@agimon-ai/po-core 0.0.0-alpha.123 → 0.0.0-alpha.124

package/README.md

@@ -4,6 +4,12 @@ Reusable runtime logic for Po packages. Main and child systems own session lifec
 
 The `po` package composes these capabilities into the CLI and distribution. Feature packages own their policies and depend on core.
 
+## Workflow allocation contracts
+
+`@agimon-ai/po-core/workflow` exports strict schemas for per-launch role assignments, effective-graph requirements, safe profile candidates, versioned allocation snapshots and expected provider identity. `validatePoWorkflowAssignments` checks exact role coverage and same-profile role groups; `parsePoWorkflowAllocation` verifies and detaches saved evidence. Neither function grants authorization or proves remote freshness.
+
+Allocation-aware runtimes require the workspace-bound identity service's `discover`, `allocate` and `revalidateAllocation` capabilities. These are optional only for compatibility with older providers: missing capabilities must block allocation-aware launches, not fall back to teams, default mailboxes or the launcher's profile. Core contracts alone do not implement runtime enforcement.
+
 ## Workspace registry
 
 Hosts bind the read-only `po/workspace-registry` Cordis service before serving plugins. Its public

package/dist/apiContracts.d.mts

@@ -546,6 +546,106 @@ declare const PoWorkflowRunRefSchema: Type.TObject<{
   registryWorkspace: Type.TString;
 }>;
 type PoWorkflowRunRef = Static<typeof PoWorkflowRunRefSchema>;
+/** Derived from the effective graph. revision identifies the parsed definition, never a mutable path alone. */
+declare const PoWorkflowIdentityRequirementsSchema: Type.TObject<{
+  definition: Type.TObject<{
+    source: Type.TString;
+    key: Type.TString;
+  }>;
+  revision: Type.TString;
+  roles: Type.TArray<Type.TString>;
+  groups: Type.TArray<Type.TObject<{
+    kind: Type.TUnion<[Type.TLiteral<"job">, Type.TLiteral<"child">, Type.TLiteral<"repair">]>;
+    job: Type.TString;
+    roles: Type.TArray<Type.TString>;
+  }>>;
+}>;
+type PoWorkflowIdentityRequirements = Static<typeof PoWorkflowIdentityRequirementsSchema>;
+declare const PoWorkflowAssignmentsSchema: Type.TRecord<"^.*$", Type.TString>;
+type PoWorkflowAssignments = Static<typeof PoWorkflowAssignmentsSchema>;
+declare const PoWorkflowIdentityDiscoverySchema: Type.TObject<{
+  scope: Type.TObject<{
+    workspaceId: Type.TString;
+    product: Type.TString;
+    revision: Type.TString;
+  }>;
+  candidates: Type.TArray<Type.TObject<{
+    ref: Type.TString;
+    label: Type.TString;
+    roles: Type.TArray<Type.TString>;
+    voiceConfigured: Type.TBoolean;
+  }>>;
+}>;
+type PoWorkflowIdentityDiscovery = Static<typeof PoWorkflowIdentityDiscoverySchema>;
+/** Persisted before effects. Profiles contain exact admitted evidence, never secrets or an implicit team selection. */
+declare const PoWorkflowAllocationSchema: Type.TObject<{
+  version: Type.TLiteral<1>;
+  requirements: Type.TObject<{
+    definition: Type.TObject<{
+      source: Type.TString;
+      key: Type.TString;
+    }>;
+    revision: Type.TString;
+    roles: Type.TArray<Type.TString>;
+    groups: Type.TArray<Type.TObject<{
+      kind: Type.TUnion<[Type.TLiteral<"job">, Type.TLiteral<"child">, Type.TLiteral<"repair">]>;
+      job: Type.TString;
+      roles: Type.TArray<Type.TString>;
+    }>>;
+  }>;
+  scope: Type.TObject<{
+    workspaceId: Type.TString;
+    product: Type.TString;
+    revision: Type.TString;
+  }>;
+  assignments: Type.TRecord<"^.*$", Type.TString>;
+  profiles: Type.TArray<Type.TObject<{
+    ref: Type.TString;
+    profile: Type.TString;
+    contentDigest: Type.TString;
+    policyDigest: Type.TString;
+    provider: Type.TObject<{
+      provider: Type.TString;
+      organizationId: Type.TString;
+      mailboxId: Type.TString;
+      credentialRef: Type.TString;
+    }>;
+  }>>;
+}>;
+type PoWorkflowAllocation = Static<typeof PoWorkflowAllocationSchema>;
+/** Step bootstrap only. An allocation-owned role-less session explicitly has no profile. */
+declare const PoWorkflowExpectedIdentitySchema: Type.TUnion<[Type.TObject<{
+  kind: Type.TLiteral<"none">;
+}>, Type.TObject<{
+  ref: Type.TString;
+  profile: Type.TString;
+  contentDigest: Type.TString;
+  policyDigest: Type.TString;
+  provider: Type.TObject<{
+    provider: Type.TString;
+    organizationId: Type.TString;
+    mailboxId: Type.TString;
+    credentialRef: Type.TString;
+  }>;
+  kind: Type.TLiteral<"profile">;
+  scope: Type.TObject<{
+    workspaceId: Type.TString;
+    product: Type.TString;
+    revision: Type.TString;
+  }>;
+  definitionRevision: Type.TString;
+  roles: Type.TArray<Type.TString>;
+}>]>;
+type PoWorkflowExpectedIdentity = Static<typeof PoWorkflowExpectedIdentitySchema>;
+/** Read-only effective-graph requirements and provider discovery. identity is absent only for role-less graphs. */
+interface PoWorkflowRequirementsReport {
+  readonly requirements: PoWorkflowIdentityRequirements;
+  readonly identity?: PoWorkflowIdentityDiscovery;
+}
+interface PoWorkflowAllocationRequest {
+  readonly requirements: PoWorkflowIdentityRequirements;
+  readonly assignments: Readonly<PoWorkflowAssignments>;
+}
 interface PoWorkflowLaunchOverrides {
   readonly runner?: string;
   readonly command?: string;
@@ -557,7 +657,9 @@ interface PoWorkflowLaunchOverrides {
   readonly name?: string;
   /** Name for a newly created workflow session, not the run or an existing owner session. */
   readonly sessionName?: string;
-  /** Team whose members role-bound jobs resolve to, instead of the workflow's default team. */
+  /** Exact per-launch role assignments. Teams, defaults and local profile names cannot fill missing assignments. */
+  readonly assignments?: Readonly<PoWorkflowAssignments>;
+  /** Legacy team override only. Never a substitute for explicit allocation. */
   readonly team?: string;
 }
 /** Session-owned. Rejection means no observable registration was accepted. */
@@ -620,6 +722,8 @@ interface PoWorkflowPolicyOptions {
 }
 interface PoWorkflowAdmissionOverrides extends PoWorkflowLaunchOverrides {
   readonly policy?: PoWorkflowPolicyAssociation;
+  /** Frozen preparation evidence. The destination revalidates it exactly, never treats it as authorization. */
+  readonly allocation?: PoWorkflowAllocation;
   /**
    * Run the workflow as this same-workspace session instead of the caller, for example a session in an
    * isolated checkout. Trusted in-process launchers only: never accepted from tools, code mode or HTTP.
@@ -656,6 +760,8 @@ interface PoWorkflowValidationReport {
   }[];
   /** Declared by the definition and reported only: the engine never provisions a checkout itself. */
   readonly isolation?: 'checkout';
+  /** Trusted preparation evidence only. Ordinary namespace reports omit provider bindings. */
+  readonly allocation?: PoWorkflowAllocation;
 }
 type PoWorkflowAdmission = {
   readonly attemptId: string;
@@ -676,6 +782,8 @@ type PoWorkflowAdmission = {
 };
 /** Trusted, session-bound opt-in capability, never exposed as a tool or code-mode namespace. */
 interface PoWorkflowAdmissionsService {
+  /** Discovery precedes assignment and creates no admission journal, claims or workflow effects. */
+  requirements?(definition: PoWorkflowDefinitionRef, options?: Pick<PoWorkflowLaunchOverrides, 'job'>): Promise<PoWorkflowRequirementsReport>;
   validate(request: PoWorkflowAdmissionRequest): Promise<PoWorkflowValidationReport>;
   launch(attemptId: string, definition: PoWorkflowDefinitionRef, overrides?: PoWorkflowAdmissionOverrides): Promise<PoWorkflowAdmission>;
   recover(attemptId: string, previousRun: PoWorkflowRunRef, options?: PoWorkflowRecoveryOptions): Promise<PoWorkflowAdmission>;
@@ -817,6 +925,10 @@ interface PoWorkflowContextService {
   readonly instructions?: string;
   readonly state: PoWorkflowRunsService;
   readonly children?: PoWorkflowChildrenSession;
+  /** Trusted startup evidence, not a remote session-create field. */
+  readonly identity?: PoWorkflowExpectedIdentity;
+  /** Frozen run evidence for trusted child admission. Never read from environment or public config views. */
+  readonly allocation?: PoWorkflowAllocation;
 }
 interface PoWorkflowIdentityRequest {
   readonly team: string;
@@ -836,15 +948,26 @@ interface PoWorkflowIdentityBinding {
   readonly policyDigest: string;
 }
 /**
- * Resolves role-bound workflow jobs to team members. Bound per workspace by the package that owns
- * profiles and teams; the workspace comes from that scope, never from workflow input. Both calls
- * throw, without naming secrets, when no single authorized member qualifies.
+ * Workspace-bound identity capability. New role-bound launches require the allocation methods;
+ * an older provider missing them must fail closed rather than falling back to legacy teams.
+ * Fresh admission narrows existing authorization and never grants credentials or changes the caller's profile.
  */
 interface PoWorkflowIdentityService {
+  /** Ordinary read-only discovery, available without Help or a selected profile. */
+  discover?(requirements: PoWorkflowIdentityRequirements): Promise<PoWorkflowIdentityDiscovery>;
+  /** Refreshes eligibility and admits exactly the requested references in the provider's trusted product scope. */
+  allocate?(request: PoWorkflowAllocationRequest): Promise<PoWorkflowAllocation>;
+  /** Revalidates exact persisted evidence; any change blocks instead of substituting profiles or digests. */
+  revalidateAllocation?(allocation: PoWorkflowAllocation): Promise<PoWorkflowAllocation>;
+  /** Legacy team-based admission, not used by allocation-aware launches. */
   resolve(request: PoWorkflowIdentityRequest): Promise<PoWorkflowIdentityBinding>;
   /** Rechecks a saved binding against the current team and authorization, returning it as it stands now. */
   revalidate(binding: PoWorkflowIdentityBinding): Promise<PoWorkflowIdentityBinding>;
 }
+/** Required profile-version admission for allocation-owned prompts. Only the profile package supplies it. */
+interface PoWorkflowProfileAdmissionService {
+  assertReady(expected: PoWorkflowExpectedIdentity): Promise<void>;
+}
 declare module '@deepseek-ai/cordis' {
   interface Context {
     'po/workflow-launch': PoWorkflowLaunchService;
@@ -853,6 +976,7 @@ declare module '@deepseek-ai/cordis' {
     'po/workflow-context': PoWorkflowContextService;
     'po/workflow-admissions': PoWorkflowAdmissionsService;
     'po/workflow-identity': PoWorkflowIdentityService;
+    'po/workflow-profile-admission': PoWorkflowProfileAdmissionService;
   }
 }
 //#endregion

package/dist/apiContracts.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apiContracts.d.mts","names":["_0","_0","_0","_0","IoContext","_0","_$__hubChannel0.PoHubSessionUsage","_0","_$__protocolContracts0.ChordMethods"],"sources":["../src/schemas/serverBundle.ts","../src/schemas/brain.ts","../src/schemas/serverScope.ts","../src/schemas/approvalPrompt.ts","../src/schemas/approval.ts","../src/schemas/backgroundWork.ts","../src/schemas/notification.ts","../src/schemas/platform.ts","../src/schemas/workflow.ts","../src/schemas/hubChannel.ts","../src/schemas/packageApi.ts","../src/schemas/apiContracts.ts","../src/services/apiContracts/index.ts","../src/schemas/builtinApiContracts.ts","../src/schemas/httpApiContracts.ts","../src/schemas/protocolContracts.ts","../src/schemas/sessionProtocol.ts","../src/schemas/sessionApiContracts.ts","../src/schemas/transportApiContracts.ts"],"mappings":";;;;;;;;;;;;UAKiB;WACN;WACA;;UAGM;WACN;;WAEA;;WAEA,cAAc;;WAEd,iBAAiB;;WAEjB,cAAc;;WAEd;;WAEA;WACA,iBAAiB;WACjB,iBAAiB;WACjB;;;;;UCtBM;EACf;EACA,OAAO;;UAGQ;EACf;EACA;EACA,QAAQ,YAAY;;UAGL;EACf;EACA;EACA,OAAO;EACP,aAAa;EACb,OAAO;EACP;EACA;;UAGe;EACf;EACA;EACA,OAAO;EACP,OAAO;;;UAIQ;EACf;EACA;EACA;EACA;;UAGe;EACf,OAAO;EACP,OAAO;EACP,KAAK;;EAEL,SAAS;;UAGM;EACf,OAAO;EACP,QAAQ;EACR,UAAU;;EAEV,iBAAiB;EACjB,UAAU;EACV,WAAW;EACX,OAAO;EACP;;;UA+Be;EACf;EACA;IACE;IACA,OAAO;IACP;IACA;IACA;;EAEF;IACE;IACA;IACA,OAAO;IACP;;EAEF;;;;;UCrFe,kBAAkB;WACxB;WACA,OAAO;;WAEP;;WAEA,QAAQ;;;KAeP;;UAoBK,sBAAsB;WAC5B,OAAO;EAChB,WAAW;;;UAII,oBAAoB;EACnC,QAAQ,GACN,KAAK,qBACL,cAAc,IAAI,QAAQ,IAC1B,WAAW,OAAO,aAAa,gBAC9B,QAAQ,sBAAsB;;EAEjC,IAAI,OAAO;;EAEX,MAAM,MAAM,sBAAsB;;;UA0BnB;WACN,OAAO;;EAEhB,YAAY;;;;;;EAMZ,QAAQ,GAAG,UAAU,kBAAkB,IAAI,OAAO,IAAI,cAAc;;EAEpE,QAAQ,GAAG,UAAU,kBAAkB,KAAK;;EAE5C,KAAK,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEjE,UAAU,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEtE,OAAO,QAAQ,gBAAgB,oBAAoB;;;YAIzC;IACR,mBAAmB;;;;;;UC1GN;WACN;WACA;WACA;aAA8B;aAAwB;;;UAGhD;WACN;;WAEA;;;;UCSM;WACN;;WAEA;WACA,WAAW;WACX;WACA,aAAa;;WAEb;;WAEA;;UAKM;WACN;WACA,WAAW;;WAEX;WACA;;;KAIC,sBAAsB,MAAM,gBAAgB,QAAQ,gBAAgB;;;;;UAM/D;EACf,OAAO,SAAS,oBAAoB;aAAmB;;EACvD,iBAAiB,MAAM,6BAA6B,KAAK;;;YAS/C;IACR,eAAe;;;;;cCjEN,kCAAgC,KAAA;;;;;;KASjC,6BAA6B,cAAc;cAE1C,0BAAwB,KAAA;;;;;;;KAIzB,qBAAqB,cAAc;UAwB9B;WACN;;;;;;EAMT,2BAA2B;;UAGZ;WACN;WACA;;EAET;EACA;;UAGe;WACN,gBAAgB;WAChB;aAA4B;aAA2B;;;UAGjD;WACN;WACA;WACA;;UAGM;;WAEN;EACT,SAAS,UAAU,yBAAyB;;EAE5C,SAAS,qBAAqB;;;YAIpB;IACR,sBAAsB;;YAGd;IACR,6BAA6B,OAAO;;;;;cCtE3B,6BAA2B,KAAA;;;;;;;KAU5B,wBAAwB,cAAc;;UA2BjC;WACN;EACT,QAAQ,SAAS,+BAA+B;;;YAItC;IACR,mBAAmB;;;;;;UCjDN;EACf,OAAO,mBAAmB;IAAW;IAAmB,SAAS;MAAgB,QAAQ;;;UAI1E;WACN;WACA;WACA;WACA;WACA;WACA;;WAEA;;;UAIM;WACN;;;;;EAKT,YAAY,SAAS,0BAA0B,SAAS,cAAc;IAAU;;;;UAIjE;WACN;;WAEA;WACA;;UAGM;WACN;;WAEA;;;;;;;UAQM;WACN;;EAET,UAAU,aAAa,SAAS,cAAc,QAAQ;IAAsB;IAAc;;;EAE1F,SACE,aACA,SAAS,cACR,QAAQ;IAAsB;IAAc;MAAS;MAAc;;IAAkB;;;EAExF,WACE,SAAS,4BACT,SAAS,cACR,QAAQ;IAAsB;IAAc;;;UAGhC;WACN;;EAET,KAAK,cAAc,SAASI,UAAY,QAAQ;;;UAIjC;WACN,SAAS;;EAElB,yBAAyB;;EAEzB,QAAQ,SAASA,UAAY;;UAGd;;WAEN;;WAEA;;WAEA;;UAGM;WACN;;WAEA;;;;;;UAOM;WACN;EACT,KAAK,SAAS,yBAAyB,SAASA,UAAY,QAAQ;;EAEpE,aAAa,mBAAmB,SAASA,UAAY,QAAQ;EAC7D,KAAK,SAASA,UAAY,iBAAiB;;;;;EAK3C,QAAQ,mBAAmB,SAASA,UAAY;;;UAIjC;;WAEN;;WAEA,SAAS,SAAS;WAClB;WACA,QAAQ;;WAER;;WAEA;;WAEA,gBAAgB;;;;;WAKhB,iBACP,sBACG;aACU;aAA0B;aAAqB;;aAC/C;aAAyB;aAAqB,SAAS;;;KAI5D;KAEA;WACG;WAAmB;;WAEnB;WACA;aACE,MAAM;aACN;aACA;;aAEA;aACA;;;;;;;UAQA;WACN;;WAEA;EACT,IAAI,SAAS,mBAAmB,QAAQ;;;UAIzB;WACN;WACA;;WAEA;WACA;WACA;aACE;aACA;aACA;aACA;aACA;aACA;;;;UAKI;;WAEN;;WAEA;aACE;aACA;aACA;aACA;;;WAGF;aAA+B;aAA2B;aAAqB,MAAM;;;WAErF,QAAQ,SAAS,eAAe;WAChC,0BAA0B;;;;;;UAOpB;WACN;;;;;EAKT,YAAY,mBAAmB;aAAmB;aAA0B,OAAO;;;EAEnF,SAAS,wBAAwB,QAAQ;aAAoC;;EAC7E,QAAQ;aACG;MACP;aAAmB;aAA0B,QAAQ,SAAS;;;;YA0BxD;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,cAAc;IACd,UAAU;IACV,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB;eAA+B;;;;;;;cC9PtB,+BAA6B,KAAA;;;;KAU9B,0BAA0B,cAAc;;cAGvC,wBAAsB,KAAA;;;;;;KASvB,mBAAmB,cAAc;UAE5B;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;WAEA;;WAEA;;;UAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;UAI7E;WACN;WACA;;;UAIM;WACN;WACA;;UAGM;WACN,aAAa;WACb,OAAO;;UAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;UAGF;;WAEN,cAAc,SAAS;;;;;;;KAQtB,8BAA8B;UAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;UAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;UAG7C,qCAAqC;WAC3C,SAAS;;;;;WAKT;;UAGM;WACN;;KAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;UAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;WAErF;;KAGC;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;UAIR;EACf,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;UAEU;WACN;;WAEA;;UAGM;WACN;WACA;EACT;;;UAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;KAG7B;KACA;KACA;UAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;UAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;UAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;UAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;UAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;UAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARME;;UAWA;WACN;WACA;WACA;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;UAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;UAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;UAGL;WACN;;WAEA;;;UAIM;WACN;WACA;WACA;WACA;;WAEA;WACA;WACA;WACA;;;;;;;UAQM;EACf,QAAQ,SAAS,4BAA4B,QAAQ;;EAErD,WAAW,SAAS,4BAA4B,QAAQ;;;YAK9C;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;IAC1B,wBAAwB;;;;;;UC9EX;WACN;aACE;aACA;aACA;aACA;aACA;;WAEF;WACA;;;;;KCxQC;;UAgPK;;WAEN;;WAEA;;WAEA;WACA;;UAGM;WACN,OAAO;;WAEP;WACA;;;UAOM;;EAEf,MAAM,cAAc,OAAO,+BAA+B;EAC1D,OAAO,cAAc,OAAO;EAC5B,OAAO;EACP,eAAe,yBAAyB;EACxC;;;YASU;IACR,oBAAoB;;;;;qBChTX;qBACA;;qBAYA,qBAAmB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkEpB,gBAAgB,cAAc;YAC9B,iBAAiB;YACjB,mBAAmB;wBAEf,kBAAkB,UAAU,gBAAgB;wBAI5C,iBAAiB,iBAAiB;iBAsBjC;EACf;EACA;EACA,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX;;EAEA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA,UAAU;;wBAGI,uBAAuB,iBAAiB;;;UClIvC;EACf,OAAO;EACP;EACA;EACA,UAAU;;UAGK;EACf,SAAS;EACT,UAAU;EACV;IACE;IACA;IACA,WAAW;IACX;MACE,OAAO;MACP;MACA;MACA;MACA;;IAEF;MAAY;MAAc;MAAiB,OAAO;;IAClD;MAAQ;MAAqB,OAAO;MAAY;;IAChD;;;;wBAKY,sBAAsB;;wBAwBtB,mBAAmB,qBAAqB,yBAAyB;;;qBC3CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBCFA,gBAAc,KAAA;;;;qBACd,aAAW,KAAA;MAAX,KAAA;;;wBAIG,iBAAiB,0BAA0B,kBAAe;;;;UCPzD;WACN,OAAO;WACP,SAAS;;;;;;KAoBR,YAAY,UAAU,oBAAoB,UAAU,sBAAsB,KACpF,kBAAkB,OAAO,QAAQ;WAEpB,MAAM;WAAY,QAAQ;;KAE7B,aAAa,UAAU,eAAe,uBAC/C,WAAW,IAAI,YACd,EAAE;WAAsB,YAAY,UAAU;IAAY,OAAO,OAAO,iBACxE,EAAE;WAAsB,cAAc,UAAU;IAAY,OAAO,OAAO;;;KCnClE,+CAA+C;GAAiB,cAAc;;;;qBC4E7E,2BAAyB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+LzB,gBAHME;;IAnJf,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;IAYN,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;;IAQG,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;;IAEK,MAAI,KAAA;;;;;IACV,MAAI,KAAA;;;;;;IACD,MAAI,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACJ,MAAI,KAAA;;;IACH,MAAI,KAAA;;;IACR,MAAI,KAAA;;;;;;;;;;;IACI,MAAI,KAAA;;;;;;;;;IAAW,QAAM,KAAA;;;;;IAEvC,MAAI,KAAA;;;IACJ,QAAM,KAAA,QAAA,KAAA,qBAAA,KAAA,uBAAA,KAAA,8BAAA,KAAA;;;IAQN,MAAI,KAAA;;;;IACJ,QAAM,KAAA,QAAA,KAAA,sBAAA,KAAA,uBAAA,KAAA,4BAAA,KAAA;;;;IAQM,QAAM,KAAA;;;;;;IAElB,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;IAmBN,MAAI,KAAA,QAAA,KAAA;;;;;;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IAqBN,QAAM,KAAA;;;;;;;;;;;;;;;;;;;IAeN,QAAM,KAAA,OAAA,KAAA;;;;;;;;;;;;;;IAiBc,QAAM,KAAA,OAAA,KAAA;;;;;;IACE,QAAM,KAAA,OAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACzB,MAAI,KAAA;;;IAAuD,QAAM,KAAA,QAAA;;;IACjE,MAAI,KAAA;;;IACF,MAAI,KAAA,OAAA,KAAA;;;;;;qBCrQN;qBA6BA,mBAAiB,KAAA,QAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,cAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA;;qBAqCjB,wBAAsB,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAwBtB,wBAAsB,KAAA,QAAA,KAAA"}
+{"version":3,"file":"apiContracts.d.mts","names":["_0","_0","_0","_0","IoContext","_0","_$__hubChannel0.PoHubSessionUsage","_0","_$__protocolContracts0.ChordMethods"],"sources":["../src/schemas/serverBundle.ts","../src/schemas/brain.ts","../src/schemas/serverScope.ts","../src/schemas/approvalPrompt.ts","../src/schemas/approval.ts","../src/schemas/backgroundWork.ts","../src/schemas/notification.ts","../src/schemas/platform.ts","../src/schemas/workflow.ts","../src/schemas/hubChannel.ts","../src/schemas/packageApi.ts","../src/schemas/apiContracts.ts","../src/services/apiContracts/index.ts","../src/schemas/builtinApiContracts.ts","../src/schemas/httpApiContracts.ts","../src/schemas/protocolContracts.ts","../src/schemas/sessionProtocol.ts","../src/schemas/sessionApiContracts.ts","../src/schemas/transportApiContracts.ts"],"mappings":";;;;;;;;;;;;UAKiB;WACN;WACA;;UAGM;WACN;;WAEA;;WAEA,cAAc;;WAEd,iBAAiB;;WAEjB,cAAc;;WAEd;;WAEA;WACA,iBAAiB;WACjB,iBAAiB;WACjB;;;;;UCtBM;EACf;EACA,OAAO;;UAGQ;EACf;EACA;EACA,QAAQ,YAAY;;UAGL;EACf;EACA;EACA,OAAO;EACP,aAAa;EACb,OAAO;EACP;EACA;;UAGe;EACf;EACA;EACA,OAAO;EACP,OAAO;;;UAIQ;EACf;EACA;EACA;EACA;;UAGe;EACf,OAAO;EACP,OAAO;EACP,KAAK;;EAEL,SAAS;;UAGM;EACf,OAAO;EACP,QAAQ;EACR,UAAU;;EAEV,iBAAiB;EACjB,UAAU;EACV,WAAW;EACX,OAAO;EACP;;;UA+Be;EACf;EACA;IACE;IACA,OAAO;IACP;IACA;IACA;;EAEF;IACE;IACA;IACA,OAAO;IACP;;EAEF;;;;;UCrFe,kBAAkB;WACxB;WACA,OAAO;;WAEP;;WAEA,QAAQ;;;KAeP;;UAoBK,sBAAsB;WAC5B,OAAO;EAChB,WAAW;;;UAII,oBAAoB;EACnC,QAAQ,GACN,KAAK,qBACL,cAAc,IAAI,QAAQ,IAC1B,WAAW,OAAO,aAAa,gBAC9B,QAAQ,sBAAsB;;EAEjC,IAAI,OAAO;;EAEX,MAAM,MAAM,sBAAsB;;;UA0BnB;WACN,OAAO;;EAEhB,YAAY;;;;;;EAMZ,QAAQ,GAAG,UAAU,kBAAkB,IAAI,OAAO,IAAI,cAAc;;EAEpE,QAAQ,GAAG,UAAU,kBAAkB,KAAK;;EAE5C,KAAK,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEjE,UAAU,gBAAgB,QAAQ,MAAM,MAAM,MAAM,WAAW,OAAO;;EAEtE,OAAO,QAAQ,gBAAgB,oBAAoB;;;YAIzC;IACR,mBAAmB;;;;;;UC1GN;WACN;WACA;WACA;aAA8B;aAAwB;;;UAGhD;WACN;;WAEA;;;;UCSM;WACN;;WAEA;WACA,WAAW;WACX;WACA,aAAa;;WAEb;;WAEA;;UAKM;WACN;WACA,WAAW;;WAEX;WACA;;;KAIC,sBAAsB,MAAM,gBAAgB,QAAQ,gBAAgB;;;;;UAM/D;EACf,OAAO,SAAS,oBAAoB;aAAmB;;EACvD,iBAAiB,MAAM,6BAA6B,KAAK;;;YAS/C;IACR,eAAe;;;;;cCjEN,kCAAgC,KAAA;;;;;;KASjC,6BAA6B,cAAc;cAE1C,0BAAwB,KAAA;;;;;;;KAIzB,qBAAqB,cAAc;UAwB9B;WACN;;;;;;EAMT,2BAA2B;;UAGZ;WACN;WACA;;EAET;EACA;;UAGe;WACN,gBAAgB;WAChB;aAA4B;aAA2B;;;UAGjD;WACN;WACA;WACA;;UAGM;;WAEN;EACT,SAAS,UAAU,yBAAyB;;EAE5C,SAAS,qBAAqB;;;YAIpB;IACR,sBAAsB;;YAGd;IACR,6BAA6B,OAAO;;;;;cCtE3B,6BAA2B,KAAA;;;;;;;KAU5B,wBAAwB,cAAc;;UA2BjC;WACN;EACT,QAAQ,SAAS,+BAA+B;;;YAItC;IACR,mBAAmB;;;;;;UCjDN;EACf,OAAO,mBAAmB;IAAW;IAAmB,SAAS;MAAgB,QAAQ;;;UAI1E;WACN;WACA;WACA;WACA;WACA;WACA;;WAEA;;;UAIM;WACN;;;;;EAKT,YAAY,SAAS,0BAA0B,SAAS,cAAc;IAAU;;;;UAIjE;WACN;;WAEA;WACA;;UAGM;WACN;;WAEA;;;;;;;UAQM;WACN;;EAET,UAAU,aAAa,SAAS,cAAc,QAAQ;IAAsB;IAAc;;;EAE1F,SACE,aACA,SAAS,cACR,QAAQ;IAAsB;IAAc;MAAS;MAAc;;IAAkB;;;EAExF,WACE,SAAS,4BACT,SAAS,cACR,QAAQ;IAAsB;IAAc;;;UAGhC;WACN;;EAET,KAAK,cAAc,SAASI,UAAY,QAAQ;;;UAIjC;WACN,SAAS;;EAElB,yBAAyB;;EAEzB,QAAQ,SAASA,UAAY;;UAGd;;WAEN;;WAEA;;WAEA;;UAGM;WACN;;WAEA;;;;;;UAOM;WACN;EACT,KAAK,SAAS,yBAAyB,SAASA,UAAY,QAAQ;;EAEpE,aAAa,mBAAmB,SAASA,UAAY,QAAQ;EAC7D,KAAK,SAASA,UAAY,iBAAiB;;;;;EAK3C,QAAQ,mBAAmB,SAASA,UAAY;;;UAIjC;;WAEN;;WAEA,SAAS,SAAS;WAClB;WACA,QAAQ;;WAER;;WAEA;;WAEA,gBAAgB;;;;;WAKhB,iBACP,sBACG;aACU;aAA0B;aAAqB;;aAC/C;aAAyB;aAAqB,SAAS;;;KAI5D;KAEA;WACG;WAAmB;;WAEnB;WACA;aACE,MAAM;aACN;aACA;;aAEA;aACA;;;;;;;UAQA;WACN;;WAEA;EACT,IAAI,SAAS,mBAAmB,QAAQ;;;UAIzB;WACN;WACA;;WAEA;WACA;WACA;aACE;aACA;aACA;aACA;aACA;aACA;;;;UAKI;;WAEN;;WAEA;aACE;aACA;aACA;aACA;;;WAGF;aAA+B;aAA2B;aAAqB,MAAM;;;WAErF,QAAQ,SAAS,eAAe;WAChC,0BAA0B;;;;;;UAOpB;WACN;;;;;EAKT,YAAY,mBAAmB;aAAmB;aAA0B,OAAO;;;EAEnF,SAAS,wBAAwB,QAAQ;aAAoC;;EAC7E,QAAQ;aACG;MACP;aAAmB;aAA0B,QAAQ,SAAS;;;;YA0BxD;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,sBAAsB;IACtB,cAAc;IACd,UAAU;IACV,eAAe;IACf,cAAc;IACd,oBAAoB;IACpB;eAA+B;;;;;;;cC5PtB,+BAA6B,KAAA;;;;KAU9B,0BAA0B,cAAc;;cAGvC,wBAAsB,KAAA;;;;;;KASvB,mBAAmB,cAAc;;cAwBhC,sCAAoC,KAAA;;;;;;;;;;;;;KASrC,iCAAiC,cAAc;cAE9C,6BAA2B,KAAA,gBAAA,KAAA;KAC5B,wBAAwB,cAAc;cAyBrC,mCAAiC,KAAA;;;;;;;;;;;;;KAOlC,8BAA8B,cAAc;;cA2B3C,4BAA0B,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAU3B,uBAAuB,cAAc;;cAGpC,kCAAgC,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;KAajC,6BAA6B,cAAc;;UAqFtC;WACN,cAAc;WACd,WAAW;;UAGL;WACN,cAAc;WACd,aAAa,SAAS;;UAGhB;WACN;WACA;WACA;WACA;WACA,SAAS,SAAS;WAClB,MAAM,SAAS;WACf;WACA;;WAEA;;WAEA,cAAc,SAAS;;WAEvB;;;UAIM;EACf,OAAO,YAAY,yBAAyB,YAAY,4BAA4B,QAAQ;;;UAI7E;WACN;WACA;;;UAIM;WACN;WACA;;UAGM;WACN,aAAa;WACb,OAAO;;UAGD;WACN,SAAS;WACT;WACA;WACA;;WAEA,MAAM;WACN,cAAc;;WAEd,QAAQ;;UAGF;;WAEN,cAAc,SAAS;;;;;;;KAQtB,8BAA8B;UAEzB;WACN,SAAS;WACT,KAAK;WACL,SAAS;WACT;WACA;WACA;;WAEA,QAAQ;;UAGF;WACN;;;;;;WAMA,UAAU,SAAS,gCAAgC;;UAG7C,qCAAqC;WAC3C,SAAS;;WAET,aAAa;;;;;WAKb;;UAGM;WACN;;KAGC;WAEG;WACA,YAAY;WACZ,YAAY;;WAEZ;WAA0B,aAAa;WAA2B,UAAU;;UAE1E;WACN;aAA4B;aAAuB;aAA0B;;WAC7E;aAA8B;aAAuB;aAA0B;;WAC/E;aAA8B;aAA2B;aAA4B;;;WAErF;;WAEA,aAAa;;KAGZ;WAEG;WACA;WACA;WACA,UAAU;;WAGV;WACA;WACA;WACA;;WAGA;WACA;WACA;WACA,KAAK;WACL,UAAU;;;UAIR;;EAEf,cACE,YAAY,yBACZ,UAAU,KAAK,oCACd,QAAQ;EACX,SAAS,SAAS,6BAA6B,QAAQ;EACvD,OACE,mBACA,YAAY,yBACZ,YAAY,+BACX,QAAQ;EACX,QACE,mBACA,aAAa,kBACb,UAAU,4BACT,QAAQ;;EAEX,KAAK,oBAAoB,QAAQ;;;;;EAKjC,eACE,qBACA,kBAAkB,SAAS,qCAAqC,QAAQ,yCACxE,SAAS;IACN;;;UAEU;WACN;;WAEA;;UAGM;WACN;WACA;EACT;;;UAIe;EACf,SAAS,cAAc,6BAA6B;EACpD,iBAAiB;EACjB,UAAU,WAAW,kBAAkB;;KAG7B;KACA;KACA;UAUK;WACN;WACA,QAAQ;WACR;aAAiB;aAAuB;aAAqB;;WAC7D;;UAGM;WACN;WACA;WACA,QAAQ;WACR,gBAAgB;;UAGV;WACN,KAAK;WACL,OAAO;WACP,UAAU;;WAEV,UAAU;WACV,eAAe;WACf,oBAAoB;;;UAId;WACN,YAAY;WACZ;;WAEA,UAAU,SAAS;;;UAIb;EACf,WAAW,gBAAgB,QAAQ;EACnC,UAAU,gBAAgB,QAAQ;;EAElC,UAAU,eAAe,WAAW,OAAO;;UAG5B;WACN;WACA;WACA;WACA;WACA;WACA;WACA;WACA,QARME;;UAWA;WACN;WACA;WACA;WACA;WACA;WACA;;UAGM;WACN;WACA;WACA;WACA,mBAAmB;WACnB,sBAAsB;;;UAIhB;WACN;EACT,YAAY;IACV;IACA;IACA,SAAS;MACP,QAAQ;EACZ,aAAa;IAAS;MAAyB,QAAQ;EACvD,aAAa,QAAQ;EACrB,gBAAgB;IACd,SAAS;MAAiB;MAA+B;;MACvD;;EAEJ,oBAAoB;IAAU;IAAkB,WAAW,SAAS;;;EAEpE,mBAAmB;IACjB;MACE;IAAU;IAAkB,WAAW,SAAS;;;;UAIrC;WACN,KAAK;WACL;WACA;WACA;WACA,QAAQ;WACR,gBAAgB,SAAS;WACzB,iBAAiB,SAAS;WAC1B;;WAEA;WACA,OAAO;WACP,WAAW;;WAEX,WAAW;;WAEX,aAAa;;UAGP;WACN;;WAEA;;;UAIM;WACN;WACA;WACA;WACA;;WAEA;WACA;WACA;WACA;;;;;;;UAQM;;EAEf,UAAU,cAAc,iCAAiC,QAAQ;;EAEjE,UAAU,SAAS,8BAA8B,QAAQ;;EAEzD,sBAAsB,YAAY,uBAAuB,QAAQ;;EAEjE,QAAQ,SAAS,4BAA4B,QAAQ;;EAErD,WAAW,SAAS,4BAA4B,QAAQ;;;UAIzC;EACf,YAAY,UAAU,6BAA6B;;;YAKzC;IACR,sBAAsB;IACtB,kCAAkC;IAClC,oBAAoB;IACpB,uBAAuB;IACvB,0BAA0B;IAC1B,wBAAwB;IACxB,iCAAiC;;;;;;UClUpB;WACN;aACE;aACA;aACA;aACA;aACA;;WAEF;WACA;;;;;KCxQC;;UAgPK;;WAEN;;WAEA;;WAEA;WACA;;UAGM;WACN,OAAO;;WAEP;WACA;;;UAOM;;EAEf,MAAM,cAAc,OAAO,+BAA+B;EAC1D,OAAO,cAAc,OAAO;EAC5B,OAAO;EACP,eAAe,yBAAyB;EACxC;;;YASU;IACR,oBAAoB;;;;;qBChTX;qBACA;;qBAYA,qBAAmB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;YAkEpB,gBAAgB,cAAc;YAC9B,iBAAiB;YACjB,mBAAmB;wBAEf,kBAAkB,UAAU,gBAAgB;wBAI5C,iBAAiB,iBAAiB;iBAsBjC;EACf;EACA;EACA,iBAAiB;EACjB,iBAAiB;EACjB,WAAW;EACX;;EAEA;;iBAGe;EACf,gBAAgB;EAChB;EACA;EACA,UAAU;;wBAGI,uBAAuB,iBAAiB;;;UClIvC;EACf,OAAO;EACP;EACA;EACA,UAAU;;UAGK;EACf,SAAS;EACT,UAAU;EACV;IACE;IACA;IACA,WAAW;IACX;MACE,OAAO;MACP;MACA;MACA;MACA;;IAEF;MAAY;MAAc;MAAiB,OAAO;;IAClD;MAAQ;MAAqB,OAAO;MAAY;;IAChD;;;;wBAKY,sBAAsB;;wBAwBtB,mBAAmB,qBAAqB,yBAAyB;;;qBC3CpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBCFA,gBAAc,KAAA;;;;qBACd,aAAW,KAAA;MAAX,KAAA;;;wBAIG,iBAAiB,0BAA0B,kBAAe;;;;UCPzD;WACN,OAAO;WACP,SAAS;;;;;;KAoBR,YAAY,UAAU,oBAAoB,UAAU,sBAAsB,KACpF,kBAAkB,OAAO,QAAQ;WAEpB,MAAM;WAAY,QAAQ;;KAE7B,aAAa,UAAU,eAAe,uBAC/C,WAAW,IAAI,YACd,EAAE;WAAsB,YAAY,UAAU;IAAY,OAAO,OAAO,iBACxE,EAAE;WAAsB,cAAc,UAAU;IAAY,OAAO,OAAO;;;KCnClE,+CAA+C;GAAiB,cAAc;;;;qBC4E7E,2BAAyB,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBA+LzB,gBAHME;;IAnJf,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;IAYN,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;;IAQG,MAAI,KAAA,QAAA,KAAA,SAAA,KAAA;;;;;;;;;;;;IAEK,MAAI,KAAA;;;;;IACV,MAAI,KAAA;;;;;;IACD,MAAI,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACJ,MAAI,KAAA;;;IACH,MAAI,KAAA;;;IACR,MAAI,KAAA;;;;;;;;;;;IACI,MAAI,KAAA;;;;;;;;;IAAW,QAAM,KAAA;;;;;IAEvC,MAAI,KAAA;;;IACJ,QAAM,KAAA,QAAA,KAAA,qBAAA,KAAA,uBAAA,KAAA,8BAAA,KAAA;;;IAQN,MAAI,KAAA;;;;IACJ,QAAM,KAAA,QAAA,KAAA,sBAAA,KAAA,uBAAA,KAAA,4BAAA,KAAA;;;;IAQM,QAAM,KAAA;;;;;;IAElB,MAAI,KAAA;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;IAmBN,MAAI,KAAA,QAAA,KAAA;;;;;;;;;;;;IAOJ,QAAM,KAAA;;;;;;;;;;;;;;;;;;;;;;;;IAqBN,QAAM,KAAA;;;;;;;;;;;;;;;;;;;IAeN,QAAM,KAAA,OAAA,KAAA;;;;;;;;;;;;;;IAiBc,QAAM,KAAA,OAAA,KAAA;;;;;;IACE,QAAM,KAAA,OAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,qBAAA,KAAA,iBAAA,KAAA,oBAAA,KAAA,kBAAA,KAAA,iBAAA,KAAA;;;IACzB,MAAI,KAAA;;;IAAuD,QAAM,KAAA,QAAA;;;IACjE,MAAI,KAAA;;;IACF,MAAI,KAAA,OAAA,KAAA;;;;;;qBCrQN;qBA6BA,mBAAiB,KAAA,QAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,cAAA,KAAA,QAAA,KAAA,iBAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,WAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,YAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,UAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,QAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA,aAAA,KAAA,YAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,OAAA,KAAA,aAAA,KAAA,QAAA,KAAA,eAAA,KAAA,UAAA,KAAA,OAAA,KAAA,QAAA,KAAA,SAAA,KAAA;;qBAqCjB,wBAAsB,KAAA,QAAA,KAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBAwBtB,wBAAsB,KAAA,QAAA,KAAA"}

package/dist/mcp.cjs

@@ -1,5 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_mcp = require("./src/schemas/mcp.cjs");
+exports.PO_MCP_CONNECTIONS_CONTRACT = require_mcp.PO_MCP_CONNECTIONS_CONTRACT;
+exports.PO_MCP_CONNECTIONS_SERVICE = require_mcp.PO_MCP_CONNECTIONS_SERVICE;
 exports.PO_MCP_CONTRACT = require_mcp.PO_MCP_CONTRACT;
 exports.PO_MCP_SERVICE = require_mcp.PO_MCP_SERVICE;
 exports.readPoMcp = require_mcp.readPoMcp;

package/dist/mcp.d.mts

@@ -1,2 +1,2 @@
-import { McpSessionApiKey, McpSessionServerResult, PO_MCP_CONTRACT, PO_MCP_SERVICE, PoMcpRegistration, PoMcpRegistrationInput, PoMcpService, readPoMcp } from "./src/schemas/mcp.mjs";
-export { type McpSessionApiKey, type McpSessionServerResult, PO_MCP_CONTRACT, PO_MCP_SERVICE, type PoMcpRegistration, type PoMcpRegistrationInput, type PoMcpService, readPoMcp };
+import { McpSessionApiKey, McpSessionServerResult, PO_MCP_CONNECTIONS_CONTRACT, PO_MCP_CONNECTIONS_SERVICE, PO_MCP_CONTRACT, PO_MCP_SERVICE, PoMcpAppInvocation, PoMcpConnectInput, PoMcpConnection, PoMcpConnectionsService, PoMcpCredential, PoMcpRegistration, PoMcpRegistrationInput, PoMcpService, readPoMcp } from "./src/schemas/mcp.mjs";
+export { type McpSessionApiKey, type McpSessionServerResult, PO_MCP_CONNECTIONS_CONTRACT, PO_MCP_CONNECTIONS_SERVICE, PO_MCP_CONTRACT, PO_MCP_SERVICE, type PoMcpAppInvocation, type PoMcpConnectInput, type PoMcpConnection, type PoMcpConnectionsService, type PoMcpCredential, type PoMcpRegistration, type PoMcpRegistrationInput, type PoMcpService, readPoMcp };

package/dist/mcp.mjs

@@ -1 +1 @@
-export { PO_MCP_CONTRACT, PO_MCP_SERVICE, readPoMcp } from "./src/schemas/mcp.mjs";
+export { PO_MCP_CONNECTIONS_CONTRACT, PO_MCP_CONNECTIONS_SERVICE, PO_MCP_CONTRACT, PO_MCP_SERVICE, readPoMcp } from "./src/schemas/mcp.mjs";

package/dist/src/schemas/mcp.cjs

@@ -2,10 +2,14 @@ const require_serverScope = require("./serverScope.cjs");
 //#region src/schemas/mcp.ts
 const PO_MCP_SERVICE = "po/mcp";
 const PO_MCP_CONTRACT = require_serverScope.defineServiceContract(PO_MCP_SERVICE, { scope: "session" });
+const PO_MCP_CONNECTIONS_SERVICE = "po/mcp-connections";
+const PO_MCP_CONNECTIONS_CONTRACT = require_serverScope.defineServiceContract(PO_MCP_CONNECTIONS_SERVICE, { scope: "session" });
 function readPoMcp(context) {
 	return context.get(PO_MCP_SERVICE);
 }
 //#endregion
+exports.PO_MCP_CONNECTIONS_CONTRACT = PO_MCP_CONNECTIONS_CONTRACT;
+exports.PO_MCP_CONNECTIONS_SERVICE = PO_MCP_CONNECTIONS_SERVICE;
 exports.PO_MCP_CONTRACT = PO_MCP_CONTRACT;
 exports.PO_MCP_SERVICE = PO_MCP_SERVICE;
 exports.readPoMcp = readPoMcp;

package/dist/src/schemas/mcp.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.cjs","names":["defineServiceContract"],"sources":["../../../src/schemas/mcp.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\n\nimport type { PoHeadlessToolResult } from './headless';\nimport { defineServiceContract } from './serverScope';\n\nexport const PO_MCP_SERVICE = 'po/mcp';\n\nexport type McpSessionApiKey = ({ value: string } | { environmentVariable: string }) &\n  ({ mode: 'bearer' } | { mode: 'header'; name: string });\n\nexport interface PoMcpRegistrationInput {\n  name: string;\n  url: string;\n  type?: 'http' | 'sse';\n  apiKey?: McpSessionApiKey;\n}\n\nexport interface McpSessionServerResult {\n  name: string;\n  status: string;\n  tools: string[];\n}\n\n/** An identity-owned temporary connection. It survives the establishing call's completion. */\nexport interface PoMcpRegistration {\n  readonly name: string;\n  /** Detached live state. Retired registrations cannot observe a replacement. */\n  snapshot(): McpSessionServerResult;\n  /** Uses the session's validated, visible tool invocation path. */\n  invoke(tool: string, args?: Record<string, unknown>, signal?: AbortSignal): Promise<PoHeadlessToolResult>;\n  /** Idempotent cleanup, including after cancellation or provider withdrawal. */\n  dispose(): Promise<void>;\n}\n\n/** Trusted session capability. The consumer owns permission and connection lifetime. */\nexport interface PoMcpService {\n  /** Cancellation rolls back establishment only. Credentials are never persisted by this service. */\n  register(input: PoMcpRegistrationInput, signal?: AbortSignal): Promise<PoMcpRegistration>;\n}\n\nexport const PO_MCP_CONTRACT = defineServiceContract<PoMcpService>(PO_MCP_SERVICE, { scope: 'session' });\n\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/mcp': PoMcpService;\n  }\n}\n\nexport function readPoMcp(context: Context): PoMcpService | undefined {\n  return context.get(PO_MCP_SERVICE) as PoMcpService | undefined;\n}\n"],"mappings":";;AAKA,MAAa,iBAAiB;AAmC9B,MAAa,kBAAkBA,oBAAAA,sBAAoC,gBAAgB,EAAE,OAAO,UAAU,CAAC;AAQvG,SAAgB,UAAU,SAA4C;CACpE,OAAO,QAAQ,IAAI,cAAc;AACnC"}
+{"version":3,"file":"mcp.cjs","names":["defineServiceContract"],"sources":["../../../src/schemas/mcp.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport type { ReadResourceResult, Tool } from '@modelcontextprotocol/server';\n\nimport type { PoHeadlessToolResult } from './headless';\nimport { defineServiceContract } from './serverScope';\n\nexport const PO_MCP_SERVICE = 'po/mcp';\n\nexport type McpSessionApiKey = ({ value: string } | { environmentVariable: string }) &\n  ({ mode: 'bearer' } | { mode: 'header'; name: string });\n\nexport interface PoMcpRegistrationInput {\n  name: string;\n  url: string;\n  type?: 'http' | 'sse';\n  apiKey?: McpSessionApiKey;\n}\n\nexport interface McpSessionServerResult {\n  name: string;\n  status: string;\n  tools: string[];\n}\n\n/** An identity-owned temporary connection. It survives the establishing call's completion. */\nexport interface PoMcpRegistration {\n  readonly name: string;\n  /** Detached live state. Retired registrations cannot observe a replacement. */\n  snapshot(): McpSessionServerResult;\n  /** Uses the session's validated, visible tool invocation path. */\n  invoke(tool: string, args?: Record<string, unknown>, signal?: AbortSignal): Promise<PoHeadlessToolResult>;\n  /** Idempotent cleanup, including after cancellation or provider withdrawal. */\n  dispose(): Promise<void>;\n}\n\n/** Trusted session capability. The consumer owns permission and connection lifetime. */\nexport interface PoMcpService {\n  /** Cancellation rolls back establishment only. Credentials are never persisted by this service. */\n  register(input: PoMcpRegistrationInput, signal?: AbortSignal): Promise<PoMcpRegistration>;\n}\n\nexport const PO_MCP_CONTRACT = defineServiceContract<PoMcpService>(PO_MCP_SERVICE, { scope: 'session' });\n\nexport const PO_MCP_CONNECTIONS_SERVICE = 'po/mcp-connections';\n\nexport type PoMcpCredential = { kind: 'bearer'; token: string } | { kind: 'header'; name: string; value: string };\n\nexport interface PoMcpConnectInput {\n  /** The consuming plugin's package name. */\n  owner: string;\n  url: string;\n  auth?: { credential: PoMcpCredential; saveAs?: string } | { credentialId: string };\n  /** Upstream tools an App may request, each requiring confirmation. */\n  appTools?: readonly string[];\n  lifetime: AbortSignal;\n}\n\nexport interface PoMcpAppInvocation {\n  toolCallId: string;\n  toolName: string;\n}\n\n/** Private upstream client. Its tools never enter the session catalog. */\nexport interface PoMcpConnection {\n  readonly id: string;\n  listTools(signal?: AbortSignal): Promise<readonly Tool[]>;\n  callTool(\n    name: string,\n    args: Record<string, unknown>,\n    options?: { invocation?: PoMcpAppInvocation; signal?: AbortSignal },\n  ): Promise<PoHeadlessToolResult>;\n  readAppResource(tool: string, signal?: AbortSignal): Promise<ReadResourceResult>;\n  dispose(): Promise<void>;\n}\n\nexport interface PoMcpConnectionsService {\n  connect(input: PoMcpConnectInput, signal?: AbortSignal): Promise<PoMcpConnection>;\n  /** Deleting a connection does not delete its saved credential. */\n  forgetCredential(owner: string, credentialId: string): Promise<void>;\n}\n\nexport const PO_MCP_CONNECTIONS_CONTRACT = defineServiceContract<PoMcpConnectionsService>(PO_MCP_CONNECTIONS_SERVICE, {\n  scope: 'session',\n});\n\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/mcp': PoMcpService;\n    'po/mcp-connections': PoMcpConnectionsService;\n  }\n}\n\nexport function readPoMcp(context: Context): PoMcpService | undefined {\n  return context.get(PO_MCP_SERVICE) as PoMcpService | undefined;\n}\n"],"mappings":";;AAMA,MAAa,iBAAiB;AAmC9B,MAAa,kBAAkBA,oBAAAA,sBAAoC,gBAAgB,EAAE,OAAO,UAAU,CAAC;AAEvG,MAAa,6BAA6B;AAsC1C,MAAa,8BAA8BA,oBAAAA,sBAA+C,4BAA4B,EACpH,OAAO,UACT,CAAC;AASD,SAAgB,UAAU,SAA4C;CACpE,OAAO,QAAQ,IAAI,cAAc;AACnC"}

package/dist/src/schemas/mcp.d.mts

@@ -1,6 +1,7 @@
 import { PoServiceContract } from "./serverScope.mjs";
 import { PoHeadlessToolResult } from "./headless.mjs";
 import { Context } from "@deepseek-ai/cordis";
+import { ReadResourceResult, Tool } from "@modelcontextprotocol/server";
 //#region src/schemas/mcp.d.ts
 export declare const PO_MCP_SERVICE = "po/mcp";
 export type McpSessionApiKey = ({
@@ -40,9 +41,54 @@ export interface PoMcpService {
   register(input: PoMcpRegistrationInput, signal?: AbortSignal): Promise<PoMcpRegistration>;
 }
 export declare const PO_MCP_CONTRACT: PoServiceContract<PoMcpService>;
+export declare const PO_MCP_CONNECTIONS_SERVICE = "po/mcp-connections";
+export type PoMcpCredential = {
+  kind: 'bearer';
+  token: string;
+} | {
+  kind: 'header';
+  name: string;
+  value: string;
+};
+export interface PoMcpConnectInput {
+  /** The consuming plugin's package name. */
+  owner: string;
+  url: string;
+  auth?: {
+    credential: PoMcpCredential;
+    saveAs?: string;
+  } | {
+    credentialId: string;
+  };
+  /** Upstream tools an App may request, each requiring confirmation. */
+  appTools?: readonly string[];
+  lifetime: AbortSignal;
+}
+export interface PoMcpAppInvocation {
+  toolCallId: string;
+  toolName: string;
+}
+/** Private upstream client. Its tools never enter the session catalog. */
+export interface PoMcpConnection {
+  readonly id: string;
+  listTools(signal?: AbortSignal): Promise<readonly Tool[]>;
+  callTool(name: string, args: Record<string, unknown>, options?: {
+    invocation?: PoMcpAppInvocation;
+    signal?: AbortSignal;
+  }): Promise<PoHeadlessToolResult>;
+  readAppResource(tool: string, signal?: AbortSignal): Promise<ReadResourceResult>;
+  dispose(): Promise<void>;
+}
+export interface PoMcpConnectionsService {
+  connect(input: PoMcpConnectInput, signal?: AbortSignal): Promise<PoMcpConnection>;
+  /** Deleting a connection does not delete its saved credential. */
+  forgetCredential(owner: string, credentialId: string): Promise<void>;
+}
+export declare const PO_MCP_CONNECTIONS_CONTRACT: PoServiceContract<PoMcpConnectionsService>;
 declare module '@deepseek-ai/cordis' {
   interface Context {
     'po/mcp': PoMcpService;
+    'po/mcp-connections': PoMcpConnectionsService;
   }
 }
 export declare function readPoMcp(context: Context): PoMcpService | undefined;

package/dist/src/schemas/mcp.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.d.mts","names":["_$__serverScope0.PoServiceContract"],"sources":["../../../src/schemas/mcp.ts"],"mappings":";;;;qBAKa;YAED;EAAsB;;EAAoB;;EACjD;;EAAqB;EAAgB;;iBAEzB;EACf;EACA;EACA;EACA,SAAS;;iBAGM;EACf;EACA;EACA;;;iBAIe;WACN;;EAET,YAAY;;EAEZ,OAAO,cAAc,OAAO,yBAAyB,SAAS,cAAc,QAAQ;;EAEpF,WAAW;;;iBAII;;EAEf,SAAS,OAAO,wBAAwB,SAAS,cAAc,QAAQ;;qBAG5D,iBAAeA,kBAAA;;YAGhB;IACR,UAAU;;;wBAIE,UAAU,SAAS,UAAU"}
+{"version":3,"file":"mcp.d.mts","names":["_$__serverScope0.PoServiceContract"],"sources":["../../../src/schemas/mcp.ts"],"mappings":";;;;;qBAMa;YAED;EAAsB;;EAAoB;;EACjD;;EAAqB;EAAgB;;iBAEzB;EACf;EACA;EACA;EACA,SAAS;;iBAGM;EACf;EACA;EACA;;;iBAIe;WACN;;EAET,YAAY;;EAEZ,OAAO,cAAc,OAAO,yBAAyB,SAAS,cAAc,QAAQ;;EAEpF,WAAW;;;iBAII;;EAEf,SAAS,OAAO,wBAAwB,SAAS,cAAc,QAAQ;;qBAG5D,iBAAeA,kBAAA;qBAEf;YAED;EAAoB;EAAgB;;EAAoB;EAAgB;EAAc;;iBAEjF;;EAEf;EACA;EACA;IAAS,YAAY;IAAiB;;IAAsB;;;EAE5D;EACA,UAAU;;iBAGK;EACf;EACA;;;iBAIe;WACN;EACT,UAAU,SAAS,cAAc,iBAAiB;EAClD,SACE,cACA,MAAM,yBACN;IAAY,aAAa;IAAoB,SAAS;MACrD,QAAQ;EACX,gBAAgB,cAAc,SAAS,cAAc,QAAQ;EAC7D,WAAW;;iBAGI;EACf,QAAQ,OAAO,mBAAmB,SAAS,cAAc,QAAQ;;EAEjE,iBAAiB,eAAe,uBAAuB;;qBAG5C,6BAA2BA,kBAAA;;YAK5B;IACR,UAAU;IACV,sBAAsB;;;wBAIV,UAAU,SAAS,UAAU"}

package/dist/src/schemas/mcp.mjs

@@ -2,10 +2,12 @@ import { defineServiceContract } from "./serverScope.mjs";
 //#region src/schemas/mcp.ts
 const PO_MCP_SERVICE = "po/mcp";
 const PO_MCP_CONTRACT = defineServiceContract(PO_MCP_SERVICE, { scope: "session" });
+const PO_MCP_CONNECTIONS_SERVICE = "po/mcp-connections";
+const PO_MCP_CONNECTIONS_CONTRACT = defineServiceContract(PO_MCP_CONNECTIONS_SERVICE, { scope: "session" });
 function readPoMcp(context) {
 	return context.get(PO_MCP_SERVICE);
 }
 //#endregion
-export { PO_MCP_CONTRACT, PO_MCP_SERVICE, readPoMcp };
+export { PO_MCP_CONNECTIONS_CONTRACT, PO_MCP_CONNECTIONS_SERVICE, PO_MCP_CONTRACT, PO_MCP_SERVICE, readPoMcp };
 
 //# sourceMappingURL=mcp.mjs.map

package/dist/src/schemas/mcp.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.mjs","names":[],"sources":["../../../src/schemas/mcp.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\n\nimport type { PoHeadlessToolResult } from './headless';\nimport { defineServiceContract } from './serverScope';\n\nexport const PO_MCP_SERVICE = 'po/mcp';\n\nexport type McpSessionApiKey = ({ value: string } | { environmentVariable: string }) &\n  ({ mode: 'bearer' } | { mode: 'header'; name: string });\n\nexport interface PoMcpRegistrationInput {\n  name: string;\n  url: string;\n  type?: 'http' | 'sse';\n  apiKey?: McpSessionApiKey;\n}\n\nexport interface McpSessionServerResult {\n  name: string;\n  status: string;\n  tools: string[];\n}\n\n/** An identity-owned temporary connection. It survives the establishing call's completion. */\nexport interface PoMcpRegistration {\n  readonly name: string;\n  /** Detached live state. Retired registrations cannot observe a replacement. */\n  snapshot(): McpSessionServerResult;\n  /** Uses the session's validated, visible tool invocation path. */\n  invoke(tool: string, args?: Record<string, unknown>, signal?: AbortSignal): Promise<PoHeadlessToolResult>;\n  /** Idempotent cleanup, including after cancellation or provider withdrawal. */\n  dispose(): Promise<void>;\n}\n\n/** Trusted session capability. The consumer owns permission and connection lifetime. */\nexport interface PoMcpService {\n  /** Cancellation rolls back establishment only. Credentials are never persisted by this service. */\n  register(input: PoMcpRegistrationInput, signal?: AbortSignal): Promise<PoMcpRegistration>;\n}\n\nexport const PO_MCP_CONTRACT = defineServiceContract<PoMcpService>(PO_MCP_SERVICE, { scope: 'session' });\n\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/mcp': PoMcpService;\n  }\n}\n\nexport function readPoMcp(context: Context): PoMcpService | undefined {\n  return context.get(PO_MCP_SERVICE) as PoMcpService | undefined;\n}\n"],"mappings":";;AAKA,MAAa,iBAAiB;AAmC9B,MAAa,kBAAkB,sBAAoC,gBAAgB,EAAE,OAAO,UAAU,CAAC;AAQvG,SAAgB,UAAU,SAA4C;CACpE,OAAO,QAAQ,IAAI,cAAc;AACnC"}
+{"version":3,"file":"mcp.mjs","names":[],"sources":["../../../src/schemas/mcp.ts"],"sourcesContent":["import type { Context } from '@deepseek-ai/cordis';\nimport type { ReadResourceResult, Tool } from '@modelcontextprotocol/server';\n\nimport type { PoHeadlessToolResult } from './headless';\nimport { defineServiceContract } from './serverScope';\n\nexport const PO_MCP_SERVICE = 'po/mcp';\n\nexport type McpSessionApiKey = ({ value: string } | { environmentVariable: string }) &\n  ({ mode: 'bearer' } | { mode: 'header'; name: string });\n\nexport interface PoMcpRegistrationInput {\n  name: string;\n  url: string;\n  type?: 'http' | 'sse';\n  apiKey?: McpSessionApiKey;\n}\n\nexport interface McpSessionServerResult {\n  name: string;\n  status: string;\n  tools: string[];\n}\n\n/** An identity-owned temporary connection. It survives the establishing call's completion. */\nexport interface PoMcpRegistration {\n  readonly name: string;\n  /** Detached live state. Retired registrations cannot observe a replacement. */\n  snapshot(): McpSessionServerResult;\n  /** Uses the session's validated, visible tool invocation path. */\n  invoke(tool: string, args?: Record<string, unknown>, signal?: AbortSignal): Promise<PoHeadlessToolResult>;\n  /** Idempotent cleanup, including after cancellation or provider withdrawal. */\n  dispose(): Promise<void>;\n}\n\n/** Trusted session capability. The consumer owns permission and connection lifetime. */\nexport interface PoMcpService {\n  /** Cancellation rolls back establishment only. Credentials are never persisted by this service. */\n  register(input: PoMcpRegistrationInput, signal?: AbortSignal): Promise<PoMcpRegistration>;\n}\n\nexport const PO_MCP_CONTRACT = defineServiceContract<PoMcpService>(PO_MCP_SERVICE, { scope: 'session' });\n\nexport const PO_MCP_CONNECTIONS_SERVICE = 'po/mcp-connections';\n\nexport type PoMcpCredential = { kind: 'bearer'; token: string } | { kind: 'header'; name: string; value: string };\n\nexport interface PoMcpConnectInput {\n  /** The consuming plugin's package name. */\n  owner: string;\n  url: string;\n  auth?: { credential: PoMcpCredential; saveAs?: string } | { credentialId: string };\n  /** Upstream tools an App may request, each requiring confirmation. */\n  appTools?: readonly string[];\n  lifetime: AbortSignal;\n}\n\nexport interface PoMcpAppInvocation {\n  toolCallId: string;\n  toolName: string;\n}\n\n/** Private upstream client. Its tools never enter the session catalog. */\nexport interface PoMcpConnection {\n  readonly id: string;\n  listTools(signal?: AbortSignal): Promise<readonly Tool[]>;\n  callTool(\n    name: string,\n    args: Record<string, unknown>,\n    options?: { invocation?: PoMcpAppInvocation; signal?: AbortSignal },\n  ): Promise<PoHeadlessToolResult>;\n  readAppResource(tool: string, signal?: AbortSignal): Promise<ReadResourceResult>;\n  dispose(): Promise<void>;\n}\n\nexport interface PoMcpConnectionsService {\n  connect(input: PoMcpConnectInput, signal?: AbortSignal): Promise<PoMcpConnection>;\n  /** Deleting a connection does not delete its saved credential. */\n  forgetCredential(owner: string, credentialId: string): Promise<void>;\n}\n\nexport const PO_MCP_CONNECTIONS_CONTRACT = defineServiceContract<PoMcpConnectionsService>(PO_MCP_CONNECTIONS_SERVICE, {\n  scope: 'session',\n});\n\ndeclare module '@deepseek-ai/cordis' {\n  interface Context {\n    'po/mcp': PoMcpService;\n    'po/mcp-connections': PoMcpConnectionsService;\n  }\n}\n\nexport function readPoMcp(context: Context): PoMcpService | undefined {\n  return context.get(PO_MCP_SERVICE) as PoMcpService | undefined;\n}\n"],"mappings":";;AAMA,MAAa,iBAAiB;AAmC9B,MAAa,kBAAkB,sBAAoC,gBAAgB,EAAE,OAAO,UAAU,CAAC;AAEvG,MAAa,6BAA6B;AAsC1C,MAAa,8BAA8B,sBAA+C,4BAA4B,EACpH,OAAO,UACT,CAAC;AASD,SAAgB,UAAU,SAA4C;CACpE,OAAO,QAAQ,IAAI,cAAc;AACnC"}

package/dist/src/schemas/workflow.cjs

@@ -1,4 +1,5 @@
 let typebox = require("typebox");
+let typebox_value = require("typebox/value");
 //#region src/schemas/workflow.ts
 const PO_WORKFLOW_LAUNCH_SERVICE = "po/workflow-launch";
 const PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = "po/workflow-definition-sources";
@@ -6,6 +7,7 @@ const PO_WORKFLOW_RUNS_SERVICE = "po/workflow-runs";
 const PO_WORKFLOW_CONTEXT_SERVICE = "po/workflow-context";
 const PO_WORKFLOW_ADMISSIONS_SERVICE = "po/workflow-admissions";
 const PO_WORKFLOW_IDENTITY_SERVICE = "po/workflow-identity";
+const PO_WORKFLOW_PROFILE_ADMISSION_SERVICE = "po/workflow-profile-admission";
 /** A source-relative definition, never an arbitrary host path. */
 const PoWorkflowDefinitionRefSchema = typebox.Type.Object({
 	source: typebox.Type.String({ minLength: 1 }),
@@ -21,6 +23,140 @@ const PoWorkflowRunRefSchema = typebox.Type.Object({
 	runKey: typebox.Type.String({ minLength: 1 }),
 	registryWorkspace: typebox.Type.String({ minLength: 1 })
 }, { additionalProperties: false });
+const IdentityText = typebox.Type.String({
+	minLength: 1,
+	maxLength: 512,
+	pattern: "^(?=.*\\S)[^\\u0000-\\u001f\\u007f]+$"
+});
+const IdentitySlug = typebox.Type.String({
+	minLength: 1,
+	maxLength: 64,
+	pattern: "^(?!(?:constructor|prototype|__proto__)$)[a-z][a-z0-9]*(?:-[a-z0-9]+)*$"
+});
+/** Opaque provider reference. Only the scoped provider can establish whether it identifies an eligible profile. */
+const StableProfileRef = typebox.Type.String({
+	minLength: 1,
+	maxLength: 512,
+	pattern: "^[^\\s\\u0000-\\u001f\\u007f]+$"
+});
+const IdentityDigest = typebox.Type.String({ pattern: "^[a-f0-9]{64}$" });
+const IdentityRoles = typebox.Type.Array(IdentitySlug, { uniqueItems: true });
+const PoWorkflowRoleGroupSchema = typebox.Type.Object({
+	kind: typebox.Type.Union([
+		typebox.Type.Literal("job"),
+		typebox.Type.Literal("child"),
+		typebox.Type.Literal("repair")
+	]),
+	job: IdentityText,
+	roles: typebox.Type.Array(IdentitySlug, {
+		minItems: 1,
+		uniqueItems: true
+	})
+}, { additionalProperties: false });
+/** Derived from the effective graph. revision identifies the parsed definition, never a mutable path alone. */
+const PoWorkflowIdentityRequirementsSchema = typebox.Type.Object({
+	definition: PoWorkflowDefinitionRefSchema,
+	revision: IdentityText,
+	roles: IdentityRoles,
+	groups: typebox.Type.Array(PoWorkflowRoleGroupSchema, { uniqueItems: true })
+}, { additionalProperties: false });
+const PoWorkflowAssignmentsSchema = typebox.Type.Record(IdentitySlug, StableProfileRef, { additionalProperties: false });
+/** Safe picker projection. voiceConfigured is metadata, not provider readiness, entitlement or quota. */
+const PoWorkflowIdentityCandidateSchema = typebox.Type.Object({
+	ref: StableProfileRef,
+	label: IdentityText,
+	roles: IdentityRoles,
+	voiceConfigured: typebox.Type.Boolean()
+}, { additionalProperties: false });
+/** Supplied by the admitted provider scope, never chosen by launch arguments or inferred from team/default names. */
+const PoWorkflowProductScopeSchema = typebox.Type.Object({
+	workspaceId: IdentityText,
+	product: IdentitySlug,
+	revision: IdentityText
+}, { additionalProperties: false });
+const PoWorkflowIdentityDiscoverySchema = typebox.Type.Object({
+	scope: PoWorkflowProductScopeSchema,
+	candidates: typebox.Type.Array(PoWorkflowIdentityCandidateSchema)
+}, { additionalProperties: false });
+/** Value-free evidence matching the initialized provider. credentialRef is not assumed equal to the stable ref. */
+const PoWorkflowExpectedProviderSchema = typebox.Type.Object({
+	provider: IdentityText,
+	organizationId: IdentityText,
+	mailboxId: IdentityText,
+	credentialRef: IdentityText
+}, { additionalProperties: false });
+const PoWorkflowAllocatedProfileSchema = typebox.Type.Object({
+	ref: StableProfileRef,
+	profile: IdentityText,
+	contentDigest: IdentityDigest,
+	policyDigest: IdentityDigest,
+	provider: PoWorkflowExpectedProviderSchema
+}, { additionalProperties: false });
+/** Persisted before effects. Profiles contain exact admitted evidence, never secrets or an implicit team selection. */
+const PoWorkflowAllocationSchema = typebox.Type.Object({
+	version: typebox.Type.Literal(1),
+	requirements: PoWorkflowIdentityRequirementsSchema,
+	scope: PoWorkflowProductScopeSchema,
+	assignments: PoWorkflowAssignmentsSchema,
+	profiles: typebox.Type.Array(PoWorkflowAllocatedProfileSchema)
+}, { additionalProperties: false });
+/** Step bootstrap only. An allocation-owned role-less session explicitly has no profile. */
+const PoWorkflowExpectedIdentitySchema = typebox.Type.Union([typebox.Type.Object({ kind: typebox.Type.Literal("none") }, { additionalProperties: false }), typebox.Type.Object({
+	kind: typebox.Type.Literal("profile"),
+	scope: PoWorkflowProductScopeSchema,
+	definitionRevision: IdentityText,
+	roles: typebox.Type.Array(IdentitySlug, {
+		minItems: 1,
+		uniqueItems: true
+	}),
+	...PoWorkflowAllocatedProfileSchema.properties
+}, { additionalProperties: false })]);
+/** Shared structural checks only. Eligibility, product scope and authorization require fresh provider admission. */
+function validatePoWorkflowAssignments(requirements, assignments) {
+	const invalidRequirements = [{
+		code: "invalid_requirements",
+		message: "Workflow allocation requirements are invalid."
+	}];
+	if (!(0, typebox_value.Check)(PoWorkflowIdentityRequirementsSchema, requirements)) return invalidRequirements;
+	const roles = new Set(requirements.groups.flatMap((group) => group.roles));
+	if (new Set(requirements.groups.map((group) => JSON.stringify([group.kind, group.job]))).size !== requirements.groups.length || roles.size !== requirements.roles.length || requirements.roles.some((role) => !roles.has(role))) return invalidRequirements;
+	if (assignments === void 0) return requirements.roles.map((role) => ({
+		code: "missing_assignment",
+		role,
+		message: `Assign a stable profile reference to role ${role}.`
+	}));
+	if (!(0, typebox_value.Check)(PoWorkflowAssignmentsSchema, assignments)) return [{
+		code: "invalid_assignments",
+		message: "Workflow assignments must map role slugs to nonempty stable profile references."
+	}];
+	const issues = [];
+	for (const role of requirements.roles) if (!Object.hasOwn(assignments, role)) issues.push({
+		code: "missing_assignment",
+		role,
+		message: `Assign a stable profile reference to role ${role}.`
+	});
+	for (const role of Object.keys(assignments)) if (!roles.has(role)) issues.push({
+		code: "unknown_role",
+		role,
+		message: `Role ${role} is not required by this workflow.`
+	});
+	for (const group of requirements.groups) if (new Set(group.roles.filter((role) => Object.hasOwn(assignments, role)).map((role) => assignments[role])).size > 1) issues.push({
+		code: "conflicting_roles",
+		job: group.job,
+		message: `Roles for job ${group.job} must use the same profile reference.`
+	});
+	return issues;
+}
+/** Validates shape and cross-field consistency, then detaches persisted evidence from caller-owned objects. */
+function parsePoWorkflowAllocation(value) {
+	if (!(0, typebox_value.Check)(PoWorkflowAllocationSchema, value)) throw new Error("Invalid or missing explicit workflow allocation snapshot.");
+	const issues = validatePoWorkflowAssignments(value.requirements, value.assignments);
+	if (issues.length) throw new Error(`Invalid workflow allocation: ${issues.map((issue) => issue.message).join(" ")}`);
+	const assigned = new Set(Object.values(value.assignments));
+	const profiles = new Set(value.profiles.map((profile) => profile.ref));
+	if (profiles.size !== value.profiles.length || profiles.size !== assigned.size || [...assigned].some((ref) => !profiles.has(ref))) throw new Error("Invalid workflow allocation: profile bindings must cover exactly the assigned references.");
+	return structuredClone(value);
+}
 function readPoWorkflowLaunchService(context) {
 	return context.get(PO_WORKFLOW_LAUNCH_SERVICE);
 }
@@ -39,20 +175,37 @@ function readPoWorkflowAdmissionsService(context) {
 function readPoWorkflowIdentityService(context) {
 	return context.get(PO_WORKFLOW_IDENTITY_SERVICE);
 }
+function readPoWorkflowProfileAdmission(context) {
+	return context.get(PO_WORKFLOW_PROFILE_ADMISSION_SERVICE);
+}
 //#endregion
 exports.PO_WORKFLOW_ADMISSIONS_SERVICE = PO_WORKFLOW_ADMISSIONS_SERVICE;
 exports.PO_WORKFLOW_CONTEXT_SERVICE = PO_WORKFLOW_CONTEXT_SERVICE;
 exports.PO_WORKFLOW_DEFINITION_SOURCES_SERVICE = PO_WORKFLOW_DEFINITION_SOURCES_SERVICE;
 exports.PO_WORKFLOW_IDENTITY_SERVICE = PO_WORKFLOW_IDENTITY_SERVICE;
 exports.PO_WORKFLOW_LAUNCH_SERVICE = PO_WORKFLOW_LAUNCH_SERVICE;
+exports.PO_WORKFLOW_PROFILE_ADMISSION_SERVICE = PO_WORKFLOW_PROFILE_ADMISSION_SERVICE;
 exports.PO_WORKFLOW_RUNS_SERVICE = PO_WORKFLOW_RUNS_SERVICE;
+exports.PoWorkflowAllocatedProfileSchema = PoWorkflowAllocatedProfileSchema;
+exports.PoWorkflowAllocationSchema = PoWorkflowAllocationSchema;
+exports.PoWorkflowAssignmentsSchema = PoWorkflowAssignmentsSchema;
 exports.PoWorkflowDefinitionRefSchema = PoWorkflowDefinitionRefSchema;
+exports.PoWorkflowExpectedIdentitySchema = PoWorkflowExpectedIdentitySchema;
+exports.PoWorkflowExpectedProviderSchema = PoWorkflowExpectedProviderSchema;
+exports.PoWorkflowIdentityCandidateSchema = PoWorkflowIdentityCandidateSchema;
+exports.PoWorkflowIdentityDiscoverySchema = PoWorkflowIdentityDiscoverySchema;
+exports.PoWorkflowIdentityRequirementsSchema = PoWorkflowIdentityRequirementsSchema;
+exports.PoWorkflowProductScopeSchema = PoWorkflowProductScopeSchema;
+exports.PoWorkflowRoleGroupSchema = PoWorkflowRoleGroupSchema;
 exports.PoWorkflowRunRefSchema = PoWorkflowRunRefSchema;
+exports.parsePoWorkflowAllocation = parsePoWorkflowAllocation;
 exports.readPoWorkflowAdmissionsService = readPoWorkflowAdmissionsService;
 exports.readPoWorkflowContextService = readPoWorkflowContextService;
 exports.readPoWorkflowDefinitionSourcesService = readPoWorkflowDefinitionSourcesService;
 exports.readPoWorkflowIdentityService = readPoWorkflowIdentityService;
 exports.readPoWorkflowLaunchService = readPoWorkflowLaunchService;
+exports.readPoWorkflowProfileAdmission = readPoWorkflowProfileAdmission;
 exports.readPoWorkflowRunsService = readPoWorkflowRunsService;
+exports.validatePoWorkflowAssignments = validatePoWorkflowAssignments;
 
 //# sourceMappingURL=workflow.cjs.map