@objectstack/spec 5.0.0 → 5.2.0

package/dist/kernel/index.d.ts

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-export { A as ArtifactChecksum, a as ArtifactChecksumSchema, b as ArtifactFileEntry, c as ArtifactFileEntrySchema, d as ArtifactSignature, e as ArtifactSignatureSchema, C as CustomizationOrigin, f as CustomizationOriginSchema, g as CustomizationPolicy, h as CustomizationPolicySchema, D as DEFAULT_METADATA_TYPE_REGISTRY, i as DependencyResolutionResult, j as DependencyResolutionResultSchema, k as DependencyStatus, l as DependencyStatusEnum, F as FieldChange, m as FieldChangeSchema, M as ManifestSchema, n as MergeConflict, o as MergeConflictSchema, p as MergeResult, q as MergeResultSchema, r as MergeStrategyConfig, s as MergeStrategyConfigSchema, t as MetadataBulkRegisterRequest, u as MetadataBulkRegisterRequestSchema, v as MetadataBulkResult, w as MetadataBulkResultSchema, x as MetadataCategory, y as MetadataCategoryEnum, z as MetadataChangeType, B as MetadataChangeTypeSchema, E as MetadataDependency, G as MetadataDependencySchema, H as MetadataDiffItem, I as MetadataDiffItemSchema, J as MetadataEvent, K as MetadataEventSchema, L as MetadataOverlay, N as MetadataOverlaySchema, O as MetadataPluginConfig, P as MetadataPluginConfigSchema, Q as MetadataPluginManifest, R as MetadataPluginManifestSchema, S as MetadataQuery, T as MetadataQueryResult, U as MetadataQueryResultSchema, V as MetadataQuerySchema, W as MetadataType, X as MetadataTypeRegistryEntry, Y as MetadataTypeRegistryEntrySchema, Z as MetadataTypeSchema, _ as MetadataValidationResult, $ as MetadataValidationResultSchema, a0 as ObjectStackManifest, a1 as ObjectStackManifestInput, a2 as PackageArtifact, a3 as PackageArtifactInput, a4 as PackageArtifactSchema, a5 as RequiredAction, a6 as RequiredActionSchema, a7 as ResolvedDependency, a8 as ResolvedDependencySchema, a9 as RollbackPackageRequest, aa as RollbackPackageRequestSchema, ab as RollbackPackageResponse, ac as RollbackPackageResponseSchema, ad as UpgradeImpactLevel, ae as UpgradeImpactLevelSchema, af as UpgradePackageRequest, ag as UpgradePackageRequestSchema, ah as UpgradePackageResponse, ai as UpgradePackageResponseSchema, aj as UpgradePhase, ak as UpgradePhaseSchema, al as UpgradePlan, am as UpgradePlanSchema, an as UpgradeSnapshot, ao as UpgradeSnapshotSchema } from '../manifest.zod-DB7VkrRx.js';
+export { A as ArtifactChecksum, a as ArtifactChecksumSchema, b as ArtifactFileEntry, c as ArtifactFileEntrySchema, d as ArtifactSignature, e as ArtifactSignatureSchema, C as CustomizationOrigin, f as CustomizationOriginSchema, g as CustomizationPolicy, h as CustomizationPolicySchema, D as DEFAULT_METADATA_TYPE_REGISTRY, i as DependencyResolutionResult, j as DependencyResolutionResultSchema, k as DependencyStatus, l as DependencyStatusEnum, F as FieldChange, m as FieldChangeSchema, M as ManifestSchema, n as MergeConflict, o as MergeConflictSchema, p as MergeResult, q as MergeResultSchema, r as MergeStrategyConfig, s as MergeStrategyConfigSchema, t as MetadataBulkRegisterRequest, u as MetadataBulkRegisterRequestSchema, v as MetadataBulkResult, w as MetadataBulkResultSchema, x as MetadataCategory, y as MetadataCategoryEnum, z as MetadataChangeType, B as MetadataChangeTypeSchema, E as MetadataDependency, G as MetadataDependencySchema, H as MetadataDiffItem, I as MetadataDiffItemSchema, J as MetadataEvent, K as MetadataEventSchema, L as MetadataOverlay, N as MetadataOverlaySchema, O as MetadataPluginConfig, P as MetadataPluginConfigSchema, Q as MetadataPluginManifest, R as MetadataPluginManifestSchema, S as MetadataQuery, T as MetadataQueryResult, U as MetadataQueryResultSchema, V as MetadataQuerySchema, W as MetadataType, X as MetadataTypeRegistryEntry, Y as MetadataTypeRegistryEntrySchema, Z as MetadataTypeSchema, _ as MetadataValidationResult, $ as MetadataValidationResultSchema, a0 as ObjectStackManifest, a1 as ObjectStackManifestInput, a2 as PackageArtifact, a3 as PackageArtifactInput, a4 as PackageArtifactSchema, a5 as RequiredAction, a6 as RequiredActionSchema, a7 as ResolvedDependency, a8 as ResolvedDependencySchema, a9 as RollbackPackageRequest, aa as RollbackPackageRequestSchema, ab as RollbackPackageResponse, ac as RollbackPackageResponseSchema, ad as UpgradeImpactLevel, ae as UpgradeImpactLevelSchema, af as UpgradePackageRequest, ag as UpgradePackageRequestSchema, ah as UpgradePackageResponse, ai as UpgradePackageResponseSchema, aj as UpgradePhase, ak as UpgradePhaseSchema, al as UpgradePlan, am as UpgradePlanSchema, an as UpgradeSnapshot, ao as UpgradeSnapshotSchema } from '../manifest.zod-ZIjKKFkz.js';
 export { M as MetadataCollectionInfo, a as MetadataCollectionInfoSchema, b as MetadataExportOptions, c as MetadataExportOptionsSchema, d as MetadataFallbackStrategy, e as MetadataFallbackStrategySchema, f as MetadataFormat, g as MetadataFormatSchema, h as MetadataImportOptions, i as MetadataImportOptionsSchema, j as MetadataLoadOptions, k as MetadataLoadOptionsSchema, l as MetadataLoadResult, m as MetadataLoadResultSchema, n as MetadataLoaderContract, o as MetadataLoaderContractSchema, p as MetadataManagerConfig, q as MetadataManagerConfigSchema, r as MetadataSaveOptions, s as MetadataSaveOptionsSchema, t as MetadataSaveResult, u as MetadataSaveResultSchema, v as MetadataStats, w as MetadataStatsSchema, x as MetadataWatchEvent, y as MetadataWatchEventSchema } from '../metadata-loader.zod-gpOHrSRJ.js';
 export { D as DisablePackageRequest, a as DisablePackageRequestSchema, b as DisablePackageResponse, c as DisablePackageResponseSchema, E as EnablePackageRequest, d as EnablePackageRequestSchema, e as EnablePackageResponse, f as EnablePackageResponseSchema, G as GetPackageRequest, g as GetPackageRequestSchema, h as GetPackageResponse, i as GetPackageResponseSchema, I as InstallPackageRequest, j as InstallPackageRequestSchema, k as InstallPackageResponse, l as InstallPackageResponseSchema, m as InstalledPackage, n as InstalledPackageSchema, L as ListPackagesRequest, o as ListPackagesRequestSchema, p as ListPackagesResponse, q as ListPackagesResponseSchema, N as NamespaceConflictError, r as NamespaceConflictErrorSchema, s as NamespaceRegistryEntry, t as NamespaceRegistryEntrySchema, P as PackageStatus, u as PackageStatusEnum, U as UninstallPackageRequest, v as UninstallPackageRequestSchema, w as UninstallPackageResponse, x as UninstallPackageResponseSchema } from '../package-registry.zod--iKeSd9R.js';
 export { C as CORE_PLUGIN_TYPES, P as PluginContext, a as PluginContextData, b as PluginContextSchema, c as PluginDefinition, d as PluginLifecycleHooks, e as PluginLifecycleSchema, f as PluginSchema, U as UpgradeContext, g as UpgradeContextSchema } from '../plugin.zod-B3JTV0Ay.js';
@@ -28,6 +28,257 @@ declare const OclifPluginConfigSchema: z.ZodObject<{
 type CLICommandContribution = z.infer<typeof CLICommandContributionSchema>;
 type OclifPluginConfig = z.infer<typeof OclifPluginConfigSchema>;
 
+/**
+ * # Cluster Protocol
+ *
+ * Defines the runtime semantics required for ObjectStack to behave correctly
+ * when more than one Node.js process is involved. The protocol layer codifies
+ * **intent** (scope, delivery, leadership); concrete implementations
+ * (`memory`, `redis`, `postgres`, `nats`) live in `@objectstack/service-cluster`.
+ *
+ * The full design rationale is in
+ * `content/docs/concepts/cluster-semantics.mdx`. Read it before changing
+ * any of the enums here — every value has a precise contract that other
+ * subsystems depend on.
+ */
+/**
+ * Event Scope.
+ *
+ * Answers the question *"who is supposed to receive this event?"*. The
+ * default (`local`) is the safe choice: it never crosses a process boundary,
+ * so a plugin written without thinking about clustering still behaves
+ * correctly on one or N nodes.
+ *
+ * - `local`  — In-process only. Cheap, lossy on crash, never crosses nodes.
+ * - `cluster` — Delivered to every node, including the emitter. Used for
+ *               cache invalidation, configuration reloads, metadata change
+ *               notifications.
+ * - `tenant`  — Same wire path as `cluster`, but transports may partition
+ *               by tenant id so only nodes currently serving the tenant
+ *               receive it.
+ *
+ * @see content/docs/concepts/cluster-semantics.mdx §4.1
+ */
+declare const EventScopeSchema: z.ZodEnum<{
+    local: "local";
+    cluster: "cluster";
+    tenant: "tenant";
+}>;
+type EventScope = z.infer<typeof EventScopeSchema>;
+/**
+ * Event Delivery Semantics.
+ *
+ * Answers *"what guarantee does the bus offer about reaching handlers?"*.
+ *
+ * - `best-effort`    — In-memory delivery, no persistence, lost on crash.
+ *                      Default for `local`-scoped events.
+ * - `at-least-once`  — Persisted to the transport before publish returns.
+ *                      Survives node crash. Handlers MUST be idempotent —
+ *                      duplicates are possible during retry. Default for
+ *                      `cluster` / `tenant`-scoped events.
+ * - `exactly-once`   — Reserved keyword. **Not implemented in v1**;
+ *                      runtime will reject this value at startup with a
+ *                      clear error. Accepted in the schema so future
+ *                      runtimes can add it without a breaking change.
+ *
+ * @see content/docs/concepts/cluster-semantics.mdx §4.2
+ */
+declare const EventDeliverySemanticsSchema: z.ZodEnum<{
+    "best-effort": "best-effort";
+    "at-least-once": "at-least-once";
+    "exactly-once": "exactly-once";
+}>;
+type EventDeliverySemantics = z.infer<typeof EventDeliverySemanticsSchema>;
+/**
+ * Per-emit cluster options attached to `EventMetadata.cluster`.
+ *
+ * Adding the object as `optional()` everywhere preserves backward
+ * compatibility — emits that omit it default to local + best-effort, which
+ * is identical to today's behaviour.
+ */
+declare const EventClusterOptionsSchema: z.ZodObject<{
+    scope: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        local: "local";
+        cluster: "cluster";
+        tenant: "tenant";
+    }>>>;
+    deliverySemantics: z.ZodOptional<z.ZodEnum<{
+        "best-effort": "best-effort";
+        "at-least-once": "at-least-once";
+        "exactly-once": "exactly-once";
+    }>>;
+    partitionKey: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type EventClusterOptions = z.infer<typeof EventClusterOptionsSchema>;
+/**
+ * Cluster scope for a service registration.
+ *
+ * Independent of DI lifecycle scope (`singleton` / `transient` / `scoped`),
+ * which controls *per-call* instance reuse. This controls *per-process*
+ * presence: should every node run a copy, or only one node at a time?
+ *
+ * - `node`    — One instance per Node.js process. Every node runs a copy.
+ *               This is the only safe default.
+ * - `cluster` — Logically one instance across the whole cluster. Must
+ *               declare a `leaderStrategy` for how the invariant is held.
+ *
+ * @see content/docs/concepts/cluster-semantics.mdx §5
+ */
+declare const ServiceClusterScopeSchema: z.ZodEnum<{
+    cluster: "cluster";
+    node: "node";
+}>;
+type ServiceClusterScope = z.infer<typeof ServiceClusterScopeSchema>;
+/**
+ * Strategy for maintaining the cluster-singleton invariant.
+ *
+ * Only meaningful when `clusterScope: 'cluster'`.
+ *
+ * - `leader-elected`        — Exactly one node holds a leadership lock; only
+ *                             the leader runs the work. Use for cron-style
+ *                             schedulers and migration runners.
+ * - `partitioned`           — Every node runs the service, but each instance
+ *                             owns a disjoint partition of the work
+ *                             (typically hashed on `partitionKey`). Use for
+ *                             high-throughput queue workers.
+ * - `idempotent-broadcast`  — Every node runs the service on every input,
+ *                             and the work itself is idempotent. Use for
+ *                             cache invalidation and projection rebuilders.
+ *
+ * @see content/docs/concepts/cluster-semantics.mdx §5
+ */
+declare const ServiceLeaderStrategySchema: z.ZodEnum<{
+    "leader-elected": "leader-elected";
+    partitioned: "partitioned";
+    "idempotent-broadcast": "idempotent-broadcast";
+}>;
+type ServiceLeaderStrategy = z.infer<typeof ServiceLeaderStrategySchema>;
+/**
+ * Cluster annotations on a service registration.
+ *
+ * Embedded as `cluster?: ServiceClusterAnnotations` on
+ * `ServiceMetadata` / `ServiceFactoryRegistration`. Omitting it is
+ * equivalent to `{ clusterScope: 'node' }`.
+ */
+declare const ServiceClusterAnnotationsSchema: z.ZodObject<{
+    clusterScope: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        cluster: "cluster";
+        node: "node";
+    }>>>;
+    leaderStrategy: z.ZodOptional<z.ZodEnum<{
+        "leader-elected": "leader-elected";
+        partitioned: "partitioned";
+        "idempotent-broadcast": "idempotent-broadcast";
+    }>>;
+    clusterId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type ServiceClusterAnnotations = z.infer<typeof ServiceClusterAnnotationsSchema>;
+/**
+ * Cluster driver identifier.
+ *
+ * Selects which transport implements the four primitives (PubSub, Lock,
+ * KV, Counter). The protocol enumerates the drivers we expect to ship;
+ * additional drivers can be registered at runtime by plugins.
+ *
+ * @see content/docs/concepts/cluster-semantics.mdx §8
+ */
+declare const ClusterDriverSchema: z.ZodEnum<{
+    custom: "custom";
+    memory: "memory";
+    redis: "redis";
+    postgres: "postgres";
+    nats: "nats";
+}>;
+type ClusterDriver = z.infer<typeof ClusterDriverSchema>;
+/**
+ * Tenant isolation strategy on shared transports.
+ *
+ * - `channel-prefix` — Transport channels / keys are namespaced by
+ *                      `tenantId` so two tenants on the same Redis cluster
+ *                      cannot see each other's traffic. Default.
+ * - `none`           — No isolation. Only safe for single-tenant
+ *                      deployments or where the tenant is encoded
+ *                      directly into the payload.
+ */
+declare const ClusterTenantIsolationSchema: z.ZodEnum<{
+    none: "none";
+    "channel-prefix": "channel-prefix";
+}>;
+type ClusterTenantIsolation = z.infer<typeof ClusterTenantIsolationSchema>;
+/**
+ * Cluster configuration block on `defineStack({ cluster })`.
+ *
+ * The entire field is optional. When omitted the kernel uses the `memory`
+ * driver — identical to today's behaviour — and logs a one-line warning
+ * in production mode so deployments know they are not horizontally safe.
+ *
+ * @example
+ * ```ts
+ * defineStack({
+ *   cluster: {
+ *     driver: 'postgres',
+ *     useExistingPool: true,
+ *     nodeId: process.env.NODE_ID,
+ *   },
+ * })
+ * ```
+ */
+declare const ClusterCapabilityConfigSchema: z.ZodObject<{
+    driver: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        custom: "custom";
+        memory: "memory";
+        redis: "redis";
+        postgres: "postgres";
+        nats: "nats";
+    }>>>;
+    url: z.ZodOptional<z.ZodString>;
+    useExistingPool: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    nodeId: z.ZodOptional<z.ZodString>;
+    heartbeatMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    lockTtlMs: z.ZodDefault<z.ZodOptional<z.ZodNumber>>;
+    tenantIsolation: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        "channel-prefix": "channel-prefix";
+    }>>>;
+    driverOptions: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+type ClusterCapabilityConfig = z.infer<typeof ClusterCapabilityConfigSchema>;
+type ClusterCapabilityConfigInput = z.input<typeof ClusterCapabilityConfigSchema>;
+/**
+ * Operation that triggered a `metadata:changed` event.
+ */
+declare const MetadataChangeOperationSchema: z.ZodEnum<{
+    delete: "delete";
+    update: "update";
+    create: "create";
+    publish: "publish";
+}>;
+type MetadataChangeOperation = z.infer<typeof MetadataChangeOperationSchema>;
+/**
+ * Canonical payload for the `metadata:changed` event.
+ *
+ * All metadata persistence layers MUST emit this event after any successful
+ * write. Readers (registry caches, query engines, REST routers) MUST
+ * subscribe to it and compare `version` with their cached value before
+ * applying the invalidation — out-of-order older versions are ignored.
+ *
+ * @see content/docs/concepts/cluster-semantics.mdx §6
+ */
+declare const MetadataChangedEventPayloadSchema: z.ZodObject<{
+    type: z.ZodString;
+    name: z.ZodString;
+    tenantId: z.ZodOptional<z.ZodString>;
+    version: z.ZodBigInt;
+    operation: z.ZodEnum<{
+        delete: "delete";
+        update: "update";
+        create: "create";
+        publish: "publish";
+    }>;
+    correlationId: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+type MetadataChangedEventPayload = z.infer<typeof MetadataChangedEventPayloadSchema>;
+
 declare const RuntimeMode: z.ZodEnum<{
     provisioning: "provisioning";
     development: "development";
@@ -322,6 +573,19 @@ declare const EventMetadataSchema: z.ZodObject<{
         low: "low";
         background: "background";
     }>>>;
+    cluster: z.ZodOptional<z.ZodObject<{
+        scope: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+            local: "local";
+            cluster: "cluster";
+            tenant: "tenant";
+        }>>>;
+        deliverySemantics: z.ZodOptional<z.ZodEnum<{
+            "best-effort": "best-effort";
+            "at-least-once": "at-least-once";
+            "exactly-once": "exactly-once";
+        }>>;
+        partitionKey: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 /**
  * Event Type Definition Schema
@@ -375,6 +639,19 @@ declare const EventSchema: z.ZodObject<{
             low: "low";
             background: "background";
         }>>>;
+        cluster: z.ZodOptional<z.ZodObject<{
+            scope: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+                local: "local";
+                cluster: "cluster";
+                tenant: "tenant";
+            }>>>;
+            deliverySemantics: z.ZodOptional<z.ZodEnum<{
+                "best-effort": "best-effort";
+                "at-least-once": "at-least-once";
+                "exactly-once": "exactly-once";
+            }>>;
+            partitionKey: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
 }, z.core.$strip>;
 type Event = z.infer<typeof EventSchema>;
@@ -511,6 +788,19 @@ declare const DeadLetterQueueEntrySchema: z.ZodObject<{
                 low: "low";
                 background: "background";
             }>>>;
+            cluster: z.ZodOptional<z.ZodObject<{
+                scope: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+                    local: "local";
+                    cluster: "cluster";
+                    tenant: "tenant";
+                }>>>;
+                deliverySemantics: z.ZodOptional<z.ZodEnum<{
+                    "best-effort": "best-effort";
+                    "at-least-once": "at-least-once";
+                    "exactly-once": "exactly-once";
+                }>>;
+                partitionKey: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
         }, z.core.$strip>;
     }, z.core.$strip>;
     error: z.ZodObject<{
@@ -548,6 +838,19 @@ declare const EventLogEntrySchema: z.ZodObject<{
                 low: "low";
                 background: "background";
             }>>>;
+            cluster: z.ZodOptional<z.ZodObject<{
+                scope: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+                    local: "local";
+                    cluster: "cluster";
+                    tenant: "tenant";
+                }>>>;
+                deliverySemantics: z.ZodOptional<z.ZodEnum<{
+                    "best-effort": "best-effort";
+                    "at-least-once": "at-least-once";
+                    "exactly-once": "exactly-once";
+                }>>;
+                partitionKey: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
         }, z.core.$strip>;
     }, z.core.$strip>;
     status: z.ZodEnum<{
@@ -2409,8 +2712,8 @@ declare const DynamicPluginOperationSchema: z.ZodEnum<{
  */
 declare const PluginSourceSchema: z.ZodObject<{
     type: z.ZodEnum<{
-        url: "url";
         local: "local";
+        url: "url";
         npm: "npm";
         registry: "registry";
         git: "git";
@@ -2444,8 +2747,8 @@ declare const DynamicLoadRequestSchema: z.ZodObject<{
     pluginId: z.ZodString;
     source: z.ZodObject<{
         type: z.ZodEnum<{
-            url: "url";
             local: "local";
+            url: "url";
             npm: "npm";
             registry: "registry";
             git: "git";
@@ -2600,8 +2903,8 @@ declare const DynamicLoadingConfigSchema: z.ZodObject<{
     }, z.core.$strip>>;
     defaultSandbox: z.ZodDefault<z.ZodBoolean>;
     allowedSources: z.ZodOptional<z.ZodArray<z.ZodEnum<{
-        url: "url";
         local: "local";
+        url: "url";
         npm: "npm";
         registry: "registry";
         git: "git";
@@ -2623,10 +2926,10 @@ type DynamicUnloadRequestInput = z.input<typeof DynamicUnloadRequestSchema>;
 type DynamicLoadingConfigInput = z.input<typeof DynamicLoadingConfigSchema>;
 
 declare const PermissionScopeSchema: z.ZodEnum<{
+    tenant: "tenant";
     user: "user";
     plugin: "plugin";
     global: "global";
-    tenant: "tenant";
     resource: "resource";
 }>;
 /**
@@ -2634,11 +2937,11 @@ declare const PermissionScopeSchema: z.ZodEnum<{
  * Standard CRUD + extended actions
  */
 declare const PermissionActionSchema: z.ZodEnum<{
-    admin: "admin";
-    delete: "delete";
+    create: "create";
     update: "update";
+    delete: "delete";
+    admin: "admin";
     read: "read";
-    create: "create";
     execute: "execute";
     manage: "manage";
     configure: "configure";
@@ -2693,11 +2996,11 @@ declare const PermissionSchema: z.ZodObject<{
         "process.env": "process.env";
     }>;
     actions: z.ZodArray<z.ZodEnum<{
-        admin: "admin";
-        delete: "delete";
+        create: "create";
         update: "update";
+        delete: "delete";
+        admin: "admin";
         read: "read";
-        create: "create";
         execute: "execute";
         manage: "manage";
         configure: "configure";
@@ -2706,10 +3009,10 @@ declare const PermissionSchema: z.ZodObject<{
         import: "import";
     }>>;
     scope: z.ZodDefault<z.ZodEnum<{
+        tenant: "tenant";
         user: "user";
         plugin: "plugin";
         global: "global";
-        tenant: "tenant";
         resource: "resource";
     }>>;
     filter: z.ZodOptional<z.ZodObject<{
@@ -2768,11 +3071,11 @@ declare const PermissionSetSchema: z.ZodObject<{
             "process.env": "process.env";
         }>;
         actions: z.ZodArray<z.ZodEnum<{
-            admin: "admin";
-            delete: "delete";
+            create: "create";
             update: "update";
+            delete: "delete";
+            admin: "admin";
             read: "read";
-            create: "create";
             execute: "execute";
             manage: "manage";
             configure: "configure";
@@ -2781,10 +3084,10 @@ declare const PermissionSetSchema: z.ZodObject<{
             import: "import";
         }>>;
         scope: z.ZodDefault<z.ZodEnum<{
+            tenant: "tenant";
             user: "user";
             plugin: "plugin";
             global: "global";
-            tenant: "tenant";
             resource: "resource";
         }>>;
         filter: z.ZodOptional<z.ZodObject<{
@@ -2883,9 +3186,9 @@ declare const RuntimeConfigSchema: z.ZodObject<{
 declare const SandboxConfigSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
     level: z.ZodDefault<z.ZodEnum<{
+        none: "none";
         minimal: "minimal";
         standard: "standard";
-        none: "none";
         strict: "strict";
         paranoid: "paranoid";
     }>>;
@@ -2935,8 +3238,8 @@ declare const SandboxConfigSchema: z.ZodObject<{
     filesystem: z.ZodOptional<z.ZodObject<{
         mode: z.ZodDefault<z.ZodEnum<{
             readonly: "readonly";
-            full: "full";
             none: "none";
+            full: "full";
             restricted: "restricted";
         }>>;
         allowedPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -2946,8 +3249,8 @@ declare const SandboxConfigSchema: z.ZodObject<{
     network: z.ZodOptional<z.ZodObject<{
         mode: z.ZodDefault<z.ZodEnum<{
             local: "local";
-            full: "full";
             none: "none";
+            full: "full";
             restricted: "restricted";
         }>>;
         allowedHosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -2971,8 +3274,8 @@ declare const SandboxConfigSchema: z.ZodObject<{
     environment: z.ZodOptional<z.ZodObject<{
         mode: z.ZodDefault<z.ZodEnum<{
             readonly: "readonly";
-            full: "full";
             none: "none";
+            full: "full";
             restricted: "restricted";
         }>>;
         allowedVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -3140,8 +3443,8 @@ declare const KernelSecurityPolicySchema: z.ZodObject<{
         required: z.ZodDefault<z.ZodBoolean>;
         methods: z.ZodArray<z.ZodEnum<{
             "api-key": "api-key";
-            certificate: "certificate";
             jwt: "jwt";
+            certificate: "certificate";
             oauth2: "oauth2";
             session: "session";
         }>>;
@@ -3205,11 +3508,11 @@ declare const PluginSecurityManifestSchema: z.ZodObject<{
                 "process.env": "process.env";
             }>;
             actions: z.ZodArray<z.ZodEnum<{
-                admin: "admin";
-                delete: "delete";
+                create: "create";
                 update: "update";
+                delete: "delete";
+                admin: "admin";
                 read: "read";
-                create: "create";
                 execute: "execute";
                 manage: "manage";
                 configure: "configure";
@@ -3218,10 +3521,10 @@ declare const PluginSecurityManifestSchema: z.ZodObject<{
                 import: "import";
             }>>;
             scope: z.ZodDefault<z.ZodEnum<{
+                tenant: "tenant";
                 user: "user";
                 plugin: "plugin";
                 global: "global";
-                tenant: "tenant";
                 resource: "resource";
             }>>;
             filter: z.ZodOptional<z.ZodObject<{
@@ -3269,9 +3572,9 @@ declare const PluginSecurityManifestSchema: z.ZodObject<{
     sandbox: z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
         level: z.ZodDefault<z.ZodEnum<{
+            none: "none";
             minimal: "minimal";
             standard: "standard";
-            none: "none";
             strict: "strict";
             paranoid: "paranoid";
         }>>;
@@ -3321,8 +3624,8 @@ declare const PluginSecurityManifestSchema: z.ZodObject<{
         filesystem: z.ZodOptional<z.ZodObject<{
             mode: z.ZodDefault<z.ZodEnum<{
                 readonly: "readonly";
-                full: "full";
                 none: "none";
+                full: "full";
                 restricted: "restricted";
             }>>;
             allowedPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -3332,8 +3635,8 @@ declare const PluginSecurityManifestSchema: z.ZodObject<{
         network: z.ZodOptional<z.ZodObject<{
             mode: z.ZodDefault<z.ZodEnum<{
                 local: "local";
-                full: "full";
                 none: "none";
+                full: "full";
                 restricted: "restricted";
             }>>;
             allowedHosts: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -3357,8 +3660,8 @@ declare const PluginSecurityManifestSchema: z.ZodObject<{
         environment: z.ZodOptional<z.ZodObject<{
             mode: z.ZodDefault<z.ZodEnum<{
                 readonly: "readonly";
-                full: "full";
                 none: "none";
+                full: "full";
                 restricted: "restricted";
             }>>;
             allowedVars: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -3391,8 +3694,8 @@ declare const PluginSecurityManifestSchema: z.ZodObject<{
             required: z.ZodDefault<z.ZodBoolean>;
             methods: z.ZodArray<z.ZodEnum<{
                 "api-key": "api-key";
-                certificate: "certificate";
                 jwt: "jwt";
+                certificate: "certificate";
                 oauth2: "oauth2";
                 session: "session";
             }>>;
@@ -4156,6 +4459,18 @@ declare const ServiceMetadataSchema: z.ZodObject<{
     type: z.ZodOptional<z.ZodString>;
     registeredAt: z.ZodOptional<z.ZodNumber>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    cluster: z.ZodOptional<z.ZodObject<{
+        clusterScope: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+            cluster: "cluster";
+            node: "node";
+        }>>>;
+        leaderStrategy: z.ZodOptional<z.ZodEnum<{
+            "leader-elected": "leader-elected";
+            partitioned: "partitioned";
+            "idempotent-broadcast": "idempotent-broadcast";
+        }>>;
+        clusterId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 type ServiceMetadata = z.infer<typeof ServiceMetadataSchema>;
 /**
@@ -4202,6 +4517,18 @@ declare const ServiceFactoryRegistrationSchema: z.ZodObject<{
         sync: "sync";
     }>>>;
     singleton: z.ZodDefault<z.ZodOptional<z.ZodBoolean>>;
+    cluster: z.ZodOptional<z.ZodObject<{
+        clusterScope: z.ZodDefault<z.ZodOptional<z.ZodEnum<{
+            cluster: "cluster";
+            node: "node";
+        }>>>;
+        leaderStrategy: z.ZodOptional<z.ZodEnum<{
+            "leader-elected": "leader-elected";
+            partitioned: "partitioned";
+            "idempotent-broadcast": "idempotent-broadcast";
+        }>>;
+        clusterId: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 type ServiceFactoryRegistration = z.infer<typeof ServiceFactoryRegistrationSchema>;
 /**
@@ -4425,8 +4752,8 @@ declare const PluginRegistryEntrySchema: z.ZodObject<{
     description: z.ZodOptional<z.ZodString>;
     readme: z.ZodOptional<z.ZodString>;
     category: z.ZodOptional<z.ZodEnum<{
-        ui: "ui";
         driver: "driver";
+        ui: "ui";
         gateway: "gateway";
         adapter: "adapter";
         data: "data";
@@ -4881,8 +5208,8 @@ declare const SecurityPolicySchema: z.ZodObject<{
         }>>;
         allowedDestinations: z.ZodDefault<z.ZodArray<z.ZodString>>;
         filesystemAccess: z.ZodDefault<z.ZodEnum<{
-            full: "full";
             none: "none";
+            full: "full";
             "read-only": "read-only";
             "temp-only": "temp-only";
         }>>;
@@ -5405,8 +5732,8 @@ declare const PluginSecurityProtocol: {
             }>>;
             allowedDestinations: z.ZodDefault<z.ZodArray<z.ZodString>>;
             filesystemAccess: z.ZodDefault<z.ZodEnum<{
-                full: "full";
                 none: "none";
+                full: "full";
                 "read-only": "read-only";
                 "temp-only": "temp-only";
             }>>;
@@ -5732,6 +6059,7 @@ declare const ExecutionContextSchema: z.ZodObject<{
     tenantId: z.ZodOptional<z.ZodString>;
     roles: z.ZodDefault<z.ZodArray<z.ZodString>>;
     permissions: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    org_user_ids: z.ZodOptional<z.ZodArray<z.ZodString>>;
     isSystem: z.ZodDefault<z.ZodBoolean>;
     accessToken: z.ZodOptional<z.ZodString>;
     transaction: z.ZodOptional<z.ZodUnknown>;
@@ -5739,4 +6067,4 @@ declare const ExecutionContextSchema: z.ZodObject<{
 }, z.core.$strip>;
 type ExecutionContext = z.infer<typeof ExecutionContextSchema>;
 
-export { type ActivationEvent, ActivationEventSchema, type AdvancedPluginLifecycleConfig, AdvancedPluginLifecycleConfigSchema, type BreakingChange, BreakingChangeSchema, type CLICommandContribution, CLICommandContributionSchema, type CapabilityConformanceLevel, CapabilityConformanceLevelSchema, type CompatibilityLevel, CompatibilityLevelSchema, type CompatibilityMatrixEntry, CompatibilityMatrixEntrySchema, type DeadLetterQueueEntry, DeadLetterQueueEntrySchema, type DependencyConflict, DependencyConflictSchema, type DependencyGraph, type DependencyGraphNode, DependencyGraphNodeSchema, DependencyGraphSchema, type DeprecationNotice, DeprecationNoticeSchema, type DevFixtureConfig, DevFixtureConfigSchema, type DevPluginConfig, type DevPluginConfigInput, DevPluginConfigSchema, DevPluginPreset, type DevServiceOverride, DevServiceOverrideSchema, type DevToolsConfig, DevToolsConfigSchema, type DistributedStateConfig, DistributedStateConfigSchema, type DynamicLoadRequest, type DynamicLoadRequestInput, DynamicLoadRequestSchema, type DynamicLoadingConfig, type DynamicLoadingConfigInput, DynamicLoadingConfigSchema, type DynamicPluginOperation, DynamicPluginOperationSchema, type DynamicPluginResult, DynamicPluginResultSchema, type DynamicUnloadRequest, type DynamicUnloadRequestInput, DynamicUnloadRequestSchema, EVENT_PRIORITY_VALUES, type Event, type EventBusConfig, EventBusConfigSchema, type EventHandler, EventHandlerSchema, type EventLogEntry, EventLogEntrySchema, type EventMessageQueueConfig, EventMessageQueueConfigSchema, EventMetadataSchema, type EventPersistence, EventPersistenceSchema, type EventPhase, EventPhaseSchema, EventPriority, type EventQueueConfig, EventQueueConfigSchema, type EventReplayConfig, EventReplayConfigSchema, type EventRoute, EventRouteSchema, EventSchema, type EventSourcingConfig, EventSourcingConfigSchema, type EventTypeDefinition, EventTypeDefinitionSchema, type EventWebhookConfig, EventWebhookConfigSchema, type ExecutionContext, ExecutionContextSchema, type ExtensionPoint, ExtensionPointSchema, FeatureFlag, type FeatureFlagInput, FeatureFlagSchema, FeatureStrategy, type GracefulDegradation, GracefulDegradationSchema, type HealthStatus, HealthStatusSchema, type HookRegisteredEvent, HookRegisteredEventSchema, type HookTriggeredEvent, HookTriggeredEventSchema, type HotReloadConfig, HotReloadConfigSchema, type KernelContext, KernelContextSchema, KernelEventBaseSchema, type KernelReadyEvent, KernelReadyEventSchema, type KernelSecurityPolicy, KernelSecurityPolicySchema, type KernelSecurityScanResult, KernelSecurityScanResultSchema, type KernelSecurityVulnerability, KernelSecurityVulnerabilitySchema, type KernelShutdownEvent, KernelShutdownEventSchema, type MultiVersionSupport, MultiVersionSupportSchema, type OclifPluginConfig, OclifPluginConfigSchema, type OpsDomainModule, OpsDomainModuleSchema, type OpsFilePath, OpsFilePathSchema, type OpsPluginStructure, OpsPluginStructureSchema, type PackageDependency, type PackageDependencyConflict, PackageDependencyConflictSchema, type PackageDependencyResolutionResult, PackageDependencyResolutionResultSchema, PackageDependencySchema, type Permission, type PermissionAction, PermissionActionSchema, PermissionSchema, type PermissionScope, PermissionScopeSchema, type PermissionSet, PermissionSetSchema, type PluginCaching, PluginCachingSchema, type PluginCapability, type PluginCapabilityManifest, PluginCapabilityManifestSchema, PluginCapabilitySchema, type PluginCodeSplitting, PluginCodeSplittingSchema, type PluginCompatibilityMatrix, PluginCompatibilityMatrixSchema, type PluginDependency, type PluginDependencyResolution, type PluginDependencyResolutionResult, PluginDependencyResolutionResultSchema, PluginDependencyResolutionSchema, PluginDependencySchema, type PluginDiscoveryConfig, PluginDiscoveryConfigSchema, type PluginDiscoverySource, PluginDiscoverySourceSchema, type PluginDynamicImport, PluginDynamicImportSchema, type PluginErrorEvent, PluginErrorEventSchema, PluginEventBaseSchema, type PluginHealthCheck, PluginHealthCheckSchema, type PluginHealthReport, PluginHealthReportSchema, type PluginHealthStatus, PluginHealthStatusSchema, type PluginHotReload, PluginHotReloadSchema, type PluginInitialization, PluginInitializationSchema, type PluginInstallConfig, type PluginInstallConfigInput, PluginInstallConfigSchema, type PluginInterface, PluginInterfaceSchema, PluginLifecycleEventType, type PluginLifecyclePhaseEvent, PluginLifecyclePhaseEventSchema, type PluginLoadingConfig, PluginLoadingConfigSchema, type PluginLoadingEvent, PluginLoadingEventSchema, type PluginLoadingState, PluginLoadingStateSchema, type PluginLoadingStrategy, PluginLoadingStrategySchema, type PluginMetadata, PluginMetadataSchema, type PluginPerformanceMonitoring, PluginPerformanceMonitoringSchema, type PluginPreloadConfig, PluginPreloadConfigSchema, type PluginProvenance, PluginProvenanceSchema, type PluginQualityMetrics, type PluginQualityMetricsInput, PluginQualityMetricsSchema, type PluginRegisteredEvent, PluginRegisteredEventSchema, type PluginRegistryEntry, type PluginRegistryEntryInput, PluginRegistryEntrySchema, type PluginSandboxing, PluginSandboxingSchema, type PluginSearchFilters, type PluginSearchFiltersInput, PluginSearchFiltersSchema, type PluginSecurityManifest, PluginSecurityManifestSchema, PluginSecurityProtocol, type PluginSource, PluginSourceSchema, type PluginStartupResult, PluginStartupResultSchema, type PluginStateSnapshot, PluginStateSnapshotSchema, type PluginStatistics, type PluginStatisticsInput, PluginStatisticsSchema, type PluginTrustLevel, PluginTrustLevelSchema, type PluginTrustScore, PluginTrustScoreSchema, type PluginUpdateStrategy, PluginUpdateStrategySchema, type PluginVendor, type PluginVendorInput, PluginVendorSchema, type PluginVersionMetadata, PluginVersionMetadataSchema, type PreviewModeConfig, PreviewModeConfigSchema, type ProtocolFeature, ProtocolFeatureSchema, type ProtocolReference, ProtocolReferenceSchema, type ProtocolVersion, ProtocolVersionSchema, type RealTimeNotificationConfig, RealTimeNotificationConfigSchema, type ResourceType, ResourceTypeSchema, type RuntimeConfig, RuntimeConfigSchema, RuntimeMode, type SBOM, type SBOMEntry, SBOMEntrySchema, SBOMSchema, type SandboxConfig, SandboxConfigSchema, type ScopeConfig, ScopeConfigSchema, type ScopeInfo, ScopeInfoSchema, type SecurityPolicy, SecurityPolicySchema, type SecurityScanResult, SecurityScanResultSchema, type SecurityVulnerability, SecurityVulnerabilitySchema, type SemanticVersion, SemanticVersionSchema, type ServiceFactoryRegistration, ServiceFactoryRegistrationSchema, type ServiceMetadata, ServiceMetadataSchema, type ServiceRegisteredEvent, ServiceRegisteredEventSchema, type ServiceRegistryConfig, type ServiceRegistryConfigInput, ServiceRegistryConfigSchema, ServiceScopeType, type ServiceUnregisteredEvent, ServiceUnregisteredEventSchema, type StartupOptions, type StartupOptionsInput, StartupOptionsSchema, type StartupOrchestrationResult, StartupOrchestrationResultSchema, type TenantRuntimeContext, TenantRuntimeContextSchema, type ValidationError, ValidationErrorSchema, type ValidationResult, ValidationResultSchema, type ValidationWarning, ValidationWarningSchema, type VersionConstraint, VersionConstraintSchema, VulnerabilitySeverity };
+export { type ActivationEvent, ActivationEventSchema, type AdvancedPluginLifecycleConfig, AdvancedPluginLifecycleConfigSchema, type BreakingChange, BreakingChangeSchema, type CLICommandContribution, CLICommandContributionSchema, type CapabilityConformanceLevel, CapabilityConformanceLevelSchema, type ClusterCapabilityConfig, type ClusterCapabilityConfigInput, ClusterCapabilityConfigSchema, type ClusterDriver, ClusterDriverSchema, type ClusterTenantIsolation, ClusterTenantIsolationSchema, type CompatibilityLevel, CompatibilityLevelSchema, type CompatibilityMatrixEntry, CompatibilityMatrixEntrySchema, type DeadLetterQueueEntry, DeadLetterQueueEntrySchema, type DependencyConflict, DependencyConflictSchema, type DependencyGraph, type DependencyGraphNode, DependencyGraphNodeSchema, DependencyGraphSchema, type DeprecationNotice, DeprecationNoticeSchema, type DevFixtureConfig, DevFixtureConfigSchema, type DevPluginConfig, type DevPluginConfigInput, DevPluginConfigSchema, DevPluginPreset, type DevServiceOverride, DevServiceOverrideSchema, type DevToolsConfig, DevToolsConfigSchema, type DistributedStateConfig, DistributedStateConfigSchema, type DynamicLoadRequest, type DynamicLoadRequestInput, DynamicLoadRequestSchema, type DynamicLoadingConfig, type DynamicLoadingConfigInput, DynamicLoadingConfigSchema, type DynamicPluginOperation, DynamicPluginOperationSchema, type DynamicPluginResult, DynamicPluginResultSchema, type DynamicUnloadRequest, type DynamicUnloadRequestInput, DynamicUnloadRequestSchema, EVENT_PRIORITY_VALUES, type Event, type EventBusConfig, EventBusConfigSchema, type EventClusterOptions, EventClusterOptionsSchema, type EventDeliverySemantics, EventDeliverySemanticsSchema, type EventHandler, EventHandlerSchema, type EventLogEntry, EventLogEntrySchema, type EventMessageQueueConfig, EventMessageQueueConfigSchema, EventMetadataSchema, type EventPersistence, EventPersistenceSchema, type EventPhase, EventPhaseSchema, EventPriority, type EventQueueConfig, EventQueueConfigSchema, type EventReplayConfig, EventReplayConfigSchema, type EventRoute, EventRouteSchema, EventSchema, type EventScope, EventScopeSchema, type EventSourcingConfig, EventSourcingConfigSchema, type EventTypeDefinition, EventTypeDefinitionSchema, type EventWebhookConfig, EventWebhookConfigSchema, type ExecutionContext, ExecutionContextSchema, type ExtensionPoint, ExtensionPointSchema, FeatureFlag, type FeatureFlagInput, FeatureFlagSchema, FeatureStrategy, type GracefulDegradation, GracefulDegradationSchema, type HealthStatus, HealthStatusSchema, type HookRegisteredEvent, HookRegisteredEventSchema, type HookTriggeredEvent, HookTriggeredEventSchema, type HotReloadConfig, HotReloadConfigSchema, type KernelContext, KernelContextSchema, KernelEventBaseSchema, type KernelReadyEvent, KernelReadyEventSchema, type KernelSecurityPolicy, KernelSecurityPolicySchema, type KernelSecurityScanResult, KernelSecurityScanResultSchema, type KernelSecurityVulnerability, KernelSecurityVulnerabilitySchema, type KernelShutdownEvent, KernelShutdownEventSchema, type MetadataChangeOperation, MetadataChangeOperationSchema, type MetadataChangedEventPayload, MetadataChangedEventPayloadSchema, type MultiVersionSupport, MultiVersionSupportSchema, type OclifPluginConfig, OclifPluginConfigSchema, type OpsDomainModule, OpsDomainModuleSchema, type OpsFilePath, OpsFilePathSchema, type OpsPluginStructure, OpsPluginStructureSchema, type PackageDependency, type PackageDependencyConflict, PackageDependencyConflictSchema, type PackageDependencyResolutionResult, PackageDependencyResolutionResultSchema, PackageDependencySchema, type Permission, type PermissionAction, PermissionActionSchema, PermissionSchema, type PermissionScope, PermissionScopeSchema, type PermissionSet, PermissionSetSchema, type PluginCaching, PluginCachingSchema, type PluginCapability, type PluginCapabilityManifest, PluginCapabilityManifestSchema, PluginCapabilitySchema, type PluginCodeSplitting, PluginCodeSplittingSchema, type PluginCompatibilityMatrix, PluginCompatibilityMatrixSchema, type PluginDependency, type PluginDependencyResolution, type PluginDependencyResolutionResult, PluginDependencyResolutionResultSchema, PluginDependencyResolutionSchema, PluginDependencySchema, type PluginDiscoveryConfig, PluginDiscoveryConfigSchema, type PluginDiscoverySource, PluginDiscoverySourceSchema, type PluginDynamicImport, PluginDynamicImportSchema, type PluginErrorEvent, PluginErrorEventSchema, PluginEventBaseSchema, type PluginHealthCheck, PluginHealthCheckSchema, type PluginHealthReport, PluginHealthReportSchema, type PluginHealthStatus, PluginHealthStatusSchema, type PluginHotReload, PluginHotReloadSchema, type PluginInitialization, PluginInitializationSchema, type PluginInstallConfig, type PluginInstallConfigInput, PluginInstallConfigSchema, type PluginInterface, PluginInterfaceSchema, PluginLifecycleEventType, type PluginLifecyclePhaseEvent, PluginLifecyclePhaseEventSchema, type PluginLoadingConfig, PluginLoadingConfigSchema, type PluginLoadingEvent, PluginLoadingEventSchema, type PluginLoadingState, PluginLoadingStateSchema, type PluginLoadingStrategy, PluginLoadingStrategySchema, type PluginMetadata, PluginMetadataSchema, type PluginPerformanceMonitoring, PluginPerformanceMonitoringSchema, type PluginPreloadConfig, PluginPreloadConfigSchema, type PluginProvenance, PluginProvenanceSchema, type PluginQualityMetrics, type PluginQualityMetricsInput, PluginQualityMetricsSchema, type PluginRegisteredEvent, PluginRegisteredEventSchema, type PluginRegistryEntry, type PluginRegistryEntryInput, PluginRegistryEntrySchema, type PluginSandboxing, PluginSandboxingSchema, type PluginSearchFilters, type PluginSearchFiltersInput, PluginSearchFiltersSchema, type PluginSecurityManifest, PluginSecurityManifestSchema, PluginSecurityProtocol, type PluginSource, PluginSourceSchema, type PluginStartupResult, PluginStartupResultSchema, type PluginStateSnapshot, PluginStateSnapshotSchema, type PluginStatistics, type PluginStatisticsInput, PluginStatisticsSchema, type PluginTrustLevel, PluginTrustLevelSchema, type PluginTrustScore, PluginTrustScoreSchema, type PluginUpdateStrategy, PluginUpdateStrategySchema, type PluginVendor, type PluginVendorInput, PluginVendorSchema, type PluginVersionMetadata, PluginVersionMetadataSchema, type PreviewModeConfig, PreviewModeConfigSchema, type ProtocolFeature, ProtocolFeatureSchema, type ProtocolReference, ProtocolReferenceSchema, type ProtocolVersion, ProtocolVersionSchema, type RealTimeNotificationConfig, RealTimeNotificationConfigSchema, type ResourceType, ResourceTypeSchema, type RuntimeConfig, RuntimeConfigSchema, RuntimeMode, type SBOM, type SBOMEntry, SBOMEntrySchema, SBOMSchema, type SandboxConfig, SandboxConfigSchema, type ScopeConfig, ScopeConfigSchema, type ScopeInfo, ScopeInfoSchema, type SecurityPolicy, SecurityPolicySchema, type SecurityScanResult, SecurityScanResultSchema, type SecurityVulnerability, SecurityVulnerabilitySchema, type SemanticVersion, SemanticVersionSchema, type ServiceClusterAnnotations, ServiceClusterAnnotationsSchema, type ServiceClusterScope, ServiceClusterScopeSchema, type ServiceFactoryRegistration, ServiceFactoryRegistrationSchema, type ServiceLeaderStrategy, ServiceLeaderStrategySchema, type ServiceMetadata, ServiceMetadataSchema, type ServiceRegisteredEvent, ServiceRegisteredEventSchema, type ServiceRegistryConfig, type ServiceRegistryConfigInput, ServiceRegistryConfigSchema, ServiceScopeType, type ServiceUnregisteredEvent, ServiceUnregisteredEventSchema, type StartupOptions, type StartupOptionsInput, StartupOptionsSchema, type StartupOrchestrationResult, StartupOrchestrationResultSchema, type TenantRuntimeContext, TenantRuntimeContextSchema, type ValidationError, ValidationErrorSchema, type ValidationResult, ValidationResultSchema, type ValidationWarning, ValidationWarningSchema, type VersionConstraint, VersionConstraintSchema, VulnerabilitySeverity };