@osstack/protocol 0.10.0 → 0.13.0

package/dist/generate.js

@@ -12,12 +12,13 @@
 import { zodToJsonSchema } from "zod-to-json-schema";
 import { AgentCommand, AgentCommandResultObject, } from "./envelope.js";
 import { ApprovalDecision, ApprovalRequest } from "./approval.js";
+import { AutonomyRiskDecision, AutonomyRiskLevel, AutonomyRunState, ScopedApprovalDecision, ScopedApprovalRequest, } from "./autonomy.js";
 import { EvidenceRef } from "./evidence.js";
 import { EventEnvelope } from "./event.js";
 import { PolicyDecision } from "./policy.js";
 import { RunSummary } from "./run.js";
 import { Task } from "./task.js";
-/** The 9 public protocol contracts emitted as JSON Schema. Order is stable. */
+/** Public protocol contracts emitted as JSON Schema. Order is stable. */
 export const SCHEMA_MANIFEST = [
     { key: "task", title: "Osstack Protocol Task", schema: Task },
     { key: "run-summary", title: "Osstack Protocol Run Summary", schema: RunSummary },
@@ -25,6 +26,34 @@ export const SCHEMA_MANIFEST = [
     { key: "evidence-ref", title: "Osstack Protocol Evidence Ref", schema: EvidenceRef },
     { key: "approval-request", title: "Osstack Protocol Approval Request", schema: ApprovalRequest },
     { key: "approval-decision", title: "Osstack Protocol Approval Decision", schema: ApprovalDecision },
+    {
+        key: "autonomy-risk-level",
+        title: "Osstack Guarded Autonomy Risk Level",
+        schema: AutonomyRiskLevel,
+    },
+    {
+        key: "autonomy-risk-decision",
+        title: "Osstack Guarded Autonomy Risk Decision",
+        comment: "Canonical signal ordering and maximum-level consistency are additionally enforced by @osstack/protocol Zod refinements.",
+        schema: AutonomyRiskDecision,
+    },
+    {
+        key: "autonomy-run-state",
+        title: "Osstack Guarded Autonomy Run State",
+        schema: AutonomyRunState,
+    },
+    {
+        key: "scoped-approval-request",
+        title: "Osstack Guarded Autonomy Scoped Approval Request",
+        comment: "Preflight empty-diff binding, build/verify-only scope, canonical action ordering, and validity windows are additionally enforced by @osstack/protocol Zod refinements.",
+        schema: ScopedApprovalRequest,
+    },
+    {
+        key: "scoped-approval-decision",
+        title: "Osstack Guarded Autonomy Signed Scoped Approval Decision",
+        comment: "Human-actor and validity-window constraints are additionally enforced by @osstack/protocol Zod refinements; signature verification and replay defense belong to the runtime autonomy verifier.",
+        schema: ScopedApprovalDecision,
+    },
     { key: "policy-decision", title: "Osstack Protocol Policy Decision", schema: PolicyDecision },
     { key: "agent-command", title: "Osstack Protocol Agent Command", schema: AgentCommand },
     {

package/dist/generate.js.map

@@ -1 +1 @@
-{"version":3,"file":"generate.js","sourceRoot":"","sources":["../src/generate.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,sEAAsE;AACtE,gDAAgD;AAChD,EAAE;AACF,mEAAmE;AACnE,iFAAiF;AACjF,wEAAwE;AACxE,iFAAiF;AACjF,oEAAoE;AAGpE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,YAAY,EACZ,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAYjC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAA2B;IACrD,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE;IAC7D,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,8BAA8B,EAAE,MAAM,EAAE,UAAU,EAAE;IACjF,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,iCAAiC,EAAE,MAAM,EAAE,aAAa,EAAE;IAC1F,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,WAAW,EAAE;IACpF,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,eAAe,EAAE;IAChG,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,oCAAoC,EAAE,MAAM,EAAE,gBAAgB,EAAE;IACnG,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,kCAAkC,EAAE,MAAM,EAAE,cAAc,EAAE;IAC7F,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,gCAAgC,EAAE,MAAM,EAAE,YAAY,EAAE;IACvF;QACE,GAAG,EAAE,sBAAsB;QAC3B,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EACL,0MAA0M;QAC5M,MAAM,EAAE,wBAAwB;KACjC;CACF,CAAC;AAEF,oFAAoF;AACpF,SAAS,YAAY,CAAC,KAAkB;IACtC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE;QACzC,MAAM,EAAE,aAAa;QACrB,YAAY,EAAE,MAAM;KACrB,CAA4B,CAAC;IAC9B,uEAAuE;IACvE,MAAM,QAAQ,GAA4B;QACxC,OAAO,EAAE,yCAAyC;QAClD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,IAAI;KACR,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,cAAc,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../src/generate.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,sEAAsE;AACtE,gDAAgD;AAChD,EAAE;AACF,mEAAmE;AACnE,iFAAiF;AACjF,wEAAwE;AACxE,iFAAiF;AACjF,oEAAoE;AAGpE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EACL,YAAY,EACZ,wBAAwB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAYjC,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAA2B;IACrD,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,uBAAuB,EAAE,MAAM,EAAE,IAAI,EAAE;IAC7D,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,8BAA8B,EAAE,MAAM,EAAE,UAAU,EAAE;IACjF,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,iCAAiC,EAAE,MAAM,EAAE,aAAa,EAAE;IAC1F,EAAE,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,+BAA+B,EAAE,MAAM,EAAE,WAAW,EAAE;IACpF,EAAE,GAAG,EAAE,kBAAkB,EAAE,KAAK,EAAE,mCAAmC,EAAE,MAAM,EAAE,eAAe,EAAE;IAChG,EAAE,GAAG,EAAE,mBAAmB,EAAE,KAAK,EAAE,oCAAoC,EAAE,MAAM,EAAE,gBAAgB,EAAE;IACnG;QACE,GAAG,EAAE,qBAAqB;QAC1B,KAAK,EAAE,qCAAqC;QAC5C,MAAM,EAAE,iBAAiB;KAC1B;IACD;QACE,GAAG,EAAE,wBAAwB;QAC7B,KAAK,EAAE,wCAAwC;QAC/C,OAAO,EACL,yHAAyH;QAC3H,MAAM,EAAE,oBAAoB;KAC7B;IACD;QACE,GAAG,EAAE,oBAAoB;QACzB,KAAK,EAAE,oCAAoC;QAC3C,MAAM,EAAE,gBAAgB;KACzB;IACD;QACE,GAAG,EAAE,yBAAyB;QAC9B,KAAK,EAAE,kDAAkD;QACzD,OAAO,EACL,wKAAwK;QAC1K,MAAM,EAAE,qBAAqB;KAC9B;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,KAAK,EAAE,0DAA0D;QACjE,OAAO,EACL,gMAAgM;QAClM,MAAM,EAAE,sBAAsB;KAC/B;IACD,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,kCAAkC,EAAE,MAAM,EAAE,cAAc,EAAE;IAC7F,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,gCAAgC,EAAE,MAAM,EAAE,YAAY,EAAE;IACvF;QACE,GAAG,EAAE,sBAAsB;QAC3B,KAAK,EAAE,uCAAuC;QAC9C,OAAO,EACL,0MAA0M;QAC5M,MAAM,EAAE,wBAAwB;KACjC;CACF,CAAC;AAEF,oFAAoF;AACpF,SAAS,YAAY,CAAC,KAAkB;IACtC,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,EAAE;QACzC,MAAM,EAAE,aAAa;QACrB,YAAY,EAAE,MAAM;KACrB,CAA4B,CAAC;IAC9B,uEAAuE;IACvE,MAAM,QAAQ,GAA4B;QACxC,OAAO,EAAE,yCAAyC;QAClD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,IAAI;KACR,CAAC;IACF,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,WAAW;IACzB,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,KAAK,IAAI,eAAe,EAAE,CAAC;QACpC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,cAAc,CAAC,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/index.d.ts

@@ -4,6 +4,7 @@ export { RunOutcome, RunSummary } from "./run.js";
 export { EventEnvelope } from "./event.js";
 export { EvidenceKind, EvidenceRef } from "./evidence.js";
 export { Actor, ApprovalDecision, ApprovalRequest, Risk, } from "./approval.js";
+export { AUTONOMY_EMPTY_DIFF_SHA256, AutonomyApprovalPhase, AutonomyRiskDecision, AutonomyRiskLevel, AutonomyRiskPhase, AutonomyRiskSignal, AutonomyRunState, parseInboundAutonomyRiskDecision, parseInboundScopedApprovalDecision, parseInboundScopedApprovalRequest, ScopedApprovalDecision, ScopedApprovalDecisionPayload, ScopedApprovalDecisionValue, ScopedApprovalRequest, validateScopedApprovalDecisionForRequest, } from "./autonomy.js";
 export { CostTier, PolicyCandidate, PolicyDecision, PolicyHandoff, PolicyOutcome, PolicyScore, } from "./policy.js";
 export { AgentCommand, AgentCommandResult, AgentCommandResultObject, CommandError, CommandName, CommandScope, CommandStatus, ErrorCode, NextAction, parseInboundAgentCommand, parseInboundAgentCommandResult, } from "./envelope.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EACL,KAAK,EACL,gBAAgB,EAChB,eAAe,EACf,IAAI,GACL,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,aAAa,EACb,aAAa,EACb,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,aAAa,EACb,SAAS,EACT,UAAU,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EACL,KAAK,EACL,gBAAgB,EAChB,eAAe,EACf,IAAI,GACL,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gCAAgC,EAChC,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,6BAA6B,EAC7B,2BAA2B,EAC3B,qBAAqB,EACrB,wCAAwC,GACzC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,aAAa,EACb,aAAa,EACb,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,aAAa,EACb,SAAS,EACT,UAAU,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,eAAe,CAAC"}

package/dist/index.js

@@ -11,6 +11,7 @@ export { RunOutcome, RunSummary } from "./run.js";
 export { EventEnvelope } from "./event.js";
 export { EvidenceKind, EvidenceRef } from "./evidence.js";
 export { Actor, ApprovalDecision, ApprovalRequest, Risk, } from "./approval.js";
+export { AUTONOMY_EMPTY_DIFF_SHA256, AutonomyApprovalPhase, AutonomyRiskDecision, AutonomyRiskLevel, AutonomyRiskPhase, AutonomyRiskSignal, AutonomyRunState, parseInboundAutonomyRiskDecision, parseInboundScopedApprovalDecision, parseInboundScopedApprovalRequest, ScopedApprovalDecision, ScopedApprovalDecisionPayload, ScopedApprovalDecisionValue, ScopedApprovalRequest, validateScopedApprovalDecisionForRequest, } from "./autonomy.js";
 export { CostTier, PolicyCandidate, PolicyDecision, PolicyHandoff, PolicyOutcome, PolicyScore, } from "./policy.js";
 export { AgentCommand, AgentCommandResult, AgentCommandResultObject, CommandError, CommandName, CommandScope, CommandStatus, ErrorCode, NextAction, parseInboundAgentCommand, parseInboundAgentCommandResult, } from "./envelope.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,0EAA0E;AAE1E,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EACL,KAAK,EACL,gBAAgB,EAChB,eAAe,EACf,IAAI,GACL,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,aAAa,EACb,aAAa,EACb,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,aAAa,EACb,SAAS,EACT,UAAU,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,+EAA+E;AAC/E,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,+EAA+E;AAC/E,0EAA0E;AAE1E,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,EACL,KAAK,EACL,gBAAgB,EAChB,eAAe,EACf,IAAI,GACL,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,gCAAgC,EAChC,kCAAkC,EAClC,iCAAiC,EACjC,sBAAsB,EACtB,6BAA6B,EAC7B,2BAA2B,EAC3B,qBAAqB,EACrB,wCAAwC,GACzC,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,QAAQ,EACR,eAAe,EACf,cAAc,EACd,aAAa,EACb,aAAa,EACb,WAAW,GACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,wBAAwB,EACxB,YAAY,EACZ,WAAW,EACX,YAAY,EACZ,aAAa,EACb,SAAS,EACT,UAAU,EACV,wBAAwB,EACxB,8BAA8B,GAC/B,MAAM,eAAe,CAAC"}

package/dist/run.d.ts

@@ -15,7 +15,7 @@ export declare const RunSummary: z.ZodObject<{
     run_id: string;
     agent_id: string;
     task_id: string;
-    outcome: "completed" | "failed" | "cancelled";
+    outcome: "cancelled" | "completed" | "failed";
     started_at: string;
     completed_at?: string | undefined;
     duration_ms?: number | undefined;
@@ -24,7 +24,7 @@ export declare const RunSummary: z.ZodObject<{
     run_id: string;
     agent_id: string;
     task_id: string;
-    outcome: "completed" | "failed" | "cancelled";
+    outcome: "cancelled" | "completed" | "failed";
     started_at: string;
     completed_at?: string | undefined;
     duration_ms?: number | undefined;

package/dist/schemas.test.js

@@ -16,10 +16,15 @@ describe("generated JSON Schemas are committed and fresh", () => {
             "agent-command.schema.json",
             "approval-decision.schema.json",
             "approval-request.schema.json",
+            "autonomy-risk-decision.schema.json",
+            "autonomy-risk-level.schema.json",
+            "autonomy-run-state.schema.json",
             "event-envelope.schema.json",
             "evidence-ref.schema.json",
             "policy-decision.schema.json",
             "run-summary.schema.json",
+            "scoped-approval-decision.schema.json",
+            "scoped-approval-request.schema.json",
             "task.schema.json",
         ].sort());
     });

package/dist/schemas.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.test.js","sourceRoot":"","sources":["../src/schemas.test.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,+DAA+D;AAC/D,+CAA+C;AAE/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1E,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CACvB;YACE,kCAAkC;YAClC,2BAA2B;YAC3B,+BAA+B;YAC/B,8BAA8B;YAC9B,4BAA4B;YAC5B,0BAA0B;YAC1B,6BAA6B;YAC7B,yBAAyB;YACzB,kBAAkB;SACnB,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,EAAE,CAAC,WAAW,QAAQ,sCAAsC,EAAE,GAAG,EAAE;YACjE,MAAM,IAAI,GAAG,GAAG,WAAW,IAAI,QAAQ,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,QAAQ,0CAA0C,CAAC,CAAC,IAAI,CAC1F,IAAI,CACL,CAAC;YACF,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"schemas.test.js","sourceRoot":"","sources":["../src/schemas.test.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,+DAA+D;AAC/D,+CAA+C;AAE/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1E,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CACvB;YACE,kCAAkC;YAClC,2BAA2B;YAC3B,+BAA+B;YAC/B,8BAA8B;YAC9B,oCAAoC;YACpC,iCAAiC;YACjC,gCAAgC;YAChC,4BAA4B;YAC5B,0BAA0B;YAC1B,6BAA6B;YAC7B,yBAAyB;YACzB,sCAAsC;YACtC,qCAAqC;YACrC,kBAAkB;SACnB,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,EAAE,CAAC,WAAW,QAAQ,sCAAsC,EAAE,GAAG,EAAE;YACjE,MAAM,IAAI,GAAG,GAAG,WAAW,IAAI,QAAQ,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,QAAQ,0CAA0C,CAAC,CAAC,IAAI,CAC1F,IAAI,CACL,CAAC;YACF,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@osstack/protocol",
-  "version": "0.10.0",
+  "version": "0.13.0",
   "description": "Stable cross-product / cross-process / cross-agent kernel contracts for osstack (Task, Run, Event, Evidence, Approval, Policy, Agent command envelope) with JSON Schema artifacts and a versioned protocol.",
   "license": "MIT",
   "type": "module",
@@ -10,13 +10,6 @@
     "dist",
     "schemas"
   ],
-  "scripts": {
-    "build": "tsc -p .",
-    "test": "vitest run",
-    "typecheck": "tsc --noEmit",
-    "generate:schemas": "node scripts/generate-schemas.mjs",
-    "check:schemas": "node scripts/generate-schemas.mjs --check"
-  },
   "dependencies": {
     "zod": "^3.25.76"
   },
@@ -34,5 +27,12 @@
   },
   "engines": {
     "node": ">=20"
+  },
+  "scripts": {
+    "build": "tsc -p .",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit",
+    "generate:schemas": "node scripts/generate-schemas.mjs",
+    "check:schemas": "node scripts/generate-schemas.mjs --check"
   }
-}
+}

package/schemas/autonomy-risk-decision.schema.json

@@ -0,0 +1,86 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Guarded Autonomy Risk Decision",
+  "$comment": "Canonical signal ordering and maximum-level consistency are additionally enforced by @osstack/protocol Zod refinements.",
+  "type": "object",
+  "properties": {
+    "phase": {
+      "type": "string",
+      "enum": [
+        "preflight",
+        "post_diff"
+      ]
+    },
+    "level": {
+      "type": "string",
+      "enum": [
+        "R0",
+        "R1",
+        "R2",
+        "R3",
+        "R4"
+      ]
+    },
+    "signals": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "rule_id": {
+            "type": "string",
+            "minLength": 1
+          },
+          "level": {
+            "type": "string",
+            "enum": [
+              "R0",
+              "R1",
+              "R2",
+              "R3",
+              "R4"
+            ]
+          },
+          "message": {
+            "type": "string",
+            "minLength": 1
+          },
+          "path": {
+            "type": "string",
+            "minLength": 1
+          },
+          "command": {
+            "type": "string",
+            "minLength": 1
+          }
+        },
+        "required": [
+          "rule_id",
+          "level",
+          "message"
+        ],
+        "additionalProperties": false
+      }
+    },
+    "policy_sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "input_sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "decided_at": {
+      "type": "string",
+      "format": "date-time"
+    }
+  },
+  "required": [
+    "phase",
+    "level",
+    "signals",
+    "policy_sha256",
+    "input_sha256",
+    "decided_at"
+  ],
+  "additionalProperties": false
+}

package/schemas/autonomy-risk-level.schema.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Guarded Autonomy Risk Level",
+  "type": "string",
+  "enum": [
+    "R0",
+    "R1",
+    "R2",
+    "R3",
+    "R4"
+  ]
+}

package/schemas/autonomy-run-state.schema.json

@@ -0,0 +1,35 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Guarded Autonomy Run State",
+  "type": "string",
+  "enum": [
+    "queued",
+    "classifying",
+    "awaiting_approval",
+    "blocked",
+    "preparing",
+    "building",
+    "verifying",
+    "repairing",
+    "reviewing",
+    "post_classifying",
+    "candidate_proof",
+    "committing",
+    "pushing",
+    "opening_pr",
+    "waiting_ci",
+    "merging",
+    "deploying_staging",
+    "verifying_staging",
+    "deploying_production",
+    "health_checking",
+    "rolling_back",
+    "deploy_frozen",
+    "final_proof",
+    "blocked_delivery",
+    "delivery_evidence_failed",
+    "escalated",
+    "cancelled",
+    "completed"
+  ]
+}

package/schemas/scoped-approval-decision.schema.json

@@ -0,0 +1,131 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Guarded Autonomy Signed Scoped Approval Decision",
+  "$comment": "Human-actor and validity-window constraints are additionally enforced by @osstack/protocol Zod refinements; signature verification and replay defense belong to the runtime autonomy verifier.",
+  "type": "object",
+  "properties": {
+    "payload": {
+      "type": "object",
+      "properties": {
+        "approval_id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "request_sha256": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "autonomy_run_id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "phase": {
+          "type": "string",
+          "enum": [
+            "preflight",
+            "post_diff"
+          ]
+        },
+        "contract_sha256": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "diff_sha256": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "action_scope": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "minItems": 1
+        },
+        "decision": {
+          "type": "string",
+          "enum": [
+            "approve",
+            "reject"
+          ]
+        },
+        "nonce": {
+          "type": "string",
+          "minLength": 1
+        },
+        "issued_at": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "expires_at": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "decided_by": {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "enum": [
+                "human",
+                "agent"
+              ]
+            },
+            "id": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "type",
+            "id"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "approval_id",
+        "request_sha256",
+        "autonomy_run_id",
+        "phase",
+        "contract_sha256",
+        "diff_sha256",
+        "action_scope",
+        "decision",
+        "nonce",
+        "issued_at",
+        "expires_at",
+        "decided_by"
+      ],
+      "additionalProperties": false
+    },
+    "signature": {
+      "type": "object",
+      "properties": {
+        "algorithm": {
+          "type": "string",
+          "const": "Ed25519"
+        },
+        "key_id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "value_base64url": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9_-]{86}$"
+        }
+      },
+      "required": [
+        "algorithm",
+        "key_id",
+        "value_base64url"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "required": [
+    "payload",
+    "signature"
+  ],
+  "additionalProperties": false
+}

package/schemas/scoped-approval-request.schema.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Guarded Autonomy Scoped Approval Request",
+  "$comment": "Preflight empty-diff binding, build/verify-only scope, canonical action ordering, and validity windows are additionally enforced by @osstack/protocol Zod refinements.",
+  "type": "object",
+  "properties": {
+    "approval_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "autonomy_run_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "phase": {
+      "type": "string",
+      "enum": [
+        "preflight",
+        "post_diff"
+      ]
+    },
+    "contract_sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "diff_sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "action_scope": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1
+      },
+      "minItems": 1
+    },
+    "risk": {
+      "type": "string",
+      "const": "R3"
+    },
+    "nonce": {
+      "type": "string",
+      "minLength": 1
+    },
+    "requested_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "expires_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "request_sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    }
+  },
+  "required": [
+    "approval_id",
+    "autonomy_run_id",
+    "phase",
+    "contract_sha256",
+    "diff_sha256",
+    "action_scope",
+    "risk",
+    "nonce",
+    "requested_at",
+    "expires_at",
+    "request_sha256"
+  ],
+  "additionalProperties": false
+}