@xemahq/kernel-contracts 0.13.3 → 0.14.0

package/dist/agent-composition/lib/composition-limits-schema.d.ts

@@ -0,0 +1,4 @@
+import { z } from 'zod';
+import type { AgentLimits } from './composition';
+export declare const AgentLimitsSchema: z.ZodType<AgentLimits>;
+//# sourceMappingURL=composition-limits-schema.d.ts.map

package/dist/agent-composition/lib/composition-limits-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition-limits-schema.d.ts","sourceRoot":"","sources":["../../../src/agent-composition/lib/composition-limits-schema.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AASjD,eAAO,MAAM,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAO1C,CAAC"}

package/dist/agent-composition/lib/composition-limits-schema.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentLimitsSchema = void 0;
+const zod_1 = require("zod");
+exports.AgentLimitsSchema = zod_1.z
+    .object({
+    maxDepth: zod_1.z.number().int().positive(),
+    maxFanout: zod_1.z.number().int().positive(),
+    maxSpawns: zod_1.z.number().int().positive(),
+    tokenBudget: zod_1.z.number().int().positive().optional(),
+})
+    .strict();
+//# sourceMappingURL=composition-limits-schema.js.map

package/dist/agent-composition/lib/composition-limits-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition-limits-schema.js","sourceRoot":"","sources":["../../../src/agent-composition/lib/composition-limits-schema.ts"],"names":[],"mappings":";;;AAmBA,6BAAwB;AAWX,QAAA,iBAAiB,GAA2B,OAAC;KACvD,MAAM,CAAC;IACN,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CACpD,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/agent-composition/lib/composition-workspace.d.ts

@@ -0,0 +1,37 @@
+import type { WorkingFileBinding, WorkspaceEnvVar, WorkspacePersistenceSpec } from '../../agent-workspace';
+import type { AgentRunRole, CompiledManifestCredential, CompiledManifestPermissions, OutputSurfaceKind } from '../../workflow';
+export type { WorkingFileBinding, WorkspaceEnvVar, WorkspacePersistenceSpec, } from '../../agent-workspace';
+export declare enum AgentOutputSurfaceMode {
+    Single = "single",
+    Multi = "multi"
+}
+export interface AgentOutputSurface {
+    readonly kind: OutputSurfaceKind;
+    readonly port?: number;
+    readonly healthPath?: string;
+    readonly autoOpen?: boolean;
+    readonly mode?: AgentOutputSurfaceMode;
+    readonly root?: string;
+    readonly defaultDocument?: string;
+}
+export interface AgentRunConfig {
+    readonly stage: string;
+    readonly role: AgentRunRole;
+    readonly deliverableSpecRef?: string;
+}
+export interface AgentMountLayout {
+    readonly mounts: Readonly<Record<string, unknown>>;
+    readonly agentRunConfig: AgentRunConfig;
+    readonly seedFiles: readonly Readonly<Record<string, unknown>>[];
+    readonly inputs: Readonly<Record<string, unknown>>;
+}
+export interface AgentWorkspaceConfig {
+    readonly persistence?: WorkspacePersistenceSpec;
+    readonly env?: readonly WorkspaceEnvVar[];
+    readonly outputSurface?: AgentOutputSurface;
+    readonly mountLayout?: AgentMountLayout;
+    readonly workingFiles?: readonly WorkingFileBinding[];
+    readonly credentials?: readonly CompiledManifestCredential[];
+    readonly permissions?: CompiledManifestPermissions;
+}
+//# sourceMappingURL=composition-workspace.d.ts.map

package/dist/agent-composition/lib/composition-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition-workspace.d.ts","sourceRoot":"","sources":["../../../src/agent-composition/lib/composition-workspace.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EACV,kBAAkB,EAClB,eAAe,EACf,wBAAwB,EACzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACV,YAAY,EACZ,0BAA0B,EAC1B,2BAA2B,EAC3B,iBAAiB,EAClB,MAAM,gBAAgB,CAAC;AAExB,YAAY,EACV,kBAAkB,EAClB,eAAe,EACf,wBAAwB,GACzB,MAAM,uBAAuB,CAAC;AAQ/B,oBAAY,sBAAsB;IAChC,MAAM,WAAW;IACjB,KAAK,UAAU;CAChB;AAsBD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAE5B,QAAQ,CAAC,IAAI,CAAC,EAAE,sBAAsB,CAAC;IAMvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAMvB,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAcD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AA6BD,MAAM,WAAW,gBAAgB;IAO/B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAEnD,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IAOxC,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;IAOjE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpD;AAQD,MAAM,WAAW,oBAAoB;IAKnC,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,CAAC;IAOhD,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,eAAe,EAAE,CAAC;IAK1C,QAAQ,CAAC,aAAa,CAAC,EAAE,kBAAkB,CAAC;IAQ5C,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAgBxC,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAWtD,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAW7D,QAAQ,CAAC,WAAW,CAAC,EAAE,2BAA2B,CAAC;CACpD"}

package/dist/agent-composition/lib/composition-workspace.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentOutputSurfaceMode = void 0;
+var AgentOutputSurfaceMode;
+(function (AgentOutputSurfaceMode) {
+    AgentOutputSurfaceMode["Single"] = "single";
+    AgentOutputSurfaceMode["Multi"] = "multi";
+})(AgentOutputSurfaceMode || (exports.AgentOutputSurfaceMode = AgentOutputSurfaceMode = {}));
+//# sourceMappingURL=composition-workspace.js.map

package/dist/agent-composition/lib/composition-workspace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition-workspace.js","sourceRoot":"","sources":["../../../src/agent-composition/lib/composition-workspace.ts"],"names":[],"mappings":";;;AA6CA,IAAY,sBAGX;AAHD,WAAY,sBAAsB;IAChC,2CAAiB,CAAA;IACjB,yCAAe,CAAA;AACjB,CAAC,EAHW,sBAAsB,sCAAtB,sBAAsB,QAGjC"}

package/dist/agent-composition/lib/composition.d.ts

@@ -0,0 +1,65 @@
+import type { ToolSelectionEntry } from '../../mcp-tool';
+import type { NodeOverlayFragment } from '../../workflow';
+import type { SkillRef } from '../../skill';
+import type { BiomeAvailabilityScoped } from '../../biome-availability';
+import type { CapabilityLayer } from './capability-layer';
+import type { AgentWorkspaceConfig } from './composition-workspace';
+export interface AgentKernelRef {
+    readonly slug: string;
+    readonly version?: string;
+}
+export declare enum AgentSpace {
+    System = "system",
+    Biome = "biome",
+    Org = "org",
+    Project = "project",
+    User = "user"
+}
+export declare enum AgentLifecycle {
+    Draft = "draft",
+    Published = "published",
+    Archived = "archived"
+}
+export interface AgentLimits {
+    readonly maxDepth: number;
+    readonly maxFanout: number;
+    readonly maxSpawns: number;
+    readonly tokenBudget?: number | undefined;
+}
+export interface AgentNode extends NodeOverlayFragment, BiomeAvailabilityScoped {
+    readonly kernel: AgentKernelRef;
+    readonly alias?: string;
+    readonly skills: readonly SkillRef[];
+    readonly tools: readonly ToolSelectionEntry[];
+    readonly children: readonly AgentNode[];
+    readonly limits?: AgentLimits;
+}
+export interface Agent {
+    readonly slug: string;
+    readonly version: string;
+    readonly displayName: string;
+    readonly description?: string;
+    readonly scope: AgentSpace;
+    readonly lifecycle: AgentLifecycle;
+    readonly root: AgentNode;
+    readonly capability?: CapabilityLayer;
+    readonly workspace?: AgentWorkspaceConfig;
+}
+export interface ResolvedAgentNode extends NodeOverlayFragment, BiomeAvailabilityScoped {
+    readonly kernel: Required<AgentKernelRef>;
+    readonly alias?: string;
+    readonly skills: readonly SkillRef[];
+    readonly tools: readonly ToolSelectionEntry[];
+    readonly children: readonly ResolvedAgentNode[];
+    readonly limits?: AgentLimits;
+}
+export interface ResolvedAgent {
+    readonly slug: string;
+    readonly version: string;
+    readonly displayName: string;
+    readonly scope: AgentSpace;
+    readonly root: ResolvedAgentNode;
+    readonly capability: CapabilityLayer;
+    readonly workspace?: AgentWorkspaceConfig;
+}
+//# sourceMappingURL=composition.d.ts.map

package/dist/agent-composition/lib/composition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition.d.ts","sourceRoot":"","sources":["../../../src/agent-composition/lib/composition.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAKpE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAEtB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAOD,oBAAY,UAAU;IACpB,MAAM,WAAW;IACjB,KAAK,UAAU;IACf,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAQD,oBAAY,cAAc;IACxB,KAAK,UAAU;IACf,SAAS,cAAc;IACvB,QAAQ,aAAa;CACtB;AAwBD,MAAM,WAAW,WAAW;IAE1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAQ3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AASD,MAAM,WAAW,SACf,SAAQ,mBAAmB,EACzB,uBAAuB;IAEzB,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAEhC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAC;IAErC,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAM9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;IAQxC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAKD,MAAM,WAAW,KAAK;IAEpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,cAAc,CAAC;IAEnC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAEzB,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC;IAStC,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAC3C;AAWD,MAAM,WAAW,iBACf,SAAQ,mBAAmB,EACzB,uBAAuB;IAEzB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC1C,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,CAAC;IAErC,QAAQ,CAAC,KAAK,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAM9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAQhD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAMD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IAEjC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IAOrC,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;CAC3C"}

package/dist/agent-composition/lib/composition.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentLifecycle = exports.AgentSpace = void 0;
+var AgentSpace;
+(function (AgentSpace) {
+    AgentSpace["System"] = "system";
+    AgentSpace["Biome"] = "biome";
+    AgentSpace["Org"] = "org";
+    AgentSpace["Project"] = "project";
+    AgentSpace["User"] = "user";
+})(AgentSpace || (exports.AgentSpace = AgentSpace = {}));
+var AgentLifecycle;
+(function (AgentLifecycle) {
+    AgentLifecycle["Draft"] = "draft";
+    AgentLifecycle["Published"] = "published";
+    AgentLifecycle["Archived"] = "archived";
+})(AgentLifecycle || (exports.AgentLifecycle = AgentLifecycle = {}));
+//# sourceMappingURL=composition.js.map

package/dist/agent-composition/lib/composition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"composition.js","sourceRoot":"","sources":["../../../src/agent-composition/lib/composition.ts"],"names":[],"mappings":";;;AAoCA,IAAY,UAMX;AAND,WAAY,UAAU;IACpB,+BAAiB,CAAA;IACjB,6BAAe,CAAA;IACf,yBAAW,CAAA;IACX,iCAAmB,CAAA;IACnB,2BAAa,CAAA;AACf,CAAC,EANW,UAAU,0BAAV,UAAU,QAMrB;AAQD,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,iCAAe,CAAA;IACf,yCAAuB,CAAA;IACvB,uCAAqB,CAAA;AACvB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB"}

package/dist/agent-workspace/awp-spec.json

@@ -1,6 +1,6 @@
 {
   "$schema": "https://xema.dev/schemas/awp-spec.v1.json",
-  "emittedAt": "2026-06-21T20:45:38.848Z",
+  "emittedAt": "2026-06-22T09:58:02.236Z",
   "spec": {
     "id": "awp/v1",
     "version": "1.2.0",

package/dist/agent-workspace/lib/awp-v1.d.ts

@@ -0,0 +1,15 @@
+import { GitPushBranchSuffix, GitPushConcurrencyMode, type WorkspaceSpec } from './workspace-spec';
+export declare const AWP_V1_SPEC: WorkspaceSpec;
+export declare function findSlot(spec: WorkspaceSpec, key: string): import("./workspace-spec").SlotDefinition | undefined;
+export declare function isKnownSlotKey(spec: WorkspaceSpec, key: string): boolean;
+export declare function listAlwaysOnSlotKeys(spec: WorkspaceSpec): readonly string[];
+export declare function listTarballPersistedRelPaths(spec: WorkspaceSpec): readonly string[];
+export interface ResolvedGitPushSlot {
+    readonly key: string;
+    readonly path: string;
+    readonly branchPrefix: string;
+    readonly branchSuffix: GitPushBranchSuffix;
+    readonly concurrencyMode: GitPushConcurrencyMode;
+}
+export declare function listGitPushPersistedSlots(spec: WorkspaceSpec): readonly ResolvedGitPushSlot[];
+//# sourceMappingURL=awp-v1.d.ts.map

package/dist/agent-workspace/lib/awp-v1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"awp-v1.d.ts","sourceRoot":"","sources":["../../../src/agent-workspace/lib/awp-v1.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EAEtB,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAgB1B,eAAO,MAAM,WAAW,EAAE,aAwMzB,CAAC;AAMF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,yDAExD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAExE;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAE3E;AAQD,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,aAAa,GAAG,SAAS,MAAM,EAAE,CAInF;AAQD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;CAClD;AAOD,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,aAAa,GAClB,SAAS,mBAAmB,EAAE,CAgBhC"}

package/dist/agent-workspace/lib/awp-v1.js

@@ -0,0 +1,197 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AWP_V1_SPEC = void 0;
+exports.findSlot = findSlot;
+exports.isKnownSlotKey = isKnownSlotKey;
+exports.listAlwaysOnSlotKeys = listAlwaysOnSlotKeys;
+exports.listTarballPersistedRelPaths = listTarballPersistedRelPaths;
+exports.listGitPushPersistedSlots = listGitPushPersistedSlots;
+const workspace_spec_1 = require("./workspace-spec");
+exports.AWP_V1_SPEC = {
+    id: 'awp/v1',
+    version: '1.2.0',
+    slots: [
+        {
+            key: 'inputs',
+            path: '/workspace/inputs',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: "Read-only inputs supplied at session/run start (the workflow's `with:` block or the session's customConfig). The DSL input bag lands at `inputs.json`.",
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'tmp',
+            path: '/workspace/tmp',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadWrite],
+            defaultMode: workspace_spec_1.SlotMode.ReadWrite,
+            ownership: 'user',
+            humanDescription: 'Your scratch space — drafts, intermediate computation, working notes. Snapshot-persisted so retries see prior state. Never harvested.',
+            persistencePolicy: { kind: 'tarball' },
+        },
+        {
+            key: 'uploads',
+            path: '/workspace/uploads',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'User-uploaded files (briefs, screenshots, sketches). Read-only — never write here.',
+            persistencePolicy: { kind: 'tarball' },
+        },
+        {
+            key: 'references',
+            path: '/workspace/references',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'Curated evidence library (knowledge-base spaces, prior artifacts, external project mounts). Read-only.',
+            persistencePolicy: { kind: 'none' },
+            subSlots: [
+                {
+                    key: 'kb',
+                    path: '/workspace/references/kb',
+                    allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+                    defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+                    ownership: 'user',
+                },
+                {
+                    key: 'external-projects',
+                    path: '/workspace/references/external-projects',
+                    allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+                    defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+                    ownership: 'user',
+                },
+            ],
+        },
+        {
+            key: 'deliverable-specs',
+            path: '/workspace/deliverable-specs',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'Schemas + metadata for the deliverable spec(s) this run targets. Read-only — consult before writing under deliverables/.',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'deliverables',
+            path: '/workspace/deliverables',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly, workspace_spec_1.SlotMode.ReadWrite],
+            defaultMode: workspace_spec_1.SlotMode.ReadWrite,
+            ownership: 'user',
+            humanDescription: "Your writable output area. Files written here are harvested by the runtime per the deliverable spec's contract.",
+            persistencePolicy: { kind: 'tarball' },
+        },
+        {
+            key: 'repos',
+            path: '/workspace/repos',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly, workspace_spec_1.SlotMode.ReadWrite],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'user',
+            humanDescription: 'Project repositories. Read-only unless the workflow explicitly granted write authority (engineer roles only).',
+            persistencePolicy: { kind: 'git-push', branchPrefix: 'xema/session/' },
+        },
+        {
+            key: 'agents-md',
+            path: '/workspace/AGENTS.md',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            singleFile: true,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'context-json',
+            path: '/workspace/context.json',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            singleFile: true,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'system-overlay',
+            path: '/workspace/.xema/system-overlay.md',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            singleFile: true,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'agent-bundles',
+            path: '/workspace/.opencode/agents',
+            presence: 'always',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'skill-bundles',
+            path: '/workspace/.opencode/skills',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'commands',
+            path: '/workspace/.opencode/command',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+        {
+            key: 'instructions',
+            path: '/workspace/.xema/instructions',
+            presence: 'optional',
+            allowedModes: [workspace_spec_1.SlotMode.ReadOnly],
+            defaultMode: workspace_spec_1.SlotMode.ReadOnly,
+            ownership: 'platform',
+            persistencePolicy: { kind: 'none' },
+        },
+    ],
+};
+function findSlot(spec, key) {
+    return spec.slots.find((s) => s.key === key);
+}
+function isKnownSlotKey(spec, key) {
+    return spec.slots.some((s) => s.key === key);
+}
+function listAlwaysOnSlotKeys(spec) {
+    return spec.slots.filter((s) => s.presence === 'always').map((s) => s.key);
+}
+function listTarballPersistedRelPaths(spec) {
+    return spec.slots
+        .filter((s) => s.persistencePolicy?.kind === 'tarball')
+        .map((s) => s.path.replace(/^\/workspace\//, ''));
+}
+function listGitPushPersistedSlots(spec) {
+    const out = [];
+    for (const slot of spec.slots) {
+        if (slot.persistencePolicy?.kind === 'git-push') {
+            out.push({
+                key: slot.key,
+                path: slot.path,
+                branchPrefix: slot.persistencePolicy.branchPrefix,
+                branchSuffix: slot.persistencePolicy.branchSuffix ?? workspace_spec_1.GitPushBranchSuffix.SessionId,
+                concurrencyMode: slot.persistencePolicy.concurrencyMode ?? workspace_spec_1.GitPushConcurrencyMode.Force,
+            });
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=awp-v1.js.map

package/dist/agent-workspace/lib/awp-v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awp-v1.js","sourceRoot":"","sources":["../../../src/agent-workspace/lib/awp-v1.ts"],"names":[],"mappings":";;;AAmOA,4BAEC;AAED,wCAEC;AAED,oDAEC;AAQD,oEAIC;AAqBD,8DAkBC;AAhSD,qDAK0B;AAgBb,QAAA,WAAW,GAAkB;IACxC,EAAE,EAAE,QAAQ;IACZ,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE;QACL;YACE,GAAG,EAAE,QAAQ;YACb,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,wJAAwJ;YAC1J,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAIE,GAAG,EAAE,KAAK;YACV,IAAI,EAAE,gBAAgB;YACtB,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,SAAS,CAAC;YAClC,WAAW,EAAE,yBAAQ,CAAC,SAAS;YAC/B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,uIAAuI;YACzI,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACvC;QACD;YACE,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,oBAAoB;YAC1B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,oFAAoF;YACtF,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACvC;QACD;YACE,GAAG,EAAE,YAAY;YACjB,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,wGAAwG;YAC1G,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;YACnC,QAAQ,EAAE;gBACR;oBACE,GAAG,EAAE,IAAI;oBACT,IAAI,EAAE,0BAA0B;oBAChC,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;oBACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;oBAC9B,SAAS,EAAE,MAAM;iBAClB;gBACD;oBACE,GAAG,EAAE,mBAAmB;oBACxB,IAAI,EAAE,yCAAyC;oBAC/C,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;oBACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;oBAC9B,SAAS,EAAE,MAAM;iBAClB;aACF;SACF;QACD;YACE,GAAG,EAAE,mBAAmB;YACxB,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,0HAA0H;YAC5H,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YACE,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,EAAE,yBAAQ,CAAC,SAAS,CAAC;YACrD,WAAW,EAAE,yBAAQ,CAAC,SAAS;YAC/B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,iHAAiH;YACnH,iBAAiB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SACvC;QACD;YAKE,GAAG,EAAE,OAAO;YACZ,IAAI,EAAE,kBAAkB;YACxB,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,EAAE,yBAAQ,CAAC,SAAS,CAAC;YACrD,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,MAAM;YACjB,gBAAgB,EACd,+GAA+G;YACjH,iBAAiB,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE;SACvE;QAED;YAIE,GAAG,EAAE,WAAW;YAChB,IAAI,EAAE,sBAAsB;YAC5B,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAIE,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,yBAAyB;YAC/B,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAQE,GAAG,EAAE,gBAAgB;YACrB,IAAI,EAAE,oCAAoC;YAC1C,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAKE,GAAG,EAAE,eAAe;YACpB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,QAAQ;YAClB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAGE,GAAG,EAAE,eAAe;YACpB,IAAI,EAAE,6BAA6B;YACnC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAKE,GAAG,EAAE,UAAU;YACf,IAAI,EAAE,8BAA8B;YACpC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;QACD;YAME,GAAG,EAAE,cAAc;YACnB,IAAI,EAAE,+BAA+B;YACrC,QAAQ,EAAE,UAAU;YACpB,YAAY,EAAE,CAAC,yBAAQ,CAAC,QAAQ,CAAC;YACjC,WAAW,EAAE,yBAAQ,CAAC,QAAQ;YAC9B,SAAS,EAAE,UAAU;YACrB,iBAAiB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE;SACpC;KACF;CACF,CAAC;AAMF,SAAgB,QAAQ,CAAC,IAAmB,EAAE,GAAW;IACvD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,cAAc,CAAC,IAAmB,EAAE,GAAW;IAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AAC/C,CAAC;AAED,SAAgB,oBAAoB,CAAC,IAAmB;IACtD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC7E,CAAC;AAQD,SAAgB,4BAA4B,CAAC,IAAmB;IAC9D,OAAO,IAAI,CAAC,KAAK;SACd,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAE,IAAI,KAAK,SAAS,CAAC;SACtD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,CAAC;AACtD,CAAC;AAqBD,SAAgB,yBAAyB,CACvC,IAAmB;IAEnB,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,iBAAiB,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC;gBACP,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,YAAY,EAAE,IAAI,CAAC,iBAAiB,CAAC,YAAY;gBACjD,YAAY,EACV,IAAI,CAAC,iBAAiB,CAAC,YAAY,IAAI,oCAAmB,CAAC,SAAS;gBACtE,eAAe,EACb,IAAI,CAAC,iBAAiB,CAAC,eAAe,IAAI,uCAAsB,CAAC,KAAK;aACzE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/contribution/index.d.ts

@@ -2,4 +2,5 @@ export * from './lib/contribution-kind';
 export * from './lib/contribution-source';
 export * from './lib/contribution';
 export * from './lib/registry';
+export * from './lib/sync';
 //# sourceMappingURL=index.d.ts.map

package/dist/contribution/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/contribution/index.ts"],"names":[],"mappings":"AAAA,cAAc,yBAAyB,CAAC;AACxC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC"}

package/dist/contribution/index.js

@@ -18,4 +18,5 @@ __exportStar(require("./lib/contribution-kind"), exports);
 __exportStar(require("./lib/contribution-source"), exports);
 __exportStar(require("./lib/contribution"), exports);
 __exportStar(require("./lib/registry"), exports);
+__exportStar(require("./lib/sync"), exports);
 //# sourceMappingURL=index.js.map

package/dist/contribution/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contribution/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC;AACxC,4DAA0C;AAC1C,qDAAmC;AACnC,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contribution/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC;AACxC,4DAA0C;AAC1C,qDAAmC;AACnC,iDAA+B;AAC/B,6CAA2B"}

package/dist/contribution/lib/sync.d.ts

@@ -0,0 +1,75 @@
+import { z } from 'zod';
+import { ContributionKind } from './contribution-kind';
+import { AnyContributionEnvelopeSchema } from './contribution';
+export declare enum ContributionOwnerKind {
+    Biome = "biome",
+    RuntimeService = "runtime_service",
+    SystemSeed = "system_seed"
+}
+export declare const ContributionOwnerKindSchema: z.ZodEnum<typeof ContributionOwnerKind>;
+export interface ContributionOwner {
+    readonly type: ContributionOwnerKind;
+    readonly id: string;
+    readonly version?: string;
+}
+export declare const ContributionOwnerSchema: z.ZodObject<{
+    type: z.ZodEnum<typeof ContributionOwnerKind>;
+    id: z.ZodString;
+    version: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export declare enum ContributionSyncStatus {
+    NotSynced = "not_synced",
+    Syncing = "syncing",
+    Synced = "synced",
+    SyncFailed = "sync_failed",
+    PendingRetry = "pending_retry",
+    Partial = "partial"
+}
+export declare const ContributionSyncStatusSchema: z.ZodEnum<typeof ContributionSyncStatus>;
+export interface ContributionSyncRequest {
+    readonly owner: ContributionOwner;
+    readonly kind: ContributionKind;
+    readonly items: readonly z.infer<typeof AnyContributionEnvelopeSchema>[];
+    readonly contentHash: string;
+    readonly syncToken: string;
+}
+export declare const ContributionSyncRequestSchema: z.ZodObject<{
+    owner: z.ZodObject<{
+        type: z.ZodEnum<typeof ContributionOwnerKind>;
+        id: z.ZodString;
+        version: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    kind: z.ZodEnum<typeof ContributionKind>;
+    items: z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<typeof ContributionKind>;
+        slug: z.ZodString;
+        source: z.ZodEnum<typeof import("./contribution-source").ContributionSource>;
+        version: z.ZodString;
+        manifest: z.ZodUnknown;
+    }, z.core.$strip>>;
+    contentHash: z.ZodString;
+    syncToken: z.ZodString;
+}, z.core.$strip>;
+export interface ContributionSyncResult {
+    readonly owner: ContributionOwner;
+    readonly kind: ContributionKind;
+    readonly upserted: number;
+    readonly pruned: number;
+    readonly unchanged: number;
+    readonly skippedNoOp: boolean;
+    readonly status: ContributionSyncStatus;
+}
+export declare const ContributionSyncResultSchema: z.ZodObject<{
+    owner: z.ZodObject<{
+        type: z.ZodEnum<typeof ContributionOwnerKind>;
+        id: z.ZodString;
+        version: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    kind: z.ZodEnum<typeof ContributionKind>;
+    upserted: z.ZodNumber;
+    pruned: z.ZodNumber;
+    unchanged: z.ZodNumber;
+    skippedNoOp: z.ZodBoolean;
+    status: z.ZodEnum<typeof ContributionSyncStatus>;
+}, z.core.$strip>;
+//# sourceMappingURL=sync.d.ts.map

package/dist/contribution/lib/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../../src/contribution/lib/sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAA0B,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAqC/D,oBAAY,qBAAqB;IAC/B,KAAK,UAAU;IACf,cAAc,oBAAoB;IAClC,UAAU,gBAAgB;CAC3B;AAED,eAAO,MAAM,2BAA2B,yCAAsC,CAAC;AAG/E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IAErC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAEpB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,eAAO,MAAM,uBAAuB;;;;iBAIlC,CAAC;AAgBH,oBAAY,sBAAsB;IAChC,SAAS,eAAe;IACxB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,UAAU,gBAAgB;IAC1B,YAAY,kBAAkB;IAC9B,OAAO,YAAY;CACpB;AAED,eAAO,MAAM,4BAA4B,0CAAuC,CAAC;AAWjF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,EAAE,CAAC;IACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;iBAMxC,CAAC;AAGH,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;CACzC;AAED,eAAO,MAAM,4BAA4B;;;;;;;;;;;;iBAQvC,CAAC"}

package/dist/contribution/lib/sync.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContributionSyncResultSchema = exports.ContributionSyncRequestSchema = exports.ContributionSyncStatusSchema = exports.ContributionSyncStatus = exports.ContributionOwnerSchema = exports.ContributionOwnerKindSchema = exports.ContributionOwnerKind = void 0;
+const zod_1 = require("zod");
+const contribution_kind_1 = require("./contribution-kind");
+const contribution_1 = require("./contribution");
+var ContributionOwnerKind;
+(function (ContributionOwnerKind) {
+    ContributionOwnerKind["Biome"] = "biome";
+    ContributionOwnerKind["RuntimeService"] = "runtime_service";
+    ContributionOwnerKind["SystemSeed"] = "system_seed";
+})(ContributionOwnerKind || (exports.ContributionOwnerKind = ContributionOwnerKind = {}));
+exports.ContributionOwnerKindSchema = zod_1.z.nativeEnum(ContributionOwnerKind);
+exports.ContributionOwnerSchema = zod_1.z.object({
+    type: exports.ContributionOwnerKindSchema,
+    id: zod_1.z.string().min(1),
+    version: zod_1.z.string().min(1).optional(),
+});
+var ContributionSyncStatus;
+(function (ContributionSyncStatus) {
+    ContributionSyncStatus["NotSynced"] = "not_synced";
+    ContributionSyncStatus["Syncing"] = "syncing";
+    ContributionSyncStatus["Synced"] = "synced";
+    ContributionSyncStatus["SyncFailed"] = "sync_failed";
+    ContributionSyncStatus["PendingRetry"] = "pending_retry";
+    ContributionSyncStatus["Partial"] = "partial";
+})(ContributionSyncStatus || (exports.ContributionSyncStatus = ContributionSyncStatus = {}));
+exports.ContributionSyncStatusSchema = zod_1.z.nativeEnum(ContributionSyncStatus);
+exports.ContributionSyncRequestSchema = zod_1.z.object({
+    owner: exports.ContributionOwnerSchema,
+    kind: contribution_kind_1.ContributionKindSchema,
+    items: zod_1.z.array(contribution_1.AnyContributionEnvelopeSchema),
+    contentHash: zod_1.z.string().min(1),
+    syncToken: zod_1.z.string().min(1),
+});
+exports.ContributionSyncResultSchema = zod_1.z.object({
+    owner: exports.ContributionOwnerSchema,
+    kind: contribution_kind_1.ContributionKindSchema,
+    upserted: zod_1.z.number().int().nonnegative(),
+    pruned: zod_1.z.number().int().nonnegative(),
+    unchanged: zod_1.z.number().int().nonnegative(),
+    skippedNoOp: zod_1.z.boolean(),
+    status: exports.ContributionSyncStatusSchema,
+});
+//# sourceMappingURL=sync.js.map

package/dist/contribution/lib/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../../src/contribution/lib/sync.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,2DAA+E;AAC/E,iDAA+D;AAqC/D,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,wCAAe,CAAA;IACf,2DAAkC,CAAA;IAClC,mDAA0B,CAAA;AAC5B,CAAC,EAJW,qBAAqB,qCAArB,qBAAqB,QAIhC;AAEY,QAAA,2BAA2B,GAAG,OAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAWlE,QAAA,uBAAuB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,mCAA2B;IACjC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAgBH,IAAY,sBAOX;AAPD,WAAY,sBAAsB;IAChC,kDAAwB,CAAA;IACxB,6CAAmB,CAAA;IACnB,2CAAiB,CAAA;IACjB,oDAA0B,CAAA;IAC1B,wDAA8B,CAAA;IAC9B,6CAAmB,CAAA;AACrB,CAAC,EAPW,sBAAsB,sCAAtB,sBAAsB,QAOjC;AAEY,QAAA,4BAA4B,GAAG,OAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;AAmBpE,QAAA,6BAA6B,GAAG,OAAC,CAAC,MAAM,CAAC;IACpD,KAAK,EAAE,+BAAuB;IAC9B,IAAI,EAAE,0CAAsB;IAC5B,KAAK,EAAE,OAAC,CAAC,KAAK,CAAC,4CAA6B,CAAC;IAC7C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAaU,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,KAAK,EAAE,+BAAuB;IAC9B,IAAI,EAAE,0CAAsB;IAC5B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,WAAW,EAAE,OAAC,CAAC,OAAO,EAAE;IACxB,MAAM,EAAE,oCAA4B;CACrC,CAAC,CAAC"}

package/dist/resource/lib/resource-managed-by.d.ts

@@ -3,6 +3,8 @@ export declare enum ResourceManagedBy {
     Ui = "ui",
     Iac = "iac",
     Seeder = "seeder",
+    BiomeContributed = "biome_contributed",
+    RuntimeRegistered = "runtime_registered",
     System = "system"
 }
 export declare const ResourceManagedBySchema: z.ZodEnum<typeof ResourceManagedBy>;

package/dist/resource/lib/resource-managed-by.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resource-managed-by.d.ts","sourceRoot":"","sources":["../../../src/resource/lib/resource-managed-by.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAqBxB,oBAAY,iBAAiB;IAC3B,EAAE,OAAO;IACT,GAAG,QAAQ;IACX,MAAM,WAAW;IACjB,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,uBAAuB,qCAAkC,CAAC"}
+{"version":3,"file":"resource-managed-by.d.ts","sourceRoot":"","sources":["../../../src/resource/lib/resource-managed-by.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAgCxB,oBAAY,iBAAiB;IAC3B,EAAE,OAAO;IACT,GAAG,QAAQ;IACX,MAAM,WAAW;IACjB,gBAAgB,sBAAsB;IACtC,iBAAiB,uBAAuB;IACxC,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,uBAAuB,qCAAkC,CAAC"}

package/dist/resource/lib/resource-managed-by.js

@@ -7,6 +7,8 @@ var ResourceManagedBy;
     ResourceManagedBy["Ui"] = "ui";
     ResourceManagedBy["Iac"] = "iac";
     ResourceManagedBy["Seeder"] = "seeder";
+    ResourceManagedBy["BiomeContributed"] = "biome_contributed";
+    ResourceManagedBy["RuntimeRegistered"] = "runtime_registered";
     ResourceManagedBy["System"] = "system";
 })(ResourceManagedBy || (exports.ResourceManagedBy = ResourceManagedBy = {}));
 exports.ResourceManagedBySchema = zod_1.z.nativeEnum(ResourceManagedBy);

package/dist/resource/lib/resource-managed-by.js.map

@@ -1 +1 @@
-{"version":3,"file":"resource-managed-by.js","sourceRoot":"","sources":["../../../src/resource/lib/resource-managed-by.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAqBxB,IAAY,iBAKX;AALD,WAAY,iBAAiB;IAC3B,8BAAS,CAAA;IACT,gCAAW,CAAA;IACX,sCAAiB,CAAA;IACjB,sCAAiB,CAAA;AACnB,CAAC,EALW,iBAAiB,iCAAjB,iBAAiB,QAK5B;AAEY,QAAA,uBAAuB,GAAG,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"resource-managed-by.js","sourceRoot":"","sources":["../../../src/resource/lib/resource-managed-by.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAgCxB,IAAY,iBAOX;AAPD,WAAY,iBAAiB;IAC3B,8BAAS,CAAA;IACT,gCAAW,CAAA;IACX,sCAAiB,CAAA;IACjB,2DAAsC,CAAA;IACtC,6DAAwC,CAAA;IACxC,sCAAiB,CAAA;AACnB,CAAC,EAPW,iBAAiB,iCAAjB,iBAAiB,QAO5B;AAEY,QAAA,uBAAuB,GAAG,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC"}

package/dist/space/index.d.ts

@@ -1,4 +1,5 @@
 export * from './lib/space';
 export * from './lib/space-ref-parser';
 export * from './lib/space-traversal';
+export * from './lib/skill-mirror-path';
 //# sourceMappingURL=index.d.ts.map

package/dist/space/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,yBAAyB,CAAC"}

package/dist/space/index.js

@@ -17,4 +17,5 @@ Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./lib/space"), exports);
 __exportStar(require("./lib/space-ref-parser"), exports);
 __exportStar(require("./lib/space-traversal"), exports);
+__exportStar(require("./lib/skill-mirror-path"), exports);
 //# sourceMappingURL=index.js.map

package/dist/space/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,yDAAuC;AACvC,wDAAsC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/space/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,yDAAuC;AACvC,wDAAsC;AACtC,0DAAwC"}

package/dist/space/lib/skill-mirror-path.d.ts

@@ -0,0 +1,4 @@
+import { type SpaceRef } from './space';
+export declare function skillMirrorAllocationSubPath(scope: SpaceRef): string | null;
+export declare function skillMirrorBundleDir(scope: SpaceRef, slug: string, contentHash: string): string | null;
+//# sourceMappingURL=skill-mirror-path.d.ts.map

package/dist/space/lib/skill-mirror-path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-mirror-path.d.ts","sourceRoot":"","sources":["../../../src/space/lib/skill-mirror-path.ts"],"names":[],"mappings":"AAcA,OAAO,EAAa,KAAK,QAAQ,EAAE,MAAM,SAAS,CAAC;AA6BnD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,GAAG,IAAI,CAqB3E;AAQD,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,QAAQ,EACf,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,GAClB,MAAM,GAAG,IAAI,CAKf"}

package/dist/space/lib/skill-mirror-path.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.skillMirrorAllocationSubPath = skillMirrorAllocationSubPath;
+exports.skillMirrorBundleDir = skillMirrorBundleDir;
+const space_1 = require("./space");
+const TEMPLATES_SYSTEM_SUBPATH = 'templates/system';
+const TEMPLATES_ORG_SUBPATH_PREFIX = 'templates/orgs';
+const MIRROR_SUBPATH = 'mirror/skills';
+const SKILL_KIND_SEGMENT = 'skill';
+function skillMirrorAllocationSubPath(scope) {
+    switch (scope.tier) {
+        case space_1.SpaceKind.System:
+            return `${TEMPLATES_SYSTEM_SUBPATH}/${MIRROR_SUBPATH}/system`;
+        case space_1.SpaceKind.Biome:
+            return scope.biomeId
+                ? `${TEMPLATES_SYSTEM_SUBPATH}/${MIRROR_SUBPATH}/biome/${scope.biomeId}`
+                : null;
+        case space_1.SpaceKind.Org:
+            return scope.orgId
+                ? `${TEMPLATES_ORG_SUBPATH_PREFIX}/${scope.orgId}/${MIRROR_SUBPATH}/org`
+                : null;
+        case space_1.SpaceKind.Project:
+            return scope.orgId && scope.projectId
+                ? `${TEMPLATES_ORG_SUBPATH_PREFIX}/${scope.orgId}/${MIRROR_SUBPATH}/` +
+                    `project/${scope.projectId}`
+                : null;
+        default:
+            return null;
+    }
+}
+function skillMirrorBundleDir(scope, slug, contentHash) {
+    const base = skillMirrorAllocationSubPath(scope);
+    return base === null
+        ? null
+        : `${base}/${SKILL_KIND_SEGMENT}/${slug}/${contentHash}`;
+}
+//# sourceMappingURL=skill-mirror-path.js.map

package/dist/space/lib/skill-mirror-path.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-mirror-path.js","sourceRoot":"","sources":["../../../src/space/lib/skill-mirror-path.ts"],"names":[],"mappings":";;AA2CA,oEAqBC;AAQD,oDASC;AAnED,mCAAmD;AAGnD,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAEpD,MAAM,4BAA4B,GAAG,gBAAgB,CAAC;AAEtD,MAAM,cAAc,GAAG,eAAe,CAAC;AAEvC,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAoBnC,SAAgB,4BAA4B,CAAC,KAAe;IAC1D,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,iBAAS,CAAC,MAAM;YACnB,OAAO,GAAG,wBAAwB,IAAI,cAAc,SAAS,CAAC;QAChE,KAAK,iBAAS,CAAC,KAAK;YAClB,OAAO,KAAK,CAAC,OAAO;gBAClB,CAAC,CAAC,GAAG,wBAAwB,IAAI,cAAc,UAAU,KAAK,CAAC,OAAO,EAAE;gBACxE,CAAC,CAAC,IAAI,CAAC;QACX,KAAK,iBAAS,CAAC,GAAG;YAChB,OAAO,KAAK,CAAC,KAAK;gBAChB,CAAC,CAAC,GAAG,4BAA4B,IAAI,KAAK,CAAC,KAAK,IAAI,cAAc,MAAM;gBACxE,CAAC,CAAC,IAAI,CAAC;QACX,KAAK,iBAAS,CAAC,OAAO;YACpB,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS;gBACnC,CAAC,CAAC,GAAG,4BAA4B,IAAI,KAAK,CAAC,KAAK,IAAI,cAAc,GAAG;oBACjE,WAAW,KAAK,CAAC,SAAS,EAAE;gBAChC,CAAC,CAAC,IAAI,CAAC;QACX;YAEE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAQD,SAAgB,oBAAoB,CAClC,KAAe,EACf,IAAY,EACZ,WAAmB;IAEnB,MAAM,IAAI,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,IAAI,KAAK,IAAI;QAClB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,GAAG,IAAI,IAAI,kBAAkB,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC;AAC7D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xemahq/kernel-contracts",
-  "version": "0.13.3",
+  "version": "0.14.0",
   "description": "Consolidated Xema OS kernel wire contracts — pure types + zod schemas for the 32 kernel protocol surfaces. One package, one npm scope, wildcard per-surface subpath exports. No framework/runtime deps.",
   "publishConfig": {
     "registry": "https://registry.npmjs.org/",

package/src/biome/lib/biome-manifest.ts

@@ -187,7 +187,7 @@ export type BiomeDatabaseDeclaration = z.infer<typeof BiomeDatabaseDeclarationSc
 /**
  * Per-API declaration shipped under `xema.ships.apis[]` (Phase 9).
  * Each entry becomes one subdomain (`<name>.api.<base-domain>`)
- * served by a biome-shipped NestJS service. biome-host-api applies
+ * served by a biome-shipped API service. biome-host-api applies
  * the Helm sub-chart at install time and writes a route-registry
  * entry the ingress shim consults. Validated structurally here;
  * detailed contract semantics live in `@xemahq/biome-api-sdk`.

package/src/contribution/index.ts

@@ -2,3 +2,4 @@ export * from './lib/contribution-kind';
 export * from './lib/contribution-source';
 export * from './lib/contribution';
 export * from './lib/registry';
+export * from './lib/sync';

package/src/contribution/lib/sync.ts

@@ -0,0 +1,132 @@
+import { z } from 'zod';
+import { ContributionKind, ContributionKindSchema } from './contribution-kind';
+import { AnyContributionEnvelopeSchema } from './contribution';
+
+// NOTE: the `contribution` subpath is a DAG leaf and MUST NOT import the
+// `resource` subpath (enforced by check-subpath-dag.mjs). The mapping from
+// `ContributionOwnerKind` to `ResourceManagedBy` therefore lives in the
+// consuming SDK (`@xemahq/contribution-sync-nest`), which legally depends on
+// both subpaths. Keep that mapping the single source of truth there.
+
+// ═══════════════════════════════════════════════════════════════════════════
+// Contribution sync — the declarative, owner-scoped push contract.
+//
+// biome-host (and a runtime service self-registering its own capabilities)
+// pushes the COMPLETE desired set of contributions for one `(owner, kind)`
+// to the owning registry over HTTP. The registry upserts every item and
+// prunes anything it owns for that `(owner, kind)` that is no longer present.
+//
+// This replaces the boot-time local-directory scan: registries no longer read
+// biome trees off disk; they receive their content. Pruning is owner-scoped
+// (NEVER installation-scoped — biome content is platform-global and shared
+// across org/project installs), so a per-tenant enable/disable never deletes
+// shared content.
+// ═══════════════════════════════════════════════════════════════════════════
+
+/**
+ * Who owns a pushed set of contributions. The typed owner keeps three
+ * lifecycles cleanly separated while sharing ONE engine + wire shape:
+ *
+ * - `Biome`          — a biome bundle's contributions, pushed by biome-host.
+ *   `id` is the biome id, `version` the biome version. Maps to
+ *   `ResourceManagedBy.BiomeContributed`.
+ * - `RuntimeService` — a service self-registering its OWN capabilities (the
+ *   `@XemaCapability` auto-register path). `id` is the service name. Maps to
+ *   `ResourceManagedBy.RuntimeRegistered`.
+ * - `SystemSeed`     — a genuine package/in-service seed that is neither a
+ *   biome push nor runtime self-registration (`@xemahq/system-skills`,
+ *   `INITIAL_CAPABILITY_SEED`). Maps to `ResourceManagedBy.Seeder`.
+ */
+export enum ContributionOwnerKind {
+  Biome = 'biome',
+  RuntimeService = 'runtime_service',
+  SystemSeed = 'system_seed',
+}
+
+export const ContributionOwnerKindSchema = z.nativeEnum(ContributionOwnerKind);
+
+/** The typed owner of a pushed contribution set. */
+export interface ContributionOwner {
+  readonly type: ContributionOwnerKind;
+  /** Biome id, service name, or seed id depending on `type`. */
+  readonly id: string;
+  /** Biome/bundle version for `Biome` owners; optional otherwise. */
+  readonly version?: string;
+}
+
+export const ContributionOwnerSchema = z.object({
+  type: ContributionOwnerKindSchema,
+  id: z.string().min(1),
+  version: z.string().min(1).optional(),
+});
+
+/**
+ * Lifecycle/availability status of a registry's content for one `(owner, kind)`.
+ * Persisted by the registry and aggregated by biome-host for the UI AND used by
+ * the registry to gate consumption (a not-fully-synced set is not served).
+ *
+ * - `NOT_SYNCED`   — never synced; no rows exist yet (structural empty).
+ * - `SYNCING`      — a sync is in flight.
+ * - `SYNCED`       — desired === active; content is the current good set.
+ * - `SYNC_FAILED`  — last attempt failed (e.g. referential-integrity reject);
+ *   the prior `active` set is preserved and still served.
+ * - `PENDING_RETRY`— transient failure queued for retry (outbox).
+ * - `PARTIAL`      — synced, but a cross-service dependency is unsatisfied;
+ *   affected items are not launchable until it resolves.
+ */
+export enum ContributionSyncStatus {
+  NotSynced = 'not_synced',
+  Syncing = 'syncing',
+  Synced = 'synced',
+  SyncFailed = 'sync_failed',
+  PendingRetry = 'pending_retry',
+  Partial = 'partial',
+}
+
+export const ContributionSyncStatusSchema = z.nativeEnum(ContributionSyncStatus);
+
+/**
+ * The push request. `items` is the COMPLETE desired set for `(owner, kind)`
+ * after the pusher's cross-biome `extends`-dedup — never a delta.
+ *
+ * `contentHash` is a stable sha256 over the canonicalized `items` (idempotent
+ * no-op detection). `syncToken` is a MONOTONIC lifecycle-attempt token (ULID /
+ * sequence / transition counter) — deliberately NOT derived from the version,
+ * so a downgrade still carries a higher token than the upgrade it reverts.
+ */
+export interface ContributionSyncRequest {
+  readonly owner: ContributionOwner;
+  readonly kind: ContributionKind;
+  readonly items: readonly z.infer<typeof AnyContributionEnvelopeSchema>[];
+  readonly contentHash: string;
+  readonly syncToken: string;
+}
+
+export const ContributionSyncRequestSchema = z.object({
+  owner: ContributionOwnerSchema,
+  kind: ContributionKindSchema,
+  items: z.array(AnyContributionEnvelopeSchema),
+  contentHash: z.string().min(1),
+  syncToken: z.string().min(1),
+});
+
+/** The registry's response to a sync push. */
+export interface ContributionSyncResult {
+  readonly owner: ContributionOwner;
+  readonly kind: ContributionKind;
+  readonly upserted: number;
+  readonly pruned: number;
+  readonly unchanged: number;
+  readonly skippedNoOp: boolean;
+  readonly status: ContributionSyncStatus;
+}
+
+export const ContributionSyncResultSchema = z.object({
+  owner: ContributionOwnerSchema,
+  kind: ContributionKindSchema,
+  upserted: z.number().int().nonnegative(),
+  pruned: z.number().int().nonnegative(),
+  unchanged: z.number().int().nonnegative(),
+  skippedNoOp: z.boolean(),
+  status: ContributionSyncStatusSchema,
+});

package/src/resource/lib/resource-managed-by.ts

@@ -4,10 +4,21 @@ import { z } from 'zod';
  * `ResourceManagedBy` — the ownership marker stamped on every provisionable
  * resource row. This single concept powers three behaviors with one switch:
  *
- * - `Seeder`  — owned by a boot/event reconciler (e.g. portals derived from
- *   installed web biomes). The reconciler may create/update/retire these.
+ * - `Seeder`  — owned by a boot/event reconciler that is NOT a biome-bundle
+ *   push (e.g. portals derived from installed web biomes, or genuine
+ *   package/in-service seeds such as `@xemahq/system-skills` and
+ *   `INITIAL_CAPABILITY_SEED`). The reconciler may create/update/retire these.
  *   Retire-removed deletes ONLY `Seeder`-owned rows whose `managedKey` no
  *   longer appears in the desired set.
+ * - `BiomeContributed` — owned by the biome-host contribution-sync push: a
+ *   biome bundle's contributions (agents, skills, specs, …) materialized into
+ *   an owning registry over HTTP at biome lifecycle time. Pruned biome-scoped
+ *   (`owner.type=biome`, `owner.id=biomeId`) when a biome upgrade drops an item
+ *   or the biome leaves the platform — NEVER on per-org/project enable/disable.
+ * - `RuntimeRegistered` — self-registered by a runtime service at boot (the
+ *   `@XemaCapability` auto-register path: a service publishing its OWN
+ *   capabilities). Owner is `owner.type=runtime_service`, `owner.id=serviceName`;
+ *   its prune scope is the service, never a biome's content.
  * - `Iac`     — owned by a declarative source (Terraform / `xema.yaml`).
  *   Declared-state-wins: `plan` surfaces drift, `apply` reconciles back. No
  *   reconciler touches a row it does not own.
@@ -23,6 +34,8 @@ export enum ResourceManagedBy {
   Ui = 'ui',
   Iac = 'iac',
   Seeder = 'seeder',
+  BiomeContributed = 'biome_contributed',
+  RuntimeRegistered = 'runtime_registered',
   System = 'system',
 }
 

package/src/space/index.ts

@@ -1,3 +1,4 @@
 export * from './lib/space';
 export * from './lib/space-ref-parser';
 export * from './lib/space-traversal';
+export * from './lib/skill-mirror-path';

package/src/space/lib/skill-mirror-path.ts

@@ -0,0 +1,82 @@
+// ═══════════════════════════════════════════════════════════════════════════
+// Skill mirror path convention — SHARED by the orchestrator (writes the
+// content-addressed skill mirror) and the worker (reads it at launch). Keeping
+// it here, in kernel-contracts, means the path convention has EXACTLY ONE
+// source of truth across both repos — the orchestrator and worker can never
+// drift apart on where a mirrored skill bundle lives.
+//
+// Runtime-NEUTRAL: a skill bundle (SKILL.md + resources) is identical across
+// every runtime; only WHERE it is finally placed inside the workspace differs
+// (each runtime mounts skills under its own per-runtime skills subtree), and
+// that placement is owned by the worker's RuntimeLayout — NOT by this path.
+// This module describes the STORAGE location of the pre-staged bytes only, so
+// it works for every runtime adapter alike, present and future.
+// ═══════════════════════════════════════════════════════════════════════════
+import { SpaceKind, type SpaceRef } from './space';
+
+/** Templates subtree a worker mounts RO for system + biome (platform-wide) skills. */
+const TEMPLATES_SYSTEM_SUBPATH = 'templates/system';
+/** Per-org templates subtree prefix — `<prefix>/<orgId>` is mounted RO per worker. */
+const TEMPLATES_ORG_SUBPATH_PREFIX = 'templates/orgs';
+/** Mirror segment appended under the chosen templates subtree. */
+const MIRROR_SUBPATH = 'mirror/skills';
+/** Kind segment under the allocation subPath (matches the materializer's `<kind>`). */
+const SKILL_KIND_SEGMENT = 'skill';
+
+/**
+ * Pool-relative allocation subPath under which a skill's content-addressed
+ * mirror is written/read, keyed by the skill's scope — the parent of
+ * `<kind>/<slug>/<contentHash>`:
+ *
+ *   • System / Biome → `templates/system/mirror/skills/<seg>`
+ *       platform-wide; EVERY worker mounts `templates/system` RO.
+ *   • Org / Project  → `templates/orgs/<orgId>/mirror/skills/<seg>`
+ *       the org's own RO mount; another org's worker never mounts it.
+ *
+ * Returns `null` when the scope is not mirrorable from the ref alone:
+ *   • User   — the ref is org-less (`xema://user/<userId>`), so it can't be
+ *              placed under any org's templates subtree.
+ *   • App / Session — runtime spaces, never own a skill bundle.
+ *   • a mirrorable tier whose required id segment is absent (malformed ref).
+ * A `null` result means "not pre-staged" — the caller resolves it via the live
+ * fetch (an explicit, logged miss; never silently-stale content).
+ */
+export function skillMirrorAllocationSubPath(scope: SpaceRef): string | null {
+  switch (scope.tier) {
+    case SpaceKind.System:
+      return `${TEMPLATES_SYSTEM_SUBPATH}/${MIRROR_SUBPATH}/system`;
+    case SpaceKind.Biome:
+      return scope.biomeId
+        ? `${TEMPLATES_SYSTEM_SUBPATH}/${MIRROR_SUBPATH}/biome/${scope.biomeId}`
+        : null;
+    case SpaceKind.Org:
+      return scope.orgId
+        ? `${TEMPLATES_ORG_SUBPATH_PREFIX}/${scope.orgId}/${MIRROR_SUBPATH}/org`
+        : null;
+    case SpaceKind.Project:
+      return scope.orgId && scope.projectId
+        ? `${TEMPLATES_ORG_SUBPATH_PREFIX}/${scope.orgId}/${MIRROR_SUBPATH}/` +
+            `project/${scope.projectId}`
+        : null;
+    default:
+      // User / App / Session — not mirrorable (see doc comment).
+      return null;
+  }
+}
+
+/**
+ * Full mirror BUNDLE dir relative to the pool root:
+ * `<allocationSubPath>/skill/<slug>/<contentHash>`. This is exactly where the
+ * materializer writes a skill bundle (SKILL.md + resources). Returns `null`
+ * when the scope is not mirrorable (see {@link skillMirrorAllocationSubPath}).
+ */
+export function skillMirrorBundleDir(
+  scope: SpaceRef,
+  slug: string,
+  contentHash: string,
+): string | null {
+  const base = skillMirrorAllocationSubPath(scope);
+  return base === null
+    ? null
+    : `${base}/${SKILL_KIND_SEGMENT}/${slug}/${contentHash}`;
+}