taskflow-mcp-core 0.3.0-beta.1.1 → 1.0.0

package/dist/control/schema/transport.d.ts

@@ -0,0 +1,479 @@
+/**
+ * Transport wire types (🟥 NEW): negotiation handshake, unified error
+ * envelope + the closed TF_* code set (P4), and the ExecutionProvider DTO
+ * group (RFC §16) as discriminated accepted|rejected|ambiguous unions.
+ */
+import { Type } from "typebox";
+import { type EnforcementCapabilities } from "./policy.ts";
+import { type ExecutionOwner } from "./te-mirrors.ts";
+import { type BoundPlan } from "./plan.ts";
+export declare const PROTOCOL_MAJOR = 1;
+export declare const NegotiationHandshakeSchema: Type.TObject<{
+    protocolMajor: Type.TLiteral<1>;
+    supportedReadSchemas: Type.TArray<Type.TString>;
+    supportedWriteSchemas: Type.TArray<Type.TString>;
+    requiredFeatures: Type.TArray<Type.TString>;
+    offeredFeatures: Type.TArray<Type.TString>;
+    buildInfo: Type.TObject<{
+        packageVersion: Type.TString;
+        gitCommit: Type.TString;
+        schemaVersion: Type.TInteger;
+        buildTime: Type.TOptional<Type.TInteger>;
+    }>;
+}>;
+export type NegotiationHandshake = {
+    protocolMajor: typeof PROTOCOL_MAJOR;
+    supportedReadSchemas: string[];
+    supportedWriteSchemas: string[];
+    requiredFeatures: string[];
+    offeredFeatures: string[];
+    buildInfo: {
+        packageVersion: string;
+        gitCommit: string;
+        schemaVersion: number;
+        buildTime?: number;
+    };
+};
+export declare const CONTROL_ERROR_CODES: readonly ["TF_PROTOCOL_INCOMPATIBLE", "TF_SCHEMA_UNSUPPORTED", "TF_FEATURE_REQUIRED", "TF_POLICY_DENIED", "TF_AUTHORITY_REVOKED", "TF_STALE_VERSION", "TF_IDEMPOTENCY_CONFLICT", "TF_CROSS_PRINCIPAL_COMMAND", "TF_LEGACY_CONFLICT", "TF_PROVIDER_AMBIGUOUS", "TF_JOURNAL_UNAVAILABLE", "TF_DURABILITY_FAILED", "TF_CURSOR_EXPIRED", "TF_COMMAND_FAILED", "TF_BOOTSTRAP_FAILED", "TF_RECONCILE_REQUIRED", "TF_ADMISSION_BINDING_CONFLICT", "TF_CAPACITY_EXCEEDED"];
+export type ControlErrorCode = (typeof CONTROL_ERROR_CODES)[number];
+export declare const RecoveryActionSchema: import("typebox").TUnsafe<string>;
+export type RecoveryAction = "retry-same-command" | "retry-new-command" | "refresh" | "reconcile" | "operator" | "none";
+export declare const SideEffectsSchema: import("typebox").TUnsafe<string>;
+export type SideEffects = "none" | "possible" | "unknown";
+export declare const ErrorEnvelopeSchema: Type.TObject<{
+    code: import("typebox").TUnsafe<"TF_ADMISSION_BINDING_CONFLICT" | "TF_AUTHORITY_REVOKED" | "TF_BOOTSTRAP_FAILED" | "TF_CAPACITY_EXCEEDED" | "TF_COMMAND_FAILED" | "TF_CROSS_PRINCIPAL_COMMAND" | "TF_CURSOR_EXPIRED" | "TF_DURABILITY_FAILED" | "TF_FEATURE_REQUIRED" | "TF_IDEMPOTENCY_CONFLICT" | "TF_JOURNAL_UNAVAILABLE" | "TF_LEGACY_CONFLICT" | "TF_POLICY_DENIED" | "TF_PROTOCOL_INCOMPATIBLE" | "TF_PROVIDER_AMBIGUOUS" | "TF_RECONCILE_REQUIRED" | "TF_SCHEMA_UNSUPPORTED" | "TF_STALE_VERSION">;
+    message: Type.TString;
+    recoveryAction: import("typebox").TUnsafe<string>;
+    sideEffects: import("typebox").TUnsafe<string>;
+    commandId: Type.TOptional<Type.TString>;
+    commitSeq: Type.TOptional<Type.TInteger>;
+    controlDomainId: Type.TOptional<Type.TString>;
+    projectId: Type.TOptional<Type.TString>;
+}>;
+export type ErrorEnvelope = {
+    code: ControlErrorCode;
+    message: string;
+    recoveryAction: RecoveryAction;
+    sideEffects: SideEffects;
+    commandId?: string;
+    commitSeq?: number;
+    controlDomainId?: string;
+    projectId?: string;
+};
+export declare const ProviderRequestBaseSchema: Type.TObject<{
+    runId: Type.TString;
+    owner: Type.TObject<{
+        runId: Type.TString;
+        phaseId: Type.TString;
+        attemptId: Type.TString;
+        unitId: Type.TString;
+        ancestry: Type.TArray<Type.TString>;
+    }>;
+    controlDomainId: Type.TString;
+}>;
+export declare const ProviderAcceptedSchema: <T extends { [K in "outcome"]: "accepted"; }>(fields: T) => Type.TObject<T & {
+    outcome: Type.TLiteral<"accepted">;
+}>;
+export declare const ProviderRejectedSchema: Type.TObject<{
+    outcome: Type.TLiteral<"rejected">;
+    error: Type.TObject<{
+        code: import("typebox").TUnsafe<"TF_ADMISSION_BINDING_CONFLICT" | "TF_AUTHORITY_REVOKED" | "TF_BOOTSTRAP_FAILED" | "TF_CAPACITY_EXCEEDED" | "TF_COMMAND_FAILED" | "TF_CROSS_PRINCIPAL_COMMAND" | "TF_CURSOR_EXPIRED" | "TF_DURABILITY_FAILED" | "TF_FEATURE_REQUIRED" | "TF_IDEMPOTENCY_CONFLICT" | "TF_JOURNAL_UNAVAILABLE" | "TF_LEGACY_CONFLICT" | "TF_POLICY_DENIED" | "TF_PROTOCOL_INCOMPATIBLE" | "TF_PROVIDER_AMBIGUOUS" | "TF_RECONCILE_REQUIRED" | "TF_SCHEMA_UNSUPPORTED" | "TF_STALE_VERSION">;
+        message: Type.TString;
+        recoveryAction: import("typebox").TUnsafe<string>;
+        sideEffects: import("typebox").TUnsafe<string>;
+    }>;
+}>;
+export declare const ProviderAmbiguousSchema: Type.TObject<{
+    outcome: Type.TLiteral<"ambiguous">;
+    message: Type.TOptional<Type.TString>;
+}>;
+export declare const ProviderCapabilitiesSchema: Type.TObject<{
+    processIsolation: import("typebox").TUnsafe<string>;
+    resolution: Type.TLiteral<"contained">;
+    mutationMediation: Type.TLiteral<"brokered">;
+    revocation: Type.TLiteral<"admission-only">;
+    baselinePolicyId: Type.TString;
+    hostProbeSha256: Type.TString;
+}>;
+export type ProviderCapabilities = {
+    processIsolation: "none" | "sandboxed";
+    resolution: "contained";
+    mutationMediation: "brokered";
+    revocation: "admission-only";
+    baselinePolicyId: string;
+    hostProbeSha256: string;
+};
+export declare const ProbeResultSchema: Type.TObject<{
+    outcome: Type.TLiteral<"accepted">;
+    capabilities: Type.TObject<{
+        processIsolation: import("typebox").TUnsafe<string>;
+        resolution: Type.TLiteral<"contained">;
+        mutationMediation: Type.TLiteral<"brokered">;
+        revocation: Type.TLiteral<"admission-only">;
+        baselinePolicyId: Type.TString;
+        hostProbeSha256: Type.TString;
+    }>;
+}>;
+export type ProbeResult = {
+    outcome: "accepted";
+    capabilities: ProviderCapabilities;
+};
+export declare const PrepareRequestSchema: Type.TObject<{
+    plan: Type.TObject<{
+        schemaVersion: Type.TLiteral<2>;
+        projectId: Type.TString;
+        controlDomainId: Type.TString;
+        planId: Type.TString;
+        bindings: Type.TArray<Type.TObject<{
+            name: Type.TString;
+            path: Type.TUnion<[Type.TObject<{
+                subpath: Type.TOptional<Type.TUnion<[Type.TObject<{
+                    literalPath: Type.TString;
+                    argPath: Type.TOptional<Type.TNever>;
+                    segments: Type.TOptional<Type.TNever>;
+                }>, Type.TObject<{
+                    argPath: Type.TString;
+                    literalPath: Type.TOptional<Type.TNever>;
+                    segments: Type.TOptional<Type.TNever>;
+                }>, Type.TObject<{
+                    segments: Type.TArray<Type.TUnion<[Type.TObject<{
+                        segment: Type.TString;
+                        argSegment: Type.TOptional<Type.TNever>;
+                    }>, Type.TObject<{
+                        argSegment: Type.TString;
+                        segment: Type.TOptional<Type.TNever>;
+                    }>]>>;
+                    literalPath: Type.TOptional<Type.TNever>;
+                    argPath: Type.TOptional<Type.TNever>;
+                }>]>>;
+                access: Type.TOptional<Type.TUnion<[Type.TLiteral<"read-only">, Type.TLiteral<"read-write">]>>;
+                maxLifetime: Type.TOptional<Type.TUnion<Type.TObject<{
+                    scope: Type.TLiteral<"external" | "phase" | "run">;
+                }>[]>>;
+                intent: Type.TUnion<[Type.TLiteral<"existing-file">, Type.TLiteral<"existing-directory">, Type.TLiteral<"create-file">, Type.TLiteral<"create-directory">, Type.TLiteral<"executable">]>;
+                workspace: Type.TString;
+                handle: Type.TOptional<Type.TNever>;
+            }>, Type.TObject<{
+                subpath: Type.TOptional<Type.TUnion<[Type.TObject<{
+                    literalPath: Type.TString;
+                    argPath: Type.TOptional<Type.TNever>;
+                    segments: Type.TOptional<Type.TNever>;
+                }>, Type.TObject<{
+                    argPath: Type.TString;
+                    literalPath: Type.TOptional<Type.TNever>;
+                    segments: Type.TOptional<Type.TNever>;
+                }>, Type.TObject<{
+                    segments: Type.TArray<Type.TUnion<[Type.TObject<{
+                        segment: Type.TString;
+                        argSegment: Type.TOptional<Type.TNever>;
+                    }>, Type.TObject<{
+                        argSegment: Type.TString;
+                        segment: Type.TOptional<Type.TNever>;
+                    }>]>>;
+                    literalPath: Type.TOptional<Type.TNever>;
+                    argPath: Type.TOptional<Type.TNever>;
+                }>]>>;
+                access: Type.TOptional<Type.TUnion<[Type.TLiteral<"read-only">, Type.TLiteral<"read-write">]>>;
+                maxLifetime: Type.TOptional<Type.TUnion<Type.TObject<{
+                    scope: Type.TLiteral<"external" | "phase" | "run">;
+                }>[]>>;
+                intent: Type.TUnion<[Type.TLiteral<"existing-file">, Type.TLiteral<"existing-directory">, Type.TLiteral<"create-file">, Type.TLiteral<"create-directory">, Type.TLiteral<"executable">]>;
+                handle: Type.TObject<{
+                    producerPhaseId: Type.TString;
+                    exportName: Type.TString;
+                }>;
+                workspace: Type.TOptional<Type.TNever>;
+            }>]>;
+        }>>;
+        spawnTemplate: Type.TObject<{
+            allowedAgentClasses: Type.TArray<Type.TString>;
+            allowedProviderClasses: Type.TArray<Type.TString>;
+            maxToolCallsPerStep: Type.TInteger;
+            maxEffectsPerNode: Type.TInteger;
+            maxChildren: Type.TInteger;
+            maxDepth: Type.TInteger;
+            budgetShare: Type.TNumber;
+        }>;
+        savedFlowPins: Type.TArray<Type.TObject<{
+            flowId: Type.TString;
+            irHash: Type.TString;
+            boundPlanHash: Type.TString;
+        }>>;
+        grantRefs: Type.TArray<Type.TObject<{
+            grantId: Type.TString;
+            bindingId: Type.TOptional<Type.TString>;
+        }>>;
+        claims: Type.TArray<Type.TObject<{
+            name: Type.TString;
+            value: Type.TUnion<[Type.TString, Type.TBoolean, Type.TNumber]>;
+        }>>;
+        enforcementCapabilities: Type.TObject<{
+            resolution: import("typebox").TUnsafe<string>;
+            mutationMediation: import("typebox").TUnsafe<string>;
+            processIsolation: import("typebox").TUnsafe<string>;
+            revocation: Type.TUnion<[Type.TLiteral<"admission-only">, Type.TLiteral<"per-mutation">, Type.TObject<{
+                mode: Type.TLiteral<"bounded-latency">;
+                maxLatencyMs: Type.TInteger;
+            }>]>;
+            baselinePolicyId: Type.TString;
+            hostProbeSha256: Type.TString;
+        }>;
+        dynamicPolicy: Type.TObject<{
+            hostCeiling: Type.TObject<{
+                maxActiveRuns: Type.TOptional<Type.TInteger>;
+                maxTokens: Type.TOptional<Type.TInteger>;
+                maxUSD: Type.TOptional<Type.TNumber>;
+            }>;
+            userCeiling: Type.TOptional<Type.TObject<{
+                maxActiveRuns: Type.TOptional<Type.TInteger>;
+                maxTokens: Type.TOptional<Type.TInteger>;
+                maxUSD: Type.TOptional<Type.TNumber>;
+            }>>;
+            projectCeiling: Type.TOptional<Type.TObject<{
+                maxActiveRuns: Type.TOptional<Type.TInteger>;
+                maxTokens: Type.TOptional<Type.TInteger>;
+                maxUSD: Type.TOptional<Type.TNumber>;
+            }>>;
+            invocationCeiling: Type.TOptional<Type.TObject<{
+                maxActiveRuns: Type.TOptional<Type.TInteger>;
+                maxTokens: Type.TOptional<Type.TInteger>;
+                maxUSD: Type.TOptional<Type.TNumber>;
+            }>>;
+            authorizationContextHash: Type.TString;
+        }>;
+        boundPlanHash: Type.TString;
+    }>;
+    owner: Type.TObject<{
+        runId: Type.TString;
+        phaseId: Type.TString;
+        attemptId: Type.TString;
+        unitId: Type.TString;
+        ancestry: Type.TArray<Type.TString>;
+    }>;
+    controlDomainId: Type.TString;
+}>;
+export type PrepareRequest = {
+    plan: BoundPlan;
+    owner: ExecutionOwner;
+    controlDomainId: string;
+};
+export declare const FulfillmentPlanSchema: Type.TObject<{
+    preparationId: Type.TString;
+    enforcementCapabilities: Type.TObject<{
+        resolution: import("typebox").TUnsafe<string>;
+        mutationMediation: import("typebox").TUnsafe<string>;
+        processIsolation: import("typebox").TUnsafe<string>;
+        revocation: Type.TUnion<[Type.TLiteral<"admission-only">, Type.TLiteral<"per-mutation">, Type.TObject<{
+            mode: Type.TLiteral<"bounded-latency">;
+            maxLatencyMs: Type.TInteger;
+        }>]>;
+        baselinePolicyId: Type.TString;
+        hostProbeSha256: Type.TString;
+    }>;
+}>;
+export type FulfillmentPlan = {
+    preparationId: string;
+    enforcementCapabilities: EnforcementCapabilities;
+};
+export declare const PrepareResultSchema: Type.TUnion<[Type.TObject<{
+    outcome: Type.TLiteral<"accepted">;
+    fulfillment: Type.TObject<{
+        preparationId: Type.TString;
+        enforcementCapabilities: Type.TObject<{
+            resolution: import("typebox").TUnsafe<string>;
+            mutationMediation: import("typebox").TUnsafe<string>;
+            processIsolation: import("typebox").TUnsafe<string>;
+            revocation: Type.TUnion<[Type.TLiteral<"admission-only">, Type.TLiteral<"per-mutation">, Type.TObject<{
+                mode: Type.TLiteral<"bounded-latency">;
+                maxLatencyMs: Type.TInteger;
+            }>]>;
+            baselinePolicyId: Type.TString;
+            hostProbeSha256: Type.TString;
+        }>;
+    }>;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"rejected">;
+    error: Type.TObject<{
+        code: import("typebox").TUnsafe<"TF_ADMISSION_BINDING_CONFLICT" | "TF_AUTHORITY_REVOKED" | "TF_BOOTSTRAP_FAILED" | "TF_CAPACITY_EXCEEDED" | "TF_COMMAND_FAILED" | "TF_CROSS_PRINCIPAL_COMMAND" | "TF_CURSOR_EXPIRED" | "TF_DURABILITY_FAILED" | "TF_FEATURE_REQUIRED" | "TF_IDEMPOTENCY_CONFLICT" | "TF_JOURNAL_UNAVAILABLE" | "TF_LEGACY_CONFLICT" | "TF_POLICY_DENIED" | "TF_PROTOCOL_INCOMPATIBLE" | "TF_PROVIDER_AMBIGUOUS" | "TF_RECONCILE_REQUIRED" | "TF_SCHEMA_UNSUPPORTED" | "TF_STALE_VERSION">;
+        message: Type.TString;
+        recoveryAction: import("typebox").TUnsafe<string>;
+        sideEffects: import("typebox").TUnsafe<string>;
+    }>;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"ambiguous">;
+    message: Type.TOptional<Type.TString>;
+}>]>;
+export type PrepareResult = {
+    outcome: "accepted";
+    fulfillment: FulfillmentPlan;
+} | {
+    outcome: "rejected";
+    error: ErrorEnvelope;
+} | {
+    outcome: "ambiguous";
+    message?: string;
+};
+export declare const SubmitRequestSchema: Type.TObject<{
+    preparationId: Type.TString;
+    owner: Type.TObject<{
+        runId: Type.TString;
+        phaseId: Type.TString;
+        attemptId: Type.TString;
+        unitId: Type.TString;
+        ancestry: Type.TArray<Type.TString>;
+    }>;
+    controlDomainId: Type.TString;
+}>;
+export type SubmitRequest = {
+    preparationId: string;
+    owner: ExecutionOwner;
+    controlDomainId: string;
+};
+export declare const SubmitResultSchema: Type.TUnion<[Type.TObject<{
+    outcome: Type.TLiteral<"accepted">;
+    providerJobHandle: Type.TString;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"rejected">;
+    error: Type.TObject<{
+        code: import("typebox").TUnsafe<"TF_ADMISSION_BINDING_CONFLICT" | "TF_AUTHORITY_REVOKED" | "TF_BOOTSTRAP_FAILED" | "TF_CAPACITY_EXCEEDED" | "TF_COMMAND_FAILED" | "TF_CROSS_PRINCIPAL_COMMAND" | "TF_CURSOR_EXPIRED" | "TF_DURABILITY_FAILED" | "TF_FEATURE_REQUIRED" | "TF_IDEMPOTENCY_CONFLICT" | "TF_JOURNAL_UNAVAILABLE" | "TF_LEGACY_CONFLICT" | "TF_POLICY_DENIED" | "TF_PROTOCOL_INCOMPATIBLE" | "TF_PROVIDER_AMBIGUOUS" | "TF_RECONCILE_REQUIRED" | "TF_SCHEMA_UNSUPPORTED" | "TF_STALE_VERSION">;
+        message: Type.TString;
+        recoveryAction: import("typebox").TUnsafe<string>;
+        sideEffects: import("typebox").TUnsafe<string>;
+    }>;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"ambiguous">;
+    message: Type.TOptional<Type.TString>;
+}>]>;
+export type SubmitResult = {
+    outcome: "accepted";
+    providerJobHandle: string;
+} | {
+    outcome: "rejected";
+    error: ErrorEnvelope;
+} | {
+    outcome: "ambiguous";
+    message?: string;
+};
+export declare const ProviderEventSchema: Type.TUnion<[Type.TObject<{
+    kind: Type.TLiteral<"progress">;
+    message: Type.TString;
+}>, Type.TObject<{
+    kind: Type.TLiteral<"heartbeat">;
+    at: Type.TInteger;
+}>, Type.TObject<{
+    kind: Type.TLiteral<"terminal">;
+    outcome: import("typebox").TUnsafe<string>;
+}>]>;
+export type ProviderEvent = {
+    kind: "progress";
+    message: string;
+} | {
+    kind: "heartbeat";
+    at: number;
+} | {
+    kind: "terminal";
+    outcome: "completed" | "failed" | "ambiguous";
+};
+export declare const PollResultSchema: Type.TUnion<[Type.TObject<{
+    outcome: Type.TLiteral<"accepted">;
+    status: import("typebox").TUnsafe<string>;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"rejected">;
+    error: Type.TObject<{
+        code: import("typebox").TUnsafe<"TF_ADMISSION_BINDING_CONFLICT" | "TF_AUTHORITY_REVOKED" | "TF_BOOTSTRAP_FAILED" | "TF_CAPACITY_EXCEEDED" | "TF_COMMAND_FAILED" | "TF_CROSS_PRINCIPAL_COMMAND" | "TF_CURSOR_EXPIRED" | "TF_DURABILITY_FAILED" | "TF_FEATURE_REQUIRED" | "TF_IDEMPOTENCY_CONFLICT" | "TF_JOURNAL_UNAVAILABLE" | "TF_LEGACY_CONFLICT" | "TF_POLICY_DENIED" | "TF_PROTOCOL_INCOMPATIBLE" | "TF_PROVIDER_AMBIGUOUS" | "TF_RECONCILE_REQUIRED" | "TF_SCHEMA_UNSUPPORTED" | "TF_STALE_VERSION">;
+        message: Type.TString;
+        recoveryAction: import("typebox").TUnsafe<string>;
+        sideEffects: import("typebox").TUnsafe<string>;
+    }>;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"ambiguous">;
+    message: Type.TOptional<Type.TString>;
+}>]>;
+export type PollResult = {
+    outcome: "accepted";
+    status: "running" | "completed" | "failed" | "ambiguous";
+} | {
+    outcome: "rejected";
+    error: ErrorEnvelope;
+} | {
+    outcome: "ambiguous";
+    message?: string;
+};
+export declare const CancelResultSchema: Type.TUnion<[Type.TObject<{
+    outcome: Type.TLiteral<"accepted">;
+    cancelled: Type.TBoolean;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"rejected">;
+    error: Type.TObject<{
+        code: import("typebox").TUnsafe<"TF_ADMISSION_BINDING_CONFLICT" | "TF_AUTHORITY_REVOKED" | "TF_BOOTSTRAP_FAILED" | "TF_CAPACITY_EXCEEDED" | "TF_COMMAND_FAILED" | "TF_CROSS_PRINCIPAL_COMMAND" | "TF_CURSOR_EXPIRED" | "TF_DURABILITY_FAILED" | "TF_FEATURE_REQUIRED" | "TF_IDEMPOTENCY_CONFLICT" | "TF_JOURNAL_UNAVAILABLE" | "TF_LEGACY_CONFLICT" | "TF_POLICY_DENIED" | "TF_PROTOCOL_INCOMPATIBLE" | "TF_PROVIDER_AMBIGUOUS" | "TF_RECONCILE_REQUIRED" | "TF_SCHEMA_UNSUPPORTED" | "TF_STALE_VERSION">;
+        message: Type.TString;
+        recoveryAction: import("typebox").TUnsafe<string>;
+        sideEffects: import("typebox").TUnsafe<string>;
+    }>;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"ambiguous">;
+    message: Type.TOptional<Type.TString>;
+}>]>;
+export type CancelResult = {
+    outcome: "accepted";
+    cancelled: boolean;
+} | {
+    outcome: "rejected";
+    error: ErrorEnvelope;
+} | {
+    outcome: "ambiguous";
+    message?: string;
+};
+export declare const ReconcileResultSchema: Type.TUnion<[Type.TObject<{
+    outcome: Type.TLiteral<"accepted">;
+    providerState: import("typebox").TUnsafe<string>;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"rejected">;
+    error: Type.TObject<{
+        code: import("typebox").TUnsafe<"TF_ADMISSION_BINDING_CONFLICT" | "TF_AUTHORITY_REVOKED" | "TF_BOOTSTRAP_FAILED" | "TF_CAPACITY_EXCEEDED" | "TF_COMMAND_FAILED" | "TF_CROSS_PRINCIPAL_COMMAND" | "TF_CURSOR_EXPIRED" | "TF_DURABILITY_FAILED" | "TF_FEATURE_REQUIRED" | "TF_IDEMPOTENCY_CONFLICT" | "TF_JOURNAL_UNAVAILABLE" | "TF_LEGACY_CONFLICT" | "TF_POLICY_DENIED" | "TF_PROTOCOL_INCOMPATIBLE" | "TF_PROVIDER_AMBIGUOUS" | "TF_RECONCILE_REQUIRED" | "TF_SCHEMA_UNSUPPORTED" | "TF_STALE_VERSION">;
+        message: Type.TString;
+        recoveryAction: import("typebox").TUnsafe<string>;
+        sideEffects: import("typebox").TUnsafe<string>;
+    }>;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"ambiguous">;
+    message: Type.TOptional<Type.TString>;
+}>]>;
+export type ReconcileResult = {
+    outcome: "accepted";
+    providerState: "running" | "terminal" | "exhausted";
+} | {
+    outcome: "rejected";
+    error: ErrorEnvelope;
+} | {
+    outcome: "ambiguous";
+    message?: string;
+};
+export declare const CollectResultSchema: Type.TUnion<[Type.TObject<{
+    outcome: Type.TLiteral<"accepted">;
+    providerJobHandle: Type.TString;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"rejected">;
+    error: Type.TObject<{
+        code: import("typebox").TUnsafe<"TF_ADMISSION_BINDING_CONFLICT" | "TF_AUTHORITY_REVOKED" | "TF_BOOTSTRAP_FAILED" | "TF_CAPACITY_EXCEEDED" | "TF_COMMAND_FAILED" | "TF_CROSS_PRINCIPAL_COMMAND" | "TF_CURSOR_EXPIRED" | "TF_DURABILITY_FAILED" | "TF_FEATURE_REQUIRED" | "TF_IDEMPOTENCY_CONFLICT" | "TF_JOURNAL_UNAVAILABLE" | "TF_LEGACY_CONFLICT" | "TF_POLICY_DENIED" | "TF_PROTOCOL_INCOMPATIBLE" | "TF_PROVIDER_AMBIGUOUS" | "TF_RECONCILE_REQUIRED" | "TF_SCHEMA_UNSUPPORTED" | "TF_STALE_VERSION">;
+        message: Type.TString;
+        recoveryAction: import("typebox").TUnsafe<string>;
+        sideEffects: import("typebox").TUnsafe<string>;
+    }>;
+}>, Type.TObject<{
+    outcome: Type.TLiteral<"ambiguous">;
+    message: Type.TOptional<Type.TString>;
+}>]>;
+export type CollectResult = {
+    outcome: "accepted";
+    providerJobHandle: string;
+} | {
+    outcome: "rejected";
+    error: ErrorEnvelope;
+} | {
+    outcome: "ambiguous";
+    message?: string;
+};
+/** TE capabilities are the only 0.3-C capabilities (P8 default package). */
+export declare function capabilitiesFromEnforcement(capabilities: ProviderCapabilities): EnforcementCapabilities;
+//# sourceMappingURL=transport.d.ts.map

package/dist/control/schema/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../taskflow-control/src/schema/transport.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG/B,OAAO,EAAiC,KAAK,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAC1F,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAC5E,OAAO,EAAmB,KAAK,SAAS,EAAE,MAAM,WAAW,CAAC;AAM5D,eAAO,MAAM,cAAc,IAAI,CAAC;AAEhC,eAAO,MAAM,0BAA0B;;;;;;;;;;;;EAkBtC,CAAC;AACF,MAAM,MAAM,oBAAoB,GAAG;IAClC,aAAa,EAAE,OAAO,cAAc,CAAC;IACrC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IAC/B,qBAAqB,EAAE,MAAM,EAAE,CAAC;IAChC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,SAAS,EAAE;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACF,CAAC;AAMF,eAAO,MAAM,mBAAmB,YAC/B,0BAA0B,EAC1B,uBAAuB,EACvB,qBAAqB,EACrB,kBAAkB,EAClB,sBAAsB,EACtB,kBAAkB,EAClB,yBAAyB,EACzB,4BAA4B,EAC5B,oBAAoB,EACpB,uBAAuB,EACvB,wBAAwB,EACxB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,uBAAuB,EACvB,+BAA+B,EAC/B,sBAAsB,CACb,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpE,eAAO,MAAM,oBAAoB,mCAO/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,oBAAoB,GAAG,mBAAmB,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AAExH,eAAO,MAAM,iBAAiB,mCAA8C,CAAC;AAC7E,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;AAE1D,eAAO,MAAM,mBAAmB;;;;;;;;;EAY/B,CAAC;AACF,MAAM,MAAM,aAAa,GAAG;IAC3B,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,cAAc,CAAC;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAOF,eAAO,MAAM,yBAAyB;;;;;;;;;;EAOrC,CAAC;AAEF,eAAO,MAAM,sBAAsB,GAAI,CAAC,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,UAAU,GAAE,UAAU,CAAC;;EACG,CAAC;AAEhG,eAAO,MAAM,sBAAsB;;;;;;;;EAclC,CAAC;AAEF,eAAO,MAAM,uBAAuB;;;EAMnC,CAAC;AAEF,eAAO,MAAM,0BAA0B;;;;;;;EAUtC,CAAC;AACF,MAAM,MAAM,oBAAoB,GAAG;IAClC,gBAAgB,EAAE,MAAM,GAAG,WAAW,CAAC;IACvC,UAAU,EAAE,WAAW,CAAC;IACxB,iBAAiB,EAAE,UAAU,CAAC;IAC9B,UAAU,EAAE,gBAAgB,CAAC;IAC7B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,eAAO,MAAM,iBAAiB;;;;;;;;;;EAM7B,CAAC;AACF,MAAM,MAAM,WAAW,GAAG;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,YAAY,EAAE,oBAAoB,CAAA;CAAE,CAAC;AAEtF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOhC,CAAC;AACF,MAAM,MAAM,cAAc,GAAG;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjG,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;EAMjC,CAAC;AACF,MAAM,MAAM,eAAe,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,uBAAuB,EAAE,uBAAuB,CAAA;CAAE,CAAC;AAE1G,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;IAO9B,CAAC;AACH,MAAM,MAAM,aAAa,GACtB;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,eAAe,CAAA;CAAE,GACrD;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,eAAO,MAAM,mBAAmB;;;;;;;;;;EAO/B,CAAC;AACF,MAAM,MAAM,aAAa,GAAG;IAAE,aAAa,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,cAAc,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtG,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;IAO7B,CAAC;AACH,MAAM,MAAM,YAAY,GACrB;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,eAAO,MAAM,mBAAmB;;;;;;;;;IAgB9B,CAAC;AACH,MAAM,MAAM,aAAa,GACtB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,OAAO,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAA;CAAE,CAAC;AAEvE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;IAU3B,CAAC;AACH,MAAM,MAAM,UAAU,GACnB;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAA;CAAE,GACjF;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;IAU7B,CAAC;AACH,MAAM,MAAM,YAAY,GACrB;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,OAAO,CAAA;CAAE,GAC3C;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;IAUhC,CAAC;AACH,MAAM,MAAM,eAAe,GACxB;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,aAAa,EAAE,SAAS,GAAG,UAAU,GAAG,WAAW,CAAA;CAAE,GAC5E;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;IAU9B,CAAC;AACH,MAAM,MAAM,aAAa,GACtB;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,iBAAiB,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,OAAO,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,GAC7C;IAAE,OAAO,EAAE,WAAW,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9C,4EAA4E;AAC5E,wBAAgB,2BAA2B,CAAC,YAAY,EAAE,oBAAoB,GAAG,uBAAuB,CASvG"}

package/dist/control/schema/transport.js

@@ -0,0 +1,181 @@
+/**
+ * Transport wire types (🟥 NEW): negotiation handshake, unified error
+ * envelope + the closed TF_* code set (P4), and the ExecutionProvider DTO
+ * group (RFC §16) as discriminated accepted|rejected|ambiguous unions.
+ */
+import { Type } from "typebox";
+import { StringEnum } from "taskflow-core/typebox-helpers";
+import { UuidSchema } from "./common.js";
+import { EnforcementCapabilitiesSchema } from "./policy.js";
+import { ExecutionOwnerSchema } from "./te-mirrors.js";
+import { BoundPlanSchema } from "./plan.js";
+// ---------------------------------------------------------------------------
+// NegotiationHandshake (P4 / RFC §18)
+// ---------------------------------------------------------------------------
+export const PROTOCOL_MAJOR = 1;
+export const NegotiationHandshakeSchema = Type.Object({
+    protocolMajor: Type.Literal(PROTOCOL_MAJOR),
+    supportedReadSchemas: Type.Array(Type.String({ minLength: 1 })),
+    supportedWriteSchemas: Type.Array(Type.String({ minLength: 1 })),
+    requiredFeatures: Type.Array(Type.String({ minLength: 1 })),
+    offeredFeatures: Type.Array(Type.String({ minLength: 1 })),
+    buildInfo: Type.Object({
+        packageVersion: Type.String({ minLength: 1 }),
+        gitCommit: Type.String({ minLength: 1 }),
+        schemaVersion: Type.Integer({ minimum: 0 }),
+        buildTime: Type.Optional(Type.Integer({ minimum: 0 })),
+    }, { additionalProperties: false }),
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// ErrorEnvelope + closed TF_* code set (P4)
+// ---------------------------------------------------------------------------
+export const CONTROL_ERROR_CODES = [
+    "TF_PROTOCOL_INCOMPATIBLE",
+    "TF_SCHEMA_UNSUPPORTED",
+    "TF_FEATURE_REQUIRED",
+    "TF_POLICY_DENIED",
+    "TF_AUTHORITY_REVOKED",
+    "TF_STALE_VERSION",
+    "TF_IDEMPOTENCY_CONFLICT",
+    "TF_CROSS_PRINCIPAL_COMMAND",
+    "TF_LEGACY_CONFLICT",
+    "TF_PROVIDER_AMBIGUOUS",
+    "TF_JOURNAL_UNAVAILABLE",
+    "TF_DURABILITY_FAILED",
+    "TF_CURSOR_EXPIRED",
+    "TF_COMMAND_FAILED",
+    "TF_BOOTSTRAP_FAILED",
+    "TF_RECONCILE_REQUIRED",
+    "TF_ADMISSION_BINDING_CONFLICT",
+    "TF_CAPACITY_EXCEEDED",
+];
+export const RecoveryActionSchema = StringEnum([
+    "retry-same-command",
+    "retry-new-command",
+    "refresh",
+    "reconcile",
+    "operator",
+    "none",
+]);
+export const SideEffectsSchema = StringEnum(["none", "possible", "unknown"]);
+export const ErrorEnvelopeSchema = Type.Object({
+    code: StringEnum(CONTROL_ERROR_CODES),
+    message: Type.String({ minLength: 1 }),
+    recoveryAction: RecoveryActionSchema,
+    sideEffects: SideEffectsSchema,
+    commandId: Type.Optional(UuidSchema),
+    commitSeq: Type.Optional(Type.Integer({ minimum: 1 })),
+    controlDomainId: Type.Optional(UuidSchema),
+    projectId: Type.Optional(UuidSchema),
+}, { additionalProperties: false });
+// ---------------------------------------------------------------------------
+// ExecutionProvider DTO group (RFC §16) — 0.3-C's only provider is TE
+// resources, but the wire keeps the async provider contract.
+// ---------------------------------------------------------------------------
+export const ProviderRequestBaseSchema = Type.Object({
+    runId: UuidSchema,
+    owner: ExecutionOwnerSchema,
+    controlDomainId: UuidSchema,
+}, { additionalProperties: false });
+export const ProviderAcceptedSchema = (fields) => Type.Object({ ...fields, outcome: Type.Literal("accepted") }, { additionalProperties: false });
+export const ProviderRejectedSchema = Type.Object({
+    outcome: Type.Literal("rejected"),
+    error: Type.Object({
+        code: StringEnum(CONTROL_ERROR_CODES),
+        message: Type.String({ minLength: 1 }),
+        recoveryAction: RecoveryActionSchema,
+        sideEffects: SideEffectsSchema,
+    }, { additionalProperties: false }),
+}, { additionalProperties: false });
+export const ProviderAmbiguousSchema = Type.Object({
+    outcome: Type.Literal("ambiguous"),
+    message: Type.Optional(Type.String()),
+}, { additionalProperties: false });
+export const ProviderCapabilitiesSchema = Type.Object({
+    processIsolation: StringEnum(["none", "sandboxed"]),
+    resolution: Type.Literal("contained"),
+    mutationMediation: Type.Literal("brokered"),
+    revocation: Type.Literal("admission-only"),
+    baselinePolicyId: Type.String({ minLength: 1 }),
+    hostProbeSha256: Type.String({ minLength: 1 }),
+}, { additionalProperties: false });
+export const ProbeResultSchema = Type.Object({
+    outcome: Type.Literal("accepted"),
+    capabilities: ProviderCapabilitiesSchema,
+}, { additionalProperties: false });
+export const PrepareRequestSchema = Type.Object({
+    plan: BoundPlanSchema,
+    owner: ExecutionOwnerSchema,
+    controlDomainId: UuidSchema,
+}, { additionalProperties: false });
+export const FulfillmentPlanSchema = Type.Object({
+    preparationId: UuidSchema,
+    enforcementCapabilities: EnforcementCapabilitiesSchema,
+}, { additionalProperties: false });
+export const PrepareResultSchema = Type.Union([
+    Type.Object({ outcome: Type.Literal("accepted"), fulfillment: FulfillmentPlanSchema }, { additionalProperties: false }),
+    ProviderRejectedSchema,
+    ProviderAmbiguousSchema,
+]);
+export const SubmitRequestSchema = Type.Object({
+    preparationId: UuidSchema,
+    owner: ExecutionOwnerSchema,
+    controlDomainId: UuidSchema,
+}, { additionalProperties: false });
+export const SubmitResultSchema = Type.Union([
+    Type.Object({ outcome: Type.Literal("accepted"), providerJobHandle: Type.String({ minLength: 1 }) }, { additionalProperties: false }),
+    ProviderRejectedSchema,
+    ProviderAmbiguousSchema,
+]);
+export const ProviderEventSchema = Type.Union([
+    Type.Object({ kind: Type.Literal("progress"), message: Type.String() }, { additionalProperties: false }),
+    Type.Object({ kind: Type.Literal("heartbeat"), at: Type.Integer({ minimum: 0 }) }, { additionalProperties: false }),
+    Type.Object({
+        kind: Type.Literal("terminal"),
+        outcome: StringEnum(["completed", "failed", "ambiguous"]),
+    }, { additionalProperties: false }),
+]);
+export const PollResultSchema = Type.Union([
+    Type.Object({
+        outcome: Type.Literal("accepted"),
+        status: StringEnum(["running", "completed", "failed", "ambiguous"]),
+    }, { additionalProperties: false }),
+    ProviderRejectedSchema,
+    ProviderAmbiguousSchema,
+]);
+export const CancelResultSchema = Type.Union([
+    Type.Object({
+        outcome: Type.Literal("accepted"),
+        cancelled: Type.Boolean(),
+    }, { additionalProperties: false }),
+    ProviderRejectedSchema,
+    ProviderAmbiguousSchema,
+]);
+export const ReconcileResultSchema = Type.Union([
+    Type.Object({
+        outcome: Type.Literal("accepted"),
+        providerState: StringEnum(["running", "terminal", "exhausted"]),
+    }, { additionalProperties: false }),
+    ProviderRejectedSchema,
+    ProviderAmbiguousSchema,
+]);
+export const CollectResultSchema = Type.Union([
+    Type.Object({
+        outcome: Type.Literal("accepted"),
+        providerJobHandle: Type.String({ minLength: 1 }),
+    }, { additionalProperties: false }),
+    ProviderRejectedSchema,
+    ProviderAmbiguousSchema,
+]);
+/** TE capabilities are the only 0.3-C capabilities (P8 default package). */
+export function capabilitiesFromEnforcement(capabilities) {
+    return {
+        resolution: capabilities.resolution,
+        mutationMediation: capabilities.mutationMediation,
+        processIsolation: capabilities.processIsolation,
+        revocation: capabilities.revocation,
+        baselinePolicyId: capabilities.baselinePolicyId,
+        hostProbeSha256: capabilities.hostProbeSha256,
+    };
+}
+//# sourceMappingURL=transport.js.map