@makaio/framework 1.0.0-dev-1789609124644 → 1.0.0-dev-1790066089222

package/dist/{index-HJkz7i4E.d.mts → index-DdJKsdya.d.mts}

@@ -1,6 +1,6 @@
-import { r as ExtensionDiscovery } from "./extension-discovery-CA2IhDRo.mjs";
+import { r as ExtensionDiscovery } from "./extension-discovery-Rup-gANp.mjs";
 import { RegistrableBusNamespaceDefinition } from "@makaio/framework/core";
-import { ExecutionAttemptBootstrapStartRefusalReason, ExecutionAttemptControlReportResponse, ExecutionAttemptInstruction, ExecutionAttemptOperationAdmitRefusalReason, ExecutionAttemptOperationDelivery, ExecutionAttemptOperationKind, ExecutionAttemptOperationReceipt, ExecutionAttemptOutcome, ExecutionAttemptRuntimeRegisterRefusalReason, ExecutionAttemptWorkspaceBinding, ExtensionConfigProvider, IWorkerProvider, IWorkflowRunner, IWorkflowRunner as IWorkflowRunner$1, JsonValue, LoopGateHandler, MakaioNodeExtension, NormalizedWorkerCapabilities, OutcomeAckDecision, StationHandler, StepRunnerBusAuth, StepRunnerPlatformDefaults, TrayManifest, WorkerBootstrapCredentials, WorkerCapabilities, WorkerContributionManifest, WorkerContributionRef, WorkerDispatch, WorkerMaterializationSpec, WorkerProvisionOutcome, WorkerProvisionRequest, WorkerRequirements, WorkerRuntimeContext, WorkflowDefinition, WorkflowRunContext, WorkflowRunResult, WorkflowRunResult as WorkflowRunResult$1, WorkflowRunnerCompletion, WorkflowRunnerCompletion as WorkflowRunnerCompletion$1, WorkflowRunnerRunOptions, WorkflowWorkerConfig, WorkflowWorkerSource, WorkflowZodSchemas, WorkspaceRequirement } from "@makaio/framework/contracts";
+import { ExecutionAttemptBootstrapStartRefusalReason, ExecutionAttemptControlReportResponse, ExecutionAttemptInstruction, ExecutionAttemptOperationAdmitRefusalReason, ExecutionAttemptOperationDelivery, ExecutionAttemptOperationKind, ExecutionAttemptOperationReceipt, ExecutionAttemptOutcome, ExecutionAttemptRuntimeRegisterRefusalReason, ExecutionAttemptWorkspaceBinding, ExtensionConfigProvider, ExtensionOperatorConfigEntry, ExtensionOperatorConfigSource, IWorkerProvider, IWorkflowRunner, IWorkflowRunner as IWorkflowRunner$1, JsonValue, LoopGateHandler, MakaioNodeExtension, NormalizedWorkerCapabilities, OutcomeAckDecision, StationHandler, StepRunnerBusAuth, StepRunnerPlatformDefaults, TrayManifest, WorkerBootstrapCredentials, WorkerCapabilities, WorkerContributionManifest, WorkerContributionRef, WorkerDispatch, WorkerMaterializationSpec, WorkerProvisionOutcome, WorkerProvisionRequest, WorkerRequirements, WorkerRuntimeContext, WorkflowDefinition, WorkflowRunContext, WorkflowRunResult, WorkflowRunResult as WorkflowRunResult$1, WorkflowRunnerCompletion, WorkflowRunnerCompletion as WorkflowRunnerCompletion$1, WorkflowRunnerRunOptions, WorkflowWorkerConfig, WorkflowWorkerSource, WorkflowZodSchemas, WorkspaceRequirement } from "@makaio/framework/contracts";
 import { BusTransport, IFilteredBus, IMakaioBus, SubjectTelemetryProjectorRegistry } from "@makaio/framework/bus";
 import { DispatchingAuth, HmacAuth, TransportAuth } from "@makaio/framework/node/transports";
 import { ContributionProcessor, ExtensionCoordinator, ExtensionRuntimeSurface, KernelExtensionContext, KernelMakaioExtension, RuntimeCapability, TransportProvider, WindowRegistry } from "@makaio/framework/kernel";
@@ -475,6 +475,162 @@ interface InitializeNodeDatabaseResult {
  */
 declare function initializeNodeDatabase(options: InitializeNodeDatabaseOptions): Promise<InitializeNodeDatabaseResult>;
 //#endregion
+//#region runtimes/node/src/extension-operator-config.d.ts
+/**
+ * Largest operator config file the loader will read into memory.
+ *
+ * The file is a hand-authored configuration object, so a megabyte is orders of
+ * magnitude more than any real one needs. The bound exists because the loader
+ * runs before anything else in boot and reads whatever the directory holds: a
+ * stray database dump or log file that happens to end in `.json` would
+ * otherwise be parsed in full, on the boot path, for an extension that cannot
+ * use it. Exceeding it is reported as an unusable entry rather than ignored,
+ * because the operator did put a file there.
+ */
+declare const MAX_OPERATOR_CONFIG_BYTES: number;
+/** Options for {@link loadExtensionOperatorConfig}. */
+interface LoadExtensionOperatorConfigOptions {
+  /** Absolute Makaio data-home path whose `config/extensions/` directory is scanned. */
+  readonly makaioHome: string;
+}
+/**
+ * An immutable operator-config layer that can also be enumerated.
+ *
+ * {@link ExtensionOperatorConfigSource} answers "what did the operator supply
+ * for this extension?", which is all the kernel needs. A composition root needs
+ * the inverse question too — "is there an entry nothing will ever read?" — to
+ * tell an operator that a file they wrote has no effect. Enumeration is
+ * therefore part of the boot-facing type rather than of the kernel contract.
+ */
+interface ExtensionOperatorConfigSnapshot extends ExtensionOperatorConfigSource {
+  /**
+   * Every entry in the snapshot, as `[extension name, entry]` pairs in the
+   * order they were captured.
+   *
+   * A frozen array rather than the lookup structure itself: the snapshot has to
+   * answer every lookup with the same entry for the coordinator's lifetime, and
+   * handing out the map it looks up in would let whoever holds the snapshot add
+   * or drop entries after boot has read it. Enumeration is a report, not a
+   * handle on the store.
+   */
+  readonly entries: readonly (readonly [string, ExtensionOperatorConfigEntry])[];
+}
+/** The part of a retained package {@link warnOnUnappliedExtensionOperatorConfig} inspects. */
+interface ExtensionOperatorConfigConsumer {
+  /** Package name, matched against the name an operator file decodes to. */
+  readonly name: string;
+  /** The package's config schema, or `undefined` when it declares no configuration surface. */
+  readonly configSchema?: unknown;
+}
+/**
+ * Resolve the directory that holds operator-owned extension config files.
+ *
+ * Exported so a host, a test, or a future scaffolding command names the
+ * location through this module rather than restating the path layout.
+ * @param makaioHome - Absolute Makaio data-home path.
+ * @returns Absolute path to the operator config directory. It is not created.
+ */
+declare function resolveExtensionOperatorConfigDir(makaioHome: string): string;
+/**
+ * Build an operator-config snapshot from an already-collected set of entries.
+ *
+ * The scan calls this with what it read; a host embedding the runtime calls it
+ * to inject a layer of its own without touching a filesystem.
+ *
+ * Entries are frozen in place, configuration objects deeply. The contract
+ * requires a source to answer every lookup with equivalent values for the
+ * coordinator's lifetime, and an extension that is handed a configuration
+ * object holds a reference to it — so the guarantee has to be a property of the
+ * values themselves, not of this module's discipline in not touching them.
+ * Freezing the caller's objects rather than copying them is deliberate: a copy
+ * would leave the caller holding a mutable original that silently diverges from
+ * what every extension sees.
+ *
+ * The map the snapshot looks up in is private to it. The caller's map is
+ * copied, and enumeration answers with a frozen array of pairs, so nothing the
+ * snapshot is handed to can add, drop, or repoint an entry after boot has
+ * resolved against it.
+ * @param entries - Operator entries keyed by extension name. The map is copied,
+ *   so adding or removing entries afterwards cannot change the snapshot; the
+ *   entry objects themselves are frozen rather than cloned.
+ * @returns An immutable snapshot over those entries.
+ */
+declare function createExtensionOperatorConfigSnapshot(entries: ReadonlyMap<string, ExtensionOperatorConfigEntry>): ExtensionOperatorConfigSnapshot;
+/**
+ * Read every operator config file in the Makaio home exactly once.
+ *
+ * Per-file failure is data, not an exception: a file that cannot be read,
+ * cannot be parsed, or does not hold a JSON object becomes a failure entry, so
+ * one broken file cannot stop the scan. The failure surfaces when the affected
+ * extension activates, where the coordinator's criticality rules decide between
+ * isolating that extension and failing boot.
+ *
+ * Failure of the *directory* is different and does throw. An absent directory
+ * is the normal case and yields an empty snapshot with no diagnostic; any other
+ * reason the listing cannot be taken — a permission denial, a file where the
+ * directory should be — means the operator's configuration cannot be seen at
+ * all, and starting every extension without it would look exactly like success.
+ * The directory is never created: an empty one would be indistinguishable from
+ * "the operator configured nothing", and every home would carry it.
+ *
+ * Files are read one at a time. A handful of small hand-written files does not
+ * need concurrency, and a deterministic order keeps the diagnostics a failing
+ * boot prints in the order the directory lists them.
+ *
+ * Entries that address no extension are skipped: a name that does not end in
+ * `.json`, or whose stem is not a canonical encoding of an extension name, is
+ * reported and dropped. Dot-prefixed names are skipped silently — a canonical
+ * stem never begins with a dot, so an editor lock file such as `.#gateway.json`
+ * or a `.DS_Store` is bookkeeping, not something an operator wrote to configure
+ * anything.
+ *
+ * Windows reserves a handful of device names (`con`, `prn`, `aux`, `nul`,
+ * `com1`–`com9`, `lpt1`–`lpt9`) that an extension manifest does not exclude, so
+ * an extension named for one has no writable operator-config path there. No
+ * special handling exists: such a file cannot be created in the first place, so
+ * the scan simply never sees it.
+ * @param options - Makaio home whose operator config directory is scanned.
+ * @returns The snapshot of everything the directory holds.
+ * @throws Error When the operator config directory exists but cannot be listed.
+ */
+declare function loadExtensionOperatorConfig(options: LoadExtensionOperatorConfigOptions): Promise<ExtensionOperatorConfigSnapshot>;
+/**
+ * Report operator entries that no extension will ever read.
+ *
+ * Three shapes are silent without this: a file naming an extension that is not
+ * loaded, a file whose name differs in case from the extension it was meant for
+ * — which decodes to a name the coordinator's exact, case-sensitive keys never
+ * match, so it lands in the same "not loaded" case — and a usable file for an
+ * extension that declares no config schema, where config resolution has nothing
+ * to parse it into and drops it. All three are operator mistakes that otherwise
+ * look exactly like success.
+ *
+ * Never fatal. An operator who prepares a file for an extension they have not
+ * installed yet, or who disables one temporarily, must still be able to boot.
+ *
+ * Unusable entries for loaded extensions are deliberately not reported here:
+ * they are raised when that extension activates, so reporting them twice would
+ * only make the activation failure harder to find.
+ * @param snapshot - Operator config snapshot built for this process.
+ * @param retainedPackages - Packages the coordinator retained for this boot.
+ */
+declare function warnOnUnappliedExtensionOperatorConfig(snapshot: ExtensionOperatorConfigSnapshot, retainedPackages: readonly ExtensionOperatorConfigConsumer[]): void;
+/**
+ * Report loaded extensions that no operator config file can ever name.
+ *
+ * The encoding is defined for every name an extension realistically carries, but
+ * not for all of them: a name whose percent-encoded file name would exceed a
+ * filesystem's per-component limit has no stem, and neither has one that is not
+ * well-formed Unicode. Such an extension is configurable through every other
+ * layer and only through them, which is invisible until an operator writes a
+ * file for it and nothing happens — there is no file name for them to have
+ * written, so the unapplied-entry check above can never speak for it either.
+ *
+ * Never fatal: the extension runs, it simply cannot be configured by file.
+ * @param retainedPackages - Packages the coordinator retained for this boot.
+ */
+declare function warnOnUnaddressableExtensionOperatorConfigNames(retainedPackages: readonly ExtensionOperatorConfigConsumer[]): void;
+//#endregion
 //#region runtimes/node/src/workflow-worker/worker-entry-resolver.d.ts
 /** Worker entry build mode. */
 type WorkflowWorkerEntryMode = 'source' | 'dist';
@@ -1022,11 +1178,26 @@ interface CoreBootOptions {
   /**
    * Host-provided package config defaults keyed by package name.
    *
-   * Merged with descriptor defaults before stored config is loaded. Prefer
+   * Merged with descriptor defaults into the weakest layer of an extension's
+   * configuration chain: stored configuration records override these values,
+   * and an operator-supplied configuration layer overrides both. Prefer
    * `makaio.config.*` for user/workspace runtime defaults; this seam remains
    * for composition roots that need to inject process-local defaults.
    */
   readonly packageConfigDefaults?: ReadonlyMap<string, Readonly<Record<string, unknown>>>;
+  /**
+   * Pre-built operator-owned extension configuration layer.
+   *
+   * Omit it — every shipping host does — and the runtime reads
+   * `<makaioHome>/config/extensions/` itself, so a host inherits the layer
+   * without wiring anything. Supply it to embed the runtime on a home that does
+   * not exist on disk, or to drive configuration resolution from a test.
+   *
+   * Typed as the enumerable snapshot rather than the bare kernel contract
+   * because boot also reports entries no loaded extension will read, which
+   * requires walking them.
+   */
+  readonly operatorConfig?: ExtensionOperatorConfigSnapshot;
   /**
    * Host-provided handlers for client binary post-install descriptors.
    *
@@ -1122,14 +1293,21 @@ interface CoreBootOptions {
    */
   readonly devPortalPackages?: DevPortalMap;
   /**
-   * Optional provider for persisted extension configuration and enablement state.
+   * Optional provider for persisted extension configuration.
+   *
+   * When present, the coordinator calls `loadConfig` during
+   * {@link ExtensionCoordinator.startAll} and on re-enable to overlay stored
+   * configuration over schema defaults. When absent, extensions start with
+   * default (Zod-schema) configuration only.
    *
-   * When present, the coordinator consults this provider during {@link ExtensionCoordinator.startAll}
-   * and `ExtensionCoordinator.enableExtension` to load stored configuration and
-   * skip packages that were previously disabled. When absent, all extensions
-   * start enabled with default (Zod-schema) configuration only.
+   * **Breaking change:** `loadEnabled` has been removed from this seam.
+   * Enablement state is now managed exclusively by the runtime's
+   * {@link ExtensionEnablementStore} backed by
+   * `$MAKAIO_HOME/config/extensions.json`. Hosts that previously forwarded
+   * `loadEnabled` from this provider must remove it; the boot path wires the
+   * store's `loadEnabled` directly and ignores any method by that name here.
    */
-  readonly extensionConfigProvider?: ExtensionConfigProvider;
+  readonly extensionConfigProvider?: Pick<ExtensionConfigProvider, 'loadConfig'>;
   /**
    * Host-owned coordinator wiring invoked after framework processors are registered
    * and before {@link ExtensionCoordinator.startAll}.
@@ -3068,4 +3246,4 @@ interface InstalledAttemptControlEndpoint {
  */
 declare function installAttemptControlEndpoint(bus: IMakaioBus, identity: AttemptControlEndpointIdentity, deps?: AttemptControlEndpointDeps): Promise<InstalledAttemptControlEndpoint>;
 //#endregion
-export { CreateIsolatedWorkflowRuntimeOptions as $, computeContributionPackageDigest as $t, createLocalGitWorkspacePreparation as A, PrepareAdapterRuntimeInput as An, runWorkerBootstrapExchange as At, HeadlessWorkerMaterializer as B, BootMakaioRuntimeOptions as Bt, admitWorkflowRunOperation as C, HttpContributionPhase as Cn, WorkerRunnerOptions as Ct, loadWorkflowModule as D, createHonoRouteGraph as Dn, createNodeWorkflowRunnerPackageOptions as Dt, registerWorkerRuntime as E, HonoRouteGraphOptions as En, createNodeWorkflowRunner as Et, HeadlessWorkerBootstrap as F, IWorkflowRunner$1 as Ft, runHeadlessWorkflowWorker as G, UpstreamTelemetryBootOptions as Gt, HeadlessWorkflowWorkerDeps as H, MakaioRuntime as Ht, HeadlessWorkerBootstrapCredentials as I, RuntimeLoadedWorkflow as It, WorkloadControlBinding as J, MaterializationError as Jt, InstalledWorkloadAdapter as K, WorkflowRunnerBootOptions as Kt, HeadlessWorkerBusConnector as L, ThinWorkflowPiscinaRunnerOptions as Lt, HeadlessWorkerDeps as M, activateAdapterRuntimeIdentity as Mn, withWorkerBootstrapDeadline as Mt, HeadlessWorkerResult as N, prepareAdapterRuntime as Nn, createWorkerBusAuth as Nt, loadWorkflowModules as O, ActivateAdapterRuntimeIdentityInput as On, BootstrapExchangeResult as Ot, runHeadlessWorker as P, ThinWorkflowPiscinaRunner as Pt, SetupProcessGroupObservation as Q, assertNoSymlinkEscape as Qt, HeadlessWorkerContributionLoader as R, WorkflowRunResult$1 as Rt, RuntimeRegistrationRefusedError as S, createHttpRouteGraphBuilder as Sn, WorkerRunner as St, registerAndAdmitWorkflowRun as T, HonoRouteGraph as Tn, NodeWorkflowRunnerPackageOptions as Tt, HeadlessWorkflowWorkerResult as U, ServerTransportProvider as Ut, HeadlessWorkerPostCommitObserver as V, CoreBootOptions as Vt, MaterializedWorkspace as W, TransportReadyInfo as Wt, WorkloadInvocationResult as X, WorkspaceRootResolver as Xt, WorkloadInvocationPreparation as Y, ParsedSriIntegrity as Yt, runWorkloadInvocation as Z, assertContainedIn as Zt, OperationDeliveryEndpointIdentity as _, FrameworkModuleResolver as _n, OutcomeReconnect as _t, InstalledAttemptControlEndpoint as a, WorkflowWorkerEntryMode as an, InProcessWorkflowRunner as at, RegisterAndAdmitWorkflowRunOptions as b, resolveFrameworkSpecifier as bn, submitAttemptOutcomeWithAck as bt, BootstrapStartRefusedError as c, DatabaseBootOptions as cn, PiscinaThinWorkflowProviderOptions as ct, bootstrapWorkerRuntime as d, initializeNodeDatabase as dn, createWorkflowLaunchResolver as dt, computeDirectoryDigest as en, IsolatedWorkflowRuntime as et, AdmitWorkflowRunOperationOptions as f, HostCapabilityDeclaration as fn, AttemptOutcomeDeliveryError as ft, OperationDeliveryEndpoint as g, BridgeBrowserOptions as gn, OutcomeDeliveryError as gt, OperationAdmissionRefusedError as h, ShutdownStep as hn, DELIVERED_DECISIONS as ht, AttemptControlReportOptions as i, verifyContribution as in, createIsolatedWorkflowRuntime as it, LocalGitSourceOptions as j, PreparedAdapterRuntime as jn, BootstrapDeadlineExceededError as jt, loadWorkflowFromConfig as k, ActivatedAdapterRuntimeIdentity as kn, WorkerBootstrapExchangeOptions as kt, BootstrapWorkerRuntimeOptions as l, InitializeNodeDatabaseOptions as ln, WorkflowAttemptInstructionReader as lt, DeliverableOperationKind as m, selectFrameworkCorePackages as mn, AuthorityRequestDeliveryError as mt, AttemptControlEndpointIdentity as n, materializeLocalDirectory as nn, WorkflowRuntimeAuthorityConnector as nt, installAttemptControlEndpoint as o, WorkflowWorkerEntryResolverOptions as on, InProcessWorkflowRunnerOptions as ot, AdmittedWorkflowRun as p, normalizeNodeHostCapabilities as pn, AttemptOutcomeSubmitPayload as pt, RunWorkloadInvocationOptions as q, LocalDirectoryMaterializerOptions as qt, AttemptControlLastReport as r, parseSriIntegrity as rn, WorkflowRuntimeContributionLoader as rt, BootstrapRuntimeConnection as s, resolveWorkflowWorkerEntry as sn, PiscinaThinWorkflowProvider as st, AttemptControlEndpointDeps as t, computeFileDigest as tn, IsolatedWorkflowRuntimeContext as tt, StartedWorkerRuntime as u, InitializeNodeDatabaseResult as un, WorkflowLaunchResolver as ut, OperationDeliveryHandler as v, NodeFrameworkModuleResolver as vn, OutcomeSubmitPayload as vt, installOperationDeliveryEndpoint as w, HttpRouteContribution as wn, CreateNodeWorkflowRunnerPackageOptionsParams as wt, RegisterWorkerRuntimeOptions as x, HttpRouteGraphBuilder as xn, submitOutcomeWithAck as xt, OperationDeliveryHandlers as y, NoopFrameworkModuleResolver as yn, OutcomeSubmitRetryConfig as yt, HeadlessWorkerExecutor as z, BootCoordinatorSetupContext as zt };
+export { CreateIsolatedWorkflowRuntimeOptions as $, computeContributionPackageDigest as $t, createLocalGitWorkspacePreparation as A, HttpRouteGraphBuilder as An, runWorkerBootstrapExchange as At, HeadlessWorkerMaterializer as B, PreparedAdapterRuntime as Bn, BootMakaioRuntimeOptions as Bt, admitWorkflowRunOperation as C, selectFrameworkCorePackages as Cn, WorkerRunnerOptions as Ct, loadWorkflowModule as D, NodeFrameworkModuleResolver as Dn, createNodeWorkflowRunnerPackageOptions as Dt, registerWorkerRuntime as E, FrameworkModuleResolver as En, createNodeWorkflowRunner as Et, HeadlessWorkerBootstrap as F, HonoRouteGraphOptions as Fn, IWorkflowRunner$1 as Ft, runHeadlessWorkflowWorker as G, UpstreamTelemetryBootOptions as Gt, HeadlessWorkflowWorkerDeps as H, prepareAdapterRuntime as Hn, MakaioRuntime as Ht, HeadlessWorkerBootstrapCredentials as I, createHonoRouteGraph as In, RuntimeLoadedWorkflow as It, WorkloadControlBinding as J, MaterializationError as Jt, InstalledWorkloadAdapter as K, WorkflowRunnerBootOptions as Kt, HeadlessWorkerBusConnector as L, ActivateAdapterRuntimeIdentityInput as Ln, ThinWorkflowPiscinaRunnerOptions as Lt, HeadlessWorkerDeps as M, HttpContributionPhase as Mn, withWorkerBootstrapDeadline as Mt, HeadlessWorkerResult as N, HttpRouteContribution as Nn, createWorkerBusAuth as Nt, loadWorkflowModules as O, NoopFrameworkModuleResolver as On, BootstrapExchangeResult as Ot, runHeadlessWorker as P, HonoRouteGraph as Pn, ThinWorkflowPiscinaRunner as Pt, SetupProcessGroupObservation as Q, assertNoSymlinkEscape as Qt, HeadlessWorkerContributionLoader as R, ActivatedAdapterRuntimeIdentity as Rn, WorkflowRunResult$1 as Rt, RuntimeRegistrationRefusedError as S, normalizeNodeHostCapabilities as Sn, WorkerRunner as St, registerAndAdmitWorkflowRun as T, BridgeBrowserOptions as Tn, NodeWorkflowRunnerPackageOptions as Tt, HeadlessWorkflowWorkerResult as U, ServerTransportProvider as Ut, HeadlessWorkerPostCommitObserver as V, activateAdapterRuntimeIdentity as Vn, CoreBootOptions as Vt, MaterializedWorkspace as W, TransportReadyInfo as Wt, WorkloadInvocationResult as X, WorkspaceRootResolver as Xt, WorkloadInvocationPreparation as Y, ParsedSriIntegrity as Yt, runWorkloadInvocation as Z, assertContainedIn as Zt, OperationDeliveryEndpointIdentity as _, DatabaseBootOptions as _n, OutcomeReconnect as _t, InstalledAttemptControlEndpoint as a, WorkflowWorkerEntryMode as an, InProcessWorkflowRunner as at, RegisterAndAdmitWorkflowRunOptions as b, initializeNodeDatabase as bn, submitAttemptOutcomeWithAck as bt, BootstrapStartRefusedError as c, ExtensionOperatorConfigConsumer as cn, PiscinaThinWorkflowProviderOptions as ct, bootstrapWorkerRuntime as d, MAX_OPERATOR_CONFIG_BYTES as dn, createWorkflowLaunchResolver as dt, computeDirectoryDigest as en, IsolatedWorkflowRuntime as et, AdmitWorkflowRunOperationOptions as f, createExtensionOperatorConfigSnapshot as fn, AttemptOutcomeDeliveryError as ft, OperationDeliveryEndpoint as g, warnOnUnappliedExtensionOperatorConfig as gn, OutcomeDeliveryError as gt, OperationAdmissionRefusedError as h, warnOnUnaddressableExtensionOperatorConfigNames as hn, DELIVERED_DECISIONS as ht, AttemptControlReportOptions as i, verifyContribution as in, createIsolatedWorkflowRuntime as it, LocalGitSourceOptions as j, createHttpRouteGraphBuilder as jn, BootstrapDeadlineExceededError as jt, loadWorkflowFromConfig as k, resolveFrameworkSpecifier as kn, WorkerBootstrapExchangeOptions as kt, BootstrapWorkerRuntimeOptions as l, ExtensionOperatorConfigSnapshot as ln, WorkflowAttemptInstructionReader as lt, DeliverableOperationKind as m, resolveExtensionOperatorConfigDir as mn, AuthorityRequestDeliveryError as mt, AttemptControlEndpointIdentity as n, materializeLocalDirectory as nn, WorkflowRuntimeAuthorityConnector as nt, installAttemptControlEndpoint as o, WorkflowWorkerEntryResolverOptions as on, InProcessWorkflowRunnerOptions as ot, AdmittedWorkflowRun as p, loadExtensionOperatorConfig as pn, AttemptOutcomeSubmitPayload as pt, RunWorkloadInvocationOptions as q, LocalDirectoryMaterializerOptions as qt, AttemptControlLastReport as r, parseSriIntegrity as rn, WorkflowRuntimeContributionLoader as rt, BootstrapRuntimeConnection as s, resolveWorkflowWorkerEntry as sn, PiscinaThinWorkflowProvider as st, AttemptControlEndpointDeps as t, computeFileDigest as tn, IsolatedWorkflowRuntimeContext as tt, StartedWorkerRuntime as u, LoadExtensionOperatorConfigOptions as un, WorkflowLaunchResolver as ut, OperationDeliveryHandler as v, InitializeNodeDatabaseOptions as vn, OutcomeSubmitPayload as vt, installOperationDeliveryEndpoint as w, ShutdownStep as wn, CreateNodeWorkflowRunnerPackageOptionsParams as wt, RegisterWorkerRuntimeOptions as x, HostCapabilityDeclaration as xn, submitOutcomeWithAck as xt, OperationDeliveryHandlers as y, InitializeNodeDatabaseResult as yn, OutcomeSubmitRetryConfig as yt, HeadlessWorkerExecutor as z, PrepareAdapterRuntimeInput as zn, BootCoordinatorSetupContext as zt };

package/dist/{index-B4pPwpKk.d.mts → index-DfREUyAk.d.mts}

@@ -1,4 +1,4 @@
-import { c as AdapterRuntimeSnapshotErrorCode } from "./schemas-CeItAAQM.mjs";
+import { c as AdapterRuntimeSnapshotErrorCode } from "./schemas-BLxdGZkr.mjs";
 import { ProviderContext, ResolvedProviderContext } from "@makaio/framework/contracts";
 import { IMakaioBus } from "@makaio/framework/bus";
 

package/dist/{index-ClKwF6LE.d.mts → index-Di-R1gmo.d.mts}

@@ -1,5 +1,5 @@
-import { C as ArtifactScope, K as ArtifactKindRegistration$1, V as ArtifactCategory, X as ArtifactLifecycleState, _ as ArtifactRelationTarget, ot as ArtifactRef$1, p as ArtifactRelation, rt as ArtifactUniquenessRule, s as ArtifactObservation$1, t as ArtifactActor, x as ArtifactRevision$1, y as ArtifactRepresentations } from "./schemas-JjyFxrC0.mjs";
-import { l as JsonValue$1 } from "./json-value-Ymw2f8i_.mjs";
+import { C as ArtifactScope, K as ArtifactKindRegistration$1, V as ArtifactCategory, X as ArtifactLifecycleState, _ as ArtifactRelationTarget, ot as ArtifactRef$1, p as ArtifactRelation, rt as ArtifactUniquenessRule, s as ArtifactObservation$1, t as ArtifactActor, x as ArtifactRevision$1, y as ArtifactRepresentations } from "./schemas-rMUsvzeJ.mjs";
+import { l as JsonValue$1 } from "./json-value-Bjl8jzom.mjs";
 import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
 import { MakaioBusLike } from "@makaio/framework/core";

package/dist/{index-DWANFpTG.d.mts → index-Jdju2W3y.d.mts}

@@ -1,4 +1,4 @@
-import { t as CapabilityService } from "./capability-service-CQ1aw_p-.mjs";
+import { t as CapabilityService } from "./capability-service-CUN0MIS7.mjs";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
 import { MakaioNodeExtension } from "@makaio/framework/contracts";
 import { IMakaioBus } from "@makaio/framework/bus";

package/dist/{index-DQKVQPUS.d.mts → index-L6mssyeZ.d.mts}

@@ -1,4 +1,4 @@
-import { d as PiscinaCodeExecutionProviderOptions } from "./types-hkExapGH.mjs";
+import { d as PiscinaCodeExecutionProviderOptions } from "./types-BSx8YYlc.mjs";
 import { CodeExecutionOutcome, CodeExecutionProviderContext, CodeExecutionRequest, CodeExecutionTrustLevel, ICodeExecutionProvider } from "@makaio/framework/contracts";
 
 //#region runtimes/node/src/code-execution/piscina-code-execution-provider.d.ts

package/dist/{index-B8v1-2-V2.d.mts → index-anIxF_eT.d.mts}

@@ -1573,7 +1573,7 @@ declare function computeMetaTags(capabilities: readonly ToolCapability[]): ToolM
 //#endregion
 //#region core/contracts/src/tool-capability/picker-types.d.ts
 /**
- * Composite value emitted by the CapabilityPicker widget.
+ * Composite value emitted by the host's `capability-picker` widget.
  * Controls four schema fields via a single widget.
  * @param allowedCapabilities - Capabilities explicitly allowed (present = allowed in three-state model)
  * @param disallowedCapabilities - Capabilities explicitly disallowed (present = disallowed in three-state model)