@makaio/framework 1.0.0-dev-1783705652236 → 1.0.0-dev-1783940945655

package/dist/{index-ntS1EXlf.d.mts → index-BtL7ONuM.d.mts}

@@ -1,4 +1,4 @@
-import { r as ExtensionDiscovery } from "./extension-discovery-CIZn5bkq.mjs";
+import { r as ExtensionDiscovery } from "./extension-discovery-APMf1Tes.mjs";
 import { RegistrableBusNamespaceDefinition } from "@makaio/framework/core";
 import { BusTransport, IMakaioBus, SubjectTelemetryProjectorRegistry } from "@makaio/framework/bus";
 import { ExtensionConfigProvider, IWorkerNodeProvider, IWorkflowRunner, IWorkflowRunner as IWorkflowRunner$1, LoopGateHandler, NormalizedWorkerNodeCapabilities, StationHandler, StepRunnerBusAuth, StepRunnerPlatformDefaults, TrayManifest, WorkerContributionManifest, WorkerNodeCapabilities, WorkerNodeDispatch, WorkerNodeHandle, WorkerNodeProvisionRequest, WorkerNodeRequirements, WorkflowDefinition, WorkflowRunResult, WorkflowRunResult as WorkflowRunResult$1, WorkflowRunnerRunOptions, WorkflowWorkerConfig, WorkflowWorkerSource, WorkflowZodSchemas } from "@makaio/framework/contracts";

package/dist/index-BxuiHVFi.d.mts

@@ -0,0 +1,284 @@
+import { t as AdapterAuthBinding } from "./adapter-binding-DDUyv1JK.mjs";
+import { z } from "zod";
+
+//#region core/contracts/src/auth/definitions.d.ts
+/**
+ * Portable identifier used as an own-property key in authentication field maps.
+ *
+ * Prototype-mutating property names are rejected even when a specific consumer
+ * currently constructs null-prototype records. Keeping the restriction in the
+ * contract prevents a later plain-object consumer from changing field meaning.
+ */
+declare const AuthFieldIdSchema: z.ZodString;
+/**
+ * Environment variable name accepted by authentication declarations.
+ *
+ * The contract intentionally models portable process-environment identifiers,
+ * not shell expressions or assignments.
+ */
+declare const AuthEnvironmentVariableNameSchema: z.ZodString;
+/** Environment-variable source hint for an explicit credential field. */
+declare const AuthCredentialSourceHintSchema: z.ZodObject<{
+  kind: z.ZodLiteral<"environment">;
+  variable: z.ZodString;
+}, z.core.$strict>;
+/** Static declaration of one credential field required by an auth method. */
+declare const AuthCredentialFieldDefinitionSchema: z.ZodObject<{
+  id: z.ZodString;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  required: z.ZodBoolean;
+  secret: z.ZodBoolean;
+  sourceHints: z.ZodArray<z.ZodObject<{
+    kind: z.ZodLiteral<"environment">;
+    variable: z.ZodString;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Authentication method whose credential values must be resolved explicitly. */
+declare const ExplicitAuthMethodDefinitionSchema: z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"explicit">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  fields: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    required: z.ZodBoolean;
+    secret: z.ZodBoolean;
+    sourceHints: z.ZodArray<z.ZodObject<{
+      kind: z.ZodLiteral<"environment">;
+      variable: z.ZodString;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>;
+/** Authentication method backed by a native client's persisted auth state. */
+declare const InferredAuthMethodDefinitionSchema: z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"inferred">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** Explicit declaration that a provider/client path requires no authentication. */
+declare const NoAuthMethodDefinitionSchema: z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"none">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+/** Provider-owned auth methods are explicit or deliberately unauthenticated. */
+declare const ProviderAuthMethodDefinitionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"explicit">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  fields: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    required: z.ZodBoolean;
+    secret: z.ZodBoolean;
+    sourceHints: z.ZodArray<z.ZodObject<{
+      kind: z.ZodLiteral<"environment">;
+      variable: z.ZodString;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"none">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>], "mode">;
+/** Client-owned auth methods may additionally use native inferred auth. */
+declare const ClientAuthMethodDefinitionSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"explicit">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  fields: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    required: z.ZodBoolean;
+    secret: z.ZodBoolean;
+    sourceHints: z.ZodArray<z.ZodObject<{
+      kind: z.ZodLiteral<"environment">;
+      variable: z.ZodString;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"inferred">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"none">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>], "mode">;
+/** Unique provider-owned auth method declarations. */
+declare const ProviderAuthMethodsSchema: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"explicit">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  fields: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    required: z.ZodBoolean;
+    secret: z.ZodBoolean;
+    sourceHints: z.ZodArray<z.ZodObject<{
+      kind: z.ZodLiteral<"environment">;
+      variable: z.ZodString;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"none">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>], "mode">>;
+/** Unique client-owned auth method declarations. */
+declare const ClientAuthMethodsSchema: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"explicit">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+  fields: z.ZodArray<z.ZodObject<{
+    id: z.ZodString;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    required: z.ZodBoolean;
+    secret: z.ZodBoolean;
+    sourceHints: z.ZodArray<z.ZodObject<{
+      kind: z.ZodLiteral<"environment">;
+      variable: z.ZodString;
+    }, z.core.$strict>>;
+  }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"inferred">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+  id: z.ZodString;
+  mode: z.ZodLiteral<"none">;
+  label: z.ZodString;
+  description: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>], "mode">>;
+/** Default native-auth selection declared by a client definition. */
+declare const ClientDefaultAuthSchema: z.ZodObject<{
+  providerDefinitionId: z.ZodString;
+  methodId: z.ZodString;
+}, z.core.$strict>;
+type AuthEnvironmentVariableName = z.infer<typeof AuthEnvironmentVariableNameSchema>;
+type AuthFieldId = z.infer<typeof AuthFieldIdSchema>;
+type AuthCredentialSourceHint = z.infer<typeof AuthCredentialSourceHintSchema>;
+type AuthCredentialFieldDefinition = z.infer<typeof AuthCredentialFieldDefinitionSchema>;
+type ExplicitAuthMethodDefinition = z.infer<typeof ExplicitAuthMethodDefinitionSchema>;
+type InferredAuthMethodDefinition = z.infer<typeof InferredAuthMethodDefinitionSchema>;
+type NoAuthMethodDefinition = z.infer<typeof NoAuthMethodDefinitionSchema>;
+type ProviderAuthMethodDefinition = z.infer<typeof ProviderAuthMethodDefinitionSchema>;
+type ClientAuthMethodDefinition = z.infer<typeof ClientAuthMethodDefinitionSchema>;
+type ClientDefaultAuth = z.infer<typeof ClientDefaultAuthSchema>;
+//#endregion
+//#region core/contracts/src/auth/resolved.d.ts
+/**
+ * Provider authentication after the selected static method has been resolved.
+ * Plaintext values are deliberately absent; explicit credentials remain refs.
+ */
+declare const ResolvedProviderAuthSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+  mode: z.ZodLiteral<"explicit">;
+  method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    owner: z.ZodLiteral<"provider">;
+    providerDefinitionId: z.ZodString;
+    methodId: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    owner: z.ZodLiteral<"client">;
+    clientId: z.ZodString;
+    methodId: z.ZodString;
+  }, z.core.$strict>], "owner">;
+  definition: z.ZodObject<{
+    id: z.ZodString;
+    mode: z.ZodLiteral<"explicit">;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    fields: z.ZodArray<z.ZodObject<{
+      id: z.ZodString;
+      label: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      required: z.ZodBoolean;
+      secret: z.ZodBoolean;
+      sourceHints: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"environment">;
+        variable: z.ZodString;
+      }, z.core.$strict>>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>;
+  credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+}, z.core.$strict>, z.ZodObject<{
+  mode: z.ZodLiteral<"inferred">;
+  method: z.ZodObject<{
+    owner: z.ZodLiteral<"client">;
+    clientId: z.ZodString;
+    methodId: z.ZodString;
+  }, z.core.$strict>;
+  definition: z.ZodObject<{
+    id: z.ZodString;
+    mode: z.ZodLiteral<"inferred">;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+  }, z.core.$strict>;
+  account: z.ZodOptional<z.ZodObject<{
+    managerId: z.ZodString;
+    accountId: z.ZodString;
+  }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+  mode: z.ZodLiteral<"none">;
+  method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    owner: z.ZodLiteral<"provider">;
+    providerDefinitionId: z.ZodString;
+    methodId: z.ZodString;
+  }, z.core.$strict>, z.ZodObject<{
+    owner: z.ZodLiteral<"client">;
+    clientId: z.ZodString;
+    methodId: z.ZodString;
+  }, z.core.$strict>], "owner">;
+  definition: z.ZodObject<{
+    id: z.ZodString;
+    mode: z.ZodLiteral<"none">;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+  }, z.core.$strict>;
+}, z.core.$strict>], "mode">;
+type ResolvedProviderAuth = z.infer<typeof ResolvedProviderAuthSchema>;
+//#endregion
+//#region core/contracts/src/auth/binding-validation.d.ts
+/** Credential-field subset required for delivery-semantic validation. */
+interface AdapterAuthBindingCredentialFieldDefinition {
+  readonly id: string;
+  readonly required: boolean;
+}
+/** Static auth method accepted by adapter binding validation. */
+type AdapterAuthBindingMethodDefinition = {
+  readonly id: string;
+  readonly mode: 'explicit';
+  readonly fields: readonly AdapterAuthBindingCredentialFieldDefinition[];
+} | {
+  readonly id: string;
+  readonly mode: 'inferred' | 'none';
+};
+/**
+ * Assert that one adapter binding can faithfully deliver one static auth method.
+ *
+ * This is the single semantic validator shared by contribution discovery, UI
+ * compatibility reads, and Adapter Core. Structural Zod parsing remains the
+ * responsibility of the surrounding declaration contract.
+ * @param binding - Structurally valid adapter delivery binding.
+ * @param method - Authoritative provider/client auth method definition.
+ */
+declare function assertAdapterAuthBindingMatchesMethod(binding: AdapterAuthBinding, method: AdapterAuthBindingMethodDefinition): void;
+//#endregion
+export { NoAuthMethodDefinitionSchema as C, ProviderAuthMethodsSchema as E, NoAuthMethodDefinition as S, ProviderAuthMethodDefinitionSchema as T, ClientDefaultAuthSchema as _, AuthCredentialFieldDefinition as a, InferredAuthMethodDefinition as b, AuthCredentialSourceHintSchema as c, AuthFieldId as d, AuthFieldIdSchema as f, ClientDefaultAuth as g, ClientAuthMethodsSchema as h, ResolvedProviderAuthSchema as i, AuthEnvironmentVariableName as l, ClientAuthMethodDefinitionSchema as m, assertAdapterAuthBindingMatchesMethod as n, AuthCredentialFieldDefinitionSchema as o, ClientAuthMethodDefinition as p, ResolvedProviderAuth as r, AuthCredentialSourceHint as s, AdapterAuthBindingMethodDefinition as t, AuthEnvironmentVariableNameSchema as u, ExplicitAuthMethodDefinition as v, ProviderAuthMethodDefinition as w, InferredAuthMethodDefinitionSchema as x, ExplicitAuthMethodDefinitionSchema as y };