@axiom-lattice/protocols 4.4.1 → 4.5.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@axiom-lattice/protocols",
-  "version": "4.4.1",
+  "version": "4.5.0",
   "description": "Unified protocol type definitions for Axiom Lattice framework",
   "main": "dist/index.js",
   "module": "dist/index.mjs",

package/src/TrustedRunContextProtocol.ts

@@ -41,6 +41,14 @@ export interface ProjectTaskTrustedRunContext {
    * naming any specific value (ADR-118).
    */
   source?: string;
+  /**
+   * Host-provided signal that this task's owner need not be an active roster bot.
+   *
+   * Optional; `true` when present, `undefined`/`false` is treated as absent. Core uses it to skip
+   * Project roster authorization for the run's caller and owner without interpreting why the host
+   * granted the exemption (ADR-118). The host stamps it only for the workspace general project.
+   */
+  rosterExempt?: boolean;
 }
 
 /** Host-authenticated metadata that cannot be supplied through public Agent APIs. */
@@ -66,13 +74,17 @@ export function parseTrustedRunContext(value: unknown): TrustedRunContext {
       "tenantId", "workspaceId", "projectId", "roomId", "membershipId",
       "assistantId", "taskId", "threadId", "inputMessageId",
     ] as const;
-    const projectTaskValues = snapshotExactRecord(contextValues.projectTask, requiredKeys, ["source"]);
+    const projectTaskValues = snapshotExactRecord(contextValues.projectTask, requiredKeys, ["source", "rosterExempt"]);
     const projectTaskHasSource = projectTaskValues !== undefined
       && Object.prototype.hasOwnProperty.call(projectTaskValues, "source");
+    const projectTaskHasRosterExempt = projectTaskValues !== undefined
+      && Object.prototype.hasOwnProperty.call(projectTaskValues, "rosterExempt");
     if (!projectTaskValues
       || requiredKeys.some((key) => typeof projectTaskValues[key] !== "string" || projectTaskValues[key].length === 0)
       || (projectTaskHasSource && projectTaskValues.source !== undefined
-        && (typeof projectTaskValues.source !== "string" || projectTaskValues.source.length === 0))) {
+        && (typeof projectTaskValues.source !== "string" || projectTaskValues.source.length === 0))
+      || (projectTaskHasRosterExempt && projectTaskValues.rosterExempt !== undefined
+        && typeof projectTaskValues.rosterExempt !== "boolean")) {
       throw new Error("Invalid trusted agent run context");
     }
     const parsedProjectTask: ProjectTaskTrustedRunContext = {
@@ -89,6 +101,9 @@ export function parseTrustedRunContext(value: unknown): TrustedRunContext {
     if (projectTaskHasSource && typeof projectTaskValues.source === "string") {
       parsedProjectTask.source = projectTaskValues.source;
     }
+    if (projectTaskHasRosterExempt && projectTaskValues.rosterExempt === true) {
+      parsedProjectTask.rosterExempt = true;
+    }
     return { projectTask: parsedProjectTask };
   }
   const projectRoomValue = contextValues?.projectRoom;

package/src/__tests__/TrustedRunContextProtocol.test.ts

@@ -182,6 +182,45 @@ describe("parseTrustedRunContext", () => {
     })).toThrow("Invalid trusted agent run context");
   });
 
+  it("round-trips an explicit project task roster exemption", () => {
+    const parsed = parseTrustedRunContext({
+      projectTask: { ...validProjectTask(), rosterExempt: true },
+    });
+
+    expect(parsed.projectTask?.rosterExempt).toBe(true);
+  });
+
+  it("leaves project task roster exemption undefined when absent", () => {
+    const parsed = parseTrustedRunContext({ projectTask: validProjectTask() });
+
+    expect(parsed.projectTask?.rosterExempt).toBeUndefined();
+    expect(Object.prototype.hasOwnProperty.call(parsed.projectTask, "rosterExempt")).toBe(false);
+  });
+
+  it("treats an explicit project task roster exemption of undefined as absent", () => {
+    const parsed = parseTrustedRunContext({
+      projectTask: { ...validProjectTask(), rosterExempt: undefined },
+    });
+
+    expect(parsed.projectTask?.rosterExempt).toBeUndefined();
+    expect(Object.prototype.hasOwnProperty.call(parsed.projectTask, "rosterExempt")).toBe(false);
+  });
+
+  it("drops an explicit project task roster exemption of false", () => {
+    const parsed = parseTrustedRunContext({
+      projectTask: { ...validProjectTask(), rosterExempt: false },
+    });
+
+    expect(parsed.projectTask?.rosterExempt).toBeUndefined();
+    expect(Object.prototype.hasOwnProperty.call(parsed.projectTask, "rosterExempt")).toBe(false);
+  });
+
+  it("rejects a non-boolean project task roster exemption", () => {
+    expect(() => parseTrustedRunContext({
+      projectTask: { ...validProjectTask(), rosterExempt: "yes" },
+    })).toThrow("Invalid trusted agent run context");
+  });
+
   it("round-trips an explicit project room provenance source", () => {
     const parsed = parseTrustedRunContext({
       projectRoom: { ...validProjectRoom(), source: "room_message" },