omnius 1.0.874 → 1.0.876

package/docs/work-orders/evidence/mesh-optional-startup-verification-20261017.json

@@ -0,0 +1,70 @@
+{
+  "schemaVersion": 1,
+  "date": "2026-10-17",
+  "task": "Optional mesh dependencies must not prevent ordinary CLI startup",
+  "baseCommit": "5172dc4b",
+  "runtime": {
+    "node": "22.23.3",
+    "platform": "linux-x64"
+  },
+  "cause": "Single-file esbuild with splitting:false hoisted external static mesh imports into CLI startup despite dynamic relative command imports.",
+  "change": "Keep only erased mesh type imports at module scope; load identity/transport dependencies through literal dynamic external imports inside explicit asynchronous factories.",
+  "sourceHashes": {
+    "packages/cli/src/mesh/libp2p-transport.ts": "30da153a247418d09d367ff6771390be924603f2a610480f9a88f9600e9db11b",
+    "packages/cli/tests/mesh-optional-startup.test.ts": "33896fd20c72271a7e5eaeecb46af90042e2a08002b3a0557c24720bf3f27164"
+  },
+  "before": {
+    "passed": 0,
+    "failed": 2,
+    "log": "/tmp/omnius-mesh-lazy-startup-before.json",
+    "failure": "OPTIONAL_MESH_BLOCKED during module startup, before command routing or exported factory calls"
+  },
+  "after": {
+    "bundleStartup": {
+      "passed": 2,
+      "failed": 0,
+      "log": "/tmp/omnius-mesh-lazy-startup-tests.json",
+      "checks": [
+        "Actual CLI --help and mesh help from production-style single-file bundle run while every mesh dependency resolution is forbidden",
+        "Exported factories import safely; explicit identity/transport requests then reach the dependency deny guard"
+      ]
+    },
+    "encryptedTransport": {
+      "passed": 17,
+      "failed": 0,
+      "log": "/tmp/omnius-mesh-lazy-transport-tests.json",
+      "coverage": [
+        "private identity concurrency/permissions",
+        "TCP Noise/Yamux",
+        "untrusted/target identity rejection",
+        "ciphertext tamper",
+        "frame bounds and Unicode",
+        "send/read backpressure and Stop",
+        "real configured relay with end-to-end Noise",
+        "WSS CA validation"
+      ]
+    },
+    "sourceTypecheck": {
+      "exitCode": 0,
+      "log": "/tmp/omnius-mesh-lazy-startup-noemit.log"
+    },
+    "focusedSourceAndTestTypecheck": {
+      "exitCode": 0,
+      "log": "/tmp/omnius-mesh-lazy-startup-focused-noemit.log"
+    },
+    "diffCheck": "PASS"
+  },
+  "limits": [
+    "Source-only isolated production-style bundles; final packed/global installation verification is owned separately by parent agents.",
+    "The startup deny-loader intentionally prevents any mesh transport/identity operation; no provider or inference requests were performed."
+  ],
+  "operations": {
+    "inferenceRequests": 0,
+    "modelLoads": 0,
+    "externalPeerConnections": 0,
+    "cudaOperations": 0,
+    "globalInstallChanges": 0,
+    "sharedBuilds": 0,
+    "sharedServiceChanges": 0
+  }
+}

package/docs/work-orders/evidence/mesh-source-verification-20261017.json

@@ -0,0 +1,46 @@
+{
+  "date": "2026-10-17",
+  "sourceOnly": true,
+  "stagedTree": "f63386d8c55a5702629454fac22dc930a0a14c9b",
+  "sourceChecks": {
+    "passed": 240,
+    "failed": 0,
+    "typecheck": "passed",
+    "mandatoryFrontendSuitesIncluded": true
+  },
+  "transportChecks": {
+    "unique": 17,
+    "existingLockedGraph": "17 passed",
+    "freshNpmGraph": "17 passed",
+    "minimumNode": "22.23.3",
+    "realCircuitRelay": true,
+    "relayHopPromptPlaintextAbsent": true,
+    "wssCertificateVerification": true,
+    "backpressureAndStop": true
+  },
+  "integrationChecks": {
+    "actualProductionAdapterToGatewayToNoiseToSponsor": true,
+    "fixtureProvidersOnly": true,
+    "twoSponsorsConcurrent": true,
+    "secondCallToBusySponsorWithFreeSlot": true,
+    "denialDoesNotDispatchToAnotherSponsor": true,
+    "originOnlyConfiguredRuntime": true,
+    "noRealInference": true
+  },
+  "reviewRepairs": [
+    "Preserve streamed401/403/429 status including after partial output",
+    "Do not double-count accepted local reservations",
+    "Allow same-origin main/child concurrency within actual available slots",
+    "Project cross-model per-origin capacity consistently",
+    "Align validated configuration and runtime limits",
+    "Clean transport after sponsor constructor/startup failure"
+  ],
+  "limits": [
+    "No GPU or paid provider acceptance test",
+    "Provider and selected inference sponsor receive plaintext; relays see metadata",
+    "Other Tracker relay carrier adapters are inventoried only",
+    "Trusted peers/endpoints require explicit operator configuration",
+    "Crash ownership lock and saturated dedup ledger fail closed"
+  ],
+  "patchSha256": "f5364f8c54183bb5ce22d32dede030c8cc3a199654b1a732c8f53255118ca48f"
+}

package/docs/work-orders/evidence/mesh-transport-verification-20261017.json

@@ -0,0 +1,156 @@
+{
+  "schemaVersion": 1,
+  "scope": "source-only authenticated libp2p transport and private installation verification",
+  "date": "2026-10-17",
+  "node": "v22.23.3",
+  "baseCommit": "395f010d",
+  "protocol": "/omnius/sponsored-inference/1.0.0",
+  "sourceHashes": {
+    "packages/cli/src/mesh/libp2p-transport.ts": "be06968ef6987f072289179c4d670078a531d1c30ccd3ec915678b56895fc70b",
+    "packages/cli/package.json": "f193fc1f66d41c1a1c46aaf5b5ea93496d6c467e436f044547247b11b612f0f4",
+    "scripts/build-publish.mjs": "0cbdad4dc5baed907b650e7f23bd4523e8c4b5b42ce815088734ce82c6dd8e48"
+  },
+  "verificationOnlyContract": {
+    "path": "packages/cli/src/mesh/contracts.ts",
+    "sha256": "e9e44c3d02e0f5abdcee706993ba00f5491c82f1614dab793b8694e6a10ad682",
+    "includedInPatch": false
+  },
+  "tests": {
+    "uniqueCases": 17,
+    "file": "packages/cli/tests/mesh-libp2p-transport.test.ts",
+    "sha256": "291efb51ed8e9535d3a1cfeb08a643452adf4a64c73a4e1d5f20d69860bbc18b",
+    "runs": [
+      {
+        "graph": "locked",
+        "passed": 17,
+        "failed": 0,
+        "log": "/tmp/omnius-libp2p-mesh-locked-tests.json",
+        "sha256": "71ad0723357b22d1d77efd6e4ede6edc7a9daa9faf9e86a7dc8360613d149cc9"
+      },
+      {
+        "graph": "npm",
+        "passed": 17,
+        "failed": 0,
+        "log": "/tmp/omnius-libp2p-mesh-npm-tests.json",
+        "sha256": "afc9f75460ef833d0535fcf6b2fab7bb554877b2b44963fd2f52bc2a292cba52"
+      }
+    ],
+    "cases": [
+      "creates one private identity atomically across concurrent initializers without starting a listener",
+      "refuses corrupted, publicly readable and symlinked identities without silently replacing them",
+      "exchanges ordered Unicode frames over real TCP Noise/Yamux and replies after peer half-close",
+      "rejects untrusted remote identities and mismatched dial targets before application admission",
+      "authenticates a pinned peer even through a local TCP forwarder, then rejects modified ciphertext",
+      "rejects oversized length from an authenticated peer",
+      "rejects invalid JSON from an authenticated peer",
+      "rejects invalid UTF-8 from an authenticated peer",
+      "rejects truncated payload from an authenticated peer",
+      "accepts a frame split across many writes and coalesced frames without losing boundaries",
+      "bounds outgoing frames and queue memory while retaining valid ordered traffic",
+      "applies real stream backpressure and aborts a blocked large write on operator Stop",
+      "aborts pending receives promptly on caller cancellation and transport Stop",
+      "bounds idle reads and refuses public/unconfigured relay addresses",
+      "exchanges end-to-end Noise frames through a real relay while the relay sees ciphertext and endpoint identities remain pinned",
+      "scopes legacy npm pins without changing unrelated or nested consumer overrides",
+      "uses WSS with normal CA verification and pinned Noise peer identity on Node22+"
+    ]
+  },
+  "typecheck": {
+    "mode": "strict NodeNext noEmit, actual transport source + integration tests",
+    "diagnostics": 0,
+    "graphs": [
+      "existing workspace locked dependencies",
+      "fresh private npm installed dependencies"
+    ],
+    "log": "/tmp/omnius-libp2p-mesh-noemit-final.log",
+    "latestParentContractCompatible": true
+  },
+  "privateNpmInstall": {
+    "directRuntimeDependencies": {
+      "libp2p": "3.3.0",
+      "@libp2p/crypto": "5.1.18",
+      "@libp2p/peer-id": "6.0.9",
+      "@libp2p/tcp": "11.0.19",
+      "@libp2p/websockets": "10.1.12",
+      "@libp2p/circuit-relay-v2": "4.2.4",
+      "@libp2p/identify": "4.1.5",
+      "@chainsafe/libp2p-noise": "17.0.0",
+      "@chainsafe/libp2p-yamux": "8.0.1",
+      "@multiformats/multiaddr": "13.0.3"
+    },
+    "installedPackages": 135,
+    "scripts": "ignored",
+    "manifest": "synthetic private mesh runtime dependencies plus actual release overrides scoped by production helper",
+    "shrinkwrapInput": "actual existing publish/npm-shrinkwrap.json (stale, reconciled by npm)",
+    "shrinkwrapInputSha256": "c5b519f308ba4b490916b33defe49a97a87960b312afd53df43519e139b68c11",
+    "newShrinkwrapSha256": "3511c03c5b1ed9799020ccfe3ef279a6e8c92f7174b24e2e58517e74dbdfd797",
+    "evidence": [
+      "all17 actual transport tests pass against fresh npm packages",
+      "separate forced circuit-only Node22 exchange passes"
+    ],
+    "legacyConsumerRuntimeInstalled": false,
+    "limitations": "Nexus/Helia nested version preservation is asserted by focused manifest policy test; full release install belongs to parent packaging gate."
+  },
+  "transport": {
+    "identity": "standard Ed25519 private-key protobuf; private owner directory0700/file0600; no listener during load/create; atomic no-clobber concurrent initialization",
+    "encryption": "standard libp2p Noise + Yamux; no copied Tracker encryption or source",
+    "peerTrust": "pinned authenticated remotePeer; exact dial target; configured relay identity alone does not authorize application access",
+    "relayProof": "real circuit-v2 reservation and forced circuit-only payload; relay HOP stream observed after outer Noise decryption, prompt remains absent; endpoint IDs remain origin and destination",
+    "wssProof": "real TLS listener with generated local CA supplied by NODE_EXTRA_CA_CERTS in isolated child; no disabled certificate verification",
+    "bounds": {
+      "frameBytes": 8388608,
+      "applicationQueuedFrames": 8,
+      "applicationQueuedSendBytes": 16777224,
+      "pausedNativeReadBytes": 16777224,
+      "applicationReadBytes": 16777224,
+      "channels": 64,
+      "connections": 32,
+      "dialQueue": 16,
+      "parallelDials": 4,
+      "defaultDialMs": 15000,
+      "defaultIdleMs": 120000
+    },
+    "readBackpressure": "synchronous pause-on-message + bounded owned parser; convenience async iterator deliberately avoided because its pushable can drain beyond native cap",
+    "cancellation": "caller AbortSignal and Stop abort active receive/send/dial; actual4MiB backpressured send test"
+  },
+  "lockPatch": {
+    "path": "/tmp/omnius-libp2p-mesh-lock-importers.patch",
+    "sha256": "2be41bd58915449e7e5800ed9c3e6ce4b11c57edfd9e310f675ac863bb151b91",
+    "addedImporterLines": 30,
+    "transitiveVersionChanges": 0,
+    "rootLockChanged": false
+  },
+  "safety": {
+    "externalPeerConnections": 0,
+    "publicRendezvous": false,
+    "inferenceRequests": 0,
+    "modelLoads": 0,
+    "cudaActions": 0,
+    "serviceChanges": 0,
+    "sharedBuilds": 0,
+    "rootSourceWrites": 0,
+    "publishDirectoryWrites": 0,
+    "trackerSourceCopied": false
+  },
+  "primaryReferences": [
+    "https://libp2p.github.io/js-libp2p/interfaces/libp2p.index.Libp2pInit.html",
+    "https://libp2p.io/docs/circuit-relay/",
+    "https://github.com/libp2p/specs/blob/master/noise/README.md"
+  ],
+  "beforeAfter": {
+    "fixture": "actual4MiB send to a trusted peer whose application does not receive",
+    "before": {
+      "sourceSha256": "a9a84ad1d26530917a50f6d350bb06de673728bf824c9b815d850eb12ef1bd61",
+      "testFailures": 1,
+      "skippedOtherTests": 16,
+      "observation": "write settles before50ms because convenience iterator/native stream never pauses at application boundary",
+      "log": "/tmp/omnius-libp2p-mesh-before-pressure.json",
+      "logSha256": "f72f038891aba9ab604ba42437d4eb2ef8efc4f353ebbf0655390fb5b90a4d03"
+    },
+    "after": {
+      "observation": "write remains backpressured after50ms; explicit AbortSignal cancels it promptly",
+      "testPasses": 17,
+      "testFailures": 0
+    }
+  }
+}