@nodetool-ai/runtime 0.7.0-rc.23 → 0.8.1

package/dist/recommended-models.js

@@ -6,9 +6,9 @@
  */
 export const RECOMMENDED_MODELS = [
     {
-        id: "gpt-4o-mini",
+        id: "gpt-5-mini",
         type: "language_model",
-        name: "GPT-4o mini",
+        name: "GPT-5 mini",
         repo_id: null,
         path: null,
         downloaded: false,
@@ -17,9 +17,9 @@ export const RECOMMENDED_MODELS = [
         provider: "openai"
     },
     {
-        id: "claude-3-5-sonnet-latest",
+        id: "claude-sonnet-5",
         type: "language_model",
-        name: "Claude 3.5 Sonnet",
+        name: "Claude Sonnet 5",
         repo_id: null,
         path: null,
         downloaded: false,
@@ -134,6 +134,26 @@ export const RECOMMENDED_MODELS = [
         modality: "video",
         task: "image_to_video",
         provider: "openai"
+    },
+    {
+        id: "meta/musicgen",
+        type: "music_model",
+        name: "MusicGen",
+        repo_id: null,
+        path: null,
+        downloaded: false,
+        modality: "music",
+        provider: "replicate"
+    },
+    {
+        id: "music-2.6",
+        type: "music_model",
+        name: "MiniMax Music 2.6",
+        repo_id: null,
+        path: null,
+        downloaded: false,
+        modality: "music",
+        provider: "minimax"
     }
 ];
 //# sourceMappingURL=recommended-models.js.map

package/dist/recommended-models.js.map

@@ -1 +1 @@
-{"version":3,"file":"recommended-models.js","sourceRoot":"","sources":["../src/recommended-models.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAmBH,MAAM,CAAC,MAAM,kBAAkB,GAA8B;IAC3D;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,QAAQ;KACnB;CACF,CAAC"}
+{"version":3,"file":"recommended-models.js","sourceRoot":"","sources":["../src/recommended-models.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA2BH,MAAM,CAAC,MAAM,kBAAkB,GAA8B;IAC3D;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,iBAAiB;QACrB,IAAI,EAAE,gBAAgB;QACtB,IAAI,EAAE,iBAAiB;QACvB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,oBAAoB;QACxB,IAAI,EAAE,iBAAiB;QACvB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,UAAU;QACpB,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,MAAM;KACjB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,aAAa;QACjB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,OAAO;QACX,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,QAAQ;KACnB;IACD;QACE,EAAE,EAAE,eAAe;QACnB,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,WAAW;KACtB;IACD;QACE,EAAE,EAAE,WAAW;QACf,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,QAAQ,EAAE,SAAS;KACpB;CACF,CAAC"}

package/dist/recoverable-node-error.d.ts

@@ -0,0 +1,31 @@
+/**
+ * The error a node throws when it has the broken value in hand.
+ *
+ * Without the malformed value, "repair" is fabrication: the supervisor would
+ * invent a structurally valid output that no runtime validator can semantically
+ * vet. So `substitute` is offered only for an escalation carrying a
+ * `candidateOutput`, and this is how a node supplies one — a JSON parser that
+ * chokes attaches the raw response instead of losing it.
+ *
+ * The value is redacted and truncated by the kernel when the escalation is
+ * built, alongside the node's inputs; nothing here is safe to log as-is.
+ *
+ * See docs/workflow-supervisor-design.md §4.
+ */
+export declare class RecoverableNodeError extends Error {
+    /** The malformed value a `substitute` verdict would replace. */
+    readonly candidateOutput: unknown;
+    /**
+     * Stable categorical code for this failure (an HTTP status, a provider error
+     * code, a validation path). Verdicts stick per `(nodeId, code)`, so it must
+     * never embed request-specific values — see design §4.
+     */
+    readonly code?: string;
+    constructor(message: string, opts: {
+        candidateOutput: unknown;
+        code?: string;
+    });
+}
+/** True for a `RecoverableNodeError` from any copy of this package. */
+export declare function isRecoverableNodeError(err: unknown): err is RecoverableNodeError;
+//# sourceMappingURL=recoverable-node-error.d.ts.map

package/dist/recoverable-node-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoverable-node-error.d.ts","sourceRoot":"","sources":["../src/recoverable-node-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,YACE,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QAAE,eAAe,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAMlD;CACF;AAED,uEAAuE;AACvE,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,OAAO,GACX,GAAG,IAAI,oBAAoB,CAM7B"}

package/dist/recoverable-node-error.js

@@ -0,0 +1,37 @@
+/**
+ * The error a node throws when it has the broken value in hand.
+ *
+ * Without the malformed value, "repair" is fabrication: the supervisor would
+ * invent a structurally valid output that no runtime validator can semantically
+ * vet. So `substitute` is offered only for an escalation carrying a
+ * `candidateOutput`, and this is how a node supplies one — a JSON parser that
+ * chokes attaches the raw response instead of losing it.
+ *
+ * The value is redacted and truncated by the kernel when the escalation is
+ * built, alongside the node's inputs; nothing here is safe to log as-is.
+ *
+ * See docs/workflow-supervisor-design.md §4.
+ */
+export class RecoverableNodeError extends Error {
+    /** The malformed value a `substitute` verdict would replace. */
+    candidateOutput;
+    /**
+     * Stable categorical code for this failure (an HTTP status, a provider error
+     * code, a validation path). Verdicts stick per `(nodeId, code)`, so it must
+     * never embed request-specific values — see design §4.
+     */
+    code;
+    constructor(message, opts) {
+        super(message);
+        this.name = "RecoverableNodeError";
+        this.candidateOutput = opts.candidateOutput;
+        this.code = opts.code;
+    }
+}
+/** True for a `RecoverableNodeError` from any copy of this package. */
+export function isRecoverableNodeError(err) {
+    return (err instanceof Error &&
+        err.name === "RecoverableNodeError" &&
+        "candidateOutput" in err);
+}
+//# sourceMappingURL=recoverable-node-error.js.map

package/dist/recoverable-node-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoverable-node-error.js","sourceRoot":"","sources":["../src/recoverable-node-error.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,gEAAgE;IACvD,eAAe,CAAU;IAClC;;;;OAIG;IACM,IAAI,CAAU;IAEvB,YACE,OAAe,EACf,IAAiD;QAEjD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF;AAED,uEAAuE;AACvE,MAAM,UAAU,sBAAsB,CACpC,GAAY;IAEZ,OAAO,CACL,GAAG,YAAY,KAAK;QACpB,GAAG,CAAC,IAAI,KAAK,sBAAsB;QACnC,iBAAiB,IAAI,GAAG,CACzB,CAAC;AACJ,CAAC"}

package/dist/redact-params.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Redact a generation's parameters before they leave the process on a
+ * `prediction` message or land in the ledger row.
+ *
+ * A generation request carries the media it conditions on — a seed image, a
+ * reference clip — as bytes or `data:` URLs. The row wants the prompt, the
+ * resolution and the duration, not a copy of the input. Bytes become their
+ * length; long strings become their length; everything else is kept.
+ */
+export type RedactedParams = Record<string, unknown>;
+/** Redact a parameter bag. Never throws; a non-object comes back as `{}`. */
+export declare function redactGenerationParams(params: Record<string, unknown> | null | undefined): RedactedParams;
+//# sourceMappingURL=redact-params.d.ts.map

package/dist/redact-params.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-params.d.ts","sourceRoot":"","sources":["../src/redact-params.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAwCrD,6EAA6E;AAC7E,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GACjD,cAAc,CAMhB"}

package/dist/redact-params.js

@@ -0,0 +1,57 @@
+/**
+ * Redact a generation's parameters before they leave the process on a
+ * `prediction` message or land in the ledger row.
+ *
+ * A generation request carries the media it conditions on — a seed image, a
+ * reference clip — as bytes or `data:` URLs. The row wants the prompt, the
+ * resolution and the duration, not a copy of the input. Bytes become their
+ * length; long strings become their length; everything else is kept.
+ */
+const MAX_STRING_LENGTH = 2000;
+const MAX_DEPTH = 8;
+function isBinary(value) {
+    return ArrayBuffer.isView(value) || value instanceof ArrayBuffer;
+}
+function redactValue(value, depth) {
+    if (isBinary(value)) {
+        return { bytes: value.byteLength };
+    }
+    if (typeof value === "string") {
+        if (value.startsWith("data:")) {
+            return { bytes: value.length, truncated: true };
+        }
+        if (value.length > MAX_STRING_LENGTH) {
+            return { truncated: true, length: value.length };
+        }
+        return value;
+    }
+    if (depth >= MAX_DEPTH) {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => redactValue(item, depth + 1));
+    }
+    if (value !== null && typeof value === "object") {
+        const proto = Object.getPrototypeOf(value);
+        if (proto !== Object.prototype && proto !== null) {
+            // A class instance (a Date, a Map, a stream): not a parameter bag.
+            return value;
+        }
+        const out = {};
+        for (const [key, item] of Object.entries(value)) {
+            out[key] = redactValue(item, depth + 1);
+        }
+        return out;
+    }
+    return value;
+}
+/** Redact a parameter bag. Never throws; a non-object comes back as `{}`. */
+export function redactGenerationParams(params) {
+    if (!params || typeof params !== "object")
+        return {};
+    const redacted = redactValue(params, 0);
+    return redacted !== null && typeof redacted === "object" && !Array.isArray(redacted)
+        ? redacted
+        : {};
+}
+//# sourceMappingURL=redact-params.js.map

package/dist/redact-params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact-params.js","sourceRoot":"","sources":["../src/redact-params.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,SAAS,GAAG,CAAC,CAAC;AAIpB,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,WAAW,CAAC;AACnE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;IACrC,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QAClD,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;YACrC,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QACnD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,MAAM,CAAC,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACjD,mEAAmE;YACnE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,sBAAsB,CACpC,MAAkD;IAElD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACrD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,QAAQ,KAAK,IAAI,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;QAClF,CAAC,CAAE,QAA2B;QAC9B,CAAC,CAAC,EAAE,CAAC;AACT,CAAC"}

package/dist/sandbox-module-catalog.d.ts

@@ -0,0 +1,43 @@
+import { type SandboxModuleDeclaration, type SandboxModuleDeliveryResult, type SandboxModuleResolution, type SandboxModuleStatus, type SandboxModuleSummary, type SandboxPackSkillDisclosure } from "@nodetool-ai/protocol";
+/**
+ * Read-only sandbox module catalog injected by the host that discovered packs.
+ * Runtime owns this contract; package discovery adapters live in node-sdk.
+ */
+export interface SandboxModuleCatalog {
+    summaries(): readonly SandboxModuleSummary[];
+    resolveForExecution(declarations: readonly SandboxModuleDeclaration[]): SandboxModuleResolution;
+    diagnostics(): readonly SandboxModuleStatus[];
+    /**
+     * A pack's SKILL.md with the trust decision attached, when the host read one.
+     * Optional: a catalog assembled somewhere without pack documentation (a
+     * browser host, a fixture) answers nothing, and every caller must handle
+     * that anyway — a pack may simply ship no skill.
+     */
+    packSkill?(packName: string): SandboxPackSkillDisclosure | undefined;
+    /**
+     * Authorize and retrieve one module's browser-safe content by opaque id.
+     *
+     * Authorization and retrieval are one operation so the two checks cannot
+     * drift apart. Asynchronous by contract — an entitlement decision may need
+     * database or remote state — even where the v1 implementation decides
+     * synchronously.
+     */
+    authorizeDelivery(moduleId: string): Promise<SandboxModuleDeliveryResult>;
+}
+/** The refusal a catalog with nothing to deliver returns for any id. */
+export declare function refuseSandboxDelivery(moduleId: string): SandboxModuleDeliveryResult;
+/**
+ * Install the catalog every {@link ProcessingContext} in this process falls back
+ * to when its constructor is given none.
+ *
+ * The catalog stays an injected dependency: a caller that passes
+ * `sandboxModuleCatalog` explicitly — including `null` — always wins. This is
+ * the host's default, set once where packs are discovered, so the twenty-odd
+ * context construction sites do not each have to thread it through. A soft pack
+ * reload calls this again with the rebuilt catalog; runs already in flight keep
+ * the instance they captured.
+ */
+export declare function setProcessSandboxModuleCatalog(catalog: SandboxModuleCatalog | null): void;
+/** The process-wide catalog default, or null when no host installed one. */
+export declare function getProcessSandboxModuleCatalog(): SandboxModuleCatalog | null;
+//# sourceMappingURL=sandbox-module-catalog.d.ts.map

package/dist/sandbox-module-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-module-catalog.d.ts","sourceRoot":"","sources":["../src/sandbox-module-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAChC,MAAM,uBAAuB,CAAC;AAE/B;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,SAAS,IAAI,SAAS,oBAAoB,EAAE,CAAC;IAC7C,mBAAmB,CACjB,YAAY,EAAE,SAAS,wBAAwB,EAAE,GAChD,uBAAuB,CAAC;IAC3B,WAAW,IAAI,SAAS,mBAAmB,EAAE,CAAC;IAC9C;;;;;OAKG;IACH,SAAS,CAAC,CAAC,QAAQ,EAAE,MAAM,GAAG,0BAA0B,GAAG,SAAS,CAAC;IACrE;;;;;;;OAOG;IACH,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;CAC3E;AAED,wEAAwE;AACxE,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,MAAM,GACf,2BAA2B,CAK7B;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,oBAAoB,GAAG,IAAI,GACnC,IAAI,CAEN;AAED,4EAA4E;AAC5E,wBAAgB,8BAA8B,IAAI,oBAAoB,GAAG,IAAI,CAE5E"}

package/dist/sandbox-module-catalog.js

@@ -0,0 +1,25 @@
+import { sandboxDeliveryRefusal } from "@nodetool-ai/protocol";
+/** The refusal a catalog with nothing to deliver returns for any id. */
+export function refuseSandboxDelivery(moduleId) {
+    return sandboxDeliveryRefusal("not-found", `Sandbox module ${moduleId} is not available for delivery.`);
+}
+let processCatalog = null;
+/**
+ * Install the catalog every {@link ProcessingContext} in this process falls back
+ * to when its constructor is given none.
+ *
+ * The catalog stays an injected dependency: a caller that passes
+ * `sandboxModuleCatalog` explicitly — including `null` — always wins. This is
+ * the host's default, set once where packs are discovered, so the twenty-odd
+ * context construction sites do not each have to thread it through. A soft pack
+ * reload calls this again with the rebuilt catalog; runs already in flight keep
+ * the instance they captured.
+ */
+export function setProcessSandboxModuleCatalog(catalog) {
+    processCatalog = catalog;
+}
+/** The process-wide catalog default, or null when no host installed one. */
+export function getProcessSandboxModuleCatalog() {
+    return processCatalog;
+}
+//# sourceMappingURL=sandbox-module-catalog.js.map

package/dist/sandbox-module-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox-module-catalog.js","sourceRoot":"","sources":["../src/sandbox-module-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EAOvB,MAAM,uBAAuB,CAAC;AA8B/B,wEAAwE;AACxE,MAAM,UAAU,qBAAqB,CACnC,QAAgB;IAEhB,OAAO,sBAAsB,CAC3B,WAAW,EACX,kBAAkB,QAAQ,iCAAiC,CAC5D,CAAC;AACJ,CAAC;AAED,IAAI,cAAc,GAAgC,IAAI,CAAC;AAEvD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,8BAA8B,CAC5C,OAAoC;IAEpC,cAAc,GAAG,OAAO,CAAC;AAC3B,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,8BAA8B;IAC5C,OAAO,cAAc,CAAC;AACxB,CAAC"}

package/dist/storage-workspace.d.ts

@@ -0,0 +1,59 @@
+/**
+ * The one {@link Workspace} implementation, over any {@link StorageAdapter}.
+ *
+ * There is deliberately no second implementation for local folders: a local
+ * workspace is this class over a `FileStorageAdapter`, which is what keeps the
+ * two deployments on the same code path instead of on two that drift.
+ */
+import { type StorageAdapter } from "./context.js";
+import { type Workspace, type WorkspaceEntry, type WorkspaceStat } from "./workspace.js";
+export declare class StorageWorkspace implements Workspace {
+    readonly storage: StorageAdapter;
+    readonly localDir: string | null;
+    private scratch;
+    constructor(storage: StorageAdapter, opts?: {
+        localDir?: string | null;
+    });
+    private rootReady;
+    /** Create the workspace directory once, on first use. */
+    private ensureRoot;
+    key(path: string): string;
+    /**
+     * Refuse a path whose real location leaves the workspace.
+     *
+     * Called on every operation that touches a local workspace. `key()` already
+     * refuses a `..` that climbs out lexically; this is the half a symlink
+     * defeats.
+     */
+    private assertContained;
+    uri(path: string): string;
+    read(path: string): Promise<Uint8Array | null>;
+    readText(path: string): Promise<string | null>;
+    write(path: string, data: Uint8Array | string, contentType?: string): Promise<void>;
+    exists(path: string): Promise<boolean>;
+    stat(path: string): Promise<WorkspaceStat | null>;
+    list(path?: string, opts?: {
+        recursive?: boolean;
+    }): Promise<WorkspaceEntry[]>;
+    delete(path: string): Promise<boolean>;
+    deleteAll(path: string): Promise<number>;
+    mkdir(path: string): Promise<void>;
+    copy(from: string, to: string): Promise<void>;
+    move(from: string, to: string): Promise<void>;
+    materialize(path: string): Promise<string>;
+    absorb(localPath: string, path: string): Promise<void>;
+    scratchDir(): Promise<string>;
+    cleanupScratch(): Promise<void>;
+}
+/**
+ * Build a workspace over a storage backend.
+ *
+ * `prefix` carves a namespace out of a shared bucket — how a cloud deployment
+ * gives each user their own workspace inside the one bucket it has.
+ */
+export declare function createWorkspace(storage: StorageAdapter, opts?: {
+    prefix?: string | null;
+}): Workspace;
+/** A workspace over a real directory. */
+export declare function createLocalWorkspace(dir: string): Workspace;
+//# sourceMappingURL=storage-workspace.d.ts.map

package/dist/storage-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-workspace.d.ts","sourceRoot":"","sources":["../src/storage-workspace.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAKH,OAAO,EAAuB,KAAK,cAAc,EAAE,MAAM,cAAc,CAAC;AAExE,OAAO,EAEL,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,aAAa,EACnB,MAAM,gBAAgB,CAAC;AA+IxB,qBAAa,gBAAiB,YAAW,SAAS;IAChD,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,OAAO,CAAC,OAAO,CAAgC;IAE/C,YAAY,OAAO,EAAE,cAAc,EAAE,IAAI,GAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAO,EAG3E;IAED,OAAO,CAAC,SAAS,CAA8B;IAE/C,yDAAyD;IACzD,OAAO,CAAC,UAAU;IASlB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIxB;IAED;;;;;;OAMG;YACW,eAAe;IAa7B,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAExB;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAUnD;IAEK,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAGnD;IAEK,KAAK,CACT,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,UAAU,GAAG,MAAM,EACzB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,IAAI,CAAC,CAIf;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAO3C;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAuCtD;IAEK,IAAI,CACR,IAAI,SAAK,EACT,IAAI,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAO,GACjC,OAAO,CAAC,cAAc,EAAE,CAAC,CA0B3B;IAEK,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAG3C;IAEK,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAuB7C;IAEK,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAavC;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOlD;IAEK,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGlD;IAEK,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAa/C;IAEK,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAW3D;IAEK,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,CAOlC;IAEK,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpC;CACF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,cAAc,EACvB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACpC,SAAS,CAUX;AAED,yCAAyC;AACzC,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAE3D"}