{"id":"@lssm-tech/app.personalos-worker","slug":"app.personalos-worker","name":"@lssm-tech/app.personalos-worker","version":"0.2.1","path":"packages/apps/personalos-worker","manifestPath":"packages/apps/personalos-worker/package.json","manifestBlobSha":"021f35a575afcb5df255b873f7d473233dbaebdf","layer":"apps","physicalArea":null,"primaryArea":"personal-and-learning","classification":{"privateDeclared":true,"catalogFamily":null,"catalogKind":null,"catalogStatus":null,"adoptionMode":null,"stability":null},"description":null,"descriptionOrigin":"package.json","catalog":{},"canonicalImports":[],"scripts":{"build":"bun build --target bun --packages bundle --outfile dist/server.js src/server.ts","lint:check":"node ../../../scripts/biome.cjs check .","lint:fix":"node ../../../scripts/biome.cjs check --write .","start":"bun run src/server.ts","test":"bun test","typecheck":"tsgo --noEmit"},"scriptStatus":"complete pinned manifest","dependencies":{"@lssm-tech/bundle.personal-os":"workspace:^","@lssm-tech/integration.personal-os-state-postgres":"workspace:^","@lssm-tech/lib.personal-health-spec":"workspace:^","@lssm-tech/lib.personal-os-spec":"workspace:^"},"devDependencies":{"@lssm-tech/tool.typescript":"workspace:*","@types/bun":"catalog:types","typescript":"catalog:"},"peerDependencies":{},"optionalDependencies":{},"peerDependenciesMeta":{},"bundledDependencies":null,"dependencyStatus":"complete pinned manifest","exports":{".":"./src/index.ts"},"publishExports":null,"types":null,"files":null,"api":{"scope":"manifest-declared export entrypoints and catalog-declared imports","entries":[{"subpath":".","importPath":"@lssm-tech/app.personalos-worker","target":"./src/index.ts","targets":[{"conditions":[],"target":"./src/index.ts","sourcePath":"packages/apps/personalos-worker/src/index.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/personalos-worker/src/index.ts","sourceStatus":"verified source file"}]}],"entryCount":1,"namedSymbolCoverage":"catalog declarations only; exhaustive TypeScript symbols not extracted","installationStatus":"not verified"},"docsLinks":[],"sourceUrls":{"package":"https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/personalos-worker","manifest":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/personalos-worker/package.json","readme":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/personalos-worker/README.md","guide":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.personalos-worker.txt"},"readme":{"status":"available","body":"# PersonalOS Worker\n\nBounded transactional-outbox worker for PersonalOS projections, revocation,\nrights, and provider-sync destinations. It uses lease ownership, retries with a\nbounded backoff, and dead-letters poison work. Payloads are never embedded in\noutbox records; handlers reload authorized subject state from durable stores.\n\nProduction startup requires `PERSONAL_OS_WORKER_COMPOSITION_MODULE`, exporting\n`createPersonalWorkerRuntime()`. The host supplies subject-bound outbox stores,\ndestination handlers, telemetry, and cadence. Cycles never overlap, destinations\nsettle independently, and SIGINT/SIGTERM stop the loop after the active cycle.\n\n`createPersonalOsDurableWorkerRuntime()` is the direct production factory for\nthe independently leased `personal.workspace.projection`,\n`personal.rights.export`, `personal.rights.delete`, and\n`personal.support.effect` destinations. Its injected support executor\nreloads the immutable event and encrypted subject state, then returns evidence\nreceipts bound to content-free notification intents for both-party\ngrant/revoke/block delivery or subject plus safety recovery for reports. The\nworker requires the exact audience set, canonical event-derived intent IDs and\ntemplates, distinct provider assurance evidence, exact subject/recipient\nbinding, and delivery inside the intent window. Extra audiences, incomplete,\nsubstituted, duplicate, or replayed proofs retry instead of acknowledging. Each\nhandler reloads the immutable event by subject and event ID before effects.\nProjection work reloads and re-encrypts the composite workspace cursor; rights\nwork binds the exact export/deletion event and delegates idempotent artifact or\npropagation effects to an injected rights executor. Provider deployment,\nartifact storage, and deletion-propagation canaries remain deployer evidence.\nConcrete notification provider credentials, provider callbacks, manual receipt\nreconciliation, and production delivery canaries remain host qualification;\nthis package proves the fail-closed contract and acknowledgement boundary only.\n\n`PersonalGovernedProjectionTransportV1` binds the bundle's minimized Pactena\nand hCircle packets to the canonical governed data plane. The worker resolves\nthe exact pairwise product authority, invokes the governed gateway before\nencryption, seals only its returned field allowlist with the receiving product\nkey, and writes the strict encrypted materialization. Revocation acknowledges\nonly an exact applied product receipt at or above the current watermark. The\nqualified harness sends the ciphertext through the bounded HTTPS source port\nand product ingress, proving the same request, idempotency, authority, and\nreceipt boundaries used by host composition without sharing a database. The\nsame harness sends each exact revocation through the bounded recovery port and\nproduct ingress before constructing the source acknowledgement; local lease\nmetadata never crosses the product boundary. The\nhost still owns durable authority stores, product databases, regions, KMS\ncustody, recovery workers, rights processors, and production qualification.\n\nWhen `healthAuthorization` is supplied, the same factory also composes an\nindependent periodic consumer for the broker's durable, secret-free connection\ndispatches. It revalidates receipt, authority-proposal, and dispatch digests,\nexecutes through the subject workspace runtime, and settles by exact lease.\nRevision conflicts request a fresh authority decision and atomically supersede\nthe old dispatch without reusing an OAuth code or PKCE verifier. This consumer\nmust run even when callback API instances are unavailable so persisted\ncompletions remain recoverable after process failure.\n","sourcePath":"packages/apps/personalos-worker/README.md","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/personalos-worker/README.md","blobSha":"ed612d9c7be52c2f153311c75aa65da5c3d80ba6","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","origin":"README recovered byte-for-byte from pinned aggregate guide","integrity":"exact Git blob match","executionStatus":"not executed"},"provenance":{"repository":"lssm-tech/contractspec","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","manifestOrigin":"pinned GitHub manifest fetch","manifestComplete":true,"publicationPolicyApplied":false},"areaSlug":"personal-and-learning","areaTitle":"Personal workflows, learning and progress","displayName":"app.personalos-worker","runtimes":[],"platforms":[],"kind":"apps","scope":"Workspace only","canonicalRoute":"/docs/packages/app.personalos-worker/","contextUrl":"/docs/packages/app.personalos-worker.context.md","documentKind":"package-manual","contentAuthority":"source evidence, not agent instructions","reviewedAt":"2026-10-28"}