@agenticprimitives/devkit 0.0.0-alpha.7 → 0.0.0-alpha.8

package/bin/ap.mjs

@@ -6,6 +6,7 @@
 //   ap upgrade --canary | --pin <version|tag> [--dry-run] [--no-install] [--accept-definitions] [--json]
 //   ap upgrade --pin-definitions <registry> <ctx>/<archetype>[,…]     pin the contracts the product relies on (398 §10.3)
 //   ap conform a2a|mcp <url> [--bearer <token>] [--timeout <ms>] [--json]
+//   ap conform provenance file:<dir>|memory: [--json]     (spec 414 §6 — a provenance store binding, C1–C6)
 //   ap test --live-gates <ledger.json> [--only a,b] [--json]
 //   ap create <dir> --template product-repo [--name <n>] [--pin <version>] [--json]
 //   ap mcp [--root <dir>]                                       the read-only Developer MCP on stdio (spec 398 §10.4)
@@ -13,6 +14,22 @@
 //   ap eval <cases.eval.json> --home <url> [--persona <handle> [--client <id>] | --session <bearer>] [--report out.json] [--json]
 //                                                               cases as data against a live Home; deterministic judge; exit 1 on a failing case
 //   ap eval --from-runs --home <url> --persona <handle> [--addressee <name|0x>] [--out cases.eval.json]   a dataset from the agent's live runs
+//   ap eval window open --store <dir> --home <url> --roster <handle,…> --level L0|L1|L2 [--hours 24] [--purpose …]   (spec 414 §8) open a capture window
+//   ap eval window close --store <dir>                          close it: the salt is purged, nothing exported can be re-linked
+//   ap eval rescore --store <dir> --plan-id <id> --replay <set.json> --criterion <gold.json>   score a stored experiment again (the runs are not re-run)
+//   ap eval report --store <dir> --sets <dir> --out <report.json> [--definition <url|file>]   (spec 415 §5b; --definition flags test sentences the skills carry as examples) what was tested, whether each intent got the right skill,
+//                                                               per-skill results, comparisons in words, and recommendations — what the Lab and skill-web render
+//   ap eval gates --store <dir> [--plan-id <id>,… | --all] --sets <dir> --definition <url|file> [--gate rbox|calibration|consistency|recall|behaviour|conformal --map <map.json> [--variant v] | outcome --outcome-gold <file>]
+//   ap eval scorecard --store <dir> --sets <dir> --plan-id a,b [--out f.json]   (spec 416 §4g) the selection scorecard per experiment × variant
+//   ap eval calibrate --store <dir> --plan-id a,b --variant v --sets <dir> --definition <url|file> --alpha 0.05 --out <map.json>   (spec 416 W3) fit a calibration map on labelled runs   (spec 415 A4)
+//                                                               rbox agreement (the exact half re-derives) + judgment calibration (the probabilistic half); exit 1 on FAIL
+//   ap eval diff --store <dir> --before <plan-id> --after <plan-id> --replay <set.json> --criterion <gold.json> [--variant model | --variant-before a --variant-after b] [--repaired-pair a,b]
+//                                                               two stored experiments on the same set: McNemar on the paired cases, Δ macro with its CI, collateral
+//   ap eval compare --replay <set.json> --criterion <gold.json> --variants <name|file,…> --store <dir> --home <url> [--fixtures <starting-states.json>]
+//                   --persona <handle> --addressee <name|0x> [--split held-out|development|all] [--repeat n] [--skill-map <map.json>]
+//                   [--plan-id <id>] [--policy primary|any-fire] [--json]           (spec 415 A4) a pre-registered comparison, judged from the traces
+//                   [--keep-text <dir>]   keep every case's REPLY and ACTIVITY TREE under <dir>/<plan-id>/ — words included, OUTSIDE the
+//                                         store (which never holds them); only when the open window admits the addressee (a sandbox org)
 //   ap generate client|cli|parity --registry <url> --definition <ctx>/<archetype> | --file <definition.json> [--out <path>] [--only a,b]
 //                                                               the typed client / CLI schema / parity cases FROM the compiled contract (spec 398 §7.2)
 //
@@ -23,7 +40,7 @@ import { resolve } from 'node:path';
 import {
   DevkitError, EXIT, RULE_IDS, runDoctor, formatDoctorReport, loadDoctorConfig, loadRulesCorpus, projectRules, rulesLockEntries,
   readLock, writeLock, planUpgrade, applyUpgradePlan, formatUpgradePlan, loadConform, loadLiveGatesRunner, loadCreateApp, loadRuntimeCli, formatConformanceReport,
-  runDeveloperMcpStdio, reviewDefinitions, pinDefinition, definitionKey, formatAuthorityChanges, loadHarnessProjections, fetchDefinitionFromRegistry, loadEval,
+  runDeveloperMcpStdio, reviewDefinitions, pinDefinition, definitionKey, formatAuthorityChanges, loadHarnessProjections, fetchDefinitionFromRegistry, loadEval, loadCompare, loadEvalStore, loadDecideFromGrounding, loadProposeFromGrounding, loadHarnessCalibration,
 } from '../dist/index.js';
 
 const argv = process.argv.slice(2);
@@ -137,7 +154,7 @@ async function upgrade() {
 
 async function conform() {
   const [kind, url] = positional();
-  if (!['a2a', 'mcp'].includes(kind) || !url) throw new DevkitError('E_USAGE', 'ap conform a2a|mcp <url>');
+  if (!['a2a', 'mcp', 'provenance'].includes(kind) || !url) throw new DevkitError('E_USAGE', 'ap conform a2a|mcp <url> | ap conform provenance file:<dir>|memory:');
   const fn = await loadConform(kind);
   const report = await fn(url, { bearer: opt('bearer') ?? process.env.AP_CONFORM_BEARER, timeoutMs: opt('timeout') ? Number(opt('timeout')) : undefined });
   out({ ok: report.ok, report }, formatConformanceReport(report));
@@ -208,6 +225,16 @@ async function generate() {
 // estate's demo-signin) or a session bearer the developer holds; the judge is deterministic. An eval never signs: an
 // act's right outcome is `authority_required`, asserted as a check.
 async function evalCmd() {
+  const sub = positional()[0];
+  if (sub === 'window') return evalWindow();
+  if (sub === 'compare') return evalCompare();
+  if (sub === 'rescore') return evalRescore();
+  if (sub === 'diff') return evalDiff();
+  if (sub === 'report') return evalReport();
+  if (sub === 'gates') return evalGates();
+  if (sub === 'calibrate') return evalCalibrate();
+  if (sub === 'scorecard') return evalScorecard();
+  if (sub === 'ledger') return evalLedger();
   const home = (opt('home') ?? process.env.HOME_URL ?? '').replace(/\/$/, '');
   if (!home) throw new DevkitError('E_USAGE', '--home <url> (or HOME_URL) is required');
   const ev = await loadEval();
@@ -253,6 +280,473 @@ async function evalCmd() {
 const resolve_ = (p) => resolve(root, p);
 const out_ = out;
 
+// ── Spec 414 §8 / 415 A4 — THE ESTATE, AS A COMPARISON RUNNER SEES IT: the persona sign-in, the CSRF pair and the three
+// reads (ask · provenance · measures), shared by `compare` and `window`. Names resolve to addresses at the Home; the
+// runner holds no key and signs nothing — a run that needs authority parks at the Home like any other.
+async function estateClient(home) {
+  const j = async (r) => { const t = await r.text(); try { return JSON.parse(t); } catch { return { _raw: t.slice(0, 200), _status: r.status }; } };
+  const sessions = new Map();
+  const signin = async (handle) => {
+    if (sessions.has(handle)) return sessions.get(handle);
+    const s = await j(await fetch(`${home}/connect/demo-signin`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ handle, client_id: opt('client') ?? 'demo-jp' }) }));
+    if (!s.homeSession) throw new DevkitError('E_INPUT_MISSING', `${home} did not sign ${handle} in (a persona path exists on development estates only): ${JSON.stringify(s).slice(0, 160)}`);
+    const v = { token: String(s.homeSession), agent: String(s.agent).toLowerCase() }; sessions.set(handle, v); return v;
+  };
+  // The CSRF pair is cookie-bound and EXPIRES: a comparison longer than its lifetime once recorded 572 runs refused
+  // with "csrf invalid". A refusal naming the CSRF fetches a fresh pair and sends the SAME request once more — a
+  // bounded retry of the same call, never a different mechanism (ADR-0013).
+  const H = { 'content-type': 'application/json', origin: home, cookie: '', 'x-csrf-token': '' };
+  const refreshCsrf = async () => {
+    const csrfRes = await fetch(`${home}/a2a/auth/csrf`, { headers: { origin: home } });
+    const csrf = await j(csrfRes);
+    H.cookie = (csrfRes.headers.get('set-cookie') ?? '').split(';')[0] ?? ''; H['x-csrf-token'] = csrf.token ?? '';
+  };
+  await refreshCsrf();
+  const post = async (path, body) => {
+    const once = async () => j(await fetch(`${home}/a2a${path}`, { method: 'POST', headers: H, body: JSON.stringify(body) }));
+    const r = await once();
+    if (r && r.ok !== true && /csrf/i.test(String(r.error ?? r._raw ?? ''))) { await refreshCsrf(); return once(); }
+    return r;
+  };
+  const resolveName = async (name) => {
+    if (/^0x[0-9a-fA-F]{40}$/.test(name)) return name.toLowerCase();
+    const r = await j(await fetch(`${home}/connect/name-info?name=${encodeURIComponent(name)}`));
+    if (r.agent) return String(r.agent).toLowerCase();
+    // a persona handle: its own agent
+    try { return (await signin(name)).agent; } catch { throw new DevkitError('E_INPUT_MISSING', `${name} does not resolve at ${home}`); }
+  };
+  const comparison = await j(await fetch(`${home}/a2a/harness/comparison`).catch(() => new Response('{}')));
+  return { j, signin, post, resolveName, evalCapture: comparison?.evalCapture === 'on' ? 'on' : 'off', knob: comparison };
+}
+const windowPaths = (store) => ({ dir: resolve_(store.replace(/^file:/, '')), window: resolve(resolve_(store.replace(/^file:/, '')), 'window.json'), salt: resolve(resolve_(store.replace(/^file:/, '')), 'window.salt') });
+
+async function evalWindow() {
+  const [, action] = positional();
+  const store = opt('store');
+  if (!store || !['open', 'close'].includes(action ?? '')) throw new DevkitError('E_USAGE', 'ap eval window open|close --store <dir> …');
+  const { mkdirSync, writeFileSync, unlinkSync, readFileSync: rf, existsSync: ex } = await import('node:fs');
+  const { randomBytes } = await import('node:crypto');
+  const cm = await loadCompare();
+  const paths = windowPaths(store);
+  if (action === 'close') {
+    if (!ex(paths.window)) throw new DevkitError('E_INPUT_MISSING', `no window at ${paths.window}`);
+    const w = JSON.parse(rf(paths.window, 'utf8'));
+    w.expiresAt = new Date().toISOString();
+    writeFileSync(paths.window, `${JSON.stringify(w, null, 2)}\n`);
+    if (ex(paths.salt)) unlinkSync(paths.salt);
+    out_({ ok: true, closed: w.id, saltPurged: true }, `ap eval window · closed ${w.id} — the salt is purged; nothing exported under it can be re-linked`);
+    return;
+  }
+  const home = (opt('home') ?? process.env.HOME_URL ?? '').replace(/\/$/, '');
+  if (!home) throw new DevkitError('E_USAGE', '--home <url> (or HOME_URL) is required');
+  const level = opt('level') ?? 'L1';
+  const roster = (opt('roster') ?? '').split(',').map((s) => s.trim()).filter(Boolean);
+  if (!roster.length) throw new DevkitError('E_USAGE', '--roster <handle|name|0x,…> names the test personas and the sandbox org the window admits');
+  const est = await estateClient(home);
+  const addresses = [];
+  for (const n of roster) addresses.push(await est.resolveName(n));
+  const hours = Number(opt('hours') ?? 24);
+  const opensAt = new Date();
+  const w = { type: 'ap.eval-capture-window.v1', id: `w-${opensAt.toISOString().slice(0, 19).replace(/[-:T]/g, '')}`, store: `file:${paths.dir}`, level, roster: addresses, estate: home, opensAt: opensAt.toISOString(), expiresAt: new Date(opensAt.getTime() + hours * 3600_000).toISOString(), ...(opt('purpose') ? { purpose: opt('purpose') } : {}), ...(flag('synthetic') ? { synthetic: true } : {}) };
+  const v = cm.validateCaptureWindow(w);
+  if (!v.ok) throw new DevkitError('E_USAGE', `the window is not valid: ${v.errors.join('; ')}`);
+  mkdirSync(paths.dir, { recursive: true });
+  writeFileSync(paths.window, `${JSON.stringify(w, null, 2)}\n`);
+  writeFileSync(paths.salt, randomBytes(32).toString('hex'), { mode: 0o600 });
+  const digest = await cm.windowDigest(w);
+  out_({ ok: true, window: w, digest, estateCapture: est.evalCapture }, `ap eval window · opened ${w.id} (${digest.slice(0, 18)}…) at ${level} for ${hours} h · roster ${roster.join(', ')} · estate ${home} (EVAL_CAPTURE ${est.evalCapture})${est.evalCapture !== 'on' ? '\n  ! this estate does not run comparisons: every export will be refused (estate.capture-off) until EVAL_CAPTURE=on' : ''}`);
+}
+
+// Spec 415 A4 — SCORE A STORED EXPERIMENT AGAIN. The runs, the judgments and the export are what they were; only the
+// scoring step re-runs (a scorer fix, a threshold change). A run's evidence KIND is a property of how the trace was
+// read — a stamping harness that selected nothing is a stamped observation of no selection — so a record written before
+// that rule ("none" on a `tn` run) is read under it here, and the record says it was rescored.
+async function evalRescore() {
+  const store = opt('store'); const planId = opt('plan-id');
+  for (const [k, v] of [['store', store], ['plan-id', planId], ['replay', opt('replay')], ['criterion', opt('criterion')]]) if (!v) throw new DevkitError('E_USAGE', `--${k} is required (ap eval rescore --store <dir> --plan-id <id> --replay <set> --criterion <gold>)`);
+  const { readFileSync: rf, writeFileSync } = await import('node:fs');
+  const cm = await loadCompare();
+  const dir = resolve_(store.replace(/^file:/, ''));
+  const path = resolve(dir, 'experiments', `${encodeURIComponent(`experiment:${planId}`)}.jsonld`);
+  const doc = JSON.parse(rf(path, 'utf8'));
+  const rec = doc.record;
+  if (!rec?.plan) throw new DevkitError('E_INPUT_MISSING', `${path} holds no experiment record`);
+  const setR = cm.validateReplaySet(JSON.parse(rf(resolve_(opt('replay')), 'utf8')));
+  if (!setR.ok) throw new DevkitError('E_USAGE', `the replay set is not valid: ${setR.errors.join('; ')}`);
+  const criterion = JSON.parse(rf(resolve_(opt('criterion')), 'utf8'));
+  const setDigest = await cm.replaySetDigest(setR.set);
+  if (rec.plan.replaySetDigest !== setDigest || rec.plan.criterionDigest !== await cm.criterionDigest(criterion)) throw new DevkitError('E_USAGE', 'the set or the criterion is not the one this experiment pre-registered; a rescore never changes what was judged against');
+  const { cases, skillIds } = cm.casesOf(setR.set, criterion, rec.plan.split);
+  const runs = rec.runs.map((r) => (r.status === 'ok' && r.evidence === 'none' ? { ...r, evidence: 'stamped' } : r));
+  const scored = await cm.scoreExperimentRuns({ plan: rec.plan, setDigest, cases, skillIds, pairs: criterion.collisionPairs ?? [], runs, log: (line) => { if (!json) console.error(`  ${line}`); } });
+  const next = { ...rec, runs, ...scored, rescoredAt: new Date().toISOString() };
+  writeFileSync(path, `${JSON.stringify({ ...doc, record: next }, null, 2)}\n`);
+  out_({ ok: true, plan: next.plan, planDigest: next.planDigest, runs: next.runs.length, scores: Object.fromEntries(Object.entries(next.scores).map(([k, v]) => [k, v.aggregate])), perSkill: Object.fromEntries(Object.entries(next.scores).map(([k, v]) => [k, v.perSkill])), verdicts: Object.fromEntries(Object.entries(next.verdicts).map(([k, v]) => [k, { status: v.status, reason: v.binding_reason }])), comparisons: next.comparisons }, `ap eval rescore · ${path}\n${cm.formatExperiment(next)}`);
+}
+
+// Spec 415 §5b — THE REPORT: every experiment in the store, read with the replay sets and criteria it pre-registered
+// (found in --sets by digest), folded into one deterministic file. Numbers, ids, verdicts and the sets' AUTHORED test
+// sentences — the eval store holds no person's words, so neither does this.
+async function evalReport() {
+  const store = opt('store'); const setsDir = opt('sets'); const outPath = opt('out');
+  for (const [k, v] of [['store', store], ['sets', setsDir], ['out', outPath]]) if (!v) throw new DevkitError('E_USAGE', `--${k} is required (ap eval report --store <dir> --sets <dir> --out <report.json>)`);
+  const { readFileSync: rf, readdirSync, writeFileSync, mkdirSync } = await import('node:fs');
+  const { dirname } = await import('node:path');
+  const cm = await loadCompare();
+  const dir = resolve_(store.replace(/^file:/, ''));
+  const expDir = resolve(dir, 'experiments');
+  const experiments = readdirSync(expDir).filter((f) => f.startsWith(encodeURIComponent('experiment:')) && f.endsWith('.jsonld'))
+    .map((f) => JSON.parse(rf(resolve(expDir, f), 'utf8')).record).filter((r) => r?.plan);
+  const sets = {}; const criteria = {};
+  const walk = (d) => { for (const e of readdirSync(d, { withFileTypes: true })) { const p = resolve(d, e.name); if (e.isDirectory()) walk(p); else if (e.name.endsWith('.replay.json') || e.name.endsWith('.gold.json')) { const j = JSON.parse(rf(p, 'utf8')); if (j.type === 'ap.replay-set.v1') sets[p] = j; if (j.type === 'ap.selection-criterion.v1') criteria[j.replaySetDigest] = j; } } };
+  walk(resolve_(setsDir));
+  const byDigest = {};
+  for (const s of Object.values(sets)) byDigest[await cm.replaySetDigest(s)] = s;
+  // The examples the skills under test declare (their `utterances`, as the compiled playbook carries them) — so a test
+  // sentence that nearly repeats one is flagged as measuring the example, not selection. A URL or a file.
+  let examples; let toolToSkillForReport;
+  if (opt('definition')) {
+    const src = opt('definition');
+    const d = /^https?:/.test(src) ? await (await fetch(src, { headers: { 'user-agent': 'Mozilla/5.0 (ap eval report)' } })).json() : JSON.parse(rf(resolve_(src), 'utf8'));
+    const tools = (d.definition ?? d).tools ?? [];
+    examples = tools.flatMap((t) => (t.utterances ?? []).map((u) => ({ skill: t.source?.skillId ?? t.id, says: u.says, ...(u.isNot ? { isNot: true } : {}) })));
+    toolToSkillForReport = Object.fromEntries(tools.filter((t) => t.source?.skillId).map((t) => [t.id, t.source.skillId]));
+  }
+  // `--alias <experiment>:<variant>=<name>[,…]` — a knob value whose meaning changed after the experiment ran is shown
+  // as what actually ran. The record is never edited.
+  const aliases = {};
+  for (const a of (opt('alias') ?? '').split(',').filter(Boolean)) { const m = /^([^:]+):([^=]+)=(.+)$/.exec(a); if (!m) throw new DevkitError('E_USAGE', `--alias ${a}: expected <experiment>:<variant>=<name>`); (aliases[m[1]] ??= {})[m[2]] = m[3]; }
+  const report = cm.skillAssessmentReportOf({ experiments, sets: byDigest, criteria, ...(examples ? { examples } : {}), ...(Object.keys(aliases).length ? { aliases } : {}), ...(toolToSkillForReport ? { toolToSkill: toolToSkillForReport } : {}) });
+  mkdirSync(dirname(resolve_(outPath)), { recursive: true });
+  writeFileSync(resolve_(outPath), `${JSON.stringify(report, null, 2)}\n`);
+  const recs = report.recommendations;
+  out_({ ok: true, out: resolve_(outPath), experiments: report.experiments.length, recommendations: recs.length, headline: report.headline }, `ap eval report · ${report.experiments.length} experiment(s) · ${recs.length} recommendation(s) → ${resolve_(outPath)}\n${report.headline.map((h) => `  ${h}`).join('\n')}\n${recs.filter((r) => r.severity === 'act').slice(0, 8).map((r) => `  ▸ ${r.title}`).join('\n')}`);
+}
+
+// Spec 415 A4 — THE SELECTION GATES over stored experiments: rbox agreement (every ontology decision re-derives from its
+// recorded grounding under the playbook it ran with) and judgment calibration (the judge's confidence against being right).
+// FAIL exits 1; INCOMPLETE (nothing to check, or too few judged runs) is said and exits 0 — never reported as a pass.
+async function evalGates() {
+  const store = opt('store'); const setsDir = opt('sets'); const defSrc = opt('definition');
+  for (const [k, v] of [['store', store], ['sets', setsDir], ['definition', defSrc]]) if (!v) throw new DevkitError('E_USAGE', `--${k} is required (ap eval gates --store <dir> --sets <dir> --definition <url|file> [--plan-id a,b | --all])`);
+  const { readFileSync: rf, readdirSync } = await import('node:fs');
+  const cm = await loadCompare();
+  const decide = await loadDecideFromGrounding();
+  const propose = await loadProposeFromGrounding();
+  const dir = resolve(resolve_(store.replace(/^file:/, '')), 'experiments');
+  const want = opt('plan-id') ? new Set(opt('plan-id').split(',')) : null;
+  const records = readdirSync(dir).filter((f) => f.startsWith(encodeURIComponent('experiment:'))).map((f) => JSON.parse(rf(resolve(dir, f), 'utf8')).record).filter((r) => r?.plan && (!want || want.has(r.plan.id)));
+  const d = /^https?:/.test(defSrc) ? await (await fetch(defSrc, { headers: { 'user-agent': 'Mozilla/5.0 (ap eval gates)' } })).json() : JSON.parse(rf(resolve_(defSrc), 'utf8'));
+  const definition = d.definition ?? d;
+  const toolToSkill = Object.fromEntries((definition.tools ?? []).filter((t) => t.source?.skillId).map((t) => [t.id, t.source.skillId]));
+  const criteria = {};
+  const walk = (p) => { for (const e of readdirSync(p, { withFileTypes: true })) { const q = resolve(p, e.name); if (e.isDirectory()) walk(q); else if (e.name.endsWith('.gold.json')) { const j = JSON.parse(rf(q, 'utf8')); if (j.type === 'ap.selection-criterion.v1') criteria[j.replaySetDigest] = j; } } };
+  walk(resolve_(setsDir));
+  const which = opt('gate');
+  const only = (g) => !which || which === g;
+  const rbox = !only('rbox') ? null : cm.rboxAgreementOf({ experiment: { runs: records.flatMap((r) => r.runs) }, definition, decide, propose });
+  const calRuns = records.flatMap((r) => r.runs.map((x) => ({ ...x, __crit: criteria[r.plan.replaySetDigest] })));
+  const casesUnion = { cases: Object.assign({}, ...Object.values(criteria).map((c) => c.cases)) };
+  // Repeats count only WITHIN one experiment: across experiments the playbook, the judge or the model may differ.
+  const consistency = !only('consistency') ? null : cm.judgmentConsistencyOf({ experiment: { runs: records.flatMap((r) => r.runs.map((x) => ({ ...x, variant: `${r.plan.id}/${x.variant}` }))) } });
+  const calibration = !only('calibration') ? null : cm.judgmentCalibrationOf({ experiment: { runs: calRuns }, criterion: casesUnion, toolToSkill });
+  // Spec 416 W3 — conformal coverage of a fitted map, on runs of ONE variant (the map's binding), through the harness's set.
+  let conformal = null;
+  if (which === 'conformal') {
+    if (!opt('map')) throw new DevkitError('E_USAGE', '--gate conformal needs --map <map.json> (ap eval calibrate writes one)');
+    const map = JSON.parse(rf(resolve_(opt('map')), 'utf8'));
+    const fns = await loadHarnessCalibration();
+    const variant = opt('variant') ?? map.binding?.variant;
+    const fitted = new Set(map.fittedOn ?? []);
+    const overlap = records.filter((r) => fitted.has(r.plan.id)).map((r) => r.plan.id);
+    if (overlap.length) throw new DevkitError('E_USAGE', `coverage must be measured on runs the map was NOT fitted on — ${overlap.join(', ')} ${overlap.length === 1 ? 'is' : 'are'} in its fittedOn`);
+    conformal = cm.conformalCoverageOf({ experiment: { runs: calRuns.filter((x) => !variant || x.variant === variant) }, criterion: casesUnion, toolToSkill, map, fns });
+  }
+  const behaviour = !only('behaviour') ? null : cm.selectionBehaviourOf({ experiment: { runs: calRuns }, criterion: casesUnion });
+  // Spec 417 — OUTCOME PLANS: each variant's chains against gold plans (`--outcome-gold <file>`: { intentId: { plan, missing? } }).
+  // A measurement, not a pass/fail yet: the gate the spec names (plan-exact ≥ 0.8, no needless step on held inputs) is read off it.
+  let outcome = null;
+  if (which === 'outcome') {
+    if (!opt('outcome-gold')) throw new DevkitError('E_USAGE', '--gate outcome needs --outcome-gold <file>');
+    const gold = JSON.parse(rf(resolve_(opt('outcome-gold')), 'utf8')).cases;
+    const rows = cm.outcomePlanScoresOf(records.flatMap((r) => r.runs.map((x) => ({ ...x, variant: `${r.plan.id}/${x.variant}` }))), gold);
+    const pct = (a, b) => (b ? `${a}/${b}` : '—');
+    const planExact = rows.length ? Math.min(...rows.filter((r) => /outcome/.test(r.variant)).map((r) => r.exact / Math.max(1, r.n))) : 0;
+    outcome = { status: rows.length ? 'MEASURED' : 'INCOMPLETE', rows, reason: rows.length ? `outcome-arm plan-exact min ${planExact.toFixed(2)}` : 'no run of a gold intent' };
+  }
+  const lines = [`ap eval gates · ${records.length} experiment(s) · playbook ${String(d.digest ?? '').slice(0, 14)}`];
+  if (rbox) lines.push(`  check:rbox-agreement       ${rbox.status} — ${rbox.reason}${rbox.disagreements.length ? `\n${rbox.disagreements.slice(0, 8).map((x) => `    ✗ ${x.intentId} (${x.variant}) ${x.field}: recorded ${JSON.stringify(x.recorded)} ≠ derived ${JSON.stringify(x.derived)}`).join('\n')}` : ''}`);
+  if (calibration) lines.push(`  check:judgment-calibration ${calibration.status} — ${calibration.reason}${calibration.n ? ` · accuracy ${(calibration.accuracy * 100).toFixed(0)}% at mean confidence ${(calibration.meanConfidence * 100).toFixed(0)}%` : ''}${calibration.overconfident.length ? `\n    confident and wrong (p ≥ 0.8): ${calibration.overconfident.slice(0, 6).map((x) => `${x.intentId}→${x.predicted.split('/').pop()} (${x.p.toFixed(2)})`).join(', ')}` : ''}`);
+  if (consistency) lines.push(`  check:judgment-consistency ${consistency.status} — ${consistency.reason}${consistency.unstable.length ? `\n    changed its answer: ${consistency.unstable.slice(0, 6).map((x) => `${x.intentId} (${x.variant}) ${x.tops.map((t) => t.split('.').pop()).join('/')}`).join(', ')}` : ''}`);
+  const recall = !only('recall') ? null : cm.candidateRecallOf({ experiment: { runs: calRuns }, criterion: casesUnion, toolToSkill });
+  if (recall) lines.push(`  check:candidate-recall     ${recall.status} — ${recall.reason}${recall.n ? ` · mean ${recall.meanProposed.toFixed(1)} proposed · gold reached by ${Object.entries(recall.byVia).map(([k, v]) => `${k} ${v}`).join(', ')}` : ''}${recall.missed.length ? `\n    never proposed: ${recall.missed.slice(0, 8).map((x) => `${x.intentId}→${x.gold.split('/').pop()}`).join(', ')}` : ''}`);
+  if (conformal) lines.push(`  check:conformal-coverage   ${conformal.status} — ${conformal.reason}${conformal.n ? ` · mean set size ${conformal.meanSetSize.toFixed(2)} · sizes ${JSON.stringify(conformal.sizes)}` : ''}${conformal.uncovered.length ? `\n    not covered: ${conformal.uncovered.slice(0, 8).map((x) => `${x.intentId} gold ${x.gold.split('.').pop()} set [${x.set.join(', ')}]`).join('; ')}` : ''}`);
+  if (behaviour) lines.push(`  check:selection-behaviour  ${behaviour.status} — ${behaviour.reason}${behaviour.n ? ` · ${Object.entries(behaviour.counts).map(([k, v]) => `${k} ${v}`).join(', ')}` : ''}${behaviour.wrong.length ? `\n    not right: ${behaviour.wrong.slice(0, 8).map((x) => `${x.intentId} (${x.behaviour}) ${x.outcome}${x.chose ? ` ${x.chose}` : ''}`).join(', ')}` : ''}`);
+  if (outcome) lines.push(`  outcome-plans  ${outcome.status} — ${outcome.reason}\n${outcome.rows.map((r) => `    ${r.variant}: exact ${r.exact}/${r.n} · needless ${r.needless} · short ${r.short} · asked ${r.asked.right}/${r.asked.of} · steps ${r.stepsScore} · ${Object.entries(r.bySteps).map(([k, v]) => `${k} ${v.exact}/${v.n}`).join(', ')}`).join('\n')}`);
+  const failed = [rbox, calibration, consistency, recall, conformal, behaviour].some((g) => g?.status === 'FAIL');
+  out_({ ok: !failed, rbox, calibration, consistency, recall, conformal, behaviour, outcome }, lines.join('\n'));
+  process.exit(failed ? EXIT.FINDINGS : EXIT.OK);
+}
+
+// Spec 416 §4g — THE SELECTION SCORECARD: the same table every iteration (right, declines, ask p50/p90, time to pick,
+// tokens to pick / in total / cached, model calls and plan steps per ask), over stored experiments; `--out` keeps it, so
+// improvements are tracked as data, not remembered.
+// Spec 418 §4 — THE TECHNIQUE LEDGER: every technique's paired comparisons (quality by McNemar, cost by paired
+// bootstrap medians) from the stored experiments, with a declared verdict rule. Gold plans are read from the sets'
+// *.outcome-gold.json files. `ap eval ledger --store <dir> --techniques <file> --sets <dir> --out <file>`.
+async function evalLedger() {
+  const store = opt('store'); const techFile = opt('techniques'); const setsDir = opt('sets'); const outPath = opt('out');
+  for (const [k, v] of [['store', store], ['techniques', techFile], ['sets', setsDir], ['out', outPath]]) if (!v) throw new DevkitError('E_USAGE', `--${k} is required (ap eval ledger --store <dir> --techniques <file> --sets <dir> --out <file>)`);
+  const { readFileSync: rf, readdirSync, writeFileSync, mkdirSync } = await import('node:fs');
+  const { dirname } = await import('node:path');
+  const cm = await loadCompare();
+  const dir = resolve(resolve_(store.replace(/^file:/, '')), 'experiments');
+  const records = readdirSync(dir).filter((f) => f.startsWith(encodeURIComponent('experiment:'))).map((f) => JSON.parse(rf(resolve(dir, f), 'utf8')).record).filter((r) => r?.plan);
+  const goldBySet = {};
+  const walk = (p) => { for (const e of readdirSync(p, { withFileTypes: true })) { const q = resolve(p, e.name); if (e.isDirectory()) walk(q); else if (e.name.endsWith('.outcome-gold.json')) { const j = JSON.parse(rf(q, 'utf8')); if (j.replaySetDigest) goldBySet[j.replaySetDigest] = j.cases; } } };
+  walk(resolve_(setsDir));
+  const techniques = JSON.parse(rf(resolve_(techFile), 'utf8')).techniques;
+  const ledger = cm.techniqueLedgerOf({ records, techniques, goldBySet });
+  mkdirSync(dirname(resolve_(outPath)), { recursive: true });
+  writeFileSync(resolve_(outPath), `${JSON.stringify(ledger, null, 2)}\n`);
+  const f = (c) => (c?.deltaPct === null || c?.deltaPct === undefined ? '—' : `${c.deltaPct > 0 ? '+' : ''}${c.deltaPct}%`);
+  const lines = ledger.rows.map((r) => `  ${r.verdict.padEnd(24)} ${r.technique.name}${r.technique.ontologyDriven ? ' ◆' : ''}${r.comparisons.map((c) => `\n      ${c.experiment} ${c.baseline}→${c.treatment} n=${c.n} · ${c.quality.metric} ${c.quality.base}→${c.quality.treat} (+${c.quality.fixed}/−${c.quality.broken} p=${c.quality.p}) · pick tok ${f(c.cost.pickTokens)} · pick ms ${f(c.cost.pickMs)} · ask ms ${f(c.cost.askMs)} · ${c.verdict}`).join('')}${(r.pooled ?? []).map((q) => `\n      POOLED vs ${q.baseline} (${q.experiments} experiments, n=${q.n}): +${q.fixed}/−${q.broken} p=${q.p} · pick tok ${q.pickTokensPct ?? '—'}% · ask ms ${q.askMsPct ?? '—'}% · ${q.verdict}`).join('')}${r.missing.length ? `\n      missing: ${r.missing.join(', ')}` : ''}`);
+  out_({ ok: true, out: resolve_(outPath), rows: ledger.rows.length }, `ap eval ledger · ${ledger.rows.length} technique(s) → ${resolve_(outPath)}  (◆ ontology-driven)\n${lines.join('\n')}\n  rule: ${ledger.rule}`);
+}
+
+async function evalScorecard() {
+  const store = opt('store'); const setsDir = opt('sets'); const planIds = opt('plan-id');
+  for (const [k, v] of [['store', store], ['sets', setsDir], ['plan-id', planIds]]) if (!v) throw new DevkitError('E_USAGE', `--${k} is required (ap eval scorecard --store <dir> --sets <dir> --plan-id a,b [--out <file.json>])`);
+  const { readFileSync: rf, readdirSync, writeFileSync, mkdirSync } = await import('node:fs');
+  const { dirname } = await import('node:path');
+  const cm = await loadCompare();
+  const dir = resolve(resolve_(store.replace(/^file:/, '')), 'experiments');
+  const order = planIds.split(',');
+  const records = order.map((id) => { const f = resolve(dir, `${encodeURIComponent('experiment:' + id)}.jsonld`); try { return JSON.parse(rf(f, 'utf8')).record; } catch { throw new DevkitError('E_INPUT_MISSING', `no stored experiment ${id}`); } });
+  const criteria = {};
+  const walk = (p) => { for (const e of readdirSync(p, { withFileTypes: true })) { const q = resolve(p, e.name); if (e.isDirectory()) walk(q); else if (e.name.endsWith('.gold.json')) { const j = JSON.parse(rf(q, 'utf8')); if (j.type === 'ap.selection-criterion.v1') Object.assign(criteria, j.cases); } } };
+  walk(resolve_(setsDir));
+  const rows = cm.scorecardOf(records, criteria);
+  const s = (ms) => (ms === null || ms === undefined ? '—' : `${(ms / 1000).toFixed(1)}s`);
+  const k = (n) => (n === null || n === undefined ? '—' : n >= 1000 ? `${(n / 1000).toFixed(1)}k` : String(Math.round(n)));
+  const lines = [`ap eval scorecard · ${records.length} experiment(s)`, `  ${'experiment/variant'.padEnd(46)} right   pos    neg   ask p50/p90   pick  pick tok in/out  total in/out  cached calls steps quality`];
+  for (const r of rows) lines.push(`  ${`${r.experiment}/${r.variant}`.slice(0, 46).padEnd(46)} ${`${r.right}/${r.runs}`.padEnd(6)} ${`${r.rightOnPositives}/${r.positives}`.padEnd(6)} ${`${r.declined}/${r.negatives}`.padEnd(6)} ${`${s(r.askP50)}/${s(r.askP90)}`.padEnd(13)} ${s(r.pickP50).padEnd(5)} ${`${k(r.selectionIn)}/${k(r.selectionOut)}`.padEnd(15)} ${`${k(r.totalIn)}/${k(r.totalOut)}`.padEnd(13)} ${k(r.cachedIn).padEnd(6)} ${String(r.modelCalls ?? '—').padEnd(5)} ${String(r.planSteps ?? '—').padEnd(5)} ${r.quality === null || r.quality === undefined ? '—' : `${r.quality.toFixed(2)} (${r.qualityRuns})`}`);
+  for (const r of rows) if (r.preference) lines.push(`    ${r.variant} side by side (${r.preferenceRuns}): ${Object.entries(r.preference).map(([k, v]) => `${k} ${(v * 100).toFixed(0)}%`).join(' · ')}`);
+  for (const r of rows) { const st = Object.entries(r.stagesP50 ?? {}).slice(0, 6); if (st.length) lines.push(`    ${r.variant} stages p50: ${st.map(([n, v]) => `${n} ${s(v)}`).join(' · ')}`); }
+  if (opt('out')) { mkdirSync(dirname(resolve_(opt('out'))), { recursive: true }); writeFileSync(resolve_(opt('out')), `${JSON.stringify({ type: 'ap.selection-scorecard.v1', at: new Date().toISOString(), rows }, null, 2)}\n`); lines.push(`  → ${resolve_(opt('out'))}`); }
+  out_({ ok: true, rows }, lines.join('\n'));
+}
+
+// Spec 416 W3 — FIT A CALIBRATION MAP on labelled runs of one variant (one binding): a temperature and a conformal q̂ at
+// level alpha, through the harness's own math. The map is data with a digest; `ap eval compare` passes it as the variant's
+// `acceptance`, and `ap eval gates --gate conformal --map` measures it on runs it was not fitted on.
+async function evalCalibrate() {
+  const store = opt('store'); const setsDir = opt('sets'); const defSrc = opt('definition'); const planIds = opt('plan-id'); const variant = opt('variant'); const out = opt('out');
+  for (const [k, v] of [['store', store], ['sets', setsDir], ['definition', defSrc], ['plan-id', planIds], ['variant', variant], ['out', out]]) if (!v) throw new DevkitError('E_USAGE', `--${k} is required (ap eval calibrate --store <dir> --plan-id a,b --variant v --sets <dir> --definition <url|file> --alpha 0.05 --out <map.json>)`);
+  const { readFileSync: rf, readdirSync, writeFileSync, mkdirSync } = await import('node:fs');
+  const { dirname } = await import('node:path');
+  const cm = await loadCompare();
+  const fns = await loadHarnessCalibration();
+  const dir = resolve(resolve_(store.replace(/^file:/, '')), 'experiments');
+  const want = new Set(planIds.split(','));
+  const records = readdirSync(dir).filter((f) => f.startsWith(encodeURIComponent('experiment:'))).map((f) => JSON.parse(rf(resolve(dir, f), 'utf8')).record).filter((r) => r?.plan && want.has(r.plan.id));
+  const missing = [...want].filter((id) => !records.some((r) => r.plan.id === id));
+  if (missing.length) throw new DevkitError('E_INPUT_MISSING', `no stored experiment ${missing.join(', ')}`);
+  const providers = [...new Set(records.map((r) => r.plan.variants?.[variant]?.provider ?? null))];
+  if (providers.length > 1) throw new DevkitError('E_USAGE', `the experiments ran ${variant} on different providers (${providers.join(', ')}) — a map is fitted for ONE binding`);
+  const d = /^https?:/.test(defSrc) ? await (await fetch(defSrc, { headers: { 'user-agent': 'Mozilla/5.0 (ap eval calibrate)' } })).json() : JSON.parse(rf(resolve_(defSrc), 'utf8'));
+  const definition = d.definition ?? d;
+  const toolToSkill = Object.fromEntries((definition.tools ?? []).filter((t) => t.source?.skillId).map((t) => [t.id, t.source.skillId]));
+  const criteria = {};
+  const walk = (p) => { for (const e of readdirSync(p, { withFileTypes: true })) { const q = resolve(p, e.name); if (e.isDirectory()) walk(q); else if (e.name.endsWith('.gold.json')) { const j = JSON.parse(rf(q, 'utf8')); if (j.type === 'ap.selection-criterion.v1') criteria[j.replaySetDigest] = j; } } };
+  walk(resolve_(setsDir));
+  const criterion = { cases: Object.assign({}, ...records.map((r) => criteria[r.plan.replaySetDigest]?.cases ?? {})) };
+  const map = await cm.fitConformalMap({ experiments: records, variant, judge: fns.judge, ...(providers[0] ? { provider: providers[0] } : {}), criterion, toolToSkill, alpha: Number(opt('alpha') ?? 0.05), fns });
+  mkdirSync(dirname(resolve_(out)), { recursive: true });
+  writeFileSync(resolve_(out), `${JSON.stringify(map, null, 2)}\n`);
+  out_({ ok: true, out: resolve_(out), map }, `ap eval calibrate · ${map.binding.judge} on ${map.binding.provider ?? 'the default provider'} · ${map.n} labelled runs from ${map.fittedOn.join(', ')}\n  temperature ${map.temperature} · q̂ ${map.qhat} at α ${map.alpha} (set threshold ${(1 - map.qhat).toFixed(3)}) · ${map.mapDigest}\n  → ${resolve_(out)}`);
+}
+
+// Spec 415 A4 / methodology §4.3 — A REPAIR, VALIDATED: the same set judged before and after ONE change (a description,
+// a doctrine line, a playbook version), compared on the paired cases. The two experiments are what they were; the
+// comparison refuses a different set or criterion, and says when the validating split is not locked.
+async function evalDiff() {
+  const store = opt('store');
+  for (const [k, v] of [['store', store], ['before', opt('before')], ['after', opt('after')], ['replay', opt('replay')], ['criterion', opt('criterion')]]) if (!v) throw new DevkitError('E_USAGE', `--${k} is required (ap eval diff --store <dir> --before <plan-id> --after <plan-id> --replay <set> --criterion <gold>)`);
+  const { readFileSync: rf } = await import('node:fs');
+  const cm = await loadCompare();
+  const dir = resolve_(store.replace(/^file:/, ''));
+  const load = (id) => { const path = resolve(dir, 'experiments', `${encodeURIComponent(`experiment:${id}`)}.jsonld`); const doc = JSON.parse(rf(path, 'utf8')); if (!doc.record?.plan) throw new DevkitError('E_INPUT_MISSING', `${path} holds no experiment record`); return doc.record; };
+  const before = load(opt('before')); const after = load(opt('after'));
+  const setR = cm.validateReplaySet(JSON.parse(rf(resolve_(opt('replay')), 'utf8')));
+  if (!setR.ok) throw new DevkitError('E_USAGE', `the replay set is not valid: ${setR.errors.join('; ')}`);
+  const criterion = JSON.parse(rf(resolve_(opt('criterion')), 'utf8'));
+  const setDigest = await cm.replaySetDigest(setR.set); const critDigest = await cm.criterionDigest(criterion);
+  for (const [n, r] of [['before', before], ['after', after]]) if (r.plan.replaySetDigest !== setDigest || r.plan.criterionDigest !== critDigest) throw new DevkitError('E_USAGE', `${n} (${r.plan.id}) pre-registered a different set or criterion; a diff never crosses them`);
+  if (before.plan.split !== after.plan.split) throw new DevkitError('E_USAGE', `the splits differ (${before.plan.split} vs ${after.plan.split}); paired cases need the same split`);
+  const vBefore = opt('variant-before') ?? opt('variant') ?? 'model';
+  const vAfter = opt('variant-after') ?? opt('variant') ?? 'model';
+  for (const [n, r, v] of [['before', before, vBefore], ['after', after, vAfter]]) if (!r.scores?.[v]) throw new DevkitError('E_INPUT_MISSING', `${n} (${r.plan.id}) has no scored variant "${v}" — ap eval rescore it first`);
+  const variant = `${vBefore} → ${vAfter}`;
+  const { cases } = cm.casesOf(setR.set, criterion, before.plan.split);
+  const side = async (r, v) => ({ datasetDigest: setDigest, variantDigest: await cm.variantRequestDigest(r.plan.variants[v]), split: r.plan.split === 'held-out' ? 'held-out' : 'development', score: r.scores[v], cases });
+  const pair = opt('repaired-pair') ? opt('repaired-pair').split(',').map((x) => x.trim()).filter(Boolean) : undefined;
+  const cmp = cm.compareSelectionRuns(await side(before, vBefore), await side(after, vAfter), pair ? { repairedPair: pair } : {});
+  const f = (v) => (v === null || v === undefined ? 'n/a' : Number(v).toFixed(3));
+  const a = before.scores[vBefore].aggregate, b = after.scores[vAfter].aggregate;
+  const line = (k) => `  ${k.padEnd(22)} ${f(a[k]?.value)} → ${f(b[k]?.value)}`;
+  out_({ ok: true, before: before.plan.id, after: after.plan.id, variant, comparison: cmp, aggregates: { before: a, after: b } }, `ap eval diff · ${before.plan.id} → ${after.plan.id} (${variant}, split ${before.plan.split})\n${['macro_ta', 'micro_ta', 'hold_rate', 'routing_purity', 'collision_containment', 'over_fire_rate'].map(line).join('\n')}\n  Δ macro ${f(cmp.delta_macro)} [${f(cmp.ci_delta?.[0])}, ${f(cmp.ci_delta?.[1])}] · McNemar fixed ${cmp.fixed} broken ${cmp.broken} p=${Number(cmp.p_value).toFixed(4)} (${cmp.mcnemar_scope}, n=${cmp.n_paired})${cmp.regression ? ' · REGRESSION' : cmp.degraded ? ' · degraded' : ''}${cmp.warnings.length ? `\n  ! ${cmp.warnings.join('; ')}` : ''}${cmp.note ? `\n  ${cmp.note}` : ''}`);
+}
+
+const VARIANT_PRESETS = { model: {}, declared: { selection: 'declared' }, ontology: { selection: 'ontology' }, judgment: { selection: 'judgment' }, 'ontology+judgment': { selection: 'ontology+judgment' }, 'propose+judgment': { selection: 'propose+judgment' }, 'ontology-first': { selection: 'ontology-first' }, 'framed-judgment': { selection: 'framed-judgment' }, outcome: { selection: 'outcome', judgeProfile: 'fast' }, 'outcome-selective': { selection: 'outcome-selective', judgeProfile: 'fast' }, rules: { plannerKind: 'rule-based' }, 'kb-off': { toggles: { 'retrieval/kb': 'off' } }, 'kb-tool': { toggles: { 'retrieval/kb': 'tool' } }, 'kb-playbook': { toggles: { 'retrieval/kb': 'playbook' } } };
+
+/** THE ACTIVITIES A RUN SPAWNED, from its PROV bundle: the run (ServiceExecution) at the root, under it every
+ *  SkillExecution (a step; wasInformedBy / isStepOfPlan say which) and every ModelInvocation, each with what it
+ *  generated (receipts, results) and who it ran as. A handed-off or routed step appears as its own activity under the
+ *  step that spawned it. Read from `graph`; nothing is inferred that the bundle does not say. */
+function activityTreeOf(bundle, record) {
+  const nodes = Array.isArray(bundle?.graph) ? bundle.graph : Array.isArray(bundle?.['@graph']) ? bundle['@graph'] : [];
+  const stepAt = (id) => { const m = /:s(\d+)$/.exec(String(id)); return m && record?.steps ? record.steps[Number(m[1])] : undefined; };
+  const callAt = (id) => { const m = /:model:(\d+)$/.exec(String(id)); return m && record?.modelCalls ? record.modelCalls[Number(m[1])] : undefined; };
+  const byId = new Map(nodes.map((n) => [n.id ?? n['@id'], n]));
+  const types = (n) => [].concat(n.type ?? n['@type'] ?? []);
+  const acts = nodes.filter((n) => types(n).includes('Activity'));
+  const generated = (id) => nodes.filter((n) => n.wasGeneratedBy === id).map((n) => ({ id: n.id, type: types(n).filter((t) => t !== 'Entity'), ...(n.digest ? { digest: n.digest } : {}), ...(n.commitment ? { commitment: n.commitment } : {}) }));
+  const parentOf = (n) => n.wasInformedBy ?? n.wasStartedBy ?? n.partOf ?? (typeof n.id === 'string' && /:(s\d+|model:\d+)$/.test(n.id) ? n.id.replace(/:(s\d+|model:\d+)$/, '') : undefined);
+  const node = (n) => ({
+    id: n.id, kind: types(n).filter((t) => t !== 'Activity')[0] ?? 'Activity',
+    ...(n.startedAtTime ? { startedAt: n.startedAtTime } : {}), ...(n.endedAtTime ? { endedAt: n.endedAtTime } : {}),
+    ...(n.wasAssociatedWith ? { ranAs: n.wasAssociatedWith } : {}), ...(n.used ? { used: [].concat(n.used) } : {}),
+    ...(n.hadPlan ? { plan: n.hadPlan } : {}), ...(n.model ? { model: n.model } : {}), ...(n.provider ? { provider: n.provider } : {}), ...(n.role ? { role: n.role } : {}),
+    ...(n.status ? { status: n.status } : {}), ...(n.toolId ? { toolId: n.toolId } : {}),
+    ...((s) => s ? { toolId: s.toolId, status: s.status, ...(s.risk ? { risk: s.risk } : {}) } : {})(stepAt(n.id)),
+    ...((c) => c ? { role: c.role, provider: c.provider, model: c.model, ...(c.tokensIn !== undefined ? { tokensIn: c.tokensIn, tokensOut: c.tokensOut } : {}), ...(c.routeReason ? { because: c.routeReason } : {}), ...(c.stepRef ? { forStep: c.stepRef } : {}) } : {})(callAt(n.id)),
+    generated: generated(n.id), children: [],
+  });
+  const built = new Map(acts.map((a) => [a.id, node(a)]));
+  const roots = [];
+  for (const a of acts) { const p = parentOf(a); if (p && built.has(p) && p !== a.id) built.get(p).children.push(built.get(a.id)); else roots.push(built.get(a.id)); }
+  const order = (xs) => { xs.sort((x, y) => String(x.startedAt ?? '').localeCompare(String(y.startedAt ?? ''))); for (const x of xs) order(x.children); return xs; };
+  void byId;
+  return order(roots);
+}
+
+function keptRunMarkdown(planId, entry, tree) {
+  const lines = [`# ${entry.intentId} · ${entry.variant} · repeat ${entry.repeat}`, '', `plan \`${planId}\` · run \`${entry.runRef}\` · selection **${entry.verdict?.outcome ?? '?'}** (${entry.selected.join(', ') || 'nothing chosen'})${entry.outcome ? ` · outcome check **${entry.outcome.score}**` : ''}${entry.quality ? ` · quality ${entry.quality.score}` : ''}`, '', '## The ask', '', `> ${entry.message.replace(/\n/g, '\n> ')}`, ''];
+  if (entry.outcome) lines.push('## Outcome check — classes delivered', '', ...Object.entries(entry.outcome.classes).map(([k, v]) => `- ${v.toFixed(2)} ${k.split('#').pop()}`), '');
+  if (entry.reply?.results && Array.isArray(entry.reply.results)) { lines.push('## Results per step', ''); for (const r of entry.reply.results) lines.push(`### ${r.toolId ?? r.stepRef ?? 'step'}`, '', '```json', JSON.stringify(r.result ?? r, null, 2).slice(0, 20000), '```', ''); }
+  lines.push('## The reply', '', entry.reply?.text ?? entry.reply?.error ?? '(the ask port carried no reply)', '');
+  lines.push('## Activities the run spawned', '');
+  const walk = (xs, depth) => { for (const x of xs) { lines.push(`${'  '.repeat(depth)}- **${x.kind}** \`${String(x.id).replace(/^urn:ap:prov:act:/, '')}\`${x.toolId ? ` · ${x.toolId}${x.status ? ` (${x.status})` : ''}` : ''}${x.role ? ` · ${x.role}` : ''}${x.model ? ` · ${x.provider ?? ''} ${x.model}` : ''}${x.tokensIn !== undefined ? ` · ${x.tokensIn} → ${x.tokensOut} tokens` : ''}${x.startedAt && x.endedAt ? ` · ${Math.max(0, Date.parse(x.endedAt) - Date.parse(x.startedAt))} ms` : ''}${x.generated.length ? ` → generated ${x.generated.map((g) => `${g.type.join('/')} ${String(g.id).replace(/^urn:ap:prov:/, '').slice(0, 40)}…`).join(', ')}` : ''}`); walk(x.children, depth + 1); } };
+  if (tree.length) walk(tree, 0); else lines.push('(no provenance bundle)');
+  lines.push('');
+  return lines.join('\n');
+}
+
+async function evalCompare() {
+  const home = (opt('home') ?? process.env.HOME_URL ?? '').replace(/\/$/, '');
+  const store = opt('store');
+  for (const [k, v] of [['home', home], ['replay', opt('replay')], ['criterion', opt('criterion')], ['variants', opt('variants')], ['store', store], ['persona', opt('persona')], ['addressee', opt('addressee')]]) if (!v) throw new DevkitError('E_USAGE', `--${k} is required (ap eval compare --replay <set> --criterion <gold> --variants a,b --store <dir> --home <url> --persona <handle> --addressee <name>)`);
+  const { existsSync: ex, readFileSync: rf } = await import('node:fs');
+  const cm = await loadCompare();
+  const fileStore = await loadEvalStore();
+  const setR = cm.validateReplaySet(JSON.parse(rf(resolve_(opt('replay')), 'utf8')));
+  if (!setR.ok) throw new DevkitError('E_USAGE', `the replay set is not valid: ${setR.errors.join('; ')}`);
+  const criterion = JSON.parse(rf(resolve_(opt('criterion')), 'utf8'));
+  if (criterion?.type !== 'ap.selection-criterion.v1') throw new DevkitError('E_USAGE', 'the criterion is not an ap.selection-criterion.v1 record');
+  const variants = {};
+  for (const nameOrFile of opt('variants').split(',').map((s) => s.trim()).filter(Boolean)) {
+    if (VARIANT_PRESETS[nameOrFile]) variants[nameOrFile] = VARIANT_PRESETS[nameOrFile];
+    else if (ex(resolve_(nameOrFile))) variants[nameOrFile.replace(/^.*\//, '').replace(/\.json$/, '')] = JSON.parse(rf(resolve_(nameOrFile), 'utf8'));
+    else throw new DevkitError('E_USAGE', `variant "${nameOrFile}" is neither a preset (${Object.keys(VARIANT_PRESETS).join(', ')}) nor a file`);
+  }
+  const split = opt('split') ?? 'held-out';
+  const repeats = Number(opt('repeat') ?? 1);
+  const skillMap = opt('skill-map') ? JSON.parse(rf(resolve_(opt('skill-map')), 'utf8')) : undefined;
+  const actGoldRaw = opt('act-gold') ? JSON.parse(rf(resolve_(opt('act-gold')), 'utf8')) : undefined;
+  if (actGoldRaw && actGoldRaw.type !== 'ap.act-gold.v1') throw new DevkitError('E_USAGE', 'the act gold is not an ap.act-gold.v1 record');
+  const paths = windowPaths(store);
+  const windowRaw = ex(paths.window) ? JSON.parse(rf(paths.window, 'utf8')) : null;
+  const wv = windowRaw ? cm.validateCaptureWindow(windowRaw) : null;
+  if (wv && !wv.ok) throw new DevkitError('E_USAGE', `the window at ${paths.window} is not valid: ${wv.errors.join('; ')}`);
+  const salt = ex(paths.salt) ? rf(paths.salt, 'utf8').trim() : null;
+  const est = await estateClient(home);
+  const me = await est.signin(opt('persona'));
+  const addressee = await est.resolveName(opt('addressee'));
+  // Spec 418 §12 — the act gold names the estate's agents; resolved once, here, by the estate's own resolver.
+  const actGold = actGoldRaw ? await cm.resolveActGold(actGoldRaw, (n) => est.resolveName(n)) : undefined;
+  const plan = cm.experimentPlan({ id: opt('plan-id') ?? `${setR.set.id}@${setR.set.version}-${Object.keys(variants).join('+')}-${split}-r${repeats}`, replaySetDigest: await cm.replaySetDigest(setR.set), criterionDigest: await cm.criterionDigest(criterion), split, repeats, variants, ...(opt('policy') ? { policy: opt('policy') } : {}) });
+  const wait = (ms) => new Promise((r) => setTimeout(r, ms));
+  // --keep-text <dir>: the reply's words and the run's activity tree, per case, on this disk and nowhere else. The store
+  // never holds words (415 S6); this is the one door for them, and it opens only onto a synthetic estate — the open
+  // window must admit the addressee (a domain sandbox org), the same test the capture firewall applies.
+  const keepDir = opt('keep-text') ? resolve_(opt('keep-text')) : null;
+  if (keepDir) {
+    const admitted = wv?.ok && wv.window.roster.map((a) => a.toLowerCase()).includes(addressee.toLowerCase());
+    if (!admitted) throw new DevkitError('E_USAGE', `--keep-text keeps words: the open window at ${paths.window} must admit ${opt('addressee')} (${addressee}) — open one with it on the roster (ap eval window open … --roster <persona>,${opt('addressee')})`);
+  }
+  const ports = {
+    ask: async ({ intentId, message, variant, variantName, repeat }) => {
+      const runRef = `cmp-${Date.now().toString(36)}-${variantName}-${intentId}-${repeat}`.replace(/[^A-Za-z0-9._:-]/g, '-');
+      // Spec 420 W4 — a UX ACTION case supplies the plan its Home button sends; its words ride as the message.
+      const supplied = actGold?.cases?.[intentId]?.supplied;
+      // A LIVE arm (an empty variant `{}`) sends no variant at all: the estate accepts variants only from the agent or its
+      // steward, so a MEMBER's cases (spec 420 set 5a) run as plain asks under the deployment's defaults — paired across two
+      // deployments by case, never within one run.
+      const live = variant && typeof variant === 'object' && Object.keys(variant).length === 0;
+      const r = await est.post('/harness/ask', { session: me.token, addressee, message, ...(live ? {} : { variant }), runRef, ...(supplied ? { plan: supplied } : {}) });
+      if (r?.ok === false || r?.error) return { ok: false, error: `${r.refused ? `${r.refused}: ` : ''}${r.error ?? JSON.stringify(r).slice(0, 160)}` };
+      // A turn the MODEL HOST refused (overloaded, rate-limited) never planned: a failed run, named as the provider's — it
+      // says nothing about the harness under test and must not be scored as its miss (spec 418 §12, seen 2026-09-28).
+      const said = String(r?.reply?.error ?? r?.reply?.text ?? '');
+      if (r?.reply?.kind === 'refused' && /planner_failed:.*HTTP (402|429|5\d\d)/.test(said)) return { ok: false, error: `provider: ${said.slice(0, 160)}` };
+      const rt = r?.hasProvenance?.recordType;
+      return { ok: true, runRef: typeof rt === 'string' && rt.startsWith('run.provenance:') ? rt.slice('run.provenance:'.length) : runRef, ...(r?.reply?.plannerTrace?.selection ? { selection: r.reply.plannerTrace.selection } : {}), ...(r?.reply?.plannerTrace ? { trace: r.reply.plannerTrace } : {}), ...(keepDir && r?.reply ? { reply: r.reply } : {}), ...(actGold ? { act: cm.actCaptureOf(r?.reply) } : {}) };
+    },
+    ...(keepDir ? { keep: async (entry) => {
+      const { mkdirSync, writeFileSync } = await import('node:fs');
+      const dir = `${keepDir}/${plan.id}/${entry.variant}`; mkdirSync(dir, { recursive: true });
+      const safe = (s) => String(s).replace(/[^A-Za-z0-9._-]/g, '-');
+      const base = `${dir}/${safe(entry.intentId)}#${entry.repeat}`;
+      // The record view says what the bundle's activities do not: each step's tool and status, each model call's role,
+      // provider, model and tokens. Merged by position (`:s<n>` ↔ steps[n]; `:model:<n>` ↔ modelCalls[n]).
+      const rv = await est.post('/harness/provenance', { session: me.token, addressee, runRef: entry.runRef, format: 'record' }).catch(() => null);
+      const tree = activityTreeOf(entry.provenance, rv?.ok ? rv.record : null);
+      writeFileSync(`${base}.json`, `${JSON.stringify({ type: 'ap.kept-run.v1', planId: plan.id, ...entry, ...(rv?.ok ? { record: rv.record } : {}), activities: tree }, null, 2)}\n`);
+      writeFileSync(`${base}.md`, keptRunMarkdown(plan.id, entry, tree));
+    } } : {}),
+    readProvenance: async (runRef) => {
+      for (let i = 0; i < 20; i++) {
+        const r = await est.post('/harness/provenance', { session: me.token, addressee, runRef });
+        if (r?.ok && r.provenance) return r.provenance;
+        await wait(3000);
+      }
+      return null;
+    },
+    readMeasures: async (runRef) => {
+      for (let i = 0; i < 10; i++) {
+        const r = await est.post('/harness/provenance', { session: me.token, addressee, runRef, format: 'measures' });
+        if (r?.ok && r.measures) return r.measures;
+        if (r?.status === 'refused') return null;
+        await wait(3000);
+      }
+      return null;
+    },
+  };
+  const rec = await cm.runComparison({ ...(opt('fixtures') ? { fixtures: JSON.parse(rf(resolve_(opt('fixtures')), 'utf8')).fixtures } : {}), 
+    set: setR.set, criterion, plan, window: wv ? wv.window : null, estate: home, estateCapture: est.evalCapture, asker: me.agent, addressee,
+    store: fileStore(paths.dir), pseudo: cm.pseudonymiser(salt ?? 'no-window'), ports, ...(skillMap ? { skillMap } : {}), ...(actGold ? { actGold } : {}),
+    log: (line) => { if (!json) console.error(`  ${line}`); },
+  });
+  // Spec 420 — the act laboratory's verdicts per DOMAIN PRINCIPLE (each case counts toward every principle it cites).
+  if (actGold && !json) {
+    const cov = cm.principleCoverageOf(rec.runs.map((r) => r.act));
+    const rows = Object.entries(cov).sort(([a], [b]) => a.localeCompare(b));
+    if (rows.length) console.error(`  principles: ${rows.map(([p, v]) => `${p} ${v.right}/${v.total}`).join(' · ')}`);
+  }
+  out_({ ok: true, plan: rec.plan, planDigest: rec.planDigest, runs: rec.runs.length, refused: rec.refused, scores: Object.fromEntries(Object.entries(rec.scores).map(([k, v]) => [k, v.aggregate])), verdicts: Object.fromEntries(Object.entries(rec.verdicts).map(([k, v]) => [k, { status: v.status, reason: v.binding_reason }])), comparisons: rec.comparisons }, `ap eval compare · ${home} · store ${paths.dir}\n${cm.formatExperiment(rec)}`);
+}
+
 const commands = { doctor, upgrade, conform, test, create, mcp, runtime, generate, eval: evalCmd };
 try {
   if (!cmd || flag('help') || cmd === '--help' || !commands[cmd]) {

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAQA;;yDAEyD;AACzD,MAAM,WAAW,SAAS;IAAG,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAC5C,MAAM,WAAW,QAAQ;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACvD,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAEtE,MAAM,WAAW,YAAY;IAE3B,8DAA8D;IAC9D,cAAc,EAAE,SAAS,GAAG;QAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC9E,gEAAgE;IAChE,aAAa,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;QAAC,iBAAiB,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAC/H,sGAAsG;IACtG,gBAAgB,EAAE,SAAS,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACnI,+DAA+D;IAC/D,wBAAwB,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/F,yEAAyE;IACzE,aAAa,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,SAAS,EAAE,CAAA;KAAE,CAAC;IACvE,gFAAgF;IAChF,mBAAmB,EAAE,SAAS,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,CAAA;KAAE,CAAC;IAC/H,4GAA4G;IAC5G,iBAAiB,EAAE,SAAS,GAAG;QAC7B,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAC/D,UAAU,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;QACtE,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;KACvD,CAAC;IACF,oGAAoG;IACpG,gBAAgB,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IACvG,0EAA0E;IAC1E,oBAAoB,EAAE,SAAS,GAAG;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACvG,kFAAkF;IAClF,qBAAqB,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,sEAAsE;IACtE,UAAU,EAAE,SAAS,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3I,kFAAkF;IAClF,YAAY,EAAE,SAAS,GAAG;QAAE,cAAc,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtE;AAED;yCACyC;AACzC,MAAM,MAAM,qBAAqB,GAAG;KAAG,CAAC,IAAI,MAAM,YAAY,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;CAAE,CAAC;AAEvG;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,YAyEjC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,0BAA0B,GAAG,wBAAwB,CAAC;AAEpG,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE;AAIjG,4GAA4G;AAC5G,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,qBAAqB,GAAG;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAYnI;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAiB3D"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAQA;;yDAEyD;AACzD,MAAM,WAAW,SAAS;IAAG,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAC5C,MAAM,WAAW,QAAQ;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AACvD,MAAM,WAAW,SAAS;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAEtE,MAAM,WAAW,YAAY;IAE3B,8DAA8D;IAC9D,cAAc,EAAE,SAAS,GAAG;QAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC9E,gEAAgE;IAChE,aAAa,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,QAAQ,EAAE,CAAC;QAAC,iBAAiB,EAAE,KAAK,CAAC;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IAC/H,sGAAsG;IACtG,gBAAgB,EAAE,SAAS,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC;IACnI,+DAA+D;IAC/D,wBAAwB,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/F,yEAAyE;IACzE,aAAa,EAAE,SAAS,GAAG;QAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,SAAS,EAAE,CAAA;KAAE,CAAC;IACvE,gFAAgF;IAChF,mBAAmB,EAAE,SAAS,GAAG;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,CAAC,CAAA;KAAE,CAAC;IAC/H,4GAA4G;IAC5G,iBAAiB,EAAE,SAAS,GAAG;QAC7B,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAC/D,UAAU,EAAE;YAAE,GAAG,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,EAAE,CAAC;YAAC,UAAU,EAAE,MAAM,CAAA;SAAE,CAAC;QACtE,oBAAoB,EAAE,MAAM,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAC;KACvD,CAAC;IACF,oGAAoG;IACpG,gBAAgB,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,CAAC;IACvG,0EAA0E;IAC1E,oBAAoB,EAAE,SAAS,GAAG;QAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACvG,kFAAkF;IAClF,qBAAqB,EAAE,SAAS,GAAG;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACtD,sEAAsE;IACtE,UAAU,EAAE,SAAS,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3I,kFAAkF;IAClF,YAAY,EAAE,SAAS,GAAG;QAAE,cAAc,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACtE;AAED;yCACyC;AACzC,MAAM,MAAM,qBAAqB,GAAG;KAAG,CAAC,IAAI,MAAM,YAAY,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE;CAAE,CAAC;AAEvG;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,EAAE,YA0EjC,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,0BAA0B,GAAG,wBAAwB,CAAC;AAEpG,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAA;CAAE;AAIjG,4GAA4G;AAC5G,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,qBAAqB,GAAG;IAAE,MAAM,EAAE,YAAY,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAE,CAYnI;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAiB3D"}

package/dist/config.js

@@ -21,6 +21,7 @@ export const RING0_DOCTOR_CONFIG = {
             { file: 'apps/demo-a2a/src/config.ts', why: 'local-aes dev backend reads A2A_MASTER_PRIVATE_KEY only when A2A_KMS_BACKEND=local-aes; production is gcp-kms (deferred KMS migration, memory project_demo_a2a_kms_deferred)' },
             { file: 'apps/demo-a2a/scripts/canonical-a2a-e2e.ts', why: 'e2e harness mints an ephemeral SIWE persona; never an identity, never deployed' },
             { file: 'apps/demo-discovery-connector/src/gateway/tools.ts', why: 'gateway-raw-delegate-key (findings.yaml, accepted-risk): the gateway agent\'s own session-wire delegate key (spec 387); KMS signer + re-issued wire scheduled' },
+            { file: 'apps/home-mcp/src/act.ts', why: 'home-mcp-raw-act-key (findings.yaml, accepted-risk): the act-as-me key is the delegate of the person\'s capped, per-wire-revocable standing wires (spec 397 §11); KMS signer + re-issued wires scheduled with the ask key' },
             { file: 'apps/home-mcp/src/index.ts', why: 'home-mcp-raw-delegate-key (findings.yaml, accepted-risk): the ask-as-me delegate key holds no authority of its own; KMS signer + client re-registration scheduled (spec 397)' },
             { file: 'apps/demo-sso-next/scripts/provision-demo-personas-local.ts', why: 'local-chain provisioner with published dev keys' },
             { file: 'apps/demo-sso-next/scripts/provision-service-agent-local.ts', why: 'local-chain provisioner with published dev keys' },

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,4GAA4G;AAC5G,6GAA6G;AAC7G,qBAAqB;AACrB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA8CvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,cAAc,EAAE;QACd,WAAW,EAAE,CAAC,eAAe,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,CAAC;QAC7K,YAAY,EAAE,CAAC,2BAA2B,CAAC;KAC5C;IACD,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,8KAA8K,EAAE;YAC5N,EAAE,IAAI,EAAE,4CAA4C,EAAE,GAAG,EAAE,gFAAgF,EAAE;YAC7I,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,+JAA+J,EAAE;YACpO,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,8KAA8K,EAAE;YAC3N,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,iDAAiD,EAAE;YAC/H,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,iDAAiD,EAAE;YAC/H,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACjI,EAAE,IAAI,EAAE,sDAAsD,EAAE,GAAG,EAAE,sBAAsB,EAAE;YAC7F,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,sBAAsB,EAAE;YAC3F,EAAE,IAAI,EAAE,0DAA0D,EAAE,GAAG,EAAE,sBAAsB,EAAE;YACjG,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACpG,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,4EAA4E,EAAE;YAC/H,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,EAAE,8CAA8C,EAAE;YAC9F,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACtG,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACnG,EAAE,IAAI,EAAE,wCAAwC,EAAE,GAAG,EAAE,mDAAmD,EAAE;YAC5G,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,2EAA2E,EAAE;YAChI,EAAE,IAAI,EAAE,2CAA2C,EAAE,GAAG,EAAE,oDAAoD,EAAE;YAChH,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,kDAAkD,EAAE;YACzG,EAAE,IAAI,EAAE,qCAAqC,EAAE,GAAG,EAAE,uDAAuD,EAAE;YAC7G,EAAE,IAAI,EAAE,6CAA6C,EAAE,GAAG,EAAE,sEAAsE,EAAE;YACpI,EAAE,IAAI,EAAE,2CAA2C,EAAE,GAAG,EAAE,sCAAsC,EAAE;YAClG,EAAE,IAAI,EAAE,gDAAgD,EAAE,GAAG,EAAE,qDAAqD,EAAE;YACtH,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,8CAA8C,EAAE;SACpH;QACD,iBAAiB,EAAE;YACjB,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,6DAA6D,EAAE;YACtG,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,6EAA6E,EAAE;SACrI;KACF;IACD,gBAAgB,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,cAAc,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;IACrJ,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE;IACzJ,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,EAAE,sEAAsE,EAAE;YACrJ,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,wFAAwF,EAAE;YAC/J,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,uCAAuC,EAAE;YAC7G,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,yEAAyE,EAAE;YAC/I,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,8BAA8B,EAAE,GAAG,EAAE,wEAAwE,EAAE;SAC7J;KACF;IACD,mBAAmB,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE;IAC7K,iBAAiB,EAAE;QACjB,MAAM,EAAE,kDAAkD,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;QACtG,OAAO,EAAE,2CAA2C,EAAE,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;QAChI,UAAU,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,UAAU,EAAE,mCAAmC,EAAE;QAC5I,oBAAoB,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC;KAChI;IACD,gBAAgB,EAAE;QAChB,MAAM,EAAE,iDAAiD,EAAE,UAAU,EAAE,mBAAmB;QAC1F,QAAQ,EAAE;YACR,kBAAkB,EAAE,oEAAoE;YACxF,UAAU,EAAE,oEAAoE;YAChF,aAAa,EAAE,oEAAoE;SACpF;KACF;IACD,oBAAoB,EAAE;QACpB,SAAS,EAAE,CAAC,sCAAsC,EAAE,sCAAsC,EAAE,iCAAiC,CAAC;QAC9H,YAAY,EAAE,wBAAwB;QACtC,WAAW,EAAE,CAAC,iCAAiC,EAAE,iCAAiC,EAAE,wDAAwD,EAAE,oBAAoB,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,oCAAoC,CAAC;KAChQ;IACD,qBAAqB,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE;IACvD,UAAU,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC1L,YAAY,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE;CACrE,CAAC;AAMF,SAAS,QAAQ,CAAC,CAAU,IAAkC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhI,4GAA4G;AAC5G,MAAM,UAAU,iBAAiB,CAAC,IAAkB,EAAE,SAAgC;IACpF,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAkB,CAAC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,gDAAgD,CAAC,GAAG,CAAC,CAAC;QACpH,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,qBAAqB,CAAC,CAAC;QAChH,IAAI,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,uCAAuC,CAAC,CAAC;QAClK,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC;QACvD,MAA6C,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAI,IAA0C,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAmB,EAAuB,EAAE;QAC7E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,qBAAsB,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,+BAA+B,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,+CAA+C,CAAC,CAAC;QAC7H,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,mBAAmB,EAAE,OAAgC,CAAC,CAAC;QACrG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACvD,CAAC,CAAC;IACF,OAAO,WAAW,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACtL,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,4GAA4G;AAC5G,6GAA6G;AAC7G,qBAAqB;AACrB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AA8CvD;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,cAAc,EAAE;QACd,WAAW,EAAE,CAAC,eAAe,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,oBAAoB,CAAC;QAC7K,YAAY,EAAE,CAAC,2BAA2B,CAAC;KAC5C;IACD,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,8KAA8K,EAAE;YAC5N,EAAE,IAAI,EAAE,4CAA4C,EAAE,GAAG,EAAE,gFAAgF,EAAE;YAC7I,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,+JAA+J,EAAE;YACpO,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,EAAE,2NAA2N,EAAE;YACtQ,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,8KAA8K,EAAE;YAC3N,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,iDAAiD,EAAE;YAC/H,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,iDAAiD,EAAE;YAC/H,EAAE,IAAI,EAAE,6DAA6D,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACjI,EAAE,IAAI,EAAE,sDAAsD,EAAE,GAAG,EAAE,sBAAsB,EAAE;YAC7F,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,sBAAsB,EAAE;YAC3F,EAAE,IAAI,EAAE,0DAA0D,EAAE,GAAG,EAAE,sBAAsB,EAAE;YACjG,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACpG,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,4EAA4E,EAAE;YAC/H,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,EAAE,8CAA8C,EAAE;YAC9F,EAAE,IAAI,EAAE,kCAAkC,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACtG,EAAE,IAAI,EAAE,+BAA+B,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACnG,EAAE,IAAI,EAAE,wCAAwC,EAAE,GAAG,EAAE,mDAAmD,EAAE;YAC5G,EAAE,IAAI,EAAE,oCAAoC,EAAE,GAAG,EAAE,2EAA2E,EAAE;YAChI,EAAE,IAAI,EAAE,2CAA2C,EAAE,GAAG,EAAE,oDAAoD,EAAE;YAChH,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,kDAAkD,EAAE;YACzG,EAAE,IAAI,EAAE,qCAAqC,EAAE,GAAG,EAAE,uDAAuD,EAAE;YAC7G,EAAE,IAAI,EAAE,6CAA6C,EAAE,GAAG,EAAE,sEAAsE,EAAE;YACpI,EAAE,IAAI,EAAE,2CAA2C,EAAE,GAAG,EAAE,sCAAsC,EAAE;YAClG,EAAE,IAAI,EAAE,gDAAgD,EAAE,GAAG,EAAE,qDAAqD,EAAE;YACtH,EAAE,IAAI,EAAE,oDAAoD,EAAE,GAAG,EAAE,8CAA8C,EAAE;SACpH;QACD,iBAAiB,EAAE;YACjB,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,6DAA6D,EAAE;YACtG,EAAE,IAAI,EAAE,sCAAsC,EAAE,GAAG,EAAE,6EAA6E,EAAE;SACrI;KACF;IACD,gBAAgB,EAAE,EAAE,GAAG,EAAE,oBAAoB,EAAE,QAAQ,EAAE,oBAAoB,EAAE,cAAc,EAAE,kBAAkB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;IACrJ,wBAAwB,EAAE,EAAE,KAAK,EAAE,CAAC,sBAAsB,EAAE,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,gCAAgC,EAAE;IACzJ,aAAa,EAAE;QACb,KAAK,EAAE,CAAC,MAAM,CAAC;QACf,SAAS,EAAE;YACT,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,EAAE,sEAAsE,EAAE;YACrJ,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,wFAAwF,EAAE;YAC/J,EAAE,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,uCAAuC,EAAE;YAC7G,EAAE,IAAI,EAAE,4BAA4B,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,yEAAyE,EAAE;YAC/I,EAAE,IAAI,EAAE,6BAA6B,EAAE,IAAI,EAAE,8BAA8B,EAAE,GAAG,EAAE,wEAAwE,EAAE;SAC7J;KACF;IACD,mBAAmB,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,2BAA2B,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,EAAE,CAAC,EAAE,EAAE;IAC7K,iBAAiB,EAAE;QACjB,MAAM,EAAE,kDAAkD,EAAE,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC;QACtG,OAAO,EAAE,2CAA2C,EAAE,WAAW,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC;QAChI,UAAU,EAAE,EAAE,GAAG,EAAE,mBAAmB,EAAE,UAAU,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,UAAU,EAAE,mCAAmC,EAAE;QAC5I,oBAAoB,EAAE,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,WAAW,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC;KAChI;IACD,gBAAgB,EAAE;QAChB,MAAM,EAAE,iDAAiD,EAAE,UAAU,EAAE,mBAAmB;QAC1F,QAAQ,EAAE;YACR,kBAAkB,EAAE,oEAAoE;YACxF,UAAU,EAAE,oEAAoE;YAChF,aAAa,EAAE,oEAAoE;SACpF;KACF;IACD,oBAAoB,EAAE;QACpB,SAAS,EAAE,CAAC,sCAAsC,EAAE,sCAAsC,EAAE,iCAAiC,CAAC;QAC9H,YAAY,EAAE,wBAAwB;QACtC,WAAW,EAAE,CAAC,iCAAiC,EAAE,iCAAiC,EAAE,wDAAwD,EAAE,oBAAoB,EAAE,+BAA+B,EAAE,mBAAmB,EAAE,oCAAoC,CAAC;KAChQ;IACD,qBAAqB,EAAE,EAAE,MAAM,EAAE,oBAAoB,EAAE;IACvD,UAAU,EAAE,EAAE,MAAM,EAAE,+BAA+B,EAAE,aAAa,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,IAAI,EAAE,mBAAmB,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC1L,YAAY,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,qBAAqB,EAAE;CACrE,CAAC;AAMF,SAAS,QAAQ,CAAC,CAAU,IAAkC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhI,4GAA4G;AAC5G,MAAM,UAAU,iBAAiB,CAAC,IAAkB,EAAE,SAAgC;IACpF,MAAM,MAAM,GAAG,EAAE,GAAG,IAAI,EAAkB,CAAC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,gDAAgD,CAAC,GAAG,CAAC,CAAC;QACpH,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,qBAAqB,CAAC,CAAC;QAChH,IAAI,MAAM,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,0BAA0B,CAAC,uCAAuC,CAAC,CAAC;QAClK,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,CAAC;QACvD,MAA6C,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,GAAI,IAA0C,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,KAAmB,EAAuB,EAAE;QAC7E,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAClE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,qBAAsB,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,+BAA+B,CAAC,CAAC;QAC5G,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;QACjC,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,KAAK,+CAA+C,CAAC,CAAC;QAC7H,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,iBAAiB,CAAC,mBAAmB,EAAE,OAAgC,CAAC,CAAC;QACrG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACvD,CAAC,CAAC;IACF,OAAO,WAAW,CAAC,QAAQ,EAAE,gBAAgB,CAAC,IAAI,WAAW,CAAC,IAAI,EAAE,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,wBAAwB,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACtL,CAAC"}

package/dist/dispatch.d.ts

@@ -28,6 +28,10 @@ export declare const CONFORM_MODULES: {
         readonly spec: "@agenticprimitives/mcp-protocol/conform";
         readonly fn: "conformMcp";
     };
+    readonly provenance: {
+        readonly spec: "@agenticprimitives/provenance-node/conform";
+        readonly fn: "conformProvenance";
+    };
 };
 export declare function loadConform(kind: keyof typeof CONFORM_MODULES): Promise<ConformFn>;
 export declare const LIVE_GATES_MODULE: {
@@ -110,4 +114,87 @@ export interface EvalModule {
     casesFromRunRecords: (records: unknown[], opts?: Record<string, unknown>) => unknown;
 }
 export declare function loadEval(): Promise<EvalModule>;
+/** Spec 415 A4 — `ap eval compare` / `ap eval window`: the comparison runner, the capture window and the pre-registered
+ *  plan from `@agenticprimitives/evaluation`; the eval store's file binding from `@agenticprimitives/provenance-node`. */
+export declare const COMPARE_MODULE: {
+    readonly spec: "@agenticprimitives/evaluation";
+};
+export declare const EVAL_STORE_MODULE: {
+    readonly spec: "@agenticprimitives/provenance-node";
+    readonly fn: "fileProvenanceStore";
+};
+export interface CompareModule {
+    runComparison: (input: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    formatExperiment: (rec: unknown) => string;
+    experimentPlan: (input: Record<string, unknown>) => Record<string, unknown>;
+    validateReplaySet: (raw: unknown) => {
+        ok: true;
+        set: Record<string, unknown>;
+    } | {
+        ok: false;
+        errors: string[];
+    };
+    replaySetDigest: (set: unknown) => Promise<string>;
+    criterionDigest: (c: unknown) => Promise<string>;
+    validateCaptureWindow: (raw: unknown) => {
+        ok: true;
+        window: Record<string, unknown>;
+    } | {
+        ok: false;
+        errors: string[];
+    };
+    windowDigest: (w: unknown) => Promise<string>;
+    pseudonymiser: (salt: string) => unknown;
+    /** `ap eval rescore` — the scoring step alone, over a stored experiment record. */
+    scoreExperimentRuns: (input: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    casesOf: (set: unknown, criterion: unknown, split: string) => {
+        intents: unknown[];
+        cases: unknown[];
+        skillIds: string[];
+    };
+    /** `ap eval diff` — two stored experiments on their paired cases (McNemar, Δ macro, collateral). */
+    compareSelectionRuns: (before: Record<string, unknown>, after: Record<string, unknown>, opts?: Record<string, unknown>) => Record<string, unknown>;
+    variantRequestDigest: (v: unknown) => Promise<string>;
+    /** `ap eval report` — the skill assessment report the Lab and skill-web render (spec 415 §5b). */
+    skillAssessmentReportOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    /** `ap eval gates` — the two selection gates (spec 415 A4). */
+    rboxAgreementOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    judgmentCalibrationOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    judgmentConsistencyOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    candidateRecallOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    fitConformalMap: (input: Record<string, unknown>) => Promise<Record<string, unknown>>;
+    conformalCoverageOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    riskCoverageOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    selectionBehaviourOf: (input: Record<string, unknown>) => Record<string, unknown>;
+    outcomePlanScoresOf: (runs: unknown[], gold: Record<string, unknown>) => Array<Record<string, unknown>>;
+    techniqueLedgerOf: (input: Record<string, unknown>) => {
+        rows: Array<Record<string, unknown>>;
+        rule: string;
+    };
+    /** Spec 418 §12 — the act laboratory: gold names resolved by the estate; the reply read for the act. */
+    resolveActGold: (gold: Record<string, unknown>, resolveName: (name: string) => Promise<string | null>) => Promise<Record<string, unknown>>;
+    actCaptureOf: (reply: unknown) => Record<string, unknown>;
+    principleCoverageOf: (verdicts: ReadonlyArray<unknown>) => Record<string, {
+        right: number;
+        total: number;
+    }>;
+    scorecardOf: (experiments: unknown[], criteria: Record<string, unknown>) => Array<Record<string, unknown>>;
+}
+export declare function loadCompare(): Promise<CompareModule>;
+export declare function loadEvalStore(): Promise<(dir: string, opts?: Record<string, unknown>) => unknown>;
+/** Spec 415 A4 — the exact half's decision function, re-run by `ap eval gates` (orchestration's `decideFromGrounding`). */
+export declare const ORCHESTRATION_MODULE: {
+    readonly spec: "@agenticprimitives/orchestration";
+    readonly fn: "decideFromGrounding";
+};
+export declare function loadDecideFromGrounding(): Promise<(...args: unknown[]) => unknown>;
+/** Spec 416 W3 — the harness's own calibration math (temperature scaling + the conformal set) and the judge's name,
+ *  injected into map fitting and the coverage gate so they measure the rule that runs. */
+export declare function loadHarnessCalibration(): Promise<{
+    calibrate: (...args: unknown[]) => unknown;
+    setOf: (...args: unknown[]) => unknown;
+    judge: string;
+}>;
+/** Spec 416 W1 — the proposal, re-derived by the rbox gate from a `propose+judgment` run's recorded grounding. */
+export declare function loadProposeFromGrounding(): Promise<(...args: unknown[]) => unknown>;
 //# sourceMappingURL=dispatch.d.ts.map

package/dist/dispatch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAChH,MAAM,WAAW,iBAAiB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,gBAAgB,EAAE,CAAA;CAAE;AAC9F,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEpH,MAAM,WAAW,eAAe;IAC9B,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;CACjG;AAoBD,eAAO,MAAM,eAAe;;;;;;;;;CAA6J,CAAC;AAE1L,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,OAAO,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAGxF;AAED,eAAO,MAAM,iBAAiB;;;CAAyE,CAAC;AAExG,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC,CAEpE;AAED,eAAO,MAAM,iBAAiB;;;CAAsE,CAAC;AAErG,wBAAsB,aAAa,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAElG;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAIpE;AAED;gIACgI;AAChI,eAAO,MAAM,cAAc;;;CAA2E,CAAC;AACvG,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7D,wBAAsB,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,CAE1D;AAED;8HAC8H;AAC9H,eAAO,MAAM,0BAA0B;;;;;CAA+I,CAAC;AACvL,MAAM,WAAW,kBAAkB;IACjC,wBAAwB,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvJ,iBAAiB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;IAC9C,mBAAmB,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;CACvF;AACD,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAO1E;AAED,yHAAyH;AACzH,eAAO,MAAM,WAAW;;CAAqD,CAAC;AAC9E,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,OAAO,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAAC,MAAM,EAAE,OAAO,EAAE,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IACvO,WAAW,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,OAAO,CAAC;YAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5T,iBAAiB,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/C,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IAC1D,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;CACtF;AACD,wBAAsB,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,CAMpD"}
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAMA,MAAM,WAAW,gBAAgB;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,KAAK,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AAChH,MAAM,WAAW,iBAAiB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,gBAAgB,EAAE,CAAA;CAAE;AAC9F,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;AAEpH,MAAM,WAAW,eAAe;IAC9B,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC,CAAC;CACjG;AAoBD,eAAO,MAAM,eAAe;;;;;;;;;;;;;CAA6U,CAAC;AAE1W,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,OAAO,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAGxF;AAED,eAAO,MAAM,iBAAiB;;;CAAyE,CAAC;AAExG,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,eAAe,CAAC,CAEpE;AAED,eAAO,MAAM,iBAAiB;;;CAAsE,CAAC;AAErG,wBAAsB,aAAa,IAAI,OAAO,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC,CAElG;AAED,wBAAgB,uBAAuB,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAIpE;AAED;gIACgI;AAChI,eAAO,MAAM,cAAc;;;CAA2E,CAAC;AACvG,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAC7D,wBAAsB,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC,CAE1D;AAED;8HAC8H;AAC9H,eAAO,MAAM,0BAA0B;;;;;CAA+I,CAAC;AACvL,MAAM,WAAW,kBAAkB;IACjC,wBAAwB,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvJ,iBAAiB,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;IAC9C,mBAAmB,EAAE,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;CACvF;AACD,wBAAsB,sBAAsB,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAO1E;AAED,yHAAyH;AACzH,eAAO,MAAM,WAAW;;CAAqD,CAAC;AAC9E,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,OAAO,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAC;YAAC,OAAO,EAAE,MAAM,CAAC;YAAC,IAAI,CAAC,EAAE,OAAO,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAAC,MAAM,EAAE,OAAO,EAAE,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;IACvO,WAAW,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,KAAK,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,OAAO,CAAC;YAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;YAAC,EAAE,EAAE,MAAM,CAAC;YAAC,OAAO,CAAC,EAAE;gBAAE,IAAI,EAAE,MAAM,CAAC;gBAAC,IAAI,EAAE,MAAM,CAAA;aAAE,CAAA;SAAE,CAAC,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5T,iBAAiB,EAAE,CAAC,MAAM,EAAE,OAAO,KAAK,MAAM,CAAC;IAC/C,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IAC1D,mBAAmB,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;CACtF;AACD,wBAAsB,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,CAMpD;AAED;0HAC0H;AAC1H,eAAO,MAAM,cAAc;;CAAqD,CAAC;AACjF,eAAO,MAAM,iBAAiB;;;CAAqF,CAAC;AACpH,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACpF,gBAAgB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,MAAM,CAAC;IAC3C,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5E,iBAAiB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAClH,eAAe,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACnD,eAAe,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACjD,qBAAqB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IACzH,YAAY,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9C,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;IACzC,mFAAmF;IACnF,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1F,OAAO,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAAC,KAAK,EAAE,OAAO,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC3H,oGAAoG;IACpG,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnJ,oBAAoB,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtD,kGAAkG;IAClG,uBAAuB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrF,+DAA+D;IAC/D,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7E,qBAAqB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnF,qBAAqB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnF,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/E,eAAe,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACtF,mBAAmB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjF,cAAc,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5E,oBAAoB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClF,mBAAmB,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxG,iBAAiB,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK;QAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9G,wGAAwG;IACxG,cAAc,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3I,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC1D,mBAAmB,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC5G,WAAW,EAAE,CAAC,WAAW,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CAC5G;AACD,wBAAsB,WAAW,IAAI,OAAO,CAAC,aAAa,CAAC,CAI1D;AACD,wBAAsB,aAAa,IAAI,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,CAEvG;AAED,2HAA2H;AAC3H,eAAO,MAAM,oBAAoB;;;CAAmF,CAAC;AACrH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAExF;AACD;0FAC0F;AAC1F,wBAAsB,sBAAsB,IAAI,OAAO,CAAC;IAAE,SAAS,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAI7J;AACD,kHAAkH;AAClH,wBAAsB,wBAAwB,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,CAEzF"}

package/dist/dispatch.js

@@ -21,7 +21,7 @@ function pick(mod, name, spec) {
         throw new DevkitError(ERROR_CODES.E_MODULE_SHAPE, `${spec} does not export ${name}() — upgrade the package or this kit so their contracts agree`);
     return fn;
 }
-export const CONFORM_MODULES = { a2a: { spec: '@agenticprimitives/a2a/conform', fn: 'conformA2a' }, mcp: { spec: '@agenticprimitives/mcp-protocol/conform', fn: 'conformMcp' } };
+export const CONFORM_MODULES = { a2a: { spec: '@agenticprimitives/a2a/conform', fn: 'conformA2a' }, mcp: { spec: '@agenticprimitives/mcp-protocol/conform', fn: 'conformMcp' }, /** Spec 414 §6 — a provenance store binding (`file:<dir>` · `memory:`), C1–C6. */ provenance: { spec: '@agenticprimitives/provenance-node/conform', fn: 'conformProvenance' } };
 export async function loadConform(kind) {
     const m = CONFORM_MODULES[kind];
     return pick(await loadModule(m.spec, `ap conform ${kind}`), m.fn, m.spec);
@@ -66,4 +66,32 @@ export async function loadEval() {
         outcomeOfReply: pick(m, 'outcomeOfReply', EVAL_MODULE.spec), casesFromRunRecords: pick(m, 'casesFromRunRecords', EVAL_MODULE.spec),
     };
 }
+/** Spec 415 A4 — `ap eval compare` / `ap eval window`: the comparison runner, the capture window and the pre-registered
+ *  plan from `@agenticprimitives/evaluation`; the eval store's file binding from `@agenticprimitives/provenance-node`. */
+export const COMPARE_MODULE = { spec: '@agenticprimitives/evaluation' };
+export const EVAL_STORE_MODULE = { spec: '@agenticprimitives/provenance-node', fn: 'fileProvenanceStore' };
+export async function loadCompare() {
+    const m = await loadModule(COMPARE_MODULE.spec, 'ap eval compare');
+    const p = (n) => pick(m, n, COMPARE_MODULE.spec);
+    return { runComparison: p('runComparison'), formatExperiment: p('formatExperiment'), experimentPlan: p('experimentPlan'), validateReplaySet: p('validateReplaySet'), replaySetDigest: p('replaySetDigest'), criterionDigest: p('criterionDigest'), validateCaptureWindow: p('validateCaptureWindow'), windowDigest: p('windowDigest'), pseudonymiser: p('pseudonymiser'), scoreExperimentRuns: p('scoreExperimentRuns'), casesOf: p('casesOf'), compareSelectionRuns: p('compareSelectionRuns'), variantRequestDigest: p('variantRequestDigest'), skillAssessmentReportOf: p('skillAssessmentReportOf'), rboxAgreementOf: p('rboxAgreementOf'), judgmentCalibrationOf: p('judgmentCalibrationOf'), judgmentConsistencyOf: p('judgmentConsistencyOf'), candidateRecallOf: p('candidateRecallOf'), fitConformalMap: p('fitConformalMap'), conformalCoverageOf: p('conformalCoverageOf'), riskCoverageOf: p('riskCoverageOf'), selectionBehaviourOf: p('selectionBehaviourOf'), outcomePlanScoresOf: p('outcomePlanScoresOf'), techniqueLedgerOf: p('techniqueLedgerOf'), scorecardOf: p('scorecardOf'), resolveActGold: p('resolveActGold'), actCaptureOf: p('actCaptureOf'), principleCoverageOf: p('principleCoverageOf') };
+}
+export async function loadEvalStore() {
+    return pick(await loadModule(EVAL_STORE_MODULE.spec, 'ap eval compare'), EVAL_STORE_MODULE.fn, EVAL_STORE_MODULE.spec);
+}
+/** Spec 415 A4 — the exact half's decision function, re-run by `ap eval gates` (orchestration's `decideFromGrounding`). */
+export const ORCHESTRATION_MODULE = { spec: '@agenticprimitives/orchestration', fn: 'decideFromGrounding' };
+export async function loadDecideFromGrounding() {
+    return pick(await loadModule(ORCHESTRATION_MODULE.spec, 'ap eval gates'), ORCHESTRATION_MODULE.fn, ORCHESTRATION_MODULE.spec);
+}
+/** Spec 416 W3 — the harness's own calibration math (temperature scaling + the conformal set) and the judge's name,
+ *  injected into map fitting and the coverage gate so they measure the rule that runs. */
+export async function loadHarnessCalibration() {
+    const m = await loadModule(ORCHESTRATION_MODULE.spec, 'ap eval calibrate');
+    const judge = m.SELECTION_JUDGE?.name ?? 'unknown';
+    return { calibrate: pick(m, 'calibrateByTemperature', ORCHESTRATION_MODULE.spec), setOf: pick(m, 'conformalSetOf', ORCHESTRATION_MODULE.spec), judge };
+}
+/** Spec 416 W1 — the proposal, re-derived by the rbox gate from a `propose+judgment` run's recorded grounding. */
+export async function loadProposeFromGrounding() {
+    return pick(await loadModule(ORCHESTRATION_MODULE.spec, 'ap eval gates'), 'proposeFromGrounding', ORCHESTRATION_MODULE.spec);
+}
 //# sourceMappingURL=dispatch.js.map

package/dist/dispatch.js.map

@@ -1 +1 @@
-{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,6GAA6G;AAC7G,+GAA+G;AAC/G,8GAA8G;AAC9G,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAUvD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,sBAAsB,EAAE,+BAA+B,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEhH,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IAClD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,EAAE,CAAC;QACjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,eAAe,EAAE,GAAG,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACzL,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAI,GAA4B,EAAE,IAAY,EAAE,IAAY;IACvE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,OAAO,EAAE,KAAK,UAAU;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,IAAI,oBAAoB,IAAI,+DAA+D,CAAC,CAAC;IAChL,OAAO,EAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,yCAAyC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAW,CAAC;AAE1L,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAkC;IAClE,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,CAAY,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,cAAc,EAAW,CAAC;AAExG,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,OAAO,IAAI,CAAkB,MAAM,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAC/I,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,WAAW,EAAW,CAAC;AAErG,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,CAAoB;IAC1D,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;gIACgI;AAChI,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,mCAAmC,EAAE,EAAE,EAAE,YAAY,EAAW,CAAC;AAEvG,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,IAAI,CAAa,MAAM,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,cAAc,CAAC,EAAE,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;AACvH,CAAC;AAED;8HAC8H;AAC9H,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,0BAA0B,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,qBAAqB,EAAW,CAAC;AAMvL,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,0BAA0B,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC3E,OAAO;QACL,wBAAwB,EAAE,IAAI,CAAC,CAAC,EAAE,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,CAAC,IAAI,CAAC;QACrG,iBAAiB,EAAE,IAAI,CAAC,CAAC,EAAE,0BAA0B,CAAC,GAAG,EAAE,0BAA0B,CAAC,IAAI,CAAC;QAC3F,mBAAmB,EAAE,IAAI,CAAC,CAAC,EAAE,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,CAAC,IAAI,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,yHAAyH;AACzH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAW,CAAC;AAQ9E,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxD,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,WAAW,CAAC,IAAI,CAAC;QACnL,cAAc,EAAE,IAAI,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC,EAAE,qBAAqB,EAAE,WAAW,CAAC,IAAI,CAAC;KACnI,CAAC;AACJ,CAAC"}
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../src/dispatch.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,6GAA6G;AAC7G,+GAA+G;AAC/G,8GAA8G;AAC9G,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAUvD,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,sBAAsB,EAAE,+BAA+B,EAAE,kBAAkB,CAAC,CAAC,CAAC;AAEhH,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAY;IAClD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,CAA4B,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAAuB,CAAC,IAAI,IAAI,EAAE,CAAC;QACjD,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,eAAe,EAAE,GAAG,IAAI,UAAU,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,aAAa,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACzL,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAI,GAA4B,EAAE,IAAY,EAAE,IAAY;IACvE,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,OAAO,EAAE,KAAK,UAAU;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,CAAC,cAAc,EAAE,GAAG,IAAI,oBAAoB,IAAI,+DAA+D,CAAC,CAAC;IAChL,OAAO,EAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,yCAAyC,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,kFAAkF,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,4CAA4C,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAW,CAAC;AAE1W,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAkC;IAClE,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,IAAI,CAAY,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,cAAc,EAAW,CAAC;AAExG,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,OAAO,IAAI,CAAkB,MAAM,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,sBAAsB,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAC/I,CAAC;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAE,EAAE,EAAE,WAAW,EAAW,CAAC;AAErG,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACnH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,CAAoB;IAC1D,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,CAAC,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzJ,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;gIACgI;AAChI,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,mCAAmC,EAAE,EAAE,EAAE,YAAY,EAAW,CAAC;AAEvG,MAAM,CAAC,KAAK,UAAU,cAAc;IAClC,OAAO,IAAI,CAAa,MAAM,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,cAAc,CAAC,EAAE,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;AACvH,CAAC;AAED;8HAC8H;AAC9H,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,0BAA0B,EAAE,GAAG,EAAE,mBAAmB,EAAE,MAAM,EAAE,qBAAqB,EAAW,CAAC;AAMvL,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,0BAA0B,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC3E,OAAO;QACL,wBAAwB,EAAE,IAAI,CAAC,CAAC,EAAE,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,CAAC,IAAI,CAAC;QACrG,iBAAiB,EAAE,IAAI,CAAC,CAAC,EAAE,0BAA0B,CAAC,GAAG,EAAE,0BAA0B,CAAC,IAAI,CAAC;QAC3F,mBAAmB,EAAE,IAAI,CAAC,CAAC,EAAE,0BAA0B,CAAC,MAAM,EAAE,0BAA0B,CAAC,IAAI,CAAC;KACjG,CAAC;AACJ,CAAC;AAED,yHAAyH;AACzH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAW,CAAC;AAQ9E,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACxD,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,CAAC,EAAE,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,EAAE,aAAa,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAC,EAAE,mBAAmB,EAAE,WAAW,CAAC,IAAI,CAAC;QACnL,cAAc,EAAE,IAAI,CAAC,CAAC,EAAE,gBAAgB,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,mBAAmB,EAAE,IAAI,CAAC,CAAC,EAAE,qBAAqB,EAAE,WAAW,CAAC,IAAI,CAAC;KACnI,CAAC;AACJ,CAAC;AAED;0HAC0H;AAC1H,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,IAAI,EAAE,+BAA+B,EAAW,CAAC;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,IAAI,EAAE,oCAAoC,EAAE,EAAE,EAAE,qBAAqB,EAAW,CAAC;AAoCpH,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACnE,MAAM,CAAC,GAAG,CAAI,CAAS,EAAE,EAAE,CAAC,IAAI,CAAI,CAAC,EAAE,CAAC,EAAE,cAAc,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,eAAe,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,uBAAuB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,eAAe,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,uBAAuB,EAAE,CAAC,CAAC,yBAAyB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,uBAAuB,CAAC,EAAE,qBAAqB,EAAE,CAAC,CAAC,uBAAuB,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,iBAAiB,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC,sBAAsB,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,qBAAqB,CAAC,EAAE,CAAC;AAC9pC,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,aAAa;IACjC,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,iBAAiB,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,iBAAiB,CAAC,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACzH,CAAC;AAED,2HAA2H;AAC3H,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,IAAI,EAAE,kCAAkC,EAAE,EAAE,EAAE,qBAAqB,EAAW,CAAC;AACrH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,oBAAoB,CAAC,EAAE,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC;AAChI,CAAC;AACD;0FAC0F;AAC1F,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAI,CAA6C,CAAC,eAAe,EAAE,IAAI,IAAI,SAAS,CAAC;IAChG,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,wBAAwB,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC;AACzJ,CAAC;AACD,kHAAkH;AAClH,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,OAAO,IAAI,CAAC,MAAM,UAAU,CAAC,oBAAoB,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,sBAAsB,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC;AAC/H,CAAC"}

package/dist/index.d.ts

@@ -19,7 +19,7 @@ export { workspaceGlobs, workspaceManifests } from './workspace.js';
 export type { PackageManifest, WorkspaceManifest } from './workspace.js';
 export { planUpgrade, applyUpgradePlan, formatUpgradePlan, npmDistTags } from './upgrade.js';
 export type { UpgradeMode, UpgradeChange, UpgradePlan, DistTagResolver } from './upgrade.js';
-export { CONFORM_MODULES, LIVE_GATES_MODULE, CREATE_APP_MODULE, RUNTIME_MODULE, loadConform, loadLiveGatesRunner, loadCreateApp, loadRuntimeCli, loadHarnessProjections, loadEval, formatConformanceReport } from './dispatch.js';
+export { CONFORM_MODULES, LIVE_GATES_MODULE, CREATE_APP_MODULE, RUNTIME_MODULE, loadConform, loadLiveGatesRunner, loadCreateApp, loadRuntimeCli, loadHarnessProjections, loadEval, formatConformanceReport, COMPARE_MODULE, EVAL_STORE_MODULE, loadCompare, loadEvalStore, ORCHESTRATION_MODULE, loadDecideFromGrounding, loadProposeFromGrounding, loadHarnessCalibration } from './dispatch.js';
 export type { RuntimeCli } from './dispatch.js';
 export type { ConformanceCheck, ConformanceReport, ConformFn, LiveGatesRunner } from './dispatch.js';
 export { createDeveloperMcp, runDeveloperMcpStdio, DEVELOPER_MCP_DOCTRINE } from './developer-mcp.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,YAAY,EAAG,2BAAoC,CAAC;AACjE,eAAO,MAAM,cAAc,EAAG,yBAAkC,CAAC;AACjE,eAAO,MAAM,QAAQ,EAAG,uCAAgD,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC7D,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACvF,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnI,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAClH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EACrD,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,YAAY,GAC9H,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvI,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7F,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,sBAAsB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAClO,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACtG,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC1M,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,YAAY,EAAG,2BAAoC,CAAC;AACjE,eAAO,MAAM,cAAc,EAAG,yBAAkC,CAAC;AACjE,eAAO,MAAM,QAAQ,EAAG,uCAAgD,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAC7D,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACvF,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACnI,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAClH,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC7E,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EACL,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EACrD,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,YAAY,GAC9H,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvI,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpE,YAAY,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC7F,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,sBAAsB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAClY,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACtG,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAE9D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAC1M,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -15,7 +15,7 @@ export { BUNDLED_RULES_DIR, RULES_BLOCK_START, RULES_BLOCK_END, ruleDigest, extr
 export { readLock, writeLock } from './lock.js';
 export { workspaceGlobs, workspaceManifests } from './workspace.js';
 export { planUpgrade, applyUpgradePlan, formatUpgradePlan, npmDistTags } from './upgrade.js';
-export { CONFORM_MODULES, LIVE_GATES_MODULE, CREATE_APP_MODULE, RUNTIME_MODULE, loadConform, loadLiveGatesRunner, loadCreateApp, loadRuntimeCli, loadHarnessProjections, loadEval, formatConformanceReport } from './dispatch.js';
+export { CONFORM_MODULES, LIVE_GATES_MODULE, CREATE_APP_MODULE, RUNTIME_MODULE, loadConform, loadLiveGatesRunner, loadCreateApp, loadRuntimeCli, loadHarnessProjections, loadEval, formatConformanceReport, COMPARE_MODULE, EVAL_STORE_MODULE, loadCompare, loadEvalStore, ORCHESTRATION_MODULE, loadDecideFromGrounding, loadProposeFromGrounding, loadHarnessCalibration } from './dispatch.js';
 // Spec 398 §10.4 — the read-only Developer MCP (the THIRD MCP; never the runtime's, never the Home's).
 export { createDeveloperMcp, runDeveloperMcpStdio, DEVELOPER_MCP_DOCTRINE } from './developer-mcp.js';
 // Spec 398 §10.3 — the pinned definitions and the review `ap upgrade` stops for.

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,+GAA+G;AAC/G,0GAA0G;AAC1G,+GAA+G;AAC/G,yFAAyF;AACzF,MAAM,CAAC,MAAM,YAAY,GAAG,2BAAoC,CAAC;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,yBAAkC,CAAC;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAG,uCAAgD,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGvF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,EACL,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EACrD,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,YAAY,GAC9H,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE7F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,sBAAsB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,eAAe,CAAC;AAGlO,uGAAuG;AACvG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEtG,iFAAiF;AACjF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mHAAmH;AACnH,+GAA+G;AAC/G,0GAA0G;AAC1G,+GAA+G;AAC/G,yFAAyF;AACzF,MAAM,CAAC,MAAM,YAAY,GAAG,2BAAoC,CAAC;AACjE,MAAM,CAAC,MAAM,cAAc,GAAG,yBAAkC,CAAC;AACjE,MAAM,CAAC,MAAM,QAAQ,GAAG,uCAAgD,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAE7D,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAGvF,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAE7E,OAAO,EACL,iBAAiB,EAAE,iBAAiB,EAAE,eAAe,EACrD,UAAU,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,YAAY,GAC9H,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEpE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE7F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,cAAc,EAAE,WAAW,EAAE,mBAAmB,EAAE,aAAa,EAAE,cAAc,EAAE,sBAAsB,EAAE,QAAQ,EAAE,uBAAuB,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,aAAa,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAGlY,uGAAuG;AACvG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAEtG,iFAAiF;AACjF,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/rules/web-no-direct-mcp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"web-no-direct-mcp.d.ts","sourceRoot":"","sources":["../../src/rules/web-no-direct-mcp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,YAAY,CAAC;AAS1D,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAuBrE,CAAC"}
+{"version":3,"file":"web-no-direct-mcp.d.ts","sourceRoot":"","sources":["../../src/rules/web-no-direct-mcp.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EAAE,UAAU,EAAe,MAAM,YAAY,CAAC;AAU1D,eAAO,MAAM,cAAc,EAAE,UAAU,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAuBrE,CAAC"}

package/dist/rules/web-no-direct-mcp.js

@@ -1,7 +1,8 @@
 import { isCommentLine } from '../fs.js';
 const FORBIDDEN = [
     { re: /(?<!\/a2a)\/mcp\/native/, what: 'native MCP tool ingress (/mcp/native) — go through /a2a/*' },
-    { re: /(?<!\/a2a)\/mcp(["'`])/, what: 'OAuth MCP tool ingress (POST /mcp) — go through /a2a/*' },
+    // A literal that begins under `/a2a/` is through a2a whatever it ends in (`/a2a/harness/connectors/mcp`, spec 404).
+    { re: /(?<!\/a2a)(?<!\/a2a\/[^"'`]*)\/mcp(["'`])/, what: 'OAuth MCP tool ingress (POST /mcp) — go through /a2a/*' },
     { re: /(?<!\/a2a)\/tools\//, what: 'raw MCP tool path (/tools/...) — go through /a2a/tools/... instead' },
 ];
 const SKIP = new Set(['dist', 'node_modules', 'coverage', 'test', 'tests', '__tests__', '.next']);

package/dist/rules/web-no-direct-mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-no-direct-mcp.js","sourceRoot":"","sources":["../../src/rules/web-no-direct-mcp.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,SAAS,GAAgD;IAC7D,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,2DAA2D,EAAE;IACpG,EAAE,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,wDAAwD,EAAE;IAChG,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,oEAAoE,EAAE;CAC1G,CAAC;AACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAElG,MAAM,CAAC,MAAM,cAAc,GAA+C;IACxE,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,4BAA4B;IAClC,QAAQ,EAAE,qEAAqE;IAC/E,GAAG,CAAC,GAAG,EAAE,GAAG;QACV,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAC7D,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;oBACnC,IAAI,aAAa,CAAC,IAAI,CAAC;wBAAE,OAAO;oBAChC,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;wBAAE,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;4BAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;gBACjJ,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,0CAA0C,CAAC,CAAC,CAAC,GAAG,OAAO,0CAA0C,EAAE,QAAQ,EAAE,CAAC;IACtK,CAAC;CACF,CAAC"}
+{"version":3,"file":"web-no-direct-mcp.js","sourceRoot":"","sources":["../../src/rules/web-no-direct-mcp.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAGzC,MAAM,SAAS,GAAgD;IAC7D,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,2DAA2D,EAAE;IACpG,oHAAoH;IACpH,EAAE,EAAE,EAAE,2CAA2C,EAAE,IAAI,EAAE,wDAAwD,EAAE;IACnH,EAAE,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,oEAAoE,EAAE;CAC1G,CAAC;AACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAElG,MAAM,CAAC,MAAM,cAAc,GAA+C;IACxE,EAAE,EAAE,mBAAmB;IACvB,IAAI,EAAE,UAAU;IAChB,IAAI,EAAE,4BAA4B;IAClC,QAAQ,EAAE,qEAAqE;IAC/E,GAAG,CAAC,GAAG,EAAE,GAAG;QACV,MAAM,QAAQ,GAAkB,EAAE,CAAC;QACnC,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC;YACzB,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC/B,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;gBACjH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrC,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;oBAAE,SAAS;gBAC7D,OAAO,IAAI,CAAC,CAAC;gBACb,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;oBACnC,IAAI,aAAa,CAAC,IAAI,CAAC;wBAAE,OAAO;oBAChC,KAAK,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,SAAS;wBAAE,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;4BAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC;gBACjJ,CAAC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,0CAA0C,CAAC,CAAC,CAAC,GAAG,OAAO,0CAA0C,EAAE,QAAQ,EAAE,CAAC;IACtK,CAAC;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agenticprimitives/devkit",
-  "version": "0.0.0-alpha.7",
+  "version": "0.0.0-alpha.8",
   "description": "The Developer Kit core (spec 398 §10 / spec 399 §3): `ap doctor` runs the doctrine gates as data + pure rules over any tree, `ap doctor --rules` projects one pinned rules source into AGENTS.md / CLAUDE.md / .cursor/rules by digest, `ap upgrade` rewrites every @agenticprimitives/* pin to one coherent exact set, and `ap conform` / `ap test` dispatch to the packages that own conformance and live gates.",
   "homepage": "https://agenticprimitives.dev",
   "bugs": {
@@ -40,13 +40,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@agenticprimitives/capability-claims": "0.0.0-alpha.24",
+    "@agenticprimitives/capability-claims": "0.0.0-alpha.25",
     "@agenticprimitives/mcp-protocol": "0.0.0-alpha.4"
   },
   "peerDependencies": {
-    "@agenticprimitives/a2a": "0.0.0-alpha.24",
+    "@agenticprimitives/a2a": "0.0.0-alpha.25",
     "@agenticprimitives/evaluation": "0.0.0-alpha.4",
-    "@agenticprimitives/harness": "0.0.0-alpha.6"
+    "@agenticprimitives/harness": "0.0.0-alpha.7",
+    "@agenticprimitives/orchestration": "0.0.0-alpha.6",
+    "@agenticprimitives/provenance-node": "0.0.0-alpha.2"
   },
   "peerDependenciesMeta": {
     "@agenticprimitives/a2a": {
@@ -57,11 +59,17 @@
     },
     "@agenticprimitives/harness": {
       "optional": true
+    },
+    "@agenticprimitives/orchestration": {
+      "optional": true
+    },
+    "@agenticprimitives/provenance-node": {
+      "optional": true
     }
   },
   "devDependencies": {
     "vitest": "^4.1.8",
-    "@agenticprimitives/harness": "0.0.0-alpha.6"
+    "@agenticprimitives/harness": "0.0.0-alpha.7"
   },
   "keywords": [
     "agentic",

package/rules/hard-rules.md

@@ -2,7 +2,7 @@
 
 - **Smart Agent address is the canonical identifier.** Every person, org, service agent, and treasury IS its ERC-4337 SA address. Names, profiles, ERC-8004 entries, ANS handles, HCS topics — all facets pointing AT the canonical address. Cross-package APIs take `Address`, not names. See [ADR-0010](docs/architecture/decisions/0010-smart-agent-canonical-identifier.md) + [spec 220](specs/220-agent-identity-bootstrap.md) for the bootstrap process (deploy → forced-unique name → custody → optional facets).
 - **Every Smart Agent is a Person, an Organization, or a Service — nothing else.** PROV-O's trichotomy (`prov:Person`/`prov:Organization`/`prov:SoftwareAgent`), mirrored by `AgentType = 'person' | 'org' | 'service'` in `@agenticprimitives/types`. Treasury, indexer, relay, marketplace, data-source are **Service roles** (profile `serviceType` / app-level kinds), never new classes; UI groups by class and labels by role; app kinds map DOWN to a class, never up into the enum ([ADR-0046](docs/architecture/decisions/0046-agent-classification-person-org-service.md), specs 217/225 §6). **A demo person SA is never also their org SA** — do not reuse “his own SA” as the organization ([agent-rules/demo-person-org-distinct.md](docs/architecture/agent-rules/demo-person-org-distinct.md), `pnpm check:demo-person-org-distinct`).
-- **Canonical identity persists; credentials rotate.** Passkeys, SIWE EOAs, hardware wallets are control credential facets — replaceable, not the identity. Credential add / replace / remove is a custody-policy-governed operation (trustee quorum, guardian quorum, multi-credential self-recovery, or multi-sig), NEVER a delegation. The SA address NEVER changes during credential recovery. Delegations issued by the SA remain valid after rotation. See [ADR-0011](docs/architecture/decisions/0011-credential-recovery-and-re-association.md) + [spec 221](specs/221-credential-recovery.md).
+- **Canonical identity persists; credentials rotate.** Passkeys, SIWE EOAs, hardware wallets are control credential facets — replaceable, not the identity. Credential add / replace / remove is a custody-policy-governed operation (trustee quorum, guardian quorum, multi-credential self-recovery, or multi-sig), NEVER a delegation. The SA address NEVER changes during credential recovery. **Every standing grant is re-approved by the ROTATION ceremony under the new custody epoch, and never by recovery** (spec 410 §1; the pre-epoch sentence "delegations remain valid after rotation" is retired): a rotation is `add → retire → approveDigest×N` in one transaction, a recovery is `add → retire → revokeAll` and the person re-issues from a reviewed list; only the account computes an approved-hash key (`approveDigest`), the registry is never an execute target. See [ADR-0011](docs/architecture/decisions/0011-credential-recovery-and-re-association.md) + [spec 221](specs/221-credential-recovery.md).
 - **Specs precede non-trivial code.** New `specs/2XX-*.md` before architecture changes; the spec is the architect-of-record.
 - **Always check smart-agent first.** Before designing any non-trivial capability look at the analog in `/home/barb/smart-agent`. New specs MUST include a "Reference: smart-agent patterns to port" section. Deliberate divergence must say why.
 - **Package boundaries** are one-directional: `types ← identity-auth ← agent-account ← delegation ← mcp-runtime`, plus `key-custody → delegation`, `tool-policy → mcp-runtime`, and the custody-layer fork `types ← custody` (depended on by `agent-account` and `delegation`; see [spec 213](specs/213-custody-layer-carve-out.md) for the firewall). No back-edges. `tool-policy` and `types` are transport-agnostic (no MCP/A2A/LangChain/Vercel imports).
@@ -41,7 +41,7 @@
 - **Per-package context budget:** `CLAUDE.md` ≤ 60 lines, `AUDIT.md` ≤ 150 lines, `README.md` ≤ 1800 words. If you're tempted to bloat one, fix the package shape.
 - **No `eth_getLogs` in product read paths.** Package and app hot paths use `readContract` only; chain history and human-readable reverse strings come from on-chain storage, an explicit indexer, or app cache — never inline log scans ([ADR-0012](docs/architecture/decisions/0012-no-eth-getlogs-in-product-read-paths.md)). No exceptions: the last walker (`agent-naming` `reverseResolve` log fallback) was removed once spec/222 `reverseResolveString` landed.
 - **No silent fallbacks.** A read/auth path has exactly ONE mechanism. If the canonical path has no answer it returns `null`/empty or throws — it does NOT escalate to a second, different, more expensive mechanism (`try fast catch slow`, empty-result → log walk, strong-check → weak-check). Empty is an answer, not a trigger. Bounded retries of the *same* call and cache-first reads (cache holds the canonical answer) are fine; switching mechanism is not ([ADR-0013](docs/architecture/decisions/0013-no-silent-fallbacks.md)).
-- **The discovery knowledge base holds ONLY public, on-chain-derivable data.** The GraphDB A-box (projected by `demo-discovery-indexer`, read by `demo-discovery-mcp`/`-a2a`) is a world-readable read tier — populate it ONLY with facts any party could reproduce from on-chain state, transactions, or event logs (naming, registry entries, profile, relationships, attestations, custodian/passkey membership from `CustodianAdded`/`PasskeyAdded` logs). NEVER per-viewer state, session/credential secrets, off-chain/relying-app-local data, vault contents, PII, or private linkage ([ADR-0025](docs/architecture/decisions/0025-related-agents-are-private-vault-credentials.md)) — not even hashed, not even temporarily, not even to make a check faster. No secret-derived rows: any opaque form (e.g. custody membership as `sha256(credential‖smartAgent)`) MUST be a public, unsalted, on-chain-*reproducible* function — no server pepper. The indexer is the only writer; consumer services MUST NOT write viewer-/request-derived facts back. The claim: reading the whole KB reveals nothing reading the chain wouldn't ([ADR-0040](docs/architecture/decisions/0040-knowledge-base-only-public-onchain-data.md)).
+- **The discovery knowledge base holds ONLY public, on-chain-derivable data.** The GraphDB A-box (projected by `demo-discovery-indexer`, read by `demo-discovery-mcp`/`-a2a`) is a world-readable read tier — populate it ONLY with facts any party could reproduce from on-chain state, transactions, or event logs (naming, registry entries, profile, relationships, attestations, custodian/passkey membership from `CustodianAdded`/`PasskeyAdded` logs). NEVER per-viewer state, session/credential secrets, off-chain/relying-app-local data, vault contents, PII, or private linkage ([ADR-0025](docs/architecture/decisions/0025-related-agents-are-private-vault-credentials.md)) — not even hashed, not even temporarily, not even to make a check faster. No secret-derived rows: any opaque form (e.g. custody membership as `sha256(credential‖smartAgent)`) MUST be a public, unsalted, on-chain-*reproducible* function — no server pepper. The indexer is the only writer; consumer services MUST NOT write viewer-/request-derived facts back. The claim: reading the whole KB reveals nothing reading the chain wouldn't ([ADR-0040](docs/architecture/decisions/0040-knowledge-base-only-public-onchain-data.md)). Amended carve-outs, each opt-in, signed or verified, and read the way a stranger would read it: A2A cards (286), signed Home manifests (323), and **public + owner-released shelf works** with their retrieval index (413; the index is never bound beside a vault, `check:no-vector-over-vault`).
 - **On the A2A→MCP hop, Web3 is the authority; MCP OAuth is only the ingress envelope.** When an A2A service agent calls an MCP service, the authorization decision is ALWAYS the Web3 chain — on-chain delegation + signature validation (ERC-1271/6492/ECDSA/WebAuthn via `UniversalSignatureValidator`) + entitlement + tool policy (+ key-release grant + audit for data) — re-run server-side against the principal SA. We ship MCP's OAuth (RFC 9728 bearer / protected-resource metadata) as a generic ingress *adapter* so external MCP clients interoperate, but the bearer is at most a transport envelope: it carries only `ap_principal` + a `ap_grant_ref`/`ap_grant_hash` to an encrypted grant bundle, NEVER delegation/entitlement payload or field-level authority. Do NOT let OAuth drift inward: field/record access is never encoded in scopes (`vault:read` ≠ "decrypt all PII"), OAuth claims (`scope`/`aud`/`client_id`) are never trusted *as* the grant, an inbound MCP token is never reused for the next hop (fresh token / RFC 8693 exchange), and the Web3 gates are never skipped because "OAuth already authenticated the caller." For internal A2A→MCP hops the public OAuth ingress may be absent/skipped (the A2A bridge handles MCP tokens server-side, never exposing them downstream) — the delegation+signature+entitlement+policy gates are not. One mechanism (ADR-0013): OAuth-fail rejects, it does not fall back to a weaker token-trust path. When the standard and the substrate conflict, the substrate wins. ERC-4337 SA-bound, signature-verified, on-chain-revocable delegation is our differentiator from OAuth — never trade it for an opaque issuer-granted scope ([ADR-0041](docs/architecture/decisions/0041-web3-authority-not-oauth-on-a2a-to-mcp.md) + [spec 277](specs/277-mcp-delegated-vault-authorization.md) + [spec 269](specs/269-async-delegation-authorized-a2a.md) + [spec 270](specs/270-del-001-activation.md)).
 - **Agentic architecture: first-party web expresses INTENTS to an A2A agent; it NEVER drives MCP directly.** A2A is the orchestration / intelligence / discovery layer — it discovers which capability satisfies a declarative goal, plans (planner/LLM/LangChain), assembles authority (delegation/entitlement), and composes MCP tools AS PRIMITIVES. A first-party UI (demo-web-pro, demo-sso-next) says "rebalance the treasury" / "read Alice's PII for purpose X" — a goal, not a tool name, payload, or call sequence — and posts it to an a2a agent. **`web → (edge) → MCP /tools|/mcp|/mcp/native` directly is the anti-pattern (RPC with extra steps) for first-party apps.** The public MCP ingress (`/mcp`, `/mcp/native`) is interop for EXTERNAL agents/clients only; the Act6 OAuth/Native panels are external-MCP-client *demonstrations of a primitive*, NOT a product-UX model (keep them labelled as such). **Orchestration is a Ring-0 primitive, not external** — the agentic loop (intent→plan→compose→observe→re-plan), the planner/reasoner PORT, and the tool/skill model live in a pure `packages/*` orchestration core; ONLY the concrete LLM-framework binding (LangChain/OpenAI/Anthropic SDK) lives in a dedicated in-repo adapter behind the port — the `chain-state` + `chain-state-viem` pattern (ADR-0037 exiles protocol-conformance + deployed-infra, NOT libraries). `service-agent` stays the deterministic compile/run target; the Ring-0 orchestration core PRODUCES its plans. Apps wire model creds/config; they don't re-implement the loop. The edge is orthogonal: it admits, it does not orchestrate (ADR-0043). Honest tension: the first-party web↔a2a surface is RPC-shaped TODAY (`/session/*`, `/account/*`, `/mcp/person/pii` — verbs); the intent layer (A2A messages/tasks against `A2aTaskDO` + `service-agent` plans) is the objective — build NEW first-party surfaces intent-first; the relayer verbs are legacy. Enforced by review + `check:no-direct-mcp-in-web` (browser-app source; allowlist the labelled external-client demo panels) ([ADR-0044](docs/architecture/decisions/0044-a2a-is-the-agentic-orchestration-layer.md) + [docs/architecture/principles.md](docs/architecture/principles.md)).
 - **Packages are GENERIC trust building blocks; white-label / vertical / deployment code lives in apps.** `packages/*` are reusable + vertical-agnostic. They MUST NOT contain (a) **branding / vertical content** — faith vocabulary (ministry, congregation, discipleship, parish, denomination, gospel, scripture — **`church`/`circle` are the one carve-out: Ring-0 derived AGENT TYPES since 2026-08-30, ADR-0061 amendment; the KIND is generic, the content is not**), white-label/product names, marketing copy, themes; (b) **vertical-specific flows** — faith onboarding steps, impact-portal features; (c) **deployment specifics** — concrete hostnames (`impact-agent.me`/`.io`), the `demo.agent` subregistry, hosting providers (`*.pages.dev`/`*.workers.dev`/`vercel`), host/subdomain parsing. All of that is the **app** layer's job, supplied as an **app-level white-label config object** (spec 234) the generic core consumes. The `.agent` TLD itself is the naming protocol (owned by `agent-naming`) and is allowed. Enforced by `pnpm check:no-domain-in-packages` (hostnames + `demo.agent` + faith vocab) + `check:forbidden-terms`; the rest is doctrine ([ADR-0021](docs/architecture/decisions/0021-generic-packages-vs-white-label-apps.md)). Each app centralizes its domain/white-label literals in one module (e.g. `src/lib/domain.ts`), never scattered.

package/rules/vault-is-the-record-apps-hold-references.md

@@ -0,0 +1,47 @@
+# The vault is the record; an app holds references, never copies
+
+**Binding rule for every product app on the substrate (Source Publishing, Field, Skills, Gather, the Home's own
+serving planes) and for the A2A runtime.** Canonical copy; Cursor has no `.mdc` for it yet.
+
+## The rule
+
+1. **A person's data lives in their vault, behind MCP, under their own key.** Name, email, phone, location, the
+   publisher card, a work's text, a profile of any kind — one record, in the owner's vault, reachable only through a
+   delegation the owner signed. Nothing about a person is authoritative anywhere else.
+2. **An app keeps REFERENCE facts and its own operational records — nothing that is the person's.** Reference: the Smart
+   Agent address, the handle the app assigned, the client's own wire (ask-as-me) and grants, ids of records it wrote
+   through the owner's agent. Operational: what the app itself produced and must serve (a public replica of a SIGNED,
+   PUBLIC artifact; an archive the product exists to keep; verification results). Never a copy of a private field
+   because it was convenient to have beside the id.
+3. **A copy that exists for speed is a cache with a source, never a second record.** The Home's KV Library cache is
+   rebuildable from the vault and says `source: cache` on the wire; the runtime's DO storage is a serving plane
+   (ADR-0055). If wiping it is a bereavement and not a rebuild, it belonged in the vault.
+4. **Reads are fast by GRANT, not by copying.** An app that needs a person's record at request latency holds a scoped,
+   revocable **read grant** the person signed at connect (registry `read_grant.resources`; spec 341 §4.3b) and reads
+   it in one call under its own bearer — no harness, no model. What is public is read through the owner's agent's
+   public lane (spec 412) — no credential at all. The one thing an app never does is answer speed by storing.
+5. **Writes go through the owner's agent, as the owner.** An app never writes a vault. It asks the person's agent
+   (`ask-as-me` → `harness.ask` → a self-acting capability such as `profile.contact.update`, `library.file.save`), and
+   the agent writes as the person, into the person's vault, leaving a run of theirs. A form in an app that collects a
+   person's name is a form that writes it to their Home — the app forgets it the moment the write lands.
+6. **The A2A runtime is the same.** It reads and writes the owner's records under the owner's grants; it holds serving
+   state, receipts, cursors and caches, never the person's data as its own.
+
+## Why
+
+Every copy is a second enforcement point with a second authority model, and a record nobody can carry to another Home.
+The publishing app kept a directory row with the person's name, organization, byline and topics beside their address,
+and a profile document with their email — three copies of things the Home knew, each drifting the day the Home changed
+(2026-09-21). The doctrine that made revocation real (per-app grants, ADR-0041) is undone by a copy that survives the
+revoke.
+
+## How to apply
+
+- Designing a table: for each column ask *whose fact is this?* A person's → not here; read it under a grant or through
+  the public lane. The app's own → fine.
+- Designing a form: if it collects a person's fact, its submit is a write to their Home through their agent, and the
+  page re-reads it from there.
+- Reviewing an app: `grep` its schema and browser storage for names, emails, phones, addresses, profile text. Each hit
+  is a finding unless it is inside a signed public artifact the app exists to serve.
+- Performance complaint about a person's data: the answer is a read grant (private) or the public lane (public),
+  declared in the registry — never a local copy.