@makaio/framework 1.0.0-dev-1787670559522 → 1.0.0-dev-1788258714339

package/dist/{index-Bl7KWFod.d.mts → index-4KJ6IDE7.d.mts}

@@ -1,4 +1,4 @@
-import { D as ClientDefinitionInput, E as ClientDefinition } from "./hook-responses-uCXAICTU.mjs";
+import { D as ClientDefinitionInput, E as ClientDefinition } from "./hook-responses-9Ywsqzzq.mjs";
 import * as _$zod from "zod";
 import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
@@ -90,8 +90,8 @@ declare const ClientSchemas: {
       projectDir: z.ZodOptional<z.ZodString>;
       configInheritance: z.ZodOptional<z.ZodEnum<{
         empty: "empty";
-        "auth-only": "auth-only";
         full: "full";
+        "auth-only": "auth-only";
       }>>;
     }, z.core.$strip>;
     response: z.ZodObject<{
@@ -1676,8 +1676,8 @@ declare const ClientNamespace: _$_makaio_core0.BusNamespaceDefinition<"client",
       projectDir: _$zod.ZodOptional<_$zod.ZodString>;
       configInheritance: _$zod.ZodOptional<_$zod.ZodEnum<{
         empty: "empty";
-        "auth-only": "auth-only";
         full: "full";
+        "auth-only": "auth-only";
       }>>;
     }, _$zod_v4_core0.$strip>;
     response: _$zod.ZodObject<{
@@ -2316,8 +2316,8 @@ declare const ClientSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatSu
       projectDir: _$zod.ZodOptional<_$zod.ZodString>;
       configInheritance: _$zod.ZodOptional<_$zod.ZodEnum<{
         empty: "empty";
-        "auth-only": "auth-only";
         full: "full";
+        "auth-only": "auth-only";
       }>>;
     }, _$zod_v4_core0.$strip>;
     response: _$zod.ZodObject<{
@@ -2979,8 +2979,8 @@ declare const SessionConfigEnvSchema: z.ZodRecord<z.ZodString, z.ZodString>;
  */
 declare const SessionConfigInheritanceSchema: z.ZodEnum<{
   empty: "empty";
-  "auth-only": "auth-only";
   full: "full";
+  "auth-only": "auth-only";
 }>;
 type SessionConfigInheritance = z.infer<typeof SessionConfigInheritanceSchema>;
 /**
@@ -3137,8 +3137,8 @@ declare const ClientSessionConfigSchemas: {
       projectDir: z.ZodOptional<z.ZodString>;
       configInheritance: z.ZodOptional<z.ZodEnum<{
         empty: "empty";
-        "auth-only": "auth-only";
         full: "full";
+        "auth-only": "auth-only";
       }>>;
     }, z.core.$strip>;
     response: z.ZodObject<{
@@ -3193,8 +3193,8 @@ declare const SessionConfigSetupRequestSchema: z.ZodObject<{
   }>;
   configInheritance: z.ZodEnum<{
     empty: "empty";
-    "auth-only": "auth-only";
     full: "full";
+    "auth-only": "auth-only";
   }>;
 }, z.core.$strip>;
 type SessionConfigSetupRequest = z.infer<typeof SessionConfigSetupRequestSchema>;

package/dist/{index-CfiCJPP6.d.mts → index-B0VO0rAl.d.mts}

@@ -1,4 +1,4 @@
-import { n as NodeExtensionContext$1, t as ExtensionContext$1 } from "./extension-context-DzB7ydM3.mjs";
+import { n as NodeExtensionContext$1, t as ExtensionContext$1 } from "./extension-context-QmFuHdq5.mjs";
 import { z } from "zod";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
 

package/dist/{index-DI7-tIL3.d.mts → index-B0yMCJW8.d.mts}

@@ -1,6 +1,6 @@
-import { r as ExecutionTarget } from "./schemas-CeUI2i5j.mjs";
+import { r as ExecutionTarget } from "./schemas-B50oWBuj.mjs";
 import { IMakaioBus } from "@makaio/framework/bus";
-import { IMakaioSession, MakaioSessionAgent, Message, MessageInput, MessageOutcome, ReasoningLevelMap, ResponseSchemaDescriptor, SessionContext, TurnInitiator } from "@makaio/framework/contracts";
+import { IMakaioSession, MakaioSessionAgent, Message, MessageInput, MessageOutcome, ReasoningLevelMap, ResponseSchemaDescriptor, SessionContext, SessionOwnershipRecoveryGuard, TurnInitiator } from "@makaio/framework/contracts";
 
 //#region services/core/src/session/entities/turn.d.ts
 /**
@@ -575,6 +575,8 @@ interface OwnedAdapterInstance {
   readonly adapterId: string;
   /** Machine whose namespace those acts are filed under, or `undefined` when the caller named none. */
   readonly machineId?: string;
+  /** Exact runtime owner, absent only before a connector-dispatchable target is proved. */
+  readonly ownerInstanceId?: string;
 }
 /**
  * An owned instance whose machine is named.
@@ -589,6 +591,7 @@ interface OwnedAdapterInstance {
  */
 type MachineScopedAdapterInstance = OwnedAdapterInstance & {
   readonly machineId: string;
+  readonly ownerInstanceId: string;
 };
 /** What a caller knows about the instance it wants, before it is resolved. */
 interface OwnedAdapterInstanceTarget {
@@ -618,6 +621,18 @@ interface OwnedAdapterInstanceTarget {
    */
   readonly storedAdapterId?: string;
 }
+/**
+ * Prove that an explicitly selected adapter instance is currently live on the
+ * exact machine the selection names.
+ *
+ * The proof is announcement-backed rather than hash-backed: hosts may provide
+ * opaque adapter IDs, and a deterministic-looking value is not evidence that a
+ * runtime has initialized it.
+ * @param bus - Bus the live-identity request is issued on.
+ * @param target - Complete identity the caller intends to dispatch to.
+ * @returns The dispatchable instance, or `undefined` when it has no matching live announcement.
+ */
+declare function resolveAnnouncedAdapterInstance(bus: IMakaioBus, target: Required<Pick<OwnedAdapterInstanceTarget, 'adapterId' | 'adapterName' | 'machineId'>>): Promise<MachineScopedAdapterInstance | undefined>;
 /**
  * Resolve the instance an attempt addresses **and** the machine it acts for, or
  * answer that this runtime may not act at all.
@@ -633,9 +648,10 @@ interface OwnedAdapterInstanceTarget {
  *
  * **The three answers, and why each is the honest one:**
  *
- * - **A named instance with its machine** is returned unresolved. The caller
- *   already holds both halves from one source — the selection schema refuses the
- *   pair any other way — so there is nothing to look up and nothing to second-guess.
+ * - **A named instance with its machine** is returned only after the live
+ *   identity registry confirms the exact triple it announced. The selection
+ *   schema proves the request is complete; the announcement proves the target
+ *   currently exists, including when its host supplied an opaque ID.
  * - **A named instance without a machine** is `undefined`. This is the handler-side
  *   half of the schema's refinement, and it is needed as well as the schema:
  *   the test bus does not validate, and defaulting to this runtime's own identity
@@ -704,7 +720,7 @@ type SessionStartFailureCode = /** The adapter refused or threw; the reservation
  * `dead` — the durable state must not advertise a start whose settlement
  * this process can no longer vouch for.
  */
-| 'settlement-unresolved' /** A joined start left the row `starting` more often than the bounded re-read allows. */ | 'start-unresolved' /** Another start won the lead designation and the session still has no agents. */ | 'lead-conflict';
+| 'settlement-unresolved' /** A joined start left the row `starting` more often than the bounded re-read allows. */ | 'start-unresolved' /** Another start won the lead designation and the session still has no agents. */ | 'lead-conflict' /** The session lifecycle gate rejected the reservation before adapter dispatch. */ | 'session-not-active';
 /** A reserved start that did not end with a usable agent. */
 declare class SessionStartError extends Error {
   readonly code: SessionStartFailureCode;
@@ -725,13 +741,16 @@ declare class SessionStartError extends Error {
    * crossing a transport that may not preserve custom error properties.
    */
   readonly deferredAgentIds?: readonly string[];
+  /** Stored lifecycle status when the admission gate rejected a reservation. */
+  readonly sessionStatus?: 'closed' | 'archived' | 'discovered';
   /**
    * @param code - Which modeled outcome this is; the value callers branch on.
    * @param message - Human-readable detail, including the identifiers involved.
    * @param cause - Underlying failure, when one exists.
    * @param deferredAgentIds - The named targets this call could not act for, when the send named any.
+   * @param sessionStatus - Non-active session status observed by a refused reservation.
    */
-  constructor(code: SessionStartFailureCode, message: string, cause?: unknown, deferredAgentIds?: readonly string[]);
+  constructor(code: SessionStartFailureCode, message: string, cause?: unknown, deferredAgentIds?: readonly string[], sessionStatus?: 'closed' | 'archived' | 'discovered');
 }
 //#endregion
 //#region services/core/src/session/handlers/abandon-handler.d.ts
@@ -797,13 +816,15 @@ declare function registerMergeHandler(bus: IMakaioBus): () => void;
 //#endregion
 //#region services/core/src/session/handlers/in-flight-start-join.d.ts
 /** What a consumer does with an agent whose start it joined or arbitrated. */
-type StartResolution = /** The agent is usable as it stands. */'use' /** The agent is not part of this send: the row is gone, or terminal. */ | 'drop' /** The agent needs the ordinary fresh-with-history recovery. */ | 'recover';
+type StartResolution = /** The agent is usable as it stands. */'use' /** The agent is not part of this send: the row is gone, or terminal. */ | 'drop' /** The agent belongs to a guarded recovery this runtime cannot prove retired. */ | 'defer' /** The agent needs the ordinary fresh-with-history recovery. */ | 'recover';
 /** How a send's target set changed once every in-flight start was resolved. */
 interface InFlightStartResolution {
   /** Agents that left the session's target set — deleted or `disposed` rows. */
   readonly droppedAgentIds: ReadonlySet<string>;
   /** Agents this send must recover before using. */
   readonly recoveringAgentIds: ReadonlySet<string>;
+  /** Agents whose guarded recovery is owned by an unretired or unknown runtime. */
+  readonly deferredAgentIds: ReadonlySet<string>;
   /**
    * The subset whose recovery this send claimed by **compare-and-swap**, not by
    * consuming a local attempt.
@@ -823,7 +844,9 @@ interface InFlightStartResolution {
  * Apply the in-flight-start consumer rule to a session's agents.
  *
  * Runs *before* the liveness probe and before the fresh-start branch, and only
- * for agents whose stored status is `starting` — every other row costs nothing.
+ * for agents whose stored status is `starting`. When this process waits for one
+ * of those starts, every materialized row is re-read to a stable pass;
+ * otherwise they cost nothing.
  * The ordering matters at both ends: probing a `starting` agent would find no
  * registered connector and walk into a second lifecycle for an identity that
  * already has one in flight, and an agent dropped here may be the session's last,
@@ -832,10 +855,12 @@ interface InFlightStartResolution {
  * Dropped agents are removed from `session.agents` in place, and every agent that
  * survives is **replaced by the row this resolution read**, so every later step
  * of the send sees both the target set and the identities this resolution
- * produced. The second half matters as much as the first: a joined attempt can
- * bind its agent to a different adapter instance, and a send that kept the
- * pre-join snapshot would probe liveness and route at the instance that attempt
- * moved off.
+ * produced. A local join also refreshes every materialized row: every one was
+ * read before the wait, and the send probes and routes at all of their
+ * identities afterwards. The second half matters as much as the first: a joined
+ * attempt can bind an agent to a different adapter instance, and a send that
+ * kept the pre-join snapshot would probe liveness and route at the instance the
+ * lifecycle moved off.
  * @param bus - Bus the joins, reads and compare-and-swaps are issued on.
  * @param session - Session whose agents are resolved; its `agents` are filtered and refreshed in place.
  * @returns Which agents left the set, and which the send must recover.
@@ -1019,4 +1044,4 @@ declare function routeToAgentsCore(bus: IMakaioBus, session: IMakaioSession, age
   adapterId: string;
 }>, message: MessageInput, messageId: string, turn: Turn$1, deliveryMode: 'enqueue' | 'immediate' | undefined, onTurnComplete: TurnCompleteCallback, turnManager: TurnCompletionRecorder, sessionContext?: SessionContext, responseSchema?: ResponseSchemaDescriptor, assertDispatch?: () => void): Promise<readonly AgentDispatchOutcome[]>;
 //#endregion
-export { Turn$1 as C, TurnPairTerminalOutcome as D, TurnPairStateChange as E, TurnResult as O, SessionTurnManager as S, TurnContext as T, OwnedAdapterInstanceTarget as _, InFlightStartResolution as a, resolveModelCapabilities as b, registerMergeHandler as c, registerAttachHandler as d, registerAbandonHandler as f, OwnedAdapterInstance as g, MachineScopedAdapterInstance as h, refuseTotalDeferral as i, registerForkHandler as l, SessionStartFailureCode as m, routeToAgents as n, StartResolution as o, SessionStartError as p, admitFreshStartTargets as r, resolveInFlightStarts as s, routeToAgentsCore as t, registerCompressHandler as u, resolveAdapterId as v, TurnConfig as w, resolveOwnedAdapterInstance as x, resolveExecutionTarget as y };
+export { SessionTurnManager as C, TurnPairStateChange as D, TurnContext as E, TurnPairTerminalOutcome as O, resolveOwnedAdapterInstance as S, TurnConfig as T, OwnedAdapterInstanceTarget as _, InFlightStartResolution as a, resolveExecutionTarget as b, registerMergeHandler as c, registerAttachHandler as d, registerAbandonHandler as f, OwnedAdapterInstance as g, MachineScopedAdapterInstance as h, refuseTotalDeferral as i, TurnResult as k, registerForkHandler as l, SessionStartFailureCode as m, routeToAgents as n, StartResolution as o, SessionStartError as p, admitFreshStartTargets as r, resolveInFlightStarts as s, routeToAgentsCore as t, registerCompressHandler as u, resolveAdapterId as v, Turn$1 as w, resolveModelCapabilities as x, resolveAnnouncedAdapterInstance as y };

package/dist/{index-BQprJNA_.d.mts → index-B9V3T4EQ.d.mts}

@@ -146,6 +146,7 @@ declare const HarnessDefinitionCreateSchema: z.ZodObject<{
     enabled: z.ZodArray<z.ZodString>;
     disabled: z.ZodArray<z.ZodString>;
   }, z.core.$strip>;
+  credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
   registryTools: z.ZodObject<{
     enabled: z.ZodArray<z.ZodString>;
     disabled: z.ZodArray<z.ZodString>;
@@ -175,7 +176,6 @@ declare const HarnessDefinitionCreateSchema: z.ZodObject<{
     "always-ask": "always-ask";
     "full-access": "full-access";
   }>>>;
-  credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
   approvalPolicy: z.ZodOptional<z.ZodEnum<{
     reject: "reject";
     "always-ask": "always-ask";
@@ -322,6 +322,7 @@ declare const HarnessSchemas: {
         enabled: z.ZodArray<z.ZodString>;
         disabled: z.ZodArray<z.ZodString>;
       }, z.core.$strip>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
       registryTools: z.ZodObject<{
         enabled: z.ZodArray<z.ZodString>;
         disabled: z.ZodArray<z.ZodString>;
@@ -351,7 +352,6 @@ declare const HarnessSchemas: {
         "always-ask": "always-ask";
         "full-access": "full-access";
       }>>>;
-      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
       approvalPolicy: z.ZodOptional<z.ZodEnum<{
         reject: "reject";
         "always-ask": "always-ask";
@@ -765,6 +765,7 @@ declare const HarnessNamespace: _$_makaio_core0.BusNamespaceDefinition<"harness"
         enabled: z.ZodArray<z.ZodString>;
         disabled: z.ZodArray<z.ZodString>;
       }, z.core.$strip>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
       registryTools: z.ZodObject<{
         enabled: z.ZodArray<z.ZodString>;
         disabled: z.ZodArray<z.ZodString>;
@@ -794,7 +795,6 @@ declare const HarnessNamespace: _$_makaio_core0.BusNamespaceDefinition<"harness"
         "always-ask": "always-ask";
         "full-access": "full-access";
       }>>>;
-      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
       approvalPolicy: z.ZodOptional<z.ZodEnum<{
         reject: "reject";
         "always-ask": "always-ask";
@@ -1208,6 +1208,7 @@ declare const HarnessSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatS
         enabled: z.ZodArray<z.ZodString>;
         disabled: z.ZodArray<z.ZodString>;
       }, z.core.$strip>;
+      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
       registryTools: z.ZodObject<{
         enabled: z.ZodArray<z.ZodString>;
         disabled: z.ZodArray<z.ZodString>;
@@ -1237,7 +1238,6 @@ declare const HarnessSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatS
         "always-ask": "always-ask";
         "full-access": "full-access";
       }>>>;
-      credentials: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
       approvalPolicy: z.ZodOptional<z.ZodEnum<{
         reject: "reject";
         "always-ask": "always-ask";