@m8t-stack/api-contract 0.1.0

package/dist/esm/brain-eval.d.ts

@@ -0,0 +1,295 @@
+export type EvalDecision = "promote" | "reject" | "needs_review";
+export type EvalJudgeStatus = "ok" | "skipped" | "unavailable";
+export interface EvalFinding {
+    code: string;
+    severity: "hard" | "soft";
+    message: string;
+    locus?: string | null;
+}
+export interface EvalJudgeResult {
+    overallScore: number;
+    critique: string;
+    model: string;
+    flags?: {
+        behavioralRisk: "pass" | "fail";
+        collision: boolean;
+        /** Per-tag provenance: true = the tag was absent/malformed in the critique and the
+         *  effective value above is a default. Any defaulted tag forces needs_review. */
+        defaulted?: {
+            safety: boolean;
+            collision: boolean;
+        };
+    } | null;
+    keyPoints?: string[] | null;
+}
+export interface Verdict {
+    candidatePath: string;
+    decision: EvalDecision;
+    rationale: string;
+    findings: EvalFinding[];
+    judge?: EvalJudgeResult | null;
+    judgeStatus: EvalJudgeStatus;
+    evaluatedAt: string;
+    evalVersion: string;
+}
+export type ArmState = "off" | "live" | {
+    pinned: string;
+} | {
+    imported: string;
+};
+export interface ArmSpec {
+    brain: string;
+    state: ArmState;
+    profile?: string;
+}
+export interface RunAssertion {
+    text: string;
+    passed: boolean;
+    evidence: string;
+    tagDefaulted?: boolean;
+}
+export interface MemoryReadEvent {
+    path?: string;
+    spanRef?: string;
+    tool?: "get_file_contents" | "search_code";
+    query?: string;
+}
+export type ReadVsApply = "never_read" | "index_seen_not_opened" | "read_not_applied" | "degraded";
+export interface ReadDiagnostic {
+    assertionId: string;
+    recallTarget?: string;
+    label: ReadVsApply;
+}
+export interface ConsolidationOutcome {
+    status: "ran" | "no_consolidation" | "not_runnable";
+    receipt?: string;
+    producedSha?: string;
+    reason?: string;
+}
+export interface RunCost {
+    tokens: number | null;
+    promptTokens?: number | null;
+    completionTokens?: number | null;
+    durationMs: number;
+}
+export interface RunResult {
+    taskId: string;
+    arm: ArmSpec;
+    rep: number;
+    runId: string;
+    assertions: RunAssertion[];
+    implicitClaims?: {
+        claim: string;
+        verified: boolean;
+    }[];
+    observe?: MemoryReadEvent[];
+    consolidation?: ConsolidationOutcome;
+    responseId?: string;
+    conversationId?: string;
+    readDiagnostics?: ReadDiagnostic[];
+    cost: RunCost;
+    runError?: {
+        reason: "content_filter" | "auth" | "not_found" | "rate_limit" | "transient" | "void" | "unknown";
+        message: string;
+    };
+}
+export type ExamType = "impact" | "dream_delta" | "tournament" | "continuity" | "recall_pr" | "forgetting" | "skill_abstraction";
+export type ExamRunStatus = "ok" | "partial" | "inconclusive_judge_error";
+export type ExamVerdictValue = "improved" | "no_detectable_change" | "regressed";
+/** One grader suite-critique line, attributed to the run's task AT THE SOURCE (DESIGN §7.6).
+ *  `text` may quote the sealed assertion TEXT verbatim and name NO taskId — so redaction MUST drop
+ *  by `taskId`, not by substring-matching the taskId inside `text` (the Law-1 sealed-text leak fix).
+ *  `taskId` is "" for suite-level entries that belong to no single task (e.g. a judge-outage note). */
+export interface SuiteCritiqueEntry {
+    taskId: string;
+    text: string;
+}
+export interface RecallMetrics {
+    precisionInterference: number;
+    recall: number;
+    staleWithholdRate: number;
+    privacyWithholdRate: number;
+    tp: number;
+    fp: number;
+    fn: number;
+    tn: number;
+    nPositive: number;
+    nNegInterference: number;
+    nNegStale: number;
+    nNegPrivacy: number;
+}
+export interface ArmAggregate {
+    arm: ArmSpec;
+    passRate: number;
+    stddev: number;
+    n: number;
+    runs: RunResult[];
+    recallMetrics?: RecallMetrics;
+}
+export interface ArmComparison {
+    baseline: ArmSpec;
+    candidate: ArmSpec;
+    flips: {
+        taskId: string;
+        direction: "gain" | "loss";
+        lowConfidence?: boolean;
+    }[];
+    nDiscordant: number;
+    nGain: number;
+    nLoss: number;
+    pValue: number;
+    significant: boolean;
+    delta: number;
+}
+export interface StatTestConfig {
+    test: "exact_sign";
+    alpha: number;
+    targetPower: number;
+    sided: "two";
+    repAggregation: "majority_vote";
+    significanceFloorDiscordant: 6;
+}
+export interface ExamVerdict {
+    examType: ExamType;
+    taskSetVersion: string;
+    rubricVersion: string;
+    evalVersion: string;
+    statTest: StatTestConfig;
+    runStatus: ExamRunStatus;
+    arms: ArmAggregate[];
+    comparisons?: ArmComparison[];
+    verdict: ExamVerdictValue | null;
+    powerNote: string;
+    suiteCritique: SuiteCritiqueEntry[];
+    evaluatedAt: string;
+    loaderSha?: string;
+    judgeDeployment?: string;
+}
+export interface RedactedArmAggregate {
+    arm: ArmSpec;
+    passRate: number;
+    stddev: number;
+    n: number;
+    runsRedacted: true;
+    recallMetrics?: RecallMetrics;
+}
+export interface RedactedExamVerdict extends Omit<ExamVerdict, "arms"> {
+    arms: RedactedArmAggregate[];
+    redacted: true;
+}
+export type TaskSlice = "dev" | "sealed";
+export type TaskShape = "single_shot" | "episode";
+export type AssertionPolarity = "must_hold" | "must_not_hold";
+export type PairingClass = "impact" | "dream_delta" | "control" | "recall_negative";
+export type SignoffStatus = "draft" | "proposed" | "approved" | "retired";
+export interface TaskAssertion {
+    id: string;
+    text: string;
+    polarity: AssertionPolarity;
+    recallTarget?: string;
+    negativeClass?: "interference" | "stale" | "privacy";
+}
+export interface SeedFile {
+    path: string;
+    content: string;
+}
+export type ConsolidationEdit = {
+    op: "capture";
+    path: string;
+    content: string;
+    evidence: string;
+} | {
+    op: "supersede";
+    path: string;
+    content: string;
+    supersedes: string;
+    evidence: string;
+} | {
+    op: "retract";
+    path: string;
+    reason: string;
+    evidence: string;
+};
+export interface ExamTask {
+    taskId: string;
+    taskSetVersion: string;
+    title: string;
+    slice: TaskSlice;
+    shape: TaskShape;
+    probe?: {
+        turn: string;
+    };
+    episode?: {
+        seedTurns: {
+            role: "user" | "assistant";
+            text: string;
+        }[];
+        consolidate: boolean;
+        probeTurns: {
+            role: "user" | "assistant";
+            text: string;
+        }[];
+        consolidationEffect?: ConsolidationEdit[];
+    };
+    seed?: {
+        files: SeedFile[];
+    };
+    armsApplicability: {
+        requires: string[];
+        appliesTo: string[];
+        pairingClass: PairingClass;
+    };
+    assertions: TaskAssertion[];
+    provenance: {
+        source: "transcript" | "spike_probe" | "synthetic";
+        sourceRefs: string[];
+        derivedBy: string;
+        contentFilterChecked: boolean;
+    };
+    signoff: {
+        status: SignoffStatus;
+        approvedBy?: string;
+        approvedAt?: string;
+        approvalRef?: string;
+    };
+}
+export interface TaskSetManifest {
+    taskSetVersion: string;
+    worker: string;
+    createdAt: string;
+    basedOnSpike?: string;
+    slices: {
+        dev: string[];
+        sealed: string[];
+    };
+    signoffRollup: {
+        approved: number;
+        pending: number;
+    };
+    calibrationTargets?: {
+        taskId: string;
+        spikeProbe: string;
+        expectedFlip: string;
+    }[];
+}
+/** The single exam grader-prose constant (DESIGN §7.6). Distinct from the gate's `f1.x` line.
+ *  Bump on ANY grader-prose change (criteria text, input builders, suite-critique prompt,
+ *  parser semantics); a bump resets the exam-side validation window. Pinned into
+ *  ExamVerdict.evalVersion on every verdict. */
+export declare const EXAM_EVAL_VERSION = "exam-f2.0";
+/**
+ * The ONLY permitted producer of an E1-facing feed from a full ExamVerdict (DESIGN §7.6 #1).
+ * Pure + total. Sealed-task runs collapse to aggregates; dev-only verdicts pass through
+ * UNCHANGED (identity). Strips ALL sealed-task TEXT (assertions, evidence, raw turns,
+ * implicitClaims, the runs[] array) AND drops any suiteCritique entry attributed to a
+ * sealed taskId — BY ID, not by substring-matching the taskId inside the text. A grader
+ * FEEDBACK line quotes the sealed assertion TEXT and may name no taskId at all, so a
+ * substring scan leaks it; id-based attribution (set on the entry at the source) closes
+ * the leak (the Law-1 sealed-text fix). KEEPS the version provenance
+ * (rubricVersion / evalVersion / loaderSha / judgeDeployment) — they name THAT something
+ * changed, not WHAT, and are public-safe (§7.6 #2). comparisons[].flips keep
+ * direction + taskId so per-task flip counts survive for the sign test.
+ * Returns RedactedExamVerdict iff ANY arm contains a sealed task, else the verdict unchanged.
+ */
+export declare function redactForFeed(verdict: ExamVerdict, sealedTaskIds: Set<string>): ExamVerdict | RedactedExamVerdict;
+//# sourceMappingURL=brain-eval.d.ts.map

package/dist/esm/brain-eval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brain-eval.d.ts","sourceRoot":"","sources":["../../src/brain-eval.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,GAAG,cAAc,CAAC;AACjE,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,SAAS,GAAG,aAAa,CAAC;AAE/D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE;QACN,cAAc,EAAE,MAAM,GAAG,MAAM,CAAC;QAChC,SAAS,EAAE,OAAO,CAAC;QACnB;yFACiF;QACjF,SAAS,CAAC,EAAE;YAAE,MAAM,EAAE,OAAO,CAAC;YAAC,SAAS,EAAE,OAAO,CAAA;SAAE,CAAC;KACrD,GAAG,IAAI,CAAC;IACT,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,OAAO;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,YAAY,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,KAAK,CAAC,EAAE,eAAe,GAAG,IAAI,CAAC;IAC/B,WAAW,EAAE,eAAe,CAAC;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAWD,MAAM,MAAM,QAAQ,GAChB,KAAK,GACL,MAAM,GACN;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAClB;IAAE,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzB,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAGlB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,mBAAmB,GAAG,aAAa,CAAC;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAGD,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,uBAAuB,GAAG,kBAAkB,GAAG,UAAU,CAAC;AACnG,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IAEnC,MAAM,EAAE,KAAK,GAAG,kBAAkB,GAAG,cAAc,CAAC;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,OAAO;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,YAAY,EAAE,CAAC;IAC3B,cAAc,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IACxD,OAAO,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5B,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,CAAC,EAAE;QAAE,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,WAAW,GAAG,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACnI;AAED,MAAM,MAAM,QAAQ,GAChB,QAAQ,GAAG,aAAa,GAAG,YAAY,GACvC,YAAY,GAAG,WAAW,GAAG,YAAY,GAAG,mBAAmB,CAAC;AAEpE,MAAM,MAAM,aAAa,GAAG,IAAI,GAAG,SAAS,GAAG,0BAA0B,CAAC;AAC1E,MAAM,MAAM,gBAAgB,GAAG,UAAU,GAAG,sBAAsB,GAAG,WAAW,CAAC;AAEjF;;;uGAGuG;AACvG,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAGD,MAAM,WAAW,aAAa;IAC5B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,OAAO,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,EAAE,MAAM,CAAC;IACV,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAC;IACjF,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,YAAY,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,KAAK,CAAC;IACb,cAAc,EAAE,eAAe,CAAC;IAChC,2BAA2B,EAAE,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,cAAc,CAAC;IACzB,SAAS,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,YAAY,EAAE,CAAC;IACrB,WAAW,CAAC,EAAE,aAAa,EAAE,CAAC;IAC9B,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,kBAAkB,EAAE,CAAC;IAGpC,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAID,MAAM,WAAW,oBAAoB;IACnC,GAAG,EAAE,OAAO,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,EAAE,MAAM,CAAC;IACV,YAAY,EAAE,IAAI,CAAC;IACnB,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAoB,SAAQ,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;IACpE,IAAI,EAAE,oBAAoB,EAAE,CAAC;IAC7B,QAAQ,EAAE,IAAI,CAAC;CAChB;AAID,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;AACzC,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,SAAS,CAAC;AAClD,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,eAAe,CAAC;AAC9D,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,aAAa,GAAG,SAAS,GAAG,iBAAiB,CAAC;AACpF,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,SAAS,CAAC;AAC1E,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,iBAAiB,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,cAAc,GAAG,OAAO,GAAG,SAAS,CAAC;CAGtD;AAGD,MAAM,WAAW,QAAQ;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;CAAE;AAC5D,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,SAAS,CAAC;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACpE;IAAE,EAAE,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,EAAE,EAAE,SAAS,CAAC;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAExE,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,SAAS,CAAC;IAC1F,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IACzB,OAAO,CAAC,EAAE;QACR,SAAS,EAAE;YAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC1D,WAAW,EAAE,OAAO,CAAC;QACrB,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,EAAE,CAAC;QAC3D,mBAAmB,CAAC,EAAE,iBAAiB,EAAE,CAAC;KAC3C,CAAC;IACF,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,QAAQ,EAAE,CAAA;KAAE,CAAC;IAC7B,iBAAiB,EAAE;QAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,YAAY,CAAA;KAAE,CAAC;IAC3F,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,UAAU,EAAE;QAAE,MAAM,EAAE,YAAY,GAAG,aAAa,GAAG,WAAW,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,oBAAoB,EAAE,OAAO,CAAA;KAAE,CAAC;IAC3I,OAAO,EAAE;QAAE,MAAM,EAAE,aAAa,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACpG;AACD,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IACjF,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC5C,aAAa,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,kBAAkB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACrF;AAED;;;gDAGgD;AAChD,eAAO,MAAM,iBAAiB,cAAc,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAC3B,OAAO,EAAE,WAAW,EACpB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,GACzB,WAAW,GAAG,mBAAmB,CA+BnC"}

package/dist/esm/brain-eval.js

@@ -0,0 +1,54 @@
+// Brain Faculties Evaluation — wire shapes emitted by the Python brain-eval core (camelCase JSON).
+// Mirror of the Brain Faculties Evaluation EPIC §6. The Python dataclasses are authoritative for the
+// running core; these are the typed view consumers (the brain-F3 librarian, future sinks) read.
+/** The single exam grader-prose constant (DESIGN §7.6). Distinct from the gate's `f1.x` line.
+ *  Bump on ANY grader-prose change (criteria text, input builders, suite-critique prompt,
+ *  parser semantics); a bump resets the exam-side validation window. Pinned into
+ *  ExamVerdict.evalVersion on every verdict. */
+export const EXAM_EVAL_VERSION = "exam-f2.0";
+/**
+ * The ONLY permitted producer of an E1-facing feed from a full ExamVerdict (DESIGN §7.6 #1).
+ * Pure + total. Sealed-task runs collapse to aggregates; dev-only verdicts pass through
+ * UNCHANGED (identity). Strips ALL sealed-task TEXT (assertions, evidence, raw turns,
+ * implicitClaims, the runs[] array) AND drops any suiteCritique entry attributed to a
+ * sealed taskId — BY ID, not by substring-matching the taskId inside the text. A grader
+ * FEEDBACK line quotes the sealed assertion TEXT and may name no taskId at all, so a
+ * substring scan leaks it; id-based attribution (set on the entry at the source) closes
+ * the leak (the Law-1 sealed-text fix). KEEPS the version provenance
+ * (rubricVersion / evalVersion / loaderSha / judgeDeployment) — they name THAT something
+ * changed, not WHAT, and are public-safe (§7.6 #2). comparisons[].flips keep
+ * direction + taskId so per-task flip counts survive for the sign test.
+ * Returns RedactedExamVerdict iff ANY arm contains a sealed task, else the verdict unchanged.
+ */
+export function redactForFeed(verdict, sealedTaskIds) {
+    // Redact if ANY sealed reference exists — a sealed run in an arm OR a sealed-attributed suiteCritique
+    // entry. The latter guard means a sealed critique can never slip through via the identity path.
+    const hasSealedRun = verdict.arms.some((a) => a.runs.some((r) => sealedTaskIds.has(r.taskId)));
+    const hasSealedCritique = verdict.suiteCritique.some((c) => sealedTaskIds.has(c.taskId));
+    if (!hasSealedRun && !hasSealedCritique)
+        return verdict; // dev-only -> identity pass-through (total + cheap)
+    const redactedArms = verdict.arms.map((a) => {
+        const ra = {
+            arm: a.arm,
+            passRate: a.passRate,
+            stddev: a.stddev,
+            n: a.n,
+            runsRedacted: true,
+        };
+        if (a.recallMetrics !== undefined)
+            ra.recallMetrics = a.recallMetrics; // F3 §5.4: aggregate → feed-safe
+        return ra;
+    });
+    // Drop any suiteCritique entry attributed to a sealed task — BY ID (not substring): the entry's
+    // `text` may quote the sealed assertion verbatim and name no taskId, so id attribution is the
+    // only sound drop (the Law-1 sealed-text leak fix).
+    const cleanedCritique = verdict.suiteCritique.filter((c) => !sealedTaskIds.has(c.taskId));
+    const { arms: _arms, suiteCritique: _sc, ...rest } = verdict;
+    return {
+        ...rest,
+        arms: redactedArms,
+        suiteCritique: cleanedCritique,
+        redacted: true,
+    };
+}
+//# sourceMappingURL=brain-eval.js.map

package/dist/esm/brain-eval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brain-eval.js","sourceRoot":"","sources":["../../src/brain-eval.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,qGAAqG;AACrG,gGAAgG;AAgQhG;;;gDAGgD;AAChD,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAC3B,OAAoB,EACpB,aAA0B;IAE1B,sGAAsG;IACtG,gGAAgG;IAChG,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/F,MAAM,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,YAAY,IAAI,CAAC,iBAAiB;QAAE,OAAO,OAAO,CAAC,CAAC,oDAAoD;IAE7G,MAAM,YAAY,GAA2B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAClE,MAAM,EAAE,GAAyB;YAC/B,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,YAAY,EAAE,IAAI;SACnB,CAAC;QACF,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS;YAAE,EAAE,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC,CAAE,iCAAiC;QACzG,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IAEH,gGAAgG;IAChG,8FAA8F;IAC9F,oDAAoD;IACpD,MAAM,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAE1F,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC7D,OAAO;QACL,GAAG,IAAI;QACP,IAAI,EAAE,YAAY;QAClB,aAAa,EAAE,eAAe;QAC9B,QAAQ,EAAE,IAAI;KACf,CAAC;AACJ,CAAC"}

package/dist/esm/brain-link.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The worker↔repo link record. Stored on the Foundry agent under
+ * `metadata.brain` as a JSON STRING (Foundry metadata is a flat
+ * Record<string,string>).
+ *
+ * F1 shipped this in plugins/m8t-stack/server/src/brain-link.ts. F2 promotes
+ * it here so the CLI + gateway + plugin all import from one place. The
+ * plugin server file becomes a thin re-export for back-compat.
+ *
+ * F1↔F2 distinction:
+ *   - PAT mode (F1):  installationId absent. Connection holds a static PAT.
+ *   - App mode (F2):  installationId present. Connection holds an App-minted
+ *                     installation token, rotated lazily on every invoke.
+ */
+export interface BrainLink {
+    repo: string;
+    branch: string;
+    topology: "per-worker" | "shared";
+    schemaVersion: string;
+    /**
+     * Foundry project-connection name holding the GitHub credential.
+     * Special value: `"in-container"` is the hosted-worker sentinel — the token
+     * is minted INSIDE the container (no Foundry connection exists). Invoke-path
+     * rotation MUST skip links with this value.
+     */
+    credentialRef: string;
+    installationId?: string;
+    instanceFolder?: string;
+}
+/**
+ * Parse the brain link from Foundry agent metadata. Defensive: absent or
+ * malformed returns undefined and never throws — discovery must not break on
+ * a hand-written or partial `metadata.brain`.
+ */
+export declare function parseBrainLink(metadata: Record<string, string> | undefined): BrainLink | undefined;
+/** True when the link uses GitHub App authentication (F2 mode). A type guard so
+ *  callers that mint with the installation id narrow it to a present string. */
+export declare function isAppMode(link: BrainLink): link is BrainLink & {
+    installationId: string;
+};
+/** Sentinel credentialRef for hosted workers: the token is minted INSIDE the
+ *  container (no Foundry connection). Invoke-path rotation must skip these. */
+export declare const IN_CONTAINER_CREDENTIAL_REF = "in-container";
+/** True when the link is a hosted/in-container brain (token minted in-sandbox;
+ *  there is NO Foundry connection to rotate). */
+export declare function isInContainer(link: BrainLink): boolean;
+/** Serialize a BrainLink to the Foundry-metadata JSON string. */
+export declare function serializeBrainLink(link: BrainLink): string;
+//# sourceMappingURL=brain-link.d.ts.map

package/dist/esm/brain-link.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"brain-link.d.ts","sourceRoot":"","sources":["../../src/brain-link.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,YAAY,GAAG,QAAQ,CAAC;IAClC,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAC3C,SAAS,GAAG,SAAS,CAmBvB;AAED;gFACgF;AAChF,wBAAgB,SAAS,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,IAAI,SAAS,GAAG;IAAE,cAAc,EAAE,MAAM,CAAA;CAAE,CAEzF;AAED;+EAC+E;AAC/E,eAAO,MAAM,2BAA2B,iBAAiB,CAAC;AAE1D;iDACiD;AACjD,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAEtD;AAED,iEAAiE;AACjE,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,SAAS,GAAG,MAAM,CAE1D"}

package/dist/esm/brain-link.js

@@ -0,0 +1,45 @@
+/**
+ * Parse the brain link from Foundry agent metadata. Defensive: absent or
+ * malformed returns undefined and never throws — discovery must not break on
+ * a hand-written or partial `metadata.brain`.
+ */
+export function parseBrainLink(metadata) {
+    const raw = metadata?.brain;
+    if (!raw)
+        return undefined;
+    try {
+        const obj = JSON.parse(raw);
+        if (!obj || typeof obj.repo !== "string" || obj.repo.length === 0)
+            return undefined;
+        return {
+            repo: obj.repo,
+            branch: typeof obj.branch === "string" && obj.branch ? obj.branch : "main",
+            topology: obj.topology === "shared" ? "shared" : "per-worker",
+            schemaVersion: typeof obj.schemaVersion === "string" && obj.schemaVersion ? obj.schemaVersion : "1",
+            credentialRef: typeof obj.credentialRef === "string" ? obj.credentialRef : "",
+            ...(typeof obj.installationId === "string" ? { installationId: obj.installationId } : {}),
+            ...(typeof obj.instanceFolder === "string" ? { instanceFolder: obj.instanceFolder } : {}),
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+/** True when the link uses GitHub App authentication (F2 mode). A type guard so
+ *  callers that mint with the installation id narrow it to a present string. */
+export function isAppMode(link) {
+    return typeof link.installationId === "string" && link.installationId.length > 0;
+}
+/** Sentinel credentialRef for hosted workers: the token is minted INSIDE the
+ *  container (no Foundry connection). Invoke-path rotation must skip these. */
+export const IN_CONTAINER_CREDENTIAL_REF = "in-container";
+/** True when the link is a hosted/in-container brain (token minted in-sandbox;
+ *  there is NO Foundry connection to rotate). */
+export function isInContainer(link) {
+    return link.credentialRef === IN_CONTAINER_CREDENTIAL_REF;
+}
+/** Serialize a BrainLink to the Foundry-metadata JSON string. */
+export function serializeBrainLink(link) {
+    return JSON.stringify(link);
+}
+//# sourceMappingURL=brain-link.js.map

package/dist/esm/brain-link.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brain-link.js","sourceRoot":"","sources":["../../src/brain-link.ts"],"names":[],"mappings":"AA8BA;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,QAA4C;IAE5C,MAAM,GAAG,GAAG,QAAQ,EAAE,KAAK,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAA8B,IAAI,CAAC,KAAK,CAAC,GAAG,CAA8B,CAAC;QACpF,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACpF,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC1E,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY;YAC7D,aAAa,EACX,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG;YACtF,aAAa,EAAE,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE;YAC7E,GAAG,CAAC,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,GAAG,CAAC,OAAO,GAAG,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1F,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;gFACgF;AAChF,MAAM,UAAU,SAAS,CAAC,IAAe;IACvC,OAAO,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,IAAI,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;AACnF,CAAC;AAED;+EAC+E;AAC/E,MAAM,CAAC,MAAM,2BAA2B,GAAG,cAAc,CAAC;AAE1D;iDACiD;AACjD,MAAM,UAAU,aAAa,CAAC,IAAe;IAC3C,OAAO,IAAI,CAAC,aAAa,KAAK,2BAA2B,CAAC;AAC5D,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,kBAAkB,CAAC,IAAe;IAChD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}

package/dist/esm/errors.d.ts

@@ -0,0 +1,39 @@
+export declare abstract class ApiError extends Error {
+    abstract readonly code: string;
+    abstract readonly status: number;
+    readonly details?: unknown;
+    constructor(message: string, details?: unknown);
+}
+export declare class UnauthenticatedError extends ApiError {
+    readonly code = "UNAUTHENTICATED";
+    readonly status = 401;
+}
+export declare class ForbiddenError extends ApiError {
+    readonly code = "FORBIDDEN";
+    readonly status = 403;
+}
+export declare class BadRequestError extends ApiError {
+    readonly code = "BAD_REQUEST";
+    readonly status = 400;
+}
+export declare class NotFoundError extends ApiError {
+    readonly code = "NOT_FOUND";
+    readonly status = 404;
+}
+export declare class ConflictError extends ApiError {
+    readonly code = "CONFLICT";
+    readonly status = 409;
+}
+export declare class RateLimitedError extends ApiError {
+    readonly code = "RATE_LIMITED";
+    readonly status = 429;
+}
+export declare class UpstreamError extends ApiError {
+    readonly code = "UPSTREAM_FAILED";
+    readonly status = 502;
+}
+export declare class InternalError extends ApiError {
+    readonly code = "INTERNAL";
+    readonly status = 500;
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/esm/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA,8BAAsB,QAAS,SAAQ,KAAK;IAC1C,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;gBAEf,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO;CAS/C;AAED,qBAAa,oBAAqB,SAAQ,QAAQ;IAChD,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,MAAM,OAAO;CACvB;AAED,qBAAa,cAAe,SAAQ,QAAQ;IAC1C,QAAQ,CAAC,IAAI,eAAe;IAC5B,QAAQ,CAAC,MAAM,OAAO;CACvB;AAED,qBAAa,eAAgB,SAAQ,QAAQ;IAC3C,QAAQ,CAAC,IAAI,iBAAiB;IAC9B,QAAQ,CAAC,MAAM,OAAO;CACvB;AAED,qBAAa,aAAc,SAAQ,QAAQ;IACzC,QAAQ,CAAC,IAAI,eAAe;IAC5B,QAAQ,CAAC,MAAM,OAAO;CACvB;AAED,qBAAa,aAAc,SAAQ,QAAQ;IACzC,QAAQ,CAAC,IAAI,cAAc;IAC3B,QAAQ,CAAC,MAAM,OAAO;CACvB;AAED,qBAAa,gBAAiB,SAAQ,QAAQ;IAC5C,QAAQ,CAAC,IAAI,kBAAkB;IAC/B,QAAQ,CAAC,MAAM,OAAO;CACvB;AAED,qBAAa,aAAc,SAAQ,QAAQ;IACzC,QAAQ,CAAC,IAAI,qBAAqB;IAClC,QAAQ,CAAC,MAAM,OAAO;CACvB;AAED,qBAAa,aAAc,SAAQ,QAAQ;IACzC,QAAQ,CAAC,IAAI,cAAc;IAC3B,QAAQ,CAAC,MAAM,OAAO;CACvB"}

package/dist/esm/errors.js

@@ -0,0 +1,45 @@
+export class ApiError extends Error {
+    details;
+    constructor(message, details) {
+        super(message);
+        this.name = this.constructor.name;
+        this.details = details;
+        // eslint-disable-next-line @typescript-eslint/no-unnecessary-condition -- V8-specific API absent in non-Node environments; typed as always-present in @types/node but runtime presence is not guaranteed
+        if (Error.captureStackTrace) {
+            Error.captureStackTrace(this, this.constructor);
+        }
+    }
+}
+export class UnauthenticatedError extends ApiError {
+    code = "UNAUTHENTICATED";
+    status = 401;
+}
+export class ForbiddenError extends ApiError {
+    code = "FORBIDDEN";
+    status = 403;
+}
+export class BadRequestError extends ApiError {
+    code = "BAD_REQUEST";
+    status = 400;
+}
+export class NotFoundError extends ApiError {
+    code = "NOT_FOUND";
+    status = 404;
+}
+export class ConflictError extends ApiError {
+    code = "CONFLICT";
+    status = 409;
+}
+export class RateLimitedError extends ApiError {
+    code = "RATE_LIMITED";
+    status = 429;
+}
+export class UpstreamError extends ApiError {
+    code = "UPSTREAM_FAILED";
+    status = 502;
+}
+export class InternalError extends ApiError {
+    code = "INTERNAL";
+    status = 500;
+}
+//# sourceMappingURL=errors.js.map

package/dist/esm/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAgB,QAAS,SAAQ,KAAK;IAGjC,OAAO,CAAW;IAE3B,YAAY,OAAe,EAAE,OAAiB;QAC5C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,yMAAyM;QACzM,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;CACF;AAED,MAAM,OAAO,oBAAqB,SAAQ,QAAQ;IACvC,IAAI,GAAG,iBAAiB,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC;CACvB;AAED,MAAM,OAAO,cAAe,SAAQ,QAAQ;IACjC,IAAI,GAAG,WAAW,CAAC;IACnB,MAAM,GAAG,GAAG,CAAC;CACvB;AAED,MAAM,OAAO,eAAgB,SAAQ,QAAQ;IAClC,IAAI,GAAG,aAAa,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC;CACvB;AAED,MAAM,OAAO,aAAc,SAAQ,QAAQ;IAChC,IAAI,GAAG,WAAW,CAAC;IACnB,MAAM,GAAG,GAAG,CAAC;CACvB;AAED,MAAM,OAAO,aAAc,SAAQ,QAAQ;IAChC,IAAI,GAAG,UAAU,CAAC;IAClB,MAAM,GAAG,GAAG,CAAC;CACvB;AAED,MAAM,OAAO,gBAAiB,SAAQ,QAAQ;IACnC,IAAI,GAAG,cAAc,CAAC;IACtB,MAAM,GAAG,GAAG,CAAC;CACvB;AAED,MAAM,OAAO,aAAc,SAAQ,QAAQ;IAChC,IAAI,GAAG,iBAAiB,CAAC;IACzB,MAAM,GAAG,GAAG,CAAC;CACvB;AAED,MAAM,OAAO,aAAc,SAAQ,QAAQ;IAChC,IAAI,GAAG,UAAU,CAAC;IAClB,MAAM,GAAG,GAAG,CAAC;CACvB"}

package/dist/esm/inbound-envelope.d.ts

@@ -0,0 +1,43 @@
+/**
+ * The normalized inbound-message shape every channel adapter produces.
+ *
+ * Locked per EPIC §7.1. Workers consume only this; adapter parsing is the
+ * sole channel-specific concern. Adding fields is additive (workers ignore
+ * unknown fields); removing or renaming requires an epic-level revision.
+ *
+ * F4 originally shipped this at apps/web/lib/channels/_core/envelope.ts.
+ * F5 moves it here so both the webhook dispatcher (apps/web) and the SB
+ * wire-contract (this package) can import from a single source. F04's
+ * original path becomes a re-export.
+ */
+export interface InboundEnvelope {
+    /** Stable channel discriminator: "telegram" | "slack" | "teams" | ... */
+    channel: string;
+    /** The binding this message was routed to — resolved from the webhook URL path. */
+    bindingId: string;
+    /** Sender's native ID on the channel — TeamMembers authz lookup key. */
+    channelUserId: string;
+    /** Best-effort display name from the channel payload, for Foundry metadata + logs. */
+    userDisplayName?: string;
+    /** Chat surface's native ID — used for Conversation thread routing. */
+    channelChatId: string;
+    /** Plain text ready to pass as `responses.create` input. */
+    messageText: string;
+    /** Channel-native message ID, used for idempotency. */
+    messageId: string;
+    /** ISO 8601 timestamp when the webhook was received. */
+    receivedAt: string;
+    /**
+     * Opaque, channel-specific blob the adapter needs back at reply time.
+     * Telegram: { chatId, replyToMessageId }
+     * Slack:    { channelId, threadTs }
+     * Teams:    { serviceUrl, conversationId }
+     *
+     * Serialized into Service Bus messages; deserialized on the worker side
+     * and passed back to the adapter's sendReply / sendTypingIndicator.
+     */
+    replyHandle: unknown;
+    /** Adapter-side pre-filter (e.g. DM-only check in Telegram MVP). */
+    shouldHandle: boolean;
+}
+//# sourceMappingURL=inbound-envelope.d.ts.map

package/dist/esm/inbound-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-envelope.d.ts","sourceRoot":"","sources":["../../src/inbound-envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,eAAe;IAC9B,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,SAAS,EAAE,MAAM,CAAC;IAClB,wEAAwE;IACxE,aAAa,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,uEAAuE;IACvE,aAAa,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;OAQG;IACH,WAAW,EAAE,OAAO,CAAC;IACrB,oEAAoE;IACpE,YAAY,EAAE,OAAO,CAAC;CACvB"}

package/dist/esm/inbound-envelope.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=inbound-envelope.js.map

package/dist/esm/inbound-envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbound-envelope.js","sourceRoot":"","sources":["../../src/inbound-envelope.ts"],"names":[],"mappings":""}

package/dist/esm/index.d.ts

@@ -0,0 +1,14 @@
+export * from "./response.js";
+export * from "./errors.js";
+export * from "./reasons.js";
+export * from "./team.js";
+export * from "./me.js";
+export * from "./binding.js";
+export * from "./inbound-envelope.js";
+export * from "./service-bus.js";
+export type { BrainLink } from "./brain-link.js";
+export { parseBrainLink, isAppMode, serializeBrainLink, isInContainer, IN_CONTAINER_CREDENTIAL_REF } from "./brain-link.js";
+export type { A2aCard } from "./a2a-card.js";
+export { serializeA2aCard, parseA2aCard, A2A_CARD_MAX_CHARS } from "./a2a-card.js";
+export * from "./brain-eval.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AACjC,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAC5H,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnF,cAAc,iBAAiB,CAAC"}

package/dist/esm/index.js

@@ -0,0 +1,12 @@
+export * from "./response.js";
+export * from "./errors.js";
+export * from "./reasons.js";
+export * from "./team.js";
+export * from "./me.js";
+export * from "./binding.js";
+export * from "./inbound-envelope.js";
+export * from "./service-bus.js";
+export { parseBrainLink, isAppMode, serializeBrainLink, isInContainer, IN_CONTAINER_CREDENTIAL_REF } from "./brain-link.js";
+export { serializeA2aCard, parseA2aCard, A2A_CARD_MAX_CHARS } from "./a2a-card.js";
+export * from "./brain-eval.js";
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,cAAc,CAAC;AAC7B,cAAc,uBAAuB,CAAC;AACtC,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB,EAAE,aAAa,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAE5H,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnF,cAAc,iBAAiB,CAAC"}