@makaio/framework 1.0.0-dev-1790624115602 → 1.0.0-dev-1790760814648

package/dist/{tool-approval-service-BCN4W8eS.mjs → tool-approval-service-Bc0IC6Hj.mjs}

@@ -1 +1 @@
-import{a as e}from"./ownership-recovery-guard-C9h8K1jo.mjs";import{SessionStorageSubjects as t}from"./services/session/storage/namespace.mjs";import"./session-Tj_635zr.mjs";import n from"node:path";import{lstatSync as r,realpathSync as i}from"node:fs";import{AgentSubjects as a,ApprovalSubjects as o,HarnessSubjects as s,ToolNameError as c,computeMetaTags as l,resolveToolPolicy as u,toolVocabularyForAdapter as d}from"@makaio/framework/contracts";import{BaseService as f}from"@makaio/framework/service-base";import{extractToolFilePath as p,extractToolRawFilePath as m}from"@makaio/framework/tools";const h={"full-access":0,"always-ask":1,reject:2};function g(){return`apr_${crypto.randomUUID()}`}function _(e){switch(e){case`allow`:return`full-access`;case`deny`:return`reject`;case`ask`:return`always-ask`}}function v(e){if(!e?.length)return`neutral`;let t=l(e);return t.includes(`destructive`)?`destructive`:t.includes(`read-only`)?`safe`:`neutral`}function y(e,t){if(e)return t&&e.toolApprovalOverrides?.[t]!==void 0?e.toolApprovalOverrides[t]:e.approvalPolicy}function b(e,t,n,r){let i=r[t];if(!i?.length)return e;let a=e;for(let e of i){let t=n[e];t&&h[t]>h[a]&&(a=t)}return a}function x(e,t,n){return n.handled?n.data.allowedDirectories??void 0:t?[]:void 0}function S(e,t,n){if(!n||!e?.cwd)return{};let r=E(e,t);return{cwd:e.cwd,...r&&{allowedDirectories:r}}}function C(e,t,n){if(!(!e&&!t))return!n||!n.handled?{policy:`always-ask`}:{policy:_(n.data.action),...n.data.personaName&&{personaName:n.data.personaName},...n.data.profileName&&{profileName:n.data.profileName}}}function w(e,t,n,r){if(!t||!e)return{kind:`none`};let{allowedTools:i,disallowedTools:a}=e;if(i===void 0&&a===void 0)return{kind:`none`};let o=d(e.adapterName);if(o===void 0)return{kind:`none`};let s;try{s=u(o,{allowedTools:i,disallowedTools:a})}catch(e){if(e instanceof c)return{kind:`deny`,message:e.message};throw e}let l=s.checkToolCall(t,n??{});if(!l.allowed)return{kind:`deny`,message:l.reason};if(i===void 0)return{kind:`none`};let f=E(e,r);return f!==void 0&&!k(f,t,n,e.cwd)?{kind:`none`}:{kind:`granted`}}const T=new Set([`Glob`,`Grep`]);function E(e,t){if(e.allowedDirectories!==void 0)return e.allowedDirectories;if((e.personaId||e.profileId)&&t)return x(e.personaId,e.profileId,t)}function D(e){let t=e;for(;;)try{return n.resolve(i(t),n.relative(t,e))}catch(e){if(e.code!==`ENOENT`||r(t,{throwIfNoEntry:!1})!==void 0)return;let i=n.dirname(t);if(i===t)return;t=i}}function O(e,t,r){let i=e=>process.platform===`win32`?e.toLowerCase():e;return e.some(e=>{let a=D(n.resolve(r,e));if(a===void 0)return!1;let o=n.relative(i(a),i(t));return o===``||o!==`..`&&!o.startsWith(`..${n.sep}`)&&!n.isAbsolute(o)})}function k(e,t,r,i){if(!i)return!1;let a=r?.path,o=T.has(t)?n.resolve(i,typeof a==`string`&&a.length>0?a:`.`):p(t,r,i);if(o===null)return!1;let s=D(o);return s===void 0?!1:O(e,s,i)}function A(e,t){let n=t.harness?.toolCapabilityMap&&e.toolName?t.harness.toolCapabilityMap[e.toolName]:void 0;return{requestId:g(),toolCallId:e.toolCallId,toolName:e.toolName,args:e.args,agentId:e.agentId,sessionId:e.sessionId,adapterName:t.resolvedAdapterName,...t.personaName&&{personaName:t.personaName},...t.profileName&&{profileName:t.profileName},capabilities:n,riskLevel:v(n),reasoning:e.reasoning,createdAt:Date.now()}}function j(e,t,n,r){return n===`always-ask`?`always-ask`:e===`reject`?`reject`:r?`always-ask`:t.kind===`granted`?`full-access`:e}var M=class extends f{logger=console;options;constructor(e,t={}){super(e),this.options=t}async onInit(){this.registerHandler(a.toolApprove,async e=>{let t=await this.getAgentMetadata(e.payload.agentId,e.payload.sessionId),n=t.kind===`found`?t.agent:null,r=t.kind===`error`,i=(n?.personaId||n?.profileId)&&e.payload.toolName?await this.fetchRawEnrichedPolicy(n?.personaId,n?.profileId,e.payload.toolName):void 0,a=S(n,i,this.options.fileAccessRuleProvider),o=await this.checkFileAccessDenyReason(e.payload,a);if(o){e.setResult({action:`deny`,message:o,shouldAbort:!1});return}let s=await this.resolveSessionOverride(e.payload.sessionId);if(s===`reject`){e.setResult({action:`deny`,message:`Tool use rejected by session approval policy override`,shouldAbort:!1});return}let c=w(n,e.payload.toolName,e.payload.args,i);if(c.kind===`deny`){e.setResult({action:`deny`,message:c.message,shouldAbort:!1});return}if(s===`full-access`&&!r){e.setResult({action:`allow`});return}let l=await this.resolvePolicyWithContext({adapterName:e.payload.adapterName,toolName:e.payload.toolName},n,i);switch(j(l.policy,c,s,r)){case`full-access`:e.setResult({action:`allow`});return;case`reject`:e.setResult({action:`deny`,message:`Tool use rejected by approval policy`,shouldAbort:!1});return;case`always-ask`:await this.dispatchAlwaysAskApproval(e.payload,e.setResult.bind(e),l);return}})}async dispatchAlwaysAskApproval(e,t,n){let r=A(e,n),i=new AbortController,s=this.bus.on(a.session.closed,()=>{i.abort()},{filter:{agentId:r.agentId,...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}});try{let e=await this.bus.requestOptional(o.request,r,{timeout:0,signal:i.signal});e.handled&&e.data.action===`allow`?t({action:`allow`,...e.data.updatedInput&&{updatedInput:e.data.updatedInput}}):t({action:`deny`,message:e.handled&&e.data.action===`deny`?e.data.message??`User denied tool execution`:`No approval handler available`,shouldAbort:!1})}catch{t({action:`deny`,message:i.signal.aborted?`Approval cancelled — agent session closed`:`Tool approval request failed`,shouldAbort:!1})}finally{s()}}async checkFileAccessDenyReason(e,t){if(!this.options.fileAccessRuleProvider)return;let r=p(e.toolName,e.args,t.cwd??n.sep);if(!r)return;if(!t.cwd)return`Access denied: file access rules could not be evaluated: agent has no working directory`;let i=m(e.toolName,e.args);if(i?.split(/[\\/]/).includes(`..`))return`Access denied: '${i}' contains a '..' segment; file access rules need a path without parent references`;let a=D(r);try{let e=await this.options.fileAccessRuleProvider(t.cwd,t.allowedDirectories);if(e.isDenied(r)||a!==void 0&&a!==r&&e.isDenied(a))return`Access denied: '${r}' is restricted by .makaioignore rules`}catch{return`Access denied: file access rules could not be evaluated`}if(a===void 0)return`Access denied: file access rules could not be evaluated: '${r}' cannot be resolved safely`;let{allowedDirectories:o}=t;if(o!==void 0&&!O(o,a,t.cwd))return`Access denied: '${r}' is outside the agent's allowed directories`}async fetchRawEnrichedPolicy(e,t,n){try{return await this.bus.requestOptional(o.resolveEnrichedPolicy,{toolName:n,personaId:e,profileId:t})}catch(r){return this.logger.error(`[ToolApprovalService] approval.resolveEnrichedPolicy failed; falling back to fail-closed`,{toolName:n,personaId:e,profileId:t,error:r}),{handled:!1}}}async resolvePolicyWithContext(e,t,n){let r=t?.adapterName??e.adapterName,i=C(t?.personaId,t?.profileId,n),a=await this.resolveHarnessPolicy(r,t?.harnessId,t?.clientId),o=y(a,e.toolName),s=i?.policy??o??`always-ask`,c=s;return a?.capabilityOverrides&&a.toolCapabilityMap&&e.toolName&&(c=b(s,e.toolName,a.capabilityOverrides,a.toolCapabilityMap)),{policy:c,harness:a,agent:t,resolvedAdapterName:r,...i?.personaName&&{personaName:i.personaName},...i?.profileName&&{profileName:i.profileName}}}async getAgentMetadata(t,n){try{let r;if(n){let i=await this.bus.requestOptional(e.listBySession,{sessionId:n});r=i.handled?i.data.agents.find(e=>e.agentId===t):void 0}else{let n=await this.bus.requestOptional(e.get,{agentId:t});r=n.handled?n.data.agent:void 0}return r?{kind:`found`,agent:r}:{kind:`absent`}}catch(e){return this.logger.warn(`[ToolApprovalService] agent lookup failed; forcing always-ask`,{agentId:t,sessionId:n,error:e}),{kind:`error`}}}async resolveSessionOverride(e){if(e)try{let n=await this.bus.requestOptional(t.get,{sessionId:e});return n.handled?n.data.session?.approvalPolicyOverride??void 0:void 0}catch{return}}async resolveHarnessPolicy(e,t,n){try{let r=await this.bus.request(s.resolve,{adapterName:e,...t&&{profileHarnessId:t},...n&&{clientId:n}});return{approvalPolicy:r.approvalPolicy,capabilityOverrides:r.capabilityOverrides,toolCapabilityMap:r.toolCapabilityMap,toolApprovalOverrides:r.toolApprovalOverrides}}catch{return}}};export{M as t};
+import{a as e}from"./ownership-recovery-guard-C00rcqvz.mjs";import{SessionStorageSubjects as t}from"./services/session/storage/namespace.mjs";import"./session-BjV4HPCQ.mjs";import n from"node:path";import{lstatSync as r,realpathSync as i}from"node:fs";import{AgentSubjects as a,ApprovalSubjects as o,HarnessSubjects as s,ToolNameError as c,computeMetaTags as l,resolveToolPolicy as u,toolVocabularyForAdapter as d}from"@makaio/framework/contracts";import{BaseService as f}from"@makaio/framework/service-base";import{extractToolFilePath as p,extractToolRawFilePath as m}from"@makaio/framework/tools";const h={"full-access":0,"always-ask":1,reject:2};function g(){return`apr_${crypto.randomUUID()}`}function _(e){switch(e){case`allow`:return`full-access`;case`deny`:return`reject`;case`ask`:return`always-ask`}}function v(e){if(!e?.length)return`neutral`;let t=l(e);return t.includes(`destructive`)?`destructive`:t.includes(`read-only`)?`safe`:`neutral`}function y(e,t){if(e)return t&&e.toolApprovalOverrides?.[t]!==void 0?e.toolApprovalOverrides[t]:e.approvalPolicy}function b(e,t,n,r){let i=r[t];if(!i?.length)return e;let a=e;for(let e of i){let t=n[e];t&&h[t]>h[a]&&(a=t)}return a}function x(e,t,n){return n.handled?n.data.allowedDirectories??void 0:t?[]:void 0}function S(e,t,n){if(!n||!e?.cwd)return{};let r=E(e,t);return{cwd:e.cwd,...r&&{allowedDirectories:r}}}function C(e,t,n){if(!(!e&&!t))return!n||!n.handled?{policy:`always-ask`}:{policy:_(n.data.action),...n.data.personaName&&{personaName:n.data.personaName},...n.data.profileName&&{profileName:n.data.profileName}}}function w(e,t,n,r){if(!t||!e)return{kind:`none`};let{allowedTools:i,disallowedTools:a}=e;if(i===void 0&&a===void 0)return{kind:`none`};let o=d(e.adapterName);if(o===void 0)return{kind:`none`};let s;try{s=u(o,{allowedTools:i,disallowedTools:a})}catch(e){if(e instanceof c)return{kind:`deny`,message:e.message};throw e}let l=s.checkToolCall(t,n??{});if(!l.allowed)return{kind:`deny`,message:l.reason};if(i===void 0)return{kind:`none`};let f=E(e,r);return f!==void 0&&!k(f,t,n,e.cwd)?{kind:`none`}:{kind:`granted`}}const T=new Set([`Glob`,`Grep`]);function E(e,t){if(e.allowedDirectories!==void 0)return e.allowedDirectories;if((e.personaId||e.profileId)&&t)return x(e.personaId,e.profileId,t)}function D(e){let t=e;for(;;)try{return n.resolve(i(t),n.relative(t,e))}catch(e){if(e.code!==`ENOENT`||r(t,{throwIfNoEntry:!1})!==void 0)return;let i=n.dirname(t);if(i===t)return;t=i}}function O(e,t,r){let i=e=>process.platform===`win32`?e.toLowerCase():e;return e.some(e=>{let a=D(n.resolve(r,e));if(a===void 0)return!1;let o=n.relative(i(a),i(t));return o===``||o!==`..`&&!o.startsWith(`..${n.sep}`)&&!n.isAbsolute(o)})}function k(e,t,r,i){if(!i)return!1;let a=r?.path,o=T.has(t)?n.resolve(i,typeof a==`string`&&a.length>0?a:`.`):p(t,r,i);if(o===null)return!1;let s=D(o);return s===void 0?!1:O(e,s,i)}function A(e,t){let n=t.harness?.toolCapabilityMap&&e.toolName?t.harness.toolCapabilityMap[e.toolName]:void 0;return{requestId:g(),toolCallId:e.toolCallId,toolName:e.toolName,args:e.args,agentId:e.agentId,sessionId:e.sessionId,adapterName:t.resolvedAdapterName,...t.personaName&&{personaName:t.personaName},...t.profileName&&{profileName:t.profileName},capabilities:n,riskLevel:v(n),reasoning:e.reasoning,createdAt:Date.now()}}function j(e,t,n,r){return n===`always-ask`?`always-ask`:e===`reject`?`reject`:r?`always-ask`:t.kind===`granted`?`full-access`:e}var M=class extends f{logger=console;options;constructor(e,t={}){super(e),this.options=t}async onInit(){this.registerHandler(a.toolApprove,async e=>{let t=await this.getAgentMetadata(e.payload.agentId,e.payload.sessionId),n=t.kind===`found`?t.agent:null,r=t.kind===`error`,i=(n?.personaId||n?.profileId)&&e.payload.toolName?await this.fetchRawEnrichedPolicy(n?.personaId,n?.profileId,e.payload.toolName):void 0,a=S(n,i,this.options.fileAccessRuleProvider),o=await this.checkFileAccessDenyReason(e.payload,a);if(o){e.setResult({action:`deny`,message:o,shouldAbort:!1});return}let s=await this.resolveSessionOverride(e.payload.sessionId);if(s===`reject`){e.setResult({action:`deny`,message:`Tool use rejected by session approval policy override`,shouldAbort:!1});return}let c=w(n,e.payload.toolName,e.payload.args,i);if(c.kind===`deny`){e.setResult({action:`deny`,message:c.message,shouldAbort:!1});return}if(s===`full-access`&&!r){e.setResult({action:`allow`});return}let l=await this.resolvePolicyWithContext({adapterName:e.payload.adapterName,toolName:e.payload.toolName},n,i);switch(j(l.policy,c,s,r)){case`full-access`:e.setResult({action:`allow`});return;case`reject`:e.setResult({action:`deny`,message:`Tool use rejected by approval policy`,shouldAbort:!1});return;case`always-ask`:await this.dispatchAlwaysAskApproval(e.payload,e.setResult.bind(e),l);return}})}async dispatchAlwaysAskApproval(e,t,n){let r=A(e,n),i=new AbortController,s=this.bus.on(a.session.closed,()=>{i.abort()},{filter:{agentId:r.agentId,...e.adapterSessionId!==void 0&&{adapterSessionId:e.adapterSessionId}}});try{let e=await this.bus.requestOptional(o.request,r,{timeout:0,signal:i.signal});e.handled&&e.data.action===`allow`?t({action:`allow`,...e.data.updatedInput&&{updatedInput:e.data.updatedInput}}):t({action:`deny`,message:e.handled&&e.data.action===`deny`?e.data.message??`User denied tool execution`:`No approval handler available`,shouldAbort:!1})}catch{t({action:`deny`,message:i.signal.aborted?`Approval cancelled — agent session closed`:`Tool approval request failed`,shouldAbort:!1})}finally{s()}}async checkFileAccessDenyReason(e,t){if(!this.options.fileAccessRuleProvider)return;let r=p(e.toolName,e.args,t.cwd??n.sep);if(!r)return;if(!t.cwd)return`Access denied: file access rules could not be evaluated: agent has no working directory`;let i=m(e.toolName,e.args);if(i?.split(/[\\/]/).includes(`..`))return`Access denied: '${i}' contains a '..' segment; file access rules need a path without parent references`;let a=D(r);try{let e=await this.options.fileAccessRuleProvider(t.cwd,t.allowedDirectories);if(e.isDenied(r)||a!==void 0&&a!==r&&e.isDenied(a))return`Access denied: '${r}' is restricted by .makaioignore rules`}catch{return`Access denied: file access rules could not be evaluated`}if(a===void 0)return`Access denied: file access rules could not be evaluated: '${r}' cannot be resolved safely`;let{allowedDirectories:o}=t;if(o!==void 0&&!O(o,a,t.cwd))return`Access denied: '${r}' is outside the agent's allowed directories`}async fetchRawEnrichedPolicy(e,t,n){try{return await this.bus.requestOptional(o.resolveEnrichedPolicy,{toolName:n,personaId:e,profileId:t})}catch(r){return this.logger.error(`[ToolApprovalService] approval.resolveEnrichedPolicy failed; falling back to fail-closed`,{toolName:n,personaId:e,profileId:t,error:r}),{handled:!1}}}async resolvePolicyWithContext(e,t,n){let r=t?.adapterName??e.adapterName,i=C(t?.personaId,t?.profileId,n),a=await this.resolveHarnessPolicy(r,t?.harnessId,t?.clientId),o=y(a,e.toolName),s=i?.policy??o??`always-ask`,c=s;return a?.capabilityOverrides&&a.toolCapabilityMap&&e.toolName&&(c=b(s,e.toolName,a.capabilityOverrides,a.toolCapabilityMap)),{policy:c,harness:a,agent:t,resolvedAdapterName:r,...i?.personaName&&{personaName:i.personaName},...i?.profileName&&{profileName:i.profileName}}}async getAgentMetadata(t,n){try{let r;if(n){let i=await this.bus.requestOptional(e.listBySession,{sessionId:n});r=i.handled?i.data.agents.find(e=>e.agentId===t):void 0}else{let n=await this.bus.requestOptional(e.get,{agentId:t});r=n.handled?n.data.agent:void 0}return r?{kind:`found`,agent:r}:{kind:`absent`}}catch(e){return this.logger.warn(`[ToolApprovalService] agent lookup failed; forcing always-ask`,{agentId:t,sessionId:n,error:e}),{kind:`error`}}}async resolveSessionOverride(e){if(e)try{let n=await this.bus.requestOptional(t.get,{sessionId:e});return n.handled?n.data.session?.approvalPolicyOverride??void 0:void 0}catch{return}}async resolveHarnessPolicy(e,t,n){try{let r=await this.bus.request(s.resolve,{adapterName:e,...t&&{profileHarnessId:t},...n&&{clientId:n}});return{approvalPolicy:r.approvalPolicy,capabilityOverrides:r.capabilityOverrides,toolCapabilityMap:r.toolCapabilityMap,toolApprovalOverrides:r.toolApprovalOverrides}}catch{return}}};export{M as t};

package/dist/{tools-BCL_dtHe.mjs → tools-Cbuj-ClQ.mjs}

@@ -1 +1 @@
-import{l as e}from"./framework-packages-D2fycy02.mjs";import{FILE_ACCESS_RULES_KEY as t,extractToolFilePath as n}from"@makaio/framework/tools";function r(){let t=new Map;return{filter:e=>!!e.tools?.createToolsets,async processActivated(n,r,i){let a=i.getService(e);if(!a)throw Error(`ToolRegistry is not available. Ensure toolRegistryPackage is included in the composition root.`);let o=r.tools.createToolsets(i),s=[];try{for(let e of o)await a.register(e),s.push(()=>a.deregister(e.metadata.name))}catch(e){for(let e=s.length-1;e>=0;--e)try{await s[e]()}catch(e){console.error(`[ToolContributionProcessor] Rollback error for "${n}":`,e)}throw e}t.set(n,s)},async processStopped(e){let n=t.get(e);if(n){for(let t=n.length-1;t>=0;--t)try{await n[t]()}catch(t){console.error(`[ToolContributionProcessor] Deregister error for "${e}":`,t)}t.delete(e)}}}}export{n,r,t};
+import{l as e}from"./framework-packages-blqho6Nk.mjs";import{FILE_ACCESS_RULES_KEY as t,extractToolFilePath as n}from"@makaio/framework/tools";function r(){let t=new Map;return{filter:e=>!!e.tools?.createToolsets,async processActivated(n,r,i){let a=i.getService(e);if(!a)throw Error(`ToolRegistry is not available. Ensure toolRegistryPackage is included in the composition root.`);let o=r.tools.createToolsets(i),s=[];try{for(let e of o)await a.register(e),s.push(()=>a.deregister(e.metadata.name))}catch(e){for(let e=s.length-1;e>=0;--e)try{await s[e]()}catch(e){console.error(`[ToolContributionProcessor] Rollback error for "${n}":`,e)}throw e}t.set(n,s)},async processStopped(e){let n=t.get(e);if(n){for(let t=n.length-1;t>=0;--t)try{await n[t]()}catch(t){console.error(`[ToolContributionProcessor] Deregister error for "${e}":`,t)}t.delete(e)}}}}export{n,r,t};

package/dist/{transition-DK43U3QJ.d.mts → transition-CzxHvafT.d.mts}

@@ -1,5 +1,5 @@
-import { x as ArtifactRevision$1 } from "./schemas-BNQtL3Ln.mjs";
-import { l as JsonValue$1 } from "./json-value--pv1-OHx.mjs";
+import { x as ArtifactRevision$1 } from "./schemas-DyTbvDp-.mjs";
+import { l as JsonValue$1 } from "./json-value-B2gMynW3.mjs";
 import { z } from "zod";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
 

package/dist/{types-CW-4Y0k_2.d.mts → types-BfuE1-1V2.d.mts}

@@ -1,4 +1,4 @@
-import { r as LogImportMode, t as LogImporterInfo } from "./index-u0EteHlR2.mjs";
+import { r as LogImportMode, t as LogImporterInfo } from "./index-B4MBx8vA2.mjs";
 import * as _$_makaio_bus_core0 from "@makaio/framework/bus";
 import { IMakaioBus } from "@makaio/framework/bus";
 import { LogImportOrchestrator, LogImporter } from "@makaio/framework/adapters";

package/dist/{types-jmH0Yad4.d.mts → types-DsZBnL7z.d.mts}

@@ -1,6 +1,6 @@
-import { l as JsonValue$1 } from "./json-value--pv1-OHx.mjs";
-import { s as MessageBlock$1 } from "./index-DDCixELI.mjs";
-import { t as ContractStorageNamespaceDefinition } from "./storage-namespace-definition-DV3IipmH.mjs";
+import { l as JsonValue$1 } from "./json-value-B2gMynW3.mjs";
+import { s as MessageBlock$1 } from "./index-D-1RUdHM.mjs";
+import { t as ContractStorageNamespaceDefinition } from "./storage-namespace-definition--9lrtKns.mjs";
 import * as _$zod from "zod";
 import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
@@ -1565,8 +1565,8 @@ type Turn$1 = z.infer<typeof TurnSchema$1>;
  */
 declare const MessageRoutingStatusSchema: z.ZodEnum<{
   completed: "completed";
-  acknowledged: "acknowledged";
   sent: "sent";
+  acknowledged: "acknowledged";
 }>;
 type MessageRoutingStatus = z.infer<typeof MessageRoutingStatusSchema>;
 /**
@@ -1577,8 +1577,8 @@ declare const MessageRoutingSchema$1: z.ZodObject<{
   agentId: z.ZodString;
   status: z.ZodEnum<{
     completed: "completed";
-    acknowledged: "acknowledged";
     sent: "sent";
+    acknowledged: "acknowledged";
   }>;
   timestamp: z.ZodNumber;
   error: z.ZodOptional<z.ZodString>;
@@ -11858,8 +11858,8 @@ declare const SessionSchemas: {
         maxTokens: _$zod.ZodNumber;
         percentage: _$zod.ZodNumber;
         level: _$zod.ZodEnum<{
-          warn: "warn";
           ok: "ok";
+          warn: "warn";
           critical: "critical";
         }>;
         lastUpdatedAt: _$zod.ZodNumber;

package/dist/ui-kernel/index.d.mts

@@ -1,4 +1,4 @@
-import { r as PageSurfaceConfig, s as SurfaceId } from "../schemas-BjhhkGN_.mjs";
+import { r as PageSurfaceConfig, s as SurfaceId } from "../schemas-BBMHnFq8.mjs";
 import * as _$zod from "zod";
 import { z } from "zod";
 import * as _$_makaio_core0 from "@makaio/framework/core";
@@ -2309,8 +2309,8 @@ declare const UiSchemas: {
   ready: z.ZodObject<{
     surface: z.ZodEnum<{
       tray: "tray";
-      web: "web";
       mobile: "mobile";
+      web: "web";
       electron: "electron";
       electrobun: "electrobun";
     }>;
@@ -2409,8 +2409,8 @@ declare const UiNamespace: _$_makaio_core0.BusNamespaceDefinition<"ui", {
   ready: _$zod.ZodObject<{
     surface: _$zod.ZodEnum<{
       tray: "tray";
-      web: "web";
       mobile: "mobile";
+      web: "web";
       electron: "electron";
       electrobun: "electrobun";
     }>;
@@ -2450,8 +2450,8 @@ declare const UiSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatSubjec
   ready: _$zod.ZodObject<{
     surface: _$zod.ZodEnum<{
       tray: "tray";
-      web: "web";
       mobile: "mobile";
+      web: "web";
       electron: "electron";
       electrobun: "electrobun";
     }>;

package/dist/ui-kernel/pages/namespace.d.mts

@@ -15,8 +15,8 @@ declare const PageNamespace: _$_makaio_core0.BusNamespaceDefinition<"pages", {
     readonly request: _$zod.ZodObject<{
       surface: _$zod.ZodOptional<_$zod.ZodEnum<{
         tray: "tray";
-        web: "web";
         mobile: "mobile";
+        web: "web";
         electron: "electron";
         electrobun: "electrobun";
       }>>;
@@ -35,8 +35,8 @@ declare const PageNamespace: _$_makaio_core0.BusNamespaceDefinition<"pages", {
         level: _$zod.ZodCustom<_$_makaio_contracts0.UiNavigationLevel, _$_makaio_contracts0.UiNavigationLevel>;
         surfaces: _$zod.ZodOptional<_$zod.ZodUnion<readonly [_$zod.ZodLiteral<"all">, _$zod.ZodArray<_$zod.ZodEnum<{
           tray: "tray";
-          web: "web";
           mobile: "mobile";
+          web: "web";
           electron: "electron";
           electrobun: "electrobun";
         }>>]>>;
@@ -55,8 +55,8 @@ declare const PageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatSubj
     readonly request: _$zod.ZodObject<{
       surface: _$zod.ZodOptional<_$zod.ZodEnum<{
         tray: "tray";
-        web: "web";
         mobile: "mobile";
+        web: "web";
         electron: "electron";
         electrobun: "electrobun";
       }>>;
@@ -75,8 +75,8 @@ declare const PageSubjects: _$_makaio_core0.BusSubjects<_$_makaio_core0.FlatSubj
         level: _$zod.ZodCustom<_$_makaio_contracts0.UiNavigationLevel, _$_makaio_contracts0.UiNavigationLevel>;
         surfaces: _$zod.ZodOptional<_$zod.ZodUnion<readonly [_$zod.ZodLiteral<"all">, _$zod.ZodArray<_$zod.ZodEnum<{
           tray: "tray";
-          web: "web";
           mobile: "mobile";
+          web: "web";
           electron: "electron";
           electrobun: "electrobun";
         }>>]>>;

package/dist/ui-kernel/pages/schemas.d.mts

@@ -1,2 +1,2 @@
-import { a as SurfaceCapabilitySchema, c as SurfaceIdSchema, i as SurfaceCapability, l as isPageVisibleOnSurface, n as PageSchemas, o as SurfaceDeclaration, r as PageSurfaceConfig, s as SurfaceId, t as PageMetadata } from "../../schemas-BjhhkGN_.mjs";
+import { a as SurfaceCapabilitySchema, c as SurfaceIdSchema, i as SurfaceCapability, l as isPageVisibleOnSurface, n as PageSchemas, o as SurfaceDeclaration, r as PageSurfaceConfig, s as SurfaceId, t as PageMetadata } from "../../schemas-BBMHnFq8.mjs";
 export { PageMetadata, PageSchemas, PageSurfaceConfig, SurfaceCapability, SurfaceCapabilitySchema, SurfaceDeclaration, SurfaceId, SurfaceIdSchema, isPageVisibleOnSurface };

package/dist/{view-builder-Nffvg8MI.d.mts → view-builder-BLdSezFD.d.mts}

@@ -1,4 +1,4 @@
-import { p as ArtifactRelation, x as ArtifactRevision$1 } from "./schemas-BNQtL3Ln.mjs";
+import { p as ArtifactRelation, x as ArtifactRevision$1 } from "./schemas-DyTbvDp-.mjs";
 import { z } from "zod";
 import * as _$_makaio_contracts0 from "@makaio/framework/contracts";
 

package/dist/workflow-engine/execution-attempt-repository.d.mts

@@ -1,2 +1,2 @@
-import { $t as AttemptSettlementSnapshot, A as OperationReportDecision, At as evaluateRuntimeReadiness, B as RecordProvisioningAbsentInput, Bt as snapshotRequestExecutionCancellationInput, C as ExecutionAttemptStatus, Ct as RuntimeOutcomeFenceMismatchError, D as MarkRuntimeReadyInput, Dt as evaluateOperationCompletion, E as InfrastructureFailureDecision, Et as evaluateOperationAdmission, F as ReadBootstrapStartStateInput, Ft as RequestAttemptCancellationInput, G as RuntimeRegistrationDecision, H as RegisterRuntimeInput, I as RecordAllocationInput, It as RequestExecutionCancellationInput, J as sameAllocationRef, K as decodeDurableOutcome, L as RecordAllocationTerminatedInput, Lt as evaluateAttemptCancellation, M as PendingAttemptAbandonmentDecision, Mt as AttemptOutcomeControlObservation, N as PreparationReceipt, Nt as ExecutionAttemptCancellationDecision, O as OperationAdmissionDecision, Ot as evaluatePreparationReport, P as ProvisioningClaimDecision, Pt as ExecutionAttemptCancellationIntent, Qt as AttemptSettlementRead, R as RecordInfrastructureFailureInput, Rt as snapshotAttemptOutcomeControl, S as ExecutionAttemptSettlementKind, St as RuntimeOutcomeFence, T as GetInstructionInput, Tt as evaluateAttemptReachability, U as ReportOperationInput, V as RecoverableAttemptRecord, W as RuntimeReadinessDecision, X as CompleteProviderOperationInput, Y as sameDurableOutcome, Z as HandoffProviderOperationInput, _ as EXECUTION_ATTEMPT_STATUSES, a as AllocationRefEvolutionDecision, b as ExecutionAttemptRecoveryOperations, bt as AttemptReachability, c as AttemptExecutionState, d as BootstrapStartState, en as EnsureExecutionAttemptDecision, et as ListOpenProviderOperationsInput, f as CompleteOperationInput, ft as ProvisionerIncarnationLossDecision, g as EXECUTION_ATTEMPT_SETTLEMENT_KINDS, gt as TakeOverProviderOperationInput, h as DurableOutcome, ht as RenewProviderOperationClaimInput, i as AllocationRefEvolution, j as OutcomeCodec, jt as evaluateRuntimeRegistration, k as OperationCompletionDecision, kt as evaluateProvisionerIncarnationLoss, l as AttemptOperationStartGate, m as DuplicateExecutionAttemptError, mt as RecordProviderOperationUncertaintyInput, n as AdmitOperationInput, nn as EnsureExecutionAttemptPersistenceInput, o as AllocationTerminationDecision, p as DiscoveredAllocationDecision, pt as ProvisioningAbsenceDecision, q as durableOutcome, r as AllocationRecordingDecision, rn as ReadAttemptSettlementInput, s as AttemptControlState, t as ATTEMPT_OPERATION_START_GATES, tn as EnsureExecutionAttemptInput, tt as OpenProviderOperationRecord, u as BeginProvisioningInput, v as ExecutionAttemptCreate, vt as ExecutionAttemptOutcomeCommit, w as ExecutionOwnerId, wt as assertRuntimeOutcomeFence, x as ExecutionAttemptRepository, xt as AttemptReachabilityDecision, y as ExecutionAttemptRecord, yt as ExecutionAttemptOutcomeDecision, z as RecordProvisionerIncarnationLostInput, zt as snapshotRequestAttemptCancellationInput } from "../execution-attempt-repository-C2XKRZ3O.mjs";
+import { $t as AttemptSettlementSnapshot, A as OperationReportDecision, At as evaluateRuntimeReadiness, B as RecordProvisioningAbsentInput, Bt as snapshotRequestExecutionCancellationInput, C as ExecutionAttemptStatus, Ct as RuntimeOutcomeFenceMismatchError, D as MarkRuntimeReadyInput, Dt as evaluateOperationCompletion, E as InfrastructureFailureDecision, Et as evaluateOperationAdmission, F as ReadBootstrapStartStateInput, Ft as RequestAttemptCancellationInput, G as RuntimeRegistrationDecision, H as RegisterRuntimeInput, I as RecordAllocationInput, It as RequestExecutionCancellationInput, J as sameAllocationRef, K as decodeDurableOutcome, L as RecordAllocationTerminatedInput, Lt as evaluateAttemptCancellation, M as PendingAttemptAbandonmentDecision, Mt as AttemptOutcomeControlObservation, N as PreparationReceipt, Nt as ExecutionAttemptCancellationDecision, O as OperationAdmissionDecision, Ot as evaluatePreparationReport, P as ProvisioningClaimDecision, Pt as ExecutionAttemptCancellationIntent, Qt as AttemptSettlementRead, R as RecordInfrastructureFailureInput, Rt as snapshotAttemptOutcomeControl, S as ExecutionAttemptSettlementKind, St as RuntimeOutcomeFence, T as GetInstructionInput, Tt as evaluateAttemptReachability, U as ReportOperationInput, V as RecoverableAttemptRecord, W as RuntimeReadinessDecision, X as CompleteProviderOperationInput, Y as sameDurableOutcome, Z as HandoffProviderOperationInput, _ as EXECUTION_ATTEMPT_STATUSES, a as AllocationRefEvolutionDecision, b as ExecutionAttemptRecoveryOperations, bt as AttemptReachability, c as AttemptExecutionState, d as BootstrapStartState, en as EnsureExecutionAttemptDecision, et as ListOpenProviderOperationsInput, f as CompleteOperationInput, ft as ProvisionerIncarnationLossDecision, g as EXECUTION_ATTEMPT_SETTLEMENT_KINDS, gt as TakeOverProviderOperationInput, h as DurableOutcome, ht as RenewProviderOperationClaimInput, i as AllocationRefEvolution, j as OutcomeCodec, jt as evaluateRuntimeRegistration, k as OperationCompletionDecision, kt as evaluateProvisionerIncarnationLoss, l as AttemptOperationStartGate, m as DuplicateExecutionAttemptError, mt as RecordProviderOperationUncertaintyInput, n as AdmitOperationInput, nn as EnsureExecutionAttemptPersistenceInput, o as AllocationTerminationDecision, p as DiscoveredAllocationDecision, pt as ProvisioningAbsenceDecision, q as durableOutcome, r as AllocationRecordingDecision, rn as ReadAttemptSettlementInput, s as AttemptControlState, t as ATTEMPT_OPERATION_START_GATES, tn as EnsureExecutionAttemptInput, tt as OpenProviderOperationRecord, u as BeginProvisioningInput, v as ExecutionAttemptCreate, vt as ExecutionAttemptOutcomeCommit, w as ExecutionOwnerId, wt as assertRuntimeOutcomeFence, x as ExecutionAttemptRepository, xt as AttemptReachabilityDecision, y as ExecutionAttemptRecord, yt as ExecutionAttemptOutcomeDecision, z as RecordProvisionerIncarnationLostInput, zt as snapshotRequestAttemptCancellationInput } from "../execution-attempt-repository-Dyluu7wy.mjs";
 export { ATTEMPT_OPERATION_START_GATES, AdmitOperationInput, AllocationRecordingDecision, AllocationRefEvolution, AllocationRefEvolutionDecision, AllocationTerminationDecision, AttemptControlState, AttemptExecutionState, AttemptOperationStartGate, AttemptOutcomeControlObservation, AttemptReachability, AttemptReachabilityDecision, AttemptSettlementRead, AttemptSettlementSnapshot, BeginProvisioningInput, BootstrapStartState, CompleteOperationInput, CompleteProviderOperationInput, DiscoveredAllocationDecision, DuplicateExecutionAttemptError, DurableOutcome, EXECUTION_ATTEMPT_SETTLEMENT_KINDS, EXECUTION_ATTEMPT_STATUSES, EnsureExecutionAttemptDecision, EnsureExecutionAttemptInput, EnsureExecutionAttemptPersistenceInput, ExecutionAttemptCancellationDecision, ExecutionAttemptCancellationIntent, ExecutionAttemptCreate, ExecutionAttemptOutcomeCommit, ExecutionAttemptOutcomeDecision, ExecutionAttemptRecord, ExecutionAttemptRecoveryOperations, ExecutionAttemptRepository, ExecutionAttemptSettlementKind, ExecutionAttemptStatus, ExecutionOwnerId, GetInstructionInput, HandoffProviderOperationInput, InfrastructureFailureDecision, ListOpenProviderOperationsInput, MarkRuntimeReadyInput, OpenProviderOperationRecord, OperationAdmissionDecision, OperationCompletionDecision, OperationReportDecision, OutcomeCodec, PendingAttemptAbandonmentDecision, PreparationReceipt, ProvisionerIncarnationLossDecision, ProvisioningAbsenceDecision, ProvisioningClaimDecision, ReadAttemptSettlementInput, ReadBootstrapStartStateInput, RecordAllocationInput, RecordAllocationTerminatedInput, RecordInfrastructureFailureInput, RecordProviderOperationUncertaintyInput, RecordProvisionerIncarnationLostInput, RecordProvisioningAbsentInput, RecoverableAttemptRecord, RegisterRuntimeInput, RenewProviderOperationClaimInput, ReportOperationInput, RequestAttemptCancellationInput, RequestExecutionCancellationInput, RuntimeOutcomeFence, RuntimeOutcomeFenceMismatchError, RuntimeReadinessDecision, RuntimeRegistrationDecision, TakeOverProviderOperationInput, assertRuntimeOutcomeFence, decodeDurableOutcome, durableOutcome, evaluateAttemptCancellation, evaluateAttemptReachability, evaluateOperationAdmission, evaluateOperationCompletion, evaluatePreparationReport, evaluateProvisionerIncarnationLoss, evaluateRuntimeReadiness, evaluateRuntimeRegistration, sameAllocationRef, sameDurableOutcome, snapshotAttemptOutcomeControl, snapshotRequestAttemptCancellationInput, snapshotRequestExecutionCancellationInput };

package/dist/workflow-engine/execution-attempt-repository.mjs

@@ -1 +1 @@
-import{_ as e,a as t,b as n,c as r,d as i,f as a,g as o,h as s,i as c,l,m as u,n as d,o as f,p,r as m,s as h,t as g,u as _,v,x as y,y as b}from"../execution-attempt-repository-CY289HlC.mjs";export{g as ATTEMPT_OPERATION_START_GATES,d as DuplicateExecutionAttemptError,m as EXECUTION_ATTEMPT_SETTLEMENT_KINDS,c as EXECUTION_ATTEMPT_STATUSES,p as RuntimeOutcomeFenceMismatchError,u as assertRuntimeOutcomeFence,t as decodeDurableOutcome,f as durableOutcome,l as evaluateAttemptCancellation,s as evaluateAttemptReachability,o as evaluateOperationAdmission,e as evaluateOperationCompletion,v as evaluatePreparationReport,b as evaluateProvisionerIncarnationLoss,n as evaluateRuntimeReadiness,y as evaluateRuntimeRegistration,h as sameAllocationRef,r as sameDurableOutcome,_ as snapshotAttemptOutcomeControl,i as snapshotRequestAttemptCancellationInput,a as snapshotRequestExecutionCancellationInput};
+import{_ as e,a as t,b as n,c as r,d as i,f as a,g as o,h as s,i as c,l,m as u,n as d,o as f,p,r as m,s as h,t as g,u as _,v,x as y,y as b}from"../execution-attempt-repository-BMbbbk7n.mjs";export{g as ATTEMPT_OPERATION_START_GATES,d as DuplicateExecutionAttemptError,m as EXECUTION_ATTEMPT_SETTLEMENT_KINDS,c as EXECUTION_ATTEMPT_STATUSES,p as RuntimeOutcomeFenceMismatchError,u as assertRuntimeOutcomeFence,t as decodeDurableOutcome,f as durableOutcome,l as evaluateAttemptCancellation,s as evaluateAttemptReachability,o as evaluateOperationAdmission,e as evaluateOperationCompletion,v as evaluatePreparationReport,b as evaluateProvisionerIncarnationLoss,n as evaluateRuntimeReadiness,y as evaluateRuntimeRegistration,h as sameAllocationRef,r as sameDurableOutcome,_ as snapshotAttemptOutcomeControl,i as snapshotRequestAttemptCancellationInput,a as snapshotRequestExecutionCancellationInput};