@ailu-ai/contracts 2.0.0

package/dist/fleet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fleet.js","sourceRoot":"","sources":["../src/fleet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAEzE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,kBAAkB;IAC1B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACrC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC;IACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACrC,CAAC,CAAC;AAOH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,MAAM,EAAE,kBAAkB;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,MAAM,EAAE,kBAAkB;CAC3B,CAAC,CAAC"}

package/dist/fs-policy.d.ts

@@ -0,0 +1,101 @@
+import { z } from "zod";
+/**
+ * The governed virtual filesystem per-path permission policy (ADR 0024 phase 2d) —
+ * the API↔Studio boundary for managing fs access, modeled on the per-namespace PII
+ * policy (see `pii.ts`). Rules are owner-only; the control plane compiles a run's rules
+ * into the engine's `EngineSpec.fsPolicy` (fail-closed: an unmatched path → `read`).
+ */
+/** A filesystem permission verb: `deny` < `read` < `gate` < `write`. */
+export declare const FsPermVerbSchema: z.ZodEnum<["deny", "read", "write", "gate"]>;
+export type FsPermVerb = z.infer<typeof FsPermVerbSchema>;
+/** One per-path rule: a glob (`*` within a segment, `**` across) mapped to a verb. */
+export declare const FsPathRuleSchema: z.ZodObject<{
+    glob: z.ZodString;
+    verb: z.ZodEnum<["deny", "read", "write", "gate"]>;
+}, "strip", z.ZodTypeAny, {
+    glob: string;
+    verb: "write" | "deny" | "read" | "gate";
+}, {
+    glob: string;
+    verb: "write" | "deny" | "read" | "gate";
+}>;
+export type FsPathRule = z.infer<typeof FsPathRuleSchema>;
+/** Owner-only PUT body: replace a namespace's fs path rules. */
+export declare const SetFsPolicyDtoSchema: z.ZodObject<{
+    rules: z.ZodArray<z.ZodObject<{
+        glob: z.ZodString;
+        verb: z.ZodEnum<["deny", "read", "write", "gate"]>;
+    }, "strip", z.ZodTypeAny, {
+        glob: string;
+        verb: "write" | "deny" | "read" | "gate";
+    }, {
+        glob: string;
+        verb: "write" | "deny" | "read" | "gate";
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    rules: {
+        glob: string;
+        verb: "write" | "deny" | "read" | "gate";
+    }[];
+}, {
+    rules: {
+        glob: string;
+        verb: "write" | "deny" | "read" | "gate";
+    }[];
+}>;
+export type SetFsPolicyDto = z.infer<typeof SetFsPolicyDtoSchema>;
+/** The resolved policy for a namespace, with server-computed capability flags. */
+export declare const FsPolicyDtoSchema: z.ZodObject<{
+    namespace: z.ZodString;
+    rules: z.ZodArray<z.ZodObject<{
+        glob: z.ZodString;
+        verb: z.ZodEnum<["deny", "read", "write", "gate"]>;
+    }, "strip", z.ZodTypeAny, {
+        glob: string;
+        verb: "write" | "deny" | "read" | "gate";
+    }, {
+        glob: string;
+        verb: "write" | "deny" | "read" | "gate";
+    }>, "many">;
+    /** `true` when the caller's tenant role may edit this policy (owner-only). */
+    canEditPolicy: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    namespace: string;
+    rules: {
+        glob: string;
+        verb: "write" | "deny" | "read" | "gate";
+    }[];
+    canEditPolicy: boolean;
+}, {
+    namespace: string;
+    rules: {
+        glob: string;
+        verb: "write" | "deny" | "read" | "gate";
+    }[];
+    canEditPolicy: boolean;
+}>;
+export type FsPolicyDto = z.infer<typeof FsPolicyDtoSchema>;
+/** Resolve a single path against a namespace's policy (for the editor / a preview). */
+export declare const FsResolvedPolicyDtoSchema: z.ZodObject<{
+    path: z.ZodString;
+    verb: z.ZodEnum<["deny", "read", "write", "gate"]>;
+    canRead: z.ZodBoolean;
+    /** `true` when `verb` is `write` or `gate`. */
+    canWrite: z.ZodBoolean;
+    /** `true` when `verb` is `gate` (a write routes through an approval). */
+    requiresGate: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    verb: "write" | "deny" | "read" | "gate";
+    canRead: boolean;
+    canWrite: boolean;
+    requiresGate: boolean;
+}, {
+    path: string;
+    verb: "write" | "deny" | "read" | "gate";
+    canRead: boolean;
+    canWrite: boolean;
+    requiresGate: boolean;
+}>;
+export type FsResolvedPolicyDto = z.infer<typeof FsResolvedPolicyDtoSchema>;
+//# sourceMappingURL=fs-policy.d.ts.map

package/dist/fs-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-policy.d.ts","sourceRoot":"","sources":["../src/fs-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AAEH,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,8CAA4C,CAAC;AAC1E,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,sFAAsF;AACtF,eAAO,MAAM,gBAAgB;;;;;;;;;EAG3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,gEAAgE;AAChE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;EAE/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,kFAAkF;AAClF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;IAG5B,8EAA8E;;;;;;;;;;;;;;;;EAE9E,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,uFAAuF;AACvF,eAAO,MAAM,yBAAyB;;;;IAIpC,+CAA+C;;IAE/C,yEAAyE;;;;;;;;;;;;;;EAEzE,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/fs-policy.js

@@ -0,0 +1,36 @@
+import { z } from "zod";
+/**
+ * The governed virtual filesystem per-path permission policy (ADR 0024 phase 2d) —
+ * the API↔Studio boundary for managing fs access, modeled on the per-namespace PII
+ * policy (see `pii.ts`). Rules are owner-only; the control plane compiles a run's rules
+ * into the engine's `EngineSpec.fsPolicy` (fail-closed: an unmatched path → `read`).
+ */
+/** A filesystem permission verb: `deny` < `read` < `gate` < `write`. */
+export const FsPermVerbSchema = z.enum(["deny", "read", "write", "gate"]);
+/** One per-path rule: a glob (`*` within a segment, `**` across) mapped to a verb. */
+export const FsPathRuleSchema = z.object({
+    glob: z.string().min(1),
+    verb: FsPermVerbSchema
+});
+/** Owner-only PUT body: replace a namespace's fs path rules. */
+export const SetFsPolicyDtoSchema = z.object({
+    rules: z.array(FsPathRuleSchema)
+});
+/** The resolved policy for a namespace, with server-computed capability flags. */
+export const FsPolicyDtoSchema = z.object({
+    namespace: z.string(),
+    rules: z.array(FsPathRuleSchema),
+    /** `true` when the caller's tenant role may edit this policy (owner-only). */
+    canEditPolicy: z.boolean()
+});
+/** Resolve a single path against a namespace's policy (for the editor / a preview). */
+export const FsResolvedPolicyDtoSchema = z.object({
+    path: z.string(),
+    verb: FsPermVerbSchema,
+    canRead: z.boolean(),
+    /** `true` when `verb` is `write` or `gate`. */
+    canWrite: z.boolean(),
+    /** `true` when `verb` is `gate` (a write routes through an approval). */
+    requiresGate: z.boolean()
+});
+//# sourceMappingURL=fs-policy.js.map

package/dist/fs-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-policy.js","sourceRoot":"","sources":["../src/fs-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AAEH,wEAAwE;AACxE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAG1E,sFAAsF;AACtF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,gBAAgB;CACvB,CAAC,CAAC;AAGH,gEAAgE;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACjC,CAAC,CAAC;AAGH,kFAAkF;AAClF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChC,8EAA8E;IAC9E,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;CAC3B,CAAC,CAAC;AAGH,uFAAuF;AACvF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,gBAAgB;IACtB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,+CAA+C;IAC/C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,yEAAyE;IACzE,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;CAC1B,CAAC,CAAC"}

package/dist/fs-policy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=fs-policy.test.d.ts.map

package/dist/fs-policy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-policy.test.d.ts","sourceRoot":"","sources":["../src/fs-policy.test.ts"],"names":[],"mappings":""}

package/dist/fs-policy.test.js

@@ -0,0 +1,35 @@
+import { describe, expect, it } from "vitest";
+import { FsResolvedPolicyDtoSchema, SetFsPolicyDtoSchema, FsPathRuleSchema } from "./fs-policy.js";
+/**
+ * The fs policy contract is the API↔Studio boundary for the owner-only per-path
+ * permission rules (ADR 0024 phase 2d). Verbs are a closed set; a resolved policy
+ * carries server-computed capability flags.
+ */
+describe("@ailu-ai/contracts — fs-policy", () => {
+    it("parses a set-policy body with valid rules", () => {
+        const body = SetFsPolicyDtoSchema.parse({
+            rules: [
+                { glob: "scratch/**", verb: "write" },
+                { glob: "review/**", verb: "gate" },
+                { glob: "secret/**", verb: "deny" }
+            ]
+        });
+        expect(body.rules).toHaveLength(3);
+        expect(body.rules[1]?.verb).toBe("gate");
+    });
+    it("rejects an unknown verb", () => {
+        expect(FsPathRuleSchema.safeParse({ glob: "x/**", verb: "execute" }).success).toBe(false);
+    });
+    it("parses a resolved policy with capability flags", () => {
+        const resolved = FsResolvedPolicyDtoSchema.parse({
+            path: "review/doc.md",
+            verb: "gate",
+            canRead: true,
+            canWrite: true,
+            requiresGate: true
+        });
+        expect(resolved.requiresGate).toBe(true);
+        expect(resolved.canWrite).toBe(true);
+    });
+});
+//# sourceMappingURL=fs-policy.test.js.map

package/dist/fs-policy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs-policy.test.js","sourceRoot":"","sources":["../src/fs-policy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AAExB;;;;GAIG;AACH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC;YACtC,KAAK,EAAE;gBACL,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE;gBACrC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE;gBACnC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE;aACpC;SACF,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAC;YAC/C,IAAI,EAAE,eAAe;YACrB,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,IAAI;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/fs.d.ts

@@ -0,0 +1,182 @@
+import { z } from "zod";
+/**
+ * The wire contract for the external durable filesystem backend (ADR 0024 phase 2e).
+ * When `AILU_FS_BACKEND_URL` is set, the Rust engine POSTs `{ op, runId, ... }` to the
+ * service and expects either the op's result or `{ error: FsError }`. These schemas type
+ * that boundary (for a service implementer and for Studio rendering of fs content/diffs);
+ * they mirror the Rust `ailu-fs-backend` types 1:1 (camelCase).
+ */
+export declare const ARTIFACT_MEDIA_TYPES: readonly ["application/json", "text/plain", "text/markdown", "application/octet-stream"];
+export declare const ArtifactMediaTypeSchema: z.ZodEnum<["application/json", "text/plain", "text/markdown", "application/octet-stream"]>;
+/** A file's content (read result). `content` is UTF-8 text, JSON text, or base64 by mediaType. */
+export declare const FileContentDtoSchema: z.ZodObject<{
+    path: z.ZodString;
+    content: z.ZodString;
+    mediaType: z.ZodEnum<["application/json", "text/plain", "text/markdown", "application/octet-stream"]>;
+    version: z.ZodNumber;
+    createdAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    content: string;
+    createdAt: string;
+    version: number;
+    mediaType: "application/json" | "text/plain" | "text/markdown" | "application/octet-stream";
+}, {
+    path: string;
+    content: string;
+    createdAt: string;
+    version: number;
+    mediaType: "application/json" | "text/plain" | "text/markdown" | "application/octet-stream";
+}>;
+export type FileContentDto = z.infer<typeof FileContentDtoSchema>;
+/** One `ls` entry; `isDir: true` is a synthetic directory over the flat keyspace. */
+export declare const FileEntryDtoSchema: z.ZodObject<{
+    path: z.ZodString;
+    isDir: z.ZodBoolean;
+    version: z.ZodOptional<z.ZodNumber>;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    isDir: boolean;
+    version?: number | undefined;
+}, {
+    path: string;
+    isDir: boolean;
+    version?: number | undefined;
+}>;
+export type FileEntryDto = z.infer<typeof FileEntryDtoSchema>;
+/** A line-based edit op (1-indexed inclusive), tagged by `op`. */
+export declare const EditOpDtoSchema: z.ZodDiscriminatedUnion<"op", [z.ZodObject<{
+    op: z.ZodLiteral<"replace">;
+    startLine: z.ZodNumber;
+    endLine: z.ZodNumber;
+    text: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    text: string;
+    op: "replace";
+    startLine: number;
+    endLine: number;
+}, {
+    text: string;
+    op: "replace";
+    startLine: number;
+    endLine: number;
+}>, z.ZodObject<{
+    op: z.ZodLiteral<"insert">;
+    afterLine: z.ZodNumber;
+    text: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    text: string;
+    op: "insert";
+    afterLine: number;
+}, {
+    text: string;
+    op: "insert";
+    afterLine: number;
+}>, z.ZodObject<{
+    op: z.ZodLiteral<"delete">;
+    startLine: z.ZodNumber;
+    endLine: z.ZodNumber;
+}, "strip", z.ZodTypeAny, {
+    op: "delete";
+    startLine: number;
+    endLine: number;
+}, {
+    op: "delete";
+    startLine: number;
+    endLine: number;
+}>]>;
+export type EditOpDto = z.infer<typeof EditOpDtoSchema>;
+/** A `grep` hit. */
+export declare const GrepMatchDtoSchema: z.ZodObject<{
+    path: z.ZodString;
+    lineNumber: z.ZodNumber;
+    lineText: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    lineNumber: number;
+    lineText: string;
+}, {
+    path: string;
+    lineNumber: number;
+    lineText: string;
+}>;
+export type GrepMatchDto = z.infer<typeof GrepMatchDtoSchema>;
+/** A filesystem error, tagged by `kind` (mirrors the Rust `FsError`). */
+export declare const FsErrorDtoSchema: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"notFound">;
+    path: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    kind: "notFound";
+}, {
+    path: string;
+    kind: "notFound";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"permissionDenied">;
+    action: z.ZodString;
+    path: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    path: string;
+    action: string;
+    kind: "permissionDenied";
+}, {
+    path: string;
+    action: string;
+    kind: "permissionDenied";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"invalidPath">;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+    kind: "invalidPath";
+}, {
+    reason: string;
+    kind: "invalidPath";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"invalidEdit">;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+    kind: "invalidEdit";
+}, {
+    reason: string;
+    kind: "invalidEdit";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"notSupported">;
+}, "strip", z.ZodTypeAny, {
+    kind: "notSupported";
+}, {
+    kind: "notSupported";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"serviceUnavailable">;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+    kind: "serviceUnavailable";
+}, {
+    reason: string;
+    kind: "serviceUnavailable";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"backend">;
+    reason: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    reason: string;
+    kind: "backend";
+}, {
+    reason: string;
+    kind: "backend";
+}>]>;
+export type FsErrorDto = z.infer<typeof FsErrorDtoSchema>;
+/** The request envelope POSTed to the external backend: `{ op, runId, ...args }`. */
+export declare const FsBackendRequestDtoSchema: z.ZodObject<{
+    op: z.ZodEnum<["read", "write", "edit", "delete", "rename", "ls", "glob", "grep"]>;
+    runId: z.ZodString;
+}, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+    op: z.ZodEnum<["read", "write", "edit", "delete", "rename", "ls", "glob", "grep"]>;
+    runId: z.ZodString;
+}, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+    op: z.ZodEnum<["read", "write", "edit", "delete", "rename", "ls", "glob", "grep"]>;
+    runId: z.ZodString;
+}, z.ZodTypeAny, "passthrough">>;
+export type FsBackendRequestDto = z.infer<typeof FsBackendRequestDtoSchema>;
+//# sourceMappingURL=fs.d.ts.map

package/dist/fs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.d.ts","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,eAAO,MAAM,oBAAoB,0FAKvB,CAAC;AACX,eAAO,MAAM,uBAAuB,4FAA+B,CAAC;AAEpE,kGAAkG;AAClG,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;EAM/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,qFAAqF;AACrF,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAI7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,kEAAkE;AAClE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAI1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,oBAAoB;AACpB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAI7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,yEAAyE;AACzE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAQ3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,qFAAqF;AACrF,eAAO,MAAM,yBAAyB;;;;;;;;;gCAKtB,CAAC;AACjB,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/fs.js

@@ -0,0 +1,59 @@
+import { z } from "zod";
+/**
+ * The wire contract for the external durable filesystem backend (ADR 0024 phase 2e).
+ * When `AILU_FS_BACKEND_URL` is set, the Rust engine POSTs `{ op, runId, ... }` to the
+ * service and expects either the op's result or `{ error: FsError }`. These schemas type
+ * that boundary (for a service implementer and for Studio rendering of fs content/diffs);
+ * they mirror the Rust `ailu-fs-backend` types 1:1 (camelCase).
+ */
+export const ARTIFACT_MEDIA_TYPES = [
+    "application/json",
+    "text/plain",
+    "text/markdown",
+    "application/octet-stream"
+];
+export const ArtifactMediaTypeSchema = z.enum(ARTIFACT_MEDIA_TYPES);
+/** A file's content (read result). `content` is UTF-8 text, JSON text, or base64 by mediaType. */
+export const FileContentDtoSchema = z.object({
+    path: z.string(),
+    content: z.string(),
+    mediaType: ArtifactMediaTypeSchema,
+    version: z.number().int(),
+    createdAt: z.string()
+});
+/** One `ls` entry; `isDir: true` is a synthetic directory over the flat keyspace. */
+export const FileEntryDtoSchema = z.object({
+    path: z.string(),
+    isDir: z.boolean(),
+    version: z.number().int().optional()
+});
+/** A line-based edit op (1-indexed inclusive), tagged by `op`. */
+export const EditOpDtoSchema = z.discriminatedUnion("op", [
+    z.object({ op: z.literal("replace"), startLine: z.number().int(), endLine: z.number().int(), text: z.string() }),
+    z.object({ op: z.literal("insert"), afterLine: z.number().int(), text: z.string() }),
+    z.object({ op: z.literal("delete"), startLine: z.number().int(), endLine: z.number().int() })
+]);
+/** A `grep` hit. */
+export const GrepMatchDtoSchema = z.object({
+    path: z.string(),
+    lineNumber: z.number().int(),
+    lineText: z.string()
+});
+/** A filesystem error, tagged by `kind` (mirrors the Rust `FsError`). */
+export const FsErrorDtoSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("notFound"), path: z.string() }),
+    z.object({ kind: z.literal("permissionDenied"), action: z.string(), path: z.string() }),
+    z.object({ kind: z.literal("invalidPath"), reason: z.string() }),
+    z.object({ kind: z.literal("invalidEdit"), reason: z.string() }),
+    z.object({ kind: z.literal("notSupported") }),
+    z.object({ kind: z.literal("serviceUnavailable"), reason: z.string() }),
+    z.object({ kind: z.literal("backend"), reason: z.string() })
+]);
+/** The request envelope POSTed to the external backend: `{ op, runId, ...args }`. */
+export const FsBackendRequestDtoSchema = z
+    .object({
+    op: z.enum(["read", "write", "edit", "delete", "rename", "ls", "glob", "grep"]),
+    runId: z.string()
+})
+    .passthrough();
+//# sourceMappingURL=fs.js.map

package/dist/fs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.js","sourceRoot":"","sources":["../src/fs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;GAMG;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,kBAAkB;IAClB,YAAY;IACZ,eAAe;IACf,0BAA0B;CAClB,CAAC;AACX,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAEpE,kGAAkG;AAClG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,uBAAuB;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,qFAAqF;AACrF,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;IAClB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC;AAGH,kEAAkE;AAClE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IACxD,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChH,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACpF,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC;CAC9F,CAAC,CAAC;AAGH,oBAAoB;AACpB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;CACrB,CAAC,CAAC;AAGH,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC3D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACvF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAChE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;IAC7C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IACvE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;CAC7D,CAAC,CAAC;AAGH,qFAAqF;AACrF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC;KACD,WAAW,EAAE,CAAC"}

package/dist/fs.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=fs.test.d.ts.map

package/dist/fs.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.test.d.ts","sourceRoot":"","sources":["../src/fs.test.ts"],"names":[],"mappings":""}

package/dist/fs.test.js

@@ -0,0 +1,35 @@
+import { describe, expect, it } from "vitest";
+import { EditOpDtoSchema, FileContentDtoSchema, FsBackendRequestDtoSchema, FsErrorDtoSchema } from "./fs.js";
+/**
+ * The external fs backend wire contract (ADR 0024 phase 2e). These schemas mirror the
+ * Rust `ailu-fs-backend` types 1:1 — a round-trip here guards the engine↔service
+ * boundary (and Studio's rendering of fs content / diffs).
+ */
+describe("@ailu-ai/contracts — fs (external backend wire)", () => {
+    it("parses a FileContent read result", () => {
+        const file = FileContentDtoSchema.parse({
+            path: "notes.md",
+            content: "hi",
+            mediaType: "text/markdown",
+            version: 2,
+            createdAt: "t"
+        });
+        expect(file.version).toBe(2);
+    });
+    it("parses the edit-op discriminated union and rejects an unknown op", () => {
+        expect(EditOpDtoSchema.parse({ op: "replace", startLine: 1, endLine: 1, text: "x" }).op).toBe("replace");
+        expect(EditOpDtoSchema.parse({ op: "insert", afterLine: 0, text: "x" }).op).toBe("insert");
+        expect(EditOpDtoSchema.safeParse({ op: "truncate", startLine: 1, endLine: 1 }).success).toBe(false);
+    });
+    it("parses a tagged FsError", () => {
+        const err = FsErrorDtoSchema.parse({ kind: "notFound", path: "a/b" });
+        expect(err.kind).toBe("notFound");
+        expect(FsErrorDtoSchema.safeParse({ kind: "bogus" }).success).toBe(false);
+    });
+    it("accepts a backend request envelope with op-specific args", () => {
+        const req = FsBackendRequestDtoSchema.parse({ op: "write", runId: "run-1", path: "scratch/a", content: "x" });
+        expect(req.op).toBe("write");
+        expect(FsBackendRequestDtoSchema.safeParse({ op: "exec", runId: "r" }).success).toBe(false);
+    });
+});
+//# sourceMappingURL=fs.test.js.map

package/dist/fs.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fs.test.js","sourceRoot":"","sources":["../src/fs.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,yBAAyB,EACzB,gBAAgB,EACjB,MAAM,SAAS,CAAC;AAEjB;;;;GAIG;AACH,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC;YACtC,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,eAAe;YAC1B,OAAO,EAAE,CAAC;YACV,SAAS,EAAE,GAAG;SACf,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACzG,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC3F,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,GAAG,GAAG,yBAAyB,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9G,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,CAAC,yBAAyB,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}