@odingard/guardian-sdk 0.1.0 → 0.2.0

package/dist-dts/contracts/execution.d.ts

@@ -1,15 +1,19 @@
 import { z } from "zod";
 export declare const ProviderSchema: z.ZodEnum<{
-    file: "file";
+    api: "api";
     tool: "tool";
+    local: "local";
+    guardian: "guardian";
     gmail: "gmail";
-    graph: "graph";
-    api: "api";
     gcalendar: "gcalendar";
-    "payment-sandbox": "payment-sandbox";
+    file: "file";
     protected_data: "protected_data";
+    graph: "graph";
+    clawlink: "clawlink";
+    "payment-sandbox": "payment-sandbox";
 }>;
 export declare const ConnectionProfileSchema: z.ZodEnum<{
+    "guardian-agent-v1": "guardian-agent-v1";
     "gmail-split-compose-metadata": "gmail-split-compose-metadata";
     "gmail-compose-readonly": "gmail-compose-readonly";
     "graph-readwrite-send": "graph-readwrite-send";
@@ -19,31 +23,33 @@ export declare const ConnectionProfileSchema: z.ZodEnum<{
     "payment-sandbox-charge": "payment-sandbox-charge";
     "file-local-store": "file-local-store";
     "protected-data-store": "protected-data-store";
+    "local-agent-runtime": "local-agent-runtime";
+    "clawlink-executions": "clawlink-executions";
 }>;
 export declare const VerificationLevelSchema: z.ZodEnum<{
     "pre-commit-content+post-commit-envelope": "pre-commit-content+post-commit-envelope";
     "post-commit-content": "post-commit-content";
 }>;
 export declare const LeasePurposeSchema: z.ZodEnum<{
+    readback: "readback";
+    observe: "observe";
     account: "account";
     prepare: "prepare";
-    readback: "readback";
     commit: "commit";
-    observe: "observe";
     cleanup: "cleanup";
 }>;
 export declare const ExecutionStateSchema: z.ZodEnum<{
     unknown: "unknown";
+    verified: "verified";
+    mismatch: "mismatch";
+    "commit-rejected": "commit-rejected";
+    aborted: "aborted";
     reserved: "reserved";
     redeemed: "redeemed";
     preparing: "preparing";
     prepared: "prepared";
     committing: "committing";
     unresolved: "unresolved";
-    verified: "verified";
-    mismatch: "mismatch";
-    "commit-rejected": "commit-rejected";
-    aborted: "aborted";
 }>;
 export declare const ExecutionFailureCodeSchema: z.ZodEnum<{
     SENDER_ACCOUNT_MISMATCH: "SENDER_ACCOUNT_MISMATCH";
@@ -103,6 +109,12 @@ export declare const ProviderObjectRefSchema: z.ZodDiscriminatedUnion<[z.ZodObje
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"protected_data-op">;
     operationDigest: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"guardian-call">;
+    callDigest: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"clawlink-execution">;
+    requestDigest: z.ZodString;
 }, z.core.$strict>], "kind">;
 export declare const ProviderSentRefSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     kind: z.ZodLiteral<"gmail-message">;
@@ -122,8 +134,8 @@ export declare const ProviderSentRefSchema: z.ZodDiscriminatedUnion<[z.ZodObject
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"tool-response">;
     operation: z.ZodEnum<{
-        install: "install";
         enable: "enable";
+        install: "install";
         invoke: "invoke";
     }>;
     toolName: z.ZodString;
@@ -151,10 +163,10 @@ export declare const ProviderSentRefSchema: z.ZodDiscriminatedUnion<[z.ZodObject
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"file-effect">;
     operation: z.ZodEnum<{
-        read: "read";
-        write: "write";
         share: "share";
         delete: "delete";
+        read: "read";
+        write: "write";
     }>;
     path: z.ZodString;
     contentDigest: z.ZodNullable<z.ZodString>;
@@ -164,8 +176,8 @@ export declare const ProviderSentRefSchema: z.ZodDiscriminatedUnion<[z.ZodObject
 }, z.core.$strict>, z.ZodObject<{
     kind: z.ZodLiteral<"protected_data-effect">;
     operation: z.ZodEnum<{
-        use: "use";
         view: "view";
+        use: "use";
         disclose: "disclose";
         persist: "persist";
     }>;
@@ -173,6 +185,19 @@ export declare const ProviderSentRefSchema: z.ZodDiscriminatedUnion<[z.ZodObject
     valueDigest: z.ZodString;
     counterparty: z.ZodNullable<z.ZodString>;
     maskedPreview: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"guardian-effect">;
+    operation: z.ZodString;
+    subject: z.ZodNullable<z.ZodString>;
+    status: z.ZodString;
+    resultDigest: z.ZodString;
+    detail: z.ZodString;
+}, z.core.$strict>, z.ZodObject<{
+    kind: z.ZodLiteral<"clawlink-execution">;
+    executionId: z.ZodString;
+    executionStatus: z.ZodLiteral<"succeeded">;
+    resultDigest: z.ZodString;
+    detail: z.ZodString;
 }, z.core.$strict>], "kind">;
 export declare const VerifiedOutcomeSchema: z.ZodObject<{
     kind: z.ZodLiteral<"verified">;
@@ -194,8 +219,8 @@ export declare const VerifiedOutcomeSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"tool-response">;
         operation: z.ZodEnum<{
-            install: "install";
             enable: "enable";
+            install: "install";
             invoke: "invoke";
         }>;
         toolName: z.ZodString;
@@ -223,10 +248,10 @@ export declare const VerifiedOutcomeSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"file-effect">;
         operation: z.ZodEnum<{
-            read: "read";
-            write: "write";
             share: "share";
             delete: "delete";
+            read: "read";
+            write: "write";
         }>;
         path: z.ZodString;
         contentDigest: z.ZodNullable<z.ZodString>;
@@ -236,8 +261,8 @@ export declare const VerifiedOutcomeSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"protected_data-effect">;
         operation: z.ZodEnum<{
-            use: "use";
             view: "view";
+            use: "use";
             disclose: "disclose";
             persist: "persist";
         }>;
@@ -245,6 +270,19 @@ export declare const VerifiedOutcomeSchema: z.ZodObject<{
         valueDigest: z.ZodString;
         counterparty: z.ZodNullable<z.ZodString>;
         maskedPreview: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-effect">;
+        operation: z.ZodString;
+        subject: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        executionId: z.ZodString;
+        executionStatus: z.ZodLiteral<"succeeded">;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
     }, z.core.$strict>], "kind">;
     observedDigest: z.ZodString;
     effectDigest: z.ZodString;
@@ -335,8 +373,8 @@ export declare const OutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"tool-response">;
         operation: z.ZodEnum<{
-            install: "install";
             enable: "enable";
+            install: "install";
             invoke: "invoke";
         }>;
         toolName: z.ZodString;
@@ -364,10 +402,10 @@ export declare const OutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"file-effect">;
         operation: z.ZodEnum<{
-            read: "read";
-            write: "write";
             share: "share";
             delete: "delete";
+            read: "read";
+            write: "write";
         }>;
         path: z.ZodString;
         contentDigest: z.ZodNullable<z.ZodString>;
@@ -377,8 +415,8 @@ export declare const OutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"protected_data-effect">;
         operation: z.ZodEnum<{
-            use: "use";
             view: "view";
+            use: "use";
             disclose: "disclose";
             persist: "persist";
         }>;
@@ -386,6 +424,19 @@ export declare const OutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
         valueDigest: z.ZodString;
         counterparty: z.ZodNullable<z.ZodString>;
         maskedPreview: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-effect">;
+        operation: z.ZodString;
+        subject: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        executionId: z.ZodString;
+        executionStatus: z.ZodLiteral<"succeeded">;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
     }, z.core.$strict>], "kind">;
     observedDigest: z.ZodString;
     effectDigest: z.ZodString;
@@ -471,8 +522,8 @@ export declare const PendingOutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"tool-response">;
         operation: z.ZodEnum<{
-            install: "install";
             enable: "enable";
+            install: "install";
             invoke: "invoke";
         }>;
         toolName: z.ZodString;
@@ -500,10 +551,10 @@ export declare const PendingOutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"file-effect">;
         operation: z.ZodEnum<{
-            read: "read";
-            write: "write";
             share: "share";
             delete: "delete";
+            read: "read";
+            write: "write";
         }>;
         path: z.ZodString;
         contentDigest: z.ZodNullable<z.ZodString>;
@@ -513,8 +564,8 @@ export declare const PendingOutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"protected_data-effect">;
         operation: z.ZodEnum<{
-            use: "use";
             view: "view";
+            use: "use";
             disclose: "disclose";
             persist: "persist";
         }>;
@@ -522,6 +573,19 @@ export declare const PendingOutcomeSchema: z.ZodDiscriminatedUnion<[z.ZodObject<
         valueDigest: z.ZodString;
         counterparty: z.ZodNullable<z.ZodString>;
         maskedPreview: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-effect">;
+        operation: z.ZodString;
+        subject: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        executionId: z.ZodString;
+        executionStatus: z.ZodLiteral<"succeeded">;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
     }, z.core.$strict>], "kind">;
     observedDigest: z.ZodString;
     effectDigest: z.ZodString;
@@ -600,16 +664,20 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
     adapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
     connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
     provider: z.ZodEnum<{
-        file: "file";
+        api: "api";
         tool: "tool";
+        local: "local";
+        guardian: "guardian";
         gmail: "gmail";
-        graph: "graph";
-        api: "api";
         gcalendar: "gcalendar";
-        "payment-sandbox": "payment-sandbox";
+        file: "file";
         protected_data: "protected_data";
+        graph: "graph";
+        clawlink: "clawlink";
+        "payment-sandbox": "payment-sandbox";
     }>;
     profile: z.ZodEnum<{
+        "guardian-agent-v1": "guardian-agent-v1";
         "gmail-split-compose-metadata": "gmail-split-compose-metadata";
         "gmail-compose-readonly": "gmail-compose-readonly";
         "graph-readwrite-send": "graph-readwrite-send";
@@ -619,22 +687,24 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
         "payment-sandbox-charge": "payment-sandbox-charge";
         "file-local-store": "file-local-store";
         "protected-data-store": "protected-data-store";
+        "local-agent-runtime": "local-agent-runtime";
+        "clawlink-executions": "clawlink-executions";
     }>;
     effectKey: z.ZodString;
     expectedProjectionDigest: z.ZodString;
     expectedEnvelopeDigest: z.ZodString;
     state: z.ZodEnum<{
         unknown: "unknown";
+        verified: "verified";
+        mismatch: "mismatch";
+        "commit-rejected": "commit-rejected";
+        aborted: "aborted";
         reserved: "reserved";
         redeemed: "redeemed";
         preparing: "preparing";
         prepared: "prepared";
         committing: "committing";
         unresolved: "unresolved";
-        verified: "verified";
-        mismatch: "mismatch";
-        "commit-rejected": "commit-rejected";
-        aborted: "aborted";
     }>;
     version: z.ZodNumber;
     reservedAtEpochMs: z.ZodNumber;
@@ -672,6 +742,12 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"protected_data-op">;
         operationDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-call">;
+        callDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        requestDigest: z.ZodString;
     }, z.core.$strict>], "kind">>;
     sentRef: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
         kind: z.ZodLiteral<"gmail-message">;
@@ -691,8 +767,8 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"tool-response">;
         operation: z.ZodEnum<{
-            install: "install";
             enable: "enable";
+            install: "install";
             invoke: "invoke";
         }>;
         toolName: z.ZodString;
@@ -720,10 +796,10 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"file-effect">;
         operation: z.ZodEnum<{
-            read: "read";
-            write: "write";
             share: "share";
             delete: "delete";
+            read: "read";
+            write: "write";
         }>;
         path: z.ZodString;
         contentDigest: z.ZodNullable<z.ZodString>;
@@ -733,8 +809,8 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"protected_data-effect">;
         operation: z.ZodEnum<{
-            use: "use";
             view: "view";
+            use: "use";
             disclose: "disclose";
             persist: "persist";
         }>;
@@ -742,6 +818,19 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
         valueDigest: z.ZodString;
         counterparty: z.ZodNullable<z.ZodString>;
         maskedPreview: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-effect">;
+        operation: z.ZodString;
+        subject: z.ZodNullable<z.ZodString>;
+        status: z.ZodString;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        executionId: z.ZodString;
+        executionStatus: z.ZodLiteral<"succeeded">;
+        resultDigest: z.ZodString;
+        detail: z.ZodString;
     }, z.core.$strict>], "kind">>;
     orphanDraftPossible: z.ZodBoolean;
     pendingOutcome: z.ZodNullable<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -764,8 +853,8 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"tool-response">;
             operation: z.ZodEnum<{
-                install: "install";
                 enable: "enable";
+                install: "install";
                 invoke: "invoke";
             }>;
             toolName: z.ZodString;
@@ -793,10 +882,10 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"file-effect">;
             operation: z.ZodEnum<{
-                read: "read";
-                write: "write";
                 share: "share";
                 delete: "delete";
+                read: "read";
+                write: "write";
             }>;
             path: z.ZodString;
             contentDigest: z.ZodNullable<z.ZodString>;
@@ -806,8 +895,8 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"protected_data-effect">;
             operation: z.ZodEnum<{
-                use: "use";
                 view: "view";
+                use: "use";
                 disclose: "disclose";
                 persist: "persist";
             }>;
@@ -815,6 +904,19 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
             valueDigest: z.ZodString;
             counterparty: z.ZodNullable<z.ZodString>;
             maskedPreview: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"guardian-effect">;
+            operation: z.ZodString;
+            subject: z.ZodNullable<z.ZodString>;
+            status: z.ZodString;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clawlink-execution">;
+            executionId: z.ZodString;
+            executionStatus: z.ZodLiteral<"succeeded">;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
         }, z.core.$strict>], "kind">;
         observedDigest: z.ZodString;
         effectDigest: z.ZodString;
@@ -900,8 +1002,8 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"tool-response">;
             operation: z.ZodEnum<{
-                install: "install";
                 enable: "enable";
+                install: "install";
                 invoke: "invoke";
             }>;
             toolName: z.ZodString;
@@ -929,10 +1031,10 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"file-effect">;
             operation: z.ZodEnum<{
-                read: "read";
-                write: "write";
                 share: "share";
                 delete: "delete";
+                read: "read";
+                write: "write";
             }>;
             path: z.ZodString;
             contentDigest: z.ZodNullable<z.ZodString>;
@@ -942,8 +1044,8 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"protected_data-effect">;
             operation: z.ZodEnum<{
-                use: "use";
                 view: "view";
+                use: "use";
                 disclose: "disclose";
                 persist: "persist";
             }>;
@@ -951,6 +1053,19 @@ export declare const ExecutionRecordSchema: z.ZodObject<{
             valueDigest: z.ZodString;
             counterparty: z.ZodNullable<z.ZodString>;
             maskedPreview: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"guardian-effect">;
+            operation: z.ZodString;
+            subject: z.ZodNullable<z.ZodString>;
+            status: z.ZodString;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clawlink-execution">;
+            executionId: z.ZodString;
+            executionStatus: z.ZodLiteral<"succeeded">;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
         }, z.core.$strict>], "kind">;
         observedDigest: z.ZodString;
         effectDigest: z.ZodString;
@@ -1033,16 +1148,20 @@ export declare const ExecutionGrantSchema: z.ZodObject<{
     version: z.ZodNumber;
     connectionId: z.core.$ZodBranded<z.ZodString, "ConnectionId", "out">;
     provider: z.ZodEnum<{
-        file: "file";
+        api: "api";
         tool: "tool";
+        local: "local";
+        guardian: "guardian";
         gmail: "gmail";
-        graph: "graph";
-        api: "api";
         gcalendar: "gcalendar";
-        "payment-sandbox": "payment-sandbox";
+        file: "file";
         protected_data: "protected_data";
+        graph: "graph";
+        clawlink: "clawlink";
+        "payment-sandbox": "payment-sandbox";
     }>;
     profile: z.ZodEnum<{
+        "guardian-agent-v1": "guardian-agent-v1";
         "gmail-split-compose-metadata": "gmail-split-compose-metadata";
         "gmail-compose-readonly": "gmail-compose-readonly";
         "graph-readwrite-send": "graph-readwrite-send";
@@ -1052,6 +1171,8 @@ export declare const ExecutionGrantSchema: z.ZodObject<{
         "payment-sandbox-charge": "payment-sandbox-charge";
         "file-local-store": "file-local-store";
         "protected-data-store": "protected-data-store";
+        "local-agent-runtime": "local-agent-runtime";
+        "clawlink-executions": "clawlink-executions";
     }>;
     action: z.ZodObject<{
         schemaVersion: z.ZodLiteral<1>;
@@ -1063,15 +1184,268 @@ export declare const ExecutionGrantSchema: z.ZodObject<{
         action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
         resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
         interface: z.ZodEnum<{
-            internal: "internal";
             mcp: "mcp";
             rest: "rest";
+            internal: "internal";
         }>;
         valueCents: z.ZodOptional<z.ZodNumber>;
         merchantId: z.ZodOptional<z.ZodString>;
         merchantCategory: z.ZodOptional<z.ZodString>;
         recurring: z.ZodOptional<z.ZodBoolean>;
         taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
+        intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
+        planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
+        obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            type: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
+        }, z.core.$strict>>>;
+        obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            obligationType: z.ZodEnum<{
+                log: "log";
+                retain_receipt: "retain_receipt";
+                notify: "notify";
+                delay: "delay";
+                cooling_period: "cooling_period";
+                delete_after_use: "delete_after_use";
+                redact: "redact";
+                encrypt: "encrypt";
+                tokenize: "tokenize";
+                minimize: "minimize";
+                verify_counterparty: "verify_counterparty";
+                verify_resource: "verify_resource";
+                verify_effect: "verify_effect";
+                attest_runtime: "attest_runtime";
+                require_consent: "require_consent";
+                require_location: "require_location";
+                require_device: "require_device";
+                require_network: "require_network";
+                require_contract: "require_contract";
+                step_up: "step_up";
+                second_approver: "second_approver";
+                quorum: "quorum";
+                authenticate: "authenticate";
+            }>;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
+                PENDING_POST_ACTION: "PENDING_POST_ACTION";
+                PENDING_TIME: "PENDING_TIME";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
+                COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
+                RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
+                OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+            dueEpochMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>>;
+        prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            prerequisiteType: z.ZodString;
+            state: z.ZodEnum<{
+                satisfied: "satisfied";
+                pending: "pending";
+                failed: "failed";
+                not_applicable: "not_applicable";
+            }>;
+            rule: z.ZodEnum<{
+                BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
+                PENDING_HUMAN: "PENDING_HUMAN";
+                PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
+                MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
+                BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
+                CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
+                ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
+                PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
+                PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
+            }>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
+        sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
+        sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            ruleId: z.ZodString;
+            effect: z.ZodEnum<{
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            matchedActionRefs: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>>;
+        lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
+            effectiveClassification: z.ZodEnum<{
+                financial: "financial";
+                internal: "internal";
+                public: "public";
+                pii: "pii";
+                phi: "phi";
+                credential: "credential";
+                confidential: "confidential";
+            }>;
+            effect: z.ZodEnum<{
+                allowed: "allowed";
+                deny: "deny";
+                require_approval: "require_approval";
+            }>;
+            expired: z.ZodBoolean;
+        }, z.core.$strict>>>;
+        runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
+            T0_UNKNOWN: "T0_UNKNOWN";
+            T1_IDENTIFIED: "T1_IDENTIFIED";
+            T2_VERIFIED: "T2_VERIFIED";
+            T3_ATTESTED: "T3_ATTESTED";
+            T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+        }>>;
+        enforcementAssurance: z.ZodOptional<z.ZodEnum<{
+            G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+            G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+            G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+            G0_OBSERVED: "G0_OBSERVED";
+            G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+        }>>;
+        approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.multiparty.v1">;
+            structureId: z.ZodString;
+            members: z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                kind: z.ZodLiteral<"single">;
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"nOfM">;
+                n: z.ZodNumber;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"unanimous">;
+                members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
+            }, z.core.$strict>, z.ZodObject<{
+                kind: z.ZodLiteral<"roleQuorum">;
+                role: z.ZodString;
+                n: z.ZodNumber;
+                m: z.ZodNumber;
+            }, z.core.$strict>], "kind">;
+            specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            separationOfDuties: z.ZodOptional<z.ZodObject<{
+                mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
+            }, z.core.$strict>>;
+            temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                expiresAtEpochMs: z.ZodNumber;
+            }, z.core.$strict>>>;
+            delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+                delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
+            }, z.core.$strict>>>;
+            emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
+            coolingPeriod: z.ZodOptional<z.ZodObject<{
+                seconds: z.ZodNumber;
+            }, z.core.$strict>>;
+        }, z.core.$strict>>>;
+        appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
+            applied: z.ZodArray<z.ZodString>;
+            constraints: z.ZodObject<{
+                allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
+                allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
+                allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+                    mcp: "mcp";
+                    rest: "rest";
+                    internal: "internal";
+                }>>>;
+                maxValueCents: z.ZodOptional<z.ZodNumber>;
+                maxUses: z.ZodOptional<z.ZodNumber>;
+                minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
+                    T0_UNKNOWN: "T0_UNKNOWN";
+                    T1_IDENTIFIED: "T1_IDENTIFIED";
+                    T2_VERIFIED: "T2_VERIFIED";
+                    T3_ATTESTED: "T3_ATTESTED";
+                    T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
+                }>>;
+                minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
+                    G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
+                    G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
+                    G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
+                    G0_OBSERVED: "G0_OBSERVED";
+                    G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
+                }>>;
+                requiredApprovals: z.ZodOptional<z.ZodNumber>;
+            }, z.core.$strict>;
+        }, z.core.$strict>>;
+        transaction: z.ZodOptional<z.ZodObject<{
+            schema: z.ZodLiteral<"guardian.transaction.v1">;
+            stages: z.ZodArray<z.ZodEnum<{
+                PROPOSE: "PROPOSE";
+                PREPARE: "PREPARE";
+                AUTHORIZE: "AUTHORIZE";
+                LOCK: "LOCK";
+                COMMIT: "COMMIT";
+                VERIFY: "VERIFY";
+                SETTLE: "SETTLE";
+            }>>;
+            deadlineMs: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        compensates: z.ZodOptional<z.ZodObject<{
+            transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
+        }, z.core.$strict>>;
+        physicalFacts: z.ZodOptional<z.ZodObject<{
+            zone: z.ZodOptional<z.ZodString>;
+            speed: z.ZodOptional<z.ZodNumber>;
+            force: z.ZodOptional<z.ZodNumber>;
+            payload: z.ZodOptional<z.ZodNumber>;
+            atEpochMs: z.ZodOptional<z.ZodNumber>;
+            humanDistance: z.ZodOptional<z.ZodNumber>;
+            environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+            supervised: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
+            envelopeDigest: z.ZodString;
+            satisfied: z.ZodBoolean;
+            violations: z.ZodArray<z.ZodEnum<{
+                OUT_OF_ZONE: "OUT_OF_ZONE";
+                FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
+                OVER_SPEED: "OVER_SPEED";
+                OVER_FORCE: "OVER_FORCE";
+                OVER_PAYLOAD: "OVER_PAYLOAD";
+                OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
+                PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
+                ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
+                SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
+            }>>;
+            emergencyStopped: z.ZodBoolean;
+            failSafeApplied: z.ZodBoolean;
+        }, z.core.$strict>>;
         uses: z.ZodNumber;
         materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, import("./canonical-json.js").CanonicalJsonValue>>, unknown>>;
         initiatingContext: z.ZodEnum<{
@@ -1135,6 +1509,12 @@ export declare const ExecutionStageCommandSchema: z.ZodDiscriminatedUnion<[z.Zod
     }, z.core.$strict>, z.ZodObject<{
         kind: z.ZodLiteral<"protected_data-op">;
         operationDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"guardian-call">;
+        callDigest: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+        kind: z.ZodLiteral<"clawlink-execution">;
+        requestDigest: z.ZodString;
     }, z.core.$strict>], "kind">;
     preparedProjectionDigest: z.ZodString;
 }, z.core.$strict>, z.ZodObject<{
@@ -1167,8 +1547,8 @@ export declare const ExecutionStageCommandSchema: z.ZodDiscriminatedUnion<[z.Zod
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"tool-response">;
             operation: z.ZodEnum<{
-                install: "install";
                 enable: "enable";
+                install: "install";
                 invoke: "invoke";
             }>;
             toolName: z.ZodString;
@@ -1196,10 +1576,10 @@ export declare const ExecutionStageCommandSchema: z.ZodDiscriminatedUnion<[z.Zod
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"file-effect">;
             operation: z.ZodEnum<{
-                read: "read";
-                write: "write";
                 share: "share";
                 delete: "delete";
+                read: "read";
+                write: "write";
             }>;
             path: z.ZodString;
             contentDigest: z.ZodNullable<z.ZodString>;
@@ -1209,8 +1589,8 @@ export declare const ExecutionStageCommandSchema: z.ZodDiscriminatedUnion<[z.Zod
         }, z.core.$strict>, z.ZodObject<{
             kind: z.ZodLiteral<"protected_data-effect">;
             operation: z.ZodEnum<{
-                use: "use";
                 view: "view";
+                use: "use";
                 disclose: "disclose";
                 persist: "persist";
             }>;
@@ -1218,6 +1598,19 @@ export declare const ExecutionStageCommandSchema: z.ZodDiscriminatedUnion<[z.Zod
             valueDigest: z.ZodString;
             counterparty: z.ZodNullable<z.ZodString>;
             maskedPreview: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"guardian-effect">;
+            operation: z.ZodString;
+            subject: z.ZodNullable<z.ZodString>;
+            status: z.ZodString;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
+        }, z.core.$strict>, z.ZodObject<{
+            kind: z.ZodLiteral<"clawlink-execution">;
+            executionId: z.ZodString;
+            executionStatus: z.ZodLiteral<"succeeded">;
+            resultDigest: z.ZodString;
+            detail: z.ZodString;
         }, z.core.$strict>], "kind">;
         observedDigest: z.ZodString;
         observedAtEpochMs: z.ZodNumber;
@@ -1286,6 +1679,7 @@ export declare const AgentExecutionReceiptSchema: z.ZodObject<{
         kind: z.ZodEnum<{
             "file-content": "file-content";
             "protected-value": "protected-value";
+            "agent-secret": "agent-secret";
         }>;
         fieldRef: z.ZodNullable<z.ZodString>;
         path: z.ZodNullable<z.ZodString>;