@kya-os/cli 2.0.0 → 2.0.3

package/node_modules/@kya-os/contracts/dist/workbench/mailbox.js

@@ -0,0 +1,475 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TaskStandingReconcileSchema = exports.TaskStandingActionSchema = exports.TaskStandingAdmissionSchema = exports.TaskStandingAdmissionRequestSchema = exports.TaskStandingLimitsSchema = exports.ApprovedTaskPublicationSchema = exports.TaskMailboxResultSchema = exports.FleetPullRequestReceiptSchema = exports.ApproveTaskPublicationSchema = exports.TaskMailboxSettlementSchema = exports.TaskMailboxStatusSchema = exports.TaskMailboxClaimSchema = exports.TaskMailboxStatusRequestSchema = exports.TaskMailboxClaimRequestSchema = exports.TaskMailboxScopeSchema = exports.TaskSourceIntentSchema = exports.ConfigureTaskSourceInstallationSchema = exports.TaskSourceProviderConfigSchema = exports.DidCommTaskSourceMessageSchema = exports.DidCommTaskSourceBindingSchema = exports.A2ATaskSourceConfigSchema = exports.DidCommTaskSourceConfigSchema = exports.DiscordTaskSourceConfigSchema = exports.GitHubTaskSourceConfigSchema = exports.ConfigureLinearInstallationSchema = exports.LinearInstallationWorkflowSchema = exports.TaskStandingPolicySchema = exports.TaskModelReceiptSchema = exports.TaskModelUsageSchema = exports.TaskModelInvokeSchema = exports.TaskModelStatusSchema = exports.TaskModelMessagesSchema = exports.TaskModelPolicySchema = exports.TaskStandingCapabilitySchema = exports.TaskSourceProviderSchema = void 0;
+const zod_1 = require("zod");
+const BoundedId = zod_1.z.string().min(1).max(255);
+// Receipts carry the same bounded identities and token shape as their requests.
+const DestinationDid = zod_1.z.string().startsWith('did:').max(512);
+const KeyDid = zod_1.z.string().startsWith('did:key:').max(512);
+const ClaimToken = zod_1.z
+    .string()
+    .length(64)
+    .regex(/^[a-f0-9]{64}$/);
+// The publication service mints this branch from the immutable task binding digest.
+const PublicationBranch = zod_1.z
+    .string()
+    .length(35)
+    .regex(/^kya\/linear-[a-f0-9]{24}$/);
+const Repository = zod_1.z
+    .string()
+    .max(255)
+    .regex(/^[a-zA-Z0-9_.-]+\/[a-zA-Z0-9_.-]+$/);
+exports.TaskSourceProviderSchema = zod_1.z.enum(['linear', 'github', 'discord', 'didcomm', 'a2a']);
+exports.TaskStandingCapabilitySchema = zod_1.z.enum([
+    'task.execute',
+    'model.invoke',
+    'github.branch.write',
+    'github.pull_request.draft',
+]);
+const TaskModelIdSchema = zod_1.z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/);
+/** Fixed allocation per call, not a provider price estimate or a guaranteed billing ceiling. */
+exports.TaskModelPolicySchema = zod_1.z
+    .object({
+    provider: zod_1.z.literal('anthropic'),
+    models: zod_1.z
+        .array(TaskModelIdSchema)
+        .min(1)
+        .max(20)
+        .refine((values) => new Set(values).size === values.length, 'Duplicate models'),
+    maxOutputTokens: zod_1.z.number().int().min(1).max(64000),
+    maxRequestBytes: zod_1.z.number().int().min(1).max(262144),
+    reservedCostMicrousd: zod_1.z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
+})
+    .strict();
+/** Initial text-only Messages profile. No caller endpoints, keys, hosted tools or streaming. */
+exports.TaskModelMessagesSchema = zod_1.z
+    .object({
+    model: TaskModelIdSchema,
+    max_tokens: zod_1.z.number().int().min(1).max(64000),
+    messages: zod_1.z
+        .array(zod_1.z
+        .object({ role: zod_1.z.enum(['user', 'assistant']), content: zod_1.z.string().min(1).max(262144) })
+        .strict())
+        .min(1)
+        .max(1000),
+    system: zod_1.z.string().max(262144).optional(),
+    temperature: zod_1.z.number().min(0).max(1).optional(),
+    stream: zod_1.z.literal(false).optional(),
+})
+    .strict();
+exports.TaskModelStatusSchema = zod_1.z
+    .object({
+    admissionId: zod_1.z.string().uuid(),
+    operationId: zod_1.z.string().uuid(),
+    ownerEpoch: zod_1.z.number().int().positive(),
+})
+    .strict();
+exports.TaskModelInvokeSchema = exports.TaskModelStatusSchema.extend({
+    request: exports.TaskModelMessagesSchema,
+}).strict();
+const ModelTokenCount = zod_1.z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).nullable();
+exports.TaskModelUsageSchema = zod_1.z
+    .object({
+    newInputTokens: ModelTokenCount,
+    cacheReadInputTokens: ModelTokenCount,
+    cacheWriteInputTokens: ModelTokenCount,
+    cacheWrite5mInputTokens: ModelTokenCount,
+    cacheWrite1hInputTokens: ModelTokenCount,
+    totalInputTokens: ModelTokenCount,
+    outputTokens: ModelTokenCount,
+    coverage: zod_1.z.enum(['complete', 'partial', 'unknown']),
+})
+    .strict();
+exports.TaskModelReceiptSchema = zod_1.z
+    .object({
+    schema: zod_1.z.literal('kya.task.model-receipt.v1'),
+    admissionId: zod_1.z.string().uuid(),
+    admissionDigest: zod_1.z.string().regex(/^sha256:[a-f0-9]{64}$/),
+    operationId: zod_1.z.string().uuid(),
+    requestDigest: zod_1.z.string().regex(/^sha256:[a-f0-9]{64}$/),
+    provider: zod_1.z.literal('anthropic'),
+    model: TaskModelIdSchema,
+    reservedCostMicrousd: zod_1.z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
+    usage: exports.TaskModelUsageSchema.nullable(),
+    outputDigest: zod_1.z
+        .string()
+        .regex(/^sha256:[a-f0-9]{64}$/)
+        .optional(),
+    code: zod_1.z.enum(['MODEL_STARTED', 'MODEL_COMPLETED', 'MODEL_OUTCOME_UNKNOWN']),
+    durationMs: zod_1.z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).nullable(),
+    requestStartedAtMs: zod_1.z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).nullable(),
+    costBasis: zod_1.z.literal('unknown'),
+    billingVerified: zod_1.z.literal(false),
+})
+    .strict();
+// Rust refuses a repeated capability too (task_control.rs `capabilities`).
+const StandingCapabilities = zod_1.z
+    .array(exports.TaskStandingCapabilitySchema)
+    .min(1)
+    .max(4)
+    .refine((values) => new Set(values).size === values.length, 'Duplicate capability');
+exports.TaskStandingPolicySchema = zod_1.z
+    .object({
+    maxConcurrentOperations: zod_1.z.number().int().min(1).max(100),
+    maxAttemptsPerTask: zod_1.z.number().int().min(1).max(10),
+    workers: zod_1.z
+        .array(zod_1.z
+        .object({
+        did: KeyDid,
+        capabilities: StandingCapabilities,
+    })
+        .strict())
+        .min(1)
+        .max(100),
+})
+    .strict();
+exports.LinearInstallationWorkflowSchema = zod_1.z
+    .object({
+    destinationDid: DestinationDid,
+    ownerEpoch: zod_1.z.number().int().positive().max(2147483647),
+    allowedActorIds: zod_1.z.array(BoundedId).min(1).max(100),
+    allowedRepositories: zod_1.z.array(Repository).min(1).max(50),
+    maxRuntimeSeconds: zod_1.z.number().int().positive().max(86400),
+    maxOperations: zod_1.z.number().int().positive().max(10000),
+    maxCostMicrousd: zod_1.z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
+    allowDraftPullRequest: zod_1.z.boolean().default(false),
+    executionMode: zod_1.z.enum(['review_required', 'work_to_draft_pr']).default('review_required'),
+    standingApproval: exports.TaskStandingPolicySchema.optional(),
+    modelPolicy: exports.TaskModelPolicySchema.optional(),
+})
+    .strict()
+    .refine((value) => new TextEncoder().encode(JSON.stringify(value)).byteLength <= 60000, 'Workflow exceeds delivery envelope bound');
+exports.ConfigureLinearInstallationSchema = zod_1.z
+    .object({
+    projectId: zod_1.z.string().uuid(),
+    workspaceId: BoundedId,
+    oauthClientId: BoundedId,
+    appUserId: BoundedId,
+    webhookId: BoundedId,
+    webhookSecret: zod_1.z.string().min(16).max(4096),
+    accessToken: zod_1.z.string().min(1).max(8192),
+    enabled: zod_1.z.boolean().default(true),
+    workflow: exports.LinearInstallationWorkflowSchema,
+})
+    .strict();
+exports.GitHubTaskSourceConfigSchema = zod_1.z
+    .object({
+    provider: zod_1.z.literal('github'),
+    githubInstallationId: zod_1.z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
+    repository: Repository.transform((value) => value.toLowerCase()),
+    agentUserId: zod_1.z.string().regex(/^[1-9][0-9]{0,19}$/),
+    webhookSecret: zod_1.z.string().min(16).max(4096),
+})
+    .strict();
+exports.DiscordTaskSourceConfigSchema = zod_1.z
+    .object({
+    provider: zod_1.z.literal('discord'),
+    applicationId: zod_1.z.string().regex(/^[1-9][0-9]{16,19}$/),
+    publicKeyHex: zod_1.z.string().regex(/^[a-fA-F0-9]{64}$/),
+    guildId: zod_1.z.string().regex(/^[1-9][0-9]{16,19}$/),
+    channelIds: zod_1.z
+        .array(zod_1.z.string().regex(/^[1-9][0-9]{16,19}$/))
+        .min(1)
+        .max(100),
+    commandName: zod_1.z.string().regex(/^[a-z0-9_-]{1,32}$/),
+})
+    .strict();
+exports.DidCommTaskSourceConfigSchema = zod_1.z
+    .object({
+    provider: zod_1.z.literal('didcomm'),
+    recipientDid: zod_1.z.string().startsWith('did:key:').max(255),
+})
+    .strict();
+exports.A2ATaskSourceConfigSchema = zod_1.z
+    .object({ provider: zod_1.z.literal('a2a'), recipientDid: zod_1.z.string().startsWith('did:key:').max(255) })
+    .strict();
+exports.DidCommTaskSourceBindingSchema = zod_1.z
+    .object({
+    schema: zod_1.z.literal('kya.task.source-binding.v1'),
+    organizationId: zod_1.z.string().uuid(),
+    projectId: zod_1.z.string().uuid(),
+    installationId: zod_1.z.string().uuid(),
+    ownerEpoch: zod_1.z.number().int().positive().max(2147483647),
+})
+    .strict();
+const DidCommSourceContext = zod_1.z
+    .object({
+    kyaTaskSource: exports.DidCommTaskSourceBindingSchema,
+    repo: Repository.optional(),
+})
+    .catchall(zod_1.z.unknown());
+const DidCommSourceEnvelope = zod_1.z.object({
+    id: zod_1.z.string().uuid(),
+    from: zod_1.z.string().startsWith('did:key:').max(255),
+    to: zod_1.z.array(zod_1.z.string().startsWith('did:key:').max(255)).length(1),
+    created_time: zod_1.z.number().int().positive(),
+    expires_time: zod_1.z.number().int().positive(),
+    thid: BoundedId,
+    pthid: BoundedId.optional(),
+});
+const DidCommTaskBody = { taskId: BoundedId, context: DidCommSourceContext };
+exports.DidCommTaskSourceMessageSchema = zod_1.z.discriminatedUnion('type', [
+    DidCommSourceEnvelope.extend({
+        type: zod_1.z.literal('https://kya-os.ai/didcomm/task/assign'),
+        body: zod_1.z
+            .object({
+            ...DidCommTaskBody,
+            description: zod_1.z.string().min(1).max(190000),
+            priority: zod_1.z.enum(['low', 'normal', 'urgent']).optional(),
+            relayTimeoutMs: zod_1.z.number().int().positive().max(86400000).optional(),
+        })
+            .strict(),
+    }).strict(),
+    DidCommSourceEnvelope.extend({
+        type: zod_1.z.literal('https://kya-os.ai/didcomm/task/steer'),
+        body: zod_1.z
+            .object({
+            ...DidCommTaskBody,
+            instruction: zod_1.z.string().min(1).max(190000),
+            priority: zod_1.z.enum(['low', 'normal', 'urgent']).optional(),
+        })
+            .strict(),
+    }).strict(),
+    DidCommSourceEnvelope.extend({
+        type: zod_1.z.literal('https://kya-os.ai/didcomm/task/cancel'),
+        body: zod_1.z.object(DidCommTaskBody).strict(),
+    }).strict(),
+]);
+exports.TaskSourceProviderConfigSchema = zod_1.z.discriminatedUnion('provider', [
+    exports.GitHubTaskSourceConfigSchema,
+    exports.DiscordTaskSourceConfigSchema,
+    exports.DidCommTaskSourceConfigSchema,
+    exports.A2ATaskSourceConfigSchema,
+]);
+exports.ConfigureTaskSourceInstallationSchema = zod_1.z
+    .object({
+    projectId: zod_1.z.string().uuid(),
+    source: exports.TaskSourceProviderConfigSchema,
+    /** Setup only: encrypted server custody, never included in source or workload responses. */
+    discordBotToken: zod_1.z.string().min(1).max(8192).optional(),
+    enabled: zod_1.z.boolean().default(true),
+    workflow: exports.LinearInstallationWorkflowSchema,
+})
+    .strict();
+/** Authenticated source material, never an executable authorization. */
+exports.TaskSourceIntentSchema = zod_1.z
+    .object({
+    schema: zod_1.z.literal('kya.task.source-intent.v1'),
+    taskId: zod_1.z.string().uuid(),
+    operationId: zod_1.z.string().uuid(),
+    installationId: zod_1.z.string().uuid(),
+    organizationId: zod_1.z.string().uuid(),
+    projectId: zod_1.z.string().uuid(),
+    sessionId: BoundedId,
+    sourceRevision: zod_1.z.number().int().positive(),
+    ownerEpoch: zod_1.z.number().int().positive(),
+    destinationDid: DestinationDid,
+    kind: zod_1.z.enum(['created', 'prompted', 'stop']),
+    source: zod_1.z
+        .object({
+        provider: exports.TaskSourceProviderSchema,
+        workspaceId: BoundedId,
+        actorId: BoundedId,
+        issueId: BoundedId.optional(),
+    })
+        .strict(),
+    untrustedInput: zod_1.z
+        .string()
+        .max(200000)
+        .refine((value) => new TextEncoder().encode(value).byteLength <= 200000 &&
+        new TextEncoder().encode(JSON.stringify(value)).byteLength <= 400000, 'Source input exceeds the UTF-8 or encoded response bound'),
+    inputDigest: zod_1.z.string().regex(/^sha256:[a-f0-9]{64}$/),
+    workflow: exports.LinearInstallationWorkflowSchema,
+    authorization: zod_1.z.literal('requires_task_approval'),
+})
+    .strict();
+/** Scope is derived from authenticated workload authority, never request-body tenancy. */
+exports.TaskMailboxScopeSchema = zod_1.z
+    .object({
+    organizationId: zod_1.z.string().uuid(),
+    projectId: zod_1.z.string().uuid(),
+    destinationDid: DestinationDid,
+    ownerEpoch: zod_1.z.number().int().positive(),
+})
+    .strict();
+exports.TaskMailboxClaimRequestSchema = zod_1.z
+    .object({
+    ownerEpoch: zod_1.z.number().int().positive().max(2147483647),
+    acceptedProviders: zod_1.z.array(exports.TaskSourceProviderSchema).min(1).max(5).default(['linear']),
+    claimId: zod_1.z.string().uuid().optional(),
+    claimToken: ClaimToken.optional(),
+})
+    .strict()
+    .refine((value) => Boolean(value.claimId) === Boolean(value.claimToken), 'claimId and claimToken must be supplied together');
+exports.TaskMailboxStatusRequestSchema = zod_1.z
+    .object({
+    ownerEpoch: zod_1.z.number().int().positive().max(2147483647),
+    claimId: zod_1.z.string().uuid(),
+})
+    .strict();
+exports.TaskMailboxClaimSchema = zod_1.z
+    .object({
+    claimId: zod_1.z.string().uuid(),
+    claimToken: ClaimToken,
+    claimExpiresAt: zod_1.z.string().datetime(),
+    deliveryState: zod_1.z.enum(['claimed', 'accepted', 'unknown', 'cancelled']),
+    intent: exports.TaskSourceIntentSchema,
+})
+    .strict();
+exports.TaskMailboxStatusSchema = zod_1.z
+    .object({
+    claimId: zod_1.z.string().uuid(),
+    operationId: zod_1.z.string().uuid(),
+    taskId: zod_1.z.string().uuid(),
+    sourceRevision: zod_1.z.number().int().positive(),
+    ownerEpoch: zod_1.z.number().int().positive(),
+    deliveryState: zod_1.z.enum(['pending', 'claimed', 'accepted', 'unknown', 'cancelled']),
+    outcome: zod_1.z.enum(['claimed', 'accepted', 'not_delivered', 'unknown']),
+    claimExpiresAt: zod_1.z.string().datetime(),
+})
+    .strict();
+exports.TaskMailboxSettlementSchema = zod_1.z
+    .object({
+    claimId: zod_1.z.string().uuid(),
+    operationId: zod_1.z.string().uuid(),
+    taskId: zod_1.z.string().uuid(),
+    sourceRevision: zod_1.z.number().int().positive(),
+    ownerEpoch: zod_1.z.number().int().positive(),
+    claimToken: ClaimToken,
+    outcome: zod_1.z.enum(['accepted', 'not_delivered', 'unknown']),
+})
+    .strict();
+const Sha256Digest = zod_1.z.string().regex(/^sha256:[a-f0-9]{64}$/);
+const PublicationBindingFields = {
+    sourceOperationId: zod_1.z.string().uuid(),
+    taskId: zod_1.z.string().uuid(),
+    sourceRevision: zod_1.z.number().int().positive(),
+    ownerEpoch: zod_1.z.number().int().positive(),
+    specRevision: zod_1.z.number().int().positive(),
+    manifestDigest: Sha256Digest,
+    executionOperationId: zod_1.z.string().min(1).max(255),
+};
+exports.ApproveTaskPublicationSchema = zod_1.z
+    .object({
+    ...PublicationBindingFields,
+    reporterDid: KeyDid,
+    repository: Repository,
+    baseSha: zod_1.z.string().regex(/^[a-f0-9]{40}$/),
+    expiresAt: zod_1.z.string().datetime(),
+    publishDraftPullRequest: zod_1.z.boolean().default(false),
+})
+    .strict();
+exports.FleetPullRequestReceiptSchema = zod_1.z
+    .object({
+    schema: zod_1.z.literal('kya.fleet.pull-request.v1'),
+    taskId: zod_1.z.string().uuid(),
+    number: zod_1.z.number().int().positive(),
+    headSha: zod_1.z.string().regex(/^[a-f0-9]{40}$/),
+})
+    .strict();
+exports.TaskMailboxResultSchema = zod_1.z
+    .object({
+    ...PublicationBindingFields,
+    outcome: zod_1.z.enum(['completed', 'failed', 'cancelled']),
+    artifact: exports.FleetPullRequestReceiptSchema.optional(),
+})
+    .strict();
+exports.ApprovedTaskPublicationSchema = exports.ApproveTaskPublicationSchema.extend({
+    schema: zod_1.z.literal('kya.task.publication-binding.v1'),
+    branch: PublicationBranch,
+    approvedByUserId: zod_1.z.string().uuid(),
+    approvedAt: zod_1.z.string().datetime(),
+    githubInstallationId: zod_1.z.number().int().positive().optional(),
+}).strict();
+exports.TaskStandingLimitsSchema = zod_1.z
+    .object({
+    maxRuntimeSeconds: zod_1.z.number().int().min(1).max(86400),
+    maxCostMicrousd: zod_1.z.number().int().positive().max(Number.MAX_SAFE_INTEGER),
+    maxOperations: zod_1.z.number().int().min(1).max(10000),
+})
+    .strict();
+const TaskStandingAdmissionRequestBaseSchema = zod_1.z
+    .object({
+    ...PublicationBindingFields,
+    workerDid: KeyDid,
+    repository: Repository,
+    baseSha: zod_1.z.string().regex(/^[a-f0-9]{40}$/),
+    attemptNumber: zod_1.z.number().int().min(1).max(10),
+    capabilities: StandingCapabilities,
+    limits: exports.TaskStandingLimitsSchema,
+    modelPolicy: exports.TaskModelPolicySchema.optional(),
+})
+    .strict();
+const validModelAdmission = (value) => value.capabilities.includes('model.invoke') === Boolean(value.modelPolicy) &&
+    (!value.modelPolicy || value.modelPolicy.reservedCostMicrousd <= value.limits.maxCostMicrousd);
+exports.TaskStandingAdmissionRequestSchema = TaskStandingAdmissionRequestBaseSchema.refine(validModelAdmission, 'Model capability requires a bounded policy');
+exports.TaskStandingAdmissionSchema = TaskStandingAdmissionRequestBaseSchema.omit({
+    workerDid: true,
+})
+    .extend({
+    schema: zod_1.z.literal('kya.task.admission.v1'),
+    admissionId: zod_1.z.string().uuid(),
+    organizationId: zod_1.z.string().uuid(),
+    projectId: zod_1.z.string().uuid(),
+    installationId: zod_1.z.string().uuid(),
+    leadDid: DestinationDid,
+    holderDid: KeyDid,
+    branch: PublicationBranch,
+    notBefore: zod_1.z.string().datetime(),
+    expiresAt: zod_1.z.string().datetime(),
+    policyProvenance: zod_1.z.literal('administrator_registered'),
+    requiresOnlineActionGate: zod_1.z.literal(true),
+    credentialExport: zod_1.z.literal(false),
+})
+    .strict()
+    .refine(validModelAdmission, 'Model capability requires a bounded policy');
+exports.TaskStandingActionSchema = zod_1.z
+    .object({
+    admissionId: zod_1.z.string().uuid(),
+    operationId: zod_1.z.string().uuid(),
+    ownerEpoch: zod_1.z.number().int().positive(),
+    action: zod_1.z.discriminatedUnion('kind', [
+        zod_1.z.object({ kind: zod_1.z.literal('task.start') }).strict(),
+        zod_1.z
+            .object({
+            kind: zod_1.z.literal('model.invoke'),
+            provider: zod_1.z.literal('anthropic'),
+            model: TaskModelIdSchema,
+            requestDigest: zod_1.z.string().regex(/^sha256:[a-f0-9]{64}$/),
+            maxOutputTokens: zod_1.z.number().int().min(1).max(64000),
+        })
+            .strict(),
+        zod_1.z
+            .object({
+            kind: zod_1.z.literal('task.finish'),
+            outcome: zod_1.z.enum(['completed', 'failed', 'cancelled', 'unknown']),
+        })
+            .strict(),
+        zod_1.z
+            .object({
+            kind: zod_1.z.literal('github.commit'),
+            expectedHeadSha: zod_1.z.string().regex(/^[a-f0-9]{40}$/),
+            message: zod_1.z.string().min(1).max(2000),
+            files: zod_1.z
+                .array(zod_1.z
+                .object({
+                path: zod_1.z.string().min(1).max(1000),
+                content: zod_1.z.string().max(200000).nullable(),
+            })
+                .strict())
+                .min(1)
+                .max(100),
+        })
+            .strict(),
+        zod_1.z
+            .object({
+            kind: zod_1.z.literal('github.pull_request.draft'),
+            headSha: zod_1.z.string().regex(/^[a-f0-9]{40}$/),
+        })
+            .strict(),
+    ]),
+})
+    .strict();
+exports.TaskStandingReconcileSchema = exports.TaskStandingActionSchema.extend({
+    originalOwnerEpoch: zod_1.z.number().int().positive(),
+}).strict();

package/node_modules/@kya-os/contracts/dist/workbench/managed-worker.d.ts

@@ -0,0 +1,199 @@
+import { z } from 'zod';
+/** Reviewed local offline component. It cannot represent network-enabled work
+ * or a Checkpoint grant; neither is implied by a successful container exit. */
+export declare const OfflineWorkerSpecSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    invocationId: z.ZodEffects<z.ZodString, string, string>;
+    taskId: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+    ownerEpoch: z.ZodNumber;
+    runnerId: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+    dockerExecutable: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+    dockerSocket: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+    imageId: z.ZodString;
+    inputDirectory: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+    command: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">, string[], string[]>;
+    uid: z.ZodNumber;
+    gid: z.ZodNumber;
+    cpuMillis: z.ZodNumber;
+    memoryMib: z.ZodNumber;
+    pids: z.ZodNumber;
+    maxRuntimeSeconds: z.ZodNumber;
+}, "strict", z.ZodTypeAny, {
+    taskId: string;
+    command: string[];
+    schemaVersion: 1;
+    ownerEpoch: number;
+    maxRuntimeSeconds: number;
+    runnerId: string;
+    invocationId: string;
+    dockerExecutable: string;
+    dockerSocket: string;
+    imageId: string;
+    inputDirectory: string;
+    uid: number;
+    gid: number;
+    cpuMillis: number;
+    memoryMib: number;
+    pids: number;
+}, {
+    taskId: string;
+    command: string[];
+    schemaVersion: 1;
+    ownerEpoch: number;
+    maxRuntimeSeconds: number;
+    runnerId: string;
+    invocationId: string;
+    dockerExecutable: string;
+    dockerSocket: string;
+    imageId: string;
+    inputDirectory: string;
+    uid: number;
+    gid: number;
+    cpuMillis: number;
+    memoryMib: number;
+    pids: number;
+}>;
+export declare const OfflineWorkerReviewSchema: z.ZodObject<{
+    spec: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        invocationId: z.ZodEffects<z.ZodString, string, string>;
+        taskId: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+        ownerEpoch: z.ZodNumber;
+        runnerId: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+        dockerExecutable: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+        dockerSocket: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+        imageId: z.ZodString;
+        inputDirectory: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+        command: z.ZodEffects<z.ZodArray<z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>, "many">, string[], string[]>;
+        uid: z.ZodNumber;
+        gid: z.ZodNumber;
+        cpuMillis: z.ZodNumber;
+        memoryMib: z.ZodNumber;
+        pids: z.ZodNumber;
+        maxRuntimeSeconds: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        taskId: string;
+        command: string[];
+        schemaVersion: 1;
+        ownerEpoch: number;
+        maxRuntimeSeconds: number;
+        runnerId: string;
+        invocationId: string;
+        dockerExecutable: string;
+        dockerSocket: string;
+        imageId: string;
+        inputDirectory: string;
+        uid: number;
+        gid: number;
+        cpuMillis: number;
+        memoryMib: number;
+        pids: number;
+    }, {
+        taskId: string;
+        command: string[];
+        schemaVersion: 1;
+        ownerEpoch: number;
+        maxRuntimeSeconds: number;
+        runnerId: string;
+        invocationId: string;
+        dockerExecutable: string;
+        dockerSocket: string;
+        imageId: string;
+        inputDirectory: string;
+        uid: number;
+        gid: number;
+        cpuMillis: number;
+        memoryMib: number;
+        pids: number;
+    }>;
+    executableDigest: z.ZodString;
+    inputDigest: z.ZodString;
+    inputFiles: z.ZodNumber;
+    inputBytes: z.ZodNumber;
+    authority: z.ZodLiteral<"explicit_local_worker_review">;
+    limitation: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    limitation: string;
+    inputDigest: string;
+    executableDigest: string;
+    spec: {
+        taskId: string;
+        command: string[];
+        schemaVersion: 1;
+        ownerEpoch: number;
+        maxRuntimeSeconds: number;
+        runnerId: string;
+        invocationId: string;
+        dockerExecutable: string;
+        dockerSocket: string;
+        imageId: string;
+        inputDirectory: string;
+        uid: number;
+        gid: number;
+        cpuMillis: number;
+        memoryMib: number;
+        pids: number;
+    };
+    inputFiles: number;
+    inputBytes: number;
+    authority: "explicit_local_worker_review";
+}, {
+    limitation: string;
+    inputDigest: string;
+    executableDigest: string;
+    spec: {
+        taskId: string;
+        command: string[];
+        schemaVersion: 1;
+        ownerEpoch: number;
+        maxRuntimeSeconds: number;
+        runnerId: string;
+        invocationId: string;
+        dockerExecutable: string;
+        dockerSocket: string;
+        imageId: string;
+        inputDirectory: string;
+        uid: number;
+        gid: number;
+        cpuMillis: number;
+        memoryMib: number;
+        pids: number;
+    };
+    inputFiles: number;
+    inputBytes: number;
+    authority: "explicit_local_worker_review";
+}>;
+export declare const OfflineWorkerStatusSchema: z.ZodObject<{
+    invocationId: z.ZodEffects<z.ZodString, string, string>;
+    taskId: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+    ownerEpoch: z.ZodNumber;
+    state: z.ZodEnum<["prepared", "creating", "created", "starting", "running", "unknown", "cancel_requested", "cancelled", "succeeded", "failed"]>;
+    containerId: z.ZodNullable<z.ZodString>;
+    outputDirectory: z.ZodEffects<z.ZodEffects<z.ZodString, string, string>, string, string>;
+    deadlineMs: z.ZodNullable<z.ZodNumber>;
+    exitCode: z.ZodNullable<z.ZodNumber>;
+    notice: z.ZodNullable<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    taskId: string;
+    state: "starting" | "running" | "unknown" | "failed" | "created" | "succeeded" | "cancelled" | "prepared" | "creating" | "cancel_requested";
+    ownerEpoch: number;
+    exitCode: number | null;
+    notice: string | null;
+    invocationId: string;
+    containerId: string | null;
+    outputDirectory: string;
+    deadlineMs: number | null;
+}, {
+    taskId: string;
+    state: "starting" | "running" | "unknown" | "failed" | "created" | "succeeded" | "cancelled" | "prepared" | "creating" | "cancel_requested";
+    ownerEpoch: number;
+    exitCode: number | null;
+    notice: string | null;
+    invocationId: string;
+    containerId: string | null;
+    outputDirectory: string;
+    deadlineMs: number | null;
+}>;
+export type OfflineWorkerSpec = z.infer<typeof OfflineWorkerSpecSchema>;
+export type OfflineWorkerReview = z.infer<typeof OfflineWorkerReviewSchema>;
+export type OfflineWorkerStatus = z.infer<typeof OfflineWorkerStatusSchema>;