@mandate-os/sdk 0.1.0

package/README.md

@@ -0,0 +1,28 @@
+# `@mandate-os/sdk`
+
+Tiny TypeScript SDK for MandateOS agent integrations.
+
+It provides:
+
+- `MandateOsAgentClient` for issuing mandates, evaluating actions, minting execution grants, and calling enforced execute routes
+- `MandateOsAgentMiddleware` for the common evaluate -> require -> grant -> execute control loop
+- The minimal public types needed by agent-side integrations
+
+Current enforced GitHub helpers cover issue labeling and keeping pull requests in draft through MandateOS-owned execute routes.
+
+Example:
+
+```ts
+import { MandateOsAgentClient, MandateOsAgentMiddleware } from '@mandate-os/sdk';
+
+const client = new MandateOsAgentClient({
+  baseUrl: 'http://localhost:4330',
+  bearerToken: process.env.MANDATE_OS_AGENT_TOKEN!,
+  defaultSource: 'codex.repo_steward',
+});
+
+const mandate = new MandateOsAgentMiddleware(client, {
+  mandateId: 'mdt_123',
+  source: 'codex.repo_steward',
+});
+```

package/agent-client.d.ts

@@ -0,0 +1,47 @@
+import type { ApiErrorIssue, ApiSuccessPayload, EnforcedExecutionInput, EnforcedExecutionResult, ExecutionGrantIssueInput, ExecutionGrantRecord, GitHubIssueLabelExecutionInput, GitHubIssueLabelExecutionResult, GitHubPullRequestDraftExecutionInput, GitHubPullRequestDraftExecutionResult, MandateRecord, RuntimeActionEvaluationInput, RuntimeSimulationBatch, SignatureVerificationResult } from './contracts';
+import { type EnforcedExecutionKind } from './enforced-capabilities';
+import type { MandateDraft } from './mandates';
+type FetchLike = typeof fetch;
+type MutationOptions = {
+    idempotencyKey?: string;
+    signal?: AbortSignal;
+};
+export type MandateOsAgentClientOptions = {
+    baseUrl: string;
+    bearerToken: string;
+    fetchImpl?: FetchLike;
+    defaultSource?: string;
+};
+export type MandateOsClientResponse<T> = ApiSuccessPayload<T> & {
+    headers: {
+        idempotencyKey: string | null;
+        idempotencyStatus: string | null;
+        originRequestId: string | null;
+    };
+};
+export declare class MandateOsAgentClientError extends Error {
+    readonly status: number;
+    readonly code?: string | undefined;
+    readonly requestId?: string | undefined;
+    readonly issues?: ApiErrorIssue[] | undefined;
+    constructor(message: string, status: number, code?: string | undefined, requestId?: string | undefined, issues?: ApiErrorIssue[] | undefined);
+}
+export declare class MandateOsAgentClient {
+    private readonly baseUrl;
+    private readonly fetchImpl;
+    private readonly bearerToken;
+    private readonly defaultSource?;
+    constructor(options: MandateOsAgentClientOptions);
+    issueMandate(draft: MandateDraft, options?: MutationOptions): Promise<MandateOsClientResponse<MandateRecord>>;
+    evaluateActions(input: RuntimeActionEvaluationInput, options?: MutationOptions): Promise<MandateOsClientResponse<RuntimeSimulationBatch>>;
+    issueExecutionGrant(input: ExecutionGrantIssueInput, options?: MutationOptions): Promise<MandateOsClientResponse<ExecutionGrantRecord>>;
+    executeEnforcedAction<K extends EnforcedExecutionKind>(kind: K, input: EnforcedExecutionInput<K>, options?: MutationOptions): Promise<MandateOsClientResponse<EnforcedExecutionResult<K>>>;
+    executeGitHubIssueLabel(input: GitHubIssueLabelExecutionInput, options?: MutationOptions): Promise<MandateOsClientResponse<GitHubIssueLabelExecutionResult>>;
+    executeGitHubPullRequestDraft(input: GitHubPullRequestDraftExecutionInput, options?: MutationOptions): Promise<MandateOsClientResponse<GitHubPullRequestDraftExecutionResult>>;
+    verifyMandate(mandateId: string, signal?: AbortSignal): Promise<MandateOsClientResponse<SignatureVerificationResult>>;
+    verifyReceipt(receiptId: string, signal?: AbortSignal): Promise<MandateOsClientResponse<SignatureVerificationResult>>;
+    verifyExecutionGrant(grantId: string, signal?: AbortSignal): Promise<MandateOsClientResponse<SignatureVerificationResult>>;
+    private request;
+}
+export {};
+//# sourceMappingURL=agent-client.d.ts.map

package/agent-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-client.d.ts","sourceRoot":"","sources":["../../../packages/mandate-os-sdk/src/agent-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EAEb,iBAAiB,EACjB,sBAAsB,EACtB,uBAAuB,EACvB,wBAAwB,EACxB,oBAAoB,EACpB,8BAA8B,EAC9B,+BAA+B,EAC/B,oCAAoC,EACpC,qCAAqC,EACrC,aAAa,EACb,4BAA4B,EAC5B,sBAAsB,EACtB,2BAA2B,EAC5B,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,KAAK,SAAS,GAAG,OAAO,KAAK,CAAC;AAE9B,KAAK,eAAe,GAAG;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,GAAG;IAC9D,OAAO,EAAE;QACP,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;KAChC,CAAC;CACH,CAAC;AAEF,qBAAa,yBAA0B,SAAQ,KAAK;IAGhD,QAAQ,CAAC,MAAM,EAAE,MAAM;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE;gBAJjC,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,MAAM,YAAA,EACb,SAAS,CAAC,EAAE,MAAM,YAAA,EAClB,MAAM,CAAC,EAAE,aAAa,EAAE,YAAA;CAKpC;AAED,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAY;IACtC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;gBAE5B,OAAO,EAAE,2BAA2B;IAO1C,YAAY,CAChB,KAAK,EAAE,YAAY,EACnB,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;IAS5C,eAAe,CACnB,KAAK,EAAE,4BAA4B,EACnC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,uBAAuB,CAAC,sBAAsB,CAAC,CAAC;IAiBrD,mBAAmB,CACvB,KAAK,EAAE,wBAAwB,EAC/B,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,uBAAuB,CAAC,oBAAoB,CAAC,CAAC;IAYnD,qBAAqB,CAAC,CAAC,SAAS,qBAAqB,EACzD,IAAI,EAAE,CAAC,EACP,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC,EAChC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,uBAAuB,CAAC,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC;IAWzD,uBAAuB,CAC3B,KAAK,EAAE,8BAA8B,EACrC,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,uBAAuB,CAAC,+BAA+B,CAAC,CAAC;IAI9D,6BAA6B,CACjC,KAAK,EAAE,oCAAoC,EAC3C,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,uBAAuB,CAAC,qCAAqC,CAAC,CAAC;IAQpE,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,uBAAuB,CAAC,2BAA2B,CAAC,CAAC;IAU1D,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,uBAAuB,CAAC,2BAA2B,CAAC,CAAC;IAU1D,oBAAoB,CACxB,OAAO,EAAE,MAAM,EACf,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,uBAAuB,CAAC,2BAA2B,CAAC,CAAC;YAUlD,OAAO;CA2DtB"}

package/agent-client.js

@@ -0,0 +1,121 @@
+import { getEnforcedExecutionCapability, } from './enforced-capabilities';
+export class MandateOsAgentClientError extends Error {
+    constructor(message, status, code, requestId, issues) {
+        super(message);
+        this.status = status;
+        this.code = code;
+        this.requestId = requestId;
+        this.issues = issues;
+        this.name = 'MandateOsAgentClientError';
+    }
+}
+export class MandateOsAgentClient {
+    constructor(options) {
+        this.baseUrl = options.baseUrl.replace(/\/+$/, '');
+        this.fetchImpl = options.fetchImpl || fetch;
+        this.bearerToken = options.bearerToken;
+        this.defaultSource = options.defaultSource?.trim() || undefined;
+    }
+    async issueMandate(draft, options) {
+        return this.request('/api/v1/mandates', {
+            method: 'POST',
+            body: JSON.stringify(draft),
+            idempotencyKey: options?.idempotencyKey,
+            signal: options?.signal,
+        });
+    }
+    async evaluateActions(input, options) {
+        const payload = {
+            ...input,
+            source: input.source || this.defaultSource,
+        };
+        return this.request('/api/v1/runtime/evaluate-actions', {
+            method: 'POST',
+            body: JSON.stringify(payload),
+            idempotencyKey: options?.idempotencyKey,
+            signal: options?.signal,
+        });
+    }
+    async issueExecutionGrant(input, options) {
+        return this.request('/api/v1/runtime/execution-grants', {
+            method: 'POST',
+            body: JSON.stringify(input),
+            idempotencyKey: options?.idempotencyKey,
+            signal: options?.signal,
+        });
+    }
+    async executeEnforcedAction(kind, input, options) {
+        const capability = getEnforcedExecutionCapability(kind);
+        return this.request(capability.executePath, {
+            method: 'POST',
+            body: JSON.stringify(input),
+            idempotencyKey: options?.idempotencyKey,
+            signal: options?.signal,
+        });
+    }
+    async executeGitHubIssueLabel(input, options) {
+        return this.executeEnforcedAction('github.issue.label', input, options);
+    }
+    async executeGitHubPullRequestDraft(input, options) {
+        return this.executeEnforcedAction('github.pull_request.draft', input, options);
+    }
+    async verifyMandate(mandateId, signal) {
+        return this.request(`/api/v1/mandates/${encodeURIComponent(mandateId)}/verify`, {
+            method: 'GET',
+            signal,
+        });
+    }
+    async verifyReceipt(receiptId, signal) {
+        return this.request(`/api/v1/receipts/${encodeURIComponent(receiptId)}/verify`, {
+            method: 'GET',
+            signal,
+        });
+    }
+    async verifyExecutionGrant(grantId, signal) {
+        return this.request(`/api/v1/execution-grants/${encodeURIComponent(grantId)}/verify`, {
+            method: 'GET',
+            signal,
+        });
+    }
+    async request(path, init) {
+        const method = (init.method || 'GET').toUpperCase();
+        const headers = new Headers(init.headers);
+        headers.set('accept', 'application/json');
+        headers.set('authorization', `Bearer ${this.bearerToken}`);
+        if (init.body !== undefined && !headers.has('content-type')) {
+            headers.set('content-type', 'application/json');
+        }
+        if (['POST', 'PUT', 'PATCH', 'DELETE'].includes(method) &&
+            !headers.has('idempotency-key')) {
+            headers.set('idempotency-key', init.idempotencyKey || createIdempotencyKey());
+        }
+        const response = await this.fetchImpl(`${this.baseUrl}${path}`, {
+            ...init,
+            method,
+            headers,
+        });
+        const payload = (await response.json().catch(() => null));
+        if (!response.ok || !payload?.meta || payload.data === undefined) {
+            throw new MandateOsAgentClientError(payload?.error?.issues?.[0]?.message ||
+                payload?.error?.message ||
+                'MandateOS request failed.', response.status, payload?.error?.code, payload?.meta?.requestId, payload?.error?.issues);
+        }
+        return {
+            data: payload.data,
+            meta: payload.meta,
+            headers: {
+                idempotencyKey: response.headers.get('x-idempotency-key'),
+                idempotencyStatus: response.headers.get('x-idempotency-status'),
+                originRequestId: response.headers.get('x-idempotency-origin-request-id'),
+            },
+        };
+    }
+}
+function createIdempotencyKey() {
+    if (typeof crypto !== 'undefined' &&
+        typeof crypto.randomUUID === 'function') {
+        return `agent_${crypto.randomUUID()}`;
+    }
+    return `agent_${Date.now().toString(36)}`;
+}
+//# sourceMappingURL=agent-client.js.map

package/agent-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-client.js","sourceRoot":"","sources":["../../../packages/mandate-os-sdk/src/agent-client.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,8BAA8B,GAE/B,MAAM,yBAAyB,CAAC;AAyBjC,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YACE,OAAe,EACN,MAAc,EACd,IAAa,EACb,SAAkB,EAClB,MAAwB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QALN,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAS;QACb,cAAS,GAAT,SAAS,CAAS;QAClB,WAAM,GAAN,MAAM,CAAkB;QAGjC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,OAAO,oBAAoB;IAM/B,YAAY,OAAoC;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACnD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;QAC5C,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACvC,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAmB,EACnB,OAAyB;QAEzB,OAAO,IAAI,CAAC,OAAO,CAAgB,kBAAkB,EAAE;YACrD,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,KAAmC,EACnC,OAAyB;QAEzB,MAAM,OAAO,GAAiC;YAC5C,GAAG,KAAK;YACR,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,aAAa;SAC3C,CAAC;QAEF,OAAO,IAAI,CAAC,OAAO,CACjB,kCAAkC,EAClC;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;YAC7B,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB,CACvB,KAA+B,EAC/B,OAAyB;QAEzB,OAAO,IAAI,CAAC,OAAO,CACjB,kCAAkC,EAClC;YACE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,IAAO,EACP,KAAgC,EAChC,OAAyB;QAEzB,MAAM,UAAU,GAAG,8BAA8B,CAAC,IAAI,CAAC,CAAC;QAExD,OAAO,IAAI,CAAC,OAAO,CAA6B,UAAU,CAAC,WAAW,EAAE;YACtE,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;YAC3B,cAAc,EAAE,OAAO,EAAE,cAAc;YACvC,MAAM,EAAE,OAAO,EAAE,MAAM;SACxB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,KAAqC,EACrC,OAAyB;QAEzB,OAAO,IAAI,CAAC,qBAAqB,CAAC,oBAAoB,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAC1E,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,KAA2C,EAC3C,OAAyB;QAEzB,OAAO,IAAI,CAAC,qBAAqB,CAC/B,2BAA2B,EAC3B,KAAK,EACL,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,MAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CACjB,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAC1D;YACE,MAAM,EAAE,KAAK;YACb,MAAM;SACP,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,MAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CACjB,oBAAoB,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAC1D;YACE,MAAM,EAAE,KAAK;YACb,MAAM;SACP,CACF,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,OAAe,EACf,MAAoB;QAEpB,OAAO,IAAI,CAAC,OAAO,CACjB,4BAA4B,kBAAkB,CAAC,OAAO,CAAC,SAAS,EAChE;YACE,MAAM,EAAE,KAAK;YACb,MAAM;SACP,CACF,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,IAEC;QAED,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE1C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAE3D,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;YAC5D,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAClD,CAAC;QAED,IACE,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;YACnD,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAC/B,CAAC;YACD,OAAO,CAAC,GAAG,CACT,iBAAiB,EACjB,IAAI,CAAC,cAAc,IAAI,oBAAoB,EAAE,CAC9C,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;YAC9D,GAAG,IAAI;YACP,MAAM;YACN,OAAO;SACR,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAEhD,CAAC;QAET,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACjE,MAAM,IAAI,yBAAyB,CACjC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO;gBAClC,OAAO,EAAE,KAAK,EAAE,OAAO;gBACvB,2BAA2B,EAC7B,QAAQ,CAAC,MAAM,EACf,OAAO,EAAE,KAAK,EAAE,IAAI,EACpB,OAAO,EAAE,IAAI,EAAE,SAAS,EACxB,OAAO,EAAE,KAAK,EAAE,MAAM,CACvB,CAAC;QACJ,CAAC;QAED,OAAO;YACL,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,OAAO,EAAE;gBACP,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;gBACzD,iBAAiB,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;gBAC/D,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CACnC,iCAAiC,CAClC;aACF;SACF,CAAC;IACJ,CAAC;CACF;AAED,SAAS,oBAAoB;IAC3B,IACE,OAAO,MAAM,KAAK,WAAW;QAC7B,OAAO,MAAM,CAAC,UAAU,KAAK,UAAU,EACvC,CAAC;QACD,OAAO,SAAS,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IACxC,CAAC;IAED,OAAO,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AAC5C,CAAC"}

package/agent-middleware.d.ts

@@ -0,0 +1,83 @@
+import type { EnforcedExecutionPayloadByKind, EnforcedExecutionResultByKind, ExecutionGrantRecord, GitHubIssueLabelExecutionPayload, GitHubIssueLabelExecutionResult, GitHubPullRequestDraftExecutionPayload, GitHubPullRequestDraftExecutionResult, ReceiptRecord, RuntimeSimulationBatch } from './contracts';
+import { type EnforcedExecutionKind } from './enforced-capabilities';
+import type { ActionScenario } from './mandates';
+import { MandateOsAgentClient } from './agent-client';
+type BaseActionOptions = {
+    mandateId?: string;
+    source?: string;
+    details?: Record<string, unknown>;
+    evaluationIdempotencyKey?: string;
+};
+type GitHubIssueLabelActionOptions = BaseActionOptions & {
+    action: ActionScenario;
+    payload: GitHubIssueLabelExecutionPayload;
+    grantExpiresInSeconds?: number;
+    grantIdempotencyKey?: string;
+    executeIdempotencyKey?: string;
+};
+type GitHubPullRequestDraftActionOptions = BaseActionOptions & {
+    action: ActionScenario;
+    payload: GitHubPullRequestDraftExecutionPayload;
+    grantExpiresInSeconds?: number;
+    grantIdempotencyKey?: string;
+    executeIdempotencyKey?: string;
+};
+type EnforcedActionOptions<K extends EnforcedExecutionKind> = BaseActionOptions & {
+    kind: K;
+    action: ActionScenario;
+    payload: EnforcedExecutionPayloadByKind[K];
+    grantExpiresInSeconds?: number;
+    grantIdempotencyKey?: string;
+    executeIdempotencyKey?: string;
+};
+export declare class MandateOsPolicyDecisionError extends Error {
+    readonly receipt: ReceiptRecord;
+    constructor(receipt: ReceiptRecord);
+}
+export declare class MandateOsAgentMiddleware {
+    private readonly client;
+    private readonly defaults;
+    constructor(client: MandateOsAgentClient, defaults?: {
+        mandateId?: string;
+        source?: string;
+        details?: Record<string, unknown>;
+    });
+    evaluateAction(input: BaseActionOptions & {
+        action: ActionScenario;
+    }): Promise<{
+        evaluation: RuntimeSimulationBatch;
+        receipt: ReceiptRecord;
+    }>;
+    requireAllowed(input: BaseActionOptions & {
+        action: ActionScenario;
+    }): Promise<{
+        evaluation: RuntimeSimulationBatch;
+        receipt: ReceiptRecord;
+    }>;
+    withMandateCheck<T>(input: BaseActionOptions & {
+        action: ActionScenario;
+    }, executor: (input: {
+        receipt: ReceiptRecord;
+        evaluation: RuntimeSimulationBatch;
+    }) => Promise<T>): Promise<T>;
+    executeGitHubIssueLabel(input: GitHubIssueLabelActionOptions): Promise<{
+        evaluation: RuntimeSimulationBatch;
+        receipt: ReceiptRecord;
+        grant: ExecutionGrantRecord;
+        execution: GitHubIssueLabelExecutionResult;
+    }>;
+    executeGitHubPullRequestDraft(input: GitHubPullRequestDraftActionOptions): Promise<{
+        evaluation: RuntimeSimulationBatch;
+        receipt: ReceiptRecord;
+        grant: ExecutionGrantRecord;
+        execution: GitHubPullRequestDraftExecutionResult;
+    }>;
+    executeEnforcedAction<K extends EnforcedExecutionKind>(input: EnforcedActionOptions<K>): Promise<{
+        evaluation: RuntimeSimulationBatch;
+        receipt: ReceiptRecord;
+        grant: ExecutionGrantRecord;
+        execution: EnforcedExecutionResultByKind[K];
+    }>;
+}
+export {};
+//# sourceMappingURL=agent-middleware.d.ts.map

package/agent-middleware.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-middleware.d.ts","sourceRoot":"","sources":["../../../packages/mandate-os-sdk/src/agent-middleware.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,8BAA8B,EAC9B,6BAA6B,EAE7B,oBAAoB,EACpB,gCAAgC,EAChC,+BAA+B,EAC/B,sCAAsC,EACtC,qCAAqC,EACrC,aAAa,EACb,sBAAsB,EACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAEL,KAAK,qBAAqB,EAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,KAAK,iBAAiB,GAAG;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC,CAAC;AAEF,KAAK,6BAA6B,GAAG,iBAAiB,GAAG;IACvD,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,gCAAgC,CAAC;IAC1C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,KAAK,mCAAmC,GAAG,iBAAiB,GAAG;IAC7D,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,sCAAsC,CAAC;IAChD,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,KAAK,qBAAqB,CAAC,CAAC,SAAS,qBAAqB,IACxD,iBAAiB,GAAG;IAClB,IAAI,EAAE,CAAC,CAAC;IACR,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,EAAE,8BAA8B,CAAC,CAAC,CAAC,CAAC;IAC3C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEJ,qBAAa,4BAA6B,SAAQ,KAAK;IACzC,QAAQ,CAAC,OAAO,EAAE,aAAa;gBAAtB,OAAO,EAAE,aAAa;CAM5C;AAED,qBAAa,wBAAwB;IAEjC,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBADR,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,GAAE;QACzB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC9B;IAGF,cAAc,CAAC,KAAK,EAAE,iBAAiB,GAAG;QAAE,MAAM,EAAE,cAAc,CAAA;KAAE;;;;IAqCpE,cAAc,CAAC,KAAK,EAAE,iBAAiB,GAAG;QAAE,MAAM,EAAE,cAAc,CAAA;KAAE;;;;IAUpE,gBAAgB,CAAC,CAAC,EACtB,KAAK,EAAE,iBAAiB,GAAG;QAAE,MAAM,EAAE,cAAc,CAAA;KAAE,EACrD,QAAQ,EAAE,CAAC,KAAK,EAAE;QAChB,OAAO,EAAE,aAAa,CAAC;QACvB,UAAU,EAAE,sBAAsB,CAAC;KACpC,KAAK,OAAO,CAAC,CAAC,CAAC;IAOZ,uBAAuB,CAAC,KAAK,EAAE,6BAA6B,GAAG,OAAO,CAAC;QAC3E,UAAU,EAAE,sBAAsB,CAAC;QACnC,OAAO,EAAE,aAAa,CAAC;QACvB,KAAK,EAAE,oBAAoB,CAAC;QAC5B,SAAS,EAAE,+BAA+B,CAAC;KAC5C,CAAC;IAOI,6BAA6B,CACjC,KAAK,EAAE,mCAAmC,GACzC,OAAO,CAAC;QACT,UAAU,EAAE,sBAAsB,CAAC;QACnC,OAAO,EAAE,aAAa,CAAC;QACvB,KAAK,EAAE,oBAAoB,CAAC;QAC5B,SAAS,EAAE,qCAAqC,CAAC;KAClD,CAAC;IAOI,qBAAqB,CAAC,CAAC,SAAS,qBAAqB,EACzD,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC,GAC9B,OAAO,CAAC;QACT,UAAU,EAAE,sBAAsB,CAAC;QACnC,OAAO,EAAE,aAAa,CAAC;QACvB,KAAK,EAAE,oBAAoB,CAAC;QAC5B,SAAS,EAAE,6BAA6B,CAAC,CAAC,CAAC,CAAC;KAC7C,CAAC;CAqCH"}

package/agent-middleware.js

@@ -0,0 +1,91 @@
+import { getEnforcedExecutionCapability, } from './enforced-capabilities';
+export class MandateOsPolicyDecisionError extends Error {
+    constructor(receipt) {
+        super(`MandateOS returned ${receipt.decision} for ${receipt.title}: ${receipt.reasons.join(' ')}`);
+        this.receipt = receipt;
+        this.name = 'MandateOsPolicyDecisionError';
+    }
+}
+export class MandateOsAgentMiddleware {
+    constructor(client, defaults = {}) {
+        this.client = client;
+        this.defaults = defaults;
+    }
+    async evaluateAction(input) {
+        const mandateId = input.mandateId || this.defaults.mandateId;
+        if (!mandateId) {
+            throw new Error('Mandate id is required. Pass it to the middleware defaults or the action call.');
+        }
+        const evaluation = await this.client.evaluateActions({
+            mandateId,
+            source: input.source || this.defaults.source,
+            details: {
+                ...(this.defaults.details || {}),
+                ...(input.details || {}),
+            },
+            actions: [input.action],
+        }, {
+            idempotencyKey: input.evaluationIdempotencyKey,
+        });
+        const receipt = evaluation.data.receipts[0];
+        if (!receipt) {
+            throw new Error('MandateOS did not return a receipt for the evaluated action.');
+        }
+        return {
+            evaluation: evaluation.data,
+            receipt,
+        };
+    }
+    async requireAllowed(input) {
+        const result = await this.evaluateAction(input);
+        if (result.receipt.decision !== 'allowed') {
+            throw new MandateOsPolicyDecisionError(result.receipt);
+        }
+        return result;
+    }
+    async withMandateCheck(input, executor) {
+        const result = await this.requireAllowed(input);
+        return executor(result);
+    }
+    async executeGitHubIssueLabel(input) {
+        return this.executeEnforcedAction({
+            ...input,
+            kind: 'github.issue.label',
+        });
+    }
+    async executeGitHubPullRequestDraft(input) {
+        return this.executeEnforcedAction({
+            ...input,
+            kind: 'github.pull_request.draft',
+        });
+    }
+    async executeEnforcedAction(input) {
+        const capability = getEnforcedExecutionCapability(input.kind);
+        if (input.action.tool !== capability.actionTool) {
+            throw new Error(`action.tool must be ${capability.actionTool} for ${input.kind}.`);
+        }
+        const allowed = await this.requireAllowed(input);
+        const grantInput = {
+            receiptId: allowed.receipt.id,
+            kind: input.kind,
+            payload: input.payload,
+            expiresInSeconds: input.grantExpiresInSeconds,
+        };
+        const grant = await this.client.issueExecutionGrant(grantInput, {
+            idempotencyKey: input.grantIdempotencyKey,
+        });
+        const execution = await this.client.executeEnforcedAction(input.kind, {
+            grantId: grant.data.id,
+            payload: input.payload,
+        }, {
+            idempotencyKey: input.executeIdempotencyKey,
+        });
+        return {
+            evaluation: allowed.evaluation,
+            receipt: allowed.receipt,
+            grant: grant.data,
+            execution: execution.data,
+        };
+    }
+}
+//# sourceMappingURL=agent-middleware.js.map

package/agent-middleware.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-middleware.js","sourceRoot":"","sources":["../../../packages/mandate-os-sdk/src/agent-middleware.ts"],"names":[],"mappings":"AAYA,OAAO,EACL,8BAA8B,GAE/B,MAAM,yBAAyB,CAAC;AAqCjC,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IACrD,YAAqB,OAAsB;QACzC,KAAK,CACH,sBAAsB,OAAO,CAAC,QAAQ,QAAQ,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC5F,CAAC;QAHiB,YAAO,GAAP,OAAO,CAAe;QAIzC,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;IAC7C,CAAC;CACF;AAED,MAAM,OAAO,wBAAwB;IACnC,YACmB,MAA4B,EAC5B,WAIb,EAAE;QALW,WAAM,GAAN,MAAM,CAAsB;QAC5B,aAAQ,GAAR,QAAQ,CAInB;IACL,CAAC;IAEJ,KAAK,CAAC,cAAc,CAAC,KAAqD;QACxE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAE7D,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,gFAAgF,CACjF,CAAC;QACJ,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,eAAe,CAClD;YACE,SAAS;YACT,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM;YAC5C,OAAO,EAAE;gBACP,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC;gBAChC,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;aACzB;YACD,OAAO,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC;SACxB,EACD;YACE,cAAc,EAAE,KAAK,CAAC,wBAAwB;SAC/C,CACF,CAAC;QACF,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QAE5C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QAED,OAAO;YACL,UAAU,EAAE,UAAU,CAAC,IAAI;YAC3B,OAAO;SACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAqD;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAEhD,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC1C,MAAM,IAAI,4BAA4B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,KAAqD,EACrD,QAGgB;QAEhB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QAEhD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,KAAoC;QAMhE,OAAO,IAAI,CAAC,qBAAqB,CAAC;YAChC,GAAG,KAAK;YACR,IAAI,EAAE,oBAAoB;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,6BAA6B,CACjC,KAA0C;QAO1C,OAAO,IAAI,CAAC,qBAAqB,CAAC;YAChC,GAAG,KAAK;YACR,IAAI,EAAE,2BAA2B;SAClC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,KAA+B;QAO/B,MAAM,UAAU,GAAG,8BAA8B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAE9D,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,UAAU,CAAC,UAAU,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CACb,uBAAuB,UAAU,CAAC,UAAU,QAAQ,KAAK,CAAC,IAAI,GAAG,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,GAAG;YACjB,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE;YAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,gBAAgB,EAAE,KAAK,CAAC,qBAAqB;SAClB,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAAC,UAAU,EAAE;YAC9D,cAAc,EAAE,KAAK,CAAC,mBAAmB;SAC1C,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,qBAAqB,CACvD,KAAK,CAAC,IAAI,EACV;YACE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,EACD;YACE,cAAc,EAAE,KAAK,CAAC,qBAAqB;SAC5C,CACF,CAAC;QAEF,OAAO;YACL,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,KAAK,CAAC,IAAI;YACjB,SAAS,EAAE,SAAS,CAAC,IAAI;SAC1B,CAAC;IACJ,CAAC;CACF"}

package/contracts.d.ts

@@ -0,0 +1,191 @@
+import type { ActionScenario, Decision, MandateDraft, ToolId, Zone } from './mandates';
+import type { EnforcedExecutionKind } from './enforced-capabilities';
+export type SignatureEnvelope = {
+    algorithm: 'hmac-sha256';
+    keyId: string;
+    payloadHash: string;
+    signature: string;
+    signedAt: string;
+};
+export type AuditActorType = 'human' | 'service' | 'agent' | 'system';
+export type AuditActor = {
+    type: AuditActorType;
+    id: string;
+    displayName: string;
+};
+export type AuditMetadata = {
+    requestId: string;
+    source: string;
+    actor: AuditActor;
+    workspaceId: string;
+    ipAddress: string | null;
+    userAgent: string | null;
+};
+export type MandateStatus = 'active' | 'revoked';
+export type ExecutionGrantKind = EnforcedExecutionKind;
+export type ExecutionGrantStatus = 'active' | 'consumed' | 'expired' | 'revoked';
+export type GitHubIssueLabelExecutionPayload = {
+    owner: string;
+    repo: string;
+    issueNumber: number;
+    labels: string[];
+};
+export type GitHubPullRequestDraftExecutionPayload = {
+    owner: string;
+    repo: string;
+    pullRequestNumber: number;
+};
+export type EnforcedExecutionPayloadByKind = {
+    'github.issue.label': GitHubIssueLabelExecutionPayload;
+    'github.pull_request.draft': GitHubPullRequestDraftExecutionPayload;
+};
+export type ExecutionGrantRecord = {
+    id: string;
+    workspaceId: string;
+    receiptId: string;
+    mandateId: string;
+    kind: ExecutionGrantKind;
+    payloadHash: string;
+    payloadPreview: Record<string, unknown>;
+    status: ExecutionGrantStatus;
+    createdAt: string;
+    expiresAt: string;
+    consumedAt: string | null;
+    consumedRequestId: string | null;
+    revokedAt: string | null;
+    audit: AuditMetadata;
+    signature: SignatureEnvelope;
+};
+export type GitHubIssueLabelExecutionGrantInput = {
+    receiptId: string;
+    kind: 'github.issue.label';
+    payload: GitHubIssueLabelExecutionPayload;
+    expiresInSeconds?: number;
+};
+export type GitHubPullRequestDraftExecutionGrantInput = {
+    receiptId: string;
+    kind: 'github.pull_request.draft';
+    payload: GitHubPullRequestDraftExecutionPayload;
+    expiresInSeconds?: number;
+};
+export type ExecutionGrantIssueInput = {
+    [K in ExecutionGrantKind]: {
+        receiptId: string;
+        kind: K;
+        payload: EnforcedExecutionPayloadByKind[K];
+        expiresInSeconds?: number;
+    };
+}[ExecutionGrantKind];
+export type GitHubIssueLabelExecutionInput = {
+    grantId: string;
+    payload: GitHubIssueLabelExecutionPayload;
+};
+export type GitHubPullRequestDraftExecutionInput = {
+    grantId: string;
+    payload: GitHubPullRequestDraftExecutionPayload;
+};
+export type EnforcedExecutionInput<K extends ExecutionGrantKind> = {
+    grantId: string;
+    payload: EnforcedExecutionPayloadByKind[K];
+};
+export type GitHubIssueLabelExecutionResult = {
+    grantId: string;
+    receiptId: string;
+    mandateId: string;
+    executedAt: string;
+    owner: string;
+    repo: string;
+    issueNumber: number;
+    labels: string[];
+};
+export type GitHubPullRequestDraftExecutionResult = {
+    grantId: string;
+    receiptId: string;
+    mandateId: string;
+    executedAt: string;
+    owner: string;
+    repo: string;
+    pullRequestNumber: number;
+    isDraft: true;
+    wasAlreadyDraft: boolean;
+    url: string | null;
+};
+export type EnforcedExecutionResultByKind = {
+    'github.issue.label': GitHubIssueLabelExecutionResult;
+    'github.pull_request.draft': GitHubPullRequestDraftExecutionResult;
+};
+export type EnforcedExecutionResult<K extends ExecutionGrantKind> = EnforcedExecutionResultByKind[K];
+export type MandateRecord = MandateDraft & {
+    id: string;
+    workspaceId: string;
+    version: number;
+    status: MandateStatus;
+    issuedAt: string;
+    updatedAt: string;
+    policyText: string;
+    fingerprint: string;
+    signature: SignatureEnvelope;
+    audit: AuditMetadata;
+};
+export type MandateSummary = Pick<MandateRecord, 'id' | 'workspaceId' | 'version' | 'status' | 'issuedAt' | 'updatedAt' | 'owner' | 'agentName' | 'purpose' | 'monthlyCapNok' | 'allowedRegion' | 'fingerprint'>;
+export type ReceiptRecord = {
+    id: string;
+    batchId: string;
+    receiptType: 'simulation';
+    workspaceId: string;
+    mandateId: string;
+    mandateVersion: number;
+    createdAt: string;
+    scenarioId: string;
+    title: string;
+    description: string;
+    tool: ToolId;
+    amountNok: number;
+    termMonths: number;
+    zone: Zone;
+    decision: Decision;
+    reasons: string[];
+    signature: SignatureEnvelope;
+    audit: AuditMetadata;
+};
+export type RuntimeSimulationBatch = {
+    batchId: string;
+    generatedAt: string;
+    mandate: MandateSummary;
+    receipts: ReceiptRecord[];
+    audit: AuditMetadata;
+};
+export type RuntimeActionEvaluationInput = {
+    mandateId: string;
+    actions: ActionScenario[];
+    source?: string | null;
+    details?: Record<string, unknown> | null;
+};
+export type SignatureVerificationResult = {
+    resourceType: 'mandate' | 'receipt' | 'execution_grant';
+    resourceId: string;
+    keyId: string;
+    algorithm: 'hmac-sha256';
+    valid: boolean;
+    verifiedAt: string;
+};
+export type ApiErrorIssue = {
+    path: string;
+    message: string;
+};
+export type ApiResponseMeta = {
+    requestId: string;
+};
+export type ApiSuccessPayload<T> = {
+    data: T;
+    meta: ApiResponseMeta;
+};
+export type ApiErrorPayload = {
+    error: {
+        code: string;
+        message: string;
+        issues?: ApiErrorIssue[];
+    };
+    meta?: ApiResponseMeta;
+};
+//# sourceMappingURL=contracts.d.ts.map

package/contracts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../../packages/mandate-os-sdk/src/contracts.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,MAAM,EACN,IAAI,EACL,MAAM,YAAY,CAAC;AACpB,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAErE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,aAAa,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEtE,MAAM,MAAM,UAAU,GAAG;IACvB,IAAI,EAAE,cAAc,CAAC;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;AACjD,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AACvD,MAAM,MAAM,oBAAoB,GAC5B,QAAQ,GACR,UAAU,GACV,SAAS,GACT,SAAS,CAAC;AAEd,MAAM,MAAM,gCAAgC,GAAG;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,sCAAsC,GAAG;IACnD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,oBAAoB,EAAE,gCAAgC,CAAC;IACvD,2BAA2B,EAAE,sCAAsC,CAAC;CACrE,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,kBAAkB,CAAC;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACxC,MAAM,EAAE,oBAAoB,CAAC;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,aAAa,CAAC;IACrB,SAAS,EAAE,iBAAiB,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,mCAAmC,GAAG;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,EAAE,gCAAgC,CAAC;IAC1C,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,yCAAyC,GAAG;IACtD,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,2BAA2B,CAAC;IAClC,OAAO,EAAE,sCAAsC,CAAC;IAChD,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;KACpC,CAAC,IAAI,kBAAkB,GAAG;QACzB,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,CAAC,CAAC;QACR,OAAO,EAAE,8BAA8B,CAAC,CAAC,CAAC,CAAC;QAC3C,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B;CACF,CAAC,kBAAkB,CAAC,CAAC;AAEtB,MAAM,MAAM,8BAA8B,GAAG;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gCAAgC,CAAC;CAC3C,CAAC;AAEF,MAAM,MAAM,oCAAoC,GAAG;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,sCAAsC,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,sBAAsB,CAAC,CAAC,SAAS,kBAAkB,IAAI;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,8BAA8B,CAAC,CAAC,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,qCAAqC,GAAG;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;IAC1B,OAAO,EAAE,IAAI,CAAC;IACd,eAAe,EAAE,OAAO,CAAC;IACzB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,oBAAoB,EAAE,+BAA+B,CAAC;IACtD,2BAA2B,EAAE,qCAAqC,CAAC;CACpE,CAAC;AAEF,MAAM,MAAM,uBAAuB,CAAC,CAAC,SAAS,kBAAkB,IAC9D,6BAA6B,CAAC,CAAC,CAAC,CAAC;AAEnC,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,aAAa,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,KAAK,EAAE,aAAa,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,IAAI,CAC/B,aAAa,EACX,IAAI,GACJ,aAAa,GACb,SAAS,GACT,QAAQ,GACR,UAAU,GACV,WAAW,GACX,OAAO,GACP,WAAW,GACX,SAAS,GACT,eAAe,GACf,eAAe,GACf,aAAa,CAChB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,YAAY,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,KAAK,EAAE,aAAa,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,KAAK,EAAE,aAAa,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,4BAA4B,GAAG;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,2BAA2B,GAAG;IACxC,YAAY,EAAE,SAAS,GAAG,SAAS,GAAG,iBAAiB,CAAC;IACxD,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,aAAa,CAAC;IACzB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,iBAAiB,CAAC,CAAC,IAAI;IACjC,IAAI,EAAE,CAAC,CAAC;IACR,IAAI,EAAE,eAAe,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE;QACL,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,CAAC,EAAE,aAAa,EAAE,CAAC;KAC1B,CAAC;IACF,IAAI,CAAC,EAAE,eAAe,CAAC;CACxB,CAAC"}

package/contracts.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=contracts.js.map

package/contracts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts.js","sourceRoot":"","sources":["../../../packages/mandate-os-sdk/src/contracts.ts"],"names":[],"mappings":""}