@xemahq/contracts 0.1.0

package/dist/agent-workspace/index.d.ts

@@ -0,0 +1,12 @@
+export * from './lib/workspace-layout';
+export * from './lib/logical-workspace-slot';
+export * from './lib/workspace-spec';
+export * from './lib/awp';
+export * from './lib/context-json';
+export * from './lib/deliverable-spec-ref';
+export * from './lib/endpoint-fetch-spec';
+export * from './lib/agent-run-context';
+export * from './lib/mount-apply';
+export * from './lib/agent-tool-defaults';
+export * from './lib/working-file';
+//# sourceMappingURL=index.d.ts.map

package/dist/agent-workspace/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/agent-workspace/index.ts"],"names":[],"mappings":"AAgBA,cAAc,wBAAwB,CAAC;AACvC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,sBAAsB,CAAC;AACrC,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC"}

package/dist/agent-workspace/index.js

@@ -0,0 +1,28 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/workspace-layout"), exports);
+__exportStar(require("./lib/logical-workspace-slot"), exports);
+__exportStar(require("./lib/workspace-spec"), exports);
+__exportStar(require("./lib/awp"), exports);
+__exportStar(require("./lib/context-json"), exports);
+__exportStar(require("./lib/deliverable-spec-ref"), exports);
+__exportStar(require("./lib/endpoint-fetch-spec"), exports);
+__exportStar(require("./lib/agent-run-context"), exports);
+__exportStar(require("./lib/mount-apply"), exports);
+__exportStar(require("./lib/agent-tool-defaults"), exports);
+__exportStar(require("./lib/working-file"), exports);
+//# sourceMappingURL=index.js.map

package/dist/agent-workspace/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/agent-workspace/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAgBA,yDAAuC;AACvC,+DAA6C;AAC7C,uDAAqC;AACrC,4CAA0B;AAC1B,qDAAmC;AACnC,6DAA2C;AAC3C,4DAA0C;AAC1C,0DAAwC;AACxC,oDAAkC;AAClC,4DAA0C;AAC1C,qDAAmC"}

package/dist/agent-workspace/lib/agent-run-context.d.ts

@@ -0,0 +1,12 @@
+import type { ContextJson } from './context-json';
+import type { WorkspaceMountPlan } from './workspace-layout';
+export interface RenderedAgentRunContext {
+    readonly agentsMd: string;
+    readonly contextJson: ContextJson;
+    readonly mountPlan: WorkspaceMountPlan;
+    readonly toolAllowlist: readonly string[];
+    readonly appliedOverlays: readonly string[];
+    readonly resolvedAgentSnapshotHash: string;
+    readonly renderedContextHash: string;
+}
+//# sourceMappingURL=agent-run-context.d.ts.map

package/dist/agent-workspace/lib/agent-run-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-run-context.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/agent-run-context.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,WAAW,uBAAuB;IAMtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IA0BvC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAK5C,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAM3C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC"}

package/dist/agent-workspace/lib/agent-run-context.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=agent-run-context.js.map

package/dist/agent-workspace/lib/agent-run-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-run-context.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/agent-run-context.ts"],"names":[],"mappings":""}

package/dist/agent-workspace/lib/agent-tool-defaults.d.ts

@@ -0,0 +1,18 @@
+import type { PermissionAction, PermissionKey, PermissionMap, PermissionRule } from '../../agent-permission';
+export { KNOWN_PERMISSION_KEYS, type PermissionAction, type PermissionKey, type PermissionMap, type PermissionRule, } from '../../agent-permission';
+export declare const SYSTEM_REQUIRED_PERMISSIONS: Readonly<Partial<Record<PermissionKey, PermissionAction>>>;
+export declare const SYSTEM_DEFAULT_PERMISSIONS: Readonly<Partial<Record<PermissionKey, PermissionAction>>>;
+export declare const SYSTEM_OPT_IN_PERMISSIONS: Readonly<Partial<Record<PermissionKey, PermissionAction>>>;
+export interface AgentPermissionDeclaration {
+    readonly permission?: PermissionMap;
+}
+export interface ResolvedAgentPermissions {
+    readonly permission: Readonly<Record<string, PermissionRule>>;
+}
+export declare function resolveAgentPermissions(manifest: AgentPermissionDeclaration | undefined): ResolvedAgentPermissions;
+export declare function assertNoRequiredPermissionsDenied(declaration: AgentPermissionDeclaration | undefined): void;
+export declare class AgentPermissionsValidationError extends Error {
+    readonly deniedRequiredPermissions: ReadonlyArray<PermissionKey>;
+    constructor(message: string, deniedRequiredPermissions: ReadonlyArray<PermissionKey>);
+}
+//# sourceMappingURL=agent-tool-defaults.d.ts.map

package/dist/agent-workspace/lib/agent-tool-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tool-defaults.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/agent-tool-defaults.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EACV,gBAAgB,EAChB,aAAa,EACb,aAAa,EACb,cAAc,EACf,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,qBAAqB,EACrB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,GACpB,MAAM,wBAAwB,CAAC;AAOhC,eAAO,MAAM,2BAA2B,EAAE,QAAQ,CAChD,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAOjD,CAAC;AAOF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAC/C,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAMjD,CAAC;AAUF,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAC9C,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAQjD,CAAC;AAMF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;CACrC;AAQD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;CAC/D;AAmBD,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,0BAA0B,GAAG,SAAS,GAC/C,wBAAwB,CAqB1B;AAiCD,wBAAgB,iCAAiC,CAC/C,WAAW,EAAE,0BAA0B,GAAG,SAAS,GAClD,IAAI,CA0BN;AAED,qBAAa,+BAAgC,SAAQ,KAAK;IAGtD,QAAQ,CAAC,yBAAyB,EAAE,aAAa,CAAC,aAAa,CAAC;gBADhE,OAAO,EAAE,MAAM,EACN,yBAAyB,EAAE,aAAa,CAAC,aAAa,CAAC;CAKnE"}

package/dist/agent-workspace/lib/agent-tool-defaults.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentPermissionsValidationError = exports.SYSTEM_OPT_IN_PERMISSIONS = exports.SYSTEM_DEFAULT_PERMISSIONS = exports.SYSTEM_REQUIRED_PERMISSIONS = exports.KNOWN_PERMISSION_KEYS = void 0;
+exports.resolveAgentPermissions = resolveAgentPermissions;
+exports.assertNoRequiredPermissionsDenied = assertNoRequiredPermissionsDenied;
+const agent_permission_1 = require("../../agent-permission");
+var agent_permission_2 = require("../../agent-permission");
+Object.defineProperty(exports, "KNOWN_PERMISSION_KEYS", { enumerable: true, get: function () { return agent_permission_2.KNOWN_PERMISSION_KEYS; } });
+exports.SYSTEM_REQUIRED_PERMISSIONS = {
+    read: 'allow',
+    list: 'allow',
+    glob: 'allow',
+    grep: 'allow',
+    todowrite: 'allow',
+};
+exports.SYSTEM_DEFAULT_PERMISSIONS = {
+    edit: 'allow',
+    bash: 'allow',
+    task: 'allow',
+    skill: 'allow',
+};
+exports.SYSTEM_OPT_IN_PERMISSIONS = {
+    question: 'deny',
+    webfetch: 'deny',
+    websearch: 'deny',
+    doom_loop: 'deny',
+    external_directory: 'deny',
+    lsp: 'deny',
+};
+function resolveAgentPermissions(manifest) {
+    const out = {};
+    for (const key of agent_permission_1.KNOWN_PERMISSION_KEYS) {
+        out[key] = resolveClosedSetPermission(key, manifest?.permission?.[key]);
+    }
+    if (manifest?.permission) {
+        for (const [key, value] of Object.entries(manifest.permission)) {
+            if (key in exports.SYSTEM_REQUIRED_PERMISSIONS) {
+                continue;
+            }
+            if (agent_permission_1.KNOWN_PERMISSION_KEYS.includes(key)) {
+                continue;
+            }
+            out[key] = value;
+        }
+    }
+    return { permission: out };
+}
+function resolveClosedSetPermission(key, fromManifest) {
+    if (key in exports.SYSTEM_REQUIRED_PERMISSIONS) {
+        return exports.SYSTEM_REQUIRED_PERMISSIONS[key];
+    }
+    if (fromManifest !== undefined) {
+        return fromManifest;
+    }
+    if (key in exports.SYSTEM_DEFAULT_PERMISSIONS) {
+        return exports.SYSTEM_DEFAULT_PERMISSIONS[key];
+    }
+    return exports.SYSTEM_OPT_IN_PERMISSIONS[key] ?? 'deny';
+}
+function assertNoRequiredPermissionsDenied(declaration) {
+    if (!declaration?.permission) {
+        return;
+    }
+    const denied = [];
+    for (const key of Object.keys(exports.SYSTEM_REQUIRED_PERMISSIONS)) {
+        const v = declaration.permission[key];
+        if (v === 'deny') {
+            denied.push(key);
+            continue;
+        }
+        if (v !== undefined && typeof v === 'object') {
+            const entries = Object.values(v);
+            if (entries.length > 0 && entries.every((a) => a === 'deny')) {
+                denied.push(key);
+            }
+        }
+    }
+    if (denied.length > 0) {
+        throw new AgentPermissionsValidationError(`agent manifest denies system-required permission(s) [${denied.join(', ')}]; these must remain 'allow'`, denied);
+    }
+}
+class AgentPermissionsValidationError extends Error {
+    deniedRequiredPermissions;
+    constructor(message, deniedRequiredPermissions) {
+        super(message);
+        this.deniedRequiredPermissions = deniedRequiredPermissions;
+        this.name = 'AgentPermissionsValidationError';
+    }
+}
+exports.AgentPermissionsValidationError = AgentPermissionsValidationError;
+//# sourceMappingURL=agent-tool-defaults.js.map

package/dist/agent-workspace/lib/agent-tool-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tool-defaults.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/agent-tool-defaults.ts"],"names":[],"mappings":";;;AAwIA,0DAuBC;AAiCD,8EA4BC;AAvLD,6DAA+D;AAQ/D,2DAMgC;AAL9B,yHAAA,qBAAqB,OAAA;AAYV,QAAA,2BAA2B,GAEpC;IACF,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,SAAS,EAAE,OAAO;CACnB,CAAC;AAOW,QAAA,0BAA0B,GAEnC;IACF,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,OAAO;CACf,CAAC;AAUW,QAAA,yBAAyB,GAElC;IACF,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,MAAM;IACjB,kBAAkB,EAAE,MAAM;IAC1B,GAAG,EAAE,MAAM;CACZ,CAAC;AAqCF,SAAgB,uBAAuB,CACrC,QAAgD;IAEhD,MAAM,GAAG,GAAmC,EAAE,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,wCAAqB,EAAE,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,GAAG,0BAA0B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAKD,IAAI,QAAQ,EAAE,UAAU,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,IAAI,GAAG,IAAI,mCAA2B,EAAE,CAAC;gBACvC,SAAS;YACX,CAAC;YACD,IAAK,wCAA2C,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC/D,SAAS;YACX,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC;AAOD,SAAS,0BAA0B,CACjC,GAAkB,EAClB,YAAwC;IAExC,IAAI,GAAG,IAAI,mCAA2B,EAAE,CAAC;QACvC,OAAO,mCAA2B,CAAC,GAAG,CAAE,CAAC;IAC3C,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,GAAG,IAAI,kCAA0B,EAAE,CAAC;QACtC,OAAO,kCAA0B,CAAC,GAAG,CAAE,CAAC;IAC1C,CAAC;IACD,OAAO,iCAAyB,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;AAClD,CAAC;AAYD,SAAgB,iCAAiC,CAC/C,WAAmD;IAEnD,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC;QAC7B,OAAO;IACT,CAAC;IACD,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAC3B,mCAA2B,CACT,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;gBAC7D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,+BAA+B,CACvC,wDAAwD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,EACvG,MAAM,CACP,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAa,+BAAgC,SAAQ,KAAK;IAG7C;IAFX,YACE,OAAe,EACN,yBAAuD;QAEhE,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,8BAAyB,GAAzB,yBAAyB,CAA8B;QAGhE,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AARD,0EAQC"}

package/dist/agent-workspace/lib/awp.d.ts

@@ -0,0 +1,17 @@
+import { GitPushBranchSuffix, GitPushConcurrencyMode, type WorkspaceSpec } from './workspace-spec';
+export declare const AWP_V1_SPEC: WorkspaceSpec;
+export declare function findSlot(spec: WorkspaceSpec, key: string): import("./workspace-spec").SlotDefinition | undefined;
+export declare function isKnownSlotKey(spec: WorkspaceSpec, key: string): boolean;
+export declare function listAlwaysOnSlotKeys(spec: WorkspaceSpec): readonly string[];
+export declare function listTarballPersistedRelPaths(spec: WorkspaceSpec): readonly string[];
+export interface ResolvedGitPushSlot {
+    readonly key: string;
+    readonly path: string;
+    readonly branchPrefix: string;
+    readonly branchSuffix: GitPushBranchSuffix;
+    readonly concurrencyMode: GitPushConcurrencyMode;
+    readonly mergeTarget?: string;
+}
+export declare function buildGitPushBranchName(branchPrefix: string, suffixValue: string): string;
+export declare function listGitPushPersistedSlots(spec: WorkspaceSpec): readonly ResolvedGitPushSlot[];
+//# sourceMappingURL=awp.d.ts.map

package/dist/agent-workspace/lib/awp.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"awp.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/awp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EAEtB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAqB1B,eAAO,MAAM,WAAW,EAAE,aAgMzB,CAAC;AAMF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,yDAExD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAExE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAE3E;AAQD,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,aAAa,GAClB,SAAS,MAAM,EAAE,CAInB;AAQD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IAKjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAUD,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,GAClB,MAAM,CAER;AAOD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,aAAa,GAClB,SAAS,mBAAmB,EAAE,CAoBhC"}

package/dist/agent-workspace/lib/awp.js

@@ -0,0 +1,196 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWP_V1_SPEC = void 0;
+exports.findSlot = findSlot;
+exports.isKnownSlotKey = isKnownSlotKey;
+exports.listAlwaysOnSlotKeys = listAlwaysOnSlotKeys;
+exports.listTarballPersistedRelPaths = listTarballPersistedRelPaths;
+exports.buildGitPushBranchName = buildGitPushBranchName;
+exports.listGitPushPersistedSlots = listGitPushPersistedSlots;
+const workspace_spec_1 = require("./workspace-spec");
+exports.AWP_V1_SPEC = {
+    id: 'awp/v1',
+    version: '1.2.0',
+    slots: [
+        {
+            key: 'inputs',
+            path: '/workspace/inputs',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: "Read-only inputs supplied at session/run start (the workflow's `with:` block or the session's customConfig). The DSL input bag lands at `inputs.json`.",
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'tmp',
+            path: '/workspace/tmp',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadWrite],
+            defaultMode: workspace_spec_1.SlotMode.ReadWrite,
+            ownership: 'user',
+            humanDescription: 'Your scratch space — drafts, intermediate computation, working notes. Snapshot-persisted so retries see prior state. Never harvested.',
+            persistencePolicy: { kind: 'tarball' },
+        },
+        {
+            key: 'uploads',
+            path: '/workspace/uploads',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'User-uploaded files (briefs, screenshots, sketches). Read-only — never write here.',
+            persistencePolicy: { kind: 'tarball' },
+        },
+        {
+            key: 'references',
+            path: '/workspace/references',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'Curated evidence library (knowledge-base spaces, prior artifacts, external project mounts). Read-only.',
+            persistencePolicy: { kind: 'none' },
+            subSlots: [
+                {
+                    key: 'kb',
+                    path: '/workspace/references/kb',
+                    allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+                    defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+                    ownership: 'user',
+                },
+                {
+                    key: 'external-projects',
+                    path: '/workspace/references/external-projects',
+                    allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+                    defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+                    ownership: 'user',
+                },
+            ],
+        },
+        {
+            key: 'deliverable-specs',
+            path: '/workspace/deliverable-specs',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'Schemas + metadata for the deliverable spec(s) this run targets. Read-only — consult before writing under deliverables/.',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'deliverables',
+            path: '/workspace/deliverables',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly, workspace_spec_1.SlotMode.ReadWrite],
+            defaultMode: workspace_spec_1.SlotMode.ReadWrite,
+            ownership: 'user',
+            humanDescription: "Your writable output area. Files written here are harvested by the runtime per the deliverable spec's contract.",
+            persistencePolicy: { kind: 'tarball' },
+        },
+        {
+            key: 'repos',
+            path: '/workspace/repos',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly, workspace_spec_1.SlotMode.ReadWrite],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'Project repositories. Read-only unless the workflow explicitly granted write authority (engineer roles only).',
+            persistencePolicy: { kind: 'git-push', branchPrefix: 'xema/session/' },
+        },
+        {
+            key: 'agents-md',
+            path: '/workspace/AGENTS.md',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            singleFile: true,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'context-json',
+            path: '/workspace/context.json',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            singleFile: true,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'system-overlay',
+            path: '/workspace/.xema/system-overlay.md',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            singleFile: true,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'agent-bundles',
+            path: '/workspace/.opencode/agents',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'skill-bundles',
+            path: '/workspace/.opencode/skills',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'commands',
+            path: '/workspace/.opencode/command',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+    ],
+};
+function findSlot(spec, key) {
+    return spec.slots.find((s) => s.key === key);
+}
+function isKnownSlotKey(spec, key) {
+    return spec.slots.some((s) => s.key === key);
+}
+function listAlwaysOnSlotKeys(spec) {
+    return spec.slots.filter((s) => s.presence === 'always').map((s) => s.key);
+}
+function listTarballPersistedRelPaths(spec) {
+    return spec.slots
+        .filter((s) => s.persistencePolicy?.kind === 'tarball')
+        .map((s) => s.path.replace(/^\/workspace\//, ''));
+}
+function buildGitPushBranchName(branchPrefix, suffixValue) {
+    return `${branchPrefix}${suffixValue}`;
+}
+function listGitPushPersistedSlots(spec) {
+    const out = [];
+    for (const slot of spec.slots) {
+        if (slot.persistencePolicy?.kind === 'git-push') {
+            out.push({
+                key: slot.key,
+                path: slot.path,
+                branchPrefix: slot.persistencePolicy.branchPrefix,
+                branchSuffix: slot.persistencePolicy.branchSuffix ?? workspace_spec_1.GitPushBranchSuffix.SessionId,
+                concurrencyMode: slot.persistencePolicy.concurrencyMode ??
+                    workspace_spec_1.GitPushConcurrencyMode.Force,
+                ...(slot.persistencePolicy.mergeTarget !== undefined
+                    ? { mergeTarget: slot.persistencePolicy.mergeTarget }
+                    : {}),
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=awp.js.map

package/dist/agent-workspace/lib/awp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awp.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/awp.ts"],"names":[],"mappings":";;;AAgOA,4BAEC;AAED,wCAEC;AAED,oDAEC;AAQD,oEAMC;AA6BD,wDAKC;AAOD,8DAsBC;AAvTD,qDAK0B;AAqBb,QAAA,WAAW,GAAkB;IACxC,EAAE,EAAE,QAAQ;IACZ,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE;QACL;YACE,GAAG,EAAE,QAAQ;YACb,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,wJAAwJ;YAC1J,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAIE,GAAG,EAAE,KAAK;YACV,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,SAAS,CAAC;YAClC,WAAW,EAAE,yBAAQ,CAAC,SAAS;YAC/B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,uIAAuI;YACzI,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACvC;QACD;YACE,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,oFAAoF;YACtF,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACvC;QACD;YACE,GAAG,EAAE,YAAY;YACjB,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,wGAAwG;YAC1G,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACnC,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,IAAI;oBACT,IAAI,EAAE,0BAA0B;oBAChC,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;oBACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;oBAC9B,SAAS,EAAE,MAAM;iBAClB;gBACD;oBACE,GAAG,EAAE,mBAAmB;oBACxB,IAAI,EAAE,yCAAyC;oBAC/C,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;oBACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;oBAC9B,SAAS,EAAE,MAAM;iBAClB;aACF;SACF;QACD;YACE,GAAG,EAAE,mBAAmB;YACxB,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,0HAA0H;YAC5H,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YACE,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,EAAE,yBAAQ,CAAC,SAAS,CAAC;YACrD,WAAW,EAAE,yBAAQ,CAAC,SAAS;YAC/B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,iHAAiH;YACnH,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACvC;QACD;YAKE,GAAG,EAAE,OAAO;YACZ,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,EAAE,yBAAQ,CAAC,SAAS,CAAC;YACrD,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,+GAA+G;YACjH,iBAAiB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE;SACvE;QAED;YAIE,GAAG,EAAE,WAAW;YAChB,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAIE,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAQE,GAAG,EAAE,gBAAgB;YACrB,IAAI,EAAE,oCAAoC;YAC1C,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAOE,GAAG,EAAE,eAAe;YACpB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAKE,GAAG,EAAE,eAAe;YACpB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAOE,GAAG,EAAE,UAAU;YACf,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;KACF;CACF,CAAC;AAMF,SAAgB,QAAQ,CAAC,IAAmB,EAAE,GAAW;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,cAAc,CAAC,IAAmB,EAAE,GAAW;IAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,oBAAoB,CAAC,IAAmB;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7E,CAAC;AAQD,SAAgB,4BAA4B,CAC1C,IAAmB;IAEnB,OAAO,IAAI,CAAC,KAAK;SACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,IAAI,KAAK,SAAS,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AA6BD,SAAgB,sBAAsB,CACpC,YAAoB,EACpB,WAAmB;IAEnB,OAAO,GAAG,YAAY,GAAG,WAAW,EAAE,CAAC;AACzC,CAAC;AAOD,SAAgB,yBAAyB,CACvC,IAAmB;IAEnB,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,iBAAiB,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC;gBACP,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY;gBACjD,YAAY,EACV,IAAI,CAAC,iBAAiB,CAAC,YAAY,IAAI,oCAAmB,CAAC,SAAS;gBACtE,eAAe,EACb,IAAI,CAAC,iBAAiB,CAAC,eAAe;oBACtC,uCAAsB,CAAC,KAAK;gBAC9B,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,KAAK,SAAS;oBAClD,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,iBAAiB,CAAC,WAAW,EAAE;oBACrD,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/agent-workspace/lib/context-json.d.ts

@@ -0,0 +1,34 @@
+import type { AgentRunRole, InvocationSurface, WritePolicy } from '../../workflow';
+import type { WorkingFileBinding } from './working-file';
+export type { WorkingFileBinding };
+export type InvocationRole = AgentRunRole;
+export type { InvocationSurface, WritePolicy };
+export interface ContextInvocation {
+    readonly role: InvocationRole;
+    readonly surface: InvocationSurface;
+    readonly attempt: number;
+    readonly runId: string | null;
+    readonly stageKey: string | null;
+    readonly sessionId: string | null;
+}
+export interface ContextAuthority {
+    readonly mayWriteWorkspace: readonly string[];
+    readonly mayWriteSlugs: readonly string[];
+    readonly mayWriteKnowledgeBase: boolean;
+    readonly mayEditRepos: boolean;
+    readonly writePolicy: WritePolicy;
+}
+export interface ContextProjectIdentity {
+    readonly orgId: string;
+    readonly projectId: string;
+    readonly pipelineBranch: string | null;
+}
+export type ContextWorkingFile = WorkingFileBinding;
+export interface ContextJson {
+    readonly invocation: ContextInvocation;
+    readonly project: ContextProjectIdentity;
+    readonly authority: ContextAuthority;
+    readonly resolvedAgentSnapshotHash: string;
+    readonly workingFiles: readonly ContextWorkingFile[];
+}
+//# sourceMappingURL=context-json.d.ts.map

package/dist/agent-workspace/lib/context-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-json.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/context-json.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EACV,YAAY,EACZ,iBAAiB,EACjB,WAAW,EACZ,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAMnC,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC;AAC1C,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC;AAK/C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAmCD,MAAM,WAAW,gBAAgB;IAE/B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAE9C,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IAExC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAUD,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAEpD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAiC3C,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACtD"}

package/dist/agent-workspace/lib/context-json.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=context-json.js.map

package/dist/agent-workspace/lib/context-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-json.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/context-json.ts"],"names":[],"mappings":""}

package/dist/agent-workspace/lib/deliverable-spec-ref.d.ts

@@ -0,0 +1,10 @@
+export interface ParsedDeliverableSpecRef {
+    readonly slug: string;
+    readonly version: string | null;
+}
+export declare class DeliverableSpecRefError extends Error {
+    constructor(message: string);
+}
+export declare function parseDeliverableSpecRef(raw: string): ParsedDeliverableSpecRef;
+export declare function formatDeliverableSpecRef(parsed: ParsedDeliverableSpecRef): string;
+//# sourceMappingURL=deliverable-spec-ref.d.ts.map

package/dist/agent-workspace/lib/deliverable-spec-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliverable-spec-ref.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/deliverable-spec-ref.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAKD,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AASD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAqB7E;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,wBAAwB,GAC/B,MAAM,CAIR"}

package/dist/agent-workspace/lib/deliverable-spec-ref.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeliverableSpecRefError = void 0;
+exports.parseDeliverableSpecRef = parseDeliverableSpecRef;
+exports.formatDeliverableSpecRef = formatDeliverableSpecRef;
+const SLUG_PATTERN = /^[a-z][a-z0-9-]*(?:\/[a-z][a-z0-9-]*)*$/;
+const SEMVER_PATTERN = /^\d+\.\d+\.\d+$/;
+class DeliverableSpecRefError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'DeliverableSpecRefError';
+    }
+}
+exports.DeliverableSpecRefError = DeliverableSpecRefError;
+function parseDeliverableSpecRef(raw) {
+    if (typeof raw !== 'string' || raw.length === 0) {
+        throw new DeliverableSpecRefError(`Deliverable-spec ref must be a non-empty string; got ${JSON.stringify(raw)}.`);
+    }
+    const atIndex = raw.indexOf('@');
+    const slug = atIndex === -1 ? raw : raw.slice(0, atIndex);
+    const version = atIndex === -1 ? null : raw.slice(atIndex + 1);
+    if (!SLUG_PATTERN.test(slug)) {
+        throw new DeliverableSpecRefError(`Deliverable-spec slug '${slug}' is not a valid kebab/path slug.`);
+    }
+    if (version !== null && !SEMVER_PATTERN.test(version)) {
+        throw new DeliverableSpecRefError(`Deliverable-spec version '${version}' must be semver (MAJOR.MINOR.PATCH).`);
+    }
+    return { slug, version };
+}
+function formatDeliverableSpecRef(parsed) {
+    return parsed.version === null
+        ? parsed.slug
+        : `${parsed.slug}@${parsed.version}`;
+}
+//# sourceMappingURL=deliverable-spec-ref.js.map

package/dist/agent-workspace/lib/deliverable-spec-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliverable-spec-ref.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/deliverable-spec-ref.ts"],"names":[],"mappings":";;;AAiCA,0DAqBC;AAED,4DAMC;AA9CD,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAC/D,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AASD,SAAgB,uBAAuB,CAAC,GAAW;IACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,uBAAuB,CAC/B,wDAAwD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAE/D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,uBAAuB,CAC/B,0BAA0B,IAAI,mCAAmC,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,uBAAuB,CAC/B,6BAA6B,OAAO,uCAAuC,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,SAAgB,wBAAwB,CACtC,MAAgC;IAEhC,OAAO,MAAM,CAAC,OAAO,KAAK,IAAI;QAC5B,CAAC,CAAC,MAAM,CAAC,IAAI;QACb,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;AACzC,CAAC"}

package/dist/agent-workspace/lib/endpoint-fetch-spec.d.ts

@@ -0,0 +1,24 @@
+import { HttpMethod } from '../../http';
+export { HttpMethod };
+export declare enum FetchOutputKind {
+    Raw = "raw",
+    Json = "json",
+    Binary = "binary"
+}
+export interface EndpointFetchEntry {
+    readonly key: string;
+    readonly url: string;
+    readonly method: HttpMethod;
+    readonly headers: Readonly<Record<string, string>> | null;
+    readonly headersRef: string | null;
+    readonly body: unknown;
+    readonly outputKind: FetchOutputKind;
+    readonly maxResponseBytes: number;
+}
+export interface EndpointFetchSpec {
+    readonly schemaVersion: 1;
+    readonly entries: readonly EndpointFetchEntry[];
+    readonly maxConcurrency: number | null;
+    readonly timeoutMs: number;
+}
+//# sourceMappingURL=endpoint-fetch-spec.d.ts.map

package/dist/agent-workspace/lib/endpoint-fetch-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-fetch-spec.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/endpoint-fetch-spec.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAsBxC,OAAO,EAAE,UAAU,EAAE,CAAC;AAEtB,oBAAY,eAAe;IAEzB,GAAG,QAAQ;IAEX,IAAI,SAAS;IAEb,MAAM,WAAW;CAClB;AAED,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAO5B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;IAE1D,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IAErC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAEhC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAKhD,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAEvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/dist/agent-workspace/lib/endpoint-fetch-spec.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FetchOutputKind = exports.HttpMethod = void 0;
+const http_1 = require("../../http");
+Object.defineProperty(exports, "HttpMethod", { enumerable: true, get: function () { return http_1.HttpMethod; } });
+var FetchOutputKind;
+(function (FetchOutputKind) {
+    FetchOutputKind["Raw"] = "raw";
+    FetchOutputKind["Json"] = "json";
+    FetchOutputKind["Binary"] = "binary";
+})(FetchOutputKind || (exports.FetchOutputKind = FetchOutputKind = {}));
+//# sourceMappingURL=endpoint-fetch-spec.js.map

package/dist/agent-workspace/lib/endpoint-fetch-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-fetch-spec.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/endpoint-fetch-spec.ts"],"names":[],"mappings":";;;AAAA,qCAAwC;AAsB/B,2FAtBA,iBAAU,OAsBA;AAEnB,IAAY,eAOX;AAPD,WAAY,eAAe;IAEzB,8BAAW,CAAA;IAEX,gCAAa,CAAA;IAEb,oCAAiB,CAAA;AACnB,CAAC,EAPW,eAAe,+BAAf,eAAe,QAO1B"}

package/dist/agent-workspace/lib/logical-workspace-slot.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+export declare enum LogicalWorkspaceSlot {
+    AgentContext = "agent-context",
+    AgentDefinitions = "agent-definitions",
+    SkillBundles = "skill-bundles",
+    SkillCommands = "skill-commands",
+    DesignSystemProjection = "design-system-projection",
+    RuntimeConfig = "runtime-config",
+    McpConfig = "mcp-config",
+    SystemOverlay = "system-overlay",
+    Inputs = "inputs",
+    References = "references",
+    Repositories = "repositories",
+    Uploads = "uploads",
+    Deliverables = "deliverables",
+    DeliverableSpecs = "deliverable-specs",
+    Temporary = "temporary"
+}
+export declare const LogicalWorkspaceSlotSchema: z.ZodEnum<typeof LogicalWorkspaceSlot>;
+//# sourceMappingURL=logical-workspace-slot.d.ts.map

package/dist/agent-workspace/lib/logical-workspace-slot.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logical-workspace-slot.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/logical-workspace-slot.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,oBAAY,oBAAoB;IAC9B,YAAY,kBAAkB;IAC9B,gBAAgB,sBAAsB;IACtC,YAAY,kBAAkB;IAC9B,aAAa,mBAAmB;IA6BhC,sBAAsB,6BAA6B;IACnD,aAAa,mBAAmB;IAChC,SAAS,eAAe;IACxB,aAAa,mBAAmB;IAChC,MAAM,WAAW;IACjB,UAAU,eAAe;IACzB,YAAY,iBAAiB;IAC7B,OAAO,YAAY;IACnB,YAAY,iBAAiB;IAC7B,gBAAgB,sBAAsB;IACtC,SAAS,cAAc;CACxB;AAED,eAAO,MAAM,0BAA0B,wCAAqC,CAAC"}

package/dist/agent-workspace/lib/logical-workspace-slot.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LogicalWorkspaceSlotSchema = exports.LogicalWorkspaceSlot = void 0;
+const zod_1 = require("zod");
+var LogicalWorkspaceSlot;
+(function (LogicalWorkspaceSlot) {
+    LogicalWorkspaceSlot["AgentContext"] = "agent-context";
+    LogicalWorkspaceSlot["AgentDefinitions"] = "agent-definitions";
+    LogicalWorkspaceSlot["SkillBundles"] = "skill-bundles";
+    LogicalWorkspaceSlot["SkillCommands"] = "skill-commands";
+    LogicalWorkspaceSlot["DesignSystemProjection"] = "design-system-projection";
+    LogicalWorkspaceSlot["RuntimeConfig"] = "runtime-config";
+    LogicalWorkspaceSlot["McpConfig"] = "mcp-config";
+    LogicalWorkspaceSlot["SystemOverlay"] = "system-overlay";
+    LogicalWorkspaceSlot["Inputs"] = "inputs";
+    LogicalWorkspaceSlot["References"] = "references";
+    LogicalWorkspaceSlot["Repositories"] = "repositories";
+    LogicalWorkspaceSlot["Uploads"] = "uploads";
+    LogicalWorkspaceSlot["Deliverables"] = "deliverables";
+    LogicalWorkspaceSlot["DeliverableSpecs"] = "deliverable-specs";
+    LogicalWorkspaceSlot["Temporary"] = "temporary";
+})(LogicalWorkspaceSlot || (exports.LogicalWorkspaceSlot = LogicalWorkspaceSlot = {}));
+exports.LogicalWorkspaceSlotSchema = zod_1.z.nativeEnum(LogicalWorkspaceSlot);
+//# sourceMappingURL=logical-workspace-slot.js.map