@agentproto/operator 0.1.0-alpha.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 agentproto contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,23 @@
+# @agentproto/operator
+
+AIP-9 `OPERATOR.md` reference implementation. A single canonical operator shell — pluggable profile, skills, tools, memory, governance — that any agent runtime can implement and any conforming workflow can dispatch to.
+
+> **Status: 0.1.0-alpha.** Generated by `scripts/scaffold-aip.mjs` — `build()` and `validate()` bodies are TODOs.
+
+Spec: <https://agentproto.sh/docs/aip-9>
+
+## Usage
+
+```ts
+import { defineOperator } from "@agentproto/operator"
+
+const x = defineOperator({
+  id: "my-operator",
+  description: "Short purpose.",
+  // ...
+})
+```
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/chunk-HILBXS2I.mjs

@@ -0,0 +1,158 @@
+import { createDoctype } from '@agentproto/define-doctype';
+
+/**
+ * @agentproto/operator v0.1.0-alpha
+ * AIP-9 OPERATOR.md `defineOperator` reference implementation.
+ */
+
+var OPERATOR_ID_PATTERN = /^[a-z][a-z0-9-]*[a-z0-9]$/;
+var VERSION_PATTERN = /^\d+\.\d+\.\d+(?:[-+][a-zA-Z0-9.-]+)?$/;
+var POLICY_REF_PATTERN = /^policy:[A-Za-z0-9_./-]+$/;
+var AUDIT_REF_PATTERN = /^audit:[A-Za-z0-9_./-]+$/;
+var SHARE_WITH_PATTERN = /^[a-z][a-z0-9-]*[a-z0-9]$/;
+var CAPABILITY_PATTERN = /^[a-z][a-z0-9-]*$/;
+var TAG_PATTERN = /^[a-z][a-z0-9-]*$/;
+var defineOperator = createDoctype(
+  {
+    aip: 9,
+    name: "operator",
+    idPattern: OPERATOR_ID_PATTERN,
+    // OPERATOR.md uses `persona_summary` for LLM-facing prose; no
+    // `description` field. Use it as the description-equivalent for
+    // length validation, capped at 280 per the schema.
+    readDescription: (def) => def.persona_summary,
+    maxDescriptionLen: 280,
+    validate(def) {
+      if (typeof def.name !== "string" || def.name.length === 0 || def.name.length > 80) {
+        throw new Error(
+          `defineOperator (AIP-9): id='${def.id}' name must be 1\u201380 chars`
+        );
+      }
+      if (!VERSION_PATTERN.test(def.version ?? "")) {
+        throw new Error(
+          `defineOperator (AIP-9): id='${def.id}' version must match ${VERSION_PATTERN}`
+        );
+      }
+      if (!def.profile) {
+        throw new Error(
+          `defineOperator (AIP-9): id='${def.id}' profile is required`
+        );
+      }
+      if (typeof def.profile.role !== "string" || def.profile.role.length === 0 || def.profile.role.length > 1e3) {
+        throw new Error(
+          `defineOperator (AIP-9): id='${def.id}' profile.role must be 1\u20131000 chars`
+        );
+      }
+      if (typeof def.profile.voice !== "string" || def.profile.voice.length === 0 || def.profile.voice.length > 1e3) {
+        throw new Error(
+          `defineOperator (AIP-9): id='${def.id}' profile.voice must be 1\u20131000 chars`
+        );
+      }
+      if (!Array.isArray(def.profile.boundaries)) {
+        throw new Error(
+          `defineOperator (AIP-9): id='${def.id}' profile.boundaries must be an array`
+        );
+      }
+      if (def.memory?.kind === "external" && !def.memory.external?.uri) {
+        throw new Error(
+          `defineOperator (AIP-9): id='${def.id}' memory.kind='external' requires memory.external.uri`
+        );
+      }
+      if (def.governance) {
+        if (!AUDIT_REF_PATTERN.test(def.governance.audit_log ?? "")) {
+          throw new Error(
+            `defineOperator (AIP-9): id='${def.id}' governance.audit_log must match ${AUDIT_REF_PATTERN}`
+          );
+        }
+        for (const p of def.governance.policies ?? []) {
+          if (!POLICY_REF_PATTERN.test(p)) {
+            throw new Error(
+              `defineOperator (AIP-9): id='${def.id}' governance.policies entry '${p}' must match ${POLICY_REF_PATTERN}`
+            );
+          }
+        }
+      }
+      for (const peer of def.memory?.share_with ?? []) {
+        if (!SHARE_WITH_PATTERN.test(peer)) {
+          throw new Error(
+            `defineOperator (AIP-9): id='${def.id}' memory.share_with entry '${peer}' must match ${SHARE_WITH_PATTERN}`
+          );
+        }
+      }
+      for (const c of def.capabilities ?? []) {
+        if (!CAPABILITY_PATTERN.test(c)) {
+          throw new Error(
+            `defineOperator (AIP-9): id='${def.id}' capabilities entry '${c}' must match ${CAPABILITY_PATTERN}`
+          );
+        }
+      }
+      for (const t of def.tags ?? []) {
+        if (!TAG_PATTERN.test(t)) {
+          throw new Error(
+            `defineOperator (AIP-9): id='${def.id}' tags entry '${t}' must match ${TAG_PATTERN}`
+          );
+        }
+      }
+      if (def.governance?.autonomy === "gated") {
+        const mode = def.participation?.mode ?? "mention-only";
+        if (mode !== "mention-only" && mode !== "silent") {
+          throw new Error(
+            `defineOperator (AIP-9): id='${def.id}' governance.autonomy='gated' forbids participation.mode='${mode}' \u2014 must be 'mention-only' or 'silent'`
+          );
+        }
+      }
+      if (def.runtime?.kind === "agent-cli" && !def.runtime.ref) {
+        throw new Error(
+          `defineOperator (AIP-9): id='${def.id}' runtime.kind='agent-cli' requires runtime.ref (e.g. '@agentproto/adapter-hermes#hermes')`
+        );
+      }
+    },
+    build(def) {
+      return {
+        id: def.id,
+        name: def.name,
+        persona_summary: def.persona_summary,
+        version: def.version,
+        entry: def.entry,
+        profile: Object.freeze({
+          role: def.profile.role,
+          voice: def.profile.voice,
+          boundaries: Object.freeze([...def.profile.boundaries])
+        }),
+        skills: Object.freeze([...def.skills ?? []]),
+        tools: Object.freeze([...def.tools ?? []]),
+        memory: def.memory ? Object.freeze({
+          kind: def.memory.kind,
+          policy: def.memory.policy ?? "summarising",
+          share_with: Object.freeze([...def.memory.share_with ?? []]),
+          external: def.memory.external ? Object.freeze({ ...def.memory.external }) : void 0
+        }) : void 0,
+        governance: def.governance ? Object.freeze({
+          policies: Object.freeze([...def.governance.policies ?? []]),
+          audit_log: def.governance.audit_log,
+          autonomy: def.governance.autonomy
+        }) : void 0,
+        capabilities: Object.freeze([...def.capabilities ?? []]),
+        participation: def.participation ? Object.freeze({
+          mode: def.participation.mode ?? "mention-only",
+          pass_when: def.participation.pass_when,
+          reactions: def.participation.reactions ?? false
+        }) : Object.freeze({ mode: "mention-only", reactions: false }),
+        runtime: def.runtime ? Object.freeze({
+          kind: def.runtime.kind,
+          ref: def.runtime.ref,
+          session: def.runtime.session ? Object.freeze({
+            mode: def.runtime.session.mode,
+            idle_timeout_ms: def.runtime.session.idle_timeout_ms
+          }) : void 0
+        }) : void 0,
+        tags: Object.freeze([...def.tags ?? []]),
+        metadata: Object.freeze({ ...def.metadata ?? {} })
+      };
+    }
+  }
+);
+
+export { defineOperator };
+//# sourceMappingURL=chunk-HILBXS2I.mjs.map
+//# sourceMappingURL=chunk-HILBXS2I.mjs.map

package/dist/chunk-HILBXS2I.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/define-operator.ts"],"names":[],"mappings":";;;;;;;AAUA,IAAM,mBAAA,GAAsB,2BAAA;AAE5B,IAAM,eAAA,GAAkB,wCAAA;AACxB,IAAM,kBAAA,GAAqB,2BAAA;AAC3B,IAAM,iBAAA,GAAoB,0BAAA;AAC1B,IAAM,kBAAA,GAAqB,2BAAA;AAC3B,IAAM,kBAAA,GAAqB,mBAAA;AAC3B,IAAM,WAAA,GAAc,mBAAA;AAoBb,IAAM,cAAA,GAAiB,aAAA;AAAA,EAC5B;AAAA,IACE,GAAA,EAAK,CAAA;AAAA,IACL,IAAA,EAAM,UAAA;AAAA,IACN,SAAA,EAAW,mBAAA;AAAA;AAAA;AAAA;AAAA,IAIX,eAAA,EAAiB,CAAC,GAAA,KAAQ,GAAA,CAAI,eAAA;AAAA,IAC9B,iBAAA,EAAmB,GAAA;AAAA,IACnB,SAAS,GAAA,EAAK;AAEZ,MAAA,IAAI,OAAO,GAAA,CAAI,IAAA,KAAS,QAAA,IAAY,GAAA,CAAI,IAAA,CAAK,MAAA,KAAW,CAAA,IAAK,GAAA,CAAI,IAAA,CAAK,MAAA,GAAS,EAAA,EAAI;AACjF,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,4BAAA,EAA+B,IAAI,EAAE,CAAA,8BAAA;AAAA,SACvC;AAAA,MACF;AACA,MAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,GAAA,CAAI,OAAA,IAAW,EAAE,CAAA,EAAG;AAC5C,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,4BAAA,EAA+B,GAAA,CAAI,EAAE,CAAA,qBAAA,EAAwB,eAAe,CAAA;AAAA,SAC9E;AAAA,MACF;AACA,MAAA,IAAI,CAAC,IAAI,OAAA,EAAS;AAChB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,4BAAA,EAA+B,IAAI,EAAE,CAAA,qBAAA;AAAA,SACvC;AAAA,MACF;AACA,MAAA,IACE,OAAO,GAAA,CAAI,OAAA,CAAQ,IAAA,KAAS,YAC5B,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,MAAA,KAAW,CAAA,IAC5B,GAAA,CAAI,OAAA,CAAQ,IAAA,CAAK,SAAS,GAAA,EAC1B;AACA,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,4BAAA,EAA+B,IAAI,EAAE,CAAA,wCAAA;AAAA,SACvC;AAAA,MACF;AACA,MAAA,IACE,OAAO,GAAA,CAAI,OAAA,CAAQ,KAAA,KAAU,YAC7B,GAAA,CAAI,OAAA,CAAQ,KAAA,CAAM,MAAA,KAAW,CAAA,IAC7B,GAAA,CAAI,OAAA,CAAQ,KAAA,CAAM,SAAS,GAAA,EAC3B;AACA,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,4BAAA,EAA+B,IAAI,EAAE,CAAA,yCAAA;AAAA,SACvC;AAAA,MACF;AACA,MAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,OAAA,CAAQ,UAAU,CAAA,EAAG;AAC1C,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,4BAAA,EAA+B,IAAI,EAAE,CAAA,qCAAA;AAAA,SACvC;AAAA,MACF;AAGA,MAAA,IAAI,GAAA,CAAI,QAAQ,IAAA,KAAS,UAAA,IAAc,CAAC,GAAA,CAAI,MAAA,CAAO,UAAU,GAAA,EAAK;AAChE,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,4BAAA,EAA+B,IAAI,EAAE,CAAA,qDAAA;AAAA,SACvC;AAAA,MACF;AAGA,MAAA,IAAI,IAAI,UAAA,EAAY;AAClB,QAAA,IAAI,CAAC,iBAAA,CAAkB,IAAA,CAAK,IAAI,UAAA,CAAW,SAAA,IAAa,EAAE,CAAA,EAAG;AAC3D,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,CAAA,4BAAA,EAA+B,GAAA,CAAI,EAAE,CAAA,kCAAA,EAAqC,iBAAiB,CAAA;AAAA,WAC7F;AAAA,QACF;AACA,QAAA,KAAA,MAAW,CAAA,IAAK,GAAA,CAAI,UAAA,CAAW,QAAA,IAAY,EAAC,EAAG;AAC7C,UAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,CAAC,CAAA,EAAG;AAC/B,YAAA,MAAM,IAAI,KAAA;AAAA,cACR,+BAA+B,GAAA,CAAI,EAAE,CAAA,6BAAA,EAAgC,CAAC,gBAAgB,kBAAkB,CAAA;AAAA,aAC1G;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAGA,MAAA,KAAA,MAAW,IAAA,IAAQ,GAAA,CAAI,MAAA,EAAQ,UAAA,IAAc,EAAC,EAAG;AAC/C,QAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,IAAI,CAAA,EAAG;AAClC,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,+BAA+B,GAAA,CAAI,EAAE,CAAA,2BAAA,EAA8B,IAAI,gBAAgB,kBAAkB,CAAA;AAAA,WAC3G;AAAA,QACF;AAAA,MACF;AAGA,MAAA,KAAA,MAAW,CAAA,IAAK,GAAA,CAAI,YAAA,IAAgB,EAAC,EAAG;AACtC,QAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,CAAC,CAAA,EAAG;AAC/B,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,+BAA+B,GAAA,CAAI,EAAE,CAAA,sBAAA,EAAyB,CAAC,gBAAgB,kBAAkB,CAAA;AAAA,WACnG;AAAA,QACF;AAAA,MACF;AACA,MAAA,KAAA,MAAW,CAAA,IAAK,GAAA,CAAI,IAAA,IAAQ,EAAC,EAAG;AAC9B,QAAA,IAAI,CAAC,WAAA,CAAY,IAAA,CAAK,CAAC,CAAA,EAAG;AACxB,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,+BAA+B,GAAA,CAAI,EAAE,CAAA,cAAA,EAAiB,CAAC,gBAAgB,WAAW,CAAA;AAAA,WACpF;AAAA,QACF;AAAA,MACF;AAMA,MAAA,IAAI,GAAA,CAAI,UAAA,EAAY,QAAA,KAAa,OAAA,EAAS;AACxC,QAAA,MAAM,IAAA,GAAO,GAAA,CAAI,aAAA,EAAe,IAAA,IAAQ,cAAA;AACxC,QAAA,IAAI,IAAA,KAAS,cAAA,IAAkB,IAAA,KAAS,QAAA,EAAU;AAChD,UAAA,MAAM,IAAI,KAAA;AAAA,YACR,CAAA,4BAAA,EAA+B,GAAA,CAAI,EAAE,CAAA,0DAAA,EAA6D,IAAI,CAAA,2CAAA;AAAA,WACxG;AAAA,QACF;AAAA,MACF;AAGA,MAAA,IAAI,IAAI,OAAA,EAAS,IAAA,KAAS,eAAe,CAAC,GAAA,CAAI,QAAQ,GAAA,EAAK;AACzD,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,4BAAA,EAA+B,IAAI,EAAE,CAAA,0FAAA;AAAA,SACvC;AAAA,MACF;AAAA,IACF,CAAA;AAAA,IACA,MAAM,GAAA,EAAK;AACT,MAAA,OAAO;AAAA,QACL,IAAI,GAAA,CAAI,EAAA;AAAA,QACR,MAAM,GAAA,CAAI,IAAA;AAAA,QACV,iBAAiB,GAAA,CAAI,eAAA;AAAA,QACrB,SAAS,GAAA,CAAI,OAAA;AAAA,QACb,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,OAAA,EAAS,OAAO,MAAA,CAAO;AAAA,UACrB,IAAA,EAAM,IAAI,OAAA,CAAQ,IAAA;AAAA,UAClB,KAAA,EAAO,IAAI,OAAA,CAAQ,KAAA;AAAA,UACnB,UAAA,EAAY,OAAO,MAAA,CAAO,CAAC,GAAG,GAAA,CAAI,OAAA,CAAQ,UAAU,CAAC;AAAA,SACtD,CAAA;AAAA,QACD,MAAA,EAAQ,OAAO,MAAA,CAAO,CAAC,GAAI,GAAA,CAAI,MAAA,IAAU,EAAG,CAAC,CAAA;AAAA,QAC7C,KAAA,EAAO,OAAO,MAAA,CAAO,CAAC,GAAI,GAAA,CAAI,KAAA,IAAS,EAAG,CAAC,CAAA;AAAA,QAC3C,MAAA,EAAQ,GAAA,CAAI,MAAA,GACR,MAAA,CAAO,MAAA,CAAO;AAAA,UACZ,IAAA,EAAM,IAAI,MAAA,CAAO,IAAA;AAAA,UACjB,MAAA,EAAQ,GAAA,CAAI,MAAA,CAAO,MAAA,IAAU,aAAA;AAAA,UAC7B,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,CAAC,GAAI,IAAI,MAAA,CAAO,UAAA,IAAc,EAAG,CAAC,CAAA;AAAA,UAC5D,QAAA,EAAU,GAAA,CAAI,MAAA,CAAO,QAAA,GACjB,MAAA,CAAO,MAAA,CAAO,EAAE,GAAG,GAAA,CAAI,MAAA,CAAO,QAAA,EAAU,CAAA,GACxC;AAAA,SACL,CAAA,GACD,MAAA;AAAA,QACJ,UAAA,EAAY,GAAA,CAAI,UAAA,GACZ,MAAA,CAAO,MAAA,CAAO;AAAA,UACZ,QAAA,EAAU,MAAA,CAAO,MAAA,CAAO,CAAC,GAAI,IAAI,UAAA,CAAW,QAAA,IAAY,EAAG,CAAC,CAAA;AAAA,UAC5D,SAAA,EAAW,IAAI,UAAA,CAAW,SAAA;AAAA,UAC1B,QAAA,EAAU,IAAI,UAAA,CAAW;AAAA,SAC1B,CAAA,GACD,MAAA;AAAA,QACJ,YAAA,EAAc,OAAO,MAAA,CAAO,CAAC,GAAI,GAAA,CAAI,YAAA,IAAgB,EAAG,CAAC,CAAA;AAAA,QACzD,aAAA,EAAe,GAAA,CAAI,aAAA,GACf,MAAA,CAAO,MAAA,CAAO;AAAA,UACZ,IAAA,EAAM,GAAA,CAAI,aAAA,CAAc,IAAA,IAAQ,cAAA;AAAA,UAChC,SAAA,EAAW,IAAI,aAAA,CAAc,SAAA;AAAA,UAC7B,SAAA,EAAW,GAAA,CAAI,aAAA,CAAc,SAAA,IAAa;AAAA,SAC3C,IACD,MAAA,CAAO,MAAA,CAAO,EAAE,IAAA,EAAM,cAAA,EAAgB,SAAA,EAAW,KAAA,EAAO,CAAA;AAAA,QAC5D,OAAA,EAAS,GAAA,CAAI,OAAA,GACT,MAAA,CAAO,MAAA,CAAO;AAAA,UACZ,IAAA,EAAM,IAAI,OAAA,CAAQ,IAAA;AAAA,UAClB,GAAA,EAAK,IAAI,OAAA,CAAQ,GAAA;AAAA,UACjB,OAAA,EAAS,GAAA,CAAI,OAAA,CAAQ,OAAA,GACjB,OAAO,MAAA,CAAO;AAAA,YACZ,IAAA,EAAM,GAAA,CAAI,OAAA,CAAQ,OAAA,CAAQ,IAAA;AAAA,YAC1B,eAAA,EAAiB,GAAA,CAAI,OAAA,CAAQ,OAAA,CAAQ;AAAA,WACtC,CAAA,GACD;AAAA,SACL,CAAA,GACD,MAAA;AAAA,QACJ,IAAA,EAAM,OAAO,MAAA,CAAO,CAAC,GAAI,GAAA,CAAI,IAAA,IAAQ,EAAG,CAAC,CAAA;AAAA,QACzC,QAAA,EAAU,OAAO,MAAA,CAAO,EAAE,GAAI,GAAA,CAAI,QAAA,IAAY,EAAC,EAAI;AAAA,OACrD;AAAA,IACF;AAAA;AAEJ","file":"chunk-HILBXS2I.mjs","sourcesContent":["import { createDoctype } from \"@agentproto/define-doctype\"\nimport type { OperatorDefinition, OperatorHandle } from \"./types.js\"\n\n/**\n * AIP-9 id pattern — `^[a-z][a-z0-9-]*[a-z0-9]$` (slug-style, no dots,\n * no underscores, 2+ chars). Stricter than the createDoctype default\n * because operator ids double as dispatch slugs in conversation\n * mentions (`@<slug>`) where dot/underscore would collide with\n * shell/file conventions.\n */\nconst OPERATOR_ID_PATTERN = /^[a-z][a-z0-9-]*[a-z0-9]$/\n\nconst VERSION_PATTERN = /^\\d+\\.\\d+\\.\\d+(?:[-+][a-zA-Z0-9.-]+)?$/\nconst POLICY_REF_PATTERN = /^policy:[A-Za-z0-9_./-]+$/\nconst AUDIT_REF_PATTERN = /^audit:[A-Za-z0-9_./-]+$/\nconst SHARE_WITH_PATTERN = /^[a-z][a-z0-9-]*[a-z0-9]$/\nconst CAPABILITY_PATTERN = /^[a-z][a-z0-9-]*$/\nconst TAG_PATTERN = /^[a-z][a-z0-9-]*$/\n\n/**\n * AIP-9 reference implementation of `defineOperator`.\n *\n * Built on `createDoctype` so the cross-AIP invariants (id pattern,\n * top-level freeze, \"defineOperator (AIP-9): …\" error prefix) run\n * uniformly with every other AIP defineX. Spec-9-specific checks live\n * in `validate(def)`; defaulting + nested freezing in `build(def)`.\n *\n * Cross-field invariants enforced:\n *   - persona_summary 1–280 chars (the LLM-facing one-liner)\n *   - profile.role / profile.voice 1–1000 chars\n *   - version matches semver (with optional prerelease/build)\n *   - governance.audit_log shape `audit:<slug>`\n *   - governance.policies entries shape `policy:<slug>`\n *   - memory.kind === \"external\" requires memory.external.uri\n *   - governance.autonomy === \"gated\" forces participation.mode in\n *     {mention-only, silent} (matches the schema's allOf/if/then)\n */\nexport const defineOperator = createDoctype<OperatorDefinition, OperatorHandle>(\n  {\n    aip: 9,\n    name: \"operator\",\n    idPattern: OPERATOR_ID_PATTERN,\n    // OPERATOR.md uses `persona_summary` for LLM-facing prose; no\n    // `description` field. Use it as the description-equivalent for\n    // length validation, capped at 280 per the schema.\n    readDescription: (def) => def.persona_summary,\n    maxDescriptionLen: 280,\n    validate(def) {\n      // Required-field shape checks beyond what createDoctype does.\n      if (typeof def.name !== \"string\" || def.name.length === 0 || def.name.length > 80) {\n        throw new Error(\n          `defineOperator (AIP-9): id='${def.id}' name must be 1–80 chars`,\n        )\n      }\n      if (!VERSION_PATTERN.test(def.version ?? \"\")) {\n        throw new Error(\n          `defineOperator (AIP-9): id='${def.id}' version must match ${VERSION_PATTERN}`,\n        )\n      }\n      if (!def.profile) {\n        throw new Error(\n          `defineOperator (AIP-9): id='${def.id}' profile is required`,\n        )\n      }\n      if (\n        typeof def.profile.role !== \"string\" ||\n        def.profile.role.length === 0 ||\n        def.profile.role.length > 1000\n      ) {\n        throw new Error(\n          `defineOperator (AIP-9): id='${def.id}' profile.role must be 1–1000 chars`,\n        )\n      }\n      if (\n        typeof def.profile.voice !== \"string\" ||\n        def.profile.voice.length === 0 ||\n        def.profile.voice.length > 1000\n      ) {\n        throw new Error(\n          `defineOperator (AIP-9): id='${def.id}' profile.voice must be 1–1000 chars`,\n        )\n      }\n      if (!Array.isArray(def.profile.boundaries)) {\n        throw new Error(\n          `defineOperator (AIP-9): id='${def.id}' profile.boundaries must be an array`,\n        )\n      }\n\n      // Memory: external kind needs an `external.uri`.\n      if (def.memory?.kind === \"external\" && !def.memory.external?.uri) {\n        throw new Error(\n          `defineOperator (AIP-9): id='${def.id}' memory.kind='external' requires memory.external.uri`,\n        )\n      }\n\n      // Governance ref shapes.\n      if (def.governance) {\n        if (!AUDIT_REF_PATTERN.test(def.governance.audit_log ?? \"\")) {\n          throw new Error(\n            `defineOperator (AIP-9): id='${def.id}' governance.audit_log must match ${AUDIT_REF_PATTERN}`,\n          )\n        }\n        for (const p of def.governance.policies ?? []) {\n          if (!POLICY_REF_PATTERN.test(p)) {\n            throw new Error(\n              `defineOperator (AIP-9): id='${def.id}' governance.policies entry '${p}' must match ${POLICY_REF_PATTERN}`,\n            )\n          }\n        }\n      }\n\n      // share_with entries follow the operator-id pattern.\n      for (const peer of def.memory?.share_with ?? []) {\n        if (!SHARE_WITH_PATTERN.test(peer)) {\n          throw new Error(\n            `defineOperator (AIP-9): id='${def.id}' memory.share_with entry '${peer}' must match ${SHARE_WITH_PATTERN}`,\n          )\n        }\n      }\n\n      // Capabilities + tags: lowercase-slug pattern.\n      for (const c of def.capabilities ?? []) {\n        if (!CAPABILITY_PATTERN.test(c)) {\n          throw new Error(\n            `defineOperator (AIP-9): id='${def.id}' capabilities entry '${c}' must match ${CAPABILITY_PATTERN}`,\n          )\n        }\n      }\n      for (const t of def.tags ?? []) {\n        if (!TAG_PATTERN.test(t)) {\n          throw new Error(\n            `defineOperator (AIP-9): id='${def.id}' tags entry '${t}' must match ${TAG_PATTERN}`,\n          )\n        }\n      }\n\n      // Cross-field: autonomy=gated → participation.mode in {mention-only, silent}.\n      // Mirrors the schema's allOf/if/then. The default participation mode\n      // is mention-only (which satisfies the constraint) — only catch\n      // explicit \"proactive\" with \"gated\".\n      if (def.governance?.autonomy === \"gated\") {\n        const mode = def.participation?.mode ?? \"mention-only\"\n        if (mode !== \"mention-only\" && mode !== \"silent\") {\n          throw new Error(\n            `defineOperator (AIP-9): id='${def.id}' governance.autonomy='gated' forbids participation.mode='${mode}' — must be 'mention-only' or 'silent'`,\n          )\n        }\n      }\n\n      // Cross-field: runtime.kind=agent-cli requires runtime.ref.\n      if (def.runtime?.kind === \"agent-cli\" && !def.runtime.ref) {\n        throw new Error(\n          `defineOperator (AIP-9): id='${def.id}' runtime.kind='agent-cli' requires runtime.ref (e.g. '@agentproto/adapter-hermes#hermes')`,\n        )\n      }\n    },\n    build(def) {\n      return {\n        id: def.id,\n        name: def.name,\n        persona_summary: def.persona_summary,\n        version: def.version,\n        entry: def.entry,\n        profile: Object.freeze({\n          role: def.profile.role,\n          voice: def.profile.voice,\n          boundaries: Object.freeze([...def.profile.boundaries]),\n        }),\n        skills: Object.freeze([...(def.skills ?? [])]),\n        tools: Object.freeze([...(def.tools ?? [])]),\n        memory: def.memory\n          ? Object.freeze({\n              kind: def.memory.kind,\n              policy: def.memory.policy ?? \"summarising\",\n              share_with: Object.freeze([...(def.memory.share_with ?? [])]),\n              external: def.memory.external\n                ? Object.freeze({ ...def.memory.external })\n                : undefined,\n            })\n          : undefined,\n        governance: def.governance\n          ? Object.freeze({\n              policies: Object.freeze([...(def.governance.policies ?? [])]),\n              audit_log: def.governance.audit_log,\n              autonomy: def.governance.autonomy,\n            })\n          : undefined,\n        capabilities: Object.freeze([...(def.capabilities ?? [])]),\n        participation: def.participation\n          ? Object.freeze({\n              mode: def.participation.mode ?? \"mention-only\",\n              pass_when: def.participation.pass_when,\n              reactions: def.participation.reactions ?? false,\n            })\n          : Object.freeze({ mode: \"mention-only\", reactions: false }),\n        runtime: def.runtime\n          ? Object.freeze({\n              kind: def.runtime.kind,\n              ref: def.runtime.ref,\n              session: def.runtime.session\n                ? Object.freeze({\n                    mode: def.runtime.session.mode,\n                    idle_timeout_ms: def.runtime.session.idle_timeout_ms,\n                  })\n                : undefined,\n            })\n          : undefined,\n        tags: Object.freeze([...(def.tags ?? [])]),\n        metadata: Object.freeze({ ...(def.metadata ?? {}) }),\n      }\n    },\n  },\n)\n"]}

package/dist/index.d.ts

@@ -0,0 +1,40 @@
+import { O as OperatorDefinition, a as OperatorHandle } from './types-BxJvLb8Z.js';
+export { A as Autonomy, M as MemoryKind, b as MemoryPolicy, c as OperatorGovernance, d as OperatorMemory, e as OperatorParticipation, f as OperatorProfile, P as ParticipationMode, S as SkillRef, T as ToolRef } from './types-BxJvLb8Z.js';
+
+/**
+ * AIP-9 reference implementation of `defineOperator`.
+ *
+ * Built on `createDoctype` so the cross-AIP invariants (id pattern,
+ * top-level freeze, "defineOperator (AIP-9): …" error prefix) run
+ * uniformly with every other AIP defineX. Spec-9-specific checks live
+ * in `validate(def)`; defaulting + nested freezing in `build(def)`.
+ *
+ * Cross-field invariants enforced:
+ *   - persona_summary 1–280 chars (the LLM-facing one-liner)
+ *   - profile.role / profile.voice 1–1000 chars
+ *   - version matches semver (with optional prerelease/build)
+ *   - governance.audit_log shape `audit:<slug>`
+ *   - governance.policies entries shape `policy:<slug>`
+ *   - memory.kind === "external" requires memory.external.uri
+ *   - governance.autonomy === "gated" forces participation.mode in
+ *     {mention-only, silent} (matches the schema's allOf/if/then)
+ */
+declare const defineOperator: (def: OperatorDefinition) => OperatorHandle;
+
+/**
+ * @agentproto/operator — AIP-9 OPERATOR.md `defineOperator` reference impl.
+ *
+ * A single canonical operator shell — pluggable profile, skills, tools,
+ * memory, governance — that any agent runtime can implement and any
+ * conforming workflow can dispatch to.
+ *
+ * Spec: https://agentproto.sh/docs/aip-9
+ *
+ * Authoring paths:
+ *   - TS:  `defineOperator({...})` → `OperatorHandle`
+ *   - MD:  `parseOperatorManifest(src) → operatorFromManifest({...})` → `OperatorHandle`
+ */
+declare const SPEC_NAME: "agentoperator/v1";
+declare const SPEC_VERSION: "1.0.0-alpha";
+
+export { OperatorDefinition, OperatorHandle, SPEC_NAME, SPEC_VERSION, defineOperator };

package/dist/index.mjs

@@ -0,0 +1,14 @@
+export { defineOperator } from './chunk-HILBXS2I.mjs';
+
+/**
+ * @agentproto/operator v0.1.0-alpha
+ * AIP-9 OPERATOR.md `defineOperator` reference implementation.
+ */
+
+// src/index.ts
+var SPEC_NAME = "agentoperator/v1";
+var SPEC_VERSION = "1.0.0-alpha";
+
+export { SPEC_NAME, SPEC_VERSION };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;AAcO,IAAM,SAAA,GAAY;AAClB,IAAM,YAAA,GAAe","file":"index.mjs","sourcesContent":["/**\n * @agentproto/operator — AIP-9 OPERATOR.md `defineOperator` reference impl.\n *\n * A single canonical operator shell — pluggable profile, skills, tools,\n * memory, governance — that any agent runtime can implement and any\n * conforming workflow can dispatch to.\n *\n * Spec: https://agentproto.sh/docs/aip-9\n *\n * Authoring paths:\n *   - TS:  `defineOperator({...})` → `OperatorHandle`\n *   - MD:  `parseOperatorManifest(src) → operatorFromManifest({...})` → `OperatorHandle`\n */\n\nexport const SPEC_NAME = \"agentoperator/v1\" as const\nexport const SPEC_VERSION = \"1.0.0-alpha\" as const\n\nexport { defineOperator } from \"./define-operator.js\"\nexport type {\n  Autonomy,\n  MemoryKind,\n  MemoryPolicy,\n  OperatorDefinition,\n  OperatorGovernance,\n  OperatorHandle,\n  OperatorMemory,\n  OperatorParticipation,\n  OperatorProfile,\n  ParticipationMode,\n  SkillRef,\n  ToolRef,\n} from \"./types.js\"\n"]}

package/dist/manifest/index.d.ts

@@ -0,0 +1,114 @@
+import { z } from 'zod';
+import { a as OperatorHandle } from '../types-BxJvLb8Z.js';
+
+/**
+ * AIP-9 OPERATOR.md sidecar parser + manifest-to-handle constructor.
+ *
+ * Mirror of `@agentproto/tool/manifest`, `@agentproto/driver/manifest`,
+ * and `@agentproto/governance/policy`: the .md provides metadata; the
+ * TS module routes it through `defineOperator` so AIP-9 invariants
+ * (cross-field rules, ref shapes, length caps) run uniformly with the
+ * TS authoring path.
+ *
+ * The frontmatter schema mirrors `OPERATOR.schema.json`
+ * (resources/aip-9/draft/) field-for-field. AIP-9 forbids
+ * `additionalProperties` at every nested level, so we use plain
+ * `.object({...})` (strict) — extra keys raise a helpful error
+ * instead of silently surviving.
+ */
+
+declare const operatorManifestFrontmatterSchema: z.ZodObject<{
+    schema: z.ZodOptional<z.ZodLiteral<"agentoperator/v1">>;
+    name: z.ZodString;
+    id: z.ZodString;
+    persona_summary: z.ZodString;
+    version: z.ZodString;
+    entry: z.ZodOptional<z.ZodString>;
+    profile: z.ZodObject<{
+        role: z.ZodString;
+        voice: z.ZodString;
+        boundaries: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>;
+    skills: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        source: z.ZodOptional<z.ZodString>;
+        version: z.ZodOptional<z.ZodString>;
+        allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>]>>>;
+    tools: z.ZodOptional<z.ZodArray<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        id: z.ZodString;
+        source: z.ZodOptional<z.ZodString>;
+        scope: z.ZodOptional<z.ZodObject<{
+            workspace: z.ZodOptional<z.ZodString>;
+            network: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            secrets: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>, z.ZodObject<{
+        kind: z.ZodLiteral<"mcp">;
+        server: z.ZodString;
+        allow: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>]>>>;
+    memory: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            none: "none";
+            thread: "thread";
+            "operator-context": "operator-context";
+            external: "external";
+        }>;
+        policy: z.ZodOptional<z.ZodEnum<{
+            "append-only": "append-only";
+            redactable: "redactable";
+            summarising: "summarising";
+        }>>;
+        share_with: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        external: z.ZodOptional<z.ZodObject<{
+            uri: z.ZodString;
+            namespace: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    governance: z.ZodOptional<z.ZodObject<{
+        policies: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        audit_log: z.ZodString;
+        autonomy: z.ZodEnum<{
+            autonomous: "autonomous";
+            supervised: "supervised";
+            gated: "gated";
+        }>;
+    }, z.core.$strip>>;
+    capabilities: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    participation: z.ZodOptional<z.ZodObject<{
+        mode: z.ZodOptional<z.ZodEnum<{
+            "mention-only": "mention-only";
+            proactive: "proactive";
+            silent: "silent";
+        }>>;
+        pass_when: z.ZodOptional<z.ZodString>;
+        reactions: z.ZodOptional<z.ZodBoolean>;
+    }, z.core.$strip>>;
+    runtime: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            "in-process": "in-process";
+            "agent-cli": "agent-cli";
+        }>;
+        ref: z.ZodOptional<z.ZodString>;
+        session: z.ZodOptional<z.ZodObject<{
+            mode: z.ZodOptional<z.ZodEnum<{
+                ephemeral: "ephemeral";
+                persistent: "persistent";
+                resumable: "resumable";
+            }>>;
+            idle_timeout_ms: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+type OperatorManifestFrontmatter = z.infer<typeof operatorManifestFrontmatterSchema>;
+interface OperatorManifest {
+    frontmatter: OperatorManifestFrontmatter;
+    body: string;
+}
+declare function parseOperatorManifest(source: string): OperatorManifest;
+declare function operatorFromManifest(manifest: OperatorManifest): OperatorHandle;
+
+export { type OperatorManifest, type OperatorManifestFrontmatter, operatorFromManifest, operatorManifestFrontmatterSchema, parseOperatorManifest };

package/dist/manifest/index.mjs

@@ -0,0 +1,113 @@
+import { defineOperator } from '../chunk-HILBXS2I.mjs';
+import matter from 'gray-matter';
+import { z } from 'zod';
+
+/**
+ * @agentproto/operator v0.1.0-alpha
+ * AIP-9 OPERATOR.md `defineOperator` reference implementation.
+ */
+var skillRefSchema = z.union([
+  z.string().regex(/^[a-z][a-z0-9-]*[a-z0-9]$/),
+  z.object({
+    id: z.string().regex(/^[a-z][a-z0-9-]*[a-z0-9]$/),
+    source: z.string().optional(),
+    version: z.string().optional(),
+    allow: z.array(z.string()).optional()
+  })
+]);
+var toolRefSchema = z.union([
+  z.string().regex(/^[a-z][a-z0-9-]*[a-z0-9]$/),
+  z.object({
+    id: z.string(),
+    source: z.string().optional(),
+    scope: z.object({
+      workspace: z.string().optional(),
+      network: z.array(z.string()).optional(),
+      secrets: z.array(z.string()).optional()
+    }).optional()
+  }),
+  z.object({
+    kind: z.literal("mcp"),
+    server: z.string(),
+    allow: z.array(z.string()).optional()
+  })
+]);
+var operatorManifestFrontmatterSchema = z.object({
+  schema: z.literal("agentoperator/v1").optional(),
+  name: z.string().min(1).max(80),
+  id: z.string().min(2).max(64).regex(/^[a-z][a-z0-9-]*[a-z0-9]$/),
+  persona_summary: z.string().min(1).max(280),
+  version: z.string().regex(/^\d+\.\d+\.\d+(?:[-+][a-zA-Z0-9.-]+)?$/),
+  entry: z.string().optional(),
+  profile: z.object({
+    role: z.string().min(1).max(1e3),
+    voice: z.string().min(1).max(1e3),
+    boundaries: z.array(z.string().max(500))
+  }),
+  skills: z.array(skillRefSchema).optional(),
+  tools: z.array(toolRefSchema).optional(),
+  memory: z.object({
+    kind: z.enum(["none", "thread", "operator-context", "external"]),
+    policy: z.enum(["append-only", "redactable", "summarising"]).optional(),
+    share_with: z.array(z.string().regex(/^[a-z][a-z0-9-]*[a-z0-9]$/)).optional(),
+    external: z.object({ uri: z.string(), namespace: z.string().optional() }).optional()
+  }).optional(),
+  governance: z.object({
+    policies: z.array(z.string().regex(/^policy:[A-Za-z0-9_./-]+$/)).optional(),
+    audit_log: z.string().regex(/^audit:[A-Za-z0-9_./-]+$/),
+    autonomy: z.enum(["autonomous", "supervised", "gated"])
+  }).optional(),
+  capabilities: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/)).optional(),
+  participation: z.object({
+    mode: z.enum(["mention-only", "proactive", "silent"]).optional(),
+    pass_when: z.string().optional(),
+    reactions: z.boolean().optional()
+  }).optional(),
+  runtime: z.object({
+    kind: z.enum(["in-process", "agent-cli"]),
+    ref: z.string().optional(),
+    session: z.object({
+      mode: z.enum(["ephemeral", "persistent", "resumable"]).optional(),
+      idle_timeout_ms: z.number().int().min(1e3).optional()
+    }).optional()
+  }).optional(),
+  tags: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/)).optional(),
+  metadata: z.record(z.string(), z.unknown()).optional()
+});
+function parseOperatorManifest(source) {
+  const parsed = matter(source);
+  if (Object.keys(parsed.data).length === 0) {
+    throw new Error("parseOperatorManifest: missing or empty frontmatter");
+  }
+  const result = operatorManifestFrontmatterSchema.safeParse(parsed.data);
+  if (!result.success) {
+    throw new Error(
+      `parseOperatorManifest: invalid frontmatter \u2014 ${result.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")}`
+    );
+  }
+  return { frontmatter: result.data, body: parsed.content };
+}
+function operatorFromManifest(manifest) {
+  const fm = manifest.frontmatter;
+  return defineOperator({
+    id: fm.id,
+    name: fm.name,
+    persona_summary: fm.persona_summary,
+    version: fm.version,
+    entry: fm.entry,
+    profile: fm.profile,
+    skills: fm.skills,
+    tools: fm.tools,
+    memory: fm.memory,
+    governance: fm.governance,
+    capabilities: fm.capabilities,
+    participation: fm.participation,
+    runtime: fm.runtime,
+    tags: fm.tags,
+    metadata: fm.metadata
+  });
+}
+
+export { operatorFromManifest, operatorManifestFrontmatterSchema, parseOperatorManifest };
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/manifest/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/manifest/index.ts"],"names":[],"mappings":";;;;;;;;AAqBA,IAAM,cAAA,GAAiB,EAAE,KAAA,CAAM;AAAA,EAC7B,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,CAAM,2BAA2B,CAAA;AAAA,EAC5C,EAAE,MAAA,CAAO;AAAA,IACP,EAAA,EAAI,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,2BAA2B,CAAA;AAAA,IAChD,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC5B,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC7B,OAAO,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA;AAAS,GACrC;AACH,CAAC,CAAA;AAED,IAAM,aAAA,GAAgB,EAAE,KAAA,CAAM;AAAA,EAC5B,CAAA,CAAE,MAAA,EAAO,CAAE,KAAA,CAAM,2BAA2B,CAAA;AAAA,EAC5C,EAAE,MAAA,CAAO;AAAA,IACP,EAAA,EAAI,EAAE,MAAA,EAAO;AAAA,IACb,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC5B,KAAA,EAAO,EACJ,MAAA,CAAO;AAAA,MACN,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,MAC/B,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA,EAAS;AAAA,MACtC,SAAS,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA;AAAS,KACvC,EACA,QAAA;AAAS,GACb,CAAA;AAAA,EACD,EAAE,MAAA,CAAO;AAAA,IACP,IAAA,EAAM,CAAA,CAAE,OAAA,CAAQ,KAAK,CAAA;AAAA,IACrB,MAAA,EAAQ,EAAE,MAAA,EAAO;AAAA,IACjB,OAAO,CAAA,CAAE,KAAA,CAAM,EAAE,MAAA,EAAQ,EAAE,QAAA;AAAS,GACrC;AACH,CAAC,CAAA;AAEM,IAAM,iCAAA,GAAoC,EAAE,MAAA,CAAO;AAAA,EACxD,MAAA,EAAQ,CAAA,CAAE,OAAA,CAAQ,kBAAkB,EAAE,QAAA,EAAS;AAAA,EAC/C,IAAA,EAAM,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,EAAE,CAAA;AAAA,EAC9B,EAAA,EAAI,CAAA,CACD,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,CAAA,CACL,GAAA,CAAI,EAAE,CAAA,CACN,KAAA,CAAM,2BAA2B,CAAA;AAAA,EACpC,eAAA,EAAiB,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAG,CAAA;AAAA,EAC1C,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,wCAAwC,CAAA;AAAA,EAClE,KAAA,EAAO,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,EAC3B,OAAA,EAAS,EAAE,MAAA,CAAO;AAAA,IAChB,IAAA,EAAM,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAI,CAAA;AAAA,IAChC,KAAA,EAAO,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,GAAI,CAAA;AAAA,IACjC,UAAA,EAAY,EAAE,KAAA,CAAM,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,GAAG,CAAC;AAAA,GACxC,CAAA;AAAA,EACD,MAAA,EAAQ,CAAA,CAAE,KAAA,CAAM,cAAc,EAAE,QAAA,EAAS;AAAA,EACzC,KAAA,EAAO,CAAA,CAAE,KAAA,CAAM,aAAa,EAAE,QAAA,EAAS;AAAA,EACvC,MAAA,EAAQ,EACL,MAAA,CAAO;AAAA,IACN,IAAA,EAAM,EAAE,IAAA,CAAK,CAAC,QAAQ,QAAA,EAAU,kBAAA,EAAoB,UAAU,CAAC,CAAA;AAAA,IAC/D,MAAA,EAAQ,EAAE,IAAA,CAAK,CAAC,eAAe,YAAA,EAAc,aAAa,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IACtE,UAAA,EAAY,CAAA,CACT,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,KAAA,CAAM,2BAA2B,CAAC,CAAA,CACnD,QAAA,EAAS;AAAA,IACZ,UAAU,CAAA,CACP,MAAA,CAAO,EAAE,GAAA,EAAK,EAAE,MAAA,EAAO,EAAG,SAAA,EAAW,CAAA,CAAE,QAAO,CAAE,QAAA,EAAS,EAAG,EAC5D,QAAA;AAAS,GACb,EACA,QAAA,EAAS;AAAA,EACZ,UAAA,EAAY,EACT,MAAA,CAAO;AAAA,IACN,QAAA,EAAU,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,KAAA,CAAM,2BAA2B,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IAC1E,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,MAAM,0BAA0B,CAAA;AAAA,IACtD,UAAU,CAAA,CAAE,IAAA,CAAK,CAAC,YAAA,EAAc,YAAA,EAAc,OAAO,CAAC;AAAA,GACvD,EACA,QAAA,EAAS;AAAA,EACZ,YAAA,EAAc,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,KAAA,CAAM,mBAAmB,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EACtE,aAAA,EAAe,EACZ,MAAA,CAAO;AAAA,IACN,IAAA,EAAM,EAAE,IAAA,CAAK,CAAC,gBAAgB,WAAA,EAAa,QAAQ,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,IAC/D,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IAC/B,SAAA,EAAW,CAAA,CAAE,OAAA,EAAQ,CAAE,QAAA;AAAS,GACjC,EACA,QAAA,EAAS;AAAA,EACZ,OAAA,EAAS,EACN,MAAA,CAAO;AAAA,IACN,MAAM,CAAA,CAAE,IAAA,CAAK,CAAC,YAAA,EAAc,WAAW,CAAC,CAAA;AAAA,IACxC,GAAA,EAAK,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA,IACzB,OAAA,EAAS,EACN,MAAA,CAAO;AAAA,MACN,IAAA,EAAM,EAAE,IAAA,CAAK,CAAC,aAAa,YAAA,EAAc,WAAW,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,MAChE,eAAA,EAAiB,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,GAAA,CAAI,GAAI,CAAA,CAAE,QAAA;AAAS,KACtD,EACA,QAAA;AAAS,GACb,EACA,QAAA,EAAS;AAAA,EACZ,IAAA,EAAM,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,GAAS,KAAA,CAAM,mBAAmB,CAAC,CAAA,CAAE,QAAA,EAAS;AAAA,EAC9D,QAAA,EAAU,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,MAAA,IAAU,CAAA,CAAE,OAAA,EAAS,CAAA,CAAE,QAAA;AAC9C,CAAC;AAWM,SAAS,sBAAsB,MAAA,EAAkC;AACtE,EAAA,MAAM,MAAA,GAAS,OAAO,MAAM,CAAA;AAC5B,EAAA,IAAI,OAAO,IAAA,CAAK,MAAA,CAAO,IAAI,CAAA,CAAE,WAAW,CAAA,EAAG;AACzC,IAAA,MAAM,IAAI,MAAM,qDAAqD,CAAA;AAAA,EACvE;AACA,EAAA,MAAM,MAAA,GAAS,iCAAA,CAAkC,SAAA,CAAU,MAAA,CAAO,IAAI,CAAA;AACtE,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,kDAAA,EAAgD,OAAO,KAAA,CAAM,MAAA,CAC1D,IAAI,CAAC,CAAA,KAAM,GAAG,CAAA,CAAE,IAAA,CAAK,KAAK,GAAG,CAAC,KAAK,CAAA,CAAE,OAAO,EAAE,CAAA,CAC9C,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,KACf;AAAA,EACF;AACA,EAAA,OAAO,EAAE,WAAA,EAAa,MAAA,CAAO,IAAA,EAAM,IAAA,EAAM,OAAO,OAAA,EAAQ;AAC1D;AAEO,SAAS,qBAAqB,QAAA,EAA4C;AAC/E,EAAA,MAAM,KAAK,QAAA,CAAS,WAAA;AACpB,EAAA,OAAO,cAAA,CAAe;AAAA,IACpB,IAAI,EAAA,CAAG,EAAA;AAAA,IACP,MAAM,EAAA,CAAG,IAAA;AAAA,IACT,iBAAiB,EAAA,CAAG,eAAA;AAAA,IACpB,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,OAAO,EAAA,CAAG,KAAA;AAAA,IACV,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,QAAQ,EAAA,CAAG,MAAA;AAAA,IACX,OAAO,EAAA,CAAG,KAAA;AAAA,IACV,QAAQ,EAAA,CAAG,MAAA;AAAA,IACX,YAAY,EAAA,CAAG,UAAA;AAAA,IACf,cAAc,EAAA,CAAG,YAAA;AAAA,IACjB,eAAe,EAAA,CAAG,aAAA;AAAA,IAClB,SAAS,EAAA,CAAG,OAAA;AAAA,IACZ,MAAM,EAAA,CAAG,IAAA;AAAA,IACT,UAAU,EAAA,CAAG;AAAA,GACd,CAAA;AACH","file":"index.mjs","sourcesContent":["/**\n * AIP-9 OPERATOR.md sidecar parser + manifest-to-handle constructor.\n *\n * Mirror of `@agentproto/tool/manifest`, `@agentproto/driver/manifest`,\n * and `@agentproto/governance/policy`: the .md provides metadata; the\n * TS module routes it through `defineOperator` so AIP-9 invariants\n * (cross-field rules, ref shapes, length caps) run uniformly with the\n * TS authoring path.\n *\n * The frontmatter schema mirrors `OPERATOR.schema.json`\n * (resources/aip-9/draft/) field-for-field. AIP-9 forbids\n * `additionalProperties` at every nested level, so we use plain\n * `.object({...})` (strict) — extra keys raise a helpful error\n * instead of silently surviving.\n */\n\nimport matter from \"gray-matter\"\nimport { z } from \"zod\"\nimport { defineOperator } from \"../define-operator.js\"\nimport type { OperatorHandle } from \"../types.js\"\n\nconst skillRefSchema = z.union([\n  z.string().regex(/^[a-z][a-z0-9-]*[a-z0-9]$/),\n  z.object({\n    id: z.string().regex(/^[a-z][a-z0-9-]*[a-z0-9]$/),\n    source: z.string().optional(),\n    version: z.string().optional(),\n    allow: z.array(z.string()).optional(),\n  }),\n])\n\nconst toolRefSchema = z.union([\n  z.string().regex(/^[a-z][a-z0-9-]*[a-z0-9]$/),\n  z.object({\n    id: z.string(),\n    source: z.string().optional(),\n    scope: z\n      .object({\n        workspace: z.string().optional(),\n        network: z.array(z.string()).optional(),\n        secrets: z.array(z.string()).optional(),\n      })\n      .optional(),\n  }),\n  z.object({\n    kind: z.literal(\"mcp\"),\n    server: z.string(),\n    allow: z.array(z.string()).optional(),\n  }),\n])\n\nexport const operatorManifestFrontmatterSchema = z.object({\n  schema: z.literal(\"agentoperator/v1\").optional(),\n  name: z.string().min(1).max(80),\n  id: z\n    .string()\n    .min(2)\n    .max(64)\n    .regex(/^[a-z][a-z0-9-]*[a-z0-9]$/),\n  persona_summary: z.string().min(1).max(280),\n  version: z.string().regex(/^\\d+\\.\\d+\\.\\d+(?:[-+][a-zA-Z0-9.-]+)?$/),\n  entry: z.string().optional(),\n  profile: z.object({\n    role: z.string().min(1).max(1000),\n    voice: z.string().min(1).max(1000),\n    boundaries: z.array(z.string().max(500)),\n  }),\n  skills: z.array(skillRefSchema).optional(),\n  tools: z.array(toolRefSchema).optional(),\n  memory: z\n    .object({\n      kind: z.enum([\"none\", \"thread\", \"operator-context\", \"external\"]),\n      policy: z.enum([\"append-only\", \"redactable\", \"summarising\"]).optional(),\n      share_with: z\n        .array(z.string().regex(/^[a-z][a-z0-9-]*[a-z0-9]$/))\n        .optional(),\n      external: z\n        .object({ uri: z.string(), namespace: z.string().optional() })\n        .optional(),\n    })\n    .optional(),\n  governance: z\n    .object({\n      policies: z.array(z.string().regex(/^policy:[A-Za-z0-9_./-]+$/)).optional(),\n      audit_log: z.string().regex(/^audit:[A-Za-z0-9_./-]+$/),\n      autonomy: z.enum([\"autonomous\", \"supervised\", \"gated\"]),\n    })\n    .optional(),\n  capabilities: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/)).optional(),\n  participation: z\n    .object({\n      mode: z.enum([\"mention-only\", \"proactive\", \"silent\"]).optional(),\n      pass_when: z.string().optional(),\n      reactions: z.boolean().optional(),\n    })\n    .optional(),\n  runtime: z\n    .object({\n      kind: z.enum([\"in-process\", \"agent-cli\"]),\n      ref: z.string().optional(),\n      session: z\n        .object({\n          mode: z.enum([\"ephemeral\", \"persistent\", \"resumable\"]).optional(),\n          idle_timeout_ms: z.number().int().min(1000).optional(),\n        })\n        .optional(),\n    })\n    .optional(),\n  tags: z.array(z.string().regex(/^[a-z][a-z0-9-]*$/)).optional(),\n  metadata: z.record(z.string(), z.unknown()).optional(),\n})\n\nexport type OperatorManifestFrontmatter = z.infer<\n  typeof operatorManifestFrontmatterSchema\n>\n\nexport interface OperatorManifest {\n  frontmatter: OperatorManifestFrontmatter\n  body: string\n}\n\nexport function parseOperatorManifest(source: string): OperatorManifest {\n  const parsed = matter(source)\n  if (Object.keys(parsed.data).length === 0) {\n    throw new Error(\"parseOperatorManifest: missing or empty frontmatter\")\n  }\n  const result = operatorManifestFrontmatterSchema.safeParse(parsed.data)\n  if (!result.success) {\n    throw new Error(\n      `parseOperatorManifest: invalid frontmatter — ${result.error.issues\n        .map((i) => `${i.path.join(\".\")}: ${i.message}`)\n        .join(\"; \")}`,\n    )\n  }\n  return { frontmatter: result.data, body: parsed.content }\n}\n\nexport function operatorFromManifest(manifest: OperatorManifest): OperatorHandle {\n  const fm = manifest.frontmatter\n  return defineOperator({\n    id: fm.id,\n    name: fm.name,\n    persona_summary: fm.persona_summary,\n    version: fm.version,\n    entry: fm.entry,\n    profile: fm.profile,\n    skills: fm.skills,\n    tools: fm.tools,\n    memory: fm.memory,\n    governance: fm.governance,\n    capabilities: fm.capabilities,\n    participation: fm.participation,\n    runtime: fm.runtime,\n    tags: fm.tags,\n    metadata: fm.metadata,\n  })\n}\n"]}

package/dist/types-BxJvLb8Z.d.ts

@@ -0,0 +1,139 @@
+/**
+ * AIP-9 OperatorDefinition + OperatorHandle.
+ *
+ * Mirrors `OPERATOR.schema.json` (resources/aip-9/draft/) one-to-one.
+ * The .md frontmatter and the TS literal are interchangeable inputs
+ * to `defineOperator` — same fields, same constraints, same handle
+ * shape on the way out.
+ */
+/** AIP-3 skill reference. Plain id, or an object with optional source/version/allow. */
+type SkillRef = string | {
+    id: string;
+    source?: string;
+    version?: string;
+    allow?: readonly string[];
+};
+/**
+ * AIP-14 tool reference. Plain id, an explicit `{ id, source?, scope? }`,
+ * or an MCP-server binding `{ kind: "mcp", server, allow? }`.
+ */
+type ToolRef = string | {
+    id: string;
+    source?: string;
+    scope?: {
+        workspace?: string;
+        network?: readonly string[];
+        secrets?: readonly string[];
+    };
+} | {
+    kind: "mcp";
+    server: string;
+    allow?: readonly string[];
+};
+type MemoryKind = "none" | "thread" | "operator-context" | "external";
+type MemoryPolicy = "append-only" | "redactable" | "summarising";
+type Autonomy = "autonomous" | "supervised" | "gated";
+type ParticipationMode = "mention-only" | "proactive" | "silent";
+type OperatorRuntimeKind = "in-process" | "agent-cli";
+type OperatorRuntimeSessionMode = "ephemeral" | "persistent" | "resumable";
+interface OperatorRuntime {
+    /** Default `in-process`. */
+    kind: OperatorRuntimeKind;
+    /** AIP-45 AGENT-CLI ref. Required when kind=agent-cli. */
+    ref?: string;
+    /** Session policy when delegating to an agent CLI. */
+    session?: {
+        mode?: OperatorRuntimeSessionMode;
+        idle_timeout_ms?: number;
+    };
+}
+interface OperatorProfile {
+    /** Job title and primary responsibility. 1–1000 chars. */
+    role: string;
+    /** Tone, register, pronoun stance. 1–1000 chars. */
+    voice: string;
+    /** Imperative MUST-NOT rules. Surface in every system-prompt synthesis. */
+    boundaries: readonly string[];
+}
+interface OperatorMemory {
+    kind: MemoryKind;
+    /** Default `summarising` when memory section is present. */
+    policy?: MemoryPolicy;
+    /** Operator ids granted READ access to this operator's memory. */
+    share_with?: readonly string[];
+    /** Required when `kind === "external"`. */
+    external?: {
+        uri: string;
+        namespace?: string;
+    };
+}
+interface OperatorGovernance {
+    /** AIP-7 policy refs (`policy:<slug>`) consulted before privileged actions. */
+    policies?: readonly string[];
+    /** Audit channel (`audit:<slug>`) for state transitions, tool calls, memory writes. */
+    audit_log: string;
+    /** Per-turn autonomy class. */
+    autonomy: Autonomy;
+}
+interface OperatorParticipation {
+    /** Default `mention-only`. AIP-9 cross-field rule: autonomy=gated forces mention-only or silent. */
+    mode?: ParticipationMode;
+    /** Host-evaluated predicate; when true the operator emits a `pass` instead of a full turn. */
+    pass_when?: string;
+    /** Default `false`. */
+    reactions?: boolean;
+}
+interface OperatorDefinition {
+    /** Machine identifier and dispatch slug. Lowercase, digits, dashes. 2–64 chars. */
+    id: string;
+    /** Human-readable display name. 1–80 chars. */
+    name: string;
+    /** One-sentence role description, written for a teammate to read at a glance. 1–280 chars. */
+    persona_summary: string;
+    /** Spec version of THIS file. Bump on breaking change. */
+    version: string;
+    /** Relative path to the implementation file (e.g. `operator.ts`). */
+    entry?: string;
+    profile: OperatorProfile;
+    /** AIP-3 skill references. */
+    skills?: readonly SkillRef[];
+    /** AIP-14 tool refs and MCP server bindings the operator may invoke. */
+    tools?: readonly ToolRef[];
+    memory?: OperatorMemory;
+    governance?: OperatorGovernance;
+    /** Capability surface declared. Negotiated against runtime offer at registration. */
+    capabilities?: readonly string[];
+    participation?: OperatorParticipation;
+    /**
+     * Optional runtime binding. When omitted or `kind=in-process`, the
+     * host runs the operator's turn loop in-process. When `kind=agent-cli`,
+     * turns are dispatched to the spawned AIP-45 agent CLI (Hermes,
+     * Claude Code, …) referenced by `ref`.
+     */
+    runtime?: OperatorRuntime;
+    tags?: readonly string[];
+    metadata?: Record<string, unknown>;
+}
+interface OperatorHandle {
+    readonly id: string;
+    readonly name: string;
+    readonly persona_summary: string;
+    readonly version: string;
+    readonly entry?: string;
+    readonly profile: Readonly<{
+        role: string;
+        voice: string;
+        boundaries: readonly string[];
+    }>;
+    readonly skills: readonly SkillRef[];
+    readonly tools: readonly ToolRef[];
+    readonly memory?: Readonly<OperatorMemory>;
+    readonly governance?: Readonly<OperatorGovernance>;
+    readonly capabilities: readonly string[];
+    readonly participation?: Readonly<OperatorParticipation>;
+    readonly runtime?: Readonly<OperatorRuntime>;
+    readonly tags: readonly string[];
+    readonly metadata: Readonly<Record<string, unknown>>;
+}
+
+export type { Autonomy as A, MemoryKind as M, OperatorDefinition as O, ParticipationMode as P, SkillRef as S, ToolRef as T, OperatorHandle as a, MemoryPolicy as b, OperatorGovernance as c, OperatorMemory as d, OperatorParticipation as e, OperatorProfile as f };

package/package.json

@@ -0,0 +1,68 @@
+{
+  "name": "@agentproto/operator",
+  "version": "0.1.0-alpha.1",
+  "description": "@agentproto/operator — AIP-9 OPERATOR.md reference implementation. A single canonical operator shell — pluggable profile, skills, tools, memory, governance — that any agent runtime can implement and any conforming workflow can dispatch to.",
+  "keywords": [
+    "agentproto",
+    "aip-9",
+    "operator",
+    "defineOperator",
+    "open-standard",
+    "agentic"
+  ],
+  "homepage": "https://agentproto.sh/docs/aip-9",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/agentproto/ts",
+    "directory": "packages/operator"
+  },
+  "bugs": {
+    "url": "https://github.com/agentproto/ts/issues"
+  },
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.mjs",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    },
+    "./manifest": {
+      "types": "./dist/manifest/index.d.ts",
+      "import": "./dist/manifest/index.mjs",
+      "default": "./dist/manifest/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "gray-matter": "^4.0.3",
+    "zod": "^4.4.3",
+    "@agentproto/define-doctype": "0.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.2",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "@agentproto/tooling": "0.1.0-alpha.0"
+  },
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup",
+    "clean": "rm -rf dist",
+    "check-types": "tsc --noEmit",
+    "test": "vitest run --passWithNoTests",
+    "test:watch": "vitest"
+  }
+}