glirastes 0.3.2 → 0.5.0

package/dist/contracts/plan.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Wire protocol between the built-in `update_plan` tool and the chat UI.
+ * Dependency-free so both the React bundle and the server adapters can
+ * import it without pulling in Zod.
+ */
+export declare const PLAN_TOOL_NAME: "update_plan";
+export declare const PLAN_ITEM_STATUSES: readonly ["pending", "in_progress", "completed"];
+export type PlanItemStatus = (typeof PLAN_ITEM_STATUSES)[number];
+/** Shared by the server tool schema and the chat UI reader. */
+export declare const PLAN_MAX_ITEMS = 12;
+export declare const PLAN_MAX_TITLE_LENGTH = 120;
+export interface PlanItem {
+    readonly title: string;
+    readonly status: PlanItemStatus;
+}
+/**
+ * Reads the items of an `update_plan` input, dropping malformed entries.
+ * Returns null when the input carries no item list at all.
+ */
+export declare function readPlanItems(input: unknown): PlanItem[] | null;

package/dist/contracts/plan.js

@@ -0,0 +1,35 @@
+/**
+ * Wire protocol between the built-in `update_plan` tool and the chat UI.
+ * Dependency-free so both the React bundle and the server adapters can
+ * import it without pulling in Zod.
+ */
+export const PLAN_TOOL_NAME = 'update_plan';
+export const PLAN_ITEM_STATUSES = ['pending', 'in_progress', 'completed'];
+/** Shared by the server tool schema and the chat UI reader. */
+export const PLAN_MAX_ITEMS = 12;
+export const PLAN_MAX_TITLE_LENGTH = 120;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+/**
+ * Reads the items of an `update_plan` input, dropping malformed entries.
+ * Returns null when the input carries no item list at all.
+ */
+export function readPlanItems(input) {
+    if (!isRecord(input) || !Array.isArray(input.items))
+        return null;
+    const items = [];
+    for (const entry of input.items) {
+        if (!isRecord(entry) || typeof entry.title !== 'string')
+            continue;
+        const title = entry.title.trim().slice(0, PLAN_MAX_TITLE_LENGTH);
+        const status = entry.status;
+        if (!title || !PLAN_ITEM_STATUSES.includes(status))
+            continue;
+        items.push({ title, status: status });
+        if (items.length === PLAN_MAX_ITEMS)
+            break;
+    }
+    return items;
+}
+//# sourceMappingURL=plan.js.map

package/dist/contracts/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../src/contracts/plan.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,aAAsB,CAAC;AAErD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,aAAa,EAAE,WAAW,CAAU,CAAC;AAInF,+DAA+D;AAC/D,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AACjC,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAOzC,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,SAAS;QAClE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,KAAK,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,MAAwB,CAAC;YAAE,SAAS;QAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAwB,EAAE,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,KAAK,cAAc;YAAE,MAAM;IAC7C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/contracts/platform-connection.d.ts

@@ -0,0 +1,44 @@
+import { z } from 'zod';
+export declare const PlatformConnectionDescriptorSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    baseUrl: z.ZodURL;
+    appId: z.ZodUUID;
+    environmentId: z.ZodUUID;
+    runnerKey: z.ZodString;
+}, z.core.$strict>;
+export declare const PairingStartRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    localAppId: z.ZodUUID;
+    localAppName: z.ZodString;
+    artifactDigest: z.ZodString;
+}, z.core.$strict>;
+export declare const PairingStartResponseSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    deviceCode: z.ZodString;
+    userCode: z.ZodString;
+    verificationUri: z.ZodURL;
+    expiresInSeconds: z.ZodNumber;
+    pollIntervalMs: z.ZodNumber;
+}, z.core.$strict>;
+export declare const PairingTokenResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    status: z.ZodLiteral<"pending">;
+    pollAfterMs: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    status: z.ZodLiteral<"denied">;
+}, z.core.$strict>, z.ZodObject<{
+    status: z.ZodLiteral<"expired">;
+}, z.core.$strict>, z.ZodObject<{
+    status: z.ZodLiteral<"connected">;
+    connection: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        baseUrl: z.ZodURL;
+        appId: z.ZodUUID;
+        environmentId: z.ZodUUID;
+        runnerKey: z.ZodString;
+    }, z.core.$strict>;
+    apiKey: z.ZodString;
+}, z.core.$strict>], "status">;
+export type PlatformConnectionDescriptor = z.infer<typeof PlatformConnectionDescriptorSchema>;
+export type PairingStartRequest = z.infer<typeof PairingStartRequestSchema>;
+export type PairingStartResponse = z.infer<typeof PairingStartResponseSchema>;
+export type PairingTokenResult = z.infer<typeof PairingTokenResultSchema>;

package/dist/contracts/platform-connection.js

@@ -0,0 +1,64 @@
+import { z } from 'zod';
+const uuid = z.uuid();
+const digest = z.string().regex(/^sha256:(?:[A-Za-z0-9_-]{43}|[A-Za-z0-9+/]{43}=)$/);
+const SafeControlPlaneUrlSchema = z.url().max(2_048).superRefine((value, context) => {
+    const url = new URL(value);
+    if (url.username || url.password) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Control-plane URL must not contain credentials',
+        });
+        return;
+    }
+    const loopbackHosts = new Set(['localhost', '127.0.0.1', '[::1]']);
+    if (url.protocol !== 'https:'
+        && !(url.protocol === 'http:' && loopbackHosts.has(url.hostname))) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Control-plane URL must use HTTPS or loopback HTTP',
+        });
+    }
+});
+export const PlatformConnectionDescriptorSchema = z.object({
+    schemaVersion: z.literal(1),
+    baseUrl: SafeControlPlaneUrlSchema,
+    appId: uuid,
+    environmentId: uuid,
+    runnerKey: z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/),
+}).strict();
+export const PairingStartRequestSchema = z.object({
+    schemaVersion: z.literal(1),
+    localAppId: uuid,
+    localAppName: z.string().trim().min(1).max(100),
+    artifactDigest: digest,
+}).strict();
+export const PairingStartResponseSchema = z.object({
+    schemaVersion: z.literal(1),
+    deviceCode: z.string().min(32).max(256),
+    userCode: z.string().regex(/^[A-Z0-9]{4}-[A-Z0-9]{4}$/),
+    verificationUri: SafeControlPlaneUrlSchema,
+    expiresInSeconds: z.number().int().min(60).max(900),
+    pollIntervalMs: z.number().int().min(1_000).max(30_000),
+}).strict();
+const PairingPendingResultSchema = z.object({
+    status: z.literal('pending'),
+    pollAfterMs: z.number().int().min(1_000).max(30_000),
+}).strict();
+const PairingDeniedResultSchema = z.object({
+    status: z.literal('denied'),
+}).strict();
+const PairingExpiredResultSchema = z.object({
+    status: z.literal('expired'),
+}).strict();
+const PairingConnectedResultSchema = z.object({
+    status: z.literal('connected'),
+    connection: PlatformConnectionDescriptorSchema,
+    apiKey: z.string().regex(/^gl_[A-Za-z0-9]{32,128}$/),
+}).strict();
+export const PairingTokenResultSchema = z.discriminatedUnion('status', [
+    PairingPendingResultSchema,
+    PairingDeniedResultSchema,
+    PairingExpiredResultSchema,
+    PairingConnectedResultSchema,
+]);
+//# sourceMappingURL=platform-connection.js.map

package/dist/contracts/platform-connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-connection.js","sourceRoot":"","sources":["../../src/contracts/platform-connection.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACtB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAC7B,mDAAmD,CACpD,CAAC;AAEF,MAAM,yBAAyB,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,WAAW,CAC9D,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACjB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gDAAgD;SAC1D,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,IACE,GAAG,CAAC,QAAQ,KAAK,QAAQ;WACtB,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EACjE,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,mDAAmD;SAC7D,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IACzD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,yBAAyB;IAClC,KAAK,EAAE,IAAI;IACX,aAAa,EAAE,IAAI;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oCAAoC,CAAC;CAClE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,IAAI;IAChB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,cAAc,EAAE,MAAM;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC;IACvD,eAAe,EAAE,yBAAyB;IAC1C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;CACxD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;CACrD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9B,UAAU,EAAE,kCAAkC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,0BAA0B,CAAC;CACrD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,kBAAkB,CAAC,QAAQ,EAAE;IACrE,0BAA0B;IAC1B,yBAAyB;IACzB,0BAA0B;IAC1B,4BAA4B;CAC7B,CAAC,CAAC"}

package/dist/contracts/platform-prompt-revision.d.ts

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+/**
+ * A prompt revision authored on the Platform.
+ *
+ * This is the one declared place where prompt content is allowed to leave the
+ * customer environment, opted into per app. The local bundle remains the
+ * default and the fail-closed floor; this overrides it only once published,
+ * signed, and pinned by a rollout.
+ *
+ * The narrowing is deliberate and stays local to this type: every other
+ * control-plane payload keeps rejecting prompt text through
+ * `findForbiddenPlatformContentPath`. Credentials and other secret-shaped
+ * values are rejected here too, because opting into prompt text is not
+ * opting into secrets.
+ */
+export declare const PlatformPromptRevisionSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    revisionId: z.ZodUUID;
+    appId: z.ZodUUID;
+    bundleDigest: z.ZodString;
+    sections: z.ZodObject<{
+        planner: z.ZodString;
+        appBehavior: z.ZodString;
+        responseStyle: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type PlatformPromptRevision = z.infer<typeof PlatformPromptRevisionSchema>;

package/dist/contracts/platform-prompt-revision.js

@@ -0,0 +1,44 @@
+import { z } from 'zod';
+import { findSensitiveStringPath } from './content-boundary.js';
+const uuid = z.uuid();
+const digest = z.string().regex(/^sha256:(?:[A-Za-z0-9_-]{43}|[A-Za-z0-9+/]{43}=)$/);
+/**
+ * Generous enough for a real prompt, small enough that a source tree or a
+ * transcript cannot be smuggled through one section.
+ */
+const section = z.string().trim().min(1).max(100_000);
+/**
+ * A prompt revision authored on the Platform.
+ *
+ * This is the one declared place where prompt content is allowed to leave the
+ * customer environment, opted into per app. The local bundle remains the
+ * default and the fail-closed floor; this overrides it only once published,
+ * signed, and pinned by a rollout.
+ *
+ * The narrowing is deliberate and stays local to this type: every other
+ * control-plane payload keeps rejecting prompt text through
+ * `findForbiddenPlatformContentPath`. Credentials and other secret-shaped
+ * values are rejected here too, because opting into prompt text is not
+ * opting into secrets.
+ */
+export const PlatformPromptRevisionSchema = z.object({
+    schemaVersion: z.literal(1),
+    revisionId: uuid,
+    appId: uuid,
+    bundleDigest: digest,
+    sections: z.object({
+        planner: section,
+        appBehavior: section,
+        responseStyle: section,
+    }).strict(),
+}).strict().superRefine((revision, context) => {
+    const sensitive = findSensitiveStringPath(revision.sections);
+    if (sensitive) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Prompt sections must not contain secret-shaped values',
+            path: ['sections', ...sensitive],
+        });
+    }
+});
+//# sourceMappingURL=platform-prompt-revision.js.map

package/dist/contracts/platform-prompt-revision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-prompt-revision.js","sourceRoot":"","sources":["../../src/contracts/platform-prompt-revision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEhE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACtB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAC7B,mDAAmD,CACpD,CAAC;AAEF;;;GAGG;AACH,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAEtD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE,IAAI;IACX,YAAY,EAAE,MAAM;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,OAAO;QAChB,WAAW,EAAE,OAAO;QACpB,aAAa,EAAE,OAAO;KACvB,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IAC5C,MAAM,SAAS,GAAG,uBAAuB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7D,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uDAAuD;YAChE,IAAI,EAAE,CAAC,UAAU,EAAE,GAAG,SAAS,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/contracts/prompt-bundle.d.ts

@@ -0,0 +1,46 @@
+import { z } from 'zod';
+export declare const PromptBundleSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    bundleId: z.ZodUUID;
+    appId: z.ZodUUID;
+    revisionId: z.ZodUUID;
+    revision: z.ZodNumber;
+    parentRevisionId: z.ZodOptional<z.ZodUUID>;
+    bundleDigest: z.ZodString;
+    sections: z.ZodObject<{
+        planner: z.ZodString;
+        appBehavior: z.ZodString;
+        responseStyle: z.ZodString;
+        capabilityFragments: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            content: z.ZodString;
+        }, z.core.$strict>>>;
+    }, z.core.$strict>;
+    createdAt: z.ZodISODateTime;
+    signature: z.ZodObject<{
+        algorithm: z.ZodLiteral<"Ed25519">;
+        keyId: z.ZodString;
+        value: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+/**
+ * Signed desired-state pin for one prompt bundle. The Platform signs the
+ * binding; the bundle contents stay in the customer-controlled registry and are
+ * proven by the content digest.
+ */
+export { SignedPromptBindingSchema, type SignedPromptBinding, } from './revisions.js';
+export declare const PromptRevisionMetadataSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    revisionId: z.ZodUUID;
+    appId: z.ZodUUID;
+    revision: z.ZodNumber;
+    bundleDigest: z.ZodString;
+    artifactRef: z.ZodString;
+    plannerDigest: z.ZodString;
+    groupDigests: z.ZodRecord<z.ZodString, z.ZodString>;
+    parentRevisionId: z.ZodOptional<z.ZodUUID>;
+    createdAt: z.ZodISODateTime;
+}, z.core.$strict>;
+export declare function canonicalPromptBundleJson(value: unknown): string;
+export type PromptBundle = z.infer<typeof PromptBundleSchema>;
+export type PromptRevisionMetadata = z.infer<typeof PromptRevisionMetadataSchema>;

package/dist/contracts/prompt-bundle.js

@@ -0,0 +1,70 @@
+import { z } from 'zod';
+import { findForbiddenPlatformContentPath } from './content-boundary.js';
+import { RevisionSignatureSchema } from './revisions.js';
+const uuid = z.uuid();
+const identifier = z.string().trim().min(1).max(200);
+const digest = z.string().regex(/^sha256:(?:[A-Za-z0-9_-]{43}|[A-Za-z0-9+/]{43}=)$/);
+const timestamp = z.iso.datetime({ offset: true });
+const CapabilityFragmentSchema = z.object({
+    id: identifier,
+    content: z.string().trim().min(1).max(100_000),
+}).strict();
+export const PromptBundleSchema = z.object({
+    schemaVersion: z.literal(1),
+    bundleId: uuid,
+    appId: uuid,
+    revisionId: uuid,
+    revision: z.number().int().positive(),
+    parentRevisionId: uuid.optional(),
+    bundleDigest: digest,
+    sections: z.object({
+        planner: z.string().trim().min(1).max(100_000),
+        appBehavior: z.string().trim().min(1).max(100_000),
+        responseStyle: z.string().trim().min(1).max(100_000),
+        capabilityFragments: z.array(CapabilityFragmentSchema).default([]),
+    }).strict(),
+    createdAt: timestamp,
+    signature: RevisionSignatureSchema,
+}).strict();
+/**
+ * Signed desired-state pin for one prompt bundle. The Platform signs the
+ * binding; the bundle contents stay in the customer-controlled registry and are
+ * proven by the content digest.
+ */
+// Moved to revisions.ts, which the deployment bundle also lives in; re-exported
+// here so existing import paths keep working.
+export { SignedPromptBindingSchema, } from './revisions.js';
+export const PromptRevisionMetadataSchema = z.object({
+    schemaVersion: z.literal(1),
+    revisionId: uuid,
+    appId: uuid,
+    revision: z.number().int().positive(),
+    bundleDigest: digest,
+    artifactRef: z.string().trim().min(1).max(2_048),
+    plannerDigest: digest,
+    groupDigests: z.record(identifier, digest),
+    parentRevisionId: uuid.optional(),
+    createdAt: timestamp,
+}).strict().superRefine((metadata, context) => {
+    const forbiddenPath = findForbiddenPlatformContentPath(metadata);
+    if (forbiddenPath) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Prompt revision metadata contains prohibited content',
+            path: forbiddenPath,
+        });
+    }
+});
+function canonicalValue(value) {
+    if (Array.isArray(value))
+        return value.map(canonicalValue);
+    if (value === null || typeof value !== 'object')
+        return value;
+    return Object.fromEntries(Object.entries(value)
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([key, child]) => [key, canonicalValue(child)]));
+}
+export function canonicalPromptBundleJson(value) {
+    return JSON.stringify(canonicalValue(value));
+}
+//# sourceMappingURL=prompt-bundle.js.map

package/dist/contracts/prompt-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-bundle.js","sourceRoot":"","sources":["../../src/contracts/prompt-bundle.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gCAAgC,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACtB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAC7B,mDAAmD,CACpD,CAAC;AACF,MAAM,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAEnD,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,UAAU;IACd,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,IAAI;IACX,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE;IACjC,YAAY,EAAE,MAAM;IACpB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QAClD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;QACpD,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACnE,CAAC,CAAC,MAAM,EAAE;IACX,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,uBAAuB;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACH,gFAAgF;AAChF,8CAA8C;AAC9C,OAAO,EACL,yBAAyB,GAE1B,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAChD,aAAa,EAAE,MAAM;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC;IAC1C,gBAAgB,EAAE,IAAI,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,SAAS;CACrB,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,EAAE;IAC5C,MAAM,aAAa,GAAG,gCAAgC,CAAC,QAAQ,CAAC,CAAC;IACjE,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,sDAAsD;YAC/D,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC3D,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE9D,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SAClB,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC"}