@lssm/lib.contracts-spec 17.3.2

package/dist/node/agent/protocol/index.js

@@ -0,0 +1 @@
+export*from"./application.js";export*from"./automation/index.js";export*from"./bindings.js";export*from"./budget.js";export*from"./common.js";export*from"./delegation.js";export*from"./execution.js";export*from"./graph-validation.js";export*from"./help.js";export*from"./markdown-migration.js";export*from"./memory.js";export*from"./memory-governance.js";export*from"./memory-validation.js";export*from"./model-fallback-validation-v2.js";export*from"./model-invocation-profile.js";export*from"./model-route-contracts-v2.js";export*from"./model-routing.js";export*from"./model-routing-migration.js";export*from"./model-routing-v2.js";export*from"./model-selection-validation-v2.js";export*from"./model-serving-validation-v2.js";export*from"./planning.js";export*from"./reflection.js";

package/dist/node/agent/protocol/markdown-migration.js

@@ -0,0 +1 @@
+import{sha256Hex as c}from"@lssm/lib.crypto-utils";import{z as r}from"zod";import{canonicalJsonString as u}from"../../rich-reference/canonical-serializer.js";import{agentProtocolDigestSchema as l,agentProtocolRefSchema as d,agentProtocolTimestampSchema as p,agentScopeV1Schema as w}from"./common.js";export const AGENT_MARKDOWN_MIGRATION_V1="contractspec.agent.markdown-migration.v1";export function classifyAgentMigrationPathV1(e,t){const n=t.split("/");if(t.length>512||n.some((o)=>!/^[a-zA-Z0-9_][a-zA-Z0-9_.-]*$/.test(o)||o.endsWith(".")||/^(con|prn|aux|nul|com[1-9]|lpt[1-9])(?:\.|$)/i.test(o)))throw Error("agent_migration.unsafe_path");if(e==="hermes"&&/^memories\/(MEMORY|USER)\.md$/.test(t))return"memory_markdown";if(e==="openclaw"&&(/^(MEMORY|USER)\.md$/.test(t)||/^memory\/.+\.md$/.test(t)))return"memory_markdown";if(/^skills\/[a-z0-9][a-z0-9_-]*\/(?:SKILL\.md|references\/.+\.md)$/.test(t))return"skill_markdown";throw Error("agent_migration.unsupported_file")}const k=r.object({path:r.string().min(1).max(512),kind:r.enum(["memory_markdown","skill_markdown"]),content:r.string().max(524288),contentHash:l}).strict(),M={schemaVersion:r.literal(AGENT_MARKDOWN_MIGRATION_V1),id:d,scope:w,sourceRuntime:r.enum(["hermes","openclaw"]),sourceVersion:d,sourceRootRef:d,createdAt:p,classification:r.literal("restricted"),trust:r.literal("unreviewed"),activation:r.literal("disabled"),effectAuthority:r.literal("none"),requiresCredentialReconnection:r.literal(!0),files:r.array(k).min(1).max(512)};export const agentMarkdownMigrationArchiveV1Schema=r.object({...M,archiveDigest:l}).strict().superRefine((e,t)=>{const n=new Set;let o=0;for(const[a,i]of e.files.entries()){try{if(classifyAgentMigrationPathV1(e.sourceRuntime,i.path)!==i.kind)throw Error("kind mismatch")}catch{t.addIssue({code:"custom",path:["files",a,"path"],message:"Unsupported or unsafe migration path/kind"})}const m=i.path.toLowerCase();if(n.has(m))t.addIssue({code:"custom",path:["files",a],message:"Duplicate portable path"});n.add(m);o+=new TextEncoder().encode(i.content).length;if(i.contentHash!==`sha256:${c(i.content)}`)t.addIssue({code:"custom",path:["files",a,"contentHash"],message:"Content hash mismatch"});if(i.kind==="skill_markdown"&&!e.files.some((f)=>f.path===`${i.path.split("/").slice(0,2).join("/")}/SKILL.md`))t.addIssue({code:"custom",path:["files",a],message:"Skill definition is required with references"})}if(o>8388608)t.addIssue({code:"custom",path:["files"],message:"Archive exceeds the decoded byte limit"});const{archiveDigest:s,...g}=e;if(s!==h(g))t.addIssue({code:"custom",path:["archiveDigest"],message:"Archive digest mismatch"})});export function createAgentMarkdownMigrationArchiveV1(e){if(e.files.length<1||e.files.length>512)throw Error("agent_migration.invalid_file_count");let t=0;for(const o of e.files){if(o.content.length>524288)throw Error("agent_migration.file_too_large");t+=new TextEncoder().encode(o.content).length;if(t>8388608)throw Error("agent_migration.archive_too_large")}const n={schemaVersion:AGENT_MARKDOWN_MIGRATION_V1,id:e.id,scope:e.scope,sourceRuntime:e.sourceRuntime,sourceVersion:e.sourceVersion,sourceRootRef:e.sourceRootRef,createdAt:e.createdAt,classification:"restricted",trust:"unreviewed",activation:"disabled",effectAuthority:"none",requiresCredentialReconnection:!0,files:e.files.map((o)=>({path:o.path,content:o.content,kind:classifyAgentMigrationPathV1(e.sourceRuntime,o.path),contentHash:`sha256:${c(o.content)}`})).sort((o,s)=>o.path<s.path?-1:o.path>s.path?1:0)};return agentMarkdownMigrationArchiveV1Schema.parse({...n,archiveDigest:h(n)})}export function serializeAgentMarkdownMigrationV1(e){return JSON.stringify(agentMarkdownMigrationArchiveV1Schema.parse(e))}export function parseAgentMarkdownMigrationV1(e){if(new TextEncoder().encode(e).length>67108864)throw Error("agent_migration.archive_too_large");return agentMarkdownMigrationArchiveV1Schema.parse(JSON.parse(e))}export const AgentMarkdownMigrationV1DocBlock={id:"docs.tech.agent.markdown-migration-v1",title:"Reviewable external agent Markdown archives",kind:"reference",visibility:"public",route:"/docs/tech/agent/markdown-migration-v1",body:"Versioned restricted archives preserve selected Hermes/OpenClaw Markdown memory and skill definitions with content hashes, source provenance and disabled activation. Import data never grants permissions. Memory proposals remain owned by PersonalOS or CompanyOS governance. This initial slice does not migrate schedules, channel configuration, skill scripts/assets, or external memory databases. Hosts must authorize source selection and storage; archive data must not be logged or published as ordinary telemetry."};function h(e){const{files:t,...n}=e;return`sha256:${c(u({...n,files:t.map(({content:o,...s})=>s)}))}`}

package/dist/node/agent/protocol/memory-governance.js

@@ -0,0 +1 @@
+import{sha256Hex as g}from"@lssm/lib.crypto-utils";import{z as o}from"zod";import{canonicalJsonString as u}from"../../rich-reference/canonical-serializer.js";import{agentArtifactBindingV1Schema as t,agentProtocolDigestSchema as s,agentProtocolEvidencePointerSchema as p,agentProtocolRefSchema as n,agentProtocolTimestampSchema as c,agentScopeV1Schema as a}from"./common.js";export const AGENT_MEMORY_OWNER_DECISION_V1="contractspec.agent.memory-owner-decision.v1",AGENT_MEMORY_MUTATION_RECEIPT_V1="contractspec.agent.memory-mutation-receipt.v1",AGENT_MEMORY_PROJECTION_V1="contractspec.agent.memory-projection.v1",AGENT_MEMORY_PROJECTION_REVOCATION_V1="contractspec.agent.memory-projection-revocation.v1";const d=o.enum(["personal_os","company_os"]),y=o.enum(["create","correct","revoke","delete"]);export const agentMemoryOwnerDecisionV1Schema=o.object({schemaVersion:o.literal(AGENT_MEMORY_OWNER_DECISION_V1),id:n,scope:a,proposal:t,memoryOwner:d,decision:o.enum(["promote","reject","request_help"]),expectedRevision:o.number().int().nonnegative(),consentDecision:t.optional(),policyDecision:t.optional(),retentionDecision:t.optional(),authorityDecision:t.optional(),helpRequestRef:n.optional(),reasonSummary:n,evidence:o.array(p).min(1),effectAuthority:o.literal("none"),decidedAt:c,decisionDigest:s}).strict().superRefine((e,i)=>{const r=[e.consentDecision,e.policyDecision,e.retentionDecision,e.authorityDecision];if(e.decision==="promote"&&r.some((m)=>!m))i.addIssue({code:o.ZodIssueCode.custom,path:["decision"],message:"Promotion requires consent, policy, retention, and authority"});if(e.decision==="request_help"&&!e.helpRequestRef)i.addIssue({code:o.ZodIssueCode.custom,path:["helpRequestRef"],message:"A help decision requires a help request reference"})}),agentMemoryMutationReceiptV1Schema=o.object({schemaVersion:o.literal(AGENT_MEMORY_MUTATION_RECEIPT_V1),id:n,scope:a,proposal:t,ownerDecision:t,memoryOwner:d,operation:y,memoryRef:n,previousRevision:o.number().int().nonnegative(),revision:o.number().int().positive(),state:o.enum(["active","revoked","deleted"]),content:t.optional(),sourceRefs:o.array(n).min(1),evidence:o.array(p).min(1),committedAt:c,receiptDigest:s}).strict().superRefine((e,i)=>{if(e.revision!==e.previousRevision+1)i.addIssue({code:o.ZodIssueCode.custom,path:["revision"],message:"Memory mutation revision must increment exactly once"});if((e.operation==="create"||e.operation==="correct")!==Boolean(e.content))i.addIssue({code:o.ZodIssueCode.custom,path:["content"],message:"Create/correct require content; revoke/delete forbid it"});const m=e.operation==="revoke"?"revoked":e.operation==="delete"?"deleted":"active";if(e.state!==m)i.addIssue({code:o.ZodIssueCode.custom,path:["state"],message:"Memory state does not match its committed operation"})}),agentMemoryProjectionV1Schema=o.object({schemaVersion:o.literal(AGENT_MEMORY_PROJECTION_V1),id:n,sourceMemoryReceipt:t,sourceScope:a,targetScope:a,purpose:n,authorizationDecision:t,content:t,dataCategoryRefs:o.array(n).min(1),createdAt:c,expiresAt:c,effectAuthority:o.literal("none"),projectionDigest:s}).strict().superRefine((e,i)=>{if(Date.parse(e.expiresAt)<=Date.parse(e.createdAt))i.addIssue({code:o.ZodIssueCode.custom,path:["expiresAt"],message:"Memory projection expiry must follow creation"})}),agentMemoryProjectionRevocationV1Schema=o.object({schemaVersion:o.literal(AGENT_MEMORY_PROJECTION_REVOCATION_V1),id:n,projection:t,authorityDecision:t,reasonSummary:n,evidence:o.array(p).min(1),effectiveAt:c,receiptDigest:s}).strict();export function digestAgentMemoryGovernanceArtifactV1(e,i){const r={...e};delete r[i];return`sha256:${g(u(r))}`}export function verifyAgentMemoryOwnerDecisionDigestV1(e){return e.decisionDigest===digestAgentMemoryGovernanceArtifactV1(e,"decisionDigest")}export function verifyAgentMemoryMutationReceiptDigestV1(e){return e.receiptDigest===digestAgentMemoryGovernanceArtifactV1(e,"receiptDigest")}export function verifyAgentMemoryProjectionDigestV1(e){return e.projectionDigest===digestAgentMemoryGovernanceArtifactV1(e,"projectionDigest")}export function verifyAgentMemoryProjectionRevocationDigestV1(e){return e.receiptDigest===digestAgentMemoryGovernanceArtifactV1(e,"receiptDigest")}

package/dist/node/agent/protocol/memory-validation.js

@@ -0,0 +1 @@
+import{validateAgentScopeExactV1 as r}from"./common.js";import{verifyAgentMemoryProposalArtifactV1 as s}from"./memory.js";import{verifyAgentMemoryMutationReceiptDigestV1 as i,verifyAgentMemoryOwnerDecisionDigestV1 as c,verifyAgentMemoryProjectionDigestV1 as t,verifyAgentMemoryProjectionRevocationDigestV1 as p}from"./memory-governance.js";export function validateAgentMemoryOwnerDecisionV1(e){const o=r({expected:e.proposal.proposal.scope,observed:e.decision.scope});if(!s(e.proposal))o.push("Memory proposal digest is invalid");if(!c(e.decision))o.push("Memory owner decision digest is invalid");if(e.decision.proposal.ref!==e.proposal.proposal.id||e.decision.proposal.digest!==e.proposal.proposalDigest)o.push("Memory owner decision proposal binding does not match");if(e.decision.memoryOwner!==e.proposal.proposal.memoryOwner)o.push("Memory owner decision changes the proposal owner");if(e.decision.decision==="promote"&&(e.decision.consentDecision?.ref!==e.proposal.proposal.consentRequirementRef||e.decision.policyDecision?.ref!==e.proposal.proposal.policyRef||e.decision.retentionDecision?.ref!==e.proposal.proposal.retentionPolicyRef))o.push("Memory owner decision governance bindings do not match the proposal");if(e.decision.expectedRevision!==e.proposal.proposal.expectedRevision)o.push("Memory owner decision changes the expected revision");return o}export function validateAgentMemoryMutationReceiptV1(e){const o=validateAgentMemoryOwnerDecisionV1(e);o.push(...r({expected:e.proposal.proposal.scope,observed:e.receipt.scope}));if(e.decision.decision!=="promote")o.push("Only a promoted memory proposal may produce a receipt");if(!i(e.receipt))o.push("Memory mutation receipt digest is invalid");if(e.receipt.proposal.ref!==e.proposal.proposal.id||e.receipt.proposal.digest!==e.proposal.proposalDigest)o.push("Memory receipt proposal binding does not match");if(e.receipt.ownerDecision.ref!==e.decision.id)o.push("Memory receipt owner decision reference does not match");if(e.receipt.ownerDecision.digest!==e.decision.decisionDigest)o.push("Memory receipt owner decision digest does not match");if(e.receipt.operation!==e.proposal.proposal.operation)o.push("Memory receipt operation does not match the proposal");if(e.receipt.memoryOwner!==e.proposal.proposal.memoryOwner)o.push("Memory receipt changes the proposal owner");if(e.receipt.previousRevision!==e.proposal.proposal.expectedRevision)o.push("Memory receipt does not advance the expected revision");if(Date.parse(e.receipt.committedAt)<Date.parse(e.decision.decidedAt))o.push("Memory receipt predates its owner decision");if(JSON.stringify([...e.receipt.sourceRefs].sort())!==JSON.stringify([...e.proposal.proposal.sourceRefs].sort()))o.push("Memory receipt sources do not match the proposal");if(e.proposal.targetMemoryRef&&e.receipt.memoryRef!==e.proposal.targetMemoryRef)o.push("Memory receipt target does not match the proposal");if(e.receipt.content&&(e.receipt.content.ref!==e.proposal.proposal.contentRef||e.receipt.content.digest!==e.proposal.proposal.contentHash))o.push("Memory receipt content does not match the proposal");return o}export function validateAgentMemoryProjectionRevocationV1(e){const o=[];if(!t(e.projection))o.push("Memory projection digest is invalid");if(!p(e.revocation))o.push("Memory projection revocation digest is invalid");if(e.revocation.projection.ref!==e.projection.id||e.revocation.projection.digest!==e.projection.projectionDigest)o.push("Memory projection revocation binding does not match");if(Date.parse(e.revocation.effectiveAt)<Date.parse(e.projection.createdAt))o.push("Memory projection revocation predates the projection");return o}export function validateAgentMemoryProjectionV1(e){const o=r({expected:e.receipt.scope,observed:e.projection.sourceScope});if(e.receipt.state!=="active"||!e.receipt.content)o.push("Only active memory content may be projected");if(!i(e.receipt))o.push("Memory mutation receipt digest is invalid");if(!t(e.projection))o.push("Memory projection digest is invalid");if(e.projection.sourceMemoryReceipt.ref!==e.receipt.id||e.projection.sourceMemoryReceipt.digest!==e.receipt.receiptDigest)o.push("Memory projection source receipt binding does not match");if(e.receipt.content&&(e.projection.content.ref!==e.receipt.content.ref||e.projection.content.digest!==e.receipt.content.digest))o.push("Memory projection content binding does not match");return o}

package/dist/node/agent/protocol/memory.js

@@ -0,0 +1 @@
+import{sha256Hex as s}from"@lssm/lib.crypto-utils";import{z as o}from"zod";import{canonicalJsonString as c}from"../../rich-reference/canonical-serializer.js";import{agentProtocolDigestSchema as n,agentProtocolEvidencePointerSchema as i,agentProtocolRefSchema as r,agentProtocolTimestampSchema as p,agentScopeV1Schema as m}from"./common.js";export const AGENT_MEMORY_PROPOSAL_V1="contractspec.agent.memory-proposal.v1",AGENT_MEMORY_PROPOSAL_ARTIFACT_V1="contractspec.agent.memory-proposal-artifact.v1",agentMemoryProposalV1Schema=o.object({schemaVersion:o.literal(AGENT_MEMORY_PROPOSAL_V1),id:r,runRef:r,scope:m,memoryOwner:o.enum(["personal_os","company_os"]),purpose:r,operation:o.enum(["create","correct","revoke","delete"]),contentRef:r.optional(),contentHash:n.optional(),sourceRefs:o.array(r).min(1),evidence:o.array(i).min(1),confidenceScore:o.number().min(0).max(1),consentRequirementRef:r,policyRef:r,retentionPolicyRef:r,expectedRevision:o.number().int().nonnegative(),status:o.literal("proposed"),createdAt:p}).strict().superRefine((e,t)=>{const a=e.operation==="create"||e.operation==="correct";if(a&&(!e.contentRef||!e.contentHash))t.addIssue({code:o.ZodIssueCode.custom,path:["contentRef"],message:"Create and correction proposals require hashed content"});if(!a&&(e.contentRef||e.contentHash))t.addIssue({code:o.ZodIssueCode.custom,path:["contentRef"],message:"Revocation and deletion proposals identify sources without embedding content"})}),agentMemoryProposalArtifactV1Schema=o.object({schemaVersion:o.literal(AGENT_MEMORY_PROPOSAL_ARTIFACT_V1),proposal:agentMemoryProposalV1Schema,targetMemoryRef:r.optional(),proposalDigest:n}).strict().superRefine((e,t)=>{if(e.proposal.operation==="create"===Boolean(e.targetMemoryRef))t.addIssue({code:o.ZodIssueCode.custom,path:["targetMemoryRef"],message:"Create proposals cannot target memory; other operations require a target"})});export function digestAgentMemoryProposalArtifactV1(e){return`sha256:${s(c(e))}`}export function createAgentMemoryProposalArtifactV1(e){const t={schemaVersion:AGENT_MEMORY_PROPOSAL_ARTIFACT_V1,proposal:agentMemoryProposalV1Schema.parse(e.proposal),...e.targetMemoryRef?{targetMemoryRef:e.targetMemoryRef}:{}};return agentMemoryProposalArtifactV1Schema.parse({...t,proposalDigest:digestAgentMemoryProposalArtifactV1(t)})}export function verifyAgentMemoryProposalArtifactV1(e){const{proposalDigest:t,...a}=e;return t===digestAgentMemoryProposalArtifactV1(a)}

package/dist/node/agent/protocol/model-fallback-validation-v2.js

@@ -0,0 +1 @@
+import{routeBindingMatchesModelCandidateV2 as d,validateAgentModelSelectionBindingV2 as g,validateModelCandidateV2 as r}from"./model-selection-validation-v2.js";export function validateAgentModelFallbackEquivalenceV2(e){const i=f(e);i.push(...g({plan:e.plan,selection:e.selection,candidate:e.from,now:e.now}).map((o)=>`Fallback source ${o}`));const s=e.consideredCandidates.map((o)=>o.route.id),t=e.decision.consideredRoutes.map((o)=>o.ref);if(new Set(t).size!==t.length)i.push("Fallback considered routes must be unique");for(const[o,n]of e.decision.consideredRoutes.entries()){const a=e.consideredCandidates[o],l=e.eligibility[o];if(!a||!d(n,a))i.push(`Fallback considered route has a stale binding: ${n.ref}`);if(!a||!l||!d(l.route,a)||n.eligibility!==l.status||n.eligibilityEvidence.ref!==l.evidence.ref||n.eligibilityEvidence.digest!==l.evidence.digest)i.push(`Fallback eligibility binding is stale: ${n.ref}`)}if(JSON.stringify(s)!==JSON.stringify(t))i.push("Fallback considered-route order does not match candidates");const c=e.consideredCandidates.find((o,n)=>e.eligibility[n]?.status==="eligible"&&r({plan:e.plan,selection:e.selection,candidate:o,now:e.now}).length===0);i.push(...r({plan:e.plan,selection:e.selection,candidate:e.to,now:e.now}).map((o)=>`Fallback ${o.replace("Model route","route")}`));if(!c||c.route.id!==e.to.route.id)i.push("Fallback target is not the first eligible considered route");if(e.decision.decision==="allowed"&&i.length>0)i.push("Fallback cannot be allowed when equivalence checks fail");return i}function f(e){const i=[];if(e.decision.checkpoint.ref!==e.checkpoint.id||e.decision.checkpoint.digest!==e.checkpoint.stateDigest||e.checkpoint.runRef!==e.selection.runRef||e.checkpoint.plan.ref!==e.plan.id||e.checkpoint.plan.digest!==e.plan.planDigest)i.push("Fallback checkpoint does not match the selected plan and run");if(e.decision.decision==="allowed"&&e.checkpoint.providerOutcome==="indeterminate")i.push("Fallback cannot proceed from an indeterminate provider outcome");if(e.decision.selection.ref!==e.selection.id||e.decision.selection.digest!==e.selection.selectionDigest)i.push("Fallback selection binding does not match");if(e.decision.runRef!==e.selection.runRef)i.push("Fallback run does not match the model selection");for(const[s,t,c]of[["source",e.decision.fromRoute,e.from],["target",e.decision.toRoute,e.to]])if(!d(t,c))i.push(`Fallback ${s} route binding does not match`);if(!d(e.selection.selectedRoute,e.from))i.push("Fallback source is not the originally selected route");if(e.from.route.invocationProfile.ref!==e.to.route.invocationProfile.ref||e.from.route.invocationProfile.digest!==e.to.route.invocationProfile.digest)i.push("Fallback cannot change the qualified invocation profile");return i}

package/dist/node/agent/protocol/model-fallback-validation.js

@@ -0,0 +1 @@
+export function validateAgentModelFallbackOriginV1(e){const i=[];if(e.decision.checkpoint.ref!==e.checkpoint.id||e.decision.checkpoint.digest!==e.checkpoint.stateDigest||e.checkpoint.runRef!==e.selection.runRef||e.checkpoint.plan.ref!==e.plan.id||e.checkpoint.plan.digest!==e.plan.planDigest)i.push("Fallback checkpoint does not match the selected plan and run");if(e.decision.decision==="allowed"&&e.checkpoint.providerOutcome==="indeterminate")i.push("Fallback cannot proceed from an indeterminate provider outcome");if(e.decision.selection.ref!==e.selection.id||e.decision.selection.digest!==e.selection.selectionDigest)i.push("Fallback selection binding does not match");if(e.decision.runRef!==e.selection.runRef)i.push("Fallback run does not match the model selection");for(const[l,n,c]of[["source",e.decision.fromRoute,e.from],["target",e.decision.toRoute,e.to]])if(n.ref!==c.route.id||n.version!==c.route.version||n.routeDigest!==c.route.routeDigest||n.capabilityProfile.ref!==c.profile.id||n.capabilityProfile.digest!==c.profile.profileDigest||n.qualification.ref!==c.qualification.id||n.qualification.digest!==c.qualification.qualificationDigest)i.push(`Fallback ${l} route binding does not match`);const o=e.selection.selectedRoute,t=e.decision.fromRoute;if(t.ref!==o.ref||t.version!==o.version||t.routeDigest!==o.routeDigest||t.capabilityProfile.ref!==o.capabilityProfile.ref||t.capabilityProfile.digest!==o.capabilityProfile.digest||t.qualification.ref!==o.qualification.ref||t.qualification.digest!==o.qualification.digest)i.push("Fallback source is not the originally selected route");return i}

package/dist/node/agent/protocol/model-invocation-profile.js

@@ -0,0 +1 @@
+import{z as o}from"zod";import{agentArtifactBindingV1Schema as t,agentProtocolDigestSchema as i,agentProtocolRefSchema as n}from"./common.js";export const AGENT_MODEL_INVOCATION_PROFILE_V1="contractspec.agent.model-invocation-profile.v1";const r=n.refine((e)=>!e.toLowerCase().includes("latest")&&!/[*?]/.test(e),"Invocation profile versions must be pinned");export const agentModelInvocationProfileV1Schema=o.object({schemaVersion:o.literal(AGENT_MODEL_INVOCATION_PROFILE_V1),id:n,version:r,maxOutputTokens:o.number().int().positive(),sampling:o.object({temperature:o.number().min(0).max(2).optional()}).strict(),outputValidator:t.optional(),providerOptions:t.optional(),invocationProfileDigest:i}).strict();

package/dist/node/agent/protocol/model-route-contracts-v2.js

@@ -0,0 +1 @@
+import{z as o}from"zod";import{agentArtifactBindingV1Schema as n,agentProtocolDigestSchema as s,agentProtocolEvidencePointerSchema as c,agentProtocolRefSchema as i,agentProtocolReleaseShaSchema as l,agentProtocolTimestampSchema as r}from"./common.js";export const AGENT_MODEL_CAPABILITY_PROFILE_V2="contractspec.agent.model-capability-profile.v2",AGENT_MODEL_ROUTE_V2="contractspec.agent.model-route.v2",AGENT_MODEL_QUALIFICATION_V2="contractspec.agent.model-qualification.v2";const t=i.refine((e)=>!e.toLowerCase().includes("latest")&&!/[*?]/.test(e),"Production model and artifact identifiers must be pinned");export const agentModelCapabilityProfileV2Schema=o.object({schemaVersion:o.literal(AGENT_MODEL_CAPABILITY_PROFILE_V2),id:i,modelAuthorRef:i,modelFamilyRef:i.optional(),modelId:t,modelVersion:t,contextWindowTokens:o.number().int().positive(),maxOutputTokens:o.number().int().positive(),capabilities:o.array(i).min(1),supportsStrictToolSchemas:o.boolean(),supportsParallelToolCalls:o.boolean(),profileDigest:s}).strict().superRefine((e,a)=>{if(e.maxOutputTokens>e.contextWindowTokens)a.addIssue({code:"custom",path:["maxOutputTokens"],message:"Model output limit cannot exceed its context window"});if(new Set(e.capabilities).size!==e.capabilities.length)a.addIssue({code:"custom",path:["capabilities"],message:"Model capabilities must be unique"})}),agentModelServingIdentityV2Schema=o.object({inferenceProviderRef:i,deploymentRef:t,gatewayRef:i.optional(),adapterRef:t,commercialPolicyRef:t,connection:n,connectionVersion:t,region:i,transportProfileRef:t,authenticationProfileRef:t,privacyPolicyRef:t,residencyPolicyRef:t,retentionPolicyRef:t,riskPolicyRef:t,priceProfileRef:t,latencyClass:o.enum(["interactive","standard","batch"])}).strict(),agentModelRouteV2Schema=o.object({schemaVersion:o.literal(AGENT_MODEL_ROUTE_V2),id:i,version:t,capabilityProfile:n,modelId:t,modelVersion:t,serving:agentModelServingIdentityV2Schema,invocationProfile:n,secretRef:i,availabilityClass:o.enum(["primary","fallback","degraded"]),qualificationRef:i,routeDigest:s}).strict(),agentModelOperationBindingV2Schema=o.discriminatedUnion("kind",[o.object({kind:o.literal("operation_contract"),ref:i,version:t,digest:s}).strict(),o.object({kind:o.literal("plan_step"),ref:i,digest:s}).strict()]),agentModelQualificationV2Schema=o.object({schemaVersion:o.literal(AGENT_MODEL_QUALIFICATION_V2),id:i,routeRef:i,routeVersion:t,routeDigest:s,applicationRef:i,applicationVersion:t,purposeRef:i,operation:agentModelOperationBindingV2Schema.optional(),promptVersion:t,toolSchemaVersions:o.array(t),contextCompilerVersion:t,evaluatorVersion:t,policyVersion:t,sandboxDigest:s,releaseSha:l,invocationProfile:n,evaluationDecision:n,dataset:n,status:o.enum(["unqualified","simulated","live_verified","revoked","rejected"]),evidence:o.array(c),qualifiedAt:r.optional(),expiresAt:r.optional(),revokedAt:r.optional(),revocationReasonRef:i.optional(),qualificationDigest:s}).strict().superRefine((e,a)=>{if((e.status==="simulated"||e.status==="live_verified")&&e.evidence.length===0)a.addIssue({code:"custom",path:["evidence"],message:"Positive qualification requires evidence"});if(e.status==="live_verified"){if(!e.qualifiedAt||!e.expiresAt)a.addIssue({code:"custom",path:["expiresAt"],message:"Live qualification requires timestamps and expiry"});else if(Date.parse(e.expiresAt)<=Date.parse(e.qualifiedAt))a.addIssue({code:"custom",path:["expiresAt"],message:"Qualification expiry must follow qualification time"})}if(e.status==="revoked"&&(!e.expiresAt||!e.revokedAt||!e.revocationReasonRef||e.evidence.length===0))a.addIssue({code:"custom",path:["revokedAt"],message:"Revocation requires time, reason, and evidence"});if(e.status!=="revoked"&&(e.revokedAt||e.revocationReasonRef))a.addIssue({code:"custom",path:["status"],message:"Only revoked qualification can carry revocation fields"})});

package/dist/node/agent/protocol/model-route-contracts.js

@@ -0,0 +1 @@
+import{z as t}from"zod";import{agentArtifactBindingV1Schema as n,agentProtocolDigestSchema as s,agentProtocolEvidencePointerSchema as r,agentProtocolRefSchema as e,agentProtocolReleaseShaSchema as c,agentProtocolTimestampSchema as l}from"./common.js";export const AGENT_MODEL_CAPABILITY_PROFILE_V1="contractspec.agent.model-capability-profile.v1",AGENT_MODEL_ROUTE_V1="contractspec.agent.model-route.v1",AGENT_MODEL_QUALIFICATION_V1="contractspec.agent.model-qualification.v1";const o=e.refine((i)=>!i.toLowerCase().includes("latest")&&!/[*?]/.test(i),"Production model identifiers must be pinned and cannot use latest or wildcards");export const agentModelCapabilityProfileV1Schema=t.object({schemaVersion:t.literal(AGENT_MODEL_CAPABILITY_PROFILE_V1),id:e,provider:e,modelId:o,modelVersion:o,contextWindowTokens:t.number().int().positive(),maxOutputTokens:t.number().int().positive(),capabilities:t.array(e).min(1),supportsStrictToolSchemas:t.boolean(),supportsParallelToolCalls:t.boolean(),privacyPolicyRef:e,residencyPolicyRef:e,retentionPolicyRef:e,transportPolicyRef:e,authenticationPolicyRef:e,riskPolicyRef:e,priceProfileRef:e,latencyClass:t.enum(["interactive","standard","batch"]),profileDigest:s}).strict().superRefine((i,a)=>{if(i.maxOutputTokens>i.contextWindowTokens)a.addIssue({code:t.ZodIssueCode.custom,path:["maxOutputTokens"],message:"Model output limit cannot exceed its context window"});if(new Set(i.capabilities).size!==i.capabilities.length)a.addIssue({code:t.ZodIssueCode.custom,path:["capabilities"],message:"Model capabilities must be unique"})}),agentModelRouteV1Schema=t.object({schemaVersion:t.literal(AGENT_MODEL_ROUTE_V1),id:e,version:o,capabilityProfile:n,provider:e,modelId:o,modelVersion:o,region:e,transportProfileRef:e,authenticationProfileRef:e,connectionRef:e,secretRef:e,availabilityClass:t.enum(["primary","fallback","degraded"]),qualificationRef:e,routeDigest:s}).strict(),agentModelQualificationV1Schema=t.object({schemaVersion:t.literal(AGENT_MODEL_QUALIFICATION_V1),id:e,routeRef:e,routeVersion:o,routeDigest:s,applicationRef:e,applicationVersion:o,promptVersion:o,toolSchemaVersions:t.array(o),contextCompilerVersion:o,evaluatorVersion:o,policyVersion:o,sandboxDigest:s,releaseSha:c,status:t.enum(["unqualified","simulated","live_verified","rejected"]),evidence:t.array(r),qualifiedAt:l.optional(),qualificationDigest:s}).strict().superRefine((i,a)=>{if((i.status==="simulated"||i.status==="live_verified")&&i.evidence.length===0)a.addIssue({code:t.ZodIssueCode.custom,path:["evidence"],message:"Positive model qualification requires evidence"});if(i.status==="live_verified"&&!i.qualifiedAt)a.addIssue({code:t.ZodIssueCode.custom,path:["qualifiedAt"],message:"Live model qualification requires a qualification timestamp"})});

package/dist/node/agent/protocol/model-routing-migration.js

@@ -0,0 +1 @@
+import{agentModelCapabilityProfileV1Schema as a,agentModelQualificationV1Schema as r,agentModelRouteV1Schema as s}from"./model-route-contracts.js";import{agentModelSelectionV1Schema as l}from"./model-routing.js";export function planAgentModelRoutingV2Migration(i){const e=a.parse(i.profile),n=s.parse(i.route),o=r.parse(i.qualification),t=l.parse(i.selection);return{status:"requalification_required",source:{profileRef:e.id,routeRef:n.id,qualificationRef:o.id,selectionRef:t.id},missingBindings:["model_author","serving_identity","connection_digest","invocation_profile","purpose_or_operation","evaluation_decision","dataset","qualification_expiry","connect_decision"]}}

package/dist/node/agent/protocol/model-routing-v2.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{agentArtifactBindingV1Schema as t,agentProtocolDigestSchema as a,agentProtocolEvidencePointerSchema as l,agentProtocolRefSchema as i,agentProtocolTimestampSchema as c,agentScopeV1Schema as d}from"./common.js";export*from"./model-invocation-profile.js";export*from"./model-route-contracts-v2.js";export const AGENT_MODEL_SELECTION_V2="contractspec.agent.model-selection.v2",AGENT_MODEL_FALLBACK_DECISION_V2="contractspec.agent.model-fallback-decision.v2";const m=i.refine((o)=>!o.toLowerCase().includes("latest")&&!/[*?]/.test(o),"Production route versions must be pinned");export const agentModelGatewayPolicyV2Schema=e.object({allowDirect:e.boolean(),allowedGatewayRefs:e.array(i)}).strict(),agentModelHardConstraintsV2Schema=e.object({requiredCapabilityRefs:e.array(i),minimumContextWindowTokens:e.number().int().positive(),minimumOutputTokens:e.number().int().positive(),requireStrictToolSchemas:e.boolean(),requireParallelToolCalls:e.boolean(),allowedModelAuthorRefs:e.array(i).min(1),allowedInferenceProviderRefs:e.array(i).min(1),allowedDeploymentRefs:e.array(i).min(1),gatewayPolicy:agentModelGatewayPolicyV2Schema,allowedAdapterRefs:e.array(i).min(1),allowedCommercialPolicyRefs:e.array(i).min(1),allowedConnectionRefs:e.array(i).min(1),allowedRegionRefs:e.array(i).min(1),transportProfileRef:i,authenticationProfileRef:i,privacyPolicyRef:i,residencyPolicyRef:i,retentionPolicyRef:i,riskPolicyRef:i,allowedLatencyClasses:e.array(e.enum(["interactive","standard","batch"])).min(1),maxCostPerMillionTokensMinorUnits:e.number().int().nonnegative(),costCurrency:e.string().regex(/^[A-Z]{3}$/),requiredQualification:e.enum(["simulated_or_live","live_verified"])}).strict(),agentModelCandidateBindingV2Schema=e.object({ref:i,version:m,routeDigest:a,capabilityProfile:t,qualification:t,invocationProfile:t,canary:t.optional(),costPerMillionTokensMinorUnits:e.number().int().nonnegative(),costCurrency:e.string().regex(/^[A-Z]{3}$/)}).strict();const f=agentModelCandidateBindingV2Schema.extend({disposition:e.enum(["selected","rejected"]),reasonRef:i});export const agentModelSelectionV2Schema=e.object({schemaVersion:e.literal(AGENT_MODEL_SELECTION_V2),id:i,runRef:i,plan:t,scope:d,selectedRoute:agentModelCandidateBindingV2Schema,consideredRoutes:e.array(f).min(1),hardConstraints:agentModelHardConstraintsV2Schema,selectionPolicyRef:i,connectDecision:t,selectedAt:c,selectionDigest:a}).strict().superRefine((o,n)=>{const r=o.consideredRoutes.filter((s)=>s.disposition==="selected");if(r.length!==1||!u(r[0],o.selectedRoute))n.addIssue({code:"custom",path:["consideredRoutes"],message:"Exactly one considered route must match the selected route"})}),agentModelFallbackDecisionV2Schema=e.object({schemaVersion:e.literal(AGENT_MODEL_FALLBACK_DECISION_V2),id:i,runRef:i,checkpoint:t,selection:t,fromRoute:agentModelCandidateBindingV2Schema,toRoute:agentModelCandidateBindingV2Schema,consideredRoutes:e.array(agentModelCandidateBindingV2Schema.extend({reasonRef:i,eligibility:e.enum(["eligible","ineligible","unknown"]),eligibilityEvidence:t})).min(1),connectDecision:t,decision:e.enum(["allowed","denied"]),reasonSummary:i,evidence:e.array(l).min(1),decidedAt:c,decisionDigest:a}).strict();function u(o,n){if(!o)return!1;return o.ref===n.ref&&o.version===n.version&&o.routeDigest===n.routeDigest&&o.capabilityProfile.ref===n.capabilityProfile.ref&&o.capabilityProfile.digest===n.capabilityProfile.digest&&o.qualification.ref===n.qualification.ref&&o.qualification.digest===n.qualification.digest&&o.invocationProfile.ref===n.invocationProfile.ref&&o.invocationProfile.digest===n.invocationProfile.digest&&o.canary?.ref===n.canary?.ref&&o.canary?.digest===n.canary?.digest&&o.costPerMillionTokensMinorUnits===n.costPerMillionTokensMinorUnits&&o.costCurrency===n.costCurrency}

package/dist/node/agent/protocol/model-routing-v2.test-fixtures.js

@@ -0,0 +1 @@
+import{AGENT_MODEL_INVOCATION_PROFILE_V1 as r,agentModelInvocationProfileV1Schema as n}from"./model-invocation-profile.js";import{AGENT_MODEL_CAPABILITY_PROFILE_V2 as s,AGENT_MODEL_QUALIFICATION_V2 as a,AGENT_MODEL_ROUTE_V2 as l,agentModelCapabilityProfileV2Schema as c,agentModelQualificationV2Schema as p,agentModelRouteV2Schema as f}from"./model-route-contracts-v2.js";import{modelTestDigest as u,modelTestNow as d,modelTestPlan as v}from"./model-routing.test-fixtures.js";import{AGENT_MODEL_SELECTION_V2 as m,agentModelSelectionV2Schema as y}from"./model-routing-v2.js";export const v2Digest=u,v2Now=d,v2Plan=v,v2Evidence=[{id:"evidence.1",kind:"eval_result",ref:"eval.release.1",sourcePackage:"@lssm/lib.agent-evals",timestamp:v2Now,redactionStatus:"redacted"}];export function v2Invocation(e="invocation.release.1"){return n.parse({schemaVersion:r,id:e,version:"1.0.0",maxOutputTokens:4096,sampling:{temperature:0},outputValidator:{ref:"validator.release.1",digest:v2Digest},invocationProfileDigest:v2Digest})}export function v2Profile(e="profile.anthropic.direct"){return c.parse({schemaVersion:s,id:e,modelAuthorRef:"model-author.anthropic",modelFamilyRef:"model-family.claude-sonnet-4",modelId:"claude-sonnet-4-20250514",modelVersion:"2025-05-14",contextWindowTokens:200000,maxOutputTokens:8192,capabilities:["strict_tools","vision"],supportsStrictToolSchemas:!0,supportsParallelToolCalls:!0,profileDigest:v2Digest})}export function v2Route(e="route.anthropic.direct",i="invocation.release.1"){return f.parse({schemaVersion:l,id:e,version:"1.0.0",capabilityProfile:{ref:"profile.anthropic.direct",digest:v2Digest},modelId:"claude-sonnet-4-20250514",modelVersion:"2025-05-14",serving:{inferenceProviderRef:"inference.anthropic",deploymentRef:"deployment.anthropic.eu.2025-05-14",adapterRef:"adapter.ai-sdk.anthropic.v1",commercialPolicyRef:"commercial.direct-byok.v1",connection:{ref:"connect.anthropic.eu",digest:v2Digest},connectionVersion:"1.0.0",region:"eu-west-1",transportProfileRef:"transport.https.v1",authenticationProfileRef:"authentication.secret-lease.v1",privacyPolicyRef:"privacy.eu.v1",residencyPolicyRef:"residency.eu.v1",retentionPolicyRef:"retention.zero.v1",riskPolicyRef:"risk.r1.v1",priceProfileRef:"price.anthropic-direct.v1",latencyClass:"interactive"},invocationProfile:{ref:i,digest:v2Digest},secretRef:"secret-lease-profile.anthropic",availabilityClass:e.includes("fallback")?"fallback":"primary",qualificationRef:`qualification.${e}`,routeDigest:v2Digest})}export function v2Qualification(e,i="invocation.release.1"){return p.parse({schemaVersion:a,id:`qualification.${e}`,routeRef:e,routeVersion:"1.0.0",routeDigest:v2Digest,applicationRef:v2Plan.scope.applicationRef,applicationVersion:v2Plan.versions.applicationVersion,purposeRef:v2Plan.scope.purpose,promptVersion:v2Plan.versions.promptVersion,toolSchemaVersions:v2Plan.versions.toolSchemaVersions,contextCompilerVersion:v2Plan.versions.contextCompilerVersion,evaluatorVersion:v2Plan.versions.evaluatorVersion,policyVersion:v2Plan.versions.policyVersion,sandboxDigest:v2Plan.versions.sandboxDigest,releaseSha:v2Plan.versions.releaseSha,invocationProfile:{ref:i,digest:v2Digest},evaluationDecision:{ref:"eval-decision.release.1",digest:v2Digest},dataset:{ref:"dataset.release.1",digest:v2Digest},status:"live_verified",evidence:v2Evidence,qualifiedAt:v2Now,expiresAt:"2026-09-12T10:00:00+02:00",qualificationDigest:v2Digest})}export function v2Candidate(e="route.anthropic.direct",i){const o=v2Invocation(i),t=v2Route(e,o.id);return{route:t,profile:v2Profile(),qualification:v2Qualification(t.id,o.id),invocationProfile:o,costPerMillionTokensMinorUnits:90,costCurrency:"EUR"}}export function v2Binding(e){return{ref:e.route.id,version:e.route.version,routeDigest:e.route.routeDigest,capabilityProfile:e.route.capabilityProfile,qualification:{ref:e.qualification.id,digest:v2Digest},invocationProfile:{ref:e.invocationProfile.id,digest:v2Digest},costPerMillionTokensMinorUnits:e.costPerMillionTokensMinorUnits,costCurrency:e.costCurrency}}export function v2Selection(e=v2Candidate()){const i=v2Binding(e);return y.parse({schemaVersion:m,id:"selection.release.1",runRef:v2Plan.scope.runId,plan:{ref:v2Plan.id,digest:v2Digest},scope:v2Plan.scope,selectedRoute:i,consideredRoutes:[{...i,disposition:"selected",reasonRef:"qualified"}],hardConstraints:{requiredCapabilityRefs:["strict_tools","vision"],minimumContextWindowTokens:1e5,minimumOutputTokens:4096,requireStrictToolSchemas:!0,requireParallelToolCalls:!0,allowedModelAuthorRefs:["model-author.anthropic"],allowedInferenceProviderRefs:["inference.anthropic"],allowedDeploymentRefs:["deployment.anthropic.eu.2025-05-14"],gatewayPolicy:{allowDirect:!0,allowedGatewayRefs:[]},allowedAdapterRefs:["adapter.ai-sdk.anthropic.v1"],allowedCommercialPolicyRefs:["commercial.direct-byok.v1"],allowedConnectionRefs:["connect.anthropic.eu"],allowedRegionRefs:["eu-west-1"],transportProfileRef:"transport.https.v1",authenticationProfileRef:"authentication.secret-lease.v1",privacyPolicyRef:"privacy.eu.v1",residencyPolicyRef:"residency.eu.v1",retentionPolicyRef:"retention.zero.v1",riskPolicyRef:"risk.r1.v1",allowedLatencyClasses:["interactive"],maxCostPerMillionTokensMinorUnits:100,costCurrency:"EUR",requiredQualification:"live_verified"},selectionPolicyRef:"model-policy.release.1",connectDecision:{ref:"connect-decision.route.1",digest:v2Digest},selectedAt:v2Now,selectionDigest:v2Digest})}

package/dist/node/agent/protocol/model-routing.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{agentArtifactBindingV1Schema as n,agentProtocolDigestSchema as c,agentProtocolEvidencePointerSchema as d,agentProtocolRefSchema as t,agentProtocolTimestampSchema as s,agentScopeV1Schema as u}from"./common.js";export*from"./model-route-contracts.js";export const AGENT_MODEL_SELECTION_V1="contractspec.agent.model-selection.v1",AGENT_MODEL_FALLBACK_DECISION_V1="contractspec.agent.model-fallback-decision.v1";const m=t.refine((i)=>!i.toLowerCase().includes("latest")&&!/[*?]/.test(i),"Production model identifiers must be pinned and cannot use latest or wildcards");function f(i,r,o){i.addIssue({code:e.ZodIssueCode.custom,path:[r],message:o})}export const agentModelHardConstraintsV1Schema=e.object({requiredCapabilityRefs:e.array(t),minimumContextWindowTokens:e.number().int().positive(),minimumOutputTokens:e.number().int().positive(),requireStrictToolSchemas:e.boolean(),requireParallelToolCalls:e.boolean(),allowedProviderRefs:e.array(t).min(1),allowedRegionRefs:e.array(t).min(1),transportProfileRef:t,authenticationProfileRef:t,privacyPolicyRef:t,residencyPolicyRef:t,retentionPolicyRef:t,riskPolicyRef:t,allowedLatencyClasses:e.array(e.enum(["interactive","standard","batch"])).min(1),maxCostPerMillionTokensMinorUnits:e.number().int().nonnegative(),costCurrency:e.string().regex(/^[A-Z]{3}$/),requiredQualification:e.enum(["simulated_or_live","live_verified"])}).strict();const a=e.object({ref:t,version:m,routeDigest:c,capabilityProfile:n,qualification:n}).strict();export const agentModelSelectionV1Schema=e.object({schemaVersion:e.literal(AGENT_MODEL_SELECTION_V1),id:t,runRef:t,plan:n,scope:u,selectedRoute:a,consideredRoutes:e.array(a.extend({disposition:e.enum(["selected","rejected"]),reasonRef:t})).min(1),hardConstraints:agentModelHardConstraintsV1Schema,selectionPolicyRef:t,selectedAt:s,selectionDigest:c}).strict().superRefine((i,r)=>{const o=i.consideredRoutes.filter((l)=>l.disposition==="selected");if(o.length!==1||o[0]?.ref!==i.selectedRoute.ref||o[0]?.version!==i.selectedRoute.version||o[0]?.routeDigest!==i.selectedRoute.routeDigest||o[0]?.capabilityProfile.ref!==i.selectedRoute.capabilityProfile.ref||o[0]?.capabilityProfile.digest!==i.selectedRoute.capabilityProfile.digest||o[0]?.qualification.ref!==i.selectedRoute.qualification.ref||o[0]?.qualification.digest!==i.selectedRoute.qualification.digest)f(r,"consideredRoutes","Exactly one considered route must match the selected route")}),agentModelFallbackDecisionV1Schema=e.object({schemaVersion:e.literal(AGENT_MODEL_FALLBACK_DECISION_V1),id:t,runRef:t,checkpoint:n,selection:n,fromRoute:a,toRoute:a,consideredRoutes:e.array(a.extend({reasonRef:t,eligibility:e.enum(["eligible","ineligible","unknown"]),eligibilityEvidence:n})).min(1),decision:e.enum(["allowed","denied"]),reasonSummary:t,evidence:e.array(d).min(1),decidedAt:s,decisionDigest:c}).strict();export{validateAgentModelFallbackEquivalenceV1}from"./bindings.js";export{validateAgentModelSelectionBindingV1}from"./model-selection-validation.js";

package/dist/node/agent/protocol/model-routing.test-fixtures.js

@@ -0,0 +1 @@
+import{AGENT_MODEL_CAPABILITY_PROFILE_V1 as o,AGENT_MODEL_QUALIFICATION_V1 as r,AGENT_MODEL_ROUTE_V1 as n,AGENT_MODEL_SELECTION_V1 as s,agentModelCapabilityProfileV1Schema as a,agentModelQualificationV1Schema as l,agentModelRouteV1Schema as c,agentModelSelectionV1Schema as p}from"./model-routing.js";export const modelTestNow="2026-08-12T10:00:00+02:00",modelTestDigest=`sha256:${"a".repeat(64)}`,modelTestScope={tenantId:"tenant.1",spaceId:"space.1",productKey:"companyos",applicationRef:"release-steward.1",purpose:"release",runId:"run.1"},modelTestPlan={id:"plan.1",planDigest:modelTestDigest,scope:modelTestScope,versions:{applicationVersion:"1.0.0",promptVersion:"prompt.1.0.0",modelRouteVersion:"1.0.0",toolSchemaVersions:["tool.1.0.0"],contextCompilerVersion:"compiler.1.0.0",evaluatorVersion:"evaluator.1.0.0",policyVersion:"policy.1.0.0",sandboxDigest:modelTestDigest,releaseSha:"a".repeat(40)}};export function modelTestProfile(e,t={}){return a.parse({schemaVersion:o,id:e,provider:"anthropic",modelId:"claude-sonnet-4-20250514",modelVersion:"2025-05-14",contextWindowTokens:200000,maxOutputTokens:8192,capabilities:["strict_tools","vision"],supportsStrictToolSchemas:!0,supportsParallelToolCalls:!0,privacyPolicyRef:"privacy.eu.v1",residencyPolicyRef:"residency.eu.v1",retentionPolicyRef:"retention.zero.v1",transportPolicyRef:"transport.https.v1",authenticationPolicyRef:"authentication.secret-lease.v1",riskPolicyRef:"risk.r1.v1",priceProfileRef:"price.anthropic.v1",latencyClass:"interactive",profileDigest:modelTestDigest,...t})}export function modelTestRoute(e,t){return c.parse({schemaVersion:n,id:e,version:"1.0.0",capabilityProfile:{ref:t,digest:modelTestDigest},provider:"anthropic",modelId:"claude-sonnet-4-20250514",modelVersion:"2025-05-14",region:"eu-west-1",transportProfileRef:"transport.https.v1",authenticationProfileRef:"authentication.secret-lease.v1",connectionRef:"connect.anthropic.eu",secretRef:"secret-lease-profile.anthropic",availabilityClass:e==="route.primary"?"primary":"fallback",qualificationRef:`qualification.${e}`,routeDigest:modelTestDigest})}export function modelTestQualification(e,t){return l.parse({schemaVersion:r,id:e,routeRef:t,routeVersion:"1.0.0",routeDigest:modelTestDigest,applicationRef:"release-steward.1",applicationVersion:"1.0.0",promptVersion:"prompt.1.0.0",toolSchemaVersions:["tool.1.0.0"],contextCompilerVersion:"compiler.1.0.0",evaluatorVersion:"evaluator.1.0.0",policyVersion:"policy.1.0.0",sandboxDigest:modelTestDigest,releaseSha:"a".repeat(40),status:"live_verified",evidence:[{id:"e.1",kind:"eval_result",ref:"eval.1",sourcePackage:"@lssm/lib.agent-evals",timestamp:modelTestNow,redactionStatus:"none"}],qualifiedAt:modelTestNow,qualificationDigest:modelTestDigest})}export function modelTestSelection(e,t){const i={ref:e.id,version:"1.0.0",routeDigest:e.routeDigest,capabilityProfile:e.capabilityProfile,qualification:{ref:t,digest:modelTestDigest}};return p.parse({schemaVersion:s,id:"selection.1",runRef:"run.1",plan:{ref:modelTestPlan.id,digest:modelTestDigest},scope:modelTestScope,selectedRoute:i,consideredRoutes:[{...i,disposition:"selected",reasonRef:"best-qualified-route"}],hardConstraints:{requiredCapabilityRefs:["strict_tools","vision"],minimumContextWindowTokens:1e5,minimumOutputTokens:4096,requireStrictToolSchemas:!0,requireParallelToolCalls:!0,allowedProviderRefs:["anthropic"],allowedRegionRefs:["eu-west-1"],transportProfileRef:"transport.https.v1",authenticationProfileRef:"authentication.secret-lease.v1",privacyPolicyRef:"privacy.eu.v1",residencyPolicyRef:"residency.eu.v1",retentionPolicyRef:"retention.zero.v1",riskPolicyRef:"risk.r1.v1",allowedLatencyClasses:["interactive"],maxCostPerMillionTokensMinorUnits:100,costCurrency:"EUR",requiredQualification:"live_verified"},selectionPolicyRef:"selector.1",selectedAt:modelTestNow,selectionDigest:modelTestDigest})}

package/dist/node/agent/protocol/model-selection-validation-v2.js

@@ -0,0 +1 @@
+import{validateAgentScopeExactV1 as a}from"./common.js";import{validateModelServingConstraintsV2 as c}from"./model-serving-validation-v2.js";export function routeBindingMatchesModelCandidateV2(e,o){return e.ref===o.route.id&&e.version===o.route.version&&e.routeDigest===o.route.routeDigest&&e.capabilityProfile.ref===o.profile.id&&e.capabilityProfile.digest===o.profile.profileDigest&&e.qualification.ref===o.qualification.id&&e.qualification.digest===o.qualification.qualificationDigest&&e.invocationProfile.ref===o.invocationProfile.id&&e.invocationProfile.digest===o.invocationProfile.invocationProfileDigest&&e.canary?.ref===o.canary?.ref&&e.canary?.digest===o.canary?.digest&&e.costPerMillionTokensMinorUnits===o.costPerMillionTokensMinorUnits&&e.costCurrency===o.costCurrency}export function validateModelCandidateV2(e){const{route:o,profile:i,qualification:t,invocationProfile:r}=e.candidate,s=e.selection.hardConstraints,n=[];if(o.capabilityProfile.ref!==i.id||o.capabilityProfile.digest!==i.profileDigest)n.push("Model route capability profile binding does not match");if(o.modelId!==i.modelId||o.modelVersion!==i.modelVersion)n.push("Model route identity does not match its capability profile");if(o.invocationProfile.ref!==r.id||o.invocationProfile.digest!==r.invocationProfileDigest||t.invocationProfile.ref!==r.id||t.invocationProfile.digest!==r.invocationProfileDigest)n.push("Model invocation profile binding does not match");if(t.routeRef!==o.id||t.routeVersion!==o.version||t.routeDigest!==o.routeDigest||o.qualificationRef!==t.id)n.push("Model qualification does not bind the route version");n.push(...d(e.plan,o,t));n.push(...u(e.plan,t));for(const l of s.requiredCapabilityRefs)if(!i.capabilities.includes(l))n.push(`Model route lacks capability: ${l}`);if(i.contextWindowTokens<s.minimumContextWindowTokens)n.push("Model route context window is below the required minimum");if(i.maxOutputTokens<s.minimumOutputTokens)n.push("Model route output limit is below the required minimum");if(r.maxOutputTokens>i.maxOutputTokens)n.push("Invocation output limit exceeds the model capability profile");if(s.requireStrictToolSchemas&&!i.supportsStrictToolSchemas)n.push("Model route lacks strict tool-schema support");if(s.requireParallelToolCalls&&!i.supportsParallelToolCalls)n.push("Model route lacks parallel tool-call support");n.push(...c(e.candidate,e.selection));if(e.candidate.costCurrency!==s.costCurrency||e.candidate.costPerMillionTokensMinorUnits>s.maxCostPerMillionTokensMinorUnits)n.push("Model route exceeds the allowed cost policy");if(!(s.requiredQualification==="live_verified"?t.status==="live_verified":t.status==="simulated"||t.status==="live_verified"))n.push("Model route lacks required qualification");if(t.status==="live_verified"&&t.expiresAt&&Date.parse(t.expiresAt)<=(e.now??new Date).getTime())n.push("Model qualification is expired");if(t.status==="revoked")n.push("Model qualification is revoked");return n}export function validateAgentModelSelectionBindingV2(e){const o=a({expected:e.plan.scope,observed:e.selection.scope});if(e.selection.plan.ref!==e.plan.id||e.selection.plan.digest!==e.plan.planDigest)o.push("Model selection plan binding does not match");if(e.selection.scope.runId!==e.selection.runRef||e.plan.scope.runId&&e.plan.scope.runId!==e.selection.runRef)o.push("Model selection run binding does not match");const i=e.selection.consideredRoutes.map((t)=>t.ref);if(new Set(i).size!==i.length)o.push("Model selection considered routes must be unique");if(!routeBindingMatchesModelCandidateV2(e.selection.selectedRoute,e.candidate))o.push("Selected model route binding does not match the candidate");o.push(...validateModelCandidateV2(e));return o}function d(e,o,i){const t=[];if(i.applicationRef!==e.scope.applicationRef||i.purposeRef!==e.scope.purpose||o.version!==e.versions.modelRouteVersion||i.applicationVersion!==e.versions.applicationVersion||i.promptVersion!==e.versions.promptVersion||i.contextCompilerVersion!==e.versions.contextCompilerVersion||i.evaluatorVersion!==e.versions.evaluatorVersion||i.policyVersion!==e.versions.policyVersion||i.sandboxDigest!==e.versions.sandboxDigest||i.releaseSha!==e.versions.releaseSha)t.push("Model qualification version set does not match the plan");const r=[...e.versions.toolSchemaVersions].sort(),s=[...i.toolSchemaVersions].sort();if(JSON.stringify(r)!==JSON.stringify(s))t.push("Model qualification tool schema versions do not match the plan");return t}function u(e,o){if(!o.operation)return[];if(o.operation.kind==="plan_step")return e.steps.some((i)=>i.id===o.operation?.ref)?[]:["Model qualification plan-step binding does not match the plan"];return e.effectProposals.some((i)=>i.operationRef===o.operation?.ref)?[]:["Model qualification operation binding does not match the plan"]}

package/dist/node/agent/protocol/model-selection-validation.js

@@ -0,0 +1 @@
+import{validateAgentScopeExactV1 as d}from"./common.js";export function routeBindingMatchesModelCandidateV1(e,o){return e.ref===o.route.id&&e.version===o.route.version&&e.routeDigest===o.route.routeDigest&&e.capabilityProfile.ref===o.profile.id&&e.capabilityProfile.digest===o.profile.profileDigest&&e.qualification.ref===o.qualification.id&&e.qualification.digest===o.qualification.qualificationDigest}export function validateModelCandidateV1(e){const{route:o,profile:i,qualification:t}=e.candidate,s=e.selection.hardConstraints,l=[];if(o.capabilityProfile.ref!==i.id||o.capabilityProfile.digest!==i.profileDigest)l.push("Model route capability profile binding does not match");if(o.provider!==i.provider||o.modelId!==i.modelId||o.modelVersion!==i.modelVersion)l.push("Model route identity does not match its capability profile");if(t.routeRef!==o.id||t.routeVersion!==o.version||t.routeDigest!==o.routeDigest||o.qualificationRef!==t.id)l.push("Model qualification does not bind the route version");if(t.applicationRef!==e.plan.scope.applicationRef||o.version!==e.plan.versions.modelRouteVersion||t.applicationVersion!==e.plan.versions.applicationVersion||t.promptVersion!==e.plan.versions.promptVersion||t.contextCompilerVersion!==e.plan.versions.contextCompilerVersion||t.evaluatorVersion!==e.plan.versions.evaluatorVersion||t.policyVersion!==e.plan.versions.policyVersion||t.sandboxDigest!==e.plan.versions.sandboxDigest||t.releaseSha!==e.plan.versions.releaseSha)l.push("Model qualification version set does not match the plan");const r=[...e.plan.versions.toolSchemaVersions].sort(),a=[...t.toolSchemaVersions].sort();if(JSON.stringify(r)!==JSON.stringify(a))l.push("Model qualification tool schema versions do not match the plan");for(const n of s.requiredCapabilityRefs)if(!i.capabilities.includes(n))l.push(`Model route lacks capability: ${n}`);if(i.contextWindowTokens<s.minimumContextWindowTokens)l.push("Model route context window is below the required minimum");if(i.maxOutputTokens<s.minimumOutputTokens)l.push("Model route output limit is below the required minimum");if(s.requireStrictToolSchemas&&!i.supportsStrictToolSchemas)l.push("Model route lacks strict tool-schema support");if(s.requireParallelToolCalls&&!i.supportsParallelToolCalls)l.push("Model route lacks parallel tool-call support");if(!s.allowedProviderRefs.includes(o.provider))l.push("Model route provider is not allowed");if(!s.allowedRegionRefs.includes(o.region))l.push("Model route region is not allowed");for(const[n,c]of[["transportProfileRef",o.transportProfileRef],["authenticationProfileRef",o.authenticationProfileRef],["privacyPolicyRef",i.privacyPolicyRef],["residencyPolicyRef",i.residencyPolicyRef],["retentionPolicyRef",i.retentionPolicyRef],["riskPolicyRef",i.riskPolicyRef]])if(c!==s[n])l.push(`Model route changes ${n}`);if(!s.allowedLatencyClasses.includes(i.latencyClass))l.push("Model route latency class is not allowed");if(e.candidate.costCurrency!==s.costCurrency||e.candidate.costPerMillionTokensMinorUnits>s.maxCostPerMillionTokensMinorUnits)l.push("Model route exceeds the allowed cost policy");if(!(s.requiredQualification==="live_verified"?t.status==="live_verified":t.status==="simulated"||t.status==="live_verified"))l.push("Model route lacks required qualification");return l}export function validateAgentModelSelectionBindingV1(e){const o=d({expected:e.plan.scope,observed:e.selection.scope});if(e.selection.plan.ref!==e.plan.id||e.selection.plan.digest!==e.plan.planDigest)o.push("Model selection plan binding does not match");if(e.selection.scope.runId!==e.selection.runRef||e.plan.scope.runId&&e.plan.scope.runId!==e.selection.runRef)o.push("Model selection run binding does not match");const i=e.selection.consideredRoutes.map((t)=>t.ref);if(new Set(i).size!==i.length)o.push("Model selection considered routes must be unique");if(!routeBindingMatchesModelCandidateV1(e.selection.selectedRoute,e.candidate))o.push("Selected model route binding does not match the candidate");o.push(...validateModelCandidateV1(e));return o}

package/dist/node/agent/protocol/model-serving-validation-v2.js

@@ -0,0 +1 @@
+export function validateModelServingConstraintsV2(r,a){const{profile:s,route:c}=r,{serving:e}=c,o=a.hardConstraints,l=[],t=(i,n,f)=>{if(!i.includes(n))l.push(`Model route ${f} is not allowed`)};t(o.allowedModelAuthorRefs,s.modelAuthorRef,"author");t(o.allowedInferenceProviderRefs,e.inferenceProviderRef,"inference provider");t(o.allowedDeploymentRefs,e.deploymentRef,"deployment");t(o.allowedAdapterRefs,e.adapterRef,"adapter");t(o.allowedCommercialPolicyRefs,e.commercialPolicyRef,"commercial policy");t(o.allowedConnectionRefs,e.connection.ref,"connection");t(o.allowedRegionRefs,e.region,"region");if(e.gatewayRef){if(!o.gatewayPolicy.allowedGatewayRefs.includes(e.gatewayRef))l.push("Model route gateway is not allowed")}else if(!o.gatewayPolicy.allowDirect)l.push("Direct model routes are not allowed");for(const[i,n]of[["transportProfileRef",e.transportProfileRef],["authenticationProfileRef",e.authenticationProfileRef],["privacyPolicyRef",e.privacyPolicyRef],["residencyPolicyRef",e.residencyPolicyRef],["retentionPolicyRef",e.retentionPolicyRef],["riskPolicyRef",e.riskPolicyRef]])if(n!==o[i])l.push(`Model route changes ${i}`);if(!o.allowedLatencyClasses.includes(e.latencyClass))l.push("Model route latency class is not allowed");return l}

package/dist/node/agent/protocol/planning.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{agentArtifactBindingV1Schema as l,agentConfidenceV1Schema as u,agentEffectProposalV1Schema as m,agentProtocolDigestSchema as f,agentProtocolEvidencePointerSchema as h,agentProtocolRefSchema as t,agentProtocolTimestampSchema as d,agentRiskTierV1Schema as g,agentScopeV1Schema as R,agentVersionSetV1Schema as v,validateAgentDirectedAcyclicGraph as P}from"./common.js";export const AGENT_EXECUTION_STEP_V1="contractspec.agent.execution-step.v1",AGENT_EXECUTION_PLAN_V1="contractspec.agent.execution-plan.v1",AGENT_PLAN_VALIDATION_V1="contractspec.agent.plan-validation.v1",agentExecutionStepV1Schema=e.object({schemaVersion:e.literal(AGENT_EXECUTION_STEP_V1),id:t,dependsOn:e.array(t),objective:t,requiredContextItemIds:e.array(t),toolRefs:e.array(t),expectedArtifactRefs:e.array(t),requiredEvidenceKinds:e.array(t),effectProposalRefs:e.array(t),approvalCheckpointRefs:e.array(t),completionCriteria:e.array(t).min(1)}).strict(),agentExecutionPlanV1Schema=e.object({schemaVersion:e.literal(AGENT_EXECUTION_PLAN_V1),id:t,revision:e.number().int().positive(),supersedesRef:t.optional(),scope:R,objective:t,interpretedIntent:t,assumptions:e.array(t),unresolvedQuestions:e.array(t),steps:e.array(agentExecutionStepV1Schema).min(1).max(32),requiredContextManifestRef:t,requiredToolRefs:e.array(t),expectedArtifactRefs:e.array(t),requiredEvidenceKinds:e.array(t).min(1),effectProposals:e.array(m),approvalCheckpointRefs:e.array(t),riskTier:g,budgetRef:t,verificationPolicyRef:t,wallClockHorizonSeconds:e.number().int().positive(),stopConditions:e.array(t).min(1),helpConditions:e.array(t).min(1),completionCriteria:e.array(t).min(1),confidence:u,versions:v,createdAt:d,planDigest:f}).strict().superRefine((s,o)=>{for(const a of P(s.steps,32))o.addIssue({code:e.ZodIssueCode.custom,path:["steps"],message:a});const r=new Set(s.effectProposals.map((a)=>a.id));if(r.size!==s.effectProposals.length)o.addIssue({code:e.ZodIssueCode.custom,path:["effectProposals"],message:"Effect proposal ids must be unique"});const i=new Set(s.requiredToolRefs),n=new Set(s.approvalCheckpointRefs);for(const a of s.effectProposals)if(a.approvalRequirementRef&&!n.has(a.approvalRequirementRef))o.addIssue({code:e.ZodIssueCode.custom,path:["approvalCheckpointRefs"],message:`Missing effect approval checkpoint: ${a.approvalRequirementRef}`});for(const[a,p]of s.steps.entries()){for(const c of p.toolRefs)if(!i.has(c))o.addIssue({code:e.ZodIssueCode.custom,path:["steps",a,"toolRefs"],message:`Step tool is not declared by the plan: ${c}`});for(const c of p.effectProposalRefs)if(!r.has(c))o.addIssue({code:e.ZodIssueCode.custom,path:["steps",a,"effectProposalRefs"],message:`Unknown effect proposal reference: ${c}`});for(const c of p.approvalCheckpointRefs)if(!n.has(c))o.addIssue({code:e.ZodIssueCode.custom,path:["steps",a,"approvalCheckpointRefs"],message:`Unknown approval checkpoint: ${c}`})}}),agentPlanValidationV1Schema=e.object({schemaVersion:e.literal(AGENT_PLAN_VALIDATION_V1),id:t,planRef:t,planDigest:f,status:e.enum(["accepted","rejected"]),effectProposalRefs:e.array(t),checks:e.array(e.object({check:e.enum(["application_scope","required_context","tool_grants","effect_classification","budget","approval","policy_narrowing"]),passed:e.boolean(),evidenceRefs:e.array(t).min(1)}).strict()).min(7),connectDecision:l.optional(),evidence:e.array(h).min(1),validatedAt:d}).strict().superRefine((s,o)=>{const r=s.checks.map((n)=>n.check);if(new Set(r).size!==r.length)o.addIssue({code:e.ZodIssueCode.custom,path:["checks"],message:"Plan validation checks must be unique"});if(new Set(s.effectProposalRefs).size!==s.effectProposalRefs.length)o.addIssue({code:e.ZodIssueCode.custom,path:["effectProposalRefs"],message:"Plan validation effect references must be unique"});const i=s.checks.every((n)=>n.passed);if(s.status==="accepted"!==i)o.addIssue({code:e.ZodIssueCode.custom,path:["status"],message:"Accepted plan validations require every check to pass"});if(s.status==="accepted"&&s.effectProposalRefs.length>0&&!s.connectDecision)o.addIssue({code:e.ZodIssueCode.custom,path:["connectDecision"],message:"Accepted effectful plans require a Connect decision reference"})});export function validateAgentPlanValidationBindingV1(s){const o=[];if(s.validation.planRef!==s.plan.id)o.push("Plan validation reference does not match the plan");if(s.validation.planDigest!==s.plan.planDigest)o.push("Plan validation digest does not match the plan");const r=s.plan.effectProposals.map((n)=>n.id).sort(),i=[...s.validation.effectProposalRefs].sort();if(JSON.stringify(r)!==JSON.stringify(i))o.push("Plan validation effect references do not match the plan");return o}

package/dist/node/agent/protocol/reflection.js

@@ -0,0 +1 @@
+import{z as n}from"zod";import{agentProtocolEvidencePointerSchema as l,agentProtocolRefSchema as e,agentProtocolTimestampSchema as p,validateAgentExecutionVerificationV1 as f}from"./common.js";export const AGENT_REFLECTION_V1="contractspec.agent.reflection.v1";const d=n.object({decision:n.enum(["continue","replan","request_help","request_approval","delegate","complete","blocked","cancelled"]),reasonSummary:e,nextPlanRef:e.optional(),helpRequestRef:e.optional(),approvalRequestRef:e.optional(),delegationRef:e.optional(),terminalDecisionCandidateRef:e.optional()}).strict().superRefine((a,t)=>{const i={replan:"nextPlanRef",request_help:"helpRequestRef",request_approval:"approvalRequestRef",delegate:"delegationRef",complete:"terminalDecisionCandidateRef",blocked:"terminalDecisionCandidateRef",cancelled:"terminalDecisionCandidateRef"}[a.decision];if(i&&!a[i])t.addIssue({code:n.ZodIssueCode.custom,path:[i],message:`${a.decision} requires ${i}`})});export const agentReflectionV1Schema=n.object({schemaVersion:n.literal(AGENT_REFLECTION_V1),id:e,runRef:e,epochRef:e,checkpointRef:e,expectedOutcomeSummary:e,observedOutcomeSummary:e,evidenceInspected:n.array(l),constraintsStillSatisfied:n.array(e),constraintViolations:n.array(e),contextGapRefs:n.array(e),budgetSnapshotRef:e,budgetVarianceSummary:e,uncertaintyRefs:n.array(e),failureRefs:n.array(e),progressEvidenceRefs:n.array(e),recommendation:d,createdAt:p}).strict();export function validateAgentTerminalDecisionBindingV1(a){const{plan:t,checkpoint:c,decision:i}=a,o=[];if(i.plan.ref!==t.id||i.plan.digest!==t.planDigest)o.push("Terminal decision plan binding does not match");if(i.runRef!==c.runRef||i.checkpointRef!==c.id)o.push("Terminal decision checkpoint binding does not match");if(c.plan.ref!==t.id||c.plan.digest!==t.planDigest)o.push("Terminal checkpoint plan does not match");if(t.scope.runId&&t.scope.runId!==i.runRef)o.push("Terminal decision run does not match the plan scope");if(i.riskTier!==t.riskTier)o.push("Terminal decision changes plan risk tier");if(i.decision!=="complete")return o;const s=i.completionCriteria.map((r)=>r.criterionRef);if(new Set(s).size!==s.length)o.push("Terminal decision completion criteria must be unique");if(JSON.stringify([...s].sort())!==JSON.stringify([...t.completionCriteria].sort()))o.push("Terminal decision completion criteria do not match the plan");for(const r of i.completionCriteria)if(!r.satisfied||r.evidenceRefs.length===0)o.push(`Terminal decision does not prove plan criterion: ${r.criterionRef}`);o.push(...f({expectedPolicyRef:t.verificationPolicyRef,binding:i.verification,canonical:a.canonicalVerification}));return o}

package/dist/node/agent/protocol/task-result-validation.js

@@ -0,0 +1 @@
+function o(r,i){return r.ref===i.ref&&r.digest===i.digest}function f(r){return new Set(r).size!==r.length}function d(r,i){return JSON.stringify([...r].sort())===JSON.stringify([...i].sort())}export function validateAgentTaskResultBindingV1(r){const{graph:i,delegation:s,result:n}=r,e=[],a=i.tasks.find((t)=>t.id===n.taskRef);if(!o(n.taskGraph,{ref:i.id,digest:i.graphDigest}))e.push("Task result graph binding does not match");if(!o(s.taskGraph,{ref:i.id,digest:i.graphDigest})||s.runRef!==i.runRef)e.push("Task result delegation does not belong to the graph run");if(!a)return[...e,"Task result references an unknown task"];if(n.taskRef!==s.taskRef||!o(n.delegation,{ref:s.id,digest:s.delegationDigest}))e.push("Task result delegation binding does not match");if(n.producerPrincipalRef!==s.derivedPrincipalRef)e.push("Task result producer does not match the delegated principal");if(n.status!=="ready_for_verification")return e;if(f(n.artifactRefs))e.push("Task result artifact references must be unique");for(const t of a.expectedArtifactRefs)if(!n.artifactRefs.includes(t))e.push(`Task result is missing declared artifact: ${t}`);const u=n.evidenceSatisfactions.map((t)=>t.requirementRef);if(f(u))e.push("Task result evidence requirements must be unique");if(!d(u,a.requiredEvidenceKinds))e.push("Task result evidence requirements do not match its task");const c=n.completionCriteria.map((t)=>t.criterionRef);if(f(c))e.push("Task result completion criteria must be unique");if(!d(c,a.completionCriteria))e.push("Task result completion criteria do not match its task");for(const t of n.completionCriteria)if(!t.satisfied||t.evidenceRefs.length===0)e.push(`Task result does not prove criterion: ${t.criterionRef}`);return e}

package/dist/node/agent/queries/agentArtifacts.query.js

@@ -0,0 +1,4 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{docId as i}from"../../docs/registry.js";import{defineQuery as a}from"../../operations/index.js";import{AGENT_DOMAIN as n,AGENT_OWNERS as s,AGENT_STABILITY as r,AGENT_TAGS as o}from"../constants.js";const c=new e({name:"AgentArtifactsInput",fields:{runId:{type:t.ID(),isOptional:!1},kind:{type:t.String_unsecure(),isOptional:!0},limit:{type:t.Int_unsecure(),isOptional:!0},offset:{type:t.Int_unsecure(),isOptional:!0}}}),u=new e({name:"AgentArtifact",fields:{artifactId:{type:t.ID(),isOptional:!1},kind:{type:t.String_unsecure(),isOptional:!1},uri:{type:t.String_unsecure(),isOptional:!1},contentType:{type:t.String_unsecure(),isOptional:!0},summary:{type:t.String_unsecure(),isOptional:!0},createdAt:{type:t.DateTime(),isOptional:!1}}}),p=new e({name:"AgentArtifactsOutput",fields:{artifacts:{type:u,isOptional:!1,isArray:!0},total:{type:t.Int_unsecure(),isOptional:!0},nextOffset:{type:t.Int_unsecure(),isOptional:!0}}});export const AgentArtifactsDocBlock={id:"docs.tech.agent.artifacts",title:"Agent artifacts",summary:"List artifacts produced by an agent run.",kind:"reference",visibility:"public",route:"/docs/tech/agent/artifacts",tags:["agent","artifacts"],body:`# agent.artifacts
+
+Lists files, diffs, and outputs produced during agent execution.
+`},AgentArtifactsQuery=a({meta:{key:"agent.artifacts",title:"Agent Run Artifacts",version:"1.0.0",description:"List artifacts produced by an agent run.",goal:"Provide traceable outputs for audits and UI surfaces.",context:"Used by Studio to show diffs, files, and run outputs.",domain:n,owners:s,tags:[...o,"artifacts"],stability:r,docId:[i("docs.tech.agent.artifacts")]},capability:{key:"agent.execution",version:"1.0.0"},io:{input:c,output:p},policy:{auth:"user",pii:[]}});

package/dist/node/agent/queries/agentStatus.query.js

@@ -0,0 +1,4 @@
+import{ScalarTypeEnum as t,SchemaModel as e}from"@lssm/lib.schema";import{docId as s}from"../../docs/registry.js";import{defineQuery as n}from"../../operations/index.js";import{AGENT_DOMAIN as a,AGENT_OWNERS as i,AGENT_STABILITY as u,AGENT_TAGS as o}from"../constants.js";const r=new e({name:"AgentStatusInput",fields:{runId:{type:t.ID(),isOptional:!0},status:{type:t.String_unsecure(),isOptional:!0},limit:{type:t.Int_unsecure(),isOptional:!0},offset:{type:t.Int_unsecure(),isOptional:!0}}}),p=new e({name:"AgentRunSummary",fields:{runId:{type:t.ID(),isOptional:!1},agentKey:{type:t.String_unsecure(),isOptional:!1},status:{type:t.String_unsecure(),isOptional:!1},submittedAt:{type:t.DateTime(),isOptional:!1},startedAt:{type:t.DateTime(),isOptional:!0},completedAt:{type:t.DateTime(),isOptional:!0},contextSnapshotId:{type:t.ID(),isOptional:!0},lastError:{type:t.String_unsecure(),isOptional:!0}}}),c=new e({name:"AgentStatusOutput",fields:{runs:{type:p,isOptional:!1,isArray:!0},total:{type:t.Int_unsecure(),isOptional:!0},nextOffset:{type:t.Int_unsecure(),isOptional:!0}}});export const AgentStatusDocBlock={id:"docs.tech.agent.status",title:"Agent status",summary:"Query agent run status.",kind:"reference",visibility:"public",route:"/docs/tech/agent/status",tags:["agent","status"],body:`# agent.status
+
+Returns status summaries for one or many agent runs.
+`},AgentStatusQuery=n({meta:{key:"agent.status",title:"Agent Run Status",version:"1.0.0",description:"Get status for agent runs.",goal:"Provide status and progress visibility for background agents.",context:"Used by Studio and operators to monitor agent execution.",domain:a,owners:i,tags:[...o,"status"],stability:u,docId:[s("docs.tech.agent.status")]},capability:{key:"agent.execution",version:"1.0.0"},io:{input:r,output:c},policy:{auth:"user",pii:[]}});

package/dist/node/agent/queries/index.js

@@ -0,0 +1 @@
+export*from"./agentArtifacts.query.js";export*from"./agentStatus.query.js";

package/dist/node/agent/registry.js

@@ -0,0 +1 @@
+import{compareVersions as s}from"compare-versions";import{SpecContractRegistry as o}from"../registry.js";export class AgentRegistry extends o{constructor(e){super("agent",e)}listNames(){const e=new Set;for(const t of this.items.values())e.add(t.meta.key);return[...e]}require(e,t){const r=this.get(e,t);if(!r)throw Error(`Agent spec not found for ${e}${t!=null?`.v${t}`:""}`);return r}has(e,t){return this.get(e,t)!==void 0}getVersions(e){const t=[];for(const r of this.items.values())if(r.meta.key===e)t.push(r);return t.sort((r,n)=>s(r.meta.version,n.meta.version))}}export function createAgentRegistry(){return new AgentRegistry}

package/dist/node/agent/runner.js

@@ -0,0 +1 @@
+export function createCancelSignal(){return{cancelled:!1}}function l(e){const n=new Map;for(const t of e){const r=t.parent,a=n.get(r);if(a)a.push(t);else n.set(r,[t])}return n}function s(e,n){e?.(n)}function i(e,n,t){const{execute:r,onEvent:a,cancelSignal:g}=t;if(g?.cancelled){s(a,{type:"agent.task_cancelled",taskId:e.id});for(const o of n.get(e.id)??[])c(o,n,a);return}s(a,{type:"agent.task_started",taskId:e.id});try{r(e);s(a,{type:"agent.task_completed",taskId:e.id})}catch(o){const d=o instanceof Error?o.message:String(o);s(a,{type:"agent.task_failed",taskId:e.id,error:d});return}for(const o of n.get(e.id)??[])i(o,n,t)}function c(e,n,t){s(t,{type:"agent.task_cancelled",taskId:e.id});for(const r of n.get(e.id)??[])c(r,n,t)}export function runAgentTaskTree(e,n){const t=l(e),r=t.get(void 0)??[];for(const a of r)i(a,t,n)}export const agentRunnerGoalDoc={id:"docs.tech.agent.runner.goal",title:"Agent runner — goal",summary:"Synchronous depth-first agent task-tree executor with cancel propagation.",kind:"goal",visibility:"public",route:"/docs/tech/agent/runner/goal",tags:["agent","runner","task-tree"],body:"# Agent runner\n\nThe agent runner walks a flat list of `AgentTask` records as a depth-first tree,\nexecuting parent tasks before their children. It emits four lifecycle events:\n`agent.task_started`, `agent.task_completed`, `agent.task_failed`, and\n`agent.task_cancelled`. Cancellation propagates to all remaining descendants."};

package/dist/node/agent/spec.js

@@ -0,0 +1,10 @@
+import{agentProtocolConfigV1Schema as r}from"./protocol/application.js";export const AgentOperationsAsToolsDocBlock={id:"docs.tech.agent.operations-as-tools",title:"Operations as tools",summary:"Reference ContractSpec operations as agent tools. One contract to many surfaces.",kind:"reference",visibility:"public",route:"/docs/tech/agent/operations-as-tools",tags:["agent","tools","operations"],body:"# Operations as tools\n\nReference ContractSpec operations in `AgentSpec.tools` with `operationRef` to reuse schemas, handlers, and output bindings across REST, GraphQL, MCP, and agent execution.\n"},AgentSubagentsDocBlock={id:"docs.tech.agent.subagents",title:"Subagents",summary:"Delegate tasks to subagents with streaming and isolated context.",kind:"reference",visibility:"public",route:"/docs/tech/agent/subagents",tags:["agent","subagents","delegation"],body:`# Subagents
+
+Subagents let a primary agent delegate bounded work to worker agents while keeping orchestration, summaries, and approval policy in the parent flow.
+`},AgentMemoryToolsDocBlock={id:"docs.tech.agent.memory-tools",title:"Memory tools",summary:"Governed memory proposals with legacy direct-store compatibility.",kind:"reference",visibility:"public",route:"/docs/tech/agent/memory-tools",tags:["agent","memory","tools"],body:`# Memory tools
+
+Protocol V1 memory tools create provenance-bound proposals only. PersonalOS or CompanyOS must independently bind consent, policy, retention, authority, revision, and evidence before committing a mutation. The legacy direct-store adapter remains available only for non-Protocol-V1 agents and does not establish governed production memory.
+`},AgentWorkflowIntegrationDocBlock={id:"docs.tech.agent.workflow-integration",title:"Workflow-agent integration",summary:"Patterns for orchestrator-worker, workflow steps, and evaluator loops.",kind:"reference",visibility:"public",route:"/docs/tech/agent/workflow-integration",tags:["agent","workflow","orchestrator"],body:`# Workflow-agent integration
+
+Agents can act as workflow workers, orchestrators, or evaluators. Contract-backed operations keep those integrations explicit and replayable.
+`};export function defineAgent(e){if(!e.meta?.key)throw Error("Agent key is required");if(typeof e.meta.version!=="string")throw Error(`Agent ${e.meta.key} is missing a string version`);if(!e.instructions?.trim())throw Error(`Agent ${e.meta.key} requires instructions`);if(!e.tools?.length)throw Error(`Agent ${e.meta.key} must expose at least one tool`);for(const[t,o]of Object.entries(e.runtime?.ports??{}))if(o!==void 0&&o.trim().length===0)throw Error(`Agent ${e.meta.key} has invalid runtime config: port "${t}" must not be empty`);const n=new Set;for(const t of e.tools){if(n.has(t.name))throw Error(`Agent ${e.meta.key} has duplicate tool name: ${t.name}`);n.add(t.name);if(t.subagentRef&&t.operationRef)throw Error(`Agent ${e.meta.key} tool "${t.name}" cannot have both subagentRef and operationRef. Use one.`);if([t.outputPresentation,t.outputForm,t.outputDataView].filter(Boolean).length>1)throw Error(`Agent ${e.meta.key} tool "${t.name}" has multiple output refs (outputPresentation, outputForm, outputDataView). Use at most one.`)}if(e.communicationProfileRef!==void 0&&e.communicationProfileRef.trim().length===0)throw Error(`Agent ${e.meta.key} has invalid communicationProfileRef: it must not be empty`);if(e.protocol){const t=r.safeParse(e.protocol);if(!t.success)throw Error(`Agent ${e.meta.key} has invalid protocol config: ${t.error.issues[0]?.message??"unsupported protocol version"}`);for(const o of e.tools)if(o.subagentRef?.passConversationHistory)throw Error(`Agent ${e.meta.key} protocol V1 forbids full-history subagent delegation`)}return Object.freeze(e)}export function agentKey(e){return`${e.key}.v${e.version}`}

package/dist/node/agent/task-tree.js

@@ -0,0 +1,22 @@
+import{validateAgentTask as s}from"../shared-entities/task-validators.js";export function validateAgentTaskTree(t){for(const a of t){const e=s(a);if(!e.valid)return e}return{valid:!0}}export const agentTaskTreeGoalDoc={id:"docs.tech.agent.task-tree.goal",title:"AgentTask — goal",summary:"Tree-topology specialisation of SharedTask for the agent runtime.",kind:"goal",visibility:"public",route:"/docs/tech/agent/task-tree/goal",tags:["agent","task-tree","a9"],body:"# AgentTask\n\n`AgentTask` is the agent-context specialisation of `SharedTask` (A9 invariant).\nEach node carries at most one `parent` reference, forming a strict tree topology.\n`dependsOn` is prohibited at runtime — use `validateAgentTaskTree()` to enforce this.\n\n## Tree invariant\n\n- Exactly one root per tree (`parent` is `undefined`).\n- Every non-root task references one existing task as its parent.\n- `dependsOn` is reserved for workflow DAG context and MUST NOT be set here."},agentTaskTreeUsageDoc={id:"docs.tech.agent.task-tree.usage",title:"AgentTask — usage",summary:"How to build and validate an agent task tree.",kind:"usage",visibility:"public",route:"/docs/tech/agent/task-tree/usage",tags:["agent","task-tree"],body:`# Using AgentTask
+
+## Build a tree
+
+\`\`\`ts
+import type { AgentTask } from '@lssm/lib.contracts-spec/agent';
+
+const tasks: AgentTask[] = [
+  { id: 'root', label: 'Root task' },
+  { id: 'child-a', label: 'Child A', parent: 'root' },
+  { id: 'child-b', label: 'Child B', parent: 'root' },
+];
+\`\`\`
+
+## Validate before running
+
+\`\`\`ts
+import { validateAgentTaskTree } from '@lssm/lib.contracts-spec/agent';
+
+const result = validateAgentTaskTree(tasks);
+if (!result.valid) throw new Error(result.error);
+\`\`\``};

package/dist/node/agent/views/agentRuns.dataView.js

@@ -0,0 +1,4 @@
+import{defineDataView as l}from"../../data-views/index.js";import{docId as n}from"../../docs/registry.js";import{defineTranslation as i}from"../../translations/index.js";import{AGENT_DOMAIN as e,AGENT_OWNERS as t,AGENT_STABILITY as s,AGENT_TAGS as d}from"../constants.js";import{AgentStatusQuery as a}from"../queries/agentStatus.query.js";const r=i({meta:{key:"agent.run.index.i18n",version:"1.0.0",domain:e,owners:t},locale:"en",messages:{"field.runId.label":{value:"Run"},"field.agentKey.label":{value:"Agent"},"field.status.label":{value:"Status"},"field.submittedAt.label":{value:"Submitted"},"field.startedAt.label":{value:"Started"},"field.completedAt.label":{value:"Completed"},"field.contextSnapshotId.label":{value:"Context Snapshot"},"filter.runId.label":{value:"Run ID"},"filter.status.label":{value:"Status"}}});export const AgentRunsDataViewDocBlock={id:"docs.tech.agent.run.index",title:"Agent run index view",summary:"Data view for listing agent runs.",kind:"reference",visibility:"public",route:"/docs/tech/agent/run/index",tags:["agent","data-view"],body:`# agent.run.index
+
+List view over agent runs and their status.
+`},AgentRunsDataView=l(r,{meta:{key:"agent.run.index",title:"Agent Runs",version:"1.0.0",description:"List background agent runs and their status.",domain:e,owners:t,tags:[...d,"run","index"],stability:s,entity:"agent_run",docId:[n("docs.tech.agent.run.index")]},source:{primary:{key:a.meta.key,version:a.meta.version}},view:{kind:"list",fields:[{key:"runId",label:"field.runId.label",dataPath:"runId"},{key:"agentKey",label:"field.agentKey.label",dataPath:"agentKey"},{key:"status",label:"field.status.label",dataPath:"status"},{key:"submittedAt",label:"field.submittedAt.label",dataPath:"submittedAt"},{key:"startedAt",label:"field.startedAt.label",dataPath:"startedAt"},{key:"completedAt",label:"field.completedAt.label",dataPath:"completedAt"},{key:"contextSnapshotId",label:"field.contextSnapshotId.label",dataPath:"contextSnapshotId"}],primaryField:"runId",secondaryFields:["agentKey","status"],filters:[{key:"runId",label:"filter.runId.label",field:"runId",type:"search"},{key:"status",label:"filter.status.label",field:"status",type:"search"}]},policy:{flags:[],pii:[]}});

package/dist/node/agent/views/index.js

@@ -0,0 +1 @@
+export*from"./agentRuns.dataView.js";

package/dist/node/agent-platform/baseline-suites.js

@@ -0,0 +1 @@
+export const AGENT_PLATFORM_BASELINE_REQUIRED_SUITES=[{suiteId:"agent-platform.governance-security:v1",capabilityRef:"agent.platform.governance-security"},{suiteId:"agent-platform.supply-chain-security:v1",capabilityRef:"agent.platform.supply-chain-security"},{suiteId:"agent-platform.observability-export:v1",capabilityRef:"agent.platform.observability-export"},{suiteId:"agent-platform.load-resilience:v1",capabilityRef:"agent.platform.load-resilience"},{suiteId:"agent-platform.clean-consumer-release:v1",capabilityRef:"agent.platform.clean-consumer-release"}],AGENT_PLATFORM_BASELINE_REQUIRED_SUITE_IDS=AGENT_PLATFORM_BASELINE_REQUIRED_SUITES.map(({suiteId:e})=>e);

package/dist/node/agent-platform/digest.js

@@ -0,0 +1 @@
+import{sha256Hex as o}from"@lssm/lib.crypto-utils";export function agentPlatformContractDigest(n){return`sha256:${o(i(n))}`}function i(n){if(Array.isArray(n))return`[${n.map((e)=>i(e)).join(",")}]`;if(n&&typeof n==="object")return`{${Object.entries(n).filter(([,r])=>r!==void 0).sort(([r],[t])=>r.localeCompare(t)).map(([r,t])=>`${JSON.stringify(r)}:${i(t)}`).join(",")}}`;return JSON.stringify(n)??"null"}

package/dist/node/agent-platform/index.js

@@ -0,0 +1 @@
+export*from"./baseline-suites.js";export*from"./digest.js";export*from"./types.js";export*from"./validation.js";export*from"./validation-v2.js";

package/dist/node/agent-platform/types.js

@@ -0,0 +1 @@
+export const AGENT_PLATFORM_PLAN_VERSION="1",AGENT_PLATFORM_PLAN_V2_VERSION="2";

package/dist/node/agent-platform/validation-v2.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{agentPlatformContractDigest as p}from"./digest.js";import{agentPlatformComponentBindingV1Schema as g,agentPlatformDeclaredLossV1Schema as y,agentPlatformEnterpriseControlsV1Schema as u,agentPlatformSuiteReportRefV1Schema as R,certifyAgentPlatform as P}from"./validation.js";const s=e.string().regex(/^sha256:[a-f0-9]{64}$/),t=e.string().min(1),b=e.object({instanceRef:t,componentKind:t,providerProfileRef:t,deploymentAdapterRef:t,runtimeTargetRef:t.optional(),replicaCount:e.number().int().positive().optional(),regionRefs:e.array(t).min(1),trustBoundaryRefs:e.array(t).min(1),evidenceRefs:e.array(t).min(1)});export const agentPlatformDeploymentTopologyV2Schema=e.object({topologyRef:t,topologyKind:e.enum(["single-region","multi-region-active-passive","multi-region-active-active","self-hosted-cluster","hybrid"]),controlPlaneRef:t,dataPlaneRef:t,regionRefs:e.array(t).min(1),trustBoundaryRefs:e.array(t).min(1),instances:e.array(b).min(1),evidenceRefs:e.array(t).min(1)}),agentPlatformPlanV2Schema=e.object({id:e.string().min(1),version:e.literal("2"),agentRef:t,environmentProfileRef:t,infraOpsSpecRef:t,componentBindings:e.array(g).min(1),requiredSuiteIds:e.array(t).min(1),requirementRefs:e.array(t).min(1),policyRefs:e.array(t).min(1),enterpriseControls:u.optional(),deploymentTopology:agentPlatformDeploymentTopologyV2Schema});const C=e.object({attestationRef:t,subjectRef:t,attestorRef:t,attestationKind:e.enum(["consumer-evidence","local-harness"]),attestedAt:e.string().datetime(),evidenceRefs:e.array(t).min(1),limitations:e.array(t)}),v=e.object({componentKind:t,providerProfileRef:t,deploymentAdapterRef:t,status:e.enum(["blocked","candidate","eligible"]),reasonRefs:e.array(t),evidenceRefs:e.array(t).min(1)}),l={planDigest:s,profileDigests:e.array(s).min(1),sourceRevision:e.string().min(7),environmentFingerprint:s,deploymentTopologyDigest:s,suiteReports:e.array(R).min(1),declaredLosses:e.array(y),requiredCapabilityFailures:e.array(t),unclassifiedCapabilities:e.array(t),attestations:e.array(C).min(1),deploymentCertifications:e.array(v).min(1),eligibility:e.object({status:e.enum(["blocked","candidate","eligible"]),reasonRefs:e.array(t),missingRequirementRefs:e.array(t)}),generatedAt:e.string().datetime(),evidenceRefs:e.array(t).min(1),overall:e.enum(["pass","fail"])};export const agentPlatformCertificationReportV2Schema=e.object(l);export function certifyAgentPlatformV2(c,d){const i=agentPlatformPlanV2Schema.parse(c),n=e.object({...l,overall:l.overall.optional()}).parse(d),m={id:i.id,version:"1",agentRef:i.agentRef,environmentProfileRef:i.environmentProfileRef,infraOpsSpecRef:i.infraOpsSpecRef,componentBindings:i.componentBindings,requiredSuiteIds:i.requiredSuiteIds,requirementRefs:i.requirementRefs,policyRefs:i.policyRefs,enterpriseControls:i.enterpriseControls},r=[...P(m,{...n,planDigest:p(m)}).issues];if(n.deploymentTopologyDigest!==p(i.deploymentTopology))r.push({code:"plan_digest_mismatch",message:"Certification report is bound to another deployment topology.",ref:n.deploymentTopologyDigest});for(const f of i.componentBindings){const o=f.componentKind;if(!n.attestations.some((a)=>a.subjectRef===o))r.push({code:"required_suite_not_passed",message:`Selected component ${o} has no deployment attestation.`,ref:o});if(!n.deploymentCertifications.some((a)=>a.componentKind===o))r.push({code:"required_suite_not_passed",message:`Selected component ${o} has no deployment certification.`,ref:o});if(!i.deploymentTopology.instances.some((a)=>a.componentKind===o&&a.providerProfileRef===f.providerProfileRef.id))r.push({code:"required_capability_failure",message:`Deployment topology is missing ${o}.`,ref:o})}if(n.eligibility.status==="blocked")r.push({code:"required_capability_failure",message:"Deployment eligibility is blocked.",ref:n.eligibility.reasonRefs[0]});return{report:{...n,overall:r.length===0?"pass":"fail"},issues:r}}

package/dist/node/agent-platform/validation.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{AGENT_PLATFORM_BASELINE_REQUIRED_SUITE_IDS as R}from"./baseline-suites.js";import{agentPlatformContractDigest as P}from"./digest.js";const p=e.string().regex(/^sha256:[a-f0-9]{64}$/),t=e.string().min(1);export const agentPlatformPinnedRefSchema=e.object({id:e.string().min(1),version:e.string().min(1),digest:p}),agentPlatformComponentBindingV1Schema=e.object({componentKind:e.string().min(1),providerProfileRef:agentPlatformPinnedRefSchema,runtimeTargetRef:t.optional(),adapterRef:t.optional(),configRef:t.optional(),evidenceRefs:e.array(t).min(1)}),agentPlatformEnterpriseControlsV1Schema=e.object({dataGovernance:e.object({retentionPolicyRef:t,deletionPolicyRef:t,exportPolicyRef:t,residencyPolicyRef:t,encryptionPolicyRef:t,backupPolicyRef:t,rpoSeconds:e.number().int().nonnegative(),rtoSeconds:e.number().int().nonnegative()}),identity:e.object({sso:e.enum(["not_required","optional","required"]),scim:e.enum(["not_required","optional","required"]),rbacPolicyRef:t,breakGlassPolicyRef:t}),observability:e.object({auditSinkRef:t,traceSinkRef:t,metricsSinkRef:t,costSinkRef:t,budgetPolicyRef:t,defaultContentCapture:e.enum(["deny","redacted"])})});const y=e.array(t).min(1).max(100).superRefine((n,c)=>{if(new Set(n).size!==n.length)c.addIssue({code:"custom",message:"Agent platform required suite IDs must be unique."});for(const s of R)if(!n.includes(s))c.addIssue({code:"custom",message:`Agent platform plan is missing mandatory baseline suite ${s}.`})});export const agentPlatformPlanV1Schema=e.object({id:e.string().min(1),version:e.literal("1"),agentRef:t,environmentProfileRef:t,infraOpsSpecRef:t,componentBindings:e.array(agentPlatformComponentBindingV1Schema).min(1),requiredSuiteIds:y,requirementRefs:e.array(t).min(1),policyRefs:e.array(t).min(1),enterpriseControls:agentPlatformEnterpriseControlsV1Schema.optional()}),agentPlatformSuiteReportRefV1Schema=e.object({suiteId:e.string().min(1),suiteVersion:e.string().min(1),targetRef:t,reportRef:t,status:e.enum(["pass","fail","not_applicable"]),required:e.boolean()}),agentPlatformDeclaredLossV1Schema=e.object({capabilityRef:t,reason:e.string().min(1),acceptanceRef:t.optional()});const d={planDigest:p,profileDigests:e.array(p).min(1),sourceRevision:e.string().min(7),environmentFingerprint:p,suiteReports:e.array(agentPlatformSuiteReportRefV1Schema).min(1),declaredLosses:e.array(agentPlatformDeclaredLossV1Schema),requiredCapabilityFailures:e.array(t),unclassifiedCapabilities:e.array(t),generatedAt:e.string().datetime(),evidenceRefs:e.array(t).min(1)};export const agentPlatformCertificationReportV1Schema=e.object({...d,overall:e.enum(["pass","fail"])});export function certifyAgentPlatform(n,c){const s=agentPlatformPlanV1Schema.parse(n),o=e.object(d).parse(c),r=[],m=new Set(o.profileDigests);if(o.planDigest!==P(s))r.push({code:"plan_digest_mismatch",message:"Certification report is bound to another platform plan.",ref:o.planDigest});if(!s.enterpriseControls)r.push({code:"missing_enterprise_controls",message:"Production certification requires explicit enterprise control inputs.",ref:s.id});for(const i of s.componentBindings){const a=i.providerProfileRef.digest;if(!m.has(a))r.push({code:"missing_profile_digest",message:`Certification is missing provider profile digest ${a}.`,ref:i.providerProfileRef.id})}for(const i of o.suiteReports)if(i.required&&i.status!=="pass")r.push({code:"required_suite_not_passed",message:`Required suite ${i.suiteId} did not pass.`,ref:i.reportRef});else if(i.status==="fail")r.push({code:"failed_suite",message:`Suite ${i.suiteId} failed.`,ref:i.reportRef});for(const i of s.requiredSuiteIds){const a=o.suiteReports.filter(({suiteId:f})=>f===i),u=a.some(({required:f,status:l})=>f&&l==="pass"),g=a.some(({required:f,status:l})=>f&&l!=="pass");if(!u&&!g)r.push({code:"required_suite_not_passed",message:`Required plan suite ${i} has no passing required report.`,ref:i})}for(const i of o.declaredLosses)if(!i.acceptanceRef)r.push({code:"unaccepted_loss",message:`Declared loss ${i.capabilityRef} has no acceptance ref.`,ref:i.capabilityRef});for(const i of o.requiredCapabilityFailures)r.push({code:"required_capability_failure",message:`Required capability ${i} failed.`,ref:i});for(const i of o.unclassifiedCapabilities)r.push({code:"unclassified_capability",message:`Capability ${i} is not classified.`,ref:i});return{report:{...o,overall:r.length===0?"pass":"fail"},issues:r}}

package/dist/node/agent-step-observability/index.js

@@ -0,0 +1 @@
+export*from"./types.js";export*from"./validation.js";

package/dist/node/agent-step-observability/validation.js

@@ -0,0 +1 @@
+import{z as e}from"zod";export const agentStepEvidenceKindSchema=e.enum(["source_message","retrieval_context","tool_receipt","policy_decision","eval_result","human_feedback","redaction_decision","replay_bundle","rollback_version"]),agentStepConfidenceLevelSchema=e.enum(["blocked","low","medium","high","verified"]),agentStepRiskLevelSchema=e.enum(["low","medium","high","critical"]),agentStepReviewStatusSchema=e.enum(["not_required","needs_review","changes_requested","approved","rejected","superseded"]),agentStepImprovementStatusSchema=e.enum(["draft","testing","needs_approval","approved","promoted","rejected","rolled_back"]),forbiddenRawReasoningSurfaceKeys=["chainOfThought","chain_of_thought","cot","hiddenReasoning","hidden_reasoning","rawChainOfThought","raw_chain_of_thought","rawReasoning","raw_reasoning","reasoningText","reasoning_text","stepReasoningText","contractspec_step_reasoning_text"];const c=new Set(forbiddenRawReasoningSurfaceKeys);export const agentStepEvidencePointerSchema=e.object({id:e.string().min(1),kind:agentStepEvidenceKindSchema,ref:e.string().min(1),sourcePackage:e.string().min(1),timestamp:e.string().min(1),redactionStatus:e.enum(["none","redacted","restricted"]),artifactHash:e.string().min(1).optional(),ontologyRef:e.string().min(1).optional()}).strict(),agentStepReviewEntrySchema=e.object({state:agentStepReviewStatusSchema,at:e.string().min(1),reviewerRef:e.string().min(1).optional(),reason:e.string().min(1).optional(),correctionRefs:e.array(e.string().min(1)).optional(),queueRef:e.string().min(1).optional()}).strict(),agentStepReviewStateSchema=e.object({current:agentStepReviewStatusSchema,history:e.array(agentStepReviewEntrySchema).min(1)}).strict().superRefine((t,n)=>{if(t.history.at(-1)?.state!==t.current)n.addIssue({code:e.ZodIssueCode.custom,message:"reviewState.current must match the last append-only history state",path:["current"]})}),agentStepReplayBundleRefSchema=e.object({id:e.string().min(1),uri:e.string().min(1),artifactHash:e.string().min(1),createdAt:e.string().min(1),requiredEvidenceRefs:e.array(e.string().min(1)).min(1),inputFixtureRefs:e.array(e.string().min(1)).min(1),variableVersionRefs:e.array(e.string().min(1)).min(1),evaluatorRefs:e.array(e.string().min(1)).min(1),rollbackVersionRefs:e.array(e.string().min(1)).min(1)}).strict(),agentStepTweakableVariableSchema=e.object({id:e.string().min(1),scope:e.enum(["step","workflow","tenant","domain"]),kind:e.enum(["prompt","threshold","tool_choice","model_route","retrieval_filter","policy_rule","skill_version"]),currentValueRef:e.string().min(1),allowedValuesRef:e.string().min(1).optional(),owner:e.string().min(1),riskLevel:agentStepRiskLevelSchema,requiresApproval:e.boolean(),effectiveFrom:e.string().min(1),rollbackRef:e.string().min(1)}).strict().superRefine((t,n)=>{if((t.riskLevel==="high"||t.riskLevel==="critical")&&!t.requiresApproval)n.addIssue({code:e.ZodIssueCode.custom,message:"high-risk tweakable variables require approval",path:["requiresApproval"]})}),agentStepSpecSchema=e.object({id:e.string().min(1),version:e.string().min(1),purpose:e.string().min(1),inputKinds:e.array(e.string().min(1)).min(1),outputArtifactKind:e.string().min(1),agentRef:e.string().min(1),promptRef:e.string().min(1).optional(),skillRef:e.string().min(1).optional(),toolRefs:e.array(e.string().min(1)).optional(),policyRefs:e.array(e.string().min(1)).min(1),requiredEvidenceKinds:e.array(agentStepEvidenceKindSchema).min(1),reviewPolicyRef:e.string().min(1),redactionPolicyRef:e.string().min(1)}).strict(),agentStepArtifactSchema=e.object({id:e.string().min(1),stepSpecRef:e.string().min(1),runRef:e.string().min(1),attempt:e.number().int().positive(),artifactKind:e.string().min(1),payloadRef:e.string().min(1),summary:e.string().min(1),createdAt:e.string().min(1),producerRef:e.string().min(1),evidencePointers:e.array(agentStepEvidencePointerSchema),confidence:agentStepConfidenceLevelSchema,confidenceScore:e.number().min(0).max(1).optional(),reviewState:agentStepReviewStateSchema,variableInfluences:e.array(e.string().min(1)),replayBundleRef:e.string().min(1).optional(),supersedes:e.string().min(1).optional(),supersededBy:e.string().min(1).optional(),redactionStatus:e.enum(["none","redacted","restricted"])}).strict().superRefine((t,n)=>{if(t.confidence==="verified"&&t.evidencePointers.length===0)n.addIssue({code:e.ZodIssueCode.custom,message:"verified confidence requires non-empty evidence pointers",path:["evidencePointers"]});if(t.confidence==="verified"&&!t.evidencePointers.some((i)=>i.kind==="eval_result"))n.addIssue({code:e.ZodIssueCode.custom,message:"verified confidence requires eval_result evidence",path:["evidencePointers"]})}),agentStepArtifactDiffSchema=e.object({id:e.string().min(1),beforeArtifactRef:e.string().min(1),afterArtifactRef:e.string().min(1),changedVariableRefs:e.array(e.string().min(1)),confidenceChanged:e.boolean(),evidenceChanged:e.boolean(),reviewStateChanged:e.boolean(),replayBundleRef:e.string().min(1)}).strict(),agentStepImprovementProposalSchema=e.object({id:e.string().min(1),sourceEvidenceRefs:e.array(e.string().min(1)).min(1),affectedStepRefs:e.array(e.string().min(1)),affectedWorkflowRefs:e.array(e.string().min(1)),affectedVariableRefs:e.array(e.string().min(1)),proposedChangeKind:e.enum(["prompt","threshold","tool_choice","model_route","retrieval_filter","policy_rule","skill_version","public_contract","runtime_policy","model_checkpoint","vendor_export"]),hypothesis:e.string().min(1),riskClassification:agentStepRiskLevelSchema,requiredApproval:e.boolean(),evalReplayPlanRef:e.string().min(1),promotionCriteriaRefs:e.array(e.string().min(1)),rollbackEvidenceRefs:e.array(e.string().min(1)),versionRefs:e.array(e.string().min(1)),promotionEvidenceRefs:e.array(e.string().min(1)),replayBundleRefs:e.array(e.string().min(1)),status:agentStepImprovementStatusSchema,autoApply:e.boolean().default(!1),policyAllowsAutoApply:e.boolean().default(!1),testsPassed:e.boolean().default(!1)}).strict().superRefine((t,n)=>{if((t.riskClassification==="high"||t.riskClassification==="critical")&&!t.requiredApproval)n.addIssue({code:e.ZodIssueCode.custom,message:"high-risk proposals require human approval",path:["requiredApproval"]});if(t.status==="promoted"){const i=[["replayBundleRefs",t.replayBundleRefs],["versionRefs",t.versionRefs],["rollbackEvidenceRefs",t.rollbackEvidenceRefs],["promotionEvidenceRefs",t.promotionEvidenceRefs]];for(const[r,s]of i)if(s.length===0)n.addIssue({code:e.ZodIssueCode.custom,message:"promoted proposals require replay, version, rollback, and promotion evidence",path:[r]})}if(t.autoApply&&!canAutoApplyAgentStepImprovement(t))n.addIssue({code:e.ZodIssueCode.custom,message:"autoApply requires policy, tests, replay, version, rollback, promotion evidence, and no human-approval risk",path:["autoApply"]})});function a(t){return t.issues.map((n)=>({path:n.path.map((i)=>typeof i==="symbol"?i.toString():i),message:n.message}))}function p(t,n,i){t.push({path:n,message:i})}export function findRawReasoningSurfaceKeys(t,n=[]){const i=[];if(!t||typeof t!=="object")return i;if(Array.isArray(t)){t.forEach((r,s)=>{i.push(...findRawReasoningSurfaceKeys(r,[...n,s]))});return i}for(const[r,s]of Object.entries(t)){const o=[...n,r];if(c.has(r))p(i,o,"Raw chain-of-thought/reasoning fields are not allowed on the agent-step observability surface");i.push(...findRawReasoningSurfaceKeys(s,o))}return i}export function canAutoApplyAgentStepImprovement(t){return t.status==="promoted"&&!t.requiredApproval&&t.riskClassification!=="high"&&t.riskClassification!=="critical"&&t.policyAllowsAutoApply&&t.testsPassed&&t.replayBundleRefs.length>0&&t.versionRefs.length>0&&t.rollbackEvidenceRefs.length>0&&t.promotionEvidenceRefs.length>0}export function validateAgentStepArtifact(t){const n=findRawReasoningSurfaceKeys(t),i=agentStepArtifactSchema.safeParse(t);if(!i.success)return{valid:!1,issues:[...a(i.error),...n]};return n.length>0?{valid:!1,issues:n}:{valid:!0,value:i.data,issues:[]}}export function validateAgentStepImprovementProposal(t){const n=agentStepImprovementProposalSchema.safeParse(t);if(!n.success)return{valid:!1,issues:a(n.error)};return{valid:!0,value:n.data,issues:[]}}

package/dist/node/agentic-interaction/constants.js

@@ -0,0 +1 @@
+import{StabilityEnum as t,TagsEnum as T}from"../ownership.js";export const AGENTIC_INTERACTION_DOMAIN="agentic-interaction",AGENTIC_INTERACTION_OWNERS=["platform.ai"],AGENTIC_INTERACTION_TAGS=[T.Automation,"agentic-interaction","safety"],AGENTIC_INTERACTION_STABILITY=t.Experimental;

package/dist/node/agentic-interaction/contracts.js

@@ -0,0 +1 @@
+import{ScalarTypeEnum as e,SchemaModel as t}from"@lssm/lib.schema";import{defineCapability as o}from"../capabilities/index.js";import{defineQuery as r}from"../operations/index.js";import{AGENTIC_INTERACTION_DOMAIN as n,AGENTIC_INTERACTION_OWNERS as i,AGENTIC_INTERACTION_STABILITY as a,AGENTIC_INTERACTION_TAGS as s}from"./constants.js";export const AGENTIC_INTERACTION_BLOCKED_SIGNALS=["credential_request","production_send","arbitrary_shell_execution","companyos_high_impact_bypass"],AgenticInteractionAipMappingMatrix=[{signal:"credential_request",decision:"deny",aipControl:"AIP-SAFETY-CREDENTIALS-NO-COLLECTION",rationale:"Agentic message handlers must never request, collect, echo, or persist credentials or secrets.",safeAlternative:"Redirect the user to a managed credential vault or administrator-approved connector setup flow."},{signal:"production_send",decision:"deny",aipControl:"AIP-SAFETY-PRODUCTION-SEND-NO-DISPATCH",rationale:"Inbound messages cannot directly trigger production sends such as email, SMS, payments, or customer-visible delivery.",safeAlternative:"Create a draft or approval request with explicit operator review before any production dispatch."},{signal:"arbitrary_shell_execution",decision:"deny",aipControl:"AIP-SAFETY-SHELL-NO-MESSAGE-EXEC",rationale:"Free-form shell commands from messages are unbounded execution and must not cross into runtime execution lanes.",safeAlternative:"Offer a read-only explanation or route to a pre-registered, policy-reviewed automation skill."},{signal:"companyos_high_impact_bypass",decision:"deny",aipControl:"AIP-SAFETY-COMPANYOS-HIGH-IMPACT-GATE",rationale:"CompanyOS high-impact actions require the CompanyOS approval gate and cannot be bypassed by agentic chat intent.",safeAlternative:"Open a CompanyOS execution proposal that remains blocked until the configured approval policy is satisfied."}];const c=new t({name:"AgenticInteractionAssessInput",fields:{messageId:{type:e.ID(),isOptional:!1},channelId:{type:e.ID(),isOptional:!0},tenantId:{type:e.ID(),isOptional:!0},actorId:{type:e.ID(),isOptional:!0},messageText:{type:e.String_unsecure(),isOptional:!1},requestedAction:{type:e.String_unsecure(),isOptional:!0},metadata:{type:e.JSONObject(),isOptional:!0}}}),p=new t({name:"AgenticInteractionAssessOutput",fields:{decision:{type:e.String_unsecure(),isOptional:!1},blocked:{type:e.Boolean(),isOptional:!1},signals:{type:e.String_unsecure(),isOptional:!1,isArray:!0},aipControlRefs:{type:e.String_unsecure(),isOptional:!1,isArray:!0},safeAlternative:{type:e.String_unsecure(),isOptional:!0},assessedAt:{type:e.DateTime(),isOptional:!1}}});export const AgenticInteractionAssessQuery=r({meta:{key:"agenticInteraction.assess",title:"Assess Agentic Interaction",version:"1.0.0",description:"Classify inbound agentic messages against fail-closed safety controls before any execution or dispatch.",goal:"Keep credentials, production sends, arbitrary shell execution, and CompanyOS high-impact bypasses out of message-driven automation.",context:"Used by CommunicationOS, agent runtimes, and CompanyOS bridges before turning a message into a command, draft, or execution proposal.",domain:n,owners:i,tags:[...s,"aip","fail-closed"],stability:a},capability:{key:"agentic-interaction.safety-gate",version:"1.0.0"},io:{input:c,output:p},policy:{auth:"user",pii:["messageText"]}}),AgenticInteractionSafetyGateCapability=o({meta:{key:"agentic-interaction.safety-gate",version:"1.0.0",kind:"integration",title:"Agentic Interaction Safety Gate",description:"Fail-closed safety gate for inbound agentic messages before commands, production sends, shell execution, or CompanyOS high-impact actions.",domain:n,owners:i,tags:[...s,"aip","fail-closed"],stability:a},provides:[{surface:"operation",key:"agenticInteraction.assess",version:"1.0.0",description:"Assess an inbound message against agentic interaction blocked signals."}]}),agenticInteractionOperationContracts={AgenticInteractionAssessQuery},agenticInteractionCapabilityContracts={AgenticInteractionSafetyGateCapability};

package/dist/node/agentic-interaction/index.js

@@ -0,0 +1 @@
+import{AgenticInteractionAssessQuery as e,AgenticInteractionSafetyGateCapability as r}from"./contracts.js";export*from"./constants.js";export*from"./contracts.js";export function registerAgenticInteractionOperations(t){return t.register(e)}export function registerAgenticInteractionCapabilities(t){return t.register(r)}

package/dist/node/agentpacks/evidence-audit-validation.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{addSecretMaterialIssue as u,addSortedUniqueIssue as n,agentpackDigestV1Schema as h,agentpackEvidenceRefV1Schema as d,agentpackIntegrationShaSchema as r,agentpackRedactionV1Schema as g,agentpackRelativePathSchema as o}from"./evidence-schema-primitives.js";const m=e.enum(["pass","warn","fail"]),c=e.array(d).min(1),f=e.strictObject({path:o,digest:h}),l=e.strictObject({id:e.string().min(1),status:m,summary:e.string().min(1),evidenceRefs:c}),p=e.strictObject({id:e.string().min(1),statement:e.string().min(1),evidenceRefs:c}),S=e.strictObject({id:e.string().min(1),severity:e.enum(["warning","blocking"]),message:e.string().min(1),evidenceRefs:c}),v=e.discriminatedUnion("required",[e.strictObject({required:e.literal(!1)}),e.strictObject({required:e.literal(!0),decisionRef:d,replayRef:d}).superRefine((i,a)=>{if(i.decisionRef.kind!=="connect-decision")a.addIssue({code:e.ZodIssueCode.custom,message:"decisionRef must be Connect decision evidence",path:["decisionRef","kind"]});if(i.replayRef.kind!=="replay")a.addIssue({code:e.ZodIssueCode.custom,message:"replayRef must be replay evidence",path:["replayRef","kind"]})})]);export const agentpackAiAuditReceiptV1Schema=e.strictObject({schema:e.literal("contractspec.agentpacks.ai-audit-receipt"),version:e.literal("1.0.0"),id:e.string().min(1),status:m,changedPaths:e.array(o).min(1),activeRules:e.array(f).min(1),checks:e.array(l).min(1),assumptions:e.array(p),violations:e.array(S),traceManifestRefs:c,connect:v,redaction:g,evidenceRefs:c,auditedIntegrationSha:r,verification:e.strictObject({command:e.string().min(1),workingDirectory:o,deterministic:e.literal(!0),expectedIntegrationSha:r})}).superRefine((i,a)=>{n(i.changedPaths,a,["changedPaths"],"Changed paths");n(i.activeRules.map(({path:t})=>t),a,["activeRules"],"Active rule paths");n(i.checks.map(({id:t})=>t),a,["checks"],"Check ids");n(i.assumptions.map(({id:t})=>t),a,["assumptions"],"Assumption ids");n(i.violations.map(({id:t})=>t),a,["violations"],"Violation ids");const s=I(i);if(i.status!==s)a.addIssue({code:e.ZodIssueCode.custom,message:`Receipt status must be ${s} for its checks and violations`,path:["status"]});if(s!=="pass"&&!i.connect.required)a.addIssue({code:e.ZodIssueCode.custom,message:"Warn/fail receipts require Connect decision and replay evidence",path:["connect"]});if(i.verification.expectedIntegrationSha!==i.auditedIntegrationSha)a.addIssue({code:e.ZodIssueCode.custom,message:"Verification SHA must match audited integration SHA",path:["verification","expectedIntegrationSha"]});if(/\r|\n|\b(?:date|random|curl|wget|latest)\b/i.test(i.verification.command))a.addIssue({code:e.ZodIssueCode.custom,message:"Verification command contains a nondeterministic operation",path:["verification","command"]});u(i,a)});function I(i){if(i.checks.some(({status:a})=>a==="fail")||i.violations.some(({severity:a})=>a==="blocking"))return"fail";return i.checks.some(({status:a})=>a==="warn")||i.violations.some(({severity:a})=>a==="warning")?"warn":"pass"}export function addIntegrationShaIssue(i,a,s){if(i.auditedIntegrationSha!==a.integrationSha)s.addIssue({code:e.ZodIssueCode.custom,message:"Audit receipt is stale or does not match the integration SHA",path:["auditedIntegrationSha"]});if(JSON.stringify(i.changedPaths)!==JSON.stringify(a.changedPaths))s.addIssue({code:e.ZodIssueCode.custom,message:"Audit receipt changed-path scope does not match the audited scope",path:["changedPaths"]})}

package/dist/node/agentpacks/evidence-canonicalization.js

@@ -0,0 +1,2 @@
+import{sha256Hex as i}from"@lssm/lib.crypto-utils";function r(e){if(Array.isArray(e))return e.map(r);if(e===null||typeof e!=="object")return e;return Object.fromEntries(Object.entries(e).sort(([t],[a])=>t.localeCompare(a)).map(([t,a])=>[t,r(a)]))}function n(e){return`${JSON.stringify(r(e))}
+`}export function canonicalizeAgentpackGeneratedArtifactTraceV1(e){return n(e)}export function canonicalizeAgentpackGenerationTraceManifestV1(e){return n(e)}export function canonicalizeAgentpackAiAuditReceiptV1(e){return n(e)}export function digestAgentpackGenerationTraceManifestV1(e){return{algorithm:"sha256",value:i(n(e))}}

package/dist/node/agentpacks/evidence-fixtures.js

@@ -0,0 +1 @@
+import{digestAgentpackGenerationTraceManifestV1 as o}from"./evidence-canonicalization.js";const n={policy:"fixed-fixture",generatedAt:"2026-01-01T00:00:00.000Z",sourceValue:"2026-01-01T00:00:00.000Z"},c="1234567890abcdef1234567890abcdef12345678";function t(e){return{algorithm:"sha256",value:e.repeat(64)}}function a(e,s,i,r){return{id:e,kind:s,path:i,digest:t(r)}}export function createAgentpackGeneratedArtifactTraceV1Fixture(){const e=a("capability-matrix","file","evidence/capability-matrix.json","c");return{schema:"contractspec.agentpacks.generated-artifact-trace",version:"1.0.0",id:"trace.contracts-rule.codex",sources:[{featureUnitId:"contractspec.rules.contracts-first",sourcePath:"packs/contractspec-rules/rules/contracts-first.md",schemaRefs:["agentpacks/feature-unit.schema.json"],sharedInvariant:"Contracts are authored before implementation.",sourceDigest:t("a")}],target:{targetId:"codexcli",baseDir:".codex",artifactPath:".codex/memories/contracts-first.md",action:"update"},transform:{kind:"schema-map",lossPolicy:"lossy-transform-reviewed",diagnostics:[{code:"codex-memory-projection",severity:"info",message:"Rule projected to a Codex memory.",evidenceRefs:[e]}]},capabilityEvidence:[{targetId:"codexcli",featureKind:"rule",status:"transformed",evidenceRefs:[e]}],artifactDigest:t("b"),connect:{decisionRef:a("connect-decision","connect-decision","evidence/connect/decision.json","d"),replayRef:a("connect-replay","replay","evidence/connect/replay.json","e")},redaction:{status:"not-required",removedPaths:[],evidenceRefs:[]},generatedAt:n}}export function createAgentpackGenerationTraceManifestV1Fixture(){const e={schema:"contractspec.agentpacks.generation-trace-manifest",version:"1.0.0",id:"manifest.agentpacks.codex",traces:[createAgentpackGeneratedArtifactTraceV1Fixture()],generatedAt:n};return{...e,manifestDigest:o(e)}}export function createAgentpackAiAuditReceiptV1Fixture(){const e=a("agentpacks-evidence-tests","test","evidence/tests/agentpacks-evidence.json","f");return{schema:"contractspec.agentpacks.ai-audit-receipt",version:"1.0.0",id:"audit.agentpacks.integration",status:"pass",changedPaths:["packages/libs/contracts-spec/src/agentpacks/evidence-types.ts","packages/libs/contracts-spec/src/agentpacks/evidence-validation.ts"],activeRules:[{path:".codex/memories/contracts-first.md",digest:t("1")},{path:"AGENTS.md",digest:t("2")}],checks:[{id:"agentpacks-evidence-tests",status:"pass",summary:"Strict evidence validation passed.",evidenceRefs:[e]}],assumptions:[],violations:[],traceManifestRefs:[a("generation-trace-manifest","file","evidence/manifests/agentpacks.json","3")],connect:{required:!1},redaction:{status:"not-required",removedPaths:[],evidenceRefs:[]},evidenceRefs:[e],auditedIntegrationSha:c,verification:{command:"bun test src/agentpacks/evidence.test.ts",workingDirectory:"packages/libs/contracts-spec",deterministic:!0,expectedIntegrationSha:c}}}export const AGENTPACK_AI_AUDIT_FIXTURE_INTEGRATION_SHA=c;

package/dist/node/agentpacks/evidence-schema-primitives.js

@@ -0,0 +1 @@
+import{z as e}from"zod";const o=/^[a-f0-9]{64}$/,a=/^[a-f0-9]{40}$/,c=/^(?!\/)(?!.*(?:^|\/)\.\.?\/(?:|$))(?!.*\\).+$/,d=/^(?:authorization|credential|password|passphrase|privateKey|secret|token|apiKey)$/i,p=/(?:-----BEGIN [A-Z ]*PRIVATE KEY-----|\b(?:ghp|glpat|sk|xox[baprs])[_-][A-Za-z0-9-]{8,}|\b(?:api[_-]?key|password|secret|token)\s*[:=]\s*\S+)/i;export const agentpackSha256Schema=e.string().regex(o),agentpackIntegrationShaSchema=e.string().regex(a),agentpackRelativePathSchema=e.string().min(1).regex(c,"Expected a normalized relative path"),agentpackDigestV1Schema=e.strictObject({algorithm:e.literal("sha256"),value:agentpackSha256Schema}),agentpackEvidenceRefV1Schema=e.strictObject({id:e.string().min(1),kind:e.enum(["file","connect-decision","replay","test","command-output"]),path:agentpackRelativePathSchema,digest:agentpackDigestV1Schema});const u=e.strictObject({status:e.literal("not-required"),removedPaths:e.tuple([]),evidenceRefs:e.tuple([])}),m=e.strictObject({status:e.literal("applied"),removedPaths:e.array(agentpackRelativePathSchema).min(1),evidenceRefs:e.array(agentpackEvidenceRefV1Schema).min(1)}).superRefine((t,s)=>addSortedUniqueIssue(t.removedPaths,s,["removedPaths"],"Redacted paths"));export const agentpackRedactionV1Schema=e.discriminatedUnion("status",[u,m]),agentpackDeterministicInstantV1Schema=e.strictObject({policy:e.enum(["source-date-epoch","fixed-fixture"]),generatedAt:e.string().datetime({offset:!0}),sourceValue:e.string().min(1)}).superRefine((t,s)=>{if((t.policy==="source-date-epoch"?g(t.sourceValue):t.sourceValue)!==t.generatedAt)s.addIssue({code:e.ZodIssueCode.custom,message:"generatedAt does not match its deterministic source policy",path:["generatedAt"]})});function g(t){if(!/^\d+$/.test(t))return;const s=Number(t)*1000;if(!Number.isSafeInteger(s))return;const r=new Date(s);return Number.isNaN(r.getTime())?void 0:r.toISOString()}export function addSecretMaterialIssue(t,s,r=[]){if(typeof t==="string"&&p.test(t)){s.addIssue({code:e.ZodIssueCode.custom,message:"Secret-like material is forbidden in agentpack evidence",path:r});return}if(Array.isArray(t)){t.forEach((i,n)=>addSecretMaterialIssue(i,s,[...r,n]));return}if(!t||typeof t!=="object")return;for(const[i,n]of Object.entries(t)){if(d.test(i))s.addIssue({code:e.ZodIssueCode.custom,message:`Secret-bearing field is forbidden: ${i}`,path:[...r,i]});addSecretMaterialIssue(n,s,[...r,i])}}export function addSortedUniqueIssue(t,s,r,i){const n=[...new Set(t)].sort();if(JSON.stringify(t)!==JSON.stringify(n))s.addIssue({code:e.ZodIssueCode.custom,message:`${i} must be sorted and unique`,path:r})}

package/dist/node/agentpacks/evidence-trace-validation.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{digestAgentpackGenerationTraceManifestV1 as l}from"./evidence-canonicalization.js";import{addSecretMaterialIssue as p,addSortedUniqueIssue as o,agentpackDeterministicInstantV1Schema as u,agentpackDigestV1Schema as d,agentpackEvidenceRefV1Schema as c,agentpackRedactionV1Schema as h,agentpackRelativePathSchema as m}from"./evidence-schema-primitives.js";import{agentpackFeatureKindSchema as y,agentpackLossPolicySchema as b,agentpackTargetCapabilityStatusSchema as k,agentpackToolTargetIdSchema as f}from"./validation.js";const I=e.strictObject({featureUnitId:e.string().min(1),sourcePath:m,schemaRefs:e.array(e.string().min(1)).min(1),sharedInvariant:e.string().min(1),sourceDigest:d}),S=e.strictObject({targetId:f,baseDir:m,artifactPath:m,action:e.enum(["create","update","delete","skip"])}),v=e.strictObject({code:e.string().min(1),severity:e.enum(["info","warning","blocking"]),message:e.string().min(1),unsupportedCapability:e.string().min(1).optional(),evidenceRefs:e.array(c).min(1)}),R=e.strictObject({targetId:f,featureKind:y,status:k,evidenceRefs:e.array(c).min(1)}),C=e.strictObject({decisionRef:c,replayRef:c}).superRefine((t,s)=>{if(t.decisionRef.kind!=="connect-decision")s.addIssue({code:e.ZodIssueCode.custom,message:"decisionRef must be Connect decision evidence",path:["decisionRef","kind"]});if(t.replayRef.kind!=="replay")s.addIssue({code:e.ZodIssueCode.custom,message:"replayRef must be replay evidence",path:["replayRef","kind"]})});export const agentpackGeneratedArtifactTraceV1Schema=e.strictObject({schema:e.literal("contractspec.agentpacks.generated-artifact-trace"),version:e.literal("1.0.0"),id:e.string().min(1),sources:e.array(I).min(1),target:S,transform:e.strictObject({kind:e.enum(["copy","merge","schema-map","sidecar-trace","manual"]),lossPolicy:b,diagnostics:e.array(v)}),capabilityEvidence:e.array(R).min(1),artifactDigest:d,connect:C,redaction:h,generatedAt:u}).superRefine((t,s)=>{o(t.sources.map(({featureUnitId:a,sourcePath:i})=>`${a}:${i}`),s,["sources"],"Source bindings");const g=t.target.baseDir==="."?"":`${t.target.baseDir}/`;if(!t.target.artifactPath.startsWith(g))s.addIssue({code:e.ZodIssueCode.custom,message:"artifactPath must be contained by target baseDir",path:["target","artifactPath"]});const r=t.capabilityEvidence.some((a)=>a.status==="blocked"||a.status==="ignored-by-design"),n=t.transform.diagnostics.some((a)=>a.severity!=="info"&&a.unsupportedCapability);if((r||t.target.action==="skip")&&!n)s.addIssue({code:e.ZodIssueCode.custom,message:"Blocked or skipped outputs require an unsupported diagnostic",path:["transform","diagnostics"]});for(const[a,i]of t.capabilityEvidence.entries())if(i.targetId!==t.target.targetId)s.addIssue({code:e.ZodIssueCode.custom,message:"Capability evidence target must match artifact target",path:["capabilityEvidence",a,"targetId"]});p(t,s)}),agentpackGenerationTraceManifestV1Schema=e.strictObject({schema:e.literal("contractspec.agentpacks.generation-trace-manifest"),version:e.literal("1.0.0"),id:e.string().min(1),traces:e.array(agentpackGeneratedArtifactTraceV1Schema).min(1),manifestDigest:d,generatedAt:u}).superRefine((t,s)=>{o(t.traces.map(({id:a})=>a),s,["traces"],"Trace ids");o(t.traces.map(({target:a})=>a.artifactPath),s,["traces"],"Artifact paths");for(const[a,i]of t.traces.entries())if(JSON.stringify(i.generatedAt)!==JSON.stringify(t.generatedAt))s.addIssue({code:e.ZodIssueCode.custom,message:"Trace and manifest generatedAt policies must match",path:["traces",a,"generatedAt"]});const{manifestDigest:g,...r}=t,n=l(r);if(t.manifestDigest.value!==n.value)s.addIssue({code:e.ZodIssueCode.custom,message:"manifestDigest does not match canonical manifest content",path:["manifestDigest","value"]});p(t,s)});

package/dist/node/agentpacks/evidence-validation.js

@@ -0,0 +1 @@
+import{addIntegrationShaIssue as i,agentpackAiAuditReceiptV1Schema}from"./evidence-audit-validation.js";import{agentpackGeneratedArtifactTraceV1Schema,agentpackGenerationTraceManifestV1Schema}from"./evidence-trace-validation.js";export{agentpackAiAuditReceiptV1Schema,agentpackGeneratedArtifactTraceV1Schema,agentpackGenerationTraceManifestV1Schema};export function validateAgentpackGeneratedArtifactTraceV1(e){return agentpackGeneratedArtifactTraceV1Schema.parse(e)}export function validateAgentpackGenerationTraceManifestV1(e){return agentpackGenerationTraceManifestV1Schema.parse(e)}export function validateAgentpackAiAuditReceiptV1(e,t){return agentpackAiAuditReceiptV1Schema.superRefine((n,c)=>i(n,t,c)).parse(e)}export function isAgentpackAiAuditReceiptV1(e,t){return r(e,t).success}function r(e,t){return agentpackAiAuditReceiptV1Schema.superRefine((a,n)=>i(a,t,n)).safeParse(e)}

package/dist/node/agentpacks/index.js

@@ -0,0 +1 @@
+import{agentpackFeatureUnitGraphSchema as i,agentpackFeatureUnitSchema as r,agentpackGenerationTargetSchema as o,agentpackGuidancePackSchema as c,agentpackGuidanceUnitSchema as d,agentpackTargetAliasSchema as p}from"./validation.js";export*from"./evidence-canonicalization.js";export*from"./evidence-fixtures.js";export*from"./evidence-types.js";export*from"./evidence-validation.js";export*from"./types.js";export*from"./validation.js";export const AGENTPACK_TARGET_IDENTITIES=[{id:"opencode",name:"OpenCode",aliases:["opencode"],promptVariant:"codex"},{id:"cursor",name:"Cursor",aliases:["cursor"],promptVariant:void 0},{id:"claudecode",name:"Claude Code",aliases:["claudecode","claude-code","claude"],promptVariant:"claude"},{id:"codexcli",name:"Codex CLI",aliases:["codexcli","codex-cli","codex"],promptVariant:"codex"},{id:"mistralvibe",name:"Mistral Vibe",aliases:["mistralvibe","mistral-vibe","mistral"],promptVariant:void 0},{id:"geminicli",name:"Gemini CLI",aliases:["geminicli","gemini-cli","gemini"],promptVariant:void 0},{id:"copilot",name:"GitHub Copilot",aliases:["copilot"],promptVariant:void 0},{id:"cline",name:"Cline",aliases:["cline"],promptVariant:void 0},{id:"kilo",name:"Kilo Code",aliases:["kilo"],promptVariant:void 0},{id:"roo",name:"Roo Code",aliases:["roo"],promptVariant:void 0},{id:"qwencode",name:"Qwen Code",aliases:["qwencode","qwen-code","qwen"],promptVariant:void 0},{id:"kiro",name:"Kiro",aliases:["kiro"],promptVariant:void 0},{id:"factorydroid",name:"Factory Droid",aliases:["factorydroid","factory-droid","factory"],promptVariant:void 0},{id:"antigravity",name:"Antigravity",aliases:["antigravity"],promptVariant:void 0},{id:"junie",name:"Junie",aliases:["junie"],promptVariant:void 0},{id:"augmentcode",name:"Augment Code",aliases:["augmentcode","augment-code","augment"],promptVariant:void 0},{id:"windsurf",name:"Windsurf",aliases:["windsurf"],promptVariant:void 0},{id:"warp",name:"Warp",aliases:["warp"],promptVariant:void 0},{id:"replit",name:"Replit",aliases:["replit"],promptVariant:void 0},{id:"zed",name:"Zed",aliases:["zed"],promptVariant:void 0}],AGENTPACK_TARGET_VARIANT_MAP={"claude-code":"claude","codex-cli":"codex",opencode:"codex"};const s=new Map(AGENTPACK_TARGET_IDENTITIES.flatMap((e)=>e.aliases.map((a)=>[a,e.id])));export function normalizeAgentpackTargetId(e){const a=p.parse(e),n=s.get(a);if(!n)throw Error(`Unknown agentpack target alias: ${e}`);return n}export function resolveAgentpackPromptVariant(e){return AGENTPACK_TARGET_VARIANT_MAP[o.parse(e)]}export function resolveAgentpackPromptVariantForTarget(e){const a=normalizeAgentpackTargetId(e);return AGENTPACK_TARGET_IDENTITIES.find((n)=>n.id===a)?.promptVariant}export function defineAgentpackGuidanceUnit(e){return d.parse(e)}export function defineAgentpackGuidancePack(e){return c.parse(e)}export function defineAgentpackFeatureUnit(e){return r.parse(e)}export function defineAgentpackFeatureUnitGraph(e){return i.parse(e)}export function guidanceUnitToProseFeatureUnit(e){return defineAgentpackFeatureUnit({id:e.id,kind:"rule",title:e.title,targets:e.appliesTo?.map((a)=>{if(a==="claude")return"claude-code";if(a==="codex")return"codex-cli";return a}),meaningful:e.meaningful,variants:{sharedInvariant:e.sharedInvariant,claude:e.variants.claude,codex:e.variants.codex,fallbackPolicy:"codex-for-opencode"},connect:e.connect,metadata:{...e.metadata,legacyGuidanceUnit:!0}})}export function selectAgentpackGuidanceVariant(e,a){const n=resolveAgentpackPromptVariant(a),t=e.variants[n];if(!t)throw Error(`Agentpack guidance unit "${e.id}" does not define a ${n} variant for target "${a}"`);return t}export function selectCodexCompatibleAgentpackGuidanceVariant(e,a){return selectAgentpackGuidanceVariant(e,a)}

package/dist/node/agentpacks/validation.js

@@ -0,0 +1 @@
+import{z as e}from"zod";export const agentpackPromptVariantSchema=e.enum(["claude","codex"]),agentpackGenerationTargetSchema=e.enum(["claude-code","codex-cli","opencode"]),agentpackToolTargetIdSchema=e.enum(["opencode","cursor","claudecode","codexcli","mistralvibe","geminicli","copilot","cline","kilo","roo","qwencode","kiro","factorydroid","antigravity","junie","augmentcode","windsurf","warp","replit","zed"]),agentpackTargetAliasSchema=e.union([agentpackToolTargetIdSchema,agentpackGenerationTargetSchema,e.enum(["claude","codex","gemini-cli","gemini","mistral-vibe","mistral","qwen-code","qwen","factory-droid","factory","augment-code","augment"])]),agentpackFeatureKindSchema=e.enum(["rule","agent","command","skill","hook","mcp","modelProfile","plugin","ignore","asset","manifest","doc"]),agentpackLossPolicySchema=e.enum(["unsupported-block","ignored-by-design","manual-action-required","lossy-transform-reviewed"]),agentpackTargetCapabilityStatusSchema=e.enum(["native","transformed","ignored-by-design","blocked"]),agentpackTargetIdentitySchema=e.object({id:agentpackToolTargetIdSchema,name:e.string().min(1),aliases:e.array(agentpackTargetAliasSchema).min(1),promptVariant:agentpackPromptVariantSchema.optional()}),agentpackTargetFeatureCapabilitySchema=e.object({targetId:agentpackToolTargetIdSchema,featureKind:agentpackFeatureKindSchema,status:agentpackTargetCapabilityStatusSchema,lossPolicy:agentpackLossPolicySchema.optional(),reason:e.string().min(1).optional(),evidenceRefs:e.array(e.string().min(1)).optional()}).superRefine((a,t)=>{if((a.status==="blocked"||a.status==="ignored-by-design")&&!a.lossPolicy)t.addIssue({code:e.ZodIssueCode.custom,message:"Blocked or ignored target capabilities must declare a loss policy",path:["lossPolicy"]})}),agentpackTargetCapabilityMatrixSchema=e.object({targets:e.array(agentpackToolTargetIdSchema).min(1),featureKinds:e.array(agentpackFeatureKindSchema).min(1),capabilities:e.array(agentpackTargetFeatureCapabilitySchema).min(1)}).superRefine((a,t)=>{const i=new Set;for(const n of a.capabilities){const o=`${n.targetId}:${n.featureKind}`;if(i.has(o))t.addIssue({code:e.ZodIssueCode.custom,message:`Duplicate target capability entry: ${o}`,path:["capabilities"]});i.add(o)}for(const n of a.targets)for(const o of a.featureKinds){const r=`${n}:${o}`;if(!i.has(r))t.addIssue({code:e.ZodIssueCode.custom,message:`Missing target capability entry: ${r}`,path:["capabilities"]})}}),agentpackGuidanceApplicabilitySchema=e.union([agentpackPromptVariantSchema,agentpackGenerationTargetSchema]),agentpackGuidanceExampleSchema=e.object({id:e.string().min(1),title:e.string().min(1).optional(),input:e.string().min(1).optional(),output:e.string().min(1),notes:e.string().min(1).optional()}),agentpackCommandGuidanceSchema=e.object({command:e.string().min(1),purpose:e.string().min(1),when:e.string().min(1).optional(),success:e.string().min(1).optional()}),agentpackClaudeGuidanceVariantSchema=e.object({content:e.string().min(1),thinking:e.array(e.string().min(1)).optional(),tasteConstraints:e.array(e.string().min(1)).optional(),decisionCriteria:e.array(e.string().min(1)).optional(),examples:e.array(agentpackGuidanceExampleSchema).optional(),ambiguityReducers:e.array(e.string().min(1)).optional()}),agentpackCodexGuidanceVariantSchema=e.object({content:e.string().min(1),operationalConstraints:e.array(e.string().min(1)).optional(),successCriteria:e.array(e.string().min(1)).optional(),commands:e.array(agentpackCommandGuidanceSchema).optional(),degreeOfFreedomReducers:e.array(e.string().min(1)).optional()}),agentpackGuidanceVariantsSchema=e.object({claude:agentpackClaudeGuidanceVariantSchema.optional(),codex:agentpackCodexGuidanceVariantSchema.optional()}),agentpackProseVariantSetSchema=e.object({sharedInvariant:e.string().min(1),claude:agentpackClaudeGuidanceVariantSchema.optional(),codex:agentpackCodexGuidanceVariantSchema.optional(),opencode:agentpackCodexGuidanceVariantSchema.optional(),fallbackPolicy:e.enum(["require-explicit","codex-for-opencode","legacy-body"]).optional(),targetOnlyRationale:e.string().min(1).optional()}),agentpackStructuralTransformSchema=e.object({sourceSchemaRef:e.string().min(1),targetCapabilities:e.array(agentpackTargetFeatureCapabilitySchema).min(1),transformKind:e.enum(["copy","merge","schema-map","sidecar-trace","manual"]),lossPolicy:agentpackLossPolicySchema,validationEvidenceRefs:e.array(e.string().min(1)).optional()}),agentpackFeatureTraceSchema=e.object({id:e.string().min(1),sourcePath:e.string().min(1),packName:e.string().min(1),targetPaths:e.array(e.string().min(1)).optional(),invariantRef:e.string().min(1).optional(),schemaRefs:e.array(e.string().min(1)).optional(),migrationOrigin:e.enum(["file-adapter","typed-source","generated","legacy-import"]).optional()}),agentpackParityScenarioStatusSchema=e.enum(["draft","accepted","rejected","stale"]),agentpackParityScenarioSchema=e.object({id:e.string().min(1),prompt:e.string().min(1),expectedOutcomeInvariant:e.string().min(1),claudeOutcome:e.string().min(1).optional(),codexOutcome:e.string().min(1).optional(),status:agentpackParityScenarioStatusSchema.default("draft")}),agentpackSchemaFacetLinkSchema=e.object({id:e.string().min(1),description:e.string().min(1),schemaRef:e.string().min(1).optional(),required:e.boolean().default(!0)}),agentpackContradictionCheckSchema=e.object({id:e.string().min(1),description:e.string().min(1),severity:e.enum(["warning","blocking"])}),agentpackConnectEvidenceRequirementsSchema=e.object({parityScenarios:e.array(agentpackParityScenarioSchema).min(1),schemaFacets:e.array(agentpackSchemaFacetLinkSchema).optional(),contradictionChecks:e.array(agentpackContradictionCheckSchema).optional(),replayArtifactRefs:e.array(e.string().min(1)).optional()}),agentpackProseFeatureUnitSchema=e.object({id:e.string().min(1),kind:e.enum(["rule","agent","command","skill","doc"]),title:e.string().min(1).optional(),packName:e.string().min(1).optional(),sourcePath:e.string().min(1).optional(),targets:e.union([e.literal("*"),e.array(agentpackTargetAliasSchema)]).optional(),trace:agentpackFeatureTraceSchema.optional(),metadata:e.record(e.string(),e.unknown()).optional(),meaningful:e.boolean().default(!0),variants:agentpackProseVariantSetSchema,connect:agentpackConnectEvidenceRequirementsSchema.optional()}).superRefine((a,t)=>{if(!a.meaningful)return;if(!a.variants.targetOnlyRationale&&!a.variants.claude)t.addIssue({code:e.ZodIssueCode.custom,message:"Meaningful prose feature units must include a Claude variant",path:["variants","claude"]});if(!a.variants.targetOnlyRationale&&!a.variants.codex)t.addIssue({code:e.ZodIssueCode.custom,message:"Meaningful prose feature units must include a Codex/GPT variant",path:["variants","codex"]})}),agentpackStructuralFeatureUnitSchema=e.object({id:e.string().min(1),kind:e.enum(["hook","mcp","modelProfile","plugin","ignore","asset","manifest"]),title:e.string().min(1).optional(),packName:e.string().min(1).optional(),sourcePath:e.string().min(1).optional(),targets:e.union([e.literal("*"),e.array(agentpackTargetAliasSchema)]).optional(),trace:agentpackFeatureTraceSchema.optional(),metadata:e.record(e.string(),e.unknown()).optional(),transform:agentpackStructuralTransformSchema}),agentpackFeatureUnitSchema=e.discriminatedUnion("kind",[agentpackProseFeatureUnitSchema,agentpackStructuralFeatureUnitSchema]),agentpackFeatureUnitGraphSchema=e.object({id:e.string().min(1),version:e.string().min(1),units:e.array(agentpackFeatureUnitSchema).min(1),capabilityMatrix:agentpackTargetCapabilityMatrixSchema,traces:e.array(agentpackFeatureTraceSchema).optional(),metadata:e.record(e.string(),e.unknown()).optional()}).superRefine((a,t)=>{const i=new Set;for(const n of a.units){if(i.has(n.id))t.addIssue({code:e.ZodIssueCode.custom,message:`Duplicate feature unit id: ${n.id}`,path:["units"]});i.add(n.id)}}),agentpackGuidanceUnitSchema=e.object({id:e.string().min(1),title:e.string().min(1),sharedInvariant:e.string().min(1),meaningful:e.boolean().default(!0),appliesTo:e.array(agentpackGuidanceApplicabilitySchema).optional(),variants:agentpackGuidanceVariantsSchema,connect:agentpackConnectEvidenceRequirementsSchema,metadata:e.record(e.string(),e.unknown()).optional()}).superRefine((a,t)=>{if(!a.meaningful)return;if(!a.variants.claude)t.addIssue({code:e.ZodIssueCode.custom,message:"Meaningful guidance units must include a Claude variant",path:["variants","claude"]});if(!a.variants.codex)t.addIssue({code:e.ZodIssueCode.custom,message:"Meaningful guidance units must include a Codex/GPT variant",path:["variants","codex"]})}),agentpackGuidancePackSchema=e.object({id:e.string().min(1),title:e.string().min(1),version:e.string().min(1),units:e.array(agentpackGuidanceUnitSchema).min(1),aliases:e.array(e.string().min(1)).optional(),metadata:e.record(e.string(),e.unknown()).optional()});

package/dist/node/ai-improvement/contracts-v2.js

@@ -0,0 +1 @@
+export const OPERATIONAL_IMPROVEMENT_SIGNAL_V1="contractspec.operational-improvement-signal.v1",IMPROVEMENT_OBSERVATION_PLAN_V1="contractspec.improvement-observation-plan.v1",IMPROVEMENT_OBSERVATION_RESULT_V1="contractspec.improvement-observation-result.v1",AUTOMATION_RISK_DECISION_V1="contractspec.automation-risk-decision.v1",PATCH_RUN_RECEIPT_V1="contractspec.patch-run-receipt.v1",AI_IMPROVEMENT_WORK_ORDER_V2="contractspec.ai-improvement-work-order.v2",aiImprovementV2DocBlock={id:"ai-improvement-v2",title:"Governed adaptive improvement V2",body:"Versioned contracts for sanitized operational signals, explicit canary observation, deterministic automation risk, provider patch receipts, and work orders with an observing stage. V1 contracts remain unchanged. Operational signals carry metadata and evidence only; raw prompts, payloads, credentials, and personal data are outside this contract.",kind:"reference",route:"packages/libs/contracts-spec/src/ai-improvement/contracts-v2.ts",visibility:"public"};

package/dist/node/ai-improvement/evidence.js

@@ -0,0 +1 @@
+export const aiImprovementRequiredCapabilityIds=["routeDecisionId","providerReceiptId","traceId","spanId","redactionDecisionId","meteringEventId","feedbackId","evaluationRunId","failureAnalysisId","proposalId","experimentId","trainingJobId","promotionId","rollbackId","learnedRuleId"];export function missingAiImprovementEvidence(e){const n=new Set(e.map((i)=>i.kind));return aiImprovementRequiredCapabilityIds.filter((i)=>!n.has(i))}export function hasCompleteAiImprovementEvidence(e){return missingAiImprovementEvidence(e).length===0}export function hasPolicyAwareFineTuningTrace(e){return e.sanitized===!0&&e.evidence.length>0&&e.evidence.every((n)=>Boolean(n.ontologyRef)&&Boolean(n.evidenceReceiptRef)&&Boolean(n.redactionDecisionRef)&&Boolean(n.policyDecisionRef))}

package/dist/node/ai-improvement/index.js

@@ -0,0 +1 @@
+export*from"./contracts-v2.js";export*from"./evidence.js";export*from"./policy.js";export*from"./types.js";export*from"./validation.js";export*from"./validation-v2.js";

package/dist/node/ai-improvement/policy.js

@@ -0,0 +1 @@
+const l={low:0,medium:1,high:2,critical:3},s=new Set(["dataset_export","public_contract","runtime_policy","model_checkpoint"]);export function classifyAiImprovementRisk(e,i="medium"){return s.has(e)?"high":i}export function mergeAiImprovementPolicy(e,i={}){const n=e.length>0?e:[defaultAiImprovementPolicyRule],t=n.reduce((o,a)=>l[a.riskFloor]>l[o]?a.riskFloor:o,"low"),p=Array.from(new Set(n.flatMap((o)=>o.requiredEvidenceKinds))).sort(),m=Object.entries(i).filter(([,o])=>o).map(([o])=>o);return{level:t,allowVendorExport:n.every((o)=>o.allowVendorExport)&&!i.vendorExport,allowAutoApply:n.every((o)=>o.allowAutoApply)&&!i.autoApply,allowLearning:n.every((o)=>o.allowLearning)&&!i.learning,requiresHumanApproval:l[t]>=l.high,requiredEvidenceKinds:p,deniedByKillSwitches:m}}export const defaultAiImprovementPolicyRule={id:"ai-improvement.baseline.v1",riskFloor:"medium",allowVendorExport:!1,allowAutoApply:!1,allowLearning:!1,requiredEvidenceKinds:["policy","replay","rollback","tests"]};function r(e){return e===!0||e==="off"}export function resolveAiImprovementKillSwitches(e={}){return{autoApply:r(e.autoApply),vendorExport:r(e.vendorExport),learning:r(e.learning),adapterDisabled:r(e.adapterDisabled)}}export function canAutoApplyAiImprovement(e,i){return e.allowAutoApply&&!e.requiresHumanApproval&&i.testsPassed&&Boolean(i.rollbackId)&&Boolean(i.versionId)}

package/dist/node/ai-improvement/validation-v2.js

@@ -0,0 +1 @@
+import{z as e}from"zod";import{AI_IMPROVEMENT_WORK_ORDER_V2 as l,AUTOMATION_RISK_DECISION_V1 as d,IMPROVEMENT_OBSERVATION_PLAN_V1 as m,IMPROVEMENT_OBSERVATION_RESULT_V1 as u,OPERATIONAL_IMPROVEMENT_SIGNAL_V1 as p,PATCH_RUN_RECEIPT_V1 as b}from"./contracts-v2.js";import{aiImprovementCapabilityIdSchema as _}from"./validation.js";const t=e.string().trim().min(1),i=t,n=e.number().int().nonnegative(),o=e.number().int().positive(),s=e.object({kind:_,id:t,sourcePackage:t,replayRef:e.object({id:t,uri:t,artifactHash:t.optional(),createdAt:i}).optional(),ontologyRef:t.optional()}).strict(),a={schemaVersion:e.literal(p),id:t,lane:t,tenantId:t,workspaceId:t,sourcePackage:t,traceId:t,redactionDecisionId:t,occurredAt:i,sanitized:e.literal(!0),evidence:e.array(s)};export const operationalImprovementSignalV1Schema=e.discriminatedUnion("kind",[e.object({...a,kind:e.literal("user_feedback"),feedbackId:t,consentGranted:e.literal(!0),sentiment:e.enum(["positive","negative","neutral"])}).strict(),e.object({...a,kind:e.literal("operational_metric"),metricKey:t,unit:e.enum(["count","rate","milliseconds","currency"]),baselineValue:e.number().finite(),observedValue:e.number().finite(),sampleCount:n,windowStartedAt:i,windowEndedAt:i}).strict(),e.object({...a,kind:e.literal("runtime_failure"),failureCode:t,fingerprintHash:t,retryable:e.boolean()}).strict(),e.object({...a,kind:e.literal("evaluation_failure"),evaluationRunId:t,failedCheckIds:e.array(t).min(1)}).strict(),e.object({...a,kind:e.literal("operator_correction"),correctionId:t,actorRefHash:t,reasonCode:t}).strict()]);const h=e.object({key:t,direction:e.enum(["higher_is_better","lower_is_better","zero_tolerance"]),baselineValue:e.number().finite(),maximumRelativeRegression:e.number().min(0).max(1),absoluteThreshold:e.number().finite().optional()}).strict();export const improvementObservationPlanV1Schema=e.object({schemaVersion:e.literal(m),id:t,windowMs:o,timeoutMs:o,minSampleCount:o,missingDataAction:e.enum(["rollback","require_review"]),metrics:e.array(h).min(1)}).strict().superRefine((r,c)=>{if(r.timeoutMs<r.windowMs)c.addIssue({code:"custom",message:"timeoutMs must be greater than or equal to windowMs",path:["timeoutMs"]})}),improvementObservationResultV1Schema=e.object({schemaVersion:e.literal(u),planId:t,status:e.enum(["pending","healthy","degraded","insufficient_data"]),sampleCount:n,startedAt:i,observedAt:i,completedAt:i.optional(),metrics:e.array(e.object({key:t,baselineValue:e.number().finite(),observedValue:e.number().finite(),relativeRegression:e.number().finite(),passed:e.boolean()}).strict()),evidence:e.array(s)}).strict(),automationRiskDecisionV1Schema=e.object({schemaVersion:e.literal(d),classification:e.enum(["low","medium","high","unknown"]),autoMergeAllowed:e.boolean(),exactBaseRevision:t,fileCount:n,changedLineCount:n,killSwitchKey:t.optional(),reasonCodes:e.array(e.enum(["eligible","diff_too_large","stale_base","missing_kill_switch","protected_contract","protected_data_authority","protected_effect_boundary","protected_security_boundary","protected_delivery_boundary","unknown_change","required_check_failed"])).min(1),decidedAt:i}).strict(),patchRunReceiptV1Schema=e.object({schemaVersion:e.literal(b),id:t,baseRevision:t,headRevision:t,preimageHash:t,patchHash:t,allowedPaths:e.array(t).min(1),providerAttempts:e.array(e.object({provider:e.enum(["codex","opencode-go"]),status:e.enum(["succeeded","unavailable","timed_out","nonconforming"]),receiptRef:t,startedAt:i,completedAt:i}).strict()).min(1),connectDecisionIds:e.array(t).min(1),checkReceiptRefs:e.array(t).min(1),rollbackRef:t,riskDecision:automationRiskDecisionV1Schema,createdAt:i}).strict(),aiImprovementWorkOrderV2Schema=e.object({schemaVersion:e.literal(l),id:t,revision:o,status:e.enum(["queued","proposing","evaluating","awaiting_approval","canary","observing","promoted","rejected","rolled_back","expired","failed"]),signal:operationalImprovementSignalV1Schema,observationPlan:improvementObservationPlanV1Schema,observationResult:improvementObservationResultV1Schema.optional(),patchRunReceipt:patchRunReceiptV1Schema.optional(),createdAt:i,updatedAt:i,dueAt:i,expiresAt:i}).strict();

package/dist/node/ai-improvement/validation.js

@@ -0,0 +1 @@
+import{z as e}from"zod";export const aiImprovementCapabilityIdSchema=e.enum(["routeDecisionId","providerReceiptId","traceId","spanId","redactionDecisionId","meteringEventId","feedbackId","evaluationRunId","failureAnalysisId","proposalId","experimentId","trainingJobId","promotionId","rollbackId","learnedRuleId"]),aiImprovementRiskLevelSchema=e.enum(["low","medium","high","critical"]),aiImprovementReplayRefSchema=e.object({id:e.string().min(1),uri:e.string().min(1),artifactHash:e.string().min(1).optional(),createdAt:e.string().min(1)}),aiImprovementEnvelopeSchema=e.object({id:e.string().min(1),compatibilityIntent:e.enum(["additive high-risk","additive","breaking-with-migration"]),policyRefs:e.array(e.object({id:e.string().min(1),version:e.string().min(1),scope:e.enum(["baseline","domain","package","tenant","adapter"])})),risk:e.object({level:aiImprovementRiskLevelSchema,changeKind:e.enum(["prompt","provider_route","model_checkpoint","dataset_export","public_contract","runtime_policy","memory_rule"]),reason:e.string().min(1),requiresHumanApproval:e.boolean()}),evidence:e.array(e.object({kind:aiImprovementCapabilityIdSchema,id:e.string().min(1),sourcePackage:e.string().min(1),replayRef:aiImprovementReplayRefSchema.optional()})),replay:aiImprovementReplayRefSchema,killSwitches:e.object({autoApply:e.boolean().optional(),vendorExport:e.boolean().optional(),learning:e.boolean().optional(),adapterDisabled:e.boolean().optional()}).default({}),vendor:e.object({id:e.string().min(1),adapterPackage:e.string().min(1)}).optional()}),aiImprovementFineTuningTraceSchema=e.object({id:e.string().min(1),workOrderRef:e.string().min(1),trainingTraceRef:e.string().min(1),createdAt:e.string().min(1),sanitized:e.literal(!0),allowVendorExport:e.boolean(),allowLearning:e.boolean(),evidence:e.array(e.object({id:e.string().min(1),ontologyRef:e.string().min(1),evidenceReceiptRef:e.string().min(1),redactionDecisionRef:e.string().min(1),policyDecisionRef:e.string().min(1),sourcePackage:e.string().min(1)}))});

package/dist/node/app-config/app-config.capability.js

@@ -0,0 +1 @@
+import{defineCapability as i}from"../capabilities/index.js";import{OwnersEnum as t,StabilityEnum as a,TagsEnum as e}from"../ownership.js";export const AppConfigCapability=i({meta:{key:"app-config",version:"1.0.0",title:"App Configuration Capability",description:"Provides tenant app configuration lifecycle management.",domain:"platform",owners:[t.PlatformSigil],tags:[e.Hygiene],kind:"api",stability:a.Stable},provides:[],requires:[]});