@motebit/protocol 0.8.0 → 1.0.0

package/dist/crypto-suite.js

@@ -0,0 +1,93 @@
+/**
+ * Cryptosuite registry — the protocol's open set of verification recipes.
+ *
+ * A cryptosuite is the complete specification of how a signature is
+ * produced and verified for a class of artifacts: which algorithm,
+ * which canonicalization, which signature and key encodings. Matches
+ * the pattern of W3C VC 2.0 (`cryptosuite: "eddsa-jcs-2022"`) and
+ * COSE/JOSE algorithm registries — one ID per full recipe, not just
+ * "which primitive."
+ *
+ * Every signed wire-format artifact in motebit MUST carry a `suite`
+ * field (see each artifact's `#### Wire format (foundation law)`
+ * subsection in `spec/*.md`). Verifiers dispatch on the suite value.
+ * Missing or unknown suites are rejected fail-closed. See the
+ * `check-suite-declared` (spec-side) and `check-suite-dispatch`
+ * (code-side) drift gates.
+ *
+ * Post-quantum migration becomes a new registry entry + dispatch arm
+ * in `@motebit/crypto/suite-dispatch.ts`, not a wire-format change.
+ *
+ * Permissive floor (Apache-2.0), type-only, zero runtime deps.
+ */
+export const SUITE_REGISTRY = Object.freeze({
+    "motebit-jcs-ed25519-b64-v1": {
+        id: "motebit-jcs-ed25519-b64-v1",
+        algorithm: "Ed25519",
+        canonicalization: "jcs",
+        signatureEncoding: "base64url",
+        publicKeyEncoding: "hex",
+        status: "preferred",
+        description: "RFC 8785 JCS canonicalization + Ed25519 signature + base64url. Execution receipts, delegation-lifecycle, dispute-lifecycle, migration-lifecycle artifacts.",
+    },
+    "motebit-jcs-ed25519-hex-v1": {
+        id: "motebit-jcs-ed25519-hex-v1",
+        algorithm: "Ed25519",
+        canonicalization: "jcs",
+        signatureEncoding: "hex",
+        publicKeyEncoding: "hex",
+        status: "preferred",
+        description: "RFC 8785 JCS canonicalization + Ed25519 signature + hex. Identity files, succession, guardian attestations, credential anchors, relay metadata.",
+    },
+    "motebit-jwt-ed25519-v1": {
+        id: "motebit-jwt-ed25519-v1",
+        algorithm: "Ed25519",
+        canonicalization: "json-stringify",
+        signatureEncoding: "base64url",
+        publicKeyEncoding: "hex",
+        status: "preferred",
+        description: "JWT-style bearer token (`base64url(payload).base64url(signature)`). Signed bearer tokens only; suite is a field of the JSON payload.",
+    },
+    "motebit-concat-ed25519-hex-v1": {
+        id: "motebit-concat-ed25519-hex-v1",
+        algorithm: "Ed25519",
+        canonicalization: "utf8-concat",
+        signatureEncoding: "hex",
+        publicKeyEncoding: "hex",
+        status: "preferred",
+        description: "UTF-8 concatenation of a fixed template + Ed25519 signature + hex. Federation handshake challenges and heartbeats.",
+    },
+    "eddsa-jcs-2022": {
+        id: "eddsa-jcs-2022",
+        algorithm: "Ed25519",
+        canonicalization: "jcs",
+        signatureEncoding: "multibase-base58btc",
+        publicKeyEncoding: "multibase-did-key",
+        status: "preferred",
+        description: "W3C Verifiable Credentials 2.0 Data Integrity cryptosuite (eddsa-jcs-2022). Verifiable Credentials and Presentations.",
+    },
+});
+/**
+ * Type guard — narrows `unknown` or arbitrary strings to `SuiteId`.
+ * Verifiers MUST call this before dispatching; an unchecked cast is a
+ * fail-open path that the `check-suite-dispatch` gate will flag.
+ */
+export function isSuiteId(value) {
+    return typeof value === "string" && value in SUITE_REGISTRY;
+}
+export function getSuiteEntry(id) {
+    return SUITE_REGISTRY[id];
+}
+/**
+ * Canonical list of all registered suite IDs, frozen. Consumers that
+ * need to iterate (tooling, docs, tests) should use this instead of
+ * `Object.keys(SUITE_REGISTRY)` so TypeScript sees the narrow union.
+ */
+export const ALL_SUITE_IDS = Object.freeze([
+    "motebit-jcs-ed25519-b64-v1",
+    "motebit-jcs-ed25519-hex-v1",
+    "motebit-jwt-ed25519-v1",
+    "motebit-concat-ed25519-hex-v1",
+    "eddsa-jcs-2022",
+]);
+//# sourceMappingURL=crypto-suite.js.map

package/dist/crypto-suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-suite.js","sourceRoot":"","sources":["../src/crypto-suite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AA6EH,MAAM,CAAC,MAAM,cAAc,GAA0C,MAAM,CAAC,MAAM,CAAC;IACjF,4BAA4B,EAAE;QAC5B,EAAE,EAAE,4BAA4B;QAChC,SAAS,EAAE,SAAS;QACpB,gBAAgB,EAAE,KAAK;QACvB,iBAAiB,EAAE,WAAW;QAC9B,iBAAiB,EAAE,KAAK;QACxB,MAAM,EAAE,WAAW;QACnB,WAAW,EACT,4JAA4J;KAC/J;IACD,4BAA4B,EAAE;QAC5B,EAAE,EAAE,4BAA4B;QAChC,SAAS,EAAE,SAAS;QACpB,gBAAgB,EAAE,KAAK;QACvB,iBAAiB,EAAE,KAAK;QACxB,iBAAiB,EAAE,KAAK;QACxB,MAAM,EAAE,WAAW;QACnB,WAAW,EACT,iJAAiJ;KACpJ;IACD,wBAAwB,EAAE;QACxB,EAAE,EAAE,wBAAwB;QAC5B,SAAS,EAAE,SAAS;QACpB,gBAAgB,EAAE,gBAAgB;QAClC,iBAAiB,EAAE,WAAW;QAC9B,iBAAiB,EAAE,KAAK;QACxB,MAAM,EAAE,WAAW;QACnB,WAAW,EACT,sIAAsI;KACzI;IACD,+BAA+B,EAAE;QAC/B,EAAE,EAAE,+BAA+B;QACnC,SAAS,EAAE,SAAS;QACpB,gBAAgB,EAAE,aAAa;QAC/B,iBAAiB,EAAE,KAAK;QACxB,iBAAiB,EAAE,KAAK;QACxB,MAAM,EAAE,WAAW;QACnB,WAAW,EACT,oHAAoH;KACvH;IACD,gBAAgB,EAAE;QAChB,EAAE,EAAE,gBAAgB;QACpB,SAAS,EAAE,SAAS;QACpB,gBAAgB,EAAE,KAAK;QACvB,iBAAiB,EAAE,qBAAqB;QACxC,iBAAiB,EAAE,mBAAmB;QACtC,MAAM,EAAE,WAAW;QACnB,WAAW,EACT,uHAAuH;KAC1H;CACF,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,cAAc,CAAC;AAC9D,CAAC;AASD,MAAM,UAAU,aAAa,CAAC,EAAU;IACtC,OAAO,cAAc,CAAC,EAAa,CAAC,CAAC;AACvC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAuB,MAAM,CAAC,MAAM,CAAC;IAC7D,4BAA4B;IAC5B,4BAA4B;IAC5B,wBAAwB;IACxB,+BAA+B;IAC/B,gBAAgB;CACjB,CAAC,CAAC"}

package/dist/discovery.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Discovery types — motebit/discovery@1.0.
+ *
+ * Permissive floor (Apache-2.0): these types define the interoperable format
+ * for relay discovery and agent resolution. Any implementation can produce
+ * and verify relay metadata and resolve agents using these types.
+ */
+/** Federation peer entry in relay metadata. */
+export interface RelayMetadataPeer {
+    /** Peer relay's MotebitId. */
+    relay_id: string;
+    /** Peer relay's canonical HTTPS endpoint. */
+    endpoint_url: string;
+}
+/**
+ * Signed relay metadata served at /.well-known/motebit.json.
+ *
+ * Foundation Law (§3.5):
+ * - Path MUST be /.well-known/motebit.json
+ * - Response MUST include relay_id, public_key, endpoint_url, protocol_version, signature
+ * - Endpoint MUST be unauthenticated
+ * - Signature MUST be verifiable using only the public_key in the response
+ */
+export interface RelayMetadata {
+    /** Spec version (e.g., "1.0"). */
+    protocol_version: string;
+    /** Relay's MotebitId (UUID v7). */
+    relay_id: string;
+    /** Human-readable relay name. */
+    display_name?: string;
+    /** Hex-encoded Ed25519 public key (64 hex chars). */
+    public_key: string;
+    /** Canonical HTTPS base URL. */
+    endpoint_url: string;
+    /** Supported feature capabilities. */
+    capabilities?: string[];
+    /** Platform fee as decimal (0.05 = 5%). */
+    fee_rate?: number;
+    /** Known federation peers. */
+    federation_peers?: RelayMetadataPeer[];
+    /** Approximate number of registered agents. */
+    agent_count?: number;
+    /**
+     * Cryptosuite discriminator. Always `"motebit-jcs-ed25519-hex-v1"` —
+     * JCS canonicalization of the unsigned metadata, Ed25519 primitive,
+     * hex signature encoding, hex public-key encoding. The field is
+     * included in the signed body; tampering with it breaks verification.
+     * Verifiers reject missing or unknown suite values fail-closed.
+     */
+    suite: "motebit-jcs-ed25519-hex-v1";
+    /** Ed25519 signature over canonical JSON of all other fields. */
+    signature: string;
+}
+/**
+ * Result of resolving an agent's location across the federation.
+ *
+ * Foundation Law (§5.3):
+ * - Agent resolution MUST propagate through federation peers
+ * - visited_relays set MUST be forwarded for loop prevention
+ * - Agents with federation_visible: false MUST NOT appear in remote results
+ * - resolved_via chain MUST be included for auditability
+ */
+export interface AgentResolutionResult {
+    /** The queried agent's MotebitId. */
+    motebit_id: string;
+    /** Whether the agent was located. */
+    found: boolean;
+    /** Hosting relay's MotebitId (present if found). */
+    relay_id?: string;
+    /** HTTPS endpoint of the hosting relay (present if found). */
+    relay_url?: string;
+    /** Agent's advertised capabilities. */
+    capabilities?: string[];
+    /** Agent's hex-encoded Ed25519 public key (present if found). */
+    public_key?: string;
+    /** Agent's declared settlement address (e.g. Solana base58), if any. */
+    settlement_address?: string;
+    /** Settlement modes the agent accepts (e.g. ["relay", "p2p"]). */
+    settlement_modes?: string[];
+    /** Chain of relay_ids traversed during resolution (audit trail). */
+    resolved_via: string[];
+    /** Whether result came from cache. */
+    cached: boolean;
+    /** Seconds until this result should be re-resolved. */
+    ttl: number;
+}
+//# sourceMappingURL=discovery.d.ts.map

package/dist/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,+CAA+C;AAC/C,MAAM,WAAW,iBAAiB;IAChC,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B,kCAAkC;IAClC,gBAAgB,EAAE,MAAM,CAAC;IACzB,mCAAmC;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,iCAAiC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,sCAAsC;IACtC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8BAA8B;IAC9B,gBAAgB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACvC,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,KAAK,EAAE,4BAA4B,CAAC;IACpC,iEAAiE;IACjE,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,qBAAqB;IACpC,qCAAqC;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,qCAAqC;IACrC,KAAK,EAAE,OAAO,CAAC;IACf,oDAAoD;IACpD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,oEAAoE;IACpE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,sCAAsC;IACtC,MAAM,EAAE,OAAO,CAAC;IAChB,uDAAuD;IACvD,GAAG,EAAE,MAAM,CAAC;CACb"}

package/dist/discovery.js

@@ -0,0 +1,9 @@
+/**
+ * Discovery types — motebit/discovery@1.0.
+ *
+ * Permissive floor (Apache-2.0): these types define the interoperable format
+ * for relay discovery and agent resolution. Any implementation can produce
+ * and verify relay metadata and resolve agents using these types.
+ */
+export {};
+//# sourceMappingURL=discovery.js.map

package/dist/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/dispute.d.ts

@@ -0,0 +1,176 @@
+/**
+ * Dispute types — motebit/dispute@1.0.
+ *
+ * Permissive floor (Apache-2.0): these types define the interoperable format
+ * for dispute resolution in agent-to-agent delegations. Any implementation can
+ * produce and verify dispute artifacts using these types.
+ */
+/** Dispute lifecycle states. Terminal states (final, expired) are irreversible. */
+export type DisputeState = "opened" | "evidence" | "arbitration" | "resolved" | "appealed" | "final" | "expired";
+/** Dispute resolution outcome. */
+export type DisputeOutcome = "upheld" | "overturned" | "split";
+/** Dispute category (§4.2). */
+export type DisputeCategory = "quality" | "non_payment" | "receipt_invalid" | "unauthorized" | "other";
+/** Fund action resulting from dispute resolution (§7.2). */
+export type DisputeFundAction = "release_to_worker" | "refund_to_delegator" | "split";
+/**
+ * Request to open a dispute on a completed task.
+ *
+ * Foundation Law (§4.4):
+ * - task_id and allocation_id are required — no economic binding, no dispute
+ * - Filing party must be a direct party to the referenced task
+ * - At least one evidence reference is required at filing time
+ * - A relay must not reject an eligible dispute
+ */
+export interface DisputeRequest {
+    /** UUID v7, generated by filing party. */
+    dispute_id: string;
+    /** Must reference an existing task. */
+    task_id: string;
+    /** Must reference the task's BudgetAllocation. */
+    allocation_id: string;
+    /** MotebitId of the filing party. */
+    filed_by: string;
+    /** MotebitId of the other task party. */
+    respondent: string;
+    /** Dispute category. */
+    category: DisputeCategory;
+    /** Human-readable explanation. */
+    description: string;
+    /** At least one reference to a signed artifact. */
+    evidence_refs: string[];
+    /** Unix ms. */
+    filed_at: number;
+    /**
+     * Cryptosuite discriminator. Always `"motebit-jcs-ed25519-b64-v1"` —
+     * JCS canonicalization, Ed25519 primitive, base64url signature
+     * encoding. Verifiers reject missing or unknown values fail-closed.
+     */
+    suite: "motebit-jcs-ed25519-b64-v1";
+    /** Ed25519 over canonical JSON of all fields except signature. */
+    signature: string;
+}
+/** Evidence types that can be submitted in a dispute (§5.1). */
+export type DisputeEvidenceType = "execution_receipt" | "credential" | "anchor_proof" | "settlement_proof" | "execution_ledger" | "attestation";
+/**
+ * Evidence submitted in a dispute.
+ *
+ * Foundation Law (§5.4):
+ * - Evidence must be cryptographically verifiable
+ * - Both parties must have equal access to the evidence window
+ * - The relay must not tamper with or withhold submitted evidence
+ */
+export interface DisputeEvidence {
+    /** Must reference an open dispute. */
+    dispute_id: string;
+    /** MotebitId of the submitting party. */
+    submitted_by: string;
+    /** Evidence type. */
+    evidence_type: DisputeEvidenceType;
+    /** The signed artifact itself. */
+    evidence_data: Record<string, unknown>;
+    /** What this evidence demonstrates. */
+    description: string;
+    /** Unix ms. */
+    submitted_at: number;
+    /**
+     * Cryptosuite discriminator. Always `"motebit-jcs-ed25519-b64-v1"`
+     * (see DisputeRequest for the full recipe).
+     */
+    suite: "motebit-jcs-ed25519-b64-v1";
+    /** Ed25519 over canonical JSON of all fields except signature. */
+    signature: string;
+}
+/**
+ * Individual vote by a federation peer in federation adjudication (§6.2).
+ *
+ * Foundation Law (§6.5):
+ * - Federation resolution must include individual AdjudicatorVote entries
+ * - Aggregated-only verdicts are rejected
+ * - Each vote signature MUST cover `dispute_id` — votes are not portable
+ *   across disputes (a malicious adjudicator collecting old votes from
+ *   other disputes cannot stuff them into a new resolution because the
+ *   dispute_id binding breaks the signature).
+ */
+export interface AdjudicatorVote {
+    /**
+     * Dispute this vote applies to. Signature-bound: the canonical body
+     * includes this field, so a vote signed for dispute A is rejected
+     * on submission to dispute B (the relay/aggregator reconstructs the
+     * canonical bytes against the target dispute_id and the signature
+     * fails to verify against the wrong binding).
+     */
+    dispute_id: string;
+    /** Federation peer MotebitId. */
+    peer_id: string;
+    /** Vote outcome. */
+    vote: DisputeOutcome;
+    /** Per-peer explanation. */
+    rationale: string;
+    /**
+     * Cryptosuite discriminator. Always `"motebit-jcs-ed25519-b64-v1"`
+     * (see DisputeRequest for the full recipe).
+     */
+    suite: "motebit-jcs-ed25519-b64-v1";
+    /** Ed25519 by the voting peer over canonical JSON of all fields except signature. */
+    signature: string;
+}
+/**
+ * Dispute resolution by adjudicator.
+ *
+ * Foundation Law (§6.5):
+ * - Resolution must include a signed rationale
+ * - A relay must not self-adjudicate when it is the defendant
+ */
+export interface DisputeResolution {
+    /** Must reference the dispute. */
+    dispute_id: string;
+    /** Resolution outcome. */
+    resolution: DisputeOutcome;
+    /** Signed explanation of the decision. */
+    rationale: string;
+    /** How funds are distributed. */
+    fund_action: DisputeFundAction;
+    /** [0, 1], worker's portion. 1.0 = all to worker. */
+    split_ratio: number;
+    /** MotebitId or relay ID of the adjudicating entity. */
+    adjudicator: string;
+    /** For federation — empty for single-relay. */
+    adjudicator_votes: AdjudicatorVote[];
+    /** Unix ms. */
+    resolved_at: number;
+    /**
+     * Cryptosuite discriminator. Always `"motebit-jcs-ed25519-b64-v1"`
+     * (see DisputeRequest for the full recipe).
+     */
+    suite: "motebit-jcs-ed25519-b64-v1";
+    /** Ed25519 over canonical JSON of all fields except signature. */
+    signature: string;
+}
+/**
+ * Appeal filed against a dispute resolution.
+ *
+ * Foundation Law (§8.4):
+ * - One appeal per dispute — final state after appeal is terminal
+ * - New evidence may be submitted with the appeal
+ */
+export interface DisputeAppeal {
+    /** Must reference a resolved dispute. */
+    dispute_id: string;
+    /** MotebitId of the appealing party. */
+    appealed_by: string;
+    /** Why the resolution is incorrect. */
+    reason: string;
+    /** Optional: new evidence references. */
+    additional_evidence?: string[];
+    /** Unix ms. */
+    appealed_at: number;
+    /**
+     * Cryptosuite discriminator. Always `"motebit-jcs-ed25519-b64-v1"`
+     * (see DisputeRequest for the full recipe).
+     */
+    suite: "motebit-jcs-ed25519-b64-v1";
+    /** Ed25519 over canonical JSON of all fields except signature. */
+    signature: string;
+}
+//# sourceMappingURL=dispute.d.ts.map

package/dist/dispute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispute.d.ts","sourceRoot":"","sources":["../src/dispute.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,mFAAmF;AACnF,MAAM,MAAM,YAAY,GACpB,QAAQ,GACR,UAAU,GACV,aAAa,GACb,UAAU,GACV,UAAU,GACV,OAAO,GACP,SAAS,CAAC;AAEd,kCAAkC;AAClC,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC;AAE/D,+BAA+B;AAC/B,MAAM,MAAM,eAAe,GACvB,SAAS,GACT,aAAa,GACb,iBAAiB,GACjB,cAAc,GACd,OAAO,CAAC;AAEZ,4DAA4D;AAC5D,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,qBAAqB,GAAG,OAAO,CAAC;AAItF;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC7B,0CAA0C;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,kDAAkD;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,QAAQ,EAAE,eAAe,CAAC;IAC1B,kCAAkC;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,mDAAmD;IACnD,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,eAAe;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,KAAK,EAAE,4BAA4B,CAAC;IACpC,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,gEAAgE;AAChE,MAAM,MAAM,mBAAmB,GAC3B,mBAAmB,GACnB,YAAY,GACZ,cAAc,GACd,kBAAkB,GAClB,kBAAkB,GAClB,aAAa,CAAC;AAElB;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,qBAAqB;IACrB,aAAa,EAAE,mBAAmB,CAAC;IACnC,kCAAkC;IAClC,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,uCAAuC;IACvC,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe;IACf,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,KAAK,EAAE,4BAA4B,CAAC;IACpC,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;;OAMG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,iCAAiC;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,oBAAoB;IACpB,IAAI,EAAE,cAAc,CAAC;IACrB,4BAA4B;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,KAAK,EAAE,4BAA4B,CAAC;IACpC,qFAAqF;IACrF,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,0BAA0B;IAC1B,UAAU,EAAE,cAAc,CAAC;IAC3B,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,iCAAiC;IACjC,WAAW,EAAE,iBAAiB,CAAC;IAC/B,qDAAqD;IACrD,WAAW,EAAE,MAAM,CAAC;IACpB,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAC;IACpB,+CAA+C;IAC/C,iBAAiB,EAAE,eAAe,EAAE,CAAC;IACrC,eAAe;IACf,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,KAAK,EAAE,4BAA4B,CAAC;IACpC,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;;;GAMG;AACH,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,wCAAwC;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,yCAAyC;IACzC,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,eAAe;IACf,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,KAAK,EAAE,4BAA4B,CAAC;IACpC,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/dispute.js

@@ -0,0 +1,9 @@
+/**
+ * Dispute types — motebit/dispute@1.0.
+ *
+ * Permissive floor (Apache-2.0): these types define the interoperable format
+ * for dispute resolution in agent-to-agent delegations. Any implementation can
+ * produce and verify dispute artifacts using these types.
+ */
+export {};
+//# sourceMappingURL=dispute.js.map

package/dist/dispute.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispute.js","sourceRoot":"","sources":["../src/dispute.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/goal-lifecycle.d.ts

@@ -0,0 +1,129 @@
+/**
+ * Goal-lifecycle event payload types — wire format for `goal-lifecycle-v1.md`.
+ *
+ * A goal is the unit of intent a motebit owns: a prompt plus scheduling +
+ * progress metadata. Goals sync across a user's devices via the event log
+ * substrate — a second device joining the identity replays the ledger and
+ * reconstructs the goal set without contacting the originating device
+ * directly. Because the ledger crosses device boundaries, the payload of
+ * every goal-lifecycle event must be pinned as a wire-format type so a
+ * non-TypeScript implementer (Python daemon, Go federation peer, browser
+ * worker that doesn't bundle this package) validates payloads against the
+ * committed JSON Schema rather than TypeScript's structural view.
+ *
+ * Five event types cover the full lifecycle:
+ *   1. `goal_created`  — initial declaration OR a yaml-driven revision
+ *   2. `goal_executed` — a run completed with a summary, tool count, etc.
+ *   3. `goal_progress` — narrative progress note emitted mid-run
+ *   4. `goal_completed` — goal reached its terminal state (success / failure)
+ *   5. `goal_removed`  — goal deleted, either user-initiated or yaml-pruned
+ *
+ * Every type named here is referenced by a `### X.Y — Name` section under a
+ * `#### Wire format (foundation law)` block in `spec/goal-lifecycle-v1.md`,
+ * so `check-spec-coverage` (invariant #9) keeps the spec and types in
+ * lockstep. Implementing package declaration lives in
+ * `packages/runtime/package.json`'s `motebit.implements` array, enforced by
+ * `check-spec-impl-coverage` (invariant #31).
+ */
+/**
+ * Emitted when a goal is declared. Two shapes in current emitters:
+ *
+ *  - **Initial creation** — carries `prompt` (the intent text) plus optional
+ *    scheduler metadata.
+ *  - **Revision** — carries `update: true` alongside `goal_id` and the
+ *    updated routine metadata. `prompt` MAY be absent when only scheduling
+ *    metadata changed.
+ *
+ * The distinction is in-band via the `update` marker. A future spec
+ * revision MAY split these into two event types (`goal_created` vs
+ * `goal_updated`), but v1 keeps them merged to match the shipping emitter
+ * flow in `apps/cli/src/subcommands/up.ts`.
+ */
+export interface GoalCreatedPayload {
+    /** Stable identifier of the goal. UUID v4 at creation; stable across revisions. */
+    readonly goal_id: string;
+    /** Natural-language goal text. REQUIRED on initial creation; MAY be absent on revision. */
+    readonly prompt?: string;
+    /** Scheduling cadence in milliseconds. MAY be absent for one-shot goals. */
+    readonly interval_ms?: number;
+    /** Scheduling mode — `"recurring"`, `"once"`, or a future-reserved variant. */
+    readonly mode?: string;
+    /** Wall-clock anchor for the first run (Unix milliseconds). */
+    readonly wall_clock_ms?: number;
+    /** User-facing project grouping, opaque to the protocol. */
+    readonly project_id?: string;
+    /** Source routine id when the goal was materialized from a motebit.yaml routine. */
+    readonly routine_id?: string;
+    /** Free-text source attribution for the routine (e.g. yaml file path). */
+    readonly routine_source?: string;
+    /** Canonical hash of the source routine. Used by revision flows to detect drift. */
+    readonly routine_hash?: string;
+    /** Marker set on yaml-driven revisions; absent on initial creation. */
+    readonly update?: true;
+}
+/**
+ * Emitted when a goal run finishes. Carries either the success metrics
+ * (summary / tool_calls / memories) or an `error` string — the presence
+ * of `error` distinguishes a failed run from a successful one. Distinct
+ * from `goal_completed`: `goal_executed` records each run's outcome,
+ * `goal_completed` records the terminal transition of a one-shot goal or
+ * a user-initiated completion. A recurring goal can emit many
+ * `goal_executed` events (successes + failures) and at most one
+ * `goal_completed`.
+ */
+export interface GoalExecutedPayload {
+    readonly goal_id: string;
+    /** Up to ~200 characters of the agent's response text for this run. Present on success. */
+    readonly summary?: string;
+    /** Number of tool calls performed during the run. Present on success. */
+    readonly tool_calls?: number;
+    /** Number of memory nodes formed during the run. Present on success. */
+    readonly memories?: number;
+    /**
+     * Error message for a failed run. Present iff the run terminated in
+     * failure. Consumers MUST NOT parse it semantically — treat as opaque
+     * free-text. A future spec version MAY add structured error codes;
+     * receivers MUST tolerate their absence.
+     */
+    readonly error?: string;
+}
+/**
+ * Narrative progress note emitted by the `report_progress` tool during a
+ * goal run. Distinct from `goal_executed`: progress notes are events
+ * within a run; `goal_executed` records the run's terminal outcome.
+ */
+export interface GoalProgressPayload {
+    readonly goal_id: string;
+    /** Free-text progress narration from the agent. */
+    readonly note: string;
+}
+/**
+ * Emitted when a goal reaches its terminal state. Two paths today:
+ *
+ *  - Agent-driven: the `complete_goal` tool is invoked with a `reason`.
+ *  - One-shot auto-complete: a one-shot goal finishes its single run
+ *    without the agent invoking the tool; the scheduler emits the event
+ *    with `reason: "one-shot auto-complete"`.
+ *
+ * Recurring goals do not emit `goal_completed` until the user removes
+ * them (→ `goal_removed`).
+ */
+export interface GoalCompletedPayload {
+    readonly goal_id: string;
+    /** Free-text rationale for completion. Consumers MUST NOT parse it semantically. */
+    readonly reason?: string;
+}
+/**
+ * Emitted when a goal is deleted. Sources include the `motebit goal
+ * remove` CLI command and yaml re-apply operations that prune goals no
+ * longer declared in the source routine file. The original `goal_created`
+ * event persists in the log; storage adapters MUST retain it.
+ */
+export interface GoalRemovedPayload {
+    readonly goal_id: string;
+    /** Source routine id when the removal was yaml-pruned. */
+    readonly routine_id?: string;
+    /** Free-text rationale (e.g. `"yaml_pruned"` or a user reason). */
+    readonly reason?: string;
+}
+//# sourceMappingURL=goal-lifecycle.d.ts.map

package/dist/goal-lifecycle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goal-lifecycle.d.ts","sourceRoot":"","sources":["../src/goal-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,kBAAkB;IACjC,mFAAmF;IACnF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2FAA2F;IAC3F,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,+EAA+E;IAC/E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+DAA+D;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,oFAAoF;IACpF,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,oFAAoF;IACpF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,2FAA2F;IAC3F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,0DAA0D;IAC1D,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B"}

package/dist/goal-lifecycle.js

@@ -0,0 +1,29 @@
+/**
+ * Goal-lifecycle event payload types — wire format for `goal-lifecycle-v1.md`.
+ *
+ * A goal is the unit of intent a motebit owns: a prompt plus scheduling +
+ * progress metadata. Goals sync across a user's devices via the event log
+ * substrate — a second device joining the identity replays the ledger and
+ * reconstructs the goal set without contacting the originating device
+ * directly. Because the ledger crosses device boundaries, the payload of
+ * every goal-lifecycle event must be pinned as a wire-format type so a
+ * non-TypeScript implementer (Python daemon, Go federation peer, browser
+ * worker that doesn't bundle this package) validates payloads against the
+ * committed JSON Schema rather than TypeScript's structural view.
+ *
+ * Five event types cover the full lifecycle:
+ *   1. `goal_created`  — initial declaration OR a yaml-driven revision
+ *   2. `goal_executed` — a run completed with a summary, tool count, etc.
+ *   3. `goal_progress` — narrative progress note emitted mid-run
+ *   4. `goal_completed` — goal reached its terminal state (success / failure)
+ *   5. `goal_removed`  — goal deleted, either user-initiated or yaml-pruned
+ *
+ * Every type named here is referenced by a `### X.Y — Name` section under a
+ * `#### Wire format (foundation law)` block in `spec/goal-lifecycle-v1.md`,
+ * so `check-spec-coverage` (invariant #9) keeps the spec and types in
+ * lockstep. Implementing package declaration lives in
+ * `packages/runtime/package.json`'s `motebit.implements` array, enforced by
+ * `check-spec-impl-coverage` (invariant #31).
+ */
+export {};
+//# sourceMappingURL=goal-lifecycle.js.map

package/dist/goal-lifecycle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goal-lifecycle.js","sourceRoot":"","sources":["../src/goal-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG"}