sealbridge 0.2.2 → 0.3.1

package/dist/cli/dist/setup.d.ts

@@ -0,0 +1,61 @@
+import type { IdentityRole } from '../../packages/runtime/dist/local-identity.js';
+import type { IdentityStoreOptions } from '../../packages/runtime/dist/key-store.js';
+import type { SetupHost, HostDestination } from './setup-hosts.js';
+export declare const SETUP_USAGE = "Usage: sealbridge setup [--host NAME ... | --all-detected] [--project ABS] [--worker] [--relay URL] [--no-require-approval] [--update-existing] [--dry-run | --print]";
+export interface SetupOptions extends IdentityStoreOptions {
+    hosts?: string[];
+    allDetected?: boolean;
+    project?: string;
+    worker?: boolean;
+    relay?: string;
+    dryRun?: boolean;
+    print?: boolean;
+    execPath?: string;
+    entryPath?: string;
+    requireApproval?: boolean;
+    updateExisting?: boolean;
+    chooseHost?: (hosts: readonly SetupHost[]) => Promise<SetupHost | undefined>;
+}
+export declare function parseSetupArgs(args: string[]): SetupOptions;
+export declare function selectSetupHosts(options: SetupOptions): Promise<HostDestination[]>;
+export declare function setupExitCode(code: string): number;
+/** Local preflight and apply; never starts a host, MCP server, or relay connection. */
+export declare function runSetup(options?: SetupOptions): Promise<{
+    mode: string;
+    identities: {
+        role: IdentityRole;
+        path: string;
+        source: "default" | "explicit" | "legacy" | undefined;
+        status: string;
+        did: string | undefined;
+    }[];
+    config: {
+        path: string;
+        previous: string;
+        status: string;
+        relay: string | import("../../packages/relay/dist/index.js").RelayTransport;
+        source: string;
+    };
+    destinations: {
+        previous: string;
+        status: string;
+        backup: string | undefined;
+        approvalMode: string;
+        approvalNote: string;
+        host: SetupHost;
+        path: string;
+    }[];
+    next: string;
+    error: string | undefined;
+} | {
+    snippets: {
+        mcpServers: {
+            sealbridge: import("./setup-hosts.js").McpEntry;
+        };
+        approvalMode: string;
+        approvalNote: string;
+        host: SetupHost;
+        path: string;
+    }[];
+}>;
+export declare function setupCommand(args: string[]): Promise<void>;

package/dist/cli/dist/setup.js

@@ -0,0 +1,243 @@
+// SPDX-License-Identifier: Apache-2.0
+import * as fs from 'node:fs';
+import { join } from 'node:path';
+import { createInterface } from 'node:readline/promises';
+import { resolveDataRoot, ensurePrivateDirectory, checkPrivatePath } from '../../packages/runtime/dist/local-identity.js';
+import { inspectStoredIdentity, resolveStoredIdentity } from '../../packages/runtime/dist/key-store.js';
+import { readApplicationConfig, validateApplicationConfig, createApplicationConfig } from '../../packages/runtime/dist/application-config.js';
+import { selectApplicationRelay } from '../../packages/runtime/dist/relay-selection.js';
+import { detectedHosts, hostDestination, runtimeEntry } from './setup-hosts.js';
+import { snapshot, strictObject, hostChange, assertUnchanged, publish } from './setup-files.js';
+export const SETUP_USAGE = 'Usage: sealbridge setup [--host NAME ... | --all-detected] [--project ABS] [--worker] [--relay URL] [--no-require-approval] [--update-existing] [--dry-run | --print]';
+const ENTRY_CONFLICT_HELP = 'An existing Sealbridge entry differs from the proposed entry. Review with --update-existing --dry-run or --update-existing --print, then use --update-existing to replace only that entry with a backup. Use --no-require-approval to select the previous plain mcp-server mode.';
+export function parseSetupArgs(args) {
+    const result = {}, seen = new Set();
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg !== '--host' && seen.has(arg))
+            throw new Error('SETUP_INVALID_ARGUMENT');
+        seen.add(arg);
+        if (['--host', '--project', '--relay'].includes(arg)) {
+            const value = args[++i];
+            if (!value || value.startsWith('--'))
+                throw new Error('SETUP_INVALID_ARGUMENT');
+            if (arg === '--host')
+                (result.hosts ??= []).push(value);
+            else if (arg === '--project')
+                result.project = value;
+            else
+                result.relay = value;
+        }
+        else if (arg === '--all-detected')
+            result.allDetected = true;
+        else if (arg === '--worker')
+            result.worker = true;
+        else if (arg === '--dry-run')
+            result.dryRun = true;
+        else if (arg === '--print')
+            result.print = true;
+        else if (arg === '--no-require-approval')
+            result.requireApproval = false;
+        else if (arg === '--update-existing')
+            result.updateExisting = true;
+        else
+            throw new Error('SETUP_INVALID_ARGUMENT');
+    }
+    validateOptions(result);
+    return result;
+}
+function validateOptions(options) {
+    if ((options.hosts?.length && options.allDetected) || (options.dryRun && options.print) ||
+        (options.project !== undefined && !options.hosts?.includes('claude-code')) ||
+        options.hosts?.length === 0)
+        throw new Error('SETUP_INVALID_ARGUMENT');
+}
+export async function selectSetupHosts(options) {
+    validateOptions(options);
+    if (options.hosts)
+        return [...new Set(options.hosts)].map(host => hostDestination(host, options));
+    const detected = detectedHosts(options);
+    if (detected.length === 1 || (options.allDetected && detected.length))
+        return detected;
+    if (!options.allDetected && detected.length > 1 && options.chooseHost) {
+        const selected = await options.chooseHost(detected.map(host => host.host));
+        const host = detected.find(host => host.host === selected);
+        if (host)
+            return [host];
+    }
+    throw new Error('SETUP_HOST_REQUIRED');
+}
+export function setupExitCode(code) {
+    if (['SETUP_INVALID_ARGUMENT', 'SETUP_HOST_REQUIRED', 'SETUP_HOST_UNSUPPORTED'].includes(code))
+        return 2;
+    if (['SETUP_ENTRY_CONFLICT', 'SETUP_APPROVAL_MODE_CONFLICT', 'SETUP_CONFIG_CONFLICT', 'SETUP_CONFIG_INVALID', 'SETUP_RUNTIME_UNSTABLE'].includes(code))
+        return 3;
+    return 1;
+}
+function errorCode(error) {
+    const code = error instanceof Error ? error.message : '';
+    if (/^(SETUP_|IDENTITY_|DATA_DIR_|KEY_STORE_)[A-Z_]+$/.test(code))
+        return code;
+    if (code === 'APP_CONFIG_BUSY')
+        return 'SETUP_CONFIG_CHANGED';
+    if (/^APP_CONFIG_/.test(code))
+        return code === 'APP_CONFIG_UNWRITABLE' ? 'SETUP_WRITE_FAILED' : 'SETUP_CONFIG_INVALID';
+    return 'SETUP_WRITE_FAILED';
+}
+/** Local preflight and apply; never starts a host, MCP server, or relay connection. */
+export async function runSetup(options = {}) {
+    const io = options.fs ?? fs, platform = options.platform ?? process.platform;
+    const hosts = await selectSetupHosts(options), root = resolveDataRoot(options);
+    const entry = runtimeEntry(root, options);
+    const alternateEntry = { ...entry, args: options.requireApproval === false
+            ? [...entry.args, '--require-approval'] : entry.args.slice(0, -1) };
+    const approval = options.requireApproval === false
+        ? { approvalMode: 'automatic', approvalNote: 'The host can send without per-request confirmation and accept final results automatically.' }
+        : { approvalMode: 'host-mediated', approvalNote: 'Host form elicitation is required before sending and for final verification. Hosts without form support return APPROVAL_CHANNEL_UNAVAILABLE before sending.' };
+    const roles = options.worker ? ['requester', 'worker'] : ['requester'];
+    const identities = await Promise.all(roles.map(async (role) => {
+        const selected = await inspectStoredIdentity(role, options);
+        return { role, path: selected.location, source: selected.source,
+            status: selected.key ? 'reused' : 'created on apply', did: selected.key?.did };
+    }));
+    const configOriginal = snapshot(join(root, 'config.json'), io, platform);
+    if (configOriginal.bytes)
+        strictObject(configOriginal.bytes);
+    let config;
+    try {
+        config = readApplicationConfig(options);
+        if (options.relay !== undefined) {
+            const proposed = validateApplicationConfig({ version: 1, relays: [options.relay] }, options);
+            if (configOriginal.bytes && proposed.relays[0] !== config.relays[0])
+                throw new Error('SETUP_CONFIG_CONFLICT');
+            if (!configOriginal.bytes)
+                config = proposed;
+        }
+    }
+    catch (error) {
+        throw new Error(errorCode(error) === 'SETUP_WRITE_FAILED' ? 'SETUP_CONFIG_INVALID' : errorCode(error));
+    }
+    const selected = selectApplicationRelay({ fallbackCandidates: config.relays });
+    const changes = hosts.map(host => ({ host, change: hostChange(snapshot(host.path, io, platform), entry, { updateExisting: options.updateExisting, alternateEntry }) }));
+    if (options.print)
+        return { snippets: hosts.map(({ host, path }) => ({ host, path, ...approval, mcpServers: { sealbridge: entry } })) };
+    const summary = {
+        mode: options.dryRun ? 'dry-run' : 'apply', identities,
+        config: { path: configOriginal.path, previous: configOriginal.bytes ? 'existing' : 'previously absent',
+            status: configOriginal.bytes ? 'reused' : 'created on apply',
+            relay: selected.relay, source: configOriginal.bytes ? 'local-default' : options.relay ? 'setup --relay' : 'built-in default' },
+        destinations: changes.map(({ host, change }) => ({ host: host.host, path: host.path,
+            ...approval,
+            previous: change.bytes ? 'existing' : 'previously absent',
+            status: change.bytes?.equals(change.next) ? 'unchanged' : 'planned', backup: undefined })),
+        next: 'Reload the selected host, then check its MCP tools. Setup does not check host readiness or grant task approval.',
+        error: undefined,
+    };
+    if (options.dryRun)
+        return summary;
+    let lock;
+    const lockPath = join(root, '.setup.lock');
+    try {
+        ensurePrivateDirectory(root, io, platform);
+        checkPrivatePath(lockPath, io, platform);
+        try {
+            lock = io.openSync(lockPath, 'wx', 0o600);
+        }
+        catch (error) {
+            throw new Error(error.code === 'EEXIST' ? 'SETUP_CONFIG_BUSY' : 'SETUP_WRITE_FAILED');
+        }
+        // One exclusive lock attempt is bounded. Revalidate every destination after acquiring it.
+        assertUnchanged(configOriginal, io, platform);
+        for (const { change } of changes)
+            assertUnchanged(change, io, platform);
+        for (const role of roles)
+            await inspectStoredIdentity(role, options);
+        for (const identity of identities) {
+            identity.did = (await resolveStoredIdentity(identity.role, options)).did;
+            identity.status = identity.status === 'reused' ? 'reused' : 'created';
+        }
+        if (!configOriginal.bytes) {
+            createApplicationConfig(config, options);
+            summary.config.status = 'created';
+        }
+        for (let i = 0; i < changes.length; i++) {
+            const { change } = changes[i], destination = summary.destinations[i];
+            try {
+                publish(change, root, io, platform);
+                destination.status = destination.status === 'unchanged' ? 'unchanged' : 'configured';
+            }
+            catch (error) {
+                destination.status = 'failed';
+                throw error;
+            }
+            finally {
+                destination.backup = change.backup;
+            }
+        }
+    }
+    catch (error) {
+        summary.error = errorCode(error);
+    }
+    finally {
+        if (lock !== undefined) {
+            try {
+                const owned = io.fstatSync(lock), current = io.lstatSync(lockPath);
+                if (current.dev === owned.dev && current.ino === owned.ino && !current.isSymbolicLink())
+                    io.unlinkSync(lockPath);
+                else
+                    summary.error = 'SETUP_CONFIG_CHANGED';
+            }
+            catch {
+                summary.error ??= 'SETUP_WRITE_FAILED';
+            }
+            finally {
+                try {
+                    io.closeSync(lock);
+                }
+                catch {
+                    summary.error ??= 'SETUP_WRITE_FAILED';
+                }
+            }
+        }
+    }
+    return summary;
+}
+export async function setupCommand(args) {
+    if (args.length === 1 && args[0] === '--help') {
+        console.log(SETUP_USAGE + '\nHosts: claude-desktop (macOS/Windows), cursor, claude-code (explicit --project only).\nLocal only. Close host settings before applying; reload the host afterward.\nDefault: mcp-server --require-approval requests host form elicitation before sending and for final verification.\nHosts without form support return APPROVAL_CHANNEL_UNAVAILABLE before sending; support cannot be detected offline.\n--no-require-approval selects automatic approval: the host can send without per-request confirmation and accept final results automatically.\n--update-existing replaces only a differing Sealbridge entry, retaining a backup of the original file.\n--dry-run reads and validates; --print outputs proposed entries. Neither writes files.\nUse a persistent installation or a built checkout; setup does not install dependencies.');
+        return;
+    }
+    try {
+        const options = parseSetupArgs(args);
+        if (process.stdin.isTTY && process.stderr.isTTY)
+            options.chooseHost = async (hosts) => {
+                const prompt = createInterface({ input: process.stdin, output: process.stderr });
+                try {
+                    const answer = await prompt.question('Choose host (' + hosts.map((host, i) => `${i + 1}: ${host}`).join(', ') + '), or Enter to cancel: ');
+                    return /^\d+$/.test(answer.trim()) ? hosts[Number(answer.trim()) - 1] : undefined;
+                }
+                catch {
+                    return undefined;
+                }
+                finally {
+                    prompt.close();
+                }
+            };
+        const result = await runSetup(options);
+        console.log(JSON.stringify(result, null, 2));
+        if ('error' in result && result.error) {
+            console.error(result.error);
+            process.exitCode = setupExitCode(result.error);
+        }
+    }
+    catch (error) {
+        const code = errorCode(error);
+        if (code === 'SETUP_APPROVAL_MODE_CONFLICT')
+            console.error('Existing Sealbridge entry uses a different approval mode.');
+        if (code === 'SETUP_APPROVAL_MODE_CONFLICT' || code === 'SETUP_ENTRY_CONFLICT')
+            console.error(ENTRY_CONFLICT_HELP);
+        console.error(code);
+        process.exitCode = setupExitCode(code);
+    }
+}
+//# sourceMappingURL=setup.js.map

package/dist/cli/dist/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../src/setup.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,eAAe,EACtB,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAEhF,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAEtF,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC5H,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAEhG,MAAM,CAAC,MAAM,WAAW,GAAG,uKAAuK,CAAC;AACnM,MAAM,mBAAmB,GAAG,kRAAkR,CAAC;AAO/S,MAAM,UAAU,cAAc,CAAC,IAAc;IAC3C,MAAM,MAAM,GAAiB,EAAE,EAAE,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACjF,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;YAChF,IAAI,GAAG,KAAK,QAAQ;gBAAE,CAAC,MAAM,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;iBACnD,IAAI,GAAG,KAAK,WAAW;gBAAE,MAAM,CAAC,OAAO,GAAG,KAAK,CAAC;;gBAChD,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QAC5B,CAAC;aAAM,IAAI,GAAG,KAAK,gBAAgB;YAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC;aAC1D,IAAI,GAAG,KAAK,UAAU;YAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;aAC7C,IAAI,GAAG,KAAK,WAAW;YAAE,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC;aAC9C,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC;aAC3C,IAAI,GAAG,KAAK,uBAAuB;YAAE,MAAM,CAAC,eAAe,GAAG,KAAK,CAAC;aACpE,IAAI,GAAG,KAAK,mBAAmB;YAAE,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC;;YAC9D,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACjD,CAAC;IACD,eAAe,CAAC,MAAM,CAAC,CAAC;IACxB,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAS,eAAe,CAAC,OAAqB;IAC5C,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,IAAI,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC;QACnF,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC1E,OAAO,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;AAC7E,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAqB;IAC1D,eAAe,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAClG,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACxC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvF,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3E,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC3D,IAAI,IAAI;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;AACzC,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,IAAI,CAAC,wBAAwB,EAAE,qBAAqB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACzG,IAAI,CAAC,sBAAsB,EAAE,8BAA8B,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,wBAAwB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACjK,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,sBAAsB,CAAC;IAC9D,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,KAAK,uBAAuB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACvH,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,UAAwB,EAAE;IACvD,MAAM,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,EAAE,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IAC7E,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC/E,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,cAAc,GAAG,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,eAAe,KAAK,KAAK;YACxE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,KAAK,KAAK;QAChD,CAAC,CAAC,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,4FAA4F,EAAE;QAC3I,CAAC,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,6JAA6J,EAAE,CAAC;IACnN,MAAM,KAAK,GAAmB,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACvF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE;QAC1D,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC5D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM;YAC7D,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC;IACnF,CAAC,CAAC,CAAC,CAAC;IACJ,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;IACzE,IAAI,cAAc,CAAC,KAAK;QAAE,YAAY,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC7F,IAAI,cAAc,CAAC,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YAC9G,IAAI,CAAC,cAAc,CAAC,KAAK;gBAAE,MAAM,GAAG,QAAQ,CAAC;QAC/C,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IAC3H,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,KAAK,EACpG,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,QAAQ,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;IACxI,MAAM,OAAO,GAAG;QACd,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU;QACtD,MAAM,EAAE,EAAE,IAAI,EAAE,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB;YACpG,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,kBAAkB;YAC5D,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,EAAE;QAChI,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI;YACjF,GAAG,QAAQ;YACX,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB;YACzD,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAA+B,EAAE,CAAC,CAAC;QAClH,IAAI,EAAE,iHAAiH;QACvH,KAAK,EAAE,SAA+B;KACvC,CAAC;IACF,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,OAAO,CAAC;IACnC,IAAI,IAAwB,CAAC;IAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC3C,IAAI,CAAC;QACH,sBAAsB,CAAC,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC3C,gBAAgB,CAAC,QAAQ,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QACzC,IAAI,CAAC;YAAC,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAAC,CAAC;QAClD,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAE,KAA+B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;QAAC,CAAC;QACnI,0FAA0F;QAC1F,eAAe,CAAC,cAAc,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QAC9C,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,OAAO;YAAE,eAAe,CAAC,MAAM,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;QACxE,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,qBAAqB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACrE,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;YAClC,QAAQ,CAAC,GAAG,GAAG,CAAC,MAAM,qBAAqB,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;YACzE,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QACxE,CAAC;QACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC;YAC1B,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzC,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC;QACpC,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACxC,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACrE,IAAI,CAAC;gBACH,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC;gBACpC,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,YAAY,CAAC;YACvF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,WAAW,CAAC,MAAM,GAAG,QAAQ,CAAC;gBAAC,MAAM,KAAK,CAAC;YAAC,CAAC;oBACvD,CAAC;gBAAC,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;YAC7C,CAAC;QACP,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;gBACnE,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE;oBAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;;oBAC5G,OAAO,CAAC,KAAK,GAAG,sBAAsB,CAAC;YAC9C,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,CAAC,KAAK,KAAK,oBAAoB,CAAC;YAAC,CAAC;oBAC3C,CAAC;gBAAC,IAAI,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,CAAC,KAAK,KAAK,oBAAoB,CAAC;gBAAC,CAAC;YAAC,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,mzBAAmzB,CAAC,CAAC;QAC/0B,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,CAAC,UAAU,GAAG,KAAK,EAAC,KAAK,EAAC,EAAE;gBAClF,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;gBACjF,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,eAAe,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,yBAAyB,CAAC,CAAC;oBAC3I,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACpF,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,SAAS,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;YAC3D,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,OAAO,IAAI,MAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,IAAI,KAAK,8BAA8B;YAAE,OAAO,CAAC,KAAK,CAAC,2DAA2D,CAAC,CAAC;QACxH,IAAI,IAAI,KAAK,8BAA8B,IAAI,IAAI,KAAK,sBAAsB;YAAE,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACnH,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACpB,OAAO,CAAC,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;AACH,CAAC"}

package/dist/cli/dist/task-input.d.ts

@@ -1,2 +1,2 @@
-import type { Json } from '@acp/core';
+import type { Json } from '../../packages/core/dist/index.js';
 export declare function readTaskInputFile(path: string): Json;

package/dist/cli/dist/wake-hook.d.ts

@@ -1,3 +1,3 @@
-import type { SignedRelayWake } from '@acp/relay';
+import type { SignedRelayWake } from '../../packages/relay/dist/index.js';
 /** Operator-owned command; signed routing metadata is passed only on stdin. */
 export declare function createWakeHook(command: string): (wake: SignedRelayWake, signal: AbortSignal) => Promise<void>;

package/dist/cli/dist/worker-json.d.ts

@@ -0,0 +1,4 @@
+/** Project machine events onto documented fields; free-form diagnostics are omitted. */
+export declare function workerJson(value: unknown): string;
+export declare function emitWorkerJson(value: unknown): void;
+export declare function inviteDigest(token: string): string;

package/dist/cli/dist/worker-json.js

@@ -0,0 +1,87 @@
+// SPDX-License-Identifier: Apache-2.0
+import { createHash } from 'node:crypto';
+import { relayDiagnostic } from '../../packages/relay/dist/index.js';
+import { japaneseErrorReason } from './error-messages.js';
+const REDACTED = '[redacted]';
+const hints = new Set([
+    'Use a budget within the advertised policy.',
+    'Select an advertised skill and task type, or omit both for direct delegation.',
+    'Reduce the execution budget or raise the worker execution timeout before accepting.',
+    'Reduce the execution budget or raise the worker overall task timeout before accepting.',
+    'Raise the requester idle timeout or shorten the worker heartbeat interval before accepting.',
+]);
+function record(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+function identifier(value) {
+    return typeof value === 'string' && /^[A-Za-z0-9_.-]{1,160}$/.test(value) ? value : REDACTED;
+}
+function reason(value) {
+    if (typeof value !== 'string')
+        return REDACTED;
+    const did = 'did:key:z[1-9A-HJ-NP-Za-km-z]{1,100}';
+    const field = '(?:maxInputTokens|maxOutputTokens|maxToolInvocations|maxWallClockSeconds|timeoutSeconds)';
+    const number = '-?\\d+(?:\\.\\d+)?(?:e[+-]?\\d+)?';
+    if (value === 'The worker owner must review this requester. No task was accepted. Do not retry automatically.' ||
+        /^(?:manifest|budget) is missing$/.test(value) ||
+        new RegExp('^' + field + ' is missing or not a finite number$').test(value) ||
+        new RegExp('^' + field + ' ' + number + ' exceeds worker limit ' + number + '$').test(value) ||
+        /^maxConcurrentTasks \d+ reached$/.test(value) ||
+        new RegExp('^per-requester rate limit exceeded for ' + did + ' \\(\\d+ requests / \\d+ms\\)$').test(value) ||
+        new RegExp('^requester (?:' + did + '|unknown) is not allowed$').test(value) ||
+        new RegExp('^requester ' + did + ' does not match envelope from ' + did + '$').test(value))
+        return value;
+    return REDACTED;
+}
+/** Project machine events onto documented fields; free-form diagnostics are omitted. */
+export function workerJson(value) {
+    const source = record(value), out = {};
+    if (source.event !== undefined)
+        out.event = identifier(source.event);
+    if (source.taskId !== undefined)
+        out.taskId = identifier(source.taskId);
+    if (source.status !== undefined)
+        out.status = ['connected', 'reconnecting', 'unavailable', 'stopped'].includes(String(source.status)) ? source.status : REDACTED;
+    if (source.error !== undefined) {
+        const message = relayDiagnostic(source.error).message;
+        out.error = message;
+        out.reasonJa = japaneseErrorReason(message);
+    }
+    if (source.code !== undefined) {
+        out.code = typeof source.code === 'string' && /^[A-Z][A-Z0-9_]{0,100}$/.test(source.code) ? source.code : 'EXECUTION_FAILED';
+        out.reasonJa = japaneseErrorReason(String(out.code));
+    }
+    if (source.reason !== undefined)
+        out.reason = reason(source.reason);
+    if (source.detail !== undefined) {
+        const detail = record(source.detail);
+        const hash = (v) => typeof v === 'string' && /^sha256:[a-f0-9]{64}$/.test(v) ? v : REDACTED;
+        out.detail = {
+            field: typeof detail.field === 'string' && /^(?:task\.scope|peerIdleTimeoutMs|budget\.(?:maxInputTokens|maxOutputTokens|maxToolInvocations|maxWallClockSeconds))$/.test(detail.field) ? detail.field : REDACTED,
+            expected: hash(detail.expected), actual: hash(detail.actual),
+            hint: typeof detail.hint === 'string' && hints.has(detail.hint) ? detail.hint : REDACTED,
+        };
+    }
+    if (source.event === 'invite_ready') {
+        if (typeof source.inviteDigest === 'string' && /^sha256:[a-f0-9]{64}$/.test(source.inviteDigest))
+            out.inviteDigest = source.inviteDigest;
+        if (typeof source.expiresAt === 'string' && /^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d\.\d{3}Z$/.test(source.expiresAt))
+            out.expiresAt = source.expiresAt;
+        if (typeof source.workerDid === 'string' && /^did:key:z[1-9A-HJ-NP-Za-km-z]{1,100}$/.test(source.workerDid))
+            out.workerDid = source.workerDid;
+        if (typeof source.relay === 'string') {
+            const url = new URL(source.relay);
+            url.username = '';
+            url.password = '';
+            url.search = '';
+            url.hash = '';
+            out.relay = /acp-invite:|acp:|bearer/i.test(url.pathname) ? url.origin : url.toString().replace(/\/$/, '');
+        }
+    }
+    return JSON.stringify(out);
+}
+export function emitWorkerJson(value) { console.error(workerJson(value)); }
+export function inviteDigest(token) {
+    return 'sha256:' + createHash('sha256').update(token).digest('hex');
+}
+//# sourceMappingURL=worker-json.js.map

package/dist/cli/dist/worker-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-json.js","sourceRoot":"","sources":["../src/worker-json.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE1D,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC;IACpB,4CAA4C;IAC5C,+EAA+E;IAC/E,qFAAqF;IACrF,wFAAwF;IACxF,6FAA6F;CAC9F,CAAC,CAAC;AACH,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7G,CAAC;AACD,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC/F,CAAC;AACD,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC;IAC/C,MAAM,GAAG,GAAG,sCAAsC,CAAC;IACnD,MAAM,KAAK,GAAG,0FAA0F,CAAC;IACzG,MAAM,MAAM,GAAG,mCAAmC,CAAC;IACnD,IAAI,KAAK,KAAK,gGAAgG;QAC1G,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9C,IAAI,MAAM,CAAC,GAAG,GAAG,KAAK,GAAG,qCAAqC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC3E,IAAI,MAAM,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,GAAG,MAAM,GAAG,wBAAwB,GAAG,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5F,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9C,IAAI,MAAM,CAAC,yCAAyC,GAAG,GAAG,GAAG,gCAAgC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1G,IAAI,MAAM,CAAC,gBAAgB,GAAG,GAAG,GAAG,2BAA2B,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC5E,IAAI,MAAM,CAAC,aAAa,GAAG,GAAG,GAAG,gCAAgC,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7G,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,GAA4B,EAAE,CAAC;IAChE,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,GAAG,CAAC,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAC7B,GAAG,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,cAAc,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAClI,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;QACtD,GAAG,CAAC,KAAK,GAAG,OAAO,CAAC;QACpB,GAAG,CAAC,QAAQ,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC9B,GAAG,CAAC,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAC7H,GAAG,CAAC,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrG,GAAG,CAAC,MAAM,GAAG;YACX,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,uHAAuH,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;YAC/M,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;YAC5D,IAAI,EAAE,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;SACzF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;QACpC,IAAI,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC;YAAE,GAAG,CAAC,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;QACzI,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAChJ,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,wCAAwC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAC9I,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAClC,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,GAAG,0BAA0B,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAc,IAAU,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1F,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC"}

package/dist/examples/two-owner-demo/dist/run-demo.d.ts

@@ -1,14 +1,14 @@
-import type { Json, TaskManifest, SignedEnvelope, CapabilityToken } from '@acp/core';
-import { BilateralLedger } from '@acp/ledger';
-import type { AuditStore, AuditEntry, AuditBundle } from '@acp/ledger';
-import { OwnerGateway, MCPProxy, VerificationEngine } from '@acp/runtime';
-import { InMemoryRelay } from '@acp/relay';
+import type { Json, TaskManifest, SignedEnvelope, CapabilityToken } from '../../../packages/core/dist/index.js';
+import { BilateralLedger } from '../../../packages/ledger/dist/index.js';
+import type { AuditStore, AuditEntry, AuditBundle } from '../../../packages/ledger/dist/index.js';
+import { OwnerGateway, MCPProxy, VerificationEngine } from '../../../packages/runtime/dist/index.js';
+import { InMemoryRelay } from '../../../packages/relay/dist/index.js';
 export declare function createSession(auditDirectory?: string): Promise<{
-    alice: import("@acp/core").KeyPair;
-    bob: import("@acp/core").KeyPair;
+    alice: import("../../../packages/core/dist/index.js").KeyPair;
+    bob: import("../../../packages/core/dist/index.js").KeyPair;
     manifest: TaskManifest;
-    proposal: import("@acp/core").Signed<TaskManifest>;
-    contract: import("@acp/core").TaskContract;
+    proposal: import("../../../packages/core/dist/index.js").Signed<TaskManifest>;
+    contract: import("../../../packages/core/dist/index.js").TaskContract;
     requester: OwnerGateway;
     worker: OwnerGateway;
     root: CapabilityToken;
@@ -19,8 +19,8 @@ export declare function createSession(auditDirectory?: string): Promise<{
     ledger: BilateralLedger;
     stores: AuditStore[];
     record: (event: string, payload: Json) => AuditEntry;
-    deliver: (data: Json, usage?: import("@acp/core").UsageReceipt) => {
-        delivery: import("@acp/runtime").Delivery;
+    deliver: (data: Json, usage?: import("../../../packages/core/dist/index.js").UsageReceipt) => {
+        delivery: import("../../../packages/runtime/dist/index.js").Delivery;
         envelope: SignedEnvelope;
     };
     sendTransition: (event: string, transition: unknown, from: OwnerGateway, to: OwnerGateway, seq: number) => void;
@@ -29,7 +29,7 @@ export declare function createSession(auditDirectory?: string): Promise<{
 }>;
 export declare function happyPath(auditDirectory?: string): Promise<{
     scenario: string;
-    state: import("@acp/core").State;
+    state: import("../../../packages/core/dist/index.js").State;
     stages: string[];
     audit: "VALID";
     bundle: AuditBundle;
@@ -65,7 +65,7 @@ export declare function runDemo(auditDirectory?: string): Promise<({
     audit: string;
 } | {
     scenario: string;
-    state: import("@acp/core").State;
+    state: import("../../../packages/core/dist/index.js").State;
     stages: string[];
     audit: "VALID";
 })[]>;

package/dist/package.json

@@ -1 +1 @@
-{"type":"module","version":"0.2.2"}
+{"type":"module","version":"0.3.1"}

package/dist/packages/adapters/dist/command.d.ts

@@ -1,6 +1,6 @@
 import { type CredentialProxyHandle } from './credential-proxy.js';
-import type { Json, AgentSkill } from '@acp/core';
-import type { AgentAdapter, AgentTaskContext } from '@acp/runtime';
+import type { Json, AgentSkill } from '../../core/dist/index.js';
+import type { AgentAdapter, AgentTaskContext } from '../../runtime/dist/index.js';
 export interface CommandRequest {
     command: string;
     args: string[];

package/dist/packages/adapters/dist/credential-proxy.d.ts

@@ -1,5 +1,5 @@
-import type { BudgetSpec } from '@acp/core';
-import type { QuotaMeter } from '@acp/runtime';
+import type { BudgetSpec } from '../../core/dist/index.js';
+import type { QuotaMeter } from '../../runtime/dist/index.js';
 export interface ProxyUsageMetrics {
     inputTokens?: number;
     outputTokens?: number;

package/dist/packages/adapters/dist/index.d.ts

@@ -1,4 +1,4 @@
-export type { AgentAdapter, AgentTaskContext, UsageMetrics } from '@acp/runtime';
+export type { AgentAdapter, AgentTaskContext, UsageMetrics } from '../../runtime/dist/index.js';
 export * from './credential-proxy.js';
 export * from './command.js';
 export * from './openai.js';

package/dist/packages/adapters/dist/mcp.d.ts

@@ -1,7 +1,7 @@
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import type { Transport } from '@modelcontextprotocol/sdk/shared/transport.js';
-import type { AgentAdapter, AgentTaskContext, MCPProxy, ToolDefinition, ToolBackend } from '@acp/runtime';
-import type { Json } from '@acp/core';
+import type { AgentAdapter, AgentTaskContext, MCPProxy, ToolDefinition, ToolBackend } from '../../runtime/dist/index.js';
+import type { Json } from '../../core/dist/index.js';
 export interface McpAdapterOptions {
     client?: Client;
     transport?: Transport;

package/dist/packages/adapters/dist/openai.d.ts

@@ -1,5 +1,5 @@
-import type { Json } from '@acp/core';
-import type { AgentAdapter, AgentTaskContext } from '@acp/runtime';
+import type { Json } from '../../core/dist/index.js';
+import type { AgentAdapter, AgentTaskContext } from '../../runtime/dist/index.js';
 export interface OpenAICompatibleOptions {
     baseUrl?: string;
     endpoint?: string;

package/dist/packages/adapters/dist/sandbox.d.ts

@@ -1,5 +1,5 @@
-import type { AgentAdapter, AgentTaskContext } from '@acp/runtime';
-import type { Json } from '@acp/core';
+import type { AgentAdapter, AgentTaskContext } from '../../runtime/dist/index.js';
+import type { Json } from '../../core/dist/index.js';
 /**
  * Runs task JavaScript and reports the isolation the host runner actually used.
  *

package/dist/packages/core/dist/connection.d.ts

@@ -0,0 +1,58 @@
+import type { SignedAgentCard } from './discovery.js';
+import type { KeyPair, Signed } from './types.js';
+export declare const CONNECTION_OFFER_LIFETIME_MS: number;
+export declare const CONNECTION_CONTROL_MAX_BYTES: number;
+export declare const CONNECTION_EVENTS: readonly ["CONNECTION_REQUEST", "CONNECTION_ACCEPTED", "CONNECTION_ACK"];
+export type ConnectionEventName = typeof CONNECTION_EVENTS[number];
+export interface ConnectionRequest {
+    type: 'ConnectionRequest';
+    v: 1;
+    protocolVersion: '0.2.0';
+    requestId: string;
+    fromOwnerDid: string;
+    toOwnerDid: string;
+    agentCard: SignedAgentCard;
+    message: string;
+    createdAt: string;
+    expiresAt: string;
+    inviteDigest?: string;
+    originProposalDigest?: string;
+}
+export interface ConnectionAccepted {
+    type: 'ConnectionAccepted';
+    v: 1;
+    protocolVersion: '0.2.0';
+    eventId: string;
+    connectionId: string;
+    requestId: string;
+    requestDigest: string;
+    fromOwnerDid: string;
+    toOwnerDid: string;
+    acceptedAt: string;
+    trust: 'limited';
+    inviteDigest?: string;
+}
+export interface ConnectionAck {
+    type: 'ConnectionAck';
+    v: 1;
+    eventId: string;
+    acceptedDigest: string;
+    fromOwnerDid: string;
+    toOwnerDid: string;
+    receivedAt: string;
+}
+export type ConnectionControl = ConnectionRequest | ConnectionAccepted | ConnectionAck;
+export declare function isConnectionEvent(value: string): value is ConnectionEventName;
+export declare function connectionEventName(value: ConnectionControl): ConnectionEventName;
+export declare function connectionRoutingId(requestId: string): string;
+/** Structural validation is timeless; live expiry checks are separate. */
+export declare function validateConnectionRequest(value: unknown): value is ConnectionRequest;
+export declare function validateConnectionAccepted(value: unknown): value is ConnectionAccepted;
+export declare function validateConnectionAck(value: unknown): value is ConnectionAck;
+export declare function verifyConnectionRequest(value: Signed<ConnectionRequest>): boolean;
+export declare function verifyConnectionAccepted(value: Signed<ConnectionAccepted>): boolean;
+export declare function verifyConnectionAck(value: Signed<ConnectionAck>): boolean;
+export declare function assertConnectionRequestCurrent(value: ConnectionRequest, now: number): void;
+export declare function signConnectionRequest(value: ConnectionRequest, owner: KeyPair): Signed<ConnectionRequest>;
+export declare function signConnectionAccepted(value: ConnectionAccepted, owner: KeyPair): Signed<ConnectionAccepted>;
+export declare function signConnectionAck(value: ConnectionAck, owner: KeyPair): Signed<ConnectionAck>;