@clowder-ai/plugin-contract 0.1.0-beta.1 → 0.1.0-beta.11

package/dist/wire/wire-uint53.d.ts

@@ -0,0 +1,26 @@
+/**
+ * WireUInt53 — the single contract-owned numeric profile.
+ * Mechanized from the #1165 frozen shape.
+ *
+ * Raw JSON lexeme: canonical decimal digits 0|[1-9][0-9]*
+ * No sign, no decimal point, no exponent, no leading zeros.
+ * Raw token length ≤ 16 characters.
+ * Parsed value: non-negative safe integer.
+ */
+/** Maximum safe integer (2^53 - 1). */
+export declare const WIRE_UINT53_MAX: 9007199254740991;
+/** Pattern for canonical decimal integer raw tokens. */
+export declare const WIRE_UINT53_RAW_PATTERN: RegExp;
+/** Maximum raw token length (digit count of 2^53-1). */
+export declare const WIRE_UINT53_MAX_RAW_LENGTH: 16;
+/**
+ * Validate a parsed number as a WireUInt53.
+ * Checks Number.isSafeInteger and non-negative.
+ */
+export declare function isWireUInt53(value: number, min?: number, max?: number): boolean;
+/**
+ * Validate a raw JSON token as a canonical WireUInt53 lexeme.
+ * Must be checked BEFORE JSON.parse (pre-dispatch).
+ */
+export declare function isCanonicalUInt53Token(rawToken: string): boolean;
+//# sourceMappingURL=wire-uint53.d.ts.map

package/dist/wire/wire-uint53.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-uint53.d.ts","sourceRoot":"","sources":["../../src/wire/wire-uint53.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,uCAAuC;AACvC,eAAO,MAAM,eAAe,EAAG,gBAA8B,CAAC;AAE9D,wDAAwD;AACxD,eAAO,MAAM,uBAAuB,QAAwB,CAAC;AAE7D,wDAAwD;AACxD,eAAO,MAAM,0BAA0B,EAAG,EAAW,CAAC;AAEtD;;;GAGG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAU,EAAE,GAAG,GAAE,MAAwB,GAAG,OAAO,CAEnG;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAGhE"}

package/dist/wire/wire-uint53.js

@@ -0,0 +1,32 @@
+/**
+ * WireUInt53 — the single contract-owned numeric profile.
+ * Mechanized from the #1165 frozen shape.
+ *
+ * Raw JSON lexeme: canonical decimal digits 0|[1-9][0-9]*
+ * No sign, no decimal point, no exponent, no leading zeros.
+ * Raw token length ≤ 16 characters.
+ * Parsed value: non-negative safe integer.
+ */
+/** Maximum safe integer (2^53 - 1). */
+export const WIRE_UINT53_MAX = 9_007_199_254_740_991;
+/** Pattern for canonical decimal integer raw tokens. */
+export const WIRE_UINT53_RAW_PATTERN = /^(?:0|[1-9][0-9]*)$/;
+/** Maximum raw token length (digit count of 2^53-1). */
+export const WIRE_UINT53_MAX_RAW_LENGTH = 16;
+/**
+ * Validate a parsed number as a WireUInt53.
+ * Checks Number.isSafeInteger and non-negative.
+ */
+export function isWireUInt53(value, min = 0, max = WIRE_UINT53_MAX) {
+    return Number.isSafeInteger(value) && value >= min && value <= max;
+}
+/**
+ * Validate a raw JSON token as a canonical WireUInt53 lexeme.
+ * Must be checked BEFORE JSON.parse (pre-dispatch).
+ */
+export function isCanonicalUInt53Token(rawToken) {
+    if (rawToken.length === 0 || rawToken.length > WIRE_UINT53_MAX_RAW_LENGTH)
+        return false;
+    return WIRE_UINT53_RAW_PATTERN.test(rawToken);
+}
+//# sourceMappingURL=wire-uint53.js.map

package/dist/wire/wire-uint53.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire-uint53.js","sourceRoot":"","sources":["../../src/wire/wire-uint53.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,uCAAuC;AACvC,MAAM,CAAC,MAAM,eAAe,GAAG,qBAA8B,CAAC;AAE9D,wDAAwD;AACxD,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAC;AAE7D,wDAAwD;AACxD,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAW,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa,EAAE,MAAc,CAAC,EAAE,MAAc,eAAe;IACxF,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,GAAG,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAG,0BAA0B;QAAE,OAAO,KAAK,CAAC;IACxF,OAAO,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC"}

package/fixtures/behavior/messaging/adversarial-invariants.json

@@ -79,7 +79,7 @@
         "handles": {
           "foreignMessage": { "kind": "message_handle", "token": "message-handle-b", "ownerPluginInstanceId": "plugin-b", "threadId": "thread-1", "messageId": "message-1" }
         },
-        "state": { "messages": [{ "messageId": "message-1", "revision": 1 }] }
+        "state": { "messages": [{ "messageId": "message-1", "threadId": "thread-1", "revision": 1 }] }
       },
       "when": {
         "operation": "appendElements",
@@ -141,7 +141,7 @@
         "handles": {
           "message": { "kind": "message_handle", "token": "message-handle-a", "ownerPluginInstanceId": "plugin-a", "threadId": "thread-1", "messageId": "message-1" }
         },
-        "state": { "messages": [{ "messageId": "message-1", "revision": 2 }] }
+        "state": { "messages": [{ "messageId": "message-1", "threadId": "thread-1", "revision": 2 }] }
       },
       "when": {
         "operation": "appendElements",
@@ -253,7 +253,7 @@
         "handles": {
           "message": { "kind": "message_handle", "token": "message-handle-a", "ownerPluginInstanceId": "plugin-a", "threadId": "thread-1", "messageId": "message-1" }
         },
-        "state": { "messages": [{ "messageId": "message-1", "revision": 1, "elements": [{ "elementId": "source-1", "epistemicStatus": "inference" }] }] }
+        "state": { "messages": [{ "messageId": "message-1", "threadId": "thread-1", "revision": 1, "elements": [{ "elementId": "source-1", "epistemicStatus": "inference" }] }] }
       },
       "when": {
         "operation": "appendElements",
@@ -357,7 +357,7 @@
         "handles": {
           "message": { "kind": "message_handle", "token": "message-handle-a", "ownerPluginInstanceId": "plugin-a", "threadId": "thread-1", "messageId": "message-1" }
         },
-        "state": { "messages": [{ "messageId": "message-1", "revision": 1 }] }
+        "state": { "messages": [{ "messageId": "message-1", "threadId": "thread-1", "revision": 1 }] }
       },
       "when": {
         "operation": "appendElements",
@@ -456,7 +456,7 @@
         },
         "state": {
           "messages": [{ "messageId": "message-1", "threadId": "thread-1" }],
-          "replayEvents": [{ "eventId": "event-1", "sequence": 1 }]
+          "replayEvents": [{ "eventId": "event-1", "subscriptionId": "subscription-a", "sequence": 1 }]
         }
       },
       "when": {
@@ -470,6 +470,57 @@
           { "target": "messages", "assertion": "unchanged" }
         ]
       }
+    },
+    {
+      "id": "snapshot-without-grant-rejected",
+      "invariant": "A subscription identifier cannot bypass the message.event.subscribe grant for snapshots.",
+      "given": {
+        "caller": { "pluginInstanceId": "plugin-a" },
+        "grants": [],
+        "handles": {
+          "subscription": { "kind": "subscription", "token": "subscription-token-a", "ownerPluginInstanceId": "plugin-a", "threadId": "thread-1", "subscriptionId": "subscription-a" }
+        },
+        "state": { "subscription": { "cursorSequence": 4 } }
+      },
+      "when": {
+        "operation": "snapshot",
+        "input": { "subscriptionId": "subscription-a" }
+      },
+      "expect": {
+        "status": "error",
+        "errorCode": "PERMISSION",
+        "sideEffects": [
+          { "target": "snapshot", "assertion": "none" },
+          { "target": "subscription", "assertion": "unchanged" }
+        ]
+      }
+    },
+    {
+      "id": "foreign-replay-delete-rejected",
+      "invariant": "A caller cannot delete another plugin instance's subscription replay buffer.",
+      "given": {
+        "caller": { "pluginInstanceId": "plugin-b" },
+        "grants": ["message.event.subscribe"],
+        "handles": {
+          "subscription": { "kind": "subscription", "token": "subscription-token-a", "ownerPluginInstanceId": "plugin-a", "threadId": "thread-1", "subscriptionId": "subscription-a" }
+        },
+        "state": {
+          "messages": [{ "messageId": "message-1", "threadId": "thread-1" }],
+          "replayEvents": [{ "eventId": "event-1", "subscriptionId": "subscription-a", "sequence": 1 }]
+        }
+      },
+      "when": {
+        "operation": "deleteReplayEvents",
+        "input": { "subscriptionId": "subscription-a", "throughSequence": 1 }
+      },
+      "expect": {
+        "status": "error",
+        "errorCode": "PERMISSION",
+        "sideEffects": [
+          { "target": "replay_events", "assertion": "unchanged" },
+          { "target": "messages", "assertion": "unchanged" }
+        ]
+      }
     }
   ]
 }

package/fixtures/manifest/invalid/duplicate-signal-type.json

@@ -0,0 +1,33 @@
+{
+  "pluginId": "example.duplicate-signal",
+  "version": "1.0.0",
+  "contractVersion": "0.1.0",
+  "name": "Duplicate Signal Type",
+  "features": [
+    {
+      "id": "meeting-intake",
+      "name": "Meeting intake",
+      "resources": [],
+      "capabilities": ["events.publish"]
+    }
+  ],
+  "signals": {
+    "provides": [
+      {
+        "type": "feishu.meeting_artifact.generated.v1",
+        "schemaRef": "schemas/meeting-a.schema.json",
+        "epistemicStatus": "observation",
+        "privacyClass": "content-adjacent",
+        "sourceClass": "remote-service"
+      },
+      {
+        "type": "feishu.meeting_artifact.generated.v1",
+        "schemaRef": "schemas/meeting-b.schema.json",
+        "epistemicStatus": "inference",
+        "privacyClass": "content",
+        "sourceClass": "remote-service"
+      }
+    ]
+  },
+  "runtime": { "transport": "builtin" }
+}

package/fixtures/messaging/valid/subscription-delivery.json

@@ -18,7 +18,7 @@
           "audience": {
             "kind": "public"
           },
-          "occurredAt": "2026-07-15T02:42:00Z",
+          "occurredAt": "2026-07-15T02:42:00.000Z",
           "payload": {
             "provenance": {
               "origin": {

package/fixtures/signals/invalid/destination-injection.json

@@ -0,0 +1,15 @@
+{
+  "_meta": {
+    "schemaRef": "EventsPublishInput"
+  },
+  "signalType": "feishu.meeting_artifact.generated.v1",
+  "eventId": "feishu-minute-om_abc123-v7",
+  "idempotencyKey": "feishu:minute:om_abc123:7",
+  "occurredAt": "2026-08-09T04:12:31Z",
+  "payload": {
+    "artifactId": "om_abc123"
+  },
+  "destination": {
+    "threadId": "thread_user_selected"
+  }
+}

package/fixtures/signals/invalid/dynamic-schema-url.json

@@ -0,0 +1,10 @@
+{
+  "_meta": {
+    "schemaRef": "SignalDeclaration"
+  },
+  "type": "feishu.meeting_artifact.generated.v1",
+  "schemaRef": "https://attacker.example/schemas/meeting.json",
+  "epistemicStatus": "observation",
+  "privacyClass": "content-adjacent",
+  "sourceClass": "remote-service"
+}

package/fixtures/signals/invalid/forbidden-raw-privacy.json

@@ -0,0 +1,10 @@
+{
+  "_meta": {
+    "schemaRef": "SignalDeclaration"
+  },
+  "type": "local.microphone.frame.v1",
+  "schemaRef": "schemas/microphone-frame.schema.json",
+  "epistemicStatus": "observation",
+  "privacyClass": "av-raw",
+  "sourceClass": "os-metadata"
+}

package/fixtures/signals/invalid/non-utc-occurred-at.json

@@ -0,0 +1,12 @@
+{
+  "_meta": {
+    "schemaRef": "EventsPublishInput"
+  },
+  "signalType": "feishu.meeting_artifact.generated.v1",
+  "eventId": "feishu-minute-om_abc123-v7",
+  "idempotencyKey": "feishu:minute:om_abc123:7",
+  "occurredAt": "2026-08-09T12:12:31+08:00",
+  "payload": {
+    "artifactId": "om_abc123"
+  }
+}

package/fixtures/signals/valid/feishu-meeting-artifact.json

@@ -0,0 +1,18 @@
+{
+  "_meta": {
+    "schemaRef": "EventsPublishInput"
+  },
+  "signalType": "feishu.meeting_artifact.generated.v1",
+  "eventId": "feishu-minute-om_abc123-v7",
+  "idempotencyKey": "feishu:minute:om_abc123:7",
+  "occurredAt": "2026-08-09T04:12:31Z",
+  "payload": {
+    "artifactId": "om_abc123",
+    "artifactKind": "minute",
+    "revision": "7",
+    "title": "F292 design review"
+  },
+  "source": {
+    "handle": "feishu://meeting-artifacts/minute/om_abc123?revision=7"
+  }
+}

package/fixtures/signals/valid/remote-service-declaration.json

@@ -0,0 +1,10 @@
+{
+  "_meta": {
+    "schemaRef": "SignalDeclaration"
+  },
+  "type": "feishu.meeting_artifact.generated.v1",
+  "schemaRef": "schemas/feishu-meeting-artifact.schema.json",
+  "epistemicStatus": "observation",
+  "privacyClass": "content-adjacent",
+  "sourceClass": "remote-service"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@clowder-ai/plugin-contract",
-  "version": "0.1.0-beta.1",
+  "version": "0.1.0-beta.11",
   "private": false,
   "description": "Clowder AI plugin contract — the single machine-readable truth source for plugin schema, types, capability table, and conformance fixtures (P15)",
   "license": "MIT",
@@ -10,9 +10,16 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
+    "./conformance": {
+      "types": "./dist/conformance/index.d.ts",
+      "import": "./dist/conformance/index.js"
+    },
     "./schemas/messaging": "./src/schemas/messaging.schema.json",
     "./schemas/manifest": "./src/schemas/manifest.schema.json",
-    "./schemas/behavior-fixture": "./src/schemas/behavior-fixture.schema.json"
+    "./schemas/signals": "./src/schemas/signal.schema.json",
+    "./schemas/physical-limb": "./src/schemas/physical-limb.schema.json",
+    "./schemas/behavior-fixture": "./src/schemas/behavior-fixture.schema.json",
+    "./fixtures/behavior/messaging/adversarial-invariants": "./fixtures/behavior/messaging/adversarial-invariants.json"
   },
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -27,9 +34,9 @@
   "scripts": {
     "generate": "node --import tsx src/codegen/generate-contract.ts",
     "generate:check": "node --import tsx src/codegen/generate-contract.ts --check",
-    "build": "pnpm clean && tsc -p tsconfig.build.json",
+    "build": "pnpm clean && tsc -p tsconfig.build.json && node --test scripts/conformance-public-boundary.test.mjs",
     "typecheck": "tsc --noEmit",
-    "test": "node --import tsx --test src/**/*.test.ts",
+    "test": "node --import tsx --test src/**/*.test.ts src/**/**/*.test.ts",
     "conformance": "node --import tsx src/conformance/runner.ts",
     "lint": "tsc --noEmit",
     "clean": "rm -rf dist",
@@ -37,11 +44,13 @@
   },
   "devDependencies": {
     "@types/node": "^20.17.0",
-    "ajv": "^8.17.0",
-    "ajv-formats": "^3.0.0",
     "tsx": "^4.19.0",
     "typescript": "^5.7.0"
   },
+  "dependencies": {
+    "ajv": "^8.17.0",
+    "ajv-formats": "^3.0.0"
+  },
   "publishConfig": {
     "access": "public"
   },

package/src/schemas/manifest.schema.json

@@ -2,7 +2,7 @@
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "$id": "https://clowder-ai.dev/schemas/manifest/v0.1",
   "title": "Clowder AI Plugin Manifest (v0.1)",
-  "description": "Machine-readable truth source for plugin manifest (§3.4/§3.5). v0.1 covers core manifest + features + data classification. Signals/events (C-2) and schedule/state (C-3) are schema deltas in future contract versions.",
+  "description": "Machine-readable truth source for plugin manifest (§3.4/§3.5). beta.9 adds the C-2 declared-signal contribution while schedule/state (C-3) remain future contract deltas.",
   "x-clowder-capability-layers": {
     "L0": ["plugin.config.read", "plugin.state.get", "plugin.state.set"],
     "L1": ["messaging.send", "schedule.register", "events.publish", "messaging.appendElements"],
@@ -179,7 +179,10 @@
       "type": "array",
       "items": { "$ref": "#/$defs/DataDeclaration" }
     },
-    "runtime": { "$ref": "#/$defs/RuntimeDeclaration" }
+    "runtime": { "$ref": "#/$defs/RuntimeDeclaration" },
+    "signals": {
+      "$ref": "https://clowder-ai.dev/schemas/signals/v0.2#/$defs/SignalContribution"
+    }
   },
   "required": ["pluginId", "version", "contractVersion", "name", "features", "runtime"],
   "additionalProperties": false