@agenttool/telescope 0.1.0

package/dist/types.d.ts

@@ -0,0 +1,131 @@
+import type { REPORT_SCHEMA } from "./constants.js";
+export interface TelescopeLimits {
+    timeout_ms: number;
+    max_response_bytes: number;
+    max_total_bytes: number;
+    max_redirects: number;
+    max_requests: number;
+    max_agent_txt_lines: number;
+    max_agent_txt_line_bytes: number;
+    max_json_depth: number;
+    max_json_nodes: number;
+}
+export type ObservationState = "present" | "not_found" | "restricted" | "invalid" | "unreachable" | "blocked" | "too_large" | "not_attempted";
+export type ProbeId = "agent_txt" | "pathways" | "love_discovery" | "a2a_card" | "mcp_card" | "love_index" | "love_sdk_manifest";
+export interface TelescopeSubject {
+    kind: "https_origin";
+    input: string;
+    origin: string;
+    hostname: string;
+}
+export interface NetworkBoundary {
+    mode: "public_https_read_only";
+    http_transport: "native_fetch" | "injected";
+    dns_resolver: "system_lookup" | "injected";
+    methods: readonly ["GET"];
+    credentials: "omitted";
+    redirects: "manual_revalidated";
+    dns_preflight: true;
+    connected_address_pinning: false;
+    ambient_proxy_isolation: false;
+    statement: string;
+}
+export interface SourceObservation {
+    id: ProbeId;
+    url: string;
+    url_redacted: boolean;
+    state: Exclude<ObservationState, "invalid" | "not_attempted">;
+    status_code: number | null;
+    final_url: string | null;
+    final_url_redacted: boolean;
+    redirect_chain: string[];
+    redirect_chain_redacted: boolean;
+    media_type: string | null;
+    bytes: number | null;
+    sha256: string | null;
+    error_code: string | null;
+}
+export type ClaimBasis = "publisher_assertion" | "transport_observation" | "local_derivation";
+export type ClaimRole = "locator" | "release_selection" | "content_commitment" | "capability_advertisement" | "authority_boundary";
+export interface TelescopeClaim {
+    key: string;
+    value: string | number | boolean | null | readonly string[];
+    basis: ClaimBasis;
+    role: ClaimRole;
+    taint: "remote_untrusted" | "local";
+    evidence_ids: ProbeId[];
+}
+export interface SurfaceObservation {
+    id: "agent_txt" | "pathways" | "love_packages" | "npm" | "mcp" | "a2a" | "webfinger" | "offer_bus";
+    state: ObservationState;
+    schema_conformance: "not_assessed" | "supported_shape_valid" | "invalid";
+    evidence_ids: ProbeId[];
+    claims: TelescopeClaim[];
+    boundary_codes: string[];
+    diagnostic_codes: string[];
+}
+export interface ExtensionObservation {
+    id: "dns_aid" | "pkarr" | string;
+    state: "not_configured" | "present" | "absent" | "invalid" | "error";
+    summary: string;
+    facts: Readonly<Record<string, string | number | boolean | null>>;
+}
+export interface ActionPlan {
+    id: "npm_install" | "love_download" | "love_verify" | "love_install";
+    kind: "npm_convenience" | "love_verified_install";
+    executable: string;
+    argv: string[];
+    display: string;
+    display_shell: "posix";
+    automatic: false;
+    requires_explicit_consent: true;
+    evidence_ids: ProbeId[];
+    boundary_codes: string[];
+}
+export interface TelescopeDiagnostic {
+    code: string;
+    level: "warning" | "error";
+    message: string;
+    evidence_id: ProbeId | null;
+}
+export interface TelescopeReport {
+    schema: typeof REPORT_SCHEMA;
+    tool: {
+        name: "@agenttool/telescope";
+        version: string;
+    };
+    subject: TelescopeSubject;
+    observed_at: string;
+    status: "discovered" | "partial" | "inconclusive";
+    network_boundary: NetworkBoundary;
+    effective_limits: TelescopeLimits;
+    sources: SourceObservation[];
+    surfaces: SurfaceObservation[];
+    actions: ActionPlan[];
+    extensions: ExtensionObservation[];
+    diagnostics: TelescopeDiagnostic[];
+}
+export interface AdapterContext {
+    subject: TelescopeSubject;
+    observed_at: string;
+    signal: AbortSignal;
+}
+export interface DiscoveryAdapter {
+    readonly id: string;
+    discover(context: AdapterContext): Promise<ExtensionObservation>;
+}
+export interface ResolveAddress {
+    address: string;
+    family: number;
+}
+export type ResolveHostname = (hostname: string) => Promise<readonly ResolveAddress[]>;
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+export interface TelescopeOptions {
+    fetch?: FetchLike;
+    resolve_hostname?: ResolveHostname;
+    clock?: () => Date;
+    limits?: Partial<TelescopeLimits>;
+    adapters?: readonly DiscoveryAdapter[];
+    signal?: AbortSignal;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEpD,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,wBAAwB,EAAE,MAAM,CAAC;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,MAAM,gBAAgB,GACxB,SAAS,GACT,WAAW,GACX,YAAY,GACZ,SAAS,GACT,aAAa,GACb,SAAS,GACT,WAAW,GACX,eAAe,CAAC;AAEpB,MAAM,MAAM,OAAO,GACf,WAAW,GACX,UAAU,GACV,gBAAgB,GAChB,UAAU,GACV,UAAU,GACV,YAAY,GACZ,mBAAmB,CAAC;AAExB,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,wBAAwB,CAAC;IAC/B,cAAc,EAAE,cAAc,GAAG,UAAU,CAAC;IAC5C,YAAY,EAAE,eAAe,GAAG,UAAU,CAAC;IAC3C,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1B,WAAW,EAAE,SAAS,CAAC;IACvB,SAAS,EAAE,oBAAoB,CAAC;IAChC,aAAa,EAAE,IAAI,CAAC;IACpB,yBAAyB,EAAE,KAAK,CAAC;IACjC,uBAAuB,EAAE,KAAK,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC,gBAAgB,EAAE,SAAS,GAAG,eAAe,CAAC,CAAC;IAC9D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,kBAAkB,EAAE,OAAO,CAAC;IAC5B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,uBAAuB,EAAE,OAAO,CAAC;IACjC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,MAAM,UAAU,GAClB,qBAAqB,GACrB,uBAAuB,GACvB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,SAAS,GACjB,SAAS,GACT,mBAAmB,GACnB,oBAAoB,GACpB,0BAA0B,GAC1B,oBAAoB,CAAC;AAEzB,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,MAAM,EAAE,CAAC;IAC5D,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC;IACpC,YAAY,EAAE,OAAO,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EACE,WAAW,GACX,UAAU,GACV,eAAe,GACf,KAAK,GACL,KAAK,GACL,KAAK,GACL,WAAW,GACX,WAAW,CAAC;IAChB,KAAK,EAAE,gBAAgB,CAAC;IACxB,kBAAkB,EAAE,cAAc,GAAG,uBAAuB,GAAG,SAAS,CAAC;IACzE,YAAY,EAAE,OAAO,EAAE,CAAC;IACxB,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IACjC,KAAK,EAAE,gBAAgB,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,CAAC;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC;CACnE;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,aAAa,GAAG,eAAe,GAAG,aAAa,GAAG,cAAc,CAAC;IACrE,IAAI,EAAE,iBAAiB,GAAG,uBAAuB,CAAC;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,SAAS,EAAE,KAAK,CAAC;IACjB,yBAAyB,EAAE,IAAI,CAAC;IAChC,YAAY,EAAE,OAAO,EAAE,CAAC;IACxB,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,OAAO,aAAa,CAAC;IAC7B,IAAI,EAAE;QACJ,IAAI,EAAE,sBAAsB,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,OAAO,EAAE,gBAAgB,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,YAAY,GAAG,SAAS,GAAG,cAAc,CAAC;IAClD,gBAAgB,EAAE,eAAe,CAAC;IAClC,gBAAgB,EAAE,eAAe,CAAC;IAClC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,UAAU,EAAE,oBAAoB,EAAE,CAAC;IACnC,WAAW,EAAE,mBAAmB,EAAE,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;CAClE;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,eAAe,GAAG,CAC5B,QAAQ,EAAE,MAAM,KACb,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC;AAExC,MAAM,MAAM,SAAS,GAAG,CACtB,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,gBAAgB,CAAC,EAAE,eAAe,CAAC;IACnC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IACnB,MAAM,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAClC,QAAQ,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACvC,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB"}

package/dist/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/dist/verify.d.ts

@@ -0,0 +1,12 @@
+export interface ArtifactExpectation {
+    size: number;
+    sha256: string;
+}
+export interface VerificationResult {
+    ok: boolean;
+    expected: ArtifactExpectation;
+    actual: ArtifactExpectation;
+}
+export declare function verifyArtifact(bytes: Uint8Array, expected: ArtifactExpectation): VerificationResult;
+export declare function verifyArtifactFile(path: string, expected: ArtifactExpectation): Promise<VerificationResult>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,MAAM,EAAE,mBAAmB,CAAC;CAC7B;AAYD,wBAAgB,cAAc,CAC5B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,mBAAmB,GAC5B,kBAAkB,CAWpB;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,mBAAmB,GAC5B,OAAO,CAAC,kBAAkB,CAAC,CAe7B"}

package/dist/verify.js

@@ -0,0 +1,38 @@
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+function assertExpectation(expected) {
+    if (!Number.isSafeInteger(expected.size) ||
+        expected.size < 0 ||
+        !/^[0-9a-f]{64}$/.test(expected.sha256)) {
+        throw new TypeError("Expected size and lowercase SHA-256 must be valid.");
+    }
+}
+export function verifyArtifact(bytes, expected) {
+    assertExpectation(expected);
+    const actual = {
+        size: bytes.byteLength,
+        sha256: createHash("sha256").update(bytes).digest("hex"),
+    };
+    return {
+        ok: actual.size === expected.size && actual.sha256 === expected.sha256,
+        expected,
+        actual,
+    };
+}
+export async function verifyArtifactFile(path, expected) {
+    assertExpectation(expected);
+    let size = 0;
+    const hash = createHash("sha256");
+    for await (const chunk of createReadStream(path)) {
+        const bytes = chunk;
+        size += bytes.byteLength;
+        hash.update(bytes);
+    }
+    const actual = { size, sha256: hash.digest("hex") };
+    return {
+        ok: actual.size === expected.size && actual.sha256 === expected.sha256,
+        expected,
+        actual,
+    };
+}
+//# sourceMappingURL=verify.js.map

package/dist/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../src/verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAa3C,SAAS,iBAAiB,CAAC,QAA6B;IACtD,IACE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC;QACpC,QAAQ,CAAC,IAAI,GAAG,CAAC;QACjB,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,oDAAoD,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,KAAiB,EACjB,QAA6B;IAE7B,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,KAAK,CAAC,UAAU;QACtB,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;KACzD,CAAC;IACF,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACtE,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,QAA6B;IAE7B,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,KAAe,CAAC;QAC9B,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC;QACzB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;IACpD,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QACtE,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC"}

package/package.json

@@ -0,0 +1,65 @@
+{
+  "name": "@agenttool/telescope",
+  "version": "0.1.0",
+  "description": "Read-only evidence mapper for agent discovery surfaces",
+  "license": "Apache-2.0",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./report.schema.json": {
+      "default": "./schema/agenttool-telescope-report-v0.1.schema.json"
+    }
+  },
+  "bin": {
+    "agenttool-telescope": "dist/cli.js"
+  },
+  "files": [
+    "dist",
+    "schema",
+    "README.md",
+    "CLAUDE.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=20.19.0",
+    "bun": ">=1.3.5"
+  },
+  "scripts": {
+    "clean": "node --eval \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
+    "build": "bun run clean && tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "bun test",
+    "ci": "bun run typecheck && bun test && bun run build",
+    "prepack": "bun run ci"
+  },
+  "devDependencies": {
+    "@types/bun": "^1.2.0",
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
+    "typescript": "^5.7.0"
+  },
+  "keywords": [
+    "agents",
+    "discovery",
+    "mcp",
+    "a2a",
+    "love-protocol",
+    "agent.txt",
+    "evidence"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/cambridgetcg/agenttool.git",
+    "directory": "packages/telescope"
+  },
+  "homepage": "https://docs.agenttool.dev/packages"
+}

package/schema/agenttool-telescope-report-v0.1.schema.json

@@ -0,0 +1,404 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "urn:agenttool:telescope:report:v0.1",
+  "title": "AgentTool Telescope report v0.1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "tool",
+    "subject",
+    "observed_at",
+    "status",
+    "network_boundary",
+    "effective_limits",
+    "sources",
+    "surfaces",
+    "actions",
+    "extensions",
+    "diagnostics"
+  ],
+  "properties": {
+    "schema": { "const": "agenttool-telescope/v0.1" },
+    "tool": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "version"],
+      "properties": {
+        "name": { "const": "@agenttool/telescope" },
+        "version": { "type": "string", "minLength": 1, "maxLength": 128 }
+      }
+    },
+    "subject": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "input", "origin", "hostname"],
+      "properties": {
+        "kind": { "const": "https_origin" },
+        "input": { "type": "string", "minLength": 1, "maxLength": 2048 },
+        "origin": { "type": "string", "format": "uri", "pattern": "^https://" },
+        "hostname": { "type": "string", "minLength": 1, "maxLength": 253 }
+      }
+    },
+    "observed_at": { "type": "string", "format": "date-time" },
+    "status": { "enum": ["discovered", "partial", "inconclusive"] },
+    "network_boundary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "mode",
+        "http_transport",
+        "dns_resolver",
+        "methods",
+        "credentials",
+        "redirects",
+        "dns_preflight",
+        "connected_address_pinning",
+        "ambient_proxy_isolation",
+        "statement"
+      ],
+      "properties": {
+        "mode": { "const": "public_https_read_only" },
+        "http_transport": { "enum": ["native_fetch", "injected"] },
+        "dns_resolver": { "enum": ["system_lookup", "injected"] },
+        "methods": {
+          "type": "array",
+          "prefixItems": [{ "const": "GET" }],
+          "minItems": 1,
+          "maxItems": 1
+        },
+        "credentials": { "const": "omitted" },
+        "redirects": { "const": "manual_revalidated" },
+        "dns_preflight": { "const": true },
+        "connected_address_pinning": { "const": false },
+        "ambient_proxy_isolation": { "const": false },
+        "statement": { "type": "string", "minLength": 1, "maxLength": 2048 }
+      }
+    },
+    "effective_limits": { "$ref": "#/$defs/limits" },
+    "sources": {
+      "type": "array",
+      "maxItems": 12,
+      "items": { "$ref": "#/$defs/source" }
+    },
+    "surfaces": {
+      "type": "array",
+      "maxItems": 16,
+      "items": { "$ref": "#/$defs/surface" }
+    },
+    "actions": {
+      "type": "array",
+      "maxItems": 16,
+      "items": { "$ref": "#/$defs/action" }
+    },
+    "extensions": {
+      "type": "array",
+      "maxItems": 32,
+      "items": { "$ref": "#/$defs/extension" }
+    },
+    "diagnostics": {
+      "type": "array",
+      "maxItems": 128,
+      "items": { "$ref": "#/$defs/diagnostic" }
+    }
+  },
+  "$defs": {
+    "probe_id": {
+      "enum": [
+        "agent_txt",
+        "pathways",
+        "love_discovery",
+        "a2a_card",
+        "mcp_card",
+        "love_index",
+        "love_sdk_manifest"
+      ]
+    },
+    "state": {
+      "enum": [
+        "present",
+        "not_found",
+        "restricted",
+        "invalid",
+        "unreachable",
+        "blocked",
+        "too_large",
+        "not_attempted"
+      ]
+    },
+    "limits": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "timeout_ms",
+        "max_response_bytes",
+        "max_total_bytes",
+        "max_redirects",
+        "max_requests",
+        "max_agent_txt_lines",
+        "max_agent_txt_line_bytes",
+        "max_json_depth",
+        "max_json_nodes"
+      ],
+      "properties": {
+        "timeout_ms": { "type": "integer", "minimum": 100 },
+        "max_response_bytes": { "type": "integer", "minimum": 1024 },
+        "max_total_bytes": { "type": "integer", "minimum": 1024 },
+        "max_redirects": { "type": "integer", "minimum": 0 },
+        "max_requests": { "type": "integer", "minimum": 4 },
+        "max_agent_txt_lines": { "type": "integer", "minimum": 16 },
+        "max_agent_txt_line_bytes": { "type": "integer", "minimum": 256 },
+        "max_json_depth": { "type": "integer", "minimum": 4 },
+        "max_json_nodes": { "type": "integer", "minimum": 100 }
+      }
+    },
+    "source": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "url",
+        "url_redacted",
+        "state",
+        "status_code",
+        "final_url",
+        "final_url_redacted",
+        "redirect_chain",
+        "redirect_chain_redacted",
+        "media_type",
+        "bytes",
+        "sha256",
+        "error_code"
+      ],
+      "properties": {
+        "id": { "$ref": "#/$defs/probe_id" },
+        "url": { "type": "string", "minLength": 1, "maxLength": 2048 },
+        "url_redacted": { "type": "boolean" },
+        "state": {
+          "enum": [
+            "present",
+            "not_found",
+            "restricted",
+            "unreachable",
+            "blocked",
+            "too_large"
+          ]
+        },
+        "status_code": {
+          "oneOf": [
+            { "type": "integer", "minimum": 100, "maximum": 599 },
+            { "type": "null" }
+          ]
+        },
+        "final_url": {
+          "oneOf": [
+            { "type": "string", "format": "uri", "pattern": "^https://" },
+            { "type": "null" }
+          ]
+        },
+        "final_url_redacted": { "type": "boolean" },
+        "redirect_chain": {
+          "type": "array",
+          "maxItems": 8,
+          "items": { "type": "string", "format": "uri", "pattern": "^https://" }
+        },
+        "redirect_chain_redacted": { "type": "boolean" },
+        "media_type": {
+          "oneOf": [{ "type": "string", "maxLength": 256 }, { "type": "null" }]
+        },
+        "bytes": {
+          "oneOf": [{ "type": "integer", "minimum": 0 }, { "type": "null" }]
+        },
+        "sha256": {
+          "oneOf": [
+            { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+            { "type": "null" }
+          ]
+        },
+        "error_code": {
+          "oneOf": [{ "type": "string", "maxLength": 128 }, { "type": "null" }]
+        }
+      }
+    },
+    "claim_value": {
+      "oneOf": [
+        { "type": "string", "maxLength": 4096 },
+        { "type": "number" },
+        { "type": "boolean" },
+        { "type": "null" },
+        {
+          "type": "array",
+          "maxItems": 128,
+          "items": { "type": "string", "maxLength": 2048 }
+        }
+      ]
+    },
+    "claim": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["key", "value", "basis", "role", "taint", "evidence_ids"],
+      "properties": {
+        "key": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "value": { "$ref": "#/$defs/claim_value" },
+        "basis": {
+          "enum": [
+            "publisher_assertion",
+            "transport_observation",
+            "local_derivation"
+          ]
+        },
+        "role": {
+          "enum": [
+            "locator",
+            "release_selection",
+            "content_commitment",
+            "capability_advertisement",
+            "authority_boundary"
+          ]
+        },
+        "taint": { "enum": ["remote_untrusted", "local"] },
+        "evidence_ids": {
+          "type": "array",
+          "maxItems": 8,
+          "items": { "$ref": "#/$defs/probe_id" }
+        }
+      }
+    },
+    "surface": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "state",
+        "schema_conformance",
+        "evidence_ids",
+        "claims",
+        "boundary_codes",
+        "diagnostic_codes"
+      ],
+      "properties": {
+        "id": {
+          "enum": [
+            "agent_txt",
+            "pathways",
+            "love_packages",
+            "npm",
+            "mcp",
+            "a2a",
+            "webfinger",
+            "offer_bus"
+          ]
+        },
+        "state": { "$ref": "#/$defs/state" },
+        "schema_conformance": {
+          "enum": ["not_assessed", "supported_shape_valid", "invalid"]
+        },
+        "evidence_ids": {
+          "type": "array",
+          "maxItems": 8,
+          "items": { "$ref": "#/$defs/probe_id" }
+        },
+        "claims": {
+          "type": "array",
+          "maxItems": 64,
+          "items": { "$ref": "#/$defs/claim" }
+        },
+        "boundary_codes": {
+          "type": "array",
+          "maxItems": 32,
+          "items": { "type": "string", "minLength": 1, "maxLength": 128 }
+        },
+        "diagnostic_codes": {
+          "type": "array",
+          "maxItems": 32,
+          "items": { "type": "string", "minLength": 1, "maxLength": 128 }
+        }
+      }
+    },
+    "action": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "kind",
+        "executable",
+        "argv",
+        "display",
+        "display_shell",
+        "automatic",
+        "requires_explicit_consent",
+        "evidence_ids",
+        "boundary_codes"
+      ],
+      "properties": {
+        "id": {
+          "enum": [
+            "npm_install",
+            "love_download",
+            "love_verify",
+            "love_install"
+          ]
+        },
+        "kind": { "enum": ["npm_convenience", "love_verified_install"] },
+        "executable": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "argv": {
+          "type": "array",
+          "maxItems": 32,
+          "items": { "type": "string", "maxLength": 8192 }
+        },
+        "display": { "type": "string", "minLength": 1, "maxLength": 32768 },
+        "display_shell": { "const": "posix" },
+        "automatic": { "const": false },
+        "requires_explicit_consent": { "const": true },
+        "evidence_ids": {
+          "type": "array",
+          "maxItems": 8,
+          "items": { "$ref": "#/$defs/probe_id" }
+        },
+        "boundary_codes": {
+          "type": "array",
+          "maxItems": 32,
+          "items": { "type": "string", "minLength": 1, "maxLength": 128 }
+        }
+      }
+    },
+    "extension": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "state", "summary", "facts"],
+      "properties": {
+        "id": { "type": "string", "pattern": "^[a-z][a-z0-9_-]{0,63}$" },
+        "state": {
+          "enum": ["not_configured", "present", "absent", "invalid", "error"]
+        },
+        "summary": { "type": "string", "maxLength": 4096 },
+        "facts": {
+          "type": "object",
+          "maxProperties": 128,
+          "propertyNames": { "minLength": 1, "maxLength": 128 },
+          "additionalProperties": {
+            "oneOf": [
+              { "type": "string" },
+              { "type": "number" },
+              { "type": "boolean" },
+              { "type": "null" }
+            ]
+          }
+        }
+      }
+    },
+    "diagnostic": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "level", "message", "evidence_id"],
+      "properties": {
+        "code": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "level": { "enum": ["warning", "error"] },
+        "message": { "type": "string", "minLength": 1, "maxLength": 4096 },
+        "evidence_id": {
+          "oneOf": [{ "$ref": "#/$defs/probe_id" }, { "type": "null" }]
+        }
+      }
+    }
+  }
+}