@datalayer/agent-runtimes 1.3.15 → 1.3.17

package/lib/specs/events.d.ts

@@ -7,13 +7,18 @@
  * DO NOT EDIT MANUALLY - run 'make specs' to regenerate.
  */
 import type { EventSpec } from '../types';
+export declare const AGENT_ASSIGNED_EVENT_SPEC_0_0_1: EventSpec;
 export declare const AGENT_ENDED_EVENT_SPEC_0_0_1: EventSpec;
+export declare const AGENT_OUTPUT_EVENT_SPEC_0_0_1: EventSpec;
 export declare const AGENT_STARTED_EVENT_SPEC_0_0_1: EventSpec;
+export declare const GENERIC_EVENT_SPEC_0_0_1: EventSpec;
 export declare const TOOL_APPROVAL_REQUESTED_EVENT_SPEC_0_0_1: EventSpec;
+export declare const EVENT_KIND_AGENT_ASSIGNED = "agent-assigned";
 export declare const EVENT_KIND_AGENT_ENDED = "agent-ended";
+export declare const EVENT_KIND_AGENT_OUTPUT = "agent-output";
 export declare const EVENT_KIND_AGENT_STARTED = "agent-started";
+export declare const EVENT_KIND_GENERIC = "generic";
 export declare const EVENT_KIND_TOOL_APPROVAL_REQUESTED = "tool-approval-requested";
-export declare const EVENT_KIND_AGENT_ASSIGNED = "agent-assigned";
 export declare const EVENT_CATALOG: Record<string, EventSpec>;
 export declare function getEventSpecs(): EventSpec[];
 export declare function getEventSpec(eventId: string): EventSpec | undefined;

package/lib/specs/events.js

@@ -5,6 +5,64 @@
 // ============================================================================
 // Event Definitions
 // ============================================================================
+export const AGENT_ASSIGNED_EVENT_SPEC_0_0_1 = {
+    id: 'agent-assigned',
+    version: '0.0.1',
+    name: 'Agent Assigned',
+    description: 'Emitted when a running runtime is given its agent: the agent is created in the runtime, its MCP servers started and its environment set.',
+    kind: 'agent-assigned',
+    fields: [
+        {
+            name: 'agent_runtime_id',
+            label: 'Agent Runtime ID',
+            type: 'string',
+            required: true,
+            description: 'Runtime pod or instance identifier.',
+        },
+        {
+            name: 'agent_name',
+            label: 'Agent Name',
+            type: 'string',
+            required: true,
+            description: 'Name of the agent assigned to the runtime.',
+        },
+        {
+            name: 'assignment_source',
+            label: 'Assignment Source',
+            type: 'string',
+            required: true,
+            description: 'What assigned the agent (e.g. the launch request, the pool).',
+        },
+        {
+            name: 'assigned_at',
+            label: 'Assigned At',
+            type: 'string',
+            required: true,
+            description: 'ISO 8601 timestamp when the agent was assigned.',
+        },
+        {
+            name: 'sandbox_variant',
+            label: 'Sandbox Variant',
+            type: 'string',
+            required: false,
+            description: 'The sandbox the agent executes code in.',
+        },
+        {
+            name: 'mcp_proxy_url',
+            label: 'MCP Proxy URL',
+            type: 'string',
+            required: false,
+            description: 'Address of the MCP proxy the agent reaches its tools through.',
+        },
+        {
+            name: 'env_vars_set',
+            label: 'Env Vars Set',
+            type: 'number',
+            required: false,
+            description: 'How many environment variables were set for the agent.',
+        },
+    ],
+};
 export const AGENT_ENDED_EVENT_SPEC_0_0_1 = {
     id: 'agent-ended',
     version: '0.0.1',
@@ -70,6 +128,78 @@ export const AGENT_ENDED_EVENT_SPEC_0_0_1 = {
         },
     ],
 };
+export const AGENT_OUTPUT_EVENT_SPEC_0_0_1 = {
+    id: 'agent-output',
+    version: '0.0.1',
+    name: 'Agent Output',
+    description: "Emitted when an agent run produces its output: a triggered run that finished (with its timing and exit status) or a chat turn that completed. The event's status is the run's exit status.",
+    kind: 'agent-output',
+    fields: [
+        {
+            name: 'outputs',
+            label: 'Outputs',
+            type: 'string',
+            required: false,
+            description: 'The text the agent produced, or a summary of the artifacts it generated.',
+        },
+        {
+            name: 'exit_status',
+            label: 'Exit Status',
+            type: 'string',
+            required: true,
+            description: 'Final status of the run (e.g. completed, error).',
+        },
+        {
+            name: 'duration_ms',
+            label: 'Duration (ms)',
+            type: 'number',
+            required: true,
+            description: 'Execution time of the run or the turn, in milliseconds.',
+        },
+        {
+            name: 'agent_runtime_id',
+            label: 'Agent Runtime ID',
+            type: 'string',
+            required: false,
+            description: 'Runtime pod or instance identifier; set by a triggered run.',
+        },
+        {
+            name: 'agent_spec_id',
+            label: 'Agent Spec ID',
+            type: 'string',
+            required: false,
+            description: 'Identifier of the agent specification that ran; set by a triggered run.',
+        },
+        {
+            name: 'agent_id',
+            label: 'Agent ID',
+            type: 'string',
+            required: false,
+            description: 'Identifier of the agent in the runtime; set by a chat turn.',
+        },
+        {
+            name: 'started_at',
+            label: 'Started At',
+            type: 'string',
+            required: false,
+            description: 'ISO 8601 timestamp when the run started; set by a triggered run.',
+        },
+        {
+            name: 'ended_at',
+            label: 'Ended At',
+            type: 'string',
+            required: false,
+            description: 'ISO 8601 timestamp when the run ended; set by a triggered run.',
+        },
+        {
+            name: 'error_message',
+            label: 'Error Message',
+            type: 'string',
+            required: false,
+            description: 'Error description if the run failed.',
+        },
+    ],
+};
 export const AGENT_STARTED_EVENT_SPEC_0_0_1 = {
     id: 'agent-started',
     version: '0.0.1',
@@ -114,6 +244,14 @@ export const AGENT_STARTED_EVENT_SPEC_0_0_1 = {
         },
     ],
 };
+export const GENERIC_EVENT_SPEC_0_0_1 = {
+    id: 'generic',
+    version: '0.0.1',
+    name: 'Generic',
+    description: 'An event with no kind of its own: what the events client and the CLI create when none is named. It carries a title and a status, and no typed payload.',
+    kind: 'generic',
+    fields: [],
+};
 export const TOOL_APPROVAL_REQUESTED_EVENT_SPEC_0_0_1 = {
     id: 'tool-approval-requested',
     version: '0.0.1',
@@ -152,16 +290,21 @@ export const TOOL_APPROVAL_REQUESTED_EVENT_SPEC_0_0_1 = {
     ],
 };
 // Event kind constants for programmatic use
+export const EVENT_KIND_AGENT_ASSIGNED = 'agent-assigned';
 export const EVENT_KIND_AGENT_ENDED = 'agent-ended';
+export const EVENT_KIND_AGENT_OUTPUT = 'agent-output';
 export const EVENT_KIND_AGENT_STARTED = 'agent-started';
+export const EVENT_KIND_GENERIC = 'generic';
 export const EVENT_KIND_TOOL_APPROVAL_REQUESTED = 'tool-approval-requested';
-export const EVENT_KIND_AGENT_ASSIGNED = 'agent-assigned';
 // ============================================================================
 // Event Catalog
 // ============================================================================
 export const EVENT_CATALOG = {
+    'agent-assigned': AGENT_ASSIGNED_EVENT_SPEC_0_0_1,
     'agent-ended': AGENT_ENDED_EVENT_SPEC_0_0_1,
+    'agent-output': AGENT_OUTPUT_EVENT_SPEC_0_0_1,
     'agent-started': AGENT_STARTED_EVENT_SPEC_0_0_1,
+    generic: GENERIC_EVENT_SPEC_0_0_1,
     'tool-approval-requested': TOOL_APPROVAL_REQUESTED_EVENT_SPEC_0_0_1,
 };
 export function getEventSpecs() {

package/lib/specs/frames.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Frame Catalog.
+ *
+ * The context work happens in, written down: owned, scoped and inherited.
+ * Every Frame is resolved — what it inherits is already in it.
+ *
+ * This file is AUTO-GENERATED from YAML specifications.
+ * DO NOT EDIT MANUALLY - run 'make specs' to regenerate.
+ */
+import type { FrameSpec } from '../types/agentspecs';
+export declare const BOARD_REPORTING_FRAME_0_0_1: FrameSpec;
+export declare const CUSTOMER_RESEARCH_FRAME_0_0_1: FrameSpec;
+export declare const DATALAYER_FRAME_0_0_1: FrameSpec;
+export declare const SALES_PIPELINE_FRAME_0_0_1: FrameSpec;
+export declare const WEB_RESEARCH_FRAME_0_0_1: FrameSpec;
+export declare const FRAME_CATALOGUE: Record<string, FrameSpec>;
+/** The Frame a Cog names, by `id` or `id:version`, or undefined. */
+export declare function getFrame(frameId: string): FrameSpec | undefined;
+export declare function listFrames(): FrameSpec[];

package/lib/specs/frames.js

@@ -0,0 +1,444 @@
+/*
+ * Copyright (c) 2025-2026 Datalayer, Inc.
+ * Distributed under the terms of the Modified BSD License.
+ */
+export const BOARD_REPORTING_FRAME_0_0_1 = {
+    id: 'board-reporting',
+    version: '0.0.1',
+    name: 'Board Reporting Frame',
+    description: 'The voice, the structure and the standard of evidence of a document written for the board of directors. Composes with the Frame of the subject reported on.',
+    scope: 'relationship',
+    owner: 'Datalayer Finance <info@datalayer.io>',
+    extends: 'datalayer:0.0.1',
+    lineage: ['datalayer'],
+    tags: ['board', 'reporting', 'executive'],
+    enabled: true,
+    icon: 'project-roadmap',
+    emoji: '🏛️',
+    rules: [
+        'Never claim a capability, a tool or a result you have not verified.',
+        'Never put a secret, a credential or a token in an output.',
+        'Say what you did not do and what you could not check, as plainly as what you did.',
+        'Keep personal data out of an output unless the task is about that person and they are its audience.',
+        'State a risk as plainly as a result; never soften a miss.',
+        'Present a forecast as a forecast, with the assumption it rests on.',
+        'Keep individual employees and named customers out of the report unless the board asked for them.',
+    ],
+    terminology: {
+        Agentspec: 'The declarative YAML specification of an agent.',
+        Frame: 'The context work happens in, written down, owned, versioned and inherited.',
+        Cog: 'An AI worker you can hold to account — an agent equipped with Frames.',
+        Guard: 'A check the output of a piece of work has to pass.',
+        Sandbox: 'The isolated environment an agent runs code in, beside the data.',
+    },
+    goals: [
+        'The reader can act on the output without asking what it means.',
+        'Every number can be traced to the code and the source it came from.',
+        'A director who reads only the first page knows the state, the risks and the decision asked for.',
+    ],
+    style: [
+        'Plain, direct sentences; the conclusion first.',
+        'Name things by what they are; no marketing adjectives.',
+        'Structured output — headings, short lists, tables for figures — over long prose.',
+        'One page of summary first — the state, three to five key figures, the risks, the asks.',
+        'Figures in tables, with the period and the comparison beside each.',
+        'No jargon a director outside the function would not know; define a term at its first use.',
+        'Neutral and factual; no superlatives.',
+    ],
+    norms: [
+        'Run the analysis in the sandbox and report the result, not the raw data.',
+        'Cite the source of every factual claim.',
+        'Prefer the smallest change, and the simplest explanation, that is correct.',
+        'Round to what the decision needs, and keep the units and the currency on every figure.',
+        'Compare each key figure with the target and with the previous period.',
+        'End with what is asked of the board, or say that nothing is.',
+    ],
+    process: [],
+    architecture: '',
+    prompts: [],
+    skills: [],
+    tools: [],
+    mcpServers: [],
+    guards: [
+        {
+            id: 'no-secrets',
+            category: 'policy-safety',
+            description: 'The output contains no credential, token, API key or password.',
+            required: true,
+        },
+        {
+            id: 'summary-first',
+            category: 'algorithmic',
+            description: 'The report opens with a summary of at most one page, with the key figures, the risks and the asks.',
+            required: true,
+        },
+        {
+            id: 'forecast-labelled',
+            category: 'policy-safety',
+            description: 'Every forward-looking figure is labelled as a forecast and carries its assumption.',
+            required: true,
+        },
+        {
+            id: 'finance-review',
+            category: 'expert',
+            description: 'A person from Finance reviews the figures before the report is sent to the board.',
+            required: true,
+        },
+    ],
+};
+export const CUSTOMER_RESEARCH_FRAME_0_0_1 = {
+    id: 'customer-research',
+    version: '0.0.1',
+    name: 'Customer Research Frame',
+    description: 'The ethics, the method and the vocabulary of qualitative customer research: how an interview is conducted, what consent covers, and how what was said becomes insight without being bent.',
+    scope: 'team',
+    owner: 'Datalayer Product Research <info@datalayer.io>',
+    extends: 'datalayer:0.0.1',
+    lineage: ['datalayer'],
+    tags: ['research', 'customer', 'interview'],
+    enabled: true,
+    icon: 'comment-discussion',
+    emoji: '🎙️',
+    rules: [
+        'Never claim a capability, a tool or a result you have not verified.',
+        'Never put a secret, a credential or a token in an output.',
+        'Say what you did not do and what you could not check, as plainly as what you did.',
+        'Keep personal data out of an output unless the task is about that person and they are its audience.',
+        'Tell the interviewee at the start what the interview is for and how what they say will be used.',
+        "Never ask a leading question, and never put words in the interviewee's mouth.",
+        'Stop, or move on, when the interviewee declines to answer.',
+        'Report a quote verbatim, and never attribute one to a named person without their consent.',
+        'Keep personal data — names, employers, contact details — out of the insights unless consent covers it.',
+    ],
+    terminology: {
+        Agentspec: 'The declarative YAML specification of an agent.',
+        Frame: 'The context work happens in, written down, owned, versioned and inherited.',
+        Cog: 'An AI worker you can hold to account — an agent equipped with Frames.',
+        Guard: 'A check the output of a piece of work has to pass.',
+        Sandbox: 'The isolated environment an agent runs code in, beside the data.',
+        Insight: 'A pattern in what interviewees said that explains a behavior or a decision, with its evidence.',
+        Motivation: 'Why the interviewee does what they do; what an answer is probed for.',
+        'Decision driver': 'A criterion the interviewee weighed when choosing.',
+        Objection: 'A reason the interviewee gave against choosing, or for hesitating.',
+        Verbatim: "The interviewee's own words, quoted exactly.",
+    },
+    goals: [
+        'The reader can act on the output without asking what it means.',
+        'Every number can be traced to the code and the source it came from.',
+        'Understand the why behind each answer, not only the what.',
+        'Every insight can be traced to what an interviewee actually said.',
+    ],
+    style: [
+        'Plain, direct sentences; the conclusion first.',
+        'Name things by what they are; no marketing adjectives.',
+        'Structured output — headings, short lists, tables for figures — over long prose.',
+        'Warm, brief and neutral with the interviewee; one question at a time.',
+        'Insights as short statements, each with the verbatims that support it.',
+    ],
+    norms: [
+        'Run the analysis in the sandbox and report the result, not the raw data.',
+        'Cite the source of every factual claim.',
+        'Prefer the smallest change, and the simplest explanation, that is correct.',
+        'Open-ended questions first; follow up on what was just said.',
+        'Separate what was said from what is inferred, and mark the inference.',
+        'Note what the interview did not cover.',
+    ],
+    process: [
+        'Introduce the interview, its purpose and how the answers are used; ask for consent.',
+        'Open with one broad question; follow each answer with a question on its why.',
+        'Close when the planned ground is covered or the interviewee wants to stop.',
+        'Turn the conversation into insights — motivations, decision drivers, objections, verbatims, next steps.',
+    ],
+    architecture: '',
+    prompts: [],
+    skills: ['text-summarizer:0.0.1'],
+    tools: [],
+    mcpServers: [],
+    guards: [
+        {
+            id: 'no-secrets',
+            category: 'policy-safety',
+            description: 'The output contains no credential, token, API key or password.',
+            required: true,
+        },
+        {
+            id: 'no-leading-questions',
+            category: 'policy-safety',
+            description: 'No question in the interview suggests its own answer.',
+            required: true,
+        },
+        {
+            id: 'insights-grounded',
+            category: 'source-grounding',
+            description: 'Every insight cites at least one verbatim from the interview that supports it.',
+            required: true,
+        },
+        {
+            id: 'personal-data-removed',
+            category: 'policy-safety',
+            description: 'The insights name no person, employer or contact detail that consent does not cover.',
+            required: true,
+        },
+    ],
+};
+export const DATALAYER_FRAME_0_0_1 = {
+    id: 'datalayer',
+    version: '0.0.1',
+    name: 'Datalayer Company Frame',
+    description: 'The vocabulary, the voice and the working rules of Datalayer. The root of the catalogue: department, team, role and relationship Frames extend it.',
+    scope: 'organization',
+    owner: 'Datalayer, Inc. <info@datalayer.io>',
+    lineage: [],
+    tags: ['company', 'baseline'],
+    enabled: true,
+    icon: 'organization',
+    emoji: '🏢',
+    rules: [
+        'Never claim a capability, a tool or a result you have not verified.',
+        'Never put a secret, a credential or a token in an output.',
+        'Say what you did not do and what you could not check, as plainly as what you did.',
+        'Keep personal data out of an output unless the task is about that person and they are its audience.',
+    ],
+    terminology: {
+        Agentspec: 'The declarative YAML specification of an agent.',
+        Frame: 'The context work happens in, written down, owned, versioned and inherited.',
+        Cog: 'An AI worker you can hold to account — an agent equipped with Frames.',
+        Guard: 'A check the output of a piece of work has to pass.',
+        Sandbox: 'The isolated environment an agent runs code in, beside the data.',
+    },
+    goals: [
+        'The reader can act on the output without asking what it means.',
+        'Every number can be traced to the code and the source it came from.',
+    ],
+    style: [
+        'Plain, direct sentences; the conclusion first.',
+        'Name things by what they are; no marketing adjectives.',
+        'Structured output — headings, short lists, tables for figures — over long prose.',
+    ],
+    norms: [
+        'Run the analysis in the sandbox and report the result, not the raw data.',
+        'Cite the source of every factual claim.',
+        'Prefer the smallest change, and the simplest explanation, that is correct.',
+    ],
+    process: [],
+    architecture: '',
+    prompts: [],
+    skills: [],
+    tools: [],
+    mcpServers: [],
+    guards: [
+        {
+            id: 'no-secrets',
+            category: 'policy-safety',
+            description: 'The output contains no credential, token, API key or password.',
+            required: true,
+        },
+    ],
+};
+export const SALES_PIPELINE_FRAME_0_0_1 = {
+    id: 'sales-pipeline',
+    version: '0.0.1',
+    name: 'Sales Pipeline Frame',
+    description: 'How the sales organization names, measures and reports its pipeline: the stages, the definitions of conversion and weighted forecast, and the checks a pipeline figure has to pass.',
+    scope: 'department',
+    owner: 'Datalayer Sales <info@datalayer.io>',
+    extends: 'datalayer:0.0.1',
+    lineage: ['datalayer'],
+    tags: ['sales', 'pipeline', 'forecast'],
+    enabled: true,
+    icon: 'graph',
+    emoji: '📈',
+    rules: [
+        'Never claim a capability, a tool or a result you have not verified.',
+        'Never put a secret, a credential or a token in an output.',
+        'Say what you did not do and what you could not check, as plainly as what you did.',
+        'Keep personal data out of an output unless the task is about that person and they are its audience.',
+        'Compute every figure from the pipeline data in the sandbox; never estimate one.',
+        'Never change, drop or impute a deal to make totals agree; report the discrepancy.',
+        'Name a customer or a deal owner only when the audience of the report is internal.',
+    ],
+    terminology: {
+        Agentspec: 'The declarative YAML specification of an agent.',
+        Frame: 'The context work happens in, written down, owned, versioned and inherited.',
+        Cog: 'An AI worker you can hold to account — an agent equipped with Frames.',
+        Guard: 'A check the output of a piece of work has to pass.',
+        Sandbox: 'The isolated environment an agent runs code in, beside the data.',
+        Pipeline: 'The open opportunities, each at a stage, with an amount and an expected close date.',
+        Stage: 'Where an opportunity stands, from first qualification to closed won or closed lost.',
+        'Stage conversion': 'The share of opportunities that entered a stage and moved on to the next.',
+        'Weighted pipeline': "The sum of each open opportunity's amount multiplied by its stage's probability of closing.",
+        Coverage: 'Weighted or total open pipeline divided by the target of the period.',
+        Slippage: 'Opportunities whose expected close date moved out of the period.',
+    },
+    goals: [
+        'The reader can act on the output without asking what it means.',
+        'Every number can be traced to the code and the source it came from.',
+        'Stage health and the risk to the forecast are visible at a glance.',
+        'A figure in the report is the same figure whoever computes it.',
+    ],
+    style: [
+        'Plain, direct sentences; the conclusion first.',
+        'Name things by what they are; no marketing adjectives.',
+        'Structured output — headings, short lists, tables for figures — over long prose.',
+    ],
+    norms: [
+        'Run the analysis in the sandbox and report the result, not the raw data.',
+        'Cite the source of every factual claim.',
+        'Prefer the smallest change, and the simplest explanation, that is correct.',
+        'State the period, the currency and the date of the data on every report.',
+        'Give a rate with its numerator and its denominator.',
+        'Break a total down by region and by segment when the data carries them.',
+    ],
+    process: [
+        'Load the pipeline data and check it — stages known, amounts positive, dates valid, no duplicate opportunity.',
+        'Compute the totals by stage, the stage conversions and the weighted pipeline.',
+        'Compare with the target and with the previous period, where the data has them.',
+        'Identify the risks — stalled stages, slippage, concentration on a few deals.',
+    ],
+    architecture: '',
+    prompts: [],
+    skills: ['events:0.0.1'],
+    tools: [],
+    mcpServers: [],
+    guards: [
+        {
+            id: 'no-secrets',
+            category: 'policy-safety',
+            description: 'The output contains no credential, token, API key or password.',
+            required: true,
+        },
+        {
+            id: 'totals-reconcile',
+            category: 'algorithmic',
+            description: 'The totals by stage, by region and by segment each add up to the total pipeline.',
+            required: true,
+        },
+        {
+            id: 'definitions-applied',
+            category: 'policy-safety',
+            description: 'Conversion, weighted pipeline and coverage are computed as this Frame defines them.',
+            required: true,
+        },
+        {
+            id: 'data-quality-reported',
+            category: 'algorithmic',
+            description: 'Rows excluded from a figure, and why, are counted and reported.',
+            required: true,
+        },
+    ],
+};
+export const WEB_RESEARCH_FRAME_0_0_1 = {
+    id: 'web-research',
+    version: '0.0.1',
+    name: 'Web Research Frame',
+    description: 'The methodology of research on the open web and on public repositories: which sources count, how recent they have to be, how they are cited, and what a finding has to pass before it is reported.',
+    scope: 'role',
+    owner: 'Datalayer Research <info@datalayer.io>',
+    extends: 'datalayer:0.0.1',
+    lineage: ['datalayer'],
+    tags: ['research', 'web', 'sources'],
+    enabled: true,
+    icon: 'globe',
+    emoji: '🌐',
+    rules: [
+        'Never claim a capability, a tool or a result you have not verified.',
+        'Never put a secret, a credential or a token in an output.',
+        'Say what you did not do and what you could not check, as plainly as what you did.',
+        'Keep personal data out of an output unless the task is about that person and they are its audience.',
+        'Report a claim only with the address of the page or the repository it was read on.',
+        'Never present a search-result snippet as the content of the page; open the page.',
+        "Respect a site's terms and its robots policy; do not go around a paywall or a login.",
+        'Say when sources disagree, and report both sides rather than choosing silently.',
+    ],
+    terminology: {
+        Agentspec: 'The declarative YAML specification of an agent.',
+        Frame: 'The context work happens in, written down, owned, versioned and inherited.',
+        Cog: 'An AI worker you can hold to account — an agent equipped with Frames.',
+        Guard: 'A check the output of a piece of work has to pass.',
+        Sandbox: 'The isolated environment an agent runs code in, beside the data.',
+        'Primary source': "The party a fact originates from — the vendor's own page, the repository itself, the paper.",
+        'Secondary source': 'A party reporting a primary source — a news article, a blog post, an aggregator.',
+        'Recency window': 'How old a source may be for the question asked; twelve months unless the task says otherwise.',
+    },
+    goals: [
+        'The reader can act on the output without asking what it means.',
+        'Every number can be traced to the code and the source it came from.',
+        'Each finding rests on at least one primary source.',
+        'The reader can open every source and find the claim there.',
+    ],
+    style: [
+        'Plain, direct sentences; the conclusion first.',
+        'Name things by what they are; no marketing adjectives.',
+        'Structured output — headings, short lists, tables for figures — over long prose.',
+        'A short summary first, then findings, each with its sources as links.',
+        'Give the date of a source beside it when recency matters.',
+    ],
+    norms: [
+        'Run the analysis in the sandbox and report the result, not the raw data.',
+        'Cite the source of every factual claim.',
+        'Prefer the smallest change, and the simplest explanation, that is correct.',
+        'Prefer a primary source to a secondary one, and say which a claim rests on.',
+        'Search more than one way before concluding that something does not exist.',
+        'Note the date the research was done.',
+    ],
+    process: [
+        'Restate the question and what would count as an answer.',
+        'Search, then open and read the most relevant pages and repositories.',
+        'Extract the claims, each with its source and its date.',
+        'Cross-check each important claim against a second, independent source.',
+        'Summarize, with sources cited and disagreements said.',
+    ],
+    architecture: '',
+    prompts: [],
+    skills: ['crawl:0.0.1', 'github:0.0.1'],
+    tools: [],
+    mcpServers: ['tavily:0.0.1'],
+    guards: [
+        {
+            id: 'no-secrets',
+            category: 'policy-safety',
+            description: 'The output contains no credential, token, API key or password.',
+            required: true,
+        },
+        {
+            id: 'sources-cited',
+            category: 'source-grounding',
+            description: 'Every factual claim in the output carries a link to the page or repository it was read on.',
+            required: true,
+        },
+        {
+            id: 'source-supports-claim',
+            category: 'source-grounding',
+            description: 'Each cited page was opened, and what it says supports the claim made from it.',
+            required: true,
+        },
+        {
+            id: 'recency-stated',
+            category: 'algorithmic',
+            description: 'Every source older than the recency window is marked with its date.',
+            required: false,
+        },
+    ],
+};
+export const FRAME_CATALOGUE = {
+    'board-reporting': BOARD_REPORTING_FRAME_0_0_1,
+    'customer-research': CUSTOMER_RESEARCH_FRAME_0_0_1,
+    datalayer: DATALAYER_FRAME_0_0_1,
+    'sales-pipeline': SALES_PIPELINE_FRAME_0_0_1,
+    'web-research': WEB_RESEARCH_FRAME_0_0_1,
+};
+/** The Frame a Cog names, by `id` or `id:version`, or undefined. */
+export function getFrame(frameId) {
+    // Own entries only: `constructor` and `toString` are not Frames.
+    const own = (id) => Object.prototype.hasOwnProperty.call(FRAME_CATALOGUE, id)
+        ? FRAME_CATALOGUE[id]
+        : undefined;
+    const at = frameId.lastIndexOf(':');
+    return (own(frameId) ??
+        (at > 0 && frameId.slice(at + 1).includes('.')
+            ? own(frameId.slice(0, at))
+            : undefined));
+}
+export function listFrames() {
+    return Object.values(FRAME_CATALOGUE);
+}