@lumenflow/kernel 3.0.0

package/dist/tool-host/tool-host.js

@@ -0,0 +1,395 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: Apache-2.0
+import { randomUUID } from 'node:crypto';
+import { intersectToolScopes } from './scope-intersection.js';
+import { TOOL_TRACE_KINDS } from '../event-kinds.js';
+import { ExecutionContextSchema, ToolOutputSchema, ToolScopeSchema, TOOL_ERROR_CODES, TOOL_HANDLER_KINDS, } from '../kernel.schemas.js';
+import { DEFAULT_KERNEL_RUNTIME_VERSION, DEFAULT_WORKSPACE_CONFIG_HASH, EXECUTION_METADATA_KEYS, KERNEL_POLICY_IDS, RESERVED_FRAMEWORK_SCOPE_GLOB, RESERVED_FRAMEWORK_SCOPE_PREFIX, RESERVED_FRAMEWORK_SCOPE_ROOT, SHA256_HEX_REGEX, } from '../shared-constants.js';
+import { EvidenceStore } from '../evidence/evidence-store.js';
+import { ToolRegistry } from './tool-registry.js';
+import { DefaultSubprocessDispatcher } from './subprocess-dispatcher.js';
+function resolveMetadata(context) {
+    if (!context.metadata || typeof context.metadata !== 'object') {
+        return {};
+    }
+    return context.metadata;
+}
+function parseScopeList(candidate, fallback) {
+    const parsed = ToolScopeSchema.array().safeParse(candidate);
+    if (parsed.success) {
+        return parsed.data;
+    }
+    return fallback;
+}
+function parseOptionalString(candidate) {
+    return typeof candidate === 'string' && candidate.trim().length > 0 ? candidate : undefined;
+}
+function normalizeScopePattern(pattern) {
+    return pattern.replaceAll('\\', '/').replace(/^\.\//, '');
+}
+function isReservedFrameworkWriteScope(scope) {
+    if (scope.type !== 'path' || scope.access !== 'write') {
+        return false;
+    }
+    const normalized = normalizeScopePattern(scope.pattern);
+    return (normalized === RESERVED_FRAMEWORK_SCOPE_ROOT ||
+        normalized.startsWith(RESERVED_FRAMEWORK_SCOPE_PREFIX));
+}
+function collectReservedFrameworkWriteScopes(scopes) {
+    const blocked = scopes
+        .filter((scope) => isReservedFrameworkWriteScope(scope))
+        .map((scope) => normalizeScopePattern(scope.pattern));
+    return [...new Set(blocked)];
+}
+export async function allowAllPolicyHook() {
+    return [
+        {
+            policy_id: KERNEL_POLICY_IDS.ALLOW_ALL,
+            decision: 'allow',
+            reason: 'Phase 2 default allow-all policy',
+        },
+    ];
+}
+export class ToolHost {
+    registry;
+    evidenceStore;
+    subprocessDispatcher;
+    policyHook;
+    runtimeVersion;
+    now;
+    onTraceError;
+    constructor(options) {
+        if (!options.policyHook) {
+            throw new Error('ToolHost requires an explicit policyHook. ' +
+                'Use allowAllPolicyHook for development or provide a production policy.');
+        }
+        this.registry = options.registry;
+        this.evidenceStore = options.evidenceStore;
+        this.subprocessDispatcher = options.subprocessDispatcher ?? new DefaultSubprocessDispatcher();
+        this.policyHook = options.policyHook;
+        this.runtimeVersion = options.runtimeVersion ?? DEFAULT_KERNEL_RUNTIME_VERSION;
+        this.now = options.now ?? (() => new Date());
+        this.onTraceError = options.onTraceError;
+    }
+    async onStartup() {
+        return this.evidenceStore.reconcileOrphanedStarts();
+    }
+    async onShutdown() {
+        return this.evidenceStore.reconcileOrphanedStarts();
+    }
+    async execute(name, input, ctx) {
+        const context = ExecutionContextSchema.parse(ctx);
+        const capability = this.registry.lookup(name);
+        if (!capability) {
+            return {
+                success: false,
+                error: {
+                    code: TOOL_ERROR_CODES.TOOL_NOT_FOUND,
+                    message: `Tool "${name}" is not registered`,
+                },
+            };
+        }
+        const metadata = resolveMetadata(context);
+        const { scopeRequested, scopeAllowed, scopeEnforced, reservedFrameworkWriteScopes } = this.resolveScope(capability, context, metadata);
+        const { dataHash: inputHash, dataRef: inputRef } = await this.evidenceStore.persistData(input);
+        const receiptId = randomUUID();
+        const startedAt = this.now().getTime();
+        const timestamp = new Date(startedAt).toISOString();
+        const workspaceConfigHashCandidate = parseOptionalString(metadata[EXECUTION_METADATA_KEYS.WORKSPACE_CONFIG_HASH]);
+        const workspaceConfigHash = workspaceConfigHashCandidate && SHA256_HEX_REGEX.test(workspaceConfigHashCandidate)
+            ? workspaceConfigHashCandidate
+            : DEFAULT_WORKSPACE_CONFIG_HASH;
+        const runtimeVersion = parseOptionalString(metadata[EXECUTION_METADATA_KEYS.RUNTIME_VERSION]) ?? this.runtimeVersion;
+        const packVersion = parseOptionalString(metadata[EXECUTION_METADATA_KEYS.PACK_VERSION]);
+        const packIntegrity = parseOptionalString(metadata[EXECUTION_METADATA_KEYS.PACK_INTEGRITY]);
+        const packId = capability.pack ?? parseOptionalString(metadata[EXECUTION_METADATA_KEYS.PACK_ID]);
+        try {
+            await this.evidenceStore.appendTrace({
+                schema_version: 1,
+                kind: TOOL_TRACE_KINDS.TOOL_CALL_STARTED,
+                receipt_id: receiptId,
+                run_id: context.run_id,
+                task_id: context.task_id,
+                session_id: context.session_id,
+                timestamp,
+                tool_name: capability.name,
+                execution_mode: capability.handler.kind,
+                scope_requested: scopeRequested,
+                scope_allowed: scopeAllowed,
+                scope_enforced: scopeEnforced,
+                input_hash: inputHash,
+                input_ref: inputRef,
+                tool_version: capability.version,
+                pack_id: packId,
+                pack_version: packVersion,
+                pack_integrity: packIntegrity,
+                workspace_config_hash: workspaceConfigHash,
+                runtime_version: runtimeVersion,
+            });
+        }
+        catch (error) {
+            // Started trace failure must not prevent tool execution.
+            this.onTraceError?.(error);
+        }
+        const authResult = await this.authorize({
+            receiptId,
+            startedAt,
+            capability,
+            input,
+            context,
+            scopeRequested,
+            scopeAllowed,
+            scopeEnforced,
+            reservedFrameworkWriteScopes,
+        });
+        if (authResult.denied) {
+            return authResult.output;
+        }
+        const parsedInput = capability.input_schema.safeParse(input);
+        if (!parsedInput.success) {
+            const invalidInputOutput = {
+                success: false,
+                error: {
+                    code: TOOL_ERROR_CODES.INVALID_INPUT,
+                    message: parsedInput.error.message,
+                },
+            };
+            try {
+                await this.recordDeniedTrace({
+                    receiptId,
+                    startedAt,
+                    result: 'failure',
+                    scopeEnforcementNote: 'Input validation failed before dispatch.',
+                    policyDecisions: authResult.policyDecisions,
+                });
+            }
+            catch (error) {
+                // Denied trace failure must not suppress the denial output.
+                this.onTraceError?.(error);
+            }
+            return invalidInputOutput;
+        }
+        let output = await this.dispatch(capability, parsedInput.data, context, scopeEnforced);
+        output = this.normalizeOutput(output, capability);
+        try {
+            await this.recordTrace({
+                receiptId,
+                startedAt,
+                output,
+                policyDecisions: authResult.policyDecisions,
+            });
+        }
+        catch (error) {
+            // Trace recording failure must not swallow the tool execution result.
+            // The tool output is more important to the caller than the audit trail.
+            this.onTraceError?.(error);
+        }
+        return output;
+    }
+    resolveScope(capability, context, metadata) {
+        const workspaceAllowed = parseScopeList(metadata[EXECUTION_METADATA_KEYS.WORKSPACE_ALLOWED_SCOPES], context.allowed_scopes);
+        const laneAllowed = parseScopeList(metadata[EXECUTION_METADATA_KEYS.LANE_ALLOWED_SCOPES], context.allowed_scopes);
+        const taskDeclared = parseScopeList(metadata[EXECUTION_METADATA_KEYS.TASK_DECLARED_SCOPES], context.allowed_scopes);
+        const scopeRequested = capability.required_scopes;
+        const reservedFrameworkWriteScopes = collectReservedFrameworkWriteScopes(scopeRequested);
+        const scopeAllowed = intersectToolScopes({
+            workspaceAllowed,
+            laneAllowed,
+            taskDeclared,
+            toolRequired: scopeRequested,
+        });
+        const scopeEnforced = scopeAllowed;
+        return { scopeRequested, scopeAllowed, scopeEnforced, reservedFrameworkWriteScopes };
+    }
+    async authorize(params) {
+        const { receiptId, startedAt, capability, input, context, scopeRequested, scopeAllowed, scopeEnforced, reservedFrameworkWriteScopes, } = params;
+        if (reservedFrameworkWriteScopes.length > 0) {
+            const output = {
+                success: false,
+                error: {
+                    code: TOOL_ERROR_CODES.SCOPE_DENIED,
+                    message: `Reserved scope violation: pack/tool write scopes under ${RESERVED_FRAMEWORK_SCOPE_GLOB} are not allowed.`,
+                    details: {
+                        reserved_scopes: reservedFrameworkWriteScopes,
+                    },
+                },
+            };
+            try {
+                await this.recordDeniedTrace({
+                    receiptId,
+                    startedAt,
+                    result: 'denied',
+                    scopeEnforcementNote: `Denied by reserved framework boundary: ${RESERVED_FRAMEWORK_SCOPE_GLOB} is framework-owned.`,
+                    policyDecisions: [
+                        {
+                            policy_id: KERNEL_POLICY_IDS.SCOPE_RESERVED_PATH,
+                            decision: 'deny',
+                            reason: `Pack/tool declared write scope targets reserved ${RESERVED_FRAMEWORK_SCOPE_GLOB} namespace`,
+                        },
+                    ],
+                });
+            }
+            catch (error) {
+                // Denied trace failure must not suppress the denial output.
+                this.onTraceError?.(error);
+            }
+            return { denied: true, output };
+        }
+        if (scopeEnforced.length === 0) {
+            const output = {
+                success: false,
+                error: {
+                    code: TOOL_ERROR_CODES.SCOPE_DENIED,
+                    message: 'Scope intersection denied: no allowed scopes remain after intersection.',
+                    details: {
+                        scope_requested: scopeRequested,
+                        scope_allowed: scopeAllowed,
+                    },
+                },
+            };
+            try {
+                await this.recordDeniedTrace({
+                    receiptId,
+                    startedAt,
+                    result: 'denied',
+                    scopeEnforcementNote: 'Denied by hard boundary: empty scope intersection.',
+                    policyDecisions: [
+                        {
+                            policy_id: KERNEL_POLICY_IDS.SCOPE_BOUNDARY,
+                            decision: 'deny',
+                            reason: 'No intersecting scopes after scope resolution',
+                        },
+                    ],
+                });
+            }
+            catch (error) {
+                // Denied trace failure must not suppress the denial output.
+                this.onTraceError?.(error);
+            }
+            return { denied: true, output };
+        }
+        const policyDecisions = await this.policyHook({
+            capability,
+            input,
+            context,
+            scopeEnforced,
+        });
+        if (policyDecisions.some((decision) => decision.decision === 'deny')) {
+            const output = {
+                success: false,
+                error: {
+                    code: TOOL_ERROR_CODES.POLICY_DENIED,
+                    message: 'Policy hook denied tool execution.',
+                },
+            };
+            try {
+                await this.recordDeniedTrace({
+                    receiptId,
+                    startedAt,
+                    result: 'denied',
+                    scopeEnforcementNote: 'Denied by policy hook decision.',
+                    policyDecisions,
+                });
+            }
+            catch (error) {
+                // Denied trace failure must not suppress the denial output.
+                this.onTraceError?.(error);
+            }
+            return { denied: true, output };
+        }
+        return { denied: false, policyDecisions };
+    }
+    async dispatch(capability, input, context, scopeEnforced) {
+        try {
+            if (capability.handler.kind === TOOL_HANDLER_KINDS.IN_PROCESS) {
+                return await capability.handler.fn(input, context);
+            }
+            return await this.subprocessDispatcher.dispatch({
+                capability,
+                input,
+                context,
+                scopeEnforced,
+            });
+        }
+        catch (error) {
+            return {
+                success: false,
+                error: {
+                    code: TOOL_ERROR_CODES.TOOL_EXECUTION_FAILED,
+                    message: error.message,
+                },
+            };
+        }
+    }
+    normalizeOutput(output, capability) {
+        const normalizedOutputResult = ToolOutputSchema.safeParse(output);
+        if (!normalizedOutputResult.success) {
+            return {
+                success: false,
+                error: {
+                    code: TOOL_ERROR_CODES.INVALID_OUTPUT,
+                    message: normalizedOutputResult.error.message,
+                },
+            };
+        }
+        let normalized = normalizedOutputResult.data;
+        if (capability.output_schema && normalized.success) {
+            const parsedData = capability.output_schema.safeParse(normalized.data);
+            if (!parsedData.success) {
+                normalized = {
+                    success: false,
+                    error: {
+                        code: TOOL_ERROR_CODES.INVALID_OUTPUT,
+                        message: parsedData.error.message,
+                    },
+                };
+            }
+        }
+        return normalized;
+    }
+    async recordDeniedTrace(params) {
+        const finishedAt = this.now();
+        await this.evidenceStore.appendTrace({
+            schema_version: 1,
+            kind: TOOL_TRACE_KINDS.TOOL_CALL_FINISHED,
+            receipt_id: params.receiptId,
+            timestamp: finishedAt.toISOString(),
+            result: params.result,
+            duration_ms: finishedAt.getTime() - params.startedAt,
+            scope_enforcement_note: params.scopeEnforcementNote,
+            policy_decisions: params.policyDecisions,
+            artifacts_written: [],
+        });
+    }
+    async recordTrace(params) {
+        const { receiptId, startedAt, output, policyDecisions } = params;
+        const outputRef = output.data === undefined ? undefined : await this.evidenceStore.persistData(output.data);
+        const outputHash = outputRef?.dataHash;
+        const outputReference = outputRef?.dataRef;
+        const result = output.success
+            ? 'success'
+            : output.error?.code === TOOL_ERROR_CODES.SCOPE_DENIED
+                ? 'denied'
+                : 'failure';
+        const finishedAt = this.now();
+        await this.evidenceStore.appendTrace({
+            schema_version: 1,
+            kind: TOOL_TRACE_KINDS.TOOL_CALL_FINISHED,
+            receipt_id: receiptId,
+            timestamp: finishedAt.toISOString(),
+            result,
+            duration_ms: finishedAt.getTime() - startedAt,
+            output_hash: outputHash,
+            output_ref: outputReference,
+            scope_enforcement_note: result === 'success'
+                ? 'Allowed by scope intersection and policy.'
+                : 'Denied or failed during execution.',
+            policy_decisions: policyDecisions,
+            artifacts_written: Array.isArray(output.metadata?.artifacts_written) &&
+                output.metadata?.artifacts_written.every((artifact) => typeof artifact === 'string')
+                ? output.metadata.artifacts_written
+                : [],
+        });
+    }
+}
+//# sourceMappingURL=tool-host.js.map

package/dist/tool-host/tool-host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-host.js","sourceRoot":"","sources":["../../src/tool-host/tool-host.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,sCAAsC;AAEtC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,GAMnB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,8BAA8B,EAC9B,6BAA6B,EAC7B,uBAAuB,EACvB,iBAAiB,EACjB,6BAA6B,EAC7B,+BAA+B,EAC/B,6BAA6B,EAC7B,gBAAgB,GACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,2BAA2B,EAA6B,MAAM,4BAA4B,CAAC;AAiCpG,SAAS,eAAe,CAAC,OAAyB;IAChD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC9D,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED,SAAS,cAAc,CAAC,SAAkB,EAAE,QAAqB;IAC/D,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC5D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAkB;IAC7C,OAAO,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9F,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe;IAC5C,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,6BAA6B,CACpC,KAAgB;IAEhB,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACtD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,UAAU,GAAG,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACxD,OAAO,CACL,UAAU,KAAK,6BAA6B;QAC5C,UAAU,CAAC,UAAU,CAAC,+BAA+B,CAAC,CACvD,CAAC;AACJ,CAAC;AAED,SAAS,mCAAmC,CAAC,MAAmB;IAC9D,MAAM,OAAO,GAAG,MAAM;SACnB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC;SACvD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,OAAO;QACL;YACE,SAAS,EAAE,iBAAiB,CAAC,SAAS;YACtC,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,kCAAkC;SAC3C;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,QAAQ;IACF,QAAQ,CAAe;IACvB,aAAa,CAAgB;IAC7B,oBAAoB,CAAuB;IAC3C,UAAU,CAAa;IACvB,cAAc,CAAS;IACvB,GAAG,CAAa;IAChB,YAAY,CAA0B;IAEvD,YAAY,OAAwB;QAClC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CACb,4CAA4C;gBAC1C,wEAAwE,CAC3E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QACjC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;QAC3C,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,oBAAoB,IAAI,IAAI,2BAA2B,EAAE,CAAC;QAC9F,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,8BAA8B,CAAC;QAC/E,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,IAAI,CAAC,aAAa,CAAC,uBAAuB,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,aAAa,CAAC,uBAAuB,EAAE,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAY,EAAE,KAAc,EAAE,GAAqB;QAC/D,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAElD,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB,CAAC,cAAc;oBACrC,OAAO,EAAE,SAAS,IAAI,qBAAqB;iBAC5C;aACF,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,4BAA4B,EAAE,GACjF,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;QAEnD,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAC/F,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;QAEpD,MAAM,4BAA4B,GAAG,mBAAmB,CACtD,QAAQ,CAAC,uBAAuB,CAAC,qBAAqB,CAAC,CACxD,CAAC;QACF,MAAM,mBAAmB,GACvB,4BAA4B,IAAI,gBAAgB,CAAC,IAAI,CAAC,4BAA4B,CAAC;YACjF,CAAC,CAAC,4BAA4B;YAC9B,CAAC,CAAC,6BAA6B,CAAC;QAEpC,MAAM,cAAc,GAClB,mBAAmB,CAAC,QAAQ,CAAC,uBAAuB,CAAC,eAAe,CAAC,CAAC,IAAI,IAAI,CAAC,cAAc,CAAC;QAChG,MAAM,WAAW,GAAG,mBAAmB,CAAC,QAAQ,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC,CAAC;QACxF,MAAM,aAAa,GAAG,mBAAmB,CAAC,QAAQ,CAAC,uBAAuB,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5F,MAAM,MAAM,GACV,UAAU,CAAC,IAAI,IAAI,mBAAmB,CAAC,QAAQ,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;QAEpF,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;gBACnC,cAAc,EAAE,CAAC;gBACjB,IAAI,EAAE,gBAAgB,CAAC,iBAAiB;gBACxC,UAAU,EAAE,SAAS;gBACrB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS;gBACT,SAAS,EAAE,UAAU,CAAC,IAAI;gBAC1B,cAAc,EAAE,UAAU,CAAC,OAAO,CAAC,IAAI;gBACvC,eAAe,EAAE,cAAc;gBAC/B,aAAa,EAAE,YAAY;gBAC3B,cAAc,EAAE,aAAa;gBAC7B,UAAU,EAAE,SAAS;gBACrB,SAAS,EAAE,QAAQ;gBACnB,YAAY,EAAE,UAAU,CAAC,OAAO;gBAChC,OAAO,EAAE,MAAM;gBACf,YAAY,EAAE,WAAW;gBACzB,cAAc,EAAE,aAAa;gBAC7B,qBAAqB,EAAE,mBAAmB;gBAC1C,eAAe,EAAE,cAAc;aAChC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,yDAAyD;YACzD,IAAI,CAAC,YAAY,EAAE,CAAC,KAAc,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC;YACtC,SAAS;YACT,SAAS;YACT,UAAU;YACV,KAAK;YACL,OAAO;YACP,cAAc;YACd,YAAY;YACZ,aAAa;YACb,4BAA4B;SAC7B,CAAC,CAAC;QACH,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YACtB,OAAO,UAAU,CAAC,MAAM,CAAC;QAC3B,CAAC;QAED,MAAM,WAAW,GAAG,UAAU,CAAC,YAAY,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,MAAM,kBAAkB,GAAe;gBACrC,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB,CAAC,aAAa;oBACpC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,OAAO;iBACnC;aACF,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,iBAAiB,CAAC;oBAC3B,SAAS;oBACT,SAAS;oBACT,MAAM,EAAE,SAAS;oBACjB,oBAAoB,EAAE,0CAA0C;oBAChE,eAAe,EAAE,UAAU,CAAC,eAAe;iBAC5C,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4DAA4D;gBAC5D,IAAI,CAAC,YAAY,EAAE,CAAC,KAAc,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,kBAAkB,CAAC;QAC5B,CAAC;QAED,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC;QACvF,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAElD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC;gBACrB,SAAS;gBACT,SAAS;gBACT,MAAM;gBACN,eAAe,EAAE,UAAU,CAAC,eAAe;aAC5C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,sEAAsE;YACtE,wEAAwE;YACxE,IAAI,CAAC,YAAY,EAAE,CAAC,KAAc,CAAC,CAAC;QACtC,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAClB,UAA0B,EAC1B,OAAyB,EACzB,QAAiC;QAEjC,MAAM,gBAAgB,GAAG,cAAc,CACrC,QAAQ,CAAC,uBAAuB,CAAC,wBAAwB,CAAC,EAC1D,OAAO,CAAC,cAAc,CACvB,CAAC;QACF,MAAM,WAAW,GAAG,cAAc,CAChC,QAAQ,CAAC,uBAAuB,CAAC,mBAAmB,CAAC,EACrD,OAAO,CAAC,cAAc,CACvB,CAAC;QACF,MAAM,YAAY,GAAG,cAAc,CACjC,QAAQ,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,EACtD,OAAO,CAAC,cAAc,CACvB,CAAC;QAEF,MAAM,cAAc,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,MAAM,4BAA4B,GAAG,mCAAmC,CAAC,cAAc,CAAC,CAAC;QACzF,MAAM,YAAY,GAAG,mBAAmB,CAAC;YACvC,gBAAgB;YAChB,WAAW;YACX,YAAY;YACZ,YAAY,EAAE,cAAc;SAC7B,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,YAAY,CAAC;QAEnC,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,4BAA4B,EAAE,CAAC;IACvF,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,MAUvB;QACC,MAAM,EACJ,SAAS,EACT,SAAS,EACT,UAAU,EACV,KAAK,EACL,OAAO,EACP,cAAc,EACd,YAAY,EACZ,aAAa,EACb,4BAA4B,GAC7B,GAAG,MAAM,CAAC;QAEX,IAAI,4BAA4B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB,CAAC,YAAY;oBACnC,OAAO,EAAE,0DAA0D,6BAA6B,mBAAmB;oBACnH,OAAO,EAAE;wBACP,eAAe,EAAE,4BAA4B;qBAC9C;iBACF;aACF,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,iBAAiB,CAAC;oBAC3B,SAAS;oBACT,SAAS;oBACT,MAAM,EAAE,QAAQ;oBAChB,oBAAoB,EAAE,0CAA0C,6BAA6B,sBAAsB;oBACnH,eAAe,EAAE;wBACf;4BACE,SAAS,EAAE,iBAAiB,CAAC,mBAAmB;4BAChD,QAAQ,EAAE,MAAM;4BAChB,MAAM,EAAE,mDAAmD,6BAA6B,YAAY;yBACrG;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4DAA4D;gBAC5D,IAAI,CAAC,YAAY,EAAE,CAAC,KAAc,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC;QAED,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB,CAAC,YAAY;oBACnC,OAAO,EAAE,yEAAyE;oBAClF,OAAO,EAAE;wBACP,eAAe,EAAE,cAAc;wBAC/B,aAAa,EAAE,YAAY;qBAC5B;iBACF;aACF,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,iBAAiB,CAAC;oBAC3B,SAAS;oBACT,SAAS;oBACT,MAAM,EAAE,QAAQ;oBAChB,oBAAoB,EAAE,oDAAoD;oBAC1E,eAAe,EAAE;wBACf;4BACE,SAAS,EAAE,iBAAiB,CAAC,cAAc;4BAC3C,QAAQ,EAAE,MAAM;4BAChB,MAAM,EAAE,+CAA+C;yBACxD;qBACF;iBACF,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4DAA4D;gBAC5D,IAAI,CAAC,YAAY,EAAE,CAAC,KAAc,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YAC5C,UAAU;YACV,KAAK;YACL,OAAO;YACP,aAAa;SACd,CAAC,CAAC;QAEH,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,EAAE,CAAC;YACrE,MAAM,MAAM,GAAe;gBACzB,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB,CAAC,aAAa;oBACpC,OAAO,EAAE,oCAAoC;iBAC9C;aACF,CAAC;YACF,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,iBAAiB,CAAC;oBAC3B,SAAS;oBACT,SAAS;oBACT,MAAM,EAAE,QAAQ;oBAChB,oBAAoB,EAAE,iCAAiC;oBACvD,eAAe;iBAChB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,4DAA4D;gBAC5D,IAAI,CAAC,YAAY,EAAE,CAAC,KAAc,CAAC,CAAC;YACtC,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;IAC5C,CAAC;IAEO,KAAK,CAAC,QAAQ,CACpB,UAA0B,EAC1B,KAAc,EACd,OAAyB,EACzB,aAA0B;QAE1B,IAAI,CAAC;YACH,IAAI,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,kBAAkB,CAAC,UAAU,EAAE,CAAC;gBAC9D,OAAO,MAAM,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC;gBAC9C,UAAU;gBACV,KAAK;gBACL,OAAO;gBACP,aAAa;aACd,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB,CAAC,qBAAqB;oBAC5C,OAAO,EAAG,KAAe,CAAC,OAAO;iBAClC;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,MAAkB,EAAE,UAA0B;QACpE,MAAM,sBAAsB,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,CAAC;YACpC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE;oBACL,IAAI,EAAE,gBAAgB,CAAC,cAAc;oBACrC,OAAO,EAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO;iBAC9C;aACF,CAAC;QACJ,CAAC;QAED,IAAI,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC;QAE7C,IAAI,UAAU,CAAC,aAAa,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;YACnD,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACvE,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;gBACxB,UAAU,GAAG;oBACX,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE;wBACL,IAAI,EAAE,gBAAgB,CAAC,cAAc;wBACrC,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO;qBAClC;iBACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,MAM/B;QACC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;YACnC,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,gBAAgB,CAAC,kBAAkB;YACzC,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,SAAS,EAAE,UAAU,CAAC,WAAW,EAAE;YACnC,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,WAAW,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS;YACpD,sBAAsB,EAAE,MAAM,CAAC,oBAAoB;YACnD,gBAAgB,EAAE,MAAM,CAAC,eAAe;YACxC,iBAAiB,EAAE,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,MAKzB;QACC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC;QAEjE,MAAM,SAAS,GACb,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC5F,MAAM,UAAU,GAAG,SAAS,EAAE,QAAQ,CAAC;QACvC,MAAM,eAAe,GAAG,SAAS,EAAE,OAAO,CAAC;QAC3C,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO;YAC3B,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,KAAK,gBAAgB,CAAC,YAAY;gBACpD,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,SAAS,CAAC;QAEhB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC;YACnC,cAAc,EAAE,CAAC;YACjB,IAAI,EAAE,gBAAgB,CAAC,kBAAkB;YACzC,UAAU,EAAE,SAAS;YACrB,SAAS,EAAE,UAAU,CAAC,WAAW,EAAE;YACnC,MAAM;YACN,WAAW,EAAE,UAAU,CAAC,OAAO,EAAE,GAAG,SAAS;YAC7C,WAAW,EAAE,UAAU;YACvB,UAAU,EAAE,eAAe;YAC3B,sBAAsB,EACpB,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,2CAA2C;gBAC7C,CAAC,CAAC,oCAAoC;YAC1C,gBAAgB,EAAE,eAAe;YACjC,iBAAiB,EACf,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC;gBACjD,MAAM,CAAC,QAAQ,EAAE,iBAAiB,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC;gBAClF,CAAC,CAAE,MAAM,CAAC,QAAQ,CAAC,iBAA8B;gBACjD,CAAC,CAAC,EAAE;SACT,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/tool-host/tool-registry.d.ts

@@ -0,0 +1,9 @@
+import { type ToolCapability } from '../kernel.schemas.js';
+export declare class ToolRegistry {
+    private readonly capabilities;
+    register(capability: unknown): ToolCapability;
+    lookup(name: string): ToolCapability | null;
+    list(): ToolCapability[];
+    validate(capability: unknown): ToolCapability;
+}
+//# sourceMappingURL=tool-registry.d.ts.map

package/dist/tool-host/tool-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.d.ts","sourceRoot":"","sources":["../../src/tool-host/tool-registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAEjF,qBAAa,YAAY;IACvB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAqC;IAElE,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,cAAc;IAS7C,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI;IAI3C,IAAI,IAAI,cAAc,EAAE;IAIxB,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,cAAc;CAO9C"}

package/dist/tool-host/tool-registry.js

@@ -0,0 +1,28 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: Apache-2.0
+import { ToolCapabilitySchema } from '../kernel.schemas.js';
+export class ToolRegistry {
+    capabilities = new Map();
+    register(capability) {
+        const validated = this.validate(capability);
+        if (this.capabilities.has(validated.name)) {
+            throw new Error(`Tool "${validated.name}" is already registered`);
+        }
+        this.capabilities.set(validated.name, validated);
+        return validated;
+    }
+    lookup(name) {
+        return this.capabilities.get(name) ?? null;
+    }
+    list() {
+        return [...this.capabilities.values()];
+    }
+    validate(capability) {
+        const parsed = ToolCapabilitySchema.safeParse(capability);
+        if (!parsed.success) {
+            throw new Error(`ToolCapability validation failed: ${parsed.error.message}`);
+        }
+        return parsed.data;
+    }
+}
+//# sourceMappingURL=tool-registry.js.map

package/dist/tool-host/tool-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-registry.js","sourceRoot":"","sources":["../../src/tool-host/tool-registry.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,sCAAsC;AAEtC,OAAO,EAAE,oBAAoB,EAAuB,MAAM,sBAAsB,CAAC;AAEjF,MAAM,OAAO,YAAY;IACN,YAAY,GAAG,IAAI,GAAG,EAA0B,CAAC;IAElE,QAAQ,CAAC,UAAmB;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CAAC,SAAS,SAAS,CAAC,IAAI,yBAAyB,CAAC,CAAC;QACpE,CAAC;QACD,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACjD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED,IAAI;QACF,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,CAAC;IAED,QAAQ,CAAC,UAAmB;QAC1B,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;CACF"}

package/package.json

@@ -0,0 +1,71 @@
+{
+  "name": "@lumenflow/kernel",
+  "version": "3.0.0",
+  "description": "Domain-agnostic runtime primitives and contracts for LumenFlow",
+  "keywords": [
+    "lumenflow",
+    "kernel",
+    "runtime",
+    "schemas"
+  ],
+  "homepage": "https://github.com/hellmai/lumenflow",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/hellmai/lumenflow.git",
+    "directory": "packages/@lumenflow/kernel"
+  },
+  "license": "Apache-2.0",
+  "author": {
+    "name": "HellmAI",
+    "url": "https://hellm.ai"
+  },
+  "type": "module",
+  "exports": {
+    ".": "./dist/index.js",
+    "./event-kinds": "./dist/event-kinds.js",
+    "./schemas": "./dist/kernel.schemas.js",
+    "./canonical-json": "./dist/canonical-json.js",
+    "./event-store": "./dist/event-store/index.js",
+    "./evidence": "./dist/evidence/index.js",
+    "./pack": "./dist/pack/index.js",
+    "./policy": "./dist/policy/index.js",
+    "./runtime": "./dist/runtime/index.js",
+    "./sandbox": "./dist/sandbox/index.js",
+    "./shared-constants": "./dist/shared-constants.js",
+    "./state-machine": "./dist/state-machine/index.js",
+    "./tool-host": "./dist/tool-host/index.js"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist",
+    "LICENSE.md",
+    "README.md"
+  ],
+  "dependencies": {
+    "micromatch": "^4.0.8",
+    "yaml": "^2.8.2",
+    "zod": "^4.3.6"
+  },
+  "devDependencies": {
+    "@vitest/coverage-v8": "^4.0.18",
+    "fast-check": "^4.5.3",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18"
+  },
+  "engines": {
+    "node": ">=22"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "build:dist": "tsc -p tsconfig.build.json",
+    "pack:dist": "pnpm pack",
+    "clean": "rm -rf dist *.tgz",
+    "test": "vitest run",
+    "lint": "eslint src --quiet --rule no-console:off --rule @typescript-eslint/no-unused-vars:off --rule sonarjs/concise-regex:off",
+    "typecheck": "tsc --noEmit"
+  }
+}