@osstack/protocol 0.13.0 → 0.20.0

package/dist/session-continuation-grant.d.ts

@@ -0,0 +1,414 @@
+import { z } from "zod";
+/**
+ * Equality against persisted assistant_text only. These checks attest to the
+ * declared output contract, never open-ended task quality or an R3 approval.
+ * A JSON path is a sequence of literal keys; [] selects the root primitive.
+ * Consumers must use own-property traversal, not eval or prototype lookup.
+ */
+export declare const OutputCheck: z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+    kind: z.ZodLiteral<"text_equals">;
+    expected: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    expected: string;
+    kind: "text_equals";
+}, {
+    expected: string;
+    kind: "text_equals";
+}>, z.ZodObject<{
+    kind: z.ZodLiteral<"json_value_equals">;
+    path: z.ZodArray<z.ZodString, "many">;
+    expected: z.ZodUnion<[z.ZodNull, z.ZodString, z.ZodNumber, z.ZodBoolean]>;
+}, "strict", z.ZodTypeAny, {
+    path: string[];
+    expected: string | number | boolean | null;
+    kind: "json_value_equals";
+}, {
+    path: string[];
+    expected: string | number | boolean | null;
+    kind: "json_value_equals";
+}>]>;
+export type OutputCheck = z.infer<typeof OutputCheck>;
+/** The checks must pass before the frozen instruction for this step is sent. */
+export declare const ContinuationGrantStep: z.ZodObject<{
+    phase: z.ZodString;
+    instruction: z.ZodEffects<z.ZodString, string, string>;
+    checks: z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+        kind: z.ZodLiteral<"text_equals">;
+        expected: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        expected: string;
+        kind: "text_equals";
+    }, {
+        expected: string;
+        kind: "text_equals";
+    }>, z.ZodObject<{
+        kind: z.ZodLiteral<"json_value_equals">;
+        path: z.ZodArray<z.ZodString, "many">;
+        expected: z.ZodUnion<[z.ZodNull, z.ZodString, z.ZodNumber, z.ZodBoolean]>;
+    }, "strict", z.ZodTypeAny, {
+        path: string[];
+        expected: string | number | boolean | null;
+        kind: "json_value_equals";
+    }, {
+        path: string[];
+        expected: string | number | boolean | null;
+        kind: "json_value_equals";
+    }>]>, "many">;
+    retry_instruction: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+    max_retries: z.ZodDefault<z.ZodNumber>;
+}, "strict", z.ZodTypeAny, {
+    phase: string;
+    instruction: string;
+    checks: ({
+        expected: string;
+        kind: "text_equals";
+    } | {
+        path: string[];
+        expected: string | number | boolean | null;
+        kind: "json_value_equals";
+    })[];
+    max_retries: number;
+    retry_instruction?: string | undefined;
+}, {
+    phase: string;
+    instruction: string;
+    checks: ({
+        expected: string;
+        kind: "text_equals";
+    } | {
+        path: string[];
+        expected: string | number | boolean | null;
+        kind: "json_value_equals";
+    })[];
+    retry_instruction?: string | undefined;
+    max_retries?: number | undefined;
+}>;
+export type ContinuationGrantStep = z.infer<typeof ContinuationGrantStep>;
+/**
+ * A finite delegation bound to one session, runtime policy, repository and
+ * initial turn/version. "Completed" means all delegated instructions were sent
+ * and completed; it does not mean the user's overall objective was achieved.
+ * Signature verification, time validity and durable consumption are runtime
+ * responsibilities. This schema does not grant GitHub or R3 approval powers.
+ */
+export declare const ContinuationGrantBody: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    grant_id: z.ZodString;
+    session_id: z.ZodString;
+    runtime_id: z.ZodString;
+    runtime_policy_sha256: z.ZodString;
+    repo_path: z.ZodEffects<z.ZodString, string, string>;
+    initial_turn_id: z.ZodString;
+    initial_version: z.ZodNumber;
+    issued_at: z.ZodString;
+    expires_at: z.ZodString;
+    max_resumes: z.ZodNumber;
+    max_checks: z.ZodNumber;
+    turn_timeout_ms: z.ZodNumber;
+    steps: z.ZodArray<z.ZodObject<{
+        phase: z.ZodString;
+        instruction: z.ZodEffects<z.ZodString, string, string>;
+        checks: z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+            kind: z.ZodLiteral<"text_equals">;
+            expected: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            expected: string;
+            kind: "text_equals";
+        }, {
+            expected: string;
+            kind: "text_equals";
+        }>, z.ZodObject<{
+            kind: z.ZodLiteral<"json_value_equals">;
+            path: z.ZodArray<z.ZodString, "many">;
+            expected: z.ZodUnion<[z.ZodNull, z.ZodString, z.ZodNumber, z.ZodBoolean]>;
+        }, "strict", z.ZodTypeAny, {
+            path: string[];
+            expected: string | number | boolean | null;
+            kind: "json_value_equals";
+        }, {
+            path: string[];
+            expected: string | number | boolean | null;
+            kind: "json_value_equals";
+        }>]>, "many">;
+        retry_instruction: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+        max_retries: z.ZodDefault<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        phase: string;
+        instruction: string;
+        checks: ({
+            expected: string;
+            kind: "text_equals";
+        } | {
+            path: string[];
+            expected: string | number | boolean | null;
+            kind: "json_value_equals";
+        })[];
+        max_retries: number;
+        retry_instruction?: string | undefined;
+    }, {
+        phase: string;
+        instruction: string;
+        checks: ({
+            expected: string;
+            kind: "text_equals";
+        } | {
+            path: string[];
+            expected: string | number | boolean | null;
+            kind: "json_value_equals";
+        })[];
+        retry_instruction?: string | undefined;
+        max_retries?: number | undefined;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    expires_at: string;
+    issued_at: string;
+    session_id: string;
+    version: 1;
+    grant_id: string;
+    runtime_id: string;
+    runtime_policy_sha256: string;
+    repo_path: string;
+    initial_turn_id: string;
+    initial_version: number;
+    max_resumes: number;
+    max_checks: number;
+    turn_timeout_ms: number;
+    steps: {
+        phase: string;
+        instruction: string;
+        checks: ({
+            expected: string;
+            kind: "text_equals";
+        } | {
+            path: string[];
+            expected: string | number | boolean | null;
+            kind: "json_value_equals";
+        })[];
+        max_retries: number;
+        retry_instruction?: string | undefined;
+    }[];
+}, {
+    expires_at: string;
+    issued_at: string;
+    session_id: string;
+    version: 1;
+    grant_id: string;
+    runtime_id: string;
+    runtime_policy_sha256: string;
+    repo_path: string;
+    initial_turn_id: string;
+    initial_version: number;
+    max_resumes: number;
+    max_checks: number;
+    turn_timeout_ms: number;
+    steps: {
+        phase: string;
+        instruction: string;
+        checks: ({
+            expected: string;
+            kind: "text_equals";
+        } | {
+            path: string[];
+            expected: string | number | boolean | null;
+            kind: "json_value_equals";
+        })[];
+        retry_instruction?: string | undefined;
+        max_retries?: number | undefined;
+    }[];
+}>;
+export type ContinuationGrantBody = z.infer<typeof ContinuationGrantBody>;
+export declare const SignedContinuationGrant: z.ZodObject<{
+    body: z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        grant_id: z.ZodString;
+        session_id: z.ZodString;
+        runtime_id: z.ZodString;
+        runtime_policy_sha256: z.ZodString;
+        repo_path: z.ZodEffects<z.ZodString, string, string>;
+        initial_turn_id: z.ZodString;
+        initial_version: z.ZodNumber;
+        issued_at: z.ZodString;
+        expires_at: z.ZodString;
+        max_resumes: z.ZodNumber;
+        max_checks: z.ZodNumber;
+        turn_timeout_ms: z.ZodNumber;
+        steps: z.ZodArray<z.ZodObject<{
+            phase: z.ZodString;
+            instruction: z.ZodEffects<z.ZodString, string, string>;
+            checks: z.ZodArray<z.ZodDiscriminatedUnion<"kind", [z.ZodObject<{
+                kind: z.ZodLiteral<"text_equals">;
+                expected: z.ZodString;
+            }, "strict", z.ZodTypeAny, {
+                expected: string;
+                kind: "text_equals";
+            }, {
+                expected: string;
+                kind: "text_equals";
+            }>, z.ZodObject<{
+                kind: z.ZodLiteral<"json_value_equals">;
+                path: z.ZodArray<z.ZodString, "many">;
+                expected: z.ZodUnion<[z.ZodNull, z.ZodString, z.ZodNumber, z.ZodBoolean]>;
+            }, "strict", z.ZodTypeAny, {
+                path: string[];
+                expected: string | number | boolean | null;
+                kind: "json_value_equals";
+            }, {
+                path: string[];
+                expected: string | number | boolean | null;
+                kind: "json_value_equals";
+            }>]>, "many">;
+            retry_instruction: z.ZodOptional<z.ZodEffects<z.ZodString, string, string>>;
+            max_retries: z.ZodDefault<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            phase: string;
+            instruction: string;
+            checks: ({
+                expected: string;
+                kind: "text_equals";
+            } | {
+                path: string[];
+                expected: string | number | boolean | null;
+                kind: "json_value_equals";
+            })[];
+            max_retries: number;
+            retry_instruction?: string | undefined;
+        }, {
+            phase: string;
+            instruction: string;
+            checks: ({
+                expected: string;
+                kind: "text_equals";
+            } | {
+                path: string[];
+                expected: string | number | boolean | null;
+                kind: "json_value_equals";
+            })[];
+            retry_instruction?: string | undefined;
+            max_retries?: number | undefined;
+        }>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        expires_at: string;
+        issued_at: string;
+        session_id: string;
+        version: 1;
+        grant_id: string;
+        runtime_id: string;
+        runtime_policy_sha256: string;
+        repo_path: string;
+        initial_turn_id: string;
+        initial_version: number;
+        max_resumes: number;
+        max_checks: number;
+        turn_timeout_ms: number;
+        steps: {
+            phase: string;
+            instruction: string;
+            checks: ({
+                expected: string;
+                kind: "text_equals";
+            } | {
+                path: string[];
+                expected: string | number | boolean | null;
+                kind: "json_value_equals";
+            })[];
+            max_retries: number;
+            retry_instruction?: string | undefined;
+        }[];
+    }, {
+        expires_at: string;
+        issued_at: string;
+        session_id: string;
+        version: 1;
+        grant_id: string;
+        runtime_id: string;
+        runtime_policy_sha256: string;
+        repo_path: string;
+        initial_turn_id: string;
+        initial_version: number;
+        max_resumes: number;
+        max_checks: number;
+        turn_timeout_ms: number;
+        steps: {
+            phase: string;
+            instruction: string;
+            checks: ({
+                expected: string;
+                kind: "text_equals";
+            } | {
+                path: string[];
+                expected: string | number | boolean | null;
+                kind: "json_value_equals";
+            })[];
+            retry_instruction?: string | undefined;
+            max_retries?: number | undefined;
+        }[];
+    }>;
+    key_id: z.ZodString;
+    signature: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    key_id: string;
+    signature: string;
+    body: {
+        expires_at: string;
+        issued_at: string;
+        session_id: string;
+        version: 1;
+        grant_id: string;
+        runtime_id: string;
+        runtime_policy_sha256: string;
+        repo_path: string;
+        initial_turn_id: string;
+        initial_version: number;
+        max_resumes: number;
+        max_checks: number;
+        turn_timeout_ms: number;
+        steps: {
+            phase: string;
+            instruction: string;
+            checks: ({
+                expected: string;
+                kind: "text_equals";
+            } | {
+                path: string[];
+                expected: string | number | boolean | null;
+                kind: "json_value_equals";
+            })[];
+            max_retries: number;
+            retry_instruction?: string | undefined;
+        }[];
+    };
+}, {
+    key_id: string;
+    signature: string;
+    body: {
+        expires_at: string;
+        issued_at: string;
+        session_id: string;
+        version: 1;
+        grant_id: string;
+        runtime_id: string;
+        runtime_policy_sha256: string;
+        repo_path: string;
+        initial_turn_id: string;
+        initial_version: number;
+        max_resumes: number;
+        max_checks: number;
+        turn_timeout_ms: number;
+        steps: {
+            phase: string;
+            instruction: string;
+            checks: ({
+                expected: string;
+                kind: "text_equals";
+            } | {
+                path: string[];
+                expected: string | number | boolean | null;
+                kind: "json_value_equals";
+            })[];
+            retry_instruction?: string | undefined;
+            max_retries?: number | undefined;
+        }[];
+    };
+}>;
+export type SignedContinuationGrant = z.infer<typeof SignedContinuationGrant>;
+//# sourceMappingURL=session-continuation-grant.d.ts.map

package/dist/session-continuation-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-continuation-grant.d.ts","sourceRoot":"","sources":["../src/session-continuation-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAaxB;;;;;GAKG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;IAUtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,gFAAgF;AAChF,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAMvB,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAevB,CAAC;AACZ,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAE1E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOzB,CAAC;AACZ,MAAM,MAAM,uBAAuB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/session-continuation-grant.js

@@ -0,0 +1,59 @@
+import { z } from "zod";
+const Id = z.string().trim().min(1).max(256);
+const Timestamp = z.string().datetime({ offset: true });
+const Instruction = z.string().min(1).max(16_000).refine((value) => value.trim().length > 0, "instruction must contain non-whitespace text");
+const AbsolutePath = z.string().max(4_096).regex(/^(?:\/|[A-Za-z]:[\\/]|\\\\[^\\/]+[\\/][^\\/]+(?:[\\/]|$))/, "repo_path must be an absolute path").refine((value) => !value.includes("\0"), "repo_path must not contain NUL characters");
+/**
+ * Equality against persisted assistant_text only. These checks attest to the
+ * declared output contract, never open-ended task quality or an R3 approval.
+ * A JSON path is a sequence of literal keys; [] selects the root primitive.
+ * Consumers must use own-property traversal, not eval or prototype lookup.
+ */
+export const OutputCheck = z.discriminatedUnion("kind", [
+    z.object({
+        kind: z.literal("text_equals"),
+        expected: z.string().max(4_000),
+    }).strict(),
+    z.object({
+        kind: z.literal("json_value_equals"),
+        path: z.array(z.string().max(256)).max(8),
+        expected: z.union([z.null(), z.string().max(4_000), z.number().finite(), z.boolean()]),
+    }).strict(),
+]);
+/** The checks must pass before the frozen instruction for this step is sent. */
+export const ContinuationGrantStep = z.object({
+    phase: Id,
+    instruction: Instruction,
+    checks: z.array(OutputCheck).min(1).max(16),
+    retry_instruction: Instruction.optional(),
+    max_retries: z.number().int().min(0).max(3).default(0),
+}).strict();
+/**
+ * A finite delegation bound to one session, runtime policy, repository and
+ * initial turn/version. "Completed" means all delegated instructions were sent
+ * and completed; it does not mean the user's overall objective was achieved.
+ * Signature verification, time validity and durable consumption are runtime
+ * responsibilities. This schema does not grant GitHub or R3 approval powers.
+ */
+export const ContinuationGrantBody = z.object({
+    version: z.literal(1),
+    grant_id: Id,
+    session_id: Id,
+    runtime_id: Id,
+    runtime_policy_sha256: z.string().regex(/^[a-f0-9]{64}$/),
+    repo_path: AbsolutePath,
+    initial_turn_id: Id,
+    initial_version: z.number().int().min(1),
+    issued_at: Timestamp,
+    expires_at: Timestamp,
+    max_resumes: z.number().int().min(1).max(32),
+    max_checks: z.number().int().min(1).max(64),
+    turn_timeout_ms: z.number().int().min(100).max(300_000),
+    steps: z.array(ContinuationGrantStep).min(1).max(16),
+}).strict();
+export const SignedContinuationGrant = z.object({
+    body: ContinuationGrantBody,
+    key_id: Id,
+    signature: z.string().regex(/^[A-Za-z0-9+/]{85}[AQgw]==$/, "signature must be canonical base64 for a 64-byte Ed25519 signature"),
+}).strict();
+//# sourceMappingURL=session-continuation-grant.js.map

package/dist/session-continuation-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-continuation-grant.js","sourceRoot":"","sources":["../src/session-continuation-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC7C,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACxD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CACtD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAClC,8CAA8C,CAC/C,CAAC;AACF,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,CAC9C,2DAA2D,EAC3D,oCAAoC,CACrC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,2CAA2C,CAAC,CAAC;AAExF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtD,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;QAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC;KAChC,CAAC,CAAC,MAAM,EAAE;IACX,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;QACpC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;KACvF,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AAGH,gFAAgF;AAChF,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,KAAK,EAAE,EAAE;IACT,WAAW,EAAE,WAAW;IACxB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,iBAAiB,EAAE,WAAW,CAAC,QAAQ,EAAE;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,QAAQ,EAAE,EAAE;IACZ,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,EAAE;IACd,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACzD,SAAS,EAAE,YAAY;IACvB,eAAe,EAAE,EAAE;IACnB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,SAAS,EAAE,SAAS;IACpB,UAAU,EAAE,SAAS;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACrD,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,qBAAqB;IAC3B,MAAM,EAAE,EAAE;IACV,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CACzB,6BAA6B,EAC7B,oEAAoE,CACrE;CACF,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/session-continuation.d.ts

@@ -0,0 +1,129 @@
+import { z } from "zod";
+export declare const SessionGateKind: z.ZodEnum<["phase_continue", "task_authorization", "risk_approval", "external_input"]>;
+export type SessionGateKind = z.infer<typeof SessionGateKind>;
+/** An agent-reported request, never a grant or proof that a gate passed. */
+export declare const SessionContinuationRequest: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    gate_kind: z.ZodEnum<["phase_continue", "task_authorization", "risk_approval", "external_input"]>;
+    phase: z.ZodString;
+    next_action: z.ZodString;
+    evidence_refs: z.ZodArray<z.ZodObject<{
+        evidence_id: z.ZodString;
+        sha256: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        sha256: string;
+        evidence_id: string;
+    }, {
+        sha256: string;
+        evidence_id: string;
+    }>, "many">;
+}, "strict", z.ZodTypeAny, {
+    phase: string;
+    evidence_refs: {
+        sha256: string;
+        evidence_id: string;
+    }[];
+    version: 1;
+    gate_kind: "phase_continue" | "task_authorization" | "risk_approval" | "external_input";
+    next_action: string;
+}, {
+    phase: string;
+    evidence_refs: {
+        sha256: string;
+        evidence_id: string;
+    }[];
+    version: 1;
+    gate_kind: "phase_continue" | "task_authorization" | "risk_approval" | "external_input";
+    next_action: string;
+}>;
+export type SessionContinuationRequest = z.infer<typeof SessionContinuationRequest>;
+export declare const SessionDecision: z.ZodObject<{
+    decision_id: z.ZodString;
+    question: z.ZodString;
+    choices: z.ZodEffects<z.ZodArray<z.ZodObject<{
+        choice_id: z.ZodString;
+        label: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        choice_id: string;
+        label: string;
+    }, {
+        choice_id: string;
+        label: string;
+    }>, "many">, {
+        choice_id: string;
+        label: string;
+    }[], {
+        choice_id: string;
+        label: string;
+    }[]>;
+    continuation: z.ZodOptional<z.ZodObject<{
+        version: z.ZodLiteral<1>;
+        gate_kind: z.ZodEnum<["phase_continue", "task_authorization", "risk_approval", "external_input"]>;
+        phase: z.ZodString;
+        next_action: z.ZodString;
+        evidence_refs: z.ZodArray<z.ZodObject<{
+            evidence_id: z.ZodString;
+            sha256: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            sha256: string;
+            evidence_id: string;
+        }, {
+            sha256: string;
+            evidence_id: string;
+        }>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        phase: string;
+        evidence_refs: {
+            sha256: string;
+            evidence_id: string;
+        }[];
+        version: 1;
+        gate_kind: "phase_continue" | "task_authorization" | "risk_approval" | "external_input";
+        next_action: string;
+    }, {
+        phase: string;
+        evidence_refs: {
+            sha256: string;
+            evidence_id: string;
+        }[];
+        version: 1;
+        gate_kind: "phase_continue" | "task_authorization" | "risk_approval" | "external_input";
+        next_action: string;
+    }>>;
+}, "strict", z.ZodTypeAny, {
+    decision_id: string;
+    question: string;
+    choices: {
+        choice_id: string;
+        label: string;
+    }[];
+    continuation?: {
+        phase: string;
+        evidence_refs: {
+            sha256: string;
+            evidence_id: string;
+        }[];
+        version: 1;
+        gate_kind: "phase_continue" | "task_authorization" | "risk_approval" | "external_input";
+        next_action: string;
+    } | undefined;
+}, {
+    decision_id: string;
+    question: string;
+    choices: {
+        choice_id: string;
+        label: string;
+    }[];
+    continuation?: {
+        phase: string;
+        evidence_refs: {
+            sha256: string;
+            evidence_id: string;
+        }[];
+        version: 1;
+        gate_kind: "phase_continue" | "task_authorization" | "risk_approval" | "external_input";
+        next_action: string;
+    } | undefined;
+}>;
+export type SessionDecision = z.infer<typeof SessionDecision>;
+//# sourceMappingURL=session-continuation.d.ts.map

package/dist/session-continuation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-continuation.d.ts","sourceRoot":"","sources":["../src/session-continuation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,eAAe,wFAK1B,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D,4EAA4E;AAC5E,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS5B,CAAC;AACZ,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAEpF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAYjB,CAAC;AACZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/session-continuation.js

@@ -0,0 +1,30 @@
+import { z } from "zod";
+const Id = z.string().trim().min(1).max(256);
+export const SessionGateKind = z.enum([
+    "phase_continue",
+    "task_authorization",
+    "risk_approval",
+    "external_input",
+]);
+/** An agent-reported request, never a grant or proof that a gate passed. */
+export const SessionContinuationRequest = z.object({
+    version: z.literal(1),
+    gate_kind: SessionGateKind,
+    phase: Id,
+    next_action: z.string().trim().min(1).max(1_000),
+    evidence_refs: z.array(z.object({
+        evidence_id: Id,
+        sha256: z.string().regex(/^[a-f0-9]{64}$/),
+    }).strict()).max(32),
+}).strict();
+export const SessionDecision = z.object({
+    decision_id: Id,
+    question: z.string().trim().min(1).max(1_000),
+    // Empty choices remain valid for legacy adapters requesting free-form input.
+    choices: z.array(z.object({
+        choice_id: Id,
+        label: z.string().trim().min(1).max(160),
+    }).strict()).max(8).refine((choices) => new Set(choices.map((choice) => choice.choice_id)).size === choices.length, "choice IDs must be unique"),
+    continuation: SessionContinuationRequest.optional(),
+}).strict();
+//# sourceMappingURL=session-continuation.js.map

package/dist/session-continuation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-continuation.js","sourceRoot":"","sources":["../src/session-continuation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAE7C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,gBAAgB;IAChB,oBAAoB;IACpB,eAAe;IACf,gBAAgB;CACjB,CAAC,CAAC;AAGH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,eAAe;IAC1B,KAAK,EAAE,EAAE;IACT,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9B,WAAW,EAAE,EAAE;QACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;KAC3C,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACrB,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,WAAW,EAAE,EAAE;IACf,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC7C,6EAA6E;IAC7E,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACxB,SAAS,EAAE,EAAE;QACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;KACzC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CACxB,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EACvF,2BAA2B,CAC5B;IACD,YAAY,EAAE,0BAA0B,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/task.d.ts

@@ -20,18 +20,18 @@ export declare const Task: z.ZodObject<{
      */
     evaluation: z.ZodOptional<z.ZodArray<z.ZodUnknown, "many">>;
 }, "strict", z.ZodTypeAny, {
+    source: "git_diff" | "gh_issue" | "github_branch" | "ci_log" | "task_queue" | "manual";
     task_id: string;
     capability: string;
     prompt: string;
-    source: "git_diff" | "gh_issue" | "github_branch" | "ci_log" | "task_queue" | "manual";
     priority: number;
     context?: Record<string, unknown> | undefined;
     evaluation?: unknown[] | undefined;
 }, {
+    source: "git_diff" | "gh_issue" | "github_branch" | "ci_log" | "task_queue" | "manual";
     task_id: string;
     capability: string;
     prompt: string;
-    source: "git_diff" | "gh_issue" | "github_branch" | "ci_log" | "task_queue" | "manual";
     priority?: number | undefined;
     context?: Record<string, unknown> | undefined;
     evaluation?: unknown[] | undefined;