@xemahq/agent-session-runtime 0.12.10 → 0.14.1

package/dist/lib/launch-identity/canonical-contract.js

@@ -1,229 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.canonicalContractJson = canonicalContractJson;
-exports.hashCanonicalContract = hashCanonicalContract;
-exports.requireExactObject = requireExactObject;
-exports.requireNonEmptyString = requireNonEmptyString;
-exports.requireBoolean = requireBoolean;
-exports.requireSha256 = requireSha256;
-exports.requireImageDigest = requireImageDigest;
-exports.requireNonNegativeSafeInteger = requireNonNegativeSafeInteger;
-exports.requireEnumValue = requireEnumValue;
-exports.requireStringRefs = requireStringRefs;
-exports.requireResourceBindingRefs = requireResourceBindingRefs;
-exports.requireSecretFreeJsonObject = requireSecretFreeJsonObject;
-exports.requireCanonicalJsonObject = requireCanonicalJsonObject;
-exports.assertNoTenantOrSecretTemplateFields = assertNoTenantOrSecretTemplateFields;
-const declarative_reconciler_1 = require("@xemahq/declarative-reconciler");
-const content_address_1 = require("@xemahq/kernel-contracts/content-address");
-const IMAGE_DIGEST_PREFIX = 'sha256:';
-const SECRET_FIELD_PATTERN = /(?:^|[_-])(api[_-]?key|authorization|cookie|credential|password|private[_-]?key|secret|token)(?:$|[_-])/iu;
-const SECRET_CAMEL_CASE_PATTERN = /(?:apiKey|authorization|cookie|credential|password|privateKey|secret|token)/u;
-const SECRET_REFERENCE_SUFFIX_PATTERN = /Refs?$/u;
-function canonicalContractJson(value) {
-    return (0, declarative_reconciler_1.canonicalJson)(value);
-}
-function hashCanonicalContract(value) {
-    return (0, declarative_reconciler_1.stableHash)(value);
-}
-function requireExactObject(value, path, requiredKeys, optionalKeys = []) {
-    if (!isPlainObject(value)) {
-        throw new TypeError(`${path} must be a plain object.`);
-    }
-    const allowedKeys = new Set([...requiredKeys, ...optionalKeys]);
-    for (const key of Object.keys(value)) {
-        if (!allowedKeys.has(key)) {
-            throw new TypeError(`${path}.${key} is not a supported field.`);
-        }
-    }
-    for (const key of requiredKeys) {
-        if (!Object.hasOwn(value, key)) {
-            throw new TypeError(`${path}.${key} is required.`);
-        }
-    }
-    return value;
-}
-function requireNonEmptyString(value, path) {
-    if (typeof value !== 'string' || value.trim().length === 0) {
-        throw new TypeError(`${path} must be a non-empty string.`);
-    }
-    return value;
-}
-function requireBoolean(value, path) {
-    if (typeof value !== 'boolean') {
-        throw new TypeError(`${path} must be a boolean.`);
-    }
-    return value;
-}
-function requireSha256(value, path) {
-    const hash = requireNonEmptyString(value, path);
-    if (!content_address_1.Sha256HexSchema.safeParse(hash).success) {
-        throw new TypeError(`${path} must be a lowercase SHA-256 hex digest.`);
-    }
-    return hash;
-}
-function requireImageDigest(value, path) {
-    const digest = requireNonEmptyString(value, path);
-    if (!digest.startsWith(IMAGE_DIGEST_PREFIX)) {
-        throw new TypeError(`${path} must be an immutable sha256 image digest.`);
-    }
-    if (!content_address_1.Sha256HexSchema.safeParse(digest.slice(IMAGE_DIGEST_PREFIX.length)).success) {
-        throw new TypeError(`${path} must be an immutable sha256 image digest.`);
-    }
-    return digest;
-}
-function requireNonNegativeSafeInteger(value, path) {
-    if (!Number.isSafeInteger(value) || value < 0) {
-        throw new TypeError(`${path} must be a non-negative safe integer.`);
-    }
-    return value;
-}
-function requireEnumValue(value, path, values) {
-    if (typeof value !== 'string' || !values.includes(value)) {
-        throw new TypeError(`${path} must be one of: ${values.map((entry) => `'${entry}'`).join(', ')}.`);
-    }
-    return value;
-}
-function requireStringRefs(value, path) {
-    if (!Array.isArray(value)) {
-        throw new TypeError(`${path} must be an array.`);
-    }
-    return Object.freeze([
-        ...new Set(value.map((entry, index) => requireNonEmptyString(entry, `${path}[${index}]`))),
-    ].sort());
-}
-function requireResourceBindingRefs(value, path) {
-    if (!Array.isArray(value)) {
-        throw new TypeError(`${path} must be an array.`);
-    }
-    const refs = value.map((entry, index) => {
-        const entryPath = `${path}[${index}]`;
-        const object = requireExactObject(entry, entryPath, ['kind', 'ref']);
-        return Object.freeze({
-            kind: requireNonEmptyString(object.kind, `${entryPath}.kind`),
-            ref: requireNonEmptyString(object.ref, `${entryPath}.ref`),
-        });
-    });
-    const byCanonicalRef = new Map(refs.map((entry) => [(0, declarative_reconciler_1.canonicalJson)(entry), entry]));
-    return Object.freeze([...byCanonicalRef.entries()]
-        .sort(([left], [right]) => left.localeCompare(right))
-        .map(([, entry]) => entry));
-}
-function requireSecretFreeJsonObject(value, path) {
-    const normalized = normalizeCanonicalJson(value, path, true);
-    if (normalized === null ||
-        Array.isArray(normalized) ||
-        typeof normalized !== 'object') {
-        throw new TypeError(`${path} must be a plain JSON object.`);
-    }
-    return normalized;
-}
-function requireCanonicalJsonObject(value, path) {
-    const normalized = normalizeCanonicalJson(value, path, false);
-    if (normalized === null ||
-        Array.isArray(normalized) ||
-        typeof normalized !== 'object') {
-        throw new TypeError(`${path} must be a plain JSON object.`);
-    }
-    return normalized;
-}
-function assertNoTenantOrSecretTemplateFields(value, path) {
-    const visited = new Set();
-    function inspect(current, currentPath) {
-        if (current === null || typeof current !== 'object') {
-            return;
-        }
-        if (visited.has(current)) {
-            throw new TypeError(`${currentPath} must not contain cycles.`);
-        }
-        visited.add(current);
-        if (Array.isArray(current)) {
-            current.forEach((entry, index) => inspect(entry, `${currentPath}[${index}]`));
-            return;
-        }
-        if (!isPlainObject(current)) {
-            throw new TypeError(`${currentPath} must contain only plain objects.`);
-        }
-        for (const [key, entry] of Object.entries(current)) {
-            if (isTenantField(key) || isSecretField(key)) {
-                throw new TypeError(`${currentPath}.${key} is tenant/session/secret state and cannot enter a RuntimeTemplateKey.`);
-            }
-            inspect(entry, `${currentPath}.${key}`);
-        }
-    }
-    inspect(value, path);
-}
-function normalizeCanonicalJson(value, path, rejectSecretFields, visited = new Set()) {
-    if (value === null ||
-        typeof value === 'string' ||
-        typeof value === 'boolean') {
-        return value;
-    }
-    if (typeof value === 'number') {
-        if (!Number.isFinite(value)) {
-            throw new TypeError(`${path} must contain only finite numbers.`);
-        }
-        return value;
-    }
-    if (typeof value !== 'object') {
-        throw new TypeError(`${path} must contain only JSON values.`);
-    }
-    if (visited.has(value)) {
-        throw new TypeError(`${path} must not contain cycles.`);
-    }
-    visited.add(value);
-    if (Array.isArray(value)) {
-        const normalized = value.map((entry, index) => normalizeCanonicalJson(entry, `${path}[${index}]`, rejectSecretFields, visited));
-        visited.delete(value);
-        return Object.freeze(normalized);
-    }
-    if (!isPlainObject(value)) {
-        throw new TypeError(`${path} must contain only plain JSON objects.`);
-    }
-    const normalized = {};
-    for (const [key, entry] of Object.entries(value)) {
-        if (rejectSecretFields &&
-            isSecretField(key) &&
-            !SECRET_REFERENCE_SUFFIX_PATTERN.test(key)) {
-            throw new TypeError(`${path}.${key} appears to contain secret material; pass an opaque reference ending in Ref or Refs instead.`);
-        }
-        normalized[key] = normalizeCanonicalJson(entry, `${path}.${key}`, rejectSecretFields, visited);
-    }
-    visited.delete(value);
-    return Object.freeze(normalized);
-}
-function isTenantField(key) {
-    const normalized = key.replaceAll(/[_-]/gu, '').toLowerCase();
-    return [
-        'binding',
-        'context',
-        'domain',
-        'domainid',
-        'input',
-        'organization',
-        'organizationid',
-        'org',
-        'orgid',
-        'project',
-        'projectid',
-        'session',
-        'sessionid',
-        'tenant',
-        'tenantid',
-        'thread',
-        'threadid',
-        'user',
-        'userid',
-    ].includes(normalized);
-}
-function isSecretField(key) {
-    return SECRET_FIELD_PATTERN.test(key) || SECRET_CAMEL_CASE_PATTERN.test(key);
-}
-function isPlainObject(value) {
-    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
-        return false;
-    }
-    const prototype = Object.getPrototypeOf(value);
-    return prototype === Object.prototype || prototype === null;
-}
-//# sourceMappingURL=canonical-contract.js.map

package/dist/lib/launch-identity/canonical-contract.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"canonical-contract.js","sourceRoot":"","sources":["../../../src/lib/launch-identity/canonical-contract.ts"],"names":[],"mappings":";;AA6BA,sDAEC;AAED,sDAEC;AAED,gDAwBC;AAED,sDAKC;AAED,wCAKC;AAED,sCAMC;AAYD,gDAeC;AAED,sEAQC;AAED,4CAWC;AAED,8CAiBC;AAED,gEAyBC;AAED,kEAaC;AAED,gEAaC;AAED,oFAoCC;AAvPD,2EAA2E;AAC3E,8EAA2E;AAoB3E,MAAM,mBAAmB,GAAG,SAAS,CAAC;AAEtC,MAAM,oBAAoB,GACxB,2GAA2G,CAAC;AAC9G,MAAM,yBAAyB,GAC7B,8EAA8E,CAAC;AACjF,MAAM,+BAA+B,GAAG,SAAS,CAAC;AAElD,SAAgB,qBAAqB,CAAC,KAAc;IAClD,OAAO,IAAA,sCAAa,EAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED,SAAgB,qBAAqB,CAAC,KAAc;IAClD,OAAO,IAAA,mCAAU,EAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,kBAAkB,CAChC,KAAc,EACd,IAAY,EACZ,YAA+B,EAC/B,eAAkC,EAAE;IAEpC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,YAAY,EAAE,GAAG,YAAY,CAAC,CAAC,CAAC;IAChE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,IAAI,GAAG,4BAA4B,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,IAAI,GAAG,eAAe,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,qBAAqB,CAAC,KAAc,EAAE,IAAY;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,cAAc,CAAC,KAAc,EAAE,IAAY;IACzD,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,qBAAqB,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,KAAc,EAAE,IAAY;IACxD,MAAM,IAAI,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,iCAAe,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7C,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,0CAA0C,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAYD,SAAgB,kBAAkB,CAAC,KAAc,EAAE,IAAY;IAC7D,MAAM,MAAM,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,SAAS,CACjB,GAAG,IAAI,4CAA4C,CACpD,CAAC;IACJ,CAAC;IACD,IACE,CAAC,iCAAe,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAC5E,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,GAAG,IAAI,4CAA4C,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,6BAA6B,CAC3C,KAAc,EACd,IAAY;IAEZ,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,uCAAuC,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAe,CAAC;AACzB,CAAC;AAED,SAAgB,gBAAgB,CAC9B,KAAc,EACd,IAAY,EACZ,MAAoB;IAEpB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAU,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,SAAS,CACjB,GAAG,IAAI,oBAAoB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7E,CAAC;IACJ,CAAC;IACD,OAAO,KAAU,CAAC;AACpB,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAc,EACd,IAAY;IAEZ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAClB;QACE,GAAG,IAAI,GAAG,CACR,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CACzB,qBAAqB,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,CAClD,CACF;KACF,CAAC,IAAI,EAAE,CACT,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CACxC,KAAc,EACd,IAAY;IAEZ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,oBAAoB,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACtC,MAAM,SAAS,GAAG,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;QACtC,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,SAAS,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACrE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,IAAI,EAAE,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,SAAS,OAAO,CAAC;YAC7D,GAAG,EAAE,qBAAqB,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,SAAS,MAAM,CAAC;SAC3D,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAC5B,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAA,sCAAa,EAAC,KAAK,CAAC,EAAE,KAAK,CAAU,CAAC,CAC5D,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAClB,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC;SAC1B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACpD,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAC7B,CAAC;AACJ,CAAC;AAED,SAAgB,2BAA2B,CACzC,KAAc,EACd,IAAY;IAEZ,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC7D,IACE,UAAU,KAAK,IAAI;QACnB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACzB,OAAO,UAAU,KAAK,QAAQ,EAC9B,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,+BAA+B,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,UAA0D,CAAC;AACpE,CAAC;AAED,SAAgB,0BAA0B,CACxC,KAAc,EACd,IAAY;IAEZ,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9D,IACE,UAAU,KAAK,IAAI;QACnB,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QACzB,OAAO,UAAU,KAAK,QAAQ,EAC9B,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,+BAA+B,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,UAA0D,CAAC;AACpE,CAAC;AAED,SAAgB,oCAAoC,CAClD,KAAc,EACd,IAAY;IAEZ,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,SAAS,OAAO,CAAC,OAAgB,EAAE,WAAmB;QACpD,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,SAAS,CAAC,GAAG,WAAW,2BAA2B,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAErB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC/B,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,IAAI,KAAK,GAAG,CAAC,CAC3C,CAAC;YACF,OAAO;QACT,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,GAAG,WAAW,mCAAmC,CAAC,CAAC;QACzE,CAAC;QAED,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACnD,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7C,MAAM,IAAI,SAAS,CACjB,GAAG,WAAW,IAAI,GAAG,wEAAwE,CAC9F,CAAC;YACJ,CAAC;YACD,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,IAAI,GAAG,EAAE,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACvB,CAAC;AAED,SAAS,sBAAsB,CAC7B,KAAc,EACd,IAAY,EACZ,kBAA2B,EAC3B,UAAU,IAAI,GAAG,EAAU;IAE3B,IACE,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS,EAC1B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,iCAAiC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,2BAA2B,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAEnB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAC5C,sBAAsB,CACpB,KAAK,EACL,GAAG,IAAI,IAAI,KAAK,GAAG,EACnB,kBAAkB,EAClB,OAAO,CACR,CACF,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACtB,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnC,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,UAAU,GAAuC,EAAE,CAAC;IAC1D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IACE,kBAAkB;YAClB,aAAa,CAAC,GAAG,CAAC;YAClB,CAAC,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,EAC1C,CAAC;YACD,MAAM,IAAI,SAAS,CACjB,GAAG,IAAI,IAAI,GAAG,8FAA8F,CAC7G,CAAC;QACJ,CAAC;QACD,UAAU,CAAC,GAAG,CAAC,GAAG,sBAAsB,CACtC,KAAK,EACL,GAAG,IAAI,IAAI,GAAG,EAAE,EAChB,kBAAkB,EAClB,OAAO,CACR,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtB,OAAO,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9D,OAAO;QACL,SAAS;QACT,SAAS;QACT,QAAQ;QACR,UAAU;QACV,OAAO;QACP,cAAc;QACd,gBAAgB;QAChB,KAAK;QACL,OAAO;QACP,SAAS;QACT,WAAW;QACX,SAAS;QACT,WAAW;QACX,QAAQ;QACR,UAAU;QACV,QAAQ;QACR,UAAU;QACV,MAAM;QACN,QAAQ;KACT,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,aAAa,CACpB,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/C,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC"}

package/dist/lib/launch-identity/index.d.ts

@@ -1,5 +0,0 @@
-export * from './canonical-contract';
-export * from './runtime-template-key';
-export * from './session-binding';
-export * from './thread-reuse-key';
-//# sourceMappingURL=index.d.ts.map

package/dist/lib/launch-identity/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/lib/launch-identity/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}

package/dist/lib/launch-identity/index.js

@@ -1,21 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./canonical-contract"), exports);
-__exportStar(require("./runtime-template-key"), exports);
-__exportStar(require("./session-binding"), exports);
-__exportStar(require("./thread-reuse-key"), exports);
-//# sourceMappingURL=index.js.map

package/dist/lib/launch-identity/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/launch-identity/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,yDAAuC;AACvC,oDAAkC;AAClC,qDAAmC"}

package/dist/lib/launch-identity/runtime-template-key.d.ts

@@ -1,30 +0,0 @@
-export declare enum RuntimeTemplateTenantDependency {
-    OrganizationNeutral = "organization-neutral",
-    OrganizationBound = "organization-bound"
-}
-export declare enum RuntimeTemplateTrustPolicy {
-    Shared = "shared",
-    Dedicated = "dedicated",
-    Confidential = "confidential"
-}
-export interface RuntimeTemplateKey {
-    readonly schemaVersion: 1;
-    readonly tenantDependency: RuntimeTemplateTenantDependency;
-    readonly trustPolicy: RuntimeTemplateTrustPolicy;
-    readonly runtimeRef: string;
-    readonly runtimeRevision: string;
-    readonly imageDigest: string;
-    readonly agentRevision: string;
-    readonly primaryAgentHash: string;
-    readonly subagentsHash: string;
-    readonly skillsHash: string;
-    readonly toolsHash: string;
-    readonly capabilityDescriptorsHash: string;
-    readonly mcpDescriptorsHash: string;
-    readonly workspacePlanHash: string;
-    readonly layoutProfile: string;
-}
-export declare function createRuntimeTemplateKey(input: unknown): RuntimeTemplateKey;
-export declare function serializeRuntimeTemplateKey(input: RuntimeTemplateKey): string;
-export declare function hashRuntimeTemplateKey(input: RuntimeTemplateKey): string;
-//# sourceMappingURL=runtime-template-key.d.ts.map

package/dist/lib/launch-identity/runtime-template-key.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-template-key.d.ts","sourceRoot":"","sources":["../../../src/lib/launch-identity/runtime-template-key.ts"],"names":[],"mappings":"AAWA,oBAAY,+BAA+B;IACzC,mBAAmB,yBAAyB;IAC5C,iBAAiB,uBAAuB;CACzC;AAED,oBAAY,0BAA0B;IACpC,MAAM,WAAW;IACjB,SAAS,cAAc;IACvB,YAAY,iBAAiB;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,EAAE,+BAA+B,CAAC;IAC3D,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AA4BD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAoE3E;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAE7E;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,kBAAkB,GAAG,MAAM,CAExE"}

package/dist/lib/launch-identity/runtime-template-key.js

@@ -1,69 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.RuntimeTemplateTrustPolicy = exports.RuntimeTemplateTenantDependency = void 0;
-exports.createRuntimeTemplateKey = createRuntimeTemplateKey;
-exports.serializeRuntimeTemplateKey = serializeRuntimeTemplateKey;
-exports.hashRuntimeTemplateKey = hashRuntimeTemplateKey;
-const canonical_contract_1 = require("./canonical-contract");
-var RuntimeTemplateTenantDependency;
-(function (RuntimeTemplateTenantDependency) {
-    RuntimeTemplateTenantDependency["OrganizationNeutral"] = "organization-neutral";
-    RuntimeTemplateTenantDependency["OrganizationBound"] = "organization-bound";
-})(RuntimeTemplateTenantDependency || (exports.RuntimeTemplateTenantDependency = RuntimeTemplateTenantDependency = {}));
-var RuntimeTemplateTrustPolicy;
-(function (RuntimeTemplateTrustPolicy) {
-    RuntimeTemplateTrustPolicy["Shared"] = "shared";
-    RuntimeTemplateTrustPolicy["Dedicated"] = "dedicated";
-    RuntimeTemplateTrustPolicy["Confidential"] = "confidential";
-})(RuntimeTemplateTrustPolicy || (exports.RuntimeTemplateTrustPolicy = RuntimeTemplateTrustPolicy = {}));
-const REQUIRED_KEYS = [
-    'schemaVersion',
-    'tenantDependency',
-    'trustPolicy',
-    'runtimeRef',
-    'runtimeRevision',
-    'imageDigest',
-    'agentRevision',
-    'primaryAgentHash',
-    'subagentsHash',
-    'skillsHash',
-    'toolsHash',
-    'capabilityDescriptorsHash',
-    'mcpDescriptorsHash',
-    'workspacePlanHash',
-    'layoutProfile',
-];
-const TENANT_DEPENDENCIES = Object.values(RuntimeTemplateTenantDependency);
-const TRUST_POLICIES = Object.values(RuntimeTemplateTrustPolicy);
-function createRuntimeTemplateKey(input) {
-    (0, canonical_contract_1.assertNoTenantOrSecretTemplateFields)(input, 'RuntimeTemplateKey');
-    const object = (0, canonical_contract_1.requireExactObject)(input, 'RuntimeTemplateKey', REQUIRED_KEYS);
-    if (object.schemaVersion !== 1) {
-        throw new TypeError('RuntimeTemplateKey.schemaVersion must be 1.');
-    }
-    const imageDigest = (0, canonical_contract_1.requireImageDigest)(object.imageDigest, 'RuntimeTemplateKey.imageDigest');
-    return Object.freeze({
-        schemaVersion: 1,
-        tenantDependency: (0, canonical_contract_1.requireEnumValue)(object.tenantDependency, 'RuntimeTemplateKey.tenantDependency', TENANT_DEPENDENCIES),
-        trustPolicy: (0, canonical_contract_1.requireEnumValue)(object.trustPolicy, 'RuntimeTemplateKey.trustPolicy', TRUST_POLICIES),
-        runtimeRef: (0, canonical_contract_1.requireNonEmptyString)(object.runtimeRef, 'RuntimeTemplateKey.runtimeRef'),
-        runtimeRevision: (0, canonical_contract_1.requireNonEmptyString)(object.runtimeRevision, 'RuntimeTemplateKey.runtimeRevision'),
-        imageDigest,
-        agentRevision: (0, canonical_contract_1.requireNonEmptyString)(object.agentRevision, 'RuntimeTemplateKey.agentRevision'),
-        primaryAgentHash: (0, canonical_contract_1.requireSha256)(object.primaryAgentHash, 'RuntimeTemplateKey.primaryAgentHash'),
-        subagentsHash: (0, canonical_contract_1.requireSha256)(object.subagentsHash, 'RuntimeTemplateKey.subagentsHash'),
-        skillsHash: (0, canonical_contract_1.requireSha256)(object.skillsHash, 'RuntimeTemplateKey.skillsHash'),
-        toolsHash: (0, canonical_contract_1.requireSha256)(object.toolsHash, 'RuntimeTemplateKey.toolsHash'),
-        capabilityDescriptorsHash: (0, canonical_contract_1.requireSha256)(object.capabilityDescriptorsHash, 'RuntimeTemplateKey.capabilityDescriptorsHash'),
-        mcpDescriptorsHash: (0, canonical_contract_1.requireSha256)(object.mcpDescriptorsHash, 'RuntimeTemplateKey.mcpDescriptorsHash'),
-        workspacePlanHash: (0, canonical_contract_1.requireSha256)(object.workspacePlanHash, 'RuntimeTemplateKey.workspacePlanHash'),
-        layoutProfile: (0, canonical_contract_1.requireNonEmptyString)(object.layoutProfile, 'RuntimeTemplateKey.layoutProfile'),
-    });
-}
-function serializeRuntimeTemplateKey(input) {
-    return (0, canonical_contract_1.canonicalContractJson)(createRuntimeTemplateKey(input));
-}
-function hashRuntimeTemplateKey(input) {
-    return (0, canonical_contract_1.hashCanonicalContract)(createRuntimeTemplateKey(input));
-}
-//# sourceMappingURL=runtime-template-key.js.map

package/dist/lib/launch-identity/runtime-template-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-template-key.js","sourceRoot":"","sources":["../../../src/lib/launch-identity/runtime-template-key.ts"],"names":[],"mappings":";;;AAkEA,4DAoEC;AAED,kEAEC;AAED,wDAEC;AA9ID,6DAS8B;AAE9B,IAAY,+BAGX;AAHD,WAAY,+BAA+B;IACzC,+EAA4C,CAAA;IAC5C,2EAAwC,CAAA;AAC1C,CAAC,EAHW,+BAA+B,+CAA/B,+BAA+B,QAG1C;AAED,IAAY,0BAIX;AAJD,WAAY,0BAA0B;IACpC,+CAAiB,CAAA;IACjB,qDAAuB,CAAA;IACvB,2DAA6B,CAAA;AAC/B,CAAC,EAJW,0BAA0B,0CAA1B,0BAA0B,QAIrC;AAoBD,MAAM,aAAa,GAAG;IACpB,eAAe;IACf,kBAAkB;IAClB,aAAa;IACb,YAAY;IACZ,iBAAiB;IACjB,aAAa;IACb,eAAe;IACf,kBAAkB;IAClB,eAAe;IACf,YAAY;IACZ,WAAW;IACX,2BAA2B;IAC3B,oBAAoB;IACpB,mBAAmB;IACnB,eAAe;CACP,CAAC;AAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;AAC3E,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAOjE,SAAgB,wBAAwB,CAAC,KAAc;IACrD,IAAA,yDAAoC,EAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAA,uCAAkB,EAAC,KAAK,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;IAE9E,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IACrE,CAAC;IAED,MAAM,WAAW,GAAG,IAAA,uCAAkB,EACpC,MAAM,CAAC,WAAW,EAClB,gCAAgC,CACjC,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAC;QAChB,gBAAgB,EAAE,IAAA,qCAAgB,EAChC,MAAM,CAAC,gBAAgB,EACvB,qCAAqC,EACrC,mBAAmB,CACpB;QACD,WAAW,EAAE,IAAA,qCAAgB,EAC3B,MAAM,CAAC,WAAW,EAClB,gCAAgC,EAChC,cAAc,CACf;QACD,UAAU,EAAE,IAAA,0CAAqB,EAC/B,MAAM,CAAC,UAAU,EACjB,+BAA+B,CAChC;QACD,eAAe,EAAE,IAAA,0CAAqB,EACpC,MAAM,CAAC,eAAe,EACtB,oCAAoC,CACrC;QACD,WAAW;QACX,aAAa,EAAE,IAAA,0CAAqB,EAClC,MAAM,CAAC,aAAa,EACpB,kCAAkC,CACnC;QACD,gBAAgB,EAAE,IAAA,kCAAa,EAC7B,MAAM,CAAC,gBAAgB,EACvB,qCAAqC,CACtC;QACD,aAAa,EAAE,IAAA,kCAAa,EAC1B,MAAM,CAAC,aAAa,EACpB,kCAAkC,CACnC;QACD,UAAU,EAAE,IAAA,kCAAa,EACvB,MAAM,CAAC,UAAU,EACjB,+BAA+B,CAChC;QACD,SAAS,EAAE,IAAA,kCAAa,EAAC,MAAM,CAAC,SAAS,EAAE,8BAA8B,CAAC;QAC1E,yBAAyB,EAAE,IAAA,kCAAa,EACtC,MAAM,CAAC,yBAAyB,EAChC,8CAA8C,CAC/C;QACD,kBAAkB,EAAE,IAAA,kCAAa,EAC/B,MAAM,CAAC,kBAAkB,EACzB,uCAAuC,CACxC;QACD,iBAAiB,EAAE,IAAA,kCAAa,EAC9B,MAAM,CAAC,iBAAiB,EACxB,sCAAsC,CACvC;QACD,aAAa,EAAE,IAAA,0CAAqB,EAClC,MAAM,CAAC,aAAa,EACpB,kCAAkC,CACnC;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,2BAA2B,CAAC,KAAyB;IACnE,OAAO,IAAA,0CAAqB,EAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC;AAED,SAAgB,sBAAsB,CAAC,KAAyB;IAC9D,OAAO,IAAA,0CAAqB,EAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;AAChE,CAAC"}

package/dist/lib/launch-identity/session-binding.d.ts

@@ -1,24 +0,0 @@
-import { type CanonicalJsonValue, type ResourceBindingRef } from './canonical-contract';
-export interface SessionBinding {
-    readonly schemaVersion: 1;
-    readonly sessionId: string;
-    readonly organizationId: string;
-    readonly projectId: string;
-    readonly userId: string;
-    readonly domainRefs: readonly ResourceBindingRef[];
-    readonly storageAllocationRef: string;
-    readonly workingFileSourceRefs: readonly string[];
-    readonly outputRouteRef: string;
-    readonly actorTokenRef?: string;
-    readonly serviceTokenRef?: string;
-    readonly providerTokenRefs: readonly string[];
-    readonly credentialGrantRefs: readonly string[];
-    readonly databaseGrantRefs: readonly string[];
-    readonly dynamicContext: Readonly<Record<string, CanonicalJsonValue>>;
-    readonly bindingRevision: string;
-    readonly bindingEpoch: number;
-}
-export declare function createSessionBinding(input: unknown): SessionBinding;
-export declare function serializeSessionBinding(input: SessionBinding): string;
-export declare function hashSessionBinding(input: SessionBinding): string;
-//# sourceMappingURL=session-binding.d.ts.map

package/dist/lib/launch-identity/session-binding.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-binding.d.ts","sourceRoot":"","sources":["../../../src/lib/launch-identity/session-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,kBAAkB,EAOxB,MAAM,sBAAsB,CAAC;AAE9B,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACnD,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,SAAS,MAAM,EAAE,CAAC;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AA2BD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAqFnE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAErE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAEhE"}

package/dist/lib/launch-identity/session-binding.js

@@ -1,62 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createSessionBinding = createSessionBinding;
-exports.serializeSessionBinding = serializeSessionBinding;
-exports.hashSessionBinding = hashSessionBinding;
-const canonical_contract_1 = require("./canonical-contract");
-const REQUIRED_KEYS = [
-    'schemaVersion',
-    'sessionId',
-    'organizationId',
-    'projectId',
-    'userId',
-    'domainRefs',
-    'storageAllocationRef',
-    'workingFileSourceRefs',
-    'outputRouteRef',
-    'providerTokenRefs',
-    'credentialGrantRefs',
-    'databaseGrantRefs',
-    'dynamicContext',
-    'bindingRevision',
-    'bindingEpoch',
-];
-const OPTIONAL_KEYS = ['actorTokenRef', 'serviceTokenRef'];
-function createSessionBinding(input) {
-    const object = (0, canonical_contract_1.requireExactObject)(input, 'SessionBinding', REQUIRED_KEYS, OPTIONAL_KEYS);
-    if (object.schemaVersion !== 1) {
-        throw new TypeError('SessionBinding.schemaVersion must be 1.');
-    }
-    const actorTokenRef = object.actorTokenRef === undefined
-        ? undefined
-        : (0, canonical_contract_1.requireNonEmptyString)(object.actorTokenRef, 'SessionBinding.actorTokenRef');
-    const serviceTokenRef = object.serviceTokenRef === undefined
-        ? undefined
-        : (0, canonical_contract_1.requireNonEmptyString)(object.serviceTokenRef, 'SessionBinding.serviceTokenRef');
-    return Object.freeze({
-        schemaVersion: 1,
-        sessionId: (0, canonical_contract_1.requireNonEmptyString)(object.sessionId, 'SessionBinding.sessionId'),
-        organizationId: (0, canonical_contract_1.requireNonEmptyString)(object.organizationId, 'SessionBinding.organizationId'),
-        projectId: (0, canonical_contract_1.requireNonEmptyString)(object.projectId, 'SessionBinding.projectId'),
-        userId: (0, canonical_contract_1.requireNonEmptyString)(object.userId, 'SessionBinding.userId'),
-        domainRefs: (0, canonical_contract_1.requireResourceBindingRefs)(object.domainRefs, 'SessionBinding.domainRefs'),
-        storageAllocationRef: (0, canonical_contract_1.requireNonEmptyString)(object.storageAllocationRef, 'SessionBinding.storageAllocationRef'),
-        workingFileSourceRefs: (0, canonical_contract_1.requireStringRefs)(object.workingFileSourceRefs, 'SessionBinding.workingFileSourceRefs'),
-        outputRouteRef: (0, canonical_contract_1.requireNonEmptyString)(object.outputRouteRef, 'SessionBinding.outputRouteRef'),
-        ...(actorTokenRef === undefined ? {} : { actorTokenRef }),
-        ...(serviceTokenRef === undefined ? {} : { serviceTokenRef }),
-        providerTokenRefs: (0, canonical_contract_1.requireStringRefs)(object.providerTokenRefs, 'SessionBinding.providerTokenRefs'),
-        credentialGrantRefs: (0, canonical_contract_1.requireStringRefs)(object.credentialGrantRefs, 'SessionBinding.credentialGrantRefs'),
-        databaseGrantRefs: (0, canonical_contract_1.requireStringRefs)(object.databaseGrantRefs, 'SessionBinding.databaseGrantRefs'),
-        dynamicContext: (0, canonical_contract_1.requireSecretFreeJsonObject)(object.dynamicContext, 'SessionBinding.dynamicContext'),
-        bindingRevision: (0, canonical_contract_1.requireNonEmptyString)(object.bindingRevision, 'SessionBinding.bindingRevision'),
-        bindingEpoch: (0, canonical_contract_1.requireNonNegativeSafeInteger)(object.bindingEpoch, 'SessionBinding.bindingEpoch'),
-    });
-}
-function serializeSessionBinding(input) {
-    return (0, canonical_contract_1.canonicalContractJson)(createSessionBinding(input));
-}
-function hashSessionBinding(input) {
-    return (0, canonical_contract_1.hashCanonicalContract)(createSessionBinding(input));
-}
-//# sourceMappingURL=session-binding.js.map

package/dist/lib/launch-identity/session-binding.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-binding.js","sourceRoot":"","sources":["../../../src/lib/launch-identity/session-binding.ts"],"names":[],"mappings":";;AA0DA,oDAqFC;AAED,0DAEC;AAED,gDAEC;AAvJD,6DAW8B;AAsB9B,MAAM,aAAa,GAAG;IACpB,eAAe;IACf,WAAW;IACX,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,YAAY;IACZ,sBAAsB;IACtB,uBAAuB;IACvB,gBAAgB;IAChB,mBAAmB;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,gBAAgB;IAChB,iBAAiB;IACjB,cAAc;CACN,CAAC;AAEX,MAAM,aAAa,GAAG,CAAC,eAAe,EAAE,iBAAiB,CAAU,CAAC;AAOpE,SAAgB,oBAAoB,CAAC,KAAc;IACjD,MAAM,MAAM,GAAG,IAAA,uCAAkB,EAC/B,KAAK,EACL,gBAAgB,EAChB,aAAa,EACb,aAAa,CACd,CAAC;IAEF,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,aAAa,GACjB,MAAM,CAAC,aAAa,KAAK,SAAS;QAChC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAA,0CAAqB,EACnB,MAAM,CAAC,aAAa,EACpB,8BAA8B,CAC/B,CAAC;IACR,MAAM,eAAe,GACnB,MAAM,CAAC,eAAe,KAAK,SAAS;QAClC,CAAC,CAAC,SAAS;QACX,CAAC,CAAC,IAAA,0CAAqB,EACnB,MAAM,CAAC,eAAe,EACtB,gCAAgC,CACjC,CAAC;IAER,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAC;QAChB,SAAS,EAAE,IAAA,0CAAqB,EAC9B,MAAM,CAAC,SAAS,EAChB,0BAA0B,CAC3B;QACD,cAAc,EAAE,IAAA,0CAAqB,EACnC,MAAM,CAAC,cAAc,EACrB,+BAA+B,CAChC;QACD,SAAS,EAAE,IAAA,0CAAqB,EAC9B,MAAM,CAAC,SAAS,EAChB,0BAA0B,CAC3B;QACD,MAAM,EAAE,IAAA,0CAAqB,EAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC;QACrE,UAAU,EAAE,IAAA,+CAA0B,EACpC,MAAM,CAAC,UAAU,EACjB,2BAA2B,CAC5B;QACD,oBAAoB,EAAE,IAAA,0CAAqB,EACzC,MAAM,CAAC,oBAAoB,EAC3B,qCAAqC,CACtC;QACD,qBAAqB,EAAE,IAAA,sCAAiB,EACtC,MAAM,CAAC,qBAAqB,EAC5B,sCAAsC,CACvC;QACD,cAAc,EAAE,IAAA,0CAAqB,EACnC,MAAM,CAAC,cAAc,EACrB,+BAA+B,CAChC;QACD,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;QACzD,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC;QAC7D,iBAAiB,EAAE,IAAA,sCAAiB,EAClC,MAAM,CAAC,iBAAiB,EACxB,kCAAkC,CACnC;QACD,mBAAmB,EAAE,IAAA,sCAAiB,EACpC,MAAM,CAAC,mBAAmB,EAC1B,oCAAoC,CACrC;QACD,iBAAiB,EAAE,IAAA,sCAAiB,EAClC,MAAM,CAAC,iBAAiB,EACxB,kCAAkC,CACnC;QACD,cAAc,EAAE,IAAA,gDAA2B,EACzC,MAAM,CAAC,cAAc,EACrB,+BAA+B,CAChC;QACD,eAAe,EAAE,IAAA,0CAAqB,EACpC,MAAM,CAAC,eAAe,EACtB,gCAAgC,CACjC;QACD,YAAY,EAAE,IAAA,kDAA6B,EACzC,MAAM,CAAC,YAAY,EACnB,6BAA6B,CAC9B;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,uBAAuB,CAAC,KAAqB;IAC3D,OAAO,IAAA,0CAAqB,EAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAqB;IACtD,OAAO,IAAA,0CAAqB,EAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/lib/launch-identity/thread-reuse-key.d.ts

@@ -1,19 +0,0 @@
-import { type ResourceBindingRef } from './canonical-contract';
-export declare enum ThreadReusePolicy {
-    ExplicitlyShareable = "explicitly-shareable"
-}
-export interface ThreadReuseKey {
-    readonly schemaVersion: 1;
-    readonly reusePolicy: ThreadReusePolicy.ExplicitlyShareable;
-    readonly organizationId: string;
-    readonly projectId: string;
-    readonly userId: string;
-    readonly runtimeTemplateHash: string;
-    readonly conversationRef: string;
-    readonly workspaceRef: string;
-    readonly domainRefs: readonly ResourceBindingRef[];
-}
-export declare function createThreadReuseKey(input: unknown): ThreadReuseKey;
-export declare function serializeThreadReuseKey(input: ThreadReuseKey): string;
-export declare function hashThreadReuseKey(input: ThreadReuseKey): string;
-//# sourceMappingURL=thread-reuse-key.d.ts.map

package/dist/lib/launch-identity/thread-reuse-key.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"thread-reuse-key.d.ts","sourceRoot":"","sources":["../../../src/lib/launch-identity/thread-reuse-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,kBAAkB,EAMxB,MAAM,sBAAsB,CAAC;AAE9B,oBAAY,iBAAiB;IAC3B,mBAAmB,yBAAyB;CAC7C;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC,mBAAmB,CAAC;IAC5D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACpD;AAmBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAwCnE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAErE;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,CAEhE"}

package/dist/lib/launch-identity/thread-reuse-key.js

@@ -1,46 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ThreadReusePolicy = void 0;
-exports.createThreadReuseKey = createThreadReuseKey;
-exports.serializeThreadReuseKey = serializeThreadReuseKey;
-exports.hashThreadReuseKey = hashThreadReuseKey;
-const canonical_contract_1 = require("./canonical-contract");
-var ThreadReusePolicy;
-(function (ThreadReusePolicy) {
-    ThreadReusePolicy["ExplicitlyShareable"] = "explicitly-shareable";
-})(ThreadReusePolicy || (exports.ThreadReusePolicy = ThreadReusePolicy = {}));
-const REQUIRED_KEYS = [
-    'schemaVersion',
-    'reusePolicy',
-    'organizationId',
-    'projectId',
-    'userId',
-    'runtimeTemplateHash',
-    'conversationRef',
-    'workspaceRef',
-    'domainRefs',
-];
-function createThreadReuseKey(input) {
-    const object = (0, canonical_contract_1.requireExactObject)(input, 'ThreadReuseKey', REQUIRED_KEYS);
-    if (object.schemaVersion !== 1) {
-        throw new TypeError('ThreadReuseKey.schemaVersion must be 1.');
-    }
-    return Object.freeze({
-        schemaVersion: 1,
-        reusePolicy: (0, canonical_contract_1.requireEnumValue)(object.reusePolicy, 'ThreadReuseKey.reusePolicy', [ThreadReusePolicy.ExplicitlyShareable]),
-        organizationId: (0, canonical_contract_1.requireNonEmptyString)(object.organizationId, 'ThreadReuseKey.organizationId'),
-        projectId: (0, canonical_contract_1.requireNonEmptyString)(object.projectId, 'ThreadReuseKey.projectId'),
-        userId: (0, canonical_contract_1.requireNonEmptyString)(object.userId, 'ThreadReuseKey.userId'),
-        runtimeTemplateHash: (0, canonical_contract_1.requireSha256)(object.runtimeTemplateHash, 'ThreadReuseKey.runtimeTemplateHash'),
-        conversationRef: (0, canonical_contract_1.requireNonEmptyString)(object.conversationRef, 'ThreadReuseKey.conversationRef'),
-        workspaceRef: (0, canonical_contract_1.requireNonEmptyString)(object.workspaceRef, 'ThreadReuseKey.workspaceRef'),
-        domainRefs: (0, canonical_contract_1.requireResourceBindingRefs)(object.domainRefs, 'ThreadReuseKey.domainRefs'),
-    });
-}
-function serializeThreadReuseKey(input) {
-    return (0, canonical_contract_1.canonicalContractJson)(createThreadReuseKey(input));
-}
-function hashThreadReuseKey(input) {
-    return (0, canonical_contract_1.hashCanonicalContract)(createThreadReuseKey(input));
-}
-//# sourceMappingURL=thread-reuse-key.js.map

package/dist/lib/launch-identity/thread-reuse-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"thread-reuse-key.js","sourceRoot":"","sources":["../../../src/lib/launch-identity/thread-reuse-key.ts"],"names":[],"mappings":";;;AA4CA,oDAwCC;AAED,0DAEC;AAED,gDAEC;AA5FD,6DAS8B;AAE9B,IAAY,iBAEX;AAFD,WAAY,iBAAiB;IAC3B,iEAA4C,CAAA;AAC9C,CAAC,EAFW,iBAAiB,iCAAjB,iBAAiB,QAE5B;AAcD,MAAM,aAAa,GAAG;IACpB,eAAe;IACf,aAAa;IACb,gBAAgB;IAChB,WAAW;IACX,QAAQ;IACR,qBAAqB;IACrB,iBAAiB;IACjB,cAAc;IACd,YAAY;CACJ,CAAC;AAOX,SAAgB,oBAAoB,CAAC,KAAc;IACjD,MAAM,MAAM,GAAG,IAAA,uCAAkB,EAAC,KAAK,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;IAE1E,IAAI,MAAM,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,SAAS,CAAC,yCAAyC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,aAAa,EAAE,CAAC;QAChB,WAAW,EAAE,IAAA,qCAAgB,EAC3B,MAAM,CAAC,WAAW,EAClB,4BAA4B,EAC5B,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CACxC;QACD,cAAc,EAAE,IAAA,0CAAqB,EACnC,MAAM,CAAC,cAAc,EACrB,+BAA+B,CAChC;QACD,SAAS,EAAE,IAAA,0CAAqB,EAC9B,MAAM,CAAC,SAAS,EAChB,0BAA0B,CAC3B;QACD,MAAM,EAAE,IAAA,0CAAqB,EAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC;QACrE,mBAAmB,EAAE,IAAA,kCAAa,EAChC,MAAM,CAAC,mBAAmB,EAC1B,oCAAoC,CACrC;QACD,eAAe,EAAE,IAAA,0CAAqB,EACpC,MAAM,CAAC,eAAe,EACtB,gCAAgC,CACjC;QACD,YAAY,EAAE,IAAA,0CAAqB,EACjC,MAAM,CAAC,YAAY,EACnB,6BAA6B,CAC9B;QACD,UAAU,EAAE,IAAA,+CAA0B,EACpC,MAAM,CAAC,UAAU,EACjB,2BAA2B,CAC5B;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,uBAAuB,CAAC,KAAqB;IAC3D,OAAO,IAAA,0CAAqB,EAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED,SAAgB,kBAAkB,CAAC,KAAqB;IACtD,OAAO,IAAA,0CAAqB,EAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5D,CAAC"}

package/dist/lib/skill-bundle-template-resolver.d.ts

@@ -1,23 +0,0 @@
-import type { TemplateResolver } from './types';
-export interface SkillBundleResource {
-    readonly relPath: string;
-    readonly content: string;
-}
-export interface SkillBundle {
-    readonly slug: string;
-    readonly resources: readonly SkillBundleResource[];
-}
-export type SkillBundleFetcher = (slug: string) => Promise<SkillBundle>;
-export type TemplateCompiler = (source: string, vars: Readonly<Record<string, unknown>>) => string;
-export declare class SkillBundleTemplateNotFoundError extends Error {
-    readonly templateName: string;
-    readonly skillSlugs: readonly string[];
-    constructor(templateName: string, skillSlugs: readonly string[]);
-}
-export declare function templateResourceRelPath(templateName: string): string;
-export declare function buildSkillBundleTemplateResolver(params: {
-    readonly skillSlugs: readonly string[];
-    readonly fetchBundle: SkillBundleFetcher;
-    readonly compileTemplate: TemplateCompiler;
-}): TemplateResolver;
-//# sourceMappingURL=skill-bundle-template-resolver.d.ts.map

package/dist/lib/skill-bundle-template-resolver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"skill-bundle-template-resolver.d.ts","sourceRoot":"","sources":["../../src/lib/skill-bundle-template-resolver.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAYhD,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAMD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;CACpD;AAQD,MAAM,MAAM,kBAAkB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;AAMxE,MAAM,MAAM,gBAAgB,GAAG,CAC7B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KACpC,MAAM,CAAC;AAGZ,qBAAa,gCAAiC,SAAQ,KAAK;aAEvC,YAAY,EAAE,MAAM;aACpB,UAAU,EAAE,SAAS,MAAM,EAAE;gBAD7B,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,SAAS,MAAM,EAAE;CAWhD;AAMD,wBAAgB,uBAAuB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEpE;AAeD,wBAAgB,gCAAgC,CAAC,MAAM,EAAE;IACvD,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,gBAAgB,CAAC;CAC5C,GAAG,gBAAgB,CAmCnB"}