@veil-runtime/core 0.1.3 → 0.3.0

package/dist/runtime/operator-runtime.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.operatorRuntime = exports.OperatorRuntime = void 0;
+const plan_admission_error_js_1 = require("./execution/plan-admission-error.js");
 const job_manager_js_1 = require("./jobs/job-manager.js");
 const job_memory_js_1 = require("./jobs/job-memory.js");
 const execution_authorizer_js_1 = require("./permissions/execution-authorizer.js");
@@ -23,10 +24,19 @@ function immutableCaller(caller) {
 }
 class OperatorRuntime {
     authorizer;
+    planVersions;
     constructor(options = {}) {
         this.authorizer =
             options.authorizer ??
                 execution_authorizer_js_1.defaultExecutionAuthorizer;
+        const versions = options.planVersions ?? ['1.0'];
+        if (!Array.isArray(versions) ||
+            versions.length === 0 ||
+            versions.some((version) => version !== '1.0' && version !== '2.0') ||
+            new Set(versions).size !== versions.length) {
+            throw new Error('planVersions must contain unique supported semantic versions');
+        }
+        this.planVersions = new Set(versions);
     }
     use(module) {
         const declared = new Set(module.manifest.capabilities);
@@ -38,7 +48,13 @@ class OperatorRuntime {
         }
     }
     async executePlan(plan, options = {}) {
-        return job_manager_js_1.jobManager.executePlan(plan, immutableCaller(options.caller), this.authorizer);
+        const admissionOwner = {};
+        try {
+            return await job_manager_js_1.jobManager.executePlan(plan, immutableCaller(options.caller), this.authorizer, admissionOwner, this.planVersions);
+        }
+        catch (error) {
+            throw (0, plan_admission_error_js_1.containForeignAdmissionError)(admissionOwner, error);
+        }
     }
     async run(goal, options = {}) {
         const router = planner_router_registry_js_1.plannerRouterRegistry.getDefault();
@@ -70,6 +86,9 @@ class OperatorRuntime {
     listCapabilities() {
         return registry_js_1.capabilityRegistry.list();
     }
+    describeCapability(name, version) {
+        return registry_js_1.capabilityRegistry.describe(name, version);
+    }
     listPlanners() {
         return planner_registry_js_1.plannerRegistry.list();
     }

package/dist/runtime/registry/capability.d.ts

@@ -13,3 +13,12 @@ export interface Capability<TInput = unknown, TResult = unknown> {
     inputSchema?: Record<string, CapabilityInputField>;
     execute(input: TInput, context?: ExecutionContext): Promise<TResult>;
 }
+/** Detached execution metadata. Introspection is not authorization. */
+export interface CapabilityDescriptor {
+    name: string;
+    version: string;
+    description: string;
+    risk: CapabilityRisk;
+    /** Limited Veil field contract, not full JSON Schema. */
+    inputSchema: Record<string, CapabilityInputField>;
+}

package/dist/runtime/registry/registry.d.ts

@@ -1,15 +1,10 @@
-import { Capability } from './capability.js';
+import { Capability, CapabilityDescriptor } from './capability.js';
 declare class CapabilityRegistry {
     private capabilities;
     register(capability: Capability): void;
     get(name: string): Capability | undefined;
-    list(): {
-        name: string;
-        version: string;
-        description: string;
-        risk: import("./capability.js").CapabilityRisk;
-        inputSchema: Record<string, import("./capability.js").CapabilityInputField>;
-    }[];
+    describe(name: string, version?: string): CapabilityDescriptor | undefined;
+    list(): CapabilityDescriptor[];
 }
 export declare const capabilityRegistry: CapabilityRegistry;
 export {};

package/dist/runtime/registry/registry.js

@@ -12,14 +12,29 @@ class CapabilityRegistry {
     get(name) {
         return this.capabilities.get(name);
     }
+    describe(name, version) {
+        const capability = this.get(name);
+        if (!capability || (version !== undefined && version !== capability.version)) {
+            return undefined;
+        }
+        return describeCapability(capability);
+    }
     list() {
-        return Array.from(this.capabilities.values()).map((capability) => ({
-            name: capability.name,
-            version: capability.version,
-            description: capability.description,
-            risk: capability.risk,
-            inputSchema: capability.inputSchema ?? {},
-        }));
+        return Array.from(this.capabilities.values(), describeCapability);
     }
 }
 exports.capabilityRegistry = new CapabilityRegistry();
+// Explicitly project passive metadata; never copy implementation properties.
+function describeCapability(capability) {
+    return {
+        name: capability.name,
+        version: capability.version,
+        description: capability.description,
+        risk: capability.risk,
+        inputSchema: Object.fromEntries(Object.entries(capability.inputSchema ?? {}).map(([name, field]) => [name, {
+                type: field.type,
+                required: field.required,
+                description: field.description,
+            }])),
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veil-runtime/core",
-  "version": "0.1.3",
+  "version": "0.3.0",
   "description": "A governed, capability-driven execution runtime",
   "license": "Apache-2.0",
   "repository": {
@@ -43,6 +43,8 @@
     "test": "tsc --project tsconfig.test.json && node --test .tmp/test-build/test/*.test.js",
     "verify:package": "npm run build && node tools/verify-package.mjs",
     "check": "npm run typecheck && npm test && npm run verify:package",
+    "quality": "node tools/quality.mjs",
+    "test:quality": "node --test tools/quality.test.mjs tools/quality-governance.test.mjs",
     "mcp:stdio": "tsx src/integrations/mcp/stdio-server.ts",
     "mcp:test": "tsx src/integrations/mcp/test-client.ts",
     "mcp:test:outbound": "tsx src/integrations/mcp/test-outbound.ts"
@@ -61,6 +63,7 @@
     "better-sqlite3": "^13.0.3"
   },
   "devDependencies": {
+    "@babel/parser": "8.0.6",
     "@types/better-sqlite3": "^9.6.0",
     "@types/node": "^26.2.0",
     "fastify": "^5.11.3",