@xemahq/kernel-contracts 0.1.0

package/dist/execution-context/lib/caller.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CallerSchema = exports.CallerKindSchema = exports.CallerKind = void 0;
+const zod_1 = require("zod");
+var CallerKind;
+(function (CallerKind) {
+    CallerKind["Web"] = "web";
+    CallerKind["Api"] = "api";
+    CallerKind["Agent"] = "agent";
+    CallerKind["Workflow"] = "workflow";
+    CallerKind["Shell"] = "shell";
+    CallerKind["Scheduler"] = "scheduler";
+})(CallerKind || (exports.CallerKind = CallerKind = {}));
+exports.CallerKindSchema = zod_1.z.nativeEnum(CallerKind);
+exports.CallerSchema = zod_1.z.object({
+    kind: exports.CallerKindSchema,
+    appId: zod_1.z.string().min(1).optional(),
+    sessionId: zod_1.z.string().min(1).optional(),
+    ip: zod_1.z.string().min(1).optional(),
+    userAgent: zod_1.z.string().min(1).optional(),
+});
+//# sourceMappingURL=caller.js.map

package/dist/execution-context/lib/caller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"caller.js","sourceRoot":"","sources":["../../../src/execution-context/lib/caller.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AASxB,IAAY,UAOX;AAPD,WAAY,UAAU;IACpB,yBAAW,CAAA;IACX,yBAAW,CAAA;IACX,6BAAe,CAAA;IACf,mCAAqB,CAAA;IACrB,6BAAe,CAAA;IACf,qCAAuB,CAAA;AACzB,CAAC,EAPW,UAAU,0BAAV,UAAU,QAOrB;AAEY,QAAA,gBAAgB,GAAG,OAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAqB5C,QAAA,YAAY,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,wBAAgB;IACtB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAsB,CAAC"}

package/dist/execution-context/lib/execution-context.d.ts

@@ -0,0 +1,60 @@
+import { z } from 'zod';
+import { type CapabilityRef } from '../../capability';
+import { ExecutionEnvironmentKind } from '../../execution-environment';
+import { DataClassification, type SpaceRef } from '../../space';
+import { type Caller } from './caller';
+import { type ActingForRef, type SubjectRef } from './subject';
+export declare enum BiomeTrustTier {
+    Official = "official",
+    Verified = "verified",
+    Community = "community",
+    Untrusted = "untrusted"
+}
+export declare const BiomeTrustTierSchema: z.ZodEnum<typeof BiomeTrustTier>;
+export interface ExecutionContextBiome {
+    id: string;
+    version: string;
+    trustTier: BiomeTrustTier;
+    signatureVerified: boolean;
+}
+export declare const ExecutionContextBiomeSchema: z.ZodType<ExecutionContextBiome>;
+export interface ExecutionContextEnvironment {
+    id: string;
+    kind: ExecutionEnvironmentKind;
+}
+export declare const ExecutionContextEnvironmentSchema: z.ZodType<ExecutionContextEnvironment>;
+export interface ExecutionContextCapability {
+    ref: CapabilityRef;
+    inputHash?: string;
+}
+export declare const ExecutionContextCapabilitySchema: z.ZodType<ExecutionContextCapability>;
+export interface ExecutionContextResource {
+    ref: string;
+    classification: DataClassification;
+}
+export declare const ExecutionContextResourceSchema: z.ZodType<ExecutionContextResource>;
+export interface ExecutionContextConstraints {
+    maxCostUsd?: number;
+    maxDurationSeconds?: number;
+    requireApproval?: boolean;
+    requireAudit?: boolean;
+    requireCustomerEdge?: boolean;
+}
+export declare const ExecutionContextConstraintsSchema: z.ZodType<ExecutionContextConstraints>;
+export interface ExecutionContext {
+    id: string;
+    requestId: string;
+    traceId: string;
+    subject: SubjectRef;
+    caller: Caller;
+    space: SpaceRef;
+    environment: ExecutionContextEnvironment;
+    biome?: ExecutionContextBiome;
+    capability: ExecutionContextCapability;
+    resource?: ExecutionContextResource;
+    constraints?: ExecutionContextConstraints;
+    actorChain?: ActingForRef[];
+    credentialBindingId?: string;
+}
+export declare const ExecutionContextSchema: z.ZodType<ExecutionContext>;
+//# sourceMappingURL=execution-context.d.ts.map

package/dist/execution-context/lib/execution-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EAEzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,EAGlB,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAWnB,oBAAY,cAAc;IACxB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,SAAS,cAAc;CACxB;AAED,eAAO,MAAM,oBAAoB,kCAA+B,CAAC;AAQjE,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,cAAc,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,2BAA2B,EAKlC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAgBvC,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,wBAAwB,CAAC;CAChC;AAED,eAAO,MAAM,iCAAiC,EAGxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAW7C,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,aAAa,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,gCAAgC,EAGvC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAW5C,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,kBAAkB,CAAC;CACpC;AAED,eAAO,MAAM,8BAA8B,EAGrC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAc1C,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,eAAO,MAAM,iCAAiC,EAMxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAa7C,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,WAAW,EAAE,2BAA2B,CAAC;IACzC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,UAAU,EAAE,0BAA0B,CAAC;IACvC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAO1C,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAO5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,sBAAsB,EAc7B,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC"}

package/dist/execution-context/lib/execution-context.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutionContextSchema = exports.ExecutionContextConstraintsSchema = exports.ExecutionContextResourceSchema = exports.ExecutionContextCapabilitySchema = exports.ExecutionContextEnvironmentSchema = exports.ExecutionContextBiomeSchema = exports.BiomeTrustTierSchema = exports.BiomeTrustTier = void 0;
+const zod_1 = require("zod");
+const capability_1 = require("../../capability");
+const execution_environment_1 = require("../../execution-environment");
+const space_1 = require("../../space");
+const caller_1 = require("./caller");
+const subject_1 = require("./subject");
+var BiomeTrustTier;
+(function (BiomeTrustTier) {
+    BiomeTrustTier["Official"] = "official";
+    BiomeTrustTier["Verified"] = "verified";
+    BiomeTrustTier["Community"] = "community";
+    BiomeTrustTier["Untrusted"] = "untrusted";
+})(BiomeTrustTier || (exports.BiomeTrustTier = BiomeTrustTier = {}));
+exports.BiomeTrustTierSchema = zod_1.z.nativeEnum(BiomeTrustTier);
+exports.ExecutionContextBiomeSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    version: zod_1.z.string().min(1),
+    trustTier: exports.BiomeTrustTierSchema,
+    signatureVerified: zod_1.z.boolean(),
+});
+exports.ExecutionContextEnvironmentSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    kind: execution_environment_1.ExecutionEnvironmentKindSchema,
+});
+exports.ExecutionContextCapabilitySchema = zod_1.z.object({
+    ref: capability_1.CapabilityRefSchema,
+    inputHash: zod_1.z.string().min(1).optional(),
+});
+exports.ExecutionContextResourceSchema = zod_1.z.object({
+    ref: zod_1.z.string().min(1),
+    classification: space_1.DataClassificationSchema,
+});
+exports.ExecutionContextConstraintsSchema = zod_1.z.object({
+    maxCostUsd: zod_1.z.number().nonnegative().optional(),
+    maxDurationSeconds: zod_1.z.number().int().nonnegative().optional(),
+    requireApproval: zod_1.z.boolean().optional(),
+    requireAudit: zod_1.z.boolean().optional(),
+    requireCustomerEdge: zod_1.z.boolean().optional(),
+});
+exports.ExecutionContextSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    requestId: zod_1.z.string().min(1),
+    traceId: zod_1.z.string().min(1),
+    subject: subject_1.SubjectRefSchema,
+    caller: caller_1.CallerSchema,
+    space: space_1.SpaceRefSchema,
+    environment: exports.ExecutionContextEnvironmentSchema,
+    biome: exports.ExecutionContextBiomeSchema.optional(),
+    capability: exports.ExecutionContextCapabilitySchema,
+    resource: exports.ExecutionContextResourceSchema.optional(),
+    constraints: exports.ExecutionContextConstraintsSchema.optional(),
+    actorChain: zod_1.z.array(subject_1.ActingForRefSchema).optional(),
+    credentialBindingId: zod_1.z.string().min(1).optional(),
+});
+//# sourceMappingURL=execution-context.js.map

package/dist/execution-context/lib/execution-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iDAG0B;AAC1B,uEAGqC;AACrC,uCAKqB;AACrB,qCAAqD;AACrD,uCAKmB;AAWnB,IAAY,cAKX;AALD,WAAY,cAAc;IACxB,uCAAqB,CAAA;IACrB,uCAAqB,CAAA;IACrB,yCAAuB,CAAA;IACvB,yCAAuB,CAAA;AACzB,CAAC,EALW,cAAc,8BAAd,cAAc,QAKzB;AAEY,QAAA,oBAAoB,GAAG,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAepD,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,4BAAoB;IAC/B,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC/B,CAAqC,CAAC;AAqB1B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,sDAA8B;CACrC,CAA2C,CAAC;AAgBhC,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,gCAAmB;IACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAA0C,CAAC;AAgB/B,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,cAAc,EAAE,gCAAwB;CACzC,CAAwC,CAAC;AAsB7B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC7D,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAA2C,CAAC;AAyChC,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,0BAAgB;IACzB,MAAM,EAAE,qBAAY;IACpB,KAAK,EAAE,sBAAc;IACrB,WAAW,EAAE,yCAAiC;IAC9C,KAAK,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,wCAAgC;IAC5C,QAAQ,EAAE,sCAA8B,CAAC,QAAQ,EAAE;IACnD,WAAW,EAAE,yCAAiC,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAkB,CAAC,CAAC,QAAQ,EAAE;IAClD,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAgC,CAAC"}

package/dist/execution-context/lib/subject.d.ts

@@ -0,0 +1,3 @@
+export { SubjectKind, SubjectKindSchema, SubjectRefSchema, ActingForRefSchema, subjectRefToString, parseSubjectRef, } from '../../subject';
+export type { SubjectRef, ActingForRef } from '../../subject';
+//# sourceMappingURL=subject.d.ts.map

package/dist/execution-context/lib/subject.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subject.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/subject.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}

package/dist/execution-context/lib/subject.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSubjectRef = exports.subjectRefToString = exports.ActingForRefSchema = exports.SubjectRefSchema = exports.SubjectKindSchema = exports.SubjectKind = void 0;
+var subject_1 = require("../../subject");
+Object.defineProperty(exports, "SubjectKind", { enumerable: true, get: function () { return subject_1.SubjectKind; } });
+Object.defineProperty(exports, "SubjectKindSchema", { enumerable: true, get: function () { return subject_1.SubjectKindSchema; } });
+Object.defineProperty(exports, "SubjectRefSchema", { enumerable: true, get: function () { return subject_1.SubjectRefSchema; } });
+Object.defineProperty(exports, "ActingForRefSchema", { enumerable: true, get: function () { return subject_1.ActingForRefSchema; } });
+Object.defineProperty(exports, "subjectRefToString", { enumerable: true, get: function () { return subject_1.subjectRefToString; } });
+Object.defineProperty(exports, "parseSubjectRef", { enumerable: true, get: function () { return subject_1.parseSubjectRef; } });
+//# sourceMappingURL=subject.js.map

package/dist/execution-context/lib/subject.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subject.js","sourceRoot":"","sources":["../../../src/execution-context/lib/subject.ts"],"names":[],"mappings":";;;AAQA,yCAOuB;AANrB,sGAAA,WAAW,OAAA;AACX,4GAAA,iBAAiB,OAAA;AACjB,2GAAA,gBAAgB,OAAA;AAChB,6GAAA,kBAAkB,OAAA;AAClB,6GAAA,kBAAkB,OAAA;AAClB,0GAAA,eAAe,OAAA"}

package/dist/execution-environment/index.d.ts

@@ -0,0 +1,4 @@
+export * from './lib/built-in-environments';
+export * from './lib/approval-rule';
+export * from './lib/execution-environment';
+//# sourceMappingURL=index.d.ts.map

package/dist/execution-environment/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/execution-environment/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC"}

package/dist/execution-environment/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/built-in-environments"), exports);
+__exportStar(require("./lib/approval-rule"), exports);
+__exportStar(require("./lib/execution-environment"), exports);
+//# sourceMappingURL=index.js.map

package/dist/execution-environment/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/execution-environment/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8DAA4C;AAC5C,sDAAoC;AACpC,8DAA4C"}

package/dist/execution-environment/lib/approval-rule.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+import { type CapabilityRef } from '../../capability';
+export interface ApprovalRule {
+    capability: CapabilityRef;
+    requireRole?: string;
+    requireApproverCount?: number;
+    reason?: string;
+}
+export declare const ApprovalRuleSchema: z.ZodType<ApprovalRule>;
+//# sourceMappingURL=approval-rule.d.ts.map

package/dist/execution-environment/lib/approval-rule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-rule.d.ts","sourceRoot":"","sources":["../../../src/execution-environment/lib/approval-rule.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAe1B,MAAM,WAAW,YAAY;IAC3B,UAAU,EAAE,aAAa,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,kBAAkB,EAKzB,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC"}

package/dist/execution-environment/lib/approval-rule.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ApprovalRuleSchema = void 0;
+const zod_1 = require("zod");
+const capability_1 = require("../../capability");
+exports.ApprovalRuleSchema = zod_1.z.object({
+    capability: capability_1.CapabilityRefSchema,
+    requireRole: zod_1.z.string().min(1).optional(),
+    requireApproverCount: zod_1.z.number().int().positive().optional(),
+    reason: zod_1.z.string().min(1).optional(),
+});
+//# sourceMappingURL=approval-rule.js.map

package/dist/execution-environment/lib/approval-rule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-rule.js","sourceRoot":"","sources":["../../../src/execution-environment/lib/approval-rule.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iDAG0B;AAsBb,QAAA,kBAAkB,GAAG,OAAC,CAAC,MAAM,CAAC;IACzC,UAAU,EAAE,gCAAmB;IAC/B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACzC,oBAAoB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5D,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAA4B,CAAC"}

package/dist/execution-environment/lib/built-in-environments.d.ts

@@ -0,0 +1,16 @@
+import { z } from 'zod';
+export declare enum ExecutionEnvironmentKind {
+    System = "system",
+    Org = "org",
+    Project = "project",
+    App = "app",
+    Session = "session",
+    Sandbox = "sandbox",
+    Public = "public",
+    StoreReview = "store-review",
+    TrustedDev = "trusted-dev"
+}
+export declare const ExecutionEnvironmentKindSchema: z.ZodEnum<typeof ExecutionEnvironmentKind>;
+export declare const BUILT_IN_ENVIRONMENT_SLUGS: readonly ExecutionEnvironmentKind[];
+export declare function isExecutionEnvironmentKind(slug: string): slug is ExecutionEnvironmentKind;
+//# sourceMappingURL=built-in-environments.d.ts.map

package/dist/execution-environment/lib/built-in-environments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-in-environments.d.ts","sourceRoot":"","sources":["../../../src/execution-environment/lib/built-in-environments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxB,oBAAY,wBAAwB;IAElC,MAAM,WAAW;IAEjB,GAAG,QAAQ;IAEX,OAAO,YAAY;IAEnB,GAAG,QAAQ;IAEX,OAAO,YAAY;IAMnB,OAAO,YAAY;IAEnB,MAAM,WAAW;IAEjB,WAAW,iBAAiB;IAU5B,UAAU,gBAAgB;CAC3B;AAED,eAAO,MAAM,8BAA8B,4CAAyC,CAAC;AAarF,eAAO,MAAM,0BAA0B,EAAE,SAAS,wBAAwB,EAUhE,CAAC;AAQX,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,GACX,IAAI,IAAI,wBAAwB,CAElC"}

package/dist/execution-environment/lib/built-in-environments.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILT_IN_ENVIRONMENT_SLUGS = exports.ExecutionEnvironmentKindSchema = exports.ExecutionEnvironmentKind = void 0;
+exports.isExecutionEnvironmentKind = isExecutionEnvironmentKind;
+const zod_1 = require("zod");
+var ExecutionEnvironmentKind;
+(function (ExecutionEnvironmentKind) {
+    ExecutionEnvironmentKind["System"] = "system";
+    ExecutionEnvironmentKind["Org"] = "org";
+    ExecutionEnvironmentKind["Project"] = "project";
+    ExecutionEnvironmentKind["App"] = "app";
+    ExecutionEnvironmentKind["Session"] = "session";
+    ExecutionEnvironmentKind["Sandbox"] = "sandbox";
+    ExecutionEnvironmentKind["Public"] = "public";
+    ExecutionEnvironmentKind["StoreReview"] = "store-review";
+    ExecutionEnvironmentKind["TrustedDev"] = "trusted-dev";
+})(ExecutionEnvironmentKind || (exports.ExecutionEnvironmentKind = ExecutionEnvironmentKind = {}));
+exports.ExecutionEnvironmentKindSchema = zod_1.z.nativeEnum(ExecutionEnvironmentKind);
+exports.BUILT_IN_ENVIRONMENT_SLUGS = [
+    ExecutionEnvironmentKind.System,
+    ExecutionEnvironmentKind.Org,
+    ExecutionEnvironmentKind.Project,
+    ExecutionEnvironmentKind.App,
+    ExecutionEnvironmentKind.Session,
+    ExecutionEnvironmentKind.Sandbox,
+    ExecutionEnvironmentKind.Public,
+    ExecutionEnvironmentKind.StoreReview,
+    ExecutionEnvironmentKind.TrustedDev,
+];
+function isExecutionEnvironmentKind(slug) {
+    return exports.BUILT_IN_ENVIRONMENT_SLUGS.includes(slug);
+}
+//# sourceMappingURL=built-in-environments.js.map

package/dist/execution-environment/lib/built-in-environments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"built-in-environments.js","sourceRoot":"","sources":["../../../src/execution-environment/lib/built-in-environments.ts"],"names":[],"mappings":";;;AAoFA,gEAIC;AAxFD,6BAAwB;AAoBxB,IAAY,wBA+BX;AA/BD,WAAY,wBAAwB;IAElC,6CAAiB,CAAA;IAEjB,uCAAW,CAAA;IAEX,+CAAmB,CAAA;IAEnB,uCAAW,CAAA;IAEX,+CAAmB,CAAA;IAMnB,+CAAmB,CAAA;IAEnB,6CAAiB,CAAA;IAEjB,wDAA4B,CAAA;IAU5B,sDAA0B,CAAA;AAC5B,CAAC,EA/BW,wBAAwB,wCAAxB,wBAAwB,QA+BnC;AAEY,QAAA,8BAA8B,GAAG,OAAC,CAAC,UAAU,CAAC,wBAAwB,CAAC,CAAC;AAaxE,QAAA,0BAA0B,GAAwC;IAC7E,wBAAwB,CAAC,MAAM;IAC/B,wBAAwB,CAAC,GAAG;IAC5B,wBAAwB,CAAC,OAAO;IAChC,wBAAwB,CAAC,GAAG;IAC5B,wBAAwB,CAAC,OAAO;IAChC,wBAAwB,CAAC,OAAO;IAChC,wBAAwB,CAAC,MAAM;IAC/B,wBAAwB,CAAC,WAAW;IACpC,wBAAwB,CAAC,UAAU;CAC3B,CAAC;AAQX,SAAgB,0BAA0B,CACxC,IAAY;IAEZ,OAAQ,kCAAgD,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC1E,CAAC"}

package/dist/execution-environment/lib/execution-environment.d.ts

@@ -0,0 +1,58 @@
+import { z } from 'zod';
+import { CapabilityError, type CapabilityPolicy } from '../../capability';
+import { ExecutionEnvironmentKind } from './built-in-environments';
+import { type ApprovalRule } from './approval-rule';
+export type ExecutionEnvironmentRef = `environment:${string}` & {
+    readonly __executionEnvironmentRef?: never;
+};
+export declare const ExecutionEnvironmentRefSchema: z.ZodType<ExecutionEnvironmentRef>;
+export interface ParsedExecutionEnvironmentRef {
+    readonly slug: string;
+    readonly raw: ExecutionEnvironmentRef;
+}
+export declare class ExecutionEnvironmentRefParseError extends CapabilityError {
+    constructor(args: {
+        message: string;
+        raw: string;
+    });
+}
+export declare const EXECUTION_ENVIRONMENT_REF_INVALID = "EXECUTION_ENVIRONMENT_REF_INVALID";
+export declare function parseEnvironmentRef(ref: string): ParsedExecutionEnvironmentRef;
+export declare function formatEnvironmentRef(slug: string): ExecutionEnvironmentRef;
+export declare const BUILT_IN_ENVIRONMENT_REFS: Record<ExecutionEnvironmentKind, ExecutionEnvironmentRef>;
+export interface RuntimeLimits {
+    maxTokens?: number;
+    maxCostUsd?: number;
+    maxDurationSeconds?: number;
+    maxToolCalls?: number;
+}
+export declare const RuntimeLimitsSchema: z.ZodType<RuntimeLimits>;
+export interface KnowledgePolicy {
+    allowedRefs: readonly string[];
+}
+export declare const KnowledgePolicySchema: z.ZodType<KnowledgePolicy>;
+export interface ConnectorPolicy {
+    allowedRefs: readonly string[];
+}
+export declare const ConnectorPolicySchema: z.ZodType<ConnectorPolicy>;
+export interface BiomePolicy {
+    allowedRefs: readonly string[];
+}
+export declare const BiomePolicySchema: z.ZodType<BiomePolicy>;
+export interface MountPolicy {
+    allowedRefs: readonly string[];
+}
+export declare const MountPolicySchema: z.ZodType<MountPolicy>;
+export interface ExecutionEnvironment {
+    ref: ExecutionEnvironmentRef;
+    scope: ExecutionEnvironmentKind | string;
+    allowedCapabilities: CapabilityPolicy[];
+    allowedKnowledgeScopes: KnowledgePolicy[];
+    allowedConnectors: ConnectorPolicy[];
+    allowedBiomes: BiomePolicy[];
+    allowedMounts: MountPolicy[];
+    approvalRules: ApprovalRule[];
+    runtimeLimits: RuntimeLimits;
+}
+export declare const ExecutionEnvironmentSchema: z.ZodType<ExecutionEnvironment>;
+//# sourceMappingURL=execution-environment.d.ts.map

package/dist/execution-environment/lib/execution-environment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-environment.d.ts","sourceRoot":"","sources":["../../../src/execution-environment/lib/execution-environment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,eAAe,EAEf,KAAK,gBAAgB,EACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,wBAAwB,EAEzB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAyBxE,MAAM,MAAM,uBAAuB,GAAG,eAAe,MAAM,EAAE,GAAG;IAC9D,QAAQ,CAAC,yBAAyB,CAAC,EAAE,KAAK,CAAC;CAC5C,CAAC;AAEF,eAAO,MAAM,6BAA6B,EAAE,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAKxB,CAAC;AAEtD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,uBAAuB,CAAC;CACvC;AASD,qBAAa,iCAAkC,SAAQ,eAAe;gBACxD,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE;CAQnD;AAGD,eAAO,MAAM,iCAAiC,sCAAsC,CAAC;AAOrF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,6BAA6B,CAe9E;AAOD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,uBAAuB,CAS1E;AAQD,eAAO,MAAM,yBAAyB,EAAE,MAAM,CAC5C,wBAAwB,EACxB,uBAAuB,CASxB,CAAC;AAQF,MAAM,WAAW,aAAa;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,eAAO,MAAM,mBAAmB,EAK1B,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAW/B,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,qBAAqB,EAE5B,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAWjC,MAAM,WAAW,eAAe;IAC9B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,qBAAqB,EAE5B,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;AAWjC,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,iBAAiB,EAExB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAW7B,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,eAAO,MAAM,iBAAiB,EAExB,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAe7B,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,uBAAuB,CAAC;IAM7B,KAAK,EAAE,wBAAwB,GAAG,MAAM,CAAC;IACzC,mBAAmB,EAAE,gBAAgB,EAAE,CAAC;IACxC,sBAAsB,EAAE,eAAe,EAAE,CAAC;IAC1C,iBAAiB,EAAE,eAAe,EAAE,CAAC;IACrC,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,aAAa,EAAE,WAAW,EAAE,CAAC;IAC7B,aAAa,EAAE,YAAY,EAAE,CAAC;IAC9B,aAAa,EAAE,aAAa,CAAC;CAC9B;AAED,eAAO,MAAM,0BAA0B,EAgBjC,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC"}

package/dist/execution-environment/lib/execution-environment.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutionEnvironmentSchema = exports.MountPolicySchema = exports.BiomePolicySchema = exports.ConnectorPolicySchema = exports.KnowledgePolicySchema = exports.RuntimeLimitsSchema = exports.BUILT_IN_ENVIRONMENT_REFS = exports.EXECUTION_ENVIRONMENT_REF_INVALID = exports.ExecutionEnvironmentRefParseError = exports.ExecutionEnvironmentRefSchema = void 0;
+exports.parseEnvironmentRef = parseEnvironmentRef;
+exports.formatEnvironmentRef = formatEnvironmentRef;
+const zod_1 = require("zod");
+const capability_1 = require("../../capability");
+const built_in_environments_1 = require("./built-in-environments");
+const approval_rule_1 = require("./approval-rule");
+const EXECUTION_ENVIRONMENT_REF_REGEX = /^environment:[a-z][a-z0-9-]*$/;
+exports.ExecutionEnvironmentRefSchema = zod_1.z
+    .string()
+    .regex(EXECUTION_ENVIRONMENT_REF_REGEX, {
+    message: 'ExecutionEnvironmentRef must match `environment:<slug>` (lowercase kebab; must start with a letter).',
+});
+class ExecutionEnvironmentRefParseError extends capability_1.CapabilityError {
+    constructor(args) {
+        super({
+            code: capability_1.CapabilityErrorCode.CapabilityRefInvalid,
+            message: args.message,
+            capability: args.raw,
+        });
+        this.name = 'ExecutionEnvironmentRefParseError';
+    }
+}
+exports.ExecutionEnvironmentRefParseError = ExecutionEnvironmentRefParseError;
+exports.EXECUTION_ENVIRONMENT_REF_INVALID = 'EXECUTION_ENVIRONMENT_REF_INVALID';
+function parseEnvironmentRef(ref) {
+    if (typeof ref !== 'string' || ref.length === 0) {
+        throw new ExecutionEnvironmentRefParseError({
+            message: 'ExecutionEnvironmentRef must be a non-empty string.',
+            raw: String(ref),
+        });
+    }
+    if (!EXECUTION_ENVIRONMENT_REF_REGEX.test(ref)) {
+        throw new ExecutionEnvironmentRefParseError({
+            message: `ExecutionEnvironmentRef "${ref}" does not match \`environment:<slug>\`.`,
+            raw: ref,
+        });
+    }
+    const slug = ref.slice('environment:'.length);
+    return { slug, raw: ref };
+}
+function formatEnvironmentRef(slug) {
+    const raw = `environment:${slug}`;
+    if (!EXECUTION_ENVIRONMENT_REF_REGEX.test(raw)) {
+        throw new ExecutionEnvironmentRefParseError({
+            message: `formatEnvironmentRef produced invalid ref "${raw}".`,
+            raw,
+        });
+    }
+    return raw;
+}
+exports.BUILT_IN_ENVIRONMENT_REFS = Object.freeze(built_in_environments_1.BUILT_IN_ENVIRONMENT_SLUGS.reduce((acc, slug) => {
+    acc[slug] = formatEnvironmentRef(slug);
+    return acc;
+}, {}));
+exports.RuntimeLimitsSchema = zod_1.z.object({
+    maxTokens: zod_1.z.number().int().nonnegative().optional(),
+    maxCostUsd: zod_1.z.number().nonnegative().optional(),
+    maxDurationSeconds: zod_1.z.number().int().nonnegative().optional(),
+    maxToolCalls: zod_1.z.number().int().nonnegative().optional(),
+});
+exports.KnowledgePolicySchema = zod_1.z.object({
+    allowedRefs: zod_1.z.array(zod_1.z.string().min(1)).readonly(),
+});
+exports.ConnectorPolicySchema = zod_1.z.object({
+    allowedRefs: zod_1.z.array(zod_1.z.string().min(1)).readonly(),
+});
+exports.BiomePolicySchema = zod_1.z.object({
+    allowedRefs: zod_1.z.array(zod_1.z.string().min(1)).readonly(),
+});
+exports.MountPolicySchema = zod_1.z.object({
+    allowedRefs: zod_1.z.array(zod_1.z.string().min(1)).readonly(),
+});
+exports.ExecutionEnvironmentSchema = zod_1.z.object({
+    ref: exports.ExecutionEnvironmentRefSchema,
+    scope: zod_1.z.string().min(1).refine((s) => (0, built_in_environments_1.isExecutionEnvironmentKind)(s), {
+        message: 'ExecutionEnvironment.scope must be an ExecutionEnvironmentKind slug at v1; custom environments are a v2 extension (plan §16).',
+    }),
+    allowedCapabilities: zod_1.z.array(capability_1.CapabilityPolicySchema),
+    allowedKnowledgeScopes: zod_1.z.array(exports.KnowledgePolicySchema),
+    allowedConnectors: zod_1.z.array(exports.ConnectorPolicySchema),
+    allowedBiomes: zod_1.z.array(exports.BiomePolicySchema),
+    allowedMounts: zod_1.z.array(exports.MountPolicySchema),
+    approvalRules: zod_1.z.array(approval_rule_1.ApprovalRuleSchema),
+    runtimeLimits: exports.RuntimeLimitsSchema,
+});
+//# sourceMappingURL=execution-environment.js.map

package/dist/execution-environment/lib/execution-environment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-environment.js","sourceRoot":"","sources":["../../../src/execution-environment/lib/execution-environment.ts"],"names":[],"mappings":";;;AA+EA,kDAeC;AAOD,oDASC;AA9GD,6BAAwB;AACxB,iDAK0B;AAC1B,mEAIiC;AACjC,mDAAwE;AAiBxE,MAAM,+BAA+B,GAAG,+BAA+B,CAAC;AAY3D,QAAA,6BAA6B,GAAuC,OAAC;KAC/E,MAAM,EAAE;KACR,KAAK,CAAC,+BAA+B,EAAE;IACtC,OAAO,EACL,sGAAsG;CACzG,CAAkD,CAAC;AActD,MAAa,iCAAkC,SAAQ,4BAAe;IACpE,YAAY,IAAsC;QAChD,KAAK,CAAC;YACJ,IAAI,EAAE,gCAAmB,CAAC,oBAAoB;YAC9C,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,UAAU,EAAE,IAAI,CAAC,GAAG;SACrB,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;IAClD,CAAC;CACF;AATD,8EASC;AAGY,QAAA,iCAAiC,GAAG,mCAAmC,CAAC;AAOrF,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,iCAAiC,CAAC;YAC1C,OAAO,EAAE,qDAAqD;YAC9D,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,iCAAiC,CAAC;YAC1C,OAAO,EAAE,4BAA4B,GAAG,0CAA0C;YAClF,GAAG,EAAE,GAAG;SACT,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,GAA8B,EAAE,CAAC;AACvD,CAAC;AAOD,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,MAAM,GAAG,GAAG,eAAe,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,iCAAiC,CAAC;YAC1C,OAAO,EAAE,8CAA8C,GAAG,IAAI;YAC9D,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAA8B,CAAC;AACxC,CAAC;AAQY,QAAA,yBAAyB,GAGlC,MAAM,CAAC,MAAM,CACf,kDAA0B,CAAC,MAAM,CAC/B,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;IACZ,GAAG,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC,EACD,EAA+D,CAChE,CACF,CAAC;AAeW,QAAA,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1C,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACpD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC7D,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACxD,CAA6B,CAAC;AAelB,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAA+B,CAAC;AAepB,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAA+B,CAAC;AAepB,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAA2B,CAAC;AAehB,QAAA,iBAAiB,GAAG,OAAC,CAAC,MAAM,CAAC;IACxC,WAAW,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACnD,CAA2B,CAAC;AAgChB,QAAA,0BAA0B,GAAG,OAAC,CAAC,MAAM,CAAC;IACjD,GAAG,EAAE,qCAA6B;IAClC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAC7B,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,kDAA0B,EAAC,CAAC,CAAC,EACpC;QACE,OAAO,EACL,+HAA+H;KAClI,CACF;IACD,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC,mCAAsB,CAAC;IACpD,sBAAsB,EAAE,OAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC;IACtD,iBAAiB,EAAE,OAAC,CAAC,KAAK,CAAC,6BAAqB,CAAC;IACjD,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,yBAAiB,CAAC;IACzC,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,yBAAiB,CAAC;IACzC,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,kCAAkB,CAAC;IAC1C,aAAa,EAAE,2BAAmB;CACnC,CAAoC,CAAC"}

package/dist/kernel-state/index.d.ts

@@ -0,0 +1,4 @@
+export * from './lib/kernel-state';
+export * from './lib/key-grammar';
+export * from './lib/adapter-kind';
+//# sourceMappingURL=index.d.ts.map

package/dist/kernel-state/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/kernel-state/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC"}

package/dist/kernel-state/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/kernel-state"), exports);
+__exportStar(require("./lib/key-grammar"), exports);
+__exportStar(require("./lib/adapter-kind"), exports);
+//# sourceMappingURL=index.js.map

package/dist/kernel-state/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/kernel-state/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,oDAAkC;AAClC,qDAAmC"}

package/dist/kernel-state/lib/adapter-kind.d.ts

@@ -0,0 +1,5 @@
+export declare enum KernelStateAdapterKind {
+    Sqlite = "sqlite",
+    Etcd = "etcd"
+}
+//# sourceMappingURL=adapter-kind.d.ts.map

package/dist/kernel-state/lib/adapter-kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-kind.d.ts","sourceRoot":"","sources":["../../../src/kernel-state/lib/adapter-kind.ts"],"names":[],"mappings":"AAcA,oBAAY,sBAAsB;IAChC,MAAM,WAAW;IACjB,IAAI,SAAS;CACd"}

package/dist/kernel-state/lib/adapter-kind.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KernelStateAdapterKind = void 0;
+var KernelStateAdapterKind;
+(function (KernelStateAdapterKind) {
+    KernelStateAdapterKind["Sqlite"] = "sqlite";
+    KernelStateAdapterKind["Etcd"] = "etcd";
+})(KernelStateAdapterKind || (exports.KernelStateAdapterKind = KernelStateAdapterKind = {}));
+//# sourceMappingURL=adapter-kind.js.map

package/dist/kernel-state/lib/adapter-kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-kind.js","sourceRoot":"","sources":["../../../src/kernel-state/lib/adapter-kind.ts"],"names":[],"mappings":";;;AAcA,IAAY,sBAGX;AAHD,WAAY,sBAAsB;IAChC,2CAAiB,CAAA;IACjB,uCAAa,CAAA;AACf,CAAC,EAHW,sBAAsB,sCAAtB,sBAAsB,QAGjC"}

package/dist/kernel-state/lib/kernel-state.d.ts

@@ -0,0 +1,37 @@
+export interface KernelStateEntry {
+    key: string;
+    value: unknown;
+    revision: number;
+    leaseId?: string;
+    modifiedAt: string;
+}
+export declare enum KernelStateChangeKind {
+    Put = "put",
+    Delete = "delete"
+}
+export interface KernelStateChange {
+    kind: KernelStateChangeKind;
+    key: string;
+    entry?: KernelStateEntry;
+    revision: number;
+}
+export interface KernelStateLease {
+    leaseId: string;
+    expiresAt: string;
+    ttlSeconds: number;
+}
+export interface PutOptions {
+    ifRevision?: number;
+    leaseId?: string;
+    ttlSeconds?: number;
+}
+export interface KernelState {
+    get(key: string): Promise<KernelStateEntry | null>;
+    list(prefix: string): Promise<KernelStateEntry[]>;
+    put(key: string, value: unknown, opts?: PutOptions): Promise<void>;
+    delete(key: string): Promise<void>;
+    watch(prefix: string, cb: (events: KernelStateChange[]) => void): () => void;
+    acquireLease(key: string, ttlSeconds: number): Promise<KernelStateLease>;
+    renewLease(leaseId: string): Promise<KernelStateLease>;
+}
+//# sourceMappingURL=kernel-state.d.ts.map

package/dist/kernel-state/lib/kernel-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-state.d.ts","sourceRoot":"","sources":["../../../src/kernel-state/lib/kernel-state.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IAMZ,KAAK,EAAE,OAAO,CAAC;IAMf,QAAQ,EAAE,MAAM,CAAC;IAKjB,OAAO,CAAC,EAAE,MAAM,CAAC;IAKjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,oBAAY,qBAAqB;IAC/B,GAAG,QAAQ;IACX,MAAM,WAAW;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,qBAAqB,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;IAMZ,KAAK,CAAC,EAAE,gBAAgB,CAAC;IAOzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAOD,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAKhB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAMD,MAAM,WAAW,UAAU;IAQzB,UAAU,CAAC,EAAE,MAAM,CAAC;IAOpB,OAAO,CAAC,EAAE,MAAM,CAAC;IAMjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAmBD,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,KAAK,CACH,MAAM,EAAE,MAAM,EACd,EAAE,EAAE,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,IAAI,GACxC,MAAM,IAAI,CAAC;IACd,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACzE,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACxD"}

package/dist/kernel-state/lib/kernel-state.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KernelStateChangeKind = void 0;
+var KernelStateChangeKind;
+(function (KernelStateChangeKind) {
+    KernelStateChangeKind["Put"] = "put";
+    KernelStateChangeKind["Delete"] = "delete";
+})(KernelStateChangeKind || (exports.KernelStateChangeKind = KernelStateChangeKind = {}));
+//# sourceMappingURL=kernel-state.js.map

package/dist/kernel-state/lib/kernel-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kernel-state.js","sourceRoot":"","sources":["../../../src/kernel-state/lib/kernel-state.ts"],"names":[],"mappings":";;;AA4CA,IAAY,qBAGX;AAHD,WAAY,qBAAqB;IAC/B,oCAAW,CAAA;IACX,0CAAiB,CAAA;AACnB,CAAC,EAHW,qBAAqB,qCAArB,qBAAqB,QAGhC"}

package/dist/kernel-state/lib/key-grammar.d.ts

@@ -0,0 +1,16 @@
+export declare enum KernelStateKeyPrefix {
+    Runners = "/xema/runners/",
+    Biomes = "/xema/biomes/",
+    Capabilities = "/xema/capabilities/",
+    Routes = "/xema/routes/",
+    Services = "/xema/services/",
+    DesiredState = "/xema/desired-state/",
+    Leases = "/xema/leases/",
+    Locks = "/xema/locks/",
+    Config = "/xema/config/",
+    Policies = "/xema/policies/"
+}
+export declare const KERNEL_STATE_KEY_PREFIXES: readonly KernelStateKeyPrefix[];
+export declare function validateKernelStateKey(key: string): KernelStateKeyPrefix;
+export declare function validateKernelStatePrefix(prefix: string): KernelStateKeyPrefix;
+//# sourceMappingURL=key-grammar.d.ts.map

package/dist/kernel-state/lib/key-grammar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-grammar.d.ts","sourceRoot":"","sources":["../../../src/kernel-state/lib/key-grammar.ts"],"names":[],"mappings":"AAaA,oBAAY,oBAAoB;IAC9B,OAAO,mBAAmB;IAC1B,MAAM,kBAAkB;IACxB,YAAY,wBAAwB;IACpC,MAAM,kBAAkB;IACxB,QAAQ,oBAAoB;IAC5B,YAAY,yBAAyB;IACrC,MAAM,kBAAkB;IACxB,KAAK,iBAAiB;IACtB,MAAM,kBAAkB;IACxB,QAAQ,oBAAoB;CAC7B;AAOD,eAAO,MAAM,yBAAyB,EAAE,SAAS,oBAAoB,EAYjE,CAAC;AAaL,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAqBxE;AAaD,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,oBAAoB,CAc9E"}