@odingard/guardian-sdk 0.0.0-stage → 0.2.0

package/dist-dts/contracts/execution.d.ts

@@ -0,0 +1,1732 @@
+import { z } from "zod";
+export declare const ProviderSchema: z.ZodEnum<{
+    api: "api";
+    tool: "tool";
+    local: "local";
+    guardian: "guardian";
+    gmail: "gmail";
+    gcalendar: "gcalendar";
+    file: "file";
+    protected_data: "protected_data";
+    graph: "graph";
+    clawlink: "clawlink";
+    "payment-sandbox": "payment-sandbox";
+}>;
+export declare const ConnectionProfileSchema: z.ZodEnum<{
+    "guardian-agent-v1": "guardian-agent-v1";
+    "gmail-split-compose-metadata": "gmail-split-compose-metadata";
+    "gmail-compose-readonly": "gmail-compose-readonly";
+    "graph-readwrite-send": "graph-readwrite-send";
+    "api-bearer-request": "api-bearer-request";
+    "tool-mcp-server": "tool-mcp-server";
+    "gcalendar-events-v1": "gcalendar-events-v1";
+    "payment-sandbox-charge": "payment-sandbox-charge";
+    "file-local-store": "file-local-store";
+    "protected-data-store": "protected-data-store";
+    "local-agent-runtime": "local-agent-runtime";
+    "clawlink-executions": "clawlink-executions";
+}>;
+export declare const VerificationLevelSchema: z.ZodEnum<{
+    "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+    "post-commit-content": "post-commit-content";
+}>;
+export declare const LeasePurposeSchema: z.ZodEnum<{
+    readback: "readback";
+    observe: "observe";
+    account: "account";
+    prepare: "prepare";
+    commit: "commit";
+    cleanup: "cleanup";
+}>;
+export declare const ExecutionStateSchema: z.ZodEnum<{
+    unknown: "unknown";
+    verified: "verified";
+    mismatch: "mismatch";
+    "commit-rejected": "commit-rejected";
+    aborted: "aborted";
+    reserved: "reserved";
+    redeemed: "redeemed";
+    preparing: "preparing";
+    prepared: "prepared";
+    committing: "committing";
+    unresolved: "unresolved";
+}>;
+export declare const ExecutionFailureCodeSchema: z.ZodEnum<{
+    SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+    CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+    PREPARE_REJECTED: "PREPARE_REJECTED";
+    PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+    READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+    PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+    COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+    AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+    COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+    ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+    COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+    COMMIT_REJECTED: "COMMIT_REJECTED";
+    EFFECT_MISMATCH: "EFFECT_MISMATCH";
+    DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+}>;
+export declare const ExecutionAbortReasonSchema: z.ZodLiteral<"INTERRUPTED_BEFORE_ATTEMPT">;
+export declare const ExecutionUnknownReasonSchema: z.ZodEnum<{
+    COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+    COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+    COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+    COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+    COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+    COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+    REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+    AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+    VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+}>;
+export declare const ProviderIdSchema: z.ZodString;
+export declare const InternetMessageIdSchema: z.ZodString;
+export declare const ProviderObjectRefSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"gmail-draft">;
+    draftId: z.ZodString;
+    messageId: z.ZodString;
+    threadId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"graph-message">;
+    immutableId: z.ZodString;
+    internetMessageId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"api-request">;
+    requestDigest: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"tool-call">;
+    callDigest: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"gcalendar-plan">;
+    requestDigest: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"payment-order">;
+    orderId: z.ZodString;
+    intentId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"file-request">;
+    requestDigest: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"protected_data-op">;
+    operationDigest: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"guardian-call">;
+    callDigest: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"clawlink-execution">;
+    requestDigest: z.ZodString;
+}, z.core.$strict>], "kind">;
+export declare const ProviderSentRefSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"gmail-message">;
+    messageId: z.ZodString;
+    threadId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"graph-message">;
+    immutableId: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"api-response">;
+    status: z.ZodNumber;
+    bodyBytes: z.ZodNumber;
+    headersDigest: z.ZodString;
+    bodyDigest: z.ZodString;
+    bodyPreview: z.ZodString;
+    truncated: z.ZodBoolean;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"tool-response">;
+    operation: z.ZodEnum<{
+        enable: "enable";
+        install: "install";
+        invoke: "invoke";
+    }>;
+    toolName: z.ZodString;
+    status: z.ZodNullable<z.ZodNumber>;
+    resultDigest: z.ZodString;
+    detail: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"gcalendar-event">;
+    eventId: z.ZodString;
+    status: z.ZodEnum<{
+        cancelled: "cancelled";
+        confirmed: "confirmed";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"payment-charge">;
+    chargeId: z.ZodString;
+    amountCents: z.ZodNumber;
+    currency: z.ZodString;
+    status: z.ZodEnum<{
+        succeeded: "succeeded";
+        refunded: "refunded";
+        returned: "returned";
+        voided: "voided";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"file-effect">;
+    operation: z.ZodEnum<{
+        share: "share";
+        delete: "delete";
+        read: "read";
+        write: "write";
+    }>;
+    path: z.ZodString;
+    contentDigest: z.ZodNullable<z.ZodString>;
+    bytes: z.ZodNumber;
+    shareId: z.ZodNullable<z.ZodString>;
+    grantee: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"protected_data-effect">;
+    operation: z.ZodEnum<{
+        view: "view";
+        use: "use";
+        disclose: "disclose";
+        persist: "persist";
+    }>;
+    fieldRef: z.ZodString;
+    valueDigest: z.ZodString;
+    counterparty: z.ZodNullable<z.ZodString>;
+    maskedPreview: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"guardian-effect">;
+    operation: z.ZodString;
+    subject: z.ZodNullable<z.ZodString>;
+    status: z.ZodString;
+    resultDigest: z.ZodString;
+    detail: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"clawlink-execution">;
+    executionId: z.ZodString;
+    executionStatus: z.ZodLiteral<"succeeded">;
+    resultDigest: z.ZodString;
+    detail: z.ZodString;
+}, z.core.$strict>], "kind">;
+export declare const VerifiedOutcomeSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"verified">;
+    sentRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"gmail-message">;
+        messageId: z.ZodString;
+        threadId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"graph-message">;
+        immutableId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"api-response">;
+        status: z.ZodNumber;
+        bodyBytes: z.ZodNumber;
+        headersDigest: z.ZodString;
+        bodyDigest: z.ZodString;
+        bodyPreview: z.ZodString;
+        truncated: z.ZodBoolean;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool-response">;
+        operation: z.ZodEnum<{
+            enable: "enable";
+            install: "install";
+            invoke: "invoke";
+        }>;
+        toolName: z.ZodString;
+        status: z.ZodNullable<z.ZodNumber>;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"gcalendar-event">;
+        eventId: z.ZodString;
+        status: z.ZodEnum<{
+            cancelled: "cancelled";
+            confirmed: "confirmed";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"payment-charge">;
+        chargeId: z.ZodString;
+        amountCents: z.ZodNumber;
+        currency: z.ZodString;
+        status: z.ZodEnum<{
+            succeeded: "succeeded";
+            refunded: "refunded";
+            returned: "returned";
+            voided: "voided";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"file-effect">;
+        operation: z.ZodEnum<{
+            share: "share";
+            delete: "delete";
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+        contentDigest: z.ZodNullable<z.ZodString>;
+        bytes: z.ZodNumber;
+        shareId: z.ZodNullable<z.ZodString>;
+        grantee: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"protected_data-effect">;
+        operation: z.ZodEnum<{
+            view: "view";
+            use: "use";
+            disclose: "disclose";
+            persist: "persist";
+        }>;
+        fieldRef: z.ZodString;
+        valueDigest: z.ZodString;
+        counterparty: z.ZodNullable<z.ZodString>;
+        maskedPreview: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-effect">;
+        operation: z.ZodString;
+        subject: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        executionId: z.ZodString;
+        executionStatus: z.ZodLiteral<"succeeded">;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    observedDigest: z.ZodString;
+    effectDigest: z.ZodString;
+    level: z.ZodEnum<{
+        "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+        "post-commit-content": "post-commit-content";
+    }>;
+    observedAtEpochMs: z.ZodNumber;
+}, z.core.$strict>;
+export declare const MismatchOutcomeSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"mismatch">;
+    code: z.ZodEnum<{
+        EFFECT_MISMATCH: "EFFECT_MISMATCH";
+        DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+    }>;
+    observedDigest: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export declare const CommitRejectedOutcomeSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"commit-rejected">;
+    providerStatus: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<409>, z.ZodLiteral<413>, z.ZodLiteral<422>, z.ZodLiteral<429>]>;
+    confirmedAtEpochMs: z.ZodNumber;
+}, z.core.$strict>;
+export declare const UnknownOutcomeSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"unknown">;
+    reason: z.ZodEnum<{
+        COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+        COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+        COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+        COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+        COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+        COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+        REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+        AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+        VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+    }>;
+}, z.core.$strict>;
+export declare const AbortedOutcomeSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"aborted">;
+    code: z.ZodEnum<{
+        SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+        CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+        PREPARE_REJECTED: "PREPARE_REJECTED";
+        PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+        READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+        PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+        COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+        AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+        COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+        ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+        COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+        COMMIT_REJECTED: "COMMIT_REJECTED";
+        EFFECT_MISMATCH: "EFFECT_MISMATCH";
+        DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+    }>;
+    orphanDraftPossible: z.ZodBoolean;
+}, z.core.$strict>;
+export declare const UnresolvedOutcomeSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"unresolved">;
+    reason: z.ZodEnum<{
+        COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+        COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+        COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+        COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+        COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+        COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+        REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+        AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+        VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+    }>;
+}, z.core.$strict>;
+export declare const OutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"verified">;
+    sentRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"gmail-message">;
+        messageId: z.ZodString;
+        threadId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"graph-message">;
+        immutableId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"api-response">;
+        status: z.ZodNumber;
+        bodyBytes: z.ZodNumber;
+        headersDigest: z.ZodString;
+        bodyDigest: z.ZodString;
+        bodyPreview: z.ZodString;
+        truncated: z.ZodBoolean;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool-response">;
+        operation: z.ZodEnum<{
+            enable: "enable";
+            install: "install";
+            invoke: "invoke";
+        }>;
+        toolName: z.ZodString;
+        status: z.ZodNullable<z.ZodNumber>;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"gcalendar-event">;
+        eventId: z.ZodString;
+        status: z.ZodEnum<{
+            cancelled: "cancelled";
+            confirmed: "confirmed";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"payment-charge">;
+        chargeId: z.ZodString;
+        amountCents: z.ZodNumber;
+        currency: z.ZodString;
+        status: z.ZodEnum<{
+            succeeded: "succeeded";
+            refunded: "refunded";
+            returned: "returned";
+            voided: "voided";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"file-effect">;
+        operation: z.ZodEnum<{
+            share: "share";
+            delete: "delete";
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+        contentDigest: z.ZodNullable<z.ZodString>;
+        bytes: z.ZodNumber;
+        shareId: z.ZodNullable<z.ZodString>;
+        grantee: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"protected_data-effect">;
+        operation: z.ZodEnum<{
+            view: "view";
+            use: "use";
+            disclose: "disclose";
+            persist: "persist";
+        }>;
+        fieldRef: z.ZodString;
+        valueDigest: z.ZodString;
+        counterparty: z.ZodNullable<z.ZodString>;
+        maskedPreview: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-effect">;
+        operation: z.ZodString;
+        subject: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        executionId: z.ZodString;
+        executionStatus: z.ZodLiteral<"succeeded">;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    observedDigest: z.ZodString;
+    effectDigest: z.ZodString;
+    level: z.ZodEnum<{
+        "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+        "post-commit-content": "post-commit-content";
+    }>;
+    observedAtEpochMs: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"mismatch">;
+    code: z.ZodEnum<{
+        EFFECT_MISMATCH: "EFFECT_MISMATCH";
+        DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+    }>;
+    observedDigest: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"commit-rejected">;
+    providerStatus: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<409>, z.ZodLiteral<413>, z.ZodLiteral<422>, z.ZodLiteral<429>]>;
+    confirmedAtEpochMs: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"unknown">;
+    reason: z.ZodEnum<{
+        COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+        COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+        COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+        COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+        COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+        COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+        REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+        AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+        VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"aborted">;
+    code: z.ZodEnum<{
+        SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+        CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+        PREPARE_REJECTED: "PREPARE_REJECTED";
+        PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+        READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+        PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+        COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+        AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+        COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+        ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+        COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+        COMMIT_REJECTED: "COMMIT_REJECTED";
+        EFFECT_MISMATCH: "EFFECT_MISMATCH";
+        DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+    }>;
+    orphanDraftPossible: z.ZodBoolean;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"unresolved">;
+    reason: z.ZodEnum<{
+        COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+        COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+        COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+        COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+        COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+        COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+        REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+        AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+        VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+    }>;
+}, z.core.$strict>], "kind">;
+export declare const PendingOutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    kind: z.ZodLiteral<"verified">;
+    sentRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"gmail-message">;
+        messageId: z.ZodString;
+        threadId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"graph-message">;
+        immutableId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"api-response">;
+        status: z.ZodNumber;
+        bodyBytes: z.ZodNumber;
+        headersDigest: z.ZodString;
+        bodyDigest: z.ZodString;
+        bodyPreview: z.ZodString;
+        truncated: z.ZodBoolean;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool-response">;
+        operation: z.ZodEnum<{
+            enable: "enable";
+            install: "install";
+            invoke: "invoke";
+        }>;
+        toolName: z.ZodString;
+        status: z.ZodNullable<z.ZodNumber>;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"gcalendar-event">;
+        eventId: z.ZodString;
+        status: z.ZodEnum<{
+            cancelled: "cancelled";
+            confirmed: "confirmed";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"payment-charge">;
+        chargeId: z.ZodString;
+        amountCents: z.ZodNumber;
+        currency: z.ZodString;
+        status: z.ZodEnum<{
+            succeeded: "succeeded";
+            refunded: "refunded";
+            returned: "returned";
+            voided: "voided";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"file-effect">;
+        operation: z.ZodEnum<{
+            share: "share";
+            delete: "delete";
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+        contentDigest: z.ZodNullable<z.ZodString>;
+        bytes: z.ZodNumber;
+        shareId: z.ZodNullable<z.ZodString>;
+        grantee: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"protected_data-effect">;
+        operation: z.ZodEnum<{
+            view: "view";
+            use: "use";
+            disclose: "disclose";
+            persist: "persist";
+        }>;
+        fieldRef: z.ZodString;
+        valueDigest: z.ZodString;
+        counterparty: z.ZodNullable<z.ZodString>;
+        maskedPreview: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-effect">;
+        operation: z.ZodString;
+        subject: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        executionId: z.ZodString;
+        executionStatus: z.ZodLiteral<"succeeded">;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    observedDigest: z.ZodString;
+    effectDigest: z.ZodString;
+    level: z.ZodEnum<{
+        "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+        "post-commit-content": "post-commit-content";
+    }>;
+    observedAtEpochMs: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"mismatch">;
+    code: z.ZodEnum<{
+        EFFECT_MISMATCH: "EFFECT_MISMATCH";
+        DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+    }>;
+    observedDigest: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"commit-rejected">;
+    providerStatus: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<409>, z.ZodLiteral<413>, z.ZodLiteral<422>, z.ZodLiteral<429>]>;
+    confirmedAtEpochMs: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"unknown">;
+    reason: z.ZodEnum<{
+        COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+        COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+        COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+        COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+        COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+        COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+        REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+        AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+        VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+    }>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"aborted">;
+    code: z.ZodEnum<{
+        SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+        CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+        PREPARE_REJECTED: "PREPARE_REJECTED";
+        PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+        READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+        PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+        COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+        AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+        COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+        ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+        COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+        COMMIT_REJECTED: "COMMIT_REJECTED";
+        EFFECT_MISMATCH: "EFFECT_MISMATCH";
+        DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+    }>;
+    orphanDraftPossible: z.ZodBoolean;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"unresolved">;
+    reason: z.ZodEnum<{
+        COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+        COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+        COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+        COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+        COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+        COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+        REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+        AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+        VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+    }>;
+}, z.core.$strict>], "kind">;
+export declare const ExecutionRecordSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    attemptId: z.core.$ZodBranded<z.ZodString, "AttemptId", "out">;
+    tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+    principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+    agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+    correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+    capabilityId: z.core.$ZodBranded<z.ZodString, "CapabilityId", "out">;
+    actionDigest: z.ZodString;
+    adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    provider: z.ZodEnum<{
+        api: "api";
+        tool: "tool";
+        local: "local";
+        guardian: "guardian";
+        gmail: "gmail";
+        gcalendar: "gcalendar";
+        file: "file";
+        protected_data: "protected_data";
+        graph: "graph";
+        clawlink: "clawlink";
+        "payment-sandbox": "payment-sandbox";
+    }>;
+    profile: z.ZodEnum<{
+        "guardian-agent-v1": "guardian-agent-v1";
+        "gmail-split-compose-metadata": "gmail-split-compose-metadata";
+        "gmail-compose-readonly": "gmail-compose-readonly";
+        "graph-readwrite-send": "graph-readwrite-send";
+        "api-bearer-request": "api-bearer-request";
+        "tool-mcp-server": "tool-mcp-server";
+        "gcalendar-events-v1": "gcalendar-events-v1";
+        "payment-sandbox-charge": "payment-sandbox-charge";
+        "file-local-store": "file-local-store";
+        "protected-data-store": "protected-data-store";
+        "local-agent-runtime": "local-agent-runtime";
+        "clawlink-executions": "clawlink-executions";
+    }>;
+    effectKey: z.ZodString;
+    expectedProjectionDigest: z.ZodString;
+    expectedEnvelopeDigest: z.ZodString;
+    state: z.ZodEnum<{
+        unknown: "unknown";
+        verified: "verified";
+        mismatch: "mismatch";
+        "commit-rejected": "commit-rejected";
+        aborted: "aborted";
+        reserved: "reserved";
+        redeemed: "redeemed";
+        preparing: "preparing";
+        prepared: "prepared";
+        committing: "committing";
+        unresolved: "unresolved";
+    }>;
+    version: z.ZodNumber;
+    reservedAtEpochMs: z.ZodNumber;
+    updatedAtEpochMs: z.ZodNumber;
+    commitDeadlineEpochMs: z.ZodNumber;
+    commitLeaseDeadlineEpochMs: z.ZodNullable<z.ZodNumber>;
+    reconcileDeadlineEpochMs: z.ZodNullable<z.ZodNumber>;
+    lateReconcileDeadlineEpochMs: z.ZodNullable<z.ZodNumber>;
+    commitLeaseIssued: z.ZodBoolean;
+    providerObjectRef: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"gmail-draft">;
+        draftId: z.ZodString;
+        messageId: z.ZodString;
+        threadId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"graph-message">;
+        immutableId: z.ZodString;
+        internetMessageId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"api-request">;
+        requestDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool-call">;
+        callDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"gcalendar-plan">;
+        requestDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"payment-order">;
+        orderId: z.ZodString;
+        intentId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"file-request">;
+        requestDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"protected_data-op">;
+        operationDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-call">;
+        callDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        requestDigest: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    sentRef: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"gmail-message">;
+        messageId: z.ZodString;
+        threadId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"graph-message">;
+        immutableId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"api-response">;
+        status: z.ZodNumber;
+        bodyBytes: z.ZodNumber;
+        headersDigest: z.ZodString;
+        bodyDigest: z.ZodString;
+        bodyPreview: z.ZodString;
+        truncated: z.ZodBoolean;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool-response">;
+        operation: z.ZodEnum<{
+            enable: "enable";
+            install: "install";
+            invoke: "invoke";
+        }>;
+        toolName: z.ZodString;
+        status: z.ZodNullable<z.ZodNumber>;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"gcalendar-event">;
+        eventId: z.ZodString;
+        status: z.ZodEnum<{
+            cancelled: "cancelled";
+            confirmed: "confirmed";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"payment-charge">;
+        chargeId: z.ZodString;
+        amountCents: z.ZodNumber;
+        currency: z.ZodString;
+        status: z.ZodEnum<{
+            succeeded: "succeeded";
+            refunded: "refunded";
+            returned: "returned";
+            voided: "voided";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"file-effect">;
+        operation: z.ZodEnum<{
+            share: "share";
+            delete: "delete";
+            read: "read";
+            write: "write";
+        }>;
+        path: z.ZodString;
+        contentDigest: z.ZodNullable<z.ZodString>;
+        bytes: z.ZodNumber;
+        shareId: z.ZodNullable<z.ZodString>;
+        grantee: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"protected_data-effect">;
+        operation: z.ZodEnum<{
+            view: "view";
+            use: "use";
+            disclose: "disclose";
+            persist: "persist";
+        }>;
+        fieldRef: z.ZodString;
+        valueDigest: z.ZodString;
+        counterparty: z.ZodNullable<z.ZodString>;
+        maskedPreview: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-effect">;
+        operation: z.ZodString;
+        subject: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        executionId: z.ZodString;
+        executionStatus: z.ZodLiteral<"succeeded">;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>], "kind">>;
+    orphanDraftPossible: z.ZodBoolean;
+    pendingOutcome: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"verified">;
+        sentRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"gmail-message">;
+            messageId: z.ZodString;
+            threadId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"graph-message">;
+            immutableId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"api-response">;
+            status: z.ZodNumber;
+            bodyBytes: z.ZodNumber;
+            headersDigest: z.ZodString;
+            bodyDigest: z.ZodString;
+            bodyPreview: z.ZodString;
+            truncated: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool-response">;
+            operation: z.ZodEnum<{
+                enable: "enable";
+                install: "install";
+                invoke: "invoke";
+            }>;
+            toolName: z.ZodString;
+            status: z.ZodNullable<z.ZodNumber>;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"gcalendar-event">;
+            eventId: z.ZodString;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                confirmed: "confirmed";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"payment-charge">;
+            chargeId: z.ZodString;
+            amountCents: z.ZodNumber;
+            currency: z.ZodString;
+            status: z.ZodEnum<{
+                succeeded: "succeeded";
+                refunded: "refunded";
+                returned: "returned";
+                voided: "voided";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"file-effect">;
+            operation: z.ZodEnum<{
+                share: "share";
+                delete: "delete";
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            contentDigest: z.ZodNullable<z.ZodString>;
+            bytes: z.ZodNumber;
+            shareId: z.ZodNullable<z.ZodString>;
+            grantee: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"protected_data-effect">;
+            operation: z.ZodEnum<{
+                view: "view";
+                use: "use";
+                disclose: "disclose";
+                persist: "persist";
+            }>;
+            fieldRef: z.ZodString;
+            valueDigest: z.ZodString;
+            counterparty: z.ZodNullable<z.ZodString>;
+            maskedPreview: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"guardian-effect">;
+            operation: z.ZodString;
+            subject: z.ZodNullable<z.ZodString>;
+            status: z.ZodString;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clawlink-execution">;
+            executionId: z.ZodString;
+            executionStatus: z.ZodLiteral<"succeeded">;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>], "kind">;
+        observedDigest: z.ZodString;
+        effectDigest: z.ZodString;
+        level: z.ZodEnum<{
+            "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+            "post-commit-content": "post-commit-content";
+        }>;
+        observedAtEpochMs: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mismatch">;
+        code: z.ZodEnum<{
+            EFFECT_MISMATCH: "EFFECT_MISMATCH";
+            DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+        }>;
+        observedDigest: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"commit-rejected">;
+        providerStatus: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<409>, z.ZodLiteral<413>, z.ZodLiteral<422>, z.ZodLiteral<429>]>;
+        confirmedAtEpochMs: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"unknown">;
+        reason: z.ZodEnum<{
+            COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+            COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+            COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+            COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+            COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+            COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+            REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+            AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+            VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"aborted">;
+        code: z.ZodEnum<{
+            SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+            CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+            PREPARE_REJECTED: "PREPARE_REJECTED";
+            PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+            READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+            PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+            COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+            AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+            COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+            ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+            COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+            COMMIT_REJECTED: "COMMIT_REJECTED";
+            EFFECT_MISMATCH: "EFFECT_MISMATCH";
+            DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+        }>;
+        orphanDraftPossible: z.ZodBoolean;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"unresolved">;
+        reason: z.ZodEnum<{
+            COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+            COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+            COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+            COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+            COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+            COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+            REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+            AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+            VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+        }>;
+    }, z.core.$strict>], "kind">>;
+    outcome: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"verified">;
+        sentRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"gmail-message">;
+            messageId: z.ZodString;
+            threadId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"graph-message">;
+            immutableId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"api-response">;
+            status: z.ZodNumber;
+            bodyBytes: z.ZodNumber;
+            headersDigest: z.ZodString;
+            bodyDigest: z.ZodString;
+            bodyPreview: z.ZodString;
+            truncated: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool-response">;
+            operation: z.ZodEnum<{
+                enable: "enable";
+                install: "install";
+                invoke: "invoke";
+            }>;
+            toolName: z.ZodString;
+            status: z.ZodNullable<z.ZodNumber>;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"gcalendar-event">;
+            eventId: z.ZodString;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                confirmed: "confirmed";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"payment-charge">;
+            chargeId: z.ZodString;
+            amountCents: z.ZodNumber;
+            currency: z.ZodString;
+            status: z.ZodEnum<{
+                succeeded: "succeeded";
+                refunded: "refunded";
+                returned: "returned";
+                voided: "voided";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"file-effect">;
+            operation: z.ZodEnum<{
+                share: "share";
+                delete: "delete";
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            contentDigest: z.ZodNullable<z.ZodString>;
+            bytes: z.ZodNumber;
+            shareId: z.ZodNullable<z.ZodString>;
+            grantee: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"protected_data-effect">;
+            operation: z.ZodEnum<{
+                view: "view";
+                use: "use";
+                disclose: "disclose";
+                persist: "persist";
+            }>;
+            fieldRef: z.ZodString;
+            valueDigest: z.ZodString;
+            counterparty: z.ZodNullable<z.ZodString>;
+            maskedPreview: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"guardian-effect">;
+            operation: z.ZodString;
+            subject: z.ZodNullable<z.ZodString>;
+            status: z.ZodString;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clawlink-execution">;
+            executionId: z.ZodString;
+            executionStatus: z.ZodLiteral<"succeeded">;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>], "kind">;
+        observedDigest: z.ZodString;
+        effectDigest: z.ZodString;
+        level: z.ZodEnum<{
+            "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+            "post-commit-content": "post-commit-content";
+        }>;
+        observedAtEpochMs: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mismatch">;
+        code: z.ZodEnum<{
+            EFFECT_MISMATCH: "EFFECT_MISMATCH";
+            DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+        }>;
+        observedDigest: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"commit-rejected">;
+        providerStatus: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<409>, z.ZodLiteral<413>, z.ZodLiteral<422>, z.ZodLiteral<429>]>;
+        confirmedAtEpochMs: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"unknown">;
+        reason: z.ZodEnum<{
+            COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+            COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+            COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+            COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+            COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+            COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+            REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+            AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+            VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+        }>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"aborted">;
+        code: z.ZodEnum<{
+            SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+            CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+            PREPARE_REJECTED: "PREPARE_REJECTED";
+            PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+            READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+            PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+            COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+            AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+            COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+            ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+            COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+            COMMIT_REJECTED: "COMMIT_REJECTED";
+            EFFECT_MISMATCH: "EFFECT_MISMATCH";
+            DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+        }>;
+        orphanDraftPossible: z.ZodBoolean;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"unresolved">;
+        reason: z.ZodEnum<{
+            COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+            COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+            COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+            COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+            COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+            COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+            REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+            AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+            VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+        }>;
+    }, z.core.$strict>], "kind">>;
+}, z.core.$strict>;
+export declare const AdapterRedemptionRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    capabilityToken: z.ZodString;
+    requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+    presentedBy: z.ZodObject<{
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export declare const ExecutionGrantSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    attemptId: z.core.$ZodBranded<z.ZodString, "AttemptId", "out">;
+    version: z.ZodNumber;
+    connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
+    provider: z.ZodEnum<{
+        api: "api";
+        tool: "tool";
+        local: "local";
+        guardian: "guardian";
+        gmail: "gmail";
+        gcalendar: "gcalendar";
+        file: "file";
+        protected_data: "protected_data";
+        graph: "graph";
+        clawlink: "clawlink";
+        "payment-sandbox": "payment-sandbox";
+    }>;
+    profile: z.ZodEnum<{
+        "guardian-agent-v1": "guardian-agent-v1";
+        "gmail-split-compose-metadata": "gmail-split-compose-metadata";
+        "gmail-compose-readonly": "gmail-compose-readonly";
+        "graph-readwrite-send": "graph-readwrite-send";
+        "api-bearer-request": "api-bearer-request";
+        "tool-mcp-server": "tool-mcp-server";
+        "gcalendar-events-v1": "gcalendar-events-v1";
+        "payment-sandbox-charge": "payment-sandbox-charge";
+        "file-local-store": "file-local-store";
+        "protected-data-store": "protected-data-store";
+        "local-agent-runtime": "local-agent-runtime";
+        "clawlink-executions": "clawlink-executions";
+    }>;
+    action: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<1>;
+        requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+        correlationId: z.core.$ZodBranded<z.ZodString, "CorrelationId", "out">;
+        tenantId: z.core.$ZodBranded<z.ZodString, "TenantId", "out">;
+        principalId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+        agentId: z.core.$ZodBranded<z.ZodString, "AgentId", "out">;
+        action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
+        resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
+        interface: z.ZodEnum<{
+            mcp: "mcp";
+            rest: "rest";
+            internal: "internal";
+        }>;
+        valueCents: z.ZodOptional<z.ZodNumber>;
+        merchantId: z.ZodOptional<z.ZodString>;
+        merchantCategory: z.ZodOptional<z.ZodString>;
+        recurring: z.ZodOptional<z.ZodBoolean>;
+        taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
+        intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
+        planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
+        obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
+        }, z.core.$strict>>>;
+        obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            obligationType: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
+                PENDING_POST_ACTION: "PENDING_POST_ACTION";
+                PENDING_TIME: "PENDING_TIME";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
+                COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
+                RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
+                OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+            dueEpochMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
+        prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            prerequisiteType: z.ZodString;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
+                MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
+                BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
+                CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
+                ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
+                PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
+                PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
+        sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
+        sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            ruleId: z.ZodString;
+            effect: z.ZodEnum<{
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            matchedActionRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
+            effectiveClassification: z.ZodEnum<{
+                financial: "financial";
+                internal: "internal";
+                public: "public";
+                pii: "pii";
+                phi: "phi";
+                credential: "credential";
+                confidential: "confidential";
+            }>;
+            effect: z.ZodEnum<{
+                allowed: "allowed";
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            expired: z.ZodBoolean;
+        }, z.core.$strict>>>;
+        runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
+            T0_UNKNOWN: "T0_UNKNOWN";
+            T1_IDENTIFIED: "T1_IDENTIFIED";
+            T2_VERIFIED: "T2_VERIFIED";
+            T3_ATTESTED: "T3_ATTESTED";
+            T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+        }>>;
+        enforcementAssurance: z.ZodOptional<z.ZodEnum<{
+            G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+            G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+            G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+            G0_OBSERVED: "G0_OBSERVED";
+            G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+        }>>;
+        approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.multiparty.v1">;
+            structureId: z.ZodString;
+            members: z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"single">;
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"nOfM">;
+                n: z.ZodNumber;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"unanimous">;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"roleQuorum">;
+                role: z.ZodString;
+                n: z.ZodNumber;
+                m: z.ZodNumber;
+            }, z.core.$strict>], "kind">;
+            specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            separationOfDuties: z.ZodOptional<z.ZodObject<{
+                mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                expiresAtEpochMs: z.ZodNumber;
+            }, z.core.$strict>>>;
+            delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>>>;
+            emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            coolingPeriod: z.ZodOptional<z.ZodObject<{
+                seconds: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
+        appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
+            applied: z.ZodArray<z.ZodString>;
+            constraints: z.ZodObject<{
+                allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
+                allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    mcp: "mcp";
+                    rest: "rest";
+                    internal: "internal";
+                }>>>;
+                maxValueCents: z.ZodOptional<z.ZodNumber>;
+                maxUses: z.ZodOptional<z.ZodNumber>;
+                minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
+                    T0_UNKNOWN: "T0_UNKNOWN";
+                    T1_IDENTIFIED: "T1_IDENTIFIED";
+                    T2_VERIFIED: "T2_VERIFIED";
+                    T3_ATTESTED: "T3_ATTESTED";
+                    T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+                }>>;
+                minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
+                    G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+                    G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+                    G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+                    G0_OBSERVED: "G0_OBSERVED";
+                    G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+                }>>;
+                requiredApprovals: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        transaction: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.transaction.v1">;
+            stages: z.ZodArray<z.ZodEnum<{
+                PROPOSE: "PROPOSE";
+                PREPARE: "PREPARE";
+                AUTHORIZE: "AUTHORIZE";
+                LOCK: "LOCK";
+                COMMIT: "COMMIT";
+                VERIFY: "VERIFY";
+                SETTLE: "SETTLE";
+            }>>;
+            deadlineMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        compensates: z.ZodOptional<z.ZodObject<{
+            transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
+        }, z.core.$strict>>;
+        physicalFacts: z.ZodOptional<z.ZodObject<{
+            zone: z.ZodOptional<z.ZodString>;
+            speed: z.ZodOptional<z.ZodNumber>;
+            force: z.ZodOptional<z.ZodNumber>;
+            payload: z.ZodOptional<z.ZodNumber>;
+            atEpochMs: z.ZodOptional<z.ZodNumber>;
+            humanDistance: z.ZodOptional<z.ZodNumber>;
+            environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            supervised: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
+            envelopeDigest: z.ZodString;
+            satisfied: z.ZodBoolean;
+            violations: z.ZodArray<z.ZodEnum<{
+                OUT_OF_ZONE: "OUT_OF_ZONE";
+                FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
+                OVER_SPEED: "OVER_SPEED";
+                OVER_FORCE: "OVER_FORCE";
+                OVER_PAYLOAD: "OVER_PAYLOAD";
+                OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
+                PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
+                ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
+                SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
+            }>>;
+            emergencyStopped: z.ZodBoolean;
+            failSafeApplied: z.ZodBoolean;
+        }, z.core.$strict>>;
+        uses: z.ZodNumber;
+        materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, import("./canonical-json.js").CanonicalJsonValue>>, unknown>>;
+        initiatingContext: z.ZodEnum<{
+            agent: "agent";
+            user: "user";
+            scheduled: "scheduled";
+            "external-event": "external-event";
+        }>;
+        authority: z.ZodObject<{
+            policy: z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>;
+            evaluatedGrants: z.ZodArray<z.ZodObject<{
+                id: z.core.$ZodBranded<z.ZodString, "GrantId", "out">;
+                version: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>;
+        issuedAtEpochMs: z.ZodNumber;
+        expiresAtEpochMs: z.ZodNumber;
+        nonce: z.core.$ZodBranded<z.ZodString, "Nonce", "out">;
+        requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
+        purpose: z.ZodString;
+        materialDigest: z.ZodString;
+    }, z.core.$strict>;
+    expectedProjectionDigest: z.ZodString;
+    expectedEnvelopeDigest: z.ZodString;
+    commitDeadlineEpochMs: z.ZodNumber;
+}, z.core.$strict>;
+export declare const ExecutionStageCommandSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    command: z.ZodLiteral<"begin-prepare">;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    command: z.ZodLiteral<"prepared">;
+    expectedVersion: z.ZodNumber;
+    providerObjectRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"gmail-draft">;
+        draftId: z.ZodString;
+        messageId: z.ZodString;
+        threadId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"graph-message">;
+        immutableId: z.ZodString;
+        internetMessageId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"api-request">;
+        requestDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"tool-call">;
+        callDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"gcalendar-plan">;
+        requestDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"payment-order">;
+        orderId: z.ZodString;
+        intentId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"file-request">;
+        requestDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"protected_data-op">;
+        operationDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-call">;
+        callDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        requestDigest: z.ZodString;
+    }, z.core.$strict>], "kind">;
+    preparedProjectionDigest: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    command: z.ZodLiteral<"commit-request">;
+    expectedVersion: z.ZodNumber;
+}, z.core.$strict>, z.ZodObject<{
+    command: z.ZodLiteral<"outcome">;
+    expectedVersion: z.ZodNumber;
+    outcome: z.ZodDiscriminatedUnion<[z.ZodObject<{
+        kind: z.ZodLiteral<"verified">;
+        level: z.ZodEnum<{
+            "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
+            "post-commit-content": "post-commit-content";
+        }>;
+        sentRef: z.ZodDiscriminatedUnion<[z.ZodObject<{
+            kind: z.ZodLiteral<"gmail-message">;
+            messageId: z.ZodString;
+            threadId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"graph-message">;
+            immutableId: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"api-response">;
+            status: z.ZodNumber;
+            bodyBytes: z.ZodNumber;
+            headersDigest: z.ZodString;
+            bodyDigest: z.ZodString;
+            bodyPreview: z.ZodString;
+            truncated: z.ZodBoolean;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"tool-response">;
+            operation: z.ZodEnum<{
+                enable: "enable";
+                install: "install";
+                invoke: "invoke";
+            }>;
+            toolName: z.ZodString;
+            status: z.ZodNullable<z.ZodNumber>;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"gcalendar-event">;
+            eventId: z.ZodString;
+            status: z.ZodEnum<{
+                cancelled: "cancelled";
+                confirmed: "confirmed";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"payment-charge">;
+            chargeId: z.ZodString;
+            amountCents: z.ZodNumber;
+            currency: z.ZodString;
+            status: z.ZodEnum<{
+                succeeded: "succeeded";
+                refunded: "refunded";
+                returned: "returned";
+                voided: "voided";
+            }>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"file-effect">;
+            operation: z.ZodEnum<{
+                share: "share";
+                delete: "delete";
+                read: "read";
+                write: "write";
+            }>;
+            path: z.ZodString;
+            contentDigest: z.ZodNullable<z.ZodString>;
+            bytes: z.ZodNumber;
+            shareId: z.ZodNullable<z.ZodString>;
+            grantee: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"protected_data-effect">;
+            operation: z.ZodEnum<{
+                view: "view";
+                use: "use";
+                disclose: "disclose";
+                persist: "persist";
+            }>;
+            fieldRef: z.ZodString;
+            valueDigest: z.ZodString;
+            counterparty: z.ZodNullable<z.ZodString>;
+            maskedPreview: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"guardian-effect">;
+            operation: z.ZodString;
+            subject: z.ZodNullable<z.ZodString>;
+            status: z.ZodString;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clawlink-execution">;
+            executionId: z.ZodString;
+            executionStatus: z.ZodLiteral<"succeeded">;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>], "kind">;
+        observedDigest: z.ZodString;
+        observedAtEpochMs: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"mismatch">;
+        code: z.ZodEnum<{
+            EFFECT_MISMATCH: "EFFECT_MISMATCH";
+            DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+        }>;
+        observedDigest: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"commit-rejected">;
+        providerStatus: z.ZodUnion<readonly [z.ZodLiteral<0>, z.ZodLiteral<400>, z.ZodLiteral<401>, z.ZodLiteral<403>, z.ZodLiteral<404>, z.ZodLiteral<409>, z.ZodLiteral<413>, z.ZodLiteral<422>, z.ZodLiteral<429>]>;
+        confirmedAtEpochMs: z.ZodNumber;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"unknown">;
+        reason: z.ZodEnum<{
+            COMMIT_RESPONSE_LOST: "COMMIT_RESPONSE_LOST";
+            COMMIT_TIMEOUT: "COMMIT_TIMEOUT";
+            COMMIT_SERVER_ERROR: "COMMIT_SERVER_ERROR";
+            COMMIT_RESPONSE_INVALID: "COMMIT_RESPONSE_INVALID";
+            COMMIT_REDIRECT_REFUSED: "COMMIT_REDIRECT_REFUSED";
+            COMMIT_TARGET_NOT_FOUND: "COMMIT_TARGET_NOT_FOUND";
+            REJECTION_UNCONFIRMED: "REJECTION_UNCONFIRMED";
+            AWAITING_PROVIDER_RECORD: "AWAITING_PROVIDER_RECORD";
+            VERIFICATION_UNAVAILABLE: "VERIFICATION_UNAVAILABLE";
+        }>;
+    }, z.core.$strict>], "kind">;
+}, z.core.$strict>, z.ZodObject<{
+    command: z.ZodLiteral<"abort">;
+    expectedVersion: z.ZodNumber;
+    code: z.ZodEnum<{
+        SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
+        CREDENTIAL_UNAVAILABLE: "CREDENTIAL_UNAVAILABLE";
+        PREPARE_REJECTED: "PREPARE_REJECTED";
+        PREPARE_AMBIGUOUS: "PREPARE_AMBIGUOUS";
+        READBACK_UNAVAILABLE: "READBACK_UNAVAILABLE";
+        PREPARED_CONTENT_MISMATCH: "PREPARED_CONTENT_MISMATCH";
+        COMMIT_NOT_AUTHORIZED: "COMMIT_NOT_AUTHORIZED";
+        AUTHORITY_REVOKED_BEFORE_COMMIT: "AUTHORITY_REVOKED_BEFORE_COMMIT";
+        COMMIT_DEADLINE_EXPIRED: "COMMIT_DEADLINE_EXPIRED";
+        ABORTED_BEFORE_COMMIT: "ABORTED_BEFORE_COMMIT";
+        COMMIT_NOT_ISSUED: "COMMIT_NOT_ISSUED";
+        COMMIT_REJECTED: "COMMIT_REJECTED";
+        EFFECT_MISMATCH: "EFFECT_MISMATCH";
+        DUPLICATE_EFFECT_DETECTED: "DUPLICATE_EFFECT_DETECTED";
+    }>;
+    orphanDraftPossible: z.ZodBoolean;
+}, z.core.$strict>], "command">;
+export declare const AgentExecutionRequestSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+    capabilityToken: z.ZodString;
+}, z.core.$strict>;
+export declare const AgentExecutionReceiptSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
+    receiptReference: z.core.$ZodBranded<z.ZodString, "AttemptId", "out">;
+    status: z.ZodEnum<{
+        "sent-verified": "sent-verified";
+        "not-sent": "not-sent";
+        "outcome-pending": "outcome-pending";
+        "outcome-unconfirmed": "outcome-unconfirmed";
+    }>;
+    delivered: z.ZodOptional<z.ZodObject<{
+        kind: z.ZodEnum<{
+            "file-content": "file-content";
+            "protected-value": "protected-value";
+            "agent-secret": "agent-secret";
+        }>;
+        fieldRef: z.ZodNullable<z.ZodString>;
+        path: z.ZodNullable<z.ZodString>;
+        value: z.ZodString;
+        valueDigest: z.ZodString;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare function effectKey(input: {
+    tenantId: string;
+    capabilityId: string;
+    actionDigest: string;
+    attemptId: string;
+}): string;
+export declare function effectDigest(input: {
+    provider: z.infer<typeof ProviderSchema>;
+    adapterId: string;
+    attemptId: string;
+    sentRefDigest: string;
+    observedDigest: string;
+    level: z.infer<typeof VerificationLevelSchema>;
+    observedAtEpochMs: number;
+}): string;
+export interface ProviderAuthorization {
+    readonly provider: z.infer<typeof ProviderSchema>;
+    readonly purpose: z.infer<typeof LeasePurposeSchema>;
+    readonly expiresAtEpochMs: number;
+    authorizeRequest(input: {
+        origin: string;
+        endpointClass: "commit" | "read" | "write" | "delete";
+        nowEpochMs: number;
+    }): Readonly<Record<string, string>> | null;
+    toJSON(): "[redacted]";
+    toString(): "[redacted]";
+}
+export type Provider = z.infer<typeof ProviderSchema>;
+export type ConnectionProfile = z.infer<typeof ConnectionProfileSchema>;
+export type VerificationLevel = z.infer<typeof VerificationLevelSchema>;
+export type LeasePurpose = z.infer<typeof LeasePurposeSchema>;
+export type ExecutionState = z.infer<typeof ExecutionStateSchema>;
+export type ExecutionFailureCode = z.infer<typeof ExecutionFailureCodeSchema>;
+export type ExecutionUnknownReason = z.infer<typeof ExecutionUnknownReasonSchema>;
+export type ProviderObjectRef = z.infer<typeof ProviderObjectRefSchema>;
+export type ProviderSentRef = z.infer<typeof ProviderSentRefSchema>;
+export type ExecutionOutcome = z.infer<typeof OutcomeSchema>;
+export type ExecutionRecord = z.infer<typeof ExecutionRecordSchema>;
+export type AdapterRedemptionRequest = z.infer<typeof AdapterRedemptionRequestSchema>;
+export type ExecutionGrant = z.infer<typeof ExecutionGrantSchema>;
+export type ExecutionStageCommand = z.infer<typeof ExecutionStageCommandSchema>;
+export type AgentExecutionRequest = z.infer<typeof AgentExecutionRequestSchema>;
+export type AgentExecutionReceipt = z.infer<typeof AgentExecutionReceiptSchema>;