@cleocode/contracts 2026.6.11 → 2026.6.13

package/src/index.ts

@@ -264,6 +264,7 @@ export type {
   LlmConfig,
   LlmDefaultConfig,
   LlmProfileConfig,
+  LlmProfileTier,
   LlmProfileTuning,
   LlmProviderEntry,
   LlmProviderTransport,
@@ -282,6 +283,7 @@ export type {
   SharingMode,
   SignalDockConfig,
   SignalDockMode,
+  SystemBinding,
 } from './config.js';
 export type { AdapterContextMonitorProvider } from './context-monitor.js';
 // === Claude Code credential parsing (T9307 — pure helper, no core imports) ===
@@ -739,6 +741,56 @@ export {
   isLafsError,
   isLafsSuccess,
 } from './lafs.js';
+// === Lease-IPC v1.1 (PARALLEL DbWriterLease contract — T11627 · SG-RUNTIME-UNIFICATION) ===
+export type {
+  ChildKilledUnresponsiveResponse,
+  LeaseAcquireRequest,
+  LeaseDeniedResponse,
+  LeaseErrorResponse,
+  LeaseGrantedResponse,
+  LeaseIpcEnvelope,
+  LeaseIpcRequest,
+  LeaseIpcRequestEnvelope,
+  LeaseIpcResponse,
+  LeaseIpcResponseEnvelope,
+  LeaseLane,
+  LeaseQueuedResponse,
+  LeaseReleaseRequest,
+  LeaseRenewRequest,
+  LeaseRevokedResponse,
+  LeaseScope,
+  RateCheckRequest,
+  RateResultResponse,
+  ToolGrantedResponse,
+  ToolGrantRequest,
+} from './lease-ipc/index.js';
+export {
+  ChildKilledUnresponsiveResponseSchema,
+  isFrozenLeaseIpcVersion,
+  LEASE_IPC_MESSAGE_KINDS,
+  LEASE_IPC_PROTOCOL_VERSION,
+  LEASE_IPC_REQUEST_KINDS,
+  LEASE_IPC_RESPONSE_KINDS,
+  LeaseAcquireRequestSchema,
+  LeaseDeniedResponseSchema,
+  LeaseErrorResponseSchema,
+  LeaseGrantedResponseSchema,
+  LeaseIpcEnvelopeSchema,
+  LeaseIpcRequestEnvelopeSchema,
+  LeaseIpcRequestSchema,
+  LeaseIpcResponseEnvelopeSchema,
+  LeaseIpcResponseSchema,
+  LeaseLaneSchema,
+  LeaseQueuedResponseSchema,
+  LeaseReleaseRequestSchema,
+  LeaseRenewRequestSchema,
+  LeaseRevokedResponseSchema,
+  LeaseScopeSchema,
+  RateCheckRequestSchema,
+  RateResultResponseSchema,
+  ToolGrantedResponseSchema,
+  ToolGrantRequestSchema,
+} from './lease-ipc/index.js';
 // === LLM Error Taxonomy (T9270 — Hermes FailoverReason port) ===
 export type { ClassifiedError, FailoverReason } from './llm/failover-reason.js';
 // === Phase 4 Unified Architecture (T9281 / ADR-072) — Session + Executor interfaces ===
@@ -794,10 +846,42 @@ export type {
 export type { ResolvedCredential } from './llm/resolved-credential.js';
 // === E9 SSoT resolution descriptor (T11745 / T11761) ===
 export type { ModelCaps, ResolvedLLMDescriptor } from './llm/resolved-descriptor.js';
+// === E10 Sealed credential handle (T11752 / T11746) — on-demand decrypt at the wire ===
+export type { DecryptedToken, SealedCredential } from './llm/sealed-credential.js';
+// === E9 System-of-Use taxonomy + registry (T11747 · hermes _AUX_TASKS analog) ===
+export type {
+  AuxSystem,
+  AuxSystemId,
+  CantbookNodeSystem,
+  OpenSystemKind,
+  OrchestrationSystem,
+  RegisteredSystemOfUse,
+  RoleSystem,
+  SkillSystem,
+  SpawnUnitSystem,
+  SystemOfUse,
+  SystemOfUseDefaults,
+  SystemOfUseKind,
+  SystemOfUsePickerEntry,
+  ToolSystem,
+  WhoamiRoleId,
+} from './llm/system-of-use.js';
+export {
+  AUX_SYSTEM_IDS,
+  BUILTIN_SYSTEMS_OF_USE,
+  isBuiltinSystemOfUse,
+  isOpenSystemKind,
+  isSystemOfUse,
+  OPEN_SYSTEM_KEY_PREFIXES,
+  ORCHESTRATION_TIER_IDS,
+  ROLE_SYSTEM_IDS,
+  WHOAMI_ROLE_IDS,
+} from './llm/system-of-use.js';
 // === E9 System-of-Use chokepoint contract (T11749) ===
 export type {
   ResolveLLMForSystemOptions,
-  SystemOfUse,
+  SystemOfUseLabel,
+  SystemResolverInput,
 } from './llm/system-resolver.js';
 export { SYSTEM_ROLE_MAP } from './llm/system-resolver.js';
 // === Logger contract (T9766 — centralized from @cleocode/core) ===
@@ -1045,6 +1129,20 @@ export {
   type DocsLifecycleStatus,
   type DocsUpdateParams,
 } from './operations/docs.js';
+// === Ensures-schema Zod registry (T11762 ST-1 / T11900 — cantbook ensures.schema SSoT) ===
+// Named Zod validators for cantbook `ensures.schema` shapes (task_tree, evidence)
+// + the registry DATA. Bodied accessors live in @cleocode/core (ST-1b) to keep
+// contracts Gate-10-pure. The runtime resolves a schema name → validator here
+// instead of hardcoding `if (schema === 'task_tree') … else if (=== 'evidence')`.
+export type { EnsuresSchemaSpec } from './operations/ensures-schema-registry.js';
+export {
+  ENSURES_SCHEMA_REGISTRY,
+  evidenceSchema,
+  LEGACY_PASSTHROUGH_SCHEMA_NAMES,
+  passthroughSchema,
+  taskTreeEntrySchema,
+  taskTreeSchema,
+} from './operations/ensures-schema-registry.js';
 // === Operations Types (API wire format, namespaced to avoid collision with domain types) ===
 export * as ops from './operations/index.js';
 // === Operation Input Contracts (T9914 / Saga T9855 / E7) ===
@@ -1091,6 +1189,7 @@ export type {
 // === LLM Credential + Role-Resolver Wire Types (T-LLM-CRED Phase 1/2 — T9255) ===
 export type {
   AuthTypeWire,
+  CredentialMetadataWire,
   CredentialResultWire,
   CredentialSourceWire,
   CredentialsStoreStrategyWire,
@@ -1110,6 +1209,8 @@ export type {
   LlmRemoveResult,
   LlmStatusResult,
   LlmStoredCredentialView,
+  LlmSystemsOfUseParams,
+  LlmSystemsOfUseResult,
   LlmTestParams,
   LlmTestResult,
   LlmUseParams,
@@ -1550,8 +1651,6 @@ export type {
   ValidateCanonDocsResult,
   ValidateCanonParams,
   ValidateCanonResult,
-  ValidateChainParams,
-  ValidateChainResult,
   ValidateCoherenceParams,
   ValidateCoherenceResult,
   ValidateComplianceRecordParams,
@@ -1658,6 +1757,7 @@ export type {
   PlaybookDefinition,
   PlaybookDeterministicNode,
   PlaybookEdge,
+  PlaybookEdgeCondition,
   PlaybookEnsures,
   PlaybookErrorHandler,
   PlaybookInput,
@@ -2220,12 +2320,6 @@ export {
   TEMPLATE_UPDATE_STRATEGIES,
   TemplateManifestEntrySchema,
 } from './templates/manifest.js';
-// === Tessera Types ===
-export type {
-  TesseraInstantiationInput,
-  TesseraTemplate,
-  TesseraVariable,
-} from './tessera.js';
 export type { FetchBrainEntriesInput, FetchBrainEntriesOutput } from './tools/brain-fetch.js';
 export type { ObserveBrainInput, ObserveBrainOutput } from './tools/brain-observe.js';
 // === SDK Tool Contracts (T10068 / T10070 / T9835) ===
@@ -2291,21 +2385,6 @@ export {
   validatorRejectionSchema,
   validatorVerdictSchema,
 } from './validator/index.js';
-// === WarpChain Types ===
-export type {
-  ChainShape,
-  ChainValidation,
-  GateCheck,
-  GateContract,
-  GateName,
-  GateResult,
-  ProtocolType,
-  WarpChain,
-  WarpChainExecution,
-  WarpChainInstance,
-  WarpLink,
-  WarpStage,
-} from './warp-chain.js';
 export type {
   TasksFrontierParamsInput,
   TasksRollupParamsInput,

package/src/lease-ipc/__tests__/freeze.test.ts

@@ -0,0 +1,246 @@
+/**
+ * Schema-drift guard for the `lease-ipc` v1.1 PARALLEL contract (T11627 ST-1).
+ *
+ * Pins the v1.1 protocol version and the exact request/response message-kind
+ * set. If a future change adds, removes, or renames a message kind without a
+ * coordinated dual (Rust + TS) edit, these assertions fail — forcing an
+ * explicit, reviewed decision rather than silent drift across the Rust/TS wire.
+ *
+ * Also asserts the Rust wire shape (snake_case keys, `direction` + `kind`
+ * discriminators, snake_case enum payloads) round-trips through the Zod schemas,
+ * proving the TypeScript and Rust sides agree on the same bytes — the exact JSON
+ * produced by `cleo_supervisor::lease_ipc::LeaseEnvelope::*::to_ndjson()`.
+ */
+
+import { describe, expect, it } from 'vitest';
+import {
+  isFrozenLeaseIpcVersion,
+  LEASE_IPC_MESSAGE_KINDS,
+  LEASE_IPC_PROTOCOL_VERSION,
+  LEASE_IPC_REQUEST_KINDS,
+  LEASE_IPC_RESPONSE_KINDS,
+  LeaseIpcEnvelopeSchema,
+  LeaseIpcRequestSchema,
+  LeaseIpcResponseSchema,
+} from '../index.js';
+
+describe('lease-ipc v1.1 freeze guard (T11627)', () => {
+  it('pins the parallel protocol version', () => {
+    expect(LEASE_IPC_PROTOCOL_VERSION).toBe('1.1.0');
+  });
+
+  it('the version differs from the frozen supervisor-ipc v1.0 wire version', () => {
+    // The two contracts are distinguished on the wire purely by this string;
+    // it MUST NOT collide with '1.0.0'.
+    expect(LEASE_IPC_PROTOCOL_VERSION).not.toBe('1.0.0');
+    expect(isFrozenLeaseIpcVersion('1.1.0')).toBe(true);
+    expect(isFrozenLeaseIpcVersion('1.0.0')).toBe(false);
+  });
+
+  it('pins the exact request kind set', () => {
+    expect([...LEASE_IPC_REQUEST_KINDS]).toEqual([
+      'lease_acquire',
+      'lease_release',
+      'lease_renew',
+      'rate_check',
+      'tool_grant',
+    ]);
+  });
+
+  it('pins the exact response kind set', () => {
+    expect([...LEASE_IPC_RESPONSE_KINDS]).toEqual([
+      'lease_granted',
+      'lease_queued',
+      'lease_denied',
+      'rate_result',
+      'tool_granted',
+      'lease_revoked',
+      'child_killed_unresponsive',
+      'error',
+    ]);
+  });
+
+  it('the union schemas cover exactly the v1.1 kinds', () => {
+    for (const kind of LEASE_IPC_REQUEST_KINDS) {
+      const sample = sampleRequestFor(kind);
+      expect(LeaseIpcRequestSchema.safeParse(sample).success).toBe(true);
+    }
+    for (const kind of LEASE_IPC_RESPONSE_KINDS) {
+      const sample = sampleResponseFor(kind);
+      expect(LeaseIpcResponseSchema.safeParse(sample).success).toBe(true);
+    }
+    expect(LEASE_IPC_MESSAGE_KINDS).toHaveLength(
+      LEASE_IPC_REQUEST_KINDS.length + LEASE_IPC_RESPONSE_KINDS.length,
+    );
+  });
+
+  it('pins the EXACT complete v1.1 message-kind set', () => {
+    expect([...LEASE_IPC_MESSAGE_KINDS]).toEqual([
+      'lease_acquire',
+      'lease_release',
+      'lease_renew',
+      'rate_check',
+      'tool_grant',
+      'lease_granted',
+      'lease_queued',
+      'lease_denied',
+      'rate_result',
+      'tool_granted',
+      'lease_revoked',
+      'child_killed_unresponsive',
+      'error',
+    ]);
+  });
+});
+
+describe('lease-ipc v1.1 wire-shape parity with Rust serde (T11627)', () => {
+  it('parses the exact JSON a Rust lease_acquire request envelope serializes', () => {
+    // Literal JSON shape produced by
+    // cleo_supervisor::lease_ipc::LeaseEnvelope::request(...).to_ndjson().
+    const wire = {
+      protocol_version: '1.1.0',
+      id: 'abc',
+      direction: 'request',
+      request: {
+        kind: 'lease_acquire',
+        scope: 'project',
+        lane: 'tasks',
+        holder_id: 'pid-42:tasks',
+        priority: 0,
+        ttl_ms: 30000,
+        reentrant: true,
+      },
+    };
+    const parsed = LeaseIpcEnvelopeSchema.safeParse(wire);
+    expect(parsed.success).toBe(true);
+    if (parsed.success && parsed.data.direction === 'request') {
+      expect(parsed.data.request.kind).toBe('lease_acquire');
+    }
+  });
+
+  it('parses the exact JSON a Rust lease_granted response envelope serializes', () => {
+    const wire = {
+      protocol_version: '1.1.0',
+      id: 'abc',
+      direction: 'response',
+      response: {
+        kind: 'lease_granted',
+        scope: 'global',
+        lane: 'brain',
+        holder_id: 'pid-42:brain',
+        epoch: 7,
+        ttl_ms: 30000,
+        expires_at_ms: 1000030000,
+      },
+    };
+    expect(LeaseIpcEnvelopeSchema.safeParse(wire).success).toBe(true);
+  });
+
+  it('parses a Rust child_killed_unresponsive event envelope', () => {
+    const wire = {
+      protocol_version: '1.1.0',
+      id: 'evt-1',
+      direction: 'response',
+      response: {
+        kind: 'child_killed_unresponsive',
+        child_id: 'worker-1',
+        holder_id: 'pid-42:tasks',
+        scope: 'project',
+        reason: 'unresponsive past ttl',
+      },
+    };
+    expect(LeaseIpcEnvelopeSchema.safeParse(wire).success).toBe(true);
+  });
+
+  it('parses a reused v1.0 error response shape ({ kind, code, message })', () => {
+    const wire = {
+      protocol_version: '1.1.0',
+      id: 'e',
+      direction: 'response',
+      response: { kind: 'error', code: 'E_LEASE_UNIMPLEMENTED', message: 'deferred handler' },
+    };
+    expect(LeaseIpcEnvelopeSchema.safeParse(wire).success).toBe(true);
+  });
+
+  it('rejects an unknown message kind (proves the union is closed)', () => {
+    const wire = {
+      protocol_version: '1.1.0',
+      id: 'abc',
+      direction: 'request',
+      request: { kind: 'lease_teleport', scope: 'project', lane: 'tasks' },
+    };
+    expect(LeaseIpcEnvelopeSchema.safeParse(wire).success).toBe(false);
+  });
+
+  it('rejects an unknown scope/lane enum value (snake_case enums are closed)', () => {
+    const wire = {
+      protocol_version: '1.1.0',
+      id: 'abc',
+      direction: 'request',
+      request: {
+        kind: 'lease_acquire',
+        scope: 'session',
+        lane: 'tasks',
+        holder_id: 'h',
+        priority: 0,
+        ttl_ms: 1,
+        reentrant: false,
+      },
+    };
+    expect(LeaseIpcEnvelopeSchema.safeParse(wire).success).toBe(false);
+  });
+});
+
+/** Build a minimal valid request payload for the given kind. */
+function sampleRequestFor(kind: (typeof LEASE_IPC_REQUEST_KINDS)[number]): unknown {
+  switch (kind) {
+    case 'lease_acquire':
+      return {
+        kind,
+        scope: 'project',
+        lane: 'tasks',
+        holder_id: 'h',
+        priority: 0,
+        ttl_ms: 30000,
+        reentrant: true,
+      };
+    case 'lease_release':
+      return { kind, scope: 'project', lane: 'tasks', holder_id: 'h', epoch: 1 };
+    case 'lease_renew':
+      return { kind, scope: 'project', lane: 'tasks', holder_id: 'h', epoch: 1 };
+    case 'rate_check':
+      return { kind, scope: 'global', lane: 'bulk', est_bytes: 4096 };
+    case 'tool_grant':
+      return { kind, tool: 'browser', holder_id: 'h' };
+  }
+}
+
+/** Build a minimal valid response payload for the given kind. */
+function sampleResponseFor(kind: (typeof LEASE_IPC_RESPONSE_KINDS)[number]): unknown {
+  switch (kind) {
+    case 'lease_granted':
+      return {
+        kind,
+        scope: 'project',
+        lane: 'tasks',
+        holder_id: 'h',
+        epoch: 1,
+        ttl_ms: 30000,
+        expires_at_ms: 1000030000,
+      };
+    case 'lease_queued':
+      return { kind, scope: 'project', lane: 'tasks', ticket: 1, ahead: 0 };
+    case 'lease_denied':
+      return { kind, scope: 'global', code: 'E_LEASE_UNAVAILABLE', message: 'no arbiter' };
+    case 'rate_result':
+      return { kind, scope: 'global', ok: true, retry_after_ms: 0, tokens_remaining: 10 };
+    case 'tool_granted':
+      return { kind, tool: 'browser', holder_id: 'h' };
+    case 'lease_revoked':
+      return { kind, scope: 'project', lane: 'tasks', holder_id: 'h', reason: 'ttl expired' };
+    case 'child_killed_unresponsive':
+      return { kind, child_id: 'w1', holder_id: 'h', scope: 'project', reason: 'unresponsive' };
+    case 'error':
+      return { kind, code: 'E_X', message: 'x' };
+  }
+}

package/src/lease-ipc/index.ts

@@ -0,0 +1,63 @@
+/**
+ * `lease-ipc` v1.1 — PARALLEL DbWriterLease IPC contract barrel (T11627 ST-1).
+ *
+ * Re-exports the version constants and Zod message schemas + inferred types for
+ * the CLEO DbWriterLease arbitration surface. Runs **in parallel** to the
+ * byte-frozen `supervisor-ipc` v1.0 contract — see
+ * {@link LEASE_IPC_PROTOCOL_VERSION}. ST-1 ships the protocol surface with no
+ * consumer (zero behavior change); the local-mode arbiter (ST-2+) and the
+ * supervisor fast path (ST-5) consume it later.
+ *
+ * @task T11627
+ * @packageDocumentation
+ */
+
+export type {
+  ChildKilledUnresponsiveResponse,
+  LeaseAcquireRequest,
+  LeaseDeniedResponse,
+  LeaseErrorResponse,
+  LeaseGrantedResponse,
+  LeaseIpcEnvelope,
+  LeaseIpcRequest,
+  LeaseIpcRequestEnvelope,
+  LeaseIpcResponse,
+  LeaseIpcResponseEnvelope,
+  LeaseLane,
+  LeaseQueuedResponse,
+  LeaseReleaseRequest,
+  LeaseRenewRequest,
+  LeaseRevokedResponse,
+  LeaseScope,
+  RateCheckRequest,
+  RateResultResponse,
+  ToolGrantedResponse,
+  ToolGrantRequest,
+} from './messages.js';
+
+export {
+  ChildKilledUnresponsiveResponseSchema,
+  LEASE_IPC_MESSAGE_KINDS,
+  LEASE_IPC_REQUEST_KINDS,
+  LEASE_IPC_RESPONSE_KINDS,
+  LeaseAcquireRequestSchema,
+  LeaseDeniedResponseSchema,
+  LeaseErrorResponseSchema,
+  LeaseGrantedResponseSchema,
+  LeaseIpcEnvelopeSchema,
+  LeaseIpcRequestEnvelopeSchema,
+  LeaseIpcRequestSchema,
+  LeaseIpcResponseEnvelopeSchema,
+  LeaseIpcResponseSchema,
+  LeaseLaneSchema,
+  LeaseQueuedResponseSchema,
+  LeaseReleaseRequestSchema,
+  LeaseRenewRequestSchema,
+  LeaseRevokedResponseSchema,
+  LeaseScopeSchema,
+  RateCheckRequestSchema,
+  RateResultResponseSchema,
+  ToolGrantedResponseSchema,
+  ToolGrantRequestSchema,
+} from './messages.js';
+export { isFrozenLeaseIpcVersion, LEASE_IPC_PROTOCOL_VERSION } from './version.js';