@agent-surface/core 0.16.0 → 0.18.0

package/dist/{registry-CWjIFWHV.d.ts → registry-B8ICpe42.d.ts}

@@ -720,7 +720,7 @@ type AgentCapabilityDescriptorUnion = AgentObservationDescriptor | AgentActionDe
 declare function matchesScope(type: string, scope: string[] | undefined): boolean;
 
 /** Contract format emitted by @agent-surface/compiler. */
-declare const CAPABILITY_CONTRACT_FORMAT_VERSION: 3;
+declare const CAPABILITY_CONTRACT_FORMAT_VERSION: 5;
 type CapabilityContractKind = "observation" | "action" | "procedure" | "external";
 interface CapabilityPolicyAttachment {
     name: string;
@@ -741,39 +741,48 @@ interface CapabilityContractEntry {
     targets: string[];
     origin: string;
 }
-interface ExternalCapabilityContractDigest {
-    package?: string;
+/**
+ * How a dependency's capabilities entered this manifest.
+ *
+ * Two facts are recorded separately because they answer different questions.
+ * `contractDigest` is *integrity*: what the dependency actually contributed to
+ * this build. `authorization` is *consent*: what the consumer approved. A
+ * dependency that changes its contract moves the first and not the second, and
+ * the build fails until a human updates the allow list.
+ */
+interface ExternalContractAttribution {
+    /** npm package name — the stable key an allow list is written against. */
+    package: string;
+    /** Where the contribution came from, relative to the build root. */
     source: string;
-    digest: string;
+    /** How the dependency contributed. */
+    route: "sidecar" | "source";
+    /** sha256 of the contribution as this build computed it. */
+    contractDigest: string;
+    /** What the consumer explicitly approved. */
+    authorization: {
+        mode: "pinned";
+        expectedDigest: string;
+    };
 }
 interface CapabilityContractManifest {
     formatVersion: typeof CAPABILITY_CONTRACT_FORMAT_VERSION;
     compilerVersion: string;
     targets: string[];
     capabilities: CapabilityContractEntry[];
-    externalContracts: ExternalCapabilityContractDigest[];
+    externalContracts: ExternalContractAttribution[];
     completeness: {
         status: "proven";
     };
     /** sha256 of the canonical manifest payload without this field. */
     hash: string;
 }
-interface CompiledCapabilityToken {
-    manifestHash: string;
-    declarationId: string;
-    capabilityId: string;
-    contractHash: string;
-}
-interface CompiledComponentProvenance {
-    manifestHash: string;
-    declarationId: string;
-    capabilities: Record<string, CompiledCapabilityToken>;
+declare const CAPABILITY_AUTHORITY_TYPE: unique symbol;
+/** Immutable runtime source of truth. Only objects minted here are accepted. */
+interface CapabilityAuthority {
+    readonly manifest: CapabilityContractManifest;
+    readonly [CAPABILITY_AUTHORITY_TYPE]: true;
 }
-/** Shared across duplicate copies of core in a bundle. Not enumerable/serializable. */
-declare const COMPILED_CAPABILITY_PROVENANCE: unique symbol;
-type ProvenanceCarrier = {
-    [COMPILED_CAPABILITY_PROVENANCE]?: CompiledComponentProvenance | CompiledCapabilityToken;
-};
 interface AgentObservationContract<TOut extends JsonValue> {
     description: string;
     output: AgentSchema<TOut>;
@@ -848,7 +857,7 @@ interface AgentComponentContract<TObservations extends Record<string, AgentObser
  * Compiler macro. The second argument is injected by @agent-surface/compiler;
  * author code must never supply it.
  */
-declare function defineAgentComponentContract<TObservations extends Record<string, AgentObservationContract<any>> = Record<never, never>, TActions extends Record<string, AgentActionContract<any, any>> = Record<never, never>>(definition: AgentComponentContractDefinition<TObservations, TActions>, compiled?: CompiledComponentProvenance): AgentComponentContract<TObservations, TActions>;
+declare function defineAgentComponentContract<TObservations extends Record<string, AgentObservationContract<any>> = Record<never, never>, TActions extends Record<string, AgentActionContract<any, any>> = Record<never, never>>(definition: AgentComponentContractDefinition<TObservations, TActions>): AgentComponentContract<TObservations, TActions>;
 interface ExternalAgentToolContractDefinition<TIn extends JsonValue, TOut extends JsonValue> {
     id: string;
     description: string;
@@ -869,17 +878,16 @@ interface AgentProcedureContractDefinition<TIn extends JsonValue, TOut extends J
     policies?: CapabilityPolicyAttachment[];
     tags?: string[];
 }
-interface AgentProcedureContract<TIn extends JsonValue, TOut extends JsonValue> extends ProvenanceCarrier {
+interface AgentProcedureContract<TIn extends JsonValue, TOut extends JsonValue> {
     readonly kind: "agent-procedure-contract";
     readonly definition: AgentProcedureContractDefinition<TIn, TOut>;
 }
-declare function defineAgentProcedureContract<TIn extends JsonValue, TOut extends JsonValue = JsonValue>(definition: AgentProcedureContractDefinition<TIn, TOut>, compiled?: CompiledCapabilityToken): AgentProcedureContract<TIn, TOut>;
+declare function defineAgentProcedureContract<TIn extends JsonValue, TOut extends JsonValue = JsonValue>(definition: AgentProcedureContractDefinition<TIn, TOut>): AgentProcedureContract<TIn, TOut>;
 interface CompiledExternalAgentTool<TIn extends JsonValue = JsonValue, TOut extends JsonValue = JsonValue> {
     name: string;
     description: string;
     inputSchema: JsonSchema;
     execute(input: TIn): TOut | Promise<TOut>;
-    [COMPILED_CAPABILITY_PROVENANCE]: CompiledCapabilityToken;
 }
 interface ExternalAgentToolContract<TIn extends JsonValue, TOut extends JsonValue> {
     readonly kind: "external-agent-tool-contract";
@@ -888,16 +896,19 @@ interface ExternalAgentToolContract<TIn extends JsonValue, TOut extends JsonValu
         execute(input: TIn): TOut | Promise<TOut>;
     }): CompiledExternalAgentTool<TIn, TOut>;
 }
-declare function defineExternalAgentToolContract<TIn extends JsonValue, TOut extends JsonValue = JsonValue>(definition: ExternalAgentToolContractDefinition<TIn, TOut>, compiled?: CompiledCapabilityToken): ExternalAgentToolContract<TIn, TOut>;
-declare function compiledCapabilityToken(contract: AgentProcedureContract<any, any> | ExternalAgentToolContract<any, any>): CompiledCapabilityToken;
-declare function tryCompiledCapabilityToken(contract: AgentProcedureContract<any, any> | ExternalAgentToolContract<any, any>): CompiledCapabilityToken | undefined;
-/** Runtime exposure ceiling used by the registry. */
-declare function assertDefinitionInManifest(definition: AgentComponentDefinition, manifest: CapabilityContractManifest): void;
+declare function defineExternalAgentToolContract<TIn extends JsonValue, TOut extends JsonValue = JsonValue>(definition: ExternalAgentToolContractDefinition<TIn, TOut>): ExternalAgentToolContract<TIn, TOut>;
+/** Preserve compiler proof while an adapter replaces handlers with latest-ref delegates. */
+declare function deriveAgentComponentBinding(source: AgentComponentDefinition, derived: AgentComponentDefinition): AgentComponentDefinition;
+/** Bind a compiled procedure contract to its contextual runtime definition. */
+declare function authorizeAgentProcedureBinding(contract: AgentProcedureContract<any, any>, definition: AgentComponentDefinition): AgentComponentDefinition;
+declare function createCapabilityAuthority(manifest: CapabilityContractManifest): CapabilityAuthority;
+/** Mandatory runtime authority check used by every registry registration. */
+declare function assertDefinitionAuthorized(definition: AgentComponentDefinition, authority: CapabilityAuthority): void;
 interface AgentExposureGateway {
     expose<T extends CompiledExternalAgentTool>(tools: readonly T[]): T[];
 }
 /** Final provider/MCP boundary: arbitrary tool objects cannot pass. */
-declare function createAgentExposureGateway(manifest: CapabilityContractManifest): AgentExposureGateway;
+declare function createAgentExposureGateway(authority: CapabilityAuthority): AgentExposureGateway;
 
 interface RegistrationCandidate {
     definition: AgentComponentDefinition;
@@ -923,8 +934,8 @@ interface RegistryOptions {
     limits?: Partial<AgentSurfaceLimits>;
     /** Injectable clock (docs/08 determinism); default Date.now. */
     now?: () => number;
-    /** Compiler-generated runtime ceiling. When present, raw/stale bindings fail closed. */
-    manifest?: CapabilityContractManifest;
+    /** Compiler-generated runtime source of truth. Required outside repository tests. */
+    authority?: CapabilityAuthority;
 }
 interface AgentRegistrationHandle {
     readonly registrationId: string;
@@ -956,4 +967,4 @@ interface AgentSurfaceRegistry {
 }
 declare function createAgentSurfaceRegistry(options?: RegistryOptions): AgentSurfaceRegistry;
 
-export { type AgentSurfaceLimits as $, type AgentRouteInfo as A, type AgentObservationContract as B, type AgentObservationDefinition as C, type DiscoveryDecision as D, type AgentObservationDescriptor as E, type AgentPolicy as F, type AgentPolicyContext as G, type AgentProcedureBinding as H, type AgentProcedureBindingRuntimeConfig as I, type JsonSchema as J, type AgentProcedureContract as K, type AgentProcedureContractDefinition as L, type AgentProcedureDescriptor as M, type AgentProcedureEffect as N, type AgentProcedureExecutor as O, type AgentProcedureRefDescriptor as P, type AgentReadContext as Q, type AgentRegistrationHandle as R, type SnapshotContext as S, type AgentSchema as T, type Unsubscribe as U, AgentSchemaError as V, type AgentSchemaIssue as W, AgentSurfaceDefinitionError as X, type AgentSurfaceDefinitionErrorCode as Y, AgentSurfaceError as Z, type AgentSurfaceEvent as _, type AgentConsumer as a, type AgentSurfaceSnapshot as a0, type AuditEvent as a1, type AuditSink as a2, CAPABILITY_CONTRACT_FORMAT_VERSION as a3, COMPILED_CAPABILITY_PROVENANCE as a4, CONFIRMATION_ESCALATION as a5, type CapabilityContractEntry as a6, type CapabilityContractKind as a7, type CapabilityContractManifest as a8, type CapabilityPolicyAttachment as a9, defineAgentComponent as aA, defineAgentComponentContract as aB, defineAgentProcedureContract as aC, defineExternalAgentToolContract as aD, emptyObjectSchema as aE, environment as aF, evaluateDiscovery as aG, fromJsonSchema as aH, fromStandardSchema as aI, hasPermission as aJ, isAgentSurfaceError as aK, memoryAuditSink as aL, observation as aM, observationContract as aN, rateLimit as aO, requireConfirmation as aP, tenantBoundary as aQ, tryCompiledCapabilityToken as aR, validateComponentDefinition as aS, validateJsonSchemaDocument as aT, validateValueAgainstSchema as aU, type CompiledCapabilityToken as aa, type CompiledComponentProvenance as ab, type CompiledExternalAgentTool as ac, type ConfirmationController as ad, type ConfirmationEscalation as ae, DEFAULT_LIMITS as af, type ExternalAgentToolContract as ag, type ExternalAgentToolContractDefinition as ah, type ExternalCapabilityContractDigest as ai, type InvokeOptions as aj, type PendingConfirmation as ak, type PreconditionFailure as al, type ProcedureCallInfo as am, type RegistrationCandidate as an, type RegistryOptions as ao, type StandardSchemaV1 as ap, action as aq, actionContract as ar, assertDefinitionInManifest as as, audit as at, authenticated as au, compiledCapabilityToken as av, composeInvokeChain as aw, consoleAuditSink as ax, createAgentExposureGateway as ay, createAgentSurfaceRegistry as az, type AgentSurfaceRegistry as b, type JsonValue as c, type AgentInvocationResult as d, AGENT_CAPABILITY_ERROR_CODES as e, type AgentActionContext as f, type AgentActionContract as g, type AgentActionDefinition as h, type AgentActionDescriptor as i, type AgentAuthorizationContext as j, type AgentCapabilityDescriptorUnion as k, type AgentCapabilityErrorCode as l, matchesScope as m, type AgentCapabilityErrorPayload as n, type AgentComponentContract as o, type AgentComponentContractDefinition as p, type AgentComponentDefinition as q, type AgentComponentDescriptor as r, type AgentComponentRuntimeBindings as s, type AgentConcurrency as t, type AgentEffect as u, type AgentEnvironment as v, type AgentErrorRetry as w, type AgentExposureGateway as x, type AgentInvocation as y, type AgentInvocationPolicyContext as z };
+export { type AgentSurfaceLimits as $, type AgentRouteInfo as A, type AgentObservationContract as B, type AgentObservationDefinition as C, type DiscoveryDecision as D, type AgentObservationDescriptor as E, type AgentPolicy as F, type AgentPolicyContext as G, type AgentProcedureBinding as H, type AgentProcedureBindingRuntimeConfig as I, type JsonSchema as J, type AgentProcedureContract as K, type AgentProcedureContractDefinition as L, type AgentProcedureDescriptor as M, type AgentProcedureEffect as N, type AgentProcedureExecutor as O, type AgentProcedureRefDescriptor as P, type AgentReadContext as Q, type AgentRegistrationHandle as R, type SnapshotContext as S, type AgentSchema as T, type Unsubscribe as U, AgentSchemaError as V, type AgentSchemaIssue as W, AgentSurfaceDefinitionError as X, type AgentSurfaceDefinitionErrorCode as Y, AgentSurfaceError as Z, type AgentSurfaceEvent as _, type AgentConsumer as a, type AgentSurfaceSnapshot as a0, type AuditEvent as a1, type AuditSink as a2, CAPABILITY_CONTRACT_FORMAT_VERSION as a3, CONFIRMATION_ESCALATION as a4, type CapabilityAuthority as a5, type CapabilityContractEntry as a6, type CapabilityContractKind as a7, type CapabilityContractManifest as a8, type CapabilityPolicyAttachment as a9, defineAgentComponentContract as aA, defineAgentProcedureContract as aB, defineExternalAgentToolContract as aC, deriveAgentComponentBinding as aD, emptyObjectSchema as aE, environment as aF, evaluateDiscovery as aG, fromJsonSchema as aH, fromStandardSchema as aI, hasPermission as aJ, isAgentSurfaceError as aK, memoryAuditSink as aL, observation as aM, observationContract as aN, rateLimit as aO, requireConfirmation as aP, tenantBoundary as aQ, validateComponentDefinition as aR, validateJsonSchemaDocument as aS, validateValueAgainstSchema as aT, type CompiledExternalAgentTool as aa, type ConfirmationController as ab, type ConfirmationEscalation as ac, DEFAULT_LIMITS as ad, type ExternalAgentToolContract as ae, type ExternalAgentToolContractDefinition as af, type ExternalContractAttribution as ag, type InvokeOptions as ah, type PendingConfirmation as ai, type PreconditionFailure as aj, type ProcedureCallInfo as ak, type RegistrationCandidate as al, type RegistryOptions as am, type StandardSchemaV1 as an, action as ao, actionContract as ap, assertDefinitionAuthorized as aq, audit as ar, authenticated as as, authorizeAgentProcedureBinding as at, composeInvokeChain as au, consoleAuditSink as av, createAgentExposureGateway as aw, createAgentSurfaceRegistry as ax, createCapabilityAuthority as ay, defineAgentComponent as az, type AgentSurfaceRegistry as b, type JsonValue as c, type AgentInvocationResult as d, AGENT_CAPABILITY_ERROR_CODES as e, type AgentActionContext as f, type AgentActionContract as g, type AgentActionDefinition as h, type AgentActionDescriptor as i, type AgentAuthorizationContext as j, type AgentCapabilityDescriptorUnion as k, type AgentCapabilityErrorCode as l, matchesScope as m, type AgentCapabilityErrorPayload as n, type AgentComponentContract as o, type AgentComponentContractDefinition as p, type AgentComponentDefinition as q, type AgentComponentDescriptor as r, type AgentComponentRuntimeBindings as s, type AgentConcurrency as t, type AgentEffect as u, type AgentEnvironment as v, type AgentErrorRetry as w, type AgentExposureGateway as x, type AgentInvocation as y, type AgentInvocationPolicyContext as z };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-surface/core",
-  "version": "0.16.0",
+  "version": "0.18.0",
   "description": "Framework-agnostic registry, types, policies, errors, snapshot, invocation for frontend agent surfaces",
   "license": "MIT",
   "type": "module",
@@ -58,7 +58,7 @@
   "size-limit": [
     {
       "path": "dist/index.js",
-      "limit": "20.5 kB"
+      "limit": "22 kB"
     },
     {
       "path": "dist/explain.js",