@alneas/eaos-server 0.0.0-stage → 0.2.0

package/dist/extensions/index.js

@@ -0,0 +1,95 @@
+// src/extensions/index.ts
+import { Hono } from "hono";
+function validateExtensions(values) {
+  const ids = /* @__PURE__ */ new Set();
+  const plugins = /* @__PURE__ */ new Set();
+  const tenants = /* @__PURE__ */ new Set();
+  return values.map((value) => {
+    const item = value;
+    if (!item || item.apiVersion !== 1 || typeof item.id !== "string" || !item.id.trim() || !Array.isArray(item.tenantIds) || !item.tenantIds.length || item.tenantIds.some((id) => typeof id !== "string" || !id.trim() || id !== id.trim() || id === "*") || item.manifests !== void 0 && !Array.isArray(item.manifests) || item.lifecycle !== void 0 && !Array.isArray(item.lifecycle) || item.routes !== void 0 && !Array.isArray(item.routes)) {
+      throw new Error("Invalid platform extension: version, id and explicit tenantIds are required");
+    }
+    if (ids.has(item.id)) throw new Error(`Duplicate extension: ${item.id}`);
+    ids.add(item.id);
+    for (const tenant of item.userContext ? item.tenantIds : []) {
+      if (tenants.has(tenant)) throw new Error(`Conflicting extension tenant: ${tenant}`);
+      tenants.add(tenant);
+    }
+    for (const route of item.routes ?? []) {
+      if (typeof route.prefix !== "string" || !route.prefix.startsWith("/") || route.prefix.includes("*") || typeof route.moduleId !== "string" || !route.moduleId.trim() || typeof route.router?.fetch !== "function") throw new Error("Invalid extension route");
+    }
+    for (const manifest of item.manifests ?? []) {
+      if (plugins.has(manifest.id)) throw new Error(`Duplicate extension plugin: ${manifest.id}`);
+      plugins.add(manifest.id);
+      if (typeof item.routeFactories?.[manifest.id] !== "function") throw new Error(`Extension route factory required: ${manifest.id}`);
+    }
+    for (const id of Object.keys(item.routeFactories ?? {})) {
+      if (!(item.manifests ?? []).some((manifest) => manifest.id === id)) throw new Error(`Extension cannot override an official route factory: ${id}`);
+    }
+    return item;
+  });
+}
+function scopeExtensionFactories(item) {
+  return { ...item, routeFactories: Object.fromEntries(Object.entries(item.routeFactories ?? {}).map(([id, factory]) => [id, (...args) => {
+    const router = new Hono();
+    router.use("*", async (context, next) => {
+      if (!item.tenantIds.includes(String(context.get("tenantId") ?? ""))) return context.json({ error: "Tenant unavailable" }, 403);
+      return next();
+    });
+    return router.route("/", factory(...args));
+  }])) };
+}
+function scopeExtensionRoutes(extension, requireModule) {
+  return (extension.routes ?? []).map((route) => {
+    const router = new Hono();
+    router.use("*", async (context, next) => {
+      if (!extension.tenantIds.includes(String(context.get("tenantId") ?? ""))) return context.json({ error: "Tenant unavailable" }, 403);
+      return next();
+    });
+    router.use("*", requireModule(route.moduleId));
+    router.route("/", route.router);
+    return { prefix: route.prefix, router };
+  });
+}
+function mountExtensionRoutes(app, extensions, requireModule) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const extension of extensions) for (const route of scopeExtensionRoutes(extension, requireModule)) {
+    const group = groups.get(route.prefix) ?? [];
+    if (group.some((item) => item.tenantIds.some((tenant) => extension.tenantIds.includes(tenant)))) throw new Error("Conflicting extension API prefix for tenant");
+    group.push({ tenantIds: extension.tenantIds, router: route.router });
+    groups.set(route.prefix, group);
+  }
+  for (const [prefix, candidates] of groups) {
+    const dispatch = async (context) => {
+      const tenantId = String(context.get("tenantId") ?? "");
+      const selected = candidates.find((item) => item.tenantIds.includes(tenantId));
+      if (!selected) return context.json({ error: "Tenant unavailable" }, 403);
+      const child = new Hono();
+      child.use("*", async (nested, next) => {
+        for (const [key, value] of Object.entries(context.var)) nested.set(key, value);
+        return next();
+      });
+      child.route(prefix, selected.router);
+      return child.fetch(context.req.raw, context.env);
+    };
+    app.all(prefix, dispatch);
+    app.all(prefix.replace(/\/$/, "") + "/*", dispatch);
+  }
+}
+var PLATFORM_PLUGIN_AUTHORIZATION = "eaosPlatformPluginAuthorization";
+function getPlatformPluginAuthorization(context) {
+  const c = context;
+  const binding = c?.get?.(PLATFORM_PLUGIN_AUTHORIZATION) ?? c?.env?.[PLATFORM_PLUGIN_AUTHORIZATION];
+  if (!binding || typeof binding !== "object") return void 0;
+  const port = binding;
+  return typeof port.resolvePrincipal === "function" && typeof port.isPluginEnabled === "function" ? port : void 0;
+}
+export {
+  PLATFORM_PLUGIN_AUTHORIZATION,
+  getPlatformPluginAuthorization,
+  mountExtensionRoutes,
+  scopeExtensionFactories,
+  scopeExtensionRoutes,
+  validateExtensions
+};
+//# sourceMappingURL=index.js.map

package/dist/extensions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/extensions/index.ts"],"sourcesContent":["import { Hono, type Context, type MiddlewareHandler } from 'hono'\nimport type { PluginManifest } from '@alneas/eaos-core'\nimport type { PlatformContribution } from '@alneas/eaos-server/platform'\n/**\n * Plugin-manifest route factory supplied by trusted deployment composition.\n * @see PlatformExtension.\n */\nexport type HostRouteFactory = NonNullable<PluginManifest['createRoutes']>\n\n/**\n * Adds host route composition to a trusted platform contribution with explicit tenant scope.\n * @remarks Never populate this object from request input.\n * @see validateExtensions for a complete composition example.\n */\nexport interface PlatformExtension extends PlatformContribution {\n  /** Plugin-ID factories for every contributed manifest; may not override plugins absent from this contribution. */\n  routeFactories?: Record<string, HostRouteFactory>\n  /** Optional host API routes with an absolute, wildcard-free prefix, nonblank moduleId, and Hono router. */\n  routes?: Array<{\n    /** Absolute wildcard-free mount prefix; overlapping tenant contributions may not claim the same prefix. */\n    prefix: string\n    /** Nonblank module identity passed to the host requireModule factory after the extension tenant-scope check. */\n    moduleId: string\n    /** Trusted Hono child router wrapped with tenant-scope and live host module middleware during extension composition. */\n    router: Hono\n  }>\n  /** Optional request context resolver; contributions using it may not overlap tenant scope. Its result/authorization semantics belong to the host. */\n  userContext?: (context: Context) => Promise<unknown>\n}\n\n/**\n * Checks trusted extension shapes, IDs, route factories, and conflicting tenant/user-context contributions.\n * @param values - Deployment module values to validate; request input must not supply implementations.\n * @returns A new array containing the original validated objects; no deep clone or sandboxing occurs.\n * @throws For invalid version/ID/explicit tenant scopes, duplicate extension/plugin IDs, overlapping userContext tenant scopes, invalid routes, or missing/unauthorized route factories.\n * @remarks Independent plugins can share tenants. This validates composition constraints, not manifest internals or implementation safety.\n * @example\n * ```typescript\n * import { validateExtensions } from \"@alneas/eaos-server/extensions\";\n * const extensions = validateExtensions([{ apiVersion: 1, id: \"example\", tenantIds: [\"example\"] }]);\n * console.log(extensions.length); // 1\n * ```\n */\nexport function validateExtensions(values: unknown[]): PlatformExtension[] {\n  const ids = new Set<string>()\n  const plugins = new Set<string>()\n  const tenants = new Set<string>()\n  return values.map(value => {\n    const item = value as PlatformExtension\n    if (!item || item.apiVersion !== 1 || typeof item.id !== 'string' || !item.id.trim()\n      || !Array.isArray(item.tenantIds) || !item.tenantIds.length\n      || item.tenantIds.some(id => typeof id !== 'string' || !id.trim() || id !== id.trim() || id === '*')\n      || (item.manifests !== undefined && !Array.isArray(item.manifests))\n      || (item.lifecycle !== undefined && !Array.isArray(item.lifecycle))\n      || (item.routes !== undefined && !Array.isArray(item.routes))) {\n      throw new Error('Invalid platform extension: version, id and explicit tenantIds are required')\n    }\n    if (ids.has(item.id)) throw new Error(`Duplicate extension: ${item.id}`)\n    ids.add(item.id)\n    // Product identity overrides must remain unambiguous; independent plugins may share tenants.\n    for (const tenant of item.userContext ? item.tenantIds : []) {\n      if (tenants.has(tenant)) throw new Error(`Conflicting extension tenant: ${tenant}`)\n      tenants.add(tenant)\n    }\n    for (const route of item.routes ?? []) {\n      if (typeof route.prefix !== 'string' || !route.prefix.startsWith('/') || route.prefix.includes('*') || typeof route.moduleId !== 'string' || !route.moduleId.trim() || typeof route.router?.fetch !== 'function') throw new Error('Invalid extension route')\n    }\n    for (const manifest of item.manifests ?? []) {\n      if (plugins.has(manifest.id)) throw new Error(`Duplicate extension plugin: ${manifest.id}`)\n      plugins.add(manifest.id)\n      if (typeof item.routeFactories?.[manifest.id] !== 'function') throw new Error(`Extension route factory required: ${manifest.id}`)\n    }\n    for (const id of Object.keys(item.routeFactories ?? {})) {\n      if (!(item.manifests ?? []).some(manifest => manifest.id === id)) throw new Error(`Extension cannot override an official route factory: ${id}`)\n    }\n    return item\n  })\n}\n\n/**\n * Wraps each contributed plugin route factory with an explicit tenant-scope middleware.\n * @param item - Trusted validated extension; tenantIds is consulted at request time.\n * @returns A shallow copy with fresh route factory wrappers; each wrapper invokes the original factory with unchanged arguments.\n * @throws Calling a wrapped factory propagates the original route-factory errors.\n * @remarks Set trusted tenantId context before handling requests. Out-of-scope or missing tenantId returns 403. This wrapper performs no membership or module authorization.\n * @example\n * ```typescript\n * import { scopeExtensionFactories, validateExtensions } from \"@alneas/eaos-server/extensions\";\n * const [extension] = validateExtensions([{ apiVersion: 1, id: \"example\", tenantIds: [\"example\"] }]);\n * const scoped = scopeExtensionFactories(extension);\n * console.log(scoped.id);\n * ```\n */\nexport function scopeExtensionFactories(item: PlatformExtension): PlatformExtension {\n  return { ...item, routeFactories: Object.fromEntries(Object.entries(item.routeFactories ?? {}).map(([id, factory]) => [id, (...args: Parameters<HostRouteFactory>) => {\n    const router = new Hono()\n    router.use('*', async (context: Context, next) => {\n      if (!item.tenantIds.includes(String(context.get('tenantId') ?? ''))) return context.json({ error: 'Tenant unavailable' }, 403)\n      return next()\n    })\n    return router.route('/', factory(...args))\n  }])) }\n}\n\n/**\n * Wraps contributed host routers with tenant-scope checks followed by host module authorization.\n * @param extension - Trusted validated contribution; omitted routes produce an empty array.\n * @param requireModule - Called once per route with moduleId during composition; returns middleware enforcing current module permissions.\n * @returns New prefix/router pairs preserving original route order and mounting original routers beneath their guards.\n * @throws Propagates module middleware factory or route composition errors; request execution propagates downstream failures.\n * @remarks Requires a verified tenantId in Hono context. No authentication is installed here.\n * @example\n * ```typescript\n * import { scopeExtensionRoutes, validateExtensions } from \"@alneas/eaos-server/extensions\";\n * import { createModuleGuard } from \"@alneas/eaos-server/middleware/module-guard\";\n * const [extension] = validateExtensions([{ apiVersion: 1, id: \"example\", tenantIds: [\"example\"] }]);\n * console.log(scopeExtensionRoutes(extension, id => createModuleGuard(id, { isDev: false }))); // []\n * ```\n */\nexport function scopeExtensionRoutes(\n  extension: PlatformExtension,\n  requireModule: (moduleId: string) => MiddlewareHandler,\n): Array<{\n  /**\n * Original host route prefix preserved for subsequent mounting.\n */\nprefix: string;\n  /**\n * Fresh Hono wrapper enforcing tenant scope and host module authorization before forwarding to the original router.\n */\nrouter: Hono }> {\n  return (extension.routes ?? []).map(route => {\n    const router = new Hono()\n    router.use('*', async (context: Context, next) => {\n      if (!extension.tenantIds.includes(String(context.get('tenantId') ?? ''))) return context.json({ error: 'Tenant unavailable' }, 403)\n      return next()\n    })\n    router.use('*', requireModule(route.moduleId))\n    router.route('/', route.router)\n    return { prefix: route.prefix, router }\n  })\n}\n\n\n/**\n * Mounts tenant-dispatched extension routes, allowing a shared prefix across disjoint tenant scopes.\n * @param app - Host Hono app mutated with exact-prefix and descendant dispatch routes.\n * @param extensions - Trusted validated extensions with explicit tenant IDs.\n * @param requireModule - Host factory producing current module authorization middleware for each route moduleId.\n * @returns No value; completes after mounting all route groups.\n * @throws For an overlapping tenant at the same prefix, or propagated route/middleware composition errors.\n * @remarks Install verified identity/tenant middleware before these routes. Dispatch copies parent context variables into the selected child and forwards server environment; missing tenant scope returns 403. There is no automatic route unmount or per-request persistence.\n * @example\n * ```typescript\n * import { Hono } from \"hono\";\n * import { mountExtensionRoutes, type PlatformExtension } from \"@alneas/eaos-server/extensions\";\n * import { createModuleGuard } from \"@alneas/eaos-server/middleware/module-guard\";\n * export function mount(app: Hono, extensions: PlatformExtension[]) {\n *   mountExtensionRoutes(app, extensions, id => createModuleGuard(id, { isDev: false }));\n * }\n * ```\n */\nexport function mountExtensionRoutes(app: Hono, extensions: PlatformExtension[], requireModule: (id: string) => MiddlewareHandler): void {\n  const groups = new Map<string, Array<{ tenantIds: string[]; router: Hono }>>()\n  for (const extension of extensions) for (const route of scopeExtensionRoutes(extension, requireModule)) {\n    const group = groups.get(route.prefix) ?? []\n    if (group.some(item => item.tenantIds.some(tenant => extension.tenantIds.includes(tenant)))) throw new Error('Conflicting extension API prefix for tenant')\n    group.push({ tenantIds: extension.tenantIds, router: route.router })\n    groups.set(route.prefix, group)\n  }\n  for (const [prefix, candidates] of groups) {\n    const dispatch: MiddlewareHandler = async context => {\n      const tenantId = String(context.get('tenantId') ?? '')\n      const selected = candidates.find(item => item.tenantIds.includes(tenantId))\n      if (!selected) return context.json({ error: 'Tenant unavailable' }, 403)\n      const child = new Hono<{ Variables: Record<string, unknown> }>()\n      child.use('*', async (nested, next) => {\n        // Preserve verified parent state without putting it in client-controlled headers/body.\n        for (const [key, value] of Object.entries(context.var)) nested.set(key, value)\n        return next()\n      })\n      child.route(prefix, selected.router)\n      return child.fetch(context.req.raw, context.env)\n    }\n    app.all(prefix, dispatch)\n    app.all(prefix.replace(/\\/$/, '') + '/*', dispatch)\n  }\n}\n\n/** Request-scoped host authorization supplied after verified membership middleware.\n * @see getPlatformPluginAuthorization for binding lookup and a usage example.\n */\nexport interface PlatformPluginAuthorization {\n  /**\n   * Resolves the current verified principal after host authentication/membership checks.\n   * @returns Tenant/user identity, verified roles, and current enabled plugin IDs, or null to deny.\n   * @throws Host authentication or persistence failures propagate to callers.\n   \n   * @example\n   * ```typescript\n   * import type { PlatformPluginAuthorization } from \"@alneas/eaos-server/extensions\";\n   * export async function readHostPrincipal(authorization: PlatformPluginAuthorization) {\n   *   const principal = await authorization.resolvePrincipal();\n   *   return principal; // Null denies access; never replace it with request-supplied claims.\n   * }\n   * ```\n   */\n  resolvePrincipal(): Promise<{ \n  /** Tenant identity established by trusted host authentication/membership resolution; request-supplied headers/body must not define this claim. */\n  tenantId: string; \n  /** Authenticated user identity within the resolved tenant scope. */\n  userId: string; \n  /** Verified host role claims used for downstream authorization; tenant roles must not fabricate platform authority. */\n  roles: string[]; \n  /** Current plugin activation identities visible to this verified principal; the host supplies live lifecycle data. */\n  enabledPluginIds: string[] } | null>\n  /**\n   * Checks live plugin activation for a verified tenant.\n   * @param tenantId - Verified tenant ID.\n   * @param pluginId - Exact installed plugin ID.\n   * @returns True only when the plugin is currently enabled for this tenant.\n   * @throws Host lifecycle/persistence failures propagate to callers.\n   \n   * @example\n   * ```typescript\n   * import type { PlatformPluginAuthorization } from \"@alneas/eaos-server/extensions\";\n   * export async function checkCurrentPlugin(\n   *   authorization: PlatformPluginAuthorization, verifiedTenantId: string, installedPluginId: string,\n   * ) {\n   *   return await authorization.isPluginEnabled(verifiedTenantId, installedPluginId);\n   * }\n   * ```\n   */\n  isPluginEnabled(tenantId: string, pluginId: string): Promise<boolean>\n}\n/**\n * Hono variable/environment key for the host-only {@link PlatformPluginAuthorization} binding.\n * @see getPlatformPluginAuthorization for access behavior.\n */\nexport const PLATFORM_PLUGIN_AUTHORIZATION = 'eaosPlatformPluginAuthorization'\n\n/**\n * Reads a structurally valid host authorization port from Hono context or server environment.\n * @param context - Hono-like context; get(bindingKey) takes precedence over env[bindingKey] when nonnull. Missing contexts return undefined.\n * @returns The original port when both required members are functions, or undefined otherwise.\n * @throws Propagates errors thrown by the context get accessor.\n * @remarks Hono environment forwarding is internal-only; HTTP headers never supply this binding. Structural validation does not establish trust: only host middleware may install it.\n * @example\n * ```typescript\n * import { Hono } from \"hono\";\n * import { getPlatformPluginAuthorization } from \"@alneas/eaos-server/extensions\";\n * const app = new Hono();\n * app.get(\"/authorization-state\", c => c.json({ configured: !!getPlatformPluginAuthorization(c) }));\n * ```\n */\nexport function getPlatformPluginAuthorization(context: unknown): PlatformPluginAuthorization | undefined {\n  const c = context as { get?: (key: string) => unknown; env?: Record<string, unknown> } | undefined\n  const binding = c?.get?.(PLATFORM_PLUGIN_AUTHORIZATION) ?? c?.env?.[PLATFORM_PLUGIN_AUTHORIZATION]\n  if (!binding || typeof binding !== 'object') return undefined\n  const port = binding as PlatformPluginAuthorization\n  return typeof port.resolvePrincipal === 'function' && typeof port.isPluginEnabled === 'function' ? port : undefined\n}\n"],"mappings":";AAAA,SAAS,YAAkD;AA2CpD,SAAS,mBAAmB,QAAwC;AACzE,QAAM,MAAM,oBAAI,IAAY;AAC5B,QAAM,UAAU,oBAAI,IAAY;AAChC,QAAM,UAAU,oBAAI,IAAY;AAChC,SAAO,OAAO,IAAI,WAAS;AACzB,UAAM,OAAO;AACb,QAAI,CAAC,QAAQ,KAAK,eAAe,KAAK,OAAO,KAAK,OAAO,YAAY,CAAC,KAAK,GAAG,KAAK,KAC9E,CAAC,MAAM,QAAQ,KAAK,SAAS,KAAK,CAAC,KAAK,UAAU,UAClD,KAAK,UAAU,KAAK,QAAM,OAAO,OAAO,YAAY,CAAC,GAAG,KAAK,KAAK,OAAO,GAAG,KAAK,KAAK,OAAO,GAAG,KAC/F,KAAK,cAAc,UAAa,CAAC,MAAM,QAAQ,KAAK,SAAS,KAC7D,KAAK,cAAc,UAAa,CAAC,MAAM,QAAQ,KAAK,SAAS,KAC7D,KAAK,WAAW,UAAa,CAAC,MAAM,QAAQ,KAAK,MAAM,GAAI;AAC/D,YAAM,IAAI,MAAM,6EAA6E;AAAA,IAC/F;AACA,QAAI,IAAI,IAAI,KAAK,EAAE,EAAG,OAAM,IAAI,MAAM,wBAAwB,KAAK,EAAE,EAAE;AACvE,QAAI,IAAI,KAAK,EAAE;AAEf,eAAW,UAAU,KAAK,cAAc,KAAK,YAAY,CAAC,GAAG;AAC3D,UAAI,QAAQ,IAAI,MAAM,EAAG,OAAM,IAAI,MAAM,iCAAiC,MAAM,EAAE;AAClF,cAAQ,IAAI,MAAM;AAAA,IACpB;AACA,eAAW,SAAS,KAAK,UAAU,CAAC,GAAG;AACrC,UAAI,OAAO,MAAM,WAAW,YAAY,CAAC,MAAM,OAAO,WAAW,GAAG,KAAK,MAAM,OAAO,SAAS,GAAG,KAAK,OAAO,MAAM,aAAa,YAAY,CAAC,MAAM,SAAS,KAAK,KAAK,OAAO,MAAM,QAAQ,UAAU,WAAY,OAAM,IAAI,MAAM,yBAAyB;AAAA,IAC7P;AACA,eAAW,YAAY,KAAK,aAAa,CAAC,GAAG;AAC3C,UAAI,QAAQ,IAAI,SAAS,EAAE,EAAG,OAAM,IAAI,MAAM,+BAA+B,SAAS,EAAE,EAAE;AAC1F,cAAQ,IAAI,SAAS,EAAE;AACvB,UAAI,OAAO,KAAK,iBAAiB,SAAS,EAAE,MAAM,WAAY,OAAM,IAAI,MAAM,qCAAqC,SAAS,EAAE,EAAE;AAAA,IAClI;AACA,eAAW,MAAM,OAAO,KAAK,KAAK,kBAAkB,CAAC,CAAC,GAAG;AACvD,UAAI,EAAE,KAAK,aAAa,CAAC,GAAG,KAAK,cAAY,SAAS,OAAO,EAAE,EAAG,OAAM,IAAI,MAAM,wDAAwD,EAAE,EAAE;AAAA,IAChJ;AACA,WAAO;AAAA,EACT,CAAC;AACH;AAgBO,SAAS,wBAAwB,MAA4C;AAClF,SAAO,EAAE,GAAG,MAAM,gBAAgB,OAAO,YAAY,OAAO,QAAQ,KAAK,kBAAkB,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,IAAI,SAAuC;AACpK,UAAM,SAAS,IAAI,KAAK;AACxB,WAAO,IAAI,KAAK,OAAO,SAAkB,SAAS;AAChD,UAAI,CAAC,KAAK,UAAU,SAAS,OAAO,QAAQ,IAAI,UAAU,KAAK,EAAE,CAAC,EAAG,QAAO,QAAQ,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;AAC7H,aAAO,KAAK;AAAA,IACd,CAAC;AACD,WAAO,OAAO,MAAM,KAAK,QAAQ,GAAG,IAAI,CAAC;AAAA,EAC3C,CAAC,CAAC,CAAC,EAAE;AACP;AAiBO,SAAS,qBACd,WACA,eASc;AACd,UAAQ,UAAU,UAAU,CAAC,GAAG,IAAI,WAAS;AAC3C,UAAM,SAAS,IAAI,KAAK;AACxB,WAAO,IAAI,KAAK,OAAO,SAAkB,SAAS;AAChD,UAAI,CAAC,UAAU,UAAU,SAAS,OAAO,QAAQ,IAAI,UAAU,KAAK,EAAE,CAAC,EAAG,QAAO,QAAQ,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;AAClI,aAAO,KAAK;AAAA,IACd,CAAC;AACD,WAAO,IAAI,KAAK,cAAc,MAAM,QAAQ,CAAC;AAC7C,WAAO,MAAM,KAAK,MAAM,MAAM;AAC9B,WAAO,EAAE,QAAQ,MAAM,QAAQ,OAAO;AAAA,EACxC,CAAC;AACH;AAqBO,SAAS,qBAAqB,KAAW,YAAiC,eAAwD;AACvI,QAAM,SAAS,oBAAI,IAA0D;AAC7E,aAAW,aAAa,WAAY,YAAW,SAAS,qBAAqB,WAAW,aAAa,GAAG;AACtG,UAAM,QAAQ,OAAO,IAAI,MAAM,MAAM,KAAK,CAAC;AAC3C,QAAI,MAAM,KAAK,UAAQ,KAAK,UAAU,KAAK,YAAU,UAAU,UAAU,SAAS,MAAM,CAAC,CAAC,EAAG,OAAM,IAAI,MAAM,6CAA6C;AAC1J,UAAM,KAAK,EAAE,WAAW,UAAU,WAAW,QAAQ,MAAM,OAAO,CAAC;AACnE,WAAO,IAAI,MAAM,QAAQ,KAAK;AAAA,EAChC;AACA,aAAW,CAAC,QAAQ,UAAU,KAAK,QAAQ;AACzC,UAAM,WAA8B,OAAM,YAAW;AACnD,YAAM,WAAW,OAAO,QAAQ,IAAI,UAAU,KAAK,EAAE;AACrD,YAAM,WAAW,WAAW,KAAK,UAAQ,KAAK,UAAU,SAAS,QAAQ,CAAC;AAC1E,UAAI,CAAC,SAAU,QAAO,QAAQ,KAAK,EAAE,OAAO,qBAAqB,GAAG,GAAG;AACvE,YAAM,QAAQ,IAAI,KAA6C;AAC/D,YAAM,IAAI,KAAK,OAAO,QAAQ,SAAS;AAErC,mBAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,QAAQ,GAAG,EAAG,QAAO,IAAI,KAAK,KAAK;AAC7E,eAAO,KAAK;AAAA,MACd,CAAC;AACD,YAAM,MAAM,QAAQ,SAAS,MAAM;AACnC,aAAO,MAAM,MAAM,QAAQ,IAAI,KAAK,QAAQ,GAAG;AAAA,IACjD;AACA,QAAI,IAAI,QAAQ,QAAQ;AACxB,QAAI,IAAI,OAAO,QAAQ,OAAO,EAAE,IAAI,MAAM,QAAQ;AAAA,EACpD;AACF;AAoDO,IAAM,gCAAgC;AAgBtC,SAAS,+BAA+B,SAA2D;AACxG,QAAM,IAAI;AACV,QAAM,UAAU,GAAG,MAAM,6BAA6B,KAAK,GAAG,MAAM,6BAA6B;AACjG,MAAI,CAAC,WAAW,OAAO,YAAY,SAAU,QAAO;AACpD,QAAM,OAAO;AACb,SAAO,OAAO,KAAK,qBAAqB,cAAc,OAAO,KAAK,oBAAoB,aAAa,OAAO;AAC5G;","names":[]}

package/dist/health/index.d.ts

@@ -0,0 +1,35 @@
+import { Hono } from 'hono';
+import { HealthCheck } from '@alneas/eaos-core';
+
+/**
+ * Host inputs for the unauthenticated liveness and readiness routes.
+ * @see createHealthRouter for a complete usage example.
+ */
+interface HealthRouterOptions {
+    /** Nonblank application label included in every response. */
+    appName: string;
+    /** Readiness checks run on each readiness request; defaults to no checks. */
+    checks?: readonly HealthCheck[];
+    /** Clock read separately for each request; defaults to the current Date. */
+    now?: () => Date;
+}
+/**
+ * Creates public /health, /health/live, and /health/ready routes.
+ * @param options - Application label, readiness checks, and optional clock.
+ * @returns A new Hono router; liveness returns 200 and readiness returns 503 only for a not_ready report.
+ * @throws If appName is missing, not a string, or blank. Request handling may reject if the supplied clock throws.
+ * @remarks Check implementations and credentials remain host-owned. These routes install no authentication; mount them where public health status is appropriate. Checks run for every readiness request with no caching by this router.
+ * @example
+ * ```typescript
+ * import { Hono } from "hono";
+ * import { createHealthRouter } from "@alneas/eaos-server/health";
+ * const app = new Hono();
+ * app.route("/", createHealthRouter({ appName: "example-service" }));
+ * const response = await app.request("/health/live");
+ * console.log(response.status); // 200
+ * ```
+ */
+declare function createHealthRouter(options: HealthRouterOptions): Hono;
+
+export { createHealthRouter };
+export type { HealthRouterOptions };

package/dist/health/index.js

@@ -0,0 +1,7 @@
+import {
+  createHealthRouter
+} from "../chunk-R4ADP2DC.js";
+export {
+  createHealthRouter
+};
+//# sourceMappingURL=index.js.map

package/dist/health/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/index.d.ts

@@ -0,0 +1,43 @@
+export { ModuleGuardOptions, createModuleGuard } from './middleware/module-guard.js';
+export { AuthMiddlewareOptions, AuthSessionVerifier, createAuthMiddleware } from './middleware/auth.js';
+export { ErrorHandlerOptions, createErrorHandler } from './middleware/error-handler.js';
+export { CreateAppOptions, EaosConfig, ErpEngine, createErpEngine, defineConfig } from './engine.js';
+export { EntitlementError, EntitlementPrincipalResolver, EntitlementRuntimeOptions, PluginEntitlementRuntime, ProtectedPluginAsset, createPluginAssetRouter, createPluginEntitlementGuard, createSqlTenantEntitlementLoader, requiresEntitlementRuntime, resolveEngineEntitlementPrincipal, tenantEntitlementContract } from './entitlements/index.js';
+export { PluginSdkHost, createSdkPluginRouter } from './plugin-sdk.js';
+export { McpPrincipal, McpRouterOptions, McpRuntime, createMcpRouter } from './mcp.js';
+export { TenantResolver, TenantResolverOptions, createTenantResolver } from './tenant.js';
+export { HealthRouterOptions, createHealthRouter } from './health/index.js';
+export { PlatformAdminRouterOptions, createPlatformAdminRouter } from './platform-admin/index.js';
+export { ServerAgentDispatchMode, ServerAgentExecutionContext, ServerAgentExecutionError, ServerAgentExecutor, ServerAgentTaskRequest, ServerAgentTaskResult, ServerAgentWorkerType, ServerApprovalCallbackPayload } from './agentic/types.js';
+export { ServerAutonomousWorker, ServerRuntimeRole, ServerWorkerChatOptions, ServerWorkerOptions } from './agentic/autonomous-worker.js';
+export { CommandAgentExecutorOptions, CommandAgentSandboxMode, CommandAgentSandboxOptions, buildSystemdRunArgs, createCommandAgentExecutor, validateAgentRuntimePolicy } from './agentic/executor.js';
+export { ServerWorkflowAgentRunnerOptions, createWorkflowAgentRunner } from './agentic/agent-runner.js';
+export { WorkflowAgentNodeOptions, createWorkflowAgentNode } from './agentic/agent-node.js';
+export { ServerWorkflowManager, ServerWorkflowOptions } from './agentic/workflow-manager.js';
+export { AgentGraphEngine, AgentGraphEngineOptions, AgentGraphState, GraphApprovalDecision, GraphConditionalEdgeOptions, GraphEdgeOptions, GraphNodeHandler, GraphNodeOptions, GraphRouter, GraphSubgraph, GraphSubgraphOptions } from './agentic/graph.js';
+export { AgentJobClaimFilter, AgentJobDispatchResult, AgentJobDispatcherOptions, AgentJobStore, AtomicAgentJobStoreOptions, DurableAgentJobDispatcher, cancelAgentJob, createAgentJob, createAtomicAgentJobStore, enqueueAgentJob } from './agentic/agent-jobs.js';
+export { LocalRunnerIdentity, LocalRunnerJobKind, LocalRunnerPullCoordinator, LocalRunnerPullCoordinatorOptions } from './agentic/local-runner.js';
+export { AIJobPlan, AIJobSubmission, AIJobTaskInput, DurableAIExecutionBroker, ServerAIExecutionRoute } from './agentic/ai-broker.js';
+export { GraphProjectionCoordinator, GraphProjectionCoordinatorOptions, ProjectionCursorStore } from './agentic/graph-projection.js';
+export { DurableWorkflowCoordinator, DurableWorkflowCoordinatorOptions, StoredWorkflowInstance, WorkflowInstanceStore } from './agentic/workflow-coordinator.js';
+export { EventAgentBridge, EventAgentBridgeError, EventAgentBridgeOptions, EventAgentPendingApproval, EventAgentRule, EventAgentTaskStore, InMemoryEventAgentTaskStore, QueuedEventTask } from './agentic/event-bridge.js';
+export { HttpAgentExecutorOptions, HttpAgentRuntimeRequest, HttpAgentRuntimeResponse, createHttpAgentExecutor } from './agentic/remote-executor.js';
+export { WorkflowNodeCatalog, WorkflowNodeDescriptor, WorkflowNodeRegistration, WorkflowNodeResolverInput } from './agentic/workflow-catalog.js';
+export { CompiledWorkflow, WorkflowCompilerOptions, compileWorkflowDefinition } from './agentic/workflow-compiler.js';
+export { InMemoryWorkflowDefinitionRegistry, WorkflowDefinitionRecord, WorkflowDefinitionRegistry } from './agentic/workflow-registry.js';
+export { WorkspaceContext, WorkspaceContextError, WorkspaceContextStore, WorkspaceIdentity, createWorkspaceContextResolver } from './workspace-context.js';
+export { AtomicCheckpointSaver } from './agentic/atomic-checkpointer.js';
+import 'hono';
+import '@alneas/eaos-core';
+import './lifecycle/index.js';
+import '@alneas/eaos-server/lifecycle-engine';
+import 'hono/types';
+import './plugin-data/index.js';
+import '@alneas/eaos-core/plugin-sdk';
+import '@alneas/eaos-server/platform';
+import './platform-admin/store.js';
+import '@alneas/appkit-core/ai/ai-chat';
+import './execution/index.js';
+import '@alneas/appkit-core/ai/action';
+import '@alneas/appkit-core/ai';
+import '@langchain/langgraph';

package/dist/index.js

@@ -0,0 +1,161 @@
+import {
+  createPlatformAdminRouter
+} from "./chunk-753HWDSC.js";
+import "./chunk-YMJ7BRKU.js";
+import "./chunk-7FTJN4SA.js";
+import {
+  InMemoryWorkflowDefinitionRegistry
+} from "./chunk-HVC7FG6B.js";
+import {
+  LocalRunnerPullCoordinator
+} from "./chunk-ZHMTD5KV.js";
+import {
+  createHttpAgentExecutor
+} from "./chunk-IJWYS2PF.js";
+import {
+  WorkflowNodeCatalog
+} from "./chunk-7AHSS7SO.js";
+import {
+  compileWorkflowDefinition
+} from "./chunk-CJ7OFEF7.js";
+import {
+  DurableWorkflowCoordinator
+} from "./chunk-EJKWDZIU.js";
+import {
+  ServerWorkflowManager
+} from "./chunk-FD6VC2NA.js";
+import {
+  createWorkflowAgentRunner
+} from "./chunk-6XZXYNJR.js";
+import {
+  DurableAIExecutionBroker
+} from "./chunk-LYPZPE53.js";
+import {
+  AtomicCheckpointSaver
+} from "./chunk-3NLSWP2Y.js";
+import {
+  ServerAutonomousWorker
+} from "./chunk-F2J6IQ6I.js";
+import "./chunk-YMHVRBUU.js";
+import {
+  EventAgentBridge,
+  InMemoryEventAgentTaskStore
+} from "./chunk-3P4XTTQH.js";
+import {
+  buildSystemdRunArgs,
+  createCommandAgentExecutor,
+  validateAgentRuntimePolicy
+} from "./chunk-32746UQZ.js";
+import {
+  ServerAgentExecutionError
+} from "./chunk-YABTQZDJ.js";
+import {
+  GraphProjectionCoordinator
+} from "./chunk-W6O3LVBY.js";
+import {
+  AgentGraphEngine
+} from "./chunk-HXFVOR7Z.js";
+import {
+  ErpEngine,
+  createErpEngine,
+  defineConfig
+} from "./chunk-F4IITPGX.js";
+import "./chunk-L6PMAEMB.js";
+import {
+  createAuthMiddleware
+} from "./chunk-XIEY2OF4.js";
+import {
+  createErrorHandler
+} from "./chunk-AVDMLTPF.js";
+import {
+  createModuleGuard
+} from "./chunk-VC2PCK2S.js";
+import {
+  createHealthRouter
+} from "./chunk-R4ADP2DC.js";
+import {
+  createMcpRouter
+} from "./chunk-VF5YDZJC.js";
+import {
+  createSdkPluginRouter
+} from "./chunk-4VORUFKR.js";
+import {
+  EntitlementError,
+  PluginEntitlementRuntime,
+  createPluginAssetRouter,
+  createPluginEntitlementGuard,
+  createSqlTenantEntitlementLoader,
+  requiresEntitlementRuntime,
+  resolveEngineEntitlementPrincipal,
+  tenantEntitlementContract
+} from "./chunk-46UWPEW2.js";
+import "./chunk-INCHXAFK.js";
+import "./chunk-3VITSHN3.js";
+import {
+  TenantResolver,
+  createTenantResolver
+} from "./chunk-BKAHUEIT.js";
+import {
+  WorkspaceContextError,
+  createWorkspaceContextResolver
+} from "./chunk-WFEAKJLR.js";
+import {
+  DurableAgentJobDispatcher,
+  cancelAgentJob,
+  createAgentJob,
+  createAtomicAgentJobStore,
+  enqueueAgentJob
+} from "./chunk-PBC3MZUL.js";
+import {
+  createWorkflowAgentNode
+} from "./chunk-UGNTCOVR.js";
+export {
+  AgentGraphEngine,
+  AtomicCheckpointSaver,
+  DurableAIExecutionBroker,
+  DurableAgentJobDispatcher,
+  DurableWorkflowCoordinator,
+  EntitlementError,
+  ErpEngine,
+  EventAgentBridge,
+  GraphProjectionCoordinator,
+  InMemoryEventAgentTaskStore,
+  InMemoryWorkflowDefinitionRegistry,
+  LocalRunnerPullCoordinator,
+  PluginEntitlementRuntime,
+  ServerAgentExecutionError,
+  ServerAutonomousWorker,
+  ServerWorkflowManager,
+  TenantResolver,
+  WorkflowNodeCatalog,
+  WorkspaceContextError,
+  buildSystemdRunArgs,
+  cancelAgentJob,
+  compileWorkflowDefinition,
+  createAgentJob,
+  createAtomicAgentJobStore,
+  createAuthMiddleware,
+  createCommandAgentExecutor,
+  createErpEngine,
+  createErrorHandler,
+  createHealthRouter,
+  createHttpAgentExecutor,
+  createMcpRouter,
+  createModuleGuard,
+  createPlatformAdminRouter,
+  createPluginAssetRouter,
+  createPluginEntitlementGuard,
+  createSdkPluginRouter,
+  createSqlTenantEntitlementLoader,
+  createTenantResolver,
+  createWorkflowAgentNode,
+  createWorkflowAgentRunner,
+  createWorkspaceContextResolver,
+  defineConfig,
+  enqueueAgentJob,
+  requiresEntitlementRuntime,
+  resolveEngineEntitlementPrincipal,
+  tenantEntitlementContract,
+  validateAgentRuntimePolicy
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/lifecycle/index.d.ts

@@ -0,0 +1,133 @@
+import * as hono from 'hono';
+import { Context } from 'hono';
+import { PluginLifecycle, LifecycleStore, LifecycleState, LifecycleWriter } from '@alneas/eaos-server/lifecycle-engine';
+
+/** Single control-plane filesystem. All backend processes must read the same ledger.
+ * A crashed writer leaves its lock in place: reconcile DB/infra before operator recovery.
+ * For independent hosts, implement LifecycleStore using a shared transactional control DB.
+ * @example
+ * ```typescript
+ * import { FileLifecycleStore } from "@alneas/eaos-server/lifecycle";
+ * const store = new FileLifecycleStore("./state/lifecycle.json");
+ * console.log((await store.read()).platform);
+ * ```
+ */
+declare class FileLifecycleStore implements LifecycleStore {
+    /** Absolute ledger path resolved at construction; lock directory is path + ".lock". */
+    readonly path: string;
+    /**
+     * Resolves a host-selected ledger filename without reading or creating it.
+     * @param path - Ledger filename, resolved relative to the current process directory.
+     */
+    constructor(path: string);
+    /**
+     * Reads and normalizes the JSON lifecycle ledger.
+     * @returns Stored lifecycle state, or a fresh empty state if the file does not exist.
+     * @throws Rejects filesystem, JSON parsing, or state-normalization failures other than ENOENT.
+     * @example
+     * ```typescript
+     * import { FileLifecycleStore } from "@alneas/eaos-server/lifecycle";
+     * const state = await new FileLifecycleStore("./state/lifecycle.json").read();
+     * console.log(state.platform);
+     * ```
+     */
+    read(): Promise<LifecycleState>;
+    /**
+     * Runs one writer callback under an exclusive filesystem lock directory.
+     * @typeParam T - Callback result passed through unchanged.
+     * @param fn - Called after lock acquisition with ledger read and durable write operations; must await its writes before returning.
+     * @returns The callback result after lock directory removal. Writer.write resolves without a value after temporary-file fsync, rename, and directory fsync.
+     * @throws Rejects an existing lock, filesystem failures, callback failures, or final lock-removal failures.
+     * @remarks Lock acquisition does not wait or retry. Ordinary callback failure removes the lock; a process crash can leave it behind and requires operator reconciliation. Writes may have committed before a later failure. The store does not enforce that all external writers use this lock.
+     * @example
+     * ```typescript
+     * import { FileLifecycleStore } from "@alneas/eaos-server/lifecycle";
+     * const store = new FileLifecycleStore("./state/lifecycle.json");
+     * const state = await store.withLock(async writer => writer.read());
+     * console.log(state.platform);
+     * ```
+     */
+    withLock<T>(fn: (writer: LifecycleWriter) => Promise<T>): Promise<T>;
+    private write;
+}
+/**
+ * Host identity, backend routing, and lifecycle admission used by jobs and HTTP guards.
+ * @see createLifecycleGuard.
+ */
+interface LifecycleRuntime {
+    /** Lifecycle engine consulted for current plugin admission. */
+    lifecycle: PluginLifecycle;
+    /** Fallback registered backend ID used only when resolveBackend is absent. */
+    backendId: string;
+    /** Resolve the registered target for a verified tenant; null denies admission without fallback. */
+    resolveBackend?: (tenantId: string) => Promise<string | null>;
+    /** Must resolve authenticated identity / verified webhook signature, never a raw tenant header alone. */
+    resolveTenant: (context: Context) => Promise<string | null>;
+}
+/**
+ * Resolves the host-selected backend for a verified tenant without falling back after a resolver denial.
+ * @param runtime - Lifecycle runtime with either a backend resolver or fixed backend ID.
+ * @param tenantId - Verified tenant whose placement is being resolved.
+ * @returns Nonempty resolved backend ID, or runtime.backendId when no callback exists.
+ * @throws Rejects an empty/null backend result or propagated resolver errors.
+ * @example
+ * ```typescript
+ * import { resolveLifecycleBackend, type LifecycleRuntime } from "@alneas/eaos-server/lifecycle";
+ * export async function backend(runtime: LifecycleRuntime, tenantId: string) {
+ *   return resolveLifecycleBackend(runtime, tenantId);
+ * }
+ * ```
+ */
+declare function resolveLifecycleBackend(runtime: LifecycleRuntime, tenantId: string): Promise<string>;
+/**
+ * Runs a host job through lifecycle admission for its verified tenant and plugin.
+ * @typeParam T - Result resolved by the admitted callback.
+ * @param runtime - Backend routing and lifecycle engine.
+ * @param job - Trusted tenantId/pluginId binding of the queued job.
+ * @param callback - Invoked without arguments by lifecycle.run after admission; resolves the job result.
+ * @returns The callback result after lifecycle.run completes.
+ * @throws Rejects unavailable backend, lifecycle admission/store failure, or callback failure.
+ * @remarks Persistence, retries, and idempotency of the job body belong to the host. This wrapper delegates concurrency/drain behavior to lifecycle.run.
+ * @example
+ * ```typescript
+ * import { runLifecycleJob, type LifecycleRuntime } from "@alneas/eaos-server/lifecycle";
+ * export async function runJob<T>(runtime: LifecycleRuntime, tenantId: string, pluginId: string, execute: () => Promise<T>) {
+ *   return runLifecycleJob(runtime, { tenantId, pluginId }, execute);
+ * }
+ * ```
+ */
+declare function runLifecycleJob<T>(runtime: LifecycleRuntime, job: {
+    /**
+   * Verified tenant identity of the queued job, used to select its lifecycle backend.
+   */
+    tenantId: string;
+    /**
+   * Exact plugin ID whose current lifecycle admission gates this job body.
+   */
+    pluginId: string;
+}, callback: () => Promise<T>): Promise<T>;
+/**
+ * Creates a request guard requiring a verified tenant and currently enabled plugin placement.
+ * @param runtime - Host tenant verification, backend routing, and lifecycle engine.
+ * @param pluginId - Exact installed plugin ID required by the route.
+ * @returns Hono middleware returning 401 for absent tenant, 403 for unavailable backend/inactive plugin, or completing downstream handling without a value after setting tenantId.
+ * @throws Request handling propagates host resolver, lifecycle store, and downstream failures.
+ * @remarks Authenticate webhook signatures or browser identity in resolveTenant; a raw header is insufficient. This guard performs a point-in-time isEnabled check and does not hold a lifecycle.run execution lease across downstream work.
+ * @example
+ * ```typescript
+ * import { Hono } from "hono";
+ * import { createLifecycleGuard, type LifecycleRuntime } from "@alneas/eaos-server/lifecycle";
+ * export function pluginRoutes(runtime: LifecycleRuntime) {
+ *   const app = new Hono();
+ *   app.use("*", createLifecycleGuard(runtime, "example-plugin"));
+ *   app.get("/", c => c.json({ available: true }));
+ *   return app;
+ * }
+ * ```
+ */
+declare function createLifecycleGuard(runtime: LifecycleRuntime, pluginId: string): hono.MiddlewareHandler<any, string, {}, Response | (Response & hono.TypedResponse<{
+    error: string;
+}, 401, "json">)>;
+
+export { FileLifecycleStore, createLifecycleGuard, resolveLifecycleBackend, runLifecycleJob };
+export type { LifecycleRuntime };

package/dist/lifecycle/index.js

@@ -0,0 +1,13 @@
+import {
+  FileLifecycleStore,
+  createLifecycleGuard,
+  resolveLifecycleBackend,
+  runLifecycleJob
+} from "../chunk-L6PMAEMB.js";
+export {
+  FileLifecycleStore,
+  createLifecycleGuard,
+  resolveLifecycleBackend,
+  runLifecycleJob
+};
+//# sourceMappingURL=index.js.map

package/dist/lifecycle/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/lifecycle-engine/backend-migration.d.ts

@@ -0,0 +1,2 @@
+export { BackendMigrationCutover, BackendMigrationExecutor, BackendMigrationPlan, BackendMigrationRequest, BackendMigrationScope, BackendMigrationVerification, BackendMigrationVerificationReport, assertBackendMigrationCutover, assertBackendMigrationVerification, planBackendMigration } from './index.js';
+import '@alneas/eaos-core/contracts/data-contracts';

package/dist/lifecycle-engine/backend-migration.js

@@ -0,0 +1,11 @@
+import {
+  assertBackendMigrationCutover,
+  assertBackendMigrationVerification,
+  planBackendMigration
+} from "../chunk-SDJNYPYK.js";
+export {
+  assertBackendMigrationCutover,
+  assertBackendMigrationVerification,
+  planBackendMigration
+};
+//# sourceMappingURL=backend-migration.js.map

package/dist/lifecycle-engine/backend-migration.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/lifecycle-engine/baseline.d.ts

@@ -0,0 +1,2 @@
+export { DataContractBaseline, createDataContractBaseline, rebaseDataContractBaseline } from './index.js';
+import '@alneas/eaos-core/contracts/data-contracts';

package/dist/lifecycle-engine/baseline.js

@@ -0,0 +1,9 @@
+import {
+  createDataContractBaseline,
+  rebaseDataContractBaseline
+} from "../chunk-SDJNYPYK.js";
+export {
+  createDataContractBaseline,
+  rebaseDataContractBaseline
+};
+//# sourceMappingURL=baseline.js.map

package/dist/lifecycle-engine/baseline.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}