glirastes 0.3.2 → 0.5.0

package/dist/runtime/contract-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-bindings.js","sourceRoot":"","sources":["../../src/runtime/contract-bindings.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAyB,MAAM,uBAAuB,CAAC;AAEtF,OAAO,EACL,wBAAwB,GAGzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,uBAAuB,EAAyB,MAAM,0BAA0B,CAAC;AA+C1F,SAAS,QAAQ,CAAC,IAAwB,EAAE,KAAyB;IACnE,OAAO,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAID,6EAA6E;AAC7E,SAAS,WAAW,CAAC,SAAuB,EAAE,OAA6B;IACzE,IACE,SAAS,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB;WACtD,SAAS,CAAC,iBAAiB,KAAK,OAAO,CAAC,iBAAiB;WACzD,SAAS,CAAC,kBAAkB,KAAK,OAAO,CAAC,kBAAkB,EAC9D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QACzC,OAAO,SAAS,CAAC,aAAa,KAAK,UAAU;eACxC,SAAS,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM;eACnC,SAAS,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC;IACvC,CAAC;IACD,OAAO,SAAS,CAAC,aAAa,KAAK,IAAI;WAClC,SAAS,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB,CAAC;AAC/D,CAAC;AAED,SAAS,cAAc,CAAC,OAA6B;IACnD,MAAM,MAAM,GAAG;QACb,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,IAAI,EAAE,OAAO,CAAC,IAAI;KACnB,CAAC;IACF,OAAO,OAAO,CAAC,aAAa,KAAK,UAAU;QACzC,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE;QACtF,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAA8B;IACnE,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IACvE,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAU,CAAC,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkC,CAAC;IAC1D,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAyC,CAAC;IAClE,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,OAAO,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,EAAE,OAAO;YAAE,SAAS;QAClC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;YAC3C,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;QAC5B,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;YACrC,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;YACzC,SAAS;QACX,CAAC;QACD,IAAI,uBAAuB,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,SAAS,CAAC,iBAAiB,EAAE,CAAC;YACjF,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAC;YACrD,SAAS;QACX,CAAC;QACD,IAAI,uBAAuB,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,SAAS,CAAC,kBAAkB,EAAE,CAAC;YACnF,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,aAAa,GAAG,sBAAsB,CAAC,KAAK,CAAC;QACjD,GAAG,QAAQ;QACX,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KACtG,CAAC,CAAC;IACH,OAAO;QACL,aAAa;QACb,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC;QACjC,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;KACvF,CAAC;AACJ,CAAC;AAQD,MAAM,UAAU,4BAA4B,CAC1C,SAA8B,EAC9B,OAAsE;IAEtE,MAAM,MAAM,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO;QACL,MAAM,EAAE,wBAAwB,CAAC,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChH,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;KAC1B,CAAC;AACJ,CAAC"}

package/dist/runtime/engine.d.ts

@@ -0,0 +1,52 @@
+export interface RuntimeRunRequest {
+    runId: string;
+    turnId: string;
+    messages: unknown[];
+    tools: Record<string, unknown>;
+    signal?: AbortSignal;
+}
+interface RuntimeEventBase {
+    runId: string;
+    turnId: string;
+    occurredAt: string;
+}
+export type RuntimeEngineEvent = (RuntimeEventBase & {
+    type: 'run.started';
+}) | (RuntimeEventBase & {
+    type: 'model.step';
+    step: number;
+    inputTokens?: number;
+    outputTokens?: number;
+}) | (RuntimeEventBase & {
+    type: 'tool.started';
+    toolName: string;
+    toolCallId?: string;
+    input?: unknown;
+}) | (RuntimeEventBase & {
+    type: 'tool.completed';
+    toolName: string;
+    toolCallId?: string;
+    result?: unknown;
+    durationMs: number;
+}) | (RuntimeEventBase & {
+    type: 'tool.failed';
+    toolName: string;
+    toolCallId?: string;
+    errorClass: string;
+    durationMs: number;
+}) | (RuntimeEventBase & {
+    type: 'approval.pending';
+    toolName: string;
+    toolCallId?: string;
+}) | (RuntimeEventBase & {
+    type: 'checkpoint.saved';
+    checkpointId: string;
+}) | (RuntimeEventBase & {
+    type: 'run.completed';
+    status: 'completed' | 'cancelled' | 'failed' | 'budget_exhausted';
+    reason?: string;
+});
+export interface RuntimeEngine {
+    run(request: RuntimeRunRequest): AsyncIterable<RuntimeEngineEvent>;
+}
+export {};

package/dist/runtime/engine.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=engine.js.map

package/dist/runtime/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../src/runtime/engine.ts"],"names":[],"mappings":""}

package/dist/runtime/fingerprint.d.ts

@@ -0,0 +1,6 @@
+export declare function createExecutionFingerprint(input: {
+    toolId: string;
+    arguments: unknown;
+    result: unknown;
+    progress?: unknown;
+}): string;

package/dist/runtime/fingerprint.js

@@ -0,0 +1,29 @@
+import { createHash } from 'node:crypto';
+function normalize(value, seen) {
+    if (value === null || typeof value !== 'object') {
+        if (typeof value === 'bigint')
+            return value.toString();
+        if (value === undefined)
+            return null;
+        return value;
+    }
+    if (seen.has(value))
+        throw new TypeError('Cannot fingerprint cyclic data');
+    seen.add(value);
+    if (Array.isArray(value)) {
+        const normalized = value.map((item) => normalize(item, seen));
+        seen.delete(value);
+        return normalized;
+    }
+    const normalized = {};
+    for (const key of Object.keys(value).sort()) {
+        normalized[key] = normalize(value[key], seen);
+    }
+    seen.delete(value);
+    return normalized;
+}
+export function createExecutionFingerprint(input) {
+    const serialized = JSON.stringify(normalize(input, new WeakSet()));
+    return `sha256:${createHash('sha256').update(serialized).digest('base64url')}`;
+}
+//# sourceMappingURL=fingerprint.js.map

package/dist/runtime/fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../src/runtime/fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,SAAS,SAAS,CAAC,KAAc,EAAE,IAAqB;IACtD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,CAAC,CAAC;IAC3E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEhB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,MAAM,UAAU,GAA4B,EAAE,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAC5C,UAAU,CAAC,GAAG,CAAC,GAAG,SAAS,CAAE,KAAiC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAK1C;IACC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC;IACnE,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/runtime/glirastes.d.ts

@@ -0,0 +1,112 @@
+import { type ExecutionBudget, type Principal, type SecurityRevocation } from '../contracts/index.js';
+import type { ToolRegistry } from '../types.js';
+import { type ResolvedRuntimeConnection } from '../sync/connection-lookup.js';
+import type { RuntimePushConnector } from '../sync/control-plane-client.js';
+import { type MaterializedDeploymentRevisions } from '../sync/materialize-deployment.js';
+import { type ContractBindingsResult, type GeneratedToolBinding, type GeneratedToolModule } from './contract-bindings.js';
+import { type LocalRuntimeSource } from './local-runtime-source.js';
+import { type LocalToolBinding } from './local-tool-bindings.js';
+import { type RuntimeMetricsSinkOptions } from './metrics/sink.js';
+import type { RuntimeMetricsSink } from './metrics/turn-recorder.js';
+import type { ToolSearchSemanticsMap } from './tool-discovery.js';
+import type { TurnSnapshot } from './turn-snapshot.js';
+/** The module `glirastes tools refresh` emits (`tools.generated.ts`). */
+export interface GlirastesGeneratedModule extends GeneratedToolModule {
+    readonly toolSearchSemantics?: ToolSearchSemanticsMap;
+}
+export interface CreateGlirastesOptions {
+    /** The generated module, e.g. `import * as generated from '@/generated/glirastes/tools.generated'`. */
+    generated: GlirastesGeneratedModule;
+    /** Local turn limits; the runtime never exceeds them, whatever a Platform revision allows. */
+    localLimits: ExecutionBudget;
+    /**
+     * Wraps the generated bindings before they are bound, e.g. to add write
+     * feedback to the endpoint tools. Called once per process.
+     */
+    wrapBindings?: (bindings: ReadonlyArray<GeneratedToolBinding>) => ReadonlyArray<GeneratedToolBinding>;
+    /** Defaults to `process.env`. Only `GLIRASTES_API_KEY` (and an optional `GLIRASTES_CONTROL_PLANE_URL`) are read. */
+    env?: Record<string, string | undefined>;
+    /**
+     * Content-free connection and sync errors (operation and status only).
+     * Defaults to one `console.error` line. The app keeps running on the local
+     * code whatever is reported here.
+     */
+    onError?: (error: unknown) => void;
+    /** The app version reported at runner registration. */
+    version?: string;
+    /** A technical runtime label reported at registration, e.g. `nextjs`. */
+    runtime?: string;
+    fetchImpl?: typeof fetch;
+    /** Push connector for revision updates; false polls only. */
+    push?: RuntimePushConnector | false;
+    /** Poll interval of the sync, and the retry interval of the lookup and registration (default 30 s). */
+    pollIntervalMs?: number;
+    /** How long `ready()` waits for the first sync (default 5 s). */
+    firstSyncTimeoutMs?: number;
+    /** Options for the metrics sink, or false to send no metrics. */
+    metrics?: Omit<RuntimeMetricsSinkOptions, 'controlPlaneUrl' | 'apiKey' | 'appId' | 'environmentId' | 'buildId' | 'fetch'> | false;
+}
+/** Builds the principal of a turn in the runtime tenant from the verified server session. */
+export type GlirastesPrincipalFactory = (runtimeTenantId: string, request: Request) => Principal | undefined | Promise<Principal | undefined>;
+/** What `createAiChatHandler` needs for one turn; spread it into the handler config. */
+export interface GlirastesChatTurn {
+    managedRuntime: {
+        resolvePrincipal: (request: Request) => Principal | undefined | Promise<Principal | undefined>;
+        resolveTurnSnapshot: (context: {
+            turnId: string;
+            principal: Principal;
+        }) => TurnSnapshot;
+        loadRevocations: (context: {
+            request: Request;
+            snapshot: TurnSnapshot;
+        }) => SecurityRevocation[];
+    };
+    loadTools: (context: {
+        turnSnapshot?: TurnSnapshot;
+    }) => ToolRegistry;
+    toolSemantics?: ToolSearchSemanticsMap;
+    metrics?: RuntimeMetricsSink;
+}
+export interface Glirastes {
+    /** `connected` when `GLIRASTES_API_KEY` is set, otherwise `standalone` (network-silent). */
+    readonly mode: 'standalone' | 'connected';
+    /** The local tool bindings of the code, after `wrapBindings`. */
+    readonly bindings: ReadonlyArray<LocalToolBinding>;
+    /** Tools of the setup artifact the code does not bind (any more). */
+    readonly disabled: ContractBindingsResult['disabled'];
+    readonly toolSearchSemantics: ToolSearchSemanticsMap | undefined;
+    /** The sink for turn metrics; undefined in Standalone and until the connection was looked up. */
+    readonly metrics: RuntimeMetricsSink | undefined;
+    /** The app, environment and runner the Platform answered for the key; undefined until then. */
+    connection(): ResolvedRuntimeConnection | undefined;
+    /**
+     * Starts the connection in the background (once) and resolves after the
+     * first sync or the first-sync timeout. Never rejects; resolves at once in
+     * Standalone.
+     */
+    ready(): Promise<void>;
+    /** The source of the next turn: the local code, or the accepted Platform deployment. */
+    currentSource(): LocalRuntimeSource;
+    /** The deployment the sync accepted; undefined before the first one. */
+    accepted(): MaterializedDeploymentRevisions | undefined;
+    /** The signed revocations the sync accepted, checked before every tool call. */
+    revocations(): SecurityRevocation[];
+    /** Waits for `ready()`, then returns what `createAiChatHandler` needs for one turn. */
+    chatTurn(principal: GlirastesPrincipalFactory): Promise<GlirastesChatTurn>;
+    /** Stops the sync, flushes the metrics and forgets this instance. */
+    stop(): Promise<void>;
+}
+/**
+ * The Glirastes runtime of one app: the tools derived from the code, and,
+ * connected, the Platform connection behind them. One instance per app and
+ * process: a second call with the same generated app returns the first
+ * instance (its options are ignored), so route bundles can each call it.
+ *
+ * Without `GLIRASTES_API_KEY` the app runs Standalone and never touches the
+ * network. With it, the first `ready()` (or `chatTurn()`) asks the Platform
+ * which app, environment and runner the key belongs to, registers, reports
+ * the code and syncs. Until that succeeds the turns run on the local code;
+ * failures go to `onError` and are retried. A key of a different app is an
+ * error, never a silent switch. A malformed key or URL throws here.
+ */
+export declare function createGlirastes(options: CreateGlirastesOptions): Glirastes;

package/dist/runtime/glirastes.js

@@ -0,0 +1,285 @@
+import { AppSetupArtifactSchema, } from '../contracts/index.js';
+import { lookupRuntimeConnection, } from '../sync/connection-lookup.js';
+import { validateLocalDeploymentBindings } from '../sync/local-deployment-validator.js';
+import { createManagedRuntimeSync } from '../sync/managed-sync.js';
+import { materializeDeploymentRevisions, } from '../sync/materialize-deployment.js';
+import { createContractBindings, } from './contract-bindings.js';
+import { createLocalRuntimeSource, } from './local-runtime-source.js';
+import { materializeManifestToolRegistry, } from './local-tool-bindings.js';
+import { createRuntimeMetricsSinkFromEnv, } from './metrics/sink.js';
+import { policyOverlayFromRevision } from './policy-overlay.js';
+import { resolveRuntimeConnectionConfig } from './runtime-mode.js';
+const DEFAULT_FIRST_SYNC_TIMEOUT_MS = 5_000;
+const DEFAULT_RETRY_INTERVAL_MS = 30_000;
+/** Keeps the sync state in memory and the accepted deployment materialized for the turns. */
+class AcceptedStateStore {
+    state = null;
+    stable;
+    async load() {
+        return this.state ? structuredClone(this.state) : null;
+    }
+    async saveAtomic(state) {
+        this.state = structuredClone(state);
+        this.stable = state.stable ? materializeDeploymentRevisions(state.stable) : undefined;
+    }
+    accepted() {
+        return this.stable;
+    }
+    revocations() {
+        return this.state?.revocations ?? [];
+    }
+}
+function logError(error) {
+    // The SDK's request errors name the operation and the status only.
+    console.error('[Glirastes]', error instanceof Error ? error.message : 'connection failed');
+}
+function delay(milliseconds, signal) {
+    if (signal.aborted)
+        return Promise.resolve();
+    return new Promise((resolve) => {
+        const timer = setTimeout(done, milliseconds);
+        timer.unref?.();
+        signal.addEventListener('abort', done, { once: true });
+        function done() {
+            clearTimeout(timer);
+            signal.removeEventListener('abort', done);
+            resolve();
+        }
+    });
+}
+// Next.js bundles instrumentation and each route separately, so the one
+// instance per app and process lives on globalThis, keyed by the app id.
+const INSTANCES = Symbol.for('glirastes.runtime.instances');
+function instances() {
+    const holder = globalThis;
+    holder[INSTANCES] ??= new Map();
+    return holder[INSTANCES];
+}
+/**
+ * The Glirastes runtime of one app: the tools derived from the code, and,
+ * connected, the Platform connection behind them. One instance per app and
+ * process: a second call with the same generated app returns the first
+ * instance (its options are ignored), so route bundles can each call it.
+ *
+ * Without `GLIRASTES_API_KEY` the app runs Standalone and never touches the
+ * network. With it, the first `ready()` (or `chatTurn()`) asks the Platform
+ * which app, environment and runner the key belongs to, registers, reports
+ * the code and syncs. Until that succeeds the turns run on the local code;
+ * failures go to `onError` and are retried. A key of a different app is an
+ * error, never a silent switch. A malformed key or URL throws here.
+ */
+export function createGlirastes(options) {
+    const appId = AppSetupArtifactSchema.parse(options.generated.setupArtifact).appId;
+    const existing = instances().get(appId);
+    if (existing)
+        return existing;
+    const instance = createInstance(options, appId);
+    instances().set(appId, instance);
+    return instance;
+}
+function createInstance(options, appId) {
+    const env = options.env ?? process.env;
+    const config = resolveRuntimeConnectionConfig(env);
+    const onError = (error) => {
+        try {
+            (options.onError ?? logError)(error);
+        }
+        catch {
+            // Reporting must never break the runtime.
+        }
+    };
+    const generated = options.wrapBindings
+        ? {
+            setupArtifact: options.generated.setupArtifact,
+            createToolBindings: () => options.wrapBindings(options.generated.createToolBindings()),
+        }
+        : options.generated;
+    const bound = createContractBindings(generated);
+    const localSource = (identity, managed) => createLocalRuntimeSource({
+        setupArtifact: bound.setupArtifact,
+        bindings: bound.bindings,
+        localLimits: options.localLimits,
+        ...(identity ? { identity } : {}),
+        ...(managed
+            ? {
+                policyOverlay: () => {
+                    const current = managed.accepted();
+                    return current && policyOverlayFromRevision(current.policyRevision);
+                },
+                platformRevisions: managed.accepted,
+            }
+            : {}),
+    });
+    const base = localSource();
+    const store = new AcceptedStateStore();
+    const abort = new AbortController();
+    const retryMs = Math.max(1, options.pollIntervalMs ?? DEFAULT_RETRY_INTERVAL_MS);
+    let resolved;
+    let connectedBase;
+    let managed;
+    let metrics;
+    let stopSync;
+    let started = false;
+    // Settles after the first attempt, successful or not: a turn waits for the
+    // first sync at most once, not on every turn while the Platform is away.
+    let settleFirstAttempt;
+    const firstAttempt = new Promise((resolve) => {
+        settleFirstAttempt = resolve;
+    });
+    const connect = async () => {
+        if (!config)
+            return;
+        let connection;
+        while (!abort.signal.aborted && !connection) {
+            try {
+                connection = await lookupRuntimeConnection({
+                    baseUrl: config.baseUrl,
+                    apiKey: config.apiKey,
+                    signal: abort.signal,
+                    ...(options.fetchImpl ? { fetchImpl: options.fetchImpl } : {}),
+                });
+            }
+            catch (error) {
+                if (abort.signal.aborted)
+                    return;
+                onError(error);
+                settleFirstAttempt();
+                await delay(retryMs, abort.signal);
+            }
+        }
+        if (!connection || abort.signal.aborted)
+            return;
+        if (connection.appId !== appId) {
+            // A key of another app: report once and stay on the local code.
+            onError(new Error('The Glirastes runtime key belongs to a different app than this code'));
+            return;
+        }
+        let sync;
+        try {
+            sync = createManagedRuntimeSync({
+                baseUrl: config.baseUrl,
+                apiKey: config.apiKey,
+                appId: connection.appId,
+                environmentId: connection.environmentId,
+                runnerKey: connection.runnerKey,
+                version: options.version ?? '0.0.0',
+                stateStore: store,
+                setupArtifact: options.generated.setupArtifact,
+                // A deployment that names a tool this code lacks, or has changed, keeps running on the local tool.
+                validateDeployment: (_deployment, revisions) => {
+                    validateLocalDeploymentBindings({ revisions, bindings: bound.bindings });
+                },
+                onError,
+                ...(options.fetchImpl ? { fetchImpl: options.fetchImpl } : {}),
+                ...(options.push !== undefined ? { push: options.push } : {}),
+                pollIntervalMs: retryMs,
+            });
+        }
+        catch (error) {
+            onError(error);
+            return;
+        }
+        resolved = connection;
+        connectedBase = localSource({
+            targetAppId: connection.appId,
+            environmentId: connection.environmentId,
+        });
+        if (options.metrics !== false) {
+            metrics = createRuntimeMetricsSinkFromEnv(env, {
+                ...options.metrics,
+                connection,
+                ...(options.fetchImpl ? { fetch: options.fetchImpl } : {}),
+            });
+        }
+        stopSync = () => sync.client.stop();
+        while (!abort.signal.aborted) {
+            try {
+                await sync.client.register({
+                    capabilities: { aiSdk: true },
+                    technicalMetadata: { runtime: options.runtime ?? 'node' },
+                });
+                await sync.reportCapabilities().catch(onError);
+                await sync.client.syncOnce();
+                break;
+            }
+            catch (error) {
+                onError(error);
+                settleFirstAttempt();
+                await delay(retryMs, abort.signal);
+            }
+        }
+        if (!abort.signal.aborted)
+            void sync.client.start();
+    };
+    const instance = {
+        mode: config ? 'connected' : 'standalone',
+        bindings: bound.bindings,
+        disabled: bound.disabled,
+        toolSearchSemantics: options.generated.toolSearchSemantics,
+        get metrics() {
+            return metrics;
+        },
+        connection: () => resolved && { ...resolved },
+        ready() {
+            if (!config)
+                return Promise.resolve();
+            if (!started) {
+                started = true;
+                void connect().catch(onError).finally(settleFirstAttempt);
+            }
+            let timer;
+            const timeout = new Promise((resolve) => {
+                timer = setTimeout(resolve, options.firstSyncTimeoutMs ?? DEFAULT_FIRST_SYNC_TIMEOUT_MS);
+                timer.unref?.();
+            });
+            return Promise.race([firstAttempt, timeout]).finally(() => clearTimeout(timer));
+        },
+        currentSource() {
+            const accepted = store.accepted();
+            if (!resolved || !connectedBase)
+                return base;
+            if (!accepted)
+                return connectedBase;
+            // Signed Platform decisions restrict the local policy, never widen it.
+            const tenantId = accepted.policyRevision.tenantId;
+            if (managed?.tenantId !== tenantId) {
+                managed = {
+                    tenantId,
+                    source: localSource({ tenantId, targetAppId: resolved.appId, environmentId: resolved.environmentId }, { accepted: () => store.accepted() }),
+                };
+            }
+            return managed.source;
+        },
+        accepted: () => store.accepted(),
+        revocations: () => store.revocations(),
+        async chatTurn(principal) {
+            await instance.ready();
+            const source = instance.currentSource();
+            const tenantId = source.identity.tenantId;
+            const currentMetrics = metrics;
+            return {
+                managedRuntime: {
+                    resolvePrincipal: (request) => principal(tenantId, request),
+                    resolveTurnSnapshot: (context) => source.resolveTurnSnapshot(context),
+                    loadRevocations: () => store.revocations(),
+                },
+                loadTools: ({ turnSnapshot }) => (turnSnapshot
+                    ? materializeManifestToolRegistry({ snapshot: turnSnapshot, bindings: bound.bindings })
+                    : {}),
+                ...(options.generated.toolSearchSemantics
+                    ? { toolSemantics: options.generated.toolSearchSemantics }
+                    : {}),
+                ...(currentMetrics ? { metrics: currentMetrics } : {}),
+            };
+        },
+        async stop() {
+            abort.abort();
+            stopSync?.();
+            if (instances().get(appId) === instance)
+                instances().delete(appId);
+            await metrics?.close();
+        },
+    };
+    return instance;
+}
+//# sourceMappingURL=glirastes.js.map

package/dist/runtime/glirastes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glirastes.js","sourceRoot":"","sources":["../../src/runtime/glirastes.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,GAIvB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,uBAAuB,GAExB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,EAAE,+BAA+B,EAAE,MAAM,uCAAuC,CAAC;AACxF,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EACL,8BAA8B,GAE/B,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EACL,sBAAsB,GAIvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,wBAAwB,GAEzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,+BAA+B,GAEhC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,+BAA+B,GAEhC,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AAInE,MAAM,6BAA6B,GAAG,KAAK,CAAC;AAC5C,MAAM,yBAAyB,GAAG,MAAM,CAAC;AA6FzC,6FAA6F;AAC7F,MAAM,kBAAkB;IACd,KAAK,GAA4B,IAAI,CAAC;IACtC,MAAM,CAA8C;IAE5D,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAuB;QACtC,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACpC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,CAAC;IAED,QAAQ;QACN,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,WAAW;QACT,OAAO,IAAI,CAAC,KAAK,EAAE,WAAW,IAAI,EAAE,CAAC;IACvC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,mEAAmE;IACnE,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,KAAK,CAAC,YAAoB,EAAE,MAAmB;IACtD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC7C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QAC7C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,SAAS,IAAI;YACX,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC1C,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wEAAwE;AACxE,yEAAyE;AACzE,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AAG5D,SAAS,SAAS;IAChB,MAAM,MAAM,GAAG,UAA4B,CAAC;IAC5C,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;IAChC,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC;IAClF,MAAM,QAAQ,GAAG,SAAS,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC9B,MAAM,QAAQ,GAAG,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,SAAS,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,OAA+B,EAAE,KAAa;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,MAAM,GAAG,8BAA8B,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,CAAC,OAAO,CAAC,OAAO,IAAI,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC,CAAC;IACF,MAAM,SAAS,GAAwB,OAAO,CAAC,YAAY;QACzD,CAAC,CAAC;YACE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,aAAa;YAC9C,kBAAkB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAa,CAAC,OAAO,CAAC,SAAS,CAAC,kBAAkB,EAAE,CAAC;SACxF;QACH,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACtB,MAAM,KAAK,GAAG,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAChD,MAAM,WAAW,GAAG,CAAC,QAA8E,EAAE,OAEpG,EAAE,EAAE,CAAC,wBAAwB,CAAC;QAC7B,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,GAAG,CAAC,OAAO;YACT,CAAC,CAAC;gBACE,aAAa,EAAE,GAAG,EAAE;oBAClB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACnC,OAAO,OAAO,IAAI,yBAAyB,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;gBACtE,CAAC;gBACD,iBAAiB,EAAE,OAAO,CAAC,QAAQ;aACpC;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,cAAc,IAAI,yBAAyB,CAAC,CAAC;IACjF,IAAI,QAA+C,CAAC;IACpD,IAAI,aAA6C,CAAC;IAClD,IAAI,OAAqE,CAAC;IAC1E,IAAI,OAAuC,CAAC;IAC5C,IAAI,QAAkC,CAAC;IACvC,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,2EAA2E;IAC3E,yEAAyE;IACzE,IAAI,kBAA+B,CAAC;IACpC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACjD,kBAAkB,GAAG,OAAO,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,KAAK,IAAmB,EAAE;QACxC,IAAI,CAAC,MAAM;YAAE,OAAO;QACpB,IAAI,UAAiD,CAAC;QACtD,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;YAC5C,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,uBAAuB,CAAC;oBACzC,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC/D,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;oBAAE,OAAO;gBACjC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACf,kBAAkB,EAAE,CAAC;gBACrB,MAAM,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAChD,IAAI,UAAU,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;YAC/B,gEAAgE;YAChE,OAAO,CAAC,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC,CAAC;YAC1F,OAAO;QACT,CAAC;QAED,IAAI,IAAiD,CAAC;QACtD,IAAI,CAAC;YACH,IAAI,GAAG,wBAAwB,CAAC;gBAC9B,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,UAAU,CAAC,KAAK;gBACvB,aAAa,EAAE,UAAU,CAAC,aAAa;gBACvC,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO;gBACnC,UAAU,EAAE,KAAK;gBACjB,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,aAAa;gBAC9C,mGAAmG;gBACnG,kBAAkB,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,EAAE;oBAC7C,+BAA+B,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC3E,CAAC;gBACD,OAAO;gBACP,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9D,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7D,cAAc,EAAE,OAAO;aACxB,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,CAAC;YACf,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,UAAU,CAAC;QACtB,aAAa,GAAG,WAAW,CAAC;YAC1B,WAAW,EAAE,UAAU,CAAC,KAAK;YAC7B,aAAa,EAAE,UAAU,CAAC,aAAa;SACxC,CAAC,CAAC;QACH,IAAI,OAAO,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC9B,OAAO,GAAG,+BAA+B,CAAC,GAAG,EAAE;gBAC7C,GAAG,OAAO,CAAC,OAAO;gBAClB,UAAU;gBACV,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;QACL,CAAC;QACD,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAEpC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;oBACzB,YAAY,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;oBAC7B,iBAAiB,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,MAAM,EAAE;iBAC1D,CAAC,CAAC;gBACH,MAAM,IAAI,CAAC,kBAAkB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAC/C,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC7B,MAAM;YACR,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,CAAC;gBACf,kBAAkB,EAAE,CAAC;gBACrB,MAAM,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;YACrC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO;YAAE,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;IACtD,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAc;QAC1B,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY;QACzC,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,mBAAmB,EAAE,OAAO,CAAC,SAAS,CAAC,mBAAmB;QAC1D,IAAI,OAAO;YACT,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,IAAI,EAAE,GAAG,QAAQ,EAAE;QAC7C,KAAK;YACH,IAAI,CAAC,MAAM;gBAAE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO,GAAG,IAAI,CAAC;gBACf,KAAK,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAC5D,CAAC;YACD,IAAI,KAAgD,CAAC;YACrD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC5C,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC,CAAC;gBACzF,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;YAClB,CAAC,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAClF,CAAC;QACD,aAAa;YACX,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC;YAClC,IAAI,CAAC,QAAQ,IAAI,CAAC,aAAa;gBAAE,OAAO,IAAI,CAAC;YAC7C,IAAI,CAAC,QAAQ;gBAAE,OAAO,aAAa,CAAC;YACpC,uEAAuE;YACvE,MAAM,QAAQ,GAAG,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC;YAClD,IAAI,OAAO,EAAE,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACnC,OAAO,GAAG;oBACR,QAAQ;oBACR,MAAM,EAAE,WAAW,CACjB,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,EAChF,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CACrC;iBACF,CAAC;YACJ,CAAC;YACD,OAAO,OAAO,CAAC,MAAM,CAAC;QACxB,CAAC;QACD,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE;QAChC,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;QACtC,KAAK,CAAC,QAAQ,CAAC,SAAS;YACtB,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;YACxC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC1C,MAAM,cAAc,GAAG,OAAO,CAAC;YAC/B,OAAO;gBACL,cAAc,EAAE;oBACd,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC;oBAC3D,mBAAmB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC;oBACrE,eAAe,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE;iBAC3C;gBACD,SAAS,EAAE,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY;oBAC5C,CAAC,CAAC,+BAA+B,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;oBACvF,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,mBAAmB;oBACvC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,SAAS,CAAC,mBAAmB,EAAE;oBAC1D,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACvD,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI;YACR,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,QAAQ,EAAE,EAAE,CAAC;YACb,IAAI,SAAS,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;gBAAE,SAAS,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,MAAM,OAAO,EAAE,KAAK,EAAE,CAAC;QACzB,CAAC;KACF,CAAC;IACF,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/runtime/index.d.ts

@@ -0,0 +1,23 @@
+export { assertPromptPinForResume, createTurnSnapshot, isToolRevoked, type TurnSnapshot, } from './turn-snapshot.js';
+export { PromptBundleStore, type ActivePromptBundle, type PinnedPromptBundle, type PromptArtifactRegistry, type PromptBundleSections, type PromptBundleStoreOptions, type StagedPromptBundle, } from './prompt-bundle-store.js';
+export { authorizeToolCall, type ToolAuthorizationResult, } from './authorization.js';
+export { ExecutionBudgetTracker, type BudgetEvaluation, type BudgetReason, type ExecutionUsage, } from './budget.js';
+export { createExecutionFingerprint } from './fingerprint.js';
+export { DEFAULT_CONTROL_PLANE_URL, RUNTIME_API_KEY_PATTERN, resolveRuntimeConnectionConfig, resolveRuntimeMode, type RuntimeConnectionConfig, type RuntimeMode, } from './runtime-mode.js';
+export { createEphemeralLocalSigner, type LocalRevisionSigner, } from './local-signer.js';
+export { createLocalRuntimeSource, type LocalRuntimeSource, type LocalRuntimeSourceIdentity, type LocalRuntimeSourceOptions, type PlatformRevisionRefs, } from './local-runtime-source.js';
+export { createManagedTurnGuard, type ManagedTurnBudgetSignal, type ManagedTurnGuard, type ManagedTurnGuardOptions, } from './managed-turn.js';
+export { assertLocalToolBindingMatches, createLocalSchemaDigest, localToolBindingMismatches, materializeManifestToolRegistry, modelFacingToolName, type LocalEndpointToolBinding, type LocalToolBinding, type LocalUiToolBinding, type ToolRegistryDiagnostic, type ToolRegistryDiagnosticReason, } from './local-tool-bindings.js';
+export { applyPolicyOverlay, policyOverlayFromRevision, relaxableToolIds, type PolicyOverlayEntry, type PolicyOverlayIgnoredEntry, type PolicyOverlayOptions, type PolicyOverlayRelaxation, type PolicyOverlayRelaxationOutcome, type PolicyOverlayResult, type VerifiedPolicyOverlay, } from './policy-overlay.js';
+export { createRegistryToolDiscovery, createTurnToolDiscovery, type ToolDiscoveryResult, type ToolSearchSemantics, type ToolSearchSemanticsMap, type TurnToolDiscovery, type TurnToolDiscoveryOptions, } from './tool-discovery.js';
+export { createToolSearchIndex, searchTermVariants, searchTokens, type ToolSearchDocument, type ToolSearchIndex, } from './tool-search.js';
+export { createJsonSchemaLike, type JsonSchemaLike, type LocalJsonSchema, } from './json-schema.js';
+export { OfflineExecutionLeaseAuthorizer, type OfflineExecutionLeaseAuthorization, type OfflineExecutionLeaseScope, } from './offline-execution-lease.js';
+export type { RuntimeEngine, RuntimeEngineEvent, RuntimeRunRequest, } from './engine.js';
+export { CheckpointConflictError, POSTGRES_RUNTIME_STORE_SCHEMA_SQL, assertRuntimePersistenceReady, createPostgresRuntimeStore, type CompleteToolExecutionInput, type ConversationRecord, type ConversationVisibility, type DurableRuntimeStore, type LoadConversationInput, type PostgresQueryClient, type PostgresRuntimeStore, type ProjectConversationInput, type RuntimeCheckpoint, type RuntimeCheckpointStatus, type RuntimePersistenceRequirement, type RuntimeStoreScope, type SaveCheckpointInput, type SaveConversationInput, type ToolExecutionClaimInput, type ToolExecutionEvidence, type ToolExecutionStatus, } from './postgres-store.js';
+export { createContractBindings, createGeneratedRuntimeSource, type ContractBindingDisabledReason, type ContractBindingsResult, type GeneratedEndpointToolBinding, type GeneratedRuntimeSource, type GeneratedToolBinding, type GeneratedToolModule, type GeneratedUiToolBinding, } from './contract-bindings.js';
+export { RuntimePriceTableSchema, UNKNOWN_TURN_COST, combineTurnCost, providerReportedCostUsd, rawChunkCostUsd, resolveStepCost, type RuntimePriceTable, type StepCostInput, } from './metrics/cost.js';
+export { createTurnMetricsRecorder, type RuntimeMetricsIdentity, type RuntimeMetricsSink, type TurnMetricsOutcome, type TurnMetricsRecorder, type TurnMetricsRecorderOptions, type TurnMetricsStep, } from './metrics/turn-recorder.js';
+export { createRuntimeMetricsSink, createRuntimeMetricsSinkFromEnv, type BatchingRuntimeMetricsSink, type RuntimeMetricsDropReason, type RuntimeMetricsSinkOptions, } from './metrics/sink.js';
+export { createGlirastes, type CreateGlirastesOptions, type Glirastes, type GlirastesChatTurn, type GlirastesGeneratedModule, type GlirastesPrincipalFactory, } from './glirastes.js';
+export { lookupRuntimeConnection, type ResolvedRuntimeConnection, } from '../sync/connection-lookup.js';

package/dist/runtime/index.js

@@ -0,0 +1,23 @@
+export { assertPromptPinForResume, createTurnSnapshot, isToolRevoked, } from './turn-snapshot.js';
+export { PromptBundleStore, } from './prompt-bundle-store.js';
+export { authorizeToolCall, } from './authorization.js';
+export { ExecutionBudgetTracker, } from './budget.js';
+export { createExecutionFingerprint } from './fingerprint.js';
+export { DEFAULT_CONTROL_PLANE_URL, RUNTIME_API_KEY_PATTERN, resolveRuntimeConnectionConfig, resolveRuntimeMode, } from './runtime-mode.js';
+export { createEphemeralLocalSigner, } from './local-signer.js';
+export { createLocalRuntimeSource, } from './local-runtime-source.js';
+export { createManagedTurnGuard, } from './managed-turn.js';
+export { assertLocalToolBindingMatches, createLocalSchemaDigest, localToolBindingMismatches, materializeManifestToolRegistry, modelFacingToolName, } from './local-tool-bindings.js';
+export { applyPolicyOverlay, policyOverlayFromRevision, relaxableToolIds, } from './policy-overlay.js';
+export { createRegistryToolDiscovery, createTurnToolDiscovery, } from './tool-discovery.js';
+export { createToolSearchIndex, searchTermVariants, searchTokens, } from './tool-search.js';
+export { createJsonSchemaLike, } from './json-schema.js';
+export { OfflineExecutionLeaseAuthorizer, } from './offline-execution-lease.js';
+export { CheckpointConflictError, POSTGRES_RUNTIME_STORE_SCHEMA_SQL, assertRuntimePersistenceReady, createPostgresRuntimeStore, } from './postgres-store.js';
+export { createContractBindings, createGeneratedRuntimeSource, } from './contract-bindings.js';
+export { RuntimePriceTableSchema, UNKNOWN_TURN_COST, combineTurnCost, providerReportedCostUsd, rawChunkCostUsd, resolveStepCost, } from './metrics/cost.js';
+export { createTurnMetricsRecorder, } from './metrics/turn-recorder.js';
+export { createRuntimeMetricsSink, createRuntimeMetricsSinkFromEnv, } from './metrics/sink.js';
+export { createGlirastes, } from './glirastes.js';
+export { lookupRuntimeConnection, } from '../sync/connection-lookup.js';
+//# sourceMappingURL=index.js.map

package/dist/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,kBAAkB,EAClB,aAAa,GAEd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,iBAAiB,GAOlB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,iBAAiB,GAElB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,sBAAsB,GAIvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,8BAA8B,EAC9B,kBAAkB,GAGnB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,0BAA0B,GAE3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,wBAAwB,GAKzB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,sBAAsB,GAIvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,0BAA0B,EAC1B,+BAA+B,EAC/B,mBAAmB,GAMpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,kBAAkB,EAClB,yBAAyB,EACzB,gBAAgB,GAQjB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,GAMxB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,YAAY,GAGb,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,oBAAoB,GAGrB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,+BAA+B,GAGhC,MAAM,8BAA8B,CAAC;AAMtC,OAAO,EACL,uBAAuB,EACvB,iCAAiC,EACjC,6BAA6B,EAC7B,0BAA0B,GAkB3B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,4BAA4B,GAQ7B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EACL,uBAAuB,EACvB,iBAAiB,EACjB,eAAe,EACf,uBAAuB,EACvB,eAAe,EACf,eAAe,GAGhB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,yBAAyB,GAO1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,wBAAwB,EACxB,+BAA+B,GAIhC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,eAAe,GAMhB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,uBAAuB,GAExB,MAAM,8BAA8B,CAAC"}

package/dist/runtime/json-schema.d.ts

@@ -0,0 +1,13 @@
+import type { SchemaLike } from '../types.js';
+export type LocalJsonSchema = Readonly<Record<string, unknown>>;
+export interface JsonSchemaLike extends SchemaLike {
+    readonly jsonSchema: LocalJsonSchema;
+}
+export interface CreateJsonSchemaLikeOptions {
+    /**
+     * Project successful output payloads onto the declared contract. Input
+     * schemas must keep the default fail-closed behavior.
+     */
+    stripAdditionalProperties?: boolean;
+}
+export declare function createJsonSchemaLike(jsonSchema: LocalJsonSchema, options?: CreateJsonSchemaLikeOptions): JsonSchemaLike;

package/dist/runtime/json-schema.js

@@ -0,0 +1,41 @@
+import { Ajv } from 'ajv';
+import addFormatsModule from 'ajv-formats';
+const addFormats = addFormatsModule;
+function issuePath(error) {
+    if (!error.instancePath)
+        return [];
+    return error.instancePath
+        .split('/')
+        .slice(1)
+        .map((segment) => segment.replaceAll('~1', '/').replaceAll('~0', '~'));
+}
+export function createJsonSchemaLike(jsonSchema, options = {}) {
+    const ajv = new Ajv({
+        allErrors: true,
+        allowUnionTypes: true,
+        strict: false,
+        useDefaults: true,
+        removeAdditional: options.stripAdditionalProperties ? 'failing' : false,
+    });
+    addFormats(ajv);
+    const validate = ajv.compile(jsonSchema);
+    return {
+        jsonSchema,
+        safeParse(value) {
+            const candidate = structuredClone(value);
+            if (validate(candidate)) {
+                return { success: true, data: candidate };
+            }
+            return {
+                success: false,
+                error: {
+                    issues: (validate.errors ?? []).map((error) => ({
+                        path: issuePath(error),
+                        message: error.message ?? error.keyword,
+                    })),
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=json-schema.js.map

package/dist/runtime/json-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-schema.js","sourceRoot":"","sources":["../../src/runtime/json-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAoB,MAAM,KAAK,CAAC;AAC5C,OAAO,gBAAgB,MAAM,aAAa,CAAC;AAG3C,MAAM,UAAU,GAAG,gBAAgD,CAAC;AAgBpE,SAAS,SAAS,CAAC,KAAkB;IACnC,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,KAAK,CAAC,YAAY;SACtB,KAAK,CAAC,GAAG,CAAC;SACV,KAAK,CAAC,CAAC,CAAC;SACR,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,UAA2B,EAC3B,UAAuC,EAAE;IAEzC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC;QAClB,SAAS,EAAE,IAAI;QACf,eAAe,EAAE,IAAI;QACrB,MAAM,EAAE,KAAK;QACb,WAAW,EAAE,IAAI;QACjB,gBAAgB,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK;KACxE,CAAC,CAAC;IACH,UAAU,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEzC,OAAO;QACL,UAAU;QACV,SAAS,CAAC,KAAK;YACb,MAAM,SAAS,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACzC,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC5C,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;wBAC9C,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC;wBACtB,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,OAAO;qBACxC,CAAC,CAAC;iBACJ;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}