kadi-harness-runtime 0.1.8

package/dist/gateways/sessions.js

@@ -0,0 +1,167 @@
+import { CheckpointReferenceSchema, } from "@kadi.build/kadi-harness-contracts";
+import { redactJson, redactObject } from "./redaction.js";
+import { normalizeArtifactReference } from "./artifacts.js";
+function scopeDetails(scope) {
+    return { sessionId: scope.sessionId, runId: scope.runId, adapterId: scope.adapterId };
+}
+function makeError(scope, code, category, message, retryable, details = {}) {
+    return { code, category, message, retryable, correlationId: scope.correlationId, details: { ...scopeDetails(scope), ...(redactObject(details) ?? {}) } };
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isKadiError(value) {
+    return isRecord(value) && typeof value.code === "string" && typeof value.category === "string" && typeof value.message === "string";
+}
+function normalizeError(scope, value, operation) {
+    if (isKadiError(value))
+        return { ...value, correlationId: scope.correlationId, details: redactObject(value.details) };
+    return makeError(scope, "session_persistence_error", "service_failure", `${operation} failed`, true);
+}
+function cancellationError(scope) {
+    return makeError(scope, "operation_cancelled", "cancellation", "The scoped operation was cancelled", false);
+}
+async function authorize(options, operation) {
+    if (!options.authorize)
+        return undefined;
+    try {
+        const decision = await options.authorize({ operation, scope: options.scope });
+        if (decision === true || (typeof decision === "object" && decision.ok))
+            return undefined;
+        if (decision === false)
+            return makeError(options.scope, "authorization_denied", "authorization", `Authorization denied for ${operation}`, false, { operation });
+        return decision.error;
+    }
+    catch (caught) {
+        return normalizeError(options.scope, caught, `${operation} authorization`);
+    }
+}
+function unwrap(value) {
+    if (isRecord(value) && value.ok === false)
+        throw value.error;
+    if (isRecord(value) && value.success === false)
+        throw new Error("backend rejected operation");
+    if (isRecord(value) && value.ok === true && "value" in value)
+        return value.value;
+    return value;
+}
+function ensureSession(scope, sessionId) {
+    if (sessionId !== scope.sessionId)
+        return makeError(scope, "session_scope_violation", "authorization", "Session ID does not match the current run scope", false, { requestedSessionId: sessionId });
+    return undefined;
+}
+function normalizeStatus(value) {
+    return typeof value === "string" && ["queued", "starting", "running", "completed", "failed", "cancelled", "timed_out"].includes(value) ? value : undefined;
+}
+function normalizeCheckpoint(value, scope) {
+    if (value === undefined)
+        return undefined;
+    const parsed = CheckpointReferenceSchema.safeParse(value);
+    if (!parsed.success)
+        throw makeError(scope, "invalid_checkpoint", "validation", "Session backend returned an invalid checkpoint reference", false);
+    return parsed.data;
+}
+function normalizeSnapshot(value, scope) {
+    if (value === undefined || value === null)
+        return undefined;
+    if (isRecord(value) && value.found === false)
+        return undefined;
+    const source = isRecord(value) && "snapshot" in value ? value.snapshot : value;
+    if (isRecord(source) && typeof source.sessionId === "string") {
+        return {
+            sessionId: source.sessionId,
+            runId: typeof source.runId === "string" ? source.runId : undefined,
+            status: normalizeStatus(source.status),
+            data: isRecord(source.data) ? redactJson(source.data) : undefined,
+            checkpoint: normalizeCheckpoint(source.checkpoint, scope),
+            artifacts: Array.isArray(source.artifacts) ? source.artifacts.map((artifact) => normalizeArtifactReference(artifact, scope)) : undefined,
+            metadata: isRecord(source.metadata) ? redactJson(source.metadata) : undefined,
+        };
+    }
+    if (!isRecord(source) || !isRecord(source.session) || typeof source.session.sessionId !== "string") {
+        throw makeError(scope, "invalid_session_snapshot", "service_failure", "Session backend returned an invalid snapshot", false);
+    }
+    const runs = Array.isArray(source.runs) ? source.runs : [];
+    const latestRun = runs.at(-1);
+    const session = source.session;
+    const sessionId = typeof session.sessionId === "string" ? session.sessionId : "";
+    const metadata = { correlationId: scope.correlationId };
+    if (isRecord(source.metadata))
+        Object.assign(metadata, redactJson(source.metadata));
+    return {
+        sessionId,
+        runId: isRecord(latestRun) && typeof latestRun.runId === "string" ? latestRun.runId : undefined,
+        status: normalizeStatus(session.status),
+        data: redactJson({ session, plan: source.plan, progress: source.progress, runs }),
+        checkpoint: normalizeCheckpoint(source.checkpoint, scope),
+        artifacts: Array.isArray(source.artifacts) ? source.artifacts.map((artifact) => normalizeArtifactReference(artifact, scope)) : undefined,
+        metadata,
+    };
+}
+/** Scoped session-state facade over the session-state ability or another durable backend. */
+export class SessionGateway {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async load(sessionId) {
+        const denied = await authorize(this.options, "sessions.load");
+        if (denied)
+            return { ok: false, error: denied };
+        const scoped = ensureSession(this.options.scope, sessionId);
+        if (scoped)
+            return { ok: false, error: scoped };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: cancellationError(this.options.scope) };
+        try {
+            const value = unwrap(await this.options.backend.load(this.options.scope, sessionId, { includeRuns: true, includeArtifacts: true }));
+            return { ok: true, value: normalizeSnapshot(value, this.options.scope) };
+        }
+        catch (caught) {
+            return { ok: false, error: caught && isKadiError(caught) ? caught : normalizeError(this.options.scope, caught, "sessions.load") };
+        }
+    }
+    async save(snapshot) {
+        const denied = await authorize(this.options, "sessions.save");
+        if (denied)
+            return { ok: false, error: denied };
+        const scoped = ensureSession(this.options.scope, snapshot.sessionId);
+        if (scoped)
+            return { ok: false, error: scoped };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: cancellationError(this.options.scope) };
+        try {
+            const persisted = {
+                ...snapshot,
+                data: snapshot.data ? redactJson(snapshot.data) : undefined,
+                metadata: { ...snapshot.metadata, correlationId: this.options.scope.correlationId },
+            };
+            unwrap(await this.options.backend.save(this.options.scope, persisted));
+            return { ok: true, value: undefined };
+        }
+        catch (caught) {
+            return { ok: false, error: caught && isKadiError(caught) ? caught : normalizeError(this.options.scope, caught, "sessions.save") };
+        }
+    }
+    async appendTimeline(entry) {
+        const denied = await authorize(this.options, "sessions.appendTimeline");
+        if (denied)
+            return { ok: false, error: denied };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: cancellationError(this.options.scope) };
+        if (!this.options.backend.appendTimeline)
+            return { ok: false, error: makeError(this.options.scope, "session_timeline_unavailable", "service_failure", "Session backend does not support timeline persistence", false) };
+        try {
+            const persisted = { ...entry, data: { ...entry.data, correlationId: this.options.scope.correlationId } };
+            unwrap(await this.options.backend.appendTimeline(this.options.scope, persisted));
+            return { ok: true, value: undefined };
+        }
+        catch (caught) {
+            return { ok: false, error: caught && isKadiError(caught) ? caught : normalizeError(this.options.scope, caught, "sessions.appendTimeline") };
+        }
+    }
+}
+export function createSessionGateway(options) {
+    return new SessionGateway(options);
+}
+//# sourceMappingURL=sessions.js.map

package/dist/gateways/sessions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.js","sourceRoot":"","sources":["../../src/gateways/sessions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,GAS1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAK1D,OAAO,EAAE,0BAA0B,EAAE,MAAM,gBAAgB,CAAC;AAmB5D,SAAS,YAAY,CAAC,KAAmB;IACvC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;AACxF,CAAC;AAED,SAAS,SAAS,CAAC,KAAmB,EAAE,IAAY,EAAE,QAA+B,EAAE,OAAe,EAAE,SAAkB,EAAE,UAAmC,EAAE;IAC/J,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;AAC3J,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;AACtI,CAAC;AAED,SAAS,cAAc,CAAC,KAAmB,EAAE,KAAc,EAAE,SAAiB;IAC5E,IAAI,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACtH,OAAO,SAAS,CAAC,KAAK,EAAE,2BAA2B,EAAE,iBAAiB,EAAE,GAAG,SAAS,SAAS,EAAE,IAAI,CAAC,CAAC;AACvG,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAmB;IAC5C,OAAO,SAAS,CAAC,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAC;AAC9G,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,OAA8B,EAAE,SAAwE;IAC/H,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9E,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QACzF,IAAI,QAAQ,KAAK,KAAK;YAAE,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,4BAA4B,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QAChK,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,SAAS,gBAAgB,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,KAAK;QAAE,MAAM,KAAK,CAAC,KAAK,CAAC;IAC7D,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAC9F,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC;IACjF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,KAAmB,EAAE,SAAiB;IAC3D,IAAI,SAAS,KAAK,KAAK,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC,KAAK,EAAE,yBAAyB,EAAE,eAAe,EAAE,iDAAiD,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC;IACpM,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1K,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAmB;IAC9D,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,SAAS,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,EAAE,0DAA0D,EAAE,KAAK,CAAC,CAAC;IACnJ,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,KAAmB;IAC5D,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;IAC/E,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC7D,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAClE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC;YACtC,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAe,CAAC,CAAC,CAAC,SAAS;YAC/E,UAAU,EAAE,mBAAmB,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;YACzD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,0BAA0B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;YACxI,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAe,CAAC,CAAC,CAAC,SAAS;SAC5F,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO,MAAM,CAAC,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnG,MAAM,SAAS,CAAC,KAAK,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,8CAA8C,EAAE,KAAK,CAAC,CAAC;IAC/H,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,MAAM,SAAS,GAAG,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IACjF,MAAM,QAAQ,GAAe,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC;IACpE,IAAI,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpF,OAAO;QACL,SAAS;QACT,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;QAC/F,MAAM,EAAE,eAAe,CAAC,OAAO,CAAC,MAAM,CAAC;QACvC,IAAI,EAAE,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAe;QAC/F,UAAU,EAAE,mBAAmB,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC;QACzD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,0BAA0B,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS;QACxI,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,6FAA6F;AAC7F,MAAM,OAAO,cAAc;IACR,OAAO,CAAwB;IAEhD,YAAmB,OAA8B;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,SAAiB;QACjC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC9D,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACpI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;QACpI,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,QAAyB;QACzC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAC9D,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,SAAS,GAAoB;gBACjC,GAAG,QAAQ;gBACX,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAe,CAAC,CAAC,CAAC,SAAS;gBACzE,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE;aACpF,CAAC;YACF,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;QACpI,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,cAAc,CAAC,KAA2B;QACrD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;QACxE,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,uDAAuD,EAAE,KAAK,CAAC,EAAE,CAAC;QACxN,IAAI,CAAC;YACH,MAAM,SAAS,GAAyB,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;YAC/H,MAAM,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC;YACjF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACxC,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,yBAAyB,CAAC,EAAE,CAAC;QAC9I,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,OAAO,IAAI,cAAc,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC"}

package/dist/gateways/tools.d.ts

@@ -0,0 +1,36 @@
+import type { ScopedToolService, ServiceResult, ToolDefinition, ToolInvocationRequest, ToolInvocationResult, ToolListOptions } from "@kadi.build/kadi-harness-contracts";
+export interface GatewayScope {
+    readonly contractVersion: string;
+    readonly sessionId: string;
+    readonly runId: string;
+    readonly adapterId: string;
+    readonly correlationId: string;
+    readonly signal?: AbortSignal;
+}
+export type GatewayOperation = "tools.list" | "tools.invoke" | "events.publish" | "events.subscribe" | "sessions.load" | "sessions.save" | "sessions.appendTimeline" | "artifacts.put" | "artifacts.get" | "artifacts.list";
+export interface GatewayAuthorizationRequest {
+    readonly operation: GatewayOperation;
+    readonly scope: GatewayScope;
+    readonly toolName?: string;
+    readonly eventType?: string;
+}
+export type GatewayAuthorizer = (request: GatewayAuthorizationRequest) => Promise<ServiceResult<void> | boolean> | ServiceResult<void> | boolean;
+/** The smallest surface required to wrap BridgeToolRouter or another KADI router. */
+export interface ToolRouterBackend {
+    getAvailableTools(): readonly unknown[] | Promise<readonly unknown[]>;
+    route(toolName: string, params: Record<string, unknown>): Promise<unknown>;
+}
+export interface ToolGatewayOptions {
+    readonly scope: GatewayScope;
+    readonly router: ToolRouterBackend;
+    readonly authorize?: GatewayAuthorizer;
+}
+/** Scoped facade over native, broker, or MCP-backed KADI tool routing. */
+export declare class ToolGateway implements ScopedToolService {
+    private readonly options;
+    constructor(options: ToolGatewayOptions);
+    list(options?: ToolListOptions): Promise<ServiceResult<readonly ToolDefinition[]>>;
+    invoke(request: ToolInvocationRequest): Promise<ServiceResult<ToolInvocationResult>>;
+}
+export declare function createToolGateway(options: ToolGatewayOptions): ScopedToolService;
+//# sourceMappingURL=tools.d.ts.map

package/dist/gateways/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/gateways/tools.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAGV,iBAAiB,EACjB,aAAa,EACb,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,eAAe,EAChB,MAAM,oCAAoC,CAAC;AAG5C,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,MAAM,gBAAgB,GACxB,YAAY,GAAG,cAAc,GAAG,gBAAgB,GAAG,kBAAkB,GACrE,eAAe,GAAG,eAAe,GAAG,yBAAyB,GAC7D,eAAe,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEzD,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,iBAAiB,GAAG,CAC9B,OAAO,EAAE,2BAA2B,KACjC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;AAE5E,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,IAAI,SAAS,OAAO,EAAE,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACtE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5E;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CACxC;AAyGD,0EAA0E;AAC1E,qBAAa,WAAY,YAAW,iBAAiB;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAE1B,OAAO,EAAE,kBAAkB;IAIjC,IAAI,CAAC,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC;IAoBtF,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC;CAWlG;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,iBAAiB,CAEhF"}

package/dist/gateways/tools.js

@@ -0,0 +1,135 @@
+import { redactJson, redactObject } from "./redaction.js";
+function makeError(scope, code, category, message, retryable, details = {}) {
+    return {
+        code,
+        category,
+        message,
+        retryable,
+        correlationId: scope.correlationId,
+        details: {
+            sessionId: scope.sessionId,
+            runId: scope.runId,
+            adapterId: scope.adapterId,
+            ...redactObject(details),
+        },
+    };
+}
+function isKadiError(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const candidate = value;
+    return typeof candidate.code === "string" && typeof candidate.category === "string" && typeof candidate.message === "string";
+}
+function normalizeError(scope, value, operation) {
+    if (isKadiError(value)) {
+        return {
+            ...value,
+            correlationId: scope.correlationId,
+            details: redactObject(value.details),
+            cause: value.cause ? { code: value.cause.code, message: value.cause.message } : undefined,
+        };
+    }
+    const message = value instanceof Error ? value.message : String(value);
+    return makeError(scope, "service_transport_error", "service_failure", `${operation} failed: ${message}`, true);
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function normalizeDefinition(value) {
+    if (!isRecord(value) || typeof value.name !== "string")
+        return undefined;
+    return {
+        name: value.name,
+        description: typeof value.description === "string" ? value.description : undefined,
+        inputSchema: isRecord(value.inputSchema) ? redactJson(value.inputSchema) : undefined,
+        metadata: isRecord(value.metadata) ? redactJson(value.metadata) : undefined,
+    };
+}
+function normalizeInvocation(value, scope) {
+    if (isRecord(value) && value.success === false) {
+        const error = value.error;
+        throw normalizeError(scope, error, "tools.invoke");
+    }
+    if (isRecord(value) && value.success === true && "data" in value) {
+        return {
+            output: redactJson(value.data),
+            metadata: { correlationId: scope.correlationId },
+        };
+    }
+    if (isRecord(value) && ("output" in value || "metadata" in value || "artifacts" in value)) {
+        return {
+            output: "output" in value ? redactJson(value.output) : undefined,
+            metadata: {
+                ...(isRecord(value.metadata) ? redactJson(value.metadata) : {}),
+                correlationId: scope.correlationId,
+            },
+        };
+    }
+    return { output: redactJson(value), metadata: { correlationId: scope.correlationId } };
+}
+async function authorize(options, request) {
+    if (!options.authorize)
+        return undefined;
+    try {
+        const decision = await options.authorize(request);
+        if (decision === true || (typeof decision === "object" && decision.ok))
+            return undefined;
+        if (decision === false) {
+            return makeError(options.scope, "authorization_denied", "authorization", `Authorization denied for ${request.operation}`, false, { operation: request.operation, toolName: request.toolName });
+        }
+        return decision.error;
+    }
+    catch (caught) {
+        return normalizeError(options.scope, caught, `${request.operation} authorization`);
+    }
+}
+function cancellationError(scope) {
+    return makeError(scope, "operation_cancelled", "cancellation", "The scoped operation was cancelled", false);
+}
+/** Scoped facade over native, broker, or MCP-backed KADI tool routing. */
+export class ToolGateway {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async list(options = {}) {
+        const denied = await authorize(this.options, { operation: "tools.list", scope: this.options.scope });
+        if (denied)
+            return { ok: false, error: denied };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: cancellationError(this.options.scope) };
+        try {
+            const definitions = await this.options.router.getAvailableTools();
+            const normalized = definitions
+                .map(normalizeDefinition)
+                .filter((definition) => definition !== undefined)
+                .filter((definition) => options.prefix === undefined || definition.name.startsWith(options.prefix))
+                .filter((definition) => options.includeDisabled === true || definition.metadata?.disabled !== true);
+            return {
+                ok: true,
+                value: normalized,
+            };
+        }
+        catch (caught) {
+            return { ok: false, error: normalizeError(this.options.scope, caught, "tools.list") };
+        }
+    }
+    async invoke(request) {
+        const denied = await authorize(this.options, { operation: "tools.invoke", scope: this.options.scope, toolName: request.name });
+        if (denied)
+            return { ok: false, error: denied };
+        if (this.options.scope.signal?.aborted)
+            return { ok: false, error: cancellationError(this.options.scope) };
+        try {
+            const value = await this.options.router.route(request.name, request.arguments);
+            return { ok: true, value: normalizeInvocation(value, this.options.scope) };
+        }
+        catch (caught) {
+            return { ok: false, error: normalizeError(this.options.scope, caught, "tools.invoke") };
+        }
+    }
+}
+export function createToolGateway(options) {
+    return new ToolGateway(options);
+}
+//# sourceMappingURL=tools.js.map

package/dist/gateways/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/gateways/tools.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAuC1D,SAAS,SAAS,CAChB,KAAmB,EACnB,IAAY,EACZ,QAA+B,EAC/B,OAAe,EACf,SAAkB,EAClB,UAAmC,EAAE;IAErC,OAAO;QACL,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,SAAS;QACT,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,OAAO,EAAE;YACP,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,YAAY,CAAC,OAAO,CAAC;SACzB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,SAAS,GAAG,KAAgC,CAAC;IACnD,OAAO,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC;AAC/H,CAAC;AAED,SAAS,cAAc,CAAC,KAAmB,EAAE,KAAc,EAAE,SAAiB;IAC5E,IAAI,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,GAAG,KAAK;YACR,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC;YACpC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,SAAS;SAC1F,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,OAAO,SAAS,CAAC,KAAK,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,GAAG,SAAS,YAAY,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC;AACjH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACzE,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,WAAW,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;QAClF,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAe,CAAC,CAAC,CAAC,SAAS;QAClG,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAe,CAAC,CAAC,CAAC,SAAS;KAC1F,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,KAAmB;IAC9D,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,MAAM,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;IACrD,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,EAAE,CAAC;QACjE,OAAO;YACL,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC;YAC9B,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE;SACjD,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,WAAW,IAAI,KAAK,CAAC,EAAE,CAAC;QAC1F,OAAO;YACL,MAAM,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;YAChE,QAAQ,EAAE;gBACR,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAe,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,aAAa,EAAE,KAAK,CAAC,aAAa;aACnC;SACF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;AACzF,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,OAA2B,EAC3B,OAAoC;IAEpC,IAAI,CAAC,OAAO,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,SAAS,CAAC;QACzF,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,sBAAsB,EAAE,eAAe,EAAE,4BAA4B,OAAO,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;QACjM,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAAC,OAAO,MAAM,EAAE,CAAC;QAChB,OAAO,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,gBAAgB,CAAC,CAAC;IACrF,CAAC;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAmB;IAC5C,OAAO,SAAS,CAAC,KAAK,EAAE,qBAAqB,EAAE,cAAc,EAAE,oCAAoC,EAAE,KAAK,CAAC,CAAC;AAC9G,CAAC;AAED,0EAA0E;AAC1E,MAAM,OAAO,WAAW;IACL,OAAO,CAAqB;IAE7C,YAAmB,OAA2B;QAC5C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAEM,KAAK,CAAC,IAAI,CAAC,UAA2B,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACrG,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAClE,MAAM,UAAU,GAAG,WAAW;iBAC3B,GAAG,CAAC,mBAAmB,CAAC;iBACxB,MAAM,CAAC,CAAC,UAAU,EAAgC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC;iBAC9E,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;iBAClG,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,KAAK,IAAI,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC;YACtG,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,KAAK,EAAE,UAAU;aAClB,CAAC;QACJ,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QACxF,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,MAAM,CAAC,OAA8B;QAChD,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/H,IAAI,MAAM;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAChD,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3G,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;YAC/E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,mBAAmB,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7E,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;YAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC;QAC1F,CAAC;IACH,CAAC;CACF;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,OAAO,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,82 @@
+import type { AdapterIdentity, CancellationRequest, HarnessEvent, JsonObject, RunHandle, RunInput, RunRequest, RunResult, RunStatus, ScheduleCreateRequest, ScheduleReference, ServiceCapabilities } from "@kadi.build/kadi-harness-contracts";
+export * from "./adapter-loader.js";
+export * from "./event-bus.js";
+export * from "./event-normalizer.js";
+export * from "./lifecycle.js";
+export * from "./registry.js";
+export * from "./run-coordinator.js";
+export * from "./gateways/redaction.js";
+export * from "./gateways/tools.js";
+export * from "./gateways/events.js";
+export * from "./gateways/authorization.js";
+export * from "./gateways/sessions.js";
+export * from "./gateways/artifacts.js";
+export * from "./scheduling/request-store.js";
+export * from "./scheduling/signing.js";
+export * from "./runner/runner-service.js";
+export * from "./protocol/context-server.js";
+export * from "./protocol/context-client.js";
+export type RuntimeHealthStatus = "healthy" | "degraded" | "unavailable";
+export interface RuntimeObserveOptions {
+    readonly afterEventId?: string;
+    readonly signal?: AbortSignal;
+}
+export interface RuntimeSessionSummary {
+    readonly sessionId: string;
+    readonly latestRunId?: string;
+    readonly status?: RunStatus;
+    readonly metadata?: JsonObject;
+}
+export interface RuntimeSessionQuery {
+    readonly limit?: number;
+    readonly cursor?: string;
+}
+export interface RuntimeForkOptions {
+    readonly input?: RunInput;
+    readonly metadata?: JsonObject;
+}
+export interface RuntimeResumeOptions {
+    readonly runId?: string;
+    readonly metadata?: JsonObject;
+}
+export interface RuntimeHealth {
+    readonly status: RuntimeHealthStatus;
+    readonly contractVersion: string;
+    readonly adapterCount: number;
+    readonly services: ServiceCapabilities;
+    readonly details?: JsonObject;
+}
+/**
+ * Frontend-neutral execution API. It contains no CLI, UI, Pi, ACP, or service
+ * implementation types, so a web app, CLI, service, or embedded SDK can use it.
+ */
+export interface RuntimeClient {
+    execute(request: RunRequest): Promise<RunHandle>;
+    observe(runId: string, options?: RuntimeObserveOptions): AsyncIterable<HarnessEvent>;
+    getRun(runId: string): Promise<RunHandle | RunResult>;
+    cancel(runId: string, request?: CancellationRequest): Promise<void>;
+    steer(runId: string, input: RunInput): Promise<void>;
+    resume(sessionId: string, options?: RuntimeResumeOptions): Promise<RunHandle>;
+    fork(runId: string, options?: RuntimeForkOptions): Promise<RunHandle>;
+    listSessions(query?: RuntimeSessionQuery): Promise<readonly RuntimeSessionSummary[]>;
+    getSessionTimeline(sessionId: string, options?: RuntimeObserveOptions): AsyncIterable<HarnessEvent>;
+    schedule(request: ScheduleCreateRequest): Promise<ScheduleReference>;
+    unschedule(scheduleId: string): Promise<void>;
+    listAdapters(): Promise<readonly AdapterIdentity[]>;
+    health(): Promise<RuntimeHealth>;
+}
+/**
+ * Runtime implementation boundary used while the coordinator and gateways are
+ * developed. Future runtime internals implement this same public contract.
+ */
+export interface RuntimeClientOptions {
+    readonly implementation: RuntimeClient;
+}
+/**
+ * Creates a runtime client without starting a process or taking ownership of a
+ * frontend. The implementation is injected so the public API can be adopted by
+ * CLI, web, service, and embedded callers before coordinator internals land.
+ */
+export declare function createRuntimeClient(options: RuntimeClientOptions): RuntimeClient;
+export * from "./runtime.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,SAAS,EACT,QAAQ,EACR,UAAU,EACV,SAAS,EACT,SAAS,EACT,qBAAqB,EACrB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,oCAAoC,CAAC;AAE5C,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAE7C,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,UAAU,GAAG,aAAa,CAAC;AAEzE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC;CAC/B;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,qBAAqB,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;IACrF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,oBAAoB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9E,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,kBAAkB,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACtE,YAAY,CAAC,KAAK,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,SAAS,qBAAqB,EAAE,CAAC,CAAC;IACrF,kBAAkB,CAChB,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,aAAa,CAAC,YAAY,CAAC,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACrE,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,YAAY,IAAI,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,cAAc,EAAE,aAAa,CAAC;CACxC;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG,aAAa,CAEhF;AAED,cAAc,cAAc,CAAC"}

package/dist/index.js

@@ -0,0 +1,27 @@
+export * from "./adapter-loader.js";
+export * from "./event-bus.js";
+export * from "./event-normalizer.js";
+export * from "./lifecycle.js";
+export * from "./registry.js";
+export * from "./run-coordinator.js";
+export * from "./gateways/redaction.js";
+export * from "./gateways/tools.js";
+export * from "./gateways/events.js";
+export * from "./gateways/authorization.js";
+export * from "./gateways/sessions.js";
+export * from "./gateways/artifacts.js";
+export * from "./scheduling/request-store.js";
+export * from "./scheduling/signing.js";
+export * from "./runner/runner-service.js";
+export * from "./protocol/context-server.js";
+export * from "./protocol/context-client.js";
+/**
+ * Creates a runtime client without starting a process or taking ownership of a
+ * frontend. The implementation is injected so the public API can be adopted by
+ * CLI, web, service, and embedded callers before coordinator internals land.
+ */
+export function createRuntimeClient(options) {
+    return options.implementation;
+}
+export * from "./runtime.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAeA,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC;AACtC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,qBAAqB,CAAC;AACpC,cAAc,sBAAsB,CAAC;AACrC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,yBAAyB,CAAC;AACxC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,8BAA8B,CAAC;AAsE7C;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAA6B;IAC/D,OAAO,OAAO,CAAC,cAAc,CAAC;AAChC,CAAC;AAED,cAAc,cAAc,CAAC"}

package/dist/lifecycle.d.ts

@@ -0,0 +1,23 @@
+import type { JsonObject, JsonValue, RunHandle, RunResult, RunStatus, TerminalRunStatus } from "@kadi.build/kadi-harness-contracts";
+export interface LifecycleOutcome {
+    readonly status: TerminalRunStatus;
+    readonly output?: JsonValue;
+    readonly metadata?: JsonObject;
+}
+export declare function isTerminalStatus(status: RunStatus): status is TerminalRunStatus;
+/**
+ * Owns the state machine for one run. Closing is idempotent: only the first
+ * terminal outcome changes state and produces a result.
+ */
+export declare class RunLifecycle {
+    private readonly base;
+    private currentStatus;
+    private terminalResult?;
+    constructor(base: Omit<RunHandle, "status">);
+    get status(): RunStatus;
+    get result(): RunResult | undefined;
+    transition(nextStatus: RunStatus): boolean;
+    close(outcome: LifecycleOutcome): boolean;
+    handle(): RunHandle;
+}
+//# sourceMappingURL=lifecycle.d.ts.map

package/dist/lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.d.ts","sourceRoot":"","sources":["../src/lifecycle.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,iBAAiB,EAClB,MAAM,oCAAoC,CAAC;AAE5C,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC;CAChC;AAmBD,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG,MAAM,IAAI,iBAAiB,CAE/E;AAED;;;GAGG;AACH,qBAAa,YAAY;IAIJ,OAAO,CAAC,QAAQ,CAAC,IAAI;IAHxC,OAAO,CAAC,aAAa,CAAY;IACjC,OAAO,CAAC,cAAc,CAAC,CAAY;gBAEC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC;IAInE,IAAW,MAAM,IAAI,SAAS,CAE7B;IAED,IAAW,MAAM,IAAI,SAAS,GAAG,SAAS,CAEzC;IAEM,UAAU,CAAC,UAAU,EAAE,SAAS,GAAG,OAAO;IAO1C,KAAK,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;IAazC,MAAM,IAAI,SAAS;CAG3B"}

package/dist/lifecycle.js

@@ -0,0 +1,63 @@
+const TERMINAL_STATUSES = [
+    "completed",
+    "failed",
+    "cancelled",
+    "timed_out",
+];
+const TRANSITIONS = {
+    queued: ["starting", "failed", "cancelled", "timed_out"],
+    starting: ["running", "failed", "cancelled", "timed_out"],
+    running: ["completed", "failed", "cancelled", "timed_out"],
+    completed: [],
+    failed: [],
+    cancelled: [],
+    timed_out: [],
+};
+export function isTerminalStatus(status) {
+    return TERMINAL_STATUSES.includes(status);
+}
+/**
+ * Owns the state machine for one run. Closing is idempotent: only the first
+ * terminal outcome changes state and produces a result.
+ */
+export class RunLifecycle {
+    base;
+    currentStatus;
+    terminalResult;
+    constructor(base) {
+        this.base = base;
+        this.currentStatus = "queued";
+    }
+    get status() {
+        return this.currentStatus;
+    }
+    get result() {
+        return this.terminalResult;
+    }
+    transition(nextStatus) {
+        if (isTerminalStatus(this.currentStatus))
+            return false;
+        if (!TRANSITIONS[this.currentStatus].includes(nextStatus))
+            return false;
+        this.currentStatus = nextStatus;
+        return true;
+    }
+    close(outcome) {
+        if (isTerminalStatus(this.currentStatus))
+            return false;
+        if (!isTerminalStatus(outcome.status))
+            return false;
+        this.currentStatus = outcome.status;
+        this.terminalResult = {
+            ...this.base,
+            status: outcome.status,
+            output: outcome.output,
+            metadata: outcome.metadata,
+        };
+        return true;
+    }
+    handle() {
+        return { ...this.base, status: this.currentStatus };
+    }
+}
+//# sourceMappingURL=lifecycle.js.map

package/dist/lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lifecycle.js","sourceRoot":"","sources":["../src/lifecycle.ts"],"names":[],"mappings":"AAeA,MAAM,iBAAiB,GAAiC;IACtD,WAAW;IACX,QAAQ;IACR,WAAW;IACX,WAAW;CACZ,CAAC;AAEF,MAAM,WAAW,GAAsD;IACrE,MAAM,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;IACxD,QAAQ,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;IACzD,OAAO,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC;IAC1D,SAAS,EAAE,EAAE;IACb,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,EAAE;CACd,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,MAAiB;IAChD,OAAO,iBAAiB,CAAC,QAAQ,CAAC,MAA2B,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,YAAY;IAIa;IAH5B,aAAa,CAAY;IACzB,cAAc,CAAa;IAEnC,YAAoC,IAA+B;QAA/B,SAAI,GAAJ,IAAI,CAA2B;QACjE,IAAI,CAAC,aAAa,GAAG,QAAQ,CAAC;IAChC,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,aAAa,CAAC;IAC5B,CAAC;IAED,IAAW,MAAM;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAEM,UAAU,CAAC,UAAqB;QACrC,IAAI,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACxE,IAAI,CAAC,aAAa,GAAG,UAAU,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,KAAK,CAAC,OAAyB;QACpC,IAAI,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,OAAO,KAAK,CAAC;QACvD,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACpD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG;YACpB,GAAG,IAAI,CAAC,IAAI;YACZ,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;SAC3B,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAEM,MAAM;QACX,OAAO,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;IACtD,CAAC;CACF"}

package/dist/policy/redaction.d.ts

@@ -0,0 +1,10 @@
+import type { JsonObject, JsonValue } from "@kadi.build/kadi-harness-contracts";
+/**
+ * Converts untrusted values into bounded JSON-safe data while redacting
+ * credential-like keys. Cycles and excessively deep/large values are replaced
+ * with safe markers instead of being serialized or logged.
+ */
+export declare function redactJson(value: unknown): JsonValue;
+export declare function redactObject(value: Record<string, unknown> | undefined): JsonObject | undefined;
+export declare function isSensitiveKey(key: string): boolean;
+//# sourceMappingURL=redaction.d.ts.map

package/dist/policy/redaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/policy/redaction.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,oCAAoC,CAAC;AAWhF;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,CA0BpD;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAG/F;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEnD"}