@agent-vm/gateway-control-contracts 0.0.109

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"mappings":";;;;cAca,0BAAA,EAA0B,CAAA,CAAA,UAAA;AAAA,cAE1B,gCAAA,EAAgC,CAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;cAkBhC,6BAAA,EAA6B,CAAA,CAAA,OAAA;;;;;;;;;;cAM7B,yCAAA,EAAyC,CAAA,CAAA,OAAA;;;;;;;;;;;;;;;;;;;;;cAsBzC,iCAAA,EAAiC,CAAA,CAAA,SAAA;;;;cAOjC,uCAAA,EAAuC,CAAA,CAAA,SAAA;;;;;;;;;;;;;cAIvC,0CAAA,EAA0C,CAAA,CAAA,SAAA;AAAA,cAE1C,uCAAA,EAAuC,CAAA,CAAA,SAAA;;;;;;;;;;;;cAevC,oCAAA,EAAoC,CAAA,CAAA,SAAA;;;cAMpC,+CAAA,EAA+C,CAAA,CAAA,UAAA;AAAA,cAE/C,sCAAA,EAAsC,CAAA,CAAA,SAAA;;;;cAOtC,+CAAA,EAA+C,CAAA,CAAA,SAAA;;;;;UAQ3C,4CAAA;EAAA,SACP,OAAA;EAAA,SACA,iBAAA;EAAA,SACA,OAAA;EAAA,SACA,UAAA;EAAA,SACA,YAAA;EAAA,SACA,MAAA;AAAA;AAAA,iBAGM,4CAAA,CACf,KAAA,EAAO,4CAAA;AAAA,iBAcQ,qDAAA,CACf,KAAA,EAAO,4CAAA;AAAA,cAcK,gDAAA,EAAgD,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAkBhD,4CAAA,EAA4C,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;cAS5C,kCAAA,EAAkC,CAAA,CAAA,SAAA;;;;;;cAOlC,wCAAA,EAAwC,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;cASxC,4CAAA,EAA4C,CAAA,CAAA,SAAA;;;;;;;;cAS5C,sCAAA,EAAsC,CAAA,CAAA,SAAA;;;;;;;;;;;;;cAStC,qCAAA,EAAqC,CAAA,CAAA,OAAA;;;;;;cAOrC,yCAAA,EAAyC,CAAA,CAAA,OAAA;;;;;;cAOzC,oDAAA,EAAoD,CAAA,CAAA,OAAA;;;;;;;;;cAUpD,0CAAA,EAA0C,CAAA,CAAA,OAAA;;;;;;cAO1C,4CAAA,EAA4C,CAAA,CAAA,OAAA;;;;;;cAe5C,sCAAA,EAAsC,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAuCtC,kCAAA,EAAkC,CAAA,CAAA,SAAA;;;;;;;;;;cASlC,wCAAA,EAAwC,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;cAWxC,yDAAA,EAAyD,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;cASzD,wCAAA,EAAwC,CAAA,CAAA,SAAA;;;;cAOxC,qCAAA,EAAqC,CAAA,CAAA,SAAA;;;;;;;;;cASrC,wDAAA,EAAwD,CAAA,CAAA,SAAA;;;;;;;;;;;;cAOxD,qCAAA,EAAqC,CAAA,CAAA,SAAA;AAAA,cAErC,4CAAA,EAA4C,CAAA,CAAA,SAAA;;;;;;;;;cAQ5C,sDAAA,EAAsD,CAAA,CAAA,SAAA;;;;;;;;;cAQtD,0CAAA,EAA0C,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;cAK1C,0CAAA,EAA0C,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;cAW1C,+BAAA,EAA+B,CAAA,CAAA,SAAA,KAAA,CAAA,CAAA,IAAA,CAAA,OAAA;AAAA,cAE/B,oCAAA,EAAoC,CAAA,CAAA,SAAA;;;;cAOpC,4BAAA,EAA4B,CAAA,CAAA,SAAA;;;;;cAE5B,gCAAA,EAAgC,CAAA,CAAA,OAAA;;;;;;;;;;;cAEhC,mCAAA,EAAmC,CAAA,CAAA,SAAA;;;;;;;cAUnC,iCAAA,EAAiC,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;cAgBjC,oCAAA,EAAoC,CAAA,CAAA,SAAA;;;;;;;;;;;cAUpC,wCAAA,EAAwC,CAAA,CAAA,OAAA;;;;;;;;cASxC,wCAAA,EAAwC,CAAA,CAAA,SAAA;;;;;;;;;cAaxC,0CAAA,EAA0C,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;cAsB1C,0CAAA,EAA0C,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAY1C,mDAAA,EAAmD,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAanD,2CAAA,EAA2C,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA2B3C,8CAAA,EAA8C,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cA2B9C,0DAAA,EAA0D,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAgB1D,qDAAA,EAAqD,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAiBrD,sCAAA,EAAsC,CAAA,CAAA,QAAA,WAAA,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAkEtC,2CAAA,EAA2C,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAU3C,qCAAA,EAAqC,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAoErC,mCAAA,EAAmC,CAAA,CAAA,qBAAA,EAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAanC,sCAAA,EAAsC,CAAA,CAAA,OAAA;;;;cAEtC,6CAAA,EAA6C,CAAA,CAAA,OAAA;;;;;;;;;;;;;;;cAG7C,8BAAA,EAA8B,CAAA,CAAA,QAAA,WAAA,CAAA,CAAA,SAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAO9B,kCAAA;EAAA,SAEkE,SAAA;AAAA;AAAA,cAElE,uCAAA;EAAA;;;;;;;;;;;;;;;;iBAkBG,kCAAA,CACf,QAAA,EAAU,IAAA,CAAK,eAAA,6CACb,qBAAA;AAAA,iBAqBa,0CAAA,CAA2C,QAAA,EAAU,eAAA;AAAA,cASxD,kDAAA;EAAA;;;;;;;;;;;;;;;;KAkBD,0BAAA,GAA6B,CAAA,CAAE,KAAA,QAAa,gCAAA;AAAA,KAC5C,wBAAA,GAA2B,CAAA,CAAE,KAAA,QAAa,8BAAA;AAAA,KAC1C,uCAAA,GACX,oCAAA,CAAqC,wBAAA;AAAA,KAC1B,uCAAA,GACX,oCAAA,CAAqC,wBAAA;AAAA,KAC1B,8BAAA,GAAiC,CAAA,CAAE,KAAA,QAAa,oCAAA;AAAA,KAChD,gCAAA,GAAmC,CAAA,CAAE,KAAA,QACzC,sCAAA;AAAA,KAEI,yCAAA,GAA4C,CAAA,CAAE,KAAA,QAClD,+CAAA;AAAA,KAEI,0CAAA,GAA6C,CAAA,CAAE,KAAA,QACnD,gDAAA;AAAA,KAEI,sCAAA,GAAyC,CAAA,CAAE,KAAA,QAC/C,4CAAA;AAAA,KAEI,4BAAA,GAA+B,CAAA,CAAE,KAAA,QAAa,kCAAA;AAAA,KAC9C,2BAAA,GAA8B,CAAA,CAAE,KAAA,QAAa,iCAAA;AAAA,KAC7C,gCAAA,GAAmC,CAAA,CAAE,KAAA,QACzC,sCAAA;AAAA,KAEI,sCAAA,GAAyC,CAAA,CAAE,KAAA,QAC/C,4CAAA;AAAA,KAEI,8BAAA,GAAiC,CAAA,CAAE,KAAA,QAAa,oCAAA;AAAA,KAChD,kCAAA,GAAqC,CAAA,CAAE,KAAA,QAC3C,wCAAA;AAAA,KAEI,mCAAA,GAAsC,CAAA,CAAE,KAAA,QAC5C,yCAAA;AAAA,KAEI,8BAAA,GAAiC,CAAA,CAAE,KAAA,QAAa,oCAAA;AAAA,KAChD,gCAAA,GAAmC,CAAA,CAAE,KAAA,QACzC,sCAAA;AAAA,KAEI,kCAAA,GAAqC,CAAA,CAAE,KAAA,QAC3C,wCAAA;AAAA,KAEI,mDAAA,GAAsD,CAAA,CAAE,KAAA,QAC5D,yDAAA;AAAA,KAEI,kDAAA,GAAqD,CAAA,CAAE,KAAA,QAC3D,wDAAA;AAAA,KAEI,+BAAA,GAAkC,CAAA,CAAE,KAAA,QAAa,qCAAA;AAAA,iBAE7C,8BAAA,CAAA,GAAkC,QAAA,CAAS,MAAA;AAAA,iBAiB3C,oCAAA,CAAA"}

package/dist/index.js

@@ -0,0 +1,674 @@
+import { ControlCorrelationSchema, ControlRpcErrorSchema, ControlRpcResultBaseSchema, ControlSessionStateSchema, KnownControlDomainSchema } from "@agent-vm/control-protocol-contracts";
+import { z } from "zod/v4";
+//#region src/index.ts
+const GatewayControlDomainSchema = z.literal("gateway_control");
+const GatewayControlRpcOperationSchema = z.enum([
+	"control_ping",
+	"caller_context_register",
+	"lease_create",
+	"lease_get",
+	"lease_peek",
+	"lease_renew",
+	"lease_release",
+	"lease_use_start",
+	"lease_use_heartbeat",
+	"lease_use_end",
+	"health_event",
+	"runtime_status",
+	"tool_portal_controller_host_action",
+	"operation_cancel",
+	"recovery_command"
+]);
+const GatewayControlRpcResultSchema = z.enum([
+	...ControlRpcResultBaseSchema.options,
+	"approval_required",
+	"approval_stale"
+]);
+const GatewayControlForbiddenPayloadFieldSchema = z.enum([
+	"adminToken",
+	"agentId",
+	"approvalProof",
+	"argv",
+	"controllerInstanceId",
+	"cwd",
+	"credentialProfileId",
+	"egressPolicy",
+	"env",
+	"executablePath",
+	"hostWorkMountDir",
+	"profileId",
+	"rawCredentialRef",
+	"retryPolicy",
+	"routeToken",
+	"sessionKey",
+	"sshIdentityPem",
+	"vmGenerationOverride",
+	"workMountDir"
+]);
+const GatewayControlCapabilityRefSchema = z.object({
+	name: z.string().min(1),
+	namespace: z.string().min(1)
+}).strict();
+const GatewayControlToolCallCorrelationSchema = ControlCorrelationSchema.extend({ capability: GatewayControlCapabilityRefSchema.optional() }).strict();
+const GatewayControlTrustedCallerContextIdSchema = z.string().uuid();
+const GatewayControlTrustedLeaseContextSchema = z.object({
+	agentId: z.string().min(1),
+	agentWorkspaceDir: z.string().min(1),
+	approvalScopeId: z.string().min(1).optional(),
+	callerContextId: GatewayControlTrustedCallerContextIdSchema,
+	custodyScopeId: z.string().min(1).optional(),
+	hostWorkMountDir: z.string().min(1),
+	profileId: z.string().min(1),
+	sessionKeyDigest: z.string().min(32),
+	workMountDir: z.string().min(1),
+	zoneId: z.string().min(1)
+}).strict();
+const GatewayControlCallerContextRefSchema = z.object({ callerContextId: GatewayControlTrustedCallerContextIdSchema }).strict();
+const GatewayControlCallerContextProofAlgorithmSchema = z.literal("hmac-sha256");
+const GatewayControlCallerContextProofSchema = z.object({
+	algorithm: GatewayControlCallerContextProofAlgorithmSchema,
+	digest: z.string().min(32)
+}).strict();
+const GatewayControlCallerContextAgentAuthoritySchema = z.object({
+	algorithm: GatewayControlCallerContextProofAlgorithmSchema,
+	digest: z.string().min(32),
+	keyId: z.string().min(1)
+}).strict();
+function buildGatewayControlCallerContextProofPayload(input) {
+	const purpose = input.purpose ?? "tool_vm_lease";
+	return [
+		"gateway-control-caller-context-v1",
+		input.zoneId,
+		input.agentId,
+		input.agentWorkspaceDir,
+		input.workMountDir,
+		input.sessionKey,
+		purpose
+	].join("\0");
+}
+function buildGatewayControlCallerContextAgentAuthorityPayload(input) {
+	const purpose = input.purpose ?? "tool_vm_lease";
+	return [
+		"gateway-control-agent-authority-v1",
+		input.zoneId,
+		input.agentId,
+		input.agentWorkspaceDir,
+		input.workMountDir,
+		input.sessionKey,
+		purpose
+	].join("\0");
+}
+const GatewayControlCallerContextRegisterPayloadSchema = z.object({
+	adapterEvidence: z.object({
+		agentAuthority: GatewayControlCallerContextAgentAuthoritySchema,
+		agentId: z.string().min(1),
+		agentWorkspaceDir: z.string().min(1),
+		proof: GatewayControlCallerContextProofSchema,
+		purpose: z.enum(["tool_vm_lease", "tool_portal_controller_host_action"]).optional(),
+		sessionKey: z.string().min(1),
+		workMountDir: z.string().min(1),
+		zoneId: z.string().min(1)
+	}).strict(),
+	correlation: GatewayControlToolCallCorrelationSchema.optional()
+}).strict();
+const GatewayControlLeaseCreateIntentPayloadSchema = z.object({
+	callerContext: GatewayControlCallerContextRefSchema,
+	correlation: GatewayControlToolCallCorrelationSchema.optional(),
+	gatewayWorkspaceDir: z.string().min(1).optional(),
+	idleTtlHintMs: z.number().int().positive().optional()
+}).strict();
+const GatewayControlLeaseIdPayloadSchema = z.object({
+	callerContext: GatewayControlCallerContextRefSchema,
+	leaseId: z.string().min(1)
+}).strict();
+const GatewayControlLeaseUseStartPayloadSchema = z.object({
+	callerContext: GatewayControlCallerContextRefSchema,
+	correlation: GatewayControlToolCallCorrelationSchema.optional(),
+	leaseId: z.string().min(1),
+	useId: z.string().uuid()
+}).strict();
+const GatewayControlLeaseUseHeartbeatPayloadSchema = z.object({
+	callerContext: GatewayControlCallerContextRefSchema,
+	leaseId: z.string().min(1),
+	observedAtMs: z.number().int().positive().optional(),
+	useId: z.string().uuid()
+}).strict();
+const GatewayControlLeaseUseEndPayloadSchema = z.object({
+	callerContext: GatewayControlCallerContextRefSchema,
+	leaseId: z.string().min(1),
+	reason: z.enum([
+		"completed",
+		"failed",
+		"cancelled",
+		"timed_out"
+	]),
+	useId: z.string().uuid()
+}).strict();
+const GatewayControlHealthEventResultSchema = z.enum([
+	"ok",
+	"failed",
+	"timeout",
+	"degraded"
+]);
+const GatewayControlProviderRuntimeHealthSchema = z.enum([
+	"healthy",
+	"transitioning",
+	"unhealthy_recoverable",
+	"unhealthy_unrecoverable"
+]);
+const GatewayControlControllerRequestHealthOperationSchema = z.enum([
+	"zone-git-push",
+	"lease-create",
+	"lease-get",
+	"lease-peek",
+	"lease-release",
+	"lease-use-start",
+	"lease-use-end"
+]);
+const GatewayControlSessionHealthOperationSchema = z.enum([
+	"control-session-hello",
+	"control-session-heartbeat",
+	"control-session-disconnect",
+	"control-session-reconnect"
+]);
+const GatewayControlToolVmSshHealthOperationSchema = z.enum([
+	"command",
+	"file-bridge",
+	"finalize",
+	"probe"
+]);
+const GatewayControlHealthEventBaseSchema = z.object({
+	correlation: ControlCorrelationSchema.optional(),
+	observedAtMs: z.number().int().positive(),
+	result: GatewayControlHealthEventResultSchema
+}).strict();
+const GatewayControlHealthEventPayloadSchema = z.discriminatedUnion("eventKind", [
+	GatewayControlHealthEventBaseSchema.extend({
+		channelProviderId: z.string().min(1),
+		eventKind: z.literal("agent-channel-provider-health"),
+		providerRuntimeHealth: GatewayControlProviderRuntimeHealthSchema,
+		safeDetails: z.record(z.string(), z.string()).optional()
+	}).strict(),
+	GatewayControlHealthEventBaseSchema.extend({
+		attempt: z.number().int().positive(),
+		elapsedMs: z.number().int().nonnegative(),
+		errorCode: z.string().min(1).optional(),
+		eventKind: z.literal("controller-request"),
+		maxAttempts: z.number().int().positive(),
+		operation: GatewayControlControllerRequestHealthOperationSchema,
+		statusCode: z.number().int().positive().optional()
+	}).strict(),
+	GatewayControlHealthEventBaseSchema.extend({
+		elapsedMs: z.number().int().nonnegative(),
+		eventKind: z.literal("gateway-control-session"),
+		operation: GatewayControlSessionHealthOperationSchema,
+		safeDetails: z.object({ peerId: z.string().min(1) }).catchall(z.string())
+	}).strict(),
+	GatewayControlHealthEventBaseSchema.extend({ eventKind: z.literal("gateway-plugin-health") }).strict(),
+	GatewayControlHealthEventBaseSchema.extend({
+		agentId: z.string().min(1),
+		elapsedMs: z.number().int().nonnegative(),
+		errorCode: z.string().min(1).optional(),
+		leaseId: z.string().min(1),
+		eventKind: z.literal("tool-vm-ssh"),
+		operation: GatewayControlToolVmSshHealthOperationSchema
+	}).strict()
+]);
+const GatewayControlRuntimeFindingSchema = z.object({
+	id: z.string().min(1),
+	ok: z.boolean(),
+	safeMessage: z.string().min(1).optional(),
+	severity: z.enum([
+		"info",
+		"warning",
+		"error"
+	]).optional()
+}).strict();
+const GatewayControlRuntimeStatusPayloadSchema = z.object({
+	findings: z.array(GatewayControlRuntimeFindingSchema),
+	observedAtMs: z.number().int().positive(),
+	providerRuntimeHealth: z.enum([
+		"healthy",
+		"transitioning",
+		"unhealthy_recoverable",
+		"unhealthy_unrecoverable"
+	]).optional(),
+	statusKind: z.string().min(1)
+}).strict();
+const GatewayControlToolPortalControllerHostActionPayloadSchema = z.object({
+	actionId: z.literal("zone_git_push"),
+	callerContext: GatewayControlCallerContextRefSchema,
+	correlation: GatewayControlToolCallCorrelationSchema,
+	expectedHead: z.string().min(1)
+}).strict();
+const GatewayControlZoneGitCommitSummarySchema = z.object({
+	sha: z.string().min(1),
+	subject: z.string()
+}).strict();
+const GatewayControlZoneGitPushResultSchema = z.object({
+	branch: z.string().min(1),
+	localHead: z.string().min(1),
+	pushedCommits: z.array(GatewayControlZoneGitCommitSummarySchema),
+	remoteHead: z.string().min(1)
+}).strict();
+const GatewayControlToolPortalControllerHostActionResultSchema = z.object({
+	actionId: z.literal("zone_git_push"),
+	result: GatewayControlZoneGitPushResultSchema
+}).strict();
+const GatewayControlActiveOperationIdSchema = z.string().uuid();
+const GatewayInitiatedOperationCancelPayloadSchema = z.object({
+	activeOperationId: GatewayControlActiveOperationIdSchema,
+	initiatedBy: z.literal("gateway"),
+	reason: z.enum([
+		"caller_cancelled",
+		"gateway_shutdown",
+		"operation_failed"
+	])
+}).strict();
+const ControllerInitiatedGatewayOperationCancelPayloadSchema = z.object({
+	activeOperationId: GatewayControlActiveOperationIdSchema,
+	initiatedBy: z.literal("controller"),
+	reason: z.enum([
+		"controller_recovery",
+		"operator_cancelled",
+		"timeout"
+	])
+}).strict();
+const GatewayControlOperationCancelPayloadSchema = z.discriminatedUnion("initiatedBy", [GatewayInitiatedOperationCancelPayloadSchema, ControllerInitiatedGatewayOperationCancelPayloadSchema]);
+const GatewayControlRecoveryCommandPayloadSchema = z.discriminatedUnion("action", [
+	z.object({ action: z.literal("refresh_runtime_status") }).strict(),
+	z.object({ action: z.literal("restart_control_service") }).strict(),
+	z.object({
+		action: z.literal("close_stale_session"),
+		targetSessionId: z.string().uuid()
+	}).strict()
+]);
+const GatewayControlPingPayloadSchema = z.object({}).strict();
+const GatewayControlHeartbeatPayloadSchema = z.object({
+	elapsedMs: z.number().int().nonnegative().optional(),
+	observedAtMs: z.number().int().positive()
+}).strict();
+const GatewayControlRpcErrorSchema = ControlRpcErrorSchema;
+const GatewayControlSessionStateSchema = ControlSessionStateSchema;
+const GatewayControlToolVmSshAccessSchema = z.object({
+	host: z.string().min(1),
+	identityPem: z.string().min(1).optional(),
+	knownHostsLine: z.string().optional(),
+	port: z.number().int().positive(),
+	user: z.string().min(1)
+}).strict();
+const GatewayControlLeaseSnapshotSchema = z.object({
+	agentId: z.string().min(1),
+	activeUseId: z.string().uuid().optional(),
+	expiresAtMs: z.number().int().positive().optional(),
+	idleTtlMs: z.number().int().positive(),
+	leaseId: z.string().min(1),
+	ssh: GatewayControlToolVmSshAccessSchema.optional(),
+	state: z.enum([
+		"idle",
+		"active",
+		"expired",
+		"released"
+	]),
+	tcpSlot: z.number().int().nonnegative(),
+	transport: z.literal("ssh-sandbox"),
+	workdir: z.string().min(1),
+	zoneId: z.string().min(1)
+}).strict();
+const GatewayControlLeaseUseSnapshotSchema = z.object({
+	expiresAt: z.number().int().positive().optional(),
+	heartbeatAfterMs: z.number().int().positive().optional(),
+	leaseId: z.string().min(1),
+	state: z.enum([
+		"active",
+		"ended",
+		"expired"
+	]),
+	useId: z.string().uuid()
+}).strict();
+const GatewayControlLeaseRejectionReasonSchema = z.enum([
+	"absent",
+	"generation_stale",
+	"force_released",
+	"releasing",
+	"use_tombstoned",
+	"runtime_not_ready"
+]);
+const GatewayControlRpcDomainCorrelationSchema = ControlCorrelationSchema;
+const GatewayControlRpcForbiddenResponseFieldsSchema = {
+	activeOperationId: z.never().optional(),
+	approvalRequired: z.never().optional(),
+	callerContext: z.never().optional(),
+	controllerHostAction: z.never().optional(),
+	error: z.never().optional(),
+	lease: z.never().optional(),
+	leaseRejectionReason: z.never().optional(),
+	leaseUse: z.never().optional()
+};
+const GatewayControlRpcResponseBasePayloadSchema = z.object({
+	...GatewayControlRpcForbiddenResponseFieldsSchema,
+	responseToMessageId: z.string().uuid(),
+	result: GatewayControlRpcResultSchema
+});
+const GatewayControlRpcErrorResponseResultSchema = z.enum([
+	"failed",
+	"timeout",
+	"rejected",
+	"cancelled",
+	"stale_generation",
+	"approval_required",
+	"approval_stale"
+]);
+const GatewayControlRpcResponseCorrelationSchema = z.object({ responseToMessageId: z.string().uuid() }).strict();
+const GatewayControlRpcBareResponsePayloadSchema = z.discriminatedUnion("result", [GatewayControlRpcResponseCorrelationSchema.extend({
+	...GatewayControlRpcForbiddenResponseFieldsSchema,
+	result: z.literal("ok")
+}).strict(), GatewayControlRpcResponseCorrelationSchema.extend({
+	...GatewayControlRpcForbiddenResponseFieldsSchema,
+	error: GatewayControlRpcErrorSchema,
+	result: GatewayControlRpcErrorResponseResultSchema
+}).strict()]);
+const GatewayControlRpcCallerContextResponsePayloadSchema = z.discriminatedUnion("result", [GatewayControlRpcResponseCorrelationSchema.extend({
+	...GatewayControlRpcForbiddenResponseFieldsSchema,
+	callerContext: GatewayControlCallerContextRefSchema,
+	result: z.literal("ok")
+}).strict(), GatewayControlRpcResponseCorrelationSchema.extend({
+	...GatewayControlRpcForbiddenResponseFieldsSchema,
+	error: GatewayControlRpcErrorSchema,
+	result: GatewayControlRpcErrorResponseResultSchema
+}).strict()]);
+const GatewayControlRpcLeaseResponsePayloadSchema = z.discriminatedUnion("result", [
+	GatewayControlRpcResponseCorrelationSchema.extend({
+		...GatewayControlRpcForbiddenResponseFieldsSchema,
+		lease: GatewayControlLeaseSnapshotSchema,
+		result: z.literal("ok")
+	}).strict(),
+	GatewayControlRpcResponseCorrelationSchema.extend({
+		...GatewayControlRpcForbiddenResponseFieldsSchema,
+		error: GatewayControlRpcErrorSchema.optional(),
+		leaseRejectionReason: GatewayControlLeaseRejectionReasonSchema,
+		result: z.literal("rejected")
+	}).strict(),
+	GatewayControlRpcResponseCorrelationSchema.extend({
+		...GatewayControlRpcForbiddenResponseFieldsSchema,
+		error: GatewayControlRpcErrorSchema,
+		leaseRejectionReason: GatewayControlLeaseRejectionReasonSchema.optional(),
+		result: z.enum([
+			"failed",
+			"timeout",
+			"cancelled",
+			"stale_generation",
+			"approval_required",
+			"approval_stale"
+		])
+	}).strict()
+]);
+const GatewayControlRpcLeaseUseResponsePayloadSchema = z.discriminatedUnion("result", [
+	GatewayControlRpcResponseCorrelationSchema.extend({
+		...GatewayControlRpcForbiddenResponseFieldsSchema,
+		leaseUse: GatewayControlLeaseUseSnapshotSchema,
+		result: z.literal("ok")
+	}).strict(),
+	GatewayControlRpcResponseCorrelationSchema.extend({
+		...GatewayControlRpcForbiddenResponseFieldsSchema,
+		error: GatewayControlRpcErrorSchema.optional(),
+		leaseRejectionReason: GatewayControlLeaseRejectionReasonSchema,
+		result: z.literal("rejected")
+	}).strict(),
+	GatewayControlRpcResponseCorrelationSchema.extend({
+		...GatewayControlRpcForbiddenResponseFieldsSchema,
+		error: GatewayControlRpcErrorSchema,
+		leaseRejectionReason: GatewayControlLeaseRejectionReasonSchema.optional(),
+		result: z.enum([
+			"failed",
+			"timeout",
+			"cancelled",
+			"stale_generation",
+			"approval_required",
+			"approval_stale"
+		])
+	}).strict()
+]);
+const GatewayControlRpcControllerHostActionResponsePayloadSchema = z.discriminatedUnion("result", [GatewayControlRpcResponseCorrelationSchema.extend({
+	...GatewayControlRpcForbiddenResponseFieldsSchema,
+	controllerHostAction: GatewayControlToolPortalControllerHostActionResultSchema,
+	result: z.literal("ok")
+}).strict(), GatewayControlRpcResponseCorrelationSchema.extend({
+	...GatewayControlRpcForbiddenResponseFieldsSchema,
+	error: GatewayControlRpcErrorSchema,
+	result: GatewayControlRpcErrorResponseResultSchema
+}).strict()]);
+const GatewayControlRpcOperationCancelResponsePayloadSchema = z.discriminatedUnion("result", [GatewayControlRpcResponseCorrelationSchema.extend({
+	...GatewayControlRpcForbiddenResponseFieldsSchema,
+	activeOperationId: GatewayControlActiveOperationIdSchema,
+	result: z.literal("ok")
+}).strict(), GatewayControlRpcResponseCorrelationSchema.extend({
+	...GatewayControlRpcForbiddenResponseFieldsSchema,
+	activeOperationId: GatewayControlActiveOperationIdSchema.optional(),
+	error: GatewayControlRpcErrorSchema,
+	result: GatewayControlRpcErrorResponseResultSchema
+}).strict()]);
+const GatewayControlRpcResponsePayloadSchema = z.union([
+	GatewayControlRpcBareResponsePayloadSchema,
+	GatewayControlRpcCallerContextResponsePayloadSchema,
+	GatewayControlRpcLeaseResponsePayloadSchema,
+	GatewayControlRpcLeaseUseResponsePayloadSchema,
+	GatewayControlRpcControllerHostActionResponsePayloadSchema,
+	GatewayControlRpcOperationCancelResponsePayloadSchema
+]);
+const GatewayControlRpcControlPingCommandResultMessageSchema = GatewayControlRpcDomainCorrelationSchema.extend({
+	kind: z.literal("command_result"),
+	operation: z.literal("control_ping"),
+	payload: GatewayControlRpcBareResponsePayloadSchema
+}).strict();
+const GatewayControlRpcCallerContextRegisterCommandResultMessageSchema = GatewayControlRpcDomainCorrelationSchema.extend({
+	kind: z.literal("command_result"),
+	operation: z.literal("caller_context_register"),
+	payload: GatewayControlRpcCallerContextResponsePayloadSchema
+}).strict();
+const GatewayControlRpcLeaseCommandResultMessageSchema = GatewayControlRpcDomainCorrelationSchema.extend({
+	kind: z.literal("command_result"),
+	operation: z.enum([
+		"lease_create",
+		"lease_get",
+		"lease_peek",
+		"lease_renew",
+		"lease_release"
+	]),
+	payload: GatewayControlRpcLeaseResponsePayloadSchema
+}).strict();
+const GatewayControlRpcLeaseUseCommandResultMessageSchema = GatewayControlRpcDomainCorrelationSchema.extend({
+	kind: z.literal("command_result"),
+	operation: z.enum([
+		"lease_use_start",
+		"lease_use_heartbeat",
+		"lease_use_end"
+	]),
+	payload: GatewayControlRpcLeaseUseResponsePayloadSchema
+}).strict();
+const GatewayControlRpcControllerHostActionCommandResultMessageSchema = GatewayControlRpcDomainCorrelationSchema.extend({
+	kind: z.literal("command_result"),
+	operation: z.literal("tool_portal_controller_host_action"),
+	payload: GatewayControlRpcControllerHostActionResponsePayloadSchema
+}).strict();
+const GatewayControlRpcOperationCancelCommandResultMessageSchema = GatewayControlRpcDomainCorrelationSchema.extend({
+	kind: z.literal("command_result"),
+	operation: z.literal("operation_cancel"),
+	payload: GatewayControlRpcOperationCancelResponsePayloadSchema
+}).strict();
+const GatewayControlRpcRecoveryCommandResultMessageSchema = GatewayControlRpcDomainCorrelationSchema.extend({
+	kind: z.literal("command_result"),
+	operation: z.literal("recovery_command"),
+	payload: GatewayControlRpcBareResponsePayloadSchema
+}).strict();
+const GatewayControlHeartbeatMessageSchema = z.object({
+	kind: z.literal("heartbeat"),
+	operation: z.never().optional(),
+	payload: GatewayControlHeartbeatPayloadSchema
+}).strict();
+const GatewayControlRpcCommandResultMessageSchema = z.discriminatedUnion("operation", [
+	GatewayControlRpcControlPingCommandResultMessageSchema,
+	GatewayControlRpcCallerContextRegisterCommandResultMessageSchema,
+	GatewayControlRpcLeaseCommandResultMessageSchema,
+	GatewayControlRpcLeaseUseCommandResultMessageSchema,
+	GatewayControlRpcControllerHostActionCommandResultMessageSchema,
+	GatewayControlRpcOperationCancelCommandResultMessageSchema,
+	GatewayControlRpcRecoveryCommandResultMessageSchema
+]);
+const GatewayControlRpcCommandMessageSchema = z.discriminatedUnion("operation", [
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("control_ping"),
+		payload: GatewayControlPingPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("caller_context_register"),
+		payload: GatewayControlCallerContextRegisterPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("lease_create"),
+		payload: GatewayControlLeaseCreateIntentPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("lease_get"),
+		payload: GatewayControlLeaseIdPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("lease_peek"),
+		payload: GatewayControlLeaseIdPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("lease_renew"),
+		payload: GatewayControlLeaseIdPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("lease_release"),
+		payload: GatewayControlLeaseIdPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("lease_use_start"),
+		payload: GatewayControlLeaseUseStartPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("lease_use_heartbeat"),
+		payload: GatewayControlLeaseUseHeartbeatPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("lease_use_end"),
+		payload: GatewayControlLeaseUseEndPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("tool_portal_controller_host_action"),
+		payload: GatewayControlToolPortalControllerHostActionPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("operation_cancel"),
+		payload: GatewayControlOperationCancelPayloadSchema
+	}).strict(),
+	GatewayControlRpcDomainCorrelationSchema.extend({
+		kind: z.literal("command"),
+		operation: z.literal("recovery_command"),
+		payload: GatewayControlRecoveryCommandPayloadSchema
+	}).strict()
+]);
+const GatewayControlRpcEventMessageSchema = z.discriminatedUnion("operation", [GatewayControlRpcDomainCorrelationSchema.extend({
+	kind: z.literal("event"),
+	operation: z.literal("health_event"),
+	payload: GatewayControlHealthEventPayloadSchema
+}).strict(), GatewayControlRpcDomainCorrelationSchema.extend({
+	kind: z.literal("event"),
+	operation: z.literal("runtime_status"),
+	payload: GatewayControlRuntimeStatusPayloadSchema
+}).strict()]);
+const GatewayControlEventOnlyOperationSchema = z.enum(["health_event", "runtime_status"]);
+const GatewayControlRpcCommandResultOperationSchema = GatewayControlRpcOperationSchema.exclude(GatewayControlEventOnlyOperationSchema.options);
+const GatewayControlRpcMessageSchema = z.union([
+	GatewayControlHeartbeatMessageSchema,
+	GatewayControlRpcCommandMessageSchema,
+	GatewayControlRpcEventMessageSchema,
+	GatewayControlRpcCommandResultMessageSchema
+]);
+const gatewayControlDeliveryPolicyByKind = { heartbeat: "critical_idempotent" };
+const gatewayControlDeliveryPolicyByOperation = {
+	caller_context_register: "critical_idempotent",
+	control_ping: "acked_idempotent",
+	health_event: "append_only_observation",
+	lease_create: "critical_idempotent",
+	lease_get: "acked_idempotent",
+	lease_peek: "acked_idempotent",
+	lease_release: "acked_idempotent",
+	lease_renew: "single_use_critical",
+	lease_use_end: "acked_idempotent",
+	lease_use_heartbeat: "single_use_critical",
+	lease_use_start: "critical_idempotent",
+	operation_cancel: "acked_idempotent",
+	recovery_command: "critical_idempotent",
+	runtime_status: "latest_wins",
+	tool_portal_controller_host_action: "single_use_critical"
+};
+function deriveGatewayControlDeliveryPolicy(envelope) {
+	if (envelope.operation === "lease_create" && envelope.idempotencyKey === void 0) return "single_use_critical";
+	const parsedOperation = GatewayControlRpcOperationSchema.safeParse(envelope.operation);
+	if (parsedOperation.success) {
+		const operationPolicy = gatewayControlDeliveryPolicyByOperation[parsedOperation.data];
+		if (operationPolicy !== void 0) return operationPolicy;
+	}
+	const kindPolicy = envelope.kind === "heartbeat" ? gatewayControlDeliveryPolicyByKind.heartbeat : void 0;
+	if (kindPolicy !== void 0) return kindPolicy;
+	throw new Error(`no gateway control delivery policy for ${envelope.kind}:${envelope.operation ?? "<none>"}`);
+}
+function assertGatewayControlEnvelopeDeliveryPolicy(envelope) {
+	const derivedPolicy = deriveGatewayControlDeliveryPolicy(envelope);
+	if (envelope.deliveryPolicy !== derivedPolicy) throw new Error(`control delivery policy mismatch: ${envelope.deliveryPolicy} !== ${derivedPolicy}`);
+}
+const gatewayControlCommandExecutionTimeoutMsByOperation = {
+	caller_context_register: 5e3,
+	control_ping: 5e3,
+	health_event: 5e3,
+	lease_create: 18e4,
+	lease_get: 5e3,
+	lease_peek: 5e3,
+	lease_release: 5e3,
+	lease_renew: 1e4,
+	lease_use_end: 5e3,
+	lease_use_heartbeat: 5e3,
+	lease_use_start: 1e4,
+	operation_cancel: 5e3,
+	recovery_command: 1e4,
+	runtime_status: 5e3,
+	tool_portal_controller_host_action: 12e4
+};
+function buildGatewayControlJsonSchemas() {
+	return {
+		domain: z.toJSONSchema(GatewayControlDomainSchema, {
+			io: "input",
+			unrepresentable: "any"
+		}),
+		message: z.toJSONSchema(GatewayControlRpcMessageSchema, {
+			io: "input",
+			unrepresentable: "any"
+		}),
+		operation: z.toJSONSchema(GatewayControlRpcOperationSchema, {
+			io: "input",
+			unrepresentable: "any"
+		})
+	};
+}
+function assertGatewayControlDomainRegistered() {
+	return KnownControlDomainSchema.extract(["gateway_control"]).parse("gateway_control");
+}
+//#endregion
+export { ControllerInitiatedGatewayOperationCancelPayloadSchema, GatewayControlActiveOperationIdSchema, GatewayControlCallerContextAgentAuthoritySchema, GatewayControlCallerContextProofAlgorithmSchema, GatewayControlCallerContextProofSchema, GatewayControlCallerContextRefSchema, GatewayControlCallerContextRegisterPayloadSchema, GatewayControlCapabilityRefSchema, GatewayControlControllerRequestHealthOperationSchema, GatewayControlDomainSchema, GatewayControlEventOnlyOperationSchema, GatewayControlForbiddenPayloadFieldSchema, GatewayControlHealthEventPayloadSchema, GatewayControlHealthEventResultSchema, GatewayControlHeartbeatPayloadSchema, GatewayControlLeaseCreateIntentPayloadSchema, GatewayControlLeaseIdPayloadSchema, GatewayControlLeaseRejectionReasonSchema, GatewayControlLeaseSnapshotSchema, GatewayControlLeaseUseEndPayloadSchema, GatewayControlLeaseUseHeartbeatPayloadSchema, GatewayControlLeaseUseSnapshotSchema, GatewayControlLeaseUseStartPayloadSchema, GatewayControlOperationCancelPayloadSchema, GatewayControlPingPayloadSchema, GatewayControlProviderRuntimeHealthSchema, GatewayControlRecoveryCommandPayloadSchema, GatewayControlRpcBareResponsePayloadSchema, GatewayControlRpcCallerContextResponsePayloadSchema, GatewayControlRpcCommandMessageSchema, GatewayControlRpcCommandResultMessageSchema, GatewayControlRpcCommandResultOperationSchema, GatewayControlRpcControllerHostActionResponsePayloadSchema, GatewayControlRpcDomainCorrelationSchema, GatewayControlRpcErrorSchema, GatewayControlRpcEventMessageSchema, GatewayControlRpcLeaseResponsePayloadSchema, GatewayControlRpcLeaseUseResponsePayloadSchema, GatewayControlRpcMessageSchema, GatewayControlRpcOperationCancelResponsePayloadSchema, GatewayControlRpcOperationSchema, GatewayControlRpcResponseBasePayloadSchema, GatewayControlRpcResponsePayloadSchema, GatewayControlRpcResultSchema, GatewayControlRuntimeFindingSchema, GatewayControlRuntimeStatusPayloadSchema, GatewayControlSessionHealthOperationSchema, GatewayControlSessionStateSchema, GatewayControlToolCallCorrelationSchema, GatewayControlToolPortalControllerHostActionPayloadSchema, GatewayControlToolPortalControllerHostActionResultSchema, GatewayControlToolVmSshAccessSchema, GatewayControlToolVmSshHealthOperationSchema, GatewayControlTrustedCallerContextIdSchema, GatewayControlTrustedLeaseContextSchema, GatewayControlZoneGitCommitSummarySchema, GatewayControlZoneGitPushResultSchema, GatewayInitiatedOperationCancelPayloadSchema, assertGatewayControlDomainRegistered, assertGatewayControlEnvelopeDeliveryPolicy, buildGatewayControlCallerContextAgentAuthorityPayload, buildGatewayControlCallerContextProofPayload, buildGatewayControlJsonSchemas, deriveGatewayControlDeliveryPolicy, gatewayControlCommandExecutionTimeoutMsByOperation, gatewayControlDeliveryPolicyByKind, gatewayControlDeliveryPolicyByOperation };
+
+//# sourceMappingURL=index.js.map