@xemahq/temporal-runtime 0.1.1

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Support. While redistributing the Work or
+      Derivative Works thereof, You may choose to offer, and charge a
+      fee for, acceptance of support, warranty, indemnity, or other
+      liability obligations and/or rights consistent with this License.
+      However, in accepting such obligations, You may act only on Your
+      own behalf and on Your sole responsibility, not on behalf of any
+      other Contributor, and only if You agree to indemnify, defend, and
+      hold each Contributor harmless for any liability incurred by, or
+      claims asserted against, such Contributor by reason of your
+      accepting any such warranty or support.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Xema
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -0,0 +1,64 @@
+<p align="center">
+<svg width="680" height="120" viewBox="0 0 680 120" fill="none" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="@xemahq/temporal-runtime">
+  <rect width="680" height="120" rx="14" fill="#0B1020"/>
+  <g transform="translate(28,34)">
+    <path d="M26 0 L52 15 L52 45 L26 60 L0 45 L0 15 Z" fill="#8B5CF6" opacity="0.18"/>
+    <path d="M26 12 L41 21 L41 39 L26 48 L11 39 L11 21 Z" fill="#8B5CF6"/>
+  </g>
+  <text x="92" y="52" font-family="ui-monospace,SFMono-Regular,Menlo,monospace" font-size="22" fill="#F8FAFC" font-weight="700">@xemahq/temporal-runtime</text>
+  <text x="92" y="80" font-family="ui-sans-serif,system-ui,sans-serif" font-size="15" fill="#94A3B8">Shared glue for Temporal workers and clients</text>
+  <text x="652" y="105" text-anchor="end" font-family="ui-sans-serif,system-ui,sans-serif" font-size="12" fill="#475569">xema.dev</text>
+</svg>
+</p>
+
+<p align="center">
+  <a href="https://xema.dev">Website</a> &middot;
+  <a href="https://www.npmjs.com/package/@xemahq/temporal-runtime">npm</a>
+</p>
+
+<p align="center">
+  <img alt="npm" src="https://img.shields.io/npm/v/%40xemahq%2Ftemporal-runtime?color=2563eb&label=npm">
+  <img alt="license" src="https://img.shields.io/npm/l/%40xemahq%2Ftemporal-runtime?color=10b981">
+  <img alt="types" src="https://img.shields.io/npm/types/%40xemahq%2Ftemporal-runtime?color=3178c6">
+</p>
+
+# @xemahq/temporal-runtime
+
+> Shared glue for Temporal workers and clients
+
+## Overview
+
+Shared runtime glue for services that run Temporal workflow workers or start
+workflows. It provides one battle-tested setup so services do not drift:
+connection handling, an on-behalf-of activity-auth context, a worker factory
+that wires the interceptor and payload codec, an authenticated service HTTP
+client for activities, idempotent schedule reconciliation, and a closed set of
+visibility search attributes.
+
+## When to use it
+
+- Use it in any service that runs a Temporal worker or starts a workflow.
+
+## Installation
+
+```bash
+pnpm add @xemahq/temporal-runtime
+```
+
+## Usage
+
+```ts
+import { createPlatformWorker } from '@xemahq/temporal-runtime';
+
+const worker = await createPlatformWorker(workerOptions);
+await worker.run();
+```
+
+## Peer requirements
+
+- `@nestjs/common` ^10 || ^11
+- `reflect-metadata` ^0.2
+
+## License
+
+Apache-2.0 &copy; Xema — [xema.dev](https://xema.dev)

package/dist/index.d.ts

@@ -0,0 +1,10 @@
+export * from './lib/connection';
+export * from './lib/activity-auth-context';
+export * from './lib/on-behalf-of-interceptor';
+export * from './lib/worker';
+export * from './lib/auth-kind';
+export * from './lib/service-http-client';
+export * from './lib/schedule';
+export * from './lib/search-attributes';
+export * from './lib/temporal-sdk';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAsBA,cAAc,kBAAkB,CAAC;AACjC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,26 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/connection"), exports);
+__exportStar(require("./lib/activity-auth-context"), exports);
+__exportStar(require("./lib/on-behalf-of-interceptor"), exports);
+__exportStar(require("./lib/worker"), exports);
+__exportStar(require("./lib/auth-kind"), exports);
+__exportStar(require("./lib/service-http-client"), exports);
+__exportStar(require("./lib/schedule"), exports);
+__exportStar(require("./lib/search-attributes"), exports);
+__exportStar(require("./lib/temporal-sdk"), exports);
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAsBA,mDAAiC;AACjC,8DAA4C;AAC5C,iEAA+C;AAC/C,+CAA6B;AAC7B,kDAAgC;AAChC,4DAA0C;AAC1C,iDAA+B;AAC/B,0DAAwC;AACxC,qDAAmC"}

package/dist/lib/activity-auth-context.d.ts

@@ -0,0 +1,8 @@
+export interface ActivityAuthContext {
+    readonly actorSubject: string | null;
+    readonly orgId?: string;
+    readonly correlationId?: string;
+}
+export declare function getActivityAuthContext(): ActivityAuthContext | undefined;
+export declare function runWithActivityAuthContext<T>(context: ActivityAuthContext, fn: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=activity-auth-context.d.ts.map

package/dist/lib/activity-auth-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-auth-context.d.ts","sourceRoot":"","sources":["../../src/lib/activity-auth-context.ts"],"names":[],"mappings":"AAuBA,MAAM,WAAW,mBAAmB;IAElC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAErC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AASD,wBAAgB,sBAAsB,IAAI,mBAAmB,GAAG,SAAS,CAExE;AAOD,wBAAsB,0BAA0B,CAAC,CAAC,EAChD,OAAO,EAAE,mBAAmB,EAC5B,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GACnB,OAAO,CAAC,CAAC,CAAC,CAEZ"}

package/dist/lib/activity-auth-context.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getActivityAuthContext = getActivityAuthContext;
+exports.runWithActivityAuthContext = runWithActivityAuthContext;
+const node_async_hooks_1 = require("node:async_hooks");
+const storage = new node_async_hooks_1.AsyncLocalStorage();
+function getActivityAuthContext() {
+    return storage.getStore();
+}
+async function runWithActivityAuthContext(context, fn) {
+    return storage.run(context, fn);
+}
+//# sourceMappingURL=activity-auth-context.js.map

package/dist/lib/activity-auth-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity-auth-context.js","sourceRoot":"","sources":["../../src/lib/activity-auth-context.ts"],"names":[],"mappings":";;AAuCA,wDAEC;AAOD,gEAKC;AArDD,uDAAqD;AAgCrD,MAAM,OAAO,GAAG,IAAI,oCAAiB,EAAuB,CAAC;AAO7D,SAAgB,sBAAsB;IACpC,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC;AAC5B,CAAC;AAOM,KAAK,UAAU,0BAA0B,CAC9C,OAA4B,EAC5B,EAAoB;IAEpB,OAAO,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAClC,CAAC"}

package/dist/lib/auth-kind.d.ts

@@ -0,0 +1,19 @@
+export declare enum ServiceAuthKind {
+    OnBehalfOfActor = "on-behalf-of-actor",
+    Service = "service",
+    ExternalBearer = "external-bearer",
+    None = "none"
+}
+export type ServiceAuthSpec = {
+    readonly kind: ServiceAuthKind.OnBehalfOfActor;
+    readonly audience?: string;
+} | {
+    readonly kind: ServiceAuthKind.Service;
+    readonly audience?: string;
+} | {
+    readonly kind: ServiceAuthKind.ExternalBearer;
+    readonly token: string;
+} | {
+    readonly kind: ServiceAuthKind.None;
+};
+//# sourceMappingURL=auth-kind.d.ts.map

package/dist/lib/auth-kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-kind.d.ts","sourceRoot":"","sources":["../../src/lib/auth-kind.ts"],"names":[],"mappings":"AAmBA,oBAAY,eAAe;IACzB,eAAe,uBAAuB;IACtC,OAAO,YAAY;IACnB,cAAc,oBAAoB;IAQlC,IAAI,SAAS;CACd;AAED,MAAM,MAAM,eAAe,GACvB;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,eAAe,CAAC;IAE/C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,OAAO,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,cAAc,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;CACrC,CAAC"}

package/dist/lib/auth-kind.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceAuthKind = void 0;
+var ServiceAuthKind;
+(function (ServiceAuthKind) {
+    ServiceAuthKind["OnBehalfOfActor"] = "on-behalf-of-actor";
+    ServiceAuthKind["Service"] = "service";
+    ServiceAuthKind["ExternalBearer"] = "external-bearer";
+    ServiceAuthKind["None"] = "none";
+})(ServiceAuthKind || (exports.ServiceAuthKind = ServiceAuthKind = {}));
+//# sourceMappingURL=auth-kind.js.map

package/dist/lib/auth-kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-kind.js","sourceRoot":"","sources":["../../src/lib/auth-kind.ts"],"names":[],"mappings":";;;AAmBA,IAAY,eAYX;AAZD,WAAY,eAAe;IACzB,yDAAsC,CAAA;IACtC,sCAAmB,CAAA;IACnB,qDAAkC,CAAA;IAQlC,gCAAa,CAAA;AACf,CAAC,EAZW,eAAe,+BAAf,eAAe,QAY1B"}

package/dist/lib/connection.d.ts

@@ -0,0 +1,14 @@
+import { Connection } from '@temporalio/client';
+import { NativeConnection } from '@temporalio/worker';
+export interface TemporalConnectionOptions {
+    readonly address: string;
+    readonly tls?: {
+        readonly clientCertPath: string;
+        readonly clientKeyPath: string;
+        readonly serverName?: string;
+    };
+}
+export declare function connectTemporalWorker(options: TemporalConnectionOptions): Promise<NativeConnection>;
+export declare function connectTemporalClient(options: TemporalConnectionOptions): Promise<Connection>;
+export declare function resolveTemporalConnectionOptionsFromEnv(): TemporalConnectionOptions;
+//# sourceMappingURL=connection.d.ts.map

package/dist/lib/connection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.d.ts","sourceRoot":"","sources":["../../src/lib/connection.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAgBtD,MAAM,WAAW,yBAAyB;IAExC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,QAAQ,CAAC,GAAG,CAAC,EAAE;QACb,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;QAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAE/B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AA6BD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAQ3B;AAOD,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,UAAU,CAAC,CAQrB;AAWD,wBAAgB,uCAAuC,IAAI,yBAAyB,CAyBnF"}

package/dist/lib/connection.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.connectTemporalWorker = connectTemporalWorker;
+exports.connectTemporalClient = connectTemporalClient;
+exports.resolveTemporalConnectionOptionsFromEnv = resolveTemporalConnectionOptionsFromEnv;
+const node_fs_1 = require("node:fs");
+const client_1 = require("@temporalio/client");
+const worker_1 = require("@temporalio/worker");
+function readTlsPair(tls) {
+    return {
+        clientCertPair: {
+            crt: (0, node_fs_1.readFileSync)(tls.clientCertPath),
+            key: (0, node_fs_1.readFileSync)(tls.clientKeyPath),
+        },
+        ...(tls.serverName !== undefined
+            ? { serverNameOverride: tls.serverName }
+            : {}),
+    };
+}
+async function connectTemporalWorker(options) {
+    if (!options.tls) {
+        return worker_1.NativeConnection.connect({ address: options.address });
+    }
+    return worker_1.NativeConnection.connect({
+        address: options.address,
+        tls: readTlsPair(options.tls),
+    });
+}
+async function connectTemporalClient(options) {
+    if (!options.tls) {
+        return client_1.Connection.connect({ address: options.address });
+    }
+    return client_1.Connection.connect({
+        address: options.address,
+        tls: readTlsPair(options.tls),
+    });
+}
+function resolveTemporalConnectionOptionsFromEnv() {
+    const address = process.env.TEMPORAL_ADDRESS?.trim();
+    if (!address) {
+        throw new Error('TEMPORAL_ADDRESS is required for a Temporal connection.');
+    }
+    if (process.env.TEMPORAL_TLS_ENABLED !== 'true') {
+        return { address };
+    }
+    const clientCertPath = process.env.TEMPORAL_TLS_CLIENT_CERT_PATH?.trim();
+    const clientKeyPath = process.env.TEMPORAL_TLS_CLIENT_KEY_PATH?.trim();
+    if (!clientCertPath || !clientKeyPath) {
+        throw new Error('TEMPORAL_TLS_ENABLED=true requires both TEMPORAL_TLS_CLIENT_CERT_PATH ' +
+            'and TEMPORAL_TLS_CLIENT_KEY_PATH.');
+    }
+    const serverName = process.env.TEMPORAL_TLS_SERVER_NAME?.trim();
+    return {
+        address,
+        tls: {
+            clientCertPath,
+            clientKeyPath,
+            ...(serverName ? { serverName } : {}),
+        },
+    };
+}
+//# sourceMappingURL=connection.js.map

package/dist/lib/connection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connection.js","sourceRoot":"","sources":["../../src/lib/connection.ts"],"names":[],"mappings":";;AA0DA,sDAUC;AAOD,sDAUC;AAWD,0FAyBC;AAzHD,qCAAuC;AAEvC,+CAAgD;AAChD,+CAAsD;AAqCtD,SAAS,WAAW,CAClB,GAAkD;IAElD,OAAO;QACL,cAAc,EAAE;YACd,GAAG,EAAE,IAAA,sBAAY,EAAC,GAAG,CAAC,cAAc,CAAC;YACrC,GAAG,EAAE,IAAA,sBAAY,EAAC,GAAG,CAAC,aAAa,CAAC;SACrC;QACD,GAAG,CAAC,GAAG,CAAC,UAAU,KAAK,SAAS;YAC9B,CAAC,CAAC,EAAE,kBAAkB,EAAE,GAAG,CAAC,UAAU,EAAE;YACxC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC;AAMM,KAAK,UAAU,qBAAqB,CACzC,OAAkC;IAElC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,OAAO,yBAAgB,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,yBAAgB,CAAC,OAAO,CAAC;QAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAOM,KAAK,UAAU,qBAAqB,CACzC,OAAkC;IAElC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QACjB,OAAO,mBAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,mBAAU,CAAC,OAAO,CAAC;QACxB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC;KAC9B,CAAC,CAAC;AACL,CAAC;AAWD,SAAgB,uCAAuC;IACrD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,MAAM,EAAE,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,CAAC;IACrB,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,IAAI,EAAE,CAAC;IACzE,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE,CAAC;IACvE,IAAI,CAAC,cAAc,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,wEAAwE;YACtE,mCAAmC,CACtC,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,wBAAwB,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO;QACL,OAAO;QACP,GAAG,EAAE;YACH,cAAc;YACd,aAAa;YACb,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/on-behalf-of-interceptor.d.ts

@@ -0,0 +1,5 @@
+import type { ActivityExecuteInput, ActivityInboundCallsInterceptor, Next } from '@temporalio/worker';
+export declare class OnBehalfOfActivityInterceptor implements ActivityInboundCallsInterceptor {
+    execute(input: ActivityExecuteInput, next: Next<ActivityInboundCallsInterceptor, 'execute'>): Promise<unknown>;
+}
+//# sourceMappingURL=on-behalf-of-interceptor.d.ts.map

package/dist/lib/on-behalf-of-interceptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"on-behalf-of-interceptor.d.ts","sourceRoot":"","sources":["../../src/lib/on-behalf-of-interceptor.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,oBAAoB,EACpB,+BAA+B,EAC/B,IAAI,EACL,MAAM,oBAAoB,CAAC;AAkB5B,qBAAa,6BACX,YAAW,+BAA+B;IAEpC,OAAO,CACX,KAAK,EAAE,oBAAoB,EAC3B,IAAI,EAAE,IAAI,CAAC,+BAA+B,EAAE,SAAS,CAAC,GACrD,OAAO,CAAC,OAAO,CAAC;CAIpB"}

package/dist/lib/on-behalf-of-interceptor.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OnBehalfOfActivityInterceptor = void 0;
+const activity_auth_context_1 = require("./activity-auth-context");
+class OnBehalfOfActivityInterceptor {
+    async execute(input, next) {
+        const context = extractAuthContext(input);
+        return (0, activity_auth_context_1.runWithActivityAuthContext)(context, () => next(input));
+    }
+}
+exports.OnBehalfOfActivityInterceptor = OnBehalfOfActivityInterceptor;
+function extractAuthContext(input) {
+    const first = input.args[0];
+    const ctx = first?.context;
+    return {
+        actorSubject: ctx?.actorSubject ?? null,
+        ...(ctx?.orgId !== undefined ? { orgId: ctx.orgId } : {}),
+        ...(ctx?.correlationId !== undefined
+            ? { correlationId: ctx.correlationId }
+            : {}),
+    };
+}
+//# sourceMappingURL=on-behalf-of-interceptor.js.map

package/dist/lib/on-behalf-of-interceptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"on-behalf-of-interceptor.js","sourceRoot":"","sources":["../../src/lib/on-behalf-of-interceptor.ts"],"names":[],"mappings":";;;AAAA,mEAGiC;AAwBjC,MAAa,6BAA6B;IAGxC,KAAK,CAAC,OAAO,CACX,KAA2B,EAC3B,IAAsD;QAEtD,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,IAAA,kDAA0B,EAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,CAAC;CACF;AAVD,sEAUC;AAED,SAAS,kBAAkB,CAAC,KAA2B;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAQb,CAAC;IACd,MAAM,GAAG,GAAG,KAAK,EAAE,OAAO,CAAC;IAC3B,OAAO;QACL,YAAY,EAAE,GAAG,EAAE,YAAY,IAAI,IAAI;QACvC,GAAG,CAAC,GAAG,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,GAAG,EAAE,aAAa,KAAK,SAAS;YAClC,CAAC,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE;YACtC,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC"}

package/dist/lib/schedule.d.ts

@@ -0,0 +1,17 @@
+import type { Client } from '@temporalio/client';
+import type { Duration } from '@temporalio/common';
+export interface PlatformScheduleSpec {
+    readonly scheduleId: string;
+    readonly every: Duration;
+    readonly catchupWindow: Duration;
+    readonly workflowType: string;
+    readonly taskQueue: string;
+    readonly args: readonly unknown[];
+    readonly note: string;
+    readonly searchAttributes?: Record<string, string[]>;
+}
+export interface UpsertPlatformScheduleResult {
+    readonly created: boolean;
+}
+export declare function upsertPlatformSchedule(client: Client, spec: PlatformScheduleSpec): Promise<UpsertPlatformScheduleResult>;
+//# sourceMappingURL=schedule.d.ts.map

package/dist/lib/schedule.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule.d.ts","sourceRoot":"","sources":["../../src/lib/schedule.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAY,MAAM,oBAAoB,CAAC;AAW7D,MAAM,WAAW,oBAAoB;IAEnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAKzB,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;IAEjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAM3B,QAAQ,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;IAMlC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAOtB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;CACtD;AAGD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAaD,wBAAsB,sBAAsB,CAC1C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,4BAA4B,CAAC,CA+CvC"}

package/dist/lib/schedule.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.upsertPlatformSchedule = upsertPlatformSchedule;
+const client_1 = require("@temporalio/client");
+async function upsertPlatformSchedule(client, spec) {
+    const definition = {
+        spec: { intervals: [{ every: spec.every }] },
+        action: {
+            type: 'startWorkflow',
+            workflowType: spec.workflowType,
+            taskQueue: spec.taskQueue,
+            args: spec.args,
+            workflowId: spec.scheduleId,
+            ...(spec.searchAttributes
+                ? { searchAttributes: spec.searchAttributes }
+                : {}),
+        },
+        policies: {
+            overlap: 'SKIP',
+            catchupWindow: spec.catchupWindow,
+        },
+    };
+    try {
+        await client.schedule.create({
+            scheduleId: spec.scheduleId,
+            ...definition,
+            state: { paused: false, note: spec.note },
+        });
+        return { created: true };
+    }
+    catch (err) {
+        if (!(err instanceof client_1.ScheduleAlreadyRunning)) {
+            throw err;
+        }
+        const handle = client.schedule.getHandle(spec.scheduleId);
+        await handle.update((previous) => ({
+            ...definition,
+            state: { paused: previous.state.paused, note: previous.state.note },
+        }));
+        return { created: false };
+    }
+}
+//# sourceMappingURL=schedule.js.map

package/dist/lib/schedule.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schedule.js","sourceRoot":"","sources":["../../src/lib/schedule.ts"],"names":[],"mappings":";;AAiEA,wDAkDC;AAnHD,+CAA4D;AAiErD,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,IAA0B;IAE1B,MAAM,UAAU,GAAG;QACjB,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE;QAC5C,MAAM,EAAE;YACN,IAAI,EAAE,eAAwB;YAC9B,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,IAAI,CAAC,IAAiB;YAE5B,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,CAAC,IAAI,CAAC,gBAAgB;gBACvB,CAAC,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE;gBAC7C,CAAC,CAAC,EAAE,CAAC;SACR;QACD,QAAQ,EAAE;YAER,OAAO,EAAE,MAAe;YACxB,aAAa,EAAE,IAAI,CAAC,aAAa;SAClC;KACF,CAAC;IAEF,IAAI,CAAC;QAIH,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAW;YACrC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,GAAG,UAAU;YAEb,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;SAC1C,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,+BAAsB,CAAC,EAAE,CAAC;YAG7C,MAAM,GAAG,CAAC;QACZ,CAAC;QAGD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC1D,MAAM,MAAM,CAAC,MAAM,CAAW,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC3C,GAAG,UAAU;YACb,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE;SACpE,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC;AACH,CAAC"}

package/dist/lib/search-attributes.d.ts

@@ -0,0 +1,28 @@
+import { temporal } from '@temporalio/proto';
+import type { Connection } from '@temporalio/client';
+import type { PlatformWorkflowDomain } from '@xemahq/kernel-contracts/workflow';
+export declare const SEARCH_ATTR_ORG_ID = "OrgId";
+export declare const SEARCH_ATTR_PROJECT_ID = "ProjectId";
+export declare const SEARCH_ATTR_WORKFLOW_DOMAIN = "WorkflowDomain";
+export declare const SEARCH_ATTR_SUBJECT_ID = "SubjectId";
+export declare const SEARCH_ATTR_INTEGRATION_PROVIDER_ID = "IntegrationProviderId";
+export declare const SEARCH_ATTR_REGISTRY_KIND = "RegistryKind";
+export declare const SEARCH_ATTR_IMAGE_DIGEST = "ImageDigest";
+interface PlatformSearchAttribute {
+    readonly name: string;
+    readonly type: temporal.api.enums.v1.IndexedValueType;
+}
+export declare const PLATFORM_SEARCH_ATTRIBUTES: readonly PlatformSearchAttribute[];
+export interface PlatformSearchAttributeInput {
+    readonly workflowDomain: PlatformWorkflowDomain;
+    readonly orgId?: string;
+    readonly projectId?: string;
+    readonly subjectId?: string;
+}
+export declare function buildPlatformSearchAttributes(input: PlatformSearchAttributeInput): Record<string, string[]>;
+export interface RegisterSearchAttributesResult {
+    readonly registered: readonly string[];
+}
+export declare function registerPlatformSearchAttributes(connection: Connection, namespace: string): Promise<RegisterSearchAttributesResult>;
+export {};
+//# sourceMappingURL=search-attributes.d.ts.map

package/dist/lib/search-attributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-attributes.d.ts","sourceRoot":"","sources":["../../src/lib/search-attributes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mCAAmC,CAAC;AAkBhF,eAAO,MAAM,kBAAkB,UAAU,CAAC;AAC1C,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAClD,eAAO,MAAM,2BAA2B,mBAAmB,CAAC;AAC5D,eAAO,MAAM,sBAAsB,cAAc,CAAC;AAElD,eAAO,MAAM,mCAAmC,0BAA0B,CAAC;AAE3E,eAAO,MAAM,yBAAyB,iBAAiB,CAAC;AAExD,eAAO,MAAM,wBAAwB,gBAAgB,CAAC;AAEtD,UAAU,uBAAuB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC;CACvD;AAMD,eAAO,MAAM,0BAA0B,EAAE,SAAS,uBAAuB,EAQxE,CAAC;AAGF,MAAM,WAAW,4BAA4B;IAE3C,QAAQ,CAAC,cAAc,EAAE,sBAAsB,CAAC;IAEhD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAOD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,4BAA4B,GAClC,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAc1B;AAGD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAgBD,wBAAsB,gCAAgC,CACpD,UAAU,EAAE,UAAU,EACtB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,8BAA8B,CAAC,CAqBzC"}

package/dist/lib/search-attributes.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PLATFORM_SEARCH_ATTRIBUTES = exports.SEARCH_ATTR_IMAGE_DIGEST = exports.SEARCH_ATTR_REGISTRY_KIND = exports.SEARCH_ATTR_INTEGRATION_PROVIDER_ID = exports.SEARCH_ATTR_SUBJECT_ID = exports.SEARCH_ATTR_WORKFLOW_DOMAIN = exports.SEARCH_ATTR_PROJECT_ID = exports.SEARCH_ATTR_ORG_ID = void 0;
+exports.buildPlatformSearchAttributes = buildPlatformSearchAttributes;
+exports.registerPlatformSearchAttributes = registerPlatformSearchAttributes;
+const proto_1 = require("@temporalio/proto");
+exports.SEARCH_ATTR_ORG_ID = 'OrgId';
+exports.SEARCH_ATTR_PROJECT_ID = 'ProjectId';
+exports.SEARCH_ATTR_WORKFLOW_DOMAIN = 'WorkflowDomain';
+exports.SEARCH_ATTR_SUBJECT_ID = 'SubjectId';
+exports.SEARCH_ATTR_INTEGRATION_PROVIDER_ID = 'IntegrationProviderId';
+exports.SEARCH_ATTR_REGISTRY_KIND = 'RegistryKind';
+exports.SEARCH_ATTR_IMAGE_DIGEST = 'ImageDigest';
+const KEYWORD = proto_1.temporal.api.enums.v1.IndexedValueType.INDEXED_VALUE_TYPE_KEYWORD;
+exports.PLATFORM_SEARCH_ATTRIBUTES = [
+    { name: exports.SEARCH_ATTR_ORG_ID, type: KEYWORD },
+    { name: exports.SEARCH_ATTR_PROJECT_ID, type: KEYWORD },
+    { name: exports.SEARCH_ATTR_WORKFLOW_DOMAIN, type: KEYWORD },
+    { name: exports.SEARCH_ATTR_SUBJECT_ID, type: KEYWORD },
+    { name: exports.SEARCH_ATTR_INTEGRATION_PROVIDER_ID, type: KEYWORD },
+    { name: exports.SEARCH_ATTR_REGISTRY_KIND, type: KEYWORD },
+    { name: exports.SEARCH_ATTR_IMAGE_DIGEST, type: KEYWORD },
+];
+function buildPlatformSearchAttributes(input) {
+    const attrs = {
+        [exports.SEARCH_ATTR_WORKFLOW_DOMAIN]: [input.workflowDomain],
+    };
+    if (input.orgId) {
+        attrs[exports.SEARCH_ATTR_ORG_ID] = [input.orgId];
+    }
+    if (input.projectId) {
+        attrs[exports.SEARCH_ATTR_PROJECT_ID] = [input.projectId];
+    }
+    if (input.subjectId) {
+        attrs[exports.SEARCH_ATTR_SUBJECT_ID] = [input.subjectId];
+    }
+    return attrs;
+}
+async function registerPlatformSearchAttributes(connection, namespace) {
+    const listResponse = await connection.operatorService.listSearchAttributes({
+        namespace,
+    });
+    const existing = new Set(Object.keys(listResponse.customAttributes ?? {}));
+    const missing = exports.PLATFORM_SEARCH_ATTRIBUTES.filter((attr) => !existing.has(attr.name));
+    if (missing.length === 0) {
+        return { registered: [] };
+    }
+    const searchAttributes = {};
+    for (const attr of missing) {
+        searchAttributes[attr.name] = attr.type;
+    }
+    await connection.operatorService.addSearchAttributes({
+        namespace,
+        searchAttributes,
+    });
+    return { registered: missing.map((attr) => attr.name) };
+}
+//# sourceMappingURL=search-attributes.js.map

package/dist/lib/search-attributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search-attributes.js","sourceRoot":"","sources":["../../src/lib/search-attributes.ts"],"names":[],"mappings":";;;AAoEA,sEAgBC;AAqBD,4EAwBC;AAjID,6CAA6C;AAqBhC,QAAA,kBAAkB,GAAG,OAAO,CAAC;AAC7B,QAAA,sBAAsB,GAAG,WAAW,CAAC;AACrC,QAAA,2BAA2B,GAAG,gBAAgB,CAAC;AAC/C,QAAA,sBAAsB,GAAG,WAAW,CAAC;AAErC,QAAA,mCAAmC,GAAG,uBAAuB,CAAC;AAE9D,QAAA,yBAAyB,GAAG,cAAc,CAAC;AAE3C,QAAA,wBAAwB,GAAG,aAAa,CAAC;AAOtD,MAAM,OAAO,GACX,gBAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,gBAAgB,CAAC,0BAA0B,CAAC;AAGvD,QAAA,0BAA0B,GAAuC;IAC5E,EAAE,IAAI,EAAE,0BAAkB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC3C,EAAE,IAAI,EAAE,8BAAsB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,IAAI,EAAE,mCAA2B,EAAE,IAAI,EAAE,OAAO,EAAE;IACpD,EAAE,IAAI,EAAE,8BAAsB,EAAE,IAAI,EAAE,OAAO,EAAE;IAC/C,EAAE,IAAI,EAAE,2CAAmC,EAAE,IAAI,EAAE,OAAO,EAAE;IAC5D,EAAE,IAAI,EAAE,iCAAyB,EAAE,IAAI,EAAE,OAAO,EAAE;IAClD,EAAE,IAAI,EAAE,gCAAwB,EAAE,IAAI,EAAE,OAAO,EAAE;CAClD,CAAC;AAmBF,SAAgB,6BAA6B,CAC3C,KAAmC;IAEnC,MAAM,KAAK,GAA6B;QACtC,CAAC,mCAA2B,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;KACtD,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,0BAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,CAAC,8BAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACpB,KAAK,CAAC,8BAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAqBM,KAAK,UAAU,gCAAgC,CACpD,UAAsB,EACtB,SAAiB;IAEjB,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,eAAe,CAAC,oBAAoB,CAAC;QACzE,SAAS;KACV,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,kCAA0B,CAAC,MAAM,CAC/C,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CACnC,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IAC5B,CAAC;IAED,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IACpD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC;IAC1C,CAAC;IACD,MAAM,UAAU,CAAC,eAAe,CAAC,mBAAmB,CAAC;QACnD,SAAS;QACT,gBAAgB;KACjB,CAAC,CAAC;IACH,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1D,CAAC"}

package/dist/lib/service-http-client.d.ts

@@ -0,0 +1,51 @@
+import { IdentityBootstrapService } from '@xemahq/identity-client';
+import { type ServiceAuthSpec } from './auth-kind';
+export interface ServiceRequest {
+    readonly method: 'GET' | 'POST' | 'PUT' | 'PATCH' | 'DELETE';
+    readonly url: string;
+    readonly headers?: Readonly<Record<string, string>>;
+    readonly body?: string | Uint8Array | null;
+    readonly timeoutMs?: number;
+    readonly auth: ServiceAuthSpec;
+    readonly orgId?: string;
+    readonly projectId?: string;
+    readonly correlationId?: string;
+    readonly actorSubject?: string | null;
+    readonly pipelineRunId?: string;
+    readonly pipelinePhaseKey?: string;
+}
+export interface ServiceResponse<TBody = unknown> {
+    readonly status: number;
+    readonly headers: Readonly<Record<string, string>>;
+    readonly body: TBody;
+    readonly rawBody: string;
+}
+export interface ServiceHttpClientOptions {
+    readonly defaultTimeoutMs?: number;
+    readonly correlationIdFactory?: () => string;
+}
+export declare class ServiceHttpClient {
+    private readonly identity;
+    private readonly logger;
+    private readonly defaultTimeoutMs;
+    private readonly correlationIdFactory;
+    constructor(identity: IdentityBootstrapService, options?: ServiceHttpClientOptions);
+    request<TBody = unknown>(req: ServiceRequest): Promise<ServiceResponse<TBody>>;
+    requestJsonOrThrow<TBody = unknown>(req: ServiceRequest): Promise<TBody>;
+    private resolveToken;
+    private buildHeaders;
+    private parseBody;
+}
+export declare class ServiceHttpError extends Error {
+    readonly status: number;
+    readonly rawBody: string;
+    readonly method: string;
+    readonly url: string;
+    constructor(message: string, details: {
+        status: number;
+        rawBody: string;
+        method?: string;
+        url?: string;
+    });
+}
+//# sourceMappingURL=service-http-client.d.ts.map

package/dist/lib/service-http-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-http-client.d.ts","sourceRoot":"","sources":["../../src/lib/service-http-client.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAGnE,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAQpE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAAC;IAE3C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAK5B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAE/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAOhC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAStC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAOhC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,eAAe,CAAC,KAAK,GAAG,OAAO;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAErB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IAEvC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAEnC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,MAAM,CAAC;CAC9C;AA0BD,qBACa,iBAAiB;IAM1B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAL3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAe;gBAGjC,QAAQ,EAAE,wBAAwB,EACvC,OAAO,CAAC,EAAE,wBAAwB;IAM1C,OAAO,CAAC,KAAK,GAAG,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IA6C9E,kBAAkB,CAAC,KAAK,GAAG,OAAO,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC;YAgBhE,YAAY;IA8B1B,OAAO,CAAC,YAAY;IAiCpB,OAAO,CAAC,SAAS;CAiBlB;AAGD,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAGnB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE;CAU9E"}

package/dist/lib/service-http-client.js

@@ -0,0 +1,178 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var ServiceHttpClient_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServiceHttpError = exports.ServiceHttpClient = void 0;
+const node_crypto_1 = require("node:crypto");
+const common_1 = require("@nestjs/common");
+const identity_client_1 = require("@xemahq/identity-client");
+const activity_auth_context_1 = require("./activity-auth-context");
+const auth_kind_1 = require("./auth-kind");
+const DEFAULT_TIMEOUT_MS = 30_000;
+let ServiceHttpClient = ServiceHttpClient_1 = class ServiceHttpClient {
+    identity;
+    logger = new common_1.Logger(ServiceHttpClient_1.name);
+    defaultTimeoutMs;
+    correlationIdFactory;
+    constructor(identity, options) {
+        this.identity = identity;
+        this.defaultTimeoutMs = options?.defaultTimeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.correlationIdFactory = options?.correlationIdFactory ?? defaultCorrelationIdFactory;
+    }
+    async request(req) {
+        const controller = new AbortController();
+        const timeoutMs = req.timeoutMs ?? this.defaultTimeoutMs;
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        const authToken = await this.resolveToken(req.auth);
+        const headers = this.buildHeaders(req, authToken);
+        const init = {
+            method: req.method,
+            headers,
+            signal: controller.signal,
+            ...(req.body !== undefined && req.body !== null && {
+                body: typeof req.body === 'string'
+                    ? req.body
+                    : Buffer.from(req.body.buffer, req.body.byteOffset, req.body.byteLength),
+            }),
+        };
+        try {
+            const response = await fetch(req.url, init);
+            const rawBody = await response.text();
+            const body = this.parseBody(rawBody, response);
+            const outHeaders = {};
+            response.headers.forEach((value, key) => {
+                outHeaders[key] = value;
+            });
+            this.logger.debug(`${req.method} ${req.url} → ${response.status} (${rawBody.length} bytes)`);
+            return {
+                status: response.status,
+                headers: outHeaders,
+                body,
+                rawBody,
+            };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async requestJsonOrThrow(req) {
+        const response = await this.request(req);
+        if (response.status < 200 || response.status >= 300) {
+            throw new ServiceHttpError(`${req.method} ${req.url} failed with status ${response.status}`, {
+                status: response.status,
+                rawBody: response.rawBody,
+                method: req.method,
+                url: req.url,
+            });
+        }
+        return response.body;
+    }
+    async resolveToken(spec) {
+        switch (spec.kind) {
+            case auth_kind_1.ServiceAuthKind.OnBehalfOfActor: {
+                const actor = (0, activity_auth_context_1.getActivityAuthContext)();
+                if (actor?.actorSubject) {
+                    if (!actor.orgId) {
+                        throw new Error('Activity auth context missing orgId for on-behalf-of token mint');
+                    }
+                    const params = spec.audience !== undefined
+                        ? {
+                            userId: actor.actorSubject,
+                            orgId: actor.orgId,
+                            audience: spec.audience,
+                        }
+                        : { userId: actor.actorSubject, orgId: actor.orgId };
+                    return this.identity.getUserAccessToken(params);
+                }
+                return this.identity.getAccessToken();
+            }
+            case auth_kind_1.ServiceAuthKind.Service:
+                return this.identity.getAccessToken();
+            case auth_kind_1.ServiceAuthKind.ExternalBearer:
+                return spec.token;
+            case auth_kind_1.ServiceAuthKind.None:
+                return null;
+        }
+    }
+    buildHeaders(req, authToken) {
+        const headers = new Headers(req.headers ?? {});
+        if (authToken !== null) {
+            headers.set('Authorization', `Bearer ${authToken}`);
+        }
+        if (req.orgId) {
+            headers.set('X-Org-Id', req.orgId);
+        }
+        if (req.projectId) {
+            headers.set('X-Project-Id', req.projectId);
+        }
+        if (req.pipelineRunId) {
+            headers.set('X-Pipeline-Run-Id', req.pipelineRunId);
+        }
+        if (req.pipelinePhaseKey) {
+            headers.set('X-Pipeline-Phase-Key', req.pipelinePhaseKey);
+        }
+        headers.set('X-Correlation-Id', req.correlationId ?? this.correlationIdFactory());
+        const actorSubject = req.actorSubject !== undefined
+            ? req.actorSubject
+            : ((0, activity_auth_context_1.getActivityAuthContext)()?.actorSubject ?? null);
+        if (actorSubject) {
+            headers.set('X-Xema-Actor-Subject', actorSubject);
+        }
+        if (!headers.has('Content-Type') && req.body !== undefined && req.body !== null) {
+            headers.set('Content-Type', typeof req.body === 'string' ? 'application/json' : 'application/octet-stream');
+        }
+        return headers;
+    }
+    parseBody(raw, response) {
+        if (raw.length === 0) {
+            return null;
+        }
+        const contentType = response.headers.get('content-type') ?? '';
+        if (contentType.includes('application/json')) {
+            try {
+                return JSON.parse(raw);
+            }
+            catch (err) {
+                throw new ServiceHttpError(`Failed to parse JSON response: ${err.message}`, { status: response.status, rawBody: raw });
+            }
+        }
+        return raw;
+    }
+};
+exports.ServiceHttpClient = ServiceHttpClient;
+exports.ServiceHttpClient = ServiceHttpClient = ServiceHttpClient_1 = __decorate([
+    (0, common_1.Injectable)(),
+    __param(1, (0, common_1.Optional)()),
+    __metadata("design:paramtypes", [identity_client_1.IdentityBootstrapService, Object])
+], ServiceHttpClient);
+class ServiceHttpError extends Error {
+    status;
+    rawBody;
+    method;
+    url;
+    constructor(message, details) {
+        super(message);
+        this.name = 'ServiceHttpError';
+        this.status = details.status;
+        this.rawBody = details.rawBody;
+        this.method = details.method ?? '';
+        this.url = details.url ?? '';
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+exports.ServiceHttpError = ServiceHttpError;
+function defaultCorrelationIdFactory() {
+    return `urn:xema:${(0, node_crypto_1.randomUUID)()}`;
+}
+//# sourceMappingURL=service-http-client.js.map

package/dist/lib/service-http-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-http-client.js","sourceRoot":"","sources":["../../src/lib/service-http-client.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,6CAAyC;AAEzC,2CAA8D;AAC9D,6DAAmE;AAEnE,mEAAiE;AACjE,2CAAoE;AAkEpE,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAyB3B,IAAM,iBAAiB,yBAAvB,MAAM,iBAAiB;IAMT;IALF,MAAM,GAAG,IAAI,eAAM,CAAC,mBAAiB,CAAC,IAAI,CAAC,CAAC;IAC5C,gBAAgB,CAAS;IACzB,oBAAoB,CAAe;IAEpD,YACmB,QAAkC,EACvC,OAAkC;QAD7B,aAAQ,GAAR,QAAQ,CAA0B;QAGnD,IAAI,CAAC,gBAAgB,GAAG,OAAO,EAAE,gBAAgB,IAAI,kBAAkB,CAAC;QACxE,IAAI,CAAC,oBAAoB,GAAG,OAAO,EAAE,oBAAoB,IAAI,2BAA2B,CAAC;IAC3F,CAAC;IAED,KAAK,CAAC,OAAO,CAAkB,GAAmB;QAChD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,gBAAgB,CAAC;QAIzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QAE9D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAClD,MAAM,IAAI,GAAgB;YACxB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,OAAO;YACP,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI;gBACjD,IAAI,EACF,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;oBAC1B,CAAC,CAAC,GAAG,CAAC,IAAI;oBACV,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC;aAC7E,CAAC;SACH,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAQ,OAAO,EAAE,QAAQ,CAAC,CAAC;YACtD,MAAM,UAAU,GAA2B,EAAE,CAAC;YAC9C,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;gBACtC,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAC1B,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,MAAM,CAAC,KAAK,CACf,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,SAAS,CAC1E,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,UAAU;gBACnB,IAAI;gBACJ,OAAO;aACR,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAGD,KAAK,CAAC,kBAAkB,CAAkB,GAAmB;QAC3D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAQ,GAAG,CAAC,CAAC;QAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;YACpD,MAAM,IAAI,gBAAgB,CACxB,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,uBAAuB,QAAQ,CAAC,MAAM,EAAE,EAChE;gBACE,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;gBACzB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,GAAG,EAAE,GAAG,CAAC,GAAG;aACb,CACF,CAAC;QACJ,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAAqB;QAC9C,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,KAAK,2BAAe,CAAC,eAAe,CAAC,CAAC,CAAC;gBACrC,MAAM,KAAK,GAAG,IAAA,8CAAsB,GAAE,CAAC;gBACvC,IAAI,KAAK,EAAE,YAAY,EAAE,CAAC;oBACxB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;wBACjB,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;oBACJ,CAAC;oBACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,SAAS;wBACxC,CAAC,CAAC;4BACE,MAAM,EAAE,KAAK,CAAC,YAAY;4BAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;4BAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;yBACxB;wBACH,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;oBACvD,OAAO,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;gBAClD,CAAC;gBACD,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YACxC,CAAC;YACD,KAAK,2BAAe,CAAC,OAAO;gBAC1B,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,EAAE,CAAC;YACxC,KAAK,2BAAe,CAAC,cAAc;gBACjC,OAAO,IAAI,CAAC,KAAK,CAAC;YACpB,KAAK,2BAAe,CAAC,IAAI;gBACvB,OAAO,IAAI,CAAC;QAChB,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,GAAmB,EAAE,SAAwB;QAChE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;QAC/C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,SAAS,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;YACtB,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACzB,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC,CAAC;QAClF,MAAM,YAAY,GAChB,GAAG,CAAC,YAAY,KAAK,SAAS;YAC5B,CAAC,CAAC,GAAG,CAAC,YAAY;YAClB,CAAC,CAAC,CAAC,IAAA,8CAAsB,GAAE,EAAE,YAAY,IAAI,IAAI,CAAC,CAAC;QACvD,IAAI,YAAY,EAAE,CAAC;YAGjB,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAChF,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC;QAC9G,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAEO,SAAS,CAAQ,GAAW,EAAE,QAAkB;QACtD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,IAAwB,CAAC;QAClC,CAAC;QACD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;QAC/D,IAAI,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAC7C,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAU,CAAC;YAClC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,gBAAgB,CACxB,kCAAmC,GAAa,CAAC,OAAO,EAAE,EAC1D,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAC1C,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO,GAAuB,CAAC;IACjC,CAAC;CACF,CAAA;AA1JY,8CAAiB;4BAAjB,iBAAiB;IAD7B,IAAA,mBAAU,GAAE;IAQR,WAAA,IAAA,iBAAQ,GAAE,CAAA;qCADgB,0CAAwB;GAN1C,iBAAiB,CA0J7B;AAGD,MAAa,gBAAiB,SAAQ,KAAK;IAChC,MAAM,CAAS;IACf,OAAO,CAAS;IAChB,MAAM,CAAS;IACf,GAAG,CAAS;IAErB,YACE,OAAe,EACf,OAA2E;QAE3E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC;QAC7B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAlBD,4CAkBC;AAED,SAAS,2BAA2B;IAClC,OAAO,YAAY,IAAA,wBAAU,GAAE,EAAE,CAAC;AACpC,CAAC"}

package/dist/lib/temporal-sdk.d.ts

@@ -0,0 +1,4 @@
+export { Client, Connection, ScheduleAlreadyRunning, WorkflowExecutionAlreadyStartedError, } from '@temporalio/client';
+export type { ClientOptions, ConnectionOptions, WorkflowExecutionStatusName, } from '@temporalio/client';
+export type { Duration, Workflow } from '@temporalio/common';
+//# sourceMappingURL=temporal-sdk.d.ts.map

package/dist/lib/temporal-sdk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"temporal-sdk.d.ts","sourceRoot":"","sources":["../../src/lib/temporal-sdk.ts"],"names":[],"mappings":"AAmBA,OAAO,EACL,MAAM,EACN,UAAU,EACV,sBAAsB,EACtB,oCAAoC,GACrC,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,aAAa,EACb,iBAAiB,EACjB,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/lib/temporal-sdk.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkflowExecutionAlreadyStartedError = exports.ScheduleAlreadyRunning = exports.Connection = exports.Client = void 0;
+var client_1 = require("@temporalio/client");
+Object.defineProperty(exports, "Client", { enumerable: true, get: function () { return client_1.Client; } });
+Object.defineProperty(exports, "Connection", { enumerable: true, get: function () { return client_1.Connection; } });
+Object.defineProperty(exports, "ScheduleAlreadyRunning", { enumerable: true, get: function () { return client_1.ScheduleAlreadyRunning; } });
+Object.defineProperty(exports, "WorkflowExecutionAlreadyStartedError", { enumerable: true, get: function () { return client_1.WorkflowExecutionAlreadyStartedError; } });
+//# sourceMappingURL=temporal-sdk.js.map

package/dist/lib/temporal-sdk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"temporal-sdk.js","sourceRoot":"","sources":["../../src/lib/temporal-sdk.ts"],"names":[],"mappings":";;;AAmBA,6CAK4B;AAJ1B,gGAAA,MAAM,OAAA;AACN,oGAAA,UAAU,OAAA;AACV,gHAAA,sBAAsB,OAAA;AACtB,8HAAA,oCAAoC,OAAA"}

package/dist/lib/worker.d.ts

@@ -0,0 +1,17 @@
+import { Worker, type NativeConnection, type WorkflowBundle } from '@temporalio/worker';
+import type { PayloadCodec } from '@temporalio/common';
+export declare function bundlePlatformWorkflows(workflowsPath: string): Promise<WorkflowBundle>;
+export interface PlatformWorkerOptions {
+    readonly connection: NativeConnection;
+    readonly namespace: string;
+    readonly taskQueue: string;
+    readonly workflowBundle: WorkflowBundle;
+    readonly activities: object;
+    readonly buildId: string;
+    readonly useVersioning?: boolean;
+    readonly payloadCodec?: PayloadCodec;
+    readonly maxConcurrentActivityTaskExecutions?: number;
+    readonly maxConcurrentWorkflowTaskExecutions?: number;
+}
+export declare function createPlatformWorker(options: PlatformWorkerOptions): Promise<Worker>;
+//# sourceMappingURL=worker.d.ts.map

package/dist/lib/worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.d.ts","sourceRoot":"","sources":["../../src/lib/worker.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,MAAM,EACN,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAOvD,wBAAsB,uBAAuB,CAC3C,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,cAAc,CAAC,CAEzB;AAED,MAAM,WAAW,qBAAqB;IAEpC,QAAQ,CAAC,UAAU,EAAE,gBAAgB,CAAC;IAEtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAE3B,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;IAExC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAK5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IAKjC,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,MAAM,CAAC;IACtD,QAAQ,CAAC,mCAAmC,CAAC,EAAE,MAAM,CAAC;CACvD;AAYD,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,MAAM,CAAC,CA6BjB"}

package/dist/lib/worker.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bundlePlatformWorkflows = bundlePlatformWorkflows;
+exports.createPlatformWorker = createPlatformWorker;
+const node_crypto_1 = require("node:crypto");
+const worker_1 = require("@temporalio/worker");
+const on_behalf_of_interceptor_1 = require("./on-behalf-of-interceptor");
+async function bundlePlatformWorkflows(workflowsPath) {
+    return (0, worker_1.bundleWorkflowCode)({ workflowsPath });
+}
+async function createPlatformWorker(options) {
+    return worker_1.Worker.create({
+        connection: options.connection,
+        namespace: options.namespace,
+        taskQueue: options.taskQueue,
+        workflowBundle: options.workflowBundle,
+        activities: options.activities,
+        identity: `xema-platform-worker-${options.namespace}-${options.taskQueue}-${(0, node_crypto_1.randomUUID)().slice(0, 8)}`,
+        interceptors: {
+            activity: [() => ({ inbound: new on_behalf_of_interceptor_1.OnBehalfOfActivityInterceptor() })],
+        },
+        buildId: options.buildId,
+        useVersioning: options.useVersioning ?? false,
+        ...(options.payloadCodec
+            ? { dataConverter: { payloadCodecs: [options.payloadCodec] } }
+            : {}),
+        ...(options.maxConcurrentActivityTaskExecutions !== undefined
+            ? {
+                maxConcurrentActivityTaskExecutions: options.maxConcurrentActivityTaskExecutions,
+            }
+            : {}),
+        ...(options.maxConcurrentWorkflowTaskExecutions !== undefined
+            ? {
+                maxConcurrentWorkflowTaskExecutions: options.maxConcurrentWorkflowTaskExecutions,
+            }
+            : {}),
+    });
+}
+//# sourceMappingURL=worker.js.map

package/dist/lib/worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker.js","sourceRoot":"","sources":["../../src/lib/worker.ts"],"names":[],"mappings":";;AAkBA,0DAIC;AAsCD,oDA+BC;AA3FD,6CAAyC;AAEzC,+CAK4B;AAE5B,yEAA2E;AASpE,KAAK,UAAU,uBAAuB,CAC3C,aAAqB;IAErB,OAAO,IAAA,2BAAkB,EAAC,EAAE,aAAa,EAAE,CAAC,CAAC;AAC/C,CAAC;AAsCM,KAAK,UAAU,oBAAoB,CACxC,OAA8B;IAE9B,OAAO,eAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,QAAQ,EAAE,wBAAwB,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,IAAI,IAAA,wBAAU,GAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;QACtG,YAAY,EAAE;YACZ,QAAQ,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,wDAA6B,EAAE,EAAE,CAAC,CAAC;SACrE;QACD,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,KAAK;QAC7C,GAAG,CAAC,OAAO,CAAC,YAAY;YACtB,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,aAAa,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,EAAE;YAC9D,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,mCAAmC,KAAK,SAAS;YAC3D,CAAC,CAAC;gBACE,mCAAmC,EACjC,OAAO,CAAC,mCAAmC;aAC9C;YACH,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,OAAO,CAAC,mCAAmC,KAAK,SAAS;YAC3D,CAAC,CAAC;gBACE,mCAAmC,EACjC,OAAO,CAAC,mCAAmC;aAC9C;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "@xemahq/temporal-runtime",
+  "version": "0.1.1",
+  "publishConfig": {
+    "registry": "https://npm.pkg.github.com"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "devDependencies": {
+    "@nestjs/common": "11.1.13",
+    "@types/node": "25.2.3",
+    "prettier": "3.6.2",
+    "reflect-metadata": "0.2.2",
+    "typescript": "5.9.3"
+  },
+  "peerDependencies": {
+    "@nestjs/common": "^10 || ^11",
+    "reflect-metadata": "^0.2"
+  },
+  "dependencies": {
+    "@temporalio/client": "^1.16.2",
+    "@temporalio/common": "^1.16.2",
+    "@temporalio/proto": "^1.16.2",
+    "@temporalio/worker": "^1.16.2",
+    "@xemahq/identity-client": "^0.3.2",
+    "@xemahq/kernel-contracts": "^0.2.0"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "xema-source": "./src/index.ts",
+      "default": "./dist/index.js"
+    },
+    "./dist/lib/*": {
+      "types": "./dist/lib/*.d.ts",
+      "default": "./dist/lib/*.js"
+    }
+  },
+  "scripts": {
+    "clean": "rm -rf dist",
+    "build": "tsc -p tsconfig.json",
+    "format": "prettier --write \"src/**/*.ts\"",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}