@inneranimalmedia/agentsam-sdk 2.1.0 → 2.2.1

package/README.md

@@ -1,7 +1,8 @@
 # AgentSam SDK
 
-Portable SDK modules and CLI kits for creating local projects, inspecting repositories,
-indexing selected code, integrating identity, and maintaining dependencies.
+A deterministic-first application and agent toolkit: reusable repository, knowledge, integrity,
+security, identity, scaffolding, and delivery capabilities with optional AgentSam/LLM composition.
+CLI/TUI surfaces make those same primitives easy to use without making a model part of the implementation.
 
 **npm:** `@inneranimalmedia/agentsam-sdk` · **Source:** [GitHub](https://github.com/SamPrimeaux/agentsam-sdk)
 
@@ -24,19 +25,23 @@ or use local scaffolding/indexing.
 ## Create a local application
 
 ```sh
-agentsam init --name my-agent --yes
+agentsam create my-agent --preset fullstack
 cd my-agent
 npm install
 npm run smoke
-npm run dev
+agentsam dev
 ```
 
-This creates a Git repository, local SQLite database, environment templates, a Node API,
-and terminal commands. Local setup does not require an IAM account, cloud credentials,
-or a tunnel. `npm run status`, `npm run tui`, and `npm run pty` inspect or operate the
-generated project. A configured host/provider is required when selecting cloud operations.
+Presets are deterministic configuration bundles, not model prompts. Available starting presets are
+`fullstack`, `cms`, `prototype`, and `data`; they select an existing scaffold lane plus explicit feature
+and capability IDs. They do not silently provision cloud resources. The older
+`agentsam init --name my-agent --yes` scaffold entry point remains available for compatibility.
 
-Without a global install, use `npx @inneranimalmedia/agentsam-sdk init --name my-agent --yes`.
+The generated project contains a Git repository, local SQLite database, environment templates, a Node
+API, and terminal commands. Local setup does not require an IAM account, cloud credentials, a model, or
+a tunnel. Use `agentsam add <feature>` to record an explicit feature selection and its capability set.
+
+Without a global install, use `npx @inneranimalmedia/agentsam-sdk create my-agent --preset fullstack`.
 
 ## Index an existing repository
 
@@ -57,10 +62,16 @@ The JavaScript/TypeScript parser records syntactic relationships, not a fully re
 semantic call graph. Model/dimension changes create a distinct embedding profile.
 Python-backed snapshots capture repository composition and Git churn.
 
-## Available kits
+## Capability discovery and available kits
+
+The canonical machine-readable capability registry is available through `agentsam capabilities --json`
+and `@inneranimalmedia/agentsam-sdk/capabilities`. `agentsam inspect --json` runs the canonical
+read-only `repository.snapshot` composition primitive. See [Capabilities and presets](docs/CAPABILITIES.md).
 
 | Capability | Entry point | Guide |
 | --- | --- | --- |
+| Capability registry + presets | `agentsam capabilities`, `/capabilities`, `/presets` | [Capabilities](docs/CAPABILITIES.md) |
+| Canonical repository snapshot | `agentsam inspect --json`; `/repository` | [Capabilities](docs/CAPABILITIES.md) |
 | Git context and bridge client | `agentsam context --json`; `/git-context`, `/bridge-client` | [Portable context](docs/PORTABLE_CONTEXT.md) |
 | Identity contracts and adapters | `/identity`; `agentsam identity init` | [Identity](packages/identity/README.md) |
 | Repository knowledge | `agentsam index`, `search`, `repo`; `/knowledge` | [Knowledge](docs/portable-knowledge.md) |
@@ -93,11 +104,12 @@ authorizes its caller. Other local tooling uses Node APIs.
 
 ## Host integration and ownership
 
-The root `AgentSam` helper supplies routing/session primitives. Full model orchestration,
-tool execution policy, provider credentials, user authorization, and production storage
-belong to the consuming host application. The npm package alone does not provide a hosted
-autonomous agent platform. The old `scaffoldProject()` export is deprecated; use the local
-CLI scaffold command.
+Deterministic SDK capabilities remain useful without a model. The root `AgentSam` helper supplies an
+optional routing/session wrapper, while model orchestration, tool execution policy, provider credentials,
+actor/account authorization, workflow durability, approvals, jobs, and production application records
+belong to the consuming host application. Git/repository identity never proves actor authority, and the SDK
+does not create a second platform tools database. The old `scaffoldProject()` export is deprecated; use
+`agentsam create` or the local scaffold commands.
 
 This repository owns portable code once. Applications import it and provide adapters;
 they do not mirror SDK trees. [Ownership protocol](protocol/README.md).

package/docs/CAPABILITIES.md

@@ -0,0 +1,93 @@
+# Deterministic capabilities and product presets
+
+AgentSam SDK treats useful mechanics as deterministic capabilities first. Model/agent orchestration is an optional consumer of those capabilities, not a prerequisite for using them.
+
+## Contract
+
+A capability has a stable ID, kind, runtime, side-effect class, CLI/library entry point where applicable, and explicit model requirement. The canonical data SSOT is `protocol/capabilities/manifest.json`; `src/capabilities/manifest.js` is only its runtime reader. Presets follow the same rule through `protocol/presets/catalog.json`.
+
+```js
+import { getCapabilityManifest, repositorySnapshot } from '@inneranimalmedia/agentsam-sdk/capabilities';
+import { getPresetCatalog } from '@inneranimalmedia/agentsam-sdk/presets';
+```
+
+Raw machine-readable data is also shipped through the `/capability-manifest` and `/preset-catalog` package subpaths.
+
+```sh
+agentsam capabilities
+agentsam capabilities repository.snapshot --json
+```
+
+This registry is intended to drive CLI/TUI discovery, AgentSam/MCP tool selection, docs, verification, and workflow capability resolution. It is deliberately not a second hosted tools database.
+
+## repository.snapshot
+
+`repository.snapshot` is the first canonical composition primitive. It performs one read-only evidence collection pass over the current checkout and combines existing SDK mechanics:
+
+- Git resource identity and revision
+- Python repository intelligence
+- Merkle root and tree statistics
+- package/manifests
+- local knowledge/index generation when configured
+- last trusted local deployment receipt when available
+- a content hash over the collected evidence
+
+It does **not** call an LLM, mutate source, index the repository, provision cloud resources, or invent platform account/workspace authority.
+
+```sh
+agentsam inspect --json
+```
+
+```js
+import { repositorySnapshot } from '@inneranimalmedia/agentsam-sdk/repository';
+const snapshot = await repositorySnapshot({ cwd: process.cwd() });
+```
+
+The timestamp is not included in the content hash, so unchanged evidence produces the same `content_hash` and `snapshot_id`.
+
+## Optional AgentSam/LLM composition
+
+`repository.audit` is intentionally a different kind of manifest entry: an `agent_primitive`, not a deterministic evidence collector. It accepts a certified `repository.snapshot`, builds a bounded read-only evidence packet, and requires the caller to inject a `reasoner(packet)` function. The SDK does not choose a provider or model.
+
+```js
+import { createCapabilityAdapter, runRepositoryAudit } from '@inneranimalmedia/agentsam-sdk/agent';
+
+const audit = await runRepositoryAudit({
+  snapshot,
+  reasoner: async packet => myModelAnalyze(packet),
+});
+```
+
+The audit validator rejects mutation-oriented output keys such as jobs, executions, commits, deployments, mutations, and patches. A host Workflow may later turn validated findings/routes into plans or proposed jobs; that durable process remains outside the SDK.
+
+`createCapabilityAdapter()` converts the same canonical manifest into a small executable tool surface. Built-in `repository.snapshot` is available without a model; `repository.audit` becomes available only when a reasoner is supplied; other capability handlers can be injected explicitly by a host. This is the intended search-and-execute boundary rather than exposing every SDK command to every agent turn.
+
+## Product UX and power-user UX
+
+Product entry points are intentionally small:
+
+```sh
+agentsam create myapp --preset fullstack
+agentsam add knowledge
+agentsam dev
+agentsam inspect
+agentsam deploy
+```
+
+Power-user primitives remain available:
+
+```sh
+agentsam repo snapshot
+agentsam index ...
+agentsam search ...
+agentsam merkle ...
+agentsam recon ...
+agentsam security ...
+agentsam deploy-receipt ...
+```
+
+Presets select a coherent starting configuration; they do not silently provision remote services. `agentsam add` records an explicit feature selection in `.agentsam/features.json`; feature-specific commands continue to own real mutations until an additive handler can satisfy the complete feature contract safely.
+
+## Ownership boundary
+
+The SDK owns portable deterministic implementations and contracts. A host platform owns actor authorization, account ownership, workflow durability, approvals, job materialization, provider credentials, and application records. Portable repository capabilities must never infer actor authority from Git, workspace, or tenant labels.

package/docs/CLI_SHELL.md

@@ -21,7 +21,15 @@ Runs the optional Python Rich renderer. `--install` creates an isolated `.agents
 agentsam shell
 ```
 
-Shows the command catalog and local PTY / DB / TUI surfaces.
+Starts the interactive Agent Sam slash-command shell. Once the `agentsam>` prompt is visible, commands such as `/help`, `/status`, `/pwd`, and `/git` are handled by Agent Sam instead of the host shell (PowerShell, bash, or zsh). Use `/exit` to return to the host terminal.
+
+Do not type `/help` directly at a PowerShell/bash prompt; enter `agentsam shell` first.
+
+For scripts and regression tests, a single slash command can be dispatched without opening the REPL:
+
+```bash
+agentsam shell --command /help
+```
 
 ## Architecture
 
@@ -92,6 +100,7 @@ Gorilla is intentionally not scaffolded by default.
 /logs       local execution events
 /tui        terminal presentation
 /deploy     intentionally add a cloud adapter
+/exit       exit Agent Sam shell and return to the host terminal
 ```
 
 Provider-specific commands such as `/claude` or `/codex` are not part of the generic shell contract. Model routing belongs behind Agent Sam.

package/docs/RELEASES.md

@@ -1,10 +1,11 @@
 # `@inneranimalmedia/agentsam-sdk` release receipts
 
-**2.0.0 is published on npm and is the `latest` dist-tag.** The private identity workspace
+**2.1.0 is published on npm and is the `latest` dist-tag.** The private identity workspace
 continues to ship through the root SDK exports and is not published separately.
 
 | npm version | Published (UTC) | IAM git SHA (40) | Notes |
 |-------------|-----------------|------------------|-------|
+| 2.1.0 | 2026-09-09 (UTC, approx) | `a2570afdf1ae99542565fa3937abd7dbf95d121f` | Recon bounded-worker protocol: `protocol/recon/*` schemas, `python/agentsam_sdk/repository/recon` (packet/validate + `from_ripgrep`/`from_ast_grep` adapters), `agentsam recon pack\|validate` CLI (#27, #28). SDK-native change — no corresponding IAM platform-repo mirror SHA. |
 | 2.0.0 | 2026-09-03T02:21:44.857Z | `ed629869e701809d2bf4c61bd56d05d8d8d1e183` | Stable SDK 2.0.0; npm `latest`; identity bundled through root exports; release verification and dependency scan passed before publish. |
 | 2.0.0-alpha.identity.5 | _(pending npm)_ | `df064114eb7f8888f163e4a07dfddf19035b7169` | Password reset service, `registerFinalizeInboundOAuth`, IAM live proof. |
 | 2.0.0-alpha.identity.4 | 2026-08-22 | `df064114eb7f8888f163e4a07dfddf19035b7169` | IAM auth portal sync: signup→`/api/auth/signup`, `company-branding.js`, preview stubs. SDK git `d7498ca`. |

package/docs/portable-knowledge.md

@@ -12,7 +12,7 @@ agentsam search "snapshot integrity"
 agentsam index show
 ```
 
-Bare `agentsam init` detects an existing Git repository and offers a setup wizard. `agentsam init --name new-project` retains the scaffold workflow. Setup creates `.agentsam/knowledge.json` exclusively and preserves existing source/configuration. The config's `repository_id` is generated once; workspace identity is explicit, never inferred from a Git owner. Commit this non-secret config to share identity across checkouts. Use a distinct repository ID when cloning it for another customer.
+Bare `agentsam init` detects an existing Git repository and offers a setup wizard. `agentsam init --name new-project` retains the scaffold workflow. Setup creates `.agentsam/knowledge.json` exclusively and preserves existing source/configuration. The config's `repository_id` is generated once and is the portable knowledge identity. New configs do not require or create a workspace identifier. Legacy configs that already contain `workspace_id` remain readable and retain their previous cache/generation namespace for compatibility. Commit this non-secret config to share identity across checkouts. Use a distinct repository ID when the same source must represent a different repository corpus.
 
 Scope entries are literal relative files/directories, comma-separated on the CLI, not glob expressions. Supported AST languages are JS/JSX/TS/TSX including `.mjs`, `.cjs`, `.mts`, `.cts`; Markdown/MDX, SQL and JSON are bounded text chunks, not AST parsers. Imports, re-exports and call expressions are syntactic observations marked `resolved: false`, not a type-resolved cross-file call graph. Syntax errors abort publication.
 
@@ -36,7 +36,7 @@ Limits count unique uncached inputs and content characters, not total billable a
 ## Incremental and history guarantees
 
 - Structural parse cache keys include source content, language, parser version and chunking policy.
-- Vector keys include workspace/repository namespace, model, revision, dimensions, parameters, input-format version and actual chunk content. Paths/commit IDs are retrieval metadata, so a pure move reuses vectors.
+- Vector keys include the repository namespace, model, revision, dimensions, parameters, input-format version and actual chunk content. Legacy configs with `workspace_id` preserve their prior workspace-qualified namespace so existing cached vectors remain readable. Paths/commit IDs are retrieval metadata, so a pure move reuses vectors.
 - Scope expansion rechecks the complete selected inventory. Named scopes have separate active generations. Different customers/repositories do not share caches.
 - An unchanged run performs zero embedding requests. An edit embeds only changed chunks; changing the profile creates a separate embedding space.
 - A run stages completed cache work, rechecks source hashes, then atomically publishes a generation with compare-and-swap protection. Provider failure, invalid dimensions, concurrent publication or mid-run source edits leave the previous active generation intact.
@@ -59,14 +59,14 @@ This wraps the existing bundled Python repository-intelligence module (Python 3.
 ## Backend Postgres / Supabase
 
 ```sh
-agentsam init . --yes --include backend/feature --target production --workspace customer-workspace
+agentsam init . --yes --include backend/feature --target production
 # Supply AGENTSAM_DATABASE_URL through a secret manager.
 agentsam index setup-store
 agentsam index plan
 agentsam index run
 ```
 
-Production selects the storage destination; execution still runs from this checkout. Review [`postgres.sql`](../src/knowledge/stores/postgres.sql) before `setup-store`, which explicitly applies it to the configured database. Init/plan/search never migrate a database. Use a dedicated backend connection with TLS appropriate to your environment. The private `agentsam_knowledge` schema is not intended for browser access or Supabase's exposed REST schemas; tenant authorization belongs in the host. Workspace-qualified IDs provide isolation in queries, not authentication.
+Production selects the storage destination; execution still runs from this checkout. Review [`postgres.sql`](../src/knowledge/stores/postgres.sql) before `setup-store`, which explicitly applies it to the configured database. Init/plan/search never migrate a database. Use a dedicated backend connection with TLS appropriate to your environment. The private `agentsam_knowledge` schema is not intended for browser access or Supabase's exposed REST schemas; account/tenant authorization belongs in the host. Repository ID plus named scope isolates portable knowledge generations; it is resource identity, not actor authentication.
 
 SQLite stores cache entries plus immutable generation/observation payloads locally under `.agentsam/knowledge/`, excluded from Git. Postgres stores the same versioned facts in JSONB and embeddings in native pgvector, with exact cosine ranking restricted to the selected generation's vector keys. This first slice uses exact search, not an ANN index; large indexes need per-profile partitions/indexes and benchmarks. The unconstrained vector column permits multiple dimensional profiles, but queries never mix them. Retention/garbage collection is intentionally absent so initial history is preserved; configure a retention policy before large production backfills.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inneranimalmedia/agentsam-sdk",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "description": "Portable AgentSam SDK and CLI kits for local scaffolding, repository intelligence, incremental indexing, identity adapters, and verified dependency maintenance.",
   "type": "module",
   "main": "./src/index.js",
@@ -15,6 +15,12 @@
     "./deploy-receipt": "./src/lib/deploy-receipt/index.js",
     "./knowledge": "./src/knowledge/index.js",
     "./knowledge-service-client": "./src/knowledge/service/client.js",
+    "./capabilities": "./src/capabilities/index.js",
+    "./capability-manifest": "./protocol/capabilities/manifest.json",
+    "./repository": "./src/repository/index.js",
+    "./agent": "./src/agent/index.js",
+    "./presets": "./src/presets/index.js",
+    "./preset-catalog": "./protocol/presets/catalog.json",
     "./identity": "./packages/identity/src/index.js",
     "./identity/providers": "./packages/identity/src/providers/index.js",
     "./identity/providers/google": "./packages/identity/src/providers/google/index.js",

package/packages/identity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inneranimalmedia/agentsam-sdk-identity",
-  "version": "2.1.0",
+  "version": "2.2.1",
   "private": true,
   "type": "module",
   "description": "Identity module for @inneranimalmedia/agentsam-sdk (workspace — publish via root SDK)",

package/packages/identity/src/frontend/auth-portal/README.md

@@ -11,7 +11,7 @@ Pages copied **verbatim** from IAM `static/pages/auth/*` — reorganize only.
 | Colors | `:root { --auth-bg, ... }` | theme tokens — **no JS changes** |
 | OAuth labels | button text | HTML only |
 
-Phase 5 (`agentsam init identity` — copy portal + inject brand tokens) is not in the CLI yet. Today: edit HTML/CSS directly or use `portal.brand` at `createIdentityClient` init for programmatic apps; preview with `agentsam identity preview`.
+The CLI can now scaffold the reusable identity app surfaces directly with `agentsam identity init --name <project> --brand "App Name"`. This copies the portal, Worker adapter, and migrations into a standalone app layout. Use `portal.brand` at `createIdentityClient` init for programmatic configuration, or `agentsam identity preview` for the local preview server.
 
 ## Source map
 

package/packages/identity/src/index.js

@@ -17,6 +17,7 @@ import {
   listIdentityProviders,
   GoogleProvider,
   GithubProvider,
+  IamProvider,
   GcpProvider,
   EmailProvider,
 } from './providers/index.js';
@@ -34,6 +35,7 @@ export {
   listIdentityProviders,
   GoogleProvider,
   GithubProvider,
+  IamProvider,
   GcpProvider,
   EmailProvider,
 };

package/protocol/capabilities/capability-manifest.schema.json

@@ -0,0 +1,36 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.inneranimalmedia.com/agentsam/capabilities/manifest.schema.json",
+  "title": "AgentSam capability manifest",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "package", "capabilities"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "package": { "type": "string", "minLength": 1 },
+    "capabilities": {
+      "type": "object",
+      "additionalProperties": {
+        "type": "object",
+        "required": ["id", "kind", "version", "domain", "runtime", "description", "deterministic", "model_required", "side_effects", "status"],
+        "properties": {
+          "id": { "type": "string", "pattern": "^[a-z][a-z0-9.-]+$" },
+          "kind": { "enum": ["capability", "agent_primitive"] },
+          "version": { "type": "integer", "minimum": 1 },
+          "domain": { "type": "string", "minLength": 1 },
+          "runtime": { "type": "string", "minLength": 1 },
+          "package": { "type": "string" },
+          "export": { "type": "string" },
+          "cli": { "type": "string" },
+          "description": { "type": "string", "minLength": 1 },
+          "deterministic": { "type": "boolean" },
+          "model_required": { "type": "boolean" },
+          "side_effects": { "type": "string" },
+          "input_schema": { "type": "string" },
+          "output_schema": { "type": "string" },
+          "status": { "enum": ["stable", "experimental", "deprecated"] }
+        }
+      }
+    }
+  }
+}

package/protocol/capabilities/manifest.json

@@ -0,0 +1,179 @@
+{
+  "schema_version": 1,
+  "package": "@inneranimalmedia/agentsam-sdk",
+  "capabilities": {
+    "repository.snapshot": {
+      "id": "repository.snapshot",
+      "kind": "capability",
+      "version": 1,
+      "domain": "repository",
+      "runtime": "node+python",
+      "package": "@inneranimalmedia/agentsam-sdk/repository",
+      "export": "repositorySnapshot",
+      "cli": "agentsam inspect --json",
+      "description": "Collect a read-only, content-addressed repository evidence snapshot.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "none",
+      "input_schema": "protocol/capabilities/repository-snapshot-input.schema.json",
+      "output_schema": "protocol/capabilities/repository-snapshot.schema.json",
+      "status": "stable"
+    },
+    "repository.audit": {
+      "id": "repository.audit",
+      "kind": "agent_primitive",
+      "version": 1,
+      "domain": "repository",
+      "runtime": "node",
+      "package": "@inneranimalmedia/agentsam-sdk/agent",
+      "export": "runRepositoryAudit",
+      "description": "Analyze a certified repository snapshot through an injected reasoning adapter without granting mutation authority.",
+      "deterministic": false,
+      "model_required": true,
+      "side_effects": "none",
+      "input_schema": "protocol/capabilities/repository-audit-input.schema.json",
+      "output_schema": "protocol/capabilities/repository-audit.schema.json",
+      "status": "stable"
+    },
+    "repository.intelligence": {
+      "id": "repository.intelligence",
+      "kind": "capability",
+      "version": 1,
+      "domain": "repository",
+      "runtime": "python",
+      "package": "@inneranimalmedia/agentsam-sdk/repository",
+      "cli": "agentsam repo snapshot",
+      "description": "Observe repository composition, manifests, churn, pressure, and stability.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "none",
+      "status": "stable"
+    },
+    "knowledge.index": {
+      "id": "knowledge.index",
+      "kind": "capability",
+      "version": 1,
+      "domain": "repository",
+      "runtime": "node",
+      "package": "@inneranimalmedia/agentsam-sdk/knowledge",
+      "cli": "agentsam index run",
+      "description": "Build a coherent incremental AST/text generation with optional embeddings.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "local-state",
+      "status": "stable"
+    },
+    "knowledge.search": {
+      "id": "knowledge.search",
+      "kind": "capability",
+      "version": 1,
+      "domain": "repository",
+      "runtime": "node",
+      "package": "@inneranimalmedia/agentsam-sdk/knowledge",
+      "cli": "agentsam search \"query\"",
+      "description": "Retrieve bounded repository context from a published knowledge generation.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "none",
+      "status": "stable"
+    },
+    "merkle.snapshot": {
+      "id": "merkle.snapshot",
+      "kind": "capability",
+      "version": 1,
+      "domain": "integrity",
+      "runtime": "node",
+      "package": "@inneranimalmedia/agentsam-sdk/merkle",
+      "cli": "agentsam merkle snapshot",
+      "description": "Create a portable SHA-256 filesystem snapshot.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "local-state",
+      "status": "stable"
+    },
+    "deploy.receipt": {
+      "id": "deploy.receipt",
+      "kind": "capability",
+      "version": 1,
+      "domain": "delivery",
+      "runtime": "node",
+      "package": "@inneranimalmedia/agentsam-sdk/deploy-receipt",
+      "cli": "agentsam deploy-receipt capture",
+      "description": "Capture and finalize content-addressed deployment evidence.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "local-state",
+      "status": "stable"
+    },
+    "security.scan": {
+      "id": "security.scan",
+      "kind": "capability",
+      "version": 1,
+      "domain": "security",
+      "runtime": "node",
+      "package": "@inneranimalmedia/agentsam-sdk/security",
+      "cli": "agentsam security scan",
+      "description": "Inventory dependency state and optionally query vulnerability evidence.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "network-optional",
+      "status": "stable"
+    },
+    "identity.init": {
+      "id": "identity.init",
+      "kind": "capability",
+      "version": 1,
+      "domain": "app",
+      "runtime": "node",
+      "package": "@inneranimalmedia/agentsam-sdk/identity",
+      "cli": "agentsam identity init",
+      "description": "Generate portable identity/auth application surfaces from SDK contracts.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "filesystem",
+      "status": "stable"
+    },
+    "scaffold.create": {
+      "id": "scaffold.create",
+      "kind": "capability",
+      "version": 1,
+      "domain": "app",
+      "runtime": "node",
+      "package": "@inneranimalmedia/agentsam-sdk",
+      "cli": "agentsam create <name> --preset <preset>",
+      "description": "Create a local-first project from a deterministic preset selection.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "filesystem",
+      "status": "stable"
+    },
+    "recon.pack": {
+      "id": "recon.pack",
+      "kind": "capability",
+      "version": 1,
+      "domain": "agent",
+      "runtime": "node+python",
+      "package": "@inneranimalmedia/agentsam-sdk/repository",
+      "cli": "agentsam recon pack",
+      "description": "Convert explicit evidence slices into bounded worker task packets.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "none",
+      "status": "stable"
+    },
+    "site.scrape": {
+      "id": "site.scrape",
+      "kind": "capability",
+      "version": 1,
+      "domain": "web",
+      "runtime": "python",
+      "package": "agentsam-site-scrape",
+      "cli": "python -m agentsam_site_scrape",
+      "description": "Crawl a bounded public site and prepare page/image assets for local or R2 ingest.",
+      "deterministic": true,
+      "model_required": false,
+      "side_effects": "network+filesystem",
+      "status": "stable"
+    }
+  }
+}

package/protocol/capabilities/repository-audit-input.schema.json

@@ -0,0 +1,14 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.inneranimalmedia.com/agentsam/capabilities/repository-audit-input.schema.json",
+  "title": "repository.audit input",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "snapshot": { "type": "object" },
+    "focus": { "type": "array", "maxItems": 24, "items": { "type": "string" } },
+    "depth": { "enum": ["quick", "standard", "deep"], "default": "standard" },
+    "requestedSections": { "type": "array", "maxItems": 24, "items": { "type": "string" } },
+    "evidenceBudget": { "type": "integer", "minimum": 1000, "maximum": 64000, "default": 8000 }
+  }
+}

package/protocol/capabilities/repository-audit.schema.json

@@ -0,0 +1,30 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.inneranimalmedia.com/agentsam/capabilities/repository-audit.schema.json",
+  "title": "repository.audit result",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "primitive", "snapshot_id", "snapshot_content_hash", "generated_at", "summary", "packages", "binaries", "commands", "capabilities", "services", "protocols", "notable_combinations", "findings", "cleanup_candidates", "recommended_routes", "evidence_refs", "artifacts"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "primitive": { "const": "repository.audit" },
+    "snapshot_id": { "type": "string" },
+    "snapshot_content_hash": { "type": "string" },
+    "generated_at": { "type": "string" },
+    "summary": { "type": "string", "minLength": 1 },
+    "repository_map": {},
+    "file_tree": {},
+    "packages": { "type": "array" },
+    "binaries": { "type": "array" },
+    "commands": { "type": "array" },
+    "capabilities": { "type": "array" },
+    "services": { "type": "array" },
+    "protocols": { "type": "array" },
+    "notable_combinations": { "type": "array" },
+    "findings": { "type": "array" },
+    "cleanup_candidates": { "type": "array" },
+    "recommended_routes": { "type": "array" },
+    "evidence_refs": { "type": "array", "items": { "type": "string" } },
+    "artifacts": { "type": "array" }
+  }
+}

package/protocol/capabilities/repository-snapshot-input.schema.json

@@ -0,0 +1,11 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.inneranimalmedia.com/agentsam/capabilities/repository-snapshot-input.schema.json",
+  "title": "repository.snapshot input",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "cwd": { "type": "string", "minLength": 1 },
+    "churnDays": { "type": "integer", "minimum": 1, "maximum": 3650, "default": 30 }
+  }
+}

package/protocol/capabilities/repository-snapshot.schema.json

@@ -0,0 +1,20 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.inneranimalmedia.com/agentsam/capabilities/repository-snapshot.schema.json",
+  "title": "repository.snapshot result",
+  "type": "object",
+  "required": ["schema_version", "capability", "snapshot_id", "created_at", "content_hash", "repository", "tree", "intelligence", "packages", "knowledge"],
+  "properties": {
+    "schema_version": { "const": 1 },
+    "capability": { "const": "repository.snapshot" },
+    "snapshot_id": { "type": "string", "pattern": "^rsnap_[a-f0-9]{24}$" },
+    "created_at": { "type": "string" },
+    "content_hash": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "repository": { "type": "object" },
+    "tree": { "type": "object" },
+    "intelligence": { "type": "object" },
+    "packages": { "type": "array", "items": { "type": "object" } },
+    "knowledge": { "type": "object" },
+    "deploy": { "type": ["object", "null"] }
+  }
+}