@makaio/framework 1.0.0-dev-1783705652236 → 1.0.0-dev-1783940945655

package/dist/{profile-BMBXUqqh.mjs → profile-D2m94ZYD.mjs}

@@ -1 +1 @@
-import{t as e}from"./version-DoV_pSzT.mjs";import{z as t}from"zod";import*as n from"node:path";const r=t.string().trim().min(1),i=t.number().int().finite().nonnegative().describe(`Unix epoch timestamp in milliseconds`);function a(e){return n.posix.isAbsolute(e)||n.win32.isAbsolute(e)}const o=t.string().trim().min(1).refine(a,{message:`Path must be absolute`}),s=t.string().min(1).regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/,`Profile name must be a safe path component`),c=s,l=t.object({id:r,clientId:r,name:s,description:t.string().nullable(),configDir:o,isDefault:t.boolean(),createdAt:i,updatedAt:i}),u=t.record(t.string(),t.string()),d=t.enum([`auth-only`,`full`,`empty`]),f={"profile.create":{request:t.object({clientId:r,name:s,description:t.string().optional()}),response:t.object({profile:l})},"profile.list":{request:t.object({clientId:r}),response:t.object({profiles:t.array(l)})},"profile.get":{request:t.object({clientId:r,name:s}),response:t.object({profile:l.nullable()})},"profile.update":{request:t.object({clientId:r,name:s,description:t.string().optional()}),response:t.object({profile:l})},"profile.delete":{request:t.object({clientId:r,name:s}),response:t.object({success:t.boolean()})},"profile.setDefault":{request:t.object({clientId:r,name:s}),response:t.object({profile:l})}},p={"sessionConfig.create":{request:t.object({clientId:r,sessionId:c,profileName:s.optional(),baseConfigDir:o.optional(),projectDir:o.optional(),configInheritance:d.optional()}),response:t.object({sessionDir:o,env:u})},"sessionConfig.destroy":{request:t.object({clientId:r,sessionId:c}),response:t.object({success:t.boolean()})},"sessionConfig.cleanup":{request:t.object({clientId:r.optional()}),response:t.object({removed:t.array(o)})}},m=t.object({sessionDir:o,baseConfigDir:o,projectDir:o.optional(),platform:t.enum([`darwin`,`linux`,`win32`]),configInheritance:d}),h=t.object({sessionDir:o,platform:t.enum([`darwin`,`linux`,`win32`])}),g=t.object({success:t.boolean()}),_=t.object({env:t.record(t.string(),t.string()).optional()}),v=t.enum([`managed-install`,`profile-create`,`session-create`]),y={request:t.object({clientId:r,configDir:o,phase:v,binaryVersion:e.optional(),adapterName:t.string().min(1).optional(),projectDir:o.optional()}),response:t.object({primed:t.boolean()})};export{a as _,f as a,c,_ as d,h as f,r as g,i as h,l as i,d as l,o as m,y as n,p as o,g as p,s as r,u as s,v as t,m as u};
+import{t as e}from"./version-C1-VD-XL.mjs";import{z as t}from"zod";import*as n from"node:path";const r=t.string().trim().min(1),i=t.number().int().finite().nonnegative().describe(`Unix epoch timestamp in milliseconds`);function a(e){return n.posix.isAbsolute(e)||n.win32.isAbsolute(e)}const o=t.string().trim().min(1).refine(a,{message:`Path must be absolute`}),s=t.string().min(1).regex(/^[A-Za-z0-9][A-Za-z0-9._-]*$/,`Profile name must be a safe path component`),c=s,l=t.object({id:r,clientId:r,name:s,description:t.string().nullable(),configDir:o,isDefault:t.boolean(),createdAt:i,updatedAt:i}),u=t.record(t.string(),t.string()),d=t.enum([`auth-only`,`full`,`empty`]),f={"profile.create":{request:t.object({clientId:r,name:s,description:t.string().optional()}),response:t.object({profile:l})},"profile.list":{request:t.object({clientId:r}),response:t.object({profiles:t.array(l)})},"profile.get":{request:t.object({clientId:r,name:s}),response:t.object({profile:l.nullable()})},"profile.update":{request:t.object({clientId:r,name:s,description:t.string().optional()}),response:t.object({profile:l})},"profile.delete":{request:t.object({clientId:r,name:s}),response:t.object({success:t.boolean()})},"profile.setDefault":{request:t.object({clientId:r,name:s}),response:t.object({profile:l})}},p={"sessionConfig.create":{request:t.object({clientId:r,leaseId:c,ownerSessionId:r.optional(),profileName:s.optional(),baseConfigDir:o.optional(),projectDir:o.optional(),configInheritance:d.optional()}),response:t.object({sessionDir:o,env:u,authMaterialized:t.boolean()})},"sessionConfig.destroy":{request:t.object({clientId:r,leaseId:c}),response:t.object({success:t.boolean()})},"sessionConfig.cleanup":{request:t.object({clientId:r.optional()}),response:t.object({removed:t.array(o)})}},m=t.object({sessionDir:o,baseConfigDir:o,projectDir:o.optional(),platform:t.enum([`darwin`,`linux`,`win32`]),configInheritance:d}),h=t.object({sessionDir:o,platform:t.enum([`darwin`,`linux`,`win32`])}),g=t.object({success:t.boolean()}),_=t.object({env:t.record(t.string(),t.string()).optional(),authMaterialized:t.boolean()}),v=t.enum([`managed-install`,`profile-create`,`session-create`]),y={request:t.object({clientId:r,configDir:o,phase:v,binaryVersion:e.optional(),adapterName:t.string().min(1).optional(),projectDir:o.optional()}),response:t.object({primed:t.boolean()})};export{a as _,f as a,d as c,_ as d,h as f,r as g,i as h,l as i,c as l,o as m,y as n,p as o,g as p,s as r,u as s,v as t,m as u};

package/dist/provider-context-BYkMl--1.mjs

@@ -0,0 +1 @@
+import{n as e}from"./namespace-D7pE2QWv.mjs";import{CredentialSubjects as t}from"@makaio/framework/contracts";var n=class extends Error{code;adapterName;providerConfigId;constructor(e,t,n){super(`Provider context resolution failed (${e}) for adapter "${t}".`),this.code=e,this.adapterName=t,this.providerConfigId=n,this.name=`RuntimeProviderContextResolutionError`}};async function r(t,r){let i=await t.request(e.resolveAdapterRuntimeSnapshot,r);if(i.status===`error`)throw new n(i.code,r.adapterName,r.providerConfigId);let a=i.runtime;if(a.adapterName!==r.adapterName||a.snapshot.context.providerConfigId!==r.providerConfigId)throw new n(`snapshot-identity-mismatch`,r.adapterName,r.providerConfigId);let o=a.snapshot.context;if(o.state!==`resolved`)throw new n(`provider-context-unresolved`,r.adapterName,r.providerConfigId);return o}var i=class extends Error{code;constructor(e){super(`[activateProviderContext] ${e===`manager-unavailable`?`the selected account manager is unavailable`:e===`account-not-found`?`the selected account no longer exists`:`the selected account could not be activated`}.`),this.code=e,this.name=`ProviderContextActivationError`}},a=class extends Error{constructor(){super(`Provider context account activation rollback failed.`),this.name=`ProviderContextActivationRollbackError`}},o=class{bus;transactionId;finalization;constructor(e,t){this.bus=e,this.transactionId=t}commit(){return this.finalize(`commit`)}rollback(){return this.finalize(`rollback`)}finalize(e){if(this.finalization!==void 0)return this.finalization.action===e?this.finalization.promise:Promise.reject(new i(`activation-failed`));let t=this.requestFinalization(e);return this.finalization={action:e,promise:t},t}async requestFinalization(e){try{if(e===`commit`){let e=await this.bus.requestOptional(t.activation.commit,{transactionId:this.transactionId});if(!e.handled)throw new i(`activation-failed`);if(!e.data.success)throw e.data.code===`commit-rollback-failed`?new a:new i(`activation-failed`);return}let n=await this.bus.requestOptional(t.activation.rollback,{transactionId:this.transactionId});if(!n.handled)throw new i(`activation-failed`);if(!n.data.success)throw n.data.code===`rollback-failed`?new a:new i(`activation-failed`)}catch(e){throw e instanceof i||e instanceof a?e:new i(`activation-failed`)}}};function s(e){return e.state!==`resolved`||e.auth.mode!==`inferred`||e.auth.account===void 0?null:e}async function c(e,n){let r=s(n);if(r)try{let n=await e.requestOptional(t.activate,{providerContext:r});if(!n.handled)throw new i(`manager-unavailable`);if(!n.data.success)throw new i(n.data.code)}catch(e){throw e instanceof i?e:new i(`activation-failed`)}}async function l(e,n){let r=s(n);if(r)try{let n=await e.requestOptional(t.activation.prepare,{providerContext:r});if(!n.handled)throw new i(`manager-unavailable`);if(!n.data.success)throw new i(n.data.code);return new o(e,n.data.transactionId)}catch(e){throw e instanceof i?e:new i(`activation-failed`)}}export{n as a,l as i,a as n,r as o,c as r,i as t};

package/dist/provider-context-DOsjOjiR.mjs

@@ -0,0 +1 @@
+import{t as e}from"./resolved-O2XXjTeu.mjs";import{r as t,t as n}from"./definition-K3m51lgO.mjs";import{z as r}from"zod";const i=r.object({state:r.literal(`resolved`),providerConfigId:r.string().trim().min(1),definitionId:r.string().trim().min(1),endpointOverrides:n.optional(),auth:e,capabilities:t.optional()}).strict().superRefine((e,t)=>{e.auth.method.owner===`provider`&&e.auth.method.providerDefinitionId!==e.definitionId&&t.addIssue({code:r.ZodIssueCode.custom,message:`Provider-owned authentication must belong to the resolved provider definition.`,path:[`auth`,`method`,`providerDefinitionId`]})}),a=r.object({state:r.literal(`unresolved`)}).strict(),o=r.discriminatedUnion(`state`,[i,a]);export{i as n,a as r,o as t};

package/dist/{providers-namespace-5GoTlHXz.d.mts → providers-namespace-O4de1tgO.d.mts}

@@ -77,12 +77,33 @@ declare const ProviderRecordSchema: z.ZodObject<{
     allowlist: "allowlist";
     "show-all": "show-all";
   }>;
-  credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+  authMethods: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+    id: z.ZodString;
+    mode: z.ZodLiteral<"explicit">;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    fields: z.ZodArray<z.ZodObject<{
+      id: z.ZodString;
+      label: z.ZodString;
+      description: z.ZodOptional<z.ZodString>;
+      required: z.ZodBoolean;
+      secret: z.ZodBoolean;
+      sourceHints: z.ZodArray<z.ZodObject<{
+        kind: z.ZodLiteral<"environment">;
+        variable: z.ZodString;
+      }, z.core.$strict>>;
+    }, z.core.$strict>>;
+  }, z.core.$strict>, z.ZodObject<{
+    id: z.ZodString;
+    mode: z.ZodLiteral<"none">;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+  }, z.core.$strict>], "mode">>;
   capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
   enabled: z.ZodBoolean;
   createdAt: z.ZodNumber;
   updatedAt: z.ZodNumber;
-}, z.core.$strip>;
+}, z.core.$strict>;
 /**
  * Storage namespace for system-managed provider records.
  *
@@ -167,12 +188,33 @@ declare const ProviderStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           allowlist: "allowlist";
           "show-all": "show-all";
         }>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        authMethods: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"explicit">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            required: z.ZodBoolean;
+            secret: z.ZodBoolean;
+            sourceHints: z.ZodArray<z.ZodObject<{
+              kind: z.ZodLiteral<"environment">;
+              variable: z.ZodString;
+            }, z.core.$strict>>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"none">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>], "mode">>;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         enabled: z.ZodBoolean;
         createdAt: z.ZodNumber;
         updatedAt: z.ZodNumber;
-      }, z.core.$strip>>;
+      }, z.core.$strict>>;
     }, z.core.$strip>;
   };
   list: {
@@ -246,12 +288,33 @@ declare const ProviderStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           allowlist: "allowlist";
           "show-all": "show-all";
         }>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        authMethods: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"explicit">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            required: z.ZodBoolean;
+            secret: z.ZodBoolean;
+            sourceHints: z.ZodArray<z.ZodObject<{
+              kind: z.ZodLiteral<"environment">;
+              variable: z.ZodString;
+            }, z.core.$strict>>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"none">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>], "mode">>;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         enabled: z.ZodBoolean;
         createdAt: z.ZodNumber;
         updatedAt: z.ZodNumber;
-      }, z.core.$strip>>;
+      }, z.core.$strict>>;
     }, z.core.$strip>;
   };
   listByProtocol: {
@@ -330,12 +393,33 @@ declare const ProviderStorageNamespace: _$_makaio_storage_core0.StorageNamespace
           allowlist: "allowlist";
           "show-all": "show-all";
         }>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        authMethods: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"explicit">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            required: z.ZodBoolean;
+            secret: z.ZodBoolean;
+            sourceHints: z.ZodArray<z.ZodObject<{
+              kind: z.ZodLiteral<"environment">;
+              variable: z.ZodString;
+            }, z.core.$strict>>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"none">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>], "mode">>;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         enabled: z.ZodBoolean;
         createdAt: z.ZodNumber;
         updatedAt: z.ZodNumber;
-      }, z.core.$strip>>;
+      }, z.core.$strict>>;
     }, z.core.$strip>;
   };
 }, _$_makaio_storage_core0.StorageNamespaceExtensions>;
@@ -413,12 +497,33 @@ declare const ProviderStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
           allowlist: "allowlist";
           "show-all": "show-all";
         }>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        authMethods: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"explicit">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            required: z.ZodBoolean;
+            secret: z.ZodBoolean;
+            sourceHints: z.ZodArray<z.ZodObject<{
+              kind: z.ZodLiteral<"environment">;
+              variable: z.ZodString;
+            }, z.core.$strict>>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"none">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>], "mode">>;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         enabled: z.ZodBoolean;
         createdAt: z.ZodNumber;
         updatedAt: z.ZodNumber;
-      }, z.core.$strip>>;
+      }, z.core.$strict>>;
     }, z.core.$strip>;
   };
   list: {
@@ -492,12 +597,33 @@ declare const ProviderStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
           allowlist: "allowlist";
           "show-all": "show-all";
         }>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        authMethods: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"explicit">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            required: z.ZodBoolean;
+            secret: z.ZodBoolean;
+            sourceHints: z.ZodArray<z.ZodObject<{
+              kind: z.ZodLiteral<"environment">;
+              variable: z.ZodString;
+            }, z.core.$strict>>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"none">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>], "mode">>;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         enabled: z.ZodBoolean;
         createdAt: z.ZodNumber;
         updatedAt: z.ZodNumber;
-      }, z.core.$strip>>;
+      }, z.core.$strict>>;
     }, z.core.$strip>;
   };
   listByProtocol: {
@@ -576,12 +702,33 @@ declare const ProviderStorageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_cor
           allowlist: "allowlist";
           "show-all": "show-all";
         }>;
-        credentialEnvVars: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        authMethods: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"explicit">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+          fields: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            label: z.ZodString;
+            description: z.ZodOptional<z.ZodString>;
+            required: z.ZodBoolean;
+            secret: z.ZodBoolean;
+            sourceHints: z.ZodArray<z.ZodObject<{
+              kind: z.ZodLiteral<"environment">;
+              variable: z.ZodString;
+            }, z.core.$strict>>;
+          }, z.core.$strict>>;
+        }, z.core.$strict>, z.ZodObject<{
+          id: z.ZodString;
+          mode: z.ZodLiteral<"none">;
+          label: z.ZodString;
+          description: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>], "mode">>;
         capabilities: z.ZodOptional<z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>>;
         enabled: z.ZodBoolean;
         createdAt: z.ZodNumber;
         updatedAt: z.ZodNumber;
-      }, z.core.$strip>>;
+      }, z.core.$strict>>;
     }, z.core.$strip>;
   };
 }>, "storage:provider">;

package/dist/resolved-O2XXjTeu.mjs

@@ -0,0 +1 @@
+import{c as e,i as t,l as n,u as r}from"./definitions-C1pgx0Nq.mjs";import{i,n as a,r as o,t as s}from"./selection-YRuVSdck.mjs";import{z as c}from"zod";const l=c.object({mode:c.literal(`explicit`),method:a,definition:e,credentialRefs:c.record(t,s)}).strict(),u=c.object({mode:c.literal(`inferred`),method:o,definition:n,account:i.optional()}).strict(),d=c.object({mode:c.literal(`none`),method:a,definition:r}).strict(),f=c.discriminatedUnion(`mode`,[l,u,d]).superRefine((e,t)=>{if(e.method.methodId!==e.definition.id&&t.addIssue({code:c.ZodIssueCode.custom,message:`Resolved auth method reference must match the resolved method definition ID.`,path:[`definition`,`id`]}),e.mode!==`explicit`)return;let n=new Set(e.definition.fields.map(({id:e})=>e));for(let n of e.definition.fields)n.required&&!Object.prototype.hasOwnProperty.call(e.credentialRefs,n.id)&&t.addIssue({code:c.ZodIssueCode.custom,message:`Missing required credential ref for field "${n.id}".`,path:[`credentialRefs`,n.id]});for(let r of Object.keys(e.credentialRefs))n.has(r)||t.addIssue({code:c.ZodIssueCode.custom,message:`Credential ref field "${r}" is not declared by the resolved auth method.`,path:[`credentialRefs`,r]})});export{f as t};

package/dist/rules/index.d.mts

@@ -1,4 +1,4 @@
-import { C as RuleSetOptions, S as Rule, _ as JsonObjectShape, a as JsonObjectSchema, b as NotCondition, c as RuleSetOptionsSchema, d as CompoundCondition, f as Condition, g as JsonObject, h as FieldOperator, i as FieldOperatorSchema, l as ScalarValueSchema, m as FieldCondition, n as ExpressionConditionSchema, o as JsonValueSchema, p as ExpressionCondition, r as FieldConditionSchema, s as RuleSchema, t as ConditionSchema, u as AndCondition, v as JsonPrimitive, w as ScalarValue, x as OrCondition, y as JsonValue } from "../schemas-B6tEKf9T.mjs";
+import { C as RuleSetOptions, S as Rule, _ as JsonObjectShape, a as JsonObjectSchema, b as NotCondition, c as RuleSetOptionsSchema, d as CompoundCondition, f as Condition, g as JsonObject, h as FieldOperator, i as FieldOperatorSchema, l as ScalarValueSchema, m as FieldCondition, n as ExpressionConditionSchema, o as JsonValueSchema, p as ExpressionCondition, r as FieldConditionSchema, s as RuleSchema, t as ConditionSchema, u as AndCondition, v as JsonPrimitive, w as ScalarValue, x as OrCondition, y as JsonValue } from "../schemas-XRhqOgVE.mjs";
 
 //#region packages/rules/src/evaluator.d.ts
 /**

package/dist/rules/index.mjs

@@ -1 +1 @@
-import{t as e}from"../esm-CQG9Pc7n.mjs";import{ConditionSchema as t,ExpressionConditionSchema as n,FieldConditionSchema as r,FieldOperatorSchema as i,JsonObjectSchema as a,JsonValueSchema as o,RuleSchema as s,RuleSetOptionsSchema as c,ScalarValueSchema as l}from"./schemas.mjs";import{compile as u}from"@makaio/framework/expression";const d=new Map,f=new Map;function p(e,t){if(`$and`in e){for(let n of e.$and)if(!p(n,t))return!1;return!0}if(`$or`in e){for(let n of e.$or)if(p(n,t))return!0;return!1}return`$not`in e?!p(e.$not,t):`$expr`in e?!!_(e.$expr).evalSync(t):h(g(t,e.field),e.operator)}function m(e,t,n={}){let{includeDisabled:r=!1}=n,i=[];for(let n of e)!r&&!n.enabled||p(n.condition,t)&&i.push(n);return i}function h(e,t){if(typeof t!=`object`||!t)return e===t;if(`$eq`in t)return e===t.$eq;if(`$ne`in t)return e!==t.$ne;if(`$in`in t)return t.$in.includes(e);if(`$nin`in t)return!t.$nin.includes(e);if(`$exists`in t){let n=e!==void 0;return t.$exists?n:!n}return`$startsWith`in t?typeof e==`string`&&e.startsWith(t.$startsWith):`$endsWith`in t?typeof e==`string`&&e.endsWith(t.$endsWith):`$glob`in t?typeof e==`string`&&v(t.$glob).match(e):!1}function g(e,t){if(e==null)return;let n=t.split(`.`),r=e;for(let e of n){if(typeof r!=`object`||!r)return;r=r[e]}return r}function _(e){return y(d,e,()=>u(e))}function v(t){return y(f,t,()=>new e(t))}function y(e,t,n){let r=e.get(t);if(r!==void 0)return e.delete(t),e.set(t,r),r;let i=n();if(e.set(t,i),e.size>256){let t=e.keys().next().value;t!==void 0&&e.delete(t)}return i}export{t as ConditionSchema,n as ExpressionConditionSchema,r as FieldConditionSchema,i as FieldOperatorSchema,a as JsonObjectSchema,o as JsonValueSchema,s as RuleSchema,c as RuleSetOptionsSchema,l as ScalarValueSchema,p as evaluate,m as evaluateRules};
+import{t as e}from"../esm-oHhRYTEn.mjs";import{ConditionSchema as t,ExpressionConditionSchema as n,FieldConditionSchema as r,FieldOperatorSchema as i,JsonObjectSchema as a,JsonValueSchema as o,RuleSchema as s,RuleSetOptionsSchema as c,ScalarValueSchema as l}from"./schemas.mjs";import{compile as u}from"@makaio/framework/expression";const d=new Map,f=new Map;function p(e,t){if(`$and`in e){for(let n of e.$and)if(!p(n,t))return!1;return!0}if(`$or`in e){for(let n of e.$or)if(p(n,t))return!0;return!1}return`$not`in e?!p(e.$not,t):`$expr`in e?!!_(e.$expr).evalSync(t):h(g(t,e.field),e.operator)}function m(e,t,n={}){let{includeDisabled:r=!1}=n,i=[];for(let n of e)!r&&!n.enabled||p(n.condition,t)&&i.push(n);return i}function h(e,t){if(typeof t!=`object`||!t)return e===t;if(`$eq`in t)return e===t.$eq;if(`$ne`in t)return e!==t.$ne;if(`$in`in t)return t.$in.includes(e);if(`$nin`in t)return!t.$nin.includes(e);if(`$exists`in t){let n=e!==void 0;return t.$exists?n:!n}return`$startsWith`in t?typeof e==`string`&&e.startsWith(t.$startsWith):`$endsWith`in t?typeof e==`string`&&e.endsWith(t.$endsWith):`$glob`in t?typeof e==`string`&&v(t.$glob).match(e):!1}function g(e,t){if(e==null)return;let n=t.split(`.`),r=e;for(let e of n){if(typeof r!=`object`||!r)return;r=r[e]}return r}function _(e){return y(d,e,()=>u(e))}function v(t){return y(f,t,()=>new e(t))}function y(e,t,n){let r=e.get(t);if(r!==void 0)return e.delete(t),e.set(t,r),r;let i=n();if(e.set(t,i),e.size>256){let t=e.keys().next().value;t!==void 0&&e.delete(t)}return i}export{t as ConditionSchema,n as ExpressionConditionSchema,r as FieldConditionSchema,i as FieldOperatorSchema,a as JsonObjectSchema,o as JsonValueSchema,s as RuleSchema,c as RuleSetOptionsSchema,l as ScalarValueSchema,p as evaluate,m as evaluateRules};

package/dist/rules/schemas.d.mts

@@ -1,2 +1,2 @@
-import { a as JsonObjectSchema, c as RuleSetOptionsSchema, i as FieldOperatorSchema, l as ScalarValueSchema, n as ExpressionConditionSchema, o as JsonValueSchema, r as FieldConditionSchema, s as RuleSchema, t as ConditionSchema } from "../schemas-B6tEKf9T.mjs";
+import { a as JsonObjectSchema, c as RuleSetOptionsSchema, i as FieldOperatorSchema, l as ScalarValueSchema, n as ExpressionConditionSchema, o as JsonValueSchema, r as FieldConditionSchema, s as RuleSchema, t as ConditionSchema } from "../schemas-XRhqOgVE.mjs";
 export { ConditionSchema, ExpressionConditionSchema, FieldConditionSchema, FieldOperatorSchema, JsonObjectSchema, JsonValueSchema, RuleSchema, RuleSetOptionsSchema, ScalarValueSchema };

package/dist/runtime-bun/index.mjs

@@ -1 +1 @@
-import{DispatchingAuth as e,createWebSocketCloseEvent as t}from"@makaio/framework/node/transports";import{HonoWebSocketBridge as n,startBusServer as r}from"@makaio/framework/node/bus-server";import{ExplicitDescriptorDiscovery as i,FileConfigStorage as a,FileRegistryCache as o,FilesystemDescriptorDiscovery as s,MergedDescriptorDiscovery as c,NodeCredentialProvider as l,StoredCredentialProvider as u,bootMakaioRuntimeCore as d,bootMakaioRuntimeCore as f,bridgeExtensionBrowserEntries as ee,createHonoRouteGraph as p,createHttpRouteGraphBuilder as m,entrypointStem as h,isCliContributionLike as g,isMakaioExtensionLike as _,isMissingOptionalRuntimePackage as v,isWithinDirectory as y,loadExtensions as b,loadOrCreateMachineIdentity as x,machineKeysExist as S,registerAdapterNameResolver as C,resolveConventionEntrypoint as w,resolveStaticModelRegistryPath as T,runMigrations as E,tryImport as D,validateMachineKeys as O}from"@makaio/framework/runtime-node";import{isIP as k}from"node:net";var A=class{raw;eventListeners={message:new Set,close:new Set,error:new Set,open:new Set};constructor(e){this.raw=e}get readyState(){return this.raw.readyState}send(e){if(typeof e==`string`){this.raw.send(e);return}if(e instanceof Blob){e.arrayBuffer().then(e=>{this.raw.readyState===1&&this.raw.send(new Uint8Array(e))}).catch(()=>{this.dispatchError()});return}if(e instanceof ArrayBuffer){this.raw.send(new Uint8Array(e));return}ArrayBuffer.isView(e)&&this.raw.send(e)}close(e,t){this.raw.close(e,t)}addEventListener(e,t){this.eventListeners[e]?.add(t)}removeEventListener(e,t){this.eventListeners[e]?.delete(t)}dispatchMessage(e){let t=new MessageEvent(`message`,{data:e});for(let e of this.eventListeners.message)e(t)}dispatchClose(e,n){let r=t(e,n);for(let e of this.eventListeners.close)e(r)}dispatchError(){let e=new Event(`error`);for(let t of this.eventListeners.error)t(e)}},j=class{options;bridge;busServer=null;busReady=!1;connecting=!1;constructor(e){this.options=e,this.bridge=new n}get dispatchingAuth(){return this.options.auth instanceof e?this.options.auth:void 0}createWebSocketHandler(){let e=this.bridge,t=()=>this.busReady,n=new WeakMap;return{binaryType:`arraybuffer`,open(r){if(!t()){r.close(1013,`Bus server not ready`);return}let i=new A(r);n.set(r,i),e.accept(i)},message(e,t){n.get(e)?.dispatchMessage(t)},close(e,t,r){n.get(e)?.dispatchClose(t,r),n.delete(e)}}}async connect(e,t){if(this.connecting||this.busServer)throw Error(`[BunBusServerTransport] connect() called while transport is already connected or connecting`);this.connecting=!0;try{this.busServer=await r({websocket:this.bridge,bus:e,auth:this.options.auth,loopbackName:this.options.loopbackName??`bun`}),this.busReady=!0}catch(e){throw await this.stopBusServer(`startup error`),e}finally{this.connecting=!1}}async disconnect(){await this.stopBusServer(`shutdown`),this.bridge.close()}async stopBusServer(e){this.busReady=!1,this.busServer&&=(await this.busServer.stop().catch(t=>{console.error(`[BunBusServerTransport] Failed to stop bus server during ${e}:`,t)}),null)}};function M(e){if(e.headers.get(`upgrade`)?.toLowerCase()!==`websocket`)return!1;let{pathname:t}=new URL(e.url);return t===`/bus`?!0:t===`/`&&e.headers.get(`origin`)===null}function te(e){return(t,n)=>M(t)?n.upgrade(t)?void 0:new Response(`WebSocket upgrade failed`,{status:426,headers:{Upgrade:`websocket`}}):e.fetch(t)}function N(e){return e.port}async function P(e){let{port:t,hostname:n}=e.bunServer,r=e.createMount??(await import(`../create-static-mount-DkK28kKW.mjs`)).defaultCreateMount;return f(e.transport,t,n,{...e,createMount:r})}function F(e,t){let n=e,r=t;return{fetch(e,t){return n(e,t)},websocket:{binaryType:t.binaryType,open(e){r.open(e)},message(e,t){r.message(e,t)},close(e,t,n){r.close(e,t,n)}},activate(i){n=R(e,i),r=z(t,i)}}}function I(e){let t=[];return e.forEachActiveExtension((e,n)=>{B(n)&&t.push(n)}),t}function L(e){return Array.isArray(e)?e.flatMap(e=>L(e)):B(e)?[e]:[]}function R(e,t){return t.reduce((e,t)=>t.bun.createFetch?.(e)??e,e)}function z(e,t){return t.reduce((e,t)=>t.bun.createWebSocketHandler?.(e)??e,e)}function B(e){if(!H(e))return!1;let t=e.bun;return typeof e.name==`string`&&typeof e.displayName==`string`&&V(t)}function V(e){if(!H(e))return!1;let t=e.createFetch,n=e.createWebSocketHandler;return(t===void 0||typeof t==`function`)&&(n===void 0||typeof n==`function`)}function H(e){return typeof e==`object`&&!!e}function U(e){let t=e.timeoutMs??1e4,n=e.exit??(e=>process.exit(e)),r=!1;return async i=>{if(r)return;r=!0,console.info(`[${e.label}] ${i} received, shutting down...`);let a=setTimeout(()=>{console.error(`[${e.label}] Graceful shutdown timed out, forcing exit`),n(1)},t);try{process.env.MAKAIO_DEBUG&&console.info(`[${e.label}] Shutting down runtime...`),await e.runtime.shutdown(),process.env.MAKAIO_DEBUG&&console.info(`[${e.label}] Stopping Bun server...`),W(e.bunServer,e.label),process.env.MAKAIO_DEBUG&&console.info(`[${e.label}] Shutdown complete`),clearTimeout(a),n(0)}catch(t){W(e.bunServer,e.label),clearTimeout(a),console.error(`[${e.label}] Shutdown error:`,t),n(1)}}}function W(e,t){let n=e.stop?.(!0);G(n)&&n.catch(e=>{console.warn(`[${t}] Bun server stop failed during shutdown:`,e)})}function G(e){return typeof e==`object`&&!!e&&typeof e.catch==`function`}const K=/^(?=.{1,253}$)(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)*[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?$/;function q(e){let t=e.env??process.env,n=e.defaultPort??3e3,r=e.defaultHost??`0.0.0.0`;return{port:J(t.PORT,n,e),host:Y(t.HOST,r,e)}}function J(e,t,n){let r=e?.trim(),i=r&&/^\d+$/.test(r)?Number.parseInt(r,10):NaN;return Number.isInteger(i)&&i>=1&&i<=65535?i:e===void 0?t:Z(`Invalid PORT: ${e}`,t,n)}function Y(e,t,n){let r=e?.trim();return r&&X(r)?r:e===void 0?t:Q(`Invalid HOST: ${e}`,t,n)}function X(e){return k(e)!==0||e===`localhost`||K.test(e)}function Z(e,t,n){return $(e,String(t),n),t}function Q(e,t,n){return $(e,t,n),t}function $(e,t,n){if((n.invalid??`throw`)===`throw`)throw Error(e);console.warn(`[${n.appName}] ${e}, falling back to ${t}`)}export{j as BunBusServerTransportProvider,i as ExplicitDescriptorDiscovery,a as FileConfigStorage,o as FileRegistryCache,s as FilesystemDescriptorDiscovery,c as MergedDescriptorDiscovery,l as NodeCredentialProvider,u as StoredCredentialProvider,P as bootMakaioRuntime,d as bootMakaioRuntimeCore,ee as bridgeExtensionBrowserEntries,I as collectActiveBunHostPackages,R as composeBunHostFetch,z as composeBunHostWebSocket,F as createBunHostRouter,te as createBunRouteGraphFetch,U as createGracefulShutdown,p as createHonoRouteGraph,m as createHttpRouteGraphBuilder,h as entrypointStem,g as isCliContributionLike,_ as isMakaioExtensionLike,v as isMissingOptionalRuntimePackage,y as isWithinDirectory,b as loadExtensions,x as loadOrCreateMachineIdentity,S as machineKeysExist,L as normalizeBunHostPackages,q as readBunServerEnv,C as registerAdapterNameResolver,w as resolveConventionEntrypoint,N as resolveListeningPort,T as resolveStaticModelRegistryPath,E as runMigrations,D as tryImport,O as validateMachineKeys};
+import{DispatchingAuth as e,createWebSocketCloseEvent as t}from"@makaio/framework/node/transports";import{HonoWebSocketBridge as n,startBusServer as r}from"@makaio/framework/node/bus-server";import{ExplicitDescriptorDiscovery as i,FileConfigStorage as a,FileRegistryCache as o,FilesystemDescriptorDiscovery as s,MergedDescriptorDiscovery as c,NodeCredentialProvider as l,StoredCredentialProvider as u,bootMakaioRuntimeCore as d,bootMakaioRuntimeCore as f,bridgeExtensionBrowserEntries as ee,createHonoRouteGraph as p,createHttpRouteGraphBuilder as m,entrypointStem as h,isCliContributionLike as g,isMakaioExtensionLike as _,isMissingOptionalRuntimePackage as v,isWithinDirectory as y,loadExtensions as b,loadOrCreateMachineIdentity as x,machineKeysExist as S,registerAdapterNameResolver as C,resolveConventionEntrypoint as w,resolveStaticModelRegistryPath as T,runMigrations as E,tryImport as D,validateMachineKeys as O}from"@makaio/framework/runtime-node";import{isIP as k}from"node:net";var A=class{raw;eventListeners={message:new Set,close:new Set,error:new Set,open:new Set};constructor(e){this.raw=e}get readyState(){return this.raw.readyState}send(e){if(typeof e==`string`){this.raw.send(e);return}if(e instanceof Blob){e.arrayBuffer().then(e=>{this.raw.readyState===1&&this.raw.send(new Uint8Array(e))}).catch(()=>{this.dispatchError()});return}if(e instanceof ArrayBuffer){this.raw.send(new Uint8Array(e));return}ArrayBuffer.isView(e)&&this.raw.send(e)}close(e,t){this.raw.close(e,t)}addEventListener(e,t){this.eventListeners[e]?.add(t)}removeEventListener(e,t){this.eventListeners[e]?.delete(t)}dispatchMessage(e){let t=new MessageEvent(`message`,{data:e});for(let e of this.eventListeners.message)e(t)}dispatchClose(e,n){let r=t(e,n);for(let e of this.eventListeners.close)e(r)}dispatchError(){let e=new Event(`error`);for(let t of this.eventListeners.error)t(e)}},j=class{options;bridge;busServer=null;busReady=!1;connecting=!1;constructor(e){this.options=e,this.bridge=new n}get dispatchingAuth(){return this.options.auth instanceof e?this.options.auth:void 0}createWebSocketHandler(){let e=this.bridge,t=()=>this.busReady,n=new WeakMap;return{binaryType:`arraybuffer`,open(r){if(!t()){r.close(1013,`Bus server not ready`);return}let i=new A(r);n.set(r,i),e.accept(i)},message(e,t){n.get(e)?.dispatchMessage(t)},close(e,t,r){n.get(e)?.dispatchClose(t,r),n.delete(e)}}}async connect(e,t){if(this.connecting||this.busServer)throw Error(`[BunBusServerTransport] connect() called while transport is already connected or connecting`);this.connecting=!0;try{this.busServer=await r({websocket:this.bridge,bus:e,auth:this.options.auth,loopbackName:this.options.loopbackName??`bun`}),this.busReady=!0}catch(e){throw await this.stopBusServer(`startup error`),e}finally{this.connecting=!1}}async disconnect(){await this.stopBusServer(`shutdown`),this.bridge.close()}async stopBusServer(e){this.busReady=!1,this.busServer&&=(await this.busServer.stop().catch(t=>{console.error(`[BunBusServerTransport] Failed to stop bus server during ${e}:`,t)}),null)}};function M(e){if(e.headers.get(`upgrade`)?.toLowerCase()!==`websocket`)return!1;let{pathname:t}=new URL(e.url);return t===`/bus`?!0:t===`/`&&e.headers.get(`origin`)===null}function te(e){return(t,n)=>M(t)?n.upgrade(t)?void 0:new Response(`WebSocket upgrade failed`,{status:426,headers:{Upgrade:`websocket`}}):e.fetch(t)}function N(e){return e.port}async function P(e){let{port:t,hostname:n}=e.bunServer,r=e.createMount??(await import(`../create-static-mount-CBTXRtbN.mjs`)).defaultCreateMount;return f(e.transport,t,n,{...e,createMount:r})}function F(e,t){let n=e,r=t;return{fetch(e,t){return n(e,t)},websocket:{binaryType:t.binaryType,open(e){r.open(e)},message(e,t){r.message(e,t)},close(e,t,n){r.close(e,t,n)}},activate(i){n=R(e,i),r=z(t,i)}}}function I(e){let t=[];return e.forEachActiveExtension((e,n)=>{B(n)&&t.push(n)}),t}function L(e){return Array.isArray(e)?e.flatMap(e=>L(e)):B(e)?[e]:[]}function R(e,t){return t.reduce((e,t)=>t.bun.createFetch?.(e)??e,e)}function z(e,t){return t.reduce((e,t)=>t.bun.createWebSocketHandler?.(e)??e,e)}function B(e){if(!H(e))return!1;let t=e.bun;return typeof e.name==`string`&&typeof e.displayName==`string`&&V(t)}function V(e){if(!H(e))return!1;let t=e.createFetch,n=e.createWebSocketHandler;return(t===void 0||typeof t==`function`)&&(n===void 0||typeof n==`function`)}function H(e){return typeof e==`object`&&!!e}function U(e){let t=e.timeoutMs??1e4,n=e.exit??(e=>process.exit(e)),r=!1;return async i=>{if(r)return;r=!0,console.info(`[${e.label}] ${i} received, shutting down...`);let a=setTimeout(()=>{console.error(`[${e.label}] Graceful shutdown timed out, forcing exit`),n(1)},t);try{process.env.MAKAIO_DEBUG&&console.info(`[${e.label}] Shutting down runtime...`),await e.runtime.shutdown(),process.env.MAKAIO_DEBUG&&console.info(`[${e.label}] Stopping Bun server...`),W(e.bunServer,e.label),process.env.MAKAIO_DEBUG&&console.info(`[${e.label}] Shutdown complete`),clearTimeout(a),n(0)}catch(t){W(e.bunServer,e.label),clearTimeout(a),console.error(`[${e.label}] Shutdown error:`,t),n(1)}}}function W(e,t){let n=e.stop?.(!0);G(n)&&n.catch(e=>{console.warn(`[${t}] Bun server stop failed during shutdown:`,e)})}function G(e){return typeof e==`object`&&!!e&&typeof e.catch==`function`}const K=/^(?=.{1,253}$)(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)*[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?$/;function q(e){let t=e.env??process.env,n=e.defaultPort??3e3,r=e.defaultHost??`0.0.0.0`;return{port:J(t.PORT,n,e),host:Y(t.HOST,r,e)}}function J(e,t,n){let r=e?.trim(),i=r&&/^\d+$/.test(r)?Number.parseInt(r,10):NaN;return Number.isInteger(i)&&i>=1&&i<=65535?i:e===void 0?t:Z(`Invalid PORT: ${e}`,t,n)}function Y(e,t,n){let r=e?.trim();return r&&X(r)?r:e===void 0?t:Q(`Invalid HOST: ${e}`,t,n)}function X(e){return k(e)!==0||e===`localhost`||K.test(e)}function Z(e,t,n){return $(e,String(t),n),t}function Q(e,t,n){return $(e,t,n),t}function $(e,t,n){if((n.invalid??`throw`)===`throw`)throw Error(e);console.warn(`[${n.appName}] ${e}, falling back to ${t}`)}export{j as BunBusServerTransportProvider,i as ExplicitDescriptorDiscovery,a as FileConfigStorage,o as FileRegistryCache,s as FilesystemDescriptorDiscovery,c as MergedDescriptorDiscovery,l as NodeCredentialProvider,u as StoredCredentialProvider,P as bootMakaioRuntime,d as bootMakaioRuntimeCore,ee as bridgeExtensionBrowserEntries,I as collectActiveBunHostPackages,R as composeBunHostFetch,z as composeBunHostWebSocket,F as createBunHostRouter,te as createBunRouteGraphFetch,U as createGracefulShutdown,p as createHonoRouteGraph,m as createHttpRouteGraphBuilder,h as entrypointStem,g as isCliContributionLike,_ as isMakaioExtensionLike,v as isMissingOptionalRuntimePackage,y as isWithinDirectory,b as loadExtensions,x as loadOrCreateMachineIdentity,S as machineKeysExist,L as normalizeBunHostPackages,q as readBunServerEnv,C as registerAdapterNameResolver,w as resolveConventionEntrypoint,N as resolveListeningPort,T as resolveStaticModelRegistryPath,E as runMigrations,D as tryImport,O as validateMachineKeys};

package/dist/runtime-node/client-binary-strategy-dependencies.d.mts

@@ -0,0 +1,34 @@
+import { StrategyDependencies } from "@makaio/framework/clients";
+
+//#region runtimes/node/src/client-binary-strategy-dependencies.d.ts
+/**
+ * Timeout configuration for Node managed-binary strategy dependencies.
+ */
+interface NodeClientBinaryStrategyDependencyOptions {
+  /** Timeout in milliseconds for text/JSON metadata fetches. */
+  fetchTimeoutMs?: number;
+  /** Timeout in milliseconds for binary downloads. */
+  downloadTimeoutMs?: number;
+  /** Timeout in milliseconds for generic subprocess execution. */
+  execTimeoutMs?: number;
+  /** Timeout in milliseconds for `tar` / `unzip` extraction subprocesses. */
+  extractTimeoutMs?: number;
+}
+/**
+ * Create the Node.js {@link StrategyDependencies} implementation used by the
+ * client binary manager in production boots.
+ *
+ * All I/O is performed with Node 22 APIs plus explicit host archive tools:
+ * - Network: global `fetch` (Node 22 built-in).
+ * - File downloads: streamed via `node:stream` `pipeline` with backpressure.
+ * - Archive extraction: host `tar -xzf` for `tar.gz`, host `unzip -q` for `zip`.
+ * - File cleanup: `node:fs/promises.rm` with `{ force: true }`.
+ * - Subprocess: `node:child_process.execFile` (no shell, stderr in errors).
+ * - Checksum: `node:crypto.createHash` streaming.
+ * - Directory removal: `node:fs/promises.rm` with `{ recursive: true, force: true }`.
+ * @param options - Optional timeout overrides for tests or constrained hosts
+ * @returns A fully-wired {@link StrategyDependencies} object.
+ */
+declare function createNodeClientBinaryStrategyDependencies(options?: NodeClientBinaryStrategyDependencyOptions): StrategyDependencies;
+//#endregion
+export { NodeClientBinaryStrategyDependencyOptions, createNodeClientBinaryStrategyDependencies };

package/dist/runtime-node/client-binary-strategy-dependencies.mjs

@@ -0,0 +1 @@
+import{execFile as e}from"node:child_process";import{promisify as t}from"node:util";import*as n from"node:fs/promises";import*as r from"node:path";import{createHash as i}from"node:crypto";import*as a from"node:fs";import{Readable as o,Transform as s}from"node:stream";import{pipeline as c}from"node:stream/promises";const l=t(e);function u(e,t){if(!e.ok)throw Error(`HTTP ${e.status} ${e.statusText} fetching ${t}`)}function d(e){return{fetchTimeoutMs:e.fetchTimeoutMs??3e4,downloadTimeoutMs:e.downloadTimeoutMs??6e5,execTimeoutMs:e.execTimeoutMs??12e4,extractTimeoutMs:e.extractTimeoutMs??3e5}}async function f(e,t){try{return await fetch(e,{signal:AbortSignal.timeout(t)})}catch(n){let r=n instanceof Error?n.name:``;throw r===`AbortError`||r===`TimeoutError`?Error(`Timed out fetching ${e} after ${t}ms`,{cause:n}):n}}async function p(e,t,r,i){await n.mkdir(t,{recursive:!0}),r===`tar.gz`?await l(`tar`,[`-xzf`,e,`-C`,t],{timeout:i}).catch(n=>{throw n.code===`ENOENT`?Error(`tar extraction failed: host executable "tar" was not found on PATH`):Error(`tar extraction failed: ${e} → ${t}\nstderr: ${n.stderr??``}\n${String(n.message)}`)}):await l(`unzip`,[`-q`,e,`-d`,t],{timeout:i}).catch(n=>{throw n.code===`ENOENT`?Error(`zip extraction failed: host executable "unzip" was not found on PATH`):Error(`unzip extraction failed: ${e} → ${t}\nstderr: ${n.stderr??``}\n${String(n.message)}`)})}async function m(e,t,n,r){let{stdout:i}=await l(e,t,{cwd:n?.cwd,env:n?.env===void 0?process.env:{...process.env,...n.env},shell:!1,timeout:r}).catch(n=>{if(n.code===`ENOENT`)throw Error(`Command failed: host executable "${e}" was not found on PATH`);let r=n.stderr??``;throw Error(`Command failed: ${e} ${t.join(` `)}\nstderr: ${r}\n${String(n.message)}`)});return(i??``).trim()}function h(e={}){let{fetchTimeoutMs:t,downloadTimeoutMs:l,execTimeoutMs:h,extractTimeoutMs:g}=d(e);return{async fetchText(e){let n=await f(e,t);return u(n,e),n.text()},async fetchJson(e){let n=await f(e,t);return u(n,e),n.json()},async downloadFile(e,t,i){let d=await f(e,l);if(u(d,e),d.body===null)throw Error(`Response body is null for URL: ${e}`);let p=d.headers.get(`content-length`),m=p===null?null:parseInt(p,10),h=m!==null&&!isNaN(m)?m:null;await n.mkdir(r.dirname(t),{recursive:!0});let g=a.createWriteStream(t),_=0,v=new s({transform(e,t,n){_+=e.length,i?.(_,h),n(null,e)}});try{await c(o.from(d.body),v,g)}catch(e){throw await n.rm(t,{force:!0}),e}return t},exec(e,t,n){return m(e,t,n,h)},async extractArchive(e,t,n){await p(e,t,n,g)},async deleteFile(e){await n.rm(e,{force:!0})},async computeChecksum(e,t=`sha256`){return new Promise((n,r)=>{let o=i(t),s=a.createReadStream(e);s.on(`error`,r),s.on(`data`,e=>o.update(e)),s.on(`end`,()=>n(o.digest(`hex`)))})},async removeDirectory(e){await n.rm(e,{recursive:!0,force:!0})}}}export{h as createNodeClientBinaryStrategyDependencies};

package/dist/runtime-node/extension-discovery.d.mts

@@ -1,2 +1,2 @@
-import { a as FilesystemDescriptorDiscovery, i as ExtensionEntrypointModule, n as ExplicitDescriptorDiscovery, o as FilesystemDescriptorDiscoveryOptions, r as ExtensionDiscovery, s as MergedDescriptorDiscovery, t as DiscoveredExtension } from "../extension-discovery-CIZn5bkq.mjs";
+import { a as FilesystemDescriptorDiscovery, i as ExtensionEntrypointModule, n as ExplicitDescriptorDiscovery, o as FilesystemDescriptorDiscoveryOptions, r as ExtensionDiscovery, s as MergedDescriptorDiscovery, t as DiscoveredExtension } from "../extension-discovery-APMf1Tes.mjs";
 export { DiscoveredExtension, ExplicitDescriptorDiscovery, ExtensionDiscovery, ExtensionEntrypointModule, FilesystemDescriptorDiscovery, FilesystemDescriptorDiscoveryOptions, MergedDescriptorDiscovery };

package/dist/runtime-node/extension-validation.d.mts

@@ -1,2 +1,2 @@
-import { a as isMakaioExtensionLike, c as resolveConventionEntrypoint, i as isCliContributionLike, o as isWithinDirectory, r as entrypointStem } from "../load-extensions-DNRIy4zC.mjs";
+import { a as isMakaioExtensionLike, c as resolveConventionEntrypoint, i as isCliContributionLike, o as isWithinDirectory, r as entrypointStem } from "../load-extensions-_EnedkUp.mjs";
 export { entrypointStem, isCliContributionLike, isMakaioExtensionLike, isWithinDirectory, resolveConventionEntrypoint };

package/dist/runtime-node/extension-validation.mjs

@@ -1 +1 @@
-import{a as e,c as t,n,o as r,r as i}from"../load-extensions-Cze1RHcG.mjs";export{n as entrypointStem,i as isCliContributionLike,e as isMakaioExtensionLike,r as isWithinDirectory,t as resolveConventionEntrypoint};
+import{a as e,c as t,n,o as r,r as i}from"../load-extensions-BtUrq2_t.mjs";export{n as entrypointStem,i as isCliContributionLike,e as isMakaioExtensionLike,r as isWithinDirectory,t as resolveConventionEntrypoint};

package/dist/runtime-node/index.d.mts

@@ -1,17 +1,19 @@
 import { RuntimeSubjects } from "./bus/runtime/namespace.mjs";
-import { a as FilesystemDescriptorDiscovery, n as ExplicitDescriptorDiscovery, o as FilesystemDescriptorDiscoveryOptions, r as ExtensionDiscovery, s as MergedDescriptorDiscovery, t as DiscoveredExtension } from "../extension-discovery-CIZn5bkq.mjs";
-import { a as isMakaioExtensionLike, c as resolveConventionEntrypoint, i as isCliContributionLike, n as LoadExtensionsOptions, o as isWithinDirectory, r as entrypointStem, s as loadExtensions, t as DescriptorSourcePackageGroup } from "../load-extensions-DNRIy4zC.mjs";
-import { A as DatabaseBootOptions, B as NodeFrameworkModuleResolver, C as ServerTransportProvider, D as WorkflowWorkerEntryMode, E as WorkflowRunnerBootOptions, F as normalizeNodeHostCapabilities, G as HttpContributionPhase, H as resolveFrameworkSpecifier, I as selectFrameworkCorePackages, J as HonoRouteGraphOptions, K as HttpRouteContribution, L as ShutdownStep, M as InitializeNodeDatabaseResult, N as initializeNodeDatabase, O as WorkflowWorkerEntryResolverOptions, P as HostCapabilityDeclaration, R as BridgeBrowserOptions, S as MakaioRuntime, T as UpstreamTelemetryBootOptions, U as HttpRouteGraphBuilder, V as NoopFrameworkModuleResolver, W as createHttpRouteGraphBuilder, Y as createHonoRouteGraph, _ as ThinWorkflowPiscinaRunnerOptions, a as InProcessWorkflowRunnerOptions, b as BootMakaioRuntimeOptions, h as IWorkflowRunner, i as InProcessWorkflowRunner, j as InitializeNodeDatabaseOptions, k as resolveWorkflowWorkerEntry, m as ThinWorkflowPiscinaRunner, q as HonoRouteGraph, v as WorkflowRunResult, w as TransportReadyInfo, x as CoreBootOptions, y as BootCoordinatorSetupContext, z as FrameworkModuleResolver } from "../index-ntS1EXlf.mjs";
+import { NodeClientBinaryStrategyDependencyOptions, createNodeClientBinaryStrategyDependencies } from "./client-binary-strategy-dependencies.mjs";
+import { a as FilesystemDescriptorDiscovery, n as ExplicitDescriptorDiscovery, o as FilesystemDescriptorDiscoveryOptions, r as ExtensionDiscovery, s as MergedDescriptorDiscovery, t as DiscoveredExtension } from "../extension-discovery-APMf1Tes.mjs";
+import { a as isMakaioExtensionLike, c as resolveConventionEntrypoint, i as isCliContributionLike, n as LoadExtensionsOptions, o as isWithinDirectory, r as entrypointStem, s as loadExtensions, t as DescriptorSourcePackageGroup } from "../load-extensions-_EnedkUp.mjs";
+import { A as DatabaseBootOptions, B as NodeFrameworkModuleResolver, C as ServerTransportProvider, D as WorkflowWorkerEntryMode, E as WorkflowRunnerBootOptions, F as normalizeNodeHostCapabilities, G as HttpContributionPhase, H as resolveFrameworkSpecifier, I as selectFrameworkCorePackages, J as HonoRouteGraphOptions, K as HttpRouteContribution, L as ShutdownStep, M as InitializeNodeDatabaseResult, N as initializeNodeDatabase, O as WorkflowWorkerEntryResolverOptions, P as HostCapabilityDeclaration, R as BridgeBrowserOptions, S as MakaioRuntime, T as UpstreamTelemetryBootOptions, U as HttpRouteGraphBuilder, V as NoopFrameworkModuleResolver, W as createHttpRouteGraphBuilder, Y as createHonoRouteGraph, _ as ThinWorkflowPiscinaRunnerOptions, a as InProcessWorkflowRunnerOptions, b as BootMakaioRuntimeOptions, h as IWorkflowRunner, i as InProcessWorkflowRunner, j as InitializeNodeDatabaseOptions, k as resolveWorkflowWorkerEntry, m as ThinWorkflowPiscinaRunner, q as HonoRouteGraph, v as WorkflowRunResult, w as TransportReadyInfo, x as CoreBootOptions, y as BootCoordinatorSetupContext, z as FrameworkModuleResolver } from "../index-BtL7ONuM.mjs";
 import { ConfiguredRuntimeOptions, LoadMakaioConfigOptions, LoadedMakaioConfig, MAKAIO_CONFIG_FILE_ENV, MAKAIO_HOME_ENV, MakaioConfig, ParseMakaioConfigOptions, ParsedMakaioConfig, WorkflowRunnerConfig, buildConfiguredRuntimeOptions, createMakaioConfigDiscovery, defineMakaioConfig, loadMakaioConfig, parseMakaioConfig, resolveMakaioConfigPath, resolveMakaioHome, shouldIncludeExtension } from "./makaio-config.mjs";
+import { z } from "zod";
 import { IConfigStorage } from "@makaio/framework/core";
 import { BusTransport, IMakaioBus } from "@makaio/framework/bus";
-import { Config } from "@makaio/framework/contracts";
+import { Config, EntityUIConfig, ProtocolId } from "@makaio/framework/contracts";
 import { DispatchingAuth } from "@makaio/framework/node/transports";
 import { MakaioDatabase, StorageDialect as StorageDialect$1 } from "@makaio/framework/storage/drizzle";
 import { CredentialRef } from "@makaio/framework/contracts/config";
 import { ExtensionCoordinator, KernelMakaioExtension, TransportProvider } from "@makaio/framework/kernel";
 import { IModelRegistryCache, ModelRegistry } from "@makaio/framework/services/model-registry";
-import { IAdapterConfigRepository, PlatformDefaults, createAdapterSubsystemPackage } from "@makaio/framework/adapter-subsystem";
+import { AdapterInstance, IAdapterConfigRepository, LoadedAdapter, PlatformDefaults, createAdapterSubsystemPackage } from "@makaio/framework/adapter-subsystem";
 import { MachineKeyStatus, MachineKeyValidation, PersistedMachineIdentity, loadOrCreateMachineIdentity, machineKeysExist, validateMachineKeys } from "@makaio/framework/node/machine-identity";
 import { TransportAuth as TransportAuth$1 } from "@makaio/framework/node/bus-server";
 import { ConfigProvider } from "@makaio/framework/providers";
@@ -29,6 +31,28 @@ import { Server } from "node:http";
  */
 declare function registerAdapterNameResolver(bus: IMakaioBus): () => void;
 //#endregion
+//#region runtimes/node/src/register-runtime-handlers.d.ts
+/**
+ * Run registered runtime handler cleanups in reverse order.
+ * @param cleanups - Mutable cleanup stack captured during registration.
+ */
+declare function runRuntimeHandlerCleanups(cleanups: Array<() => void>): void;
+/**
+ * Register runtime bus handlers for adapter listing, config schemas, and model fetching.
+ *
+ * Handlers read adapter state lazily at request time so adapter changes made
+ * during coordinator activation remain visible without re-registration.
+ * @param bus - Runtime bus.
+ * @param getLoadedAdapters - Getter for current loaded adapter definitions.
+ * @param getAdapterInstances - Getter for current adapter instances.
+ * @param getExtension - Coordinator lookup for extension config schemas.
+ * @returns Cleanup function that unregisters all runtime handlers.
+ */
+declare function registerRuntimeHandlers(bus: IMakaioBus, getLoadedAdapters: () => readonly LoadedAdapter[], getAdapterInstances: () => ReadonlyMap<string, AdapterInstance>, getExtension?: (name: string) => {
+  configSchema?: z.ZodType;
+  uiConfig?: EntityUIConfig;
+} | undefined): () => void;
+//#endregion
 //#region runtimes/node/src/compose-adapter-runtime.d.ts
 /**
  * Composition seam for booting a local adapter runtime.
@@ -62,6 +86,8 @@ interface PrepareAdapterRuntimeInput {
   readonly configRepository: IAdapterConfigRepository;
   /** Platform defaults (cwd/env) supplied to adapter instances. */
   readonly platformDefaults: PlatformDefaults;
+  /** Trusted non-serializable auth preparer forwarded to every loaded adapter. */
+  readonly prepareAuthRuntime?: unknown;
 }
 /** Result of {@link prepareAdapterRuntime}. */
 interface PreparedAdapterRuntime {
@@ -730,4 +756,4 @@ declare function findWorkspaceRoot(startDir: string): string;
  */
 declare function findWorkspaceRootInfo(startDir: string): WorkspaceRootInfo;
 //#endregion
-export { type ActivateAdapterRuntimeIdentityInput, type ActivatedAdapterRuntimeIdentity, type AttachedUpstreamTelemetry, type BootCoordinatorSetupContext, type BootMakaioRuntimeOptions, type BridgeBrowserOptions, type BundledMigrationsProbes, type BusServerTransportOptions, BusServerTransportProvider, type ConfiguredRuntimeOptions, type CoreBootOptions, type CredentialProvider, type DatabaseBootOptions, type DescriptorSourcePackageGroup, type DiscoveredExtension, ExplicitDescriptorDiscovery, type ExtensionDiscovery, FileConfigStorage, FileRegistryCache, FilesystemDescriptorDiscovery, type FilesystemDescriptorDiscoveryOptions, type FrameworkModuleResolver, type HonoRouteGraph, type HonoRouteGraphOptions, type HttpContributionPhase, type HttpRouteContribution, type HttpRouteGraphBuilder, type IWorkflowRunner, InProcessWorkflowRunner, type InProcessWorkflowRunnerOptions, type InitializeNodeDatabaseOptions, type InitializeNodeDatabaseResult, type LoadExtensionsOptions, type LoadMakaioConfigOptions, type LoadedMakaioConfig, MAKAIO_CONFIG_FILE_ENV, MAKAIO_HOME_ENV, MAKAIO_UPSTREAM_SECRET_ENV, MAKAIO_UPSTREAM_URL_ENV, type MachineKeyStatus, type MachineKeyValidation, type MakaioConfig, type MakaioRuntime, MergedDescriptorDiscovery, NodeCredentialProvider, NodeFrameworkModuleResolver, type NodeRuntimeOptions, NoopFrameworkModuleResolver, type ParseMakaioConfigOptions, type ParsedMakaioConfig, type PersistedMachineIdentity, type PrepareAdapterRuntimeInput, type PreparedAdapterRuntime, type ResolveUpstreamTelemetryBootOptionsFromEnvOptions, RuntimeSubjects, type ServerTransportProvider, StoredCredentialProvider, ThinWorkflowPiscinaRunner, type ThinWorkflowPiscinaRunnerOptions, type TransportReadyInfo, type UpstreamTelemetryBootOptions, type UpstreamTelemetryEnv, type UpstreamTelemetryTransportConfig, type WorkflowRunResult, type WorkflowRunnerBootOptions, type WorkflowRunnerConfig, type WorkflowWorkerEntryMode, type WorkflowWorkerEntryResolverOptions, type WorkspaceRootInfo, WorkspaceRootNotFoundError, activateAdapterRuntimeIdentity, attachUpstreamTelemetry, bootMakaioRuntime, bootMakaioRuntimeCore, bridgeExtensionBrowserEntries, buildConfiguredRuntimeOptions, buildExtensionBrowserRollupInputName, buildExtensionBrowserRuntimeEntrypoint, buildNodeRuntimeOptions, createHonoRouteGraph, createHttpRouteGraphBuilder, createMakaioConfigDiscovery, createUpstreamTelemetryTransport, defineMakaioConfig, entrypointStem, findWorkspaceRoot, findWorkspaceRootInfo, getRuntimeDatabase, initializeNodeDatabase, isCliContributionLike, isMakaioExtensionLike, isMissingOptionalRuntimePackage, isWithinDirectory, loadExtensions, loadMakaioConfig, loadOrCreateMachineIdentity, machineKeysExist, normalizeNodeHostCapabilities, parseMakaioConfig, prepareAdapterRuntime, readFrameworkVersion, registerAdapterNameResolver, resolveBundledMigrationsDir, resolveConventionEntrypoint, resolveFrameworkSpecifier, resolveListeningPort, resolveMakaioConfigPath, resolveMakaioHome, resolveStaticModelRegistryPath, resolveUpstreamTelemetryBootOptionsFromEnv, resolveWorkflowWorkerEntry, runMigrations, selectFrameworkCorePackages, shouldIncludeExtension, tryImport, validateMachineKeys, waitForServerListening };
+export { type ActivateAdapterRuntimeIdentityInput, type ActivatedAdapterRuntimeIdentity, type AttachedUpstreamTelemetry, type BootCoordinatorSetupContext, type BootMakaioRuntimeOptions, type BridgeBrowserOptions, type BundledMigrationsProbes, type BusServerTransportOptions, BusServerTransportProvider, type ConfiguredRuntimeOptions, type CoreBootOptions, type CredentialProvider, type DatabaseBootOptions, type DescriptorSourcePackageGroup, type DiscoveredExtension, ExplicitDescriptorDiscovery, type ExtensionDiscovery, FileConfigStorage, FileRegistryCache, FilesystemDescriptorDiscovery, type FilesystemDescriptorDiscoveryOptions, type FrameworkModuleResolver, type HonoRouteGraph, type HonoRouteGraphOptions, type HttpContributionPhase, type HttpRouteContribution, type HttpRouteGraphBuilder, type IWorkflowRunner, InProcessWorkflowRunner, type InProcessWorkflowRunnerOptions, type InitializeNodeDatabaseOptions, type InitializeNodeDatabaseResult, type LoadExtensionsOptions, type LoadMakaioConfigOptions, type LoadedMakaioConfig, MAKAIO_CONFIG_FILE_ENV, MAKAIO_HOME_ENV, MAKAIO_UPSTREAM_SECRET_ENV, MAKAIO_UPSTREAM_URL_ENV, type MachineKeyStatus, type MachineKeyValidation, type MakaioConfig, type MakaioRuntime, MergedDescriptorDiscovery, type NodeClientBinaryStrategyDependencyOptions, NodeCredentialProvider, NodeFrameworkModuleResolver, type NodeRuntimeOptions, NoopFrameworkModuleResolver, type ParseMakaioConfigOptions, type ParsedMakaioConfig, type PersistedMachineIdentity, type PrepareAdapterRuntimeInput, type PreparedAdapterRuntime, type ResolveUpstreamTelemetryBootOptionsFromEnvOptions, RuntimeSubjects, type ServerTransportProvider, StoredCredentialProvider, ThinWorkflowPiscinaRunner, type ThinWorkflowPiscinaRunnerOptions, type TransportReadyInfo, type UpstreamTelemetryBootOptions, type UpstreamTelemetryEnv, type UpstreamTelemetryTransportConfig, type WorkflowRunResult, type WorkflowRunnerBootOptions, type WorkflowRunnerConfig, type WorkflowWorkerEntryMode, type WorkflowWorkerEntryResolverOptions, type WorkspaceRootInfo, WorkspaceRootNotFoundError, activateAdapterRuntimeIdentity, attachUpstreamTelemetry, bootMakaioRuntime, bootMakaioRuntimeCore, bridgeExtensionBrowserEntries, buildConfiguredRuntimeOptions, buildExtensionBrowserRollupInputName, buildExtensionBrowserRuntimeEntrypoint, buildNodeRuntimeOptions, createHonoRouteGraph, createHttpRouteGraphBuilder, createMakaioConfigDiscovery, createNodeClientBinaryStrategyDependencies, createUpstreamTelemetryTransport, defineMakaioConfig, entrypointStem, findWorkspaceRoot, findWorkspaceRootInfo, getRuntimeDatabase, initializeNodeDatabase, isCliContributionLike, isMakaioExtensionLike, isMissingOptionalRuntimePackage, isWithinDirectory, loadExtensions, loadMakaioConfig, loadOrCreateMachineIdentity, machineKeysExist, normalizeNodeHostCapabilities, parseMakaioConfig, prepareAdapterRuntime, readFrameworkVersion, registerAdapterNameResolver, registerRuntimeHandlers, resolveBundledMigrationsDir, resolveConventionEntrypoint, resolveFrameworkSpecifier, resolveListeningPort, resolveMakaioConfigPath, resolveMakaioHome, resolveStaticModelRegistryPath, resolveUpstreamTelemetryBootOptionsFromEnv, resolveWorkflowWorkerEntry, runMigrations, runRuntimeHandlerCleanups, selectFrameworkCorePackages, shouldIncludeExtension, tryImport, validateMachineKeys, waitForServerListening };