@agentguard-run/spend 0.14.1 → 0.15.1

package/CHANGELOG.md

@@ -1,3 +1,14 @@
+## 0.15.1
+
+- Removed import-time `sdk_init` telemetry from package entry points. Telemetry remains opt-in and now fires lazily when `SpendGuard` is constructed.
+- Added lazy-import regression tests so root SDK and Operating Pack imports make zero HTTP calls and open zero network sockets even when telemetry is enabled.
+
+## 0.15.0
+
+- Added the Agent Operating Pack for law: bundled AGENTS.md guardrails, five local skills, source-of-truth layout, DIY checklist, and counsel-review-pending marker.
+- Added TypeScript and Python Operating Pack envelopes with capability gates, per-workflow spend caps, Reviewer Cascade on the high-risk subset, and Ed25519 signed metadata-only DAG receipts.
+- Added tests for static pack guardrails, dispatch and trust-account gating, Reviewer Cascade receipts, tamper detection, and zero-data-plane behavior.
+
 ## 0.14.0
 
 - Added Hermes Kanban adapters for TypeScript and Python with governed task envelopes, per-task spend caps, profile capability ceilings, reclaim receipts, and signed DAG receipt trees.

package/dist/index.d.ts

@@ -33,7 +33,7 @@ export { withSpendGuardAnthropic, type AnthropicBindingOptions } from './binding
 export { withSpendGuardBedrock, type BedrockBindingOptions } from './bindings/bedrock';
 export { recommend, defaultKey, type ModelRouteRecommendation, type RecommendOptions } from './router';
 export { DEFAULT_LOCALE, SUPPORTED_LOCALES, TRANSLATIONS, type SupportedLocale, resolveLocale, t, formatBlockedTrace, type BlockedTraceArgs, } from './i18n';
-export declare const AGENTGUARD_SPEND_VERSION = "0.14.1";
+export declare const AGENTGUARD_SPEND_VERSION = "0.15.1";
 export declare const agentguard: {
     workflow: typeof runWorkflow;
 };
@@ -44,4 +44,5 @@ export * from './verticals';
 export * from './governance';
 export * from './byo';
 export * from './frameworks';
+export * from './operating-pack';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG7D,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,eAAe,EACf,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,EACf,KAAK,SAAS,GACf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAGvK,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,cAAc,GACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,yBAAyB,EACzB,8BAA8B,EAC9B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,GACjC,MAAM,wBAAwB,CAAC;AAKhC,YAAY,EACV,UAAU,EACV,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAChK,OAAO,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG/J,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EACT,uBAAuB,EACvB,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGxG,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,wBAAwB,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGvG,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,KAAK,eAAe,EACpB,aAAa,EACb,CAAC,EACD,kBAAkB,EAClB,KAAK,gBAAgB,GACtB,MAAM,QAAQ,CAAC;AAEhB,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAGjD,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,aAAa,QAG8B,CAAC;AAGzD,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,OAAO,CAAC;AAEtB,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG7D,YAAY,EACV,WAAW,EACX,WAAW,EACX,QAAQ,EACR,eAAe,EACf,cAAc,EACd,QAAQ,EACR,UAAU,EACV,WAAW,EACX,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,UAAU,EACV,gBAAgB,GACjB,MAAM,SAAS,CAAC;AAGjB,OAAO,EACL,YAAY,EACZ,eAAe,EACf,kBAAkB,EAClB,gBAAgB,EAChB,aAAa,EACb,iBAAiB,EACjB,0BAA0B,EAC1B,oBAAoB,EACpB,eAAe,EACf,KAAK,SAAS,GACf,MAAM,cAAc,CAAC;AAGtB,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,uBAAuB,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAGvK,OAAO,EACL,aAAa,EACb,SAAS,EACT,gBAAgB,EAChB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,WAAW,EACX,qBAAqB,EACrB,wBAAwB,GACzB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAGpD,OAAO,EACL,8BAA8B,EAC9B,kBAAkB,EAClB,0BAA0B,EAC1B,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,yBAAyB,EAC9B,KAAK,cAAc,GACpB,MAAM,WAAW,CAAC;AAGnB,OAAO,EACL,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,EACpB,KAAK,eAAe,GACrB,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,YAAY,EACZ,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,yBAAyB,EACzB,8BAA8B,EAC9B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,GACjC,MAAM,wBAAwB,CAAC;AAKhC,YAAY,EACV,UAAU,EACV,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACvF,OAAO,EACL,kBAAkB,EAClB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,oBAAoB,EACpB,UAAU,EACV,kBAAkB,EAClB,WAAW,EACX,eAAe,EACf,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAC5B,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,4BAA4B,EACjC,KAAK,eAAe,GACrB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAAE,KAAK,iBAAiB,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvG,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAChK,OAAO,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,KAAK,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAG/J,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,wBAAwB,EACxB,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,SAAS,EACT,uBAAuB,EACvB,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,kBAAkB,CAAC;AAG1B,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,sBAAsB,EACtB,gBAAgB,EAChB,KAAK,sBAAsB,EAC3B,KAAK,gBAAgB,GACtB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,KAAK,aAAa,EAAE,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC3H,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAE,KAAK,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGxG,OAAO,EACL,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,GAC5B,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,uBAAuB,EAAE,KAAK,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC7F,OAAO,EAAE,qBAAqB,EAAE,KAAK,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AACvF,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,KAAK,wBAAwB,EAAE,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAGvG,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,KAAK,eAAe,EACpB,aAAa,EACb,CAAC,EACD,kBAAkB,EAClB,KAAK,gBAAgB,GACtB,MAAM,QAAQ,CAAC;AAEhB,eAAO,MAAM,wBAAwB,WAAW,CAAC;AAGjD,eAAO,MAAM,UAAU;;CAEtB,CAAC;AAEF,2DAA2D;AAC3D,eAAO,MAAM,aAAa,QAG8B,CAAC;AACzD,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,OAAO,CAAC;AAEtB,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -24,7 +24,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.computeDagEntryHash = exports.compressReceiptDag = exports.receiptSchemaVersion = exports.isReceiptV3 = exports.assertReceiptV3 = exports.isOpenRouterHost = exports.clearManagedOpenRouterKeyCache = exports.fetchManagedOpenRouterKey = exports.modelCostFromOpenRouter = exports.persistOverrides = exports.syncPricingIntoCostTable = exports.getCachedCatalog = exports.fetchCatalog = exports.recordTelemetryEvent = exports.resetTelemetryInstallId = exports.disableTelemetry = exports.enableTelemetry = exports.telemetryStatus = exports.licenseKeyFingerprint = exports.clearConfiguredLicenseKey = exports.writeConfiguredLicenseKey = exports.readConfiguredLicenseKey = exports.validateAndRegisterLicense = exports.validateLicenseKey = exports.AgentGuardLicenseRequiredError = exports.InMemorySpendStore = exports.InMemoryDecisionLogStore = exports.GENESIS_PREVIOUS_HASH = exports.verifyChain = exports.verifyEntry = exports.signDecision = exports.computeSignerFingerprint = exports.computeEntryHash = exports.sha256Hex = exports.canonicalJson = exports.BUILT_IN_KEYWORD_WATCHLISTS = exports.findCustomKeywordWatchlists = exports.enforcePolicyLicenseGates = exports.adjustPolicyWindowSpend = exports.buildScopeKey = exports.evaluatePolicy = exports.knownModelCosts = exports.persistCostOverrides = exports.loadPersistedCostOverrides = exports.listCostOverrides = exports.inferProvider = exports.computeCallCents = exports.clearCostOverrides = exports.setCostOverride = exports.getModelCost = void 0;
 exports.formatBlockedTrace = exports.t = exports.resolveLocale = exports.TRANSLATIONS = exports.SUPPORTED_LOCALES = exports.DEFAULT_LOCALE = exports.defaultKey = exports.recommend = exports.withSpendGuardBedrock = exports.withSpendGuardAnthropic = exports.AgentGuardBlockedError = exports.withSpendGuard = exports.SpendGuard = exports.writeAdvisorOutputs = exports.createAdvisorSessionLogger = exports.resolveAdvisorApiKey = exports.createAdvisorClient = exports.projectedSavings = exports.buildPolicyFromProfile = exports.buildBusinessProfile = exports.AdvisorConversation = exports.AgentGuardWorkflowStateError = exports.AgentGuardDurationCapError = exports.AgentGuardChainCorruptError = exports.AgentGuardBudgetCapError = exports.validateReceiptChain = exports.computeChainHash = exports.WorkflowContext = exports.workflow = exports.verifyConsentReceipt = exports.enforceCompliance = exports.AgentGuardConsentRequiredError = exports.AgentGuardComplianceError = exports.isForeignOriginModel = exports.inferCompliance = exports.inferHosting = exports.inferModelIdentity = exports.inferProviderRoute = exports.PROVIDER_REGISTRY = exports.captureProvenance = exports.verifyReceiptDag = exports.verifyInclusion = exports.signDagNode = exports.msgHashForDecision = exports.merkleRoot = exports.merkleInclusionProof = exports.gateCapability = exports.deriveTrustScore = exports.deriveCapability = exports.dagEnvelopeFromEntries = void 0;
 exports.PATENT_NOTICE = exports.agentguard = exports.AGENTGUARD_SPEND_VERSION = void 0;
-const telemetry_1 = require("./telemetry");
 const context_1 = require("./workflow/context");
 // Cost table
 var cost_table_1 = require("./cost-table");
@@ -69,12 +68,12 @@ Object.defineProperty(exports, "writeConfiguredLicenseKey", { enumerable: true,
 Object.defineProperty(exports, "clearConfiguredLicenseKey", { enumerable: true, get: function () { return license_1.clearConfiguredLicenseKey; } });
 Object.defineProperty(exports, "licenseKeyFingerprint", { enumerable: true, get: function () { return license_1.licenseKeyFingerprint; } });
 // Telemetry controls
-var telemetry_2 = require("./telemetry");
-Object.defineProperty(exports, "telemetryStatus", { enumerable: true, get: function () { return telemetry_2.telemetryStatus; } });
-Object.defineProperty(exports, "enableTelemetry", { enumerable: true, get: function () { return telemetry_2.enableTelemetry; } });
-Object.defineProperty(exports, "disableTelemetry", { enumerable: true, get: function () { return telemetry_2.disableTelemetry; } });
-Object.defineProperty(exports, "resetTelemetryInstallId", { enumerable: true, get: function () { return telemetry_2.resetTelemetryInstallId; } });
-Object.defineProperty(exports, "recordTelemetryEvent", { enumerable: true, get: function () { return telemetry_2.recordTelemetryEvent; } });
+var telemetry_1 = require("./telemetry");
+Object.defineProperty(exports, "telemetryStatus", { enumerable: true, get: function () { return telemetry_1.telemetryStatus; } });
+Object.defineProperty(exports, "enableTelemetry", { enumerable: true, get: function () { return telemetry_1.enableTelemetry; } });
+Object.defineProperty(exports, "disableTelemetry", { enumerable: true, get: function () { return telemetry_1.disableTelemetry; } });
+Object.defineProperty(exports, "resetTelemetryInstallId", { enumerable: true, get: function () { return telemetry_1.resetTelemetryInstallId; } });
+Object.defineProperty(exports, "recordTelemetryEvent", { enumerable: true, get: function () { return telemetry_1.recordTelemetryEvent; } });
 // OpenRouter catalog
 var openrouter_catalog_1 = require("./openrouter-catalog");
 Object.defineProperty(exports, "fetchCatalog", { enumerable: true, get: function () { return openrouter_catalog_1.fetchCatalog; } });
@@ -161,7 +160,7 @@ Object.defineProperty(exports, "TRANSLATIONS", { enumerable: true, get: function
 Object.defineProperty(exports, "resolveLocale", { enumerable: true, get: function () { return i18n_1.resolveLocale; } });
 Object.defineProperty(exports, "t", { enumerable: true, get: function () { return i18n_1.t; } });
 Object.defineProperty(exports, "formatBlockedTrace", { enumerable: true, get: function () { return i18n_1.formatBlockedTrace; } });
-exports.AGENTGUARD_SPEND_VERSION = '0.14.1';
+exports.AGENTGUARD_SPEND_VERSION = '0.15.1';
 exports.agentguard = {
     workflow: context_1.workflow,
 };
@@ -169,10 +168,10 @@ exports.agentguard = {
 exports.PATENT_NOTICE = 'Protected by U.S. patent-pending technology ' +
     '(App. Nos. 63/983,615; 63/983,621; 63/983,843; 63/984,626; ' +
     '64/071,781; 64/071,789). Additional patents pending.';
-(0, telemetry_1.recordTelemetryEvent)('sdk_init');
 __exportStar(require("./outcomes"), exports);
 __exportStar(require("./verticals"), exports);
 __exportStar(require("./governance"), exports);
 __exportStar(require("./byo"), exports);
 __exportStar(require("./frameworks"), exports);
+__exportStar(require("./operating-pack"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;AAEH,2CAA8E;AAC9E,gDAA6D;AAmB7D,aAAa;AACb,2CAWsB;AAVpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,gHAAA,kBAAkB,OAAA;AAClB,8GAAA,gBAAgB,OAAA;AAChB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,wHAAA,0BAA0B,OAAA;AAC1B,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAIjB,gBAAgB;AAChB,mCAAuK;AAA9J,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,iHAAA,uBAAuB,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAEpJ,eAAe;AACf,+CAUwB;AATtB,6GAAA,aAAa,OAAA;AACb,yGAAA,SAAS,OAAA;AACT,gHAAA,gBAAgB,OAAA;AAChB,wHAAA,wBAAwB,OAAA;AACxB,4GAAA,YAAY,OAAA;AACZ,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,qHAAA,qBAAqB,OAAA;AACrB,wHAAA,wBAAwB,OAAA;AAG1B,wBAAwB;AACxB,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,mBAAmB;AACnB,qCAWmB;AAVjB,yHAAA,8BAA8B,OAAA;AAC9B,6GAAA,kBAAkB,OAAA;AAClB,qHAAA,0BAA0B,OAAA;AAC1B,mHAAA,wBAAwB,OAAA;AACxB,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AAMvB,qBAAqB;AACrB,yCAOqB;AANnB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AAItB,qBAAqB;AACrB,2DAS8B;AAR5B,kHAAA,YAAY,OAAA;AACZ,sHAAA,gBAAgB,OAAA;AAChB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,6HAAA,uBAAuB,OAAA;AAMzB,oDAMgC;AAL9B,sHAAA,yBAAyB,OAAA;AACzB,2HAAA,8BAA8B,OAAA;AAC9B,6GAAA,gBAAgB,OAAA;AAoBlB,4CAAuF;AAA9E,yGAAA,eAAe,OAAA;AAAE,qGAAA,WAAW,OAAA;AAAE,8GAAA,oBAAoB,OAAA;AAC3D,sCAuBwB;AAtBtB,yGAAA,kBAAkB,OAAA;AAClB,0GAAA,mBAAmB,OAAA;AACnB,6GAAA,sBAAsB,OAAA;AACtB,uGAAA,gBAAgB,OAAA;AAChB,uGAAA,gBAAgB,OAAA;AAChB,qGAAA,cAAc,OAAA;AACd,2GAAA,oBAAoB,OAAA;AACpB,iGAAA,UAAU,OAAA;AACV,yGAAA,kBAAkB,OAAA;AAClB,kGAAA,WAAW,OAAA;AACX,sGAAA,eAAe,OAAA;AACf,uGAAA,gBAAgB,OAAA;AAYlB,sDAAuG;AAA9F,+GAAA,iBAAiB,OAAA;AAC1B,oEAAgK;AAAvJ,sHAAA,iBAAiB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,iHAAA,YAAY,OAAA;AAAE,oHAAA,eAAe,OAAA;AAAE,yHAAA,oBAAoB,OAAA;AACvH,6CAA+J;AAAtJ,oHAAA,yBAAyB,OAAA;AAAE,yHAAA,8BAA8B,OAAA;AAAE,4GAAA,iBAAiB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AAE3G,qBAAqB;AACrB,8CAA+D;AAAtD,mGAAA,QAAQ,OAAA;AAAE,0GAAA,eAAe,OAAA;AAClC,8DAAoF;AAA3E,mHAAA,gBAAgB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAC/C,4CAK2B;AAJzB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,oHAAA,0BAA0B,OAAA;AAC1B,sHAAA,4BAA4B,OAAA;AAY9B,sBAAsB;AACtB,uDAOgC;AAN9B,mHAAA,mBAAmB,OAAA;AACnB,oHAAA,oBAAoB,OAAA;AACpB,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAIlB,mDAA2H;AAAlH,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAClD,2CAAwG;AAA/F,oHAAA,0BAA0B,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAExD,eAAe;AACf,6CAQuB;AAPrB,yGAAA,UAAU,OAAA;AACV,6GAAA,cAAc,OAAA;AACd,qHAAA,sBAAsB,OAAA;AAOxB,kDAA6F;AAApF,oHAAA,uBAAuB,OAAA;AAChC,8CAAuF;AAA9E,gHAAA,qBAAqB,OAAA;AAC9B,mCAAuG;AAA9F,mGAAA,SAAS,OAAA;AAAE,oGAAA,UAAU,OAAA;AAE9B,sCAAsC;AACtC,+BASgB;AARd,sGAAA,cAAc,OAAA;AACd,yGAAA,iBAAiB,OAAA;AACjB,oGAAA,YAAY,OAAA;AAEZ,qGAAA,aAAa,OAAA;AACb,yFAAA,CAAC,OAAA;AACD,0GAAA,kBAAkB,OAAA;AAIP,QAAA,wBAAwB,GAAG,QAAQ,CAAC;AAGpC,QAAA,UAAU,GAAG;IACxB,QAAQ,EAAE,kBAAW;CACtB,CAAC;AAEF,2DAA2D;AAC9C,QAAA,aAAa,GACxB,8CAA8C;IAC9C,6DAA6D;IAC7D,sDAAsD,CAAC;AACzD,IAAA,gCAAuB,EAAC,UAAU,CAAC,CAAC;AAEpC,6CAA2B;AAC3B,8CAA4B;AAC5B,+CAA6B;AAC7B,wCAAsB;AAEtB,+CAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;;;;;;;;;;;;;;;;;AAEH,gDAA6D;AAmB7D,aAAa;AACb,2CAWsB;AAVpB,0GAAA,YAAY,OAAA;AACZ,6GAAA,eAAe,OAAA;AACf,gHAAA,kBAAkB,OAAA;AAClB,8GAAA,gBAAgB,OAAA;AAChB,2GAAA,aAAa,OAAA;AACb,+GAAA,iBAAiB,OAAA;AACjB,wHAAA,0BAA0B,OAAA;AAC1B,kHAAA,oBAAoB,OAAA;AACpB,6GAAA,eAAe,OAAA;AAIjB,gBAAgB;AAChB,mCAAuK;AAA9J,wGAAA,cAAc,OAAA;AAAE,uGAAA,aAAa,OAAA;AAAE,iHAAA,uBAAuB,OAAA;AAAE,mHAAA,yBAAyB,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAAE,qHAAA,2BAA2B,OAAA;AAEpJ,eAAe;AACf,+CAUwB;AATtB,6GAAA,aAAa,OAAA;AACb,yGAAA,SAAS,OAAA;AACT,gHAAA,gBAAgB,OAAA;AAChB,wHAAA,wBAAwB,OAAA;AACxB,4GAAA,YAAY,OAAA;AACZ,2GAAA,WAAW,OAAA;AACX,2GAAA,WAAW,OAAA;AACX,qHAAA,qBAAqB,OAAA;AACrB,wHAAA,wBAAwB,OAAA;AAG1B,wBAAwB;AACxB,+CAAoD;AAA3C,kHAAA,kBAAkB,OAAA;AAE3B,mBAAmB;AACnB,qCAWmB;AAVjB,yHAAA,8BAA8B,OAAA;AAC9B,6GAAA,kBAAkB,OAAA;AAClB,qHAAA,0BAA0B,OAAA;AAC1B,mHAAA,wBAAwB,OAAA;AACxB,oHAAA,yBAAyB,OAAA;AACzB,oHAAA,yBAAyB,OAAA;AACzB,gHAAA,qBAAqB,OAAA;AAMvB,qBAAqB;AACrB,yCAOqB;AANnB,4GAAA,eAAe,OAAA;AACf,4GAAA,eAAe,OAAA;AACf,6GAAA,gBAAgB,OAAA;AAChB,oHAAA,uBAAuB,OAAA;AACvB,iHAAA,oBAAoB,OAAA;AAItB,qBAAqB;AACrB,2DAS8B;AAR5B,kHAAA,YAAY,OAAA;AACZ,sHAAA,gBAAgB,OAAA;AAChB,8HAAA,wBAAwB,OAAA;AACxB,sHAAA,gBAAgB,OAAA;AAChB,6HAAA,uBAAuB,OAAA;AAMzB,oDAMgC;AAL9B,sHAAA,yBAAyB,OAAA;AACzB,2HAAA,8BAA8B,OAAA;AAC9B,6GAAA,gBAAgB,OAAA;AAoBlB,4CAAuF;AAA9E,yGAAA,eAAe,OAAA;AAAE,qGAAA,WAAW,OAAA;AAAE,8GAAA,oBAAoB,OAAA;AAC3D,sCAuBwB;AAtBtB,yGAAA,kBAAkB,OAAA;AAClB,0GAAA,mBAAmB,OAAA;AACnB,6GAAA,sBAAsB,OAAA;AACtB,uGAAA,gBAAgB,OAAA;AAChB,uGAAA,gBAAgB,OAAA;AAChB,qGAAA,cAAc,OAAA;AACd,2GAAA,oBAAoB,OAAA;AACpB,iGAAA,UAAU,OAAA;AACV,yGAAA,kBAAkB,OAAA;AAClB,kGAAA,WAAW,OAAA;AACX,sGAAA,eAAe,OAAA;AACf,uGAAA,gBAAgB,OAAA;AAYlB,sDAAuG;AAA9F,+GAAA,iBAAiB,OAAA;AAC1B,oEAAgK;AAAvJ,sHAAA,iBAAiB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,uHAAA,kBAAkB,OAAA;AAAE,iHAAA,YAAY,OAAA;AAAE,oHAAA,eAAe,OAAA;AAAE,yHAAA,oBAAoB,OAAA;AACvH,6CAA+J;AAAtJ,oHAAA,yBAAyB,OAAA;AAAE,yHAAA,8BAA8B,OAAA;AAAE,4GAAA,iBAAiB,OAAA;AAAE,+GAAA,oBAAoB,OAAA;AAE3G,qBAAqB;AACrB,8CAA+D;AAAtD,mGAAA,QAAQ,OAAA;AAAE,0GAAA,eAAe,OAAA;AAClC,8DAAoF;AAA3E,mHAAA,gBAAgB,OAAA;AAAE,uHAAA,oBAAoB,OAAA;AAC/C,4CAK2B;AAJzB,kHAAA,wBAAwB,OAAA;AACxB,qHAAA,2BAA2B,OAAA;AAC3B,oHAAA,0BAA0B,OAAA;AAC1B,sHAAA,4BAA4B,OAAA;AAY9B,sBAAsB;AACtB,uDAOgC;AAN9B,mHAAA,mBAAmB,OAAA;AACnB,oHAAA,oBAAoB,OAAA;AACpB,sHAAA,sBAAsB,OAAA;AACtB,gHAAA,gBAAgB,OAAA;AAIlB,mDAA2H;AAAlH,iHAAA,mBAAmB,OAAA;AAAE,kHAAA,oBAAoB,OAAA;AAClD,2CAAwG;AAA/F,oHAAA,0BAA0B,OAAA;AAAE,6GAAA,mBAAmB,OAAA;AAExD,eAAe;AACf,6CAQuB;AAPrB,yGAAA,UAAU,OAAA;AACV,6GAAA,cAAc,OAAA;AACd,qHAAA,sBAAsB,OAAA;AAOxB,kDAA6F;AAApF,oHAAA,uBAAuB,OAAA;AAChC,8CAAuF;AAA9E,gHAAA,qBAAqB,OAAA;AAC9B,mCAAuG;AAA9F,mGAAA,SAAS,OAAA;AAAE,oGAAA,UAAU,OAAA;AAE9B,sCAAsC;AACtC,+BASgB;AARd,sGAAA,cAAc,OAAA;AACd,yGAAA,iBAAiB,OAAA;AACjB,oGAAA,YAAY,OAAA;AAEZ,qGAAA,aAAa,OAAA;AACb,yFAAA,CAAC,OAAA;AACD,0GAAA,kBAAkB,OAAA;AAIP,QAAA,wBAAwB,GAAG,QAAQ,CAAC;AAGpC,QAAA,UAAU,GAAG;IACxB,QAAQ,EAAE,kBAAW;CACtB,CAAC;AAEF,2DAA2D;AAC9C,QAAA,aAAa,GACxB,8CAA8C;IAC9C,6DAA6D;IAC7D,sDAAsD,CAAC;AACzD,6CAA2B;AAC3B,8CAA4B;AAC5B,+CAA6B;AAC7B,wCAAsB;AAEtB,+CAA6B;AAC7B,mDAAiC"}

package/dist/operating-pack.d.ts

@@ -0,0 +1,88 @@
+import { verifyReceiptDag, type ReceiptCapabilityLevel, type ReceiptDagEnvelope, type ReceiptDagNode } from './receipts/dag';
+export type OperatingPackVertical = 'law';
+export type OperatingPackActionKind = 'intake' | 'conflict_check' | 'document_summary' | 'billing_reconciliation' | 'client_update_draft' | 'send_client_email' | 'trust_account_action';
+export interface OperatingPackSigningKeys {
+    privateKey: Uint8Array;
+    publicKey: Uint8Array;
+}
+export interface OperatingPackReviewerCascadeOptions {
+    enabled?: boolean;
+    drafterModel?: string;
+    reviewerModel?: string;
+    triggerThreshold?: number;
+    drafterMaxCostCents?: number;
+    reviewerMaxCostCents?: number;
+}
+export interface OperatingPackOptions {
+    vertical: OperatingPackVertical;
+    workflowId: string;
+    signingKeys: OperatingPackSigningKeys;
+    approvedCapabilities?: ReceiptCapabilityLevel[];
+    reviewerCascade?: OperatingPackReviewerCascadeOptions;
+    maxWorkflowCostCents?: number;
+}
+export interface OperatingPackAction {
+    actionId: string;
+    kind: OperatingPackActionKind;
+    capability?: ReceiptCapabilityLevel;
+    highRisk?: boolean;
+    highRiskClassifierScore?: number;
+    keywordRisk?: boolean;
+    modelIds?: string[];
+    tokenCounts?: {
+        inputTokens?: number;
+        outputTokens?: number;
+    };
+    totalCostCents?: number;
+    metadata?: Record<string, unknown>;
+    reviewerVerdict?: 'drafter_only' | 'review_required' | 'approved' | 'rejected';
+}
+export interface OperatingPackGuardResult {
+    allowed: boolean;
+    reason: string;
+    node: ReceiptDagNode;
+    dag: ReceiptDagEnvelope;
+    reviewerCascadeTriggered: boolean;
+    spentCents: number;
+}
+export interface OperatingPackSkillTemplate {
+    slug: string;
+    title: string;
+    capability: ReceiptCapabilityLevel;
+    reviewerCascade: boolean;
+    markdown: string;
+}
+export interface OperatingPackDefinition {
+    vertical: OperatingPackVertical;
+    title: string;
+    counselReviewPending: boolean;
+    agentsMd: string;
+    skills: Record<string, OperatingPackSkillTemplate>;
+    sourceOfTruth: string;
+    checklist: string[];
+    capabilityTable: Array<{
+        capability: ReceiptCapabilityLevel;
+        use: string;
+        blockedExamples: string[];
+    }>;
+}
+export declare const LAW_OPERATING_PACK: OperatingPackDefinition;
+export declare function createOperatingPackEnvelope(opts: OperatingPackOptions): OperatingPackEnvelope;
+export declare class OperatingPackEnvelope {
+    private readonly opts;
+    private readonly nodes;
+    private readonly approvedCapabilities;
+    private spentCents;
+    constructor(opts: OperatingPackOptions);
+    getPack(): OperatingPackDefinition;
+    guardAction(input: OperatingPackAction): Promise<OperatingPackGuardResult>;
+    getReceiptDag(): ReceiptDagEnvelope;
+    verifyDag(publicKeyHex?: string): Promise<Awaited<ReturnType<typeof verifyReceiptDag>>>;
+    outboundPayloads(): Record<string, unknown>[];
+    signerFingerprint(): string;
+    private hasCapability;
+    private signActionNode;
+}
+export declare function assertOperatingPackMetadataOnly(value: unknown, path?: string): void;
+export declare function operatingPackSignerFingerprint(opts: OperatingPackOptions): string | null;
+//# sourceMappingURL=operating-pack.d.ts.map

package/dist/operating-pack.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operating-pack.d.ts","sourceRoot":"","sources":["../src/operating-pack.ts"],"names":[],"mappings":"AAEA,OAAO,EAAe,gBAAgB,EAAE,KAAK,sBAAsB,EAAE,KAAK,kBAAkB,EAAE,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAG1I,MAAM,MAAM,qBAAqB,GAAG,KAAK,CAAC;AAC1C,MAAM,MAAM,uBAAuB,GAC/B,QAAQ,GACR,gBAAgB,GAChB,kBAAkB,GAClB,wBAAwB,GACxB,qBAAqB,GACrB,mBAAmB,GACnB,sBAAsB,CAAC;AAE3B,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,UAAU,CAAC;IACvB,SAAS,EAAE,UAAU,CAAC;CACvB;AAED,MAAM,WAAW,mCAAmC;IAClD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,wBAAwB,CAAC;IACtC,oBAAoB,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAChD,eAAe,CAAC,EAAE,mCAAmC,CAAC;IACtD,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,uBAAuB,CAAC;IAC9B,UAAU,CAAC,EAAE,sBAAsB,CAAC;IACpC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,eAAe,CAAC,EAAE,cAAc,GAAG,iBAAiB,GAAG,UAAU,GAAG,UAAU,CAAC;CAChF;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,kBAAkB,CAAC;IACxB,wBAAwB,EAAE,OAAO,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,sBAAsB,CAAC;IACnC,eAAe,EAAE,OAAO,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,qBAAqB,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,oBAAoB,EAAE,OAAO,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,0BAA0B,CAAC,CAAC;IACnD,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,eAAe,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,sBAAsB,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,eAAe,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACxG;AA8BD,eAAO,MAAM,kBAAkB,EAAE,uBA0DhC,CAAC;AAEF,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,oBAAoB,GAAG,qBAAqB,CAE7F;AAED,qBAAa,qBAAqB;IAKpB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwB;IAC9C,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAA8B;IACnE,OAAO,CAAC,UAAU,CAAK;gBAEM,IAAI,EAAE,oBAAoB;IAMvD,OAAO,IAAI,uBAAuB;IAI5B,WAAW,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAuBhF,aAAa,IAAI,kBAAkB;IAK7B,SAAS,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC,CAAC;IAI7F,gBAAgB,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE;IAI7C,iBAAiB,IAAI,MAAM;IAI3B,OAAO,CAAC,aAAa;YAOP,cAAc;CAc7B;AAuFD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAa,GAAG,IAAI,CAEvF;AAyDD,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,oBAAoB,GAAG,MAAM,GAAG,IAAI,CAExF"}

package/dist/operating-pack.js

@@ -0,0 +1,329 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OperatingPackEnvelope = exports.LAW_OPERATING_PACK = void 0;
+exports.createOperatingPackEnvelope = createOperatingPackEnvelope;
+exports.assertOperatingPackMetadataOnly = assertOperatingPackMetadataOnly;
+exports.operatingPackSignerFingerprint = operatingPackSignerFingerprint;
+const crypto_1 = require("crypto");
+const decision_log_1 = require("./decision-log");
+const dag_1 = require("./receipts/dag");
+const CAPABILITY_RANK = {
+    READ_ONLY: 0,
+    TRANSACT: 1,
+    ADMIN: 2,
+    ORCHESTRATE: 3,
+};
+const DATA_PLANE_KEYS = /^(title|summary|prompt|completion|content|messages|input|output|text|raw|source|notes|draft|body|transcript|document|client_content|clientContent|matter_description|email_body|file_text)$/i;
+const SAFE_METADATA_KEYS = new Set([
+    'action_id',
+    'action_kind',
+    'billing_code',
+    'capability',
+    'cost_cents',
+    'duration_ms',
+    'event',
+    'jurisdiction',
+    'matter_hash',
+    'model',
+    'model_id',
+    'outcome',
+    'practice_area',
+    'review_status',
+    'risk_score',
+    'token_count',
+    'workflow_id',
+]);
+exports.LAW_OPERATING_PACK = {
+    vertical: 'law',
+    title: 'AgentGuard Law Operating Pack',
+    counselReviewPending: true,
+    agentsMd: `# AgentGuard Law Operating Pack\n\nCounsel review pending: this file is operating scaffolding for legal workflows and should be reviewed by your counsel before production use.\n\n## Guardrails\n\n- ABA Model Rule 1.6: protect client information. Do not paste client content into tools that are not approved for the matter.\n- Conflicts: run conflict checks before intake work advances to drafting or client communication.\n- No unauthorized practice of law: agents prepare drafts and metadata. A licensed attorney reviews legal judgment.\n- Draft before send: client-facing emails and filings are drafts until a human approves dispatch.\n- Retention: keep signed AgentGuard receipts and matter metadata according to firm policy. Do not store prompt or completion content in receipts.\n- Trust account actions: trust transfers, disbursement instructions, and ledger changes require ADMIN capability.\n\n## Capability Map\n\n- READ_ONLY: intake classification, conflict pre-checks, document summaries, billing reconciliation previews.\n- TRANSACT: create a client-update draft or prepare a dispatch packet.\n- ADMIN: trust-account actions, retention policy changes, capability changes.\n- ORCHESTRATE: assign or revoke agent work across matters.\n`,
+    skills: {
+        intake: {
+            slug: 'intake',
+            title: 'Intake Skill',
+            capability: 'READ_ONLY',
+            reviewerCascade: false,
+            markdown: `# Intake Skill\n\nPurpose: classify a new inquiry using matter metadata only.\n\nInputs: jurisdiction, practice area, referral source, matter hash, urgency flag.\n\nRules:\n- Do not ask the model to decide representation.\n- Do not place client narrative text in AgentGuard receipts.\n- Output a routing label, missing-information checklist, and conflict-check reminder.\n`,
+        },
+        'conflict-check': {
+            slug: 'conflict-check',
+            title: 'Conflict Check Skill',
+            capability: 'READ_ONLY',
+            reviewerCascade: true,
+            markdown: `# Conflict Check Skill\n\nPurpose: prepare a conflict pre-check packet from firm metadata.\n\nInputs: matter hash, party hashes, jurisdiction, practice area, intake source.\n\nRules:\n- Match on firm-approved metadata systems only.\n- Refuse if party identity data is incomplete.\n- Reviewer Cascade triggers when a possible match, former-client marker, adverse-party marker, or trust-account marker appears.\n`,
+        },
+        'document-summary': {
+            slug: 'document-summary',
+            title: 'Document Summary Skill',
+            capability: 'READ_ONLY',
+            reviewerCascade: true,
+            markdown: `# Document Summary Skill\n\nPurpose: produce a working summary for attorney review.\n\nInputs: document hash, document type, jurisdiction, matter hash, token counts.\n\nRules:\n- Cite document sections or refuse when citations are unavailable.\n- Mark all output as draft work product for attorney review.\n- Reviewer Cascade triggers for settlement, privilege, indemnity, non-compete, waiver, trust, sanctions, or deadline markers.\n`,
+        },
+        'billing-reconciliation': {
+            slug: 'billing-reconciliation',
+            title: 'Billing Reconciliation Skill',
+            capability: 'READ_ONLY',
+            reviewerCascade: false,
+            markdown: `# Billing Reconciliation Skill\n\nPurpose: compare time-entry metadata against matter budgets and billing codes.\n\nInputs: billing code, matter hash, time-entry hashes, amount cents, policy cap.\n\nRules:\n- Do not move money.\n- Do not alter trust ledgers.\n- Escalate to ADMIN before any trust-account action.\n`,
+        },
+        'client-update-draft': {
+            slug: 'client-update-draft',
+            title: 'Client Update Draft Skill',
+            capability: 'TRANSACT',
+            reviewerCascade: true,
+            markdown: `# Client Update Draft Skill\n\nPurpose: draft a client update for attorney review.\n\nInputs: matter hash, milestone label, jurisdiction, practice area, cited record hashes.\n\nRules:\n- Draft before send. Never dispatch directly.\n- Include a review status field before any client-facing use.\n- Reviewer Cascade triggers for deadline, settlement, privilege, fee, trust, or adverse-party markers.\n`,
+        },
+    },
+    sourceOfTruth: `# Source Of Truth Layout\n\nUse this local layout inside the firm environment.\n\n- matters/<matter-hash>/metadata.json\n- matters/<matter-hash>/parties.json\n- matters/<matter-hash>/documents/<document-hash>.json\n- matters/<matter-hash>/receipts/*.json\n- policies/agentguard-policy.yaml\n- logs/agentguard-decisions.ndjson\n\nAgentGuard receipts store metadata, hashes, costs, model identifiers, capability decisions, and signatures. They do not store prompt or completion content.\n`,
+    checklist: [
+        'Review AGENTS.md with firm counsel before production use.',
+        'Define matter hash and party hash conventions.',
+        'Map each skill to a capability tier.',
+        'Enable Reviewer Cascade for client updates, conflicts, and document summaries.',
+        'Set a per-matter and per-day spend cap.',
+        'Store signed receipts with matter metadata only.',
+        'Test trust-account actions with ADMIN capability denied by default.',
+    ],
+    capabilityTable: [
+        { capability: 'READ_ONLY', use: 'Classify, summarize, reconcile, and prepare metadata-only packets.', blockedExamples: ['Sending client email', 'Trust ledger update'] },
+        { capability: 'TRANSACT', use: 'Create dispatch-ready drafts that still require human approval.', blockedExamples: ['Trust transfer', 'Policy change'] },
+        { capability: 'ADMIN', use: 'Trust-account actions, retention changes, and capability grants.', blockedExamples: ['Unreviewed client dispatch'] },
+        { capability: 'ORCHESTRATE', use: 'Assign, revoke, or coordinate multiple matter agents.', blockedExamples: ['Bypassing capability review'] },
+    ],
+};
+function createOperatingPackEnvelope(opts) {
+    return new OperatingPackEnvelope(opts);
+}
+class OperatingPackEnvelope {
+    opts;
+    nodes = [];
+    approvedCapabilities;
+    spentCents = 0;
+    constructor(opts) {
+        this.opts = opts;
+        if (opts.vertical !== 'law')
+            throw new Error('Only the law operating pack is bundled in this release');
+        if (!safeLabel(opts.workflowId))
+            throw new Error('Operating Pack workflowId is required');
+        this.approvedCapabilities = new Set(opts.approvedCapabilities ?? ['READ_ONLY']);
+    }
+    getPack() {
+        return exports.LAW_OPERATING_PACK;
+    }
+    async guardAction(input) {
+        assertAction(input);
+        assertMetadataOnly(input.metadata ?? {});
+        const capability = input.capability ?? capabilityForAction(input.kind);
+        const cost = safeNonNegativeInteger(input.totalCostCents);
+        const spendExceeded = Number.isSafeInteger(this.opts.maxWorkflowCostCents) && this.opts.maxWorkflowCostCents >= 0 && this.spentCents + cost > this.opts.maxWorkflowCostCents;
+        const capabilityAllowed = this.hasCapability(capability);
+        const allowed = capabilityAllowed && !spendExceeded;
+        const reason = !capabilityAllowed ? `Capability ${capability} is required for ${input.kind}` : spendExceeded ? 'Operating Pack workflow spend cap reached' : 'Operating Pack action allowed';
+        if (allowed)
+            this.spentCents += cost;
+        const triggers = allowed ? reviewerCascadeTriggers(input, this.opts) : [];
+        const node = await this.signActionNode(input, capability, allowed, reason, triggers);
+        this.nodes.push(node);
+        return {
+            allowed,
+            reason,
+            node,
+            dag: this.getReceiptDag(),
+            reviewerCascadeTriggered: triggers.length > 0,
+            spentCents: this.spentCents,
+        };
+    }
+    getReceiptDag() {
+        const root = this.nodes[this.nodes.length - 1];
+        return { nodes: [...this.nodes], rootId: root?.entryHash ?? '0'.repeat(64), workflowId: workflowHash(this.opts.workflowId) };
+    }
+    async verifyDag(publicKeyHex) {
+        return (0, dag_1.verifyReceiptDag)(this.getReceiptDag(), publicKeyHex ?? Buffer.from(this.opts.signingKeys.publicKey).toString('hex'));
+    }
+    outboundPayloads() {
+        return [];
+    }
+    signerFingerprint() {
+        return (0, decision_log_1.computeSignerFingerprint)(this.opts.signingKeys.publicKey);
+    }
+    hasCapability(capability) {
+        for (const granted of this.approvedCapabilities) {
+            if (CAPABILITY_RANK[granted] >= CAPABILITY_RANK[capability])
+                return true;
+        }
+        return false;
+    }
+    async signActionNode(input, capability, allowed, reason, triggers) {
+        const decision = operatingPackDecision(input, this.opts, capability, allowed, reason, triggers, this.spentCents);
+        return (0, dag_1.signDagNode)({
+            sequence: this.nodes.length,
+            decision,
+            privateKey: this.opts.signingKeys.privateKey,
+            publicKey: this.opts.signingKeys.publicKey,
+            parents: this.nodes.length ? [this.nodes[this.nodes.length - 1]] : [],
+            workflowId: workflowHash(this.opts.workflowId),
+            trustScore: allowed ? (triggers.length ? 0.9 : 0.94) : 0.2,
+            blocked: !allowed,
+            capability,
+        });
+    }
+}
+exports.OperatingPackEnvelope = OperatingPackEnvelope;
+function operatingPackDecision(input, opts, capability, allowed, reason, triggers, spentCents) {
+    const cost = safeNonNegativeInteger(input.totalCostCents);
+    const inputTokens = safeNonNegativeInteger(input.tokenCounts?.inputTokens);
+    const outputTokens = safeNonNegativeInteger(input.tokenCounts?.outputTokens);
+    const receipt = {
+        type: 'agent_operating_pack_action',
+        vertical: opts.vertical,
+        counselReviewPending: exports.LAW_OPERATING_PACK.counselReviewPending,
+        workflowHash: workflowHash(opts.workflowId),
+        actionId: safeLabel(input.actionId) ?? hashValue(input.actionId).slice(0, 16),
+        actionKind: input.kind,
+        capability,
+        blocked: !allowed,
+        modelIds: safeModelIds(input.modelIds ?? []),
+        inputTokens,
+        outputTokens,
+        totalCostCents: cost,
+        metadata: filterReceiptMetadata({ ...(input.metadata ?? {}), action_kind: input.kind, capability }),
+    };
+    if (triggers.length > 0)
+        receipt.reviewerCascade = buildReviewerCascadeReceipt(input, opts, triggers);
+    return {
+        decisionId: (0, crypto_1.randomUUID)(),
+        timestamp: new Date().toISOString(),
+        action: allowed ? 'allow' : 'block',
+        triggeredCap: allowed ? null : { window: 'per_call', amountCents: cost, action: 'block', reason },
+        triggeredScopeKey: null,
+        projectedCents: cost,
+        windowSpendBefore: Math.max(0, spentCents - (allowed ? cost : 0)),
+        windowSpendAfter: spentCents,
+        provider: 'unknown',
+        modelRequested: 'operating-pack',
+        modelResolved: 'operating-pack',
+        policyId: 'agentguard-operating-pack-law',
+        policyVersion: 1,
+        enforcementMode: 'enforce',
+        reasons: [reason],
+        entryType: 'outcome',
+        outcomeReceipt: receipt,
+    };
+}
+function buildReviewerCascadeReceipt(input, opts, triggers) {
+    const cascade = opts.reviewerCascade ?? {};
+    return {
+        outcome: input.kind,
+        drafter: {
+            model: safeLabel(cascade.drafterModel) ?? 'openai/gpt-4o-mini',
+            maxCostCents: safeNonNegativeInteger(cascade.drafterMaxCostCents ?? 25),
+        },
+        reviewer: {
+            model: safeLabel(cascade.reviewerModel) ?? 'anthropic/claude-sonnet-4-6',
+            maxCostCents: safeNonNegativeInteger(cascade.reviewerMaxCostCents ?? 75),
+        },
+        triggerFired: triggers,
+        reviewerVerdict: safeLabel(input.reviewerVerdict) ?? 'review_required',
+    };
+}
+function reviewerCascadeTriggers(input, opts) {
+    if (opts.reviewerCascade?.enabled === false)
+        return [];
+    const threshold = opts.reviewerCascade?.triggerThreshold ?? 0.55;
+    const triggers = [];
+    if (input.highRisk === true)
+        triggers.push('high_risk_action');
+    if (input.keywordRisk === true)
+        triggers.push('keyword_prefilter');
+    if (typeof input.highRiskClassifierScore === 'number' && input.highRiskClassifierScore >= threshold)
+        triggers.push(`risk_score_above:${threshold}`);
+    if (['conflict_check', 'document_summary', 'client_update_draft', 'send_client_email', 'trust_account_action'].includes(input.kind))
+        triggers.push('law_pack_default');
+    return [...new Set(triggers)].sort();
+}
+function capabilityForAction(kind) {
+    if (kind === 'trust_account_action')
+        return 'ADMIN';
+    if (kind === 'send_client_email' || kind === 'client_update_draft')
+        return 'TRANSACT';
+    return 'READ_ONLY';
+}
+function assertAction(input) {
+    assertPlainRecord(input, 'action');
+    if (!safeLabel(input.actionId))
+        throw new Error('Operating Pack actionId is required');
+    const allowedKinds = ['intake', 'conflict_check', 'document_summary', 'billing_reconciliation', 'client_update_draft', 'send_client_email', 'trust_account_action'];
+    if (!allowedKinds.includes(input.kind))
+        throw new Error('Operating Pack action kind is not supported');
+    if (input.capability && !(input.capability in CAPABILITY_RANK))
+        throw new Error('Operating Pack capability is not supported');
+    if (input.tokenCounts)
+        validateTokens(input.tokenCounts.inputTokens ?? 0, input.tokenCounts.outputTokens ?? 0);
+    if (input.totalCostCents != null && (!Number.isSafeInteger(input.totalCostCents) || input.totalCostCents < 0))
+        throw new Error('Operating Pack totalCostCents must be a non-negative safe integer');
+}
+function assertOperatingPackMetadataOnly(value, path = 'metadata') {
+    assertMetadataOnly(value, path);
+}
+function assertMetadataOnly(value, path = 'metadata') {
+    if (value == null)
+        return;
+    if (Array.isArray(value)) {
+        for (let i = 0; i < value.length; i++)
+            assertMetadataOnly(value[i], `${path}[${i}]`);
+        return;
+    }
+    if (typeof value !== 'object')
+        return;
+    for (const [key, child] of Object.entries(value)) {
+        if (DATA_PLANE_KEYS.test(key))
+            throw new Error(`Operating Pack metadata cannot include data-plane field: ${path}.${key}`);
+        assertMetadataOnly(child, `${path}.${key}`);
+    }
+}
+function filterReceiptMetadata(metadata) {
+    assertMetadataOnly(metadata);
+    const out = {};
+    for (const [key, value] of Object.entries(metadata)) {
+        if (!SAFE_METADATA_KEYS.has(key))
+            continue;
+        if (value == null || typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean')
+            out[key] = value;
+    }
+    return out;
+}
+function assertPlainRecord(value, name) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        throw new Error(`Operating Pack ${name} must be an object`);
+}
+function validateTokens(inputTokens, outputTokens) {
+    if (!Number.isSafeInteger(inputTokens) || inputTokens < 0)
+        throw new Error('inputTokens must be a non-negative safe integer');
+    if (!Number.isSafeInteger(outputTokens) || outputTokens < 0)
+        throw new Error('outputTokens must be a non-negative safe integer');
+}
+function workflowHash(value) {
+    return hashValue(`workflow:${value}`);
+}
+function hashValue(value) {
+    return (0, decision_log_1.sha256Hex)((0, decision_log_1.canonicalJson)({ value }));
+}
+function safeLabel(value) {
+    if (typeof value !== 'string')
+        return undefined;
+    const trimmed = value.trim();
+    if (!trimmed || !/^[A-Za-z0-9_.:/-]{1,180}$/.test(trimmed))
+        return undefined;
+    return trimmed;
+}
+function safeModelIds(models) {
+    return models.map((model) => safeLabel(model)).filter(Boolean);
+}
+function safeNonNegativeInteger(value) {
+    return Number.isSafeInteger(value) && value >= 0 ? value : 0;
+}
+function operatingPackSignerFingerprint(opts) {
+    return opts.signingKeys ? (0, decision_log_1.computeSignerFingerprint)(opts.signingKeys.publicKey) : null;
+}
+//# sourceMappingURL=operating-pack.js.map

package/dist/operating-pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"operating-pack.js","sourceRoot":"","sources":["../src/operating-pack.ts"],"names":[],"mappings":";;;AAwKA,kEAEC;AAqKD,0EAEC;AAyDD,wEAEC;AA5YD,mCAAoC;AACpC,iDAAoF;AACpF,wCAA0I;AA8E1I,MAAM,eAAe,GAA2C;IAC9D,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,CAAC;IACX,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,CAAC;CACf,CAAC;AAEF,MAAM,eAAe,GAAG,8LAA8L,CAAC;AACvN,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,WAAW;IACX,aAAa;IACb,cAAc;IACd,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,OAAO;IACP,cAAc;IACd,aAAa;IACb,OAAO;IACP,UAAU;IACV,SAAS;IACT,eAAe;IACf,eAAe;IACf,YAAY;IACZ,aAAa;IACb,aAAa;CACd,CAAC,CAAC;AAEU,QAAA,kBAAkB,GAA4B;IACzD,QAAQ,EAAE,KAAK;IACf,KAAK,EAAE,+BAA+B;IACtC,oBAAoB,EAAE,IAAI;IAC1B,QAAQ,EAAE,+tCAA+tC;IACzuC,MAAM,EAAE;QACN,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,cAAc;YACrB,UAAU,EAAE,WAAW;YACvB,eAAe,EAAE,KAAK;YACtB,QAAQ,EAAE,sXAAsX;SACjY;QACD,gBAAgB,EAAE;YAChB,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,sBAAsB;YAC7B,UAAU,EAAE,WAAW;YACvB,eAAe,EAAE,IAAI;YACrB,QAAQ,EAAE,4ZAA4Z;SACva;QACD,kBAAkB,EAAE;YAClB,IAAI,EAAE,kBAAkB;YACxB,KAAK,EAAE,wBAAwB;YAC/B,UAAU,EAAE,WAAW;YACvB,eAAe,EAAE,IAAI;YACrB,QAAQ,EAAE,obAAob;SAC/b;QACD,wBAAwB,EAAE;YACxB,IAAI,EAAE,wBAAwB;YAC9B,KAAK,EAAE,8BAA8B;YACrC,UAAU,EAAE,WAAW;YACvB,eAAe,EAAE,KAAK;YACtB,QAAQ,EAAE,4TAA4T;SACvU;QACD,qBAAqB,EAAE;YACrB,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,2BAA2B;YAClC,UAAU,EAAE,UAAU;YACtB,eAAe,EAAE,IAAI;YACrB,QAAQ,EAAE,iZAAiZ;SAC5Z;KACF;IACD,aAAa,EAAE,weAAwe;IACvf,SAAS,EAAE;QACT,2DAA2D;QAC3D,gDAAgD;QAChD,sCAAsC;QACtC,gFAAgF;QAChF,yCAAyC;QACzC,kDAAkD;QAClD,qEAAqE;KACtE;IACD,eAAe,EAAE;QACf,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,EAAE,oEAAoE,EAAE,eAAe,EAAE,CAAC,sBAAsB,EAAE,qBAAqB,CAAC,EAAE;QACxK,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,iEAAiE,EAAE,eAAe,EAAE,CAAC,gBAAgB,EAAE,eAAe,CAAC,EAAE;QACxJ,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,EAAE,kEAAkE,EAAE,eAAe,EAAE,CAAC,4BAA4B,CAAC,EAAE;QACjJ,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,EAAE,uDAAuD,EAAE,eAAe,EAAE,CAAC,6BAA6B,CAAC,EAAE;KAC9I;CACF,CAAC;AAEF,SAAgB,2BAA2B,CAAC,IAA0B;IACpE,OAAO,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,MAAa,qBAAqB;IAKH;IAJZ,KAAK,GAAqB,EAAE,CAAC;IAC7B,oBAAoB,CAA8B;IAC3D,UAAU,GAAG,CAAC,CAAC;IAEvB,YAA6B,IAA0B;QAA1B,SAAI,GAAJ,IAAI,CAAsB;QACrD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QACvG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC1F,IAAI,CAAC,oBAAoB,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,OAAO;QACL,OAAO,0BAAkB,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAA0B;QAC1C,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,kBAAkB,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,oBAAqB,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,GAAG,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAqB,CAAC;QAC/K,MAAM,iBAAiB,GAAG,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,iBAAiB,IAAI,CAAC,aAAa,CAAC;QACpD,MAAM,MAAM,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,cAAc,UAAU,oBAAoB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,+BAA+B,CAAC;QAC7L,IAAI,OAAO;YAAE,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC;QACrC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;QACrF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,OAAO;YACL,OAAO;YACP,MAAM;YACN,IAAI;YACJ,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE;YACzB,wBAAwB,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC;YAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAED,aAAa;QACX,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/C,OAAO,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,IAAI,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;IAC/H,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,YAAqB;QACnC,OAAO,IAAA,sBAAgB,EAAC,IAAI,CAAC,aAAa,EAAE,EAAE,YAAY,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9H,CAAC;IAED,gBAAgB;QACd,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,iBAAiB;QACf,OAAO,IAAA,uCAAwB,EAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IACnE,CAAC;IAEO,aAAa,CAAC,UAAkC;QACtD,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAChD,IAAI,eAAe,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,UAAU,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC3E,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,KAA0B,EAAE,UAAkC,EAAE,OAAgB,EAAE,MAAc,EAAE,QAAkB;QAC/I,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACjH,OAAO,IAAA,iBAAW,EAAC;YACjB,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM;YAC3B,QAAQ;YACR,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU;YAC5C,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS;YAC1C,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAmB,CAAC,CAAC,CAAC,CAAC,EAAE;YACvF,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC;YAC9C,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG;YAC1D,OAAO,EAAE,CAAC,OAAO;YACjB,UAAU;SACX,CAAC,CAAC;IACL,CAAC;CACF;AA5ED,sDA4EC;AAED,SAAS,qBAAqB,CAAC,KAA0B,EAAE,IAA0B,EAAE,UAAkC,EAAE,OAAgB,EAAE,MAAc,EAAE,QAAkB,EAAE,UAAkB;IACjM,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,sBAAsB,CAAC,KAAK,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAC7E,MAAM,OAAO,GAA4B;QACvC,IAAI,EAAE,6BAA6B;QACnC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,oBAAoB,EAAE,0BAAkB,CAAC,oBAAoB;QAC7D,YAAY,EAAE,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC;QAC3C,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7E,UAAU,EAAE,KAAK,CAAC,IAAI;QACtB,UAAU;QACV,OAAO,EAAE,CAAC,OAAO;QACjB,QAAQ,EAAE,YAAY,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC5C,WAAW;QACX,YAAY;QACZ,cAAc,EAAE,IAAI;QACpB,QAAQ,EAAE,qBAAqB,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;KACpG,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,CAAC,eAAe,GAAG,2BAA2B,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACtG,OAAO;QACL,UAAU,EAAE,IAAA,mBAAU,GAAE;QACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO;QACnC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE;QACjG,iBAAiB,EAAE,IAAI;QACvB,cAAc,EAAE,IAAI;QACpB,iBAAiB,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,gBAAgB,EAAE,UAAU;QAC5B,QAAQ,EAAE,SAAS;QACnB,cAAc,EAAE,gBAAgB;QAChC,aAAa,EAAE,gBAAgB;QAC/B,QAAQ,EAAE,+BAA+B;QACzC,aAAa,EAAE,CAAC;QAChB,eAAe,EAAE,SAAS;QAC1B,OAAO,EAAE,CAAC,MAAM,CAAC;QACjB,SAAS,EAAE,SAAS;QACpB,cAAc,EAAE,OAAO;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,2BAA2B,CAAC,KAA0B,EAAE,IAA0B,EAAE,QAAkB;IAC7G,MAAM,OAAO,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;IAC3C,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,IAAI;QACnB,OAAO,EAAE;YACP,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,oBAAoB;YAC9D,YAAY,EAAE,sBAAsB,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC;SACxE;QACD,QAAQ,EAAE;YACR,KAAK,EAAE,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,6BAA6B;YACxE,YAAY,EAAE,sBAAsB,CAAC,OAAO,CAAC,oBAAoB,IAAI,EAAE,CAAC;SACzE;QACD,YAAY,EAAE,QAAQ;QACtB,eAAe,EAAE,SAAS,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,iBAAiB;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA0B,EAAE,IAA0B;IACrF,IAAI,IAAI,CAAC,eAAe,EAAE,OAAO,KAAK,KAAK;QAAE,OAAO,EAAE,CAAC;IACvD,MAAM,SAAS,GAAG,IAAI,CAAC,eAAe,EAAE,gBAAgB,IAAI,IAAI,CAAC;IACjE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,WAAW,KAAK,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnE,IAAI,OAAO,KAAK,CAAC,uBAAuB,KAAK,QAAQ,IAAI,KAAK,CAAC,uBAAuB,IAAI,SAAS;QAAE,QAAQ,CAAC,IAAI,CAAC,oBAAoB,SAAS,EAAE,CAAC,CAAC;IACpJ,IAAI,CAAC,gBAAgB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IACvK,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,mBAAmB,CAAC,IAA6B;IACxD,IAAI,IAAI,KAAK,sBAAsB;QAAE,OAAO,OAAO,CAAC;IACpD,IAAI,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,qBAAqB;QAAE,OAAO,UAAU,CAAC;IACtF,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,YAAY,CAAC,KAA0B;IAC9C,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACvF,MAAM,YAAY,GAA8B,CAAC,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,CAAC;IAC/L,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACvG,IAAI,KAAK,CAAC,UAAU,IAAI,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,eAAe,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC9H,IAAI,KAAK,CAAC,WAAW;QAAE,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,IAAI,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC;IAC/G,IAAI,KAAK,CAAC,cAAc,IAAI,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;AACtM,CAAC;AAED,SAAgB,+BAA+B,CAAC,KAAc,EAAE,IAAI,GAAG,UAAU;IAC/E,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,IAAI,GAAG,UAAU;IAC3D,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO;IAC1B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO;IACtC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;QAC1H,kBAAkB,CAAC,KAAK,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,QAAiC;IAC9D,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC7B,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QAC3C,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC9H,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAY;IACrD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,IAAI,oBAAoB,CAAC,CAAC;AAC/H,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB,EAAE,YAAoB;IAC/D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC9H,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;AACnI,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,SAAS,CAAC,YAAY,KAAK,EAAE,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,IAAA,wBAAS,EAAC,IAAA,4BAAa,EAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7E,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,YAAY,CAAC,MAAgB;IACpC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;AAC7E,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,CAAC,CAAC,CAAC,KAAe,CAAC,CAAC,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,SAAgB,8BAA8B,CAAC,IAA0B;IACvE,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,IAAA,uCAAwB,EAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACxF,CAAC"}

package/dist/telemetry.js

@@ -43,7 +43,7 @@ const https = __importStar(require("https"));
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const crypto_1 = require("crypto");
-const AGENTGUARD_SPEND_VERSION = '0.14.1';
+const AGENTGUARD_SPEND_VERSION = '0.15.1';
 const STATE_DIR = path.join(os.homedir(), '.agentguard');
 const INSTALL_PATH = path.join(STATE_DIR, 'install.json');
 const BEACON_URL = 'https://agentguard.run/api/beacon';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentguard-run/spend",
-  "version": "0.14.1",
+  "version": "0.15.1",
   "description": "All terminology and labels used in AgentGuard materials are descriptive of software functionality only, not legal definitions or guarantees of compliance. Terms like receipt, audit log, evidence, audit trail, and attestation refer solely to cryptographically-signed records produced by the software. Full functional-use disclaimer in README.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -109,6 +109,11 @@
       "types": "./dist/frameworks/openrouter.d.ts",
       "require": "./dist/frameworks/openrouter.js",
       "default": "./dist/frameworks/openrouter.js"
+    },
+    "./operating-pack": {
+      "types": "./dist/operating-pack.d.ts",
+      "require": "./dist/operating-pack.js",
+      "default": "./dist/operating-pack.js"
     }
   },
   "bin": {
@@ -142,7 +147,8 @@
     "src/byo",
     "src/cli/byo.ts",
     "docs/patents/CLAIM_MAPPING.md",
-    "src/frameworks"
+    "src/frameworks",
+    "src/operating-pack.ts"
   ],
   "scripts": {
     "build": "tsc",

package/src/operating-pack.ts

@@ -0,0 +1,397 @@
+import { randomUUID } from 'crypto';
+import { canonicalJson, computeSignerFingerprint, sha256Hex } from './decision-log';
+import { signDagNode, verifyReceiptDag, type ReceiptCapabilityLevel, type ReceiptDagEnvelope, type ReceiptDagNode } from './receipts/dag';
+import type { SpendDecision } from './types';
+
+export type OperatingPackVertical = 'law';
+export type OperatingPackActionKind =
+  | 'intake'
+  | 'conflict_check'
+  | 'document_summary'
+  | 'billing_reconciliation'
+  | 'client_update_draft'
+  | 'send_client_email'
+  | 'trust_account_action';
+
+export interface OperatingPackSigningKeys {
+  privateKey: Uint8Array;
+  publicKey: Uint8Array;
+}
+
+export interface OperatingPackReviewerCascadeOptions {
+  enabled?: boolean;
+  drafterModel?: string;
+  reviewerModel?: string;
+  triggerThreshold?: number;
+  drafterMaxCostCents?: number;
+  reviewerMaxCostCents?: number;
+}
+
+export interface OperatingPackOptions {
+  vertical: OperatingPackVertical;
+  workflowId: string;
+  signingKeys: OperatingPackSigningKeys;
+  approvedCapabilities?: ReceiptCapabilityLevel[];
+  reviewerCascade?: OperatingPackReviewerCascadeOptions;
+  maxWorkflowCostCents?: number;
+}
+
+export interface OperatingPackAction {
+  actionId: string;
+  kind: OperatingPackActionKind;
+  capability?: ReceiptCapabilityLevel;
+  highRisk?: boolean;
+  highRiskClassifierScore?: number;
+  keywordRisk?: boolean;
+  modelIds?: string[];
+  tokenCounts?: { inputTokens?: number; outputTokens?: number };
+  totalCostCents?: number;
+  metadata?: Record<string, unknown>;
+  reviewerVerdict?: 'drafter_only' | 'review_required' | 'approved' | 'rejected';
+}
+
+export interface OperatingPackGuardResult {
+  allowed: boolean;
+  reason: string;
+  node: ReceiptDagNode;
+  dag: ReceiptDagEnvelope;
+  reviewerCascadeTriggered: boolean;
+  spentCents: number;
+}
+
+export interface OperatingPackSkillTemplate {
+  slug: string;
+  title: string;
+  capability: ReceiptCapabilityLevel;
+  reviewerCascade: boolean;
+  markdown: string;
+}
+
+export interface OperatingPackDefinition {
+  vertical: OperatingPackVertical;
+  title: string;
+  counselReviewPending: boolean;
+  agentsMd: string;
+  skills: Record<string, OperatingPackSkillTemplate>;
+  sourceOfTruth: string;
+  checklist: string[];
+  capabilityTable: Array<{ capability: ReceiptCapabilityLevel; use: string; blockedExamples: string[] }>;
+}
+
+const CAPABILITY_RANK: Record<ReceiptCapabilityLevel, number> = {
+  READ_ONLY: 0,
+  TRANSACT: 1,
+  ADMIN: 2,
+  ORCHESTRATE: 3,
+};
+
+const DATA_PLANE_KEYS = /^(title|summary|prompt|completion|content|messages|input|output|text|raw|source|notes|draft|body|transcript|document|client_content|clientContent|matter_description|email_body|file_text)$/i;
+const SAFE_METADATA_KEYS = new Set([
+  'action_id',
+  'action_kind',
+  'billing_code',
+  'capability',
+  'cost_cents',
+  'duration_ms',
+  'event',
+  'jurisdiction',
+  'matter_hash',
+  'model',
+  'model_id',
+  'outcome',
+  'practice_area',
+  'review_status',
+  'risk_score',
+  'token_count',
+  'workflow_id',
+]);
+
+export const LAW_OPERATING_PACK: OperatingPackDefinition = {
+  vertical: 'law',
+  title: 'AgentGuard Law Operating Pack',
+  counselReviewPending: true,
+  agentsMd: `# AgentGuard Law Operating Pack\n\nCounsel review pending: this file is operating scaffolding for legal workflows and should be reviewed by your counsel before production use.\n\n## Guardrails\n\n- ABA Model Rule 1.6: protect client information. Do not paste client content into tools that are not approved for the matter.\n- Conflicts: run conflict checks before intake work advances to drafting or client communication.\n- No unauthorized practice of law: agents prepare drafts and metadata. A licensed attorney reviews legal judgment.\n- Draft before send: client-facing emails and filings are drafts until a human approves dispatch.\n- Retention: keep signed AgentGuard receipts and matter metadata according to firm policy. Do not store prompt or completion content in receipts.\n- Trust account actions: trust transfers, disbursement instructions, and ledger changes require ADMIN capability.\n\n## Capability Map\n\n- READ_ONLY: intake classification, conflict pre-checks, document summaries, billing reconciliation previews.\n- TRANSACT: create a client-update draft or prepare a dispatch packet.\n- ADMIN: trust-account actions, retention policy changes, capability changes.\n- ORCHESTRATE: assign or revoke agent work across matters.\n`,
+  skills: {
+    intake: {
+      slug: 'intake',
+      title: 'Intake Skill',
+      capability: 'READ_ONLY',
+      reviewerCascade: false,
+      markdown: `# Intake Skill\n\nPurpose: classify a new inquiry using matter metadata only.\n\nInputs: jurisdiction, practice area, referral source, matter hash, urgency flag.\n\nRules:\n- Do not ask the model to decide representation.\n- Do not place client narrative text in AgentGuard receipts.\n- Output a routing label, missing-information checklist, and conflict-check reminder.\n`,
+    },
+    'conflict-check': {
+      slug: 'conflict-check',
+      title: 'Conflict Check Skill',
+      capability: 'READ_ONLY',
+      reviewerCascade: true,
+      markdown: `# Conflict Check Skill\n\nPurpose: prepare a conflict pre-check packet from firm metadata.\n\nInputs: matter hash, party hashes, jurisdiction, practice area, intake source.\n\nRules:\n- Match on firm-approved metadata systems only.\n- Refuse if party identity data is incomplete.\n- Reviewer Cascade triggers when a possible match, former-client marker, adverse-party marker, or trust-account marker appears.\n`,
+    },
+    'document-summary': {
+      slug: 'document-summary',
+      title: 'Document Summary Skill',
+      capability: 'READ_ONLY',
+      reviewerCascade: true,
+      markdown: `# Document Summary Skill\n\nPurpose: produce a working summary for attorney review.\n\nInputs: document hash, document type, jurisdiction, matter hash, token counts.\n\nRules:\n- Cite document sections or refuse when citations are unavailable.\n- Mark all output as draft work product for attorney review.\n- Reviewer Cascade triggers for settlement, privilege, indemnity, non-compete, waiver, trust, sanctions, or deadline markers.\n`,
+    },
+    'billing-reconciliation': {
+      slug: 'billing-reconciliation',
+      title: 'Billing Reconciliation Skill',
+      capability: 'READ_ONLY',
+      reviewerCascade: false,
+      markdown: `# Billing Reconciliation Skill\n\nPurpose: compare time-entry metadata against matter budgets and billing codes.\n\nInputs: billing code, matter hash, time-entry hashes, amount cents, policy cap.\n\nRules:\n- Do not move money.\n- Do not alter trust ledgers.\n- Escalate to ADMIN before any trust-account action.\n`,
+    },
+    'client-update-draft': {
+      slug: 'client-update-draft',
+      title: 'Client Update Draft Skill',
+      capability: 'TRANSACT',
+      reviewerCascade: true,
+      markdown: `# Client Update Draft Skill\n\nPurpose: draft a client update for attorney review.\n\nInputs: matter hash, milestone label, jurisdiction, practice area, cited record hashes.\n\nRules:\n- Draft before send. Never dispatch directly.\n- Include a review status field before any client-facing use.\n- Reviewer Cascade triggers for deadline, settlement, privilege, fee, trust, or adverse-party markers.\n`,
+    },
+  },
+  sourceOfTruth: `# Source Of Truth Layout\n\nUse this local layout inside the firm environment.\n\n- matters/<matter-hash>/metadata.json\n- matters/<matter-hash>/parties.json\n- matters/<matter-hash>/documents/<document-hash>.json\n- matters/<matter-hash>/receipts/*.json\n- policies/agentguard-policy.yaml\n- logs/agentguard-decisions.ndjson\n\nAgentGuard receipts store metadata, hashes, costs, model identifiers, capability decisions, and signatures. They do not store prompt or completion content.\n`,
+  checklist: [
+    'Review AGENTS.md with firm counsel before production use.',
+    'Define matter hash and party hash conventions.',
+    'Map each skill to a capability tier.',
+    'Enable Reviewer Cascade for client updates, conflicts, and document summaries.',
+    'Set a per-matter and per-day spend cap.',
+    'Store signed receipts with matter metadata only.',
+    'Test trust-account actions with ADMIN capability denied by default.',
+  ],
+  capabilityTable: [
+    { capability: 'READ_ONLY', use: 'Classify, summarize, reconcile, and prepare metadata-only packets.', blockedExamples: ['Sending client email', 'Trust ledger update'] },
+    { capability: 'TRANSACT', use: 'Create dispatch-ready drafts that still require human approval.', blockedExamples: ['Trust transfer', 'Policy change'] },
+    { capability: 'ADMIN', use: 'Trust-account actions, retention changes, and capability grants.', blockedExamples: ['Unreviewed client dispatch'] },
+    { capability: 'ORCHESTRATE', use: 'Assign, revoke, or coordinate multiple matter agents.', blockedExamples: ['Bypassing capability review'] },
+  ],
+};
+
+export function createOperatingPackEnvelope(opts: OperatingPackOptions): OperatingPackEnvelope {
+  return new OperatingPackEnvelope(opts);
+}
+
+export class OperatingPackEnvelope {
+  private readonly nodes: ReceiptDagNode[] = [];
+  private readonly approvedCapabilities: Set<ReceiptCapabilityLevel>;
+  private spentCents = 0;
+
+  constructor(private readonly opts: OperatingPackOptions) {
+    if (opts.vertical !== 'law') throw new Error('Only the law operating pack is bundled in this release');
+    if (!safeLabel(opts.workflowId)) throw new Error('Operating Pack workflowId is required');
+    this.approvedCapabilities = new Set(opts.approvedCapabilities ?? ['READ_ONLY']);
+  }
+
+  getPack(): OperatingPackDefinition {
+    return LAW_OPERATING_PACK;
+  }
+
+  async guardAction(input: OperatingPackAction): Promise<OperatingPackGuardResult> {
+    assertAction(input);
+    assertMetadataOnly(input.metadata ?? {});
+    const capability = input.capability ?? capabilityForAction(input.kind);
+    const cost = safeNonNegativeInteger(input.totalCostCents);
+    const spendExceeded = Number.isSafeInteger(this.opts.maxWorkflowCostCents) && this.opts.maxWorkflowCostCents! >= 0 && this.spentCents + cost > this.opts.maxWorkflowCostCents!;
+    const capabilityAllowed = this.hasCapability(capability);
+    const allowed = capabilityAllowed && !spendExceeded;
+    const reason = !capabilityAllowed ? `Capability ${capability} is required for ${input.kind}` : spendExceeded ? 'Operating Pack workflow spend cap reached' : 'Operating Pack action allowed';
+    if (allowed) this.spentCents += cost;
+    const triggers = allowed ? reviewerCascadeTriggers(input, this.opts) : [];
+    const node = await this.signActionNode(input, capability, allowed, reason, triggers);
+    this.nodes.push(node);
+    return {
+      allowed,
+      reason,
+      node,
+      dag: this.getReceiptDag(),
+      reviewerCascadeTriggered: triggers.length > 0,
+      spentCents: this.spentCents,
+    };
+  }
+
+  getReceiptDag(): ReceiptDagEnvelope {
+    const root = this.nodes[this.nodes.length - 1];
+    return { nodes: [...this.nodes], rootId: root?.entryHash ?? '0'.repeat(64), workflowId: workflowHash(this.opts.workflowId) };
+  }
+
+  async verifyDag(publicKeyHex?: string): Promise<Awaited<ReturnType<typeof verifyReceiptDag>>> {
+    return verifyReceiptDag(this.getReceiptDag(), publicKeyHex ?? Buffer.from(this.opts.signingKeys.publicKey).toString('hex'));
+  }
+
+  outboundPayloads(): Record<string, unknown>[] {
+    return [];
+  }
+
+  signerFingerprint(): string {
+    return computeSignerFingerprint(this.opts.signingKeys.publicKey);
+  }
+
+  private hasCapability(capability: ReceiptCapabilityLevel): boolean {
+    for (const granted of this.approvedCapabilities) {
+      if (CAPABILITY_RANK[granted] >= CAPABILITY_RANK[capability]) return true;
+    }
+    return false;
+  }
+
+  private async signActionNode(input: OperatingPackAction, capability: ReceiptCapabilityLevel, allowed: boolean, reason: string, triggers: string[]): Promise<ReceiptDagNode> {
+    const decision = operatingPackDecision(input, this.opts, capability, allowed, reason, triggers, this.spentCents);
+    return signDagNode({
+      sequence: this.nodes.length,
+      decision,
+      privateKey: this.opts.signingKeys.privateKey,
+      publicKey: this.opts.signingKeys.publicKey,
+      parents: this.nodes.length ? [this.nodes[this.nodes.length - 1] as ReceiptDagNode] : [],
+      workflowId: workflowHash(this.opts.workflowId),
+      trustScore: allowed ? (triggers.length ? 0.9 : 0.94) : 0.2,
+      blocked: !allowed,
+      capability,
+    });
+  }
+}
+
+function operatingPackDecision(input: OperatingPackAction, opts: OperatingPackOptions, capability: ReceiptCapabilityLevel, allowed: boolean, reason: string, triggers: string[], spentCents: number): SpendDecision {
+  const cost = safeNonNegativeInteger(input.totalCostCents);
+  const inputTokens = safeNonNegativeInteger(input.tokenCounts?.inputTokens);
+  const outputTokens = safeNonNegativeInteger(input.tokenCounts?.outputTokens);
+  const receipt: Record<string, unknown> = {
+    type: 'agent_operating_pack_action',
+    vertical: opts.vertical,
+    counselReviewPending: LAW_OPERATING_PACK.counselReviewPending,
+    workflowHash: workflowHash(opts.workflowId),
+    actionId: safeLabel(input.actionId) ?? hashValue(input.actionId).slice(0, 16),
+    actionKind: input.kind,
+    capability,
+    blocked: !allowed,
+    modelIds: safeModelIds(input.modelIds ?? []),
+    inputTokens,
+    outputTokens,
+    totalCostCents: cost,
+    metadata: filterReceiptMetadata({ ...(input.metadata ?? {}), action_kind: input.kind, capability }),
+  };
+  if (triggers.length > 0) receipt.reviewerCascade = buildReviewerCascadeReceipt(input, opts, triggers);
+  return {
+    decisionId: randomUUID(),
+    timestamp: new Date().toISOString(),
+    action: allowed ? 'allow' : 'block',
+    triggeredCap: allowed ? null : { window: 'per_call', amountCents: cost, action: 'block', reason },
+    triggeredScopeKey: null,
+    projectedCents: cost,
+    windowSpendBefore: Math.max(0, spentCents - (allowed ? cost : 0)),
+    windowSpendAfter: spentCents,
+    provider: 'unknown',
+    modelRequested: 'operating-pack',
+    modelResolved: 'operating-pack',
+    policyId: 'agentguard-operating-pack-law',
+    policyVersion: 1,
+    enforcementMode: 'enforce',
+    reasons: [reason],
+    entryType: 'outcome',
+    outcomeReceipt: receipt,
+  };
+}
+
+function buildReviewerCascadeReceipt(input: OperatingPackAction, opts: OperatingPackOptions, triggers: string[]): Record<string, unknown> {
+  const cascade = opts.reviewerCascade ?? {};
+  return {
+    outcome: input.kind,
+    drafter: {
+      model: safeLabel(cascade.drafterModel) ?? 'openai/gpt-4o-mini',
+      maxCostCents: safeNonNegativeInteger(cascade.drafterMaxCostCents ?? 25),
+    },
+    reviewer: {
+      model: safeLabel(cascade.reviewerModel) ?? 'anthropic/claude-sonnet-4-6',
+      maxCostCents: safeNonNegativeInteger(cascade.reviewerMaxCostCents ?? 75),
+    },
+    triggerFired: triggers,
+    reviewerVerdict: safeLabel(input.reviewerVerdict) ?? 'review_required',
+  };
+}
+
+function reviewerCascadeTriggers(input: OperatingPackAction, opts: OperatingPackOptions): string[] {
+  if (opts.reviewerCascade?.enabled === false) return [];
+  const threshold = opts.reviewerCascade?.triggerThreshold ?? 0.55;
+  const triggers: string[] = [];
+  if (input.highRisk === true) triggers.push('high_risk_action');
+  if (input.keywordRisk === true) triggers.push('keyword_prefilter');
+  if (typeof input.highRiskClassifierScore === 'number' && input.highRiskClassifierScore >= threshold) triggers.push(`risk_score_above:${threshold}`);
+  if (['conflict_check', 'document_summary', 'client_update_draft', 'send_client_email', 'trust_account_action'].includes(input.kind)) triggers.push('law_pack_default');
+  return [...new Set(triggers)].sort();
+}
+
+function capabilityForAction(kind: OperatingPackActionKind): ReceiptCapabilityLevel {
+  if (kind === 'trust_account_action') return 'ADMIN';
+  if (kind === 'send_client_email' || kind === 'client_update_draft') return 'TRANSACT';
+  return 'READ_ONLY';
+}
+
+function assertAction(input: OperatingPackAction): void {
+  assertPlainRecord(input, 'action');
+  if (!safeLabel(input.actionId)) throw new Error('Operating Pack actionId is required');
+  const allowedKinds: OperatingPackActionKind[] = ['intake', 'conflict_check', 'document_summary', 'billing_reconciliation', 'client_update_draft', 'send_client_email', 'trust_account_action'];
+  if (!allowedKinds.includes(input.kind)) throw new Error('Operating Pack action kind is not supported');
+  if (input.capability && !(input.capability in CAPABILITY_RANK)) throw new Error('Operating Pack capability is not supported');
+  if (input.tokenCounts) validateTokens(input.tokenCounts.inputTokens ?? 0, input.tokenCounts.outputTokens ?? 0);
+  if (input.totalCostCents != null && (!Number.isSafeInteger(input.totalCostCents) || input.totalCostCents < 0)) throw new Error('Operating Pack totalCostCents must be a non-negative safe integer');
+}
+
+export function assertOperatingPackMetadataOnly(value: unknown, path = 'metadata'): void {
+  assertMetadataOnly(value, path);
+}
+
+function assertMetadataOnly(value: unknown, path = 'metadata'): void {
+  if (value == null) return;
+  if (Array.isArray(value)) {
+    for (let i = 0; i < value.length; i++) assertMetadataOnly(value[i], `${path}[${i}]`);
+    return;
+  }
+  if (typeof value !== 'object') return;
+  for (const [key, child] of Object.entries(value as Record<string, unknown>)) {
+    if (DATA_PLANE_KEYS.test(key)) throw new Error(`Operating Pack metadata cannot include data-plane field: ${path}.${key}`);
+    assertMetadataOnly(child, `${path}.${key}`);
+  }
+}
+
+function filterReceiptMetadata(metadata: Record<string, unknown>): Record<string, unknown> {
+  assertMetadataOnly(metadata);
+  const out: Record<string, unknown> = {};
+  for (const [key, value] of Object.entries(metadata)) {
+    if (!SAFE_METADATA_KEYS.has(key)) continue;
+    if (value == null || typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') out[key] = value;
+  }
+  return out;
+}
+
+function assertPlainRecord(value: unknown, name: string): void {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) throw new Error(`Operating Pack ${name} must be an object`);
+}
+
+function validateTokens(inputTokens: number, outputTokens: number): void {
+  if (!Number.isSafeInteger(inputTokens) || inputTokens < 0) throw new Error('inputTokens must be a non-negative safe integer');
+  if (!Number.isSafeInteger(outputTokens) || outputTokens < 0) throw new Error('outputTokens must be a non-negative safe integer');
+}
+
+function workflowHash(value: string): string {
+  return hashValue(`workflow:${value}`);
+}
+
+function hashValue(value: string): string {
+  return sha256Hex(canonicalJson({ value }));
+}
+
+function safeLabel(value: unknown): string | undefined {
+  if (typeof value !== 'string') return undefined;
+  const trimmed = value.trim();
+  if (!trimmed || !/^[A-Za-z0-9_.:/-]{1,180}$/.test(trimmed)) return undefined;
+  return trimmed;
+}
+
+function safeModelIds(models: string[]): string[] {
+  return models.map((model) => safeLabel(model)).filter(Boolean) as string[];
+}
+
+function safeNonNegativeInteger(value: unknown): number {
+  return Number.isSafeInteger(value) && (value as number) >= 0 ? value as number : 0;
+}
+
+export function operatingPackSignerFingerprint(opts: OperatingPackOptions): string | null {
+  return opts.signingKeys ? computeSignerFingerprint(opts.signingKeys.publicKey) : null;
+}