@odingard/guardian-sdk 0.1.0 → 0.2.0

package/dist-dts/contracts/action-registry.d.ts

@@ -1,4 +1,6 @@
+import { type TransactionDeclaration } from "./transaction.js";
 import { type ActionAuthorityFacts } from "./commerce.js";
+import type { ResourceClaim } from "./resource-claims.js";
 import { type ProtectedCatalogEntry } from "./protected-data.js";
 import { type ToolDescriptor } from "./tools.js";
 /**
@@ -32,6 +34,23 @@ export type ActionConnectionBinding = Readonly<{
     shareAllowlist?: readonly string[];
     /** Declared protected fields for this connection (protected_data). */
     protectedCatalog?: readonly ProtectedCatalogEntry[];
+    /**
+     * WO-016 — provider "guardian" connections bind delegation facts for the
+     * requesting agent: which sub-agents are bonded to it, and the parent's
+     * derived authority ceiling per target connection. An unbonded child id or
+     * a delegation outside the ceiling fails the binding (DENY).
+     */
+    bondedSubAgentIds?: readonly string[];
+    delegationCeilings?: Readonly<Record<string, {
+        actionIds: readonly string[];
+    }>>;
+    /**
+     * WO-021 — the universal Resource Claim projected from this connection's
+     * binding facts (guardian.resource-claim.v1). Built-in definitions keep
+     * reading the legacy vertical fields above; pack-defined actions evaluate
+     * their declarative claim/binding rules against this claim only.
+     */
+    claims?: ResourceClaim;
 }>;
 export type ActionBindingResult = Readonly<{
     ok: true;
@@ -39,6 +58,12 @@ export type ActionBindingResult = Readonly<{
     ok: false;
     reasonCode: string;
 }>;
+/**
+ * WO-028 (§34) — the full canonical lifecycle declared on consequential
+ * action kinds. An intent may union its own declaration on top; the
+ * effective lifecycle binds into the canonical action digest.
+ */
+export declare const FULL_TRANSACTION_LIFECYCLE: TransactionDeclaration;
 export interface ActionDefinition<P = unknown> {
     readonly actionId: string;
     readonly schemaVersion: 1;
@@ -62,6 +87,16 @@ export interface ActionDefinition<P = unknown> {
     readonly defaultDecisionPosture: "allow" | "ask" | "deny";
     /** Generic fields the Authority Slip renders. */
     readonly approvalPresentationSchema: readonly string[];
+    /**
+     * WO-021 — optional labelled display fields. Signed Action Packs set these
+     * from their verified `approvalDisplay` metadata so the slip can render
+     * trusted labels against the bound material parameters; built-ins leave
+     * this unset and keep today's rendering.
+     */
+    readonly approvalDisplayFields?: readonly Readonly<{
+        field: string;
+        label: string;
+    }>[];
     readonly capabilityRequirements: Readonly<{
         uses: number;
     }>;
@@ -78,6 +113,28 @@ export interface ActionDefinition<P = unknown> {
      * a human selects it explicitly (WO-015 self-serve-escalation denial).
      */
     readonly requiresExplicitGrant?: boolean;
+    /**
+     * WO-019 — minimum principal class allowed to hold authority for this
+     * action. "adult" marks governance and identity-level actions that a
+     * child-classed principal can never be granted: the control plane excludes
+     * them when emitting authority for a child, so the kernel DENYs with
+     * ACTION_NOT_ALLOWED. Absent means any principal class may hold it.
+     */
+    readonly minPrincipalClass?: "adult";
+    /**
+     * WO-028 (§34–35) — when set, every action of this kind executes under
+     * a recorded guardian.transaction.v1 lifecycle. Unioned with the
+     * governing intent's own declaration (canonical order; never shrinks);
+     * the effective declaration binds into the canonical action digest.
+     */
+    readonly transaction?: TransactionDeclaration;
+    /**
+     * WO-028 (§36) — declared compensation mapping: this action kind
+     * compensates `compensatesAction` (e.g. commerce.refund compensates
+     * commerce.purchase). A compensating action still runs the full
+     * authority path — it never bypasses ASK or enlarges authority.
+     */
+    readonly compensatesAction?: string;
     /**
      * Action-specific logic lives HERE — inside the registered definition —
      * never inside the kernel. Hooks receive only kernel-verified inputs.
@@ -152,6 +209,11 @@ export declare const MCP_INSTALL_DEFINITION: ActionDefinition<{
         method: "GET" | "HEAD" | "POST" | "PUT" | "PATCH" | "DELETE";
         url: string;
         description?: string | undefined;
+        transport?: "http" | undefined;
+    } | {
+        name: string;
+        transport: "record";
+        description?: string | undefined;
     };
 }>;
 export declare const MCP_ENABLE_DEFINITION: ActionDefinition<{
@@ -193,5 +255,33 @@ export declare const SUBSCRIPTION_CREATE_DEFINITION: ActionDefinition<{
     interval: "week" | "month" | "year";
     idempotencyKey: string;
 }>;
-/** The shipped registry: enforced surfaces as first-class definitions. */
+export declare const LOCAL_EXEC_DEFINITION: ActionDefinition<{
+    schema: "odingard.guardian.local.exec.v1";
+    connectionId: string & import("zod").$brand<"ConnectionId">;
+    command: string;
+    cwd?: string | undefined;
+}>;
+export declare const LOCAL_EXEC_PUBLISH_DEFINITION: ActionDefinition<{
+    schema: "odingard.guardian.local.exec.v1";
+    connectionId: string & import("zod").$brand<"ConnectionId">;
+    command: string;
+    cwd?: string | undefined;
+}>;
+export declare const LOCAL_EXEC_DESTROY_DEFINITION: ActionDefinition<{
+    schema: "odingard.guardian.local.exec.v1";
+    connectionId: string & import("zod").$brand<"ConnectionId">;
+    command: string;
+    cwd?: string | undefined;
+}>;
+export declare const LOCAL_EGRESS_DEFINITION: ActionDefinition<{
+    schema: "odingard.guardian.local.egress.v1";
+    connectionId: string & import("zod").$brand<"ConnectionId">;
+    url: string;
+    method: "GET" | "HEAD" | "POST" | "PUT" | "PATCH" | "DELETE" | "OPTIONS";
+}>;
+export declare const LOCAL_BROWSE_DEFINITION: ActionDefinition<{
+    schema: "odingard.guardian.local.browse.v1";
+    connectionId: string & import("zod").$brand<"ConnectionId">;
+    url: string;
+}>;
 export declare const universalActionRegistry: ActionRegistry;