@osstack/protocol 0.10.0 → 0.15.0

package/schemas/autonomy-risk-level.schema.json

@@ -0,0 +1,12 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Guarded Autonomy Risk Level",
+  "type": "string",
+  "enum": [
+    "R0",
+    "R1",
+    "R2",
+    "R3",
+    "R4"
+  ]
+}

package/schemas/autonomy-run-state.schema.json

@@ -0,0 +1,35 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Guarded Autonomy Run State",
+  "type": "string",
+  "enum": [
+    "queued",
+    "classifying",
+    "awaiting_approval",
+    "blocked",
+    "preparing",
+    "building",
+    "verifying",
+    "repairing",
+    "reviewing",
+    "post_classifying",
+    "candidate_proof",
+    "committing",
+    "pushing",
+    "opening_pr",
+    "waiting_ci",
+    "merging",
+    "deploying_staging",
+    "verifying_staging",
+    "deploying_production",
+    "health_checking",
+    "rolling_back",
+    "deploy_frozen",
+    "final_proof",
+    "blocked_delivery",
+    "delivery_evidence_failed",
+    "escalated",
+    "cancelled",
+    "completed"
+  ]
+}

package/schemas/scoped-approval-decision.schema.json

@@ -0,0 +1,131 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Guarded Autonomy Signed Scoped Approval Decision",
+  "$comment": "Human-actor and validity-window constraints are additionally enforced by @osstack/protocol Zod refinements; signature verification and replay defense belong to the runtime autonomy verifier.",
+  "type": "object",
+  "properties": {
+    "payload": {
+      "type": "object",
+      "properties": {
+        "approval_id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "request_sha256": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "autonomy_run_id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "phase": {
+          "type": "string",
+          "enum": [
+            "preflight",
+            "post_diff"
+          ]
+        },
+        "contract_sha256": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "diff_sha256": {
+          "type": "string",
+          "pattern": "^[a-f0-9]{64}$"
+        },
+        "action_scope": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1
+          },
+          "minItems": 1
+        },
+        "decision": {
+          "type": "string",
+          "enum": [
+            "approve",
+            "reject"
+          ]
+        },
+        "nonce": {
+          "type": "string",
+          "minLength": 1
+        },
+        "issued_at": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "expires_at": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "decided_by": {
+          "type": "object",
+          "properties": {
+            "type": {
+              "type": "string",
+              "enum": [
+                "human",
+                "agent"
+              ]
+            },
+            "id": {
+              "type": "string",
+              "minLength": 1
+            }
+          },
+          "required": [
+            "type",
+            "id"
+          ],
+          "additionalProperties": false
+        }
+      },
+      "required": [
+        "approval_id",
+        "request_sha256",
+        "autonomy_run_id",
+        "phase",
+        "contract_sha256",
+        "diff_sha256",
+        "action_scope",
+        "decision",
+        "nonce",
+        "issued_at",
+        "expires_at",
+        "decided_by"
+      ],
+      "additionalProperties": false
+    },
+    "signature": {
+      "type": "object",
+      "properties": {
+        "algorithm": {
+          "type": "string",
+          "const": "Ed25519"
+        },
+        "key_id": {
+          "type": "string",
+          "minLength": 1
+        },
+        "value_base64url": {
+          "type": "string",
+          "pattern": "^[A-Za-z0-9_-]{86}$"
+        }
+      },
+      "required": [
+        "algorithm",
+        "key_id",
+        "value_base64url"
+      ],
+      "additionalProperties": false
+    }
+  },
+  "required": [
+    "payload",
+    "signature"
+  ],
+  "additionalProperties": false
+}

package/schemas/scoped-approval-request.schema.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Osstack Guarded Autonomy Scoped Approval Request",
+  "$comment": "Preflight empty-diff binding, build/verify-only scope, canonical action ordering, and validity windows are additionally enforced by @osstack/protocol Zod refinements.",
+  "type": "object",
+  "properties": {
+    "approval_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "autonomy_run_id": {
+      "type": "string",
+      "minLength": 1
+    },
+    "phase": {
+      "type": "string",
+      "enum": [
+        "preflight",
+        "post_diff"
+      ]
+    },
+    "contract_sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "diff_sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    },
+    "action_scope": {
+      "type": "array",
+      "items": {
+        "type": "string",
+        "minLength": 1
+      },
+      "minItems": 1
+    },
+    "risk": {
+      "type": "string",
+      "const": "R3"
+    },
+    "nonce": {
+      "type": "string",
+      "minLength": 1
+    },
+    "requested_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "expires_at": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "request_sha256": {
+      "type": "string",
+      "pattern": "^[a-f0-9]{64}$"
+    }
+  },
+  "required": [
+    "approval_id",
+    "autonomy_run_id",
+    "phase",
+    "contract_sha256",
+    "diff_sha256",
+    "action_scope",
+    "risk",
+    "nonce",
+    "requested_at",
+    "expires_at",
+    "request_sha256"
+  ],
+  "additionalProperties": false
+}

package/dist/protocol.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=protocol.test.d.ts.map

package/dist/protocol.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"protocol.test.d.ts","sourceRoot":"","sources":["../src/protocol.test.ts"],"names":[],"mappings":""}

package/dist/protocol.test.js

@@ -1,251 +0,0 @@
-// Protocol contract tests: fixture parsing, invalid rejection, backward-compat
-// corpus, consumer-lenient parsing, and the A-003 status<->code mapping.
-import { readFileSync, readdirSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { describe, expect, it } from "vitest";
-import { AgentCommand, AgentCommandResult, ApprovalDecision, ApprovalRequest, EventEnvelope, EvidenceRef, parseInboundAgentCommand, parseInboundAgentCommandResult, PolicyDecision, RunSummary, Task, } from "./index.js";
-const VALID_DIR = fileURLToPath(new URL("../fixtures/valid", import.meta.url));
-const INVALID_DIR = fileURLToPath(new URL("../fixtures/invalid", import.meta.url));
-/** Maps a fixture's schema key to the strict schema that must validate it. */
-const SCHEMA_BY_KEY = {
-    task: Task,
-    "run-summary": RunSummary,
-    "event-envelope": EventEnvelope,
-    "evidence-ref": EvidenceRef,
-    "approval-request": ApprovalRequest,
-    "approval-decision": ApprovalDecision,
-    "policy-decision": PolicyDecision,
-    "agent-command": AgentCommand,
-    "agent-command-result": AgentCommandResult,
-};
-/** Fixture filename -> schema key: strip the .(valid|invalid).json suffix, then
- *  drop any `__variant` discriminator (e.g. agent-command-result__blocked). */
-function schemaKeyOf(filename) {
-    const base = filename.replace(/\.(valid|invalid)\.json$/, "");
-    return base.split("__")[0];
-}
-function readJson(dir, filename) {
-    return JSON.parse(readFileSync(`${dir}/${filename}`, "utf-8"));
-}
-function schemaFor(filename) {
-    const key = schemaKeyOf(filename);
-    const schema = SCHEMA_BY_KEY[key];
-    if (!schema)
-        throw new Error(`no schema registered for key '${key}' (fixture ${filename})`);
-    return schema;
-}
-const validFiles = readdirSync(VALID_DIR).filter((f) => f.endsWith(".valid.json")).sort();
-const invalidFiles = readdirSync(INVALID_DIR).filter((f) => f.endsWith(".invalid.json")).sort();
-// ── Backward-compatibility corpus (A-007) ─────────────────────────────────
-// APPEND-ONLY. Every fixture published for protocol major 1 MUST parse against
-// all later minors, forever. Never delete or mutate an entry; a breaking change
-// is a new MAJOR with a new fixture directory. Adding a row is allowed.
-const FROZEN_V1_FIXTURES = [
-    "agent-command-result.valid.json",
-    "agent-command-result__blocked.valid.json",
-    "agent-command-result__error.valid.json",
-    "agent-command-result__needs-approval.valid.json",
-    "agent-command.valid.json",
-    "approval-decision.valid.json",
-    "approval-request.valid.json",
-    "event-envelope.valid.json",
-    "evidence-ref.valid.json",
-    "policy-decision.valid.json",
-    "run-summary.valid.json",
-    "task.valid.json",
-];
-describe("valid fixtures parse with their schema", () => {
-    it("covers at least one fixture per protocol type", () => {
-        const keys = new Set(validFiles.map(schemaKeyOf));
-        for (const key of Object.keys(SCHEMA_BY_KEY)) {
-            expect(keys, `missing a valid fixture for '${key}'`).toContain(key);
-        }
-    });
-    for (const filename of validFiles) {
-        it(`parses ${filename}`, () => {
-            const result = schemaFor(filename).safeParse(readJson(VALID_DIR, filename));
-            if (!result.success) {
-                throw new Error(`${filename} should parse but failed:\n${result.error.toString()}`);
-            }
-            expect(result.success).toBe(true);
-        });
-    }
-});
-describe("invalid fixtures are rejected and document why", () => {
-    it("covers at least one invalid fixture per protocol type", () => {
-        const keys = new Set(invalidFiles.map(schemaKeyOf));
-        for (const key of Object.keys(SCHEMA_BY_KEY)) {
-            expect(keys, `missing an invalid fixture for '${key}'`).toContain(key);
-        }
-    });
-    for (const filename of invalidFiles) {
-        it(`rejects ${filename}`, () => {
-            const fixture = readJson(INVALID_DIR, filename);
-            expect(typeof fixture.$reason, `${filename} must document a $reason`).toBe("string");
-            expect(fixture.$reason.length).toBeGreaterThan(0);
-            expect("value" in fixture, `${filename} must carry a value`).toBe(true);
-            const result = schemaFor(filename).safeParse(fixture.value);
-            expect(result.success, `${filename} should be rejected but parsed`).toBe(false);
-        });
-    }
-});
-describe("backward-compatibility corpus (A-007, append-only)", () => {
-    it("the on-disk valid corpus exactly matches FROZEN_V1_FIXTURES", () => {
-        // Two-way equality: nothing added without registering, nothing frozen removed.
-        expect(validFiles).toEqual([...FROZEN_V1_FIXTURES].sort());
-    });
-    it("every frozen fixture still parses under the current schemas", () => {
-        for (const filename of FROZEN_V1_FIXTURES) {
-            const result = schemaFor(filename).safeParse(readJson(VALID_DIR, filename));
-            expect(result.success, `${filename} broke backward compatibility`).toBe(true);
-        }
-    });
-});
-describe("consumer-lenient vs producer-strict (A-007)", () => {
-    it("an unknown extra field fails the strict schema but passes the lenient parser", () => {
-        const fixture = readJson(INVALID_DIR, "agent-command__unknown-field.invalid.json");
-        // Producer-strict rejects the unknown field.
-        expect(AgentCommand.safeParse(fixture.value).success).toBe(false);
-        // Consumer-lenient accepts it and preserves the passthrough field.
-        const parsed = parseInboundAgentCommand(fixture.value);
-        expect(parsed.command).toBe("portfolio.daily");
-        expect(parsed.debug).toBe(true);
-    });
-    it("the lenient result parser tolerates unknown fields but still enforces A-003", () => {
-        const okWithExtra = {
-            protocol_version: "1.0",
-            status: "ok",
-            result: {},
-            trace_id: "abc",
-        };
-        expect(AgentCommandResult.safeParse(okWithExtra).success).toBe(false); // strict rejects extra
-        expect(() => parseInboundAgentCommandResult(okWithExtra)).not.toThrow(); // lenient accepts
-        // Business rule still enforced by the lenient parser.
-        expect(() => parseInboundAgentCommandResult({ protocol_version: "1.0", status: "error", trace_id: "x" })).toThrow();
-    });
-});
-describe("deep consumer leniency (A-007 — unknown fields in NESTED objects)", () => {
-    it("v1.1-style unknown field inside actor: lenient accepts, strict rejects", () => {
-        const command = {
-            protocol_version: "1.1",
-            command: "portfolio.daily",
-            actor: { type: "human", id: "osborn", display_name: "Osborn" },
-            input: {},
-        };
-        expect(AgentCommand.safeParse(command).success).toBe(false);
-        const parsed = parseInboundAgentCommand(command);
-        expect(parsed.actor.id).toBe("osborn");
-        expect(parsed.actor.display_name).toBe("Osborn");
-    });
-    it("unknown field inside scope: lenient accepts, strict rejects", () => {
-        const command = {
-            protocol_version: "1.1",
-            command: "delivery.start",
-            actor: { type: "agent", id: "claude-code" },
-            scope: { repo_id: "osborn-pa", branch: "main" },
-            input: {},
-        };
-        expect(AgentCommand.safeParse(command).success).toBe(false);
-        expect(() => parseInboundAgentCommand(command)).not.toThrow();
-    });
-    it("unknown field inside an ApprovalRequest item: lenient accepts, strict rejects", () => {
-        const result = {
-            protocol_version: "1.1",
-            status: "needs_approval",
-            required_approvals: [
-                {
-                    approval_id: "appr_01",
-                    action: "Deploy to production",
-                    risk: "high",
-                    requested_at: "2026-07-11T09:05:00.000Z",
-                    expires_at: "2026-07-12T09:05:00.000Z",
-                },
-            ],
-        };
-        expect(AgentCommandResult.safeParse(result).success).toBe(false);
-        expect(() => parseInboundAgentCommandResult(result)).not.toThrow();
-    });
-    it("unknown field inside an EvidenceRef item: lenient accepts, strict rejects", () => {
-        const result = {
-            protocol_version: "1.1",
-            status: "ok",
-            evidence_refs: [{ kind: "proof", ref: "release/proof/", bytes: 1024 }],
-        };
-        expect(AgentCommandResult.safeParse(result).success).toBe(false);
-        expect(() => parseInboundAgentCommandResult(result)).not.toThrow();
-    });
-    it("unknown field inside the error object: lenient accepts, strict rejects", () => {
-        const result = {
-            protocol_version: "1.1",
-            status: "error",
-            error: { code: "internal", message: "boom", retryable: true, trace_id: "t_1" },
-        };
-        expect(AgentCommandResult.safeParse(result).success).toBe(false);
-        expect(() => parseInboundAgentCommandResult(result)).not.toThrow();
-    });
-    it("deep leniency does not weaken A-003: nested-lenient blocked result still needs a blocked code", () => {
-        const result = {
-            protocol_version: "1.1",
-            status: "blocked",
-            error: { code: "internal", message: "boom", retryable: true, trace_id: "t_1" },
-        };
-        expect(() => parseInboundAgentCommandResult(result)).toThrow();
-    });
-});
-describe("A-003 / A-006 status<->code mapping", () => {
-    it("accepts status ok without an error object", () => {
-        expect(AgentCommandResult.safeParse({ protocol_version: "1.0", status: "ok", result: {} }).success).toBe(true);
-    });
-    it("rejects status error without an error object", () => {
-        expect(AgentCommandResult.safeParse({ protocol_version: "1.0", status: "error" }).success).toBe(false);
-    });
-    it("rejects status blocked with an internal (non-blocked) error code", () => {
-        expect(AgentCommandResult.safeParse({
-            protocol_version: "1.0",
-            status: "blocked",
-            error: { code: "internal", message: "boom", retryable: true },
-        }).success).toBe(false);
-    });
-    it("accepts status blocked with policy_denied and budget_exceeded", () => {
-        for (const code of ["policy_denied", "budget_exceeded"]) {
-            expect(AgentCommandResult.safeParse({
-                protocol_version: "1.0",
-                status: "blocked",
-                error: { code, message: "denied", retryable: false },
-            }).success, `blocked+${code} should be accepted`).toBe(true);
-        }
-    });
-    it("rejects status error carrying a blocked-only code (A-006)", () => {
-        expect(AgentCommandResult.safeParse({
-            protocol_version: "1.0",
-            status: "error",
-            error: { code: "policy_denied", message: "denied", retryable: false },
-        }).success).toBe(false);
-    });
-    it("rejects status needs_approval with an empty required_approvals", () => {
-        expect(AgentCommandResult.safeParse({
-            protocol_version: "1.0",
-            status: "needs_approval",
-            required_approvals: [],
-        }).success).toBe(false);
-    });
-    it("rejects retryable:true on a non-transient code (A-006), strict and lenient", () => {
-        const result = {
-            protocol_version: "1.0",
-            status: "error",
-            error: { code: "not_found", message: "no such run", retryable: true },
-        };
-        expect(AgentCommandResult.safeParse(result).success).toBe(false);
-        expect(() => parseInboundAgentCommandResult(result)).toThrow();
-    });
-    it("accepts retryable:true for the transient codes internal and conflict (A-006)", () => {
-        for (const code of ["internal", "conflict"]) {
-            expect(AgentCommandResult.safeParse({
-                protocol_version: "1.0",
-                status: "error",
-                error: { code, message: "transient", retryable: true },
-            }).success, `error+${code}+retryable should be accepted`).toBe(true);
-        }
-    });
-});
-//# sourceMappingURL=protocol.test.js.map

package/dist/protocol.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"protocol.test.js","sourceRoot":"","sources":["../src/protocol.test.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,yEAAyE;AAEzE,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,WAAW,EACX,wBAAwB,EACxB,8BAA8B,EAC9B,cAAc,EACd,UAAU,EACV,IAAI,GACL,MAAM,YAAY,CAAC;AAEpB,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/E,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAEnF,8EAA8E;AAC9E,MAAM,aAAa,GAAiC;IAClD,IAAI,EAAE,IAAI;IACV,aAAa,EAAE,UAAU;IACzB,gBAAgB,EAAE,aAAa;IAC/B,cAAc,EAAE,WAAW;IAC3B,kBAAkB,EAAE,eAAe;IACnC,mBAAmB,EAAE,gBAAgB;IACrC,iBAAiB,EAAE,cAAc;IACjC,eAAe,EAAE,YAAY;IAC7B,sBAAsB,EAAE,kBAAkB;CAC3C,CAAC;AAEF;+EAC+E;AAC/E,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAW,CAAC;AACvC,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW,EAAE,QAAgB;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,GAAG,IAAI,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,cAAc,QAAQ,GAAG,CAAC,CAAC;IAC5F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1F,MAAM,YAAY,GAAG,WAAW,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAEhG,6EAA6E;AAC7E,+EAA+E;AAC/E,gFAAgF;AAChF,wEAAwE;AACxE,MAAM,kBAAkB,GAAG;IACzB,iCAAiC;IACjC,0CAA0C;IAC1C,wCAAwC;IACxC,iDAAiD;IACjD,0BAA0B;IAC1B,8BAA8B;IAC9B,6BAA6B;IAC7B,2BAA2B;IAC3B,yBAAyB;IACzB,4BAA4B;IAC5B,wBAAwB;IACxB,iBAAiB;CACT,CAAC;AAEX,QAAQ,CAAC,wCAAwC,EAAE,GAAG,EAAE;IACtD,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QAClD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,EAAE,gCAAgC,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACtE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI,UAAU,EAAE,CAAC;QAClC,EAAE,CAAC,UAAU,QAAQ,EAAE,EAAE,GAAG,EAAE;YAC5B,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5E,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,GAAG,QAAQ,8BAA8B,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC;QACpD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,EAAE,mCAAmC,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QACpC,EAAE,CAAC,WAAW,QAAQ,EAAE,EAAE,GAAG,EAAE;YAC7B,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAA2C,CAAC;YAC1F,MAAM,CAAC,OAAO,OAAO,CAAC,OAAO,EAAE,GAAG,QAAQ,0BAA0B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrF,MAAM,CAAE,OAAO,CAAC,OAAkB,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,CAAC,OAAO,IAAI,OAAO,EAAE,GAAG,QAAQ,qBAAqB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxE,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5D,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,gCAAgC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,oDAAoD,EAAE,GAAG,EAAE;IAClE,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,+EAA+E;QAC/E,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,KAAK,MAAM,QAAQ,IAAI,kBAAkB,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;YAC5E,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,QAAQ,+BAA+B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,OAAO,GAAG,QAAQ,CAAC,WAAW,EAAE,2CAA2C,CAEhF,CAAC;QACF,6CAA6C;QAC7C,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,mEAAmE;QACnE,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/C,MAAM,CAAE,MAAkC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,WAAW,GAAG;YAClB,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,KAAK;SAChB,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,uBAAuB;QAC9F,MAAM,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,kBAAkB;QAE3F,sDAAsD;QACtD,MAAM,CAAC,GAAG,EAAE,CACV,8BAA8B,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAC5F,CAAC,OAAO,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mEAAmE,EAAE,GAAG,EAAE;IACjF,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,OAAO,GAAG;YACd,gBAAgB,EAAE,KAAK;YACvB,OAAO,EAAE,iBAAiB;YAC1B,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE;YAC9D,KAAK,EAAE,EAAE;SACV,CAAC;QACF,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,wBAAwB,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,CAAE,MAAM,CAAC,KAAiC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,OAAO,GAAG;YACd,gBAAgB,EAAE,KAAK;YACvB,OAAO,EAAE,gBAAgB;YACzB,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE;YAC3C,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE;YAC/C,KAAK,EAAE,EAAE;SACV,CAAC;QACF,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAChE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,MAAM,MAAM,GAAG;YACb,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,gBAAgB;YACxB,kBAAkB,EAAE;gBAClB;oBACE,WAAW,EAAE,SAAS;oBACtB,MAAM,EAAE,sBAAsB;oBAC9B,IAAI,EAAE,MAAM;oBACZ,YAAY,EAAE,0BAA0B;oBACxC,UAAU,EAAE,0BAA0B;iBACvC;aACF;SACF,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,MAAM,GAAG;YACb,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,IAAI;YACZ,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;SACvE,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,MAAM,GAAG;YACb,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC/E,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,MAAM,MAAM,GAAG;YACb,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE;SAC/E,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CACJ,kBAAkB,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAC5F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CACJ,kBAAkB,CAAC,SAAS,CAAC,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CACnF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CACJ,kBAAkB,CAAC,SAAS,CAAC;YAC3B,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE;SAC9D,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,KAAK,MAAM,IAAI,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAAE,CAAC;YACxD,MAAM,CACJ,kBAAkB,CAAC,SAAS,CAAC;gBAC3B,gBAAgB,EAAE,KAAK;gBACvB,MAAM,EAAE,SAAS;gBACjB,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;aACrD,CAAC,CAAC,OAAO,EACV,WAAW,IAAI,qBAAqB,CACrC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,GAAG,EAAE;QACnE,MAAM,CACJ,kBAAkB,CAAC,SAAS,CAAC;YAC3B,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE;SACtE,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CACJ,kBAAkB,CAAC,SAAS,CAAC;YAC3B,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,gBAAgB;YACxB,kBAAkB,EAAE,EAAE;SACvB,CAAC,CAAC,OAAO,CACX,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4EAA4E,EAAE,GAAG,EAAE;QACpF,MAAM,MAAM,GAAG;YACb,gBAAgB,EAAE,KAAK;YACvB,MAAM,EAAE,OAAO;YACf,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE;SACtE,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,EAAE,CAAC,8BAA8B,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,CAAC;YAC5C,MAAM,CACJ,kBAAkB,CAAC,SAAS,CAAC;gBAC3B,gBAAgB,EAAE,KAAK;gBACvB,MAAM,EAAE,OAAO;gBACf,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE;aACvD,CAAC,CAAC,OAAO,EACV,SAAS,IAAI,+BAA+B,CAC7C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/schemas.test.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=schemas.test.d.ts.map

package/dist/schemas.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.test.d.ts","sourceRoot":"","sources":["../src/schemas.test.ts"],"names":[],"mappings":""}

package/dist/schemas.test.js

@@ -1,34 +0,0 @@
-// Schema-generation drift guard: the committed schemas/*.schema.json MUST equal
-// what the Zod source of truth produces right now. Regenerating produces zero
-// diff — the same generateAll() runs here (against src) and in
-// scripts/generate-schemas.mjs (against dist).
-import { existsSync, readFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { describe, expect, it } from "vitest";
-import { generateAll } from "./generate.js";
-const SCHEMAS_DIR = fileURLToPath(new URL("../schemas", import.meta.url));
-describe("generated JSON Schemas are committed and fresh", () => {
-    const expected = generateAll();
-    const filenames = Object.keys(expected).sort();
-    it("emits one schema per public protocol contract", () => {
-        expect(filenames).toEqual([
-            "agent-command-result.schema.json",
-            "agent-command.schema.json",
-            "approval-decision.schema.json",
-            "approval-request.schema.json",
-            "event-envelope.schema.json",
-            "evidence-ref.schema.json",
-            "policy-decision.schema.json",
-            "run-summary.schema.json",
-            "task.schema.json",
-        ].sort());
-    });
-    for (const filename of filenames) {
-        it(`schemas/${filename} matches the Zod source (zero drift)`, () => {
-            const path = `${SCHEMAS_DIR}/${filename}`;
-            expect(existsSync(path), `schemas/${filename} is not committed — run generate:schemas`).toBe(true);
-            expect(readFileSync(path, "utf-8")).toBe(expected[filename]);
-        });
-    }
-});
-//# sourceMappingURL=schemas.test.js.map

package/dist/schemas.test.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"schemas.test.js","sourceRoot":"","sources":["../src/schemas.test.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,+DAA+D;AAC/D,+CAA+C;AAE/C,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE1E,QAAQ,CAAC,gDAAgD,EAAE,GAAG,EAAE;IAC9D,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IAE/C,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CACvB;YACE,kCAAkC;YAClC,2BAA2B;YAC3B,+BAA+B;YAC/B,8BAA8B;YAC9B,4BAA4B;YAC5B,0BAA0B;YAC1B,6BAA6B;YAC7B,yBAAyB;YACzB,kBAAkB;SACnB,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,EAAE,CAAC,WAAW,QAAQ,sCAAsC,EAAE,GAAG,EAAE;YACjE,MAAM,IAAI,GAAG,GAAG,WAAW,IAAI,QAAQ,EAAE,CAAC;YAC1C,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,WAAW,QAAQ,0CAA0C,CAAC,CAAC,IAAI,CAC1F,IAAI,CACL,CAAC;YACF,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}