@xemahq/kernel-contracts 0.1.0

package/dist/agent-workspace/lib/agent-run-context.d.ts

@@ -0,0 +1,12 @@
+import type { ContextJson } from './context-json';
+import type { WorkspaceMountPlan } from './workspace-layout';
+export interface RenderedAgentRunContext {
+    readonly agentsMd: string;
+    readonly contextJson: ContextJson;
+    readonly mountPlan: WorkspaceMountPlan;
+    readonly toolAllowlist: readonly string[];
+    readonly appliedOverlays: readonly string[];
+    readonly resolvedAgentSnapshotHash: string;
+    readonly renderedContextHash: string;
+}
+//# sourceMappingURL=agent-run-context.d.ts.map

package/dist/agent-workspace/lib/agent-run-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-run-context.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/agent-run-context.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,MAAM,WAAW,uBAAuB;IAMtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IAEvC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAK5C,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAM3C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;CACtC"}

package/dist/agent-workspace/lib/agent-run-context.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=agent-run-context.js.map

package/dist/agent-workspace/lib/agent-run-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-run-context.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/agent-run-context.ts"],"names":[],"mappings":""}

package/dist/agent-workspace/lib/agent-tool-defaults.d.ts

@@ -0,0 +1,21 @@
+export declare const KNOWN_PERMISSION_KEYS: readonly ["read", "edit", "glob", "grep", "list", "bash", "task", "external_directory", "lsp", "skill", "todowrite", "question", "webfetch", "websearch", "doom_loop"];
+export type PermissionKey = (typeof KNOWN_PERMISSION_KEYS)[number];
+export type PermissionAction = 'allow' | 'ask' | 'deny';
+export type PermissionRule = PermissionAction | Readonly<Record<string, PermissionAction>>;
+export type PermissionMap = Readonly<Record<string, PermissionRule>>;
+export declare const SYSTEM_REQUIRED_PERMISSIONS: Readonly<Partial<Record<PermissionKey, PermissionAction>>>;
+export declare const SYSTEM_DEFAULT_PERMISSIONS: Readonly<Partial<Record<PermissionKey, PermissionAction>>>;
+export declare const SYSTEM_OPT_IN_PERMISSIONS: Readonly<Partial<Record<PermissionKey, PermissionAction>>>;
+export interface AgentPermissionDeclaration {
+    readonly permission?: PermissionMap;
+}
+export interface ResolvedAgentPermissions {
+    readonly permission: Readonly<Record<string, PermissionRule>>;
+}
+export declare function resolveAgentPermissions(manifest: AgentPermissionDeclaration | undefined): ResolvedAgentPermissions;
+export declare function assertNoRequiredPermissionsDenied(declaration: AgentPermissionDeclaration | undefined): void;
+export declare class AgentPermissionsValidationError extends Error {
+    readonly deniedRequiredPermissions: ReadonlyArray<PermissionKey>;
+    constructor(message: string, deniedRequiredPermissions: ReadonlyArray<PermissionKey>);
+}
+//# sourceMappingURL=agent-tool-defaults.d.ts.map

package/dist/agent-workspace/lib/agent-tool-defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tool-defaults.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/agent-tool-defaults.ts"],"names":[],"mappings":"AA8DA,eAAO,MAAM,qBAAqB,wKAGxB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnE,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AASxD,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAQ3F,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;AAOrE,eAAO,MAAM,2BAA2B,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAMlG,CAAC;AAOF,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAKjG,CAAC;AAUF,eAAO,MAAM,yBAAyB,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAOhG,CAAC;AAMF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;CACrC;AAQD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC;CAC/D;AAmBD,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,0BAA0B,GAAG,SAAS,GAC/C,wBAAwB,CAiB1B;AAiCD,wBAAgB,iCAAiC,CAC/C,WAAW,EAAE,0BAA0B,GAAG,SAAS,GAClD,IAAI,CAsBN;AAED,qBAAa,+BAAgC,SAAQ,KAAK;IAGtD,QAAQ,CAAC,yBAAyB,EAAE,aAAa,CAAC,aAAa,CAAC;gBADhE,OAAO,EAAE,MAAM,EACN,yBAAyB,EAAE,aAAa,CAAC,aAAa,CAAC;CAKnE"}

package/dist/agent-workspace/lib/agent-tool-defaults.js

@@ -0,0 +1,111 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentPermissionsValidationError = exports.SYSTEM_OPT_IN_PERMISSIONS = exports.SYSTEM_DEFAULT_PERMISSIONS = exports.SYSTEM_REQUIRED_PERMISSIONS = exports.KNOWN_PERMISSION_KEYS = void 0;
+exports.resolveAgentPermissions = resolveAgentPermissions;
+exports.assertNoRequiredPermissionsDenied = assertNoRequiredPermissionsDenied;
+const KNOWN_RULE_PERMISSION_KEYS = [
+    'read',
+    'edit',
+    'glob',
+    'grep',
+    'list',
+    'bash',
+    'task',
+    'external_directory',
+    'lsp',
+    'skill',
+];
+const KNOWN_ACTION_PERMISSION_KEYS = [
+    'todowrite',
+    'question',
+    'webfetch',
+    'websearch',
+    'doom_loop',
+];
+exports.KNOWN_PERMISSION_KEYS = [
+    ...KNOWN_RULE_PERMISSION_KEYS,
+    ...KNOWN_ACTION_PERMISSION_KEYS,
+];
+exports.SYSTEM_REQUIRED_PERMISSIONS = {
+    read: 'allow',
+    list: 'allow',
+    glob: 'allow',
+    grep: 'allow',
+    todowrite: 'allow',
+};
+exports.SYSTEM_DEFAULT_PERMISSIONS = {
+    edit: 'allow',
+    bash: 'allow',
+    task: 'allow',
+    skill: 'allow',
+};
+exports.SYSTEM_OPT_IN_PERMISSIONS = {
+    question: 'deny',
+    webfetch: 'deny',
+    websearch: 'deny',
+    doom_loop: 'deny',
+    external_directory: 'deny',
+    lsp: 'deny',
+};
+function resolveAgentPermissions(manifest) {
+    const out = {};
+    for (const key of exports.KNOWN_PERMISSION_KEYS) {
+        out[key] = resolveClosedSetPermission(key, manifest?.permission?.[key]);
+    }
+    if (manifest?.permission) {
+        for (const [key, value] of Object.entries(manifest.permission)) {
+            if (key in exports.SYSTEM_REQUIRED_PERMISSIONS) {
+                continue;
+            }
+            if (exports.KNOWN_PERMISSION_KEYS.includes(key)) {
+                continue;
+            }
+            out[key] = value;
+        }
+    }
+    return { permission: out };
+}
+function resolveClosedSetPermission(key, fromManifest) {
+    if (key in exports.SYSTEM_REQUIRED_PERMISSIONS) {
+        return exports.SYSTEM_REQUIRED_PERMISSIONS[key];
+    }
+    if (fromManifest !== undefined) {
+        return fromManifest;
+    }
+    if (key in exports.SYSTEM_DEFAULT_PERMISSIONS) {
+        return exports.SYSTEM_DEFAULT_PERMISSIONS[key];
+    }
+    return exports.SYSTEM_OPT_IN_PERMISSIONS[key] ?? 'deny';
+}
+function assertNoRequiredPermissionsDenied(declaration) {
+    if (!declaration?.permission) {
+        return;
+    }
+    const denied = [];
+    for (const key of Object.keys(exports.SYSTEM_REQUIRED_PERMISSIONS)) {
+        const v = declaration.permission[key];
+        if (v === 'deny') {
+            denied.push(key);
+            continue;
+        }
+        if (v !== undefined && typeof v === 'object') {
+            const entries = Object.values(v);
+            if (entries.length > 0 && entries.every((a) => a === 'deny')) {
+                denied.push(key);
+            }
+        }
+    }
+    if (denied.length > 0) {
+        throw new AgentPermissionsValidationError(`agent manifest denies system-required permission(s) [${denied.join(', ')}]; these must remain 'allow'`, denied);
+    }
+}
+class AgentPermissionsValidationError extends Error {
+    deniedRequiredPermissions;
+    constructor(message, deniedRequiredPermissions) {
+        super(message);
+        this.deniedRequiredPermissions = deniedRequiredPermissions;
+        this.name = 'AgentPermissionsValidationError';
+    }
+}
+exports.AgentPermissionsValidationError = AgentPermissionsValidationError;
+//# sourceMappingURL=agent-tool-defaults.js.map

package/dist/agent-workspace/lib/agent-tool-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-tool-defaults.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/agent-tool-defaults.ts"],"names":[],"mappings":";;;AAqKA,0DAmBC;AAiCD,8EAwBC;AA5MD,MAAM,0BAA0B,GAAG;IACjC,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,oBAAoB;IACpB,KAAK;IACL,OAAO;CACC,CAAC;AAMX,MAAM,4BAA4B,GAAG;IACnC,WAAW;IACX,UAAU;IACV,UAAU;IACV,WAAW;IACX,WAAW;CACH,CAAC;AAEE,QAAA,qBAAqB,GAAG;IACnC,GAAG,0BAA0B;IAC7B,GAAG,4BAA4B;CACvB,CAAC;AA4BE,QAAA,2BAA2B,GAA+D;IACrG,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,SAAS,EAAE,OAAO;CACnB,CAAC;AAOW,QAAA,0BAA0B,GAA+D;IACpG,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,OAAO;IACb,KAAK,EAAE,OAAO;CACf,CAAC;AAUW,QAAA,yBAAyB,GAA+D;IACnG,QAAQ,EAAE,MAAM;IAChB,QAAQ,EAAE,MAAM;IAChB,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,MAAM;IACjB,kBAAkB,EAAE,MAAM;IAC1B,GAAG,EAAE,MAAM;CACZ,CAAC;AAqCF,SAAgB,uBAAuB,CACrC,QAAgD;IAEhD,MAAM,GAAG,GAAmC,EAAE,CAAC;IAC/C,KAAK,MAAM,GAAG,IAAI,6BAAqB,EAAE,CAAC;QACxC,GAAG,CAAC,GAAG,CAAC,GAAG,0BAA0B,CAAC,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,CAAC;IAKD,IAAI,QAAQ,EAAE,UAAU,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC/D,IAAI,GAAG,IAAI,mCAA2B,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YACnD,IAAK,6BAA2C,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAA,SAAS;YAAA,CAAC;YAC3E,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC7B,CAAC;AAOD,SAAS,0BAA0B,CACjC,GAAkB,EAClB,YAAwC;IAExC,IAAI,GAAG,IAAI,mCAA2B,EAAE,CAAC;QACvC,OAAO,mCAA2B,CAAC,GAAG,CAAE,CAAC;IAC3C,CAAC;IACD,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QAC/B,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,GAAG,IAAI,kCAA0B,EAAE,CAAC;QACtC,OAAO,kCAA0B,CAAC,GAAG,CAAE,CAAC;IAC1C,CAAC;IACD,OAAO,iCAAyB,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;AAClD,CAAC;AAYD,SAAgB,iCAAiC,CAC/C,WAAmD;IAEnD,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC;QAAA,OAAO;IAAA,CAAC;IACvC,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,mCAA2B,CAAoB,EAAE,CAAC;QAC9E,MAAM,CAAC,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK,MAAM,EAAE,CAAC;YACjB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC;gBAC7D,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,+BAA+B,CACvC,wDAAwD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,EACvG,MAAM,CACP,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAa,+BAAgC,SAAQ,KAAK;IAG7C;IAFX,YACE,OAAe,EACN,yBAAuD;QAEhE,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,8BAAyB,GAAzB,yBAAyB,CAA8B;QAGhE,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAC;IAChD,CAAC;CACF;AARD,0EAQC"}

package/dist/agent-workspace/lib/awp-v1.d.ts

@@ -0,0 +1,15 @@
+import { GitPushBranchSuffix, GitPushConcurrencyMode, type WorkspaceSpec } from './workspace-spec';
+export declare const AWP_V1_SPEC: WorkspaceSpec;
+export declare function findSlot(spec: WorkspaceSpec, key: string): import("./workspace-spec").SlotDefinition | undefined;
+export declare function isKnownSlotKey(spec: WorkspaceSpec, key: string): boolean;
+export declare function listAlwaysOnSlotKeys(spec: WorkspaceSpec): readonly string[];
+export declare function listTarballPersistedRelPaths(spec: WorkspaceSpec): readonly string[];
+export interface ResolvedGitPushSlot {
+    readonly key: string;
+    readonly path: string;
+    readonly branchPrefix: string;
+    readonly branchSuffix: GitPushBranchSuffix;
+    readonly concurrencyMode: GitPushConcurrencyMode;
+}
+export declare function listGitPushPersistedSlots(spec: WorkspaceSpec): readonly ResolvedGitPushSlot[];
+//# sourceMappingURL=awp-v1.d.ts.map

package/dist/agent-workspace/lib/awp-v1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"awp-v1.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/awp-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EAEtB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAgB1B,eAAO,MAAM,WAAW,EAAE,aAwMzB,CAAC;AAMF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,yDAExD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAExE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAE3E;AAQD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAInF;AAQD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;CAClD;AAOD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,aAAa,GAClB,SAAS,mBAAmB,EAAE,CAgBhC"}

package/dist/agent-workspace/lib/awp-v1.js

@@ -0,0 +1,197 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWP_V1_SPEC = void 0;
+exports.findSlot = findSlot;
+exports.isKnownSlotKey = isKnownSlotKey;
+exports.listAlwaysOnSlotKeys = listAlwaysOnSlotKeys;
+exports.listTarballPersistedRelPaths = listTarballPersistedRelPaths;
+exports.listGitPushPersistedSlots = listGitPushPersistedSlots;
+const workspace_spec_1 = require("./workspace-spec");
+exports.AWP_V1_SPEC = {
+    id: 'awp/v1',
+    version: '1.2.0',
+    slots: [
+        {
+            key: 'inputs',
+            path: '/workspace/inputs',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: "Read-only inputs supplied at session/run start (the workflow's `with:` block or the session's customConfig). The DSL input bag lands at `inputs.json`.",
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'tmp',
+            path: '/workspace/tmp',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadWrite],
+            defaultMode: workspace_spec_1.SlotMode.ReadWrite,
+            ownership: 'user',
+            humanDescription: 'Your scratch space — drafts, intermediate computation, working notes. Snapshot-persisted so retries see prior state. Never harvested.',
+            persistencePolicy: { kind: 'tarball' },
+        },
+        {
+            key: 'uploads',
+            path: '/workspace/uploads',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'User-uploaded files (briefs, screenshots, sketches). Read-only — never write here.',
+            persistencePolicy: { kind: 'tarball' },
+        },
+        {
+            key: 'references',
+            path: '/workspace/references',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'Curated evidence library (knowledge-base spaces, prior artifacts, external project mounts). Read-only.',
+            persistencePolicy: { kind: 'none' },
+            subSlots: [
+                {
+                    key: 'kb',
+                    path: '/workspace/references/kb',
+                    allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+                    defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+                    ownership: 'user',
+                },
+                {
+                    key: 'external-projects',
+                    path: '/workspace/references/external-projects',
+                    allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+                    defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+                    ownership: 'user',
+                },
+            ],
+        },
+        {
+            key: 'deliverable-specs',
+            path: '/workspace/deliverable-specs',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'Schemas + metadata for the deliverable spec(s) this run targets. Read-only — consult before writing under deliverables/.',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'deliverables',
+            path: '/workspace/deliverables',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly, workspace_spec_1.SlotMode.ReadWrite],
+            defaultMode: workspace_spec_1.SlotMode.ReadWrite,
+            ownership: 'user',
+            humanDescription: "Your writable output area. Files written here are harvested by the runtime per the deliverable spec's contract.",
+            persistencePolicy: { kind: 'tarball' },
+        },
+        {
+            key: 'repos',
+            path: '/workspace/repos',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly, workspace_spec_1.SlotMode.ReadWrite],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'Project repositories. Read-only unless the workflow explicitly granted write authority (engineer roles only).',
+            persistencePolicy: { kind: 'git-push', branchPrefix: 'xema/session/' },
+        },
+        {
+            key: 'agents-md',
+            path: '/workspace/AGENTS.md',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            singleFile: true,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'context-json',
+            path: '/workspace/context.json',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            singleFile: true,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'system-overlay',
+            path: '/workspace/.xema/system-overlay.md',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            singleFile: true,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'agent-bundles',
+            path: '/workspace/.opencode/agents',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'skill-bundles',
+            path: '/workspace/.opencode/skills',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'commands',
+            path: '/workspace/.opencode/command',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'instructions',
+            path: '/workspace/.xema/instructions',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+    ],
+};
+function findSlot(spec, key) {
+    return spec.slots.find((s) => s.key === key);
+}
+function isKnownSlotKey(spec, key) {
+    return spec.slots.some((s) => s.key === key);
+}
+function listAlwaysOnSlotKeys(spec) {
+    return spec.slots.filter((s) => s.presence === 'always').map((s) => s.key);
+}
+function listTarballPersistedRelPaths(spec) {
+    return spec.slots
+        .filter((s) => s.persistencePolicy?.kind === 'tarball')
+        .map((s) => s.path.replace(/^\/workspace\//, ''));
+}
+function listGitPushPersistedSlots(spec) {
+    const out = [];
+    for (const slot of spec.slots) {
+        if (slot.persistencePolicy?.kind === 'git-push') {
+            out.push({
+                key: slot.key,
+                path: slot.path,
+                branchPrefix: slot.persistencePolicy.branchPrefix,
+                branchSuffix: slot.persistencePolicy.branchSuffix ?? workspace_spec_1.GitPushBranchSuffix.SessionId,
+                concurrencyMode: slot.persistencePolicy.concurrencyMode ?? workspace_spec_1.GitPushConcurrencyMode.Force,
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=awp-v1.js.map

package/dist/agent-workspace/lib/awp-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awp-v1.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/awp-v1.ts"],"names":[],"mappings":";;;AAmOA,4BAEC;AAED,wCAEC;AAED,oDAEC;AAQD,oEAIC;AAqBD,8DAkBC;AAhSD,qDAK0B;AAgBb,QAAA,WAAW,GAAkB;IACxC,EAAE,EAAE,QAAQ;IACZ,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE;QACL;YACE,GAAG,EAAE,QAAQ;YACb,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,wJAAwJ;YAC1J,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAIE,GAAG,EAAE,KAAK;YACV,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,SAAS,CAAC;YAClC,WAAW,EAAE,yBAAQ,CAAC,SAAS;YAC/B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,uIAAuI;YACzI,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACvC;QACD;YACE,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,oFAAoF;YACtF,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACvC;QACD;YACE,GAAG,EAAE,YAAY;YACjB,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,wGAAwG;YAC1G,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACnC,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,IAAI;oBACT,IAAI,EAAE,0BAA0B;oBAChC,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;oBACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;oBAC9B,SAAS,EAAE,MAAM;iBAClB;gBACD;oBACE,GAAG,EAAE,mBAAmB;oBACxB,IAAI,EAAE,yCAAyC;oBAC/C,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;oBACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;oBAC9B,SAAS,EAAE,MAAM;iBAClB;aACF;SACF;QACD;YACE,GAAG,EAAE,mBAAmB;YACxB,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,0HAA0H;YAC5H,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YACE,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,EAAE,yBAAQ,CAAC,SAAS,CAAC;YACrD,WAAW,EAAE,yBAAQ,CAAC,SAAS;YAC/B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,iHAAiH;YACnH,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACvC;QACD;YAKE,GAAG,EAAE,OAAO;YACZ,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,EAAE,yBAAQ,CAAC,SAAS,CAAC;YACrD,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,+GAA+G;YACjH,iBAAiB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE;SACvE;QAED;YAIE,GAAG,EAAE,WAAW;YAChB,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAIE,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAQE,GAAG,EAAE,gBAAgB;YACrB,IAAI,EAAE,oCAAoC;YAC1C,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAKE,GAAG,EAAE,eAAe;YACpB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAGE,GAAG,EAAE,eAAe;YACpB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAKE,GAAG,EAAE,UAAU;YACf,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAME,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;KACF;CACF,CAAC;AAMF,SAAgB,QAAQ,CAAC,IAAmB,EAAE,GAAW;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,cAAc,CAAC,IAAmB,EAAE,GAAW;IAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,oBAAoB,CAAC,IAAmB;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7E,CAAC;AAQD,SAAgB,4BAA4B,CAAC,IAAmB;IAC9D,OAAO,IAAI,CAAC,KAAK;SACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,IAAI,KAAK,SAAS,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAqBD,SAAgB,yBAAyB,CACvC,IAAmB;IAEnB,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,iBAAiB,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC;gBACP,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY;gBACjD,YAAY,EACV,IAAI,CAAC,iBAAiB,CAAC,YAAY,IAAI,oCAAmB,CAAC,SAAS;gBACtE,eAAe,EACb,IAAI,CAAC,iBAAiB,CAAC,eAAe,IAAI,uCAAsB,CAAC,KAAK;aACzE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/agent-workspace/lib/context-json.d.ts

@@ -0,0 +1,35 @@
+import type { AgentRunRole, InvocationSurface, WritePolicy } from '../../workflow';
+import type { WorkingFileBinding } from './working-file';
+export type { WorkingFileBinding };
+export type InvocationRole = AgentRunRole;
+export type { InvocationSurface, WritePolicy };
+export interface ContextInvocation {
+    readonly role: InvocationRole;
+    readonly surface: InvocationSurface;
+    readonly attempt: number;
+    readonly runId: string | null;
+    readonly groupKey: string | null;
+    readonly sessionId: string | null;
+}
+export interface ContextAuthority {
+    readonly mayWriteWorkspace: readonly string[];
+    readonly mayWriteSlugs: readonly string[];
+    readonly mayWriteKnowledgeBase: boolean;
+    readonly mayEditRepos: boolean;
+    readonly writePolicy: WritePolicy;
+    readonly allowedXemaTools: readonly string[];
+}
+export interface ContextProjectIdentity {
+    readonly orgId: string;
+    readonly projectId: string;
+    readonly pipelineBranch: string | null;
+}
+export type ContextWorkingFile = WorkingFileBinding;
+export interface ContextJson {
+    readonly invocation: ContextInvocation;
+    readonly project: ContextProjectIdentity;
+    readonly authority: ContextAuthority;
+    readonly resolvedAgentSnapshotHash: string;
+    readonly workingFiles: readonly ContextWorkingFile[];
+}
+//# sourceMappingURL=context-json.d.ts.map

package/dist/agent-workspace/lib/context-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-json.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/context-json.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAEnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGzD,YAAY,EAAE,kBAAkB,EAAE,CAAC;AAMnC,MAAM,MAAM,cAAc,GAAG,YAAY,CAAC;AAC1C,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,CAAC;AAK/C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAOD,MAAM,WAAW,gBAAgB;IAE/B,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAE9C,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAE1C,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IAExC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAE/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAQlC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CACxC;AAUD,MAAM,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAEpD,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,UAAU,EAAE,iBAAiB,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAS3C,QAAQ,CAAC,YAAY,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACtD"}

package/dist/agent-workspace/lib/context-json.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=context-json.js.map

package/dist/agent-workspace/lib/context-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-json.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/context-json.ts"],"names":[],"mappings":""}

package/dist/agent-workspace/lib/deliverable-spec-ref.d.ts

@@ -0,0 +1,10 @@
+export interface ParsedDeliverableSpecRef {
+    readonly slug: string;
+    readonly version: string | null;
+}
+export declare class DeliverableSpecRefError extends Error {
+    constructor(message: string);
+}
+export declare function parseDeliverableSpecRef(raw: string): ParsedDeliverableSpecRef;
+export declare function formatDeliverableSpecRef(parsed: ParsedDeliverableSpecRef): string;
+//# sourceMappingURL=deliverable-spec-ref.d.ts.map

package/dist/agent-workspace/lib/deliverable-spec-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliverable-spec-ref.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/deliverable-spec-ref.ts"],"names":[],"mappings":"AAUA,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAKD,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAQD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,wBAAwB,CAqB7E;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,wBAAwB,GAC/B,MAAM,CAER"}

package/dist/agent-workspace/lib/deliverable-spec-ref.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeliverableSpecRefError = void 0;
+exports.parseDeliverableSpecRef = parseDeliverableSpecRef;
+exports.formatDeliverableSpecRef = formatDeliverableSpecRef;
+const SLUG_PATTERN = /^[a-z][a-z0-9-]*(?:\/[a-z][a-z0-9-]*)*$/;
+const SEMVER_PATTERN = /^\d+\.\d+\.\d+$/;
+class DeliverableSpecRefError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'DeliverableSpecRefError';
+    }
+}
+exports.DeliverableSpecRefError = DeliverableSpecRefError;
+function parseDeliverableSpecRef(raw) {
+    if (typeof raw !== 'string' || raw.length === 0) {
+        throw new DeliverableSpecRefError(`Deliverable-spec ref must be a non-empty string; got ${JSON.stringify(raw)}.`);
+    }
+    const atIndex = raw.indexOf('@');
+    const slug = atIndex === -1 ? raw : raw.slice(0, atIndex);
+    const version = atIndex === -1 ? null : raw.slice(atIndex + 1);
+    if (!SLUG_PATTERN.test(slug)) {
+        throw new DeliverableSpecRefError(`Deliverable-spec slug '${slug}' is not a valid kebab/path slug.`);
+    }
+    if (version !== null && !SEMVER_PATTERN.test(version)) {
+        throw new DeliverableSpecRefError(`Deliverable-spec version '${version}' must be semver (MAJOR.MINOR.PATCH).`);
+    }
+    return { slug, version };
+}
+function formatDeliverableSpecRef(parsed) {
+    return parsed.version === null ? parsed.slug : `${parsed.slug}@${parsed.version}`;
+}
+//# sourceMappingURL=deliverable-spec-ref.js.map

package/dist/agent-workspace/lib/deliverable-spec-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliverable-spec-ref.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/deliverable-spec-ref.ts"],"names":[],"mappings":";;;AAgCA,0DAqBC;AAED,4DAIC;AA3CD,MAAM,YAAY,GAAG,yCAAyC,CAAC;AAC/D,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,MAAa,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAQD,SAAgB,uBAAuB,CAAC,GAAW;IACjD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,uBAAuB,CAC/B,wDAAwD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAC/E,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC;IAE/D,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,uBAAuB,CAC/B,0BAA0B,IAAI,mCAAmC,CAClE,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,uBAAuB,CAC/B,6BAA6B,OAAO,uCAAuC,CAC5E,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED,SAAgB,wBAAwB,CACtC,MAAgC;IAEhC,OAAO,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;AACpF,CAAC"}

package/dist/agent-workspace/lib/endpoint-fetch-spec.d.ts

@@ -0,0 +1,31 @@
+export declare enum HttpMethod {
+    GET = "GET",
+    POST = "POST",
+    PUT = "PUT",
+    PATCH = "PATCH",
+    DELETE = "DELETE",
+    HEAD = "HEAD",
+    OPTIONS = "OPTIONS"
+}
+export declare enum FetchOutputKind {
+    Raw = "raw",
+    Json = "json",
+    Binary = "binary"
+}
+export interface EndpointFetchEntry {
+    readonly key: string;
+    readonly url: string;
+    readonly method: HttpMethod;
+    readonly headers: Readonly<Record<string, string>> | null;
+    readonly headersRef: string | null;
+    readonly body: unknown;
+    readonly outputKind: FetchOutputKind;
+    readonly maxResponseBytes: number;
+}
+export interface EndpointFetchSpec {
+    readonly schemaVersion: 1;
+    readonly entries: readonly EndpointFetchEntry[];
+    readonly maxConcurrency: number | null;
+    readonly timeoutMs: number;
+}
+//# sourceMappingURL=endpoint-fetch-spec.d.ts.map

package/dist/agent-workspace/lib/endpoint-fetch-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-fetch-spec.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/endpoint-fetch-spec.ts"],"names":[],"mappings":"AAaA,oBAAY,UAAU;IACpB,GAAG,QAAQ;IACX,IAAI,SAAS;IACb,GAAG,QAAQ;IACX,KAAK,UAAU;IACf,MAAM,WAAW;IACjB,IAAI,SAAS;IACb,OAAO,YAAY;CACpB;AAED,oBAAY,eAAe;IAEzB,GAAG,QAAQ;IAEX,IAAI,SAAS;IAEb,MAAM,WAAW;CAClB;AAED,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAO5B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC;IAE1D,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAEnC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IAErC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IAEhC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAKhD,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAEvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B"}

package/dist/agent-workspace/lib/endpoint-fetch-spec.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FetchOutputKind = exports.HttpMethod = void 0;
+var HttpMethod;
+(function (HttpMethod) {
+    HttpMethod["GET"] = "GET";
+    HttpMethod["POST"] = "POST";
+    HttpMethod["PUT"] = "PUT";
+    HttpMethod["PATCH"] = "PATCH";
+    HttpMethod["DELETE"] = "DELETE";
+    HttpMethod["HEAD"] = "HEAD";
+    HttpMethod["OPTIONS"] = "OPTIONS";
+})(HttpMethod || (exports.HttpMethod = HttpMethod = {}));
+var FetchOutputKind;
+(function (FetchOutputKind) {
+    FetchOutputKind["Raw"] = "raw";
+    FetchOutputKind["Json"] = "json";
+    FetchOutputKind["Binary"] = "binary";
+})(FetchOutputKind || (exports.FetchOutputKind = FetchOutputKind = {}));
+//# sourceMappingURL=endpoint-fetch-spec.js.map

package/dist/agent-workspace/lib/endpoint-fetch-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-fetch-spec.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/endpoint-fetch-spec.ts"],"names":[],"mappings":";;;AAaA,IAAY,UAQX;AARD,WAAY,UAAU;IACpB,yBAAW,CAAA;IACX,2BAAa,CAAA;IACb,yBAAW,CAAA;IACX,6BAAe,CAAA;IACf,+BAAiB,CAAA;IACjB,2BAAa,CAAA;IACb,iCAAmB,CAAA;AACrB,CAAC,EARW,UAAU,0BAAV,UAAU,QAQrB;AAED,IAAY,eAOX;AAPD,WAAY,eAAe;IAEzB,8BAAW,CAAA;IAEX,gCAAa,CAAA;IAEb,oCAAiB,CAAA;AACnB,CAAC,EAPW,eAAe,+BAAf,eAAe,QAO1B"}

package/dist/agent-workspace/lib/manifest.d.ts

@@ -0,0 +1,28 @@
+export declare enum ManifestPageKind {
+    DocumentPage = "document-page",
+    StructuredJson = "structured-json",
+    Asset = "asset",
+    EndpointFetch = "endpoint-fetch"
+}
+export declare enum ManifestStatus {
+    Complete = "complete",
+    Partial = "partial"
+}
+export interface ManifestPage {
+    readonly slug: string;
+    readonly title: string;
+    readonly parentSlug: string | null;
+    readonly kind: ManifestPageKind;
+    readonly path: string;
+    readonly sha256: string;
+    readonly sizeBytes: number;
+}
+export interface DeliverableManifest {
+    readonly schemaVersion: 1;
+    readonly deliverableSpecRef: string | null;
+    readonly deliverableSpecVersion: string | null;
+    readonly pages: readonly ManifestPage[];
+    readonly status: ManifestStatus;
+    readonly finalizedAt: string;
+}
+//# sourceMappingURL=manifest.d.ts.map

package/dist/agent-workspace/lib/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/manifest.ts"],"names":[],"mappings":"AAcA,oBAAY,gBAAgB;IAE1B,YAAY,kBAAkB;IAE9B,cAAc,oBAAoB;IAElC,KAAK,UAAU;IAEf,aAAa,mBAAmB;CACjC;AAED,oBAAY,cAAc;IACxB,QAAQ,aAAa;IACrB,OAAO,YAAY;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAEhC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAE1B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3C,QAAQ,CAAC,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B"}

package/dist/agent-workspace/lib/manifest.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ManifestStatus = exports.ManifestPageKind = void 0;
+var ManifestPageKind;
+(function (ManifestPageKind) {
+    ManifestPageKind["DocumentPage"] = "document-page";
+    ManifestPageKind["StructuredJson"] = "structured-json";
+    ManifestPageKind["Asset"] = "asset";
+    ManifestPageKind["EndpointFetch"] = "endpoint-fetch";
+})(ManifestPageKind || (exports.ManifestPageKind = ManifestPageKind = {}));
+var ManifestStatus;
+(function (ManifestStatus) {
+    ManifestStatus["Complete"] = "complete";
+    ManifestStatus["Partial"] = "partial";
+})(ManifestStatus || (exports.ManifestStatus = ManifestStatus = {}));
+//# sourceMappingURL=manifest.js.map

package/dist/agent-workspace/lib/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/manifest.ts"],"names":[],"mappings":";;;AAcA,IAAY,gBASX;AATD,WAAY,gBAAgB;IAE1B,kDAA8B,CAAA;IAE9B,sDAAkC,CAAA;IAElC,mCAAe,CAAA;IAEf,oDAAgC,CAAA;AAClC,CAAC,EATW,gBAAgB,gCAAhB,gBAAgB,QAS3B;AAED,IAAY,cAGX;AAHD,WAAY,cAAc;IACxB,uCAAqB,CAAA;IACrB,qCAAmB,CAAA;AACrB,CAAC,EAHW,cAAc,8BAAd,cAAc,QAGzB"}