@obversa/runtime 0.1.0

package/dist/chunk-NIBHM5I5.js

@@ -0,0 +1,34 @@
+import { runChild, RunChildError } from '@obversa/core';
+
+// src/core/process.ts
+var DEFAULT_PROCESS_TIMEOUT_MS = 10 * 60 * 1e3;
+var DEFAULT_PROCESS_GRACE_MS = 5 * 1e3;
+var DEFAULT_PROCESS_OUTPUT_BYTES = 16 * 1024 * 1024;
+async function runRuntimeProcess(options) {
+  try {
+    return await runChild({
+      ...options,
+      timeoutMs: options.timeoutMs ?? DEFAULT_PROCESS_TIMEOUT_MS,
+      killGraceMs: options.killGraceMs ?? DEFAULT_PROCESS_GRACE_MS,
+      maxOutputBytes: options.maxOutputBytes ?? DEFAULT_PROCESS_OUTPUT_BYTES
+    });
+  } catch (error) {
+    if (error instanceof RunChildError && error.code === "SPAWN_FAILED") {
+      return Object.freeze({
+        exitCode: null,
+        stdout: error.stdout,
+        stderr: error.stderr,
+        timedOut: false,
+        aborted: false
+      });
+    }
+    throw error;
+  }
+}
+function processText(output) {
+  return new TextDecoder().decode(output);
+}
+
+export { processText, runRuntimeProcess };
+//# sourceMappingURL=chunk-NIBHM5I5.js.map
+//# sourceMappingURL=chunk-NIBHM5I5.js.map

package/dist/chunk-NIBHM5I5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/process.ts"],"names":[],"mappings":";;;AAOO,IAAM,0BAAA,GAA6B,KAAK,EAAA,GAAK,GAAA;AAC7C,IAAM,2BAA2B,CAAA,GAAI,GAAA;AACrC,IAAM,4BAAA,GAA+B,KAAK,IAAA,GAAQ,IAAA;AAWzD,eAAsB,kBACpB,OAAA,EACyB;AACzB,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,QAAA,CAAS;AAAA,MACpB,GAAG,OAAA;AAAA,MACH,SAAA,EAAW,QAAQ,SAAA,IAAa,0BAAA;AAAA,MAChC,WAAA,EAAa,QAAQ,WAAA,IAAe,wBAAA;AAAA,MACpC,cAAA,EAAgB,QAAQ,cAAA,IAAkB;AAAA,KAC3C,CAAA;AAAA,EACH,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,KAAA,YAAiB,aAAA,IAAiB,KAAA,CAAM,IAAA,KAAS,cAAA,EAAgB;AACnE,MAAA,OAAO,OAAO,MAAA,CAAO;AAAA,QACnB,QAAA,EAAU,IAAA;AAAA,QACV,QAAQ,KAAA,CAAM,MAAA;AAAA,QACd,QAAQ,KAAA,CAAM,MAAA;AAAA,QACd,QAAA,EAAU,KAAA;AAAA,QACV,OAAA,EAAS;AAAA,OACV,CAAA;AAAA,IACH;AACA,IAAA,MAAM,KAAA;AAAA,EACR;AACF;AAEO,SAAS,YAAY,MAAA,EAA4B;AACtD,EAAA,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,MAAM,CAAA;AACxC","file":"chunk-NIBHM5I5.js","sourcesContent":["import {\n  RunChildError,\n  runChild,\n  type RunChildOptions,\n  type RunChildResult,\n} from '@obversa/core';\n\nexport const DEFAULT_PROCESS_TIMEOUT_MS = 10 * 60 * 1_000;\nexport const DEFAULT_PROCESS_GRACE_MS = 5 * 1_000;\nexport const DEFAULT_PROCESS_OUTPUT_BYTES = 16 * 1_024 * 1_024;\n\nexport type RuntimeProcessOptions = Omit<\n  RunChildOptions,\n  'timeoutMs' | 'killGraceMs' | 'maxOutputBytes' | 'hooks'\n> & {\n  readonly timeoutMs?: number;\n  readonly killGraceMs?: number;\n  readonly maxOutputBytes?: number;\n};\n\nexport async function runRuntimeProcess(\n  options: RuntimeProcessOptions,\n): Promise<RunChildResult> {\n  try {\n    return await runChild({\n      ...options,\n      timeoutMs: options.timeoutMs ?? DEFAULT_PROCESS_TIMEOUT_MS,\n      killGraceMs: options.killGraceMs ?? DEFAULT_PROCESS_GRACE_MS,\n      maxOutputBytes: options.maxOutputBytes ?? DEFAULT_PROCESS_OUTPUT_BYTES,\n    });\n  } catch (error) {\n    if (error instanceof RunChildError && error.code === 'SPAWN_FAILED') {\n      return Object.freeze({\n        exitCode: null,\n        stdout: error.stdout,\n        stderr: error.stderr,\n        timedOut: false,\n        aborted: false,\n      });\n    }\n    throw error;\n  }\n}\n\nexport function processText(output: Uint8Array): string {\n  return new TextDecoder().decode(output);\n}\n"]}

package/dist/chunk-RZLMX3IA.js

@@ -0,0 +1,368 @@
+import { validateResolvedPlan } from './chunk-3L6YNPN6.js';
+import { canonicalJson, digestJson, GraphValidationError } from './chunk-5GLEABOU.js';
+import { validateStorageId, validateNewArtifact, StorageError, validateRunDefinition, validateNewDomainEvent, validateRunStartRecord, validateRunStorageRecord, validateArtifactReference, validateDomainEventEnvelope, findKnownSecretInEvents } from '@obversa/api';
+export { StorageError, findKnownSecretInEvents, validateArtifactReference, validateArtifactScope, validateDomainEventBatch, validateDomainEventEnvelope, validateDomainEventId, validateEventStreamRef, validateNewArtifact, validateNewDomainEvent, validateRunDefinition, validateRunStartRecord, validateRunStoragePolicy, validateRunStorageRecord, validateStorageId, validateStreamRevision } from '@obversa/api';
+import { createHash } from 'crypto';
+import { isDeepStrictEqual } from 'util';
+import { runDefinitionSupport } from '@obversa/api/run-definition-support';
+
+var fail = runDefinitionSupport.fail;
+var { json, record, text, digest, validateCompiledDefinition } = runDefinitionSupport;
+function validateResolvedPlanSnapshot(value) {
+  const plan = json(value.plan, "/resolvedPlan/plan");
+  if (plan === null || typeof plan !== "object" || Array.isArray(plan)) {
+    fail("/resolvedPlan/plan", "Resolved plan must be an object.");
+  }
+  const stable = canonicalJson(plan);
+  if (value.canonicalJson !== stable) {
+    fail("/resolvedPlan/canonicalJson", "Resolved plan bytes do not match its value.");
+  }
+  const planDigest = digestJson(plan);
+  if (value.digest !== planDigest) {
+    fail("/resolvedPlan/digest", "Resolved plan digest does not match its value.");
+  }
+  const validatedPlan = storedResolvedPlan(plan, "/resolvedPlan/plan");
+  return Object.freeze({
+    plan: validatedPlan,
+    canonicalJson: stable,
+    digest: planDigest
+  });
+}
+function storedResolvedPlan(value, path) {
+  try {
+    return validateResolvedPlan(value);
+  } catch (error) {
+    if (!(error instanceof GraphValidationError)) throw error;
+    const first = error.issues[0];
+    fail(`${path}${first?.path ?? ""}`, first?.message ?? error.message);
+  }
+}
+function validateResolvedPlanGraph(plan, definition) {
+  const graph = record(plan.graph, "/resolvedPlan/graph", "Resolved plan graph");
+  if (digest(graph.definitionDigest, "/resolvedPlan/graph/definitionDigest") !== definition.digest) {
+    fail("/resolvedPlan/graph/definitionDigest", "Resolved plan belongs to another graph definition.");
+  }
+  if (graph.id !== definition.value.id) {
+    fail("/resolvedPlan/graph/id", "Resolved plan belongs to another graph id.");
+  }
+  if (graph.definitionVersion !== definition.value.definitionVersion) {
+    fail("/resolvedPlan/graph/definitionVersion", "Resolved plan belongs to another graph definition version.");
+  }
+}
+function validateBinding(binding, storedRecord) {
+  const bindingRecord = validateRunStorageRecord(binding.record);
+  if (storedRecord !== void 0 && !isDeepStrictEqual(bindingRecord, storedRecord)) {
+    fail("/storage", "Stored and live storage records must match.");
+  }
+  const knownSecrets = json(binding.knownSecrets, "/binding/knownSecrets");
+  if (!Array.isArray(knownSecrets) || knownSecrets.some((secret) => typeof secret !== "string" || secret.length === 0)) {
+    fail("/binding/knownSecrets", "Known secrets must be non-empty strings.");
+  }
+  const secrets = knownSecrets;
+  const serializedRecord = canonicalJson(bindingRecord);
+  if (secrets.some((secret) => serializedRecord.includes(secret) || jsonValueContainsText(bindingRecord, secret))) {
+    throw new StorageError(
+      "KNOWN_SECRET",
+      "Storage binding record contains a configured known secret."
+    );
+  }
+  return {
+    record: bindingRecord,
+    knownSecrets: secrets
+  };
+}
+function jsonValueContainsText(value, textValue) {
+  if (typeof value === "string") return value.includes(textValue);
+  if (value === null || typeof value !== "object") return false;
+  if (Array.isArray(value)) {
+    return value.some((item) => jsonValueContainsText(item, textValue));
+  }
+  return Object.entries(value).some(([key, item]) => key.includes(textValue) || jsonValueContainsText(item, textValue));
+}
+function expectedArtifactReference(artifact) {
+  return validateArtifactReference({
+    schemaVersion: 1,
+    digest: `sha256:${createHash("sha256").update(artifact.bytes).digest("hex")}`,
+    byteLength: artifact.bytes.byteLength,
+    mediaType: artifact.mediaType,
+    purpose: artifact.purpose
+  });
+}
+function preflightArtifacts(artifacts, policy, knownSecrets) {
+  const uniqueBytes = /* @__PURE__ */ new Map();
+  for (const artifact of artifacts) {
+    if (artifact.bytes.byteLength > policy.maxArtifactBytes) {
+      throw new StorageError(
+        "STORAGE_LIMIT_EXCEEDED",
+        "Run-start artifact exceeds maxArtifactBytes.",
+        {
+          purpose: artifact.purpose,
+          byteLength: artifact.bytes.byteLength,
+          maximumBytes: policy.maxArtifactBytes
+        }
+      );
+    }
+    const bytes = Buffer.from(artifact.bytes);
+    if (knownSecrets.some((secret) => bytes.includes(Buffer.from(secret, "utf8")))) {
+      throw new StorageError(
+        "KNOWN_SECRET",
+        "Exact run-start artifact contains a configured known secret.",
+        { purpose: artifact.purpose }
+      );
+    }
+    const reference = expectedArtifactReference(artifact);
+    uniqueBytes.set(reference.digest, reference.byteLength);
+  }
+  const total = [...uniqueBytes.values()].reduce((sum, size) => sum + size, 0);
+  if (total > policy.maxTotalArtifactBytesPerRun) {
+    throw new StorageError(
+      "STORAGE_LIMIT_EXCEEDED",
+      "Run-start artifacts exceed maxTotalArtifactBytesPerRun.",
+      { byteLength: total, maximumBytes: policy.maxTotalArtifactBytesPerRun }
+    );
+  }
+}
+function preflightRunStartEvent(event, policy, knownSecrets) {
+  const payloadByteLength = Buffer.byteLength(canonicalJson(event.payload), "utf8");
+  if (payloadByteLength > policy.maxEventPayloadBytes) {
+    throw new StorageError(
+      "STORAGE_LIMIT_EXCEEDED",
+      "Run-start payload exceeds maxEventPayloadBytes.",
+      { byteLength: payloadByteLength, maximumBytes: policy.maxEventPayloadBytes }
+    );
+  }
+  const envelope = validateDomainEventEnvelope({
+    ...event,
+    envelopeVersion: 1,
+    streamId: event.correlationId,
+    revision: 1
+  });
+  const serializedEvent = `${JSON.stringify(envelope)}
+`;
+  const appendByteLength = Buffer.byteLength(serializedEvent, "utf8");
+  if (appendByteLength > policy.maxAppendBatchBytes) {
+    throw new StorageError(
+      "STORAGE_LIMIT_EXCEEDED",
+      "Run-start append exceeds maxAppendBatchBytes.",
+      { byteLength: appendByteLength, maximumBytes: policy.maxAppendBatchBytes }
+    );
+  }
+  const secret = findKnownSecretInEvents(
+    knownSecrets,
+    serializedEvent,
+    [event]
+  );
+  if (secret !== void 0) {
+    throw new StorageError(
+      "KNOWN_SECRET",
+      "Run-start event contains a configured known secret.",
+      { eventId: event.eventId }
+    );
+  }
+}
+function artifactError(error, record2, referencePath) {
+  return new StorageError(error.code, error.message, {
+    ...error.details,
+    streamId: record2.streamId,
+    revision: record2.revision,
+    eventId: record2.eventId,
+    referencePath
+  });
+}
+function readPlanBytes(bytes, referencePath) {
+  let textValue;
+  try {
+    textValue = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+  } catch {
+    fail(referencePath, "Resolved plan bytes must be valid UTF-8.");
+  }
+  return textValue;
+}
+function parseStoredPlan(bytes, digestValue) {
+  const textValue = readPlanBytes(bytes, "/resolvedPlan");
+  let parsed;
+  try {
+    parsed = JSON.parse(textValue);
+  } catch {
+    fail("/resolvedPlan", "Resolved plan bytes must contain JSON.");
+  }
+  const plan = json(parsed, "/resolvedPlan");
+  if (plan === null || typeof plan !== "object" || Array.isArray(plan)) {
+    fail("/resolvedPlan", "Resolved plan must be an object.");
+  }
+  if (canonicalJson(plan) !== textValue) {
+    fail("/resolvedPlan", "Resolved plan bytes must use stable JSON encoding.");
+  }
+  if (digestJson(plan) !== digestValue) {
+    fail("/resolvedPlan", "Resolved plan digest does not match its bytes.");
+  }
+  const validatedPlan = storedResolvedPlan(plan, "/resolvedPlan");
+  return Object.freeze({
+    plan: validatedPlan,
+    canonicalJson: textValue,
+    digest: digestValue
+  });
+}
+async function persistRunDefinition(binding, input) {
+  const { record: storage, knownSecrets } = validateBinding(binding);
+  const graphDefinition = validateCompiledDefinition(input.graphDefinition);
+  const resolvedPlan = validateResolvedPlanSnapshot(input.resolvedPlan);
+  validateResolvedPlanGraph(resolvedPlan.plan, graphDefinition);
+  const resolvedInputs = record(
+    input.resolvedInputs,
+    "/resolvedInputs",
+    "Resolved inputs"
+  );
+  const workspaceBinding = input.workspaceBinding === null ? null : record(input.workspaceBinding, "/workspaceBinding", "Workspace binding");
+  const hostBinding = input.hostBinding === null ? null : Object.freeze({
+    bytes: Uint8Array.from(input.hostBinding.bytes),
+    mediaType: text(input.hostBinding.mediaType, "/hostBinding/mediaType", "Host-binding media type")
+  });
+  const runId = validateStorageId(input.runId, "/runId");
+  const scope = { namespace: storage.namespace, runId };
+  const resolvedPlanArtifact = validateNewArtifact({
+    bytes: new TextEncoder().encode(resolvedPlan.canonicalJson),
+    mediaType: "application/json",
+    purpose: "resolved-plan",
+    contentMode: "state"
+  });
+  const hostBindingArtifact = hostBinding === null ? null : validateNewArtifact({
+    bytes: hostBinding.bytes,
+    mediaType: hostBinding.mediaType,
+    purpose: "host-binding",
+    contentMode: "exact"
+  });
+  preflightArtifacts(
+    hostBindingArtifact === null ? [resolvedPlanArtifact] : [resolvedPlanArtifact, hostBindingArtifact],
+    storage.policy,
+    knownSecrets
+  );
+  const artifacts = hostBindingArtifact === null ? [resolvedPlanArtifact] : [resolvedPlanArtifact, hostBindingArtifact];
+  const expectedPlanReference = expectedArtifactReference(
+    resolvedPlanArtifact
+  );
+  const expectedHostReference = hostBindingArtifact === null ? null : expectedArtifactReference(hostBindingArtifact);
+  const expectedReferences = expectedHostReference === null ? [expectedPlanReference] : [expectedPlanReference, expectedHostReference];
+  const predictedReferences = await binding.artifactStore.preflightWrite(
+    scope,
+    artifacts
+  );
+  if (!isDeepStrictEqual(predictedReferences, expectedReferences)) {
+    throw new StorageError(
+      "ARTIFACT_INTEGRITY",
+      "Artifact store predicted the wrong run-start references.",
+      { expected: expectedReferences, actual: predictedReferences }
+    );
+  }
+  const definition = validateRunDefinition({
+    schemaVersion: 1,
+    runId,
+    graphDefinition,
+    resolvedPlan: expectedPlanReference,
+    resolvedInputs,
+    storage,
+    workspaceBinding,
+    hostBinding: expectedHostReference
+  });
+  const event = validateNewDomainEvent({
+    eventId: input.eventId,
+    type: "graph:run-started",
+    version: 1,
+    timestamp: input.timestamp,
+    correlationId: runId,
+    causationId: null,
+    payload: { definition }
+  });
+  preflightRunStartEvent(event, storage.policy, knownSecrets);
+  await binding.eventStore.preflightAppend(
+    { namespace: storage.namespace, streamId: runId },
+    0,
+    [event]
+  );
+  const resolvedPlanReference = await binding.artifactStore.write(scope, {
+    ...resolvedPlanArtifact
+  });
+  if (!isDeepStrictEqual(resolvedPlanReference, expectedPlanReference)) {
+    throw new StorageError(
+      "ARTIFACT_INTEGRITY",
+      "Resolved plan store returned the wrong reference.",
+      { expected: expectedPlanReference, actual: resolvedPlanReference }
+    );
+  }
+  const hostBindingReference = hostBindingArtifact === null ? null : await binding.artifactStore.write(scope, {
+    ...hostBindingArtifact
+  });
+  if (!isDeepStrictEqual(hostBindingReference, expectedHostReference)) {
+    throw new StorageError(
+      "ARTIFACT_INTEGRITY",
+      "Host-binding store returned the wrong reference.",
+      { expected: expectedHostReference, actual: hostBindingReference }
+    );
+  }
+  const revision = await binding.eventStore.append(
+    { namespace: storage.namespace, streamId: runId },
+    0,
+    [event]
+  );
+  return validateRunStartRecord({
+    envelopeVersion: 1,
+    streamId: runId,
+    revision,
+    ...event
+  });
+}
+async function loadRunDefinition(binding, runId) {
+  const live = validateBinding(binding);
+  const streamId = validateStorageId(runId, "/runId");
+  let first;
+  for await (const event of binding.eventStore.read({
+    namespace: live.record.namespace,
+    streamId
+  })) {
+    first = event;
+    break;
+  }
+  if (!first) {
+    fail("/runId", `Run "${streamId}" has no stored definition.`);
+  }
+  const record2 = validateRunStartRecord(first);
+  validateBinding(binding, record2.payload.definition.storage);
+  const scope = { namespace: live.record.namespace, runId: streamId };
+  let planBytes;
+  try {
+    planBytes = await binding.artifactStore.read(
+      scope,
+      record2.payload.definition.resolvedPlan
+    );
+  } catch (error) {
+    if (!(error instanceof StorageError)) throw error;
+    throw artifactError(error, record2, "/payload/definition/resolvedPlan");
+  }
+  const resolvedPlan = parseStoredPlan(
+    planBytes,
+    record2.payload.definition.resolvedPlan.digest
+  );
+  validateResolvedPlanGraph(
+    resolvedPlan.plan,
+    record2.payload.definition.graphDefinition
+  );
+  let hostBindingBytes = null;
+  const hostBinding = record2.payload.definition.hostBinding;
+  if (hostBinding !== null) {
+    try {
+      hostBindingBytes = await binding.artifactStore.read(scope, hostBinding);
+    } catch (error) {
+      if (!(error instanceof StorageError)) throw error;
+      throw artifactError(error, record2, "/payload/definition/hostBinding");
+    }
+  }
+  return Object.freeze({
+    record: record2,
+    resolvedPlan,
+    hostBindingBytes
+  });
+}
+
+export { loadRunDefinition, persistRunDefinition };
+//# sourceMappingURL=chunk-RZLMX3IA.js.map
+//# sourceMappingURL=chunk-RZLMX3IA.js.map

package/dist/chunk-RZLMX3IA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/runtime/run-definition.ts"],"names":["record","validateStorageId"],"mappings":";;;;;;;;AA6DA,IAAM,OAAiD,oBAAA,CAAqB,IAAA;AAC5E,IAAM,EAAE,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,MAAA,EAAQ,4BAA2B,GAAI,oBAAA;AAsBnE,SAAS,6BACP,KAAA,EACsB;AACtB,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,IAAA,EAAM,oBAAoB,CAAA;AAClD,EAAA,IAAI,IAAA,KAAS,QAAQ,OAAO,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACpE,IAAA,IAAA,CAAK,sBAAsB,kCAAkC,CAAA;AAAA,EAC/D;AACA,EAAA,MAAM,MAAA,GAAS,cAAc,IAAI,CAAA;AACjC,EAAA,IAAI,KAAA,CAAM,kBAAkB,MAAA,EAAQ;AAClC,IAAA,IAAA,CAAK,+BAA+B,6CAA6C,CAAA;AAAA,EACnF;AACA,EAAA,MAAM,UAAA,GAAa,WAAW,IAAI,CAAA;AAClC,EAAA,IAAI,KAAA,CAAM,WAAW,UAAA,EAAY;AAC/B,IAAA,IAAA,CAAK,wBAAwB,gDAAgD,CAAA;AAAA,EAC/E;AACA,EAAA,MAAM,aAAA,GAAgB,kBAAA,CAAmB,IAAA,EAAM,oBAAoB,CAAA;AACnE,EAAA,OAAO,OAAO,MAAA,CAAO;AAAA,IACnB,IAAA,EAAM,aAAA;AAAA,IACN,aAAA,EAAe,MAAA;AAAA,IACf,MAAA,EAAQ;AAAA,GACT,CAAA;AACH;AAEA,SAAS,kBAAA,CAAmB,OAAgB,IAAA,EAA4B;AACtE,EAAA,IAAI;AACF,IAAA,OAAO,qBAAqB,KAAK,CAAA;AAAA,EACnC,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,EAAE,KAAA,YAAiB,oBAAA,CAAA,EAAuB,MAAM,KAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,MAAA,CAAO,CAAC,CAAA;AAC5B,IAAA,IAAA,CAAK,CAAA,EAAG,IAAI,CAAA,EAAG,KAAA,EAAO,IAAA,IAAQ,EAAE,CAAA,CAAA,EAAI,KAAA,EAAO,OAAA,IAAW,KAAA,CAAM,OAAO,CAAA;AAAA,EACrE;AACF;AAEA,SAAS,yBAAA,CACP,MACA,UAAA,EACM;AACN,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,KAAA,EAAO,uBAAuB,qBAAqB,CAAA;AAC7E,EAAA,IACE,OAAO,KAAA,CAAM,gBAAA,EAAkB,sCAAsC,CAAA,KACjE,WAAW,MAAA,EACf;AACA,IAAA,IAAA,CAAK,wCAAwC,oDAAoD,CAAA;AAAA,EACnG;AACA,EAAA,IAAI,KAAA,CAAM,EAAA,KAAO,UAAA,CAAW,KAAA,CAAM,EAAA,EAAI;AACpC,IAAA,IAAA,CAAK,0BAA0B,4CAA4C,CAAA;AAAA,EAC7E;AACA,EAAA,IAAI,KAAA,CAAM,iBAAA,KAAsB,UAAA,CAAW,KAAA,CAAM,iBAAA,EAAmB;AAClE,IAAA,IAAA,CAAK,yCAAyC,4DAA4D,CAAA;AAAA,EAC5G;AACF;AAEA,SAAS,eAAA,CACP,SACA,YAAA,EAIA;AACA,EAAA,MAAM,aAAA,GAAgB,wBAAA,CAAyB,OAAA,CAAQ,MAAM,CAAA;AAC7D,EAAA,IACE,iBAAiB,MAAA,IACd,CAAC,iBAAA,CAAkB,aAAA,EAAe,YAAY,CAAA,EACjD;AACA,IAAA,IAAA,CAAK,YAAY,6CAA6C,CAAA;AAAA,EAChE;AACA,EAAA,MAAM,YAAA,GAAe,IAAA,CAAK,OAAA,CAAQ,YAAA,EAAc,uBAAuB,CAAA;AACvE,EAAA,IACE,CAAC,KAAA,CAAM,OAAA,CAAQ,YAAY,KACxB,YAAA,CAAa,IAAA,CAAK,CAAC,MAAA,KACpB,OAAO,MAAA,KAAW,QAAA,IAAY,MAAA,CAAO,MAAA,KAAW,CACjD,CAAA,EACD;AACA,IAAA,IAAA,CAAK,yBAAyB,0CAA0C,CAAA;AAAA,EAC1E;AACA,EAAA,MAAM,OAAA,GAAU,YAAA;AAChB,EAAA,MAAM,gBAAA,GAAmB,cAAc,aAAa,CAAA;AACpD,EAAA,IAAI,OAAA,CAAQ,IAAA,CAAK,CAAC,MAAA,KAChB,gBAAA,CAAiB,QAAA,CAAS,MAAM,CAAA,IAC7B,qBAAA,CAAsB,aAAA,EAAe,MAAM,CAC/C,CAAA,EAAG;AACF,IAAA,MAAM,IAAI,YAAA;AAAA,MACR,cAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,aAAA;AAAA,IACR,YAAA,EAAc;AAAA,GAChB;AACF;AAEA,SAAS,qBAAA,CAAsB,OAAkB,SAAA,EAA4B;AAC3E,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,EAAU,OAAO,KAAA,CAAM,SAAS,SAAS,CAAA;AAC9D,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,UAAU,OAAO,KAAA;AACxD,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,IAAA,OAAO,MAAM,IAAA,CAAK,CAAC,SAAS,qBAAA,CAAsB,IAAA,EAAM,SAAS,CAAC,CAAA;AAAA,EACpE;AACA,EAAA,OAAO,OAAO,OAAA,CAAQ,KAAK,CAAA,CAAE,IAAA,CAAK,CAAC,CAAC,GAAA,EAAK,IAAI,CAAA,KAC3C,IAAI,QAAA,CAAS,SAAS,KAAK,qBAAA,CAAsB,IAAA,EAAM,SAAS,CACjE,CAAA;AACH;AAEA,SAAS,0BACP,QAAA,EACmB;AACnB,EAAA,OAAO,yBAAA,CAA0B;AAAA,IAC/B,aAAA,EAAe,CAAA;AAAA,IACf,MAAA,EAAQ,CAAA,OAAA,EAAU,UAAA,CAAW,QAAQ,CAAA,CAAE,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,CAAE,MAAA,CAAO,KAAK,CAAC,CAAA,CAAA;AAAA,IAC3E,UAAA,EAAY,SAAS,KAAA,CAAM,UAAA;AAAA,IAC3B,WAAW,QAAA,CAAS,SAAA;AAAA,IACpB,SAAS,QAAA,CAAS;AAAA,GACnB,CAAA;AACH;AAEA,SAAS,kBAAA,CACP,SAAA,EACA,MAAA,EACA,YAAA,EACM;AACN,EAAA,MAAM,WAAA,uBAAkB,GAAA,EAAoB;AAC5C,EAAA,KAAA,MAAW,YAAY,SAAA,EAAW;AAChC,IAAA,IAAI,QAAA,CAAS,KAAA,CAAM,UAAA,GAAa,MAAA,CAAO,gBAAA,EAAkB;AACvD,MAAA,MAAM,IAAI,YAAA;AAAA,QACR,wBAAA;AAAA,QACA,8CAAA;AAAA,QACA;AAAA,UACE,SAAS,QAAA,CAAS,OAAA;AAAA,UAClB,UAAA,EAAY,SAAS,KAAA,CAAM,UAAA;AAAA,UAC3B,cAAc,MAAA,CAAO;AAAA;AACvB,OACF;AAAA,IACF;AACA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,QAAA,CAAS,KAAK,CAAA;AACxC,IAAA,IAAI,YAAA,CAAa,IAAA,CAAK,CAAC,MAAA,KAAW,KAAA,CAAM,QAAA,CAAS,MAAA,CAAO,IAAA,CAAK,MAAA,EAAQ,MAAM,CAAC,CAAC,CAAA,EAAG;AAC9E,MAAA,MAAM,IAAI,YAAA;AAAA,QACR,cAAA;AAAA,QACA,8DAAA;AAAA,QACA,EAAE,OAAA,EAAS,QAAA,CAAS,OAAA;AAAQ,OAC9B;AAAA,IACF;AACA,IAAA,MAAM,SAAA,GAAY,0BAA0B,QAAQ,CAAA;AACpD,IAAA,WAAA,CAAY,GAAA,CAAI,SAAA,CAAU,MAAA,EAAQ,SAAA,CAAU,UAAU,CAAA;AAAA,EACxD;AACA,EAAA,MAAM,KAAA,GAAQ,CAAC,GAAG,WAAA,CAAY,MAAA,EAAQ,CAAA,CAAE,MAAA,CAAO,CAAC,GAAA,EAAK,IAAA,KAAS,GAAA,GAAM,MAAM,CAAC,CAAA;AAC3E,EAAA,IAAI,KAAA,GAAQ,OAAO,2BAAA,EAA6B;AAC9C,IAAA,MAAM,IAAI,YAAA;AAAA,MACR,wBAAA;AAAA,MACA,yDAAA;AAAA,MACA,EAAE,UAAA,EAAY,KAAA,EAAO,YAAA,EAAc,OAAO,2BAAA;AAA4B,KACxE;AAAA,EACF;AACF;AAEA,SAAS,sBAAA,CACP,KAAA,EACA,MAAA,EACA,YAAA,EACM;AACN,EAAA,MAAM,oBAAoB,MAAA,CAAO,UAAA,CAAW,cAAc,KAAA,CAAM,OAAO,GAAG,MAAM,CAAA;AAChF,EAAA,IAAI,iBAAA,GAAoB,OAAO,oBAAA,EAAsB;AACnD,IAAA,MAAM,IAAI,YAAA;AAAA,MACR,wBAAA;AAAA,MACA,iDAAA;AAAA,MACA,EAAE,UAAA,EAAY,iBAAA,EAAmB,YAAA,EAAc,OAAO,oBAAA;AAAqB,KAC7E;AAAA,EACF;AACA,EAAA,MAAM,WAAW,2BAAA,CAA4B;AAAA,IAC3C,GAAG,KAAA;AAAA,IACH,eAAA,EAAiB,CAAA;AAAA,IACjB,UAAU,KAAA,CAAM,aAAA;AAAA,IAChB,QAAA,EAAU;AAAA,GACX,CAAA;AACD,EAAA,MAAM,eAAA,GAAkB,CAAA,EAAG,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAC;AAAA,CAAA;AACnD,EAAA,MAAM,gBAAA,GAAmB,MAAA,CAAO,UAAA,CAAW,eAAA,EAAiB,MAAM,CAAA;AAClE,EAAA,IAAI,gBAAA,GAAmB,OAAO,mBAAA,EAAqB;AACjD,IAAA,MAAM,IAAI,YAAA;AAAA,MACR,wBAAA;AAAA,MACA,+CAAA;AAAA,MACA,EAAE,UAAA,EAAY,gBAAA,EAAkB,YAAA,EAAc,OAAO,mBAAA;AAAoB,KAC3E;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,uBAAA;AAAA,IACb,YAAA;AAAA,IACA,eAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AACA,EAAA,IAAI,WAAW,MAAA,EAAW;AACxB,IAAA,MAAM,IAAI,YAAA;AAAA,MACR,cAAA;AAAA,MACA,qDAAA;AAAA,MACA,EAAE,OAAA,EAAS,KAAA,CAAM,OAAA;AAAQ,KAC3B;AAAA,EACF;AACF;AAEA,SAAS,aAAA,CACP,KAAA,EACAA,OAAAA,EACA,aAAA,EACc;AACd,EAAA,OAAO,IAAI,YAAA,CAAa,KAAA,CAAM,IAAA,EAAM,MAAM,OAAA,EAAS;AAAA,IACjD,GAAG,KAAA,CAAM,OAAA;AAAA,IACT,UAAUA,OAAAA,CAAO,QAAA;AAAA,IACjB,UAAUA,OAAAA,CAAO,QAAA;AAAA,IACjB,SAASA,OAAAA,CAAO,OAAA;AAAA,IAChB;AAAA,GACD,CAAA;AACH;AAEA,SAAS,aAAA,CAAc,OAAmB,aAAA,EAA+B;AACvE,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI;AACF,IAAA,SAAA,GAAY,IAAI,YAAY,OAAA,EAAS,EAAE,OAAO,IAAA,EAAM,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA;AAAA,EACpE,CAAA,CAAA,MAAQ;AACN,IAAA,IAAA,CAAK,eAAe,0CAA0C,CAAA;AAAA,EAChE;AACA,EAAA,OAAO,SAAA;AACT;AAEA,SAAS,eAAA,CACP,OACA,WAAA,EACsB;AACtB,EAAA,MAAM,SAAA,GAAY,aAAA,CAAc,KAAA,EAAO,eAAe,CAAA;AACtD,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAA,CAAK,MAAM,SAAS,CAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AACN,IAAA,IAAA,CAAK,iBAAiB,wCAAwC,CAAA;AAAA,EAChE;AACA,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,MAAA,EAAQ,eAAe,CAAA;AACzC,EAAA,IAAI,IAAA,KAAS,QAAQ,OAAO,IAAA,KAAS,YAAY,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACpE,IAAA,IAAA,CAAK,iBAAiB,kCAAkC,CAAA;AAAA,EAC1D;AACA,EAAA,IAAI,aAAA,CAAc,IAAI,CAAA,KAAM,SAAA,EAAW;AACrC,IAAA,IAAA,CAAK,iBAAiB,oDAAoD,CAAA;AAAA,EAC5E;AACA,EAAA,IAAI,UAAA,CAAW,IAAI,CAAA,KAAM,WAAA,EAAa;AACpC,IAAA,IAAA,CAAK,iBAAiB,gDAAgD,CAAA;AAAA,EACxE;AACA,EAAA,MAAM,aAAA,GAAgB,kBAAA,CAAmB,IAAA,EAAM,eAAe,CAAA;AAC9D,EAAA,OAAO,OAAO,MAAA,CAAO;AAAA,IACnB,IAAA,EAAM,aAAA;AAAA,IACN,aAAA,EAAe,SAAA;AAAA,IACf,MAAA,EAAQ;AAAA,GACT,CAAA;AACH;AAEA,eAAsB,oBAAA,CACpB,SACA,KAAA,EACyB;AACzB,EAAA,MAAM,EAAE,MAAA,EAAQ,OAAA,EAAS,YAAA,EAAa,GAAI,gBAAgB,OAAO,CAAA;AACjE,EAAA,MAAM,eAAA,GAAkB,0BAAA,CAA2B,KAAA,CAAM,eAAe,CAAA;AACxE,EAAA,MAAM,YAAA,GAAe,4BAAA,CAA6B,KAAA,CAAM,YAAY,CAAA;AACpE,EAAA,yBAAA,CAA0B,YAAA,CAAa,MAAM,eAAe,CAAA;AAC5D,EAAA,MAAM,cAAA,GAAiB,MAAA;AAAA,IACrB,KAAA,CAAM,cAAA;AAAA,IACN,iBAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,MAAM,gBAAA,GAAmB,MAAM,gBAAA,KAAqB,IAAA,GAChD,OACA,MAAA,CAAO,KAAA,CAAM,gBAAA,EAAkB,mBAAA,EAAqB,mBAAmB,CAAA;AAC3E,EAAA,MAAM,cAAc,KAAA,CAAM,WAAA,KAAgB,IAAA,GACtC,IAAA,GACA,OAAO,MAAA,CAAO;AAAA,IACd,KAAA,EAAO,UAAA,CAAW,IAAA,CAAK,KAAA,CAAM,YAAY,KAAK,CAAA;AAAA,IAC9C,WAAW,IAAA,CAAK,KAAA,CAAM,WAAA,CAAY,SAAA,EAAW,0BAA0B,yBAAyB;AAAA,GACjG,CAAA;AACH,EAAA,MAAM,KAAA,GAAQC,iBAAAA,CAAkB,KAAA,CAAM,KAAA,EAAO,QAAQ,CAAA;AACrD,EAAA,MAAM,KAAA,GAAQ,EAAE,SAAA,EAAW,OAAA,CAAQ,WAAW,KAAA,EAAM;AACpD,EAAA,MAAM,uBAAuB,mBAAA,CAAoB;AAAA,IAC/C,OAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,aAAa,aAAa,CAAA;AAAA,IAC1D,SAAA,EAAW,kBAAA;AAAA,IACX,OAAA,EAAS,eAAA;AAAA,IACT,WAAA,EAAa;AAAA,GACd,CAAA;AACD,EAAA,MAAM,mBAAA,GAAsB,WAAA,KAAgB,IAAA,GACxC,IAAA,GACA,mBAAA,CAAoB;AAAA,IACpB,OAAO,WAAA,CAAY,KAAA;AAAA,IACnB,WAAW,WAAA,CAAY,SAAA;AAAA,IACvB,OAAA,EAAS,cAAA;AAAA,IACT,WAAA,EAAa;AAAA,GACd,CAAA;AACH,EAAA,kBAAA;AAAA,IACE,wBAAwB,IAAA,GACpB,CAAC,oBAAoB,CAAA,GACrB,CAAC,sBAAsB,mBAAmB,CAAA;AAAA,IAC9C,OAAA,CAAQ,MAAA;AAAA,IACR;AAAA,GACF;AACA,EAAA,MAAM,SAAA,GAA2B,wBAAwB,IAAA,GACrD,CAAC,oBAAoB,CAAA,GACrB,CAAC,sBAAsB,mBAAmB,CAAA;AAC9C,EAAA,MAAM,qBAAA,GAAwB,yBAAA;AAAA,IAC5B;AAAA,GACF;AACA,EAAA,MAAM,qBAAA,GAAwB,mBAAA,KAAwB,IAAA,GAClD,IAAA,GACA,0BAA0B,mBAAmB,CAAA;AACjD,EAAA,MAAM,kBAAA,GAAqB,0BAA0B,IAAA,GACjD,CAAC,qBAAqB,CAAA,GACtB,CAAC,uBAAuB,qBAAqB,CAAA;AACjD,EAAA,MAAM,mBAAA,GAAsB,MAAM,OAAA,CAAQ,aAAA,CAAc,cAAA;AAAA,IACtD,KAAA;AAAA,IACA;AAAA,GACF;AACA,EAAA,IAAI,CAAC,iBAAA,CAAkB,mBAAA,EAAqB,kBAAkB,CAAA,EAAG;AAC/D,IAAA,MAAM,IAAI,YAAA;AAAA,MACR,oBAAA;AAAA,MACA,0DAAA;AAAA,MACA,EAAE,QAAA,EAAU,kBAAA,EAAoB,MAAA,EAAQ,mBAAA;AAAoB,KAC9D;AAAA,EACF;AACA,EAAA,MAAM,aAAa,qBAAA,CAAsB;AAAA,IACvC,aAAA,EAAe,CAAA;AAAA,IACf,KAAA;AAAA,IACA,eAAA;AAAA,IACA,YAAA,EAAc,qBAAA;AAAA,IACd,cAAA;AAAA,IACA,OAAA;AAAA,IACA,gBAAA;AAAA,IACA,WAAA,EAAa;AAAA,GACd,CAAA;AACD,EAAA,MAAM,QAAQ,sBAAA,CAAuB;AAAA,IACnC,SAAS,KAAA,CAAM,OAAA;AAAA,IACf,IAAA,EAAM,mBAAA;AAAA,IACN,OAAA,EAAS,CAAA;AAAA,IACT,WAAW,KAAA,CAAM,SAAA;AAAA,IACjB,aAAA,EAAe,KAAA;AAAA,IACf,WAAA,EAAa,IAAA;AAAA,IACb,OAAA,EAAS,EAAE,UAAA;AAAW,GACvB,CAAA;AACD,EAAA,sBAAA,CAAuB,KAAA,EAAO,OAAA,CAAQ,MAAA,EAAQ,YAAY,CAAA;AAC1D,EAAA,MAAM,QAAQ,UAAA,CAAW,eAAA;AAAA,IACvB,EAAE,SAAA,EAAW,OAAA,CAAQ,SAAA,EAAW,UAAU,KAAA,EAAM;AAAA,IAChD,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AAEA,EAAA,MAAM,qBAAA,GAAwB,MAAM,OAAA,CAAQ,aAAA,CAAc,MAAM,KAAA,EAAO;AAAA,IACrE,GAAG;AAAA,GACJ,CAAA;AACD,EAAA,IAAI,CAAC,iBAAA,CAAkB,qBAAA,EAAuB,qBAAqB,CAAA,EAAG;AACpE,IAAA,MAAM,IAAI,YAAA;AAAA,MACR,oBAAA;AAAA,MACA,mDAAA;AAAA,MACA,EAAE,QAAA,EAAU,qBAAA,EAAuB,MAAA,EAAQ,qBAAA;AAAsB,KACnE;AAAA,EACF;AAEA,EAAA,MAAM,oBAAA,GAAuB,wBAAwB,IAAA,GACjD,IAAA,GACA,MAAM,OAAA,CAAQ,aAAA,CAAc,MAAM,KAAA,EAAO;AAAA,IACzC,GAAG;AAAA,GACJ,CAAA;AACH,EAAA,IAAI,CAAC,iBAAA,CAAkB,oBAAA,EAAsB,qBAAqB,CAAA,EAAG;AACnE,IAAA,MAAM,IAAI,YAAA;AAAA,MACR,oBAAA;AAAA,MACA,kDAAA;AAAA,MACA,EAAE,QAAA,EAAU,qBAAA,EAAuB,MAAA,EAAQ,oBAAA;AAAqB,KAClE;AAAA,EACF;AACA,EAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,UAAA,CAAW,MAAA;AAAA,IACxC,EAAE,SAAA,EAAW,OAAA,CAAQ,SAAA,EAAW,UAAU,KAAA,EAAM;AAAA,IAChD,CAAA;AAAA,IACA,CAAC,KAAK;AAAA,GACR;AACA,EAAA,OAAO,sBAAA,CAAuB;AAAA,IAC5B,eAAA,EAAiB,CAAA;AAAA,IACjB,QAAA,EAAU,KAAA;AAAA,IACV,QAAA;AAAA,IACA,GAAG;AAAA,GACJ,CAAA;AACH;AAEA,eAAsB,iBAAA,CACpB,SACA,KAAA,EAC8B;AAC9B,EAAA,MAAM,IAAA,GAAO,gBAAgB,OAAO,CAAA;AACpC,EAAA,MAAM,QAAA,GAAWA,iBAAAA,CAAkB,KAAA,EAAO,QAAQ,CAAA;AAClD,EAAA,IAAI,KAAA;AACJ,EAAA,WAAA,MAAiB,KAAA,IAAS,OAAA,CAAQ,UAAA,CAAW,IAAA,CAAK;AAAA,IAChD,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA;AAAA,IACvB;AAAA,GACD,CAAA,EAAG;AACF,IAAA,KAAA,GAAQ,KAAA;AACR,IAAA;AAAA,EACF;AACA,EAAA,IAAI,CAAC,KAAA,EAAO;AACV,IAAA,IAAA,CAAK,QAAA,EAAU,CAAA,KAAA,EAAQ,QAAQ,CAAA,2BAAA,CAA6B,CAAA;AAAA,EAC9D;AACA,EAAA,MAAMD,OAAAA,GAAS,uBAAuB,KAAK,CAAA;AAC3C,EAAA,eAAA,CAAgB,OAAA,EAASA,OAAAA,CAAO,OAAA,CAAQ,UAAA,CAAW,OAAO,CAAA;AAC1D,EAAA,MAAM,QAAQ,EAAE,SAAA,EAAW,KAAK,MAAA,CAAO,SAAA,EAAW,OAAO,QAAA,EAAS;AAElE,EAAA,IAAI,SAAA;AACJ,EAAA,IAAI;AACF,IAAA,SAAA,GAAY,MAAM,QAAQ,aAAA,CAAc,IAAA;AAAA,MACtC,KAAA;AAAA,MACAA,OAAAA,CAAO,QAAQ,UAAA,CAAW;AAAA,KAC5B;AAAA,EACF,SAAS,KAAA,EAAO;AACd,IAAA,IAAI,EAAE,KAAA,YAAiB,YAAA,CAAA,EAAe,MAAM,KAAA;AAC5C,IAAA,MAAM,aAAA,CAAc,KAAA,EAAOA,OAAAA,EAAQ,kCAAkC,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,YAAA,GAAe,eAAA;AAAA,IACnB,SAAA;AAAA,IACAA,OAAAA,CAAO,OAAA,CAAQ,UAAA,CAAW,YAAA,CAAa;AAAA,GACzC;AACA,EAAA,yBAAA;AAAA,IACE,YAAA,CAAa,IAAA;AAAA,IACbA,OAAAA,CAAO,QAAQ,UAAA,CAAW;AAAA,GAC5B;AAEA,EAAA,IAAI,gBAAA,GAAsC,IAAA;AAC1C,EAAA,MAAM,WAAA,GAAcA,OAAAA,CAAO,OAAA,CAAQ,UAAA,CAAW,WAAA;AAC9C,EAAA,IAAI,gBAAgB,IAAA,EAAM;AACxB,IAAA,IAAI;AACF,MAAA,gBAAA,GAAmB,MAAM,OAAA,CAAQ,aAAA,CAAc,IAAA,CAAK,OAAO,WAAW,CAAA;AAAA,IACxE,SAAS,KAAA,EAAO;AACd,MAAA,IAAI,EAAE,KAAA,YAAiB,YAAA,CAAA,EAAe,MAAM,KAAA;AAC5C,MAAA,MAAM,aAAA,CAAc,KAAA,EAAOA,OAAAA,EAAQ,iCAAiC,CAAA;AAAA,IACtE;AAAA,EACF;AAEA,EAAA,OAAO,OAAO,MAAA,CAAO;AAAA,IACnB,MAAA,EAAAA,OAAAA;AAAA,IACA,YAAA;AAAA,IACA;AAAA,GACD,CAAA;AACH","file":"chunk-RZLMX3IA.js","sourcesContent":["import { createHash } from 'node:crypto';\nimport { isDeepStrictEqual } from 'node:util';\n\nimport {\n  validateRunDefinition,\n  validateRunStartRecord,\n  validateRunStorageRecord,\n  type CompiledGraphDefinition,\n  type RunStorageBinding,\n  type RunStorageRecord,\n  type RunStoragePolicy,\n  type RunStartRecord,\n  type NewRunStartedEvent,\n} from '@obversa/api';\nimport { runDefinitionSupport } from '@obversa/api/run-definition-support';\nimport {\n  canonicalJson,\n  digestJson,\n  GraphValidationError,\n  type JsonObject,\n  type JsonValue,\n  type RunBrief,\n  type Sha256Digest,\n} from '../graph/value.js';\nimport {\n  validateResolvedPlan,\n  type ResolvedPlan,\n  type ResolvedPlanSnapshot,\n} from '../graph/plan.js';\nimport {\n  validateArtifactReference,\n  validateNewArtifact,\n  type ArtifactBatch,\n  type NewArtifact,\n  type ArtifactReference,\n} from '../artifacts/store.js';\nimport {\n  validateDomainEventEnvelope,\n  validateNewDomainEvent,\n  type DomainEventEnvelope,\n} from '../events/envelope.js';\nimport { findKnownSecretInEvents } from '../events/store.js';\nimport { StorageError } from '../storage/error.js';\nimport { validateStorageId } from '../storage/id.js';\n\nexport {\n  validateRunDefinition,\n  validateRunStartRecord,\n  validateRunStoragePolicy,\n  validateRunStorageRecord,\n  type StorageProviderRecord,\n  type SensitiveContentPolicy,\n  type RunStoragePolicy,\n  type RunStorageRecord,\n  type RunDefinition,\n  type RunStartedPayload,\n  type NewRunStartedEvent,\n  type RunStartRecord,\n  type RunStorageBinding,\n} from '@obversa/api';\n\nconst fail: (path: string, message: string) => never = runDefinitionSupport.fail;\nconst { json, record, text, digest, validateCompiledDefinition } = runDefinitionSupport;\n\nexport interface PersistRunDefinitionInput {\n  readonly runId: string;\n  readonly eventId: string;\n  readonly timestamp: string;\n  readonly graphDefinition: CompiledGraphDefinition;\n  readonly resolvedPlan: ResolvedPlanSnapshot;\n  readonly resolvedInputs: RunBrief;\n  readonly workspaceBinding: JsonObject | null;\n  readonly hostBinding: {\n    readonly bytes: Uint8Array;\n    readonly mediaType: string;\n  } | null;\n}\n\nexport interface LoadedRunDefinition {\n  readonly record: RunStartRecord;\n  readonly resolvedPlan: ResolvedPlanSnapshot;\n  readonly hostBindingBytes: Uint8Array | null;\n}\n\nfunction validateResolvedPlanSnapshot(\n  value: ResolvedPlanSnapshot,\n): ResolvedPlanSnapshot {\n  const plan = json(value.plan, '/resolvedPlan/plan');\n  if (plan === null || typeof plan !== 'object' || Array.isArray(plan)) {\n    fail('/resolvedPlan/plan', 'Resolved plan must be an object.');\n  }\n  const stable = canonicalJson(plan);\n  if (value.canonicalJson !== stable) {\n    fail('/resolvedPlan/canonicalJson', 'Resolved plan bytes do not match its value.');\n  }\n  const planDigest = digestJson(plan);\n  if (value.digest !== planDigest) {\n    fail('/resolvedPlan/digest', 'Resolved plan digest does not match its value.');\n  }\n  const validatedPlan = storedResolvedPlan(plan, '/resolvedPlan/plan');\n  return Object.freeze({\n    plan: validatedPlan,\n    canonicalJson: stable,\n    digest: planDigest,\n  });\n}\n\nfunction storedResolvedPlan(value: unknown, path: string): ResolvedPlan {\n  try {\n    return validateResolvedPlan(value);\n  } catch (error) {\n    if (!(error instanceof GraphValidationError)) throw error;\n    const first = error.issues[0];\n    fail(`${path}${first?.path ?? ''}`, first?.message ?? error.message);\n  }\n}\n\nfunction validateResolvedPlanGraph(\n  plan: ResolvedPlan,\n  definition: CompiledGraphDefinition,\n): void {\n  const graph = record(plan.graph, '/resolvedPlan/graph', 'Resolved plan graph');\n  if (\n    digest(graph.definitionDigest, '/resolvedPlan/graph/definitionDigest')\n    !== definition.digest\n  ) {\n    fail('/resolvedPlan/graph/definitionDigest', 'Resolved plan belongs to another graph definition.');\n  }\n  if (graph.id !== definition.value.id) {\n    fail('/resolvedPlan/graph/id', 'Resolved plan belongs to another graph id.');\n  }\n  if (graph.definitionVersion !== definition.value.definitionVersion) {\n    fail('/resolvedPlan/graph/definitionVersion', 'Resolved plan belongs to another graph definition version.');\n  }\n}\n\nfunction validateBinding(\n  binding: RunStorageBinding,\n  storedRecord?: RunStorageRecord,\n): {\n  readonly record: RunStorageRecord;\n  readonly knownSecrets: readonly string[];\n} {\n  const bindingRecord = validateRunStorageRecord(binding.record);\n  if (\n    storedRecord !== undefined\n    && !isDeepStrictEqual(bindingRecord, storedRecord)\n  ) {\n    fail('/storage', 'Stored and live storage records must match.');\n  }\n  const knownSecrets = json(binding.knownSecrets, '/binding/knownSecrets');\n  if (\n    !Array.isArray(knownSecrets)\n    || knownSecrets.some((secret) => (\n      typeof secret !== 'string' || secret.length === 0\n    ))\n  ) {\n    fail('/binding/knownSecrets', 'Known secrets must be non-empty strings.');\n  }\n  const secrets = knownSecrets as readonly string[];\n  const serializedRecord = canonicalJson(bindingRecord);\n  if (secrets.some((secret) => (\n    serializedRecord.includes(secret)\n    || jsonValueContainsText(bindingRecord, secret)\n  ))) {\n    throw new StorageError(\n      'KNOWN_SECRET',\n      'Storage binding record contains a configured known secret.',\n    );\n  }\n  return {\n    record: bindingRecord,\n    knownSecrets: secrets,\n  };\n}\n\nfunction jsonValueContainsText(value: JsonValue, textValue: string): boolean {\n  if (typeof value === 'string') return value.includes(textValue);\n  if (value === null || typeof value !== 'object') return false;\n  if (Array.isArray(value)) {\n    return value.some((item) => jsonValueContainsText(item, textValue));\n  }\n  return Object.entries(value).some(([key, item]) => (\n    key.includes(textValue) || jsonValueContainsText(item, textValue)\n  ));\n}\n\nfunction expectedArtifactReference(\n  artifact: NewArtifact,\n): ArtifactReference {\n  return validateArtifactReference({\n    schemaVersion: 1,\n    digest: `sha256:${createHash('sha256').update(artifact.bytes).digest('hex')}`,\n    byteLength: artifact.bytes.byteLength,\n    mediaType: artifact.mediaType,\n    purpose: artifact.purpose,\n  });\n}\n\nfunction preflightArtifacts(\n  artifacts: readonly NewArtifact[],\n  policy: RunStoragePolicy,\n  knownSecrets: readonly string[],\n): void {\n  const uniqueBytes = new Map<string, number>();\n  for (const artifact of artifacts) {\n    if (artifact.bytes.byteLength > policy.maxArtifactBytes) {\n      throw new StorageError(\n        'STORAGE_LIMIT_EXCEEDED',\n        'Run-start artifact exceeds maxArtifactBytes.',\n        {\n          purpose: artifact.purpose,\n          byteLength: artifact.bytes.byteLength,\n          maximumBytes: policy.maxArtifactBytes,\n        },\n      );\n    }\n    const bytes = Buffer.from(artifact.bytes);\n    if (knownSecrets.some((secret) => bytes.includes(Buffer.from(secret, 'utf8')))) {\n      throw new StorageError(\n        'KNOWN_SECRET',\n        'Exact run-start artifact contains a configured known secret.',\n        { purpose: artifact.purpose },\n      );\n    }\n    const reference = expectedArtifactReference(artifact);\n    uniqueBytes.set(reference.digest, reference.byteLength);\n  }\n  const total = [...uniqueBytes.values()].reduce((sum, size) => sum + size, 0);\n  if (total > policy.maxTotalArtifactBytesPerRun) {\n    throw new StorageError(\n      'STORAGE_LIMIT_EXCEEDED',\n      'Run-start artifacts exceed maxTotalArtifactBytesPerRun.',\n      { byteLength: total, maximumBytes: policy.maxTotalArtifactBytesPerRun },\n    );\n  }\n}\n\nfunction preflightRunStartEvent(\n  event: NewRunStartedEvent,\n  policy: RunStoragePolicy,\n  knownSecrets: readonly string[],\n): void {\n  const payloadByteLength = Buffer.byteLength(canonicalJson(event.payload), 'utf8');\n  if (payloadByteLength > policy.maxEventPayloadBytes) {\n    throw new StorageError(\n      'STORAGE_LIMIT_EXCEEDED',\n      'Run-start payload exceeds maxEventPayloadBytes.',\n      { byteLength: payloadByteLength, maximumBytes: policy.maxEventPayloadBytes },\n    );\n  }\n  const envelope = validateDomainEventEnvelope({\n    ...event,\n    envelopeVersion: 1,\n    streamId: event.correlationId,\n    revision: 1,\n  });\n  const serializedEvent = `${JSON.stringify(envelope)}\\n`;\n  const appendByteLength = Buffer.byteLength(serializedEvent, 'utf8');\n  if (appendByteLength > policy.maxAppendBatchBytes) {\n    throw new StorageError(\n      'STORAGE_LIMIT_EXCEEDED',\n      'Run-start append exceeds maxAppendBatchBytes.',\n      { byteLength: appendByteLength, maximumBytes: policy.maxAppendBatchBytes },\n    );\n  }\n  const secret = findKnownSecretInEvents(\n    knownSecrets,\n    serializedEvent,\n    [event],\n  );\n  if (secret !== undefined) {\n    throw new StorageError(\n      'KNOWN_SECRET',\n      'Run-start event contains a configured known secret.',\n      { eventId: event.eventId },\n    );\n  }\n}\n\nfunction artifactError(\n  error: StorageError,\n  record: RunStartRecord,\n  referencePath: string,\n): StorageError {\n  return new StorageError(error.code, error.message, {\n    ...error.details,\n    streamId: record.streamId,\n    revision: record.revision,\n    eventId: record.eventId,\n    referencePath,\n  });\n}\n\nfunction readPlanBytes(bytes: Uint8Array, referencePath: string): string {\n  let textValue: string;\n  try {\n    textValue = new TextDecoder('utf-8', { fatal: true }).decode(bytes);\n  } catch {\n    fail(referencePath, 'Resolved plan bytes must be valid UTF-8.');\n  }\n  return textValue;\n}\n\nfunction parseStoredPlan(\n  bytes: Uint8Array,\n  digestValue: Sha256Digest,\n): ResolvedPlanSnapshot {\n  const textValue = readPlanBytes(bytes, '/resolvedPlan');\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(textValue);\n  } catch {\n    fail('/resolvedPlan', 'Resolved plan bytes must contain JSON.');\n  }\n  const plan = json(parsed, '/resolvedPlan');\n  if (plan === null || typeof plan !== 'object' || Array.isArray(plan)) {\n    fail('/resolvedPlan', 'Resolved plan must be an object.');\n  }\n  if (canonicalJson(plan) !== textValue) {\n    fail('/resolvedPlan', 'Resolved plan bytes must use stable JSON encoding.');\n  }\n  if (digestJson(plan) !== digestValue) {\n    fail('/resolvedPlan', 'Resolved plan digest does not match its bytes.');\n  }\n  const validatedPlan = storedResolvedPlan(plan, '/resolvedPlan');\n  return Object.freeze({\n    plan: validatedPlan,\n    canonicalJson: textValue,\n    digest: digestValue,\n  });\n}\n\nexport async function persistRunDefinition(\n  binding: RunStorageBinding,\n  input: PersistRunDefinitionInput,\n): Promise<RunStartRecord> {\n  const { record: storage, knownSecrets } = validateBinding(binding);\n  const graphDefinition = validateCompiledDefinition(input.graphDefinition);\n  const resolvedPlan = validateResolvedPlanSnapshot(input.resolvedPlan);\n  validateResolvedPlanGraph(resolvedPlan.plan, graphDefinition);\n  const resolvedInputs = record(\n    input.resolvedInputs,\n    '/resolvedInputs',\n    'Resolved inputs',\n  ) as RunBrief;\n  const workspaceBinding = input.workspaceBinding === null\n    ? null\n    : record(input.workspaceBinding, '/workspaceBinding', 'Workspace binding');\n  const hostBinding = input.hostBinding === null\n    ? null\n    : Object.freeze({\n      bytes: Uint8Array.from(input.hostBinding.bytes),\n      mediaType: text(input.hostBinding.mediaType, '/hostBinding/mediaType', 'Host-binding media type'),\n    });\n  const runId = validateStorageId(input.runId, '/runId');\n  const scope = { namespace: storage.namespace, runId };\n  const resolvedPlanArtifact = validateNewArtifact({\n    bytes: new TextEncoder().encode(resolvedPlan.canonicalJson),\n    mediaType: 'application/json',\n    purpose: 'resolved-plan',\n    contentMode: 'state',\n  });\n  const hostBindingArtifact = hostBinding === null\n    ? null\n    : validateNewArtifact({\n      bytes: hostBinding.bytes,\n      mediaType: hostBinding.mediaType,\n      purpose: 'host-binding',\n      contentMode: 'exact',\n    });\n  preflightArtifacts(\n    hostBindingArtifact === null\n      ? [resolvedPlanArtifact]\n      : [resolvedPlanArtifact, hostBindingArtifact],\n    storage.policy,\n    knownSecrets,\n  );\n  const artifacts: ArtifactBatch = hostBindingArtifact === null\n    ? [resolvedPlanArtifact]\n    : [resolvedPlanArtifact, hostBindingArtifact];\n  const expectedPlanReference = expectedArtifactReference(\n    resolvedPlanArtifact,\n  ) as ArtifactReference<'resolved-plan'>;\n  const expectedHostReference = hostBindingArtifact === null\n    ? null\n    : expectedArtifactReference(hostBindingArtifact) as ArtifactReference<'host-binding'>;\n  const expectedReferences = expectedHostReference === null\n    ? [expectedPlanReference]\n    : [expectedPlanReference, expectedHostReference];\n  const predictedReferences = await binding.artifactStore.preflightWrite(\n    scope,\n    artifacts,\n  );\n  if (!isDeepStrictEqual(predictedReferences, expectedReferences)) {\n    throw new StorageError(\n      'ARTIFACT_INTEGRITY',\n      'Artifact store predicted the wrong run-start references.',\n      { expected: expectedReferences, actual: predictedReferences },\n    );\n  }\n  const definition = validateRunDefinition({\n    schemaVersion: 1,\n    runId,\n    graphDefinition,\n    resolvedPlan: expectedPlanReference,\n    resolvedInputs,\n    storage,\n    workspaceBinding,\n    hostBinding: expectedHostReference,\n  });\n  const event = validateNewDomainEvent({\n    eventId: input.eventId,\n    type: 'graph:run-started',\n    version: 1,\n    timestamp: input.timestamp,\n    correlationId: runId,\n    causationId: null,\n    payload: { definition },\n  }) as NewRunStartedEvent;\n  preflightRunStartEvent(event, storage.policy, knownSecrets);\n  await binding.eventStore.preflightAppend(\n    { namespace: storage.namespace, streamId: runId },\n    0,\n    [event],\n  );\n\n  const resolvedPlanReference = await binding.artifactStore.write(scope, {\n    ...resolvedPlanArtifact,\n  });\n  if (!isDeepStrictEqual(resolvedPlanReference, expectedPlanReference)) {\n    throw new StorageError(\n      'ARTIFACT_INTEGRITY',\n      'Resolved plan store returned the wrong reference.',\n      { expected: expectedPlanReference, actual: resolvedPlanReference },\n    );\n  }\n\n  const hostBindingReference = hostBindingArtifact === null\n    ? null\n    : await binding.artifactStore.write(scope, {\n      ...hostBindingArtifact,\n    });\n  if (!isDeepStrictEqual(hostBindingReference, expectedHostReference)) {\n    throw new StorageError(\n      'ARTIFACT_INTEGRITY',\n      'Host-binding store returned the wrong reference.',\n      { expected: expectedHostReference, actual: hostBindingReference },\n    );\n  }\n  const revision = await binding.eventStore.append(\n    { namespace: storage.namespace, streamId: runId },\n    0,\n    [event],\n  );\n  return validateRunStartRecord({\n    envelopeVersion: 1,\n    streamId: runId,\n    revision,\n    ...event,\n  });\n}\n\nexport async function loadRunDefinition(\n  binding: RunStorageBinding,\n  runId: string,\n): Promise<LoadedRunDefinition> {\n  const live = validateBinding(binding);\n  const streamId = validateStorageId(runId, '/runId');\n  let first: DomainEventEnvelope | undefined;\n  for await (const event of binding.eventStore.read({\n    namespace: live.record.namespace,\n    streamId,\n  })) {\n    first = event;\n    break;\n  }\n  if (!first) {\n    fail('/runId', `Run \"${streamId}\" has no stored definition.`);\n  }\n  const record = validateRunStartRecord(first);\n  validateBinding(binding, record.payload.definition.storage);\n  const scope = { namespace: live.record.namespace, runId: streamId };\n\n  let planBytes: Uint8Array;\n  try {\n    planBytes = await binding.artifactStore.read(\n      scope,\n      record.payload.definition.resolvedPlan,\n    );\n  } catch (error) {\n    if (!(error instanceof StorageError)) throw error;\n    throw artifactError(error, record, '/payload/definition/resolvedPlan');\n  }\n  const resolvedPlan = parseStoredPlan(\n    planBytes,\n    record.payload.definition.resolvedPlan.digest,\n  );\n  validateResolvedPlanGraph(\n    resolvedPlan.plan,\n    record.payload.definition.graphDefinition,\n  );\n\n  let hostBindingBytes: Uint8Array | null = null;\n  const hostBinding = record.payload.definition.hostBinding;\n  if (hostBinding !== null) {\n    try {\n      hostBindingBytes = await binding.artifactStore.read(scope, hostBinding);\n    } catch (error) {\n      if (!(error instanceof StorageError)) throw error;\n      throw artifactError(error, record, '/payload/definition/hostBinding');\n    }\n  }\n\n  return Object.freeze({\n    record,\n    resolvedPlan,\n    hostBindingBytes,\n  });\n}\n"]}

package/dist/core/agent-md.d.ts

@@ -0,0 +1,36 @@
+/**
+ * `defineAgentFromMarkdown(path)` — load a Claude Code agent `.md` file into an
+ * `AgentDef`. The markdown body becomes `system`; the frontmatter maps onto the
+ * def's structured fields. The runtime has no yaml dependency, so the frontmatter
+ * parser is hand-rolled and deliberately scoped. The FULL supported grammar:
+ *
+ *   - Frontmatter is an optional leading block delimited by `---` lines (the
+ *     first line of the file opens it; the closing `---` must be unindented,
+ *     so an indented `---` inside a block scalar stays block content). No
+ *     closing `---` ⇒ no frontmatter; the whole file is the body.
+ *   - Scalar: `key: value`. Surrounding single/double quotes are stripped.
+ *   - Block scalar: `key: |` or `key: >`, then deeper-indented lines, each
+ *     trimmed. The block ends at the first non-indented, non-blank line; blank
+ *     lines inside it (followed by more indented content) are kept by `|` as
+ *     paragraph breaks and folded away by `>`. `|` joins the lines with
+ *     newlines; `>` folds them with spaces (YAML's basic folding, nothing
+ *     more).
+ *   - Sequence: `key:` alone, then `- item` lines (quotes stripped per item).
+ *   - `tools` specifically: a scalar value is ALSO split on commas into a list
+ *     (`tools: Read, Grep, Bash` ⇒ `['Read', 'Grep', 'Bash']`).
+ *
+ * Anything else (nested maps, anchors, multi-line flow, comments…) is out of
+ * scope BY DESIGN, not a bug: Claude Code agent files use exactly this shape.
+ * Unknown frontmatter keys are ignored (forward compat with CC's evolving
+ * frontmatter), not errors.
+ */
+import { type AgentDef } from './agent.js';
+/**
+ * Load a Claude Code agent `.md` into an `AgentDef` (validated through
+ * `defineAgent`). The body is the `system`; `name` falls back to the file's
+ * basename; `model: inherit`/`default` map to undefined (inherit the run
+ * default). The result is always a leaf — a markdown-loaded agent has no
+ * sub-agents by construction, and dropping Task/Agent from `tools` is the
+ * same statement. `overrides` spread last, so the caller wins.
+ */
+export declare function defineAgentFromMarkdown(path: string | URL, overrides?: Partial<AgentDef>): AgentDef;

package/dist/core/agent.d.ts

@@ -0,0 +1,86 @@
+/**
+ * AgentDef — a reusable, job-specific agent definition. The persona and methodology
+ * (the prose: `system`, skill `instructions`) live in editable markdown files; the
+ * structure and types live here in TypeScript. The `.ts` is the strongly-typed wrapper
+ * around the `.md` — author the prompt as markdown, get type safety and validation in code.
+ *
+ * Adapted from an application-specific agent profile without duplicating the orchestration
+ * that the runtime already provides: `dag` is the dispatcher, `conditions`/`quorum` are the
+ * gates, and `Outcome` is the result channel. AgentDef captures who the agent is, what it
+ * may touch, and how it works; `agentJob` resolves that contract into an engine request.
+ */
+/** A skill is a METHODOLOGY (how to do the work — TDD, writing-plans), not a worker.
+ *  An agent composes skills; a skill never dispatches an agent. */
+export interface Skill {
+    name: string;
+    /** The methodology instructions — prepended to the agent's system when it applies them. */
+    instructions: string;
+}
+export type AgentTier = 'worker' | 'reviewer' | 'lead' | 'specialist' | 'utility' | (string & {});
+export type AgentSkillRef = string | Skill;
+export interface AgentOutputContract {
+    /** Stable output name, such as `patch`, `review`, or `test-report`. */
+    name: string;
+    description?: string;
+    /** Optional structured schema owned by the loop author. The runtime stores it, it does not interpret it. */
+    schema?: unknown;
+}
+export interface AgentFailureMode {
+    mode: string;
+    recovery: string;
+    detection?: string;
+    severity?: 'block' | 'should-fix' | 'nice-to-have' | (string & {});
+}
+export interface AgentDef {
+    /** Identity (also the default job label). */
+    name: string;
+    /** What and why — for humans, docs, and package discovery. */
+    description?: string;
+    /** The system prompt: who the agent is and how it works. Use `fromFile('x.md')`. */
+    system: string;
+    /** Model id; omitted = inherit the run default. */
+    model?: string;
+    /** Allowed tool names — the permission boundary. */
+    tools?: string[];
+    /**
+     * Mark this agent a leaf: it may not spawn sub-agents / fan out (the engine disallows
+     * the sub-agent tool). Use it to control where a branch of the graph bottoms out — to
+     * stop a thorough agent from quietly expanding into a slow, expensive swarm.
+     */
+    leaf?: boolean;
+    /** Contract tier for humans, describe output, and future discovery. No scheduling authority. */
+    tier?: AgentTier;
+    /** Structured job descriptions (not prose) — for discovery / docs. */
+    capabilities?: string[];
+    /** Structured outputs this agent is expected to produce. */
+    outputs?: AgentOutputContract[];
+    /** Methodologies the agent applies; their instructions are folded into the system. */
+    skills?: Skill[];
+    /** Skills the caller should supply before the turn. Metadata only unless also listed in `skills`. */
+    requiresSkills?: AgentSkillRef[];
+    /** Skills the agent is known to use. Metadata only unless also listed in `skills`. */
+    usesSkills?: AgentSkillRef[];
+    /** Named failure modes + their recovery — first-class contracts, not buried prose. */
+    failureModes?: AgentFailureMode[];
+}
+export interface AgentContractSummary {
+    tier?: string;
+    capabilities?: string[];
+    outputs?: string[];
+    requiresSkills?: string[];
+    usesSkills?: string[];
+    failureModes?: string[];
+}
+/** Read a markdown file as a string — for `system` or skill `instructions`. Pass an
+ *  absolute path, or `new URL('./x.md', import.meta.url)` for a path relative to the file. */
+export declare function fromFile(path: string | URL): string;
+/** Define a skill (a methodology). Identity + validation; strongly typed. */
+export declare function defineSkill(skill: Skill): Skill;
+/** Define an agent. Identity + validation; strongly typed (the wrapper around the md). */
+export declare function defineAgent(def: AgentDef): AgentDef;
+export declare function agentContract(agent: AgentDef | undefined): AgentContractSummary | undefined;
+/**
+ * Resolve an agent's system prompt, folding in its skills' methodologies. This is what
+ * `agentJob` hands the engine as `system`.
+ */
+export declare function resolveSystem(agent: AgentDef): string;

package/dist/core/approval-job.d.ts

@@ -0,0 +1,43 @@
+/**
+ * A person's decision as a job. The step asks one question through the run's
+ * callbacks client and does one of three things: passes when the answer is
+ * yes, sends the work back (or fails) with the person's note when it is no,
+ * and pauses the run with the request pending when nobody has answered yet.
+ * A run started again with the same client, or the stored client over the
+ * same store, finds the answer and carries on.
+ */
+import { type CallbackRequest } from '../callback/gate.js';
+import type { JsonValue } from '../graph/value.js';
+import type { Job, JobContext, Outcome } from './types.js';
+/** Bind only the actual node job; a condition receives an unbound context. */
+export declare function nodeJobContext(ctx: JobContext, job: Job | undefined): JobContext;
+/** A transparent wrapper may delegate only when it is itself the node's job. */
+export declare function delegateNodeJob(ctx: JobContext, owner: Job, job: Job, child: JobContext): Promise<Outcome>;
+/** The answer a person gives: yes or no, and a note when there is one. */
+export interface ApprovalAnswer {
+    readonly approved: boolean;
+    readonly note?: string;
+}
+export interface ApprovalOptions {
+    /** The question, in plain words. */
+    question: string;
+    /**
+     * What the question is about. Default: the outcomes this step depends on
+     * (their summaries), so a change upstream after a kickback is a new
+     * question, and the same question about the same thing is the same request.
+     */
+    input?: JsonValue;
+    /**
+     * The node that owns the fix when the person says no: the note goes back
+     * there as the finding. Without it a refusal fails the step with the note
+     * as its summary.
+     */
+    target?: string;
+    /**
+     * Answer in-process (a test, an example, a script that decides). Without
+     * it the step pauses the run with the request pending on the run's
+     * callbacks client until a router answers it there.
+     */
+    answer?: (request: CallbackRequest) => ApprovalAnswer | Promise<ApprovalAnswer>;
+}
+export declare function approval(label: string, opts: ApprovalOptions): Job;