@heddleagent/execution-host-client 6.7.0 → 7.0.0

package/dist/host/jwt-execution-identity-verifier.js.map

@@ -1 +1 @@
-{"version":3,"file":"jwt-execution-identity-verifier.js","sourceRoot":"","sources":["../../src/host/jwt-execution-identity-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,yCAAyC,GAC1C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,wCAAwC,EAAE,MAAM,cAAc,CAAC;AASxE,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAG7D,4EAA4E;AAC5E,MAAM,OAAO,4BAA4B;IAC9B,OAAO,CAAyB;IAChC,YAAY,CAA8D;IAC1E,IAAI,CAAa;IAE1B,YACE,MAA0C,EAC1C,UAA2C,EAAE;QAE7C,MAAM,MAAM,GAAG,wCAAwC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,MAAM;YACT,gBAAgB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW;eAClC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,UAAgD;QAEhD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,GAAG,UAAU;gBACb,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CACjC,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,YAAY,EACjB;gBACE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;gBACpD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;gBACxC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,8BAA8B;gBAC3D,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACpC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;gBAChD,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBAC5C,GAAG,EAAE,wBAAwB;aAC9B,CACF,CAAC;YACF,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAE5C,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,SAAS,EAAE,MAAM,CAAC,GAAG;oBACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,CAAC;gBACF,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,YAAY,EAAE,MAAM,CAAC,GAAG;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;gBACpD,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,kCAAkC;mBAChD,KAAK,YAAY,iCAAiC,EACrD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,yCAAyC,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAiC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,kCAAkC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,qBAAqB,CACnB,MAAsD,EACtD,OAA6C;QAE7C,IACE,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB;eAC/C,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB;eACpD,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,YAAY;eACnC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EACvC,CAAC;YACD,MAAM,IAAI,kCAAkC,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;CACF","sourcesContent":["import { jwtVerify } from 'jose';\nimport { z } from 'zod';\nimport {\n  EXECUTION_ASSERTION_TYPE,\n  ExecutionAssertionClaimsSchema,\n} from '../contracts/index.js';\nimport {\n  createJwtKeyResolver,\n  resolveJwtVerificationUnavailableCategory,\n} from '../internal/jwt-verification.js';\nimport {\n  ExecutionIdentityUnavailableError,\n  ExecutionIdentityVerificationError,\n} from './errors.js';\nimport { JwtExecutionIdentityVerifierConfigSchema } from './schemas.js';\nimport type {\n  ExecutionIdentityVerificationRequest,\n  ExecutionIdentityVerifier,\n  ExecutionHostJwtVerifierOptions,\n  JwtExecutionIdentityVerifierConfig,\n  VerifiedExecutionIdentity,\n} from './types.js';\n\nconst AssertionSchema = z.string().trim().min(32).max(4_096);\ntype ParsedConfig = z.infer<typeof JwtExecutionIdentityVerifierConfigSchema>;\n\n/** Verifies adopter authority and binds it to one exact host invocation. */\nexport class JwtExecutionIdentityVerifier implements ExecutionIdentityVerifier {\n  readonly #config: Readonly<ParsedConfig>;\n  readonly #keyResolver: NonNullable<ExecutionHostJwtVerifierOptions['keyResolver']>;\n  readonly #now: () => Date;\n\n  constructor(\n    config: JwtExecutionIdentityVerifierConfig,\n    options: ExecutionHostJwtVerifierOptions = {},\n  ) {\n    const parsed = JwtExecutionIdentityVerifierConfigSchema.parse(config);\n    this.#config = Object.freeze({\n      ...parsed,\n      executionJwksUrl: new URL(parsed.executionJwksUrl),\n    });\n    this.#keyResolver = options.keyResolver\n      ?? createJwtKeyResolver(this.#config.executionJwksUrl);\n    this.#now = options.now ?? (() => new Date());\n  }\n\n  async verify(\n    rawRequest: ExecutionIdentityVerificationRequest,\n  ): Promise<VerifiedExecutionIdentity> {\n    try {\n      const request = Object.freeze({\n        ...rawRequest,\n        assertion: AssertionSchema.parse(rawRequest.assertion),\n      });\n      const { payload } = await jwtVerify(\n        request.assertion,\n        this.#keyResolver,\n        {\n          algorithms: [...this.#config.executionJwtAlgorithms],\n          audience: this.#config.executionAudience,\n          clockTolerance: this.#config.assertionClockToleranceSeconds,\n          currentDate: this.#now(),\n          issuer: this.#config.executionIssuer,\n          maxTokenAge: this.#config.maxAssertionAgeSeconds,\n          requiredClaims: ['exp', 'iat', 'jti', 'sub'],\n          typ: EXECUTION_ASSERTION_TYPE,\n        },\n      );\n      const claims = ExecutionAssertionClaimsSchema.parse(payload);\n      this.#assertRequestBinding(claims, request);\n\n      return Object.freeze({\n        scope: Object.freeze({\n          adopterId: claims.adopterId,\n          tenantId: claims.tenantId,\n          subjectId: claims.sub,\n          productSessionId: claims.productSessionId,\n        }),\n        runtimeSessionId: claims.runtimeSessionId,\n        invocationId: claims.jti,\n        workflow: claims.workflow,\n        issuedAt: new Date(claims.iat * 1_000).toISOString(),\n        expiresAt: new Date(claims.exp * 1_000).toISOString(),\n      });\n    } catch (error) {\n      if (\n        error instanceof ExecutionIdentityVerificationError\n        || error instanceof ExecutionIdentityUnavailableError\n      ) {\n        throw error;\n      }\n      const category = resolveJwtVerificationUnavailableCategory(error);\n      if (category) {\n        throw new ExecutionIdentityUnavailableError(category, { cause: error });\n      }\n      throw new ExecutionIdentityVerificationError({ cause: error });\n    }\n  }\n\n  #assertRequestBinding(\n    claims: z.infer<typeof ExecutionAssertionClaimsSchema>,\n    request: ExecutionIdentityVerificationRequest,\n  ): void {\n    if (\n      claims.adopterId !== this.#config.trustedAdopterId\n      || claims.runtimeSessionId !== request.runtimeSessionId\n      || claims.jti !== request.invocationId\n      || claims.workflow !== request.workflow\n    ) {\n      throw new ExecutionIdentityVerificationError();\n    }\n  }\n}\n"]}
+{"version":3,"file":"jwt-execution-identity-verifier.js","sourceRoot":"","sources":["../../src/host/jwt-execution-identity-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,yCAAyC,GAC1C,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,uCAAuC,GACxC,MAAM,cAAc,CAAC;AAStB,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAG7D,4EAA4E;AAC5E,MAAM,OAAO,4BAA4B;IAC9B,OAAO,CAAyB;IAChC,YAAY,CAA8D;IAC1E,IAAI,CAAa;IAE1B,YACE,MAA0C,EAC1C,UAA2C,EAAE;QAE7C,MAAM,MAAM,GAAG,uCAAuC,CAAC,MAAM,EAAE;YAC7D,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,KAAK,IAAI;SAC5D,CAAC,CAAC;QACH,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;YAC3B,GAAG,MAAM;YACT,gBAAgB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;SACnD,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,WAAW;eAClC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,MAAM,CACV,UAAgD;QAEhD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC;gBAC5B,GAAG,UAAU;gBACb,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC;aACvD,CAAC,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CACjC,OAAO,CAAC,SAAS,EACjB,IAAI,CAAC,YAAY,EACjB;gBACE,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC;gBACpD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,iBAAiB;gBACxC,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,8BAA8B;gBAC3D,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE;gBACxB,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe;gBACpC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,sBAAsB;gBAChD,cAAc,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;gBAC5C,GAAG,EAAE,wBAAwB;aAC9B,CACF,CAAC;YACF,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC7D,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAE5C,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;oBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,SAAS,EAAE,MAAM,CAAC,GAAG;oBACrB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;iBAC1C,CAAC;gBACF,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;gBACzC,YAAY,EAAE,MAAM,CAAC,GAAG;gBACxB,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,QAAQ,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;gBACpD,SAAS,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;aACtD,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IACE,KAAK,YAAY,kCAAkC;mBAChD,KAAK,YAAY,iCAAiC,EACrD,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;YACD,MAAM,QAAQ,GAAG,yCAAyC,CAAC,KAAK,CAAC,CAAC;YAClE,IAAI,QAAQ,EAAE,CAAC;gBACb,MAAM,IAAI,iCAAiC,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1E,CAAC;YACD,MAAM,IAAI,kCAAkC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,qBAAqB,CACnB,MAAsD,EACtD,OAA6C;QAE7C,IACE,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,OAAO,CAAC,gBAAgB;eAC/C,MAAM,CAAC,gBAAgB,KAAK,OAAO,CAAC,gBAAgB;eACpD,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,YAAY;eACnC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,EACvC,CAAC;YACD,MAAM,IAAI,kCAAkC,EAAE,CAAC;QACjD,CAAC;IACH,CAAC;CACF","sourcesContent":["import { jwtVerify } from 'jose';\nimport { z } from 'zod';\nimport {\n  EXECUTION_ASSERTION_TYPE,\n  ExecutionAssertionClaimsSchema,\n} from '../contracts/index.js';\nimport {\n  createJwtKeyResolver,\n  resolveJwtVerificationUnavailableCategory,\n} from '../internal/jwt-verification.js';\nimport {\n  ExecutionIdentityUnavailableError,\n  ExecutionIdentityVerificationError,\n} from './errors.js';\nimport {\n  JwtExecutionIdentityVerifierConfigSchema,\n  parseJwtExecutionIdentityVerifierConfig,\n} from './schemas.js';\nimport type {\n  ExecutionIdentityVerificationRequest,\n  ExecutionIdentityVerifier,\n  ExecutionHostJwtVerifierOptions,\n  JwtExecutionIdentityVerifierConfig,\n  VerifiedExecutionIdentity,\n} from './types.js';\n\nconst AssertionSchema = z.string().trim().min(32).max(4_096);\ntype ParsedConfig = z.infer<typeof JwtExecutionIdentityVerifierConfigSchema>;\n\n/** Verifies adopter authority and binds it to one exact host invocation. */\nexport class JwtExecutionIdentityVerifier implements ExecutionIdentityVerifier {\n  readonly #config: Readonly<ParsedConfig>;\n  readonly #keyResolver: NonNullable<ExecutionHostJwtVerifierOptions['keyResolver']>;\n  readonly #now: () => Date;\n\n  constructor(\n    config: JwtExecutionIdentityVerifierConfig,\n    options: ExecutionHostJwtVerifierOptions = {},\n  ) {\n    const parsed = parseJwtExecutionIdentityVerifierConfig(config, {\n      allowDockerLocalHost: options.allowDockerLocalHost === true,\n    });\n    this.#config = Object.freeze({\n      ...parsed,\n      executionJwksUrl: new URL(parsed.executionJwksUrl),\n    });\n    this.#keyResolver = options.keyResolver\n      ?? createJwtKeyResolver(this.#config.executionJwksUrl);\n    this.#now = options.now ?? (() => new Date());\n  }\n\n  async verify(\n    rawRequest: ExecutionIdentityVerificationRequest,\n  ): Promise<VerifiedExecutionIdentity> {\n    try {\n      const request = Object.freeze({\n        ...rawRequest,\n        assertion: AssertionSchema.parse(rawRequest.assertion),\n      });\n      const { payload } = await jwtVerify(\n        request.assertion,\n        this.#keyResolver,\n        {\n          algorithms: [...this.#config.executionJwtAlgorithms],\n          audience: this.#config.executionAudience,\n          clockTolerance: this.#config.assertionClockToleranceSeconds,\n          currentDate: this.#now(),\n          issuer: this.#config.executionIssuer,\n          maxTokenAge: this.#config.maxAssertionAgeSeconds,\n          requiredClaims: ['exp', 'iat', 'jti', 'sub'],\n          typ: EXECUTION_ASSERTION_TYPE,\n        },\n      );\n      const claims = ExecutionAssertionClaimsSchema.parse(payload);\n      this.#assertRequestBinding(claims, request);\n\n      return Object.freeze({\n        scope: Object.freeze({\n          adopterId: claims.adopterId,\n          tenantId: claims.tenantId,\n          subjectId: claims.sub,\n          productSessionId: claims.productSessionId,\n        }),\n        runtimeSessionId: claims.runtimeSessionId,\n        invocationId: claims.jti,\n        workflow: claims.workflow,\n        issuedAt: new Date(claims.iat * 1_000).toISOString(),\n        expiresAt: new Date(claims.exp * 1_000).toISOString(),\n      });\n    } catch (error) {\n      if (\n        error instanceof ExecutionIdentityVerificationError\n        || error instanceof ExecutionIdentityUnavailableError\n      ) {\n        throw error;\n      }\n      const category = resolveJwtVerificationUnavailableCategory(error);\n      if (category) {\n        throw new ExecutionIdentityUnavailableError(category, { cause: error });\n      }\n      throw new ExecutionIdentityVerificationError({ cause: error });\n    }\n  }\n\n  #assertRequestBinding(\n    claims: z.infer<typeof ExecutionAssertionClaimsSchema>,\n    request: ExecutionIdentityVerificationRequest,\n  ): void {\n    if (\n      claims.adopterId !== this.#config.trustedAdopterId\n      || claims.runtimeSessionId !== request.runtimeSessionId\n      || claims.jti !== request.invocationId\n      || claims.workflow !== request.workflow\n    ) {\n      throw new ExecutionIdentityVerificationError();\n    }\n  }\n}\n"]}

package/dist/host/runtime-session/service.d.ts

@@ -1,7 +1,7 @@
 import type { VerifiedExecutionHostMcpCapability, VerifiedExecutionIdentity } from '../types.js';
 import { RuntimeScopeBindingService, type BoundRuntimeScope } from './scope-binding.js';
 import { RuntimeSessionStatusService, type RuntimeSessionStatusSnapshot } from './status.js';
-import type { RuntimeInvocationHandle, RuntimeInvocationRequest, RuntimeSessionConfig, RuntimeWorkflowExecutors } from './types.js';
+import type { RuntimeExecutionInput, RuntimeInvocationHandle, RuntimeInvocationRequest, RuntimeSessionConfig, RuntimeWorkflowExecutors } from './types.js';
 /** Coordinates one process-bound Runtime session without owning product data. */
 export declare class RuntimeSessionService {
     private active?;
@@ -24,7 +24,7 @@ export declare class RuntimeSessionService {
     start(input: {
         identity: VerifiedExecutionIdentity;
         invocation: RuntimeInvocationRequest;
-        modelApiKey: string;
+        modelCredential: RuntimeExecutionInput['modelCredential'];
         mcpCapability?: VerifiedExecutionHostMcpCapability;
         callerSignal: AbortSignal;
     }): Promise<RuntimeInvocationHandle>;

package/dist/host/runtime-session/service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kCAAkC,EAClC,yBAAyB,EAC1B,MAAM,aAAa,CAAC;AAMrB,OAAO,EACL,0BAA0B,EAC1B,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,KAAK,4BAA4B,EAClC,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAGV,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAiBpB,iFAAiF;AACjF,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAC,CAAmB;IAClC,OAAO,CAAC,QAAQ,CAAC,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAqB;IAClE,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAgB;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,OAAO,EAAE;QACnB,MAAM,EAAE,oBAAoB,CAAC;QAC7B,SAAS,EAAE,wBAAwB,CAAC;QACpC,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,MAAM,CAAC,EAAE,2BAA2B,CAAC;QACrC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;KAClB;IAcD,UAAU,IAAI,4BAA4B;IAIpC,KAAK,CAAC,KAAK,EAAE;QACjB,QAAQ,EAAE,yBAAyB,CAAC;QACpC,UAAU,EAAE,wBAAwB,CAAC;QACrC,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,kCAAkC,CAAC;QACnD,YAAY,EAAE,WAAW,CAAC;KAC3B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAoG9B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB/B,UAAU,IAAI,iBAAiB,GAAG,SAAS;IAI3C,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,MAAM;IAWd,OAAO,CAAC,2BAA2B;IAYnC,OAAO,CAAC,cAAc;CAcvB"}
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kCAAkC,EAClC,yBAAyB,EAC1B,MAAM,aAAa,CAAC;AAMrB,OAAO,EACL,0BAA0B,EAC1B,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,EAC3B,KAAK,4BAA4B,EAClC,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAEV,qBAAqB,EACrB,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,wBAAwB,EACzB,MAAM,YAAY,CAAC;AAiBpB,iFAAiF;AACjF,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAAC,CAAmB;IAClC,OAAO,CAAC,QAAQ,CAAC,CAAqB;IACtC,OAAO,CAAC,QAAQ,CAAC,4BAA4B,CAAqB;IAClE,OAAO,CAAC,QAAQ,CAAC,8BAA8B,CAAgB;IAC/D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAuB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA8B;IACrD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAa;gBAErB,OAAO,EAAE;QACnB,MAAM,EAAE,oBAAoB,CAAC;QAC7B,SAAS,EAAE,wBAAwB,CAAC;QACpC,OAAO,CAAC,EAAE,0BAA0B,CAAC;QACrC,MAAM,CAAC,EAAE,2BAA2B,CAAC;QACrC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;KAClB;IAcD,UAAU,IAAI,4BAA4B;IAIpC,KAAK,CAAC,KAAK,EAAE;QACjB,QAAQ,EAAE,yBAAyB,CAAC;QACpC,UAAU,EAAE,wBAAwB,CAAC;QACrC,eAAe,EAAE,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;QAC1D,aAAa,CAAC,EAAE,kCAAkC,CAAC;QACnD,YAAY,EAAE,WAAW,CAAC;KAC3B,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAoG9B,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC;IAoB/B,UAAU,IAAI,iBAAiB,GAAG,SAAS;IAI3C,OAAO,CAAC,eAAe;IAgBvB,OAAO,CAAC,MAAM;IAWd,OAAO,CAAC,2BAA2B;IAYnC,OAAO,CAAC,cAAc;CAcvB"}

package/dist/host/runtime-session/service.js

@@ -53,7 +53,7 @@ export class RuntimeSessionService {
             scopeKey: binding.scopeKey,
             executionSessionId: binding.executionSessionId,
             request: input.invocation,
-            modelApiKey: input.modelApiKey,
+            modelCredential: input.modelCredential,
             mcpCapability: input.mcpCapability,
             abortSignal: controller.signal,
         };

package/dist/host/runtime-session/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/host/runtime-session/service.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,GAE3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,GAE5B,MAAM,aAAa,CAAC;AAUrB,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAepC,iFAAiF;AACjF,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAoB;IAC1B,QAAQ,CAAsB;IACrB,4BAA4B,GAAG,IAAI,GAAG,EAAU,CAAC;IACjD,8BAA8B,GAAa,EAAE,CAAC;IAC9C,MAAM,CAAuB;IAC7B,SAAS,CAA2B;IACpC,OAAO,CAA6B;IACpC,MAAM,CAA8B;IACpC,GAAG,CAAa;IAEjC,YAAY,OAMX;QACC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;eAClD,OAAO,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,0BAA0B,EAAE,CAAC;QACnE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAMX;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;YACjD,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CACxB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,+BAA+B,CACvC,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1E,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC/B,eAAe,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,aAAa,GAAG,UAAU,CAC9B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CACpB,IAAI,oBAAoB,CAAC,0CAA0C,CAAC,CACrE,EACD,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAC1C,CAAC;QACF,aAAa,CAAC,KAAK,EAAE,CAAC;QAEtB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG;YACrB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;YAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,OAAO,EAAE,KAAK,CAAC,UAAU;YACzB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,UAAU,CAAC,MAAM;SACC,CAAC;QAClC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CACzC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAC1C,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU;YACV,OAAO,EAAE,YAAY;SACtB,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,GAA2B,CAAC;QAChC,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,YAAY,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAqB;YAC/B,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;YACzC,GAAG;YACH,UAAU;YACV,aAAa;YACb,yBAAyB,EAAE,GAAG,EAAE,CAC9B,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC;SACnE,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE;YAC9D,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAE9B,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACpC,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,GAAG,EAAE;gBACX,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC7C,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAChC,CAAC;IAEO,eAAe,CAAC,UAAmB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,oBAAoB,CAC5B,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;IAEO,MAAM,CAAC,MAAwB;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnC,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAEO,2BAA2B,CAAC,YAAoB;QACtD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,8BAA8B,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,8BAA8B,CAAC,KAAK,EAAE,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,cAAc,CACpB,KAA4B;QAE5B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAC3C,GAAG,KAAK;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC;YACxC,GAAG,KAAK;YACR,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import type {\n  VerifiedExecutionHostMcpCapability,\n  VerifiedExecutionIdentity,\n} from '../types.js';\nimport {\n  RuntimeBusyError,\n  RuntimeDeadlineError,\n  RuntimeDuplicateInvocationError,\n} from './errors.js';\nimport {\n  RuntimeScopeBindingService,\n  type BoundRuntimeScope,\n} from './scope-binding.js';\nimport {\n  RuntimeSessionStatusService,\n  type RuntimeSessionStatusSnapshot,\n} from './status.js';\nimport type {\n  RuntimeExecutionHandle,\n  RuntimeExecutionInput,\n  RuntimeInvocationHandle,\n  RuntimeInvocationRequest,\n  RuntimeSessionConfig,\n  RuntimeWorkflowExecutors,\n} from './types.js';\n\nconst RECENT_INVOCATION_LIMIT = 128;\n\ntype ActiveInvocation = {\n  invocationId: string;\n  run: RuntimeExecutionHandle;\n  controller: AbortController;\n  deadlineTimer: ReturnType<typeof setTimeout>;\n  removeCallerAbortListener: () => void;\n};\n\ntype StartingInvocation = {\n  controller: AbortController;\n  promise: Promise<RuntimeExecutionHandle>;\n};\n\n/** Coordinates one process-bound Runtime session without owning product data. */\nexport class RuntimeSessionService {\n  private active?: ActiveInvocation;\n  private starting?: StartingInvocation;\n  private readonly recentCompletedInvocationIds = new Set<string>();\n  private readonly recentCompletedInvocationOrder: string[] = [];\n  private readonly config: RuntimeSessionConfig;\n  private readonly executors: RuntimeWorkflowExecutors;\n  private readonly binding: RuntimeScopeBindingService;\n  private readonly status: RuntimeSessionStatusService;\n  private readonly now: () => Date;\n\n  constructor(options: {\n    config: RuntimeSessionConfig;\n    executors: RuntimeWorkflowExecutors;\n    binding?: RuntimeScopeBindingService;\n    status?: RuntimeSessionStatusService;\n    now?: () => Date;\n  }) {\n    if (\n      !Number.isSafeInteger(options.config.maxInvocationMs)\n      || options.config.maxInvocationMs <= 0\n    ) {\n      throw new Error('maxInvocationMs must be a positive safe integer.');\n    }\n    this.config = options.config;\n    this.executors = options.executors;\n    this.binding = options.binding ?? new RuntimeScopeBindingService();\n    this.now = options.now ?? (() => new Date());\n    this.status = options.status ?? new RuntimeSessionStatusService(this.now);\n  }\n\n  readStatus(): RuntimeSessionStatusSnapshot {\n    return this.status.read();\n  }\n\n  async start(input: {\n    identity: VerifiedExecutionIdentity;\n    invocation: RuntimeInvocationRequest;\n    modelApiKey: string;\n    mcpCapability?: VerifiedExecutionHostMcpCapability;\n    callerSignal: AbortSignal;\n  }): Promise<RuntimeInvocationHandle> {\n    const deadline = this.resolveDeadline(input.invocation.deadlineAt);\n    const binding = this.binding.bind({\n      runtimeSessionId: input.identity.runtimeSessionId,\n      ...input.identity.scope,\n    });\n\n    if (this.active || this.starting) {\n      throw new RuntimeBusyError(\n        'This runtime session already has an active invocation.',\n      );\n    }\n    if (this.recentCompletedInvocationIds.has(input.identity.invocationId)) {\n      throw new RuntimeDuplicateInvocationError(\n        'This recent invocation identifier already completed in the current runtime process.',\n      );\n    }\n\n    const controller = new AbortController();\n    const abortFromCaller = () => controller.abort(input.callerSignal.reason);\n    input.callerSignal.addEventListener('abort', abortFromCaller, { once: true });\n    if (input.callerSignal.aborted) {\n      abortFromCaller();\n    }\n\n    const deadlineTimer = setTimeout(\n      () => controller.abort(\n        new RuntimeDeadlineError('The runtime invocation deadline elapsed.'),\n      ),\n      deadline.getTime() - this.now().getTime(),\n    );\n    deadlineTimer.unref();\n\n    this.status.markExecuting();\n    const executionInput = {\n      scope: input.identity.scope,\n      scopeKey: binding.scopeKey,\n      executionSessionId: binding.executionSessionId,\n      request: input.invocation,\n      modelApiKey: input.modelApiKey,\n      mcpCapability: input.mcpCapability,\n      abortSignal: controller.signal,\n    } satisfies RuntimeExecutionInput;\n    const startPromise = Promise.resolve().then(\n      () => this.startExecution(executionInput),\n    );\n    const starting: StartingInvocation = {\n      controller,\n      promise: startPromise,\n    };\n    this.starting = starting;\n\n    let run: RuntimeExecutionHandle;\n    try {\n      run = await startPromise;\n    } catch (error) {\n      clearTimeout(deadlineTimer);\n      input.callerSignal.removeEventListener('abort', abortFromCaller);\n      this.status.markIdle();\n      throw error;\n    } finally {\n      if (this.starting === starting) {\n        this.starting = undefined;\n      }\n    }\n\n    const active: ActiveInvocation = {\n      invocationId: input.identity.invocationId,\n      run,\n      controller,\n      deadlineTimer,\n      removeCallerAbortListener: () =>\n        input.callerSignal.removeEventListener('abort', abortFromCaller),\n    };\n    this.active = active;\n    controller.signal.addEventListener('abort', () => run.cancel(), {\n      once: true,\n    });\n    if (controller.signal.aborted) {\n      run.cancel();\n    }\n\n    const result = run.result.finally(() => this.settle(active));\n    result.catch(() => undefined);\n\n    return {\n      runId: run.runId,\n      acceptedAt: this.now().toISOString(),\n      // The execution signal cancels the agent, but the event subscription\n      // remains open for the executor's truthful cancelled terminal.\n      events: () => run.events(),\n      cancel: () => {\n        const wasActive = !controller.signal.aborted;\n        controller.abort();\n        return wasActive;\n      },\n      result,\n    };\n  }\n\n  async shutdown(): Promise<void> {\n    const starting = this.starting;\n    if (starting) {\n      starting.controller.abort(new Error('Runtime is shutting down.'));\n      const run = await starting.promise.catch(() => undefined);\n      if (run) {\n        run.cancel();\n        await run.result.catch(() => undefined);\n      }\n    }\n\n    const active = this.active;\n    if (!active) {\n      return;\n    }\n    active.controller.abort(new Error('Runtime is shutting down.'));\n    active.run.cancel();\n    await active.run.result.catch(() => undefined);\n  }\n\n  boundScope(): BoundRuntimeScope | undefined {\n    return this.binding.current();\n  }\n\n  private resolveDeadline(deadlineAt?: string): Date {\n    const now = this.now();\n    const maximum = new Date(now.getTime() + this.config.maxInvocationMs);\n    if (!deadlineAt) {\n      return maximum;\n    }\n\n    const requested = new Date(deadlineAt);\n    if (requested.getTime() <= now.getTime()) {\n      throw new RuntimeDeadlineError(\n        'The runtime invocation deadline has already elapsed.',\n      );\n    }\n    return requested.getTime() < maximum.getTime() ? requested : maximum;\n  }\n\n  private settle(active: ActiveInvocation): void {\n    if (this.active !== active) {\n      return;\n    }\n    clearTimeout(active.deadlineTimer);\n    active.removeCallerAbortListener();\n    this.active = undefined;\n    this.rememberCompletedInvocation(active.invocationId);\n    this.status.markIdle();\n  }\n\n  private rememberCompletedInvocation(invocationId: string): void {\n    this.recentCompletedInvocationIds.add(invocationId);\n    this.recentCompletedInvocationOrder.push(invocationId);\n    if (this.recentCompletedInvocationOrder.length <= RECENT_INVOCATION_LIMIT) {\n      return;\n    }\n    const oldest = this.recentCompletedInvocationOrder.shift();\n    if (oldest) {\n      this.recentCompletedInvocationIds.delete(oldest);\n    }\n  }\n\n  private startExecution(\n    input: RuntimeExecutionInput,\n  ): Promise<RuntimeExecutionHandle> {\n    if (input.request.kind === 'conversation-turn') {\n      return this.executors.conversationTurn.start({\n        ...input,\n        request: input.request,\n      });\n    }\n    return this.executors.heartbeatTask.start({\n      ...input,\n      request: input.request,\n    });\n  }\n}\n"]}
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../../src/host/runtime-session/service.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,gBAAgB,EAChB,oBAAoB,EACpB,+BAA+B,GAChC,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,0BAA0B,GAE3B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,2BAA2B,GAE5B,MAAM,aAAa,CAAC;AAUrB,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAepC,iFAAiF;AACjF,MAAM,OAAO,qBAAqB;IACxB,MAAM,CAAoB;IAC1B,QAAQ,CAAsB;IACrB,4BAA4B,GAAG,IAAI,GAAG,EAAU,CAAC;IACjD,8BAA8B,GAAa,EAAE,CAAC;IAC9C,MAAM,CAAuB;IAC7B,SAAS,CAA2B;IACpC,OAAO,CAA6B;IACpC,MAAM,CAA8B;IACpC,GAAG,CAAa;IAEjC,YAAY,OAMX;QACC,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;eAClD,OAAO,CAAC,MAAM,CAAC,eAAe,IAAI,CAAC,EACtC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC;QACnC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,0BAA0B,EAAE,CAAC;QACnE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5E,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAMX;QACC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;YAChC,gBAAgB,EAAE,KAAK,CAAC,QAAQ,CAAC,gBAAgB;YACjD,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,MAAM,IAAI,gBAAgB,CACxB,wDAAwD,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,+BAA+B,CACvC,qFAAqF,CACtF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC1E,KAAK,CAAC,YAAY,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC/B,eAAe,EAAE,CAAC;QACpB,CAAC;QAED,MAAM,aAAa,GAAG,UAAU,CAC9B,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CACpB,IAAI,oBAAoB,CAAC,0CAA0C,CAAC,CACrE,EACD,QAAQ,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAC1C,CAAC;QACF,aAAa,CAAC,KAAK,EAAE,CAAC;QAEtB,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5B,MAAM,cAAc,GAAG;YACrB,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;YAC3B,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,OAAO,EAAE,KAAK,CAAC,UAAU;YACzB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,WAAW,EAAE,UAAU,CAAC,MAAM;SACC,CAAC;QAClC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CACzC,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAC1C,CAAC;QACF,MAAM,QAAQ,GAAuB;YACnC,UAAU;YACV,OAAO,EAAE,YAAY;SACtB,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QAEzB,IAAI,GAA2B,CAAC;QAChC,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,YAAY,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,YAAY,CAAC,aAAa,CAAC,CAAC;YAC5B,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACjE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvB,MAAM,KAAK,CAAC;QACd,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC/B,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;YAC5B,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAqB;YAC/B,YAAY,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;YACzC,GAAG;YACH,UAAU;YACV,aAAa;YACb,yBAAyB,EAAE,GAAG,EAAE,CAC9B,KAAK,CAAC,YAAY,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC;SACnE,CAAC;QACF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE;YAC9D,IAAI,EAAE,IAAI;SACX,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YAC9B,GAAG,CAAC,MAAM,EAAE,CAAC;QACf,CAAC;QAED,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAE9B,OAAO;YACL,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;YACpC,qEAAqE;YACrE,+DAA+D;YAC/D,MAAM,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE;YAC1B,MAAM,EAAE,GAAG,EAAE;gBACX,MAAM,SAAS,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC7C,UAAU,CAAC,KAAK,EAAE,CAAC;gBACnB,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM;SACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;YAClE,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1D,IAAI,GAAG,EAAE,CAAC;gBACR,GAAG,CAAC,MAAM,EAAE,CAAC;gBACb,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO;QACT,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IAChC,CAAC;IAEO,eAAe,CAAC,UAAmB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,SAAS,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACzC,MAAM,IAAI,oBAAoB,CAC5B,sDAAsD,CACvD,CAAC;QACJ,CAAC;QACD,OAAO,SAAS,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,CAAC;IAEO,MAAM,CAAC,MAAwB;QACrC,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC3B,OAAO;QACT,CAAC;QACD,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACnC,MAAM,CAAC,yBAAyB,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;IACzB,CAAC;IAEO,2BAA2B,CAAC,YAAoB;QACtD,IAAI,CAAC,4BAA4B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACpD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,IAAI,CAAC,8BAA8B,CAAC,MAAM,IAAI,uBAAuB,EAAE,CAAC;YAC1E,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,8BAA8B,CAAC,KAAK,EAAE,CAAC;QAC3D,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAEO,cAAc,CACpB,KAA4B;QAE5B,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,KAAK,CAAC;gBAC3C,GAAG,KAAK;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC;YACxC,GAAG,KAAK;YACR,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import type {\n  VerifiedExecutionHostMcpCapability,\n  VerifiedExecutionIdentity,\n} from '../types.js';\nimport {\n  RuntimeBusyError,\n  RuntimeDeadlineError,\n  RuntimeDuplicateInvocationError,\n} from './errors.js';\nimport {\n  RuntimeScopeBindingService,\n  type BoundRuntimeScope,\n} from './scope-binding.js';\nimport {\n  RuntimeSessionStatusService,\n  type RuntimeSessionStatusSnapshot,\n} from './status.js';\nimport type {\n  RuntimeExecutionHandle,\n  RuntimeExecutionInput,\n  RuntimeInvocationHandle,\n  RuntimeInvocationRequest,\n  RuntimeSessionConfig,\n  RuntimeWorkflowExecutors,\n} from './types.js';\n\nconst RECENT_INVOCATION_LIMIT = 128;\n\ntype ActiveInvocation = {\n  invocationId: string;\n  run: RuntimeExecutionHandle;\n  controller: AbortController;\n  deadlineTimer: ReturnType<typeof setTimeout>;\n  removeCallerAbortListener: () => void;\n};\n\ntype StartingInvocation = {\n  controller: AbortController;\n  promise: Promise<RuntimeExecutionHandle>;\n};\n\n/** Coordinates one process-bound Runtime session without owning product data. */\nexport class RuntimeSessionService {\n  private active?: ActiveInvocation;\n  private starting?: StartingInvocation;\n  private readonly recentCompletedInvocationIds = new Set<string>();\n  private readonly recentCompletedInvocationOrder: string[] = [];\n  private readonly config: RuntimeSessionConfig;\n  private readonly executors: RuntimeWorkflowExecutors;\n  private readonly binding: RuntimeScopeBindingService;\n  private readonly status: RuntimeSessionStatusService;\n  private readonly now: () => Date;\n\n  constructor(options: {\n    config: RuntimeSessionConfig;\n    executors: RuntimeWorkflowExecutors;\n    binding?: RuntimeScopeBindingService;\n    status?: RuntimeSessionStatusService;\n    now?: () => Date;\n  }) {\n    if (\n      !Number.isSafeInteger(options.config.maxInvocationMs)\n      || options.config.maxInvocationMs <= 0\n    ) {\n      throw new Error('maxInvocationMs must be a positive safe integer.');\n    }\n    this.config = options.config;\n    this.executors = options.executors;\n    this.binding = options.binding ?? new RuntimeScopeBindingService();\n    this.now = options.now ?? (() => new Date());\n    this.status = options.status ?? new RuntimeSessionStatusService(this.now);\n  }\n\n  readStatus(): RuntimeSessionStatusSnapshot {\n    return this.status.read();\n  }\n\n  async start(input: {\n    identity: VerifiedExecutionIdentity;\n    invocation: RuntimeInvocationRequest;\n    modelCredential: RuntimeExecutionInput['modelCredential'];\n    mcpCapability?: VerifiedExecutionHostMcpCapability;\n    callerSignal: AbortSignal;\n  }): Promise<RuntimeInvocationHandle> {\n    const deadline = this.resolveDeadline(input.invocation.deadlineAt);\n    const binding = this.binding.bind({\n      runtimeSessionId: input.identity.runtimeSessionId,\n      ...input.identity.scope,\n    });\n\n    if (this.active || this.starting) {\n      throw new RuntimeBusyError(\n        'This runtime session already has an active invocation.',\n      );\n    }\n    if (this.recentCompletedInvocationIds.has(input.identity.invocationId)) {\n      throw new RuntimeDuplicateInvocationError(\n        'This recent invocation identifier already completed in the current runtime process.',\n      );\n    }\n\n    const controller = new AbortController();\n    const abortFromCaller = () => controller.abort(input.callerSignal.reason);\n    input.callerSignal.addEventListener('abort', abortFromCaller, { once: true });\n    if (input.callerSignal.aborted) {\n      abortFromCaller();\n    }\n\n    const deadlineTimer = setTimeout(\n      () => controller.abort(\n        new RuntimeDeadlineError('The runtime invocation deadline elapsed.'),\n      ),\n      deadline.getTime() - this.now().getTime(),\n    );\n    deadlineTimer.unref();\n\n    this.status.markExecuting();\n    const executionInput = {\n      scope: input.identity.scope,\n      scopeKey: binding.scopeKey,\n      executionSessionId: binding.executionSessionId,\n      request: input.invocation,\n      modelCredential: input.modelCredential,\n      mcpCapability: input.mcpCapability,\n      abortSignal: controller.signal,\n    } satisfies RuntimeExecutionInput;\n    const startPromise = Promise.resolve().then(\n      () => this.startExecution(executionInput),\n    );\n    const starting: StartingInvocation = {\n      controller,\n      promise: startPromise,\n    };\n    this.starting = starting;\n\n    let run: RuntimeExecutionHandle;\n    try {\n      run = await startPromise;\n    } catch (error) {\n      clearTimeout(deadlineTimer);\n      input.callerSignal.removeEventListener('abort', abortFromCaller);\n      this.status.markIdle();\n      throw error;\n    } finally {\n      if (this.starting === starting) {\n        this.starting = undefined;\n      }\n    }\n\n    const active: ActiveInvocation = {\n      invocationId: input.identity.invocationId,\n      run,\n      controller,\n      deadlineTimer,\n      removeCallerAbortListener: () =>\n        input.callerSignal.removeEventListener('abort', abortFromCaller),\n    };\n    this.active = active;\n    controller.signal.addEventListener('abort', () => run.cancel(), {\n      once: true,\n    });\n    if (controller.signal.aborted) {\n      run.cancel();\n    }\n\n    const result = run.result.finally(() => this.settle(active));\n    result.catch(() => undefined);\n\n    return {\n      runId: run.runId,\n      acceptedAt: this.now().toISOString(),\n      // The execution signal cancels the agent, but the event subscription\n      // remains open for the executor's truthful cancelled terminal.\n      events: () => run.events(),\n      cancel: () => {\n        const wasActive = !controller.signal.aborted;\n        controller.abort();\n        return wasActive;\n      },\n      result,\n    };\n  }\n\n  async shutdown(): Promise<void> {\n    const starting = this.starting;\n    if (starting) {\n      starting.controller.abort(new Error('Runtime is shutting down.'));\n      const run = await starting.promise.catch(() => undefined);\n      if (run) {\n        run.cancel();\n        await run.result.catch(() => undefined);\n      }\n    }\n\n    const active = this.active;\n    if (!active) {\n      return;\n    }\n    active.controller.abort(new Error('Runtime is shutting down.'));\n    active.run.cancel();\n    await active.run.result.catch(() => undefined);\n  }\n\n  boundScope(): BoundRuntimeScope | undefined {\n    return this.binding.current();\n  }\n\n  private resolveDeadline(deadlineAt?: string): Date {\n    const now = this.now();\n    const maximum = new Date(now.getTime() + this.config.maxInvocationMs);\n    if (!deadlineAt) {\n      return maximum;\n    }\n\n    const requested = new Date(deadlineAt);\n    if (requested.getTime() <= now.getTime()) {\n      throw new RuntimeDeadlineError(\n        'The runtime invocation deadline has already elapsed.',\n      );\n    }\n    return requested.getTime() < maximum.getTime() ? requested : maximum;\n  }\n\n  private settle(active: ActiveInvocation): void {\n    if (this.active !== active) {\n      return;\n    }\n    clearTimeout(active.deadlineTimer);\n    active.removeCallerAbortListener();\n    this.active = undefined;\n    this.rememberCompletedInvocation(active.invocationId);\n    this.status.markIdle();\n  }\n\n  private rememberCompletedInvocation(invocationId: string): void {\n    this.recentCompletedInvocationIds.add(invocationId);\n    this.recentCompletedInvocationOrder.push(invocationId);\n    if (this.recentCompletedInvocationOrder.length <= RECENT_INVOCATION_LIMIT) {\n      return;\n    }\n    const oldest = this.recentCompletedInvocationOrder.shift();\n    if (oldest) {\n      this.recentCompletedInvocationIds.delete(oldest);\n    }\n  }\n\n  private startExecution(\n    input: RuntimeExecutionInput,\n  ): Promise<RuntimeExecutionHandle> {\n    if (input.request.kind === 'conversation-turn') {\n      return this.executors.conversationTurn.start({\n        ...input,\n        request: input.request,\n      });\n    }\n    return this.executors.heartbeatTask.start({\n      ...input,\n      request: input.request,\n    });\n  }\n}\n"]}

package/dist/host/runtime-session/types.d.ts

@@ -1,4 +1,4 @@
-import type { ExecutionHostConversationTurnRequest, ExecutionHostHeartbeatTaskRequest, ExecutionScope, RuntimePublicResult } from '../../contracts/index.js';
+import type { ExecutionHostConversationTurnRequest, ExecutionHostHeartbeatTaskRequest, ExecutionHostModelCredential, ExecutionScope, RuntimePublicResult } from '../../contracts/index.js';
 import type { VerifiedExecutionHostMcpCapability } from '../types.js';
 type RuntimeExecutionStreamEnvelope = {
     runId: string;
@@ -29,7 +29,7 @@ export type RuntimeExecutionInput<Request extends RuntimeInvocationRequest = Run
     scopeKey: string;
     executionSessionId: string;
     request: Request;
-    modelApiKey: string;
+    modelCredential: ExecutionHostModelCredential;
     mcpCapability?: VerifiedExecutionHostMcpCapability;
     abortSignal: AbortSignal;
 };

package/dist/host/runtime-session/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oCAAoC,EACpC,iCAAiC,EACjC,cAAc,EACd,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AAEtE,KAAK,8BAA8B,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,0BAA0B,CAAC,MAAM,GAAG,OAAO,IACnD,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,MAAM,wBAAwB,GAChC,oCAAoC,GACpC,iCAAiC,CAAC;AAEtC,MAAM,MAAM,qBAAqB,CAC/B,OAAO,SAAS,wBAAwB,GAAG,wBAAwB,IACjE;IACF,yEAAyE;IACzE,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE,kCAAkC,CAAC;IACnD,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,MAAM,GAAG,OAAO,IAAI;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,CAAC,OAAO,CAAC,EAAE;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,aAAa,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,OAAO,CAAC;CACnB,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,uBAAuB,CACjC,OAAO,SAAS,wBAAwB,EACxC,MAAM,IACJ;IACF,KAAK,CACH,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACpC,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,eAAe,GAAG,OAAO,IAAI;IAChE,gBAAgB,EAAE,uBAAuB,CACvC,oCAAoC,EACpC,mBAAmB,CACpB,CAAC;IACF,aAAa,EAAE,uBAAuB,CACpC,iCAAiC,EACjC,eAAe,CAChB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,MAAM,GAAG,OAAO,IAAI;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,IAAI,aAAa,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/host/runtime-session/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,oCAAoC,EACpC,iCAAiC,EACjC,4BAA4B,EAC5B,cAAc,EACd,mBAAmB,EACpB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,aAAa,CAAC;AAEtE,KAAK,8BAA8B,GAAG;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,0BAA0B,CAAC,MAAM,GAAG,OAAO,IACnD,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,GACA,CAAC,8BAA8B,GAAG;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1C,CAAC,CAAC;AAEL,MAAM,MAAM,wBAAwB,GAChC,oCAAoC,GACpC,iCAAiC,CAAC;AAEtC,MAAM,MAAM,qBAAqB,CAC/B,OAAO,SAAS,wBAAwB,GAAG,wBAAwB,IACjE;IACF,yEAAyE;IACzE,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,4BAA4B,CAAC;IAC9C,aAAa,CAAC,EAAE,kCAAkC,CAAC;IACnD,WAAW,EAAE,WAAW,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,MAAM,GAAG,OAAO,IAAI;IACrD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACxB,MAAM,CAAC,OAAO,CAAC,EAAE;QACf,MAAM,CAAC,EAAE,WAAW,CAAC;KACtB,GAAG,aAAa,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,MAAM,IAAI,OAAO,CAAC;CACnB,CAAC;AAEF,iEAAiE;AACjE,MAAM,MAAM,uBAAuB,CACjC,OAAO,SAAS,wBAAwB,EACxC,MAAM,IACJ;IACF,KAAK,CACH,KAAK,EAAE,qBAAqB,CAAC,OAAO,CAAC,GACpC,OAAO,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,wBAAwB,CAAC,eAAe,GAAG,OAAO,IAAI;IAChE,gBAAgB,EAAE,uBAAuB,CACvC,oCAAoC,EACpC,mBAAmB,CACpB,CAAC;IACF,aAAa,EAAE,uBAAuB,CACpC,iCAAiC,EACjC,eAAe,CAChB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,MAAM,GAAG,OAAO,IAAI;IACtD,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,IAAI,aAAa,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,OAAO,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC"}

package/dist/host/runtime-session/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/host/runtime-session/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionHostConversationTurnRequest,\n  ExecutionHostHeartbeatTaskRequest,\n  ExecutionScope,\n  RuntimePublicResult,\n} from '../../contracts/index.js';\nimport type { VerifiedExecutionHostMcpCapability } from '../types.js';\n\ntype RuntimeExecutionStreamEnvelope = {\n  runId: string;\n  sequence: number;\n  timestamp: string;\n};\n\n/** Ordered execution events exposed by any workflow executor. */\nexport type RuntimeExecutionStreamItem<Result = unknown> =\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'activity';\n    activity: unknown;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'result';\n    result: Result;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'cancelled';\n    reason: string;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'error';\n    error: { code: string; message: string };\n  });\n\nexport type RuntimeInvocationRequest =\n  | ExecutionHostConversationTurnRequest\n  | ExecutionHostHeartbeatTaskRequest;\n\nexport type RuntimeExecutionInput<\n  Request extends RuntimeInvocationRequest = RuntimeInvocationRequest,\n> = {\n  /** Verified product identity forwarded unchanged from host admission. */\n  scope: Readonly<ExecutionScope>;\n  scopeKey: string;\n  executionSessionId: string;\n  request: Request;\n  modelApiKey: string;\n  mcpCapability?: VerifiedExecutionHostMcpCapability;\n  abortSignal: AbortSignal;\n};\n\nexport type RuntimeExecutionHandle<Result = unknown> = {\n  runId: string;\n  result: Promise<Result>;\n  events(options?: {\n    signal?: AbortSignal;\n  }): AsyncIterable<RuntimeExecutionStreamItem<Result>>;\n  cancel(): boolean;\n};\n\n/** Outbound execution port for one provider-neutral workflow. */\nexport type RuntimeWorkflowExecutor<\n  Request extends RuntimeInvocationRequest,\n  Result,\n> = {\n  start(\n    input: RuntimeExecutionInput<Request>,\n  ): Promise<RuntimeExecutionHandle<Result>>;\n};\n\nexport type RuntimeWorkflowExecutors<HeartbeatResult = unknown> = {\n  conversationTurn: RuntimeWorkflowExecutor<\n    ExecutionHostConversationTurnRequest,\n    RuntimePublicResult\n  >;\n  heartbeatTask: RuntimeWorkflowExecutor<\n    ExecutionHostHeartbeatTaskRequest,\n    HeartbeatResult\n  >;\n};\n\nexport type RuntimeInvocationHandle<Result = unknown> = {\n  runId: string;\n  acceptedAt: string;\n  events(): AsyncIterable<RuntimeExecutionStreamItem<Result>>;\n  cancel(): boolean;\n  result: Promise<Result>;\n};\n\nexport type RuntimeSessionConfig = {\n  maxInvocationMs: number;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/host/runtime-session/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionHostConversationTurnRequest,\n  ExecutionHostHeartbeatTaskRequest,\n  ExecutionHostModelCredential,\n  ExecutionScope,\n  RuntimePublicResult,\n} from '../../contracts/index.js';\nimport type { VerifiedExecutionHostMcpCapability } from '../types.js';\n\ntype RuntimeExecutionStreamEnvelope = {\n  runId: string;\n  sequence: number;\n  timestamp: string;\n};\n\n/** Ordered execution events exposed by any workflow executor. */\nexport type RuntimeExecutionStreamItem<Result = unknown> =\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'activity';\n    activity: unknown;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'result';\n    result: Result;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'cancelled';\n    reason: string;\n  })\n  | (RuntimeExecutionStreamEnvelope & {\n    kind: 'error';\n    error: { code: string; message: string };\n  });\n\nexport type RuntimeInvocationRequest =\n  | ExecutionHostConversationTurnRequest\n  | ExecutionHostHeartbeatTaskRequest;\n\nexport type RuntimeExecutionInput<\n  Request extends RuntimeInvocationRequest = RuntimeInvocationRequest,\n> = {\n  /** Verified product identity forwarded unchanged from host admission. */\n  scope: Readonly<ExecutionScope>;\n  scopeKey: string;\n  executionSessionId: string;\n  request: Request;\n  modelCredential: ExecutionHostModelCredential;\n  mcpCapability?: VerifiedExecutionHostMcpCapability;\n  abortSignal: AbortSignal;\n};\n\nexport type RuntimeExecutionHandle<Result = unknown> = {\n  runId: string;\n  result: Promise<Result>;\n  events(options?: {\n    signal?: AbortSignal;\n  }): AsyncIterable<RuntimeExecutionStreamItem<Result>>;\n  cancel(): boolean;\n};\n\n/** Outbound execution port for one provider-neutral workflow. */\nexport type RuntimeWorkflowExecutor<\n  Request extends RuntimeInvocationRequest,\n  Result,\n> = {\n  start(\n    input: RuntimeExecutionInput<Request>,\n  ): Promise<RuntimeExecutionHandle<Result>>;\n};\n\nexport type RuntimeWorkflowExecutors<HeartbeatResult = unknown> = {\n  conversationTurn: RuntimeWorkflowExecutor<\n    ExecutionHostConversationTurnRequest,\n    RuntimePublicResult\n  >;\n  heartbeatTask: RuntimeWorkflowExecutor<\n    ExecutionHostHeartbeatTaskRequest,\n    HeartbeatResult\n  >;\n};\n\nexport type RuntimeInvocationHandle<Result = unknown> = {\n  runId: string;\n  acceptedAt: string;\n  events(): AsyncIterable<RuntimeExecutionStreamItem<Result>>;\n  cancel(): boolean;\n  result: Promise<Result>;\n};\n\nexport type RuntimeSessionConfig = {\n  maxInvocationMs: number;\n};\n"]}

package/dist/host/schemas.d.ts

@@ -34,4 +34,10 @@ export declare const JwtExecutionHostMcpCapabilityVerifierConfigSchema: z.ZodObj
     maxCapabilityAgeSeconds: z.ZodNumber;
     clockToleranceSeconds: z.ZodNumber;
 }, z.core.$strict>;
+export declare function parseJwtExecutionIdentityVerifierConfig(input: unknown, options: {
+    allowDockerLocalHost: boolean;
+}): z.infer<typeof JwtExecutionIdentityVerifierConfigSchema>;
+export declare function parseJwtExecutionHostMcpCapabilityVerifierConfig(input: unknown, options: {
+    allowDockerLocalHost: boolean;
+}): z.infer<typeof JwtExecutionHostMcpCapabilityVerifierConfigSchema>;
 //# sourceMappingURL=schemas.d.ts.map

package/dist/host/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/host/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,gCAAgC;;;;;mHAI5C,CAAC;AAEF,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;kBAW1C,CAAC;AAEZ,eAAO,MAAM,iDAAiD;;;;;;;;;;;;;;kBAYnD,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/host/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAUxB,eAAO,MAAM,gCAAgC;;;;;mHAI5C,CAAC;AAEF,eAAO,MAAM,wCAAwC;;;;;;;;;;;;;kBAW1C,CAAC;AAEZ,eAAO,MAAM,iDAAiD;;;;;;;;;;;;;;kBAYnD,CAAC;AAcZ,wBAAgB,uCAAuC,CACrD,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,oBAAoB,EAAE,OAAO,CAAA;CAAE,GACzC,CAAC,CAAC,KAAK,CAAC,OAAO,wCAAwC,CAAC,CAO1D;AAED,wBAAgB,gDAAgD,CAC9D,KAAK,EAAE,OAAO,EACd,OAAO,EAAE;IAAE,oBAAoB,EAAE,OAAO,CAAA;CAAE,GACzC,CAAC,CAAC,KAAK,CAAC,OAAO,iDAAiD,CAAC,CAOnE"}

package/dist/host/schemas.js

@@ -21,4 +21,26 @@ export const JwtExecutionHostMcpCapabilityVerifierConfigSchema = z.object({
     maxCapabilityAgeSeconds: z.number().int().min(1).max(15 * 60),
     clockToleranceSeconds: z.number().int().min(0).max(60),
 }).strict();
+const DockerLocalJwksUrlSchema = z.instanceof(URL).refine((url) => isSafeWebUrl(url) || (url.protocol === 'http:'
+    && url.hostname === 'host.docker.internal'
+    && !url.username
+    && !url.password
+    && !url.search
+    && !url.hash), 'must use HTTPS, loopback HTTP, or the explicit Docker local-host alias without credentials, query, or fragment');
+export function parseJwtExecutionIdentityVerifierConfig(input, options) {
+    const schema = options.allowDockerLocalHost
+        ? JwtExecutionIdentityVerifierConfigSchema.extend({
+            executionJwksUrl: DockerLocalJwksUrlSchema,
+        })
+        : JwtExecutionIdentityVerifierConfigSchema;
+    return schema.parse(input);
+}
+export function parseJwtExecutionHostMcpCapabilityVerifierConfig(input, options) {
+    const schema = options.allowDockerLocalHost
+        ? JwtExecutionHostMcpCapabilityVerifierConfigSchema.extend({
+            jwksUrl: DockerLocalJwksUrlSchema,
+        })
+        : JwtExecutionHostMcpCapabilityVerifierConfigSchema;
+    return schema.parse(input);
+}
 //# sourceMappingURL=schemas.js.map

package/dist/host/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/host/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACrD,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAChD,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uCAAuC,CAAC,MAAM,CAAC,CAAC,SAAS,CACpE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CACxD,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,eAAe,EAAE,eAAe;IAChC,iBAAiB,EAAE,iBAAiB;IACpC,gBAAgB,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CACxC,YAAY,EACZ,gFAAgF,CACjF;IACD,sBAAsB,EAAE,gCAAgC;IACxD,gBAAgB,EAAE,cAAc;IAChC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC5D,8BAA8B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAC/B,YAAY,EACZ,gFAAgF,CACjF;IACD,aAAa,EAAE,gCAAgC;IAC/C,gBAAgB,EAAE,cAAc;IAChC,QAAQ,EAAE,iBAAiB;IAC3B,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC7D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  isSafeWebUrl,\n} from '../contracts/index.js';\nimport { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS } from './types.js';\n\nexport const ExecutionHostJwtAlgorithmsSchema = z.array(\n  z.enum(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS),\n).min(1).max(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS.length).transform(\n  (algorithms) => Object.freeze([...new Set(algorithms)]),\n);\n\nexport const JwtExecutionIdentityVerifierConfigSchema = z.object({\n  executionIssuer: JwtIssuerSchema,\n  executionAudience: JwtAudienceSchema,\n  executionJwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  executionJwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,\n  trustedAdopterId: OpaqueIdSchema,\n  maxAssertionAgeSeconds: z.number().int().min(1).max(15 * 60),\n  assertionClockToleranceSeconds: z.number().int().min(0).max(60),\n}).strict();\n\nexport const JwtExecutionHostMcpCapabilityVerifierConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  audience: JwtAudienceSchema,\n  jwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  jwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,\n  trustedAdopterId: OpaqueIdSchema,\n  serverId: McpServerIdSchema,\n  maxCapabilityAgeSeconds: z.number().int().min(1).max(15 * 60),\n  clockToleranceSeconds: z.number().int().min(0).max(60),\n}).strict();\n"]}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/host/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,uCAAuC,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,KAAK,CACrD,CAAC,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAChD,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,uCAAuC,CAAC,MAAM,CAAC,CAAC,SAAS,CACpE,CAAC,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CACxD,CAAC;AAEF,MAAM,CAAC,MAAM,wCAAwC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,eAAe,EAAE,eAAe;IAChC,iBAAiB,EAAE,iBAAiB;IACpC,gBAAgB,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CACxC,YAAY,EACZ,gFAAgF,CACjF;IACD,sBAAsB,EAAE,gCAAgC;IACxD,gBAAgB,EAAE,cAAc;IAChC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC5D,8BAA8B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CAChE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,EAAE,eAAe;IACvB,QAAQ,EAAE,iBAAiB;IAC3B,OAAO,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CAC/B,YAAY,EACZ,gFAAgF,CACjF;IACD,aAAa,EAAE,gCAAgC;IAC/C,gBAAgB,EAAE,cAAc;IAChC,QAAQ,EAAE,iBAAiB;IAC3B,uBAAuB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC;IAC7D,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,wBAAwB,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,CACvD,CAAC,GAAG,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAC5B,GAAG,CAAC,QAAQ,KAAK,OAAO;OACrB,GAAG,CAAC,QAAQ,KAAK,sBAAsB;OACvC,CAAC,GAAG,CAAC,QAAQ;OACb,CAAC,GAAG,CAAC,QAAQ;OACb,CAAC,GAAG,CAAC,MAAM;OACX,CAAC,GAAG,CAAC,IAAI,CACb,EACD,gHAAgH,CACjH,CAAC;AAEF,MAAM,UAAU,uCAAuC,CACrD,KAAc,EACd,OAA0C;IAE1C,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB;QACzC,CAAC,CAAC,wCAAwC,CAAC,MAAM,CAAC;YAC9C,gBAAgB,EAAE,wBAAwB;SAC3C,CAAC;QACJ,CAAC,CAAC,wCAAwC,CAAC;IAC7C,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gDAAgD,CAC9D,KAAc,EACd,OAA0C;IAE1C,MAAM,MAAM,GAAG,OAAO,CAAC,oBAAoB;QACzC,CAAC,CAAC,iDAAiD,CAAC,MAAM,CAAC;YACvD,OAAO,EAAE,wBAAwB;SAClC,CAAC;QACJ,CAAC,CAAC,iDAAiD,CAAC;IACtD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  JwtAudienceSchema,\n  JwtIssuerSchema,\n  McpServerIdSchema,\n  OpaqueIdSchema,\n  isSafeWebUrl,\n} from '../contracts/index.js';\nimport { EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS } from './types.js';\n\nexport const ExecutionHostJwtAlgorithmsSchema = z.array(\n  z.enum(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS),\n).min(1).max(EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS.length).transform(\n  (algorithms) => Object.freeze([...new Set(algorithms)]),\n);\n\nexport const JwtExecutionIdentityVerifierConfigSchema = z.object({\n  executionIssuer: JwtIssuerSchema,\n  executionAudience: JwtAudienceSchema,\n  executionJwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  executionJwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,\n  trustedAdopterId: OpaqueIdSchema,\n  maxAssertionAgeSeconds: z.number().int().min(1).max(15 * 60),\n  assertionClockToleranceSeconds: z.number().int().min(0).max(60),\n}).strict();\n\nexport const JwtExecutionHostMcpCapabilityVerifierConfigSchema = z.object({\n  issuer: JwtIssuerSchema,\n  audience: JwtAudienceSchema,\n  jwksUrl: z.instanceof(URL).refine(\n    isSafeWebUrl,\n    'must use HTTPS or loopback HTTP and contain no credentials, query, or fragment',\n  ),\n  jwtAlgorithms: ExecutionHostJwtAlgorithmsSchema,\n  trustedAdopterId: OpaqueIdSchema,\n  serverId: McpServerIdSchema,\n  maxCapabilityAgeSeconds: z.number().int().min(1).max(15 * 60),\n  clockToleranceSeconds: z.number().int().min(0).max(60),\n}).strict();\n\nconst DockerLocalJwksUrlSchema = z.instanceof(URL).refine(\n  (url) => isSafeWebUrl(url) || (\n    url.protocol === 'http:'\n    && url.hostname === 'host.docker.internal'\n    && !url.username\n    && !url.password\n    && !url.search\n    && !url.hash\n  ),\n  'must use HTTPS, loopback HTTP, or the explicit Docker local-host alias without credentials, query, or fragment',\n);\n\nexport function parseJwtExecutionIdentityVerifierConfig(\n  input: unknown,\n  options: { allowDockerLocalHost: boolean },\n): z.infer<typeof JwtExecutionIdentityVerifierConfigSchema> {\n  const schema = options.allowDockerLocalHost\n    ? JwtExecutionIdentityVerifierConfigSchema.extend({\n        executionJwksUrl: DockerLocalJwksUrlSchema,\n      })\n    : JwtExecutionIdentityVerifierConfigSchema;\n  return schema.parse(input);\n}\n\nexport function parseJwtExecutionHostMcpCapabilityVerifierConfig(\n  input: unknown,\n  options: { allowDockerLocalHost: boolean },\n): z.infer<typeof JwtExecutionHostMcpCapabilityVerifierConfigSchema> {\n  const schema = options.allowDockerLocalHost\n    ? JwtExecutionHostMcpCapabilityVerifierConfigSchema.extend({\n        jwksUrl: DockerLocalJwksUrlSchema,\n      })\n    : JwtExecutionHostMcpCapabilityVerifierConfigSchema;\n  return schema.parse(input);\n}\n"]}

package/dist/host/types.d.ts

@@ -58,5 +58,7 @@ export type JwtExecutionHostMcpCapabilityVerifierConfig = Readonly<{
 export type ExecutionHostJwtVerifierOptions = Readonly<{
     keyResolver?: JWTVerifyGetKey;
     now?: () => Date;
+    /** Local isolated containers may fetch adopter JWKS through this exact alias. */
+    allowDockerLocalHost?: boolean;
 }>;
 //# sourceMappingURL=types.d.ts.map

package/dist/host/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAC5C,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,uCAAuC,+CAK1C,CAAC;AAEX,MAAM,MAAM,yBAAyB,GACnC,OAAO,uCAAuC,CAAC,MAAM,CAAC,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CAAC;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACxD,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,GAAG,CAAC;IACtB,sBAAsB,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC7D,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,MAAM,CAAC;CACxC,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,6CAA6C,GAAG,QAAQ,CAAC;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,yBAAyB,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,WAAW,kCAAkC;IACjD,MAAM,CACJ,OAAO,EAAE,6CAA6C,GACrD,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAED,MAAM,MAAM,2CAA2C,GAAG,QAAQ,CAAC;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,GAAG,CAAC;IACb,aAAa,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACpD,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAC5C,OAAO,KAAK,EACV,cAAc,EACd,uBAAuB,EACxB,MAAM,uBAAuB,CAAC;AAE/B,eAAO,MAAM,uCAAuC,+CAK1C,CAAC;AAEX,MAAM,MAAM,yBAAyB,GACnC,OAAO,uCAAuC,CAAC,MAAM,CAAC,CAAC;AAEzD,+EAA+E;AAC/E,MAAM,MAAM,yBAAyB,GAAG,QAAQ,CAAC;IAC/C,KAAK,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAChC,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,oCAAoC,GAAG,QAAQ,CAAC;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,WAAW,yBAAyB;IACxC,MAAM,CACJ,OAAO,EAAE,oCAAoC,GAC5C,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC;AAED,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACxD,eAAe,EAAE,MAAM,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,GAAG,CAAC;IACtB,sBAAsB,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC7D,gBAAgB,EAAE,MAAM,CAAC;IACzB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,8BAA8B,EAAE,MAAM,CAAC;CACxC,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,MAAM,kCAAkC,GAAG,QAAQ,CAAC;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC,CAAC;AAEH,MAAM,MAAM,6CAA6C,GAAG,QAAQ,CAAC;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,yBAAyB,CAAC;CACrC,CAAC,CAAC;AAEH,MAAM,WAAW,kCAAkC;IACjD,MAAM,CACJ,OAAO,EAAE,6CAA6C,GACrD,OAAO,CAAC,kCAAkC,CAAC,CAAC;CAChD;AAED,MAAM,MAAM,2CAA2C,GAAG,QAAQ,CAAC;IACjE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,GAAG,CAAC;IACb,aAAa,EAAE,SAAS,yBAAyB,EAAE,CAAC;IACpD,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,uBAAuB,EAAE,MAAM,CAAC;IAChC,qBAAqB,EAAE,MAAM,CAAC;CAC/B,CAAC,CAAC;AAEH,MAAM,MAAM,+BAA+B,GAAG,QAAQ,CAAC;IACrD,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,iFAAiF;IACjF,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC,CAAC"}

package/dist/host/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,uCAAuC,GAAG;IACrD,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACC,CAAC","sourcesContent":["import type { JWTVerifyGetKey } from 'jose';\nimport type {\n  ExecutionScope,\n  HostedExecutionWorkflow,\n} from '../contracts/index.js';\n\nexport const EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS = [\n  'RS256',\n  'PS256',\n  'ES256',\n  'EdDSA',\n] as const;\n\nexport type ExecutionHostJwtAlgorithm =\n  typeof EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS[number];\n\n/** Authority established from one signed assertion and its request binding. */\nexport type VerifiedExecutionIdentity = Readonly<{\n  scope: Readonly<ExecutionScope>;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  issuedAt: string;\n  expiresAt: string;\n}>;\n\nexport type ExecutionIdentityVerificationRequest = Readonly<{\n  assertion: string;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n}>;\n\nexport interface ExecutionIdentityVerifier {\n  verify(\n    request: ExecutionIdentityVerificationRequest,\n  ): Promise<VerifiedExecutionIdentity>;\n}\n\nexport type JwtExecutionIdentityVerifierConfig = Readonly<{\n  executionIssuer: string;\n  executionAudience: string;\n  executionJwksUrl: URL;\n  executionJwtAlgorithms: readonly ExecutionHostJwtAlgorithm[];\n  trustedAdopterId: string;\n  maxAssertionAgeSeconds: number;\n  assertionClockToleranceSeconds: number;\n}>;\n\n/** Opaque MCP bearer whose claims match the independently verified execution. */\nexport type VerifiedExecutionHostMcpCapability = Readonly<{\n  assertion: string;\n  capabilityId: string;\n  serverId: string;\n  allowedTools: readonly string[];\n  issuedAt: string;\n  expiresAt: string;\n}>;\n\nexport type ExecutionHostMcpCapabilityVerificationRequest = Readonly<{\n  assertion: string;\n  identity: VerifiedExecutionIdentity;\n}>;\n\nexport interface ExecutionHostMcpCapabilityVerifier {\n  verify(\n    request: ExecutionHostMcpCapabilityVerificationRequest,\n  ): Promise<VerifiedExecutionHostMcpCapability>;\n}\n\nexport type JwtExecutionHostMcpCapabilityVerifierConfig = Readonly<{\n  issuer: string;\n  audience: string;\n  jwksUrl: URL;\n  jwtAlgorithms: readonly ExecutionHostJwtAlgorithm[];\n  trustedAdopterId: string;\n  serverId: string;\n  maxCapabilityAgeSeconds: number;\n  clockToleranceSeconds: number;\n}>;\n\nexport type ExecutionHostJwtVerifierOptions = Readonly<{\n  keyResolver?: JWTVerifyGetKey;\n  now?: () => Date;\n}>;\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/host/types.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,uCAAuC,GAAG;IACrD,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;CACC,CAAC","sourcesContent":["import type { JWTVerifyGetKey } from 'jose';\nimport type {\n  ExecutionScope,\n  HostedExecutionWorkflow,\n} from '../contracts/index.js';\n\nexport const EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS = [\n  'RS256',\n  'PS256',\n  'ES256',\n  'EdDSA',\n] as const;\n\nexport type ExecutionHostJwtAlgorithm =\n  typeof EXECUTION_HOST_SUPPORTED_JWT_ALGORITHMS[number];\n\n/** Authority established from one signed assertion and its request binding. */\nexport type VerifiedExecutionIdentity = Readonly<{\n  scope: Readonly<ExecutionScope>;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n  issuedAt: string;\n  expiresAt: string;\n}>;\n\nexport type ExecutionIdentityVerificationRequest = Readonly<{\n  assertion: string;\n  runtimeSessionId: string;\n  invocationId: string;\n  workflow: HostedExecutionWorkflow;\n}>;\n\nexport interface ExecutionIdentityVerifier {\n  verify(\n    request: ExecutionIdentityVerificationRequest,\n  ): Promise<VerifiedExecutionIdentity>;\n}\n\nexport type JwtExecutionIdentityVerifierConfig = Readonly<{\n  executionIssuer: string;\n  executionAudience: string;\n  executionJwksUrl: URL;\n  executionJwtAlgorithms: readonly ExecutionHostJwtAlgorithm[];\n  trustedAdopterId: string;\n  maxAssertionAgeSeconds: number;\n  assertionClockToleranceSeconds: number;\n}>;\n\n/** Opaque MCP bearer whose claims match the independently verified execution. */\nexport type VerifiedExecutionHostMcpCapability = Readonly<{\n  assertion: string;\n  capabilityId: string;\n  serverId: string;\n  allowedTools: readonly string[];\n  issuedAt: string;\n  expiresAt: string;\n}>;\n\nexport type ExecutionHostMcpCapabilityVerificationRequest = Readonly<{\n  assertion: string;\n  identity: VerifiedExecutionIdentity;\n}>;\n\nexport interface ExecutionHostMcpCapabilityVerifier {\n  verify(\n    request: ExecutionHostMcpCapabilityVerificationRequest,\n  ): Promise<VerifiedExecutionHostMcpCapability>;\n}\n\nexport type JwtExecutionHostMcpCapabilityVerifierConfig = Readonly<{\n  issuer: string;\n  audience: string;\n  jwksUrl: URL;\n  jwtAlgorithms: readonly ExecutionHostJwtAlgorithm[];\n  trustedAdopterId: string;\n  serverId: string;\n  maxCapabilityAgeSeconds: number;\n  clockToleranceSeconds: number;\n}>;\n\nexport type ExecutionHostJwtVerifierOptions = Readonly<{\n  keyResolver?: JWTVerifyGetKey;\n  now?: () => Date;\n  /** Local isolated containers may fetch adopter JWKS through this exact alias. */\n  allowDockerLocalHost?: boolean;\n}>;\n"]}

package/dist/http-sse/direct-http-execution-host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"direct-http-execution-host.d.ts","sourceRoot":"","sources":["../../src/http-sse/direct-http-execution-host.ts"],"names":[],"mappings":"AACA,OAAO,EAmBL,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EACV,6BAA6B,EAC7B,aAAa,EACb,6BAA6B,EAC7B,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAqCpB;;;GAGG;AACH,qBAAa,uBACb,YAAW,aAAa,EAAE,sBAAsB;;gBAKlC,MAAM,EAAE,6BAA6B;IAO1C,sBAAsB,CAC3B,QAAQ,EAAE,6BAA6B,GACtC,aAAa,CAAC,wBAAwB,CAAC;IAoBnC,mBAAmB,CACxB,QAAQ,EAAE,0BAA0B,GACnC,aAAa,CAAC,iCAAiC,CAAC;CAmEpD"}
+{"version":3,"file":"direct-http-execution-host.d.ts","sourceRoot":"","sources":["../../src/http-sse/direct-http-execution-host.ts"],"names":[],"mappings":"AACA,OAAO,EAoBL,KAAK,iCAAiC,EACtC,KAAK,wBAAwB,EAC9B,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EACV,6BAA6B,EAC7B,aAAa,EACb,6BAA6B,EAC7B,0BAA0B,EAC1B,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAqCpB;;;GAGG;AACH,qBAAa,uBACb,YAAW,aAAa,EAAE,sBAAsB;;gBAKlC,MAAM,EAAE,6BAA6B;IAO1C,sBAAsB,CAC3B,QAAQ,EAAE,6BAA6B,GACtC,aAAa,CAAC,wBAAwB,CAAC;IAoBnC,mBAAmB,CACxB,QAAQ,EAAE,0BAA0B,GACnC,aAAa,CAAC,iCAAiC,CAAC;CAmEpD"}

package/dist/http-sse/direct-http-execution-host.js

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { AGENTCORE_RUNTIME_SESSION_HEADER, CONVERSATION_TURN_WORKFLOW, EXECUTION_ASSERTION_HEADER, EXECUTION_CONTRACT_VERSION, EXECUTION_HOST_LOCAL_TOKEN_HEADER, ExecutionHostConversationTurnRequestSchema, ExecutionHostHeartbeatStreamEventSchema, ExecutionHostHeartbeatTaskRequestSchema, ExecutionHostStreamEventSchema, HEARTBEAT_TASK_WORKFLOW, MCP_CAPABILITY_HEADER, MODEL_API_KEY_HEADER, OpaqueIdSchema, RuntimeSessionIdSchema, TimestampSchema, isExecutionHostHeartbeatTerminalEvent, isExecutionHostTerminalEvent, isSafeWebUrl, } from '../contracts/index.js';
+import { AGENTCORE_RUNTIME_SESSION_HEADER, CONVERSATION_TURN_WORKFLOW, EXECUTION_ASSERTION_HEADER, EXECUTION_CONTRACT_VERSION, EXECUTION_HOST_LOCAL_TOKEN_HEADER, ExecutionHostConversationTurnRequestSchema, ExecutionHostHeartbeatStreamEventSchema, ExecutionHostHeartbeatTaskRequestSchema, ExecutionHostModelCredentialSchema, ExecutionHostStreamEventSchema, HEARTBEAT_TASK_WORKFLOW, MCP_CAPABILITY_HEADER, MODEL_CREDENTIAL_HEADER, OpaqueIdSchema, RuntimeSessionIdSchema, TimestampSchema, isExecutionHostHeartbeatTerminalEvent, isExecutionHostTerminalEvent, isSafeWebUrl, } from '../contracts/index.js';
 import { ExecutionHostInvocationCancelledError, ExecutionHostRejectedError, } from './errors.js';
 import { readExecutionHostEventStream, toExecutionHostTransportError, } from '../internal/execution-host-event-stream.js';
 import { readBoundedJsonResponse } from '../internal/http-response.js';
@@ -9,7 +9,7 @@ const InvocationAuthoritySchema = z.object({
     runtimeSessionId: RuntimeSessionIdSchema,
     executionAssertion: z.string().min(32).max(4_096),
     mcpCapability: z.string().min(32).max(4_096).optional(),
-    modelApiKey: SecretSchema,
+    modelCredential: ExecutionHostModelCredentialSchema,
     signal: z.custom((value) => value instanceof AbortSignal, 'signal must be an AbortSignal').optional(),
 }).strict();
 const ConversationTurnSchema = InvocationAuthoritySchema.extend({
@@ -115,7 +115,7 @@ function createSensitiveHeaders(input, localToken) {
         'Content-Type': 'application/json',
         [AGENTCORE_RUNTIME_SESSION_HEADER]: input.runtimeSessionId,
         [EXECUTION_HOST_LOCAL_TOKEN_HEADER]: localToken,
-        [MODEL_API_KEY_HEADER]: input.modelApiKey,
+        [MODEL_CREDENTIAL_HEADER]: JSON.stringify(input.modelCredential),
         [EXECUTION_ASSERTION_HEADER]: input.executionAssertion,
     });
     if (input.mcpCapability) {

package/dist/http-sse/direct-http-execution-host.js.map

@@ -1 +1 @@
-{"version":3,"file":"direct-http-execution-host.js","sourceRoot":"","sources":["../../src/http-sse/direct-http-execution-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,iCAAiC,EACjC,0CAA0C,EAC1C,uCAAuC,EACvC,uCAAuC,EACvC,8BAA8B,EAC9B,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,qCAAqC,EACrC,4BAA4B,EAC5B,YAAY,GAGb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qCAAqC,EACrC,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAQrB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAClD,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,gBAAgB,EAAE,sBAAsB;IACxC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACvD,WAAW,EAAE,YAAY;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,WAAW,EACvC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,sBAAsB,GAAG,yBAAyB,CAAC,MAAM,CAAC;IAC9D,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC7C,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,MAAM,CAC1D,uCAAuC,CAAC,IAAI,CAAC;IAC3C,aAAa,EAAE,IAAI;IACnB,IAAI,EAAE,IAAI;CACX,CAAC,CAAC,KAAK,CACT,CAAC,MAAM,EAAE,CAAC;AACX,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;QACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAEzB,SAAS,CAAM;IACf,MAAM,CAAe;IACrB,WAAW,CAAS;IAE7B,YAAY,MAAqC;QAC/C,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,CAAC,sBAAsB,CAC3B,QAAuC;QAEvC,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,qCAAqC,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,0CAA0C,CAAC,KAAK,CAAC;YAC5D,aAAa,EAAE,0BAA0B;YACzC,IAAI,EAAE,0BAA0B;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAC3B,KAAK,EACL,IAAI,EACJ,8BAA8B,EAC9B,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,mBAAmB,CACxB,QAAoC;QAEpC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,qCAAqC,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,uCAAuC,CAAC,KAAK,CAAC;YACzD,aAAa,EAAE,0BAA0B;YACzC,IAAI,EAAE,uBAAuB;YAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,KAAK,CAAC,eAAe;gBACvB,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,gBAAgB;gBACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAC3B,KAAK,EACL,IAAI,EACJ,uCAAuC,EACvC,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,iBAAiB,CACtB,KAAsB,EACtB,IAAa,EACb,MAAyB,EACzB,UAAsC;QAEtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,0BAA0B,CAClC,QAAQ,CAAC,MAAM,EACf,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAClC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,4BAA4B,CAAC;YAClC,QAAQ;YACR,MAAM;YACN,UAAU;YACV,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAsB,EAAE,IAAa;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC;gBACxD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF;AAmBD,SAAS,sBAAsB,CAC7B,KAAsB,EACtB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QAC1B,MAAM,EAAE,mBAAmB;QAC3B,cAAc,EAAE,kBAAkB;QAClC,CAAC,gCAAgC,CAAC,EAAE,KAAK,CAAC,gBAAgB;QAC1D,CAAC,iCAAiC,CAAC,EAAE,UAAU;QAC/C,CAAC,oBAAoB,CAAC,EAAE,KAAK,CAAC,WAAW;QACzC,CAAC,0BAA0B,CAAC,EAAE,KAAK,CAAC,kBAAkB;KACvD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,uBAAuB,CACnE,QAAQ,EACR,oBAAoB,CACrB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ;IACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ;IACjC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrD,CAAC,CAAC,UAAU,CAAC,QAAQ;QACrB,CAAC,CAAC,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC;IAC9B,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  AGENTCORE_RUNTIME_SESSION_HEADER,\n  CONVERSATION_TURN_WORKFLOW,\n  EXECUTION_ASSERTION_HEADER,\n  EXECUTION_CONTRACT_VERSION,\n  EXECUTION_HOST_LOCAL_TOKEN_HEADER,\n  ExecutionHostConversationTurnRequestSchema,\n  ExecutionHostHeartbeatStreamEventSchema,\n  ExecutionHostHeartbeatTaskRequestSchema,\n  ExecutionHostStreamEventSchema,\n  HEARTBEAT_TASK_WORKFLOW,\n  MCP_CAPABILITY_HEADER,\n  MODEL_API_KEY_HEADER,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n  TimestampSchema,\n  isExecutionHostHeartbeatTerminalEvent,\n  isExecutionHostTerminalEvent,\n  isSafeWebUrl,\n  type ExecutionHostHeartbeatStreamEvent,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport {\n  ExecutionHostInvocationCancelledError,\n  ExecutionHostRejectedError,\n} from './errors.js';\nimport type {\n  DirectHttpExecutionHostConfig,\n  ExecutionHost,\n  ExecutionHostConversationTurn,\n  ExecutionHostHeartbeatTask,\n  HeartbeatExecutionHost,\n} from './types.js';\nimport {\n  readExecutionHostEventStream,\n  toExecutionHostTransportError,\n} from '../internal/execution-host-event-stream.js';\nimport { readBoundedJsonResponse } from '../internal/http-response.js';\n\nconst MAX_ERROR_BODY_BYTES = 16_384;\nconst SecretSchema = z.string().min(8).max(4_096);\nconst InvocationAuthoritySchema = z.object({\n  runtimeSessionId: RuntimeSessionIdSchema,\n  executionAssertion: z.string().min(32).max(4_096),\n  mcpCapability: z.string().min(32).max(4_096).optional(),\n  modelApiKey: SecretSchema,\n  signal: z.custom<AbortSignal>(\n    (value) => value instanceof AbortSignal,\n    'signal must be an AbortSignal',\n  ).optional(),\n}).strict();\nconst ConversationTurnSchema = InvocationAuthoritySchema.extend({\n  invocationId: OpaqueIdSchema,\n  prompt: z.string().trim().min(1).max(200_000),\n  deadlineAt: TimestampSchema.optional(),\n}).strict();\nconst HeartbeatTaskSchema = InvocationAuthoritySchema.extend(\n  ExecutionHostHeartbeatTaskRequestSchema.omit({\n    schemaVersion: true,\n    kind: true,\n  }).shape,\n).strict();\nconst ApiErrorSchema = z.object({\n  error: z.object({\n    code: z.string().min(1).max(128).regex(/^[a-z0-9_]+$/),\n    message: z.string(),\n  }).strict(),\n}).strict();\n\n/**\n * Strict direct-development HTTP/SSE adapter for the Execution Host v1 wire.\n * It deliberately owns neither AWS SDK nor SigV4 behavior.\n */\nexport class DirectHttpExecutionHost\nimplements ExecutionHost, HeartbeatExecutionHost {\n  readonly #endpoint: URL;\n  readonly #fetch: typeof fetch;\n  readonly #localToken: string;\n\n  constructor(config: DirectHttpExecutionHostConfig) {\n    assertSafeBaseUrl(config.baseUrl);\n    this.#localToken = SecretSchema.parse(config.localToken);\n    this.#endpoint = new URL('invocations', withTrailingSlash(config.baseUrl));\n    this.#fetch = config.fetch ?? globalThis.fetch;\n  }\n\n  async *streamConversationTurn(\n    rawInput: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent> {\n    const input = ConversationTurnSchema.parse(rawInput);\n    if (input.signal?.aborted) {\n      throw new ExecutionHostInvocationCancelledError();\n    }\n    const body = ExecutionHostConversationTurnRequestSchema.parse({\n      schemaVersion: EXECUTION_CONTRACT_VERSION,\n      kind: CONVERSATION_TURN_WORKFLOW,\n      invocationId: input.invocationId,\n      prompt: input.prompt,\n      ...(input.deadlineAt ? { deadlineAt: input.deadlineAt } : {}),\n    });\n    yield* this.#streamInvocation(\n      input,\n      body,\n      ExecutionHostStreamEventSchema,\n      isExecutionHostTerminalEvent,\n    );\n  }\n\n  async *streamHeartbeatTask(\n    rawInput: ExecutionHostHeartbeatTask,\n  ): AsyncIterable<ExecutionHostHeartbeatStreamEvent> {\n    const input = HeartbeatTaskSchema.parse(rawInput);\n    if (input.signal?.aborted) {\n      throw new ExecutionHostInvocationCancelledError();\n    }\n    const body = ExecutionHostHeartbeatTaskRequestSchema.parse({\n      schemaVersion: EXECUTION_CONTRACT_VERSION,\n      kind: HEARTBEAT_TASK_WORKFLOW,\n      invocationId: input.invocationId,\n      taskId: input.taskId,\n      task: input.task,\n      ...(input.checkpoint ? { checkpoint: input.checkpoint } : {}),\n      runContext: input.runContext,\n      ...(input.model ? { model: input.model } : {}),\n      ...(input.reasoningEffort\n        ? { reasoningEffort: input.reasoningEffort }\n        : {}),\n      ...(input.maxSteps !== undefined ? { maxSteps: input.maxSteps } : {}),\n      ...(input.searchIgnoreDirs\n        ? { searchIgnoreDirs: input.searchIgnoreDirs }\n        : {}),\n      ...(input.systemContext ? { systemContext: input.systemContext } : {}),\n      ...(input.deadlineAt ? { deadlineAt: input.deadlineAt } : {}),\n    });\n    yield* this.#streamInvocation(\n      input,\n      body,\n      ExecutionHostHeartbeatStreamEventSchema,\n      isExecutionHostHeartbeatTerminalEvent,\n    );\n  }\n\n  async *#streamInvocation<TEvent extends ValidatedStreamEvent>(\n    input: InvocationInput,\n    body: unknown,\n    schema: z.ZodType<TEvent>,\n    isTerminal: (event: TEvent) => boolean,\n  ): AsyncIterable<TEvent> {\n    const response = await this.#invoke(input, body);\n    if (!response.ok) {\n      throw new ExecutionHostRejectedError(\n        response.status,\n        await readSafeErrorCode(response),\n      );\n    }\n    yield* readExecutionHostEventStream({\n      response,\n      schema,\n      isTerminal,\n      invocationId: input.invocationId,\n      signal: input.signal,\n    });\n  }\n\n  async #invoke(input: InvocationInput, body: unknown): Promise<Response> {\n    try {\n      return await this.#fetch(this.#endpoint, {\n        method: 'POST',\n        redirect: 'error',\n        signal: input.signal,\n        headers: createSensitiveHeaders(input, this.#localToken),\n        body: JSON.stringify(body),\n      });\n    } catch (error) {\n      throw toExecutionHostTransportError(error, input.signal);\n    }\n  }\n}\n\ntype InvocationInput = {\n  invocationId: string;\n  runtimeSessionId: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelApiKey: string;\n  signal?: AbortSignal;\n};\n\ntype ValidatedStreamEvent = {\n  kind: string;\n  invocationId: string;\n  runId: string;\n  sequence: number;\n  timestamp: string;\n};\n\nfunction createSensitiveHeaders(\n  input: InvocationInput,\n  localToken: string,\n): Headers {\n  const headers = new Headers({\n    Accept: 'text/event-stream',\n    'Content-Type': 'application/json',\n    [AGENTCORE_RUNTIME_SESSION_HEADER]: input.runtimeSessionId,\n    [EXECUTION_HOST_LOCAL_TOKEN_HEADER]: localToken,\n    [MODEL_API_KEY_HEADER]: input.modelApiKey,\n    [EXECUTION_ASSERTION_HEADER]: input.executionAssertion,\n  });\n  if (input.mcpCapability) {\n    headers.set(MCP_CAPABILITY_HEADER, input.mcpCapability);\n  }\n  return headers;\n}\n\nasync function readSafeErrorCode(response: Response): Promise<string> {\n  try {\n    const parsed = ApiErrorSchema.safeParse(await readBoundedJsonResponse(\n      response,\n      MAX_ERROR_BODY_BYTES,\n    ));\n    return parsed.success ? parsed.data.error.code : 'unknown';\n  } catch {\n    return 'unknown';\n  }\n}\n\nfunction assertSafeBaseUrl(url: URL): void {\n  if (!isSafeWebUrl(url)) {\n    throw new Error(\n      'Direct Execution Host URL must use HTTPS or loopback HTTP and contain no credentials, query, or fragment.',\n    );\n  }\n}\n\nfunction withTrailingSlash(url: URL): URL {\n  const normalized = new URL(url);\n  normalized.pathname = normalized.pathname.endsWith('/')\n    ? normalized.pathname\n    : `${normalized.pathname}/`;\n  return normalized;\n}\n"]}
+{"version":3,"file":"direct-http-execution-host.js","sourceRoot":"","sources":["../../src/http-sse/direct-http-execution-host.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAC1B,0BAA0B,EAC1B,0BAA0B,EAC1B,iCAAiC,EACjC,0CAA0C,EAC1C,uCAAuC,EACvC,uCAAuC,EACvC,kCAAkC,EAClC,8BAA8B,EAC9B,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,qCAAqC,EACrC,4BAA4B,EAC5B,YAAY,GAGb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,qCAAqC,EACrC,0BAA0B,GAC3B,MAAM,aAAa,CAAC;AAQrB,OAAO,EACL,4BAA4B,EAC5B,6BAA6B,GAC9B,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,oBAAoB,GAAG,MAAM,CAAC;AACpC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAClD,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,gBAAgB,EAAE,sBAAsB;IACxC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE;IACvD,eAAe,EAAE,kCAAkC;IACnD,MAAM,EAAE,CAAC,CAAC,MAAM,CACd,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,WAAW,EACvC,+BAA+B,CAChC,CAAC,QAAQ,EAAE;CACb,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,sBAAsB,GAAG,yBAAyB,CAAC,MAAM,CAAC;IAC9D,YAAY,EAAE,cAAc;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IAC7C,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,mBAAmB,GAAG,yBAAyB,CAAC,MAAM,CAC1D,uCAAuC,CAAC,IAAI,CAAC;IAC3C,aAAa,EAAE,IAAI;IACnB,IAAI,EAAE,IAAI;CACX,CAAC,CAAC,KAAK,CACT,CAAC,MAAM,EAAE,CAAC;AACX,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC;QACtD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACpB,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;GAGG;AACH,MAAM,OAAO,uBAAuB;IAEzB,SAAS,CAAM;IACf,MAAM,CAAe;IACrB,WAAW,CAAS;IAE7B,YAAY,MAAqC;QAC/C,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzD,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CAAC,aAAa,EAAE,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;QAC3E,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IACjD,CAAC;IAED,KAAK,CAAC,CAAC,sBAAsB,CAC3B,QAAuC;QAEvC,MAAM,KAAK,GAAG,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,qCAAqC,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,0CAA0C,CAAC,KAAK,CAAC;YAC5D,aAAa,EAAE,0BAA0B;YACzC,IAAI,EAAE,0BAA0B;YAChC,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAC3B,KAAK,EACL,IAAI,EACJ,8BAA8B,EAC9B,4BAA4B,CAC7B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,mBAAmB,CACxB,QAAoC;QAEpC,MAAM,KAAK,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,qCAAqC,EAAE,CAAC;QACpD,CAAC;QACD,MAAM,IAAI,GAAG,uCAAuC,CAAC,KAAK,CAAC;YACzD,aAAa,EAAE,0BAA0B;YACzC,IAAI,EAAE,uBAAuB;YAC7B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,GAAG,CAAC,KAAK,CAAC,eAAe;gBACvB,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE;gBAC5C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,KAAK,CAAC,gBAAgB;gBACxB,CAAC,CAAC,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE;gBAC9C,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;QACH,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAC3B,KAAK,EACL,IAAI,EACJ,uCAAuC,EACvC,qCAAqC,CACtC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,CAAC,iBAAiB,CACtB,KAAsB,EACtB,IAAa,EACb,MAAyB,EACzB,UAAsC;QAEtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,0BAA0B,CAClC,QAAQ,CAAC,MAAM,EACf,MAAM,iBAAiB,CAAC,QAAQ,CAAC,CAClC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,CAAC,4BAA4B,CAAC;YAClC,QAAQ;YACR,MAAM;YACN,UAAU;YACV,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,KAAsB,EAAE,IAAa;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE;gBACvC,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,OAAO;gBACjB,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,OAAO,EAAE,sBAAsB,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC;gBACxD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,6BAA6B,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF;AAmBD,SAAS,sBAAsB,CAC7B,KAAsB,EACtB,UAAkB;IAElB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;QAC1B,MAAM,EAAE,mBAAmB;QAC3B,cAAc,EAAE,kBAAkB;QAClC,CAAC,gCAAgC,CAAC,EAAE,KAAK,CAAC,gBAAgB;QAC1D,CAAC,iCAAiC,CAAC,EAAE,UAAU;QAC/C,CAAC,uBAAuB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC;QAChE,CAAC,0BAA0B,CAAC,EAAE,KAAK,CAAC,kBAAkB;KACvD,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAkB;IACjD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,MAAM,uBAAuB,CACnE,QAAQ,EACR,oBAAoB,CACrB,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ;IACjC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,2GAA2G,CAC5G,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAQ;IACjC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC;QACrD,CAAC,CAAC,UAAU,CAAC,QAAQ;QACrB,CAAC,CAAC,GAAG,UAAU,CAAC,QAAQ,GAAG,CAAC;IAC9B,OAAO,UAAU,CAAC;AACpB,CAAC","sourcesContent":["import { z } from 'zod';\nimport {\n  AGENTCORE_RUNTIME_SESSION_HEADER,\n  CONVERSATION_TURN_WORKFLOW,\n  EXECUTION_ASSERTION_HEADER,\n  EXECUTION_CONTRACT_VERSION,\n  EXECUTION_HOST_LOCAL_TOKEN_HEADER,\n  ExecutionHostConversationTurnRequestSchema,\n  ExecutionHostHeartbeatStreamEventSchema,\n  ExecutionHostHeartbeatTaskRequestSchema,\n  ExecutionHostModelCredentialSchema,\n  ExecutionHostStreamEventSchema,\n  HEARTBEAT_TASK_WORKFLOW,\n  MCP_CAPABILITY_HEADER,\n  MODEL_CREDENTIAL_HEADER,\n  OpaqueIdSchema,\n  RuntimeSessionIdSchema,\n  TimestampSchema,\n  isExecutionHostHeartbeatTerminalEvent,\n  isExecutionHostTerminalEvent,\n  isSafeWebUrl,\n  type ExecutionHostHeartbeatStreamEvent,\n  type ExecutionHostStreamEvent,\n} from '../contracts/index.js';\nimport {\n  ExecutionHostInvocationCancelledError,\n  ExecutionHostRejectedError,\n} from './errors.js';\nimport type {\n  DirectHttpExecutionHostConfig,\n  ExecutionHost,\n  ExecutionHostConversationTurn,\n  ExecutionHostHeartbeatTask,\n  HeartbeatExecutionHost,\n} from './types.js';\nimport {\n  readExecutionHostEventStream,\n  toExecutionHostTransportError,\n} from '../internal/execution-host-event-stream.js';\nimport { readBoundedJsonResponse } from '../internal/http-response.js';\n\nconst MAX_ERROR_BODY_BYTES = 16_384;\nconst SecretSchema = z.string().min(8).max(4_096);\nconst InvocationAuthoritySchema = z.object({\n  runtimeSessionId: RuntimeSessionIdSchema,\n  executionAssertion: z.string().min(32).max(4_096),\n  mcpCapability: z.string().min(32).max(4_096).optional(),\n  modelCredential: ExecutionHostModelCredentialSchema,\n  signal: z.custom<AbortSignal>(\n    (value) => value instanceof AbortSignal,\n    'signal must be an AbortSignal',\n  ).optional(),\n}).strict();\nconst ConversationTurnSchema = InvocationAuthoritySchema.extend({\n  invocationId: OpaqueIdSchema,\n  prompt: z.string().trim().min(1).max(200_000),\n  deadlineAt: TimestampSchema.optional(),\n}).strict();\nconst HeartbeatTaskSchema = InvocationAuthoritySchema.extend(\n  ExecutionHostHeartbeatTaskRequestSchema.omit({\n    schemaVersion: true,\n    kind: true,\n  }).shape,\n).strict();\nconst ApiErrorSchema = z.object({\n  error: z.object({\n    code: z.string().min(1).max(128).regex(/^[a-z0-9_]+$/),\n    message: z.string(),\n  }).strict(),\n}).strict();\n\n/**\n * Strict direct-development HTTP/SSE adapter for the Execution Host v1 wire.\n * It deliberately owns neither AWS SDK nor SigV4 behavior.\n */\nexport class DirectHttpExecutionHost\nimplements ExecutionHost, HeartbeatExecutionHost {\n  readonly #endpoint: URL;\n  readonly #fetch: typeof fetch;\n  readonly #localToken: string;\n\n  constructor(config: DirectHttpExecutionHostConfig) {\n    assertSafeBaseUrl(config.baseUrl);\n    this.#localToken = SecretSchema.parse(config.localToken);\n    this.#endpoint = new URL('invocations', withTrailingSlash(config.baseUrl));\n    this.#fetch = config.fetch ?? globalThis.fetch;\n  }\n\n  async *streamConversationTurn(\n    rawInput: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent> {\n    const input = ConversationTurnSchema.parse(rawInput);\n    if (input.signal?.aborted) {\n      throw new ExecutionHostInvocationCancelledError();\n    }\n    const body = ExecutionHostConversationTurnRequestSchema.parse({\n      schemaVersion: EXECUTION_CONTRACT_VERSION,\n      kind: CONVERSATION_TURN_WORKFLOW,\n      invocationId: input.invocationId,\n      prompt: input.prompt,\n      ...(input.deadlineAt ? { deadlineAt: input.deadlineAt } : {}),\n    });\n    yield* this.#streamInvocation(\n      input,\n      body,\n      ExecutionHostStreamEventSchema,\n      isExecutionHostTerminalEvent,\n    );\n  }\n\n  async *streamHeartbeatTask(\n    rawInput: ExecutionHostHeartbeatTask,\n  ): AsyncIterable<ExecutionHostHeartbeatStreamEvent> {\n    const input = HeartbeatTaskSchema.parse(rawInput);\n    if (input.signal?.aborted) {\n      throw new ExecutionHostInvocationCancelledError();\n    }\n    const body = ExecutionHostHeartbeatTaskRequestSchema.parse({\n      schemaVersion: EXECUTION_CONTRACT_VERSION,\n      kind: HEARTBEAT_TASK_WORKFLOW,\n      invocationId: input.invocationId,\n      taskId: input.taskId,\n      task: input.task,\n      ...(input.checkpoint ? { checkpoint: input.checkpoint } : {}),\n      runContext: input.runContext,\n      ...(input.model ? { model: input.model } : {}),\n      ...(input.reasoningEffort\n        ? { reasoningEffort: input.reasoningEffort }\n        : {}),\n      ...(input.maxSteps !== undefined ? { maxSteps: input.maxSteps } : {}),\n      ...(input.searchIgnoreDirs\n        ? { searchIgnoreDirs: input.searchIgnoreDirs }\n        : {}),\n      ...(input.systemContext ? { systemContext: input.systemContext } : {}),\n      ...(input.deadlineAt ? { deadlineAt: input.deadlineAt } : {}),\n    });\n    yield* this.#streamInvocation(\n      input,\n      body,\n      ExecutionHostHeartbeatStreamEventSchema,\n      isExecutionHostHeartbeatTerminalEvent,\n    );\n  }\n\n  async *#streamInvocation<TEvent extends ValidatedStreamEvent>(\n    input: InvocationInput,\n    body: unknown,\n    schema: z.ZodType<TEvent>,\n    isTerminal: (event: TEvent) => boolean,\n  ): AsyncIterable<TEvent> {\n    const response = await this.#invoke(input, body);\n    if (!response.ok) {\n      throw new ExecutionHostRejectedError(\n        response.status,\n        await readSafeErrorCode(response),\n      );\n    }\n    yield* readExecutionHostEventStream({\n      response,\n      schema,\n      isTerminal,\n      invocationId: input.invocationId,\n      signal: input.signal,\n    });\n  }\n\n  async #invoke(input: InvocationInput, body: unknown): Promise<Response> {\n    try {\n      return await this.#fetch(this.#endpoint, {\n        method: 'POST',\n        redirect: 'error',\n        signal: input.signal,\n        headers: createSensitiveHeaders(input, this.#localToken),\n        body: JSON.stringify(body),\n      });\n    } catch (error) {\n      throw toExecutionHostTransportError(error, input.signal);\n    }\n  }\n}\n\ntype InvocationInput = {\n  invocationId: string;\n  runtimeSessionId: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelCredential: z.infer<typeof ExecutionHostModelCredentialSchema>;\n  signal?: AbortSignal;\n};\n\ntype ValidatedStreamEvent = {\n  kind: string;\n  invocationId: string;\n  runId: string;\n  sequence: number;\n  timestamp: string;\n};\n\nfunction createSensitiveHeaders(\n  input: InvocationInput,\n  localToken: string,\n): Headers {\n  const headers = new Headers({\n    Accept: 'text/event-stream',\n    'Content-Type': 'application/json',\n    [AGENTCORE_RUNTIME_SESSION_HEADER]: input.runtimeSessionId,\n    [EXECUTION_HOST_LOCAL_TOKEN_HEADER]: localToken,\n    [MODEL_CREDENTIAL_HEADER]: JSON.stringify(input.modelCredential),\n    [EXECUTION_ASSERTION_HEADER]: input.executionAssertion,\n  });\n  if (input.mcpCapability) {\n    headers.set(MCP_CAPABILITY_HEADER, input.mcpCapability);\n  }\n  return headers;\n}\n\nasync function readSafeErrorCode(response: Response): Promise<string> {\n  try {\n    const parsed = ApiErrorSchema.safeParse(await readBoundedJsonResponse(\n      response,\n      MAX_ERROR_BODY_BYTES,\n    ));\n    return parsed.success ? parsed.data.error.code : 'unknown';\n  } catch {\n    return 'unknown';\n  }\n}\n\nfunction assertSafeBaseUrl(url: URL): void {\n  if (!isSafeWebUrl(url)) {\n    throw new Error(\n      'Direct Execution Host URL must use HTTPS or loopback HTTP and contain no credentials, query, or fragment.',\n    );\n  }\n}\n\nfunction withTrailingSlash(url: URL): URL {\n  const normalized = new URL(url);\n  normalized.pathname = normalized.pathname.endsWith('/')\n    ? normalized.pathname\n    : `${normalized.pathname}/`;\n  return normalized;\n}\n"]}

package/dist/http-sse/types.d.ts

@@ -1,4 +1,4 @@
-import type { ExecutionHostHeartbeatStreamEvent, ExecutionHostHeartbeatTaskRequest, ExecutionHostStreamEvent } from '../contracts/index.js';
+import type { ExecutionHostModelCredential, ExecutionHostHeartbeatStreamEvent, ExecutionHostHeartbeatTaskRequest, ExecutionHostStreamEvent } from '../contracts/index.js';
 export type ExecutionHostConversationTurn = {
     invocationId: string;
     runtimeSessionId: string;
@@ -6,7 +6,7 @@ export type ExecutionHostConversationTurn = {
     deadlineAt?: string;
     executionAssertion: string;
     mcpCapability?: string;
-    modelApiKey: string;
+    modelCredential: ExecutionHostModelCredential;
     signal?: AbortSignal;
 };
 export interface ExecutionHost {
@@ -16,7 +16,7 @@ export type ExecutionHostHeartbeatTask = Omit<ExecutionHostHeartbeatTaskRequest,
     runtimeSessionId: string;
     executionAssertion: string;
     mcpCapability?: string;
-    modelApiKey: string;
+    modelCredential: ExecutionHostModelCredential;
     signal?: AbortSignal;
 };
 export interface HeartbeatExecutionHost {

package/dist/http-sse/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/http-sse/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,iCAAiC,EACjC,iCAAiC,EACjC,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,sBAAsB,CACpB,KAAK,EAAE,6BAA6B,GACnC,aAAa,CAAC,wBAAwB,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAC3C,iCAAiC,EACjC,eAAe,GAAG,MAAM,CACzB,GAAG;IACF,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,mBAAmB,CACjB,KAAK,EAAE,0BAA0B,GAChC,aAAa,CAAC,iCAAiC,CAAC,CAAC;CACrD;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,OAAO,EAAE,GAAG,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/http-sse/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,4BAA4B,EAC5B,iCAAiC,EACjC,iCAAiC,EACjC,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,6BAA6B,GAAG;IAC1C,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,4BAA4B,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,sBAAsB,CACpB,KAAK,EAAE,6BAA6B,GACnC,aAAa,CAAC,wBAAwB,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAC3C,iCAAiC,EACjC,eAAe,GAAG,MAAM,CACzB,GAAG;IACF,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,4BAA4B,CAAC;IAC9C,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,WAAW,sBAAsB;IACrC,mBAAmB,CACjB,KAAK,EAAE,0BAA0B,GAChC,aAAa,CAAC,iCAAiC,CAAC,CAAC;CACrD;AAED,MAAM,MAAM,6BAA6B,GAAG;IAC1C,OAAO,EAAE,GAAG,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB,CAAC"}

package/dist/http-sse/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/http-sse/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionHostHeartbeatStreamEvent,\n  ExecutionHostHeartbeatTaskRequest,\n  ExecutionHostStreamEvent,\n} from '../contracts/index.js';\n\nexport type ExecutionHostConversationTurn = {\n  invocationId: string;\n  runtimeSessionId: string;\n  prompt: string;\n  deadlineAt?: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelApiKey: string;\n  signal?: AbortSignal;\n};\n\nexport interface ExecutionHost {\n  streamConversationTurn(\n    input: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent>;\n}\n\nexport type ExecutionHostHeartbeatTask = Omit<\n  ExecutionHostHeartbeatTaskRequest,\n  'schemaVersion' | 'kind'\n> & {\n  runtimeSessionId: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelApiKey: string;\n  signal?: AbortSignal;\n};\n\nexport interface HeartbeatExecutionHost {\n  streamHeartbeatTask(\n    input: ExecutionHostHeartbeatTask,\n  ): AsyncIterable<ExecutionHostHeartbeatStreamEvent>;\n}\n\nexport type DirectHttpExecutionHostConfig = {\n  baseUrl: URL;\n  localToken: string;\n  fetch?: typeof fetch;\n};\n"]}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/http-sse/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ExecutionHostModelCredential,\n  ExecutionHostHeartbeatStreamEvent,\n  ExecutionHostHeartbeatTaskRequest,\n  ExecutionHostStreamEvent,\n} from '../contracts/index.js';\n\nexport type ExecutionHostConversationTurn = {\n  invocationId: string;\n  runtimeSessionId: string;\n  prompt: string;\n  deadlineAt?: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelCredential: ExecutionHostModelCredential;\n  signal?: AbortSignal;\n};\n\nexport interface ExecutionHost {\n  streamConversationTurn(\n    input: ExecutionHostConversationTurn,\n  ): AsyncIterable<ExecutionHostStreamEvent>;\n}\n\nexport type ExecutionHostHeartbeatTask = Omit<\n  ExecutionHostHeartbeatTaskRequest,\n  'schemaVersion' | 'kind'\n> & {\n  runtimeSessionId: string;\n  executionAssertion: string;\n  mcpCapability?: string;\n  modelCredential: ExecutionHostModelCredential;\n  signal?: AbortSignal;\n};\n\nexport interface HeartbeatExecutionHost {\n  streamHeartbeatTask(\n    input: ExecutionHostHeartbeatTask,\n  ): AsyncIterable<ExecutionHostHeartbeatStreamEvent>;\n}\n\nexport type DirectHttpExecutionHostConfig = {\n  baseUrl: URL;\n  localToken: string;\n  fetch?: typeof fetch;\n};\n"]}

package/dist/node/direct-credentials.d.ts

@@ -1,21 +1,17 @@
-import type { HostedConversationModelCredentialProvider } from '../conversation/index.js';
 export type DirectExecutionHostCredentialEnvironmentNames = {
     localToken: string;
-    modelApiKey: string;
 };
 /**
- * Non-enumerable direct-host and model credentials for a local/reviewed
- * deployment. Production secret retrieval may construct the same class.
+ * Non-enumerable direct-host ingress credential for a local/reviewed
+ * deployment. Model credentials use the separate per-invocation provider.
  */
-export declare class DirectExecutionHostCredentials implements HostedConversationModelCredentialProvider {
+export declare class DirectExecutionHostCredentials {
     #private;
     constructor(input: {
         localToken: string;
-        modelApiKey: string;
     });
     /** Takes configured values out of the process environment before parsing. */
     static takeFromEnvironment(environment: NodeJS.ProcessEnv, rawNames: DirectExecutionHostCredentialEnvironmentNames): DirectExecutionHostCredentials;
     localToken(): string;
-    resolveModelApiKey(): Promise<string>;
 }
 //# sourceMappingURL=direct-credentials.d.ts.map

package/dist/node/direct-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"direct-credentials.d.ts","sourceRoot":"","sources":["../../src/node/direct-credentials.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,yCAAyC,EAC1C,MAAM,0BAA0B,CAAC;AASlC,MAAM,MAAM,6CAA6C,GAAG;IAC1D,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;;GAGG;AACH,qBAAa,8BACb,YAAW,yCAAyC;;gBAItC,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE;IAS9D,6EAA6E;IAC7E,MAAM,CAAC,mBAAmB,CACxB,WAAW,EAAE,MAAM,CAAC,UAAU,EAC9B,QAAQ,EAAE,6CAA6C,GACtD,8BAA8B;IAmBjC,UAAU,IAAI,MAAM;IAId,kBAAkB,IAAI,OAAO,CAAC,MAAM,CAAC;CAG5C"}
+{"version":3,"file":"direct-credentials.d.ts","sourceRoot":"","sources":["../../src/node/direct-credentials.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,6CAA6C,GAAG;IAC1D,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,qBAAa,8BAA8B;;gBAG7B,KAAK,EAAE;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE;IAQzC,6EAA6E;IAC7E,MAAM,CAAC,mBAAmB,CACxB,WAAW,EAAE,MAAM,CAAC,UAAU,EAC9B,QAAQ,EAAE,6CAA6C,GACtD,8BAA8B;IAajC,UAAU,IAAI,MAAM;CAGrB"}

package/dist/node/direct-credentials.js

@@ -1,18 +1,15 @@
 import { z } from 'zod';
 const LocalTokenSchema = z.string().trim().min(32).max(4_096);
-const ModelApiKeySchema = z.string().trim().min(8).max(4_096);
 const EnvironmentNameSchema = z.string().min(1).max(128).regex(/^[A-Za-z_][A-Za-z0-9_]*$/, 'must be an environment variable name');
 /**
- * Non-enumerable direct-host and model credentials for a local/reviewed
- * deployment. Production secret retrieval may construct the same class.
+ * Non-enumerable direct-host ingress credential for a local/reviewed
+ * deployment. Model credentials use the separate per-invocation provider.
  */
 export class DirectExecutionHostCredentials {
     #localToken;
-    #modelApiKey;
     constructor(input) {
         try {
             this.#localToken = LocalTokenSchema.parse(input.localToken);
-            this.#modelApiKey = ModelApiKeySchema.parse(input.modelApiKey);
         }
         catch {
             throw new Error('Direct Execution Host credentials are invalid.');
@@ -22,26 +19,17 @@ export class DirectExecutionHostCredentials {
     static takeFromEnvironment(environment, rawNames) {
         const names = z.object({
             localToken: EnvironmentNameSchema,
-            modelApiKey: EnvironmentNameSchema,
-        }).strict().refine((value) => value.localToken !== value.modelApiKey, {
-            message: 'credential environment names must be distinct',
-        }).parse(rawNames);
+        }).strict().parse(rawNames);
         const input = {
             localToken: environment[names.localToken],
-            modelApiKey: environment[names.modelApiKey],
         };
         delete environment[names.localToken];
-        delete environment[names.modelApiKey];
         return new DirectExecutionHostCredentials({
             localToken: input.localToken ?? '',
-            modelApiKey: input.modelApiKey ?? '',
         });
     }
     localToken() {
         return this.#localToken;
     }
-    async resolveModelApiKey() {
-        return this.#modelApiKey;
-    }
 }
 //# sourceMappingURL=direct-credentials.js.map

package/dist/node/direct-credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"direct-credentials.js","sourceRoot":"","sources":["../../src/node/direct-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC9D,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC9D,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAC5D,0BAA0B,EAC1B,sCAAsC,CACvC,CAAC;AAOF;;;GAGG;AACH,MAAM,OAAO,8BAA8B;IAEhC,WAAW,CAAS;IACpB,YAAY,CAAS;IAE9B,YAAY,KAAkD;QAC5D,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5D,IAAI,CAAC,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,mBAAmB,CACxB,WAA8B,EAC9B,QAAuD;QAEvD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;YACrB,UAAU,EAAE,qBAAqB;YACjC,WAAW,EAAE,qBAAqB;SACnC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,WAAW,EAAE;YACpE,OAAO,EAAE,+CAA+C;SACzD,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG;YACZ,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC;YACzC,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC;SAC5C,CAAC;QACF,OAAO,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrC,OAAO,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QACtC,OAAO,IAAI,8BAA8B,CAAC;YACxC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;YAClC,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,kBAAkB;QACtB,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;CACF","sourcesContent":["import { z } from 'zod';\nimport type {\n  HostedConversationModelCredentialProvider,\n} from '../conversation/index.js';\n\nconst LocalTokenSchema = z.string().trim().min(32).max(4_096);\nconst ModelApiKeySchema = z.string().trim().min(8).max(4_096);\nconst EnvironmentNameSchema = z.string().min(1).max(128).regex(\n  /^[A-Za-z_][A-Za-z0-9_]*$/,\n  'must be an environment variable name',\n);\n\nexport type DirectExecutionHostCredentialEnvironmentNames = {\n  localToken: string;\n  modelApiKey: string;\n};\n\n/**\n * Non-enumerable direct-host and model credentials for a local/reviewed\n * deployment. Production secret retrieval may construct the same class.\n */\nexport class DirectExecutionHostCredentials\nimplements HostedConversationModelCredentialProvider {\n  readonly #localToken: string;\n  readonly #modelApiKey: string;\n\n  constructor(input: { localToken: string; modelApiKey: string }) {\n    try {\n      this.#localToken = LocalTokenSchema.parse(input.localToken);\n      this.#modelApiKey = ModelApiKeySchema.parse(input.modelApiKey);\n    } catch {\n      throw new Error('Direct Execution Host credentials are invalid.');\n    }\n  }\n\n  /** Takes configured values out of the process environment before parsing. */\n  static takeFromEnvironment(\n    environment: NodeJS.ProcessEnv,\n    rawNames: DirectExecutionHostCredentialEnvironmentNames,\n  ): DirectExecutionHostCredentials {\n    const names = z.object({\n      localToken: EnvironmentNameSchema,\n      modelApiKey: EnvironmentNameSchema,\n    }).strict().refine((value) => value.localToken !== value.modelApiKey, {\n      message: 'credential environment names must be distinct',\n    }).parse(rawNames);\n    const input = {\n      localToken: environment[names.localToken],\n      modelApiKey: environment[names.modelApiKey],\n    };\n    delete environment[names.localToken];\n    delete environment[names.modelApiKey];\n    return new DirectExecutionHostCredentials({\n      localToken: input.localToken ?? '',\n      modelApiKey: input.modelApiKey ?? '',\n    });\n  }\n\n  localToken(): string {\n    return this.#localToken;\n  }\n\n  async resolveModelApiKey(): Promise<string> {\n    return this.#modelApiKey;\n  }\n}\n"]}
+{"version":3,"file":"direct-credentials.js","sourceRoot":"","sources":["../../src/node/direct-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC9D,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAC5D,0BAA0B,EAC1B,sCAAsC,CACvC,CAAC;AAMF;;;GAGG;AACH,MAAM,OAAO,8BAA8B;IAChC,WAAW,CAAS;IAE7B,YAAY,KAA6B;QACvC,IAAI,CAAC;YACH,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,MAAM,CAAC,mBAAmB,CACxB,WAA8B,EAC9B,QAAuD;QAEvD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;YACrB,UAAU,EAAE,qBAAqB;SAClC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG;YACZ,UAAU,EAAE,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC;SAC1C,CAAC;QACF,OAAO,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACrC,OAAO,IAAI,8BAA8B,CAAC;YACxC,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,EAAE;SACnC,CAAC,CAAC;IACL,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF","sourcesContent":["import { z } from 'zod';\n\nconst LocalTokenSchema = z.string().trim().min(32).max(4_096);\nconst EnvironmentNameSchema = z.string().min(1).max(128).regex(\n  /^[A-Za-z_][A-Za-z0-9_]*$/,\n  'must be an environment variable name',\n);\n\nexport type DirectExecutionHostCredentialEnvironmentNames = {\n  localToken: string;\n};\n\n/**\n * Non-enumerable direct-host ingress credential for a local/reviewed\n * deployment. Model credentials use the separate per-invocation provider.\n */\nexport class DirectExecutionHostCredentials {\n  readonly #localToken: string;\n\n  constructor(input: { localToken: string }) {\n    try {\n      this.#localToken = LocalTokenSchema.parse(input.localToken);\n    } catch {\n      throw new Error('Direct Execution Host credentials are invalid.');\n    }\n  }\n\n  /** Takes configured values out of the process environment before parsing. */\n  static takeFromEnvironment(\n    environment: NodeJS.ProcessEnv,\n    rawNames: DirectExecutionHostCredentialEnvironmentNames,\n  ): DirectExecutionHostCredentials {\n    const names = z.object({\n      localToken: EnvironmentNameSchema,\n    }).strict().parse(rawNames);\n    const input = {\n      localToken: environment[names.localToken],\n    };\n    delete environment[names.localToken];\n    return new DirectExecutionHostCredentials({\n      localToken: input.localToken ?? '',\n    });\n  }\n\n  localToken(): string {\n    return this.#localToken;\n  }\n}\n"]}

package/dist/testing/request.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/testing/request.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACf,MAAM,WAAW,CAAC;AAEnB,OAAO,EAQL,KAAK,oCAAoC,EAC1C,MAAM,uBAAuB,CAAC;AAQ/B,MAAM,MAAM,+BAA+B,GAAG;IAC5C,OAAO,EAAE,oCAAoC,CAAC;IAC9C,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,eAAe,EACxB,kBAAkB,EAAE,MAAM,EAC1B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,+BAA+B,CAAC,CAyC1C;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,OAAO,GACb,IAAI,CAkBN"}
+{"version":3,"file":"request.d.ts","sourceRoot":"","sources":["../../src/testing/request.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACf,MAAM,WAAW,CAAC;AAEnB,OAAO,EASL,KAAK,oCAAoC,EAC1C,MAAM,uBAAuB,CAAC;AAO/B,MAAM,MAAM,+BAA+B,GAAG;IAC5C,OAAO,EAAE,oCAAoC,CAAC;IAC9C,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,wBAAsB,8BAA8B,CAClD,OAAO,EAAE,eAAe,EACxB,kBAAkB,EAAE,MAAM,EAC1B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,+BAA+B,CAAC,CAyC1C;AAED,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,cAAc,EACxB,KAAK,EAAE,OAAO,GACb,IAAI,CAkBN"}