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAA;IAC3J,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,CAAC,SAAS,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,iDAAiD,CAAC,CAAA;AAC9I,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAqC;IAC9D,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAA;IACvD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACvE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAA;IACxO,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAA;AACxC,CAAC;AAED,SAAS,eAAe,CAAC,MAAmC;IAC1D,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;SAC7G,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAA;AACzE,CAAC;AAED,SAAS,MAAM,CAAC,MAAyB;IACvC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAC/E,CAAC"}

package/lib/harness-runtime.d.ts

@@ -0,0 +1,29 @@
+import type { RuntimeDispatch, RuntimeNodeAgent } from './contracts.js';
+import { type DshAgoraRuntimeAdapterV1, type RuntimeExecutionResult, type RuntimeExecutionContext } from './extension-sdk.js';
+export interface ConfiguredDshAgent {
+    readonly id: string;
+    readonly displayName?: string;
+    readonly preset?: string;
+    readonly model?: string;
+    readonly workspace?: string;
+    readonly workspaceAlias?: string;
+    readonly roles?: readonly string[];
+    readonly capabilities?: readonly string[];
+}
+export interface HarnessRuntimeOptions {
+    readonly baseUrl: string;
+    readonly agents: readonly ConfiguredDshAgent[];
+    readonly replyTimeoutMs?: number;
+    readonly fetch?: typeof globalThis.fetch;
+}
+export declare class HarnessRuntimeAdapter implements DshAgoraRuntimeAdapterV1 {
+    readonly protocol: "dsh-agora.runtime/v1";
+    private readonly client;
+    private readonly agents;
+    private readonly replyTimeoutMs;
+    constructor(options: HarnessRuntimeOptions);
+    describeAgents(): readonly RuntimeNodeAgent[];
+    execute(dispatch: RuntimeDispatch, signal: AbortSignal, context?: RuntimeExecutionContext): Promise<RuntimeExecutionResult>;
+    cancel(sessionId: string, signal: AbortSignal): Promise<boolean>;
+}
+//# sourceMappingURL=harness-runtime.d.ts.map

package/lib/harness-runtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-runtime.d.ts","sourceRoot":"","sources":["../src/harness-runtime.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,eAAe,EACf,gBAAgB,EAIjB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAEL,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC7B,MAAM,oBAAoB,CAAA;AAE3B,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAClC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC1C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAA;IAC9C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAA;CACzC;AAED,qBAAa,qBAAsB,YAAW,wBAAwB;IACpE,QAAQ,CAAC,QAAQ,yBAA6B;IAC9C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA4B;IACnD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;gBAE3B,OAAO,EAAE,qBAAqB;IAM1C,cAAc,IAAI,SAAS,gBAAgB,EAAE;IAYvC,OAAO,CACX,QAAQ,EAAE,eAAe,EACzB,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,uBAAuB,GAChC,OAAO,CAAC,sBAAsB,CAAC;IAwE5B,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC;CAIvE"}

package/lib/harness-runtime.js

@@ -0,0 +1,422 @@
+import { randomUUID } from 'node:crypto';
+import { DSH_AGORA_RUNTIME_PROTOCOL, } from './extension-sdk.js';
+export class HarnessRuntimeAdapter {
+    protocol = DSH_AGORA_RUNTIME_PROTOCOL;
+    client;
+    agents;
+    replyTimeoutMs;
+    constructor(options) {
+        this.client = new HarnessRpcClient(options.baseUrl, options.fetch);
+        this.agents = normalizeAgents(options.agents);
+        this.replyTimeoutMs = normalizeReplyTimeout(options.replyTimeoutMs);
+    }
+    describeAgents() {
+        return this.agents.map(agent => ({
+            agent_ref: agent.id,
+            display_name: agent.displayName,
+            preset: agent.preset,
+            model: agent.model,
+            workspace_alias: agent.workspaceAlias,
+            roles: agent.roles,
+            capabilities: agent.capabilities,
+        }));
+    }
+    async execute(dispatch, signal, context) {
+        const startedAt = Date.now();
+        const agentRef = dispatch.runtime_target_ref.split(':').at(-1);
+        const agent = this.agents.find(item => item.id === agentRef);
+        if (!agent)
+            throw new Error(`runtime target ${dispatch.runtime_target_ref} is not configured on this DSH node`);
+        const sessionId = dispatch.session_id ?? await this.client.createSession({
+            workspace: agent.workspace,
+            agentPreset: dispatch.agent_preset ?? agent.preset,
+            signal,
+        });
+        try {
+            await context?.reportProgress({
+                phase: 'session_ready',
+                message: dispatch.session_id ? 'Existing DSH Session resumed' : 'New DSH Session created',
+                percent: 10,
+                details: { session_id: sessionId },
+            });
+            const result = await this.client.runPrompt(sessionId, formatDispatchPrompt(dispatch), this.replyTimeoutMs, signal, `agora-dispatch-${dispatch.id}`, {
+                onPromptAccepted: () => context?.reportProgress({
+                    phase: 'prompt_accepted',
+                    message: 'Prompt accepted by DeepSeek Harness',
+                    percent: 25,
+                }),
+                onResponseStarted: () => context?.reportProgress({
+                    phase: 'response_started',
+                    message: 'Agent started responding',
+                    percent: 60,
+                }),
+            });
+            await context?.reportProgress({
+                phase: 'response_completed',
+                message: 'Agent response completed',
+                percent: 90,
+            });
+            const parsed = parseRuntimeResult(result.answer, agent, dispatch);
+            return {
+                sessionId,
+                answer: parsed.answer,
+                reason: result.reason,
+                metadata: { agent_ref: agent.id, runtime_target_ref: dispatch.runtime_target_ref },
+                resultEnvelope: {
+                    ...parsed.envelope,
+                    usage: {
+                        input_tokens: parsed.envelope.usage?.input_tokens ?? null,
+                        output_tokens: parsed.envelope.usage?.output_tokens ?? null,
+                        total_tokens: parsed.envelope.usage?.total_tokens ?? null,
+                        tool_calls: parsed.envelope.usage?.tool_calls ?? null,
+                        cost_usd: parsed.envelope.usage?.cost_usd ?? null,
+                        duration_ms: Date.now() - startedAt,
+                    },
+                },
+            };
+        }
+        catch (error) {
+            if (signal.aborted) {
+                try {
+                    await this.cancel(sessionId, AbortSignal.timeout(30_000));
+                }
+                catch {
+                    // Preserve the original lease-loss or shutdown error. The central
+                    // fencing token still prevents this abandoned execution from writing.
+                }
+            }
+            throw error;
+        }
+    }
+    async cancel(sessionId, signal) {
+        await this.client.rpc('session.cancel', { sessionId, keepInbox: true }, 30_000, signal);
+        return true;
+    }
+}
+class HarnessRpcClient {
+    origin;
+    fetchImpl;
+    constructor(baseUrl, fetchImpl = globalThis.fetch) {
+        this.origin = new URL(baseUrl);
+        this.fetchImpl = fetchImpl;
+    }
+    async rpc(method, payload, timeoutMs, signal, rpcId) {
+        const requestId = rpcId ?? `agora-${randomUUID()}`;
+        const timeout = AbortSignal.timeout(timeoutMs);
+        const combined = signal === undefined ? timeout : AbortSignal.any([signal, timeout]);
+        const response = await this.fetchImpl(new URL(`/api/${method}`, this.origin), {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', Accept: 'application/json' },
+            body: JSON.stringify({ type: 'client-request', rpcId: requestId, method, payload }),
+            signal: combined,
+        });
+        if (!response.ok)
+            throw new Error(`DSH ${method} returned HTTP ${response.status}`);
+        const body = await response.json();
+        if (body.type !== 'server-response' || body.rpcId !== requestId || typeof body.result?.ok !== 'boolean') {
+            throw new Error(`DSH ${method} returned an invalid RPC envelope`);
+        }
+        if (!body.result.ok) {
+            const error = new Error(body.result.error?.message ?? `DSH ${method} failed`);
+            error.name = body.result.error?.code ?? 'HarnessRpcError';
+            throw error;
+        }
+        return body.result.value;
+    }
+    async createSession(options) {
+        const workspaces = await this.rpc('workspace.list', {}, 30_000, options.signal);
+        let workspaceId = workspaces.items?.find(item => item.path === options.workspace)?.workspaceId;
+        if (!workspaceId) {
+            const created = await this.rpc('workspace.create', { path: options.workspace }, 30_000, options.signal);
+            workspaceId = created.workspace?.workspaceId;
+        }
+        if (!workspaceId)
+            throw new Error(`DSH could not resolve workspace ${options.workspace}`);
+        const created = await this.rpc('session.create', { workspaceId, ...(options.agentPreset ? { agentPreset: options.agentPreset } : {}) }, 30_000, options.signal);
+        if (!created.sessionId)
+            throw new Error('DSH session.create returned no sessionId');
+        return created.sessionId;
+    }
+    async runPrompt(sessionId, prompt, timeoutMs, signal, promptRpcId = `agora-dispatch-${randomUUID()}`, callbacks = {}) {
+        const timeout = AbortSignal.timeout(timeoutMs);
+        const combined = AbortSignal.any([signal, timeout]);
+        const initial = await this.rpc('session.history', { sessionId, maxMessages: 50 }, 30_000, combined);
+        const tracker = new ReplyTracker(maxSeq(initial.events ?? []));
+        tracker.promptRpcId = promptRpcId;
+        await this.rpc('session.prompt', {
+            sessionId,
+            mode: 'queue',
+            content: [{ type: 'text', text: prompt }],
+            clientTimeZone: Intl.DateTimeFormat().resolvedOptions().timeZone,
+        }, 30_000, combined, promptRpcId);
+        await callbacks.onPromptAccepted?.();
+        let responseStarted = false;
+        while (!tracker.finished) {
+            await sleep(350, combined);
+            const history = await this.rpc('session.history', { sessionId, maxMessages: 50 }, 30_000, combined);
+            tracker.consume(history.events ?? []);
+            if (!responseStarted && tracker.answer !== '') {
+                responseStarted = true;
+                await callbacks.onResponseStarted?.();
+            }
+        }
+        return { answer: tracker.answer, reason: tracker.reason };
+    }
+}
+class ReplyTracker {
+    promptRpcId = '';
+    lastSeq;
+    openTurn = null;
+    targetTurn = null;
+    latestText = '';
+    chunks = new Map();
+    finished = false;
+    reason = null;
+    constructor(afterSeq) {
+        this.lastSeq = afterSeq;
+    }
+    get answer() {
+        return this.latestText.trim();
+    }
+    consume(entries) {
+        const events = entries
+            .map(entry => isRecord(entry) && isRecord(entry.event) ? entry.event : entry)
+            .filter(isRecord)
+            .sort((left, right) => numberValue(left.seq, -1) - numberValue(right.seq, -1));
+        for (const event of events) {
+            const seq = numberValue(event.seq, -1);
+            if (seq <= this.lastSeq)
+                continue;
+            this.lastSeq = seq;
+            const data = isRecord(event.data) ? event.data : {};
+            if (event.type === 'turn/start')
+                this.openTurn = data.turn ?? null;
+            if (event.type === 'user/message') {
+                const source = isRecord(data.source) ? data.source : {};
+                if (source.rpcId === this.promptRpcId)
+                    this.targetTurn = this.openTurn;
+                continue;
+            }
+            if (this.targetTurn === null)
+                continue;
+            if (event.type === 'turn/end' && data.turn === this.targetTurn) {
+                this.finished = true;
+                this.reason = typeof data.reason === 'string' ? data.reason : null;
+                continue;
+            }
+            if (data.turn !== this.targetTurn)
+                continue;
+            if (event.type === 'assistant/message') {
+                const message = isRecord(data.message) ? data.message : {};
+                const content = Array.isArray(message.content) ? message.content : [];
+                const text = content.filter(isRecord)
+                    .filter(part => part.type === 'text' && typeof part.text === 'string')
+                    .map(part => String(part.text)).join('\n').trim();
+                if (text)
+                    this.latestText = text;
+            }
+            if (event.type === 'assistant/chunk') {
+                const chunk = isRecord(data.chunk) ? data.chunk : {};
+                if (chunk.type !== 'text-delta' || typeof chunk.text !== 'string')
+                    continue;
+                const key = `${numberValue(data.step, 0)}:${numberValue(chunk.index, 0)}`;
+                this.chunks.set(key, (this.chunks.get(key) ?? '') + chunk.text);
+                const step = `${numberValue(data.step, 0)}:`;
+                const text = [...this.chunks.entries()]
+                    .filter(([part]) => part.startsWith(step))
+                    .sort(([left], [right]) => Number(left.split(':')[1]) - Number(right.split(':')[1]))
+                    .map(([, value]) => value).join('\n').trim();
+                if (text)
+                    this.latestText = text;
+            }
+        }
+    }
+}
+function normalizeAgents(agents) {
+    if (agents.length === 0)
+        throw new TypeError('at least one DSH runtime agent must be configured');
+    const seen = new Set();
+    return agents.map(agent => {
+        const id = required(agent.id, 'runtime agent id');
+        if (!/^[a-zA-Z0-9][a-zA-Z0-9._-]{0,127}$/u.test(id))
+            throw new TypeError(`invalid runtime agent id "${id}"`);
+        if (seen.has(id))
+            throw new TypeError(`duplicate runtime agent id "${id}"`);
+        seen.add(id);
+        return Object.freeze({
+            id,
+            displayName: optional(agent.displayName),
+            preset: optional(agent.preset),
+            model: optional(agent.model),
+            workspace: optional(agent.workspace) ?? process.cwd(),
+            workspaceAlias: optional(agent.workspaceAlias),
+            roles: unique(agent.roles ?? []),
+            capabilities: unique(agent.capabilities ?? ['session.create', 'session.resume', 'session.prompt', 'session.cancel']),
+        });
+    });
+}
+function formatDispatchPrompt(dispatch) {
+    return [
+        '[Agora cross-agent dispatch]',
+        ...(dispatch.task_id ? [`Task: ${dispatch.task_id}`] : []),
+        ...(dispatch.participant_binding_id ? [`Participant binding: ${dispatch.participant_binding_id}`] : []),
+        `Dispatch: ${dispatch.id}`,
+        '',
+        dispatch.prompt,
+        '',
+        'Return a concise final result suitable for the requesting agent. Do not approve or reject human governance gates.',
+        'For verifiable claims, append one machine-readable block after the answer:',
+        '<agora-evidence>{"claims":[{"id":"claim-1","statement":"...","evidence_ids":["evidence-1"],"confidence":0.9}],"evidence":[{"id":"evidence-1","kind":"file|url|commit|measurement|log|command|other","uri":"...","revision":"..."}],"confidence":0.9,"revision":"workspace commit if known"}</agora-evidence>',
+        'Use only evidence you actually observed. Omit unknown fields and do not put the evidence block inside Markdown fences.',
+    ].join('\n');
+}
+function parseRuntimeResult(rawAnswer, agent, dispatch) {
+    const match = /<agora-evidence>([\s\S]*?)<\/agora-evidence>/u.exec(rawAnswer);
+    const answer = (match ? rawAnswer.replace(match[0], '') : rawAnswer).trim();
+    const payload = match ? parseJsonRecord(match[1] ?? '') : null;
+    const evidence = parseEvidence(payload?.evidence);
+    const evidenceIds = new Set(evidence.map(item => item.id));
+    const claims = parseClaims(payload?.claims, evidenceIds);
+    const confidence = confidenceValue(payload?.confidence);
+    const revision = stringValue(payload?.revision);
+    return {
+        answer,
+        envelope: {
+            schema: 'agora.runtime-result/v1',
+            answer,
+            claims,
+            evidence,
+            ...(confidence === null ? {} : { confidence }),
+            environment: {
+                runtime_provider: 'dsh',
+                agent_ref: agent.id,
+                model: agent.model,
+                workspace_alias: dispatch.workspace_alias ?? agent.workspaceAlias,
+                ...(revision === null ? {} : { revision }),
+            },
+        },
+    };
+}
+const evidenceKinds = new Set([
+    'file', 'url', 'commit', 'measurement', 'log', 'command', 'other',
+]);
+function parseEvidence(value) {
+    if (!Array.isArray(value))
+        return [];
+    const seen = new Set();
+    const parsed = [];
+    for (const item of value) {
+        if (!isRecord(item))
+            continue;
+        const id = stringValue(item.id);
+        const kind = stringValue(item.kind);
+        if (!id || !kind || !evidenceKinds.has(kind) || seen.has(id))
+            continue;
+        seen.add(id);
+        const metadata = isRecord(item.metadata) ? item.metadata : null;
+        parsed.push({
+            id,
+            kind,
+            ...(stringValue(item.label) === null ? {} : { label: stringValue(item.label) }),
+            ...(stringValue(item.uri) === null ? {} : { uri: stringValue(item.uri) }),
+            ...(stringValue(item.content_hash) === null ? {} : { content_hash: stringValue(item.content_hash) }),
+            ...(stringValue(item.revision) === null ? {} : { revision: stringValue(item.revision) }),
+            ...(positiveInteger(item.line_start) === null ? {} : { line_start: positiveInteger(item.line_start) }),
+            ...(positiveInteger(item.line_end) === null ? {} : { line_end: positiveInteger(item.line_end) }),
+            ...(metadata === null ? {} : { metadata }),
+        });
+    }
+    return parsed;
+}
+function parseClaims(value, evidenceIds) {
+    if (!Array.isArray(value))
+        return [];
+    const seen = new Set();
+    const parsed = [];
+    for (const item of value) {
+        if (!isRecord(item))
+            continue;
+        const id = stringValue(item.id);
+        const statement = stringValue(item.statement);
+        if (!id || !statement || seen.has(id))
+            continue;
+        seen.add(id);
+        const evidence_ids = Array.isArray(item.evidence_ids)
+            ? [...new Set(item.evidence_ids.filter((candidate) => (typeof candidate === 'string' && evidenceIds.has(candidate))))]
+            : [];
+        const confidence = confidenceValue(item.confidence);
+        parsed.push({
+            id,
+            statement,
+            evidence_ids,
+            ...(confidence === null ? {} : { confidence }),
+        });
+    }
+    return parsed;
+}
+function parseJsonRecord(value) {
+    try {
+        const parsed = JSON.parse(value);
+        return isRecord(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function confidenceValue(value) {
+    return typeof value === 'number' && Number.isFinite(value) && value >= 0 && value <= 1 ? value : null;
+}
+function positiveInteger(value) {
+    return typeof value === 'number' && Number.isInteger(value) && value > 0 ? value : null;
+}
+function maxSeq(entries) {
+    return entries.reduce((maximum, entry) => {
+        const event = isRecord(entry) && isRecord(entry.event) ? entry.event : entry;
+        return isRecord(event) ? Math.max(maximum, numberValue(event.seq, -1)) : maximum;
+    }, -1);
+}
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal.aborted)
+            return reject(signal.reason);
+        const timer = setTimeout(() => {
+            signal.removeEventListener('abort', onAbort);
+            resolve();
+        }, ms);
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(signal.reason);
+        };
+        signal.addEventListener('abort', onAbort, { once: true });
+    });
+}
+function normalizeReplyTimeout(value) {
+    const timeout = value ?? 600_000;
+    if (!Number.isSafeInteger(timeout) || timeout < 10_000 || timeout > 3_600_000) {
+        throw new TypeError('runtimeReplyTimeoutMs must be an integer between 10000 and 3600000');
+    }
+    return timeout;
+}
+function required(value, label) {
+    const normalized = optional(value);
+    if (!normalized)
+        throw new TypeError(`${label} is required`);
+    return normalized;
+}
+function optional(value) {
+    const normalized = value?.trim();
+    return normalized ? normalized : null;
+}
+function unique(values) {
+    return [...new Set(values.map(value => value.trim()).filter(Boolean))].sort();
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function numberValue(value, fallback) {
+    return typeof value === 'number' && Number.isFinite(value) ? value : fallback;
+}
+function stringValue(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : null;
+}
+//# sourceMappingURL=harness-runtime.js.map