glirastes 0.4.0 → 0.5.0

package/dist/sync/runtime-setup-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-setup-client.js","sourceRoot":"","sources":["../../src/sync/runtime-setup-client.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsDxB,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CACxC,mDAAmD,CACpD,CAAC;AACF,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC9C,iBAAiB,EAAE,iBAAiB;IACpC,iBAAiB,EAAE,iBAAiB;IACpC,kBAAkB,EAAE,iBAAiB;CACtC,CAAC,CAAC;AACH,MAAM,4BAA4B,GAAG,CAAC,CAAC,kBAAkB,CAAC,eAAe,EAAE;IACzE,mBAAmB,CAAC,MAAM,CAAC;QACzB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QACpC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;KAC5C,CAAC,CAAC,MAAM,EAAE;IACX,mBAAmB,CAAC,MAAM,CAAC;QACzB,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9B,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACpD,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AACH,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CAC7D,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC;QAC1C,iBAAiB,EAAE,iBAAiB;KACrC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACvB,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC3D,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE;QACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAChE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACjE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CACxB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,UAAU,4BAA4B,CAC1C,KAAc;IAEd,OAAO,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,OAM5B;QAN4B,YAAO,GAAP,OAAO,CAMnC;IAAG,CAAC;IAEL,KAAK,CAAC,eAAe,CACnB,IAAqB;QAErB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC,CACtD,IAAI,CAAC,SAAS,EAAE,EAChB;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBAC9C,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;SAC1C,CACF,CAAC;QACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAEO,SAAS;QACf,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE;cAC/C,YAAY,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE;cACpD,iBAAiB,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE;cACjE,sBAAsB,CAAC;IAC7B,CAAC;IAEO,QAAQ,CAAC,IAAqB;QACpC,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC9C,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;gBAC9C,UAAU,EAAE,SAAS,CAAC,UAAU;gBAChC,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,IAAI,EAAE,SAAS,CAAC,IAAI;gBACpB,UAAU,EAAE,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC;gBACrC,WAAW,EAAE,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;oBACrD,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,QAAQ,EAAE,SAAS,CAAC,QAAQ;iBAC7B,CAAC,CAAC;gBACH,cAAc,EAAE,SAAS,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBACzD,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,MAAM,EAAE,OAAO,CAAC,MAAM;iBACvB,CAAC,CAAC;gBACH,YAAY,EAAE,CAAC,GAAG,SAAS,CAAC,YAAY,CAAC;gBACzC,oBAAoB,EAAE,CAAC,GAAG,SAAS,CAAC,oBAAoB,CAAC;gBACzD,SAAS,EAAE,SAAS,CAAC,SAAS;gBAC9B,oBAAoB,EAAE,KAAK;gBAC3B,aAAa,EAAE,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC;aAC5C,CAAC,CAAC;YACH,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC;YAC1B,GAAG,CAAC,IAAI,CAAC,UAAU;gBACjB,CAAC,CAAC;oBACA,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,CAC7C,SAAS,CAAC,aAAa,KAAK,UAAU;wBACpC,CAAC,CAAC;4BACA,YAAY,EAAE,SAAS,CAAC,YAAY;4BACpC,SAAS,EAAE,SAAS,CAAC,SAAS;4BAC9B,aAAa,EAAE,SAAS,CAAC,aAAa;4BACtC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;4BAC9C,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;4BAC9C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;4BAChD,MAAM,EAAE,SAAS,CAAC,MAAM;4BACxB,IAAI,EAAE,SAAS,CAAC,IAAI;yBACrB;wBACD,CAAC,CAAC;4BACA,YAAY,EAAE,SAAS,CAAC,YAAY;4BACpC,SAAS,EAAE,SAAS,CAAC,SAAS;4BAC9B,aAAa,EAAE,SAAS,CAAC,aAAa;4BACtC,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;4BAC9C,iBAAiB,EAAE,SAAS,CAAC,iBAAiB;4BAC9C,kBAAkB,EAAE,SAAS,CAAC,kBAAkB;4BAChD,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;yBAC7C,CACJ,CAAC;iBACH;gBACD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC;IACJ,CAAC;IAEO,aAAa,CACnB,IAAqB,EACrB,QAA0D;QAE1D,IAAI,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;YAC1D,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,IAAI,EAAE;YACvC,SAAS,CAAC,iBAAiB;SAC5B,CAAC,CAAC,CAAC;QACJ,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC9C,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,QAAQ,IAAI,QAAQ,KAAK,SAAS,CAAC,iBAAiB;gBAAE,OAAO,KAAK,CAAC;YACvE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,SAAS,CAAC,iBAAiB,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IACE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;mBACxB,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,iBAAiB,EAChE,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC9B,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;IACrC,CAAC;CACF"}

package/dist/sync/signature-verifier.d.ts

@@ -0,0 +1,39 @@
+import { webcrypto } from 'node:crypto';
+import type { ExecutionLease, RuntimeRevisionEnvelope, SecurityRevocation } from '../contracts/revisions.js';
+import type { PromptBundle, SignedPromptBinding } from '../contracts/prompt-bundle.js';
+export type RuntimePublicJwk = webcrypto.JsonWebKey & {
+    kid?: string;
+    alg?: string;
+    use?: string;
+};
+export interface RuntimePublicKeyProvider {
+    getKey(keyId: string): Promise<RuntimePublicJwk | null>;
+}
+export declare class RuntimeSyncVerificationError extends Error {
+    readonly code: 'content_hash_mismatch' | 'signing_key_unavailable' | 'invalid_signing_key' | 'signature_invalid';
+    constructor(message: string, code: 'content_hash_mismatch' | 'signing_key_unavailable' | 'invalid_signing_key' | 'signature_invalid');
+}
+export declare function canonicalRuntimeJson(value: unknown): string;
+export declare class RuntimeRevisionVerifier {
+    private readonly keys;
+    constructor(keys: RuntimePublicKeyProvider);
+    verifyRevision(revision: RuntimeRevisionEnvelope): Promise<void>;
+    /**
+     * A prompt bundle is content-addressed: its digest must match its canonical
+     * sections and its publisher signature must verify before anything downstream
+     * may parse or activate it.
+     */
+    verifyPromptBundle(bundle: PromptBundle): Promise<void>;
+    verifyPromptBinding(binding: SignedPromptBinding): Promise<void>;
+    /**
+     * Verify any signed object of the `{ ...unsigned, signature }` envelope
+     * shape. Used by the standalone runtime source, whose locally
+     * materialized revisions must pass the same chain as managed ones.
+     */
+    verifySignedObject(value: {
+        signature: RuntimeRevisionEnvelope['signature'];
+    } & object): Promise<void>;
+    verifyRevocation(revocation: SecurityRevocation): Promise<void>;
+    verifyExecutionLease(lease: ExecutionLease): Promise<void>;
+    private verifyEnvelope;
+}

package/dist/sync/signature-verifier.js

@@ -0,0 +1,97 @@
+import { createHash, createPublicKey, verify, } from 'node:crypto';
+export class RuntimeSyncVerificationError extends Error {
+    code;
+    constructor(message, code) {
+        super(message);
+        this.code = code;
+        this.name = 'RuntimeSyncVerificationError';
+    }
+}
+function canonicalValue(value) {
+    if (Array.isArray(value)) {
+        return value.map((item) => (item === undefined ? null : canonicalValue(item)));
+    }
+    if (value !== null && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value)
+            .filter(([, child]) => child !== undefined)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([key, child]) => [key, canonicalValue(child)]));
+    }
+    return value;
+}
+export function canonicalRuntimeJson(value) {
+    return JSON.stringify(canonicalValue(value));
+}
+export class RuntimeRevisionVerifier {
+    keys;
+    constructor(keys) {
+        this.keys = keys;
+    }
+    async verifyRevision(revision) {
+        const actualHash = `sha256:${createHash('sha256')
+            .update(canonicalRuntimeJson(revision.payload))
+            .digest('base64url')}`;
+        if (actualHash !== revision.contentHash) {
+            throw new RuntimeSyncVerificationError('Runtime revision content hash does not match its payload', 'content_hash_mismatch');
+        }
+        const { signature, ...unsigned } = revision;
+        await this.verifyEnvelope(unsigned, signature);
+    }
+    /**
+     * A prompt bundle is content-addressed: its digest must match its canonical
+     * sections and its publisher signature must verify before anything downstream
+     * may parse or activate it.
+     */
+    async verifyPromptBundle(bundle) {
+        const actualDigest = `sha256:${createHash('sha256')
+            .update(canonicalRuntimeJson(bundle.sections))
+            .digest('base64url')}`;
+        if (actualDigest !== bundle.bundleDigest) {
+            throw new RuntimeSyncVerificationError('Prompt bundle digest does not match its sections', 'content_hash_mismatch');
+        }
+        const { signature, ...unsigned } = bundle;
+        await this.verifyEnvelope(unsigned, signature);
+    }
+    async verifyPromptBinding(binding) {
+        const { signature, ...unsigned } = binding;
+        await this.verifyEnvelope(unsigned, signature);
+    }
+    /**
+     * Verify any signed object of the `{ ...unsigned, signature }` envelope
+     * shape. Used by the standalone runtime source, whose locally
+     * materialized revisions must pass the same chain as managed ones.
+     */
+    async verifySignedObject(value) {
+        const { signature, ...unsigned } = value;
+        await this.verifyEnvelope(unsigned, signature);
+    }
+    async verifyRevocation(revocation) {
+        const { signature, ...unsigned } = revocation;
+        await this.verifyEnvelope(unsigned, signature);
+    }
+    async verifyExecutionLease(lease) {
+        const { signature, ...unsigned } = lease;
+        await this.verifyEnvelope(unsigned, signature);
+    }
+    async verifyEnvelope(unsigned, signature) {
+        const jwk = await this.keys.getKey(signature.keyId);
+        if (!jwk) {
+            throw new RuntimeSyncVerificationError(`Runtime signing key ${signature.keyId} is unavailable`, 'signing_key_unavailable');
+        }
+        let publicKey;
+        try {
+            publicKey = createPublicKey({ key: jwk, format: 'jwk' });
+            if (publicKey.asymmetricKeyType !== 'ed25519') {
+                throw new Error('not Ed25519');
+            }
+        }
+        catch {
+            throw new RuntimeSyncVerificationError('Runtime signing key is not a valid Ed25519 public key', 'invalid_signing_key');
+        }
+        const valid = verify(null, Buffer.from(canonicalRuntimeJson(unsigned)), publicKey, Buffer.from(signature.value, 'base64url'));
+        if (!valid) {
+            throw new RuntimeSyncVerificationError('Runtime revision signature is invalid', 'signature_invalid');
+        }
+    }
+}
+//# sourceMappingURL=signature-verifier.js.map

package/dist/sync/signature-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature-verifier.js","sourceRoot":"","sources":["../../src/sync/signature-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,eAAe,EACf,MAAM,GAEP,MAAM,aAAa,CAAC;AAqBrB,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAG1C;IAFX,YACE,OAAe,EACN,IAIc;QAEvB,KAAK,CAAC,OAAO,CAAC,CAAC;QANN,SAAI,GAAJ,IAAI,CAIU;QAGvB,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CACzB,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CACjD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;aAClB,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;aAC1C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CACvD,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,OAAO,uBAAuB;IACL;IAA7B,YAA6B,IAA8B;QAA9B,SAAI,GAAJ,IAAI,CAA0B;IAAG,CAAC;IAE/D,KAAK,CAAC,cAAc,CAAC,QAAiC;QACpD,MAAM,UAAU,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC;aAC9C,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;aAC9C,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACzB,IAAI,UAAU,KAAK,QAAQ,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,IAAI,4BAA4B,CACpC,0DAA0D,EAC1D,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAC5C,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CAAC,MAAoB;QAC3C,MAAM,YAAY,GAAG,UAAU,UAAU,CAAC,QAAQ,CAAC;aAChD,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;aAC7C,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QACzB,IAAI,YAAY,KAAK,MAAM,CAAC,YAAY,EAAE,CAAC;YACzC,MAAM,IAAI,4BAA4B,CACpC,kDAAkD,EAClD,uBAAuB,CACxB,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,CAAC;QAC1C,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,OAA4B;QACpD,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC3C,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,kBAAkB,CACtB,KAAmE;QAEnE,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC;QACzC,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,UAA8B;QACnD,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,UAAU,CAAC;QAC9C,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,KAAqB;QAC9C,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC;QACzC,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,QAAiB,EACjB,SAA+C;QAE/C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,4BAA4B,CACpC,uBAAuB,SAAS,CAAC,KAAK,iBAAiB,EACvD,yBAAyB,CAC1B,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACH,SAAS,GAAG,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,IAAI,SAAS,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;gBAC9C,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,4BAA4B,CACpC,uDAAuD,EACvD,qBAAqB,CACtB,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAClB,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,EAC3C,SAAS,EACT,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,WAAW,CAAC,CAC1C,CAAC;QACF,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,4BAA4B,CACpC,uCAAuC,EACvC,mBAAmB,CACpB,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/sync/state-store.d.ts

@@ -0,0 +1,24 @@
+import { type RuntimeDeploymentBundle, type SecurityRevocation } from '../contracts/revisions.js';
+export interface RuntimeSyncState {
+    cursor: string | null;
+    stable: RuntimeDeploymentBundle | null;
+    canary: RuntimeDeploymentBundle | null;
+    pending: RuntimeDeploymentBundle[];
+    revocations: SecurityRevocation[];
+    updatedAt: string;
+}
+export interface RuntimeStateStore {
+    load(): Promise<RuntimeSyncState | null>;
+    saveAtomic(state: RuntimeSyncState): Promise<void>;
+}
+export declare class MemoryRuntimeStateStore implements RuntimeStateStore {
+    private state;
+    load(): Promise<RuntimeSyncState | null>;
+    saveAtomic(state: RuntimeSyncState): Promise<void>;
+}
+export declare class FileRuntimeStateStore implements RuntimeStateStore {
+    private readonly path;
+    constructor(path: string);
+    load(): Promise<RuntimeSyncState | null>;
+    saveAtomic(state: RuntimeSyncState): Promise<void>;
+}

package/dist/sync/state-store.js

@@ -0,0 +1,47 @@
+import { mkdir, readFile, rename, writeFile } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { z } from 'zod';
+import { RuntimeDeploymentBundleSchema, SecurityRevocationSchema, } from '../contracts/revisions.js';
+const RuntimeSyncStateSchema = z.object({
+    cursor: z.iso.datetime({ offset: true }).nullable(),
+    stable: RuntimeDeploymentBundleSchema.nullable(),
+    canary: RuntimeDeploymentBundleSchema.nullable(),
+    pending: z.array(RuntimeDeploymentBundleSchema),
+    revocations: z.array(SecurityRevocationSchema),
+    updatedAt: z.iso.datetime({ offset: true }),
+}).strict();
+export class MemoryRuntimeStateStore {
+    state = null;
+    async load() {
+        return this.state ? structuredClone(this.state) : null;
+    }
+    async saveAtomic(state) {
+        this.state = structuredClone(RuntimeSyncStateSchema.parse(state));
+    }
+}
+export class FileRuntimeStateStore {
+    path;
+    constructor(path) {
+        this.path = path;
+    }
+    async load() {
+        let serialized;
+        try {
+            serialized = await readFile(this.path, 'utf8');
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return null;
+            throw error;
+        }
+        return RuntimeSyncStateSchema.parse(JSON.parse(serialized));
+    }
+    async saveAtomic(state) {
+        const validated = RuntimeSyncStateSchema.parse(state);
+        await mkdir(dirname(this.path), { recursive: true });
+        const temporaryPath = `${this.path}.${process.pid}.tmp`;
+        await writeFile(temporaryPath, `${JSON.stringify(validated)}\n`, { encoding: 'utf8', mode: 0o600 });
+        await rename(temporaryPath, this.path);
+    }
+}
+//# sourceMappingURL=state-store.js.map

package/dist/sync/state-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-store.js","sourceRoot":"","sources":["../../src/sync/state-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GAGzB,MAAM,2BAA2B,CAAC;AAWnC,MAAM,sBAAsB,GAAgC,CAAC,CAAC,MAAM,CAAC;IACnE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IAChD,MAAM,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IAChD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAOZ,MAAM,OAAO,uBAAuB;IAC1B,KAAK,GAA4B,IAAI,CAAC;IAE9C,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAuB;QACtC,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACpE,CAAC;CACF;AAED,MAAM,OAAO,qBAAqB;IACH;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IAE7C,KAAK,CAAC,IAAI;QACR,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YACpE,MAAM,KAAK,CAAC;QACd,CAAC;QACD,OAAO,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,KAAuB;QACtC,MAAM,SAAS,GAAG,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,aAAa,GAAG,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QACxD,MAAM,SAAS,CACb,aAAa,EACb,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,EAChC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAClC,CAAC;QACF,MAAM,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/sync/sync-manager.d.ts

@@ -0,0 +1,27 @@
+import { type RuntimeDeploymentBundle, type SecurityRevocation } from '../contracts/revisions.js';
+import type { RuntimeRevisionVerifier } from './signature-verifier.js';
+import { type RuntimeStateStore, type RuntimeSyncState } from './state-store.js';
+import type { MaterializedDeploymentRevisions } from './materialize-deployment.js';
+export interface RuntimeSyncApplyResult {
+    state: RuntimeSyncState;
+    rejectedDeploymentIds: string[];
+    rejectedRevocationIds: string[];
+}
+export declare class RuntimeSyncManager {
+    private readonly options;
+    constructor(options: {
+        environmentId: string;
+        store: RuntimeStateStore;
+        verifier: RuntimeRevisionVerifier;
+        validateDeployment?: (deployment: RuntimeDeploymentBundle, revisions: MaterializedDeploymentRevisions) => void | Promise<void>;
+        onRevocations?: (revocations: SecurityRevocation[]) => void | Promise<void>;
+        onPending?: (deployments: RuntimeDeploymentBundle[]) => void | Promise<void>;
+        onActivated?: (deployments: RuntimeDeploymentBundle[]) => void | Promise<void>;
+    });
+    apply(rawBundle: unknown): Promise<RuntimeSyncApplyResult>;
+    private deploymentScopeMatches;
+    private latest;
+    private mergePending;
+    private objectId;
+    private emptyState;
+}

package/dist/sync/sync-manager.js

@@ -0,0 +1,170 @@
+import { z } from 'zod';
+import { RuntimeDeploymentBundleSchema, SecurityRevocationSchema, } from '../contracts/revisions.js';
+import { materializeDeploymentRevisions } from './materialize-deployment.js';
+const WireSyncBundleSchema = z.object({
+    cursor: z.iso.datetime({ offset: true }),
+    activeSnapshotComplete: z.literal(true),
+    deployments: z.array(z.unknown()),
+    revocations: z.array(z.unknown()),
+}).strict();
+export class RuntimeSyncManager {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async apply(rawBundle) {
+        const wire = WireSyncBundleSchema.parse(rawBundle);
+        let state = await this.options.store.load() ?? this.emptyState();
+        const rejectedRevocationIds = [];
+        const acceptedRevocations = [];
+        for (const rawRevocation of wire.revocations) {
+            const parsed = SecurityRevocationSchema.safeParse(rawRevocation);
+            const id = this.objectId(rawRevocation, 'revocationId');
+            if (!parsed.success
+                || parsed.data.environmentId !== this.options.environmentId) {
+                rejectedRevocationIds.push(id);
+                continue;
+            }
+            try {
+                await this.options.verifier.verifyRevocation(parsed.data);
+                acceptedRevocations.push(parsed.data);
+            }
+            catch {
+                rejectedRevocationIds.push(parsed.data.revocationId);
+            }
+        }
+        if (acceptedRevocations.length > 0) {
+            const byId = new Map(state.revocations.map((revocation) => [revocation.revocationId, revocation]));
+            for (const revocation of acceptedRevocations) {
+                byId.set(revocation.revocationId, revocation);
+            }
+            state = {
+                ...state,
+                revocations: [...byId.values()],
+                updatedAt: wire.cursor,
+            };
+            // Persist revocations before candidate processing. A crash may replay the
+            // same cursor, but revocation IDs make that replay idempotent.
+            await this.options.store.saveAtomic(state);
+            await this.options.onRevocations?.(acceptedRevocations);
+        }
+        const acceptedDeployments = [];
+        const rejectedDeploymentIds = [];
+        let rejectedActive = false;
+        let rejectedPending = false;
+        for (const rawDeployment of wire.deployments) {
+            const parsed = RuntimeDeploymentBundleSchema.safeParse(rawDeployment);
+            const id = this.objectId(rawDeployment, 'deploymentId');
+            const rawStatus = (rawDeployment
+                && typeof rawDeployment === 'object'
+                && 'status' in rawDeployment) ? rawDeployment.status : undefined;
+            if (!parsed.success
+                || !this.deploymentScopeMatches(parsed.data)) {
+                rejectedDeploymentIds.push(id);
+                if (rawStatus === 'active')
+                    rejectedActive = true;
+                else
+                    rejectedPending = true;
+                continue;
+            }
+            try {
+                await this.options.verifier.verifyRevision(parsed.data.agentRevision);
+                await this.options.verifier.verifyRevision(parsed.data.manifestRevision);
+                await this.options.verifier.verifyRevision(parsed.data.policyRevision);
+                // Artifact bindings are signed material like the three revisions above;
+                // accepting them unverified would smuggle unsigned desired state into
+                // the fail-closed path.
+                if (parsed.data.configRevision) {
+                    await this.options.verifier.verifyRevision(parsed.data.configRevision);
+                }
+                if (parsed.data.promptBinding) {
+                    await this.options.verifier.verifyPromptBinding(parsed.data.promptBinding);
+                }
+                const materialized = materializeDeploymentRevisions(parsed.data);
+                await this.options.validateDeployment?.(parsed.data, materialized);
+                acceptedDeployments.push(parsed.data);
+            }
+            catch {
+                rejectedDeploymentIds.push(parsed.data.deploymentId);
+                if (parsed.data.status === 'active')
+                    rejectedActive = true;
+                else
+                    rejectedPending = true;
+            }
+        }
+        const active = acceptedDeployments.filter((deployment) => deployment.status === 'active');
+        const pending = acceptedDeployments.filter((deployment) => deployment.status === 'pending');
+        if (!rejectedActive && wire.activeSnapshotComplete) {
+            state = {
+                ...state,
+                stable: this.latest(active, 'stable'),
+                canary: this.latest(active, 'canary'),
+            };
+        }
+        const activeIds = new Set(active.map((deployment) => deployment.deploymentId));
+        const nextPending = (rejectedPending
+            ? this.mergePending(state.pending, pending)
+            : pending).filter((deployment) => !activeIds.has(deployment.deploymentId));
+        state = {
+            ...state,
+            pending: nextPending,
+            cursor: wire.cursor,
+            updatedAt: wire.cursor,
+        };
+        await this.options.store.saveAtomic(state);
+        if (pending.length > 0)
+            await this.options.onPending?.(pending);
+        if (active.length > 0 && !rejectedActive) {
+            await this.options.onActivated?.(active);
+        }
+        return { state, rejectedDeploymentIds, rejectedRevocationIds };
+    }
+    deploymentScopeMatches(deployment) {
+        const revisions = [
+            deployment.agentRevision,
+            deployment.manifestRevision,
+            deployment.policyRevision,
+        ];
+        const first = revisions[0];
+        return deployment.environmentId === this.options.environmentId
+            && deployment.manifestRevision.environmentId === this.options.environmentId
+            && deployment.policyRevision.environmentId === this.options.environmentId
+            && revisions.every((revision) => (revision.tenantId === first.tenantId
+                && revision.targetAppId === first.targetAppId));
+    }
+    latest(deployments, mode) {
+        return deployments
+            .filter((deployment) => deployment.rolloutMode === mode)
+            .sort((left, right) => Date.parse(right.updatedAt) - Date.parse(left.updatedAt))[0]
+            ?? null;
+    }
+    mergePending(current, accepted) {
+        const byId = new Map(current.map((deployment) => [
+            deployment.deploymentId,
+            deployment,
+        ]));
+        for (const deployment of accepted)
+            byId.set(deployment.deploymentId, deployment);
+        return [...byId.values()];
+    }
+    objectId(value, key) {
+        if (value
+            && typeof value === 'object'
+            && key in value
+            && typeof value[key] === 'string') {
+            return value[key];
+        }
+        return 'unknown';
+    }
+    emptyState() {
+        return {
+            cursor: null,
+            stable: null,
+            canary: null,
+            pending: [],
+            revocations: [],
+            updatedAt: new Date(0).toISOString(),
+        };
+    }
+}
+//# sourceMappingURL=sync-manager.js.map

package/dist/sync/sync-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-manager.js","sourceRoot":"","sources":["../../src/sync/sync-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,6BAA6B,EAC7B,wBAAwB,GAGzB,MAAM,2BAA2B,CAAC;AAMnC,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAG7E,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxC,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;CAClC,CAAC,CAAC,MAAM,EAAE,CAAC;AAQZ,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,OAW5B;QAX4B,YAAO,GAAP,OAAO,CAWnC;IAAG,CAAC;IAEL,KAAK,CAAC,KAAK,CAAC,SAAkB;QAC5B,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnD,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;QACjE,MAAM,qBAAqB,GAAa,EAAE,CAAC;QAC3C,MAAM,mBAAmB,GAAyB,EAAE,CAAC;QAErD,KAAK,MAAM,aAAa,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACjE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;YACxD,IACE,CAAC,MAAM,CAAC,OAAO;mBACZ,MAAM,CAAC,IAAI,CAAC,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa,EAC3D,CAAC;gBACD,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC/B,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAC1D,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAC7E,CAAC;YACF,KAAK,MAAM,UAAU,IAAI,mBAAmB,EAAE,CAAC;gBAC7C,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;YAChD,CAAC;YACD,KAAK,GAAG;gBACN,GAAG,KAAK;gBACR,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;gBAC/B,SAAS,EAAE,IAAI,CAAC,MAAM;aACvB,CAAC;YACF,0EAA0E;YAC1E,+DAA+D;YAC/D,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,mBAAmB,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,mBAAmB,GAA8B,EAAE,CAAC;QAC1D,MAAM,qBAAqB,GAAa,EAAE,CAAC;QAC3C,IAAI,cAAc,GAAG,KAAK,CAAC;QAC3B,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,KAAK,MAAM,aAAa,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,6BAA6B,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;YACtE,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;YACxD,MAAM,SAAS,GAAG,CAChB,aAAa;mBACV,OAAO,aAAa,KAAK,QAAQ;mBACjC,QAAQ,IAAI,aAAa,CAC7B,CAAC,CAAC,CAAE,aAAsC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/D,IACE,CAAC,MAAM,CAAC,OAAO;mBACZ,CAAC,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,EAC5C,CAAC;gBACD,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC/B,IAAI,SAAS,KAAK,QAAQ;oBAAE,cAAc,GAAG,IAAI,CAAC;;oBAC7C,eAAe,GAAG,IAAI,CAAC;gBAC5B,SAAS;YACX,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;gBACtE,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;gBACzE,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBACvE,wEAAwE;gBACxE,sEAAsE;gBACtE,wBAAwB;gBACxB,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;oBAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBACzE,CAAC;gBACD,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;oBAC9B,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAC7C,MAAM,CAAC,IAAI,CAAC,aAAa,CAC1B,CAAC;gBACJ,CAAC;gBACD,MAAM,YAAY,GAAG,8BAA8B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACjE,MAAM,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;gBACnE,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACxC,CAAC;YAAC,MAAM,CAAC;gBACP,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACrD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,QAAQ;oBAAE,cAAc,GAAG,IAAI,CAAC;;oBACtD,eAAe,GAAG,IAAI,CAAC;YAC9B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CACvC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,QAAQ,CAC/C,CAAC;QACF,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CACxC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,MAAM,KAAK,SAAS,CAChD,CAAC;QACF,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YACnD,KAAK,GAAG;gBACN,GAAG,KAAK;gBACR,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;gBACrC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC;aACtC,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CACpD,CAAC;QACF,MAAM,WAAW,GAAG,CAClB,eAAe;YACb,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC;YAC3C,CAAC,CAAC,OAAO,CACZ,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;QAClE,KAAK,GAAG;YACN,GAAG,KAAK;YACR,OAAO,EAAE,WAAW;YACpB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,SAAS,EAAE,IAAI,CAAC,MAAM;SACvB,CAAC;QACF,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QAChE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC;QAC3C,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,CAAC;IACjE,CAAC;IAEO,sBAAsB,CAAC,UAAmC;QAChE,MAAM,SAAS,GAAG;YAChB,UAAU,CAAC,aAAa;YACxB,UAAU,CAAC,gBAAgB;YAC3B,UAAU,CAAC,cAAc;SAC1B,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC3B,OAAO,UAAU,CAAC,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa;eACzD,UAAU,CAAC,gBAAgB,CAAC,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa;eACxE,UAAU,CAAC,cAAc,CAAC,aAAa,KAAK,IAAI,CAAC,OAAO,CAAC,aAAa;eACtE,SAAS,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAC/B,QAAQ,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;mBACjC,QAAQ,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW,CAC9C,CAAC,CAAC;IACP,CAAC;IAEO,MAAM,CACZ,WAAsC,EACtC,IAAyB;QAEzB,OAAO,WAAW;aACf,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,WAAW,KAAK,IAAI,CAAC;aACvD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;eAChF,IAAI,CAAC;IACZ,CAAC;IAEO,YAAY,CAClB,OAAkC,EAClC,QAAmC;QAEnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC;YAC/C,UAAU,CAAC,YAAY;YACvB,UAAU;SACX,CAAC,CAAC,CAAC;QACJ,KAAK,MAAM,UAAU,IAAI,QAAQ;YAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACjF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5B,CAAC;IAEO,QAAQ,CAAC,KAAc,EAAE,GAAW;QAC1C,IACE,KAAK;eACF,OAAO,KAAK,KAAK,QAAQ;eACzB,GAAG,IAAI,KAAK;eACZ,OAAQ,KAAiC,CAAC,GAAG,CAAC,KAAK,QAAQ,EAC9D,CAAC;YACD,OAAQ,KAAgC,CAAC,GAAG,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,UAAU;QAChB,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,EAAE;YACX,WAAW,EAAE,EAAE;YACf,SAAS,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;SACrC,CAAC;IACJ,CAAC;CACF"}

package/dist/types.d.ts

@@ -1,5 +1,38 @@
-import { z } from 'zod';
-export type EndpointMethod = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
+export interface SchemaIssueLike {
+    path?: ReadonlyArray<PropertyKey>;
+    message?: string;
+}
+export interface SchemaErrorLike {
+    issues: ReadonlyArray<SchemaIssueLike>;
+}
+export type SafeParseResult<T> = {
+    success: true;
+    data: T;
+} | {
+    success: false;
+    error: SchemaErrorLike;
+};
+/**
+ * Minimal runtime schema contract accepted at public Glirastes boundaries.
+ *
+ * Keeping this structural avoids coupling target applications to the SDK's
+ * own Zod major. Zod 3, Zod 4, and Standard-Schema-compatible adapters all
+ * satisfy it without conversion.
+ */
+export interface SchemaLike<T = unknown> {
+    safeParse(value: unknown): {
+        success: true;
+        data: T;
+    } | {
+        success: false;
+        error: SchemaErrorLike;
+    };
+    readonly ['~standard']?: unknown;
+}
+export type InferSchema<TSchema> = TSchema extends {
+    readonly _output: infer TOutput;
+} ? TOutput : TSchema extends SchemaLike<infer TOutput> ? TOutput : unknown;
+export type EndpointMethod = 'GET' | 'HEAD' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
 /**
  * Runtime context for tool execution (transport-level info).
  * Used so tools can forward the caller's auth (cookies, origin) to backend APIs.
@@ -9,6 +42,11 @@ export type EndpointMethod = 'GET' | 'POST' | 'PATCH' | 'PUT' | 'DELETE';
 export interface RuntimeContext {
     origin?: string;
     cookieHeader?: string;
+    /**
+     * Client actions with a handler on the page the user has open, as the chat
+     * reported them. Absent when the client does not report them.
+     */
+    clientActions?: readonly string[];
     [key: string]: unknown;
 }
 /**
@@ -29,10 +67,10 @@ export interface Tool {
     id: string;
     /** Human-readable description for AI to understand when to use this */
     description: string;
-    /** Zod schema for input validation — shared between AI and API */
-    inputSchema: z.ZodType;
-    /** Optional Zod schema describing the tool's response shape */
-    outputSchema?: z.ZodType;
+    /** Host-provided runtime schema for input validation */
+    inputSchema: SchemaLike;
+    /** Optional host-provided schema describing the tool's response shape */
+    outputSchema?: SchemaLike;
     /** HTTP method of the underlying endpoint (e.g. GET, POST). Used by test suites to derive approval defaults. */
     method?: string;
     /**
@@ -46,15 +84,15 @@ export interface Tool {
 /**
  * Helper to define a tool with full type inference at definition site.
  */
-export declare function defineTool<TInput extends z.ZodType, TOutput>(tool: {
+export declare function defineTool<TInput extends SchemaLike, TOutput>(tool: {
     id: string;
     description: string;
     inputSchema: TInput;
-    outputSchema?: z.ZodType<TOutput>;
+    outputSchema?: SchemaLike<TOutput>;
     method?: string;
     /** @deprecated Use Glirastes approval flows via `lancer.approvals` instead. Kept for backward compatibility. */
-    needsApproval?: boolean | ((input: z.infer<TInput>, context: ToolContext) => boolean | Promise<boolean>);
-    execute: (input: z.infer<TInput>, context: ToolContext) => Promise<TOutput>;
+    needsApproval?: boolean | ((input: InferSchema<TInput>, context: ToolContext) => boolean | Promise<boolean>);
+    execute: (input: InferSchema<TInput>, context: ToolContext) => Promise<TOutput>;
 }): Tool;
 /**
  * Registry of all tools in the system.
@@ -76,7 +114,7 @@ export interface UiActionTemplate {
  *
  * @param extraSchemas - Additional Zod schemas for app-specific action types
  */
-export declare function createUiActionSchema(extraSchemas?: z.ZodTypeAny[]): z.ZodUnion<[z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>, ...z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>[]]>;
+export declare function createUiActionSchema(extraSchemas?: SchemaLike<Record<string, unknown>>[]): SchemaLike<Record<string, unknown>>;
 export type UiPatternType = 'filter-and-navigate' | 'open-detail' | 'open-dialog' | 'refresh' | 'toast';
 export interface FilterAndNavigatePattern {
     type: 'filter-and-navigate';
@@ -116,7 +154,7 @@ export interface ToastPattern {
     variant?: 'default' | 'success' | 'error' | 'warning';
 }
 export type UiPattern = FilterAndNavigatePattern | OpenDetailPattern | OpenDialogPattern | RefreshPattern | ToastPattern;
-export interface AiEndpointToolDefinition<TInput extends z.ZodTypeAny = z.ZodTypeAny, TOutput extends z.ZodTypeAny = z.ZodTypeAny> {
+export interface AiEndpointToolDefinition<TInput extends SchemaLike = SchemaLike, TOutput extends SchemaLike = SchemaLike> {
     id: string;
     toolName: string;
     /** Which intent module this tool belongs to */
@@ -132,6 +170,11 @@ export interface AiEndpointToolDefinition<TInput extends z.ZodTypeAny = z.ZodTyp
      * When provided, a compact description is auto-appended to the tool description.
      */
     outputSchema?: TOutput;
+    /**
+     * Legacy discovery hint migrated into the signed runtime policy.
+     * It is never sufficient authorization for local tool execution.
+     */
+    allowedRoles?: string[];
     /** @deprecated Use Glirastes approval flows via `lancer.approvals` instead. Kept for backward compatibility. */
     needsApproval?: boolean;
     /**
@@ -147,8 +190,8 @@ export interface AiEndpointToolDefinition<TInput extends z.ZodTypeAny = z.ZodTyp
      */
     uiPattern?: UiPattern | UiPattern[];
 }
-export declare function defineEndpointTool<TInput extends z.ZodTypeAny, TOutput extends z.ZodTypeAny = z.ZodTypeAny>(definition: AiEndpointToolDefinition<TInput, TOutput>): AiEndpointToolDefinition<TInput, TOutput>;
-export interface AiUiToolDefinition<TInput extends z.ZodTypeAny = z.ZodTypeAny, TOutput extends z.ZodTypeAny = z.ZodTypeAny> {
+export declare function defineEndpointTool<TInput extends SchemaLike, TOutput extends SchemaLike = SchemaLike>(definition: AiEndpointToolDefinition<TInput, TOutput>): AiEndpointToolDefinition<TInput, TOutput>;
+export interface AiUiToolDefinition<TInput extends SchemaLike = SchemaLike, TOutput extends SchemaLike = SchemaLike> {
     id: string;
     toolName: string;
     /** Which intent module this tool belongs to */
@@ -162,6 +205,11 @@ export interface AiUiToolDefinition<TInput extends z.ZodTypeAny = z.ZodTypeAny,
      * When provided, a compact description is auto-appended to the tool description.
      */
     outputSchema?: TOutput;
+    /**
+     * Legacy discovery hint migrated into the signed runtime policy.
+     * It is never sufficient authorization for local UI action execution.
+     */
+    allowedRoles?: string[];
     /** @deprecated Use Glirastes approval flows via `lancer.approvals` instead. Kept for backward compatibility. */
     needsApproval?: boolean;
     successMessage?: string;
@@ -176,7 +224,7 @@ export interface AiUiToolDefinition<TInput extends z.ZodTypeAny = z.ZodTypeAny,
      */
     uiPattern?: UiPattern | UiPattern[];
 }
-export declare function defineUiTool<TInput extends z.ZodTypeAny, TOutput extends z.ZodTypeAny = z.ZodTypeAny>(definition: AiUiToolDefinition<TInput, TOutput>): AiUiToolDefinition<TInput, TOutput>;
+export declare function defineUiTool<TInput extends SchemaLike, TOutput extends SchemaLike = SchemaLike>(definition: AiUiToolDefinition<TInput, TOutput>): AiUiToolDefinition<TInput, TOutput>;
 /**
  * Model tier for selecting appropriate model based on task complexity.
  * - fast: Quick responses, simple lookups
@@ -404,6 +452,8 @@ export interface PromptOverride {
 export declare function applyPromptOverride(base: string, override: PromptOverride): string;
 export interface AiRouterConfig {
     modules: ModuleDefinition[];
+    /** Focused routing avoids full-catalogue fallbacks; direct routers retain legacy defaults. */
+    routingMode?: 'focused' | 'legacy';
     expansionStrategy?: 'minimal' | 'shared' | 'full';
     relatedModules?: Record<string, string[]>;
     confidenceThresholds?: {
@@ -414,7 +464,7 @@ export interface AiRouterConfig {
 export interface SelectedTools {
     tools: string[];
     module: ModuleDefinition | null;
-    strategy: 'single' | 'expanded' | 'all';
+    strategy: 'single' | 'expanded' | 'all' | 'none';
 }
 export interface AiRouter {
     route(intent: IntentClassification, allToolNames: string[]): SelectedTools;
@@ -554,6 +604,8 @@ export interface AiPipelineConfig {
 export interface PipelineResult {
     model: ModelConfig;
     tools: string[];
+    /** Honor this exact selection, including zero tools. Omit for legacy empty-means-all behavior. */
+    toolSelection?: 'explicit';
     sanitizedInput: string;
     intent: IntentClassification;
     module: ModuleDefinition | null;