@heddleagent/execution-host-client 6.0.0 → 6.2.0

package/dist/contracts/index.d.ts

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 export declare const EXECUTION_CONTRACT_VERSION: 1;
 export declare const CONVERSATION_TURN_WORKFLOW: "conversation-turn";
+export declare const HEARTBEAT_TASK_WORKFLOW: "heartbeat-task";
 export declare const EXECUTION_ASSERTION_TYPE: "heddle-execution+jwt";
 export declare const MCP_CAPABILITY_TYPE: "heddle-mcp-capability+jwt";
 export declare const AGENTCORE_RUNTIME_SESSION_HEADER: "x-amzn-bedrock-agentcore-runtime-session-id";
@@ -29,6 +30,49 @@ export declare const ExecutionHostConversationTurnRequestSchema: z.ZodObject<{
     prompt: z.ZodString;
     deadlineAt: z.ZodOptional<z.ZodISODateTime>;
 }, z.core.$strict>;
+export declare const HeartbeatRunContextSchema: z.ZodObject<{
+    currentDateTime: z.ZodISODateTime;
+    intervalMs: z.ZodNumber;
+    continuationMode: z.ZodOptional<z.ZodEnum<{
+        operator: "operator";
+        agent: "agent";
+    }>>;
+    nextRunAt: z.ZodOptional<z.ZodISODateTime>;
+    previousRunAt: z.ZodOptional<z.ZodISODateTime>;
+    previousRunId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const ExecutionHostHeartbeatTaskRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"heartbeat-task">;
+    invocationId: z.ZodString;
+    taskId: z.ZodString;
+    task: z.ZodString;
+    checkpoint: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    runContext: z.ZodObject<{
+        currentDateTime: z.ZodISODateTime;
+        intervalMs: z.ZodNumber;
+        continuationMode: z.ZodOptional<z.ZodEnum<{
+            operator: "operator";
+            agent: "agent";
+        }>>;
+        nextRunAt: z.ZodOptional<z.ZodISODateTime>;
+        previousRunAt: z.ZodOptional<z.ZodISODateTime>;
+        previousRunId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    model: z.ZodOptional<z.ZodString>;
+    reasoningEffort: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        low: "low";
+        medium: "medium";
+        high: "high";
+        ultrahigh: "ultrahigh";
+        max: "max";
+    }>>;
+    maxSteps: z.ZodOptional<z.ZodNumber>;
+    searchIgnoreDirs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    systemContext: z.ZodOptional<z.ZodString>;
+    deadlineAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strict>;
 export declare const RuntimePublicResultSchema: z.ZodObject<{
     outcome: z.ZodEnum<{
         error: "error";
@@ -117,6 +161,53 @@ export declare const ExecutionHostStreamEventSchema: z.ZodDiscriminatedUnion<[z.
         message: z.ZodString;
     }, z.core.$strict>;
 }, z.core.$strict>], "kind">;
+export declare const ExecutionHostHeartbeatStreamEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    timestamp: z.ZodISODateTime;
+    sequence: z.ZodLiteral<0>;
+    kind: z.ZodLiteral<"accepted">;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"activity">;
+    activity: z.ZodJSONSchema;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"result">;
+    result: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"cancelled">;
+    reason: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"error">;
+    error: z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>], "kind">;
+export declare const HostedExecutionWorkflowSchema: z.ZodEnum<{
+    "conversation-turn": "conversation-turn";
+    "heartbeat-task": "heartbeat-task";
+}>;
 export declare const ExecutionAssertionClaimsSchema: z.ZodObject<{
     iss: z.ZodURL;
     aud: z.ZodString;
@@ -125,7 +216,10 @@ export declare const ExecutionAssertionClaimsSchema: z.ZodObject<{
     tenantId: z.ZodString;
     productSessionId: z.ZodString;
     runtimeSessionId: z.ZodString;
-    workflow: z.ZodLiteral<"conversation-turn">;
+    workflow: z.ZodEnum<{
+        "conversation-turn": "conversation-turn";
+        "heartbeat-task": "heartbeat-task";
+    }>;
     sub: z.ZodString;
     jti: z.ZodString;
     iat: z.ZodNumber;
@@ -140,7 +234,10 @@ export declare const McpCapabilityClaimsSchema: z.ZodObject<{
     productSessionId: z.ZodString;
     runtimeSessionId: z.ZodString;
     invocationId: z.ZodString;
-    workflow: z.ZodLiteral<"conversation-turn">;
+    workflow: z.ZodEnum<{
+        "conversation-turn": "conversation-turn";
+        "heartbeat-task": "heartbeat-task";
+    }>;
     serverId: z.ZodString;
     allowedTools: z.ZodArray<z.ZodString>;
     sub: z.ZodString;
@@ -150,14 +247,20 @@ export declare const McpCapabilityClaimsSchema: z.ZodObject<{
 }, z.core.$loose>;
 export type ExecutionScope = z.infer<typeof ExecutionScopeSchema>;
 export type ExecutionHostConversationTurnRequest = z.infer<typeof ExecutionHostConversationTurnRequestSchema>;
+export type ExecutionHostHeartbeatTaskRequest = z.infer<typeof ExecutionHostHeartbeatTaskRequestSchema>;
 export type RuntimePublicResult = z.infer<typeof RuntimePublicResultSchema>;
 export type ExecutionHostStreamEvent = z.infer<typeof ExecutionHostStreamEventSchema>;
 export type ExecutionHostTerminalEvent = Extract<ExecutionHostStreamEvent, {
     kind: 'result' | 'cancelled' | 'error';
 }>;
+export type ExecutionHostHeartbeatStreamEvent = z.infer<typeof ExecutionHostHeartbeatStreamEventSchema>;
+export type ExecutionHostHeartbeatTerminalEvent = Extract<ExecutionHostHeartbeatStreamEvent, {
+    kind: 'result' | 'cancelled' | 'error';
+}>;
 export type ExecutionAssertionClaims = z.infer<typeof ExecutionAssertionClaimsSchema>;
 export type McpCapabilityClaims = z.infer<typeof McpCapabilityClaimsSchema>;
-export type HostedExecutionWorkflow = typeof CONVERSATION_TURN_WORKFLOW;
+export type HostedExecutionWorkflow = z.infer<typeof HostedExecutionWorkflowSchema>;
 export declare function isExecutionHostTerminalEvent(event: ExecutionHostStreamEvent): event is ExecutionHostTerminalEvent;
+export declare function isExecutionHostHeartbeatTerminalEvent(event: ExecutionHostHeartbeatStreamEvent): event is ExecutionHostHeartbeatTerminalEvent;
 export declare function isSafeWebUrl(url: URL): boolean;
 //# sourceMappingURL=index.d.ts.map

package/dist/contracts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,0BAA0B,EAAG,mBAA4B,CAAC;AACvE,eAAO,MAAM,wBAAwB,EAAG,sBAA+B,CAAC;AACxE,eAAO,MAAM,mBAAmB,EAAG,2BAAoC,CAAC;AAExE,eAAO,MAAM,gCAAgC,EAC3C,6CAAsD,CAAC;AACzD,eAAO,MAAM,iCAAiC,EAC5C,qCAA8C,CAAC;AACjD,eAAO,MAAM,0BAA0B,EACrC,mCAA4C,CAAC;AAC/C,eAAO,MAAM,qBAAqB,EAChC,wCAAiD,CAAC;AACpD,eAAO,MAAM,oBAAoB,EAC/B,uCAAgD,CAAC;AAEnD,eAAO,MAAM,cAAc,aAOxB,CAAC;AAEJ,eAAO,MAAM,eAAe,UAG3B,CAAC;AAEF,eAAO,MAAM,iBAAiB,aAA6B,CAAC;AAE5D,eAAO,MAAM,sBAAsB,aAI8C,CAAC;AAElF,eAAO,MAAM,eAAe,kBAAmC,CAAC;AAEhE,eAAO,MAAM,iBAAiB,aAO3B,CAAC;AAEJ,eAAO,MAAM,iBAAiB,aAO3B,CAAC;AAEJ,eAAO,MAAM,qBAAqB,yBAa/B,CAAC;AAEJ,eAAO,MAAM,oBAAoB;;;;;kBAKtB,CAAC;AAEZ,eAAO,MAAM,0CAA0C;;;;;;kBAM5C,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;kBAiB3B,CAAC;AAUZ,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAwBzC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;iBAa3B,CAAC;AAEjB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAgBtB,CAAC;AAEjB,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CACxD,OAAO,0CAA0C,CAClD,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAC9C,wBAAwB,EACxB;IAAE,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAA;CAAE,CAC3C,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,uBAAuB,GAAG,OAAO,0BAA0B,CAAC;AAExE,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,wBAAwB,GAC9B,KAAK,IAAI,0BAA0B,CAIrC;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAO9C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,0BAA0B,EAAG,mBAA4B,CAAC;AACvE,eAAO,MAAM,uBAAuB,EAAG,gBAAyB,CAAC;AACjE,eAAO,MAAM,wBAAwB,EAAG,sBAA+B,CAAC;AACxE,eAAO,MAAM,mBAAmB,EAAG,2BAAoC,CAAC;AAExE,eAAO,MAAM,gCAAgC,EAC3C,6CAAsD,CAAC;AACzD,eAAO,MAAM,iCAAiC,EAC5C,qCAA8C,CAAC;AACjD,eAAO,MAAM,0BAA0B,EACrC,mCAA4C,CAAC;AAC/C,eAAO,MAAM,qBAAqB,EAChC,wCAAiD,CAAC;AACpD,eAAO,MAAM,oBAAoB,EAC/B,uCAAgD,CAAC;AAEnD,eAAO,MAAM,cAAc,aAOxB,CAAC;AAEJ,eAAO,MAAM,eAAe,UAG3B,CAAC;AAEF,eAAO,MAAM,iBAAiB,aAA6B,CAAC;AAE5D,eAAO,MAAM,sBAAsB,aAI8C,CAAC;AAElF,eAAO,MAAM,eAAe,kBAAmC,CAAC;AAEhE,eAAO,MAAM,iBAAiB,aAO3B,CAAC;AAEJ,eAAO,MAAM,iBAAiB,aAO3B,CAAC;AAEJ,eAAO,MAAM,qBAAqB,yBAa/B,CAAC;AAEJ,eAAO,MAAM,oBAAoB;;;;;kBAKtB,CAAC;AAEZ,eAAO,MAAM,0CAA0C;;;;;;kBAM5C,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;;;kBAO3B,CAAC;AAEZ,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqBzC,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;kBAiB3B,CAAC;AAUZ,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAwBzC,CAAC;AAEH,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BA2BnD,CAAC;AAEF,eAAO,MAAM,6BAA6B;;;EAGxC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;iBAa3B,CAAC;AAEjB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;iBAgBtB,CAAC;AAEjB,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CACxD,OAAO,0CAA0C,CAClD,CAAC;AACF,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAC9C,wBAAwB,EACxB;IAAE,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAA;CAAE,CAC3C,CAAC;AACF,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AACF,MAAM,MAAM,mCAAmC,GAAG,OAAO,CACvD,iCAAiC,EACjC;IAAE,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAA;CAAE,CAC3C,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,wBAAwB,GAC9B,KAAK,IAAI,0BAA0B,CAIrC;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,iCAAiC,GACvC,KAAK,IAAI,mCAAmC,CAI9C;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAO9C"}

package/dist/contracts/index.js

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 export const EXECUTION_CONTRACT_VERSION = 1;
 export const CONVERSATION_TURN_WORKFLOW = 'conversation-turn';
+export const HEARTBEAT_TASK_WORKFLOW = 'heartbeat-task';
 export const EXECUTION_ASSERTION_TYPE = 'heddle-execution+jwt';
 export const MCP_CAPABILITY_TYPE = 'heddle-mcp-capability+jwt';
 export const AGENTCORE_RUNTIME_SESSION_HEADER = 'x-amzn-bedrock-agentcore-runtime-session-id';
@@ -52,6 +53,36 @@ export const ExecutionHostConversationTurnRequestSchema = z.object({
     prompt: z.string().trim().min(1).max(200_000),
     deadlineAt: TimestampSchema.optional(),
 }).strict();
+export const HeartbeatRunContextSchema = z.object({
+    currentDateTime: TimestampSchema,
+    intervalMs: z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
+    continuationMode: z.enum(['operator', 'agent']).optional(),
+    nextRunAt: TimestampSchema.optional(),
+    previousRunAt: TimestampSchema.optional(),
+    previousRunId: OpaqueIdSchema.optional(),
+}).strict();
+export const ExecutionHostHeartbeatTaskRequestSchema = z.object({
+    schemaVersion: z.literal(EXECUTION_CONTRACT_VERSION),
+    kind: z.literal(HEARTBEAT_TASK_WORKFLOW),
+    invocationId: OpaqueIdSchema,
+    taskId: OpaqueIdSchema,
+    task: z.string().trim().min(1).max(200_000),
+    checkpoint: z.record(z.string(), z.json()).optional(),
+    runContext: HeartbeatRunContextSchema,
+    model: z.string().trim().min(1).max(512).optional(),
+    reasoningEffort: z.enum([
+        'none',
+        'low',
+        'medium',
+        'high',
+        'ultrahigh',
+        'max',
+    ]).optional(),
+    maxSteps: z.number().int().positive().max(10_000).optional(),
+    searchIgnoreDirs: z.array(z.string().min(1).max(1_024)).max(1_000).optional(),
+    systemContext: z.string().max(200_000).optional(),
+    deadlineAt: TimestampSchema.optional(),
+}).strict();
 export const RuntimePublicResultSchema = z.object({
     outcome: z.enum(['done', 'max_steps', 'error', 'interrupted']),
     summary: z.string().optional(),
@@ -102,6 +133,35 @@ export const ExecutionHostStreamEventSchema = z.discriminatedUnion('kind', [
         }).strict(),
     }).strict(),
 ]);
+export const ExecutionHostHeartbeatStreamEventSchema = z.discriminatedUnion('kind', [
+    StreamEnvelopeSchema.extend({
+        sequence: z.literal(0),
+        kind: z.literal('accepted'),
+    }).strict(),
+    StreamEnvelopeSchema.extend({
+        kind: z.literal('activity'),
+        activity: z.json(),
+    }).strict(),
+    StreamEnvelopeSchema.extend({
+        kind: z.literal('result'),
+        result: z.record(z.string(), z.json()),
+    }).strict(),
+    StreamEnvelopeSchema.extend({
+        kind: z.literal('cancelled'),
+        reason: z.string(),
+    }).strict(),
+    StreamEnvelopeSchema.extend({
+        kind: z.literal('error'),
+        error: z.object({
+            code: z.string().min(1).max(128).regex(/^[a-z0-9_]+$/),
+            message: z.string().min(1).max(1_600),
+        }).strict(),
+    }).strict(),
+]);
+export const HostedExecutionWorkflowSchema = z.enum([
+    CONVERSATION_TURN_WORKFLOW,
+    HEARTBEAT_TASK_WORKFLOW,
+]);
 export const ExecutionAssertionClaimsSchema = z.object({
     iss: JwtIssuerSchema,
     aud: JwtAudienceSchema,
@@ -110,7 +170,7 @@ export const ExecutionAssertionClaimsSchema = z.object({
     tenantId: OpaqueIdSchema,
     productSessionId: OpaqueIdSchema,
     runtimeSessionId: RuntimeSessionIdSchema,
-    workflow: z.literal(CONVERSATION_TURN_WORKFLOW),
+    workflow: HostedExecutionWorkflowSchema,
     sub: OpaqueIdSchema,
     jti: OpaqueIdSchema,
     iat: z.number().int().nonnegative(),
@@ -125,7 +185,7 @@ export const McpCapabilityClaimsSchema = z.object({
     productSessionId: OpaqueIdSchema,
     runtimeSessionId: RuntimeSessionIdSchema,
     invocationId: OpaqueIdSchema,
-    workflow: z.literal(CONVERSATION_TURN_WORKFLOW),
+    workflow: HostedExecutionWorkflowSchema,
     serverId: McpServerIdSchema,
     allowedTools: McpAllowedToolsSchema,
     sub: OpaqueIdSchema,
@@ -138,6 +198,11 @@ export function isExecutionHostTerminalEvent(event) {
         || event.kind === 'cancelled'
         || event.kind === 'error';
 }
+export function isExecutionHostHeartbeatTerminalEvent(event) {
+    return event.kind === 'result'
+        || event.kind === 'cancelled'
+        || event.kind === 'error';
+}
 export function isSafeWebUrl(url) {
     const loopback = ['127.0.0.1', '[::1]', 'localhost'].includes(url.hostname);
     return (url.protocol === 'https:' || (url.protocol === 'http:' && loopback))

package/dist/contracts/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAU,CAAC;AACrD,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAA4B,CAAC;AACvE,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAA+B,CAAC;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAAoC,CAAC;AAExE,MAAM,CAAC,MAAM,gCAAgC,GAC3C,6CAAsD,CAAC;AACzD,MAAM,CAAC,MAAM,iCAAiC,GAC5C,qCAA8C,CAAC;AACjD,MAAM,CAAC,MAAM,0BAA0B,GACrC,mCAA4C,CAAC;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAChC,wCAAiD,CAAC;AACpD,MAAM,CAAC,MAAM,oBAAoB,GAC/B,uCAAgD,CAAC;AAEnD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CACJ,gCAAgC,EAChC,yCAAyC,CAC1C,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EACvC,gFAAgF,CACjF,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,EAAE;KACR,GAAG,CAAC,EAAE,CAAC;KACP,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;AAElF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,kBAAkB,EAClB,mDAAmD,CACpD,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,yBAAyB,EACzB,wCAAwC,CACzC,CAAC;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,KAAK,CAAC,iBAAiB,CAAC;KACxB,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE;IACvD,OAAO,EAAE,oCAAoC;CAC9C,CAAC;KACD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC,cAAc,EAAE,QAAQ,EAAE,EAAE,CAAC,cAAc,GAAG,QAAQ,CAAC,MAAM,EAC9D,CAAC,CACF,IAAI,GAAG,EACR,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAChE,CAAC;AAEJ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,cAAc;IACzB,gBAAgB,EAAE,cAAc;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC,CAAC,MAAM,CAAC;IACjE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC3C,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC7C,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;YACX,gBAAgB;YAChB,YAAY;YACZ,OAAO;YACP,YAAY;YACZ,gBAAgB;YAChB,SAAS;YACT,WAAW;YACX,gBAAgB;YAChB,SAAS;SACV,CAAC;KACH,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACpD,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,cAAc;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzE,oBAAoB,CAAC,MAAM,CAAC;QAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;KAC5B,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;KACtB,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,yBAAyB;KAClC,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;YACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;SACtC,CAAC,CAAC,MAAM,EAAE;KACZ,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,iBAAiB;IACtB,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACtD,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,cAAc;IACxB,gBAAgB,EAAE,cAAc;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC/C,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,iBAAiB;IACtB,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACtD,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,cAAc;IACxB,gBAAgB,EAAE,cAAc;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC/C,QAAQ,EAAE,iBAAiB;IAC3B,YAAY,EAAE,qBAAqB;IACnC,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,WAAW,EAAE,CAAC;AAoBjB,MAAM,UAAU,4BAA4B,CAC1C,KAA+B;IAE/B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;WACzB,KAAK,CAAC,IAAI,KAAK,WAAW;WAC1B,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAQ;IACnC,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC;WACvE,CAAC,GAAG,CAAC,QAAQ;WACb,CAAC,GAAG,CAAC,QAAQ;WACb,CAAC,GAAG,CAAC,MAAM;WACX,CAAC,GAAG,CAAC,IAAI,CAAC;AACjB,CAAC","sourcesContent":["import { z } from 'zod';\n\nexport const EXECUTION_CONTRACT_VERSION = 1 as const;\nexport const CONVERSATION_TURN_WORKFLOW = 'conversation-turn' as const;\nexport const EXECUTION_ASSERTION_TYPE = 'heddle-execution+jwt' as const;\nexport const MCP_CAPABILITY_TYPE = 'heddle-mcp-capability+jwt' as const;\n\nexport const AGENTCORE_RUNTIME_SESSION_HEADER =\n  'x-amzn-bedrock-agentcore-runtime-session-id' as const;\nexport const EXECUTION_HOST_LOCAL_TOKEN_HEADER =\n  'x-heddle-execution-host-local-token' as const;\nexport const EXECUTION_ASSERTION_HEADER =\n  'x-heddle-execution-host-assertion' as const;\nexport const MCP_CAPABILITY_HEADER =\n  'x-heddle-execution-host-mcp-capability' as const;\nexport const MODEL_API_KEY_HEADER =\n  'x-heddle-execution-host-model-api-key' as const;\n\nexport const OpaqueIdSchema = z\n  .string()\n  .min(1)\n  .max(128)\n  .regex(\n    /^[A-Za-z0-9][A-Za-z0-9._:@-]*$/,\n    'must be an opaque, path-free identifier',\n  );\n\nexport const JwtIssuerSchema = z.url().refine(\n  (value) => isSafeWebUrl(new URL(value)),\n  'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n);\n\nexport const JwtAudienceSchema = z.string().min(1).max(512);\n\nexport const RuntimeSessionIdSchema = z\n  .string()\n  .min(33)\n  .max(256)\n  .refine((value) => value === value.trim(), 'must not contain outer whitespace');\n\nexport const TimestampSchema = z.iso.datetime({ offset: true });\n\nexport const McpServerIdSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(\n    /^[A-Za-z0-9_-]+$/,\n    'must be a Heddle-compatible MCP server identifier',\n  );\n\nexport const McpToolNameSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(\n    /^[A-Za-z][A-Za-z0-9_]*$/,\n    'must be a collision-free MCP tool name',\n  );\n\nexport const McpAllowedToolsSchema = z\n  .array(McpToolNameSchema)\n  .min(1)\n  .max(16)\n  .refine((tools) => new Set(tools).size === tools.length, {\n    message: 'must contain unique MCP tool names',\n  })\n  .refine(\n    (tools) => tools.reduce(\n      (characterCount, toolName) => characterCount + toolName.length,\n      0,\n    ) <= 512,\n    { message: 'contains too many aggregate tool-name characters' },\n  );\n\nexport const ExecutionScopeSchema = z.object({\n  adopterId: OpaqueIdSchema,\n  tenantId: OpaqueIdSchema,\n  subjectId: OpaqueIdSchema,\n  productSessionId: OpaqueIdSchema,\n}).strict();\n\nexport const ExecutionHostConversationTurnRequestSchema = z.object({\n  schemaVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  kind: z.literal(CONVERSATION_TURN_WORKFLOW),\n  invocationId: OpaqueIdSchema,\n  prompt: z.string().trim().min(1).max(200_000),\n  deadlineAt: TimestampSchema.optional(),\n}).strict();\n\nexport const RuntimePublicResultSchema = z.object({\n  outcome: z.enum(['done', 'max_steps', 'error', 'interrupted']),\n  summary: z.string().optional(),\n  failure: z.object({\n    source: z.literal('model'),\n    code: z.enum([\n      'authentication',\n      'permission',\n      'quota',\n      'rate_limit',\n      'context_window',\n      'request',\n      'transport',\n      'empty_response',\n      'unknown',\n    ]),\n  }).strict().optional(),\n}).strict();\n\nconst StreamEnvelopeSchema = z.object({\n  schemaVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  invocationId: OpaqueIdSchema,\n  runId: OpaqueIdSchema,\n  sequence: z.number().int().nonnegative(),\n  timestamp: TimestampSchema,\n});\n\nexport const ExecutionHostStreamEventSchema = z.discriminatedUnion('kind', [\n  StreamEnvelopeSchema.extend({\n    sequence: z.literal(0),\n    kind: z.literal('accepted'),\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('activity'),\n    activity: z.unknown(),\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('result'),\n    result: RuntimePublicResultSchema,\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('cancelled'),\n    reason: z.string(),\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('error'),\n    error: z.object({\n      code: z.string().min(1).max(128).regex(/^[a-z0-9_]+$/),\n      message: z.string().min(1).max(1_600),\n    }).strict(),\n  }).strict(),\n]);\n\nexport const ExecutionAssertionClaimsSchema = z.object({\n  iss: JwtIssuerSchema,\n  aud: JwtAudienceSchema,\n  contractVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  adopterId: OpaqueIdSchema,\n  tenantId: OpaqueIdSchema,\n  productSessionId: OpaqueIdSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  workflow: z.literal(CONVERSATION_TURN_WORKFLOW),\n  sub: OpaqueIdSchema,\n  jti: OpaqueIdSchema,\n  iat: z.number().int().nonnegative(),\n  exp: z.number().int().positive(),\n}).passthrough();\n\nexport const McpCapabilityClaimsSchema = z.object({\n  iss: JwtIssuerSchema,\n  aud: JwtAudienceSchema,\n  contractVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  adopterId: OpaqueIdSchema,\n  tenantId: OpaqueIdSchema,\n  productSessionId: OpaqueIdSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: OpaqueIdSchema,\n  workflow: z.literal(CONVERSATION_TURN_WORKFLOW),\n  serverId: McpServerIdSchema,\n  allowedTools: McpAllowedToolsSchema,\n  sub: OpaqueIdSchema,\n  jti: OpaqueIdSchema,\n  iat: z.number().int().nonnegative(),\n  exp: z.number().int().positive(),\n}).passthrough();\n\nexport type ExecutionScope = z.infer<typeof ExecutionScopeSchema>;\nexport type ExecutionHostConversationTurnRequest = z.infer<\n  typeof ExecutionHostConversationTurnRequestSchema\n>;\nexport type RuntimePublicResult = z.infer<typeof RuntimePublicResultSchema>;\nexport type ExecutionHostStreamEvent = z.infer<\n  typeof ExecutionHostStreamEventSchema\n>;\nexport type ExecutionHostTerminalEvent = Extract<\n  ExecutionHostStreamEvent,\n  { kind: 'result' | 'cancelled' | 'error' }\n>;\nexport type ExecutionAssertionClaims = z.infer<\n  typeof ExecutionAssertionClaimsSchema\n>;\nexport type McpCapabilityClaims = z.infer<typeof McpCapabilityClaimsSchema>;\nexport type HostedExecutionWorkflow = typeof CONVERSATION_TURN_WORKFLOW;\n\nexport function isExecutionHostTerminalEvent(\n  event: ExecutionHostStreamEvent,\n): event is ExecutionHostTerminalEvent {\n  return event.kind === 'result'\n    || event.kind === 'cancelled'\n    || event.kind === 'error';\n}\n\nexport function isSafeWebUrl(url: URL): boolean {\n  const loopback = ['127.0.0.1', '[::1]', 'localhost'].includes(url.hostname);\n  return (url.protocol === 'https:' || (url.protocol === 'http:' && loopback))\n    && !url.username\n    && !url.password\n    && !url.search\n    && !url.hash;\n}\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAU,CAAC;AACrD,MAAM,CAAC,MAAM,0BAA0B,GAAG,mBAA4B,CAAC;AACvE,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAyB,CAAC;AACjE,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAA+B,CAAC;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,2BAAoC,CAAC;AAExE,MAAM,CAAC,MAAM,gCAAgC,GAC3C,6CAAsD,CAAC;AACzD,MAAM,CAAC,MAAM,iCAAiC,GAC5C,qCAA8C,CAAC;AACjD,MAAM,CAAC,MAAM,0BAA0B,GACrC,mCAA4C,CAAC;AAC/C,MAAM,CAAC,MAAM,qBAAqB,GAChC,wCAAiD,CAAC;AACpD,MAAM,CAAC,MAAM,oBAAoB,GAC/B,uCAAgD,CAAC;AAEnD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CACJ,gCAAgC,EAChC,yCAAyC,CAC1C,CAAC;AAEJ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAC3C,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,EACvC,gFAAgF,CACjF,CAAC;AAEF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAE5D,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,EAAE;KACR,GAAG,CAAC,EAAE,CAAC;KACP,GAAG,CAAC,GAAG,CAAC;KACR,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,mCAAmC,CAAC,CAAC;AAElF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,kBAAkB,EAClB,mDAAmD,CACpD,CAAC;AAEJ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CACJ,yBAAyB,EACzB,wCAAwC,CACzC,CAAC;AAEJ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,KAAK,CAAC,iBAAiB,CAAC;KACxB,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE;IACvD,OAAO,EAAE,oCAAoC;CAC9C,CAAC;KACD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CACrB,CAAC,cAAc,EAAE,QAAQ,EAAE,EAAE,CAAC,cAAc,GAAG,QAAQ,CAAC,MAAM,EAC9D,CAAC,CACF,IAAI,GAAG,EACR,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAChE,CAAC;AAEJ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,cAAc;IACzB,gBAAgB,EAAE,cAAc;CACjC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0CAA0C,GAAG,CAAC,CAAC,MAAM,CAAC;IACjE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC3C,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC7C,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,eAAe,EAAE,eAAe;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;IACpE,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,eAAe,CAAC,QAAQ,EAAE;IACzC,aAAa,EAAE,cAAc,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IACxC,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,cAAc;IACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC3C,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,UAAU,EAAE,yBAAyB;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACnD,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC;QACtB,MAAM;QACN,KAAK;QACL,QAAQ;QACR,MAAM;QACN,WAAW;QACX,KAAK;KACN,CAAC,CAAC,QAAQ,EAAE;IACb,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAC5D,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IAC7E,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;IACjD,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9D,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;YACX,gBAAgB;YAChB,YAAY;YACZ,OAAO;YACP,YAAY;YACZ,gBAAgB;YAChB,SAAS;YACT,WAAW;YACX,gBAAgB;YAChB,SAAS;SACV,CAAC;KACH,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACpD,YAAY,EAAE,cAAc;IAC5B,KAAK,EAAE,cAAc;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACzE,oBAAoB,CAAC,MAAM,CAAC;QAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;KAC5B,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;KACtB,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,yBAAyB;KAClC,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;YACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;SACtC,CAAC,CAAC,MAAM,EAAE;KACZ,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,kBAAkB,CACzE,MAAM,EACN;IACE,oBAAoB,CAAC,MAAM,CAAC;QAC1B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;KAC5B,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;KACnB,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;KACvC,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC,CAAC,MAAM,EAAE;IACX,oBAAoB,CAAC,MAAM,CAAC;QAC1B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;YACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;SACtC,CAAC,CAAC,MAAM,EAAE;KACZ,CAAC,CAAC,MAAM,EAAE;CACZ,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,IAAI,CAAC;IAClD,0BAA0B;IAC1B,uBAAuB;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,iBAAiB;IACtB,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACtD,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,cAAc;IACxB,gBAAgB,EAAE,cAAc;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,QAAQ,EAAE,6BAA6B;IACvC,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,iBAAiB;IACtB,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IACtD,SAAS,EAAE,cAAc;IACzB,QAAQ,EAAE,cAAc;IACxB,gBAAgB,EAAE,cAAc;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,6BAA6B;IACvC,QAAQ,EAAE,iBAAiB;IAC3B,YAAY,EAAE,qBAAqB;IACnC,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC,WAAW,EAAE,CAAC;AAgCjB,MAAM,UAAU,4BAA4B,CAC1C,KAA+B;IAE/B,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;WACzB,KAAK,CAAC,IAAI,KAAK,WAAW;WAC1B,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,qCAAqC,CACnD,KAAwC;IAExC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;WACzB,KAAK,CAAC,IAAI,KAAK,WAAW;WAC1B,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,GAAQ;IACnC,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,CAAC;WACvE,CAAC,GAAG,CAAC,QAAQ;WACb,CAAC,GAAG,CAAC,QAAQ;WACb,CAAC,GAAG,CAAC,MAAM;WACX,CAAC,GAAG,CAAC,IAAI,CAAC;AACjB,CAAC","sourcesContent":["import { z } from 'zod';\n\nexport const EXECUTION_CONTRACT_VERSION = 1 as const;\nexport const CONVERSATION_TURN_WORKFLOW = 'conversation-turn' as const;\nexport const HEARTBEAT_TASK_WORKFLOW = 'heartbeat-task' as const;\nexport const EXECUTION_ASSERTION_TYPE = 'heddle-execution+jwt' as const;\nexport const MCP_CAPABILITY_TYPE = 'heddle-mcp-capability+jwt' as const;\n\nexport const AGENTCORE_RUNTIME_SESSION_HEADER =\n  'x-amzn-bedrock-agentcore-runtime-session-id' as const;\nexport const EXECUTION_HOST_LOCAL_TOKEN_HEADER =\n  'x-heddle-execution-host-local-token' as const;\nexport const EXECUTION_ASSERTION_HEADER =\n  'x-heddle-execution-host-assertion' as const;\nexport const MCP_CAPABILITY_HEADER =\n  'x-heddle-execution-host-mcp-capability' as const;\nexport const MODEL_API_KEY_HEADER =\n  'x-heddle-execution-host-model-api-key' as const;\n\nexport const OpaqueIdSchema = z\n  .string()\n  .min(1)\n  .max(128)\n  .regex(\n    /^[A-Za-z0-9][A-Za-z0-9._:@-]*$/,\n    'must be an opaque, path-free identifier',\n  );\n\nexport const JwtIssuerSchema = z.url().refine(\n  (value) => isSafeWebUrl(new URL(value)),\n  'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n);\n\nexport const JwtAudienceSchema = z.string().min(1).max(512);\n\nexport const RuntimeSessionIdSchema = z\n  .string()\n  .min(33)\n  .max(256)\n  .refine((value) => value === value.trim(), 'must not contain outer whitespace');\n\nexport const TimestampSchema = z.iso.datetime({ offset: true });\n\nexport const McpServerIdSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(\n    /^[A-Za-z0-9_-]+$/,\n    'must be a Heddle-compatible MCP server identifier',\n  );\n\nexport const McpToolNameSchema = z\n  .string()\n  .min(1)\n  .max(64)\n  .regex(\n    /^[A-Za-z][A-Za-z0-9_]*$/,\n    'must be a collision-free MCP tool name',\n  );\n\nexport const McpAllowedToolsSchema = z\n  .array(McpToolNameSchema)\n  .min(1)\n  .max(16)\n  .refine((tools) => new Set(tools).size === tools.length, {\n    message: 'must contain unique MCP tool names',\n  })\n  .refine(\n    (tools) => tools.reduce(\n      (characterCount, toolName) => characterCount + toolName.length,\n      0,\n    ) <= 512,\n    { message: 'contains too many aggregate tool-name characters' },\n  );\n\nexport const ExecutionScopeSchema = z.object({\n  adopterId: OpaqueIdSchema,\n  tenantId: OpaqueIdSchema,\n  subjectId: OpaqueIdSchema,\n  productSessionId: OpaqueIdSchema,\n}).strict();\n\nexport const ExecutionHostConversationTurnRequestSchema = z.object({\n  schemaVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  kind: z.literal(CONVERSATION_TURN_WORKFLOW),\n  invocationId: OpaqueIdSchema,\n  prompt: z.string().trim().min(1).max(200_000),\n  deadlineAt: TimestampSchema.optional(),\n}).strict();\n\nexport const HeartbeatRunContextSchema = z.object({\n  currentDateTime: TimestampSchema,\n  intervalMs: z.number().int().positive().max(Number.MAX_SAFE_INTEGER),\n  continuationMode: z.enum(['operator', 'agent']).optional(),\n  nextRunAt: TimestampSchema.optional(),\n  previousRunAt: TimestampSchema.optional(),\n  previousRunId: OpaqueIdSchema.optional(),\n}).strict();\n\nexport const ExecutionHostHeartbeatTaskRequestSchema = z.object({\n  schemaVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  kind: z.literal(HEARTBEAT_TASK_WORKFLOW),\n  invocationId: OpaqueIdSchema,\n  taskId: OpaqueIdSchema,\n  task: z.string().trim().min(1).max(200_000),\n  checkpoint: z.record(z.string(), z.json()).optional(),\n  runContext: HeartbeatRunContextSchema,\n  model: z.string().trim().min(1).max(512).optional(),\n  reasoningEffort: z.enum([\n    'none',\n    'low',\n    'medium',\n    'high',\n    'ultrahigh',\n    'max',\n  ]).optional(),\n  maxSteps: z.number().int().positive().max(10_000).optional(),\n  searchIgnoreDirs: z.array(z.string().min(1).max(1_024)).max(1_000).optional(),\n  systemContext: z.string().max(200_000).optional(),\n  deadlineAt: TimestampSchema.optional(),\n}).strict();\n\nexport const RuntimePublicResultSchema = z.object({\n  outcome: z.enum(['done', 'max_steps', 'error', 'interrupted']),\n  summary: z.string().optional(),\n  failure: z.object({\n    source: z.literal('model'),\n    code: z.enum([\n      'authentication',\n      'permission',\n      'quota',\n      'rate_limit',\n      'context_window',\n      'request',\n      'transport',\n      'empty_response',\n      'unknown',\n    ]),\n  }).strict().optional(),\n}).strict();\n\nconst StreamEnvelopeSchema = z.object({\n  schemaVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  invocationId: OpaqueIdSchema,\n  runId: OpaqueIdSchema,\n  sequence: z.number().int().nonnegative(),\n  timestamp: TimestampSchema,\n});\n\nexport const ExecutionHostStreamEventSchema = z.discriminatedUnion('kind', [\n  StreamEnvelopeSchema.extend({\n    sequence: z.literal(0),\n    kind: z.literal('accepted'),\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('activity'),\n    activity: z.unknown(),\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('result'),\n    result: RuntimePublicResultSchema,\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('cancelled'),\n    reason: z.string(),\n  }).strict(),\n  StreamEnvelopeSchema.extend({\n    kind: z.literal('error'),\n    error: z.object({\n      code: z.string().min(1).max(128).regex(/^[a-z0-9_]+$/),\n      message: z.string().min(1).max(1_600),\n    }).strict(),\n  }).strict(),\n]);\n\nexport const ExecutionHostHeartbeatStreamEventSchema = z.discriminatedUnion(\n  'kind',\n  [\n    StreamEnvelopeSchema.extend({\n      sequence: z.literal(0),\n      kind: z.literal('accepted'),\n    }).strict(),\n    StreamEnvelopeSchema.extend({\n      kind: z.literal('activity'),\n      activity: z.json(),\n    }).strict(),\n    StreamEnvelopeSchema.extend({\n      kind: z.literal('result'),\n      result: z.record(z.string(), z.json()),\n    }).strict(),\n    StreamEnvelopeSchema.extend({\n      kind: z.literal('cancelled'),\n      reason: z.string(),\n    }).strict(),\n    StreamEnvelopeSchema.extend({\n      kind: z.literal('error'),\n      error: z.object({\n        code: z.string().min(1).max(128).regex(/^[a-z0-9_]+$/),\n        message: z.string().min(1).max(1_600),\n      }).strict(),\n    }).strict(),\n  ],\n);\n\nexport const HostedExecutionWorkflowSchema = z.enum([\n  CONVERSATION_TURN_WORKFLOW,\n  HEARTBEAT_TASK_WORKFLOW,\n]);\n\nexport const ExecutionAssertionClaimsSchema = z.object({\n  iss: JwtIssuerSchema,\n  aud: JwtAudienceSchema,\n  contractVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  adopterId: OpaqueIdSchema,\n  tenantId: OpaqueIdSchema,\n  productSessionId: OpaqueIdSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  workflow: HostedExecutionWorkflowSchema,\n  sub: OpaqueIdSchema,\n  jti: OpaqueIdSchema,\n  iat: z.number().int().nonnegative(),\n  exp: z.number().int().positive(),\n}).passthrough();\n\nexport const McpCapabilityClaimsSchema = z.object({\n  iss: JwtIssuerSchema,\n  aud: JwtAudienceSchema,\n  contractVersion: z.literal(EXECUTION_CONTRACT_VERSION),\n  adopterId: OpaqueIdSchema,\n  tenantId: OpaqueIdSchema,\n  productSessionId: OpaqueIdSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: OpaqueIdSchema,\n  workflow: HostedExecutionWorkflowSchema,\n  serverId: McpServerIdSchema,\n  allowedTools: McpAllowedToolsSchema,\n  sub: OpaqueIdSchema,\n  jti: OpaqueIdSchema,\n  iat: z.number().int().nonnegative(),\n  exp: z.number().int().positive(),\n}).passthrough();\n\nexport type ExecutionScope = z.infer<typeof ExecutionScopeSchema>;\nexport type ExecutionHostConversationTurnRequest = z.infer<\n  typeof ExecutionHostConversationTurnRequestSchema\n>;\nexport type ExecutionHostHeartbeatTaskRequest = z.infer<\n  typeof ExecutionHostHeartbeatTaskRequestSchema\n>;\nexport type RuntimePublicResult = z.infer<typeof RuntimePublicResultSchema>;\nexport type ExecutionHostStreamEvent = z.infer<\n  typeof ExecutionHostStreamEventSchema\n>;\nexport type ExecutionHostTerminalEvent = Extract<\n  ExecutionHostStreamEvent,\n  { kind: 'result' | 'cancelled' | 'error' }\n>;\nexport type ExecutionHostHeartbeatStreamEvent = z.infer<\n  typeof ExecutionHostHeartbeatStreamEventSchema\n>;\nexport type ExecutionHostHeartbeatTerminalEvent = Extract<\n  ExecutionHostHeartbeatStreamEvent,\n  { kind: 'result' | 'cancelled' | 'error' }\n>;\nexport type ExecutionAssertionClaims = z.infer<\n  typeof ExecutionAssertionClaimsSchema\n>;\nexport type McpCapabilityClaims = z.infer<typeof McpCapabilityClaimsSchema>;\nexport type HostedExecutionWorkflow = z.infer<\n  typeof HostedExecutionWorkflowSchema\n>;\n\nexport function isExecutionHostTerminalEvent(\n  event: ExecutionHostStreamEvent,\n): event is ExecutionHostTerminalEvent {\n  return event.kind === 'result'\n    || event.kind === 'cancelled'\n    || event.kind === 'error';\n}\n\nexport function isExecutionHostHeartbeatTerminalEvent(\n  event: ExecutionHostHeartbeatStreamEvent,\n): event is ExecutionHostHeartbeatTerminalEvent {\n  return event.kind === 'result'\n    || event.kind === 'cancelled'\n    || event.kind === 'error';\n}\n\nexport function isSafeWebUrl(url: URL): boolean {\n  const loopback = ['127.0.0.1', '[::1]', 'localhost'].includes(url.hostname);\n  return (url.protocol === 'https:' || (url.protocol === 'http:' && loopback))\n    && !url.username\n    && !url.password\n    && !url.search\n    && !url.hash;\n}\n"]}

package/dist/conversation/index.d.ts

@@ -3,5 +3,5 @@ export { HOSTED_CONVERSATION_CANCELLED_CODES, HOSTED_CONVERSATION_FAILURE_CODES,
 export { HostedConversationConfigurationError, HostedConversationTurnService, } from './hosted-conversation-turn-service.js';
 export type { DurableHostedConversationTurnServiceConfig, DurableHostedConversationTurnServiceOptions, HostedConversationAcceptedTurn, HostedConversationExpiredTurnReconciliation, HostedConversationFailureCode, HostedConversationPersistenceScope, HostedConversationRequestedTurn, HostedConversationTerminalProjection, HostedConversationTerminalStatus, HostedConversationTurnIdentity, HostedConversationTurnLifecycleRecord, HostedConversationTurnLifecycleStore, HostedConversationTurnReconciliationOptions, HostedConversationTurnSettlement, HostedConversationTurnStatus, } from './lifecycle-types.js';
 export { HostedConversationTurnInputSchema } from './types.js';
-export type { HostedConversationCredentialContext, HostedConversationModelCredentialProvider, HostedConversationTurnInput, HostedConversationTurnRunner, HostedConversationTurnServiceConfig, } from './types.js';
+export type { HostedConversationCredentialContext, HostedConversationModelCredentialProvider, HostedModelCredentialProvider, HostedConversationTurnInput, HostedConversationTurnRunner, HostedConversationTurnServiceConfig, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/conversation/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/conversation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,uCAAuC,EACvC,sCAAsC,GACvC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,mCAAmC,EACnC,iCAAiC,EACjC,gCAAgC,EAChC,qCAAqC,EACrC,iCAAiC,EACjC,oCAAoC,EACpC,iDAAiD,EACjD,mCAAmC,EACnC,wCAAwC,EACxC,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,kCAAkC,GACnC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oCAAoC,EACpC,6BAA6B,GAC9B,MAAM,uCAAuC,CAAC;AAC/C,YAAY,EACV,0CAA0C,EAC1C,2CAA2C,EAC3C,8BAA8B,EAC9B,2CAA2C,EAC3C,6BAA6B,EAC7B,kCAAkC,EAClC,+BAA+B,EAC/B,oCAAoC,EACpC,gCAAgC,EAChC,8BAA8B,EAC9B,qCAAqC,EACrC,oCAAoC,EACpC,2CAA2C,EAC3C,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,YAAY,EACV,mCAAmC,EACnC,yCAAyC,EACzC,2BAA2B,EAC3B,4BAA4B,EAC5B,mCAAmC,GACpC,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/conversation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,uCAAuC,EACvC,sCAAsC,GACvC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,mCAAmC,EACnC,iCAAiC,EACjC,gCAAgC,EAChC,qCAAqC,EACrC,iCAAiC,EACjC,oCAAoC,EACpC,iDAAiD,EACjD,mCAAmC,EACnC,wCAAwC,EACxC,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,kCAAkC,GACnC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oCAAoC,EACpC,6BAA6B,GAC9B,MAAM,uCAAuC,CAAC;AAC/C,YAAY,EACV,0CAA0C,EAC1C,2CAA2C,EAC3C,8BAA8B,EAC9B,2CAA2C,EAC3C,6BAA6B,EAC7B,kCAAkC,EAClC,+BAA+B,EAC/B,oCAAoC,EACpC,gCAAgC,EAChC,8BAA8B,EAC9B,qCAAqC,EACrC,oCAAoC,EACpC,2CAA2C,EAC3C,gCAAgC,EAChC,4BAA4B,GAC7B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC;AAC/D,YAAY,EACV,mCAAmC,EACnC,yCAAyC,EACzC,6BAA6B,EAC7B,2BAA2B,EAC3B,4BAA4B,EAC5B,mCAAmC,GACpC,MAAM,YAAY,CAAC"}

package/dist/conversation/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/conversation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,uCAAuC,EACvC,sCAAsC,GACvC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,mCAAmC,EACnC,iCAAiC,EACjC,gCAAgC,EAChC,qCAAqC,EACrC,iCAAiC,EACjC,oCAAoC,EACpC,iDAAiD,EACjD,mCAAmC,EACnC,wCAAwC,EACxC,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,kCAAkC,GACnC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oCAAoC,EACpC,6BAA6B,GAC9B,MAAM,uCAAuC,CAAC;AAkB/C,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC","sourcesContent":["export {\n  DurableHostedConversationTurnService,\n  interruptExpiredHostedConversationTurns,\n  projectHostedConversationTerminalEvent,\n} from './durable-hosted-conversation-turn-service.js';\nexport {\n  HOSTED_CONVERSATION_CANCELLED_CODES,\n  HOSTED_CONVERSATION_FAILURE_CODES,\n  HOSTED_CONVERSATION_FAILED_CODES,\n  HOSTED_CONVERSATION_INTERRUPTED_CODES,\n  HOSTED_CONVERSATION_TURN_STATUSES,\n  HostedConversationAcceptedTurnSchema,\n  HostedConversationExpiredTurnReconciliationSchema,\n  HostedConversationFailureCodeSchema,\n  HostedConversationPersistenceScopeSchema,\n  HostedConversationRequestedTurnSchema,\n  HostedConversationTurnIdentitySchema,\n  HostedConversationTurnSettlementSchema,\n  HostedConversationTurnStatusSchema,\n} from './lifecycle-types.js';\nexport {\n  HostedConversationConfigurationError,\n  HostedConversationTurnService,\n} from './hosted-conversation-turn-service.js';\nexport type {\n  DurableHostedConversationTurnServiceConfig,\n  DurableHostedConversationTurnServiceOptions,\n  HostedConversationAcceptedTurn,\n  HostedConversationExpiredTurnReconciliation,\n  HostedConversationFailureCode,\n  HostedConversationPersistenceScope,\n  HostedConversationRequestedTurn,\n  HostedConversationTerminalProjection,\n  HostedConversationTerminalStatus,\n  HostedConversationTurnIdentity,\n  HostedConversationTurnLifecycleRecord,\n  HostedConversationTurnLifecycleStore,\n  HostedConversationTurnReconciliationOptions,\n  HostedConversationTurnSettlement,\n  HostedConversationTurnStatus,\n} from './lifecycle-types.js';\nexport { HostedConversationTurnInputSchema } from './types.js';\nexport type {\n  HostedConversationCredentialContext,\n  HostedConversationModelCredentialProvider,\n  HostedConversationTurnInput,\n  HostedConversationTurnRunner,\n  HostedConversationTurnServiceConfig,\n} from './types.js';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/conversation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,oCAAoC,EACpC,uCAAuC,EACvC,sCAAsC,GACvC,MAAM,+CAA+C,CAAC;AACvD,OAAO,EACL,mCAAmC,EACnC,iCAAiC,EACjC,gCAAgC,EAChC,qCAAqC,EACrC,iCAAiC,EACjC,oCAAoC,EACpC,iDAAiD,EACjD,mCAAmC,EACnC,wCAAwC,EACxC,qCAAqC,EACrC,oCAAoC,EACpC,sCAAsC,EACtC,kCAAkC,GACnC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,oCAAoC,EACpC,6BAA6B,GAC9B,MAAM,uCAAuC,CAAC;AAkB/C,OAAO,EAAE,iCAAiC,EAAE,MAAM,YAAY,CAAC","sourcesContent":["export {\n  DurableHostedConversationTurnService,\n  interruptExpiredHostedConversationTurns,\n  projectHostedConversationTerminalEvent,\n} from './durable-hosted-conversation-turn-service.js';\nexport {\n  HOSTED_CONVERSATION_CANCELLED_CODES,\n  HOSTED_CONVERSATION_FAILURE_CODES,\n  HOSTED_CONVERSATION_FAILED_CODES,\n  HOSTED_CONVERSATION_INTERRUPTED_CODES,\n  HOSTED_CONVERSATION_TURN_STATUSES,\n  HostedConversationAcceptedTurnSchema,\n  HostedConversationExpiredTurnReconciliationSchema,\n  HostedConversationFailureCodeSchema,\n  HostedConversationPersistenceScopeSchema,\n  HostedConversationRequestedTurnSchema,\n  HostedConversationTurnIdentitySchema,\n  HostedConversationTurnSettlementSchema,\n  HostedConversationTurnStatusSchema,\n} from './lifecycle-types.js';\nexport {\n  HostedConversationConfigurationError,\n  HostedConversationTurnService,\n} from './hosted-conversation-turn-service.js';\nexport type {\n  DurableHostedConversationTurnServiceConfig,\n  DurableHostedConversationTurnServiceOptions,\n  HostedConversationAcceptedTurn,\n  HostedConversationExpiredTurnReconciliation,\n  HostedConversationFailureCode,\n  HostedConversationPersistenceScope,\n  HostedConversationRequestedTurn,\n  HostedConversationTerminalProjection,\n  HostedConversationTerminalStatus,\n  HostedConversationTurnIdentity,\n  HostedConversationTurnLifecycleRecord,\n  HostedConversationTurnLifecycleStore,\n  HostedConversationTurnReconciliationOptions,\n  HostedConversationTurnSettlement,\n  HostedConversationTurnStatus,\n} from './lifecycle-types.js';\nexport { HostedConversationTurnInputSchema } from './types.js';\nexport type {\n  HostedConversationCredentialContext,\n  HostedConversationModelCredentialProvider,\n  HostedModelCredentialProvider,\n  HostedConversationTurnInput,\n  HostedConversationTurnRunner,\n  HostedConversationTurnServiceConfig,\n} from './types.js';\n"]}

package/dist/conversation/types.d.ts

@@ -17,16 +17,18 @@ export declare const HostedConversationTurnInputSchema: z.ZodObject<{
 export type HostedConversationTurnInput = z.infer<typeof HostedConversationTurnInputSchema>;
 export type HostedConversationCredentialContext = Pick<HostedConversationTurnInput, 'scope' | 'invocationId' | 'signal'>;
 /** Resolves model authority without exposing it to HTTP or product data. */
-export interface HostedConversationModelCredentialProvider {
+export interface HostedModelCredentialProvider {
     resolveModelApiKey(context: HostedConversationCredentialContext): Promise<string>;
 }
+/** @deprecated Use `HostedModelCredentialProvider`. */
+export type HostedConversationModelCredentialProvider = HostedModelCredentialProvider;
 export interface HostedConversationTurnRunner {
     streamTurn(input: HostedConversationTurnInput): AsyncIterable<ExecutionHostStreamEvent>;
 }
 export type HostedConversationTurnServiceConfig = {
     authority: ExecutionAuthority;
     executionHost: ExecutionHost;
-    modelCredentials: HostedConversationModelCredentialProvider;
+    modelCredentials: HostedModelCredentialProvider;
     /** Omit this policy when the hosted workflow needs no product MCP tools. */
     mcp?: {
         allowedTools: readonly string[];

package/dist/conversation/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/conversation/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAO,MAAM,iCAAiC;;;;;;;;;;;kBAUnC,CAAC;AAEZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG,IAAI,CACpD,2BAA2B,EAC3B,OAAO,GAAG,cAAc,GAAG,QAAQ,CACpC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,WAAW,yCAAyC;IACxD,kBAAkB,CAChB,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CACR,KAAK,EAAE,2BAA2B,GACjC,aAAa,CAAC,wBAAwB,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,mCAAmC,GAAG;IAChD,SAAS,EAAE,kBAAkB,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B,gBAAgB,EAAE,yCAAyC,CAAC;IAC5D,4EAA4E;IAC5E,GAAG,CAAC,EAAE;QACJ,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/conversation/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAO,MAAM,iCAAiC;;;;;;;;;;;kBAUnC,CAAC;AAEZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG,IAAI,CACpD,2BAA2B,EAC3B,OAAO,GAAG,cAAc,GAAG,QAAQ,CACpC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,WAAW,6BAA6B;IAC5C,kBAAkB,CAChB,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,uDAAuD;AACvD,MAAM,MAAM,yCAAyC,GACnD,6BAA6B,CAAC;AAEhC,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CACR,KAAK,EAAE,2BAA2B,GACjC,aAAa,CAAC,wBAAwB,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,mCAAmC,GAAG;IAChD,SAAS,EAAE,kBAAkB,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B,gBAAgB,EAAE,6BAA6B,CAAC;IAChD,4EAA4E;IAC5E,GAAG,CAAC,EAAE;QACJ,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAC"}

package/dist/conversation/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/conversation/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,0CAA0C,EAC1C,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,KAAK,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrD,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,0CAA0C,CAAC,KAAK,CAAC,YAAY;IAC3E,MAAM,EAAE,0CAA0C,CAAC,KAAK,CAAC,MAAM;IAC/D,UAAU,EAAE,0CAA0C,CAAC,KAAK,CAAC,UAAU;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,WAAW,EACvC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC,MAAM,EAAE,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  ExecutionHostConversationTurnRequestSchema,\n  ExecutionScopeSchema,\n  RuntimeSessionIdSchema,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport type { ExecutionAuthority } from '../authority/index.js';\nimport type { ExecutionHost } from '../http-sse/index.js';\n\nexport const HostedConversationTurnInputSchema = z.object({\n  scope: ExecutionScopeSchema.omit({ adopterId: true }),\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: ExecutionHostConversationTurnRequestSchema.shape.invocationId,\n  prompt: ExecutionHostConversationTurnRequestSchema.shape.prompt,\n  deadlineAt: ExecutionHostConversationTurnRequestSchema.shape.deadlineAt,\n  signal: z.custom<AbortSignal>(\n    (value) => value instanceof AbortSignal,\n    'signal must be an AbortSignal',\n  ).optional(),\n}).strict();\n\nexport type HostedConversationTurnInput = z.infer<\n  typeof HostedConversationTurnInputSchema\n>;\n\nexport type HostedConversationCredentialContext = Pick<\n  HostedConversationTurnInput,\n  'scope' | 'invocationId' | 'signal'\n>;\n\n/** Resolves model authority without exposing it to HTTP or product data. */\nexport interface HostedConversationModelCredentialProvider {\n  resolveModelApiKey(\n    context: HostedConversationCredentialContext,\n  ): Promise<string>;\n}\n\nexport interface HostedConversationTurnRunner {\n  streamTurn(\n    input: HostedConversationTurnInput,\n  ): AsyncIterable<ExecutionHostStreamEvent>;\n}\n\nexport type HostedConversationTurnServiceConfig = {\n  authority: ExecutionAuthority;\n  executionHost: ExecutionHost;\n  modelCredentials: HostedConversationModelCredentialProvider;\n  /** Omit this policy when the hosted workflow needs no product MCP tools. */\n  mcp?: {\n    allowedTools: readonly string[];\n  };\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/conversation/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,0CAA0C,EAC1C,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,KAAK,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrD,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,0CAA0C,CAAC,KAAK,CAAC,YAAY;IAC3E,MAAM,EAAE,0CAA0C,CAAC,KAAK,CAAC,MAAM;IAC/D,UAAU,EAAE,0CAA0C,CAAC,KAAK,CAAC,UAAU;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,WAAW,EACvC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC,MAAM,EAAE,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  ExecutionHostConversationTurnRequestSchema,\n  ExecutionScopeSchema,\n  RuntimeSessionIdSchema,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport type { ExecutionAuthority } from '../authority/index.js';\nimport type { ExecutionHost } from '../http-sse/index.js';\n\nexport const HostedConversationTurnInputSchema = z.object({\n  scope: ExecutionScopeSchema.omit({ adopterId: true }),\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: ExecutionHostConversationTurnRequestSchema.shape.invocationId,\n  prompt: ExecutionHostConversationTurnRequestSchema.shape.prompt,\n  deadlineAt: ExecutionHostConversationTurnRequestSchema.shape.deadlineAt,\n  signal: z.custom<AbortSignal>(\n    (value) => value instanceof AbortSignal,\n    'signal must be an AbortSignal',\n  ).optional(),\n}).strict();\n\nexport type HostedConversationTurnInput = z.infer<\n  typeof HostedConversationTurnInputSchema\n>;\n\nexport type HostedConversationCredentialContext = Pick<\n  HostedConversationTurnInput,\n  'scope' | 'invocationId' | 'signal'\n>;\n\n/** Resolves model authority without exposing it to HTTP or product data. */\nexport interface HostedModelCredentialProvider {\n  resolveModelApiKey(\n    context: HostedConversationCredentialContext,\n  ): Promise<string>;\n}\n\n/** @deprecated Use `HostedModelCredentialProvider`. */\nexport type HostedConversationModelCredentialProvider =\n  HostedModelCredentialProvider;\n\nexport interface HostedConversationTurnRunner {\n  streamTurn(\n    input: HostedConversationTurnInput,\n  ): AsyncIterable<ExecutionHostStreamEvent>;\n}\n\nexport type HostedConversationTurnServiceConfig = {\n  authority: ExecutionAuthority;\n  executionHost: ExecutionHost;\n  modelCredentials: HostedModelCredentialProvider;\n  /** Omit this policy when the hosted workflow needs no product MCP tools. */\n  mcp?: {\n    allowedTools: readonly string[];\n  };\n};\n"]}

package/dist/heartbeat/hosted-heartbeat-agent-execution-transport.d.ts

@@ -0,0 +1,14 @@
+import { type HostedHeartbeatAgentExecutionTransportConfig, type HostedHeartbeatAgentExecutionTransportInput } from './types.js';
+/**
+ * Binds Heddle's provider-neutral scheduler transport to hosted execution.
+ *
+ * Product code supplies only authorized scope/session resolution. This class
+ * owns execution-id correlation and delegates authority, credentials, and
+ * stream semantics to `HostedHeartbeatTaskService`.
+ */
+export declare class HostedHeartbeatAgentExecutionTransport {
+    #private;
+    constructor(config: HostedHeartbeatAgentExecutionTransportConfig);
+    execute(input: HostedHeartbeatAgentExecutionTransportInput): Promise<unknown>;
+}
+//# sourceMappingURL=hosted-heartbeat-agent-execution-transport.d.ts.map

package/dist/heartbeat/hosted-heartbeat-agent-execution-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-heartbeat-agent-execution-transport.d.ts","sourceRoot":"","sources":["../../src/heartbeat/hosted-heartbeat-agent-execution-transport.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,4CAA4C,EACjD,KAAK,2CAA2C,EACjD,MAAM,YAAY,CAAC;AAEpB;;;;;;GAMG;AACH,qBAAa,sCAAsC;;gBAMrC,MAAM,EAAE,4CAA4C;IAK1D,OAAO,CACX,KAAK,EAAE,2CAA2C,GACjD,OAAO,CAAC,OAAO,CAAC;CAsBpB"}

package/dist/heartbeat/hosted-heartbeat-agent-execution-transport.js

@@ -0,0 +1,38 @@
+import { OpaqueIdSchema } from '../contracts/index.js';
+import { HostedHeartbeatInvocationContextSchema, HostedHeartbeatTaskInputSchema, } from './types.js';
+/**
+ * Binds Heddle's provider-neutral scheduler transport to hosted execution.
+ *
+ * Product code supplies only authorized scope/session resolution. This class
+ * owns execution-id correlation and delegates authority, credentials, and
+ * stream semantics to `HostedHeartbeatTaskService`.
+ */
+export class HostedHeartbeatAgentExecutionTransport {
+    #runner;
+    #resolveInvocationContext;
+    constructor(config) {
+        this.#runner = config.runner;
+        this.#resolveInvocationContext = config.resolveInvocationContext;
+    }
+    async execute(input) {
+        input.signal.throwIfAborted();
+        const { executionId: rawExecutionId, ...request } = input.request;
+        const executionId = OpaqueIdSchema.parse(rawExecutionId);
+        const context = HostedHeartbeatInvocationContextSchema.parse(await this.#resolveInvocationContext({
+            taskId: input.request.taskId,
+            executionId,
+            signal: input.signal,
+        }));
+        input.signal.throwIfAborted();
+        return await this.#runner.execute(HostedHeartbeatTaskInputSchema.parse({
+            ...request,
+            invocationId: executionId,
+            scope: context.scope,
+            runtimeSessionId: context.runtimeSessionId,
+            ...(context.deadlineAt ? { deadlineAt: context.deadlineAt } : {}),
+            signal: input.signal,
+            publishActivity: input.publishActivity,
+        }));
+    }
+}
+//# sourceMappingURL=hosted-heartbeat-agent-execution-transport.js.map

package/dist/heartbeat/hosted-heartbeat-agent-execution-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-heartbeat-agent-execution-transport.js","sourceRoot":"","sources":["../../src/heartbeat/hosted-heartbeat-agent-execution-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EACL,sCAAsC,EACtC,8BAA8B,GAG/B,MAAM,YAAY,CAAC;AAEpB;;;;;;GAMG;AACH,MAAM,OAAO,sCAAsC;IACxC,OAAO,CAAyD;IAChE,yBAAyB,CAEhC;IAEF,YAAY,MAAoD;QAC9D,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,yBAAyB,GAAG,MAAM,CAAC,wBAAwB,CAAC;IACnE,CAAC;IAED,KAAK,CAAC,OAAO,CACX,KAAkD;QAElD,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9B,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC;QAClE,MAAM,WAAW,GAAG,cAAc,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,sCAAsC,CAAC,KAAK,CAC1D,MAAM,IAAI,CAAC,yBAAyB,CAAC;YACnC,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM;YAC5B,WAAW;YACX,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CACH,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9B,OAAO,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC;YACrE,GAAG,OAAO;YACV,YAAY,EAAE,WAAW;YACzB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,eAAe,EAAE,KAAK,CAAC,eAAe;SACvC,CAAC,CAAC,CAAC;IACN,CAAC;CACF","sourcesContent":["import { OpaqueIdSchema } from '../contracts/index.js';\nimport {\n  HostedHeartbeatInvocationContextSchema,\n  HostedHeartbeatTaskInputSchema,\n  type HostedHeartbeatAgentExecutionTransportConfig,\n  type HostedHeartbeatAgentExecutionTransportInput,\n} from './types.js';\n\n/**\n * Binds Heddle's provider-neutral scheduler transport to hosted execution.\n *\n * Product code supplies only authorized scope/session resolution. This class\n * owns execution-id correlation and delegates authority, credentials, and\n * stream semantics to `HostedHeartbeatTaskService`.\n */\nexport class HostedHeartbeatAgentExecutionTransport {\n  readonly #runner: HostedHeartbeatAgentExecutionTransportConfig['runner'];\n  readonly #resolveInvocationContext: HostedHeartbeatAgentExecutionTransportConfig[\n    'resolveInvocationContext'\n  ];\n\n  constructor(config: HostedHeartbeatAgentExecutionTransportConfig) {\n    this.#runner = config.runner;\n    this.#resolveInvocationContext = config.resolveInvocationContext;\n  }\n\n  async execute(\n    input: HostedHeartbeatAgentExecutionTransportInput,\n  ): Promise<unknown> {\n    input.signal.throwIfAborted();\n    const { executionId: rawExecutionId, ...request } = input.request;\n    const executionId = OpaqueIdSchema.parse(rawExecutionId);\n    const context = HostedHeartbeatInvocationContextSchema.parse(\n      await this.#resolveInvocationContext({\n        taskId: input.request.taskId,\n        executionId,\n        signal: input.signal,\n      }),\n    );\n    input.signal.throwIfAborted();\n    return await this.#runner.execute(HostedHeartbeatTaskInputSchema.parse({\n      ...request,\n      invocationId: executionId,\n      scope: context.scope,\n      runtimeSessionId: context.runtimeSessionId,\n      ...(context.deadlineAt ? { deadlineAt: context.deadlineAt } : {}),\n      signal: input.signal,\n      publishActivity: input.publishActivity,\n    }));\n  }\n}\n"]}

package/dist/heartbeat/hosted-heartbeat-task-service.d.ts

@@ -0,0 +1,22 @@
+import { type HostedHeartbeatTaskInput, type HostedHeartbeatTaskRunner, type HostedHeartbeatTaskServiceConfig } from './types.js';
+export declare class HostedHeartbeatConfigurationError extends Error {
+    readonly name = "HostedHeartbeatConfigurationError";
+}
+export declare class HostedHeartbeatExecutionError extends Error {
+    readonly code: string;
+    readonly name = "HostedHeartbeatExecutionError";
+    constructor(code: string);
+}
+/**
+ * Provider-neutral application service for one remotely executed heartbeat.
+ *
+ * It owns authority issuance, optional product-tool policy, model credentials,
+ * ordered stream consumption, cancellation, and terminal classification. The
+ * caller owns product scope/session mapping and the durable heartbeat store.
+ */
+export declare class HostedHeartbeatTaskService implements HostedHeartbeatTaskRunner {
+    #private;
+    constructor(config: HostedHeartbeatTaskServiceConfig);
+    execute(rawInput: HostedHeartbeatTaskInput): Promise<unknown>;
+}
+//# sourceMappingURL=hosted-heartbeat-task-service.d.ts.map

package/dist/heartbeat/hosted-heartbeat-task-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-heartbeat-task-service.d.ts","sourceRoot":"","sources":["../../src/heartbeat/hosted-heartbeat-task-service.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,gCAAgC,EACtC,MAAM,YAAY,CAAC;AAEpB,qBAAa,iCAAkC,SAAQ,KAAK;IAC1D,QAAQ,CAAC,IAAI,uCAAuC;CACrD;AAED,qBAAa,6BAA8B,SAAQ,KAAK;IAG1C,QAAQ,CAAC,IAAI,EAAE,MAAM;IAFjC,QAAQ,CAAC,IAAI,mCAAmC;gBAE3B,IAAI,EAAE,MAAM;CAGlC;AAED;;;;;;GAMG;AACH,qBAAa,0BACb,YAAW,yBAAyB;;gBAQtB,MAAM,EAAE,gCAAgC;IAS9C,OAAO,CACX,QAAQ,EAAE,wBAAwB,GACjC,OAAO,CAAC,OAAO,CAAC;CA+DpB"}

package/dist/heartbeat/hosted-heartbeat-task-service.js

@@ -0,0 +1,96 @@
+import { HEARTBEAT_TASK_WORKFLOW, McpAllowedToolsSchema, } from '../contracts/index.js';
+import { ExecutionHostInvocationCancelledError } from '../http-sse/index.js';
+import { HostedHeartbeatTaskInputSchema, } from './types.js';
+export class HostedHeartbeatConfigurationError extends Error {
+    name = 'HostedHeartbeatConfigurationError';
+}
+export class HostedHeartbeatExecutionError extends Error {
+    code;
+    name = 'HostedHeartbeatExecutionError';
+    constructor(code) {
+        super('Execution Host heartbeat task failed.');
+        this.code = code;
+    }
+}
+/**
+ * Provider-neutral application service for one remotely executed heartbeat.
+ *
+ * It owns authority issuance, optional product-tool policy, model credentials,
+ * ordered stream consumption, cancellation, and terminal classification. The
+ * caller owns product scope/session mapping and the durable heartbeat store.
+ */
+export class HostedHeartbeatTaskService {
+    #authority;
+    #executionHost;
+    #modelCredentials;
+    #allowedTools;
+    constructor(config) {
+        this.#authority = config.authority;
+        this.#executionHost = config.executionHost;
+        this.#modelCredentials = config.modelCredentials;
+        this.#allowedTools = config.mcp
+            ? Object.freeze(McpAllowedToolsSchema.parse(config.mcp.allowedTools))
+            : undefined;
+    }
+    async execute(rawInput) {
+        const input = HostedHeartbeatTaskInputSchema.parse(rawInput);
+        input.signal?.throwIfAborted();
+        const issued = await this.#authority.issue({
+            scope: input.scope,
+            runtimeSessionId: input.runtimeSessionId,
+            invocationId: input.invocationId,
+            workflow: HEARTBEAT_TASK_WORKFLOW,
+            ...(this.#allowedTools
+                ? { mcp: { allowedTools: this.#allowedTools } }
+                : {}),
+        });
+        const mcpCapability = issued.mcpCapability();
+        if (this.#allowedTools && !mcpCapability) {
+            throw new HostedHeartbeatConfigurationError('Hosted heartbeat tool policy requires an MCP-capable execution authority.');
+        }
+        const modelApiKey = await this.#modelCredentials.resolveModelApiKey({
+            scope: input.scope,
+            invocationId: input.invocationId,
+            signal: input.signal,
+        });
+        input.signal?.throwIfAborted();
+        for await (const event of this.#executionHost.streamHeartbeatTask({
+            invocationId: input.invocationId,
+            runtimeSessionId: input.runtimeSessionId,
+            taskId: input.taskId,
+            task: input.task,
+            ...(input.checkpoint ? { checkpoint: input.checkpoint } : {}),
+            runContext: input.runContext,
+            ...(input.model ? { model: input.model } : {}),
+            ...(input.reasoningEffort
+                ? { reasoningEffort: input.reasoningEffort }
+                : {}),
+            ...(input.maxSteps !== undefined ? { maxSteps: input.maxSteps } : {}),
+            ...(input.searchIgnoreDirs
+                ? { searchIgnoreDirs: input.searchIgnoreDirs }
+                : {}),
+            ...(input.systemContext ? { systemContext: input.systemContext } : {}),
+            ...(input.deadlineAt ? { deadlineAt: input.deadlineAt } : {}),
+            ...(input.signal ? { signal: input.signal } : {}),
+            executionAssertion: issued.executionAssertion(),
+            ...(mcpCapability ? { mcpCapability } : {}),
+            modelApiKey,
+        })) {
+            if (event.kind === 'activity') {
+                input.publishActivity?.(event.activity);
+                continue;
+            }
+            if (event.kind === 'result') {
+                return event.result;
+            }
+            if (event.kind === 'cancelled') {
+                throw new ExecutionHostInvocationCancelledError();
+            }
+            if (event.kind === 'error') {
+                throw new HostedHeartbeatExecutionError(event.error.code);
+            }
+        }
+        throw new HostedHeartbeatExecutionError('missing_terminal_result');
+    }
+}
+//# sourceMappingURL=hosted-heartbeat-task-service.js.map