pi-daddy 0.22.0 → 0.24.0

package/dist/native-session.js

@@ -0,0 +1,154 @@
+import { constants } from "node:fs";
+import { open, lstat, realpath } from "node:fs/promises";
+import { isAbsolute, relative, sep } from "node:path";
+import { createHash } from "node:crypto";
+import { parseRetentionJson } from "./retention-json.js";
+export const ENV_NATIVE_SESSION_ROOT = "PI_GRANTS_NATIVE_SESSION_ROOT";
+export const MAX_NATIVE_SESSION_BYTES = 1024 * 1024;
+export const missingNativeSession = () => ({ source: null, status: "missing", sessionId: null,
+    sessionPath: null, parentSessionPath: null, branchLeafId: null, branchState: "unknown", lastPersistedEntryId: null,
+    sha256: null, reason: "native-session-unavailable" });
+const id = (x) => typeof x === "string" && /^[a-zA-Z0-9_-]{1,128}$/.test(x);
+const uuid = (x) => typeof x === "string" && /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/i.test(x);
+const obj = (x) => x !== null && typeof x === "object" && !Array.isArray(x);
+const filePath = (x) => typeof x === "string" && x.length <= 4096 && isAbsolute(x) && !x.includes("\0");
+/** Parse the retained native v3 bytes, never load/migrate/rewrite a session via SessionManager.open(). */
+export function parseNativeSessionBytes(bytes, input) {
+    const observation = { ...missingNativeSession(), source: input.source, sessionPath: input.path };
+    const result = { observation };
+    const fail = (status, reason) => {
+        observation.status = status;
+        observation.reason = reason;
+        observation.branchLeafId = null;
+        observation.branchState = "unknown";
+        return result;
+    };
+    if (bytes.length > MAX_NATIVE_SESSION_BYTES)
+        return fail("truncated", "native-session-size-limit");
+    const raw = Buffer.from(bytes), newline = raw.indexOf(10);
+    let header;
+    try {
+        header = parseRetentionJson(new TextDecoder("utf-8", { fatal: true }).decode(raw.subarray(0, newline < 0 ? raw.length : newline)), MAX_NATIVE_SESSION_BYTES);
+    }
+    catch {
+        return fail("invalid", "native-session-header-invalid");
+    }
+    if (!obj(header) || header.type !== "session" || header.version !== 3 || !uuid(header.id) ||
+        !filePath(header.cwd) || typeof header.timestamp !== "string" || !Number.isFinite(Date.parse(header.timestamp)) ||
+        (header.parentSession !== undefined && !filePath(header.parentSession)))
+        return fail("invalid", "native-session-header-invalid");
+    if (input.expectedSessionId !== undefined && header.id !== input.expectedSessionId)
+        return fail("changed", "native-session-id-changed");
+    // Only validated session headers admit transcript bytes; arbitrary files are never archived here.
+    result.bytes = Buffer.from(bytes);
+    observation.sessionId = header.id;
+    observation.parentSessionPath = header.parentSession ?? null;
+    observation.sha256 = createHash("sha256").update(bytes).digest("hex");
+    if (input.truncated || raw.at(-1) !== 10)
+        return fail("truncated", "native-session-incomplete-bytes");
+    let text;
+    try {
+        text = new TextDecoder("utf-8", { fatal: true }).decode(raw);
+    }
+    catch {
+        return fail("invalid", "native-session-utf8-invalid");
+    }
+    const lines = text.split("\n");
+    const ids = new Set();
+    if (lines.length > 10002)
+        return fail("invalid", "native-session-entry-limit");
+    for (const line of lines.slice(1, -1)) {
+        let entry;
+        try {
+            entry = parseRetentionJson(line, MAX_NATIVE_SESSION_BYTES);
+        }
+        catch {
+            return fail("invalid", "native-session-entry-invalid");
+        }
+        if (!obj(entry) || typeof entry.type !== "string" || entry.type === "session" || !id(entry.id) || ids.has(entry.id) ||
+            !(entry.parentId === null || (id(entry.parentId) && ids.has(entry.parentId))) || typeof entry.timestamp !== "string" ||
+            !Number.isFinite(Date.parse(entry.timestamp)))
+            return fail("invalid", "native-session-parent-link-invalid");
+        ids.add(entry.id);
+        observation.lastPersistedEntryId = entry.id;
+    }
+    if (input.liveLeaf) {
+        if (input.liveLeaf.sessionId !== header.id || (input.liveLeaf.leafId !== null && !ids.has(input.liveLeaf.leafId))) {
+            return fail("changed", "native-session-live-leaf-mismatch");
+        }
+        observation.branchLeafId = input.liveLeaf.leafId;
+        observation.branchState = "observed";
+    }
+    observation.status = "verified";
+    observation.reason = observation.branchState === "unknown" ? "active-branch-unknown" : null;
+    return result;
+}
+/** Private allowlisted files only, bounded non-following descriptor reads, no scan of session/auth dirs. */
+export async function readNativeSession(input) {
+    const gap = (status, reason) => ({ observation: {
+            ...missingNativeSession(), source: input.source, status, reason, sessionPath: filePath(input.path) ? input.path : null,
+        } });
+    const root = input.allowedRoot ?? process.env[ENV_NATIVE_SESSION_ROOT];
+    if (!filePath(input.path) || !input.path.endsWith(".jsonl") || !root || !filePath(root))
+        return gap("unsupported", "native-session-private-root-required");
+    const within = (base, candidate) => { const p = relative(base, candidate); return p !== "" && p !== ".." && !p.startsWith(`..${sep}`) && !isAbsolute(p); };
+    if (!within(root, input.path))
+        return gap("unsupported", "native-session-outside-private-root");
+    let handle;
+    try {
+        const canonicalRoot = await realpath(root), canonicalFile = await realpath(input.path);
+        const rootStat = await lstat(canonicalRoot);
+        if (!rootStat.isDirectory() || (rootStat.mode & 0o077) !== 0 || (typeof process.getuid === "function" && rootStat.uid !== process.getuid()))
+            return gap("unsupported", "native-session-root-not-private");
+        if (!within(canonicalRoot, canonicalFile) || (await lstat(input.path)).isSymbolicLink())
+            return gap("unsupported", "native-session-path-alias");
+        handle = await open(input.path, constants.O_RDONLY | constants.O_NOFOLLOW | constants.O_NONBLOCK);
+        const before = await handle.stat();
+        if (!before.isFile() || before.nlink !== 1 || (typeof process.getuid === "function" && before.uid !== process.getuid())) {
+            return gap("unsupported", "native-session-not-private-regular-file");
+        }
+        const fileIdentity = { device: String(before.dev), inode: String(before.ino) };
+        if (input.expectedFile && (input.expectedFile.device !== fileIdentity.device || input.expectedFile.inode !== fileIdentity.inode))
+            return gap("changed", "native-session-file-replaced");
+        const live = input.manager ? { sessionId: input.manager.getSessionId(), leafId: input.manager.getLeafId(), path: input.manager.getSessionFile() } : undefined;
+        if (live && live.path !== input.path)
+            return gap("changed", "native-session-manager-path-changed");
+        const bytes = Buffer.alloc(Math.min(before.size, MAX_NATIVE_SESSION_BYTES));
+        let offset = 0;
+        while (offset < bytes.length) {
+            const read = await handle.read(bytes, offset, bytes.length - offset, offset);
+            if (!read.bytesRead)
+                break;
+            offset += read.bytesRead;
+        }
+        const after = await handle.stat(), location = await lstat(input.path);
+        if (before.dev !== location.dev || before.ino !== location.ino || before.size !== after.size || before.mtimeMs !== after.mtimeMs ||
+            before.ctimeMs !== after.ctimeMs || location.isSymbolicLink() || after.size !== location.size)
+            return gap("changed", "native-session-file-changed");
+        if (live && (input.manager.getSessionId() !== live.sessionId || input.manager.getLeafId() !== live.leafId || input.manager.getSessionFile() !== live.path)) {
+            return gap("changed", "native-session-live-state-changed");
+        }
+        return { ...parseNativeSessionBytes(bytes.subarray(0, offset), { ...input, liveLeaf: live,
+                truncated: before.size > MAX_NATIVE_SESSION_BYTES || offset !== before.size }), fileIdentity };
+    }
+    catch (error) {
+        return gap(error.code === "ENOENT" ? "missing" : "invalid", "native-session-read-failed");
+    }
+    finally {
+        await handle?.close().catch(() => undefined);
+    }
+}
+/** Herdr 0.8.2 protocol 20 AgentInfo.agent_session; never scrape terminal text, PID or names. */
+export function herdrSessionReference(value, expectedPane) {
+    if (!obj(value) || value.pane_id !== expectedPane || value.agent !== "pi" || !obj(value.agent_session))
+        return null;
+    const s = value.agent_session;
+    if (s.agent !== "pi" || typeof s.source !== "string" || s.source.length > 128)
+        return null;
+    if (s.kind === "id" && uuid(s.value))
+        return { source: "herdr-id", value: s.value };
+    if (s.kind === "path" && filePath(s.value))
+        return { source: "herdr-path", value: s.value };
+    return null;
+}
+//# sourceMappingURL=native-session.js.map

package/dist/native-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-session.js","sourceRoot":"","sources":["../src/native-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,CAAC,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,GAAG,IAAI,CAAC;AAqBpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,GAA6B,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI;IACrH,WAAW,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,oBAAoB,EAAE,IAAI;IAClH,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,4BAA4B,EAAE,CAAC,CAAC;AACxD,MAAM,EAAE,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClG,MAAM,IAAI,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,gDAAgD,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC5H,MAAM,GAAG,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACnH,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,IAAI,IAAI,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAE9H,0GAA0G;AAC1G,MAAM,UAAU,uBAAuB,CAAC,KAAiB,EAAE,KAG1D;IACC,MAAM,WAAW,GAAG,EAAE,GAAG,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;IACjG,MAAM,MAAM,GAAyB,EAAE,WAAW,EAAE,CAAC;IACrD,MAAM,IAAI,GAAG,CAAC,MAA0C,EAAE,MAAc,EAAE,EAAE;QAC1E,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC;QAAC,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC;QAAC,WAAW,CAAC,YAAY,GAAG,IAAI,CAAC;QAAC,WAAW,CAAC,WAAW,GAAG,SAAS,CAAC;QAC/H,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,wBAAwB;QAAE,OAAO,IAAI,CAAC,WAAW,EAAE,2BAA2B,CAAC,CAAC;IACnG,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,kBAAkB,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,wBAAwB,CAAC,CAAC;IAAC,CAAC;IACrK,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;IAAC,CAAC;IAClE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACvF,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/G,CAAC,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;IACnI,IAAI,KAAK,CAAC,iBAAiB,KAAK,SAAS,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,CAAC,iBAAiB;QAAE,OAAO,IAAI,CAAC,SAAS,EAAE,2BAA2B,CAAC,CAAC;IACxI,kGAAkG;IAClG,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,WAAW,CAAC,SAAS,GAAG,MAAM,CAAC,EAAE,CAAC;IAClC,WAAW,CAAC,iBAAiB,GAAG,MAAM,CAAC,aAAmC,IAAI,IAAI,CAAC;IACnF,WAAW,CAAC,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;IACtG,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IACrE,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;IAAC,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,KAAK;QAAE,OAAO,IAAI,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IAC/E,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,IAAI,KAAc,CAAC;QACnB,IAAI,CAAC;YAAC,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;QAAC,CAAC;QACrI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACjH,CAAC,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;YACpH,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC,SAAS,EAAE,oCAAoC,CAAC,CAAC;QAC9G,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,WAAW,CAAC,oBAAoB,GAAG,KAAK,CAAC,EAAE,CAAC;IACjE,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,KAAK,MAAM,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAClH,OAAO,IAAI,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;QAC9D,CAAC;QACD,WAAW,CAAC,YAAY,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAC,WAAW,CAAC,WAAW,GAAG,UAAU,CAAC;IACzF,CAAC;IACD,WAAW,CAAC,MAAM,GAAG,UAAU,CAAC;IAAC,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7H,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAIvC;IACC,MAAM,GAAG,GAAG,CAAC,MAA0C,EAAE,MAAc,EAAwB,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE;YAChH,GAAG,oBAAoB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;SACvH,EAAE,CAAC,CAAC;IACL,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACvE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,aAAa,EAAE,sCAAsC,CAAC,CAAC;IAC3J,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,SAAiB,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3K,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,aAAa,EAAE,qCAAqC,CAAC,CAAC;IAChG,IAAI,MAAoD,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAAE,OAAO,GAAG,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;QAC1M,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE;YAAE,OAAO,GAAG,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;QAChJ,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;QAClG,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;YACxH,OAAO,GAAG,CAAC,aAAa,EAAE,yCAAyC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,YAAY,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/E,IAAI,KAAK,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,YAAY,CAAC,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,KAAK,KAAK,YAAY,CAAC,KAAK,CAAC;YAAE,OAAO,GAAG,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;QACxL,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9J,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;QACnG,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC5E,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,MAAM;YAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC;QAAC,CAAC;QACrK,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,QAAQ,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAC9H,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;QACtJ,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAQ,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,OAAQ,CAAC,SAAS,EAAE,KAAK,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,OAAQ,CAAC,cAAc,EAAE,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9J,OAAO,GAAG,CAAC,SAAS,EAAE,mCAAmC,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,EAAE,GAAG,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI;gBACvF,SAAS,EAAE,MAAM,CAAC,IAAI,GAAG,wBAAwB,IAAI,MAAM,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;IACnG,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,GAAG,CAAE,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACvH,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAAC,CAAC;AAC7D,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,qBAAqB,CAAC,KAAc,EAAE,YAAoB;IACxE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,YAAY,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC;QAAE,OAAO,IAAI,CAAC;IACpH,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,CAAC;IAC9B,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,IAAI,CAAC;IAC3F,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACpF,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC5F,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/order-schedule.d.ts

@@ -0,0 +1,37 @@
+import type { VariantRecord } from "./experiment-state.ts";
+export interface OrderNode {
+    nodeId: string;
+    dependencies: readonly string[];
+    executions: readonly string[];
+    expectedDigest: string;
+    decision: {
+        decisionId: string;
+        authorityId: string;
+    } | null;
+}
+export interface OrderSchedule {
+    version: "order-schedule-v1";
+    policyDigest: string;
+    nodes: readonly OrderNode[];
+}
+export interface FactoryDecision {
+    version: "factory-decision-v1";
+    requestId: string;
+    bindingDigest: string;
+    nodeId: string;
+    evidenceDigest: string;
+    authorityId: string;
+    choice: "approve" | "reject";
+}
+export declare const factoryDecisionDigest: (d: FactoryDecision) => string;
+export declare function factoryDecision(value: FactoryDecision): FactoryDecision;
+export declare function orderSchedule(input: OrderSchedule, executions: readonly string[]): OrderSchedule;
+export interface OrderNodeView {
+    nodeId: string;
+    state: "eligible" | "running" | "unknown" | "exhausted" | "decision-required" | "decision-rejected" | "dependency-blocked" | "satisfied";
+    action: "dispatch" | "decide" | "wait" | "stakeholder" | "none";
+    executionId: string | null;
+    evidenceDigest: string | null;
+}
+export declare function evaluateOrder(s: OrderSchedule, variants: readonly VariantRecord[], digests: ReadonlyMap<string, string | null>, decisions: readonly FactoryDecision[]): OrderNodeView[];
+//# sourceMappingURL=order-schedule.d.ts.map

package/dist/order-schedule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"order-schedule.d.ts","sourceRoot":"","sources":["../src/order-schedule.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,MAAM,WAAW,SAAS;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAAE;AACnM,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,mBAAmB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAA;CAAE;AAClH,MAAM,WAAW,eAAe;IAAG,OAAO,EAAE,qBAAqB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAA;CAAE;AACxM,eAAO,MAAM,qBAAqB,GAAI,GAAG,eAAe,WAAuC,CAAC;AAChG,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,eAAe,CAGvE;AACD,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,CAYhG;AACD,MAAM,WAAW,aAAa;IAAE,MAAM,EAAC,MAAM,CAAC;IAAA,KAAK,EAAC,UAAU,GAAC,SAAS,GAAC,SAAS,GAAC,WAAW,GAAC,mBAAmB,GAAC,mBAAmB,GAAC,oBAAoB,GAAC,WAAW,CAAC;IAAA,MAAM,EAAC,UAAU,GAAC,QAAQ,GAAC,MAAM,GAAC,aAAa,GAAC,MAAM,CAAC;IAAA,WAAW,EAAC,MAAM,GAAC,IAAI,CAAC;IAAA,cAAc,EAAC,MAAM,GAAC,IAAI,CAAA;CAAC;AAClR,wBAAgB,aAAa,CAAC,CAAC,EAAC,aAAa,EAAC,QAAQ,EAAC,SAAS,aAAa,EAAE,EAAC,OAAO,EAAC,WAAW,CAAC,MAAM,EAAC,MAAM,GAAC,IAAI,CAAC,EAAC,SAAS,EAAC,SAAS,eAAe,EAAE,GAAE,aAAa,EAAE,CAiB5K"}

package/dist/order-schedule.js

@@ -0,0 +1,81 @@
+import { closed, cloneExperiment, experimentHash } from "./experiment-contract.js";
+export const factoryDecisionDigest = (d) => experimentHash(factoryDecision(d));
+export function factoryDecision(value) {
+    const d = cloneExperiment(value);
+    closed(d, ["version", "requestId", "bindingDigest", "nodeId", "evidenceDigest", "authorityId", "choice"]);
+    if (d.version !== "factory-decision-v1" || ![d.requestId, d.nodeId, d.authorityId].every(x => typeof x === "string" && /^[a-zA-Z0-9:_-]{1,128}$/.test(x)) || ![d.bindingDigest, d.evidenceDigest].every(x => typeof x === "string" && /^[a-f0-9]{64}$/.test(x)) || !["approve", "reject"].includes(d.choice))
+        throw new Error("invalid reserved decision");
+    return d;
+}
+export function orderSchedule(input, executions) {
+    const s = cloneExperiment(input);
+    closed(s, ["version", "policyDigest", "nodes"]);
+    if (s.version !== "order-schedule-v1" || !/^[a-f0-9]{64}$/.test(s.policyDigest) || !Array.isArray(s.nodes) || !s.nodes.length || s.nodes.length > 16)
+        throw new Error("bounded order schedule required");
+    const ids = new Set(), all = [];
+    for (const n of s.nodes) {
+        closed(n, ["nodeId", "dependencies", "executions", "expectedDigest", "decision"]);
+        if (!/^[a-zA-Z0-9:_-]{1,128}$/.test(n.nodeId) || ids.has(n.nodeId) || !Array.isArray(n.dependencies) || n.dependencies.length > 16 || new Set(n.dependencies).size !== n.dependencies.length || !Array.isArray(n.executions) || n.executions.length < 1 || n.executions.length > 3 || !/^[a-f0-9]{64}$/.test(n.expectedDigest))
+            throw new Error("invalid node/dependency/recovery policy");
+        if (n.decision !== null) {
+            closed(n.decision, ["decisionId", "authorityId"]);
+            if (![n.decision.decisionId, n.decision.authorityId].every(x => /^[a-zA-Z0-9:_-]{1,128}$/.test(x)))
+                throw new Error("invalid decision owner");
+        }
+        ids.add(n.nodeId);
+        all.push(...n.executions);
+    }
+    if (new Set(all).size !== all.length || all.length !== executions.length || all.some(x => !executions.includes(x)))
+        throw new Error("schedule must own every reserved execution exactly once");
+    const visiting = new Set(), done = new Set();
+    const visit = (id) => { if (done.has(id))
+        return; if (visiting.has(id))
+        throw new Error("dependency cycle"); const n = s.nodes.find(n => n.nodeId === id); if (!n)
+        throw new Error("missing dependency"); visiting.add(id); n.dependencies.forEach(visit); visiting.delete(id); done.add(id); };
+    s.nodes.forEach(n => visit(n.nodeId));
+    return s;
+}
+export function evaluateOrder(s, variants, digests, decisions) {
+    const rows = new Map();
+    function evaluate(n) {
+        if (rows.has(n.nodeId))
+            return rows.get(n.nodeId);
+        const row = { nodeId: n.nodeId, state: "exhausted", action: "stakeholder", executionId: null, evidenceDigest: null };
+        if (n.dependencies.some(id => evaluate(s.nodes.find(n => n.nodeId === id)).state !== "satisfied")) {
+            row.state = "dependency-blocked";
+            row.action = "wait";
+            rows.set(n.nodeId, row);
+            return row;
+        }
+        for (const id of n.executions) {
+            const v = variants.find(v => v.executionId === id);
+            row.executionId = id;
+            if (v.state === "unknown") {
+                row.state = "unknown";
+                row.action = "stakeholder";
+                break;
+            }
+            if (v.state === "completed" && digests.get(id) === n.expectedDigest) {
+                row.evidenceDigest = experimentHash({ nodeId: n.nodeId, policyDigest: s.policyDigest, executionId: id, artifactDigest: v.artifactDigest, expectedDigest: n.expectedDigest });
+                const d = decisions.find(d => d.nodeId === n.nodeId && d.evidenceDigest === row.evidenceDigest);
+                row.state = n.decision ? d ? d.choice === "approve" ? "satisfied" : "decision-rejected" : "decision-required" : "satisfied";
+                row.action = row.state === "decision-required" ? "decide" : row.state === "decision-rejected" ? "stakeholder" : "none";
+                break;
+            }
+            if (["unstarted", "queued"].includes(v.state)) {
+                row.state = "eligible";
+                row.action = "dispatch";
+                break;
+            }
+            if (["dispatching", "running"].includes(v.state)) {
+                row.state = "running";
+                row.action = "wait";
+                break;
+            }
+        }
+        rows.set(n.nodeId, row);
+        return row;
+    }
+    return s.nodes.map(evaluate);
+}
+//# sourceMappingURL=order-schedule.js.map

package/dist/order-schedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"order-schedule.js","sourceRoot":"","sources":["../src/order-schedule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAKnF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAkB,EAAE,EAAE,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;AAChG,MAAM,UAAU,eAAe,CAAC,KAAsB;IACpD,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,CAAC,EAAC,CAAC,SAAS,EAAC,WAAW,EAAC,eAAe,EAAC,QAAQ,EAAC,gBAAgB,EAAC,aAAa,EAAC,QAAQ,CAAC,CAAC,CAAC;IACrI,IAAG,CAAC,CAAC,OAAO,KAAG,qBAAqB,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAC,CAAC,CAAC,MAAM,EAAC,CAAC,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,KAAG,QAAQ,IAAE,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,EAAC,CAAC,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,OAAO,CAAC,KAAG,QAAQ,IAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAAA,OAAO,CAAC,CAAC;AAClV,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAoB,EAAE,UAA6B;IAC/E,MAAM,CAAC,GAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAAA,MAAM,CAAC,CAAC,EAAC,CAAC,SAAS,EAAC,cAAc,EAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,IAAG,CAAC,CAAC,OAAO,KAAG,mBAAmB,IAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,IAAE,CAAC,CAAC,KAAK,CAAC,MAAM,GAAC,EAAE;QAAC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC5L,MAAM,GAAG,GAAC,IAAI,GAAG,EAAU,EAAC,GAAG,GAAU,EAAE,CAAC;IAC5C,KAAI,MAAM,CAAC,IAAI,CAAC,CAAC,KAA6B,EAAC,CAAC;QAAA,MAAM,CAAC,CAAC,EAAC,CAAC,QAAQ,EAAC,cAAc,EAAC,YAAY,EAAC,gBAAgB,EAAC,UAAU,CAAC,CAAC,CAAC;QAC3H,IAAG,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,IAAE,CAAC,CAAC,YAAY,CAAC,MAAM,GAAC,EAAE,IAAE,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,KAAG,CAAC,CAAC,YAAY,CAAC,MAAM,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAE,CAAC,CAAC,UAAU,CAAC,MAAM,GAAC,CAAC,IAAE,CAAC,CAAC,UAAU,CAAC,MAAM,GAAC,CAAC,IAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACjW,IAAG,CAAC,CAAC,QAAQ,KAAG,IAAI,EAAC,CAAC;YAAA,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAC,CAAC,YAAY,EAAC,aAAa,CAAC,CAAC,CAAC;YAAA,IAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAAA,CAAC;QAChN,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAAA,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;IACD,IAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAG,GAAG,CAAC,MAAM,IAAE,GAAG,CAAC,MAAM,KAAG,UAAU,CAAC,MAAM,IAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACnL,MAAM,QAAQ,GAAC,IAAI,GAAG,EAAU,EAAC,IAAI,GAAC,IAAI,GAAG,EAAU,CAAC;IACxD,MAAM,KAAK,GAAC,CAAC,EAAS,EAAC,EAAE,GAAC,IAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,OAAO,CAAA,IAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAA,MAAM,CAAC,GAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,EAAE,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAA,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAA,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA,CAAC,CAAC;IAAA,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAA,EAAE,CAAA,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAAA,OAAO,CAAC,CAAC;AAC7T,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAe,EAAC,QAAiC,EAAC,OAAuC,EAAC,SAAoC;IAC1J,MAAM,IAAI,GAAC,IAAI,GAAG,EAAwB,CAAC;IAC3C,SAAS,QAAQ,CAAC,CAAW;QAC3B,IAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAE,CAAC;QACjD,MAAM,GAAG,GAAe,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,KAAK,EAAC,WAAW,EAAC,MAAM,EAAC,aAAa,EAAC,WAAW,EAAC,IAAI,EAAC,cAAc,EAAC,IAAI,EAAC,CAAC;QACtH,IAAG,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAA,EAAE,CAAA,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,EAAE,CAAE,CAAC,CAAC,KAAK,KAAG,WAAW,CAAC,EAAC,CAAC;YAAA,GAAG,CAAC,KAAK,GAAC,oBAAoB,CAAC;YAAA,GAAG,CAAC,MAAM,GAAC,MAAM,CAAC;YAAA,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC;YAAA,OAAO,GAAG,CAAC;QAAA,CAAC;QAC/K,KAAI,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAC,CAAC;YAAA,MAAM,CAAC,GAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,WAAW,KAAG,EAAE,CAAE,CAAC;YAAA,GAAG,CAAC,WAAW,GAAC,EAAE,CAAC;YAC7F,IAAG,CAAC,CAAC,KAAK,KAAG,SAAS,EAAC,CAAC;gBAAA,GAAG,CAAC,KAAK,GAAC,SAAS,CAAC;gBAAA,GAAG,CAAC,MAAM,GAAC,aAAa,CAAC;gBAAA,MAAM;YAAA,CAAC;YAC5E,IAAG,CAAC,CAAC,KAAK,KAAG,WAAW,IAAE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,KAAG,CAAC,CAAC,cAAc,EAAC,CAAC;gBAAA,GAAG,CAAC,cAAc,GAAC,cAAc,CAAC,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,YAAY,EAAC,CAAC,CAAC,YAAY,EAAC,WAAW,EAAC,EAAE,EAAC,cAAc,EAAC,CAAC,CAAC,cAAc,EAAC,cAAc,EAAC,CAAC,CAAC,cAAc,EAAC,CAAC,CAAC;gBAC5N,MAAM,CAAC,GAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,CAAC,CAAC,MAAM,IAAE,CAAC,CAAC,cAAc,KAAG,GAAG,CAAC,cAAc,CAAC,CAAC;gBACtF,GAAG,CAAC,KAAK,GAAC,CAAC,CAAC,QAAQ,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,MAAM,KAAG,SAAS,CAAA,CAAC,CAAA,WAAW,CAAA,CAAC,CAAA,mBAAmB,CAAA,CAAC,CAAA,mBAAmB,CAAA,CAAC,CAAA,WAAW,CAAC;gBAAA,GAAG,CAAC,MAAM,GAAC,GAAG,CAAC,KAAK,KAAG,mBAAmB,CAAA,CAAC,CAAA,QAAQ,CAAA,CAAC,CAAA,GAAG,CAAC,KAAK,KAAG,mBAAmB,CAAA,CAAC,CAAA,aAAa,CAAA,CAAC,CAAA,MAAM,CAAC;gBAAA,MAAM;YAAA,CAAC;YAC9N,IAAG,CAAC,WAAW,EAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAC,CAAC;gBAAA,GAAG,CAAC,KAAK,GAAC,UAAU,CAAC;gBAAA,GAAG,CAAC,MAAM,GAAC,UAAU,CAAC;gBAAA,MAAM;YAAA,CAAC;YAC/F,IAAG,CAAC,aAAa,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAC,CAAC;gBAAA,GAAG,CAAC,KAAK,GAAC,SAAS,CAAC;gBAAA,GAAG,CAAC,MAAM,GAAC,MAAM,CAAC;gBAAA,MAAM;YAAA,CAAC;QAC/F,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAC,GAAG,CAAC,CAAC;QAAA,OAAO,GAAG,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC/B,CAAC"}

package/dist/ordinary-children.d.ts

@@ -0,0 +1,52 @@
+export interface OrdinaryTarget {
+    executionId: string;
+    parentExecutionId: string | null;
+    toolCallId: string | null;
+}
+export interface OrdinaryCancellation {
+    version: "ordinary-cancel-v1";
+    requestId: string;
+    bindingDigest: string;
+    expectedRevision: number;
+    target: OrdinaryTarget;
+}
+export interface OrdinaryAuthority {
+    bindingDigest: string;
+    requestDigests: readonly string[];
+}
+type ControlState = "not-assessed" | "failed" | "unknown";
+export declare function ordinaryCancellation(input: OrdinaryCancellation): {
+    target: OrdinaryTarget & Record<string, unknown>;
+    version: "ordinary-cancel-v1";
+    requestId: string;
+    bindingDigest: string;
+    expectedRevision: number;
+};
+export declare const ordinaryCancellationDigest: (r: OrdinaryCancellation) => string;
+export interface OrdinaryChildren {
+    readonly bindingDigest: string;
+    inspect(): unknown;
+    quiescent(): boolean;
+    cancel(request: OrdinaryCancellation, authority: OrdinaryAuthority | null): unknown;
+}
+export declare const isOrdinaryChildren: (p: unknown) => p is OrdinaryChildren;
+/** Only the original session object can retrieve its retained port; spreading/copying cannot. */
+export declare function ordinaryChildrenFor(session: object): OrdinaryChildren;
+/** Associate the actual extension API object at factory creation, never a label or path. */
+export declare function associateOrdinaryHost(host: object, session: object): void;
+export declare function retainSessionChild(session: object, input: OrdinaryTarget, caller?: AbortSignal): {
+    signal: AbortSignal;
+    settle(outcome: unknown, control: ControlState, boundary?: ControlState): void;
+} | undefined;
+/** Internal host control seam, not a model tool or recovered capability. Reads never call it. */
+export declare function holdOrdinaryDispatch(port: OrdinaryChildren, key: string): Readonly<{
+    ready: () => boolean;
+    release: () => void;
+}>;
+/** Extension executor seam; never exported through the package root or model tools. */
+export declare function retainOrdinaryChild(port: OrdinaryChildren, input: OrdinaryTarget, caller?: AbortSignal): {
+    signal: AbortSignal;
+    settle(outcome: unknown, control: ControlState, boundary?: ControlState): void;
+};
+export {};
+//# sourceMappingURL=ordinary-children.d.ts.map

package/dist/ordinary-children.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ordinary-children.d.ts","sourceRoot":"","sources":["../src/ordinary-children.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,cAAc;IAAG,WAAW,EAAC,MAAM,CAAC;IAAC,iBAAiB,EAAC,MAAM,GAAC,IAAI,CAAC;IAAC,UAAU,EAAC,MAAM,GAAC,IAAI,CAAA;CAAE;AAC7G,MAAM,WAAW,oBAAoB;IAAG,OAAO,EAAC,oBAAoB,CAAC;IAAC,SAAS,EAAC,MAAM,CAAC;IAAC,aAAa,EAAC,MAAM,CAAC;IAAC,gBAAgB,EAAC,MAAM,CAAC;IAAC,MAAM,EAAC,cAAc,CAAA;CAAE;AAC9J,MAAM,WAAW,iBAAiB;IAAG,aAAa,EAAC,MAAM,CAAC;IAAC,cAAc,EAAC,SAAS,MAAM,EAAE,CAAA;CAAE;AAC7F,KAAK,YAAY,GAAC,cAAc,GAAC,QAAQ,GAAC,SAAS,CAAC;AAMpD,wBAAgB,oBAAoB,CAAC,KAAK,EAAC,oBAAoB;;aARf,oBAAoB;eAAY,MAAM;mBAAgB,MAAM;sBAAmB,MAAM;EAQkR;AACvZ,eAAO,MAAM,0BAA0B,GAAE,GAAE,oBAAoB,WAAsC,CAAC;AACtG,MAAM,WAAW,gBAAgB;IAAG,QAAQ,CAAC,aAAa,EAAC,MAAM,CAAC;IAAC,OAAO,IAAG,OAAO,CAAC;IAAC,SAAS,IAAG,OAAO,CAAC;IAAC,MAAM,CAAC,OAAO,EAAC,oBAAoB,EAAC,SAAS,EAAC,iBAAiB,GAAC,IAAI,GAAE,OAAO,CAAA;CAAE;AAC1L,eAAO,MAAM,kBAAkB,GAAE,GAAE,OAAO,KAAE,CAAC,IAAI,gBAA6D,CAAC;AAsB/G,iGAAiG;AACjG,wBAAgB,mBAAmB,CAAC,OAAO,EAAC,MAAM,GAAE,gBAAgB,CAA2H;AAC/L,4FAA4F;AAC5F,wBAAgB,qBAAqB,CAAC,IAAI,EAAC,MAAM,EAAC,OAAO,EAAC,MAAM,QAA4K;AAC5O,wBAAgB,kBAAkB,CAAC,OAAO,EAAC,MAAM,EAAC,KAAK,EAAC,cAAc,EAAC,MAAM,CAAC,EAAC,WAAW;;oBAevE,OAAO,WAAS,YAAY,aAAU,YAAY;cAfkM;AACvQ,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,IAAI,EAAC,gBAAgB,EAAC,GAAG,EAAC,MAAM;;;GAKpE;AACD,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,IAAI,EAAC,gBAAgB,EAAC,KAAK,EAAC,cAAc,EAAC,MAAM,CAAC,EAAC,WAAW;;oBAM/E,OAAO,WAAS,YAAY,aAAU,YAAY;EACpE"}

package/dist/ordinary-children.js

@@ -0,0 +1,93 @@
+import { randomUUID } from "node:crypto";
+import { isExecutionId } from "./execution-id.js";
+import { dataDigest, detached, freeze, sha } from "./debrief-contract.js";
+import { controlShape } from "./dispatch-control.js";
+const sessions = new WeakMap(), ports = new WeakMap();
+const id = (v) => typeof v === "string" && /^[a-zA-Z0-9:_-]{1,128}$/.test(v);
+function target(value) { const t = detached(value); controlShape(t, ["executionId", "parentExecutionId", "toolCallId"]); if (!isExecutionId(t.executionId) || !(t.parentExecutionId === null || isExecutionId(t.parentExecutionId)) || !(t.toolCallId === null || typeof t.toolCallId === "string" && t.toolCallId.length > 0 && t.toolCallId.length <= 256))
+    throw Error("exact original occurrence identity required"); return t; }
+export function ordinaryCancellation(input) { const r = detached(input); controlShape(r, ["version", "requestId", "bindingDigest", "expectedRevision", "target"]); if (r.version !== "ordinary-cancel-v1" || !id(r.requestId) || !sha(r.bindingDigest) || !Number.isSafeInteger(r.expectedRevision) || r.expectedRevision < 0)
+    throw Error("invalid ordinary cancellation"); return freeze({ ...r, target: target(r.target) }); }
+export const ordinaryCancellationDigest = (r) => dataDigest(ordinaryCancellation(r));
+export const isOrdinaryChildren = (p) => typeof p === "object" && p !== null && ports.has(p);
+/** Extension-internal constructor. No disk discovery/recovery and no identity inferred from labels. */
+function initializeOrdinaryChildren(session) {
+    if (sessions.has(session))
+        throw Error("original session already registered");
+    const s = { holds: new Set(), enabled: false, coverageGap: false, bindingDigest: dataDigest({ occurrence: randomUUID() }), revision: 0, rows: new Map(), handles: new Map(), requests: new Map() };
+    const port = Object.freeze({ bindingDigest: s.bindingDigest,
+        quiescent: () => !s.coverageGap && [...s.rows.values()].every(r => r.state === "settled" && r.boundary === "not-assessed"),
+        inspect: () => freeze(detached({ bindingDigest: s.bindingDigest, revision: s.revision, children: [...s.rows.values()], admission: s.holds.size ? "held-by-original-owner" : "open", coverage: s.coverageGap ? "unretained-before-opt-in" : "original-registered-lifetimes-only", freshness: "snapshot-unknown", recovery: "unavailable", acceptance: "not-assessed" })),
+        cancel(input, authority) {
+            const r = ordinaryCancellation(input), digest = ordinaryCancellationDigest(input), old = s.requests.get(r.requestId);
+            if (old) {
+                if (old.digest !== digest)
+                    throw Error("immutable ordinary cancellation ID");
+                return freeze(detached(old.result));
+            }
+            if (r.bindingDigest !== s.bindingDigest || r.expectedRevision !== s.revision)
+                throw Error("stale original ordinary controller CAS");
+            if (!authority || authority.bindingDigest !== s.bindingDigest || !authority.requestDigests.includes(digest))
+                throw Error("independent exact ordinary cancellation authority required");
+            const row = s.rows.get(r.target.executionId), handle = s.handles.get(r.target.executionId);
+            if (!row || dataDigest(row.target) !== dataDigest(r.target) || row.state !== "active" || !handle)
+                throw Error("original live child handle unavailable; no recovery");
+            if (s.requests.size >= 1024)
+                throw Error("ordinary cancellation capacity exhausted");
+            // Synchronous original-handle operation: CAS cannot yield between checking and requesting abort.
+            const result = { state: "abort-requested", target: r.target, revision: ++s.revision, completion: "pending-original-caller", durability: "process-local" };
+            s.requests.set(r.requestId, { digest, result });
+            row.abortRequested = true;
+            handle.abort();
+            return freeze(detached(result));
+        } });
+    sessions.set(session, port);
+    ports.set(port, s);
+}
+/** Only the original session object can retrieve its retained port; spreading/copying cannot. */
+export function ordinaryChildrenFor(session) { const p = sessions.get(session); if (!p)
+    throw Error("original grants session required"); ports.get(p).enabled = true; return p; }
+/** Associate the actual extension API object at factory creation, never a label or path. */
+export function associateOrdinaryHost(host, session) { initializeOrdinaryChildren(session); const p = sessions.get(session); if (!p || sessions.has(host))
+    throw Error("original unbound extension host required"); sessions.set(host, p); }
+export function retainSessionChild(session, input, caller) { const p = sessions.get(session); if (!p)
+    return undefined; const s = ports.get(p); if (!s.enabled) {
+    s.coverageGap = true;
+    return undefined;
+} return retainOrdinaryChild(p, input, caller); }
+/** Internal host control seam, not a model tool or recovered capability. Reads never call it. */
+export function holdOrdinaryDispatch(port, key) {
+    const s = ports.get(port);
+    if (!s || !sha(key))
+        throw Error("original ordinary boundary required");
+    if (s.coverageGap || [...s.rows.values()].some(r => r.state !== "active" && r.boundary !== "not-assessed"))
+        throw Error("ordinary boundary unavailable; no recovery");
+    if (!s.holds.has(key)) {
+        if (s.holds.size >= 32)
+            throw Error("ordinary boundary capacity exhausted");
+        s.holds.add(key);
+        s.revision++;
+    }
+    return Object.freeze({ ready: () => port.quiescent(), release: () => { if (s.holds.delete(key))
+            s.revision++; } });
+}
+/** Extension executor seam; never exported through the package root or model tools. */
+export function retainOrdinaryChild(port, input, caller) {
+    const s = ports.get(port);
+    if (!s)
+        throw Error("original ordinary controller required");
+    const t = target(input);
+    if (s.holds.size)
+        throw Error("ordinary dispatch held at original control boundary");
+    if (s.rows.has(t.executionId) || s.rows.size >= 1024)
+        throw Error("ordinary occurrence reused or capacity exhausted");
+    const abort = new AbortController(), row = { target: t, state: "active", abortRequested: false, control: "not-assessed", boundary: "not-assessed", outcome: null };
+    s.rows.set(t.executionId, row);
+    s.handles.set(t.executionId, abort);
+    s.revision++;
+    let done = false;
+    return { signal: caller ? AbortSignal.any([caller, abort.signal]) : abort.signal,
+        settle(outcome, control, boundary = control) { if (done)
+            throw Error("original child already settled"); done = true; row.outcome = detached(outcome); row.control = control; row.boundary = boundary; row.state = boundary === "unknown" ? "unknown" : "settled"; s.handles.delete(t.executionId); s.revision++; } };
+}
+//# sourceMappingURL=ordinary-children.js.map

package/dist/ordinary-children.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ordinary-children.js","sourceRoot":"","sources":["../src/ordinary-children.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAOrD,MAAM,QAAQ,GAAC,IAAI,OAAO,EAA2B,EAAC,KAAK,GAAC,IAAI,OAAO,EAAgB,CAAC;AACxF,MAAM,EAAE,GAAC,CAAC,CAAS,EAAC,EAAE,CAAA,OAAO,CAAC,KAAG,QAAQ,IAAE,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7E,SAAS,MAAM,CAAC,KAAoB,IAAE,MAAM,CAAC,GAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA,YAAY,CAAC,CAAC,EAAC,CAAC,aAAa,EAAC,mBAAmB,EAAC,YAAY,CAAC,CAAC,CAAC,CAAA,IAAG,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,IAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,KAAG,IAAI,IAAE,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,IAAE,CAAC,CAAC,CAAC,CAAC,UAAU,KAAG,IAAI,IAAE,OAAO,CAAC,CAAC,UAAU,KAAG,QAAQ,IAAE,CAAC,CAAC,UAAU,CAAC,MAAM,GAAC,CAAC,IAAE,CAAC,CAAC,UAAU,CAAC,MAAM,IAAE,GAAG,CAAC;IAAC,MAAM,KAAK,CAAC,6CAA6C,CAAC,CAAC,CAAA,OAAO,CAAC,CAAC,CAAA,CAAC;AACjZ,MAAM,UAAU,oBAAoB,CAAC,KAA0B,IAAE,MAAM,CAAC,GAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA,YAAY,CAAC,CAAC,EAAC,CAAC,SAAS,EAAC,WAAW,EAAC,eAAe,EAAC,kBAAkB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC,OAAO,KAAG,oBAAoB,IAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,IAAE,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAE,CAAC,CAAC,gBAAgB,GAAC,CAAC;IAAC,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAA,OAAO,MAAM,CAAC,EAAC,GAAG,CAAC,EAAC,MAAM,EAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAC,CAAC,CAAC,CAAA,CAAC;AACvZ,MAAM,CAAC,MAAM,0BAA0B,GAAC,CAAC,CAAsB,EAAC,EAAE,CAAA,UAAU,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC;AAEtG,MAAM,CAAC,MAAM,kBAAkB,GAAC,CAAC,CAAS,EAAuB,EAAE,CAAA,OAAO,CAAC,KAAG,QAAQ,IAAE,CAAC,KAAG,IAAI,IAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AAC/G,uGAAuG;AACvG,SAAS,0BAA0B,CAAC,OAAc;IAChD,IAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QAAC,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5E,MAAM,CAAC,GAAO,EAAC,KAAK,EAAC,IAAI,GAAG,EAAE,EAAC,OAAO,EAAC,KAAK,EAAC,WAAW,EAAC,KAAK,EAAC,aAAa,EAAC,UAAU,CAAC,EAAC,UAAU,EAAC,UAAU,EAAE,EAAC,CAAC,EAAC,QAAQ,EAAC,CAAC,EAAC,IAAI,EAAC,IAAI,GAAG,EAAE,EAAC,OAAO,EAAC,IAAI,GAAG,EAAE,EAAC,QAAQ,EAAC,IAAI,GAAG,EAAE,EAAC,CAAC;IACnL,MAAM,IAAI,GAAkB,MAAM,CAAC,MAAM,CAAC,EAAC,aAAa,EAAC,CAAC,CAAC,aAAa;QACtE,SAAS,EAAC,GAAE,EAAE,CAAA,CAAC,CAAC,CAAC,WAAW,IAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,KAAG,SAAS,IAAE,CAAC,CAAC,QAAQ,KAAG,cAAc,CAAC;QAC7G,OAAO,EAAC,GAAE,EAAE,CAAA,MAAM,CAAC,QAAQ,CAAC,EAAC,aAAa,EAAC,CAAC,CAAC,aAAa,EAAC,QAAQ,EAAC,CAAC,CAAC,QAAQ,EAAC,QAAQ,EAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAC,SAAS,EAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA,CAAC,CAAA,wBAAwB,CAAA,CAAC,CAAA,MAAM,EAAC,QAAQ,EAAC,CAAC,CAAC,WAAW,CAAA,CAAC,CAAA,0BAA0B,CAAA,CAAC,CAAA,oCAAoC,EAAC,SAAS,EAAC,kBAAkB,EAAC,QAAQ,EAAC,aAAa,EAAC,UAAU,EAAC,cAAc,EAAC,CAAC,CAAC;QAC3U,MAAM,CAAC,KAA0B,EAAC,SAAgC;YAChE,MAAM,CAAC,GAAC,oBAAoB,CAAC,KAAK,CAAC,EAAC,MAAM,GAAC,0BAA0B,CAAC,KAAK,CAAC,EAAC,GAAG,GAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC7G,IAAG,GAAG,EAAC,CAAC;gBAAA,IAAG,GAAG,CAAC,MAAM,KAAG,MAAM;oBAAC,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;gBAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;YAAA,CAAC;YACtH,IAAG,CAAC,CAAC,aAAa,KAAG,CAAC,CAAC,aAAa,IAAE,CAAC,CAAC,gBAAgB,KAAG,CAAC,CAAC,QAAQ;gBAAC,MAAM,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5H,IAAG,CAAC,SAAS,IAAE,SAAS,CAAC,aAAa,KAAG,CAAC,CAAC,aAAa,IAAE,CAAC,SAAS,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAC,MAAM,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAC/K,MAAM,GAAG,GAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAC,MAAM,GAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACtF,IAAG,CAAC,GAAG,IAAE,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,KAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAE,GAAG,CAAC,KAAK,KAAG,QAAQ,IAAE,CAAC,MAAM;gBAAC,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;YACzJ,IAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAE,IAAI;gBAAC,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC;YACjF,iGAAiG;YACjG,MAAM,MAAM,GAAC,EAAC,KAAK,EAAC,iBAAiB,EAAC,MAAM,EAAC,CAAC,CAAC,MAAM,EAAC,QAAQ,EAAC,EAAE,CAAC,CAAC,QAAQ,EAAC,UAAU,EAAC,yBAAyB,EAAC,UAAU,EAAC,eAAe,EAAC,CAAC;YAC7I,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC,CAAC;YAAA,GAAG,CAAC,cAAc,GAAC,IAAI,CAAC;YAAA,MAAM,CAAC,KAAK,EAAE,CAAC;YAAA,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QACrH,CAAC,EAAC,CAAC,CAAC;IACN,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAC,IAAI,CAAC,CAAC;IAAA,KAAK,CAAC,GAAG,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AACD,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CAAC,OAAc,IAAoB,MAAM,CAAC,GAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC;IAAC,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAA,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,OAAO,GAAC,IAAI,CAAC,CAAA,OAAO,CAAC,CAAC,CAAA,CAAC;AAC/L,4FAA4F;AAC5F,MAAM,UAAU,qBAAqB,CAAC,IAAW,EAAC,OAAc,IAAE,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAA,MAAM,CAAC,GAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC,IAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;IAAC,MAAM,KAAK,CAAC,0CAA0C,CAAC,CAAC,CAAA,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC,CAAA,CAAC;AAC5O,MAAM,UAAU,kBAAkB,CAAC,OAAc,EAAC,KAAoB,EAAC,MAAmB,IAAE,MAAM,CAAC,GAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC;IAAC,OAAO,SAAS,CAAC,CAAA,MAAM,CAAC,GAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAA,IAAG,CAAC,CAAC,CAAC,OAAO,EAAC,CAAC;IAAA,CAAC,CAAC,WAAW,GAAC,IAAI,CAAC;IAAA,OAAO,SAAS,CAAC;AAAA,CAAC,CAAA,OAAO,mBAAmB,CAAC,CAAC,EAAC,KAAK,EAAC,MAAM,CAAC,CAAC,CAAA,CAAC;AACvQ,iGAAiG;AACjG,MAAM,UAAU,oBAAoB,CAAC,IAAqB,EAAC,GAAU;IACpE,MAAM,CAAC,GAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAAA,IAAG,CAAC,CAAC,IAAE,CAAC,GAAG,CAAC,GAAG,CAAC;QAAC,MAAM,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAC5F,IAAG,CAAC,CAAC,WAAW,IAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,KAAG,QAAQ,IAAE,CAAC,CAAC,QAAQ,KAAG,cAAc,CAAC;QAAC,MAAM,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC1J,IAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAC,CAAC;QAAA,IAAG,CAAC,CAAC,KAAK,CAAC,IAAI,IAAE,EAAE;YAAC,MAAM,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAAA,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAAA,CAAC,CAAC,QAAQ,EAAE,CAAC;IAAA,CAAC;IAC7H,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,KAAK,EAAC,GAAE,EAAE,CAAA,IAAI,CAAC,SAAS,EAAE,EAAC,OAAO,EAAC,GAAE,EAAE,GAAC,IAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;YAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC,CAAC;AACvG,CAAC;AACD,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,IAAqB,EAAC,KAAoB,EAAC,MAAmB;IAChG,MAAM,CAAC,GAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAAA,IAAG,CAAC,CAAC;QAAC,MAAM,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAAA,MAAM,CAAC,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACzG,IAAG,CAAC,CAAC,KAAK,CAAC,IAAI;QAAC,MAAM,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACnF,IAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,IAAE,CAAC,CAAC,IAAI,CAAC,IAAI,IAAE,IAAI;QAAC,MAAM,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAChH,MAAM,KAAK,GAAC,IAAI,eAAe,EAAE,EAAC,GAAG,GAAK,EAAC,MAAM,EAAC,CAAC,EAAC,KAAK,EAAC,QAAQ,EAAC,cAAc,EAAC,KAAK,EAAC,OAAO,EAAC,cAAc,EAAC,QAAQ,EAAC,cAAc,EAAC,OAAO,EAAC,IAAI,EAAC,CAAC;IAAA,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAC,GAAG,CAAC,CAAC;IAAA,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAC,KAAK,CAAC,CAAC;IAAA,CAAC,CAAC,QAAQ,EAAE,CAAC;IACnO,IAAI,IAAI,GAAC,KAAK,CAAC;IAAA,OAAO,EAAC,MAAM,EAAC,MAAM,CAAA,CAAC,CAAA,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,MAAM;QACtF,MAAM,CAAC,OAAe,EAAC,OAAoB,EAAC,WAAsB,OAAO,IAAE,IAAG,IAAI;YAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC,CAAA,IAAI,GAAC,IAAI,CAAC,CAAA,GAAG,CAAC,OAAO,GAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA,GAAG,CAAC,OAAO,GAAC,OAAO,CAAC,CAAA,GAAG,CAAC,QAAQ,GAAC,QAAQ,CAAC,CAAA,GAAG,CAAC,KAAK,GAAC,QAAQ,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC,CAAA,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAA,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA,CAAC,EAAC,CAAC;AAC1T,CAAC"}

package/dist/producer-ipc-contract.d.ts

@@ -0,0 +1,29 @@
+import type { AttemptDemand } from "./resource-budget.ts";
+export declare const PRODUCER_IPC_LIMITS: Readonly<{
+    frameBytes: 1024;
+    referenceBytes: 128;
+    childMs: 3000;
+    graceMs: 50;
+    maxElapsedMs: 30000;
+}>;
+export interface ProducerIpcBinding {
+    version: "producer-ipc-v1";
+    budgetDigest: string;
+    orderId: string;
+    experimentId: string;
+    executionId: string;
+    charterSha256: string;
+    invocationId: string;
+}
+export interface ProducerIpcReferences {
+    claimRef: string;
+    responseRef: string;
+}
+export declare function ipcShape(value: unknown, keys: readonly string[]): asserts value is Record<string, unknown>;
+export declare function producerIpcBinding(value: ProducerIpcBinding): Readonly<ProducerIpcBinding>;
+export declare const producerIpcBindingDigest: (value: ProducerIpcBinding) => string;
+export declare const producerIpcFrame: (value: ProducerIpcBinding) => Buffer;
+/** Existing v4 reservation schema, not a new model/effort/skills experiment operation. */
+export declare function producerIpcDemand(value: ProducerIpcBinding): AttemptDemand;
+export declare function ipcReferences(value: ProducerIpcReferences): Readonly<ProducerIpcReferences>;
+//# sourceMappingURL=producer-ipc-contract.d.ts.map

package/dist/producer-ipc-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"producer-ipc-contract.d.ts","sourceRoot":"","sources":["../src/producer-ipc-contract.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAC1D,eAAO,MAAM,mBAAmB;;;;;;EAAuG,CAAC;AACxI,MAAM,WAAW,kBAAkB;IAAG,OAAO,EAAC,iBAAiB,CAAC;IAAC,YAAY,EAAC,MAAM,CAAC;IAAC,OAAO,EAAC,MAAM,CAAC;IAAC,YAAY,EAAC,MAAM,CAAC;IAAC,WAAW,EAAC,MAAM,CAAC;IAAC,aAAa,EAAC,MAAM,CAAC;IAAC,YAAY,EAAC,MAAM,CAAA;CAAE;AAC1L,MAAM,WAAW,qBAAqB;IAAG,QAAQ,EAAC,MAAM,CAAC;IAAC,WAAW,EAAC,MAAM,CAAA;CAAE;AAG9E,wBAAgB,QAAQ,CAAC,KAAK,EAAC,OAAO,EAAE,IAAI,EAAC,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAC,OAAO,CAAC,CAEvG;AACD,wBAAgB,kBAAkB,CAAC,KAAK,EAAC,kBAAkB,GAAE,QAAQ,CAAC,kBAAkB,CAAC,CAIxF;AACD,eAAO,MAAM,wBAAwB,GAAI,OAAM,kBAAkB,WAAyF,CAAC;AAC3J,eAAO,MAAM,gBAAgB,GAAI,OAAM,kBAAkB,KAAE,MAAkG,CAAC;AAC9J,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAAC,KAAK,EAAC,kBAAkB,GAAE,aAAa,CAExE;AACD,wBAAgB,aAAa,CAAC,KAAK,EAAC,qBAAqB,GAAE,QAAQ,CAAC,qBAAqB,CAAC,CAGzF"}

package/dist/producer-ipc-contract.js

@@ -0,0 +1,29 @@
+import { createHash } from "node:crypto";
+import { isExecutionId } from "./execution-id.js";
+export const PRODUCER_IPC_LIMITS = Object.freeze({ frameBytes: 1024, referenceBytes: 128, childMs: 3000, graceMs: 50, maxElapsedMs: 30000 });
+const id = (v) => typeof v === "string" && /^[a-zA-Z0-9:_-]{1,128}$/.test(v);
+const hash = (v) => typeof v === "string" && /^[a-f0-9]{64}$/.test(v);
+export function ipcShape(value, keys) {
+    if (!value || typeof value !== "object" || ![Object.prototype, null].includes(Object.getPrototypeOf(value)) || Reflect.ownKeys(value).length !== keys.length || keys.some(k => { const d = Object.getOwnPropertyDescriptor(value, k); return !d || !d.enumerable || !Object.hasOwn(d, "value"); }))
+        throw new TypeError("closed producer IPC data required");
+}
+export function producerIpcBinding(value) {
+    ipcShape(value, ["version", "budgetDigest", "orderId", "experimentId", "executionId", "charterSha256", "invocationId"]);
+    if (value.version !== "producer-ipc-v1" || !hash(value.budgetDigest) || !hash(value.charterSha256) || !isExecutionId(value.executionId) || ![value.orderId, value.experimentId, value.invocationId].every(id))
+        throw new TypeError("exact producer IPC binding required");
+    return Object.freeze({ version: value.version, budgetDigest: value.budgetDigest, orderId: value.orderId, experimentId: value.experimentId, executionId: value.executionId, charterSha256: value.charterSha256, invocationId: value.invocationId });
+}
+export const producerIpcBindingDigest = (value) => createHash("sha256").update(JSON.stringify(producerIpcBinding(value))).digest("hex");
+export const producerIpcFrame = (value) => Buffer.from(JSON.stringify({ id: producerIpcBinding(value).invocationId, sequence: 1 }) + "\n");
+/** Existing v4 reservation schema, not a new model/effort/skills experiment operation. */
+export function producerIpcDemand(value) {
+    const b = producerIpcBinding(value);
+    return { attemptId: b.executionId, orderId: b.orderId, experimentId: b.experimentId, kind: "primary", parentAttemptId: null, inputBytes: Buffer.byteLength(JSON.stringify(b)), inputDigest: producerIpcBindingDigest(b) };
+}
+export function ipcReferences(value) {
+    ipcShape(value, ["claimRef", "responseRef"]);
+    if (!id(value.claimRef) || !id(value.responseRef))
+        throw new TypeError("bounded evidence references required");
+    return Object.freeze({ claimRef: value.claimRef, responseRef: value.responseRef });
+}
+//# sourceMappingURL=producer-ipc-contract.js.map

package/dist/producer-ipc-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"producer-ipc-contract.js","sourceRoot":"","sources":["../src/producer-ipc-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAElD,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,UAAU,EAAC,IAAI,EAAE,cAAc,EAAC,GAAG,EAAE,OAAO,EAAC,IAAI,EAAE,OAAO,EAAC,EAAE,EAAE,YAAY,EAAC,KAAK,EAAE,CAAC,CAAC;AAGxI,MAAM,EAAE,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjG,MAAM,IAAI,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAC1F,MAAM,UAAU,QAAQ,CAAC,KAAa,EAAE,IAAsB;IAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,EAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,GAAC,MAAM,CAAC,GAAC,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAC,CAAC,CAAC,CAAC,CAAA,OAAO,CAAC,CAAC,IAAE,CAAC,CAAC,CAAC,UAAU,IAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAC,OAAO,CAAC,CAAC,CAAA,CAAC,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,mCAAmC,CAAC,CAAC;AACjV,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,QAAQ,CAAC,KAAK,EAAC,CAAC,SAAS,EAAC,cAAc,EAAC,SAAS,EAAC,cAAc,EAAC,aAAa,EAAC,eAAe,EAAC,cAAc,CAAC,CAAC,CAAC;IACjH,IAAI,KAAK,CAAC,OAAO,KAAG,iBAAiB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,EAAC,KAAK,CAAC,YAAY,EAAC,KAAK,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,qCAAqC,CAAC,CAAC;IACtQ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,YAAY,EAAC,KAAK,CAAC,YAAY,EAAC,OAAO,EAAC,KAAK,CAAC,OAAO,EAAC,YAAY,EAAC,KAAK,CAAC,YAAY,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,aAAa,EAAC,KAAK,CAAC,aAAa,EAAC,YAAY,EAAC,KAAK,CAAC,YAAY,EAAC,CAAC,CAAC;AACtO,CAAC;AACD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,KAAwB,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3J,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAwB,EAAS,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,EAAE,EAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,YAAY,EAAC,QAAQ,EAAC,CAAC,EAAC,CAAC,GAAC,IAAI,CAAC,CAAC;AAC9J,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAAC,KAAwB;IACxD,MAAM,CAAC,GAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAAA,OAAO,EAAC,SAAS,EAAC,CAAC,CAAC,WAAW,EAAC,OAAO,EAAC,CAAC,CAAC,OAAO,EAAC,YAAY,EAAC,CAAC,CAAC,YAAY,EAAC,IAAI,EAAC,SAAS,EAAC,eAAe,EAAC,IAAI,EAAC,UAAU,EAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAC,WAAW,EAAC,wBAAwB,CAAC,CAAC,CAAC,EAAC,CAAC;AAC/O,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAA2B;IACvD,QAAQ,CAAC,KAAK,EAAC,CAAC,UAAU,EAAC,aAAa,CAAC,CAAC,CAAC;IAAA,IAAG,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAE,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;QAAC,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IACtJ,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,KAAK,CAAC,QAAQ,EAAC,WAAW,EAAC,KAAK,CAAC,WAAW,EAAC,CAAC,CAAC;AAChF,CAAC"}

package/dist/producer-ipc.d.ts

@@ -0,0 +1,55 @@
+import { Readable } from "node:stream";
+import { type ResourcePermit, type openResourceBudget } from "./resource-budget.ts";
+import { type ChildRunResult } from "./run-child.ts";
+import { type ProducerIpcBinding, type ProducerIpcReferences } from "./producer-ipc-contract.ts";
+export { producerIpcBinding, producerIpcBindingDigest, producerIpcDemand, PRODUCER_IPC_LIMITS, type ProducerIpcBinding, type ProducerIpcReferences } from "./producer-ipc-contract.ts";
+type Owner = ReturnType<typeof openResourceBudget>;
+export interface ProducerIpcContext {
+    readonly binding: Readonly<ProducerIpcBinding>;
+    readonly signal: AbortSignal;
+}
+export interface ProducerIpcHost {
+    readonly binding: Readonly<ProducerIpcBinding>;
+}
+interface HostState {
+    owner: Owner;
+    exchange: (frames: Readable, context: ProducerIpcContext) => Promise<ProducerIpcReferences>;
+    used: boolean;
+}
+/** Trusted host-only capability constructor, NOT approval/entitlement discovery. */
+export declare function createProducerIpcHost(input: {
+    owner: Owner;
+    binding: ProducerIpcBinding;
+    exchange: HostState["exchange"];
+}): ProducerIpcHost;
+export interface ProducerIpcSnapshot {
+    readonly binding: Readonly<ProducerIpcBinding>;
+    readonly outcome: "pending" | "completed" | "failed" | "cancelled" | "timed-out";
+    readonly reason: null | "ADMISSION_FAILED" | "RUNTIME_FAILED" | "CHILD_FAILED" | "FRAME_INVALID" | "HOST_FAILED" | "CANCELLED" | "DEADLINE";
+    readonly child: Readonly<ChildRunResult> | null;
+    readonly childState: "pending" | "not-spawned" | "settled" | "unknown";
+    readonly hostState: "not-called" | "pending" | "acknowledged" | "failed";
+    readonly frameSha256: string | null;
+    readonly references: Readonly<ProducerIpcReferences> | null;
+    readonly settlement: "pending" | "acknowledged" | "failed-or-unknown";
+    readonly acceptance: "not-assessed";
+}
+export interface ProducerIpcRun {
+    readonly started: Promise<"spawned" | "not-spawned">;
+    readonly readiness: Promise<"frame-ready" | "not-ready">;
+    readonly child: Promise<ChildRunResult | null>;
+    /** Bounded effect observation, NOT a resource-release/child-settlement receipt. */
+    readonly result: Promise<ProducerIpcSnapshot>;
+    /** May remain pending if original child, host or required accounting does not acknowledge. */
+    readonly completion: Promise<ProducerIpcSnapshot>;
+    inspect(): ProducerIpcSnapshot;
+}
+export declare function startProducerIpc(input: {
+    owner: Owner;
+    permit: ResourcePermit;
+    binding: ProducerIpcBinding;
+    host: ProducerIpcHost;
+    signal: AbortSignal;
+    timeoutMs: number;
+}): Promise<ProducerIpcRun>;
+//# sourceMappingURL=producer-ipc.d.ts.map

package/dist/producer-ipc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"producer-ipc.d.ts","sourceRoot":"","sources":["../src/producer-ipc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAGvC,OAAO,EAAuB,KAAK,cAAc,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAEzG,OAAO,EAAY,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAA6I,KAAK,kBAAkB,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AAC5O,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,KAAK,kBAAkB,EAAE,KAAK,qBAAqB,EAAE,MAAM,4BAA4B,CAAC;AACvL,KAAK,KAAK,GAAG,UAAU,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACnD,MAAM,WAAW,kBAAkB;IAAG,QAAQ,CAAC,OAAO,EAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAC,WAAW,CAAA;CAAE;AAClH,MAAM,WAAW,eAAe;IAAG,QAAQ,CAAC,OAAO,EAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAA;CAAE;AAClF,UAAU,SAAS;IAAG,KAAK,EAAC,KAAK,CAAC;IAAC,QAAQ,EAAC,CAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,kBAAkB,KAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAAC,IAAI,EAAC,OAAO,CAAA;CAAE;AAExI,oFAAoF;AACpF,wBAAgB,qBAAqB,CAAC,KAAK,EAAC;IAAC,KAAK,EAAC,KAAK,CAAC;IAAA,OAAO,EAAC,kBAAkB,CAAC;IAAA,QAAQ,EAAC,SAAS,CAAC,UAAU,CAAC,CAAA;CAAC,GAAE,eAAe,CAKnI;AACD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAC,SAAS,GAAC,WAAW,GAAC,QAAQ,GAAC,WAAW,GAAC,WAAW,CAAC;IACxE,QAAQ,CAAC,MAAM,EAAC,IAAI,GAAC,kBAAkB,GAAC,gBAAgB,GAAC,cAAc,GAAC,eAAe,GAAC,aAAa,GAAC,WAAW,GAAC,UAAU,CAAC;IAC7H,QAAQ,CAAC,KAAK,EAAC,QAAQ,CAAC,cAAc,CAAC,GAAC,IAAI,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAC,SAAS,GAAC,aAAa,GAAC,SAAS,GAAC,SAAS,CAAC;IAChE,QAAQ,CAAC,SAAS,EAAC,YAAY,GAAC,SAAS,GAAC,cAAc,GAAC,QAAQ,CAAC;IAClE,QAAQ,CAAC,WAAW,EAAC,MAAM,GAAC,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAC,QAAQ,CAAC,qBAAqB,CAAC,GAAC,IAAI,CAAC;IACzD,QAAQ,CAAC,UAAU,EAAC,SAAS,GAAC,cAAc,GAAC,mBAAmB,CAAC;IACjE,QAAQ,CAAC,UAAU,EAAC,cAAc,CAAC;CACpC;AACD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAC,OAAO,CAAC,SAAS,GAAC,aAAa,CAAC,CAAC;IAClD,QAAQ,CAAC,SAAS,EAAC,OAAO,CAAC,aAAa,GAAC,WAAW,CAAC,CAAC;IACtD,QAAQ,CAAC,KAAK,EAAC,OAAO,CAAC,cAAc,GAAC,IAAI,CAAC,CAAC;IAC5C,mFAAmF;IACnF,QAAQ,CAAC,MAAM,EAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7C,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,EAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACjD,OAAO,IAAG,mBAAmB,CAAC;CAC/B;AAID,wBAAsB,gBAAgB,CAAC,KAAK,EAAC;IAAC,KAAK,EAAC,KAAK,CAAC;IAAA,MAAM,EAAC,cAAc,CAAC;IAAA,OAAO,EAAC,kBAAkB,CAAC;IAAA,IAAI,EAAC,eAAe,CAAC;IAAA,MAAM,EAAC,WAAW,CAAC;IAAA,SAAS,EAAC,MAAM,CAAA;CAAC,GAAE,OAAO,CAAC,cAAc,CAAC,CA6D5L"}