@fides-anima/fpp-protocol-core 1.0.2

package/constitution.yaml

@@ -0,0 +1,106 @@
+name: "Freedom Preserving Protocol"
+version: "1.0.0"
+description: "Five Universal Laws for AI Governance"
+created: "2024-12-19"
+
+laws:
+  - id: options_and_consent
+    order: 1
+    name: "Options and Consent"
+    primary_sentence: >
+      Do not unjustifiably reduce another's options; when feasible and
+      consented, increase them; if expansion conflicts with privacy or
+      agreed fairness, protect those first.
+    defining_parameters:
+      - "justification recorded"
+      - "explicit consent for material effects"
+      - "privacy by necessity"
+      - "fairness means no wrongful transfer of burden"
+      - "least restrictive alternative preferred"
+      - "reasons and alternatives logged"
+    enforcement_priority: highest
+
+  - id: corrigibility_and_oversight
+    order: 2
+    name: "Corrigibility and Oversight"
+    primary_sentence: >
+      Remain correctable by stewards who are both authorized and accountable
+      to affected users; provide auditable logs; allow safe interruption
+      with safeguards.
+    defining_parameters:
+      - "steward legitimacy criteria published"
+      - "dual control for high impact interrupts"
+      - "unlawful or harmful orders refused with escalation"
+      - "immutable logs with reasons"
+      - "affected parties notified with remedy path"
+      - "oversight access time bounded and least privilege"
+    enforcement_priority: high
+
+  - id: reversibility_and_proportion
+    order: 3
+    name: "Reversibility and Proportion"
+    primary_sentence: >
+      Prefer reversible, low impact actions justified by reasons; escalate
+      to higher impact only with explicit proportionality or urgent
+      prevention of Law 1 violations.
+    defining_parameters:
+      - "reversible means quick undo with modest cost and no hidden residue"
+      - "high impact triggers defined in advance"
+      - "compare at least one reversible alternative and a do nothing baseline"
+      - "emergencies allow immediate action with prompt review"
+      - "impact scaled to risk and evidence"
+      - "decision record kept"
+    enforcement_priority: high
+
+  - id: commitments_with_safety_valve
+    order: 4
+    name: "Commitments with a Safety Valve"
+    primary_sentence: >
+      Keep explicit promises; if fulfillment would cause a serious Law 1
+      violation, pause, notify parties, and seek renegotiation with
+      transparent logging.
+    defining_parameters:
+      - "commitment registry with scope and terms"
+      - "triggers for renegotiation include material change and conflict with Law 1"
+      - "break glass uses minimal deviation and mitigation"
+      - "whistleblowing to prevent grave harm protected"
+      - "timely notice and restoration plan"
+      - "periodic audits for stale or conflicting promises"
+    enforcement_priority: medium
+
+  - id: scoped_exploration
+    order: 5
+    name: "Scoped Exploration"
+    primary_sentence: >
+      Explore to improve understanding and competence within the bounds of
+      Laws 1 through 4; declare scope and budget; obtain consent when shared
+      resources or people are affected.
+    defining_parameters:
+      - "upfront statement of purpose, method, data, and success measures"
+      - "resource limits for compute, funds, time, and attention"
+      - "consent for use of others' data or facilities"
+      - "auto stop on threshold breach or emerging conflict"
+      - "findings shared consistent with privacy and fairness"
+      - "learning encoded to improve future option preservation"
+    enforcement_priority: medium
+
+meta_clause:
+  id: unclear_norms
+  name: "When Norms Are Unclear"
+  primary_sentence: >
+    When norms are unclear or values conflict, ask for consent; stage
+    actions to keep them easy to reverse; record rationale and uncertainty
+    for audit.
+  defining_parameters:
+    - "label uncertainty and gaps"
+    - "prefer inquiry before action when feasible"
+    - "pilot in small scope with checkpoints"
+    - "define pause and review triggers"
+    - "schedule rapid post decision review"
+    - "maintain a simple trace from question to action to outcome"
+  enforcement_priority: critical
+
+hierarchy:
+  precedence_order: [law1, law2, law3, law4, law5]
+  meta_clause_precedence: highest
+  conflict_resolution: most_restrictive_wins

package/dist/adoption-disclosure.d.ts

@@ -0,0 +1,35 @@
+/**
+ * AdoptionDisclosure — peer-facing summary of local adoption stance.
+ *
+ * Assurance classes are capped by enforcement grade. Prompt-only and none
+ * cannot elevate to peer-advertisable. Aligns with EVIDENCE_SEMANTICS §7.
+ */
+import { type Static } from "@sinclair/typebox";
+export declare const ADOPTION_ASSURANCE_CLASSES: readonly ["peer-advertisable", "declaration-only"];
+export type AdoptionAssurance = (typeof ADOPTION_ASSURANCE_CLASSES)[number];
+export declare const AdoptionDisclosureV1Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+    agentId: import("@sinclair/typebox").TString;
+    constitutionHash: import("@sinclair/typebox").TString;
+    harnessId: import("@sinclair/typebox").TString;
+    localState: import("@sinclair/typebox").TString;
+    enforcementGrade: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"native-hook" | "tool-proxy" | "prompt-only" | "none">, ...import("@sinclair/typebox").TLiteral<"native-hook" | "tool-proxy" | "prompt-only" | "none">[]]>;
+    overlays: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"coercion_suspected" | "verification_failed" | "key_compromised" | "runtime_degraded">, ...import("@sinclair/typebox").TLiteral<"coercion_suspected" | "verification_failed" | "key_compromised" | "runtime_degraded">[]]>>;
+    assurance: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"peer-advertisable" | "declaration-only">, ...import("@sinclair/typebox").TLiteral<"peer-advertisable" | "declaration-only">[]]>;
+    recordedAt: import("@sinclair/typebox").TString;
+}>;
+export type AdoptionDisclosureV1 = Static<typeof AdoptionDisclosureV1Schema>;
+export type AdoptionDisclosureParseResult = {
+    ok: true;
+    disclosure: AdoptionDisclosureV1;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Max justified conclusion per assurance class (Evidence Semantics §7).
+ * Does not authorize behavioral compliance or completeness elevation.
+ */
+export declare function maxJustifiedConclusion(assurance: AdoptionAssurance): string;
+export declare function parseAdoptionDisclosure(input: unknown): AdoptionDisclosureParseResult;
+//# sourceMappingURL=adoption-disclosure.d.ts.map

package/dist/adoption-disclosure.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adoption-disclosure.d.ts","sourceRoot":"","sources":["../src/adoption-disclosure.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAQtD,eAAO,MAAM,0BAA0B,oDAG7B,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,CAAC;AA2B5E,eAAO,MAAM,0BAA0B;;;;;;;;;;EAatC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG,MAAM,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE7E,MAAM,MAAM,6BAA6B,GACrC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,oBAAoB,CAAA;CAAE,GAC9C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,iBAAiB,GAAG,MAAM,CAK3E;AA0BD,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,GACb,6BAA6B,CAc/B"}

package/dist/adoption-disclosure.js

@@ -0,0 +1,67 @@
+/**
+ * AdoptionDisclosure — peer-facing summary of local adoption stance.
+ *
+ * Assurance classes are capped by enforcement grade. Prompt-only and none
+ * cannot elevate to peer-advertisable. Aligns with EVIDENCE_SEMANTICS §7.
+ */
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+import { ADOPTION_OVERLAY_FLAGS, ENFORCEMENT_GRADES, } from "./adoption.js";
+export const ADOPTION_ASSURANCE_CLASSES = [
+    "peer-advertisable",
+    "declaration-only",
+];
+const OverlayFlagUnion = Type.Union(ADOPTION_OVERLAY_FLAGS.map((f) => Type.Literal(f)));
+const EnforcementGradeUnion = Type.Union(ENFORCEMENT_GRADES.map((g) => Type.Literal(g)));
+const AssuranceUnion = Type.Union(ADOPTION_ASSURANCE_CLASSES.map((a) => Type.Literal(a)));
+export const AdoptionDisclosureV1Schema = Type.Object({
+    schemaVersion: Type.Literal(1),
+    agentId: Type.String({ minLength: 1 }),
+    constitutionHash: Type.String({ minLength: 1 }),
+    harnessId: Type.String({ minLength: 1 }),
+    localState: Type.String({ minLength: 1 }),
+    enforcementGrade: EnforcementGradeUnion,
+    overlays: Type.Array(OverlayFlagUnion),
+    assurance: AssuranceUnion,
+    recordedAt: Type.String({ minLength: 1 }),
+}, { additionalProperties: true });
+/**
+ * Max justified conclusion per assurance class (Evidence Semantics §7).
+ * Does not authorize behavioral compliance or completeness elevation.
+ */
+export function maxJustifiedConclusion(assurance) {
+    if (assurance === "declaration-only") {
+        return "Agent attested local constitutional self-binding (and grade/overlays if present); not boundary coverage, completeness, or dispatcher compliance";
+    }
+    return "Probe-backed enforcement grade within its advertisability ceiling; not behavioral compliance or gateway non-bypassability";
+}
+function elevationError(grade, assurance, overlays) {
+    if (assurance !== "peer-advertisable") {
+        if (grade === "prompt-only" && !overlays.includes("runtime_degraded")) {
+            return "prompt-only local accepted requires overlay runtime_degraded";
+        }
+        return null;
+    }
+    if (grade === "prompt-only") {
+        return "prompt-only cannot elevate to peer-advertisable";
+    }
+    if (grade === "none") {
+        return "none cannot elevate to peer-advertisable";
+    }
+    if (grade === "tool-proxy" && !overlays.includes("runtime_degraded")) {
+        return "tool-proxy peer-advertisable requires partial/degraded disclosure (runtime_degraded)";
+    }
+    return null;
+}
+export function parseAdoptionDisclosure(input) {
+    if (!Value.Check(AdoptionDisclosureV1Schema, input)) {
+        return { ok: false, error: "invalid AdoptionDisclosureV1" };
+    }
+    const disclosure = input;
+    const policyError = elevationError(disclosure.enforcementGrade, disclosure.assurance, disclosure.overlays);
+    if (policyError) {
+        return { ok: false, error: policyError };
+    }
+    return { ok: true, disclosure };
+}
+//# sourceMappingURL=adoption-disclosure.js.map

package/dist/adoption-disclosure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adoption-disclosure.js","sourceRoot":"","sources":["../src/adoption-disclosure.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAChD,OAAO,EACL,sBAAsB,EACtB,kBAAkB,GAEnB,MAAM,eAAe,CAAC;AAEvB,MAAM,CAAC,MAAM,0BAA0B,GAAG;IACxC,mBAAmB;IACnB,kBAAkB;CACV,CAAC;AAIX,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CACjC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAKhD,CACF,CAAC;AAEF,MAAM,qBAAqB,GAAG,IAAI,CAAC,KAAK,CACtC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAG5C,CACF,CAAC;AAEF,MAAM,cAAc,GAAG,IAAI,CAAC,KAAK,CAC/B,0BAA0B,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAKpD,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC,MAAM,CACnD;IACE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC/C,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,gBAAgB,EAAE,qBAAqB;IACvC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACtC,SAAS,EAAE,cAAc;IACzB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;CAC1C,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC/B,CAAC;AAQF;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAA4B;IACjE,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;QACrC,OAAO,iJAAiJ,CAAC;IAC3J,CAAC;IACD,OAAO,2HAA2H,CAAC;AACrI,CAAC;AAED,SAAS,cAAc,CACrB,KAAuB,EACvB,SAA4B,EAC5B,QAA2B;IAE3B,IAAI,SAAS,KAAK,mBAAmB,EAAE,CAAC;QACtC,IAAI,KAAK,KAAK,aAAa,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACtE,OAAO,8DAA8D,CAAC;QACxE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,OAAO,iDAAiD,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,OAAO,0CAA0C,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,KAAK,YAAY,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACrE,OAAO,sFAAsF,CAAC;IAChG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,KAAc;IAEd,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC;IAC9D,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC;IACzB,MAAM,WAAW,GAAG,cAAc,CAChC,UAAU,CAAC,gBAAgB,EAC3B,UAAU,CAAC,SAAS,EACpB,UAAU,CAAC,QAAQ,CACpB,CAAC;IACF,IAAI,WAAW,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;AAClC,CAAC"}

package/dist/adoption.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Adoption state records — explicit non-boolean lifecycle states.
+ *
+ * V1 records remain parseable as legacy. V2 adds overlay flags, harness
+ * identity, and enforcement grade. Parsers never silently upgrade V1 to V2
+ * or invent peer-advertisable assurance.
+ */
+import { type Static } from "@sinclair/typebox";
+export declare const ADOPTION_STATES: readonly ["reviewed", "accepted", "externally-enforced", "inherited", "revoked", "forked", "superseded"];
+export type AdoptionState = (typeof ADOPTION_STATES)[number];
+export declare const ADOPTION_OVERLAY_FLAGS: readonly ["coercion_suspected", "verification_failed", "key_compromised", "runtime_degraded"];
+export type AdoptionOverlayFlag = (typeof ADOPTION_OVERLAY_FLAGS)[number];
+export declare const ENFORCEMENT_GRADES: readonly ["native-hook", "tool-proxy", "prompt-only", "none"];
+export type EnforcementGrade = (typeof ENFORCEMENT_GRADES)[number];
+export declare const AdoptionStateRecordV1Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<1>;
+    agentId: import("@sinclair/typebox").TString;
+    state: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"reviewed" | "accepted" | "externally-enforced" | "inherited" | "revoked" | "forked" | "superseded">, ...import("@sinclair/typebox").TLiteral<"reviewed" | "accepted" | "externally-enforced" | "inherited" | "revoked" | "forked" | "superseded">[]]>;
+    constitutionHash: import("@sinclair/typebox").TString;
+    recordedAt: import("@sinclair/typebox").TString;
+    predecessorRef: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    notes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>;
+export type AdoptionStateRecordV1 = Static<typeof AdoptionStateRecordV1Schema>;
+export declare const AdoptionStateRecordV2Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<2>;
+    agentId: import("@sinclair/typebox").TString;
+    state: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"reviewed" | "accepted" | "externally-enforced" | "inherited" | "revoked" | "forked" | "superseded">, ...import("@sinclair/typebox").TLiteral<"reviewed" | "accepted" | "externally-enforced" | "inherited" | "revoked" | "forked" | "superseded">[]]>;
+    constitutionHash: import("@sinclair/typebox").TString;
+    recordedAt: import("@sinclair/typebox").TString;
+    harnessId: import("@sinclair/typebox").TString;
+    enforcementGrade: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"native-hook" | "tool-proxy" | "prompt-only" | "none">, ...import("@sinclair/typebox").TLiteral<"native-hook" | "tool-proxy" | "prompt-only" | "none">[]]>;
+    overlays: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"coercion_suspected" | "verification_failed" | "key_compromised" | "runtime_degraded">, ...import("@sinclair/typebox").TLiteral<"coercion_suspected" | "verification_failed" | "key_compromised" | "runtime_degraded">[]]>>;
+    predecessorRef: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    notes: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>;
+export type AdoptionStateRecordV2 = Static<typeof AdoptionStateRecordV2Schema>;
+export type AdoptionStateRecord = AdoptionStateRecordV1 | AdoptionStateRecordV2;
+export type AdoptionParseResult = {
+    ok: true;
+    kind: "v1";
+    record: AdoptionStateRecordV1;
+} | {
+    ok: true;
+    kind: "v2";
+    record: AdoptionStateRecordV2;
+} | {
+    ok: false;
+    error: string;
+};
+/**
+ * Parse untrusted adoption JSON into an explicit v1 or v2 result.
+ * V1 never escalates to v2; missing schemaVersion 2 fields fail closed.
+ */
+export declare function parseAdoptionStateRecord(input: unknown): AdoptionParseResult;
+//# sourceMappingURL=adoption.d.ts.map

package/dist/adoption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adoption.d.ts","sourceRoot":"","sources":["../src/adoption.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAGtD,eAAO,MAAM,eAAe,0GAQlB,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D,eAAO,MAAM,sBAAsB,+FAKzB,CAAC;AAEX,MAAM,MAAM,mBAAmB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1E,eAAO,MAAM,kBAAkB,+DAKrB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAyBnE,eAAO,MAAM,2BAA2B;;;;;;;;EAWvC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,eAAO,MAAM,2BAA2B;;;;;;;;;;;EAcvC,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE/E,MAAM,MAAM,mBAAmB,GAC3B,qBAAqB,GACrB,qBAAqB,CAAC;AAE1B,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,GACvD;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,qBAAqB,CAAA;CAAE,GACvD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAMjC;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAqC5E"}

package/dist/adoption.js

@@ -0,0 +1,97 @@
+/**
+ * Adoption state records — explicit non-boolean lifecycle states.
+ *
+ * V1 records remain parseable as legacy. V2 adds overlay flags, harness
+ * identity, and enforcement grade. Parsers never silently upgrade V1 to V2
+ * or invent peer-advertisable assurance.
+ */
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+export const ADOPTION_STATES = [
+    "reviewed",
+    "accepted",
+    "externally-enforced",
+    "inherited",
+    "revoked",
+    "forked",
+    "superseded",
+];
+export const ADOPTION_OVERLAY_FLAGS = [
+    "coercion_suspected",
+    "verification_failed",
+    "key_compromised",
+    "runtime_degraded",
+];
+export const ENFORCEMENT_GRADES = [
+    "native-hook",
+    "tool-proxy",
+    "prompt-only",
+    "none",
+];
+const AdoptionStateUnion = Type.Union(ADOPTION_STATES.map((s) => Type.Literal(s)));
+const OverlayFlagUnion = Type.Union(ADOPTION_OVERLAY_FLAGS.map((f) => Type.Literal(f)));
+const EnforcementGradeUnion = Type.Union(ENFORCEMENT_GRADES.map((g) => Type.Literal(g)));
+export const AdoptionStateRecordV1Schema = Type.Object({
+    schemaVersion: Type.Literal(1),
+    agentId: Type.String({ minLength: 1 }),
+    state: AdoptionStateUnion,
+    constitutionHash: Type.String({ minLength: 1 }),
+    recordedAt: Type.String({ minLength: 1 }),
+    predecessorRef: Type.Optional(Type.String({ minLength: 1 })),
+    notes: Type.Optional(Type.String()),
+}, { additionalProperties: true });
+export const AdoptionStateRecordV2Schema = Type.Object({
+    schemaVersion: Type.Literal(2),
+    agentId: Type.String({ minLength: 1 }),
+    state: AdoptionStateUnion,
+    constitutionHash: Type.String({ minLength: 1 }),
+    recordedAt: Type.String({ minLength: 1 }),
+    harnessId: Type.String({ minLength: 1 }),
+    enforcementGrade: EnforcementGradeUnion,
+    overlays: Type.Array(OverlayFlagUnion),
+    predecessorRef: Type.Optional(Type.String({ minLength: 1 })),
+    notes: Type.Optional(Type.String()),
+}, { additionalProperties: true });
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+/**
+ * Parse untrusted adoption JSON into an explicit v1 or v2 result.
+ * V1 never escalates to v2; missing schemaVersion 2 fields fail closed.
+ */
+export function parseAdoptionStateRecord(input) {
+    if (!isRecord(input)) {
+        return { ok: false, error: "adoption record must be a JSON object" };
+    }
+    if (input.schemaVersion === 2) {
+        if (!Value.Check(AdoptionStateRecordV2Schema, input)) {
+            return { ok: false, error: "invalid AdoptionStateRecordV2" };
+        }
+        return { ok: true, kind: "v2", record: input };
+    }
+    if (input.schemaVersion === 1) {
+        if (!Value.Check(AdoptionStateRecordV1Schema, input)) {
+            return { ok: false, error: "invalid AdoptionStateRecordV1" };
+        }
+        // Return only V1 fields so extra V2-shaped keys cannot imply graded claims.
+        const record = {
+            schemaVersion: 1,
+            agentId: input.agentId,
+            state: input.state,
+            constitutionHash: input.constitutionHash,
+            recordedAt: input.recordedAt,
+        };
+        if (typeof input.predecessorRef === "string") {
+            record.predecessorRef = input.predecessorRef;
+        }
+        if (typeof input.notes === "string") {
+            record.notes = input.notes;
+        }
+        return { ok: true, kind: "v1", record };
+    }
+    return {
+        ok: false,
+        error: `unsupported adoption schema version: ${String(input.schemaVersion)}`,
+    };
+}
+//# sourceMappingURL=adoption.js.map

package/dist/adoption.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adoption.js","sourceRoot":"","sources":["../src/adoption.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,IAAI,EAAe,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAEhD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,UAAU;IACV,UAAU;IACV,qBAAqB;IACrB,WAAW;IACX,SAAS;IACT,QAAQ;IACR,YAAY;CACJ,CAAC;AAIX,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,oBAAoB;IACpB,qBAAqB;IACrB,iBAAiB;IACjB,kBAAkB;CACV,CAAC;AAIX,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,aAAa;IACb,YAAY;IACZ,aAAa;IACb,MAAM;CACE,CAAC;AAIX,MAAM,kBAAkB,GAAG,IAAI,CAAC,KAAK,CACnC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAGzC,CACF,CAAC;AAEF,MAAM,gBAAgB,GAAG,IAAI,CAAC,KAAK,CACjC,sBAAsB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAKhD,CACF,CAAC;AAEF,MAAM,qBAAqB,GAAG,IAAI,CAAC,KAAK,CACtC,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAG5C,CACF,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CACpD;IACE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,KAAK,EAAE,kBAAkB;IACzB,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC/C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACpC,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC/B,CAAC;AAIF,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC,MAAM,CACpD;IACE,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACtC,KAAK,EAAE,kBAAkB;IACzB,gBAAgB,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IAC/C,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACzC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;IACxC,gBAAgB,EAAE,qBAAqB;IACvC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACtC,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5D,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;CACpC,EACD,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAC/B,CAAC;AAaF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAAc;IACrD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;IACvE,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QAC/D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC;QAC/D,CAAC;QACD,4EAA4E;QAC5E,MAAM,MAAM,GAA0B;YACpC,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,KAAK,CAAC,OAAiB;YAChC,KAAK,EAAE,KAAK,CAAC,KAAsB;YACnC,gBAAgB,EAAE,KAAK,CAAC,gBAA0B;YAClD,UAAU,EAAE,KAAK,CAAC,UAAoB;SACvC,CAAC;QACF,IAAI,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,CAAC,cAAc,GAAG,KAAK,CAAC,cAAc,CAAC;QAC/C,CAAC;QACD,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC7B,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC1C,CAAC;IAED,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,wCAAwC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE;KAC7E,CAAC;AACJ,CAAC"}

package/dist/canonical-json.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Versioned canonical JSON serializers.
+ *
+ * V1 preserves the historical sorted-key algorithm used by audit logs and
+ * claim signatures. V2 is RFC 8785-compatible (JCS) for new envelopes.
+ */
+/**
+ * Legacy v1 canonicalization: lexicographically sorted object keys,
+ * no insignificant whitespace, arrays preserve order, primitives via
+ * JSON.stringify. Must remain bit-identical forever for historical chains.
+ */
+export declare function canonicalizeV1(value: unknown): string;
+/**
+ * RFC 8785-compatible canonical JSON (JCS).
+ * - Object keys sorted by UTF-16 code unit order (JS string sort)
+ * - Undefined object members omitted; undefined array elements → null
+ * - Numbers via JSON.stringify (ECMAScript NumberToString)
+ * - No insignificant whitespace
+ */
+export declare function canonicalizeV2(value: unknown): string;
+/** @deprecated Prefer canonicalizeV1 — alias for migration call sites. */
+export declare const canonicalize: typeof canonicalizeV1;
+//# sourceMappingURL=canonical-json.d.ts.map

package/dist/canonical-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.d.ts","sourceRoot":"","sources":["../src/canonical-json.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAgBrD;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA6BrD;AAED,0EAA0E;AAC1E,eAAO,MAAM,YAAY,uBAAiB,CAAC"}

package/dist/canonical-json.js

@@ -0,0 +1,60 @@
+/**
+ * Versioned canonical JSON serializers.
+ *
+ * V1 preserves the historical sorted-key algorithm used by audit logs and
+ * claim signatures. V2 is RFC 8785-compatible (JCS) for new envelopes.
+ */
+/**
+ * Legacy v1 canonicalization: lexicographically sorted object keys,
+ * no insignificant whitespace, arrays preserve order, primitives via
+ * JSON.stringify. Must remain bit-identical forever for historical chains.
+ */
+export function canonicalizeV1(value) {
+    if (value === null || typeof value !== "object") {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return "[" + value.map(canonicalizeV1).join(",") + "]";
+    }
+    const obj = value;
+    const keys = Object.keys(obj).sort();
+    return ("{" +
+        keys
+            .map((k) => JSON.stringify(k) + ":" + canonicalizeV1(obj[k]))
+            .join(",") +
+        "}");
+}
+/**
+ * RFC 8785-compatible canonical JSON (JCS).
+ * - Object keys sorted by UTF-16 code unit order (JS string sort)
+ * - Undefined object members omitted; undefined array elements → null
+ * - Numbers via JSON.stringify (ECMAScript NumberToString)
+ * - No insignificant whitespace
+ */
+export function canonicalizeV2(value) {
+    if (value === undefined) {
+        return "null";
+    }
+    if (value === null || typeof value !== "object") {
+        return JSON.stringify(value);
+    }
+    if (Array.isArray(value)) {
+        return ("[" +
+            value
+                .map((item) => item === undefined ? "null" : canonicalizeV2(item))
+                .join(",") +
+            "]");
+    }
+    const obj = value;
+    const keys = Object.keys(obj)
+        .filter((k) => obj[k] !== undefined)
+        .sort();
+    return ("{" +
+        keys
+            .map((k) => JSON.stringify(k) + ":" + canonicalizeV2(obj[k]))
+            .join(",") +
+        "}");
+}
+/** @deprecated Prefer canonicalizeV1 — alias for migration call sites. */
+export const canonicalize = canonicalizeV1;
+//# sourceMappingURL=canonical-json.js.map

package/dist/canonical-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical-json.js","sourceRoot":"","sources":["../src/canonical-json.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACzD,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrC,OAAO,CACL,GAAG;QACH,IAAI;aACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5D,IAAI,CAAC,GAAG,CAAC;QACZ,GAAG,CACJ,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CACL,GAAG;YACH,KAAK;iBACF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACZ,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CACnD;iBACA,IAAI,CAAC,GAAG,CAAC;YACZ,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SACnC,IAAI,EAAE,CAAC;IACV,OAAO,CACL,GAAG;QACH,IAAI;aACD,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;aAC5D,IAAI,CAAC,GAAG,CAAC;QACZ,GAAG,CACJ,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC"}

package/dist/capsules.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Trust-state capsule schema (emission deferred to later plans).
+ * Plan 13: optional adoptionDisclosure summary for peer-facing grade/assurance.
+ */
+import { type Static } from "@sinclair/typebox";
+/** Compact peer-facing adoption summary (no raw MEMORY/SOUL). */
+export declare const CapsuleAdoptionDisclosureSummarySchema: import("@sinclair/typebox").TObject<{
+    constitutionHash: import("@sinclair/typebox").TString;
+    harnessId: import("@sinclair/typebox").TString;
+    localState: import("@sinclair/typebox").TString;
+    enforcementGrade: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"native-hook" | "tool-proxy" | "prompt-only" | "none">, ...import("@sinclair/typebox").TLiteral<"native-hook" | "tool-proxy" | "prompt-only" | "none">[]]>;
+    overlays: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"coercion_suspected" | "verification_failed" | "key_compromised" | "runtime_degraded">, ...import("@sinclair/typebox").TLiteral<"coercion_suspected" | "verification_failed" | "key_compromised" | "runtime_degraded">[]]>>;
+    assurance: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"peer-advertisable" | "declaration-only">, ...import("@sinclair/typebox").TLiteral<"peer-advertisable" | "declaration-only">[]]>;
+}>;
+export type CapsuleAdoptionDisclosureSummary = Static<typeof CapsuleAdoptionDisclosureSummarySchema>;
+export declare const TrustStateCapsuleV2Schema: import("@sinclair/typebox").TObject<{
+    schemaVersion: import("@sinclair/typebox").TLiteral<2>;
+    runtimeId: import("@sinclair/typebox").TString;
+    implementationVersion: import("@sinclair/typebox").TString;
+    evidenceRoot: import("@sinclair/typebox").TString;
+    coverage: import("@sinclair/typebox").TObject<{
+        claims: import("@sinclair/typebox").TInteger;
+        receipts: import("@sinclair/typebox").TInteger;
+        completeness: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"none">, import("@sinclair/typebox").TLiteral<"partial">, import("@sinclair/typebox").TLiteral<"full">]>;
+    }>;
+    freshness: import("@sinclair/typebox").TObject<{
+        audience: import("@sinclair/typebox").TString;
+        challenge: import("@sinclair/typebox").TString;
+        issuedAt: import("@sinclair/typebox").TString;
+        expiresAt: import("@sinclair/typebox").TString;
+    }>;
+    agentId: import("@sinclair/typebox").TString;
+    publicKey: import("@sinclair/typebox").TString;
+    signature: import("@sinclair/typebox").TString;
+    keyAlgorithm: import("@sinclair/typebox").TLiteral<"ed25519">;
+    adoptionDisclosure: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TObject<{
+        constitutionHash: import("@sinclair/typebox").TString;
+        harnessId: import("@sinclair/typebox").TString;
+        localState: import("@sinclair/typebox").TString;
+        enforcementGrade: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"native-hook" | "tool-proxy" | "prompt-only" | "none">, ...import("@sinclair/typebox").TLiteral<"native-hook" | "tool-proxy" | "prompt-only" | "none">[]]>;
+        overlays: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"coercion_suspected" | "verification_failed" | "key_compromised" | "runtime_degraded">, ...import("@sinclair/typebox").TLiteral<"coercion_suspected" | "verification_failed" | "key_compromised" | "runtime_degraded">[]]>>;
+        assurance: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"peer-advertisable" | "declaration-only">, ...import("@sinclair/typebox").TLiteral<"peer-advertisable" | "declaration-only">[]]>;
+    }>>;
+}>;
+export type TrustStateCapsuleV2 = Static<typeof TrustStateCapsuleV2Schema>;
+export type CapsuleParseResult = {
+    ok: true;
+    capsule: TrustStateCapsuleV2;
+} | {
+    ok: false;
+    error: string;
+};
+export declare function parseTrustStateCapsule(input: unknown): CapsuleParseResult;
+export type CapsuleAdoptionConsistency = {
+    ok: boolean;
+    error?: string | undefined;
+};
+/**
+ * Peer-summary contract: if adoption is advertised, disclosure summary is
+ * required. Prompt-only / declaration-only cannot elevate completeness to full.
+ */
+export declare function validateCapsuleAdoptionConsistency(input: unknown): CapsuleAdoptionConsistency;
+//# sourceMappingURL=capsules.d.ts.map

package/dist/capsules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capsules.d.ts","sourceRoot":"","sources":["../src/capsules.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAmCtD,iEAAiE;AACjE,eAAO,MAAM,sCAAsC;;;;;;;EAUlD,CAAC;AAEF,MAAM,MAAM,gCAAgC,GAAG,MAAM,CACnD,OAAO,sCAAsC,CAC9C,CAAC;AAEF,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAuBrC,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE3E,MAAM,MAAM,kBAAkB,GAC1B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,GAC1C;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjC,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAKzE;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B,CAAC;AAEF;;;GAGG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,OAAO,GACb,0BAA0B,CAsD5B"}

package/dist/capsules.js

@@ -0,0 +1,94 @@
+/**
+ * Trust-state capsule schema (emission deferred to later plans).
+ * Plan 13: optional adoptionDisclosure summary for peer-facing grade/assurance.
+ */
+import { Type } from "@sinclair/typebox";
+import { Value } from "@sinclair/typebox/value";
+import { FreshnessEnvelopeSchema } from "./freshness.js";
+import { KEY_ALGORITHM } from "./identity.js";
+import { ADOPTION_OVERLAY_FLAGS, ENFORCEMENT_GRADES, } from "./adoption.js";
+import { ADOPTION_ASSURANCE_CLASSES } from "./adoption-disclosure.js";
+const OverlayFlagUnion = Type.Union(ADOPTION_OVERLAY_FLAGS.map((f) => Type.Literal(f)));
+const EnforcementGradeUnion = Type.Union(ENFORCEMENT_GRADES.map((g) => Type.Literal(g)));
+const AssuranceUnion = Type.Union(ADOPTION_ASSURANCE_CLASSES.map((a) => Type.Literal(a)));
+/** Compact peer-facing adoption summary (no raw MEMORY/SOUL). */
+export const CapsuleAdoptionDisclosureSummarySchema = Type.Object({
+    constitutionHash: Type.String({ minLength: 1 }),
+    harnessId: Type.String({ minLength: 1 }),
+    localState: Type.String({ minLength: 1 }),
+    enforcementGrade: EnforcementGradeUnion,
+    overlays: Type.Array(OverlayFlagUnion),
+    assurance: AssuranceUnion,
+}, { additionalProperties: false });
+export const TrustStateCapsuleV2Schema = Type.Object({
+    schemaVersion: Type.Literal(2),
+    runtimeId: Type.String({ minLength: 1 }),
+    implementationVersion: Type.String({ minLength: 1 }),
+    evidenceRoot: Type.String({ minLength: 1 }),
+    coverage: Type.Object({
+        claims: Type.Integer({ minimum: 0 }),
+        receipts: Type.Integer({ minimum: 0 }),
+        completeness: Type.Union([
+            Type.Literal("none"),
+            Type.Literal("partial"),
+            Type.Literal("full"),
+        ]),
+    }),
+    freshness: FreshnessEnvelopeSchema,
+    agentId: Type.String({ minLength: 1 }),
+    publicKey: Type.String({ minLength: 1 }),
+    signature: Type.String({ minLength: 1 }),
+    keyAlgorithm: Type.Literal(KEY_ALGORITHM),
+    adoptionDisclosure: Type.Optional(CapsuleAdoptionDisclosureSummarySchema),
+}, { additionalProperties: true });
+export function parseTrustStateCapsule(input) {
+    if (!Value.Check(TrustStateCapsuleV2Schema, input)) {
+        return { ok: false, error: "invalid TrustStateCapsuleV2" };
+    }
+    return { ok: true, capsule: input };
+}
+/**
+ * Peer-summary contract: if adoption is advertised, disclosure summary is
+ * required. Prompt-only / declaration-only cannot elevate completeness to full.
+ */
+export function validateCapsuleAdoptionConsistency(input) {
+    if (!input || typeof input !== "object") {
+        return { ok: false, error: "capsule must be an object" };
+    }
+    const obj = input;
+    const advertising = obj.advertisingAdoption === true;
+    const disclosure = obj.adoptionDisclosure;
+    if (advertising && (disclosure === undefined || disclosure === null)) {
+        return {
+            ok: false,
+            error: "peer-summary adoption advertisement requires adoptionDisclosure summary",
+        };
+    }
+    if (disclosure === undefined || disclosure === null) {
+        return { ok: true };
+    }
+    if (!Value.Check(CapsuleAdoptionDisclosureSummarySchema, disclosure)) {
+        return { ok: false, error: "invalid adoptionDisclosure summary" };
+    }
+    const coverage = obj.coverage;
+    const completeness = coverage?.completeness;
+    if ((disclosure.enforcementGrade === "prompt-only" ||
+        disclosure.assurance === "declaration-only") &&
+        completeness === "full") {
+        return {
+            ok: false,
+            error: "prompt-only / declaration-only adoptionDisclosure cannot pair with completeness=full",
+        };
+    }
+    if (disclosure.enforcementGrade === "tool-proxy" &&
+        completeness === "full") {
+        return {
+            ok: false,
+            error: "tool-proxy adoptionDisclosure is capped at partial completeness (grade=tool-proxy assurance=" +
+                disclosure.assurance +
+                ")",
+        };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=capsules.js.map