@agenticprimitives/devkit 0.0.0-alpha.6 → 0.0.0-alpha.8

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAQA;;yDAEyD;AACzD,MAAM,WAAW,SAAS;IAAG,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAC5C,MAAM,WAAW,QAAQ;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACvD,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAEtE,MAAM,WAAW,YAAY;IAE3B,8DAA8D;IAC9D,cAAc,EAAE,SAAS,GAAG;QAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC9E,gEAAgE;IAChE,aAAa,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;QAAC,iBAAiB,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAC/H,sGAAsG;IACtG,gBAAgB,EAAE,SAAS,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACnI,+DAA+D;IAC/D,wBAAwB,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/F,yEAAyE;IACzE,aAAa,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,SAAS,EAAE,CAAA;KAAE,CAAC;IACvE,gFAAgF;IAChF,mBAAmB,EAAE,SAAS,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,CAAA;KAAE,CAAC;IAC/H,4GAA4G;IAC5G,iBAAiB,EAAE,SAAS,GAAG;QAC7B,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAC/D,UAAU,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;QACtE,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;KACvD,CAAC;IACF,oGAAoG;IACpG,gBAAgB,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IACvG,0EAA0E;IAC1E,oBAAoB,EAAE,SAAS,GAAG;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACvG,kFAAkF;IAClF,qBAAqB,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,sEAAsE;IACtE,UAAU,EAAE,SAAS,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3I,kFAAkF;IAClF,YAAY,EAAE,SAAS,GAAG;QAAE,cAAc,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtE;AAED;yCACyC;AACzC,MAAM,MAAM,qBAAqB,GAAG;KAAG,CAAC,IAAI,MAAM,YAAY,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;CAAE,CAAC;AAEvG;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,YAyEjC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,0BAA0B,GAAG,wBAAwB,CAAC;AAEpG,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE;AAIjG,4GAA4G;AAC5G,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,qBAAqB,GAAG;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAYnI;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAiB3D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAQA;;yDAEyD;AACzD,MAAM,WAAW,SAAS;IAAG,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAC5C,MAAM,WAAW,QAAQ;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACvD,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAEtE,MAAM,WAAW,YAAY;IAE3B,8DAA8D;IAC9D,cAAc,EAAE,SAAS,GAAG;QAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC9E,gEAAgE;IAChE,aAAa,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;QAAC,iBAAiB,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAC/H,sGAAsG;IACtG,gBAAgB,EAAE,SAAS,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACnI,+DAA+D;IAC/D,wBAAwB,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/F,yEAAyE;IACzE,aAAa,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,SAAS,EAAE,CAAA;KAAE,CAAC;IACvE,gFAAgF;IAChF,mBAAmB,EAAE,SAAS,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,CAAA;KAAE,CAAC;IAC/H,4GAA4G;IAC5G,iBAAiB,EAAE,SAAS,GAAG;QAC7B,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAC/D,UAAU,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;QACtE,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;KACvD,CAAC;IACF,oGAAoG;IACpG,gBAAgB,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IACvG,0EAA0E;IAC1E,oBAAoB,EAAE,SAAS,GAAG;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACvG,kFAAkF;IAClF,qBAAqB,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,sEAAsE;IACtE,UAAU,EAAE,SAAS,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3I,kFAAkF;IAClF,YAAY,EAAE,SAAS,GAAG;QAAE,cAAc,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtE;AAED;yCACyC;AACzC,MAAM,MAAM,qBAAqB,GAAG;KAAG,CAAC,IAAI,MAAM,YAAY,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;CAAE,CAAC;AAEvG;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,YA0EjC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,0BAA0B,GAAG,wBAAwB,CAAC;AAEpG,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE;AAIjG,4GAA4G;AAC5G,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,qBAAqB,GAAG;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAYnI;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAiB3D"}

package/dist/config.js

@@ -21,6 +21,7 @@ export const RING0_DOCTOR_CONFIG = {
             { file: 'apps/demo-a2a/src/config.ts', why: 'local-aes dev backend reads A2A_MASTER_PRIVATE_KEY only when A2A_KMS_BACKEND=local-aes; production is gcp-kms (deferred KMS migration, memory project_demo_a2a_kms_deferred)' },
             { file: 'apps/demo-a2a/scripts/canonical-a2a-e2e.ts', why: 'e2e harness mints an ephemeral SIWE persona; never an identity, never deployed' },
             { file: 'apps/demo-discovery-connector/src/gateway/tools.ts', why: 'gateway-raw-delegate-key (findings.yaml, accepted-risk): the gateway agent\'s own session-wire delegate key (spec 387); KMS signer + re-issued wire scheduled' },
+            { file: 'apps/home-mcp/src/act.ts', why: 'home-mcp-raw-act-key (findings.yaml, accepted-risk): the act-as-me key is the delegate of the person\'s capped, per-wire-revocable standing wires (spec 397 §11); KMS signer + re-issued wires scheduled with the ask key' },
             { file: 'apps/home-mcp/src/index.ts', why: 'home-mcp-raw-delegate-key (findings.yaml, accepted-risk): the ask-as-me delegate key holds no authority of its own; KMS signer + client re-registration scheduled (spec 397)' },
             { file: 'apps/demo-sso-next/scripts/provision-demo-personas-local.ts', why: 'local-chain provisioner with published dev keys' },
             { file: 'apps/demo-sso-next/scripts/provision-service-agent-local.ts', why: 'local-chain provisioner with published dev keys' },

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,4GAA4G;AAC5G,6GAA6G;AAC7G,qBAAqB;AACrB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA8CvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,cAAc,EAAE;QACd,WAAW,EAAE,CAAC,eAAe,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,CAAC;QAC7K,YAAY,EAAE,CAAC,2BAA2B,CAAC;KAC5C;IACD,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,8KAA8K,EAAE;YAC5N,EAAE,IAAI,EAAE,4CAA4C,EAAE,GAAG,EAAE,gFAAgF,EAAE;YAC7I,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,+JAA+J,EAAE;YACpO,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,8KAA8K,EAAE;YAC3N,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,iDAAiD,EAAE;YAC/H,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,iDAAiD,EAAE;YAC/H,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACjI,EAAE,IAAI,EAAE,sDAAsD,EAAE,GAAG,EAAE,sBAAsB,EAAE;YAC7F,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,sBAAsB,EAAE;YAC3F,EAAE,IAAI,EAAE,0DAA0D,EAAE,GAAG,EAAE,sBAAsB,EAAE;YACjG,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACpG,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,4EAA4E,EAAE;YAC/H,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,EAAE,8CAA8C,EAAE;YAC9F,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACtG,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACnG,EAAE,IAAI,EAAE,wCAAwC,EAAE,GAAG,EAAE,mDAAmD,EAAE;YAC5G,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,2EAA2E,EAAE;YAChI,EAAE,IAAI,EAAE,2CAA2C,EAAE,GAAG,EAAE,oDAAoD,EAAE;YAChH,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,kDAAkD,EAAE;YACzG,EAAE,IAAI,EAAE,qCAAqC,EAAE,GAAG,EAAE,uDAAuD,EAAE;YAC7G,EAAE,IAAI,EAAE,6CAA6C,EAAE,GAAG,EAAE,sEAAsE,EAAE;YACpI,EAAE,IAAI,EAAE,2CAA2C,EAAE,GAAG,EAAE,sCAAsC,EAAE;YAClG,EAAE,IAAI,EAAE,gDAAgD,EAAE,GAAG,EAAE,qDAAqD,EAAE;YACtH,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,8CAA8C,EAAE;SACpH;QACD,iBAAiB,EAAE;YACjB,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,6DAA6D,EAAE;YACtG,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,6EAA6E,EAAE;SACrI;KACF;IACD,gBAAgB,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,cAAc,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;IACrJ,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE;IACzJ,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,EAAE,sEAAsE,EAAE;YACrJ,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,wFAAwF,EAAE;YAC/J,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,uCAAuC,EAAE;YAC7G,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,yEAAyE,EAAE;YAC/I,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,8BAA8B,EAAE,GAAG,EAAE,wEAAwE,EAAE;SAC7J;KACF;IACD,mBAAmB,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE;IAC7K,iBAAiB,EAAE;QACjB,MAAM,EAAE,kDAAkD,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;QACtG,OAAO,EAAE,2CAA2C,EAAE,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;QAChI,UAAU,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,UAAU,EAAE,mCAAmC,EAAE;QAC5I,oBAAoB,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC;KAChI;IACD,gBAAgB,EAAE;QAChB,MAAM,EAAE,iDAAiD,EAAE,UAAU,EAAE,mBAAmB;QAC1F,QAAQ,EAAE;YACR,kBAAkB,EAAE,oEAAoE;YACxF,UAAU,EAAE,oEAAoE;YAChF,aAAa,EAAE,oEAAoE;SACpF;KACF;IACD,oBAAoB,EAAE;QACpB,SAAS,EAAE,CAAC,sCAAsC,EAAE,sCAAsC,EAAE,iCAAiC,CAAC;QAC9H,YAAY,EAAE,wBAAwB;QACtC,WAAW,EAAE,CAAC,iCAAiC,EAAE,iCAAiC,EAAE,wDAAwD,EAAE,oBAAoB,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,oCAAoC,CAAC;KAChQ;IACD,qBAAqB,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE;IACvD,UAAU,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC1L,YAAY,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE;CACrE,CAAC;AAMF,SAAS,QAAQ,CAAC,CAAU,IAAkC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhI,4GAA4G;AAC5G,MAAM,UAAU,iBAAiB,CAAC,IAAkB,EAAE,SAAgC;IACpF,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAkB,CAAC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,gDAAgD,CAAC,GAAG,CAAC,CAAC;QACpH,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,qBAAqB,CAAC,CAAC;QAChH,IAAI,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,uCAAuC,CAAC,CAAC;QAClK,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC;QACvD,MAA6C,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAI,IAA0C,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAmB,EAAuB,EAAE;QAC7E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,qBAAsB,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,+BAA+B,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,+CAA+C,CAAC,CAAC;QAC7H,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,mBAAmB,EAAE,OAAgC,CAAC,CAAC;QACrG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACvD,CAAC,CAAC;IACF,OAAO,WAAW,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACtL,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,4GAA4G;AAC5G,6GAA6G;AAC7G,qBAAqB;AACrB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA8CvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,cAAc,EAAE;QACd,WAAW,EAAE,CAAC,eAAe,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,CAAC;QAC7K,YAAY,EAAE,CAAC,2BAA2B,CAAC;KAC5C;IACD,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,8KAA8K,EAAE;YAC5N,EAAE,IAAI,EAAE,4CAA4C,EAAE,GAAG,EAAE,gFAAgF,EAAE;YAC7I,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,+JAA+J,EAAE;YACpO,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,EAAE,2NAA2N,EAAE;YACtQ,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,8KAA8K,EAAE;YAC3N,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,iDAAiD,EAAE;YAC/H,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,iDAAiD,EAAE;YAC/H,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACjI,EAAE,IAAI,EAAE,sDAAsD,EAAE,GAAG,EAAE,sBAAsB,EAAE;YAC7F,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,sBAAsB,EAAE;YAC3F,EAAE,IAAI,EAAE,0DAA0D,EAAE,GAAG,EAAE,sBAAsB,EAAE;YACjG,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACpG,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,4EAA4E,EAAE;YAC/H,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,EAAE,8CAA8C,EAAE;YAC9F,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACtG,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACnG,EAAE,IAAI,EAAE,wCAAwC,EAAE,GAAG,EAAE,mDAAmD,EAAE;YAC5G,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,2EAA2E,EAAE;YAChI,EAAE,IAAI,EAAE,2CAA2C,EAAE,GAAG,EAAE,oDAAoD,EAAE;YAChH,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,kDAAkD,EAAE;YACzG,EAAE,IAAI,EAAE,qCAAqC,EAAE,GAAG,EAAE,uDAAuD,EAAE;YAC7G,EAAE,IAAI,EAAE,6CAA6C,EAAE,GAAG,EAAE,sEAAsE,EAAE;YACpI,EAAE,IAAI,EAAE,2CAA2C,EAAE,GAAG,EAAE,sCAAsC,EAAE;YAClG,EAAE,IAAI,EAAE,gDAAgD,EAAE,GAAG,EAAE,qDAAqD,EAAE;YACtH,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,8CAA8C,EAAE;SACpH;QACD,iBAAiB,EAAE;YACjB,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,6DAA6D,EAAE;YACtG,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,6EAA6E,EAAE;SACrI;KACF;IACD,gBAAgB,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,cAAc,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;IACrJ,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE;IACzJ,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,EAAE,sEAAsE,EAAE;YACrJ,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,wFAAwF,EAAE;YAC/J,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,uCAAuC,EAAE;YAC7G,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,yEAAyE,EAAE;YAC/I,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,8BAA8B,EAAE,GAAG,EAAE,wEAAwE,EAAE;SAC7J;KACF;IACD,mBAAmB,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE;IAC7K,iBAAiB,EAAE;QACjB,MAAM,EAAE,kDAAkD,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;QACtG,OAAO,EAAE,2CAA2C,EAAE,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;QAChI,UAAU,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,UAAU,EAAE,mCAAmC,EAAE;QAC5I,oBAAoB,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC;KAChI;IACD,gBAAgB,EAAE;QAChB,MAAM,EAAE,iDAAiD,EAAE,UAAU,EAAE,mBAAmB;QAC1F,QAAQ,EAAE;YACR,kBAAkB,EAAE,oEAAoE;YACxF,UAAU,EAAE,oEAAoE;YAChF,aAAa,EAAE,oEAAoE;SACpF;KACF;IACD,oBAAoB,EAAE;QACpB,SAAS,EAAE,CAAC,sCAAsC,EAAE,sCAAsC,EAAE,iCAAiC,CAAC;QAC9H,YAAY,EAAE,wBAAwB;QACtC,WAAW,EAAE,CAAC,iCAAiC,EAAE,iCAAiC,EAAE,wDAAwD,EAAE,oBAAoB,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,oCAAoC,CAAC;KAChQ;IACD,qBAAqB,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE;IACvD,UAAU,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC1L,YAAY,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE;CACrE,CAAC;AAMF,SAAS,QAAQ,CAAC,CAAU,IAAkC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhI,4GAA4G;AAC5G,MAAM,UAAU,iBAAiB,CAAC,IAAkB,EAAE,SAAgC;IACpF,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAkB,CAAC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,gDAAgD,CAAC,GAAG,CAAC,CAAC;QACpH,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,qBAAqB,CAAC,CAAC;QAChH,IAAI,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,uCAAuC,CAAC,CAAC;QAClK,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC;QACvD,MAA6C,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAI,IAA0C,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAmB,EAAuB,EAAE;QAC7E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,qBAAsB,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,+BAA+B,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,+CAA+C,CAAC,CAAC;QAC7H,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,mBAAmB,EAAE,OAAgC,CAAC,CAAC;QACrG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACvD,CAAC,CAAC;IACF,OAAO,WAAW,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACtL,CAAC"}

package/dist/dispatch.d.ts

@@ -28,6 +28,10 @@ export declare const CONFORM_MODULES: {
         readonly spec: "@agenticprimitives/mcp-protocol/conform";
         readonly fn: "conformMcp";
     };
+    readonly provenance: {
+        readonly spec: "@agenticprimitives/provenance-node/conform";
+        readonly fn: "conformProvenance";
+    };
 };
 export declare function loadConform(kind: keyof typeof CONFORM_MODULES): Promise<ConformFn>;
 export declare const LIVE_GATES_MODULE: {
@@ -49,4 +53,148 @@ export declare const RUNTIME_MODULE: {
 };
 export type RuntimeCli = (argv: string[]) => Promise<number>;
 export declare function loadRuntimeCli(): Promise<RuntimeCli>;
+/** Spec 398 §7.2 (3)+(4) — the typed client / CLI schema and the parity cases are projected FROM a compiled definition by
+ *  `@agenticprimitives/harness` (pure functions); the kit dispatches to the consumer's install (absent ⇒ E_MODULE_ABSENT). */
+export declare const HARNESS_PROJECTIONS_MODULE: {
+    readonly spec: "@agenticprimitives/harness";
+    readonly client: "generateCapabilityClient";
+    readonly cli: "cliArgumentSchema";
+    readonly parity: "generateParityCases";
+};
+export interface HarnessProjections {
+    generateCapabilityClient: (definition: unknown, opts?: Record<string, unknown>) => {
+        source: string;
+        operations: unknown[];
+    } & Record<string, unknown>;
+    cliArgumentSchema: (tool: unknown) => unknown;
+    generateParityCases: (definition: unknown, opts?: Record<string, unknown>) => unknown;
+}
+export declare function loadHarnessProjections(): Promise<HarnessProjections>;
+/** Spec 398 §10 / P1.3 — `ap eval`: cases as data judged by `@agenticprimitives/evaluation` (the consumer's install). */
+export declare const EVAL_MODULE: {
+    readonly spec: "@agenticprimitives/evaluation";
+};
+export interface EvalModule {
+    parseEvalFile: (raw: unknown) => {
+        version: 1;
+        name?: string;
+        home?: string;
+        cases: Array<{
+            id: string;
+            persona?: string;
+            addressee?: string;
+            message: string;
+            plan?: unknown;
+            truth?: Record<string, unknown>;
+            checks: unknown[];
+        }>;
+    };
+    runEvalFile: (file: unknown, ask: (c: {
+        id: string;
+        persona?: string;
+        addressee?: string;
+        message: string;
+        plan?: unknown;
+    }) => Promise<unknown>) => Promise<{
+        results: Array<{
+            id: string;
+            passed: boolean;
+            failures: string[];
+            ms: number;
+            outcome?: {
+                kind: string;
+                text: string;
+            };
+        }>;
+        passed: number;
+        failed: number;
+    }>;
+    formatTruthReport: (report: unknown) => string;
+    outcomeOfReply: (rep: Record<string, unknown>) => unknown;
+    casesFromRunRecords: (records: unknown[], opts?: Record<string, unknown>) => unknown;
+}
+export declare function loadEval(): Promise<EvalModule>;
+/** Spec 415 A4 — `ap eval compare` / `ap eval window`: the comparison runner, the capture window and the pre-registered
+ *  plan from `@agenticprimitives/evaluation`; the eval store's file binding from `@agenticprimitives/provenance-node`. */
+export declare const COMPARE_MODULE: {
+    readonly spec: "@agenticprimitives/evaluation";
+};
+export declare const EVAL_STORE_MODULE: {
+    readonly spec: "@agenticprimitives/provenance-node";
+    readonly fn: "fileProvenanceStore";
+};
+export interface CompareModule {
+    runComparison: (input: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    formatExperiment: (rec: unknown) => string;
+    experimentPlan: (input: Record<string, unknown>) => Record<string, unknown>;
+    validateReplaySet: (raw: unknown) => {
+        ok: true;
+        set: Record<string, unknown>;
+    } | {
+        ok: false;
+        errors: string[];
+    };
+    replaySetDigest: (set: unknown) => Promise<string>;
+    criterionDigest: (c: unknown) => Promise<string>;
+    validateCaptureWindow: (raw: unknown) => {
+        ok: true;
+        window: Record<string, unknown>;
+    } | {
+        ok: false;
+        errors: string[];
+    };
+    windowDigest: (w: unknown) => Promise<string>;
+    pseudonymiser: (salt: string) => unknown;
+    /** `ap eval rescore` — the scoring step alone, over a stored experiment record. */
+    scoreExperimentRuns: (input: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    casesOf: (set: unknown, criterion: unknown, split: string) => {
+        intents: unknown[];
+        cases: unknown[];
+        skillIds: string[];
+    };
+    /** `ap eval diff` — two stored experiments on their paired cases (McNemar, Δ macro, collateral). */
+    compareSelectionRuns: (before: Record<string, unknown>, after: Record<string, unknown>, opts?: Record<string, unknown>) => Record<string, unknown>;
+    variantRequestDigest: (v: unknown) => Promise<string>;
+    /** `ap eval report` — the skill assessment report the Lab and skill-web render (spec 415 §5b). */
+    skillAssessmentReportOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    /** `ap eval gates` — the two selection gates (spec 415 A4). */
+    rboxAgreementOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    judgmentCalibrationOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    judgmentConsistencyOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    candidateRecallOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    fitConformalMap: (input: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    conformalCoverageOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    riskCoverageOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    selectionBehaviourOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    outcomePlanScoresOf: (runs: unknown[], gold: Record<string, unknown>) => Array<Record<string, unknown>>;
+    techniqueLedgerOf: (input: Record<string, unknown>) => {
+        rows: Array<Record<string, unknown>>;
+        rule: string;
+    };
+    /** Spec 418 §12 — the act laboratory: gold names resolved by the estate; the reply read for the act. */
+    resolveActGold: (gold: Record<string, unknown>, resolveName: (name: string) => Promise<string | null>) => Promise<Record<string, unknown>>;
+    actCaptureOf: (reply: unknown) => Record<string, unknown>;
+    principleCoverageOf: (verdicts: ReadonlyArray<unknown>) => Record<string, {
+        right: number;
+        total: number;
+    }>;
+    scorecardOf: (experiments: unknown[], criteria: Record<string, unknown>) => Array<Record<string, unknown>>;
+}
+export declare function loadCompare(): Promise<CompareModule>;
+export declare function loadEvalStore(): Promise<(dir: string, opts?: Record<string, unknown>) => unknown>;
+/** Spec 415 A4 — the exact half's decision function, re-run by `ap eval gates` (orchestration's `decideFromGrounding`). */
+export declare const ORCHESTRATION_MODULE: {
+    readonly spec: "@agenticprimitives/orchestration";
+    readonly fn: "decideFromGrounding";
+};
+export declare function loadDecideFromGrounding(): Promise<(...args: unknown[]) => unknown>;
+/** Spec 416 W3 — the harness's own calibration math (temperature scaling + the conformal set) and the judge's name,
+ *  injected into map fitting and the coverage gate so they measure the rule that runs. */
+export declare function loadHarnessCalibration(): Promise<{
+    calibrate: (...args: unknown[]) => unknown;
+    setOf: (...args: unknown[]) => unknown;
+    judge: string;
+}>;
+/** Spec 416 W1 — the proposal, re-derived by the rbox gate from a `propose+judgment` run's recorded grounding. */
+export declare function loadProposeFromGrounding(): Promise<(...args: unknown[]) => unknown>;
 //# sourceMappingURL=dispatch.d.ts.map

package/dist/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAChH,MAAM,WAAW,iBAAiB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,gBAAgB,EAAE,CAAA;CAAE;AAC9F,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEpH,MAAM,WAAW,eAAe;IAC9B,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;CACjG;AAoBD,eAAO,MAAM,eAAe;;;;;;;;;CAA6J,CAAC;AAE1L,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,OAAO,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAGxF;AAED,eAAO,MAAM,iBAAiB;;;CAAyE,CAAC;AAExG,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC,CAEpE;AAED,eAAO,MAAM,iBAAiB;;;CAAsE,CAAC;AAErG,wBAAsB,aAAa,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAElG;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAIpE;AAED;gIACgI;AAChI,eAAO,MAAM,cAAc;;;CAA2E,CAAC;AACvG,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7D,wBAAsB,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,CAE1D"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAChH,MAAM,WAAW,iBAAiB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,gBAAgB,EAAE,CAAA;CAAE;AAC9F,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEpH,MAAM,WAAW,eAAe;IAC9B,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;CACjG;AAoBD,eAAO,MAAM,eAAe;;;;;;;;;;;;;CAA6U,CAAC;AAE1W,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,OAAO,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAGxF;AAED,eAAO,MAAM,iBAAiB;;;CAAyE,CAAC;AAExG,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC,CAEpE;AAED,eAAO,MAAM,iBAAiB;;;CAAsE,CAAC;AAErG,wBAAsB,aAAa,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAElG;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAIpE;AAED;gIACgI;AAChI,eAAO,MAAM,cAAc;;;CAA2E,CAAC;AACvG,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7D,wBAAsB,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,CAE1D;AAED;8HAC8H;AAC9H,eAAO,MAAM,0BAA0B;;;;;CAA+I,CAAC;AACvL,MAAM,WAAW,kBAAkB;IACjC,wBAAwB,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvJ,iBAAiB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;IAC9C,mBAAmB,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;CACvF;AACD,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAO1E;AAED,yHAAyH;AACzH,eAAO,MAAM,WAAW;;CAAqD,CAAC;AAC9E,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,OAAO,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAAC,MAAM,EAAE,OAAO,EAAE,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IACvO,WAAW,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,OAAO,CAAC;YAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5T,iBAAiB,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/C,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IAC1D,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;CACtF;AACD,wBAAsB,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,CAMpD;AAED;0HAC0H;AAC1H,eAAO,MAAM,cAAc;;CAAqD,CAAC;AACjF,eAAO,MAAM,iBAAiB;;;CAAqF,CAAC;AACpH,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpF,gBAAgB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAC3C,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5E,iBAAiB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAClH,eAAe,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,eAAe,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,qBAAqB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACzH,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,mFAAmF;IACnF,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3H,oGAAoG;IACpG,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnJ,oBAAoB,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,kGAAkG;IAClG,uBAAuB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrF,+DAA+D;IAC/D,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,qBAAqB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnF,qBAAqB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnF,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/E,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtF,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjF,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5E,oBAAoB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClF,mBAAmB,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxG,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK;QAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9G,wGAAwG;IACxG,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3I,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1D,mBAAmB,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5G,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC5G;AACD,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,CAAC,CAI1D;AACD,wBAAsB,aAAa,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,CAEvG;AAED,2HAA2H;AAC3H,eAAO,MAAM,oBAAoB;;;CAAmF,CAAC;AACrH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAExF;AACD;0FAC0F;AAC1F,wBAAsB,sBAAsB,IAAI,OAAO,CAAC;IAAE,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAI7J;AACD,kHAAkH;AAClH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAEzF"}

package/dist/dispatch.js

@@ -21,7 +21,7 @@ function pick(mod, name, spec) {
         throw new DevkitError(ERROR_CODES.E_MODULE_SHAPE, `${spec} does not export ${name}() — upgrade the package or this kit so their contracts agree`);
     return fn;
 }
-export const CONFORM_MODULES = { a2a: { spec: '@agenticprimitives/a2a/conform', fn: 'conformA2a' }, mcp: { spec: '@agenticprimitives/mcp-protocol/conform', fn: 'conformMcp' } };
+export const CONFORM_MODULES = { a2a: { spec: '@agenticprimitives/a2a/conform', fn: 'conformA2a' }, mcp: { spec: '@agenticprimitives/mcp-protocol/conform', fn: 'conformMcp' }, /** Spec 414 §6 — a provenance store binding (`file:<dir>` · `memory:`), C1–C6. */ provenance: { spec: '@agenticprimitives/provenance-node/conform', fn: 'conformProvenance' } };
 export async function loadConform(kind) {
     const m = CONFORM_MODULES[kind];
     return pick(await loadModule(m.spec, `ap conform ${kind}`), m.fn, m.spec);
@@ -46,4 +46,52 @@ export const RUNTIME_MODULE = { spec: '@agenticprimitives/runtime-member', fn: '
 export async function loadRuntimeCli() {
     return pick(await loadModule(RUNTIME_MODULE.spec, 'ap runtime'), RUNTIME_MODULE.fn, RUNTIME_MODULE.spec);
 }
+/** Spec 398 §7.2 (3)+(4) — the typed client / CLI schema and the parity cases are projected FROM a compiled definition by
+ *  `@agenticprimitives/harness` (pure functions); the kit dispatches to the consumer's install (absent ⇒ E_MODULE_ABSENT). */
+export const HARNESS_PROJECTIONS_MODULE = { spec: '@agenticprimitives/harness', client: 'generateCapabilityClient', cli: 'cliArgumentSchema', parity: 'generateParityCases' };
+export async function loadHarnessProjections() {
+    const m = await loadModule(HARNESS_PROJECTIONS_MODULE.spec, 'ap generate');
+    return {
+        generateCapabilityClient: pick(m, HARNESS_PROJECTIONS_MODULE.client, HARNESS_PROJECTIONS_MODULE.spec),
+        cliArgumentSchema: pick(m, HARNESS_PROJECTIONS_MODULE.cli, HARNESS_PROJECTIONS_MODULE.spec),
+        generateParityCases: pick(m, HARNESS_PROJECTIONS_MODULE.parity, HARNESS_PROJECTIONS_MODULE.spec),
+    };
+}
+/** Spec 398 §10 / P1.3 — `ap eval`: cases as data judged by `@agenticprimitives/evaluation` (the consumer's install). */
+export const EVAL_MODULE = { spec: '@agenticprimitives/evaluation' };
+export async function loadEval() {
+    const m = await loadModule(EVAL_MODULE.spec, 'ap eval');
+    return {
+        parseEvalFile: pick(m, 'parseEvalFile', EVAL_MODULE.spec), runEvalFile: pick(m, 'runEvalFile', EVAL_MODULE.spec), formatTruthReport: pick(m, 'formatTruthReport', EVAL_MODULE.spec),
+        outcomeOfReply: pick(m, 'outcomeOfReply', EVAL_MODULE.spec), casesFromRunRecords: pick(m, 'casesFromRunRecords', EVAL_MODULE.spec),
+    };
+}
+/** Spec 415 A4 — `ap eval compare` / `ap eval window`: the comparison runner, the capture window and the pre-registered
+ *  plan from `@agenticprimitives/evaluation`; the eval store's file binding from `@agenticprimitives/provenance-node`. */
+export const COMPARE_MODULE = { spec: '@agenticprimitives/evaluation' };
+export const EVAL_STORE_MODULE = { spec: '@agenticprimitives/provenance-node', fn: 'fileProvenanceStore' };
+export async function loadCompare() {
+    const m = await loadModule(COMPARE_MODULE.spec, 'ap eval compare');
+    const p = (n) => pick(m, n, COMPARE_MODULE.spec);
+    return { runComparison: p('runComparison'), formatExperiment: p('formatExperiment'), experimentPlan: p('experimentPlan'), validateReplaySet: p('validateReplaySet'), replaySetDigest: p('replaySetDigest'), criterionDigest: p('criterionDigest'), validateCaptureWindow: p('validateCaptureWindow'), windowDigest: p('windowDigest'), pseudonymiser: p('pseudonymiser'), scoreExperimentRuns: p('scoreExperimentRuns'), casesOf: p('casesOf'), compareSelectionRuns: p('compareSelectionRuns'), variantRequestDigest: p('variantRequestDigest'), skillAssessmentReportOf: p('skillAssessmentReportOf'), rboxAgreementOf: p('rboxAgreementOf'), judgmentCalibrationOf: p('judgmentCalibrationOf'), judgmentConsistencyOf: p('judgmentConsistencyOf'), candidateRecallOf: p('candidateRecallOf'), fitConformalMap: p('fitConformalMap'), conformalCoverageOf: p('conformalCoverageOf'), riskCoverageOf: p('riskCoverageOf'), selectionBehaviourOf: p('selectionBehaviourOf'), outcomePlanScoresOf: p('outcomePlanScoresOf'), techniqueLedgerOf: p('techniqueLedgerOf'), scorecardOf: p('scorecardOf'), resolveActGold: p('resolveActGold'), actCaptureOf: p('actCaptureOf'), principleCoverageOf: p('principleCoverageOf') };
+}
+export async function loadEvalStore() {
+    return pick(await loadModule(EVAL_STORE_MODULE.spec, 'ap eval compare'), EVAL_STORE_MODULE.fn, EVAL_STORE_MODULE.spec);
+}
+/** Spec 415 A4 — the exact half's decision function, re-run by `ap eval gates` (orchestration's `decideFromGrounding`). */
+export const ORCHESTRATION_MODULE = { spec: '@agenticprimitives/orchestration', fn: 'decideFromGrounding' };
+export async function loadDecideFromGrounding() {
+    return pick(await loadModule(ORCHESTRATION_MODULE.spec, 'ap eval gates'), ORCHESTRATION_MODULE.fn, ORCHESTRATION_MODULE.spec);
+}
+/** Spec 416 W3 — the harness's own calibration math (temperature scaling + the conformal set) and the judge's name,
+ *  injected into map fitting and the coverage gate so they measure the rule that runs. */
+export async function loadHarnessCalibration() {
+    const m = await loadModule(ORCHESTRATION_MODULE.spec, 'ap eval calibrate');
+    const judge = m.SELECTION_JUDGE?.name ?? 'unknown';
+    return { calibrate: pick(m, 'calibrateByTemperature', ORCHESTRATION_MODULE.spec), setOf: pick(m, 'conformalSetOf', ORCHESTRATION_MODULE.spec), judge };
+}
+/** Spec 416 W1 — the proposal, re-derived by the rbox gate from a `propose+judgment` run's recorded grounding. */
+export async function loadProposeFromGrounding() {
+    return pick(await loadModule(ORCHESTRATION_MODULE.spec, 'ap eval gates'), 'proposeFromGrounding', ORCHESTRATION_MODULE.spec);
+}
 //# sourceMappingURL=dispatch.js.map

package/dist/dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,6GAA6G;AAC7G,+GAA+G;AAC/G,8GAA8G;AAC9G,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAUvD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,sBAAsB,EAAE,+BAA+B,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEhH,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IAClD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,EAAE,CAAC;QACjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,eAAe,EAAE,GAAG,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACzL,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAI,GAA4B,EAAE,IAAY,EAAE,IAAY;IACvE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,OAAO,EAAE,KAAK,UAAU;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,IAAI,oBAAoB,IAAI,+DAA+D,CAAC,CAAC;IAChL,OAAO,EAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,yCAAyC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAW,CAAC;AAE1L,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAkC;IAClE,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,CAAY,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,cAAc,EAAW,CAAC;AAExG,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,OAAO,IAAI,CAAkB,MAAM,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAC/I,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,WAAW,EAAW,CAAC;AAErG,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,CAAoB;IAC1D,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;gIACgI;AAChI,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,mCAAmC,EAAE,EAAE,EAAE,YAAY,EAAW,CAAC;AAEvG,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,IAAI,CAAa,MAAM,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,cAAc,CAAC,EAAE,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;AACvH,CAAC"}
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,6GAA6G;AAC7G,+GAA+G;AAC/G,8GAA8G;AAC9G,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAUvD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,sBAAsB,EAAE,+BAA+B,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEhH,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IAClD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,EAAE,CAAC;QACjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,eAAe,EAAE,GAAG,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACzL,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAI,GAA4B,EAAE,IAAY,EAAE,IAAY;IACvE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,OAAO,EAAE,KAAK,UAAU;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,IAAI,oBAAoB,IAAI,+DAA+D,CAAC,CAAC;IAChL,OAAO,EAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,yCAAyC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,kFAAkF,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,4CAA4C,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAW,CAAC;AAE1W,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAkC;IAClE,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,CAAY,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,cAAc,EAAW,CAAC;AAExG,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,OAAO,IAAI,CAAkB,MAAM,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAC/I,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,WAAW,EAAW,CAAC;AAErG,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,CAAoB;IAC1D,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;gIACgI;AAChI,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,mCAAmC,EAAE,EAAE,EAAE,YAAY,EAAW,CAAC;AAEvG,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,IAAI,CAAa,MAAM,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,cAAc,CAAC,EAAE,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;AACvH,CAAC;AAED;8HAC8H;AAC9H,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,0BAA0B,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,qBAAqB,EAAW,CAAC;AAMvL,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,0BAA0B,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC3E,OAAO;QACL,wBAAwB,EAAE,IAAI,CAAC,CAAC,EAAE,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,CAAC,IAAI,CAAC;QACrG,iBAAiB,EAAE,IAAI,CAAC,CAAC,EAAE,0BAA0B,CAAC,GAAG,EAAE,0BAA0B,CAAC,IAAI,CAAC;QAC3F,mBAAmB,EAAE,IAAI,CAAC,CAAC,EAAE,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,CAAC,IAAI,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,yHAAyH;AACzH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAW,CAAC;AAQ9E,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxD,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,WAAW,CAAC,IAAI,CAAC;QACnL,cAAc,EAAE,IAAI,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC,EAAE,qBAAqB,EAAE,WAAW,CAAC,IAAI,CAAC;KACnI,CAAC;AACJ,CAAC;AAED;0HAC0H;AAC1H,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAW,CAAC;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,oCAAoC,EAAE,EAAE,EAAE,qBAAqB,EAAW,CAAC;AAoCpH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,CAAI,CAAS,EAAE,EAAE,CAAC,IAAI,CAAI,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,eAAe,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,uBAAuB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,eAAe,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,yBAAyB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,uBAAuB,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,uBAAuB,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,CAAC;AAC9pC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACzH,CAAC;AAED,2HAA2H;AAC3H,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,IAAI,EAAE,kCAAkC,EAAE,EAAE,EAAE,qBAAqB,EAAW,CAAC;AACrH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,oBAAoB,CAAC,EAAE,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC;AAChI,CAAC;AACD;0FAC0F;AAC1F,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAI,CAA6C,CAAC,eAAe,EAAE,IAAI,IAAI,SAAS,CAAC;IAChG,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,wBAAwB,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;AACzJ,CAAC;AACD,kHAAkH;AAClH,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC;AAC/H,CAAC"}

package/dist/index.d.ts

@@ -19,7 +19,7 @@ export { workspaceGlobs, workspaceManifests } from './workspace.js';
 export type { PackageManifest, WorkspaceManifest } from './workspace.js';
 export { planUpgrade, applyUpgradePlan, formatUpgradePlan, npmDistTags } from './upgrade.js';
 export type { UpgradeMode, UpgradeChange, UpgradePlan, DistTagResolver } from './upgrade.js';
-export { CONFORM_MODULES, LIVE_GATES_MODULE, CREATE_APP_MODULE, RUNTIME_MODULE, loadConform, loadLiveGatesRunner, loadCreateApp, loadRuntimeCli, formatConformanceReport } from './dispatch.js';
+export { CONFORM_MODULES, LIVE_GATES_MODULE, CREATE_APP_MODULE, RUNTIME_MODULE, loadConform, loadLiveGatesRunner, loadCreateApp, loadRuntimeCli, loadHarnessProjections, loadEval, formatConformanceReport, COMPARE_MODULE, EVAL_STORE_MODULE, loadCompare, loadEvalStore, ORCHESTRATION_MODULE, loadDecideFromGrounding, loadProposeFromGrounding, loadHarnessCalibration } from './dispatch.js';
 export type { RuntimeCli } from './dispatch.js';
 export type { ConformanceCheck, ConformanceReport, ConformFn, LiveGatesRunner } from './dispatch.js';
 export { createDeveloperMcp, runDeveloperMcpStdio, DEVELOPER_MCP_DOCTRINE } from './developer-mcp.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,YAAY,EAAG,2BAAoC,CAAC;AACjE,eAAO,MAAM,cAAc,EAAG,yBAAkC,CAAC;AACjE,eAAO,MAAM,QAAQ,EAAG,uCAAgD,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC7D,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACvF,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnI,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAClH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EACrD,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,YAAY,GAC9H,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvI,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7F,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAChM,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACtG,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC1M,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,YAAY,EAAG,2BAAoC,CAAC;AACjE,eAAO,MAAM,cAAc,EAAG,yBAAkC,CAAC;AACjE,eAAO,MAAM,QAAQ,EAAG,uCAAgD,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC7D,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACvF,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnI,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAClH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EACrD,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,YAAY,GAC9H,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvI,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7F,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,sBAAsB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAClY,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACtG,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC1M,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -15,7 +15,7 @@ export { BUNDLED_RULES_DIR, RULES_BLOCK_START, RULES_BLOCK_END, ruleDigest, extr
 export { readLock, writeLock } from './lock.js';
 export { workspaceGlobs, workspaceManifests } from './workspace.js';
 export { planUpgrade, applyUpgradePlan, formatUpgradePlan, npmDistTags } from './upgrade.js';
-export { CONFORM_MODULES, LIVE_GATES_MODULE, CREATE_APP_MODULE, RUNTIME_MODULE, loadConform, loadLiveGatesRunner, loadCreateApp, loadRuntimeCli, formatConformanceReport } from './dispatch.js';
+export { CONFORM_MODULES, LIVE_GATES_MODULE, CREATE_APP_MODULE, RUNTIME_MODULE, loadConform, loadLiveGatesRunner, loadCreateApp, loadRuntimeCli, loadHarnessProjections, loadEval, formatConformanceReport, COMPARE_MODULE, EVAL_STORE_MODULE, loadCompare, loadEvalStore, ORCHESTRATION_MODULE, loadDecideFromGrounding, loadProposeFromGrounding, loadHarnessCalibration } from './dispatch.js';
 // Spec 398 §10.4 — the read-only Developer MCP (the THIRD MCP; never the runtime's, never the Home's).
 export { createDeveloperMcp, runDeveloperMcpStdio, DEVELOPER_MCP_DOCTRINE } from './developer-mcp.js';
 // Spec 398 §10.3 — the pinned definitions and the review `ap upgrade` stops for.

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,+GAA+G;AAC/G,0GAA0G;AAC1G,+GAA+G;AAC/G,yFAAyF;AACzF,MAAM,CAAC,MAAM,YAAY,GAAG,2BAAoC,CAAC;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,yBAAkC,CAAC;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAG,uCAAgD,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGvF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,EACL,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EACrD,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,YAAY,GAC9H,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE7F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGhM,uGAAuG;AACvG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEtG,iFAAiF;AACjF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,+GAA+G;AAC/G,0GAA0G;AAC1G,+GAA+G;AAC/G,yFAAyF;AACzF,MAAM,CAAC,MAAM,YAAY,GAAG,2BAAoC,CAAC;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,yBAAkC,CAAC;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAG,uCAAgD,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGvF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,EACL,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EACrD,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,YAAY,GAC9H,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE7F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,sBAAsB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAGlY,uGAAuG;AACvG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEtG,iFAAiF;AACjF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/rules/web-no-direct-mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web-no-direct-mcp.d.ts","sourceRoot":"","sources":["../../src/rules/web-no-direct-mcp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,YAAY,CAAC;AAS1D,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAuBrE,CAAC"}
+{"version":3,"file":"web-no-direct-mcp.d.ts","sourceRoot":"","sources":["../../src/rules/web-no-direct-mcp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,YAAY,CAAC;AAU1D,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAuBrE,CAAC"}

package/dist/rules/web-no-direct-mcp.js

@@ -1,7 +1,8 @@
 import { isCommentLine } from '../fs.js';
 const FORBIDDEN = [
     { re: /(?<!\/a2a)\/mcp\/native/, what: 'native MCP tool ingress (/mcp/native) — go through /a2a/*' },
-    { re: /(?<!\/a2a)\/mcp(["'`])/, what: 'OAuth MCP tool ingress (POST /mcp) — go through /a2a/*' },
+    // A literal that begins under `/a2a/` is through a2a whatever it ends in (`/a2a/harness/connectors/mcp`, spec 404).
+    { re: /(?<!\/a2a)(?<!\/a2a\/[^"'`]*)\/mcp(["'`])/, what: 'OAuth MCP tool ingress (POST /mcp) — go through /a2a/*' },
     { re: /(?<!\/a2a)\/tools\//, what: 'raw MCP tool path (/tools/...) — go through /a2a/tools/... instead' },
 ];
 const SKIP = new Set(['dist', 'node_modules', 'coverage', 'test', 'tests', '__tests__', '.next']);

package/dist/rules/web-no-direct-mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-no-direct-mcp.js","sourceRoot":"","sources":["../../src/rules/web-no-direct-mcp.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,SAAS,GAAgD;IAC7D,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,2DAA2D,EAAE;IACpG,EAAE,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,wDAAwD,EAAE;IAChG,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,oEAAoE,EAAE;CAC1G,CAAC;AACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAElG,MAAM,CAAC,MAAM,cAAc,GAA+C;IACxE,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,4BAA4B;IAClC,QAAQ,EAAE,qEAAqE;IAC/E,GAAG,CAAC,GAAG,EAAE,GAAG;QACV,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAC7D,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;oBACnC,IAAI,aAAa,CAAC,IAAI,CAAC;wBAAE,OAAO;oBAChC,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;wBAAE,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;4BAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;gBACjJ,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,0CAA0C,CAAC,CAAC,CAAC,GAAG,OAAO,0CAA0C,EAAE,QAAQ,EAAE,CAAC;IACtK,CAAC;CACF,CAAC"}
+{"version":3,"file":"web-no-direct-mcp.js","sourceRoot":"","sources":["../../src/rules/web-no-direct-mcp.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,SAAS,GAAgD;IAC7D,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,2DAA2D,EAAE;IACpG,oHAAoH;IACpH,EAAE,EAAE,EAAE,2CAA2C,EAAE,IAAI,EAAE,wDAAwD,EAAE;IACnH,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,oEAAoE,EAAE;CAC1G,CAAC;AACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAElG,MAAM,CAAC,MAAM,cAAc,GAA+C;IACxE,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,4BAA4B;IAClC,QAAQ,EAAE,qEAAqE;IAC/E,GAAG,CAAC,GAAG,EAAE,GAAG;QACV,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAC7D,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;oBACnC,IAAI,aAAa,CAAC,IAAI,CAAC;wBAAE,OAAO;oBAChC,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;wBAAE,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;4BAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;gBACjJ,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,0CAA0C,CAAC,CAAC,CAAC,GAAG,OAAO,0CAA0C,EAAE,QAAQ,EAAE,CAAC;IACtK,CAAC;CACF,CAAC"}

package/package.json

@@ -1,7 +1,15 @@
 {
   "name": "@agenticprimitives/devkit",
-  "version": "0.0.0-alpha.6",
+  "version": "0.0.0-alpha.8",
   "description": "The Developer Kit core (spec 398 §10 / spec 399 §3): `ap doctor` runs the doctrine gates as data + pure rules over any tree, `ap doctor --rules` projects one pinned rules source into AGENTS.md / CLAUDE.md / .cursor/rules by digest, `ap upgrade` rewrites every @agenticprimitives/* pin to one coherent exact set, and `ap conform` / `ap test` dispatch to the packages that own conformance and live gates.",
+  "homepage": "https://agenticprimitives.dev",
+  "bugs": {
+    "url": "https://github.com/agentictrustlabs/agenticprimitives/issues"
+  },
+  "author": {
+    "name": "Agentic Trust Labs",
+    "url": "https://agenticprimitives.dev"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -32,12 +40,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@agenticprimitives/capability-claims": "0.0.0-alpha.23",
-    "@agenticprimitives/mcp-protocol": "0.0.0-alpha.3"
+    "@agenticprimitives/capability-claims": "0.0.0-alpha.25",
+    "@agenticprimitives/mcp-protocol": "0.0.0-alpha.4"
   },
   "peerDependencies": {
-    "@agenticprimitives/a2a": "0.0.0-alpha.23",
-    "@agenticprimitives/evaluation": "0.0.0-alpha.3"
+    "@agenticprimitives/a2a": "0.0.0-alpha.25",
+    "@agenticprimitives/evaluation": "0.0.0-alpha.4",
+    "@agenticprimitives/harness": "0.0.0-alpha.7",
+    "@agenticprimitives/orchestration": "0.0.0-alpha.6",
+    "@agenticprimitives/provenance-node": "0.0.0-alpha.2"
   },
   "peerDependenciesMeta": {
     "@agenticprimitives/a2a": {
@@ -45,10 +56,20 @@
     },
     "@agenticprimitives/evaluation": {
       "optional": true
+    },
+    "@agenticprimitives/harness": {
+      "optional": true
+    },
+    "@agenticprimitives/orchestration": {
+      "optional": true
+    },
+    "@agenticprimitives/provenance-node": {
+      "optional": true
     }
   },
   "devDependencies": {
-    "vitest": "^4.1.8"
+    "vitest": "^4.1.8",
+    "@agenticprimitives/harness": "0.0.0-alpha.7"
   },
   "keywords": [
     "agentic",
@@ -56,7 +77,12 @@
     "devkit",
     "doctor",
     "developer-kit",
-    "cli"
+    "cli",
+    "agentic-primitives",
+    "agenticprimitives",
+    "ai-agents",
+    "agent-authority",
+    "agentic-trust"
   ],
   "scripts": {
     "sync-rules": "node scripts/sync-rules.mjs",

package/rules/hard-rules.md

@@ -2,7 +2,7 @@
 
 - **Smart Agent address is the canonical identifier.** Every person, org, service agent, and treasury IS its ERC-4337 SA address. Names, profiles, ERC-8004 entries, ANS handles, HCS topics — all facets pointing AT the canonical address. Cross-package APIs take `Address`, not names. See [ADR-0010](docs/architecture/decisions/0010-smart-agent-canonical-identifier.md) + [spec 220](specs/220-agent-identity-bootstrap.md) for the bootstrap process (deploy → forced-unique name → custody → optional facets).
 - **Every Smart Agent is a Person, an Organization, or a Service — nothing else.** PROV-O's trichotomy (`prov:Person`/`prov:Organization`/`prov:SoftwareAgent`), mirrored by `AgentType = 'person' | 'org' | 'service'` in `@agenticprimitives/types`. Treasury, indexer, relay, marketplace, data-source are **Service roles** (profile `serviceType` / app-level kinds), never new classes; UI groups by class and labels by role; app kinds map DOWN to a class, never up into the enum ([ADR-0046](docs/architecture/decisions/0046-agent-classification-person-org-service.md), specs 217/225 §6). **A demo person SA is never also their org SA** — do not reuse “his own SA” as the organization ([agent-rules/demo-person-org-distinct.md](docs/architecture/agent-rules/demo-person-org-distinct.md), `pnpm check:demo-person-org-distinct`).
-- **Canonical identity persists; credentials rotate.** Passkeys, SIWE EOAs, hardware wallets are control credential facets — replaceable, not the identity. Credential add / replace / remove is a custody-policy-governed operation (trustee quorum, guardian quorum, multi-credential self-recovery, or multi-sig), NEVER a delegation. The SA address NEVER changes during credential recovery. Delegations issued by the SA remain valid after rotation. See [ADR-0011](docs/architecture/decisions/0011-credential-recovery-and-re-association.md) + [spec 221](specs/221-credential-recovery.md).
+- **Canonical identity persists; credentials rotate.** Passkeys, SIWE EOAs, hardware wallets are control credential facets — replaceable, not the identity. Credential add / replace / remove is a custody-policy-governed operation (trustee quorum, guardian quorum, multi-credential self-recovery, or multi-sig), NEVER a delegation. The SA address NEVER changes during credential recovery. **Every standing grant is re-approved by the ROTATION ceremony under the new custody epoch, and never by recovery** (spec 410 §1; the pre-epoch sentence "delegations remain valid after rotation" is retired): a rotation is `add → retire → approveDigest×N` in one transaction, a recovery is `add → retire → revokeAll` and the person re-issues from a reviewed list; only the account computes an approved-hash key (`approveDigest`), the registry is never an execute target. See [ADR-0011](docs/architecture/decisions/0011-credential-recovery-and-re-association.md) + [spec 221](specs/221-credential-recovery.md).
 - **Specs precede non-trivial code.** New `specs/2XX-*.md` before architecture changes; the spec is the architect-of-record.
 - **Always check smart-agent first.** Before designing any non-trivial capability look at the analog in `/home/barb/smart-agent`. New specs MUST include a "Reference: smart-agent patterns to port" section. Deliberate divergence must say why.
 - **Package boundaries** are one-directional: `types ← identity-auth ← agent-account ← delegation ← mcp-runtime`, plus `key-custody → delegation`, `tool-policy → mcp-runtime`, and the custody-layer fork `types ← custody` (depended on by `agent-account` and `delegation`; see [spec 213](specs/213-custody-layer-carve-out.md) for the firewall). No back-edges. `tool-policy` and `types` are transport-agnostic (no MCP/A2A/LangChain/Vercel imports).
@@ -41,7 +41,7 @@
 - **Per-package context budget:** `CLAUDE.md` ≤ 60 lines, `AUDIT.md` ≤ 150 lines, `README.md` ≤ 1800 words. If you're tempted to bloat one, fix the package shape.
 - **No `eth_getLogs` in product read paths.** Package and app hot paths use `readContract` only; chain history and human-readable reverse strings come from on-chain storage, an explicit indexer, or app cache — never inline log scans ([ADR-0012](docs/architecture/decisions/0012-no-eth-getlogs-in-product-read-paths.md)). No exceptions: the last walker (`agent-naming` `reverseResolve` log fallback) was removed once spec/222 `reverseResolveString` landed.
 - **No silent fallbacks.** A read/auth path has exactly ONE mechanism. If the canonical path has no answer it returns `null`/empty or throws — it does NOT escalate to a second, different, more expensive mechanism (`try fast catch slow`, empty-result → log walk, strong-check → weak-check). Empty is an answer, not a trigger. Bounded retries of the *same* call and cache-first reads (cache holds the canonical answer) are fine; switching mechanism is not ([ADR-0013](docs/architecture/decisions/0013-no-silent-fallbacks.md)).
-- **The discovery knowledge base holds ONLY public, on-chain-derivable data.** The GraphDB A-box (projected by `demo-discovery-indexer`, read by `demo-discovery-mcp`/`-a2a`) is a world-readable read tier — populate it ONLY with facts any party could reproduce from on-chain state, transactions, or event logs (naming, registry entries, profile, relationships, attestations, custodian/passkey membership from `CustodianAdded`/`PasskeyAdded` logs). NEVER per-viewer state, session/credential secrets, off-chain/relying-app-local data, vault contents, PII, or private linkage ([ADR-0025](docs/architecture/decisions/0025-related-agents-are-private-vault-credentials.md)) — not even hashed, not even temporarily, not even to make a check faster. No secret-derived rows: any opaque form (e.g. custody membership as `sha256(credential‖smartAgent)`) MUST be a public, unsalted, on-chain-*reproducible* function — no server pepper. The indexer is the only writer; consumer services MUST NOT write viewer-/request-derived facts back. The claim: reading the whole KB reveals nothing reading the chain wouldn't ([ADR-0040](docs/architecture/decisions/0040-knowledge-base-only-public-onchain-data.md)).
+- **The discovery knowledge base holds ONLY public, on-chain-derivable data.** The GraphDB A-box (projected by `demo-discovery-indexer`, read by `demo-discovery-mcp`/`-a2a`) is a world-readable read tier — populate it ONLY with facts any party could reproduce from on-chain state, transactions, or event logs (naming, registry entries, profile, relationships, attestations, custodian/passkey membership from `CustodianAdded`/`PasskeyAdded` logs). NEVER per-viewer state, session/credential secrets, off-chain/relying-app-local data, vault contents, PII, or private linkage ([ADR-0025](docs/architecture/decisions/0025-related-agents-are-private-vault-credentials.md)) — not even hashed, not even temporarily, not even to make a check faster. No secret-derived rows: any opaque form (e.g. custody membership as `sha256(credential‖smartAgent)`) MUST be a public, unsalted, on-chain-*reproducible* function — no server pepper. The indexer is the only writer; consumer services MUST NOT write viewer-/request-derived facts back. The claim: reading the whole KB reveals nothing reading the chain wouldn't ([ADR-0040](docs/architecture/decisions/0040-knowledge-base-only-public-onchain-data.md)). Amended carve-outs, each opt-in, signed or verified, and read the way a stranger would read it: A2A cards (286), signed Home manifests (323), and **public + owner-released shelf works** with their retrieval index (413; the index is never bound beside a vault, `check:no-vector-over-vault`).
 - **On the A2A→MCP hop, Web3 is the authority; MCP OAuth is only the ingress envelope.** When an A2A service agent calls an MCP service, the authorization decision is ALWAYS the Web3 chain — on-chain delegation + signature validation (ERC-1271/6492/ECDSA/WebAuthn via `UniversalSignatureValidator`) + entitlement + tool policy (+ key-release grant + audit for data) — re-run server-side against the principal SA. We ship MCP's OAuth (RFC 9728 bearer / protected-resource metadata) as a generic ingress *adapter* so external MCP clients interoperate, but the bearer is at most a transport envelope: it carries only `ap_principal` + a `ap_grant_ref`/`ap_grant_hash` to an encrypted grant bundle, NEVER delegation/entitlement payload or field-level authority. Do NOT let OAuth drift inward: field/record access is never encoded in scopes (`vault:read` ≠ "decrypt all PII"), OAuth claims (`scope`/`aud`/`client_id`) are never trusted *as* the grant, an inbound MCP token is never reused for the next hop (fresh token / RFC 8693 exchange), and the Web3 gates are never skipped because "OAuth already authenticated the caller." For internal A2A→MCP hops the public OAuth ingress may be absent/skipped (the A2A bridge handles MCP tokens server-side, never exposing them downstream) — the delegation+signature+entitlement+policy gates are not. One mechanism (ADR-0013): OAuth-fail rejects, it does not fall back to a weaker token-trust path. When the standard and the substrate conflict, the substrate wins. ERC-4337 SA-bound, signature-verified, on-chain-revocable delegation is our differentiator from OAuth — never trade it for an opaque issuer-granted scope ([ADR-0041](docs/architecture/decisions/0041-web3-authority-not-oauth-on-a2a-to-mcp.md) + [spec 277](specs/277-mcp-delegated-vault-authorization.md) + [spec 269](specs/269-async-delegation-authorized-a2a.md) + [spec 270](specs/270-del-001-activation.md)).
 - **Agentic architecture: first-party web expresses INTENTS to an A2A agent; it NEVER drives MCP directly.** A2A is the orchestration / intelligence / discovery layer — it discovers which capability satisfies a declarative goal, plans (planner/LLM/LangChain), assembles authority (delegation/entitlement), and composes MCP tools AS PRIMITIVES. A first-party UI (demo-web-pro, demo-sso-next) says "rebalance the treasury" / "read Alice's PII for purpose X" — a goal, not a tool name, payload, or call sequence — and posts it to an a2a agent. **`web → (edge) → MCP /tools|/mcp|/mcp/native` directly is the anti-pattern (RPC with extra steps) for first-party apps.** The public MCP ingress (`/mcp`, `/mcp/native`) is interop for EXTERNAL agents/clients only; the Act6 OAuth/Native panels are external-MCP-client *demonstrations of a primitive*, NOT a product-UX model (keep them labelled as such). **Orchestration is a Ring-0 primitive, not external** — the agentic loop (intent→plan→compose→observe→re-plan), the planner/reasoner PORT, and the tool/skill model live in a pure `packages/*` orchestration core; ONLY the concrete LLM-framework binding (LangChain/OpenAI/Anthropic SDK) lives in a dedicated in-repo adapter behind the port — the `chain-state` + `chain-state-viem` pattern (ADR-0037 exiles protocol-conformance + deployed-infra, NOT libraries). `service-agent` stays the deterministic compile/run target; the Ring-0 orchestration core PRODUCES its plans. Apps wire model creds/config; they don't re-implement the loop. The edge is orthogonal: it admits, it does not orchestrate (ADR-0043). Honest tension: the first-party web↔a2a surface is RPC-shaped TODAY (`/session/*`, `/account/*`, `/mcp/person/pii` — verbs); the intent layer (A2A messages/tasks against `A2aTaskDO` + `service-agent` plans) is the objective — build NEW first-party surfaces intent-first; the relayer verbs are legacy. Enforced by review + `check:no-direct-mcp-in-web` (browser-app source; allowlist the labelled external-client demo panels) ([ADR-0044](docs/architecture/decisions/0044-a2a-is-the-agentic-orchestration-layer.md) + [docs/architecture/principles.md](docs/architecture/principles.md)).
 - **Packages are GENERIC trust building blocks; white-label / vertical / deployment code lives in apps.** `packages/*` are reusable + vertical-agnostic. They MUST NOT contain (a) **branding / vertical content** — faith vocabulary (ministry, congregation, discipleship, parish, denomination, gospel, scripture — **`church`/`circle` are the one carve-out: Ring-0 derived AGENT TYPES since 2026-08-30, ADR-0061 amendment; the KIND is generic, the content is not**), white-label/product names, marketing copy, themes; (b) **vertical-specific flows** — faith onboarding steps, impact-portal features; (c) **deployment specifics** — concrete hostnames (`impact-agent.me`/`.io`), the `demo.agent` subregistry, hosting providers (`*.pages.dev`/`*.workers.dev`/`vercel`), host/subdomain parsing. All of that is the **app** layer's job, supplied as an **app-level white-label config object** (spec 234) the generic core consumes. The `.agent` TLD itself is the naming protocol (owned by `agent-naming`) and is allowed. Enforced by `pnpm check:no-domain-in-packages` (hostnames + `demo.agent` + faith vocab) + `check:forbidden-terms`; the rest is doctrine ([ADR-0021](docs/architecture/decisions/0021-generic-packages-vs-white-label-apps.md)). Each app centralizes its domain/white-label literals in one module (e.g. `src/lib/domain.ts`), never scattered.

package/rules/vault-is-the-record-apps-hold-references.md

@@ -0,0 +1,47 @@
+# The vault is the record; an app holds references, never copies
+
+**Binding rule for every product app on the substrate (Source Publishing, Field, Skills, Gather, the Home's own
+serving planes) and for the A2A runtime.** Canonical copy; Cursor has no `.mdc` for it yet.
+
+## The rule
+
+1. **A person's data lives in their vault, behind MCP, under their own key.** Name, email, phone, location, the
+   publisher card, a work's text, a profile of any kind — one record, in the owner's vault, reachable only through a
+   delegation the owner signed. Nothing about a person is authoritative anywhere else.
+2. **An app keeps REFERENCE facts and its own operational records — nothing that is the person's.** Reference: the Smart
+   Agent address, the handle the app assigned, the client's own wire (ask-as-me) and grants, ids of records it wrote
+   through the owner's agent. Operational: what the app itself produced and must serve (a public replica of a SIGNED,
+   PUBLIC artifact; an archive the product exists to keep; verification results). Never a copy of a private field
+   because it was convenient to have beside the id.
+3. **A copy that exists for speed is a cache with a source, never a second record.** The Home's KV Library cache is
+   rebuildable from the vault and says `source: cache` on the wire; the runtime's DO storage is a serving plane
+   (ADR-0055). If wiping it is a bereavement and not a rebuild, it belonged in the vault.
+4. **Reads are fast by GRANT, not by copying.** An app that needs a person's record at request latency holds a scoped,
+   revocable **read grant** the person signed at connect (registry `read_grant.resources`; spec 341 §4.3b) and reads
+   it in one call under its own bearer — no harness, no model. What is public is read through the owner's agent's
+   public lane (spec 412) — no credential at all. The one thing an app never does is answer speed by storing.
+5. **Writes go through the owner's agent, as the owner.** An app never writes a vault. It asks the person's agent
+   (`ask-as-me` → `harness.ask` → a self-acting capability such as `profile.contact.update`, `library.file.save`), and
+   the agent writes as the person, into the person's vault, leaving a run of theirs. A form in an app that collects a
+   person's name is a form that writes it to their Home — the app forgets it the moment the write lands.
+6. **The A2A runtime is the same.** It reads and writes the owner's records under the owner's grants; it holds serving
+   state, receipts, cursors and caches, never the person's data as its own.
+
+## Why
+
+Every copy is a second enforcement point with a second authority model, and a record nobody can carry to another Home.
+The publishing app kept a directory row with the person's name, organization, byline and topics beside their address,
+and a profile document with their email — three copies of things the Home knew, each drifting the day the Home changed
+(2026-09-21). The doctrine that made revocation real (per-app grants, ADR-0041) is undone by a copy that survives the
+revoke.
+
+## How to apply
+
+- Designing a table: for each column ask *whose fact is this?* A person's → not here; read it under a grant or through
+  the public lane. The app's own → fine.
+- Designing a form: if it collects a person's fact, its submit is a write to their Home through their agent, and the
+  page re-reads it from there.
+- Reviewing an app: `grep` its schema and browser storage for names, emails, phones, addresses, profile text. Each hit
+  is a finding unless it is inside a signed public artifact the app exists to serve.
+- Performance complaint about a person's data: the answer is a read grant (private) or the public lane (public),
+  declared in the registry — never a local copy.