@heddleagent/execution-host-client 6.0.0-next.0

package/dist/authority/jose-execution-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jose-execution-authority.js","sourceRoot":"","sources":["../../src/authority/jose-execution-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,WAAW,EACX,OAAO,EACP,aAAa,EACb,SAAS,GAIV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAW/B,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,iBAAiB;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,eAAe;IACvB,SAAS,EAAE,cAAc;IACzB,iBAAiB,EAAE,iBAAiB;IACpC,KAAK,EAAE,cAAc;IACrB,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IACzD,GAAG,EAAE,iCAAiC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;YACzB,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACvD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;YAC3B,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACjF,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,yBAAyB;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,YAAY,EAAE,qBAAqB;KACpC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACpB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACxC,CAAC,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;IAC5C,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACpE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACxB,OAAO,CAAiD;IACxD,WAAW,CAAY;IACvB,UAAU,CAAgB;IAC1B,IAAI,CAAa;IACjB,mBAAmB,CAAe;IAE3C,YACE,MAAgC,EAChC,GAA8C,EAC9C,OAAsC;QAEtC,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,IAAI,UAAU,CAAC;IACtE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,MAAgC,EAChC,OAAkC,EAClC,UAAyC,EAAE;QAE3C,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,2BAA2B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,IAAI,sBAAsB,CAC/B,MAAM,EACN;YACE,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;SAC9C,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,KAAmC;QAEnC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,kBAAkB,GAAG,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACvE,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAC3D,SAAS,EACT,QAAQ,EACR,kBAAkB,CACnB,CAAC;QAEF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG;YAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAC9B,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,EACpC,QAAQ,CACT;YACD,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,IAAI,iCAAiC,CAC1C,kBAAkB,EAClB,GAAG,EAAE,SAAS,EACd,oBAAoB,CAAC;YACnB,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,GAAG,SAAS,CAAC,KAAK;aACnB;YACD,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;YAClC,kBAAkB,EAAE,cAAc,CAAC,kBAAkB,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,UAAU;QACR,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,uBAAuB,CACrB,KAAyD,EACzD,QAAgB,EAChB,SAAiB;QAEjB,OAAO,IAAI,OAAO,CAAC;YACjB,eAAe,EAAE,0BAA0B;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,wBAAwB;SAC9B,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aAC9B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;aAC3C,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;aAC1B,WAAW,CAAC,QAAQ,CAAC;aACrB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,KAEC,EACD,QAAgB;QAKhB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAI,CAAC;QACpC,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACtE,IAAI,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAC;YAClC,eAAe,EAAE,0BAA0B;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;SAC1C,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,mBAAmB;SACzB,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aAC9B,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC/B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjC,MAAM,CAAC,YAAY,CAAC;aACpB,WAAW,CAAC,QAAQ,CAAC;aACrB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE1B,OAAO;YACL,SAAS;YACT,QAAQ,EAAE;gBACR,YAAY;gBACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACxD,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;aACrC;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,iCAAiC;IAC5B,QAAQ,CAAmC;IAC3C,mBAAmB,CAAS;IAC5B,cAAc,CAAqB;IAE5C,YACE,kBAA0B,EAC1B,aAAiC,EACjC,QAA0C;QAE1C,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,GAAQ,EAAE,KAAa;IAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,GAAG,EAAE,iBAAiB;QACtB,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK;KACX,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAc;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS;WAClC,SAAS,CAAC,IAAI,KAAK,OAAO;WAC1B,SAAS,CAAC,UAAU,KAAK,OAAO;WAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAc;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,QAAQ;WACjC,SAAS,CAAC,IAAI,KAAK,OAAO;WAC1B,SAAS,CAAC,UAAU,KAAK,OAAO;WAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAkC;IAElC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,WAAW,CACjC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CACxE;aACE,kBAAkB,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;aAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5B,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;YAC5C,UAAU,EAAE,CAAC,iBAAiB,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAW;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB;IAC1C,OAAO,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAsD;IAEtD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA0C;IAE1C,MAAM,KAAK,GAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG;QACtB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACd,GAAG,QAAQ,CAAC,GAAG;YACf,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;SAC5D,CAAC;QACF,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import { randomUUID } from 'node:crypto';\nimport {\n  CompactSign,\n  SignJWT,\n  compactVerify,\n  exportJWK,\n  type CryptoKey,\n  type JWK,\n  type JSONWebKeySet,\n} from 'jose';\nimport { z } from 'zod';\nimport {\n  CONVERSATION_TURN_WORKFLOW,\n  EXECUTION_ASSERTION_TYPE,\n  EXECUTION_CONTRACT_VERSION,\n  ExecutionScopeSchema,\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  MCP_CAPABILITY_TYPE,\n  McpAllowedToolsSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n  type ExecutionScope,\n} from '../contracts/index.js';\nimport type {\n  ExecutionAuthority,\n  ExecutionAuthorityConfig,\n  ExecutionAuthorityIssueInput,\n  ExecutionAuthorityKeyPair,\n  IssuedExecutionAuthority,\n  IssuedExecutionAuthorityMetadata,\n  JoseExecutionAuthorityOptions,\n} from './types.js';\n\nconst SIGNING_ALGORITHM = 'ES256';\nconst ExecutionAuthorityMcpConfigSchema = z.object({\n  audience: JwtAudienceSchema,\n  serverId: McpServerIdSchema,\n  ttlSeconds: z.number().int().min(1).max(15 * 60),\n}).strict();\nconst ExecutionAuthorityConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  adopterId: OpaqueIdSchema,\n  executionAudience: JwtAudienceSchema,\n  keyId: OpaqueIdSchema,\n  executionTtlSeconds: z.number().int().min(1).max(15 * 60),\n  mcp: ExecutionAuthorityMcpConfigSchema.optional(),\n}).strict().superRefine((config, context) => {\n  if (!config.mcp) {\n    return;\n  }\n  if (config.executionAudience === config.mcp.audience) {\n    context.addIssue({\n      code: 'custom',\n      path: ['mcp', 'audience'],\n      message: 'must be distinct from the execution audience',\n    });\n  }\n  if (config.mcp.ttlSeconds < config.executionTtlSeconds) {\n    context.addIssue({\n      code: 'custom',\n      path: ['mcp', 'ttlSeconds'],\n      message: 'must not expire before execution admission authority',\n    });\n  }\n});\nconst ExecutionIssueScopeSchema = ExecutionScopeSchema.omit({ adopterId: true });\nconst ExecutionAuthorityIssueInputSchema = z.object({\n  scope: ExecutionIssueScopeSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: OpaqueIdSchema,\n  workflow: z.literal(CONVERSATION_TURN_WORKFLOW),\n  mcp: z.object({\n    allowedTools: McpAllowedToolsSchema,\n  }).strict().optional(),\n}).strict();\nconst PublicP256JwkSchema = z.object({\n  kty: z.literal('EC'),\n  crv: z.literal('P-256'),\n  x: z.string().regex(/^[A-Za-z0-9_-]+$/),\n  y: z.string().regex(/^[A-Za-z0-9_-]+$/),\n}).passthrough().superRefine((jwk, context) => {\n  const privateFields = ['d', 'p', 'q', 'dp', 'dq', 'qi', 'oth', 'k'];\n  if (privateFields.some((field) => field in jwk)) {\n    context.addIssue({\n      code: 'custom',\n      message: 'must not contain private key material',\n    });\n  }\n});\n\n/**\n * ES256 reference adapter for issuing one invocation's admission assertion and\n * optional product-MCP capability.\n */\nexport class JoseExecutionAuthority implements ExecutionAuthority {\n  readonly #config: z.infer<typeof ExecutionAuthorityConfigSchema>;\n  readonly #privateKey: CryptoKey;\n  readonly #publicJwk: Readonly<JWK>;\n  readonly #now: () => Date;\n  readonly #createCapabilityId: () => string;\n\n  private constructor(\n    config: ExecutionAuthorityConfig,\n    key: { privateKey: CryptoKey; publicJwk: JWK },\n    options: JoseExecutionAuthorityOptions,\n  ) {\n    this.#config = deepFreezeConfig(ExecutionAuthorityConfigSchema.parse(config));\n    assertPrivateSigningKey(key.privateKey);\n    this.#privateKey = key.privateKey;\n    this.#publicJwk = projectPublicJwk(key.publicJwk, this.#config.keyId);\n    this.#now = options.now ?? (() => new Date());\n    this.#createCapabilityId = options.createCapabilityId ?? randomUUID;\n  }\n\n  static async create(\n    config: ExecutionAuthorityConfig,\n    keyPair: ExecutionAuthorityKeyPair,\n    options: JoseExecutionAuthorityOptions = {},\n  ): Promise<JoseExecutionAuthority> {\n    assertPrivateSigningKey(keyPair.privateKey);\n    assertPublicVerificationKey(keyPair.publicKey);\n    await assertMatchingKeyPair(keyPair);\n    return new JoseExecutionAuthority(\n      config,\n      {\n        privateKey: keyPair.privateKey,\n        publicJwk: await exportJWK(keyPair.publicKey),\n      },\n      options,\n    );\n  }\n\n  async issue(\n    input: ExecutionAuthorityIssueInput,\n  ): Promise<IssuedExecutionAuthority> {\n    const authority = ExecutionAuthorityIssueInputSchema.parse(input);\n    if (authority.mcp && !this.#config.mcp) {\n      throw new Error(\n        'Execution authority cannot issue an MCP capability without MCP deployment configuration.',\n      );\n    }\n\n    const issuedAt = toEpochSeconds(this.#now());\n    const executionExpiresAt = issuedAt + this.#config.executionTtlSeconds;\n    const executionAssertion = await this.#signExecutionAssertion(\n      authority,\n      issuedAt,\n      executionExpiresAt,\n    );\n\n    const mcp = authority.mcp && this.#config.mcp\n      ? await this.#issueMcpCapability(\n        { ...authority, mcp: authority.mcp },\n        issuedAt,\n      )\n      : undefined;\n\n    return new ProtectedIssuedExecutionAuthority(\n      executionAssertion,\n      mcp?.assertion,\n      freezeIssuedMetadata({\n        scope: {\n          adopterId: this.#config.adopterId,\n          ...authority.scope,\n        },\n        runtimeSessionId: authority.runtimeSessionId,\n        invocationId: authority.invocationId,\n        workflow: authority.workflow,\n        issuedAt: toIsoTimestamp(issuedAt),\n        executionExpiresAt: toIsoTimestamp(executionExpiresAt),\n        ...(mcp ? { mcp: mcp.metadata } : {}),\n      }),\n    );\n  }\n\n  publicJwks(): JSONWebKeySet {\n    return { keys: [{ ...this.#publicJwk }] };\n  }\n\n  #signExecutionAssertion(\n    input: z.infer<typeof ExecutionAuthorityIssueInputSchema>,\n    issuedAt: number,\n    expiresAt: number,\n  ): Promise<string> {\n    return new SignJWT({\n      contractVersion: EXECUTION_CONTRACT_VERSION,\n      adopterId: this.#config.adopterId,\n      tenantId: input.scope.tenantId,\n      productSessionId: input.scope.productSessionId,\n      runtimeSessionId: input.runtimeSessionId,\n      workflow: input.workflow,\n    })\n      .setProtectedHeader({\n        alg: SIGNING_ALGORITHM,\n        kid: this.#config.keyId,\n        typ: EXECUTION_ASSERTION_TYPE,\n      })\n      .setIssuer(this.#config.issuer)\n      .setAudience(this.#config.executionAudience)\n      .setSubject(input.scope.subjectId)\n      .setJti(input.invocationId)\n      .setIssuedAt(issuedAt)\n      .setExpirationTime(expiresAt)\n      .sign(this.#privateKey);\n  }\n\n  async #issueMcpCapability(\n    input: z.infer<typeof ExecutionAuthorityIssueInputSchema> & {\n      mcp: { allowedTools: string[] };\n    },\n    issuedAt: number,\n  ): Promise<{\n    assertion: string;\n    metadata: NonNullable<IssuedExecutionAuthorityMetadata['mcp']>;\n  }> {\n    const mcpConfig = this.#config.mcp!;\n    const capabilityId = OpaqueIdSchema.parse(this.#createCapabilityId());\n    if (capabilityId === input.invocationId) {\n      throw new Error(\n        'MCP capability identity must be distinct from the invocation identity.',\n      );\n    }\n    const expiresAt = issuedAt + mcpConfig.ttlSeconds;\n    const assertion = await new SignJWT({\n      contractVersion: EXECUTION_CONTRACT_VERSION,\n      adopterId: this.#config.adopterId,\n      tenantId: input.scope.tenantId,\n      productSessionId: input.scope.productSessionId,\n      runtimeSessionId: input.runtimeSessionId,\n      invocationId: input.invocationId,\n      workflow: input.workflow,\n      serverId: mcpConfig.serverId,\n      allowedTools: [...input.mcp.allowedTools],\n    })\n      .setProtectedHeader({\n        alg: SIGNING_ALGORITHM,\n        kid: this.#config.keyId,\n        typ: MCP_CAPABILITY_TYPE,\n      })\n      .setIssuer(this.#config.issuer)\n      .setAudience(mcpConfig.audience)\n      .setSubject(input.scope.subjectId)\n      .setJti(capabilityId)\n      .setIssuedAt(issuedAt)\n      .setExpirationTime(expiresAt)\n      .sign(this.#privateKey);\n\n    return {\n      assertion,\n      metadata: {\n        capabilityId,\n        serverId: mcpConfig.serverId,\n        allowedTools: Object.freeze([...input.mcp.allowedTools]),\n        expiresAt: toIsoTimestamp(expiresAt),\n      },\n    };\n  }\n}\n\nclass ProtectedIssuedExecutionAuthority implements IssuedExecutionAuthority {\n  readonly metadata: IssuedExecutionAuthorityMetadata;\n  readonly #executionAssertion: string;\n  readonly #mcpCapability: string | undefined;\n\n  constructor(\n    executionAssertion: string,\n    mcpCapability: string | undefined,\n    metadata: IssuedExecutionAuthorityMetadata,\n  ) {\n    this.#executionAssertion = executionAssertion;\n    this.#mcpCapability = mcpCapability;\n    this.metadata = metadata;\n  }\n\n  executionAssertion(): string {\n    return this.#executionAssertion;\n  }\n\n  mcpCapability(): string | undefined {\n    return this.#mcpCapability;\n  }\n\n  toJSON(): IssuedExecutionAuthorityMetadata {\n    return this.metadata;\n  }\n}\n\nfunction projectPublicJwk(jwk: JWK, keyId: string): Readonly<JWK> {\n  const parsed = PublicP256JwkSchema.parse(jwk);\n  return Object.freeze({\n    kty: parsed.kty,\n    crv: parsed.crv,\n    x: parsed.x,\n    y: parsed.y,\n    alg: SIGNING_ALGORITHM,\n    kid: keyId,\n    use: 'sig',\n  });\n}\n\nfunction assertPrivateSigningKey(key: CryptoKey): void {\n  const algorithm = key.algorithm as { name: string; namedCurve?: string };\n  const accepted = key.type === 'private'\n    && algorithm.name === 'ECDSA'\n    && algorithm.namedCurve === 'P-256'\n    && key.usages.includes('sign');\n  if (!accepted) {\n    throw new Error(\n      'Execution authority requires an ES256 private signing key.',\n    );\n  }\n}\n\nfunction assertPublicVerificationKey(key: CryptoKey): void {\n  const algorithm = key.algorithm as { name: string; namedCurve?: string };\n  const accepted = key.type === 'public'\n    && algorithm.name === 'ECDSA'\n    && algorithm.namedCurve === 'P-256'\n    && key.usages.includes('verify');\n  if (!accepted) {\n    throw new Error(\n      'Execution authority requires an ES256 public verification key.',\n    );\n  }\n}\n\nasync function assertMatchingKeyPair(\n  keyPair: ExecutionAuthorityKeyPair,\n): Promise<void> {\n  try {\n    const probe = await new CompactSign(\n      new TextEncoder().encode('heddle-adopter-execution-authority-key-pair'),\n    )\n      .setProtectedHeader({ alg: SIGNING_ALGORITHM })\n      .sign(keyPair.privateKey);\n    await compactVerify(probe, keyPair.publicKey, {\n      algorithms: [SIGNING_ALGORITHM],\n    });\n  } catch {\n    throw new Error('Execution authority signing keys do not match.');\n  }\n}\n\nfunction toEpochSeconds(value: Date): number {\n  const seconds = Math.floor(value.getTime() / 1_000);\n  if (!Number.isSafeInteger(seconds) || seconds < 0) {\n    throw new Error('Execution authority could not resolve a valid issue time.');\n  }\n  return seconds;\n}\n\nfunction toIsoTimestamp(epochSeconds: number): string {\n  return new Date(epochSeconds * 1_000).toISOString();\n}\n\nfunction deepFreezeConfig(\n  config: z.infer<typeof ExecutionAuthorityConfigSchema>,\n): z.infer<typeof ExecutionAuthorityConfigSchema> {\n  const mcp = config.mcp ? Object.freeze({ ...config.mcp }) : undefined;\n  return Object.freeze({ ...config, ...(mcp ? { mcp } : {}) });\n}\n\nfunction freezeIssuedMetadata(\n  metadata: IssuedExecutionAuthorityMetadata,\n): IssuedExecutionAuthorityMetadata {\n  const scope: ExecutionScope = Object.freeze({ ...metadata.scope });\n  const mcp = metadata.mcp\n    ? Object.freeze({\n      ...metadata.mcp,\n      allowedTools: Object.freeze([...metadata.mcp.allowedTools]),\n    })\n    : undefined;\n  return Object.freeze({ ...metadata, scope, ...(mcp ? { mcp } : {}) });\n}\n"]}

package/dist/authority/types.d.ts

@@ -0,0 +1,63 @@
+import type { CryptoKey, JSONWebKeySet } from 'jose';
+import type { ExecutionScope, HostedExecutionWorkflow } from '../contracts/index.js';
+export type ExecutionAuthorityMcpConfig = {
+    audience: string;
+    serverId: string;
+    ttlSeconds: number;
+};
+export type ExecutionAuthorityConfig = {
+    issuer: string;
+    adopterId: string;
+    executionAudience: string;
+    keyId: string;
+    executionTtlSeconds: number;
+    mcp?: ExecutionAuthorityMcpConfig;
+};
+export type ExecutionAuthorityIssueInput = {
+    scope: Omit<ExecutionScope, 'adopterId'>;
+    runtimeSessionId: string;
+    invocationId: string;
+    workflow: HostedExecutionWorkflow;
+    mcp?: {
+        allowedTools: readonly string[];
+    };
+};
+export type IssuedMcpCapabilityMetadata = {
+    capabilityId: string;
+    serverId: string;
+    allowedTools: readonly string[];
+    expiresAt: string;
+};
+export type IssuedExecutionAuthorityMetadata = {
+    scope: ExecutionScope;
+    runtimeSessionId: string;
+    invocationId: string;
+    workflow: HostedExecutionWorkflow;
+    issuedAt: string;
+    executionExpiresAt: string;
+    mcp?: IssuedMcpCapabilityMetadata;
+};
+/**
+ * Short-lived credentials are available only through explicit accessors.
+ * JSON serialization contains credential-free metadata. Identifiers can still
+ * be product data and remain subject to the adopter's logging policy.
+ */
+export interface IssuedExecutionAuthority {
+    readonly metadata: IssuedExecutionAuthorityMetadata;
+    executionAssertion(): string;
+    mcpCapability(): string | undefined;
+    toJSON(): IssuedExecutionAuthorityMetadata;
+}
+export interface ExecutionAuthority {
+    issue(input: ExecutionAuthorityIssueInput): Promise<IssuedExecutionAuthority>;
+    publicJwks(): JSONWebKeySet;
+}
+export type ExecutionAuthorityKeyPair = {
+    privateKey: CryptoKey;
+    publicKey: CryptoKey;
+};
+export type JoseExecutionAuthorityOptions = {
+    now?: () => Date;
+    createCapabilityId?: () => string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/authority/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/authority/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,2BAA2B,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,GAAG,CAAC,EAAE;QACJ,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,KAAK,EAAE,cAAc,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,2BAA2B,CAAC;CACnC,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,kBAAkB,IAAI,MAAM,CAAC;IAC7B,aAAa,IAAI,MAAM,GAAG,SAAS,CAAC;IACpC,MAAM,IAAI,gCAAgC,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9E,UAAU,IAAI,aAAa,CAAC;CAC7B;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;CACnC,CAAC"}

package/dist/authority/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/authority/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/authority/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { CryptoKey, JSONWebKeySet } from 'jose';\nimport type {\n  ExecutionScope,\n  HostedExecutionWorkflow,\n} from '../contracts/index.js';\n\nexport type ExecutionAuthorityMcpConfig = {\n  audience: string;\n  serverId: string;\n  ttlSeconds: number;\n};\n\nexport type ExecutionAuthorityConfig = {\n  issuer: string;\n  adopterId: string;\n  executionAudience: string;\n  keyId: string;\n  executionTtlSeconds: number;\n  mcp?: ExecutionAuthorityMcpConfig;\n};\n\nexport type ExecutionAuthorityIssueInput = {\n  scope: Omit<ExecutionScope, 'adopterId'>;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  mcp?: {\n    allowedTools: readonly string[];\n  };\n};\n\nexport type IssuedMcpCapabilityMetadata = {\n  capabilityId: string;\n  serverId: string;\n  allowedTools: readonly string[];\n  expiresAt: string;\n};\n\nexport type IssuedExecutionAuthorityMetadata = {\n  scope: ExecutionScope;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  issuedAt: string;\n  executionExpiresAt: string;\n  mcp?: IssuedMcpCapabilityMetadata;\n};\n\n/**\n * Short-lived credentials are available only through explicit accessors.\n * JSON serialization contains credential-free metadata. Identifiers can still\n * be product data and remain subject to the adopter's logging policy.\n */\nexport interface IssuedExecutionAuthority {\n  readonly metadata: IssuedExecutionAuthorityMetadata;\n  executionAssertion(): string;\n  mcpCapability(): string | undefined;\n  toJSON(): IssuedExecutionAuthorityMetadata;\n}\n\nexport interface ExecutionAuthority {\n  issue(input: ExecutionAuthorityIssueInput): Promise<IssuedExecutionAuthority>;\n  publicJwks(): JSONWebKeySet;\n}\n\nexport type ExecutionAuthorityKeyPair = {\n  privateKey: CryptoKey;\n  publicKey: CryptoKey;\n};\n\nexport type JoseExecutionAuthorityOptions = {\n  now?: () => Date;\n  createCapabilityId?: () => string;\n};\n"]}

package/dist/contracts/index.d.ts

@@ -0,0 +1,163 @@
+import { z } from 'zod';
+export declare const EXECUTION_CONTRACT_VERSION: 1;
+export declare const CONVERSATION_TURN_WORKFLOW: "conversation-turn";
+export declare const EXECUTION_ASSERTION_TYPE: "heddle-execution+jwt";
+export declare const MCP_CAPABILITY_TYPE: "heddle-mcp-capability+jwt";
+export declare const AGENTCORE_RUNTIME_SESSION_HEADER: "x-amzn-bedrock-agentcore-runtime-session-id";
+export declare const EXECUTION_HOST_LOCAL_TOKEN_HEADER: "x-heddle-execution-host-local-token";
+export declare const EXECUTION_ASSERTION_HEADER: "x-heddle-execution-host-assertion";
+export declare const MCP_CAPABILITY_HEADER: "x-heddle-execution-host-mcp-capability";
+export declare const MODEL_API_KEY_HEADER: "x-heddle-execution-host-model-api-key";
+export declare const OpaqueIdSchema: z.ZodString;
+export declare const JwtIssuerSchema: z.ZodURL;
+export declare const JwtAudienceSchema: z.ZodString;
+export declare const RuntimeSessionIdSchema: z.ZodString;
+export declare const TimestampSchema: z.ZodISODateTime;
+export declare const McpServerIdSchema: z.ZodString;
+export declare const McpToolNameSchema: z.ZodString;
+export declare const McpAllowedToolsSchema: z.ZodArray<z.ZodString>;
+export declare const ExecutionScopeSchema: z.ZodObject<{
+    adopterId: z.ZodString;
+    tenantId: z.ZodString;
+    subjectId: z.ZodString;
+    productSessionId: z.ZodString;
+}, z.core.$strict>;
+export declare const ExecutionHostConversationTurnRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"conversation-turn">;
+    invocationId: z.ZodString;
+    prompt: z.ZodString;
+    deadlineAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strict>;
+export declare const RuntimePublicResultSchema: z.ZodObject<{
+    outcome: z.ZodEnum<{
+        error: "error";
+        done: "done";
+        max_steps: "max_steps";
+        interrupted: "interrupted";
+    }>;
+    summary: z.ZodOptional<z.ZodString>;
+    failure: z.ZodOptional<z.ZodObject<{
+        source: z.ZodLiteral<"model">;
+        code: z.ZodEnum<{
+            unknown: "unknown";
+            authentication: "authentication";
+            permission: "permission";
+            quota: "quota";
+            rate_limit: "rate_limit";
+            context_window: "context_window";
+            request: "request";
+            transport: "transport";
+            empty_response: "empty_response";
+        }>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const ExecutionHostStreamEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    timestamp: z.ZodISODateTime;
+    sequence: z.ZodLiteral<0>;
+    kind: z.ZodLiteral<"accepted">;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"activity">;
+    activity: z.ZodUnknown;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"result">;
+    result: z.ZodObject<{
+        outcome: z.ZodEnum<{
+            error: "error";
+            done: "done";
+            max_steps: "max_steps";
+            interrupted: "interrupted";
+        }>;
+        summary: z.ZodOptional<z.ZodString>;
+        failure: z.ZodOptional<z.ZodObject<{
+            source: z.ZodLiteral<"model">;
+            code: z.ZodEnum<{
+                unknown: "unknown";
+                authentication: "authentication";
+                permission: "permission";
+                quota: "quota";
+                rate_limit: "rate_limit";
+                context_window: "context_window";
+                request: "request";
+                transport: "transport";
+                empty_response: "empty_response";
+            }>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"cancelled">;
+    reason: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"error">;
+    error: z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>], "kind">;
+export declare const ExecutionAssertionClaimsSchema: z.ZodObject<{
+    iss: z.ZodURL;
+    aud: z.ZodString;
+    contractVersion: z.ZodLiteral<1>;
+    adopterId: z.ZodString;
+    tenantId: z.ZodString;
+    productSessionId: z.ZodString;
+    runtimeSessionId: z.ZodString;
+    workflow: z.ZodLiteral<"conversation-turn">;
+    sub: z.ZodString;
+    jti: z.ZodString;
+    iat: z.ZodNumber;
+    exp: z.ZodNumber;
+}, z.core.$loose>;
+export declare const McpCapabilityClaimsSchema: z.ZodObject<{
+    iss: z.ZodURL;
+    aud: z.ZodString;
+    contractVersion: z.ZodLiteral<1>;
+    adopterId: z.ZodString;
+    tenantId: z.ZodString;
+    productSessionId: z.ZodString;
+    runtimeSessionId: z.ZodString;
+    invocationId: z.ZodString;
+    workflow: z.ZodLiteral<"conversation-turn">;
+    serverId: z.ZodString;
+    allowedTools: z.ZodArray<z.ZodString>;
+    sub: z.ZodString;
+    jti: z.ZodString;
+    iat: z.ZodNumber;
+    exp: z.ZodNumber;
+}, z.core.$loose>;
+export type ExecutionScope = z.infer<typeof ExecutionScopeSchema>;
+export type ExecutionHostConversationTurnRequest = z.infer<typeof ExecutionHostConversationTurnRequestSchema>;
+export type RuntimePublicResult = z.infer<typeof RuntimePublicResultSchema>;
+export type ExecutionHostStreamEvent = z.infer<typeof ExecutionHostStreamEventSchema>;
+export type ExecutionHostTerminalEvent = Extract<ExecutionHostStreamEvent, {
+    kind: 'result' | 'cancelled' | 'error';
+}>;
+export type ExecutionAssertionClaims = z.infer<typeof ExecutionAssertionClaimsSchema>;
+export type McpCapabilityClaims = z.infer<typeof McpCapabilityClaimsSchema>;
+export type HostedExecutionWorkflow = typeof CONVERSATION_TURN_WORKFLOW;
+export declare function isExecutionHostTerminalEvent(event: ExecutionHostStreamEvent): event is ExecutionHostTerminalEvent;
+export declare function isSafeWebUrl(url: URL): boolean;
+//# sourceMappingURL=index.d.ts.map

package/dist/contracts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,0BAA0B,EAAG,mBAA4B,CAAC;AACvE,eAAO,MAAM,wBAAwB,EAAG,sBAA+B,CAAC;AACxE,eAAO,MAAM,mBAAmB,EAAG,2BAAoC,CAAC;AAExE,eAAO,MAAM,gCAAgC,EAC3C,6CAAsD,CAAC;AACzD,eAAO,MAAM,iCAAiC,EAC5C,qCAA8C,CAAC;AACjD,eAAO,MAAM,0BAA0B,EACrC,mCAA4C,CAAC;AAC/C,eAAO,MAAM,qBAAqB,EAChC,wCAAiD,CAAC;AACpD,eAAO,MAAM,oBAAoB,EAC/B,uCAAgD,CAAC;AAEnD,eAAO,MAAM,cAAc,aAOxB,CAAC;AAEJ,eAAO,MAAM,eAAe,UAG3B,CAAC;AAEF,eAAO,MAAM,iBAAiB,aAA6B,CAAC;AAE5D,eAAO,MAAM,sBAAsB,aAI8C,CAAC;AAElF,eAAO,MAAM,eAAe,kBAAmC,CAAC;AAEhE,eAAO,MAAM,iBAAiB,aAO3B,CAAC;AAEJ,eAAO,MAAM,iBAAiB,aAO3B,CAAC;AAEJ,eAAO,MAAM,qBAAqB,yBAa/B,CAAC;AAEJ,eAAO,MAAM,oBAAoB;;;;;kBAKtB,CAAC;AAEZ,eAAO,MAAM,0CAA0C;;;;;;kBAM5C,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;kBAiB3B,CAAC;AAUZ,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAwBzC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;iBAa3B,CAAC;AAEjB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAgBtB,CAAC;AAEjB,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CACxD,OAAO,0CAA0C,CAClD,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAC9C,wBAAwB,EACxB;IAAE,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAA;CAAE,CAC3C,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,uBAAuB,GAAG,OAAO,0BAA0B,CAAC;AAExE,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,wBAAwB,GAC9B,KAAK,IAAI,0BAA0B,CAIrC;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAO9C"}

package/dist/contracts/index.js

@@ -0,0 +1,149 @@
+import { z } from 'zod';
+export const EXECUTION_CONTRACT_VERSION = 1;
+export const CONVERSATION_TURN_WORKFLOW = 'conversation-turn';
+export const EXECUTION_ASSERTION_TYPE = 'heddle-execution+jwt';
+export const MCP_CAPABILITY_TYPE = 'heddle-mcp-capability+jwt';
+export const AGENTCORE_RUNTIME_SESSION_HEADER = 'x-amzn-bedrock-agentcore-runtime-session-id';
+export const EXECUTION_HOST_LOCAL_TOKEN_HEADER = 'x-heddle-execution-host-local-token';
+export const EXECUTION_ASSERTION_HEADER = 'x-heddle-execution-host-assertion';
+export const MCP_CAPABILITY_HEADER = 'x-heddle-execution-host-mcp-capability';
+export const MODEL_API_KEY_HEADER = 'x-heddle-execution-host-model-api-key';
+export const OpaqueIdSchema = z
+    .string()
+    .min(1)
+    .max(128)
+    .regex(/^[A-Za-z0-9][A-Za-z0-9._:@-]*$/, 'must be an opaque, path-free identifier');
+export const JwtIssuerSchema = z.url().refine((value) => isSafeWebUrl(new URL(value)), 'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment');
+export const JwtAudienceSchema = z.string().min(1).max(512);
+export const RuntimeSessionIdSchema = z
+    .string()
+    .min(33)
+    .max(256)
+    .refine((value) => value === value.trim(), 'must not contain outer whitespace');
+export const TimestampSchema = z.iso.datetime({ offset: true });
+export const McpServerIdSchema = z
+    .string()
+    .min(1)
+    .max(64)
+    .regex(/^[A-Za-z0-9_-]+$/, 'must be a Heddle-compatible MCP server identifier');
+export const McpToolNameSchema = z
+    .string()
+    .min(1)
+    .max(64)
+    .regex(/^[A-Za-z][A-Za-z0-9_]*$/, 'must be a collision-free MCP tool name');
+export const McpAllowedToolsSchema = z
+    .array(McpToolNameSchema)
+    .min(1)
+    .max(16)
+    .refine((tools) => new Set(tools).size === tools.length, {
+    message: 'must contain unique MCP tool names',
+})
+    .refine((tools) => tools.reduce((characterCount, toolName) => characterCount + toolName.length, 0) <= 512, { message: 'contains too many aggregate tool-name characters' });
+export const ExecutionScopeSchema = z.object({
+    adopterId: OpaqueIdSchema,
+    tenantId: OpaqueIdSchema,
+    subjectId: OpaqueIdSchema,
+    productSessionId: OpaqueIdSchema,
+}).strict();
+export const ExecutionHostConversationTurnRequestSchema = z.object({
+    schemaVersion: z.literal(EXECUTION_CONTRACT_VERSION),
+    kind: z.literal(CONVERSATION_TURN_WORKFLOW),
+    invocationId: OpaqueIdSchema,
+    prompt: z.string().trim().min(1).max(200_000),
+    deadlineAt: TimestampSchema.optional(),
+}).strict();
+export const RuntimePublicResultSchema = z.object({
+    outcome: z.enum(['done', 'max_steps', 'error', 'interrupted']),
+    summary: z.string().optional(),
+    failure: z.object({
+        source: z.literal('model'),
+        code: z.enum([
+            'authentication',
+            'permission',
+            'quota',
+            'rate_limit',
+            'context_window',
+            'request',
+            'transport',
+            'empty_response',
+            'unknown',
+        ]),
+    }).strict().optional(),
+}).strict();
+const StreamEnvelopeSchema = z.object({
+    schemaVersion: z.literal(EXECUTION_CONTRACT_VERSION),
+    invocationId: OpaqueIdSchema,
+    runId: OpaqueIdSchema,
+    sequence: z.number().int().nonnegative(),
+    timestamp: TimestampSchema,
+});
+export const ExecutionHostStreamEventSchema = z.discriminatedUnion('kind', [
+    StreamEnvelopeSchema.extend({
+        sequence: z.literal(0),
+        kind: z.literal('accepted'),
+    }).strict(),
+    StreamEnvelopeSchema.extend({
+        kind: z.literal('activity'),
+        activity: z.unknown(),
+    }).strict(),
+    StreamEnvelopeSchema.extend({
+        kind: z.literal('result'),
+        result: RuntimePublicResultSchema,
+    }).strict(),
+    StreamEnvelopeSchema.extend({
+        kind: z.literal('cancelled'),
+        reason: z.string(),
+    }).strict(),
+    StreamEnvelopeSchema.extend({
+        kind: z.literal('error'),
+        error: z.object({
+            code: z.string().min(1).max(128).regex(/^[a-z0-9_]+$/),
+            message: z.string().min(1).max(1_600),
+        }).strict(),
+    }).strict(),
+]);
+export const ExecutionAssertionClaimsSchema = z.object({
+    iss: JwtIssuerSchema,
+    aud: JwtAudienceSchema,
+    contractVersion: z.literal(EXECUTION_CONTRACT_VERSION),
+    adopterId: OpaqueIdSchema,
+    tenantId: OpaqueIdSchema,
+    productSessionId: OpaqueIdSchema,
+    runtimeSessionId: RuntimeSessionIdSchema,
+    workflow: z.literal(CONVERSATION_TURN_WORKFLOW),
+    sub: OpaqueIdSchema,
+    jti: OpaqueIdSchema,
+    iat: z.number().int().nonnegative(),
+    exp: z.number().int().positive(),
+}).passthrough();
+export const McpCapabilityClaimsSchema = z.object({
+    iss: JwtIssuerSchema,
+    aud: JwtAudienceSchema,
+    contractVersion: z.literal(EXECUTION_CONTRACT_VERSION),
+    adopterId: OpaqueIdSchema,
+    tenantId: OpaqueIdSchema,
+    productSessionId: OpaqueIdSchema,
+    runtimeSessionId: RuntimeSessionIdSchema,
+    invocationId: OpaqueIdSchema,
+    workflow: z.literal(CONVERSATION_TURN_WORKFLOW),
+    serverId: McpServerIdSchema,
+    allowedTools: McpAllowedToolsSchema,
+    sub: OpaqueIdSchema,
+    jti: OpaqueIdSchema,
+    iat: z.number().int().nonnegative(),
+    exp: z.number().int().positive(),
+}).passthrough();
+export function isExecutionHostTerminalEvent(event) {
+    return event.kind === 'result'
+        || event.kind === 'cancelled'
+        || event.kind === 'error';
+}
+export function isSafeWebUrl(url) {
+    const loopback = ['127.0.0.1', '[::1]', 'localhost'].includes(url.hostname);
+    return (url.protocol === 'https:' || (url.protocol === 'http:' && loopback))
+        && !url.username
+        && !url.password
+        && !url.search
+        && !url.hash;
+}
+//# sourceMappingURL=index.js.map

package/dist/contracts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAU,CAAC;AACrD,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAA4B,CAAC;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAA+B,CAAC;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAAoC,CAAC;AAExE,MAAM,CAAC,MAAM,gCAAgC,GAC3C,6CAAsD,CAAC;AACzD,MAAM,CAAC,MAAM,iCAAiC,GAC5C,qCAA8C,CAAC;AACjD,MAAM,CAAC,MAAM,0BAA0B,GACrC,mCAA4C,CAAC;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAChC,wCAAiD,CAAC;AACpD,MAAM,CAAC,MAAM,oBAAoB,GAC/B,uCAAgD,CAAC;AAEnD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CACJ,gCAAgC,EAChC,yCAAyC,CAC1C,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EACvC,gFAAgF,CACjF,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,EAAE;KACR,GAAG,CAAC,EAAE,CAAC;KACP,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;AAElF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,kBAAkB,EAClB,mDAAmD,CACpD,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,yBAAyB,EACzB,wCAAwC,CACzC,CAAC;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,KAAK,CAAC,iBAAiB,CAAC;KACxB,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE;IACvD,OAAO,EAAE,oCAAoC;CAC9C,CAAC;KACD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC,cAAc,EAAE,QAAQ,EAAE,EAAE,CAAC,cAAc,GAAG,QAAQ,CAAC,MAAM,EAC9D,CAAC,CACF,IAAI,GAAG,EACR,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAChE,CAAC;AAEJ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,cAAc;IACzB,gBAAgB,EAAE,cAAc;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC,CAAC,MAAM,CAAC;IACjE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC3C,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC7C,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;YACX,gBAAgB;YAChB,YAAY;YACZ,OAAO;YACP,YAAY;YACZ,gBAAgB;YAChB,SAAS;YACT,WAAW;YACX,gBAAgB;YAChB,SAAS;SACV,CAAC;KACH,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACpD,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,cAAc;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzE,oBAAoB,CAAC,MAAM,CAAC;QAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;KAC5B,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;KACtB,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,yBAAyB;KAClC,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;YACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;SACtC,CAAC,CAAC,MAAM,EAAE;KACZ,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,iBAAiB;IACtB,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACtD,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,cAAc;IACxB,gBAAgB,EAAE,cAAc;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC/C,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,iBAAiB;IACtB,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACtD,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,cAAc;IACxB,gBAAgB,EAAE,cAAc;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC/C,QAAQ,EAAE,iBAAiB;IAC3B,YAAY,EAAE,qBAAqB;IACnC,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,WAAW,EAAE,CAAC;AAoBjB,MAAM,UAAU,4BAA4B,CAC1C,KAA+B;IAE/B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;WACzB,KAAK,CAAC,IAAI,KAAK,WAAW;WAC1B,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAQ;IACnC,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC;WACvE,CAAC,GAAG,CAAC,QAAQ;WACb,CAAC,GAAG,CAAC,QAAQ;WACb,CAAC,GAAG,CAAC,MAAM;WACX,CAAC,GAAG,CAAC,IAAI,CAAC;AACjB,CAAC","sourcesContent":["import { z } from 'zod';\n\nexport const EXECUTION_CONTRACT_VERSION = 1 as const;\nexport const CONVERSATION_TURN_WORKFLOW = 'conversation-turn' as const;\nexport const EXECUTION_ASSERTION_TYPE = 'heddle-execution+jwt' as const;\nexport const MCP_CAPABILITY_TYPE = 'heddle-mcp-capability+jwt' as const;\n\nexport const AGENTCORE_RUNTIME_SESSION_HEADER =\n  'x-amzn-bedrock-agentcore-runtime-session-id' as const;\nexport const EXECUTION_HOST_LOCAL_TOKEN_HEADER =\n  'x-heddle-execution-host-local-token' as const;\nexport const EXECUTION_ASSERTION_HEADER =\n  'x-heddle-execution-host-assertion' as const;\nexport const MCP_CAPABILITY_HEADER =\n  'x-heddle-execution-host-mcp-capability' as const;\nexport const MODEL_API_KEY_HEADER =\n  'x-heddle-execution-host-model-api-key' as const;\n\nexport const OpaqueIdSchema = z\n  .string()\n  .min(1)\n  .max(128)\n  .regex(\n    /^[A-Za-z0-9][A-Za-z0-9._:@-]*$/,\n    'must be an opaque, path-free identifier',\n  );\n\nexport const JwtIssuerSchema = z.url().refine(\n  (value) => isSafeWebUrl(new URL(value)),\n  'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n);\n\nexport const JwtAudienceSchema = z.string().min(1).max(512);\n\nexport const RuntimeSessionIdSchema = z\n  .string()\n  .min(33)\n  .max(256)\n  .refine((value) => value === value.trim(), 'must not contain outer whitespace');\n\nexport const TimestampSchema = z.iso.datetime({ offset: true });\n\nexport const McpServerIdSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(\n    /^[A-Za-z0-9_-]+$/,\n    'must be a Heddle-compatible MCP server identifier',\n  );\n\nexport const McpToolNameSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(\n    /^[A-Za-z][A-Za-z0-9_]*$/,\n    'must be a collision-free MCP tool name',\n  );\n\nexport const McpAllowedToolsSchema = z\n  .array(McpToolNameSchema)\n  .min(1)\n  .max(16)\n  .refine((tools) => new Set(tools).size === tools.length, {\n    message: 'must contain unique MCP tool names',\n  })\n  .refine(\n    (tools) => tools.reduce(\n      (characterCount, toolName) => characterCount + toolName.length,\n      0,\n    ) <= 512,\n    { message: 'contains too many aggregate tool-name characters' },\n  );\n\nexport const ExecutionScopeSchema = z.object({\n  adopterId: OpaqueIdSchema,\n  tenantId: OpaqueIdSchema,\n  subjectId: OpaqueIdSchema,\n  productSessionId: OpaqueIdSchema,\n}).strict();\n\nexport const ExecutionHostConversationTurnRequestSchema = z.object({\n  schemaVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  kind: z.literal(CONVERSATION_TURN_WORKFLOW),\n  invocationId: OpaqueIdSchema,\n  prompt: z.string().trim().min(1).max(200_000),\n  deadlineAt: TimestampSchema.optional(),\n}).strict();\n\nexport const RuntimePublicResultSchema = z.object({\n  outcome: z.enum(['done', 'max_steps', 'error', 'interrupted']),\n  summary: z.string().optional(),\n  failure: z.object({\n    source: z.literal('model'),\n    code: z.enum([\n      'authentication',\n      'permission',\n      'quota',\n      'rate_limit',\n      'context_window',\n      'request',\n      'transport',\n      'empty_response',\n      'unknown',\n    ]),\n  }).strict().optional(),\n}).strict();\n\nconst StreamEnvelopeSchema = z.object({\n  schemaVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  invocationId: OpaqueIdSchema,\n  runId: OpaqueIdSchema,\n  sequence: z.number().int().nonnegative(),\n  timestamp: TimestampSchema,\n});\n\nexport const ExecutionHostStreamEventSchema = z.discriminatedUnion('kind', [\n  StreamEnvelopeSchema.extend({\n    sequence: z.literal(0),\n    kind: z.literal('accepted'),\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('activity'),\n    activity: z.unknown(),\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('result'),\n    result: RuntimePublicResultSchema,\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('cancelled'),\n    reason: z.string(),\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('error'),\n    error: z.object({\n      code: z.string().min(1).max(128).regex(/^[a-z0-9_]+$/),\n      message: z.string().min(1).max(1_600),\n    }).strict(),\n  }).strict(),\n]);\n\nexport const ExecutionAssertionClaimsSchema = z.object({\n  iss: JwtIssuerSchema,\n  aud: JwtAudienceSchema,\n  contractVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  adopterId: OpaqueIdSchema,\n  tenantId: OpaqueIdSchema,\n  productSessionId: OpaqueIdSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  workflow: z.literal(CONVERSATION_TURN_WORKFLOW),\n  sub: OpaqueIdSchema,\n  jti: OpaqueIdSchema,\n  iat: z.number().int().nonnegative(),\n  exp: z.number().int().positive(),\n}).passthrough();\n\nexport const McpCapabilityClaimsSchema = z.object({\n  iss: JwtIssuerSchema,\n  aud: JwtAudienceSchema,\n  contractVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  adopterId: OpaqueIdSchema,\n  tenantId: OpaqueIdSchema,\n  productSessionId: OpaqueIdSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: OpaqueIdSchema,\n  workflow: z.literal(CONVERSATION_TURN_WORKFLOW),\n  serverId: McpServerIdSchema,\n  allowedTools: McpAllowedToolsSchema,\n  sub: OpaqueIdSchema,\n  jti: OpaqueIdSchema,\n  iat: z.number().int().nonnegative(),\n  exp: z.number().int().positive(),\n}).passthrough();\n\nexport type ExecutionScope = z.infer<typeof ExecutionScopeSchema>;\nexport type ExecutionHostConversationTurnRequest = z.infer<\n  typeof ExecutionHostConversationTurnRequestSchema\n>;\nexport type RuntimePublicResult = z.infer<typeof RuntimePublicResultSchema>;\nexport type ExecutionHostStreamEvent = z.infer<\n  typeof ExecutionHostStreamEventSchema\n>;\nexport type ExecutionHostTerminalEvent = Extract<\n  ExecutionHostStreamEvent,\n  { kind: 'result' | 'cancelled' | 'error' }\n>;\nexport type ExecutionAssertionClaims = z.infer<\n  typeof ExecutionAssertionClaimsSchema\n>;\nexport type McpCapabilityClaims = z.infer<typeof McpCapabilityClaimsSchema>;\nexport type HostedExecutionWorkflow = typeof CONVERSATION_TURN_WORKFLOW;\n\nexport function isExecutionHostTerminalEvent(\n  event: ExecutionHostStreamEvent,\n): event is ExecutionHostTerminalEvent {\n  return event.kind === 'result'\n    || event.kind === 'cancelled'\n    || event.kind === 'error';\n}\n\nexport function isSafeWebUrl(url: URL): boolean {\n  const loopback = ['127.0.0.1', '[::1]', 'localhost'].includes(url.hostname);\n  return (url.protocol === 'https:' || (url.protocol === 'http:' && loopback))\n    && !url.username\n    && !url.password\n    && !url.search\n    && !url.hash;\n}\n"]}

package/dist/conversation/durable-hosted-conversation-turn-service.d.ts

@@ -0,0 +1,23 @@
+import { type ExecutionHostTerminalEvent } from '../contracts/index.js';
+import { type DurableHostedConversationTurnServiceConfig, type DurableHostedConversationTurnServiceOptions, type HostedConversationPersistenceScope, type HostedConversationTerminalProjection, type HostedConversationTurnLifecycleStore, type HostedConversationTurnReconciliationOptions } from './lifecycle-types.js';
+import type { HostedConversationTurnRunner } from './types.js';
+/**
+ * Applies one reusable durable lifecycle around an Execution Host turn.
+ *
+ * Requested state is written before execution starts. Accepted and terminal
+ * writes complete before their corresponding public events are released. A
+ * persistence failure therefore fails closed instead of acknowledging state
+ * that the adopter cannot later recover.
+ */
+export declare class DurableHostedConversationTurnService implements HostedConversationTurnRunner {
+    #private;
+    constructor(config: DurableHostedConversationTurnServiceConfig, options?: DurableHostedConversationTurnServiceOptions);
+    streamTurn(rawInput: Parameters<HostedConversationTurnRunner['streamTurn']>[0]): ReturnType<HostedConversationTurnRunner['streamTurn']>;
+    /** Reconciles only expired open turns within one already-authorized scope. */
+    interruptExpiredTurns(scope: HostedConversationPersistenceScope): Promise<void>;
+}
+export declare function interruptExpiredHostedConversationTurns(store: HostedConversationTurnLifecycleStore, scope: HostedConversationPersistenceScope, options?: HostedConversationTurnReconciliationOptions): Promise<void>;
+export declare function projectHostedConversationTerminalEvent(event: ExecutionHostTerminalEvent, options?: {
+    maxSummaryCharacters?: number;
+}): HostedConversationTerminalProjection;
+//# sourceMappingURL=durable-hosted-conversation-turn-service.d.ts.map

package/dist/conversation/durable-hosted-conversation-turn-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"durable-hosted-conversation-turn-service.d.ts","sourceRoot":"","sources":["../../src/conversation/durable-hosted-conversation-turn-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,0BAA0B,EAChC,MAAM,uBAAuB,CAAC;AAO/B,OAAO,EAKL,KAAK,0CAA0C,EAC/C,KAAK,2CAA2C,EAEhD,KAAK,kCAAkC,EACvC,KAAK,oCAAoC,EAEzC,KAAK,oCAAoC,EACzC,KAAK,2CAA2C,EACjD,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,4BAA4B,EAC7B,MAAM,YAAY,CAAC;AAsBpB;;;;;;;GAOG;AACH,qBAAa,oCACb,YAAW,4BAA4B;;gBAQnC,MAAM,EAAE,0CAA0C,EAClD,OAAO,GAAE,2CAAgD;IAepD,UAAU,CACf,QAAQ,EAAE,UAAU,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAClE,UAAU,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC;IA4GzD,8EAA8E;IAC9E,qBAAqB,CACnB,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,IAAI,CAAC;CAMjB;AAED,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,oCAAoC,EAC3C,KAAK,EAAE,kCAAkC,EACzC,OAAO,GAAE,2CAAgD,GACxD,OAAO,CAAC,IAAI,CAAC,CAiBf;AAED,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,0BAA0B,EACjC,OAAO,GAAE;IAAE,oBAAoB,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,oCAAoC,CAQtC"}