@makaio/framework 1.0.0-dev-1790599449321 → 1.0.0-dev-1790624115602

package/dist/{index-BSYu8AXG.d.mts → index-CbVqpQBu.d.mts}

@@ -1394,16 +1394,6 @@ declare const ArtifactSchemas$1: {
         excerpt: z.ZodOptional<z.ZodString>;
       }, z.core.$strict>]>>>;
       createdAt: z.ZodOptional<z.ZodNumber>;
-      schemaVersion: z.ZodNumber;
-      scope: z.ZodObject<{
-        level: z.ZodString;
-        ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-      }, z.core.$strip>;
-      actor: z.ZodObject<{
-        kind: z.ZodString;
-        id: z.ZodString;
-        displayName: z.ZodOptional<z.ZodString>;
-      }, z.core.$strip>;
       relations: z.ZodArray<z.ZodObject<{
         type: z.ZodString;
         sourceLocalId: z.ZodOptional<z.ZodString>;
@@ -1433,6 +1423,16 @@ declare const ArtifactSchemas$1: {
           id: z.ZodString;
         }, z.core.$strict>], "refClass">>;
       }, z.core.$strip>>;
+      schemaVersion: z.ZodNumber;
+      scope: z.ZodObject<{
+        level: z.ZodString;
+        ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      }, z.core.$strip>;
+      actor: z.ZodObject<{
+        kind: z.ZodString;
+        id: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+      }, z.core.$strip>;
       confidence: z.ZodOptional<z.ZodObject<{
         level: z.ZodEnum<{
           inferred: "inferred";
@@ -1692,16 +1692,6 @@ declare const ArtifactSchemas$1: {
           excerpt: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>]>>>;
         createdAt: z.ZodOptional<z.ZodNumber>;
-        schemaVersion: z.ZodNumber;
-        scope: z.ZodObject<{
-          level: z.ZodString;
-          ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        }, z.core.$strip>;
-        actor: z.ZodObject<{
-          kind: z.ZodString;
-          id: z.ZodString;
-          displayName: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>;
         relations: z.ZodArray<z.ZodObject<{
           type: z.ZodString;
           sourceLocalId: z.ZodOptional<z.ZodString>;
@@ -1731,6 +1721,16 @@ declare const ArtifactSchemas$1: {
             id: z.ZodString;
           }, z.core.$strict>], "refClass">>;
         }, z.core.$strip>>;
+        schemaVersion: z.ZodNumber;
+        scope: z.ZodObject<{
+          level: z.ZodString;
+          ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strip>;
+        actor: z.ZodObject<{
+          kind: z.ZodString;
+          id: z.ZodString;
+          displayName: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
         confidence: z.ZodOptional<z.ZodObject<{
           level: z.ZodEnum<{
             inferred: "inferred";
@@ -4205,16 +4205,6 @@ declare const ArtifactNamespace: _$_makaio_core0.BusNamespaceDefinition<"artifac
         excerpt: z.ZodOptional<z.ZodString>;
       }, z.core.$strict>]>>>;
       createdAt: z.ZodOptional<z.ZodNumber>;
-      schemaVersion: z.ZodNumber;
-      scope: z.ZodObject<{
-        level: z.ZodString;
-        ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-      }, z.core.$strip>;
-      actor: z.ZodObject<{
-        kind: z.ZodString;
-        id: z.ZodString;
-        displayName: z.ZodOptional<z.ZodString>;
-      }, z.core.$strip>;
       relations: z.ZodArray<z.ZodObject<{
         type: z.ZodString;
         sourceLocalId: z.ZodOptional<z.ZodString>;
@@ -4244,6 +4234,16 @@ declare const ArtifactNamespace: _$_makaio_core0.BusNamespaceDefinition<"artifac
           id: z.ZodString;
         }, z.core.$strict>], "refClass">>;
       }, z.core.$strip>>;
+      schemaVersion: z.ZodNumber;
+      scope: z.ZodObject<{
+        level: z.ZodString;
+        ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      }, z.core.$strip>;
+      actor: z.ZodObject<{
+        kind: z.ZodString;
+        id: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+      }, z.core.$strip>;
       confidence: z.ZodOptional<z.ZodObject<{
         level: z.ZodEnum<{
           inferred: "inferred";
@@ -4503,16 +4503,6 @@ declare const ArtifactNamespace: _$_makaio_core0.BusNamespaceDefinition<"artifac
           excerpt: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>]>>>;
         createdAt: z.ZodOptional<z.ZodNumber>;
-        schemaVersion: z.ZodNumber;
-        scope: z.ZodObject<{
-          level: z.ZodString;
-          ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        }, z.core.$strip>;
-        actor: z.ZodObject<{
-          kind: z.ZodString;
-          id: z.ZodString;
-          displayName: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>;
         relations: z.ZodArray<z.ZodObject<{
           type: z.ZodString;
           sourceLocalId: z.ZodOptional<z.ZodString>;
@@ -4542,6 +4532,16 @@ declare const ArtifactNamespace: _$_makaio_core0.BusNamespaceDefinition<"artifac
             id: z.ZodString;
           }, z.core.$strict>], "refClass">>;
         }, z.core.$strip>>;
+        schemaVersion: z.ZodNumber;
+        scope: z.ZodObject<{
+          level: z.ZodString;
+          ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strip>;
+        actor: z.ZodObject<{
+          kind: z.ZodString;
+          id: z.ZodString;
+          displayName: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
         confidence: z.ZodOptional<z.ZodObject<{
           level: z.ZodEnum<{
             inferred: "inferred";
@@ -7038,16 +7038,6 @@ declare const ArtifactSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
         excerpt: z.ZodOptional<z.ZodString>;
       }, z.core.$strict>]>>>;
       createdAt: z.ZodOptional<z.ZodNumber>;
-      schemaVersion: z.ZodNumber;
-      scope: z.ZodObject<{
-        level: z.ZodString;
-        ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-      }, z.core.$strip>;
-      actor: z.ZodObject<{
-        kind: z.ZodString;
-        id: z.ZodString;
-        displayName: z.ZodOptional<z.ZodString>;
-      }, z.core.$strip>;
       relations: z.ZodArray<z.ZodObject<{
         type: z.ZodString;
         sourceLocalId: z.ZodOptional<z.ZodString>;
@@ -7077,6 +7067,16 @@ declare const ArtifactSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           id: z.ZodString;
         }, z.core.$strict>], "refClass">>;
       }, z.core.$strip>>;
+      schemaVersion: z.ZodNumber;
+      scope: z.ZodObject<{
+        level: z.ZodString;
+        ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+      }, z.core.$strip>;
+      actor: z.ZodObject<{
+        kind: z.ZodString;
+        id: z.ZodString;
+        displayName: z.ZodOptional<z.ZodString>;
+      }, z.core.$strip>;
       confidence: z.ZodOptional<z.ZodObject<{
         level: z.ZodEnum<{
           inferred: "inferred";
@@ -7336,16 +7336,6 @@ declare const ArtifactSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
           excerpt: z.ZodOptional<z.ZodString>;
         }, z.core.$strict>]>>>;
         createdAt: z.ZodOptional<z.ZodNumber>;
-        schemaVersion: z.ZodNumber;
-        scope: z.ZodObject<{
-          level: z.ZodString;
-          ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-        }, z.core.$strip>;
-        actor: z.ZodObject<{
-          kind: z.ZodString;
-          id: z.ZodString;
-          displayName: z.ZodOptional<z.ZodString>;
-        }, z.core.$strip>;
         relations: z.ZodArray<z.ZodObject<{
           type: z.ZodString;
           sourceLocalId: z.ZodOptional<z.ZodString>;
@@ -7375,6 +7365,16 @@ declare const ArtifactSubjects$1: _$_makaio_core0.BusSubjects<_$_makaio_core0.Fl
             id: z.ZodString;
           }, z.core.$strict>], "refClass">>;
         }, z.core.$strip>>;
+        schemaVersion: z.ZodNumber;
+        scope: z.ZodObject<{
+          level: z.ZodString;
+          ids: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        }, z.core.$strip>;
+        actor: z.ZodObject<{
+          kind: z.ZodString;
+          id: z.ZodString;
+          displayName: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
         confidence: z.ZodOptional<z.ZodObject<{
           level: z.ZodEnum<{
             inferred: "inferred";

package/dist/{index-xqiInEhj.d.mts → index-DmV9ybgT.d.mts}

@@ -56,7 +56,29 @@ declare class ToolApprovalService extends BaseService {
    */
   private dispatchAlwaysAskApproval;
   /**
-   * Evaluate `.makaioignore` file access rules before policy cascade handling.
+   * Evaluate `.makaioignore` file access rules and the directory allowlist before policy
+   * cascade handling.
+   *
+   * The rules are tested against both the lexical and the canonical (symlink-resolved)
+   * target, so an in-tree symlink cannot alias a denied path such as `.git/config`. A
+   * target that cannot be canonicalized safely (dangling symlink, non-`ENOENT` error) is
+   * denied; a missing file canonicalizes through its nearest existing ancestor, so a Write
+   * of a new file stays possible. A symlinked cwd itself is not covered: the rules are
+   * cwd-relative, so a canonical spelling outside the lexical cwd is not matched (same
+   * limit as `createPathValidator` in the filesystem extension).
+   *
+   * A raw path argument with a `..` segment (split on `/` and `\`) is denied outright:
+   * `path.resolve` collapses `..` before symlinks are followed, so `link/../config` with
+   * `link -> .git/subdir` would be checked as `<cwd>/config` while the OS opens
+   * `<cwd>/.git/config`. This also denies harmless spellings such as `src/../README.md`.
+   *
+   * The allowlist is `agent.allowedDirectories`, else the profile's. A target whose
+   * canonical path lies outside every entry is denied, so an empty list denies every
+   * native file-tool call with a path, matching the runtime contract and the filesystem
+   * extension's path validator. An absent list (`undefined`) adds no containment. An
+   * agent with a `profileId` but no own list gets `[]` when the profile RPC is unhandled
+   * or fails, so such a host denies all native file-tool calls with a path; hosts without
+   * a profile service set the agent's `allowedDirectories` or leave `profileId` unset.
    * @param payload - Incoming tool approval payload
    * @param context - CWD and directory constraints for rule evaluation
    * @returns Deny message when access should be blocked, otherwise undefined
@@ -116,4 +138,4 @@ declare class ToolApprovalService extends BaseService {
   private resolveHarnessPolicy;
 }
 //#endregion
-export { ToolApprovalService as t };
+export { ToolApprovalServiceOptions as n, ToolApprovalService as t };

package/dist/{index-_CsKmUOy.d.mts → index-DpiNhNHS.d.mts}

@@ -90,8 +90,8 @@ declare const ClientSchemas: {
       projectDir: z.ZodOptional<z.ZodString>;
       configInheritance: z.ZodOptional<z.ZodEnum<{
         empty: "empty";
-        "auth-only": "auth-only";
         full: "full";
+        "auth-only": "auth-only";
       }>>;
     }, z.core.$strip>;
     response: z.ZodObject<{
@@ -551,8 +551,8 @@ declare const ClientSchemas: {
     machineId: z.ZodOptional<z.ZodString>;
     startMode: z.ZodOptional<z.ZodEnum<{
       fork: "fork";
-      resume: "resume";
       fresh: "fresh";
+      resume: "resume";
       clear: "clear";
       compact: "compact";
     }>>;
@@ -1646,8 +1646,8 @@ declare const CLIENT_SESSION_START_MODES: readonly ["fresh", "fork", "resume", "
 /** Zod schema for the client-reported session start mode. */
 declare const ClientSessionStartModeSchema: z.ZodEnum<{
   fork: "fork";
-  resume: "resume";
   fresh: "fresh";
+  resume: "resume";
   clear: "clear";
   compact: "compact";
 }>;
@@ -1665,8 +1665,8 @@ declare const ClientSessionStartedSchema: z.ZodObject<{
   machineId: z.ZodOptional<z.ZodString>;
   startMode: z.ZodOptional<z.ZodEnum<{
     fork: "fork";
-    resume: "resume";
     fresh: "fresh";
+    resume: "resume";
     clear: "clear";
     compact: "compact";
   }>>;
@@ -2005,8 +2005,8 @@ declare const ClientNamespace: _$_makaio_core0.BusNamespaceDefinition<"client",
       projectDir: _$zod.ZodOptional<_$zod.ZodString>;
       configInheritance: _$zod.ZodOptional<_$zod.ZodEnum<{
         empty: "empty";
-        "auth-only": "auth-only";
         full: "full";
+        "auth-only": "auth-only";
       }>>;
     }, _$zod_v4_core0.$strip>;
     response: _$zod.ZodObject<{
@@ -2450,8 +2450,8 @@ declare const ClientNamespace: _$_makaio_core0.BusNamespaceDefinition<"client",
     machineId: _$zod.ZodOptional<_$zod.ZodString>;
     startMode: _$zod.ZodOptional<_$zod.ZodEnum<{
       fork: "fork";
-      resume: "resume";
       fresh: "fresh";
+      resume: "resume";
       clear: "clear";
       compact: "compact";
     }>>;
@@ -2735,8 +2735,8 @@ declare const ClientSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatSu
       projectDir: _$zod.ZodOptional<_$zod.ZodString>;
       configInheritance: _$zod.ZodOptional<_$zod.ZodEnum<{
         empty: "empty";
-        "auth-only": "auth-only";
         full: "full";
+        "auth-only": "auth-only";
       }>>;
     }, _$zod_v4_core0.$strip>;
     response: _$zod.ZodObject<{
@@ -3180,8 +3180,8 @@ declare const ClientSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatSu
     machineId: _$zod.ZodOptional<_$zod.ZodString>;
     startMode: _$zod.ZodOptional<_$zod.ZodEnum<{
       fork: "fork";
-      resume: "resume";
       fresh: "fresh";
+      resume: "resume";
       clear: "clear";
       compact: "compact";
     }>>;
@@ -3488,8 +3488,8 @@ declare const SessionConfigEnvSchema: z.ZodRecord<z.ZodString, z.ZodString>;
  */
 declare const SessionConfigInheritanceSchema: z.ZodEnum<{
   empty: "empty";
-  "auth-only": "auth-only";
   full: "full";
+  "auth-only": "auth-only";
 }>;
 type SessionConfigInheritance = z.infer<typeof SessionConfigInheritanceSchema>;
 /**
@@ -3646,8 +3646,8 @@ declare const ClientSessionConfigSchemas: {
       projectDir: z.ZodOptional<z.ZodString>;
       configInheritance: z.ZodOptional<z.ZodEnum<{
         empty: "empty";
-        "auth-only": "auth-only";
         full: "full";
+        "auth-only": "auth-only";
       }>>;
     }, z.core.$strip>;
     response: z.ZodObject<{
@@ -3702,8 +3702,8 @@ declare const SessionConfigSetupRequestSchema: z.ZodObject<{
   }>;
   configInheritance: z.ZodEnum<{
     empty: "empty";
-    "auth-only": "auth-only";
     full: "full";
+    "auth-only": "auth-only";
   }>;
 }, z.core.$strip>;
 type SessionConfigSetupRequest = z.infer<typeof SessionConfigSetupRequestSchema>;

package/dist/{index-D9hIDsPr.d.mts → index-DyWD9bfP.d.mts}

@@ -5,7 +5,8 @@ import { BusTransport, IFilteredBus, IMakaioBus, SubjectTelemetryProjectorRegist
 import { DispatchingAuth, HmacAuth, TransportAuth } from "@makaio/framework/node/transports";
 import { ContributionProcessor, ExtensionCoordinator, ExtensionRuntimeSurface, KernelExtensionContext, KernelMakaioExtension, RuntimeCapability, TransportProvider, WindowRegistry } from "@makaio/framework/kernel";
 import { StorageEngine } from "@makaio/framework/storage/drizzle";
-import { Toolset } from "@makaio/framework/tools";
+import { FileAccessRuleProvider, Toolset } from "@makaio/framework/tools";
+import { FrameworkFileAccessOptions } from "@makaio/framework/services";
 import { IAdapterConfigRepository } from "@makaio/framework/services/adapter-subsystem";
 import { PostInstallHandler, StrategyDependencies } from "@makaio/framework/clients";
 import { DatabaseClient } from "@makaio/framework/storage/drizzle/client";
@@ -356,9 +357,11 @@ type RuntimeOwnershipPackageView = Pick<KernelMakaioExtension, 'name' | 'display
  * `runtimeOwnership.sessionOrchestrator`, and boot fails if more than one
  * loaded extension declares that ownership.
  * @param loadedExtensionPackages - Descriptor-loaded executable extension packages.
+ * @param fileAccessOptions - Host file-access rule provider bound into the tool
+ *   registry and tool approval packages; without one the static core set is used.
  * @returns Framework core packages for this boot.
  */
-declare function selectFrameworkCorePackages(loadedExtensionPackages: ReadonlyArray<RuntimeOwnershipPackageView> | true): ReadonlyArray<KernelMakaioExtension>;
+declare function selectFrameworkCorePackages(loadedExtensionPackages: ReadonlyArray<RuntimeOwnershipPackageView> | true, fileAccessOptions?: FrameworkFileAccessOptions): ReadonlyArray<KernelMakaioExtension>;
 //#endregion
 //#region runtimes/node/src/initialize-node-database.d.ts
 /**
@@ -1111,6 +1114,47 @@ interface CoreBootOptions {
    * `MachineIdentity` shape.
    */
   readonly machineIdentity?: PersistedMachineIdentity;
+  /**
+   * Host-provided file-access rule provider (`.makaioignore` hierarchy plus
+   * built-in deny list), for example `createMakaioIgnoreProvider()` from
+   * `@makaio/extension-filesystem`.
+   *
+   * When provided, boot binds it into the framework tool registry, which
+   * injects the resolved rules into every tool execution context, and into the
+   * tool approval service, which denies file tool calls whose path argument
+   * names a restricted path (lexical or symlink-resolved) before any approval
+   * policy applies. When omitted, neither enforces file-access rules.
+   *
+   * Scope:
+   * - The patterns apply inside the agent's working directory. With a provider
+   *   configured, the approval service also denies native file-tool calls
+   *   outside the agent's `allowedDirectories` (else the profile's); an empty
+   *   list denies every native file-tool call with a path. Without
+   *   `allowedDirectories` (`undefined`), paths outside the working directory
+   *   are not restricted by this check. An agent with a `profileId` but no own
+   *   list gets an empty list when the profile RPC is unhandled or fails, so a
+   *   host without a profile service denies all native file tools for such
+   *   agents unless it sets the agent's `allowedDirectories`.
+   * - A path argument with a `..` segment is denied, because resolving it
+   *   before following symlinks could alias a restricted path; harmless
+   *   spellings such as `src/../README.md` are denied too.
+   * - `Glob` and `Grep` are checked on their supplied search root only. Without
+   *   a `path` argument they get no file-access check, and files reached
+   *   recursively are not filtered by the patterns; filtering descendants needs
+   *   OS-level isolation (Cyberport FACT-272).
+   * - A symlinked working directory itself is not resolved: the patterns match
+   *   cwd-relative spellings only.
+   * - Only file tools with a path argument are inspected. Shell commands and
+   *   other tools without a path argument are not.
+   * - A known file-tool call from an agent without a working directory is
+   *   denied (fail-closed), because the rules cannot be resolved without one.
+   * - Boot fails when an extension overrides the framework tool registry or
+   *   tool approval package while a provider is configured, since the
+   *   override would drop the provider.
+   * - Workflow-worker tool registries are not covered: they run in separate
+   *   threads or processes and do not receive this provider.
+   */
+  readonly fileAccessRuleProvider?: FileAccessRuleProvider;
   /**
    * Host launcher command embedded into client wiring installed from warning actions.
    *

package/dist/package.json

@@ -1,5 +1,5 @@
 {
   "name": "@makaio/framework",
-  "version": "1.0.0-dev-1790599449321",
+  "version": "1.0.0-dev-1790624115602",
   "type": "module"
 }

package/dist/runtime-node/index.d.mts

@@ -5,7 +5,7 @@ import { a as CODE_EXECUTION_DEFAULT_MAX_PROGRAM_FILES, c as CODE_EXECUTION_DEFA
 import { t as PiscinaCodeExecutionProvider } from "../index-BfFi98B_.mjs";
 import { a as ExtensionNameCollisionError, c as MergedDescriptorDiscovery, n as ExplicitDescriptorDiscovery, o as FilesystemDescriptorDiscovery, r as ExtensionDiscovery, s as FilesystemDescriptorDiscoveryOptions, t as DiscoveredExtension } from "../extension-discovery-BqSPn73R.mjs";
 import { a as isWithinDirectory, c as resolveConventionEntrypoint, i as isMakaioExtensionLike, n as entrypointStem, o as loadExtensions, r as isCliContributionLike, s as normalizePackageExport, t as LoadExtensionsOptions } from "../load-extensions-CCzTHlUE.mjs";
-import { $ as CreateIsolatedWorkflowRuntimeOptions, A as createLocalGitWorkspacePreparation, An as HttpRouteGraphBuilder, B as HeadlessWorkerMaterializer, Bn as PreparedAdapterRuntime, Bt as BootMakaioRuntimeOptions, C as admitWorkflowRunOperation, Cn as selectFrameworkCorePackages, Dn as NodeFrameworkModuleResolver, E as registerWorkerRuntime, En as FrameworkModuleResolver, F as HeadlessWorkerBootstrap, Fn as HonoRouteGraphOptions, Ft as IWorkflowRunner, G as runHeadlessWorkflowWorker, Gt as UpstreamTelemetryBootOptions, H as HeadlessWorkflowWorkerDeps, Hn as prepareAdapterRuntime, Ht as MakaioRuntime, I as HeadlessWorkerBootstrapCredentials, In as createHonoRouteGraph, J as WorkloadControlBinding, K as InstalledWorkloadAdapter, Kt as WorkflowRunnerBootOptions, L as HeadlessWorkerBusConnector, Ln as ActivateAdapterRuntimeIdentityInput, Lt as ThinWorkflowPiscinaRunnerOptions, M as HeadlessWorkerDeps, Mn as HttpContributionPhase, N as HeadlessWorkerResult, Nn as HttpRouteContribution, On as NoopFrameworkModuleResolver, P as runHeadlessWorker, Pn as HonoRouteGraph, Pt as ThinWorkflowPiscinaRunner, Q as SetupProcessGroupObservation, R as HeadlessWorkerContributionLoader, Rn as ActivatedAdapterRuntimeIdentity, Rt as WorkflowRunResult, S as RuntimeRegistrationRefusedError, Sn as normalizeNodeHostCapabilities, T as registerAndAdmitWorkflowRun, Tn as BridgeBrowserOptions, U as HeadlessWorkflowWorkerResult, Ut as ServerTransportProvider, V as HeadlessWorkerPostCommitObserver, Vn as activateAdapterRuntimeIdentity, Vt as CoreBootOptions, Wt as TransportReadyInfo, X as WorkloadInvocationResult, Y as WorkloadInvocationPreparation, Z as runWorkloadInvocation, _ as OperationDeliveryEndpointIdentity, _n as DatabaseBootOptions, a as InstalledAttemptControlEndpoint, an as WorkflowWorkerEntryMode, at as InProcessWorkflowRunner, b as RegisterAndAdmitWorkflowRunOptions, bn as initializeNodeDatabase, bt as submitAttemptOutcomeWithAck, c as BootstrapStartRefusedError, cn as ExtensionOperatorConfigConsumer, d as bootstrapWorkerRuntime, dn as MAX_OPERATOR_CONFIG_BYTES, et as IsolatedWorkflowRuntime, f as AdmitWorkflowRunOperationOptions, fn as createExtensionOperatorConfigSnapshot, ft as AttemptOutcomeDeliveryError, g as OperationDeliveryEndpoint, gn as warnOnUnappliedExtensionOperatorConfig, gt as OutcomeDeliveryError, h as OperationAdmissionRefusedError, hn as warnOnUnaddressableExtensionOperatorConfigNames, i as AttemptControlReportOptions, it as createIsolatedWorkflowRuntime, j as LocalGitSourceOptions, jn as createHttpRouteGraphBuilder, kn as resolveFrameworkSpecifier, l as BootstrapWorkerRuntimeOptions, ln as ExtensionOperatorConfigSnapshot, m as DeliverableOperationKind, mn as resolveExtensionOperatorConfigDir, mt as AuthorityRequestDeliveryError, n as AttemptControlEndpointIdentity, nt as WorkflowRuntimeAuthorityConnector, o as installAttemptControlEndpoint, on as WorkflowWorkerEntryResolverOptions, ot as InProcessWorkflowRunnerOptions, p as AdmittedWorkflowRun, pn as loadExtensionOperatorConfig, q as RunWorkloadInvocationOptions, r as AttemptControlLastReport, rt as WorkflowRuntimeContributionLoader, s as BootstrapRuntimeConnection, sn as resolveWorkflowWorkerEntry, t as AttemptControlEndpointDeps, tt as IsolatedWorkflowRuntimeContext, u as StartedWorkerRuntime, un as LoadExtensionOperatorConfigOptions, v as OperationDeliveryHandler, vn as InitializeNodeDatabaseOptions, w as installOperationDeliveryEndpoint, wn as ShutdownStep, x as RegisterWorkerRuntimeOptions, xn as HostCapabilityDeclaration, y as OperationDeliveryHandlers, yn as InitializeNodeDatabaseResult, z as HeadlessWorkerExecutor, zn as PrepareAdapterRuntimeInput, zt as BootCoordinatorSetupContext } from "../index-D9hIDsPr.mjs";
+import { $ as CreateIsolatedWorkflowRuntimeOptions, A as createLocalGitWorkspacePreparation, An as HttpRouteGraphBuilder, B as HeadlessWorkerMaterializer, Bn as PreparedAdapterRuntime, Bt as BootMakaioRuntimeOptions, C as admitWorkflowRunOperation, Cn as selectFrameworkCorePackages, Dn as NodeFrameworkModuleResolver, E as registerWorkerRuntime, En as FrameworkModuleResolver, F as HeadlessWorkerBootstrap, Fn as HonoRouteGraphOptions, Ft as IWorkflowRunner, G as runHeadlessWorkflowWorker, Gt as UpstreamTelemetryBootOptions, H as HeadlessWorkflowWorkerDeps, Hn as prepareAdapterRuntime, Ht as MakaioRuntime, I as HeadlessWorkerBootstrapCredentials, In as createHonoRouteGraph, J as WorkloadControlBinding, K as InstalledWorkloadAdapter, Kt as WorkflowRunnerBootOptions, L as HeadlessWorkerBusConnector, Ln as ActivateAdapterRuntimeIdentityInput, Lt as ThinWorkflowPiscinaRunnerOptions, M as HeadlessWorkerDeps, Mn as HttpContributionPhase, N as HeadlessWorkerResult, Nn as HttpRouteContribution, On as NoopFrameworkModuleResolver, P as runHeadlessWorker, Pn as HonoRouteGraph, Pt as ThinWorkflowPiscinaRunner, Q as SetupProcessGroupObservation, R as HeadlessWorkerContributionLoader, Rn as ActivatedAdapterRuntimeIdentity, Rt as WorkflowRunResult, S as RuntimeRegistrationRefusedError, Sn as normalizeNodeHostCapabilities, T as registerAndAdmitWorkflowRun, Tn as BridgeBrowserOptions, U as HeadlessWorkflowWorkerResult, Ut as ServerTransportProvider, V as HeadlessWorkerPostCommitObserver, Vn as activateAdapterRuntimeIdentity, Vt as CoreBootOptions, Wt as TransportReadyInfo, X as WorkloadInvocationResult, Y as WorkloadInvocationPreparation, Z as runWorkloadInvocation, _ as OperationDeliveryEndpointIdentity, _n as DatabaseBootOptions, a as InstalledAttemptControlEndpoint, an as WorkflowWorkerEntryMode, at as InProcessWorkflowRunner, b as RegisterAndAdmitWorkflowRunOptions, bn as initializeNodeDatabase, bt as submitAttemptOutcomeWithAck, c as BootstrapStartRefusedError, cn as ExtensionOperatorConfigConsumer, d as bootstrapWorkerRuntime, dn as MAX_OPERATOR_CONFIG_BYTES, et as IsolatedWorkflowRuntime, f as AdmitWorkflowRunOperationOptions, fn as createExtensionOperatorConfigSnapshot, ft as AttemptOutcomeDeliveryError, g as OperationDeliveryEndpoint, gn as warnOnUnappliedExtensionOperatorConfig, gt as OutcomeDeliveryError, h as OperationAdmissionRefusedError, hn as warnOnUnaddressableExtensionOperatorConfigNames, i as AttemptControlReportOptions, it as createIsolatedWorkflowRuntime, j as LocalGitSourceOptions, jn as createHttpRouteGraphBuilder, kn as resolveFrameworkSpecifier, l as BootstrapWorkerRuntimeOptions, ln as ExtensionOperatorConfigSnapshot, m as DeliverableOperationKind, mn as resolveExtensionOperatorConfigDir, mt as AuthorityRequestDeliveryError, n as AttemptControlEndpointIdentity, nt as WorkflowRuntimeAuthorityConnector, o as installAttemptControlEndpoint, on as WorkflowWorkerEntryResolverOptions, ot as InProcessWorkflowRunnerOptions, p as AdmittedWorkflowRun, pn as loadExtensionOperatorConfig, q as RunWorkloadInvocationOptions, r as AttemptControlLastReport, rt as WorkflowRuntimeContributionLoader, s as BootstrapRuntimeConnection, sn as resolveWorkflowWorkerEntry, t as AttemptControlEndpointDeps, tt as IsolatedWorkflowRuntimeContext, u as StartedWorkerRuntime, un as LoadExtensionOperatorConfigOptions, v as OperationDeliveryHandler, vn as InitializeNodeDatabaseOptions, w as installOperationDeliveryEndpoint, wn as ShutdownStep, x as RegisterWorkerRuntimeOptions, xn as HostCapabilityDeclaration, y as OperationDeliveryHandlers, yn as InitializeNodeDatabaseResult, z as HeadlessWorkerExecutor, zn as PrepareAdapterRuntimeInput, zt as BootCoordinatorSetupContext } from "../index-DyWD9bfP.mjs";
 import { ConfiguredRuntimeOptions, LoadMakaioConfigOptions, LoadedMakaioConfig, MAKAIO_CONFIG_FILE_ENV, MAKAIO_HOME_ENV, MakaioConfig, ParseMakaioConfigOptions, ParsedMakaioConfig, WorkflowRunnerConfig, buildConfiguredRuntimeOptions, createMakaioConfigDiscovery, defineMakaioConfig, loadMakaioConfig, parseMakaioConfig, resolveMakaioConfigPath, resolveMakaioHome, shouldIncludeExtension } from "./makaio-config.mjs";
 import { RotateWorkflowExecutionBusSecretParams, captureWorkflowExecutionBusSecretCleanup } from "./workflow-execution-bus-access.mjs";
 import { z } from "zod";