@osstack/protocol 0.10.0 → 0.13.0

package/dist/autonomy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomy.d.ts","sourceRoot":"","sources":["../src/autonomy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB;;;GAGG;AACH,eAAO,MAAM,0BAA0B,EACrC,kEAA2E,CAAC;AAE9E,eAAO,MAAM,iBAAiB,2CAAyC,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE,eAAO,MAAM,iBAAiB,uCAAqC,CAAC;AACpE,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAUlE,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;EAA6C,CAAC;AAC7E,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;gCAAkD,CAAC;AAmEzF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGA,CAAC;AAClC,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAMP,CAAC;AAElC,eAAO,MAAM,gBAAgB,ycA6B3B,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAEhE,eAAO,MAAM,qBAAqB,uCAAqC,CAAC;AACxE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AA0E1E,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGE,CAAC;AACrC,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAGL,CAAC;AAErC,eAAO,MAAM,2BAA2B,kCAAgC,CAAC;AACzE,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAiCtF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGC,CAAC;AAC5C,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,6BAA6B,CACrC,CAAC;AAmBF,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKxB,CAAC;AACZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAE5E,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAK1B,CAAC;AAEjB,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;gCAE9D;AAED,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,OAAO;;;;;;;;;;;;gCAE/D;AAED,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAEhE;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CACtD,YAAY,EAAE,OAAO,EACrB,aAAa,EAAE,OAAO,GACrB,sBAAsB,CA6BxB"}

package/dist/autonomy.js

@@ -0,0 +1,270 @@
+import { z } from "zod";
+import { Actor, ActorLenient } from "./approval.js";
+const SHA256 = z.string().regex(/^[a-f0-9]{64}$/);
+const BASE64URL_ED25519_SIGNATURE = z.string().regex(/^[A-Za-z0-9_-]{86}$/);
+/**
+ * SHA-256 of an empty byte string. Preflight RISK-R3 approval binds this
+ * sentinel because no authoritative staged diff exists before Builder runs.
+ */
+export const AUTONOMY_EMPTY_DIFF_SHA256 = "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";
+export const AutonomyRiskLevel = z.enum(["R0", "R1", "R2", "R3", "R4"]);
+export const AutonomyRiskPhase = z.enum(["preflight", "post_diff"]);
+const autonomyRiskSignalShape = {
+    rule_id: z.string().min(1),
+    level: AutonomyRiskLevel,
+    message: z.string().min(1),
+    path: z.string().min(1).optional(),
+    command: z.string().min(1).optional(),
+};
+export const AutonomyRiskSignal = z.object(autonomyRiskSignalShape).strict();
+export const AutonomyRiskSignalLenient = z.object(autonomyRiskSignalShape).passthrough();
+const RISK_ORDER = {
+    R0: 0,
+    R1: 1,
+    R2: 2,
+    R3: 3,
+    R4: 4,
+};
+function riskSignalKey(signal) {
+    return [
+        signal.rule_id,
+        signal.path ?? "",
+        signal.command ?? "",
+        signal.level,
+        signal.message,
+    ].join("\u0000");
+}
+function checkRiskDecision(value, context) {
+    const keys = value.signals.map(riskSignalKey);
+    const sortedKeys = [...keys].sort();
+    if (keys.some((key, index) => key !== sortedKeys[index])) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["signals"],
+            message: "risk signals must be in canonical order",
+        });
+    }
+    if (new Set(keys).size !== keys.length) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["signals"],
+            message: "risk signals must not contain duplicates",
+        });
+    }
+    const maximum = value.signals.reduce((current, signal) => RISK_ORDER[signal.level] > RISK_ORDER[current] ? signal.level : current, "R0");
+    if (value.level !== maximum) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["level"],
+            message: `risk level must equal maximum signal level ${maximum}`,
+        });
+    }
+}
+const autonomyRiskDecisionShape = {
+    phase: AutonomyRiskPhase,
+    level: AutonomyRiskLevel,
+    signals: z.array(AutonomyRiskSignal),
+    policy_sha256: SHA256,
+    input_sha256: SHA256,
+    decided_at: z.string().datetime(),
+};
+export const AutonomyRiskDecision = z
+    .object(autonomyRiskDecisionShape)
+    .strict()
+    .superRefine(checkRiskDecision);
+export const AutonomyRiskDecisionLenient = z
+    .object({
+    ...autonomyRiskDecisionShape,
+    signals: z.array(AutonomyRiskSignalLenient),
+})
+    .passthrough()
+    .superRefine(checkRiskDecision);
+export const AutonomyRunState = z.enum([
+    "queued",
+    "classifying",
+    "awaiting_approval",
+    "blocked",
+    "preparing",
+    "building",
+    "verifying",
+    "repairing",
+    "reviewing",
+    "post_classifying",
+    "candidate_proof",
+    "committing",
+    "pushing",
+    "opening_pr",
+    "waiting_ci",
+    "merging",
+    "deploying_staging",
+    "verifying_staging",
+    "deploying_production",
+    "health_checking",
+    "rolling_back",
+    "deploy_frozen",
+    "final_proof",
+    "blocked_delivery",
+    "delivery_evidence_failed",
+    "escalated",
+    "cancelled",
+    "completed",
+]);
+export const AutonomyApprovalPhase = z.enum(["preflight", "post_diff"]);
+const canonicalActionScope = z
+    .array(z.string().min(1))
+    .min(1)
+    .superRefine((scope, context) => {
+    if (new Set(scope).size !== scope.length) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "action_scope must not contain duplicates",
+        });
+    }
+    const sorted = [...scope].sort();
+    if (scope.some((action, index) => action !== sorted[index])) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            message: "action_scope must be in canonical order",
+        });
+    }
+});
+const scopedApprovalRequestShape = {
+    approval_id: z.string().min(1),
+    autonomy_run_id: z.string().min(1),
+    phase: AutonomyApprovalPhase,
+    contract_sha256: SHA256,
+    diff_sha256: SHA256,
+    action_scope: canonicalActionScope,
+    risk: z.literal("R3"),
+    nonce: z.string().min(1),
+    requested_at: z.string().datetime(),
+    expires_at: z.string().datetime(),
+    request_sha256: SHA256,
+};
+function checkApprovalRequest(request, context) {
+    if (request.phase === "preflight" &&
+        request.diff_sha256 !== AUTONOMY_EMPTY_DIFF_SHA256) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["diff_sha256"],
+            message: "preflight approval must bind the empty-diff sentinel",
+        });
+    }
+    if (request.phase === "preflight" &&
+        request.action_scope.some((action) => action !== "build" && action !== "verify")) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["action_scope"],
+            message: "preflight approval may authorize only build and verify",
+        });
+    }
+    if (Date.parse(request.requested_at) >= Date.parse(request.expires_at)) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["expires_at"],
+            message: "approval request must expire after it is requested",
+        });
+    }
+}
+export const ScopedApprovalRequest = z
+    .object(scopedApprovalRequestShape)
+    .strict()
+    .superRefine(checkApprovalRequest);
+export const ScopedApprovalRequestLenient = z
+    .object(scopedApprovalRequestShape)
+    .passthrough()
+    .superRefine(checkApprovalRequest);
+export const ScopedApprovalDecisionValue = z.enum(["approve", "reject"]);
+const scopedApprovalDecisionPayloadShape = {
+    approval_id: z.string().min(1),
+    request_sha256: SHA256,
+    autonomy_run_id: z.string().min(1),
+    phase: AutonomyApprovalPhase,
+    contract_sha256: SHA256,
+    diff_sha256: SHA256,
+    action_scope: canonicalActionScope,
+    decision: ScopedApprovalDecisionValue,
+    nonce: z.string().min(1),
+    issued_at: z.string().datetime(),
+    expires_at: z.string().datetime(),
+    decided_by: Actor.refine((actor) => actor.type === "human", "guarded autonomy approval requires a human actor"),
+};
+function checkDecisionValidityWindow(payload, context) {
+    if (Date.parse(payload.issued_at) >= Date.parse(payload.expires_at)) {
+        context.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["expires_at"],
+            message: "signed approval decision must expire after it is issued",
+        });
+    }
+}
+export const ScopedApprovalDecisionPayload = z
+    .object(scopedApprovalDecisionPayloadShape)
+    .strict()
+    .superRefine(checkDecisionValidityWindow);
+const scopedApprovalDecisionPayloadLenient = z
+    .object({
+    ...scopedApprovalDecisionPayloadShape,
+    decided_by: ActorLenient.refine((actor) => actor.type === "human", "guarded autonomy approval requires a human actor"),
+})
+    .passthrough()
+    .superRefine(checkDecisionValidityWindow);
+const signedDecisionSignatureShape = {
+    algorithm: z.literal("Ed25519"),
+    key_id: z.string().min(1),
+    value_base64url: BASE64URL_ED25519_SIGNATURE,
+};
+export const ScopedApprovalDecision = z
+    .object({
+    payload: ScopedApprovalDecisionPayload,
+    signature: z.object(signedDecisionSignatureShape).strict(),
+})
+    .strict();
+export const ScopedApprovalDecisionLenient = z
+    .object({
+    payload: scopedApprovalDecisionPayloadLenient,
+    signature: z.object(signedDecisionSignatureShape).passthrough(),
+})
+    .passthrough();
+export function parseInboundAutonomyRiskDecision(input) {
+    return AutonomyRiskDecisionLenient.parse(input);
+}
+export function parseInboundScopedApprovalRequest(input) {
+    return ScopedApprovalRequestLenient.parse(input);
+}
+export function parseInboundScopedApprovalDecision(input) {
+    return ScopedApprovalDecisionLenient.parse(input);
+}
+/**
+ * Validates structural and request-binding invariants. Cryptographic signature,
+ * nonce replay, trusted-key, and wall-clock expiry checks belong to the
+ * autonomy verifier, which owns those runtime dependencies.
+ */
+export function validateScopedApprovalDecisionForRequest(requestInput, decisionInput) {
+    const request = ScopedApprovalRequest.parse(requestInput);
+    const decision = ScopedApprovalDecision.parse(decisionInput);
+    const payload = decision.payload;
+    const comparisons = [
+        ["approval_id", request.approval_id, payload.approval_id],
+        ["request_sha256", request.request_sha256, payload.request_sha256],
+        ["autonomy_run_id", request.autonomy_run_id, payload.autonomy_run_id],
+        ["phase", request.phase, payload.phase],
+        ["contract_sha256", request.contract_sha256, payload.contract_sha256],
+        ["diff_sha256", request.diff_sha256, payload.diff_sha256],
+        ["nonce", request.nonce, payload.nonce],
+        ["expires_at", request.expires_at, payload.expires_at],
+    ];
+    for (const [field, requestValue, decisionValue] of comparisons) {
+        if (requestValue !== decisionValue) {
+            throw new Error(`scoped approval ${field} does not match request`);
+        }
+    }
+    if (JSON.stringify(request.action_scope) !== JSON.stringify(payload.action_scope)) {
+        throw new Error("scoped approval action_scope does not match request");
+    }
+    if (Date.parse(payload.issued_at) < Date.parse(request.requested_at)) {
+        throw new Error("scoped approval issued_at predates its request");
+    }
+    return decision;
+}
+//# sourceMappingURL=autonomy.js.map

package/dist/autonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomy.js","sourceRoot":"","sources":["../src/autonomy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAE5E;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GACrC,kEAA2E,CAAC;AAE9E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAGxE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAGpE,MAAM,uBAAuB,GAAG;IAC9B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,KAAK,EAAE,iBAAiB;IACxB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7B,CAAC;AAEX,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,MAAM,EAAE,CAAC;AAG7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC,uBAAuB,CAAC,CAAC,WAAW,EAAE,CAAC;AAEzF,MAAM,UAAU,GAAgD;IAC9D,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,CAAC;IACL,EAAE,EAAE,CAAC;CACN,CAAC;AAEF,SAAS,aAAa,CAAC,MAAiD;IACtE,OAAO;QACL,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,IAAI,IAAI,EAAE;QACjB,MAAM,CAAC,OAAO,IAAI,EAAE;QACpB,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,OAAO;KACf,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,iBAAiB,CACxB,KAGC,EACD,OAAwB;IAExB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACpC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACzD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QACvC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,SAAS,CAAC;YACjB,OAAO,EAAE,0CAA0C;SACpD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAClC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAClB,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EACzE,IAAI,CACL,CAAC;IACF,IAAI,KAAK,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;QAC5B,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,8CAA8C,OAAO,EAAE;SACjE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,yBAAyB,GAAG;IAChC,KAAK,EAAE,iBAAiB;IACxB,KAAK,EAAE,iBAAiB;IACxB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IACpC,aAAa,EAAE,MAAM;IACrB,YAAY,EAAE,MAAM;IACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACzB,CAAC;AAEX,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC,yBAAyB,CAAC;KACjC,MAAM,EAAE;KACR,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAGlC,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC;KACzC,MAAM,CAAC;IACN,GAAG,yBAAyB;IAC5B,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAC5C,CAAC;KACD,WAAW,EAAE;KACb,WAAW,CAAC,iBAAiB,CAAC,CAAC;AAElC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,IAAI,CAAC;IACrC,QAAQ;IACR,aAAa;IACb,mBAAmB;IACnB,SAAS;IACT,WAAW;IACX,UAAU;IACV,WAAW;IACX,WAAW;IACX,WAAW;IACX,kBAAkB;IAClB,iBAAiB;IACjB,YAAY;IACZ,SAAS;IACT,YAAY;IACZ,YAAY;IACZ,SAAS;IACT,mBAAmB;IACnB,mBAAmB;IACnB,sBAAsB;IACtB,iBAAiB;IACjB,cAAc;IACd,eAAe;IACf,aAAa;IACb,kBAAkB;IAClB,0BAA0B;IAC1B,WAAW;IACX,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAGxE,MAAM,oBAAoB,GAAG,CAAC;KAC3B,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;KACxB,GAAG,CAAC,CAAC,CAAC;KACN,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IAC9B,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACzC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,0CAA0C;SACpD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,OAAO,EAAE,yCAAyC;SACnD,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,MAAM,0BAA0B,GAAG;IACjC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,KAAK,EAAE,qBAAqB;IAC5B,eAAe,EAAE,MAAM;IACvB,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,oBAAoB;IAClC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,MAAM;CACd,CAAC;AAEX,SAAS,oBAAoB,CAC3B,OAMC,EACD,OAAwB;IAExB,IACE,OAAO,CAAC,KAAK,KAAK,WAAW;QAC7B,OAAO,CAAC,WAAW,KAAK,0BAA0B,EAClD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,sDAAsD;SAChE,CAAC,CAAC;IACL,CAAC;IACD,IACE,OAAO,CAAC,KAAK,KAAK,WAAW;QAC7B,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,KAAK,QAAQ,CAAC,EAChF,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,cAAc,CAAC;YACtB,OAAO,EAAE,wDAAwD;SAClE,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACvE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,oDAAoD;SAC9D,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC,0BAA0B,CAAC;KAClC,MAAM,EAAE;KACR,WAAW,CAAC,oBAAoB,CAAC,CAAC;AAGrC,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC,0BAA0B,CAAC;KAClC,WAAW,EAAE;KACb,WAAW,CAAC,oBAAoB,CAAC,CAAC;AAErC,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGzE,MAAM,kCAAkC,GAAG;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,cAAc,EAAE,MAAM;IACtB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,KAAK,EAAE,qBAAqB;IAC5B,eAAe,EAAE,MAAM;IACvB,WAAW,EAAE,MAAM;IACnB,YAAY,EAAE,oBAAoB;IAClC,QAAQ,EAAE,2BAA2B;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,KAAK,CAAC,MAAM,CACtB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EACjC,kDAAkD,CACnD;CACO,CAAC;AAEX,SAAS,2BAA2B,CAClC,OAAkD,EAClD,OAAwB;IAExB,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACpE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,yDAAyD;SACnE,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC,kCAAkC,CAAC;KAC1C,MAAM,EAAE;KACR,WAAW,CAAC,2BAA2B,CAAC,CAAC;AAK5C,MAAM,oCAAoC,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,GAAG,kCAAkC;IACrC,UAAU,EAAE,YAAY,CAAC,MAAM,CAC7B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,EACjC,kDAAkD,CACnD;CACF,CAAC;KACD,WAAW,EAAE;KACb,WAAW,CAAC,2BAA2B,CAAC,CAAC;AAE5C,MAAM,4BAA4B,GAAG;IACnC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC/B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,eAAe,EAAE,2BAA2B;CACpC,CAAC;AAEX,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,OAAO,EAAE,6BAA6B;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,MAAM,EAAE;CAC3D,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC;KAC3C,MAAM,CAAC;IACN,OAAO,EAAE,oCAAoC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,WAAW,EAAE;CAChE,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB,MAAM,UAAU,gCAAgC,CAAC,KAAc;IAC7D,OAAO,2BAA2B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,KAAc;IAC9D,OAAO,4BAA4B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,KAAc;IAC/D,OAAO,6BAA6B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wCAAwC,CACtD,YAAqB,EACrB,aAAsB;IAEtB,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IACjC,MAAM,WAAW,GAEb;QACF,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC;QACzD,CAAC,gBAAgB,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC;QAClE,CAAC,iBAAiB,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,eAAe,CAAC;QACrE,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACvC,CAAC,iBAAiB,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,eAAe,CAAC;QACrE,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC;QACzD,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC;QACvC,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC;KACvD,CAAC;IAEF,KAAK,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,aAAa,CAAC,IAAI,WAAW,EAAE,CAAC;QAC/D,IAAI,YAAY,KAAK,aAAa,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,mBAAmB,KAAK,yBAAyB,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAClF,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACrE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/autonomy.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=autonomy.test.d.ts.map

package/dist/autonomy.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomy.test.d.ts","sourceRoot":"","sources":["../src/autonomy.test.ts"],"names":[],"mappings":""}

package/dist/autonomy.test.js

@@ -0,0 +1,201 @@
+import { describe, expect, it } from "vitest";
+import { AUTONOMY_EMPTY_DIFF_SHA256, AutonomyRiskDecision, AutonomyRiskLevel, AutonomyRunState, parseInboundScopedApprovalDecision, ScopedApprovalDecision, ScopedApprovalRequest, validateScopedApprovalDecisionForRequest, } from "./autonomy.js";
+const SHA_A = "a".repeat(64);
+const SHA_B = "b".repeat(64);
+const SHA_C = "c".repeat(64);
+const SIGNATURE = "A".repeat(86);
+function approvalRequest() {
+    return {
+        approval_id: "approval-1",
+        autonomy_run_id: "run-1",
+        phase: "post_diff",
+        contract_sha256: SHA_A,
+        diff_sha256: SHA_B,
+        action_scope: ["commit", "open_pr", "push"],
+        risk: "R3",
+        nonce: "nonce-1",
+        requested_at: "2026-07-28T20:00:00.000Z",
+        expires_at: "2026-07-28T20:15:00.000Z",
+        request_sha256: SHA_C,
+    };
+}
+function approvalDecision() {
+    return {
+        payload: {
+            approval_id: "approval-1",
+            request_sha256: SHA_C,
+            autonomy_run_id: "run-1",
+            phase: "post_diff",
+            contract_sha256: SHA_A,
+            diff_sha256: SHA_B,
+            action_scope: ["commit", "open_pr", "push"],
+            decision: "approve",
+            nonce: "nonce-1",
+            issued_at: "2026-07-28T20:01:00.000Z",
+            expires_at: "2026-07-28T20:15:00.000Z",
+            decided_by: { type: "human", id: "owner" },
+        },
+        signature: {
+            algorithm: "Ed25519",
+            key_id: "owner-primary",
+            value_base64url: SIGNATURE,
+        },
+    };
+}
+describe("guarded autonomy protocol contracts", () => {
+    it("parses every RISK-R0 through RISK-R4 level and rejects unknown levels", () => {
+        for (const level of ["R0", "R1", "R2", "R3", "R4"]) {
+            expect(AutonomyRiskLevel.parse(level)).toBe(level);
+        }
+        expect(AutonomyRiskLevel.safeParse("R5").success).toBe(false);
+    });
+    it("accepts the complete legal autonomy state set", () => {
+        const states = [
+            "queued",
+            "classifying",
+            "awaiting_approval",
+            "blocked",
+            "preparing",
+            "building",
+            "verifying",
+            "repairing",
+            "reviewing",
+            "post_classifying",
+            "candidate_proof",
+            "committing",
+            "pushing",
+            "opening_pr",
+            "waiting_ci",
+            "merging",
+            "deploying_staging",
+            "verifying_staging",
+            "deploying_production",
+            "health_checking",
+            "rolling_back",
+            "deploy_frozen",
+            "final_proof",
+            "blocked_delivery",
+            "delivery_evidence_failed",
+            "escalated",
+            "cancelled",
+            "completed",
+        ];
+        for (const state of states) {
+            expect(AutonomyRunState.parse(state)).toBe(state);
+        }
+        expect(AutonomyRunState.safeParse("approved").success).toBe(false);
+    });
+    it("requires canonical deterministic risk signals and matching maximum level", () => {
+        const decision = {
+            phase: "post_diff",
+            level: "R3",
+            signals: [
+                {
+                    rule_id: "protected-auth",
+                    level: "R3",
+                    message: "authentication surface changed",
+                    path: "src/auth/session.ts",
+                },
+            ],
+            policy_sha256: SHA_A,
+            input_sha256: SHA_B,
+            decided_at: "2026-07-28T20:00:00.000Z",
+        };
+        expect(AutonomyRiskDecision.parse(decision)).toEqual(decision);
+        expect(AutonomyRiskDecision.safeParse({ ...decision, level: "R2" }).success).toBe(false);
+        expect(AutonomyRiskDecision.safeParse({
+            ...decision,
+            signals: [
+                { ...decision.signals[0], rule_id: "z-rule" },
+                { ...decision.signals[0], rule_id: "a-rule" },
+            ],
+        }).success).toBe(false);
+    });
+    it("supports preflight approval only against the empty-diff sentinel", () => {
+        const request = {
+            ...approvalRequest(),
+            phase: "preflight",
+            diff_sha256: AUTONOMY_EMPTY_DIFF_SHA256,
+            action_scope: ["build", "verify"],
+        };
+        expect(ScopedApprovalRequest.parse(request)).toEqual(request);
+        expect(ScopedApprovalRequest.safeParse({ ...request, diff_sha256: SHA_B }).success).toBe(false);
+    });
+    it("accepts a signed post-diff RISK-R3 decision bound to request material", () => {
+        const request = ScopedApprovalRequest.parse(approvalRequest());
+        const decision = ScopedApprovalDecision.parse(approvalDecision());
+        expect(validateScopedApprovalDecisionForRequest(request, decision)).toEqual(decision);
+    });
+    it("rejects an agent actor even when the signed envelope is otherwise shaped correctly", () => {
+        const decision = approvalDecision();
+        expect(ScopedApprovalDecision.safeParse({
+            ...decision,
+            payload: {
+                ...decision.payload,
+                decided_by: { type: "agent", id: "builder" },
+            },
+        }).success).toBe(false);
+    });
+    it("rejects decisions whose contract or staged diff digest does not match the request", () => {
+        const request = ScopedApprovalRequest.parse(approvalRequest());
+        expect(() => validateScopedApprovalDecisionForRequest(request, {
+            ...approvalDecision(),
+            payload: { ...approvalDecision().payload, contract_sha256: "d".repeat(64) },
+        })).toThrow(/contract_sha256/);
+        expect(() => validateScopedApprovalDecisionForRequest(request, {
+            ...approvalDecision(),
+            payload: { ...approvalDecision().payload, diff_sha256: "e".repeat(64) },
+        })).toThrow(/diff_sha256/);
+    });
+    it("rejects a signed decision issued before its bound request", () => {
+        const request = ScopedApprovalRequest.parse(approvalRequest());
+        expect(() => validateScopedApprovalDecisionForRequest(request, {
+            ...approvalDecision(),
+            payload: {
+                ...approvalDecision().payload,
+                issued_at: "2026-07-28T19:59:59.000Z",
+            },
+        })).toThrow(/issued_at/);
+    });
+    it("has no RISK-R4 approval request contract", () => {
+        expect(ScopedApprovalRequest.safeParse({ ...approvalRequest(), risk: "R4" }).success).toBe(false);
+    });
+    it("keeps producers deep-strict while inbound consumers tolerate additive fields", () => {
+        const decision = {
+            ...approvalDecision(),
+            future_top_level: true,
+            payload: {
+                ...approvalDecision().payload,
+                future_payload_field: "vNext",
+                decided_by: {
+                    ...approvalDecision().payload.decided_by,
+                    display_name: "Owner",
+                },
+            },
+            signature: {
+                ...approvalDecision().signature,
+                future_signature_field: "vNext",
+            },
+        };
+        expect(ScopedApprovalDecision.safeParse(decision).success).toBe(false);
+        expect(() => parseInboundScopedApprovalDecision(decision)).not.toThrow();
+    });
+    it("rejects non-canonical or replay-ambiguous scope and invalid validity windows", () => {
+        expect(ScopedApprovalRequest.safeParse({
+            ...approvalRequest(),
+            action_scope: ["push", "commit"],
+        }).success).toBe(false);
+        expect(ScopedApprovalRequest.safeParse({
+            ...approvalRequest(),
+            action_scope: ["commit", "commit"],
+        }).success).toBe(false);
+        expect(ScopedApprovalDecision.safeParse({
+            ...approvalDecision(),
+            payload: {
+                ...approvalDecision().payload,
+                issued_at: "2026-07-28T20:16:00.000Z",
+            },
+        }).success).toBe(false);
+    });
+});
+//# sourceMappingURL=autonomy.test.js.map

package/dist/autonomy.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomy.test.js","sourceRoot":"","sources":["../src/autonomy.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,0BAA0B,EAC1B,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,kCAAkC,EAClC,sBAAsB,EACtB,qBAAqB,EACrB,wCAAwC,GACzC,MAAM,eAAe,CAAC;AAEvB,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC7B,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC7B,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEjC,SAAS,eAAe;IACtB,OAAO;QACL,WAAW,EAAE,YAAY;QACzB,eAAe,EAAE,OAAO;QACxB,KAAK,EAAE,WAAW;QAClB,eAAe,EAAE,KAAK;QACtB,WAAW,EAAE,KAAK;QAClB,YAAY,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;QAC3C,IAAI,EAAE,IAAI;QACV,KAAK,EAAE,SAAS;QAChB,YAAY,EAAE,0BAA0B;QACxC,UAAU,EAAE,0BAA0B;QACtC,cAAc,EAAE,KAAK;KACb,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO;QACL,OAAO,EAAE;YACP,WAAW,EAAE,YAAY;YACzB,cAAc,EAAE,KAAK;YACrB,eAAe,EAAE,OAAO;YACxB,KAAK,EAAE,WAAW;YAClB,eAAe,EAAE,KAAK;YACtB,WAAW,EAAE,KAAK;YAClB,YAAY,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;YAC3C,QAAQ,EAAE,SAAS;YACnB,KAAK,EAAE,SAAS;YAChB,SAAS,EAAE,0BAA0B;YACrC,UAAU,EAAE,0BAA0B;YACtC,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE;SAC3C;QACD,SAAS,EAAE;YACT,SAAS,EAAE,SAAS;YACpB,MAAM,EAAE,eAAe;YACvB,eAAe,EAAE,SAAS;SAC3B;KACO,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,KAAK,MAAM,KAAK,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,CAAC,iBAAiB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,MAAM,GAAG;YACb,QAAQ;YACR,aAAa;YACb,mBAAmB;YACnB,SAAS;YACT,WAAW;YACX,UAAU;YACV,WAAW;YACX,WAAW;YACX,WAAW;YACX,kBAAkB;YAClB,iBAAiB;YACjB,YAAY;YACZ,SAAS;YACT,YAAY;YACZ,YAAY;YACZ,SAAS;YACT,mBAAmB;YACnB,mBAAmB;YACnB,sBAAsB;YACtB,iBAAiB;YACjB,cAAc;YACd,eAAe;YACf,aAAa;YACb,kBAAkB;YAClB,0BAA0B;YAC1B,WAAW;YACX,WAAW;YACX,WAAW;SACZ,CAAC;QAEF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,QAAQ,GAAG;YACf,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,IAAI;YACX,OAAO,EAAE;gBACP;oBACE,OAAO,EAAE,gBAAgB;oBACzB,KAAK,EAAE,IAAI;oBACX,OAAO,EAAE,gCAAgC;oBACzC,IAAI,EAAE,qBAAqB;iBAC5B;aACF;YACD,aAAa,EAAE,KAAK;YACpB,YAAY,EAAE,KAAK;YACnB,UAAU,EAAE,0BAA0B;SACvC,CAAC;QAEF,MAAM,CAAC,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,CAAC,oBAAoB,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzF,MAAM,CACJ,oBAAoB,CAAC,SAAS,CAAC;YAC7B,GAAG,QAAQ;YACX,OAAO,EAAE;gBACP,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;gBAC7C,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE;aAC9C;SACF,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,OAAO,GAAG;YACd,GAAG,eAAe,EAAE;YACpB,KAAK,EAAE,WAAW;YAClB,WAAW,EAAE,0BAA0B;YACvC,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;SAClC,CAAC;QAEF,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9D,MAAM,CACJ,qBAAqB,CAAC,SAAS,CAAC,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,CAC5E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAElE,MAAM,CAAC,wCAAwC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;QACpC,MAAM,CACJ,sBAAsB,CAAC,SAAS,CAAC;YAC/B,GAAG,QAAQ;YACX,OAAO,EAAE;gBACP,GAAG,QAAQ,CAAC,OAAO;gBACnB,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE;aAC7C;SACF,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mFAAmF,EAAE,GAAG,EAAE;QAC3F,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QAE/D,MAAM,CAAC,GAAG,EAAE,CACV,wCAAwC,CAAC,OAAO,EAAE;YAChD,GAAG,gBAAgB,EAAE;YACrB,OAAO,EAAE,EAAE,GAAG,gBAAgB,EAAE,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;SAC5E,CAAC,CACH,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE7B,MAAM,CAAC,GAAG,EAAE,CACV,wCAAwC,CAAC,OAAO,EAAE;YAChD,GAAG,gBAAgB,EAAE;YACrB,OAAO,EAAE,EAAE,GAAG,gBAAgB,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;SACxE,CAAC,CACH,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,CAAC;QAC/D,MAAM,CAAC,GAAG,EAAE,CACV,wCAAwC,CAAC,OAAO,EAAE;YAChD,GAAG,gBAAgB,EAAE;YACrB,OAAO,EAAE;gBACP,GAAG,gBAAgB,EAAE,CAAC,OAAO;gBAC7B,SAAS,EAAE,0BAA0B;aACtC;SACF,CAAC,CACH,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CACJ,qBAAqB,CAAC,SAAS,CAAC,EAAE,GAAG,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAC9E,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,QAAQ,GAAG;YACf,GAAG,gBAAgB,EAAE;YACrB,gBAAgB,EAAE,IAAI;YACtB,OAAO,EAAE;gBACP,GAAG,gBAAgB,EAAE,CAAC,OAAO;gBAC7B,oBAAoB,EAAE,OAAO;gBAC7B,UAAU,EAAE;oBACV,GAAG,gBAAgB,EAAE,CAAC,OAAO,CAAC,UAAU;oBACxC,YAAY,EAAE,OAAO;iBACtB;aACF;YACD,SAAS,EAAE;gBACT,GAAG,gBAAgB,EAAE,CAAC,SAAS;gBAC/B,sBAAsB,EAAE,OAAO;aAChC;SACF,CAAC;QAEF,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,kCAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CACJ,qBAAqB,CAAC,SAAS,CAAC;YAC9B,GAAG,eAAe,EAAE;YACpB,YAAY,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC;SACjC,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CACJ,qBAAqB,CAAC,SAAS,CAAC;YAC9B,GAAG,eAAe,EAAE;YACpB,YAAY,EAAE,CAAC,QAAQ,EAAE,QAAQ,CAAC;SACnC,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CACJ,sBAAsB,CAAC,SAAS,CAAC;YAC/B,GAAG,gBAAgB,EAAE;YACrB,OAAO,EAAE;gBACP,GAAG,gBAAgB,EAAE,CAAC,OAAO;gBAC7B,SAAS,EAAE,0BAA0B;aACtC;SACF,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/envelope.d.ts

@@ -41,8 +41,8 @@ export declare const AgentCommand: z.ZodObject<{
     policy_profile: z.ZodOptional<z.ZodString>;
     idempotency_key: z.ZodOptional<z.ZodString>;
 }, "strict", z.ZodTypeAny, {
-    protocol_version: string;
     command: string;
+    protocol_version: string;
     actor: {
         type: "human" | "agent";
         id: string;
@@ -55,8 +55,8 @@ export declare const AgentCommand: z.ZodObject<{
     policy_profile?: string | undefined;
     idempotency_key?: string | undefined;
 }, {
-    protocol_version: string;
     command: string;
+    protocol_version: string;
     actor: {
         type: "human" | "agent";
         id: string;
@@ -263,7 +263,7 @@ export declare const AgentCommandResult: z.ZodEffects<z.ZodObject<{
         retryable: boolean;
     }>>>;
 }, "strict", z.ZodTypeAny, {
-    status: "ok" | "needs_approval" | "blocked" | "error";
+    status: "blocked" | "ok" | "needs_approval" | "error";
     protocol_version: string;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
@@ -289,7 +289,7 @@ export declare const AgentCommandResult: z.ZodEffects<z.ZodObject<{
         command: string;
     }[] | undefined;
 }, {
-    status: "ok" | "needs_approval" | "blocked" | "error";
+    status: "blocked" | "ok" | "needs_approval" | "error";
     protocol_version: string;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
@@ -315,7 +315,7 @@ export declare const AgentCommandResult: z.ZodEffects<z.ZodObject<{
         command: string;
     }[] | undefined;
 }>, {
-    status: "ok" | "needs_approval" | "blocked" | "error";
+    status: "blocked" | "ok" | "needs_approval" | "error";
     protocol_version: string;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
@@ -341,7 +341,7 @@ export declare const AgentCommandResult: z.ZodEffects<z.ZodObject<{
         command: string;
     }[] | undefined;
 }, {
-    status: "ok" | "needs_approval" | "blocked" | "error";
+    status: "blocked" | "ok" | "needs_approval" | "error";
     protocol_version: string;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
@@ -826,7 +826,7 @@ export declare const AgentCommandResultObject: z.ZodObject<{
         retryable: boolean;
     }>>>;
 }, "strict", z.ZodTypeAny, {
-    status: "ok" | "needs_approval" | "blocked" | "error";
+    status: "blocked" | "ok" | "needs_approval" | "error";
     protocol_version: string;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
@@ -852,7 +852,7 @@ export declare const AgentCommandResultObject: z.ZodObject<{
         command: string;
     }[] | undefined;
 }, {
-    status: "ok" | "needs_approval" | "blocked" | "error";
+    status: "blocked" | "ok" | "needs_approval" | "error";
     protocol_version: string;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";

package/dist/event.d.ts

@@ -16,20 +16,20 @@ export declare const EventEnvelope: z.ZodObject<{
 }, "strict", z.ZodTypeAny, {
     type: string;
     run_id: string;
+    payload: Record<string, unknown>;
     event_id: string;
     seq: number;
     session_id: string;
     created_at: number;
     terminal: boolean;
-    payload: Record<string, unknown>;
 }, {
     type: string;
     run_id: string;
+    payload: Record<string, unknown>;
     event_id: string;
     seq: number;
     session_id: string;
     created_at: number;
-    payload: Record<string, unknown>;
     terminal?: boolean | undefined;
 }>;
 export type EventEnvelope = z.infer<typeof EventEnvelope>;

package/dist/generate.d.ts

@@ -8,7 +8,7 @@ interface SchemaEntry {
     comment?: string;
     schema: ZodTypeAny;
 }
-/** The 9 public protocol contracts emitted as JSON Schema. Order is stable. */
+/** Public protocol contracts emitted as JSON Schema. Order is stable. */
 export declare const SCHEMA_MANIFEST: readonly SchemaEntry[];
 /** filename -> file content for every committed schema. */
 export declare function generateAll(): Record<string, string>;

package/dist/generate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../src/generate.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAatC,UAAU,WAAW;IACnB,+EAA+E;IAC/E,GAAG,EAAE,MAAM,CAAC;IACZ,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,+EAA+E;AAC/E,eAAO,MAAM,eAAe,EAAE,SAAS,WAAW,EAgBjD,CAAC;AAkBF,2DAA2D;AAC3D,wBAAgB,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMpD"}
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../src/generate.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,KAAK,CAAC;AAoBtC,UAAU,WAAW;IACnB,+EAA+E;IAC/E,GAAG,EAAE,MAAM,CAAC;IACZ,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;CACpB;AAED,yEAAyE;AACzE,eAAO,MAAM,eAAe,EAAE,SAAS,WAAW,EA+CjD,CAAC;AAkBF,2DAA2D;AAC3D,wBAAgB,WAAW,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAMpD"}