@heddleagent/execution-host-client 6.1.0 → 6.3.0

package/README.md

@@ -5,7 +5,7 @@ products that invoke a separately deployed Heddle Execution Host. It lets an
 adopter keep its own language stack, authentication, database, product policy,
 MCP tools, and UI while reusing the security-sensitive v1 contract machinery.
 
-> **Current availability:** stable version `6.1.0`. The former
+> **Current availability:** stable version `6.2.0`. The former
 > `@roackb2/heddle-adopter@5.13.0` coordinate is deprecated and remains
 > installable only for existing consumers. Heddle does not currently distribute
 > the compatible Execution Host implementation or offer a hosted service. The
@@ -30,10 +30,11 @@ modular AWS SDK for its AgentCore transport and the official MCP SDK, plus
 | `@heddleagent/execution-host-client/contracts` | Runtime-validated v1 request, stream, identity, capability, and header contracts |
 | `@heddleagent/execution-host-client/authority` | ES256 execution assertion and optional MCP capability issuance plus public JWKS projection |
 | `@heddleagent/execution-host-client/conversation` | Turn orchestration across authority, model credentials, optional MCP policy, an `ExecutionHost`, and an optional adopter-implemented durable lifecycle store |
+| `@heddleagent/execution-host-client/heartbeat` | Remote heartbeat orchestration that keeps durable task authority in a coordinator while a compatible Execution Host runs the agent cycle |
 | `@heddleagent/execution-host-client/mcp` | Independent capability verification at the adopter's MCP edge |
 | `@heddleagent/execution-host-client/mcp/node` | Stateless official-SDK Streamable HTTP lifecycle around adopter-defined toolsets |
-| `@heddleagent/execution-host-client/http-sse` | Transport-neutral `ExecutionHost` port and strict direct-development HTTP/SSE client |
-| `@heddleagent/execution-host-client/agentcore` | Official AWS AgentCore/SigV4 implementation of the same `ExecutionHost` port |
+| `@heddleagent/execution-host-client/http-sse` | Transport-neutral conversation and heartbeat ports plus the strict direct-development HTTP/SSE client |
+| `@heddleagent/execution-host-client/agentcore` | Official AWS AgentCore/SigV4 implementation of the same conversation and heartbeat ports |
 | `@heddleagent/execution-host-client/testing` | Node-only loopback v1 fixture plus durable-turn store conformance for real adapters |
 | `@heddleagent/execution-host-client/node` | Optional Node JWKS/conversation HTTP edge plus safe local signing-key helpers |
 
@@ -278,6 +279,44 @@ The client refuses redirects, bounds parser and error bodies, validates ordered
 SSE identity, streams accepted/activity events incrementally, and withholds the
 terminal event until clean EOF. It never retries an ambiguous invocation.
 
+## Delegate heartbeat agent cycles
+
+For autonomous work, keep the durable task store and scheduler in one
+long-running coordinator. Inject the hosted transport only at the point where
+the scheduler would otherwise run the local heartbeat agent:
+
+```ts
+import { HeartbeatSchedulerService } from '@heddleagent/runtime/advanced'
+import {
+  HostedHeartbeatAgentExecutionTransport,
+  HostedHeartbeatTaskService,
+} from '@heddleagent/execution-host-client/heartbeat'
+
+const hostedHeartbeat = new HostedHeartbeatTaskService({
+  authority,
+  executionHost: agentCoreExecutionHost,
+  modelCredentials,
+  mcp: { allowedTools: ['read_workspace_snapshot'] },
+})
+const agentExecutionTransport = new HostedHeartbeatAgentExecutionTransport({
+  runner: hostedHeartbeat,
+  resolveInvocationContext: ({ taskId, executionId, signal }) => (
+    resolveAuthorizedHeartbeatInvocation({ taskId, executionId, signal })
+  ),
+})
+
+const scheduler = HeartbeatSchedulerService.start({
+  store: heddleHeartbeatStore,
+  agentExecutionTransport,
+})
+```
+
+The coordinator still owns task lookup, claims, checkpoint loading, cancellation,
+claim-fenced settlement, history, and recovery. The Runtime receives a bounded
+task/checkpoint request plus invocation-scoped authority and model credentials;
+it receives no Heddle database credential. Omitting `agentExecutionTransport`
+preserves the existing in-process runner.
+
 ## Verify an adopter integration locally
 
 The explicit `testing` subpath provides a real loopback implementation of the

package/dist/agentcore/agentcore-execution-host.d.ts

@@ -1,14 +1,15 @@
-import { type ExecutionHostStreamEvent } from '../contracts/index.js';
-import { type ExecutionHost, type ExecutionHostConversationTurn } from '../http-sse/index.js';
+import { type ExecutionHostHeartbeatStreamEvent, type ExecutionHostStreamEvent } from '../contracts/index.js';
+import { type ExecutionHost, type ExecutionHostConversationTurn, type ExecutionHostHeartbeatTask, type HeartbeatExecutionHost } from '../http-sse/index.js';
 import type { AgentCoreExecutionHostConfig } from './types.js';
 /**
  * Invokes one compatible Heddle Execution Host through AWS AgentCore while
  * reusing the package's strict request and SSE protocol validation.
  */
-export declare class AgentCoreExecutionHost implements ExecutionHost {
+export declare class AgentCoreExecutionHost implements ExecutionHost, HeartbeatExecutionHost {
     #private;
     constructor(config: AgentCoreExecutionHostConfig);
     streamConversationTurn(input: ExecutionHostConversationTurn): AsyncIterable<ExecutionHostStreamEvent>;
+    streamHeartbeatTask(input: ExecutionHostHeartbeatTask): AsyncIterable<ExecutionHostHeartbeatStreamEvent>;
     close(): void;
 }
 export declare const AGENTCORE_FORWARDED_HEADER_NAMES: readonly ["x-heddle-execution-host-assertion", "x-heddle-execution-host-mcp-capability", "x-heddle-execution-host-model-api-key"];

package/dist/agentcore/agentcore-execution-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agentcore-execution-host.d.ts","sourceRoot":"","sources":["../../src/agentcore/agentcore-execution-host.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,6BAA6B,EACnC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,4BAA4B,EAE7B,MAAM,YAAY,CAAC;AAoBpB;;;GAGG;AACH,qBAAa,sBAAuB,YAAW,aAAa;;gBAM9C,MAAM,EAAE,4BAA4B;IAgBhD,sBAAsB,CACpB,KAAK,EAAE,6BAA6B,GACnC,aAAa,CAAC,wBAAwB,CAAC;IAK1C,KAAK,IAAI,IAAI;CAiEd;AAsGD,eAAO,MAAM,gCAAgC,mIAIlC,CAAC;AAEZ,eAAO,MAAM,+BAA+B,kDAEjC,CAAC"}
+{"version":3,"file":"agentcore-execution-host.d.ts","sourceRoot":"","sources":["../../src/agentcore/agentcore-execution-host.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAC/B,KAAK,sBAAsB,EAC5B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,4BAA4B,EAE7B,MAAM,YAAY,CAAC;AAoBpB;;;GAGG;AACH,qBAAa,sBACb,YAAW,aAAa,EAAE,sBAAsB;;gBAMlC,MAAM,EAAE,4BAA4B;IAgBhD,sBAAsB,CACpB,KAAK,EAAE,6BAA6B,GACnC,aAAa,CAAC,wBAAwB,CAAC;IAK1C,mBAAmB,CACjB,KAAK,EAAE,0BAA0B,GAChC,aAAa,CAAC,iCAAiC,CAAC;IAKnD,KAAK,IAAI,IAAI;CAiEd;AAsGD,eAAO,MAAM,gCAAgC,mIAIlC,CAAC;AAEZ,eAAO,MAAM,+BAA+B,kDAEjC,CAAC"}

package/dist/agentcore/agentcore-execution-host.js

@@ -47,6 +47,10 @@ export class AgentCoreExecutionHost {
         assertAgentCoreRuntimeSessionId(input.runtimeSessionId);
         return this.#wire.streamConversationTurn(input);
     }
+    streamHeartbeatTask(input) {
+        assertAgentCoreRuntimeSessionId(input.runtimeSessionId);
+        return this.#wire.streamHeartbeatTask(input);
+    }
     close() {
         this.#client.destroy?.();
     }

package/dist/agentcore/agentcore-execution-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"agentcore-execution-host.js","sourceRoot":"","sources":["../../src/agentcore/agentcore-execution-host.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAC1B,iCAAiC,EACjC,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,GAGxB,MAAM,sBAAsB,CAAC;AAM9B,MAAM,YAAY,GAAG,kBAAkB,CAAC;AACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AACrE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,mCAAmC,CAAC,CAAC;AACrE,MAAM,yBAAyB,GAAG,wCAAwC,CAAC;AAC3E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAiB;IAClD,CAAC,uBAAuB,EAAE,eAAe,CAAC;IAC1C,CAAC,yBAAyB,EAAE,kBAAkB,CAAC;IAC/C,CAAC,2BAA2B,EAAE,mBAAmB,CAAC;IAClD,CAAC,4BAA4B,EAAE,kBAAkB,CAAC;IAClD,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;IAC9C,CAAC,+BAA+B,EAAE,gBAAgB,CAAC;IACnD,CAAC,qBAAqB,EAAE,WAAW,CAAC;IACpC,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;CAC3C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACxB,OAAO,CAAyB;IAChC,WAAW,CAAS;IACpB,UAAU,CAAU;IACpB,KAAK,CAA0B;IAExC,YAAY,MAAoC;QAC9C,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,sBAAsB,CAAC;YACzD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,qEAAqE;YACrE,wEAAwE;YACxE,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,uBAAuB,CAAC;YACvC,OAAO,EAAE,eAAe;YACxB,UAAU,EAAE,yBAAyB;YACrC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB,CACpB,KAAoC;QAEpC,+BAA+B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAkB;QAC9B,IAAI,IAAI,EAAE,MAAM,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,gBAAgB,GAAG,aAAa,CACpC,OAAO,EACP,gCAAgC,CACjC,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC;YACvC;gBACE,0BAA0B;gBAC1B,aAAa,CAAC,OAAO,EAAE,0BAA0B,CAAC;aACnD;YACD,CAAC,oBAAoB,EAAE,aAAa,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;gBACpC,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAE,CAAC,CAAC;gBAChE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,yBAAyB,CAAC;YAC5C,eAAe,EAAE,IAAI,CAAC,WAAW;YACjC,gBAAgB;YAChB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,WAAW,EAAE,YAAY;YACzB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SAC7C,CAAC,CAAC;QACH,sBAAsB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YACzE,OAAO,IAAI,QAAQ,CACjB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAC1D;gBACE,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,IAAI,GAAG;gBACnE,OAAO,EAAE;oBACP,cAAc,EAAE,MAAM,CAAC,WAAW,IAAI,0BAA0B;iBACjE;aACF,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;YACxE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gBACjC,KAAK,EAAE;oBACL,IAAI;oBACJ,OAAO,EAAE,oCAAoC;iBAC9C;aACF,CAAC,EAAE;gBACF,MAAM;gBACN,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAED,SAAS,+BAA+B,CAAC,KAAa;IACpD,IACE,KAAK,CAAC,MAAM,GAAG,6BAA6B;WACzC,KAAK,CAAC,MAAM,GAAG,6BAA6B;WAC5C,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAkC,EAClC,OAAyC;IAEzC,OAAO,CAAC,eAAe,CAAC,GAAG,CACzB,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,EACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,8BAA8B;KACrC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,IAAY;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAgE;IAEhE,IAAI,MAAM,YAAY,IAAI,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,MAAM,YAAY,cAAc,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IAChD,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;gBACD,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM;YACV,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,KAAc;IAEd,OAAO,OAAO,CACZ,KAAK;WACF,OAAO,KAAK,KAAK,QAAQ;WACzB,MAAM,CAAC,aAAa,IAAI,KAAK;WAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,UAAU,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAI,KAAsD;SACrE,SAAS,CAAC;IACb,MAAM,MAAM,GAAG,QAAQ,EAAE,cAAc,CAAC;IACxC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QACjE,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5D,0BAA0B;IAC1B,qBAAqB;IACrB,oBAAoB;CACZ,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,iCAAiC;CACzB,CAAC,CAAC","sourcesContent":["import {\n  BedrockAgentCoreClient,\n  InvokeAgentRuntimeCommand,\n  type InvokeAgentRuntimeCommandOutput,\n} from '@aws-sdk/client-bedrock-agentcore';\nimport { HttpRequest } from '@smithy/protocol-http';\nimport {\n  AGENTCORE_RUNTIME_SESSION_HEADER,\n  EXECUTION_ASSERTION_HEADER,\n  EXECUTION_HOST_LOCAL_TOKEN_HEADER,\n  MCP_CAPABILITY_HEADER,\n  MODEL_API_KEY_HEADER,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport {\n  DirectHttpExecutionHost,\n  type ExecutionHost,\n  type ExecutionHostConversationTurn,\n} from '../http-sse/index.js';\nimport type {\n  AgentCoreExecutionHostConfig,\n  AgentCoreRuntimeClient,\n} from './types.js';\n\nconst CONTENT_TYPE = 'application/json';\nconst ACCEPT = 'text/event-stream';\nconst MIN_RUNTIME_SESSION_ID_LENGTH = 33;\nconst MAX_RUNTIME_SESSION_ID_LENGTH = 256;\nconst RUNTIME_SESSION_ID_PATTERN = /^[A-Za-z0-9](?:-*[A-Za-z0-9])+$/;\nconst WIRE_BRIDGE_URL = new URL('http://127.0.0.1/agentcore-bridge');\nconst NON_FORWARDED_LOCAL_TOKEN = 'agentcore-bridge-token-never-forwarded';\nconst SERVICE_ERROR_CODES = new Map<string, string>([\n  ['AccessDeniedException', 'access_denied'],\n  ['InternalServerException', 'runtime_internal'],\n  ['ResourceNotFoundException', 'runtime_not_found'],\n  ['RetryableConflictException', 'runtime_conflict'],\n  ['RuntimeClientError', 'runtime_client_error'],\n  ['ServiceQuotaExceededException', 'quota_exceeded'],\n  ['ThrottlingException', 'throttled'],\n  ['ValidationException', 'invalid_request'],\n]);\n\n/**\n * Invokes one compatible Heddle Execution Host through AWS AgentCore while\n * reusing the package's strict request and SSE protocol validation.\n */\nexport class AgentCoreExecutionHost implements ExecutionHost {\n  readonly #client: AgentCoreRuntimeClient;\n  readonly #runtimeArn: string;\n  readonly #qualifier?: string;\n  readonly #wire: DirectHttpExecutionHost;\n\n  constructor(config: AgentCoreExecutionHostConfig) {\n    this.#runtimeArn = config.runtimeArn;\n    this.#qualifier = config.qualifier;\n    this.#client = config.client ?? new BedrockAgentCoreClient({\n      region: config.region,\n      // Invocation settlement is ambiguous after a transport interruption.\n      // Product policy, not the AWS client, decides whether a turn may retry.\n      maxAttempts: 1,\n    });\n    this.#wire = new DirectHttpExecutionHost({\n      baseUrl: WIRE_BRIDGE_URL,\n      localToken: NON_FORWARDED_LOCAL_TOKEN,\n      fetch: (_input, init) => this.#invoke(init),\n    });\n  }\n\n  streamConversationTurn(\n    input: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent> {\n    assertAgentCoreRuntimeSessionId(input.runtimeSessionId);\n    return this.#wire.streamConversationTurn(input);\n  }\n\n  close(): void {\n    this.#client.destroy?.();\n  }\n\n  async #invoke(init?: RequestInit): Promise<Response> {\n    if (init?.method !== 'POST' || typeof init.body !== 'string') {\n      throw new Error('AgentCore wire bridge received an invalid request.');\n    }\n    const headers = new Headers(init.headers);\n    const runtimeSessionId = requireHeader(\n      headers,\n      AGENTCORE_RUNTIME_SESSION_HEADER,\n    );\n    const customHeaders = Object.fromEntries([\n      [\n        EXECUTION_ASSERTION_HEADER,\n        requireHeader(headers, EXECUTION_ASSERTION_HEADER),\n      ],\n      [MODEL_API_KEY_HEADER, requireHeader(headers, MODEL_API_KEY_HEADER)],\n      ...(headers.has(MCP_CAPABILITY_HEADER)\n        ? [[MCP_CAPABILITY_HEADER, headers.get(MCP_CAPABILITY_HEADER)!]]\n        : []),\n    ]);\n    const command = new InvokeAgentRuntimeCommand({\n      agentRuntimeArn: this.#runtimeArn,\n      runtimeSessionId,\n      qualifier: this.#qualifier,\n      contentType: CONTENT_TYPE,\n      accept: ACCEPT,\n      payload: new TextEncoder().encode(init.body),\n    });\n    addSignedCustomHeaders(command, customHeaders);\n    const signal = init.signal ?? undefined;\n\n    try {\n      const output = await this.#client.send(command, { abortSignal: signal });\n      return new Response(\n        output.response ? toReadableStream(output.response) : null,\n        {\n          status: output.statusCode ?? output.$metadata.httpStatusCode ?? 200,\n          headers: {\n            'content-type': output.contentType ?? 'application/octet-stream',\n          },\n        },\n      );\n    } catch (error) {\n      if (signal?.aborted) {\n        throw error;\n      }\n      const status = readServiceStatus(error);\n      if (!status) {\n        throw error;\n      }\n      const code = SERVICE_ERROR_CODES.get(readErrorName(error)) ?? 'unknown';\n      return new Response(JSON.stringify({\n        error: {\n          code,\n          message: 'AgentCore rejected the invocation.',\n        },\n      }), {\n        status,\n        headers: { 'content-type': CONTENT_TYPE },\n      });\n    }\n  }\n}\n\nfunction assertAgentCoreRuntimeSessionId(value: string): void {\n  if (\n    value.length < MIN_RUNTIME_SESSION_ID_LENGTH\n    || value.length > MAX_RUNTIME_SESSION_ID_LENGTH\n    || !RUNTIME_SESSION_ID_PATTERN.test(value)\n  ) {\n    throw new Error('AgentCore runtime session ID is not provider-compatible.');\n  }\n}\n\nfunction addSignedCustomHeaders(\n  command: InvokeAgentRuntimeCommand,\n  headers: Readonly<Record<string, string>>,\n): void {\n  command.middlewareStack.add(\n    (next) => async (args) => {\n      if (!HttpRequest.isInstance(args.request)) {\n        throw new Error('AgentCore invocation did not produce an HTTP request.');\n      }\n      Object.assign(args.request.headers, headers);\n      return await next(args);\n    },\n    {\n      step: 'build',\n      priority: 'low',\n      name: 'heddleAgentCoreCustomHeaders',\n    },\n  );\n}\n\nfunction requireHeader(headers: Headers, name: string): string {\n  const value = headers.get(name);\n  if (!value) {\n    throw new Error('AgentCore wire bridge omitted required authority.');\n  }\n  return value;\n}\n\nfunction toReadableStream(\n  source: NonNullable<InvokeAgentRuntimeCommandOutput['response']>,\n): ReadableStream<Uint8Array> {\n  if (source instanceof Blob) {\n    return source.stream();\n  }\n  if (source instanceof ReadableStream) {\n    return source;\n  }\n  if (!isAsyncIterable(source)) {\n    throw new Error('AgentCore returned an unsupported stream type.');\n  }\n  const iterator = source[Symbol.asyncIterator]();\n  return new ReadableStream<Uint8Array>({\n    async pull(controller) {\n      try {\n        const item = await iterator.next();\n        if (item.done) {\n          controller.close();\n          return;\n        }\n        if (!(item.value instanceof Uint8Array)) {\n          throw new Error('AgentCore returned a non-binary stream chunk.');\n        }\n        controller.enqueue(item.value);\n      } catch (error) {\n        controller.error(error);\n      }\n    },\n    async cancel() {\n      await iterator.return?.();\n    },\n  });\n}\n\nfunction isAsyncIterable(\n  value: unknown,\n): value is AsyncIterable<Uint8Array> {\n  return Boolean(\n    value\n    && typeof value === 'object'\n    && Symbol.asyncIterator in value\n    && typeof value[Symbol.asyncIterator] === 'function',\n  );\n}\n\nfunction readServiceStatus(error: unknown): number | undefined {\n  if (!error || typeof error !== 'object' || !('$metadata' in error)) {\n    return undefined;\n  }\n  const metadata = (error as { $metadata?: { httpStatusCode?: unknown } })\n    .$metadata;\n  const status = metadata?.httpStatusCode;\n  return typeof status === 'number' && status >= 400 && status <= 599\n    ? status\n    : undefined;\n}\n\nfunction readErrorName(error: unknown): string {\n  return error instanceof Error ? error.name : '';\n}\n\nexport const AGENTCORE_FORWARDED_HEADER_NAMES = Object.freeze([\n  EXECUTION_ASSERTION_HEADER,\n  MCP_CAPABILITY_HEADER,\n  MODEL_API_KEY_HEADER,\n] as const);\n\nexport const AGENTCORE_EXCLUDED_HEADER_NAMES = Object.freeze([\n  EXECUTION_HOST_LOCAL_TOKEN_HEADER,\n] as const);\n"]}
+{"version":3,"file":"agentcore-execution-host.js","sourceRoot":"","sources":["../../src/agentcore/agentcore-execution-host.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAC1B,iCAAiC,EACjC,qBAAqB,EACrB,oBAAoB,GAGrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,uBAAuB,GAKxB,MAAM,sBAAsB,CAAC;AAM9B,MAAM,YAAY,GAAG,kBAAkB,CAAC;AACxC,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,6BAA6B,GAAG,EAAE,CAAC;AACzC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAC1C,MAAM,0BAA0B,GAAG,iCAAiC,CAAC;AACrE,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,mCAAmC,CAAC,CAAC;AACrE,MAAM,yBAAyB,GAAG,wCAAwC,CAAC;AAC3E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAiB;IAClD,CAAC,uBAAuB,EAAE,eAAe,CAAC;IAC1C,CAAC,yBAAyB,EAAE,kBAAkB,CAAC;IAC/C,CAAC,2BAA2B,EAAE,mBAAmB,CAAC;IAClD,CAAC,4BAA4B,EAAE,kBAAkB,CAAC;IAClD,CAAC,oBAAoB,EAAE,sBAAsB,CAAC;IAC9C,CAAC,+BAA+B,EAAE,gBAAgB,CAAC;IACnD,CAAC,qBAAqB,EAAE,WAAW,CAAC;IACpC,CAAC,qBAAqB,EAAE,iBAAiB,CAAC;CAC3C,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IAExB,OAAO,CAAyB;IAChC,WAAW,CAAS;IACpB,UAAU,CAAU;IACpB,KAAK,CAA0B;IAExC,YAAY,MAAoC;QAC9C,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,IAAI,IAAI,sBAAsB,CAAC;YACzD,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,qEAAqE;YACrE,wEAAwE;YACxE,WAAW,EAAE,CAAC;SACf,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,IAAI,uBAAuB,CAAC;YACvC,OAAO,EAAE,eAAe;YACxB,UAAU,EAAE,yBAAyB;YACrC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;SAC5C,CAAC,CAAC;IACL,CAAC;IAED,sBAAsB,CACpB,KAAoC;QAEpC,+BAA+B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC;IAED,mBAAmB,CACjB,KAAiC;QAEjC,+BAA+B,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;IAC3B,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAkB;QAC9B,IAAI,IAAI,EAAE,MAAM,KAAK,MAAM,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,gBAAgB,GAAG,aAAa,CACpC,OAAO,EACP,gCAAgC,CACjC,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,CAAC,WAAW,CAAC;YACvC;gBACE,0BAA0B;gBAC1B,aAAa,CAAC,OAAO,EAAE,0BAA0B,CAAC;aACnD;YACD,CAAC,oBAAoB,EAAE,aAAa,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;YACpE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;gBACpC,CAAC,CAAC,CAAC,CAAC,qBAAqB,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAE,CAAC,CAAC;gBAChE,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,yBAAyB,CAAC;YAC5C,eAAe,EAAE,IAAI,CAAC,WAAW;YACjC,gBAAgB;YAChB,SAAS,EAAE,IAAI,CAAC,UAAU;YAC1B,WAAW,EAAE,YAAY;YACzB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;SAC7C,CAAC,CAAC;QACH,sBAAsB,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC;YACzE,OAAO,IAAI,QAAQ,CACjB,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,EAC1D;gBACE,MAAM,EAAE,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,IAAI,GAAG;gBACnE,OAAO,EAAE;oBACP,cAAc,EAAE,MAAM,CAAC,WAAW,IAAI,0BAA0B;iBACjE;aACF,CACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACxC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,IAAI,GAAG,mBAAmB,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC;YACxE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gBACjC,KAAK,EAAE;oBACL,IAAI;oBACJ,OAAO,EAAE,oCAAoC;iBAC9C;aACF,CAAC,EAAE;gBACF,MAAM;gBACN,OAAO,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE;aAC1C,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF;AAED,SAAS,+BAA+B,CAAC,KAAa;IACpD,IACE,KAAK,CAAC,MAAM,GAAG,6BAA6B;WACzC,KAAK,CAAC,MAAM,GAAG,6BAA6B;WAC5C,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,EAC1C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,OAAkC,EAClC,OAAyC;IAEzC,OAAO,CAAC,eAAe,CAAC,GAAG,CACzB,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACvB,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7C,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC,EACD;QACE,IAAI,EAAE,OAAO;QACb,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,8BAA8B;KACrC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,IAAY;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAgE;IAEhE,IAAI,MAAM,YAAY,IAAI,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;IACD,IAAI,MAAM,YAAY,cAAc,EAAE,CAAC;QACrC,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IAChD,OAAO,IAAI,cAAc,CAAa;QACpC,KAAK,CAAC,IAAI,CAAC,UAAU;YACnB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,UAAU,CAAC,KAAK,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,UAAU,CAAC,EAAE,CAAC;oBACxC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;gBACnE,CAAC;gBACD,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,KAAK,CAAC,MAAM;YACV,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5B,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CACtB,KAAc;IAEd,OAAO,OAAO,CACZ,KAAK;WACF,OAAO,KAAK,KAAK,QAAQ;WACzB,MAAM,CAAC,aAAa,IAAI,KAAK;WAC7B,OAAO,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,UAAU,CACrD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,KAAK,CAAC,EAAE,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,QAAQ,GAAI,KAAsD;SACrE,SAAS,CAAC;IACb,MAAM,MAAM,GAAG,QAAQ,EAAE,cAAc,CAAC;IACxC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QACjE,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,CAAC,MAAM,gCAAgC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC5D,0BAA0B;IAC1B,qBAAqB;IACrB,oBAAoB;CACZ,CAAC,CAAC;AAEZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3D,iCAAiC;CACzB,CAAC,CAAC","sourcesContent":["import {\n  BedrockAgentCoreClient,\n  InvokeAgentRuntimeCommand,\n  type InvokeAgentRuntimeCommandOutput,\n} from '@aws-sdk/client-bedrock-agentcore';\nimport { HttpRequest } from '@smithy/protocol-http';\nimport {\n  AGENTCORE_RUNTIME_SESSION_HEADER,\n  EXECUTION_ASSERTION_HEADER,\n  EXECUTION_HOST_LOCAL_TOKEN_HEADER,\n  MCP_CAPABILITY_HEADER,\n  MODEL_API_KEY_HEADER,\n  type ExecutionHostHeartbeatStreamEvent,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport {\n  DirectHttpExecutionHost,\n  type ExecutionHost,\n  type ExecutionHostConversationTurn,\n  type ExecutionHostHeartbeatTask,\n  type HeartbeatExecutionHost,\n} from '../http-sse/index.js';\nimport type {\n  AgentCoreExecutionHostConfig,\n  AgentCoreRuntimeClient,\n} from './types.js';\n\nconst CONTENT_TYPE = 'application/json';\nconst ACCEPT = 'text/event-stream';\nconst MIN_RUNTIME_SESSION_ID_LENGTH = 33;\nconst MAX_RUNTIME_SESSION_ID_LENGTH = 256;\nconst RUNTIME_SESSION_ID_PATTERN = /^[A-Za-z0-9](?:-*[A-Za-z0-9])+$/;\nconst WIRE_BRIDGE_URL = new URL('http://127.0.0.1/agentcore-bridge');\nconst NON_FORWARDED_LOCAL_TOKEN = 'agentcore-bridge-token-never-forwarded';\nconst SERVICE_ERROR_CODES = new Map<string, string>([\n  ['AccessDeniedException', 'access_denied'],\n  ['InternalServerException', 'runtime_internal'],\n  ['ResourceNotFoundException', 'runtime_not_found'],\n  ['RetryableConflictException', 'runtime_conflict'],\n  ['RuntimeClientError', 'runtime_client_error'],\n  ['ServiceQuotaExceededException', 'quota_exceeded'],\n  ['ThrottlingException', 'throttled'],\n  ['ValidationException', 'invalid_request'],\n]);\n\n/**\n * Invokes one compatible Heddle Execution Host through AWS AgentCore while\n * reusing the package's strict request and SSE protocol validation.\n */\nexport class AgentCoreExecutionHost\nimplements ExecutionHost, HeartbeatExecutionHost {\n  readonly #client: AgentCoreRuntimeClient;\n  readonly #runtimeArn: string;\n  readonly #qualifier?: string;\n  readonly #wire: DirectHttpExecutionHost;\n\n  constructor(config: AgentCoreExecutionHostConfig) {\n    this.#runtimeArn = config.runtimeArn;\n    this.#qualifier = config.qualifier;\n    this.#client = config.client ?? new BedrockAgentCoreClient({\n      region: config.region,\n      // Invocation settlement is ambiguous after a transport interruption.\n      // Product policy, not the AWS client, decides whether a turn may retry.\n      maxAttempts: 1,\n    });\n    this.#wire = new DirectHttpExecutionHost({\n      baseUrl: WIRE_BRIDGE_URL,\n      localToken: NON_FORWARDED_LOCAL_TOKEN,\n      fetch: (_input, init) => this.#invoke(init),\n    });\n  }\n\n  streamConversationTurn(\n    input: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent> {\n    assertAgentCoreRuntimeSessionId(input.runtimeSessionId);\n    return this.#wire.streamConversationTurn(input);\n  }\n\n  streamHeartbeatTask(\n    input: ExecutionHostHeartbeatTask,\n  ): AsyncIterable<ExecutionHostHeartbeatStreamEvent> {\n    assertAgentCoreRuntimeSessionId(input.runtimeSessionId);\n    return this.#wire.streamHeartbeatTask(input);\n  }\n\n  close(): void {\n    this.#client.destroy?.();\n  }\n\n  async #invoke(init?: RequestInit): Promise<Response> {\n    if (init?.method !== 'POST' || typeof init.body !== 'string') {\n      throw new Error('AgentCore wire bridge received an invalid request.');\n    }\n    const headers = new Headers(init.headers);\n    const runtimeSessionId = requireHeader(\n      headers,\n      AGENTCORE_RUNTIME_SESSION_HEADER,\n    );\n    const customHeaders = Object.fromEntries([\n      [\n        EXECUTION_ASSERTION_HEADER,\n        requireHeader(headers, EXECUTION_ASSERTION_HEADER),\n      ],\n      [MODEL_API_KEY_HEADER, requireHeader(headers, MODEL_API_KEY_HEADER)],\n      ...(headers.has(MCP_CAPABILITY_HEADER)\n        ? [[MCP_CAPABILITY_HEADER, headers.get(MCP_CAPABILITY_HEADER)!]]\n        : []),\n    ]);\n    const command = new InvokeAgentRuntimeCommand({\n      agentRuntimeArn: this.#runtimeArn,\n      runtimeSessionId,\n      qualifier: this.#qualifier,\n      contentType: CONTENT_TYPE,\n      accept: ACCEPT,\n      payload: new TextEncoder().encode(init.body),\n    });\n    addSignedCustomHeaders(command, customHeaders);\n    const signal = init.signal ?? undefined;\n\n    try {\n      const output = await this.#client.send(command, { abortSignal: signal });\n      return new Response(\n        output.response ? toReadableStream(output.response) : null,\n        {\n          status: output.statusCode ?? output.$metadata.httpStatusCode ?? 200,\n          headers: {\n            'content-type': output.contentType ?? 'application/octet-stream',\n          },\n        },\n      );\n    } catch (error) {\n      if (signal?.aborted) {\n        throw error;\n      }\n      const status = readServiceStatus(error);\n      if (!status) {\n        throw error;\n      }\n      const code = SERVICE_ERROR_CODES.get(readErrorName(error)) ?? 'unknown';\n      return new Response(JSON.stringify({\n        error: {\n          code,\n          message: 'AgentCore rejected the invocation.',\n        },\n      }), {\n        status,\n        headers: { 'content-type': CONTENT_TYPE },\n      });\n    }\n  }\n}\n\nfunction assertAgentCoreRuntimeSessionId(value: string): void {\n  if (\n    value.length < MIN_RUNTIME_SESSION_ID_LENGTH\n    || value.length > MAX_RUNTIME_SESSION_ID_LENGTH\n    || !RUNTIME_SESSION_ID_PATTERN.test(value)\n  ) {\n    throw new Error('AgentCore runtime session ID is not provider-compatible.');\n  }\n}\n\nfunction addSignedCustomHeaders(\n  command: InvokeAgentRuntimeCommand,\n  headers: Readonly<Record<string, string>>,\n): void {\n  command.middlewareStack.add(\n    (next) => async (args) => {\n      if (!HttpRequest.isInstance(args.request)) {\n        throw new Error('AgentCore invocation did not produce an HTTP request.');\n      }\n      Object.assign(args.request.headers, headers);\n      return await next(args);\n    },\n    {\n      step: 'build',\n      priority: 'low',\n      name: 'heddleAgentCoreCustomHeaders',\n    },\n  );\n}\n\nfunction requireHeader(headers: Headers, name: string): string {\n  const value = headers.get(name);\n  if (!value) {\n    throw new Error('AgentCore wire bridge omitted required authority.');\n  }\n  return value;\n}\n\nfunction toReadableStream(\n  source: NonNullable<InvokeAgentRuntimeCommandOutput['response']>,\n): ReadableStream<Uint8Array> {\n  if (source instanceof Blob) {\n    return source.stream();\n  }\n  if (source instanceof ReadableStream) {\n    return source;\n  }\n  if (!isAsyncIterable(source)) {\n    throw new Error('AgentCore returned an unsupported stream type.');\n  }\n  const iterator = source[Symbol.asyncIterator]();\n  return new ReadableStream<Uint8Array>({\n    async pull(controller) {\n      try {\n        const item = await iterator.next();\n        if (item.done) {\n          controller.close();\n          return;\n        }\n        if (!(item.value instanceof Uint8Array)) {\n          throw new Error('AgentCore returned a non-binary stream chunk.');\n        }\n        controller.enqueue(item.value);\n      } catch (error) {\n        controller.error(error);\n      }\n    },\n    async cancel() {\n      await iterator.return?.();\n    },\n  });\n}\n\nfunction isAsyncIterable(\n  value: unknown,\n): value is AsyncIterable<Uint8Array> {\n  return Boolean(\n    value\n    && typeof value === 'object'\n    && Symbol.asyncIterator in value\n    && typeof value[Symbol.asyncIterator] === 'function',\n  );\n}\n\nfunction readServiceStatus(error: unknown): number | undefined {\n  if (!error || typeof error !== 'object' || !('$metadata' in error)) {\n    return undefined;\n  }\n  const metadata = (error as { $metadata?: { httpStatusCode?: unknown } })\n    .$metadata;\n  const status = metadata?.httpStatusCode;\n  return typeof status === 'number' && status >= 400 && status <= 599\n    ? status\n    : undefined;\n}\n\nfunction readErrorName(error: unknown): string {\n  return error instanceof Error ? error.name : '';\n}\n\nexport const AGENTCORE_FORWARDED_HEADER_NAMES = Object.freeze([\n  EXECUTION_ASSERTION_HEADER,\n  MCP_CAPABILITY_HEADER,\n  MODEL_API_KEY_HEADER,\n] as const);\n\nexport const AGENTCORE_EXCLUDED_HEADER_NAMES = Object.freeze([\n  EXECUTION_HOST_LOCAL_TOKEN_HEADER,\n] as const);\n"]}

package/dist/authority/index.d.ts

@@ -1,3 +1,3 @@
 export { JoseExecutionAuthority } from './jose-execution-authority.js';
-export type { ExecutionAuthority, ExecutionAuthorityConfig, ExecutionAuthorityIssueInput, ExecutionAuthorityKeyPair, ExecutionAuthorityMcpConfig, IssuedExecutionAuthority, IssuedExecutionAuthorityMetadata, IssuedMcpCapabilityMetadata, JoseExecutionAuthorityOptions, } from './types.js';
+export type { ExecutionAuthority, ExecutionAuthorityConfig, ExecutionAuthorityIssuer, ExecutionAuthorityIssueInput, ExecutionAuthorityKeyPair, ExecutionAuthorityMcpConfig, IssuedExecutionAuthority, IssuedExecutionAuthorityMetadata, IssuedMcpCapabilityMetadata, JoseExecutionAuthorityOptions, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/authority/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authority/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,gCAAgC,EAChC,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authority/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,gCAAgC,EAChC,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,YAAY,CAAC"}

package/dist/authority/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authority/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC","sourcesContent":["export { JoseExecutionAuthority } from './jose-execution-authority.js';\nexport type {\n  ExecutionAuthority,\n  ExecutionAuthorityConfig,\n  ExecutionAuthorityIssueInput,\n  ExecutionAuthorityKeyPair,\n  ExecutionAuthorityMcpConfig,\n  IssuedExecutionAuthority,\n  IssuedExecutionAuthorityMetadata,\n  IssuedMcpCapabilityMetadata,\n  JoseExecutionAuthorityOptions,\n} from './types.js';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authority/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC","sourcesContent":["export { JoseExecutionAuthority } from './jose-execution-authority.js';\nexport type {\n  ExecutionAuthority,\n  ExecutionAuthorityConfig,\n  ExecutionAuthorityIssuer,\n  ExecutionAuthorityIssueInput,\n  ExecutionAuthorityKeyPair,\n  ExecutionAuthorityMcpConfig,\n  IssuedExecutionAuthority,\n  IssuedExecutionAuthorityMetadata,\n  IssuedMcpCapabilityMetadata,\n  JoseExecutionAuthorityOptions,\n} from './types.js';\n"]}

package/dist/authority/jose-execution-authority.js

@@ -1,7 +1,7 @@
 import { randomUUID } from 'node:crypto';
 import { CompactSign, SignJWT, compactVerify, exportJWK, } from 'jose';
 import { z } from 'zod';
-import { CONVERSATION_TURN_WORKFLOW, EXECUTION_ASSERTION_TYPE, EXECUTION_CONTRACT_VERSION, ExecutionScopeSchema, JwtAudienceSchema, JwtIssuerSchema, MCP_CAPABILITY_TYPE, McpAllowedToolsSchema, McpServerIdSchema, OpaqueIdSchema, RuntimeSessionIdSchema, } from '../contracts/index.js';
+import { EXECUTION_ASSERTION_TYPE, EXECUTION_CONTRACT_VERSION, ExecutionScopeSchema, HostedExecutionWorkflowSchema, JwtAudienceSchema, JwtIssuerSchema, MCP_CAPABILITY_TYPE, McpAllowedToolsSchema, McpServerIdSchema, OpaqueIdSchema, RuntimeSessionIdSchema, } from '../contracts/index.js';
 const SIGNING_ALGORITHM = 'ES256';
 const ExecutionAuthorityMcpConfigSchema = z.object({
     audience: JwtAudienceSchema,
@@ -39,7 +39,7 @@ const ExecutionAuthorityIssueInputSchema = z.object({
     scope: ExecutionIssueScopeSchema,
     runtimeSessionId: RuntimeSessionIdSchema,
     invocationId: OpaqueIdSchema,
-    workflow: z.literal(CONVERSATION_TURN_WORKFLOW),
+    workflow: HostedExecutionWorkflowSchema,
     mcp: z.object({
         allowedTools: McpAllowedToolsSchema,
     }).strict().optional(),

package/dist/authority/jose-execution-authority.js.map

@@ -1 +1 @@
-{"version":3,"file":"jose-execution-authority.js","sourceRoot":"","sources":["../../src/authority/jose-execution-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,WAAW,EACX,OAAO,EACP,aAAa,EACb,SAAS,GAIV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,0BAA0B,EAC1B,wBAAwB,EACxB,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAW/B,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,iBAAiB;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,eAAe;IACvB,SAAS,EAAE,cAAc;IACzB,iBAAiB,EAAE,iBAAiB;IACpC,KAAK,EAAE,cAAc;IACrB,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IACzD,GAAG,EAAE,iCAAiC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;YACzB,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACvD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;YAC3B,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACjF,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,yBAAyB;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,YAAY,EAAE,qBAAqB;KACpC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACpB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACxC,CAAC,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;IAC5C,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACpE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACxB,OAAO,CAAiD;IACxD,WAAW,CAAY;IACvB,UAAU,CAAgB;IAC1B,IAAI,CAAa;IACjB,mBAAmB,CAAe;IAE3C,YACE,MAAgC,EAChC,GAA8C,EAC9C,OAAsC;QAEtC,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,IAAI,UAAU,CAAC;IACtE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,MAAgC,EAChC,OAAkC,EAClC,UAAyC,EAAE;QAE3C,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,2BAA2B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,IAAI,sBAAsB,CAC/B,MAAM,EACN;YACE,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;SAC9C,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,KAAmC;QAEnC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,kBAAkB,GAAG,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACvE,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAC3D,SAAS,EACT,QAAQ,EACR,kBAAkB,CACnB,CAAC;QAEF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG;YAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAC9B,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,EACpC,QAAQ,CACT;YACD,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,IAAI,iCAAiC,CAC1C,kBAAkB,EAClB,GAAG,EAAE,SAAS,EACd,oBAAoB,CAAC;YACnB,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,GAAG,SAAS,CAAC,KAAK;aACnB;YACD,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;YAClC,kBAAkB,EAAE,cAAc,CAAC,kBAAkB,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,UAAU;QACR,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,uBAAuB,CACrB,KAAyD,EACzD,QAAgB,EAChB,SAAiB;QAEjB,OAAO,IAAI,OAAO,CAAC;YACjB,eAAe,EAAE,0BAA0B;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,wBAAwB;SAC9B,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aAC9B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;aAC3C,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;aAC1B,WAAW,CAAC,QAAQ,CAAC;aACrB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,KAEC,EACD,QAAgB;QAKhB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAI,CAAC;QACpC,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACtE,IAAI,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAC;YAClC,eAAe,EAAE,0BAA0B;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;SAC1C,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,mBAAmB;SACzB,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aAC9B,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC/B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjC,MAAM,CAAC,YAAY,CAAC;aACpB,WAAW,CAAC,QAAQ,CAAC;aACrB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE1B,OAAO;YACL,SAAS;YACT,QAAQ,EAAE;gBACR,YAAY;gBACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACxD,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;aACrC;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,iCAAiC;IAC5B,QAAQ,CAAmC;IAC3C,mBAAmB,CAAS;IAC5B,cAAc,CAAqB;IAE5C,YACE,kBAA0B,EAC1B,aAAiC,EACjC,QAA0C;QAE1C,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,GAAQ,EAAE,KAAa;IAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,GAAG,EAAE,iBAAiB;QACtB,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK;KACX,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAc;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS;WAClC,SAAS,CAAC,IAAI,KAAK,OAAO;WAC1B,SAAS,CAAC,UAAU,KAAK,OAAO;WAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAc;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,QAAQ;WACjC,SAAS,CAAC,IAAI,KAAK,OAAO;WAC1B,SAAS,CAAC,UAAU,KAAK,OAAO;WAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAkC;IAElC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,WAAW,CACjC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CACxE;aACE,kBAAkB,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;aAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5B,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;YAC5C,UAAU,EAAE,CAAC,iBAAiB,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAW;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB;IAC1C,OAAO,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAsD;IAEtD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA0C;IAE1C,MAAM,KAAK,GAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG;QACtB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACd,GAAG,QAAQ,CAAC,GAAG;YACf,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;SAC5D,CAAC;QACF,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import { randomUUID } from 'node:crypto';\nimport {\n  CompactSign,\n  SignJWT,\n  compactVerify,\n  exportJWK,\n  type CryptoKey,\n  type JWK,\n  type JSONWebKeySet,\n} from 'jose';\nimport { z } from 'zod';\nimport {\n  CONVERSATION_TURN_WORKFLOW,\n  EXECUTION_ASSERTION_TYPE,\n  EXECUTION_CONTRACT_VERSION,\n  ExecutionScopeSchema,\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  MCP_CAPABILITY_TYPE,\n  McpAllowedToolsSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n  type ExecutionScope,\n} from '../contracts/index.js';\nimport type {\n  ExecutionAuthority,\n  ExecutionAuthorityConfig,\n  ExecutionAuthorityIssueInput,\n  ExecutionAuthorityKeyPair,\n  IssuedExecutionAuthority,\n  IssuedExecutionAuthorityMetadata,\n  JoseExecutionAuthorityOptions,\n} from './types.js';\n\nconst SIGNING_ALGORITHM = 'ES256';\nconst ExecutionAuthorityMcpConfigSchema = z.object({\n  audience: JwtAudienceSchema,\n  serverId: McpServerIdSchema,\n  ttlSeconds: z.number().int().min(1).max(15 * 60),\n}).strict();\nconst ExecutionAuthorityConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  adopterId: OpaqueIdSchema,\n  executionAudience: JwtAudienceSchema,\n  keyId: OpaqueIdSchema,\n  executionTtlSeconds: z.number().int().min(1).max(15 * 60),\n  mcp: ExecutionAuthorityMcpConfigSchema.optional(),\n}).strict().superRefine((config, context) => {\n  if (!config.mcp) {\n    return;\n  }\n  if (config.executionAudience === config.mcp.audience) {\n    context.addIssue({\n      code: 'custom',\n      path: ['mcp', 'audience'],\n      message: 'must be distinct from the execution audience',\n    });\n  }\n  if (config.mcp.ttlSeconds < config.executionTtlSeconds) {\n    context.addIssue({\n      code: 'custom',\n      path: ['mcp', 'ttlSeconds'],\n      message: 'must not expire before execution admission authority',\n    });\n  }\n});\nconst ExecutionIssueScopeSchema = ExecutionScopeSchema.omit({ adopterId: true });\nconst ExecutionAuthorityIssueInputSchema = z.object({\n  scope: ExecutionIssueScopeSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: OpaqueIdSchema,\n  workflow: z.literal(CONVERSATION_TURN_WORKFLOW),\n  mcp: z.object({\n    allowedTools: McpAllowedToolsSchema,\n  }).strict().optional(),\n}).strict();\nconst PublicP256JwkSchema = z.object({\n  kty: z.literal('EC'),\n  crv: z.literal('P-256'),\n  x: z.string().regex(/^[A-Za-z0-9_-]+$/),\n  y: z.string().regex(/^[A-Za-z0-9_-]+$/),\n}).passthrough().superRefine((jwk, context) => {\n  const privateFields = ['d', 'p', 'q', 'dp', 'dq', 'qi', 'oth', 'k'];\n  if (privateFields.some((field) => field in jwk)) {\n    context.addIssue({\n      code: 'custom',\n      message: 'must not contain private key material',\n    });\n  }\n});\n\n/**\n * ES256 reference adapter for issuing one invocation's admission assertion and\n * optional product-MCP capability.\n */\nexport class JoseExecutionAuthority implements ExecutionAuthority {\n  readonly #config: z.infer<typeof ExecutionAuthorityConfigSchema>;\n  readonly #privateKey: CryptoKey;\n  readonly #publicJwk: Readonly<JWK>;\n  readonly #now: () => Date;\n  readonly #createCapabilityId: () => string;\n\n  private constructor(\n    config: ExecutionAuthorityConfig,\n    key: { privateKey: CryptoKey; publicJwk: JWK },\n    options: JoseExecutionAuthorityOptions,\n  ) {\n    this.#config = deepFreezeConfig(ExecutionAuthorityConfigSchema.parse(config));\n    assertPrivateSigningKey(key.privateKey);\n    this.#privateKey = key.privateKey;\n    this.#publicJwk = projectPublicJwk(key.publicJwk, this.#config.keyId);\n    this.#now = options.now ?? (() => new Date());\n    this.#createCapabilityId = options.createCapabilityId ?? randomUUID;\n  }\n\n  static async create(\n    config: ExecutionAuthorityConfig,\n    keyPair: ExecutionAuthorityKeyPair,\n    options: JoseExecutionAuthorityOptions = {},\n  ): Promise<JoseExecutionAuthority> {\n    assertPrivateSigningKey(keyPair.privateKey);\n    assertPublicVerificationKey(keyPair.publicKey);\n    await assertMatchingKeyPair(keyPair);\n    return new JoseExecutionAuthority(\n      config,\n      {\n        privateKey: keyPair.privateKey,\n        publicJwk: await exportJWK(keyPair.publicKey),\n      },\n      options,\n    );\n  }\n\n  async issue(\n    input: ExecutionAuthorityIssueInput,\n  ): Promise<IssuedExecutionAuthority> {\n    const authority = ExecutionAuthorityIssueInputSchema.parse(input);\n    if (authority.mcp && !this.#config.mcp) {\n      throw new Error(\n        'Execution authority cannot issue an MCP capability without MCP deployment configuration.',\n      );\n    }\n\n    const issuedAt = toEpochSeconds(this.#now());\n    const executionExpiresAt = issuedAt + this.#config.executionTtlSeconds;\n    const executionAssertion = await this.#signExecutionAssertion(\n      authority,\n      issuedAt,\n      executionExpiresAt,\n    );\n\n    const mcp = authority.mcp && this.#config.mcp\n      ? await this.#issueMcpCapability(\n        { ...authority, mcp: authority.mcp },\n        issuedAt,\n      )\n      : undefined;\n\n    return new ProtectedIssuedExecutionAuthority(\n      executionAssertion,\n      mcp?.assertion,\n      freezeIssuedMetadata({\n        scope: {\n          adopterId: this.#config.adopterId,\n          ...authority.scope,\n        },\n        runtimeSessionId: authority.runtimeSessionId,\n        invocationId: authority.invocationId,\n        workflow: authority.workflow,\n        issuedAt: toIsoTimestamp(issuedAt),\n        executionExpiresAt: toIsoTimestamp(executionExpiresAt),\n        ...(mcp ? { mcp: mcp.metadata } : {}),\n      }),\n    );\n  }\n\n  publicJwks(): JSONWebKeySet {\n    return { keys: [{ ...this.#publicJwk }] };\n  }\n\n  #signExecutionAssertion(\n    input: z.infer<typeof ExecutionAuthorityIssueInputSchema>,\n    issuedAt: number,\n    expiresAt: number,\n  ): Promise<string> {\n    return new SignJWT({\n      contractVersion: EXECUTION_CONTRACT_VERSION,\n      adopterId: this.#config.adopterId,\n      tenantId: input.scope.tenantId,\n      productSessionId: input.scope.productSessionId,\n      runtimeSessionId: input.runtimeSessionId,\n      workflow: input.workflow,\n    })\n      .setProtectedHeader({\n        alg: SIGNING_ALGORITHM,\n        kid: this.#config.keyId,\n        typ: EXECUTION_ASSERTION_TYPE,\n      })\n      .setIssuer(this.#config.issuer)\n      .setAudience(this.#config.executionAudience)\n      .setSubject(input.scope.subjectId)\n      .setJti(input.invocationId)\n      .setIssuedAt(issuedAt)\n      .setExpirationTime(expiresAt)\n      .sign(this.#privateKey);\n  }\n\n  async #issueMcpCapability(\n    input: z.infer<typeof ExecutionAuthorityIssueInputSchema> & {\n      mcp: { allowedTools: string[] };\n    },\n    issuedAt: number,\n  ): Promise<{\n    assertion: string;\n    metadata: NonNullable<IssuedExecutionAuthorityMetadata['mcp']>;\n  }> {\n    const mcpConfig = this.#config.mcp!;\n    const capabilityId = OpaqueIdSchema.parse(this.#createCapabilityId());\n    if (capabilityId === input.invocationId) {\n      throw new Error(\n        'MCP capability identity must be distinct from the invocation identity.',\n      );\n    }\n    const expiresAt = issuedAt + mcpConfig.ttlSeconds;\n    const assertion = await new SignJWT({\n      contractVersion: EXECUTION_CONTRACT_VERSION,\n      adopterId: this.#config.adopterId,\n      tenantId: input.scope.tenantId,\n      productSessionId: input.scope.productSessionId,\n      runtimeSessionId: input.runtimeSessionId,\n      invocationId: input.invocationId,\n      workflow: input.workflow,\n      serverId: mcpConfig.serverId,\n      allowedTools: [...input.mcp.allowedTools],\n    })\n      .setProtectedHeader({\n        alg: SIGNING_ALGORITHM,\n        kid: this.#config.keyId,\n        typ: MCP_CAPABILITY_TYPE,\n      })\n      .setIssuer(this.#config.issuer)\n      .setAudience(mcpConfig.audience)\n      .setSubject(input.scope.subjectId)\n      .setJti(capabilityId)\n      .setIssuedAt(issuedAt)\n      .setExpirationTime(expiresAt)\n      .sign(this.#privateKey);\n\n    return {\n      assertion,\n      metadata: {\n        capabilityId,\n        serverId: mcpConfig.serverId,\n        allowedTools: Object.freeze([...input.mcp.allowedTools]),\n        expiresAt: toIsoTimestamp(expiresAt),\n      },\n    };\n  }\n}\n\nclass ProtectedIssuedExecutionAuthority implements IssuedExecutionAuthority {\n  readonly metadata: IssuedExecutionAuthorityMetadata;\n  readonly #executionAssertion: string;\n  readonly #mcpCapability: string | undefined;\n\n  constructor(\n    executionAssertion: string,\n    mcpCapability: string | undefined,\n    metadata: IssuedExecutionAuthorityMetadata,\n  ) {\n    this.#executionAssertion = executionAssertion;\n    this.#mcpCapability = mcpCapability;\n    this.metadata = metadata;\n  }\n\n  executionAssertion(): string {\n    return this.#executionAssertion;\n  }\n\n  mcpCapability(): string | undefined {\n    return this.#mcpCapability;\n  }\n\n  toJSON(): IssuedExecutionAuthorityMetadata {\n    return this.metadata;\n  }\n}\n\nfunction projectPublicJwk(jwk: JWK, keyId: string): Readonly<JWK> {\n  const parsed = PublicP256JwkSchema.parse(jwk);\n  return Object.freeze({\n    kty: parsed.kty,\n    crv: parsed.crv,\n    x: parsed.x,\n    y: parsed.y,\n    alg: SIGNING_ALGORITHM,\n    kid: keyId,\n    use: 'sig',\n  });\n}\n\nfunction assertPrivateSigningKey(key: CryptoKey): void {\n  const algorithm = key.algorithm as { name: string; namedCurve?: string };\n  const accepted = key.type === 'private'\n    && algorithm.name === 'ECDSA'\n    && algorithm.namedCurve === 'P-256'\n    && key.usages.includes('sign');\n  if (!accepted) {\n    throw new Error(\n      'Execution authority requires an ES256 private signing key.',\n    );\n  }\n}\n\nfunction assertPublicVerificationKey(key: CryptoKey): void {\n  const algorithm = key.algorithm as { name: string; namedCurve?: string };\n  const accepted = key.type === 'public'\n    && algorithm.name === 'ECDSA'\n    && algorithm.namedCurve === 'P-256'\n    && key.usages.includes('verify');\n  if (!accepted) {\n    throw new Error(\n      'Execution authority requires an ES256 public verification key.',\n    );\n  }\n}\n\nasync function assertMatchingKeyPair(\n  keyPair: ExecutionAuthorityKeyPair,\n): Promise<void> {\n  try {\n    const probe = await new CompactSign(\n      new TextEncoder().encode('heddle-adopter-execution-authority-key-pair'),\n    )\n      .setProtectedHeader({ alg: SIGNING_ALGORITHM })\n      .sign(keyPair.privateKey);\n    await compactVerify(probe, keyPair.publicKey, {\n      algorithms: [SIGNING_ALGORITHM],\n    });\n  } catch {\n    throw new Error('Execution authority signing keys do not match.');\n  }\n}\n\nfunction toEpochSeconds(value: Date): number {\n  const seconds = Math.floor(value.getTime() / 1_000);\n  if (!Number.isSafeInteger(seconds) || seconds < 0) {\n    throw new Error('Execution authority could not resolve a valid issue time.');\n  }\n  return seconds;\n}\n\nfunction toIsoTimestamp(epochSeconds: number): string {\n  return new Date(epochSeconds * 1_000).toISOString();\n}\n\nfunction deepFreezeConfig(\n  config: z.infer<typeof ExecutionAuthorityConfigSchema>,\n): z.infer<typeof ExecutionAuthorityConfigSchema> {\n  const mcp = config.mcp ? Object.freeze({ ...config.mcp }) : undefined;\n  return Object.freeze({ ...config, ...(mcp ? { mcp } : {}) });\n}\n\nfunction freezeIssuedMetadata(\n  metadata: IssuedExecutionAuthorityMetadata,\n): IssuedExecutionAuthorityMetadata {\n  const scope: ExecutionScope = Object.freeze({ ...metadata.scope });\n  const mcp = metadata.mcp\n    ? Object.freeze({\n      ...metadata.mcp,\n      allowedTools: Object.freeze([...metadata.mcp.allowedTools]),\n    })\n    : undefined;\n  return Object.freeze({ ...metadata, scope, ...(mcp ? { mcp } : {}) });\n}\n"]}
+{"version":3,"file":"jose-execution-authority.js","sourceRoot":"","sources":["../../src/authority/jose-execution-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,WAAW,EACX,OAAO,EACP,aAAa,EACb,SAAS,GAIV,MAAM,MAAM,CAAC;AACd,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,0BAA0B,EAC1B,oBAAoB,EACpB,6BAA6B,EAC7B,iBAAiB,EACjB,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAW/B,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAClC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,iBAAiB;IAC3B,QAAQ,EAAE,iBAAiB;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,eAAe;IACvB,SAAS,EAAE,cAAc;IACzB,iBAAiB,EAAE,iBAAiB;IACpC,KAAK,EAAE,cAAc;IACrB,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IACzD,GAAG,EAAE,iCAAiC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAChB,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,CAAC;YACzB,OAAO,EAAE,8CAA8C;SACxD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACvD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,KAAK,EAAE,YAAY,CAAC;YAC3B,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AACH,MAAM,yBAAyB,GAAG,oBAAoB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACjF,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,KAAK,EAAE,yBAAyB;IAChC,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,6BAA6B;IACvC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,YAAY,EAAE,qBAAqB;KACpC,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACpB,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACvB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACvC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACxC,CAAC,CAAC,WAAW,EAAE,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE;IAC5C,MAAM,aAAa,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACpE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC;QAChD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uCAAuC;SACjD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,OAAO,sBAAsB;IACxB,OAAO,CAAiD;IACxD,WAAW,CAAY;IACvB,UAAU,CAAgB;IAC1B,IAAI,CAAa;IACjB,mBAAmB,CAAe;IAE3C,YACE,MAAgC,EAChC,GAA8C,EAC9C,OAAsC;QAEtC,IAAI,CAAC,OAAO,GAAG,gBAAgB,CAAC,8BAA8B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9E,uBAAuB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC9C,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,IAAI,UAAU,CAAC;IACtE,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,MAAM,CACjB,MAAgC,EAChC,OAAkC,EAClC,UAAyC,EAAE;QAE3C,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5C,2BAA2B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,qBAAqB,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO,IAAI,sBAAsB,CAC/B,MAAM,EACN;YACE,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,SAAS,EAAE,MAAM,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;SAC9C,EACD,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,KAAmC;QAEnC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC7C,MAAM,kBAAkB,GAAG,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACvE,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAC3D,SAAS,EACT,QAAQ,EACR,kBAAkB,CACnB,CAAC;QAEF,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG;YAC3C,CAAC,CAAC,MAAM,IAAI,CAAC,mBAAmB,CAC9B,EAAE,GAAG,SAAS,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,EACpC,QAAQ,CACT;YACD,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO,IAAI,iCAAiC,CAC1C,kBAAkB,EAClB,GAAG,EAAE,SAAS,EACd,oBAAoB,CAAC;YACnB,KAAK,EAAE;gBACL,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;gBACjC,GAAG,SAAS,CAAC,KAAK;aACnB;YACD,gBAAgB,EAAE,SAAS,CAAC,gBAAgB;YAC5C,YAAY,EAAE,SAAS,CAAC,YAAY;YACpC,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC;YAClC,kBAAkB,EAAE,cAAc,CAAC,kBAAkB,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CACH,CAAC;IACJ,CAAC;IAED,UAAU;QACR,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;IAC5C,CAAC;IAED,uBAAuB,CACrB,KAAyD,EACzD,QAAgB,EAChB,SAAiB;QAEjB,OAAO,IAAI,OAAO,CAAC;YACjB,eAAe,EAAE,0BAA0B;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,wBAAwB;SAC9B,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aAC9B,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC;aAC3C,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;aAC1B,WAAW,CAAC,QAAQ,CAAC;aACrB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,KAEC,EACD,QAAgB;QAKhB,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAI,CAAC;QACpC,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;QACtE,IAAI,YAAY,KAAK,KAAK,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,MAAM,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAC;YAClC,eAAe,EAAE,0BAA0B;YAC3C,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS;YACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;YAC9B,gBAAgB,EAAE,KAAK,CAAC,KAAK,CAAC,gBAAgB;YAC9C,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;YACxC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,SAAS,CAAC,QAAQ;YAC5B,YAAY,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;SAC1C,CAAC;aACC,kBAAkB,CAAC;YAClB,GAAG,EAAE,iBAAiB;YACtB,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACvB,GAAG,EAAE,mBAAmB;SACzB,CAAC;aACD,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;aAC9B,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC;aAC/B,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;aACjC,MAAM,CAAC,YAAY,CAAC;aACpB,WAAW,CAAC,QAAQ,CAAC;aACrB,iBAAiB,CAAC,SAAS,CAAC;aAC5B,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAE1B,OAAO;YACL,SAAS;YACT,QAAQ,EAAE;gBACR,YAAY;gBACZ,QAAQ,EAAE,SAAS,CAAC,QAAQ;gBAC5B,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;gBACxD,SAAS,EAAE,cAAc,CAAC,SAAS,CAAC;aACrC;SACF,CAAC;IACJ,CAAC;CACF;AAED,MAAM,iCAAiC;IAC5B,QAAQ,CAAmC;IAC3C,mBAAmB,CAAS;IAC5B,cAAc,CAAqB;IAE5C,YACE,kBAA0B,EAC1B,aAAiC,EACjC,QAA0C;QAE1C,IAAI,CAAC,mBAAmB,GAAG,kBAAkB,CAAC;QAC9C,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC;QACpC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,GAAQ,EAAE,KAAa;IAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,CAAC,EAAE,MAAM,CAAC,CAAC;QACX,GAAG,EAAE,iBAAiB;QACtB,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,KAAK;KACX,CAAC,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAc;IAC7C,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,SAAS;WAClC,SAAS,CAAC,IAAI,KAAK,OAAO;WAC1B,SAAS,CAAC,UAAU,KAAK,OAAO;WAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,2BAA2B,CAAC,GAAc;IACjD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAkD,CAAC;IACzE,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,QAAQ;WACjC,SAAS,CAAC,IAAI,KAAK,OAAO;WAC1B,SAAS,CAAC,UAAU,KAAK,OAAO;WAChC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,OAAkC;IAElC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,IAAI,WAAW,CACjC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,6CAA6C,CAAC,CACxE;aACE,kBAAkB,CAAC,EAAE,GAAG,EAAE,iBAAiB,EAAE,CAAC;aAC9C,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC5B,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,SAAS,EAAE;YAC5C,UAAU,EAAE,CAAC,iBAAiB,CAAC;SAChC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAW;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,YAAoB;IAC1C,OAAO,IAAI,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAsD;IAEtD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,oBAAoB,CAC3B,QAA0C;IAE1C,MAAM,KAAK,GAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG;QACtB,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;YACd,GAAG,QAAQ,CAAC,GAAG;YACf,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;SAC5D,CAAC;QACF,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AACxE,CAAC","sourcesContent":["import { randomUUID } from 'node:crypto';\nimport {\n  CompactSign,\n  SignJWT,\n  compactVerify,\n  exportJWK,\n  type CryptoKey,\n  type JWK,\n  type JSONWebKeySet,\n} from 'jose';\nimport { z } from 'zod';\nimport {\n  EXECUTION_ASSERTION_TYPE,\n  EXECUTION_CONTRACT_VERSION,\n  ExecutionScopeSchema,\n  HostedExecutionWorkflowSchema,\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  MCP_CAPABILITY_TYPE,\n  McpAllowedToolsSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n  type ExecutionScope,\n} from '../contracts/index.js';\nimport type {\n  ExecutionAuthority,\n  ExecutionAuthorityConfig,\n  ExecutionAuthorityIssueInput,\n  ExecutionAuthorityKeyPair,\n  IssuedExecutionAuthority,\n  IssuedExecutionAuthorityMetadata,\n  JoseExecutionAuthorityOptions,\n} from './types.js';\n\nconst SIGNING_ALGORITHM = 'ES256';\nconst ExecutionAuthorityMcpConfigSchema = z.object({\n  audience: JwtAudienceSchema,\n  serverId: McpServerIdSchema,\n  ttlSeconds: z.number().int().min(1).max(15 * 60),\n}).strict();\nconst ExecutionAuthorityConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  adopterId: OpaqueIdSchema,\n  executionAudience: JwtAudienceSchema,\n  keyId: OpaqueIdSchema,\n  executionTtlSeconds: z.number().int().min(1).max(15 * 60),\n  mcp: ExecutionAuthorityMcpConfigSchema.optional(),\n}).strict().superRefine((config, context) => {\n  if (!config.mcp) {\n    return;\n  }\n  if (config.executionAudience === config.mcp.audience) {\n    context.addIssue({\n      code: 'custom',\n      path: ['mcp', 'audience'],\n      message: 'must be distinct from the execution audience',\n    });\n  }\n  if (config.mcp.ttlSeconds < config.executionTtlSeconds) {\n    context.addIssue({\n      code: 'custom',\n      path: ['mcp', 'ttlSeconds'],\n      message: 'must not expire before execution admission authority',\n    });\n  }\n});\nconst ExecutionIssueScopeSchema = ExecutionScopeSchema.omit({ adopterId: true });\nconst ExecutionAuthorityIssueInputSchema = z.object({\n  scope: ExecutionIssueScopeSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: OpaqueIdSchema,\n  workflow: HostedExecutionWorkflowSchema,\n  mcp: z.object({\n    allowedTools: McpAllowedToolsSchema,\n  }).strict().optional(),\n}).strict();\nconst PublicP256JwkSchema = z.object({\n  kty: z.literal('EC'),\n  crv: z.literal('P-256'),\n  x: z.string().regex(/^[A-Za-z0-9_-]+$/),\n  y: z.string().regex(/^[A-Za-z0-9_-]+$/),\n}).passthrough().superRefine((jwk, context) => {\n  const privateFields = ['d', 'p', 'q', 'dp', 'dq', 'qi', 'oth', 'k'];\n  if (privateFields.some((field) => field in jwk)) {\n    context.addIssue({\n      code: 'custom',\n      message: 'must not contain private key material',\n    });\n  }\n});\n\n/**\n * ES256 reference adapter for issuing one invocation's admission assertion and\n * optional product-MCP capability.\n */\nexport class JoseExecutionAuthority implements ExecutionAuthority {\n  readonly #config: z.infer<typeof ExecutionAuthorityConfigSchema>;\n  readonly #privateKey: CryptoKey;\n  readonly #publicJwk: Readonly<JWK>;\n  readonly #now: () => Date;\n  readonly #createCapabilityId: () => string;\n\n  private constructor(\n    config: ExecutionAuthorityConfig,\n    key: { privateKey: CryptoKey; publicJwk: JWK },\n    options: JoseExecutionAuthorityOptions,\n  ) {\n    this.#config = deepFreezeConfig(ExecutionAuthorityConfigSchema.parse(config));\n    assertPrivateSigningKey(key.privateKey);\n    this.#privateKey = key.privateKey;\n    this.#publicJwk = projectPublicJwk(key.publicJwk, this.#config.keyId);\n    this.#now = options.now ?? (() => new Date());\n    this.#createCapabilityId = options.createCapabilityId ?? randomUUID;\n  }\n\n  static async create(\n    config: ExecutionAuthorityConfig,\n    keyPair: ExecutionAuthorityKeyPair,\n    options: JoseExecutionAuthorityOptions = {},\n  ): Promise<JoseExecutionAuthority> {\n    assertPrivateSigningKey(keyPair.privateKey);\n    assertPublicVerificationKey(keyPair.publicKey);\n    await assertMatchingKeyPair(keyPair);\n    return new JoseExecutionAuthority(\n      config,\n      {\n        privateKey: keyPair.privateKey,\n        publicJwk: await exportJWK(keyPair.publicKey),\n      },\n      options,\n    );\n  }\n\n  async issue(\n    input: ExecutionAuthorityIssueInput,\n  ): Promise<IssuedExecutionAuthority> {\n    const authority = ExecutionAuthorityIssueInputSchema.parse(input);\n    if (authority.mcp && !this.#config.mcp) {\n      throw new Error(\n        'Execution authority cannot issue an MCP capability without MCP deployment configuration.',\n      );\n    }\n\n    const issuedAt = toEpochSeconds(this.#now());\n    const executionExpiresAt = issuedAt + this.#config.executionTtlSeconds;\n    const executionAssertion = await this.#signExecutionAssertion(\n      authority,\n      issuedAt,\n      executionExpiresAt,\n    );\n\n    const mcp = authority.mcp && this.#config.mcp\n      ? await this.#issueMcpCapability(\n        { ...authority, mcp: authority.mcp },\n        issuedAt,\n      )\n      : undefined;\n\n    return new ProtectedIssuedExecutionAuthority(\n      executionAssertion,\n      mcp?.assertion,\n      freezeIssuedMetadata({\n        scope: {\n          adopterId: this.#config.adopterId,\n          ...authority.scope,\n        },\n        runtimeSessionId: authority.runtimeSessionId,\n        invocationId: authority.invocationId,\n        workflow: authority.workflow,\n        issuedAt: toIsoTimestamp(issuedAt),\n        executionExpiresAt: toIsoTimestamp(executionExpiresAt),\n        ...(mcp ? { mcp: mcp.metadata } : {}),\n      }),\n    );\n  }\n\n  publicJwks(): JSONWebKeySet {\n    return { keys: [{ ...this.#publicJwk }] };\n  }\n\n  #signExecutionAssertion(\n    input: z.infer<typeof ExecutionAuthorityIssueInputSchema>,\n    issuedAt: number,\n    expiresAt: number,\n  ): Promise<string> {\n    return new SignJWT({\n      contractVersion: EXECUTION_CONTRACT_VERSION,\n      adopterId: this.#config.adopterId,\n      tenantId: input.scope.tenantId,\n      productSessionId: input.scope.productSessionId,\n      runtimeSessionId: input.runtimeSessionId,\n      workflow: input.workflow,\n    })\n      .setProtectedHeader({\n        alg: SIGNING_ALGORITHM,\n        kid: this.#config.keyId,\n        typ: EXECUTION_ASSERTION_TYPE,\n      })\n      .setIssuer(this.#config.issuer)\n      .setAudience(this.#config.executionAudience)\n      .setSubject(input.scope.subjectId)\n      .setJti(input.invocationId)\n      .setIssuedAt(issuedAt)\n      .setExpirationTime(expiresAt)\n      .sign(this.#privateKey);\n  }\n\n  async #issueMcpCapability(\n    input: z.infer<typeof ExecutionAuthorityIssueInputSchema> & {\n      mcp: { allowedTools: string[] };\n    },\n    issuedAt: number,\n  ): Promise<{\n    assertion: string;\n    metadata: NonNullable<IssuedExecutionAuthorityMetadata['mcp']>;\n  }> {\n    const mcpConfig = this.#config.mcp!;\n    const capabilityId = OpaqueIdSchema.parse(this.#createCapabilityId());\n    if (capabilityId === input.invocationId) {\n      throw new Error(\n        'MCP capability identity must be distinct from the invocation identity.',\n      );\n    }\n    const expiresAt = issuedAt + mcpConfig.ttlSeconds;\n    const assertion = await new SignJWT({\n      contractVersion: EXECUTION_CONTRACT_VERSION,\n      adopterId: this.#config.adopterId,\n      tenantId: input.scope.tenantId,\n      productSessionId: input.scope.productSessionId,\n      runtimeSessionId: input.runtimeSessionId,\n      invocationId: input.invocationId,\n      workflow: input.workflow,\n      serverId: mcpConfig.serverId,\n      allowedTools: [...input.mcp.allowedTools],\n    })\n      .setProtectedHeader({\n        alg: SIGNING_ALGORITHM,\n        kid: this.#config.keyId,\n        typ: MCP_CAPABILITY_TYPE,\n      })\n      .setIssuer(this.#config.issuer)\n      .setAudience(mcpConfig.audience)\n      .setSubject(input.scope.subjectId)\n      .setJti(capabilityId)\n      .setIssuedAt(issuedAt)\n      .setExpirationTime(expiresAt)\n      .sign(this.#privateKey);\n\n    return {\n      assertion,\n      metadata: {\n        capabilityId,\n        serverId: mcpConfig.serverId,\n        allowedTools: Object.freeze([...input.mcp.allowedTools]),\n        expiresAt: toIsoTimestamp(expiresAt),\n      },\n    };\n  }\n}\n\nclass ProtectedIssuedExecutionAuthority implements IssuedExecutionAuthority {\n  readonly metadata: IssuedExecutionAuthorityMetadata;\n  readonly #executionAssertion: string;\n  readonly #mcpCapability: string | undefined;\n\n  constructor(\n    executionAssertion: string,\n    mcpCapability: string | undefined,\n    metadata: IssuedExecutionAuthorityMetadata,\n  ) {\n    this.#executionAssertion = executionAssertion;\n    this.#mcpCapability = mcpCapability;\n    this.metadata = metadata;\n  }\n\n  executionAssertion(): string {\n    return this.#executionAssertion;\n  }\n\n  mcpCapability(): string | undefined {\n    return this.#mcpCapability;\n  }\n\n  toJSON(): IssuedExecutionAuthorityMetadata {\n    return this.metadata;\n  }\n}\n\nfunction projectPublicJwk(jwk: JWK, keyId: string): Readonly<JWK> {\n  const parsed = PublicP256JwkSchema.parse(jwk);\n  return Object.freeze({\n    kty: parsed.kty,\n    crv: parsed.crv,\n    x: parsed.x,\n    y: parsed.y,\n    alg: SIGNING_ALGORITHM,\n    kid: keyId,\n    use: 'sig',\n  });\n}\n\nfunction assertPrivateSigningKey(key: CryptoKey): void {\n  const algorithm = key.algorithm as { name: string; namedCurve?: string };\n  const accepted = key.type === 'private'\n    && algorithm.name === 'ECDSA'\n    && algorithm.namedCurve === 'P-256'\n    && key.usages.includes('sign');\n  if (!accepted) {\n    throw new Error(\n      'Execution authority requires an ES256 private signing key.',\n    );\n  }\n}\n\nfunction assertPublicVerificationKey(key: CryptoKey): void {\n  const algorithm = key.algorithm as { name: string; namedCurve?: string };\n  const accepted = key.type === 'public'\n    && algorithm.name === 'ECDSA'\n    && algorithm.namedCurve === 'P-256'\n    && key.usages.includes('verify');\n  if (!accepted) {\n    throw new Error(\n      'Execution authority requires an ES256 public verification key.',\n    );\n  }\n}\n\nasync function assertMatchingKeyPair(\n  keyPair: ExecutionAuthorityKeyPair,\n): Promise<void> {\n  try {\n    const probe = await new CompactSign(\n      new TextEncoder().encode('heddle-adopter-execution-authority-key-pair'),\n    )\n      .setProtectedHeader({ alg: SIGNING_ALGORITHM })\n      .sign(keyPair.privateKey);\n    await compactVerify(probe, keyPair.publicKey, {\n      algorithms: [SIGNING_ALGORITHM],\n    });\n  } catch {\n    throw new Error('Execution authority signing keys do not match.');\n  }\n}\n\nfunction toEpochSeconds(value: Date): number {\n  const seconds = Math.floor(value.getTime() / 1_000);\n  if (!Number.isSafeInteger(seconds) || seconds < 0) {\n    throw new Error('Execution authority could not resolve a valid issue time.');\n  }\n  return seconds;\n}\n\nfunction toIsoTimestamp(epochSeconds: number): string {\n  return new Date(epochSeconds * 1_000).toISOString();\n}\n\nfunction deepFreezeConfig(\n  config: z.infer<typeof ExecutionAuthorityConfigSchema>,\n): z.infer<typeof ExecutionAuthorityConfigSchema> {\n  const mcp = config.mcp ? Object.freeze({ ...config.mcp }) : undefined;\n  return Object.freeze({ ...config, ...(mcp ? { mcp } : {}) });\n}\n\nfunction freezeIssuedMetadata(\n  metadata: IssuedExecutionAuthorityMetadata,\n): IssuedExecutionAuthorityMetadata {\n  const scope: ExecutionScope = Object.freeze({ ...metadata.scope });\n  const mcp = metadata.mcp\n    ? Object.freeze({\n      ...metadata.mcp,\n      allowedTools: Object.freeze([...metadata.mcp.allowedTools]),\n    })\n    : undefined;\n  return Object.freeze({ ...metadata, scope, ...(mcp ? { mcp } : {}) });\n}\n"]}

package/dist/authority/types.d.ts

@@ -48,8 +48,10 @@ export interface IssuedExecutionAuthority {
     mcpCapability(): string | undefined;
     toJSON(): IssuedExecutionAuthorityMetadata;
 }
-export interface ExecutionAuthority {
+export interface ExecutionAuthorityIssuer {
     issue(input: ExecutionAuthorityIssueInput): Promise<IssuedExecutionAuthority>;
+}
+export interface ExecutionAuthority extends ExecutionAuthorityIssuer {
     publicJwks(): JSONWebKeySet;
 }
 export type ExecutionAuthorityKeyPair = {

package/dist/authority/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/authority/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,2BAA2B,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,GAAG,CAAC,EAAE;QACJ,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,KAAK,EAAE,cAAc,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,2BAA2B,CAAC;CACnC,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,kBAAkB,IAAI,MAAM,CAAC;IAC7B,aAAa,IAAI,MAAM,GAAG,SAAS,CAAC;IACpC,MAAM,IAAI,gCAAgC,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9E,UAAU,IAAI,aAAa,CAAC;CAC7B;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;CACnC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/authority/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,2BAA2B,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,GAAG,CAAC,EAAE;QACJ,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,KAAK,EAAE,cAAc,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,2BAA2B,CAAC;CACnC,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,kBAAkB,IAAI,MAAM,CAAC;IAC7B,aAAa,IAAI,MAAM,GAAG,SAAS,CAAC;IACpC,MAAM,IAAI,gCAAgC,CAAC;CAC5C;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,kBAAmB,SAAQ,wBAAwB;IAClE,UAAU,IAAI,aAAa,CAAC;CAC7B;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;CACnC,CAAC"}

package/dist/authority/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/authority/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { CryptoKey, JSONWebKeySet } from 'jose';\nimport type {\n  ExecutionScope,\n  HostedExecutionWorkflow,\n} from '../contracts/index.js';\n\nexport type ExecutionAuthorityMcpConfig = {\n  audience: string;\n  serverId: string;\n  ttlSeconds: number;\n};\n\nexport type ExecutionAuthorityConfig = {\n  issuer: string;\n  adopterId: string;\n  executionAudience: string;\n  keyId: string;\n  executionTtlSeconds: number;\n  mcp?: ExecutionAuthorityMcpConfig;\n};\n\nexport type ExecutionAuthorityIssueInput = {\n  scope: Omit<ExecutionScope, 'adopterId'>;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  mcp?: {\n    allowedTools: readonly string[];\n  };\n};\n\nexport type IssuedMcpCapabilityMetadata = {\n  capabilityId: string;\n  serverId: string;\n  allowedTools: readonly string[];\n  expiresAt: string;\n};\n\nexport type IssuedExecutionAuthorityMetadata = {\n  scope: ExecutionScope;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  issuedAt: string;\n  executionExpiresAt: string;\n  mcp?: IssuedMcpCapabilityMetadata;\n};\n\n/**\n * Short-lived credentials are available only through explicit accessors.\n * JSON serialization contains credential-free metadata. Identifiers can still\n * be product data and remain subject to the adopter's logging policy.\n */\nexport interface IssuedExecutionAuthority {\n  readonly metadata: IssuedExecutionAuthorityMetadata;\n  executionAssertion(): string;\n  mcpCapability(): string | undefined;\n  toJSON(): IssuedExecutionAuthorityMetadata;\n}\n\nexport interface ExecutionAuthority {\n  issue(input: ExecutionAuthorityIssueInput): Promise<IssuedExecutionAuthority>;\n  publicJwks(): JSONWebKeySet;\n}\n\nexport type ExecutionAuthorityKeyPair = {\n  privateKey: CryptoKey;\n  publicKey: CryptoKey;\n};\n\nexport type JoseExecutionAuthorityOptions = {\n  now?: () => Date;\n  createCapabilityId?: () => string;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/authority/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { CryptoKey, JSONWebKeySet } from 'jose';\nimport type {\n  ExecutionScope,\n  HostedExecutionWorkflow,\n} from '../contracts/index.js';\n\nexport type ExecutionAuthorityMcpConfig = {\n  audience: string;\n  serverId: string;\n  ttlSeconds: number;\n};\n\nexport type ExecutionAuthorityConfig = {\n  issuer: string;\n  adopterId: string;\n  executionAudience: string;\n  keyId: string;\n  executionTtlSeconds: number;\n  mcp?: ExecutionAuthorityMcpConfig;\n};\n\nexport type ExecutionAuthorityIssueInput = {\n  scope: Omit<ExecutionScope, 'adopterId'>;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  mcp?: {\n    allowedTools: readonly string[];\n  };\n};\n\nexport type IssuedMcpCapabilityMetadata = {\n  capabilityId: string;\n  serverId: string;\n  allowedTools: readonly string[];\n  expiresAt: string;\n};\n\nexport type IssuedExecutionAuthorityMetadata = {\n  scope: ExecutionScope;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  issuedAt: string;\n  executionExpiresAt: string;\n  mcp?: IssuedMcpCapabilityMetadata;\n};\n\n/**\n * Short-lived credentials are available only through explicit accessors.\n * JSON serialization contains credential-free metadata. Identifiers can still\n * be product data and remain subject to the adopter's logging policy.\n */\nexport interface IssuedExecutionAuthority {\n  readonly metadata: IssuedExecutionAuthorityMetadata;\n  executionAssertion(): string;\n  mcpCapability(): string | undefined;\n  toJSON(): IssuedExecutionAuthorityMetadata;\n}\n\nexport interface ExecutionAuthorityIssuer {\n  issue(input: ExecutionAuthorityIssueInput): Promise<IssuedExecutionAuthority>;\n}\n\nexport interface ExecutionAuthority extends ExecutionAuthorityIssuer {\n  publicJwks(): JSONWebKeySet;\n}\n\nexport type ExecutionAuthorityKeyPair = {\n  privateKey: CryptoKey;\n  publicKey: CryptoKey;\n};\n\nexport type JoseExecutionAuthorityOptions = {\n  now?: () => Date;\n  createCapabilityId?: () => string;\n};\n"]}

package/dist/contracts/index.d.ts

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 export declare const EXECUTION_CONTRACT_VERSION: 1;
 export declare const CONVERSATION_TURN_WORKFLOW: "conversation-turn";
+export declare const HEARTBEAT_TASK_WORKFLOW: "heartbeat-task";
 export declare const EXECUTION_ASSERTION_TYPE: "heddle-execution+jwt";
 export declare const MCP_CAPABILITY_TYPE: "heddle-mcp-capability+jwt";
 export declare const AGENTCORE_RUNTIME_SESSION_HEADER: "x-amzn-bedrock-agentcore-runtime-session-id";
@@ -29,6 +30,49 @@ export declare const ExecutionHostConversationTurnRequestSchema: z.ZodObject<{
     prompt: z.ZodString;
     deadlineAt: z.ZodOptional<z.ZodISODateTime>;
 }, z.core.$strict>;
+export declare const HeartbeatRunContextSchema: z.ZodObject<{
+    currentDateTime: z.ZodISODateTime;
+    intervalMs: z.ZodNumber;
+    continuationMode: z.ZodOptional<z.ZodEnum<{
+        operator: "operator";
+        agent: "agent";
+    }>>;
+    nextRunAt: z.ZodOptional<z.ZodISODateTime>;
+    previousRunAt: z.ZodOptional<z.ZodISODateTime>;
+    previousRunId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const ExecutionHostHeartbeatTaskRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    kind: z.ZodLiteral<"heartbeat-task">;
+    invocationId: z.ZodString;
+    taskId: z.ZodString;
+    task: z.ZodString;
+    checkpoint: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodJSONSchema>>;
+    runContext: z.ZodObject<{
+        currentDateTime: z.ZodISODateTime;
+        intervalMs: z.ZodNumber;
+        continuationMode: z.ZodOptional<z.ZodEnum<{
+            operator: "operator";
+            agent: "agent";
+        }>>;
+        nextRunAt: z.ZodOptional<z.ZodISODateTime>;
+        previousRunAt: z.ZodOptional<z.ZodISODateTime>;
+        previousRunId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+    model: z.ZodOptional<z.ZodString>;
+    reasoningEffort: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        low: "low";
+        medium: "medium";
+        high: "high";
+        ultrahigh: "ultrahigh";
+        max: "max";
+    }>>;
+    maxSteps: z.ZodOptional<z.ZodNumber>;
+    searchIgnoreDirs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    systemContext: z.ZodOptional<z.ZodString>;
+    deadlineAt: z.ZodOptional<z.ZodISODateTime>;
+}, z.core.$strict>;
 export declare const RuntimePublicResultSchema: z.ZodObject<{
     outcome: z.ZodEnum<{
         error: "error";
@@ -117,6 +161,53 @@ export declare const ExecutionHostStreamEventSchema: z.ZodDiscriminatedUnion<[z.
         message: z.ZodString;
     }, z.core.$strict>;
 }, z.core.$strict>], "kind">;
+export declare const ExecutionHostHeartbeatStreamEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    timestamp: z.ZodISODateTime;
+    sequence: z.ZodLiteral<0>;
+    kind: z.ZodLiteral<"accepted">;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"activity">;
+    activity: z.ZodJSONSchema;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"result">;
+    result: z.ZodRecord<z.ZodString, z.ZodJSONSchema>;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"cancelled">;
+    reason: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodString;
+    runId: z.ZodString;
+    sequence: z.ZodNumber;
+    timestamp: z.ZodISODateTime;
+    kind: z.ZodLiteral<"error">;
+    error: z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>], "kind">;
+export declare const HostedExecutionWorkflowSchema: z.ZodEnum<{
+    "conversation-turn": "conversation-turn";
+    "heartbeat-task": "heartbeat-task";
+}>;
 export declare const ExecutionAssertionClaimsSchema: z.ZodObject<{
     iss: z.ZodURL;
     aud: z.ZodString;
@@ -125,7 +216,10 @@ export declare const ExecutionAssertionClaimsSchema: z.ZodObject<{
     tenantId: z.ZodString;
     productSessionId: z.ZodString;
     runtimeSessionId: z.ZodString;
-    workflow: z.ZodLiteral<"conversation-turn">;
+    workflow: z.ZodEnum<{
+        "conversation-turn": "conversation-turn";
+        "heartbeat-task": "heartbeat-task";
+    }>;
     sub: z.ZodString;
     jti: z.ZodString;
     iat: z.ZodNumber;
@@ -140,7 +234,10 @@ export declare const McpCapabilityClaimsSchema: z.ZodObject<{
     productSessionId: z.ZodString;
     runtimeSessionId: z.ZodString;
     invocationId: z.ZodString;
-    workflow: z.ZodLiteral<"conversation-turn">;
+    workflow: z.ZodEnum<{
+        "conversation-turn": "conversation-turn";
+        "heartbeat-task": "heartbeat-task";
+    }>;
     serverId: z.ZodString;
     allowedTools: z.ZodArray<z.ZodString>;
     sub: z.ZodString;
@@ -150,14 +247,20 @@ export declare const McpCapabilityClaimsSchema: z.ZodObject<{
 }, z.core.$loose>;
 export type ExecutionScope = z.infer<typeof ExecutionScopeSchema>;
 export type ExecutionHostConversationTurnRequest = z.infer<typeof ExecutionHostConversationTurnRequestSchema>;
+export type ExecutionHostHeartbeatTaskRequest = z.infer<typeof ExecutionHostHeartbeatTaskRequestSchema>;
 export type RuntimePublicResult = z.infer<typeof RuntimePublicResultSchema>;
 export type ExecutionHostStreamEvent = z.infer<typeof ExecutionHostStreamEventSchema>;
 export type ExecutionHostTerminalEvent = Extract<ExecutionHostStreamEvent, {
     kind: 'result' | 'cancelled' | 'error';
 }>;
+export type ExecutionHostHeartbeatStreamEvent = z.infer<typeof ExecutionHostHeartbeatStreamEventSchema>;
+export type ExecutionHostHeartbeatTerminalEvent = Extract<ExecutionHostHeartbeatStreamEvent, {
+    kind: 'result' | 'cancelled' | 'error';
+}>;
 export type ExecutionAssertionClaims = z.infer<typeof ExecutionAssertionClaimsSchema>;
 export type McpCapabilityClaims = z.infer<typeof McpCapabilityClaimsSchema>;
-export type HostedExecutionWorkflow = typeof CONVERSATION_TURN_WORKFLOW;
+export type HostedExecutionWorkflow = z.infer<typeof HostedExecutionWorkflowSchema>;
 export declare function isExecutionHostTerminalEvent(event: ExecutionHostStreamEvent): event is ExecutionHostTerminalEvent;
+export declare function isExecutionHostHeartbeatTerminalEvent(event: ExecutionHostHeartbeatStreamEvent): event is ExecutionHostHeartbeatTerminalEvent;
 export declare function isSafeWebUrl(url: URL): boolean;
 //# sourceMappingURL=index.d.ts.map

package/dist/contracts/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,0BAA0B,EAAG,mBAA4B,CAAC;AACvE,eAAO,MAAM,wBAAwB,EAAG,sBAA+B,CAAC;AACxE,eAAO,MAAM,mBAAmB,EAAG,2BAAoC,CAAC;AAExE,eAAO,MAAM,gCAAgC,EAC3C,6CAAsD,CAAC;AACzD,eAAO,MAAM,iCAAiC,EAC5C,qCAA8C,CAAC;AACjD,eAAO,MAAM,0BAA0B,EACrC,mCAA4C,CAAC;AAC/C,eAAO,MAAM,qBAAqB,EAChC,wCAAiD,CAAC;AACpD,eAAO,MAAM,oBAAoB,EAC/B,uCAAgD,CAAC;AAEnD,eAAO,MAAM,cAAc,aAOxB,CAAC;AAEJ,eAAO,MAAM,eAAe,UAG3B,CAAC;AAEF,eAAO,MAAM,iBAAiB,aAA6B,CAAC;AAE5D,eAAO,MAAM,sBAAsB,aAI8C,CAAC;AAElF,eAAO,MAAM,eAAe,kBAAmC,CAAC;AAEhE,eAAO,MAAM,iBAAiB,aAO3B,CAAC;AAEJ,eAAO,MAAM,iBAAiB,aAO3B,CAAC;AAEJ,eAAO,MAAM,qBAAqB,yBAa/B,CAAC;AAEJ,eAAO,MAAM,oBAAoB;;;;;kBAKtB,CAAC;AAEZ,eAAO,MAAM,0CAA0C;;;;;;kBAM5C,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;kBAiB3B,CAAC;AAUZ,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAwBzC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;iBAa3B,CAAC;AAEjB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;iBAgBtB,CAAC;AAEjB,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CACxD,OAAO,0CAA0C,CAClD,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAC9C,wBAAwB,EACxB;IAAE,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAA;CAAE,CAC3C,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,uBAAuB,GAAG,OAAO,0BAA0B,CAAC;AAExE,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,wBAAwB,GAC9B,KAAK,IAAI,0BAA0B,CAIrC;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAO9C"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AACrD,eAAO,MAAM,0BAA0B,EAAG,mBAA4B,CAAC;AACvE,eAAO,MAAM,uBAAuB,EAAG,gBAAyB,CAAC;AACjE,eAAO,MAAM,wBAAwB,EAAG,sBAA+B,CAAC;AACxE,eAAO,MAAM,mBAAmB,EAAG,2BAAoC,CAAC;AAExE,eAAO,MAAM,gCAAgC,EAC3C,6CAAsD,CAAC;AACzD,eAAO,MAAM,iCAAiC,EAC5C,qCAA8C,CAAC;AACjD,eAAO,MAAM,0BAA0B,EACrC,mCAA4C,CAAC;AAC/C,eAAO,MAAM,qBAAqB,EAChC,wCAAiD,CAAC;AACpD,eAAO,MAAM,oBAAoB,EAC/B,uCAAgD,CAAC;AAEnD,eAAO,MAAM,cAAc,aAOxB,CAAC;AAEJ,eAAO,MAAM,eAAe,UAG3B,CAAC;AAEF,eAAO,MAAM,iBAAiB,aAA6B,CAAC;AAE5D,eAAO,MAAM,sBAAsB,aAI8C,CAAC;AAElF,eAAO,MAAM,eAAe,kBAAmC,CAAC;AAEhE,eAAO,MAAM,iBAAiB,aAO3B,CAAC;AAEJ,eAAO,MAAM,iBAAiB,aAO3B,CAAC;AAEJ,eAAO,MAAM,qBAAqB,yBAa/B,CAAC;AAEJ,eAAO,MAAM,oBAAoB;;;;;kBAKtB,CAAC;AAEZ,eAAO,MAAM,0CAA0C;;;;;;kBAM5C,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;;;kBAO3B,CAAC;AAEZ,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqBzC,CAAC;AAEZ,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;kBAiB3B,CAAC;AAUZ,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BAwBzC,CAAC;AAEH,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;4BA2BnD,CAAC;AAEF,eAAO,MAAM,6BAA6B;;;EAGxC,CAAC;AAEH,eAAO,MAAM,8BAA8B;;;;;;;;;;;;;;;;iBAa3B,CAAC;AAEjB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;iBAgBtB,CAAC;AAEjB,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,KAAK,CACxD,OAAO,0CAA0C,CAClD,CAAC;AACF,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,OAAO,CAC9C,wBAAwB,EACxB;IAAE,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAA;CAAE,CAC3C,CAAC;AACF,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AACF,MAAM,MAAM,mCAAmC,GAAG,OAAO,CACvD,iCAAiC,EACjC;IAAE,IAAI,EAAE,QAAQ,GAAG,WAAW,GAAG,OAAO,CAAA;CAAE,CAC3C,CAAC;AACF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAC5C,OAAO,8BAA8B,CACtC,CAAC;AACF,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAC3C,OAAO,6BAA6B,CACrC,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,wBAAwB,GAC9B,KAAK,IAAI,0BAA0B,CAIrC;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,iCAAiC,GACvC,KAAK,IAAI,mCAAmC,CAI9C;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAO9C"}