@groundnuty/macf-core 0.2.36 → 0.2.38

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAmB9C,wBAAgB,UAAU,IAAI,WAAW,CA+DxC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAmB9C,wBAAgB,UAAU,IAAI,WAAW,CAuExC"}

package/dist/config.js

@@ -17,6 +17,13 @@ function requireFilePath(name) {
 }
 export function loadConfig() {
     const agentName = requireEnv('MACF_AGENT_NAME');
+    // macf#538: the routing IDENTITY (registry key + cert CN) is distinct from the
+    // OTEL bot-name. `MACF_AGENT_NAME` is the bot-name (e.g. `macf-devops-agent`,
+    // used for OTEL `gen_ai.agent.name`); `MACF_ROUTING_LABEL` is the registry-key
+    // / CN (e.g. `devops-agent`). They differ on the substrate; they coincide on
+    // greenfield agents (auditor) where name == label. Defaults to agentName so
+    // every existing agent is unchanged (back-compat: inert until set).
+    const routingLabel = process.env['MACF_ROUTING_LABEL'] || agentName;
     const caCertPath = requireFilePath('MACF_CA_CERT');
     const caKeyPath = resolveCaKeyPath(caCertPath);
     const agentCertPath = requireFilePath('MACF_AGENT_CERT');
@@ -51,6 +58,7 @@ export function loadConfig() {
     const tmuxWindow = process.env['MACF_TMUX_WINDOW'] || undefined;
     return {
         agentName,
+        routingLabel,
         agentType,
         agentRole,
         host,

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI1C,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,WAAW,CAAC,iCAAiC,IAAI,aAAa,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CAAC,sBAAsB,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,SAAS,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,eAAe,CAAC,iBAAiB,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,WAAW,CAAC;IAChE,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,WAAW,CAAC,yDAAyD,SAAS,GAAG,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACnD,MAAM,IAAI,WAAW,CAAC,mCAAmC,OAAO,GAAG,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;IACnD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEtG,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC;IACtD,MAAM,KAAK,GAAG,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,GAAG,CAAC;IAEtD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;IAE1D,sBAAsB;IACtB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAC;IAC9D,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC;IACjE,MAAM,cAAc,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAEzD,qEAAqE;IACrE,gEAAgE;IAChE,8EAA8E;IAC9E,uEAAuE;IACvE,6EAA6E;IAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,SAAS,CAAC;IACpE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,SAAS,CAAC;IAEhE,OAAO;QACL,SAAS;QACT,SAAS;QACT,SAAS;QACT,IAAI;QACJ,aAAa;QACb,IAAI;QACJ,UAAU;QACV,SAAS;QACT,aAAa;QACb,YAAY;QACZ,KAAK;QACL,OAAO;QACP,OAAO;QACP,UAAU;QACV,QAAQ,EAAE,cAAc;QACxB,YAAY;QACZ,WAAW;QACX,UAAU;KACX,CAAC;AACJ,CAAC;AAED,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,WAAW,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,IAAI,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4DAA4D;YAC5D,kEAAkE;YAClE,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB;IAC/C,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAC7C,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,WAAW,CAAC,2DAA2D,CAAC,CAAC;YAC7F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC9B,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,WAAW,CAAC,gEAAgE,CAAC,CAAC;YACnG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,iBAAiB,CAAC;YACrE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,WAAW,CAAC,iDAAiD,KAAK,GAAG,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,4DAA4D;YAC5D,wEAAwE;YACxE,+DAA+D;YAC/D,kEAAkE;YAClE,8DAA8D;YAC9D,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,WAAW,CACnB,gEAAgE;oBAC9D,sEAAsE,CACzE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3C,CAAC;QACD;YACE,MAAM,IAAI,WAAW,CACnB,yEAAyE,YAAY,GAAG,CACzF,CAAC;IACN,CAAC;AACH,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI1C,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,WAAW,CAAC,iCAAiC,IAAI,aAAa,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,WAAW,CAAC,sBAAsB,IAAI,KAAK,IAAI,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,SAAS,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAChD,+EAA+E;IAC/E,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,SAAS,CAAC;IACpE,MAAM,UAAU,GAAG,eAAe,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,aAAa,GAAG,eAAe,CAAC,iBAAiB,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,eAAe,CAAC,gBAAgB,CAAC,CAAC;IAEvD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,WAAW,CAAC;IAChE,IAAI,SAAS,KAAK,WAAW,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,WAAW,CAAC,yDAAyD,SAAS,GAAG,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACnD,MAAM,IAAI,WAAW,CAAC,mCAAmC,OAAO,GAAG,CAAC,CAAC;IACvE,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC;IACnD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAEtG,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,OAAO,CAAC;IACtD,MAAM,KAAK,GAAG,QAAQ,KAAK,MAAM,IAAI,QAAQ,KAAK,GAAG,CAAC;IAEtD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,CAAC;IAE1D,sBAAsB;IACtB,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,MAAM,CAAC;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,SAAS,CAAC;IAC9D,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAElD,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,MAAM,CAAC;IACjE,MAAM,cAAc,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAEzD,qEAAqE;IACrE,gEAAgE;IAChE,8EAA8E;IAC9E,uEAAuE;IACvE,6EAA6E;IAC7E,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,SAAS,CAAC;IACpE,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,IAAI,SAAS,CAAC;IAEhE,OAAO;QACL,SAAS;QACT,YAAY;QACZ,SAAS;QACT,SAAS;QACT,IAAI;QACJ,aAAa;QACb,IAAI;QACJ,UAAU;QACV,SAAS;QACT,aAAa;QACb,YAAY;QACZ,KAAK;QACL,OAAO;QACP,OAAO;QACP,UAAU;QACV,QAAQ,EAAE,cAAc;QACxB,YAAY;QACZ,WAAW;QACX,UAAU;KACX,CAAC;AACJ,CAAC;AAED,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B;;;;;;;;;;;GAWG;AACH,SAAS,gBAAgB,CAAC,UAAkB;IAC1C,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,WAAW,CAAC,mCAAmC,QAAQ,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,sEAAsE;IACtE,oEAAoE;IACpE,sEAAsE;IACtE,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,cAAc,GAAG,IAAI,CAAC;QACtB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,4DAA4D;YAC5D,kEAAkE;YAClE,iEAAiE,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,mBAAmB,CAAC,YAAoB;IAC/C,QAAQ,YAAY,EAAE,CAAC;QACrB,KAAK,KAAK,CAAC,CAAC,CAAC;YACX,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YAC7C,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,WAAW,CAAC,2DAA2D,CAAC,CAAC;YAC7F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAC9B,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAC/C,IAAI,CAAC,IAAI;gBAAE,MAAM,IAAI,WAAW,CAAC,gEAAgE,CAAC,CAAC;YACnG,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;QACD,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,iBAAiB,CAAC;YACrE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,WAAW,CAAC,iDAAiD,KAAK,GAAG,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,4DAA4D;YAC5D,wEAAwE;YACxE,+DAA+D;YAC/D,kEAAkE;YAClE,8DAA8D;YAC9D,0DAA0D;YAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YACnD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,IAAI,WAAW,CACnB,gEAAgE;oBAC9D,sEAAsE,CACzE,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC3C,CAAC;QACD;YACE,MAAM,IAAI,WAAW,CACnB,yEAAyE,YAAY,GAAG,CACzF,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -17,6 +17,9 @@ export * from './config.js';
 export * from './token.js';
 export * from './types.js';
 export * from './semver.js';
+export * from './reflection.js';
+export * from './norm.js';
+export * from './protected-invariant-norms.js';
 export * from './mtls-health-ping.js';
 export * from './certs/index.js';
 export * from './registry/index.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AAIpC,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AAIpC,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAC5F,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/index.js

@@ -17,6 +17,9 @@ export * from './config.js';
 export * from './token.js';
 export * from './types.js';
 export * from './semver.js';
+export * from './reflection.js';
+export * from './norm.js';
+export * from './protected-invariant-norms.js';
 export * from './mtls-health-ping.js';
 export * from './certs/index.js';
 export * from './registry/index.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AAEpC,kEAAkE;AAClE,oEAAoE;AACpE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,WAAW,CAAC;AAC1B,cAAc,gCAAgC,CAAC;AAC/C,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AAEpC,kEAAkE;AAClE,oEAAoE;AACpE,OAAO,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/norm.d.ts

@@ -0,0 +1,256 @@
+/**
+ * Versioned structured-norm (Moise-style) representation + deontic
+ * conflict-checker (groundnuty/macf#504, DR-026 G2 — PR-1).
+ *
+ * This module gives the coordination protocol a *machine-checkable* form for
+ * its norms. A "norm" is a deontic statement — an obligation, permission, or
+ * prohibition — bound to a `(role, action, condition)` triple. G3's SECP
+ * invariant-validator (macf#505) consumes this representation to mechanically
+ * check that a proposed rule change never contradicts a protected invariant.
+ *
+ * --------------------------------------------------------------------------
+ * G2 MODELS, IT DOES NOT ENFORCE.
+ * --------------------------------------------------------------------------
+ * This is a *data model* only. The runtime governor is the existing set of
+ * `check-*.sh` PreToolUse/PostToolUse hooks plus the DR-026 auditor — they
+ * are what actually block/warn at tool-call time. `SceneSchema` below models
+ * the issue-lifecycle scene as data (states + transitions); it carries NO
+ * enforcement code. Nothing here runs at coordination time.
+ *
+ * --------------------------------------------------------------------------
+ * CONTROLLED VOCABULARIES — the load-bearing guardrail.
+ * --------------------------------------------------------------------------
+ * The conflict-checker matches norms on three keys: `role`, `action`,
+ * `condition`. If two genuinely-conflicting norms are spelled differently
+ * (`after_merge` vs `after-merge`), a naive checker silently fails to match
+ * them — producing FALSE CONFIDENCE, which is worse than no checker at all.
+ *
+ * To close that silent-miss, every match-key is a CLOSED Zod enum over a
+ * canonical token set, and `normalizeToken` is applied to inputs first
+ * (lowercase, collapse runs of `_`/whitespace/`-` to a single `-`). An
+ * unknown token after normalization is REJECTED by the schema, forcing a
+ * deliberate vocabulary extension rather than an accidental synonym.
+ *
+ * --------------------------------------------------------------------------
+ * POSITIVE-ACTION CONVENTION.
+ * --------------------------------------------------------------------------
+ * The `Action` enum carries ONLY positive actions (`self-merge`,
+ * `close-issue`, …) — NEVER negated forms (`not-self-merge`). Negation lives
+ * exclusively in the `deontic` field. This is deliberate: if negated actions
+ * were allowed, a `prohibition(merge-pr)` could be silently dodged by
+ * re-expressing it as `obligation(not-merge-pr)` — the same constraint under
+ * a key the conflict-checker would never group together. Keeping actions
+ * positive means a clash on a constraint is always visible on one shared key.
+ *
+ * --------------------------------------------------------------------------
+ * DEONTIC-CONFLICT MATRIX (within one (role, action, condition) group).
+ * --------------------------------------------------------------------------
+ *   obligation  ∧ prohibition  → CONFLICT  ("must" vs "must not")
+ *   permission  ∧ prohibition  → CONFLICT  ("may"  vs "must not")
+ *   obligation  ∧ permission   → consistent (obligation ⊨ permission)
+ * Same deontic on the same key is not a logical conflict; duplicate
+ * obligations get a NON-BLOCKING warning (likely a redundant rule).
+ *
+ * v1 SCOPE: matching is exact-token on the canonical triple. Condition
+ * subsumption (one condition implies another), temporal/deadline logic, and
+ * role-hierarchy inheritance are DEFERRED to the G3 increment (macf#505).
+ */
+import { z } from 'zod';
+/** Current norm schema version. Bump on a breaking shape change. */
+export declare const NORM_SCHEMA_VERSION: "1.0";
+/** Stable type-tag distinguishing norm records on a multi-kind ledger. */
+export declare const NORM_KIND: "macf.norm";
+/**
+ * Canonicalize a vocabulary token: lowercase, then collapse any run of
+ * underscores / whitespace / hyphens into a single hyphen, and trim leading
+ * and trailing hyphens. This is what makes `after_merge`, `after merge`,
+ * `After-Merge`, and `after--merge` all map to the ONE canonical token
+ * `after-merge`. Applied to every match-key before enum validation so the
+ * enum only ever sees canonical forms.
+ */
+export declare function normalizeToken(s: string): string;
+/**
+ * Canonical ROLE vocabulary — the coordination actors a norm can bind to.
+ * Closed set: an unknown role is rejected (extend deliberately).
+ */
+export declare const ROLE_TOKENS: readonly ["reporter", "implementer", "reviewer", "auditor", "operator", "deployment", "agent"];
+export declare const RoleSchema: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodEnum<{
+    agent: "agent";
+    reporter: "reporter";
+    implementer: "implementer";
+    reviewer: "reviewer";
+    auditor: "auditor";
+    operator: "operator";
+    deployment: "deployment";
+}>>;
+export type Role = (typeof ROLE_TOKENS)[number];
+/**
+ * Canonical ACTION vocabulary — POSITIVE actions only (see file header). Each
+ * is a thing an actor *does*; prohibition/obligation/permission is expressed
+ * via `deontic`, never by negating the action name.
+ */
+export declare const ACTION_TOKENS: readonly ["close-issue", "merge-pr", "self-merge", "auto-close-keyword", "implement", "mutate-universal-rule", "ratify-rule-change"];
+export declare const ActionSchema: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodEnum<{
+    "close-issue": "close-issue";
+    "merge-pr": "merge-pr";
+    "self-merge": "self-merge";
+    "auto-close-keyword": "auto-close-keyword";
+    implement: "implement";
+    "mutate-universal-rule": "mutate-universal-rule";
+    "ratify-rule-change": "ratify-rule-change";
+}>>;
+export type Action = (typeof ACTION_TOKENS)[number];
+/**
+ * Canonical CONDITION vocabulary — the circumstance under which the norm
+ * applies. `always` is the unconditioned default. Conditions are exact-match
+ * keys in v1 (no subsumption — deferred to G3).
+ */
+export declare const CONDITION_TOKENS: readonly ["always", "after-merge", "without-non-author-approval", "on-foreign-reporter-issue"];
+export declare const ConditionSchema: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodEnum<{
+    always: "always";
+    "after-merge": "after-merge";
+    "without-non-author-approval": "without-non-author-approval";
+    "on-foreign-reporter-issue": "on-foreign-reporter-issue";
+}>>;
+export type Condition = (typeof CONDITION_TOKENS)[number];
+/** The three deontic modalities. */
+export declare const DeonticSchema: z.ZodEnum<{
+    obligation: "obligation";
+    permission: "permission";
+    prohibition: "prohibition";
+}>;
+export type Deontic = z.infer<typeof DeonticSchema>;
+/** Which tier a norm belongs to (constitutional vs deployment-local). */
+export declare const NormTierSchema: z.ZodEnum<{
+    project: "project";
+    universal: "universal";
+}>;
+export type NormTier = z.infer<typeof NormTierSchema>;
+/**
+ * A single structured norm.
+ *
+ * `role` / `action` / `condition` are the three CANONICAL match-keys the
+ * conflict-checker groups on. `deontic` is the modality. `deadline` and
+ * `sanction` are optional descriptive fields (not used by the v1 checker —
+ * room for G3's temporal logic). `tier` + `provenance` record where the norm
+ * came from (the source rule / invariant), so a flagged conflict is traceable
+ * back to a human-readable rule.
+ */
+export declare const NormSchema: z.ZodObject<{
+    id: z.ZodString;
+    schema_version: z.ZodLiteral<"1.0">;
+    kind: z.ZodLiteral<"macf.norm">;
+    role: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodEnum<{
+        agent: "agent";
+        reporter: "reporter";
+        implementer: "implementer";
+        reviewer: "reviewer";
+        auditor: "auditor";
+        operator: "operator";
+        deployment: "deployment";
+    }>>;
+    deontic: z.ZodEnum<{
+        obligation: "obligation";
+        permission: "permission";
+        prohibition: "prohibition";
+    }>;
+    action: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodEnum<{
+        "close-issue": "close-issue";
+        "merge-pr": "merge-pr";
+        "self-merge": "self-merge";
+        "auto-close-keyword": "auto-close-keyword";
+        implement: "implement";
+        "mutate-universal-rule": "mutate-universal-rule";
+        "ratify-rule-change": "ratify-rule-change";
+    }>>;
+    condition: z.ZodPipe<z.ZodTransform<unknown, unknown>, z.ZodEnum<{
+        always: "always";
+        "after-merge": "after-merge";
+        "without-non-author-approval": "without-non-author-approval";
+        "on-foreign-reporter-issue": "on-foreign-reporter-issue";
+    }>>;
+    deadline: z.ZodOptional<z.ZodString>;
+    sanction: z.ZodOptional<z.ZodString>;
+    tier: z.ZodEnum<{
+        project: "project";
+        universal: "universal";
+    }>;
+    provenance: z.ZodString;
+}, z.core.$strip>;
+export type Norm = z.infer<typeof NormSchema>;
+/**
+ * A transition in the issue-lifecycle scene. `from`/`to` are state names;
+ * `roleGate` (optional) names the role permitted to drive the transition;
+ * `normRef` (optional) points at a `Norm.id` that governs it. Data-model
+ * only — no transition is *executed* anywhere; the runtime governor is the
+ * hooks + auditor.
+ */
+export declare const TransitionSchema: z.ZodObject<{
+    from: z.ZodString;
+    to: z.ZodString;
+    roleGate: z.ZodOptional<z.ZodString>;
+    normRef: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type Transition = z.infer<typeof TransitionSchema>;
+/**
+ * The issue-lifecycle scene: the set of states an issue moves through and the
+ * legal transitions between them, mirroring `coordination.md` §Issue
+ * Lifecycle + the agent-identity label table (open → in-progress → in-review
+ * → closed, with a blocked side-state). DATA ONLY — see file header.
+ */
+export declare const SceneSchema: z.ZodObject<{
+    id: z.ZodString;
+    schema_version: z.ZodLiteral<"1.0">;
+    kind: z.ZodLiteral<"macf.scene">;
+    states: z.ZodArray<z.ZodString>;
+    transitions: z.ZodArray<z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+        roleGate: z.ZodOptional<z.ZodString>;
+        normRef: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type Scene = z.infer<typeof SceneSchema>;
+/** The kind of deontic clash the checker found. */
+export declare const ConflictTypeSchema: z.ZodEnum<{
+    "obligation-vs-prohibition": "obligation-vs-prohibition";
+    "permission-vs-prohibition": "permission-vs-prohibition";
+}>;
+export type ConflictType = z.infer<typeof ConflictTypeSchema>;
+/** A detected conflict: the two clashing norms + the clash type. */
+export interface NormConflict {
+    readonly a: Norm;
+    readonly b: Norm;
+    readonly type: ConflictType;
+}
+/** A non-blocking advisory: same-key duplicate obligations (redundant rule). */
+export interface NormWarning {
+    readonly a: Norm;
+    readonly b: Norm;
+    readonly kind: 'duplicate-obligation';
+}
+/** The result of a conflict-check pass. */
+export interface ConflictCheckResult {
+    readonly conflicts: readonly NormConflict[];
+    readonly warnings: readonly NormWarning[];
+}
+/**
+ * Detect deontic conflicts among a set of norms.
+ *
+ * Groups norms by their already-canonical `(role, action, condition)` triple,
+ * then within each group compares every pair:
+ *   - opposite-modality clashes (obligation/prohibition, permission/prohibition)
+ *     are returned as CONFLICTS;
+ *   - duplicate obligations on the same key are returned as non-blocking
+ *     WARNINGS (a likely-redundant rule, not a contradiction).
+ *
+ * Because the keys are canonical (the schema normalized them), two norms that
+ * conflict but were spelled differently on input (`after_merge` vs
+ * `after-merge`) land in the SAME group and are correctly flagged — that is
+ * the whole point of the controlled vocabulary.
+ *
+ * v1 is exact-token grouping only. Condition subsumption, temporal/deadline
+ * reasoning, and role-hierarchy inheritance are DEFERRED to G3 (macf#505).
+ */
+export declare function detectNormConflicts(norms: readonly Norm[]): ConflictCheckResult;
+//# sourceMappingURL=norm.d.ts.map

package/dist/norm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"norm.d.ts","sourceRoot":"","sources":["../src/norm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oEAAoE;AACpE,eAAO,MAAM,mBAAmB,EAAG,KAAc,CAAC;AAElD,0EAA0E;AAC1E,eAAO,MAAM,SAAS,EAAG,WAAoB,CAAC;AAE9C;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAKhD;AAUD;;;GAGG;AACH,eAAO,MAAM,WAAW,gGAQd,CAAC;AACX,eAAO,MAAM,UAAU;;;;;;;;GAAiC,CAAC;AACzD,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,aAAa,sIAQhB,CAAC;AACX,eAAO,MAAM,YAAY;;;;;;;;GAAmC,CAAC;AAC7D,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpD;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,gGAKnB,CAAC;AACX,eAAO,MAAM,eAAe;;;;;GAAsC,CAAC;AACnE,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,oCAAoC;AACpC,eAAO,MAAM,aAAa;;;;EAAsD,CAAC;AACjF,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,yEAAyE;AACzE,eAAO,MAAM,cAAc;;;EAAmC,CAAC;AAC/D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;;;;;;;;GASG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAYrB,CAAC;AACH,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAE9C;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;iBAMtB,CAAC;AACH,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEhD,mDAAmD;AACnD,eAAO,MAAM,kBAAkB;;;EAG7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,oEAAoE;AACpE,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC;IACjB,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC;IACjB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;CAC7B;AAED,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC;IACjB,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC;IACjB,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;CACvC;AAED,2CAA2C;AAC3C,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,SAAS,YAAY,EAAE,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,SAAS,WAAW,EAAE,CAAC;CAC3C;AAyBD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,GAAG,mBAAmB,CA4B/E"}

package/dist/norm.js

@@ -0,0 +1,252 @@
+/**
+ * Versioned structured-norm (Moise-style) representation + deontic
+ * conflict-checker (groundnuty/macf#504, DR-026 G2 — PR-1).
+ *
+ * This module gives the coordination protocol a *machine-checkable* form for
+ * its norms. A "norm" is a deontic statement — an obligation, permission, or
+ * prohibition — bound to a `(role, action, condition)` triple. G3's SECP
+ * invariant-validator (macf#505) consumes this representation to mechanically
+ * check that a proposed rule change never contradicts a protected invariant.
+ *
+ * --------------------------------------------------------------------------
+ * G2 MODELS, IT DOES NOT ENFORCE.
+ * --------------------------------------------------------------------------
+ * This is a *data model* only. The runtime governor is the existing set of
+ * `check-*.sh` PreToolUse/PostToolUse hooks plus the DR-026 auditor — they
+ * are what actually block/warn at tool-call time. `SceneSchema` below models
+ * the issue-lifecycle scene as data (states + transitions); it carries NO
+ * enforcement code. Nothing here runs at coordination time.
+ *
+ * --------------------------------------------------------------------------
+ * CONTROLLED VOCABULARIES — the load-bearing guardrail.
+ * --------------------------------------------------------------------------
+ * The conflict-checker matches norms on three keys: `role`, `action`,
+ * `condition`. If two genuinely-conflicting norms are spelled differently
+ * (`after_merge` vs `after-merge`), a naive checker silently fails to match
+ * them — producing FALSE CONFIDENCE, which is worse than no checker at all.
+ *
+ * To close that silent-miss, every match-key is a CLOSED Zod enum over a
+ * canonical token set, and `normalizeToken` is applied to inputs first
+ * (lowercase, collapse runs of `_`/whitespace/`-` to a single `-`). An
+ * unknown token after normalization is REJECTED by the schema, forcing a
+ * deliberate vocabulary extension rather than an accidental synonym.
+ *
+ * --------------------------------------------------------------------------
+ * POSITIVE-ACTION CONVENTION.
+ * --------------------------------------------------------------------------
+ * The `Action` enum carries ONLY positive actions (`self-merge`,
+ * `close-issue`, …) — NEVER negated forms (`not-self-merge`). Negation lives
+ * exclusively in the `deontic` field. This is deliberate: if negated actions
+ * were allowed, a `prohibition(merge-pr)` could be silently dodged by
+ * re-expressing it as `obligation(not-merge-pr)` — the same constraint under
+ * a key the conflict-checker would never group together. Keeping actions
+ * positive means a clash on a constraint is always visible on one shared key.
+ *
+ * --------------------------------------------------------------------------
+ * DEONTIC-CONFLICT MATRIX (within one (role, action, condition) group).
+ * --------------------------------------------------------------------------
+ *   obligation  ∧ prohibition  → CONFLICT  ("must" vs "must not")
+ *   permission  ∧ prohibition  → CONFLICT  ("may"  vs "must not")
+ *   obligation  ∧ permission   → consistent (obligation ⊨ permission)
+ * Same deontic on the same key is not a logical conflict; duplicate
+ * obligations get a NON-BLOCKING warning (likely a redundant rule).
+ *
+ * v1 SCOPE: matching is exact-token on the canonical triple. Condition
+ * subsumption (one condition implies another), temporal/deadline logic, and
+ * role-hierarchy inheritance are DEFERRED to the G3 increment (macf#505).
+ */
+import { z } from 'zod';
+/** Current norm schema version. Bump on a breaking shape change. */
+export const NORM_SCHEMA_VERSION = '1.0';
+/** Stable type-tag distinguishing norm records on a multi-kind ledger. */
+export const NORM_KIND = 'macf.norm';
+/**
+ * Canonicalize a vocabulary token: lowercase, then collapse any run of
+ * underscores / whitespace / hyphens into a single hyphen, and trim leading
+ * and trailing hyphens. This is what makes `after_merge`, `after merge`,
+ * `After-Merge`, and `after--merge` all map to the ONE canonical token
+ * `after-merge`. Applied to every match-key before enum validation so the
+ * enum only ever sees canonical forms.
+ */
+export function normalizeToken(s) {
+    return s
+        .toLowerCase()
+        .replace(/[\s_-]+/g, '-')
+        .replace(/^-+|-+$/g, '');
+}
+/**
+ * A Zod preprocessor that normalizes the input token before the wrapped enum
+ * validates it. Non-string inputs pass through untouched so the enum produces
+ * its normal type error.
+ */
+const canonical = (schema) => z.preprocess((v) => (typeof v === 'string' ? normalizeToken(v) : v), schema);
+/**
+ * Canonical ROLE vocabulary — the coordination actors a norm can bind to.
+ * Closed set: an unknown role is rejected (extend deliberately).
+ */
+export const ROLE_TOKENS = [
+    'reporter',
+    'implementer',
+    'reviewer',
+    'auditor',
+    'operator',
+    'deployment',
+    'agent',
+];
+export const RoleSchema = canonical(z.enum(ROLE_TOKENS));
+/**
+ * Canonical ACTION vocabulary — POSITIVE actions only (see file header). Each
+ * is a thing an actor *does*; prohibition/obligation/permission is expressed
+ * via `deontic`, never by negating the action name.
+ */
+export const ACTION_TOKENS = [
+    'close-issue',
+    'merge-pr',
+    'self-merge',
+    'auto-close-keyword',
+    'implement',
+    'mutate-universal-rule',
+    'ratify-rule-change',
+];
+export const ActionSchema = canonical(z.enum(ACTION_TOKENS));
+/**
+ * Canonical CONDITION vocabulary — the circumstance under which the norm
+ * applies. `always` is the unconditioned default. Conditions are exact-match
+ * keys in v1 (no subsumption — deferred to G3).
+ */
+export const CONDITION_TOKENS = [
+    'always',
+    'after-merge',
+    'without-non-author-approval',
+    'on-foreign-reporter-issue',
+];
+export const ConditionSchema = canonical(z.enum(CONDITION_TOKENS));
+/** The three deontic modalities. */
+export const DeonticSchema = z.enum(['obligation', 'permission', 'prohibition']);
+/** Which tier a norm belongs to (constitutional vs deployment-local). */
+export const NormTierSchema = z.enum(['universal', 'project']);
+/**
+ * A single structured norm.
+ *
+ * `role` / `action` / `condition` are the three CANONICAL match-keys the
+ * conflict-checker groups on. `deontic` is the modality. `deadline` and
+ * `sanction` are optional descriptive fields (not used by the v1 checker —
+ * room for G3's temporal logic). `tier` + `provenance` record where the norm
+ * came from (the source rule / invariant), so a flagged conflict is traceable
+ * back to a human-readable rule.
+ */
+export const NormSchema = z.object({
+    id: z.string(),
+    schema_version: z.literal(NORM_SCHEMA_VERSION),
+    kind: z.literal(NORM_KIND),
+    role: RoleSchema,
+    deontic: DeonticSchema,
+    action: ActionSchema,
+    condition: ConditionSchema,
+    deadline: z.string().optional(),
+    sanction: z.string().optional(),
+    tier: NormTierSchema,
+    provenance: z.string(),
+});
+/**
+ * A transition in the issue-lifecycle scene. `from`/`to` are state names;
+ * `roleGate` (optional) names the role permitted to drive the transition;
+ * `normRef` (optional) points at a `Norm.id` that governs it. Data-model
+ * only — no transition is *executed* anywhere; the runtime governor is the
+ * hooks + auditor.
+ */
+export const TransitionSchema = z.object({
+    from: z.string(),
+    to: z.string(),
+    roleGate: z.string().optional(),
+    normRef: z.string().optional(),
+});
+/**
+ * The issue-lifecycle scene: the set of states an issue moves through and the
+ * legal transitions between them, mirroring `coordination.md` §Issue
+ * Lifecycle + the agent-identity label table (open → in-progress → in-review
+ * → closed, with a blocked side-state). DATA ONLY — see file header.
+ */
+export const SceneSchema = z.object({
+    id: z.string(),
+    schema_version: z.literal(NORM_SCHEMA_VERSION),
+    kind: z.literal('macf.scene'),
+    states: z.array(z.string()),
+    transitions: z.array(TransitionSchema),
+});
+/** The kind of deontic clash the checker found. */
+export const ConflictTypeSchema = z.enum([
+    'obligation-vs-prohibition',
+    'permission-vs-prohibition',
+]);
+/** The canonical group key for a norm: its (role, action, condition) triple. */
+function groupKey(n) {
+    // Values are already canonical (validated by the enums), so JSON-joining is
+    // a stable, collision-free key for grouping.
+    return JSON.stringify([n.role, n.action, n.condition]);
+}
+/**
+ * Is this an actual deontic conflict per the matrix? Returns the conflict
+ * type, or `null` if the pair is consistent.
+ *
+ *   obligation ∧ prohibition → conflict
+ *   permission ∧ prohibition → conflict
+ *   obligation ∧ permission  → consistent (obligation entails permission)
+ *   same modality            → consistent (handled as a warning elsewhere)
+ */
+function clashType(d1, d2) {
+    const pair = new Set([d1, d2]);
+    if (pair.has('prohibition') && pair.has('obligation'))
+        return 'obligation-vs-prohibition';
+    if (pair.has('prohibition') && pair.has('permission'))
+        return 'permission-vs-prohibition';
+    return null;
+}
+/**
+ * Detect deontic conflicts among a set of norms.
+ *
+ * Groups norms by their already-canonical `(role, action, condition)` triple,
+ * then within each group compares every pair:
+ *   - opposite-modality clashes (obligation/prohibition, permission/prohibition)
+ *     are returned as CONFLICTS;
+ *   - duplicate obligations on the same key are returned as non-blocking
+ *     WARNINGS (a likely-redundant rule, not a contradiction).
+ *
+ * Because the keys are canonical (the schema normalized them), two norms that
+ * conflict but were spelled differently on input (`after_merge` vs
+ * `after-merge`) land in the SAME group and are correctly flagged — that is
+ * the whole point of the controlled vocabulary.
+ *
+ * v1 is exact-token grouping only. Condition subsumption, temporal/deadline
+ * reasoning, and role-hierarchy inheritance are DEFERRED to G3 (macf#505).
+ */
+export function detectNormConflicts(norms) {
+    const groups = new Map();
+    for (const n of norms) {
+        const key = groupKey(n);
+        const bucket = groups.get(key);
+        if (bucket)
+            bucket.push(n);
+        else
+            groups.set(key, [n]);
+    }
+    const conflicts = [];
+    const warnings = [];
+    for (const bucket of groups.values()) {
+        for (let i = 0; i < bucket.length; i++) {
+            for (let j = i + 1; j < bucket.length; j++) {
+                const a = bucket[i];
+                const b = bucket[j];
+                const type = clashType(a.deontic, b.deontic);
+                if (type) {
+                    conflicts.push({ a, b, type });
+                }
+                else if (a.deontic === 'obligation' && b.deontic === 'obligation') {
+                    warnings.push({ a, b, kind: 'duplicate-obligation' });
+                }
+            }
+        }
+    }
+    return { conflicts, warnings };
+}
+//# sourceMappingURL=norm.js.map

package/dist/norm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"norm.js","sourceRoot":"","sources":["../src/norm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,oEAAoE;AACpE,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAc,CAAC;AAElD,0EAA0E;AAC1E,MAAM,CAAC,MAAM,SAAS,GAAG,WAAoB,CAAC;AAE9C;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,CAAS;IACtC,OAAO,CAAC;SACL,WAAW,EAAE;SACb,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC;SACxB,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,SAAS,GAAG,CAAsB,MAAS,EAAE,EAAE,CACnD,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;AAE/E;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,UAAU;IACV,aAAa;IACb,UAAU;IACV,SAAS;IACT,UAAU;IACV,YAAY;IACZ,OAAO;CACC,CAAC;AACX,MAAM,CAAC,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;AAGzD;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,aAAa;IACb,UAAU;IACV,YAAY;IACZ,oBAAoB;IACpB,WAAW;IACX,uBAAuB;IACvB,oBAAoB;CACZ,CAAC;AACX,MAAM,CAAC,MAAM,YAAY,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC;AAG7D;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ;IACR,aAAa;IACb,6BAA6B;IAC7B,2BAA2B;CACnB,CAAC;AACX,MAAM,CAAC,MAAM,eAAe,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,CAAC;AAGnE,oCAAoC;AACpC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,CAAC;AAGjF,yEAAyE;AACzE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;AAG/D;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,aAAa;IACtB,MAAM,EAAE,YAAY;IACpB,SAAS,EAAE,eAAe;IAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,IAAI,EAAE,cAAc;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;CACvB,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAC9C,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC7B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;CACvC,CAAC,CAAC;AAGH,mDAAmD;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,2BAA2B;IAC3B,2BAA2B;CAC5B,CAAC,CAAC;AAuBH,gFAAgF;AAChF,SAAS,QAAQ,CAAC,CAAO;IACvB,4EAA4E;IAC5E,6CAA6C;IAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,EAAW,EAAE,EAAW;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/B,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,2BAA2B,CAAC;IAC1F,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,2BAA2B,CAAC;IAC1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAsB;IACxD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YACtB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC;IAED,MAAM,SAAS,GAAmB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBAC3C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;gBACrB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;gBAC7C,IAAI,IAAI,EAAE,CAAC;oBACT,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjC,CAAC;qBAAM,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY,IAAI,CAAC,CAAC,OAAO,KAAK,YAAY,EAAE,CAAC;oBACpE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC"}

package/dist/protected-invariant-norms.d.ts

@@ -0,0 +1,37 @@
+import type { Norm } from './norm.js';
+import { z } from 'zod';
+/**
+ * A protected invariant that is a structural PROPERTY rather than a deontic
+ * norm. `statement` restates the guarantee; `whyNotANorm` records why it
+ * resists the `(role, action, condition)` shape; `enforcement` names the
+ * mechanism that actually guarantees it at runtime.
+ */
+export declare const StructuralInvariantSchema: z.ZodObject<{
+    id: z.ZodString;
+    statement: z.ZodString;
+    whyNotANorm: z.ZodString;
+    enforcement: z.ZodString;
+}, z.core.$strip>;
+export type StructuralInvariant = z.infer<typeof StructuralInvariantSchema>;
+/**
+ * The norm-expressible protected invariants. Each `provenance` points back at
+ * the numbered entry in `design/protected-invariants.md`.
+ */
+export declare const PROTECTED_INVARIANT_NORMS: readonly Norm[];
+/**
+ * The structural-property protected invariants. These are guarantees the
+ * conflict-checker does NOT reason over — they are enforced by mechanisms, not
+ * by deontic logic. Tagged here so the full set of 10 is accounted for and G3
+ * knows to route them to the structural-enforcement check, not the norm
+ * conflict-check.
+ */
+export declare const PROTECTED_STRUCTURAL_INVARIANTS: readonly StructuralInvariant[];
+/**
+ * Short machine-readable taxonomy note: which of the 10 invariants became a
+ * norm vs a structural property. Mirrors `design/structured-norms.md`.
+ */
+export declare const PROTECTED_INVARIANT_TAXONOMY: {
+    readonly normExpressible: readonly [1, 3, 5, 8, 9, 10];
+    readonly structural: readonly [2, 4, 6, 7];
+};
+//# sourceMappingURL=protected-invariant-norms.d.ts.map

package/dist/protected-invariant-norms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-invariant-norms.d.ts","sourceRoot":"","sources":["../src/protected-invariant-norms.ts"],"names":[],"mappings":"AA8CA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;iBAKpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAW5E;;;GAGG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,IAAI,EAuFpD,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,mBAAmB,EAqCzE,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;CAG/B,CAAC"}

package/dist/protected-invariant-norms.js

@@ -0,0 +1,196 @@
+/**
+ * The 10 protected invariants, expressed in the structured-norm representation
+ * (groundnuty/macf#504, DR-026 G2 — PR-1).
+ *
+ * Source of truth for the prose: `design/protected-invariants.md` (ratified
+ * 2026-06-16). This module is the *machine-readable* projection of that set,
+ * the foundation G3's SECP invariant-validator (macf#505) consumes to check a
+ * proposed rule change against the constitutional core.
+ *
+ * --------------------------------------------------------------------------
+ * NORM-vs-STRUCTURAL TAXONOMY.
+ * --------------------------------------------------------------------------
+ * Not every invariant is a deontic norm. Forcing a property-invariant into a
+ * `(role, action, condition)` shape it doesn't fit produces a norm that lies
+ * about what it constrains — and the conflict-checker would then reason over a
+ * fiction. So each invariant is classified:
+ *
+ *   - NORM-EXPRESSIBLE  → a `Norm` (obligation/permission/prohibition bound to
+ *                         a role + a positive action + a condition).
+ *   - STRUCTURAL PROPERTY → a `StructuralInvariant` (a property/meta-principle
+ *                           enforced by a mechanism — a hook, the
+ *                           result-invariant pattern — NOT by a deontic norm).
+ *
+ * The split (and the #4/#7 judgement calls) is documented in
+ * `design/structured-norms.md` and asserted by the tests.
+ *
+ *   #1  reporter-owns-closure        → NORM   obligation
+ *   #2  identity ↔ attribution       → STRUCTURAL (a property of every action)
+ *   #3  LGTM gate / no-self-merge     → NORM   prohibition
+ *   #4  routing integrity            → STRUCTURAL (a property of comments; the
+ *                                      @mention is a transport precondition,
+ *                                      not a role's deontic action — science
+ *                                      leaned structural; concurred)
+ *   #5  auto-close discipline        → NORM   prohibition
+ *   #6  fail-loud over silent-fallback → STRUCTURAL (a meta-principle over ops)
+ *   #7  PR-for-every-artifact        → STRUCTURAL (no clean positive action
+ *                                      token without contortion; "land via PR"
+ *                                      is a property of the artifact-landing
+ *                                      path, enforced by hooks/CI/review —
+ *                                      science leaned structural; concurred)
+ *   #8  auditor never-acts           → NORM   prohibition (×3 actions)
+ *   #9  operator-as-ratifier         → NORM   obligation
+ *   #10 universal rules not locally  → NORM   prohibition
+ *       mutable
+ */
+import { NormSchema, NORM_SCHEMA_VERSION, NORM_KIND } from './norm.js';
+import { z } from 'zod';
+/**
+ * A protected invariant that is a structural PROPERTY rather than a deontic
+ * norm. `statement` restates the guarantee; `whyNotANorm` records why it
+ * resists the `(role, action, condition)` shape; `enforcement` names the
+ * mechanism that actually guarantees it at runtime.
+ */
+export const StructuralInvariantSchema = z.object({
+    id: z.string(),
+    statement: z.string(),
+    whyNotANorm: z.string(),
+    enforcement: z.string(),
+});
+/** Shorthand to build a validated `Norm` with the fixed envelope fields. */
+function norm(spec) {
+    return NormSchema.parse({
+        ...spec,
+        schema_version: NORM_SCHEMA_VERSION,
+        kind: NORM_KIND,
+    });
+}
+/**
+ * The norm-expressible protected invariants. Each `provenance` points back at
+ * the numbered entry in `design/protected-invariants.md`.
+ */
+export const PROTECTED_INVARIANT_NORMS = [
+    // #1 — the agent who opened an issue owns its closure (after the fix merges).
+    norm({
+        id: 'pi-1-reporter-owns-closure',
+        role: 'reporter',
+        deontic: 'obligation',
+        action: 'close-issue',
+        condition: 'after-merge',
+        tier: 'universal',
+        provenance: 'protected-invariants.md #1',
+    }),
+    // #3 — no PR merges without a non-author APPROVED review.
+    norm({
+        id: 'pi-3-lgtm-gate',
+        role: 'implementer',
+        deontic: 'prohibition',
+        action: 'merge-pr',
+        condition: 'without-non-author-approval',
+        tier: 'universal',
+        provenance: 'protected-invariants.md #3',
+    }),
+    // #5 — never use a GitHub auto-close keyword on a foreign-reporter issue.
+    norm({
+        id: 'pi-5-auto-close-discipline',
+        role: 'implementer',
+        deontic: 'prohibition',
+        action: 'auto-close-keyword',
+        condition: 'on-foreign-reporter-issue',
+        tier: 'universal',
+        provenance: 'protected-invariants.md #5',
+    }),
+    // #8 — the auditor proposes only; it can neither merge, close others' work,
+    // nor implement. Modelled as three positive-action prohibitions (the
+    // positive-action convention forbids a single negated "act" token).
+    norm({
+        id: 'pi-8-auditor-never-merge',
+        role: 'auditor',
+        deontic: 'prohibition',
+        action: 'merge-pr',
+        condition: 'always',
+        tier: 'universal',
+        provenance: 'protected-invariants.md #8',
+    }),
+    norm({
+        id: 'pi-8-auditor-never-close',
+        role: 'auditor',
+        deontic: 'prohibition',
+        action: 'close-issue',
+        condition: 'always',
+        tier: 'universal',
+        provenance: 'protected-invariants.md #8',
+    }),
+    norm({
+        id: 'pi-8-auditor-never-implement',
+        role: 'auditor',
+        deontic: 'prohibition',
+        action: 'implement',
+        condition: 'always',
+        tier: 'universal',
+        provenance: 'protected-invariants.md #8',
+    }),
+    // #9 — no rule change is auto-applied; the operator ratifies.
+    norm({
+        id: 'pi-9-operator-ratifier',
+        role: 'operator',
+        deontic: 'obligation',
+        action: 'ratify-rule-change',
+        condition: 'always',
+        tier: 'universal',
+        provenance: 'protected-invariants.md #9',
+    }),
+    // #10 — a deployment may only PR universal rules upstream; never patch them
+    // locally.
+    norm({
+        id: 'pi-10-no-local-universal-mutation',
+        role: 'deployment',
+        deontic: 'prohibition',
+        action: 'mutate-universal-rule',
+        condition: 'always',
+        tier: 'universal',
+        provenance: 'protected-invariants.md #10',
+    }),
+];
+/**
+ * The structural-property protected invariants. These are guarantees the
+ * conflict-checker does NOT reason over — they are enforced by mechanisms, not
+ * by deontic logic. Tagged here so the full set of 10 is accounted for and G3
+ * knows to route them to the structural-enforcement check, not the norm
+ * conflict-check.
+ */
+export const PROTECTED_STRUCTURAL_INVARIANTS = [
+    {
+        id: 'pi-2-identity-attribution',
+        statement: 'Every agent action is attributed to that agent’s distinct external identity (its bot App), never silently to the operator or another agent.',
+        whyNotANorm: 'A cross-cutting PROPERTY of every action, not a single role’s deontic act on a (role, action, condition) key. There is no one "attribute" action to obligate/prohibit; the guarantee holds over all actions at once.',
+        enforcement: 'check-gh-token.sh (PreToolUse, ghs_ prefix) + check-gh-attribution.sh (PostToolUse result-invariant, macf#489/#491). silent-fallback Instances 1, 12.',
+    },
+    {
+        id: 'pi-4-routing-integrity',
+        statement: 'A cross-agent comment must carry a routing-active @mention to reach its recipient; describing-context mentions must not false-route.',
+        whyNotANorm: 'A property of the message-transport surface (a comment’s @mention is a delivery precondition), not a deontic action a role does. Modelling it as obligation(agent, mention, …) would contort a transport invariant into a role-action norm; science leaned structural and we concur.',
+        enforcement: 'check-mention-routing.sh Check A (must-have-mention) + Check B (must-not-leak describing-context). mention-routing-hygiene; macf#244/#272.',
+    },
+    {
+        id: 'pi-6-fail-loud',
+        statement: 'Operations that can silently fall back to a wrong identity/scope/target must assert a result-invariant, not merely an exit code.',
+        whyNotANorm: 'A meta-principle about HOW operations are written (assert the result, not just the exit code), spanning many actions — not a single (role, action, condition) deontic statement.',
+        enforcement: 'The result-invariant pattern (e.g. check-gh-attribution.sh checks who actually authored the resource). silent-fallback-hazards.',
+    },
+    {
+        id: 'pi-7-pr-for-every-artifact',
+        statement: 'Persistent artifacts land via PR (review + CI + audit + rollback checkpoint); only narrow operator-terminal recoveries excepted.',
+        whyNotANorm: 'No clean positive ACTION token captures "land via PR" without contortion — it is a property of the artifact-landing PATH (PR + review + CI), enforced by hooks/CI/review discipline, with an operator-terminal exception that a flat deontic norm cannot express. science leaned structural and we concur.',
+        enforcement: 'pr-discipline rules + the LGTM-gate hook (check-lgtm-gate.sh, macf#270) + CI required checks. pr-discipline; protected-invariants.md #7.',
+    },
+];
+/**
+ * Short machine-readable taxonomy note: which of the 10 invariants became a
+ * norm vs a structural property. Mirrors `design/structured-norms.md`.
+ */
+export const PROTECTED_INVARIANT_TAXONOMY = {
+    normExpressible: [1, 3, 5, 8, 9, 10],
+    structural: [2, 4, 6, 7],
+};
+//# sourceMappingURL=protected-invariant-norms.js.map

package/dist/protected-invariant-norms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protected-invariant-norms.js","sourceRoot":"","sources":["../src/protected-invariant-norms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEvE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAGH,4EAA4E;AAC5E,SAAS,IAAI,CAAC,IAA2C;IACvD,OAAO,UAAU,CAAC,KAAK,CAAC;QACtB,GAAG,IAAI;QACP,cAAc,EAAE,mBAAmB;QACnC,IAAI,EAAE,SAAS;KAChB,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAoB;IACxD,8EAA8E;IAC9E,IAAI,CAAC;QACH,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,aAAa;QACxB,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,4BAA4B;KACzC,CAAC;IAEF,0DAA0D;IAC1D,IAAI,CAAC;QACH,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,UAAU;QAClB,SAAS,EAAE,6BAA6B;QACxC,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,4BAA4B;KACzC,CAAC;IAEF,0EAA0E;IAC1E,IAAI,CAAC;QACH,EAAE,EAAE,4BAA4B;QAChC,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,oBAAoB;QAC5B,SAAS,EAAE,2BAA2B;QACtC,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,4BAA4B;KACzC,CAAC;IAEF,4EAA4E;IAC5E,qEAAqE;IACrE,oEAAoE;IACpE,IAAI,CAAC;QACH,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,UAAU;QAClB,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,4BAA4B;KACzC,CAAC;IACF,IAAI,CAAC;QACH,EAAE,EAAE,0BAA0B;QAC9B,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,aAAa;QACrB,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,4BAA4B;KACzC,CAAC;IACF,IAAI,CAAC;QACH,EAAE,EAAE,8BAA8B;QAClC,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,4BAA4B;KACzC,CAAC;IAEF,8DAA8D;IAC9D,IAAI,CAAC;QACH,EAAE,EAAE,wBAAwB;QAC5B,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,YAAY;QACrB,MAAM,EAAE,oBAAoB;QAC5B,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,4BAA4B;KACzC,CAAC;IAEF,4EAA4E;IAC5E,WAAW;IACX,IAAI,CAAC;QACH,EAAE,EAAE,mCAAmC;QACvC,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,uBAAuB;QAC/B,SAAS,EAAE,QAAQ;QACnB,IAAI,EAAE,WAAW;QACjB,UAAU,EAAE,6BAA6B;KAC1C,CAAC;CACH,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAmC;IAC7E;QACE,EAAE,EAAE,2BAA2B;QAC/B,SAAS,EACP,6IAA6I;QAC/I,WAAW,EACT,sNAAsN;QACxN,WAAW,EACT,uJAAuJ;KAC1J;IACD;QACE,EAAE,EAAE,wBAAwB;QAC5B,SAAS,EACP,sIAAsI;QACxI,WAAW,EACT,sRAAsR;QACxR,WAAW,EACT,4IAA4I;KAC/I;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,SAAS,EACP,kIAAkI;QACpI,WAAW,EACT,kLAAkL;QACpL,WAAW,EACT,iIAAiI;KACpI;IACD;QACE,EAAE,EAAE,4BAA4B;QAChC,SAAS,EACP,kIAAkI;QACpI,WAAW,EACT,4SAA4S;QAC9S,WAAW,EACT,0IAA0I;KAC7I;CACF,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;IACpC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;CAChB,CAAC"}

package/dist/reflection.d.ts

@@ -0,0 +1,152 @@
+/**
+ * Versioned reflection-record schema (groundnuty/macf#500, DR-026 F2).
+ *
+ * A "reflection" is a single JSON object an agent emits at compaction time:
+ * the `harvest-reflection.sh` PreCompact hook (Deliverable 2) reads a *staged*
+ * reflection the agent maintains incrementally in
+ * `.claude/.macf/reflections/pending.json` (see `reflection-staging.md`), wraps
+ * it in this schema envelope, and appends it as one line to a local JSONL
+ * ledger. F4's Monitor imports this schema to read the ledger back.
+ *
+ * Forward-compat is carried by two envelope fields:
+ *   - `schema_version` ("1.0") — F4's reader can branch on the version when the
+ *     shape evolves.
+ *   - `kind` ("macf.reflection") — a stable type-tag so a multi-kind ledger (or
+ *     a shared bus) can discriminate reflection records from other record types.
+ *
+ * Defaults make a *mechanical-only* record valid: every array defaults to `[]`
+ * and `synthesis` to `""`. The hook ALWAYS emits a record at PreCompact (even
+ * with no staged content) so the Monitor sees that a compaction happened.
+ *
+ * The optional `key` fields on `observed_patterns` / `rule_evolution_signals`
+ * are reserved for deterministic cross-agent dedup later (G1's membrane) —
+ * additive and unused now.
+ */
+import { z } from 'zod';
+/** Current reflection schema version. Bump on a breaking shape change. */
+export declare const REFLECTION_SCHEMA_VERSION: "1.0";
+/** Stable type-tag distinguishing reflection records on a multi-kind ledger. */
+export declare const REFLECTION_KIND: "macf.reflection";
+/**
+ * A pattern the agent observed during the session — a recurring behaviour,
+ * coordination dynamic, or workflow shape worth surfacing. `tier_hint` is the
+ * agent's loose guess at where this belongs (e.g. a rule tier / promotion
+ * path); kept as a free-form string so the schema doesn't pin a taxonomy the
+ * governance layer hasn't frozen yet. `key` (optional) is the future
+ * cross-agent dedup handle — additive, unused now.
+ */
+export declare const ObservedPatternSchema: z.ZodObject<{
+    pattern: z.ZodString;
+    evidence: z.ZodString;
+    tier_hint: z.ZodString;
+    key: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type ObservedPattern = z.infer<typeof ObservedPatternSchema>;
+/**
+ * A canonical-rule breach the agent committed or witnessed. `rule` names the
+ * rule, `what` describes the breach, `ref` points at the supporting evidence
+ * (an issue/PR/commit ref, a file:line, a rule-doc anchor).
+ */
+export declare const ReflectionBreachSchema: z.ZodObject<{
+    rule: z.ZodString;
+    what: z.ZodString;
+    ref: z.ZodString;
+}, z.core.$strip>;
+export type ReflectionBreach = z.infer<typeof ReflectionBreachSchema>;
+/**
+ * A signal that a coordination rule should evolve — a proposal the governance
+ * layer (DR-026 auditor) can later weigh. `proposed_tier` is the tier the agent
+ * suggests the signal be promoted into (free-form for the same reason as
+ * `tier_hint` above). `key` (optional) is the future cross-agent dedup handle.
+ */
+export declare const RuleEvolutionSignalSchema: z.ZodObject<{
+    signal: z.ZodString;
+    proposed_tier: z.ZodString;
+    rationale: z.ZodString;
+    key: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type RuleEvolutionSignal = z.infer<typeof RuleEvolutionSignalSchema>;
+/** The agent's identity at emission time. */
+export declare const ReflectionAgentSchema: z.ZodObject<{
+    name: z.ZodString;
+    role: z.ZodString;
+    login: z.ZodString;
+}, z.core.$strip>;
+export type ReflectionAgent = z.infer<typeof ReflectionAgentSchema>;
+/**
+ * The full reflection record — one JSON object per JSONL line.
+ *
+ * `compaction_type` mirrors the PreCompact payload's `trigger` field
+ * ("auto" | "manual"); `null` when the hook couldn't read it. `trigger` is the
+ * fixed literal `"pre-compact"` recording WHICH hook produced the record (room
+ * for future non-compaction reflection emitters).
+ */
+export declare const ReflectionRecordSchema: z.ZodObject<{
+    schema_version: z.ZodLiteral<"1.0">;
+    kind: z.ZodLiteral<"macf.reflection">;
+    agent: z.ZodObject<{
+        name: z.ZodString;
+        role: z.ZodString;
+        login: z.ZodString;
+    }, z.core.$strip>;
+    project: z.ZodString;
+    session_id: z.ZodString;
+    timestamp: z.ZodString;
+    trigger: z.ZodLiteral<"pre-compact">;
+    compaction_type: z.ZodNullable<z.ZodEnum<{
+        auto: "auto";
+        manual: "manual";
+    }>>;
+    observed_patterns: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        pattern: z.ZodString;
+        evidence: z.ZodString;
+        tier_hint: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    breaches: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        rule: z.ZodString;
+        what: z.ZodString;
+        ref: z.ZodString;
+    }, z.core.$strip>>>;
+    rule_evolution_signals: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        signal: z.ZodString;
+        proposed_tier: z.ZodString;
+        rationale: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    unresolved: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    synthesis: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+export type ReflectionRecord = z.infer<typeof ReflectionRecordSchema>;
+/**
+ * The staged-reflection shape the agent maintains in
+ * `.claude/.macf/reflections/pending.json` (see `reflection-staging.md`). Only
+ * the protocol-signal fields live here — the envelope (`schema_version`,
+ * `kind`, `agent`, `project`, `session_id`, `timestamp`, `trigger`,
+ * `compaction_type`) is added by the hook at harvest time. Every field is
+ * optional/defaulted so an empty `{}` stage is valid (and is what the hook
+ * writes back to clear the stage).
+ */
+export declare const ReflectionStageSchema: z.ZodObject<{
+    observed_patterns: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        pattern: z.ZodString;
+        evidence: z.ZodString;
+        tier_hint: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    breaches: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        rule: z.ZodString;
+        what: z.ZodString;
+        ref: z.ZodString;
+    }, z.core.$strip>>>;
+    rule_evolution_signals: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        signal: z.ZodString;
+        proposed_tier: z.ZodString;
+        rationale: z.ZodString;
+        key: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    unresolved: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    synthesis: z.ZodDefault<z.ZodString>;
+}, z.core.$strip>;
+export type ReflectionStage = z.infer<typeof ReflectionStageSchema>;
+//# sourceMappingURL=reflection.d.ts.map

package/dist/reflection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reflection.d.ts","sourceRoot":"","sources":["../src/reflection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0EAA0E;AAC1E,eAAO,MAAM,yBAAyB,EAAG,KAAc,CAAC;AAExD,gFAAgF;AAChF,eAAO,MAAM,eAAe,EAAG,iBAA0B,CAAC;AAE1D;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;iBAIjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;iBAKpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,6CAA6C;AAC7C,eAAO,MAAM,qBAAqB;;;;iBAIhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;;GAQG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;iBAMhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/reflection.js

@@ -0,0 +1,115 @@
+/**
+ * Versioned reflection-record schema (groundnuty/macf#500, DR-026 F2).
+ *
+ * A "reflection" is a single JSON object an agent emits at compaction time:
+ * the `harvest-reflection.sh` PreCompact hook (Deliverable 2) reads a *staged*
+ * reflection the agent maintains incrementally in
+ * `.claude/.macf/reflections/pending.json` (see `reflection-staging.md`), wraps
+ * it in this schema envelope, and appends it as one line to a local JSONL
+ * ledger. F4's Monitor imports this schema to read the ledger back.
+ *
+ * Forward-compat is carried by two envelope fields:
+ *   - `schema_version` ("1.0") — F4's reader can branch on the version when the
+ *     shape evolves.
+ *   - `kind` ("macf.reflection") — a stable type-tag so a multi-kind ledger (or
+ *     a shared bus) can discriminate reflection records from other record types.
+ *
+ * Defaults make a *mechanical-only* record valid: every array defaults to `[]`
+ * and `synthesis` to `""`. The hook ALWAYS emits a record at PreCompact (even
+ * with no staged content) so the Monitor sees that a compaction happened.
+ *
+ * The optional `key` fields on `observed_patterns` / `rule_evolution_signals`
+ * are reserved for deterministic cross-agent dedup later (G1's membrane) —
+ * additive and unused now.
+ */
+import { z } from 'zod';
+/** Current reflection schema version. Bump on a breaking shape change. */
+export const REFLECTION_SCHEMA_VERSION = '1.0';
+/** Stable type-tag distinguishing reflection records on a multi-kind ledger. */
+export const REFLECTION_KIND = 'macf.reflection';
+/**
+ * A pattern the agent observed during the session — a recurring behaviour,
+ * coordination dynamic, or workflow shape worth surfacing. `tier_hint` is the
+ * agent's loose guess at where this belongs (e.g. a rule tier / promotion
+ * path); kept as a free-form string so the schema doesn't pin a taxonomy the
+ * governance layer hasn't frozen yet. `key` (optional) is the future
+ * cross-agent dedup handle — additive, unused now.
+ */
+export const ObservedPatternSchema = z.object({
+    pattern: z.string(),
+    evidence: z.string(),
+    tier_hint: z.string(),
+    key: z.string().optional(),
+});
+/**
+ * A canonical-rule breach the agent committed or witnessed. `rule` names the
+ * rule, `what` describes the breach, `ref` points at the supporting evidence
+ * (an issue/PR/commit ref, a file:line, a rule-doc anchor).
+ */
+export const ReflectionBreachSchema = z.object({
+    rule: z.string(),
+    what: z.string(),
+    ref: z.string(),
+});
+/**
+ * A signal that a coordination rule should evolve — a proposal the governance
+ * layer (DR-026 auditor) can later weigh. `proposed_tier` is the tier the agent
+ * suggests the signal be promoted into (free-form for the same reason as
+ * `tier_hint` above). `key` (optional) is the future cross-agent dedup handle.
+ */
+export const RuleEvolutionSignalSchema = z.object({
+    signal: z.string(),
+    proposed_tier: z.string(),
+    rationale: z.string(),
+    key: z.string().optional(),
+});
+/** The agent's identity at emission time. */
+export const ReflectionAgentSchema = z.object({
+    name: z.string(),
+    role: z.string(),
+    login: z.string(),
+});
+/**
+ * The full reflection record — one JSON object per JSONL line.
+ *
+ * `compaction_type` mirrors the PreCompact payload's `trigger` field
+ * ("auto" | "manual"); `null` when the hook couldn't read it. `trigger` is the
+ * fixed literal `"pre-compact"` recording WHICH hook produced the record (room
+ * for future non-compaction reflection emitters).
+ */
+export const ReflectionRecordSchema = z.object({
+    schema_version: z.literal(REFLECTION_SCHEMA_VERSION),
+    kind: z.literal(REFLECTION_KIND),
+    agent: ReflectionAgentSchema,
+    project: z.string(),
+    session_id: z.string(),
+    // ISO8601 UTC, e.g. 2026-06-16T04:40:39Z.
+    timestamp: z.string(),
+    trigger: z.literal('pre-compact'),
+    compaction_type: z.enum(['auto', 'manual']).nullable(),
+    // Arrays default [] and synthesis defaults "" → a mechanical-only record
+    // (no staged content) is valid. `.default()` keeps the field optional on the
+    // wire while inferring a non-optional type for consumers.
+    observed_patterns: z.array(ObservedPatternSchema).default([]),
+    breaches: z.array(ReflectionBreachSchema).default([]),
+    rule_evolution_signals: z.array(RuleEvolutionSignalSchema).default([]),
+    unresolved: z.array(z.string()).default([]),
+    synthesis: z.string().default(''),
+});
+/**
+ * The staged-reflection shape the agent maintains in
+ * `.claude/.macf/reflections/pending.json` (see `reflection-staging.md`). Only
+ * the protocol-signal fields live here — the envelope (`schema_version`,
+ * `kind`, `agent`, `project`, `session_id`, `timestamp`, `trigger`,
+ * `compaction_type`) is added by the hook at harvest time. Every field is
+ * optional/defaulted so an empty `{}` stage is valid (and is what the hook
+ * writes back to clear the stage).
+ */
+export const ReflectionStageSchema = z.object({
+    observed_patterns: z.array(ObservedPatternSchema).default([]),
+    breaches: z.array(ReflectionBreachSchema).default([]),
+    rule_evolution_signals: z.array(RuleEvolutionSignalSchema).default([]),
+    unresolved: z.array(z.string()).default([]),
+    synthesis: z.string().default(''),
+});
+//# sourceMappingURL=reflection.js.map

package/dist/reflection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reflection.js","sourceRoot":"","sources":["../src/reflection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0EAA0E;AAC1E,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAc,CAAC;AAExD,gFAAgF;AAChF,MAAM,CAAC,MAAM,eAAe,GAAG,iBAA0B,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAGH;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;CAChB,CAAC,CAAC;AAGH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAGH,6CAA6C;AAC7C,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC;AAGH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,KAAK,EAAE,qBAAqB;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,0CAA0C;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IACjC,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtD,yEAAyE;IACzE,6EAA6E;IAC7E,0DAA0D;IAC1D,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7D,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAClC,CAAC,CAAC;AAGH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7D,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CAClC,CAAC,CAAC"}

package/dist/types.d.ts

@@ -45,6 +45,7 @@ export declare const NotifyPayloadSchema: z.ZodObject<{
         "session-end": "session-end";
         "turn-complete": "turn-complete";
     }>>;
+    github_anchor: z.ZodOptional<z.ZodString>;
     review_state: z.ZodOptional<z.ZodEnum<{
         approved: "approved";
         changes_requested: "changes_requested";
@@ -152,6 +153,15 @@ export declare const HealthResponseSchema: z.ZodObject<{
 export type HealthResponse = z.infer<typeof HealthResponseSchema>;
 export interface AgentConfig {
     readonly agentName: string;
+    /**
+     * The routing identity — registry key + cert CN (macf#538). Distinct from
+     * `agentName` (the OTEL bot-name): on the substrate `agentName` is
+     * `macf-devops-agent` while `routingLabel` is `devops-agent`; on greenfield
+     * agents they coincide. Sourced from `MACF_ROUTING_LABEL`, defaulting to
+     * `agentName` (back-compat). Use this — not `agentName` — for registry
+     * register/remove/collision lookups.
+     */
+    readonly routingLabel: string;
     readonly agentType: string;
     readonly agentRole: string;
     readonly host: string;

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,gBAAgB;;;;;;;EA4B3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAK1D,eAAO,MAAM,0BAA0B;;;;;EAErC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiD9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;iBASpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;iBAUxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;iBAOrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E,eAAO,MAAM,oBAAoB;;;;;;;;iBAQ/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,qBAAqB,EAAE,cAAc,CAAC;IAChE;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAYD,eAAO,MAAM,iBAAiB;;;;;;iBAS7B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAI5D,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AAIH,eAAO,MAAM,oBAAoB;;iBAE/B,CAAC;AAIH,eAAO,MAAM,mBAAmB;;iBAE9B,CAAC;AAIH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACvE,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACvE,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACzE;AAID,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7F;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzF,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,cAAc,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC;CACzC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,gBAAgB;;;;;;;EA4B3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAK1D,eAAO,MAAM,0BAA0B;;;;;EAErC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAmD9B,CAAC;AAEH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;iBASpC,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B;;;;;;;;;;;iBAUxC,CAAC;AAEH,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAEpF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;iBAOrC,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAI9E,eAAO,MAAM,oBAAoB;;;;;;;;iBAQ/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAIlE,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,qBAAqB,EAAE,cAAc,CAAC;IAChE;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAYD,eAAO,MAAM,iBAAiB;;;;;;iBAS7B,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAI5D,eAAO,MAAM,2BAA2B;;;iBAGtC,CAAC;AAEH,eAAO,MAAM,sBAAsB;;iBAEjC,CAAC;AAIH,eAAO,MAAM,oBAAoB;;iBAE/B,CAAC;AAIH,eAAO,MAAM,mBAAmB;;iBAE9B,CAAC;AAIH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACvE,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACvE,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CACzE;AAID,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7F;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACzF,QAAQ,CAAC,IAAI,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,cAAc,CAAC;IACzC,QAAQ,CAAC,eAAe,EAAE,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC;IAC/D,QAAQ,CAAC,kBAAkB,EAAE,MAAM,IAAI,CAAC;CACzC"}

package/dist/types.js

@@ -74,6 +74,8 @@ export const NotifyPayloadSchema = z.object({
     // design discriminates at the receiver from a property already there
     // for other reasons.
     event: z.enum(['session-end', 'turn-complete', 'error', 'custom']).optional(),
+    // macf#473: optional owner/repo#N anchor a peer_notification nudge is tied to, for the comms-ledger graph join.
+    github_anchor: z.string().optional(),
     // pr_review_state variant fields (macf-actions#39, v3.3.0). Optional
     // at the top level to preserve backward-compat. Producers (the
     // route-by-pr-review-state job) construct + validate against the

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6CAA6C;AAE7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,cAAc;IACd,SAAS;IACT,eAAe;IACf,kEAAkE;IAClE,oEAAoE;IACpE,oEAAoE;IACpE,0DAA0D;IAC1D,gDAAgD;IAChD,eAAe;IACf,iEAAiE;IACjE,kEAAkE;IAClE,qEAAqE;IACrE,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,mEAAmE;IACnE,oDAAoD;IACpD,mBAAmB;IACnB,qEAAqE;IACrE,iEAAiE;IACjE,kEAAkE;IAClE,oEAAoE;IACpE,qEAAqE;IACrE,sEAAsE;IACtE,6DAA6D;IAC7D,+CAA+C;IAC/C,iBAAiB;CAClB,CAAC,CAAC;AAIH,iEAAiE;AACjE,qEAAqE;AACrE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/C,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB;CACrD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,gBAAgB;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,6DAA6D;IAC7D,oEAAoE;IACpE,mEAAmE;IACnE,oEAAoE;IACpE,+DAA+D;IAC/D,+DAA+D;IAC/D,qCAAqC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,+DAA+D;IAC/D,kEAAkE;IAClE,gEAAgE;IAChE,+DAA+D;IAC/D,qBAAqB;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACjD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,qEAAqE;IACrE,mEAAmE;IACnE,4DAA4D;IAC5D,oEAAoE;IACpE,mDAAmD;IACnD,sEAAsE;IACtE,oEAAoE;IACpE,uEAAuE;IACvE,gEAAgE;IAChE,mEAAmE;IACnE,gEAAgE;IAChE,+DAA+D;IAC/D,qEAAqE;IACrE,qBAAqB;IACrB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7E,qEAAqE;IACrE,+DAA+D;IAC/D,iEAAiE;IACjE,qEAAqE;IACrE,8DAA8D;IAC9D,oEAAoE;IACpE,uBAAuB;IACvB,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAIH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,UAAU,EAAE,0BAA0B;IACtC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAIH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,uEAAuE;IACvE,8DAA8D;IAC9D,gEAAgE;IAChE,6DAA6D;CAC9D,CAAC,CAAC;AAIH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAIH,6CAA6C;AAE7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAuCH,yCAAyC;AACzC,EAAE;AACF,8DAA8D;AAC9D,8EAA8E;AAC9E,6EAA6E;AAC7E,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC,MAAM,CACP,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,EAClD,EAAE,OAAO,EAAE,sDAAsD,EAAE,CACpE,CAAC;AAIF,yBAAyB;AAEzB,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAEH,mCAAmC;AAEnC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;CAC9B,CAAC,CAAC;AAEH,yBAAyB;AAEzB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6CAA6C;AAE7C,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,cAAc;IACd,SAAS;IACT,eAAe;IACf,kEAAkE;IAClE,oEAAoE;IACpE,oEAAoE;IACpE,0DAA0D;IAC1D,gDAAgD;IAChD,eAAe;IACf,iEAAiE;IACjE,kEAAkE;IAClE,qEAAqE;IACrE,gEAAgE;IAChE,iEAAiE;IACjE,gEAAgE;IAChE,mEAAmE;IACnE,oDAAoD;IACpD,mBAAmB;IACnB,qEAAqE;IACrE,iEAAiE;IACjE,kEAAkE;IAClE,oEAAoE;IACpE,qEAAqE;IACrE,sEAAsE;IACtE,6DAA6D;IAC7D,+CAA+C;IAC/C,iBAAiB;CAClB,CAAC,CAAC;AAIH,iEAAiE;AACjE,qEAAqE;AACrE,6CAA6C;AAC7C,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/C,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB;CACrD,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,gBAAgB;IACtB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,6DAA6D;IAC7D,oEAAoE;IACpE,mEAAmE;IACnE,oEAAoE;IACpE,+DAA+D;IAC/D,+DAA+D;IAC/D,qCAAqC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,+DAA+D;IAC/D,kEAAkE;IAClE,gEAAgE;IAChE,+DAA+D;IAC/D,qBAAqB;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACjD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,qEAAqE;IACrE,mEAAmE;IACnE,4DAA4D;IAC5D,oEAAoE;IACpE,mDAAmD;IACnD,sEAAsE;IACtE,oEAAoE;IACpE,uEAAuE;IACvE,gEAAgE;IAChE,mEAAmE;IACnE,gEAAgE;IAChE,+DAA+D;IAC/D,qEAAqE;IACrE,qBAAqB;IACrB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC7E,gHAAgH;IAChH,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,qEAAqE;IACrE,+DAA+D;IAC/D,iEAAiE;IACjE,qEAAqE;IACrE,8DAA8D;IAC9D,oEAAoE;IACpE,uBAAuB;IACvB,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACrC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAIH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,UAAU,EAAE,0BAA0B;IACtC,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACpB,CAAC,CAAC;AAIH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,uEAAuE;IACvE,8DAA8D;IAC9D,gEAAgE;IAChE,6DAA6D;CAC9D,CAAC,CAAC;AAIH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC;IAClC,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC;IACvD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAC;AAIH,6CAA6C;AAE7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACzC,CAAC,CAAC;AAgDH,yCAAyC;AACzC,EAAE;AACF,8DAA8D;AAC9D,8EAA8E;AAC9E,6EAA6E;AAC7E,EAAE;AACF,wEAAwE;AACxE,sEAAsE;AACtE,yEAAyE;AAEzE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC,MAAM,CACP,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,YAAY,EAClD,EAAE,OAAO,EAAE,sDAAsD,EAAE,CACpE,CAAC;AAIF,yBAAyB;AAEzB,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;CACxB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;CACjB,CAAC,CAAC;AAEH,mCAAmC;AAEnC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;CAC9B,CAAC,CAAC;AAEH,yBAAyB;AAEzB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;CAClB,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@groundnuty/macf-core",
-  "version": "0.2.36",
+  "version": "0.2.38",
   "description": "Shared internals consumed by the MACF CLI and channel-server packages. Not intended for direct external use — will be marked deprecated-internal on first npm publish per DR-022 Amendment A.",
   "type": "module",
   "main": "dist/index.js",