@heddleagent/execution-host-client 6.4.0 → 6.6.0

package/dist/coordinator/hosted-heartbeat-coordinator-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-heartbeat-coordinator-client.js","sourceRoot":"","sources":["../../src/coordinator/hosted-heartbeat-coordinator-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kCAAkC,EAClC,yCAAyC,EACzC,wCAAwC,GAGzC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AAMvE,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,EACtD,mDAAmD,CACpD,CAAC;AAEF,MAAM,OAAO,sCAAuC,SAAQ,KAAK;IAIpD;IACA;IACA;IALF,IAAI,GAAG,wCAAwC,CAAC;IAEzD,YACW,MAAc,EACd,IAAY,EACZ,MAAc;QAEvB,KAAK,CAAC,sBAAsB,MAAM,IAAI,IAAI,uBAAuB,MAAM,GAAG,CAAC,CAAC;QAJnE,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;IAGzB,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,gCAAgC;IAElC,QAAQ,CAAM;IACd,cAAc,CAAS;IACvB,MAAM,CAA0B;IAEzC,YAAY,MAA8C;QACxD,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,cAAc,GAAG,UACpB,iCAAiC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CACzD,EAAE,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAClC,kCAAkC,CAAC,KAAK,EACxC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAC1B,CAAC;QACF,OAAO,wCAAwC,CAAC,KAAK,CACnD,MAAM,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC,KAAK,CAAC;IACV,CAAC;IAED,KAAK,CAAC,UAAU,CACd,SAAiB,EACjB,OAA4C,EAC5C,MAAoB;QAEpB,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,yCAAyC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,MAAoB;QACtD,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE;YACnE,MAAM,EAAE,QAAQ;YAChB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAoB;QAC9B,MAAM,IAAI,CAAC,QAAQ,CAAC,kCAAkC,CAAC,KAAK,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,MAAM,IAAI,CAAC,QAAQ,CAAC,kCAAkC,CAAC,MAAM,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,OAAO,GAAG,kCAAkC,CAAC,KAAK,IAChD,kBAAkB,CAAC,MAAM,CAC3B,EAAE,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAiB;QAC5C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAC/D,GAAG,IAAI;YACP,OAAO;YACP,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,sCAAsC,CAC9C,IAAI,CAAC,MAAM,IAAI,KAAK,EACpB,IAAI,EACJ,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF","sourcesContent":["import { z } from 'zod';\nimport {\n  OpaqueIdSchema,\n  isSafeWebUrl,\n} from '../contracts/index.js';\nimport {\n  HOSTED_HEARTBEAT_COORDINATOR_PATHS,\n  HostedHeartbeatCoordinatorTaskInputSchema,\n  HostedHeartbeatCoordinatorTaskListSchema,\n  type HostedHeartbeatCoordinatorTaskInput,\n  type HostedHeartbeatCoordinatorTaskSummary,\n} from './contracts.js';\nimport { HostedHeartbeatServiceTokenSchema } from './service-token.js';\nimport type {\n  HostedHeartbeatCoordinatorClientConfig,\n  HostedHeartbeatCoordinatorTaskApi,\n} from './types.js';\n\nconst SafeBaseUrlSchema = z.custom<URL>(\n  (value) => value instanceof URL && isSafeWebUrl(value),\n  'baseUrl must be a safe HTTPS or loopback HTTP URL',\n);\n\nexport class HostedHeartbeatCoordinatorRequestError extends Error {\n  readonly name = 'HostedHeartbeatCoordinatorRequestError';\n\n  constructor(\n    readonly method: string,\n    readonly path: string,\n    readonly status: number,\n  ) {\n    super(`Heddle Coordinator ${method} ${path} failed with status ${status}.`);\n  }\n}\n\n/** Authenticated desired-task and admission client for a Heddle Coordinator. */\nexport class HostedHeartbeatCoordinatorClient\nimplements HostedHeartbeatCoordinatorTaskApi {\n  readonly #baseUrl: URL;\n  readonly #authorization: string;\n  readonly #fetch: typeof globalThis.fetch;\n\n  constructor(config: HostedHeartbeatCoordinatorClientConfig) {\n    this.#baseUrl = new URL(SafeBaseUrlSchema.parse(config.baseUrl));\n    this.#authorization = `Bearer ${\n      HostedHeartbeatServiceTokenSchema.parse(config.apiToken)\n    }`;\n    this.#fetch = config.fetch ?? globalThis.fetch;\n  }\n\n  async listTasks(\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatCoordinatorTaskSummary[]> {\n    const response = await this.#request(\n      HOSTED_HEARTBEAT_COORDINATOR_PATHS.tasks,\n      { method: 'GET', signal },\n    );\n    return HostedHeartbeatCoordinatorTaskListSchema.parse(\n      await response.json(),\n    ).tasks;\n  }\n\n  async upsertTask(\n    rawTaskId: string,\n    rawTask: HostedHeartbeatCoordinatorTaskInput,\n    signal?: AbortSignal,\n  ): Promise<void> {\n    const taskId = OpaqueIdSchema.parse(rawTaskId);\n    const task = HostedHeartbeatCoordinatorTaskInputSchema.parse(rawTask);\n    await this.#request(this.#taskPath(taskId), {\n      method: 'PUT',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify(task),\n      signal,\n    });\n  }\n\n  async deleteTask(rawTaskId: string, signal?: AbortSignal): Promise<void> {\n    await this.#request(this.#taskPath(OpaqueIdSchema.parse(rawTaskId)), {\n      method: 'DELETE',\n      signal,\n    });\n  }\n\n  async pause(signal?: AbortSignal): Promise<void> {\n    await this.#request(HOSTED_HEARTBEAT_COORDINATOR_PATHS.pause, {\n      method: 'POST',\n      signal,\n    });\n  }\n\n  async resume(signal?: AbortSignal): Promise<void> {\n    await this.#request(HOSTED_HEARTBEAT_COORDINATOR_PATHS.resume, {\n      method: 'POST',\n      signal,\n    });\n  }\n\n  #taskPath(taskId: string): string {\n    return `${HOSTED_HEARTBEAT_COORDINATOR_PATHS.tasks}/${\n      encodeURIComponent(taskId)\n    }`;\n  }\n\n  async #request(path: string, init: RequestInit): Promise<Response> {\n    const headers = new Headers(init.headers);\n    headers.set('authorization', this.#authorization);\n    const response = await this.#fetch(new URL(path, this.#baseUrl), {\n      ...init,\n      headers,\n      redirect: 'error',\n    });\n    if (!response.ok) {\n      throw new HostedHeartbeatCoordinatorRequestError(\n        init.method ?? 'GET',\n        path,\n        response.status,\n      );\n    }\n    return response;\n  }\n}\n"]}
+{"version":3,"file":"hosted-heartbeat-coordinator-client.js","sourceRoot":"","sources":["../../src/coordinator/hosted-heartbeat-coordinator-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,kCAAkC,EAClC,6CAA6C,EAC7C,0CAA0C,EAC1C,yCAAyC,EACzC,wCAAwC,EACxC,wCAAwC,GAKzC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iCAAiC,EAAE,MAAM,oBAAoB,CAAC;AAMvE,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,GAAG,IAAI,YAAY,CAAC,KAAK,CAAC,EACtD,mDAAmD,CACpD,CAAC;AAEF,MAAM,OAAO,sCAAuC,SAAQ,KAAK;IAIpD;IACA;IACA;IALF,IAAI,GAAG,wCAAwC,CAAC;IAEzD,YACW,MAAc,EACd,IAAY,EACZ,MAAc;QAEvB,KAAK,CAAC,sBAAsB,MAAM,IAAI,IAAI,uBAAuB,MAAM,GAAG,CAAC,CAAC;QAJnE,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QACZ,WAAM,GAAN,MAAM,CAAQ;IAGzB,CAAC;CACF;AAED,gFAAgF;AAChF,MAAM,OAAO,gCAAgC;IAElC,QAAQ,CAAM;IACd,cAAc,CAAS;IACvB,MAAM,CAA0B;IAEzC,YAAY,MAA8C;QACxD,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,cAAc,GAAG,UACpB,iCAAiC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CACzD,EAAE,CAAC;QACH,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAClC,kCAAkC,CAAC,KAAK,EACxC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAC1B,CAAC;QACF,OAAO,6CAA6C,CAAC,KAAK,CACxD,MAAM,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC,KAAK,CAAC;IACV,CAAC;IAED,KAAK,CAAC,SAAS,CACb,MAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAClC,kCAAkC,CAAC,KAAK,EACxC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAC1B,CAAC;QACF,OAAO,wCAAwC,CAAC,KAAK,CACnD,MAAM,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC,KAAK,CAAC;IACV,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAiB,EACjB,MAAoB;QAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAClC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAC/C,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAC1B,CAAC;QACF,OAAO,0CAA0C,CAAC,KAAK,CACrD,MAAM,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,UAAU,CACd,SAAiB,EACjB,OAA4C,EAC5C,MAAoB;QAEpB,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,yCAAyC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtE,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;YAC1C,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB,EAAE,MAAoB;QACtD,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE;YACnE,MAAM,EAAE,QAAQ;YAChB,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,MAAoB;QAEpB,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC;QACjD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,OAAO,wCAAwC,CAAC,KAAK,CACnD,MAAM,QAAQ,CAAC,IAAI,EAAE,CACtB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAoB;QAC9B,MAAM,IAAI,CAAC,QAAQ,CAAC,kCAAkC,CAAC,KAAK,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAoB;QAC/B,MAAM,IAAI,CAAC,QAAQ,CAAC,kCAAkC,CAAC,MAAM,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,MAAoB;QAC9B,MAAM,IAAI,CAAC,QAAQ,CAAC,kCAAkC,CAAC,KAAK,EAAE;YAC5D,MAAM,EAAE,MAAM;YACd,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IAED,SAAS,CAAC,MAAc;QACtB,OAAO,GAAG,kCAAkC,CAAC,KAAK,IAChD,kBAAkB,CAAC,MAAM,CAC3B,EAAE,CAAC;IACL,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAAiB;QAC5C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAC/D,GAAG,IAAI;YACP,OAAO;YACP,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,sCAAsC,CAC9C,IAAI,CAAC,MAAM,IAAI,KAAK,EACpB,IAAI,EACJ,QAAQ,CAAC,MAAM,CAChB,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;CACF","sourcesContent":["import { z } from 'zod';\nimport {\n  OpaqueIdSchema,\n  isSafeWebUrl,\n} from '../contracts/index.js';\nimport {\n  HOSTED_HEARTBEAT_COORDINATOR_PATHS,\n  HostedHeartbeatCoordinatorStateResponseSchema,\n  HostedHeartbeatCoordinatorTaskDetailSchema,\n  HostedHeartbeatCoordinatorTaskInputSchema,\n  HostedHeartbeatCoordinatorTaskListSchema,\n  HostedHeartbeatCoordinatorTaskViewSchema,\n  type HostedHeartbeatCoordinatorTaskInput,\n  type HostedHeartbeatCoordinatorState,\n  type HostedHeartbeatCoordinatorTaskDetail,\n  type HostedHeartbeatCoordinatorTaskView,\n} from './contracts.js';\nimport { HostedHeartbeatServiceTokenSchema } from './service-token.js';\nimport type {\n  HostedHeartbeatCoordinatorClientConfig,\n  HostedHeartbeatCoordinatorTaskApi,\n} from './types.js';\n\nconst SafeBaseUrlSchema = z.custom<URL>(\n  (value) => value instanceof URL && isSafeWebUrl(value),\n  'baseUrl must be a safe HTTPS or loopback HTTP URL',\n);\n\nexport class HostedHeartbeatCoordinatorRequestError extends Error {\n  readonly name = 'HostedHeartbeatCoordinatorRequestError';\n\n  constructor(\n    readonly method: string,\n    readonly path: string,\n    readonly status: number,\n  ) {\n    super(`Heddle Coordinator ${method} ${path} failed with status ${status}.`);\n  }\n}\n\n/** Authenticated desired-task and admission client for a Heddle Coordinator. */\nexport class HostedHeartbeatCoordinatorClient\nimplements HostedHeartbeatCoordinatorTaskApi {\n  readonly #baseUrl: URL;\n  readonly #authorization: string;\n  readonly #fetch: typeof globalThis.fetch;\n\n  constructor(config: HostedHeartbeatCoordinatorClientConfig) {\n    this.#baseUrl = new URL(SafeBaseUrlSchema.parse(config.baseUrl));\n    this.#authorization = `Bearer ${\n      HostedHeartbeatServiceTokenSchema.parse(config.apiToken)\n    }`;\n    this.#fetch = config.fetch ?? globalThis.fetch;\n  }\n\n  async readState(\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatCoordinatorState> {\n    const response = await this.#request(\n      HOSTED_HEARTBEAT_COORDINATOR_PATHS.state,\n      { method: 'GET', signal },\n    );\n    return HostedHeartbeatCoordinatorStateResponseSchema.parse(\n      await response.json(),\n    ).state;\n  }\n\n  async listTasks(\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatCoordinatorTaskView[]> {\n    const response = await this.#request(\n      HOSTED_HEARTBEAT_COORDINATOR_PATHS.tasks,\n      { method: 'GET', signal },\n    );\n    return HostedHeartbeatCoordinatorTaskListSchema.parse(\n      await response.json(),\n    ).tasks;\n  }\n\n  async readTask(\n    rawTaskId: string,\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatCoordinatorTaskDetail> {\n    const response = await this.#request(\n      this.#taskPath(OpaqueIdSchema.parse(rawTaskId)),\n      { method: 'GET', signal },\n    );\n    return HostedHeartbeatCoordinatorTaskDetailSchema.parse(\n      await response.json(),\n    );\n  }\n\n  async upsertTask(\n    rawTaskId: string,\n    rawTask: HostedHeartbeatCoordinatorTaskInput,\n    signal?: AbortSignal,\n  ): Promise<void> {\n    const taskId = OpaqueIdSchema.parse(rawTaskId);\n    const task = HostedHeartbeatCoordinatorTaskInputSchema.parse(rawTask);\n    await this.#request(this.#taskPath(taskId), {\n      method: 'PUT',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify(task),\n      signal,\n    });\n  }\n\n  async deleteTask(rawTaskId: string, signal?: AbortSignal): Promise<void> {\n    await this.#request(this.#taskPath(OpaqueIdSchema.parse(rawTaskId)), {\n      method: 'DELETE',\n      signal,\n    });\n  }\n\n  async triggerTask(\n    rawTaskId: string,\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatCoordinatorTaskView> {\n    const taskId = OpaqueIdSchema.parse(rawTaskId);\n    const path = `${this.#taskPath(taskId)}/trigger`;\n    const response = await this.#request(path, { method: 'POST', signal });\n    return HostedHeartbeatCoordinatorTaskViewSchema.parse(\n      await response.json(),\n    );\n  }\n\n  async pause(signal?: AbortSignal): Promise<void> {\n    await this.#request(HOSTED_HEARTBEAT_COORDINATOR_PATHS.pause, {\n      method: 'POST',\n      signal,\n    });\n  }\n\n  async resume(signal?: AbortSignal): Promise<void> {\n    await this.#request(HOSTED_HEARTBEAT_COORDINATOR_PATHS.resume, {\n      method: 'POST',\n      signal,\n    });\n  }\n\n  async drain(signal?: AbortSignal): Promise<void> {\n    await this.#request(HOSTED_HEARTBEAT_COORDINATOR_PATHS.drain, {\n      method: 'POST',\n      signal,\n    });\n  }\n\n  #taskPath(taskId: string): string {\n    return `${HOSTED_HEARTBEAT_COORDINATOR_PATHS.tasks}/${\n      encodeURIComponent(taskId)\n    }`;\n  }\n\n  async #request(path: string, init: RequestInit): Promise<Response> {\n    const headers = new Headers(init.headers);\n    headers.set('authorization', this.#authorization);\n    const response = await this.#fetch(new URL(path, this.#baseUrl), {\n      ...init,\n      headers,\n      redirect: 'error',\n    });\n    if (!response.ok) {\n      throw new HostedHeartbeatCoordinatorRequestError(\n        init.method ?? 'GET',\n        path,\n        response.status,\n      );\n    }\n    return response;\n  }\n}\n"]}

package/dist/coordinator/index.d.ts

@@ -1,5 +1,5 @@
-export { HOSTED_HEARTBEAT_COORDINATOR_PATHS, HOSTED_HEARTBEAT_DELEGATIONS_PATH, HostedHeartbeatCoordinatorTaskInputSchema, HostedHeartbeatCoordinatorTaskListSchema, HostedHeartbeatCoordinatorTaskSummarySchema, HostedHeartbeatDelegationAuthorizationSchema, HostedHeartbeatDelegationRequestSchema, HostedHeartbeatDelegationSchema, HostedHeartbeatDesiredTaskCatalogSchema, HostedHeartbeatDesiredTaskSchema, } from './contracts.js';
-export type { HostedHeartbeatCoordinatorTaskInput, HostedHeartbeatCoordinatorTaskSummary, HostedHeartbeatDelegation, HostedHeartbeatDelegationAuthorization, HostedHeartbeatDelegationRequest, HostedHeartbeatDesiredTask, HostedHeartbeatDesiredTaskCatalog, } from './contracts.js';
+export { HOSTED_HEARTBEAT_COORDINATOR_PATHS, HOSTED_HEARTBEAT_DELEGATIONS_PATH, HostedHeartbeatCoordinatorRunViewSchema, HostedHeartbeatCoordinatorStateResponseSchema, HostedHeartbeatCoordinatorStateSchema, HostedHeartbeatCoordinatorTaskDetailSchema, HostedHeartbeatCoordinatorTaskInputSchema, HostedHeartbeatCoordinatorTaskListSchema, HostedHeartbeatCoordinatorTaskResultSchema, HostedHeartbeatCoordinatorTaskStatusSchema, HostedHeartbeatCoordinatorTaskViewSchema, HostedHeartbeatDelegationAuthorizationSchema, HostedHeartbeatDelegationRequestSchema, HostedHeartbeatDelegationSchema, HostedHeartbeatDesiredTaskCatalogSchema, HostedHeartbeatDesiredTaskSchema, } from './contracts.js';
+export type { HostedHeartbeatCoordinatorTaskInput, HostedHeartbeatCoordinatorRunView, HostedHeartbeatCoordinatorState, HostedHeartbeatCoordinatorTaskDetail, HostedHeartbeatCoordinatorTaskView, HostedHeartbeatDelegation, HostedHeartbeatDelegationAuthorization, HostedHeartbeatDelegationRequest, HostedHeartbeatDesiredTask, HostedHeartbeatDesiredTaskCatalog, } from './contracts.js';
 export { HostedHeartbeatCoordinatorClient, HostedHeartbeatCoordinatorRequestError, } from './hosted-heartbeat-coordinator-client.js';
 export { HostedHeartbeatDelegatedExecutionTransport, HostedHeartbeatDelegationClient, HostedHeartbeatDelegationRequestError, } from './hosted-heartbeat-delegation-client.js';
 export { HostedHeartbeatDelegationRejectedError, HostedHeartbeatDelegationService, } from './hosted-heartbeat-delegation-service.js';

package/dist/coordinator/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/coordinator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,iCAAiC,EACjC,yCAAyC,EACzC,wCAAwC,EACxC,2CAA2C,EAC3C,4CAA4C,EAC5C,sCAAsC,EACtC,+BAA+B,EAC/B,uCAAuC,EACvC,gCAAgC,GACjC,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,mCAAmC,EACnC,qCAAqC,EACrC,yBAAyB,EACzB,sCAAsC,EACtC,gCAAgC,EAChC,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,0CAA0C,EAC1C,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,sCAAsC,EACtC,gCAAgC,GACjC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,YAAY,EACV,sCAAsC,EACtC,iCAAiC,EACjC,gDAAgD,EAChD,8CAA8C,EAC9C,2CAA2C,EAC3C,mCAAmC,EACnC,qCAAqC,EACrC,+BAA+B,EAC/B,sCAAsC,EACtC,mCAAmC,EACnC,iCAAiC,EACjC,sCAAsC,GACvC,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/coordinator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,iCAAiC,EACjC,uCAAuC,EACvC,6CAA6C,EAC7C,qCAAqC,EACrC,0CAA0C,EAC1C,yCAAyC,EACzC,wCAAwC,EACxC,0CAA0C,EAC1C,0CAA0C,EAC1C,wCAAwC,EACxC,4CAA4C,EAC5C,sCAAsC,EACtC,+BAA+B,EAC/B,uCAAuC,EACvC,gCAAgC,GACjC,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,mCAAmC,EACnC,iCAAiC,EACjC,+BAA+B,EAC/B,oCAAoC,EACpC,kCAAkC,EAClC,yBAAyB,EACzB,sCAAsC,EACtC,gCAAgC,EAChC,0BAA0B,EAC1B,iCAAiC,GAClC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,0CAA0C,EAC1C,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,sCAAsC,EACtC,gCAAgC,GACjC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACpE,YAAY,EACV,sCAAsC,EACtC,iCAAiC,EACjC,gDAAgD,EAChD,8CAA8C,EAC9C,2CAA2C,EAC3C,mCAAmC,EACnC,qCAAqC,EACrC,+BAA+B,EAC/B,sCAAsC,EACtC,mCAAmC,EACnC,iCAAiC,EACjC,sCAAsC,GACvC,MAAM,YAAY,CAAC"}

package/dist/coordinator/index.js

@@ -1,4 +1,4 @@
-export { HOSTED_HEARTBEAT_COORDINATOR_PATHS, HOSTED_HEARTBEAT_DELEGATIONS_PATH, HostedHeartbeatCoordinatorTaskInputSchema, HostedHeartbeatCoordinatorTaskListSchema, HostedHeartbeatCoordinatorTaskSummarySchema, HostedHeartbeatDelegationAuthorizationSchema, HostedHeartbeatDelegationRequestSchema, HostedHeartbeatDelegationSchema, HostedHeartbeatDesiredTaskCatalogSchema, HostedHeartbeatDesiredTaskSchema, } from './contracts.js';
+export { HOSTED_HEARTBEAT_COORDINATOR_PATHS, HOSTED_HEARTBEAT_DELEGATIONS_PATH, HostedHeartbeatCoordinatorRunViewSchema, HostedHeartbeatCoordinatorStateResponseSchema, HostedHeartbeatCoordinatorStateSchema, HostedHeartbeatCoordinatorTaskDetailSchema, HostedHeartbeatCoordinatorTaskInputSchema, HostedHeartbeatCoordinatorTaskListSchema, HostedHeartbeatCoordinatorTaskResultSchema, HostedHeartbeatCoordinatorTaskStatusSchema, HostedHeartbeatCoordinatorTaskViewSchema, HostedHeartbeatDelegationAuthorizationSchema, HostedHeartbeatDelegationRequestSchema, HostedHeartbeatDelegationSchema, HostedHeartbeatDesiredTaskCatalogSchema, HostedHeartbeatDesiredTaskSchema, } from './contracts.js';
 export { HostedHeartbeatCoordinatorClient, HostedHeartbeatCoordinatorRequestError, } from './hosted-heartbeat-coordinator-client.js';
 export { HostedHeartbeatDelegatedExecutionTransport, HostedHeartbeatDelegationClient, HostedHeartbeatDelegationRequestError, } from './hosted-heartbeat-delegation-client.js';
 export { HostedHeartbeatDelegationRejectedError, HostedHeartbeatDelegationService, } from './hosted-heartbeat-delegation-service.js';

package/dist/coordinator/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/coordinator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,iCAAiC,EACjC,yCAAyC,EACzC,wCAAwC,EACxC,2CAA2C,EAC3C,4CAA4C,EAC5C,sCAAsC,EACtC,+BAA+B,EAC/B,uCAAuC,EACvC,gCAAgC,GACjC,MAAM,gBAAgB,CAAC;AAUxB,OAAO,EACL,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,0CAA0C,EAC1C,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,sCAAsC,EACtC,gCAAgC,GACjC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC","sourcesContent":["export {\n  HOSTED_HEARTBEAT_COORDINATOR_PATHS,\n  HOSTED_HEARTBEAT_DELEGATIONS_PATH,\n  HostedHeartbeatCoordinatorTaskInputSchema,\n  HostedHeartbeatCoordinatorTaskListSchema,\n  HostedHeartbeatCoordinatorTaskSummarySchema,\n  HostedHeartbeatDelegationAuthorizationSchema,\n  HostedHeartbeatDelegationRequestSchema,\n  HostedHeartbeatDelegationSchema,\n  HostedHeartbeatDesiredTaskCatalogSchema,\n  HostedHeartbeatDesiredTaskSchema,\n} from './contracts.js';\nexport type {\n  HostedHeartbeatCoordinatorTaskInput,\n  HostedHeartbeatCoordinatorTaskSummary,\n  HostedHeartbeatDelegation,\n  HostedHeartbeatDelegationAuthorization,\n  HostedHeartbeatDelegationRequest,\n  HostedHeartbeatDesiredTask,\n  HostedHeartbeatDesiredTaskCatalog,\n} from './contracts.js';\nexport {\n  HostedHeartbeatCoordinatorClient,\n  HostedHeartbeatCoordinatorRequestError,\n} from './hosted-heartbeat-coordinator-client.js';\nexport {\n  HostedHeartbeatDelegatedExecutionTransport,\n  HostedHeartbeatDelegationClient,\n  HostedHeartbeatDelegationRequestError,\n} from './hosted-heartbeat-delegation-client.js';\nexport {\n  HostedHeartbeatDelegationRejectedError,\n  HostedHeartbeatDelegationService,\n} from './hosted-heartbeat-delegation-service.js';\nexport { HostedHeartbeatTaskReconciler } from './hosted-heartbeat-task-reconciler.js';\nexport { createHostedRuntimeSessionId } from './runtime-session.js';\nexport type {\n  HostedHeartbeatCoordinatorClientConfig,\n  HostedHeartbeatCoordinatorTaskApi,\n  HostedHeartbeatDelegatedExecutionTransportConfig,\n  HostedHeartbeatDelegatedExecutionTransportPort,\n  HostedHeartbeatDelegationAuthorizationInput,\n  HostedHeartbeatDelegationAuthorizer,\n  HostedHeartbeatDelegationClientConfig,\n  HostedHeartbeatDelegationIssuer,\n  HostedHeartbeatDelegationServiceConfig,\n  HostedHeartbeatTaskReconcilerConfig,\n  HostedHeartbeatTaskReconciliation,\n  HostedHeartbeatTaskReconciliationInput,\n} from './types.js';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/coordinator/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,iCAAiC,EACjC,uCAAuC,EACvC,6CAA6C,EAC7C,qCAAqC,EACrC,0CAA0C,EAC1C,yCAAyC,EACzC,wCAAwC,EACxC,0CAA0C,EAC1C,0CAA0C,EAC1C,wCAAwC,EACxC,4CAA4C,EAC5C,sCAAsC,EACtC,+BAA+B,EAC/B,uCAAuC,EACvC,gCAAgC,GACjC,MAAM,gBAAgB,CAAC;AAaxB,OAAO,EACL,gCAAgC,EAChC,sCAAsC,GACvC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EACL,0CAA0C,EAC1C,+BAA+B,EAC/B,qCAAqC,GACtC,MAAM,yCAAyC,CAAC;AACjD,OAAO,EACL,sCAAsC,EACtC,gCAAgC,GACjC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,6BAA6B,EAAE,MAAM,uCAAuC,CAAC;AACtF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC","sourcesContent":["export {\n  HOSTED_HEARTBEAT_COORDINATOR_PATHS,\n  HOSTED_HEARTBEAT_DELEGATIONS_PATH,\n  HostedHeartbeatCoordinatorRunViewSchema,\n  HostedHeartbeatCoordinatorStateResponseSchema,\n  HostedHeartbeatCoordinatorStateSchema,\n  HostedHeartbeatCoordinatorTaskDetailSchema,\n  HostedHeartbeatCoordinatorTaskInputSchema,\n  HostedHeartbeatCoordinatorTaskListSchema,\n  HostedHeartbeatCoordinatorTaskResultSchema,\n  HostedHeartbeatCoordinatorTaskStatusSchema,\n  HostedHeartbeatCoordinatorTaskViewSchema,\n  HostedHeartbeatDelegationAuthorizationSchema,\n  HostedHeartbeatDelegationRequestSchema,\n  HostedHeartbeatDelegationSchema,\n  HostedHeartbeatDesiredTaskCatalogSchema,\n  HostedHeartbeatDesiredTaskSchema,\n} from './contracts.js';\nexport type {\n  HostedHeartbeatCoordinatorTaskInput,\n  HostedHeartbeatCoordinatorRunView,\n  HostedHeartbeatCoordinatorState,\n  HostedHeartbeatCoordinatorTaskDetail,\n  HostedHeartbeatCoordinatorTaskView,\n  HostedHeartbeatDelegation,\n  HostedHeartbeatDelegationAuthorization,\n  HostedHeartbeatDelegationRequest,\n  HostedHeartbeatDesiredTask,\n  HostedHeartbeatDesiredTaskCatalog,\n} from './contracts.js';\nexport {\n  HostedHeartbeatCoordinatorClient,\n  HostedHeartbeatCoordinatorRequestError,\n} from './hosted-heartbeat-coordinator-client.js';\nexport {\n  HostedHeartbeatDelegatedExecutionTransport,\n  HostedHeartbeatDelegationClient,\n  HostedHeartbeatDelegationRequestError,\n} from './hosted-heartbeat-delegation-client.js';\nexport {\n  HostedHeartbeatDelegationRejectedError,\n  HostedHeartbeatDelegationService,\n} from './hosted-heartbeat-delegation-service.js';\nexport { HostedHeartbeatTaskReconciler } from './hosted-heartbeat-task-reconciler.js';\nexport { createHostedRuntimeSessionId } from './runtime-session.js';\nexport type {\n  HostedHeartbeatCoordinatorClientConfig,\n  HostedHeartbeatCoordinatorTaskApi,\n  HostedHeartbeatDelegatedExecutionTransportConfig,\n  HostedHeartbeatDelegatedExecutionTransportPort,\n  HostedHeartbeatDelegationAuthorizationInput,\n  HostedHeartbeatDelegationAuthorizer,\n  HostedHeartbeatDelegationClientConfig,\n  HostedHeartbeatDelegationIssuer,\n  HostedHeartbeatDelegationServiceConfig,\n  HostedHeartbeatTaskReconcilerConfig,\n  HostedHeartbeatTaskReconciliation,\n  HostedHeartbeatTaskReconciliationInput,\n} from './types.js';\n"]}

package/dist/coordinator/types.d.ts

@@ -2,18 +2,22 @@ import type { ExecutionAuthorityIssuer } from '../authority/index.js';
 import type { HostedModelCredentialProvider } from '../conversation/index.js';
 import type { HostedHeartbeatAgentExecutionTransportInput } from '../heartbeat/index.js';
 import type { HeartbeatExecutionHost } from '../http-sse/index.js';
-import type { HostedHeartbeatCoordinatorTaskInput, HostedHeartbeatCoordinatorTaskSummary, HostedHeartbeatDelegation, HostedHeartbeatDelegationAuthorization, HostedHeartbeatDelegationRequest, HostedHeartbeatDesiredTask } from './contracts.js';
+import type { HostedHeartbeatCoordinatorTaskInput, HostedHeartbeatCoordinatorState, HostedHeartbeatCoordinatorTaskDetail, HostedHeartbeatCoordinatorTaskView, HostedHeartbeatDelegation, HostedHeartbeatDelegationAuthorization, HostedHeartbeatDelegationRequest, HostedHeartbeatDesiredTask } from './contracts.js';
 export type HostedHeartbeatCoordinatorClientConfig = {
     baseUrl: URL;
     apiToken: string;
     fetch?: typeof globalThis.fetch;
 };
 export interface HostedHeartbeatCoordinatorTaskApi {
-    listTasks(signal?: AbortSignal): Promise<HostedHeartbeatCoordinatorTaskSummary[]>;
+    readState(signal?: AbortSignal): Promise<HostedHeartbeatCoordinatorState>;
+    listTasks(signal?: AbortSignal): Promise<HostedHeartbeatCoordinatorTaskView[]>;
+    readTask(taskId: string, signal?: AbortSignal): Promise<HostedHeartbeatCoordinatorTaskDetail>;
     upsertTask(taskId: string, task: HostedHeartbeatCoordinatorTaskInput, signal?: AbortSignal): Promise<void>;
+    triggerTask(taskId: string, signal?: AbortSignal): Promise<HostedHeartbeatCoordinatorTaskView>;
     deleteTask(taskId: string, signal?: AbortSignal): Promise<void>;
     pause(signal?: AbortSignal): Promise<void>;
     resume(signal?: AbortSignal): Promise<void>;
+    drain(signal?: AbortSignal): Promise<void>;
 }
 export type HostedHeartbeatTaskReconciliationInput = {
     desiredTasks: readonly HostedHeartbeatDesiredTask[];
@@ -26,7 +30,7 @@ export type HostedHeartbeatTaskReconciliation = {
     resumed: boolean;
 };
 export type HostedHeartbeatTaskReconcilerConfig = {
-    coordinator: HostedHeartbeatCoordinatorTaskApi;
+    coordinator: Pick<HostedHeartbeatCoordinatorTaskApi, 'listTasks' | 'upsertTask' | 'deleteTask' | 'pause' | 'resume'>;
 };
 export type HostedHeartbeatDelegationAuthorizationInput = {
     taskId: string;

package/dist/coordinator/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/coordinator/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,6BAA6B,EAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACV,2CAA2C,EAC5C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EACV,mCAAmC,EACnC,qCAAqC,EACrC,yBAAyB,EACzB,sCAAsC,EACtC,gCAAgC,EAChC,0BAA0B,EAC3B,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,sCAAsC,GAAG;IACnD,OAAO,EAAE,GAAG,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC,CAAC;AAEF,MAAM,WAAW,iCAAiC;IAChD,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CACtC,qCAAqC,EAAE,CACxC,CAAC;IACF,UAAU,CACR,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,mCAAmC,EACzC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAED,MAAM,MAAM,sCAAsC,GAAG;IACnD,YAAY,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACpD,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAChD,WAAW,EAAE,iCAAiC,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACrB,CAAC;AAEF,MAAM,WAAW,mCAAmC;IAClD,SAAS,CACP,KAAK,EAAE,2CAA2C,GACjD,sCAAsC,GACrC,SAAS,GACT,OAAO,CAAC,sCAAsC,GAAG,SAAS,CAAC,CAAC;CACjE;AAED,MAAM,MAAM,sCAAsC,GAAG;IACnD,SAAS,EAAE,wBAAwB,CAAC;IACpC,UAAU,EAAE,mCAAmC,CAAC;IAChD,uBAAuB,EAAE,MAAM,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,WAAW,+BAA+B;IAC9C,KAAK,CACH,KAAK,EAAE,gCAAgC,EACvC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,qCAAqC,GAAG;IAClD,OAAO,EAAE,GAAG,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,gDAAgD,GAAG;IAC7D,WAAW,EAAE,+BAA+B,CAAC;IAC7C,aAAa,EAAE,sBAAsB,CAAC;IACtC,gBAAgB,EAAE,6BAA6B,CAAC;CACjD,CAAC;AAEF,MAAM,WAAW,8CAA8C;IAC7D,OAAO,CACL,KAAK,EAAE,2CAA2C,GACjD,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/coordinator/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,6BAA6B,EAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EACV,2CAA2C,EAC5C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,KAAK,EACV,mCAAmC,EACnC,+BAA+B,EAC/B,oCAAoC,EACpC,kCAAkC,EAClC,yBAAyB,EACzB,sCAAsC,EACtC,gCAAgC,EAChC,0BAA0B,EAC3B,MAAM,gBAAgB,CAAC;AAExB,MAAM,MAAM,sCAAsC,GAAG;IACnD,OAAO,EAAE,GAAG,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;CACjC,CAAC;AAEF,MAAM,WAAW,iCAAiC;IAChD,SAAS,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC1E,SAAS,CACP,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,kCAAkC,EAAE,CAAC,CAAC;IACjD,QAAQ,CACN,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,oCAAoC,CAAC,CAAC;IACjD,UAAU,CACR,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,mCAAmC,EACzC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,WAAW,CACT,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAC/C,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,KAAK,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,sCAAsC,GAAG;IACnD,YAAY,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACpD,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,iCAAiC,GAAG;IAC9C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAChD,WAAW,EAAE,IAAI,CACf,iCAAiC,EACjC,WAAW,GAAG,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,QAAQ,CAC/D,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,2CAA2C,GAAG;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACrB,CAAC;AAEF,MAAM,WAAW,mCAAmC;IAClD,SAAS,CACP,KAAK,EAAE,2CAA2C,GACjD,sCAAsC,GACrC,SAAS,GACT,OAAO,CAAC,sCAAsC,GAAG,SAAS,CAAC,CAAC;CACjE;AAED,MAAM,MAAM,sCAAsC,GAAG;IACnD,SAAS,EAAE,wBAAwB,CAAC;IACpC,UAAU,EAAE,mCAAmC,CAAC;IAChD,uBAAuB,EAAE,MAAM,CAAC;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,WAAW,+BAA+B;IAC9C,KAAK,CACH,KAAK,EAAE,gCAAgC,EACvC,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,qCAAqC,GAAG;IAClD,OAAO,EAAE,GAAG,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,MAAM,MAAM,gDAAgD,GAAG;IAC7D,WAAW,EAAE,+BAA+B,CAAC;IAC7C,aAAa,EAAE,sBAAsB,CAAC;IACtC,gBAAgB,EAAE,6BAA6B,CAAC;CACjD,CAAC;AAEF,MAAM,WAAW,8CAA8C;IAC7D,OAAO,CACL,KAAK,EAAE,2CAA2C,GACjD,OAAO,CAAC,OAAO,CAAC,CAAC;CACrB"}

package/dist/coordinator/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/coordinator/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionAuthorityIssuer,\n} from '../authority/index.js';\nimport type {\n  HostedModelCredentialProvider,\n} from '../conversation/index.js';\nimport type {\n  HostedHeartbeatAgentExecutionTransportInput,\n} from '../heartbeat/index.js';\nimport type { HeartbeatExecutionHost } from '../http-sse/index.js';\nimport type {\n  HostedHeartbeatCoordinatorTaskInput,\n  HostedHeartbeatCoordinatorTaskSummary,\n  HostedHeartbeatDelegation,\n  HostedHeartbeatDelegationAuthorization,\n  HostedHeartbeatDelegationRequest,\n  HostedHeartbeatDesiredTask,\n} from './contracts.js';\n\nexport type HostedHeartbeatCoordinatorClientConfig = {\n  baseUrl: URL;\n  apiToken: string;\n  fetch?: typeof globalThis.fetch;\n};\n\nexport interface HostedHeartbeatCoordinatorTaskApi {\n  listTasks(signal?: AbortSignal): Promise<\n    HostedHeartbeatCoordinatorTaskSummary[]\n  >;\n  upsertTask(\n    taskId: string,\n    task: HostedHeartbeatCoordinatorTaskInput,\n    signal?: AbortSignal,\n  ): Promise<void>;\n  deleteTask(taskId: string, signal?: AbortSignal): Promise<void>;\n  pause(signal?: AbortSignal): Promise<void>;\n  resume(signal?: AbortSignal): Promise<void>;\n}\n\nexport type HostedHeartbeatTaskReconciliationInput = {\n  desiredTasks: readonly HostedHeartbeatDesiredTask[];\n  resume: boolean;\n  signal?: AbortSignal;\n};\n\nexport type HostedHeartbeatTaskReconciliation = {\n  deleted: number;\n  upserted: number;\n  resumed: boolean;\n};\n\nexport type HostedHeartbeatTaskReconcilerConfig = {\n  coordinator: HostedHeartbeatCoordinatorTaskApi;\n};\n\nexport type HostedHeartbeatDelegationAuthorizationInput = {\n  taskId: string;\n  executionId: string;\n  signal: AbortSignal;\n};\n\nexport interface HostedHeartbeatDelegationAuthorizer {\n  authorize(\n    input: HostedHeartbeatDelegationAuthorizationInput,\n  ): HostedHeartbeatDelegationAuthorization\n    | undefined\n    | Promise<HostedHeartbeatDelegationAuthorization | undefined>;\n}\n\nexport type HostedHeartbeatDelegationServiceConfig = {\n  authority: ExecutionAuthorityIssuer;\n  authorizer: HostedHeartbeatDelegationAuthorizer;\n  runtimeSessionNamespace: string;\n  maxExecutionMs: number;\n  now?: () => Date;\n};\n\nexport interface HostedHeartbeatDelegationIssuer {\n  issue(\n    input: HostedHeartbeatDelegationRequest,\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatDelegation>;\n}\n\nexport type HostedHeartbeatDelegationClientConfig = {\n  baseUrl: URL;\n  apiToken: string;\n  fetch?: typeof globalThis.fetch;\n  path?: string;\n};\n\nexport type HostedHeartbeatDelegatedExecutionTransportConfig = {\n  delegations: HostedHeartbeatDelegationIssuer;\n  executionHost: HeartbeatExecutionHost;\n  modelCredentials: HostedModelCredentialProvider;\n};\n\nexport interface HostedHeartbeatDelegatedExecutionTransportPort {\n  execute(\n    input: HostedHeartbeatAgentExecutionTransportInput,\n  ): Promise<unknown>;\n}\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/coordinator/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionAuthorityIssuer,\n} from '../authority/index.js';\nimport type {\n  HostedModelCredentialProvider,\n} from '../conversation/index.js';\nimport type {\n  HostedHeartbeatAgentExecutionTransportInput,\n} from '../heartbeat/index.js';\nimport type { HeartbeatExecutionHost } from '../http-sse/index.js';\nimport type {\n  HostedHeartbeatCoordinatorTaskInput,\n  HostedHeartbeatCoordinatorState,\n  HostedHeartbeatCoordinatorTaskDetail,\n  HostedHeartbeatCoordinatorTaskView,\n  HostedHeartbeatDelegation,\n  HostedHeartbeatDelegationAuthorization,\n  HostedHeartbeatDelegationRequest,\n  HostedHeartbeatDesiredTask,\n} from './contracts.js';\n\nexport type HostedHeartbeatCoordinatorClientConfig = {\n  baseUrl: URL;\n  apiToken: string;\n  fetch?: typeof globalThis.fetch;\n};\n\nexport interface HostedHeartbeatCoordinatorTaskApi {\n  readState(signal?: AbortSignal): Promise<HostedHeartbeatCoordinatorState>;\n  listTasks(\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatCoordinatorTaskView[]>;\n  readTask(\n    taskId: string,\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatCoordinatorTaskDetail>;\n  upsertTask(\n    taskId: string,\n    task: HostedHeartbeatCoordinatorTaskInput,\n    signal?: AbortSignal,\n  ): Promise<void>;\n  triggerTask(\n    taskId: string,\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatCoordinatorTaskView>;\n  deleteTask(taskId: string, signal?: AbortSignal): Promise<void>;\n  pause(signal?: AbortSignal): Promise<void>;\n  resume(signal?: AbortSignal): Promise<void>;\n  drain(signal?: AbortSignal): Promise<void>;\n}\n\nexport type HostedHeartbeatTaskReconciliationInput = {\n  desiredTasks: readonly HostedHeartbeatDesiredTask[];\n  resume: boolean;\n  signal?: AbortSignal;\n};\n\nexport type HostedHeartbeatTaskReconciliation = {\n  deleted: number;\n  upserted: number;\n  resumed: boolean;\n};\n\nexport type HostedHeartbeatTaskReconcilerConfig = {\n  coordinator: Pick<\n    HostedHeartbeatCoordinatorTaskApi,\n    'listTasks' | 'upsertTask' | 'deleteTask' | 'pause' | 'resume'\n  >;\n};\n\nexport type HostedHeartbeatDelegationAuthorizationInput = {\n  taskId: string;\n  executionId: string;\n  signal: AbortSignal;\n};\n\nexport interface HostedHeartbeatDelegationAuthorizer {\n  authorize(\n    input: HostedHeartbeatDelegationAuthorizationInput,\n  ): HostedHeartbeatDelegationAuthorization\n    | undefined\n    | Promise<HostedHeartbeatDelegationAuthorization | undefined>;\n}\n\nexport type HostedHeartbeatDelegationServiceConfig = {\n  authority: ExecutionAuthorityIssuer;\n  authorizer: HostedHeartbeatDelegationAuthorizer;\n  runtimeSessionNamespace: string;\n  maxExecutionMs: number;\n  now?: () => Date;\n};\n\nexport interface HostedHeartbeatDelegationIssuer {\n  issue(\n    input: HostedHeartbeatDelegationRequest,\n    signal?: AbortSignal,\n  ): Promise<HostedHeartbeatDelegation>;\n}\n\nexport type HostedHeartbeatDelegationClientConfig = {\n  baseUrl: URL;\n  apiToken: string;\n  fetch?: typeof globalThis.fetch;\n  path?: string;\n};\n\nexport type HostedHeartbeatDelegatedExecutionTransportConfig = {\n  delegations: HostedHeartbeatDelegationIssuer;\n  executionHost: HeartbeatExecutionHost;\n  modelCredentials: HostedModelCredentialProvider;\n};\n\nexport interface HostedHeartbeatDelegatedExecutionTransportPort {\n  execute(\n    input: HostedHeartbeatAgentExecutionTransportInput,\n  ): Promise<unknown>;\n}\n"]}

package/dist/host/errors.d.ts

@@ -0,0 +1,23 @@
+import type { JwtVerificationUnavailableCategory } from '../internal/jwt-verification.js';
+export declare class ExecutionIdentityVerificationError extends Error {
+    readonly name = "ExecutionIdentityVerificationError";
+    constructor(options?: ErrorOptions);
+}
+export declare class ExecutionIdentityUnavailableError extends Error {
+    readonly category: JwtVerificationUnavailableCategory;
+    readonly name = "ExecutionIdentityUnavailableError";
+    constructor(category: JwtVerificationUnavailableCategory, options?: ErrorOptions);
+}
+export declare class ExecutionHostMcpCapabilityVerificationError extends Error {
+    readonly name = "ExecutionHostMcpCapabilityVerificationError";
+    constructor(options?: ErrorOptions);
+}
+export declare class ExecutionHostMcpCapabilityUnavailableError extends Error {
+    readonly category: JwtVerificationUnavailableCategory;
+    readonly name = "ExecutionHostMcpCapabilityUnavailableError";
+    constructor(category: JwtVerificationUnavailableCategory, options?: ErrorOptions);
+}
+export declare class UnexpectedExecutionHostMcpCapabilityError extends Error {
+    readonly name = "UnexpectedExecutionHostMcpCapabilityError";
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/host/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/host/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,iCAAiC,CAAC;AAE1F,qBAAa,kCAAmC,SAAQ,KAAK;IAC3D,QAAQ,CAAC,IAAI,wCAAwC;gBAEzC,OAAO,CAAC,EAAE,YAAY;CAGnC;AAED,qBAAa,iCAAkC,SAAQ,KAAK;IAIxD,QAAQ,CAAC,QAAQ,EAAE,kCAAkC;IAHvD,QAAQ,CAAC,IAAI,uCAAuC;gBAGzC,QAAQ,EAAE,kCAAkC,EACrD,OAAO,CAAC,EAAE,YAAY;CAIzB;AAED,qBAAa,2CAA4C,SAAQ,KAAK;IACpE,QAAQ,CAAC,IAAI,iDAAiD;gBAElD,OAAO,CAAC,EAAE,YAAY;CAGnC;AAED,qBAAa,0CAA2C,SAAQ,KAAK;IAIjE,QAAQ,CAAC,QAAQ,EAAE,kCAAkC;IAHvD,QAAQ,CAAC,IAAI,gDAAgD;gBAGlD,QAAQ,EAAE,kCAAkC,EACrD,OAAO,CAAC,EAAE,YAAY;CAIzB;AAED,qBAAa,yCAA0C,SAAQ,KAAK;IAClE,QAAQ,CAAC,IAAI,+CAA+C;CAC7D"}

package/dist/host/errors.js

@@ -0,0 +1,32 @@
+export class ExecutionIdentityVerificationError extends Error {
+    name = 'ExecutionIdentityVerificationError';
+    constructor(options) {
+        super('Execution identity verification failed.', options);
+    }
+}
+export class ExecutionIdentityUnavailableError extends Error {
+    category;
+    name = 'ExecutionIdentityUnavailableError';
+    constructor(category, options) {
+        super('Execution identity verification is temporarily unavailable.', options);
+        this.category = category;
+    }
+}
+export class ExecutionHostMcpCapabilityVerificationError extends Error {
+    name = 'ExecutionHostMcpCapabilityVerificationError';
+    constructor(options) {
+        super('MCP capability verification failed.', options);
+    }
+}
+export class ExecutionHostMcpCapabilityUnavailableError extends Error {
+    category;
+    name = 'ExecutionHostMcpCapabilityUnavailableError';
+    constructor(category, options) {
+        super('MCP capability verification is temporarily unavailable.', options);
+        this.category = category;
+    }
+}
+export class UnexpectedExecutionHostMcpCapabilityError extends Error {
+    name = 'UnexpectedExecutionHostMcpCapabilityError';
+}
+//# sourceMappingURL=errors.js.map

package/dist/host/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/host/errors.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAClD,IAAI,GAAG,oCAAoC,CAAC;IAErD,YAAY,OAAsB;QAChC,KAAK,CAAC,yCAAyC,EAAE,OAAO,CAAC,CAAC;IAC5D,CAAC;CACF;AAED,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAI/C;IAHF,IAAI,GAAG,mCAAmC,CAAC;IAEpD,YACW,QAA4C,EACrD,OAAsB;QAEtB,KAAK,CAAC,6DAA6D,EAAE,OAAO,CAAC,CAAC;QAHrE,aAAQ,GAAR,QAAQ,CAAoC;IAIvD,CAAC;CACF;AAED,MAAM,OAAO,2CAA4C,SAAQ,KAAK;IAC3D,IAAI,GAAG,6CAA6C,CAAC;IAE9D,YAAY,OAAsB;QAChC,KAAK,CAAC,qCAAqC,EAAE,OAAO,CAAC,CAAC;IACxD,CAAC;CACF;AAED,MAAM,OAAO,0CAA2C,SAAQ,KAAK;IAIxD;IAHF,IAAI,GAAG,4CAA4C,CAAC;IAE7D,YACW,QAA4C,EACrD,OAAsB;QAEtB,KAAK,CAAC,yDAAyD,EAAE,OAAO,CAAC,CAAC;QAHjE,aAAQ,GAAR,QAAQ,CAAoC;IAIvD,CAAC;CACF;AAED,MAAM,OAAO,yCAA0C,SAAQ,KAAK;IACzD,IAAI,GAAG,2CAA2C,CAAC;CAC7D","sourcesContent":["import type { JwtVerificationUnavailableCategory } from '../internal/jwt-verification.js';\n\nexport class ExecutionIdentityVerificationError extends Error {\n  readonly name = 'ExecutionIdentityVerificationError';\n\n  constructor(options?: ErrorOptions) {\n    super('Execution identity verification failed.', options);\n  }\n}\n\nexport class ExecutionIdentityUnavailableError extends Error {\n  readonly name = 'ExecutionIdentityUnavailableError';\n\n  constructor(\n    readonly category: JwtVerificationUnavailableCategory,\n    options?: ErrorOptions,\n  ) {\n    super('Execution identity verification is temporarily unavailable.', options);\n  }\n}\n\nexport class ExecutionHostMcpCapabilityVerificationError extends Error {\n  readonly name = 'ExecutionHostMcpCapabilityVerificationError';\n\n  constructor(options?: ErrorOptions) {\n    super('MCP capability verification failed.', options);\n  }\n}\n\nexport class ExecutionHostMcpCapabilityUnavailableError extends Error {\n  readonly name = 'ExecutionHostMcpCapabilityUnavailableError';\n\n  constructor(\n    readonly category: JwtVerificationUnavailableCategory,\n    options?: ErrorOptions,\n  ) {\n    super('MCP capability verification is temporarily unavailable.', options);\n  }\n}\n\nexport class UnexpectedExecutionHostMcpCapabilityError extends Error {\n  readonly name = 'UnexpectedExecutionHostMcpCapabilityError';\n}\n"]}

package/dist/host/index.d.ts

@@ -0,0 +1,8 @@
+export { ExecutionHostMcpCapabilityUnavailableError, ExecutionHostMcpCapabilityVerificationError, ExecutionIdentityUnavailableError, ExecutionIdentityVerificationError, UnexpectedExecutionHostMcpCapabilityError, } from './errors.js';
+export { JwtExecutionIdentityVerifier } from './jwt-execution-identity-verifier.js';
+export { JwtExecutionHostMcpCapabilityVerifier } from './jwt-execution-host-mcp-capability-verifier.js';
+export { ExecutionHostJwtAlgorithmsSchema, JwtExecutionHostMcpCapabilityVerifierConfigSchema, JwtExecutionIdentityVerifierConfigSchema, } from './schemas.js';
+export { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS, } from './types.js';
+export type { ExecutionHostJwtAlgorithm, ExecutionHostJwtVerifierOptions, ExecutionHostMcpCapabilityVerificationRequest, ExecutionHostMcpCapabilityVerifier, ExecutionIdentityVerificationRequest, ExecutionIdentityVerifier, JwtExecutionHostMcpCapabilityVerifierConfig, JwtExecutionIdentityVerifierConfig, VerifiedExecutionHostMcpCapability, VerifiedExecutionIdentity, } from './types.js';
+export * from './runtime-session/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/host/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,iCAAiC,EACjC,kCAAkC,EAClC,yCAAyC,GAC1C,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,qCAAqC,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EACL,gCAAgC,EAChC,iDAAiD,EACjD,wCAAwC,GACzC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uCAAuC,GACxC,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,yBAAyB,EACzB,+BAA+B,EAC/B,6CAA6C,EAC7C,kCAAkC,EAClC,oCAAoC,EACpC,yBAAyB,EACzB,2CAA2C,EAC3C,kCAAkC,EAClC,kCAAkC,EAClC,yBAAyB,GAC1B,MAAM,YAAY,CAAC;AACpB,cAAc,4BAA4B,CAAC"}

package/dist/host/index.js

@@ -0,0 +1,7 @@
+export { ExecutionHostMcpCapabilityUnavailableError, ExecutionHostMcpCapabilityVerificationError, ExecutionIdentityUnavailableError, ExecutionIdentityVerificationError, UnexpectedExecutionHostMcpCapabilityError, } from './errors.js';
+export { JwtExecutionIdentityVerifier } from './jwt-execution-identity-verifier.js';
+export { JwtExecutionHostMcpCapabilityVerifier } from './jwt-execution-host-mcp-capability-verifier.js';
+export { ExecutionHostJwtAlgorithmsSchema, JwtExecutionHostMcpCapabilityVerifierConfigSchema, JwtExecutionIdentityVerifierConfigSchema, } from './schemas.js';
+export { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS, } from './types.js';
+export * from './runtime-session/index.js';
+//# sourceMappingURL=index.js.map

package/dist/host/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/host/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,EAC3C,iCAAiC,EACjC,kCAAkC,EAClC,yCAAyC,GAC1C,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AACpF,OAAO,EAAE,qCAAqC,EAAE,MAAM,iDAAiD,CAAC;AACxG,OAAO,EACL,gCAAgC,EAChC,iDAAiD,EACjD,wCAAwC,GACzC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uCAAuC,GACxC,MAAM,YAAY,CAAC;AAapB,cAAc,4BAA4B,CAAC","sourcesContent":["export {\n  ExecutionHostMcpCapabilityUnavailableError,\n  ExecutionHostMcpCapabilityVerificationError,\n  ExecutionIdentityUnavailableError,\n  ExecutionIdentityVerificationError,\n  UnexpectedExecutionHostMcpCapabilityError,\n} from './errors.js';\nexport { JwtExecutionIdentityVerifier } from './jwt-execution-identity-verifier.js';\nexport { JwtExecutionHostMcpCapabilityVerifier } from './jwt-execution-host-mcp-capability-verifier.js';\nexport {\n  ExecutionHostJwtAlgorithmsSchema,\n  JwtExecutionHostMcpCapabilityVerifierConfigSchema,\n  JwtExecutionIdentityVerifierConfigSchema,\n} from './schemas.js';\nexport {\n  EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS,\n} from './types.js';\nexport type {\n  ExecutionHostJwtAlgorithm,\n  ExecutionHostJwtVerifierOptions,\n  ExecutionHostMcpCapabilityVerificationRequest,\n  ExecutionHostMcpCapabilityVerifier,\n  ExecutionIdentityVerificationRequest,\n  ExecutionIdentityVerifier,\n  JwtExecutionHostMcpCapabilityVerifierConfig,\n  JwtExecutionIdentityVerifierConfig,\n  VerifiedExecutionHostMcpCapability,\n  VerifiedExecutionIdentity,\n} from './types.js';\nexport * from './runtime-session/index.js';\n"]}

package/dist/host/jwt-execution-host-mcp-capability-verifier.d.ts

@@ -0,0 +1,8 @@
+import type { ExecutionHostJwtVerifierOptions, ExecutionHostMcpCapabilityVerificationRequest, ExecutionHostMcpCapabilityVerifier, JwtExecutionHostMcpCapabilityVerifierConfig, VerifiedExecutionHostMcpCapability } from './types.js';
+/** Verifies MCP authority against an independently verified host invocation. */
+export declare class JwtExecutionHostMcpCapabilityVerifier implements ExecutionHostMcpCapabilityVerifier {
+    #private;
+    constructor(config: JwtExecutionHostMcpCapabilityVerifierConfig, options?: ExecutionHostJwtVerifierOptions);
+    verify(rawRequest: ExecutionHostMcpCapabilityVerificationRequest): Promise<VerifiedExecutionHostMcpCapability>;
+}
+//# sourceMappingURL=jwt-execution-host-mcp-capability-verifier.d.ts.map

package/dist/host/jwt-execution-host-mcp-capability-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-execution-host-mcp-capability-verifier.d.ts","sourceRoot":"","sources":["../../src/host/jwt-execution-host-mcp-capability-verifier.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,+BAA+B,EAC/B,6CAA6C,EAC7C,kCAAkC,EAClC,2CAA2C,EAC3C,kCAAkC,EACnC,MAAM,YAAY,CAAC;AAOpB,gFAAgF;AAChF,qBAAa,qCACb,YAAW,kCAAkC;;gBAMzC,MAAM,EAAE,2CAA2C,EACnD,OAAO,GAAE,+BAAoC;IAczC,MAAM,CACV,UAAU,EAAE,6CAA6C,GACxD,OAAO,CAAC,kCAAkC,CAAC;CAkF/C"}

package/dist/host/jwt-execution-host-mcp-capability-verifier.js

@@ -0,0 +1,86 @@
+import { jwtVerify } from 'jose';
+import { z } from 'zod';
+import { MCP_CAPABILITY_TYPE, McpCapabilityClaimsSchema, } from '../contracts/index.js';
+import { createJwtKeyResolver, resolveJwtVerificationUnavailableCategory, } from '../internal/jwt-verification.js';
+import { ExecutionHostMcpCapabilityUnavailableError, ExecutionHostMcpCapabilityVerificationError, } from './errors.js';
+import { JwtExecutionHostMcpCapabilityVerifierConfigSchema } from './schemas.js';
+const AssertionSchema = z.string().trim().min(32).max(4_096);
+/** Verifies MCP authority against an independently verified host invocation. */
+export class JwtExecutionHostMcpCapabilityVerifier {
+    #config;
+    #keyResolver;
+    #now;
+    constructor(config, options = {}) {
+        const parsed = JwtExecutionHostMcpCapabilityVerifierConfigSchema.parse(config);
+        this.#config = Object.freeze({
+            ...parsed,
+            jwksUrl: new URL(parsed.jwksUrl),
+        });
+        this.#keyResolver = options.keyResolver
+            ?? createJwtKeyResolver(this.#config.jwksUrl);
+        this.#now = options.now ?? (() => new Date());
+    }
+    async verify(rawRequest) {
+        try {
+            const request = Object.freeze({
+                ...rawRequest,
+                assertion: AssertionSchema.parse(rawRequest.assertion),
+            });
+            const { payload } = await jwtVerify(request.assertion, this.#keyResolver, {
+                algorithms: [...this.#config.jwtAlgorithms],
+                audience: this.#config.audience,
+                clockTolerance: this.#config.clockToleranceSeconds,
+                currentDate: this.#now(),
+                issuer: this.#config.issuer,
+                maxTokenAge: this.#config.maxCapabilityAgeSeconds,
+                requiredClaims: ['exp', 'iat', 'jti', 'sub'],
+                typ: MCP_CAPABILITY_TYPE,
+            });
+            const claims = McpCapabilityClaimsSchema.parse(payload);
+            this.#assertInvocationBinding(claims, request);
+            this.#assertBoundedLifetime(claims);
+            return Object.freeze({
+                assertion: request.assertion,
+                capabilityId: claims.jti,
+                serverId: claims.serverId,
+                allowedTools: Object.freeze([...claims.allowedTools]),
+                issuedAt: new Date(claims.iat * 1_000).toISOString(),
+                expiresAt: new Date(claims.exp * 1_000).toISOString(),
+            });
+        }
+        catch (error) {
+            if (error instanceof ExecutionHostMcpCapabilityVerificationError
+                || error instanceof ExecutionHostMcpCapabilityUnavailableError) {
+                throw error;
+            }
+            const category = resolveJwtVerificationUnavailableCategory(error);
+            if (category) {
+                throw new ExecutionHostMcpCapabilityUnavailableError(category, { cause: error });
+            }
+            throw new ExecutionHostMcpCapabilityVerificationError({ cause: error });
+        }
+    }
+    #assertInvocationBinding(claims, request) {
+        const { identity } = request;
+        if (claims.adopterId !== this.#config.trustedAdopterId
+            || claims.adopterId !== identity.scope.adopterId
+            || claims.tenantId !== identity.scope.tenantId
+            || claims.sub !== identity.scope.subjectId
+            || claims.productSessionId !== identity.scope.productSessionId
+            || claims.runtimeSessionId !== identity.runtimeSessionId
+            || claims.invocationId !== identity.invocationId
+            || claims.workflow !== identity.workflow
+            || claims.serverId !== this.#config.serverId
+            || claims.jti === identity.invocationId) {
+            throw new ExecutionHostMcpCapabilityVerificationError();
+        }
+    }
+    #assertBoundedLifetime(claims) {
+        const lifetimeSeconds = claims.exp - claims.iat;
+        if (lifetimeSeconds <= 0
+            || lifetimeSeconds > this.#config.maxCapabilityAgeSeconds) {
+            throw new ExecutionHostMcpCapabilityVerificationError();
+        }
+    }
+}
+//# sourceMappingURL=jwt-execution-host-mcp-capability-verifier.js.map

package/dist/host/jwt-execution-host-mcp-capability-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-execution-host-mcp-capability-verifier.js","sourceRoot":"","sources":["../../src/host/jwt-execution-host-mcp-capability-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,yCAAyC,GAC1C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,0CAA0C,EAC1C,2CAA2C,GAC5C,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iDAAiD,EAAE,MAAM,cAAc,CAAC;AASjF,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAK7D,gFAAgF;AAChF,MAAM,OAAO,qCAAqC;IAEvC,OAAO,CAAyB;IAChC,YAAY,CAA8D;IAC1E,IAAI,CAAa;IAE1B,YACE,MAAmD,EACnD,UAA2C,EAAE;QAE7C,MAAM,MAAM,GAAG,iDAAiD,CAAC,KAAK,CACpE,MAAM,CACP,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,MAAM;YACT,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC;SACjC,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW;eAClC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,UAAyD;QAEzD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,GAAG,UAAU;gBACb,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CACjC,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,YAAY,EACjB;gBACE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC;gBAC3C,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAC/B,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,qBAAqB;gBAClD,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM;gBAC3B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,uBAAuB;gBACjD,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBAC5C,GAAG,EAAE,mBAAmB;aACzB,CACF,CAAC;YACF,MAAM,MAAM,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,CAAC,wBAAwB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/C,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAEpC,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,YAAY,EAAE,MAAM,CAAC,GAAG;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;gBACrD,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;gBACpD,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,2CAA2C;mBACzD,KAAK,YAAY,0CAA0C,EAC9D,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,yCAAyC,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,0CAA0C,CAClD,QAAQ,EACR,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,2CAA2C,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,wBAAwB,CACtB,MAAiD,EACjD,OAAsD;QAEtD,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC;QAC7B,IACE,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB;eAC/C,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,KAAK,CAAC,SAAS;eAC7C,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,QAAQ;eAC3C,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,KAAK,CAAC,SAAS;eACvC,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,KAAK,CAAC,gBAAgB;eAC3D,MAAM,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;eACrD,MAAM,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;eAC7C,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC,QAAQ;eACrC,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ;eACzC,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,YAAY,EACvC,CAAC;YACD,MAAM,IAAI,2CAA2C,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,sBAAsB,CACpB,MAAiD;QAEjD,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;QAChD,IACE,eAAe,IAAI,CAAC;eACjB,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EACzD,CAAC;YACD,MAAM,IAAI,2CAA2C,EAAE,CAAC;QAC1D,CAAC;IACH,CAAC;CACF","sourcesContent":["import { jwtVerify } from 'jose';\nimport { z } from 'zod';\nimport {\n  MCP_CAPABILITY_TYPE,\n  McpCapabilityClaimsSchema,\n} from '../contracts/index.js';\nimport {\n  createJwtKeyResolver,\n  resolveJwtVerificationUnavailableCategory,\n} from '../internal/jwt-verification.js';\nimport {\n  ExecutionHostMcpCapabilityUnavailableError,\n  ExecutionHostMcpCapabilityVerificationError,\n} from './errors.js';\nimport { JwtExecutionHostMcpCapabilityVerifierConfigSchema } from './schemas.js';\nimport type {\n  ExecutionHostJwtVerifierOptions,\n  ExecutionHostMcpCapabilityVerificationRequest,\n  ExecutionHostMcpCapabilityVerifier,\n  JwtExecutionHostMcpCapabilityVerifierConfig,\n  VerifiedExecutionHostMcpCapability,\n} from './types.js';\n\nconst AssertionSchema = z.string().trim().min(32).max(4_096);\ntype ParsedConfig = z.infer<\n  typeof JwtExecutionHostMcpCapabilityVerifierConfigSchema\n>;\n\n/** Verifies MCP authority against an independently verified host invocation. */\nexport class JwtExecutionHostMcpCapabilityVerifier\nimplements ExecutionHostMcpCapabilityVerifier {\n  readonly #config: Readonly<ParsedConfig>;\n  readonly #keyResolver: NonNullable<ExecutionHostJwtVerifierOptions['keyResolver']>;\n  readonly #now: () => Date;\n\n  constructor(\n    config: JwtExecutionHostMcpCapabilityVerifierConfig,\n    options: ExecutionHostJwtVerifierOptions = {},\n  ) {\n    const parsed = JwtExecutionHostMcpCapabilityVerifierConfigSchema.parse(\n      config,\n    );\n    this.#config = Object.freeze({\n      ...parsed,\n      jwksUrl: new URL(parsed.jwksUrl),\n    });\n    this.#keyResolver = options.keyResolver\n      ?? createJwtKeyResolver(this.#config.jwksUrl);\n    this.#now = options.now ?? (() => new Date());\n  }\n\n  async verify(\n    rawRequest: ExecutionHostMcpCapabilityVerificationRequest,\n  ): Promise<VerifiedExecutionHostMcpCapability> {\n    try {\n      const request = Object.freeze({\n        ...rawRequest,\n        assertion: AssertionSchema.parse(rawRequest.assertion),\n      });\n      const { payload } = await jwtVerify(\n        request.assertion,\n        this.#keyResolver,\n        {\n          algorithms: [...this.#config.jwtAlgorithms],\n          audience: this.#config.audience,\n          clockTolerance: this.#config.clockToleranceSeconds,\n          currentDate: this.#now(),\n          issuer: this.#config.issuer,\n          maxTokenAge: this.#config.maxCapabilityAgeSeconds,\n          requiredClaims: ['exp', 'iat', 'jti', 'sub'],\n          typ: MCP_CAPABILITY_TYPE,\n        },\n      );\n      const claims = McpCapabilityClaimsSchema.parse(payload);\n      this.#assertInvocationBinding(claims, request);\n      this.#assertBoundedLifetime(claims);\n\n      return Object.freeze({\n        assertion: request.assertion,\n        capabilityId: claims.jti,\n        serverId: claims.serverId,\n        allowedTools: Object.freeze([...claims.allowedTools]),\n        issuedAt: new Date(claims.iat * 1_000).toISOString(),\n        expiresAt: new Date(claims.exp * 1_000).toISOString(),\n      });\n    } catch (error) {\n      if (\n        error instanceof ExecutionHostMcpCapabilityVerificationError\n        || error instanceof ExecutionHostMcpCapabilityUnavailableError\n      ) {\n        throw error;\n      }\n      const category = resolveJwtVerificationUnavailableCategory(error);\n      if (category) {\n        throw new ExecutionHostMcpCapabilityUnavailableError(\n          category,\n          { cause: error },\n        );\n      }\n      throw new ExecutionHostMcpCapabilityVerificationError({ cause: error });\n    }\n  }\n\n  #assertInvocationBinding(\n    claims: z.infer<typeof McpCapabilityClaimsSchema>,\n    request: ExecutionHostMcpCapabilityVerificationRequest,\n  ): void {\n    const { identity } = request;\n    if (\n      claims.adopterId !== this.#config.trustedAdopterId\n      || claims.adopterId !== identity.scope.adopterId\n      || claims.tenantId !== identity.scope.tenantId\n      || claims.sub !== identity.scope.subjectId\n      || claims.productSessionId !== identity.scope.productSessionId\n      || claims.runtimeSessionId !== identity.runtimeSessionId\n      || claims.invocationId !== identity.invocationId\n      || claims.workflow !== identity.workflow\n      || claims.serverId !== this.#config.serverId\n      || claims.jti === identity.invocationId\n    ) {\n      throw new ExecutionHostMcpCapabilityVerificationError();\n    }\n  }\n\n  #assertBoundedLifetime(\n    claims: z.infer<typeof McpCapabilityClaimsSchema>,\n  ): void {\n    const lifetimeSeconds = claims.exp - claims.iat;\n    if (\n      lifetimeSeconds <= 0\n      || lifetimeSeconds > this.#config.maxCapabilityAgeSeconds\n    ) {\n      throw new ExecutionHostMcpCapabilityVerificationError();\n    }\n  }\n}\n"]}

package/dist/host/jwt-execution-identity-verifier.d.ts

@@ -0,0 +1,8 @@
+import type { ExecutionIdentityVerificationRequest, ExecutionIdentityVerifier, ExecutionHostJwtVerifierOptions, JwtExecutionIdentityVerifierConfig, VerifiedExecutionIdentity } from './types.js';
+/** Verifies adopter authority and binds it to one exact host invocation. */
+export declare class JwtExecutionIdentityVerifier implements ExecutionIdentityVerifier {
+    #private;
+    constructor(config: JwtExecutionIdentityVerifierConfig, options?: ExecutionHostJwtVerifierOptions);
+    verify(rawRequest: ExecutionIdentityVerificationRequest): Promise<VerifiedExecutionIdentity>;
+}
+//# sourceMappingURL=jwt-execution-identity-verifier.d.ts.map

package/dist/host/jwt-execution-identity-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-execution-identity-verifier.d.ts","sourceRoot":"","sources":["../../src/host/jwt-execution-identity-verifier.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EACV,oCAAoC,EACpC,yBAAyB,EACzB,+BAA+B,EAC/B,kCAAkC,EAClC,yBAAyB,EAC1B,MAAM,YAAY,CAAC;AAKpB,4EAA4E;AAC5E,qBAAa,4BAA6B,YAAW,yBAAyB;;gBAM1E,MAAM,EAAE,kCAAkC,EAC1C,OAAO,GAAE,+BAAoC;IAYzC,MAAM,CACV,UAAU,EAAE,oCAAoC,GAC/C,OAAO,CAAC,yBAAyB,CAAC;CAgEtC"}

package/dist/host/jwt-execution-identity-verifier.js

@@ -0,0 +1,76 @@
+import { jwtVerify } from 'jose';
+import { z } from 'zod';
+import { EXECUTION_ASSERTION_TYPE, ExecutionAssertionClaimsSchema, } from '../contracts/index.js';
+import { createJwtKeyResolver, resolveJwtVerificationUnavailableCategory, } from '../internal/jwt-verification.js';
+import { ExecutionIdentityUnavailableError, ExecutionIdentityVerificationError, } from './errors.js';
+import { JwtExecutionIdentityVerifierConfigSchema } from './schemas.js';
+const AssertionSchema = z.string().trim().min(32).max(4_096);
+/** Verifies adopter authority and binds it to one exact host invocation. */
+export class JwtExecutionIdentityVerifier {
+    #config;
+    #keyResolver;
+    #now;
+    constructor(config, options = {}) {
+        const parsed = JwtExecutionIdentityVerifierConfigSchema.parse(config);
+        this.#config = Object.freeze({
+            ...parsed,
+            executionJwksUrl: new URL(parsed.executionJwksUrl),
+        });
+        this.#keyResolver = options.keyResolver
+            ?? createJwtKeyResolver(this.#config.executionJwksUrl);
+        this.#now = options.now ?? (() => new Date());
+    }
+    async verify(rawRequest) {
+        try {
+            const request = Object.freeze({
+                ...rawRequest,
+                assertion: AssertionSchema.parse(rawRequest.assertion),
+            });
+            const { payload } = await jwtVerify(request.assertion, this.#keyResolver, {
+                algorithms: [...this.#config.executionJwtAlgorithms],
+                audience: this.#config.executionAudience,
+                clockTolerance: this.#config.assertionClockToleranceSeconds,
+                currentDate: this.#now(),
+                issuer: this.#config.executionIssuer,
+                maxTokenAge: this.#config.maxAssertionAgeSeconds,
+                requiredClaims: ['exp', 'iat', 'jti', 'sub'],
+                typ: EXECUTION_ASSERTION_TYPE,
+            });
+            const claims = ExecutionAssertionClaimsSchema.parse(payload);
+            this.#assertRequestBinding(claims, request);
+            return Object.freeze({
+                scope: Object.freeze({
+                    adopterId: claims.adopterId,
+                    tenantId: claims.tenantId,
+                    subjectId: claims.sub,
+                    productSessionId: claims.productSessionId,
+                }),
+                runtimeSessionId: claims.runtimeSessionId,
+                invocationId: claims.jti,
+                workflow: claims.workflow,
+                issuedAt: new Date(claims.iat * 1_000).toISOString(),
+                expiresAt: new Date(claims.exp * 1_000).toISOString(),
+            });
+        }
+        catch (error) {
+            if (error instanceof ExecutionIdentityVerificationError
+                || error instanceof ExecutionIdentityUnavailableError) {
+                throw error;
+            }
+            const category = resolveJwtVerificationUnavailableCategory(error);
+            if (category) {
+                throw new ExecutionIdentityUnavailableError(category, { cause: error });
+            }
+            throw new ExecutionIdentityVerificationError({ cause: error });
+        }
+    }
+    #assertRequestBinding(claims, request) {
+        if (claims.adopterId !== this.#config.trustedAdopterId
+            || claims.runtimeSessionId !== request.runtimeSessionId
+            || claims.jti !== request.invocationId
+            || claims.workflow !== request.workflow) {
+            throw new ExecutionIdentityVerificationError();
+        }
+    }
+}
+//# sourceMappingURL=jwt-execution-identity-verifier.js.map

package/dist/host/jwt-execution-identity-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-execution-identity-verifier.js","sourceRoot":"","sources":["../../src/host/jwt-execution-identity-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,yCAAyC,GAC1C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AASxE,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAG7D,4EAA4E;AAC5E,MAAM,OAAO,4BAA4B;IAC9B,OAAO,CAAyB;IAChC,YAAY,CAA8D;IAC1E,IAAI,CAAa;IAE1B,YACE,MAA0C,EAC1C,UAA2C,EAAE;QAE7C,MAAM,MAAM,GAAG,wCAAwC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,MAAM;YACT,gBAAgB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW;eAClC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,UAAgD;QAEhD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,GAAG,UAAU;gBACb,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CACjC,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,YAAY,EACjB;gBACE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;gBACpD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;gBACxC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,8BAA8B;gBAC3D,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACpC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;gBAChD,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBAC5C,GAAG,EAAE,wBAAwB;aAC9B,CACF,CAAC;YACF,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAE5C,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,SAAS,EAAE,MAAM,CAAC,GAAG;oBACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,CAAC;gBACF,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,YAAY,EAAE,MAAM,CAAC,GAAG;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;gBACpD,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,kCAAkC;mBAChD,KAAK,YAAY,iCAAiC,EACrD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,yCAAyC,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAiC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,kCAAkC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,qBAAqB,CACnB,MAAsD,EACtD,OAA6C;QAE7C,IACE,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB;eAC/C,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB;eACpD,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,YAAY;eACnC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EACvC,CAAC;YACD,MAAM,IAAI,kCAAkC,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;CACF","sourcesContent":["import { jwtVerify } from 'jose';\nimport { z } from 'zod';\nimport {\n  EXECUTION_ASSERTION_TYPE,\n  ExecutionAssertionClaimsSchema,\n} from '../contracts/index.js';\nimport {\n  createJwtKeyResolver,\n  resolveJwtVerificationUnavailableCategory,\n} from '../internal/jwt-verification.js';\nimport {\n  ExecutionIdentityUnavailableError,\n  ExecutionIdentityVerificationError,\n} from './errors.js';\nimport { JwtExecutionIdentityVerifierConfigSchema } from './schemas.js';\nimport type {\n  ExecutionIdentityVerificationRequest,\n  ExecutionIdentityVerifier,\n  ExecutionHostJwtVerifierOptions,\n  JwtExecutionIdentityVerifierConfig,\n  VerifiedExecutionIdentity,\n} from './types.js';\n\nconst AssertionSchema = z.string().trim().min(32).max(4_096);\ntype ParsedConfig = z.infer<typeof JwtExecutionIdentityVerifierConfigSchema>;\n\n/** Verifies adopter authority and binds it to one exact host invocation. */\nexport class JwtExecutionIdentityVerifier implements ExecutionIdentityVerifier {\n  readonly #config: Readonly<ParsedConfig>;\n  readonly #keyResolver: NonNullable<ExecutionHostJwtVerifierOptions['keyResolver']>;\n  readonly #now: () => Date;\n\n  constructor(\n    config: JwtExecutionIdentityVerifierConfig,\n    options: ExecutionHostJwtVerifierOptions = {},\n  ) {\n    const parsed = JwtExecutionIdentityVerifierConfigSchema.parse(config);\n    this.#config = Object.freeze({\n      ...parsed,\n      executionJwksUrl: new URL(parsed.executionJwksUrl),\n    });\n    this.#keyResolver = options.keyResolver\n      ?? createJwtKeyResolver(this.#config.executionJwksUrl);\n    this.#now = options.now ?? (() => new Date());\n  }\n\n  async verify(\n    rawRequest: ExecutionIdentityVerificationRequest,\n  ): Promise<VerifiedExecutionIdentity> {\n    try {\n      const request = Object.freeze({\n        ...rawRequest,\n        assertion: AssertionSchema.parse(rawRequest.assertion),\n      });\n      const { payload } = await jwtVerify(\n        request.assertion,\n        this.#keyResolver,\n        {\n          algorithms: [...this.#config.executionJwtAlgorithms],\n          audience: this.#config.executionAudience,\n          clockTolerance: this.#config.assertionClockToleranceSeconds,\n          currentDate: this.#now(),\n          issuer: this.#config.executionIssuer,\n          maxTokenAge: this.#config.maxAssertionAgeSeconds,\n          requiredClaims: ['exp', 'iat', 'jti', 'sub'],\n          typ: EXECUTION_ASSERTION_TYPE,\n        },\n      );\n      const claims = ExecutionAssertionClaimsSchema.parse(payload);\n      this.#assertRequestBinding(claims, request);\n\n      return Object.freeze({\n        scope: Object.freeze({\n          adopterId: claims.adopterId,\n          tenantId: claims.tenantId,\n          subjectId: claims.sub,\n          productSessionId: claims.productSessionId,\n        }),\n        runtimeSessionId: claims.runtimeSessionId,\n        invocationId: claims.jti,\n        workflow: claims.workflow,\n        issuedAt: new Date(claims.iat * 1_000).toISOString(),\n        expiresAt: new Date(claims.exp * 1_000).toISOString(),\n      });\n    } catch (error) {\n      if (\n        error instanceof ExecutionIdentityVerificationError\n        || error instanceof ExecutionIdentityUnavailableError\n      ) {\n        throw error;\n      }\n      const category = resolveJwtVerificationUnavailableCategory(error);\n      if (category) {\n        throw new ExecutionIdentityUnavailableError(category, { cause: error });\n      }\n      throw new ExecutionIdentityVerificationError({ cause: error });\n    }\n  }\n\n  #assertRequestBinding(\n    claims: z.infer<typeof ExecutionAssertionClaimsSchema>,\n    request: ExecutionIdentityVerificationRequest,\n  ): void {\n    if (\n      claims.adopterId !== this.#config.trustedAdopterId\n      || claims.runtimeSessionId !== request.runtimeSessionId\n      || claims.jti !== request.invocationId\n      || claims.workflow !== request.workflow\n    ) {\n      throw new ExecutionIdentityVerificationError();\n    }\n  }\n}\n"]}

package/dist/host/runtime-session/errors.d.ts

@@ -0,0 +1,21 @@
+export declare class RuntimeExecutionPreparationError extends Error {
+    readonly category: RuntimeExecutionPreparationCategory;
+    readonly name = "RuntimeExecutionPreparationError";
+    constructor(category: RuntimeExecutionPreparationCategory, options?: {
+        cause?: unknown;
+    });
+}
+export type RuntimeExecutionPreparationCategory = 'authority' | 'configuration' | 'contract' | 'dependency';
+export declare class RuntimeBusyError extends Error {
+    readonly name = "RuntimeBusyError";
+}
+export declare class RuntimeDuplicateInvocationError extends Error {
+    readonly name = "RuntimeDuplicateInvocationError";
+}
+export declare class RuntimeDeadlineError extends Error {
+    readonly name = "RuntimeDeadlineError";
+}
+export declare class RuntimeScopeMismatchError extends Error {
+    readonly name = "RuntimeScopeMismatchError";
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/host/runtime-session/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,gCAAiC,SAAQ,KAAK;IAIvD,QAAQ,CAAC,QAAQ,EAAE,mCAAmC;IAHxD,QAAQ,CAAC,IAAI,sCAAsC;gBAGxC,QAAQ,EAAE,mCAAmC,EACtD,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAIpC;AAED,MAAM,MAAM,mCAAmC,GAC3C,WAAW,GACX,eAAe,GACf,UAAU,GACV,YAAY,CAAC;AAEjB,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,sBAAsB;CACpC;AAED,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,QAAQ,CAAC,IAAI,qCAAqC;CACnD;AAED,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,0BAA0B;CACxC;AAED,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,QAAQ,CAAC,IAAI,+BAA+B;CAC7C"}

package/dist/host/runtime-session/errors.js

@@ -0,0 +1,21 @@
+export class RuntimeExecutionPreparationError extends Error {
+    category;
+    name = 'RuntimeExecutionPreparationError';
+    constructor(category, options = {}) {
+        super('The agent execution dependency could not be prepared.', options);
+        this.category = category;
+    }
+}
+export class RuntimeBusyError extends Error {
+    name = 'RuntimeBusyError';
+}
+export class RuntimeDuplicateInvocationError extends Error {
+    name = 'RuntimeDuplicateInvocationError';
+}
+export class RuntimeDeadlineError extends Error {
+    name = 'RuntimeDeadlineError';
+}
+export class RuntimeScopeMismatchError extends Error {
+    name = 'RuntimeScopeMismatchError';
+}
+//# sourceMappingURL=errors.js.map

package/dist/host/runtime-session/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../../src/host/runtime-session/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IAI9C;IAHF,IAAI,GAAG,kCAAkC,CAAC;IAEnD,YACW,QAA6C,EACtD,UAA+B,EAAE;QAEjC,KAAK,CAAC,uDAAuD,EAAE,OAAO,CAAC,CAAC;QAH/D,aAAQ,GAAR,QAAQ,CAAqC;IAIxD,CAAC;CACF;AAQD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAChC,IAAI,GAAG,kBAAkB,CAAC;CACpC;AAED,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAC/C,IAAI,GAAG,iCAAiC,CAAC;CACnD;AAED,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IACpC,IAAI,GAAG,sBAAsB,CAAC;CACxC;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IACzC,IAAI,GAAG,2BAA2B,CAAC;CAC7C","sourcesContent":["export class RuntimeExecutionPreparationError extends Error {\n  readonly name = 'RuntimeExecutionPreparationError';\n\n  constructor(\n    readonly category: RuntimeExecutionPreparationCategory,\n    options: { cause?: unknown } = {},\n  ) {\n    super('The agent execution dependency could not be prepared.', options);\n  }\n}\n\nexport type RuntimeExecutionPreparationCategory =\n  | 'authority'\n  | 'configuration'\n  | 'contract'\n  | 'dependency';\n\nexport class RuntimeBusyError extends Error {\n  readonly name = 'RuntimeBusyError';\n}\n\nexport class RuntimeDuplicateInvocationError extends Error {\n  readonly name = 'RuntimeDuplicateInvocationError';\n}\n\nexport class RuntimeDeadlineError extends Error {\n  readonly name = 'RuntimeDeadlineError';\n}\n\nexport class RuntimeScopeMismatchError extends Error {\n  readonly name = 'RuntimeScopeMismatchError';\n}\n"]}

package/dist/host/runtime-session/index.d.ts

@@ -0,0 +1,9 @@
+export { RuntimeBusyError, RuntimeDeadlineError, RuntimeDuplicateInvocationError, RuntimeExecutionPreparationError, RuntimeScopeMismatchError, } from './errors.js';
+export type { RuntimeExecutionPreparationCategory, } from './errors.js';
+export { RuntimeScopeBindingService, } from './scope-binding.js';
+export type { BoundRuntimeScope, RuntimeScopeBinding, } from './scope-binding.js';
+export { RuntimeSessionService } from './service.js';
+export { RuntimeSessionStatusService } from './status.js';
+export type { RuntimeSessionStatusSnapshot } from './status.js';
+export type { RuntimeExecutionHandle, RuntimeExecutionInput, RuntimeExecutionStreamItem, RuntimeInvocationHandle, RuntimeInvocationRequest, RuntimeSessionConfig, RuntimeWorkflowExecutor, RuntimeWorkflowExecutors, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/host/runtime-session/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,+BAA+B,EAC/B,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AACrB,YAAY,EACV,mCAAmC,GACpC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,GAC3B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC;AAC1D,YAAY,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAChE,YAAY,EACV,sBAAsB,EACtB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,GACzB,MAAM,YAAY,CAAC"}

package/dist/host/runtime-session/index.js

@@ -0,0 +1,5 @@
+export { RuntimeBusyError, RuntimeDeadlineError, RuntimeDuplicateInvocationError, RuntimeExecutionPreparationError, RuntimeScopeMismatchError, } from './errors.js';
+export { RuntimeScopeBindingService, } from './scope-binding.js';
+export { RuntimeSessionService } from './service.js';
+export { RuntimeSessionStatusService } from './status.js';
+//# sourceMappingURL=index.js.map

package/dist/host/runtime-session/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/host/runtime-session/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,+BAA+B,EAC/B,gCAAgC,EAChC,yBAAyB,GAC1B,MAAM,aAAa,CAAC;AAIrB,OAAO,EACL,0BAA0B,GAC3B,MAAM,oBAAoB,CAAC;AAK5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,2BAA2B,EAAE,MAAM,aAAa,CAAC","sourcesContent":["export {\n  RuntimeBusyError,\n  RuntimeDeadlineError,\n  RuntimeDuplicateInvocationError,\n  RuntimeExecutionPreparationError,\n  RuntimeScopeMismatchError,\n} from './errors.js';\nexport type {\n  RuntimeExecutionPreparationCategory,\n} from './errors.js';\nexport {\n  RuntimeScopeBindingService,\n} from './scope-binding.js';\nexport type {\n  BoundRuntimeScope,\n  RuntimeScopeBinding,\n} from './scope-binding.js';\nexport { RuntimeSessionService } from './service.js';\nexport { RuntimeSessionStatusService } from './status.js';\nexport type { RuntimeSessionStatusSnapshot } from './status.js';\nexport type {\n  RuntimeExecutionHandle,\n  RuntimeExecutionInput,\n  RuntimeExecutionStreamItem,\n  RuntimeInvocationHandle,\n  RuntimeInvocationRequest,\n  RuntimeSessionConfig,\n  RuntimeWorkflowExecutor,\n  RuntimeWorkflowExecutors,\n} from './types.js';\n"]}

package/dist/host/runtime-session/scope-binding.d.ts

@@ -0,0 +1,17 @@
+import type { ExecutionScope } from '../../contracts/index.js';
+export type RuntimeScopeBinding = ExecutionScope & {
+    runtimeSessionId: string;
+};
+export type BoundRuntimeScope = {
+    binding: RuntimeScopeBinding;
+    scopeKey: string;
+    executionSessionId: string;
+};
+/** Defense in depth if a host process is reused across execution scopes. */
+export declare class RuntimeScopeBindingService {
+    private bound?;
+    bind(input: RuntimeScopeBinding): BoundRuntimeScope;
+    current(): BoundRuntimeScope | undefined;
+    private static toBoundScope;
+}
+//# sourceMappingURL=scope-binding.d.ts.map

package/dist/host/runtime-session/scope-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-binding.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/scope-binding.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,MAAM,MAAM,mBAAmB,GAAG,cAAc,GAAG;IACjD,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,iBAAiB,GAAG;IAC9B,OAAO,EAAE,mBAAmB,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,4EAA4E;AAC5E,qBAAa,0BAA0B;IACrC,OAAO,CAAC,KAAK,CAAC,CAAoB;IAElC,IAAI,CAAC,KAAK,EAAE,mBAAmB,GAAG,iBAAiB;IAgBnD,OAAO,IAAI,iBAAiB,GAAG,SAAS;IAIxC,OAAO,CAAC,MAAM,CAAC,YAAY;CAiB5B"}