@dharma-ai-labs/agent-fabric 0.2.186 → 0.2.188

package/dist/schemas/repository-candidate-upload-v1.schema.json

@@ -0,0 +1,60 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/repository-candidate-upload/v1",
+  "title": "Repository Candidate Upload",
+  "description": "Device-signed source submission. Restoration context and attempt are operation provenance, not enrollment or activation authority.",
+  "type": "object", "additionalProperties": false,
+  "required": ["schema", "operationId", "workspaceId", "repositoryBindingId", "repositoryAgentId", "sourceSnapshotHash", "sourceManifestHash", "consolidation", "snapshot"],
+  "properties": {
+    "schema": { "const": "dharma.repository-candidate-upload/v1" },
+    "operationId": { "$ref": "#/$defs/hash" },
+    "workspaceId": { "$ref": "#/$defs/uuid" },
+    "repositoryBindingId": { "$ref": "#/$defs/uuid" },
+    "repositoryAgentId": { "$ref": "#/$defs/uuid" },
+    "sourceSnapshotHash": { "$ref": "#/$defs/hash" },
+    "sourceManifestHash": { "$ref": "#/$defs/hash" },
+    "restorationAttempt": { "$ref": "#/$defs/uuid" },
+    "restorationContext": {
+      "type": "object", "additionalProperties": false, "required": ["headCandidateId", "priorReleaseId"],
+      "properties": { "headCandidateId": { "$ref": "#/$defs/uuid" }, "priorReleaseId": { "$ref": "#/$defs/uuid" } }
+    },
+    "consolidation": {
+      "type": "object", "additionalProperties": false,
+      "required": ["mode", "includeApprovedOutputs", "requireAtlasAssociation"],
+      "properties": {
+        "mode": { "enum": ["initial_repository", "repository_update"] },
+        "includeApprovedOutputs": { "const": true }, "requireAtlasAssociation": { "const": true },
+        "expectedLatestSourceFingerprint": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "snapshot": {
+      "type": "object", "additionalProperties": false, "required": ["schema", "capturedAt", "manifest", "blobs"],
+      "properties": {
+        "schema": { "const": "dharma.repository-package-snapshot/v1" },
+        "capturedAt": { "type": "string", "format": "date-time" },
+        "manifest": { "anyOf": [
+          { "$ref": "https://schemas.dharma-ai.io/repository-package/v1" },
+          { "$ref": "https://schemas.dharma-ai.io/repository-package/v2" },
+          { "$ref": "https://schemas.dharma-ai.io/repository-package/v3" }
+        ] },
+        "blobs": { "type": "array", "maxItems": 4096, "items": {
+          "type": "object", "additionalProperties": false, "required": ["sha256", "contentBase64"],
+          "properties": { "sha256": { "$ref": "#/$defs/hash" },
+            "contentBase64": { "type": "string", "maxLength": 8388608, "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$(?![\\s\\S])" } }
+        } }
+      }
+    }
+  },
+  "allOf": [
+    { "if": { "properties": { "consolidation": { "type": "object", "properties": { "mode": { "const": "initial_repository" } } } } },
+      "then": { "properties": { "consolidation": { "type": "object", "properties": { "expectedLatestSourceFingerprint": false } } } } },
+    { "if": { "anyOf": [{ "required": ["restorationAttempt"] }, { "required": ["restorationContext"] }] },
+      "then": { "properties": { "consolidation": {
+        "type": "object", "properties": { "mode": { "const": "repository_update" }, "expectedLatestSourceFingerprint": { "$ref": "#/$defs/hash" } }, "required": ["expectedLatestSourceFingerprint"]
+      } } } }
+  ],
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$(?![\\s\\S])" },
+    "uuid": { "type": "string", "pattern": "^[a-f0-9]{8}-[a-f0-9]{4}-[1-8][0-9a-f]{3}-[89ab][a-f0-9]{3}-[a-f0-9]{12}$(?![\\s\\S])" }
+  }
+}

package/dist/schemas/repository-knowledge-restoration-v1.schema.json

@@ -0,0 +1,16 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dharma-ai.io/repository-knowledge-restoration/v1",
+  "title": "Candidate-only Repository Knowledge Restoration Reference",
+  "description": "Metadata from a currently usable prior signed release, returned only after current same-repository device and source-policy authorization. This is not installation or reactivation authority. A fresh candidate must independently pass current-head, evaluation, signing and activation gates.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema", "authority", "envelope", "catalogBase64", "manifestBase64"],
+  "properties": {
+    "schema": { "const": "dharma.repository-knowledge-restoration/v1" },
+    "authority": { "const": "candidate_reference_only" },
+    "envelope": { "$ref": "https://schemas.dharma-ai.io/repository-package-envelope/v1" },
+    "catalogBase64": { "type": "string", "minLength": 4, "maxLength": 349528, "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$(?![\\s\\S])" },
+    "manifestBase64": { "type": "string", "minLength": 4, "maxLength": 349528, "pattern": "^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$(?![\\s\\S])" }
+  }
+}

package/dist/schemas/task-action.schema.json

@@ -34,7 +34,7 @@
     "requiredSkills": { "type": "array", "maxItems": 50, "items": { "type": "object", "additionalProperties": false, "required": ["skillId", "version", "commit", "contentHash"], "properties": { "skillId": { "type": "string", "minLength": 1, "maxLength": 200 }, "version": { "type": "string", "minLength": 1, "maxLength": 100 }, "commit": { "type": "string", "pattern": "^[A-Fa-f0-9]{40,64}$" }, "contentHash": { "type": "string", "pattern": "^(sha256|blake3):[A-Fa-f0-9]{32,128}$" } } } },
     "authority": { "type": "object", "additionalProperties": false, "required": ["readPaths", "writePaths", "commands", "network", "git"], "properties": { "readPaths": { "type": "array", "items": { "type": "string" } }, "writePaths": { "type": "array", "items": { "type": "string" } }, "commands": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["commandId"], "properties": { "commandId": { "type": "string", "minLength": 1, "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$" } } } }, "network": { "type": "string", "enum": ["deny", "package_registry_only", "allowlisted_domains", "inherit_local_provider"] }, "git": { "type": "string", "enum": ["read_only", "task_branch", "merge_allowed", "deploy_allowed"] }, "allowlistedDomains": { "type": "array", "items": { "type": "string" }, "default": [] } } },
     "execution": { "type": "object", "additionalProperties": false, "required": ["isolation", "timeoutSeconds", "leaseSeconds", "maximumConcurrentAgents"], "properties": { "isolation": { "const": "git_worktree" }, "timeoutSeconds": { "type": "integer", "minimum": 1 }, "leaseSeconds": { "type": "integer", "minimum": 1 }, "maximumConcurrentAgents": { "type": "integer", "minimum": 1 } } },
-    "acceptance": { "type": "object", "additionalProperties": false, "required": ["commands", "requiredArtifacts"], "properties": { "commands": { "type": "array", "items": { "type": "object", "additionalProperties": false, "required": ["commandId"], "properties": { "commandId": { "type": "string", "minLength": 1, "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$" } } } }, "requiredArtifacts": { "type": "array", "items": { "type": "string" } }, "externalEffectReceiptCommandId": { "type": "string", "minLength": 1, "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$" } } },
+"acceptance": { "type": "object", "additionalProperties": false, "required": ["commands", "requiredArtifacts"], "properties": { "commands": { "type": "array", "maxItems": 98, "items": { "type": "object", "additionalProperties": false, "required": ["commandId"], "properties": { "commandId": { "type": "string", "minLength": 1, "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$" } } } }, "requiredArtifacts": { "type": "array", "maxItems": 100, "items": { "type": "string", "minLength": 1, "maxLength": 1000 } }, "externalEffectReceiptCommandId": { "type": "string", "minLength": 1, "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$" } } },
     "budget": { "type": "object", "additionalProperties": false, "required": ["mode", "maximumDharmaCostCents"], "properties": { "mode": { "type": "string", "enum": ["byok_local", "byok_cloud", "dharma_managed"] }, "maximumDharmaCostCents": { "type": "integer", "minimum": 0 }, "maximumProviderCostCents": { "type": ["integer", "null"], "minimum": 0 } } },
     "expiresAt": { "type": "string", "format": "date-time" }
   },

package/dist/schemas/task-envelope.schema.json

@@ -316,6 +316,7 @@
       "properties": {
         "commands": {
           "type": "array",
+          "maxItems": 98,
           "items": {
             "type": "object",
             "additionalProperties": false,
@@ -331,8 +332,11 @@
         },
         "requiredArtifacts": {
           "type": "array",
+          "maxItems": 100,
           "items": {
-            "type": "string"
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 1000
           }
         },
         "externalEffectReceiptCommandId": {

package/dist/usage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS,QAE4W,CAAC"}
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,SAAS,QAIyY,CAAC"}

package/dist/usage.js

@@ -1,5 +1,7 @@
 const COMMAND_USAGE = 'Usage: dharma <bootstrap|onboard|login|status|sessions start|sessions status|sessions work|sessions stop|sessions audit|demo connect|demo transport-connect|demo status|demo package|demo package-status|demo watch|demo watch-enable|demo watch-status|demo watch-disable|demo role|demo peers|demo ask|demo reply|demo inbox|demo ack|demo resume|demo signing-client-proof|demo signing-owner-proof|providers list|repositories discover|repositories connect|repositories list|repositories status|repositories snapshot|repositories recover-installer|repositories role-register|repositories role-discover|repositories ask|repositories reply|workspace add|workspace sync|workspace recover-registry|evidence preview|evidence capture|evidence capture-batch|evidence sync|evidence run-request|relay container-entrypoint|relay probe|relay start|relay stop|relay upgrade|relay autostart status|relay autostart disable|assistant chat|assistant history|assistant status|assistant approve|assistant reject|organization status|agents list|agents bind-runtime|evaluations validate|evaluations launch|evaluations status|evaluations results|experiments list|experiments run|failures list|remediations list|remediations act|tasks list|tasks dispatch|handoffs list|skills list|skills release|skills rollout|skills rollback|skills sync|skills status|skills verify|usage list> [options]';
 export const CLI_USAGE = COMMAND_USAGE + '\n\nAgent setup: bootstrap --setup-reference <public-reference> --setup-recipient-membership-id <membership> --setup-scope-digest <sha256> --setup-contract-digest <sha256> --complete [exact source/portal options]. Run inside the coding agent; approve the exact device in the browser. No terminal secret input. --dry-run produces a grant-free plan. Reference setup cannot combine with --grant, --grant-prompt, --resume, replacement, join or disabled relay startup. Legacy private setup: bootstrap --grant-prompt [exact portal options], with USER-only private terminal entry. Enrolled recovery: bootstrap --resume --complete [exact scoped options], with no grant/reference.'
     + '\n\nReturning device: login --unattended opts in to reuse the approved identity; login --no-unattended disables automatic selection; --dry-run plans either change. login --resume connects once without opting in. login --reauthenticate explicitly requests fresh browser approval for the original protected identity to recover its enrollment anchor; it never replaces keys or configuration. Opted-in bootstrap --complete can omit grants only for the same registered repository and approved policy revision. A compatible membership-guarded server admission response is required. Device admission does not sign in a provider or establish repository readiness. Standing relay lifecycle remains controlled by relay autostart commands.'
-    + '\n\nRepository source conflicts: repositories source-resolve --workspace-id <workspace> [--dry-run | --prepare | --apply --plan-hash <sha256> --choose-reviewed-local]. Default is a read-only plan. Review and merge authorized source before preparation; approval is exact-input, expires after 15 minutes and does not publish. Existing relay/evaluation/signing gates remain required.';
+    + '\n\nRepository source conflicts: repositories source-resolve --workspace-id <workspace> [--dry-run | --prepare | --apply --plan-hash <sha256> --choose-reviewed-local]. Default is a read-only plan. Review and merge authorized source before preparation; approval is exact-input, expires after 15 minutes and does not publish. Existing relay/evaluation/signing gates remain required.'
+    + '\n\nAfter a clear-baseline rollback: repositories restore --workspace-id <workspace> --dry-run reads a current-policy stable signed catalog and plans a fresh candidate. With the owned relay stopped, --apply --plan-hash <reviewed-hash> submits that exact plan through normal evaluation/signing. It never reactivates an archived release, changes enrollment or resets history. Resume the owned relay only after submission; readiness and activation remain separate checks.'
+    + '\n\nFor an unresolved restoration upload, an empty lookup is not cancellation. With the owned relay stopped, --apply --plan-hash <original-hash> --fence-upload requests metadata-only fencing under current authority. An admitted operation is returned for ordinary recovery; only a terminal server fence permits checkpoint archival and a new dry-run plan. Fencing does not upload source or activate a release.';
 //# sourceMappingURL=usage.js.map

package/dist/usage.js.map

@@ -1 +1 @@
-{"version":3,"file":"usage.js","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,g1CAAg1C,CAAC;AAEv2C,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,GAAG,iqBAAiqB;MACtsB,0tBAA0tB;MAC1tB,8XAA8X,CAAC"}
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../src/usage.ts"],"names":[],"mappings":"AAAA,MAAM,aAAa,GAAG,g1CAAg1C,CAAC;AAEv2C,MAAM,CAAC,MAAM,SAAS,GAAG,aAAa,GAAG,iqBAAiqB;MACtsB,0tBAA0tB;MACxtB,8XAA8X;MAC9X,sdAAsd;MACtd,yZAAyZ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dharma-ai-labs/agent-fabric",
-  "version": "0.2.186",
+  "version": "0.2.188",
   "description": "Local-first CLI for connecting coding agents to Dharma evaluation, orchestration, and signed Skill delivery",
   "license": "MIT",
   "homepage": "https://github.com/dharma-ai-labs/dharma-agent-fabric/tree/main/packages/cli#readme",
@@ -34,16 +34,16 @@
     "test": "node --test dist/*.test.js"
   },
   "dependencies": {
-    "@dharma-ai-labs/agent-fabric-contracts": "0.1.15",
-    "@dharma-ai-labs/agent-fabric-evidence-reduction": "0.2.32",
+    "@dharma-ai-labs/agent-fabric-contracts": "0.1.16",
+    "@dharma-ai-labs/agent-fabric-evidence-reduction": "0.2.33",
     "@dharma-ai-labs/agent-fabric-local-vault": "0.1.28",
     "@dharma-ai-labs/agent-fabric-policy": "0.1.4",
-    "@dharma-ai-labs/agent-fabric-provider-adapters": "0.1.33",
+    "@dharma-ai-labs/agent-fabric-provider-adapters": "0.1.34",
     "@dharma-ai-labs/agent-fabric-relay-client": "0.2.32",
     "@dharma-ai-labs/agent-fabric-sdk": "0.1.10",
     "@dharma-ai-labs/agent-fabric-secure-store": "0.1.9",
     "@dharma-ai-labs/agent-fabric-skill-manager": "0.2.11",
-    "@dharma-ai-labs/agent-fabric-task-runner": "0.1.35",
+    "@dharma-ai-labs/agent-fabric-task-runner": "0.1.36",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",
     "fs-native-extensions": "1.5.1"