@xemahq/contracts 0.1.0

package/dist/execution-context/index.d.ts

@@ -0,0 +1,4 @@
+export * from './lib/subject';
+export * from './lib/caller';
+export * from './lib/execution-context';
+//# sourceMappingURL=index.d.ts.map

package/dist/execution-context/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution-context/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,yBAAyB,CAAC"}

package/dist/execution-context/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/subject"), exports);
+__exportStar(require("./lib/caller"), exports);
+__exportStar(require("./lib/execution-context"), exports);
+//# sourceMappingURL=index.js.map

package/dist/execution-context/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution-context/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,gDAA8B;AAC9B,+CAA6B;AAC7B,0DAAwC"}

package/dist/execution-context/lib/caller.d.ts

@@ -0,0 +1,19 @@
+import { z } from 'zod';
+export declare enum CallerKind {
+    Web = "web",
+    Api = "api",
+    Agent = "agent",
+    Workflow = "workflow",
+    Shell = "shell",
+    Scheduler = "scheduler"
+}
+export declare const CallerKindSchema: z.ZodEnum<typeof CallerKind>;
+export interface Caller {
+    kind: CallerKind;
+    appId?: string;
+    sessionId?: string;
+    ip?: string;
+    userAgent?: string;
+}
+export declare const CallerSchema: z.ZodType<Caller>;
+//# sourceMappingURL=caller.d.ts.map

package/dist/execution-context/lib/caller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/caller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAsBxB,oBAAY,UAAU;IACpB,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,KAAK,UAAU;IACf,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,SAAS,cAAc;CACxB;AAED,eAAO,MAAM,gBAAgB,8BAA2B,CAAC;AAazD,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,YAAY,EAMnB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC"}

package/dist/execution-context/lib/caller.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CallerSchema = exports.CallerKindSchema = exports.CallerKind = void 0;
+const zod_1 = require("zod");
+var CallerKind;
+(function (CallerKind) {
+    CallerKind["Web"] = "web";
+    CallerKind["Api"] = "api";
+    CallerKind["Agent"] = "agent";
+    CallerKind["Workflow"] = "workflow";
+    CallerKind["Shell"] = "shell";
+    CallerKind["Scheduler"] = "scheduler";
+})(CallerKind || (exports.CallerKind = CallerKind = {}));
+exports.CallerKindSchema = zod_1.z.nativeEnum(CallerKind);
+exports.CallerSchema = zod_1.z.object({
+    kind: exports.CallerKindSchema,
+    appId: zod_1.z.string().min(1).optional(),
+    sessionId: zod_1.z.string().min(1).optional(),
+    ip: zod_1.z.string().min(1).optional(),
+    userAgent: zod_1.z.string().min(1).optional(),
+});
+//# sourceMappingURL=caller.js.map

package/dist/execution-context/lib/caller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller.js","sourceRoot":"","sources":["../../../src/execution-context/lib/caller.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAsBxB,IAAY,UAOX;AAPD,WAAY,UAAU;IACpB,yBAAW,CAAA;IACX,yBAAW,CAAA;IACX,6BAAe,CAAA;IACf,mCAAqB,CAAA;IACrB,6BAAe,CAAA;IACf,qCAAuB,CAAA;AACzB,CAAC,EAPW,UAAU,0BAAV,UAAU,QAOrB;AAEY,QAAA,gBAAgB,GAAG,OAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAqB5C,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,wBAAgB;IACtB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAsB,CAAC"}

package/dist/execution-context/lib/execution-context.d.ts

@@ -0,0 +1,62 @@
+import { z } from 'zod';
+import { SessionParticipantRole } from '../../agent-session';
+import { type CapabilityAperture, type CapabilityRef } from '../../capability';
+import { ExecutionEnvironmentKind } from '../../execution-environment';
+import { DataClassification, type SpaceRef } from '../../space';
+import { type Caller } from './caller';
+import { type ActingForRef, type AgentSubjectRef, type SubjectRef } from './subject';
+export declare enum BiomeExecutionTrustTier {
+    Official = "official",
+    Verified = "verified"
+}
+export declare const BiomeExecutionTrustTierSchema: z.ZodEnum<typeof BiomeExecutionTrustTier>;
+export interface ExecutionContextBiome {
+    id: string;
+    version: string;
+    trustTier: BiomeExecutionTrustTier;
+    signatureVerified: boolean;
+}
+export declare const ExecutionContextBiomeSchema: z.ZodType<ExecutionContextBiome>;
+export interface ExecutionContextEnvironment {
+    id: string;
+    kind: ExecutionEnvironmentKind;
+}
+export declare const ExecutionContextEnvironmentSchema: z.ZodType<ExecutionContextEnvironment>;
+export interface ExecutionContextCapability {
+    ref: CapabilityRef;
+    inputHash?: string;
+}
+export declare const ExecutionContextCapabilitySchema: z.ZodType<ExecutionContextCapability>;
+export interface ExecutionContextResource {
+    ref: string;
+    classification?: DataClassification;
+}
+export declare const ExecutionContextResourceSchema: z.ZodType<ExecutionContextResource>;
+export interface ExecutionContextConstraints {
+    maxCostUsd?: number;
+    maxDurationSeconds?: number;
+    requireApproval?: boolean;
+    requireAudit?: boolean;
+    requireCustomerEdge?: boolean;
+}
+export declare const ExecutionContextConstraintsSchema: z.ZodType<ExecutionContextConstraints>;
+export interface ExecutionContext {
+    id: string;
+    requestId: string;
+    traceId: string;
+    subject: SubjectRef;
+    caller: Caller;
+    space: SpaceRef;
+    environment: ExecutionContextEnvironment;
+    biome?: ExecutionContextBiome;
+    capability: ExecutionContextCapability;
+    resource?: ExecutionContextResource;
+    constraints?: ExecutionContextConstraints;
+    actorChain?: ActingForRef[];
+    credentialBindingId?: string;
+    actingAgent?: AgentSubjectRef;
+    participantRole?: SessionParticipantRole;
+    aperture?: CapabilityAperture;
+}
+export declare const ExecutionContextSchema: z.ZodType<ExecutionContext>;
+//# sourceMappingURL=execution-context.d.ts.map

package/dist/execution-context/lib/execution-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,sBAAsB,EAEvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,wBAAwB,EAEzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,EAGlB,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAIL,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAiCnB,oBAAY,uBAAuB;IAEjC,QAAQ,aAAa;IAErB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,6BAA6B,2CAEzC,CAAC;AAQF,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,uBAAuB,CAAC;IACnC,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,2BAA2B,EAKlC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAYvC,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,wBAAwB,CAAC;CAChC;AAED,eAAO,MAAM,iCAAiC,EAGxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAU7C,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,aAAa,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,gCAAgC,EAGvC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AA4C5C,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IAkBZ,cAAc,CAAC,EAAE,kBAAkB,CAAC;CACrC;AAED,eAAO,MAAM,8BAA8B,EAYrC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAa1C,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,eAAO,MAAM,iCAAiC,EAMxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAa7C,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,WAAW,EAAE,2BAA2B,CAAC;IACzC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,UAAU,EAAE,0BAA0B,CAAC;IACvC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAM1C,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAM5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAuC7B,WAAW,CAAC,EAAE,eAAe,CAAC;IAU9B,eAAe,CAAC,EAAE,sBAAsB,CAAC;IAqBzC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CAC/B;AAED,eAAO,MAAM,sBAAsB,EAiB7B,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC"}

package/dist/execution-context/lib/execution-context.js

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutionContextSchema = exports.ExecutionContextConstraintsSchema = exports.ExecutionContextResourceSchema = exports.ExecutionContextCapabilitySchema = exports.ExecutionContextEnvironmentSchema = exports.ExecutionContextBiomeSchema = exports.BiomeExecutionTrustTierSchema = exports.BiomeExecutionTrustTier = void 0;
+const zod_1 = require("zod");
+const agent_session_1 = require("../../agent-session");
+const capability_1 = require("../../capability");
+const address_1 = require("../../address");
+const execution_environment_1 = require("../../execution-environment");
+const space_1 = require("../../space");
+const caller_1 = require("./caller");
+const subject_1 = require("./subject");
+var BiomeExecutionTrustTier;
+(function (BiomeExecutionTrustTier) {
+    BiomeExecutionTrustTier["Official"] = "official";
+    BiomeExecutionTrustTier["Verified"] = "verified";
+})(BiomeExecutionTrustTier || (exports.BiomeExecutionTrustTier = BiomeExecutionTrustTier = {}));
+exports.BiomeExecutionTrustTierSchema = zod_1.z.nativeEnum(BiomeExecutionTrustTier);
+exports.ExecutionContextBiomeSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    version: zod_1.z.string().min(1),
+    trustTier: exports.BiomeExecutionTrustTierSchema,
+    signatureVerified: zod_1.z.boolean(),
+});
+exports.ExecutionContextEnvironmentSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    kind: execution_environment_1.ExecutionEnvironmentKindSchema,
+});
+exports.ExecutionContextCapabilitySchema = zod_1.z.object({
+    ref: capability_1.CapabilityRefSchema,
+    inputHash: zod_1.z.string().min(1).optional(),
+});
+exports.ExecutionContextResourceSchema = zod_1.z.object({
+    ref: zod_1.z
+        .string()
+        .min(1)
+        .refine(address_1.isResourceInstanceAddress, {
+        message: 'Resource ref must name a resource instance: the canonical ' +
+            '"xema://<scope>/resource/<type>/<id>" (build it with ' +
+            'tenantResourceRef) or the legacy "resource:<type>:<id>". A bare ' +
+            '"<type>:<id>" is neither.',
+    }),
+    classification: space_1.DataClassificationSchema.optional(),
+});
+exports.ExecutionContextConstraintsSchema = zod_1.z.object({
+    maxCostUsd: zod_1.z.number().nonnegative().optional(),
+    maxDurationSeconds: zod_1.z.number().int().nonnegative().optional(),
+    requireApproval: zod_1.z.boolean().optional(),
+    requireAudit: zod_1.z.boolean().optional(),
+    requireCustomerEdge: zod_1.z.boolean().optional(),
+});
+exports.ExecutionContextSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    requestId: zod_1.z.string().min(1),
+    traceId: zod_1.z.string().min(1),
+    subject: subject_1.SubjectRefSchema,
+    caller: caller_1.CallerSchema,
+    space: space_1.SpaceRefSchema,
+    environment: exports.ExecutionContextEnvironmentSchema,
+    biome: exports.ExecutionContextBiomeSchema.optional(),
+    capability: exports.ExecutionContextCapabilitySchema,
+    resource: exports.ExecutionContextResourceSchema.optional(),
+    constraints: exports.ExecutionContextConstraintsSchema.optional(),
+    actorChain: zod_1.z.array(subject_1.ActingForRefSchema).optional(),
+    credentialBindingId: zod_1.z.string().min(1).optional(),
+    actingAgent: subject_1.AgentSubjectRefSchema.optional(),
+    participantRole: agent_session_1.SessionParticipantRoleSchema.optional(),
+    aperture: capability_1.CapabilityApertureSchema.optional(),
+});
+//# sourceMappingURL=execution-context.js.map

package/dist/execution-context/lib/execution-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,uDAG6B;AAC7B,iDAK0B;AAC1B,2CAA0D;AAC1D,uEAGqC;AACrC,uCAKqB;AACrB,qCAAqD;AACrD,uCAOmB;AAiCnB,IAAY,uBAKX;AALD,WAAY,uBAAuB;IAEjC,gDAAqB,CAAA;IAErB,gDAAqB,CAAA;AACvB,CAAC,EALW,uBAAuB,uCAAvB,uBAAuB,QAKlC;AAEY,QAAA,6BAA6B,GAAG,OAAC,CAAC,UAAU,CACvD,uBAAuB,CACxB,CAAC;AAeW,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,qCAA6B;IACxC,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC/B,CAAqC,CAAC;AAiB1B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,sDAA8B;CACrC,CAA2C,CAAC;AAehC,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,gCAAmB;IACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAA0C,CAAC;AAkE/B,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,OAAC;SACH,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,MAAM,CAAC,mCAAyB,EAAE;QACjC,OAAO,EACL,4DAA4D;YAC5D,uDAAuD;YACvD,kEAAkE;YAClE,2BAA2B;KAC9B,CAAC;IACJ,cAAc,EAAE,gCAAwB,CAAC,QAAQ,EAAE;CACpD,CAAwC,CAAC;AAqB7B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC7D,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAA2C,CAAC;AA6GhC,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,0BAAgB;IACzB,MAAM,EAAE,qBAAY;IACpB,KAAK,EAAE,sBAAc;IACrB,WAAW,EAAE,yCAAiC;IAC9C,KAAK,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,wCAAgC;IAC5C,QAAQ,EAAE,sCAA8B,CAAC,QAAQ,EAAE;IACnD,WAAW,EAAE,yCAAiC,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAkB,CAAC,CAAC,QAAQ,EAAE;IAClD,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,WAAW,EAAE,+BAAqB,CAAC,QAAQ,EAAE;IAC7C,eAAe,EAAE,4CAA4B,CAAC,QAAQ,EAAE;IACxD,QAAQ,EAAE,qCAAwB,CAAC,QAAQ,EAAE;CAC9C,CAAgC,CAAC"}

package/dist/execution-context/lib/subject.d.ts

@@ -0,0 +1,3 @@
+export { SubjectKind, SubjectKindSchema, SubjectRefSchema, AgentSubjectRefSchema, ActingForRefSchema, subjectRefToString, parseSubjectRef, } from '../../subject';
+export type { SubjectRef, AgentSubjectRef, ActingForRef } from '../../subject';
+//# sourceMappingURL=subject.d.ts.map

package/dist/execution-context/lib/subject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subject.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/subject.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}

package/dist/execution-context/lib/subject.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSubjectRef = exports.subjectRefToString = exports.ActingForRefSchema = exports.AgentSubjectRefSchema = exports.SubjectRefSchema = exports.SubjectKindSchema = exports.SubjectKind = void 0;
+var subject_1 = require("../../subject");
+Object.defineProperty(exports, "SubjectKind", { enumerable: true, get: function () { return subject_1.SubjectKind; } });
+Object.defineProperty(exports, "SubjectKindSchema", { enumerable: true, get: function () { return subject_1.SubjectKindSchema; } });
+Object.defineProperty(exports, "SubjectRefSchema", { enumerable: true, get: function () { return subject_1.SubjectRefSchema; } });
+Object.defineProperty(exports, "AgentSubjectRefSchema", { enumerable: true, get: function () { return subject_1.AgentSubjectRefSchema; } });
+Object.defineProperty(exports, "ActingForRefSchema", { enumerable: true, get: function () { return subject_1.ActingForRefSchema; } });
+Object.defineProperty(exports, "subjectRefToString", { enumerable: true, get: function () { return subject_1.subjectRefToString; } });
+Object.defineProperty(exports, "parseSubjectRef", { enumerable: true, get: function () { return subject_1.parseSubjectRef; } });
+//# sourceMappingURL=subject.js.map

package/dist/execution-context/lib/subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subject.js","sourceRoot":"","sources":["../../../src/execution-context/lib/subject.ts"],"names":[],"mappings":";;;AAQA,yCAQuB;AAPrB,sGAAA,WAAW,OAAA;AACX,4GAAA,iBAAiB,OAAA;AACjB,2GAAA,gBAAgB,OAAA;AAChB,gHAAA,qBAAqB,OAAA;AACrB,6GAAA,kBAAkB,OAAA;AAClB,6GAAA,kBAAkB,OAAA;AAClB,0GAAA,eAAe,OAAA"}

package/dist/execution-environment/index.d.ts

@@ -0,0 +1,7 @@
+export * from './lib/built-in-environments';
+export * from './lib/environment-reach-ceiling';
+export * from './lib/environment-data-ceiling';
+export * from './lib/approval-rule';
+export * from './lib/execution-environment';
+export * from './lib/execution-environment-header';
+//# sourceMappingURL=index.d.ts.map

package/dist/execution-environment/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution-environment/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,iCAAiC,CAAC;AAChD,cAAc,gCAAgC,CAAC;AAC/C,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,oCAAoC,CAAC"}

package/dist/execution-environment/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/built-in-environments"), exports);
+__exportStar(require("./lib/environment-reach-ceiling"), exports);
+__exportStar(require("./lib/environment-data-ceiling"), exports);
+__exportStar(require("./lib/approval-rule"), exports);
+__exportStar(require("./lib/execution-environment"), exports);
+__exportStar(require("./lib/execution-environment-header"), exports);
+//# sourceMappingURL=index.js.map

package/dist/execution-environment/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution-environment/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8DAA4C;AAC5C,kEAAgD;AAChD,iEAA+C;AAC/C,sDAAoC;AACpC,8DAA4C;AAC5C,qEAAmD"}

package/dist/execution-environment/lib/approval-rule.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+import { type CapabilityRef } from '../../capability';
+export interface ApprovalRule {
+    capability: CapabilityRef;
+    requireRole?: string;
+    requireApproverCount?: number;
+    reason?: string;
+}
+export declare const ApprovalRuleSchema: z.ZodType<ApprovalRule>;
+//# sourceMappingURL=approval-rule.d.ts.map

package/dist/execution-environment/lib/approval-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-rule.d.ts","sourceRoot":"","sources":["../../../src/execution-environment/lib/approval-rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAe3E,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,aAAa,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,kBAAkB,EAKzB,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC"}

package/dist/execution-environment/lib/approval-rule.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApprovalRuleSchema = void 0;
+const zod_1 = require("zod");
+const capability_1 = require("../../capability");
+exports.ApprovalRuleSchema = zod_1.z.object({
+    capability: capability_1.CapabilityRefSchema,
+    requireRole: zod_1.z.string().min(1).optional(),
+    requireApproverCount: zod_1.z.number().int().positive().optional(),
+    reason: zod_1.z.string().min(1).optional(),
+});
+//# sourceMappingURL=approval-rule.js.map

package/dist/execution-environment/lib/approval-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-rule.js","sourceRoot":"","sources":["../../../src/execution-environment/lib/approval-rule.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iDAA2E;AAsB9D,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,gCAAmB;IAC/B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5D,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAA4B,CAAC"}

package/dist/execution-environment/lib/built-in-environments.d.ts

@@ -0,0 +1,16 @@
+import { z } from 'zod';
+export declare enum ExecutionEnvironmentKind {
+    System = "system",
+    Org = "org",
+    Project = "project",
+    App = "app",
+    Session = "session",
+    Sandbox = "sandbox",
+    Public = "public",
+    StoreReview = "store-review",
+    TrustedDev = "trusted-dev"
+}
+export declare const ExecutionEnvironmentKindSchema: z.ZodEnum<typeof ExecutionEnvironmentKind>;
+export declare const BUILT_IN_ENVIRONMENT_SLUGS: readonly ExecutionEnvironmentKind[];
+export declare function isExecutionEnvironmentKind(slug: string): slug is ExecutionEnvironmentKind;
+//# sourceMappingURL=built-in-environments.d.ts.map

package/dist/execution-environment/lib/built-in-environments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-in-environments.d.ts","sourceRoot":"","sources":["../../../src/execution-environment/lib/built-in-environments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,oBAAY,wBAAwB;IAElC,MAAM,WAAW;IAEjB,GAAG,QAAQ;IAEX,OAAO,YAAY;IAEnB,GAAG,QAAQ;IAEX,OAAO,YAAY;IAMnB,OAAO,YAAY;IAEnB,MAAM,WAAW;IAEjB,WAAW,iBAAiB;IAU5B,UAAU,gBAAgB;CAC3B;AAED,eAAO,MAAM,8BAA8B,4CAE1C,CAAC;AAYF,eAAO,MAAM,0BAA0B,EAAE,SAAS,wBAAwB,EAUhE,CAAC;AAQX,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,GACX,IAAI,IAAI,wBAAwB,CAElC"}

package/dist/execution-environment/lib/built-in-environments.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILT_IN_ENVIRONMENT_SLUGS = exports.ExecutionEnvironmentKindSchema = exports.ExecutionEnvironmentKind = void 0;
+exports.isExecutionEnvironmentKind = isExecutionEnvironmentKind;
+const zod_1 = require("zod");
+var ExecutionEnvironmentKind;
+(function (ExecutionEnvironmentKind) {
+    ExecutionEnvironmentKind["System"] = "system";
+    ExecutionEnvironmentKind["Org"] = "org";
+    ExecutionEnvironmentKind["Project"] = "project";
+    ExecutionEnvironmentKind["App"] = "app";
+    ExecutionEnvironmentKind["Session"] = "session";
+    ExecutionEnvironmentKind["Sandbox"] = "sandbox";
+    ExecutionEnvironmentKind["Public"] = "public";
+    ExecutionEnvironmentKind["StoreReview"] = "store-review";
+    ExecutionEnvironmentKind["TrustedDev"] = "trusted-dev";
+})(ExecutionEnvironmentKind || (exports.ExecutionEnvironmentKind = ExecutionEnvironmentKind = {}));
+exports.ExecutionEnvironmentKindSchema = zod_1.z.nativeEnum(ExecutionEnvironmentKind);
+exports.BUILT_IN_ENVIRONMENT_SLUGS = [
+    ExecutionEnvironmentKind.System,
+    ExecutionEnvironmentKind.Org,
+    ExecutionEnvironmentKind.Project,
+    ExecutionEnvironmentKind.App,
+    ExecutionEnvironmentKind.Session,
+    ExecutionEnvironmentKind.Sandbox,
+    ExecutionEnvironmentKind.Public,
+    ExecutionEnvironmentKind.StoreReview,
+    ExecutionEnvironmentKind.TrustedDev,
+];
+function isExecutionEnvironmentKind(slug) {
+    return exports.BUILT_IN_ENVIRONMENT_SLUGS.includes(slug);
+}
+//# sourceMappingURL=built-in-environments.js.map

package/dist/execution-environment/lib/built-in-environments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-in-environments.js","sourceRoot":"","sources":["../../../src/execution-environment/lib/built-in-environments.ts"],"names":[],"mappings":";;;AAoFA,gEAIC;AAxFD,6BAAwB;AAmBxB,IAAY,wBA+BX;AA/BD,WAAY,wBAAwB;IAElC,6CAAiB,CAAA;IAEjB,uCAAW,CAAA;IAEX,+CAAmB,CAAA;IAEnB,uCAAW,CAAA;IAEX,+CAAmB,CAAA;IAMnB,+CAAmB,CAAA;IAEnB,6CAAiB,CAAA;IAEjB,wDAA4B,CAAA;IAU5B,sDAA0B,CAAA;AAC5B,CAAC,EA/BW,wBAAwB,wCAAxB,wBAAwB,QA+BnC;AAEY,QAAA,8BAA8B,GAAG,OAAC,CAAC,UAAU,CACxD,wBAAwB,CACzB,CAAC;AAYW,QAAA,0BAA0B,GAAwC;IAC7E,wBAAwB,CAAC,MAAM;IAC/B,wBAAwB,CAAC,GAAG;IAC5B,wBAAwB,CAAC,OAAO;IAChC,wBAAwB,CAAC,GAAG;IAC5B,wBAAwB,CAAC,OAAO;IAChC,wBAAwB,CAAC,OAAO;IAChC,wBAAwB,CAAC,MAAM;IAC/B,wBAAwB,CAAC,WAAW;IACpC,wBAAwB,CAAC,UAAU;CAC3B,CAAC;AAQX,SAAgB,0BAA0B,CACxC,IAAY;IAEZ,OAAQ,kCAAgD,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC"}

package/dist/execution-environment/lib/environment-data-ceiling.d.ts

@@ -0,0 +1,4 @@
+import { DataClassification } from '../../space';
+export declare const DEFAULT_ENVIRONMENT_MAX_DATA_CLASSIFICATION: DataClassification;
+export declare function exceedsEnvironmentDataCeiling(effective: DataClassification | undefined, ceiling: DataClassification): boolean;
+//# sourceMappingURL=environment-data-ceiling.d.ts.map

package/dist/execution-environment/lib/environment-data-ceiling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-data-ceiling.d.ts","sourceRoot":"","sources":["../../../src/execution-environment/lib/environment-data-ceiling.ts"],"names":[],"mappings":"AAAA,OAAO,EAA4B,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAwC3E,eAAO,MAAM,2CAA2C,EAAE,kBAC5B,CAAC;AAe/B,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,kBAAkB,GAAG,SAAS,EACzC,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAOT"}

package/dist/execution-environment/lib/environment-data-ceiling.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_ENVIRONMENT_MAX_DATA_CLASSIFICATION = void 0;
+exports.exceedsEnvironmentDataCeiling = exceedsEnvironmentDataCeiling;
+const space_1 = require("../../space");
+exports.DEFAULT_ENVIRONMENT_MAX_DATA_CLASSIFICATION = space_1.DataClassification.Regulated;
+function exceedsEnvironmentDataCeiling(effective, ceiling) {
+    if (effective === undefined) {
+        return false;
+    }
+    return (space_1.DATA_CLASSIFICATION_RANK[effective] > space_1.DATA_CLASSIFICATION_RANK[ceiling]);
+}
+//# sourceMappingURL=environment-data-ceiling.js.map

package/dist/execution-environment/lib/environment-data-ceiling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-data-ceiling.js","sourceRoot":"","sources":["../../../src/execution-environment/lib/environment-data-ceiling.ts"],"names":[],"mappings":";;;AAwDA,sEAUC;AAlED,uCAA2E;AAwC9D,QAAA,2CAA2C,GACtD,0BAAkB,CAAC,SAAS,CAAC;AAe/B,SAAgB,6BAA6B,CAC3C,SAAyC,EACzC,OAA2B;IAE3B,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CACL,gCAAwB,CAAC,SAAS,CAAC,GAAG,gCAAwB,CAAC,OAAO,CAAC,CACxE,CAAC;AACJ,CAAC"}

package/dist/execution-environment/lib/environment-reach-ceiling.d.ts

@@ -0,0 +1,12 @@
+import { CapabilityReach } from '../../capability';
+import { ExecutionEnvironmentKind } from './built-in-environments';
+export declare const ENVIRONMENT_REACH_CEILINGS: Readonly<Record<ExecutionEnvironmentKind, CapabilityReach>>;
+export declare enum EnvironmentCeilingEnforcement {
+    Boundary = "boundary",
+    Refinement = "refinement"
+}
+export declare const ENVIRONMENT_CEILING_ENFORCEMENT: Readonly<Record<ExecutionEnvironmentKind, EnvironmentCeilingEnforcement>>;
+export declare function environmentCeilingEnforcement(kind: ExecutionEnvironmentKind): EnvironmentCeilingEnforcement;
+export declare function environmentReachCeiling(kind: ExecutionEnvironmentKind): CapabilityReach;
+export declare function environmentConstrainsReach(kind: ExecutionEnvironmentKind): boolean;
+//# sourceMappingURL=environment-reach-ceiling.d.ts.map

package/dist/execution-environment/lib/environment-reach-ceiling.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-reach-ceiling.d.ts","sourceRoot":"","sources":["../../../src/execution-environment/lib/environment-reach-ceiling.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAoFnE,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAC/C,MAAM,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAWjD,CAAC;AA2BH,oBAAY,6BAA6B;IAEvC,QAAQ,aAAa;IAErB,UAAU,eAAe;CAC1B;AASD,eAAO,MAAM,+BAA+B,EAAE,QAAQ,CACpD,MAAM,CAAC,wBAAwB,EAAE,6BAA6B,CAAC,CAa/D,CAAC;AAGH,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,wBAAwB,GAC7B,6BAA6B,CAE/B;AASD,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,wBAAwB,GAC7B,eAAe,CAEjB;AAaD,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAET"}

package/dist/execution-environment/lib/environment-reach-ceiling.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ENVIRONMENT_CEILING_ENFORCEMENT = exports.EnvironmentCeilingEnforcement = exports.ENVIRONMENT_REACH_CEILINGS = void 0;
+exports.environmentCeilingEnforcement = environmentCeilingEnforcement;
+exports.environmentReachCeiling = environmentReachCeiling;
+exports.environmentConstrainsReach = environmentConstrainsReach;
+const capability_1 = require("../../capability");
+const built_in_environments_1 = require("./built-in-environments");
+exports.ENVIRONMENT_REACH_CEILINGS = Object.freeze({
+    [built_in_environments_1.ExecutionEnvironmentKind.System]: capability_1.CapabilityReach.Platform,
+    [built_in_environments_1.ExecutionEnvironmentKind.Org]: capability_1.CapabilityReach.Platform,
+    [built_in_environments_1.ExecutionEnvironmentKind.Project]: capability_1.CapabilityReach.Integration,
+    [built_in_environments_1.ExecutionEnvironmentKind.App]: capability_1.CapabilityReach.Integration,
+    [built_in_environments_1.ExecutionEnvironmentKind.Session]: capability_1.CapabilityReach.Integration,
+    [built_in_environments_1.ExecutionEnvironmentKind.Sandbox]: capability_1.CapabilityReach.Owner,
+    [built_in_environments_1.ExecutionEnvironmentKind.Public]: capability_1.CapabilityReach.Owner,
+    [built_in_environments_1.ExecutionEnvironmentKind.StoreReview]: capability_1.CapabilityReach.Owner,
+    [built_in_environments_1.ExecutionEnvironmentKind.TrustedDev]: capability_1.CapabilityReach.Platform,
+});
+var EnvironmentCeilingEnforcement;
+(function (EnvironmentCeilingEnforcement) {
+    EnvironmentCeilingEnforcement["Boundary"] = "boundary";
+    EnvironmentCeilingEnforcement["Refinement"] = "refinement";
+})(EnvironmentCeilingEnforcement || (exports.EnvironmentCeilingEnforcement = EnvironmentCeilingEnforcement = {}));
+exports.ENVIRONMENT_CEILING_ENFORCEMENT = Object.freeze({
+    [built_in_environments_1.ExecutionEnvironmentKind.System]: EnvironmentCeilingEnforcement.Refinement,
+    [built_in_environments_1.ExecutionEnvironmentKind.Org]: EnvironmentCeilingEnforcement.Refinement,
+    [built_in_environments_1.ExecutionEnvironmentKind.Project]: EnvironmentCeilingEnforcement.Refinement,
+    [built_in_environments_1.ExecutionEnvironmentKind.App]: EnvironmentCeilingEnforcement.Refinement,
+    [built_in_environments_1.ExecutionEnvironmentKind.Session]: EnvironmentCeilingEnforcement.Refinement,
+    [built_in_environments_1.ExecutionEnvironmentKind.Sandbox]: EnvironmentCeilingEnforcement.Boundary,
+    [built_in_environments_1.ExecutionEnvironmentKind.Public]: EnvironmentCeilingEnforcement.Boundary,
+    [built_in_environments_1.ExecutionEnvironmentKind.StoreReview]: EnvironmentCeilingEnforcement.Boundary,
+    [built_in_environments_1.ExecutionEnvironmentKind.TrustedDev]: EnvironmentCeilingEnforcement.Refinement,
+});
+function environmentCeilingEnforcement(kind) {
+    return exports.ENVIRONMENT_CEILING_ENFORCEMENT[kind];
+}
+function environmentReachCeiling(kind) {
+    return exports.ENVIRONMENT_REACH_CEILINGS[kind];
+}
+function environmentConstrainsReach(kind) {
+    return exports.ENVIRONMENT_REACH_CEILINGS[kind] !== capability_1.CapabilityReach.Platform;
+}
+//# sourceMappingURL=environment-reach-ceiling.js.map

package/dist/execution-environment/lib/environment-reach-ceiling.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-reach-ceiling.js","sourceRoot":"","sources":["../../../src/execution-environment/lib/environment-reach-ceiling.ts"],"names":[],"mappings":";;;AA4JA,sEAIC;AASD,0DAIC;AAaD,gEAIC;AA9LD,iDAAmD;AAEnD,mEAAmE;AAoFtD,QAAA,0BAA0B,GAEnC,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,gDAAwB,CAAC,MAAM,CAAC,EAAE,4BAAe,CAAC,QAAQ;IAC3D,CAAC,gDAAwB,CAAC,GAAG,CAAC,EAAE,4BAAe,CAAC,QAAQ;IACxD,CAAC,gDAAwB,CAAC,OAAO,CAAC,EAAE,4BAAe,CAAC,WAAW;IAC/D,CAAC,gDAAwB,CAAC,GAAG,CAAC,EAAE,4BAAe,CAAC,WAAW;IAC3D,CAAC,gDAAwB,CAAC,OAAO,CAAC,EAAE,4BAAe,CAAC,WAAW;IAC/D,CAAC,gDAAwB,CAAC,OAAO,CAAC,EAAE,4BAAe,CAAC,KAAK;IACzD,CAAC,gDAAwB,CAAC,MAAM,CAAC,EAAE,4BAAe,CAAC,KAAK;IACxD,CAAC,gDAAwB,CAAC,WAAW,CAAC,EAAE,4BAAe,CAAC,KAAK;IAC7D,CAAC,gDAAwB,CAAC,UAAU,CAAC,EAAE,4BAAe,CAAC,QAAQ;CAChE,CAAC,CAAC;AA2BH,IAAY,6BAKX;AALD,WAAY,6BAA6B;IAEvC,sDAAqB,CAAA;IAErB,0DAAyB,CAAA;AAC3B,CAAC,EALW,6BAA6B,6CAA7B,6BAA6B,QAKxC;AASY,QAAA,+BAA+B,GAExC,MAAM,CAAC,MAAM,CAAC;IAChB,CAAC,gDAAwB,CAAC,MAAM,CAAC,EAAE,6BAA6B,CAAC,UAAU;IAC3E,CAAC,gDAAwB,CAAC,GAAG,CAAC,EAAE,6BAA6B,CAAC,UAAU;IACxE,CAAC,gDAAwB,CAAC,OAAO,CAAC,EAAE,6BAA6B,CAAC,UAAU;IAC5E,CAAC,gDAAwB,CAAC,GAAG,CAAC,EAAE,6BAA6B,CAAC,UAAU;IACxE,CAAC,gDAAwB,CAAC,OAAO,CAAC,EAAE,6BAA6B,CAAC,UAAU;IAC5E,CAAC,gDAAwB,CAAC,OAAO,CAAC,EAAE,6BAA6B,CAAC,QAAQ;IAC1E,CAAC,gDAAwB,CAAC,MAAM,CAAC,EAAE,6BAA6B,CAAC,QAAQ;IACzE,CAAC,gDAAwB,CAAC,WAAW,CAAC,EACpC,6BAA6B,CAAC,QAAQ;IACxC,CAAC,gDAAwB,CAAC,UAAU,CAAC,EACnC,6BAA6B,CAAC,UAAU;CAC3C,CAAC,CAAC;AAGH,SAAgB,6BAA6B,CAC3C,IAA8B;IAE9B,OAAO,uCAA+B,CAAC,IAAI,CAAC,CAAC;AAC/C,CAAC;AASD,SAAgB,uBAAuB,CACrC,IAA8B;IAE9B,OAAO,kCAA0B,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAaD,SAAgB,0BAA0B,CACxC,IAA8B;IAE9B,OAAO,kCAA0B,CAAC,IAAI,CAAC,KAAK,4BAAe,CAAC,QAAQ,CAAC;AACvE,CAAC"}

package/dist/execution-environment/lib/execution-environment-header.d.ts

@@ -0,0 +1,3 @@
+export declare const EXECUTION_ENVIRONMENT_HEADER = "X-Xema-Environment";
+export declare const EXECUTION_ENVIRONMENT_HEADER_LOWER: string;
+//# sourceMappingURL=execution-environment-header.d.ts.map

package/dist/execution-environment/lib/execution-environment-header.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-environment-header.d.ts","sourceRoot":"","sources":["../../../src/execution-environment/lib/execution-environment-header.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,4BAA4B,uBAAuB,CAAC;AAWjE,eAAO,MAAM,kCAAkC,QACH,CAAC"}

package/dist/execution-environment/lib/execution-environment-header.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXECUTION_ENVIRONMENT_HEADER_LOWER = exports.EXECUTION_ENVIRONMENT_HEADER = void 0;
+exports.EXECUTION_ENVIRONMENT_HEADER = 'X-Xema-Environment';
+exports.EXECUTION_ENVIRONMENT_HEADER_LOWER = exports.EXECUTION_ENVIRONMENT_HEADER.toLowerCase();
+//# sourceMappingURL=execution-environment-header.js.map

package/dist/execution-environment/lib/execution-environment-header.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-environment-header.js","sourceRoot":"","sources":["../../../src/execution-environment/lib/execution-environment-header.ts"],"names":[],"mappings":";;;AAoBa,QAAA,4BAA4B,GAAG,oBAAoB,CAAC;AAWpD,QAAA,kCAAkC,GAC7C,oCAA4B,CAAC,WAAW,EAAE,CAAC"}

package/dist/execution-environment/lib/execution-environment.d.ts

@@ -0,0 +1,64 @@
+import { z } from 'zod';
+import { CapabilityReach, CapabilityError, type CapabilityPolicy } from '../../capability';
+import { ExecutionEnvironmentKind } from './built-in-environments';
+import { type ApprovalRule } from './approval-rule';
+import { type DataClassification } from '../../space';
+export type ExecutionEnvironmentRef = `environment:${string}` & {
+    readonly __executionEnvironmentRef?: never;
+};
+export declare const ExecutionEnvironmentRefSchema: z.ZodType<ExecutionEnvironmentRef>;
+export interface ParsedExecutionEnvironmentRef {
+    readonly slug: string;
+    readonly raw: ExecutionEnvironmentRef;
+}
+export declare class ExecutionEnvironmentRefParseError extends CapabilityError {
+    constructor(args: {
+        message: string;
+        raw: string;
+    });
+}
+export declare function parseEnvironmentRef(ref: string): ParsedExecutionEnvironmentRef;
+export declare function formatEnvironmentRef(slug: string): ExecutionEnvironmentRef;
+export declare const BUILT_IN_ENVIRONMENT_REFS: Record<ExecutionEnvironmentKind, ExecutionEnvironmentRef>;
+export interface RuntimeLimits {
+    maxTokens?: number;
+    maxCostUsd?: number;
+    maxDurationSeconds?: number;
+    maxToolCalls?: number;
+}
+export declare const RuntimeLimitsSchema: z.ZodType<RuntimeLimits>;
+export interface KnowledgePolicy {
+    allowedRefs: readonly string[];
+}
+export declare const KnowledgePolicySchema: z.ZodType<KnowledgePolicy>;
+export interface ConnectorPolicy {
+    allowedRefs: readonly string[];
+}
+export declare const ConnectorPolicySchema: z.ZodType<ConnectorPolicy>;
+export interface BiomePolicy {
+    allowedRefs: readonly string[];
+}
+export declare const BiomePolicySchema: z.ZodType<BiomePolicy>;
+export interface MountPolicy {
+    allowedRefs: readonly string[];
+}
+export declare const MountPolicySchema: z.ZodType<MountPolicy>;
+export interface ExecutionEnvironment {
+    ref: ExecutionEnvironmentRef;
+    scope: ExecutionEnvironmentKind | string;
+    reachCeiling: CapabilityReach;
+    allowedCapabilities: CapabilityPolicy[];
+    allowedKnowledgeScopes: KnowledgePolicy[];
+    allowedConnectors: ConnectorPolicy[];
+    allowedBiomes: BiomePolicy[];
+    allowedMounts: MountPolicy[];
+    approvalRules: ApprovalRule[];
+    runtimeLimits: RuntimeLimits;
+    maxDataClassification: DataClassification;
+}
+export declare const ExecutionEnvironmentSchema: z.ZodType<ExecutionEnvironment>;
+export declare const EXECUTION_ENVIRONMENT_CONTENT_HASH_DOMAIN: "xema-execution-environment-content-v1";
+export declare function createExecutionEnvironment(input: unknown): ExecutionEnvironment;
+export declare function serializeExecutionEnvironment(input: unknown): string;
+export declare function computeExecutionEnvironmentContentHash(input: unknown): Promise<string>;
+//# sourceMappingURL=execution-environment.d.ts.map

package/dist/execution-environment/lib/execution-environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-environment.d.ts","sourceRoot":"","sources":["../../../src/execution-environment/lib/execution-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,eAAe,EAGf,eAAe,EAEf,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAK1B,OAAO,EAEL,wBAAwB,EAEzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAExE,OAAO,EAA4B,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAyBhF,MAAM,MAAM,uBAAuB,GAAG,eAAe,MAAM,EAAE,GAAG;IAC9D,QAAQ,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC;CAC5C,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAIxB,CAAC;AAEtD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AASD,qBAAa,iCAAkC,SAAQ,eAAe;gBACxD,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;CAQnD;AAOD,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,GACV,6BAA6B,CAe/B;AAOD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CAS1E;AAQD,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAC5C,wBAAwB,EACxB,uBAAuB,CASxB,CAAC;AAQF,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,mBAAmB,EAK1B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAW/B,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,qBAAqB,EAE5B,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAWjC,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,qBAAqB,EAE5B,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAWjC,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,iBAAiB,EAExB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAU7B,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,iBAAiB,EAExB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAe7B,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,uBAAuB,CAAC;IAM7B,KAAK,EAAE,wBAAwB,GAAG,MAAM,CAAC;IAEzC,YAAY,EAAE,eAAe,CAAC;IAC9B,mBAAmB,EAAE,gBAAgB,EAAE,CAAC;IACxC,sBAAsB,EAAE,eAAe,EAAE,CAAC;IAC1C,iBAAiB,EAAE,eAAe,EAAE,CAAC;IACrC,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;IAiB7B,qBAAqB,EAAE,kBAAkB,CAAC;CAC3C;AAED,eAAO,MAAM,0BAA0B,EAiC/B,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;AAExC,eAAO,MAAM,yCAAyC,EACpD,uCAAgD,CAAC;AAGnD,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,OAAO,GACb,oBAAoB,CAEtB;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpE;AAGD,wBAAgB,sCAAsC,CACpD,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,MAAM,CAAC,CAKjB"}