@heddleagent/execution-host-client 6.2.0 → 6.4.0

package/README.md

@@ -5,7 +5,7 @@ products that invoke a separately deployed Heddle Execution Host. It lets an
 adopter keep its own language stack, authentication, database, product policy,
 MCP tools, and UI while reusing the security-sensitive v1 contract machinery.
 
-> **Current availability:** stable version `6.2.0`. The former
+> **Current availability:** stable version `6.4.0`. The former
 > `@roackb2/heddle-adopter@5.13.0` coordinate is deprecated and remains
 > installable only for existing consumers. Heddle does not currently distribute
 > the compatible Execution Host implementation or offer a hosted service. The
@@ -31,6 +31,8 @@ modular AWS SDK for its AgentCore transport and the official MCP SDK, plus
 | `@heddleagent/execution-host-client/authority` | ES256 execution assertion and optional MCP capability issuance plus public JWKS projection |
 | `@heddleagent/execution-host-client/conversation` | Turn orchestration across authority, model credentials, optional MCP policy, an `ExecutionHost`, and an optional adopter-implemented durable lifecycle store |
 | `@heddleagent/execution-host-client/heartbeat` | Remote heartbeat orchestration that keeps durable task authority in a coordinator while a compatible Execution Host runs the agent cycle |
+| `@heddleagent/execution-host-client/coordinator` | Authenticated task publication, pause-first desired-state reconciliation, product delegation, and delegated heartbeat execution |
+| `@heddleagent/execution-host-client/coordinator/node` | Standard authenticated Node HTTP edge for product-owned heartbeat authorization |
 | `@heddleagent/execution-host-client/mcp` | Independent capability verification at the adopter's MCP edge |
 | `@heddleagent/execution-host-client/mcp/node` | Stateless official-SDK Streamable HTTP lifecycle around adopter-defined toolsets |
 | `@heddleagent/execution-host-client/http-sse` | Transport-neutral conversation and heartbeat ports plus the strict direct-development HTTP/SSE client |
@@ -279,30 +281,81 @@ The client refuses redirects, bounds parser and error bodies, validates ordered
 SSE identity, streams accepted/activity events incrementally, and withholds the
 terminal event until clean EOF. It never retries an ambiguous invocation.
 
-## Delegate heartbeat agent cycles
+## Connect a product to the heartbeat coordinator
+
+The product publishes only its desired task state and authorizes individual
+runs. Heddle owns the coordinator protocol, safe reconciliation order, Runtime
+session derivation, short-lived authority bundle, and execution composition.
+
+```ts
+import {
+  HostedHeartbeatCoordinatorClient,
+  HostedHeartbeatDelegationService,
+  HostedHeartbeatTaskReconciler,
+} from '@heddleagent/execution-host-client/coordinator'
+import {
+  NodeHostedHeartbeatDelegationHttpService,
+} from '@heddleagent/execution-host-client/coordinator/node'
+
+const coordinator = new HostedHeartbeatCoordinatorClient({
+  baseUrl: coordinatorUrl,
+  apiToken: coordinatorApiToken,
+})
+await new HostedHeartbeatTaskReconciler({ coordinator }).reconcile({
+  desiredTasks: await projectDesiredHeartbeatTasks(),
+  resume: backgroundChecksEnabled,
+})
+
+const delegations = new HostedHeartbeatDelegationService({
+  authority,
+  runtimeSessionNamespace: 'example-product',
+  maxExecutionMs: 300_000,
+  authorizer: {
+    authorize: ({ taskId, signal }) =>
+      authorizeProductHeartbeat({ taskId, signal }),
+  },
+})
+const delegationHttp = new NodeHostedHeartbeatDelegationHttpService({
+  delegations,
+  apiToken: coordinatorDelegationToken,
+})
+```
+
+`projectDesiredHeartbeatTasks` remains product-owned because it translates
+product records into desired Heddle tasks. `authorizeProductHeartbeat` remains
+product-owned because it decides whether the task may run and returns only the
+authorized tenant/subject/product-session scope and exact MCP tool set. Product
+code does not construct coordinator requests, Runtime-session IDs, deadlines,
+JWTs, or delegation response objects.
+
+The Node handler can be mounted before an existing router through
+`delegationHttp.handle(request, response)`. See the
+[coordinator boundary](src/coordinator/README.md) for the corresponding
+coordinator-side client and execution transport.
+
+## Compose the coordinator execution transport
 
 For autonomous work, keep the durable task store and scheduler in one
 long-running coordinator. Inject the hosted transport only at the point where
-the scheduler would otherwise run the local heartbeat agent:
+the scheduler would otherwise run the local heartbeat agent. The coordinator
+uses the product delegation endpoint rather than receiving product signing
+keys or reimplementing its authority shape:
 
 ```ts
 import { HeartbeatSchedulerService } from '@heddleagent/runtime/advanced'
 import {
-  HostedHeartbeatAgentExecutionTransport,
-  HostedHeartbeatTaskService,
-} from '@heddleagent/execution-host-client/heartbeat'
+  HostedHeartbeatDelegatedExecutionTransport,
+  HostedHeartbeatDelegationClient,
+} from '@heddleagent/execution-host-client/coordinator'
 
-const hostedHeartbeat = new HostedHeartbeatTaskService({
-  authority,
+const delegations = new HostedHeartbeatDelegationClient({
+  baseUrl: productBackendUrl,
+  apiToken: productDelegationToken,
+})
+const agentExecutionTransport = new HostedHeartbeatDelegatedExecutionTransport({
+  delegations,
   executionHost: agentCoreExecutionHost,
   modelCredentials,
-  mcp: { allowedTools: ['read_workspace_snapshot'] },
-})
-const agentExecutionTransport = new HostedHeartbeatAgentExecutionTransport({
-  runner: hostedHeartbeat,
-  resolveInvocationContext: ({ taskId, executionId, signal }) => (
-    resolveAuthorizedHeartbeatInvocation({ taskId, executionId, signal })
-  ),
 })
 
 const scheduler = HeartbeatSchedulerService.start({
@@ -311,11 +364,13 @@ const scheduler = HeartbeatSchedulerService.start({
 })
 ```
 
-The coordinator still owns task lookup, claims, checkpoint loading, cancellation,
-claim-fenced settlement, history, and recovery. The Runtime receives a bounded
-task/checkpoint request plus invocation-scoped authority and model credentials;
-it receives no Heddle database credential. Omitting `agentExecutionTransport`
-preserves the existing in-process runner.
+The coordinator still owns task lookup, claims, checkpoint loading,
+cancellation, claim-fenced settlement, history, and recovery. The Runtime
+receives a bounded task/checkpoint request plus invocation-scoped authority and
+model credentials; it receives no Heddle database credential. Omitting
+`agentExecutionTransport` preserves the existing in-process runner. The lower
+level `/heartbeat` composition remains available for deployments whose
+coordinator and product authority live in the same process.
 
 ## Verify an adopter integration locally
 

package/dist/authority/index.d.ts

@@ -1,3 +1,3 @@
 export { JoseExecutionAuthority } from './jose-execution-authority.js';
-export type { ExecutionAuthority, ExecutionAuthorityConfig, ExecutionAuthorityIssueInput, ExecutionAuthorityKeyPair, ExecutionAuthorityMcpConfig, IssuedExecutionAuthority, IssuedExecutionAuthorityMetadata, IssuedMcpCapabilityMetadata, JoseExecutionAuthorityOptions, } from './types.js';
+export type { ExecutionAuthority, ExecutionAuthorityConfig, ExecutionAuthorityIssuer, ExecutionAuthorityIssueInput, ExecutionAuthorityKeyPair, ExecutionAuthorityMcpConfig, IssuedExecutionAuthority, IssuedExecutionAuthorityMetadata, IssuedMcpCapabilityMetadata, JoseExecutionAuthorityOptions, } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/authority/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authority/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,gCAAgC,EAChC,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/authority/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC;AACvE,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,wBAAwB,EACxB,4BAA4B,EAC5B,yBAAyB,EACzB,2BAA2B,EAC3B,wBAAwB,EACxB,gCAAgC,EAChC,2BAA2B,EAC3B,6BAA6B,GAC9B,MAAM,YAAY,CAAC"}

package/dist/authority/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authority/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC","sourcesContent":["export { JoseExecutionAuthority } from './jose-execution-authority.js';\nexport type {\n  ExecutionAuthority,\n  ExecutionAuthorityConfig,\n  ExecutionAuthorityIssueInput,\n  ExecutionAuthorityKeyPair,\n  ExecutionAuthorityMcpConfig,\n  IssuedExecutionAuthority,\n  IssuedExecutionAuthorityMetadata,\n  IssuedMcpCapabilityMetadata,\n  JoseExecutionAuthorityOptions,\n} from './types.js';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/authority/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAC","sourcesContent":["export { JoseExecutionAuthority } from './jose-execution-authority.js';\nexport type {\n  ExecutionAuthority,\n  ExecutionAuthorityConfig,\n  ExecutionAuthorityIssuer,\n  ExecutionAuthorityIssueInput,\n  ExecutionAuthorityKeyPair,\n  ExecutionAuthorityMcpConfig,\n  IssuedExecutionAuthority,\n  IssuedExecutionAuthorityMetadata,\n  IssuedMcpCapabilityMetadata,\n  JoseExecutionAuthorityOptions,\n} from './types.js';\n"]}

package/dist/authority/types.d.ts

@@ -48,8 +48,10 @@ export interface IssuedExecutionAuthority {
     mcpCapability(): string | undefined;
     toJSON(): IssuedExecutionAuthorityMetadata;
 }
-export interface ExecutionAuthority {
+export interface ExecutionAuthorityIssuer {
     issue(input: ExecutionAuthorityIssueInput): Promise<IssuedExecutionAuthority>;
+}
+export interface ExecutionAuthority extends ExecutionAuthorityIssuer {
     publicJwks(): JSONWebKeySet;
 }
 export type ExecutionAuthorityKeyPair = {

package/dist/authority/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/authority/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,2BAA2B,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,GAAG,CAAC,EAAE;QACJ,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,KAAK,EAAE,cAAc,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,2BAA2B,CAAC;CACnC,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,kBAAkB,IAAI,MAAM,CAAC;IAC7B,aAAa,IAAI,MAAM,GAAG,SAAS,CAAC;IACpC,MAAM,IAAI,gCAAgC,CAAC;CAC5C;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC9E,UAAU,IAAI,aAAa,CAAC;CAC7B;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;CACnC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/authority/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AACrD,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,2BAA2B,GAAG;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,mBAAmB,EAAE,MAAM,CAAC;IAC5B,GAAG,CAAC,EAAE,2BAA2B,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,KAAK,EAAE,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IACzC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,GAAG,CAAC,EAAE;QACJ,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG;IAC7C,KAAK,EAAE,cAAc,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,GAAG,CAAC,EAAE,2BAA2B,CAAC;CACnC,CAAC;AAEF;;;;GAIG;AACH,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,gCAAgC,CAAC;IACpD,kBAAkB,IAAI,MAAM,CAAC;IAC7B,aAAa,IAAI,MAAM,GAAG,SAAS,CAAC;IACpC,MAAM,IAAI,gCAAgC,CAAC;CAC5C;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;CAC/E;AAED,MAAM,WAAW,kBAAmB,SAAQ,wBAAwB;IAClE,UAAU,IAAI,aAAa,CAAC;CAC7B;AAED,MAAM,MAAM,yBAAyB,GAAG;IACtC,UAAU,EAAE,SAAS,CAAC;IACtB,SAAS,EAAE,SAAS,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,kBAAkB,CAAC,EAAE,MAAM,MAAM,CAAC;CACnC,CAAC"}

package/dist/authority/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/authority/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { CryptoKey, JSONWebKeySet } from 'jose';\nimport type {\n  ExecutionScope,\n  HostedExecutionWorkflow,\n} from '../contracts/index.js';\n\nexport type ExecutionAuthorityMcpConfig = {\n  audience: string;\n  serverId: string;\n  ttlSeconds: number;\n};\n\nexport type ExecutionAuthorityConfig = {\n  issuer: string;\n  adopterId: string;\n  executionAudience: string;\n  keyId: string;\n  executionTtlSeconds: number;\n  mcp?: ExecutionAuthorityMcpConfig;\n};\n\nexport type ExecutionAuthorityIssueInput = {\n  scope: Omit<ExecutionScope, 'adopterId'>;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  mcp?: {\n    allowedTools: readonly string[];\n  };\n};\n\nexport type IssuedMcpCapabilityMetadata = {\n  capabilityId: string;\n  serverId: string;\n  allowedTools: readonly string[];\n  expiresAt: string;\n};\n\nexport type IssuedExecutionAuthorityMetadata = {\n  scope: ExecutionScope;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  issuedAt: string;\n  executionExpiresAt: string;\n  mcp?: IssuedMcpCapabilityMetadata;\n};\n\n/**\n * Short-lived credentials are available only through explicit accessors.\n * JSON serialization contains credential-free metadata. Identifiers can still\n * be product data and remain subject to the adopter's logging policy.\n */\nexport interface IssuedExecutionAuthority {\n  readonly metadata: IssuedExecutionAuthorityMetadata;\n  executionAssertion(): string;\n  mcpCapability(): string | undefined;\n  toJSON(): IssuedExecutionAuthorityMetadata;\n}\n\nexport interface ExecutionAuthority {\n  issue(input: ExecutionAuthorityIssueInput): Promise<IssuedExecutionAuthority>;\n  publicJwks(): JSONWebKeySet;\n}\n\nexport type ExecutionAuthorityKeyPair = {\n  privateKey: CryptoKey;\n  publicKey: CryptoKey;\n};\n\nexport type JoseExecutionAuthorityOptions = {\n  now?: () => Date;\n  createCapabilityId?: () => string;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/authority/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { CryptoKey, JSONWebKeySet } from 'jose';\nimport type {\n  ExecutionScope,\n  HostedExecutionWorkflow,\n} from '../contracts/index.js';\n\nexport type ExecutionAuthorityMcpConfig = {\n  audience: string;\n  serverId: string;\n  ttlSeconds: number;\n};\n\nexport type ExecutionAuthorityConfig = {\n  issuer: string;\n  adopterId: string;\n  executionAudience: string;\n  keyId: string;\n  executionTtlSeconds: number;\n  mcp?: ExecutionAuthorityMcpConfig;\n};\n\nexport type ExecutionAuthorityIssueInput = {\n  scope: Omit<ExecutionScope, 'adopterId'>;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  mcp?: {\n    allowedTools: readonly string[];\n  };\n};\n\nexport type IssuedMcpCapabilityMetadata = {\n  capabilityId: string;\n  serverId: string;\n  allowedTools: readonly string[];\n  expiresAt: string;\n};\n\nexport type IssuedExecutionAuthorityMetadata = {\n  scope: ExecutionScope;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  issuedAt: string;\n  executionExpiresAt: string;\n  mcp?: IssuedMcpCapabilityMetadata;\n};\n\n/**\n * Short-lived credentials are available only through explicit accessors.\n * JSON serialization contains credential-free metadata. Identifiers can still\n * be product data and remain subject to the adopter's logging policy.\n */\nexport interface IssuedExecutionAuthority {\n  readonly metadata: IssuedExecutionAuthorityMetadata;\n  executionAssertion(): string;\n  mcpCapability(): string | undefined;\n  toJSON(): IssuedExecutionAuthorityMetadata;\n}\n\nexport interface ExecutionAuthorityIssuer {\n  issue(input: ExecutionAuthorityIssueInput): Promise<IssuedExecutionAuthority>;\n}\n\nexport interface ExecutionAuthority extends ExecutionAuthorityIssuer {\n  publicJwks(): JSONWebKeySet;\n}\n\nexport type ExecutionAuthorityKeyPair = {\n  privateKey: CryptoKey;\n  publicKey: CryptoKey;\n};\n\nexport type JoseExecutionAuthorityOptions = {\n  now?: () => Date;\n  createCapabilityId?: () => string;\n};\n"]}

package/dist/conversation/types.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 import { type ExecutionHostStreamEvent } from '../contracts/index.js';
-import type { ExecutionAuthority } from '../authority/index.js';
+import type { ExecutionAuthorityIssuer } from '../authority/index.js';
 import type { ExecutionHost } from '../http-sse/index.js';
 export declare const HostedConversationTurnInputSchema: z.ZodObject<{
     scope: z.ZodObject<{
@@ -26,7 +26,7 @@ export interface HostedConversationTurnRunner {
     streamTurn(input: HostedConversationTurnInput): AsyncIterable<ExecutionHostStreamEvent>;
 }
 export type HostedConversationTurnServiceConfig = {
-    authority: ExecutionAuthority;
+    authority: ExecutionAuthorityIssuer;
     executionHost: ExecutionHost;
     modelCredentials: HostedModelCredentialProvider;
     /** Omit this policy when the hosted workflow needs no product MCP tools. */

package/dist/conversation/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/conversation/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAO,MAAM,iCAAiC;;;;;;;;;;;kBAUnC,CAAC;AAEZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG,IAAI,CACpD,2BAA2B,EAC3B,OAAO,GAAG,cAAc,GAAG,QAAQ,CACpC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,WAAW,6BAA6B;IAC5C,kBAAkB,CAChB,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,uDAAuD;AACvD,MAAM,MAAM,yCAAyC,GACnD,6BAA6B,CAAC;AAEhC,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CACR,KAAK,EAAE,2BAA2B,GACjC,aAAa,CAAC,wBAAwB,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,mCAAmC,GAAG;IAChD,SAAS,EAAE,kBAAkB,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAC7B,gBAAgB,EAAE,6BAA6B,CAAC;IAChD,4EAA4E;IAC5E,GAAG,CAAC,EAAE;QACJ,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/conversation/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAIL,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D,eAAO,MAAM,iCAAiC;;;;;;;;;;;kBAUnC,CAAC;AAEZ,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAC/C,OAAO,iCAAiC,CACzC,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG,IAAI,CACpD,2BAA2B,EAC3B,OAAO,GAAG,cAAc,GAAG,QAAQ,CACpC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,WAAW,6BAA6B;IAC5C,kBAAkB,CAChB,OAAO,EAAE,mCAAmC,GAC3C,OAAO,CAAC,MAAM,CAAC,CAAC;CACpB;AAED,uDAAuD;AACvD,MAAM,MAAM,yCAAyC,GACnD,6BAA6B,CAAC;AAEhC,MAAM,WAAW,4BAA4B;IAC3C,UAAU,CACR,KAAK,EAAE,2BAA2B,GACjC,aAAa,CAAC,wBAAwB,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,mCAAmC,GAAG;IAChD,SAAS,EAAE,wBAAwB,CAAC;IACpC,aAAa,EAAE,aAAa,CAAC;IAC7B,gBAAgB,EAAE,6BAA6B,CAAC;IAChD,4EAA4E;IAC5E,GAAG,CAAC,EAAE;QACJ,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;KACjC,CAAC;CACH,CAAC"}

package/dist/conversation/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/conversation/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,0CAA0C,EAC1C,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,KAAK,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrD,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,0CAA0C,CAAC,KAAK,CAAC,YAAY;IAC3E,MAAM,EAAE,0CAA0C,CAAC,KAAK,CAAC,MAAM;IAC/D,UAAU,EAAE,0CAA0C,CAAC,KAAK,CAAC,UAAU;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,WAAW,EACvC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC,MAAM,EAAE,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  ExecutionHostConversationTurnRequestSchema,\n  ExecutionScopeSchema,\n  RuntimeSessionIdSchema,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport type { ExecutionAuthority } from '../authority/index.js';\nimport type { ExecutionHost } from '../http-sse/index.js';\n\nexport const HostedConversationTurnInputSchema = z.object({\n  scope: ExecutionScopeSchema.omit({ adopterId: true }),\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: ExecutionHostConversationTurnRequestSchema.shape.invocationId,\n  prompt: ExecutionHostConversationTurnRequestSchema.shape.prompt,\n  deadlineAt: ExecutionHostConversationTurnRequestSchema.shape.deadlineAt,\n  signal: z.custom<AbortSignal>(\n    (value) => value instanceof AbortSignal,\n    'signal must be an AbortSignal',\n  ).optional(),\n}).strict();\n\nexport type HostedConversationTurnInput = z.infer<\n  typeof HostedConversationTurnInputSchema\n>;\n\nexport type HostedConversationCredentialContext = Pick<\n  HostedConversationTurnInput,\n  'scope' | 'invocationId' | 'signal'\n>;\n\n/** Resolves model authority without exposing it to HTTP or product data. */\nexport interface HostedModelCredentialProvider {\n  resolveModelApiKey(\n    context: HostedConversationCredentialContext,\n  ): Promise<string>;\n}\n\n/** @deprecated Use `HostedModelCredentialProvider`. */\nexport type HostedConversationModelCredentialProvider =\n  HostedModelCredentialProvider;\n\nexport interface HostedConversationTurnRunner {\n  streamTurn(\n    input: HostedConversationTurnInput,\n  ): AsyncIterable<ExecutionHostStreamEvent>;\n}\n\nexport type HostedConversationTurnServiceConfig = {\n  authority: ExecutionAuthority;\n  executionHost: ExecutionHost;\n  modelCredentials: HostedModelCredentialProvider;\n  /** Omit this policy when the hosted workflow needs no product MCP tools. */\n  mcp?: {\n    allowedTools: readonly string[];\n  };\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/conversation/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,0CAA0C,EAC1C,oBAAoB,EACpB,sBAAsB,GAEvB,MAAM,uBAAuB,CAAC;AAI/B,MAAM,CAAC,MAAM,iCAAiC,GAAG,CAAC,CAAC,MAAM,CAAC;IACxD,KAAK,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACrD,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,0CAA0C,CAAC,KAAK,CAAC,YAAY;IAC3E,MAAM,EAAE,0CAA0C,CAAC,KAAK,CAAC,MAAM;IAC/D,UAAU,EAAE,0CAA0C,CAAC,KAAK,CAAC,UAAU;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,WAAW,EACvC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC,MAAM,EAAE,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  ExecutionHostConversationTurnRequestSchema,\n  ExecutionScopeSchema,\n  RuntimeSessionIdSchema,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport type { ExecutionAuthorityIssuer } from '../authority/index.js';\nimport type { ExecutionHost } from '../http-sse/index.js';\n\nexport const HostedConversationTurnInputSchema = z.object({\n  scope: ExecutionScopeSchema.omit({ adopterId: true }),\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: ExecutionHostConversationTurnRequestSchema.shape.invocationId,\n  prompt: ExecutionHostConversationTurnRequestSchema.shape.prompt,\n  deadlineAt: ExecutionHostConversationTurnRequestSchema.shape.deadlineAt,\n  signal: z.custom<AbortSignal>(\n    (value) => value instanceof AbortSignal,\n    'signal must be an AbortSignal',\n  ).optional(),\n}).strict();\n\nexport type HostedConversationTurnInput = z.infer<\n  typeof HostedConversationTurnInputSchema\n>;\n\nexport type HostedConversationCredentialContext = Pick<\n  HostedConversationTurnInput,\n  'scope' | 'invocationId' | 'signal'\n>;\n\n/** Resolves model authority without exposing it to HTTP or product data. */\nexport interface HostedModelCredentialProvider {\n  resolveModelApiKey(\n    context: HostedConversationCredentialContext,\n  ): Promise<string>;\n}\n\n/** @deprecated Use `HostedModelCredentialProvider`. */\nexport type HostedConversationModelCredentialProvider =\n  HostedModelCredentialProvider;\n\nexport interface HostedConversationTurnRunner {\n  streamTurn(\n    input: HostedConversationTurnInput,\n  ): AsyncIterable<ExecutionHostStreamEvent>;\n}\n\nexport type HostedConversationTurnServiceConfig = {\n  authority: ExecutionAuthorityIssuer;\n  executionHost: ExecutionHost;\n  modelCredentials: HostedModelCredentialProvider;\n  /** Omit this policy when the hosted workflow needs no product MCP tools. */\n  mcp?: {\n    allowedTools: readonly string[];\n  };\n};\n"]}

package/dist/coordinator/contracts.d.ts

@@ -0,0 +1,130 @@
+import { z } from 'zod';
+export declare const HOSTED_HEARTBEAT_COORDINATOR_PATHS: Readonly<{
+    tasks: "/v1/heartbeat/tasks";
+    pause: "/v1/control/pause";
+    resume: "/v1/control/resume";
+}>;
+export declare const HOSTED_HEARTBEAT_DELEGATIONS_PATH = "/hosted-execution/internal/heartbeat-delegations";
+export declare const HostedHeartbeatCoordinatorTaskInputSchema: z.ZodObject<{
+    workspaceId: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    task: z.ZodString;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    continuationMode: z.ZodOptional<z.ZodEnum<{
+        operator: "operator";
+        agent: "agent";
+    }>>;
+    intervalMs: z.ZodOptional<z.ZodNumber>;
+    defer: z.ZodOptional<z.ZodBoolean>;
+    model: z.ZodOptional<z.ZodString>;
+    maxSteps: z.ZodOptional<z.ZodNumber>;
+    searchIgnoreDirs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    systemContext: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export declare const HostedHeartbeatCoordinatorTaskSummarySchema: z.ZodObject<{
+    id: z.ZodString;
+    workspaceId: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+export declare const HostedHeartbeatCoordinatorTaskListSchema: z.ZodObject<{
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        workspaceId: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>;
+}, z.core.$strict>;
+export declare const HostedHeartbeatDesiredTaskSchema: z.ZodObject<{
+    taskId: z.ZodString;
+    input: z.ZodObject<{
+        workspaceId: z.ZodOptional<z.ZodString>;
+        name: z.ZodOptional<z.ZodString>;
+        task: z.ZodString;
+        enabled: z.ZodOptional<z.ZodBoolean>;
+        continuationMode: z.ZodOptional<z.ZodEnum<{
+            operator: "operator";
+            agent: "agent";
+        }>>;
+        intervalMs: z.ZodOptional<z.ZodNumber>;
+        defer: z.ZodOptional<z.ZodBoolean>;
+        model: z.ZodOptional<z.ZodString>;
+        maxSteps: z.ZodOptional<z.ZodNumber>;
+        searchIgnoreDirs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        systemContext: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const HostedHeartbeatDesiredTaskCatalogSchema: z.ZodObject<{
+    tasks: z.ZodArray<z.ZodObject<{
+        taskId: z.ZodString;
+        input: z.ZodObject<{
+            workspaceId: z.ZodOptional<z.ZodString>;
+            name: z.ZodOptional<z.ZodString>;
+            task: z.ZodString;
+            enabled: z.ZodOptional<z.ZodBoolean>;
+            continuationMode: z.ZodOptional<z.ZodEnum<{
+                operator: "operator";
+                agent: "agent";
+            }>>;
+            intervalMs: z.ZodOptional<z.ZodNumber>;
+            defer: z.ZodOptional<z.ZodBoolean>;
+            model: z.ZodOptional<z.ZodString>;
+            maxSteps: z.ZodOptional<z.ZodNumber>;
+            searchIgnoreDirs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            systemContext: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    resume: z.ZodBoolean;
+}, z.core.$strict>;
+export declare const HostedHeartbeatDelegationRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    taskId: z.ZodString;
+    executionId: z.ZodString;
+}, z.core.$strict>;
+export declare const HostedHeartbeatDelegationSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    taskId: z.ZodString;
+    executionId: z.ZodString;
+    scope: z.ZodObject<{
+        tenantId: z.ZodString;
+        subjectId: z.ZodString;
+        productSessionId: z.ZodString;
+    }, z.core.$strict>;
+    runtimeSessionId: z.ZodString;
+    deadlineAt: z.ZodISODateTime;
+    authority: z.ZodObject<{
+        metadata: z.ZodObject<{
+            scope: z.ZodObject<{
+                adopterId: z.ZodString;
+                tenantId: z.ZodString;
+                subjectId: z.ZodString;
+                productSessionId: z.ZodString;
+            }, z.core.$strict>;
+            runtimeSessionId: z.ZodString;
+            invocationId: z.ZodString;
+            workflow: z.ZodLiteral<"heartbeat-task">;
+            issuedAt: z.ZodISODateTime;
+            executionExpiresAt: z.ZodISODateTime;
+            mcp: z.ZodObject<{
+                capabilityId: z.ZodString;
+                serverId: z.ZodString;
+                allowedTools: z.ZodArray<z.ZodString>;
+                expiresAt: z.ZodISODateTime;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        executionAssertion: z.ZodString;
+        mcpCapability: z.ZodString;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const HostedHeartbeatDelegationAuthorizationSchema: z.ZodObject<{
+    scope: z.ZodObject<{
+        tenantId: z.ZodString;
+        subjectId: z.ZodString;
+        productSessionId: z.ZodString;
+    }, z.core.$strict>;
+    allowedTools: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type HostedHeartbeatCoordinatorTaskInput = z.infer<typeof HostedHeartbeatCoordinatorTaskInputSchema>;
+export type HostedHeartbeatCoordinatorTaskSummary = z.infer<typeof HostedHeartbeatCoordinatorTaskSummarySchema>;
+export type HostedHeartbeatDesiredTask = z.infer<typeof HostedHeartbeatDesiredTaskSchema>;
+export type HostedHeartbeatDesiredTaskCatalog = z.infer<typeof HostedHeartbeatDesiredTaskCatalogSchema>;
+export type HostedHeartbeatDelegationRequest = z.infer<typeof HostedHeartbeatDelegationRequestSchema>;
+export type HostedHeartbeatDelegation = z.infer<typeof HostedHeartbeatDelegationSchema>;
+export type HostedHeartbeatDelegationAuthorization = z.infer<typeof HostedHeartbeatDelegationAuthorizationSchema>;
+//# sourceMappingURL=contracts.d.ts.map

package/dist/coordinator/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/coordinator/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAexB,eAAO,MAAM,kCAAkC;;;;EAI7C,CAAC;AAEH,eAAO,MAAM,iCAAiC,qDACM,CAAC;AAErD,eAAO,MAAM,yCAAyC;;;;;;;;;;;;;;;kBAc3C,CAAC;AAEZ,eAAO,MAAM,2CAA2C;;;iBAGxC,CAAC;AAEjB,eAAO,MAAM,wCAAwC;;;;;kBAE1C,CAAC;AAEZ,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;kBAGlC,CAAC;AAEZ,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;;;;;;kBAelD,CAAC;AAEH,eAAO,MAAM,sCAAsC;;;;kBAIxC,CAAC;AAiBZ,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBA6B1C,CAAC;AAEH,eAAO,MAAM,4CAA4C;;;;;;;kBAG9C,CAAC;AAEZ,MAAM,MAAM,mCAAmC,GAAG,CAAC,CAAC,KAAK,CACvD,OAAO,yCAAyC,CACjD,CAAC;AACF,MAAM,MAAM,qCAAqC,GAAG,CAAC,CAAC,KAAK,CACzD,OAAO,2CAA2C,CACnD,CAAC;AACF,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAC9C,OAAO,gCAAgC,CACxC,CAAC;AACF,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CACrD,OAAO,uCAAuC,CAC/C,CAAC;AACF,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACpD,OAAO,sCAAsC,CAC9C,CAAC;AACF,MAAM,MAAM,yBAAyB,GAAG,CAAC,CAAC,KAAK,CAC7C,OAAO,+BAA+B,CACvC,CAAC;AACF,MAAM,MAAM,sCAAsC,GAAG,CAAC,CAAC,KAAK,CAC1D,OAAO,4CAA4C,CACpD,CAAC"}

package/dist/coordinator/contracts.js

@@ -0,0 +1,112 @@
+import { z } from 'zod';
+import { ExecutionScopeSchema, HEARTBEAT_TASK_WORKFLOW, McpAllowedToolsSchema, McpServerIdSchema, OpaqueIdSchema, RuntimeSessionIdSchema, TimestampSchema, } from '../contracts/index.js';
+const ProductExecutionScopeSchema = ExecutionScopeSchema.omit({
+    adopterId: true,
+});
+export const HOSTED_HEARTBEAT_COORDINATOR_PATHS = Object.freeze({
+    tasks: '/v1/heartbeat/tasks',
+    pause: '/v1/control/pause',
+    resume: '/v1/control/resume',
+});
+export const HOSTED_HEARTBEAT_DELEGATIONS_PATH = '/hosted-execution/internal/heartbeat-delegations';
+export const HostedHeartbeatCoordinatorTaskInputSchema = z.object({
+    workspaceId: OpaqueIdSchema.optional(),
+    name: z.string().trim().min(1).max(200).optional(),
+    task: z.string().trim().min(1).max(200_000),
+    enabled: z.boolean().optional(),
+    continuationMode: z.enum(['operator', 'agent']).optional(),
+    intervalMs: z.number().int().min(1_000).max(Number.MAX_SAFE_INTEGER)
+        .optional(),
+    defer: z.boolean().optional(),
+    model: z.string().trim().min(1).max(512).optional(),
+    maxSteps: z.number().int().positive().max(10_000).optional(),
+    searchIgnoreDirs: z.array(z.string().min(1).max(1_024)).max(1_000)
+        .optional(),
+    systemContext: z.string().max(200_000).optional(),
+}).strict();
+export const HostedHeartbeatCoordinatorTaskSummarySchema = z.object({
+    id: OpaqueIdSchema,
+    workspaceId: OpaqueIdSchema.optional(),
+}).passthrough();
+export const HostedHeartbeatCoordinatorTaskListSchema = z.object({
+    tasks: z.array(HostedHeartbeatCoordinatorTaskSummarySchema),
+}).strict();
+export const HostedHeartbeatDesiredTaskSchema = z.object({
+    taskId: OpaqueIdSchema,
+    input: HostedHeartbeatCoordinatorTaskInputSchema,
+}).strict();
+export const HostedHeartbeatDesiredTaskCatalogSchema = z.object({
+    tasks: z.array(HostedHeartbeatDesiredTaskSchema).max(10_000),
+    resume: z.boolean(),
+}).strict().superRefine(({ tasks }, context) => {
+    const seen = new Set();
+    tasks.forEach(({ taskId }, index) => {
+        if (seen.has(taskId)) {
+            context.addIssue({
+                code: 'custom',
+                path: ['tasks', index, 'taskId'],
+                message: 'must be unique within the desired task catalog',
+            });
+        }
+        seen.add(taskId);
+    });
+});
+export const HostedHeartbeatDelegationRequestSchema = z.object({
+    schemaVersion: z.literal(1),
+    taskId: OpaqueIdSchema,
+    executionId: OpaqueIdSchema,
+}).strict();
+const DelegatedAuthorityMetadataSchema = z.object({
+    scope: ExecutionScopeSchema,
+    runtimeSessionId: RuntimeSessionIdSchema,
+    invocationId: OpaqueIdSchema,
+    workflow: z.literal(HEARTBEAT_TASK_WORKFLOW),
+    issuedAt: TimestampSchema,
+    executionExpiresAt: TimestampSchema,
+    mcp: z.object({
+        capabilityId: OpaqueIdSchema,
+        serverId: McpServerIdSchema,
+        allowedTools: McpAllowedToolsSchema,
+        expiresAt: TimestampSchema,
+    }).strict(),
+}).strict();
+export const HostedHeartbeatDelegationSchema = z.object({
+    schemaVersion: z.literal(1),
+    taskId: OpaqueIdSchema,
+    executionId: OpaqueIdSchema,
+    scope: ProductExecutionScopeSchema,
+    runtimeSessionId: RuntimeSessionIdSchema,
+    deadlineAt: TimestampSchema,
+    authority: z.object({
+        metadata: DelegatedAuthorityMetadataSchema,
+        executionAssertion: z.string().min(1).max(16_384),
+        mcpCapability: z.string().min(1).max(16_384),
+    }).strict(),
+}).strict().superRefine((delegation, context) => {
+    const metadata = delegation.authority.metadata;
+    const mismatches = [
+        ['executionId', metadata.invocationId !== delegation.executionId],
+        [
+            'runtimeSessionId',
+            metadata.runtimeSessionId !== delegation.runtimeSessionId,
+        ],
+        ['scope', !sameProductScope(metadata.scope, delegation.scope)],
+    ];
+    mismatches
+        .filter(([, mismatched]) => mismatched)
+        .forEach(([path]) => context.addIssue({
+        code: 'custom',
+        path: [path],
+        message: 'must match the delegated execution authority metadata',
+    }));
+});
+export const HostedHeartbeatDelegationAuthorizationSchema = z.object({
+    scope: ProductExecutionScopeSchema,
+    allowedTools: McpAllowedToolsSchema,
+}).strict();
+function sameProductScope(left, right) {
+    return left.tenantId === right.tenantId
+        && left.subjectId === right.subjectId
+        && left.productSessionId === right.productSessionId;
+}
+//# sourceMappingURL=contracts.js.map

package/dist/coordinator/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../src/coordinator/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,iBAAiB,EACjB,cAAc,EACd,sBAAsB,EACtB,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,2BAA2B,GAAG,oBAAoB,CAAC,IAAI,CAAC;IAC5D,SAAS,EAAE,IAAI;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kCAAkC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9D,KAAK,EAAE,qBAAqB;IAC5B,KAAK,EAAE,mBAAmB;IAC1B,MAAM,EAAE,oBAAoB;CAC7B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iCAAiC,GAC5C,kDAAkD,CAAC;AAErD,MAAM,CAAC,MAAM,yCAAyC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChE,WAAW,EAAE,cAAc,CAAC,QAAQ,EAAE;IACtC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC3C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;SACjE,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACnD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;IAC5D,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;SAC/D,QAAQ,EAAE;IACb,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,2CAA2C,GAAG,CAAC,CAAC,MAAM,CAAC;IAClE,EAAE,EAAE,cAAc;IAClB,WAAW,EAAE,cAAc,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,WAAW,EAAE,CAAC;AAEjB,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,2CAA2C,CAAC;CAC5D,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,EAAE,cAAc;IACtB,KAAK,EAAE,yCAAyC;CACjD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9D,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;IAC5D,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE;IAC7C,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,QAAQ,CAAC;gBACf,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC;gBAChC,OAAO,EAAE,gDAAgD;aAC1D,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sCAAsC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7D,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,cAAc;IACtB,WAAW,EAAE,cAAc;CAC5B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,KAAK,EAAE,oBAAoB;IAC3B,gBAAgB,EAAE,sBAAsB;IACxC,YAAY,EAAE,cAAc;IAC5B,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC;IAC5C,QAAQ,EAAE,eAAe;IACzB,kBAAkB,EAAE,eAAe;IACnC,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,YAAY,EAAE,cAAc;QAC5B,QAAQ,EAAE,iBAAiB;QAC3B,YAAY,EAAE,qBAAqB;QACnC,SAAS,EAAE,eAAe;KAC3B,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,MAAM,EAAE,cAAc;IACtB,WAAW,EAAE,cAAc;IAC3B,KAAK,EAAE,2BAA2B;IAClC,gBAAgB,EAAE,sBAAsB;IACxC,UAAU,EAAE,eAAe;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,QAAQ,EAAE,gCAAgC;QAC1C,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;QACjD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC;KAC7C,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE;IAC9C,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC;IAC/C,MAAM,UAAU,GAA+C;QAC7D,CAAC,aAAa,EAAE,QAAQ,CAAC,YAAY,KAAK,UAAU,CAAC,WAAW,CAAC;QACjE;YACE,kBAAkB;YAClB,QAAQ,CAAC,gBAAgB,KAAK,UAAU,CAAC,gBAAgB;SAC1D;QACD,CAAC,OAAO,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;KAC/D,CAAC;IACF,UAAU;SACP,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC;SACtC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpC,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,CAAC,IAAI,CAAC;QACZ,OAAO,EAAE,uDAAuD;KACjE,CAAC,CAAC,CAAC;AACR,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,4CAA4C,GAAG,CAAC,CAAC,MAAM,CAAC;IACnE,KAAK,EAAE,2BAA2B;IAClC,YAAY,EAAE,qBAAqB;CACpC,CAAC,CAAC,MAAM,EAAE,CAAC;AAwBZ,SAAS,gBAAgB,CACvB,IAA0C,EAC1C,KAAkD;IAElD,OAAO,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;WAClC,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS;WAClC,IAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,CAAC;AACxD,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  ExecutionScopeSchema,\n  HEARTBEAT_TASK_WORKFLOW,\n  McpAllowedToolsSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n  TimestampSchema,\n} from '../contracts/index.js';\n\nconst ProductExecutionScopeSchema = ExecutionScopeSchema.omit({\n  adopterId: true,\n});\n\nexport const HOSTED_HEARTBEAT_COORDINATOR_PATHS = Object.freeze({\n  tasks: '/v1/heartbeat/tasks',\n  pause: '/v1/control/pause',\n  resume: '/v1/control/resume',\n});\n\nexport const HOSTED_HEARTBEAT_DELEGATIONS_PATH =\n  '/hosted-execution/internal/heartbeat-delegations';\n\nexport const HostedHeartbeatCoordinatorTaskInputSchema = z.object({\n  workspaceId: OpaqueIdSchema.optional(),\n  name: z.string().trim().min(1).max(200).optional(),\n  task: z.string().trim().min(1).max(200_000),\n  enabled: z.boolean().optional(),\n  continuationMode: z.enum(['operator', 'agent']).optional(),\n  intervalMs: z.number().int().min(1_000).max(Number.MAX_SAFE_INTEGER)\n    .optional(),\n  defer: z.boolean().optional(),\n  model: z.string().trim().min(1).max(512).optional(),\n  maxSteps: z.number().int().positive().max(10_000).optional(),\n  searchIgnoreDirs: z.array(z.string().min(1).max(1_024)).max(1_000)\n    .optional(),\n  systemContext: z.string().max(200_000).optional(),\n}).strict();\n\nexport const HostedHeartbeatCoordinatorTaskSummarySchema = z.object({\n  id: OpaqueIdSchema,\n  workspaceId: OpaqueIdSchema.optional(),\n}).passthrough();\n\nexport const HostedHeartbeatCoordinatorTaskListSchema = z.object({\n  tasks: z.array(HostedHeartbeatCoordinatorTaskSummarySchema),\n}).strict();\n\nexport const HostedHeartbeatDesiredTaskSchema = z.object({\n  taskId: OpaqueIdSchema,\n  input: HostedHeartbeatCoordinatorTaskInputSchema,\n}).strict();\n\nexport const HostedHeartbeatDesiredTaskCatalogSchema = z.object({\n  tasks: z.array(HostedHeartbeatDesiredTaskSchema).max(10_000),\n  resume: z.boolean(),\n}).strict().superRefine(({ tasks }, context) => {\n  const seen = new Set<string>();\n  tasks.forEach(({ taskId }, index) => {\n    if (seen.has(taskId)) {\n      context.addIssue({\n        code: 'custom',\n        path: ['tasks', index, 'taskId'],\n        message: 'must be unique within the desired task catalog',\n      });\n    }\n    seen.add(taskId);\n  });\n});\n\nexport const HostedHeartbeatDelegationRequestSchema = z.object({\n  schemaVersion: z.literal(1),\n  taskId: OpaqueIdSchema,\n  executionId: OpaqueIdSchema,\n}).strict();\n\nconst DelegatedAuthorityMetadataSchema = z.object({\n  scope: ExecutionScopeSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  invocationId: OpaqueIdSchema,\n  workflow: z.literal(HEARTBEAT_TASK_WORKFLOW),\n  issuedAt: TimestampSchema,\n  executionExpiresAt: TimestampSchema,\n  mcp: z.object({\n    capabilityId: OpaqueIdSchema,\n    serverId: McpServerIdSchema,\n    allowedTools: McpAllowedToolsSchema,\n    expiresAt: TimestampSchema,\n  }).strict(),\n}).strict();\n\nexport const HostedHeartbeatDelegationSchema = z.object({\n  schemaVersion: z.literal(1),\n  taskId: OpaqueIdSchema,\n  executionId: OpaqueIdSchema,\n  scope: ProductExecutionScopeSchema,\n  runtimeSessionId: RuntimeSessionIdSchema,\n  deadlineAt: TimestampSchema,\n  authority: z.object({\n    metadata: DelegatedAuthorityMetadataSchema,\n    executionAssertion: z.string().min(1).max(16_384),\n    mcpCapability: z.string().min(1).max(16_384),\n  }).strict(),\n}).strict().superRefine((delegation, context) => {\n  const metadata = delegation.authority.metadata;\n  const mismatches: Array<[path: string, mismatched: boolean]> = [\n    ['executionId', metadata.invocationId !== delegation.executionId],\n    [\n      'runtimeSessionId',\n      metadata.runtimeSessionId !== delegation.runtimeSessionId,\n    ],\n    ['scope', !sameProductScope(metadata.scope, delegation.scope)],\n  ];\n  mismatches\n    .filter(([, mismatched]) => mismatched)\n    .forEach(([path]) => context.addIssue({\n      code: 'custom',\n      path: [path],\n      message: 'must match the delegated execution authority metadata',\n    }));\n});\n\nexport const HostedHeartbeatDelegationAuthorizationSchema = z.object({\n  scope: ProductExecutionScopeSchema,\n  allowedTools: McpAllowedToolsSchema,\n}).strict();\n\nexport type HostedHeartbeatCoordinatorTaskInput = z.infer<\n  typeof HostedHeartbeatCoordinatorTaskInputSchema\n>;\nexport type HostedHeartbeatCoordinatorTaskSummary = z.infer<\n  typeof HostedHeartbeatCoordinatorTaskSummarySchema\n>;\nexport type HostedHeartbeatDesiredTask = z.infer<\n  typeof HostedHeartbeatDesiredTaskSchema\n>;\nexport type HostedHeartbeatDesiredTaskCatalog = z.infer<\n  typeof HostedHeartbeatDesiredTaskCatalogSchema\n>;\nexport type HostedHeartbeatDelegationRequest = z.infer<\n  typeof HostedHeartbeatDelegationRequestSchema\n>;\nexport type HostedHeartbeatDelegation = z.infer<\n  typeof HostedHeartbeatDelegationSchema\n>;\nexport type HostedHeartbeatDelegationAuthorization = z.infer<\n  typeof HostedHeartbeatDelegationAuthorizationSchema\n>;\n\nfunction sameProductScope(\n  left: z.infer<typeof ExecutionScopeSchema>,\n  right: z.infer<typeof ProductExecutionScopeSchema>,\n): boolean {\n  return left.tenantId === right.tenantId\n    && left.subjectId === right.subjectId\n    && left.productSessionId === right.productSessionId;\n}\n"]}

package/dist/coordinator/hosted-heartbeat-coordinator-client.d.ts

@@ -0,0 +1,20 @@
+import { type HostedHeartbeatCoordinatorTaskInput, type HostedHeartbeatCoordinatorTaskSummary } from './contracts.js';
+import type { HostedHeartbeatCoordinatorClientConfig, HostedHeartbeatCoordinatorTaskApi } from './types.js';
+export declare class HostedHeartbeatCoordinatorRequestError extends Error {
+    readonly method: string;
+    readonly path: string;
+    readonly status: number;
+    readonly name = "HostedHeartbeatCoordinatorRequestError";
+    constructor(method: string, path: string, status: number);
+}
+/** Authenticated desired-task and admission client for a Heddle Coordinator. */
+export declare class HostedHeartbeatCoordinatorClient implements HostedHeartbeatCoordinatorTaskApi {
+    #private;
+    constructor(config: HostedHeartbeatCoordinatorClientConfig);
+    listTasks(signal?: AbortSignal): Promise<HostedHeartbeatCoordinatorTaskSummary[]>;
+    upsertTask(rawTaskId: string, rawTask: HostedHeartbeatCoordinatorTaskInput, signal?: AbortSignal): Promise<void>;
+    deleteTask(rawTaskId: string, signal?: AbortSignal): Promise<void>;
+    pause(signal?: AbortSignal): Promise<void>;
+    resume(signal?: AbortSignal): Promise<void>;
+}
+//# sourceMappingURL=hosted-heartbeat-coordinator-client.d.ts.map

package/dist/coordinator/hosted-heartbeat-coordinator-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-heartbeat-coordinator-client.d.ts","sourceRoot":"","sources":["../../src/coordinator/hosted-heartbeat-coordinator-client.ts"],"names":[],"mappings":"AAKA,OAAO,EAIL,KAAK,mCAAmC,EACxC,KAAK,qCAAqC,EAC3C,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EACV,sCAAsC,EACtC,iCAAiC,EAClC,MAAM,YAAY,CAAC;AAOpB,qBAAa,sCAAuC,SAAQ,KAAK;IAI7D,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM;IALzB,QAAQ,CAAC,IAAI,4CAA4C;gBAG9C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM;CAI1B;AAED,gFAAgF;AAChF,qBAAa,gCACb,YAAW,iCAAiC;;gBAK9B,MAAM,EAAE,sCAAsC;IAQpD,SAAS,CACb,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,qCAAqC,EAAE,CAAC;IAU7C,UAAU,CACd,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,mCAAmC,EAC5C,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC;IAWV,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAOlE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1C,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;CA8BlD"}

package/dist/coordinator/hosted-heartbeat-coordinator-client.js

@@ -0,0 +1,77 @@
+import { z } from 'zod';
+import { OpaqueIdSchema, isSafeWebUrl, } from '../contracts/index.js';
+import { HOSTED_HEARTBEAT_COORDINATOR_PATHS, HostedHeartbeatCoordinatorTaskInputSchema, HostedHeartbeatCoordinatorTaskListSchema, } from './contracts.js';
+import { HostedHeartbeatServiceTokenSchema } from './service-token.js';
+const SafeBaseUrlSchema = z.custom((value) => value instanceof URL && isSafeWebUrl(value), 'baseUrl must be a safe HTTPS or loopback HTTP URL');
+export class HostedHeartbeatCoordinatorRequestError extends Error {
+    method;
+    path;
+    status;
+    name = 'HostedHeartbeatCoordinatorRequestError';
+    constructor(method, path, status) {
+        super(`Heddle Coordinator ${method} ${path} failed with status ${status}.`);
+        this.method = method;
+        this.path = path;
+        this.status = status;
+    }
+}
+/** Authenticated desired-task and admission client for a Heddle Coordinator. */
+export class HostedHeartbeatCoordinatorClient {
+    #baseUrl;
+    #authorization;
+    #fetch;
+    constructor(config) {
+        this.#baseUrl = new URL(SafeBaseUrlSchema.parse(config.baseUrl));
+        this.#authorization = `Bearer ${HostedHeartbeatServiceTokenSchema.parse(config.apiToken)}`;
+        this.#fetch = config.fetch ?? globalThis.fetch;
+    }
+    async listTasks(signal) {
+        const response = await this.#request(HOSTED_HEARTBEAT_COORDINATOR_PATHS.tasks, { method: 'GET', signal });
+        return HostedHeartbeatCoordinatorTaskListSchema.parse(await response.json()).tasks;
+    }
+    async upsertTask(rawTaskId, rawTask, signal) {
+        const taskId = OpaqueIdSchema.parse(rawTaskId);
+        const task = HostedHeartbeatCoordinatorTaskInputSchema.parse(rawTask);
+        await this.#request(this.#taskPath(taskId), {
+            method: 'PUT',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify(task),
+            signal,
+        });
+    }
+    async deleteTask(rawTaskId, signal) {
+        await this.#request(this.#taskPath(OpaqueIdSchema.parse(rawTaskId)), {
+            method: 'DELETE',
+            signal,
+        });
+    }
+    async pause(signal) {
+        await this.#request(HOSTED_HEARTBEAT_COORDINATOR_PATHS.pause, {
+            method: 'POST',
+            signal,
+        });
+    }
+    async resume(signal) {
+        await this.#request(HOSTED_HEARTBEAT_COORDINATOR_PATHS.resume, {
+            method: 'POST',
+            signal,
+        });
+    }
+    #taskPath(taskId) {
+        return `${HOSTED_HEARTBEAT_COORDINATOR_PATHS.tasks}/${encodeURIComponent(taskId)}`;
+    }
+    async #request(path, init) {
+        const headers = new Headers(init.headers);
+        headers.set('authorization', this.#authorization);
+        const response = await this.#fetch(new URL(path, this.#baseUrl), {
+            ...init,
+            headers,
+            redirect: 'error',
+        });
+        if (!response.ok) {
+            throw new HostedHeartbeatCoordinatorRequestError(init.method ?? 'GET', path, response.status);
+        }
+        return response;
+    }
+}
+//# sourceMappingURL=hosted-heartbeat-coordinator-client.js.map

package/dist/coordinator/hosted-heartbeat-coordinator-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosted-heartbeat-coordinator-client.js","sourceRoot":"","sources":["../../src/coordinator/hosted-heartbeat-coordinator-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kCAAkC,EAClC,yCAAyC,EACzC,wCAAwC,GAGzC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AAMvE,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,EACtD,mDAAmD,CACpD,CAAC;AAEF,MAAM,OAAO,sCAAuC,SAAQ,KAAK;IAIpD;IACA;IACA;IALF,IAAI,GAAG,wCAAwC,CAAC;IAEzD,YACW,MAAc,EACd,IAAY,EACZ,MAAc;QAEvB,KAAK,CAAC,sBAAsB,MAAM,IAAI,IAAI,uBAAuB,MAAM,GAAG,CAAC,CAAC;QAJnE,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;IAGzB,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,gCAAgC;IAElC,QAAQ,CAAM;IACd,cAAc,CAAS;IACvB,MAAM,CAA0B;IAEzC,YAAY,MAA8C;QACxD,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,cAAc,GAAG,UACpB,iCAAiC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CACzD,EAAE,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAClC,kCAAkC,CAAC,KAAK,EACxC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAC1B,CAAC;QACF,OAAO,wCAAwC,CAAC,KAAK,CACnD,MAAM,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC,KAAK,CAAC;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CACd,SAAiB,EACjB,OAA4C,EAC5C,MAAoB;QAEpB,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,yCAAyC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,MAAoB;QACtD,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE;YACnE,MAAM,EAAE,QAAQ;YAChB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAoB;QAC9B,MAAM,IAAI,CAAC,QAAQ,CAAC,kCAAkC,CAAC,KAAK,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,MAAM,IAAI,CAAC,QAAQ,CAAC,kCAAkC,CAAC,MAAM,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,OAAO,GAAG,kCAAkC,CAAC,KAAK,IAChD,kBAAkB,CAAC,MAAM,CAC3B,EAAE,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAiB;QAC5C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAC/D,GAAG,IAAI;YACP,OAAO;YACP,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,sCAAsC,CAC9C,IAAI,CAAC,MAAM,IAAI,KAAK,EACpB,IAAI,EACJ,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF","sourcesContent":["import { z } from 'zod';\nimport {\n  OpaqueIdSchema,\n  isSafeWebUrl,\n} from '../contracts/index.js';\nimport {\n  HOSTED_HEARTBEAT_COORDINATOR_PATHS,\n  HostedHeartbeatCoordinatorTaskInputSchema,\n  HostedHeartbeatCoordinatorTaskListSchema,\n  type HostedHeartbeatCoordinatorTaskInput,\n  type HostedHeartbeatCoordinatorTaskSummary,\n} from './contracts.js';\nimport { HostedHeartbeatServiceTokenSchema } from './service-token.js';\nimport type {\n  HostedHeartbeatCoordinatorClientConfig,\n  HostedHeartbeatCoordinatorTaskApi,\n} from './types.js';\n\nconst SafeBaseUrlSchema = z.custom<URL>(\n  (value) => value instanceof URL && isSafeWebUrl(value),\n  'baseUrl must be a safe HTTPS or loopback HTTP URL',\n);\n\nexport class HostedHeartbeatCoordinatorRequestError extends Error {\n  readonly name = 'HostedHeartbeatCoordinatorRequestError';\n\n  constructor(\n    readonly method: string,\n    readonly path: string,\n    readonly status: number,\n  ) {\n    super(`Heddle Coordinator ${method} ${path} failed with status ${status}.`);\n  }\n}\n\n/** Authenticated desired-task and admission client for a Heddle Coordinator. */\nexport class HostedHeartbeatCoordinatorClient\nimplements HostedHeartbeatCoordinatorTaskApi {\n  readonly #baseUrl: URL;\n  readonly #authorization: string;\n  readonly #fetch: typeof globalThis.fetch;\n\n  constructor(config: HostedHeartbeatCoordinatorClientConfig) {\n    this.#baseUrl = new URL(SafeBaseUrlSchema.parse(config.baseUrl));\n    this.#authorization = `Bearer ${\n      HostedHeartbeatServiceTokenSchema.parse(config.apiToken)\n    }`;\n    this.#fetch = config.fetch ?? globalThis.fetch;\n  }\n\n  async listTasks(\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatCoordinatorTaskSummary[]> {\n    const response = await this.#request(\n      HOSTED_HEARTBEAT_COORDINATOR_PATHS.tasks,\n      { method: 'GET', signal },\n    );\n    return HostedHeartbeatCoordinatorTaskListSchema.parse(\n      await response.json(),\n    ).tasks;\n  }\n\n  async upsertTask(\n    rawTaskId: string,\n    rawTask: HostedHeartbeatCoordinatorTaskInput,\n    signal?: AbortSignal,\n  ): Promise<void> {\n    const taskId = OpaqueIdSchema.parse(rawTaskId);\n    const task = HostedHeartbeatCoordinatorTaskInputSchema.parse(rawTask);\n    await this.#request(this.#taskPath(taskId), {\n      method: 'PUT',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify(task),\n      signal,\n    });\n  }\n\n  async deleteTask(rawTaskId: string, signal?: AbortSignal): Promise<void> {\n    await this.#request(this.#taskPath(OpaqueIdSchema.parse(rawTaskId)), {\n      method: 'DELETE',\n      signal,\n    });\n  }\n\n  async pause(signal?: AbortSignal): Promise<void> {\n    await this.#request(HOSTED_HEARTBEAT_COORDINATOR_PATHS.pause, {\n      method: 'POST',\n      signal,\n    });\n  }\n\n  async resume(signal?: AbortSignal): Promise<void> {\n    await this.#request(HOSTED_HEARTBEAT_COORDINATOR_PATHS.resume, {\n      method: 'POST',\n      signal,\n    });\n  }\n\n  #taskPath(taskId: string): string {\n    return `${HOSTED_HEARTBEAT_COORDINATOR_PATHS.tasks}/${\n      encodeURIComponent(taskId)\n    }`;\n  }\n\n  async #request(path: string, init: RequestInit): Promise<Response> {\n    const headers = new Headers(init.headers);\n    headers.set('authorization', this.#authorization);\n    const response = await this.#fetch(new URL(path, this.#baseUrl), {\n      ...init,\n      headers,\n      redirect: 'error',\n    });\n    if (!response.ok) {\n      throw new HostedHeartbeatCoordinatorRequestError(\n        init.method ?? 'GET',\n        path,\n        response.status,\n      );\n    }\n    return response;\n  }\n}\n"]}