sealbridge 0.0.1 → 0.1.0

package/dist/packages/runtime/dist/approval-providers.d.ts

@@ -0,0 +1,97 @@
+import type { Readable, Writable } from 'node:stream';
+import type { ApprovalReceipt, Gate, KeyPair } from '@acp/core';
+import type { OwnerPolicy } from './policy.js';
+/** Caps a worker applies before it accepts a contract or spends owner credentials. */
+export interface WorkerAcceptancePolicy {
+    /** When non-empty, only these requester owner DIDs may be accepted. */
+    allowedRequesterDids?: readonly string[];
+    /** Explicit opt-in to accept every requester. Takes precedence over the allowlist. */
+    allowAnyRequester?: boolean;
+    maxInputTokens?: number;
+    maxOutputTokens?: number;
+    maxToolInvocations?: number;
+    maxWallClockSeconds?: number;
+    maxConcurrentTasks?: number;
+    /** How many PROPOSE envelopes one requester DID may submit per minute. */
+    maxTasksPerRequesterPerMinute?: number;
+    /** Replaces the one-minute window when set. */
+    requesterRateLimit?: {
+        maxRequests: number;
+        windowMs: number;
+    };
+    /** Register the worker AgentCard in the relay directory. Default is off. */
+    publishToRegistry?: boolean;
+}
+export declare class ProposalRejectedError extends Error {
+    readonly reason: string;
+    readonly approved = false;
+    readonly code = "PROPOSAL_REJECTED";
+    constructor(reason: string);
+}
+/** Returns approved:false with a reason when a proposal exceeds the worker policy. */
+export declare function evaluateContractAcceptance(policy: WorkerAcceptancePolicy | undefined, details: unknown, from?: string): {
+    approved: true;
+} | {
+    approved: false;
+    reason: string;
+};
+export interface ApprovalRequest {
+    taskId: string;
+    gate: Gate;
+    target: unknown;
+    details?: unknown;
+    signal?: AbortSignal;
+}
+export interface ApprovalProvider {
+    approve(request: ApprovalRequest): Promise<ApprovalReceipt>;
+}
+export declare class InteractiveCliApprovalProvider implements ApprovalProvider {
+    readonly owner: KeyPair;
+    readonly options: {
+        input?: Readable;
+        output?: Writable;
+    };
+    constructor(owner: KeyPair, options?: {
+        input?: Readable;
+        output?: Writable;
+    });
+    approve(request: ApprovalRequest): Promise<ApprovalReceipt>;
+}
+export declare class PolicyAutoApprovalProvider implements ApprovalProvider {
+    readonly owner: KeyPair;
+    readonly policy: OwnerPolicy;
+    readonly options: {
+        yes?: boolean;
+        confirmedGates?: Gate[];
+        acceptance?: WorkerAcceptancePolicy;
+    };
+    constructor(owner: KeyPair, policy?: OwnerPolicy, options?: {
+        yes?: boolean;
+        confirmedGates?: Gate[];
+        acceptance?: WorkerAcceptancePolicy;
+    });
+    approve(r: ApprovalRequest): Promise<ApprovalReceipt>;
+}
+export interface WebhookApprovalProviderOptions {
+    url: string;
+    ownerDid?: string;
+    fetch?: typeof fetch;
+    timeoutMs?: number;
+    /**
+     * `signed-receipt` (default) posts a signed approval request and requires a
+     * signed ApprovalReceipt. `owner-decision` posts
+     * `{ taskId, summaryHash, reason, approverDid }` and signs locally when the
+     * webhook returns `{ approved: true }`.
+     */
+    response?: 'signed-receipt' | 'owner-decision';
+}
+/** Reject webhook URLs that are not plain HTTP(S) endpoints. */
+export declare function assertApprovalWebhookUrl(value: string): void;
+export declare class WebhookApprovalProvider implements ApprovalProvider {
+    readonly owner: KeyPair;
+    readonly options: WebhookApprovalProviderOptions;
+    constructor(owner: KeyPair, options: WebhookApprovalProviderOptions);
+    approve(r: ApprovalRequest): Promise<ApprovalReceipt>;
+    /** Sign with the owner key only when the webhook explicitly approves. */
+    private approveOwnerDecision;
+}

package/dist/packages/runtime/dist/approval-providers.js

@@ -0,0 +1,269 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createInterface } from 'node:readline';
+import { signApproval, signPayload, verifyApproval, digest } from '../../core/dist/index.js';
+export class ProposalRejectedError extends Error {
+    reason;
+    approved = false;
+    code = 'PROPOSAL_REJECTED';
+    constructor(reason) {
+        super('PROPOSAL_REJECTED: ' + reason);
+        this.reason = reason;
+        this.name = 'ProposalRejectedError';
+    }
+}
+const budgetFields = [
+    'maxInputTokens',
+    'maxOutputTokens',
+    'maxToolInvocations',
+    'maxWallClockSeconds',
+];
+function proposedManifest(details) {
+    if (!details || typeof details !== 'object')
+        return undefined;
+    const manifest = details.manifest;
+    if (!manifest || typeof manifest !== 'object' || Array.isArray(manifest))
+        return undefined;
+    return manifest;
+}
+function envelopeFrom(details, from) {
+    if (typeof from === 'string' && from.length > 0)
+        return from;
+    if (!details || typeof details !== 'object')
+        return undefined;
+    const value = details.from;
+    return typeof value === 'string' && value.length > 0 ? value : undefined;
+}
+function budgetLimit(policy, field) {
+    return policy[field];
+}
+/** Returns approved:false with a reason when a proposal exceeds the worker policy. */
+export function evaluateContractAcceptance(policy, details, from) {
+    if (!policy)
+        return { approved: true };
+    const manifest = proposedManifest(details);
+    const limited = budgetFields.some((field) => policy[field] !== undefined);
+    if (limited && !manifest)
+        return { approved: false, reason: 'manifest is missing' };
+    if (manifest && limited) {
+        const budget = manifest.budget;
+        if (!budget || typeof budget !== 'object' || Array.isArray(budget))
+            return { approved: false, reason: 'budget is missing' };
+        for (const field of budgetFields) {
+            const limit = budgetLimit(policy, field);
+            if (limit === undefined)
+                continue;
+            const proposed = budget[field];
+            if (typeof proposed !== 'number' || !Number.isFinite(proposed))
+                return { approved: false, reason: field + ' is missing or not a finite number' };
+            if (proposed > limit)
+                return {
+                    approved: false,
+                    reason: field + ' ' + proposed + ' exceeds worker limit ' + limit,
+                };
+        }
+    }
+    if (manifest && policy.maxWallClockSeconds !== undefined && 'timeoutSeconds' in manifest) {
+        const timeout = manifest.timeoutSeconds;
+        if (typeof timeout !== 'number' || !Number.isFinite(timeout))
+            return { approved: false, reason: 'timeoutSeconds is missing or not a finite number' };
+        if (timeout > policy.maxWallClockSeconds)
+            return {
+                approved: false,
+                reason: 'timeoutSeconds ' +
+                    timeout +
+                    ' exceeds worker limit ' +
+                    policy.maxWallClockSeconds,
+            };
+    }
+    if (policy.allowAnyRequester)
+        return { approved: true };
+    const allow = (policy.allowedRequesterDids ?? []).map((did) => did.trim()).filter(Boolean);
+    if (allow.length === 0)
+        return { approved: true };
+    const ownerDid = manifest?.requester?.ownerDid;
+    const sender = envelopeFrom(details, from);
+    if (typeof sender === 'string' && typeof ownerDid === 'string' && sender !== ownerDid)
+        return {
+            approved: false,
+            reason: 'requester ' + ownerDid + ' does not match envelope from ' + sender,
+        };
+    const authenticated = typeof ownerDid === 'string' && ownerDid.length > 0 ? ownerDid : sender;
+    if (typeof authenticated === 'string' && allow.includes(authenticated))
+        return { approved: true };
+    return {
+        approved: false,
+        reason: 'requester ' + (authenticated ?? 'unknown') + ' is not allowed',
+    };
+}
+export class InteractiveCliApprovalProvider {
+    owner;
+    options;
+    constructor(owner, options = {}) {
+        this.owner = owner;
+        this.options = options;
+    }
+    async approve(request) {
+        const output = this.options.output ?? process.stdout;
+        output.write(JSON.stringify({
+            taskId: request.taskId,
+            gate: request.gate,
+            targetDigest: digest(request.target),
+            target: request.target,
+            details: request.details ?? null,
+        }, null, 2) + '\nApprove [y/N]? ');
+        const rl = createInterface({ input: this.options.input ?? process.stdin, crlfDelay: Infinity });
+        try {
+            const answer = await new Promise((resolve, reject) => {
+                const abort = () => {
+                    cleanup();
+                    reject(new Error('APPROVAL_ABORTED'));
+                };
+                const cleanup = () => request.signal?.removeEventListener('abort', abort);
+                rl.once('line', (line) => {
+                    cleanup();
+                    resolve(line);
+                });
+                rl.once('close', () => {
+                    cleanup();
+                    resolve('');
+                });
+                rl.once('error', (e) => {
+                    cleanup();
+                    reject(e);
+                });
+                request.signal?.addEventListener('abort', abort, { once: true });
+                if (request.signal?.aborted)
+                    abort();
+            });
+            return signApproval(request.taskId, request.gate, request.target, this.owner, /^y(es)?$/i.test(answer.trim()) ? 'APPROVED' : 'REJECTED');
+        }
+        finally {
+            rl.close();
+        }
+    }
+}
+export class PolicyAutoApprovalProvider {
+    owner;
+    policy;
+    options;
+    constructor(owner, policy = {
+        requiredGates: [],
+        autoApprove: ['contract_acceptance', 'final_verification'],
+    }, options = {}) {
+        this.owner = owner;
+        this.policy = policy;
+        this.options = options;
+    }
+    async approve(r) {
+        if (r.gate === 'contract_acceptance') {
+            const decision = evaluateContractAcceptance(this.options.acceptance, r.details);
+            if (!decision.approved)
+                throw new ProposalRejectedError(decision.reason);
+        }
+        const explicit = this.options.confirmedGates?.includes(r.gate);
+        const sensitive = ['external_side_effect', 'budget_increase'].includes(r.gate);
+        if (!explicit &&
+            (sensitive ||
+                this.policy.requiredGates.includes(r.gate) ||
+                (!this.options.yes && !this.policy.autoApprove.includes(r.gate))))
+            throw new Error('HITL_REQUIRED: ' + r.gate);
+        return signApproval(r.taskId, r.gate, r.target, this.owner);
+    }
+}
+/** Reject webhook URLs that are not plain HTTP(S) endpoints. */
+export function assertApprovalWebhookUrl(value) {
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        throw new Error('INVALID_APPROVAL_WEBHOOK_URL');
+    }
+    if ((url.protocol !== 'http:' && url.protocol !== 'https:') || url.username || url.password)
+        throw new Error('INVALID_APPROVAL_WEBHOOK_URL');
+}
+function approvalReason(request) {
+    const details = request.details;
+    if (details && typeof details === 'object' && !Array.isArray(details)) {
+        const reason = details.reason;
+        if (typeof reason === 'string' && reason.length > 0)
+            return reason;
+    }
+    return request.gate;
+}
+export class WebhookApprovalProvider {
+    owner;
+    options;
+    constructor(owner, options) {
+        this.owner = owner;
+        this.options = options;
+        if (options.response === 'owner-decision')
+            assertApprovalWebhookUrl(options.url);
+    }
+    async approve(r) {
+        if (this.options.response === 'owner-decision')
+            return this.approveOwnerDecision(r);
+        const body = signPayload({
+            type: 'ApprovalRequest',
+            taskId: r.taskId,
+            gate: r.gate,
+            target: r.target,
+            targetDigest: digest(r.target),
+            details: r.details ?? null,
+        }, this.owner);
+        const signal = AbortSignal.any([
+            AbortSignal.timeout(this.options.timeoutMs ?? 60000),
+            ...(r.signal ? [r.signal] : []),
+        ]);
+        const response = await (this.options.fetch ?? fetch)(this.options.url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(body),
+            signal,
+            redirect: 'error',
+        });
+        if (!response.ok)
+            throw new Error('APPROVAL_WEBHOOK_FAILED');
+        const receipt = (await response.json());
+        if (!verifyApproval(receipt, this.options.ownerDid ?? this.owner.did, r.taskId, r.gate, r.target))
+            throw new Error('INVALID_APPROVAL_RESPONSE');
+        return receipt;
+    }
+    /** Sign with the owner key only when the webhook explicitly approves. */
+    async approveOwnerDecision(r) {
+        const body = {
+            taskId: r.taskId,
+            summaryHash: digest(r.target),
+            reason: approvalReason(r),
+            approverDid: this.owner.did,
+        };
+        const signal = AbortSignal.any([
+            AbortSignal.timeout(this.options.timeoutMs ?? 60000),
+            ...(r.signal ? [r.signal] : []),
+        ]);
+        const response = await (this.options.fetch ?? fetch)(this.options.url, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(body),
+            signal,
+            redirect: 'error',
+        });
+        if (!response.ok)
+            throw new Error('APPROVAL_REJECTED');
+        let parsed;
+        try {
+            parsed = await response.json();
+        }
+        catch {
+            throw new Error('APPROVAL_REJECTED');
+        }
+        const approved = !!parsed &&
+            typeof parsed === 'object' &&
+            !Array.isArray(parsed) &&
+            parsed.approved === true;
+        if (!approved)
+            throw new Error('APPROVAL_REJECTED');
+        return signApproval(r.taskId, r.gate, r.target, this.owner, 'APPROVED');
+    }
+}
+//# sourceMappingURL=approval-providers.js.map

package/dist/packages/runtime/dist/approval-providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-providers.js","sourceRoot":"","sources":["../src/approval-providers.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAqB9E,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IAGzB;IAFZ,QAAQ,GAAG,KAAK,CAAC;IACjB,IAAI,GAAG,mBAAmB,CAAC;IACpC,YAAqB,MAAc;QACjC,KAAK,CAAC,qBAAqB,GAAG,MAAM,CAAC,CAAC;QADnB,WAAM,GAAN,MAAM,CAAQ;QAEjC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AAMD,MAAM,YAAY,GAAG;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,oBAAoB;IACpB,qBAAqB;CACb,CAAC;AACX,SAAS,gBAAgB,CAAC,OAAgB;IACxC,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,QAAQ,GAAI,OAAkC,CAAC,QAAQ,CAAC;IAC9D,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3F,OAAO,QAA4B,CAAC;AACtC,CAAC;AACD,SAAS,YAAY,CAAC,OAAgB,EAAE,IAAa;IACnD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9D,MAAM,KAAK,GAAI,OAA8B,CAAC,IAAI,CAAC;IACnD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AACD,SAAS,WAAW,CAClB,MAA8B,EAC9B,KAAoC;IAEpC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AACD,sFAAsF;AACtF,MAAM,UAAU,0BAA0B,CACxC,MAA0C,EAC1C,OAAgB,EAChB,IAAa;IAEb,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;IAC1E,IAAI,OAAO,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACpF,IAAI,QAAQ,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAChE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;QAC1D,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACzC,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAClC,MAAM,QAAQ,GAAI,MAAkC,CAAC,KAAK,CAAC,CAAC;YAC5D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAC5D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,GAAG,oCAAoC,EAAE,CAAC;YACnF,IAAI,QAAQ,GAAG,KAAK;gBAClB,OAAO;oBACL,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,KAAK,GAAG,GAAG,GAAG,QAAQ,GAAG,wBAAwB,GAAG,KAAK;iBAClE,CAAC;QACN,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,IAAI,MAAM,CAAC,mBAAmB,KAAK,SAAS,IAAI,gBAAgB,IAAI,QAAQ,EAAE,CAAC;QACzF,MAAM,OAAO,GAAG,QAAQ,CAAC,cAAc,CAAC;QACxC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;YAC1D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAC;QACzF,IAAI,OAAO,GAAG,MAAM,CAAC,mBAAmB;YACtC,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EACJ,iBAAiB;oBACjB,OAAO;oBACP,wBAAwB;oBACxB,MAAM,CAAC,mBAAmB;aAC7B,CAAC;IACN,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACxD,MAAM,KAAK,GAAG,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC;IAC/C,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,MAAM,KAAK,QAAQ;QACnF,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,MAAM,EAAE,YAAY,GAAG,QAAQ,GAAG,gCAAgC,GAAG,MAAM;SAC5E,CAAC;IACJ,MAAM,aAAa,GACjB,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAC1E,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAClG,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,YAAY,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC,GAAG,iBAAiB;KACxE,CAAC;AACJ,CAAC;AAWD,MAAM,OAAO,8BAA8B;IAE9B;IACA;IAFX,YACW,KAAc,EACd,UAAmD,EAAE;QADrD,UAAK,GAAL,KAAK,CAAS;QACd,YAAO,GAAP,OAAO,CAA8C;IAC7D,CAAC;IACJ,KAAK,CAAC,OAAO,CAAC,OAAwB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC;QACrD,MAAM,CAAC,KAAK,CACV,IAAI,CAAC,SAAS,CACZ;YACE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,YAAY,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;YACpC,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;SACjC,EACD,IAAI,EACJ,CAAC,CACF,GAAG,mBAAmB,CACxB,CAAC;QACF,MAAM,EAAE,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QAChG,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3D,MAAM,KAAK,GAAG,GAAG,EAAE;oBACjB,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC;gBACxC,CAAC,CAAC;gBACF,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBAC1E,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;oBACvB,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,IAAI,CAAC,CAAC;gBAChB,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE;oBACpB,OAAO,EAAE,CAAC;oBACV,OAAO,CAAC,EAAE,CAAC,CAAC;gBACd,CAAC,CAAC,CAAC;gBACH,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;oBACrB,OAAO,EAAE,CAAC;oBACV,MAAM,CAAC,CAAC,CAAC,CAAC;gBACZ,CAAC,CAAC,CAAC;gBACH,OAAO,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjE,IAAI,OAAO,CAAC,MAAM,EAAE,OAAO;oBAAE,KAAK,EAAE,CAAC;YACvC,CAAC,CAAC,CAAC;YACH,OAAO,YAAY,CACjB,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,KAAK,EACV,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAC1D,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;IACH,CAAC;CACF;AACD,MAAM,OAAO,0BAA0B;IAE1B;IACA;IAIA;IANX,YACW,KAAc,EACd,SAAsB;QAC7B,aAAa,EAAE,EAAE;QACjB,WAAW,EAAE,CAAC,qBAAqB,EAAE,oBAAoB,CAAC;KAC3D,EACQ,UAIL,EAAE;QATG,UAAK,GAAL,KAAK,CAAS;QACd,WAAM,GAAN,MAAM,CAGd;QACQ,YAAO,GAAP,OAAO,CAIV;IACL,CAAC;IACJ,KAAK,CAAC,OAAO,CAAC,CAAkB;QAC9B,IAAI,CAAC,CAAC,IAAI,KAAK,qBAAqB,EAAE,CAAC;YACrC,MAAM,QAAQ,GAAG,0BAA0B,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;YAChF,IAAI,CAAC,QAAQ,CAAC,QAAQ;gBAAE,MAAM,IAAI,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,SAAS,GAAG,CAAC,sBAAsB,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/E,IACE,CAAC,QAAQ;YACT,CAAC,SAAS;gBACR,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAEnE,MAAM,IAAI,KAAK,CAAC,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC;CACF;AAcD,gEAAgE;AAChE,MAAM,UAAU,wBAAwB,CAAC,KAAa;IACpD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QACzF,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;AACpD,CAAC;AACD,SAAS,cAAc,CAAC,OAAwB;IAC9C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAChC,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,MAAM,MAAM,GAAI,OAAgC,CAAC,MAAM,CAAC;QACxD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,MAAM,CAAC;IACrE,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AACD,MAAM,OAAO,uBAAuB;IAEvB;IACA;IAFX,YACW,KAAc,EACd,OAAuC;QADvC,UAAK,GAAL,KAAK,CAAS;QACd,YAAO,GAAP,OAAO,CAAgC;QAEhD,IAAI,OAAO,CAAC,QAAQ,KAAK,gBAAgB;YAAE,wBAAwB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,CAAkB;QAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,QAAQ,KAAK,gBAAgB;YAAE,OAAO,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,IAAI,GAAG,WAAW,CACtB;YACE,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;SAC3B,EACD,IAAI,CAAC,KAAK,CACX,CAAC;QACF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;YACpD,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM;YACN,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAoB,CAAC;QAC3D,IACE,CAAC,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YAE7F,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,yEAAyE;IACjE,KAAK,CAAC,oBAAoB,CAAC,CAAkB;QACnD,MAAM,IAAI,GAAG;YACX,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAC7B,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;YACzB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;SAC5B,CAAC;QACF,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC;YAC7B,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;YACpD,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SAChC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;YACrE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM;YACN,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,QAAQ,GACZ,CAAC,CAAC,MAAM;YACR,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACrB,MAAiC,CAAC,QAAQ,KAAK,IAAI,CAAC;QACvD,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACpD,OAAO,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IAC1E,CAAC;CACF"}

package/dist/packages/runtime/dist/daily-limit.d.ts

@@ -0,0 +1,2 @@
+/** Host-wide UTC admission counter. Lock contention and corrupt state fail closed. */
+export declare function consumeDailyTask(path: string, limit: number, taskId: string, now?: number): void;

package/dist/packages/runtime/dist/daily-limit.js

@@ -0,0 +1,54 @@
+// SPDX-License-Identifier: Apache-2.0
+import { mkdirSync, readFileSync, writeFileSync, renameSync, unlinkSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { randomUUID } from 'node:crypto';
+/** Host-wide UTC admission counter. Lock contention and corrupt state fail closed. */
+export function consumeDailyTask(path, limit, taskId, now = Date.now()) {
+    if (!Number.isSafeInteger(limit) || limit < 1 || !Number.isFinite(now) || !taskId)
+        throw new Error('INVALID_DAILY_LIMIT');
+    mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+    const lock = path + '.lock', temporary = path + '.' + randomUUID() + '.tmp';
+    try {
+        writeFileSync(lock, '', { flag: 'wx', mode: 0o600 });
+    }
+    catch {
+        throw new Error('DAILY_LIMIT_BUSY: retry later; never remove a live lock');
+    }
+    try {
+        const day = new Date(now).toISOString().slice(0, 10);
+        let state = { version: 1, day, tasks: [] };
+        try {
+            state = JSON.parse(readFileSync(path, 'utf8'));
+        }
+        catch (e) {
+            if (e.code !== 'ENOENT')
+                throw new Error('DAILY_LIMIT_INVALID');
+        }
+        if (state.version !== 1 || !/^\d{4}-\d{2}-\d{2}$/.test(state.day) ||
+            !Array.isArray(state.tasks) || state.tasks.some(t => typeof t !== 'string') ||
+            new Set(state.tasks).size !== state.tasks.length)
+            throw new Error('DAILY_LIMIT_INVALID');
+        if (day < state.day)
+            throw new Error('DAILY_LIMIT_CLOCK_ROLLBACK');
+        if (day > state.day)
+            state = { version: 1, day, tasks: [] };
+        if (state.tasks.includes(taskId))
+            throw new Error('DAILY_TASK_REPLAY');
+        if (state.tasks.length >= limit)
+            throw new Error('DAILY_LIMIT_REACHED');
+        state.tasks.push(taskId);
+        writeFileSync(temporary, JSON.stringify(state), { flag: 'wx', mode: 0o600, flush: true });
+        renameSync(temporary, path);
+    }
+    finally {
+        try {
+            unlinkSync(temporary);
+        }
+        catch (e) {
+            if (e.code !== 'ENOENT')
+                throw e;
+        }
+        unlinkSync(lock);
+    }
+}
+//# sourceMappingURL=daily-limit.js.map

package/dist/packages/runtime/dist/daily-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"daily-limit.js","sourceRoot":"","sources":["../src/daily-limit.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,sFAAsF;AACtF,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAC5F,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM;QAC/E,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;IACzC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,OAAO,EAAE,SAAS,GAAG,IAAI,GAAG,GAAG,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;IAC5E,IAAI,CAAC;QAAC,aAAa,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;IAC7D,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAAC,CAAC;IACrF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,KAAK,GAAsD,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC9F,IAAI,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QACvD,OAAO,CAAC,EAAE,CAAC;YAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAAC,CAAC;QACzG,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YAC7D,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;YAC3E,IAAI,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,KAAK,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC7F,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACnE,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG;YAAE,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;QAC5D,IAAI,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvE,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACxE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1F,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QACzG,UAAU,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/packages/runtime/dist/gateway.d.ts

@@ -0,0 +1,35 @@
+import { ContractMachine, CapabilityGuard } from '@acp/core';
+import type { TaskContract, KeyPair, ApprovalReceipt, CapabilityToken, Capability, Signed, Transition, ContractEvent, Json, SignedEnvelope, RevocationList } from '@acp/core';
+import type { SandboxBoundaryMetadata } from '@acp/sandbox';
+import { ApprovalGate } from './policy.js';
+import type { OwnerPolicy } from './policy.js';
+import { QuotaMeter } from './quota.js';
+import type { MCPProxy } from './mcp.js';
+import { EnvelopeInbox } from './inbox.js';
+import { VerificationEngine } from './verifier.js';
+export declare class OwnerGateway {
+    readonly owner: KeyPair;
+    readonly contract: TaskContract;
+    effectiveIsolationLevel: string;
+    /** Set by `execute` from the runner. Undefined until a sandbox task has run. */
+    sandboxBoundary?: SandboxBoundaryMetadata;
+    readonly capabilities: CapabilityGuard;
+    readonly inbox: EnvelopeInbox;
+    readonly machine: ContractMachine;
+    readonly approvals: ApprovalGate;
+    readonly quota: QuotaMeter;
+    constructor(owner: KeyPair, contract: TaskContract, policy: OwnerPolicy, revocation?: RevocationList);
+    accept(receipt: ApprovalReceipt): Signed<Transition>;
+    private applyOwn;
+    transition(event: ContractEvent): Signed<Transition>;
+    verifyAndSettle(envelope: SignedEnvelope, engine: VerificationEngine, approval?: ApprovalReceipt | (() => Promise<ApprovalReceipt>), options?: {
+        allowUnencryptedEnvelopes?: boolean;
+    }): Promise<{
+        result: import("./verifier.js").VerificationResult;
+        verification: Signed<Transition>;
+        settlement: Signed<Transition> | undefined;
+    }>;
+    redelegate(chain: CapabilityToken[], params: Omit<Capability, 'id' | 'type' | 'issuer' | 'parentHash'>, receipt: ApprovalReceipt): CapabilityToken;
+    execute(code: string, proxy: MCPProxy, input?: Json): Promise<Json>;
+    close(): void;
+}

package/dist/packages/runtime/dist/gateway.js

@@ -0,0 +1,92 @@
+// SPDX-License-Identifier: Apache-2.0
+import { ContractMachine, createCapability, verifyCapabilityChain, digest, CapabilityGuard, } from '../../core/dist/index.js';
+import { runContainerOrSubprocessSandbox } from '../../sandbox/dist/index.js';
+import { ApprovalGate } from './policy.js';
+import { QuotaMeter } from './quota.js';
+import { EnvelopeInbox } from './inbox.js';
+export class OwnerGateway {
+    owner;
+    contract;
+    effectiveIsolationLevel = 'subprocess_restricted';
+    /** Set by `execute` from the runner. Undefined until a sandbox task has run. */
+    sandboxBoundary;
+    capabilities;
+    inbox;
+    machine;
+    approvals;
+    quota;
+    constructor(owner, contract, policy, revocation) {
+        this.owner = owner;
+        this.contract = contract;
+        if (![contract.manifest.requester.ownerDid, contract.manifest.worker?.ownerDid].includes(owner.did))
+            throw new Error('GATEWAY_OWNER_MISMATCH');
+        this.inbox = new EnvelopeInbox(owner.did, owner.did === contract.manifest.requester.ownerDid
+            ? contract.manifest.worker.ownerDid
+            : contract.manifest.requester.ownerDid, contract.manifest.taskId);
+        this.machine = new ContractMachine(contract);
+        this.capabilities = new CapabilityGuard(revocation);
+        this.approvals = new ApprovalGate(owner.did, policy);
+        this.quota = new QuotaMeter(contract.manifest.taskId, contract.manifest.budget, owner.did);
+    }
+    accept(receipt) {
+        this.approvals.require(this.contract.manifest.taskId, 'contract_acceptance', this.contract.contractDigest, receipt);
+        return this.applyOwn('ACCEPT');
+    }
+    applyOwn(event) {
+        const signed = this.machine.event(event, this.owner);
+        this.machine.apply(signed);
+        if (['SETTLED', 'CANCELLED'].includes(this.machine.state))
+            this.capabilities.revokeTask(this.contract.manifest.taskId);
+        return signed;
+    }
+    transition(event) {
+        if (['ACCEPT', 'VERIFY_ACCEPT', 'VERIFY_REJECT', 'SETTLE'].includes(event))
+            throw new Error('GATED_TRANSITION_REQUIRED');
+        return this.applyOwn(event);
+    }
+    async verifyAndSettle(envelope, engine, approval, options) {
+        if (this.owner.did !== this.contract.manifest.requester.ownerDid ||
+            this.machine.state !== 'DELIVERED')
+            throw new Error('INVALID_VERIFICATION_STATE');
+        const result = await engine.verify(this.contract, envelope, this.approvals, approval, this.owner, options);
+        const verification = this.applyOwn(result.event);
+        const settlement = result.accepted ? this.applyOwn('SETTLE') : undefined;
+        return { result, verification, settlement };
+    }
+    redelegate(chain, params, receipt) {
+        if (this.machine.state !== 'IN_PROGRESS')
+            throw new Error('CAPABILITY_VIOLATION: inactive task');
+        verifyCapabilityChain(chain, {
+            rootDid: this.contract.manifest.requester.ownerDid,
+            audience: this.owner.did,
+            taskId: this.contract.manifest.taskId,
+        });
+        this.approvals.require(this.contract.manifest.taskId, 'redelegation', { parentDigest: digest(chain.at(-1)), params }, receipt);
+        return createCapability(params, this.owner, chain.at(-1));
+    }
+    async execute(code, proxy, input) {
+        if (this.machine.state !== 'IN_PROGRESS')
+            throw new Error('CONTRACT_NOT_RUNNING');
+        const policy = this.contract.manifest.sandboxPolicy;
+        if (!['subprocess_restricted', 'oci_container'].includes(policy.isolationLevel) ||
+            policy.networkAccess !== 'none' ||
+            policy.filesystemScope !== 'ephemeral_workspace_only')
+            throw new Error('UNSUPPORTED_SANDBOX_POLICY');
+        const result = await runContainerOrSubprocessSandbox({
+            isolationLevel: policy.isolationLevel,
+            code,
+            input,
+            timeoutMs: this.quota.budget.maxWallClockSeconds * 1000,
+            signal: this.quota.controller.signal,
+            onTool: (name, args) => proxy.callTool(name, args),
+            onUsage: (i, o) => this.quota.record(i, o),
+        });
+        this.effectiveIsolationLevel = result.effectiveIsolationLevel;
+        this.sandboxBoundary = result.sandboxBoundary;
+        return result.output;
+    }
+    close() {
+        this.quota.close();
+    }
+}
+//# sourceMappingURL=gateway.js.map

package/dist/packages/runtime/dist/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","sourceRoot":"","sources":["../src/gateway.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EACL,eAAe,EACf,gBAAgB,EAChB,qBAAqB,EACrB,MAAM,EACN,eAAe,GAChB,MAAM,WAAW,CAAC;AAcnB,OAAO,EAAE,+BAA+B,EAAE,MAAM,cAAc,CAAC;AAE/D,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C,MAAM,OAAO,YAAY;IAUZ;IACA;IAVX,uBAAuB,GAAG,uBAAuB,CAAC;IAClD,gFAAgF;IAChF,eAAe,CAA2B;IACjC,YAAY,CAAkB;IAC9B,KAAK,CAAgB;IACrB,OAAO,CAAkB;IACzB,SAAS,CAAe;IACxB,KAAK,CAAa;IAC3B,YACW,KAAc,EACd,QAAsB,EAC/B,MAAmB,EACnB,UAA2B;QAHlB,UAAK,GAAL,KAAK,CAAS;QACd,aAAQ,GAAR,QAAQ,CAAc;QAI/B,IACE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAClF,KAAK,CAAC,GAAG,CACV;YAED,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAC5B,KAAK,CAAC,GAAG,EACT,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ;YAChD,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAO,CAAC,QAAQ;YACpC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ,EACxC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CACzB,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,GAAG,IAAI,eAAe,CAAC,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,CAAC,OAAwB;QAC7B,IAAI,CAAC,SAAS,CAAC,OAAO,CACpB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAC7B,qBAAqB,EACrB,IAAI,CAAC,QAAQ,CAAC,cAAc,EAC5B,OAAO,CACR,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC;IACO,QAAQ,CAAC,KAAoB;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YACvD,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9D,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,UAAU,CAAC,KAAoB;QAC7B,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,eAAe,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,KAAK,CAAC,eAAe,CACnB,QAAwB,EACxB,MAA0B,EAC1B,QAA6D,EAC7D,OAAiD;QAEjD,IACE,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ;YAC5D,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,WAAW;YAElC,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAChC,IAAI,CAAC,QAAQ,EACb,QAAQ,EACR,IAAI,CAAC,SAAS,EACd,QAAQ,EACR,IAAI,CAAC,KAAK,EACV,OAAO,CACR,CAAC;QACF,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC;IACD,UAAU,CACR,KAAwB,EACxB,MAAiE,EACjE,OAAwB;QAExB,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,aAAa;YACtC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,qBAAqB,CAAC,KAAK,EAAE;YAC3B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,QAAQ;YAClD,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG;YACxB,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,SAAS,CAAC,OAAO,CACpB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAC7B,cAAc,EACd,EAAE,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAC9C,OAAO,CACR,CAAC;QACF,OAAO,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAe,EAAE,KAAY;QACvD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,KAAK,aAAa;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAClF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC;QACpD,IACE,CAAC,CAAC,uBAAuB,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC;YAC3E,MAAM,CAAC,aAAa,KAAK,MAAM;YAC/B,MAAM,CAAC,eAAe,KAAK,0BAA0B;YAErD,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,MAAM,+BAA+B,CAAC;YACnD,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,IAAI;YACJ,KAAK;YACL,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,GAAG,IAAI;YACvD,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM;YACpC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;YAClD,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC;SAC3C,CAAC,CAAC;QACH,IAAI,CAAC,uBAAuB,GAAG,MAAM,CAAC,uBAAuB,CAAC;QAC9D,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,CAAC;QAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;IACvB,CAAC;IACD,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF"}

package/dist/packages/runtime/dist/inbox.d.ts

@@ -0,0 +1,10 @@
+import type { SignedEnvelope } from '@acp/core';
+/** Gateway-owned replay defense, independent of any relay behavior. */
+export declare class EnvelopeInbox {
+    #private;
+    readonly recipientDid: string;
+    readonly senderDid: string;
+    readonly taskId: string;
+    constructor(recipientDid: string, senderDid: string, taskId: string);
+    receive(envelope: SignedEnvelope): SignedEnvelope;
+}

package/dist/packages/runtime/dist/inbox.js

@@ -0,0 +1,24 @@
+// SPDX-License-Identifier: Apache-2.0
+import { verifyEnvelope } from '../../core/dist/index.js';
+/** Gateway-owned replay defense, independent of any relay behavior. */
+export class EnvelopeInbox {
+    recipientDid;
+    senderDid;
+    taskId;
+    #next = 0;
+    constructor(recipientDid, senderDid, taskId) {
+        this.recipientDid = recipientDid;
+        this.senderDid = senderDid;
+        this.taskId = taskId;
+    }
+    receive(envelope) {
+        if (!verifyEnvelope(envelope, this.recipientDid) ||
+            envelope.payload.senderDid !== this.senderDid ||
+            envelope.payload.taskId !== this.taskId ||
+            envelope.payload.seq !== this.#next)
+            throw new Error('INVALID_OR_REPLAYED_ENVELOPE');
+        this.#next++;
+        return structuredClone(envelope);
+    }
+}
+//# sourceMappingURL=inbox.js.map

package/dist/packages/runtime/dist/inbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../src/inbox.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,uEAAuE;AACvE,MAAM,OAAO,aAAa;IAGb;IACA;IACA;IAJX,KAAK,GAAG,CAAC,CAAC;IACV,YACW,YAAoB,EACpB,SAAiB,EACjB,MAAc;QAFd,iBAAY,GAAZ,YAAY,CAAQ;QACpB,cAAS,GAAT,SAAS,CAAQ;QACjB,WAAM,GAAN,MAAM,CAAQ;IACtB,CAAC;IACJ,OAAO,CAAC,QAAwB;QAC9B,IACE,CAAC,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,YAAY,CAAC;YAC5C,QAAQ,CAAC,OAAO,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;YAC7C,QAAQ,CAAC,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;YACvC,QAAQ,CAAC,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK;YAEnC,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;CACF"}

package/dist/packages/runtime/dist/index.d.ts

@@ -0,0 +1,13 @@
+export * from './policy.js';
+export * from './quota.js';
+export * from './mcp.js';
+export * from './mcp-server.js';
+export * from './verifier.js';
+export * from './gateway.js';
+export * from './a2a.js';
+export * from './inbox.js';
+export * from './adapter.js';
+export * from './approval-providers.js';
+export { createSignedAgentCard, verifySignedAgentCard, toA2AAgentCard, createInviteToken, parseAndVerifyInviteToken, } from '@acp/core';
+export * from './session.js';
+export { PeerRejectedError } from './session-audit.js';