@agent-vm/controller-execution-contracts 0.0.109

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025-2026 Shravan Sunder
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/controller-dispatch-boundary/index.d.ts

@@ -0,0 +1,119 @@
+import { n as ControllerDispatchIntentSchema, r as ControllerTrustedScopeSchema, t as ControllerDispatchIntent } from "../controller-dispatch-intent-schema-fqjx2pb2.js";
+import * as _$_agent_vm_agent_portal_sdk0 from "@agent-vm/agent-portal-sdk";
+import { z } from "zod";
+
+//#region src/controller-dispatch-boundary/models/controller-execution-result-schema.d.ts
+declare const ControllerExecutionResultSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  auditCorrelationId: z.ZodString;
+  diagnostics: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    code: z.ZodEnum<{
+      approval_required: "approval_required";
+      capability_denied: "capability_denied";
+      validation_failed: "validation_failed";
+      provider_unavailable: "provider_unavailable";
+      execution_failed: "execution_failed";
+      cancelled: "cancelled";
+      timeout: "timeout";
+      output_truncated: "output_truncated";
+      artifact_unavailable: "artifact_unavailable";
+    }>;
+    level: z.ZodEnum<{
+      error: "error";
+      debug: "debug";
+      info: "info";
+      warn: "warn";
+    }>;
+    safeMessage: z.ZodString;
+    safeParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+  }, z.core.$strict>>>;
+  status: z.ZodLiteral<"ok">;
+  value: z.ZodType<_$_agent_vm_agent_portal_sdk0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_agent_vm_agent_portal_sdk0.JsonValue, unknown>>;
+}, z.core.$strict>, z.ZodObject<{
+  auditCorrelationId: z.ZodOptional<z.ZodString>;
+  diagnostics: z.ZodDefault<z.ZodArray<z.ZodObject<{
+    code: z.ZodEnum<{
+      approval_required: "approval_required";
+      capability_denied: "capability_denied";
+      validation_failed: "validation_failed";
+      provider_unavailable: "provider_unavailable";
+      execution_failed: "execution_failed";
+      cancelled: "cancelled";
+      timeout: "timeout";
+      output_truncated: "output_truncated";
+      artifact_unavailable: "artifact_unavailable";
+    }>;
+    level: z.ZodEnum<{
+      error: "error";
+      debug: "debug";
+      info: "info";
+      warn: "warn";
+    }>;
+    safeMessage: z.ZodString;
+    safeParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+  }, z.core.$strict>>>;
+  error: z.ZodObject<{
+    code: z.ZodEnum<{
+      invalid_request: "invalid_request";
+      not_found: "not_found";
+      not_authorized: "not_authorized";
+      approval_required: "approval_required";
+      capability_denied: "capability_denied";
+      validation_failed: "validation_failed";
+      provider_unavailable: "provider_unavailable";
+      execution_failed: "execution_failed";
+      cancelled: "cancelled";
+      timeout: "timeout";
+    }>;
+    message: z.ZodString;
+    retryable: z.ZodOptional<z.ZodBoolean>;
+    safeDiagnostic: z.ZodOptional<z.ZodObject<{
+      code: z.ZodEnum<{
+        approval_required: "approval_required";
+        capability_denied: "capability_denied";
+        validation_failed: "validation_failed";
+        provider_unavailable: "provider_unavailable";
+        execution_failed: "execution_failed";
+        cancelled: "cancelled";
+        timeout: "timeout";
+        output_truncated: "output_truncated";
+        artifact_unavailable: "artifact_unavailable";
+      }>;
+      level: z.ZodEnum<{
+        error: "error";
+        debug: "debug";
+        info: "info";
+        warn: "warn";
+      }>;
+      safeMessage: z.ZodString;
+      safeParams: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>;
+  status: z.ZodLiteral<"error">;
+}, z.core.$strict>], "status">;
+type ControllerExecutionResult = z.infer<typeof ControllerExecutionResultSchema>;
+//#endregion
+//#region src/controller-dispatch-boundary/models/execution-fingerprint-schema.d.ts
+declare const ExecutionFingerprintSchema: z.ZodObject<{
+  agentId: z.ZodString;
+  artifactIntentHash: z.ZodString;
+  backendBindingRevision: z.ZodString;
+  canonicalArgumentHash: z.ZodString;
+  capability: z.ZodObject<{
+    namespace: z.ZodString;
+    name: z.ZodString;
+  }, z.core.$strict>;
+  catalogRevision: z.ZodString;
+  custodyMode: z.ZodEnum<{
+    ephemeral_material: "ephemeral_material";
+    controller_durable_state: "controller_durable_state";
+  }>;
+  egressPolicyHash: z.ZodString;
+  executableTemplateRevision: z.ZodString;
+  operatorUserId: z.ZodOptional<z.ZodString>;
+  outputPolicyHash: z.ZodString;
+  policyRevision: z.ZodString;
+}, z.core.$strict>;
+type ExecutionFingerprint = z.infer<typeof ExecutionFingerprintSchema>;
+//#endregion
+export { ControllerDispatchIntent, ControllerDispatchIntentSchema, ControllerExecutionResult, ControllerExecutionResultSchema, ControllerTrustedScopeSchema, ExecutionFingerprint, ExecutionFingerprintSchema };
+//# sourceMappingURL=index.d.ts.map

package/dist/controller-dispatch-boundary/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/controller-dispatch-boundary/models/controller-execution-result-schema.ts","../../src/controller-dispatch-boundary/models/execution-fingerprint-schema.ts"],"mappings":";;;;;cAOa,+BAAA,EAA+B,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAmBhC,yBAAA,GAA4B,CAAA,CAAE,KAAA,QAAa,+BAAA;;;cCvB1C,0BAAA,EAA0B,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;KAiB3B,oBAAA,GAAuB,CAAA,CAAE,KAAA,QAAa,0BAAA"}

package/dist/controller-dispatch-boundary/index.js

@@ -0,0 +1,4 @@
+import { n as ControllerTrustedScopeSchema, t as ControllerDispatchIntentSchema } from "../controller-dispatch-intent-schema-dw3ugqpe.js";
+import { t as ControllerExecutionResultSchema } from "../controller-execution-result-schema-BN0cqzhi.js";
+import { t as ExecutionFingerprintSchema } from "../execution-fingerprint-schema-D4J978Oa.js";
+export { ControllerDispatchIntentSchema, ControllerExecutionResultSchema, ControllerTrustedScopeSchema, ExecutionFingerprintSchema };

package/dist/controller-dispatch-intent-schema-dw3ugqpe.js

@@ -0,0 +1,18 @@
+import { CapabilityReferenceSchema, JsonObjectSchema } from "@agent-vm/agent-portal-sdk";
+import { z } from "zod";
+//#region src/controller-dispatch-boundary/models/controller-dispatch-intent-schema.ts
+const ControllerTrustedScopeSchema = z.object({
+	agentId: z.string().min(1),
+	profileId: z.string().min(1),
+	userId: z.string().min(1).optional()
+}).strict();
+const ControllerDispatchIntentSchema = z.object({
+	auditCorrelationId: z.string().min(1),
+	canonicalArguments: JsonObjectSchema,
+	capability: CapabilityReferenceSchema,
+	trustedScope: ControllerTrustedScopeSchema
+}).strict();
+//#endregion
+export { ControllerTrustedScopeSchema as n, ControllerDispatchIntentSchema as t };
+
+//# sourceMappingURL=controller-dispatch-intent-schema-dw3ugqpe.js.map

package/dist/controller-dispatch-intent-schema-dw3ugqpe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-dispatch-intent-schema-dw3ugqpe.js","names":[],"sources":["../src/controller-dispatch-boundary/models/controller-dispatch-intent-schema.ts"],"sourcesContent":["import { CapabilityReferenceSchema, JsonObjectSchema } from '@agent-vm/agent-portal-sdk';\nimport { z } from 'zod';\n\nexport const ControllerTrustedScopeSchema = z\n\t.object({\n\t\tagentId: z.string().min(1),\n\t\tprofileId: z.string().min(1),\n\t\tuserId: z.string().min(1).optional(),\n\t})\n\t.strict();\n\nexport const ControllerDispatchIntentSchema = z\n\t.object({\n\t\tauditCorrelationId: z.string().min(1),\n\t\tcanonicalArguments: JsonObjectSchema,\n\t\tcapability: CapabilityReferenceSchema,\n\t\ttrustedScope: ControllerTrustedScopeSchema,\n\t})\n\t.strict();\n\nexport type ControllerDispatchIntent = z.infer<typeof ControllerDispatchIntentSchema>;\n"],"mappings":";;;AAGA,MAAa,+BAA+B,EAC1C,OAAO;CACP,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC1B,WAAW,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC5B,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CACpC,CAAC,CACD,QAAQ;AAEV,MAAa,iCAAiC,EAC5C,OAAO;CACP,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACrC,oBAAoB;CACpB,YAAY;CACZ,cAAc;CACd,CAAC,CACD,QAAQ"}

package/dist/controller-dispatch-intent-schema-fqjx2pb2.d.ts

@@ -0,0 +1,26 @@
+import * as _$_agent_vm_agent_portal_sdk0 from "@agent-vm/agent-portal-sdk";
+import { z } from "zod";
+
+//#region src/controller-dispatch-boundary/models/controller-dispatch-intent-schema.d.ts
+declare const ControllerTrustedScopeSchema: z.ZodObject<{
+  agentId: z.ZodString;
+  profileId: z.ZodString;
+  userId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+declare const ControllerDispatchIntentSchema: z.ZodObject<{
+  auditCorrelationId: z.ZodString;
+  canonicalArguments: z.ZodType<_$_agent_vm_agent_portal_sdk0.JsonObject, unknown, z.core.$ZodTypeInternals<_$_agent_vm_agent_portal_sdk0.JsonObject, unknown>>;
+  capability: z.ZodObject<{
+    namespace: z.ZodString;
+    name: z.ZodString;
+  }, z.core.$strict>;
+  trustedScope: z.ZodObject<{
+    agentId: z.ZodString;
+    profileId: z.ZodString;
+    userId: z.ZodOptional<z.ZodString>;
+  }, z.core.$strict>;
+}, z.core.$strict>;
+type ControllerDispatchIntent = z.infer<typeof ControllerDispatchIntentSchema>;
+//#endregion
+export { ControllerDispatchIntentSchema as n, ControllerTrustedScopeSchema as r, ControllerDispatchIntent as t };
+//# sourceMappingURL=controller-dispatch-intent-schema-fqjx2pb2.d.ts.map

package/dist/controller-dispatch-intent-schema-fqjx2pb2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-dispatch-intent-schema-fqjx2pb2.d.ts","names":[],"sources":["../src/controller-dispatch-boundary/models/controller-dispatch-intent-schema.ts"],"mappings":";;;;cAGa,4BAAA,EAA4B,CAAA,CAAA,SAAA;;;;;cAQ5B,8BAAA,EAA8B,CAAA,CAAA,SAAA;;;;;;;;;;;;;KAS/B,wBAAA,GAA2B,CAAA,CAAE,KAAA,QAAa,8BAAA"}

package/dist/controller-execution-result-schema-BN0cqzhi.js

@@ -0,0 +1,18 @@
+import { JsonValueSchema, PortalErrorSchema, SafeDiagnosticSchema } from "@agent-vm/agent-portal-sdk";
+import { z } from "zod";
+//#region src/controller-dispatch-boundary/models/controller-execution-result-schema.ts
+const ControllerExecutionResultSchema = z.discriminatedUnion("status", [z.object({
+	auditCorrelationId: z.string().min(1),
+	diagnostics: z.array(SafeDiagnosticSchema).default([]),
+	status: z.literal("ok"),
+	value: JsonValueSchema
+}).strict(), z.object({
+	auditCorrelationId: z.string().min(1).optional(),
+	diagnostics: z.array(SafeDiagnosticSchema).default([]),
+	error: PortalErrorSchema,
+	status: z.literal("error")
+}).strict()]);
+//#endregion
+export { ControllerExecutionResultSchema as t };
+
+//# sourceMappingURL=controller-execution-result-schema-BN0cqzhi.js.map

package/dist/controller-execution-result-schema-BN0cqzhi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller-execution-result-schema-BN0cqzhi.js","names":[],"sources":["../src/controller-dispatch-boundary/models/controller-execution-result-schema.ts"],"sourcesContent":["import {\n\tJsonValueSchema,\n\tPortalErrorSchema,\n\tSafeDiagnosticSchema,\n} from '@agent-vm/agent-portal-sdk';\nimport { z } from 'zod';\n\nexport const ControllerExecutionResultSchema = z.discriminatedUnion('status', [\n\tz\n\t\t.object({\n\t\t\tauditCorrelationId: z.string().min(1),\n\t\t\tdiagnostics: z.array(SafeDiagnosticSchema).default([]),\n\t\t\tstatus: z.literal('ok'),\n\t\t\tvalue: JsonValueSchema,\n\t\t})\n\t\t.strict(),\n\tz\n\t\t.object({\n\t\t\tauditCorrelationId: z.string().min(1).optional(),\n\t\t\tdiagnostics: z.array(SafeDiagnosticSchema).default([]),\n\t\t\terror: PortalErrorSchema,\n\t\t\tstatus: z.literal('error'),\n\t\t})\n\t\t.strict(),\n]);\n\nexport type ControllerExecutionResult = z.infer<typeof ControllerExecutionResultSchema>;\n"],"mappings":";;;AAOA,MAAa,kCAAkC,EAAE,mBAAmB,UAAU,CAC7E,EACE,OAAO;CACP,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACrC,aAAa,EAAE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,CAAC;CACtD,QAAQ,EAAE,QAAQ,KAAK;CACvB,OAAO;CACP,CAAC,CACD,QAAQ,EACV,EACE,OAAO;CACP,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAChD,aAAa,EAAE,MAAM,qBAAqB,CAAC,QAAQ,EAAE,CAAC;CACtD,OAAO;CACP,QAAQ,EAAE,QAAQ,QAAQ;CAC1B,CAAC,CACD,QAAQ,CACV,CAAC"}

package/dist/controller-host-action-boundary/index.d.ts

@@ -0,0 +1,117 @@
+import * as _$_agent_vm_agent_portal_sdk0 from "@agent-vm/agent-portal-sdk";
+import * as _$zod from "zod";
+import { z } from "zod";
+import * as _$zod_v4_core0 from "zod/v4/core";
+
+//#region src/controller-host-action-boundary/models/controller-host-action-request-schema.d.ts
+declare const ControllerHostActionRequestSchema: z.ZodObject<{
+  canonicalArguments: z.ZodType<_$_agent_vm_agent_portal_sdk0.JsonObject, unknown, z.core.$ZodTypeInternals<_$_agent_vm_agent_portal_sdk0.JsonObject, unknown>>;
+  dispatch: z.ZodObject<{
+    auditCorrelationId: z.ZodString;
+    canonicalArguments: z.ZodType<_$_agent_vm_agent_portal_sdk0.JsonObject, unknown, z.core.$ZodTypeInternals<_$_agent_vm_agent_portal_sdk0.JsonObject, unknown>>;
+    capability: z.ZodObject<{
+      namespace: z.ZodString;
+      name: z.ZodString;
+    }, z.core.$strict>;
+    trustedScope: z.ZodObject<{
+      agentId: z.ZodString;
+      profileId: z.ZodString;
+      userId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+  }, z.core.$strict>;
+  hostActionName: z.ZodString;
+}, z.core.$strict>;
+type ControllerHostActionRequest = z.infer<typeof ControllerHostActionRequestSchema>;
+//#endregion
+//#region src/controller-host-action-boundary/models/controller-host-action-result-schema.d.ts
+declare const ControllerHostActionResultSchema: _$zod.ZodDiscriminatedUnion<[_$zod.ZodObject<{
+  auditCorrelationId: _$zod.ZodString;
+  diagnostics: _$zod.ZodDefault<_$zod.ZodArray<_$zod.ZodObject<{
+    code: _$zod.ZodEnum<{
+      approval_required: "approval_required";
+      capability_denied: "capability_denied";
+      validation_failed: "validation_failed";
+      provider_unavailable: "provider_unavailable";
+      execution_failed: "execution_failed";
+      cancelled: "cancelled";
+      timeout: "timeout";
+      output_truncated: "output_truncated";
+      artifact_unavailable: "artifact_unavailable";
+    }>;
+    level: _$zod.ZodEnum<{
+      error: "error";
+      debug: "debug";
+      info: "info";
+      warn: "warn";
+    }>;
+    safeMessage: _$zod.ZodString;
+    safeParams: _$zod.ZodOptional<_$zod.ZodRecord<_$zod.ZodString, _$zod.ZodUnion<readonly [_$zod.ZodString, _$zod.ZodNumber, _$zod.ZodBoolean]>>>;
+  }, _$zod_v4_core0.$strict>>>;
+  status: _$zod.ZodLiteral<"ok">;
+  value: _$zod.ZodType<_$_agent_vm_agent_portal_sdk0.JsonValue, unknown, _$zod_v4_core0.$ZodTypeInternals<_$_agent_vm_agent_portal_sdk0.JsonValue, unknown>>;
+}, _$zod_v4_core0.$strict>, _$zod.ZodObject<{
+  auditCorrelationId: _$zod.ZodOptional<_$zod.ZodString>;
+  diagnostics: _$zod.ZodDefault<_$zod.ZodArray<_$zod.ZodObject<{
+    code: _$zod.ZodEnum<{
+      approval_required: "approval_required";
+      capability_denied: "capability_denied";
+      validation_failed: "validation_failed";
+      provider_unavailable: "provider_unavailable";
+      execution_failed: "execution_failed";
+      cancelled: "cancelled";
+      timeout: "timeout";
+      output_truncated: "output_truncated";
+      artifact_unavailable: "artifact_unavailable";
+    }>;
+    level: _$zod.ZodEnum<{
+      error: "error";
+      debug: "debug";
+      info: "info";
+      warn: "warn";
+    }>;
+    safeMessage: _$zod.ZodString;
+    safeParams: _$zod.ZodOptional<_$zod.ZodRecord<_$zod.ZodString, _$zod.ZodUnion<readonly [_$zod.ZodString, _$zod.ZodNumber, _$zod.ZodBoolean]>>>;
+  }, _$zod_v4_core0.$strict>>>;
+  error: _$zod.ZodObject<{
+    code: _$zod.ZodEnum<{
+      invalid_request: "invalid_request";
+      not_found: "not_found";
+      not_authorized: "not_authorized";
+      approval_required: "approval_required";
+      capability_denied: "capability_denied";
+      validation_failed: "validation_failed";
+      provider_unavailable: "provider_unavailable";
+      execution_failed: "execution_failed";
+      cancelled: "cancelled";
+      timeout: "timeout";
+    }>;
+    message: _$zod.ZodString;
+    retryable: _$zod.ZodOptional<_$zod.ZodBoolean>;
+    safeDiagnostic: _$zod.ZodOptional<_$zod.ZodObject<{
+      code: _$zod.ZodEnum<{
+        approval_required: "approval_required";
+        capability_denied: "capability_denied";
+        validation_failed: "validation_failed";
+        provider_unavailable: "provider_unavailable";
+        execution_failed: "execution_failed";
+        cancelled: "cancelled";
+        timeout: "timeout";
+        output_truncated: "output_truncated";
+        artifact_unavailable: "artifact_unavailable";
+      }>;
+      level: _$zod.ZodEnum<{
+        error: "error";
+        debug: "debug";
+        info: "info";
+        warn: "warn";
+      }>;
+      safeMessage: _$zod.ZodString;
+      safeParams: _$zod.ZodOptional<_$zod.ZodRecord<_$zod.ZodString, _$zod.ZodUnion<readonly [_$zod.ZodString, _$zod.ZodNumber, _$zod.ZodBoolean]>>>;
+    }, _$zod_v4_core0.$strict>>;
+  }, _$zod_v4_core0.$strict>;
+  status: _$zod.ZodLiteral<"error">;
+}, _$zod_v4_core0.$strict>], "status">;
+type ControllerHostActionResult = typeof ControllerHostActionResultSchema._output;
+//#endregion
+export { ControllerHostActionRequest, ControllerHostActionRequestSchema, ControllerHostActionResult, ControllerHostActionResultSchema };
+//# sourceMappingURL=index.d.ts.map

package/dist/controller-host-action-boundary/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/controller-host-action-boundary/models/controller-host-action-request-schema.ts","../../src/controller-host-action-boundary/models/controller-host-action-result-schema.ts"],"mappings":";;;;;;cAKa,iCAAA,EAAiC,CAAA,CAAA,SAAA;gCAMpC,6BAAA,CAAA,UAAA;;;;;;;;;;;;;;;;KAEE,2BAAA,GAA8B,CAAA,CAAE,KAAA,QAAa,iCAAA;;;cCX5C,gCAAA,QAAgC,qBAAA,QAAA,SAAA;sBAAkC,KAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;wCAAlC,KAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAEjC,0BAAA,UAAoC,gCAAA,CAAiC,OAAA"}

package/dist/controller-host-action-boundary/index.js

@@ -0,0 +1,17 @@
+import { t as ControllerDispatchIntentSchema } from "../controller-dispatch-intent-schema-dw3ugqpe.js";
+import { t as ControllerExecutionResultSchema } from "../controller-execution-result-schema-BN0cqzhi.js";
+import { JsonObjectSchema } from "@agent-vm/agent-portal-sdk";
+import { z } from "zod";
+//#region src/controller-host-action-boundary/models/controller-host-action-request-schema.ts
+const ControllerHostActionRequestSchema = z.object({
+	canonicalArguments: JsonObjectSchema,
+	dispatch: ControllerDispatchIntentSchema,
+	hostActionName: z.string().min(1)
+}).strict();
+//#endregion
+//#region src/controller-host-action-boundary/models/controller-host-action-result-schema.ts
+const ControllerHostActionResultSchema = ControllerExecutionResultSchema;
+//#endregion
+export { ControllerHostActionRequestSchema, ControllerHostActionResultSchema };
+
+//# sourceMappingURL=index.js.map

package/dist/controller-host-action-boundary/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../src/controller-host-action-boundary/models/controller-host-action-request-schema.ts","../../src/controller-host-action-boundary/models/controller-host-action-result-schema.ts"],"sourcesContent":["import { JsonObjectSchema } from '@agent-vm/agent-portal-sdk';\nimport { z } from 'zod';\n\nimport { ControllerDispatchIntentSchema } from '../../controller-dispatch-boundary/models/controller-dispatch-intent-schema.js';\n\nexport const ControllerHostActionRequestSchema = z\n\t.object({\n\t\tcanonicalArguments: JsonObjectSchema,\n\t\tdispatch: ControllerDispatchIntentSchema,\n\t\thostActionName: z.string().min(1),\n\t})\n\t.strict();\n\nexport type ControllerHostActionRequest = z.infer<typeof ControllerHostActionRequestSchema>;\n","import { ControllerExecutionResultSchema } from '../../controller-dispatch-boundary/models/controller-execution-result-schema.js';\n\nexport const ControllerHostActionResultSchema = ControllerExecutionResultSchema;\n\nexport type ControllerHostActionResult = typeof ControllerHostActionResultSchema._output;\n"],"mappings":";;;;;AAKA,MAAa,oCAAoC,EAC/C,OAAO;CACP,oBAAoB;CACpB,UAAU;CACV,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACjC,CAAC,CACD,QAAQ;;;ACTV,MAAa,mCAAmC"}

package/dist/execution-fingerprint-schema-D4J978Oa.js

@@ -0,0 +1,21 @@
+import { CapabilityReferenceSchema } from "@agent-vm/agent-portal-sdk";
+import { z } from "zod";
+//#region src/controller-dispatch-boundary/models/execution-fingerprint-schema.ts
+const ExecutionFingerprintSchema = z.object({
+	agentId: z.string().min(1),
+	artifactIntentHash: z.string().min(1),
+	backendBindingRevision: z.string().min(1),
+	canonicalArgumentHash: z.string().min(1),
+	capability: CapabilityReferenceSchema,
+	catalogRevision: z.string().min(1),
+	custodyMode: z.enum(["ephemeral_material", "controller_durable_state"]),
+	egressPolicyHash: z.string().min(1),
+	executableTemplateRevision: z.string().min(1),
+	operatorUserId: z.string().min(1).optional(),
+	outputPolicyHash: z.string().min(1),
+	policyRevision: z.string().min(1)
+}).strict();
+//#endregion
+export { ExecutionFingerprintSchema as t };
+
+//# sourceMappingURL=execution-fingerprint-schema-D4J978Oa.js.map

package/dist/execution-fingerprint-schema-D4J978Oa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-fingerprint-schema-D4J978Oa.js","names":[],"sources":["../src/controller-dispatch-boundary/models/execution-fingerprint-schema.ts"],"sourcesContent":["import { CapabilityReferenceSchema } from '@agent-vm/agent-portal-sdk';\nimport { z } from 'zod';\n\nexport const ExecutionFingerprintSchema = z\n\t.object({\n\t\tagentId: z.string().min(1),\n\t\tartifactIntentHash: z.string().min(1),\n\t\tbackendBindingRevision: z.string().min(1),\n\t\tcanonicalArgumentHash: z.string().min(1),\n\t\tcapability: CapabilityReferenceSchema,\n\t\tcatalogRevision: z.string().min(1),\n\t\tcustodyMode: z.enum(['ephemeral_material', 'controller_durable_state']),\n\t\tegressPolicyHash: z.string().min(1),\n\t\texecutableTemplateRevision: z.string().min(1),\n\t\toperatorUserId: z.string().min(1).optional(),\n\t\toutputPolicyHash: z.string().min(1),\n\t\tpolicyRevision: z.string().min(1),\n\t})\n\t.strict();\n\nexport type ExecutionFingerprint = z.infer<typeof ExecutionFingerprintSchema>;\n"],"mappings":";;;AAGA,MAAa,6BAA6B,EACxC,OAAO;CACP,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC1B,oBAAoB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACrC,wBAAwB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACzC,uBAAuB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACxC,YAAY;CACZ,iBAAiB,EAAE,QAAQ,CAAC,IAAI,EAAE;CAClC,aAAa,EAAE,KAAK,CAAC,sBAAsB,2BAA2B,CAAC;CACvE,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACnC,4BAA4B,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC7C,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAC5C,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACnC,gBAAgB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACjC,CAAC,CACD,QAAQ"}

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+import { n as ControllerDispatchIntentSchema, r as ControllerTrustedScopeSchema, t as ControllerDispatchIntent } from "./controller-dispatch-intent-schema-fqjx2pb2.js";
+import { ControllerExecutionResult, ControllerExecutionResultSchema, ExecutionFingerprint, ExecutionFingerprintSchema } from "./controller-dispatch-boundary/index.js";
+import { ControllerHostActionRequest, ControllerHostActionRequestSchema, ControllerHostActionResult, ControllerHostActionResultSchema } from "./controller-host-action-boundary/index.js";
+import { a as ManagedVmExecRequestSchema, c as ManagedVmTimeoutMaxMs, i as ManagedVmExecRequest, l as ManagedVmTokenMaxLength, n as ManagedVmEnvironmentMaxEntries, o as ManagedVmStdinMaxBytes, r as ManagedVmEnvironmentValueMaxLength, s as ManagedVmStreamMaxBytes, t as ManagedVmArgvMaxItems } from "./managed-vm-exec-request-schema-BkkZ7zYn.js";
+import { ArtifactPolicySchema, CancellationPolicySchema, ControllerExecutionArgvMaxItems, ControllerExecutionArgvTokenMaxLength, ControllerExecutionOutputMaxBytes, ControllerExecutionTimeoutMaxMs, CwdPolicySchema, EgressPolicySchema, EnvironmentPolicySchema, ManagedVmArtifactReadMaxBytes, ManagedVmArtifactReadRequest, ManagedVmArtifactReadRequestSchema, OutputPolicySchema, ValidatedCliInvocation, ValidatedCliInvocationSchema } from "./tool-vm-runner-boundary/index.js";
+export { ArtifactPolicySchema, CancellationPolicySchema, ControllerDispatchIntent, ControllerDispatchIntentSchema, ControllerExecutionArgvMaxItems, ControllerExecutionArgvTokenMaxLength, ControllerExecutionOutputMaxBytes, ControllerExecutionResult, ControllerExecutionResultSchema, ControllerExecutionTimeoutMaxMs, ControllerHostActionRequest, ControllerHostActionRequestSchema, ControllerHostActionResult, ControllerHostActionResultSchema, ControllerTrustedScopeSchema, CwdPolicySchema, EgressPolicySchema, EnvironmentPolicySchema, ExecutionFingerprint, ExecutionFingerprintSchema, ManagedVmArgvMaxItems, ManagedVmArtifactReadMaxBytes, ManagedVmArtifactReadRequest, ManagedVmArtifactReadRequestSchema, ManagedVmEnvironmentMaxEntries, ManagedVmEnvironmentValueMaxLength, ManagedVmExecRequest, ManagedVmExecRequestSchema, ManagedVmStdinMaxBytes, ManagedVmStreamMaxBytes, ManagedVmTimeoutMaxMs, ManagedVmTokenMaxLength, OutputPolicySchema, ValidatedCliInvocation, ValidatedCliInvocationSchema };

package/dist/index.js

@@ -0,0 +1,8 @@
+import { n as ControllerTrustedScopeSchema, t as ControllerDispatchIntentSchema } from "./controller-dispatch-intent-schema-dw3ugqpe.js";
+import { t as ControllerExecutionResultSchema } from "./controller-execution-result-schema-BN0cqzhi.js";
+import { t as ExecutionFingerprintSchema } from "./execution-fingerprint-schema-D4J978Oa.js";
+import "./controller-dispatch-boundary/index.js";
+import { ControllerHostActionRequestSchema, ControllerHostActionResultSchema } from "./controller-host-action-boundary/index.js";
+import { _ as EnvironmentPolicySchema, a as ManagedVmStdinMaxBytes, c as ManagedVmTokenMaxLength, d as ControllerExecutionArgvMaxItems, f as ControllerExecutionArgvTokenMaxLength, g as EgressPolicySchema, h as CwdPolicySchema, i as ManagedVmExecRequestSchema, l as ArtifactPolicySchema, m as ControllerExecutionTimeoutMaxMs, n as ManagedVmEnvironmentMaxEntries, o as ManagedVmStreamMaxBytes, p as ControllerExecutionOutputMaxBytes, r as ManagedVmEnvironmentValueMaxLength, s as ManagedVmTimeoutMaxMs, t as ManagedVmArgvMaxItems, u as CancellationPolicySchema, v as OutputPolicySchema, y as ValidatedCliInvocationSchema } from "./managed-vm-exec-request-schema-oPmsc4H8.js";
+import { ManagedVmArtifactReadMaxBytes, ManagedVmArtifactReadRequestSchema } from "./tool-vm-runner-boundary/index.js";
+export { ArtifactPolicySchema, CancellationPolicySchema, ControllerDispatchIntentSchema, ControllerExecutionArgvMaxItems, ControllerExecutionArgvTokenMaxLength, ControllerExecutionOutputMaxBytes, ControllerExecutionResultSchema, ControllerExecutionTimeoutMaxMs, ControllerHostActionRequestSchema, ControllerHostActionResultSchema, ControllerTrustedScopeSchema, CwdPolicySchema, EgressPolicySchema, EnvironmentPolicySchema, ExecutionFingerprintSchema, ManagedVmArgvMaxItems, ManagedVmArtifactReadMaxBytes, ManagedVmArtifactReadRequestSchema, ManagedVmEnvironmentMaxEntries, ManagedVmEnvironmentValueMaxLength, ManagedVmExecRequestSchema, ManagedVmStdinMaxBytes, ManagedVmStreamMaxBytes, ManagedVmTimeoutMaxMs, ManagedVmTokenMaxLength, OutputPolicySchema, ValidatedCliInvocationSchema };

package/dist/managed-vm-exec-request-schema-BkkZ7zYn.d.ts

@@ -0,0 +1,42 @@
+import { z } from "zod";
+
+//#region src/tool-vm-runner-boundary/models/managed-vm-exec-request-schema.d.ts
+declare const ManagedVmArgvMaxItems = 100;
+declare const ManagedVmTokenMaxLength = 4096;
+declare const ManagedVmEnvironmentMaxEntries = 100;
+declare const ManagedVmEnvironmentValueMaxLength: number;
+declare const ManagedVmStdinMaxBytes: number;
+declare const ManagedVmStreamMaxBytes: number;
+declare const ManagedVmTimeoutMaxMs: number;
+declare const ManagedVmExecRequestSchema: z.ZodObject<{
+  abortSignalId: z.ZodOptional<z.ZodString>;
+  argv: z.ZodArray<z.ZodString>;
+  cwd: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"fixed">;
+    path: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"workspace_root">;
+  }, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"runner_scratch">;
+  }, z.core.$strict>], "kind">;
+  env: z.ZodRecord<z.ZodString, z.ZodString>;
+  executablePath: z.ZodString;
+  pty: z.ZodLiteral<false>;
+  shellMode: z.ZodLiteral<"none">;
+  stderr: z.ZodEnum<{
+    stream: "stream";
+    discard: "discard";
+  }>;
+  stderrMaxBytes: z.ZodNumber;
+  stdin: z.ZodOptional<z.ZodString>;
+  stdout: z.ZodEnum<{
+    stream: "stream";
+    discard: "discard";
+  }>;
+  stdoutMaxBytes: z.ZodNumber;
+  timeoutMs: z.ZodNumber;
+}, z.core.$strict>;
+type ManagedVmExecRequest = z.infer<typeof ManagedVmExecRequestSchema>;
+//#endregion
+export { ManagedVmExecRequestSchema as a, ManagedVmTimeoutMaxMs as c, ManagedVmExecRequest as i, ManagedVmTokenMaxLength as l, ManagedVmEnvironmentMaxEntries as n, ManagedVmStdinMaxBytes as o, ManagedVmEnvironmentValueMaxLength as r, ManagedVmStreamMaxBytes as s, ManagedVmArgvMaxItems as t };
+//# sourceMappingURL=managed-vm-exec-request-schema-BkkZ7zYn.d.ts.map

package/dist/managed-vm-exec-request-schema-BkkZ7zYn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-vm-exec-request-schema-BkkZ7zYn.d.ts","names":[],"sources":["../src/tool-vm-runner-boundary/models/managed-vm-exec-request-schema.ts"],"mappings":";;;cAIa,qBAAA;AAAA,cACA,uBAAA;AAAA,cACA,8BAAA;AAAA,cACA,kCAAA;AAAA,cACA,sBAAA;AAAA,cACA,uBAAA;AAAA,cACA,qBAAA;AAAA,cAQA,0BAAA,EAA0B,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAqB3B,oBAAA,GAAuB,CAAA,CAAE,KAAA,QAAa,0BAAA"}

package/dist/managed-vm-exec-request-schema-oPmsc4H8.js

@@ -0,0 +1,97 @@
+import { t as ExecutionFingerprintSchema } from "./execution-fingerprint-schema-D4J978Oa.js";
+import { z } from "zod";
+//#region src/tool-vm-runner-boundary/models/cli-invocation-policy-schema.ts
+const ControllerExecutionArgvMaxItems = 100;
+const ControllerExecutionArgvTokenMaxLength = 4096;
+const ControllerExecutionOutputMaxBytes = 16 * 1024 * 1024;
+const ControllerExecutionTimeoutMaxMs = 480 * 60 * 1e3;
+const ControllerExecutionArgvTokenSchema = z.string().min(1).max(ControllerExecutionArgvTokenMaxLength);
+const CwdPolicySchema = z.discriminatedUnion("kind", [
+	z.object({
+		kind: z.literal("fixed"),
+		path: z.string().startsWith("/")
+	}).strict(),
+	z.object({ kind: z.literal("workspace_root") }).strict(),
+	z.object({ kind: z.literal("runner_scratch") }).strict()
+]);
+const EnvironmentPolicySchema = z.object({
+	allowedVariables: z.array(z.string().min(1)).default([]),
+	deniedPatterns: z.array(z.string()).default([]),
+	mode: z.enum([
+		"empty",
+		"allowlist",
+		"controller_materialized"
+	])
+}).strict();
+const EgressPolicySchema = z.object({
+	allowedHosts: z.array(z.string().min(1)),
+	allowedPorts: z.array(z.number().int().positive().max(65535)).optional(),
+	denyEndpointOverrides: z.boolean().default(true)
+}).strict();
+const OutputPolicySchema = z.object({
+	modelVisibleStderr: z.enum(["none", "safe_summary"]).default("safe_summary"),
+	redactionProfile: z.string().min(1),
+	stderrMaxBytes: z.number().int().positive().max(ControllerExecutionOutputMaxBytes),
+	stdoutMaxBytes: z.number().int().positive().max(ControllerExecutionOutputMaxBytes),
+	truncationMode: z.enum([
+		"fail",
+		"truncate",
+		"artifact"
+	]).default("truncate")
+}).strict();
+const ArtifactPolicySchema = z.object({
+	maxArtifacts: z.number().int().nonnegative().max(20).default(0),
+	maxBytesPerArtifact: z.number().int().positive().max(ControllerExecutionOutputMaxBytes).optional(),
+	mode: z.enum([
+		"none",
+		"controller_written",
+		"bounded_stream",
+		"vm_file_read"
+	]),
+	noFollowRequired: z.boolean().default(true)
+}).strict();
+const CancellationPolicySchema = z.object({
+	onCancel: z.enum(["abort_process", "close_vm"]),
+	timeoutMs: z.number().int().positive().max(ControllerExecutionTimeoutMaxMs)
+}).strict();
+const ValidatedCliInvocationSchema = z.object({
+	artifacts: ArtifactPolicySchema,
+	argv: z.array(ControllerExecutionArgvTokenSchema).max(100),
+	cancellation: CancellationPolicySchema,
+	cwd: CwdPolicySchema,
+	egress: EgressPolicySchema,
+	environment: EnvironmentPolicySchema,
+	executablePath: z.string().startsWith("/"),
+	fingerprint: ExecutionFingerprintSchema,
+	output: OutputPolicySchema
+}).strict();
+//#endregion
+//#region src/tool-vm-runner-boundary/models/managed-vm-exec-request-schema.ts
+const ManagedVmArgvMaxItems = 100;
+const ManagedVmTokenMaxLength = 4096;
+const ManagedVmEnvironmentMaxEntries = 100;
+const ManagedVmEnvironmentValueMaxLength = 32 * 1024;
+const ManagedVmStdinMaxBytes = 1024 * 1024;
+const ManagedVmStreamMaxBytes = 16 * 1024 * 1024;
+const ManagedVmTimeoutMaxMs = 480 * 60 * 1e3;
+const ManagedVmArgvTokenSchema = z.string().min(1).max(ManagedVmTokenMaxLength);
+const ManagedVmEnvironmentSchema = z.record(z.string().min(1).max(ManagedVmTokenMaxLength), z.string().max(ManagedVmEnvironmentValueMaxLength));
+const ManagedVmExecRequestSchema = z.object({
+	abortSignalId: z.string().min(1).optional(),
+	argv: z.array(ManagedVmArgvTokenSchema).max(100),
+	cwd: CwdPolicySchema,
+	env: ManagedVmEnvironmentSchema.refine((environment) => Object.keys(environment).length <= 100, { message: "ManagedVm env exceeds the maximum number of entries." }),
+	executablePath: z.string().startsWith("/"),
+	pty: z.literal(false),
+	shellMode: z.literal("none"),
+	stderr: z.enum(["stream", "discard"]),
+	stderrMaxBytes: z.number().int().positive().max(ManagedVmStreamMaxBytes),
+	stdin: z.string().max(ManagedVmStdinMaxBytes).optional(),
+	stdout: z.enum(["stream", "discard"]),
+	stdoutMaxBytes: z.number().int().positive().max(ManagedVmStreamMaxBytes),
+	timeoutMs: z.number().int().positive().max(ManagedVmTimeoutMaxMs)
+}).strict();
+//#endregion
+export { EnvironmentPolicySchema as _, ManagedVmStdinMaxBytes as a, ManagedVmTokenMaxLength as c, ControllerExecutionArgvMaxItems as d, ControllerExecutionArgvTokenMaxLength as f, EgressPolicySchema as g, CwdPolicySchema as h, ManagedVmExecRequestSchema as i, ArtifactPolicySchema as l, ControllerExecutionTimeoutMaxMs as m, ManagedVmEnvironmentMaxEntries as n, ManagedVmStreamMaxBytes as o, ControllerExecutionOutputMaxBytes as p, ManagedVmEnvironmentValueMaxLength as r, ManagedVmTimeoutMaxMs as s, ManagedVmArgvMaxItems as t, CancellationPolicySchema as u, OutputPolicySchema as v, ValidatedCliInvocationSchema as y };
+
+//# sourceMappingURL=managed-vm-exec-request-schema-oPmsc4H8.js.map

package/dist/managed-vm-exec-request-schema-oPmsc4H8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"managed-vm-exec-request-schema-oPmsc4H8.js","names":[],"sources":["../src/tool-vm-runner-boundary/models/cli-invocation-policy-schema.ts","../src/tool-vm-runner-boundary/models/managed-vm-exec-request-schema.ts"],"sourcesContent":["import { z } from 'zod';\n\nimport { ExecutionFingerprintSchema } from '../../controller-dispatch-boundary/models/execution-fingerprint-schema.js';\n\nexport const ControllerExecutionArgvMaxItems = 100;\nexport const ControllerExecutionArgvTokenMaxLength = 4096;\nexport const ControllerExecutionOutputMaxBytes = 16 * 1024 * 1024;\nexport const ControllerExecutionTimeoutMaxMs = 8 * 60 * 60 * 1000;\n\nconst ControllerExecutionArgvTokenSchema = z\n\t.string()\n\t.min(1)\n\t.max(ControllerExecutionArgvTokenMaxLength);\n\nexport const CwdPolicySchema = z.discriminatedUnion('kind', [\n\tz.object({ kind: z.literal('fixed'), path: z.string().startsWith('/') }).strict(),\n\tz.object({ kind: z.literal('workspace_root') }).strict(),\n\tz.object({ kind: z.literal('runner_scratch') }).strict(),\n]);\n\nexport const EnvironmentPolicySchema = z\n\t.object({\n\t\tallowedVariables: z.array(z.string().min(1)).default([]),\n\t\tdeniedPatterns: z.array(z.string()).default([]),\n\t\tmode: z.enum(['empty', 'allowlist', 'controller_materialized']),\n\t})\n\t.strict();\n\nexport const EgressPolicySchema = z\n\t.object({\n\t\tallowedHosts: z.array(z.string().min(1)),\n\t\tallowedPorts: z.array(z.number().int().positive().max(65_535)).optional(),\n\t\tdenyEndpointOverrides: z.boolean().default(true),\n\t})\n\t.strict();\n\nexport const OutputPolicySchema = z\n\t.object({\n\t\tmodelVisibleStderr: z.enum(['none', 'safe_summary']).default('safe_summary'),\n\t\tredactionProfile: z.string().min(1),\n\t\tstderrMaxBytes: z.number().int().positive().max(ControllerExecutionOutputMaxBytes),\n\t\tstdoutMaxBytes: z.number().int().positive().max(ControllerExecutionOutputMaxBytes),\n\t\ttruncationMode: z.enum(['fail', 'truncate', 'artifact']).default('truncate'),\n\t})\n\t.strict();\n\nexport const ArtifactPolicySchema = z\n\t.object({\n\t\tmaxArtifacts: z.number().int().nonnegative().max(20).default(0),\n\t\tmaxBytesPerArtifact: z\n\t\t\t.number()\n\t\t\t.int()\n\t\t\t.positive()\n\t\t\t.max(ControllerExecutionOutputMaxBytes)\n\t\t\t.optional(),\n\t\tmode: z.enum(['none', 'controller_written', 'bounded_stream', 'vm_file_read']),\n\t\tnoFollowRequired: z.boolean().default(true),\n\t})\n\t.strict();\n\nexport const CancellationPolicySchema = z\n\t.object({\n\t\tonCancel: z.enum(['abort_process', 'close_vm']),\n\t\ttimeoutMs: z.number().int().positive().max(ControllerExecutionTimeoutMaxMs),\n\t})\n\t.strict();\n\nexport const ValidatedCliInvocationSchema = z\n\t.object({\n\t\tartifacts: ArtifactPolicySchema,\n\t\targv: z.array(ControllerExecutionArgvTokenSchema).max(ControllerExecutionArgvMaxItems),\n\t\tcancellation: CancellationPolicySchema,\n\t\tcwd: CwdPolicySchema,\n\t\tegress: EgressPolicySchema,\n\t\tenvironment: EnvironmentPolicySchema,\n\t\texecutablePath: z.string().startsWith('/'),\n\t\tfingerprint: ExecutionFingerprintSchema,\n\t\toutput: OutputPolicySchema,\n\t})\n\t.strict();\n\nexport type ValidatedCliInvocation = z.infer<typeof ValidatedCliInvocationSchema>;\n","import { z } from 'zod';\n\nimport { CwdPolicySchema } from './cli-invocation-policy-schema.js';\n\nexport const ManagedVmArgvMaxItems = 100;\nexport const ManagedVmTokenMaxLength = 4096;\nexport const ManagedVmEnvironmentMaxEntries = 100;\nexport const ManagedVmEnvironmentValueMaxLength = 32 * 1024;\nexport const ManagedVmStdinMaxBytes = 1024 * 1024;\nexport const ManagedVmStreamMaxBytes = 16 * 1024 * 1024;\nexport const ManagedVmTimeoutMaxMs = 8 * 60 * 60 * 1000;\n\nconst ManagedVmArgvTokenSchema = z.string().min(1).max(ManagedVmTokenMaxLength);\nconst ManagedVmEnvironmentSchema = z.record(\n\tz.string().min(1).max(ManagedVmTokenMaxLength),\n\tz.string().max(ManagedVmEnvironmentValueMaxLength),\n);\n\nexport const ManagedVmExecRequestSchema = z\n\t.object({\n\t\tabortSignalId: z.string().min(1).optional(),\n\t\targv: z.array(ManagedVmArgvTokenSchema).max(ManagedVmArgvMaxItems),\n\t\tcwd: CwdPolicySchema,\n\t\tenv: ManagedVmEnvironmentSchema.refine(\n\t\t\t(environment) => Object.keys(environment).length <= ManagedVmEnvironmentMaxEntries,\n\t\t\t{ message: 'ManagedVm env exceeds the maximum number of entries.' },\n\t\t),\n\t\texecutablePath: z.string().startsWith('/'),\n\t\tpty: z.literal(false),\n\t\tshellMode: z.literal('none'),\n\t\tstderr: z.enum(['stream', 'discard']),\n\t\tstderrMaxBytes: z.number().int().positive().max(ManagedVmStreamMaxBytes),\n\t\tstdin: z.string().max(ManagedVmStdinMaxBytes).optional(),\n\t\tstdout: z.enum(['stream', 'discard']),\n\t\tstdoutMaxBytes: z.number().int().positive().max(ManagedVmStreamMaxBytes),\n\t\ttimeoutMs: z.number().int().positive().max(ManagedVmTimeoutMaxMs),\n\t})\n\t.strict();\n\nexport type ManagedVmExecRequest = z.infer<typeof ManagedVmExecRequestSchema>;\n"],"mappings":";;;AAIA,MAAa,kCAAkC;AAC/C,MAAa,wCAAwC;AACrD,MAAa,oCAAoC,KAAK,OAAO;AAC7D,MAAa,kCAAkC,MAAS,KAAK;AAE7D,MAAM,qCAAqC,EACzC,QAAQ,CACR,IAAI,EAAE,CACN,IAAI,sCAAsC;AAE5C,MAAa,kBAAkB,EAAE,mBAAmB,QAAQ;CAC3D,EAAE,OAAO;EAAE,MAAM,EAAE,QAAQ,QAAQ;EAAE,MAAM,EAAE,QAAQ,CAAC,WAAW,IAAI;EAAE,CAAC,CAAC,QAAQ;CACjF,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,iBAAiB,EAAE,CAAC,CAAC,QAAQ;CACxD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,iBAAiB,EAAE,CAAC,CAAC,QAAQ;CACxD,CAAC;AAEF,MAAa,0BAA0B,EACrC,OAAO;CACP,kBAAkB,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;CACxD,gBAAgB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC;CAC/C,MAAM,EAAE,KAAK;EAAC;EAAS;EAAa;EAA0B,CAAC;CAC/D,CAAC,CACD,QAAQ;AAEV,MAAa,qBAAqB,EAChC,OAAO;CACP,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;CACxC,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,MAAO,CAAC,CAAC,UAAU;CACzE,uBAAuB,EAAE,SAAS,CAAC,QAAQ,KAAK;CAChD,CAAC,CACD,QAAQ;AAEV,MAAa,qBAAqB,EAChC,OAAO;CACP,oBAAoB,EAAE,KAAK,CAAC,QAAQ,eAAe,CAAC,CAAC,QAAQ,eAAe;CAC5E,kBAAkB,EAAE,QAAQ,CAAC,IAAI,EAAE;CACnC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,kCAAkC;CAClF,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,kCAAkC;CAClF,gBAAgB,EAAE,KAAK;EAAC;EAAQ;EAAY;EAAW,CAAC,CAAC,QAAQ,WAAW;CAC5E,CAAC,CACD,QAAQ;AAEV,MAAa,uBAAuB,EAClC,OAAO;CACP,cAAc,EAAE,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,QAAQ,EAAE;CAC/D,qBAAqB,EACnB,QAAQ,CACR,KAAK,CACL,UAAU,CACV,IAAI,kCAAkC,CACtC,UAAU;CACZ,MAAM,EAAE,KAAK;EAAC;EAAQ;EAAsB;EAAkB;EAAe,CAAC;CAC9E,kBAAkB,EAAE,SAAS,CAAC,QAAQ,KAAK;CAC3C,CAAC,CACD,QAAQ;AAEV,MAAa,2BAA2B,EACtC,OAAO;CACP,UAAU,EAAE,KAAK,CAAC,iBAAiB,WAAW,CAAC;CAC/C,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,gCAAgC;CAC3E,CAAC,CACD,QAAQ;AAEV,MAAa,+BAA+B,EAC1C,OAAO;CACP,WAAW;CACX,MAAM,EAAE,MAAM,mCAAmC,CAAC,IAAA,IAAoC;CACtF,cAAc;CACd,KAAK;CACL,QAAQ;CACR,aAAa;CACb,gBAAgB,EAAE,QAAQ,CAAC,WAAW,IAAI;CAC1C,aAAa;CACb,QAAQ;CACR,CAAC,CACD,QAAQ;;;AC3EV,MAAa,wBAAwB;AACrC,MAAa,0BAA0B;AACvC,MAAa,iCAAiC;AAC9C,MAAa,qCAAqC,KAAK;AACvD,MAAa,yBAAyB,OAAO;AAC7C,MAAa,0BAA0B,KAAK,OAAO;AACnD,MAAa,wBAAwB,MAAS,KAAK;AAEnD,MAAM,2BAA2B,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,wBAAwB;AAC/E,MAAM,6BAA6B,EAAE,OACpC,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,wBAAwB,EAC9C,EAAE,QAAQ,CAAC,IAAI,mCAAmC,CAClD;AAED,MAAa,6BAA6B,EACxC,OAAO;CACP,eAAe,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;CAC3C,MAAM,EAAE,MAAM,yBAAyB,CAAC,IAAA,IAA0B;CAClE,KAAK;CACL,KAAK,2BAA2B,QAC9B,gBAAgB,OAAO,KAAK,YAAY,CAAC,UAAA,KAC1C,EAAE,SAAS,wDAAwD,CACnE;CACD,gBAAgB,EAAE,QAAQ,CAAC,WAAW,IAAI;CAC1C,KAAK,EAAE,QAAQ,MAAM;CACrB,WAAW,EAAE,QAAQ,OAAO;CAC5B,QAAQ,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC;CACrC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,wBAAwB;CACxE,OAAO,EAAE,QAAQ,CAAC,IAAI,uBAAuB,CAAC,UAAU;CACxD,QAAQ,EAAE,KAAK,CAAC,UAAU,UAAU,CAAC;CACrC,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,wBAAwB;CACxE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,sBAAsB;CACjE,CAAC,CACD,QAAQ"}

package/dist/testing/index.d.ts

@@ -0,0 +1,24 @@
+import { t as ControllerDispatchIntent } from "../controller-dispatch-intent-schema-fqjx2pb2.js";
+import { i as ManagedVmExecRequest } from "../managed-vm-exec-request-schema-BkkZ7zYn.js";
+import { JsonObject } from "@agent-vm/agent-portal-sdk";
+
+//#region src/testing/index.d.ts
+interface CreateControllerDispatchIntentFixtureProps {
+  readonly agentId?: string;
+  readonly arguments?: JsonObject;
+  readonly auditCorrelationId?: string;
+  readonly name?: string;
+  readonly namespace?: string;
+  readonly profileId?: string;
+}
+interface CreateManagedVmExecRequestFixtureProps {
+  readonly argv?: readonly string[];
+  readonly cwdPath?: string;
+  readonly executablePath?: string;
+  readonly timeoutMs?: number;
+}
+declare function createControllerDispatchIntentFixture(props?: CreateControllerDispatchIntentFixtureProps): ControllerDispatchIntent;
+declare function createManagedVmExecRequestFixture(props?: CreateManagedVmExecRequestFixtureProps): ManagedVmExecRequest;
+//#endregion
+export { CreateControllerDispatchIntentFixtureProps, CreateManagedVmExecRequestFixtureProps, createControllerDispatchIntentFixture, createManagedVmExecRequestFixture };
+//# sourceMappingURL=index.d.ts.map

package/dist/testing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/testing/index.ts"],"mappings":";;;;;UAWiB,0CAAA;EAAA,SACP,OAAA;EAAA,SACA,SAAA,GAAY,UAAA;EAAA,SACZ,kBAAA;EAAA,SACA,IAAA;EAAA,SACA,SAAA;EAAA,SACA,SAAA;AAAA;AAAA,UAGO,sCAAA;EAAA,SACP,IAAA;EAAA,SACA,OAAA;EAAA,SACA,cAAA;EAAA,SACA,SAAA;AAAA;AAAA,iBAGM,qCAAA,CACf,KAAA,GAAO,0CAAA,GACL,wBAAA;AAAA,iBAea,iCAAA,CACf,KAAA,GAAO,sCAAA,GACL,oBAAA"}

package/dist/testing/index.js

@@ -0,0 +1,43 @@
+import { t as ControllerDispatchIntentSchema } from "../controller-dispatch-intent-schema-dw3ugqpe.js";
+import { i as ManagedVmExecRequestSchema } from "../managed-vm-exec-request-schema-oPmsc4H8.js";
+//#region src/testing/index.ts
+function createControllerDispatchIntentFixture(props = {}) {
+	return ControllerDispatchIntentSchema.parse({
+		auditCorrelationId: props.auditCorrelationId ?? "audit-1",
+		canonicalArguments: props.arguments ?? {},
+		capability: {
+			name: props.name ?? "get_issue",
+			namespace: props.namespace ?? "github"
+		},
+		trustedScope: {
+			agentId: props.agentId ?? "agent-1",
+			profileId: props.profileId ?? "code-builder"
+		}
+	});
+}
+function createManagedVmExecRequestFixture(props = {}) {
+	return ManagedVmExecRequestSchema.parse({
+		argv: props.argv ?? [
+			"issue",
+			"view",
+			"1"
+		],
+		cwd: {
+			kind: "fixed",
+			path: props.cwdPath ?? "/work"
+		},
+		env: {},
+		executablePath: props.executablePath ?? "/usr/local/bin/gh",
+		pty: false,
+		shellMode: "none",
+		stderr: "stream",
+		stderrMaxBytes: 1024,
+		stdout: "stream",
+		stdoutMaxBytes: 1024,
+		timeoutMs: props.timeoutMs ?? 3e4
+	});
+}
+//#endregion
+export { createControllerDispatchIntentFixture, createManagedVmExecRequestFixture };
+
+//# sourceMappingURL=index.js.map

package/dist/testing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../src/testing/index.ts"],"sourcesContent":["import type { JsonObject } from '@agent-vm/agent-portal-sdk';\n\nimport {\n\tControllerDispatchIntentSchema,\n\ttype ControllerDispatchIntent,\n} from '../controller-dispatch-boundary/models/controller-dispatch-intent-schema.js';\nimport {\n\tManagedVmExecRequestSchema,\n\ttype ManagedVmExecRequest,\n} from '../tool-vm-runner-boundary/models/managed-vm-exec-request-schema.js';\n\nexport interface CreateControllerDispatchIntentFixtureProps {\n\treadonly agentId?: string;\n\treadonly arguments?: JsonObject;\n\treadonly auditCorrelationId?: string;\n\treadonly name?: string;\n\treadonly namespace?: string;\n\treadonly profileId?: string;\n}\n\nexport interface CreateManagedVmExecRequestFixtureProps {\n\treadonly argv?: readonly string[];\n\treadonly cwdPath?: string;\n\treadonly executablePath?: string;\n\treadonly timeoutMs?: number;\n}\n\nexport function createControllerDispatchIntentFixture(\n\tprops: CreateControllerDispatchIntentFixtureProps = {},\n): ControllerDispatchIntent {\n\treturn ControllerDispatchIntentSchema.parse({\n\t\tauditCorrelationId: props.auditCorrelationId ?? 'audit-1',\n\t\tcanonicalArguments: props.arguments ?? {},\n\t\tcapability: {\n\t\t\tname: props.name ?? 'get_issue',\n\t\t\tnamespace: props.namespace ?? 'github',\n\t\t},\n\t\ttrustedScope: {\n\t\t\tagentId: props.agentId ?? 'agent-1',\n\t\t\tprofileId: props.profileId ?? 'code-builder',\n\t\t},\n\t});\n}\n\nexport function createManagedVmExecRequestFixture(\n\tprops: CreateManagedVmExecRequestFixtureProps = {},\n): ManagedVmExecRequest {\n\treturn ManagedVmExecRequestSchema.parse({\n\t\targv: props.argv ?? ['issue', 'view', '1'],\n\t\tcwd: { kind: 'fixed', path: props.cwdPath ?? '/work' },\n\t\tenv: {},\n\t\texecutablePath: props.executablePath ?? '/usr/local/bin/gh',\n\t\tpty: false,\n\t\tshellMode: 'none',\n\t\tstderr: 'stream',\n\t\tstderrMaxBytes: 1024,\n\t\tstdout: 'stream',\n\t\tstdoutMaxBytes: 1024,\n\t\ttimeoutMs: props.timeoutMs ?? 30_000,\n\t});\n}\n"],"mappings":";;;AA2BA,SAAgB,sCACf,QAAoD,EAAE,EAC3B;CAC3B,OAAO,+BAA+B,MAAM;EAC3C,oBAAoB,MAAM,sBAAsB;EAChD,oBAAoB,MAAM,aAAa,EAAE;EACzC,YAAY;GACX,MAAM,MAAM,QAAQ;GACpB,WAAW,MAAM,aAAa;GAC9B;EACD,cAAc;GACb,SAAS,MAAM,WAAW;GAC1B,WAAW,MAAM,aAAa;GAC9B;EACD,CAAC;;AAGH,SAAgB,kCACf,QAAgD,EAAE,EAC3B;CACvB,OAAO,2BAA2B,MAAM;EACvC,MAAM,MAAM,QAAQ;GAAC;GAAS;GAAQ;GAAI;EAC1C,KAAK;GAAE,MAAM;GAAS,MAAM,MAAM,WAAW;GAAS;EACtD,KAAK,EAAE;EACP,gBAAgB,MAAM,kBAAkB;EACxC,KAAK;EACL,WAAW;EACX,QAAQ;EACR,gBAAgB;EAChB,QAAQ;EACR,gBAAgB;EAChB,WAAW,MAAM,aAAa;EAC9B,CAAC"}

package/dist/tool-vm-runner-boundary/index.d.ts

@@ -0,0 +1,153 @@
+import { a as ManagedVmExecRequestSchema, c as ManagedVmTimeoutMaxMs, i as ManagedVmExecRequest, l as ManagedVmTokenMaxLength, n as ManagedVmEnvironmentMaxEntries, o as ManagedVmStdinMaxBytes, r as ManagedVmEnvironmentValueMaxLength, s as ManagedVmStreamMaxBytes, t as ManagedVmArgvMaxItems } from "../managed-vm-exec-request-schema-BkkZ7zYn.js";
+import { z } from "zod";
+
+//#region src/tool-vm-runner-boundary/models/cli-invocation-policy-schema.d.ts
+declare const ControllerExecutionArgvMaxItems = 100;
+declare const ControllerExecutionArgvTokenMaxLength = 4096;
+declare const ControllerExecutionOutputMaxBytes: number;
+declare const ControllerExecutionTimeoutMaxMs: number;
+declare const CwdPolicySchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  kind: z.ZodLiteral<"fixed">;
+  path: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+  kind: z.ZodLiteral<"workspace_root">;
+}, z.core.$strict>, z.ZodObject<{
+  kind: z.ZodLiteral<"runner_scratch">;
+}, z.core.$strict>], "kind">;
+declare const EnvironmentPolicySchema: z.ZodObject<{
+  allowedVariables: z.ZodDefault<z.ZodArray<z.ZodString>>;
+  deniedPatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+  mode: z.ZodEnum<{
+    empty: "empty";
+    allowlist: "allowlist";
+    controller_materialized: "controller_materialized";
+  }>;
+}, z.core.$strict>;
+declare const EgressPolicySchema: z.ZodObject<{
+  allowedHosts: z.ZodArray<z.ZodString>;
+  allowedPorts: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+  denyEndpointOverrides: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+declare const OutputPolicySchema: z.ZodObject<{
+  modelVisibleStderr: z.ZodDefault<z.ZodEnum<{
+    none: "none";
+    safe_summary: "safe_summary";
+  }>>;
+  redactionProfile: z.ZodString;
+  stderrMaxBytes: z.ZodNumber;
+  stdoutMaxBytes: z.ZodNumber;
+  truncationMode: z.ZodDefault<z.ZodEnum<{
+    fail: "fail";
+    truncate: "truncate";
+    artifact: "artifact";
+  }>>;
+}, z.core.$strict>;
+declare const ArtifactPolicySchema: z.ZodObject<{
+  maxArtifacts: z.ZodDefault<z.ZodNumber>;
+  maxBytesPerArtifact: z.ZodOptional<z.ZodNumber>;
+  mode: z.ZodEnum<{
+    none: "none";
+    controller_written: "controller_written";
+    bounded_stream: "bounded_stream";
+    vm_file_read: "vm_file_read";
+  }>;
+  noFollowRequired: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+declare const CancellationPolicySchema: z.ZodObject<{
+  onCancel: z.ZodEnum<{
+    abort_process: "abort_process";
+    close_vm: "close_vm";
+  }>;
+  timeoutMs: z.ZodNumber;
+}, z.core.$strict>;
+declare const ValidatedCliInvocationSchema: z.ZodObject<{
+  artifacts: z.ZodObject<{
+    maxArtifacts: z.ZodDefault<z.ZodNumber>;
+    maxBytesPerArtifact: z.ZodOptional<z.ZodNumber>;
+    mode: z.ZodEnum<{
+      none: "none";
+      controller_written: "controller_written";
+      bounded_stream: "bounded_stream";
+      vm_file_read: "vm_file_read";
+    }>;
+    noFollowRequired: z.ZodDefault<z.ZodBoolean>;
+  }, z.core.$strict>;
+  argv: z.ZodArray<z.ZodString>;
+  cancellation: z.ZodObject<{
+    onCancel: z.ZodEnum<{
+      abort_process: "abort_process";
+      close_vm: "close_vm";
+    }>;
+    timeoutMs: z.ZodNumber;
+  }, z.core.$strict>;
+  cwd: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"fixed">;
+    path: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"workspace_root">;
+  }, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"runner_scratch">;
+  }, z.core.$strict>], "kind">;
+  egress: z.ZodObject<{
+    allowedHosts: z.ZodArray<z.ZodString>;
+    allowedPorts: z.ZodOptional<z.ZodArray<z.ZodNumber>>;
+    denyEndpointOverrides: z.ZodDefault<z.ZodBoolean>;
+  }, z.core.$strict>;
+  environment: z.ZodObject<{
+    allowedVariables: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    deniedPatterns: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    mode: z.ZodEnum<{
+      empty: "empty";
+      allowlist: "allowlist";
+      controller_materialized: "controller_materialized";
+    }>;
+  }, z.core.$strict>;
+  executablePath: z.ZodString;
+  fingerprint: z.ZodObject<{
+    agentId: z.ZodString;
+    artifactIntentHash: z.ZodString;
+    backendBindingRevision: z.ZodString;
+    canonicalArgumentHash: z.ZodString;
+    capability: z.ZodObject<{
+      namespace: z.ZodString;
+      name: z.ZodString;
+    }, z.core.$strict>;
+    catalogRevision: z.ZodString;
+    custodyMode: z.ZodEnum<{
+      ephemeral_material: "ephemeral_material";
+      controller_durable_state: "controller_durable_state";
+    }>;
+    egressPolicyHash: z.ZodString;
+    executableTemplateRevision: z.ZodString;
+    operatorUserId: z.ZodOptional<z.ZodString>;
+    outputPolicyHash: z.ZodString;
+    policyRevision: z.ZodString;
+  }, z.core.$strict>;
+  output: z.ZodObject<{
+    modelVisibleStderr: z.ZodDefault<z.ZodEnum<{
+      none: "none";
+      safe_summary: "safe_summary";
+    }>>;
+    redactionProfile: z.ZodString;
+    stderrMaxBytes: z.ZodNumber;
+    stdoutMaxBytes: z.ZodNumber;
+    truncationMode: z.ZodDefault<z.ZodEnum<{
+      fail: "fail";
+      truncate: "truncate";
+      artifact: "artifact";
+    }>>;
+  }, z.core.$strict>;
+}, z.core.$strict>;
+type ValidatedCliInvocation = z.infer<typeof ValidatedCliInvocationSchema>;
+//#endregion
+//#region src/tool-vm-runner-boundary/models/managed-vm-artifact-read-request-schema.d.ts
+declare const ManagedVmArtifactReadMaxBytes: number;
+declare const ManagedVmArtifactReadRequestSchema: z.ZodObject<{
+  artifactId: z.ZodString;
+  maxBytes: z.ZodNumber;
+  noFollow: z.ZodLiteral<true>;
+}, z.core.$strict>;
+type ManagedVmArtifactReadRequest = z.infer<typeof ManagedVmArtifactReadRequestSchema>;
+//#endregion
+export { ArtifactPolicySchema, CancellationPolicySchema, ControllerExecutionArgvMaxItems, ControllerExecutionArgvTokenMaxLength, ControllerExecutionOutputMaxBytes, ControllerExecutionTimeoutMaxMs, CwdPolicySchema, EgressPolicySchema, EnvironmentPolicySchema, ManagedVmArgvMaxItems, ManagedVmArtifactReadMaxBytes, ManagedVmArtifactReadRequest, ManagedVmArtifactReadRequestSchema, ManagedVmEnvironmentMaxEntries, ManagedVmEnvironmentValueMaxLength, ManagedVmExecRequest, ManagedVmExecRequestSchema, ManagedVmStdinMaxBytes, ManagedVmStreamMaxBytes, ManagedVmTimeoutMaxMs, ManagedVmTokenMaxLength, OutputPolicySchema, ValidatedCliInvocation, ValidatedCliInvocationSchema };
+//# sourceMappingURL=index.d.ts.map

package/dist/tool-vm-runner-boundary/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../src/tool-vm-runner-boundary/models/cli-invocation-policy-schema.ts","../../src/tool-vm-runner-boundary/models/managed-vm-artifact-read-request-schema.ts"],"mappings":";;;;cAIa,+BAAA;AAAA,cACA,qCAAA;AAAA,cACA,iCAAA;AAAA,cACA,+BAAA;AAAA,cAOA,eAAA,EAAe,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;cAMf,uBAAA,EAAuB,CAAA,CAAA,SAAA;;;;;;;;;cAQvB,kBAAA,EAAkB,CAAA,CAAA,SAAA;;;;;cAQlB,kBAAA,EAAkB,CAAA,CAAA,SAAA;;;;;;;;;;;;;;cAUlB,oBAAA,EAAoB,CAAA,CAAA,SAAA;;;;;;;;;;;cAcpB,wBAAA,EAAwB,CAAA,CAAA,SAAA;;;;;;;cAOxB,4BAAA,EAA4B,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAc7B,sBAAA,GAAyB,CAAA,CAAE,KAAA,QAAa,4BAAA;;;cC/EvC,6BAAA;AAAA,cAEA,kCAAA,EAAkC,CAAA,CAAA,SAAA;;;;;KAQnC,4BAAA,GAA+B,CAAA,CAAE,KAAA,QAAa,kCAAA"}

package/dist/tool-vm-runner-boundary/index.js

@@ -0,0 +1,13 @@
+import { _ as EnvironmentPolicySchema, a as ManagedVmStdinMaxBytes, c as ManagedVmTokenMaxLength, d as ControllerExecutionArgvMaxItems, f as ControllerExecutionArgvTokenMaxLength, g as EgressPolicySchema, h as CwdPolicySchema, i as ManagedVmExecRequestSchema, l as ArtifactPolicySchema, m as ControllerExecutionTimeoutMaxMs, n as ManagedVmEnvironmentMaxEntries, o as ManagedVmStreamMaxBytes, p as ControllerExecutionOutputMaxBytes, r as ManagedVmEnvironmentValueMaxLength, s as ManagedVmTimeoutMaxMs, t as ManagedVmArgvMaxItems, u as CancellationPolicySchema, v as OutputPolicySchema, y as ValidatedCliInvocationSchema } from "../managed-vm-exec-request-schema-oPmsc4H8.js";
+import { z } from "zod";
+//#region src/tool-vm-runner-boundary/models/managed-vm-artifact-read-request-schema.ts
+const ManagedVmArtifactReadMaxBytes = 16 * 1024 * 1024;
+const ManagedVmArtifactReadRequestSchema = z.object({
+	artifactId: z.string().min(1),
+	maxBytes: z.number().int().positive().max(ManagedVmArtifactReadMaxBytes),
+	noFollow: z.literal(true)
+}).strict();
+//#endregion
+export { ArtifactPolicySchema, CancellationPolicySchema, ControllerExecutionArgvMaxItems, ControllerExecutionArgvTokenMaxLength, ControllerExecutionOutputMaxBytes, ControllerExecutionTimeoutMaxMs, CwdPolicySchema, EgressPolicySchema, EnvironmentPolicySchema, ManagedVmArgvMaxItems, ManagedVmArtifactReadMaxBytes, ManagedVmArtifactReadRequestSchema, ManagedVmEnvironmentMaxEntries, ManagedVmEnvironmentValueMaxLength, ManagedVmExecRequestSchema, ManagedVmStdinMaxBytes, ManagedVmStreamMaxBytes, ManagedVmTimeoutMaxMs, ManagedVmTokenMaxLength, OutputPolicySchema, ValidatedCliInvocationSchema };
+
+//# sourceMappingURL=index.js.map

package/dist/tool-vm-runner-boundary/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../src/tool-vm-runner-boundary/models/managed-vm-artifact-read-request-schema.ts"],"sourcesContent":["import { z } from 'zod';\n\nexport const ManagedVmArtifactReadMaxBytes = 16 * 1024 * 1024;\n\nexport const ManagedVmArtifactReadRequestSchema = z\n\t.object({\n\t\tartifactId: z.string().min(1),\n\t\tmaxBytes: z.number().int().positive().max(ManagedVmArtifactReadMaxBytes),\n\t\tnoFollow: z.literal(true),\n\t})\n\t.strict();\n\nexport type ManagedVmArtifactReadRequest = z.infer<typeof ManagedVmArtifactReadRequestSchema>;\n"],"mappings":";;;AAEA,MAAa,gCAAgC,KAAK,OAAO;AAEzD,MAAa,qCAAqC,EAChD,OAAO;CACP,YAAY,EAAE,QAAQ,CAAC,IAAI,EAAE;CAC7B,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,8BAA8B;CACxE,UAAU,EAAE,QAAQ,KAAK;CACzB,CAAC,CACD,QAAQ"}

package/package.json

@@ -0,0 +1,60 @@
+{
+  "name": "@agent-vm/controller-execution-contracts",
+  "version": "0.0.109",
+  "description": "Zod contracts for controller-owned portal execution boundaries.",
+  "homepage": "https://github.com/ShravanSunder/agent-vm#readme",
+  "bugs": {
+    "url": "https://github.com/ShravanSunder/agent-vm/issues"
+  },
+  "license": "MIT",
+  "author": "Shravan Sunder <ShravanSunder@users.noreply.github.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ShravanSunder/agent-vm.git",
+    "directory": "packages/controller-execution-contracts"
+  },
+  "files": [
+    "dist"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./controller-dispatch-boundary": {
+      "types": "./dist/controller-dispatch-boundary/index.d.ts",
+      "import": "./dist/controller-dispatch-boundary/index.js"
+    },
+    "./controller-host-action-boundary": {
+      "types": "./dist/controller-host-action-boundary/index.d.ts",
+      "import": "./dist/controller-host-action-boundary/index.js"
+    },
+    "./tool-vm-runner-boundary": {
+      "types": "./dist/tool-vm-runner-boundary/index.d.ts",
+      "import": "./dist/tool-vm-runner-boundary/index.js"
+    },
+    "./testing": {
+      "types": "./dist/testing/index.d.ts",
+      "import": "./dist/testing/index.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "zod": "^4.4.3",
+    "@agent-vm/agent-portal-sdk": "0.0.109"
+  },
+  "devDependencies": {
+    "vitest": "^4.1.5"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "pnpm test:unit",
+    "test:unit": "vitest run --root ../../ --config vitest.config.ts --project unit packages/controller-execution-contracts/src"
+  }
+}