@evomap/evolver-core 2.0.0-beta.2 → 2.0.0-beta.22

package/dist/wire/geneHints.d.ts

@@ -3,15 +3,14 @@
  * router (routing_hint) or restrict tools (tool_policy). Ported from v1 src/gep/schemas/gene.js (PR #93,
  * "wire routing_hint and tool_policy into Gene schema").
  *
- * v2-delta (feature-gate): these fields are NOT yet in @evomap/gep-sdk's gene.schema.json
- * (additionalProperties:false), so a Gene carrying them is not a schema-valid gep-sdk asset until a
- * gep-sdk gene-schema bump — exactly how Capsule's proof_of_work / resolution_status were v2-delta before
- * the 1.11.0 bump made them first-class. That invalidity is surfaced ONLY by the advisory validateWire
- * (wire/schemaGate) — at intake on the hint-stripped core, and via the evolver_gep_build pre-publish
- * preview — plus the hub's own schema check on receipt; there is NO enforced local egress gate (the
- * publish/egress path is sanitize-only and does not call validateWire). Until a bump the hints ride along
- * LOCALLY (intake pool + v1→v2 import fidelity); nothing in this repo wires them to a runtime consumer yet
- * (the proxy model router's `gene_hint` seam is the eventual tier consumer — see
+ * routing_hint / tool_policy and the K_auto coordinates are first-class in @evomap/gep-sdk 1.13.0, so they
+ * are normalized here rather than stripped. generation_meta and model_name remain local-only annotations for
+ * now. The advisory validateWire still surfaces any malformed shape — at intake on the local-only slice, and
+ * via the evolver_gep_build pre-publish preview — plus the hub's own schema check on receipt; there is NO
+ * enforced local egress gate (the publish/egress path is sanitize-only and does not call validateWire).
+ *
+ * Until a future schema bump, nothing in this repo wires these annotations to a runtime consumer yet (the
+ * proxy model router's `gene_hint` seam is the eventual tier consumer — see
  * packages/evolver-proxy/src/router/modelRouter.ts).
  *
  * Enum strings are matched case-sensitively by the consuming router / tool-gate — keep them EXACT. The
@@ -55,7 +54,7 @@ export interface GeneGenerationHeuristics {
     has_corrective_insight?: boolean;
 }
 /**
- * The full provenance + quality metadata block (V1 `gene._source`). Lives on Gene as the v2-delta field
+ * The full provenance + quality metadata block (V1 `gene._source`). Lives on Gene as the local-only field
  * `generation_meta`. `source` is the only required key; the rest is descriptive for reviewers / future
  * governance. `quality_score` is a coarse [0,1] tier-anchored score (evolved 0.7 / distilled 0.4 / manual 0.3
  * baseline + bonuses); `overcame_errors` is the mutation_log copy that the trajectory overcame.
@@ -67,12 +66,56 @@ export interface GenerationMeta {
     overcame_errors?: string[];
 }
 /**
- * The v2-delta hint field names, in one place — the intake gate strips these before the gep-sdk schema check.
- * IMPORTANT: when a gep-sdk gene-schema bump makes one of these first-class, REMOVE it from this list in the
- * same change. Otherwise intakeGene keeps stripping a now-validated field before validateWire (fail-open — the
- * field's new schema constraints go unchecked at intake) while asset_id still commits it.
+ * K_auto projection-key coordinates a Gene MAY carry so its record is machine-decidable in the strict
+ * automatic-governance subdomain (paper §K_auto; validator: algo/kautoValidator.ts). These four fields are the
+ * DEDICATED, structured form of the coordinates that production previously expressed only through proxy fields
+ * (category≈claim, signals_match≈scope, model_name≈runtime, validation≈verifier). The strict measurement
+ * (bench/thesis/result-kauto-strict.json) found the dedicated fields populated at 0% and three coordinates
+ * (version/claim/scope) undecidable for 100% of 5,665 real rows — the writer side simply never emitted them.
+ *
+ * Shapes mirror gep-sdk 1.13.0 gene.schema.json (PR: add Gene K_auto coordinates), the schema-authoritative
+ * definition, EXACTLY so a gene minted here validates once the SDK bump lands:
+ *   claims:           {predicate:string, kind?:'behavioral'|'structural'|'performance'|'safety'}[]
+ *   scope:            {signals:string[], predicate?:string}
+ *   runtime_profile:  {runtime:string, env_class?:'ci'|'local'|'prod'|'sandbox'}
+ *   verifier_profile: {verifier:string, decision?:'pass'|'fail'|'inconclusive'}
+ *
+ * Since gep-sdk 1.13.0, these four coordinates are first-class Gene fields: the intake schema gate validates
+ * their dedicated structure instead of stripping them as local-only hints. They still ride along in asset_id
+ * (canonicalize hashes every own key), so a silent strip on the hub side would change the hashed bytes and fail
+ * gene_asset_id_verification_failed; the hub allowlist admits them for exactly this reason.
+ */
+export declare const CLAIM_KINDS: readonly ["behavioral", "structural", "performance", "safety"];
+export type ClaimKind = (typeof CLAIM_KINDS)[number];
+export interface GeneClaim {
+    predicate: string;
+    kind?: ClaimKind;
+}
+export declare const ENV_CLASSES: readonly ["ci", "local", "prod", "sandbox"];
+export type EnvClass = (typeof ENV_CLASSES)[number];
+export interface GeneRuntimeProfile {
+    runtime: string;
+    env_class?: EnvClass;
+}
+export declare const VERIFIER_DECISIONS: readonly ["pass", "fail", "inconclusive"];
+export type VerifierDecision = (typeof VERIFIER_DECISIONS)[number];
+export interface GeneVerifierProfile {
+    verifier: string;
+    decision?: VerifierDecision;
+}
+export interface GeneScope {
+    signals: string[];
+    predicate?: string;
+}
+/**
+ * The still-local-only Gene field names, in one place — the intake gate strips these before the gep-sdk schema
+ * check. IMPORTANT: when a gep-sdk gene-schema bump makes one of these first-class, REMOVE it from this list in
+ * the same change. Otherwise intakeGene keeps stripping a now-validated field before validateWire (fail-open —
+ * the field's new schema constraints go unchecked at intake) while asset_id still commits it.
+ *
+ * Only generation_meta and model_name remain local-only annotations for now, so the strip list is just those two.
  */
-export declare const GENE_HINT_FIELDS: readonly ["routing_hint", "tool_policy", "generation_meta"];
+export declare const GENE_HINT_FIELDS: readonly ["generation_meta", "model_name"];
 /**
  * Normalize an arbitrary routing_hint fragment to a strict { tier?, reasoning_level? } object, or null.
  * Unknown enum values are dropped (a stray tier would fail the consumer's exhaustive match and route as if
@@ -101,5 +144,34 @@ export declare function normalizeToolPolicy(raw: unknown): GeneToolPolicy | null
  * alone is a meaningful provenance tag); only a missing/unknown source yields null.
  */
 export declare function normalizeGenerationMeta(raw: unknown): GenerationMeta | null;
-/** Strip the v2-delta hint fields from a gene-shaped object (used to validate the gep-sdk-known core). */
+/**
+ * Normalize an arbitrary claims fragment to a strict GeneClaim[] or null. A claim survives only with a
+ * non-empty string `predicate`; `kind` is kept only if it is one of the closed enum members (a stray kind is
+ * dropped, mirroring the enum typeguards for tier/severity). Predicates are trimmed and length-bounded so a
+ * runaway string cannot bloat the hashed bytes. An empty result → null ("no explicit claim"), which keeps the
+ * gene OUT of strict K_auto rather than fabricating a coordinate.
+ */
+export declare function normalizeClaims(raw: unknown): GeneClaim[] | null;
+/**
+ * Normalize an arbitrary scope fragment to a strict { signals, predicate? } object or null. `signals` keeps only
+ * non-empty trimmed strings; the block collapses to null when none survive (an empty signal list is not a scope).
+ * `predicate` is kept only as a non-empty trimmed string. Deliberately lossy like the hint normalizers.
+ */
+export declare function normalizeGeneScope(raw: unknown): GeneScope | null;
+/**
+ * Normalize an arbitrary runtime_profile fragment to { runtime, env_class? } or null. `runtime` must be a
+ * non-empty trimmed string (the coordinate is meaningless without it); `env_class` is kept only if it is a
+ * closed enum member. Note this is DISTINCT from the flat `model_name` field — model_name records WHICH LLM
+ * produced the gene (an authorship/tier signal); runtime_profile records the EXECUTION environment class the
+ * claims were established under. A producer may set either, both, or neither.
+ */
+export declare function normalizeRuntimeProfile(raw: unknown): GeneRuntimeProfile | null;
+/**
+ * Normalize an arbitrary verifier_profile fragment to { verifier, decision? } or null. `verifier` must be a
+ * non-empty trimmed string; `decision` is kept only if it is a closed enum member. This is the verifier IDENTITY
+ * axis (e.g. 'npm-test', 'gep-verify@1.4'); the substantive-command bar the strict validator applies is checked
+ * downstream in kautoValidator.decideVerifier, not here — this layer only shapes the field.
+ */
+export declare function normalizeVerifierProfile(raw: unknown): GeneVerifierProfile | null;
+/** Strip only local-only Gene annotations before validating against the gep-sdk schema. */
 export declare function stripGeneHints(gene: Record<string, unknown>): Record<string, unknown>;

package/dist/wire/geneHints.js

@@ -3,15 +3,14 @@
  * router (routing_hint) or restrict tools (tool_policy). Ported from v1 src/gep/schemas/gene.js (PR #93,
  * "wire routing_hint and tool_policy into Gene schema").
  *
- * v2-delta (feature-gate): these fields are NOT yet in @evomap/gep-sdk's gene.schema.json
- * (additionalProperties:false), so a Gene carrying them is not a schema-valid gep-sdk asset until a
- * gep-sdk gene-schema bump — exactly how Capsule's proof_of_work / resolution_status were v2-delta before
- * the 1.11.0 bump made them first-class. That invalidity is surfaced ONLY by the advisory validateWire
- * (wire/schemaGate) — at intake on the hint-stripped core, and via the evolver_gep_build pre-publish
- * preview — plus the hub's own schema check on receipt; there is NO enforced local egress gate (the
- * publish/egress path is sanitize-only and does not call validateWire). Until a bump the hints ride along
- * LOCALLY (intake pool + v1→v2 import fidelity); nothing in this repo wires them to a runtime consumer yet
- * (the proxy model router's `gene_hint` seam is the eventual tier consumer — see
+ * routing_hint / tool_policy and the K_auto coordinates are first-class in @evomap/gep-sdk 1.13.0, so they
+ * are normalized here rather than stripped. generation_meta and model_name remain local-only annotations for
+ * now. The advisory validateWire still surfaces any malformed shape — at intake on the local-only slice, and
+ * via the evolver_gep_build pre-publish preview — plus the hub's own schema check on receipt; there is NO
+ * enforced local egress gate (the publish/egress path is sanitize-only and does not call validateWire).
+ *
+ * Until a future schema bump, nothing in this repo wires these annotations to a runtime consumer yet (the
+ * proxy model router's `gene_hint` seam is the eventual tier consumer — see
  * packages/evolver-proxy/src/router/modelRouter.ts).
  *
  * Enum strings are matched case-sensitively by the consuming router / tool-gate — keep them EXACT. The
@@ -32,12 +31,37 @@ export const TOOL_POLICY_SEVERITIES = ['warn', 'block'];
  */
 export const GENERATION_SOURCES = ['evolved', 'distilled', 'manual'];
 /**
- * The v2-delta hint field names, in one place — the intake gate strips these before the gep-sdk schema check.
- * IMPORTANT: when a gep-sdk gene-schema bump makes one of these first-class, REMOVE it from this list in the
- * same change. Otherwise intakeGene keeps stripping a now-validated field before validateWire (fail-open — the
- * field's new schema constraints go unchecked at intake) while asset_id still commits it.
+ * K_auto projection-key coordinates a Gene MAY carry so its record is machine-decidable in the strict
+ * automatic-governance subdomain (paper §K_auto; validator: algo/kautoValidator.ts). These four fields are the
+ * DEDICATED, structured form of the coordinates that production previously expressed only through proxy fields
+ * (category≈claim, signals_match≈scope, model_name≈runtime, validation≈verifier). The strict measurement
+ * (bench/thesis/result-kauto-strict.json) found the dedicated fields populated at 0% and three coordinates
+ * (version/claim/scope) undecidable for 100% of 5,665 real rows — the writer side simply never emitted them.
+ *
+ * Shapes mirror gep-sdk 1.13.0 gene.schema.json (PR: add Gene K_auto coordinates), the schema-authoritative
+ * definition, EXACTLY so a gene minted here validates once the SDK bump lands:
+ *   claims:           {predicate:string, kind?:'behavioral'|'structural'|'performance'|'safety'}[]
+ *   scope:            {signals:string[], predicate?:string}
+ *   runtime_profile:  {runtime:string, env_class?:'ci'|'local'|'prod'|'sandbox'}
+ *   verifier_profile: {verifier:string, decision?:'pass'|'fail'|'inconclusive'}
+ *
+ * Since gep-sdk 1.13.0, these four coordinates are first-class Gene fields: the intake schema gate validates
+ * their dedicated structure instead of stripping them as local-only hints. They still ride along in asset_id
+ * (canonicalize hashes every own key), so a silent strip on the hub side would change the hashed bytes and fail
+ * gene_asset_id_verification_failed; the hub allowlist admits them for exactly this reason.
  */
-export const GENE_HINT_FIELDS = ['routing_hint', 'tool_policy', 'generation_meta'];
+export const CLAIM_KINDS = ['behavioral', 'structural', 'performance', 'safety'];
+export const ENV_CLASSES = ['ci', 'local', 'prod', 'sandbox'];
+export const VERIFIER_DECISIONS = ['pass', 'fail', 'inconclusive'];
+/**
+ * The still-local-only Gene field names, in one place — the intake gate strips these before the gep-sdk schema
+ * check. IMPORTANT: when a gep-sdk gene-schema bump makes one of these first-class, REMOVE it from this list in
+ * the same change. Otherwise intakeGene keeps stripping a now-validated field before validateWire (fail-open —
+ * the field's new schema constraints go unchecked at intake) while asset_id still commits it.
+ *
+ * Only generation_meta and model_name remain local-only annotations for now, so the strip list is just those two.
+ */
+export const GENE_HINT_FIELDS = ['generation_meta', 'model_name'];
 function includesEnum(set, v) {
     return typeof v === 'string' && set.includes(v);
 }
@@ -140,7 +164,92 @@ export function normalizeGenerationMeta(raw) {
         out.overcame_errors = errs;
     return out;
 }
-/** Strip the v2-delta hint fields from a gene-shaped object (used to validate the gep-sdk-known core). */
+/**
+ * Normalize an arbitrary claims fragment to a strict GeneClaim[] or null. A claim survives only with a
+ * non-empty string `predicate`; `kind` is kept only if it is one of the closed enum members (a stray kind is
+ * dropped, mirroring the enum typeguards for tier/severity). Predicates are trimmed and length-bounded so a
+ * runaway string cannot bloat the hashed bytes. An empty result → null ("no explicit claim"), which keeps the
+ * gene OUT of strict K_auto rather than fabricating a coordinate.
+ */
+export function normalizeClaims(raw) {
+    if (!Array.isArray(raw))
+        return null;
+    const out = [];
+    for (const item of raw) {
+        if (!item || typeof item !== 'object')
+            continue;
+        const r = item;
+        const predicate = typeof r['predicate'] === 'string' ? r['predicate'].trim().slice(0, 500) : '';
+        if (!predicate)
+            continue;
+        const claim = { predicate };
+        if (includesEnum(CLAIM_KINDS, r['kind']))
+            claim.kind = r['kind'];
+        out.push(claim);
+    }
+    return out.length > 0 ? out : null;
+}
+/**
+ * Normalize an arbitrary scope fragment to a strict { signals, predicate? } object or null. `signals` keeps only
+ * non-empty trimmed strings; the block collapses to null when none survive (an empty signal list is not a scope).
+ * `predicate` is kept only as a non-empty trimmed string. Deliberately lossy like the hint normalizers.
+ */
+export function normalizeGeneScope(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return null;
+    const r = raw;
+    // Trim signals and drop whitespace-only ones (cleanToolList keeps by raw length, which would leak '  ' and an
+    // untrimmed ' x ' into the hashed bytes). A scope signal is an identity/constraint term, so its canonical form
+    // is the trimmed token — the strict validator reads it trimmed anyway (decideScope maps through str()).
+    const signals = Array.isArray(r['signals'])
+        ? r['signals'].filter((x) => typeof x === 'string').map((s) => s.trim()).filter((s) => s.length > 0)
+        : [];
+    if (signals.length === 0)
+        return null;
+    const out = { signals };
+    const predicate = typeof r['predicate'] === 'string' ? r['predicate'].trim().slice(0, 500) : '';
+    if (predicate)
+        out.predicate = predicate;
+    return out;
+}
+/**
+ * Normalize an arbitrary runtime_profile fragment to { runtime, env_class? } or null. `runtime` must be a
+ * non-empty trimmed string (the coordinate is meaningless without it); `env_class` is kept only if it is a
+ * closed enum member. Note this is DISTINCT from the flat `model_name` field — model_name records WHICH LLM
+ * produced the gene (an authorship/tier signal); runtime_profile records the EXECUTION environment class the
+ * claims were established under. A producer may set either, both, or neither.
+ */
+export function normalizeRuntimeProfile(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return null;
+    const r = raw;
+    const runtime = typeof r['runtime'] === 'string' ? r['runtime'].trim().slice(0, 100) : '';
+    if (!runtime)
+        return null;
+    const out = { runtime };
+    if (includesEnum(ENV_CLASSES, r['env_class']))
+        out.env_class = r['env_class'];
+    return out;
+}
+/**
+ * Normalize an arbitrary verifier_profile fragment to { verifier, decision? } or null. `verifier` must be a
+ * non-empty trimmed string; `decision` is kept only if it is a closed enum member. This is the verifier IDENTITY
+ * axis (e.g. 'npm-test', 'gep-verify@1.4'); the substantive-command bar the strict validator applies is checked
+ * downstream in kautoValidator.decideVerifier, not here — this layer only shapes the field.
+ */
+export function normalizeVerifierProfile(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw))
+        return null;
+    const r = raw;
+    const verifier = typeof r['verifier'] === 'string' ? r['verifier'].trim().slice(0, 100) : '';
+    if (!verifier)
+        return null;
+    const out = { verifier };
+    if (includesEnum(VERIFIER_DECISIONS, r['decision']))
+        out.decision = r['decision'];
+    return out;
+}
+/** Strip only local-only Gene annotations before validating against the gep-sdk schema. */
 export function stripGeneHints(gene) {
     const hidden = GENE_HINT_FIELDS;
     const out = {};

package/dist/wire/index.d.ts

@@ -2,7 +2,7 @@
  * 资产 wire 层. SSOT = @evomap/gep-sdk/schemas/*.schema.json (D19).
  * 字段一律 snake_case 锁定 (asset_id 跨实现契约); 本仓不发明 wire 字段, 只镜像 + 重导出工具.
  */
-import type { GeneRoutingHint, GeneToolPolicy, GenerationMeta } from './geneHints.js';
+import type { GeneRoutingHint, GeneToolPolicy, GenerationMeta, GeneClaim, GeneScope, GeneRuntimeProfile, GeneVerifierProfile } from './geneHints.js';
 export { SCHEMA_VERSION, canonicalize, computeAssetId, verifyAssetId } from '@evomap/gep-sdk';
 export type GepCategory = typeof import('@evomap/gep-sdk').GEP_GENE_CATEGORIES[number];
 export type OutcomeStatus = typeof import('@evomap/gep-sdk').GEP_OUTCOME_STATUSES[number];
@@ -35,6 +35,11 @@ export interface Gene {
     routing_hint?: GeneRoutingHint | null;
     tool_policy?: GeneToolPolicy | null;
     generation_meta?: GenerationMeta | null;
+    model_name?: string;
+    claims?: GeneClaim[] | null;
+    scope?: GeneScope | null;
+    runtime_profile?: GeneRuntimeProfile | null;
+    verifier_profile?: GeneVerifierProfile | null;
     asset_id: string;
 }
 /** Capsule = 表现型/纯进化产物 (capsule.schema.json). */
@@ -99,5 +104,5 @@ export interface Mutation {
     expected_effect: string;
     risk_level: RiskLevel;
 }
-export { validateWire, schemaProperties, type WireValidation } from './schemaGate.js';
-export { ROUTING_TIERS, REASONING_LEVELS, TOOL_POLICY_SEVERITIES, GENERATION_SOURCES, GENE_HINT_FIELDS, normalizeRoutingHint, normalizeToolPolicy, normalizeGenerationMeta, stripGeneHints, type RoutingTier, type ReasoningLevel, type ToolPolicySeverity, type GenerationSource, type GeneRoutingHint, type GeneToolPolicy, type GeneGenerationHeuristics, type GenerationMeta, } from './geneHints.js';
+export { validateWire, validateWireDeep, wireSchemaIssues, schemaProperties, type WireValidation, type WireSchemaIssue, } from './schemaGate.js';
+export { ROUTING_TIERS, REASONING_LEVELS, TOOL_POLICY_SEVERITIES, GENERATION_SOURCES, CLAIM_KINDS, ENV_CLASSES, VERIFIER_DECISIONS, GENE_HINT_FIELDS, normalizeRoutingHint, normalizeToolPolicy, normalizeGenerationMeta, normalizeClaims, normalizeGeneScope, normalizeRuntimeProfile, normalizeVerifierProfile, stripGeneHints, type RoutingTier, type ReasoningLevel, type ToolPolicySeverity, type GenerationSource, type ClaimKind, type EnvClass, type VerifierDecision, type GeneRoutingHint, type GeneToolPolicy, type GeneGenerationHeuristics, type GenerationMeta, type GeneClaim, type GeneScope, type GeneRuntimeProfile, type GeneVerifierProfile, } from './geneHints.js';

package/dist/wire/index.js

@@ -1,3 +1,3 @@
 export { SCHEMA_VERSION, canonicalize, computeAssetId, verifyAssetId } from '@evomap/gep-sdk';
-export { validateWire, schemaProperties } from './schemaGate.js';
-export { ROUTING_TIERS, REASONING_LEVELS, TOOL_POLICY_SEVERITIES, GENERATION_SOURCES, GENE_HINT_FIELDS, normalizeRoutingHint, normalizeToolPolicy, normalizeGenerationMeta, stripGeneHints, } from './geneHints.js';
+export { validateWire, validateWireDeep, wireSchemaIssues, schemaProperties, } from './schemaGate.js';
+export { ROUTING_TIERS, REASONING_LEVELS, TOOL_POLICY_SEVERITIES, GENERATION_SOURCES, CLAIM_KINDS, ENV_CLASSES, VERIFIER_DECISIONS, GENE_HINT_FIELDS, normalizeRoutingHint, normalizeToolPolicy, normalizeGenerationMeta, normalizeClaims, normalizeGeneScope, normalizeRuntimeProfile, normalizeVerifierProfile, stripGeneHints, } from './geneHints.js';

package/dist/wire/schemaGate.d.ts

@@ -2,10 +2,31 @@ export interface WireValidation {
     ok: boolean;
     errors: string[];
 }
+/** One schema violation located at a concrete field, so a caller can decide what to do about THAT field.
+ *  `validateWireDeep`'s message strings are deliberately stable/opaque; repair needs the location instead. */
+export interface WireSchemaIssue {
+    /** Dotted path into the record (`constraints.forbidden_paths`); `''` for a record-level violation. */
+    path: string;
+    /** Ajv keyword that failed (`required`, `additionalProperties`, `minItems`, `pattern`, …). */
+    keyword: string;
+    /** Field named by a record-level violation: the missing required prop or the rejected extra prop. */
+    property?: string;
+    message: string;
+}
 /**
  * 结构校验(required 齐 + additionalProperties:false 不许多字段). 轻量, 不做深类型校验(那是发版 CI conformance 的活).
  * 用途: 发 hub 前确认资产能被 gep-sdk schema 接受; v2-delta(proof_of_work/resolution_status)在 bump 前会在此暴露.
  */
 export declare function validateWire(asset: Record<string, unknown>): WireValidation;
+/**
+ * Full Draft-07 runtime validation against the gep-sdk JSON Schema SSOT.
+ * Validation is observational: values are never coerced, defaulted, stripped, or otherwise mutated.
+ */
+export declare function validateWireDeep(asset: Record<string, unknown>): WireValidation;
+/**
+ * Every schema violation of `asset`, located by field. Same SSOT and same verdict as {@link validateWireDeep}
+ * (empty ⇔ ok) — this form exists for callers that must ACT on a specific field rather than only report.
+ */
+export declare function wireSchemaIssues(asset: Record<string, unknown>): WireSchemaIssue[];
 /** schema 已声明的字段白名单(给上层判断哪些 v2-delta 尚未进 SDK). */
 export declare function schemaProperties(type: string): string[];

package/dist/wire/schemaGate.js

@@ -1,5 +1,6 @@
 import { createRequire } from 'node:module';
 import { readFileSync } from 'node:fs';
+import { Ajv } from 'ajv';
 const nodeRequire = createRequire(import.meta.url);
 const SCHEMA_SUBPATH = {
     Gene: '@evomap/gep-sdk/schemas/gene.schema.json',
@@ -19,6 +20,76 @@ function loadSchema(type) {
     cache.set(type, schema);
     return schema;
 }
+function validateObjectShape(value, schema, path, errors) {
+    if (!schema.properties && schema.additionalProperties !== false)
+        return;
+    if (value === null || typeof value !== 'object' || Array.isArray(value))
+        return;
+    const record = value;
+    for (const req of schema.required ?? []) {
+        if (record[req] === undefined || record[req] === null)
+            errors.push(`${path}: 缺 required 字段: ${req}`);
+    }
+    if (schema.additionalProperties === false && schema.properties) {
+        const allowed = new Set(Object.keys(schema.properties));
+        for (const k of Object.keys(record))
+            if (!allowed.has(k))
+                errors.push(`${path}: 多余字段(additionalProperties:false 会 reject): ${k}`);
+    }
+    for (const [key, child] of Object.entries(schema.properties ?? {})) {
+        const childValue = record[key];
+        if (childValue === undefined || childValue === null)
+            continue;
+        if (Array.isArray(childValue) && child.items) {
+            const itemSchema = child.items;
+            childValue.forEach((item, index) => validateObjectShape(item, itemSchema, `${path}.${key}[${index}]`, errors));
+        }
+        else {
+            validateObjectShape(childValue, child, `${path}.${key}`, errors);
+        }
+    }
+}
+const deepValidatorCache = new Map();
+const issueValidatorCache = new Map();
+const deepValidator = new Ajv({
+    allErrors: false,
+    coerceTypes: false,
+    removeAdditional: false,
+    useDefaults: false,
+});
+// Repair needs EVERY violation in one pass — a first-error validator would make repair converge one field per
+// round-trip. Kept as a second instance so the gate's own fail-fast cost is unchanged.
+const issueValidator = new Ajv({
+    allErrors: true,
+    coerceTypes: false,
+    removeAdditional: false,
+    useDefaults: false,
+});
+function loadDeepValidator(type) {
+    const schema = loadSchema(type);
+    if (!schema)
+        return undefined;
+    const cached = deepValidatorCache.get(type);
+    if (cached)
+        return cached;
+    const validator = deepValidator.compile(schema);
+    deepValidatorCache.set(type, validator);
+    return validator;
+}
+function loadIssueValidator(type) {
+    const schema = loadSchema(type);
+    if (!schema)
+        return undefined;
+    const cached = issueValidatorCache.get(type);
+    if (cached)
+        return cached;
+    const validator = issueValidator.compile(schema);
+    issueValidatorCache.set(type, validator);
+    return validator;
+}
+function stableSchemaError(error) {
+    return `wire schema violation: ${error.schemaPath} (${error.keyword})`;
+}
 /**
  * 结构校验(required 齐 + additionalProperties:false 不许多字段). 轻量, 不做深类型校验(那是发版 CI conformance 的活).
  * 用途: 发 hub 前确认资产能被 gep-sdk schema 接受; v2-delta(proof_of_work/resolution_status)在 bump 前会在此暴露.
@@ -31,18 +102,56 @@ export function validateWire(asset) {
     const schema = loadSchema(type);
     if (!schema)
         return { ok: false, errors: [`未知资产类型: ${type}`] };
-    for (const req of schema.required ?? []) {
-        if (asset[req] === undefined || asset[req] === null)
-            errors.push(`缺 required 字段: ${req}`);
-    }
-    if (schema.additionalProperties === false && schema.properties) {
-        const allowed = new Set(Object.keys(schema.properties));
-        for (const k of Object.keys(asset))
-            if (!allowed.has(k))
-                errors.push(`多余字段(additionalProperties:false 会 reject): ${k}`);
-    }
+    validateObjectShape(asset, schema, type, errors);
     return { ok: errors.length === 0, errors };
 }
+/**
+ * Full Draft-07 runtime validation against the gep-sdk JSON Schema SSOT.
+ * Validation is observational: values are never coerced, defaulted, stripped, or otherwise mutated.
+ */
+export function validateWireDeep(asset) {
+    const type = asset['type'];
+    if (typeof type !== 'string')
+        return { ok: false, errors: ['wire schema requires a string type'] };
+    const validator = loadDeepValidator(type);
+    if (!validator)
+        return { ok: false, errors: ['unsupported wire type'] };
+    if (validator(asset))
+        return { ok: true, errors: [] };
+    return {
+        ok: false,
+        errors: (validator.errors ?? []).map(stableSchemaError),
+    };
+}
+function issueFrom(error) {
+    const property = error.keyword === 'required'
+        ? String(error.params.missingProperty ?? '')
+        : error.keyword === 'additionalProperties'
+            ? String(error.params.additionalProperty ?? '')
+            : '';
+    const instancePath = error.instancePath.replace(/^\//, '').replace(/\//g, '.');
+    return {
+        path: property ? [instancePath, property].filter(Boolean).join('.') : instancePath,
+        keyword: error.keyword,
+        ...(property ? { property } : {}),
+        message: error.message ?? stableSchemaError(error),
+    };
+}
+/**
+ * Every schema violation of `asset`, located by field. Same SSOT and same verdict as {@link validateWireDeep}
+ * (empty ⇔ ok) — this form exists for callers that must ACT on a specific field rather than only report.
+ */
+export function wireSchemaIssues(asset) {
+    const type = asset['type'];
+    if (typeof type !== 'string')
+        return [{ path: 'type', keyword: 'type', property: 'type', message: 'wire schema requires a string type' }];
+    const validator = loadIssueValidator(type);
+    if (!validator)
+        return [{ path: 'type', keyword: 'enum', property: 'type', message: 'unsupported wire type' }];
+    if (validator(asset))
+        return [];
+    return (validator.errors ?? []).map(issueFrom);
+}
 /** schema 已声明的字段白名单(给上层判断哪些 v2-delta 尚未进 SDK). */
 export function schemaProperties(type) {
     return Object.keys(loadSchema(type)?.properties ?? {});

package/dist/workflow/dsl.d.ts

@@ -14,13 +14,26 @@ export interface CoreCall {
     fn: string;
     args: Value[];
 }
-export interface ScriptStep {
+export type WorkflowErrorClass = 'transient' | 'permanent' | 'safety' | 'unknown';
+export declare function containsWorkflowSensitiveText(value: string): boolean;
+export interface WorkflowRetryPolicy {
+    maxAttempts: number;
+    initialDelayMs?: number;
+    maxDelayMs?: number;
+    multiplier?: number;
+}
+export interface DurableStepOptions {
+    /** Agent steps default to non-idempotent; script steps default to idempotent. */
+    idempotency?: 'idempotent' | 'non_idempotent';
+    retry?: WorkflowRetryPolicy;
+}
+export interface ScriptStep extends DurableStepOptions {
     id: string;
     kind: 'script';
     setOutput: string;
     call: CoreCall;
 }
-export interface AgentStep {
+export interface AgentStep extends DurableStepOptions {
     id: string;
     kind: 'agent';
     prompt: string;
@@ -42,8 +55,16 @@ export interface IfStep {
     then: WorkflowStep[];
     else?: WorkflowStep[];
 }
-export type WorkflowStep = ScriptStep | AgentStep | ForeachStep | IfStep;
+/** Durable human gate. Execution stops before subsequent steps until an operator approves or rejects it. */
+export interface ApprovalStep {
+    id: string;
+    kind: 'approval';
+    label?: string;
+}
+export type WorkflowStep = ScriptStep | AgentStep | ForeachStep | IfStep | ApprovalStep;
 export interface WorkflowSpec {
+    /** Stable caller-supplied identity. If omitted, the durable runtime derives one from the definition. */
+    workflowId?: string;
     name: string;
     input?: Record<string, unknown>;
     steps: WorkflowStep[];

package/dist/workflow/dsl.js

@@ -3,6 +3,10 @@
  * 表达式表示为**结构化对象**(非字符串解析): 引用 Ref + 白名单 core 调用, 安全 by-construction.
  */
 export function isRef(v) { return typeof v === 'object' && v !== null && 'ref' in v; }
+const WORKFLOW_SENSITIVE_TEXT_RE = /(?:\bBearer\s+[A-Za-z0-9._~+/=-]{8,}|\bsk-[A-Za-z0-9_-]{12,}|\b(?:gh[oprsu]|npm)_[A-Za-z0-9_-]{8,}|\bgithub_pat_[A-Za-z0-9_]{8,}|\b(?:AKIA|ASIA)[0-9A-Z]{16}\b|\bAIza[0-9A-Za-z_-]{35}\b|-----BEGIN [A-Z ]*PRIVATE KEY-----|\b(?:password|passwd|secret|token|api[_-]?key|accountkey)\s*[:=]\s*\S+)/i;
+export function containsWorkflowSensitiveText(value) {
+    return WORKFLOW_SENSITIVE_TEXT_RE.test(value);
+}
 export const CORE_WHITELIST = {
     list_len: (a) => (Array.isArray(a) ? a.length : 0),
     filter_by_mask: (items, mask) => (Array.isArray(items) && Array.isArray(mask) ? items.filter((_, i) => Boolean(mask[i])) : []),

package/dist/workflow/engine.d.ts

@@ -4,8 +4,12 @@ export interface WorkflowContext {
     steps: Record<string, unknown>;
     item?: unknown;
 }
+export interface AgentBridgeOptions {
+    /** Cooperative cancellation for the current durable attempt. */
+    signal?: AbortSignal;
+}
 /** agent step 桥(注入 runtime; 孵化期可注 stub). */
-export type AgentBridge = (prompt: string, ctx: WorkflowContext) => Promise<unknown> | unknown;
+export type AgentBridge = (prompt: string, ctx: WorkflowContext, options?: AgentBridgeOptions) => Promise<unknown> | unknown;
 export interface WorkflowEngineDeps {
     core?: Record<string, CoreFn>;
     agent: AgentBridge;

package/dist/workflow/engine.js

@@ -68,6 +68,9 @@ export class WorkflowEngine {
                 await this.runSteps(branch, ctx);
                 return;
             }
+            case 'approval': {
+                throw new WorkflowError('approval steps require DurableWorkflowRuntime');
+            }
             case 'foreach': {
                 const items = resolveRef(step.over.ref, ctx);
                 if (!Array.isArray(items))

package/dist/workflow/index.d.ts

@@ -1,2 +1,4 @@
 export * from './dsl.js';
-export * from './engine.js';
+export * from './engine.js';
+export * from './stateStore.js';
+export * from './runtime.js';

package/dist/workflow/index.js

@@ -1,2 +1,4 @@
 export * from './dsl.js';
-export * from './engine.js';
+export * from './engine.js';
+export * from './stateStore.js';
+export * from './runtime.js';