@stigmer/server 3.14.0-dev.20260910084630

package/dist/domain/agentexecution/artifacts.js

@@ -0,0 +1,376 @@
+/**
+ * Attachment upload + artifact read surfaces — ports
+ * upload_attachment.go, get_artifact_content.go, and
+ * get_artifact_download_url.go.
+ *
+ * uploadAttachment pre-uploads files (>4MB inline limit) before create;
+ * the returned storage_key acts as a capability token. Keys are
+ * attachments/{ulid}/{filename} with strict bare-filename validation (a
+ * name carrying path structure is a directory-traversal vector).
+ *
+ * getArtifactContent returns bytes through the API (no CORS concerns for
+ * SDK consumers): key-prefix ownership check, CAS-blob serve-time
+ * integrity (DATA_LOSS on mismatch, only over the complete object),
+ * single-entry ZIP extraction (fflate — the ratified dependency; Node has
+ * no stdlib ZIP), 512KB default truncation.
+ *
+ * getArtifactDownloadUrl returns a time-limited direct-download URL;
+ * ownership is the artifacts/{execution_id}/ prefix OR a key listed
+ * verbatim in spec.attachments (attachment keys carry no execution id, so
+ * membership is the proof). COEXISTENCE NOTE (disclosed in the plan): on
+ * local storage the URL points at the port+1 artifact file server, which
+ * lands with #13 — the URL is correctly shaped before then, with nothing
+ * serving it on THIS server.
+ */
+import path from "node:path";
+import { ulid } from "ulidx";
+import { unzipSync } from "fflate";
+import { Code, ConnectError } from "@connectrpc/connect";
+import { AgentExecutionSchema } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/api_pb";
+import { GetArtifactContentResponseSchema, GetArtifactDownloadUrlResponseSchema, UploadAttachmentResponseSchema, } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/io_pb";
+import { ApiResourceKind } from "@stigmer/protos/ai/stigmer/commons/apiresource/apiresourcekind/api_resource_kind_pb";
+import { create } from "@bufbuild/protobuf";
+import { AgentExecutionQueryController } from "@stigmer/protos/ai/stigmer/agentic/agentexecution/v1/query_pb";
+import { internalError, invalidArgumentError, } from "../../pipeline/errors.js";
+import { authorizeDirect } from "../../pipeline/steps/authorize.js";
+import { casBlobContentMismatch } from "./filereview/cas-blob.js";
+/**
+ * Default size limit when max_bytes is unset: the first 512 KB with
+ * truncated=true when the full content exceeds it (Go
+ * DefaultMaxArtifactContentBytes).
+ */
+export const DEFAULT_MAX_ARTIFACT_CONTENT_BYTES = 512 * 1024;
+/**
+ * Default expiration for artifact download URLs — R2's presigned-URL
+ * maximum (Go DefaultArtifactURLExpiration).
+ */
+export const DEFAULT_ARTIFACT_URL_EXPIRATION_MS = 7 * 24 * 60 * 60 * 1000;
+/**
+ * Artifact-relevant extensions commonly missing from OS MIME databases
+ * (Go knownContentTypes); checked before the generic table below.
+ */
+const KNOWN_CONTENT_TYPES = new Map([
+    [".yaml", "text/yaml"],
+    [".yml", "text/yaml"],
+    [".json", "application/json"],
+    [".md", "text/markdown"],
+    [".txt", "text/plain"],
+    [".csv", "text/csv"],
+    [".xml", "application/xml"],
+    [".html", "text/html"],
+    [".zip", "application/zip"],
+    [".tar", "application/x-tar"],
+    [".gz", "application/gzip"],
+    [".py", "text/x-python"],
+    [".go", "text/x-go"],
+    [".js", "text/javascript"],
+    [".ts", "text/typescript"],
+    [".sh", "text/x-shellscript"],
+    [".toml", "application/toml"],
+]);
+/**
+ * The stand-in for Go's mime.TypeByExtension (Node has no OS MIME
+ * database binding): Go's mime package BUILTIN table verbatim, including
+ * its charset-qualified text types — the deterministic subset both
+ * editions agree on. Go additionally consults the OS mime.types database
+ * for other extensions; that residue is an accepted, recorded parity gap
+ * (everything else falls to octet-stream, Go's final default).
+ */
+const OS_MIME_FALLBACK = new Map([
+    [".avif", "image/avif"],
+    [".css", "text/css; charset=utf-8"],
+    [".gif", "image/gif"],
+    [".htm", "text/html; charset=utf-8"],
+    [".html", "text/html; charset=utf-8"],
+    [".jpeg", "image/jpeg"],
+    [".jpg", "image/jpeg"],
+    [".js", "text/javascript; charset=utf-8"],
+    [".json", "application/json"],
+    [".mjs", "text/javascript; charset=utf-8"],
+    [".pdf", "application/pdf"],
+    [".png", "image/png"],
+    [".svg", "image/svg+xml"],
+    [".wasm", "application/wasm"],
+    [".webp", "image/webp"],
+    [".xml", "text/xml; charset=utf-8"],
+]);
+// ---------------------------------------------------------------------------
+// uploadAttachment
+// ---------------------------------------------------------------------------
+export async function uploadAttachment(deps, req) {
+    // Field validation mirrors the proto's buf.validate constraints so a
+    // bypassed constraint still fails closed at the service boundary.
+    if (req.filename === "") {
+        throw invalidArgumentError("filename is required");
+    }
+    validateAttachmentFilename(req.filename);
+    if (req.content.length === 0) {
+        throw invalidArgumentError("content is required");
+    }
+    const uploadId = ulid();
+    let contentType = req.contentType;
+    if (contentType === "") {
+        // Go's UPLOAD path consults ONLY mime.TypeByExtension — never the
+        // artifact-relevant knownContentTypes table, which is a read-path
+        // (detectContentType) concern. Mirrored so stored object metadata
+        // stays edition-identical when the R2 backend (#13) starts carrying
+        // it.
+        contentType = osMimeTypeByExtension(req.filename);
+    }
+    const storageKey = `attachments/${uploadId}/${req.filename}`;
+    deps.logger.info("Uploading attachment to artifact storage", {
+        storageKey,
+        filename: req.filename,
+        contentType,
+        sizeBytes: req.content.length,
+    });
+    try {
+        await deps.artifactStorage.upload(storageKey, req.content, contentType);
+    }
+    catch (error) {
+        throw internalError(error, "failed to upload attachment");
+    }
+    deps.logger.info("Successfully uploaded attachment to storage", {
+        storageKey,
+        filename: req.filename,
+        sizeBytes: req.content.length,
+    });
+    return create(UploadAttachmentResponseSchema, { storageKey });
+}
+/**
+ * Enforces that a filename is a single bare path component: no directory
+ * separators (either flavor), no `.`/`..` traversal segments, no NUL —
+ * the name becomes part of the storage key and, on the local backend, an
+ * on-disk path (Go validateAttachmentFilename).
+ */
+export function validateAttachmentFilename(name) {
+    if (name.includes("/") || name.includes("\\")) {
+        throw invalidArgumentError(`filename ${JSON.stringify(name)} must not contain path separators; send a bare filename such as "report.pdf"`);
+    }
+    if (name.includes("\0")) {
+        throw invalidArgumentError("filename must not contain NUL bytes");
+    }
+    if (name === "." || name === "..") {
+        throw invalidArgumentError(`filename ${JSON.stringify(name)} must be a bare filename, not a traversal segment`);
+    }
+}
+// ---------------------------------------------------------------------------
+// getArtifactContent
+// ---------------------------------------------------------------------------
+export async function getArtifactContent(deps, req, identity) {
+    if (req.executionId === "") {
+        throw invalidArgumentError("execution_id is required");
+    }
+    if (req.storageKey === "") {
+        throw invalidArgumentError("storage_key is required");
+    }
+    // The annotation's can_view check (validate → authorize → ownership,
+    // the Java AgentExecutionGetArtifactContentHandler order; C2 Stage 4).
+    await authorizeDirect(AgentExecutionQueryController.method.getArtifactContent, deps.authorizer, identity, req);
+    // Ownership is checked on the NORMALIZED key and the normalized key is
+    // what gets served: the storage layer path-cleans `.`/`..` segments, so
+    // a raw-key prefix check would let `artifacts/{mine}/../{other}/f` pass
+    // yet resolve into another execution's artifacts. Deliberate fail-closed
+    // divergence from Go until stigmer/stigmer#858 lands there.
+    const storageKey = path.posix.normalize(req.storageKey);
+    const expectedPrefix = `artifacts/${req.executionId}/`;
+    if (!storageKey.startsWith(expectedPrefix)) {
+        deps.logger.warn("Storage key does not belong to execution - potential path traversal attempt", {
+            executionId: req.executionId,
+            storageKey: req.storageKey,
+            expectedPrefix,
+        });
+        throw invalidArgumentError("storage_key does not belong to this execution");
+    }
+    // Existence check (Go answers NotFound for any load failure here).
+    try {
+        await deps.store.getResource(ApiResourceKind.agent_execution, req.executionId, AgentExecutionSchema);
+    }
+    catch {
+        throw new ConnectError(`execution not found: ${req.executionId}`, Code.NotFound);
+    }
+    let maxBytes = Number(req.maxBytes);
+    if (maxBytes <= 0) {
+        maxBytes = DEFAULT_MAX_ARTIFACT_CONTENT_BYTES;
+    }
+    let data;
+    try {
+        data = await deps.artifactStorage.download(storageKey);
+    }
+    catch (error) {
+        throw internalError(error, "failed to read artifact content");
+    }
+    // Serve-time integrity for CAS blobs — only over the COMPLETE object
+    // (untruncated, no entry extraction); non-CAS keys fail open.
+    if (req.entryPath === "" && data.length <= maxBytes) {
+        const reason = casBlobContentMismatch(storageKey, data);
+        if (reason !== "") {
+            deps.logger.error("CAS blob failed content-address integrity check", {
+                executionId: req.executionId,
+                storageKey: req.storageKey,
+            });
+            throw new ConnectError(reason, Code.DataLoss);
+        }
+    }
+    // Single-entry ZIP extraction for directory artifacts.
+    if (req.entryPath !== "") {
+        const entryData = extractZipEntry(data, req.entryPath);
+        if (entryData === undefined) {
+            deps.logger.warn("Failed to extract entry from ZIP artifact", {
+                executionId: req.executionId,
+                storageKey: req.storageKey,
+                entryPath: req.entryPath,
+            });
+            throw new ConnectError(`entry ${JSON.stringify(req.entryPath)} not found in archive`, Code.NotFound);
+        }
+        data = entryData;
+    }
+    const totalSize = data.length;
+    let truncated = false;
+    if (totalSize > maxBytes) {
+        data = data.slice(0, maxBytes);
+        truncated = true;
+    }
+    const contentKey = req.entryPath !== "" ? req.entryPath : storageKey;
+    const contentType = detectContentType(contentKey);
+    deps.logger.info("Successfully read artifact content", {
+        executionId: req.executionId,
+        storageKey: req.storageKey,
+        entryPath: req.entryPath,
+        totalSizeBytes: totalSize,
+        returnedBytes: data.length,
+        truncated,
+        contentType,
+    });
+    return create(GetArtifactContentResponseSchema, {
+        content: data,
+        contentType,
+        totalSizeBytes: BigInt(totalSize),
+        truncated,
+    });
+}
+/**
+ * Reads a single file from an in-memory ZIP archive (Go extractZipEntry
+ * over archive/zip; here fflate's unzipSync with a name filter so only
+ * the requested entry inflates). undefined = not found / unreadable.
+ *
+ * The max_bytes guard applies AFTER inflation (both editions): a crafted
+ * entry inflates fully in memory first. Acceptable under the current
+ * trust boundary — ZIP artifacts are runner-written, and single-user OSS
+ * has no hostile tenant — revisit if artifacts ever become user-supplied.
+ */
+function extractZipEntry(zipData, entryPath) {
+    try {
+        const extracted = unzipSync(zipData, {
+            filter: (file) => file.name === entryPath,
+        });
+        return extracted[entryPath];
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * MIME type from the extension: the artifact-relevant table first, the
+ * OS-table stand-in second, octet-stream last (Go detectContentType).
+ */
+export function detectContentType(storageKey) {
+    const ext = fileExtension(storageKey);
+    if (ext === "") {
+        return "application/octet-stream";
+    }
+    return (KNOWN_CONTENT_TYPES.get(ext) ??
+        OS_MIME_FALLBACK.get(ext) ??
+        "application/octet-stream");
+}
+/**
+ * The upload path's MIME detection (Go mime.TypeByExtension +
+ * octet-stream fallback — see uploadAttachment).
+ */
+export function osMimeTypeByExtension(filename) {
+    const ext = fileExtension(filename);
+    if (ext === "") {
+        return "application/octet-stream";
+    }
+    return OS_MIME_FALLBACK.get(ext) ?? "application/octet-stream";
+}
+function fileExtension(name) {
+    const dot = name.lastIndexOf(".");
+    const slash = Math.max(name.lastIndexOf("/"), name.lastIndexOf("\\"));
+    if (dot <= slash || dot === -1) {
+        return "";
+    }
+    return name.slice(dot).toLowerCase();
+}
+// ---------------------------------------------------------------------------
+// getArtifactDownloadUrl
+// ---------------------------------------------------------------------------
+export async function getArtifactDownloadUrl(deps, req, identity) {
+    if (req.executionId === "") {
+        throw invalidArgumentError("execution_id is required");
+    }
+    if (req.storageKey === "") {
+        throw invalidArgumentError("storage_key is required");
+    }
+    // The annotation's can_view check (validate → authorize → ownership,
+    // the Java AgentExecutionGetArtifactDownloadUrlHandler order; C2 Stage 4).
+    await authorizeDirect(AgentExecutionQueryController.method.getArtifactDownloadUrl, deps.authorizer, identity, req);
+    // Load BEFORE the key check: the attachment arm needs spec.attachments,
+    // and this doubles as the existence check.
+    let execution;
+    try {
+        execution = await deps.store.getResource(ApiResourceKind.agent_execution, req.executionId, AgentExecutionSchema);
+    }
+    catch {
+        throw new ConnectError(`execution not found: ${req.executionId}`, Code.NotFound);
+    }
+    // Same normalize-before-check posture as getArtifactContent
+    // (stigmer/stigmer#858); spec.attachments membership also compares the
+    // normalized form — stored attachment keys are always clean, so a
+    // dot-segment-carrying alias of a listed key matches its verbatim row.
+    const storageKey = path.posix.normalize(req.storageKey);
+    const expectedPrefix = `artifacts/${req.executionId}/`;
+    if (!storageKey.startsWith(expectedPrefix) &&
+        !isSpecAttachmentKey(execution, storageKey)) {
+        deps.logger.warn("Storage key does not belong to execution - potential path traversal attempt", {
+            executionId: req.executionId,
+            storageKey: req.storageKey,
+            expectedPrefix,
+        });
+        throw invalidArgumentError("storage_key does not belong to this execution");
+    }
+    const expiresInMs = DEFAULT_ARTIFACT_URL_EXPIRATION_MS;
+    const expiresAt = new Date(Date.now() + expiresInMs);
+    // A browser download saves under the key's basename (already validated
+    // to be scoped to this execution); empty serves inline.
+    const downloadFilename = req.asAttachment
+        ? (storageKey.split("/").pop() ?? "")
+        : "";
+    let downloadUrl;
+    try {
+        downloadUrl = await deps.artifactStorage.getSignedUrl(storageKey, expiresInMs, downloadFilename);
+    }
+    catch (error) {
+        throw internalError(error, "failed to generate download URL");
+    }
+    deps.logger.info("Successfully generated presigned download URL for artifact", {
+        executionId: req.executionId,
+        storageKey: req.storageKey,
+        expiresAt: expiresAt.toISOString(),
+    });
+    return create(GetArtifactDownloadUrlResponseSchema, {
+        downloadUrl,
+        // RFC3339 seconds precision, Go's time.RFC3339 Format.
+        expiresAt: expiresAt.toISOString().replace(/\.\d{3}Z$/, "Z"),
+    });
+}
+/**
+ * Whether storageKey appears verbatim in spec.attachments — the ownership
+ * proof for submitted inputs (attachment keys carry no execution id;
+ * ULID-unique per upload, so membership cannot reference another
+ * execution's files).
+ */
+function isSpecAttachmentKey(execution, storageKey) {
+    return (execution.spec?.attachments ?? []).some((attachment) => attachment.storageKey === storageKey);
+}
+//# sourceMappingURL=artifacts.js.map

package/dist/domain/agentexecution/artifacts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts.js","sourceRoot":"","sources":["../../../src/domain/agentexecution/artifacts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,IAAI,EAAE,MAAM,OAAO,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACnC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6DAA6D,CAAC;AASnG,OAAO,EACL,gCAAgC,EAChC,oCAAoC,EACpC,8BAA8B,GAC/B,MAAM,4DAA4D,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qFAAqF,CAAC;AACtH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,OAAO,EAAE,6BAA6B,EAAE,MAAM,+DAA+D,CAAC;AAM9G,OAAO,EACL,aAAa,EACb,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEpE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAelE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,GAAG,IAAI,CAAC;AAE7D;;;GAGG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1E;;;GAGG;AACH,MAAM,mBAAmB,GAAgC,IAAI,GAAG,CAAC;IAC/D,CAAC,OAAO,EAAE,WAAW,CAAC;IACtB,CAAC,MAAM,EAAE,WAAW,CAAC;IACrB,CAAC,OAAO,EAAE,kBAAkB,CAAC;IAC7B,CAAC,KAAK,EAAE,eAAe,CAAC;IACxB,CAAC,MAAM,EAAE,YAAY,CAAC;IACtB,CAAC,MAAM,EAAE,UAAU,CAAC;IACpB,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAC3B,CAAC,OAAO,EAAE,WAAW,CAAC;IACtB,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAC3B,CAAC,MAAM,EAAE,mBAAmB,CAAC;IAC7B,CAAC,KAAK,EAAE,kBAAkB,CAAC;IAC3B,CAAC,KAAK,EAAE,eAAe,CAAC;IACxB,CAAC,KAAK,EAAE,WAAW,CAAC;IACpB,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAC1B,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAC1B,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAC7B,CAAC,OAAO,EAAE,kBAAkB,CAAC;CAC9B,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,gBAAgB,GAAgC,IAAI,GAAG,CAAC;IAC5D,CAAC,OAAO,EAAE,YAAY,CAAC;IACvB,CAAC,MAAM,EAAE,yBAAyB,CAAC;IACnC,CAAC,MAAM,EAAE,WAAW,CAAC;IACrB,CAAC,MAAM,EAAE,0BAA0B,CAAC;IACpC,CAAC,OAAO,EAAE,0BAA0B,CAAC;IACrC,CAAC,OAAO,EAAE,YAAY,CAAC;IACvB,CAAC,MAAM,EAAE,YAAY,CAAC;IACtB,CAAC,KAAK,EAAE,gCAAgC,CAAC;IACzC,CAAC,OAAO,EAAE,kBAAkB,CAAC;IAC7B,CAAC,MAAM,EAAE,gCAAgC,CAAC;IAC1C,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAC3B,CAAC,MAAM,EAAE,WAAW,CAAC;IACrB,CAAC,MAAM,EAAE,eAAe,CAAC;IACzB,CAAC,OAAO,EAAE,kBAAkB,CAAC;IAC7B,CAAC,OAAO,EAAE,YAAY,CAAC;IACvB,CAAC,MAAM,EAAE,yBAAyB,CAAC;CACpC,CAAC,CAAC;AAEH,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAqB,EACrB,GAA4B;IAE5B,qEAAqE;IACrE,kEAAkE;IAClE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QACxB,MAAM,oBAAoB,CAAC,sBAAsB,CAAC,CAAC;IACrD,CAAC;IACD,0BAA0B,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,oBAAoB,CAAC,qBAAqB,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,EAAE,CAAC;IACxB,IAAI,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IAClC,IAAI,WAAW,KAAK,EAAE,EAAE,CAAC;QACvB,kEAAkE;QAClE,kEAAkE;QAClE,kEAAkE;QAClE,oEAAoE;QACpE,MAAM;QACN,WAAW,GAAG,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IAED,MAAM,UAAU,GAAG,eAAe,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE;QAC3D,UAAU;QACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,WAAW;QACX,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;KAC9B,CAAC,CAAC;IAEH,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,6BAA6B,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;QAC9D,UAAU;QACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;KAC9B,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,oBAAoB,CACxB,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,8EAA8E,CAC/G,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,MAAM,oBAAoB,CAAC,qCAAqC,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,oBAAoB,CACxB,YAAY,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,mDAAmD,CACpF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,qBAAqB;AACrB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAqB,EACrB,GAA8B,EAC9B,QAAwB;IAExB,IAAI,GAAG,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC3B,MAAM,oBAAoB,CAAC,0BAA0B,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;IACxD,CAAC;IACD,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,eAAe,CACnB,6BAA6B,CAAC,MAAM,CAAC,kBAAkB,EACvD,IAAI,CAAC,UAAU,EACf,QAAQ,EACR,GAAG,CACJ,CAAC;IAEF,uEAAuE;IACvE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,4DAA4D;IAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,aAAa,GAAG,CAAC,WAAW,GAAG,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6EAA6E,EAC7E;YACE,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,cAAc;SACf,CACF,CAAC;QACF,MAAM,oBAAoB,CAAC,+CAA+C,CAAC,CAAC;IAC9E,CAAC;IAED,mEAAmE;IACnE,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAC1B,eAAe,CAAC,eAAe,EAC/B,GAAG,CAAC,WAAW,EACf,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CACpB,wBAAwB,GAAG,CAAC,WAAW,EAAE,EACzC,IAAI,CAAC,QAAQ,CACd,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;QAClB,QAAQ,GAAG,kCAAkC,CAAC;IAChD,CAAC;IAED,IAAI,IAAgB,CAAC;IACrB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACzD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IAChE,CAAC;IAED,qEAAqE;IACrE,8DAA8D;IAC9D,IAAI,GAAG,CAAC,SAAS,KAAK,EAAE,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,sBAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QACxD,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iDAAiD,EAAE;gBACnE,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B,CAAC,CAAC;YACH,MAAM,IAAI,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,uDAAuD;IACvD,IAAI,GAAG,CAAC,SAAS,KAAK,EAAE,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE;gBAC5D,WAAW,EAAE,GAAG,CAAC,WAAW;gBAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;aACzB,CAAC,CAAC;YACH,MAAM,IAAI,YAAY,CACpB,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAC7D,IAAI,CAAC,QAAQ,CACd,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,IAAI,SAAS,GAAG,KAAK,CAAC;IACtB,IAAI,SAAS,GAAG,QAAQ,EAAE,CAAC;QACzB,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC/B,SAAS,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;IACrE,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAElD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE;QACrD,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,cAAc,EAAE,SAAS;QACzB,aAAa,EAAE,IAAI,CAAC,MAAM;QAC1B,SAAS;QACT,WAAW;KACZ,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,gCAAgC,EAAE;QAC9C,OAAO,EAAE,IAAI;QACb,WAAW;QACX,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC;QACjC,SAAS;KACV,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,eAAe,CACtB,OAAmB,EACnB,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,EAAE;YACnC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;SAC1C,CAAC,CAAC;QACH,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAkB;IAClD,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,OAAO,CACL,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC;QAC5B,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC;QACzB,0BAA0B,CAC3B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;QACf,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,OAAO,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,0BAA0B,CAAC;AACjE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACtE,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QAC/B,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,yBAAyB;AACzB,8EAA8E;AAE9E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAqB,EACrB,GAAkC,EAClC,QAAwB;IAExB,IAAI,GAAG,CAAC,WAAW,KAAK,EAAE,EAAE,CAAC;QAC3B,MAAM,oBAAoB,CAAC,0BAA0B,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,oBAAoB,CAAC,yBAAyB,CAAC,CAAC;IACxD,CAAC;IACD,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,eAAe,CACnB,6BAA6B,CAAC,MAAM,CAAC,sBAAsB,EAC3D,IAAI,CAAC,UAAU,EACf,QAAQ,EACR,GAAG,CACJ,CAAC;IAEF,wEAAwE;IACxE,2CAA2C;IAC3C,IAAI,SAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CACtC,eAAe,CAAC,eAAe,EAC/B,GAAG,CAAC,WAAW,EACf,oBAAoB,CACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,YAAY,CACpB,wBAAwB,GAAG,CAAC,WAAW,EAAE,EACzC,IAAI,CAAC,QAAQ,CACd,CAAC;IACJ,CAAC;IAED,4DAA4D;IAC5D,uEAAuE;IACvE,kEAAkE;IAClE,uEAAuE;IACvE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,aAAa,GAAG,CAAC,WAAW,GAAG,CAAC;IACvD,IACE,CAAC,UAAU,CAAC,UAAU,CAAC,cAAc,CAAC;QACtC,CAAC,mBAAmB,CAAC,SAAS,EAAE,UAAU,CAAC,EAC3C,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,6EAA6E,EAC7E;YACE,WAAW,EAAE,GAAG,CAAC,WAAW;YAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;YAC1B,cAAc;SACf,CACF,CAAC;QACF,MAAM,oBAAoB,CAAC,+CAA+C,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,WAAW,GAAG,kCAAkC,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,CAAC,CAAC;IAErD,uEAAuE;IACvE,wDAAwD;IACxD,MAAM,gBAAgB,GAAG,GAAG,CAAC,YAAY;QACvC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;QACrC,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,YAAY,CACnD,UAAU,EACV,WAAW,EACX,gBAAgB,CACjB,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,IAAI,CACd,4DAA4D,EAC5D;QACE,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE;KACnC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC,oCAAoC,EAAE;QAClD,WAAW;QACX,uDAAuD;QACvD,SAAS,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;KAC7D,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,mBAAmB,CAC1B,SAAyB,EACzB,UAAkB;IAElB,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAC7C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,UAAU,KAAK,UAAU,CACrD,CAAC;AACJ,CAAC"}

package/dist/domain/agentexecution/constants.d.ts

@@ -0,0 +1,24 @@
+/**
+ * AgentExecution byte-pinned wire copy — every string a client can observe
+ * from this domain, copied character-for-character from the Go controller
+ * (pkg/domain/agentexecution/controller). Coexistence rule: the Go server
+ * is the behavioral reference; do not "improve" copy here (guidelines §2).
+ */
+/**
+ * create's engine-gate refusal (create.go engineUnavailableMessage) —
+ * kept identical across AgentExecution and WorkflowExecution so both
+ * domains present one symmetric create-boundary contract. Pinned by the
+ * conformance engine-gate test (CW-7).
+ */
+export declare const ENGINE_UNAVAILABLE_MESSAGE = "The execution engine is temporarily unavailable. Please try again shortly.";
+/**
+ * getExecutionUsageReport's unknown-execution refusal. Go
+ * (get_execution_usage_report.go) calls
+ * NotFoundError("agent execution '%s' not found", executionID) — but that
+ * helper's signature is (resource, id) rendering "%s not found: %s", so
+ * the literal '%s' and the doubled "not found" reach the wire. Ported
+ * byte-faithfully per sub-project DD-001 (owner-ratified 2026-08-24);
+ * the both-editions fix is stigmer/stigmer#859.
+ */
+export declare function executionUsageReportNotFoundMessage(executionId: string): string;
+//# sourceMappingURL=constants.d.ts.map

package/dist/domain/agentexecution/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/domain/agentexecution/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,+EACuC,CAAC;AAE/E;;;;;;;;GAQG;AACH,wBAAgB,mCAAmC,CACjD,WAAW,EAAE,MAAM,GAClB,MAAM,CAER"}

package/dist/domain/agentexecution/constants.js

@@ -0,0 +1,26 @@
+/**
+ * AgentExecution byte-pinned wire copy — every string a client can observe
+ * from this domain, copied character-for-character from the Go controller
+ * (pkg/domain/agentexecution/controller). Coexistence rule: the Go server
+ * is the behavioral reference; do not "improve" copy here (guidelines §2).
+ */
+/**
+ * create's engine-gate refusal (create.go engineUnavailableMessage) —
+ * kept identical across AgentExecution and WorkflowExecution so both
+ * domains present one symmetric create-boundary contract. Pinned by the
+ * conformance engine-gate test (CW-7).
+ */
+export const ENGINE_UNAVAILABLE_MESSAGE = "The execution engine is temporarily unavailable. Please try again shortly.";
+/**
+ * getExecutionUsageReport's unknown-execution refusal. Go
+ * (get_execution_usage_report.go) calls
+ * NotFoundError("agent execution '%s' not found", executionID) — but that
+ * helper's signature is (resource, id) rendering "%s not found: %s", so
+ * the literal '%s' and the doubled "not found" reach the wire. Ported
+ * byte-faithfully per sub-project DD-001 (owner-ratified 2026-08-24);
+ * the both-editions fix is stigmer/stigmer#859.
+ */
+export function executionUsageReportNotFoundMessage(executionId) {
+    return `agent execution '%s' not found not found: ${executionId}`;
+}
+//# sourceMappingURL=constants.js.map

package/dist/domain/agentexecution/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/domain/agentexecution/constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC,4EAA4E,CAAC;AAE/E;;;;;;;;GAQG;AACH,MAAM,UAAU,mCAAmC,CACjD,WAAmB;IAEnB,OAAO,6CAA6C,WAAW,EAAE,CAAC;AACpE,CAAC"}

package/dist/domain/agentexecution/controller.d.ts

@@ -0,0 +1,102 @@
+/**
+ * AgentExecution controller — ports pkg/domain/agentexecution/controller
+ * (command + query sides): the deepest domain's request surface. One Go
+ * controller implements both services; this module mirrors that with one
+ * deps object and one registration function.
+ *
+ * Pipeline per RPC mirrors the Go step chains character-for-character.
+ * Proven by agentexecution.conformance.test.ts
+ * (CONFORMANCE_TARGET=local) and __tests__/.
+ *
+ * Versus Stigmer Cloud, OSS excludes the Authorize, CreateIamPolicies,
+ * Publish, PublishToRedis, and TransformResponse steps (no multi-tenant
+ * auth, IAM/FGA, event publishing, or Redis here — subscribe streams ride
+ * in-memory channels per ADR 011).
+ */
+import type { ConnectRouter } from "@connectrpc/connect";
+import type { Logger } from "../../boot/logger.js";
+import type { Authorizer } from "../../extensions/authorizer.js";
+import type { ListReadScope } from "../../extensions/list-read-scope.js";
+import type { ResourceAuthorizationLifecycle } from "../../extensions/resource-authorization.js";
+import type { ResolvedGateSteps } from "../../extensions/gate-slots.js";
+import type { AgentExecutionResponseDecorator, AgentExecutionStatusObserver } from "../../extensions/status-hooks.js";
+import type { RunnerCredentialProvider } from "../../runnerauth/runner-credential-provider.js";
+import type { Store } from "../../store/interface.js";
+import type { ArtifactStorage } from "../../artifactstorage/artifact-storage.js";
+import type { ModelCatalogProvider } from "../workflow/registry/model-catalog-provider.js";
+import type { AgentLoaderProvider, ExecutionAgentInstanceCreatorProvider, SessionCreatorProvider } from "./create-steps.js";
+import type { SandboxLane } from "../../sandbox/lane.js";
+import type { ExecutionContextBuilderDeps } from "./create-execution-context-step.js";
+import type { AgentExecutionTemporalConfig } from "./temporal/config.js";
+import type { ExecutionEngineStateProvider } from "./engine.js";
+import type { StreamBroker } from "./stream-broker.js";
+export interface AgentExecutionControllerDeps {
+    readonly store: Store;
+    readonly logger: Logger;
+    /** The composed authorization seam — the Authorize step at position 1 of every chain calls it (O2, DD-007 §3). */
+    readonly authorizer: Authorizer;
+    /** The composed tuple-lifecycle driver — undefined = the shared steps no-op (C2). */
+    readonly authorizationLifecycle: ResourceAuthorizationLifecycle | undefined;
+    /** The composed summary read scope — undefined = the OSS full scan (C2 Stage 4). */
+    readonly listReadScope: ListReadScope | undefined;
+    /**
+     * The shared broadcast fabric for subscribe streams. ONE instance spans
+     * both routers (serving + in-process) — see stream-broker.ts; the
+     * composition root owns it (Go: NewStreamBroker in the controller
+     * constructor + GetStreamBroker for the Temporal activities).
+     */
+    readonly broker: StreamBroker;
+    /**
+     * The execution-engine seam (engine.ts): permanently disconnected until
+     * #18's TemporalManager flips it. Consumed by the engine gate, the
+     * lifecycle RPCs, the create/recover workflow starts, and the two HITL
+     * signal steps.
+     */
+    readonly engineState: ExecutionEngineStateProvider;
+    /**
+     * The bundled+refreshed model registry (the composition root's single
+     * instance, DD-004) — the #357/#772 tier and thinking-mode validators
+     * read it at create.
+     */
+    readonly modelRegistry: ModelCatalogProvider;
+    /** The shared artifact blob store (attachments + artifact reads). */
+    readonly artifactStorage: ArtifactStorage;
+    /**
+     * The composed runner-credential provider — RecordRunnerLineageLabels
+     * consults its vouchRunnerLineageLabels capability at create (parity
+     * entry 20260830.05). The OSS default defines no capabilities, so the
+     * step is a no-op with it.
+     */
+    readonly runnerCredentialProvider: RunnerCredentialProvider;
+    /**
+     * The in-process edges the create pipeline consumes (lazy providers —
+     * the routes↔clients cycle resolves at request time, DD-002).
+     */
+    readonly agentLoader: AgentLoaderProvider;
+    readonly agentInstanceCreator: ExecutionAgentInstanceCreatorProvider;
+    readonly sessionCreator: SessionCreatorProvider;
+    /** The shared EC-builder deps (create's step 16 + recover's recreate). */
+    readonly executionContextBuilder: ExecutionContextBuilderDeps;
+    /**
+     * The composed slot registrations (O4, blueprint 03 §3a) — this domain
+     * splices the create, recover, and submit-approval slots.
+     */
+    readonly gateSteps: ResolvedGateSteps;
+    /**
+     * The composed status-transition hooks (O4, DD-006 §3) — consumed at
+     * the five phase-transition persist sites (status-observers.ts).
+     */
+    readonly statusObservers: ReadonlyArray<AgentExecutionStatusObserver>;
+    readonly responseDecorators: ReadonlyArray<AgentExecutionResponseDecorator>;
+    /**
+     * The sandbox lane (§6d, O6): disabled on the OSS default; the create
+     * and recover chains ensure the session sandbox through it after their
+     * workflow starts.
+     */
+    readonly sandboxLane: SandboxLane;
+    /** Dispatch config — the sandbox ensure resolves target/queue through it. */
+    readonly temporalConfig: AgentExecutionTemporalConfig;
+}
+/** Registers both agentexecution services on the router (routes stage). */
+export declare function registerAgentExecutionServices(router: ConnectRouter, deps: AgentExecutionControllerDeps): void;
+//# sourceMappingURL=controller.d.ts.map

package/dist/domain/agentexecution/controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controller.d.ts","sourceRoot":"","sources":["../../../src/domain/agentexecution/controller.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,KAAK,EAAE,aAAa,EAAkB,MAAM,qBAAqB,CAAC;AAezE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gCAAgC,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AACzE,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,4CAA4C,CAAC;AACjG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAExE,OAAO,KAAK,EACV,+BAA+B,EAC/B,4BAA4B,EAC7B,MAAM,kCAAkC,CAAC;AAQ1C,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AA4B/F,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,0BAA0B,CAAC;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAO3F,OAAO,KAAK,EACV,mBAAmB,EACnB,qCAAqC,EACrC,sBAAsB,EACvB,MAAM,mBAAmB,CAAC;AAY3B,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AAEzD,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAEtF,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AACzE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAUhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AA0BvD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kHAAkH;IAClH,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,qFAAqF;IACrF,QAAQ,CAAC,sBAAsB,EAAE,8BAA8B,GAAG,SAAS,CAAC;IAC5E,oFAAoF;IACpF,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,SAAS,CAAC;IAClD;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,4BAA4B,CAAC;IACnD;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7C,qEAAqE;IACrE,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,wBAAwB,EAAE,wBAAwB,CAAC;IAC5D;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C,QAAQ,CAAC,oBAAoB,EAAE,qCAAqC,CAAC;IACrE,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC;IAChD,0EAA0E;IAC1E,QAAQ,CAAC,uBAAuB,EAAE,2BAA2B,CAAC;IAC9D;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IACtC;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC,4BAA4B,CAAC,CAAC;IACtE,QAAQ,CAAC,kBAAkB,EAAE,aAAa,CAAC,+BAA+B,CAAC,CAAC;IAC5E;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,cAAc,EAAE,4BAA4B,CAAC;CACvD;AAED,2EAA2E;AAC3E,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,4BAA4B,GACjC,IAAI,CA6DN"}