@plumbus/core 0.7.1 → 0.8.0-beta.0

package/dist/flows/schema.js

@@ -29,6 +29,10 @@ export const flowExecutionsTable = pgTable('flow_executions', {
     completedAt: timestamp('completed_at', { withTimezone: true }),
     leaseOwner: text('lease_owner'),
     leaseExpiresAt: timestamp('lease_expires_at', { withTimezone: true }),
+    /** Pinned compiled definition version. Nullable for live-TS runs. */
+    definitionVersion: text('definition_version'),
+    /** Pinned compiled definition digest. Nullable for live-TS runs. */
+    definitionDigest: text('definition_digest'),
 }, (table) => [
     index('flow_exec_status_idx').on(table.status),
     index('flow_exec_wake_at_idx').on(table.wakeAt),

package/dist/flows/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/flows/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,KAAK,EACL,OAAO,EACP,KAAK,EACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,IAAI,GACL,MAAM,qBAAqB,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CACxC,iBAAiB,EACjB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnD,+DAA+D;IAC/D,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC/B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,oCAAoC;IAC3D,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1D,4DAA4D;IAC5D,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACpD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,2GAA2G;IAC3G,gBAAgB,EAAE,KAAK,CAAC,oBAAoB,CAAC;IAC7C,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACrC,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC;IACxC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9D,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,cAAc,EAAE,SAAS,CAAC,kBAAkB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;CACtE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC9C,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC/C,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IACnD,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAChD,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC;CACpE,CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,EAAE;IAC7D,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACpD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC/B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;IACrB,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC;IAClC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,QAAQ,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IAC/E,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;CAC5B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CACvC,gBAAgB,EAChB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IAC9C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,SAAS,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC3D,SAAS,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACpD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CACtE,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/flows/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,KAAK,EACL,OAAO,EACP,KAAK,EACL,OAAO,EACP,IAAI,EACJ,SAAS,EACT,IAAI,GACL,MAAM,qBAAqB,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CACxC,iBAAiB,EACjB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE;IAChC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACnD,+DAA+D;IAC/D,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC/B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,oCAAoC;IAC3D,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC1D,4DAA4D;IAC5D,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,eAAe,EAAE,IAAI,CAAC,mBAAmB,CAAC;IAC1C,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACpD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC9B,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC;IAC3B,2GAA2G;IAC3G,gBAAgB,EAAE,KAAK,CAAC,oBAAoB,CAAC;IAC7C,aAAa,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACrC,cAAc,EAAE,IAAI,CAAC,kBAAkB,CAAC;IACxC,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IACjF,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9D,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC;IAC/B,cAAc,EAAE,SAAS,CAAC,kBAAkB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACrE,qEAAqE;IACrE,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,CAAC;IAC7C,oEAAoE;IACpE,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,CAAC;CAC5C,EACD,CAAC,KAAK,EAAE,EAAE,CAAC;IACT,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC9C,KAAK,CAAC,uBAAuB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;IAC/C,KAAK,CAAC,yBAAyB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IACnD,KAAK,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC;IAChD,KAAK,CAAC,qBAAqB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC;CACpE,CACF,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,EAAE;IAC7D,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IACpD,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE;IAC/B,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC;IACrB,WAAW,EAAE,KAAK,CAAC,cAAc,CAAC;IAClC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,QAAQ,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,OAAO,EAAE;IAC/E,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC;CAC5B,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,OAAO,CACvC,gBAAgB,EAChB;IACE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE;IAC3C,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE;IAC9C,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE;IAC5B,SAAS,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC3D,SAAS,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACpD,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CACtE,CAAC"}

package/dist/flows/step-executor.d.ts

@@ -1,4 +1,5 @@
 import type { ExecutionContext } from '../types/context.js';
+import type { ApprovalRequestRecord } from '../approvals/types.js';
 import type { FlowStep } from '../types/flow.js';
 import { type StepHistoryEntry, StepStatus } from './state-machine.js';
 export interface StepResult {
@@ -25,6 +26,8 @@ export interface StepExecutorDeps {
     }>;
     /** Evaluate a condition expression against the flow state */
     evaluateCondition: (expression: string, state: unknown) => boolean;
+    /** Approval lookup for approval-outcome steps. */
+    findApprovalForExecution?: (executionId: string) => Promise<ApprovalRequestRecord | undefined>;
 }
 /**
  * Execute a single flow step. Returns a StepResult describing what happened

package/dist/flows/step-executor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"step-executor.d.ts","sourceRoot":"","sources":["../../src/flows/step-executor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,OAAO,KAAK,EAKV,QAAQ,EAGT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,gBAAgB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,yEAAyE;IACzE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,uDAAuD;IACvD,iBAAiB,EAAE,CACjB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,OAAO,KACX,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACpE,6DAA6D;IAC7D,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CACpE;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,UAAU,CAAC,CAoBrB;AA0ID;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,IAAI,EACf,WAAW,EAAE,IAAI,GAChB,gBAAgB,CAQlB"}
+{"version":3,"file":"step-executor.d.ts","sourceRoot":"","sources":["../../src/flows/step-executor.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAG5D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,KAAK,EAMV,QAAQ,EAGT,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,KAAK,gBAAgB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEvE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,UAAU,CAAC;IACnB,yEAAyE;IACzE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,uDAAuD;IACvD,iBAAiB,EAAE,CACjB,cAAc,EAAE,MAAM,EACtB,GAAG,EAAE,gBAAgB,EACrB,KAAK,EAAE,OAAO,KACX,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IACpE,6DAA6D;IAC7D,iBAAiB,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACnE,kDAAkD;IAClD,wBAAwB,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAAC;CAChG;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,gBAAgB,EACrB,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,UAAU,CAAC,CAsBrB;AA8KD;;GAEG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,EAClB,SAAS,EAAE,IAAI,EACf,WAAW,EAAE,IAAI,GAChB,gBAAgB,CAQlB"}

package/dist/flows/step-executor.js

@@ -1,3 +1,4 @@
+import { AIBudgetExceededError } from '../errors/data-errors.js';
 import { FlowStepType } from '../types/enums.js';
 import { FlowConditionError } from './evaluate-condition.js';
 import { StepStatus } from './state-machine.js';
@@ -22,6 +23,8 @@ export async function executeStep(step, ctx, flowInput, state, deps) {
             return executeParallelStep(step);
         case FlowStepType.EventEmit:
             return executeEventEmitStep(step, ctx, flowInput, state);
+        case FlowStepType.ApprovalOutcome:
+            return executeApprovalOutcomeStep(step, ctx, deps);
         default:
             return {
                 status: StepStatus.Failed,
@@ -75,6 +78,12 @@ async function executeCapabilityStep(step, ctx, flowInput, state, deps) {
         };
     }
     catch (err) {
+        if (err instanceof AIBudgetExceededError) {
+            return {
+                status: StepStatus.Failed,
+                error: `budget-exhausted: ${err.message}`,
+            };
+        }
         return {
             status: StepStatus.Failed,
             error: err instanceof Error ? err.message : String(err),
@@ -124,6 +133,30 @@ function executeParallelStep(step) {
         parallelBranches: step.branches,
     });
 }
+async function executeApprovalOutcomeStep(step, ctx, deps) {
+    if (!deps.findApprovalForExecution) {
+        return {
+            status: StepStatus.Failed,
+            error: 'approval-outcome requires ApprovalService',
+        };
+    }
+    const executionId = ctx.flowId;
+    if (!executionId) {
+        return { status: StepStatus.Failed, error: 'approval-outcome requires a flow execution id' };
+    }
+    const request = await deps.findApprovalForExecution(executionId);
+    const outcome = request?.state;
+    const nextStep = outcome === 'approved' || outcome === 'rejected' || outcome === 'changes-requested'
+        ? step.outcomes[outcome]
+        : undefined;
+    if (!nextStep) {
+        return {
+            status: StepStatus.Failed,
+            error: `no approval-outcome route for "${outcome ?? 'missing'}"`,
+        };
+    }
+    return { status: StepStatus.Completed, nextStep };
+}
 async function executeEventEmitStep(step, ctx, flowInput, state) {
     try {
         await ctx.events.emit(step.event, resolveStepPayload(undefined, flowInput, state));

package/dist/flows/step-executor.js.map

@@ -1 +1 @@
-{"version":3,"file":"step-executor.js","sourceRoot":"","sources":["../../src/flows/step-executor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAU7D,OAAO,EAAyB,UAAU,EAAE,MAAM,oBAAoB,CAAC;AA6BvE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAc,EACd,GAAqB,EACrB,SAAkB,EAClB,KAAc,EACd,IAAsB;IAEtB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,YAAY,CAAC,UAAU;YAC1B,OAAO,qBAAqB,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAClE,KAAK,YAAY,CAAC,WAAW;YAC3B,OAAO,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,KAAK,YAAY,CAAC,IAAI;YACpB,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,YAAY,CAAC,KAAK;YACrB,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChC,KAAK,YAAY,CAAC,QAAQ;YACxB,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,YAAY,CAAC,SAAS;YACzB,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3D;YACE,OAAO;gBACL,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAE,sBAAuB,IAAiB,CAAC,IAAI,EAAE;aACvD,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CACzB,SAA8C,EAC9C,SAAkB,EAClB,KAAc;IAEd,MAAM,QAAQ,GAAG,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAG5E,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IAE9F,0EAA0E;IAC1E,MAAM,MAAM,GAA4B,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC;IAErE,IAAI,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC;IAE9B,yFAAyF;IACzF,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpE,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAoB,EACpB,GAAqB,EACrB,SAAkB,EAClB,KAAc,EACd,IAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EACH,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;gBACvD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC9B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAAqB,EACrB,KAAc,EACd,IAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,UAAU,CAAC,SAAS;YAC5B,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;SAC9C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GACX,GAAG,YAAY,kBAAkB;YAC/B,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,GAAG,YAAY,KAAK;gBACpB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAc;IACrC,sEAAsE;IACtE,+CAA+C;IAC/C,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,MAAM,EAAE,UAAU,CAAC,SAAS;QAC5B,SAAS,EAAE,IAAI,CAAC,KAAK;KACtB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAe;IACvC,uDAAuD;IACvD,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,MAAM,EAAE,UAAU,CAAC,SAAS;QAC5B,aAAa,EAAE,IAAI,CAAC,QAAQ;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB;IAC7C,yDAAyD;IACzD,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,MAAM,EAAE,UAAU,CAAC,SAAS;QAC5B,gBAAgB,EAAE,IAAI,CAAC,QAAQ;KAChC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAmB,EACnB,GAAqB,EACrB,SAAkB,EAClB,KAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACnF,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,MAAkB,EAClB,SAAe,EACf,WAAiB;IAEjB,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;QAClC,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;QACtC,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"step-executor.js","sourceRoot":"","sources":["../../src/flows/step-executor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAEjE,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAY7D,OAAO,EAAyB,UAAU,EAAE,MAAM,oBAAoB,CAAC;AA+BvE;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAc,EACd,GAAqB,EACrB,SAAkB,EAClB,KAAc,EACd,IAAsB;IAEtB,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,YAAY,CAAC,UAAU;YAC1B,OAAO,qBAAqB,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QAClE,KAAK,YAAY,CAAC,WAAW;YAC3B,OAAO,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,KAAK,YAAY,CAAC,IAAI;YACpB,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;QAC/B,KAAK,YAAY,CAAC,KAAK;YACrB,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAChC,KAAK,YAAY,CAAC,QAAQ;YACxB,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC;QACnC,KAAK,YAAY,CAAC,SAAS;YACzB,OAAO,oBAAoB,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAC3D,KAAK,YAAY,CAAC,eAAe;YAC/B,OAAO,0BAA0B,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;QACrD;YACE,OAAO;gBACL,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAE,sBAAuB,IAAiB,CAAC,IAAI,EAAE;aACvD,CAAC;IACN,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CACzB,SAA8C,EAC9C,SAAkB,EAClB,KAAc;IAEd,MAAM,QAAQ,GAAG,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAG5E,CAAC;IACF,MAAM,QAAQ,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IAE9F,0EAA0E;IAC1E,MAAM,MAAM,GAA4B,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC;IAErE,IAAI,CAAC,SAAS;QAAE,OAAO,MAAM,CAAC;IAE9B,yFAAyF;IACzF,MAAM,QAAQ,GAA4B,EAAE,CAAC;IAC7C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACrD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACpE,QAAQ,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAoB,EACpB,GAAqB,EACrB,SAAkB,EAClB,KAAc,EACd,IAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,CAAC;QACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,cAAc,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC3E,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7D,CAAC;QACD,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EACH,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;gBACvD,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC;gBAC9B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;SAC3B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,qBAAqB,EAAE,CAAC;YACzC,OAAO;gBACL,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,KAAK,EAAE,qBAAqB,GAAG,CAAC,OAAO,EAAE;aAC1C,CAAC;QACJ,CAAC;QACD,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,IAAqB,EACrB,KAAc,EACd,IAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC;QAC3B,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,UAAU,CAAC,SAAS;YAC5B,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ;SAC9C,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GACX,GAAG,YAAY,kBAAkB;YAC/B,CAAC,CAAC,GAAG,CAAC,OAAO;YACb,CAAC,CAAC,GAAG,YAAY,KAAK;gBACpB,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,OAAO;SACf,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,IAAc;IACrC,sEAAsE;IACtE,+CAA+C;IAC/C,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,MAAM,EAAE,UAAU,CAAC,SAAS;QAC5B,SAAS,EAAE,IAAI,CAAC,KAAK;KACtB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAe;IACvC,uDAAuD;IACvD,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,MAAM,EAAE,UAAU,CAAC,SAAS;QAC5B,aAAa,EAAE,IAAI,CAAC,QAAQ;KAC7B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAkB;IAC7C,yDAAyD;IACzD,OAAO,OAAO,CAAC,OAAO,CAAC;QACrB,MAAM,EAAE,UAAU,CAAC,SAAS;QAC5B,gBAAgB,EAAE,IAAI,CAAC,QAAQ;KAChC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,0BAA0B,CACvC,IAAyB,EACzB,GAAqB,EACrB,IAAsB;IAEtB,IAAI,CAAC,IAAI,CAAC,wBAAwB,EAAE,CAAC;QACnC,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,2CAA2C;SACnD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC;IAC/B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;IAC/F,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,OAAO,EAAE,KAAK,CAAC;IAC/B,MAAM,QAAQ,GACZ,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,mBAAmB;QACjF,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACxB,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,kCAAkC,OAAO,IAAI,SAAS,GAAG;SACjE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,IAAmB,EACnB,GAAqB,EACrB,SAAkB,EAClB,KAAc;IAEd,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,kBAAkB,CAAC,SAAS,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;QACnF,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,SAAS,EAAE,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,MAAkB,EAClB,SAAe,EACf,WAAiB;IAEjB,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;QAClC,WAAW,EAAE,WAAW,CAAC,WAAW,EAAE;QACtC,KAAK,EAAE,MAAM,CAAC,KAAK;KACpB,CAAC;AACJ,CAAC"}

package/dist/governance/capability-source-scan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capability-source-scan.d.ts","sourceRoot":"","sources":["../../src/governance/capability-source-scan.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAM/D;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,MAAsB,GAAG,gBAAgB,EAAE,CAgD/F"}
+{"version":3,"file":"capability-source-scan.d.ts","sourceRoot":"","sources":["../../src/governance/capability-source-scan.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAO/D;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,MAAsB,GAAG,gBAAgB,EAAE,CAgD/F"}

package/dist/governance/capability-source-scan.js

@@ -2,6 +2,7 @@
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { GovernanceSeverity } from '../types/enums.js';
+import { listApplicationSourceFiles } from './source-walk.js';
 const CAPABILITY_IMPORT = /import\s+.*\s+from\s+['"](?:\.\.?\/)*.*capabilities\/[^'"]+['"]/;
 const HANDLER_ACCESS = /\b\w+\.handler\b/;
 const EXECUTE_CAPABILITY = /\bexecuteCapability\s*\(/;
@@ -15,7 +16,7 @@ export function scanCapabilityDirectImports(appRoot = process.cwd()) {
         return [];
     }
     const signals = [];
-    const files = listCapabilitySourceFiles(capDir);
+    const files = listApplicationSourceFiles(capDir);
     for (const filePath of files) {
         const content = fs.readFileSync(filePath, 'utf8');
         const rel = path.relative(appRoot, filePath);
@@ -49,32 +50,4 @@ export function scanCapabilityDirectImports(appRoot = process.cwd()) {
     }
     return signals;
 }
-function listCapabilitySourceFiles(dir) {
-    const results = [];
-    walkCapabilityDir(dir, results);
-    return results;
-}
-function walkCapabilityDir(dir, results) {
-    if (!fs.existsSync(dir))
-        return;
-    for (const ent of fs.readdirSync(dir, { withFileTypes: true })) {
-        const fullPath = path.join(dir, ent.name);
-        if (ent.isDirectory()) {
-            if (ent.name === '__tests__')
-                continue;
-            walkCapabilityDir(fullPath, results);
-            continue;
-        }
-        if (!ent.isFile())
-            continue;
-        if (!ent.name.endsWith('.ts') && !ent.name.endsWith('.js'))
-            continue;
-        if (ent.name.endsWith('.test.ts') ||
-            ent.name.endsWith('.test.js') ||
-            ent.name.endsWith('.d.ts')) {
-            continue;
-        }
-        results.push(fullPath);
-    }
-}
 //# sourceMappingURL=capability-source-scan.js.map

package/dist/governance/capability-source-scan.js.map

@@ -1 +1 @@
-{"version":3,"file":"capability-source-scan.js","sourceRoot":"","sources":["../../src/governance/capability-source-scan.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAE1D,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAGvD,MAAM,iBAAiB,GAAG,iEAAiE,CAAC;AAC5F,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAC1C,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB,OAAO,CAAC,GAAG,EAAE;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,yBAAyB,CAAC,MAAM,CAAC,CAAC;IAEhD,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE7C,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,kBAAkB,CAAC,OAAO;gBACpC,IAAI,EAAE,+CAA+C;gBACrD,WAAW,EAAE,sBAAsB,GAAG,8CAA8C;gBACpF,iBAAiB,EAAE,QAAQ,GAAG,EAAE;gBAChC,WAAW,EACT,yHAAyH;aAC5H,CAAC,CAAC;QACL,CAAC;QAED,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,kBAAkB,CAAC,OAAO;gBACpC,IAAI,EAAE,+CAA+C;gBACrD,WAAW,EAAE,sBAAsB,GAAG,mDAAmD;gBACzF,iBAAiB,EAAE,QAAQ,GAAG,EAAE;gBAChC,WAAW,EACT,iFAAiF;aACpF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,kBAAkB,CAAC,OAAO;gBACpC,IAAI,EAAE,+CAA+C;gBACrD,WAAW,EAAE,sBAAsB,GAAG,mDAAmD;gBACzF,iBAAiB,EAAE,QAAQ,GAAG,EAAE;gBAChC,WAAW,EACT,gHAAgH;aACnH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,yBAAyB,CAAC,GAAW;IAC5C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW,EAAE,OAAiB;IACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAChC,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,IAAI,GAAG,CAAC,IAAI,KAAK,WAAW;gBAAE,SAAS;YACvC,iBAAiB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QACrE,IACE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC1B,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}
+{"version":3,"file":"capability-source-scan.js","sourceRoot":"","sources":["../../src/governance/capability-source-scan.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAE1D,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAE9D,MAAM,iBAAiB,GAAG,iEAAiE,CAAC;AAC5F,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAC1C,MAAM,kBAAkB,GAAG,0BAA0B,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,UAAkB,OAAO,CAAC,GAAG,EAAE;IACzE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAEjD,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAE7C,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,kBAAkB,CAAC,OAAO;gBACpC,IAAI,EAAE,+CAA+C;gBACrD,WAAW,EAAE,sBAAsB,GAAG,8CAA8C;gBACpF,iBAAiB,EAAE,QAAQ,GAAG,EAAE;gBAChC,WAAW,EACT,yHAAyH;aAC5H,CAAC,CAAC;QACL,CAAC;QAED,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,kBAAkB,CAAC,OAAO;gBACpC,IAAI,EAAE,+CAA+C;gBACrD,WAAW,EAAE,sBAAsB,GAAG,mDAAmD;gBACzF,iBAAiB,EAAE,QAAQ,GAAG,EAAE;gBAChC,WAAW,EACT,iFAAiF;aACpF,CAAC,CAAC;QACL,CAAC;QAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACrC,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,kBAAkB,CAAC,OAAO;gBACpC,IAAI,EAAE,+CAA+C;gBACrD,WAAW,EAAE,sBAAsB,GAAG,mDAAmD;gBACzF,iBAAiB,EAAE,QAAQ,GAAG,EAAE;gBAChC,WAAW,EACT,gHAAgH;aACnH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/governance/forbidden-path-scan.d.ts

@@ -0,0 +1,7 @@
+import type { GovernanceSignal } from '../types/governance.js';
+/**
+ * Scan `app/` for paths that bypass the declared runtime.
+ * High severity so `plumbus verify` fails the process when any match.
+ */
+export declare function scanForbiddenPaths(appRoot?: string): GovernanceSignal[];
+//# sourceMappingURL=forbidden-path-scan.d.ts.map

package/dist/governance/forbidden-path-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"forbidden-path-scan.d.ts","sourceRoot":"","sources":["../../src/governance/forbidden-path-scan.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAuC/D;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,GAAE,MAAsB,GAAG,gBAAgB,EAAE,CAsBtF"}

package/dist/governance/forbidden-path-scan.js

@@ -0,0 +1,60 @@
+// Forbidden-path scan for application sources (Gate 2 consumption surface).
+// Reuses the same walker and GovernanceSignal shape as capability-source-scan.
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { GovernanceSeverity } from '../types/enums.js';
+import { listApplicationSourceFiles } from './source-walk.js';
+const FORBIDDEN_PATTERNS = [
+    {
+        rule: 'architecture.forbidden-raw-sql-import',
+        pattern: /from\s+['"](?:pg|postgres|drizzle-orm)(?:\/[^'"]*)?['"]/,
+        description: 'imports a database driver or query builder directly',
+        remediation: 'Use ctx.data repositories instead of importing pg, postgres, or drizzle-orm',
+    },
+    {
+        rule: 'architecture.forbidden-create-execution-context',
+        pattern: /\bcreateExecutionContext\s*\(/,
+        description: 'calls createExecutionContext',
+        remediation: 'Receive ctx from the runtime; do not mint an execution context in application code',
+    },
+    {
+        rule: 'architecture.forbidden-parallel-queue',
+        pattern: /from\s+['"](?:bullmq|bull|bee-queue)['"]/,
+        description: 'imports a parallel queue runner',
+        remediation: 'Use Plumbus flows, jobs, and event consumers instead of a parallel queue',
+    },
+    {
+        rule: 'architecture.forbidden-raw-provider-credential',
+        pattern: /\b(?:OPENAI_API_KEY|ANTHROPIC_API_KEY|AI_OPENAI_API_KEY|AI_ANTHROPIC_API_KEY)\b/,
+        description: 'reads a raw provider API key',
+        remediation: 'Let the host adapter own credentials; application code must not read provider keys',
+    },
+];
+/**
+ * Scan `app/` for paths that bypass the declared runtime.
+ * High severity so `plumbus verify` fails the process when any match.
+ */
+export function scanForbiddenPaths(appRoot = process.cwd()) {
+    const appDir = path.join(appRoot, 'app');
+    if (!fs.existsSync(appDir)) {
+        return [];
+    }
+    const signals = [];
+    for (const filePath of listApplicationSourceFiles(appDir)) {
+        const content = fs.readFileSync(filePath, 'utf8');
+        const rel = path.relative(appRoot, filePath);
+        for (const item of FORBIDDEN_PATTERNS) {
+            if (!item.pattern.test(content))
+                continue;
+            signals.push({
+                severity: GovernanceSeverity.High,
+                rule: item.rule,
+                description: `Application module "${rel}" ${item.description}`,
+                affectedComponent: `file:${rel}`,
+                remediation: item.remediation,
+            });
+        }
+    }
+    return signals;
+}
+//# sourceMappingURL=forbidden-path-scan.js.map

package/dist/governance/forbidden-path-scan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forbidden-path-scan.js","sourceRoot":"","sources":["../../src/governance/forbidden-path-scan.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,+EAA+E;AAE/E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAEvD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAS9D,MAAM,kBAAkB,GAAgC;IACtD;QACE,IAAI,EAAE,uCAAuC;QAC7C,OAAO,EAAE,yDAAyD;QAClE,WAAW,EAAE,qDAAqD;QAClE,WAAW,EAAE,6EAA6E;KAC3F;IACD;QACE,IAAI,EAAE,iDAAiD;QACvD,OAAO,EAAE,+BAA+B;QACxC,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EACT,oFAAoF;KACvF;IACD;QACE,IAAI,EAAE,uCAAuC;QAC7C,OAAO,EAAE,0CAA0C;QACnD,WAAW,EAAE,iCAAiC;QAC9C,WAAW,EAAE,0EAA0E;KACxF;IACD;QACE,IAAI,EAAE,gDAAgD;QACtD,OAAO,EAAE,iFAAiF;QAC1F,WAAW,EAAE,8BAA8B;QAC3C,WAAW,EACT,oFAAoF;KACvF;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,UAAkB,OAAO,CAAC,GAAG,EAAE;IAChE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,QAAQ,IAAI,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,kBAAkB,EAAE,CAAC;YACtC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC1C,OAAO,CAAC,IAAI,CAAC;gBACX,QAAQ,EAAE,kBAAkB,CAAC,IAAI;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,uBAAuB,GAAG,KAAK,IAAI,CAAC,WAAW,EAAE;gBAC9D,iBAAiB,EAAE,QAAQ,GAAG,EAAE;gBAChC,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/governance/index.d.ts

@@ -4,6 +4,8 @@ export { builtInProfiles, evaluatePolicyProfile } from './policies.js';
 export type { PolicyProfileDefinition, PolicyProfileRule } from './policies.js';
 export { formatPolicyReport, generateAllPolicyReports, generatePolicyReport } from './reports.js';
 export type { ReportOptions } from './reports.js';
+export { scanCapabilityDirectImports } from './capability-source-scan.js';
+export { scanForbiddenPaths } from './forbidden-path-scan.js';
 export { createGovernanceRuleEngine } from './rule-engine.js';
 export type { GovernanceResult, GovernanceRule, GovernanceRuleEngine, RuleCategory, SystemInventory, } from './rule-engine.js';
 export { aiRules, apiRules, architectureRules, capabilityDependencyRules, mcpRules, privacyRules, workerRules, ruleAIWithoutExplanation, ruleApiDeprecatedWithoutReplacement, ruleApiMetadataWithoutExposure, ruleApiMissingAuth, ruleApiMissingOperationId, ruleApiPublicMutationWithoutIdempotency, ruleCapabilityMissingAccessPolicy, ruleCrossTenantDataAccess, ruleEntityMissingDescription, ruleEntityTenantIsolation, ruleExcessiveAIUsage, ruleExcessiveDataRetention, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, ruleMissingFieldClassification, ruleOverlyPermissiveRoles, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, securityRules, } from './rules/index.js';

package/dist/governance/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACvE,YAAY,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAClG,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,OAAO,EACP,QAAQ,EACR,iBAAiB,EACjB,yBAAyB,EACzB,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,wBAAwB,EACxB,mCAAmC,EACnC,8BAA8B,EAC9B,kBAAkB,EAClB,yBAAyB,EACzB,uCAAuC,EACvC,iCAAiC,EACjC,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,aAAa,GACd,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEnE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AACvE,YAAY,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEhF,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAClG,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,YAAY,EACZ,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,OAAO,EACP,QAAQ,EACR,iBAAiB,EACjB,yBAAyB,EACzB,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,wBAAwB,EACxB,mCAAmC,EACnC,8BAA8B,EAC9B,kBAAkB,EAClB,yBAAyB,EACzB,uCAAuC,EACvC,iCAAiC,EACjC,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,aAAa,GACd,MAAM,kBAAkB,CAAC"}

package/dist/governance/index.js

@@ -7,6 +7,8 @@
 export { applyOverrides, createOverrideStore } from './overrides.js';
 export { builtInProfiles, evaluatePolicyProfile } from './policies.js';
 export { formatPolicyReport, generateAllPolicyReports, generatePolicyReport } from './reports.js';
+export { scanCapabilityDirectImports } from './capability-source-scan.js';
+export { scanForbiddenPaths } from './forbidden-path-scan.js';
 export { createGovernanceRuleEngine } from './rule-engine.js';
 export { aiRules, apiRules, architectureRules, capabilityDependencyRules, mcpRules, privacyRules, workerRules, ruleAIWithoutExplanation, ruleApiDeprecatedWithoutReplacement, ruleApiMetadataWithoutExposure, ruleApiMissingAuth, ruleApiMissingOperationId, ruleApiPublicMutationWithoutIdempotency, ruleCapabilityMissingAccessPolicy, ruleCrossTenantDataAccess, ruleEntityMissingDescription, ruleEntityTenantIsolation, ruleExcessiveAIUsage, ruleExcessiveDataRetention, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, ruleMissingFieldClassification, ruleOverlyPermissiveRoles, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, securityRules, } from './rules/index.js';
 //# sourceMappingURL=index.js.map

package/dist/governance/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,0FAA0F;AAC1F,0FAA0F;AAC1F,6CAA6C;AAC7C,EAAE;AACF,6FAA6F;AAE7F,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGlG,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAS9D,OAAO,EACL,OAAO,EACP,QAAQ,EACR,iBAAiB,EACjB,yBAAyB,EACzB,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,wBAAwB,EACxB,mCAAmC,EACnC,8BAA8B,EAC9B,kBAAkB,EAClB,yBAAyB,EACzB,uCAAuC,EACvC,iCAAiC,EACjC,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,aAAa,GACd,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/governance/index.ts"],"names":[],"mappings":"AAAA,0BAA0B;AAC1B,0FAA0F;AAC1F,0FAA0F;AAC1F,6CAA6C;AAC7C,EAAE;AACF,6FAA6F;AAE7F,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrE,OAAO,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,eAAe,CAAC;AAGvE,OAAO,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGlG,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAS9D,OAAO,EACL,OAAO,EACP,QAAQ,EACR,iBAAiB,EACjB,yBAAyB,EACzB,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,wBAAwB,EACxB,mCAAmC,EACnC,8BAA8B,EAC9B,kBAAkB,EAClB,yBAAyB,EACzB,uCAAuC,EACvC,iCAAiC,EACjC,yBAAyB,EACzB,4BAA4B,EAC5B,yBAAyB,EACzB,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,aAAa,GACd,MAAM,kBAAkB,CAAC"}

package/dist/governance/source-walk.d.ts

@@ -0,0 +1,3 @@
+/** Application TypeScript/JavaScript sources under `dir`, skipping tests and build output. */
+export declare function listApplicationSourceFiles(dir: string): string[];
+//# sourceMappingURL=source-walk.d.ts.map

package/dist/governance/source-walk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-walk.d.ts","sourceRoot":"","sources":["../../src/governance/source-walk.ts"],"names":[],"mappings":"AAKA,8FAA8F;AAC9F,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAIhE"}

package/dist/governance/source-walk.js

@@ -0,0 +1,33 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+const SKIP_DIRS = new Set(['__tests__', 'node_modules', 'dist', '.plumbus']);
+/** Application TypeScript/JavaScript sources under `dir`, skipping tests and build output. */
+export function listApplicationSourceFiles(dir) {
+    const results = [];
+    walk(dir, results);
+    return results;
+}
+function walk(dir, results) {
+    if (!fs.existsSync(dir))
+        return;
+    for (const ent of fs.readdirSync(dir, { withFileTypes: true })) {
+        const fullPath = path.join(dir, ent.name);
+        if (ent.isDirectory()) {
+            if (SKIP_DIRS.has(ent.name))
+                continue;
+            walk(fullPath, results);
+            continue;
+        }
+        if (!ent.isFile())
+            continue;
+        if (!ent.name.endsWith('.ts') && !ent.name.endsWith('.js'))
+            continue;
+        if (ent.name.endsWith('.test.ts') ||
+            ent.name.endsWith('.test.js') ||
+            ent.name.endsWith('.d.ts')) {
+            continue;
+        }
+        results.push(fullPath);
+    }
+}
+//# sourceMappingURL=source-walk.js.map

package/dist/governance/source-walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source-walk.js","sourceRoot":"","sources":["../../src/governance/source-walk.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAE7E,8FAA8F;AAC9F,MAAM,UAAU,0BAA0B,CAAC,GAAW;IACpD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACnB,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,IAAI,CAAC,GAAW,EAAE,OAAiB;IAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO;IAChC,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE;YAAE,SAAS;QAC5B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QACrE,IACE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;YAC7B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAC1B,CAAC;YACD,SAAS;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -1,7 +1,9 @@
-export type { AICostRecord, AIExplainabilityTracker, AIInvocationRecord, AIProviderAdapter, AIProviderCapabilities, AISecurityConfig, AISecurityMode, AIServiceConfig, AITool, AIToolCall, AIToolChoice, AIToolExecutionOptions, AnthropicAdapterConfig, BudgetCheckResult, BudgetConfig, ChunkConfig, ChatMessage, CostTracker, DailyUsage, DerivedLedgerUsage, DocumentChunk, EmbeddingRequest, EmbeddingResponse, ExplainabilityConfig, IngestDocumentInput, Kind, LedgerUsageKind, ListModelsFilter, ModelRate, OpenAIAdapterConfig, ProviderAssistantState, ProviderJsonSchemaOptions, ProviderJsonSchemaResult, ProviderModel, ProviderRequest, ProviderResponse, ProviderStreamEvent, RAGPipeline, RAGPipelineConfig, RetrievalQuery, RunToolLoopParams, RunToolLoopResult, SecurityCheckResult, SecurityWarning, StoredChunk, TokenUsage, UsageAPIClient, UsageClientConfig, UsageData, UsageEntry, UsageSyncResult, ValidatedResponse, ValidationRetryConfig, VectorStore, } from './ai/index.js';
-export { PromptRegistry, UsageAPIError, allKnownModels, calculateModelCost, estimateModelCost, checkPromptSecurity, buildAISecurityConfig, chunkDocument, createAIService, createAnthropicAdapter, createCostTracker, deriveLedgerUsage, createExplainabilityTracker, createInMemoryVectorStore, createOpenAIAdapter, createProviderAdapter, createRAGPipeline, createUsageAPIClient, documentChunksTable, documentsTable, findModelRate, generateWithValidation, joinAndFilterModels, runToolLoop, safeJsonStringify, zodToProviderJsonSchema, singleProviderConfig, ProviderJsonSchemaError, normalizeFinishReason, AIIncompleteOutputError, AIInvalidRequestError, AIRefusalError, } from './ai/index.js';
-export type { RouteGeneratorConfig } from './api/index.js';
-export { authenticationFailureToHttp, buildAuthenticationRequest, isApiExposed, parseCookieHeader, registerAllRoutes, registerCapabilityRoute, registerStreamingRoute, resolveRequestLocale, LOCALE_COOKIE_NAME, } from './api/index.js';
+export type { RequestAdmissionChallenge, RequestAdmissionProof } from './admission/index.js';
+export { createRequestAdmission, requestAdmissionChallengeSchema, requestAdmissionProofSchema, withRequestAdmissionLock, } from './admission/index.js';
+export type { AICostRecord, AIExplainabilityTracker, AIInvocationRecord, AIProviderAdapter, AIProviderCapabilities, AISecurityConfig, AISecurityMode, AIServiceConfig, AITool, AIToolCall, AIToolChoice, AIToolExecutionOptions, AnthropicAdapterConfig, BudgetCheckResult, BudgetConfig, ChunkConfig, ChatMessage, CostTracker, DailyUsage, DerivedLedgerUsage, DocumentChunk, EmbeddingRequest, EmbeddingResponse, ExplainabilityConfig, IngestDocumentInput, Kind, LedgerUsageKind, ListModelsFilter, ModelRate, OpenAIAdapterConfig, ProviderAssistantState, ProviderJsonSchemaOptions, ProviderJsonSchemaResult, ProviderModel, ProviderRequest, ProviderResponse, ProviderStreamEvent, RAGPipeline, RAGPipelineConfig, RetrievalQuery, RunToolLoopParams, RunToolLoopResult, SecurityCheckResult, SecurityWarning, StoredChunk, TokenUsage, UsageAPIClient, UsageClientConfig, UsageData, UsageEntry, UsageSyncResult, ValidatedResponse, ValidationRetryConfig, VectorStore, GovernedAiHost, GovernedBudgetCheckInput, GovernedBudgetCheckResult, GovernedBudgetInput, GovernedInvokeDeps, GovernedInvokeInput, GovernedInvokeSuccess, GovernedModel, GovernedModelPin, GovernedModelRequest, GovernedModelResult, GovernedModelUsage, GovernedArtifact, GovernedArtifactKind, GovernedArtifactStore, PublishedGovernedArtifact, PlumbusRuntime, PlumbusRuntimeCallOptions, PlumbusRuntimeConfig, PlumbusRuntimeContextDeps, PlumbusRuntimeEventPump, PlumbusRuntimeEvents, PlumbusRuntimeFlows, PlumbusRuntimeSubscriptions, PlumbusRuntimeTimers, } from './ai/index.js';
+export { PromptRegistry, createPromptRegistry, UsageAPIError, allKnownModels, calculateModelCost, checkGovernedBudget, estimateModelCost, checkPromptSecurity, DEFAULT_GOVERNED_ARTIFACTS_DIRECTORY, createFilesystemGovernedArtifactStore, createMemoryGovernedArtifactStore, createPlumbusRuntime, digestGovernedArtifact, resolveGovernedArtifactStore, buildAISecurityConfig, chunkDocument, createAIService, fillPromptTemplate, createAnthropicAdapter, createCostTracker, deriveLedgerUsage, createExplainabilityTracker, createInMemoryVectorStore, createOpenAIAdapter, createProviderAdapter, createRAGPipeline, createUsageAPIClient, documentChunksTable, documentsTable, findModelRate, generateWithValidation, governedReviewSubject, invokeGovernedAi, joinAndFilterModels, runToolLoop, safeJsonStringify, zodToProviderJsonSchema, singleProviderConfig, ProviderJsonSchemaError, normalizeFinishReason, AIIncompleteOutputError, AIInvalidRequestError, AIRefusalError, AIValidationError, GovernedArtifactConflictError, } from './ai/index.js';
+export type { IdempotencyClaimResult, IdempotencyPrincipal, IdempotencyRecord, IdempotencyStore, IdempotencyStoreOptions, RouteGeneratorConfig, } from './api/index.js';
+export { authenticationFailureToHttp, buildAuthenticationRequest, isApiExposed, capabilityHttpMethod, parseCookieHeader, registerAllRoutes, registerCapabilityRoute, registerStreamingRoute, resolveRequestLocale, LOCALE_COOKIE_NAME, buildIdempotencyStoreKey, createInMemoryIdempotencyStore, hashPayload, IdempotencyAbortedError, isAnonymousIdempotencyPrincipal, MAX_PAYLOAD_DEPTH, parseIdempotencyTtl, PayloadTooDeepError, principalsMatch, } from './api/index.js';
 export type { AuditEvent, AuditWriter } from './types/audit.js';
 export type { AuditServiceConfig } from './audit/index.js';
 export { auditRecords, createAuditService, createDatabaseAuditWriter } from './audit/index.js';
@@ -9,8 +11,10 @@ export type { AuthenticationRequest, AuthenticationResult, AuthAdapter, JwtAdapt
 export { createCompositeRequestAuthenticator, createJwtAdapter, createOidcAdapter, createSamlAdapter, createScimService, hashPassword, signJwt, verifyPassword, wrapAuthAdapter, } from './auth/index.js';
 export type { ConfigLoadOptions, ConfigValidationResult } from './config/index.js';
 export { loadConfig, parseDurationToMs, validateConfig } from './config/index.js';
-export type { MigrationConfig, MigrationRecord, MigrationRollbackResult, RepositoryOptions, } from './data/index.js';
-export { EntityRegistry, applyMigrations, collectMaskedFieldsFromEntities, collectSchemas, createRepository, decryptFieldValue, encryptFieldValue, generateDrizzleSchema, generateSchemas, getEncryptedFields, getMaskedFields, gte, ilike, isEncryptedValue, like, lte, resolveEncryptionKey, rollbackLastMigration, sql, ENCRYPTION_PREFIX, } from './data/index.js';
+export type { MigrationApplyResult, MigrationConfig, MigrationRecord, MigrationRollbackResult, RepositoryOptions, } from './data/index.js';
+export { EntityRegistry, applyMigrations, collectMaskedFieldsFromEntities, collectSchemas, createRepository, decryptBytes, decryptFieldValue, encryptBytes, encryptFieldValue, generateDrizzleSchema, generateSchemas, getEncryptedFields, getMaskedFields, gte, ilike, isEncryptedValue, like, lte, resolveEncryptionKey, rollbackLastMigration, sql, ENCRYPTION_PREFIX, } from './data/index.js';
+export { createApprovalService, createMemoryApprovalStore, createSqlApprovalStore, } from './approvals/index.js';
+export type { ApprovalService, AuthorizationProvider } from './approvals/index.js';
 export { defineCapability } from './define/defineCapability.js';
 export { defineEntity } from './define/defineEntity.js';
 export { defineEvent } from './define/defineEvent.js';
@@ -19,17 +23,18 @@ export { definePrompt } from './define/definePrompt.js';
 export { defineTranslation } from './define/defineTranslation.js';
 export { zodInputToJsonSchema } from './schema/zod-input-to-json-schema.js';
 export { errorToHttpResponse, errorToHttpStatus } from './errors/http.js';
-export { AIBudgetExceededError, AISecurityBlockedError, DataForbiddenError, DataInternalError, DataValidationError, EncryptionConfigError, EncryptionPayloadError, FlowCancelledError, LeaseLostError, PlumbusError, UnauthorizedError, createErrorService, isPlumbusError, } from './errors/index.js';
+export { AIBudgetExceededError, AISecurityBlockedError, GovernedAiBlockedError, BudgetExhaustedError, DataForbiddenError, DataInternalError, DataValidationError, EncryptionConfigError, EncryptionPayloadError, FlowCancelledError, LeaseLostError, PlumbusError, UnauthorizedError, createErrorService, isPlumbusError, } from './errors/index.js';
+export type { GovernedAiBlockedCode } from './errors/data-errors.js';
 export type { DispatcherConfig, EventConsumer, EventConsumerHandler, EventEmitterConfig, EventQueue, IdempotencyService, RedisClient, RedisQueueConfig, WorkerConfig, } from './events/index.js';
-export { ConsumerRegistry, EventRegistry, createEventEmitter, createEventWorker, createIdempotencyService, createInMemoryQueue, createOutboxDispatcher, createRedisQueue, deadLetterTable, idempotencyTable, outboxTable, } from './events/index.js';
+export { ConsumerRegistry, EventRegistry, createEventEmitter, createEventWorker, createIdempotencyService, evaluateEventSubscriptionDelivery, createInMemoryQueue, createOutboxDispatcher, createRedisQueue, deadLetterTable, idempotencyTable, outboxTable, } from './events/index.js';
 export type { AuthorizationResult, CapabilityResult, ContextDependencies, ExecutionFailure, ExecutionResult, } from './execution/index.js';
-export { buildCapabilityRuntimeDeps, CapabilityRegistry, createExecutionContext, evaluateAccess, executeCapability, getCanonicalCapabilityName, isCanonicalCapabilityName, } from './execution/index.js';
+export { buildCapabilityRuntimeDeps, CapabilityRegistry, evaluateAccess, executeCapability, authorizeCapability, getCanonicalCapabilityName, isCanonicalCapabilityName, } from './execution/index.js';
 export type { DependencyViolationMetadata, DependencyViolationReason, } from './execution/index.js';
 export type { AIInvocationExplanation, AuthorizationExplanation, ExplanationFilter, ExplanationRecord, ExplanationTracker, ExplanationTrackerConfig, ExplanationType, FlowBranchExplanation, GovernanceExplanation, } from './explanation/index.js';
 export { createExplanationTracker } from './explanation/index.js';
 export { field } from './fields/index.js';
 export type { FlowEngineConfig, SchedulerConfig, StepExecutorDeps, StepHistoryEntry, StepResult, } from './flows/index.js';
-export { FlowRegistry, FlowStatus, StepStatus, assertTransition, buildHistoryEntry, computeNextRun, computeRetryDelay, createFlowEngine, createFlowScheduler, createFlowService, createFlowTriggerHandler, deadLetterFlow, executeStep, flowDeadLetterTable, flowExecutionsTable, flowSchedulesTable, generateWorkerId, isTerminal, isValidTransition, sweepFailedFlows, } from './flows/index.js';
+export { COMPILED_FLOW_CONTRACT_VERSION, CompiledFlowRegistry, DEFAULT_COMPILED_FLOWS_DIRECTORY, DEFINITION_STRATEGY_NOT_SUPPORTED, DefinitionInFlightStrategy, DefinitionStrategyNotSupportedError, FlowRegistry, FlowStatus, StepStatus, assertSupportedDefinitionStrategy, assertTransition, buildHistoryEntry, compileFlowDefinition, DEFAULT_SCHEDULE_CATCH_UP_MAX, computeNextRun, computeRetryDelay, createFlowEngine, createFlowScheduler, createFlowService, createFlowTriggerHandler, createExecutionBudgetLedger, chargeExecutionBudget, deadLetterFlow, executeStep, flowDeadLetterTable, flowDefinitionId, flowExecutionsTable, flowSchedulesTable, generateWorkerId, hydrateCompiledFlow, isTerminal, loadCompiledFlowRegistryFromDirectory, planMissedSchedule, isValidTransition, retryDeadLetteredFlow, sweepFailedFlows, tryLoadCompiledFlowRegistryFromDirectory, } from './flows/index.js';
 export type { Counter, Histogram, MetricLabels, MetricsRegistry, PlumbusMetrics, Span, SpanExporter, SpanKind, SpanOptions, SpanStatusCode, StructuredLogEntry, StructuredLoggerConfig, TraceContext, Tracer, W3CTraceContext, } from './observability/index.js';
 export { createChildSpan, createMetricsRegistry, createPlumbusMetrics, createStructuredLogger, withLogMasking, createTraceContext, createTracer, extractTraceFromHeaders, formatTraceparent, generateSpanId, generateTraceId, injectTraceHeaders, parseTraceparent, } from './observability/index.js';
 export type { AuthComponentHealth, HttpAuthenticationRuntime, PlumbusServer, ServerConfig, } from './server/index.js';
@@ -44,7 +49,11 @@ export { RuntimeRole, buildStepDeps, buildWorkerAiService, discoverRuntimeResour
 export type { CreateJobExecutionInput, CreateJobDispatchServiceOptions, DispatchJobOptions, JobDispatchService, JobExecutionRecord, JobQueuePayload, JobService, } from './jobs/index.js';
 export { JobExecutionSource, JobExecutionStatus, createDeferredJobDispatchService, createJobDispatchService, createJobService, dispatchQueuedJob, jobEventType, jobExecutionsTable, registerJobStatusRoute, } from './jobs/index.js';
 export type { AgentFormat, CreateOptions, DevOptions, DoctorCheck, InitOptions, PolicyContext, PolicyRule, } from './cli/index.js';
-export { assertInsidePlumbusProject, capabilityTemplate, capabilityTestTemplate, checkAppStructure, checkConfig, checkLegacyArtifacts, checkNodeVersion, checkPackageJson, checkPlumbusCore, checkPlumbusUi, checkPostgreSQL, checkRedis, checkTypeScript, commandRequiresProject, createCli, entityTemplate, evaluatePolicy, eventTemplate, findPlumbusProjectRoot, flowTemplate, generateAgentsMd, generateClaudeMd, generateAll, generateCapabilityBrief, generateCapabilityNameType, generateCapabilityTypes, generateClientFunction, generateCopilotInstructions, generateCursorCapabilityRule, generateCursorRule, generateDataServiceMap, generateEntityBrief, generateEntityInterface, generateEntityTypeFile, generateManifestEntry, generateOpenApiPath, generateProjectBrief, generateProjectBriefFromResources, generateProjectStructure, generateReactHook, promptTemplate, ruleCapabilityAccessPolicy, ruleCapabilityEffects, ruleEncryptedSensitiveFields, ruleEntityFieldClassification, ruleEntityTenantIsolation, runDev, runDoctorChecks, runFullDoctorChecks, runGovernanceRules, startDevServer, toCamelCase, toKebabCase, toPascalCase, translationTemplate, writeAgentFiles, zodTypeToString, } from './cli/index.js';
+export { assertInsidePlumbusProject, capabilityTemplate, capabilityTestTemplate, checkAppStructure, checkConfig, checkLegacyArtifacts, checkNodeVersion, checkPackageJson, checkPlumbusCore, checkPlumbusUi, checkPostgreSQL, checkRedis, checkTypeScript, commandRequiresProject, createCli, entityTemplate, evaluatePolicy, eventTemplate, findPlumbusProjectRoot, flowTemplate, generateAgentsMd, generateClaudeMd, generateAll, generateCapabilityBrief, generateCapabilityNameType, generateCapabilityTypes, generateClientFunction, generateCopilotInstructions, generateCursorCapabilityRule, generateCursorRule, generateDataServiceMap, generateEntityBrief, generateEntityInterface, generateEntityTypeFile, generateManifestEntry, generateOpenApiPath, buildGenerateOpenApiDocument, JSON_SCHEMA_2020_12_DIALECT, toJsonSchema2020, toOpenApi31Document, generateProjectBrief, generateProjectBriefFromResources, generateProjectStructure, generateReactHook, promptTemplate, ruleCapabilityAccessPolicy, ruleCapabilityEffects, ruleEncryptedSensitiveFields, ruleEntityFieldClassification, ruleEntityTenantIsolation, runDev, runDoctorChecks, runFullDoctorChecks, runGovernanceRules, startDevServer, toCamelCase, toKebabCase, toPascalCase, translationTemplate, writeAgentFiles, zodTypeToString, } from './cli/index.js';
 export type { GovernanceResult, GovernanceRule, GovernanceRuleEngine, OverrideEntry, OverrideStore, PolicyProfileDefinition, PolicyProfileRule, ReportOptions, RuleCategory, SystemInventory, } from './governance/index.js';
-export { aiRules, apiRules, applyOverrides, architectureRules, capabilityDependencyRules, mcpRules, builtInProfiles, createGovernanceRuleEngine, createOverrideStore, evaluatePolicyProfile, formatPolicyReport, generateAllPolicyReports, generatePolicyReport, ruleCapabilityMissingAccessPolicy as govRuleCapabilityMissingAccessPolicy, ruleEntityTenantIsolation as govRuleEntityTenantIsolation, privacyRules, ruleAIWithoutExplanation, ruleApiDeprecatedWithoutReplacement, ruleApiMetadataWithoutExposure, ruleApiMissingAuth, ruleApiMissingOperationId, ruleApiPublicMutationWithoutIdempotency, ruleCrossTenantDataAccess, ruleEntityMissingDescription, ruleExcessiveAIUsage, ruleExcessiveDataRetention, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, ruleMissingFieldClassification, ruleOverlyPermissiveRoles, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, securityRules, workerRules, } from './governance/index.js';
+export { aiRules, apiRules, applyOverrides, architectureRules, capabilityDependencyRules, mcpRules, builtInProfiles, createGovernanceRuleEngine, createOverrideStore, scanForbiddenPaths, evaluatePolicyProfile, formatPolicyReport, generateAllPolicyReports, generatePolicyReport, ruleCapabilityMissingAccessPolicy as govRuleCapabilityMissingAccessPolicy, ruleEntityTenantIsolation as govRuleEntityTenantIsolation, privacyRules, ruleAIWithoutExplanation, ruleApiDeprecatedWithoutReplacement, ruleApiMetadataWithoutExposure, ruleApiMissingAuth, ruleApiMissingOperationId, ruleApiPublicMutationWithoutIdempotency, ruleCrossTenantDataAccess, ruleEntityMissingDescription, ruleExcessiveAIUsage, ruleExcessiveDataRetention, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, ruleMissingFieldClassification, ruleOverlyPermissiveRoles, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, securityRules, workerRules, } from './governance/index.js';
+export { DEFAULT_CORE_SCHEMA, DEFAULT_DATA_PLANE_CACHE_SIZE, DEFAULT_DATA_PLANE_POOL_SIZE, DEFAULT_PACKAGE_SCHEMA_PREFIX, DataPlaneConnectionError, DataPlaneGuardError, DataPlaneNameError, DataPlaneProvisioningError, MAX_DATA_PLANE_POOL_SIZE, UnknownTenantError, applyDataPlaneMigrations, assertSafeIdentifier, createPooledDataPlaneResolver, createSingleDataPlaneResolver, dropDataPlane, openDataPlaneConnection, provisionDataPlane, quoteIdentifier, DATA_PLANE_MIGRATE_APPLICATION_NAME, } from './tenancy/index.js';
+export { CREDENTIAL_REDACTED, CredentialCatalogError, createMemoryCredentialCatalog, } from './credentials/index.js';
+export type { CredentialBinding, CredentialCatalog, CredentialFieldSpec, CredentialMaterial, CredentialRecord, CredentialResolver, CredentialTypeDeclaration, CredentialTypeRecord, MemoryCredentialCatalogOptions, } from './credentials/index.js';
+export type { ApplyDataPlaneMigrationsOptions, DataPlaneAdminConnection, DataPlaneConnectRequest, DataPlaneConnection, DataPlaneConnectionFields, DataPlaneConnectionTarget, DataPlaneConnectionUrl, DataPlaneDescriptor, DataPlaneDropResult, DataPlaneEndpoint, DataPlaneMigrationApplyResult, DataPlaneHandle, DataPlaneProvisionResult, DataPlaneResolver, DataPlaneRoleSpec, DataPlaneStep, DataPlaneStepName, DataPlaneStepOutcome, DataPlaneTablePrivilege, DropDataPlaneOptions, OpenDataPlaneConnectionOptions, OpenedDataPlaneConnection, PooledDataPlaneResolver, PooledDataPlaneResolverOptions, ProvisionDataPlaneOptions, SingleDataPlaneResolverOptions, } from './tenancy/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoBA,YAAY,EACV,YAAY,EACZ,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,MAAM,EACN,UAAU,EACV,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,IAAI,EACJ,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,WAAW,EACX,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,GACZ,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,sBAAsB,EACtB,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,GACf,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,YAAY,EACZ,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,GACnB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,OAAO,EACP,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mCAAmC,EACnC,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,OAAO,EACP,cAAc,EACd,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEnF,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAClF,YAAY,EACV,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,cAAc,EACd,eAAe,EACf,+BAA+B,EAC/B,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,GAAG,EACH,KAAK,EACL,gBAAgB,EAChB,IAAI,EACJ,GAAG,EACH,oBAAoB,EACpB,qBAAqB,EACrB,GAAG,EACH,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,sBAAsB,EACtB,cAAc,EACd,iBAAiB,EACjB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAElE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,GACX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,YAAY,EACZ,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACxB,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,OAAO,EACP,SAAS,EACT,YAAY,EACZ,eAAe,EACf,cAAc,EACd,IAAI,EACJ,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,MAAM,EACN,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,mBAAmB,EACnB,yBAAyB,EACzB,aAAa,EACb,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,YAAY,EACV,YAAY,EACZ,eAAe,EACf,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAEjC,cAAc,kBAAkB,CAAC;AACjC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEtE,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,YAAY,EACV,2BAA2B,EAC3B,kCAAkC,EAClC,2BAA2B,EAC3B,cAAc,EACd,aAAa,EACb,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,2BAA2B,EAC3B,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,uBAAuB,EACvB,+BAA+B,EAC/B,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,gCAAgC,EAChC,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAWzB,YAAY,EACV,WAAW,EACX,aAAa,EACb,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,UAAU,GACX,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAEL,0BAA0B,EAE1B,kBAAkB,EAClB,sBAAsB,EAEtB,iBAAiB,EACjB,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,SAAS,EACT,cAAc,EAEd,cAAc,EACd,aAAa,EAEb,sBAAsB,EACtB,YAAY,EAEZ,gBAAgB,EAChB,gBAAgB,EAEhB,WAAW,EAEX,uBAAuB,EAEvB,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,kBAAkB,EAElB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EAEjC,wBAAwB,EACxB,iBAAiB,EACjB,cAAc,EAEd,0BAA0B,EAC1B,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,EAEzB,MAAM,EACN,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,WAAW,EACX,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,OAAO,EACP,QAAQ,EACR,cAAc,EACd,iBAAiB,EACjB,yBAAyB,EACzB,QAAQ,EACR,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,iCAAiC,IAAI,oCAAoC,EACzE,yBAAyB,IAAI,4BAA4B,EACzD,YAAY,EACZ,wBAAwB,EACxB,mCAAmC,EACnC,8BAA8B,EAC9B,kBAAkB,EAClB,yBAAyB,EACzB,uCAAuC,EACvC,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,aAAa,EACb,WAAW,GACZ,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAoBA,YAAY,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EACL,sBAAsB,EACtB,+BAA+B,EAC/B,2BAA2B,EAC3B,wBAAwB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,YAAY,EACZ,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,sBAAsB,EACtB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,MAAM,EACN,UAAU,EACV,YAAY,EACZ,sBAAsB,EACtB,sBAAsB,EACtB,iBAAiB,EACjB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,WAAW,EACX,UAAU,EACV,kBAAkB,EAClB,aAAa,EACb,gBAAgB,EAChB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,IAAI,EACJ,eAAe,EACf,gBAAgB,EAChB,SAAS,EACT,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,wBAAwB,EACxB,aAAa,EACb,eAAe,EACf,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,eAAe,EACf,WAAW,EACX,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,SAAS,EACT,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,cAAc,EACd,wBAAwB,EACxB,yBAAyB,EACzB,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,cAAc,EACd,yBAAyB,EACzB,oBAAoB,EACpB,yBAAyB,EACzB,uBAAuB,EACvB,oBAAoB,EACpB,mBAAmB,EACnB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,cAAc,EACd,kBAAkB,EAClB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,oCAAoC,EACpC,qCAAqC,EACrC,iCAAiC,EACjC,oBAAoB,EACpB,sBAAsB,EACtB,4BAA4B,EAC5B,qBAAqB,EACrB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,2BAA2B,EAC3B,yBAAyB,EACzB,mBAAmB,EACnB,qBAAqB,EACrB,iBAAiB,EACjB,oBAAoB,EACpB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,sBAAsB,EACtB,qBAAqB,EACrB,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,EACvB,qBAAqB,EACrB,cAAc,EACd,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,sBAAsB,EACtB,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,2BAA2B,EAC3B,0BAA0B,EAC1B,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,uBAAuB,EACvB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,wBAAwB,EACxB,8BAA8B,EAC9B,WAAW,EACX,uBAAuB,EACvB,+BAA+B,EAC/B,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE3D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,yBAAyB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,WAAW,EACX,gBAAgB,EAChB,eAAe,EACf,iBAAiB,EACjB,OAAO,EACP,mBAAmB,EACnB,oBAAoB,EACpB,iBAAiB,EACjB,SAAS,EACT,SAAS,EACT,gBAAgB,EAChB,WAAW,EACX,iBAAiB,EACjB,QAAQ,EACR,kBAAkB,EAClB,gBAAgB,EAChB,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,mCAAmC,EACnC,gBAAgB,EAChB,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,OAAO,EACP,cAAc,EACd,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAEnF,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAClF,YAAY,EACV,oBAAoB,EACpB,eAAe,EACf,eAAe,EACf,uBAAuB,EACvB,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,cAAc,EACd,eAAe,EACf,+BAA+B,EAC/B,cAAc,EACd,gBAAgB,EAChB,YAAY,EACZ,iBAAiB,EACjB,YAAY,EACZ,iBAAiB,EACjB,qBAAqB,EACrB,eAAe,EACf,kBAAkB,EAClB,eAAe,EACf,GAAG,EACH,KAAK,EACL,gBAAgB,EAChB,IAAI,EACJ,GAAG,EACH,oBAAoB,EACpB,qBAAqB,EACrB,GAAG,EACH,iBAAiB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,eAAe,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAEnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,MAAM,sCAAsC,CAAC;AAE5E,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1E,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,qBAAqB,EACrB,sBAAsB,EACtB,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,cAAc,GACf,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AACrE,YAAY,EACV,gBAAgB,EAChB,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,gBAAgB,EAChB,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,kBAAkB,EAClB,iBAAiB,EACjB,wBAAwB,EACxB,iCAAiC,EACjC,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,WAAW,GACZ,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,gBAAgB,EAChB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAQ9B,OAAO,EACL,0BAA0B,EAC1B,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,0BAA0B,EAC1B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,2BAA2B,EAC3B,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,uBAAuB,EACvB,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,wBAAwB,EACxB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,GACtB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EAAE,wBAAwB,EAAE,MAAM,wBAAwB,CAAC;AAElE,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,UAAU,GACX,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,8BAA8B,EAC9B,oBAAoB,EACpB,gCAAgC,EAChC,iCAAiC,EACjC,0BAA0B,EAC1B,mCAAmC,EACnC,YAAY,EACZ,UAAU,EACV,UAAU,EACV,iCAAiC,EACjC,gBAAgB,EAChB,iBAAiB,EACjB,qBAAqB,EACrB,6BAA6B,EAC7B,cAAc,EACd,iBAAiB,EACjB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,wBAAwB,EACxB,2BAA2B,EAC3B,qBAAqB,EACrB,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,mBAAmB,EACnB,UAAU,EACV,qCAAqC,EACrC,kBAAkB,EAClB,iBAAiB,EACjB,qBAAqB,EACrB,gBAAgB,EAChB,wCAAwC,GACzC,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EACV,OAAO,EACP,SAAS,EACT,YAAY,EACZ,eAAe,EACf,cAAc,EACd,IAAI,EACJ,YAAY,EACZ,QAAQ,EACR,WAAW,EACX,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,YAAY,EACZ,MAAM,EACN,eAAe,GAChB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACL,eAAe,EACf,qBAAqB,EACrB,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,uBAAuB,EACvB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,0BAA0B,CAAC;AAClC,YAAY,EACV,mBAAmB,EACnB,yBAAyB,EACzB,aAAa,EACb,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD,YAAY,EACV,YAAY,EACZ,eAAe,EACf,iBAAiB,GAClB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,GACxB,MAAM,yBAAyB,CAAC;AAEjC,cAAc,kBAAkB,CAAC;AACjC,YAAY,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAEtE,OAAO,EAAE,sBAAsB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC7E,YAAY,EACV,2BAA2B,EAC3B,kCAAkC,EAClC,2BAA2B,EAC3B,cAAc,EACd,aAAa,EACb,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,wBAAwB,EACxB,eAAe,EACf,2BAA2B,EAC3B,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,uBAAuB,EACvB,+BAA+B,EAC/B,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,UAAU,GACX,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,gCAAgC,EAChC,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,EACjB,YAAY,EACZ,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AAWzB,YAAY,EACV,WAAW,EACX,aAAa,EACb,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,UAAU,GACX,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAEL,0BAA0B,EAE1B,kBAAkB,EAClB,sBAAsB,EAEtB,iBAAiB,EACjB,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,UAAU,EACV,eAAe,EACf,sBAAsB,EACtB,SAAS,EACT,cAAc,EAEd,cAAc,EACd,aAAa,EAEb,sBAAsB,EACtB,YAAY,EAEZ,gBAAgB,EAChB,gBAAgB,EAEhB,WAAW,EAEX,uBAAuB,EAEvB,0BAA0B,EAC1B,uBAAuB,EACvB,sBAAsB,EACtB,2BAA2B,EAC3B,4BAA4B,EAC5B,kBAAkB,EAElB,sBAAsB,EACtB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,EACnB,4BAA4B,EAC5B,2BAA2B,EAC3B,gBAAgB,EAChB,mBAAmB,EACnB,oBAAoB,EACpB,iCAAiC,EAEjC,wBAAwB,EACxB,iBAAiB,EACjB,cAAc,EAEd,0BAA0B,EAC1B,qBAAqB,EACrB,4BAA4B,EAC5B,6BAA6B,EAC7B,yBAAyB,EAEzB,MAAM,EACN,eAAe,EACf,mBAAmB,EACnB,kBAAkB,EAClB,cAAc,EACd,WAAW,EACX,WAAW,EACX,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,eAAe,GAChB,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,aAAa,EACb,aAAa,EACb,uBAAuB,EACvB,iBAAiB,EACjB,aAAa,EACb,YAAY,EACZ,eAAe,GAChB,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EACL,OAAO,EACP,QAAQ,EACR,cAAc,EACd,iBAAiB,EACjB,yBAAyB,EACzB,QAAQ,EACR,eAAe,EACf,0BAA0B,EAC1B,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,iCAAiC,IAAI,oCAAoC,EACzE,yBAAyB,IAAI,4BAA4B,EACzD,YAAY,EACZ,wBAAwB,EACxB,mCAAmC,EACnC,8BAA8B,EAC9B,kBAAkB,EAClB,yBAAyB,EACzB,uCAAuC,EACvC,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,0BAA0B,EAC1B,oBAAoB,EACpB,0BAA0B,EAC1B,sBAAsB,EACtB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC7B,aAAa,EACb,WAAW,GACZ,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,4BAA4B,EAC5B,6BAA6B,EAC7B,wBAAwB,EACxB,mBAAmB,EACnB,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,kBAAkB,EAClB,wBAAwB,EACxB,oBAAoB,EACpB,6BAA6B,EAC7B,6BAA6B,EAC7B,aAAa,EACb,uBAAuB,EACvB,kBAAkB,EAClB,eAAe,EACf,mCAAmC,GACpC,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,6BAA6B,GAC9B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,kBAAkB,EAClB,yBAAyB,EACzB,oBAAoB,EACpB,8BAA8B,GAC/B,MAAM,wBAAwB,CAAC;AAChC,YAAY,EACV,+BAA+B,EAC/B,wBAAwB,EACxB,uBAAuB,EACvB,mBAAmB,EACnB,yBAAyB,EACzB,yBAAyB,EACzB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,6BAA6B,EAC7B,eAAe,EACf,wBAAwB,EACxB,iBAAiB,EACjB,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,oBAAoB,EACpB,uBAAuB,EACvB,oBAAoB,EACpB,8BAA8B,EAC9B,yBAAyB,EACzB,uBAAuB,EACvB,8BAA8B,EAC9B,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -13,10 +13,11 @@
 //
 // When adding new exports, place them in the correct tier.
 // ════════════════════════════════════════════════════════════════════════════
+export { createRequestAdmission, requestAdmissionChallengeSchema, requestAdmissionProofSchema, withRequestAdmissionLock, } from './admission/index.js';
 // ── AI Runtime ──
-export { PromptRegistry, UsageAPIError, allKnownModels, calculateModelCost, estimateModelCost, checkPromptSecurity, buildAISecurityConfig, chunkDocument, createAIService, createAnthropicAdapter, createCostTracker, deriveLedgerUsage, createExplainabilityTracker, createInMemoryVectorStore, createOpenAIAdapter, createProviderAdapter, createRAGPipeline, createUsageAPIClient, documentChunksTable, documentsTable, findModelRate, generateWithValidation, joinAndFilterModels, runToolLoop, safeJsonStringify, zodToProviderJsonSchema, singleProviderConfig, ProviderJsonSchemaError, normalizeFinishReason, AIIncompleteOutputError, AIInvalidRequestError, AIRefusalError, } from './ai/index.js';
+export { PromptRegistry, createPromptRegistry, UsageAPIError, allKnownModels, calculateModelCost, checkGovernedBudget, estimateModelCost, checkPromptSecurity, DEFAULT_GOVERNED_ARTIFACTS_DIRECTORY, createFilesystemGovernedArtifactStore, createMemoryGovernedArtifactStore, createPlumbusRuntime, digestGovernedArtifact, resolveGovernedArtifactStore, buildAISecurityConfig, chunkDocument, createAIService, fillPromptTemplate, createAnthropicAdapter, createCostTracker, deriveLedgerUsage, createExplainabilityTracker, createInMemoryVectorStore, createOpenAIAdapter, createProviderAdapter, createRAGPipeline, createUsageAPIClient, documentChunksTable, documentsTable, findModelRate, generateWithValidation, governedReviewSubject, invokeGovernedAi, joinAndFilterModels, runToolLoop, safeJsonStringify, zodToProviderJsonSchema, singleProviderConfig, ProviderJsonSchemaError, normalizeFinishReason, AIIncompleteOutputError, AIInvalidRequestError, AIRefusalError, AIValidationError, GovernedArtifactConflictError, } from './ai/index.js';
 // ── API (HTTP route generation) ──
-export { authenticationFailureToHttp, buildAuthenticationRequest, isApiExposed, parseCookieHeader, registerAllRoutes, registerCapabilityRoute, registerStreamingRoute, resolveRequestLocale, LOCALE_COOKIE_NAME, } from './api/index.js';
+export { authenticationFailureToHttp, buildAuthenticationRequest, isApiExposed, capabilityHttpMethod, parseCookieHeader, registerAllRoutes, registerCapabilityRoute, registerStreamingRoute, resolveRequestLocale, LOCALE_COOKIE_NAME, buildIdempotencyStoreKey, createInMemoryIdempotencyStore, hashPayload, IdempotencyAbortedError, isAnonymousIdempotencyPrincipal, MAX_PAYLOAD_DEPTH, parseIdempotencyTtl, PayloadTooDeepError, principalsMatch, } from './api/index.js';
 // ── Audit ──
 export { auditRecords, createAuditService, createDatabaseAuditWriter } from './audit/index.js';
 // ── Auth ──
@@ -24,7 +25,9 @@ export { createCompositeRequestAuthenticator, createJwtAdapter, createOidcAdapte
 // ── Config Loader ──
 export { loadConfig, parseDurationToMs, validateConfig } from './config/index.js';
 // ── Data Layer ──
-export { EntityRegistry, applyMigrations, collectMaskedFieldsFromEntities, collectSchemas, createRepository, decryptFieldValue, encryptFieldValue, generateDrizzleSchema, generateSchemas, getEncryptedFields, getMaskedFields, gte, ilike, isEncryptedValue, like, lte, resolveEncryptionKey, rollbackLastMigration, sql, ENCRYPTION_PREFIX, } from './data/index.js';
+export { EntityRegistry, applyMigrations, collectMaskedFieldsFromEntities, collectSchemas, createRepository, decryptBytes, decryptFieldValue, encryptBytes, encryptFieldValue, generateDrizzleSchema, generateSchemas, getEncryptedFields, getMaskedFields, gte, ilike, isEncryptedValue, like, lte, resolveEncryptionKey, rollbackLastMigration, sql, ENCRYPTION_PREFIX, } from './data/index.js';
+// ── Approvals / human tasks ──
+export { createApprovalService, createMemoryApprovalStore, createSqlApprovalStore, } from './approvals/index.js';
 // ── Define Functions ──
 export { defineCapability } from './define/defineCapability.js';
 export { defineEntity } from './define/defineEntity.js';
@@ -35,17 +38,23 @@ export { defineTranslation } from './define/defineTranslation.js';
 export { zodInputToJsonSchema } from './schema/zod-input-to-json-schema.js';
 // ── Error Utilities ──
 export { errorToHttpResponse, errorToHttpStatus } from './errors/http.js';
-export { AIBudgetExceededError, AISecurityBlockedError, DataForbiddenError, DataInternalError, DataValidationError, EncryptionConfigError, EncryptionPayloadError, FlowCancelledError, LeaseLostError, PlumbusError, UnauthorizedError, createErrorService, isPlumbusError, } from './errors/index.js';
+export { AIBudgetExceededError, AISecurityBlockedError, GovernedAiBlockedError, BudgetExhaustedError, DataForbiddenError, DataInternalError, DataValidationError, EncryptionConfigError, EncryptionPayloadError, FlowCancelledError, LeaseLostError, PlumbusError, UnauthorizedError, createErrorService, isPlumbusError, } from './errors/index.js';
 // ── Events ──
-export { ConsumerRegistry, EventRegistry, createEventEmitter, createEventWorker, createIdempotencyService, createInMemoryQueue, createOutboxDispatcher, createRedisQueue, deadLetterTable, idempotencyTable, outboxTable, } from './events/index.js';
+export { ConsumerRegistry, EventRegistry, createEventEmitter, createEventWorker, createIdempotencyService, evaluateEventSubscriptionDelivery, createInMemoryQueue, createOutboxDispatcher, createRedisQueue, deadLetterTable, idempotencyTable, outboxTable, } from './events/index.js';
 // ── Execution Engine ──
-export { buildCapabilityRuntimeDeps, CapabilityRegistry, createExecutionContext, evaluateAccess, executeCapability, getCanonicalCapabilityName, isCanonicalCapabilityName, } from './execution/index.js';
+//
+// `createExecutionContext` is deliberately absent from this barrel: it mints
+// the platform-established actor, so it lives on the framework-internal seam
+// `@plumbus/core/runtime` (see `src/runtime-entry.ts`). Code that hosts a
+// transport or bootstraps a server imports it from there; capability bodies
+// receive a context and never build one; tests use `@plumbus/core/testing`.
+export { buildCapabilityRuntimeDeps, CapabilityRegistry, evaluateAccess, executeCapability, authorizeCapability, getCanonicalCapabilityName, isCanonicalCapabilityName, } from './execution/index.js';
 // ── Explanation ──
 export { createExplanationTracker } from './explanation/index.js';
 // ── Field Constructors ──
 export { field } from './fields/index.js';
 // ── Flows ──
-export { FlowRegistry, FlowStatus, StepStatus, assertTransition, buildHistoryEntry, computeNextRun, computeRetryDelay, createFlowEngine, createFlowScheduler, createFlowService, createFlowTriggerHandler, deadLetterFlow, executeStep, flowDeadLetterTable, flowExecutionsTable, flowSchedulesTable, generateWorkerId, isTerminal, isValidTransition, sweepFailedFlows, } from './flows/index.js';
+export { COMPILED_FLOW_CONTRACT_VERSION, CompiledFlowRegistry, DEFAULT_COMPILED_FLOWS_DIRECTORY, DEFINITION_STRATEGY_NOT_SUPPORTED, DefinitionInFlightStrategy, DefinitionStrategyNotSupportedError, FlowRegistry, FlowStatus, StepStatus, assertSupportedDefinitionStrategy, assertTransition, buildHistoryEntry, compileFlowDefinition, DEFAULT_SCHEDULE_CATCH_UP_MAX, computeNextRun, computeRetryDelay, createFlowEngine, createFlowScheduler, createFlowService, createFlowTriggerHandler, createExecutionBudgetLedger, chargeExecutionBudget, deadLetterFlow, executeStep, flowDeadLetterTable, flowDefinitionId, flowExecutionsTable, flowSchedulesTable, generateWorkerId, hydrateCompiledFlow, isTerminal, loadCompiledFlowRegistryFromDirectory, planMissedSchedule, isValidTransition, retryDeadLetteredFlow, sweepFailedFlows, tryLoadCompiledFlowRegistryFromDirectory, } from './flows/index.js';
 // ── Observability ──
 export { createChildSpan, createMetricsRegistry, createPlumbusMetrics, createStructuredLogger, withLogMasking, createTraceContext, createTracer, extractTraceFromHeaders, formatTraceparent, generateSpanId, generateTraceId, injectTraceHeaders, parseTraceparent, } from './observability/index.js';
 // ── Server Bootstrap ──
@@ -78,7 +87,7 @@ generateCapabilityBrief,
 // Capability type generation
 generateCapabilityNameType, generateCapabilityTypes, generateClientFunction, generateCopilotInstructions, generateCursorCapabilityRule, generateCursorRule, 
 // Entity type generation
-generateDataServiceMap, generateEntityBrief, generateEntityInterface, generateEntityTypeFile, generateManifestEntry, generateOpenApiPath, generateProjectBrief, generateProjectBriefFromResources, 
+generateDataServiceMap, generateEntityBrief, generateEntityInterface, generateEntityTypeFile, generateManifestEntry, generateOpenApiPath, buildGenerateOpenApiDocument, JSON_SCHEMA_2020_12_DIALECT, toJsonSchema2020, toOpenApi31Document, generateProjectBrief, generateProjectBriefFromResources, 
 // Project scaffolding
 generateProjectStructure, generateReactHook, promptTemplate, 
 // CLI verify rules
@@ -86,5 +95,9 @@ ruleCapabilityAccessPolicy, ruleCapabilityEffects, ruleEncryptedSensitiveFields,
 // Dev server
 runDev, runDoctorChecks, runFullDoctorChecks, runGovernanceRules, startDevServer, toCamelCase, toKebabCase, toPascalCase, translationTemplate, writeAgentFiles, zodTypeToString, } from './cli/index.js';
 // ── Governance Engine (advisory governance rules + policy reports) ──
-export { aiRules, apiRules, applyOverrides, architectureRules, capabilityDependencyRules, mcpRules, builtInProfiles, createGovernanceRuleEngine, createOverrideStore, evaluatePolicyProfile, formatPolicyReport, generateAllPolicyReports, generatePolicyReport, ruleCapabilityMissingAccessPolicy as govRuleCapabilityMissingAccessPolicy, ruleEntityTenantIsolation as govRuleEntityTenantIsolation, privacyRules, ruleAIWithoutExplanation, ruleApiDeprecatedWithoutReplacement, ruleApiMetadataWithoutExposure, ruleApiMissingAuth, ruleApiMissingOperationId, ruleApiPublicMutationWithoutIdempotency, ruleCrossTenantDataAccess, ruleEntityMissingDescription, ruleExcessiveAIUsage, ruleExcessiveDataRetention, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, ruleMissingFieldClassification, ruleOverlyPermissiveRoles, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, securityRules, workerRules, } from './governance/index.js';
+export { aiRules, apiRules, applyOverrides, architectureRules, capabilityDependencyRules, mcpRules, builtInProfiles, createGovernanceRuleEngine, createOverrideStore, scanForbiddenPaths, evaluatePolicyProfile, formatPolicyReport, generateAllPolicyReports, generatePolicyReport, ruleCapabilityMissingAccessPolicy as govRuleCapabilityMissingAccessPolicy, ruleEntityTenantIsolation as govRuleEntityTenantIsolation, privacyRules, ruleAIWithoutExplanation, ruleApiDeprecatedWithoutReplacement, ruleApiMetadataWithoutExposure, ruleApiMissingAuth, ruleApiMissingOperationId, ruleApiPublicMutationWithoutIdempotency, ruleCrossTenantDataAccess, ruleEntityMissingDescription, ruleExcessiveAIUsage, ruleExcessiveDataRetention, ruleExcessiveEffects, ruleExcessiveFlowBranching, ruleExcessiveFlowSteps, ruleMissingAuditConfig, ruleMissingFieldClassification, ruleOverlyPermissiveRoles, rulePersonalDataInLogs, ruleSensitiveFieldUnencrypted, securityRules, workerRules, } from './governance/index.js';
+// ── Tenancy ──
+export { DEFAULT_CORE_SCHEMA, DEFAULT_DATA_PLANE_CACHE_SIZE, DEFAULT_DATA_PLANE_POOL_SIZE, DEFAULT_PACKAGE_SCHEMA_PREFIX, DataPlaneConnectionError, DataPlaneGuardError, DataPlaneNameError, DataPlaneProvisioningError, MAX_DATA_PLANE_POOL_SIZE, UnknownTenantError, applyDataPlaneMigrations, assertSafeIdentifier, createPooledDataPlaneResolver, createSingleDataPlaneResolver, dropDataPlane, openDataPlaneConnection, provisionDataPlane, quoteIdentifier, DATA_PLANE_MIGRATE_APPLICATION_NAME, } from './tenancy/index.js';
+// ── Credential catalog (host-declared types, opaque refs; host supplies secrets) ──
+export { CREDENTIAL_REDACTED, CredentialCatalogError, createMemoryCredentialCatalog, } from './credentials/index.js';
 //# sourceMappingURL=index.js.map