@chipschat/protocol 0.0.0-stage → 1.0.0

package/dist/src/visibility.js

@@ -0,0 +1,218 @@
+/**
+ * Who may see an event (phase-0-review finding 6).
+ *
+ * Reading the log and subscribing to it are both scoped by membership: a credential sees the
+ * spaces it belongs to, and nothing else. Before this, any credential in a workspace
+ * could read every space's events, including a direct space it was not in.
+ *
+ * The rule, in one place so the live path and the replay path cannot drift:
+ *
+ * - An event that belongs to a space is visible only to that space's members.
+ * - An event with no space — a workspace-wide thing — is visible to everyone in the
+ *   workspace. In Phase 1 nothing appends one in normal flow; the ones that arrive in M1.4 and
+ *   M3 (a policy change, a budget warning) will want per-recipient scoping, which is theirs to
+ *   add. What an agent said in no room (`message.held`, ADR 0087) has no space either, and is
+ *   its harness's alone: its words are for the room it joins next, not for the workspace.
+ * - A person asking for a copy of an agent (`agent.fork`, ADR 0087) is visible to the agent's
+ *   harness, which makes the copy for a room it is not in.
+ * - A person asking a harness for a new agent (`agent.asked`, ADR 0108) is visible to that
+ *   harness, which makes the agent for a room it is not in.
+ * - A harness's agent being made, renamed, archived, given a face or deleted (`agent.registered`,
+ *   `agent.updated`, `agent.deleted`) has no space either, and went to everybody: a guest in no room with the
+ *   agent, and every other harness, were sent its name and its harness's own key for it (agents
+ *   review, finding 3). It is its harness's to hear, and anybody's who is told every agent: an
+ *   owner or admin of the workspace. Since his call of 19 October 2026 (ADR 0034's addendum) that
+ *   is no longer every person who is not a guest: a member is told the agents in their rooms, as
+ *   a guest is. Whoever shares a room with the agent, and a person who owns its harness, are told
+ *   too, which the caller works out, since a room is not something an event with none can say.
+ * - The event that adds or removes a participant is always visible to that participant, so a
+ *   person can see themselves join a space they are not yet listed in.
+ * - The event that opens a space is visible to whoever opened it, who is its first
+ *   member (ADR 0018) but is not yet listed anywhere a live session has read — and to the
+ *   person it was opened *for*, since ADR 0024, because a harness opens a space for its owner
+ *   as it finds one and they would otherwise never be sent the event that names it — and to the
+ *   harness it was asked *of*, when a person opens a room for a harness to claim, which is how
+ *   the harness hears that there is one before it is added to it.
+ * - The event that opens a thread is visible to everyone in the space it grows in (M5.4): a
+ *   thread has no members of its own, and its events are theirs from then on.
+ * - An approval that names the viewer as somebody who may answer it is visible to them
+ *   wherever it is (M5.5): the lane's lead, handed a low-risk ask by policy, is not in the
+ *   specialist's room and would otherwise never be sent what it is to decide. Since ADR 0042 a
+ *   person named from elsewhere in the workspace is in the same position, and the decision and
+ *   its outcome name them too, so what they were sent is answered on their screen as well.
+ * - A message a person deleted for themselves, and their Undo (ADR 0167), are theirs alone,
+ *   though they belong to a room: nobody else in it, and no harness, is told that one person
+ *   stopped seeing a line. The one rule that takes something away from a room's members.
+ *
+ * The replay path builds a SQL predicate from the same member set (see the server's event store)
+ * plus the membership events naming the viewer. The join needs no special case — a viewer's set
+ * already lists every space they are in — but a removal is from a space they are no longer in,
+ * and a client resuming after it left a space elsewhere must still be told.
+ *
+ * It lives with the protocol so that the server and the conformance fake ask the same function:
+ * the fake's own copy had come to send what an agent said in no room to everybody (agents
+ * review, finding 37).
+ */
+/** The ids a viewer answers to: itself, and a harness's agents. */
+function idsOf(viewer) {
+    return [viewer.participantId, ...(viewer.alsoIs ?? [])];
+}
+/** The events that add a participant to a space or remove one. Always visible to that participant. */
+export const MEMBERSHIP_EVENTS = new Set([
+    "membership.added",
+    "membership.removed",
+    "membership.replaced",
+]);
+/**
+ * Where an agent is (ADR 0087): put in a room or taken out of one. The room is told, as of
+ * anything in it, and so is the agent's harness, which has left the room by the time its agent's
+ * release is written. Nobody else: a person reads an agent's room from the directory, and an
+ * event naming a room a client has never heard of would make it one.
+ */
+export const WHEREABOUTS_EVENTS = new Set([
+    "agent.attached",
+    "agent.released",
+]);
+/**
+ * A person asking for a copy of an agent in a room (ADR 0087, Fork). The room is told, as of
+ * anything in it, and so is the agent's harness, which makes the copy: the agent it names is in
+ * another room, so its harness is not a member of the room the copy is for.
+ */
+export const FORK_EVENTS = new Set(["agent.fork"]);
+/**
+ * A person asking a harness for a new agent in a room (ADR 0108). The room is told, as of anything
+ * in it, and so is the harness the event names, which makes the agent: no agent of its is there
+ * yet, and a harness is a member of no room itself.
+ */
+export const ASK_EVENTS = new Set(["agent.asked"]);
+/**
+ * What an agent said while in no room (ADR 0087, rule 6). It has no space, so the workspace-wide
+ * rule would send it to everyone — every person, guests too, and every other harness — before
+ * the room it is meant for hears it. Only the agent's own harness is told; a person reads how
+ * many wait from the directory (`held`).
+ */
+export const HELD_EVENTS = new Set(["message.held"]);
+/**
+ * A harness's agent made or changed (ADR 0087): who it is, what it is called, whether it is
+ * archived, the face it wears. No space, and not everybody's: see the rule above.
+ */
+export const DIRECTORY_EVENTS = new Set([
+    "agent.registered",
+    "agent.updated",
+    "agent.deleted",
+]);
+/**
+ * What came of a join request (ADR 0122): who asked, from where, and what a person let in. No
+ * space, and not everybody's: a harness and a guest are told nothing of who else is let in. A
+ * person who sees the whole directory is, as they see the harness appear in it.
+ */
+export const JOIN_EVENTS = new Set(["join.allowed", "join.denied"]);
+/**
+ * A person's face chosen (ADR 0139). No space, and a person's to see, not a harness's: a harness
+ * draws nobody, and one that does not know the event has no business being sent it. A person who
+ * sees the directory is told, as of a join; a guest reads it the next time it reads who is who.
+ */
+export const FACE_EVENTS = new Set(["person.face_set"]);
+/**
+ * An agent's changes locked or let go (ADR 0199). No space, and a person's to see, not a harness's,
+ * as a face is: the lock holds people's hands, and a harness is held by nothing it says. A person
+ * told every agent is told; anybody else reads it the next time they read who is who.
+ */
+export const LOCK_EVENTS = new Set(["agent.lock_set"]);
+/**
+ * A person deleting a message for themselves, and taking that back (ADR 0167). They belong to the
+ * room the message is in, and are sent only to the person who did them, on each of their devices.
+ */
+export const SELF_EVENTS = new Set(["message.hidden", "message.shown"]);
+/** Whether an event with no space is this viewer's: most are everybody's, and five kinds are not. */
+function seesRoomless(event, viewer) {
+    const agent = String(event.payload["agent_id"]);
+    if (HELD_EVENTS.has(event.type))
+        return idsOf(viewer).includes(agent);
+    if (JOIN_EVENTS.has(event.type) || FACE_EVENTS.has(event.type)) {
+        return viewer.seesDirectory === true;
+    }
+    if (LOCK_EVENTS.has(event.type))
+        return viewer.seesAgents === true;
+    if (!DIRECTORY_EVENTS.has(event.type))
+        return true;
+    return (viewer.seesAgents === true ||
+        idsOf(viewer).includes(agent) ||
+        event.payload["harness_id"] === viewer.participantId);
+}
+/**
+ * Whether a live event should be delivered to a viewer. For `DIRECTORY_EVENTS` a caller that
+ * gets `false` asks one thing more, which this cannot: whether the viewer shares a room with the
+ * agent the event is about, or is a person who owns its harness.
+ */
+export function canSee(event, viewer) {
+    if (SELF_EVENTS.has(event.type))
+        return event.actor.id === viewer.participantId;
+    const space = event.space_id;
+    if (space === null)
+        return seesRoomless(event, viewer);
+    if (viewer.memberSpaces.has(space))
+        return true;
+    const ids = idsOf(viewer);
+    if (MEMBERSHIP_EVENTS.has(event.type))
+        return ids.some((id) => namesViewer(event, id));
+    if (WHEREABOUTS_EVENTS.has(event.type) || FORK_EVENTS.has(event.type)) {
+        return ids.includes(String(event.payload["agent_id"]));
+    }
+    if (ASK_EVENTS.has(event.type))
+        return event.payload["harness_id"] === viewer.participantId;
+    return (opensFor(event, viewer.participantId) ||
+        opensThreadIn(event, viewer.memberSpaces) ||
+        ids.some((id) => namesApprover(event, id)));
+}
+/**
+ * The events that carry who may answer an approval, resolved to ids. The two decisions are
+ * here as well since ADR 0042: somebody named outside the room is sent the ask, so they are
+ * sent what came of it — otherwise the card on their phone would never cool.
+ */
+export const APPROVER_EVENTS = new Set([
+    "approval.request",
+    "approval.routed",
+    "approval.resolved",
+    "approval.executed",
+]);
+/** True when an approval names the viewer as somebody who may answer it (M5.5). */
+export function namesApprover(event, participantId) {
+    if (!APPROVER_EVENTS.has(event.type))
+        return false;
+    const approvers = event.payload["approvers"];
+    return Array.isArray(approvers) && approvers.includes(participantId);
+}
+/** True when this opens a thread in one of the viewer's spaces, which makes it theirs too (M5.4). */
+export function opensThreadIn(event, memberSpaces) {
+    if (event.type !== "space.created")
+        return false;
+    const parent = event.payload["parent_space_id"];
+    return typeof parent === "string" && memberSpaces.has(parent);
+}
+/**
+ * True when this is a space being opened for the viewer: by them, on their behalf, or for them
+ * to claim. A harness asked beside another from the + (`also_asked_of`) is asked as much as the
+ * first: it was sent nothing until its next `hello`, so it never learnt the room was asked of it,
+ * and the first words there went unanswered (agents review, finding 17).
+ */
+export function opensFor(event, participantId) {
+    if (event.type !== "space.created")
+        return false;
+    const also = event.payload["also_asked_of"];
+    return (event.actor.id === participantId ||
+        event.payload["opened_for"] === participantId ||
+        event.payload["asked_of"] === participantId ||
+        (Array.isArray(also) && also.includes(participantId)));
+}
+/**
+ * True when a membership event is about this viewer, so they see the moment they are added: the
+ * one added or removed, or either side of a replacement (ADR 0087).
+ */
+export function namesViewer(event, participantId) {
+    const { payload } = event;
+    return (payload["participant_id"] === participantId ||
+        (event.type === "membership.replaced" &&
+            (payload["to"] === participantId || payload["from"] === participantId)));
+}
+//# sourceMappingURL=visibility.js.map

package/dist/src/visibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"visibility.js","sourceRoot":"","sources":["../../src/visibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAgCH,mEAAmE;AACnE,SAAS,KAAK,CAAC,MAAc;IAC3B,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,sGAAsG;AACtG,MAAM,CAAC,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC;IAC5D,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;CACtB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC;IAC7D,gBAAgB;IAChB,gBAAgB;CACjB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AAExE;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;AAExE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAE1E;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IAC3D,kBAAkB;IAClB,eAAe;IACf,eAAe;CAChB,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC;AAEzF;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAE5E;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;AAE7F,qGAAqG;AACrG,SAAS,YAAY,CAAC,KAAgB,EAAE,MAAc;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAChD,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtE,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC;IACvC,CAAC;IACD,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,UAAU,KAAK,IAAI,CAAC;IACnE,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,CACL,MAAM,CAAC,UAAU,KAAK,IAAI;QAC1B,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC7B,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,aAAa,CACrD,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,MAAM,CAAC,KAAgB,EAAE,MAAc;IACrD,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,aAAa,CAAC;IAChF,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC7B,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;IACvF,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACtE,OAAO,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC;IACD,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,aAAa,CAAC;IAC5F,OAAO,CACL,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC;QACrC,aAAa,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,CAAC;QACzC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IAC1D,kBAAkB;IAClB,iBAAiB;IACjB,mBAAmB;IACnB,mBAAmB;CACpB,CAAC,CAAC;AAEH,mFAAmF;AACnF,MAAM,UAAU,aAAa,CAAC,KAAgB,EAAE,aAAqB;IACnE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;AACvE,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,aAAa,CAAC,KAAgB,EAAE,YAAiC;IAC/E,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChD,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAChE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAgB,EAAE,aAAqB;IAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5C,OAAO,CACL,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,aAAa;QAChC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,aAAa;QAC7C,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,aAAa;QAC3C,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CACtD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAgB,EAAE,aAAqB;IACjE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC1B,OAAO,CACL,OAAO,CAAC,gBAAgB,CAAC,KAAK,aAAa;QAC3C,CAAC,KAAK,CAAC,IAAI,KAAK,qBAAqB;YACnC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,aAAa,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC"}

package/fixtures/agent.asked.json

@@ -0,0 +1,15 @@
+{
+  "v": 1,
+  "type": "agent.asked",
+  "id": "evt_01K4ZQPX0000000000000000N1",
+  "ts": "2026-10-03T18:58:00.000Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "person",
+    "id": "usr_01K4ZQPX000000000000000003"
+  },
+  "harness_id": "hrn_01K4ZQPX000000000000000004",
+  "name": "Reviewer",
+  "by": "usr_01K4ZQPX000000000000000003"
+}

package/fixtures/agent.attached.json

@@ -0,0 +1,15 @@
+{
+  "v": 1,
+  "type": "agent.attached",
+  "id": "evt_01K4ZQPX0000000000000000G3",
+  "ts": "2026-09-30T09:06:00.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "actor": {
+    "kind": "person",
+    "id": "usr_01K4ZQPX000000000000000003"
+  },
+  "agent_id": "agt_01K4ZQPX0000000000000000A1",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "by": "usr_01K4ZQPX000000000000000003",
+  "moved_from": "spc_01K4ZQPX0000000000000000S7"
+}

package/fixtures/agent.deleted.json

@@ -0,0 +1,16 @@
+{
+  "v": 1,
+  "type": "agent.deleted",
+  "id": "evt_01K4ZQPX0000000000000000G6",
+  "ts": "2026-10-02T17:05:00.000Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "actor": {
+    "kind": "person",
+    "id": "usr_01K4ZQPX000000000000000003"
+  },
+  "agent_id": "agt_01K4ZQPX0000000000000000A1",
+  "harness_id": "hrn_01K4ZQPX000000000000000004",
+  "key": "space-kitchen",
+  "name": "Kitchen and bath",
+  "by": "usr_01K4ZQPX000000000000000003"
+}

package/fixtures/agent.fork.json

@@ -0,0 +1,14 @@
+{
+  "v": 1,
+  "type": "agent.fork",
+  "id": "evt_01K4ZQPX0000000000000000F1",
+  "ts": "2026-10-01T16:12:00.000Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "person",
+    "id": "usr_01K4ZQPX000000000000000003"
+  },
+  "agent_id": "agt_01K4ZQPX0000000000000000A1",
+  "by": "usr_01K4ZQPX000000000000000003"
+}

package/fixtures/agent.lock_set.json

@@ -0,0 +1,13 @@
+{
+  "v": 1,
+  "type": "agent.lock_set",
+  "id": "evt_01K4ZQPX0000000000000000Z7",
+  "ts": "2026-10-18T07:00:00.000Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "actor": {
+    "kind": "person",
+    "id": "usr_01K4ZQPX000000000000000003"
+  },
+  "agent_id": "agt_01K4ZQPX0000000000000000A1",
+  "locked": true
+}

package/fixtures/agent.registered.json

@@ -0,0 +1,17 @@
+{
+  "v": 1,
+  "type": "agent.registered",
+  "id": "evt_01K4ZQPX0000000000000000G1",
+  "ts": "2026-09-30T09:00:00.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "actor": {
+    "kind": "harness",
+    "id": "hrn_01K4ZQPX000000000000000004"
+  },
+  "idempotency_key": "agent-hrn_01K4ZQPX000000000000000004-e0d0f115",
+  "agent_id": "agt_01K4ZQPX0000000000000000A1",
+  "harness_id": "hrn_01K4ZQPX000000000000000004",
+  "key": "e0d0f115",
+  "name": "Kitchen remodel",
+  "lead": false
+}

package/fixtures/agent.released.json

@@ -0,0 +1,16 @@
+{
+  "v": 1,
+  "type": "agent.released",
+  "id": "evt_01K4ZQPX0000000000000000G4",
+  "ts": "2026-09-30T09:06:00.002Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "actor": {
+    "kind": "system",
+    "id": "system"
+  },
+  "agent_id": "agt_01K4ZQPX0000000000000000A1",
+  "space_id": "spc_01K4ZQPX0000000000000000S7",
+  "by": "usr_01K4ZQPX000000000000000003",
+  "reason": "moved",
+  "moved_to": "spc_01K4ZQPX000000000000000002"
+}

package/fixtures/agent.updated.json

@@ -0,0 +1,14 @@
+{
+  "v": 1,
+  "type": "agent.updated",
+  "id": "evt_01K4ZQPX0000000000000000G2",
+  "ts": "2026-09-30T09:05:00.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "actor": {
+    "kind": "harness",
+    "id": "hrn_01K4ZQPX000000000000000004"
+  },
+  "agent_id": "agt_01K4ZQPX0000000000000000A1",
+  "name": "Kitchen and bath",
+  "state": "active"
+}

package/fixtures/approval.executed.json

@@ -0,0 +1,16 @@
+{
+  "v": 1,
+  "type": "approval.executed",
+  "id": "evt_01K4ZQPX000000000000000070",
+  "ts": "2026-09-02T14:22:12.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "harness",
+    "id": "hrn_01K4ZQPX000000000000000004"
+  },
+  "run_id": "run_01K4ZQPX000000000000000005",
+  "approval_id": "apr_01K4ZQPX000000000000000006",
+  "outcome": "executed",
+  "detail": "Sent to dana@northwind.com at 14:31."
+}

package/fixtures/approval.request.json

@@ -0,0 +1,45 @@
+{
+  "v": 1,
+  "type": "approval.request",
+  "id": "evt_01K4ZQPX000000000000000068",
+  "ts": "2026-09-02T14:22:04.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "harness",
+    "id": "hrn_01K4ZQPX000000000000000004"
+  },
+  "run_id": "run_01K4ZQPX000000000000000005",
+  "approval_id": "apr_01K4ZQPX000000000000000006",
+  "step_id": "email-dana",
+  "action": {
+    "kind": "email.send",
+    "input": {
+      "to": "dana@northwind.com",
+      "subject": "PO #4471 confirmation"
+    },
+    "external": true,
+    "irreversible": true
+  },
+  "question": "Send this email to dana@northwind.com?",
+  "effect": "It confirms PO #4471 for 120 units, delivered 19 September.",
+  "lasts": "once",
+  "preview": {
+    "format": "markdown",
+    "title": "To dana@northwind.com",
+    "body": "Hi Dana, confirming PO #4471 for 120 units, delivery 19 September. Shout if anything looks off."
+  },
+  "risk": ["external_communication", "irreversible"],
+  "sources": [
+    {
+      "kind": "external",
+      "label": "vendor website",
+      "url": "https://northwind.example/contact"
+    }
+  ],
+  "expires_in": 3600,
+  "fallback": "deny",
+  "approvers": ["usr_01K4ZQPX000000000000000003"],
+  "editable": true,
+  "resume_token": "rt_9f2c7d0184a05c3b"
+}

package/fixtures/approval.resolved.json

@@ -0,0 +1,20 @@
+{
+  "v": 1,
+  "type": "approval.resolved",
+  "id": "evt_01K4ZQPX000000000000000076",
+  "ts": "2026-09-02T14:22:18.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "system",
+    "id": "system"
+  },
+  "run_id": "run_01K4ZQPX000000000000000005",
+  "approval_id": "apr_01K4ZQPX000000000000000006",
+  "decision": "approved",
+  "scope": "once",
+  "reason": "Looks right. Send it.",
+  "resolved_by": "usr_01K4ZQPX000000000000000003",
+  "resolved_at": "2026-09-02T14:30:12.881Z",
+  "resolved_elsewhere": false
+}

package/fixtures/approval.routed.json

@@ -0,0 +1,20 @@
+{
+  "v": 1,
+  "type": "approval.routed",
+  "id": "evt_01K4ZQPX0000000000000000D8",
+  "ts": "2026-09-06T12:04:00.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "run_id": "run_01K4ZQPX000000000000000005",
+  "actor": {
+    "kind": "person",
+    "id": "usr_01K4ZQPX000000000000000003"
+  },
+  "idempotency_key": "route-1",
+  "approval_id": "apr_01K4ZQPX000000000000000006",
+  "to": ["usr_01K4ZQPX000000000000000009"],
+  "approvers": ["usr_01K4ZQPX000000000000000009"],
+  "reason": "Dana knows the Northwind account.",
+  "routed_by": "usr_01K4ZQPX000000000000000003",
+  "routed_at": "2026-09-06T12:04:00.004Z"
+}

package/fixtures/artifact.create.json

@@ -0,0 +1,18 @@
+{
+  "v": 1,
+  "type": "artifact.create",
+  "id": "evt_01K4ZQPX00000000000000006A",
+  "ts": "2026-09-02T14:22:06.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "harness",
+    "id": "hrn_01K4ZQPX000000000000000004"
+  },
+  "run_id": "run_01K4ZQPX000000000000000005",
+  "artifact_id": "att_01K4ZQPX00000000000000000C",
+  "kind": "document",
+  "title": "Northwind confirmation, PO #4471",
+  "version": 1,
+  "body": "Hi Dana, confirming PO #4471 for 120 units, delivery 19 September."
+}

package/fixtures/attachment.fetched.json

@@ -0,0 +1,15 @@
+{
+  "v": 1,
+  "type": "attachment.fetched",
+  "id": "evt_01K4ZQPX0000000000000000CC",
+  "ts": "2026-09-02T14:22:16.504Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "harness",
+    "id": "hrn_01K4ZQPX000000000000000004"
+  },
+  "attachment_id": "att_01K4ZQPX000000000000000008",
+  "filename": "PO-4471.pdf",
+  "by": "hrn_01K4ZQPX000000000000000004"
+}

package/fixtures/attachment.limits_set.json

@@ -0,0 +1,15 @@
+{
+  "v": 1,
+  "type": "attachment.limits_set",
+  "id": "evt_01K4ZQPX0000000000000000E9",
+  "ts": "2026-09-10T09:05:00.000Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "actor": {
+    "kind": "person",
+    "id": "usr_01K4ZQPX000000000000000003"
+  },
+  "idempotency_key": "limits-1",
+  "image_bytes": 26214400,
+  "video_bytes": 104857600,
+  "file_bytes": null
+}

package/fixtures/budget.warning.json

@@ -0,0 +1,20 @@
+{
+  "v": 1,
+  "type": "budget.warning",
+  "id": "evt_01K4ZQPX00000000000000007D",
+  "ts": "2026-09-02T14:22:25.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "system",
+    "id": "system"
+  },
+  "budget": {
+    "limit_usd": 3,
+    "spent_usd": 2.41
+  },
+  "threshold": 80,
+  "action": "warn",
+  "scope": "job",
+  "since_seq": 14049
+}

package/fixtures/checkpoint.json

@@ -0,0 +1,16 @@
+{
+  "v": 1,
+  "type": "checkpoint",
+  "id": "evt_01K4ZQPX00000000000000006B",
+  "ts": "2026-09-02T14:22:07.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "harness",
+    "id": "hrn_01K4ZQPX000000000000000004"
+  },
+  "run_id": "run_01K4ZQPX000000000000000005",
+  "label": "PO read and the CRM record checked.",
+  "next": "Draft the confirmation email.",
+  "compacted": false
+}

package/fixtures/context.compacted.json

@@ -0,0 +1,16 @@
+{
+  "v": 1,
+  "type": "context.compacted",
+  "id": "evt_01K4ZQPX0000000000000000C7",
+  "ts": "2026-10-09T18:30:00.000Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "agent",
+    "id": "agt_01K4ZQPX0000000000000000A1"
+  },
+  "from": 214000,
+  "to": 21000,
+  "window": 272000,
+  "by": "itself"
+}

package/fixtures/context.usage.json

@@ -0,0 +1,17 @@
+{
+  "v": 1,
+  "type": "context.usage",
+  "id": "evt_01K4ZQPX00000000000000006F",
+  "ts": "2026-09-02T14:22:11.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "harness",
+    "id": "hrn_01K4ZQPX000000000000000004"
+  },
+  "run_id": "run_01K4ZQPX000000000000000005",
+  "used_tokens": 82000,
+  "limit_tokens": 200000,
+  "model": "opus-5",
+  "compacted": false
+}

package/fixtures/exchange.limits_set.json

@@ -0,0 +1,15 @@
+{
+  "v": 1,
+  "type": "exchange.limits_set",
+  "id": "evt_01K4ZQPX0000000000000000M1",
+  "ts": "2026-10-17T15:30:00.000Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "actor": {
+    "kind": "person",
+    "id": "usr_01K4ZQPX000000000000000003"
+  },
+  "idempotency_key": "exchange-limits-1",
+  "stop": 32,
+  "hold": null,
+  "circles": false
+}

package/fixtures/exchange.set.json

@@ -0,0 +1,13 @@
+{
+  "v": 1,
+  "type": "exchange.set",
+  "id": "evt_01K4ZQPX0000000000000000X1",
+  "ts": "2026-10-02T18:53:00.000Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "person",
+    "id": "usr_01K4ZQPX000000000000000003"
+  },
+  "state": "paused"
+}

package/fixtures/feedback.json

@@ -0,0 +1,21 @@
+{
+  "v": 1,
+  "type": "feedback",
+  "id": "evt_01K4ZQPX00000000000000007F",
+  "ts": "2026-09-02T14:22:27.004Z",
+  "workspace_id": "ws_01K4ZQPX000000000000000001",
+  "space_id": "spc_01K4ZQPX000000000000000002",
+  "actor": {
+    "kind": "person",
+    "id": "usr_01K4ZQPX000000000000000003"
+  },
+  "message_id": "msg_01K4ZQPX000000000000000067",
+  "kind": "correction",
+  "text": "The delivery date is the 19th, not the 12th.",
+  "from": {
+    "participant_id": "usr_01K4ZQPX000000000000000003",
+    "kind": "person",
+    "display_name": "Arjun",
+    "role": "owner"
+  }
+}

package/fixtures/frames/ack.json

@@ -0,0 +1,6 @@
+{
+  "frame": "ack",
+  "idempotency_key": "scout-run-5-step-2",
+  "seq": 42,
+  "duplicate": false
+}