@angriff36/manifest 2.18.0

package/dist/manifest/federation/registry.d.ts

@@ -0,0 +1,88 @@
+/**
+ * Federation registry — central service discovery for cross-service Manifest runtimes.
+ *
+ * The registry tracks ServiceDescriptors, resolves service endpoints, and
+ * optionally performs periodic health checks to keep the federation view fresh.
+ *
+ * The registry is deterministic: same descriptors in → same lookups out.
+ * Health checks are the only non-deterministic path and are opt-in.
+ *
+ * @module federation/registry
+ */
+import type { ServiceDescriptor, ServiceHealth, FederationRegistryOptions, ExposedCommand } from './types';
+/**
+ * FederationRegistry: discovers and tracks remote Manifest services.
+ *
+ * Usage:
+ *   const registry = new FederationRegistry({ healthCheckIntervalMs: 30000 });
+ *   registry.register(ordersDescriptor);
+ *   registry.register(inventoryDescriptor);
+ *   const svc = registry.get('orders');
+ *   const cmds = registry.findCommandsByEntity('orders', 'Order');
+ */
+export declare class FederationRegistry {
+    private services;
+    private options;
+    private healthTimer;
+    constructor(options?: FederationRegistryOptions);
+    /**
+     * Register a service descriptor. Replaces any existing descriptor
+     * with the same serviceId.
+     */
+    register(descriptor: ServiceDescriptor): void;
+    /**
+     * Register multiple service descriptors in a single call.
+     */
+    registerAll(descriptors: ServiceDescriptor[]): void;
+    /**
+     * Remove a service from the registry.
+     */
+    unregister(serviceId: string): boolean;
+    /**
+     * Get a service descriptor by ID. Returns undefined if not registered.
+     */
+    get(serviceId: string): ServiceDescriptor | undefined;
+    /**
+     * List all registered service descriptors.
+     */
+    list(): ServiceDescriptor[];
+    /**
+     * Find all commands exposed for a given entity across all services.
+     * Returns an array of { serviceId, command } pairs.
+     */
+    findCommandsByEntity(entityName: string): Array<{
+        serviceId: string;
+        command: ExposedCommandRef;
+    }>;
+    /**
+     * Find the service and command descriptor for a specific (entity, command) pair.
+     * Returns undefined if not found.
+     */
+    findCommand(entityName: string, commandName: string): {
+        service: ServiceDescriptor;
+        command: ExposedCommand;
+    } | undefined;
+    /**
+     * Get the list of all reachable services.
+     */
+    getReachable(): ServiceDescriptor[];
+    /**
+     * Manually trigger a health check on a single service.
+     * Returns the updated health status.
+     */
+    checkHealth(serviceId: string): Promise<ServiceHealth | undefined>;
+    /**
+     * Stop the health check timer. Call this on shutdown to prevent leaks.
+     */
+    stop(): void;
+    private startHealthChecks;
+    private probeHealth;
+}
+/**
+ * Reference to an exposed command including the full descriptor.
+ */
+export interface ExposedCommandRef {
+    name: string;
+    descriptor: ExposedCommand;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/manifest/federation/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/manifest/federation/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,yBAAyB,EACzB,cAAc,EACf,MAAM,SAAS,CAAC;AAEjB;;;;;;;;;GASG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAA6C;IAC7D,OAAO,CAAC,OAAO,CAAsC;IACrD,OAAO,CAAC,WAAW,CAA+C;gBAEtD,OAAO,GAAE,yBAA8B;IAWnD;;;OAGG;IACH,QAAQ,CAAC,UAAU,EAAE,iBAAiB,GAAG,IAAI;IAO7C;;OAEG;IACH,WAAW,CAAC,WAAW,EAAE,iBAAiB,EAAE,GAAG,IAAI;IAInD;;OAEG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAItC;;OAEG;IACH,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAIrD;;OAEG;IACH,IAAI,IAAI,iBAAiB,EAAE;IAI3B;;;OAGG;IACH,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAclG;;;OAGG;IACH,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,iBAAiB,CAAC;QAAC,OAAO,EAAE,cAAc,CAAA;KAAE,GAAG,SAAS;IAYzH;;OAEG;IACH,YAAY,IAAI,iBAAiB,EAAE;IAInC;;;OAGG;IACG,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,SAAS,CAAC;IAQxE;;OAEG;IACH,IAAI,IAAI,IAAI;IAOZ,OAAO,CAAC,iBAAiB;YAUX,WAAW;CAuB1B;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,cAAc,CAAC;CAC5B"}

package/dist/manifest/federation/registry.js

@@ -0,0 +1,165 @@
+/**
+ * Federation registry — central service discovery for cross-service Manifest runtimes.
+ *
+ * The registry tracks ServiceDescriptors, resolves service endpoints, and
+ * optionally performs periodic health checks to keep the federation view fresh.
+ *
+ * The registry is deterministic: same descriptors in → same lookups out.
+ * Health checks are the only non-deterministic path and are opt-in.
+ *
+ * @module federation/registry
+ */
+/**
+ * FederationRegistry: discovers and tracks remote Manifest services.
+ *
+ * Usage:
+ *   const registry = new FederationRegistry({ healthCheckIntervalMs: 30000 });
+ *   registry.register(ordersDescriptor);
+ *   registry.register(inventoryDescriptor);
+ *   const svc = registry.get('orders');
+ *   const cmds = registry.findCommandsByEntity('orders', 'Order');
+ */
+export class FederationRegistry {
+    services = new Map();
+    options;
+    healthTimer = null;
+    constructor(options = {}) {
+        this.options = {
+            healthCheckIntervalMs: options.healthCheckIntervalMs ?? 30000,
+            healthCheckTimeoutMs: options.healthCheckTimeoutMs ?? 5000,
+            fetchImpl: options.fetchImpl ?? globalThis.fetch,
+        };
+        if (this.options.healthCheckIntervalMs > 0) {
+            this.startHealthChecks();
+        }
+    }
+    /**
+     * Register a service descriptor. Replaces any existing descriptor
+     * with the same serviceId.
+     */
+    register(descriptor) {
+        this.services.set(descriptor.serviceId, {
+            ...descriptor,
+            health: descriptor.health ?? { reachable: false, lastCheckedAt: 0 },
+        });
+    }
+    /**
+     * Register multiple service descriptors in a single call.
+     */
+    registerAll(descriptors) {
+        for (const d of descriptors)
+            this.register(d);
+    }
+    /**
+     * Remove a service from the registry.
+     */
+    unregister(serviceId) {
+        return this.services.delete(serviceId);
+    }
+    /**
+     * Get a service descriptor by ID. Returns undefined if not registered.
+     */
+    get(serviceId) {
+        return this.services.get(serviceId);
+    }
+    /**
+     * List all registered service descriptors.
+     */
+    list() {
+        return Array.from(this.services.values());
+    }
+    /**
+     * Find all commands exposed for a given entity across all services.
+     * Returns an array of { serviceId, command } pairs.
+     */
+    findCommandsByEntity(entityName) {
+        const results = [];
+        for (const svc of this.services.values()) {
+            for (const entity of svc.entities) {
+                if (entity.name === entityName) {
+                    for (const cmd of entity.commands) {
+                        results.push({ serviceId: svc.serviceId, command: { name: cmd.name, descriptor: cmd } });
+                    }
+                }
+            }
+        }
+        return results;
+    }
+    /**
+     * Find the service and command descriptor for a specific (entity, command) pair.
+     * Returns undefined if not found.
+     */
+    findCommand(entityName, commandName) {
+        for (const svc of this.services.values()) {
+            for (const entity of svc.entities) {
+                if (entity.name === entityName) {
+                    const cmd = entity.commands.find((c) => c.name === commandName);
+                    if (cmd)
+                        return { service: svc, command: cmd };
+                }
+            }
+        }
+        return undefined;
+    }
+    /**
+     * Get the list of all reachable services.
+     */
+    getReachable() {
+        return this.list().filter((s) => s.health?.reachable === true);
+    }
+    /**
+     * Manually trigger a health check on a single service.
+     * Returns the updated health status.
+     */
+    async checkHealth(serviceId) {
+        const svc = this.services.get(serviceId);
+        if (!svc)
+            return undefined;
+        const health = await this.probeHealth(svc.endpoint);
+        svc.health = health;
+        return health;
+    }
+    /**
+     * Stop the health check timer. Call this on shutdown to prevent leaks.
+     */
+    stop() {
+        if (this.healthTimer) {
+            clearInterval(this.healthTimer);
+            this.healthTimer = null;
+        }
+    }
+    startHealthChecks() {
+        this.healthTimer = setInterval(() => {
+            for (const svc of this.services.values()) {
+                this.probeHealth(svc.endpoint)
+                    .then((health) => { svc.health = health; })
+                    .catch(() => { });
+            }
+        }, this.options.healthCheckIntervalMs);
+    }
+    async probeHealth(endpoint) {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.options.healthCheckTimeoutMs);
+        try {
+            const res = await this.options.fetchImpl(`${endpoint}/__manifest/health`, {
+                method: 'GET',
+                signal: controller.signal,
+            });
+            clearTimeout(timeout);
+            if (!res.ok) {
+                return { reachable: false, lastCheckedAt: Date.now(), error: `HTTP ${res.status}` };
+            }
+            const body = (await res.json());
+            return { reachable: true, lastCheckedAt: Date.now(), version: body.version };
+        }
+        catch (err) {
+            clearTimeout(timeout);
+            return {
+                reachable: false,
+                lastCheckedAt: Date.now(),
+                error: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/manifest/federation/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/manifest/federation/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AASH;;;;;;;;;GASG;AACH,MAAM,OAAO,kBAAkB;IACrB,QAAQ,GAAmC,IAAI,GAAG,EAAE,CAAC;IACrD,OAAO,CAAsC;IAC7C,WAAW,GAA0C,IAAI,CAAC;IAElE,YAAY,UAAqC,EAAE;QACjD,IAAI,CAAC,OAAO,GAAG;YACb,qBAAqB,EAAE,OAAO,CAAC,qBAAqB,IAAI,KAAK;YAC7D,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,IAAI;YAC1D,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK;SACjD,CAAC;QACF,IAAI,IAAI,CAAC,OAAO,CAAC,qBAAqB,GAAG,CAAC,EAAE,CAAC;YAC3C,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,UAA6B;QACpC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,EAAE;YACtC,GAAG,UAAU;YACb,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE;SACpE,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,WAAgC;QAC1C,KAAK,MAAM,CAAC,IAAI,WAAW;YAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,SAAiB;QAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,SAAiB;QACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,IAAI;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5C,CAAC;IAED;;;OAGG;IACH,oBAAoB,CAAC,UAAkB;QACrC,MAAM,OAAO,GAA6D,EAAE,CAAC;QAC7E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAClC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC/B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;wBAClC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;oBAC3F,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,WAAW,CAAC,UAAkB,EAAE,WAAmB;QACjD,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YACzC,KAAK,MAAM,MAAM,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;gBAClC,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;oBAChE,IAAI,GAAG;wBAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;gBACjD,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,SAAS,KAAK,IAAI,CAAC,CAAC;IACjE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAW,CAAC,SAAiB;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC;QACpB,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YAChC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QAC1B,CAAC;IACH,CAAC;IAEO,iBAAiB;QACvB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,GAAG,EAAE;YAClC,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;qBAC3B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;qBAC1C,KAAK,CAAC,GAAG,EAAE,GAAqD,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACzC,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,QAAgB;QACxC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,QAAQ,oBAAoB,EAAE;gBACxE,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;YACtF,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;YACxD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO;gBACL,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE;gBACzB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;CACF"}

package/dist/manifest/federation/types.d.ts

@@ -0,0 +1,209 @@
+/**
+ * Federation type contracts for cross-service Manifest runtime communication.
+ *
+ * Federation enables multiple Manifest runtime instances (microservices) to:
+ * - Discover each other's entity schemas and available commands
+ * - Invoke commands across service boundaries with policy-enforced authorization
+ * - Propagate actor identity and tenant context through a policy bridge
+ * - Generate typed HTTP client adapters from remote IRs
+ *
+ * @module federation/types
+ */
+/**
+ * Describes a single remote Manifest service in the federation.
+ * A service descriptor is the public, minimal contract that other services
+ * use to discover what entities and commands are available.
+ */
+export interface ServiceDescriptor {
+    /** Unique service identifier (e.g. "orders", "inventory", "billing") */
+    serviceId: string;
+    /** Human-readable display name */
+    displayName?: string;
+    /** Base URL for federation calls (e.g. "https://orders.svc.cluster:8080") */
+    endpoint: string;
+    /** IR schema version this service speaks */
+    schemaVersion: string;
+    /** Entities exposed for cross-service access (with their commands) */
+    entities: ExposedEntity[];
+    /** Health check status (populated by registry health checks) */
+    health?: ServiceHealth;
+    /** Optional service-to-service shared secret or token type for the policy bridge */
+    auth?: ServiceAuthConfig;
+}
+/**
+ * An entity exposed by a remote service for cross-service access.
+ * Only entities and commands explicitly listed here can be invoked remotely.
+ */
+export interface ExposedEntity {
+    /** Entity name as it exists in the remote service's IR */
+    name: string;
+    /** Module the entity belongs to (optional) */
+    module?: string;
+    /** Commands exposed for cross-service invocation */
+    commands: ExposedCommand[];
+}
+/**
+ * A command exposed for cross-service invocation.
+ * Only commands listed here can be called by other services in the federation.
+ */
+export interface ExposedCommand {
+    /** Command name */
+    name: string;
+    /** Whether the command is idempotent (safe to retry) */
+    idempotent: boolean;
+    /** Policy names that must be satisfied for cross-service invocation */
+    requiredPolicies: string[];
+    /** Optional description for documentation/tooling */
+    description?: string;
+}
+/**
+ * Health status of a remote service, populated by periodic health checks.
+ */
+export interface ServiceHealth {
+    /** Whether the service responded to the last health check */
+    reachable: boolean;
+    /** Timestamp (epoch ms) of the last health check */
+    lastCheckedAt: number;
+    /** Optional error message if the service is unreachable */
+    error?: string;
+    /** Reported service version from the health endpoint */
+    version?: string;
+}
+/**
+ * Authentication configuration for service-to-service communication.
+ * The actual credential material is never included in the descriptor —
+ * callers provide a resolver function at invocation time.
+ */
+export interface ServiceAuthConfig {
+    /** Auth scheme used by the remote service */
+    scheme: 'bearer' | 'mtls' | 'api-key' | 'none';
+    /** Optional human-readable hint (e.g. "vault:orders-federation-token") */
+    hint?: string;
+}
+/**
+ * A request to invoke a command on a remote service.
+ * Mirrors RuntimeContext to enable seamless cross-service execution.
+ */
+export interface FederationRequest {
+    /** Name of the remote service to call */
+    serviceId: string;
+    /** Entity name on the remote service */
+    entity: string;
+    /** Command name on the remote service */
+    command: string;
+    /** Input parameters for the command */
+    input: Record<string, unknown>;
+    /** Policy bridge headers — actor identity, tenant, request ID */
+    bridge: PolicyBridgeHeaders;
+    /** Optional timeout in ms (default: 30000) */
+    timeoutMs?: number;
+    /** Optional idempotency key for safe retries */
+    idempotencyKey?: string;
+}
+/**
+ * Response from a remote service after a federation call.
+ * Mirrors CommandResult for consistent error handling.
+ */
+export interface FederationResponse {
+    /** Whether the remote command succeeded */
+    success: boolean;
+    /** Result payload (if success) */
+    result?: unknown;
+    /** Error message (if failure) */
+    error?: string;
+    /** Policy that denied the request (if policy denial) */
+    deniedBy?: string;
+    /** Guard that failed (if guard failure) */
+    guardFailure?: {
+        index: number;
+        expression: string;
+    };
+    /** Events emitted by the remote command */
+    emittedEvents: Array<{
+        name: string;
+        channel: string;
+        payload: unknown;
+    }>;
+    /** Correlation ID echoed from the request bridge */
+    correlationId?: string;
+    /** Service that handled the request */
+    handledBy: string;
+    /** Timestamp (epoch ms) when the response was generated */
+    respondedAt: number;
+}
+/**
+ * Policy bridge headers propagated across service boundaries.
+ * These carry the caller's identity, tenant, and request context
+ * to the remote service so it can enforce its own authorization policies.
+ */
+export interface PolicyBridgeHeaders {
+    /** Acting user identifier (from caller context) */
+    actorId?: string;
+    /** Tenant identifier (from caller context) */
+    tenantId?: string;
+    /** Organization identifier (from caller context) */
+    orgId?: string;
+    /** Actor's role(s) — forwarded so remote policies can check permissions */
+    actorRoles?: string[];
+    /** Request ID for distributed tracing */
+    requestId?: string;
+    /** Correlation ID for grouping related cross-service operations */
+    correlationId?: string;
+    /** Optional bearer token for service-to-service auth */
+    bearerToken?: string;
+}
+/**
+ * Options for the FederationClient.
+ */
+export interface FederationClientOptions {
+    /** Default timeout for federation calls in ms (default: 30000) */
+    defaultTimeoutMs?: number;
+    /** Maximum number of retry attempts for transient failures (default: 0) */
+    maxRetries?: number;
+    /** Delay between retries in ms (default: 1000) */
+    retryDelayMs?: number;
+    /** Function to resolve the auth token for a given service (used when descriptor.auth.scheme !== 'none') */
+    resolveAuthToken?: (serviceId: string) => string | undefined;
+    /** Fetch implementation (defaults to global fetch) */
+    fetchImpl?: typeof fetch;
+}
+/**
+ * Federation registry configuration.
+ */
+export interface FederationRegistryOptions {
+    /** Health check interval in ms (default: 30000). Set to 0 to disable. */
+    healthCheckIntervalMs?: number;
+    /** Health check timeout in ms (default: 5000) */
+    healthCheckTimeoutMs?: number;
+    /** Fetch implementation for health checks (defaults to global fetch) */
+    fetchImpl?: typeof fetch;
+}
+/**
+ * HTTP transport contract used by the federation client.
+ * Implementations translate FederationRequest into actual HTTP calls
+ * and parse the response. The default implementation uses fetch;
+ * custom implementations enable testing and alternative transports.
+ */
+export interface FederationTransport {
+    invoke(descriptor: ServiceDescriptor, request: FederationRequest, options: {
+        timeoutMs: number;
+        authToken?: string;
+    }): Promise<FederationResponse>;
+}
+/**
+ * Generated typed HTTP client adapter for a remote service.
+ * Created by the HTTP adapter generator from a ServiceDescriptor.
+ * Provides strongly-typed methods for each exposed command.
+ */
+export interface TypedClientAdapter {
+    /** Service ID this adapter is bound to */
+    readonly serviceId: string;
+    /** Generated source code for the adapter */
+    readonly source: string;
+    /** Factory that creates a live client instance from a base URL */
+    create(baseUrl: string, options?: {
+        authToken?: string;
+        timeoutMs?: number;
+    }): Record<string, (...args: unknown[]) => Promise<unknown>>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/manifest/federation/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/manifest/federation/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,wEAAwE;IACxE,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,gEAAgE;IAChE,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,oFAAoF;IACpF,IAAI,CAAC,EAAE,iBAAiB,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,0DAA0D;IAC1D,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,QAAQ,EAAE,cAAc,EAAE,CAAC;CAC5B;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,UAAU,EAAE,OAAO,CAAC;IACpB,uEAAuE;IACvE,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,qDAAqD;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,SAAS,EAAE,OAAO,CAAC;IACnB,oDAAoD;IACpD,aAAa,EAAE,MAAM,CAAC;IACtB,2DAA2D;IAC3D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAAC;IAC/C,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,iEAAiE;IACjE,MAAM,EAAE,mBAAmB,CAAC;IAC5B,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gDAAgD;IAChD,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,2CAA2C;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,kCAAkC;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,YAAY,CAAC,EAAE;QACb,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,2CAA2C;IAC3C,aAAa,EAAE,KAAK,CAAC;QACnB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,OAAO,CAAC;KAClB,CAAC,CAAC;IACH,oDAAoD;IACpD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,2DAA2D;IAC3D,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,mDAAmD;IACnD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACrB,kDAAkD;IACjD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,2GAA2G;IAC3G,gBAAgB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAC;IAC7D,sDAAsD;IACtD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACxC,yEAAyE;IACzE,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,iDAAiD;IACjD,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,wEAAwE;IACxE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,CACJ,UAAU,EAAE,iBAAiB,EAC7B,OAAO,EAAE,iBAAiB,EAC1B,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GACjD,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4CAA4C;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kEAAkE;IAClE,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;CACzI"}

package/dist/manifest/federation/types.js

@@ -0,0 +1,13 @@
+/**
+ * Federation type contracts for cross-service Manifest runtime communication.
+ *
+ * Federation enables multiple Manifest runtime instances (microservices) to:
+ * - Discover each other's entity schemas and available commands
+ * - Invoke commands across service boundaries with policy-enforced authorization
+ * - Propagate actor identity and tenant context through a policy bridge
+ * - Generate typed HTTP client adapters from remote IRs
+ *
+ * @module federation/types
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/manifest/federation/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/manifest/federation/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}

package/dist/manifest/generator.d.ts

@@ -0,0 +1,44 @@
+import { ManifestProgram } from './types';
+export declare class CodeGenerator {
+    private out;
+    private serverOut;
+    private testOut;
+    private indent;
+    private provenance;
+    generate(program: ManifestProgram): {
+        code: string;
+        serverCode: string;
+        testCode: string;
+    };
+    private emitRuntime;
+    private emitStoreRuntime;
+    private genStore;
+    private genEntity;
+    private collectEvents;
+    private relationType;
+    private genCommandMethod;
+    private genCommand;
+    private genOutboxEvent;
+    private genReaction;
+    private genRole;
+    private genSaga;
+    private genConstraintChecks;
+    private genBehaviorBinding;
+    private genBehaviorMethod;
+    private genAction;
+    private genFlow;
+    private genEffect;
+    private genExpose;
+    private genServerCode;
+    private genTestCode;
+    private genComposition;
+    private emitExports;
+    private genExpr;
+    private tsType;
+    private defVal;
+    private capitalize;
+    private line;
+    private in;
+    private de;
+}
+//# sourceMappingURL=generator.d.ts.map

package/dist/manifest/generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator.d.ts","sourceRoot":"","sources":["../../src/manifest/generator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAqO,MAAM,SAAS,CAAC;AAU7Q,qBAAa,aAAa;IACxB,OAAO,CAAC,GAAG,CAAgB;IAC3B,OAAO,CAAC,SAAS,CAAgB;IACjC,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,UAAU,CAAuB;IAEzC,QAAQ,CAAC,OAAO,EAAE,eAAe,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE;IAqC1F,OAAO,CAAC,WAAW;IA6CnB,OAAO,CAAC,gBAAgB;IA4DxB,OAAO,CAAC,QAAQ;IAqBhB,OAAO,CAAC,SAAS;IA4GjB,OAAO,CAAC,aAAa;IAcrB,OAAO,CAAC,YAAY;IAKpB,OAAO,CAAC,gBAAgB;IAoDxB,OAAO,CAAC,UAAU;IAoClB,OAAO,CAAC,cAAc;IAuBtB,OAAO,CAAC,WAAW;IAwBnB,OAAO,CAAC,OAAO;IAkBf,OAAO,CAAC,OAAO;IAqBf,OAAO,CAAC,mBAAmB;IAS3B,OAAO,CAAC,kBAAkB;IAU1B,OAAO,CAAC,iBAAiB;IAQzB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,OAAO;IAiBf,OAAO,CAAC,SAAS;IA2BjB,OAAO,CAAC,SAAS;IAoBjB,OAAO,CAAC,aAAa;IA2FrB,OAAO,CAAC,WAAW;IAuDnB,OAAO,CAAC,cAAc;IAgBtB,OAAO,CAAC,WAAW;IAanB,OAAO,CAAC,OAAO;IA4Cf,OAAO,CAAC,MAAM;IAQd,OAAO,CAAC,MAAM;IAMd,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,EAAE;IACV,OAAO,CAAC,EAAE;CACX"}