@xemahq/kernel-contracts 0.1.0

package/dist/policy/lib/route-hints.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RunnerKindSchema = exports.RunnerKind = exports.RouteHintSchema = void 0;
+const zod_1 = require("zod");
+const obligations_1 = require("./obligations");
+exports.RouteHintSchema = zod_1.z.object({
+    requiredRunnerLabels: zod_1.z.record(zod_1.z.string().min(1), zod_1.z.string().min(1)).optional(),
+    preferredRunnerKind: obligations_1.RunnerKindSchema.optional(),
+    requiredRegion: zod_1.z.string().min(1).optional(),
+    requireCustomerEdge: zod_1.z.boolean().optional(),
+});
+var obligations_2 = require("./obligations");
+Object.defineProperty(exports, "RunnerKind", { enumerable: true, get: function () { return obligations_2.RunnerKind; } });
+Object.defineProperty(exports, "RunnerKindSchema", { enumerable: true, get: function () { return obligations_2.RunnerKindSchema; } });
+//# sourceMappingURL=route-hints.js.map

package/dist/policy/lib/route-hints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-hints.js","sourceRoot":"","sources":["../../../src/policy/lib/route-hints.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,+CAA6D;AA0ChD,QAAA,eAAe,GAAG,OAAC,CAAC,MAAM,CAAC;IACtC,oBAAoB,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/E,mBAAmB,EAAE,8BAAgB,CAAC,QAAQ,EAAE;IAChD,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAyB,CAAC;AAE3B,6CAA6D;AAApD,yGAAA,UAAU,OAAA;AAAE,+GAAA,gBAAgB,OAAA"}

package/dist/runner/index.d.ts

@@ -0,0 +1,12 @@
+export * from './lib/runner';
+export * from './lib/runner-attestation';
+export * from './lib/job-token';
+export * from './lib/runner-mode';
+export * from './lib/runner-kind';
+export * from './lib/runtime-isolation';
+export * from './lib/runner-registration';
+export * from './lib/runner-plane';
+export * from './lib/runner-job';
+export * from './lib/dispatch';
+export * from './lib/input-hash';
+//# sourceMappingURL=index.d.ts.map

package/dist/runner/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/runner/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,0BAA0B,CAAC;AACzC,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,kBAAkB,CAAC"}

package/dist/runner/index.js

@@ -0,0 +1,28 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/runner"), exports);
+__exportStar(require("./lib/runner-attestation"), exports);
+__exportStar(require("./lib/job-token"), exports);
+__exportStar(require("./lib/runner-mode"), exports);
+__exportStar(require("./lib/runner-kind"), exports);
+__exportStar(require("./lib/runtime-isolation"), exports);
+__exportStar(require("./lib/runner-registration"), exports);
+__exportStar(require("./lib/runner-plane"), exports);
+__exportStar(require("./lib/runner-job"), exports);
+__exportStar(require("./lib/dispatch"), exports);
+__exportStar(require("./lib/input-hash"), exports);
+//# sourceMappingURL=index.js.map

package/dist/runner/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runner/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,+CAA6B;AAC7B,2DAAyC;AACzC,kDAAgC;AAChC,oDAAkC;AAClC,oDAAkC;AAClC,0DAAwC;AACxC,4DAA0C;AAC1C,qDAAmC;AACnC,mDAAiC;AACjC,iDAA+B;AAC/B,mDAAiC"}

package/dist/runner/lib/dispatch.d.ts

@@ -0,0 +1,13 @@
+import { z } from 'zod';
+import { type ExecutionContext } from '../../execution-context';
+export declare const RUNNER_DISPATCH_CLOUDEVENT_TYPE: "xema.runner.dispatch.v1";
+export interface RunnerDispatch {
+    jobId: string;
+    runnerInstanceId: string;
+    capabilityRef: string;
+    executionContext: ExecutionContext;
+    input: unknown;
+    tokenJwt: string;
+}
+export declare const RunnerDispatchSchema: z.ZodType<RunnerDispatch>;
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/runner/lib/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,yBAAyB,CAAC;AAWjC,eAAO,MAAM,+BAA+B,EAAG,yBAAkC,CAAC;AAalF,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,gBAAgB,CAAC;IAYnC,KAAK,EAAE,OAAO,CAAC;IAMf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,oBAAoB,EAO3B,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC"}

package/dist/runner/lib/dispatch.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RunnerDispatchSchema = exports.RUNNER_DISPATCH_CLOUDEVENT_TYPE = void 0;
+const zod_1 = require("zod");
+const execution_context_1 = require("../../execution-context");
+exports.RUNNER_DISPATCH_CLOUDEVENT_TYPE = 'xema.runner.dispatch.v1';
+exports.RunnerDispatchSchema = zod_1.z.object({
+    jobId: zod_1.z.string().min(1),
+    runnerInstanceId: zod_1.z.string().min(1),
+    capabilityRef: zod_1.z.string().min(1),
+    executionContext: execution_context_1.ExecutionContextSchema,
+    input: zod_1.z.unknown(),
+    tokenJwt: zod_1.z.string(),
+});
+//# sourceMappingURL=dispatch.js.map

package/dist/runner/lib/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../../src/runner/lib/dispatch.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,+DAGiC;AAWpB,QAAA,+BAA+B,GAAG,yBAAkC,CAAC;AAsCrE,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACnC,aAAa,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,gBAAgB,EAAE,0CAAsB;IACxC,KAAK,EAAE,OAAC,CAAC,OAAO,EAAE;IAClB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE;CACrB,CAA8B,CAAC"}

package/dist/runner/lib/input-hash.d.ts

@@ -0,0 +1,2 @@
+export declare function canonicalCapabilityInputHash(input: unknown): string;
+//# sourceMappingURL=input-hash.d.ts.map

package/dist/runner/lib/input-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-hash.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/input-hash.ts"],"names":[],"mappings":"AA2BA,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGnE"}

package/dist/runner/lib/input-hash.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalCapabilityInputHash = canonicalCapabilityInputHash;
+const node_crypto_1 = require("node:crypto");
+function canonicalCapabilityInputHash(input) {
+    const canonical = canonicalize(input === undefined ? {} : input);
+    return (0, node_crypto_1.createHash)('sha256').update(canonical, 'utf8').digest('hex');
+}
+function canonicalize(value) {
+    if (value === null || value === undefined) {
+        return 'null';
+    }
+    if (Array.isArray(value)) {
+        return `[${value.map(canonicalize).join(',')}]`;
+    }
+    const valueType = typeof value;
+    if (valueType === 'number') {
+        if (!Number.isFinite(value)) {
+            throw new Error('canonicalCapabilityInputHash: non-finite number is not valid JSON capability input.');
+        }
+        return JSON.stringify(value);
+    }
+    if (valueType === 'boolean' || valueType === 'string') {
+        return JSON.stringify(value);
+    }
+    if (valueType === 'object') {
+        const obj = value;
+        const keys = Object.keys(obj)
+            .filter((key) => obj[key] !== undefined)
+            .sort();
+        return `{${keys
+            .map((key) => `${JSON.stringify(key)}:${canonicalize(obj[key])}`)
+            .join(',')}}`;
+    }
+    throw new Error(`canonicalCapabilityInputHash: unsupported value type "${valueType}" in capability input.`);
+}
+//# sourceMappingURL=input-hash.js.map

package/dist/runner/lib/input-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-hash.js","sourceRoot":"","sources":["../../../src/runner/lib/input-hash.ts"],"names":[],"mappings":";;AA2BA,oEAGC;AA9BD,6CAAyC;AA2BzC,SAAgB,4BAA4B,CAAC,KAAc;IACzD,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACjE,OAAO,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAG1C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClD,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;IAC/B,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,qFAAqF,CACtF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;aAC1B,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC;aACvC,IAAI,EAAE,CAAC;QACV,OAAO,IAAI,IAAI;aACZ,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;aAChE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,KAAK,CACb,yDAAyD,SAAS,wBAAwB,CAC3F,CAAC;AACJ,CAAC"}

package/dist/runner/lib/job-token.d.ts

@@ -0,0 +1,22 @@
+import type { RunnerId } from './runner';
+export interface JobToken {
+    jti: string;
+    runnerId: RunnerId;
+    capabilityRef: string;
+    spaceRef: string;
+    environmentId: string;
+    subjectId: string;
+    inputHash: string;
+    issuedAt: string;
+    expiresAt: string;
+    signature: string;
+}
+export interface RunnerJobDispatch {
+    jobId: string;
+    runnerId: RunnerId;
+    capabilityRef: string;
+    contextId: string;
+    input: unknown;
+    tokenJwt: string;
+}
+//# sourceMappingURL=job-token.d.ts.map

package/dist/runner/lib/job-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-token.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/job-token.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAczC,MAAM,WAAW,QAAQ;IAIvB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,QAAQ,CAAC;IAKnB,aAAa,EAAE,MAAM,CAAC;IAMtB,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IAKtB,SAAS,EAAE,MAAM,CAAC;IAMlB,SAAS,EAAE,MAAM,CAAC;IAKlB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAMlB,SAAS,EAAE,MAAM,CAAC;CACnB;AAQD,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IAMtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IAKf,QAAQ,EAAE,MAAM,CAAC;CAClB"}

package/dist/runner/lib/job-token.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=job-token.js.map

package/dist/runner/lib/job-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"job-token.js","sourceRoot":"","sources":["../../../src/runner/lib/job-token.ts"],"names":[],"mappings":""}

package/dist/runner/lib/runner-attestation.d.ts

@@ -0,0 +1,10 @@
+import type { RunnerId } from './runner';
+export declare const RUNNER_ATTESTATION_REJECTED_CLOUDEVENT_TYPE: "xema.runner.attestation.rejected.v1";
+export interface RunnerAttestation {
+    runnerId: RunnerId;
+    signedAt: string;
+    identityJwt: string;
+    allowedEnvironments: string[];
+    dataResidencyLabels?: string[];
+}
+//# sourceMappingURL=runner-attestation.d.ts.map

package/dist/runner/lib/runner-attestation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-attestation.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/runner-attestation.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAUzC,eAAO,MAAM,2CAA2C,EACtD,qCAA8C,CAAC;AAgBjD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,QAAQ,CAAC;IAMnB,QAAQ,EAAE,MAAM,CAAC;IAMjB,WAAW,EAAE,MAAM,CAAC;IAMpB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAK9B,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC"}

package/dist/runner/lib/runner-attestation.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RUNNER_ATTESTATION_REJECTED_CLOUDEVENT_TYPE = void 0;
+exports.RUNNER_ATTESTATION_REJECTED_CLOUDEVENT_TYPE = 'xema.runner.attestation.rejected.v1';
+//# sourceMappingURL=runner-attestation.js.map

package/dist/runner/lib/runner-attestation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-attestation.js","sourceRoot":"","sources":["../../../src/runner/lib/runner-attestation.ts"],"names":[],"mappings":";;;AAUa,QAAA,2CAA2C,GACtD,qCAA8C,CAAC"}

package/dist/runner/lib/runner-job.d.ts

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+export declare enum RunnerJobState {
+    Pending = "pending",
+    Dispatched = "dispatched",
+    Accepted = "accepted",
+    Running = "running",
+    Succeeded = "succeeded",
+    Failed = "failed",
+    Expired = "expired"
+}
+export declare const RunnerJobStateSchema: z.ZodEnum<typeof RunnerJobState>;
+export declare const TERMINAL_RUNNER_JOB_STATES: ReadonlySet<RunnerJobState>;
+export declare function isTerminalRunnerJobState(state: RunnerJobState): boolean;
+export declare const RUNNER_JOB_ACCEPTED_CLOUDEVENT_TYPE: "xema.runner.job.accepted.v1";
+export declare const RUNNER_JOB_PROGRESS_CLOUDEVENT_TYPE: "xema.runner.job.progress.v1";
+export declare const RUNNER_JOB_COMPLETED_CLOUDEVENT_TYPE: "xema.runner.job.completed.v1";
+export interface RunnerJobReport {
+    jobId: string;
+    runnerId: string;
+    state: RunnerJobState;
+    output?: unknown;
+    error?: string;
+    reportedAt: string;
+}
+export declare const RunnerJobReportSchema: z.ZodType<RunnerJobReport>;
+//# sourceMappingURL=runner-job.d.ts.map

package/dist/runner/lib/runner-job.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-job.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/runner-job.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgBxB,oBAAY,cAAc;IACxB,OAAO,YAAY;IACnB,UAAU,eAAe;IACzB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,SAAS,cAAc;IACvB,MAAM,WAAW;IACjB,OAAO,YAAY;CACpB;AAED,eAAO,MAAM,oBAAoB,kCAA+B,CAAC;AAEjE,eAAO,MAAM,0BAA0B,EAAE,WAAW,CAAC,cAAc,CAIjE,CAAC;AAEH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,cAAc,GAAG,OAAO,CAEvE;AAWD,eAAO,MAAM,mCAAmC,EAC9C,6BAAsC,CAAC;AAMzC,eAAO,MAAM,mCAAmC,EAC9C,6BAAsC,CAAC;AAMzC,eAAO,MAAM,oCAAoC,EAC/C,8BAAuC,CAAC;AAQ1C,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,cAAc,CAAC;IAEtB,MAAM,CAAC,EAAE,OAAO,CAAC;IAEjB,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,qBAAqB,EAO5B,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC"}

package/dist/runner/lib/runner-job.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RunnerJobReportSchema = exports.RUNNER_JOB_COMPLETED_CLOUDEVENT_TYPE = exports.RUNNER_JOB_PROGRESS_CLOUDEVENT_TYPE = exports.RUNNER_JOB_ACCEPTED_CLOUDEVENT_TYPE = exports.TERMINAL_RUNNER_JOB_STATES = exports.RunnerJobStateSchema = exports.RunnerJobState = void 0;
+exports.isTerminalRunnerJobState = isTerminalRunnerJobState;
+const zod_1 = require("zod");
+var RunnerJobState;
+(function (RunnerJobState) {
+    RunnerJobState["Pending"] = "pending";
+    RunnerJobState["Dispatched"] = "dispatched";
+    RunnerJobState["Accepted"] = "accepted";
+    RunnerJobState["Running"] = "running";
+    RunnerJobState["Succeeded"] = "succeeded";
+    RunnerJobState["Failed"] = "failed";
+    RunnerJobState["Expired"] = "expired";
+})(RunnerJobState || (exports.RunnerJobState = RunnerJobState = {}));
+exports.RunnerJobStateSchema = zod_1.z.nativeEnum(RunnerJobState);
+exports.TERMINAL_RUNNER_JOB_STATES = new Set([
+    RunnerJobState.Succeeded,
+    RunnerJobState.Failed,
+    RunnerJobState.Expired,
+]);
+function isTerminalRunnerJobState(state) {
+    return exports.TERMINAL_RUNNER_JOB_STATES.has(state);
+}
+exports.RUNNER_JOB_ACCEPTED_CLOUDEVENT_TYPE = 'xema.runner.job.accepted.v1';
+exports.RUNNER_JOB_PROGRESS_CLOUDEVENT_TYPE = 'xema.runner.job.progress.v1';
+exports.RUNNER_JOB_COMPLETED_CLOUDEVENT_TYPE = 'xema.runner.job.completed.v1';
+exports.RunnerJobReportSchema = zod_1.z.object({
+    jobId: zod_1.z.string().min(1),
+    runnerId: zod_1.z.string().min(1),
+    state: exports.RunnerJobStateSchema,
+    output: zod_1.z.unknown().optional(),
+    error: zod_1.z.string().optional(),
+    reportedAt: zod_1.z.string().min(1),
+});
+//# sourceMappingURL=runner-job.js.map

package/dist/runner/lib/runner-job.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-job.js","sourceRoot":"","sources":["../../../src/runner/lib/runner-job.ts"],"names":[],"mappings":";;;AAkCA,4DAEC;AApCD,6BAAwB;AAgBxB,IAAY,cAQX;AARD,WAAY,cAAc;IACxB,qCAAmB,CAAA;IACnB,2CAAyB,CAAA;IACzB,uCAAqB,CAAA;IACrB,qCAAmB,CAAA;IACnB,yCAAuB,CAAA;IACvB,mCAAiB,CAAA;IACjB,qCAAmB,CAAA;AACrB,CAAC,EARW,cAAc,8BAAd,cAAc,QAQzB;AAEY,QAAA,oBAAoB,GAAG,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAEpD,QAAA,0BAA0B,GAAgC,IAAI,GAAG,CAAC;IAC7E,cAAc,CAAC,SAAS;IACxB,cAAc,CAAC,MAAM;IACrB,cAAc,CAAC,OAAO;CACvB,CAAC,CAAC;AAEH,SAAgB,wBAAwB,CAAC,KAAqB;IAC5D,OAAO,kCAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC/C,CAAC;AAWY,QAAA,mCAAmC,GAC9C,6BAAsC,CAAC;AAM5B,QAAA,mCAAmC,GAC9C,6BAAsC,CAAC;AAM5B,QAAA,oCAAoC,GAC/C,8BAAuC,CAAC;AAoB7B,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,4BAAoB;IAC3B,MAAM,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC9B,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAA+B,CAAC"}

package/dist/runner/lib/runner-kind.d.ts

@@ -0,0 +1,2 @@
+export { RunnerKind, RunnerKindSchema } from '../../policy';
+//# sourceMappingURL=runner-kind.d.ts.map

package/dist/runner/lib/runner-kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-kind.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/runner-kind.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/runner/lib/runner-kind.js

@@ -0,0 +1,7 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RunnerKindSchema = exports.RunnerKind = void 0;
+var policy_1 = require("../../policy");
+Object.defineProperty(exports, "RunnerKind", { enumerable: true, get: function () { return policy_1.RunnerKind; } });
+Object.defineProperty(exports, "RunnerKindSchema", { enumerable: true, get: function () { return policy_1.RunnerKindSchema; } });
+//# sourceMappingURL=runner-kind.js.map

package/dist/runner/lib/runner-kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-kind.js","sourceRoot":"","sources":["../../../src/runner/lib/runner-kind.ts"],"names":[],"mappings":";;;AASA,uCAA4D;AAAnD,oGAAA,UAAU,OAAA;AAAE,0GAAA,gBAAgB,OAAA"}

package/dist/runner/lib/runner-mode.d.ts

@@ -0,0 +1,5 @@
+export declare enum RunnerTransportMode {
+    Push = "push",
+    Pull = "pull"
+}
+//# sourceMappingURL=runner-mode.d.ts.map

package/dist/runner/lib/runner-mode.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-mode.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/runner-mode.ts"],"names":[],"mappings":"AAYA,oBAAY,mBAAmB;IAC7B,IAAI,SAAS;IACb,IAAI,SAAS;CACd"}

package/dist/runner/lib/runner-mode.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RunnerTransportMode = void 0;
+var RunnerTransportMode;
+(function (RunnerTransportMode) {
+    RunnerTransportMode["Push"] = "push";
+    RunnerTransportMode["Pull"] = "pull";
+})(RunnerTransportMode || (exports.RunnerTransportMode = RunnerTransportMode = {}));
+//# sourceMappingURL=runner-mode.js.map

package/dist/runner/lib/runner-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-mode.js","sourceRoot":"","sources":["../../../src/runner/lib/runner-mode.ts"],"names":[],"mappings":";;;AAYA,IAAY,mBAGX;AAHD,WAAY,mBAAmB;IAC7B,oCAAa,CAAA;IACb,oCAAa,CAAA;AACf,CAAC,EAHW,mBAAmB,mCAAnB,mBAAmB,QAG9B"}

package/dist/runner/lib/runner-plane.d.ts

@@ -0,0 +1,19 @@
+export declare const RUNNER_PLANE_SERVICE_NAME: "xema-runner-plane";
+export declare enum RunnerPlaneLabelKey {
+    Kind = "xema.runner/kind",
+    Mode = "xema.runner/mode",
+    Transport = "xema.runner/transport",
+    DataLocality = "xema.runner/data-locality",
+    TrustTier = "xema.runner/trust-tier"
+}
+export declare const RESERVED_RUNNER_PLANE_LABEL_KEYS: ReadonlySet<string>;
+export declare enum WellKnownRunnerLabel {
+    Default = "xema.runner/default",
+    Local = "xema.runner/local",
+    Node = "xema.runner/node",
+    Docker = "xema.runner/docker",
+    Gpu = "xema.runner/gpu"
+}
+export declare const RUNNER_LABEL_PRESENT: "true";
+export declare function localModuleRunnerBaseLabels(): Record<string, string>;
+//# sourceMappingURL=runner-plane.d.ts.map

package/dist/runner/lib/runner-plane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-plane.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/runner-plane.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,yBAAyB,EAAG,mBAA4B,CAAC;AAQtE,oBAAY,mBAAmB;IAE7B,IAAI,qBAAqB;IAEzB,IAAI,qBAAqB;IAEzB,SAAS,0BAA0B;IAEnC,YAAY,8BAA8B;IAE1C,SAAS,2BAA2B;CACrC;AAUD,eAAO,MAAM,gCAAgC,EAAE,WAAW,CAAC,MAAM,CAEhE,CAAC;AAgBF,oBAAY,oBAAoB;IAE9B,OAAO,wBAAwB;IAE/B,KAAK,sBAAsB;IAE3B,IAAI,qBAAqB;IAEzB,MAAM,uBAAuB;IAE7B,GAAG,oBAAoB;CACxB;AAGD,eAAO,MAAM,oBAAoB,EAAG,MAAe,CAAC;AAWpD,wBAAgB,2BAA2B,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMpE"}

package/dist/runner/lib/runner-plane.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RUNNER_LABEL_PRESENT = exports.WellKnownRunnerLabel = exports.RESERVED_RUNNER_PLANE_LABEL_KEYS = exports.RunnerPlaneLabelKey = exports.RUNNER_PLANE_SERVICE_NAME = void 0;
+exports.localModuleRunnerBaseLabels = localModuleRunnerBaseLabels;
+exports.RUNNER_PLANE_SERVICE_NAME = 'xema-runner-plane';
+var RunnerPlaneLabelKey;
+(function (RunnerPlaneLabelKey) {
+    RunnerPlaneLabelKey["Kind"] = "xema.runner/kind";
+    RunnerPlaneLabelKey["Mode"] = "xema.runner/mode";
+    RunnerPlaneLabelKey["Transport"] = "xema.runner/transport";
+    RunnerPlaneLabelKey["DataLocality"] = "xema.runner/data-locality";
+    RunnerPlaneLabelKey["TrustTier"] = "xema.runner/trust-tier";
+})(RunnerPlaneLabelKey || (exports.RunnerPlaneLabelKey = RunnerPlaneLabelKey = {}));
+exports.RESERVED_RUNNER_PLANE_LABEL_KEYS = new Set(Object.values(RunnerPlaneLabelKey));
+var WellKnownRunnerLabel;
+(function (WellKnownRunnerLabel) {
+    WellKnownRunnerLabel["Default"] = "xema.runner/default";
+    WellKnownRunnerLabel["Local"] = "xema.runner/local";
+    WellKnownRunnerLabel["Node"] = "xema.runner/node";
+    WellKnownRunnerLabel["Docker"] = "xema.runner/docker";
+    WellKnownRunnerLabel["Gpu"] = "xema.runner/gpu";
+})(WellKnownRunnerLabel || (exports.WellKnownRunnerLabel = WellKnownRunnerLabel = {}));
+exports.RUNNER_LABEL_PRESENT = 'true';
+function localModuleRunnerBaseLabels() {
+    return {
+        [WellKnownRunnerLabel.Default]: exports.RUNNER_LABEL_PRESENT,
+        [WellKnownRunnerLabel.Local]: exports.RUNNER_LABEL_PRESENT,
+        [WellKnownRunnerLabel.Node]: exports.RUNNER_LABEL_PRESENT,
+    };
+}
+//# sourceMappingURL=runner-plane.js.map

package/dist/runner/lib/runner-plane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-plane.js","sourceRoot":"","sources":["../../../src/runner/lib/runner-plane.ts"],"names":[],"mappings":";;;AA8FA,kEAMC;AA9EY,QAAA,yBAAyB,GAAG,mBAA4B,CAAC;AAQtE,IAAY,mBAWX;AAXD,WAAY,mBAAmB;IAE7B,gDAAyB,CAAA;IAEzB,gDAAyB,CAAA;IAEzB,0DAAmC,CAAA;IAEnC,iEAA0C,CAAA;IAE1C,2DAAoC,CAAA;AACtC,CAAC,EAXW,mBAAmB,mCAAnB,mBAAmB,QAW9B;AAUY,QAAA,gCAAgC,GAAwB,IAAI,GAAG,CAC1E,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CACnC,CAAC;AAgBF,IAAY,oBAWX;AAXD,WAAY,oBAAoB;IAE9B,uDAA+B,CAAA;IAE/B,mDAA2B,CAAA;IAE3B,iDAAyB,CAAA;IAEzB,qDAA6B,CAAA;IAE7B,+CAAuB,CAAA;AACzB,CAAC,EAXW,oBAAoB,oCAApB,oBAAoB,QAW/B;AAGY,QAAA,oBAAoB,GAAG,MAAe,CAAC;AAWpD,SAAgB,2BAA2B;IACzC,OAAO;QACL,CAAC,oBAAoB,CAAC,OAAO,CAAC,EAAE,4BAAoB;QACpD,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,4BAAoB;QAClD,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,4BAAoB;KAClD,CAAC;AACJ,CAAC"}

package/dist/runner/lib/runner-registration.d.ts

@@ -0,0 +1,60 @@
+import { z } from 'zod';
+import { RunnerKind } from '../../policy';
+import { RunnerTransportMode } from './runner-mode';
+import { RunnerTrustTier } from './runner';
+export declare enum RunnerMode {
+    Embedded = "embedded",
+    LocalModule = "local-module",
+    Remote = "remote"
+}
+export declare const RunnerModeSchema: z.ZodEnum<typeof RunnerMode>;
+export declare enum DataLocality {
+    Cloud = "cloud",
+    CustomerPrivate = "customer-private",
+    Gpu = "gpu"
+}
+export declare const DataLocalitySchema: z.ZodEnum<typeof DataLocality>;
+export interface EmbeddedBiomeRegistration {
+    id: string;
+    version: string;
+    capabilityRefs: string[];
+}
+export declare const EmbeddedBiomeRegistrationSchema: z.ZodType<EmbeddedBiomeRegistration>;
+export type BiomeProvisioning = EmbeddedBiomeProvisioning | LocalModuleBiomeProvisioning | RemoteBiomeProvisioning;
+export interface EmbeddedBiomeProvisioning {
+    mode: RunnerMode.Embedded;
+    embedded: EmbeddedBiomeRegistration;
+}
+export interface LocalModuleBiomeProvisioning {
+    mode: RunnerMode.LocalModule;
+    moduleId: string;
+    version: string;
+    capabilityRefs: string[];
+}
+export interface RemoteBiomeProvisioning {
+    mode: RunnerMode.Remote;
+    imageRef: string;
+    version: string;
+    capabilityRefs: string[];
+}
+export declare const BiomeProvisioningSchema: z.ZodType<BiomeProvisioning>;
+export interface RunnerHealthcheck {
+    path: string;
+    intervalSeconds: number;
+}
+export declare const RunnerHealthcheckSchema: z.ZodType<RunnerHealthcheck>;
+export interface RunnerRegistration {
+    instanceId: string;
+    mode: RunnerMode;
+    kind: RunnerKind;
+    labels: Record<string, string>;
+    region?: string;
+    allowedEnvironments?: string[];
+    dataLocality?: DataLocality;
+    trustTier?: RunnerTrustTier;
+    biomes: BiomeProvisioning[];
+    healthcheck: RunnerHealthcheck;
+    transport: RunnerTransportMode;
+}
+export declare const RunnerRegistrationSchema: z.ZodType<RunnerRegistration>;
+//# sourceMappingURL=runner-registration.d.ts.map

package/dist/runner/lib/runner-registration.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-registration.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/runner-registration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,UAAU,EAAoB,MAAM,cAAc,CAAC;AAE5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAa3C,oBAAY,UAAU;IAMpB,QAAQ,aAAa;IAKrB,WAAW,iBAAiB;IAK5B,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,gBAAgB,8BAA2B,CAAC;AAWzD,oBAAY,YAAY;IACtB,KAAK,UAAU;IACf,eAAe,qBAAqB;IACpC,GAAG,QAAQ;CACZ;AAED,eAAO,MAAM,kBAAkB,gCAA6B,CAAC;AAW7D,MAAM,WAAW,yBAAyB;IAMxC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAKhB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,eAAO,MAAM,+BAA+B,EAItC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;AAO3C,MAAM,MAAM,iBAAiB,GACzB,yBAAyB,GACzB,4BAA4B,GAC5B,uBAAuB,CAAC;AAE5B,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC;IAC1B,QAAQ,EAAE,yBAAyB,CAAC;CACrC;AAED,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC;IAE7B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC;IAExB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,eAAO,MAAM,uBAAuB,EAiB9B,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAOnC,MAAM,WAAW,iBAAiB;IAEhC,IAAI,EAAE,MAAM,CAAC;IAEb,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,eAAO,MAAM,uBAAuB,EAG9B,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAWnC,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,MAAM,CAAC;IAMhB,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAK/B,YAAY,CAAC,EAAE,YAAY,CAAC;IAM5B,SAAS,CAAC,EAAE,eAAe,CAAC;IAE5B,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,WAAW,EAAE,iBAAiB,CAAC;IAE/B,SAAS,EAAE,mBAAmB,CAAC;CAChC;AAED,eAAO,MAAM,wBAAwB,EAY/B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC"}

package/dist/runner/lib/runner-registration.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RunnerRegistrationSchema = exports.RunnerHealthcheckSchema = exports.BiomeProvisioningSchema = exports.EmbeddedBiomeRegistrationSchema = exports.DataLocalitySchema = exports.DataLocality = exports.RunnerModeSchema = exports.RunnerMode = void 0;
+const zod_1 = require("zod");
+const policy_1 = require("../../policy");
+const runner_mode_1 = require("./runner-mode");
+const runner_1 = require("./runner");
+var RunnerMode;
+(function (RunnerMode) {
+    RunnerMode["Embedded"] = "embedded";
+    RunnerMode["LocalModule"] = "local-module";
+    RunnerMode["Remote"] = "remote";
+})(RunnerMode || (exports.RunnerMode = RunnerMode = {}));
+exports.RunnerModeSchema = zod_1.z.nativeEnum(RunnerMode);
+var DataLocality;
+(function (DataLocality) {
+    DataLocality["Cloud"] = "cloud";
+    DataLocality["CustomerPrivate"] = "customer-private";
+    DataLocality["Gpu"] = "gpu";
+})(DataLocality || (exports.DataLocality = DataLocality = {}));
+exports.DataLocalitySchema = zod_1.z.nativeEnum(DataLocality);
+exports.EmbeddedBiomeRegistrationSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    version: zod_1.z.string().min(1),
+    capabilityRefs: zod_1.z.array(zod_1.z.string().min(1)),
+});
+exports.BiomeProvisioningSchema = zod_1.z.discriminatedUnion('mode', [
+    zod_1.z.object({
+        mode: zod_1.z.literal(RunnerMode.Embedded),
+        embedded: exports.EmbeddedBiomeRegistrationSchema,
+    }),
+    zod_1.z.object({
+        mode: zod_1.z.literal(RunnerMode.LocalModule),
+        moduleId: zod_1.z.string().min(1),
+        version: zod_1.z.string().min(1),
+        capabilityRefs: zod_1.z.array(zod_1.z.string().min(1)),
+    }),
+    zod_1.z.object({
+        mode: zod_1.z.literal(RunnerMode.Remote),
+        imageRef: zod_1.z.string().min(1),
+        version: zod_1.z.string().min(1),
+        capabilityRefs: zod_1.z.array(zod_1.z.string().min(1)),
+    }),
+]);
+exports.RunnerHealthcheckSchema = zod_1.z.object({
+    path: zod_1.z.string().min(1),
+    intervalSeconds: zod_1.z.number().int().positive(),
+});
+exports.RunnerRegistrationSchema = zod_1.z.object({
+    instanceId: zod_1.z.string().min(1),
+    mode: exports.RunnerModeSchema,
+    kind: policy_1.RunnerKindSchema,
+    labels: zod_1.z.record(zod_1.z.string().min(1), zod_1.z.string()),
+    region: zod_1.z.string().min(1).optional(),
+    allowedEnvironments: zod_1.z.array(zod_1.z.string().min(1)).optional(),
+    dataLocality: exports.DataLocalitySchema.optional(),
+    trustTier: zod_1.z.nativeEnum(runner_1.RunnerTrustTier).optional(),
+    biomes: zod_1.z.array(exports.BiomeProvisioningSchema),
+    healthcheck: exports.RunnerHealthcheckSchema,
+    transport: zod_1.z.nativeEnum(runner_mode_1.RunnerTransportMode),
+});
+//# sourceMappingURL=runner-registration.js.map

package/dist/runner/lib/runner-registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner-registration.js","sourceRoot":"","sources":["../../../src/runner/lib/runner-registration.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,yCAA4D;AAE5D,+CAAoD;AACpD,qCAA2C;AAa3C,IAAY,UAiBX;AAjBD,WAAY,UAAU;IAMpB,mCAAqB,CAAA;IAKrB,0CAA4B,CAAA;IAK5B,+BAAiB,CAAA;AACnB,CAAC,EAjBW,UAAU,0BAAV,UAAU,QAiBrB;AAEY,QAAA,gBAAgB,GAAG,OAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAWzD,IAAY,YAIX;AAJD,WAAY,YAAY;IACtB,+BAAe,CAAA;IACf,oDAAoC,CAAA;IACpC,2BAAW,CAAA;AACb,CAAC,EAJW,YAAY,4BAAZ,YAAY,QAIvB;AAEY,QAAA,kBAAkB,GAAG,OAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AA0BhD,QAAA,+BAA+B,GAAG,OAAC,CAAC,MAAM,CAAC;IACtD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CAC3C,CAAyC,CAAC;AAiC9B,QAAA,uBAAuB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAClE,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;QACpC,QAAQ,EAAE,uCAA+B;KAC1C,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC;QACvC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC3C,CAAC;IACF,OAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAClC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1B,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KAC3C,CAAC;CACH,CAAiC,CAAC;AActB,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CAC7C,CAAiC,CAAC;AAyCtB,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,EAAE,wBAAgB;IACtB,IAAI,EAAE,yBAAgB;IACtB,MAAM,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC;IAC/C,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1D,YAAY,EAAE,0BAAkB,CAAC,QAAQ,EAAE;IAC3C,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,wBAAe,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,+BAAuB,CAAC;IACxC,WAAW,EAAE,+BAAuB;IACpC,SAAS,EAAE,OAAC,CAAC,UAAU,CAAC,iCAAmB,CAAC;CAC7C,CAAkC,CAAC"}

package/dist/runner/lib/runner.d.ts

@@ -0,0 +1,24 @@
+import { RunnerKind } from '../../policy';
+export declare enum RunnerTrustTier {
+    Untrusted = "untrusted",
+    Verified = "verified",
+    Trusted = "trusted",
+    System = "system"
+}
+export declare const RUNNER_TRUST_TIER_RANK: Record<RunnerTrustTier, number>;
+export declare function runnerTrustTierMeets(actual: RunnerTrustTier, minimum: RunnerTrustTier): boolean;
+export declare function isRunnerTrustTier(value: unknown): value is RunnerTrustTier;
+export type RunnerId = string & {
+    readonly __brand: 'RunnerId';
+};
+export interface RunnerDescriptor {
+    id: RunnerId;
+    kind: RunnerKind;
+    trustTier: RunnerTrustTier;
+    version: string;
+    allowedEnvironments: string[];
+    labels: Record<string, string>;
+    dataLocality?: string;
+    region?: string;
+}
+//# sourceMappingURL=runner.d.ts.map

package/dist/runner/lib/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAwB1C,oBAAY,eAAe;IACzB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,MAAM,WAAW;CAClB;AAUD,eAAO,MAAM,sBAAsB,EAAE,MAAM,CAAC,eAAe,EAAE,MAAM,CAKlE,CAAC;AAOF,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,eAAe,GACvB,OAAO,CAET;AAGD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAK1E;AAQD,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;CAAE,CAAC;AAUjE,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,QAAQ,CAAC;IACb,IAAI,EAAE,UAAU,CAAC;IACjB,SAAS,EAAE,eAAe,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAOhB,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAM/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB"}

package/dist/runner/lib/runner.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RUNNER_TRUST_TIER_RANK = exports.RunnerTrustTier = void 0;
+exports.runnerTrustTierMeets = runnerTrustTierMeets;
+exports.isRunnerTrustTier = isRunnerTrustTier;
+var RunnerTrustTier;
+(function (RunnerTrustTier) {
+    RunnerTrustTier["Untrusted"] = "untrusted";
+    RunnerTrustTier["Verified"] = "verified";
+    RunnerTrustTier["Trusted"] = "trusted";
+    RunnerTrustTier["System"] = "system";
+})(RunnerTrustTier || (exports.RunnerTrustTier = RunnerTrustTier = {}));
+exports.RUNNER_TRUST_TIER_RANK = {
+    [RunnerTrustTier.Untrusted]: 0,
+    [RunnerTrustTier.Verified]: 1,
+    [RunnerTrustTier.Trusted]: 2,
+    [RunnerTrustTier.System]: 3,
+};
+function runnerTrustTierMeets(actual, minimum) {
+    return exports.RUNNER_TRUST_TIER_RANK[actual] >= exports.RUNNER_TRUST_TIER_RANK[minimum];
+}
+function isRunnerTrustTier(value) {
+    return (typeof value === 'string' &&
+        Object.values(RunnerTrustTier).includes(value));
+}
+//# sourceMappingURL=runner.js.map

package/dist/runner/lib/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/runner/lib/runner.ts"],"names":[],"mappings":";;;AAmDA,oDAKC;AAGD,8CAKC;AAxCD,IAAY,eAKX;AALD,WAAY,eAAe;IACzB,0CAAuB,CAAA;IACvB,wCAAqB,CAAA;IACrB,sCAAmB,CAAA;IACnB,oCAAiB,CAAA;AACnB,CAAC,EALW,eAAe,+BAAf,eAAe,QAK1B;AAUY,QAAA,sBAAsB,GAAoC;IACrE,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;IAC9B,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC;IAC7B,CAAC,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5B,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;CAC5B,CAAC;AAOF,SAAgB,oBAAoB,CAClC,MAAuB,EACvB,OAAwB;IAExB,OAAO,8BAAsB,CAAC,MAAM,CAAC,IAAI,8BAAsB,CAAC,OAAO,CAAC,CAAC;AAC3E,CAAC;AAGD,SAAgB,iBAAiB,CAAC,KAAc;IAC9C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,MAAM,CAAC,MAAM,CAAC,eAAe,CAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAC7D,CAAC;AACJ,CAAC"}

package/dist/runner/lib/runtime-isolation.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+export declare enum RuntimeIsolationLevel {
+    None = "none",
+    Process = "process",
+    Container = "container",
+    Vm = "vm"
+}
+export declare const RuntimeIsolationLevelSchema: z.ZodEnum<typeof RuntimeIsolationLevel>;
+export declare function runtimeIsolationMeets(actual: RuntimeIsolationLevel, minimum: RuntimeIsolationLevel): boolean;
+//# sourceMappingURL=runtime-isolation.d.ts.map

package/dist/runner/lib/runtime-isolation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-isolation.d.ts","sourceRoot":"","sources":["../../../src/runner/lib/runtime-isolation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAmBxB,oBAAY,qBAAqB;IAE/B,IAAI,SAAS;IAEb,OAAO,YAAY;IAEnB,SAAS,cAAc;IAEvB,EAAE,OAAO;CACV;AAED,eAAO,MAAM,2BAA2B,yCAAsC,CAAC;AAiB/E,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAET"}