@odingard/guardian-sdk 0.1.0 → 0.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (50) hide show
  1. package/README.md +252 -17
  2. package/dist/contracts.js +9865 -0
  3. package/dist/index.js +12976 -1787
  4. package/dist/public-catalog.v1.json +6915 -0
  5. package/dist-dts/catalog.d.ts +14 -0
  6. package/dist-dts/client.d.ts +51 -1
  7. package/dist-dts/contracts/action-pack.d.ts +464 -0
  8. package/dist-dts/contracts/action-registry.d.ts +91 -1
  9. package/dist-dts/contracts/action.d.ts +1408 -17
  10. package/dist-dts/contracts/agent-state.d.ts +386 -0
  11. package/dist-dts/contracts/approval.d.ts +224 -5
  12. package/dist-dts/contracts/assurance.d.ts +60 -0
  13. package/dist-dts/contracts/authority-graph.d.ts +294 -0
  14. package/dist-dts/contracts/authority-state.d.ts +17 -2
  15. package/dist-dts/contracts/authority.d.ts +31 -5
  16. package/dist-dts/contracts/billing.d.ts +32 -0
  17. package/dist-dts/contracts/calendar.d.ts +6 -6
  18. package/dist-dts/contracts/denial.d.ts +648 -0
  19. package/dist-dts/contracts/evidence.d.ts +73 -16
  20. package/dist-dts/contracts/execution.d.ts +449 -55
  21. package/dist-dts/contracts/identifiers.d.ts +16 -0
  22. package/dist-dts/contracts/index.d.ts +22 -0
  23. package/dist-dts/contracts/intent.d.ts +335 -0
  24. package/dist-dts/contracts/lineage.d.ts +218 -0
  25. package/dist-dts/contracts/local.d.ts +101 -0
  26. package/dist-dts/contracts/multi-principal.d.ts +292 -0
  27. package/dist-dts/contracts/multiparty.d.ts +169 -0
  28. package/dist-dts/contracts/obligation.d.ts +196 -0
  29. package/dist-dts/contracts/plan.d.ts +67 -0
  30. package/dist-dts/contracts/policy-simulation.d.ts +681 -0
  31. package/dist-dts/contracts/prerequisite.d.ts +147 -0
  32. package/dist-dts/contracts/protected-data.d.ts +67 -0
  33. package/dist-dts/contracts/receipt.d.ts +3126 -0
  34. package/dist-dts/contracts/resource-claims.d.ts +146 -0
  35. package/dist-dts/contracts/runtime.d.ts +111 -0
  36. package/dist-dts/contracts/safety-envelope.d.ts +287 -0
  37. package/dist-dts/contracts/sequence.d.ts +132 -0
  38. package/dist-dts/contracts/sources.d.ts +191 -0
  39. package/dist-dts/contracts/tools.d.ts +50 -5
  40. package/dist-dts/contracts/transaction.d.ts +360 -0
  41. package/dist-dts/contracts-entry.d.ts +1 -0
  42. package/dist-dts/embedded.d.ts +58 -0
  43. package/dist-dts/evidence/evidence.d.ts +25 -0
  44. package/dist-dts/evidence/receipt.d.ts +61 -0
  45. package/dist-dts/index.d.ts +5 -1
  46. package/dist-dts/lifecycle.d.ts +25 -0
  47. package/dist-dts/proposal.d.ts +16 -0
  48. package/dist-dts/receipts.d.ts +37 -0
  49. package/package.json +12 -6
  50. package/dist-dts/__tests__/client.test.d.ts +0 -1
package/dist-dts/contracts/action.d.ts CHANGED
@@ -11,6 +11,37 @@ export declare const AuthorityReferenceSchema: z.ZodObject<{
11
11
  version: z.ZodNumber;
12
12
  }, z.core.$strict>>;
13
13
  }, z.core.$strict>;
14
+ export declare const AppliedAuthoritySourcesSchema: z.ZodObject<{
15
+ applied: z.ZodArray<z.ZodString>;
16
+ constraints: z.ZodObject<{
17
+ allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
18
+ deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
19
+ allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
20
+ allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
21
+ mcp: "mcp";
22
+ rest: "rest";
23
+ internal: "internal";
24
+ }>>>;
25
+ maxValueCents: z.ZodOptional<z.ZodNumber>;
26
+ maxUses: z.ZodOptional<z.ZodNumber>;
27
+ minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
28
+ T0_UNKNOWN: "T0_UNKNOWN";
29
+ T1_IDENTIFIED: "T1_IDENTIFIED";
30
+ T2_VERIFIED: "T2_VERIFIED";
31
+ T3_ATTESTED: "T3_ATTESTED";
32
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
33
+ }>>;
34
+ minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
35
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
36
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
37
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
38
+ G0_OBSERVED: "G0_OBSERVED";
39
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
40
+ }>>;
41
+ requiredApprovals: z.ZodOptional<z.ZodNumber>;
42
+ }, z.core.$strict>;
43
+ }, z.core.$strict>;
44
+ export type AppliedAuthoritySourcesBinding = z.infer<typeof AppliedAuthoritySourcesSchema>;
14
45
  export declare const MaterialActionSchema: z.ZodObject<{
15
46
  schemaVersion: z.ZodLiteral<1>;
16
47
  requestId: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
@@ -21,15 +52,268 @@ export declare const MaterialActionSchema: z.ZodObject<{
21
52
  action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
22
53
  resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
23
54
  interface: z.ZodEnum<{
24
- internal: "internal";
25
55
  mcp: "mcp";
26
56
  rest: "rest";
57
+ internal: "internal";
27
58
  }>;
28
59
  valueCents: z.ZodOptional<z.ZodNumber>;
29
60
  merchantId: z.ZodOptional<z.ZodString>;
30
61
  merchantCategory: z.ZodOptional<z.ZodString>;
31
62
  recurring: z.ZodOptional<z.ZodBoolean>;
32
63
  taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
64
+ intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
65
+ planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
66
+ obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
67
+ type: z.ZodEnum<{
68
+ log: "log";
69
+ retain_receipt: "retain_receipt";
70
+ notify: "notify";
71
+ delay: "delay";
72
+ cooling_period: "cooling_period";
73
+ delete_after_use: "delete_after_use";
74
+ redact: "redact";
75
+ encrypt: "encrypt";
76
+ tokenize: "tokenize";
77
+ minimize: "minimize";
78
+ verify_counterparty: "verify_counterparty";
79
+ verify_resource: "verify_resource";
80
+ verify_effect: "verify_effect";
81
+ attest_runtime: "attest_runtime";
82
+ require_consent: "require_consent";
83
+ require_location: "require_location";
84
+ require_device: "require_device";
85
+ require_network: "require_network";
86
+ require_contract: "require_contract";
87
+ step_up: "step_up";
88
+ second_approver: "second_approver";
89
+ quorum: "quorum";
90
+ authenticate: "authenticate";
91
+ }>;
92
+ params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
93
+ }, z.core.$strict>>>;
94
+ obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
95
+ obligationType: z.ZodEnum<{
96
+ log: "log";
97
+ retain_receipt: "retain_receipt";
98
+ notify: "notify";
99
+ delay: "delay";
100
+ cooling_period: "cooling_period";
101
+ delete_after_use: "delete_after_use";
102
+ redact: "redact";
103
+ encrypt: "encrypt";
104
+ tokenize: "tokenize";
105
+ minimize: "minimize";
106
+ verify_counterparty: "verify_counterparty";
107
+ verify_resource: "verify_resource";
108
+ verify_effect: "verify_effect";
109
+ attest_runtime: "attest_runtime";
110
+ require_consent: "require_consent";
111
+ require_location: "require_location";
112
+ require_device: "require_device";
113
+ require_network: "require_network";
114
+ require_contract: "require_contract";
115
+ step_up: "step_up";
116
+ second_approver: "second_approver";
117
+ quorum: "quorum";
118
+ authenticate: "authenticate";
119
+ }>;
120
+ state: z.ZodEnum<{
121
+ satisfied: "satisfied";
122
+ pending: "pending";
123
+ failed: "failed";
124
+ not_applicable: "not_applicable";
125
+ }>;
126
+ rule: z.ZodEnum<{
127
+ OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
128
+ PENDING_POST_ACTION: "PENDING_POST_ACTION";
129
+ PENDING_TIME: "PENDING_TIME";
130
+ PENDING_HUMAN: "PENDING_HUMAN";
131
+ OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
132
+ COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
133
+ RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
134
+ OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
135
+ }>;
136
+ detail: z.ZodOptional<z.ZodString>;
137
+ dueEpochMs: z.ZodOptional<z.ZodNumber>;
138
+ }, z.core.$strict>>>;
139
+ prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
140
+ id: z.ZodString;
141
+ prerequisiteType: z.ZodString;
142
+ state: z.ZodEnum<{
143
+ satisfied: "satisfied";
144
+ pending: "pending";
145
+ failed: "failed";
146
+ not_applicable: "not_applicable";
147
+ }>;
148
+ rule: z.ZodEnum<{
149
+ BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
150
+ PENDING_HUMAN: "PENDING_HUMAN";
151
+ PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
152
+ MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
153
+ BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
154
+ CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
155
+ ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
156
+ PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
157
+ PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
158
+ }>;
159
+ detail: z.ZodOptional<z.ZodString>;
160
+ }, z.core.$strict>>>;
161
+ parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
162
+ sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
163
+ sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
164
+ ruleId: z.ZodString;
165
+ effect: z.ZodEnum<{
166
+ deny: "deny";
167
+ require_approval: "require_approval";
168
+ }>;
169
+ matchedActionRefs: z.ZodArray<z.ZodString>;
170
+ }, z.core.$strict>>>;
171
+ lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
172
+ dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
173
+ effectiveClassification: z.ZodEnum<{
174
+ financial: "financial";
175
+ internal: "internal";
176
+ public: "public";
177
+ pii: "pii";
178
+ phi: "phi";
179
+ credential: "credential";
180
+ confidential: "confidential";
181
+ }>;
182
+ effect: z.ZodEnum<{
183
+ allowed: "allowed";
184
+ deny: "deny";
185
+ require_approval: "require_approval";
186
+ }>;
187
+ expired: z.ZodBoolean;
188
+ }, z.core.$strict>>>;
189
+ runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
190
+ T0_UNKNOWN: "T0_UNKNOWN";
191
+ T1_IDENTIFIED: "T1_IDENTIFIED";
192
+ T2_VERIFIED: "T2_VERIFIED";
193
+ T3_ATTESTED: "T3_ATTESTED";
194
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
195
+ }>>;
196
+ enforcementAssurance: z.ZodOptional<z.ZodEnum<{
197
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
198
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
199
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
200
+ G0_OBSERVED: "G0_OBSERVED";
201
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
202
+ }>>;
203
+ approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
204
+ schema: z.ZodLiteral<"guardian.multiparty.v1">;
205
+ structureId: z.ZodString;
206
+ members: z.ZodArray<z.ZodObject<{
207
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
208
+ roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
209
+ }, z.core.$strict>>;
210
+ requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
211
+ kind: z.ZodLiteral<"single">;
212
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
213
+ }, z.core.$strict>, z.ZodObject<{
214
+ kind: z.ZodLiteral<"nOfM">;
215
+ n: z.ZodNumber;
216
+ members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
217
+ }, z.core.$strict>, z.ZodObject<{
218
+ kind: z.ZodLiteral<"unanimous">;
219
+ members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
220
+ }, z.core.$strict>, z.ZodObject<{
221
+ kind: z.ZodLiteral<"roleQuorum">;
222
+ role: z.ZodString;
223
+ n: z.ZodNumber;
224
+ m: z.ZodNumber;
225
+ }, z.core.$strict>], "kind">;
226
+ specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
227
+ veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
228
+ separationOfDuties: z.ZodOptional<z.ZodObject<{
229
+ mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
230
+ }, z.core.$strict>>;
231
+ temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
232
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
233
+ expiresAtEpochMs: z.ZodNumber;
234
+ }, z.core.$strict>>>;
235
+ delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
236
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
237
+ delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
238
+ }, z.core.$strict>>>;
239
+ emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
240
+ coolingPeriod: z.ZodOptional<z.ZodObject<{
241
+ seconds: z.ZodNumber;
242
+ }, z.core.$strict>>;
243
+ }, z.core.$strict>>>;
244
+ appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
245
+ applied: z.ZodArray<z.ZodString>;
246
+ constraints: z.ZodObject<{
247
+ allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
248
+ deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
249
+ allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
250
+ allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
251
+ mcp: "mcp";
252
+ rest: "rest";
253
+ internal: "internal";
254
+ }>>>;
255
+ maxValueCents: z.ZodOptional<z.ZodNumber>;
256
+ maxUses: z.ZodOptional<z.ZodNumber>;
257
+ minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
258
+ T0_UNKNOWN: "T0_UNKNOWN";
259
+ T1_IDENTIFIED: "T1_IDENTIFIED";
260
+ T2_VERIFIED: "T2_VERIFIED";
261
+ T3_ATTESTED: "T3_ATTESTED";
262
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
263
+ }>>;
264
+ minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
265
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
266
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
267
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
268
+ G0_OBSERVED: "G0_OBSERVED";
269
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
270
+ }>>;
271
+ requiredApprovals: z.ZodOptional<z.ZodNumber>;
272
+ }, z.core.$strict>;
273
+ }, z.core.$strict>>;
274
+ transaction: z.ZodOptional<z.ZodObject<{
275
+ schema: z.ZodLiteral<"guardian.transaction.v1">;
276
+ stages: z.ZodArray<z.ZodEnum<{
277
+ PROPOSE: "PROPOSE";
278
+ PREPARE: "PREPARE";
279
+ AUTHORIZE: "AUTHORIZE";
280
+ LOCK: "LOCK";
281
+ COMMIT: "COMMIT";
282
+ VERIFY: "VERIFY";
283
+ SETTLE: "SETTLE";
284
+ }>>;
285
+ deadlineMs: z.ZodOptional<z.ZodNumber>;
286
+ }, z.core.$strict>>;
287
+ compensates: z.ZodOptional<z.ZodObject<{
288
+ transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
289
+ }, z.core.$strict>>;
290
+ physicalFacts: z.ZodOptional<z.ZodObject<{
291
+ zone: z.ZodOptional<z.ZodString>;
292
+ speed: z.ZodOptional<z.ZodNumber>;
293
+ force: z.ZodOptional<z.ZodNumber>;
294
+ payload: z.ZodOptional<z.ZodNumber>;
295
+ atEpochMs: z.ZodOptional<z.ZodNumber>;
296
+ humanDistance: z.ZodOptional<z.ZodNumber>;
297
+ environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
298
+ supervised: z.ZodOptional<z.ZodBoolean>;
299
+ }, z.core.$strict>>;
300
+ safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
301
+ envelopeDigest: z.ZodString;
302
+ satisfied: z.ZodBoolean;
303
+ violations: z.ZodArray<z.ZodEnum<{
304
+ OUT_OF_ZONE: "OUT_OF_ZONE";
305
+ FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
306
+ OVER_SPEED: "OVER_SPEED";
307
+ OVER_FORCE: "OVER_FORCE";
308
+ OVER_PAYLOAD: "OVER_PAYLOAD";
309
+ OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
310
+ PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
311
+ ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
312
+ SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
313
+ }>>;
314
+ emergencyStopped: z.ZodBoolean;
315
+ failSafeApplied: z.ZodBoolean;
316
+ }, z.core.$strict>>;
33
317
  uses: z.ZodNumber;
34
318
  materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, CanonicalJsonValue>>, unknown>>;
35
319
  initiatingContext: z.ZodEnum<{
@@ -63,15 +347,268 @@ export declare const CanonicalActionEnvelopeSchema: z.ZodObject<{
63
347
  action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
64
348
  resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
65
349
  interface: z.ZodEnum<{
66
- internal: "internal";
67
350
  mcp: "mcp";
68
351
  rest: "rest";
352
+ internal: "internal";
69
353
  }>;
70
354
  valueCents: z.ZodOptional<z.ZodNumber>;
71
355
  merchantId: z.ZodOptional<z.ZodString>;
72
356
  merchantCategory: z.ZodOptional<z.ZodString>;
73
357
  recurring: z.ZodOptional<z.ZodBoolean>;
74
358
  taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
359
+ intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
360
+ planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
361
+ obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
362
+ type: z.ZodEnum<{
363
+ log: "log";
364
+ retain_receipt: "retain_receipt";
365
+ notify: "notify";
366
+ delay: "delay";
367
+ cooling_period: "cooling_period";
368
+ delete_after_use: "delete_after_use";
369
+ redact: "redact";
370
+ encrypt: "encrypt";
371
+ tokenize: "tokenize";
372
+ minimize: "minimize";
373
+ verify_counterparty: "verify_counterparty";
374
+ verify_resource: "verify_resource";
375
+ verify_effect: "verify_effect";
376
+ attest_runtime: "attest_runtime";
377
+ require_consent: "require_consent";
378
+ require_location: "require_location";
379
+ require_device: "require_device";
380
+ require_network: "require_network";
381
+ require_contract: "require_contract";
382
+ step_up: "step_up";
383
+ second_approver: "second_approver";
384
+ quorum: "quorum";
385
+ authenticate: "authenticate";
386
+ }>;
387
+ params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
388
+ }, z.core.$strict>>>;
389
+ obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
390
+ obligationType: z.ZodEnum<{
391
+ log: "log";
392
+ retain_receipt: "retain_receipt";
393
+ notify: "notify";
394
+ delay: "delay";
395
+ cooling_period: "cooling_period";
396
+ delete_after_use: "delete_after_use";
397
+ redact: "redact";
398
+ encrypt: "encrypt";
399
+ tokenize: "tokenize";
400
+ minimize: "minimize";
401
+ verify_counterparty: "verify_counterparty";
402
+ verify_resource: "verify_resource";
403
+ verify_effect: "verify_effect";
404
+ attest_runtime: "attest_runtime";
405
+ require_consent: "require_consent";
406
+ require_location: "require_location";
407
+ require_device: "require_device";
408
+ require_network: "require_network";
409
+ require_contract: "require_contract";
410
+ step_up: "step_up";
411
+ second_approver: "second_approver";
412
+ quorum: "quorum";
413
+ authenticate: "authenticate";
414
+ }>;
415
+ state: z.ZodEnum<{
416
+ satisfied: "satisfied";
417
+ pending: "pending";
418
+ failed: "failed";
419
+ not_applicable: "not_applicable";
420
+ }>;
421
+ rule: z.ZodEnum<{
422
+ OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
423
+ PENDING_POST_ACTION: "PENDING_POST_ACTION";
424
+ PENDING_TIME: "PENDING_TIME";
425
+ PENDING_HUMAN: "PENDING_HUMAN";
426
+ OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
427
+ COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
428
+ RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
429
+ OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
430
+ }>;
431
+ detail: z.ZodOptional<z.ZodString>;
432
+ dueEpochMs: z.ZodOptional<z.ZodNumber>;
433
+ }, z.core.$strict>>>;
434
+ prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
435
+ id: z.ZodString;
436
+ prerequisiteType: z.ZodString;
437
+ state: z.ZodEnum<{
438
+ satisfied: "satisfied";
439
+ pending: "pending";
440
+ failed: "failed";
441
+ not_applicable: "not_applicable";
442
+ }>;
443
+ rule: z.ZodEnum<{
444
+ BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
445
+ PENDING_HUMAN: "PENDING_HUMAN";
446
+ PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
447
+ MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
448
+ BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
449
+ CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
450
+ ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
451
+ PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
452
+ PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
453
+ }>;
454
+ detail: z.ZodOptional<z.ZodString>;
455
+ }, z.core.$strict>>>;
456
+ parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
457
+ sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
458
+ sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
459
+ ruleId: z.ZodString;
460
+ effect: z.ZodEnum<{
461
+ deny: "deny";
462
+ require_approval: "require_approval";
463
+ }>;
464
+ matchedActionRefs: z.ZodArray<z.ZodString>;
465
+ }, z.core.$strict>>>;
466
+ lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
467
+ dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
468
+ effectiveClassification: z.ZodEnum<{
469
+ financial: "financial";
470
+ internal: "internal";
471
+ public: "public";
472
+ pii: "pii";
473
+ phi: "phi";
474
+ credential: "credential";
475
+ confidential: "confidential";
476
+ }>;
477
+ effect: z.ZodEnum<{
478
+ allowed: "allowed";
479
+ deny: "deny";
480
+ require_approval: "require_approval";
481
+ }>;
482
+ expired: z.ZodBoolean;
483
+ }, z.core.$strict>>>;
484
+ runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
485
+ T0_UNKNOWN: "T0_UNKNOWN";
486
+ T1_IDENTIFIED: "T1_IDENTIFIED";
487
+ T2_VERIFIED: "T2_VERIFIED";
488
+ T3_ATTESTED: "T3_ATTESTED";
489
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
490
+ }>>;
491
+ enforcementAssurance: z.ZodOptional<z.ZodEnum<{
492
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
493
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
494
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
495
+ G0_OBSERVED: "G0_OBSERVED";
496
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
497
+ }>>;
498
+ approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
499
+ schema: z.ZodLiteral<"guardian.multiparty.v1">;
500
+ structureId: z.ZodString;
501
+ members: z.ZodArray<z.ZodObject<{
502
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
503
+ roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
504
+ }, z.core.$strict>>;
505
+ requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
506
+ kind: z.ZodLiteral<"single">;
507
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
508
+ }, z.core.$strict>, z.ZodObject<{
509
+ kind: z.ZodLiteral<"nOfM">;
510
+ n: z.ZodNumber;
511
+ members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
512
+ }, z.core.$strict>, z.ZodObject<{
513
+ kind: z.ZodLiteral<"unanimous">;
514
+ members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
515
+ }, z.core.$strict>, z.ZodObject<{
516
+ kind: z.ZodLiteral<"roleQuorum">;
517
+ role: z.ZodString;
518
+ n: z.ZodNumber;
519
+ m: z.ZodNumber;
520
+ }, z.core.$strict>], "kind">;
521
+ specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
522
+ veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
523
+ separationOfDuties: z.ZodOptional<z.ZodObject<{
524
+ mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
525
+ }, z.core.$strict>>;
526
+ temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
527
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
528
+ expiresAtEpochMs: z.ZodNumber;
529
+ }, z.core.$strict>>>;
530
+ delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
531
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
532
+ delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
533
+ }, z.core.$strict>>>;
534
+ emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
535
+ coolingPeriod: z.ZodOptional<z.ZodObject<{
536
+ seconds: z.ZodNumber;
537
+ }, z.core.$strict>>;
538
+ }, z.core.$strict>>>;
539
+ appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
540
+ applied: z.ZodArray<z.ZodString>;
541
+ constraints: z.ZodObject<{
542
+ allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
543
+ deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
544
+ allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
545
+ allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
546
+ mcp: "mcp";
547
+ rest: "rest";
548
+ internal: "internal";
549
+ }>>>;
550
+ maxValueCents: z.ZodOptional<z.ZodNumber>;
551
+ maxUses: z.ZodOptional<z.ZodNumber>;
552
+ minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
553
+ T0_UNKNOWN: "T0_UNKNOWN";
554
+ T1_IDENTIFIED: "T1_IDENTIFIED";
555
+ T2_VERIFIED: "T2_VERIFIED";
556
+ T3_ATTESTED: "T3_ATTESTED";
557
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
558
+ }>>;
559
+ minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
560
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
561
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
562
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
563
+ G0_OBSERVED: "G0_OBSERVED";
564
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
565
+ }>>;
566
+ requiredApprovals: z.ZodOptional<z.ZodNumber>;
567
+ }, z.core.$strict>;
568
+ }, z.core.$strict>>;
569
+ transaction: z.ZodOptional<z.ZodObject<{
570
+ schema: z.ZodLiteral<"guardian.transaction.v1">;
571
+ stages: z.ZodArray<z.ZodEnum<{
572
+ PROPOSE: "PROPOSE";
573
+ PREPARE: "PREPARE";
574
+ AUTHORIZE: "AUTHORIZE";
575
+ LOCK: "LOCK";
576
+ COMMIT: "COMMIT";
577
+ VERIFY: "VERIFY";
578
+ SETTLE: "SETTLE";
579
+ }>>;
580
+ deadlineMs: z.ZodOptional<z.ZodNumber>;
581
+ }, z.core.$strict>>;
582
+ compensates: z.ZodOptional<z.ZodObject<{
583
+ transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
584
+ }, z.core.$strict>>;
585
+ physicalFacts: z.ZodOptional<z.ZodObject<{
586
+ zone: z.ZodOptional<z.ZodString>;
587
+ speed: z.ZodOptional<z.ZodNumber>;
588
+ force: z.ZodOptional<z.ZodNumber>;
589
+ payload: z.ZodOptional<z.ZodNumber>;
590
+ atEpochMs: z.ZodOptional<z.ZodNumber>;
591
+ humanDistance: z.ZodOptional<z.ZodNumber>;
592
+ environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
593
+ supervised: z.ZodOptional<z.ZodBoolean>;
594
+ }, z.core.$strict>>;
595
+ safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
596
+ envelopeDigest: z.ZodString;
597
+ satisfied: z.ZodBoolean;
598
+ violations: z.ZodArray<z.ZodEnum<{
599
+ OUT_OF_ZONE: "OUT_OF_ZONE";
600
+ FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
601
+ OVER_SPEED: "OVER_SPEED";
602
+ OVER_FORCE: "OVER_FORCE";
603
+ OVER_PAYLOAD: "OVER_PAYLOAD";
604
+ OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
605
+ PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
606
+ ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
607
+ SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
608
+ }>>;
609
+ emergencyStopped: z.ZodBoolean;
610
+ failSafeApplied: z.ZodBoolean;
611
+ }, z.core.$strict>>;
75
612
  uses: z.ZodNumber;
76
613
  materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, CanonicalJsonValue>>, unknown>>;
77
614
  initiatingContext: z.ZodEnum<{
@@ -106,15 +643,268 @@ export declare const CanonicalActionSchema: z.ZodObject<{
106
643
  action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
107
644
  resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
108
645
  interface: z.ZodEnum<{
109
- internal: "internal";
110
646
  mcp: "mcp";
111
647
  rest: "rest";
648
+ internal: "internal";
112
649
  }>;
113
650
  valueCents: z.ZodOptional<z.ZodNumber>;
114
651
  merchantId: z.ZodOptional<z.ZodString>;
115
652
  merchantCategory: z.ZodOptional<z.ZodString>;
116
653
  recurring: z.ZodOptional<z.ZodBoolean>;
117
654
  taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
655
+ intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
656
+ planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
657
+ obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
658
+ type: z.ZodEnum<{
659
+ log: "log";
660
+ retain_receipt: "retain_receipt";
661
+ notify: "notify";
662
+ delay: "delay";
663
+ cooling_period: "cooling_period";
664
+ delete_after_use: "delete_after_use";
665
+ redact: "redact";
666
+ encrypt: "encrypt";
667
+ tokenize: "tokenize";
668
+ minimize: "minimize";
669
+ verify_counterparty: "verify_counterparty";
670
+ verify_resource: "verify_resource";
671
+ verify_effect: "verify_effect";
672
+ attest_runtime: "attest_runtime";
673
+ require_consent: "require_consent";
674
+ require_location: "require_location";
675
+ require_device: "require_device";
676
+ require_network: "require_network";
677
+ require_contract: "require_contract";
678
+ step_up: "step_up";
679
+ second_approver: "second_approver";
680
+ quorum: "quorum";
681
+ authenticate: "authenticate";
682
+ }>;
683
+ params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
684
+ }, z.core.$strict>>>;
685
+ obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
686
+ obligationType: z.ZodEnum<{
687
+ log: "log";
688
+ retain_receipt: "retain_receipt";
689
+ notify: "notify";
690
+ delay: "delay";
691
+ cooling_period: "cooling_period";
692
+ delete_after_use: "delete_after_use";
693
+ redact: "redact";
694
+ encrypt: "encrypt";
695
+ tokenize: "tokenize";
696
+ minimize: "minimize";
697
+ verify_counterparty: "verify_counterparty";
698
+ verify_resource: "verify_resource";
699
+ verify_effect: "verify_effect";
700
+ attest_runtime: "attest_runtime";
701
+ require_consent: "require_consent";
702
+ require_location: "require_location";
703
+ require_device: "require_device";
704
+ require_network: "require_network";
705
+ require_contract: "require_contract";
706
+ step_up: "step_up";
707
+ second_approver: "second_approver";
708
+ quorum: "quorum";
709
+ authenticate: "authenticate";
710
+ }>;
711
+ state: z.ZodEnum<{
712
+ satisfied: "satisfied";
713
+ pending: "pending";
714
+ failed: "failed";
715
+ not_applicable: "not_applicable";
716
+ }>;
717
+ rule: z.ZodEnum<{
718
+ OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
719
+ PENDING_POST_ACTION: "PENDING_POST_ACTION";
720
+ PENDING_TIME: "PENDING_TIME";
721
+ PENDING_HUMAN: "PENDING_HUMAN";
722
+ OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
723
+ COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
724
+ RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
725
+ OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
726
+ }>;
727
+ detail: z.ZodOptional<z.ZodString>;
728
+ dueEpochMs: z.ZodOptional<z.ZodNumber>;
729
+ }, z.core.$strict>>>;
730
+ prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
731
+ id: z.ZodString;
732
+ prerequisiteType: z.ZodString;
733
+ state: z.ZodEnum<{
734
+ satisfied: "satisfied";
735
+ pending: "pending";
736
+ failed: "failed";
737
+ not_applicable: "not_applicable";
738
+ }>;
739
+ rule: z.ZodEnum<{
740
+ BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
741
+ PENDING_HUMAN: "PENDING_HUMAN";
742
+ PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
743
+ MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
744
+ BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
745
+ CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
746
+ ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
747
+ PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
748
+ PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
749
+ }>;
750
+ detail: z.ZodOptional<z.ZodString>;
751
+ }, z.core.$strict>>>;
752
+ parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
753
+ sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
754
+ sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
755
+ ruleId: z.ZodString;
756
+ effect: z.ZodEnum<{
757
+ deny: "deny";
758
+ require_approval: "require_approval";
759
+ }>;
760
+ matchedActionRefs: z.ZodArray<z.ZodString>;
761
+ }, z.core.$strict>>>;
762
+ lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
763
+ dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
764
+ effectiveClassification: z.ZodEnum<{
765
+ financial: "financial";
766
+ internal: "internal";
767
+ public: "public";
768
+ pii: "pii";
769
+ phi: "phi";
770
+ credential: "credential";
771
+ confidential: "confidential";
772
+ }>;
773
+ effect: z.ZodEnum<{
774
+ allowed: "allowed";
775
+ deny: "deny";
776
+ require_approval: "require_approval";
777
+ }>;
778
+ expired: z.ZodBoolean;
779
+ }, z.core.$strict>>>;
780
+ runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
781
+ T0_UNKNOWN: "T0_UNKNOWN";
782
+ T1_IDENTIFIED: "T1_IDENTIFIED";
783
+ T2_VERIFIED: "T2_VERIFIED";
784
+ T3_ATTESTED: "T3_ATTESTED";
785
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
786
+ }>>;
787
+ enforcementAssurance: z.ZodOptional<z.ZodEnum<{
788
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
789
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
790
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
791
+ G0_OBSERVED: "G0_OBSERVED";
792
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
793
+ }>>;
794
+ approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
795
+ schema: z.ZodLiteral<"guardian.multiparty.v1">;
796
+ structureId: z.ZodString;
797
+ members: z.ZodArray<z.ZodObject<{
798
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
799
+ roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
800
+ }, z.core.$strict>>;
801
+ requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
802
+ kind: z.ZodLiteral<"single">;
803
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
804
+ }, z.core.$strict>, z.ZodObject<{
805
+ kind: z.ZodLiteral<"nOfM">;
806
+ n: z.ZodNumber;
807
+ members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
808
+ }, z.core.$strict>, z.ZodObject<{
809
+ kind: z.ZodLiteral<"unanimous">;
810
+ members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
811
+ }, z.core.$strict>, z.ZodObject<{
812
+ kind: z.ZodLiteral<"roleQuorum">;
813
+ role: z.ZodString;
814
+ n: z.ZodNumber;
815
+ m: z.ZodNumber;
816
+ }, z.core.$strict>], "kind">;
817
+ specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
818
+ veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
819
+ separationOfDuties: z.ZodOptional<z.ZodObject<{
820
+ mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
821
+ }, z.core.$strict>>;
822
+ temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
823
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
824
+ expiresAtEpochMs: z.ZodNumber;
825
+ }, z.core.$strict>>>;
826
+ delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
827
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
828
+ delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
829
+ }, z.core.$strict>>>;
830
+ emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
831
+ coolingPeriod: z.ZodOptional<z.ZodObject<{
832
+ seconds: z.ZodNumber;
833
+ }, z.core.$strict>>;
834
+ }, z.core.$strict>>>;
835
+ appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
836
+ applied: z.ZodArray<z.ZodString>;
837
+ constraints: z.ZodObject<{
838
+ allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
839
+ deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
840
+ allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
841
+ allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
842
+ mcp: "mcp";
843
+ rest: "rest";
844
+ internal: "internal";
845
+ }>>>;
846
+ maxValueCents: z.ZodOptional<z.ZodNumber>;
847
+ maxUses: z.ZodOptional<z.ZodNumber>;
848
+ minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
849
+ T0_UNKNOWN: "T0_UNKNOWN";
850
+ T1_IDENTIFIED: "T1_IDENTIFIED";
851
+ T2_VERIFIED: "T2_VERIFIED";
852
+ T3_ATTESTED: "T3_ATTESTED";
853
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
854
+ }>>;
855
+ minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
856
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
857
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
858
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
859
+ G0_OBSERVED: "G0_OBSERVED";
860
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
861
+ }>>;
862
+ requiredApprovals: z.ZodOptional<z.ZodNumber>;
863
+ }, z.core.$strict>;
864
+ }, z.core.$strict>>;
865
+ transaction: z.ZodOptional<z.ZodObject<{
866
+ schema: z.ZodLiteral<"guardian.transaction.v1">;
867
+ stages: z.ZodArray<z.ZodEnum<{
868
+ PROPOSE: "PROPOSE";
869
+ PREPARE: "PREPARE";
870
+ AUTHORIZE: "AUTHORIZE";
871
+ LOCK: "LOCK";
872
+ COMMIT: "COMMIT";
873
+ VERIFY: "VERIFY";
874
+ SETTLE: "SETTLE";
875
+ }>>;
876
+ deadlineMs: z.ZodOptional<z.ZodNumber>;
877
+ }, z.core.$strict>>;
878
+ compensates: z.ZodOptional<z.ZodObject<{
879
+ transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
880
+ }, z.core.$strict>>;
881
+ physicalFacts: z.ZodOptional<z.ZodObject<{
882
+ zone: z.ZodOptional<z.ZodString>;
883
+ speed: z.ZodOptional<z.ZodNumber>;
884
+ force: z.ZodOptional<z.ZodNumber>;
885
+ payload: z.ZodOptional<z.ZodNumber>;
886
+ atEpochMs: z.ZodOptional<z.ZodNumber>;
887
+ humanDistance: z.ZodOptional<z.ZodNumber>;
888
+ environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
889
+ supervised: z.ZodOptional<z.ZodBoolean>;
890
+ }, z.core.$strict>>;
891
+ safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
892
+ envelopeDigest: z.ZodString;
893
+ satisfied: z.ZodBoolean;
894
+ violations: z.ZodArray<z.ZodEnum<{
895
+ OUT_OF_ZONE: "OUT_OF_ZONE";
896
+ FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
897
+ OVER_SPEED: "OVER_SPEED";
898
+ OVER_FORCE: "OVER_FORCE";
899
+ OVER_PAYLOAD: "OVER_PAYLOAD";
900
+ OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
901
+ PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
902
+ ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
903
+ SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
904
+ }>>;
905
+ emergencyStopped: z.ZodBoolean;
906
+ failSafeApplied: z.ZodBoolean;
907
+ }, z.core.$strict>>;
118
908
  uses: z.ZodNumber;
119
909
  materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, CanonicalJsonValue>>, unknown>>;
120
910
  initiatingContext: z.ZodEnum<{
@@ -160,10 +950,13 @@ export declare const RecordedAuthorityEvaluationInputSchema: z.ZodObject<{
160
950
  revoked: "revoked";
161
951
  }>;
162
952
  allowedInterfaces: z.ZodPipe<z.ZodArray<z.ZodEnum<{
163
- internal: "internal";
164
953
  mcp: "mcp";
165
954
  rest: "rest";
166
- }>>, z.ZodTransform<("internal" | "mcp" | "rest")[], ("internal" | "mcp" | "rest")[]>>;
955
+ internal: "internal";
956
+ }>>, z.ZodTransform<("mcp" | "rest" | "internal")[], ("mcp" | "rest" | "internal")[]>>;
957
+ boundRuntime: z.ZodOptional<z.ZodString>;
958
+ boundModel: z.ZodOptional<z.ZodString>;
959
+ parentAgentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AgentId", "out">>;
167
960
  }, z.core.$strict>;
168
961
  request: z.ZodObject<{
169
962
  id: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
@@ -173,9 +966,9 @@ export declare const RecordedAuthorityEvaluationInputSchema: z.ZodObject<{
173
966
  action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
174
967
  resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
175
968
  interface: z.ZodEnum<{
176
- internal: "internal";
177
969
  mcp: "mcp";
178
970
  rest: "rest";
971
+ internal: "internal";
179
972
  }>;
180
973
  requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
181
974
  valueCents: z.ZodOptional<z.ZodNumber>;
@@ -186,6 +979,8 @@ export declare const RecordedAuthorityEvaluationInputSchema: z.ZodObject<{
186
979
  merchantCategory: z.ZodOptional<z.ZodString>;
187
980
  recurring: z.ZodOptional<z.ZodBoolean>;
188
981
  taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
982
+ intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
983
+ planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
189
984
  }, z.core.$strict>;
190
985
  policy: z.ZodObject<{
191
986
  id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
@@ -278,6 +1073,30 @@ export declare const RecordedAuthorityEvaluationInputSchema: z.ZodObject<{
278
1073
  taskId?: (string & z.core.$brand<"TaskId">) | undefined;
279
1074
  expiresAtEpochMs?: number | undefined;
280
1075
  }[]>>;
1076
+ pauses: z.ZodPipe<z.ZodDefault<z.ZodArray<z.ZodObject<{
1077
+ id: z.core.$ZodBranded<z.ZodString, "PauseId", "out">;
1078
+ scope: z.ZodEnum<{
1079
+ agent: "agent";
1080
+ principal: "principal";
1081
+ grant: "grant";
1082
+ connection: "connection";
1083
+ }>;
1084
+ agentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AgentId", "out">>;
1085
+ grantIds: z.ZodOptional<z.ZodPipe<z.ZodArray<z.core.$ZodBranded<z.ZodString, "GrantId", "out">>, z.ZodTransform<(string & z.core.$brand<"GrantId">)[], (string & z.core.$brand<"GrantId">)[]>>>;
1086
+ adapterIds: z.ZodOptional<z.ZodPipe<z.ZodArray<z.core.$ZodBranded<z.ZodString, "AdapterId", "out">>, z.ZodTransform<(string & z.core.$brand<"AdapterId">)[], (string & z.core.$brand<"AdapterId">)[]>>>;
1087
+ }, z.core.$strict>>>, z.ZodTransform<{
1088
+ id: string & z.core.$brand<"PauseId">;
1089
+ scope: "agent" | "principal" | "grant" | "connection";
1090
+ agentId?: (string & z.core.$brand<"AgentId">) | undefined;
1091
+ grantIds?: (string & z.core.$brand<"GrantId">)[] | undefined;
1092
+ adapterIds?: (string & z.core.$brand<"AdapterId">)[] | undefined;
1093
+ }[], {
1094
+ id: string & z.core.$brand<"PauseId">;
1095
+ scope: "agent" | "principal" | "grant" | "connection";
1096
+ agentId?: (string & z.core.$brand<"AgentId">) | undefined;
1097
+ grantIds?: (string & z.core.$brand<"GrantId">)[] | undefined;
1098
+ adapterIds?: (string & z.core.$brand<"AdapterId">)[] | undefined;
1099
+ }[]>>;
281
1100
  }, z.core.$strict>;
282
1101
  export declare const ActionDecisionRecordCoreSchema: z.ZodObject<{
283
1102
  schemaVersion: z.ZodLiteral<1>;
@@ -305,15 +1124,268 @@ export declare const ActionDecisionRecordCoreSchema: z.ZodObject<{
305
1124
  action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
306
1125
  resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
307
1126
  interface: z.ZodEnum<{
308
- internal: "internal";
309
1127
  mcp: "mcp";
310
1128
  rest: "rest";
1129
+ internal: "internal";
311
1130
  }>;
312
1131
  valueCents: z.ZodOptional<z.ZodNumber>;
313
1132
  merchantId: z.ZodOptional<z.ZodString>;
314
1133
  merchantCategory: z.ZodOptional<z.ZodString>;
315
1134
  recurring: z.ZodOptional<z.ZodBoolean>;
316
1135
  taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
1136
+ intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
1137
+ planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
1138
+ obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
1139
+ type: z.ZodEnum<{
1140
+ log: "log";
1141
+ retain_receipt: "retain_receipt";
1142
+ notify: "notify";
1143
+ delay: "delay";
1144
+ cooling_period: "cooling_period";
1145
+ delete_after_use: "delete_after_use";
1146
+ redact: "redact";
1147
+ encrypt: "encrypt";
1148
+ tokenize: "tokenize";
1149
+ minimize: "minimize";
1150
+ verify_counterparty: "verify_counterparty";
1151
+ verify_resource: "verify_resource";
1152
+ verify_effect: "verify_effect";
1153
+ attest_runtime: "attest_runtime";
1154
+ require_consent: "require_consent";
1155
+ require_location: "require_location";
1156
+ require_device: "require_device";
1157
+ require_network: "require_network";
1158
+ require_contract: "require_contract";
1159
+ step_up: "step_up";
1160
+ second_approver: "second_approver";
1161
+ quorum: "quorum";
1162
+ authenticate: "authenticate";
1163
+ }>;
1164
+ params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
1165
+ }, z.core.$strict>>>;
1166
+ obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
1167
+ obligationType: z.ZodEnum<{
1168
+ log: "log";
1169
+ retain_receipt: "retain_receipt";
1170
+ notify: "notify";
1171
+ delay: "delay";
1172
+ cooling_period: "cooling_period";
1173
+ delete_after_use: "delete_after_use";
1174
+ redact: "redact";
1175
+ encrypt: "encrypt";
1176
+ tokenize: "tokenize";
1177
+ minimize: "minimize";
1178
+ verify_counterparty: "verify_counterparty";
1179
+ verify_resource: "verify_resource";
1180
+ verify_effect: "verify_effect";
1181
+ attest_runtime: "attest_runtime";
1182
+ require_consent: "require_consent";
1183
+ require_location: "require_location";
1184
+ require_device: "require_device";
1185
+ require_network: "require_network";
1186
+ require_contract: "require_contract";
1187
+ step_up: "step_up";
1188
+ second_approver: "second_approver";
1189
+ quorum: "quorum";
1190
+ authenticate: "authenticate";
1191
+ }>;
1192
+ state: z.ZodEnum<{
1193
+ satisfied: "satisfied";
1194
+ pending: "pending";
1195
+ failed: "failed";
1196
+ not_applicable: "not_applicable";
1197
+ }>;
1198
+ rule: z.ZodEnum<{
1199
+ OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
1200
+ PENDING_POST_ACTION: "PENDING_POST_ACTION";
1201
+ PENDING_TIME: "PENDING_TIME";
1202
+ PENDING_HUMAN: "PENDING_HUMAN";
1203
+ OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
1204
+ COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
1205
+ RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
1206
+ OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
1207
+ }>;
1208
+ detail: z.ZodOptional<z.ZodString>;
1209
+ dueEpochMs: z.ZodOptional<z.ZodNumber>;
1210
+ }, z.core.$strict>>>;
1211
+ prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
1212
+ id: z.ZodString;
1213
+ prerequisiteType: z.ZodString;
1214
+ state: z.ZodEnum<{
1215
+ satisfied: "satisfied";
1216
+ pending: "pending";
1217
+ failed: "failed";
1218
+ not_applicable: "not_applicable";
1219
+ }>;
1220
+ rule: z.ZodEnum<{
1221
+ BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
1222
+ PENDING_HUMAN: "PENDING_HUMAN";
1223
+ PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
1224
+ MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
1225
+ BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
1226
+ CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
1227
+ ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
1228
+ PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
1229
+ PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
1230
+ }>;
1231
+ detail: z.ZodOptional<z.ZodString>;
1232
+ }, z.core.$strict>>>;
1233
+ parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
1234
+ sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
1235
+ sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
1236
+ ruleId: z.ZodString;
1237
+ effect: z.ZodEnum<{
1238
+ deny: "deny";
1239
+ require_approval: "require_approval";
1240
+ }>;
1241
+ matchedActionRefs: z.ZodArray<z.ZodString>;
1242
+ }, z.core.$strict>>>;
1243
+ lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
1244
+ dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
1245
+ effectiveClassification: z.ZodEnum<{
1246
+ financial: "financial";
1247
+ internal: "internal";
1248
+ public: "public";
1249
+ pii: "pii";
1250
+ phi: "phi";
1251
+ credential: "credential";
1252
+ confidential: "confidential";
1253
+ }>;
1254
+ effect: z.ZodEnum<{
1255
+ allowed: "allowed";
1256
+ deny: "deny";
1257
+ require_approval: "require_approval";
1258
+ }>;
1259
+ expired: z.ZodBoolean;
1260
+ }, z.core.$strict>>>;
1261
+ runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
1262
+ T0_UNKNOWN: "T0_UNKNOWN";
1263
+ T1_IDENTIFIED: "T1_IDENTIFIED";
1264
+ T2_VERIFIED: "T2_VERIFIED";
1265
+ T3_ATTESTED: "T3_ATTESTED";
1266
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
1267
+ }>>;
1268
+ enforcementAssurance: z.ZodOptional<z.ZodEnum<{
1269
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
1270
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
1271
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
1272
+ G0_OBSERVED: "G0_OBSERVED";
1273
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
1274
+ }>>;
1275
+ approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
1276
+ schema: z.ZodLiteral<"guardian.multiparty.v1">;
1277
+ structureId: z.ZodString;
1278
+ members: z.ZodArray<z.ZodObject<{
1279
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
1280
+ roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
1281
+ }, z.core.$strict>>;
1282
+ requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
1283
+ kind: z.ZodLiteral<"single">;
1284
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
1285
+ }, z.core.$strict>, z.ZodObject<{
1286
+ kind: z.ZodLiteral<"nOfM">;
1287
+ n: z.ZodNumber;
1288
+ members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
1289
+ }, z.core.$strict>, z.ZodObject<{
1290
+ kind: z.ZodLiteral<"unanimous">;
1291
+ members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
1292
+ }, z.core.$strict>, z.ZodObject<{
1293
+ kind: z.ZodLiteral<"roleQuorum">;
1294
+ role: z.ZodString;
1295
+ n: z.ZodNumber;
1296
+ m: z.ZodNumber;
1297
+ }, z.core.$strict>], "kind">;
1298
+ specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
1299
+ veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
1300
+ separationOfDuties: z.ZodOptional<z.ZodObject<{
1301
+ mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
1302
+ }, z.core.$strict>>;
1303
+ temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
1304
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
1305
+ expiresAtEpochMs: z.ZodNumber;
1306
+ }, z.core.$strict>>>;
1307
+ delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
1308
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
1309
+ delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
1310
+ }, z.core.$strict>>>;
1311
+ emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
1312
+ coolingPeriod: z.ZodOptional<z.ZodObject<{
1313
+ seconds: z.ZodNumber;
1314
+ }, z.core.$strict>>;
1315
+ }, z.core.$strict>>>;
1316
+ appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
1317
+ applied: z.ZodArray<z.ZodString>;
1318
+ constraints: z.ZodObject<{
1319
+ allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
1320
+ deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
1321
+ allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
1322
+ allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
1323
+ mcp: "mcp";
1324
+ rest: "rest";
1325
+ internal: "internal";
1326
+ }>>>;
1327
+ maxValueCents: z.ZodOptional<z.ZodNumber>;
1328
+ maxUses: z.ZodOptional<z.ZodNumber>;
1329
+ minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
1330
+ T0_UNKNOWN: "T0_UNKNOWN";
1331
+ T1_IDENTIFIED: "T1_IDENTIFIED";
1332
+ T2_VERIFIED: "T2_VERIFIED";
1333
+ T3_ATTESTED: "T3_ATTESTED";
1334
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
1335
+ }>>;
1336
+ minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
1337
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
1338
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
1339
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
1340
+ G0_OBSERVED: "G0_OBSERVED";
1341
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
1342
+ }>>;
1343
+ requiredApprovals: z.ZodOptional<z.ZodNumber>;
1344
+ }, z.core.$strict>;
1345
+ }, z.core.$strict>>;
1346
+ transaction: z.ZodOptional<z.ZodObject<{
1347
+ schema: z.ZodLiteral<"guardian.transaction.v1">;
1348
+ stages: z.ZodArray<z.ZodEnum<{
1349
+ PROPOSE: "PROPOSE";
1350
+ PREPARE: "PREPARE";
1351
+ AUTHORIZE: "AUTHORIZE";
1352
+ LOCK: "LOCK";
1353
+ COMMIT: "COMMIT";
1354
+ VERIFY: "VERIFY";
1355
+ SETTLE: "SETTLE";
1356
+ }>>;
1357
+ deadlineMs: z.ZodOptional<z.ZodNumber>;
1358
+ }, z.core.$strict>>;
1359
+ compensates: z.ZodOptional<z.ZodObject<{
1360
+ transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
1361
+ }, z.core.$strict>>;
1362
+ physicalFacts: z.ZodOptional<z.ZodObject<{
1363
+ zone: z.ZodOptional<z.ZodString>;
1364
+ speed: z.ZodOptional<z.ZodNumber>;
1365
+ force: z.ZodOptional<z.ZodNumber>;
1366
+ payload: z.ZodOptional<z.ZodNumber>;
1367
+ atEpochMs: z.ZodOptional<z.ZodNumber>;
1368
+ humanDistance: z.ZodOptional<z.ZodNumber>;
1369
+ environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1370
+ supervised: z.ZodOptional<z.ZodBoolean>;
1371
+ }, z.core.$strict>>;
1372
+ safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
1373
+ envelopeDigest: z.ZodString;
1374
+ satisfied: z.ZodBoolean;
1375
+ violations: z.ZodArray<z.ZodEnum<{
1376
+ OUT_OF_ZONE: "OUT_OF_ZONE";
1377
+ FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
1378
+ OVER_SPEED: "OVER_SPEED";
1379
+ OVER_FORCE: "OVER_FORCE";
1380
+ OVER_PAYLOAD: "OVER_PAYLOAD";
1381
+ OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
1382
+ PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
1383
+ ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
1384
+ SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
1385
+ }>>;
1386
+ emergencyStopped: z.ZodBoolean;
1387
+ failSafeApplied: z.ZodBoolean;
1388
+ }, z.core.$strict>>;
317
1389
  uses: z.ZodNumber;
318
1390
  materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, CanonicalJsonValue>>, unknown>>;
319
1391
  initiatingContext: z.ZodEnum<{
@@ -347,9 +1419,9 @@ export declare const ActionDecisionRecordCoreSchema: z.ZodObject<{
347
1419
  action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
348
1420
  resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
349
1421
  interface: z.ZodEnum<{
350
- internal: "internal";
351
1422
  mcp: "mcp";
352
1423
  rest: "rest";
1424
+ internal: "internal";
353
1425
  }>;
354
1426
  requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
355
1427
  valueCents: z.ZodOptional<z.ZodNumber>;
@@ -360,6 +1432,8 @@ export declare const ActionDecisionRecordCoreSchema: z.ZodObject<{
360
1432
  merchantCategory: z.ZodOptional<z.ZodString>;
361
1433
  recurring: z.ZodOptional<z.ZodBoolean>;
362
1434
  taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
1435
+ intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
1436
+ planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
363
1437
  }, z.core.$strict>;
364
1438
  authorityEvaluationInput: z.ZodObject<{
365
1439
  nowEpochMs: z.ZodNumber;
@@ -381,10 +1455,13 @@ export declare const ActionDecisionRecordCoreSchema: z.ZodObject<{
381
1455
  revoked: "revoked";
382
1456
  }>;
383
1457
  allowedInterfaces: z.ZodPipe<z.ZodArray<z.ZodEnum<{
384
- internal: "internal";
385
1458
  mcp: "mcp";
386
1459
  rest: "rest";
387
- }>>, z.ZodTransform<("internal" | "mcp" | "rest")[], ("internal" | "mcp" | "rest")[]>>;
1460
+ internal: "internal";
1461
+ }>>, z.ZodTransform<("mcp" | "rest" | "internal")[], ("mcp" | "rest" | "internal")[]>>;
1462
+ boundRuntime: z.ZodOptional<z.ZodString>;
1463
+ boundModel: z.ZodOptional<z.ZodString>;
1464
+ parentAgentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AgentId", "out">>;
388
1465
  }, z.core.$strict>;
389
1466
  request: z.ZodObject<{
390
1467
  id: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
@@ -394,9 +1471,9 @@ export declare const ActionDecisionRecordCoreSchema: z.ZodObject<{
394
1471
  action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
395
1472
  resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
396
1473
  interface: z.ZodEnum<{
397
- internal: "internal";
398
1474
  mcp: "mcp";
399
1475
  rest: "rest";
1476
+ internal: "internal";
400
1477
  }>;
401
1478
  requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
402
1479
  valueCents: z.ZodOptional<z.ZodNumber>;
@@ -407,6 +1484,8 @@ export declare const ActionDecisionRecordCoreSchema: z.ZodObject<{
407
1484
  merchantCategory: z.ZodOptional<z.ZodString>;
408
1485
  recurring: z.ZodOptional<z.ZodBoolean>;
409
1486
  taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
1487
+ intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
1488
+ planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
410
1489
  }, z.core.$strict>;
411
1490
  policy: z.ZodObject<{
412
1491
  id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
@@ -499,6 +1578,30 @@ export declare const ActionDecisionRecordCoreSchema: z.ZodObject<{
499
1578
  taskId?: (string & z.core.$brand<"TaskId">) | undefined;
500
1579
  expiresAtEpochMs?: number | undefined;
501
1580
  }[]>>;
1581
+ pauses: z.ZodPipe<z.ZodDefault<z.ZodArray<z.ZodObject<{
1582
+ id: z.core.$ZodBranded<z.ZodString, "PauseId", "out">;
1583
+ scope: z.ZodEnum<{
1584
+ agent: "agent";
1585
+ principal: "principal";
1586
+ grant: "grant";
1587
+ connection: "connection";
1588
+ }>;
1589
+ agentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AgentId", "out">>;
1590
+ grantIds: z.ZodOptional<z.ZodPipe<z.ZodArray<z.core.$ZodBranded<z.ZodString, "GrantId", "out">>, z.ZodTransform<(string & z.core.$brand<"GrantId">)[], (string & z.core.$brand<"GrantId">)[]>>>;
1591
+ adapterIds: z.ZodOptional<z.ZodPipe<z.ZodArray<z.core.$ZodBranded<z.ZodString, "AdapterId", "out">>, z.ZodTransform<(string & z.core.$brand<"AdapterId">)[], (string & z.core.$brand<"AdapterId">)[]>>>;
1592
+ }, z.core.$strict>>>, z.ZodTransform<{
1593
+ id: string & z.core.$brand<"PauseId">;
1594
+ scope: "agent" | "principal" | "grant" | "connection";
1595
+ agentId?: (string & z.core.$brand<"AgentId">) | undefined;
1596
+ grantIds?: (string & z.core.$brand<"GrantId">)[] | undefined;
1597
+ adapterIds?: (string & z.core.$brand<"AdapterId">)[] | undefined;
1598
+ }[], {
1599
+ id: string & z.core.$brand<"PauseId">;
1600
+ scope: "agent" | "principal" | "grant" | "connection";
1601
+ agentId?: (string & z.core.$brand<"AgentId">) | undefined;
1602
+ grantIds?: (string & z.core.$brand<"GrantId">)[] | undefined;
1603
+ adapterIds?: (string & z.core.$brand<"AdapterId">)[] | undefined;
1604
+ }[]>>;
502
1605
  }, z.core.$strict>;
503
1606
  authorityDecision: z.ZodDiscriminatedUnion<[z.ZodObject<{
504
1607
  decision: z.ZodLiteral<"ALLOW">;
@@ -552,6 +1655,7 @@ export declare const ActionDecisionRecordCoreSchema: z.ZodObject<{
552
1655
  AGENT_MISMATCH: "AGENT_MISMATCH";
553
1656
  AGENT_NOT_ACTIVE: "AGENT_NOT_ACTIVE";
554
1657
  INTERFACE_NOT_ALLOWED: "INTERFACE_NOT_ALLOWED";
1658
+ AUTHORITY_PAUSED: "AUTHORITY_PAUSED";
555
1659
  AUTHORITY_CHAIN_MISSING: "AUTHORITY_CHAIN_MISSING";
556
1660
  DUPLICATE_GRANT_ID: "DUPLICATE_GRANT_ID";
557
1661
  GRANT_TENANT_MISMATCH: "GRANT_TENANT_MISMATCH";
@@ -625,15 +1729,268 @@ export declare const ActionDecisionRecordSchema: z.ZodObject<{
625
1729
  action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
626
1730
  resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
627
1731
  interface: z.ZodEnum<{
628
- internal: "internal";
629
1732
  mcp: "mcp";
630
1733
  rest: "rest";
1734
+ internal: "internal";
631
1735
  }>;
632
1736
  valueCents: z.ZodOptional<z.ZodNumber>;
633
1737
  merchantId: z.ZodOptional<z.ZodString>;
634
1738
  merchantCategory: z.ZodOptional<z.ZodString>;
635
1739
  recurring: z.ZodOptional<z.ZodBoolean>;
636
1740
  taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
1741
+ intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
1742
+ planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
1743
+ obligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
1744
+ type: z.ZodEnum<{
1745
+ log: "log";
1746
+ retain_receipt: "retain_receipt";
1747
+ notify: "notify";
1748
+ delay: "delay";
1749
+ cooling_period: "cooling_period";
1750
+ delete_after_use: "delete_after_use";
1751
+ redact: "redact";
1752
+ encrypt: "encrypt";
1753
+ tokenize: "tokenize";
1754
+ minimize: "minimize";
1755
+ verify_counterparty: "verify_counterparty";
1756
+ verify_resource: "verify_resource";
1757
+ verify_effect: "verify_effect";
1758
+ attest_runtime: "attest_runtime";
1759
+ require_consent: "require_consent";
1760
+ require_location: "require_location";
1761
+ require_device: "require_device";
1762
+ require_network: "require_network";
1763
+ require_contract: "require_contract";
1764
+ step_up: "step_up";
1765
+ second_approver: "second_approver";
1766
+ quorum: "quorum";
1767
+ authenticate: "authenticate";
1768
+ }>;
1769
+ params: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean, z.ZodArray<z.ZodString>]>>>;
1770
+ }, z.core.$strict>>>;
1771
+ obligationStates: z.ZodOptional<z.ZodArray<z.ZodObject<{
1772
+ obligationType: z.ZodEnum<{
1773
+ log: "log";
1774
+ retain_receipt: "retain_receipt";
1775
+ notify: "notify";
1776
+ delay: "delay";
1777
+ cooling_period: "cooling_period";
1778
+ delete_after_use: "delete_after_use";
1779
+ redact: "redact";
1780
+ encrypt: "encrypt";
1781
+ tokenize: "tokenize";
1782
+ minimize: "minimize";
1783
+ verify_counterparty: "verify_counterparty";
1784
+ verify_resource: "verify_resource";
1785
+ verify_effect: "verify_effect";
1786
+ attest_runtime: "attest_runtime";
1787
+ require_consent: "require_consent";
1788
+ require_location: "require_location";
1789
+ require_device: "require_device";
1790
+ require_network: "require_network";
1791
+ require_contract: "require_contract";
1792
+ step_up: "step_up";
1793
+ second_approver: "second_approver";
1794
+ quorum: "quorum";
1795
+ authenticate: "authenticate";
1796
+ }>;
1797
+ state: z.ZodEnum<{
1798
+ satisfied: "satisfied";
1799
+ pending: "pending";
1800
+ failed: "failed";
1801
+ not_applicable: "not_applicable";
1802
+ }>;
1803
+ rule: z.ZodEnum<{
1804
+ OBLIGATION_SATISFIED: "OBLIGATION_SATISFIED";
1805
+ PENDING_POST_ACTION: "PENDING_POST_ACTION";
1806
+ PENDING_TIME: "PENDING_TIME";
1807
+ PENDING_HUMAN: "PENDING_HUMAN";
1808
+ OBLIGATION_PARAMS_INVALID: "OBLIGATION_PARAMS_INVALID";
1809
+ COUNTERPARTY_UNVERIFIED: "COUNTERPARTY_UNVERIFIED";
1810
+ RESOURCE_NOT_COVERED: "RESOURCE_NOT_COVERED";
1811
+ OBLIGATION_VERIFIER_UNAVAILABLE: "OBLIGATION_VERIFIER_UNAVAILABLE";
1812
+ }>;
1813
+ detail: z.ZodOptional<z.ZodString>;
1814
+ dueEpochMs: z.ZodOptional<z.ZodNumber>;
1815
+ }, z.core.$strict>>>;
1816
+ prerequisiteResults: z.ZodOptional<z.ZodArray<z.ZodObject<{
1817
+ id: z.ZodString;
1818
+ prerequisiteType: z.ZodString;
1819
+ state: z.ZodEnum<{
1820
+ satisfied: "satisfied";
1821
+ pending: "pending";
1822
+ failed: "failed";
1823
+ not_applicable: "not_applicable";
1824
+ }>;
1825
+ rule: z.ZodEnum<{
1826
+ BUDGET_EXCEEDED: "BUDGET_EXCEEDED";
1827
+ PENDING_HUMAN: "PENDING_HUMAN";
1828
+ PREREQUISITE_SATISFIED: "PREREQUISITE_SATISFIED";
1829
+ MERCHANT_UNVERIFIED: "MERCHANT_UNVERIFIED";
1830
+ BUDGET_NOT_DECLARED: "BUDGET_NOT_DECLARED";
1831
+ CAPABILITY_NOT_COVERED: "CAPABILITY_NOT_COVERED";
1832
+ ADDRESS_NOT_AUTHORIZED: "ADDRESS_NOT_AUTHORIZED";
1833
+ PREREQUISITE_PARAMS_INVALID: "PREREQUISITE_PARAMS_INVALID";
1834
+ PREREQUISITE_VERIFIER_UNAVAILABLE: "PREREQUISITE_VERIFIER_UNAVAILABLE";
1835
+ }>;
1836
+ detail: z.ZodOptional<z.ZodString>;
1837
+ }, z.core.$strict>>>;
1838
+ parentActionId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "RequestId", "out">>;
1839
+ sourceEffectId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AttemptId", "out">>;
1840
+ sequenceMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
1841
+ ruleId: z.ZodString;
1842
+ effect: z.ZodEnum<{
1843
+ deny: "deny";
1844
+ require_approval: "require_approval";
1845
+ }>;
1846
+ matchedActionRefs: z.ZodArray<z.ZodString>;
1847
+ }, z.core.$strict>>>;
1848
+ lineageMatches: z.ZodOptional<z.ZodArray<z.ZodObject<{
1849
+ dataObjectId: z.core.$ZodBranded<z.ZodString, "DataObjectId", "out">;
1850
+ effectiveClassification: z.ZodEnum<{
1851
+ financial: "financial";
1852
+ internal: "internal";
1853
+ public: "public";
1854
+ pii: "pii";
1855
+ phi: "phi";
1856
+ credential: "credential";
1857
+ confidential: "confidential";
1858
+ }>;
1859
+ effect: z.ZodEnum<{
1860
+ allowed: "allowed";
1861
+ deny: "deny";
1862
+ require_approval: "require_approval";
1863
+ }>;
1864
+ expired: z.ZodBoolean;
1865
+ }, z.core.$strict>>>;
1866
+ runtimeTrustLevel: z.ZodOptional<z.ZodEnum<{
1867
+ T0_UNKNOWN: "T0_UNKNOWN";
1868
+ T1_IDENTIFIED: "T1_IDENTIFIED";
1869
+ T2_VERIFIED: "T2_VERIFIED";
1870
+ T3_ATTESTED: "T3_ATTESTED";
1871
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
1872
+ }>>;
1873
+ enforcementAssurance: z.ZodOptional<z.ZodEnum<{
1874
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
1875
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
1876
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
1877
+ G0_OBSERVED: "G0_OBSERVED";
1878
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
1879
+ }>>;
1880
+ approvalStructures: z.ZodOptional<z.ZodArray<z.ZodObject<{
1881
+ schema: z.ZodLiteral<"guardian.multiparty.v1">;
1882
+ structureId: z.ZodString;
1883
+ members: z.ZodArray<z.ZodObject<{
1884
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
1885
+ roles: z.ZodOptional<z.ZodArray<z.ZodString>>;
1886
+ }, z.core.$strict>>;
1887
+ requirement: z.ZodDiscriminatedUnion<[z.ZodObject<{
1888
+ kind: z.ZodLiteral<"single">;
1889
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
1890
+ }, z.core.$strict>, z.ZodObject<{
1891
+ kind: z.ZodLiteral<"nOfM">;
1892
+ n: z.ZodNumber;
1893
+ members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
1894
+ }, z.core.$strict>, z.ZodObject<{
1895
+ kind: z.ZodLiteral<"unanimous">;
1896
+ members: z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>;
1897
+ }, z.core.$strict>, z.ZodObject<{
1898
+ kind: z.ZodLiteral<"roleQuorum">;
1899
+ role: z.ZodString;
1900
+ n: z.ZodNumber;
1901
+ m: z.ZodNumber;
1902
+ }, z.core.$strict>], "kind">;
1903
+ specificRequired: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
1904
+ veto: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
1905
+ separationOfDuties: z.ZodOptional<z.ZodObject<{
1906
+ mutuallyExclusive: z.ZodArray<z.ZodArray<z.ZodString>>;
1907
+ }, z.core.$strict>>;
1908
+ temporaryApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
1909
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
1910
+ expiresAtEpochMs: z.ZodNumber;
1911
+ }, z.core.$strict>>>;
1912
+ delegatedApprovers: z.ZodOptional<z.ZodArray<z.ZodObject<{
1913
+ memberId: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
1914
+ delegatedBy: z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">;
1915
+ }, z.core.$strict>>>;
1916
+ emergencyApprovers: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "PrincipalId", "out">>>;
1917
+ coolingPeriod: z.ZodOptional<z.ZodObject<{
1918
+ seconds: z.ZodNumber;
1919
+ }, z.core.$strict>>;
1920
+ }, z.core.$strict>>>;
1921
+ appliedAuthoritySources: z.ZodOptional<z.ZodObject<{
1922
+ applied: z.ZodArray<z.ZodString>;
1923
+ constraints: z.ZodObject<{
1924
+ allowedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
1925
+ deniedActions: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ActionType", "out">>>;
1926
+ allowedResources: z.ZodOptional<z.ZodArray<z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">>>;
1927
+ allowedInterfaces: z.ZodOptional<z.ZodArray<z.ZodEnum<{
1928
+ mcp: "mcp";
1929
+ rest: "rest";
1930
+ internal: "internal";
1931
+ }>>>;
1932
+ maxValueCents: z.ZodOptional<z.ZodNumber>;
1933
+ maxUses: z.ZodOptional<z.ZodNumber>;
1934
+ minRuntimeLevel: z.ZodOptional<z.ZodEnum<{
1935
+ T0_UNKNOWN: "T0_UNKNOWN";
1936
+ T1_IDENTIFIED: "T1_IDENTIFIED";
1937
+ T2_VERIFIED: "T2_VERIFIED";
1938
+ T3_ATTESTED: "T3_ATTESTED";
1939
+ T4_HARDWARE_BACKED: "T4_HARDWARE_BACKED";
1940
+ }>>;
1941
+ minAssuranceLevel: z.ZodOptional<z.ZodEnum<{
1942
+ G2_CREDENTIAL_MEDIATED: "G2_CREDENTIAL_MEDIATED";
1943
+ G1_POLICY_MEDIATED: "G1_POLICY_MEDIATED";
1944
+ G3_RUNTIME_CONTAINED: "G3_RUNTIME_CONTAINED";
1945
+ G0_OBSERVED: "G0_OBSERVED";
1946
+ G4_COUNTERPARTY_INTERLOCKED: "G4_COUNTERPARTY_INTERLOCKED";
1947
+ }>>;
1948
+ requiredApprovals: z.ZodOptional<z.ZodNumber>;
1949
+ }, z.core.$strict>;
1950
+ }, z.core.$strict>>;
1951
+ transaction: z.ZodOptional<z.ZodObject<{
1952
+ schema: z.ZodLiteral<"guardian.transaction.v1">;
1953
+ stages: z.ZodArray<z.ZodEnum<{
1954
+ PROPOSE: "PROPOSE";
1955
+ PREPARE: "PREPARE";
1956
+ AUTHORIZE: "AUTHORIZE";
1957
+ LOCK: "LOCK";
1958
+ COMMIT: "COMMIT";
1959
+ VERIFY: "VERIFY";
1960
+ SETTLE: "SETTLE";
1961
+ }>>;
1962
+ deadlineMs: z.ZodOptional<z.ZodNumber>;
1963
+ }, z.core.$strict>>;
1964
+ compensates: z.ZodOptional<z.ZodObject<{
1965
+ transactionId: z.core.$ZodBranded<z.ZodString, "TransactionId", "out">;
1966
+ }, z.core.$strict>>;
1967
+ physicalFacts: z.ZodOptional<z.ZodObject<{
1968
+ zone: z.ZodOptional<z.ZodString>;
1969
+ speed: z.ZodOptional<z.ZodNumber>;
1970
+ force: z.ZodOptional<z.ZodNumber>;
1971
+ payload: z.ZodOptional<z.ZodNumber>;
1972
+ atEpochMs: z.ZodOptional<z.ZodNumber>;
1973
+ humanDistance: z.ZodOptional<z.ZodNumber>;
1974
+ environment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
1975
+ supervised: z.ZodOptional<z.ZodBoolean>;
1976
+ }, z.core.$strict>>;
1977
+ safetyEnvelopeOutcome: z.ZodOptional<z.ZodObject<{
1978
+ envelopeDigest: z.ZodString;
1979
+ satisfied: z.ZodBoolean;
1980
+ violations: z.ZodArray<z.ZodEnum<{
1981
+ OUT_OF_ZONE: "OUT_OF_ZONE";
1982
+ FORBIDDEN_ZONE: "FORBIDDEN_ZONE";
1983
+ OVER_SPEED: "OVER_SPEED";
1984
+ OVER_FORCE: "OVER_FORCE";
1985
+ OVER_PAYLOAD: "OVER_PAYLOAD";
1986
+ OUTSIDE_TIME_WINDOW: "OUTSIDE_TIME_WINDOW";
1987
+ PROXIMITY_VIOLATION: "PROXIMITY_VIOLATION";
1988
+ ENVIRONMENT_VIOLATION: "ENVIRONMENT_VIOLATION";
1989
+ SUPERVISION_REQUIRED: "SUPERVISION_REQUIRED";
1990
+ }>>;
1991
+ emergencyStopped: z.ZodBoolean;
1992
+ failSafeApplied: z.ZodBoolean;
1993
+ }, z.core.$strict>>;
637
1994
  uses: z.ZodNumber;
638
1995
  materialParameters: z.ZodPipe<z.ZodUnknown, z.ZodTransform<Readonly<Record<string, CanonicalJsonValue>>, unknown>>;
639
1996
  initiatingContext: z.ZodEnum<{
@@ -667,9 +2024,9 @@ export declare const ActionDecisionRecordSchema: z.ZodObject<{
667
2024
  action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
668
2025
  resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
669
2026
  interface: z.ZodEnum<{
670
- internal: "internal";
671
2027
  mcp: "mcp";
672
2028
  rest: "rest";
2029
+ internal: "internal";
673
2030
  }>;
674
2031
  requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
675
2032
  valueCents: z.ZodOptional<z.ZodNumber>;
@@ -680,6 +2037,8 @@ export declare const ActionDecisionRecordSchema: z.ZodObject<{
680
2037
  merchantCategory: z.ZodOptional<z.ZodString>;
681
2038
  recurring: z.ZodOptional<z.ZodBoolean>;
682
2039
  taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
2040
+ intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
2041
+ planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
683
2042
  }, z.core.$strict>;
684
2043
  authorityEvaluationInput: z.ZodObject<{
685
2044
  nowEpochMs: z.ZodNumber;
@@ -701,10 +2060,13 @@ export declare const ActionDecisionRecordSchema: z.ZodObject<{
701
2060
  revoked: "revoked";
702
2061
  }>;
703
2062
  allowedInterfaces: z.ZodPipe<z.ZodArray<z.ZodEnum<{
704
- internal: "internal";
705
2063
  mcp: "mcp";
706
2064
  rest: "rest";
707
- }>>, z.ZodTransform<("internal" | "mcp" | "rest")[], ("internal" | "mcp" | "rest")[]>>;
2065
+ internal: "internal";
2066
+ }>>, z.ZodTransform<("mcp" | "rest" | "internal")[], ("mcp" | "rest" | "internal")[]>>;
2067
+ boundRuntime: z.ZodOptional<z.ZodString>;
2068
+ boundModel: z.ZodOptional<z.ZodString>;
2069
+ parentAgentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AgentId", "out">>;
708
2070
  }, z.core.$strict>;
709
2071
  request: z.ZodObject<{
710
2072
  id: z.core.$ZodBranded<z.ZodString, "RequestId", "out">;
@@ -714,9 +2076,9 @@ export declare const ActionDecisionRecordSchema: z.ZodObject<{
714
2076
  action: z.core.$ZodBranded<z.ZodString, "ActionType", "out">;
715
2077
  resource: z.core.$ZodBranded<z.ZodString, "ResourceRef", "out">;
716
2078
  interface: z.ZodEnum<{
717
- internal: "internal";
718
2079
  mcp: "mcp";
719
2080
  rest: "rest";
2081
+ internal: "internal";
720
2082
  }>;
721
2083
  requestedAdapterId: z.core.$ZodBranded<z.ZodString, "AdapterId", "out">;
722
2084
  valueCents: z.ZodOptional<z.ZodNumber>;
@@ -727,6 +2089,8 @@ export declare const ActionDecisionRecordSchema: z.ZodObject<{
727
2089
  merchantCategory: z.ZodOptional<z.ZodString>;
728
2090
  recurring: z.ZodOptional<z.ZodBoolean>;
729
2091
  taskId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "TaskId", "out">>;
2092
+ intentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "IntentId", "out">>;
2093
+ planId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "PlanId", "out">>;
730
2094
  }, z.core.$strict>;
731
2095
  policy: z.ZodObject<{
732
2096
  id: z.core.$ZodBranded<z.ZodString, "PolicyId", "out">;
@@ -819,6 +2183,30 @@ export declare const ActionDecisionRecordSchema: z.ZodObject<{
819
2183
  taskId?: (string & z.core.$brand<"TaskId">) | undefined;
820
2184
  expiresAtEpochMs?: number | undefined;
821
2185
  }[]>>;
2186
+ pauses: z.ZodPipe<z.ZodDefault<z.ZodArray<z.ZodObject<{
2187
+ id: z.core.$ZodBranded<z.ZodString, "PauseId", "out">;
2188
+ scope: z.ZodEnum<{
2189
+ agent: "agent";
2190
+ principal: "principal";
2191
+ grant: "grant";
2192
+ connection: "connection";
2193
+ }>;
2194
+ agentId: z.ZodOptional<z.core.$ZodBranded<z.ZodString, "AgentId", "out">>;
2195
+ grantIds: z.ZodOptional<z.ZodPipe<z.ZodArray<z.core.$ZodBranded<z.ZodString, "GrantId", "out">>, z.ZodTransform<(string & z.core.$brand<"GrantId">)[], (string & z.core.$brand<"GrantId">)[]>>>;
2196
+ adapterIds: z.ZodOptional<z.ZodPipe<z.ZodArray<z.core.$ZodBranded<z.ZodString, "AdapterId", "out">>, z.ZodTransform<(string & z.core.$brand<"AdapterId">)[], (string & z.core.$brand<"AdapterId">)[]>>>;
2197
+ }, z.core.$strict>>>, z.ZodTransform<{
2198
+ id: string & z.core.$brand<"PauseId">;
2199
+ scope: "agent" | "principal" | "grant" | "connection";
2200
+ agentId?: (string & z.core.$brand<"AgentId">) | undefined;
2201
+ grantIds?: (string & z.core.$brand<"GrantId">)[] | undefined;
2202
+ adapterIds?: (string & z.core.$brand<"AdapterId">)[] | undefined;
2203
+ }[], {
2204
+ id: string & z.core.$brand<"PauseId">;
2205
+ scope: "agent" | "principal" | "grant" | "connection";
2206
+ agentId?: (string & z.core.$brand<"AgentId">) | undefined;
2207
+ grantIds?: (string & z.core.$brand<"GrantId">)[] | undefined;
2208
+ adapterIds?: (string & z.core.$brand<"AdapterId">)[] | undefined;
2209
+ }[]>>;
822
2210
  }, z.core.$strict>;
823
2211
  authorityDecision: z.ZodDiscriminatedUnion<[z.ZodObject<{
824
2212
  decision: z.ZodLiteral<"ALLOW">;
@@ -872,6 +2260,7 @@ export declare const ActionDecisionRecordSchema: z.ZodObject<{
872
2260
  AGENT_MISMATCH: "AGENT_MISMATCH";
873
2261
  AGENT_NOT_ACTIVE: "AGENT_NOT_ACTIVE";
874
2262
  INTERFACE_NOT_ALLOWED: "INTERFACE_NOT_ALLOWED";
2263
+ AUTHORITY_PAUSED: "AUTHORITY_PAUSED";
875
2264
  AUTHORITY_CHAIN_MISSING: "AUTHORITY_CHAIN_MISSING";
876
2265
  DUPLICATE_GRANT_ID: "DUPLICATE_GRANT_ID";
877
2266
  GRANT_TENANT_MISMATCH: "GRANT_TENANT_MISMATCH";
@@ -938,7 +2327,7 @@ export declare function toAuthorityRequest(action: CanonicalAction): {
938
2327
  agentId: string & z.core.$brand<"AgentId">;
939
2328
  action: string & z.core.$brand<"ActionType">;
940
2329
  resource: string & z.core.$brand<"ResourceRef">;
941
- interface: "internal" | "mcp" | "rest";
2330
+ interface: "mcp" | "rest" | "internal";
942
2331
  requestedAdapterId: string & z.core.$brand<"AdapterId">;
943
2332
  uses: number;
944
2333
  valueCents?: number | undefined;
@@ -948,6 +2337,8 @@ export declare function toAuthorityRequest(action: CanonicalAction): {
948
2337
  merchantCategory?: string | undefined;
949
2338
  recurring?: boolean | undefined;
950
2339
  taskId?: (string & z.core.$brand<"TaskId">) | undefined;
2340
+ intentId?: (string & z.core.$brand<"IntentId">) | undefined;
2341
+ planId?: (string & z.core.$brand<"PlanId">) | undefined;
951
2342
  };
952
2343
  export type CreateCanonicalActionResult = {
953
2344
  ok: true;