@sensigo/realm 0.1.0

package/dist/engine/trace-normalizer.d.ts

@@ -0,0 +1,36 @@
+import type { AgentTraceEntry, TraceEntry, TraceNormalizationSummary } from '../types/run-record.js';
+export interface NormalizeTraceResult {
+    entries: TraceEntry[];
+    digest: string | undefined;
+    summary: TraceNormalizationSummary;
+}
+/**
+ * Canonicalizes agent-submitted trace entries in a single pass.
+ *
+ * Rules applied in order:
+ *   1. Normalize event: trim whitespace; replace empty with "unknown_event"; cap to 100 chars.
+ *   2. Drop entries whose normalized event starts with "trace." (reserved engine namespace).
+ *   3. Normalize data: keep first 20 keys; cap string values to 500 chars; drop non-primitive values.
+ *   4. Apply hard limits (first-trigger wins): max 100 entries, max 50 KB UTF-8 bytes.
+ *   5. Assign seq numbers (1-based, monotonically increasing) after filtering.
+ *   6. Append a sentinel entry if truncation occurred.
+ *
+ * Normalization precedes the reserved-prefix check so that whitespace-padded variants
+ * like "  trace.internal" are caught and dropped correctly.
+ * Byte limit uses incremental UTF-8 byte accounting: the serialized array size is
+ * maintained as a running counter rather than re-serializing the full array each
+ * iteration. The counter starts at 2 (empty JSON array `[]`) and grows by
+ * Buffer.byteLength(JSON.stringify(candidate)) + comma overhead per accepted entry.
+ * This is exact because JSON array serialization is the concatenation of independently
+ * serialized element strings separated by commas and wrapped in brackets.
+ *
+ * Invariant note: this exactness relies on current JSON serialization behavior and
+ * object construction order in this module. If serialization strategy changes,
+ * parity tests in trace-normalizer.test.ts are expected to fail and should trigger
+ * a review of the incremental byte-budget logic.
+ *
+ * Sentinel entries are exempt from the reserved-prefix drop rule.
+ * The sentinel data contains submitted, stored_before_sentinel, discarded, and reason fields.
+ */
+export declare function normalizeTrace(input: AgentTraceEntry[]): NormalizeTraceResult;
+//# sourceMappingURL=trace-normalizer.d.ts.map

package/dist/engine/trace-normalizer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-normalizer.d.ts","sourceRoot":"","sources":["../../src/engine/trace-normalizer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,eAAe,EACf,UAAU,EACV,yBAAyB,EAC1B,MAAM,wBAAwB,CAAC;AAuChC,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,OAAO,EAAE,yBAAyB,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,eAAe,EAAE,GAAG,oBAAoB,CA+F7E"}

package/dist/engine/trace-normalizer.js

@@ -0,0 +1,146 @@
+// trace-normalizer.ts — Deterministic single-pass canonicalization for agent-submitted trace entries.
+import { createHash } from 'node:crypto';
+const MAX_ENTRIES = 100;
+const MAX_BYTES = 50 * 1024; // 50 KB
+const MAX_EVENT_LENGTH = 100;
+const MAX_DATA_KEYS = 20;
+const MAX_STRING_VALUE = 500;
+const RESERVED_PREFIX = 'trace.';
+const SENTINEL_EVENT = 'trace.truncated';
+function normalizeEvent(raw) {
+    const trimmed = raw.trim();
+    return trimmed.length === 0 ? 'unknown_event' : trimmed.slice(0, MAX_EVENT_LENGTH);
+}
+function normalizeData(raw) {
+    if (raw === undefined)
+        return undefined;
+    const keys = Object.keys(raw).slice(0, MAX_DATA_KEYS);
+    const result = {};
+    for (const key of keys) {
+        const v = raw[key];
+        if (v === null) {
+            result[key] = null;
+        }
+        else if (typeof v === 'boolean') {
+            result[key] = v;
+        }
+        else if (typeof v === 'number') {
+            result[key] = v;
+        }
+        else if (typeof v === 'string') {
+            result[key] = v.slice(0, MAX_STRING_VALUE);
+        }
+        // Other types (object, array, undefined) are dropped silently.
+    }
+    return Object.keys(result).length > 0 ? result : undefined;
+}
+/**
+ * Canonicalizes agent-submitted trace entries in a single pass.
+ *
+ * Rules applied in order:
+ *   1. Normalize event: trim whitespace; replace empty with "unknown_event"; cap to 100 chars.
+ *   2. Drop entries whose normalized event starts with "trace." (reserved engine namespace).
+ *   3. Normalize data: keep first 20 keys; cap string values to 500 chars; drop non-primitive values.
+ *   4. Apply hard limits (first-trigger wins): max 100 entries, max 50 KB UTF-8 bytes.
+ *   5. Assign seq numbers (1-based, monotonically increasing) after filtering.
+ *   6. Append a sentinel entry if truncation occurred.
+ *
+ * Normalization precedes the reserved-prefix check so that whitespace-padded variants
+ * like "  trace.internal" are caught and dropped correctly.
+ * Byte limit uses incremental UTF-8 byte accounting: the serialized array size is
+ * maintained as a running counter rather than re-serializing the full array each
+ * iteration. The counter starts at 2 (empty JSON array `[]`) and grows by
+ * Buffer.byteLength(JSON.stringify(candidate)) + comma overhead per accepted entry.
+ * This is exact because JSON array serialization is the concatenation of independently
+ * serialized element strings separated by commas and wrapped in brackets.
+ *
+ * Invariant note: this exactness relies on current JSON serialization behavior and
+ * object construction order in this module. If serialization strategy changes,
+ * parity tests in trace-normalizer.test.ts are expected to fail and should trigger
+ * a review of the incremental byte-budget logic.
+ *
+ * Sentinel entries are exempt from the reserved-prefix drop rule.
+ * The sentinel data contains submitted, stored_before_sentinel, discarded, and reason fields.
+ */
+export function normalizeTrace(input) {
+    const submittedEntries = input.length;
+    let discardedReserved = 0;
+    let discardedOverflow = 0;
+    let truncated = false;
+    let truncationReason;
+    const stored = [];
+    // Incremental UTF-8 byte accounting for the serialized array form.
+    // Starts at 2 for the empty array (`[]`); grows by candidateBytes + commaBytes on each accept.
+    let currentArrayBytes = 2;
+    for (const entry of input) {
+        // Normalize event first so whitespace-padded reserved-prefix events are caught below.
+        const event = normalizeEvent(entry.event);
+        // Drop entries whose normalized event starts with the reserved engine prefix.
+        if (event.startsWith(RESERVED_PREFIX)) {
+            discardedReserved++;
+            continue;
+        }
+        // First-trigger: once truncated, all remaining valid entries count as overflow.
+        if (truncated) {
+            discardedOverflow++;
+            continue;
+        }
+        const data = normalizeData(entry.data);
+        const candidate = {
+            seq: stored.length + 1,
+            event,
+            ...(entry.timestamp !== undefined ? { timestamp: entry.timestamp } : {}),
+            ...(data !== undefined ? { data } : {}),
+        };
+        // Count limit check (evaluated before byte limit — first-trigger wins).
+        if (stored.length >= MAX_ENTRIES) {
+            truncated = true;
+            truncationReason = 'count_limit';
+            discardedOverflow++;
+            continue;
+        }
+        // Byte limit check: compute candidate bytes once and check the prospective array total.
+        // Incrementally tracking the array byte count is exact because JSON.stringify on an array
+        // equals '[' + elements.join(',') + ']' — element serializations are independent of context.
+        const candidateStr = JSON.stringify(candidate);
+        const candidateBytes = Buffer.byteLength(candidateStr, 'utf8');
+        const commaBytes = stored.length > 0 ? 1 : 0;
+        if (currentArrayBytes + commaBytes + candidateBytes > MAX_BYTES) {
+            truncated = true;
+            truncationReason = 'byte_limit';
+            discardedOverflow++;
+            continue;
+        }
+        currentArrayBytes += commaBytes + candidateBytes;
+        stored.push(candidate);
+    }
+    // Append engine sentinel if truncation occurred. Sentinel is exempt from reserved-prefix drop.
+    if (truncated) {
+        const sentinel = {
+            seq: stored.length + 1,
+            event: SENTINEL_EVENT,
+            data: {
+                submitted: submittedEntries,
+                stored_before_sentinel: stored.length,
+                discarded: discardedReserved + discardedOverflow,
+                reason: truncationReason,
+            },
+        };
+        stored.push(sentinel);
+    }
+    const discardedEntries = discardedReserved + discardedOverflow;
+    const summary = {
+        submitted_entries: submittedEntries,
+        stored_entries: stored.length,
+        discarded_entries: discardedEntries,
+        discarded_reserved_event_entries: discardedReserved,
+        discarded_overflow_entries: discardedOverflow,
+        truncated,
+        ...(truncationReason !== undefined ? { truncation_reason: truncationReason } : {}),
+    };
+    const digest = stored.length > 0
+        ? createHash('sha256').update(JSON.stringify(stored)).digest('hex')
+        : undefined;
+    return { entries: stored, digest, summary };
+}
+//# sourceMappingURL=trace-normalizer.js.map

package/dist/engine/trace-normalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-normalizer.js","sourceRoot":"","sources":["../../src/engine/trace-normalizer.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,QAAQ;AACrC,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,eAAe,GAAG,QAAQ,CAAC;AACjC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;AACrF,CAAC;AAID,SAAS,aAAa,CACpB,GAAwC;IAExC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,MAAM,GAAiC,EAAE,CAAC;IAChD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;QACnB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACrB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC;aAAM,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QAC7C,CAAC;QACD,+DAA+D;IACjE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAQD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,cAAc,CAAC,KAAwB;IACrD,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,CAAC;IACtC,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAC1B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,gBAA0D,CAAC;IAE/D,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,mEAAmE;IACnE,+FAA+F;IAC/F,IAAI,iBAAiB,GAAG,CAAC,CAAC;IAE1B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,sFAAsF;QACtF,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAE1C,8EAA8E;QAC9E,IAAI,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,CAAC;YACtC,iBAAiB,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,gFAAgF;QAChF,IAAI,SAAS,EAAE,CAAC;YACd,iBAAiB,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAA2C,CAAC,CAAC;QAE9E,MAAM,SAAS,GAAe;YAC5B,GAAG,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;YACtB,KAAK;YACL,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxC,CAAC;QAEF,wEAAwE;QACxE,IAAI,MAAM,CAAC,MAAM,IAAI,WAAW,EAAE,CAAC;YACjC,SAAS,GAAG,IAAI,CAAC;YACjB,gBAAgB,GAAG,aAAa,CAAC;YACjC,iBAAiB,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,wFAAwF;QACxF,0FAA0F;QAC1F,6FAA6F;QAC7F,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QAC/C,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,iBAAiB,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,EAAE,CAAC;YAChE,SAAS,GAAG,IAAI,CAAC;YACjB,gBAAgB,GAAG,YAAY,CAAC;YAChC,iBAAiB,EAAE,CAAC;YACpB,SAAS;QACX,CAAC;QAED,iBAAiB,IAAI,UAAU,GAAG,cAAc,CAAC;QACjD,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;IAED,+FAA+F;IAC/F,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,QAAQ,GAAe;YAC3B,GAAG,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC;YACtB,KAAK,EAAE,cAAc;YACrB,IAAI,EAAE;gBACJ,SAAS,EAAE,gBAAgB;gBAC3B,sBAAsB,EAAE,MAAM,CAAC,MAAM;gBACrC,SAAS,EAAE,iBAAiB,GAAG,iBAAiB;gBAChD,MAAM,EAAE,gBAAiB;aAC1B;SACF,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,gBAAgB,GAAG,iBAAiB,GAAG,iBAAiB,CAAC;IAE/D,MAAM,OAAO,GAA8B;QACzC,iBAAiB,EAAE,gBAAgB;QACnC,cAAc,EAAE,MAAM,CAAC,MAAM;QAC7B,iBAAiB,EAAE,gBAAgB;QACnC,gCAAgC,EAAE,iBAAiB;QACnD,0BAA0B,EAAE,iBAAiB;QAC7C,SAAS;QACT,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnF,CAAC;IAEF,MAAM,MAAM,GACV,MAAM,CAAC,MAAM,GAAG,CAAC;QACf,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;QACnE,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC9C,CAAC"}

package/dist/engine/trace-policy.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Monotonic version identifier for the canonical trace policy.
+ * Increment when any limit, prefix rule, or truncation behavior changes.
+ */
+export declare const TRACE_POLICY_VERSION: "v1";
+export type TracePolicyVersion = typeof TRACE_POLICY_VERSION;
+/** Canonical descriptor of the engine's trace normalization policy. */
+export interface TracePolicyDescriptor {
+    /** Monotonic version string. Increment on any semantic change. */
+    version: TracePolicyVersion;
+    /**
+     * Maximum number of entries accepted into a normalized trace (before the sentinel entry).
+     * Matches the MAX_ENTRIES constant in trace-normalizer.ts.
+     */
+    maxStoredEntries: number;
+    /**
+     * Maximum UTF-8 byte size of the serialized stored-entries array (brackets + commas included).
+     * Matches the MAX_BYTES constant in trace-normalizer.ts.
+     */
+    maxSerializedBytes: number;
+    /**
+     * Normalized event prefix reserved for engine use.
+     * Entries whose normalized event starts with this prefix are dropped during normalization.
+     */
+    reservedEventPrefix: string;
+    /**
+     * Event name used for the sentinel entry appended when truncation occurs.
+     * Exempt from the reserved-prefix drop rule.
+     */
+    sentinelEvent: string;
+    /**
+     * Describes how truncation is triggered.
+     * 'first_trigger': the first limit hit (count or bytes) ends acceptance of further entries.
+     */
+    truncationBehavior: 'first_trigger';
+}
+/**
+ * Canonical trace policy. These values are the single authoritative source for
+ * trace normalization limits. Kept in sync with trace-normalizer.ts constants.
+ *
+ * When updating any limit in trace-normalizer.ts:
+ *   1. Update the matching field here.
+ *   2. Bump TRACE_POLICY_VERSION.
+ *   3. Update cloud adapters to recognize the new version.
+ */
+export declare const TRACE_POLICY: TracePolicyDescriptor;
+/**
+ * SHA-256 hash of the canonical policy descriptor (deterministically key-sorted JSON).
+ * Use as `engine_policy_hash` in cloud audit records.
+ * Recomputed on each process start; stable for a given TRACE_POLICY value.
+ */
+export declare const TRACE_POLICY_HASH: string;
+//# sourceMappingURL=trace-policy.d.ts.map

package/dist/engine/trace-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-policy.d.ts","sourceRoot":"","sources":["../../src/engine/trace-policy.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAG,IAAa,CAAC;AAElD,MAAM,MAAM,kBAAkB,GAAG,OAAO,oBAAoB,CAAC;AAE7D,uEAAuE;AACvE,MAAM,WAAW,qBAAqB;IACpC,kEAAkE;IAClE,OAAO,EAAE,kBAAkB,CAAC;IAC5B;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,mBAAmB,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,kBAAkB,EAAE,eAAe,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,YAAY,EAAE,qBAO1B,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAMhB,CAAC"}

package/dist/engine/trace-policy.js

@@ -0,0 +1,35 @@
+// trace-policy.ts — Versioned canonical trace policy descriptor.
+// This module is the engine's authoritative contract for trace semantics.
+// Cloud adapters MUST consume this descriptor rather than duplicating limits manually.
+import { createHash } from 'node:crypto';
+/**
+ * Monotonic version identifier for the canonical trace policy.
+ * Increment when any limit, prefix rule, or truncation behavior changes.
+ */
+export const TRACE_POLICY_VERSION = 'v1';
+/**
+ * Canonical trace policy. These values are the single authoritative source for
+ * trace normalization limits. Kept in sync with trace-normalizer.ts constants.
+ *
+ * When updating any limit in trace-normalizer.ts:
+ *   1. Update the matching field here.
+ *   2. Bump TRACE_POLICY_VERSION.
+ *   3. Update cloud adapters to recognize the new version.
+ */
+export const TRACE_POLICY = {
+    version: TRACE_POLICY_VERSION,
+    maxStoredEntries: 100,
+    maxSerializedBytes: 50 * 1024, // 50 KB
+    reservedEventPrefix: 'trace.',
+    sentinelEvent: 'trace.truncated',
+    truncationBehavior: 'first_trigger',
+};
+/**
+ * SHA-256 hash of the canonical policy descriptor (deterministically key-sorted JSON).
+ * Use as `engine_policy_hash` in cloud audit records.
+ * Recomputed on each process start; stable for a given TRACE_POLICY value.
+ */
+export const TRACE_POLICY_HASH = createHash('sha256')
+    .update(JSON.stringify(Object.fromEntries(Object.entries(TRACE_POLICY).sort(([a], [b]) => a.localeCompare(b)))))
+    .digest('hex');
+//# sourceMappingURL=trace-policy.js.map

package/dist/engine/trace-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-policy.js","sourceRoot":"","sources":["../../src/engine/trace-policy.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,0EAA0E;AAC1E,uFAAuF;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;GAGG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAa,CAAC;AAmClD;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,YAAY,GAA0B;IACjD,OAAO,EAAE,oBAAoB;IAC7B,gBAAgB,EAAE,GAAG;IACrB,kBAAkB,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ;IACvC,mBAAmB,EAAE,QAAQ;IAC7B,aAAa,EAAE,iBAAiB;IAChC,kBAAkB,EAAE,eAAe;CACpC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAW,UAAU,CAAC,QAAQ,CAAC;KAC1D,MAAM,CACL,IAAI,CAAC,SAAS,CACZ,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CACxF,CACF;KACA,MAAM,CAAC,KAAK,CAAC,CAAC"}

package/dist/engine/workflow-context-loader.d.ts

@@ -0,0 +1,9 @@
+import type { WorkflowDefinition } from '../types/workflow-definition.js';
+import type { WorkflowContextSnapshot } from '../types/run-record.js';
+/**
+ * Reads all workflow_context entries from the workflow definition.
+ * Returns a map of entry name → snapshot. If a file cannot be read,
+ * the snapshot records the error and uses empty string as content.
+ */
+export declare function loadWorkflowContext(definition: WorkflowDefinition): Promise<Record<string, WorkflowContextSnapshot>>;
+//# sourceMappingURL=workflow-context-loader.d.ts.map

package/dist/engine/workflow-context-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-context-loader.d.ts","sourceRoot":"","sources":["../../src/engine/workflow-context-loader.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAEtE;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,kBAAkB,GAC7B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,CA8BlD"}

package/dist/engine/workflow-context-loader.js

@@ -0,0 +1,41 @@
+// Loads workflow_context entries declared in the workflow definition.
+// Called once at run start. On file read failure, records an error snapshot
+// and continues — execution is never aborted by a context load failure.
+import * as fs from 'node:fs/promises';
+import * as crypto from 'node:crypto';
+/**
+ * Reads all workflow_context entries from the workflow definition.
+ * Returns a map of entry name → snapshot. If a file cannot be read,
+ * the snapshot records the error and uses empty string as content.
+ */
+export async function loadWorkflowContext(definition) {
+    const entries = definition.workflow_context;
+    if (!entries || Object.keys(entries).length === 0)
+        return {};
+    const snapshots = {};
+    const loadedAt = new Date().toISOString();
+    for (const [name, entry] of Object.entries(entries)) {
+        const absolutePath = entry.source.path;
+        try {
+            const content = await fs.readFile(absolutePath, 'utf-8');
+            const hash = crypto.createHash('sha256').update(content).digest('hex');
+            snapshots[name] = {
+                source_path: absolutePath,
+                content,
+                content_hash: hash,
+                loaded_at: loadedAt,
+            };
+        }
+        catch (err) {
+            snapshots[name] = {
+                source_path: absolutePath,
+                content: '',
+                content_hash: '',
+                loaded_at: loadedAt,
+                error: err instanceof Error ? err.message : String(err),
+            };
+        }
+    }
+    return snapshots;
+}
+//# sourceMappingURL=workflow-context-loader.js.map

package/dist/engine/workflow-context-loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-context-loader.js","sourceRoot":"","sources":["../../src/engine/workflow-context-loader.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAItC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAA8B;IAE9B,MAAM,OAAO,GAAG,UAAU,CAAC,gBAAgB,CAAC;IAC5C,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE7D,MAAM,SAAS,GAA4C,EAAE,CAAC;IAC9D,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACzD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,SAAS,CAAC,IAAI,CAAC,GAAG;gBAChB,WAAW,EAAE,YAAY;gBACzB,OAAO;gBACP,YAAY,EAAE,IAAI;gBAClB,SAAS,EAAE,QAAQ;aACpB,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS,CAAC,IAAI,CAAC,GAAG;gBAChB,WAAW,EAAE,YAAY;gBACzB,OAAO,EAAE,EAAE;gBACX,YAAY,EAAE,EAAE;gBAChB,SAAS,EAAE,QAAQ;gBACnB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/evidence/snapshot.d.ts

@@ -0,0 +1,38 @@
+import type { EvidenceSnapshot, StepDiagnostics, AgentTraceEntry } from '../types/run-record.js';
+import type { ToolCallRecord } from '../types/mcp-types.js';
+import type { NormalizeTraceResult } from '../engine/trace-normalizer.js';
+export interface CaptureEvidenceParams {
+    stepId: string;
+    startedAt: Date;
+    completedAt: Date;
+    input: Record<string, unknown>;
+    output: Record<string, unknown>;
+    error?: string;
+    diagnostics?: StepDiagnostics;
+    agentProfile?: string;
+    agentProfileHash?: string;
+    resolvedParams?: Record<string, unknown>;
+    /** MCP tool calls made during this step. Absent = callStep path; present = callStepWithTools path. */
+    toolCalls?: ToolCallRecord[];
+    /**
+     * Agent-submitted trace entries. When present (even empty array), the normalizer runs
+     * and trace_summary is always recorded. Entries surviving normalization are stored as trace.
+     * evidence_hash is unaffected — it covers output_summary only.
+     * Ignored when normalizedTrace is provided.
+     */
+    trace?: AgentTraceEntry[];
+    /**
+     * Pre-normalized trace result from the execution loop. When provided, used directly
+     * in place of calling normalizeTrace on raw trace entries. Allows the execution loop
+     * to run schema validation on canonical entries before evidence capture without
+     * re-normalizing. Takes precedence over the raw trace field.
+     */
+    normalizedTrace?: NormalizeTraceResult;
+}
+/** Builds an EvidenceSnapshot from step execution parameters, including a SHA-256 content hash.
+ *
+ * evidence_hash is computed from output_summary only and is unaffected by trace.
+ * trace_digest (when present) covers the canonical trace array separately.
+ */
+export declare function captureEvidence(params: CaptureEvidenceParams): EvidenceSnapshot;
+//# sourceMappingURL=snapshot.d.ts.map

package/dist/evidence/snapshot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.d.ts","sourceRoot":"","sources":["../../src/evidence/snapshot.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACjG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAE1E,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,EAAE,IAAI,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,eAAe,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACzC,sGAAsG;IACtG,SAAS,CAAC,EAAE,cAAc,EAAE,CAAC;IAC7B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,eAAe,EAAE,CAAC;IAC1B;;;;;OAKG;IACH,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACxC;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,qBAAqB,GAAG,gBAAgB,CA0C/E"}

package/dist/evidence/snapshot.js

@@ -0,0 +1,53 @@
+// Standalone evidence capture utility — builds an EvidenceSnapshot from step execution data.
+import { createHash } from 'node:crypto';
+import { normalizeTrace } from '../engine/trace-normalizer.js';
+/** Builds an EvidenceSnapshot from step execution parameters, including a SHA-256 content hash.
+ *
+ * evidence_hash is computed from output_summary only and is unaffected by trace.
+ * trace_digest (when present) covers the canonical trace array separately.
+ */
+export function captureEvidence(params) {
+    // evidence_hash: hash of output only — behavior unchanged.
+    const evidenceHash = createHash('sha256').update(JSON.stringify(params.output)).digest('hex');
+    // Trace normalization: prefer pre-normalized result when available (avoids double normalization
+    // when the execution loop already normalized for schema validation). Fall back to raw trace.
+    let traceEntry = {};
+    if (params.normalizedTrace !== undefined) {
+        const { entries, digest, summary } = params.normalizedTrace;
+        if (entries.length > 0 && digest !== undefined) {
+            traceEntry = { trace: entries, trace_digest: digest, trace_summary: summary };
+        }
+        else {
+            traceEntry = { trace_summary: summary };
+        }
+    }
+    else if (params.trace !== undefined) {
+        const { entries, digest, summary } = normalizeTrace(params.trace);
+        if (entries.length > 0 && digest !== undefined) {
+            traceEntry = { trace: entries, trace_digest: digest, trace_summary: summary };
+        }
+        else {
+            traceEntry = { trace_summary: summary };
+        }
+    }
+    return {
+        step_id: params.stepId,
+        started_at: params.startedAt.toISOString(),
+        completed_at: params.completedAt.toISOString(),
+        duration_ms: params.completedAt.getTime() - params.startedAt.getTime(),
+        input_summary: params.input,
+        output_summary: params.output,
+        status: params.error !== undefined ? 'error' : 'success',
+        ...(params.error !== undefined ? { error: params.error } : {}),
+        evidence_hash: evidenceHash,
+        ...(params.diagnostics !== undefined ? { diagnostics: params.diagnostics } : {}),
+        ...(params.agentProfile !== undefined ? { agent_profile: params.agentProfile } : {}),
+        ...(params.agentProfileHash !== undefined
+            ? { agent_profile_hash: params.agentProfileHash }
+            : {}),
+        ...(params.resolvedParams !== undefined ? { resolved_params: params.resolvedParams } : {}),
+        ...(params.toolCalls !== undefined ? { tool_calls: params.toolCalls } : {}),
+        ...traceEntry,
+    };
+}
+//# sourceMappingURL=snapshot.js.map

package/dist/evidence/snapshot.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snapshot.js","sourceRoot":"","sources":["../../src/evidence/snapshot.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAgC/D;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,MAA6B;IAC3D,2DAA2D;IAC3D,MAAM,YAAY,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAE9F,gGAAgG;IAChG,6FAA6F;IAC7F,IAAI,UAAU,GAAuE,EAAE,CAAC;IACxF,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC;QAC5D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/C,UAAU,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/C,UAAU,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM;QACtB,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE;QAC1C,YAAY,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE;QAC9C,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE;QACtE,aAAa,EAAE,MAAM,CAAC,KAAK;QAC3B,cAAc,EAAE,MAAM,CAAC,MAAM;QAC7B,MAAM,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACxD,GAAG,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,aAAa,EAAE,YAAY;QAC3B,GAAG,CAAC,MAAM,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,MAAM,CAAC,gBAAgB,KAAK,SAAS;YACvC,CAAC,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,gBAAgB,EAAE;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,MAAM,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,UAAU;KACd,CAAC;AACJ,CAAC"}

package/dist/extensions/default-registry.d.ts

@@ -0,0 +1,19 @@
+import { ExtensionRegistry } from './registry.js';
+/**
+ * Returns an ExtensionRegistry pre-populated with Realm's built-in adapters.
+ * `FileSystemAdapter` is registered under `'filesystem'`.
+ * `SlackAdapter` is registered under `'slack'` with `webhook_url` taken from the
+ * `SLACK_WEBHOOK_URL` environment variable. If the variable is absent the adapter
+ * is still registered but will fail at call time via `ADAPTER_REQUEST_FAILED`.
+ *
+ * The engine uses this automatically when no registry is provided — workflows that only
+ * use built-in adapters need no registry code at all.
+ *
+ * Use this as a starting point when you need to add your own handlers or adapters on top:
+ * ```ts
+ * const registry = createDefaultRegistry();
+ * registry.register('handler', 'my_handler', myHandler);
+ * ```
+ */
+export declare function createDefaultRegistry(): ExtensionRegistry;
+//# sourceMappingURL=default-registry.d.ts.map

package/dist/extensions/default-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-registry.d.ts","sourceRoot":"","sources":["../../src/extensions/default-registry.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAIlD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,IAAI,iBAAiB,CAWzD"}

package/dist/extensions/default-registry.js

@@ -0,0 +1,31 @@
+// default-registry.ts — pre-populates ExtensionRegistry with Realm's built-in adapters.
+// Used by the execution engine as the fallback when no registry is explicitly provided,
+// ensuring built-in adapters are always available without any developer wiring.
+import { ExtensionRegistry } from './registry.js';
+import { FileSystemAdapter } from '../adapters/file-adapter.js';
+import { SlackAdapter } from '../adapters/slack-adapter.js';
+/**
+ * Returns an ExtensionRegistry pre-populated with Realm's built-in adapters.
+ * `FileSystemAdapter` is registered under `'filesystem'`.
+ * `SlackAdapter` is registered under `'slack'` with `webhook_url` taken from the
+ * `SLACK_WEBHOOK_URL` environment variable. If the variable is absent the adapter
+ * is still registered but will fail at call time via `ADAPTER_REQUEST_FAILED`.
+ *
+ * The engine uses this automatically when no registry is provided — workflows that only
+ * use built-in adapters need no registry code at all.
+ *
+ * Use this as a starting point when you need to add your own handlers or adapters on top:
+ * ```ts
+ * const registry = createDefaultRegistry();
+ * registry.register('handler', 'my_handler', myHandler);
+ * ```
+ */
+export function createDefaultRegistry() {
+    const r = new ExtensionRegistry();
+    r.register('adapter', 'filesystem', new FileSystemAdapter('filesystem'));
+    r.register('adapter', 'slack', new SlackAdapter('slack', {
+        webhook_url: process.env['SLACK_WEBHOOK_URL'] ?? '',
+    }));
+    return r;
+}
+//# sourceMappingURL=default-registry.js.map

package/dist/extensions/default-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-registry.js","sourceRoot":"","sources":["../../src/extensions/default-registry.ts"],"names":[],"mappings":"AAAA,wFAAwF;AACxF,wFAAwF;AACxF,gFAAgF;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAE5D;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,CAAC,GAAG,IAAI,iBAAiB,EAAE,CAAC;IAClC,CAAC,CAAC,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,IAAI,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,QAAQ,CACR,SAAS,EACT,OAAO,EACP,IAAI,YAAY,CAAC,OAAO,EAAE;QACxB,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,EAAE;KACpD,CAAC,CACH,CAAC;IACF,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/extensions/processor.d.ts

@@ -0,0 +1,13 @@
+export interface ProcessorInput {
+    text: string;
+    metadata: Record<string, unknown>;
+}
+export interface ProcessorOutput {
+    text: string;
+    metadata: Record<string, unknown>;
+}
+export interface Processor {
+    readonly id: string;
+    process(content: ProcessorInput, config: Record<string, unknown>): Promise<ProcessorOutput>;
+}
+//# sourceMappingURL=processor.d.ts.map

package/dist/extensions/processor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"processor.d.ts","sourceRoot":"","sources":["../../src/extensions/processor.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CAC7F"}

package/dist/extensions/processor.js

@@ -0,0 +1,3 @@
+// Processor — stateless content transformation in a processing pipeline.
+export {};
+//# sourceMappingURL=processor.js.map

package/dist/extensions/processor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"processor.js","sourceRoot":"","sources":["../../src/extensions/processor.ts"],"names":[],"mappings":"AAAA,yEAAyE"}

package/dist/extensions/registry.d.ts

@@ -0,0 +1,25 @@
+import type { ServiceAdapter } from './service-adapter.js';
+import type { Processor } from './processor.js';
+import type { StepHandler } from './step-handler.js';
+import type { RateLimitConfig } from '../types/workflow-definition.js';
+import type { RateLimiter } from '../adapters/rate-limiter.js';
+export declare class ExtensionRegistry {
+    private adapters;
+    private processors;
+    private handlers;
+    private rateLimiters;
+    register(type: 'adapter', name: string, impl: ServiceAdapter): void;
+    register(type: 'processor', name: string, impl: Processor): void;
+    register(type: 'handler', name: string, impl: StepHandler): void;
+    getAdapter(name: string): ServiceAdapter | undefined;
+    getProcessor(name: string): Processor | undefined;
+    getHandler(name: string): StepHandler | undefined;
+    /**
+     * Returns the RateLimiter for the given service, creating one if it does not
+     * yet exist. The limiter is keyed by service name and lives for the lifetime
+     * of the registry — callers should use a stable registry instance to get the
+     * benefit of shared rate limiting across concurrent steps.
+     */
+    getOrCreateRateLimiter(serviceName: string, config: RateLimitConfig): RateLimiter;
+}
+//# sourceMappingURL=registry.d.ts.map

package/dist/extensions/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/extensions/registry.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iCAAiC,CAAC;AACvE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAG/D,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAqC;IACrD,OAAO,CAAC,UAAU,CAAgC;IAClD,OAAO,CAAC,QAAQ,CAAkC;IAClD,OAAO,CAAC,YAAY,CAAkC;IAEtD,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,IAAI;IACnE,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI;IAChE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,IAAI;IAehE,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS;IAIpD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAIjD,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIjD;;;;;OAKG;IACH,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,GAAG,WAAW;CAYlF"}

package/dist/extensions/registry.js

@@ -0,0 +1,43 @@
+import { TokenBucketRateLimiter } from '../adapters/token-bucket.js';
+export class ExtensionRegistry {
+    adapters = new Map();
+    processors = new Map();
+    handlers = new Map();
+    rateLimiters = new Map();
+    register(type, name, impl) {
+        if (type === 'adapter') {
+            this.adapters.set(name, impl);
+        }
+        else if (type === 'processor') {
+            this.processors.set(name, impl);
+        }
+        else {
+            this.handlers.set(name, impl);
+        }
+    }
+    getAdapter(name) {
+        return this.adapters.get(name);
+    }
+    getProcessor(name) {
+        return this.processors.get(name);
+    }
+    getHandler(name) {
+        return this.handlers.get(name);
+    }
+    /**
+     * Returns the RateLimiter for the given service, creating one if it does not
+     * yet exist. The limiter is keyed by service name and lives for the lifetime
+     * of the registry — callers should use a stable registry instance to get the
+     * benefit of shared rate limiting across concurrent steps.
+     */
+    getOrCreateRateLimiter(serviceName, config) {
+        if (!this.rateLimiters.has(serviceName)) {
+            this.rateLimiters.set(serviceName, new TokenBucketRateLimiter({
+                requests_per_second: config.requests_per_second,
+                burst: config.burst ?? config.requests_per_second,
+            }));
+        }
+        return this.rateLimiters.get(serviceName);
+    }
+}
+//# sourceMappingURL=registry.js.map

package/dist/extensions/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/extensions/registry.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,MAAM,OAAO,iBAAiB;IACpB,QAAQ,GAAG,IAAI,GAAG,EAA0B,CAAC;IAC7C,UAAU,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC1C,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,YAAY,GAAG,IAAI,GAAG,EAAuB,CAAC;IAKtD,QAAQ,CACN,IAAyC,EACzC,IAAY,EACZ,IAA8C;QAE9C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAsB,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAChC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAAiB,CAAC,CAAC;QAC/C,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAmB,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,YAAY,CAAC,IAAY;QACvB,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,UAAU,CAAC,IAAY;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,sBAAsB,CAAC,WAAmB,EAAE,MAAuB;QACjE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,IAAI,CAAC,YAAY,CAAC,GAAG,CACnB,WAAW,EACX,IAAI,sBAAsB,CAAC;gBACzB,mBAAmB,EAAE,MAAM,CAAC,mBAAoB;gBAChD,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,mBAAoB;aACnD,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAE,CAAC;IAC7C,CAAC;CACF"}