@aexhq/sdk 0.46.4-canary → 0.50.0

package/dist/_contracts/runner-event.js

@@ -1,172 +0,0 @@
-/**
- * Unified runner event schema. The managed runtime feeds one shape into
- * the hosted aex event pipeline:
- *
- *   - The per-session managed runtime POSTs batches of NDJSON events to
- *     `/sessions/{id}/runner/events`; the runtime adapter translates each
- *     event into one or more `RunnerEvent`s.
- *
- * The downstream subscribers (dashboard, SDK `streamEvents`, observable
- * spans) never see runtime-specific wire shapes — they only see
- * `RunnerEvent`s.
- *
- * This is the public event contract consumed by SDK and CLI clients.
- */
-import { isJsonRecord, isRecord, isStringLiteral } from "./value-guards.js";
-/**
- * Schema version. Bump when the shape of `RunnerEvent`, its kind set,
- * or the batch envelope changes. Subscribers gate on this so a future
- * v2 wire shape can land behind a feature flag.
- */
-export const RUNNER_EVENT_VERSION = 1;
-/**
- * The set of event kinds emitted into the unified stream. Adapters
- * fold runtime-specific events into one of these — anything that
- * doesn't fit is mapped to `notification` so the data is captured
- * even when no UI handler exists yet.
- *
- *   - `runtime_started`  — the managed runtime announced "ready" or
- *                          accepted the first turn.
- *   - `assistant_text`   — model text delta.
- *   - `tool_request`     — model emitted a tool_use / function call.
- *   - `tool_response`    — tool result delivered back to the model.
- *   - `skill_loaded`     — a skill was loaded from a provider ref or
- *                          a workspace folder mount.
- *   - `file_uploaded`    — a file became available to the agent
- *                          (Files API id OR workspace path).
- *   - `notification`     — runtime/extension notification; catch-all
- *                          for diagnostic data.
- *   - `stream_error`     — stream-level error (non-fatal). Subscribers
- *                          may surface this as a UI warning; the session
- *                          continues unless `runtime_terminal` follows.
- *   - `runtime_terminal` — the session reached a terminal state. The
- *                          adapter MUST emit exactly one of these per
- *                          run; subscribers gate on it for end-of-stream.
- */
-export const RUNNER_EVENT_KINDS = [
-    "runtime_started",
-    "assistant_text",
-    "tool_request",
-    "tool_response",
-    "skill_loaded",
-    "file_uploaded",
-    "notification",
-    "stream_error",
-    "runtime_terminal"
-];
-/**
- * Maximum number of events per batch. Bounds the size of the body
- * api.aex.dev accepts and the size of the downstream Postgres / metadata-store
- * write. Larger streams are split into multiple batches; the runner is
- * responsible for chunking.
- */
-export const RUNNER_EVENT_BATCH_MAX_EVENTS = 256;
-export const RUNNER_EVENT_BATCH_VALIDATION_CODES = [
-    "invalid_envelope",
-    "version_mismatch",
-    "missing_session_id",
-    "empty_batch",
-    "batch_too_large",
-    "invalid_event",
-    "seq_not_monotonic",
-    "t_ms_not_monotonic"
-];
-/**
- * Parse + validate an inbound runner event batch (untrusted input).
- * Used at the api.aex.dev ingress so adapters never have to
- * re-check the wire shape, and used by tests to assert the contract.
- *
- * Successful validation guarantees:
- *   - top-level envelope matches {@link RunnerEventBatch}
- *   - `v === RUNNER_EVENT_VERSION`
- *   - `sessionId` is a non-empty string
- *   - `events` is a non-empty array of at most
- *     {@link RUNNER_EVENT_BATCH_MAX_EVENTS} entries
- *   - each event is a {@link RunnerEvent} with a known `kind`
- *   - `seq` is strictly increasing across the batch
- *   - `tMs` is non-decreasing across the batch
- */
-export function validateRunnerEventBatch(input) {
-    if (!isRecord(input)) {
-        return invalid("invalid_envelope", "batch must be a JSON object");
-    }
-    if (input.v !== RUNNER_EVENT_VERSION) {
-        return invalid("version_mismatch", `batch.v must equal ${RUNNER_EVENT_VERSION} (got ${JSON.stringify(input.v)})`);
-    }
-    if (typeof input.sessionId !== "string" || input.sessionId.length === 0) {
-        return invalid("missing_session_id", "batch.sessionId must be a non-empty string");
-    }
-    if (!Array.isArray(input.events) || input.events.length === 0) {
-        return invalid("empty_batch", "batch.events must be a non-empty array");
-    }
-    if (input.events.length > RUNNER_EVENT_BATCH_MAX_EVENTS) {
-        return invalid("batch_too_large", `batch.events has ${input.events.length} entries; max is ${RUNNER_EVENT_BATCH_MAX_EVENTS}`);
-    }
-    let lastSeq = Number.NEGATIVE_INFINITY;
-    let lastTMs = Number.NEGATIVE_INFINITY;
-    const events = [];
-    for (let i = 0; i < input.events.length; i++) {
-        const evt = input.events[i];
-        if (!isRecord(evt)) {
-            return invalid("invalid_event", `events[${i}] must be a JSON object`);
-        }
-        if (typeof evt.seq !== "number" ||
-            !Number.isFinite(evt.seq) ||
-            !Number.isInteger(evt.seq) ||
-            evt.seq < 0) {
-            return invalid("invalid_event", `events[${i}].seq must be a non-negative integer`);
-        }
-        if (typeof evt.tMs !== "number" ||
-            !Number.isFinite(evt.tMs) ||
-            !Number.isInteger(evt.tMs) ||
-            evt.tMs < 0) {
-            return invalid("invalid_event", `events[${i}].tMs must be a non-negative integer`);
-        }
-        if (!isStringLiteral(evt.kind, RUNNER_EVENT_KINDS)) {
-            return invalid("invalid_event", `events[${i}].kind must be one of: ${RUNNER_EVENT_KINDS.join(", ")} (got ${JSON.stringify(evt.kind)})`);
-        }
-        if (evt.sourceSeq !== undefined &&
-            (typeof evt.sourceSeq !== "number" ||
-                !Number.isFinite(evt.sourceSeq) ||
-                !Number.isInteger(evt.sourceSeq) ||
-                evt.sourceSeq < 0)) {
-            return invalid("invalid_event", `events[${i}].sourceSeq must be a non-negative integer when present`);
-        }
-        if (evt.emittedAt !== undefined &&
-            (typeof evt.emittedAt !== "number" ||
-                !Number.isFinite(evt.emittedAt) ||
-                !Number.isInteger(evt.emittedAt) ||
-                evt.emittedAt < 0)) {
-            return invalid("invalid_event", `events[${i}].emittedAt must be a non-negative integer when present`);
-        }
-        if (!isRecord(evt.data)) {
-            return invalid("invalid_event", `events[${i}].data must be a JSON object`);
-        }
-        if (!isJsonRecord(evt.data)) {
-            return invalid("invalid_event", `events[${i}].data must be JSON-serializable`);
-        }
-        if (evt.seq <= lastSeq) {
-            return invalid("seq_not_monotonic", `events[${i}].seq=${evt.seq} must be strictly greater than the previous seq=${lastSeq}`);
-        }
-        if (evt.tMs < lastTMs) {
-            return invalid("t_ms_not_monotonic", `events[${i}].tMs=${evt.tMs} must be >= the previous tMs=${lastTMs}`);
-        }
-        lastSeq = evt.seq;
-        lastTMs = evt.tMs;
-        events.push({
-            seq: evt.seq,
-            tMs: evt.tMs,
-            ...(evt.sourceSeq !== undefined ? { sourceSeq: evt.sourceSeq } : {}),
-            ...(evt.emittedAt !== undefined ? { emittedAt: evt.emittedAt } : {}),
-            kind: evt.kind,
-            data: Object.freeze({ ...evt.data })
-        });
-    }
-    return {
-        ok: true,
-        batch: { v: RUNNER_EVENT_VERSION, sessionId: input.sessionId, events: Object.freeze(events) }
-    };
-}
-function invalid(code, message) {
-    return { ok: false, code, message };
-}

package/dist/_contracts/runtime-kind.d.ts

@@ -1,60 +0,0 @@
-/**
- * Managed execution-runtime selector ("which backend runs the session").
- *
- * Distinct from {@link import("./runtime-sizes.js").RuntimeSize} ("how big the
- * box is"). A session picks BOTH: a `runtimeKind` (this file) and a
- * `runtimeSize`. The kind selects the execution backend; the size selects the
- * vCPU/memory preset within it.
- *
- * Three product runtimes, selected per session (feature addition, not a
- * migration — see `references/microvm-migration-2026-07-15/00`§0):
- *   - `container`      — today's co-located Fargate (on-demand). Explicit opt-in.
- *   - `spot_container` — the same behavior on Fargate Spot: cheaper and
- *                        interruption tolerant through durable recovery. This is
- *                        {@link DEFAULT_RUNTIME_KIND}.
- *   - `lambda`         — event-driven Lambda + on-demand MicroVM sandbox;
- *                        idle → $0, fast resume, ≤32 GB workspace.
- *
- * The wire shape of a submission is identical across all three, but the runtimes
- * are NOT yet capability-equivalent: `lambda` has a 900 s per-invocation ceiling, a
- * 32 GiB / 8 h sandbox, and no tool execution until the MicroVM hands channel ships.
- * `spot_container` executes side-effecting tools at-least-once because a Spot
- * reclaim replays the interrupted step. Pricing differs per runtime.
- */
-import { RUNTIME_KINDS } from "./schemas/runtime-kind.js";
-/** The accepted execution-runtime values (the wire/CLI tokens). */
-export { RUNTIME_KINDS };
-/** One of the closed {@link RUNTIME_KINDS} tokens. */
-export type RuntimeKind = (typeof RUNTIME_KINDS)[number];
-/**
- * Default when `runtimeKind` is omitted: `spot_container` (Fargate Spot).
- *
- * Chosen because it is the cheapest kind that can execute every tool today. The
- * `lambda` path can finish an LLM turn but cannot execute a tool call, so it is
- * an explicit opt-in rather than the default. Kept byte-equal to the hosted
- * declaration in `packages/contract-core/src/runtime-kind.ts`, which carries the
- * revert condition.
- */
-export declare const DEFAULT_RUNTIME_KIND: RuntimeKind;
-/**
- * Symbol-style accessors for TS callers: `RuntimeKinds.SPOT_CONTAINER` resolves
- * to the wire token `"spot_container"`. Re-exported by the SDK as
- * `RuntimeKinds`. Prefer these over raw strings so an invalid token is a compile
- * error, not a runtime 400.
- */
-export declare const RuntimeKinds: {
-    /** Today's co-located Fargate, on-demand capacity. Explicit opt-in. */
-    readonly CONTAINER: "container";
-    /**
-     * Fargate Spot — same behavior, cheaper capacity, interruption tolerant.
-     * This is {@link DEFAULT_RUNTIME_KIND}: what an omitted `runtime.kind` resolves to.
-     */
-    readonly SPOT_CONTAINER: "spot_container";
-    /** Event-driven Lambda + on-demand MicroVM sandbox; idle → $0. Explicit opt-in. */
-    readonly LAMBDA: "lambda";
-};
-/**
- * Validate the wire `runtimeKind` field. `undefined` (omitted) is allowed and
- * consumers apply {@link DEFAULT_RUNTIME_KIND}.
- */
-export declare function parseRuntimeKind(input: unknown): RuntimeKind | undefined;

package/dist/_contracts/runtime-kind.js

@@ -1,70 +0,0 @@
-/**
- * Managed execution-runtime selector ("which backend runs the session").
- *
- * Distinct from {@link import("./runtime-sizes.js").RuntimeSize} ("how big the
- * box is"). A session picks BOTH: a `runtimeKind` (this file) and a
- * `runtimeSize`. The kind selects the execution backend; the size selects the
- * vCPU/memory preset within it.
- *
- * Three product runtimes, selected per session (feature addition, not a
- * migration — see `references/microvm-migration-2026-07-15/00`§0):
- *   - `container`      — today's co-located Fargate (on-demand). Explicit opt-in.
- *   - `spot_container` — the same behavior on Fargate Spot: cheaper and
- *                        interruption tolerant through durable recovery. This is
- *                        {@link DEFAULT_RUNTIME_KIND}.
- *   - `lambda`         — event-driven Lambda + on-demand MicroVM sandbox;
- *                        idle → $0, fast resume, ≤32 GB workspace.
- *
- * The wire shape of a submission is identical across all three, but the runtimes
- * are NOT yet capability-equivalent: `lambda` has a 900 s per-invocation ceiling, a
- * 32 GiB / 8 h sandbox, and no tool execution until the MicroVM hands channel ships.
- * `spot_container` executes side-effecting tools at-least-once because a Spot
- * reclaim replays the interrupted step. Pricing differs per runtime.
- */
-import { rethrowContractParseError } from "./contract-parse-error.js";
-import { RUNTIME_KINDS, RuntimeKindSchema } from "./schemas/runtime-kind.js";
-import { parseWire } from "./schemas/wire.js";
-/** The accepted execution-runtime values (the wire/CLI tokens). */
-export { RUNTIME_KINDS };
-/**
- * Default when `runtimeKind` is omitted: `spot_container` (Fargate Spot).
- *
- * Chosen because it is the cheapest kind that can execute every tool today. The
- * `lambda` path can finish an LLM turn but cannot execute a tool call, so it is
- * an explicit opt-in rather than the default. Kept byte-equal to the hosted
- * declaration in `packages/contract-core/src/runtime-kind.ts`, which carries the
- * revert condition.
- */
-export const DEFAULT_RUNTIME_KIND = "spot_container";
-/**
- * Symbol-style accessors for TS callers: `RuntimeKinds.SPOT_CONTAINER` resolves
- * to the wire token `"spot_container"`. Re-exported by the SDK as
- * `RuntimeKinds`. Prefer these over raw strings so an invalid token is a compile
- * error, not a runtime 400.
- */
-export const RuntimeKinds = {
-    /** Today's co-located Fargate, on-demand capacity. Explicit opt-in. */
-    CONTAINER: "container",
-    /**
-     * Fargate Spot — same behavior, cheaper capacity, interruption tolerant.
-     * This is {@link DEFAULT_RUNTIME_KIND}: what an omitted `runtime.kind` resolves to.
-     */
-    SPOT_CONTAINER: "spot_container",
-    /** Event-driven Lambda + on-demand MicroVM sandbox; idle → $0. Explicit opt-in. */
-    LAMBDA: "lambda"
-};
-/**
- * Validate the wire `runtimeKind` field. `undefined` (omitted) is allowed and
- * consumers apply {@link DEFAULT_RUNTIME_KIND}.
- */
-export function parseRuntimeKind(input) {
-    try {
-        if (input === undefined) {
-            return undefined;
-        }
-        return parseWire(RuntimeKindSchema, input);
-    }
-    catch (error) {
-        rethrowContractParseError(error, "parseRuntimeKind");
-    }
-}

package/dist/_contracts/runtime-manifest.d.ts

@@ -1,121 +0,0 @@
-import type { ProviderName } from "./submission.js";
-/**
- * Runtime manifest: the per-session description of where
- * aex places things inside the agent container, plus the merged
- * env-var bag delivered via `RUNTIME.env` / `RUNTIME.json`.
- *
- * A manifest is computed from the validated submission via
- * {@link buildRuntimeManifest}, so caller code (anyone rendering catalog
- * markdown pre-submission, or resolving aex's in-container path strings)
- * doesn't have to guess.
- *
- * It is NOT on the session wire. `Session.runtimeManifest` was declared and
- * `publicSessionFromItem` has never emitted one, so every read of it returned
- * `undefined`; the field is gone rather than left as a promise nothing keeps.
- * Build the manifest from the submission instead.
- *
- * The managed runtime materialises the actual `RUNTIME.env` / `RUNTIME.json`
- * files in-container from the same envVars inputs, so the
- * SDK-side view and the in-container view describe the same layout.
- *
- * Manifest values are derived, never persisted separately — the source
- * of truth for the customer half remains `submission.environment.envVars`
- * on the session row; the aex half is constant for a given SDK version.
- */
-/**
- * The in-container paths the agent and skill code reference at
- * runtime. All fields are absolute, all reflect Anthropic Managed
- * Agents' session-mount rebase rule (every `mount_path` lands under
- * `/mnt/session/uploads/` regardless of the leading slash).
- *
- * `skillsRoot` is the location of Skills API-registered bundles, which
- * the runtime auto-discovers under `/workspace/skills/<name>/` —
- * empirically a separate root from the session-resource mounts, NOT
- * under `/mnt/session/uploads/`.
- */
-export interface RuntimeManifest {
-    readonly provider: ProviderName | string;
-    /** Where skill bundles auto-discover in the managed runner. */
-    readonly skillsRoot: string;
-    /** Parent dir of File mounts: `<filesRoot>/<f_id>/<rel-path>`. */
-    readonly filesRoot: string;
-    /** Parent dir of non-SKILL.md asset mounts: `<assetsRoot>/<skl_id>/<rel-path>`. */
-    readonly assetsRoot: string;
-    /** Absolute path of the in-container aex runtime bridge (invoke via `bun`). */
-    readonly aexCli: string;
-    /** Absolute path of the in-container aex runtime index. */
-    readonly indexJson: string;
-    /** Absolute path of the always-mounted aex runtime contract README. */
-    readonly readme: string;
-    /** Absolute path of the machine-readable manifest mirror. */
-    readonly runtimeJson: string;
-    /** Absolute path of the POSIX-shell-sourceable runtime env file. */
-    readonly runtimeEnv: string;
-    /**
-     * Merged env-var bag: aex-set runtime keys (with reserved
-     * `AEX_` prefix) plus customer-supplied `environment.envVars`.
-     * Both `RUNTIME.env` and `RUNTIME.json` are rendered from this
-     * exact map; `__KEY__` substitution in agent-facing markdown
-     * resolves against this exact map.
-     */
-    readonly envVars: Readonly<Record<string, string>>;
-    /**
-     * The resolved in-container mount DIRECTORY of each submitted `File`, so the
-     * caller can learn where a handed file landed. `mountPath` is the validated
-     * directory the archive unzipped into (the SDK default is `/workspace`); a
-     * single file lands at `<mountPath>/<realFilename>`, a folder lands its entries
-     * under `<mountPath>/`. Empty when the session carried no files.
-     */
-    readonly mountedFiles: readonly MountedFileManifest[];
-}
-/** One submitted `File`'s resolved mount directory (surfaced on the Session record). */
-export interface MountedFileManifest {
-    /** The file's storage slug (`FileRef.name`). */
-    readonly name: string;
-    /** Absolute container directory the file unzipped into (defaults to `/workspace`). */
-    readonly mountPath: string;
-}
-/**
- * Managed-runner container paths. Kept here so the BFF, hosted API, and
- * in-container bridge render identical values; runtime bootstrap constants are
- * validated against these by a regression test
- * (`packages/contracts/test/runtime-manifest.test.ts`).
- */
-declare const RUNTIME_PATHS: Readonly<{
-    readonly skillsRoot: "/workspace/skills";
-    readonly filesRoot: "/mnt/session/uploads/aex/files";
-    readonly assetsRoot: "/mnt/session/uploads/aex/assets";
-    readonly aexCli: "/mnt/session/uploads/aex/aex";
-    readonly indexJson: "/mnt/session/uploads/aex/index.json";
-    readonly readme: "/mnt/session/uploads/aex/SKILLS.md";
-    readonly runtimeJson: "/mnt/session/uploads/aex/RUNTIME.json";
-    readonly runtimeEnv: "/mnt/session/uploads/aex/RUNTIME.env";
-}>;
-export declare function runtimePaths(): typeof RUNTIME_PATHS;
-export interface BuildRuntimeManifestInput {
-    readonly provider: ProviderName | string;
-    /**
-     * Customer-supplied `environment.envVars` from the validated
-     * submission. Keys with the reserved `AEX_` prefix are
-     * filtered out defensively — the strict submission parser already
-     * rejects them, but defence-in-depth means a malformed snapshot
-     * (or a future bypass) can't poison the manifest.
-     */
-    readonly customerEnvVars?: Readonly<Record<string, string>> | undefined;
-    /**
-     * The validated submission's `files` refs. Each resolves to one
-     * {@link MountedFileManifest} entry surfacing the resolved mount directory
-     * (the SDK default is `/workspace`). Absent / non-array ⇒ no mounted files.
-     */
-    readonly files?: readonly {
-        readonly name?: unknown;
-        readonly mountPath?: unknown;
-    }[] | undefined;
-}
-/**
- * Build the runtime manifest for a single submission. Pure function:
- * same input → same output → safe to call from the BFF response path
- * and from the hosted bootstrap path with identical results.
- */
-export declare function buildRuntimeManifest(input: BuildRuntimeManifestInput): RuntimeManifest;
-export {};

package/dist/_contracts/runtime-manifest.js

@@ -1,83 +0,0 @@
-/**
- * Managed-runner container paths. Kept here so the BFF, hosted API, and
- * in-container bridge render identical values; runtime bootstrap constants are
- * validated against these by a regression test
- * (`packages/contracts/test/runtime-manifest.test.ts`).
- */
-const RUNTIME_PATHS = Object.freeze({
-    skillsRoot: "/workspace/skills",
-    filesRoot: "/mnt/session/uploads/aex/files",
-    assetsRoot: "/mnt/session/uploads/aex/assets",
-    aexCli: "/mnt/session/uploads/aex/aex",
-    indexJson: "/mnt/session/uploads/aex/index.json",
-    readme: "/mnt/session/uploads/aex/SKILLS.md",
-    runtimeJson: "/mnt/session/uploads/aex/RUNTIME.json",
-    runtimeEnv: "/mnt/session/uploads/aex/RUNTIME.env"
-});
-export function runtimePaths() {
-    return RUNTIME_PATHS;
-}
-/**
- * Reserved env-var prefix for aex-set runtime keys. Mirrors the
- * constant in `submission.ts`; duplicated here so this module is
- * self-contained and can be tree-shaken by SDK consumers that don't
- * need the submission parser.
- */
-const AEX_PREFIX = "AEX_";
-/**
- * Default mount DIRECTORY for a `File` with no explicit `mountPath`. Mirrors
- * `DEFAULT_FILE_MOUNT_PATH` in `session-config.ts`; duplicated here so this module
- * stays self-contained (tree-shakeable) — the same reason {@link AEX_PREFIX}
- * is inlined rather than imported from the submission parser.
- */
-const DEFAULT_FILE_MOUNT_PATH = "/workspace";
-/**
- * Build the runtime manifest for a single submission. Pure function:
- * same input → same output → safe to call from the BFF response path
- * and from the hosted bootstrap path with identical results.
- */
-export function buildRuntimeManifest(input) {
-    const paths = runtimePaths();
-    const aexEnvVars = {
-        AEX_PROVIDER: input.provider,
-        AEX_CLI: paths.aexCli,
-        AEX_SKILLS_ROOT: paths.skillsRoot,
-        AEX_FILES_ROOT: paths.filesRoot,
-        AEX_ASSETS_ROOT: paths.assetsRoot,
-        AEX_INDEX_JSON: paths.indexJson,
-        AEX_README: paths.readme,
-        AEX_RUNTIME_JSON: paths.runtimeJson,
-        AEX_RUNTIME_ENV: paths.runtimeEnv
-    };
-    const customerEnvVars = {};
-    for (const [key, value] of Object.entries(input.customerEnvVars ?? {})) {
-        if (key.startsWith(AEX_PREFIX)) {
-            // Defensive filter; the strict parser rejects this at submit
-            // time. If a stored snapshot somehow carries a reserved key
-            // we drop it rather than letting it shadow our value.
-            continue;
-        }
-        customerEnvVars[key] = value;
-    }
-    const envVars = Object.freeze({ ...aexEnvVars, ...customerEnvVars });
-    const mountedFiles = [];
-    for (const f of Array.isArray(input.files) ? input.files : []) {
-        if (typeof f.name !== "string" || f.name.length === 0)
-            continue;
-        const mountPath = typeof f.mountPath === "string" && f.mountPath.length > 0 ? f.mountPath : DEFAULT_FILE_MOUNT_PATH;
-        mountedFiles.push(Object.freeze({ name: f.name, mountPath }));
-    }
-    return Object.freeze({
-        provider: input.provider,
-        skillsRoot: paths.skillsRoot,
-        filesRoot: paths.filesRoot,
-        assetsRoot: paths.assetsRoot,
-        aexCli: paths.aexCli,
-        indexJson: paths.indexJson,
-        readme: paths.readme,
-        runtimeJson: paths.runtimeJson,
-        runtimeEnv: paths.runtimeEnv,
-        envVars,
-        mountedFiles: Object.freeze(mountedFiles)
-    });
-}

package/dist/_contracts/runtime-security-profile.d.ts

@@ -1,26 +0,0 @@
-import { RUNTIME_SECURITY_PROFILES } from "./schemas/runtime-security-profile.js";
-export { RUNTIME_SECURITY_PROFILES };
-export type RuntimeSecurityProfileName = (typeof RUNTIME_SECURITY_PROFILES)[number];
-export interface RuntimeSecurityProfile {
-    readonly name: RuntimeSecurityProfileName;
-    readonly defaultNetworkingMode: "limited" | "open";
-    readonly allowOpenNetworking: boolean;
-    readonly allowRuntimePackages: boolean;
-    readonly allowCustomerEnvVars: boolean;
-    readonly allowMcpServers: boolean;
-}
-export interface RuntimeSecurityProfileEvaluationInput {
-    readonly networkingMode?: "limited" | "open";
-    readonly packageCount?: number;
-    readonly customerEnvVarCount?: number;
-    readonly mcpServerCount?: number;
-}
-export interface RuntimeSecurityProfileViolation {
-    readonly field: string;
-    readonly reason: string;
-}
-export declare const RUNTIME_SECURITY_PROFILE_CONFIG: Readonly<Record<RuntimeSecurityProfileName, RuntimeSecurityProfile>>;
-export declare function parseRuntimeSecurityProfile(input: unknown): RuntimeSecurityProfileName | undefined;
-export declare function resolveRuntimeSecurityProfile(input: RuntimeSecurityProfileName | undefined): RuntimeSecurityProfile;
-export declare function serializeRuntimeSecurityProfile(profile: RuntimeSecurityProfileName): string;
-export declare function evaluateRuntimeSecurityProfile(profileName: RuntimeSecurityProfileName | undefined, input: RuntimeSecurityProfileEvaluationInput): readonly RuntimeSecurityProfileViolation[];

package/dist/_contracts/runtime-security-profile.js

@@ -1,73 +0,0 @@
-import { withContractParseError } from "./contract-parse-error.js";
-import { RUNTIME_SECURITY_PROFILES, RuntimeSecurityProfileSchema } from "./schemas/runtime-security-profile.js";
-import { parseWire } from "./schemas/wire.js";
-export { RUNTIME_SECURITY_PROFILES };
-export const RUNTIME_SECURITY_PROFILE_CONFIG = Object.freeze({
-    strict: Object.freeze({
-        name: "strict",
-        defaultNetworkingMode: "limited",
-        allowOpenNetworking: false,
-        allowRuntimePackages: false,
-        allowCustomerEnvVars: true,
-        allowMcpServers: true
-    }),
-    standard: Object.freeze({
-        name: "standard",
-        defaultNetworkingMode: "open",
-        allowOpenNetworking: true,
-        allowRuntimePackages: true,
-        allowCustomerEnvVars: true,
-        allowMcpServers: true
-    }),
-    developer: Object.freeze({
-        name: "developer",
-        defaultNetworkingMode: "open",
-        allowOpenNetworking: true,
-        allowRuntimePackages: true,
-        allowCustomerEnvVars: true,
-        allowMcpServers: true
-    })
-});
-export function parseRuntimeSecurityProfile(input) {
-    return withContractParseError("parseRuntimeSecurityProfile", () => {
-        if (input === undefined || input === null)
-            return undefined;
-        return parseWire(RuntimeSecurityProfileSchema, input);
-    });
-}
-export function resolveRuntimeSecurityProfile(input) {
-    return RUNTIME_SECURITY_PROFILE_CONFIG[input ?? "standard"];
-}
-export function serializeRuntimeSecurityProfile(profile) {
-    parseRuntimeSecurityProfile(profile);
-    return profile;
-}
-export function evaluateRuntimeSecurityProfile(profileName, input) {
-    const profile = resolveRuntimeSecurityProfile(profileName);
-    const violations = [];
-    if (input.networkingMode === "open" && !profile.allowOpenNetworking) {
-        violations.push({
-            field: "environment.networking.mode",
-            reason: `${profile.name} requires limited networking`
-        });
-    }
-    if ((input.packageCount ?? 0) > 0 && !profile.allowRuntimePackages) {
-        violations.push({
-            field: "environment.packages",
-            reason: `${profile.name} does not allow runtime package installs`
-        });
-    }
-    if ((input.customerEnvVarCount ?? 0) > 0 && !profile.allowCustomerEnvVars) {
-        violations.push({
-            field: "environment.envVars",
-            reason: `${profile.name} does not allow customer runtime env vars`
-        });
-    }
-    if ((input.mcpServerCount ?? 0) > 0 && !profile.allowMcpServers) {
-        violations.push({
-            field: "submission.mcpServers",
-            reason: `${profile.name} does not allow MCP servers`
-        });
-    }
-    return Object.freeze(violations);
-}