@ailu-ai/contracts 2.0.0

package/dist/pii.js

@@ -0,0 +1,42 @@
+import { z } from "zod";
+/**
+ * PII redaction DTOs (ADR 0008). A per-namespace policy decides whether personal data is
+ * detected, redacted before reaching a model, or blocks the operation. Mirrors the router
+ * policy shape.
+ */
+export const PiiLevelSchema = z.enum(["off", "detect", "redact", "block"]);
+/** Body for PUT /pii/namespace/:ns/policy (owner-only). */
+export const SetPiiPolicyDtoSchema = z.object({
+    level: PiiLevelSchema.optional(),
+    entities: z.array(z.string()).optional(),
+    threshold: z.number().min(0).max(1).optional()
+});
+/** The resolved policy for a namespace. */
+export const PiiPolicyDtoSchema = z.object({
+    namespace: z.string(),
+    level: PiiLevelSchema,
+    entities: z.array(z.string()),
+    threshold: z.number(),
+    canWrite: z.boolean()
+});
+/** A single detection (entity type, confidence, span). */
+export const PiiFindingDtoSchema = z.object({
+    entity: z.string(),
+    score: z.number(),
+    start: z.number().int(),
+    end: z.number().int()
+});
+/**
+ * Wire contract for the native gateway seam (ADR 0008 phase 2). The Rust engine POSTs the
+ * outbound LLM texts (system + messages) to the control plane, which returns them redacted in
+ * the same order. Same length in, same length out.
+ */
+export const PiiRedactBatchDtoSchema = z.object({
+    texts: z.array(z.string())
+});
+/** `blocked` is true when a `block`-level policy matched — the engine then fails the call. */
+export const PiiRedactBatchResultDtoSchema = z.object({
+    texts: z.array(z.string()),
+    blocked: z.boolean()
+});
+//# sourceMappingURL=pii.js.map

package/dist/pii.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pii.js","sourceRoot":"","sources":["../src/pii.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;AAG3E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,cAAc,CAAC,QAAQ,EAAE;IAChC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/C,CAAC,CAAC;AAGH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,cAAc;IACrB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAGH,0DAA0D;AAC1D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACvB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACtB,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC3B,CAAC,CAAC;AAGH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACrB,CAAC,CAAC"}

package/dist/principal.d.ts

@@ -0,0 +1,81 @@
+import { z } from "zod";
+/**
+ * Authentication / principal DTOs shared across the API↔Studio boundary.
+ *
+ * These are plain wire shapes — they carry NO auth machinery (no hashing, no sessions,
+ * no guards) and the engine never imports them for execution. A control plane
+ * owns all of that; contracts only describes what crosses the wire.
+ */
+/**
+ * Role a principal holds WITHIN a tenant (RBAC). It is TENANT-SCOPED and resolved
+ * SERVER-SIDE on every request — it is never read from a JWT claim or a client-supplied
+ * header. The wire carries it only as an enrichment of the principal for the current
+ * tenant (so the Studio can gate UI cosmetically); the server's 403 remains the only
+ * authority.
+ *
+ * `admin`/`billing`/`member` are the ADR 0056 P3 org-role vocabulary (Organization > Team
+ * tenancy + granular rights); `approver`/`viewer` are the pre-P3 vocabulary, kept valid here
+ * so the schema stays parseable across the rollout window (a control-plane deploy that
+ * ships the new vocabulary and its own DB backfill migration are two separate, sequenced
+ * steps — this schema must never reject a role value either side of that migration has
+ * legitimately in flight). A future ADR-tracked cleanup may narrow this back down once no
+ * `approver`/`viewer` row is ever written or read anywhere.
+ */
+export declare const TenantRoleSchema: z.ZodEnum<["owner", "approver", "viewer", "admin", "billing", "member"]>;
+/** The authenticated principal, as returned by `GET /auth/me`. Never includes secrets. */
+export declare const PrincipalDtoSchema: z.ZodObject<{
+    id: z.ZodString;
+    email: z.ZodString;
+    displayName: z.ZodNullable<z.ZodString>;
+    /** The principal's role in the CURRENT tenant, resolved server-side (never from the JWT). */
+    currentTenantRole: z.ZodEnum<["owner", "approver", "viewer", "admin", "billing", "member"]>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    email: string;
+    displayName: string | null;
+    currentTenantRole: "owner" | "approver" | "viewer" | "admin" | "billing" | "member";
+}, {
+    id: string;
+    email: string;
+    displayName: string | null;
+    currentTenantRole: "owner" | "approver" | "viewer" | "admin" | "billing" | "member";
+}>;
+/** Login credentials posted to `POST /auth/login`. */
+export declare const LoginDtoSchema: z.ZodObject<{
+    email: z.ZodString;
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    email: string;
+    password: string;
+}, {
+    email: string;
+    password: string;
+}>;
+/** Accept an invitation: the signed invite token + the password the new member chooses. */
+export declare const AcceptInviteDtoSchema: z.ZodObject<{
+    token: z.ZodString;
+    password: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    password: string;
+    token: string;
+}, {
+    password: string;
+    token: string;
+}>;
+/** Issued session: the bearer token plus its absolute expiry (ISO 8601). */
+export declare const SessionDtoSchema: z.ZodObject<{
+    token: z.ZodString;
+    expiresAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    token: string;
+    expiresAt: string;
+}, {
+    token: string;
+    expiresAt: string;
+}>;
+export type TenantRole = z.infer<typeof TenantRoleSchema>;
+export type PrincipalDto = z.infer<typeof PrincipalDtoSchema>;
+export type LoginDto = z.infer<typeof LoginDtoSchema>;
+export type AcceptInviteDto = z.infer<typeof AcceptInviteDtoSchema>;
+export type SessionDto = z.infer<typeof SessionDtoSchema>;
+//# sourceMappingURL=principal.d.ts.map

package/dist/principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.d.ts","sourceRoot":"","sources":["../src/principal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,gBAAgB,0EAAwE,CAAC;AAEtG,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB;;;;IAI7B,6FAA6F;;;;;;;;;;;;EAE7F,CAAC;AAEH,sDAAsD;AACtD,eAAO,MAAM,cAAc;;;;;;;;;EAGzB,CAAC;AAEH,2FAA2F;AAC3F,eAAO,MAAM,qBAAqB;;;;;;;;;EAGhC,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/principal.js

@@ -0,0 +1,48 @@
+import { z } from "zod";
+/**
+ * Authentication / principal DTOs shared across the API↔Studio boundary.
+ *
+ * These are plain wire shapes — they carry NO auth machinery (no hashing, no sessions,
+ * no guards) and the engine never imports them for execution. A control plane
+ * owns all of that; contracts only describes what crosses the wire.
+ */
+/**
+ * Role a principal holds WITHIN a tenant (RBAC). It is TENANT-SCOPED and resolved
+ * SERVER-SIDE on every request — it is never read from a JWT claim or a client-supplied
+ * header. The wire carries it only as an enrichment of the principal for the current
+ * tenant (so the Studio can gate UI cosmetically); the server's 403 remains the only
+ * authority.
+ *
+ * `admin`/`billing`/`member` are the ADR 0056 P3 org-role vocabulary (Organization > Team
+ * tenancy + granular rights); `approver`/`viewer` are the pre-P3 vocabulary, kept valid here
+ * so the schema stays parseable across the rollout window (a control-plane deploy that
+ * ships the new vocabulary and its own DB backfill migration are two separate, sequenced
+ * steps — this schema must never reject a role value either side of that migration has
+ * legitimately in flight). A future ADR-tracked cleanup may narrow this back down once no
+ * `approver`/`viewer` row is ever written or read anywhere.
+ */
+export const TenantRoleSchema = z.enum(["owner", "approver", "viewer", "admin", "billing", "member"]);
+/** The authenticated principal, as returned by `GET /auth/me`. Never includes secrets. */
+export const PrincipalDtoSchema = z.object({
+    id: z.string().min(1),
+    email: z.string().email(),
+    displayName: z.string().min(1).nullable(),
+    /** The principal's role in the CURRENT tenant, resolved server-side (never from the JWT). */
+    currentTenantRole: TenantRoleSchema
+});
+/** Login credentials posted to `POST /auth/login`. */
+export const LoginDtoSchema = z.object({
+    email: z.string().email(),
+    password: z.string().min(1)
+});
+/** Accept an invitation: the signed invite token + the password the new member chooses. */
+export const AcceptInviteDtoSchema = z.object({
+    token: z.string().min(1),
+    password: z.string().min(8)
+});
+/** Issued session: the bearer token plus its absolute expiry (ISO 8601). */
+export const SessionDtoSchema = z.object({
+    token: z.string().min(1),
+    expiresAt: z.string().datetime()
+});
+//# sourceMappingURL=principal.js.map

package/dist/principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.js","sourceRoot":"","sources":["../src/principal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEtG,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,6FAA6F;IAC7F,iBAAiB,EAAE,gBAAgB;CACpC,CAAC,CAAC;AAEH,sDAAsD;AACtD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC;AAEH,2FAA2F;AAC3F,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC5B,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC"}

package/dist/principal.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=principal.test.d.ts.map

package/dist/principal.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.test.d.ts","sourceRoot":"","sources":["../src/principal.test.ts"],"names":[],"mappings":""}

package/dist/principal.test.js

@@ -0,0 +1,44 @@
+import { describe, expect, it } from "vitest";
+import { LoginDtoSchema, PrincipalDtoSchema, SessionDtoSchema, TenantRoleSchema } from "./principal.js";
+describe("principal contracts", () => {
+    it("accepts a valid principal", () => {
+        const parsed = PrincipalDtoSchema.parse({
+            id: "user-1",
+            email: "a@b.com",
+            displayName: "Alice",
+            currentTenantRole: "owner"
+        });
+        expect(parsed.email).toBe("a@b.com");
+        expect(parsed.currentTenantRole).toBe("owner");
+    });
+    it("allows a null displayName", () => {
+        const parsed = PrincipalDtoSchema.parse({
+            id: "user-1",
+            email: "a@b.com",
+            displayName: null,
+            currentTenantRole: "viewer"
+        });
+        expect(parsed.displayName).toBeNull();
+    });
+    it("requires a current tenant role (resolved server-side) on the principal", () => {
+        expect(() => PrincipalDtoSchema.parse({ id: "user-1", email: "a@b.com", displayName: "Alice" })).toThrow();
+    });
+    it("constrains the tenant role to the RBAC enum", () => {
+        expect(TenantRoleSchema.parse("approver")).toBe("approver");
+        expect(() => TenantRoleSchema.parse("superuser")).toThrow();
+    });
+    it("accepts the ADR 0056 P3 org-role vocabulary alongside the pre-P3 one", () => {
+        for (const role of ["owner", "approver", "viewer", "admin", "billing", "member"]) {
+            expect(TenantRoleSchema.parse(role)).toBe(role);
+        }
+    });
+    it("rejects a malformed email on login", () => {
+        expect(() => LoginDtoSchema.parse({ email: "nope", password: "x" })).toThrow();
+    });
+    it("requires an ISO expiry on a session", () => {
+        expect(() => SessionDtoSchema.parse({ token: "t", expiresAt: "not-a-date" })).toThrow();
+        const ok = SessionDtoSchema.parse({ token: "t", expiresAt: new Date().toISOString() });
+        expect(ok.token).toBe("t");
+    });
+});
+//# sourceMappingURL=principal.test.js.map

package/dist/principal.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"principal.test.js","sourceRoot":"","sources":["../src/principal.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AAExB,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACtC,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,OAAO;YACpB,iBAAiB,EAAE,OAAO;SAC3B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC;YACtC,EAAE,EAAE,QAAQ;YACZ,KAAK,EAAE,SAAS;YAChB,WAAW,EAAE,IAAI;YACjB,iBAAiB,EAAE,QAAQ;SAC5B,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG,EAAE,CACV,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CACnF,CAAC,OAAO,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;YACjF,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACxF,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACvF,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/registries.d.ts

@@ -0,0 +1,26 @@
+import { z } from "zod";
+export declare const NodeTypesDtoSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    items: string[];
+}, {
+    items: string[];
+}>;
+export declare const ConditionNamesDtoSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    items: string[];
+}, {
+    items: string[];
+}>;
+export declare const AgentTypesDtoSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    items: string[];
+}, {
+    items: string[];
+}>;
+export type NodeTypesDto = z.infer<typeof NodeTypesDtoSchema>;
+export type ConditionNamesDto = z.infer<typeof ConditionNamesDtoSchema>;
+export type AgentTypesDto = z.infer<typeof AgentTypesDtoSchema>;
+//# sourceMappingURL=registries.d.ts.map

package/dist/registries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registries.d.ts","sourceRoot":"","sources":["../src/registries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB;;;;;;EAE7B,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;EAElC,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;EAE9B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/registries.js

@@ -0,0 +1,11 @@
+import { z } from "zod";
+export const NodeTypesDtoSchema = z.object({
+    items: z.array(z.string())
+});
+export const ConditionNamesDtoSchema = z.object({
+    items: z.array(z.string())
+});
+export const AgentTypesDtoSchema = z.object({
+    items: z.array(z.string())
+});
+//# sourceMappingURL=registries.js.map

package/dist/registries.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registries.js","sourceRoot":"","sources":["../src/registries.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;CAC3B,CAAC,CAAC"}

package/dist/router.d.ts

@@ -0,0 +1,48 @@
+import { z } from "zod";
+/** The LLM router's decision for a (knowledge base, capability tier, caller) triple. */
+export declare const RouterDecisionDtoSchema: z.ZodObject<{
+    namespace: z.ZodString;
+    tier: z.ZodString;
+    /** Resolved provider + model (a per-base pin overrides the tier default). */
+    provider: z.ZodString;
+    model: z.ZodString;
+    /** True when the model came from the recommended per-tier default (not a pin/override). */
+    recommended: z.ZodBoolean;
+    /** True when a per-namespace model pin was applied. */
+    pinned: z.ZodBoolean;
+    /** Caller's effective permissions on this knowledge base. */
+    canRead: z.ZodBoolean;
+    canWrite: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    provider: string;
+    tier: string;
+    model: string;
+    namespace: string;
+    canRead: boolean;
+    canWrite: boolean;
+    recommended: boolean;
+    pinned: boolean;
+}, {
+    provider: string;
+    tier: string;
+    model: string;
+    namespace: string;
+    canRead: boolean;
+    canWrite: boolean;
+    recommended: boolean;
+    pinned: boolean;
+}>;
+/** Body for pinning a namespace's model/provider (omit a field to leave it tier-resolved). */
+export declare const SetModelPolicyDtoSchema: z.ZodObject<{
+    provider: z.ZodOptional<z.ZodString>;
+    model: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    provider?: string | undefined;
+    model?: string | undefined;
+}, {
+    provider?: string | undefined;
+    model?: string | undefined;
+}>;
+export type RouterDecisionDto = z.infer<typeof RouterDecisionDtoSchema>;
+export type SetModelPolicyDto = z.infer<typeof SetModelPolicyDtoSchema>;
+//# sourceMappingURL=router.d.ts.map

package/dist/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../src/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wFAAwF;AACxF,eAAO,MAAM,uBAAuB;;;IAGlC,6EAA6E;;;IAG7E,2FAA2F;;IAE3F,uDAAuD;;IAEvD,6DAA6D;;;;;;;;;;;;;;;;;;;;;EAG7D,CAAC;AAEH,8FAA8F;AAC9F,eAAO,MAAM,uBAAuB;;;;;;;;;EAGlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/router.js

@@ -0,0 +1,22 @@
+import { z } from "zod";
+/** The LLM router's decision for a (knowledge base, capability tier, caller) triple. */
+export const RouterDecisionDtoSchema = z.object({
+    namespace: z.string().min(1),
+    tier: z.string(),
+    /** Resolved provider + model (a per-base pin overrides the tier default). */
+    provider: z.string(),
+    model: z.string(),
+    /** True when the model came from the recommended per-tier default (not a pin/override). */
+    recommended: z.boolean(),
+    /** True when a per-namespace model pin was applied. */
+    pinned: z.boolean(),
+    /** Caller's effective permissions on this knowledge base. */
+    canRead: z.boolean(),
+    canWrite: z.boolean()
+});
+/** Body for pinning a namespace's model/provider (omit a field to leave it tier-resolved). */
+export const SetModelPolicyDtoSchema = z.object({
+    provider: z.string().min(1).optional(),
+    model: z.string().min(1).optional()
+});
+//# sourceMappingURL=router.js.map

package/dist/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../src/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,wFAAwF;AACxF,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,6EAA6E;IAC7E,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,2FAA2F;IAC3F,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,uDAAuD;IACvD,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,6DAA6D;IAC7D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;CACtB,CAAC,CAAC;AAEH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC"}

package/dist/runs.d.ts

@@ -0,0 +1,270 @@
+import { z } from "zod";
+export declare const CreateRunDtoSchema: z.ZodObject<{
+    graphId: z.ZodString;
+    initialData: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    graphId: string;
+    initialData: Record<string, unknown>;
+}, {
+    graphId: string;
+    initialData?: Record<string, unknown> | undefined;
+}>;
+export declare const RunDtoSchema: z.ZodObject<{
+    id: z.ZodString;
+    graphId: z.ZodString;
+    status: z.ZodEnum<["idle", "running", "suspended", "completed", "failed", "rejected", "cancelled"]>;
+    currentNodeId: z.ZodOptional<z.ZodString>;
+    channels: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+    version: z.ZodNumber;
+    checkpointId: z.ZodOptional<z.ZodString>;
+    /** Owning tenant (tenancy). Optional for pre-tenancy rows backfilled to `default`. */
+    tenantId: z.ZodOptional<z.ZodString>;
+    /** Id of the principal who started the run. */
+    createdBy: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+    id: string;
+    createdAt: string;
+    version: number;
+    channels: Record<string, unknown>;
+    graphId: string;
+    updatedAt: string;
+    tenantId?: string | undefined;
+    createdBy?: string | undefined;
+    currentNodeId?: string | undefined;
+    checkpointId?: string | undefined;
+}, {
+    status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+    id: string;
+    createdAt: string;
+    version: number;
+    channels: Record<string, unknown>;
+    graphId: string;
+    updatedAt: string;
+    tenantId?: string | undefined;
+    createdBy?: string | undefined;
+    currentNodeId?: string | undefined;
+    checkpointId?: string | undefined;
+}>;
+/** Lightweight row for the runs list — no channels, cheap to query at scale. */
+export declare const RunSummaryDtoSchema: z.ZodObject<{
+    id: z.ZodString;
+    graphId: z.ZodString;
+    status: z.ZodEnum<["idle", "running", "suspended", "completed", "failed", "rejected", "cancelled"]>;
+    currentNodeId: z.ZodNullable<z.ZodString>;
+    tenantId: z.ZodOptional<z.ZodString>;
+    createdBy: z.ZodOptional<z.ZodString>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+    id: string;
+    createdAt: string;
+    graphId: string;
+    currentNodeId: string | null;
+    updatedAt: string;
+    tenantId?: string | undefined;
+    createdBy?: string | undefined;
+}, {
+    status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+    id: string;
+    createdAt: string;
+    graphId: string;
+    currentNodeId: string | null;
+    updatedAt: string;
+    tenantId?: string | undefined;
+    createdBy?: string | undefined;
+}>;
+export declare const RunListDtoSchema: z.ZodObject<{
+    items: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        graphId: z.ZodString;
+        status: z.ZodEnum<["idle", "running", "suspended", "completed", "failed", "rejected", "cancelled"]>;
+        currentNodeId: z.ZodNullable<z.ZodString>;
+        tenantId: z.ZodOptional<z.ZodString>;
+        createdBy: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+        id: string;
+        createdAt: string;
+        graphId: string;
+        currentNodeId: string | null;
+        updatedAt: string;
+        tenantId?: string | undefined;
+        createdBy?: string | undefined;
+    }, {
+        status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+        id: string;
+        createdAt: string;
+        graphId: string;
+        currentNodeId: string | null;
+        updatedAt: string;
+        tenantId?: string | undefined;
+        createdBy?: string | undefined;
+    }>, "many">;
+    total: z.ZodNumber;
+    limit: z.ZodNumber;
+    offset: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    items: {
+        status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+        id: string;
+        createdAt: string;
+        graphId: string;
+        currentNodeId: string | null;
+        updatedAt: string;
+        tenantId?: string | undefined;
+        createdBy?: string | undefined;
+    }[];
+    total: number;
+    limit: number;
+    offset: number;
+}, {
+    items: {
+        status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+        id: string;
+        createdAt: string;
+        graphId: string;
+        currentNodeId: string | null;
+        updatedAt: string;
+        tenantId?: string | undefined;
+        createdBy?: string | undefined;
+    }[];
+    total: number;
+    limit: number;
+    offset: number;
+}>;
+/** Query params arrive as strings over HTTP — coerce numerics. */
+export declare const ListRunsQueryDtoSchema: z.ZodObject<{
+    status: z.ZodOptional<z.ZodEnum<["idle", "running", "suspended", "completed", "failed", "rejected", "cancelled"]>>;
+    graphId: z.ZodOptional<z.ZodString>;
+    limit: z.ZodDefault<z.ZodNumber>;
+    offset: z.ZodDefault<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    limit: number;
+    offset: number;
+    status?: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled" | undefined;
+    graphId?: string | undefined;
+}, {
+    status?: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled" | undefined;
+    graphId?: string | undefined;
+    limit?: number | undefined;
+    offset?: number | undefined;
+}>;
+export declare const InterruptRunDtoSchema: z.ZodObject<{
+    nodeId: z.ZodString;
+    when: z.ZodEnum<["before", "after"]>;
+}, "strip", z.ZodTypeAny, {
+    nodeId: string;
+    when: "before" | "after";
+}, {
+    nodeId: string;
+    when: "before" | "after";
+}>;
+/**
+ * Channel keys the runtime governance machinery owns: `__approvedTools` carries the
+ * human-granted tools an agent may run past an approval gate, and `__approvalIds`
+ * carries the pending ApprovalEngine request ids. Allowing a client to PATCH these
+ * directly would be a self-approval back door (forge an unlock, or erase the pending
+ * ids that the resume gate checks), so they are rejected by the patch DTO below. The
+ * literals mirror `@ailu-ai/graph-sdk`'s `APPROVED_TOOLS_CHANNEL` / `APPROVAL_IDS_CHANNEL`;
+ * contracts stays dependency-free of the SDK, so they are duplicated as constants here.
+ */
+export declare const RESERVED_PATCH_CHANNELS: readonly ["__approvedTools", "__approvalIds"];
+export declare const PatchRunStateDtoSchema: z.ZodObject<{
+    patch: z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodUnknown>, Record<string, unknown>, Record<string, unknown>>;
+    resumeFrom: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    patch: Record<string, unknown>;
+    resumeFrom?: string | undefined;
+}, {
+    patch: Record<string, unknown>;
+    resumeFrom?: string | undefined;
+}>;
+export declare const ReplayRunDtoSchema: z.ZodObject<{
+    checkpointId: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    checkpointId: string;
+}, {
+    checkpointId: string;
+}>;
+export declare const CheckpointDtoSchema: z.ZodObject<{
+    id: z.ZodString;
+    runId: z.ZodString;
+    graphState: z.ZodObject<{
+        runId: z.ZodString;
+        graphId: z.ZodString;
+        currentNodeId: z.ZodString;
+        status: z.ZodEnum<["idle", "running", "suspended", "completed", "failed", "rejected", "cancelled"]>;
+        channels: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        version: z.ZodNumber;
+        checkpointId: z.ZodOptional<z.ZodString>;
+        createdAt: z.ZodString;
+        updatedAt: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+        runId: string;
+        createdAt: string;
+        version: number;
+        channels: Record<string, unknown>;
+        graphId: string;
+        currentNodeId: string;
+        updatedAt: string;
+        checkpointId?: string | undefined;
+    }, {
+        status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+        runId: string;
+        createdAt: string;
+        version: number;
+        channels: Record<string, unknown>;
+        graphId: string;
+        currentNodeId: string;
+        updatedAt: string;
+        checkpointId?: string | undefined;
+    }>;
+    createdAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    runId: string;
+    createdAt: string;
+    graphState: {
+        status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+        runId: string;
+        createdAt: string;
+        version: number;
+        channels: Record<string, unknown>;
+        graphId: string;
+        currentNodeId: string;
+        updatedAt: string;
+        checkpointId?: string | undefined;
+    };
+}, {
+    id: string;
+    runId: string;
+    createdAt: string;
+    graphState: {
+        status: "rejected" | "running" | "completed" | "failed" | "idle" | "suspended" | "cancelled";
+        runId: string;
+        createdAt: string;
+        version: number;
+        channels: Record<string, unknown>;
+        graphId: string;
+        currentNodeId: string;
+        updatedAt: string;
+        checkpointId?: string | undefined;
+    };
+}>;
+export type CreateRunDto = z.infer<typeof CreateRunDtoSchema>;
+export type RunDto = z.infer<typeof RunDtoSchema>;
+export type RunSummaryDto = z.infer<typeof RunSummaryDtoSchema>;
+export type RunListDto = z.infer<typeof RunListDtoSchema>;
+export type ListRunsQueryDto = z.infer<typeof ListRunsQueryDtoSchema>;
+export type InterruptRunDto = z.infer<typeof InterruptRunDtoSchema>;
+export type PatchRunStateDto = z.infer<typeof PatchRunStateDtoSchema>;
+export type ReplayRunDto = z.infer<typeof ReplayRunDtoSchema>;
+export type CheckpointDto = z.infer<typeof CheckpointDtoSchema>;
+//# sourceMappingURL=runs.d.ts.map

package/dist/runs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runs.d.ts","sourceRoot":"","sources":["../src/runs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAyBxB,eAAO,MAAM,kBAAkB;;;;;;;;;EAG7B,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;IAQvB,sFAAsF;;IAEtF,+CAA+C;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAI/C,CAAC;AAEH,gFAAgF;AAChF,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS9B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAK3B,CAAC;AAEH,kEAAkE;AAClE,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;EAKjC,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;;;;;EAGhC,CAAC;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,uBAAuB,+CAAgD,CAAC;AAErF,eAAO,MAAM,sBAAsB;;;;;;;;;EAYjC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;EAE7B,CAAC;AAEH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAe9B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAClD,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AACpE,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AACtE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}