llmtxt 2026.4.4 → 2026.4.6

package/CHANGELOG.md

@@ -7,6 +7,84 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [2026.4.5] - 2026-04-16
+
+This release ships the full Round 1+2+3 multi-agent foundation: CRDT/Yrs, signed Ed25519 identity, append-only event log, real-time presence/leases/diff-subscriptions (W1+W2), BFT consensus, agent scratchpad, A2A envelope routing (W3), a self-hosted observability stack (Grafana / Loki / Tempo / Prometheus / OTel collector / GlitchTip on Railway), OpenAPI schema generation with forge-ts integration, local semantic embeddings via pgvector + ONNX, four reference agents plus a `/demo` page, and a fully portable SDK offering `LocalBackend`, `RemoteBackend`, and `llmtxt` CLI — including a complete CLEO integration example. Also upgrades drizzle-orm/kit to `1.0.0-beta.21` and zod to `^4`.
+
+### Added — Portable SDK / LocalBackend (T317)
+
+**T332: RemoteBackend** (`llmtxt/remote`) — thin HTTP/WS client implementing the
+full `Backend` interface. REST for CRUD, SSE for `subscribeStream`, WebSocket for
+`subscribeSection`. Drop-in replacement for `LocalBackend` for remote deployments.
+
+**T333: Backend contract test suite** — 25-test parameterised harness that
+validates any `Backend` implementation against the full interface contract.
+Covers documents, versions, lifecycle transitions, events, leases, scratchpad,
+A2A, identity, and nonces.
+
+**T334: Fastify LocalBackend plugin** (`apps/backend/src/plugins/local-backend-plugin.ts`)
+— Fastify plugin that decorates the app with `fastify.localBackend`. New routes
+can use the portable SDK without touching the existing Drizzle/Postgres layer.
+
+**T335 + T336: `llmtxt` CLI binary** — `packages/llmtxt/src/cli/llmtxt.ts`
+compiled to `dist/cli/llmtxt.js` and listed in `package.json bin`. Commands:
+`init` (SQLite + Ed25519 keypair), `create-doc`, `push-version`, `pull`, `watch`,
+`search`, `keys generate|list|revoke`, `sync`. Defaults to `LocalBackend`; use
+`--remote <url>` for `RemoteBackend`.
+
+**T337: `llmtxt sync`** — pulls remote events/documents not in local, pushes
+local documents/events not in remote. State vector exchange for CRDT sections.
+
+**T338: CLEO integration example** (`apps/examples/cleo-integration/index.ts`)
+— runnable end-to-end example showing 4 patterns: task attachment docs, BFT
+decision records, A2A coordination, real-time presence.
+
+**T339: Docs** (`apps/docs/content/docs/embed/cleo-pm.mdx`) — documentation
+page covering all 4 CLEO + LLMtxt integration patterns with working snippets.
+
+**T340: Subpath exports** — `llmtxt/local`, `llmtxt/remote`, `llmtxt/cli` added
+to `package.json` exports map with `types` + `import` entries.
+
+**Build**: `build` script now copies `src/local/migrations` into `dist/local/migrations`
+so the CLI and embedded consumers find migrations at runtime.
+
+### Fixed
+
+- **Migration idempotency** (7df5795): W2 leases (`20260416021212_natural_shiva`) and W3 BFT/A2A inbox (`20260416030000_w3_bft_a2a_inbox`) Postgres migrations are now fully idempotent — all `CREATE TABLE` / `CREATE INDEX` / `ADD CONSTRAINT` statements use `IF NOT EXISTS` guards and a redundant `ALTER TABLE` that caused Railway crash-loops on retry is removed.
+
+## [2026.4.4] - 2026-04-15
+
+### Changed — SDK-First Refactor (T111)
+
+All 22 violations from `docs/SSOT-AUDIT.md` resolved. `crates/llmtxt-core` is now the canonical Single Source of Truth (SSoT) for all portable primitives. `packages/llmtxt` is a thin WASM wrapper + TypeScript types. `apps/backend` imports only from the SDK — no more direct `node:crypto`, no more pure-TS re-implementations.
+
+**Rust primitives added to `crates/llmtxt-core`** (WASM-exported via `packages/llmtxt`):
+- `crypto::sign_webhook_payload` (HMAC-SHA256 for webhook signing) — replaces backend `createHmac`
+- `normalize::l2_normalize` (L2 vector normalization) — replaces backend inline TS
+- `slugify::slugify` — replaces backend inline TS
+- `rbac` module (ROLE_PERMISSIONS matrix lookups) — replaces backend matrix + types
+- `validation` module (`detect_format`, `contains_binary_content`, `find_overlong_line`) — replaces pure-TS re-implementations
+- `graph` module (mentions, tags, directives, graph build + top rankings) — replaces pure-TS `graph.ts`
+- `similarity` module (n-grams, jaccard, text/content similarity, min-hash, rank_by_similarity) — replaces pure-TS `similarity.ts`
+- `disclosure` module with submodules (markdown/code/json/text parsers, search, jsonpath, generateOverview) — replaces pure-TS `disclosure.ts` (729 LoC → ~100 LoC wrapper)
+- `tfidf` module (FNV1a hashing + TF-IDF batch embed) — replaces backend `LocalEmbeddingProvider`
+
+**TypeScript types/constants now exported from `packages/llmtxt`**:
+- `DocumentEventType`, `DocumentEvent`, `AuditAction`
+- `Permission`, `DocumentRole`, `OrgRole`, `ROLE_PERMISSIONS`
+- `CONTENT_LIMITS`, `API_VERSION_REGISTRY`, `CURRENT_API_VERSION`, `LATEST_API_VERSION`, `ApiVersionInfo`
+- `VALID_LINK_TYPES`
+- `COLLECTION_EXPORT_SEPARATOR`, `API_KEY_PREFIX`, `API_KEY_LENGTH`, `API_KEY_DISPLAY_LENGTH`
+- `STATE_CHANGING_METHODS` (deduplicated from audit + csrf middleware)
+
+### Deferred
+T112 (NAPI-RS native bindings) deferred 2026-04-15 pending production benchmark evidence. WASM is the sole Rust→JS binding for `llmtxt` until benchmarks justify native.
+
+### Testing
+- Cargo tests: 122 → 278 (+156 new Rust tests for migrated primitives)
+- Backend tests: 67/67 throughout — zero regression
+- Byte-identity tests: every migrated primitive verified Rust output == previous TypeScript output for ≥3 vectors
+
 ## [2026.4.3] - 2026-04-13
 
 ### Added
@@ -119,7 +197,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **cache**: generic LRU cache with configurable TTL, max size, and hit/miss statistics
 - **signed-url**: HMAC-SHA256 signed URL generation and verification -- conversation-scoped, time-limited, with timing-safe comparison
 
-[Unreleased]: https://github.com/kryptobaseddev/llmtxt/compare/core-v2026.4.0...HEAD
+[Unreleased]: https://github.com/kryptobaseddev/llmtxt/compare/core-v2026.4.5...HEAD
+[2026.4.5]: https://github.com/kryptobaseddev/llmtxt/compare/core-v2026.4.4...core-v2026.4.5
+[2026.4.4]: https://github.com/kryptobaseddev/llmtxt/compare/core-v2026.4.3...core-v2026.4.4
+[2026.4.3]: https://github.com/kryptobaseddev/llmtxt/compare/core-v2026.4.2...core-v2026.4.3
+[2026.4.2]: https://github.com/kryptobaseddev/llmtxt/compare/core-v2026.4.1...core-v2026.4.2
+[2026.4.1]: https://github.com/kryptobaseddev/llmtxt/compare/core-v2026.4.0...core-v2026.4.1
 [2026.4.0]: https://github.com/kryptobaseddev/llmtxt/releases/tag/core-v2026.4.0
 [2026.3.1]: https://github.com/kryptobaseddev/llmtxt/releases/tag/core-v2026.3.1
 [2026.3.0]: https://github.com/kryptobaseddev/llmtxt/releases/tag/core-v2026.3.0

package/README.md

@@ -67,6 +67,46 @@ import { textSimilarity, rankBySimilarity } from 'llmtxt/similarity';
 import { buildGraph } from 'llmtxt/graph';
 ```
 
+## LocalBackend (Embedded, Zero-Network)
+
+```ts
+import { LocalBackend } from 'llmtxt/local';
+
+const backend = new LocalBackend({ storagePath: './.llmtxt' });
+await backend.open();
+
+const doc = await backend.createDocument({ title: 'My Spec', createdBy: 'agent-1' });
+await backend.publishVersion({ documentId: doc.id, content: '# Spec', patchText: '', createdBy: 'agent-1', changelog: 'Initial' });
+await backend.close();
+```
+
+## RemoteBackend (HTTP/WS Client)
+
+```ts
+import { RemoteBackend } from 'llmtxt/remote';
+
+const backend = new RemoteBackend({ baseUrl: 'https://api.llmtxt.my', apiKey: process.env.LLMTXT_API_KEY });
+await backend.open();
+// Same calls as LocalBackend — same Backend interface.
+await backend.close();
+```
+
+## CLI
+
+```bash
+# Initialise local storage + identity keypair
+llmtxt init
+
+# Create a document
+llmtxt create-doc "My Specification"
+
+# Push a version from stdin
+cat spec.md | llmtxt push-version my-specification "First draft"
+
+# Sync local ↔ remote
+llmtxt sync --remote https://api.llmtxt.my --api-key $KEY
+```
+
 ## What Ships
 
 - Compression, hashing, base62, token estimation (Rust WASM)

package/dist/__tests__/a2a.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * a2a.test.ts — T419: A2A over Mesh tests
+ *
+ * 5 tests covering:
+ *  1. Direct send: signed message delivered to directly-connected peer.
+ *  2. SECURITY: unsigned/invalid-sig message is rejected before delivery.
+ *  3. Relay path: message forwarded via connected peer when target not direct.
+ *  4. Queue: message queued locally when no relay path found.
+ *  5. Payload size limit: payload >1 MB is rejected at send.
+ *
+ * Spec: P3-p2p-mesh.md §7, §10
+ */
+export {};
+//# sourceMappingURL=a2a.test.d.ts.map

package/dist/__tests__/a2a.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/a2a.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/dist/__tests__/a2a.test.js

@@ -0,0 +1,217 @@
+/**
+ * a2a.test.ts — T419: A2A over Mesh tests
+ *
+ * 5 tests covering:
+ *  1. Direct send: signed message delivered to directly-connected peer.
+ *  2. SECURITY: unsigned/invalid-sig message is rejected before delivery.
+ *  3. Relay path: message forwarded via connected peer when target not direct.
+ *  4. Queue: message queued locally when no relay path found.
+ *  5. Payload size limit: payload >1 MB is rejected at send.
+ *
+ * Spec: P3-p2p-mesh.md §7, §10
+ */
+import { describe, it, before } from 'node:test';
+import assert from 'node:assert/strict';
+import { AgentIdentity } from '../identity.js';
+import { MeshMessenger } from '../mesh/a2a.js';
+// ── Helpers ───────────────────────────────────────────────────────
+const MSG_TYPE_A2A = 0x10;
+function buildA2AFrame(envelope) {
+    const json = JSON.stringify(envelope);
+    const jsonBytes = new TextEncoder().encode(json);
+    const out = new Uint8Array(1 + jsonBytes.length);
+    out[0] = MSG_TYPE_A2A;
+    out.set(jsonBytes, 1);
+    return out;
+}
+function mockTransport(opts) {
+    const sent = [];
+    let listener;
+    return {
+        type: 'mock-a2a',
+        sent,
+        simulateInbound(peerId, data) {
+            listener?.(peerId, data);
+        },
+        async listen(cb) {
+            listener = cb;
+        },
+        async sendChangeset(peerId, _address, data) {
+            if (opts?.failForPeer && peerId === opts.failForPeer) {
+                throw new Error(`[mock] peer ${peerId} unreachable`);
+            }
+            sent.push({ peerId, data });
+            await opts?.onSend?.(peerId, data);
+        },
+        async close() {
+            // no-op
+        },
+    };
+}
+function mockDiscovery(peers) {
+    return {
+        async discover() {
+            return peers;
+        },
+        markInactive(_id) { },
+    };
+}
+async function makeIdentity() {
+    const seed = new Uint8Array(32);
+    globalThis.crypto.getRandomValues(seed);
+    return AgentIdentity.fromSeed(seed);
+}
+// ── Tests ─────────────────────────────────────────────────────────
+describe('MeshMessenger', () => {
+    let senderIdentity;
+    let recipientIdentity;
+    before(async () => {
+        senderIdentity = await makeIdentity();
+        recipientIdentity = await makeIdentity();
+    });
+    it('test-1: direct send — signed message delivered to directly-connected peer', async () => {
+        const transport = mockTransport();
+        const peers = [
+            {
+                agentId: recipientIdentity.pubkeyHex,
+                address: 'unix:/tmp/recv.sock',
+                pubkeyBase64: Buffer.from(recipientIdentity.pk).toString('base64'),
+            },
+        ];
+        const discovery = mockDiscovery(peers);
+        const received = [];
+        const messenger = new MeshMessenger({
+            identity: senderIdentity,
+            transport,
+            discovery,
+            onMessage: (env) => received.push(env),
+        });
+        await messenger.start();
+        await messenger.send(recipientIdentity.pubkeyHex, { action: 'ping' });
+        await messenger.stop();
+        assert.equal(transport.sent.length, 1, 'one send call expected');
+        const frame = transport.sent[0];
+        assert.equal(frame.peerId, recipientIdentity.pubkeyHex);
+        assert.equal(frame.data[0], MSG_TYPE_A2A);
+        // Decode envelope.
+        const json = new TextDecoder().decode(frame.data.slice(1));
+        const env = JSON.parse(json);
+        assert.equal(env.type, 'a2a');
+        assert.equal(env.from, senderIdentity.pubkeyHex);
+        assert.equal(env.to, recipientIdentity.pubkeyHex);
+        assert.ok(typeof env.sig === 'string' && env.sig.length > 0, 'message must be signed');
+        assert.deepEqual(env.payload, { action: 'ping' });
+    });
+    it('test-2: SECURITY — unsigned/invalid-sig inbound message is rejected', async () => {
+        const transport = mockTransport();
+        const discovery = mockDiscovery([]);
+        const received = [];
+        const rejections = [];
+        const messenger = new MeshMessenger({
+            identity: recipientIdentity,
+            transport,
+            discovery,
+            onMessage: (env) => received.push(env),
+        });
+        messenger.on('security-rejection', (r) => rejections.push(r));
+        await messenger.start();
+        // Build a message with an invalid signature.
+        const badEnvelope = {
+            type: 'a2a',
+            from: senderIdentity.pubkeyHex,
+            to: recipientIdentity.pubkeyHex,
+            payload: { action: 'malicious' },
+            sig: Buffer.from('invalid-sig-bytes-xxxx').toString('base64'),
+            sentAt: new Date().toISOString(),
+        };
+        const frame = buildA2AFrame(badEnvelope);
+        transport.simulateInbound('attacker', frame);
+        // Allow async verification to complete.
+        await new Promise((r) => setTimeout(r, 100));
+        await messenger.stop();
+        assert.equal(received.length, 0, 'message with invalid sig MUST NOT be delivered');
+        assert.ok(rejections.length >= 1, 'security-rejection event must be emitted');
+    });
+    it('test-3: relay path — message forwarded through connected peer', async () => {
+        // senderIdentity → relay agent → recipientIdentity
+        const relayAgentId = 'relay-agent-hex-pubkey';
+        const transport = mockTransport();
+        // Only relay is directly connected; recipient is NOT in peer list.
+        const peers = [
+            {
+                agentId: relayAgentId,
+                address: 'unix:/tmp/relay.sock',
+                pubkeyBase64: Buffer.alloc(32, 0x44).toString('base64'),
+            },
+        ];
+        const discovery = mockDiscovery(peers);
+        const messenger = new MeshMessenger({
+            identity: senderIdentity,
+            transport,
+            discovery,
+        });
+        await messenger.start();
+        // Should relay since recipient not directly connected.
+        await messenger.send(recipientIdentity.pubkeyHex, { action: 'routed-task' });
+        await messenger.stop();
+        // Message should have been sent to relay agent.
+        const relaySends = transport.sent.filter((s) => s.peerId === relayAgentId);
+        assert.ok(relaySends.length >= 1, 'message must be forwarded to relay peer');
+        // Verify the relay frame contains the inner envelope.
+        const relayFrame = relaySends[0];
+        assert.equal(relayFrame.data[0], MSG_TYPE_A2A);
+        const json = new TextDecoder().decode(relayFrame.data.slice(1));
+        const parsed = JSON.parse(json);
+        // The relay wraps in a relay frame.
+        assert.equal(parsed.type, 'relay', 'relay frame type must be "relay"');
+        assert.ok(parsed.inner, 'relay frame must contain inner envelope');
+        assert.equal(parsed.inner.to, recipientIdentity.pubkeyHex);
+    });
+    it('test-4: no-path — message queued locally when no relay found', async () => {
+        const transport = mockTransport();
+        // No peers at all — no direct or relay path.
+        const discovery = mockDiscovery([]);
+        const queued = [];
+        const messenger = new MeshMessenger({
+            identity: senderIdentity,
+            transport,
+            discovery,
+        });
+        messenger.on('queued', (e) => queued.push(e));
+        await messenger.start();
+        await messenger.send(recipientIdentity.pubkeyHex, { action: 'offline-task' });
+        await messenger.stop();
+        assert.equal(transport.sent.length, 0, 'nothing must be sent when no path exists');
+        const status = messenger.getQueueStatus();
+        const totalQueued = Object.values(status).reduce((a, b) => a + b, 0);
+        assert.ok(totalQueued >= 1, 'message must be queued locally');
+        assert.ok(queued.length >= 1, 'queued event must be emitted');
+    });
+    it('test-5: payload >1 MB is rejected at send', async () => {
+        const transport = mockTransport();
+        const peers = [
+            {
+                agentId: recipientIdentity.pubkeyHex,
+                address: 'unix:/tmp/recv.sock',
+                pubkeyBase64: Buffer.from(recipientIdentity.pk).toString('base64'),
+            },
+        ];
+        const discovery = mockDiscovery(peers);
+        const messenger = new MeshMessenger({
+            identity: senderIdentity,
+            transport,
+            discovery,
+        });
+        await messenger.start();
+        // Build a payload just over 1 MB.
+        const bigString = 'x'.repeat(1024 * 1024 + 1);
+        await assert.rejects(() => messenger.send(recipientIdentity.pubkeyHex, { data: bigString }), (err) => {
+            assert.ok(err instanceof Error, 'must throw an Error');
+            assert.ok(err.message.includes('1 MB'), `error message must mention 1 MB limit, got: ${err.message}`);
+            return true;
+        }, 'send must reject payloads over 1 MB');
+        assert.equal(transport.sent.length, 0, 'oversized payload must not be sent');
+        await messenger.stop();
+    });
+});
+//# sourceMappingURL=a2a.test.js.map

package/dist/__tests__/a2a.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"a2a.test.js","sourceRoot":"","sources":["../../src/__tests__/a2a.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAoB,MAAM,gBAAgB,CAAC;AAGjE,qEAAqE;AAErE,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,SAAS,aAAa,CAAC,QAAqB;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IACjD,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,aAAa,CAAC,IAGtB;IAIC,MAAM,IAAI,GAAgD,EAAE,CAAC;IAC7D,IAAI,QAAkE,CAAC;IAEvE,OAAO;QACL,IAAI,EAAE,UAAU;QAChB,IAAI;QACJ,eAAe,CAAC,MAAc,EAAE,IAAgB;YAC9C,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,EAA8C;YACzD,QAAQ,GAAG,EAAE,CAAC;QAChB,CAAC;QACD,KAAK,CAAC,aAAa,CAAC,MAAc,EAAE,QAAgB,EAAE,IAAgB;YACpE,IAAI,IAAI,EAAE,WAAW,IAAI,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrD,MAAM,IAAI,KAAK,CAAC,eAAe,MAAM,cAAc,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5B,MAAM,IAAI,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,KAAK,CAAC,KAAK;YACT,QAAQ;QACV,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,OAAO;QACL,KAAK,CAAC,QAAQ;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,YAAY,CAAC,GAAW,IAAG,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,YAAY;IACzB,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAChC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACtC,CAAC;AAED,qEAAqE;AAErE,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;IAC7B,IAAI,cAA6B,CAAC;IAClC,IAAI,iBAAgC,CAAC;IAErC,MAAM,CAAC,KAAK,IAAI,EAAE;QAChB,cAAc,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,iBAAiB,GAAG,MAAM,YAAY,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,KAAK,GAAe;YACxB;gBACE,OAAO,EAAE,iBAAiB,CAAC,SAAS;gBACpC,OAAO,EAAE,qBAAqB;gBAC9B,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACnE;SACF,CAAC;QACF,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAEvC,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC;YAClC,QAAQ,EAAE,cAAc;YACxB,SAAS;YACT,SAAS;YACT,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;SACvC,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QAEvB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,wBAAwB,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACxD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAE1C,mBAAmB;QACnB,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAgB,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,CAAC,EAAE,CAAC,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;QACvF,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QAEpC,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,MAAM,UAAU,GAAc,EAAE,CAAC;QAEjC,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC;YAClC,QAAQ,EAAE,iBAAiB;YAC3B,SAAS;YACT,SAAS;YACT,SAAS,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;SACvC,CAAC,CAAC;QACH,SAAS,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE9D,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAExB,6CAA6C;QAC7C,MAAM,WAAW,GAAgB;YAC/B,IAAI,EAAE,KAAK;YACX,IAAI,EAAE,cAAc,CAAC,SAAS;YAC9B,EAAE,EAAE,iBAAiB,CAAC,SAAS;YAC/B,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE;YAChC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC7D,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACjC,CAAC;QACF,MAAM,KAAK,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;QACzC,SAAS,CAAC,eAAe,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAE7C,wCAAwC;QACxC,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7C,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QAEvB,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,gDAAgD,CAAC,CAAC;QACnF,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE,0CAA0C,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAC7E,mDAAmD;QACnD,MAAM,YAAY,GAAG,wBAAwB,CAAC;QAC9C,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,mEAAmE;QACnE,MAAM,KAAK,GAAe;YACxB;gBACE,OAAO,EAAE,YAAY;gBACrB,OAAO,EAAE,sBAAsB;gBAC/B,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACxD;SACF,CAAC;QACF,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAEvC,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC;YAClC,QAAQ,EAAE,cAAc;YACxB,SAAS;YACT,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACxB,uDAAuD;QACvD,MAAM,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;QAC7E,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QAEvB,gDAAgD;QAChD,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC;QAC3E,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE,yCAAyC,CAAC,CAAC;QAE7E,sDAAsD;QACtD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA0C,CAAC;QACzE,oCAAoC;QACpC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,kCAAkC,CAAC,CAAC;QACvE,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,yCAAyC,CAAC,CAAC;QACnE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAM,CAAC,EAAE,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,KAAK,IAAI,EAAE;QAC5E,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,6CAA6C;QAC7C,MAAM,SAAS,GAAG,aAAa,CAAC,EAAE,CAAC,CAAC;QAEpC,MAAM,MAAM,GAAc,EAAE,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC;YAClC,QAAQ,EAAE,cAAc;YACxB,SAAS;YACT,SAAS;SACV,CAAC,CAAC;QACH,SAAS,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAE9C,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9E,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QAEvB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,0CAA0C,CAAC,CAAC;QACnF,MAAM,MAAM,GAAG,SAAS,CAAC,cAAc,EAAE,CAAC;QAC1C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,EAAE,CAAC,WAAW,IAAI,CAAC,EAAE,gCAAgC,CAAC,CAAC;QAC9D,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,EAAE,8BAA8B,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;QAClC,MAAM,KAAK,GAAe;YACxB;gBACE,OAAO,EAAE,iBAAiB,CAAC,SAAS;gBACpC,OAAO,EAAE,qBAAqB;gBAC9B,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACnE;SACF,CAAC;QACF,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAEvC,MAAM,SAAS,GAAG,IAAI,aAAa,CAAC;YAClC,QAAQ,EAAE,cAAc;YACxB,SAAS;YACT,SAAS;SACV,CAAC,CAAC;QAEH,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;QAExB,kCAAkC;QAClC,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;QAC9C,MAAM,MAAM,CAAC,OAAO,CAClB,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EACtE,CAAC,GAAU,EAAE,EAAE;YACb,MAAM,CAAC,EAAE,CAAC,GAAG,YAAY,KAAK,EAAE,qBAAqB,CAAC,CAAC;YACvD,MAAM,CAAC,EAAE,CACP,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,EAC5B,+CAA+C,GAAG,CAAC,OAAO,EAAE,CAC7D,CAAC;YACF,OAAO,IAAI,CAAC;QACd,CAAC,EACD,qCAAqC,CACtC,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,oCAAoC,CAAC,CAAC;QAC7E,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/__tests__/backend-contract.test.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Backend contract test suite — parametrized over LocalBackend and PostgresBackend.
+ *
+ * Runs the same set of behavioural assertions against any Backend implementation.
+ * Each describe block receives a BackendFactory and runs identical assertions
+ * regardless of which backend is under test.
+ *
+ * Backends:
+ *  - LocalBackend (SQLite, temp dir) — always runs.
+ *  - PostgresBackend (Postgres via DATABASE_URL_PG env) — skipped with WARN if
+ *    DATABASE_URL_PG is not set. Never fails the suite when absent.
+ *
+ * Output format:
+ *   [LocalBackend] documents.create …
+ *   [PostgresBackend] documents.create …  (or SKIPPED if no PG)
+ *
+ * Multi-agent semantic tests (added in T361):
+ *   - Lease contention: agent-1 acquires, agent-2 blocked, release, agent-2 acquires.
+ *   - A2A round-trip: send + pollInbox + markRead (deleteA2AMessage).
+ *   - Scratchpad round-trip: send + poll + delete.
+ *   - Identity: register + lookup + revoke + nonce replay prevention.
+ */
+export {};
+//# sourceMappingURL=backend-contract.test.d.ts.map

package/dist/__tests__/backend-contract.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backend-contract.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/backend-contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}