@humain/humain-code-contracts 0.3.2

package/CHANGELOG.md

@@ -0,0 +1,51 @@
+# Changelog
+
+## [Unreleased]
+
+## [0.3.1] - 2026-10-01
+
+### Added
+
+- Accept the `switch_session { id, sessionPath }` RPC command in the strict wire
+  command union, so a host can rebind a running RPC process to a stored session
+  instead of restarting it. HUMAIN Terminal 0.3.0 already implements the command;
+  its `{ cancelled }` response is covered by the existing generic response frame.
+
+## [0.3.0] - 2026-09-19
+
+### Added
+
+- Add the `orchestration-disabled` degradation reason to the run orchestration
+  decision record, so a workspace policy kill switch can be told apart from a
+  runtime that could not support orchestration at all.
+
+## [0.2.0] - 2026-09-17
+
+### Added
+
+- Add the orchestration policy contract Forge writes for the sandbox extension.
+- Add the frozen run orchestration decision record.
+- Add the subagent task event contract emitted by the runtime's task graph.
+- Add the subagent identity envelope contract.
+
+## [0.1.0] - 2026-09-08
+
+### Changed
+
+- Updated TypeBox to 1.3.27.
+
+## 0.0.3
+
+- Export the canonical execution artifact kinds.
+- Enforce the shared RPC frame limit while parsing encoded frames.
+- Reject additional provider-model identifiers from public execution summaries.
+
+## 0.0.2
+
+- Share the persistent RPC frame limit across Terminal and hosts.
+- Add workflow-mode parser compatibility vectors.
+
+## 0.0.1
+
+- Add agent-execution v1 contracts and shared conformance vectors.
+- Add runtime-neutral RPC command encoding and frame parsing.

package/README.md

@@ -0,0 +1,92 @@
+# @humain/humain-code-contracts
+
+Runtime-neutral contracts shared by HUMAIN Code CLI and its hosts.
+
+- The package root exports agent-execution v1 schemas, types, validators, and parsers.
+- The package root also exports Auto-mode orchestration contracts: the orchestration
+  policy block Forge writes for the sandbox extension (`OrchestrationPolicyV1Schema`,
+  `parseOrchestrationPolicy`), the frozen run decision record
+  (`RunOrchestrationDecisionV1Schema`), and the subagent task event and identity
+  envelope shapes the runtime emits (`SubagentTaskEventSchema`,
+  `parseSubagentTaskEvent`, `SubagentIdentityEnvelopeSchema`).
+- `@humain/humain-code-contracts/orchestration` exports the same orchestration contracts
+  directly.
+- `@humain/humain-code-contracts/rpc` exports the minimal persistent RPC wire seam used by Forge. It is
+  dependency-free (no TypeBox, no Node APIs) and reads the optional `subagentProgress` metadata through
+  `readRpcSubagentProgress`.
+- The subagent progress projection (schemaVersion 1, "C1") carries per-worker `agent`, `label`, `task`,
+  `model`, timestamps, `turns`, `toolCalls`, `failureKind` and `resultPreview`, and per-run `toolCallId`,
+  `mode`, `startedAt` and `endedAt`. Text fields are presentation text: render as plain text, never
+  markdown or HTML. Producers sanitize with `toSubagentPresentationText`; parsers validate with
+  `isSubagentPresentationText`. See `docs/research/a04-c1-contract.md`.
+- `@humain/humain-code-contracts/testing` exports immutable execution conformance vectors and
+  `subagentProgressFixtures` / `invalidSubagentProgressFixtures` for progress consumers.
+
+## Synthetic-local trace contracts
+
+`@humain/humain-code-contracts/trace` exports the runtime-neutral C0 raw JSON/JCS,
+admission, workload/delegation, managed retry and ACK context helpers. Origin event,
+artifact and ACK schemas remain `/1`; producer enrollment and enrollment requests
+use `/2`. Parser success is not authentication, registry admission or durable receipt.
+Callers supply authenticated ownership and committed amendment context for retry
+eligibility; missing authority cannot resolve an unknown terminal.
+
+Package version `0.3.2` records the disabled-by-default C0 technical
+resolution, not production approval. Batch ingress remains exclusively
+`dh.batch/1-proposal` (`resolved-synthetic-local`); origin contractVersion stays 1.
+
+Read pages and complete cursor bindings use `/2`. A `dh.snapshot-cutoff/1`
+committed receipt ordinal fixes the snapshot; captureCutoff is display time only.
+Bindings include the immutable generation root (or project mapping for lists),
+principal, grant, session and authorization revision. Compare the full returned
+binding across pages and processes; never reconstruct it from timestamps.
+
+Export header/page `/2` carries sorted, representation-specific digests and segment
+ownership. `beginDhExportManifest` / `acceptDhExportManifestPage` /
+`finishDhExportManifest` retain one last identity and at most 1,024 descriptors
+and navigation cursors, not all records. Hash callbacks consume exact Uint8Array
+bytes, including the binary root chain. `parseDhExportManifestResponse` places the
+first opaque cursor outside the sealed header. The older monolithic manifest is
+historical/import-only.
+
+Passive `DH-BUNDLE/1` verification checks frames, membership, omissions, canonical
+records, header/root, seal and entire-byte download `/2` digest. Artifact chunks
+are never buffered by contracts. Publish an owned staged file only after
+`finishDhBundleVerification` succeeds; native reads and atomic publication remain
+consumer responsibilities.
+
+Control requests/status use `/2` admission, attempt, session and capability fences.
+Applied retry requires both observed start IDs with actual linkage; applied
+continue requires target consumption, never queue-steering. Controller descriptors
+are non-secret. The handshake token belongs only to private socket/fd3 transport,
+not journals or diagnostics. Delivery assertions recheck supplied live authority,
+deadline, scope, fences and request digest; they do not implement durable effects.
+
+Capability and artifact manifests bind package/export/schema/vector identities and
+exact build/mode/platform qualifications. Required controls are not supported
+controls. A contracts-only manifest may have no runtimes. Artifact fixture bytes
+are synthetic vectors, not a delivered tarball or native qualification evidence.
+See [the decision record](docs/dh-trace-decision-record-v1.md) for parser enforcement
+and remaining product-owner integration requirements.
+
+`parseDhRawJson` rejects decoded duplicate keys, malformed UTF-8/Unicode and
+integer-form tokens that change mathematical integer value in binary64. Exactly
+representable larger integers, including `100000000000000000000`, are accepted;
+decimal/exponent tokens use finite binary64 semantics. Count fields still require
+safe integers. `dhCanonicalText` uses RFC 8785 ECMAScript number rendering and
+UTF-16 key order without Unicode normalization. It rejects getters, toJSON and
+sparse arrays before invocation. `dhDigestInput` returns UTF-8 domain + NUL + JCS;
+callers hash those bytes with native SHA-256. Artifact content and spool integrity
+hashes remain raw-byte hashes, not canonical record digests.
+
+For POST replies, validate sent views with `assertDhAckSentBatch` and pass the
+parsed mandatory `x-dh-previous-acked-sequence` to the unchanged
+`validateDhBatchAck`. Empty event prefixes never advance the local cursor.
+Artifact metadata acceptance is separate from byte durability: inspect the PUT
+receipt's state even after validating its ID/hash/size.
+
+These helpers do not implement workload registries, publication/revocation locks,
+private bootstrap custody, native launch/cancellation, transport retries or GC.
+Synthetic capability and production activation remain product-owner decisions.
+
+This package contains no process, stream, provider, filesystem, or execution-host code.

package/dist/index.d.ts

@@ -0,0 +1,224 @@
+import { type Static, Type } from "typebox";
+export * from "./orchestration.ts";
+export declare const HUMAIN_AGENT_EXECUTION_SCHEMA_VERSION: 1;
+export declare const HUMAIN_AGENT_ARTIFACT_KINDS: readonly ["candidate-patch", "dependency-output", "source-observation", "validation-report"];
+export type HumainAgentArtifactKind = (typeof HUMAIN_AGENT_ARTIFACT_KINDS)[number];
+export declare const HumainAgentRouteRefSchema: Type.TUnion<[Type.TLiteral<"route:fast">, Type.TLiteral<"route:balanced">, Type.TLiteral<"route:thorough">]>;
+export type HumainAgentRouteRef = Static<typeof HumainAgentRouteRefSchema>;
+export declare const HumainAgentArtifactSchema: Type.TObject<{
+    readonly id: Type.TString;
+    readonly kind: Type.TUnion<[Type.TLiteral<"candidate-patch">, Type.TLiteral<"dependency-output">, Type.TLiteral<"source-observation">, Type.TLiteral<"validation-report">]>;
+    readonly reference: Type.TString;
+    readonly digest: Type.TString;
+}>;
+export type HumainAgentArtifact = Static<typeof HumainAgentArtifactSchema>;
+export declare const HumainAgentExecutionControlsSchema: Type.TObject<{
+    readonly maxConcurrency: Type.TInteger;
+    readonly maxDepth: Type.TInteger;
+    readonly depth: Type.TInteger;
+    readonly timeoutMs: Type.TInteger;
+}>;
+export type HumainAgentExecutionControls = Static<typeof HumainAgentExecutionControlsSchema>;
+export declare const HumainAgentExecutionClaimSchema: Type.TObject<{
+    readonly workUnitId: Type.TString;
+    readonly nodeId: Type.TString;
+    readonly attemptNumber: Type.TInteger;
+    readonly attemptFence: Type.TInteger;
+    readonly segmentFence: Type.TInteger;
+    readonly routeRef: Type.TUnion<[Type.TLiteral<"route:fast">, Type.TLiteral<"route:balanced">, Type.TLiteral<"route:thorough">]>;
+    readonly task: Type.TString;
+    readonly controls: Type.TObject<{
+        readonly maxConcurrency: Type.TInteger;
+        readonly maxDepth: Type.TInteger;
+        readonly depth: Type.TInteger;
+        readonly timeoutMs: Type.TInteger;
+    }>;
+    readonly input: Type.TObject<{
+        readonly artifacts: Type.TArray<Type.TObject<{
+            readonly id: Type.TString;
+            readonly kind: Type.TUnion<[Type.TLiteral<"candidate-patch">, Type.TLiteral<"dependency-output">, Type.TLiteral<"source-observation">, Type.TLiteral<"validation-report">]>;
+            readonly reference: Type.TString;
+            readonly digest: Type.TString;
+        }>>;
+    }>;
+}>;
+export type HumainAgentExecutionClaim = Static<typeof HumainAgentExecutionClaimSchema>;
+export declare const HumainAgentExecutionRequestSchema: Type.TObject<{
+    readonly schemaVersion: Type.TLiteral<1>;
+    readonly kind: Type.TLiteral<"execute">;
+    readonly mode: Type.TUnion<[Type.TLiteral<"node">, Type.TLiteral<"workflow">]>;
+    readonly invocationId: Type.TString;
+    readonly batchId: Type.TOptional<Type.TString>;
+    readonly claims: Type.TArray<Type.TObject<{
+        readonly workUnitId: Type.TString;
+        readonly nodeId: Type.TString;
+        readonly attemptNumber: Type.TInteger;
+        readonly attemptFence: Type.TInteger;
+        readonly segmentFence: Type.TInteger;
+        readonly routeRef: Type.TUnion<[Type.TLiteral<"route:fast">, Type.TLiteral<"route:balanced">, Type.TLiteral<"route:thorough">]>;
+        readonly task: Type.TString;
+        readonly controls: Type.TObject<{
+            readonly maxConcurrency: Type.TInteger;
+            readonly maxDepth: Type.TInteger;
+            readonly depth: Type.TInteger;
+            readonly timeoutMs: Type.TInteger;
+        }>;
+        readonly input: Type.TObject<{
+            readonly artifacts: Type.TArray<Type.TObject<{
+                readonly id: Type.TString;
+                readonly kind: Type.TUnion<[Type.TLiteral<"candidate-patch">, Type.TLiteral<"dependency-output">, Type.TLiteral<"source-observation">, Type.TLiteral<"validation-report">]>;
+                readonly reference: Type.TString;
+                readonly digest: Type.TString;
+            }>>;
+        }>;
+    }>>;
+}>;
+export type HumainAgentExecutionRequest = Static<typeof HumainAgentExecutionRequestSchema>;
+export declare const HumainAgentUsageSchema: Type.TUnion<[Type.TObject<{
+    readonly status: Type.TLiteral<"unknown">;
+}>, Type.TObject<{
+    readonly status: Type.TLiteral<"measured">;
+    readonly totalCalls: Type.TOptional<Type.TInteger>;
+    readonly totalTurns: Type.TOptional<Type.TInteger>;
+    readonly totalTokens: Type.TInteger;
+    readonly costMicrocents: Type.TInteger;
+}>]>;
+export type HumainAgentUsage = Static<typeof HumainAgentUsageSchema>;
+export declare const HUMAIN_AGENT_EXECUTION_FAILURE_CODES: readonly ["adapter_execution_failed", "incompatible_adapter_capability", "invalid_adapter_result", "invalid_execution_request", "provider_timeout", "provider_unavailable", "reused_execution_context", "transport_interrupted"];
+export type HumainAgentExecutionFailureCode = (typeof HUMAIN_AGENT_EXECUTION_FAILURE_CODES)[number];
+export declare const HumainAgentExecutionFailureCodeSchema: Type.TUnion<[Type.TLiteral<"adapter_execution_failed">, Type.TLiteral<"incompatible_adapter_capability">, Type.TLiteral<"invalid_adapter_result">, Type.TLiteral<"invalid_execution_request">, Type.TLiteral<"provider_timeout">, Type.TLiteral<"provider_unavailable">, Type.TLiteral<"reused_execution_context">, Type.TLiteral<"transport_interrupted">]>;
+export declare const HumainAgentExecutionOutcomeSchema: Type.TUnion<[Type.TObject<{
+    readonly workUnitId: Type.TString;
+    readonly nodeId: Type.TString;
+    readonly attemptNumber: Type.TInteger;
+    readonly attemptFence: Type.TInteger;
+    readonly segmentFence: Type.TInteger;
+    readonly kind: Type.TLiteral<"succeeded">;
+    readonly output: Type.TObject<{
+        readonly summary: Type.TString;
+        readonly artifacts: Type.TArray<Type.TObject<{
+            readonly id: Type.TString;
+            readonly kind: Type.TUnion<[Type.TLiteral<"candidate-patch">, Type.TLiteral<"dependency-output">, Type.TLiteral<"source-observation">, Type.TLiteral<"validation-report">]>;
+            readonly reference: Type.TString;
+            readonly digest: Type.TString;
+        }>>;
+    }>;
+    readonly usage: Type.TUnion<[Type.TObject<{
+        readonly status: Type.TLiteral<"unknown">;
+    }>, Type.TObject<{
+        readonly status: Type.TLiteral<"measured">;
+        readonly totalCalls: Type.TOptional<Type.TInteger>;
+        readonly totalTurns: Type.TOptional<Type.TInteger>;
+        readonly totalTokens: Type.TInteger;
+        readonly costMicrocents: Type.TInteger;
+    }>]>;
+}>, Type.TObject<{
+    readonly workUnitId: Type.TString;
+    readonly nodeId: Type.TString;
+    readonly attemptNumber: Type.TInteger;
+    readonly attemptFence: Type.TInteger;
+    readonly segmentFence: Type.TInteger;
+    readonly kind: Type.TLiteral<"failed">;
+    readonly failureCode: Type.TUnion<[Type.TLiteral<"adapter_execution_failed">, Type.TLiteral<"incompatible_adapter_capability">, Type.TLiteral<"invalid_adapter_result">, Type.TLiteral<"invalid_execution_request">, Type.TLiteral<"provider_timeout">, Type.TLiteral<"provider_unavailable">, Type.TLiteral<"reused_execution_context">, Type.TLiteral<"transport_interrupted">]>;
+    readonly usage: Type.TUnion<[Type.TObject<{
+        readonly status: Type.TLiteral<"unknown">;
+    }>, Type.TObject<{
+        readonly status: Type.TLiteral<"measured">;
+        readonly totalCalls: Type.TOptional<Type.TInteger>;
+        readonly totalTurns: Type.TOptional<Type.TInteger>;
+        readonly totalTokens: Type.TInteger;
+        readonly costMicrocents: Type.TInteger;
+    }>]>;
+}>, Type.TObject<{
+    readonly workUnitId: Type.TString;
+    readonly nodeId: Type.TString;
+    readonly attemptNumber: Type.TInteger;
+    readonly attemptFence: Type.TInteger;
+    readonly segmentFence: Type.TInteger;
+    readonly kind: Type.TLiteral<"cancelled">;
+    readonly terminationConfirmed: Type.TBoolean;
+    readonly usage: Type.TUnion<[Type.TObject<{
+        readonly status: Type.TLiteral<"unknown">;
+    }>, Type.TObject<{
+        readonly status: Type.TLiteral<"measured">;
+        readonly totalCalls: Type.TOptional<Type.TInteger>;
+        readonly totalTurns: Type.TOptional<Type.TInteger>;
+        readonly totalTokens: Type.TInteger;
+        readonly costMicrocents: Type.TInteger;
+    }>]>;
+}>]>;
+export type HumainAgentExecutionOutcome = Static<typeof HumainAgentExecutionOutcomeSchema>;
+export declare const HumainAgentExecutionResponseSchema: Type.TObject<{
+    readonly schemaVersion: Type.TLiteral<1>;
+    readonly kind: Type.TLiteral<"result">;
+    readonly mode: Type.TUnion<[Type.TLiteral<"node">, Type.TLiteral<"workflow">]>;
+    readonly invocationId: Type.TString;
+    readonly batchId: Type.TOptional<Type.TString>;
+    readonly termination: Type.TUnion<[Type.TLiteral<"not-requested">, Type.TLiteral<"confirmed">, Type.TLiteral<"unconfirmed">]>;
+    readonly outcomes: Type.TArray<Type.TUnion<[Type.TObject<{
+        readonly workUnitId: Type.TString;
+        readonly nodeId: Type.TString;
+        readonly attemptNumber: Type.TInteger;
+        readonly attemptFence: Type.TInteger;
+        readonly segmentFence: Type.TInteger;
+        readonly kind: Type.TLiteral<"succeeded">;
+        readonly output: Type.TObject<{
+            readonly summary: Type.TString;
+            readonly artifacts: Type.TArray<Type.TObject<{
+                readonly id: Type.TString;
+                readonly kind: Type.TUnion<[Type.TLiteral<"candidate-patch">, Type.TLiteral<"dependency-output">, Type.TLiteral<"source-observation">, Type.TLiteral<"validation-report">]>;
+                readonly reference: Type.TString;
+                readonly digest: Type.TString;
+            }>>;
+        }>;
+        readonly usage: Type.TUnion<[Type.TObject<{
+            readonly status: Type.TLiteral<"unknown">;
+        }>, Type.TObject<{
+            readonly status: Type.TLiteral<"measured">;
+            readonly totalCalls: Type.TOptional<Type.TInteger>;
+            readonly totalTurns: Type.TOptional<Type.TInteger>;
+            readonly totalTokens: Type.TInteger;
+            readonly costMicrocents: Type.TInteger;
+        }>]>;
+    }>, Type.TObject<{
+        readonly workUnitId: Type.TString;
+        readonly nodeId: Type.TString;
+        readonly attemptNumber: Type.TInteger;
+        readonly attemptFence: Type.TInteger;
+        readonly segmentFence: Type.TInteger;
+        readonly kind: Type.TLiteral<"failed">;
+        readonly failureCode: Type.TUnion<[Type.TLiteral<"adapter_execution_failed">, Type.TLiteral<"incompatible_adapter_capability">, Type.TLiteral<"invalid_adapter_result">, Type.TLiteral<"invalid_execution_request">, Type.TLiteral<"provider_timeout">, Type.TLiteral<"provider_unavailable">, Type.TLiteral<"reused_execution_context">, Type.TLiteral<"transport_interrupted">]>;
+        readonly usage: Type.TUnion<[Type.TObject<{
+            readonly status: Type.TLiteral<"unknown">;
+        }>, Type.TObject<{
+            readonly status: Type.TLiteral<"measured">;
+            readonly totalCalls: Type.TOptional<Type.TInteger>;
+            readonly totalTurns: Type.TOptional<Type.TInteger>;
+            readonly totalTokens: Type.TInteger;
+            readonly costMicrocents: Type.TInteger;
+        }>]>;
+    }>, Type.TObject<{
+        readonly workUnitId: Type.TString;
+        readonly nodeId: Type.TString;
+        readonly attemptNumber: Type.TInteger;
+        readonly attemptFence: Type.TInteger;
+        readonly segmentFence: Type.TInteger;
+        readonly kind: Type.TLiteral<"cancelled">;
+        readonly terminationConfirmed: Type.TBoolean;
+        readonly usage: Type.TUnion<[Type.TObject<{
+            readonly status: Type.TLiteral<"unknown">;
+        }>, Type.TObject<{
+            readonly status: Type.TLiteral<"measured">;
+            readonly totalCalls: Type.TOptional<Type.TInteger>;
+            readonly totalTurns: Type.TOptional<Type.TInteger>;
+            readonly totalTokens: Type.TInteger;
+            readonly costMicrocents: Type.TInteger;
+        }>]>;
+    }>]>>;
+}>;
+export type HumainAgentExecutionResponse = Static<typeof HumainAgentExecutionResponseSchema>;
+export declare function isSafeHumainAgentArtifactReference(value: unknown): value is string;
+export declare function isSafeHumainAgentExecutionSummary(value: unknown): value is string;
+export declare function parseHumainAgentExecutionRequest(input: unknown): HumainAgentExecutionRequest;
+export declare function parseHumainAgentExecutionResponse(requestInput: unknown, responseInput: unknown): HumainAgentExecutionResponse;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAG5C,cAAc,oBAAoB,CAAC;AAEnC,eAAO,MAAM,qCAAqC,EAAG,CAAU,CAAC;AAChE,eAAO,MAAM,2BAA2B,YACvC,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,CACV,CAAC;AACX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,CAAC,CAAC;AAcnF,eAAO,MAAM,yBAAyB,8GAIpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE3E,eAAO,MAAM,yBAAyB;;;;;EAUpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE3E,eAAO,MAAM,kCAAkC;;;;;EAK7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE7F,eAAO,MAAM,+BAA+B;;;;;;;;;;;;;;;;;;;;;;EAY1C,CAAC;AACH,MAAM,MAAM,yBAAyB,GAAG,MAAM,CAAC,OAAO,+BAA+B,CAAC,CAAC;AAEvF,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE3F,eAAO,MAAM,sBAAsB;;;;;;;;IASjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAErE,eAAO,MAAM,oCAAoC,YAChD,0BAA0B,EAC1B,iCAAiC,EACjC,wBAAwB,EACxB,2BAA2B,EAC3B,kBAAkB,EAClB,sBAAsB,EACtB,0BAA0B,EAC1B,uBAAuB,CACd,CAAC;AACX,MAAM,MAAM,+BAA+B,GAAG,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,CAAC,CAAC;AAEpG,eAAO,MAAM,qCAAqC,8VAShD,CAAC;AAUH,eAAO,MAAM,iCAAiC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAsB5C,CAAC;AACH,MAAM,MAAM,2BAA2B,GAAG,MAAM,CAAC,OAAO,iCAAiC,CAAC,CAAC;AAE3F,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ7C,CAAC;AACH,MAAM,MAAM,4BAA4B,GAAG,MAAM,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAM7F,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAElF;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAiBjF;AAED,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,2BAA2B,CAmB5F;AAED,wBAAgB,iCAAiC,CAChD,YAAY,EAAE,OAAO,EACrB,aAAa,EAAE,OAAO,GACpB,4BAA4B,CA+C9B"}

package/dist/index.js

@@ -0,0 +1,218 @@
+import { Type } from "typebox";
+import { Compile } from "typebox/compile";
+export * from "./orchestration.js";
+export const HUMAIN_AGENT_EXECUTION_SCHEMA_VERSION = 1;
+export const HUMAIN_AGENT_ARTIFACT_KINDS = [
+    "candidate-patch",
+    "dependency-output",
+    "source-observation",
+    "validation-report",
+];
+const StrictObject = (properties) => Type.Object(properties, { additionalProperties: false });
+const StableIdentifier = Type.String({ minLength: 1, maxLength: 256 });
+const PositiveInteger = Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER });
+const NonnegativeInteger = Type.Integer({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER });
+const Digest = Type.String({ pattern: "^[a-f0-9]{64}$" });
+const SafeArtifactReference = Type.String({
+    minLength: 1,
+    maxLength: 512,
+    pattern: "^(?!/)(?!.*(?:^|/)\\.\\.(?:/|$))[A-Za-z0-9._-]+(?:/[A-Za-z0-9._-]+)*$",
+});
+export const HumainAgentRouteRefSchema = Type.Union([
+    Type.Literal("route:fast"),
+    Type.Literal("route:balanced"),
+    Type.Literal("route:thorough"),
+]);
+export const HumainAgentArtifactSchema = StrictObject({
+    id: StableIdentifier,
+    kind: Type.Union([
+        Type.Literal(HUMAIN_AGENT_ARTIFACT_KINDS[0]),
+        Type.Literal(HUMAIN_AGENT_ARTIFACT_KINDS[1]),
+        Type.Literal(HUMAIN_AGENT_ARTIFACT_KINDS[2]),
+        Type.Literal(HUMAIN_AGENT_ARTIFACT_KINDS[3]),
+    ]),
+    reference: SafeArtifactReference,
+    digest: Digest,
+});
+export const HumainAgentExecutionControlsSchema = StrictObject({
+    maxConcurrency: Type.Integer({ minimum: 1, maximum: 16 }),
+    maxDepth: Type.Integer({ minimum: 1, maximum: 16 }),
+    depth: Type.Integer({ minimum: 0, maximum: 16 }),
+    timeoutMs: Type.Integer({ minimum: 1, maximum: 86_400_000 }),
+});
+export const HumainAgentExecutionClaimSchema = StrictObject({
+    workUnitId: StableIdentifier,
+    nodeId: StableIdentifier,
+    attemptNumber: PositiveInteger,
+    attemptFence: PositiveInteger,
+    segmentFence: PositiveInteger,
+    routeRef: HumainAgentRouteRefSchema,
+    task: Type.String({ minLength: 1, maxLength: 100_000 }),
+    controls: HumainAgentExecutionControlsSchema,
+    input: StrictObject({
+        artifacts: Type.Array(HumainAgentArtifactSchema, { maxItems: 16 }),
+    }),
+});
+export const HumainAgentExecutionRequestSchema = StrictObject({
+    schemaVersion: Type.Literal(HUMAIN_AGENT_EXECUTION_SCHEMA_VERSION),
+    kind: Type.Literal("execute"),
+    mode: Type.Union([Type.Literal("node"), Type.Literal("workflow")]),
+    invocationId: StableIdentifier,
+    batchId: Type.Optional(StableIdentifier),
+    claims: Type.Array(HumainAgentExecutionClaimSchema, { minItems: 1, maxItems: 8 }),
+});
+export const HumainAgentUsageSchema = Type.Union([
+    StrictObject({ status: Type.Literal("unknown") }),
+    StrictObject({
+        status: Type.Literal("measured"),
+        totalCalls: Type.Optional(NonnegativeInteger),
+        totalTurns: Type.Optional(NonnegativeInteger),
+        totalTokens: NonnegativeInteger,
+        costMicrocents: NonnegativeInteger,
+    }),
+]);
+export const HUMAIN_AGENT_EXECUTION_FAILURE_CODES = [
+    "adapter_execution_failed",
+    "incompatible_adapter_capability",
+    "invalid_adapter_result",
+    "invalid_execution_request",
+    "provider_timeout",
+    "provider_unavailable",
+    "reused_execution_context",
+    "transport_interrupted",
+];
+export const HumainAgentExecutionFailureCodeSchema = Type.Union([
+    Type.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[0]),
+    Type.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[1]),
+    Type.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[2]),
+    Type.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[3]),
+    Type.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[4]),
+    Type.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[5]),
+    Type.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[6]),
+    Type.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[7]),
+]);
+const OutcomeIdentity = {
+    workUnitId: StableIdentifier,
+    nodeId: StableIdentifier,
+    attemptNumber: PositiveInteger,
+    attemptFence: PositiveInteger,
+    segmentFence: PositiveInteger,
+};
+export const HumainAgentExecutionOutcomeSchema = Type.Union([
+    StrictObject({
+        ...OutcomeIdentity,
+        kind: Type.Literal("succeeded"),
+        output: StrictObject({
+            summary: Type.String({ minLength: 1, maxLength: 512 }),
+            artifacts: Type.Array(HumainAgentArtifactSchema, { maxItems: 16 }),
+        }),
+        usage: HumainAgentUsageSchema,
+    }),
+    StrictObject({
+        ...OutcomeIdentity,
+        kind: Type.Literal("failed"),
+        failureCode: HumainAgentExecutionFailureCodeSchema,
+        usage: HumainAgentUsageSchema,
+    }),
+    StrictObject({
+        ...OutcomeIdentity,
+        kind: Type.Literal("cancelled"),
+        terminationConfirmed: Type.Boolean(),
+        usage: HumainAgentUsageSchema,
+    }),
+]);
+export const HumainAgentExecutionResponseSchema = StrictObject({
+    schemaVersion: Type.Literal(HUMAIN_AGENT_EXECUTION_SCHEMA_VERSION),
+    kind: Type.Literal("result"),
+    mode: Type.Union([Type.Literal("node"), Type.Literal("workflow")]),
+    invocationId: StableIdentifier,
+    batchId: Type.Optional(StableIdentifier),
+    termination: Type.Union([Type.Literal("not-requested"), Type.Literal("confirmed"), Type.Literal("unconfirmed")]),
+    outcomes: Type.Array(HumainAgentExecutionOutcomeSchema, { minItems: 1, maxItems: 8 }),
+});
+const RequestValidator = Compile(HumainAgentExecutionRequestSchema);
+const ResponseValidator = Compile(HumainAgentExecutionResponseSchema);
+const ArtifactReferenceValidator = Compile(SafeArtifactReference);
+export function isSafeHumainAgentArtifactReference(value) {
+    return ArtifactReferenceValidator.Check(value);
+}
+export function isSafeHumainAgentExecutionSummary(value) {
+    return (typeof value === "string" &&
+        value.length >= 1 &&
+        value.length <= 512 &&
+        value === value.trim() &&
+        /^[\p{L}\p{N}][\p{L}\p{N} .,;:!?()&'-]*$/u.test(value) &&
+        !/\b(?:[A-Za-z0-9-]+\.)+[A-Za-z]{2,}(?::\d{1,5})?\b/u.test(value) &&
+        !/\b(?:\d{1,3}\.){3}\d{1,3}(?::\d{1,5})?\b/u.test(value) &&
+        !/^(?:rm|curl|wget|sh|bash|zsh|fish|pwsh|powershell|cmd|node|bun|deno|npx|npm|pnpm|yarn|python(?:3)?|perl|ruby|git|docker|kubectl|ssh|scp|sudo|cat|ls|cd|mkdir|touch|chmod|chown|env|export|set|eval|exec)\b/iu.test(value) &&
+        !/\b(?:api[- ]?key|secret|token|credential|password)\s*:/iu.test(value) &&
+        !/\b(?:claude|gpt|gemini|llama|mistral|zai|glm|qwen|deepseek|grok|nova|o\d+)[-_.:][A-Za-z0-9._:-]+\b/iu.test(value));
+}
+export function parseHumainAgentExecutionRequest(input) {
+    if (!RequestValidator.Check(input)) {
+        throw new Error("Invalid HUMAIN agent execution request");
+    }
+    if (input.mode === "node" && (input.claims.length !== 1 || input.batchId !== undefined)) {
+        throw new Error("Invalid HUMAIN agent execution request: node mode requires one claim and no batch identity");
+    }
+    if (input.mode === "workflow" && input.batchId === undefined) {
+        throw new Error("Invalid HUMAIN agent execution request: workflow mode requires a batch identity");
+    }
+    const workUnitIds = new Set(input.claims.map(({ workUnitId }) => workUnitId));
+    const nodeIds = new Set(input.claims.map(({ nodeId }) => nodeId));
+    if (workUnitIds.size !== input.claims.length || nodeIds.size !== input.claims.length) {
+        throw new Error("Invalid HUMAIN agent execution request: claim identities must be unique");
+    }
+    if (input.claims.some(({ controls }) => controls.depth >= controls.maxDepth)) {
+        throw new Error("Invalid HUMAIN agent execution request: delegation depth limit is exhausted");
+    }
+    return deepFreeze(structuredClone(input));
+}
+export function parseHumainAgentExecutionResponse(requestInput, responseInput) {
+    const request = parseHumainAgentExecutionRequest(requestInput);
+    if (!ResponseValidator.Check(responseInput)) {
+        throw new Error("Invalid HUMAIN agent execution response");
+    }
+    const response = responseInput;
+    if (response.outcomes.some((outcome) => outcome.kind === "succeeded" && !isSafeHumainAgentExecutionSummary(outcome.output.summary))) {
+        throw new Error("Invalid HUMAIN agent execution response");
+    }
+    if (response.mode !== request.mode ||
+        response.invocationId !== request.invocationId ||
+        response.batchId !== request.batchId) {
+        throw new Error("HUMAIN agent result envelope mismatch");
+    }
+    if (response.outcomes.length !== request.claims.length) {
+        throw new Error("HUMAIN agent result cardinality mismatch");
+    }
+    for (const [index, outcome] of response.outcomes.entries()) {
+        const claim = request.claims[index];
+        if (!claim ||
+            outcome.workUnitId !== claim.workUnitId ||
+            outcome.nodeId !== claim.nodeId ||
+            outcome.attemptNumber !== claim.attemptNumber ||
+            outcome.attemptFence !== claim.attemptFence ||
+            outcome.segmentFence !== claim.segmentFence) {
+            throw new Error("HUMAIN agent result identity mismatch");
+        }
+    }
+    const cancelled = response.outcomes.filter((outcome) => outcome.kind === "cancelled");
+    const expectedTermination = cancelled.length === 0
+        ? "not-requested"
+        : cancelled.every((outcome) => outcome.terminationConfirmed)
+            ? "confirmed"
+            : "unconfirmed";
+    if (response.termination !== expectedTermination) {
+        throw new Error("HUMAIN agent result termination evidence mismatch");
+    }
+    return deepFreeze(structuredClone(response));
+}
+function deepFreeze(value) {
+    if (value === null || typeof value !== "object" || Object.isFrozen(value))
+        return value;
+    Object.freeze(value);
+    for (const child of Object.values(value))
+        deepFreeze(child);
+    return value;
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,IAAI,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE1C,cAAc,oBAAoB,CAAC;AAEnC,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAU,CAAC;AAChE,MAAM,CAAC,MAAM,2BAA2B,GAAG;IAC1C,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,mBAAmB;CACV,CAAC;AAGX,MAAM,YAAY,GAAG,CAAoD,UAAa,EAAE,EAAE,CACzF,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1D,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;AACvE,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACvF,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;AAC1D,MAAM,qBAAqB,GAAG,IAAI,CAAC,MAAM,CAAC;IACzC,SAAS,EAAE,CAAC;IACZ,SAAS,EAAE,GAAG;IACd,OAAO,EAAE,uEAAuE;CAChF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,CAAC,KAAK,CAAC;IACnD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC;IAC1B,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAG,YAAY,CAAC;IACrD,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;QAChB,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC,CAAC;KAC5C,CAAC;IACF,SAAS,EAAE,qBAAqB;IAChC,MAAM,EAAE,MAAM;CACd,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kCAAkC,GAAG,YAAY,CAAC;IAC9D,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzD,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACnD,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAChD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;CAC5D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,+BAA+B,GAAG,YAAY,CAAC;IAC3D,UAAU,EAAE,gBAAgB;IAC5B,MAAM,EAAE,gBAAgB;IACxB,aAAa,EAAE,eAAe;IAC9B,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,eAAe;IAC7B,QAAQ,EAAE,yBAAyB;IACnC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;IACvD,QAAQ,EAAE,kCAAkC;IAC5C,KAAK,EAAE,YAAY,CAAC;QACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;KAClE,CAAC;CACF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iCAAiC,GAAG,YAAY,CAAC;IAC7D,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,qCAAqC,CAAC;IAClE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC;IAC7B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAClE,YAAY,EAAE,gBAAgB;IAC9B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACxC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;CACjF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,KAAK,CAAC;IAChD,YAAY,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;IACjD,YAAY,CAAC;QACZ,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC;QAChC,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC7C,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QAC7C,WAAW,EAAE,kBAAkB;QAC/B,cAAc,EAAE,kBAAkB;KAClC,CAAC;CACF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oCAAoC,GAAG;IACnD,0BAA0B;IAC1B,iCAAiC;IACjC,wBAAwB;IACxB,2BAA2B;IAC3B,kBAAkB;IAClB,sBAAsB;IACtB,0BAA0B;IAC1B,uBAAuB;CACd,CAAC;AAGX,MAAM,CAAC,MAAM,qCAAqC,GAAG,IAAI,CAAC,KAAK,CAAC;IAC/D,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC,CAAC,CAAC;CACrD,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG;IACvB,UAAU,EAAE,gBAAgB;IAC5B,MAAM,EAAE,gBAAgB;IACxB,aAAa,EAAE,eAAe;IAC9B,YAAY,EAAE,eAAe;IAC7B,YAAY,EAAE,eAAe;CAC7B,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG,IAAI,CAAC,KAAK,CAAC;IAC3D,YAAY,CAAC;QACZ,GAAG,eAAe;QAClB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/B,MAAM,EAAE,YAAY,CAAC;YACpB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YACtD,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;SAClE,CAAC;QACF,KAAK,EAAE,sBAAsB;KAC7B,CAAC;IACF,YAAY,CAAC;QACZ,GAAG,eAAe;QAClB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC5B,WAAW,EAAE,qCAAqC;QAClD,KAAK,EAAE,sBAAsB;KAC7B,CAAC;IACF,YAAY,CAAC;QACZ,GAAG,eAAe;QAClB,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QAC/B,oBAAoB,EAAE,IAAI,CAAC,OAAO,EAAE;QACpC,KAAK,EAAE,sBAAsB;KAC7B,CAAC;CACF,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,kCAAkC,GAAG,YAAY,CAAC;IAC9D,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,qCAAqC,CAAC;IAClE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAClE,YAAY,EAAE,gBAAgB;IAC9B,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC;IACxC,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;IAChH,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;CACrF,CAAC,CAAC;AAGH,MAAM,gBAAgB,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;AACpE,MAAM,iBAAiB,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAAC;AACtE,MAAM,0BAA0B,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAElE,MAAM,UAAU,kCAAkC,CAAC,KAAc;IAChE,OAAO,0BAA0B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAc;IAC/D,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,IAAI,CAAC;QACjB,KAAK,CAAC,MAAM,IAAI,GAAG;QACnB,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QACtB,0CAA0C,CAAC,IAAI,CAAC,KAAK,CAAC;QACtD,CAAC,oDAAoD,CAAC,IAAI,CAAC,KAAK,CAAC;QACjE,CAAC,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC;QACxD,CAAC,8MAA8M,CAAC,IAAI,CACnN,KAAK,CACL;QACD,CAAC,0DAA0D,CAAC,IAAI,CAAC,KAAK,CAAC;QACvE,CAAC,sGAAsG,CAAC,IAAI,CAC3G,KAAK,CACL,CACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,KAAc;IAC9D,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,4FAA4F,CAAC,CAAC;IAC/G,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,IAAI,WAAW,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,iCAAiC,CAChD,YAAqB,EACrB,aAAsB;IAEtB,MAAM,OAAO,GAAG,gCAAgC,CAAC,YAAY,CAAC,CAAC;IAC/D,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC;IAC/B,IACC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CACrB,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,iCAAiC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CACvG,EACA,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5D,CAAC;IACD,IACC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI;QAC9B,QAAQ,CAAC,YAAY,KAAK,OAAO,CAAC,YAAY;QAC9C,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EACnC,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,IACC,CAAC,KAAK;YACN,OAAO,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YACvC,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;YAC/B,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,aAAa;YAC7C,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY;YAC3C,OAAO,CAAC,YAAY,KAAK,KAAK,CAAC,YAAY,EAC1C,CAAC;YACF,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC1D,CAAC;IACF,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IACtF,MAAM,mBAAmB,GACxB,SAAS,CAAC,MAAM,KAAK,CAAC;QACrB,CAAC,CAAC,eAAe;QACjB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC;YAC3D,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,aAAa,CAAC;IACnB,IAAI,QAAQ,CAAC,WAAW,KAAK,mBAAmB,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,UAAU,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC9B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACrB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,KAAK,CAAC;AACd,CAAC","sourcesContent":["import { type Static, Type } from \"typebox\";\nimport { Compile } from \"typebox/compile\";\n\nexport * from \"./orchestration.ts\";\n\nexport const HUMAIN_AGENT_EXECUTION_SCHEMA_VERSION = 1 as const;\nexport const HUMAIN_AGENT_ARTIFACT_KINDS = [\n\t\"candidate-patch\",\n\t\"dependency-output\",\n\t\"source-observation\",\n\t\"validation-report\",\n] as const;\nexport type HumainAgentArtifactKind = (typeof HUMAIN_AGENT_ARTIFACT_KINDS)[number];\n\nconst StrictObject = <const T extends Parameters<typeof Type.Object>[0]>(properties: T) =>\n\tType.Object(properties, { additionalProperties: false });\nconst StableIdentifier = Type.String({ minLength: 1, maxLength: 256 });\nconst PositiveInteger = Type.Integer({ minimum: 1, maximum: Number.MAX_SAFE_INTEGER });\nconst NonnegativeInteger = Type.Integer({ minimum: 0, maximum: Number.MAX_SAFE_INTEGER });\nconst Digest = Type.String({ pattern: \"^[a-f0-9]{64}$\" });\nconst SafeArtifactReference = Type.String({\n\tminLength: 1,\n\tmaxLength: 512,\n\tpattern: \"^(?!/)(?!.*(?:^|/)\\\\.\\\\.(?:/|$))[A-Za-z0-9._-]+(?:/[A-Za-z0-9._-]+)*$\",\n});\n\nexport const HumainAgentRouteRefSchema = Type.Union([\n\tType.Literal(\"route:fast\"),\n\tType.Literal(\"route:balanced\"),\n\tType.Literal(\"route:thorough\"),\n]);\nexport type HumainAgentRouteRef = Static<typeof HumainAgentRouteRefSchema>;\n\nexport const HumainAgentArtifactSchema = StrictObject({\n\tid: StableIdentifier,\n\tkind: Type.Union([\n\t\tType.Literal(HUMAIN_AGENT_ARTIFACT_KINDS[0]),\n\t\tType.Literal(HUMAIN_AGENT_ARTIFACT_KINDS[1]),\n\t\tType.Literal(HUMAIN_AGENT_ARTIFACT_KINDS[2]),\n\t\tType.Literal(HUMAIN_AGENT_ARTIFACT_KINDS[3]),\n\t]),\n\treference: SafeArtifactReference,\n\tdigest: Digest,\n});\nexport type HumainAgentArtifact = Static<typeof HumainAgentArtifactSchema>;\n\nexport const HumainAgentExecutionControlsSchema = StrictObject({\n\tmaxConcurrency: Type.Integer({ minimum: 1, maximum: 16 }),\n\tmaxDepth: Type.Integer({ minimum: 1, maximum: 16 }),\n\tdepth: Type.Integer({ minimum: 0, maximum: 16 }),\n\ttimeoutMs: Type.Integer({ minimum: 1, maximum: 86_400_000 }),\n});\nexport type HumainAgentExecutionControls = Static<typeof HumainAgentExecutionControlsSchema>;\n\nexport const HumainAgentExecutionClaimSchema = StrictObject({\n\tworkUnitId: StableIdentifier,\n\tnodeId: StableIdentifier,\n\tattemptNumber: PositiveInteger,\n\tattemptFence: PositiveInteger,\n\tsegmentFence: PositiveInteger,\n\trouteRef: HumainAgentRouteRefSchema,\n\ttask: Type.String({ minLength: 1, maxLength: 100_000 }),\n\tcontrols: HumainAgentExecutionControlsSchema,\n\tinput: StrictObject({\n\t\tartifacts: Type.Array(HumainAgentArtifactSchema, { maxItems: 16 }),\n\t}),\n});\nexport type HumainAgentExecutionClaim = Static<typeof HumainAgentExecutionClaimSchema>;\n\nexport const HumainAgentExecutionRequestSchema = StrictObject({\n\tschemaVersion: Type.Literal(HUMAIN_AGENT_EXECUTION_SCHEMA_VERSION),\n\tkind: Type.Literal(\"execute\"),\n\tmode: Type.Union([Type.Literal(\"node\"), Type.Literal(\"workflow\")]),\n\tinvocationId: StableIdentifier,\n\tbatchId: Type.Optional(StableIdentifier),\n\tclaims: Type.Array(HumainAgentExecutionClaimSchema, { minItems: 1, maxItems: 8 }),\n});\nexport type HumainAgentExecutionRequest = Static<typeof HumainAgentExecutionRequestSchema>;\n\nexport const HumainAgentUsageSchema = Type.Union([\n\tStrictObject({ status: Type.Literal(\"unknown\") }),\n\tStrictObject({\n\t\tstatus: Type.Literal(\"measured\"),\n\t\ttotalCalls: Type.Optional(NonnegativeInteger),\n\t\ttotalTurns: Type.Optional(NonnegativeInteger),\n\t\ttotalTokens: NonnegativeInteger,\n\t\tcostMicrocents: NonnegativeInteger,\n\t}),\n]);\nexport type HumainAgentUsage = Static<typeof HumainAgentUsageSchema>;\n\nexport const HUMAIN_AGENT_EXECUTION_FAILURE_CODES = [\n\t\"adapter_execution_failed\",\n\t\"incompatible_adapter_capability\",\n\t\"invalid_adapter_result\",\n\t\"invalid_execution_request\",\n\t\"provider_timeout\",\n\t\"provider_unavailable\",\n\t\"reused_execution_context\",\n\t\"transport_interrupted\",\n] as const;\nexport type HumainAgentExecutionFailureCode = (typeof HUMAIN_AGENT_EXECUTION_FAILURE_CODES)[number];\n\nexport const HumainAgentExecutionFailureCodeSchema = Type.Union([\n\tType.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[0]),\n\tType.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[1]),\n\tType.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[2]),\n\tType.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[3]),\n\tType.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[4]),\n\tType.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[5]),\n\tType.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[6]),\n\tType.Literal(HUMAIN_AGENT_EXECUTION_FAILURE_CODES[7]),\n]);\n\nconst OutcomeIdentity = {\n\tworkUnitId: StableIdentifier,\n\tnodeId: StableIdentifier,\n\tattemptNumber: PositiveInteger,\n\tattemptFence: PositiveInteger,\n\tsegmentFence: PositiveInteger,\n};\n\nexport const HumainAgentExecutionOutcomeSchema = Type.Union([\n\tStrictObject({\n\t\t...OutcomeIdentity,\n\t\tkind: Type.Literal(\"succeeded\"),\n\t\toutput: StrictObject({\n\t\t\tsummary: Type.String({ minLength: 1, maxLength: 512 }),\n\t\t\tartifacts: Type.Array(HumainAgentArtifactSchema, { maxItems: 16 }),\n\t\t}),\n\t\tusage: HumainAgentUsageSchema,\n\t}),\n\tStrictObject({\n\t\t...OutcomeIdentity,\n\t\tkind: Type.Literal(\"failed\"),\n\t\tfailureCode: HumainAgentExecutionFailureCodeSchema,\n\t\tusage: HumainAgentUsageSchema,\n\t}),\n\tStrictObject({\n\t\t...OutcomeIdentity,\n\t\tkind: Type.Literal(\"cancelled\"),\n\t\tterminationConfirmed: Type.Boolean(),\n\t\tusage: HumainAgentUsageSchema,\n\t}),\n]);\nexport type HumainAgentExecutionOutcome = Static<typeof HumainAgentExecutionOutcomeSchema>;\n\nexport const HumainAgentExecutionResponseSchema = StrictObject({\n\tschemaVersion: Type.Literal(HUMAIN_AGENT_EXECUTION_SCHEMA_VERSION),\n\tkind: Type.Literal(\"result\"),\n\tmode: Type.Union([Type.Literal(\"node\"), Type.Literal(\"workflow\")]),\n\tinvocationId: StableIdentifier,\n\tbatchId: Type.Optional(StableIdentifier),\n\ttermination: Type.Union([Type.Literal(\"not-requested\"), Type.Literal(\"confirmed\"), Type.Literal(\"unconfirmed\")]),\n\toutcomes: Type.Array(HumainAgentExecutionOutcomeSchema, { minItems: 1, maxItems: 8 }),\n});\nexport type HumainAgentExecutionResponse = Static<typeof HumainAgentExecutionResponseSchema>;\n\nconst RequestValidator = Compile(HumainAgentExecutionRequestSchema);\nconst ResponseValidator = Compile(HumainAgentExecutionResponseSchema);\nconst ArtifactReferenceValidator = Compile(SafeArtifactReference);\n\nexport function isSafeHumainAgentArtifactReference(value: unknown): value is string {\n\treturn ArtifactReferenceValidator.Check(value);\n}\n\nexport function isSafeHumainAgentExecutionSummary(value: unknown): value is string {\n\treturn (\n\t\ttypeof value === \"string\" &&\n\t\tvalue.length >= 1 &&\n\t\tvalue.length <= 512 &&\n\t\tvalue === value.trim() &&\n\t\t/^[\\p{L}\\p{N}][\\p{L}\\p{N} .,;:!?()&'-]*$/u.test(value) &&\n\t\t!/\\b(?:[A-Za-z0-9-]+\\.)+[A-Za-z]{2,}(?::\\d{1,5})?\\b/u.test(value) &&\n\t\t!/\\b(?:\\d{1,3}\\.){3}\\d{1,3}(?::\\d{1,5})?\\b/u.test(value) &&\n\t\t!/^(?:rm|curl|wget|sh|bash|zsh|fish|pwsh|powershell|cmd|node|bun|deno|npx|npm|pnpm|yarn|python(?:3)?|perl|ruby|git|docker|kubectl|ssh|scp|sudo|cat|ls|cd|mkdir|touch|chmod|chown|env|export|set|eval|exec)\\b/iu.test(\n\t\t\tvalue,\n\t\t) &&\n\t\t!/\\b(?:api[- ]?key|secret|token|credential|password)\\s*:/iu.test(value) &&\n\t\t!/\\b(?:claude|gpt|gemini|llama|mistral|zai|glm|qwen|deepseek|grok|nova|o\\d+)[-_.:][A-Za-z0-9._:-]+\\b/iu.test(\n\t\t\tvalue,\n\t\t)\n\t);\n}\n\nexport function parseHumainAgentExecutionRequest(input: unknown): HumainAgentExecutionRequest {\n\tif (!RequestValidator.Check(input)) {\n\t\tthrow new Error(\"Invalid HUMAIN agent execution request\");\n\t}\n\tif (input.mode === \"node\" && (input.claims.length !== 1 || input.batchId !== undefined)) {\n\t\tthrow new Error(\"Invalid HUMAIN agent execution request: node mode requires one claim and no batch identity\");\n\t}\n\tif (input.mode === \"workflow\" && input.batchId === undefined) {\n\t\tthrow new Error(\"Invalid HUMAIN agent execution request: workflow mode requires a batch identity\");\n\t}\n\tconst workUnitIds = new Set(input.claims.map(({ workUnitId }) => workUnitId));\n\tconst nodeIds = new Set(input.claims.map(({ nodeId }) => nodeId));\n\tif (workUnitIds.size !== input.claims.length || nodeIds.size !== input.claims.length) {\n\t\tthrow new Error(\"Invalid HUMAIN agent execution request: claim identities must be unique\");\n\t}\n\tif (input.claims.some(({ controls }) => controls.depth >= controls.maxDepth)) {\n\t\tthrow new Error(\"Invalid HUMAIN agent execution request: delegation depth limit is exhausted\");\n\t}\n\treturn deepFreeze(structuredClone(input));\n}\n\nexport function parseHumainAgentExecutionResponse(\n\trequestInput: unknown,\n\tresponseInput: unknown,\n): HumainAgentExecutionResponse {\n\tconst request = parseHumainAgentExecutionRequest(requestInput);\n\tif (!ResponseValidator.Check(responseInput)) {\n\t\tthrow new Error(\"Invalid HUMAIN agent execution response\");\n\t}\n\tconst response = responseInput;\n\tif (\n\t\tresponse.outcomes.some(\n\t\t\t(outcome) => outcome.kind === \"succeeded\" && !isSafeHumainAgentExecutionSummary(outcome.output.summary),\n\t\t)\n\t) {\n\t\tthrow new Error(\"Invalid HUMAIN agent execution response\");\n\t}\n\tif (\n\t\tresponse.mode !== request.mode ||\n\t\tresponse.invocationId !== request.invocationId ||\n\t\tresponse.batchId !== request.batchId\n\t) {\n\t\tthrow new Error(\"HUMAIN agent result envelope mismatch\");\n\t}\n\tif (response.outcomes.length !== request.claims.length) {\n\t\tthrow new Error(\"HUMAIN agent result cardinality mismatch\");\n\t}\n\tfor (const [index, outcome] of response.outcomes.entries()) {\n\t\tconst claim = request.claims[index];\n\t\tif (\n\t\t\t!claim ||\n\t\t\toutcome.workUnitId !== claim.workUnitId ||\n\t\t\toutcome.nodeId !== claim.nodeId ||\n\t\t\toutcome.attemptNumber !== claim.attemptNumber ||\n\t\t\toutcome.attemptFence !== claim.attemptFence ||\n\t\t\toutcome.segmentFence !== claim.segmentFence\n\t\t) {\n\t\t\tthrow new Error(\"HUMAIN agent result identity mismatch\");\n\t\t}\n\t}\n\tconst cancelled = response.outcomes.filter((outcome) => outcome.kind === \"cancelled\");\n\tconst expectedTermination =\n\t\tcancelled.length === 0\n\t\t\t? \"not-requested\"\n\t\t\t: cancelled.every((outcome) => outcome.terminationConfirmed)\n\t\t\t\t? \"confirmed\"\n\t\t\t\t: \"unconfirmed\";\n\tif (response.termination !== expectedTermination) {\n\t\tthrow new Error(\"HUMAIN agent result termination evidence mismatch\");\n\t}\n\treturn deepFreeze(structuredClone(response));\n}\n\nfunction deepFreeze<T>(value: T): T {\n\tif (value === null || typeof value !== \"object\" || Object.isFrozen(value)) return value;\n\tObject.freeze(value);\n\tfor (const child of Object.values(value)) deepFreeze(child);\n\treturn value;\n}\n"]}