@osstack/protocol 0.15.0 → 0.22.0

package/dist/delivery-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-contract.d.ts","sourceRoot":"","sources":["../src/delivery-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAWxB,eAAO,MAAM,oBAAoB,kEAAgE,CAAC;AAClG,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;IAUrC,CAAC;AACH,+FAA+F;AAC/F,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2C7B,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AACpE,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA2G,CAAC;AACjJ,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAChF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;EAA+F,CAAC;AACxI,MAAM,MAAM,2BAA2B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AACtF,yFAAyF;AACzF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0B/B,CAAC;AACZ,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAC1F,eAAO,MAAM,0BAA0B;;;;;;;;;EAA2E,CAAC;AACnH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/delivery-contract.js

@@ -0,0 +1,111 @@
+import { z } from "zod";
+const Digest = z.string().regex(/^[a-f0-9]{64}$/);
+const Commit = z.string().regex(/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/);
+const Id = z.string().min(1).max(256);
+const hasControlCharacter = (value) => [...value].some(char => char.charCodeAt(0) < 32 || char.charCodeAt(0) === 127);
+const Ref = z.string().min(1).max(255).refine((value) => !value.startsWith("-") && !/\s/.test(value) && !hasControlCharacter(value), "unsafe ref");
+const RelativePath = z.string().min(1).max(4096).refine((value) => !value.startsWith("/") && !value.split(/[\\/]/).includes("..") && !hasControlCharacter(value), "unsafe relative path");
+export const DeliveryCompletionV2 = z.enum(["local_verified", "pr_opened", "merged", "deployed"]);
+export const DeliveryPublicationScopeV2 = z.discriminatedUnion("mode", [
+    z.object({ mode: z.literal("none") }).strict(),
+    z.object({
+        mode: z.enum(["push", "draft_pr", "review_pr"]),
+        hostname: z.literal("github.com"),
+        repository: z.string().regex(/^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/),
+        remote: z.string().regex(/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/),
+        base_ref: Ref,
+        head_ref: Ref,
+    }).strict(),
+]);
+/** Scope and authority references constrain existing host authorization. Neither grants it. */
+export const DeliveryContractV2 = z.object({
+    schema_version: z.literal(2),
+    contract_id: Id,
+    parent_contract_id: Id.optional(),
+    task_id: Id,
+    canonical_repo: z.string().min(1).max(4096).refine((value) => value.startsWith("/") && !hasControlCharacter(value), "absolute repo required"),
+    mode: z.enum(["scout", "implement"]),
+    base_head: Commit,
+    goal: z.string().min(1).max(16000),
+    required_checks: z.array(z.object({ id: Id, registry_ref: z.string().regex(/^sha256:[a-f0-9]{64}$/) }).strict()).min(1).max(100),
+    review_policy_ref: Id,
+    requested_completion: DeliveryCompletionV2,
+    allowed_paths: z.array(RelativePath).min(1).max(1000),
+    requested_actions: z.array(z.enum(["build", "verify", "commit", "push", "open_pr", "merge", "deploy:staging", "deploy:production"])).min(1).max(8),
+    budget_ref: Id,
+    policy_digest: Digest,
+    publication_scope: DeliveryPublicationScopeV2,
+    merge_authority: z.discriminatedUnion("mode", [
+        z.object({ mode: z.literal("none") }).strict(),
+        z.object({ mode: z.literal("existing_guarded_policy"), policy_ref: z.string().regex(/^sha256:[a-f0-9]{64}$/) }).strict(),
+    ]),
+}).strict().superRefine((value, context) => {
+    const error = (message) => context.addIssue({ code: z.ZodIssueCode.custom, message });
+    if (new Set(value.required_checks.map((check) => check.id)).size !== value.required_checks.length)
+        error("duplicate check ID");
+    if (new Set(value.required_checks.map((check) => check.registry_ref)).size !== value.required_checks.length)
+        error("duplicate check reference");
+    if (value.mode === "implement" && (!["build", "verify"].every(action => value.requested_actions.includes(action))))
+        error("implement requires build and verify actions");
+    if (["pr_opened", "merged", "deployed"].includes(value.requested_completion)
+        && !["commit", "push", "open_pr"].every(action => value.requested_actions.some(requested => requested === action)))
+        error("published completion requires commit, push and open_pr actions");
+    if (["merged", "deployed"].includes(value.requested_completion) && !value.requested_actions.includes("merge"))
+        error("merged completion requires merge action");
+    if (value.requested_completion === "deployed" && !value.requested_actions.some(action => action.startsWith("deploy:")))
+        error("deployed completion requires an explicit deployment target action");
+    if (value.parent_contract_id === value.contract_id)
+        error("contract cannot parent itself");
+    if (value.mode === "scout" && (value.requested_completion !== "local_verified" || value.publication_scope.mode !== "none"
+        || value.merge_authority.mode !== "none" || value.requested_actions.some((action) => action !== "verify")))
+        error("scout must remain read-only and local");
+    if (value.requested_completion === "local_verified" && (value.publication_scope.mode !== "none"
+        || value.requested_actions.some((action) => !["build", "verify"].includes(action))))
+        error("local completion forbids publication and commit");
+    if (value.requested_completion === "merged" && value.requested_actions.some((action) => action.startsWith("deploy:")))
+        error("merge completion forbids deployment");
+    if (value.requested_completion === "pr_opened" && !["draft_pr", "review_pr"].includes(value.publication_scope.mode))
+        error("PR completion requires PR scope");
+    if (["local_verified", "pr_opened"].includes(value.requested_completion)
+        && (value.merge_authority.mode !== "none" || value.requested_actions.some((action) => action === "merge" || action.startsWith("deploy:"))))
+        error("requested completion forbids merge/deploy authority");
+    if (["merged", "deployed"].includes(value.requested_completion)
+        && (value.publication_scope.mode !== "review_pr" || value.merge_authority.mode !== "existing_guarded_policy"))
+        error("merge requires an existing guarded policy reference");
+    if (value.merge_authority.mode === "existing_guarded_policy" && value.merge_authority.policy_ref !== `sha256:${value.policy_digest}`)
+        error("merge policy reference mismatch");
+    if (value.publication_scope.mode !== "none" && value.publication_scope.base_ref === value.publication_scope.head_ref)
+        error("publication base and head must differ");
+});
+export const FrozenDeliveryContractV2 = z.object({ contract: DeliveryContractV2, digest: Digest, brief: z.string().min(1).max(32000) }).strict();
+export const DeliveryCandidateIdentityV2 = z.object({ base_head: Commit, head: Commit, tree_id: Commit, diff_digest: Digest }).strict();
+/** Host-generated receipt. Parsing validates structure, never establishes provenance. */
+export const DeliveryVerificationReceiptV2 = z.object({
+    schema_version: z.literal(2),
+    source: z.literal("osstack_loop_host"),
+    run_id: Id,
+    task_id: Id,
+    run_kind: z.enum(["guarded-local", "guarded-git"]),
+    contract_digest: Digest,
+    policy_digest: Digest,
+    candidate: DeliveryCandidateIdentityV2,
+    workspace_state_digest: Digest,
+    checks: z.array(z.object({ id: Id, registry_ref: z.string().regex(/^sha256:[a-f0-9]{64}$/), command_digest: Digest,
+        exit_code: z.number().int(), duration_ms: z.number().finite().nonnegative() }).strict()).min(1).max(200),
+    review: z.object({
+        policy_ref: Id,
+        verdict: z.enum(["approved", "changes_requested", "blocked", "inconclusive"]),
+        builder_agent_id: Id,
+        reviewer_agent_id: Id,
+        builder_provider: Id,
+        builder_model: Id,
+        reviewer_provider: Id,
+        reviewer_model: Id,
+        identity_source: z.literal("reported"),
+        artifact_digest: Digest,
+    }).strict(),
+    observed_at: z.string().datetime(),
+    context_receipt_refs: z.array(z.object({ path: z.string().min(1), digest: Digest }).strict()).max(100).default([]),
+}).strict();
+export const DeliveryReceiptReferenceV2 = z.object({ path: z.string().min(1).max(4096), digest: Digest }).strict();
+//# sourceMappingURL=delivery-contract.js.map

package/dist/delivery-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-contract.js","sourceRoot":"","sources":["../src/delivery-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;AAClD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACnE,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACtC,MAAM,mBAAmB,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;AAC9H,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CACtD,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC,CAAC;AAC5F,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAChE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,sBAAsB,CAAC,CAAC;AAEzH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,gBAAgB,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAClG,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACrE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;IAC9C,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QAC/C,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;QACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oCAAoC,CAAC;QAClE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,oCAAoC,CAAC;QAC9D,QAAQ,EAAE,GAAG;QACb,QAAQ,EAAE,GAAG;KACd,CAAC,CAAC,MAAM,EAAE;CACZ,CAAC,CAAC;AACH,+FAA+F;AAC/F,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5B,WAAW,EAAE,EAAE;IACf,kBAAkB,EAAE,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,EAAE;IACX,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,EAAE,wBAAwB,CAAC;IAC7I,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpC,SAAS,EAAE,MAAM;IACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAClC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChI,iBAAiB,EAAE,EAAE;IACrB,oBAAoB,EAAE,oBAAoB;IAC1C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACrD,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAClJ,UAAU,EAAE,EAAE;IACd,aAAa,EAAE,MAAM;IACrB,iBAAiB,EAAE,0BAA0B;IAC7C,eAAe,EAAE,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;QAC5C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;QAC9C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;KACzH,CAAC;CACH,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9F,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,eAAe,CAAC,MAAM;QAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;IAC/H,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,eAAe,CAAC,MAAM;QAAE,KAAK,CAAC,2BAA2B,CAAC,CAAC;IAChJ,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAA4B,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,6CAA6C,CAAC,CAAC;IAC/L,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC;WACvE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC;QAAE,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAC9L,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAChK,IAAI,KAAK,CAAC,oBAAoB,KAAK,UAAU,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAE,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACnM,IAAI,KAAK,CAAC,kBAAkB,KAAK,KAAK,CAAC,WAAW;QAAE,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3F,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,oBAAoB,KAAK,gBAAgB,IAAI,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,MAAM;WACpH,KAAK,CAAC,eAAe,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC;QAAE,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7J,IAAI,KAAK,CAAC,oBAAoB,KAAK,gBAAgB,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,MAAM;WAC1F,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAChJ,IAAI,KAAK,CAAC,oBAAoB,KAAK,QAAQ,IAAI,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAAE,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACpK,IAAI,KAAK,CAAC,oBAAoB,KAAK,WAAW,IAAI,CAAC,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC;QAAE,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9J,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC;WACnE,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,KAAK,OAAO,IAAI,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAAE,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC3M,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC;WAC1D,CAAC,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,WAAW,IAAI,KAAK,CAAC,eAAe,CAAC,IAAI,KAAK,yBAAyB,CAAC;QAAE,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC9K,IAAI,KAAK,CAAC,eAAe,CAAC,IAAI,KAAK,yBAAyB,IAAI,KAAK,CAAC,eAAe,CAAC,UAAU,KAAK,UAAU,KAAK,CAAC,aAAa,EAAE;QAAE,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC/K,IAAI,KAAK,CAAC,iBAAiB,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,QAAQ,KAAK,KAAK,CAAC,iBAAiB,CAAC,QAAQ;QAAE,KAAK,CAAC,uCAAuC,CAAC,CAAC;AACvK,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEjJ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAExI,yFAAyF;AACzF,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5B,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACtC,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,EAAE;IACX,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,EAAE,aAAa,CAAC,CAAC;IAClD,eAAe,EAAE,MAAM;IACvB,aAAa,EAAE,MAAM;IACrB,SAAS,EAAE,2BAA2B;IACtC,sBAAsB,EAAE,MAAM;IAC9B,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,cAAc,EAAE,MAAM;QAChH,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1G,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,EAAE;QACd,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,mBAAmB,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAC7E,gBAAgB,EAAE,EAAE;QACpB,iBAAiB,EAAE,EAAE;QACrB,gBAAgB,EAAE,EAAE;QACpB,aAAa,EAAE,EAAE;QACjB,iBAAiB,EAAE,EAAE;QACrB,cAAc,EAAE,EAAE;QAClB,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;QACtC,eAAe,EAAE,MAAM;KACxB,CAAC,CAAC,MAAM,EAAE;IACX,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,oBAAoB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACnH,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/envelope.d.ts

@@ -263,8 +263,14 @@ export declare const AgentCommandResult: z.ZodEffects<z.ZodObject<{
         retryable: boolean;
     }>>>;
 }, "strict", z.ZodTypeAny, {
-    status: "blocked" | "ok" | "needs_approval" | "error";
+    status: "ok" | "blocked" | "needs_approval" | "error";
     protocol_version: string;
+    evidence_refs?: {
+        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
+        ref: string;
+        run_id?: string | undefined;
+        sha256?: string | undefined;
+    }[] | undefined;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
         message: string;
@@ -278,19 +284,19 @@ export declare const AgentCommandResult: z.ZodEffects<z.ZodObject<{
         run_id?: string | undefined;
     }[] | undefined;
     result?: Record<string, unknown> | undefined;
-    evidence_refs?: {
-        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
-        ref: string;
-        run_id?: string | undefined;
-        sha256?: string | undefined;
-    }[] | undefined;
     next_actions?: {
         reason: string;
         command: string;
     }[] | undefined;
 }, {
-    status: "blocked" | "ok" | "needs_approval" | "error";
+    status: "ok" | "blocked" | "needs_approval" | "error";
     protocol_version: string;
+    evidence_refs?: {
+        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
+        ref: string;
+        run_id?: string | undefined;
+        sha256?: string | undefined;
+    }[] | undefined;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
         message: string;
@@ -304,19 +310,19 @@ export declare const AgentCommandResult: z.ZodEffects<z.ZodObject<{
         run_id?: string | undefined;
     }[] | undefined;
     result?: Record<string, unknown> | undefined;
-    evidence_refs?: {
-        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
-        ref: string;
-        run_id?: string | undefined;
-        sha256?: string | undefined;
-    }[] | undefined;
     next_actions?: {
         reason: string;
         command: string;
     }[] | undefined;
 }>, {
-    status: "blocked" | "ok" | "needs_approval" | "error";
+    status: "ok" | "blocked" | "needs_approval" | "error";
     protocol_version: string;
+    evidence_refs?: {
+        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
+        ref: string;
+        run_id?: string | undefined;
+        sha256?: string | undefined;
+    }[] | undefined;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
         message: string;
@@ -330,19 +336,19 @@ export declare const AgentCommandResult: z.ZodEffects<z.ZodObject<{
         run_id?: string | undefined;
     }[] | undefined;
     result?: Record<string, unknown> | undefined;
-    evidence_refs?: {
-        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
-        ref: string;
-        run_id?: string | undefined;
-        sha256?: string | undefined;
-    }[] | undefined;
     next_actions?: {
         reason: string;
         command: string;
     }[] | undefined;
 }, {
-    status: "blocked" | "ok" | "needs_approval" | "error";
+    status: "ok" | "blocked" | "needs_approval" | "error";
     protocol_version: string;
+    evidence_refs?: {
+        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
+        ref: string;
+        run_id?: string | undefined;
+        sha256?: string | undefined;
+    }[] | undefined;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
         message: string;
@@ -356,12 +362,6 @@ export declare const AgentCommandResult: z.ZodEffects<z.ZodObject<{
         run_id?: string | undefined;
     }[] | undefined;
     result?: Record<string, unknown> | undefined;
-    evidence_refs?: {
-        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
-        ref: string;
-        run_id?: string | undefined;
-        sha256?: string | undefined;
-    }[] | undefined;
     next_actions?: {
         reason: string;
         command: string;
@@ -826,8 +826,14 @@ export declare const AgentCommandResultObject: z.ZodObject<{
         retryable: boolean;
     }>>>;
 }, "strict", z.ZodTypeAny, {
-    status: "blocked" | "ok" | "needs_approval" | "error";
+    status: "ok" | "blocked" | "needs_approval" | "error";
     protocol_version: string;
+    evidence_refs?: {
+        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
+        ref: string;
+        run_id?: string | undefined;
+        sha256?: string | undefined;
+    }[] | undefined;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
         message: string;
@@ -841,19 +847,19 @@ export declare const AgentCommandResultObject: z.ZodObject<{
         run_id?: string | undefined;
     }[] | undefined;
     result?: Record<string, unknown> | undefined;
-    evidence_refs?: {
-        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
-        ref: string;
-        run_id?: string | undefined;
-        sha256?: string | undefined;
-    }[] | undefined;
     next_actions?: {
         reason: string;
         command: string;
     }[] | undefined;
 }, {
-    status: "blocked" | "ok" | "needs_approval" | "error";
+    status: "ok" | "blocked" | "needs_approval" | "error";
     protocol_version: string;
+    evidence_refs?: {
+        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
+        ref: string;
+        run_id?: string | undefined;
+        sha256?: string | undefined;
+    }[] | undefined;
     error?: {
         code: "bad_request" | "unsupported_protocol_version" | "unknown_command" | "policy_denied" | "not_found" | "conflict" | "budget_exceeded" | "internal";
         message: string;
@@ -867,12 +873,6 @@ export declare const AgentCommandResultObject: z.ZodObject<{
         run_id?: string | undefined;
     }[] | undefined;
     result?: Record<string, unknown> | undefined;
-    evidence_refs?: {
-        kind: "report" | "scorecard" | "proof" | "loop_state" | "external";
-        ref: string;
-        run_id?: string | undefined;
-        sha256?: string | undefined;
-    }[] | undefined;
     next_actions?: {
         reason: string;
         command: string;

package/dist/event.d.ts

@@ -16,20 +16,20 @@ export declare const EventEnvelope: z.ZodObject<{
 }, "strict", z.ZodTypeAny, {
     type: string;
     run_id: string;
+    session_id: string;
+    created_at: number;
     payload: Record<string, unknown>;
     event_id: string;
     seq: number;
-    session_id: string;
-    created_at: number;
     terminal: boolean;
 }, {
     type: string;
     run_id: string;
+    session_id: string;
+    created_at: number;
     payload: Record<string, unknown>;
     event_id: string;
     seq: number;
-    session_id: string;
-    created_at: number;
     terminal?: boolean | undefined;
 }>;
 export type EventEnvelope = z.infer<typeof EventEnvelope>;