@makaio/framework 1.0.0-dev-1789178780636 → 1.0.0-dev-1789234461336

package/dist/runtime-node/workflow-execution-bus-access.d.mts

@@ -24,14 +24,20 @@ interface MintWorkflowExecutionBusSecretParams {
    */
   readonly executionId: string;
   /**
-   * Optional subject restriction list for this execution attempt.
+   * Optional outbound message restriction list for this execution attempt.
    *
-   * The transport accepts only matching messages and subscription
-   * advertisements from the peer. Server-to-peer request routing still
-   * requires a matching advertised subscription. When omitted, the default
-   * list from {@link buildExecutionAttemptAllowedSubjects} is used.
+   * When omitted, the default message subjects from
+   * {@link buildExecutionAttemptSubjectAccess} are used.
    */
-  readonly allowedSubjects?: readonly string[];
+  readonly allowedMessageSubjects?: readonly string[];
+  /**
+   * Optional subscription restriction list for this execution attempt.
+   *
+   * When omitted, the default subscription subjects from
+   * {@link buildExecutionAttemptSubjectAccess} are used. Server-to-peer
+   * request routing still requires a matching advertised subscription.
+   */
+  readonly allowedSubscriptionSubjects?: readonly string[];
 }
 /** Parameters for registering a caller-provided workflow execution bus secret. */
 interface RegisterWorkflowExecutionBusSecretParams extends MintWorkflowExecutionBusSecretParams {
@@ -45,27 +51,38 @@ interface RotateWorkflowExecutionBusSecretParams {
   /** Parent workflow execution identifier that must match the registered claim. */
   readonly executionId: string;
 }
+/** Directional subject restrictions for an execution-attempt identity. */
+interface ExecutionAttemptSubjectAccess {
+  /** Subjects the attempt may send to the authority. */
+  readonly allowedMessageSubjects: readonly string[];
+  /** Subjects the attempt may advertise to receive from the authority. */
+  readonly allowedSubscriptionSubjects: readonly string[];
+}
 /**
- * Build the complete allowed-subjects list for a workflow execution attempt.
+ * Build the complete directional subject restrictions for a workflow execution
+ * attempt.
  *
- * The returned list includes all static subjects that any execution attempt
- * may need, plus the dynamic per-execution cancel subject. Subjects are
- * statically enumerable even when the workflow content does not use every
- * feature (e.g. state, delegation, artifacts, subagents) because the
- * transport restriction is deny-by-default: listing a subject that the
+ * Message subjects include every static operation an attempt may originate.
+ * Subscription subjects include only the authority-delivered operation,
+ * control, and gate-response endpoints plus the dynamic per-execution
+ * cancellation endpoint.
+ * Subjects are statically enumerable even when the workflow content does not
+ * use every feature (e.g. state, delegation, artifacts, subagents) because
+ * the transport restriction is deny-by-default: listing a subject that the
  * workflow never uses has no security impact. Delegate result finalization is
  * routed through the static Authority gateway; dynamic finalizer subjects are
  * never exposed to remote attempts.
  * @param executionId - Workflow execution identifier for the dynamic cancel subject.
- * @returns Complete allowed-subjects list for the execution attempt.
+ * @returns Complete directional subject restrictions for the execution attempt.
  */
-declare function buildExecutionAttemptAllowedSubjects(executionId: string): readonly string[];
+declare function buildExecutionAttemptSubjectAccess(executionId: string): ExecutionAttemptSubjectAccess;
 /**
  * Register caller-provided bus access for one workflow execution attempt.
  *
  * Use this when a provider already owns secret delivery. The identity still
- * receives the canonical execution peer kind, claim, and subject restriction.
- * @param params - Attempt identity, execution claim, secret, and optional subject restriction.
+ * receives the canonical execution peer kind, claim, and directional subject
+ * restrictions.
+ * @param params - Attempt identity, execution claim, secret, and optional directional restrictions.
  * @returns Registered secret plus cleanup handle.
  */
 declare function registerWorkflowExecutionBusSecret(params: RegisterWorkflowExecutionBusSecretParams): WorkflowExecutionBusSecret;
@@ -77,9 +94,9 @@ declare function registerWorkflowExecutionBusSecret(params: RegisterWorkflowExec
  * claim so bus handlers can verify execution-bound access via
  * `peer.claims.executionId`.
  *
- * When `params.allowedSubjects` is not provided, the default allowed-subjects
- * list from {@link buildExecutionAttemptAllowedSubjects} is used to restrict
- * the identity to the minimum set of bus subjects a worker needs.
+ * When directional restrictions are not provided, the default matrix from
+ * {@link buildExecutionAttemptSubjectAccess} restricts the identity to the
+ * minimum outbound and subscription subjects a worker needs.
  * @param params - Attempt and execution identifiers.
  * @returns Secret plus cleanup handle.
  */
@@ -130,4 +147,4 @@ declare function captureWorkflowExecutionBusSecretCleanup(params: RotateWorkflow
  */
 declare function resolveWorkflowExecutionBusSecret(executionAttemptId: string): string | undefined;
 //#endregion
-export { MintWorkflowExecutionBusSecretParams, RegisterWorkflowExecutionBusSecretParams, RotateWorkflowExecutionBusSecretParams, WorkflowExecutionBusSecret, buildExecutionAttemptAllowedSubjects, captureWorkflowExecutionBusSecretCleanup, mintOrRotateWorkflowExecutionBusSecret, mintWorkflowExecutionBusSecret, registerWorkflowExecutionBusSecret, resolveWorkflowExecutionBusSecret, rotateWorkflowExecutionBusSecret };
+export { ExecutionAttemptSubjectAccess, MintWorkflowExecutionBusSecretParams, RegisterWorkflowExecutionBusSecretParams, RotateWorkflowExecutionBusSecretParams, WorkflowExecutionBusSecret, buildExecutionAttemptSubjectAccess, captureWorkflowExecutionBusSecretCleanup, mintOrRotateWorkflowExecutionBusSecret, mintWorkflowExecutionBusSecret, registerWorkflowExecutionBusSecret, resolveWorkflowExecutionBusSecret, rotateWorkflowExecutionBusSecret };

package/dist/runtime-node/workflow-execution-bus-access.mjs

@@ -1 +1 @@
-import{randomBytes as e}from"node:crypto";import{getFullSubjectForSubjectDefinition as t}from"@makaio/framework/core";import{ArtifactSubjects as n,ExecutionAttemptSubjects as r,SubagentSubjects as i,WorkerSubjects as a,WorkflowSubjects as o}from"@makaio/framework/contracts";import{captureHmacIdentitySecretCleanup as s,registerHmacIdentitySecret as c,resolveHmacIdentityPeer as l,resolveHmacIdentitySecret as u,rotateHmacIdentitySecret as d}from"@makaio/framework/node/transports";import{AdapterSubsystemSubjects as f}from"@makaio/framework/services/adapter-subsystem";import{WorkflowStorageSubjects as p}from"@makaio/framework/workflow-engine";const m=[r.runtime.register,r.bootstrap.awaitStart,r.instruction.get,r.operation.admit,r.operation.report,r.operation.deliver,r.outcome.submit,r.control.deliver,r.control.report,a.runtime.inputs.get,a.control.outcome.submit,o.getRunContext,f.listAdapters,o.bootstrapAuthorityState,o.finalizeDelegateResult,p.getExecution,p.setFrame,p.setSpan,p.listFrames,p.getGateInstance,p.setGateInstance,o.frame.started,o.frame.completed,o.frame.failed,o.frame.sessionLinked,o.execution.progress,o.gate.suspended,o.gate.resumed,o.gate.resolved,o.gate.respond,o.state.get,o.state.patch,o.resolveAgent,o.resolveRole,n.kind.list,n.query,n.resolve,n.resolvePart,n.create,n.revise,n.patch,o.artifact.updated,i.spawn,i.await,i.getStatus,i.kill];function h(e){return[...m.map(t),`workflow.${e}.cancel`]}function g(e){let{executionAttemptId:t,executionId:n,secret:r}=e,i=e.allowedSubjects??h(n);return{secret:r,cleanup:c(t,r,{peerKind:`workflow-execution-attempt`,claims:{executionId:n},allowedSubjects:i})}}function _(t){let n=e(32).toString(`hex`);return g({...t,secret:n})}function v(t){let{executionAttemptId:n,executionId:r}=t,i=l(n);if(i?.kind!==`workflow-execution-attempt`||i.claims?.executionId!==r)throw Error(`Cannot rotate workflow execution bus secret: attempt "${n}" is not registered for execution "${r}"`);let a=e(32).toString(`hex`);return{secret:a,cleanup:d(n,a)}}function y(e){return u(e.executionAttemptId)===null?_(e):v(e)}function b(e){let{executionAttemptId:t,executionId:n}=e,r=l(t);if(r!==null){if(r.kind!==`workflow-execution-attempt`||r.claims?.executionId!==n)throw Error(`Cannot capture workflow execution bus secret cleanup: attempt "${t}" is not registered for execution "${n}"`);return s(t)}}function x(e){return u(e)??void 0}export{h as buildExecutionAttemptAllowedSubjects,b as captureWorkflowExecutionBusSecretCleanup,y as mintOrRotateWorkflowExecutionBusSecret,_ as mintWorkflowExecutionBusSecret,g as registerWorkflowExecutionBusSecret,x as resolveWorkflowExecutionBusSecret,v as rotateWorkflowExecutionBusSecret};
+import{randomBytes as e}from"node:crypto";import{getFullSubjectForSubjectDefinition as t}from"@makaio/framework/core";import{ArtifactSubjects as n,ExecutionAttemptSubjects as r,SubagentSubjects as i,WorkerSubjects as a,WorkflowSubjects as o}from"@makaio/framework/contracts";import{captureHmacIdentitySecretCleanup as s,registerHmacIdentitySecret as c,resolveHmacIdentityPeer as l,resolveHmacIdentitySecret as u,rotateHmacIdentitySecret as d}from"@makaio/framework/node/transports";import{AdapterSubsystemSubjects as f}from"@makaio/framework/services/adapter-subsystem";import{WorkflowStorageSubjects as p}from"@makaio/framework/workflow-engine";const m=[r.runtime.register,r.bootstrap.awaitStart,r.instruction.get,r.operation.admit,r.operation.report,r.outcome.submit,r.control.report,a.runtime.inputs.get,a.control.outcome.submit,o.getRunContext,f.listAdapters,o.bootstrapAuthorityState,o.finalizeDelegateResult,p.getExecution,p.setFrame,p.setSpan,p.listFrames,p.getGateInstance,p.setGateInstance,o.frame.started,o.frame.completed,o.frame.failed,o.frame.sessionLinked,o.execution.progress,o.gate.suspended,o.gate.resumed,o.gate.resolved,o.state.get,o.state.patch,o.resolveAgent,o.resolveRole,n.kind.list,n.query,n.resolve,n.resolvePart,n.create,n.revise,n.patch,o.artifact.updated,i.spawn,i.await,i.getStatus,i.kill],h=[r.operation.deliver,r.control.deliver,o.gate.respond];function g(e){return{allowedMessageSubjects:m.map(t),allowedSubscriptionSubjects:[...h.map(t),`workflow.${e}.cancel`]}}function _(e){if(`allowedSubjects`in e)throw Error(`Workflow execution bus access no longer accepts allowedSubjects; use allowedMessageSubjects and/or allowedSubscriptionSubjects`)}function v(e){_(e);let{executionAttemptId:n,executionId:i,secret:a}=e,o=g(i);return{secret:a,cleanup:c(n,a,{peerKind:`workflow-execution-attempt`,claims:{executionId:i},allowedMessageSubjects:e.allowedMessageSubjects??o.allowedMessageSubjects,allowedSubscriptionSubjects:e.allowedSubscriptionSubjects??o.allowedSubscriptionSubjects,requiredSubscriptionFilters:{[t(r.operation.deliver)]:{executionAttemptId:n},[t(r.control.deliver)]:{executionAttemptId:n}}})}}function y(t){_(t);let n=e(32).toString(`hex`);return v({...t,secret:n})}function b(t){let{executionAttemptId:n,executionId:r}=t,i=l(n);if(i?.kind!==`workflow-execution-attempt`||i.claims?.executionId!==r)throw Error(`Cannot rotate workflow execution bus secret: attempt "${n}" is not registered for execution "${r}"`);let a=e(32).toString(`hex`);return{secret:a,cleanup:d(n,a)}}function x(e){return _(e),u(e.executionAttemptId)===null?y(e):b(e)}function S(e){let{executionAttemptId:t,executionId:n}=e,r=l(t);if(r!==null){if(r.kind!==`workflow-execution-attempt`||r.claims?.executionId!==n)throw Error(`Cannot capture workflow execution bus secret cleanup: attempt "${t}" is not registered for execution "${n}"`);return s(t)}}function C(e){return u(e)??void 0}export{g as buildExecutionAttemptSubjectAccess,S as captureWorkflowExecutionBusSecretCleanup,x as mintOrRotateWorkflowExecutionBusSecret,y as mintWorkflowExecutionBusSecret,v as registerWorkflowExecutionBusSecret,C as resolveWorkflowExecutionBusSecret,b as rotateWorkflowExecutionBusSecret};

package/dist/runtime-node/workflow-worker/index.d.mts

@@ -1,2 +1,2 @@
-import { $ as WorkflowRuntimeAuthorityConnector, $t as materializeLocalDirectory, A as createLocalGitWorkspacePreparation, At as createWorkerBusAuth, B as HeadlessWorkflowWorkerResult, C as admitWorkflowRunOperation, Ct as createNodeWorkflowRunner, D as loadWorkflowModule, Dt as runWorkerBootstrapExchange, E as registerWorkerRuntime, Et as WorkerBootstrapExchangeOptions, F as HeadlessWorkerContributionLoader, Ft as WorkflowRunResult, G as WorkloadControlBinding, Gt as MaterializationError, H as runHeadlessWorkflowWorker, I as HeadlessWorkerExecutor, J as runWorkloadInvocation, Jt as assertContainedIn, K as WorkloadInvocationPreparation, Kt as ParsedSriIntegrity, L as HeadlessWorkerMaterializer, M as HeadlessWorkerBootstrap, Mt as IWorkflowRunner, N as HeadlessWorkerBootstrapCredentials, Nt as RuntimeLoadedWorkflow, O as loadWorkflowModules, Ot as BootstrapDeadlineExceededError, P as HeadlessWorkerBusConnector, Pt as ThinWorkflowPiscinaRunnerOptions, Q as IsolatedWorkflowRuntimeContext, Qt as computeFileDigest, R as HeadlessWorkerPostCommitObserver, S as RuntimeRegistrationRefusedError, St as NodeWorkflowRunnerPackageOptions, T as registerAndAdmitWorkflowRun, Tt as BootstrapExchangeResult, U as InstalledWorkloadAdapter, V as MaterializedWorkspace, W as RunWorkloadInvocationOptions, Wt as LocalDirectoryMaterializerOptions, X as CreateIsolatedWorkflowRuntimeOptions, Xt as computeContributionPackageDigest, Yt as assertNoSymlinkEscape, Z as IsolatedWorkflowRuntime, Zt as computeDirectoryDigest, _ as OperationDeliveryEndpointIdentity, _t as submitAttemptOutcomeWithAck, a as InstalledAttemptControlEndpoint, at as PiscinaThinWorkflowProviderOptions, b as RegisterAndAdmitWorkflowRunOptions, bt as WorkerRunnerOptions, c as BootstrapStartRefusedError, ct as createWorkflowLaunchResolver, d as bootstrapWorkerRuntime, dt as AuthorityRequestDeliveryError, en as parseSriIntegrity, et as WorkflowRuntimeContributionLoader, f as AdmitWorkflowRunOperationOptions, ft as DELIVERED_DECISIONS, g as OperationDeliveryEndpoint, gt as OutcomeSubmitRetryConfig, h as OperationAdmissionRefusedError, ht as OutcomeSubmitPayload, i as AttemptControlReportOptions, in as resolveWorkflowWorkerEntry, it as PiscinaThinWorkflowProvider, j as LocalGitSourceOptions, jt as ThinWorkflowPiscinaRunner, k as loadWorkflowFromConfig, kt as withWorkerBootstrapDeadline, l as BootstrapWorkerRuntimeOptions, lt as AttemptOutcomeDeliveryError, m as DeliverableOperationKind, mt as OutcomeReconnect, n as AttemptControlEndpointIdentity, nn as WorkflowWorkerEntryMode, nt as InProcessWorkflowRunner, o as installAttemptControlEndpoint, ot as WorkflowAttemptInstructionReader, p as AdmittedWorkflowRun, pt as OutcomeDeliveryError, q as WorkloadInvocationResult, qt as WorkspaceRootResolver, r as AttemptControlLastReport, rn as WorkflowWorkerEntryResolverOptions, rt as InProcessWorkflowRunnerOptions, s as BootstrapRuntimeConnection, st as WorkflowLaunchResolver, t as AttemptControlEndpointDeps, tn as verifyContribution, tt as createIsolatedWorkflowRuntime, u as StartedWorkerRuntime, ut as AttemptOutcomeSubmitPayload, v as OperationDeliveryHandler, vt as submitOutcomeWithAck, w as installOperationDeliveryEndpoint, wt as createNodeWorkflowRunnerPackageOptions, x as RegisterWorkerRuntimeOptions, xt as CreateNodeWorkflowRunnerPackageOptionsParams, y as OperationDeliveryHandlers, yt as WorkerRunner, z as HeadlessWorkflowWorkerDeps } from "../../index-DtCVHx8-.mjs";
+import { $ as WorkflowRuntimeAuthorityConnector, $t as materializeLocalDirectory, A as createLocalGitWorkspacePreparation, At as createWorkerBusAuth, B as HeadlessWorkflowWorkerResult, C as admitWorkflowRunOperation, Ct as createNodeWorkflowRunner, D as loadWorkflowModule, Dt as runWorkerBootstrapExchange, E as registerWorkerRuntime, Et as WorkerBootstrapExchangeOptions, F as HeadlessWorkerContributionLoader, Ft as WorkflowRunResult, G as WorkloadControlBinding, Gt as MaterializationError, H as runHeadlessWorkflowWorker, I as HeadlessWorkerExecutor, J as runWorkloadInvocation, Jt as assertContainedIn, K as WorkloadInvocationPreparation, Kt as ParsedSriIntegrity, L as HeadlessWorkerMaterializer, M as HeadlessWorkerBootstrap, Mt as IWorkflowRunner, N as HeadlessWorkerBootstrapCredentials, Nt as RuntimeLoadedWorkflow, O as loadWorkflowModules, Ot as BootstrapDeadlineExceededError, P as HeadlessWorkerBusConnector, Pt as ThinWorkflowPiscinaRunnerOptions, Q as IsolatedWorkflowRuntimeContext, Qt as computeFileDigest, R as HeadlessWorkerPostCommitObserver, S as RuntimeRegistrationRefusedError, St as NodeWorkflowRunnerPackageOptions, T as registerAndAdmitWorkflowRun, Tt as BootstrapExchangeResult, U as InstalledWorkloadAdapter, V as MaterializedWorkspace, W as RunWorkloadInvocationOptions, Wt as LocalDirectoryMaterializerOptions, X as CreateIsolatedWorkflowRuntimeOptions, Xt as computeContributionPackageDigest, Yt as assertNoSymlinkEscape, Z as IsolatedWorkflowRuntime, Zt as computeDirectoryDigest, _ as OperationDeliveryEndpointIdentity, _t as submitAttemptOutcomeWithAck, a as InstalledAttemptControlEndpoint, at as PiscinaThinWorkflowProviderOptions, b as RegisterAndAdmitWorkflowRunOptions, bt as WorkerRunnerOptions, c as BootstrapStartRefusedError, ct as createWorkflowLaunchResolver, d as bootstrapWorkerRuntime, dt as AuthorityRequestDeliveryError, en as parseSriIntegrity, et as WorkflowRuntimeContributionLoader, f as AdmitWorkflowRunOperationOptions, ft as DELIVERED_DECISIONS, g as OperationDeliveryEndpoint, gt as OutcomeSubmitRetryConfig, h as OperationAdmissionRefusedError, ht as OutcomeSubmitPayload, i as AttemptControlReportOptions, in as resolveWorkflowWorkerEntry, it as PiscinaThinWorkflowProvider, j as LocalGitSourceOptions, jt as ThinWorkflowPiscinaRunner, k as loadWorkflowFromConfig, kt as withWorkerBootstrapDeadline, l as BootstrapWorkerRuntimeOptions, lt as AttemptOutcomeDeliveryError, m as DeliverableOperationKind, mt as OutcomeReconnect, n as AttemptControlEndpointIdentity, nn as WorkflowWorkerEntryMode, nt as InProcessWorkflowRunner, o as installAttemptControlEndpoint, ot as WorkflowAttemptInstructionReader, p as AdmittedWorkflowRun, pt as OutcomeDeliveryError, q as WorkloadInvocationResult, qt as WorkspaceRootResolver, r as AttemptControlLastReport, rn as WorkflowWorkerEntryResolverOptions, rt as InProcessWorkflowRunnerOptions, s as BootstrapRuntimeConnection, st as WorkflowLaunchResolver, t as AttemptControlEndpointDeps, tn as verifyContribution, tt as createIsolatedWorkflowRuntime, u as StartedWorkerRuntime, ut as AttemptOutcomeSubmitPayload, v as OperationDeliveryHandler, vt as submitOutcomeWithAck, w as installOperationDeliveryEndpoint, wt as createNodeWorkflowRunnerPackageOptions, x as RegisterWorkerRuntimeOptions, xt as CreateNodeWorkflowRunnerPackageOptionsParams, y as OperationDeliveryHandlers, yt as WorkerRunner, z as HeadlessWorkflowWorkerDeps } from "../../index-CzUUoexw.mjs";
 export { AdmitWorkflowRunOperationOptions, AdmittedWorkflowRun, AttemptControlEndpointDeps, AttemptControlEndpointIdentity, AttemptControlLastReport, AttemptControlReportOptions, AttemptOutcomeDeliveryError, AttemptOutcomeSubmitPayload, AuthorityRequestDeliveryError, BootstrapDeadlineExceededError, BootstrapExchangeResult, BootstrapRuntimeConnection, BootstrapStartRefusedError, BootstrapWorkerRuntimeOptions, CreateIsolatedWorkflowRuntimeOptions, CreateNodeWorkflowRunnerPackageOptionsParams, DELIVERED_DECISIONS, DeliverableOperationKind, HeadlessWorkerBootstrap, HeadlessWorkerBootstrapCredentials, HeadlessWorkerBusConnector, HeadlessWorkerContributionLoader, HeadlessWorkerExecutor, HeadlessWorkerMaterializer, HeadlessWorkerPostCommitObserver, HeadlessWorkflowWorkerDeps, HeadlessWorkflowWorkerResult, IWorkflowRunner, InProcessWorkflowRunner, InProcessWorkflowRunnerOptions, InstalledAttemptControlEndpoint, InstalledWorkloadAdapter, IsolatedWorkflowRuntime, IsolatedWorkflowRuntimeContext, LocalDirectoryMaterializerOptions, LocalGitSourceOptions, MaterializationError, MaterializedWorkspace, NodeWorkflowRunnerPackageOptions, OperationAdmissionRefusedError, OperationDeliveryEndpoint, OperationDeliveryEndpointIdentity, OperationDeliveryHandler, OperationDeliveryHandlers, OutcomeDeliveryError, OutcomeReconnect, OutcomeSubmitPayload, OutcomeSubmitRetryConfig, ParsedSriIntegrity, PiscinaThinWorkflowProvider, PiscinaThinWorkflowProviderOptions, RegisterAndAdmitWorkflowRunOptions, RegisterWorkerRuntimeOptions, RunWorkloadInvocationOptions, RuntimeLoadedWorkflow, RuntimeRegistrationRefusedError, StartedWorkerRuntime, ThinWorkflowPiscinaRunner, ThinWorkflowPiscinaRunnerOptions, WorkerBootstrapExchangeOptions, WorkerRunner, WorkerRunnerOptions, WorkflowAttemptInstructionReader, WorkflowLaunchResolver, WorkflowRunResult, WorkflowRuntimeAuthorityConnector, WorkflowRuntimeContributionLoader, WorkflowWorkerEntryMode, WorkflowWorkerEntryResolverOptions, WorkloadControlBinding, WorkloadInvocationPreparation, WorkloadInvocationResult, WorkspaceRootResolver, admitWorkflowRunOperation, assertContainedIn, assertNoSymlinkEscape, bootstrapWorkerRuntime, computeContributionPackageDigest, computeDirectoryDigest, computeFileDigest, createIsolatedWorkflowRuntime, createLocalGitWorkspacePreparation, createNodeWorkflowRunner, createNodeWorkflowRunnerPackageOptions, createWorkerBusAuth, createWorkflowLaunchResolver, installAttemptControlEndpoint, installOperationDeliveryEndpoint, loadWorkflowFromConfig, loadWorkflowModule, loadWorkflowModules, materializeLocalDirectory, parseSriIntegrity, registerAndAdmitWorkflowRun, registerWorkerRuntime, resolveWorkflowWorkerEntry, runHeadlessWorkflowWorker, runWorkerBootstrapExchange, runWorkloadInvocation, submitAttemptOutcomeWithAck, submitOutcomeWithAck, verifyContribution, withWorkerBootstrapDeadline };

package/dist/runtime-node/workflow-worker/index.mjs

@@ -1 +1 @@
-import{C as e,D as t,E as n,O as r,S as i,T as a,_ as o,a as s,b as c,c as l,d as u,f as d,g as f,h as p,i as m,l as h,m as g,n as _,o as v,p as y,r as b,s as x,t as S,u as C,v as w,w as T,x as E,y as D}from"../../workflow-worker-C3ZbuhyA.mjs";import{a as O,c as k,d as A,f as j,h as M,i as N,l as P,m as F,n as I,p as L,r as R,s as z,t as B,v as V,y as H}from"../../bootstrap-start-client-C1ZHbv6e.mjs";export{l as AttemptOutcomeDeliveryError,h as AuthorityRequestDeliveryError,V as BootstrapDeadlineExceededError,B as BootstrapStartRefusedError,C as DELIVERED_DECISIONS,f as InProcessWorkflowRunner,c as MaterializationError,R as OperationAdmissionRefusedError,u as OutcomeDeliveryError,x as PiscinaThinWorkflowProvider,N as RuntimeRegistrationRefusedError,D as ThinWorkflowPiscinaRunner,o as WorkerRunner,O as admitWorkflowRunOperation,E as assertContainedIn,i as assertNoSymlinkEscape,I as bootstrapWorkerRuntime,e as computeContributionPackageDigest,T as computeDirectoryDigest,a as computeFileDigest,s as createIsolatedWorkflowRuntime,S as createLocalGitWorkspacePreparation,g as createNodeWorkflowRunner,p as createNodeWorkflowRunnerPackageOptions,M as createWorkerBusAuth,v as createWorkflowLaunchResolver,b as installAttemptControlEndpoint,z as installOperationDeliveryEndpoint,A as loadWorkflowFromConfig,j as loadWorkflowModule,L as loadWorkflowModules,n as materializeLocalDirectory,t as parseSriIntegrity,k as registerAndAdmitWorkflowRun,P as registerWorkerRuntime,w as resolveWorkflowWorkerEntry,_ as runHeadlessWorkflowWorker,F as runWorkerBootstrapExchange,m as runWorkloadInvocation,d as submitAttemptOutcomeWithAck,y as submitOutcomeWithAck,r as verifyContribution,H as withWorkerBootstrapDeadline};
+import{C as e,D as t,E as n,O as r,S as i,T as a,_ as o,a as s,b as c,c as l,d as u,f as d,g as f,h as p,i as m,l as h,m as g,n as _,o as v,p as y,r as b,s as x,t as S,u as C,v as w,w as T,x as E,y as D}from"../../workflow-worker-l-wflI6V.mjs";import{a as O,c as k,d as A,f as j,h as M,i as N,l as P,m as F,n as I,p as L,r as R,s as z,t as B,v as V,y as H}from"../../bootstrap-start-client-C1ZHbv6e.mjs";export{l as AttemptOutcomeDeliveryError,h as AuthorityRequestDeliveryError,V as BootstrapDeadlineExceededError,B as BootstrapStartRefusedError,C as DELIVERED_DECISIONS,f as InProcessWorkflowRunner,c as MaterializationError,R as OperationAdmissionRefusedError,u as OutcomeDeliveryError,x as PiscinaThinWorkflowProvider,N as RuntimeRegistrationRefusedError,D as ThinWorkflowPiscinaRunner,o as WorkerRunner,O as admitWorkflowRunOperation,E as assertContainedIn,i as assertNoSymlinkEscape,I as bootstrapWorkerRuntime,e as computeContributionPackageDigest,T as computeDirectoryDigest,a as computeFileDigest,s as createIsolatedWorkflowRuntime,S as createLocalGitWorkspacePreparation,g as createNodeWorkflowRunner,p as createNodeWorkflowRunnerPackageOptions,M as createWorkerBusAuth,v as createWorkflowLaunchResolver,b as installAttemptControlEndpoint,z as installOperationDeliveryEndpoint,A as loadWorkflowFromConfig,j as loadWorkflowModule,L as loadWorkflowModules,n as materializeLocalDirectory,t as parseSriIntegrity,k as registerAndAdmitWorkflowRun,P as registerWorkerRuntime,w as resolveWorkflowWorkerEntry,_ as runHeadlessWorkflowWorker,F as runWorkerBootstrapExchange,m as runWorkloadInvocation,d as submitAttemptOutcomeWithAck,y as submitOutcomeWithAck,r as verifyContribution,H as withWorkerBootstrapDeadline};

package/dist/{schemas-Dl_3zv9l.mjs → schemas-CHM0wMq4.mjs}

@@ -1 +1 @@
-import{n as e,o as t}from"./json-value-DM-EjTC1.mjs";import{r as n,u as r}from"./kind-registration-WrdMzWmV.mjs";import{t as i}from"./repo-context-cO-TLEGN.mjs";import{z as a}from"zod";const o=a.string().min(1).regex(/\S/),s=a.strictObject({refClass:a.literal(`artifact`),kind:o,id:o,revision:o}),c=`x-makaio-value-type`,l=`evidence/v1`,u=a.string().min(1).regex(/\S/),d=a.strictObject({kind:a.literal(`whole-source`)}),f=a.strictObject({kind:a.literal(`lines`),startLine:a.number().int().positive(),lineCount:a.number().int().positive()}),p=a.strictObject({kind:a.literal(`data-path`),path:n}),m=a.strictObject({kind:a.literal(`git-file`),repository:i.strict(),path:u,commit:a.string().regex(/^(?:[0-9a-fA-F]{40}|[0-9a-fA-F]{64})$/)}),h=a.strictObject({kind:a.literal(`confluence-page`),site:u,pageId:u,version:a.number().int().positive()}),g=a.strictObject({kind:a.literal(`artifact`),reference:s}),_=a.union([a.strictObject({source:m,location:a.union([d,f]),excerpt:a.string().optional()}),a.strictObject({source:h,location:d,excerpt:a.string().optional()}),a.strictObject({source:g,location:a.union([d,p]),excerpt:a.string().optional()})]).meta({title:`EvidenceValue`,description:`An immutable, directly cited source and its source-specific location.`,[c]:l}),v=a.string().regex(/^(?:\/(?:[^~/]|~[01])*)+$/,`Expected a data-relative JSON Pointer`),y=a.object({kind:a.string().min(1),id:a.string().min(1),displayName:a.string().optional()}),b=a.object({level:a.string().min(1),ids:a.record(a.string().min(1),a.string().min(1)).optional()}).superRefine((e,t)=>{e.level!==`global`&&(!e.ids||Object.keys(e.ids).length===0)&&t.addIssue({code:a.ZodIssueCode.custom,path:[`ids`],message:`ids is required when scope level is not 'global'`})}),x=a.object({level:a.string().min(1),ids:a.record(a.string().min(1),a.string().min(1)).optional()}),S=a.object({refClass:a.literal(`local`).default(`local`),artifact:s,localId:a.string().min(1)}),C=a.object({refClass:a.literal(`evidence`).default(`evidence`),kind:a.string().min(1),id:a.string().min(1),revision:a.string().min(1).optional(),locator:a.string().min(1).optional()}),w=a.strictObject({refClass:a.literal(`entity`),entityType:a.string().min(1),id:a.string().min(1)}),T=a.discriminatedUnion(`refClass`,[s,S,C,w]);function E(e){return!e||typeof e!=`object`||Array.isArray(e)||`refClass`in e?e:`artifact`in e&&`localId`in e?{...e,refClass:`local`}:`locator`in e||!(`revision`in e)?{...e,refClass:`evidence`}:{...e,refClass:`artifact`}}const D=a.preprocess(E,T),O=a.discriminatedUnion(`refClass`,[s.extend({revision:s.shape.revision.optional()}),S,C,w]);function k(e){return!e||typeof e!=`object`||Array.isArray(e)||`refClass`in e?e:`artifact`in e&&`localId`in e?{...e,refClass:`local`}:`locator`in e?{...e,refClass:`evidence`}:{...e,refClass:`artifact`}}const A=a.preprocess(k,O),j=a.object({type:a.string().min(1),target:D}),M=a.enum([`assumed`,`inferred`,`stated`,`confirmed`,`verified`]),N=a.object({kind:a.string().min(1),actor:y,timestamp:a.number().int().nonnegative(),detail:a.string().optional(),evidenceRef:D.optional()}),P=a.object({level:M,basis:a.array(N)}),F=a.object({id:a.string().min(1),kind:a.string().min(1),summary:a.string().min(1),detail:a.string().optional(),severity:a.enum([`info`,`warning`,`blocker`]).optional(),tags:a.array(a.string().min(1)).optional(),regarding:a.union([s,S]).optional(),evidence:a.union([s,C]).optional(),actor:y,timestamp:a.number().int().nonnegative()}),I=a.object({markdown:a.string().optional(),summary:a.string().optional(),plaintext:a.string().optional()}),L=a.object({kind:s.shape.kind,id:s.shape.id,revision:s.shape.revision,scope:b,schemaVersion:r,data:e,relations:a.array(j),evidence:a.array(_).optional(),confidence:P.optional(),representations:I.optional(),actor:y,timestamp:a.number().int().nonnegative(),createdAt:a.number().int().nonnegative().optional()}),R=a.object({type:a.string().min(1),symmetry:a.enum([`asymmetric`,`symmetric`]),implication:a.string().min(1).optional(),sourceKinds:a.array(a.string().min(1)).optional(),targetKinds:a.array(a.string().min(1)).optional(),targetRefClasses:a.array(a.enum([`artifact`,`local`,`evidence`,`entity`])).optional()}),z=a.object({kind:a.string().min(1).optional(),scope:x.optional(),ids:a.array(a.string().min(1)).optional(),currentOnly:a.boolean().optional(),search:a.string().optional(),relation:a.object({type:a.string().min(1).optional(),target:A.optional()}).optional(),confidence:a.object({maxLevel:M.optional(),minLevel:M.optional()}).optional(),indexed:a.record(a.string(),t).optional(),limit:a.number().int().min(1).optional()}),B=a.object({base:s,target:s}),V=a.object({base:L,target:L,changedPaths:a.array(a.string())});export{_ as C,l as S,w as _,z as a,R as b,j as c,L as d,b as f,P as g,M as h,F as i,D as l,N as m,B as n,x as o,v as p,V as r,A as s,y as t,I as u,C as v,s as w,c as x,S as y};
+import{n as e,o as t}from"./json-value-DM-EjTC1.mjs";import{r as n,u as r}from"./kind-registration-Dzfo6kyb.mjs";import{t as i}from"./repo-context-cO-TLEGN.mjs";import{z as a}from"zod";const o=a.string().min(1).regex(/\S/),s=a.strictObject({refClass:a.literal(`artifact`),kind:o,id:o,revision:o}),c=`x-makaio-value-type`,l=`evidence/v1`,u=a.string().min(1).regex(/\S/),d=a.strictObject({kind:a.literal(`whole-source`)}),f=a.strictObject({kind:a.literal(`lines`),startLine:a.number().int().positive(),lineCount:a.number().int().positive()}),p=a.strictObject({kind:a.literal(`data-path`),path:n}),m=a.strictObject({kind:a.literal(`git-file`),repository:i.strict(),path:u,commit:a.string().regex(/^(?:[0-9a-fA-F]{40}|[0-9a-fA-F]{64})$/)}),h=a.strictObject({kind:a.literal(`confluence-page`),site:u,pageId:u,version:a.number().int().positive()}),g=a.strictObject({kind:a.literal(`artifact`),reference:s}),_=a.union([a.strictObject({source:m,location:a.union([d,f]),excerpt:a.string().optional()}),a.strictObject({source:h,location:d,excerpt:a.string().optional()}),a.strictObject({source:g,location:a.union([d,p]),excerpt:a.string().optional()})]).meta({title:`EvidenceValue`,description:`An immutable, directly cited source and its source-specific location.`,[c]:l}),v=a.string().regex(/^(?:\/(?:[^~/]|~[01])*)+$/,`Expected a data-relative JSON Pointer`),y=a.object({kind:a.string().min(1),id:a.string().min(1),displayName:a.string().optional()}),b=a.object({level:a.string().min(1),ids:a.record(a.string().min(1),a.string().min(1)).optional()}).superRefine((e,t)=>{e.level!==`global`&&(!e.ids||Object.keys(e.ids).length===0)&&t.addIssue({code:a.ZodIssueCode.custom,path:[`ids`],message:`ids is required when scope level is not 'global'`})}),x=a.object({level:a.string().min(1),ids:a.record(a.string().min(1),a.string().min(1)).optional()}),S=a.object({refClass:a.literal(`local`).default(`local`),artifact:s,localId:a.string().min(1)}),C=a.object({refClass:a.literal(`evidence`).default(`evidence`),kind:a.string().min(1),id:a.string().min(1),revision:a.string().min(1).optional(),locator:a.string().min(1).optional()}),w=a.strictObject({refClass:a.literal(`entity`),entityType:a.string().min(1),id:a.string().min(1)}),T=a.discriminatedUnion(`refClass`,[s,S,C,w]);function E(e){return!e||typeof e!=`object`||Array.isArray(e)||`refClass`in e?e:`artifact`in e&&`localId`in e?{...e,refClass:`local`}:`locator`in e||!(`revision`in e)?{...e,refClass:`evidence`}:{...e,refClass:`artifact`}}const D=a.preprocess(E,T),O=a.discriminatedUnion(`refClass`,[s.extend({revision:s.shape.revision.optional()}),S,C,w]);function k(e){return!e||typeof e!=`object`||Array.isArray(e)||`refClass`in e?e:`artifact`in e&&`localId`in e?{...e,refClass:`local`}:`locator`in e?{...e,refClass:`evidence`}:{...e,refClass:`artifact`}}const A=a.preprocess(k,O),j=a.object({type:a.string().min(1),sourceLocalId:a.string().min(1).regex(/\S/).optional(),target:D}),M=a.enum([`assumed`,`inferred`,`stated`,`confirmed`,`verified`]),N=a.object({kind:a.string().min(1),actor:y,timestamp:a.number().int().nonnegative(),detail:a.string().optional(),evidenceRef:D.optional()}),P=a.object({level:M,basis:a.array(N)}),F=a.object({id:a.string().min(1),kind:a.string().min(1),summary:a.string().min(1),detail:a.string().optional(),severity:a.enum([`info`,`warning`,`blocker`]).optional(),tags:a.array(a.string().min(1)).optional(),regarding:a.union([s,S]).optional(),evidence:a.union([s,C]).optional(),actor:y,timestamp:a.number().int().nonnegative()}),I=a.object({markdown:a.string().optional(),summary:a.string().optional(),plaintext:a.string().optional()}),L=a.object({kind:s.shape.kind,id:s.shape.id,revision:s.shape.revision,scope:b,schemaVersion:r,data:e,relations:a.array(j),evidence:a.array(_).optional(),confidence:P.optional(),representations:I.optional(),actor:y,timestamp:a.number().int().nonnegative(),createdAt:a.number().int().nonnegative().optional()}),R=a.object({type:a.string().min(1),symmetry:a.enum([`asymmetric`,`symmetric`]),implication:a.string().min(1).optional(),sourceKinds:a.array(a.string().min(1)).optional(),targetKinds:a.array(a.string().min(1)).optional(),targetRefClasses:a.array(a.enum([`artifact`,`local`,`evidence`,`entity`])).optional()}),z=a.object({kind:a.string().min(1).optional(),scope:x.optional(),ids:a.array(a.string().min(1)).optional(),currentOnly:a.boolean().optional(),search:a.string().optional(),relation:a.object({type:a.string().min(1).optional(),target:A.optional()}).optional(),confidence:a.object({maxLevel:M.optional(),minLevel:M.optional()}).optional(),indexed:a.record(a.string(),t).optional(),limit:a.number().int().min(1).optional()}),B=a.object({base:s,target:s}),V=a.object({base:L,target:L,changedPaths:a.array(a.string())});export{_ as C,l as S,w as _,z as a,R as b,j as c,L as d,b as f,P as g,M as h,F as i,D as l,N as m,B as n,x as o,v as p,V as r,A as s,y as t,I as u,C as v,s as w,c as x,S as y};

package/dist/{schemas-DlVKv9QC.d.mts → schemas-CaBRbfhU.d.mts}

@@ -100,18 +100,18 @@ declare const ExecutionTargetInputSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
   description: z.ZodOptional<z.ZodString>;
   env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
   name: z.ZodString;
-  enabled: z.ZodBoolean;
   image: z.ZodOptional<z.ZodString>;
-  busUrl: z.ZodOptional<z.ZodString>;
+  enabled: z.ZodBoolean;
   scope: z.ZodString;
+  busUrl: z.ZodOptional<z.ZodString>;
 }, z.core.$strip>, z.ZodObject<{
   type: z.ZodLiteral<"container-isolated">;
   id: z.ZodString;
   description: z.ZodOptional<z.ZodString>;
   env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
   name: z.ZodString;
-  enabled: z.ZodBoolean;
   image: z.ZodOptional<z.ZodString>;
+  enabled: z.ZodBoolean;
   scope: z.ZodString;
   gitCredentialMode: z.ZodDefault<z.ZodEnum<{
     token: "token";
@@ -203,18 +203,18 @@ declare const ExecutionTargetSchemas: {
         description: z.ZodOptional<z.ZodString>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         name: z.ZodString;
-        enabled: z.ZodBoolean;
         image: z.ZodOptional<z.ZodString>;
-        busUrl: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodBoolean;
         scope: z.ZodString;
+        busUrl: z.ZodOptional<z.ZodString>;
       }, z.core.$strip>, z.ZodObject<{
         type: z.ZodLiteral<"container-isolated">;
         id: z.ZodString;
         description: z.ZodOptional<z.ZodString>;
         env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
         name: z.ZodString;
-        enabled: z.ZodBoolean;
         image: z.ZodOptional<z.ZodString>;
+        enabled: z.ZodBoolean;
         scope: z.ZodString;
         gitCredentialMode: z.ZodDefault<z.ZodEnum<{
           token: "token";

package/dist/{schemas-uA8246K9.d.mts → schemas-CeItAAQM.d.mts}

@@ -17,9 +17,9 @@ declare const AdapterSubsystemSchemas: {
     response: z.ZodObject<{
       config: z.ZodNullable<z.ZodObject<{
         description: z.ZodOptional<z.ZodString>;
-        clientId: z.ZodOptional<z.ZodString>;
-        protocol: z.ZodOptional<z.ZodString>;
         displayName: z.ZodOptional<z.ZodString>;
+        protocol: z.ZodOptional<z.ZodString>;
+        clientId: z.ZodOptional<z.ZodString>;
         helpLinks: z.ZodOptional<z.ZodArray<z.ZodObject<{
           label: z.ZodString;
           url: z.ZodString;
@@ -45,9 +45,9 @@ declare const AdapterSubsystemSchemas: {
     response: z.ZodObject<{
       configs: z.ZodArray<z.ZodObject<{
         description: z.ZodOptional<z.ZodString>;
-        clientId: z.ZodOptional<z.ZodString>;
-        protocol: z.ZodOptional<z.ZodString>;
         displayName: z.ZodOptional<z.ZodString>;
+        protocol: z.ZodOptional<z.ZodString>;
+        clientId: z.ZodOptional<z.ZodString>;
         helpLinks: z.ZodOptional<z.ZodArray<z.ZodObject<{
           label: z.ZodString;
           url: z.ZodString;
@@ -1716,9 +1716,9 @@ declare const AdapterSubsystemSchemas: {
     response: z.ZodObject<{
       config: z.ZodObject<{
         description: z.ZodOptional<z.ZodString>;
-        clientId: z.ZodOptional<z.ZodString>;
-        protocol: z.ZodOptional<z.ZodString>;
         displayName: z.ZodOptional<z.ZodString>;
+        protocol: z.ZodOptional<z.ZodString>;
+        clientId: z.ZodOptional<z.ZodString>;
         helpLinks: z.ZodOptional<z.ZodArray<z.ZodObject<{
           label: z.ZodString;
           url: z.ZodString;
@@ -3121,9 +3121,9 @@ type BindingRecord = z.infer<typeof BindingRecordSchema>;
 /** Normalized adapter file-backed read model. */
 declare const AdapterFileConfigSchema: z.ZodObject<{
   description: z.ZodOptional<z.ZodString>;
-  clientId: z.ZodOptional<z.ZodString>;
-  protocol: z.ZodOptional<z.ZodString>;
   displayName: z.ZodOptional<z.ZodString>;
+  protocol: z.ZodOptional<z.ZodString>;
+  clientId: z.ZodOptional<z.ZodString>;
   helpLinks: z.ZodOptional<z.ZodArray<z.ZodObject<{
     label: z.ZodString;
     url: z.ZodString;

package/dist/{schemas-BcynDWi-.d.mts → schemas-Cj6Gbqch.d.mts}

@@ -4,8 +4,8 @@ import { z } from "zod";
 /** Visual grouping for system tray menu entries. */
 declare const TrayMenuSectionSchema: z.ZodEnum<{
   tools: "tools";
-  utilities: "utilities";
   views: "views";
+  utilities: "utilities";
 }>;
 /** Opaque metadata echoed back to the owning package on click. */
 declare const TrayMenuMetadataSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
@@ -16,8 +16,8 @@ declare const TrayMenuEntrySchema: z.ZodObject<{
   label: z.ZodString;
   section: z.ZodEnum<{
     tools: "tools";
-    utilities: "utilities";
     views: "views";
+    utilities: "utilities";
   }>;
   priority: z.ZodDefault<z.ZodNumber>;
   enabled: z.ZodDefault<z.ZodBoolean>;
@@ -44,8 +44,8 @@ declare const TrayMenuGroupSchema: z.ZodObject<{
   }, z.core.$strip>>;
   section: z.ZodEnum<{
     tools: "tools";
-    utilities: "utilities";
     views: "views";
+    utilities: "utilities";
   }>;
   priority: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>;
@@ -56,8 +56,8 @@ declare const TrayMenuListEntrySchema: z.ZodObject<{
   label: z.ZodString;
   section: z.ZodEnum<{
     tools: "tools";
-    utilities: "utilities";
     views: "views";
+    utilities: "utilities";
   }>;
   priority: z.ZodDefault<z.ZodNumber>;
   enabled: z.ZodDefault<z.ZodBoolean>;
@@ -81,8 +81,8 @@ declare const TrayMenuSchemas: {
         label: z.ZodString;
         section: z.ZodEnum<{
           tools: "tools";
-          utilities: "utilities";
           views: "views";
+          utilities: "utilities";
         }>;
         priority: z.ZodDefault<z.ZodNumber>;
         enabled: z.ZodDefault<z.ZodBoolean>;
@@ -116,8 +116,8 @@ declare const TrayMenuSchemas: {
         }, z.core.$strip>>;
         section: z.ZodEnum<{
           tools: "tools";
-          utilities: "utilities";
           views: "views";
+          utilities: "utilities";
         }>;
         priority: z.ZodDefault<z.ZodNumber>;
       }, z.core.$strip>;
@@ -151,8 +151,8 @@ declare const TrayMenuSchemas: {
         label: z.ZodString;
         section: z.ZodEnum<{
           tools: "tools";
-          utilities: "utilities";
           views: "views";
+          utilities: "utilities";
         }>;
         priority: z.ZodDefault<z.ZodNumber>;
         enabled: z.ZodDefault<z.ZodBoolean>;

package/dist/{schemas-CKVm28Oy.d.mts → schemas-JjyFxrC0.d.mts}

@@ -331,6 +331,7 @@ declare const ArtifactRelationQueryTargetSchema: z.ZodPreprocess<z.ZodDiscrimina
  */
 declare const ArtifactRelationSchema: z.ZodObject<{
   type: z.ZodString;
+  sourceLocalId: z.ZodOptional<z.ZodString>;
   target: z.ZodPreprocess<z.ZodDiscriminatedUnion<[z.ZodObject<{
     refClass: z.ZodLiteral<"artifact">;
     kind: z.ZodString;
@@ -542,6 +543,7 @@ declare const ArtifactRevisionSchema: z.ZodObject<{
   data: z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>;
   relations: z.ZodArray<z.ZodObject<{
     type: z.ZodString;
+    sourceLocalId: z.ZodOptional<z.ZodString>;
     target: z.ZodPreprocess<z.ZodDiscriminatedUnion<[z.ZodObject<{
       refClass: z.ZodLiteral<"artifact">;
       kind: z.ZodString;
@@ -792,6 +794,7 @@ declare const ArtifactCompareResponseSchema: z.ZodObject<{
     data: z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>;
     relations: z.ZodArray<z.ZodObject<{
       type: z.ZodString;
+      sourceLocalId: z.ZodOptional<z.ZodString>;
       target: z.ZodPreprocess<z.ZodDiscriminatedUnion<[z.ZodObject<{
         refClass: z.ZodLiteral<"artifact">;
         kind: z.ZodString;
@@ -934,6 +937,7 @@ declare const ArtifactCompareResponseSchema: z.ZodObject<{
     data: z.ZodType<Record<string, unknown>, Record<string, unknown>, z.core.$ZodTypeInternals<Record<string, unknown>, Record<string, unknown>>>;
     relations: z.ZodArray<z.ZodObject<{
       type: z.ZodString;
+      sourceLocalId: z.ZodOptional<z.ZodString>;
       target: z.ZodPreprocess<z.ZodDiscriminatedUnion<[z.ZodObject<{
         refClass: z.ZodLiteral<"artifact">;
         kind: z.ZodString;

package/dist/services/adapter-subsystem/index.d.mts

@@ -1,4 +1,4 @@
-import { C as ProviderRuntimeSnapshot, S as ProviderConfigFileRecordSchema, T as AdapterSubsystemSchemas, _ as EffectiveAdapter, a as AdapterRuntimePackages, b as ProviderConfigAuthSummarySchema, c as AdapterRuntimeSnapshotErrorCode, d as AdapterRuntimeSnapshotResolutionSchema, f as AdapterRuntimeSnapshotSchema, g as CompatibleAuthOptionSchema, h as CompatibleAuthOption, i as AdapterReadinessSchema, l as AdapterRuntimeSnapshotErrorCodeSchema, m as BindingRecordSchema, n as AdapterFileConfigSchema, o as AdapterRuntimePackagesSchema, p as BindingRecord, r as AdapterReadiness, s as AdapterRuntimeSnapshot, t as AdapterFileConfig, u as AdapterRuntimeSnapshotResolution, v as EffectiveAdapterSchema, w as ProviderRuntimeSnapshotSchema, x as ProviderConfigFileRecord, y as ProviderConfigAuthSummary } from "../../schemas-uA8246K9.mjs";
+import { C as ProviderRuntimeSnapshot, S as ProviderConfigFileRecordSchema, T as AdapterSubsystemSchemas, _ as EffectiveAdapter, a as AdapterRuntimePackages, b as ProviderConfigAuthSummarySchema, c as AdapterRuntimeSnapshotErrorCode, d as AdapterRuntimeSnapshotResolutionSchema, f as AdapterRuntimeSnapshotSchema, g as CompatibleAuthOptionSchema, h as CompatibleAuthOption, i as AdapterReadinessSchema, l as AdapterRuntimeSnapshotErrorCodeSchema, m as BindingRecordSchema, n as AdapterFileConfigSchema, o as AdapterRuntimePackagesSchema, p as BindingRecord, r as AdapterReadiness, s as AdapterRuntimeSnapshot, t as AdapterFileConfig, u as AdapterRuntimeSnapshotResolution, v as EffectiveAdapterSchema, w as ProviderRuntimeSnapshotSchema, x as ProviderConfigFileRecord, y as ProviderConfigAuthSummary } from "../../schemas-CeItAAQM.mjs";
 import { a as CreateCanonicalProviderConfigInput, c as AdapterFileConfigSet, i as CanonicalProviderConfigPatchSchema, l as IAdapterConfigRepository, n as CanonicalProviderConfigAuthPayload, o as CreateCanonicalProviderConfigInputPayload, r as CanonicalProviderConfigPatch, s as CreateCanonicalProviderConfigInputSchema, t as CanonicalProviderConfigAuth, u as ProviderConfigFileSet } from "../../index-DiZ4LmyE.mjs";
-import { n as AdapterSubsystemNamespace, r as AdapterSubsystemSubjects, t as ADAPTER_SUBSYSTEM_PACKAGE_NAME } from "../../namespace-CjvSQYRJ.mjs";
+import { n as AdapterSubsystemNamespace, r as AdapterSubsystemSubjects, t as ADAPTER_SUBSYSTEM_PACKAGE_NAME } from "../../namespace-f6Kz5cwX.mjs";
 export { ADAPTER_SUBSYSTEM_PACKAGE_NAME, AdapterFileConfig, AdapterFileConfigSchema, AdapterFileConfigSet, AdapterReadiness, AdapterReadinessSchema, AdapterRuntimePackages, AdapterRuntimePackagesSchema, AdapterRuntimeSnapshot, AdapterRuntimeSnapshotErrorCode, AdapterRuntimeSnapshotErrorCodeSchema, AdapterRuntimeSnapshotResolution, AdapterRuntimeSnapshotResolutionSchema, AdapterRuntimeSnapshotSchema, AdapterSubsystemNamespace, AdapterSubsystemSchemas, AdapterSubsystemSubjects, BindingRecord, BindingRecordSchema, CanonicalProviderConfigAuth, CanonicalProviderConfigAuthPayload, CanonicalProviderConfigPatch, CanonicalProviderConfigPatchSchema, CompatibleAuthOption, CompatibleAuthOptionSchema, CreateCanonicalProviderConfigInput, CreateCanonicalProviderConfigInputPayload, CreateCanonicalProviderConfigInputSchema, EffectiveAdapter, EffectiveAdapterSchema, IAdapterConfigRepository, ProviderConfigAuthSummary, ProviderConfigAuthSummarySchema, ProviderConfigFileRecord, ProviderConfigFileRecordSchema, ProviderConfigFileSet, ProviderRuntimeSnapshot, ProviderRuntimeSnapshotSchema };

package/dist/services/adapter-subsystem/namespace.d.mts

@@ -1,2 +1,2 @@
-import { n as AdapterSubsystemNamespace, r as AdapterSubsystemSubjects, t as ADAPTER_SUBSYSTEM_PACKAGE_NAME } from "../../namespace-CjvSQYRJ.mjs";
+import { n as AdapterSubsystemNamespace, r as AdapterSubsystemSubjects, t as ADAPTER_SUBSYSTEM_PACKAGE_NAME } from "../../namespace-f6Kz5cwX.mjs";
 export { ADAPTER_SUBSYSTEM_PACKAGE_NAME, AdapterSubsystemNamespace, AdapterSubsystemSubjects };

package/dist/services/execution-target/index.d.mts

@@ -1,4 +1,4 @@
-import { a as ExecutionTargetInputSchema, c as ExecutionTargetResolveRequest, d as ExecutionTargetSchemas, f as ExecutionTargetType, i as ExecutionTargetInput, l as ExecutionTargetResolveRequestSchema, m as LocalExecutionTargetSchema, n as ContainerLocalExecutionTargetSchema, o as ExecutionTargetListQuery, p as ExecutionTargetTypeSchema, r as ExecutionTarget, s as ExecutionTargetListQuerySchema, t as ContainerIsolatedExecutionTargetSchema, u as ExecutionTargetSchema } from "../../schemas-DlVKv9QC.mjs";
-import { n as ExecutionTargetSubjects, t as ExecutionTargetNamespace } from "../../namespace-BrqkCnyt.mjs";
+import { a as ExecutionTargetInputSchema, c as ExecutionTargetResolveRequest, d as ExecutionTargetSchemas, f as ExecutionTargetType, i as ExecutionTargetInput, l as ExecutionTargetResolveRequestSchema, m as LocalExecutionTargetSchema, n as ContainerLocalExecutionTargetSchema, o as ExecutionTargetListQuery, p as ExecutionTargetTypeSchema, r as ExecutionTarget, s as ExecutionTargetListQuerySchema, t as ContainerIsolatedExecutionTargetSchema, u as ExecutionTargetSchema } from "../../schemas-CaBRbfhU.mjs";
+import { n as ExecutionTargetSubjects, t as ExecutionTargetNamespace } from "../../namespace-BsQPRiMd.mjs";
 import { A as ContainerRuntimeSchema, B as SpawnRequest, C as ContainerIsolatedSpawnRequest, D as ContainerLocalWorkflowSpawnRequest, E as ContainerLocalSpawnRequestSchema, F as ContainerState, G as StatusRequestSchema, H as SpawnResponse, I as ContainerStateSchema, J as StopRequest, K as StatusResponse, L as ContainerStopped, M as ContainerSessionRuntimeBindingSchema, N as ContainerStarted, O as ContainerLocalWorkflowSpawnRequestSchema, P as ContainerStartedSchema, R as ContainerStoppedSchema, S as ContainerDestroyedSchema, T as ContainerLocalSpawnRequest, U as SpawnResponseSchema, V as SpawnRequestSchema, W as StatusRequest, X as StopResponse, Y as StopRequestSchema, Z as StopResponseSchema, _ as ContainerConnectorAuthValue, a as DockerSubjects, b as ContainerCreatedSchema, c as ContainerAdapterAuthEnvelopeSchema, d as ContainerBootstrapConfig, f as ContainerBootstrapConfigSchema, g as ContainerConnectorAuthDeliverySchema, h as ContainerConnectorAuthDelivery, i as DockerNamespace, j as ContainerSessionRuntimeBinding, k as ContainerRuntime, l as ContainerAdapterAuthSelector, m as ContainerBootstrapSpawnRequestSchema, n as ContainerSpawnSubjects, o as CONTAINER_BOOTSTRAP_PRIVATE_ENV_VARS, p as ContainerBootstrapSpawnRequest, q as StatusResponseSchema, r as CONTAINER_BOOTSTRAP_CHANNEL_ENDPOINT, s as ContainerAdapterAuthEnvelope, t as ContainerSpawnNamespace, u as ContainerAdapterAuthSelectorSchema, v as ContainerConnectorAuthValueSchema, w as ContainerIsolatedSpawnRequestSchema, x as ContainerDestroyed, y as ContainerCreated, z as CredentialFreeGitRemoteSchema } from "../../index-nkix3hP7.mjs";
 export { CONTAINER_BOOTSTRAP_CHANNEL_ENDPOINT, CONTAINER_BOOTSTRAP_PRIVATE_ENV_VARS, ContainerAdapterAuthEnvelope, ContainerAdapterAuthEnvelopeSchema, ContainerAdapterAuthSelector, ContainerAdapterAuthSelectorSchema, ContainerBootstrapConfig, ContainerBootstrapConfigSchema, ContainerBootstrapSpawnRequest, ContainerBootstrapSpawnRequestSchema, ContainerConnectorAuthDelivery, ContainerConnectorAuthDeliverySchema, ContainerConnectorAuthValue, ContainerConnectorAuthValueSchema, ContainerCreated, ContainerCreatedSchema, ContainerDestroyed, ContainerDestroyedSchema, ContainerIsolatedExecutionTargetSchema, ContainerIsolatedSpawnRequest, ContainerIsolatedSpawnRequestSchema, ContainerLocalExecutionTargetSchema, ContainerLocalSpawnRequest, ContainerLocalSpawnRequestSchema, ContainerLocalWorkflowSpawnRequest, ContainerLocalWorkflowSpawnRequestSchema, ContainerRuntime, ContainerRuntimeSchema, ContainerSessionRuntimeBinding, ContainerSessionRuntimeBindingSchema, ContainerSpawnNamespace, ContainerSpawnSubjects, ContainerStarted, ContainerStartedSchema, ContainerState, ContainerStateSchema, ContainerStopped, ContainerStoppedSchema, CredentialFreeGitRemoteSchema, DockerNamespace, DockerSubjects, ExecutionTarget, ExecutionTargetInput, ExecutionTargetInputSchema, ExecutionTargetListQuery, ExecutionTargetListQuerySchema, ExecutionTargetNamespace, ExecutionTargetResolveRequest, ExecutionTargetResolveRequestSchema, ExecutionTargetSchema, ExecutionTargetSchemas, ExecutionTargetSubjects, ExecutionTargetType, ExecutionTargetTypeSchema, LocalExecutionTargetSchema, SpawnRequest, SpawnRequestSchema, SpawnResponse, SpawnResponseSchema, StatusRequest, StatusRequestSchema, StatusResponse, StatusResponseSchema, StopRequest, StopRequestSchema, StopResponse, StopResponseSchema };

package/dist/services/execution-target/namespace.d.mts

@@ -1,2 +1,2 @@
-import { n as ExecutionTargetSubjects, t as ExecutionTargetNamespace } from "../../namespace-BrqkCnyt.mjs";
+import { n as ExecutionTargetSubjects, t as ExecutionTargetNamespace } from "../../namespace-BsQPRiMd.mjs";
 export { ExecutionTargetNamespace, ExecutionTargetSubjects };

package/dist/services/execution-target/schemas.d.mts

@@ -1,2 +1,2 @@
-import { a as ExecutionTargetInputSchema, c as ExecutionTargetResolveRequest, d as ExecutionTargetSchemas, f as ExecutionTargetType, i as ExecutionTargetInput, l as ExecutionTargetResolveRequestSchema, m as LocalExecutionTargetSchema, n as ContainerLocalExecutionTargetSchema, o as ExecutionTargetListQuery, p as ExecutionTargetTypeSchema, r as ExecutionTarget, s as ExecutionTargetListQuerySchema, t as ContainerIsolatedExecutionTargetSchema, u as ExecutionTargetSchema } from "../../schemas-DlVKv9QC.mjs";
+import { a as ExecutionTargetInputSchema, c as ExecutionTargetResolveRequest, d as ExecutionTargetSchemas, f as ExecutionTargetType, i as ExecutionTargetInput, l as ExecutionTargetResolveRequestSchema, m as LocalExecutionTargetSchema, n as ContainerLocalExecutionTargetSchema, o as ExecutionTargetListQuery, p as ExecutionTargetTypeSchema, r as ExecutionTarget, s as ExecutionTargetListQuerySchema, t as ContainerIsolatedExecutionTargetSchema, u as ExecutionTargetSchema } from "../../schemas-CaBRbfhU.mjs";
 export { ContainerIsolatedExecutionTargetSchema, ContainerLocalExecutionTargetSchema, ExecutionTarget, ExecutionTargetInput, ExecutionTargetInputSchema, ExecutionTargetListQuery, ExecutionTargetListQuerySchema, ExecutionTargetResolveRequest, ExecutionTargetResolveRequestSchema, ExecutionTargetSchema, ExecutionTargetSchemas, ExecutionTargetType, ExecutionTargetTypeSchema, LocalExecutionTargetSchema };

package/dist/services/filesystem/namespace.d.mts

@@ -11,8 +11,8 @@ declare const FsNamespace: _$_makaio_core0.BusNamespaceDefinition<"fs", {
     path: _$zod.ZodString;
     kind: _$zod.ZodEnum<{
       create: "create";
-      delete: "delete";
       change: "change";
+      delete: "delete";
     }>;
   }, _$zod_v4_core0.$strip>;
   batch: _$zod.ZodObject<{
@@ -20,8 +20,8 @@ declare const FsNamespace: _$_makaio_core0.BusNamespaceDefinition<"fs", {
       path: _$zod.ZodString;
       kind: _$zod.ZodEnum<{
         create: "create";
-        delete: "delete";
         change: "change";
+        delete: "delete";
       }>;
     }, _$zod_v4_core0.$strip>>;
   }, _$zod_v4_core0.$strip>;
@@ -154,8 +154,8 @@ declare const FsSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatSubjec
     path: _$zod.ZodString;
     kind: _$zod.ZodEnum<{
       create: "create";
-      delete: "delete";
       change: "change";
+      delete: "delete";
     }>;
   }, _$zod_v4_core0.$strip>;
   batch: _$zod.ZodObject<{
@@ -163,8 +163,8 @@ declare const FsSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatSubjec
       path: _$zod.ZodString;
       kind: _$zod.ZodEnum<{
         create: "create";
-        delete: "delete";
         change: "change";
+        delete: "delete";
       }>;
     }, _$zod_v4_core0.$strip>>;
   }, _$zod_v4_core0.$strip>;
@@ -295,8 +295,8 @@ declare const FileSystemSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
     path: _$zod.ZodString;
     kind: _$zod.ZodEnum<{
       create: "create";
-      delete: "delete";
       change: "change";
+      delete: "delete";
     }>;
   }, _$zod_v4_core0.$strip>;
   batch: _$zod.ZodObject<{
@@ -304,8 +304,8 @@ declare const FileSystemSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
       path: _$zod.ZodString;
       kind: _$zod.ZodEnum<{
         create: "create";
-        delete: "delete";
         change: "change";
+        delete: "delete";
       }>;
     }, _$zod_v4_core0.$strip>>;
   }, _$zod_v4_core0.$strip>;

package/dist/services/filesystem/schemas.d.mts

@@ -6,8 +6,8 @@ import { z } from "zod";
  */
 declare const FsChangeKindSchema: z.ZodEnum<{
   create: "create";
-  delete: "delete";
   change: "change";
+  delete: "delete";
 }>;
 type FsChangeKind = z.infer<typeof FsChangeKindSchema>;
 /**
@@ -17,8 +17,8 @@ declare const FsChangedSchema: z.ZodObject<{
   path: z.ZodString;
   kind: z.ZodEnum<{
     create: "create";
-    delete: "delete";
     change: "change";
+    delete: "delete";
   }>;
 }, z.core.$strip>;
 type FsChanged = z.infer<typeof FsChangedSchema>;
@@ -30,8 +30,8 @@ declare const FsBatchSchema: z.ZodObject<{
     path: z.ZodString;
     kind: z.ZodEnum<{
       create: "create";
-      delete: "delete";
       change: "change";
+      delete: "delete";
     }>;
   }, z.core.$strip>>;
 }, z.core.$strip>;