@makaio/framework 1.0.0-dev-1785409369816 → 1.0.0-dev-1787670071418

package/dist/{index-brqfk9JQ.d.mts → index-D8D-yibS2.d.mts}

@@ -118,7 +118,7 @@ declare const ArtifactViewResolveResponseSchema: z.ZodDiscriminatedUnion<[z.ZodO
     }, z.core.$strip>, z.ZodObject<{
       type: z.ZodLiteral<"raw">;
       title: z.ZodString;
-      json: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+      json: z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>;
     }, z.core.$strip>, z.ZodObject<{
       type: z.ZodLiteral<"code">;
       title: z.ZodString;
@@ -367,7 +367,7 @@ declare const MaterializationSchemas: {
         }, z.core.$strip>, z.ZodObject<{
           type: z.ZodLiteral<"raw">;
           title: z.ZodString;
-          json: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+          json: z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>;
         }, z.core.$strip>, z.ZodObject<{
           type: z.ZodLiteral<"code">;
           title: z.ZodString;
@@ -605,7 +605,7 @@ declare const MaterializationNamespace: _$_makaio_core0.BusNamespaceDefinition<"
         }, z.core.$strip>, z.ZodObject<{
           type: z.ZodLiteral<"raw">;
           title: z.ZodString;
-          json: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+          json: z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>;
         }, z.core.$strip>, z.ZodObject<{
           type: z.ZodLiteral<"code">;
           title: z.ZodString;
@@ -855,7 +855,7 @@ declare const MaterializationSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_c
         }, z.core.$strip>, z.ZodObject<{
           type: z.ZodLiteral<"raw">;
           title: z.ZodString;
-          json: z.ZodType<_$_makaio_contracts0.JsonValue, unknown, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, unknown>>;
+          json: z.ZodType<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue, z.core.$ZodTypeInternals<_$_makaio_contracts0.JsonValue, _$_makaio_contracts0.JsonValue>>;
         }, z.core.$strip>, z.ZodObject<{
           type: z.ZodLiteral<"code">;
           title: z.ZodString;

package/dist/index-DHnSLGP4.d.mts

@@ -0,0 +1,268 @@
+import { t as CapabilityService } from "./capability-service-BW1-teFU.mjs";
+import { IMakaioBus } from "@makaio/framework/bus";
+import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
+import { CodeExecutionAbortReason, CodeExecutionProviderContext, CodeExecutionRequirements, ICapabilityProvider, ICodeExecutionProvider, MakaioNodeExtension } from "@makaio/framework/contracts";
+import { BaseService } from "@makaio/framework/service-base";
+
+//#region services/core/src/code-execution/code-execution-service.d.ts
+/**
+ * Framework router for the `code-execution.execute` subject.
+ *
+ * Routes one prepared, JSON-safe invocation to exactly one locally registered
+ * provider and returns one normalized terminal outcome. The service owns
+ * three things and nothing else:
+ *
+ * - **Selection.** Providers live in the capability registry's
+ *   `code-execution` bucket as live objects; this service never keeps a
+ *   second registry and re-reads the bucket for every invocation, so
+ *   registrations that arrive or disappear between invocations are honored.
+ * - **Budget.** One effective signal combines the request budget, the
+ *   inherited request deadline, and caller cancellation, and is what the
+ *   provider observes.
+ * - **Normalization.** Every path — missing provider, malformed
+ *   registration, provider throw, non-conforming outcome, timeout,
+ *   cancellation — resolves to a schema-valid outcome. The handler does not
+ *   reject.
+ *
+ * There is deliberately **no fallback after admission**: once a provider has
+ * been handed the invocation, its failure is normalized, never retried
+ * against a second provider. Retrying would run submitted code twice under a
+ * different trust level than the one selection admitted.
+ */
+declare class CodeExecutionService extends BaseService {
+  private readonly capabilities;
+  /**
+   * @param bus - Bus instance the execute handler is registered on.
+   * @param capabilities - Live capability registry holding the provider bucket.
+   */
+  constructor(bus: IMakaioBus, capabilities: CapabilityService);
+  protected onInit(): void;
+  /**
+   * Validate the delivered payload, then route it.
+   *
+   * The caller-facing input already carries typed JSON fields, but parsing
+   * remains the router's own runtime trust boundary: a handler chain can
+   * replace a payload after the bus validated it, and a subject that executes
+   * submitted code must not hand an unvalidated program to a provider on that
+   * basis.
+   * @param payload - Payload as delivered to this handler.
+   * @param callerSignal - Caller cancellation signal; present only for local dispatch.
+   * @param requestDeadlineEpochMs - Absolute deadline inherited from the request, when any.
+   * @returns Exactly one normalized terminal outcome.
+   */
+  private dispatch;
+  /**
+   * Route one invocation to a single provider and normalize its outcome.
+   *
+   * Budget ownership is established *before* selection, and deliberately so.
+   * An invocation whose caller already went away, or whose inherited deadline
+   * had already passed, was never going to run no matter what the registry
+   * holds; reporting `provider_unavailable` or `invalid_provider` for it would
+   * name a local composition fault as the cause of something the caller
+   * decided. The signal is released on every path, including selection
+   * failure.
+   * @param request - Prepared, JSON-safe invocation to execute.
+   * @param callerSignal - Caller cancellation signal; present only for local dispatch.
+   * @param requestDeadlineEpochMs - Absolute deadline inherited from the request, when any.
+   * @returns Exactly one normalized terminal outcome.
+   */
+  private route;
+  /**
+   * Validate what one admitted provider produced.
+   *
+   * Never rejects: a provider throw and a non-conforming outcome both
+   * normalize here, so the caller's race only ever sees terminal outcomes.
+   * A settlement observed after the effective signal aborted is reported as
+   * that abort rather than as a provider fault — the provider was stopped, it
+   * did not fail.
+   *
+   * INVARIANT: nothing this function holds while suspended may be proportional
+   * to the request. A provider is free to ignore its abort signal and never
+   * settle, in which case the race in {@link route} answers the caller and *this*
+   * frame stays suspended for the life of the process — a suspended async
+   * function retains its parameters, so a `CodeExecutionRequest` parameter would
+   * pin that invocation's whole program and arguments, megabytes apiece, once per
+   * timed-out call. It therefore receives the two bounded strings the post-await
+   * code actually needs instead of the request they came from, and the provider
+   * call itself is started by {@link callProvider} in the caller so that neither
+   * the request nor the selection result is a parameter here. `settlement` is the
+   * provider's own promise: whatever *it* retains is the provider's to answer for,
+   * and is what the abort signal exists to cut short.
+   * @param settlement - Promise the admitted entry point produced, already started.
+   * @param providerId - Identifier selection snapshotted for the admitted provider.
+   * @param invocationId - Correlation identifier, for local diagnostics only.
+   * @param signal - Effective cancellation and deadline ownership for this execution.
+   * @returns The provider's validated outcome, or its normalized failure.
+   */
+  private invoke;
+  /**
+   * Record the detailed cause of a provider fault locally.
+   *
+   * Causes stay here on purpose: the outcome that crosses the bus carries a
+   * bounded summary, so stack traces, paths, and provider-internal error
+   * objects never leave the host that observed them.
+   * @param invocationId - Correlation identifier of the invocation whose provider faulted.
+   * @param providerId - Identifier the selector snapshotted for the faulting provider.
+   * @param summary - What the provider did wrong.
+   * @param cause - Original thrown value or validation error, retained only in the log.
+   */
+  private logDiagnostic;
+}
+//#endregion
+//#region services/core/src/code-execution/package.d.ts
+/** Token for the code-execution routing service. */
+declare const CodeExecutionServiceToken: _$_makaio_contracts0.ExtensionToken<CodeExecutionService>;
+/**
+ * Opt-in package that registers the `code-execution.execute` handler.
+ *
+ * Deliberately **not** part of the framework core package list. The subject's
+ * namespace is always registered, so any host can route and validate it, but
+ * composing a handler for it means this host is willing to execute submitted
+ * code with whatever trust its registered providers declare. That is a
+ * composition decision, and it is made by naming this package.
+ *
+ * The capability registry is a hard dependency rather than a lazy bus lookup:
+ * without it there is no provider bucket to select from, and a router that
+ * started anyway would answer every invocation with `provider_unavailable`
+ * while looking healthy.
+ */
+declare const codeExecutionPackage: MakaioNodeExtension<IMakaioBus>;
+//#endregion
+//#region services/core/src/code-execution/execution-signal.d.ts
+/** Inputs from which one effective execution signal is derived. */
+interface EffectiveExecutionSignalOptions {
+  /**
+   * Wall-clock execution budget declared by the request, in milliseconds.
+   *
+   * Must be finite and non-negative; a budget of zero is an already-exhausted
+   * one and settles as a timeout immediately.
+   */
+  readonly timeoutMs: number;
+  /** Absolute deadline inherited from the dispatching request, when it carried one. */
+  readonly requestDeadlineEpochMs?: number;
+  /** Caller cancellation signal; present only for local dispatch. */
+  readonly callerSignal?: AbortSignal;
+}
+/**
+ * One execution's effective cancellation and deadline ownership.
+ *
+ * Combines the request budget, the inherited request deadline, and caller
+ * cancellation into the single authoritative signal the provider observes,
+ * and records which of them settled it.
+ */
+interface EffectiveExecutionSignal {
+  /** Provider-facing context carrying the effective signal and deadline. */
+  readonly context: CodeExecutionProviderContext;
+  /** Reason the signal aborted, or `undefined` while the execution is live. */
+  readonly abortReason: CodeExecutionAbortReason | undefined;
+  /**
+   * Resolves with the abort reason once the signal aborts; never rejects.
+   *
+   * Stays pending forever when the execution settles first, so callers race
+   * it against the provider rather than awaiting it.
+   */
+  readonly aborted: Promise<CodeExecutionAbortReason>;
+  /**
+   * Detach the caller listener and clear the deadline timer.
+   *
+   * Idempotent, and safe to call on every settlement path — including after
+   * the signal already aborted.
+   */
+  release(): void;
+}
+/**
+ * Create the effective cancellation and deadline ownership for one execution.
+ *
+ * The returned signal aborts at the earliest of the request budget, the
+ * inherited request deadline, and caller cancellation. Caller cancellation
+ * is checked before the deadline so an already-abandoned invocation reports
+ * `cancellation` rather than a timeout it never got the chance to exceed.
+ *
+ * Every listener and timer this installs is removed by
+ * {@link EffectiveExecutionSignal.release}, which the caller must invoke on
+ * every settlement path.
+ *
+ * The budget is validated before anything is armed. The bus path already
+ * rejects an unusable one through the request schema, but this factory is
+ * exported for direct composition too, and there is no signal to hand back for
+ * a budget that yields no deadline.
+ * @param options - Request budget, inherited deadline, and caller signal.
+ * @returns The provider-facing context, the settling reason, and its release.
+ * @throws {@link TypeError} When `timeoutMs` is not a finite, non-negative number.
+ */
+declare function createEffectiveExecutionSignal(options: EffectiveExecutionSignalOptions): EffectiveExecutionSignal;
+//#endregion
+//#region services/core/src/code-execution/provider-selection.d.ts
+/**
+ * Failure codes the selector can produce when no provider is admitted.
+ *
+ * Both are `failed`-outcome codes, so the router can hand a rejection
+ * straight to its failure normalization without re-mapping.
+ */
+type CodeExecutionSelectionFailureCode = 'provider_unavailable' | 'invalid_provider';
+/** Selection result admitting exactly one provider for the invocation. */
+interface CodeExecutionProviderSelected {
+  /** Discriminant: a provider was admitted. */
+  readonly admitted: true;
+  /**
+   * The admitted provider's identifier, as read during selection.
+   *
+   * Carried out of the selector rather than re-read from `provider` at the
+   * point of use. Selection reads every field exactly once under containment,
+   * but a registration whose `id` accessor throws — or answers something else —
+   * on a *later* read would otherwise turn a diagnostic or a failure summary
+   * into a rejected bus handler. The identifier a caller reports is therefore
+   * the identifier selection actually admitted.
+   */
+  readonly id: string;
+  /**
+   * The entry point selection validated, carried out of the selector.
+   *
+   * Read once during selection and never read off `provider` again, for the
+   * same reason {@link id} is not: a registration is free to answer a *different*
+   * function on a later read — or to throw — and the callable that runs must be
+   * the callable admission checked. It is invoked with `provider` as its `this`,
+   * so a class-based registration keeps its own binding.
+   */
+  readonly execute: ICodeExecutionProvider['execute'];
+  /** The single provider admitted for this invocation, used as the `this` binding. */
+  readonly provider: ICodeExecutionProvider;
+}
+/** Selection result admitting no provider, carrying the failure classification. */
+interface CodeExecutionProviderRejected {
+  /** Discriminant: no provider was admitted. */
+  readonly admitted: false;
+  /** Failure classification for the normalized outcome. */
+  readonly code: CodeExecutionSelectionFailureCode;
+}
+/** Discriminated result of one selection pass over the live provider bucket. */
+type CodeExecutionProviderSelection = CodeExecutionProviderSelected | CodeExecutionProviderRejected;
+/**
+ * Select the single provider that will execute one invocation.
+ *
+ * Pure over the live bucket: the input array is never reordered or mutated,
+ * because it is the capability registry's own storage. Malformed
+ * registrations — including ones whose property accessors throw — are
+ * excluded from selection rather than invoked, so this function is total: it
+ * returns a classification for every bucket instead of throwing at its caller.
+ *
+ * Every field of every registration is read exactly once, into snapshots;
+ * validation, requirement filtering, and ordering then all run on those plain
+ * values. The admitted provider's live object leaves this function so it is
+ * invoked with its own `this` binding — accompanied by its snapshotted `id` and
+ * `execute`, so no caller has to read a field off that live object again, either
+ * to describe it or to invoke it.
+ *
+ * Duplicate snapshot IDs are always `invalid_provider`, before requirement
+ * filtering can hide the ambiguity. When no provider is otherwise admitted,
+ * `invalid_provider` takes precedence over `provider_unavailable` whenever the
+ * bucket held at least one malformed registration. Both are actionable local
+ * composition faults, and reporting "no provider available" for either would
+ * hide the only signal that something was registered wrongly.
+ * @param candidates - Live `code-execution` bucket from the capability registry.
+ * @param requirements - Exact-match constraints declared by the request, when any.
+ * @returns The admitted provider, or the failure code to normalize.
+ */
+declare function selectCodeExecutionProvider(candidates: readonly ICapabilityProvider[], requirements: CodeExecutionRequirements | undefined): CodeExecutionProviderSelection;
+//#endregion
+export { selectCodeExecutionProvider as a, createEffectiveExecutionSignal as c, CodeExecutionService as d, CodeExecutionSelectionFailureCode as i, CodeExecutionServiceToken as l, CodeExecutionProviderSelected as n, EffectiveExecutionSignal as o, CodeExecutionProviderSelection as r, EffectiveExecutionSignalOptions as s, CodeExecutionProviderRejected as t, codeExecutionPackage as u };

package/dist/{index-D5Nb7IEP.d.mts → index-DI2lS7VT.d.mts}

@@ -1,13 +1,16 @@
-import { H as ArtifactLifecycleHookEvent, N as AnyArtifactKindDefinition, U as ArtifactLifecycleHookRegistration$1 } from "./index-cqLS1eFV.mjs";
-import { s as AdapterProviderAuth$1 } from "./adapter-binding-DQchUtrK.mjs";
-import { n as ExtensionTransitionRulesContribution, t as ExtensionTransitionActionsContribution, y as WorkflowBlockCollection$1 } from "./transition-Du3MQzJV.mjs";
-import { D as ExtensionService$1, H as ClientDefinition$1, T as NodeExtensionContext$1, f as ExtensionClientHookResponsesContribution, gt as VersionRange, mt as VersionLiteral$1, w as ExtensionContext$1 } from "./hook-responses-Dh1PWXqJ.mjs";
-import { c as ProviderDefinitionInput$1, r as ProtocolId$1 } from "./definition-gnKgXU91.mjs";
-import { t as RequiredTimeoutConfig } from "./index-Dm1nUxCF.mjs";
-import { H as SessionMessage$1, b as SESSION_EVENT_TYPES, i as MakaioSessionEvent$1 } from "./types-Dzrwa1GY.mjs";
-import { D as EntityUIConfig$1, I as FormFieldProps } from "./index-DnG-QFpG.mjs";
-import { l as FacetNamespaceDefinition } from "./index-BskPjMet.mjs";
-import { G as SurfaceBindingDefinition, p as ExtensionArtifactViewBuildersContribution } from "./view-builder-DeFd-k7C.mjs";
+import { G as ArtifactLifecycleHookRegistration$1, N as AnyArtifactKindDefinition, W as ArtifactLifecycleHookEvent } from "./index-DNI6UF9h.mjs";
+import { s as AdapterProviderAuth$1 } from "./adapter-binding-CATvmGuz.mjs";
+import { i as ExtensionService$1, n as NodeExtensionContext$1, t as ExtensionContext$1 } from "./extension-context-QmFuHdq5.mjs";
+import { t as ExtensionAutomationTriggersContribution } from "./contribution-CUHLVLsT.mjs";
+import { n as ExtensionTransitionRulesContribution, t as ExtensionTransitionActionsContribution, v as WorkflowBlockCollection$1 } from "./transition-D3zUBTPc.mjs";
+import { E as ClientDefinition$1, Q as VersionLiteral$1, et as VersionRange, f as ExtensionClientHookResponsesContribution } from "./hook-responses-9Ywsqzzq.mjs";
+import { c as ProviderDefinitionInput$1, r as ProtocolId$1 } from "./definition-BrgzUuFk.mjs";
+import { t as RequiredTimeoutConfig } from "./index-l01zsChf.mjs";
+import { Qt as SESSION_EVENT_TYPES, bn as SessionMessage$1, i as MakaioSessionEvent$1 } from "./types-DcxBYlPA.mjs";
+import { D as EntityUIConfig$1, I as FormFieldProps } from "./index-CmwAJ8-5.mjs";
+import { l as FacetNamespaceDefinition } from "./index-BuMsrli0.mjs";
+import { t as ExtensionReactionsContribution } from "./index-B0VO0rAl.mjs";
+import { G as SurfaceBindingDefinition, p as ExtensionArtifactViewBuildersContribution } from "./view-builder-B0j9p5C0.mjs";
 import { z } from "zod";
 import { MakaioBusLike, PayloadFilter, RegistrableBusNamespaceDefinition, SubjectSchema } from "@makaio/framework/core";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
@@ -272,15 +275,15 @@ declare const ProviderManifestSchema: z.ZodObject<{
  * Mirrors {@link HashTriggerStage} from the runtime contribution types.
  * Kept as a local type alias so this manifest module remains self-contained.
  */
-type TriggerStage = 'gather' | 'transform' | 'action';
+type HashTriggerStageManifest = 'gather' | 'transform' | 'action';
 /**
  * Describes a hash trigger contributed by an extension.
  *
  * Serializable metadata for discovery and introspection. The executable
- * runtime source is `MakaioExtension.triggers.createTriggers()`; descriptor
+ * runtime source is `MakaioExtension.hashTriggers.createHashTriggers()`; descriptor
  * contributions are not a registration fallback.
  */
-interface TriggerManifest {
+interface HashTriggerManifest {
   /**
    * Prefix token this trigger responds to (e.g., `'loop'`, `'file'`).
    *
@@ -295,10 +298,10 @@ interface TriggerManifest {
    *
    * Defaults to `'action'` when omitted.
    */
-  readonly stage?: TriggerStage;
+  readonly stage?: HashTriggerStageManifest;
 }
-/** Zod schema for {@link TriggerManifest}. */
-declare const TriggerManifestSchema: z.ZodObject<{
+/** Zod schema for {@link HashTriggerManifest}. */
+declare const HashTriggerManifestSchema: z.ZodObject<{
   prefix: z.ZodString;
   description: z.ZodOptional<z.ZodString>;
   stage: z.ZodOptional<z.ZodEnum<{
@@ -476,7 +479,7 @@ declare const UiSurfaceFlagsSchema: z.ZodObject<{
  * executable contribution fields only for pre-load introspection.
  *
  * Rich metadata fields ({@link adapters}, {@link clients}, {@link providers},
- * {@link triggers}, {@link logImporters}, {@link sessionEventActions}) carry
+ * {@link hashTriggers}, {@link logImporters}, {@link sessionEventActions}) carry
  * structured data for discovery and filtering. Boolean surface flags
  * ({@link create}, {@link tools}, {@link bootstrap}, etc.) declare which
  * executable surfaces the extension contributes without duplicating runtime
@@ -502,7 +505,7 @@ declare const UiSurfaceFlagsSchema: z.ZodObject<{
  * ```json
  * {
  *   "contributions": {
- *     "triggers": [
+ *     "hashTriggers": [
  *       { "prefix": "loop", "description": "Retry-until-success execution", "stage": "action" }
  *     ],
  *     "create": true,
@@ -521,7 +524,7 @@ interface ContributionManifest {
   /** Provider contributions declared by this extension. */
   readonly providers?: readonly ProviderManifest[];
   /** Hash trigger contributions declared by this extension. */
-  readonly triggers?: readonly TriggerManifest[];
+  readonly hashTriggers?: readonly HashTriggerManifest[];
   /** Log importer contribution declared by this extension. */
   readonly logImporters?: readonly LogImporterManifest[];
   /** Session event action contributions declared by this extension. */
@@ -588,7 +591,7 @@ declare const ContributionManifestSchema: z.ZodObject<{
     name: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
   }, z.core.$strip>>>>;
-  triggers: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
+  hashTriggers: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
     prefix: z.ZodString;
     description: z.ZodOptional<z.ZodString>;
     stage: z.ZodOptional<z.ZodEnum<{
@@ -641,7 +644,7 @@ declare const ContributionManifestSchema: z.ZodObject<{
     pages: z.ZodOptional<z.ZodBoolean>;
     routes: z.ZodOptional<z.ZodBoolean>;
   }, z.core.$strip>>;
-}, z.core.$strip>;
+}, z.core.$strict>;
 //#endregion
 //#region core/contracts/src/extension/capability-token.d.ts
 /**
@@ -1320,7 +1323,7 @@ declare const ExtensionManifestSchema: z.ZodObject<{
       name: z.ZodString;
       description: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>>;
-    triggers: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
+    hashTriggers: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
       prefix: z.ZodString;
       description: z.ZodOptional<z.ZodString>;
       stage: z.ZodOptional<z.ZodEnum<{
@@ -1373,7 +1376,7 @@ declare const ExtensionManifestSchema: z.ZodObject<{
       pages: z.ZodOptional<z.ZodBoolean>;
       routes: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
-  }, z.core.$strip>>;
+  }, z.core.$strict>>;
 }, z.core.$strip>;
 //#endregion
 //#region core/contracts/src/extension/adapter-definition.d.ts
@@ -1458,7 +1461,7 @@ interface AdapterProviderDefinitionContract$1 {
  * @typeParam TOptions - Options type accepted by {@link createAdapter}.
  *   Defaults to `never` so the type-erased base contract (`AdapterContribution.definition`)
  *   is structurally compatible with any specialised definition via contravariance:
- *   `(options?: ConcreteOptions) => Promise<T>` is assignable to `(options?: never) => Promise<T>`.
+ *   `(options: ConcreteOptions) => Promise<T>` is assignable to `(options: never) => Promise<T>`.
  *   Specialised adapter interfaces (e.g. `AIAdapterDefinition`) pass a narrower
  *   options type here to gain compile-time safety in their factory signatures.
  */
@@ -1554,7 +1557,7 @@ interface AdapterDefinitionContract$1<TAdapter = unknown, TOptions = never> {
    * @param options - Resolved adapter configuration (shape defined by the adapter).
    * @returns Promise resolving to the adapter instance.
    */
-  readonly createAdapter: (options?: TOptions) => Promise<TAdapter>;
+  readonly createAdapter: (options: TOptions) => Promise<TAdapter>;
 }
 //#endregion
 //#region core/contracts/src/extension/extension-cli.d.ts
@@ -2027,7 +2030,7 @@ interface HashTriggerSuggestResult {
  * A registered hash trigger that can suggest completions and execute values.
  *
  * Implement this interface and return instances from
- * `MakaioExtension.triggers.createTriggers` so the runtime registers them
+ * `MakaioExtension.hashTriggers.createHashTriggers` so the runtime registers them
  * with the HashTriggerService.
  * @typeParam TBus - Host bus shape supplied by the runtime.
  */
@@ -2791,15 +2794,19 @@ type ExtensionConfigComponentLoader<TConfig = unknown> = () => Promise<{
 //#endregion
 //#region core/contracts/src/extension/contributions/workflow-block-types.d.ts
 /**
- * Workflow block contribution — triggers and steps for the workflow builder.
+ * Workflow block contribution — step blocks for the workflow builder.
  *
  * Unlike other contribution surfaces, blocks are purely declarative (no runtime
  * context needed), so this is a static property rather than a factory. The
  * workflow block registry processor reads `blocks` during extension activation
  * and serialises each block to JSON Schema for catalog storage.
+ *
+ * Use `automationTriggers` instead to contribute trigger types — trigger
+ * catalog entries are derived from executable automation trigger descriptors,
+ * not from declarative blocks.
  */
 interface ExtensionWorkflowBlocksContribution {
-  /** Trigger and step block declarations contributed by this extension. */
+  /** Step block declarations contributed by this extension. */
   readonly blocks: WorkflowBlockCollection$1;
 }
 //#endregion
@@ -2854,13 +2861,13 @@ interface ExtensionToolsContribution<THostContext extends ExtensionContext$1 = N
  * Hash trigger contribution surface declared by an extension.
  * @typeParam TBus - Host bus shape supplied by the runtime.
  */
-interface ExtensionTriggersContribution<TBus extends MakaioBusLike = MakaioBusLike> {
+interface ExtensionHashTriggersContribution<TBus extends MakaioBusLike = MakaioBusLike> {
   /**
    * Create hash triggers for this extension.
    * @param bus - The bus instance for trigger operations.
    * @returns Array of hash triggers to register with `HashTriggerService`.
    */
-  readonly createTriggers: (bus: TBus) => HashTrigger<TBus>[];
+  readonly createHashTriggers: (bus: TBus) => HashTrigger<TBus>[];
 }
 /**
  * Session event action contribution surface declared by an extension.
@@ -3399,14 +3406,14 @@ interface MakaioExtension$1<THostContext extends ExtensionContext$1 = NodeExtens
   /**
    * Hash trigger factory for this extension.
    *
-   * When present, the runtime calls `createTriggers(bus)` after all
+   * When present, the runtime calls `createHashTriggers(bus)` after all
    * dependencies are loaded, then registers the returned triggers with
    * `HashTriggerService`.
    *
-   * Extensions declaring triggers should depend on `'hash-trigger'` to ensure
-   * the service exists when triggers are registered.
+   * Extensions declaring hash triggers should depend on `'hash-trigger'` to
+   * ensure the service exists when triggers are registered.
    */
-  readonly triggers?: ExtensionTriggersContribution<THostContext['bus']>;
+  readonly hashTriggers?: ExtensionHashTriggersContribution<THostContext['bus']>;
   /**
    * Session event action factory for this extension.
    *
@@ -3425,12 +3432,13 @@ interface MakaioExtension$1<THostContext extends ExtensionContext$1 = NodeExtens
    */
   readonly bootstrap?: ExtensionBootstrap<THostContext['bus']>;
   /**
-   * Workflow trigger and step block declarations for the workflow builder.
+   * Workflow step block declarations for the workflow builder.
    *
    * When present, the runtime reads `blocks` during extension activation and
    * registers each block with the workflow block registry. Blocks are purely
-   * declarative — no runtime context is required. Use {@link WorkflowTriggerBlock}
-   * and {@link WorkflowStepBlock} to define blocks with typed Zod schemas.
+   * declarative — no runtime context is required. Use {@link WorkflowStepBlock}
+   * to define blocks with typed Zod schemas. Workflow start conditions are
+   * contributed through {@link automationTriggers} instead.
    */
   readonly workflowBlocks?: ExtensionWorkflowBlocksContribution;
   /**
@@ -3499,6 +3507,36 @@ interface MakaioExtension$1<THostContext extends ExtensionContext$1 = NodeExtens
    * declares surface bindings.
    */
   readonly surfaceBindings?: ExtensionSurfaceBindingsContribution;
+  /**
+   * Reaction factory contributed by this extension.
+   *
+   * When present, the runtime calls `createReactions(ctx)` during extension
+   * activation and registers the returned {@link ReactionDefinition}s with the
+   * Reaction registry. Reactions are namespaced `<extension-name>.<reaction-name>`;
+   * the registry enforces the prefix at contribution time.
+   *
+   * Reaction definitions carry live Zod parameter schemas and trusted
+   * handlers — they are runtime values and must never be included in
+   * serializable descriptor metadata. Descriptor metadata may advertise a
+   * Reaction for discovery, but only this executable surface installs it.
+   */
+  readonly reactions?: ExtensionReactionsContribution<THostContext>;
+  /**
+   * Automation trigger factory contributed by this extension.
+   *
+   * When present, the runtime calls `createAutomationTriggers(ctx)` during
+   * extension activation and registers the returned
+   * {@link AutomationTriggerType}s with the automation trigger registry.
+   * Trigger `kind` values must be prefixed with the contributing extension's
+   * name; the registry enforces this at contribution time.
+   *
+   * Trigger definitions carry live Zod parameter and event schemas plus a
+   * trusted `activate` factory — they are runtime values and must never be
+   * included in serializable descriptor metadata. Use
+   * {@link createAutomationTriggerDescriptor} to produce the serializable
+   * representation for Builder discovery.
+   */
+  readonly automationTriggers?: ExtensionAutomationTriggersContribution<THostContext>;
   /**
    * Declarative transition rules contributed by this extension.
    *
@@ -3851,7 +3889,7 @@ declare const ExtensionDescriptorSchema: z.ZodObject<{
       name: z.ZodString;
       description: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>>;
-    triggers: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
+    hashTriggers: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
       prefix: z.ZodString;
       description: z.ZodOptional<z.ZodString>;
       stage: z.ZodOptional<z.ZodEnum<{
@@ -3904,7 +3942,7 @@ declare const ExtensionDescriptorSchema: z.ZodObject<{
       pages: z.ZodOptional<z.ZodBoolean>;
       routes: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
-  }, z.core.$strip>>;
+  }, z.core.$strict>>;
   version: z.ZodString;
   makaio: z.ZodReadonly<z.ZodObject<{
     framework: z.ZodString;
@@ -3915,8 +3953,8 @@ declare const ExtensionDescriptorSchema: z.ZodObject<{
     cli: z.ZodOptional<z.ZodUnion<readonly [z.ZodLiteral<true>, z.ZodString]>>;
   }, z.core.$strip>>;
   execution: z.ZodOptional<z.ZodEnum<{
-    embedded: "embedded";
     detached: "detached";
+    embedded: "embedded";
   }>>;
   transport: z.ZodOptional<z.ZodDiscriminatedUnion<[z.ZodObject<{
     command: z.ZodString;
@@ -4034,4 +4072,4 @@ interface ExtensionConfigProvider$1 {
   loadEnabled(name: string): boolean | undefined;
 }
 //#endregion
-export { PluginToolCallFormatterInput as $, ContributionManifestSchema as $n, SessionEventActionDeclaration as $t, BootstrapImportResult as A, TrayManifest$1 as An, GatheredEntry as At, LogImportContribution as B, CapabilityToken as Bn, ActionShortcutModifiers as Bt, BootstrapAsset as C, ExtensionManifestSchema as Cn, UiContextValueMap as Ct, BootstrapExportContext as D, StorageDialect$1 as Dn, UiScope$1 as Dt, BootstrapDiscoverContext as E, STORAGE_DIALECTS as En, UiRuntimeNavigationLevel as Et, ExtensionNamespaceContribution as F, WindowParamSpecSchema as Fn, HashTriggerStage as Ft, LoaderContext as G, AdapterManifest as Gn, ExecuteResult as Gt, ExtensionConfigComponentLoader as H, CapabilityTokenSchema as Hn, EntrypointConfig as Ht, ExtensionSessionEventActionsContribution as I, WindowStyle as In, HashTriggerSuggestResult as It, MakaioWebUiComponentProps as J, ArtifactLifecycleHookManifest as Jn, PickerConfig as Jt, MakaioWebUiAction as K, AdapterManifestSchema as Kn, MessageEventFilter as Kt, ExtensionToolsContribution as L, allMigrationsPaths as Ln, ActionCategory as Lt, ExtensionBootstrap as M, WindowManifest as Mn, HashTrigger as Mt, getBootstrapAssetKey as N, WindowManifestSchema as Nn, HashTriggerContext as Nt, BootstrapExportResult as O, StorageManifest as On, UiScopeMap as Ot, AdapterContribution as P, WindowParamSpec as Pn, HashTriggerMetadata as Pt, PluginFormattedToolCallOutput as Q, ContributionManifest as Qn, SessionEventActionContext as Qt, ExtensionTriggersContribution as R, dep$1 as Rn, ActionCategoryMap as Rt, MakaioNodeExtension$1 as S, ExtensionManifest as Sn, UiContextSnapshot$1 as St, BootstrapChoice as T, RuntimeRequirementSchema as Tn, UiNavigationLevelMap as Tt, ExtensionConfigComponentProps as U, AdapterClientRef$1 as Un, EventFilter as Ut, ExtensionWorkflowBlocksContribution as V, CapabilityTokenMap as Vn, CreateSessionEventActionResult as Vt, ExtensionFieldTypeLoader as W, AdapterClientRefSchema as Wn, ExecuteContext as Wt, MakaioWebUiRoute as X, ClientManifest as Xn, SelectionChangeContext as Xt, MakaioWebUiLoader as Y, ArtifactLifecycleHookManifestSchema as Yn, PickerOpenContext as Yt, PromisifiedActions as Z, ClientManifestSchema as Zn, SelectionFeedback as Zt, ExtensionArtifactLifecycleHooksContribution as _, CliManifestSchema as _n, TileDeclaration as _t, DetachedTransportSchema as a, ExtensionCliBeforeRunResult as an, ProtocolRefSchema as ar, PageMode as at, ExtensionRuntimeBootContribution as b, ExtensionDependency as bn, TileRenderers as bt, ExtensionDescriptorBase as c, ExtensionCliInteractiveContext as cn, SessionEventActionManifest as cr, SlotId as ct, ExtensionEntrypoints as d, AdapterDefinitionContract$1 as dn, TriggerManifestSchema as dr, WidgetDeclaration as dt, SessionEventActionOptions as en, LogImporterManifest as er, PluginTransformedContent as et, ExtensionEntrypointsSchema as f, AdapterProviderDefinitionContract$1 as fn, TriggerStage as fr, WidgetDefinition as ft, ArtifactLifecycleHooksContributionContext as g, CliManifest as gn, BrowserEntrypointSchema$1 as gr, TileCapabilities as gt, safeParseExtensionDescriptor$1 as h, CliArgManifestSchema as hn, BrowserEntrypoint as hr, WidgetSize$1 as ht, DetachedTransportConfig as i, ExtensionCliBeforeRunContext as in, ProtocolRef as ir, PageDeclaration as it, BootstrapResult as j, TrayManifestSchema as jn, HashSuggestion as jt, BootstrapImportContext as k, StorageManifestSchema as kn, GatheredContext as kt, ExtensionDescriptorParseResult as l, ExtensionCliOutputWriter as ln, SessionEventActionManifestSchema as lr, SlotPlacementDeclaration as lt, parseExtensionDescriptor$1 as m, CliArgManifest as mn, UiSurfaceFlagsSchema as mr, WidgetRenderers as mt, parseExtensionConfig as n, WhenContext as nn, ProtocolConfig as nr, ToolCallFormatterDeclaration as nt, EmbeddedDescriptor as o, ExtensionCliContribution as on, ProviderManifest as or, SlotContentDeclaration as ot, isDetachedDescriptor$1 as p, AdapterProviderRef$1 as pn, UiSurfaceFlags as pr, WidgetProps as pt, MakaioWebUiActions as q, ArtifactLifecycleHookEventSchema as qn, MessageRole as qt, DetachedDescriptor as r, ExtensionRuntimeOwnership as rn, ProtocolConfigSchema as rr, PageComponentProps as rt, ExtensionDescriptor$1 as s, ExtensionCliHandlerContext as sn, ProviderManifestSchema as sr, SlotDeclaration as st, ExtensionConfigProvider$1 as t, StructuralEventFilter as tn, LogImporterManifestSchema as tr, PluginTransformedContentType as tt, ExtensionDescriptorSchema as u, ExtensionCliSubcommandEntry as un, TriggerManifest as ur, WidgetSize as ut, ExtensionContributionProcessor$1 as v, CliSubcommandManifest as vn, TileIconLoader as vt, BootstrapAssetKey as w, RuntimeRequirement as wn, UiNavigationLevel$1 as wt, MakaioExtension$1 as x, ExtensionDependencySchema as xn, UiContextDimension as xt, ExtensionRuntimeBootContext as y, CliSubcommandManifestSchema as yn, TileProps as yt, ExtensionUiContribution as z, primaryMigrationsPath$1 as zn, ActionShortcut as zt };
+export { PluginToolCallFormatterInput as $, ContributionManifestSchema as $n, SessionEventActionDeclaration as $t, BootstrapImportResult as A, TrayManifest$1 as An, GatheredEntry as At, LogImportContribution as B, CapabilityToken as Bn, ActionShortcutModifiers as Bt, BootstrapAsset as C, ExtensionManifestSchema as Cn, UiContextValueMap as Ct, BootstrapExportContext as D, StorageDialect$1 as Dn, UiScope$1 as Dt, BootstrapDiscoverContext as E, STORAGE_DIALECTS as En, UiRuntimeNavigationLevel as Et, ExtensionHashTriggersContribution as F, WindowParamSpecSchema as Fn, HashTriggerStage as Ft, LoaderContext as G, AdapterManifest as Gn, ExecuteResult as Gt, ExtensionConfigComponentLoader as H, CapabilityTokenSchema as Hn, EntrypointConfig as Ht, ExtensionNamespaceContribution as I, WindowStyle as In, HashTriggerSuggestResult as It, MakaioWebUiComponentProps as J, ArtifactLifecycleHookManifest as Jn, PickerConfig as Jt, MakaioWebUiAction as K, AdapterManifestSchema as Kn, MessageEventFilter as Kt, ExtensionSessionEventActionsContribution as L, allMigrationsPaths as Ln, ActionCategory as Lt, ExtensionBootstrap as M, WindowManifest as Mn, HashTrigger as Mt, getBootstrapAssetKey as N, WindowManifestSchema as Nn, HashTriggerContext as Nt, BootstrapExportResult as O, StorageManifest as On, UiScopeMap as Ot, AdapterContribution as P, WindowParamSpec as Pn, HashTriggerMetadata as Pt, PluginFormattedToolCallOutput as Q, ContributionManifest as Qn, SessionEventActionContext as Qt, ExtensionToolsContribution as R, dep$1 as Rn, ActionCategoryMap as Rt, MakaioNodeExtension$1 as S, ExtensionManifest as Sn, UiContextSnapshot$1 as St, BootstrapChoice as T, RuntimeRequirementSchema as Tn, UiNavigationLevelMap as Tt, ExtensionConfigComponentProps as U, AdapterClientRef$1 as Un, EventFilter as Ut, ExtensionWorkflowBlocksContribution as V, CapabilityTokenMap as Vn, CreateSessionEventActionResult as Vt, ExtensionFieldTypeLoader as W, AdapterClientRefSchema as Wn, ExecuteContext as Wt, MakaioWebUiRoute as X, ClientManifest as Xn, SelectionChangeContext as Xt, MakaioWebUiLoader as Y, ArtifactLifecycleHookManifestSchema as Yn, PickerOpenContext as Yt, PromisifiedActions as Z, ClientManifestSchema as Zn, SelectionFeedback as Zt, ExtensionArtifactLifecycleHooksContribution as _, CliManifestSchema as _n, TileDeclaration as _t, DetachedTransportSchema as a, ExtensionCliBeforeRunResult as an, ProtocolConfig as ar, PageMode as at, ExtensionRuntimeBootContribution as b, ExtensionDependency as bn, TileRenderers as bt, ExtensionDescriptorBase as c, ExtensionCliInteractiveContext as cn, ProtocolRefSchema as cr, SlotId as ct, ExtensionEntrypoints as d, AdapterDefinitionContract$1 as dn, SessionEventActionManifest as dr, WidgetDeclaration as dt, SessionEventActionOptions as en, HashTriggerManifest as er, PluginTransformedContent as et, ExtensionEntrypointsSchema as f, AdapterProviderDefinitionContract$1 as fn, SessionEventActionManifestSchema as fr, WidgetDefinition as ft, ArtifactLifecycleHooksContributionContext as g, CliManifest as gn, BrowserEntrypointSchema$1 as gr, TileCapabilities as gt, safeParseExtensionDescriptor$1 as h, CliArgManifestSchema as hn, BrowserEntrypoint as hr, WidgetSize$1 as ht, DetachedTransportConfig as i, ExtensionCliBeforeRunContext as in, LogImporterManifestSchema as ir, PageDeclaration as it, BootstrapResult as j, TrayManifestSchema as jn, HashSuggestion as jt, BootstrapImportContext as k, StorageManifestSchema as kn, GatheredContext as kt, ExtensionDescriptorParseResult as l, ExtensionCliOutputWriter as ln, ProviderManifest as lr, SlotPlacementDeclaration as lt, parseExtensionDescriptor$1 as m, CliArgManifest as mn, UiSurfaceFlagsSchema as mr, WidgetRenderers as mt, parseExtensionConfig as n, WhenContext as nn, HashTriggerStageManifest as nr, ToolCallFormatterDeclaration as nt, EmbeddedDescriptor as o, ExtensionCliContribution as on, ProtocolConfigSchema as or, SlotContentDeclaration as ot, isDetachedDescriptor$1 as p, AdapterProviderRef$1 as pn, UiSurfaceFlags as pr, WidgetProps as pt, MakaioWebUiActions as q, ArtifactLifecycleHookEventSchema as qn, MessageRole as qt, DetachedDescriptor as r, ExtensionRuntimeOwnership as rn, LogImporterManifest as rr, PageComponentProps as rt, ExtensionDescriptor$1 as s, ExtensionCliHandlerContext as sn, ProtocolRef as sr, SlotDeclaration as st, ExtensionConfigProvider$1 as t, StructuralEventFilter as tn, HashTriggerManifestSchema as tr, PluginTransformedContentType as tt, ExtensionDescriptorSchema as u, ExtensionCliSubcommandEntry as un, ProviderManifestSchema as ur, WidgetSize as ut, ExtensionContributionProcessor$1 as v, CliSubcommandManifest as vn, TileIconLoader as vt, BootstrapAssetKey as w, RuntimeRequirement as wn, UiNavigationLevel$1 as wt, MakaioExtension$1 as x, ExtensionDependencySchema as xn, UiContextDimension as xt, ExtensionRuntimeBootContext as y, CliSubcommandManifestSchema as yn, TileProps as yt, ExtensionUiContribution as z, primaryMigrationsPath$1 as zn, ActionShortcut as zt };