@cleocode/contracts 2026.6.12 → 2026.6.13

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (136) hide show
  1. package/dist/__tests__/operation-def.test.js +2 -1
  2. package/dist/__tests__/operation-def.test.js.map +1 -1
  3. package/dist/__tests__/sealed-credential.test.d.ts +19 -0
  4. package/dist/__tests__/sealed-credential.test.d.ts.map +1 -0
  5. package/dist/__tests__/sealed-credential.test.js +74 -0
  6. package/dist/__tests__/sealed-credential.test.js.map +1 -0
  7. package/dist/__tests__/skill-executor-contract.test.js +3 -0
  8. package/dist/__tests__/skill-executor-contract.test.js.map +1 -1
  9. package/dist/acceptance-gate.d.ts +2 -3
  10. package/dist/acceptance-gate.d.ts.map +1 -1
  11. package/dist/boundary.d.ts.map +1 -1
  12. package/dist/boundary.js +1 -19
  13. package/dist/boundary.js.map +1 -1
  14. package/dist/config.d.ts +102 -0
  15. package/dist/config.d.ts.map +1 -1
  16. package/dist/data-accessor.d.ts +21 -1
  17. package/dist/data-accessor.d.ts.map +1 -1
  18. package/dist/data-accessor.js.map +1 -1
  19. package/dist/dispatch/identity.d.ts +1 -1
  20. package/dist/dispatch/identity.d.ts.map +1 -1
  21. package/dist/dispatch/identity.js +5 -0
  22. package/dist/dispatch/identity.js.map +1 -1
  23. package/dist/dispatch/operations-registry.d.ts.map +1 -1
  24. package/dist/dispatch/operations-registry.js +46 -168
  25. package/dist/dispatch/operations-registry.js.map +1 -1
  26. package/dist/docs/read.d.ts +2 -2
  27. package/dist/index.d.ts +12 -7
  28. package/dist/index.d.ts.map +1 -1
  29. package/dist/index.js +3 -0
  30. package/dist/index.js.map +1 -1
  31. package/dist/lease-ipc/__tests__/freeze.test.d.ts +15 -0
  32. package/dist/lease-ipc/__tests__/freeze.test.d.ts.map +1 -0
  33. package/dist/lease-ipc/__tests__/freeze.test.js +221 -0
  34. package/dist/lease-ipc/__tests__/freeze.test.js.map +1 -0
  35. package/dist/lease-ipc/index.d.ts +17 -0
  36. package/dist/lease-ipc/index.d.ts.map +1 -0
  37. package/dist/lease-ipc/index.js +16 -0
  38. package/dist/lease-ipc/index.js.map +1 -0
  39. package/dist/lease-ipc/messages.d.ts +754 -0
  40. package/dist/lease-ipc/messages.d.ts.map +1 -0
  41. package/dist/lease-ipc/messages.js +383 -0
  42. package/dist/lease-ipc/messages.js.map +1 -0
  43. package/dist/lease-ipc/version.d.ts +41 -0
  44. package/dist/lease-ipc/version.d.ts.map +1 -0
  45. package/dist/lease-ipc/version.js +43 -0
  46. package/dist/lease-ipc/version.js.map +1 -0
  47. package/dist/llm/interfaces.d.ts +23 -0
  48. package/dist/llm/interfaces.d.ts.map +1 -1
  49. package/dist/llm/sealed-credential.d.ts +164 -0
  50. package/dist/llm/sealed-credential.d.ts.map +1 -0
  51. package/dist/llm/sealed-credential.js +43 -0
  52. package/dist/llm/sealed-credential.js.map +1 -0
  53. package/dist/llm/system-of-use.d.ts +383 -0
  54. package/dist/llm/system-of-use.d.ts.map +1 -0
  55. package/dist/llm/system-of-use.js +238 -0
  56. package/dist/llm/system-of-use.js.map +1 -0
  57. package/dist/llm/system-resolver.d.ts +45 -11
  58. package/dist/llm/system-resolver.d.ts.map +1 -1
  59. package/dist/llm/system-resolver.js +14 -7
  60. package/dist/llm/system-resolver.js.map +1 -1
  61. package/dist/operations/__tests__/ensures-schema-registry.test.d.ts +17 -0
  62. package/dist/operations/__tests__/ensures-schema-registry.test.d.ts.map +1 -0
  63. package/dist/operations/__tests__/ensures-schema-registry.test.js +113 -0
  64. package/dist/operations/__tests__/ensures-schema-registry.test.js.map +1 -0
  65. package/dist/operations/ensures-schema-registry.d.ts +172 -0
  66. package/dist/operations/ensures-schema-registry.d.ts.map +1 -0
  67. package/dist/operations/ensures-schema-registry.js +226 -0
  68. package/dist/operations/ensures-schema-registry.js.map +1 -0
  69. package/dist/operations/llm.d.ts +101 -9
  70. package/dist/operations/llm.d.ts.map +1 -1
  71. package/dist/operations/validate.d.ts +1 -12
  72. package/dist/operations/validate.d.ts.map +1 -1
  73. package/dist/operations/validate.js +1 -1
  74. package/dist/playbook.d.ts +60 -0
  75. package/dist/playbook.d.ts.map +1 -1
  76. package/dist/session.d.ts +11 -0
  77. package/dist/session.d.ts.map +1 -1
  78. package/dist/session.js.map +1 -1
  79. package/dist/templates/manifest.d.ts +1 -1
  80. package/dist/tools/agent-tools.d.ts +231 -0
  81. package/dist/tools/agent-tools.d.ts.map +1 -0
  82. package/dist/tools/agent-tools.js +25 -0
  83. package/dist/tools/agent-tools.js.map +1 -0
  84. package/dist/tools/atomic.d.ts +19 -0
  85. package/dist/tools/atomic.d.ts.map +1 -1
  86. package/dist/tools/atomic.js +17 -0
  87. package/dist/tools/atomic.js.map +1 -1
  88. package/dist/tools/index.d.ts +2 -0
  89. package/dist/tools/index.d.ts.map +1 -1
  90. package/dist/tools/skill-executor.d.ts +7 -0
  91. package/dist/tools/skill-executor.d.ts.map +1 -1
  92. package/dist/tools/web-tools.d.ts +217 -0
  93. package/dist/tools/web-tools.d.ts.map +1 -0
  94. package/dist/tools/web-tools.js +31 -0
  95. package/dist/tools/web-tools.js.map +1 -0
  96. package/package.json +6 -2
  97. package/src/__tests__/__snapshots__/operations-registry.test.ts.snap +1 -1
  98. package/src/__tests__/operation-def.test.ts +2 -1
  99. package/src/__tests__/sealed-credential.test.ts +100 -0
  100. package/src/__tests__/skill-executor-contract.test.ts +3 -0
  101. package/src/acceptance-gate.ts +2 -3
  102. package/src/boundary.ts +1 -20
  103. package/src/config.ts +104 -0
  104. package/src/data-accessor.ts +22 -1
  105. package/src/dispatch/identity.ts +5 -0
  106. package/src/dispatch/operations-registry.ts +51 -170
  107. package/src/index.ts +103 -24
  108. package/src/lease-ipc/__tests__/freeze.test.ts +246 -0
  109. package/src/lease-ipc/index.ts +63 -0
  110. package/src/lease-ipc/messages.ts +471 -0
  111. package/src/lease-ipc/version.ts +46 -0
  112. package/src/llm/interfaces.ts +23 -0
  113. package/src/llm/sealed-credential.ts +166 -0
  114. package/src/llm/system-of-use.ts +503 -0
  115. package/src/llm/system-resolver.ts +46 -11
  116. package/src/operations/__tests__/ensures-schema-registry.test.ts +169 -0
  117. package/src/operations/ensures-schema-registry.ts +260 -0
  118. package/src/operations/llm.ts +105 -8
  119. package/src/operations/validate.ts +1 -14
  120. package/src/playbook.ts +61 -0
  121. package/src/session.ts +11 -0
  122. package/src/tools/agent-tools.ts +270 -0
  123. package/src/tools/atomic.ts +21 -0
  124. package/src/tools/index.ts +46 -0
  125. package/src/tools/skill-executor.ts +7 -0
  126. package/src/tools/web-tools.ts +247 -0
  127. package/dist/tessera.d.ts +0 -32
  128. package/dist/tessera.d.ts.map +0 -1
  129. package/dist/tessera.js +0 -11
  130. package/dist/tessera.js.map +0 -1
  131. package/dist/warp-chain.d.ts +0 -129
  132. package/dist/warp-chain.d.ts.map +0 -1
  133. package/dist/warp-chain.js +0 -13
  134. package/dist/warp-chain.js.map +0 -1
  135. package/src/tessera.ts +0 -35
  136. package/src/warp-chain.ts +0 -185
@@ -1431,37 +1431,6 @@ export const OPERATIONS = [
1431
1431
  requiredParams: [],
1432
1432
  params: [],
1433
1433
  },
1434
- // T5405: WarpChain pipeline operations
1435
- {
1436
- gateway: 'query',
1437
- domain: 'pipeline',
1438
- operation: 'chain.show',
1439
- description: 'pipeline.chain.show (query) — get chain definition by ID',
1440
- tier: 2,
1441
- idempotent: true,
1442
- sessionRequired: false,
1443
- requiredParams: ['chainId'],
1444
- params: [
1445
- {
1446
- name: 'chainId',
1447
- type: 'string',
1448
- required: true,
1449
- description: 'chainId parameter',
1450
- cli: { positional: true },
1451
- },
1452
- ],
1453
- },
1454
- {
1455
- gateway: 'query',
1456
- domain: 'pipeline',
1457
- operation: 'chain.list',
1458
- description: 'pipeline.chain.list (query) — list all chain definitions',
1459
- tier: 2,
1460
- idempotent: true,
1461
- sessionRequired: false,
1462
- requiredParams: [],
1463
- params: [],
1464
- },
1465
1434
  {
1466
1435
  gateway: 'query',
1467
1436
  domain: 'check',
@@ -1655,26 +1624,6 @@ export const OPERATIONS = [
1655
1624
  },
1656
1625
  ],
1657
1626
  },
1658
- // T5405: WarpChain validation query
1659
- {
1660
- gateway: 'query',
1661
- domain: 'check',
1662
- operation: 'chain.validate',
1663
- description: 'check.chain.validate (query) — validate a WarpChain definition',
1664
- tier: 2,
1665
- idempotent: true,
1666
- sessionRequired: false,
1667
- requiredParams: ['chain'],
1668
- params: [
1669
- {
1670
- name: 'chain',
1671
- type: 'string',
1672
- required: true,
1673
- description: 'chain parameter',
1674
- cli: { positional: true },
1675
- },
1676
- ],
1677
- },
1678
1627
  // T646: Canon drift detection — CI gate
1679
1628
  {
1680
1629
  gateway: 'query',
@@ -4157,77 +4106,6 @@ export const OPERATIONS = [
4157
4106
  { name: 'force', type: 'boolean', required: false, description: 'Required safety flag' },
4158
4107
  ],
4159
4108
  },
4160
- // T5405: WarpChain pipeline mutate operations
4161
- {
4162
- gateway: 'mutate',
4163
- domain: 'pipeline',
4164
- operation: 'chain.add',
4165
- description: 'pipeline.chain.add (mutate) — store a validated chain definition',
4166
- tier: 2,
4167
- idempotent: false,
4168
- sessionRequired: false,
4169
- requiredParams: ['chain'],
4170
- params: [
4171
- {
4172
- name: 'chain',
4173
- type: 'string',
4174
- required: true,
4175
- description: 'chain parameter',
4176
- cli: { positional: true },
4177
- },
4178
- ],
4179
- },
4180
- {
4181
- gateway: 'mutate',
4182
- domain: 'pipeline',
4183
- operation: 'chain.instantiate',
4184
- description: 'pipeline.chain.instantiate (mutate) — create chain instance for epic',
4185
- tier: 2,
4186
- idempotent: false,
4187
- sessionRequired: false,
4188
- requiredParams: ['chainId', 'epicId'],
4189
- params: [
4190
- {
4191
- name: 'chainId',
4192
- type: 'string',
4193
- required: true,
4194
- description: 'chainId parameter',
4195
- cli: { positional: true },
4196
- },
4197
- {
4198
- name: 'epicId',
4199
- type: 'string',
4200
- required: true,
4201
- description: 'epicId parameter',
4202
- cli: { positional: true },
4203
- },
4204
- ],
4205
- },
4206
- {
4207
- gateway: 'mutate',
4208
- domain: 'pipeline',
4209
- operation: 'chain.advance',
4210
- description: 'pipeline.chain.advance (mutate) — advance instance to next stage',
4211
- tier: 2,
4212
- idempotent: false,
4213
- sessionRequired: false,
4214
- requiredParams: ['instanceId', 'nextStage'],
4215
- params: [
4216
- {
4217
- name: 'instanceId',
4218
- type: 'string',
4219
- required: true,
4220
- description: 'instanceId parameter',
4221
- cli: { positional: true },
4222
- },
4223
- {
4224
- name: 'nextStage',
4225
- type: 'string',
4226
- required: true,
4227
- description: 'nextStage parameter',
4228
- },
4229
- ],
4230
- },
4231
4109
  {
4232
4110
  gateway: 'mutate',
4233
4111
  domain: 'check',
@@ -6416,52 +6294,6 @@ export const OPERATIONS = [
6416
6294
  },
6417
6295
  ],
6418
6296
  },
6419
- // orchestrate — tessera template operations (T5411)
6420
- // tessera.show removed — merged into tessera.list via optional id param (T5615)
6421
- {
6422
- gateway: 'query',
6423
- domain: 'orchestrate',
6424
- operation: 'tessera.list',
6425
- description: 'orchestrate.tessera.list (query) — list Tessera templates; absorbs tessera.show via optional id param',
6426
- tier: 1,
6427
- idempotent: true,
6428
- sessionRequired: false,
6429
- requiredParams: [],
6430
- params: [
6431
- {
6432
- name: 'id',
6433
- type: 'string',
6434
- required: false,
6435
- description: 'Optional template ID for single-item lookup (replaces tessera.show)',
6436
- },
6437
- ],
6438
- },
6439
- {
6440
- gateway: 'mutate',
6441
- domain: 'orchestrate',
6442
- operation: 'tessera.instantiate',
6443
- description: 'orchestrate.tessera.instantiate (mutate) — instantiate a Tessera template into a chain instance',
6444
- tier: 1,
6445
- idempotent: false,
6446
- sessionRequired: false,
6447
- requiredParams: ['templateId', 'epicId'],
6448
- params: [
6449
- {
6450
- name: 'templateId',
6451
- type: 'string',
6452
- required: true,
6453
- description: 'templateId parameter',
6454
- cli: { positional: true },
6455
- },
6456
- {
6457
- name: 'epicId',
6458
- type: 'string',
6459
- required: true,
6460
- description: 'epicId parameter',
6461
- cli: { positional: true },
6462
- },
6463
- ],
6464
- },
6465
6297
  // orchestrate — Wave 7a dispatch ops (T408, T409, T410, T415)
6466
6298
  {
6467
6299
  gateway: 'query',
@@ -8643,5 +8475,51 @@ export const OPERATIONS = [
8643
8475
  },
8644
8476
  ],
8645
8477
  },
8478
+ // ── selfimprove mutate: run (T11889 / T11889-D — the self-dogfooding loop) ──
8479
+ // Boots ONE sandbox → replays the named canned scenario → diffs result
8480
+ // envelopes vs the golden → on a regression emits ONE leased `selfimprove_dhq`
8481
+ // row and opens ONE DRAFT PR. The walking skeleton's default scenario is
8482
+ // query-only so the in-process replay never mutates. DEFAULT OFF: without
8483
+ // `execute` the loop runs DRY-RUN (replay + diff + report; NO DB write, NO PR).
8484
+ // The CORE engine (`runSelfImprove`) owns boot/replay/diff/persist/egress +
8485
+ // the budget + circuit-breaker; the dispatch handler is a thin delegate that
8486
+ // supplies the in-process `ReplayDispatch` port (Gate-6). `sessionRequired`
8487
+ // links each run to its origin session for provenance.
8488
+ {
8489
+ gateway: 'mutate',
8490
+ domain: 'selfimprove',
8491
+ operation: 'run',
8492
+ description: 'selfimprove.run (mutate) — boot ONE sandbox, replay a canned dogfood scenario, diff vs golden; on regression emit ONE leased selfimprove_dhq row + ONE DRAFT PR. Default OFF — requires --execute (else DRY-RUN). Budget-capped + circuit-broken (T11889 / T11889-D).',
8493
+ tier: 2,
8494
+ idempotent: false,
8495
+ sessionRequired: true,
8496
+ requiredParams: ['scenario'],
8497
+ params: [
8498
+ {
8499
+ name: 'scenario',
8500
+ type: 'string',
8501
+ required: true,
8502
+ description: 'Canned dogfood scenario name to replay (e.g. dhq-replay-find)',
8503
+ },
8504
+ {
8505
+ name: 'execute',
8506
+ type: 'boolean',
8507
+ required: false,
8508
+ description: 'Permit mutation (leased DHQ UPSERT) + egress (draft PR). DEFAULT false ⇒ DRY-RUN (replay + diff + report only — no DB write, no PR).',
8509
+ },
8510
+ {
8511
+ name: 'dryRun',
8512
+ type: 'boolean',
8513
+ required: false,
8514
+ description: 'Force DRY-RUN explicitly (no DB write, no PR). Equivalent to omitting --execute; the loop is default-OFF.',
8515
+ },
8516
+ {
8517
+ name: 'backend',
8518
+ type: 'string',
8519
+ required: false,
8520
+ description: "Confinement backend preference: 'gondolin' (micro-VM; degrades to the in-process guarded env when VM infra is absent — the CI path) | 'guarded'. Default: gondolin.",
8521
+ },
8522
+ ],
8523
+ },
8646
8524
  ];
8647
8525
  //# sourceMappingURL=operations-registry.js.map