@makaio/framework 1.0.0-dev-1789609124644 → 1.0.0-dev-1790066089222

package/dist/runtime-node/code-execution/index.d.mts

@@ -1,3 +1,3 @@
-import { a as CODE_EXECUTION_DEFAULT_MAX_PROGRAM_FILES, c as CODE_EXECUTION_DEFAULT_MAX_SOURCE_BYTES, d as PiscinaCodeExecutionProviderOptions, i as CODE_EXECUTION_DEFAULT_MAX_INVOCATIONS_PER_WORKER, n as CODE_EXECUTION_DEFAULT_MAX_ARGUMENT_BYTES, o as CODE_EXECUTION_DEFAULT_MAX_QUEUED_INVOCATIONS, r as CODE_EXECUTION_DEFAULT_MAX_CONCURRENCY, s as CODE_EXECUTION_DEFAULT_MAX_RESULT_BYTES, t as CODE_EXECUTION_DEFAULT_IDLE_TIMEOUT_MS } from "../../types-hkExapGH.mjs";
-import { t as PiscinaCodeExecutionProvider } from "../../index-DQKVQPUS.mjs";
+import { a as CODE_EXECUTION_DEFAULT_MAX_PROGRAM_FILES, c as CODE_EXECUTION_DEFAULT_MAX_SOURCE_BYTES, d as PiscinaCodeExecutionProviderOptions, i as CODE_EXECUTION_DEFAULT_MAX_INVOCATIONS_PER_WORKER, n as CODE_EXECUTION_DEFAULT_MAX_ARGUMENT_BYTES, o as CODE_EXECUTION_DEFAULT_MAX_QUEUED_INVOCATIONS, r as CODE_EXECUTION_DEFAULT_MAX_CONCURRENCY, s as CODE_EXECUTION_DEFAULT_MAX_RESULT_BYTES, t as CODE_EXECUTION_DEFAULT_IDLE_TIMEOUT_MS } from "../../types-BSx8YYlc.mjs";
+import { t as PiscinaCodeExecutionProvider } from "../../index-L6mssyeZ.mjs";
 export { CODE_EXECUTION_DEFAULT_IDLE_TIMEOUT_MS, CODE_EXECUTION_DEFAULT_MAX_ARGUMENT_BYTES, CODE_EXECUTION_DEFAULT_MAX_CONCURRENCY, CODE_EXECUTION_DEFAULT_MAX_INVOCATIONS_PER_WORKER, CODE_EXECUTION_DEFAULT_MAX_PROGRAM_FILES, CODE_EXECUTION_DEFAULT_MAX_QUEUED_INVOCATIONS, CODE_EXECUTION_DEFAULT_MAX_RESULT_BYTES, CODE_EXECUTION_DEFAULT_MAX_SOURCE_BYTES, PiscinaCodeExecutionProvider, PiscinaCodeExecutionProviderOptions };

package/dist/runtime-node/code-execution/index.mjs

@@ -1 +1 @@
-import{a as e,c as t,i as n,n as r,o as i,r as a,s as o,t as s}from"../../types-CsmvIK25.mjs";import{t as c}from"../../code-execution-pUF4IO462.mjs";export{s as CODE_EXECUTION_DEFAULT_IDLE_TIMEOUT_MS,r as CODE_EXECUTION_DEFAULT_MAX_ARGUMENT_BYTES,a as CODE_EXECUTION_DEFAULT_MAX_CONCURRENCY,n as CODE_EXECUTION_DEFAULT_MAX_INVOCATIONS_PER_WORKER,e as CODE_EXECUTION_DEFAULT_MAX_PROGRAM_FILES,i as CODE_EXECUTION_DEFAULT_MAX_QUEUED_INVOCATIONS,o as CODE_EXECUTION_DEFAULT_MAX_RESULT_BYTES,t as CODE_EXECUTION_DEFAULT_MAX_SOURCE_BYTES,c as PiscinaCodeExecutionProvider};
+import{a as e,c as t,i as n,n as r,o as i,r as a,s as o,t as s}from"../../types-wwuw7RkB.mjs";import{t as c}from"../../code-execution-DWSux6k1.mjs";export{s as CODE_EXECUTION_DEFAULT_IDLE_TIMEOUT_MS,r as CODE_EXECUTION_DEFAULT_MAX_ARGUMENT_BYTES,a as CODE_EXECUTION_DEFAULT_MAX_CONCURRENCY,n as CODE_EXECUTION_DEFAULT_MAX_INVOCATIONS_PER_WORKER,e as CODE_EXECUTION_DEFAULT_MAX_PROGRAM_FILES,i as CODE_EXECUTION_DEFAULT_MAX_QUEUED_INVOCATIONS,o as CODE_EXECUTION_DEFAULT_MAX_RESULT_BYTES,t as CODE_EXECUTION_DEFAULT_MAX_SOURCE_BYTES,c as PiscinaCodeExecutionProvider};

package/dist/runtime-node/extension-discovery.d.mts

@@ -1,2 +1,2 @@
-import { a as FilesystemDescriptorDiscovery, c as enumerateDescriptorPaths, i as ExtensionEntrypointModule, n as ExplicitDescriptorDiscovery, o as FilesystemDescriptorDiscoveryOptions, r as ExtensionDiscovery, s as MergedDescriptorDiscovery, t as DiscoveredExtension } from "../extension-discovery-CA2IhDRo.mjs";
-export { DiscoveredExtension, ExplicitDescriptorDiscovery, ExtensionDiscovery, ExtensionEntrypointModule, FilesystemDescriptorDiscovery, FilesystemDescriptorDiscoveryOptions, MergedDescriptorDiscovery, enumerateDescriptorPaths };
+import { a as ExtensionNameCollisionError, c as MergedDescriptorDiscovery, d as discoverExtensionTiers, f as enumerateDescriptorPaths, i as ExtensionEntrypointModule, l as deduplicateByDescriptorName, n as ExplicitDescriptorDiscovery, o as FilesystemDescriptorDiscovery, r as ExtensionDiscovery, s as FilesystemDescriptorDiscoveryOptions, t as DiscoveredExtension, u as describeSameTierNameCollision } from "../extension-discovery-Rup-gANp.mjs";
+export { DiscoveredExtension, ExplicitDescriptorDiscovery, ExtensionDiscovery, ExtensionEntrypointModule, ExtensionNameCollisionError, FilesystemDescriptorDiscovery, FilesystemDescriptorDiscoveryOptions, MergedDescriptorDiscovery, deduplicateByDescriptorName, describeSameTierNameCollision, discoverExtensionTiers, enumerateDescriptorPaths };

package/dist/runtime-node/extension-discovery.mjs

@@ -1 +1 @@
-import*as e from"node:fs/promises";import*as t from"node:path";import{glob as n}from"glob";import{parseExtensionDescriptor as r}from"@makaio/framework/contracts";const i=`descriptor.json`,a=[`**/node_modules/**`,`**/dist/**`,`**/.git/**`];async function o(r){let o=await e.stat(r).catch(()=>void 0);if(o===void 0)return[];if(o.isFile())return t.basename(r)===i?[r]:[];if(!o.isDirectory())return[];let s=t.join(r,i);if(await d(s))return[s];let c=t.basename(r)===`node_modules`,l=c?[`*/descriptor.json`,`@*/*/descriptor.json`]:[`**/${i}`];return(await Promise.all(l.map(e=>n(e,{absolute:!0,cwd:r,...c?{}:{ignore:[...a]},windowsPathsNoEscape:!0})))).flat()}var s=class{localNodeModulesDir;extensionsDir;nodeModulesDir;constructor(e,n){this.localNodeModulesDir=n?.localNodeModulesDir??t.join(e??process.cwd(),`node_modules`),this.extensionsDir=n?.extensionsDir??!1,this.nodeModulesDir=n?.nodeModulesDir??!1}async discover(){let[e,t,n]=await Promise.all([this.scanLocal(),this.scanInstalled(),this.scanGlobalNpm()]);return this.deduplicate(e,t,n)}async scanLocal(){if(this.localNodeModulesDir===!1)return[];let e=[t.join(this.localNodeModulesDir,`*/descriptor.json`),t.join(this.localNodeModulesDir,`@*/*/descriptor.json`)];return this.scanPatterns(e,`local`)}async scanInstalled(){if(this.extensionsDir===!1)return[];let e=[t.join(this.extensionsDir,`*/descriptor.json`),t.join(this.extensionsDir,`@*/*/descriptor.json`)];return this.scanPatterns(e,`installed`)}async scanGlobalNpm(){if(this.nodeModulesDir===!1)return[];let e=[t.join(this.nodeModulesDir,`*/descriptor.json`),t.join(this.nodeModulesDir,`@*/*/descriptor.json`)];return this.scanPatterns(e,`global-npm`)}async scanPatterns(i,a){let o=[];for(let s of i){let i=s.split(t.sep).join(`/`),c;try{c=await n(i,{nodir:!0,windowsPathsNoEscape:!0})}catch(e){console.warn(`[extensions] Skipping scan for pattern ${i}:`,e instanceof Error?e.message:e);continue}for(let n of c)try{let i=await e.readFile(n,`utf-8`),s=r(JSON.parse(i)),c=t.dirname(n);o.push({descriptor:s,extensionPath:c,source:a})}catch(e){console.warn(`[extensions] Skipping invalid descriptor at ${n}:`,e instanceof Error?e.message:e)}}return o}deduplicate(...e){return u(e)}},c=class{extensions;constructor(e){this.extensions=e}async discover(){return this.extensions}},l=class{discoveries;constructor(e){this.discoveries=e}async discover(){return u(await Promise.all(this.discoveries.map(e=>e.discover())))}};function u(e){let t=new Map;for(let n of e)for(let e of n)t.has(e.descriptor.name)||t.set(e.descriptor.name,e);return[...t.values()]}async function d(t){return e.stat(t).then(e=>e.isFile()).catch(()=>!1)}export{c as ExplicitDescriptorDiscovery,s as FilesystemDescriptorDiscovery,l as MergedDescriptorDiscovery,o as enumerateDescriptorPaths};
+import*as e from"node:fs/promises";import*as t from"node:path";import{glob as n}from"glob";import{parseExtensionDescriptor as r}from"@makaio/framework/contracts";async function i(e){return e.discoverTiers?e.discoverTiers():[await e.discover()]}const a=`descriptor.json`,o=[`**/node_modules/**`,`**/dist/**`,`**/.git/**`];async function s(r){let i=await e.stat(r).catch(()=>void 0);if(i===void 0)return[];if(i.isFile())return t.basename(r)===a?[r]:[];if(!i.isDirectory())return[];let s=t.join(r,a);if(await h(s))return[s];let c=t.basename(r)===`node_modules`,l=c?[`*/descriptor.json`,`@*/*/descriptor.json`]:[`**/${a}`];return(await Promise.all(l.map(e=>n(e,{absolute:!0,cwd:r,...c?{}:{follow:!0,ignore:[...o]},windowsPathsNoEscape:!0})))).flat()}var c=class{localNodeModulesDir;extensionsDir;nodeModulesDir;constructor(e,n){this.localNodeModulesDir=n?.localNodeModulesDir??t.join(e??process.cwd(),`node_modules`),this.extensionsDir=n?.extensionsDir??!1,this.nodeModulesDir=n?.nodeModulesDir??!1}async discover(){return p(await this.discoverTiers())}async discoverTiers(){return Promise.all([this.scanLocal(),this.scanInstalled(),this.scanGlobalNpm()])}async scanLocal(){if(this.localNodeModulesDir===!1)return[];let e=[t.join(this.localNodeModulesDir,`*/descriptor.json`),t.join(this.localNodeModulesDir,`@*/*/descriptor.json`)];return this.scanPatterns(e,`local`)}async scanInstalled(){if(this.extensionsDir===!1)return[];let e=[t.join(this.extensionsDir,`*/descriptor.json`),t.join(this.extensionsDir,`@*/*/descriptor.json`)];return this.scanPatterns(e,`installed`)}async scanGlobalNpm(){if(this.nodeModulesDir===!1)return[];let e=[t.join(this.nodeModulesDir,`*/descriptor.json`),t.join(this.nodeModulesDir,`@*/*/descriptor.json`)];return this.scanPatterns(e,`global-npm`)}async scanPatterns(i,a){let o=[];for(let s of i){let i=s.split(t.sep).join(`/`),c;try{c=await n(i,{nodir:!0,windowsPathsNoEscape:!0})}catch(e){console.warn(`[extensions] Skipping scan for pattern ${i}:`,e instanceof Error?e.message:e);continue}for(let n of c)try{let i=await e.readFile(n,`utf-8`),s=r(JSON.parse(i)),c=t.dirname(n);o.push({descriptor:s,extensionPath:c,source:a})}catch(e){console.warn(`[extensions] Skipping invalid descriptor at ${n}:`,e instanceof Error?e.message:e)}}return o}},l=class{extensions;constructor(e){this.extensions=e}async discover(){return this.extensions}async discoverTiers(){return[[...this.extensions]]}},u=class extends Error{descriptorName;constructor(e,t,n){super(d(e,t,n)),this.descriptorName=e,this.name=`ExtensionNameCollisionError`}};function d(e,t,n){return`Extension name collision: "${e}" is declared by two packages in the same discovery tier (${m(t)} and ${m(n)}). A descriptor name is an extension identity and cannot be shared, and packages within one tier have no precedence over each other. Remove or rename one of them.`}var f=class{discoveries;constructor(e){this.discoveries=e}async discover(){return p(await this.discoverTiers())}async discoverTiers(){return(await Promise.all(this.discoveries.map(e=>i(e)))).flat()}};function p(e){let t=new Map;for(let n of e){let e=new Map;for(let r of n){let n=r.descriptor.name,i=e.get(n);if(i!==void 0)throw new u(n,i,r);e.set(n,r);let a=t.get(n);if(a!==void 0){console.warn(`[extensions] Extension "${n}" is installed more than once: ${m(a)} takes precedence over ${m(r)}, which is shadowed and will not be loaded.`);continue}t.set(n,r)}}return[...t.values()]}function m(e){return`${e.source} at ${e.extensionPath}`}async function h(t){return e.stat(t).then(e=>e.isFile()).catch(()=>!1)}export{l as ExplicitDescriptorDiscovery,u as ExtensionNameCollisionError,c as FilesystemDescriptorDiscovery,f as MergedDescriptorDiscovery,p as deduplicateByDescriptorName,d as describeSameTierNameCollision,i as discoverExtensionTiers,s as enumerateDescriptorPaths};

package/dist/runtime-node/extension-validation.d.mts

@@ -1,2 +1,2 @@
-import { a as isMakaioExtensionLike, c as resolveConventionEntrypoint, i as isCliContributionLike, o as isWithinDirectory, r as entrypointStem } from "../load-extensions-DGstT4_p.mjs";
+import { a as isWithinDirectory, c as resolveConventionEntrypoint, i as isMakaioExtensionLike, n as entrypointStem, r as isCliContributionLike } from "../load-extensions-Be_lOjm_.mjs";
 export { entrypointStem, isCliContributionLike, isMakaioExtensionLike, isWithinDirectory, resolveConventionEntrypoint };

package/dist/runtime-node/extension-validation.mjs

@@ -1 +1 @@
-import{i as e,l as t,o as n,r,s as i}from"../load-extensions-BVgxTj_y.mjs";export{r as entrypointStem,e as isCliContributionLike,n as isMakaioExtensionLike,i as isWithinDirectory,t as resolveConventionEntrypoint};
+import{i as e,o as t,r as n,s as r,u as i}from"../load-extensions-BGfSWW_R.mjs";export{n as entrypointStem,e as isCliContributionLike,t as isMakaioExtensionLike,r as isWithinDirectory,i as resolveConventionEntrypoint};

package/dist/runtime-node/index.d.mts

@@ -1,27 +1,28 @@
+import { filterConfigDefaultsForLoadedPackages, mergePackageConfigDefaults } from "./boot-config.mjs";
 import { RuntimeSubjects } from "./bus/runtime/namespace.mjs";
 import { NodeClientBinaryStrategyDependencyOptions, createNodeClientBinaryStrategyDependencies } from "./client-binary-strategy-dependencies.mjs";
-import { a as CODE_EXECUTION_DEFAULT_MAX_PROGRAM_FILES, c as CODE_EXECUTION_DEFAULT_MAX_SOURCE_BYTES, d as PiscinaCodeExecutionProviderOptions, i as CODE_EXECUTION_DEFAULT_MAX_INVOCATIONS_PER_WORKER, n as CODE_EXECUTION_DEFAULT_MAX_ARGUMENT_BYTES, o as CODE_EXECUTION_DEFAULT_MAX_QUEUED_INVOCATIONS, r as CODE_EXECUTION_DEFAULT_MAX_CONCURRENCY, s as CODE_EXECUTION_DEFAULT_MAX_RESULT_BYTES, t as CODE_EXECUTION_DEFAULT_IDLE_TIMEOUT_MS } from "../types-hkExapGH.mjs";
-import { t as PiscinaCodeExecutionProvider } from "../index-DQKVQPUS.mjs";
-import { a as FilesystemDescriptorDiscovery, n as ExplicitDescriptorDiscovery, o as FilesystemDescriptorDiscoveryOptions, r as ExtensionDiscovery, s as MergedDescriptorDiscovery, t as DiscoveredExtension } from "../extension-discovery-CA2IhDRo.mjs";
-import { a as isMakaioExtensionLike, c as resolveConventionEntrypoint, i as isCliContributionLike, n as LoadExtensionsOptions, o as isWithinDirectory, r as entrypointStem, s as loadExtensions, t as DescriptorSourcePackageGroup } from "../load-extensions-DGstT4_p.mjs";
-import { $ as CreateIsolatedWorkflowRuntimeOptions, A as createLocalGitWorkspacePreparation, An as PrepareAdapterRuntimeInput, B as HeadlessWorkerMaterializer, Bt as BootMakaioRuntimeOptions, C as admitWorkflowRunOperation, Cn as HttpContributionPhase, Dn as createHonoRouteGraph, E as registerWorkerRuntime, En as HonoRouteGraphOptions, F as HeadlessWorkerBootstrap, Ft as IWorkflowRunner, G as runHeadlessWorkflowWorker, Gt as UpstreamTelemetryBootOptions, H as HeadlessWorkflowWorkerDeps, Ht as MakaioRuntime, I as HeadlessWorkerBootstrapCredentials, J as WorkloadControlBinding, K as InstalledWorkloadAdapter, Kt as WorkflowRunnerBootOptions, L as HeadlessWorkerBusConnector, Lt as ThinWorkflowPiscinaRunnerOptions, M as HeadlessWorkerDeps, Mn as activateAdapterRuntimeIdentity, N as HeadlessWorkerResult, Nn as prepareAdapterRuntime, On as ActivateAdapterRuntimeIdentityInput, P as runHeadlessWorker, Pt as ThinWorkflowPiscinaRunner, Q as SetupProcessGroupObservation, R as HeadlessWorkerContributionLoader, Rt as WorkflowRunResult, S as RuntimeRegistrationRefusedError, Sn as createHttpRouteGraphBuilder, T as registerAndAdmitWorkflowRun, Tn as HonoRouteGraph, U as HeadlessWorkflowWorkerResult, Ut as ServerTransportProvider, V as HeadlessWorkerPostCommitObserver, Vt as CoreBootOptions, Wt as TransportReadyInfo, X as WorkloadInvocationResult, Y as WorkloadInvocationPreparation, Z as runWorkloadInvocation, _ as OperationDeliveryEndpointIdentity, _n as FrameworkModuleResolver, a as InstalledAttemptControlEndpoint, an as WorkflowWorkerEntryMode, at as InProcessWorkflowRunner, b as RegisterAndAdmitWorkflowRunOptions, bn as resolveFrameworkSpecifier, bt as submitAttemptOutcomeWithAck, c as BootstrapStartRefusedError, cn as DatabaseBootOptions, d as bootstrapWorkerRuntime, dn as initializeNodeDatabase, et as IsolatedWorkflowRuntime, f as AdmitWorkflowRunOperationOptions, fn as HostCapabilityDeclaration, ft as AttemptOutcomeDeliveryError, g as OperationDeliveryEndpoint, gn as BridgeBrowserOptions, gt as OutcomeDeliveryError, h as OperationAdmissionRefusedError, hn as ShutdownStep, i as AttemptControlReportOptions, it as createIsolatedWorkflowRuntime, j as LocalGitSourceOptions, jn as PreparedAdapterRuntime, kn as ActivatedAdapterRuntimeIdentity, l as BootstrapWorkerRuntimeOptions, ln as InitializeNodeDatabaseOptions, m as DeliverableOperationKind, mn as selectFrameworkCorePackages, mt as AuthorityRequestDeliveryError, n as AttemptControlEndpointIdentity, nt as WorkflowRuntimeAuthorityConnector, o as installAttemptControlEndpoint, on as WorkflowWorkerEntryResolverOptions, ot as InProcessWorkflowRunnerOptions, p as AdmittedWorkflowRun, pn as normalizeNodeHostCapabilities, q as RunWorkloadInvocationOptions, r as AttemptControlLastReport, rt as WorkflowRuntimeContributionLoader, s as BootstrapRuntimeConnection, sn as resolveWorkflowWorkerEntry, t as AttemptControlEndpointDeps, tt as IsolatedWorkflowRuntimeContext, u as StartedWorkerRuntime, un as InitializeNodeDatabaseResult, v as OperationDeliveryHandler, vn as NodeFrameworkModuleResolver, w as installOperationDeliveryEndpoint, wn as HttpRouteContribution, x as RegisterWorkerRuntimeOptions, xn as HttpRouteGraphBuilder, y as OperationDeliveryHandlers, yn as NoopFrameworkModuleResolver, z as HeadlessWorkerExecutor, zt as BootCoordinatorSetupContext } from "../index-HJkz7i4E.mjs";
+import { a as CODE_EXECUTION_DEFAULT_MAX_PROGRAM_FILES, c as CODE_EXECUTION_DEFAULT_MAX_SOURCE_BYTES, d as PiscinaCodeExecutionProviderOptions, i as CODE_EXECUTION_DEFAULT_MAX_INVOCATIONS_PER_WORKER, n as CODE_EXECUTION_DEFAULT_MAX_ARGUMENT_BYTES, o as CODE_EXECUTION_DEFAULT_MAX_QUEUED_INVOCATIONS, r as CODE_EXECUTION_DEFAULT_MAX_CONCURRENCY, s as CODE_EXECUTION_DEFAULT_MAX_RESULT_BYTES, t as CODE_EXECUTION_DEFAULT_IDLE_TIMEOUT_MS } from "../types-BSx8YYlc.mjs";
+import { t as PiscinaCodeExecutionProvider } from "../index-L6mssyeZ.mjs";
+import { a as ExtensionNameCollisionError, c as MergedDescriptorDiscovery, n as ExplicitDescriptorDiscovery, o as FilesystemDescriptorDiscovery, r as ExtensionDiscovery, s as FilesystemDescriptorDiscoveryOptions, t as DiscoveredExtension } from "../extension-discovery-Rup-gANp.mjs";
+import { a as isWithinDirectory, c as resolveConventionEntrypoint, i as isMakaioExtensionLike, n as entrypointStem, o as loadExtensions, r as isCliContributionLike, s as normalizePackageExport, t as LoadExtensionsOptions } from "../load-extensions-Be_lOjm_.mjs";
+import { $ as CreateIsolatedWorkflowRuntimeOptions, A as createLocalGitWorkspacePreparation, An as HttpRouteGraphBuilder, B as HeadlessWorkerMaterializer, Bn as PreparedAdapterRuntime, Bt as BootMakaioRuntimeOptions, C as admitWorkflowRunOperation, Cn as selectFrameworkCorePackages, Dn as NodeFrameworkModuleResolver, E as registerWorkerRuntime, En as FrameworkModuleResolver, F as HeadlessWorkerBootstrap, Fn as HonoRouteGraphOptions, Ft as IWorkflowRunner, G as runHeadlessWorkflowWorker, Gt as UpstreamTelemetryBootOptions, H as HeadlessWorkflowWorkerDeps, Hn as prepareAdapterRuntime, Ht as MakaioRuntime, I as HeadlessWorkerBootstrapCredentials, In as createHonoRouteGraph, J as WorkloadControlBinding, K as InstalledWorkloadAdapter, Kt as WorkflowRunnerBootOptions, L as HeadlessWorkerBusConnector, Ln as ActivateAdapterRuntimeIdentityInput, Lt as ThinWorkflowPiscinaRunnerOptions, M as HeadlessWorkerDeps, Mn as HttpContributionPhase, N as HeadlessWorkerResult, Nn as HttpRouteContribution, On as NoopFrameworkModuleResolver, P as runHeadlessWorker, Pn as HonoRouteGraph, Pt as ThinWorkflowPiscinaRunner, Q as SetupProcessGroupObservation, R as HeadlessWorkerContributionLoader, Rn as ActivatedAdapterRuntimeIdentity, Rt as WorkflowRunResult, S as RuntimeRegistrationRefusedError, Sn as normalizeNodeHostCapabilities, T as registerAndAdmitWorkflowRun, Tn as BridgeBrowserOptions, U as HeadlessWorkflowWorkerResult, Ut as ServerTransportProvider, V as HeadlessWorkerPostCommitObserver, Vn as activateAdapterRuntimeIdentity, Vt as CoreBootOptions, Wt as TransportReadyInfo, X as WorkloadInvocationResult, Y as WorkloadInvocationPreparation, Z as runWorkloadInvocation, _ as OperationDeliveryEndpointIdentity, _n as DatabaseBootOptions, a as InstalledAttemptControlEndpoint, an as WorkflowWorkerEntryMode, at as InProcessWorkflowRunner, b as RegisterAndAdmitWorkflowRunOptions, bn as initializeNodeDatabase, bt as submitAttemptOutcomeWithAck, c as BootstrapStartRefusedError, cn as ExtensionOperatorConfigConsumer, d as bootstrapWorkerRuntime, dn as MAX_OPERATOR_CONFIG_BYTES, et as IsolatedWorkflowRuntime, f as AdmitWorkflowRunOperationOptions, fn as createExtensionOperatorConfigSnapshot, ft as AttemptOutcomeDeliveryError, g as OperationDeliveryEndpoint, gn as warnOnUnappliedExtensionOperatorConfig, gt as OutcomeDeliveryError, h as OperationAdmissionRefusedError, hn as warnOnUnaddressableExtensionOperatorConfigNames, i as AttemptControlReportOptions, it as createIsolatedWorkflowRuntime, j as LocalGitSourceOptions, jn as createHttpRouteGraphBuilder, kn as resolveFrameworkSpecifier, l as BootstrapWorkerRuntimeOptions, ln as ExtensionOperatorConfigSnapshot, m as DeliverableOperationKind, mn as resolveExtensionOperatorConfigDir, mt as AuthorityRequestDeliveryError, n as AttemptControlEndpointIdentity, nt as WorkflowRuntimeAuthorityConnector, o as installAttemptControlEndpoint, on as WorkflowWorkerEntryResolverOptions, ot as InProcessWorkflowRunnerOptions, p as AdmittedWorkflowRun, pn as loadExtensionOperatorConfig, q as RunWorkloadInvocationOptions, r as AttemptControlLastReport, rt as WorkflowRuntimeContributionLoader, s as BootstrapRuntimeConnection, sn as resolveWorkflowWorkerEntry, t as AttemptControlEndpointDeps, tt as IsolatedWorkflowRuntimeContext, u as StartedWorkerRuntime, un as LoadExtensionOperatorConfigOptions, v as OperationDeliveryHandler, vn as InitializeNodeDatabaseOptions, w as installOperationDeliveryEndpoint, wn as ShutdownStep, x as RegisterWorkerRuntimeOptions, xn as HostCapabilityDeclaration, y as OperationDeliveryHandlers, yn as InitializeNodeDatabaseResult, z as HeadlessWorkerExecutor, zn as PrepareAdapterRuntimeInput, zt as BootCoordinatorSetupContext } from "../index-DdJKsdya.mjs";
 import { ConfiguredRuntimeOptions, LoadMakaioConfigOptions, LoadedMakaioConfig, MAKAIO_CONFIG_FILE_ENV, MAKAIO_HOME_ENV, MakaioConfig, ParseMakaioConfigOptions, ParsedMakaioConfig, WorkflowRunnerConfig, buildConfiguredRuntimeOptions, createMakaioConfigDiscovery, defineMakaioConfig, loadMakaioConfig, parseMakaioConfig, resolveMakaioConfigPath, resolveMakaioHome, shouldIncludeExtension } from "./makaio-config.mjs";
 import { RotateWorkflowExecutionBusSecretParams, captureWorkflowExecutionBusSecretCleanup } from "./workflow-execution-bus-access.mjs";
 import { z } from "zod";
 import { IConfigStorage } from "@makaio/framework/core";
-import { Config, EntityUIConfig, ProtocolId } from "@makaio/framework/contracts";
+import { Config, EntityUIConfig, ExtensionConfigProvider, ExtensionDescriptor, ExtensionOperatorConfigEntry, MakaioNodeExtension, ProtocolId } from "@makaio/framework/contracts";
 import { BusTransport, IMakaioBus } from "@makaio/framework/bus";
 import { DispatchingAuth } from "@makaio/framework/node/transports";
-import { KernelMakaioExtension, TransportProvider } from "@makaio/framework/kernel";
+import { CredentialResolver } from "@makaio/framework/contracts/extension";
+import { ExtensionConfigResolution, InstalledExtensionCatalogSource, InstalledExtensionRecord, KernelMakaioExtension, TransportProvider } from "@makaio/framework/kernel";
+import { BaseService } from "@makaio/framework/service-base";
 import { MakaioDatabase, StorageDialect as StorageDialect$1 } from "@makaio/framework/storage/drizzle";
 import { CredentialRef } from "@makaio/framework/contracts/config";
 import { IModelRegistryCache, ModelRegistry } from "@makaio/framework/services/model-registry";
 import { AdapterInstance, LoadedAdapter } from "@makaio/framework/adapter-subsystem";
 import { MachineKeyStatus, MachineKeyValidation, PersistedMachineIdentity, loadOrCreateMachineIdentity, machineKeysExist, validateMachineKeys } from "@makaio/framework/node/machine-identity";
 import { TransportAuth as TransportAuth$1 } from "@makaio/framework/node/bus-server";
-import { ConfigProvider } from "@makaio/framework/providers";
 import { Server } from "node:http";
-
 //#region runtimes/node/src/register-adapter-name-resolver.d.ts
 /**
  * Register middleware to resolve `adapterName` to `adapterId` for `getCapabilities` requests.
@@ -49,12 +50,23 @@ declare function runRuntimeHandlerCleanups(cleanups: Array<() => void>): void;
  * @param getLoadedAdapters - Getter for current loaded adapter definitions.
  * @param getAdapterInstances - Getter for current adapter instances.
  * @param getExtension - Coordinator lookup for extension config schemas.
+ * @param getExtensionOperatorConfig - Accessor for the operator config entry for a
+ *   given extension. It supplies the set of operator-owned keys; their values
+ *   come from `getResolvedExtensionConfig`. Extensions without a `configSchema`
+ *   never receive provenance (kernel drops the operator layer in that case).
+ * @param getResolvedExtensionConfig - Accessor returning the extension's config
+ *   resolution, independent of its lifecycle state. Its config is what the
+ *   config schema response reports for operator-owned keys, so every schema
+ *   transform (e.g. `.trim()`) is reflected. When it is omitted, yields no
+ *   record, or reports that resolution fell back to schema defaults,
+ *   `operatorConfig` still reports the owned keys but carries no `values`
+ *   rather than values the extension never received.
  * @returns Cleanup function that unregisters all runtime handlers.
  */
 declare function registerRuntimeHandlers(bus: IMakaioBus, getLoadedAdapters: () => readonly LoadedAdapter[], getAdapterInstances: () => ReadonlyMap<string, AdapterInstance>, getExtension?: (name: string) => {
   configSchema?: z.ZodType;
   uiConfig?: EntityUIConfig;
-} | undefined): () => void;
+} | undefined, getExtensionOperatorConfig?: (extensionName: string) => ExtensionOperatorConfigEntry | undefined, getResolvedExtensionConfig?: (name: string) => ExtensionConfigResolution | undefined): () => void;
 //#endregion
 //#region runtimes/node/src/db-migrations.d.ts
 /** Options for applying framework central migrations. */
@@ -193,6 +205,127 @@ declare function bootMakaioRuntimeCore(transport: ServerTransportProvider, bound
  */
 declare function bootMakaioRuntime(options: BootMakaioRuntimeOptions): Promise<MakaioRuntime>;
 //#endregion
+//#region runtimes/node/src/extension-enablement-store.d.ts
+/**
+ * Largest enablement file the loader will read into memory.
+ *
+ * The file holds extension names — strings that are at most a few dozen bytes
+ * each. A megabyte gives room for thousands of names before the guard fires,
+ * which is far beyond any realistic extension registry. The bound exists
+ * because the loader runs on the boot path and reads whatever is in the
+ * location; a stray large file must not block startup.
+ */
+declare const MAX_ENABLEMENT_FILE_BYTES: number;
+/**
+ * Wire shape of the enablement JSON file.
+ *
+ * The file stores only disabled names. Absent name → enabled (default).
+ * `true` entries are never written: the file is self-cleaning.
+ */
+interface ExtensionEnablementFileData {
+  /** Names of extensions that have been explicitly disabled. */
+  readonly disabled: readonly string[];
+}
+/**
+ * Typed result surface for a failed enablement file read.
+ *
+ * Recorded as metadata so the caller can log or surface it without coupling
+ * to the error shape the reader uses internally.
+ */
+type ExtensionEnablementReadFailureReason = 'too-large' | 'not-json' | 'not-object' | 'invalid-disabled-field' | 'unreadable';
+/** Failure detail returned when the file exists but cannot be used. */
+interface ExtensionEnablementReadFailure {
+  readonly reason: ExtensionEnablementReadFailureReason;
+  readonly diagnostic: string;
+}
+/**
+ * Read-write store for persisted extension enablement.
+ *
+ * Extends the read-only subset of {@link ExtensionConfigProvider} so the
+ * runtime can pass the same object where only `loadEnabled` is needed, and
+ * so the coordinator can call `persistEnabled` directly.
+ */
+interface ExtensionEnablementStore extends Required<Pick<ExtensionConfigProvider, 'loadEnabled' | 'persistEnabled'>> {
+  /**
+   * Load failure recorded during initialization, if any.
+   *
+   * `undefined` when the file was absent (treated as all-enabled) or parsed
+   * successfully. Present when the file existed but could not be used, so the
+   * caller can log the diagnostic before forwarding the store.
+   */
+  readonly readFailure: ExtensionEnablementReadFailure | undefined;
+}
+/**
+ * Minimal package view required by {@link isExtensionEnabled} to apply the
+ * critical-override rule.
+ */
+interface ExtensionCriticalView {
+  /** When `true`, the extension must start even when the store marks it disabled. */
+  readonly critical?: boolean;
+}
+/**
+ * Check whether a named extension is effectively enabled.
+ *
+ * Centralises the `loadEnabled(name) !== false` pattern used at every
+ * enablement-gate site so callers do not repeat the three-valued logic
+ * (`true` = enabled, `false` = disabled, `undefined` = enabled by default).
+ *
+ * The critical override is part of the answer, not an optional refinement: a
+ * `critical: true` extension is treated as enabled regardless of what the
+ * store says, mirroring the coordinator's `load()` logic exactly. `pkg` is
+ * therefore required — a caller that cannot supply it is asking a different
+ * question and would silently drop the override. This ensures that every gate
+ * (clients, runtimeBoot, scheduler policy, the CLI listing) honours the same
+ * invariant as the coordinator: a critical extension that the operator
+ * hand-disabled still contributes to the running runtime.
+ * @param store - Enablement store (or any object with an optional `loadEnabled`).
+ * @param name - Extension package name to check.
+ * @param pkg - Package view carrying the `critical` flag; `critical: true` overrides a disabled store entry.
+ * @returns `true` when the extension is enabled, has no persisted preference, or is critical.
+ */
+declare function isExtensionEnabled(store: {
+  readonly loadEnabled?: (name: string) => boolean | undefined;
+}, name: string, pkg: ExtensionCriticalView): boolean;
+/**
+ * Check whether the store records an explicit disable for a name.
+ *
+ * This is the raw persisted preference, deliberately without the critical
+ * override that {@link isExtensionEnabled} applies: it answers "did someone
+ * turn this off in the enablement file?", not "will it run?". Use it only
+ * where the persisted preference itself is the subject — for example when
+ * reporting back whether a requested preference survived a rejected live
+ * toggle. Every runtime gate must use {@link isExtensionEnabled} instead.
+ * @param store - Enablement store (or any object with an optional `loadEnabled`).
+ * @param name - Extension package name to check.
+ * @returns `true` when the store explicitly disables the name.
+ */
+declare function isExtensionDisabledInStore(store: {
+  readonly loadEnabled?: (name: string) => boolean | undefined;
+}, name: string): boolean;
+/**
+ * Resolve the absolute path of the enablement file for a given Makaio home.
+ * @param makaioHome - Absolute Makaio data-home path.
+ * @returns Absolute path to the enablement file. The file may not exist yet.
+ */
+declare function resolveExtensionEnablementFile(makaioHome: string): string;
+/**
+ * Load an {@link ExtensionEnablementStore} backed by the file at
+ * `<makaioHome>/config/extensions.json`.
+ *
+ * A missing file is silently treated as all-extensions-enabled. A file that
+ * exists but cannot be used (too large, invalid JSON, wrong shape) records a
+ * failure on the returned store and defaults to all-extensions-enabled, so a
+ * corrupt file never bricks the runtime. The failure is exposed so the
+ * composition root can emit a warning.
+ *
+ * The store's `persistEnabled` is always safe to call regardless of whether
+ * the file existed at load time. It creates the config directory on first
+ * write.
+ * @param makaioHome - Absolute Makaio data-home path.
+ * @returns Resolved enablement store, ready for use as a coordinator callback.
+ */
+declare function loadExtensionEnablementStore(makaioHome: string): Promise<ExtensionEnablementStore>;
+//#endregion
 //#region runtimes/node/src/upstream-telemetry.d.ts
 /**
  * Returned by {@link attachUpstreamTelemetry} after the projected transport is connected
@@ -453,18 +586,13 @@ declare class BusServerTransportProvider implements TransportProvider {
 //#endregion
 //#region runtimes/node/src/credential-provider.d.ts
 /**
- * Credential provider interface for resolving credential references.
+ * Credential provider for resolving credential references.
  *
- * Implementations are platform-specific (e.g. Node.js keychain, stored refs).
+ * Alias of {@link CredentialResolver} from `@makaio/contracts/extension` — the
+ * contracts interface is the authoritative shape; this alias keeps existing
+ * consumers that import from the runtime package working without duplication.
  */
-interface CredentialProvider {
-  /**
-   * Resolve a credential reference to its runtime value.
-   * @param ref - Credential reference string
-   * @returns Resolved value, or null if unavailable
-   */
-  resolve(ref: CredentialRef): Promise<string | null>;
-}
+type CredentialProvider = CredentialResolver;
 /**
  * Node.js credential provider.
  *
@@ -473,6 +601,10 @@ interface CredentialProvider {
 declare class NodeCredentialProvider implements CredentialProvider {
   /**
    * Resolve a credential reference to its plaintext value.
+   *
+   * Returns null (never throws) for `stored:` refs — those require a
+   * credential service handler registered on the bus. Returns null (never
+   * throws) for `file:` refs that are missing or unreadable.
    * @param ref - Credential reference (`env:`, `file:`, or `keychain:`)
    * @returns Resolved credential value, or null when unavailable
    */
@@ -488,7 +620,14 @@ declare class NodeCredentialProvider implements CredentialProvider {
 declare class StoredCredentialProvider implements CredentialProvider {
   private readonly bus;
   private readonly fallbackProvider;
-  /** Lazily-opened channel to the credentials endpoint. */
+  /**
+   * Lazily-opened channel to the credentials endpoint.
+   *
+   * Only set when a channel is successfully open. Cleared when the service is
+   * absent (null return), on open failures, and on `ChannelClosedError` so
+   * every subsequent call re-checks the bus via `requestOptional`.
+   * Call {@link close} during host shutdown to release the channel explicitly.
+   */
   private channelPromise?;
   /**
    * Create a new stored credential provider.
@@ -505,18 +644,30 @@ declare class StoredCredentialProvider implements CredentialProvider {
    * @returns Resolved credential value, or null when unavailable
    */
   resolve(ref: CredentialRef): Promise<string | null>;
+  /**
+   * Close and discard the cached channel. Safe to call multiple times (idempotent).
+   *
+   * Call during host shutdown before the bus/transport is torn down so the
+   * channel is released cleanly rather than abandoned.
+   */
+  close(): void;
   /**
    * Lazily open (and cache) the encrypted channel to the credentials endpoint.
    *
-   * The promise is cleared on `ChannelClosedError` (post-open channel closure)
-   * and also on open failures so the next call always retries rather than
-   * re-using a permanently-rejected or permanently-closed promise.
-   * @returns The open DirectChannel
+   * Only a successfully opened channel is cached. When the service is absent
+   * (`openCredentialChannel` returns `null`), the promise is cleared so the
+   * next call re-checks via `requestOptional` — the service may have registered
+   * since this call. Open failures are also cleared so the next call retries
+   * rather than re-using a permanently-rejected promise.
+   * @returns The open DirectChannel, or null when no handler is registered
    */
   private getChannel;
   /**
    * Open a fresh encrypted channel to the credentials endpoint.
-   * @returns Newly opened DirectChannel
+   *
+   * Returns null when no `getChannelToken` handler is registered on the bus
+   * (optional service — the credential service is not always present).
+   * @returns Newly opened DirectChannel, or null when the service is absent
    */
   private openCredentialChannel;
 }
@@ -633,6 +784,173 @@ declare function buildExtensionBrowserRuntimeEntrypoint(extensionName: string, b
  */
 declare function bridgeExtensionBrowserEntries(discovered: ReadonlyArray<DiscoveredExtension>, packages: ReadonlyArray<KernelMakaioExtension>, options?: BridgeBrowserOptions): KernelMakaioExtension[];
 //#endregion
+//#region services/package-manager/src/exported-package-critical.d.ts
+/**
+ * One executable package a server entrypoint exports, as reported by
+ * {@link resolveExportedPackages}.
+ */
+interface ExportedPackageInfo {
+  /** Executable package identity — the descriptor name, or one of its dot-prefixed children. */
+  readonly name: string;
+  /** Version the exported package declares. */
+  readonly version: string;
+  /**
+   * Whether the exported package declares itself critical.
+   *
+   * Omitted both when nothing declares the flag and when the declared value
+   * failed {@link isValidExportedCriticalFlag}; those two cases are told apart
+   * by {@link ExportedPackageListing.invalidCriticalNames}.
+   */
+  readonly critical?: boolean;
+  /**
+   * Single runtime surface the exported package restricts itself to, when it
+   * declares exactly one. Absent means "loads on every surface" — see
+   * {@link toRestrictedSurface}.
+   */
+  readonly surface?: 'interactive' | 'headless';
+}
+/** Result of {@link resolveExportedPackages}: every accepted package, plus the ones whose `critical` was unusable. */
+interface ExportedPackageListing {
+  /** Every package the server entry exports, with any invalid `critical` value stripped. */
+  readonly packages: readonly ExportedPackageInfo[];
+  /**
+   * Names of exported packages whose `critical` field was present but not a
+   * `boolean`. Criticality is unresolved for these, not legitimately absent,
+   * so a caller that gates a decision on it must refuse rather than read the
+   * omitted flag as `false`.
+   */
+  readonly invalidCriticalNames: ReadonlySet<string>;
+}
+//#endregion
+//#region runtimes/node/src/installed-extension-readers.d.ts
+/** The one installed package a reader is asked to inspect. */
+interface ExportedPackagesTarget {
+  /** Absolute, already-resolved import path for the descriptor's server entrypoint. */
+  readonly serverImportPath: string;
+  /**
+   * Descriptor identity the export is anchored against: one exported package
+   * must carry it, every other must be dot-prefixed under it. Never the npm
+   * dependency identifier.
+   */
+  readonly descriptorName: string;
+  /** Log prefix identifying the caller and extension for warnings. */
+  readonly label: string;
+}
+/**
+ * Enumerate the executable packages one installed extension exports.
+ *
+ * Resolves to `undefined` — never to an empty listing — when the export could
+ * not be read at all: a missing or unreadable entrypoint, a failed import, or
+ * an export that violates the runtime's identity contract. Callers rely on
+ * that distinction to tell "this descriptor has no exported package" apart
+ * from "this descriptor's package could not be inspected", which decides
+ * whether an absent `critical` flag means "not critical" or "unknown". A
+ * broken extension must never abort the surrounding scan.
+ */
+type ExportedPackagesReader = (target: ExportedPackagesTarget) => Promise<ExportedPackageListing | undefined>;
+/**
+ * Build a reader that imports each server entry inside an isolated worker
+ * thread, for a long-lived process that must not serve a module-cached answer.
+ * @param frameworkDistPath - Absolute path to the assembled `@makaio/framework`
+ *   dist when this host resolves `@makaio/framework/*` through a module
+ *   resolver hook. The worker owns a separate loader context, so it mirrors
+ *   that hook itself; omit it for hosts that resolve those specifiers
+ *   natively.
+ * @returns A reader backed by the isolated import worker.
+ */
+declare function createWorkerExportedPackagesReader(frameworkDistPath?: string): ExportedPackagesReader;
+//#endregion
+//#region runtimes/node/src/installed-extension-scan.d.ts
+/** Inputs for one installed-extension scan. */
+interface InstalledExtensionScanOptions {
+  /**
+   * The discovery strategy whose view this scan describes — the same instance
+   * the host boots with.
+   *
+   * Required rather than defaulted: the answer is only meaningful relative to
+   * one concrete set of roots and filters, and a scan that silently assembled
+   * its own would report packages the host's runtime never sees, and omit
+   * packages it does.
+   */
+  readonly discovery: ExtensionDiscovery;
+  /**
+   * Reader used to enumerate each descriptor's exported packages. Defaults to
+   * the in-process import, which is correct for a short-lived process; a
+   * long-lived runtime must supply the worker-backed reader instead (see
+   * {@link ExportedPackagesReader}).
+   */
+  readonly exportedPackages?: ExportedPackagesReader;
+  /**
+   * Module resolver for `@makaio/framework/*` subpath imports, as selected by
+   * the host owning this scan.
+   *
+   * Only meaningful with the default in-process reader, which imports each
+   * server entrypoint on this process's own module registry: an extension
+   * installed from a local path lives outside that module tree, so its
+   * `@makaio/framework/*` imports only resolve while the host's resolver hook
+   * is installed. Without it, such an extension's export is unreadable and its
+   * criticality is reported unknown — which fails closed, refusing a disable
+   * the runtime itself would have allowed.
+   *
+   * Installed for the duration of one scan and uninstalled afterwards: the
+   * hook is process-wide loader state, so the scan owns it only while it is
+   * importing extension code. Omitted by hosts that resolve
+   * `@makaio/framework/*` natively, and by the worker-backed reader, which
+   * mirrors the hook inside its own loader context instead.
+   */
+  readonly frameworkModuleResolver?: FrameworkModuleResolver;
+}
+/**
+ * List every discoverable installed extension, expanded with the executable
+ * child packages each descriptor's server entrypoint exports.
+ *
+ * Tier precedence is the supplied discovery's own, which is the point:
+ * whichever of two same-named installs the next boot would load is the one
+ * reported as loadable here. What the discovery *refuses* to resolve — and the
+ * one contest it cannot even express, because it works on descriptors and not
+ * on executable packages — is reported rather than thrown; see
+ * {@link mergeDiscoveredTiers}.
+ * @param options - Scan inputs; see {@link InstalledExtensionScanOptions}.
+ * @returns Records in discovery-tier order; each descriptor's own record is
+ *   immediately followed by the records for the child packages it exports, and
+ *   a shadowed record follows the winner that shadows it.
+ */
+declare function scanInstalledExtensions(options: InstalledExtensionScanOptions): Promise<readonly InstalledExtensionRecord[]>;
+//#endregion
+//#region runtimes/node/src/installed-extension-catalog-source.d.ts
+/** Inputs for {@link createInstalledExtensionCatalogSource}. */
+interface InstalledExtensionCatalogSourceOptions {
+  /**
+   * The discovery strategy this host boots with.
+   *
+   * The catalog must describe the same view the next boot would see — its
+   * configured roots, its tier precedence and its descriptor filters — or it
+   * would refuse a name the runtime can load and offer names the runtime would
+   * never discover. Passing the resolved strategy itself, rather than a
+   * reconstruction of its inputs, is what makes that equality structural.
+   */
+  readonly discovery: ExtensionDiscovery;
+  /**
+   * Absolute path to the assembled `@makaio/framework` dist when this host
+   * resolves `@makaio/framework/*` through a module resolver hook; omitted for
+   * hosts that resolve those specifiers natively.
+   */
+  readonly frameworkDistPath?: string;
+}
+/**
+ * Build the catalog source for a long-lived runtime.
+ *
+ * Always reads through the isolated import worker: this process can be asked
+ * again after an extension is reinstalled in place, and an import on its own
+ * module registry would keep answering from the pre-update module. Each call
+ * re-scans rather than caching, for the same reason — the point of the catalog
+ * is to describe what the *next* boot would load, which changes underneath a
+ * running process every time an extension is installed or removed.
+ * @param options - Discovery view and framework resolution for this host.
+ * @returns A catalog source suitable for `ExtensionCoordinatorOptions.installedCatalog`.
+ */
+declare function createInstalledExtensionCatalogSource(options: InstalledExtensionCatalogSourceOptions): InstalledExtensionCatalogSource;
+//#endregion
 //#region runtimes/node/src/find-workspace-root.d.ts
 /**
  * Error raised when no workspace root exists above the supplied start
@@ -674,4 +992,4 @@ declare function findWorkspaceRoot(startDir: string): string;
  */
 declare function findWorkspaceRootInfo(startDir: string): WorkspaceRootInfo;
 //#endregion
-export { type ActivateAdapterRuntimeIdentityInput, type ActivatedAdapterRuntimeIdentity, type AdmitWorkflowRunOperationOptions, type AdmittedWorkflowRun, type AttachedUpstreamTelemetry, type AttemptControlEndpointDeps, type AttemptControlEndpointIdentity, type AttemptControlLastReport, type AttemptControlReportOptions, AttemptOutcomeDeliveryError, AuthorityRequestDeliveryError, type BootCoordinatorSetupContext, type BootMakaioRuntimeOptions, type BootstrapRuntimeConnection, BootstrapStartRefusedError, type BootstrapWorkerRuntimeOptions, type BridgeBrowserOptions, type BundledMigrationsProbes, type BusServerTransportOptions, BusServerTransportProvider, CODE_EXECUTION_DEFAULT_IDLE_TIMEOUT_MS, CODE_EXECUTION_DEFAULT_MAX_ARGUMENT_BYTES, CODE_EXECUTION_DEFAULT_MAX_CONCURRENCY, CODE_EXECUTION_DEFAULT_MAX_INVOCATIONS_PER_WORKER, CODE_EXECUTION_DEFAULT_MAX_PROGRAM_FILES, CODE_EXECUTION_DEFAULT_MAX_QUEUED_INVOCATIONS, CODE_EXECUTION_DEFAULT_MAX_RESULT_BYTES, CODE_EXECUTION_DEFAULT_MAX_SOURCE_BYTES, type ConfiguredRuntimeOptions, type CoreBootOptions, type CreateIsolatedWorkflowRuntimeOptions, type CredentialProvider, type DatabaseBootOptions, type DeliverableOperationKind, type DescriptorSourcePackageGroup, type DiscoveredExtension, ExplicitDescriptorDiscovery, type ExtensionDiscovery, FileConfigStorage, FileRegistryCache, FilesystemDescriptorDiscovery, type FilesystemDescriptorDiscoveryOptions, type FrameworkModuleResolver, type HeadlessWorkerBootstrap, type HeadlessWorkerBootstrapCredentials, type HeadlessWorkerBusConnector, type HeadlessWorkerContributionLoader, type HeadlessWorkerDeps, type HeadlessWorkerExecutor, type HeadlessWorkerMaterializer, type HeadlessWorkerPostCommitObserver, type HeadlessWorkerResult, type HeadlessWorkflowWorkerDeps, type HeadlessWorkflowWorkerResult, type HonoRouteGraph, type HonoRouteGraphOptions, type HttpContributionPhase, type HttpRouteContribution, type HttpRouteGraphBuilder, type IWorkflowRunner, InProcessWorkflowRunner, type InProcessWorkflowRunnerOptions, type InitializeNodeDatabaseOptions, type InitializeNodeDatabaseResult, type InstalledAttemptControlEndpoint, type InstalledWorkloadAdapter, type IsolatedWorkflowRuntime, type IsolatedWorkflowRuntimeContext, type LoadExtensionsOptions, type LoadMakaioConfigOptions, type LoadedMakaioConfig, type LocalGitSourceOptions, MAKAIO_CONFIG_FILE_ENV, MAKAIO_HOME_ENV, MAKAIO_UPSTREAM_SECRET_ENV, MAKAIO_UPSTREAM_URL_ENV, type MachineKeyStatus, type MachineKeyValidation, type MakaioConfig, type MakaioRuntime, MergedDescriptorDiscovery, type NodeClientBinaryStrategyDependencyOptions, NodeCredentialProvider, NodeFrameworkModuleResolver, type NodeRuntimeOptions, NoopFrameworkModuleResolver, OperationAdmissionRefusedError, type OperationDeliveryEndpoint, type OperationDeliveryEndpointIdentity, type OperationDeliveryHandler, type OperationDeliveryHandlers, OutcomeDeliveryError, type ParseMakaioConfigOptions, type ParsedMakaioConfig, type PersistedMachineIdentity, PiscinaCodeExecutionProvider, type PiscinaCodeExecutionProviderOptions, type PrepareAdapterRuntimeInput, type PreparedAdapterRuntime, type RegisterAndAdmitWorkflowRunOptions, type RegisterWorkerRuntimeOptions, type ResolveUpstreamTelemetryBootOptionsFromEnvOptions, type RotateWorkflowExecutionBusSecretParams, type RunWorkloadInvocationOptions, RuntimeRegistrationRefusedError, RuntimeSubjects, type ServerTransportProvider, type SetupProcessGroupObservation, type StartedWorkerRuntime, StoredCredentialProvider, ThinWorkflowPiscinaRunner, type ThinWorkflowPiscinaRunnerOptions, type TransportReadyInfo, type UpstreamTelemetryBootOptions, type UpstreamTelemetryEnv, type UpstreamTelemetryTransportConfig, type WorkflowRunResult, type WorkflowRunnerBootOptions, type WorkflowRunnerConfig, type WorkflowRuntimeAuthorityConnector, type WorkflowRuntimeContributionLoader, type WorkflowWorkerEntryMode, type WorkflowWorkerEntryResolverOptions, type WorkloadControlBinding, type WorkloadInvocationPreparation, type WorkloadInvocationResult, type WorkspaceRootInfo, WorkspaceRootNotFoundError, activateAdapterRuntimeIdentity, admitWorkflowRunOperation, attachUpstreamTelemetry, bootMakaioRuntime, bootMakaioRuntimeCore, bootstrapWorkerRuntime, bridgeExtensionBrowserEntries, buildConfiguredRuntimeOptions, buildExtensionBrowserRollupInputName, buildExtensionBrowserRuntimeEntrypoint, buildNodeRuntimeOptions, captureWorkflowExecutionBusSecretCleanup, createHonoRouteGraph, createHttpRouteGraphBuilder, createIsolatedWorkflowRuntime, createLocalGitWorkspacePreparation, createMakaioConfigDiscovery, createNodeClientBinaryStrategyDependencies, createUpstreamTelemetryTransport, defineMakaioConfig, entrypointStem, findWorkspaceRoot, findWorkspaceRootInfo, getRuntimeDatabase, initializeNodeDatabase, installAttemptControlEndpoint, installOperationDeliveryEndpoint, isCliContributionLike, isMakaioExtensionLike, isMissingOptionalRuntimePackage, isWithinDirectory, loadExtensions, loadMakaioConfig, loadOrCreateMachineIdentity, machineKeysExist, normalizeNodeHostCapabilities, parseMakaioConfig, prepareAdapterRuntime, readFrameworkVersion, registerAdapterNameResolver, registerAndAdmitWorkflowRun, registerRuntimeHandlers, registerWorkerRuntime, resolveBundledMigrationsDir, resolveConventionEntrypoint, resolveFrameworkSpecifier, resolveListeningPort, resolveMakaioConfigPath, resolveMakaioHome, resolveStaticModelRegistryPath, resolveUpstreamTelemetryBootOptionsFromEnv, resolveWorkflowWorkerEntry, runHeadlessWorker, runHeadlessWorkflowWorker, runMigrations, runRuntimeHandlerCleanups, runWorkloadInvocation, selectFrameworkCorePackages, shouldIncludeExtension, submitAttemptOutcomeWithAck, tryImport, validateMachineKeys, waitForServerListening };
+export { type ActivateAdapterRuntimeIdentityInput, type ActivatedAdapterRuntimeIdentity, type AdmitWorkflowRunOperationOptions, type AdmittedWorkflowRun, type AttachedUpstreamTelemetry, type AttemptControlEndpointDeps, type AttemptControlEndpointIdentity, type AttemptControlLastReport, type AttemptControlReportOptions, AttemptOutcomeDeliveryError, AuthorityRequestDeliveryError, type BootCoordinatorSetupContext, type BootMakaioRuntimeOptions, type BootstrapRuntimeConnection, BootstrapStartRefusedError, type BootstrapWorkerRuntimeOptions, type BridgeBrowserOptions, type BundledMigrationsProbes, type BusServerTransportOptions, BusServerTransportProvider, CODE_EXECUTION_DEFAULT_IDLE_TIMEOUT_MS, CODE_EXECUTION_DEFAULT_MAX_ARGUMENT_BYTES, CODE_EXECUTION_DEFAULT_MAX_CONCURRENCY, CODE_EXECUTION_DEFAULT_MAX_INVOCATIONS_PER_WORKER, CODE_EXECUTION_DEFAULT_MAX_PROGRAM_FILES, CODE_EXECUTION_DEFAULT_MAX_QUEUED_INVOCATIONS, CODE_EXECUTION_DEFAULT_MAX_RESULT_BYTES, CODE_EXECUTION_DEFAULT_MAX_SOURCE_BYTES, type ConfiguredRuntimeOptions, type CoreBootOptions, type CreateIsolatedWorkflowRuntimeOptions, type CredentialProvider, type DatabaseBootOptions, type DeliverableOperationKind, type DiscoveredExtension, ExplicitDescriptorDiscovery, type ExportedPackageListing, type ExportedPackagesReader, type ExportedPackagesTarget, type ExtensionCriticalView, type ExtensionDiscovery, type ExtensionEnablementFileData, type ExtensionEnablementReadFailure, type ExtensionEnablementReadFailureReason, type ExtensionEnablementStore, ExtensionNameCollisionError, type ExtensionOperatorConfigConsumer, type ExtensionOperatorConfigSnapshot, FileConfigStorage, FileRegistryCache, FilesystemDescriptorDiscovery, type FilesystemDescriptorDiscoveryOptions, type FrameworkModuleResolver, type HeadlessWorkerBootstrap, type HeadlessWorkerBootstrapCredentials, type HeadlessWorkerBusConnector, type HeadlessWorkerContributionLoader, type HeadlessWorkerDeps, type HeadlessWorkerExecutor, type HeadlessWorkerMaterializer, type HeadlessWorkerPostCommitObserver, type HeadlessWorkerResult, type HeadlessWorkflowWorkerDeps, type HeadlessWorkflowWorkerResult, type HonoRouteGraph, type HonoRouteGraphOptions, type HttpContributionPhase, type HttpRouteContribution, type HttpRouteGraphBuilder, type IWorkflowRunner, InProcessWorkflowRunner, type InProcessWorkflowRunnerOptions, type InitializeNodeDatabaseOptions, type InitializeNodeDatabaseResult, type InstalledAttemptControlEndpoint, type InstalledExtensionCatalogSourceOptions, type InstalledExtensionRecord, type InstalledExtensionScanOptions, type InstalledWorkloadAdapter, type IsolatedWorkflowRuntime, type IsolatedWorkflowRuntimeContext, type LoadExtensionOperatorConfigOptions, type LoadExtensionsOptions, type LoadMakaioConfigOptions, type LoadedMakaioConfig, type LocalGitSourceOptions, MAKAIO_CONFIG_FILE_ENV, MAKAIO_HOME_ENV, MAKAIO_UPSTREAM_SECRET_ENV, MAKAIO_UPSTREAM_URL_ENV, MAX_ENABLEMENT_FILE_BYTES, MAX_OPERATOR_CONFIG_BYTES, type MachineKeyStatus, type MachineKeyValidation, type MakaioConfig, type MakaioRuntime, MergedDescriptorDiscovery, type NodeClientBinaryStrategyDependencyOptions, NodeCredentialProvider, NodeFrameworkModuleResolver, type NodeRuntimeOptions, NoopFrameworkModuleResolver, OperationAdmissionRefusedError, type OperationDeliveryEndpoint, type OperationDeliveryEndpointIdentity, type OperationDeliveryHandler, type OperationDeliveryHandlers, OutcomeDeliveryError, type ParseMakaioConfigOptions, type ParsedMakaioConfig, type PersistedMachineIdentity, PiscinaCodeExecutionProvider, type PiscinaCodeExecutionProviderOptions, type PrepareAdapterRuntimeInput, type PreparedAdapterRuntime, type RegisterAndAdmitWorkflowRunOptions, type RegisterWorkerRuntimeOptions, type ResolveUpstreamTelemetryBootOptionsFromEnvOptions, type RotateWorkflowExecutionBusSecretParams, type RunWorkloadInvocationOptions, RuntimeRegistrationRefusedError, RuntimeSubjects, type ServerTransportProvider, type SetupProcessGroupObservation, type StartedWorkerRuntime, StoredCredentialProvider, ThinWorkflowPiscinaRunner, type ThinWorkflowPiscinaRunnerOptions, type TransportReadyInfo, type UpstreamTelemetryBootOptions, type UpstreamTelemetryEnv, type UpstreamTelemetryTransportConfig, type WorkflowRunResult, type WorkflowRunnerBootOptions, type WorkflowRunnerConfig, type WorkflowRuntimeAuthorityConnector, type WorkflowRuntimeContributionLoader, type WorkflowWorkerEntryMode, type WorkflowWorkerEntryResolverOptions, type WorkloadControlBinding, type WorkloadInvocationPreparation, type WorkloadInvocationResult, type WorkspaceRootInfo, WorkspaceRootNotFoundError, activateAdapterRuntimeIdentity, admitWorkflowRunOperation, attachUpstreamTelemetry, bootMakaioRuntime, bootMakaioRuntimeCore, bootstrapWorkerRuntime, bridgeExtensionBrowserEntries, buildConfiguredRuntimeOptions, buildExtensionBrowserRollupInputName, buildExtensionBrowserRuntimeEntrypoint, buildNodeRuntimeOptions, captureWorkflowExecutionBusSecretCleanup, createExtensionOperatorConfigSnapshot, createHonoRouteGraph, createHttpRouteGraphBuilder, createInstalledExtensionCatalogSource, createIsolatedWorkflowRuntime, createLocalGitWorkspacePreparation, createMakaioConfigDiscovery, createNodeClientBinaryStrategyDependencies, createUpstreamTelemetryTransport, createWorkerExportedPackagesReader, defineMakaioConfig, entrypointStem, filterConfigDefaultsForLoadedPackages, findWorkspaceRoot, findWorkspaceRootInfo, getRuntimeDatabase, initializeNodeDatabase, installAttemptControlEndpoint, installOperationDeliveryEndpoint, isCliContributionLike, isExtensionDisabledInStore, isExtensionEnabled, isMakaioExtensionLike, isMissingOptionalRuntimePackage, isWithinDirectory, loadExtensionEnablementStore, loadExtensionOperatorConfig, loadExtensions, loadMakaioConfig, loadOrCreateMachineIdentity, machineKeysExist, mergePackageConfigDefaults, normalizeNodeHostCapabilities, normalizePackageExport, parseMakaioConfig, prepareAdapterRuntime, readFrameworkVersion, registerAdapterNameResolver, registerAndAdmitWorkflowRun, registerRuntimeHandlers, registerWorkerRuntime, resolveBundledMigrationsDir, resolveConventionEntrypoint, resolveExtensionEnablementFile, resolveExtensionOperatorConfigDir, resolveFrameworkSpecifier, resolveListeningPort, resolveMakaioConfigPath, resolveMakaioHome, resolveStaticModelRegistryPath, resolveUpstreamTelemetryBootOptionsFromEnv, resolveWorkflowWorkerEntry, runHeadlessWorker, runHeadlessWorkflowWorker, runMigrations, runRuntimeHandlerCleanups, runWorkloadInvocation, scanInstalledExtensions, selectFrameworkCorePackages, shouldIncludeExtension, submitAttemptOutcomeWithAck, tryImport, validateMachineKeys, waitForServerListening, warnOnUnaddressableExtensionOperatorConfigNames, warnOnUnappliedExtensionOperatorConfig };