tracegrove 0.0.0-stage → 0.3.0

package/dist/protocol/schemas/portableEnvironment.js

@@ -0,0 +1,108 @@
+/** Experimental placement-independent intent. References never contain credential values. */
+import { z } from 'zod';
+import { IdString, RefSchema, ScopeSchema, PositiveMillis, NonNegInt, PositiveInt, Cents } from "../primitives.js";
+import { CapabilityBinding, CapabilityRequirement } from "./capability.js";
+import { CapabilityReplayPlan } from "./capabilityLifecycle.js";
+export const PortableReplayMode = z.union([z.literal('fresh_execution'), CapabilityReplayPlan.shape.mode]);
+const refList = z.array(RefSchema).max(32);
+const endpoint = z.object({ id: IdString, resolverRef: RefSchema,
+    source: z.enum(['launch_reported', 'service_discovery', 'external_deployment']) }).strict();
+const target = z.discriminatedUnion('mode', [
+    z.object({ mode: z.literal('alongside_runner'), workspaceRef: RefSchema, hostPlanRef: RefSchema, launchRecipeRef: RefSchema }).strict(),
+    z.object({ mode: z.literal('external_staging'), deploymentRef: RefSchema }).strict(),
+]);
+const data = z.discriminatedUnion('mode', [
+    z.object({ mode: z.literal('none') }).strict(),
+    z.object({ mode: z.literal('owned_synthetic'), seedRef: RefSchema, generatorRef: RefSchema, namespacePolicyRef: RefSchema,
+        resetPlanRef: RefSchema, resourcePolicyRef: RefSchema }).strict(),
+]);
+export const PortableEnvironmentProfile = z.object({
+    schemaVersion: z.literal('workflow.portable-environment-profile/v1'), ref: RefSchema, scope: ScopeSchema,
+    sourceSelectionRef: RefSchema.nullable(), buildRef: RefSchema.nullable(), configurationRef: RefSchema,
+    target, endpoints: z.array(endpoint).min(1).max(16),
+    readiness: z.object({ endpointId: IdString, path: z.string().regex(/^\/(?!\/)[^?#\s]*$/).max(2048),
+        method: z.literal('GET'), expectedStatus: z.number().int().min(200).max(299), timeoutMs: PositiveMillis.max(300_000) }).strict(),
+    capabilities: z.array(CapabilityRequirement).max(64), dependencyPlanRefs: refList,
+    personaCredentials: z.array(z.object({ personaRef: RefSchema, secretRef: RefSchema }).strict()).max(32),
+    executionPolicyRef: RefSchema, executionSecretRefs: refList,
+    network: z.object({ policyRef: RefSchema, enforcement: z.literal('host'),
+        inbound: z.enum(['none', 'loopback_only']), egress: z.enum(['none', 'explicit_allowlist']), allowedEndpointIds: z.array(IdString).max(16) }).strict(),
+    data,
+    ownership: z.object({ leasePolicyRef: RefSchema, cleanupPlanRef: RefSchema, cleanupReserveMs: PositiveMillis.max(300_000) }).strict(),
+    artifacts: z.object({ destinationRef: RefSchema, durability: z.enum(['ephemeral', 'export_required', 'durable']),
+        redactionPolicyRef: RefSchema, retentionMs: PositiveMillis, maxBytes: PositiveInt }).strict(),
+    limits: z.object({ wallMs: PositiveMillis.max(3_600_000), cpu: PositiveInt.max(64), memoryMb: PositiveInt.max(262144), diskMb: NonNegInt,
+        maxRequests: NonNegInt, maxBrowserActions: NonNegInt, maxProviderCalls: NonNegInt, maxAgentCalls: NonNegInt, maxSpendCents: Cents }).strict(),
+    allowedReplayModes: z.array(PortableReplayMode).min(1).max(5),
+}).strict().superRefine((p, ctx) => {
+    const issue = (message) => ctx.addIssue({ code: 'custom', message });
+    if (!p.sourceSelectionRef && !p.buildRef)
+        issue('source selection or immutable build identity required');
+    const ids = p.endpoints.map(e => e.id);
+    if (new Set(ids).size !== ids.length || !ids.includes(p.readiness.endpointId))
+        issue('readiness requires a unique declared endpoint');
+    if (p.network.allowedEndpointIds.some(id => !ids.includes(id)) || new Set(p.network.allowedEndpointIds).size !== p.network.allowedEndpointIds.length)
+        issue('network endpoint references must be unique and declared');
+    if (p.network.egress === 'none' && p.network.allowedEndpointIds.length)
+        issue('no-egress policy cannot allow external endpoints');
+    if (p.target.mode === 'external_staging' && p.endpoints.some(e => e.source !== 'external_deployment'))
+        issue('external staging cannot claim owned launch endpoints');
+    if (p.target.mode === 'alongside_runner' && p.endpoints.some(e => e.source === 'external_deployment'))
+        issue('alongside endpoint must be resolved from owned launch or discovery');
+    if (p.ownership.cleanupReserveMs >= p.limits.wallMs)
+        issue('cleanup reserve must fit inside wall budget');
+    if (p.readiness.timeoutMs + p.ownership.cleanupReserveMs >= p.limits.wallMs)
+        issue('startup/readiness must leave execution and cleanup time');
+    if (new Set(p.capabilities.map(c => `${c.id}/v${c.version}`)).size !== p.capabilities.length)
+        issue('duplicate capability requirement');
+    if (new Set(p.allowedReplayModes).size !== p.allowedReplayModes.length)
+        issue('duplicate replay mode');
+    if (new Set(p.personaCredentials.map(c => c.personaRef.id)).size !== p.personaCredentials.length)
+        issue('duplicate application persona credential');
+    if (new Set(p.executionSecretRefs.map(r => r.id)).size !== p.executionSecretRefs.length)
+        issue('duplicate execution credential');
+    if (p.personaCredentials.some(c => p.executionSecretRefs.some(r => r.id === c.secretRef.id)))
+        issue('application and execution credential references must remain separate');
+});
+export const PortableEnvironmentIntent = z.object({ schemaVersion: z.literal('workflow.portable-environment-intent/v1'),
+    profileRef: RefSchema, binding: CapabilityBinding, actorRef: RefSchema,
+    replayMode: PortableReplayMode, replayPlanRef: RefSchema.nullable(),
+}).strict().superRefine((v, ctx) => {
+    if ((v.replayMode === 'fresh_execution') !== (v.replayPlanRef === null))
+        ctx.addIssue({ code: 'custom', message: 'replay requires its exact plan; fresh execution has no replay plan' });
+});
+export const PortableProbeRequest = z.discriminatedUnion('kind', [
+    z.object({ kind: z.literal('capability'), requirement: CapabilityRequirement }).strict(),
+    z.object({ kind: z.literal('workspace'), workspaceRef: RefSchema, sourceSelectionRef: RefSchema.nullable(), buildRef: RefSchema.nullable() }).strict(),
+    z.object({ kind: z.literal('startup'), hostPlanRef: RefSchema, launchRecipeRef: RefSchema, dependencyPlanRefs: refList }).strict(),
+    z.object({ kind: z.literal('deployment'), deploymentRef: RefSchema, sourceSelectionRef: RefSchema.nullable(), buildRef: RefSchema.nullable() }).strict(),
+    z.object({ kind: z.literal('endpoint'), endpoint }).strict(),
+    z.object({ kind: z.literal('readiness'), readiness: PortableEnvironmentProfile.shape.readiness }).strict(),
+    z.object({ kind: z.literal('persona_credential'), personaRef: RefSchema, secretRef: RefSchema }).strict(),
+    z.object({ kind: z.literal('execution_credential'), secretRef: RefSchema }).strict(),
+    z.object({ kind: z.literal('authorization'), policyRef: RefSchema, actorRef: RefSchema }).strict(),
+    z.object({ kind: z.literal('configuration'), configurationRef: RefSchema }).strict(),
+    z.object({ kind: z.literal('network'), network: PortableEnvironmentProfile.shape.network }).strict(),
+    z.object({ kind: z.literal('data'), data: PortableEnvironmentProfile.shape.data }).strict(),
+    z.object({ kind: z.literal('cleanup'), ownership: PortableEnvironmentProfile.shape.ownership }).strict(),
+    z.object({ kind: z.literal('artifacts'), artifacts: PortableEnvironmentProfile.shape.artifacts }).strict(),
+    z.object({ kind: z.literal('limits'), limits: PortableEnvironmentProfile.shape.limits }).strict(),
+    z.object({ kind: z.literal('replay'), mode: PortableReplayMode, planRef: RefSchema.nullable() }).strict(),
+]);
+export const PortableProbeObservation = z.object({ profileRef: RefSchema, binding: CapabilityBinding, actorRef: RefSchema,
+    requestDigest: z.object({ algorithm: z.literal('sha256'), hex: z.string().regex(/^[a-f0-9]{64}$/) }).strict(),
+    state: z.enum(['supported', 'missing', 'denied', 'unknown', 'temporarily_unavailable']),
+    evidenceRefs: refList, observedAt: z.string().datetime({ offset: true }), expiresAt: z.string().datetime({ offset: true }),
+}).strict();
+export const PortablePreflightReport = z.object({ schemaVersion: z.literal('workflow.portable-preflight/v1'),
+    profileRef: RefSchema.nullable(), binding: CapabilityBinding.nullable(), actorRef: RefSchema.nullable(),
+    status: z.enum(['ready', 'blocked']), exitCode: z.union([z.literal(0), z.literal(2)]),
+    checks: z.array(z.object({ request: PortableProbeRequest, state: PortableProbeObservation.shape.state, required: z.boolean(), evidenceRefs: refList,
+        code: IdString, recovery: z.enum(['none', 'install_or_select_capability', 'select_workspace_or_build', 'select_launch_adapter', 'verify_deployment_access', 'resolve_endpoint',
+            'verify_readiness', 'configure_existing_secret_reference', 'request_owner_authorization', 'select_safe_configuration', 'select_enforceable_network_policy',
+            'select_owned_synthetic_fixture', 'reconcile_owned_cleanup', 'select_exportable_artifact_destination', 'lower_or_enforce_limits', 'select_supported_replay_mode']) }).strict()).max(256),
+    errors: z.array(z.enum(['invalid_environment_intent', 'profile_unavailable', 'invalid_environment_profile', 'profile_identity_mismatch', 'scope_mismatch',
+        'unsupported_replay_mode', 'source_binding_mismatch', 'preflight_observations_expired', 'preflight_cancelled', 'preflight_deadline'])).max(8),
+    execution: z.literal('not_started'), verificationVerdict: z.literal('not_evaluated'),
+}).strict();
+//# sourceMappingURL=portableEnvironment.js.map

package/dist/protocol/schemas/portableEnvironment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"portableEnvironment.js","sourceRoot":"","sources":["../../../src/protocol/schemas/portableEnvironment.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACnH,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAC;AAC3E,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAEhE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3G,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AAC3C,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS;IAC9D,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,iBAAiB,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC9F,MAAM,MAAM,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC1C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACvI,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACrF,CAAC,CAAC;AACH,MAAM,IAAI,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACxC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS;QACvH,YAAY,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACpE,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,0CAA0C,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW;IACxG,kBAAkB,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,gBAAgB,EAAE,SAAS;IACrG,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;QAChG,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAClI,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,OAAO;IACjF,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACvG,kBAAkB,EAAE,SAAS,EAAE,mBAAmB,EAAE,OAAO;IAC3D,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QACtE,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACvJ,IAAI;IACJ,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACrI,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,iBAAiB,EAAE,SAAS,CAAC,CAAC;QAC9G,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/F,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS;QACtI,WAAW,EAAE,SAAS,EAAE,iBAAiB,EAAE,SAAS,EAAE,gBAAgB,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IAC/I,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9D,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACjC,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,CAAC,QAAQ;QAAE,KAAK,CAAC,uDAAuD,CAAC,CAAC;IACzG,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvC,IAAI,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACtI,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM;QAAE,KAAK,CAAC,yDAAyD,CAAC,CAAC;IACvN,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,MAAM;QAAE,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAClI,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC;QAAE,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACrK,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,qBAAqB,CAAC;QAAE,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACnL,IAAI,CAAC,CAAC,SAAS,CAAC,gBAAgB,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC1G,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,gBAAgB,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM;QAAE,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC9I,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,YAAY,CAAC,MAAM;QAAE,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxI,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM;QAAE,KAAK,CAAC,uBAAuB,CAAC,CAAC;IACvG,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,kBAAkB,CAAC,MAAM;QAAE,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACpJ,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,mBAAmB,CAAC,MAAM;QAAE,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACjI,IAAI,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAE,KAAK,CAAC,sEAAsE,CAAC,CAAC;AAC9K,CAAC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,yCAAyC,CAAC;IACrH,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS;IACtE,UAAU,EAAE,kBAAkB,EAAE,aAAa,EAAE,SAAS,CAAC,QAAQ,EAAE;CACpE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE;IACjC,IAAI,CAAC,CAAC,CAAC,UAAU,KAAK,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC;QAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,oEAAoE,EAAE,CAAC,CAAC;AAC3L,CAAC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE;IACxF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACtJ,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IAClI,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,kBAAkB,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACxJ,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IAC5D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1G,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACzG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACpF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IAClG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACpF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,0BAA0B,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACpG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,0BAA0B,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3F,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACxG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,0BAA0B,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1G,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,0BAA0B,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IACjG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1G,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,SAAS;IACvH,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7G,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,yBAAyB,CAAC,CAAC;IACvF,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;CAC3H,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC;IAC1G,UAAU,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE;IACvG,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,wBAAwB,CAAC,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,OAAO;QACjJ,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,8BAA8B,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,kBAAkB;YAC5K,kBAAkB,EAAE,qCAAqC,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,mCAAmC;YAC1J,gCAAgC,EAAE,yBAAyB,EAAE,wCAAwC,EAAE,yBAAyB,EAAE,8BAA8B,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5L,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,4BAA4B,EAAE,qBAAqB,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,gBAAgB;QACvJ,yBAAyB,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,qBAAqB,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/I,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;CACrF,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/protocol/schemas/promotion.d.ts

@@ -0,0 +1,132 @@
+import { z } from 'zod';
+export declare const ScenarioPromotionIntent: z.ZodObject<{
+    scenarioId: z.ZodString;
+    definitionRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    reviewToken: z.ZodObject<{
+        id: z.ZodString;
+        scope: z.ZodObject<{
+            ownerId: z.ZodString;
+            tenantId: z.ZodNullable<z.ZodString>;
+            visibility: z.ZodEnum<{
+                public: "public";
+                owner_private: "owner_private";
+                tenant_private: "tenant_private";
+            }>;
+        }, z.core.$strict>;
+        expectedEditRevision: z.ZodNumber;
+        expectedSourcePlanRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    selectionManifestRefs: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    idempotencyKey: z.ZodString;
+}, z.core.$strict>;
+export type ScenarioPromotionIntent = z.infer<typeof ScenarioPromotionIntent>;
+export declare const ScenarioPromotion: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"workflow.scenario-promotion/v1">;
+    ref: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    scope: z.ZodObject<{
+        ownerId: z.ZodString;
+        tenantId: z.ZodNullable<z.ZodString>;
+        visibility: z.ZodEnum<{
+            public: "public";
+            owner_private: "owner_private";
+            tenant_private: "tenant_private";
+        }>;
+    }, z.core.$strict>;
+    intent: z.ZodObject<{
+        scenarioId: z.ZodString;
+        definitionRef: z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        reviewToken: z.ZodObject<{
+            id: z.ZodString;
+            scope: z.ZodObject<{
+                ownerId: z.ZodString;
+                tenantId: z.ZodNullable<z.ZodString>;
+                visibility: z.ZodEnum<{
+                    public: "public";
+                    owner_private: "owner_private";
+                    tenant_private: "tenant_private";
+                }>;
+            }, z.core.$strict>;
+            expectedEditRevision: z.ZodNumber;
+            expectedSourcePlanRef: z.ZodObject<{
+                id: z.ZodString;
+                revision: z.ZodString;
+                digest: z.ZodObject<{
+                    algorithm: z.ZodLiteral<"sha256">;
+                    hex: z.ZodString;
+                }, z.core.$strict>;
+            }, z.core.$strict>;
+        }, z.core.$strict>;
+        selectionManifestRefs: z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            revision: z.ZodString;
+            digest: z.ZodObject<{
+                algorithm: z.ZodLiteral<"sha256">;
+                hex: z.ZodString;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        idempotencyKey: z.ZodString;
+    }, z.core.$strict>;
+    reviewRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    sourceValidationRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    reviewStorageVersion: z.ZodNumber;
+    actorId: z.ZodString;
+    authorizationPolicyRef: z.ZodObject<{
+        id: z.ZodString;
+        revision: z.ZodString;
+        digest: z.ZodObject<{
+            algorithm: z.ZodLiteral<"sha256">;
+            hex: z.ZodString;
+        }, z.core.$strict>;
+    }, z.core.$strict>;
+    promotedAt: z.ZodString;
+}, z.core.$strict>;
+export type ScenarioPromotion = z.infer<typeof ScenarioPromotion>;

package/dist/protocol/schemas/promotion.js

@@ -0,0 +1,9 @@
+import { z } from 'zod';
+import { IdString, IsoDateTime, PositiveInt, RefSchema, ScopeSchema, refList } from "../primitives.js";
+import { PlanRevisionToken } from "./review.js";
+export const ScenarioPromotionIntent = z.object({ scenarioId: IdString, definitionRef: RefSchema,
+    reviewToken: PlanRevisionToken, selectionManifestRefs: refList().min(1), idempotencyKey: IdString }).strict();
+export const ScenarioPromotion = z.object({ schemaVersion: z.literal('workflow.scenario-promotion/v1'), ref: RefSchema,
+    scope: ScopeSchema, intent: ScenarioPromotionIntent, reviewRef: RefSchema, sourceValidationRef: RefSchema,
+    reviewStorageVersion: PositiveInt, actorId: IdString, authorizationPolicyRef: RefSchema, promotedAt: IsoDateTime }).strict();
+//# sourceMappingURL=promotion.js.map

package/dist/protocol/schemas/promotion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promotion.js","sourceRoot":"","sources":["../../../src/protocol/schemas/promotion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,SAAS;IAC9F,WAAW,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,EAAE,GAAG,EAAE,SAAS;IACpH,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,uBAAuB,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,SAAS;IACzG,oBAAoB,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/protocol/schemas/protocol.d.ts

@@ -0,0 +1,146 @@
+/** workflow.runner-protocol/v1: newline-delimited JSON frames between host and plugin. */
+import { z } from 'zod';
+export declare const FRAME_MAX_BYTES: number;
+export declare const HostFrame: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    operationId: z.ZodString;
+    deadlineAt: z.ZodString;
+    permittedOperations: z.ZodArray<z.ZodString>;
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    requestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    type: z.ZodLiteral<"prepare">;
+}, z.core.$strict>, z.ZodObject<{
+    operationId: z.ZodString;
+    stepId: z.ZodString;
+    deadlineAt: z.ZodString;
+    input: z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>;
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    requestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    type: z.ZodLiteral<"execute">;
+}, z.core.$strict>, z.ZodObject<{
+    operationId: z.ZodString;
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    requestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    type: z.ZodLiteral<"cancel">;
+}, z.core.$strict>, z.ZodObject<{
+    operationId: z.ZodString;
+    deadlineAt: z.ZodString;
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    requestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    type: z.ZodLiteral<"collect">;
+}, z.core.$strict>, z.ZodObject<{
+    operationId: z.ZodString;
+    deadlineAt: z.ZodString;
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    requestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    type: z.ZodLiteral<"cleanup">;
+}, z.core.$strict>], "type">;
+export type HostFrame = z.infer<typeof HostFrame>;
+export declare const PluginFrame: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    adapterId: z.ZodString;
+    protocolDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    capabilitiesDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    requestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    type: z.ZodLiteral<"ready">;
+}, z.core.$strict>, z.ZodObject<{
+    operationId: z.ZodString;
+    sequence: z.ZodNumber;
+    stepId: z.ZodString;
+    result: z.ZodEnum<{
+        failed: "failed";
+        cancelled: "cancelled";
+        completed: "completed";
+    }>;
+    reasonCode: z.ZodNullable<z.ZodString>;
+    output: z.ZodNullable<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    requestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    type: z.ZodLiteral<"step_observation">;
+}, z.core.$strict>, z.ZodObject<{
+    operationId: z.ZodString;
+    sequence: z.ZodNumber;
+    artifacts: z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        mediaType: z.ZodString;
+        byteCount: z.ZodNumber;
+        sha256: z.ZodString;
+    }, z.core.$strict>>;
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    requestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    type: z.ZodLiteral<"artifact_manifest">;
+}, z.core.$strict>, z.ZodObject<{
+    sequence: z.ZodNumber;
+    at: z.ZodString;
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    requestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    type: z.ZodLiteral<"heartbeat">;
+}, z.core.$strict>, z.ZodObject<{
+    operationId: z.ZodString;
+    sequence: z.ZodNumber;
+    status: z.ZodEnum<{
+        failed: "failed";
+        cancelled: "cancelled";
+        completed: "completed";
+    }>;
+    reasonCode: z.ZodNullable<z.ZodString>;
+    executionId: z.ZodString;
+    attemptId: z.ZodString;
+    generation: z.ZodNumber;
+    requestDigest: z.ZodObject<{
+        algorithm: z.ZodLiteral<"sha256">;
+        hex: z.ZodString;
+    }, z.core.$strict>;
+    type: z.ZodLiteral<"terminal">;
+}, z.core.$strict>], "type">;
+export type PluginFrame = z.infer<typeof PluginFrame>;

package/dist/protocol/schemas/protocol.js

@@ -0,0 +1,25 @@
+/** workflow.runner-protocol/v1: newline-delimited JSON frames between host and plugin. */
+import { z } from 'zod';
+import { DigestSchema, IdString, IsoDateTime, JsonValue, LIMITS, NonNegInt } from "../primitives.js";
+export const FRAME_MAX_BYTES = 64 * 1024;
+const binding = {
+    executionId: IdString,
+    attemptId: IdString,
+    generation: NonNegInt,
+    requestDigest: DigestSchema,
+};
+export const HostFrame = z.discriminatedUnion('type', [
+    z.object({ type: z.literal('prepare'), ...binding, operationId: IdString, deadlineAt: IsoDateTime, permittedOperations: z.array(IdString).max(64) }).strict(),
+    z.object({ type: z.literal('execute'), ...binding, operationId: IdString, stepId: IdString, deadlineAt: IsoDateTime, input: JsonValue }).strict(),
+    z.object({ type: z.literal('cancel'), ...binding, operationId: IdString }).strict(),
+    z.object({ type: z.literal('collect'), ...binding, operationId: IdString, deadlineAt: IsoDateTime }).strict(),
+    z.object({ type: z.literal('cleanup'), ...binding, operationId: IdString, deadlineAt: IsoDateTime }).strict(),
+]);
+export const PluginFrame = z.discriminatedUnion('type', [
+    z.object({ type: z.literal('ready'), ...binding, adapterId: IdString, protocolDigest: DigestSchema, capabilitiesDigest: DigestSchema }).strict(),
+    z.object({ type: z.literal('step_observation'), ...binding, operationId: IdString, sequence: NonNegInt, stepId: IdString, result: z.enum(['completed', 'failed', 'cancelled']), reasonCode: z.string().max(LIMITS.shortText).nullable(), output: JsonValue.nullable() }).strict(),
+    z.object({ type: z.literal('artifact_manifest'), ...binding, operationId: IdString, sequence: NonNegInt, artifacts: z.array(z.object({ path: z.string().max(LIMITS.shortText), mediaType: z.string().max(100), byteCount: NonNegInt, sha256: z.string().regex(/^[0-9a-f]{64}$/) }).strict()).max(LIMITS.list) }).strict(),
+    z.object({ type: z.literal('heartbeat'), ...binding, sequence: NonNegInt, at: IsoDateTime }).strict(),
+    z.object({ type: z.literal('terminal'), ...binding, operationId: IdString, sequence: NonNegInt, status: z.enum(['completed', 'failed', 'cancelled']), reasonCode: z.string().max(LIMITS.shortText).nullable() }).strict(),
+]);
+//# sourceMappingURL=protocol.js.map

package/dist/protocol/schemas/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../../src/protocol/schemas/protocol.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAErG,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzC,MAAM,OAAO,GAAG;IACd,WAAW,EAAE,QAAQ;IACrB,SAAS,EAAE,QAAQ;IACnB,UAAU,EAAE,SAAS;IACrB,aAAa,EAAE,YAAY;CAC5B,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACpD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7J,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACjJ,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACnF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7G,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CAC9G,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IAChJ,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACjR,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IACzT,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACrG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1N,CAAC,CAAC"}

package/dist/protocol/schemas/recoveryStatus.d.ts

@@ -0,0 +1,88 @@
+import { z } from 'zod';
+export declare const RecoveryStatusCode: z.ZodEnum<{
+    ledger_snapshot_unavailable: "ledger_snapshot_unavailable";
+    ledger_snapshot_changed: "ledger_snapshot_changed";
+    ledger_snapshot_invalid: "ledger_snapshot_invalid";
+    execution_missing: "execution_missing";
+    execution_binding_invalid: "execution_binding_invalid";
+    ownership_missing: "ownership_missing";
+    ownership_invalid: "ownership_invalid";
+    ownership_unresolved: "ownership_unresolved";
+    execution_in_flight: "execution_in_flight";
+    interrupted_without_manifest: "interrupted_without_manifest";
+    committed_evidence_invalid: "committed_evidence_invalid";
+    committed_binding_mismatch: "committed_binding_mismatch";
+    committed_readback_available: "committed_readback_available";
+    finalized_evidence_verified: "finalized_evidence_verified";
+    recovery_inspection_failed: "recovery_inspection_failed";
+}>;
+export declare const RecoveryStatusReport: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<"tracegrove.recovery-status/v1">;
+    exitCode: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<2>]>;
+    code: z.ZodEnum<{
+        ledger_snapshot_unavailable: "ledger_snapshot_unavailable";
+        ledger_snapshot_changed: "ledger_snapshot_changed";
+        ledger_snapshot_invalid: "ledger_snapshot_invalid";
+        execution_missing: "execution_missing";
+        execution_binding_invalid: "execution_binding_invalid";
+        ownership_missing: "ownership_missing";
+        ownership_invalid: "ownership_invalid";
+        ownership_unresolved: "ownership_unresolved";
+        execution_in_flight: "execution_in_flight";
+        interrupted_without_manifest: "interrupted_without_manifest";
+        committed_evidence_invalid: "committed_evidence_invalid";
+        committed_binding_mismatch: "committed_binding_mismatch";
+        committed_readback_available: "committed_readback_available";
+        finalized_evidence_verified: "finalized_evidence_verified";
+        recovery_inspection_failed: "recovery_inspection_failed";
+    }>;
+    recovery: z.ZodString;
+    checkpoint: z.ZodNullable<z.ZodObject<{
+        sequence: z.ZodNumber;
+        digest: z.ZodString;
+    }, z.core.$strict>>;
+    writerLock: z.ZodEnum<{
+        unknown: "unknown";
+        present: "present";
+        absent: "absent";
+    }>;
+    recordedPhase: z.ZodNullable<z.ZodEnum<{
+        other: "other";
+        admitted: "admitted";
+        "cell.finalized": "cell.finalized";
+        interrupted: "interrupted";
+        finalized: "finalized";
+    }>>;
+    resources: z.ZodNullable<z.ZodObject<{
+        host: z.ZodObject<{
+            reserved: z.ZodNumber;
+            observed: z.ZodNumber;
+            cleanup_pending: z.ZodNumber;
+            removed: z.ZodNumber;
+        }, z.core.$strict>;
+        fixture: z.ZodObject<{
+            reserved: z.ZodNumber;
+            observed: z.ZodNumber;
+            cleanup_pending: z.ZodNumber;
+            removed: z.ZodNumber;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    bundle: z.ZodEnum<{
+        absent: "absent";
+        not_checked: "not_checked";
+        invalid: "invalid";
+        verified_bound: "verified_bound";
+    }>;
+    historicalOutcome: z.ZodNullable<z.ZodEnum<{
+        blocked: "blocked";
+        cancelled: "cancelled";
+        passed: "passed";
+        assertion_failed: "assertion_failed";
+        infrastructure_failed: "infrastructure_failed";
+        inconclusive: "inconclusive";
+    }>>;
+    actionAuthority: z.ZodLiteral<"none">;
+    execution: z.ZodLiteral<"not_started_by_inspection">;
+    verificationVerdict: z.ZodLiteral<"not_evaluated">;
+}, z.core.$strict>;
+export type RecoveryStatusReport = z.infer<typeof RecoveryStatusReport>;

package/dist/protocol/schemas/recoveryStatus.js

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+import { CampaignResult } from "./execution.js";
+export const RecoveryStatusCode = z.enum(['ledger_snapshot_unavailable', 'ledger_snapshot_changed', 'ledger_snapshot_invalid',
+    'execution_missing', 'execution_binding_invalid', 'ownership_missing', 'ownership_invalid', 'ownership_unresolved',
+    'execution_in_flight', 'interrupted_without_manifest', 'committed_evidence_invalid', 'committed_binding_mismatch',
+    'committed_readback_available', 'finalized_evidence_verified', 'recovery_inspection_failed']);
+const counts = z.object({ reserved: z.number().int().min(0).max(10000), observed: z.number().int().min(0).max(10000),
+    cleanup_pending: z.number().int().min(0).max(10000), removed: z.number().int().min(0).max(10000) }).strict();
+export const RecoveryStatusReport = z.object({
+    schemaVersion: z.literal('tracegrove.recovery-status/v1'), exitCode: z.union([z.literal(0), z.literal(2)]),
+    code: RecoveryStatusCode, recovery: z.string().min(1).max(512),
+    checkpoint: z.object({ sequence: z.number().int().nonnegative().safe(), digest: z.string().regex(/^[a-f0-9]{64}$/) }).strict().nullable(),
+    writerLock: z.enum(['present', 'absent', 'unknown']),
+    recordedPhase: z.enum(['admitted', 'cell.finalized', 'interrupted', 'finalized', 'other']).nullable(),
+    resources: z.object({ host: counts, fixture: counts }).strict().nullable(),
+    bundle: z.enum(['not_checked', 'absent', 'invalid', 'verified_bound']),
+    historicalOutcome: CampaignResult.shape.outcome.nullable(),
+    actionAuthority: z.literal('none'), execution: z.literal('not_started_by_inspection'), verificationVerdict: z.literal('not_evaluated'),
+}).strict();
+//# sourceMappingURL=recoveryStatus.js.map

package/dist/protocol/schemas/recoveryStatus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"recoveryStatus.js","sourceRoot":"","sources":["../../../src/protocol/schemas/recoveryStatus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAEhD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,6BAA6B,EAAE,yBAAyB,EAAE,yBAAyB;IAC3H,mBAAmB,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,sBAAsB;IAClH,qBAAqB,EAAE,8BAA8B,EAAE,4BAA4B,EAAE,4BAA4B;IACjH,8BAA8B,EAAE,6BAA6B,EAAE,4BAA4B,CAAC,CAAC,CAAC;AAChG,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAClH,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC/G,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,+BAA+B,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,IAAI,EAAE,kBAAkB,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9D,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzI,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;IACpD,aAAa,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IACrG,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1E,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;IACtE,iBAAiB,EAAE,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE;IAC1D,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;CACvI,CAAC,CAAC,MAAM,EAAE,CAAC"}