@agent-deck/shared 2.1.0 → 2.2.0

package/dist/index.d.ts

@@ -11,6 +11,7 @@ export * from './schemas/store';
 export * from './schemas/session-bootstrap';
 export * from './schemas/trusted-session';
 export * from './schemas/card-usage';
+export * from './schemas/agent-run';
 export * from './types/api';
 export { OAuthDiscoveryResult } from './types/oauth';
 export * from './utils';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AAGrC,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGrD,cAAc,SAAS,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,EAC7B,mCAAmC,EACnC,iCAAiC,EACjC,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,sBAAsB,CAAC;AACrC,cAAc,iBAAiB,CAAC;AAChC,cAAc,oBAAoB,CAAC;AACnC,cAAc,0BAA0B,CAAC;AACzC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,iBAAiB,CAAC;AAChC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,sBAAsB,CAAC;AACrC,cAAc,qBAAqB,CAAC;AAGpC,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAGrD,cAAc,SAAS,CAAC;AACxB,OAAO,EACL,2BAA2B,EAC3B,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,EACnB,wBAAwB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,8BAA8B,EAC9B,yBAAyB,EACzB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AAGpC,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,uBAAuB,EACvB,2BAA2B,EAC3B,yBAAyB,EACzB,6BAA6B,EAC7B,mCAAmC,EACnC,iCAAiC,EACjC,6BAA6B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,sBAAsB,EACtB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/index.js

@@ -29,6 +29,7 @@ __exportStar(require("./schemas/store"), exports);
 __exportStar(require("./schemas/session-bootstrap"), exports);
 __exportStar(require("./schemas/trusted-session"), exports);
 __exportStar(require("./schemas/card-usage"), exports);
+__exportStar(require("./schemas/agent-run"), exports);
 // Additional types not covered by schemas
 __exportStar(require("./types/api"), exports);
 // Utils

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,wCAAwC;AACxC,oDAAkC;AAClC,iDAA+B;AAC/B,uDAAqC;AACrC,kDAAgC;AAChC,qDAAmC;AACnC,2DAAyC;AACzC,4DAA0C;AAC1C,yDAAuC;AACvC,0DAAwC;AACxC,kDAAgC;AAChC,8DAA4C;AAC5C,4DAA0C;AAC1C,uDAAqC;AAErC,0CAA0C;AAC1C,8CAA4B;AAG5B,QAAQ;AACR,0CAAwB;AACxB,mEAQqC;AAPnC,kIAAA,2BAA2B,OAAA;AAC3B,yHAAA,kBAAkB,OAAA;AAClB,4HAAA,qBAAqB,OAAA;AACrB,0HAAA,mBAAmB,OAAA;AACnB,+HAAA,wBAAwB,OAAA;AAI1B,iEAIoC;AAHlC,oIAAA,8BAA8B,OAAA;AAC9B,+HAAA,yBAAyB,OAAA;AACzB,6HAAA,uBAAuB,OAAA;AAGzB,YAAY;AACZ,yDAUkC;AAThC,wHAAA,wBAAwB,OAAA;AACxB,2HAAA,2BAA2B,OAAA;AAC3B,uHAAA,uBAAuB,OAAA;AACvB,2HAAA,2BAA2B,OAAA;AAC3B,yHAAA,yBAAyB,OAAA;AACzB,6HAAA,6BAA6B,OAAA;AAC7B,mIAAA,mCAAmC,OAAA;AACnC,iIAAA,iCAAiC,OAAA;AACjC,6HAAA,6BAA6B,OAAA;AAE/B,+DASqC;AARnC,4HAAA,yBAAyB,OAAA;AACzB,8HAAA,2BAA2B,OAAA;AAC3B,2HAAA,wBAAwB,OAAA;AACxB,sHAAA,mBAAmB,OAAA;AACnB,yHAAA,sBAAsB,OAAA;AACtB,yHAAA,sBAAsB,OAAA;AACtB,6HAAA,0BAA0B,OAAA;AAC1B,8HAAA,2BAA2B,OAAA;AAE7B,uDAAuH;AAA9G,6GAAA,cAAc,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAAE,kHAAA,mBAAmB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,wCAAwC;AACxC,oDAAkC;AAClC,iDAA+B;AAC/B,uDAAqC;AACrC,kDAAgC;AAChC,qDAAmC;AACnC,2DAAyC;AACzC,4DAA0C;AAC1C,yDAAuC;AACvC,0DAAwC;AACxC,kDAAgC;AAChC,8DAA4C;AAC5C,4DAA0C;AAC1C,uDAAqC;AACrC,sDAAoC;AAEpC,0CAA0C;AAC1C,8CAA4B;AAG5B,QAAQ;AACR,0CAAwB;AACxB,mEAQqC;AAPnC,kIAAA,2BAA2B,OAAA;AAC3B,yHAAA,kBAAkB,OAAA;AAClB,4HAAA,qBAAqB,OAAA;AACrB,0HAAA,mBAAmB,OAAA;AACnB,+HAAA,wBAAwB,OAAA;AAI1B,iEAIoC;AAHlC,oIAAA,8BAA8B,OAAA;AAC9B,+HAAA,yBAAyB,OAAA;AACzB,6HAAA,uBAAuB,OAAA;AAGzB,YAAY;AACZ,yDAUkC;AAThC,wHAAA,wBAAwB,OAAA;AACxB,2HAAA,2BAA2B,OAAA;AAC3B,uHAAA,uBAAuB,OAAA;AACvB,2HAAA,2BAA2B,OAAA;AAC3B,yHAAA,yBAAyB,OAAA;AACzB,6HAAA,6BAA6B,OAAA;AAC7B,mIAAA,mCAAmC,OAAA;AACnC,iIAAA,iCAAiC,OAAA;AACjC,6HAAA,6BAA6B,OAAA;AAE/B,+DASqC;AARnC,4HAAA,yBAAyB,OAAA;AACzB,8HAAA,2BAA2B,OAAA;AAC3B,2HAAA,wBAAwB,OAAA;AACxB,sHAAA,mBAAmB,OAAA;AACnB,yHAAA,sBAAsB,OAAA;AACtB,yHAAA,sBAAsB,OAAA;AACtB,6HAAA,0BAA0B,OAAA;AAC1B,8HAAA,2BAA2B,OAAA;AAE7B,uDAAuH;AAA9G,6GAAA,cAAc,OAAA;AAAE,iHAAA,kBAAkB,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAAE,kHAAA,mBAAmB,OAAA"}

package/dist/schemas/agent-run.d.ts

@@ -0,0 +1,749 @@
+import { z } from 'zod';
+/**
+ * Agent run HTTP contract (NOT-480): one coding-agent attempt on the Agent
+ * Deck host, started or continued by an authenticated remote coordinator.
+ *
+ * Responses carry only public lifecycle fields and normalized events —
+ * never a host pid, a private log path, credentials, or an Authorization
+ * value. Success bodies are wrapped as `{ success: true, data }`.
+ */
+/** Prompt bound checked before launch (characters). */
+export declare const AGENT_RUN_PROMPT_MAX_CHARS: number;
+/** Whole-request bound for `POST /api/agent-runs` (bytes). */
+export declare const AGENT_RUN_REQUEST_BODY_LIMIT_BYTES: number;
+/** Required on `POST /api/agent-runs`; scoped to the calling grant. */
+export declare const AGENT_RUN_IDEMPOTENCY_HEADER = "idempotency-key";
+export declare const AGENT_RUN_EVENTS_DEFAULT_LIMIT = 200;
+export declare const AGENT_RUN_EVENTS_MAX_LIMIT = 1000;
+export declare const AgentRunClientSchema: z.ZodEnum<["claude", "codex", "cursor", "muse"]>;
+export declare const AgentRunToolsSchema: z.ZodEnum<["readonly", "edit"]>;
+/** Opaque run id (`run-<UTC stamp>-<hex>`). */
+export declare const AgentRunIdSchema: z.ZodString;
+export declare const AgentRunIdempotencyKeySchema: z.ZodString;
+export declare const CreateAgentRunRequestSchema: z.ZodObject<{
+    deckId: z.ZodString;
+    client: z.ZodEnum<["claude", "codex", "cursor", "muse"]>;
+    /** Absolute working directory on the Agent Deck host. */
+    cwd: z.ZodEffects<z.ZodString, string, string>;
+    prompt: z.ZodEffects<z.ZodString, string, string>;
+    /** Explicit tool profile; `readonly` only when omitted. */
+    tools: z.ZodDefault<z.ZodEnum<["readonly", "edit"]>>;
+    /** Opaque client session id from an earlier run's status. */
+    resumeSessionId: z.ZodOptional<z.ZodString>;
+    /**
+     * NOT-486: capture a private pre-launch Git baseline so this run can be
+     * finalized into one local commit. Valid only with `tools: "edit"`, a Git
+     * worktree `cwd`, and a clean Git index.
+     */
+    prepareFinalization: z.ZodDefault<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    tools: "readonly" | "edit";
+    deckId: string;
+    cwd: string;
+    client: "claude" | "cursor" | "codex" | "muse";
+    prompt: string;
+    prepareFinalization: boolean;
+    resumeSessionId?: string | undefined;
+}, {
+    deckId: string;
+    cwd: string;
+    client: "claude" | "cursor" | "codex" | "muse";
+    prompt: string;
+    tools?: "readonly" | "edit" | undefined;
+    resumeSessionId?: string | undefined;
+    prepareFinalization?: boolean | undefined;
+}>;
+/**
+ * Lifecycle state. `starting` is the launch acknowledgement (record written,
+ * no event yet); `running` has emitted events; `ended`, `error`, `died`, and
+ * `canceled` (NOT-481: operator cancellation, never an execution error) are
+ * terminal. `running` never implies success.
+ */
+export declare const AgentRunStateSchema: z.ZodEnum<["starting", "running", "ended", "error", "died", "canceled"]>;
+export declare const AGENT_RUN_TERMINAL_STATES: readonly ["ended", "error", "died", "canceled"];
+export declare const CreateAgentRunResponseSchema: z.ZodObject<{
+    runId: z.ZodString;
+    state: z.ZodEnum<["starting", "running", "ended", "error", "died", "canceled"]>;
+}, "strict", z.ZodTypeAny, {
+    state: "error" | "starting" | "running" | "ended" | "died" | "canceled";
+    runId: string;
+}, {
+    state: "error" | "starting" | "running" | "ended" | "died" | "canceled";
+    runId: string;
+}>;
+/** Lowercase hex Git object id (SHA-1 or SHA-256 repositories). */
+export declare const GitObjectIdSchema: z.ZodString;
+export declare const Sha256HexSchema: z.ZodString;
+/** Opaque reference to a run's private pre-launch Git baseline. */
+export declare const FinalizationBaselineRefSchema: z.ZodString;
+/**
+ * `prepared`: baseline captured, not finalized; `finalizing`: one finalize
+ * request is in progress; `finalized`: one local commit was created.
+ */
+export declare const FinalizationStateSchema: z.ZodEnum<["prepared", "finalizing", "finalized"]>;
+/** Public finalization fields on a prepared run (never a host path or file content). */
+export declare const AgentRunFinalizationStatusSchema: z.ZodObject<{
+    baselineRef: z.ZodString;
+    baselineDigest: z.ZodString;
+    state: z.ZodEnum<["prepared", "finalizing", "finalized"]>;
+    commit: z.ZodNullable<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    state: "prepared" | "finalizing" | "finalized";
+    baselineRef: string;
+    baselineDigest: string;
+    commit: string | null;
+}, {
+    state: "prepared" | "finalizing" | "finalized";
+    baselineRef: string;
+    baselineDigest: string;
+    commit: string | null;
+}>;
+export declare const AgentRunStatusSchema: z.ZodObject<{
+    runId: z.ZodString;
+    deckId: z.ZodString;
+    client: z.ZodEnum<["claude", "codex", "cursor", "muse"]>;
+    tools: z.ZodEnum<["readonly", "edit"]>;
+    state: z.ZodEnum<["starting", "running", "ended", "error", "died", "canceled"]>;
+    /** Opaque client session id; pass as `resumeSessionId` to continue. */
+    sessionId: z.ZodNullable<z.ZodString>;
+    startedAt: z.ZodString;
+    lastEventAt: z.ZodNullable<z.ZodString>;
+    /** NOT-486: present only when the run was started with `prepareFinalization`. */
+    finalization: z.ZodNullable<z.ZodObject<{
+        baselineRef: z.ZodString;
+        baselineDigest: z.ZodString;
+        state: z.ZodEnum<["prepared", "finalizing", "finalized"]>;
+        commit: z.ZodNullable<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        state: "prepared" | "finalizing" | "finalized";
+        baselineRef: string;
+        baselineDigest: string;
+        commit: string | null;
+    }, {
+        state: "prepared" | "finalizing" | "finalized";
+        baselineRef: string;
+        baselineDigest: string;
+        commit: string | null;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    tools: "readonly" | "edit";
+    deckId: string;
+    startedAt: string;
+    state: "error" | "starting" | "running" | "ended" | "died" | "canceled";
+    sessionId: string | null;
+    client: "claude" | "cursor" | "codex" | "muse";
+    runId: string;
+    lastEventAt: string | null;
+    finalization: {
+        state: "prepared" | "finalizing" | "finalized";
+        baselineRef: string;
+        baselineDigest: string;
+        commit: string | null;
+    } | null;
+}, {
+    tools: "readonly" | "edit";
+    deckId: string;
+    startedAt: string;
+    state: "error" | "starting" | "running" | "ended" | "died" | "canceled";
+    sessionId: string | null;
+    client: "claude" | "cursor" | "codex" | "muse";
+    runId: string;
+    lastEventAt: string | null;
+    finalization: {
+        state: "prepared" | "finalizing" | "finalized";
+        baselineRef: string;
+        baselineDigest: string;
+        commit: string | null;
+    } | null;
+}>;
+/**
+ * Normalized run events, in log order. `seq` is the event's 1-based position
+ * in the canonical log: stable across reads and strictly increasing.
+ */
+export declare const AgentRunEventSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+    type: z.ZodLiteral<"text">;
+    text: z.ZodString;
+    seq: z.ZodNumber;
+    ts: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    type: "text";
+    text: string;
+    seq: number;
+    ts: string;
+}, {
+    type: "text";
+    text: string;
+    seq: number;
+    ts: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"tool">;
+    name: z.ZodString;
+    seq: z.ZodNumber;
+    ts: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    name: string;
+    type: "tool";
+    seq: number;
+    ts: string;
+}, {
+    name: string;
+    type: "tool";
+    seq: number;
+    ts: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"notice">;
+    message: z.ZodString;
+    sessionId: z.ZodNullable<z.ZodString>;
+    seq: z.ZodNumber;
+    ts: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    type: "notice";
+    message: string;
+    sessionId: string | null;
+    seq: number;
+    ts: string;
+}, {
+    type: "notice";
+    message: string;
+    sessionId: string | null;
+    seq: number;
+    ts: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"result">;
+    subtype: z.ZodString;
+    result: z.ZodUnknown;
+    sessionId: z.ZodNullable<z.ZodString>;
+    seq: z.ZodNumber;
+    ts: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    type: "result";
+    sessionId: string | null;
+    seq: number;
+    ts: string;
+    subtype: string;
+    result?: unknown;
+}, {
+    type: "result";
+    sessionId: string | null;
+    seq: number;
+    ts: string;
+    subtype: string;
+    result?: unknown;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"end">;
+    sessionId: z.ZodNullable<z.ZodString>;
+    seq: z.ZodNumber;
+    ts: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    type: "end";
+    sessionId: string | null;
+    seq: number;
+    ts: string;
+}, {
+    type: "end";
+    sessionId: string | null;
+    seq: number;
+    ts: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"error">;
+    message: z.ZodString;
+    sessionId: z.ZodNullable<z.ZodString>;
+    seq: z.ZodNumber;
+    ts: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    type: "error";
+    message: string;
+    sessionId: string | null;
+    seq: number;
+    ts: string;
+}, {
+    type: "error";
+    message: string;
+    sessionId: string | null;
+    seq: number;
+    ts: string;
+}>, z.ZodObject<{
+    type: z.ZodLiteral<"canceled">;
+    sessionId: z.ZodNullable<z.ZodString>;
+    seq: z.ZodNumber;
+    ts: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    type: "canceled";
+    sessionId: string | null;
+    seq: number;
+    ts: string;
+}, {
+    type: "canceled";
+    sessionId: string | null;
+    seq: number;
+    ts: string;
+}>]>;
+export declare const AgentRunEventsQuerySchema: z.ZodObject<{
+    /** Cursor from a previous read's `nextCursor`; omitted reads from the start. */
+    after: z.ZodOptional<z.ZodString>;
+    limit: z.ZodOptional<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    after?: string | undefined;
+    limit?: number | undefined;
+}, {
+    after?: string | undefined;
+    limit?: number | undefined;
+}>;
+export declare const AgentRunEventsResponseSchema: z.ZodObject<{
+    runId: z.ZodString;
+    state: z.ZodEnum<["starting", "running", "ended", "error", "died", "canceled"]>;
+    events: z.ZodArray<z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
+        type: z.ZodLiteral<"text">;
+        text: z.ZodString;
+        seq: z.ZodNumber;
+        ts: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        type: "text";
+        text: string;
+        seq: number;
+        ts: string;
+    }, {
+        type: "text";
+        text: string;
+        seq: number;
+        ts: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"tool">;
+        name: z.ZodString;
+        seq: z.ZodNumber;
+        ts: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        name: string;
+        type: "tool";
+        seq: number;
+        ts: string;
+    }, {
+        name: string;
+        type: "tool";
+        seq: number;
+        ts: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"notice">;
+        message: z.ZodString;
+        sessionId: z.ZodNullable<z.ZodString>;
+        seq: z.ZodNumber;
+        ts: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        type: "notice";
+        message: string;
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    }, {
+        type: "notice";
+        message: string;
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"result">;
+        subtype: z.ZodString;
+        result: z.ZodUnknown;
+        sessionId: z.ZodNullable<z.ZodString>;
+        seq: z.ZodNumber;
+        ts: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        type: "result";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+        subtype: string;
+        result?: unknown;
+    }, {
+        type: "result";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+        subtype: string;
+        result?: unknown;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"end">;
+        sessionId: z.ZodNullable<z.ZodString>;
+        seq: z.ZodNumber;
+        ts: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        type: "end";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    }, {
+        type: "end";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"error">;
+        message: z.ZodString;
+        sessionId: z.ZodNullable<z.ZodString>;
+        seq: z.ZodNumber;
+        ts: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        type: "error";
+        message: string;
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    }, {
+        type: "error";
+        message: string;
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    }>, z.ZodObject<{
+        type: z.ZodLiteral<"canceled">;
+        sessionId: z.ZodNullable<z.ZodString>;
+        seq: z.ZodNumber;
+        ts: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        type: "canceled";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    }, {
+        type: "canceled";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    }>]>, "many">;
+    /** Pass as `after` to read the next page; unchanged when nothing new arrived. */
+    nextCursor: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    state: "error" | "starting" | "running" | "ended" | "died" | "canceled";
+    runId: string;
+    events: ({
+        type: "text";
+        text: string;
+        seq: number;
+        ts: string;
+    } | {
+        name: string;
+        type: "tool";
+        seq: number;
+        ts: string;
+    } | {
+        type: "notice";
+        message: string;
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    } | {
+        type: "result";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+        subtype: string;
+        result?: unknown;
+    } | {
+        type: "end";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    } | {
+        type: "error";
+        message: string;
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    } | {
+        type: "canceled";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    })[];
+    nextCursor: string;
+}, {
+    state: "error" | "starting" | "running" | "ended" | "died" | "canceled";
+    runId: string;
+    events: ({
+        type: "text";
+        text: string;
+        seq: number;
+        ts: string;
+    } | {
+        name: string;
+        type: "tool";
+        seq: number;
+        ts: string;
+    } | {
+        type: "notice";
+        message: string;
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    } | {
+        type: "result";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+        subtype: string;
+        result?: unknown;
+    } | {
+        type: "end";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    } | {
+        type: "error";
+        message: string;
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    } | {
+        type: "canceled";
+        sessionId: string | null;
+        seq: number;
+        ts: string;
+    })[];
+    nextCursor: string;
+}>;
+/**
+ * `GET /api/agent-runs/capabilities` (NOT-481): only clients whose real host
+ * preflight (installed and signed in) passes are listed. `start`/`resume`
+ * name the tool profiles the client can enforce; `same_profile_provenance`
+ * means a resume continues only a session an Agent Deck run on this host
+ * started with the same deck, cwd, and tools.
+ */
+export declare const AgentRunClientCapabilitySchema: z.ZodObject<{
+    client: z.ZodEnum<["claude", "codex", "cursor", "muse"]>;
+    start: z.ZodArray<z.ZodEnum<["readonly", "edit"]>, "many">;
+    resume: z.ZodArray<z.ZodEnum<["readonly", "edit"]>, "many">;
+    resumeRequires: z.ZodEnum<["none", "same_profile_provenance"]>;
+}, "strict", z.ZodTypeAny, {
+    client: "claude" | "cursor" | "codex" | "muse";
+    start: ("readonly" | "edit")[];
+    resume: ("readonly" | "edit")[];
+    resumeRequires: "none" | "same_profile_provenance";
+}, {
+    client: "claude" | "cursor" | "codex" | "muse";
+    start: ("readonly" | "edit")[];
+    resume: ("readonly" | "edit")[];
+    resumeRequires: "none" | "same_profile_provenance";
+}>;
+export declare const AgentRunCapabilitiesResponseSchema: z.ZodObject<{
+    /** Runs execute on the Agent Deck host; `cwd` is a path on that host. */
+    host: z.ZodLiteral<"same-host">;
+    clients: z.ZodArray<z.ZodObject<{
+        client: z.ZodEnum<["claude", "codex", "cursor", "muse"]>;
+        start: z.ZodArray<z.ZodEnum<["readonly", "edit"]>, "many">;
+        resume: z.ZodArray<z.ZodEnum<["readonly", "edit"]>, "many">;
+        resumeRequires: z.ZodEnum<["none", "same_profile_provenance"]>;
+    }, "strict", z.ZodTypeAny, {
+        client: "claude" | "cursor" | "codex" | "muse";
+        start: ("readonly" | "edit")[];
+        resume: ("readonly" | "edit")[];
+        resumeRequires: "none" | "same_profile_provenance";
+    }, {
+        client: "claude" | "cursor" | "codex" | "muse";
+        start: ("readonly" | "edit")[];
+        resume: ("readonly" | "edit")[];
+        resumeRequires: "none" | "same_profile_provenance";
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    host: "same-host";
+    clients: {
+        client: "claude" | "cursor" | "codex" | "muse";
+        start: ("readonly" | "edit")[];
+        resume: ("readonly" | "edit")[];
+        resumeRequires: "none" | "same_profile_provenance";
+    }[];
+}, {
+    host: "same-host";
+    clients: {
+        client: "claude" | "cursor" | "codex" | "muse";
+        start: ("readonly" | "edit")[];
+        resume: ("readonly" | "edit")[];
+        resumeRequires: "none" | "same_profile_provenance";
+    }[];
+}>;
+/**
+ * NOT-486: one manifest entry. Repository-relative POSIX path; `sha256` is
+ * the SHA-256 of the exact working-tree bytes and `mode` the Git file mode.
+ * A deleted path carries `sha256: null` and `mode: null`.
+ */
+export declare const FINALIZATION_MANIFEST_MAX_FILES = 1000;
+export declare const FINALIZATION_PATH_MAX_CHARS = 1024;
+export declare const FINALIZATION_COMMIT_MESSAGE_MAX_CHARS = 8192;
+export declare const FINALIZATION_REVIEW_ID_MAX_CHARS = 200;
+export declare const FinalizationFileModeSchema: z.ZodEnum<["100644", "100755"]>;
+export declare const FinalizationManifestEntrySchema: z.ZodEffects<z.ZodObject<{
+    path: z.ZodString;
+    sha256: z.ZodNullable<z.ZodString>;
+    mode: z.ZodNullable<z.ZodEnum<["100644", "100755"]>>;
+}, "strict", z.ZodTypeAny, {
+    path: string;
+    mode: "100644" | "100755" | null;
+    sha256: string | null;
+}, {
+    path: string;
+    mode: "100644" | "100755" | null;
+    sha256: string | null;
+}>, {
+    path: string;
+    mode: "100644" | "100755" | null;
+    sha256: string | null;
+}, {
+    path: string;
+    mode: "100644" | "100755" | null;
+    sha256: string | null;
+}>;
+/** `GET /api/agent-runs/:runId/changes`: the candidate manifest, ordered by path. */
+export declare const AgentRunChangesResponseSchema: z.ZodObject<{
+    runId: z.ZodString;
+    baselineRef: z.ZodString;
+    baselineDigest: z.ZodString;
+    /** Pass as `expectedBaseCommit` when finalizing. */
+    baseCommit: z.ZodString;
+    files: z.ZodArray<z.ZodEffects<z.ZodObject<{
+        path: z.ZodString;
+        sha256: z.ZodNullable<z.ZodString>;
+        mode: z.ZodNullable<z.ZodEnum<["100644", "100755"]>>;
+    }, "strict", z.ZodTypeAny, {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }, {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }>, {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }, {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }>, "many">;
+    manifestDigest: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    runId: string;
+    baselineRef: string;
+    baselineDigest: string;
+    baseCommit: string;
+    files: {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }[];
+    manifestDigest: string;
+}, {
+    runId: string;
+    baselineRef: string;
+    baselineDigest: string;
+    baseCommit: string;
+    files: {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }[];
+    manifestDigest: string;
+}>;
+/** `POST /api/agent-runs/:runId/finalize` (requires `Idempotency-Key`). */
+export declare const FinalizeAgentRunRequestSchema: z.ZodObject<{
+    baselineDigest: z.ZodString;
+    expectedBaseCommit: z.ZodString;
+    reviewId: z.ZodString;
+    commitMessage: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+    files: z.ZodArray<z.ZodEffects<z.ZodObject<{
+        path: z.ZodString;
+        sha256: z.ZodNullable<z.ZodString>;
+        mode: z.ZodNullable<z.ZodEnum<["100644", "100755"]>>;
+    }, "strict", z.ZodTypeAny, {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }, {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }>, {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }, {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    baselineDigest: string;
+    files: {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }[];
+    expectedBaseCommit: string;
+    reviewId: string;
+    commitMessage: string;
+}, {
+    baselineDigest: string;
+    files: {
+        path: string;
+        mode: "100644" | "100755" | null;
+        sha256: string | null;
+    }[];
+    expectedBaseCommit: string;
+    reviewId: string;
+    commitMessage: string;
+}>;
+export declare const FinalizeAgentRunResponseSchema: z.ZodObject<{
+    runId: z.ZodString;
+    finalizationState: z.ZodLiteral<"finalized">;
+    commit: z.ZodString;
+    tree: z.ZodString;
+    parent: z.ZodString;
+    manifestDigest: z.ZodString;
+    fileCount: z.ZodNumber;
+    reviewId: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    runId: string;
+    commit: string;
+    manifestDigest: string;
+    reviewId: string;
+    finalizationState: "finalized";
+    tree: string;
+    parent: string;
+    fileCount: number;
+}, {
+    runId: string;
+    commit: string;
+    manifestDigest: string;
+    reviewId: string;
+    finalizationState: "finalized";
+    tree: string;
+    parent: string;
+    fileCount: number;
+}>;
+/** Run-specific error codes (auth failures use the trusted-session codes). */
+export declare const AgentRunErrorCodeSchema: z.ZodEnum<["INVALID_REQUEST", "REQUEST_TOO_LARGE", "IDEMPOTENCY_KEY_REQUIRED", "IDEMPOTENCY_CONFLICT", "DECK_NOT_FOUND", "WORKSPACE_INVALID", "WORKSPACE_MISMATCH", "CLIENT_UNAVAILABLE", "PROFILE_UNSUPPORTED", "RESUME_UNVERIFIED", "RUN_NOT_FOUND", "RUN_NOT_CANCELABLE", "FINALIZATION_INVALID", "FINALIZATION_NOT_PREPARED", "RUN_NOT_TERMINAL", "BASE_MISMATCH", "INDEX_DIRTY", "BASELINE_MISMATCH", "PATH_INVALID", "PATH_UNEXPECTED", "DIGEST_MISMATCH", "GIT_LOCK_CONFLICT", "REF_RACE", "FINALIZATION_CANCELED", "FINALIZATION_FAILED"]>;
+export type AgentRunClient = z.infer<typeof AgentRunClientSchema>;
+export type AgentRunTools = z.infer<typeof AgentRunToolsSchema>;
+export type CreateAgentRunRequest = z.infer<typeof CreateAgentRunRequestSchema>;
+export type CreateAgentRunResponse = z.infer<typeof CreateAgentRunResponseSchema>;
+export type AgentRunState = z.infer<typeof AgentRunStateSchema>;
+export type AgentRunStatus = z.infer<typeof AgentRunStatusSchema>;
+export type AgentRunEvent = z.infer<typeof AgentRunEventSchema>;
+export type AgentRunEventsQuery = z.infer<typeof AgentRunEventsQuerySchema>;
+export type AgentRunEventsResponse = z.infer<typeof AgentRunEventsResponseSchema>;
+export type AgentRunErrorCode = z.infer<typeof AgentRunErrorCodeSchema>;
+export type AgentRunClientCapability = z.infer<typeof AgentRunClientCapabilitySchema>;
+export type AgentRunCapabilitiesResponse = z.infer<typeof AgentRunCapabilitiesResponseSchema>;
+export type FinalizationState = z.infer<typeof FinalizationStateSchema>;
+export type AgentRunFinalizationStatus = z.infer<typeof AgentRunFinalizationStatusSchema>;
+export type FinalizationFileMode = z.infer<typeof FinalizationFileModeSchema>;
+export type FinalizationManifestEntry = z.infer<typeof FinalizationManifestEntrySchema>;
+export type AgentRunChangesResponse = z.infer<typeof AgentRunChangesResponseSchema>;
+export type FinalizeAgentRunRequest = z.infer<typeof FinalizeAgentRunRequestSchema>;
+export type FinalizeAgentRunResponse = z.infer<typeof FinalizeAgentRunResponseSchema>;
+export type AgentRunErrorBody = {
+    success: false;
+    error: string;
+    error_code: AgentRunErrorCode;
+};
+export declare function agentRunError(code: AgentRunErrorCode, message: string): AgentRunErrorBody;
+//# sourceMappingURL=agent-run.d.ts.map

package/dist/schemas/agent-run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-run.d.ts","sourceRoot":"","sources":["../../src/schemas/agent-run.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;GAOG;AAEH,uDAAuD;AACvD,eAAO,MAAM,0BAA0B,QAAY,CAAC;AACpD,8DAA8D;AAC9D,eAAO,MAAM,kCAAkC,QAAa,CAAC;AAC7D,uEAAuE;AACvE,eAAO,MAAM,4BAA4B,oBAAoB,CAAC;AAC9D,eAAO,MAAM,8BAA8B,MAAM,CAAC;AAClD,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C,eAAO,MAAM,oBAAoB,kDAAgD,CAAC;AAClF,eAAO,MAAM,mBAAmB,iCAA+B,CAAC;AAEhE,+CAA+C;AAC/C,eAAO,MAAM,gBAAgB,aAAoD,CAAC;AAElF,eAAO,MAAM,4BAA4B,aAI2C,CAAC;AAMrF,eAAO,MAAM,2BAA2B;;;IAIpC,yDAAyD;;;IAUzD,2DAA2D;;IAE3D,6DAA6D;;IAE7D;;;;OAIG;;;;;;;;;;;;;;;;;;EAGI,CAAC;AAEZ;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,0EAAwE,CAAC;AACzG,eAAO,MAAM,yBAAyB,iDAAkD,CAAC;AAEzF,eAAO,MAAM,4BAA4B;;;;;;;;;EAK9B,CAAC;AAEZ,mEAAmE;AACnE,eAAO,MAAM,iBAAiB,aAAsD,CAAC;AACrF,eAAO,MAAM,eAAe,aAAqC,CAAC;AAClE,mEAAmE;AACnE,eAAO,MAAM,6BAA6B,aAAwC,CAAC;AAEnF;;;GAGG;AACH,eAAO,MAAM,uBAAuB,oDAAkD,CAAC;AAEvF,wFAAwF;AACxF,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;EAOlC,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;IAO7B,uEAAuE;;;;IAIvE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAG1E,CAAC;AAIZ;;;GAGG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAqB9B,CAAC;AAEH,eAAO,MAAM,yBAAyB;IAElC,gFAAgF;;;;;;;;;EAIzE,CAAC;AAEZ,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAKrC,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAG1E,CAAC;AAEZ;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;EAOhC,CAAC;AAEZ,eAAO,MAAM,kCAAkC;IAE3C,yEAAyE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIlE,CAAC;AAEZ;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,OAAO,CAAC;AACpD,eAAO,MAAM,2BAA2B,OAAO,CAAC;AAChD,eAAO,MAAM,qCAAqC,OAAO,CAAC;AAC1D,eAAO,MAAM,gCAAgC,MAAM,CAAC;AAEpD,eAAO,MAAM,0BAA0B,iCAA+B,CAAC;AAEvE,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;EASxC,CAAC;AAEL,qFAAqF;AACrF,eAAO,MAAM,6BAA6B;;;;IAKtC,oDAAoD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK7C,CAAC;AAEZ,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgB/B,CAAC;AAEZ,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWhC,CAAC;AAEZ,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,ohBA2BlC,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AACtF,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAC1F,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,+BAA+B,CAAC,CAAC;AACxF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,iBAAiB,CAAC;CAC/B,CAAC;AAEF,wBAAgB,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAEzF"}

package/dist/schemas/agent-run.js

@@ -0,0 +1,267 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentRunErrorCodeSchema = exports.FinalizeAgentRunResponseSchema = exports.FinalizeAgentRunRequestSchema = exports.AgentRunChangesResponseSchema = exports.FinalizationManifestEntrySchema = exports.FinalizationFileModeSchema = exports.FINALIZATION_REVIEW_ID_MAX_CHARS = exports.FINALIZATION_COMMIT_MESSAGE_MAX_CHARS = exports.FINALIZATION_PATH_MAX_CHARS = exports.FINALIZATION_MANIFEST_MAX_FILES = exports.AgentRunCapabilitiesResponseSchema = exports.AgentRunClientCapabilitySchema = exports.AgentRunEventsResponseSchema = exports.AgentRunEventsQuerySchema = exports.AgentRunEventSchema = exports.AgentRunStatusSchema = exports.AgentRunFinalizationStatusSchema = exports.FinalizationStateSchema = exports.FinalizationBaselineRefSchema = exports.Sha256HexSchema = exports.GitObjectIdSchema = exports.CreateAgentRunResponseSchema = exports.AGENT_RUN_TERMINAL_STATES = exports.AgentRunStateSchema = exports.CreateAgentRunRequestSchema = exports.AgentRunIdempotencyKeySchema = exports.AgentRunIdSchema = exports.AgentRunToolsSchema = exports.AgentRunClientSchema = exports.AGENT_RUN_EVENTS_MAX_LIMIT = exports.AGENT_RUN_EVENTS_DEFAULT_LIMIT = exports.AGENT_RUN_IDEMPOTENCY_HEADER = exports.AGENT_RUN_REQUEST_BODY_LIMIT_BYTES = exports.AGENT_RUN_PROMPT_MAX_CHARS = void 0;
+exports.agentRunError = agentRunError;
+const zod_1 = require("zod");
+/**
+ * Agent run HTTP contract (NOT-480): one coding-agent attempt on the Agent
+ * Deck host, started or continued by an authenticated remote coordinator.
+ *
+ * Responses carry only public lifecycle fields and normalized events —
+ * never a host pid, a private log path, credentials, or an Authorization
+ * value. Success bodies are wrapped as `{ success: true, data }`.
+ */
+/** Prompt bound checked before launch (characters). */
+exports.AGENT_RUN_PROMPT_MAX_CHARS = 64 * 1024;
+/** Whole-request bound for `POST /api/agent-runs` (bytes). */
+exports.AGENT_RUN_REQUEST_BODY_LIMIT_BYTES = 256 * 1024;
+/** Required on `POST /api/agent-runs`; scoped to the calling grant. */
+exports.AGENT_RUN_IDEMPOTENCY_HEADER = 'idempotency-key';
+exports.AGENT_RUN_EVENTS_DEFAULT_LIMIT = 200;
+exports.AGENT_RUN_EVENTS_MAX_LIMIT = 1000;
+exports.AgentRunClientSchema = zod_1.z.enum(['claude', 'codex', 'cursor', 'muse']);
+exports.AgentRunToolsSchema = zod_1.z.enum(['readonly', 'edit']);
+/** Opaque run id (`run-<UTC stamp>-<hex>`). */
+exports.AgentRunIdSchema = zod_1.z.string().regex(/^run-\d{8}T\d{6}-[0-9a-f]{6}$/);
+exports.AgentRunIdempotencyKeySchema = zod_1.z
+    .string()
+    .min(1)
+    .max(200)
+    .regex(/^[\x21-\x7e]+$/, 'Idempotency-Key must be printable ASCII without spaces');
+function isAbsoluteHostPath(value) {
+    return value.startsWith('/') || /^[A-Za-z]:[\\/]/.test(value);
+}
+exports.CreateAgentRunRequestSchema = zod_1.z
+    .object({
+    deckId: zod_1.z.string().min(1).max(200),
+    client: exports.AgentRunClientSchema,
+    /** Absolute working directory on the Agent Deck host. */
+    cwd: zod_1.z
+        .string()
+        .min(1)
+        .max(4096)
+        .refine(isAbsoluteHostPath, 'cwd must be an absolute path on the Agent Deck host'),
+    prompt: zod_1.z
+        .string()
+        .max(exports.AGENT_RUN_PROMPT_MAX_CHARS)
+        .refine((value) => value.trim().length > 0, 'prompt must not be empty'),
+    /** Explicit tool profile; `readonly` only when omitted. */
+    tools: exports.AgentRunToolsSchema.default('readonly'),
+    /** Opaque client session id from an earlier run's status. */
+    resumeSessionId: zod_1.z.string().min(1).max(512).optional(),
+    /**
+     * NOT-486: capture a private pre-launch Git baseline so this run can be
+     * finalized into one local commit. Valid only with `tools: "edit"`, a Git
+     * worktree `cwd`, and a clean Git index.
+     */
+    prepareFinalization: zod_1.z.boolean().default(false),
+})
+    .strict();
+/**
+ * Lifecycle state. `starting` is the launch acknowledgement (record written,
+ * no event yet); `running` has emitted events; `ended`, `error`, `died`, and
+ * `canceled` (NOT-481: operator cancellation, never an execution error) are
+ * terminal. `running` never implies success.
+ */
+exports.AgentRunStateSchema = zod_1.z.enum(['starting', 'running', 'ended', 'error', 'died', 'canceled']);
+exports.AGENT_RUN_TERMINAL_STATES = ['ended', 'error', 'died', 'canceled'];
+exports.CreateAgentRunResponseSchema = zod_1.z
+    .object({
+    runId: exports.AgentRunIdSchema,
+    state: exports.AgentRunStateSchema,
+})
+    .strict();
+/** Lowercase hex Git object id (SHA-1 or SHA-256 repositories). */
+exports.GitObjectIdSchema = zod_1.z.string().regex(/^(?:[0-9a-f]{40}|[0-9a-f]{64})$/);
+exports.Sha256HexSchema = zod_1.z.string().regex(/^[0-9a-f]{64}$/);
+/** Opaque reference to a run's private pre-launch Git baseline. */
+exports.FinalizationBaselineRefSchema = zod_1.z.string().regex(/^bl_[0-9a-f]{24}$/);
+/**
+ * `prepared`: baseline captured, not finalized; `finalizing`: one finalize
+ * request is in progress; `finalized`: one local commit was created.
+ */
+exports.FinalizationStateSchema = zod_1.z.enum(['prepared', 'finalizing', 'finalized']);
+/** Public finalization fields on a prepared run (never a host path or file content). */
+exports.AgentRunFinalizationStatusSchema = zod_1.z
+    .object({
+    baselineRef: exports.FinalizationBaselineRefSchema,
+    baselineDigest: exports.Sha256HexSchema,
+    state: exports.FinalizationStateSchema,
+    commit: exports.GitObjectIdSchema.nullable(),
+})
+    .strict();
+exports.AgentRunStatusSchema = zod_1.z
+    .object({
+    runId: exports.AgentRunIdSchema,
+    deckId: zod_1.z.string(),
+    client: exports.AgentRunClientSchema,
+    tools: exports.AgentRunToolsSchema,
+    state: exports.AgentRunStateSchema,
+    /** Opaque client session id; pass as `resumeSessionId` to continue. */
+    sessionId: zod_1.z.string().nullable(),
+    startedAt: zod_1.z.string(),
+    lastEventAt: zod_1.z.string().nullable(),
+    /** NOT-486: present only when the run was started with `prepareFinalization`. */
+    finalization: exports.AgentRunFinalizationStatusSchema.nullable(),
+})
+    .strict();
+const eventBase = { seq: zod_1.z.number().int().positive(), ts: zod_1.z.string() };
+/**
+ * Normalized run events, in log order. `seq` is the event's 1-based position
+ * in the canonical log: stable across reads and strictly increasing.
+ */
+exports.AgentRunEventSchema = zod_1.z.discriminatedUnion('type', [
+    zod_1.z.object({ ...eventBase, type: zod_1.z.literal('text'), text: zod_1.z.string() }).strict(),
+    zod_1.z.object({ ...eventBase, type: zod_1.z.literal('tool'), name: zod_1.z.string() }).strict(),
+    zod_1.z
+        .object({ ...eventBase, type: zod_1.z.literal('notice'), message: zod_1.z.string(), sessionId: zod_1.z.string().nullable() })
+        .strict(),
+    zod_1.z
+        .object({
+        ...eventBase,
+        type: zod_1.z.literal('result'),
+        subtype: zod_1.z.string(),
+        result: zod_1.z.unknown(),
+        sessionId: zod_1.z.string().nullable(),
+    })
+        .strict(),
+    zod_1.z.object({ ...eventBase, type: zod_1.z.literal('end'), sessionId: zod_1.z.string().nullable() }).strict(),
+    zod_1.z
+        .object({ ...eventBase, type: zod_1.z.literal('error'), message: zod_1.z.string(), sessionId: zod_1.z.string().nullable() })
+        .strict(),
+    /** Terminal operator cancellation (NOT-481); no event follows it. */
+    zod_1.z.object({ ...eventBase, type: zod_1.z.literal('canceled'), sessionId: zod_1.z.string().nullable() }).strict(),
+]);
+exports.AgentRunEventsQuerySchema = zod_1.z
+    .object({
+    /** Cursor from a previous read's `nextCursor`; omitted reads from the start. */
+    after: zod_1.z.string().regex(/^\d+$/).optional(),
+    limit: zod_1.z.coerce.number().int().min(1).max(exports.AGENT_RUN_EVENTS_MAX_LIMIT).optional(),
+})
+    .strict();
+exports.AgentRunEventsResponseSchema = zod_1.z
+    .object({
+    runId: exports.AgentRunIdSchema,
+    state: exports.AgentRunStateSchema,
+    events: zod_1.z.array(exports.AgentRunEventSchema),
+    /** Pass as `after` to read the next page; unchanged when nothing new arrived. */
+    nextCursor: zod_1.z.string(),
+})
+    .strict();
+/**
+ * `GET /api/agent-runs/capabilities` (NOT-481): only clients whose real host
+ * preflight (installed and signed in) passes are listed. `start`/`resume`
+ * name the tool profiles the client can enforce; `same_profile_provenance`
+ * means a resume continues only a session an Agent Deck run on this host
+ * started with the same deck, cwd, and tools.
+ */
+exports.AgentRunClientCapabilitySchema = zod_1.z
+    .object({
+    client: exports.AgentRunClientSchema,
+    start: zod_1.z.array(exports.AgentRunToolsSchema),
+    resume: zod_1.z.array(exports.AgentRunToolsSchema),
+    resumeRequires: zod_1.z.enum(['none', 'same_profile_provenance']),
+})
+    .strict();
+exports.AgentRunCapabilitiesResponseSchema = zod_1.z
+    .object({
+    /** Runs execute on the Agent Deck host; `cwd` is a path on that host. */
+    host: zod_1.z.literal('same-host'),
+    clients: zod_1.z.array(exports.AgentRunClientCapabilitySchema),
+})
+    .strict();
+/**
+ * NOT-486: one manifest entry. Repository-relative POSIX path; `sha256` is
+ * the SHA-256 of the exact working-tree bytes and `mode` the Git file mode.
+ * A deleted path carries `sha256: null` and `mode: null`.
+ */
+exports.FINALIZATION_MANIFEST_MAX_FILES = 1000;
+exports.FINALIZATION_PATH_MAX_CHARS = 1024;
+exports.FINALIZATION_COMMIT_MESSAGE_MAX_CHARS = 8192;
+exports.FINALIZATION_REVIEW_ID_MAX_CHARS = 200;
+exports.FinalizationFileModeSchema = zod_1.z.enum(['100644', '100755']);
+exports.FinalizationManifestEntrySchema = zod_1.z
+    .object({
+    path: zod_1.z.string().min(1).max(exports.FINALIZATION_PATH_MAX_CHARS),
+    sha256: exports.Sha256HexSchema.nullable(),
+    mode: exports.FinalizationFileModeSchema.nullable(),
+})
+    .strict()
+    .refine((entry) => (entry.sha256 === null) === (entry.mode === null), {
+    message: 'sha256 and mode are both null (deleted) or both set',
+});
+/** `GET /api/agent-runs/:runId/changes`: the candidate manifest, ordered by path. */
+exports.AgentRunChangesResponseSchema = zod_1.z
+    .object({
+    runId: exports.AgentRunIdSchema,
+    baselineRef: exports.FinalizationBaselineRefSchema,
+    baselineDigest: exports.Sha256HexSchema,
+    /** Pass as `expectedBaseCommit` when finalizing. */
+    baseCommit: exports.GitObjectIdSchema,
+    files: zod_1.z.array(exports.FinalizationManifestEntrySchema),
+    manifestDigest: exports.Sha256HexSchema,
+})
+    .strict();
+/** `POST /api/agent-runs/:runId/finalize` (requires `Idempotency-Key`). */
+exports.FinalizeAgentRunRequestSchema = zod_1.z
+    .object({
+    baselineDigest: exports.Sha256HexSchema,
+    expectedBaseCommit: exports.GitObjectIdSchema,
+    reviewId: zod_1.z
+        .string()
+        .min(1)
+        .max(exports.FINALIZATION_REVIEW_ID_MAX_CHARS)
+        .regex(/^[\x21-\x7e]+$/, 'reviewId must be printable ASCII without spaces'),
+    commitMessage: zod_1.z
+        .string()
+        .max(exports.FINALIZATION_COMMIT_MESSAGE_MAX_CHARS)
+        .refine((value) => value.trim().length > 0, 'commitMessage must not be empty')
+        .refine((value) => !value.includes('\u0000'), 'commitMessage must not contain NUL'),
+    files: zod_1.z.array(exports.FinalizationManifestEntrySchema).min(1).max(exports.FINALIZATION_MANIFEST_MAX_FILES),
+})
+    .strict();
+exports.FinalizeAgentRunResponseSchema = zod_1.z
+    .object({
+    runId: exports.AgentRunIdSchema,
+    finalizationState: zod_1.z.literal('finalized'),
+    commit: exports.GitObjectIdSchema,
+    tree: exports.GitObjectIdSchema,
+    parent: exports.GitObjectIdSchema,
+    manifestDigest: exports.Sha256HexSchema,
+    fileCount: zod_1.z.number().int().positive(),
+    reviewId: zod_1.z.string(),
+})
+    .strict();
+/** Run-specific error codes (auth failures use the trusted-session codes). */
+exports.AgentRunErrorCodeSchema = zod_1.z.enum([
+    'INVALID_REQUEST',
+    'REQUEST_TOO_LARGE',
+    'IDEMPOTENCY_KEY_REQUIRED',
+    'IDEMPOTENCY_CONFLICT',
+    'DECK_NOT_FOUND',
+    'WORKSPACE_INVALID',
+    'WORKSPACE_MISMATCH',
+    'CLIENT_UNAVAILABLE',
+    'PROFILE_UNSUPPORTED',
+    'RESUME_UNVERIFIED',
+    'RUN_NOT_FOUND',
+    'RUN_NOT_CANCELABLE',
+    // NOT-486: finalization.
+    'FINALIZATION_INVALID',
+    'FINALIZATION_NOT_PREPARED',
+    'RUN_NOT_TERMINAL',
+    'BASE_MISMATCH',
+    'INDEX_DIRTY',
+    'BASELINE_MISMATCH',
+    'PATH_INVALID',
+    'PATH_UNEXPECTED',
+    'DIGEST_MISMATCH',
+    'GIT_LOCK_CONFLICT',
+    'REF_RACE',
+    'FINALIZATION_CANCELED',
+    'FINALIZATION_FAILED',
+]);
+function agentRunError(code, message) {
+    return { success: false, error: message, error_code: code };
+}
+//# sourceMappingURL=agent-run.js.map

package/dist/schemas/agent-run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-run.js","sourceRoot":"","sources":["../../src/schemas/agent-run.ts"],"names":[],"mappings":";;;AAwTA,sCAEC;AA1TD,6BAAwB;AAExB;;;;;;;GAOG;AAEH,uDAAuD;AAC1C,QAAA,0BAA0B,GAAG,EAAE,GAAG,IAAI,CAAC;AACpD,8DAA8D;AACjD,QAAA,kCAAkC,GAAG,GAAG,GAAG,IAAI,CAAC;AAC7D,uEAAuE;AAC1D,QAAA,4BAA4B,GAAG,iBAAiB,CAAC;AACjD,QAAA,8BAA8B,GAAG,GAAG,CAAC;AACrC,QAAA,0BAA0B,GAAG,IAAI,CAAC;AAElC,QAAA,oBAAoB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AACrE,QAAA,mBAAmB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhE,+CAA+C;AAClC,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAErE,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,gBAAgB,EAAE,wDAAwD,CAAC,CAAC;AAErF,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAEY,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,MAAM,EAAE,4BAAoB;IAC5B,yDAAyD;IACzD,GAAG,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,IAAI,CAAC;SACT,MAAM,CAAC,kBAAkB,EAAE,qDAAqD,CAAC;IACpF,MAAM,EAAE,OAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,kCAA0B,CAAC;SAC/B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,0BAA0B,CAAC;IACzE,2DAA2D;IAC3D,KAAK,EAAE,2BAAmB,CAAC,OAAO,CAAC,UAAU,CAAC;IAC9C,6DAA6D;IAC7D,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtD;;;;OAIG;IACH,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAChD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;GAKG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAC5F,QAAA,yBAAyB,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAU,CAAC;AAE5E,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,KAAK,EAAE,wBAAgB;IACvB,KAAK,EAAE,2BAAmB;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,mEAAmE;AACtD,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACxE,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClE,mEAAmE;AACtD,QAAA,6BAA6B,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAEnF;;;GAGG;AACU,QAAA,uBAAuB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AAEvF,wFAAwF;AAC3E,QAAA,gCAAgC,GAAG,OAAC;KAC9C,MAAM,CAAC;IACN,WAAW,EAAE,qCAA6B;IAC1C,cAAc,EAAE,uBAAe;IAC/B,KAAK,EAAE,+BAAuB;IAC9B,MAAM,EAAE,yBAAiB,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,KAAK,EAAE,wBAAgB;IACvB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,4BAAoB;IAC5B,KAAK,EAAE,2BAAmB;IAC1B,KAAK,EAAE,2BAAmB;IAC1B,uEAAuE;IACvE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,iFAAiF;IACjF,YAAY,EAAE,wCAAgC,CAAC,QAAQ,EAAE;CAC1D,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,SAAS,GAAG,EAAE,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC;AAEvE;;;GAGG;AACU,QAAA,mBAAmB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9E,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9E,OAAC;SACE,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;SAC1G,MAAM,EAAE;IACX,OAAC;SACE,MAAM,CAAC;QACN,GAAG,SAAS;QACZ,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,OAAC,CAAC,OAAO,EAAE;QACnB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACjC,CAAC;SACD,MAAM,EAAE;IACX,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7F,OAAC;SACE,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;SACzG,MAAM,EAAE;IACX,qEAAqE;IACrE,OAAC,CAAC,MAAM,CAAC,EAAE,GAAG,SAAS,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACnG,CAAC,CAAC;AAEU,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,gFAAgF;IAChF,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IAC3C,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,kCAA0B,CAAC,CAAC,QAAQ,EAAE;CACjF,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,KAAK,EAAE,wBAAgB;IACvB,KAAK,EAAE,2BAAmB;IAC1B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC;IACpC,iFAAiF;IACjF,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE;CACvB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;GAMG;AACU,QAAA,8BAA8B,GAAG,OAAC;KAC5C,MAAM,CAAC;IACN,MAAM,EAAE,4BAAoB;IAC5B,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC;IACnC,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,2BAAmB,CAAC;IACpC,cAAc,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;CAC5D,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,kCAAkC,GAAG,OAAC;KAChD,MAAM,CAAC;IACN,yEAAyE;IACzE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,sCAA8B,CAAC;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACU,QAAA,+BAA+B,GAAG,IAAI,CAAC;AACvC,QAAA,2BAA2B,GAAG,IAAI,CAAC;AACnC,QAAA,qCAAqC,GAAG,IAAI,CAAC;AAC7C,QAAA,gCAAgC,GAAG,GAAG,CAAC;AAEvC,QAAA,0BAA0B,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAE1D,QAAA,+BAA+B,GAAG,OAAC;KAC7C,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,mCAA2B,CAAC;IACxD,MAAM,EAAE,uBAAe,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,kCAA0B,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE;IACpE,OAAO,EAAE,qDAAqD;CAC/D,CAAC,CAAC;AAEL,qFAAqF;AACxE,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,KAAK,EAAE,wBAAgB;IACvB,WAAW,EAAE,qCAA6B;IAC1C,cAAc,EAAE,uBAAe;IAC/B,oDAAoD;IACpD,UAAU,EAAE,yBAAiB;IAC7B,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,uCAA+B,CAAC;IAC/C,cAAc,EAAE,uBAAe;CAChC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,2EAA2E;AAC9D,QAAA,6BAA6B,GAAG,OAAC;KAC3C,MAAM,CAAC;IACN,cAAc,EAAE,uBAAe;IAC/B,kBAAkB,EAAE,yBAAiB;IACrC,QAAQ,EAAE,OAAC;SACR,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,wCAAgC,CAAC;SACrC,KAAK,CAAC,gBAAgB,EAAE,iDAAiD,CAAC;IAC7E,aAAa,EAAE,OAAC;SACb,MAAM,EAAE;SACR,GAAG,CAAC,6CAAqC,CAAC;SAC1C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,iCAAiC,CAAC;SAC7E,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,oCAAoC,CAAC;IACrF,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,uCAA+B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uCAA+B,CAAC;CAC5F,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,8BAA8B,GAAG,OAAC;KAC5C,MAAM,CAAC;IACN,KAAK,EAAE,wBAAgB;IACvB,iBAAiB,EAAE,OAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IACzC,MAAM,EAAE,yBAAiB;IACzB,IAAI,EAAE,yBAAiB;IACvB,MAAM,EAAE,yBAAiB;IACzB,cAAc,EAAE,uBAAe;IAC/B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;CACrB,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,8EAA8E;AACjE,QAAA,uBAAuB,GAAG,OAAC,CAAC,IAAI,CAAC;IAC5C,iBAAiB;IACjB,mBAAmB;IACnB,0BAA0B;IAC1B,sBAAsB;IACtB,gBAAgB;IAChB,mBAAmB;IACnB,oBAAoB;IACpB,oBAAoB;IACpB,qBAAqB;IACrB,mBAAmB;IACnB,eAAe;IACf,oBAAoB;IACpB,yBAAyB;IACzB,sBAAsB;IACtB,2BAA2B;IAC3B,kBAAkB;IAClB,eAAe;IACf,aAAa;IACb,mBAAmB;IACnB,cAAc;IACd,iBAAiB;IACjB,iBAAiB;IACjB,mBAAmB;IACnB,UAAU;IACV,uBAAuB;IACvB,qBAAqB;CACtB,CAAC,CAAC;AA4BH,SAAgB,aAAa,CAAC,IAAuB,EAAE,OAAe;IACpE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC"}

package/dist/schemas/trusted-session.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 export declare const AgentSessionModeSchema: z.ZodEnum<["normal", "agent-admin"]>;
-export declare const TrustedSessionErrorCodeSchema: z.ZodEnum<["GRANT_REQUIRED", "SESSION_INVALID", "SESSION_REVOKED", "RESOURCE_OUT_OF_SCOPE", "ADMIN_REQUIRED", "DASHBOARD_REQUIRED", "ADMIN_CHALLENGE_EXPIRED", "DECK_FIXED", "SWITCH_APPROVAL_REQUIRED", "DECK_SWITCH_EXPIRED", "DECK_SWITCH_CONSUMED"]>;
+export declare const TrustedSessionErrorCodeSchema: z.ZodEnum<["GRANT_REQUIRED", "SESSION_INVALID", "SESSION_REVOKED", "RESOURCE_OUT_OF_SCOPE", "ADMIN_REQUIRED", "DASHBOARD_REQUIRED", "ADMIN_CHALLENGE_EXPIRED", "DECK_FIXED", "SWITCH_APPROVAL_REQUIRED", "DECK_SWITCH_EXPIRED", "DECK_SWITCH_CONSUMED", "RUN_CAPABILITY_REQUIRED", "FINALIZATION_CAPABILITY_REQUIRED"]>;
 /** @deprecated Legacy v2 grant file shape — CLI reads for migration only (NOT-108). */
 export declare const WorkspaceGrantStatusSchema: z.ZodEnum<["pending", "active", "revoked"]>;
 export declare const RuntimeSessionSchema: z.ZodObject<{

package/dist/schemas/trusted-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"trusted-session.d.ts","sourceRoot":"","sources":["../../src/schemas/trusted-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,sBAAsB,sCAAoC,CAAC;AAExE,eAAO,MAAM,6BAA6B,0PAgBxC,CAAC;AAEH,uFAAuF;AACvF,eAAO,MAAM,0BAA0B,6CAA2C,CAAC;AAEnF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;EAUtB,CAAC;AAEZ,gEAAgE;AAChE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY9B,CAAC;AAEZ,oFAAoF;AACpF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA+B,CAAC;AAEtE,yDAAyD;AACzD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;EAO3B,CAAC;AAEZ,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;EAU9B,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,uBAAuB,CAAC;CACrC,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,uBAAuB,EAC7B,OAAO,EAAE,MAAM,GACd,uBAAuB,CAEzB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAoB/E;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,wDAAsD,CAAC;AAE5F,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,0EAA0E;AAC1E,eAAO,MAAM,2BAA2B;;;;;;;;;EAK7B,CAAC;AAEZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;EAS5B,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
+{"version":3,"file":"trusted-session.d.ts","sourceRoot":"","sources":["../../src/schemas/trusted-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,sBAAsB,sCAAoC,CAAC;AAExE,eAAO,MAAM,6BAA6B,yTAoBxC,CAAC;AAEH,uFAAuF;AACvF,eAAO,MAAM,0BAA0B,6CAA2C,CAAC;AAEnF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;EAUtB,CAAC;AAEZ,gEAAgE;AAChE,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAY9B,CAAC;AAEZ,oFAAoF;AACpF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA+B,CAAC;AAEtE,yDAAyD;AACzD,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;EAO3B,CAAC;AAEZ,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;EAU9B,CAAC;AAEZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AACpF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,MAAM,MAAM,uBAAuB,GAAG;IACpC,OAAO,EAAE,KAAK,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,uBAAuB,CAAC;CACrC,CAAC;AAEF,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,uBAAuB,EAC7B,OAAO,EAAE,MAAM,GACd,uBAAuB,CAEzB;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,uBAAuB,GAAG,MAAM,CAsB/E;AAED;;;;GAIG;AACH,eAAO,MAAM,wBAAwB,wDAAsD,CAAC;AAE5F,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,0EAA0E;AAC1E,eAAO,MAAM,2BAA2B;;;;;;;;;EAK7B,CAAC;AAEZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAEhF,8DAA8D;AAC9D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;EAS5B,CAAC;AAEZ,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/schemas/trusted-session.js

@@ -21,6 +21,10 @@ exports.TrustedSessionErrorCodeSchema = zod_1.z.enum([
     'DECK_SWITCH_EXPIRED',
     /** Deck-switch request already resolved; repeat resolution is a no-op (NOT-207). */
     'DECK_SWITCH_CONSUMED',
+    /** Grant lacks the explicit agent-run capability (NOT-480). */
+    'RUN_CAPABILITY_REQUIRED',
+    /** Grant lacks the explicit run-finalization capability (NOT-486). */
+    'FINALIZATION_CAPABILITY_REQUIRED',
 ]);
 /** @deprecated Legacy v2 grant file shape — CLI reads for migration only (NOT-108). */
 exports.WorkspaceGrantStatusSchema = zod_1.z.enum(['pending', 'active', 'revoked']);
@@ -85,6 +89,8 @@ function httpStatusForTrustedError(code) {
         case 'DASHBOARD_REQUIRED':
         case 'DECK_FIXED':
         case 'SWITCH_APPROVAL_REQUIRED':
+        case 'RUN_CAPABILITY_REQUIRED':
+        case 'FINALIZATION_CAPABILITY_REQUIRED':
             return 403;
         case 'DECK_SWITCH_CONSUMED':
             return 409;

package/dist/schemas/trusted-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"trusted-session.js","sourceRoot":"","sources":["../../src/schemas/trusted-session.ts"],"names":[],"mappings":";;;AA2FA,kDAKC;AAED,8DAoBC;AAtHD,6BAAwB;AAEX,QAAA,sBAAsB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAE3D,QAAA,6BAA6B,GAAG,OAAC,CAAC,IAAI,CAAC;IAClD,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,uBAAuB;IACvB,gBAAgB;IAChB,oBAAoB;IACpB,yBAAyB;IACzB,qEAAqE;IACrE,YAAY;IACZ,oFAAoF;IACpF,0BAA0B;IAC1B,kDAAkD;IAClD,qBAAqB;IACrB,oFAAoF;IACpF,sBAAsB;CACvB,CAAC,CAAC;AAEH,uFAAuF;AAC1E,QAAA,0BAA0B,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtE,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,8BAAsB;IAC5B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,gEAAgE;AACnD,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,oFAAoF;AACvE,QAAA,yBAAyB,GAAG,oCAA4B,CAAC;AAEtE,yDAAyD;AAC5C,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,8BAAsB;IAC5B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3D,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAgBZ,SAAgB,mBAAmB,CACjC,IAA6B,EAC7B,OAAe;IAEf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,SAAgB,yBAAyB,CAAC,IAA6B;IACrE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,gBAAgB,CAAC;QACtB,KAAK,iBAAiB,CAAC;QACvB,KAAK,iBAAiB;YACpB,OAAO,GAAG,CAAC;QACb,KAAK,uBAAuB,CAAC;QAC7B,KAAK,gBAAgB,CAAC;QACtB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,YAAY,CAAC;QAClB,KAAK,0BAA0B;YAC7B,OAAO,GAAG,CAAC;QACb,KAAK,sBAAsB;YACzB,OAAO,GAAG,CAAC;QACb,KAAK,yBAAyB,CAAC;QAC/B,KAAK,qBAAqB;YACxB,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC,CAAC;AAI5F,0EAA0E;AAC7D,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,QAAQ,EAAE,gCAAwB;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,8DAA8D;AACjD,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,gCAAwB;IAClC,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"trusted-session.js","sourceRoot":"","sources":["../../src/schemas/trusted-session.ts"],"names":[],"mappings":";;;AA+FA,kDAKC;AAED,8DAsBC;AA5HD,6BAAwB;AAEX,QAAA,sBAAsB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAE3D,QAAA,6BAA6B,GAAG,OAAC,CAAC,IAAI,CAAC;IAClD,gBAAgB;IAChB,iBAAiB;IACjB,iBAAiB;IACjB,uBAAuB;IACvB,gBAAgB;IAChB,oBAAoB;IACpB,yBAAyB;IACzB,qEAAqE;IACrE,YAAY;IACZ,oFAAoF;IACpF,0BAA0B;IAC1B,kDAAkD;IAClD,qBAAqB;IACrB,oFAAoF;IACpF,sBAAsB;IACtB,+DAA+D;IAC/D,yBAAyB;IACzB,sEAAsE;IACtE,kCAAkC;CACnC,CAAC,CAAC;AAEH,uFAAuF;AAC1E,QAAA,0BAA0B,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtE,QAAA,oBAAoB,GAAG,OAAC;KAClC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,8BAAsB;IAC5B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,gEAAgE;AACnD,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE;IACxB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE;IACnB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC9C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,oFAAoF;AACvE,QAAA,yBAAyB,GAAG,oCAA4B,CAAC;AAEtE,yDAAyD;AAC5C,QAAA,yBAAyB,GAAG,OAAC;KACvC,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEC,QAAA,4BAA4B,GAAG,OAAC;KAC1C,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE;IAClB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,8BAAsB;IAC5B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC3D,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC;KACD,MAAM,EAAE,CAAC;AAgBZ,SAAgB,mBAAmB,CACjC,IAA6B,EAC7B,OAAe;IAEf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC9D,CAAC;AAED,SAAgB,yBAAyB,CAAC,IAA6B;IACrE,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,gBAAgB,CAAC;QACtB,KAAK,iBAAiB,CAAC;QACvB,KAAK,iBAAiB;YACpB,OAAO,GAAG,CAAC;QACb,KAAK,uBAAuB,CAAC;QAC7B,KAAK,gBAAgB,CAAC;QACtB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,YAAY,CAAC;QAClB,KAAK,0BAA0B,CAAC;QAChC,KAAK,yBAAyB,CAAC;QAC/B,KAAK,kCAAkC;YACrC,OAAO,GAAG,CAAC;QACb,KAAK,sBAAsB;YACzB,OAAO,GAAG,CAAC;QACb,KAAK,yBAAyB,CAAC;QAC/B,KAAK,qBAAqB;YACxB,OAAO,GAAG,CAAC;QACb;YACE,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;GAIG;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,mBAAmB,EAAE,SAAS,CAAC,CAAC,CAAC;AAI5F,0EAA0E;AAC7D,QAAA,2BAA2B,GAAG,OAAC;KACzC,MAAM,CAAC;IACN,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,QAAQ,EAAE,gCAAwB;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAIZ,8DAA8D;AACjD,QAAA,0BAA0B,GAAG,OAAC;KACxC,MAAM,CAAC;IACN,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,gCAAwB;IAClC,MAAM,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-deck/shared",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Shared types, schemas, and utilities for Agent Deck",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",