@vibesdotdev/runnable 0.0.0-stage → 1.0.0-rc.1

package/dist/client/native/owner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owner.js","sourceRoot":"","sources":["../../../src/client/native/owner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC7F,OAAO,EAAE,wBAAwB,EAAE,MAAM,8BAA8B,CAAC;AAExE,OAAO,EAAE,eAAe,EAA2C,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,yBAAyB,EAAE,MAAM,kCAAkC,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,kCAAkC,EAAE,+BAA+B,EAAE,iCAAiC,EAAE,mBAAmB,EAAkD,wBAAwB,EAAwD,MAAM,uBAAuB,CAAC;AACrT,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGnE,MAAM,OAAO,mBAAmB;IACV;IAAsC;IAA3D,YAAqB,OAAmB,EAAmB,OAA4B;QAAlE,YAAO,GAAP,OAAO,CAAY;QAAmB,YAAO,GAAP,OAAO,CAAqB;IAAG,CAAC;IAE3F,cAAc,CAA2C,MAAS;QACjE,IAAI,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,KAAK;eACjG,MAAM,CAAC,GAAG,EAAE,KAAK,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;YACzG,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC;IACf,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAA6B;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAiC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAClG,CAAC;IAED,kBAAkB,CAAC,KAA6B,EAAE,cAA2B;QAC5E,IAAI,CAAC,cAAc,CAAC,OAAO;YAAE,MAAM,IAAI,eAAe,CAAC,uDAAuD,EAAE,aAAa,EAAE;gBAC9H,MAAM,EAAE,yCAAyC;aACjD,CAAC,CAAC;QACH,OAAO;YACN,KAAK;YACL,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;YACpD,oBAAoB,EAAE,cAAc,CAAC,oBAAoB,EAAE,IAAI,CAAC,cAAc,CAAC;SAC/E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAiB;QACrC,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAC/G,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAA4C,mBAAmB,CAAC;aACrG,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,CAAC;QAC/C,IAAI,MAAM,EAAE,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/H,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAA+E,mBAAmB,CAAC;aAC1I,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC;QACjF,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,eAAe,CAAC,kEAAkE,EAAE,aAAa,EAAE,EAAE,MAAM,EAAE,yCAAyC,EAAE,CAAC,CAAC;QACjM,OAAO,IAAI,CAAC,kBAAkB,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1G,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,MAAiB;QACpC,IAAI,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAClF,OAAO,+BAA+B,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IACzG,CAAC;IAED,UAAU,CAAC,MAAiB,EAAE,WAAsC;QACnE,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;QACjC,IAAI,WAAW,CAAC,QAAQ,KAAK,SAAS;YAAE,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC;QAC7E,IAAI,WAAW,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC;;YACrE,OAAO,IAAI,CAAC,OAAO,CAAC;QACzB,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,KAAK,SAAS;YACjF,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,kCAAkC,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACpG,MAAM,cAAc,GAAG,SAAS,EAAE,OAAO,IAAI,WAAW,CAAC,QAAQ;YAChE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,UAAU,KAAK,WAAW,CAAC,UAAU,CAAC,EAAE,OAAO;YACrG,CAAC,CAAC,SAAS,CAAC;QACb,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,IAAI,cAAc,CAAC;QACtD,IAAI,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;;YAC7C,OAAO,IAAI,CAAC,OAAO,CAAC;QACzB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,QAAQ,CAAkD,GAAM;QAC/D,IAAI,GAAG,CAAC,IAAI;YAAE,OAAO,GAAG,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QACjG,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACzF,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAqC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACrG,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7E,IAAI,UAAU;YAAE,MAAM,CAAC,UAAU,GAAG,UAAU,CAAC;QAC/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;QAChH,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACtD,MAAM,WAAW,GAAG,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC1D,MAAM,SAAS,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACpF,MAAM,CAAC,OAAO,GAAG,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrH,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,KAAK,SAAS,EAAE,CAAC;YACtE,OAAO,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,MAAM,CAAC;QAClJ,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACrD,OAAO,WAAW,CAAC,CAAC,CAAC,wBAAwB,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3K,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,MAAiB;QAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,KAAK,SAAS;YAC9E,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kCAAkC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,CAAC;QAC5G,MAAM,KAAK,GAAG,MAAM,EAAE,QAAQ,IAAI,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC;QAC1F,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtD,CAAC;CACD"}

package/dist/client/native/supervision.d.ts

@@ -0,0 +1,12 @@
+import { type RuntimeRef } from "@vibesdotdev/kernel";
+import { type RunnableStartInput, type RunnableStartResult, type RunnableSupervisorImplementation, type RunnableSupervisorStatus } from "../../schemas/contracts/index.ts";
+export declare class RunnableSupervision {
+    readonly runtime: RuntimeRef;
+    private readonly ensureLoaded;
+    constructor(runtime: RuntimeRef, ensureLoaded: () => Promise<void>);
+    start(input: RunnableStartInput): Promise<RunnableStartResult>;
+    isSupervised(runId: string): Promise<boolean>;
+    status(runId: string): Promise<RunnableSupervisorStatus>;
+    supervisor(): Promise<RunnableSupervisorImplementation>;
+}
+//# sourceMappingURL=supervision.d.ts.map

package/dist/client/native/supervision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervision.d.ts","sourceRoot":"","sources":["../../../src/client/native/supervision.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2C,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAE/F,OAAO,EAA6F,KAAK,kBAAkB,EAAE,KAAK,mBAAmB,EAAE,KAAK,gCAAgC,EAAE,KAAK,wBAAwB,EAAE,MAAM,kCAAkC,CAAC;AAGtQ,qBAAa,mBAAmB;IACnB,QAAQ,CAAC,OAAO,EAAE,UAAU;IAAE,OAAO,CAAC,QAAQ,CAAC,YAAY;gBAAlD,OAAO,EAAE,UAAU,EAAmB,YAAY,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC;IAEtF,KAAK,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA8B9D,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAI7C,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAI9D,UAAU,IAAI,OAAO,CAAC,gCAAgC,CAAC;CAKvD"}

package/dist/client/native/supervision.js

@@ -0,0 +1,56 @@
+import { CapabilityError } from "@vibesdotdev/kernel";
+import { OutcomeSchema } from "../../schemas/outcome.js";
+import { RunnableSpawnRequestSchema, RunnableStartInputSchema } from "../../schemas/contracts/index.js";
+import { RUNNABLE_SUPERVISOR_ID } from "../../runtime/execution/contract.js";
+export class RunnableSupervision {
+    runtime;
+    ensureLoaded;
+    constructor(runtime, ensureLoaded) {
+        this.runtime = runtime;
+        this.ensureLoaded = ensureLoaded;
+    }
+    async start(input) {
+        const parsedInput = RunnableStartInputSchema.safeParse(input);
+        if (!parsedInput.success) {
+            throw new CapabilityError('Runnable start input is invalid.', 'INVALID_INPUT', {
+                reason: 'runnable-start-input-invalid',
+                retryable: false
+            });
+        }
+        const start = parsedInput.data;
+        await this.ensureLoaded();
+        const executorQuery = this.runtime
+            .query('runnable/executor')
+            .withId(start.typeId);
+        if (executorQuery.descriptors().length === 0)
+            return { runId: start.runId, spawned: false };
+        const executor = await executorQuery.resolve();
+        const request = await executor.execute({ runId: start.runId, config: start.config, configUnit: start.configUnit });
+        if (!request)
+            return { runId: start.runId, spawned: false };
+        const task = OutcomeSchema.safeParse(request);
+        if (task.success)
+            return { runId: start.runId, spawned: false, outcome: task.data };
+        const parsedRequest = RunnableSpawnRequestSchema.safeParse(request);
+        if (!parsedRequest.success) {
+            throw new CapabilityError('Runnable executor returned an invalid spawn request.', 'INVALID_INPUT', {
+                reason: 'runnable-spawn-request-invalid',
+                retryable: false
+            });
+        }
+        const supervisor = await this.supervisor();
+        return supervisor.spawn(start.runId, parsedRequest.data, start.ingestCredential);
+    }
+    async isSupervised(runId) {
+        return (await this.supervisor()).isSupervised(runId);
+    }
+    async status(runId) {
+        return (await this.supervisor()).status(runId);
+    }
+    supervisor() {
+        return this.runtime
+            .query('runnable/supervisor')
+            .withId(RUNNABLE_SUPERVISOR_ID).resolve();
+    }
+}
+//# sourceMappingURL=supervision.js.map

package/dist/client/native/supervision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supervision.js","sourceRoot":"","sources":["../../../src/client/native/supervision.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAA2C,MAAM,qBAAqB,CAAC;AAC/F,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,wBAAwB,EAAgK,MAAM,kCAAkC,CAAC;AACtQ,OAAO,EAAE,sBAAsB,EAAE,MAAM,qCAAqC,CAAC;AAE7E,MAAM,OAAO,mBAAmB;IACV;IAAsC;IAA3D,YAAqB,OAAmB,EAAmB,YAAiC;QAAvE,YAAO,GAAP,OAAO,CAAY;QAAmB,iBAAY,GAAZ,YAAY,CAAqB;IAAG,CAAC;IAEhG,KAAK,CAAC,KAAK,CAAC,KAAyB;QACpC,MAAM,WAAW,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YAC1B,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,eAAe,EAAE;gBAC9E,MAAM,EAAE,8BAA8B;gBACtC,SAAS,EAAE,KAAK;aAChB,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC;QAC/B,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC1B,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO;aAChC,KAAK,CAAoD,mBAAmB,CAAC;aAC7E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5F,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;QACnH,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5D,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QACpF,MAAM,aAAa,GAAG,0BAA0B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpE,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC5B,MAAM,IAAI,eAAe,CAAC,sDAAsD,EAAE,eAAe,EAAE;gBAClG,MAAM,EAAE,gCAAgC;gBACxC,SAAS,EAAE,KAAK;aAChB,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAC3C,OAAO,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa;QAC/B,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACzB,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,UAAU;QACT,OAAO,IAAI,CAAC,OAAO;aACjB,KAAK,CAAsD,qBAAqB,CAAC;aACjF,MAAM,CAAC,sBAAsB,CAAC,CAAC,OAAO,EAAE,CAAC;IAC5C,CAAC;CACD"}

package/dist/client/records/authority.d.ts

@@ -0,0 +1,20 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { type JsonObject } from '@vibesdotdev/kernel/schemas/json';
+import { type RunAdmission, type RunRecord } from '../../schemas/runs.ts';
+export declare const RUN_ADMISSION_METADATA_KEY = "runnable.admission";
+export declare const RUN_INPUT_ADMISSION_METADATA_KEY = "runnable.inputAdmission";
+/** Read only the Kernel's admitted invocation or captured host binding. */
+export declare function captureRunAdmission(runtime: RuntimeRef): RunAdmission;
+export declare function admissionMetadata(admission: RunAdmission): JsonObject;
+/** An existing record's opaque memo scope never becomes an authorization parser. */
+export declare function canReadRun(record: RunRecord, current: RunAdmission, exactScope: string): boolean;
+/** Compare only canonical admitted identity and workspace facts, including native process ownership. */
+export declare function canReadRunAdmission(saved: RunAdmission, current: RunAdmission): boolean;
+export declare function assertRunWrite(record: RunRecord, current: RunAdmission, exactScope: string): void;
+/** Call inside an atomic writer/CAS: an older admission cannot replace newer native truth. */
+export declare function mergeNativeExecutionMetadata(current: JsonObject, incoming: JsonObject): JsonObject;
+/** A durable native completion fences same-generation lifecycle snapshots, not just metadata. */
+export declare function mergeNativeRunRecord(current: RunRecord, incoming: RunRecord): RunRecord;
+/** Telemetry may enrich observations, never replace the execution owner's admission. */
+export declare function mergeRunEventMetadata(current: JsonObject, patch: JsonObject): JsonObject;
+//# sourceMappingURL=authority.d.ts.map

package/dist/client/records/authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.d.ts","sourceRoot":"","sources":["../../../src/client/records/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4C,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAA+C,KAAK,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAChH,OAAO,EAAuK,KAAK,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAI/O,eAAO,MAAM,0BAA0B,uBAAuB,CAAC;AAC/D,eAAO,MAAM,gCAAgC,4BAA4B,CAAC;AAE1E,2EAA2E;AAC3E,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,UAAU,GAAG,YAAY,CAKrE;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,YAAY,cAExD;AAED,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAIhG;AAED,wGAAwG;AACxG,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,GAAG,OAAO,CASvF;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,CAMjG;AAED,8FAA8F;AAC9F,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU,CA+ClG;AAED,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,GAAG,SAAS,CA+DvF;AAED,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,CAUxF"}

package/dist/client/records/authority.js

@@ -0,0 +1,186 @@
+import { CapabilityError, captureRuntimeWorkspace } from '@vibesdotdev/kernel';
+import { JsonValueFromReaderSchema, JsonObjectSchema } from '@vibesdotdev/kernel/schemas/json';
+import { RunAdmissionSchema, RunnableNativeExecutionStateSchema, RunnableNativeCompletionOutboxSchema, RUN_NATIVE_EXECUTION_METADATA_KEY, RUN_NATIVE_COMPLETION_METADATA_KEY } from "../../schemas/runs.js";
+import { canonical } from "./identity.js";
+import { RuntimeInvokeWorkspaceSchema } from '@vibesdotdev/kernel/schemas/scope';
+export const RUN_ADMISSION_METADATA_KEY = 'runnable.admission';
+export const RUN_INPUT_ADMISSION_METADATA_KEY = 'runnable.inputAdmission';
+/** Read only the Kernel's admitted invocation or captured host binding. */
+export function captureRunAdmission(runtime) {
+    const actor = runtime.scope.actor;
+    const workspace = captureRuntimeWorkspace(runtime);
+    const { sessionId: _sessionId, ...portableWorkspace } = workspace ? RuntimeInvokeWorkspaceSchema.parse(workspace) : {};
+    return RunAdmissionSchema.parse(JsonValueFromReaderSchema.parse({ actor, workspace: workspace ? portableWorkspace : undefined }));
+}
+export function admissionMetadata(admission) {
+    return JsonObjectSchema.parse(JsonValueFromReaderSchema.parse(admission));
+}
+/** An existing record's opaque memo scope never becomes an authorization parser. */
+export function canReadRun(record, current, exactScope) {
+    const metadata = record.metadata[RUN_ADMISSION_METADATA_KEY];
+    if (metadata === undefined)
+        return record.scope === exactScope;
+    return canReadRunAdmission(RunAdmissionSchema.parse(metadata), current);
+}
+/** Compare only canonical admitted identity and workspace facts, including native process ownership. */
+export function canReadRunAdmission(saved, current) {
+    const identityFields = ['userId', 'orgId', 'projectId', 'agentId', 'agentSystemId', 'harness'];
+    for (const field of identityFields) {
+        if ((saved.actor?.[field] ?? null) !== (current.actor?.[field] ?? null))
+            return false;
+    }
+    for (const field of ['id', 'root', 'target', 'remoteHostId']) {
+        if ((saved.workspace?.[field] ?? null) !== (current.workspace?.[field] ?? null))
+            return false;
+    }
+    return true;
+}
+export function assertRunWrite(record, current, exactScope) {
+    if (!canReadRun(record, current, exactScope) || current.workspace?.access !== 'write') {
+        throw new CapabilityError('Runnable record is not writable in this admitted invocation.', 'PERMISSION_DENIED', {
+            reason: 'runnable-record-write-denied', retryable: false
+        });
+    }
+}
+/** Call inside an atomic writer/CAS: an older admission cannot replace newer native truth. */
+export function mergeNativeExecutionMetadata(current, incoming) {
+    const previous = current[RUN_NATIVE_EXECUTION_METADATA_KEY];
+    if (previous === undefined)
+        return { ...current, ...incoming };
+    const held = RunnableNativeExecutionStateSchema.parse(previous);
+    const next = RunnableNativeExecutionStateSchema.safeParse(incoming[RUN_NATIVE_EXECUTION_METADATA_KEY]);
+    const conflict = () => new CapabilityError('Native execution evidence changed before this record write.', 'CONFLICT', {
+        reason: 'runnable-native-execution-write-conflict', retryable: false
+    });
+    if (!next.success || next.data.generation < held.generation)
+        throw conflict();
+    for (const key of ['id', 'owner', 'reference', 'result']) {
+        if (canonical(held[key]) !== canonical(next.data[key]))
+            throw conflict();
+    }
+    if (held.observer && canonical(held.observer) !== canonical(next.data.observer ?? null))
+        throw conflict();
+    const before = held.attempts.at(-1);
+    const after = next.data.attempts.at(-1);
+    if (before && (!after || after.generation < before.generation ||
+        (after.generation === before.generation && after.attempt < before.attempt)))
+        throw conflict();
+    for (const admitted of held.attempts) {
+        const attempt = next.data.attempts.find(candidate => candidate.generation === admitted.generation && candidate.attempt === admitted.attempt);
+        if (!attempt || attempt.startedAt !== admitted.startedAt || attempt.maxAttempts !== admitted.maxAttempts)
+            throw conflict();
+        if (admitted.endedAt !== undefined) {
+            if (attempt.endedAt !== undefined && attempt.endedAt !== admitted.endedAt)
+                throw conflict();
+            attempt.endedAt = admitted.endedAt;
+        }
+        if (admitted.outcome !== undefined) {
+            if (attempt.outcome !== undefined && canonical(attempt.outcome) !== canonical(admitted.outcome))
+                throw conflict();
+            attempt.outcome = admitted.outcome;
+        }
+    }
+    const outbox = RunnableNativeCompletionOutboxSchema.parse(current[RUN_NATIVE_COMPLETION_METADATA_KEY] ?? []);
+    const additions = RunnableNativeCompletionOutboxSchema.parse(incoming[RUN_NATIVE_COMPLETION_METADATA_KEY] ?? []);
+    for (const addition of additions) {
+        const saved = outbox.find(completion => completion.receiptId === addition.receiptId);
+        if (!saved) {
+            if (outbox.some(completion => completion.eventId === addition.eventId))
+                throw conflict();
+            outbox.push(addition);
+            continue;
+        }
+        const { delivered: wasDelivered, ...original } = saved;
+        const { delivered, ...replayed } = addition;
+        if (canonical(original) !== canonical(replayed))
+            throw conflict();
+        saved.delivered = wasDelivered || delivered;
+    }
+    const merged = { ...current, ...incoming };
+    merged[RUN_NATIVE_EXECUTION_METADATA_KEY] = JsonValueFromReaderSchema.parse(next.data);
+    if (outbox.length > 0)
+        merged[RUN_NATIVE_COMPLETION_METADATA_KEY] = JsonValueFromReaderSchema.parse(outbox);
+    return merged;
+}
+/** A durable native completion fences same-generation lifecycle snapshots, not just metadata. */
+export function mergeNativeRunRecord(current, incoming) {
+    const metadata = mergeNativeExecutionMetadata(current.metadata, incoming.metadata);
+    const native = metadata[RUN_NATIVE_EXECUTION_METADATA_KEY];
+    let advancedAttempt = false;
+    if (native !== undefined) {
+        const execution = RunnableNativeExecutionStateSchema.parse(native);
+        const previousNative = current.metadata[RUN_NATIVE_EXECUTION_METADATA_KEY] === undefined
+            ? undefined
+            : RunnableNativeExecutionStateSchema.safeParse(current.metadata[RUN_NATIVE_EXECUTION_METADATA_KEY]);
+        const beforeAttempt = previousNative?.success ? previousNative.data.attempts.at(-1) : undefined;
+        const afterAttempt = execution.attempts.at(-1);
+        advancedAttempt = Boolean(!previousNative?.success ||
+            (beforeAttempt && afterAttempt && (afterAttempt.generation > beforeAttempt.generation ||
+                (afterAttempt.generation === beforeAttempt.generation && afterAttempt.attempt > beforeAttempt.attempt))));
+        const completion = RunnableNativeCompletionOutboxSchema.parse(current.metadata[RUN_NATIVE_COMPLETION_METADATA_KEY] ?? [])
+            .find(occurrence => occurrence.generation === execution.generation);
+        if (completion) {
+            const expected = completion.payload;
+            const heldTerminal = current.status === expected.status && canonical(current.outcome) === canonical(expected.outcome);
+            if (incoming.status !== expected.status || canonical(incoming.outcome) !== canonical(expected.outcome) ||
+                (heldTerminal && (incoming.progress !== current.progress || incoming.endedAt !== current.endedAt))) {
+                throw new CapabilityError('A completed native receipt cannot be replaced by a lifecycle snapshot.', 'CONFLICT', {
+                    reason: 'runnable-native-terminal-write-conflict', retryable: false
+                });
+            }
+        }
+    }
+    const releaseUnadmittedRef = incoming.ref === undefined &&
+        native === undefined &&
+        current.ref?.executionReference === undefined &&
+        !['completed', 'error', 'stopped'].includes(current.status);
+    const sameJob = current.ref !== undefined && incoming.ref !== undefined &&
+        (!current.ref.jobId || !incoming.ref.jobId || current.ref.jobId === incoming.ref.jobId);
+    let ref = releaseUnadmittedRef ? undefined : (incoming.ref ?? current.ref);
+    if (sameJob && current.ref && incoming.ref) {
+        ref = { ...current.ref, ...incoming.ref };
+        if (incoming.ref.jobId === undefined && current.ref.jobId !== undefined) {
+            ref = { ...ref, jobId: current.ref.jobId };
+        }
+        if (incoming.ref.executionReference === undefined && current.ref.executionReference !== undefined) {
+            ref = { ...ref, executionReference: current.ref.executionReference };
+        }
+    }
+    const preserveTerminal = !advancedAttempt && ['completed', 'error', 'stopped'].includes(current.status) &&
+        incoming.status === 'running' && incoming.outcome === undefined;
+    const status = preserveTerminal ? current.status : incoming.status;
+    const outcome = preserveTerminal ? current.outcome : incoming.outcome;
+    const endedAt = preserveTerminal ? (incoming.endedAt ?? current.endedAt) : incoming.endedAt;
+    const progress = !advancedAttempt && incoming.progress === 0 && current.progress > 0 ? current.progress : incoming.progress;
+    const approval = incoming.approval ?? current.approval;
+    const merged = {
+        ...incoming,
+        status,
+        progress,
+        metadata
+    };
+    if (outcome !== undefined)
+        merged.outcome = outcome;
+    if (endedAt !== undefined)
+        merged.endedAt = endedAt;
+    if (approval !== undefined)
+        merged.approval = approval;
+    if (ref !== undefined)
+        merged.ref = ref;
+    return merged;
+}
+/** Telemetry may enrich observations, never replace the execution owner's admission. */
+export function mergeRunEventMetadata(current, patch) {
+    const merged = JsonObjectSchema.parse({ ...current, ...patch });
+    for (const key of [RUN_ADMISSION_METADATA_KEY, RUN_INPUT_ADMISSION_METADATA_KEY, RUN_NATIVE_EXECUTION_METADATA_KEY, RUN_NATIVE_COMPLETION_METADATA_KEY, 'runnable.submittedInput']) {
+        if (Object.hasOwn(current, key)) {
+            const value = current[key];
+            if (value !== undefined)
+                merged[key] = value;
+        }
+        else
+            delete merged[key];
+    }
+    return merged;
+}
+//# sourceMappingURL=authority.js.map

package/dist/client/records/authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authority.js","sourceRoot":"","sources":["../../../src/client/records/authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAmB,MAAM,qBAAqB,CAAC;AAChG,OAAO,EAAE,yBAAyB,EAAE,gBAAgB,EAAmB,MAAM,kCAAkC,CAAC;AAChH,OAAO,EAAE,kBAAkB,EAAE,kCAAkC,EAAE,oCAAoC,EAAE,iCAAiC,EAAE,kCAAkC,EAAqC,MAAM,uBAAuB,CAAC;AAC/O,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAC;AAEjF,MAAM,CAAC,MAAM,0BAA0B,GAAG,oBAAoB,CAAC;AAC/D,MAAM,CAAC,MAAM,gCAAgC,GAAG,yBAAyB,CAAC;AAE1E,2EAA2E;AAC3E,MAAM,UAAU,mBAAmB,CAAC,OAAmB;IACtD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC;IAClC,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,4BAA4B,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACvH,OAAO,kBAAkB,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;AACnI,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,SAAuB;IACxD,OAAO,gBAAgB,CAAC,KAAK,CAAC,yBAAyB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,MAAiB,EAAE,OAAqB,EAAE,UAAkB;IACtF,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,CAAC;IAC7D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,KAAK,UAAU,CAAC;IAC/D,OAAO,mBAAmB,CAAC,kBAAkB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,mBAAmB,CAAC,KAAmB,EAAE,OAAqB;IAC7E,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,CAAU,CAAC;IACxG,KAAK,MAAM,KAAK,IAAI,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IACvF,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAU,EAAE,CAAC;QACvE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/F,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAiB,EAAE,OAAqB,EAAE,UAAkB;IAC1F,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,IAAI,OAAO,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,EAAE,CAAC;QACvF,MAAM,IAAI,eAAe,CAAC,8DAA8D,EAAE,mBAAmB,EAAE;YAC9G,MAAM,EAAE,8BAA8B,EAAE,SAAS,EAAE,KAAK;SACxD,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,4BAA4B,CAAC,OAAmB,EAAE,QAAoB;IACrF,MAAM,QAAQ,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC5D,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,kCAAkC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,kCAAkC,CAAC,SAAS,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,CAAC;IACvG,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,eAAe,CAAC,6DAA6D,EAAE,UAAU,EAAE;QACrH,MAAM,EAAE,0CAA0C,EAAE,SAAS,EAAE,KAAK;KACpE,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU;QAAE,MAAM,QAAQ,EAAE,CAAC;IAC9E,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAU,EAAE,CAAC;QACnE,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,QAAQ,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;QAAE,MAAM,QAAQ,EAAE,CAAC;IAC1G,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,MAAM,IAAI,CAAC,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU;QAC5D,CAAC,KAAK,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,QAAQ,EAAE,CAAC;IAC/F,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC7I,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW;YAAE,MAAM,QAAQ,EAAE,CAAC;QAC3H,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO;gBAAE,MAAM,QAAQ,EAAE,CAAC;YAC5F,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACpC,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,MAAM,QAAQ,EAAE,CAAC;YAClH,OAAO,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;QACpC,CAAC;IACF,CAAC;IACD,MAAM,MAAM,GAAG,oCAAoC,CAAC,KAAK,CAAC,OAAO,CAAC,kCAAkC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7G,MAAM,SAAS,GAAG,oCAAoC,CAAC,KAAK,CAAC,QAAQ,CAAC,kCAAkC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC;gBAAE,MAAM,QAAQ,EAAE,CAAC;YACzF,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACtB,SAAS;QACV,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,CAAC;QACvD,MAAM,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAC5C,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC;YAAE,MAAM,QAAQ,EAAE,CAAC;QAClE,KAAK,CAAC,SAAS,GAAG,YAAY,IAAI,SAAS,CAAC;IAC7C,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC3C,MAAM,CAAC,iCAAiC,CAAC,GAAG,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,CAAC,kCAAkC,CAAC,GAAG,yBAAyB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5G,OAAO,MAAM,CAAC;AACf,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,oBAAoB,CAAC,OAAkB,EAAE,QAAmB;IAC3E,MAAM,QAAQ,GAAG,4BAA4B,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,iCAAiC,CAAC,CAAC;IAC3D,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,kCAAkC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnE,MAAM,cAAc,GAAG,OAAO,CAAC,QAAQ,CAAC,iCAAiC,CAAC,KAAK,SAAS;YACvF,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,kCAAkC,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,iCAAiC,CAAC,CAAC,CAAC;QACrG,MAAM,aAAa,GAAG,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/C,eAAe,GAAG,OAAO,CACxB,CAAC,cAAc,EAAE,OAAO;YACxB,CAAC,aAAa,IAAI,YAAY,IAAI,CAAC,YAAY,CAAC,UAAU,GAAG,aAAa,CAAC,UAAU;gBACpF,CAAC,YAAY,CAAC,UAAU,KAAK,aAAa,CAAC,UAAU,IAAI,YAAY,CAAC,OAAO,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,CACzG,CAAC;QACF,MAAM,UAAU,GAAG,oCAAoC,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,kCAAkC,CAAC,IAAI,EAAE,CAAC;aACvH,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,KAAK,SAAS,CAAC,UAAU,CAAC,CAAC;QACrE,IAAI,UAAU,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC;YACpC,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtH,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACrG,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBACrG,MAAM,IAAI,eAAe,CAAC,wEAAwE,EAAE,UAAU,EAAE;oBAC/G,MAAM,EAAE,yCAAyC,EAAE,SAAS,EAAE,KAAK;iBACnE,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IACD,MAAM,oBAAoB,GAAG,QAAQ,CAAC,GAAG,KAAK,SAAS;QACtD,MAAM,KAAK,SAAS;QACpB,OAAO,CAAC,GAAG,EAAE,kBAAkB,KAAK,SAAS;QAC7C,CAAC,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,KAAK,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,SAAS;QACtE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzF,IAAI,GAAG,GAAG,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAC3E,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC5C,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACzE,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QAC5C,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC,kBAAkB,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,SAAS,EAAE,CAAC;YACnG,GAAG,GAAG,EAAE,GAAG,GAAG,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC;QACtE,CAAC;IACF,CAAC;IACD,MAAM,gBAAgB,GAAG,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC;QACtG,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC;IACjE,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IACnE,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;IACtE,MAAM,OAAO,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC5F,MAAM,QAAQ,GAAG,CAAC,eAAe,IAAI,QAAQ,CAAC,QAAQ,KAAK,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;IAC5H,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACvD,MAAM,MAAM,GAAG;QACd,GAAG,QAAQ;QACX,MAAM;QACN,QAAQ;QACR,QAAQ;KACR,CAAC;IACF,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACpD,IAAI,OAAO,KAAK,SAAS;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC;IACpD,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACvD,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IACxC,OAAO,MAAM,CAAC;AACf,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,OAAmB,EAAE,KAAiB;IAC3E,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,EAAE,GAAG,OAAO,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAChE,KAAK,MAAM,GAAG,IAAI,CAAC,0BAA0B,EAAE,gCAAgC,EAAE,iCAAiC,EAAE,kCAAkC,EAAE,yBAAyB,CAAC,EAAE,CAAC;QACpL,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC3B,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC9C,CAAC;;YACI,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC"}

package/dist/client/records/identity.d.ts

@@ -0,0 +1,4 @@
+/** Canonical JSON for identity only; validation happens at the owning schema boundary. */
+import { type ReadonlyJsonValue } from '@vibesdotdev/kernel/schemas/json';
+export declare function canonical(value: ReadonlyJsonValue | undefined): string;
+//# sourceMappingURL=identity.d.ts.map

package/dist/client/records/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../../src/client/records/identity.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,OAAO,EAAgC,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAC;AAExG,wBAAgB,SAAS,CAAC,KAAK,EAAE,iBAAiB,GAAG,SAAS,GAAG,MAAM,CAGtE"}

package/dist/client/records/identity.js

@@ -0,0 +1,7 @@
+/** Canonical JSON for identity only; validation happens at the owning schema boundary. */
+import { isJsonObject } from '@vibesdotdev/kernel/schemas/json';
+export function canonical(value) {
+    return JSON.stringify(value, (_key, item) => item !== undefined && isJsonObject(item)
+        ? Object.fromEntries(Object.entries(item).sort(([left], [right]) => left.localeCompare(right))) : item);
+}
+//# sourceMappingURL=identity.js.map

package/dist/client/records/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../../src/client/records/identity.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,OAAO,EAAE,YAAY,EAA0C,MAAM,kCAAkC,CAAC;AAExG,MAAM,UAAU,SAAS,CAAC,KAAoC;IAC7D,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,IAA2B,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,YAAY,CAAC,IAAI,CAAC;QAC3G,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1G,CAAC"}

package/dist/client/records/input-admission.d.ts

@@ -0,0 +1,5 @@
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { type RunRecord, type RunnableInputAdmission } from '../../schemas/runs.ts';
+/** Call only after the host has authorized this record; metadata alone is never authority. */
+export declare function readInputAdmission(runtime: RuntimeRef, record: RunRecord): Promise<RunnableInputAdmission | null>;
+//# sourceMappingURL=input-admission.d.ts.map

package/dist/client/records/input-admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-admission.d.ts","sourceRoot":"","sources":["../../../src/client/records/input-admission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGvE,OAAO,EAAgC,KAAK,SAAS,EAAE,KAAK,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAIlH,8FAA8F;AAC9F,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAgBvH"}

package/dist/client/records/input-admission.js

@@ -0,0 +1,26 @@
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { hashHex } from '@vibesdotdev/crypto/hash';
+import { canonical } from "./identity.js";
+import { RunnableInputAdmissionSchema } from "../../schemas/runs.js";
+import { RUN_INPUT_ADMISSION_METADATA_KEY } from "./authority.js";
+import { RunnableExecutorDescriptorSchema } from "../../schemas/descriptors.js";
+/** Call only after the host has authorized this record; metadata alone is never authority. */
+export async function readInputAdmission(runtime, record) {
+    const value = record.metadata[RUN_INPUT_ADMISSION_METADATA_KEY];
+    if (value === undefined)
+        return null;
+    const admission = RunnableInputAdmissionSchema.parse(value);
+    const digest = await hashHex(runtime, 'sha256', canonical(record.config));
+    const ownerMatches = admission.owner.kind === 'runnable/runnable'
+        ? admission.owner.id === record.runnableId
+        : (await runtime.query('runnable/executor').withId(admission.owner.id).descriptorsAsync())
+            .some(owner => RunnableExecutorDescriptorSchema.parse(owner).runnableType === record.runnableType);
+    if (admission.runId !== record.id || admission.runnableId !== record.runnableId ||
+        admission.inputDigest !== record.inputDigest || admission.configDigest !== digest || !ownerMatches) {
+        throw new CapabilityError('Runnable input admission does not match its authorized record.', 'PERMISSION_DENIED', {
+            reason: 'runnable-input-admission-mismatch', retryable: false
+        });
+    }
+    return admission;
+}
+//# sourceMappingURL=input-admission.js.map

package/dist/client/records/input-admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-admission.js","sourceRoot":"","sources":["../../../src/client/records/input-admission.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAmB,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AACnD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,4BAA4B,EAA+C,MAAM,uBAAuB,CAAC;AAClH,OAAO,EAAE,gCAAgC,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,gCAAgC,EAAE,MAAM,8BAA8B,CAAC;AAEhF,8FAA8F;AAC9F,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAAmB,EAAE,MAAiB;IAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,gCAAgC,CAAC,CAAC;IAChE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB;QAChE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,UAAU;QAC1C,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC;aACxF,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,gCAAgC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,CAAC,CAAC;IACrG,IAAI,SAAS,CAAC,KAAK,KAAK,MAAM,CAAC,EAAE,IAAI,SAAS,CAAC,UAAU,KAAK,MAAM,CAAC,UAAU;QAC9E,SAAS,CAAC,WAAW,KAAK,MAAM,CAAC,WAAW,IAAI,SAAS,CAAC,YAAY,KAAK,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACrG,MAAM,IAAI,eAAe,CAAC,gEAAgE,EAAE,mBAAmB,EAAE;YAChH,MAAM,EAAE,mCAAmC,EAAE,SAAS,EAAE,KAAK;SAC7D,CAAC,CAAC;IACJ,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC"}