@peac/schema 0.10.9 → 0.10.10

package/dist/workflow.mjs

@@ -0,0 +1,292 @@
+import { z } from 'zod';
+
+// src/workflow.ts
+var WORKFLOW_EXTENSION_KEY = "org.peacprotocol/workflow";
+var WORKFLOW_SUMMARY_TYPE = "peac/workflow-summary";
+var WORKFLOW_STATUSES = ["in_progress", "completed", "failed", "cancelled"];
+var WELL_KNOWN_FRAMEWORKS = [
+  "mcp",
+  "a2a",
+  "crewai",
+  "langgraph",
+  "autogen",
+  "custom"
+];
+var ORCHESTRATION_FRAMEWORKS = WELL_KNOWN_FRAMEWORKS;
+var FRAMEWORK_ID_PATTERN = /^[a-z][a-z0-9_-]*$/;
+var WORKFLOW_LIMITS = {
+  /** Maximum parent steps per step (DAG fan-in) */
+  maxParentSteps: 16,
+  /** Maximum workflow ID length */
+  maxWorkflowIdLength: 128,
+  /** Maximum step ID length */
+  maxStepIdLength: 128,
+  /** Maximum tool name length */
+  maxToolNameLength: 256,
+  /** Maximum framework identifier length */
+  maxFrameworkLength: 64,
+  /** Maximum agents in a workflow summary */
+  maxAgentsInvolved: 100,
+  /** Maximum receipt refs in a workflow summary */
+  maxReceiptRefs: 1e4,
+  /** Maximum error message length */
+  maxErrorMessageLength: 1024
+};
+var WORKFLOW_ID_PATTERN = /^wf_[a-zA-Z0-9_-]{20,48}$/;
+var STEP_ID_PATTERN = /^step_[a-zA-Z0-9_-]{20,48}$/;
+var WorkflowIdSchema = z.string().regex(WORKFLOW_ID_PATTERN, "Invalid workflow ID format (expected wf_{ulid|uuid})").max(WORKFLOW_LIMITS.maxWorkflowIdLength);
+var StepIdSchema = z.string().regex(STEP_ID_PATTERN, "Invalid step ID format (expected step_{ulid|uuid})").max(WORKFLOW_LIMITS.maxStepIdLength);
+var WorkflowStatusSchema = z.enum(WORKFLOW_STATUSES);
+var OrchestrationFrameworkSchema = z.string().regex(
+  FRAMEWORK_ID_PATTERN,
+  "Invalid framework identifier (must be lowercase alphanumeric with hyphens/underscores, starting with a letter)"
+).max(WORKFLOW_LIMITS.maxFrameworkLength);
+var WorkflowContextSchema = z.object({
+  // Correlation
+  /** Globally unique workflow/run ID */
+  workflow_id: WorkflowIdSchema,
+  /** This step's unique ID */
+  step_id: StepIdSchema,
+  /** DAG parent step IDs (empty array for root step) */
+  parent_step_ids: z.array(StepIdSchema).max(WORKFLOW_LIMITS.maxParentSteps).default([]),
+  // Orchestration identity
+  /** Agent identity ref of the orchestrator (optional) */
+  orchestrator_id: z.string().max(256).optional(),
+  /** Receipt ID that initiated this workflow (optional) */
+  orchestrator_receipt_ref: z.string().max(256).optional(),
+  // Sequencing (for linear workflows)
+  /** 0-based position in sequential runs (optional) */
+  step_index: z.number().int().nonnegative().optional(),
+  /** Total steps if known upfront (optional) */
+  step_total: z.number().int().positive().optional(),
+  // Metadata
+  /** Tool or skill name (MCP tool, A2A skill, etc.) */
+  tool_name: z.string().max(WORKFLOW_LIMITS.maxToolNameLength).optional(),
+  /** Orchestration framework */
+  framework: OrchestrationFrameworkSchema.optional(),
+  // Hash chain (for streaming/progressive receipts)
+  /** SHA-256 hash of previous receipt in chain (for ordering) */
+  prev_receipt_hash: z.string().regex(/^sha256:[a-f0-9]{64}$/).optional()
+}).strict();
+var WorkflowErrorContextSchema = z.object({
+  /** Step ID where failure occurred */
+  failed_step_id: StepIdSchema,
+  /** Error code (E_* format preferred) */
+  error_code: z.string().max(64),
+  /** Human-readable error message */
+  error_message: z.string().max(WORKFLOW_LIMITS.maxErrorMessageLength)
+}).strict();
+var WorkflowSummaryEvidenceSchema = z.object({
+  /** Workflow ID this summary describes */
+  workflow_id: WorkflowIdSchema,
+  /** Workflow status */
+  status: WorkflowStatusSchema,
+  /** When the workflow started (ISO 8601) */
+  started_at: z.string().datetime(),
+  /** When the workflow completed (ISO 8601, undefined if in_progress) */
+  completed_at: z.string().datetime().optional(),
+  // Receipt commitment
+  /** Ordered list of receipt IDs (for small workflows) */
+  receipt_refs: z.array(z.string().max(256)).max(WORKFLOW_LIMITS.maxReceiptRefs).optional(),
+  /** Merkle root of receipt digests (for large workflows, RFC 6962 style) */
+  receipt_merkle_root: z.string().regex(/^sha256:[a-f0-9]{64}$/).optional(),
+  /** Total receipt count (required if using Merkle root) */
+  receipt_count: z.number().int().nonnegative().optional(),
+  // Orchestration
+  /** Agent identity ref of the orchestrator */
+  orchestrator_id: z.string().max(256),
+  /** List of agent IDs involved in the workflow */
+  agents_involved: z.array(z.string().max(256)).max(WORKFLOW_LIMITS.maxAgentsInvolved),
+  // Outcome
+  /** SHA-256 hash of final output artifact (optional) */
+  final_result_hash: z.string().regex(/^sha256:[a-f0-9]{64}$/).optional(),
+  /** Error context if workflow failed */
+  error_context: WorkflowErrorContextSchema.optional()
+}).strict().refine(
+  (data) => {
+    return data.receipt_refs !== void 0 || data.receipt_merkle_root !== void 0;
+  },
+  {
+    message: "Workflow summary must include receipt_refs or receipt_merkle_root"
+  }
+).refine(
+  (data) => {
+    if (data.receipt_merkle_root !== void 0 && data.receipt_count === void 0) {
+      return false;
+    }
+    return true;
+  },
+  {
+    message: "receipt_count is required when using receipt_merkle_root"
+  }
+);
+var WorkflowSummaryAttestationSchema = z.object({
+  /** Attestation type (must be 'peac/workflow-summary') */
+  type: z.literal(WORKFLOW_SUMMARY_TYPE),
+  /** Who issued this attestation (HTTPS URL) */
+  issuer: z.string().url().startsWith("https://"),
+  /** When this attestation was issued (ISO 8601) */
+  issued_at: z.string().datetime(),
+  /** When this attestation expires (ISO 8601, optional) */
+  expires_at: z.string().datetime().optional(),
+  /** The workflow summary evidence */
+  evidence: WorkflowSummaryEvidenceSchema
+}).strict();
+function validateWorkflowContextOrdered(input) {
+  if (typeof input !== "object" || input === null) {
+    return {
+      valid: false,
+      error_code: "E_WORKFLOW_CONTEXT_INVALID",
+      error: "Input must be an object"
+    };
+  }
+  const obj = input;
+  if (typeof obj.workflow_id !== "string" || !WORKFLOW_ID_PATTERN.test(obj.workflow_id) || obj.workflow_id.length > WORKFLOW_LIMITS.maxWorkflowIdLength) {
+    return {
+      valid: false,
+      error_code: "E_WORKFLOW_ID_INVALID",
+      error: "Invalid workflow ID format"
+    };
+  }
+  if (typeof obj.step_id !== "string" || !STEP_ID_PATTERN.test(obj.step_id) || obj.step_id.length > WORKFLOW_LIMITS.maxStepIdLength) {
+    return {
+      valid: false,
+      error_code: "E_WORKFLOW_STEP_ID_INVALID",
+      error: "Invalid step ID format"
+    };
+  }
+  const parentStepIds = obj.parent_step_ids;
+  if (Array.isArray(parentStepIds) && parentStepIds.length > WORKFLOW_LIMITS.maxParentSteps) {
+    return {
+      valid: false,
+      error_code: "E_WORKFLOW_LIMIT_EXCEEDED",
+      error: "Exceeds maximum parent steps"
+    };
+  }
+  if (obj.framework !== void 0) {
+    if (typeof obj.framework !== "string" || !FRAMEWORK_ID_PATTERN.test(obj.framework) || obj.framework.length > WORKFLOW_LIMITS.maxFrameworkLength) {
+      return {
+        valid: false,
+        error_code: "E_WORKFLOW_CONTEXT_INVALID",
+        error: "Invalid framework identifier grammar"
+      };
+    }
+  }
+  if (obj.prev_receipt_hash !== void 0) {
+    if (typeof obj.prev_receipt_hash !== "string" || !/^sha256:[a-f0-9]{64}$/.test(obj.prev_receipt_hash)) {
+      return {
+        valid: false,
+        error_code: "E_WORKFLOW_CONTEXT_INVALID",
+        error: "Invalid hash format"
+      };
+    }
+  }
+  if (Array.isArray(parentStepIds)) {
+    if (parentStepIds.includes(obj.step_id)) {
+      return {
+        valid: false,
+        error_code: "E_WORKFLOW_DAG_INVALID",
+        error: "Self-parent cycle detected"
+      };
+    }
+    const uniqueParents = new Set(parentStepIds);
+    if (uniqueParents.size !== parentStepIds.length) {
+      return {
+        valid: false,
+        error_code: "E_WORKFLOW_DAG_INVALID",
+        error: "Duplicate parent step IDs"
+      };
+    }
+  }
+  const result = WorkflowContextSchema.safeParse(input);
+  if (!result.success) {
+    return {
+      valid: false,
+      error_code: "E_WORKFLOW_CONTEXT_INVALID",
+      error: result.error.issues[0]?.message || "Schema validation failed"
+    };
+  }
+  return { valid: true, value: result.data };
+}
+function createWorkflowId(id) {
+  const workflowId = `wf_${id}`;
+  return WorkflowIdSchema.parse(workflowId);
+}
+function createStepId(id) {
+  const stepId = `step_${id}`;
+  return StepIdSchema.parse(stepId);
+}
+function validateWorkflowContext(context) {
+  return WorkflowContextSchema.parse(context);
+}
+function isValidWorkflowContext(context) {
+  return WorkflowContextSchema.safeParse(context).success;
+}
+function validateWorkflowSummaryAttestation(attestation) {
+  return WorkflowSummaryAttestationSchema.parse(attestation);
+}
+function isWorkflowSummaryAttestation(attestation) {
+  return WorkflowSummaryAttestationSchema.safeParse(attestation).success;
+}
+function isTerminalWorkflowStatus(status) {
+  return status === "completed" || status === "failed" || status === "cancelled";
+}
+function hasValidDagSemantics(context) {
+  if (context.parent_step_ids.includes(context.step_id)) {
+    return false;
+  }
+  const uniqueParents = new Set(context.parent_step_ids);
+  if (uniqueParents.size !== context.parent_step_ids.length) {
+    return false;
+  }
+  return true;
+}
+function createWorkflowContext(params) {
+  const context = {
+    workflow_id: params.workflow_id,
+    step_id: params.step_id,
+    parent_step_ids: params.parent_step_ids ?? [],
+    ...params.orchestrator_id && { orchestrator_id: params.orchestrator_id },
+    ...params.orchestrator_receipt_ref && {
+      orchestrator_receipt_ref: params.orchestrator_receipt_ref
+    },
+    ...params.step_index !== void 0 && { step_index: params.step_index },
+    ...params.step_total !== void 0 && { step_total: params.step_total },
+    ...params.tool_name && { tool_name: params.tool_name },
+    ...params.framework && { framework: params.framework },
+    ...params.prev_receipt_hash && { prev_receipt_hash: params.prev_receipt_hash }
+  };
+  const validated = validateWorkflowContext(context);
+  if (!hasValidDagSemantics(validated)) {
+    throw new Error(
+      "Invalid DAG semantics: step cannot be its own parent or have duplicate parents"
+    );
+  }
+  return validated;
+}
+function createWorkflowSummaryAttestation(params) {
+  const attestation = {
+    type: WORKFLOW_SUMMARY_TYPE,
+    issuer: params.issuer,
+    issued_at: params.issued_at,
+    ...params.expires_at && { expires_at: params.expires_at },
+    evidence: {
+      workflow_id: params.workflow_id,
+      status: params.status,
+      started_at: params.started_at,
+      ...params.completed_at && { completed_at: params.completed_at },
+      ...params.receipt_refs && { receipt_refs: params.receipt_refs },
+      ...params.receipt_merkle_root && { receipt_merkle_root: params.receipt_merkle_root },
+      ...params.receipt_count !== void 0 && { receipt_count: params.receipt_count },
+      orchestrator_id: params.orchestrator_id,
+      agents_involved: params.agents_involved,
+      ...params.final_result_hash && { final_result_hash: params.final_result_hash },
+      ...params.error_context && { error_context: params.error_context }
+    }
+  };
+  return validateWorkflowSummaryAttestation(attestation);
+}
+
+export { FRAMEWORK_ID_PATTERN, ORCHESTRATION_FRAMEWORKS, OrchestrationFrameworkSchema, STEP_ID_PATTERN, StepIdSchema, WELL_KNOWN_FRAMEWORKS, WORKFLOW_EXTENSION_KEY, WORKFLOW_ID_PATTERN, WORKFLOW_LIMITS, WORKFLOW_STATUSES, WORKFLOW_SUMMARY_TYPE, WorkflowContextSchema, WorkflowErrorContextSchema, WorkflowIdSchema, WorkflowStatusSchema, WorkflowSummaryAttestationSchema, WorkflowSummaryEvidenceSchema, createStepId, createWorkflowContext, createWorkflowId, createWorkflowSummaryAttestation, hasValidDagSemantics, isTerminalWorkflowStatus, isValidWorkflowContext, isWorkflowSummaryAttestation, validateWorkflowContext, validateWorkflowContextOrdered, validateWorkflowSummaryAttestation };
+//# sourceMappingURL=workflow.mjs.map
+//# sourceMappingURL=workflow.mjs.map

package/dist/workflow.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/workflow.ts"],"names":[],"mappings":";;;AA0BO,IAAM,sBAAA,GAAyB;AAK/B,IAAM,qBAAA,GAAwB;AAK9B,IAAM,iBAAA,GAAoB,CAAC,aAAA,EAAe,WAAA,EAAa,UAAU,WAAW;AAW5E,IAAM,qBAAA,GAAwB;AAAA,EACnC,KAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF;AAKO,IAAM,wBAAA,GAA2B;AASjC,IAAM,oBAAA,GAAuB;AAK7B,IAAM,eAAA,GAAkB;AAAA;AAAA,EAE7B,cAAA,EAAgB,EAAA;AAAA;AAAA,EAEhB,mBAAA,EAAqB,GAAA;AAAA;AAAA,EAErB,eAAA,EAAiB,GAAA;AAAA;AAAA,EAEjB,iBAAA,EAAmB,GAAA;AAAA;AAAA,EAEnB,kBAAA,EAAoB,EAAA;AAAA;AAAA,EAEpB,iBAAA,EAAmB,GAAA;AAAA;AAAA,EAEnB,cAAA,EAAgB,GAAA;AAAA;AAAA,EAEhB,qBAAA,EAAuB;AACzB;AAYO,IAAM,mBAAA,GAAsB;AAQ5B,IAAM,eAAA,GAAkB;AASxB,IAAM,gBAAA,GAAmB,CAAA,CAC7B,MAAA,EAAO,CACP,KAAA,CAAM,qBAAqB,sDAAsD,CAAA,CACjF,GAAA,CAAI,eAAA,CAAgB,mBAAmB;AAKnC,IAAM,YAAA,GAAe,CAAA,CACzB,MAAA,EAAO,CACP,KAAA,CAAM,iBAAiB,oDAAoD,CAAA,CAC3E,GAAA,CAAI,eAAA,CAAgB,eAAe;AAK/B,IAAM,oBAAA,GAAuB,CAAA,CAAE,IAAA,CAAK,iBAAiB;AAWrD,IAAM,4BAAA,GAA+B,CAAA,CACzC,MAAA,EAAO,CACP,KAAA;AAAA,EACC,oBAAA;AAAA,EACA;AACF,CAAA,CACC,GAAA,CAAI,gBAAgB,kBAAkB;AAQlC,IAAM,qBAAA,GAAwB,EAClC,MAAA,CAAO;AAAA;AAAA;AAAA,EAGN,WAAA,EAAa,gBAAA;AAAA;AAAA,EAGb,OAAA,EAAS,YAAA;AAAA;AAAA,EAGT,eAAA,EAAiB,CAAA,CAAE,KAAA,CAAM,YAAY,CAAA,CAAE,GAAA,CAAI,eAAA,CAAgB,cAAc,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AAAA;AAAA;AAAA,EAIrF,iBAAiB,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA,EAAS;AAAA;AAAA,EAG9C,0BAA0B,CAAA,CAAE,MAAA,GAAS,GAAA,CAAI,GAAG,EAAE,QAAA,EAAS;AAAA;AAAA;AAAA,EAIvD,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,WAAA,GAAc,QAAA,EAAS;AAAA;AAAA,EAGpD,UAAA,EAAY,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,GAAW,QAAA,EAAS;AAAA;AAAA;AAAA,EAIjD,SAAA,EAAW,EAAE,MAAA,EAAO,CAAE,IAAI,eAAA,CAAgB,iBAAiB,EAAE,QAAA,EAAS;AAAA;AAAA,EAGtE,SAAA,EAAW,6BAA6B,QAAA,EAAS;AAAA;AAAA;AAAA,EAIjD,mBAAmB,CAAA,CAChB,MAAA,GACA,KAAA,CAAM,uBAAuB,EAC7B,QAAA;AACL,CAAC,EACA,MAAA;AAKI,IAAM,0BAAA,GAA6B,EACvC,MAAA,CAAO;AAAA;AAAA,EAEN,cAAA,EAAgB,YAAA;AAAA;AAAA,EAGhB,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,EAAE,CAAA;AAAA;AAAA,EAG7B,eAAe,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,gBAAgB,qBAAqB;AACrE,CAAC,EACA,MAAA;AAQI,IAAM,6BAAA,GAAgC,EAC1C,MAAA,CAAO;AAAA;AAAA,EAEN,WAAA,EAAa,gBAAA;AAAA;AAAA,EAGb,MAAA,EAAQ,oBAAA;AAAA;AAAA,EAGR,UAAA,EAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAGhC,cAAc,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,GAAW,QAAA,EAAS;AAAA;AAAA;AAAA,EAI7C,YAAA,EAAc,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,GAAG,CAAC,CAAA,CAAE,GAAA,CAAI,eAAA,CAAgB,cAAc,EAAE,QAAA,EAAS;AAAA;AAAA,EAGxF,qBAAqB,CAAA,CAClB,MAAA,GACA,KAAA,CAAM,uBAAuB,EAC7B,QAAA,EAAS;AAAA;AAAA,EAGZ,aAAA,EAAe,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,WAAA,GAAc,QAAA,EAAS;AAAA;AAAA;AAAA,EAIvD,eAAA,EAAiB,CAAA,CAAE,MAAA,EAAO,CAAE,IAAI,GAAG,CAAA;AAAA;AAAA,EAGnC,eAAA,EAAiB,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,CAAC,CAAA,CAAE,GAAA,CAAI,eAAA,CAAgB,iBAAiB,CAAA;AAAA;AAAA;AAAA,EAInF,mBAAmB,CAAA,CAChB,MAAA,GACA,KAAA,CAAM,uBAAuB,EAC7B,QAAA,EAAS;AAAA;AAAA,EAGZ,aAAA,EAAe,2BAA2B,QAAA;AAC5C,CAAC,CAAA,CACA,QAAO,CACP,MAAA;AAAA,EACC,CAAC,IAAA,KAAS;AAER,IAAA,OAAO,IAAA,CAAK,YAAA,KAAiB,MAAA,IAAa,IAAA,CAAK,mBAAA,KAAwB,MAAA;AAAA,EACzE,CAAA;AAAA,EACA;AAAA,IACE,OAAA,EAAS;AAAA;AAEb,CAAA,CACC,MAAA;AAAA,EACC,CAAC,IAAA,KAAS;AAER,IAAA,IAAI,IAAA,CAAK,mBAAA,KAAwB,MAAA,IAAa,IAAA,CAAK,kBAAkB,MAAA,EAAW;AAC9E,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,OAAO,IAAA;AAAA,EACT,CAAA;AAAA,EACA;AAAA,IACE,OAAA,EAAS;AAAA;AAEb;AAOK,IAAM,gCAAA,GAAmC,EAC7C,MAAA,CAAO;AAAA;AAAA,EAEN,IAAA,EAAM,CAAA,CAAE,OAAA,CAAQ,qBAAqB,CAAA;AAAA;AAAA,EAGrC,QAAQ,CAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,WAAW,UAAU,CAAA;AAAA;AAAA,EAG9C,SAAA,EAAW,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,EAAS;AAAA;AAAA,EAG/B,YAAY,CAAA,CAAE,MAAA,EAAO,CAAE,QAAA,GAAW,QAAA,EAAS;AAAA;AAAA,EAG3C,QAAA,EAAU;AACZ,CAAC,EACA,MAAA;AA6CI,SAAS,+BAA+B,KAAA,EAA0C;AACvF,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,KAAA,KAAU,IAAA,EAAM;AAC/C,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,UAAA,EAAY,4BAAA;AAAA,MACZ,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,MAAM,GAAA,GAAM,KAAA;AAGZ,EAAA,IACE,OAAO,GAAA,CAAI,WAAA,KAAgB,QAAA,IAC3B,CAAC,mBAAA,CAAoB,IAAA,CAAK,GAAA,CAAI,WAAW,CAAA,IACzC,GAAA,CAAI,WAAA,CAAY,MAAA,GAAS,gBAAgB,mBAAA,EACzC;AACA,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,UAAA,EAAY,uBAAA;AAAA,MACZ,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAEA,EAAA,IACE,OAAO,GAAA,CAAI,OAAA,KAAY,QAAA,IACvB,CAAC,eAAA,CAAgB,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,IACjC,GAAA,CAAI,OAAA,CAAQ,MAAA,GAAS,gBAAgB,eAAA,EACrC;AACA,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,UAAA,EAAY,4BAAA;AAAA,MACZ,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAGA,EAAA,MAAM,gBAAgB,GAAA,CAAI,eAAA;AAC1B,EAAA,IAAI,MAAM,OAAA,CAAQ,aAAa,KAAK,aAAA,CAAc,MAAA,GAAS,gBAAgB,cAAA,EAAgB;AACzF,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,UAAA,EAAY,2BAAA;AAAA,MACZ,KAAA,EAAO;AAAA,KACT;AAAA,EACF;AAGA,EAAA,IAAI,GAAA,CAAI,cAAc,MAAA,EAAW;AAC/B,IAAA,IACE,OAAO,GAAA,CAAI,SAAA,KAAc,QAAA,IACzB,CAAC,oBAAA,CAAqB,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA,IACxC,GAAA,CAAI,SAAA,CAAU,MAAA,GAAS,gBAAgB,kBAAA,EACvC;AACA,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,UAAA,EAAY,4BAAA;AAAA,QACZ,KAAA,EAAO;AAAA,OACT;AAAA,IACF;AAAA,EACF;AAEA,EAAA,IAAI,GAAA,CAAI,sBAAsB,MAAA,EAAW;AACvC,IAAA,IACE,OAAO,IAAI,iBAAA,KAAsB,QAAA,IACjC,CAAC,uBAAA,CAAwB,IAAA,CAAK,GAAA,CAAI,iBAAiB,CAAA,EACnD;AACA,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,UAAA,EAAY,4BAAA;AAAA,QACZ,KAAA,EAAO;AAAA,OACT;AAAA,IACF;AAAA,EACF;AAGA,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,aAAa,CAAA,EAAG;AAChC,IAAA,IAAI,aAAA,CAAc,QAAA,CAAS,GAAA,CAAI,OAAO,CAAA,EAAG;AACvC,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,UAAA,EAAY,wBAAA;AAAA,QACZ,KAAA,EAAO;AAAA,OACT;AAAA,IACF;AACA,IAAA,MAAM,aAAA,GAAgB,IAAI,GAAA,CAAI,aAAa,CAAA;AAC3C,IAAA,IAAI,aAAA,CAAc,IAAA,KAAS,aAAA,CAAc,MAAA,EAAQ;AAC/C,MAAA,OAAO;AAAA,QACL,KAAA,EAAO,KAAA;AAAA,QACP,UAAA,EAAY,wBAAA;AAAA,QACZ,KAAA,EAAO;AAAA,OACT;AAAA,IACF;AAAA,EACF;AAGA,EAAA,MAAM,MAAA,GAAS,qBAAA,CAAsB,SAAA,CAAU,KAAK,CAAA;AACpD,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,OAAO;AAAA,MACL,KAAA,EAAO,KAAA;AAAA,MACP,UAAA,EAAY,4BAAA;AAAA,MACZ,OAAO,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,CAAC,GAAG,OAAA,IAAW;AAAA,KAC5C;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,KAAA,EAAO,OAAO,IAAA,EAAK;AAC3C;AAYO,SAAS,iBAAiB,EAAA,EAAwB;AACvD,EAAA,MAAM,UAAA,GAAa,MAAM,EAAE,CAAA,CAAA;AAC3B,EAAA,OAAO,gBAAA,CAAiB,MAAM,UAAU,CAAA;AAC1C;AAQO,SAAS,aAAa,EAAA,EAAoB;AAC/C,EAAA,MAAM,MAAA,GAAS,QAAQ,EAAE,CAAA,CAAA;AACzB,EAAA,OAAO,YAAA,CAAa,MAAM,MAAM,CAAA;AAClC;AASO,SAAS,wBAAwB,OAAA,EAAmC;AACzE,EAAA,OAAO,qBAAA,CAAsB,MAAM,OAAO,CAAA;AAC5C;AAQO,SAAS,uBAAuB,OAAA,EAA8C;AACnF,EAAA,OAAO,qBAAA,CAAsB,SAAA,CAAU,OAAO,CAAA,CAAE,OAAA;AAClD;AASO,SAAS,mCACd,WAAA,EAC4B;AAC5B,EAAA,OAAO,gCAAA,CAAiC,MAAM,WAAW,CAAA;AAC3D;AAQO,SAAS,6BACd,WAAA,EAC2C;AAC3C,EAAA,OAAO,gCAAA,CAAiC,SAAA,CAAU,WAAW,CAAA,CAAE,OAAA;AACjE;AAQO,SAAS,yBAAyB,MAAA,EAAiC;AACxE,EAAA,OAAO,MAAA,KAAW,WAAA,IAAe,MAAA,KAAW,QAAA,IAAY,MAAA,KAAW,WAAA;AACrE;AAQO,SAAS,qBAAqB,OAAA,EAAmC;AAEtE,EAAA,IAAI,OAAA,CAAQ,eAAA,CAAgB,QAAA,CAAS,OAAA,CAAQ,OAAO,CAAA,EAAG;AACrD,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,MAAM,aAAA,GAAgB,IAAI,GAAA,CAAI,OAAA,CAAQ,eAAe,CAAA;AACrD,EAAA,IAAI,aAAA,CAAc,IAAA,KAAS,OAAA,CAAQ,eAAA,CAAgB,MAAA,EAAQ;AACzD,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,IAAA;AACT;AAQO,SAAS,sBAAsB,MAAA,EAWlB;AAClB,EAAA,MAAM,OAAA,GAA2B;AAAA,IAC/B,aAAa,MAAA,CAAO,WAAA;AAAA,IACpB,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,eAAA,EAAkB,MAAA,CAAO,eAAA,IAAmB,EAAC;AAAA,IAC7C,GAAI,MAAA,CAAO,eAAA,IAAmB,EAAE,eAAA,EAAiB,OAAO,eAAA,EAAgB;AAAA,IACxE,GAAI,OAAO,wBAAA,IAA4B;AAAA,MACrC,0BAA0B,MAAA,CAAO;AAAA,KACnC;AAAA,IACA,GAAI,MAAA,CAAO,UAAA,KAAe,UAAa,EAAE,UAAA,EAAY,OAAO,UAAA,EAAW;AAAA,IACvE,GAAI,MAAA,CAAO,UAAA,KAAe,UAAa,EAAE,UAAA,EAAY,OAAO,UAAA,EAAW;AAAA,IACvE,GAAI,MAAA,CAAO,SAAA,IAAa,EAAE,SAAA,EAAW,OAAO,SAAA,EAAU;AAAA,IACtD,GAAI,MAAA,CAAO,SAAA,IAAa,EAAE,SAAA,EAAW,OAAO,SAAA,EAAU;AAAA,IACtD,GAAI,MAAA,CAAO,iBAAA,IAAqB,EAAE,iBAAA,EAAmB,OAAO,iBAAA;AAAkB,GAChF;AAGA,EAAA,MAAM,SAAA,GAAY,wBAAwB,OAAO,CAAA;AAGjD,EAAA,IAAI,CAAC,oBAAA,CAAqB,SAAS,CAAA,EAAG;AACpC,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO,SAAA;AACT;AA4BO,SAAS,iCACd,MAAA,EAC4B;AAC5B,EAAA,MAAM,WAAA,GAA0C;AAAA,IAC9C,IAAA,EAAM,qBAAA;AAAA,IACN,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,WAAW,MAAA,CAAO,SAAA;AAAA,IAClB,GAAI,MAAA,CAAO,UAAA,IAAc,EAAE,UAAA,EAAY,OAAO,UAAA,EAAW;AAAA,IACzD,QAAA,EAAU;AAAA,MACR,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,GAAI,MAAA,CAAO,YAAA,IAAgB,EAAE,YAAA,EAAc,OAAO,YAAA,EAAa;AAAA,MAC/D,GAAI,MAAA,CAAO,YAAA,IAAgB,EAAE,YAAA,EAAc,OAAO,YAAA,EAAa;AAAA,MAC/D,GAAI,MAAA,CAAO,mBAAA,IAAuB,EAAE,mBAAA,EAAqB,OAAO,mBAAA,EAAoB;AAAA,MACpF,GAAI,MAAA,CAAO,aAAA,KAAkB,UAAa,EAAE,aAAA,EAAe,OAAO,aAAA,EAAc;AAAA,MAChF,iBAAiB,MAAA,CAAO,eAAA;AAAA,MACxB,iBAAiB,MAAA,CAAO,eAAA;AAAA,MACxB,GAAI,MAAA,CAAO,iBAAA,IAAqB,EAAE,iBAAA,EAAmB,OAAO,iBAAA,EAAkB;AAAA,MAC9E,GAAI,MAAA,CAAO,aAAA,IAAiB,EAAE,aAAA,EAAe,OAAO,aAAA;AAAc;AACpE,GACF;AAEA,EAAA,OAAO,mCAAmC,WAAW,CAAA;AACvD","file":"workflow.mjs","sourcesContent":["/**\n * PEAC Workflow Correlation Types (v0.10.2+)\n *\n * Workflow correlation primitives for multi-agent orchestration.\n * These types enable tracking and verification of multi-step agentic workflows\n * across different frameworks (MCP, A2A, CrewAI, LangGraph, etc.).\n *\n * Design principles:\n * - Non-breaking: Uses extensions mechanism (auth.extensions['org.peacprotocol/workflow'])\n * - DAG semantics: Parent linking for execution graph reconstruction\n * - Framework-agnostic: Works with any orchestration layer\n * - Deterministic: Supports offline verification and audit\n *\n * @see docs/specs/WORKFLOW-CORRELATION.md\n */\n\nimport { z } from 'zod';\n\n// ============================================================================\n// Constants\n// ============================================================================\n\n/**\n * Extension key for workflow context\n * Used in auth.extensions['org.peacprotocol/workflow']\n */\nexport const WORKFLOW_EXTENSION_KEY = 'org.peacprotocol/workflow';\n\n/**\n * Attestation type for workflow summaries\n */\nexport const WORKFLOW_SUMMARY_TYPE = 'peac/workflow-summary' as const;\n\n/**\n * Workflow status values\n */\nexport const WORKFLOW_STATUSES = ['in_progress', 'completed', 'failed', 'cancelled'] as const;\n\n/**\n * Well-known orchestration frameworks (informational, not normative)\n *\n * The framework field accepts any string matching the framework grammar.\n * These well-known values are listed in the PEAC registries for interop.\n * New frameworks do NOT require protocol updates - just use the name.\n *\n * @see docs/specs/registries.json - orchestration_frameworks section\n */\nexport const WELL_KNOWN_FRAMEWORKS = [\n  'mcp',\n  'a2a',\n  'crewai',\n  'langgraph',\n  'autogen',\n  'custom',\n] as const;\n\n/**\n * @deprecated Use WELL_KNOWN_FRAMEWORKS instead. Kept for backwards compatibility.\n */\nexport const ORCHESTRATION_FRAMEWORKS = WELL_KNOWN_FRAMEWORKS;\n\n/**\n * Framework identifier grammar pattern\n *\n * Lowercase letters, digits, hyphens, underscores.\n * Must start with a letter. Max 64 characters.\n * Examples: \"mcp\", \"a2a\", \"crewai\", \"langgraph\", \"dspy\", \"smolagents\"\n */\nexport const FRAMEWORK_ID_PATTERN = /^[a-z][a-z0-9_-]*$/;\n\n/**\n * Workflow correlation limits (DoS protection)\n */\nexport const WORKFLOW_LIMITS = {\n  /** Maximum parent steps per step (DAG fan-in) */\n  maxParentSteps: 16,\n  /** Maximum workflow ID length */\n  maxWorkflowIdLength: 128,\n  /** Maximum step ID length */\n  maxStepIdLength: 128,\n  /** Maximum tool name length */\n  maxToolNameLength: 256,\n  /** Maximum framework identifier length */\n  maxFrameworkLength: 64,\n  /** Maximum agents in a workflow summary */\n  maxAgentsInvolved: 100,\n  /** Maximum receipt refs in a workflow summary */\n  maxReceiptRefs: 10000,\n  /** Maximum error message length */\n  maxErrorMessageLength: 1024,\n} as const;\n\n// ============================================================================\n// ID Format Patterns\n// ============================================================================\n\n/**\n * Workflow ID format: wf_{ulid} or wf_{uuid}\n * Examples:\n * - wf_01HXYZ... (ULID)\n * - wf_550e8400-e29b-41d4-a716-446655440000 (UUID)\n */\nexport const WORKFLOW_ID_PATTERN = /^wf_[a-zA-Z0-9_-]{20,48}$/;\n\n/**\n * Step ID format: step_{ulid} or step_{uuid}\n * Examples:\n * - step_01HXYZ... (ULID)\n * - step_550e8400-e29b-41d4-a716-446655440000 (UUID)\n */\nexport const STEP_ID_PATTERN = /^step_[a-zA-Z0-9_-]{20,48}$/;\n\n// ============================================================================\n// Zod Schemas\n// ============================================================================\n\n/**\n * Workflow ID schema\n */\nexport const WorkflowIdSchema = z\n  .string()\n  .regex(WORKFLOW_ID_PATTERN, 'Invalid workflow ID format (expected wf_{ulid|uuid})')\n  .max(WORKFLOW_LIMITS.maxWorkflowIdLength);\n\n/**\n * Step ID schema\n */\nexport const StepIdSchema = z\n  .string()\n  .regex(STEP_ID_PATTERN, 'Invalid step ID format (expected step_{ulid|uuid})')\n  .max(WORKFLOW_LIMITS.maxStepIdLength);\n\n/**\n * Workflow status schema\n */\nexport const WorkflowStatusSchema = z.enum(WORKFLOW_STATUSES);\n\n/**\n * Orchestration framework schema\n *\n * Open string field with constrained grammar. Any lowercase identifier\n * matching the framework grammar is valid. Well-known values are listed\n * in WELL_KNOWN_FRAMEWORKS and the PEAC registries.\n *\n * Grammar: /^[a-z][a-z0-9_-]*$/ (max 64 chars)\n */\nexport const OrchestrationFrameworkSchema = z\n  .string()\n  .regex(\n    FRAMEWORK_ID_PATTERN,\n    'Invalid framework identifier (must be lowercase alphanumeric with hyphens/underscores, starting with a letter)'\n  )\n  .max(WORKFLOW_LIMITS.maxFrameworkLength);\n\n/**\n * Workflow context schema - attached to individual receipts\n *\n * This is the core primitive that links receipts into a workflow DAG.\n * Place in auth.extensions['org.peacprotocol/workflow']\n */\nexport const WorkflowContextSchema = z\n  .object({\n    // Correlation\n    /** Globally unique workflow/run ID */\n    workflow_id: WorkflowIdSchema,\n\n    /** This step's unique ID */\n    step_id: StepIdSchema,\n\n    /** DAG parent step IDs (empty array for root step) */\n    parent_step_ids: z.array(StepIdSchema).max(WORKFLOW_LIMITS.maxParentSteps).default([]),\n\n    // Orchestration identity\n    /** Agent identity ref of the orchestrator (optional) */\n    orchestrator_id: z.string().max(256).optional(),\n\n    /** Receipt ID that initiated this workflow (optional) */\n    orchestrator_receipt_ref: z.string().max(256).optional(),\n\n    // Sequencing (for linear workflows)\n    /** 0-based position in sequential runs (optional) */\n    step_index: z.number().int().nonnegative().optional(),\n\n    /** Total steps if known upfront (optional) */\n    step_total: z.number().int().positive().optional(),\n\n    // Metadata\n    /** Tool or skill name (MCP tool, A2A skill, etc.) */\n    tool_name: z.string().max(WORKFLOW_LIMITS.maxToolNameLength).optional(),\n\n    /** Orchestration framework */\n    framework: OrchestrationFrameworkSchema.optional(),\n\n    // Hash chain (for streaming/progressive receipts)\n    /** SHA-256 hash of previous receipt in chain (for ordering) */\n    prev_receipt_hash: z\n      .string()\n      .regex(/^sha256:[a-f0-9]{64}$/)\n      .optional(),\n  })\n  .strict();\n\n/**\n * Error context for failed workflows\n */\nexport const WorkflowErrorContextSchema = z\n  .object({\n    /** Step ID where failure occurred */\n    failed_step_id: StepIdSchema,\n\n    /** Error code (E_* format preferred) */\n    error_code: z.string().max(64),\n\n    /** Human-readable error message */\n    error_message: z.string().max(WORKFLOW_LIMITS.maxErrorMessageLength),\n  })\n  .strict();\n\n/**\n * Workflow summary evidence - the \"proof of run\" artifact\n *\n * Used in peac/workflow-summary attestations.\n * This is the single handle auditors use to verify an entire workflow.\n */\nexport const WorkflowSummaryEvidenceSchema = z\n  .object({\n    /** Workflow ID this summary describes */\n    workflow_id: WorkflowIdSchema,\n\n    /** Workflow status */\n    status: WorkflowStatusSchema,\n\n    /** When the workflow started (ISO 8601) */\n    started_at: z.string().datetime(),\n\n    /** When the workflow completed (ISO 8601, undefined if in_progress) */\n    completed_at: z.string().datetime().optional(),\n\n    // Receipt commitment\n    /** Ordered list of receipt IDs (for small workflows) */\n    receipt_refs: z.array(z.string().max(256)).max(WORKFLOW_LIMITS.maxReceiptRefs).optional(),\n\n    /** Merkle root of receipt digests (for large workflows, RFC 6962 style) */\n    receipt_merkle_root: z\n      .string()\n      .regex(/^sha256:[a-f0-9]{64}$/)\n      .optional(),\n\n    /** Total receipt count (required if using Merkle root) */\n    receipt_count: z.number().int().nonnegative().optional(),\n\n    // Orchestration\n    /** Agent identity ref of the orchestrator */\n    orchestrator_id: z.string().max(256),\n\n    /** List of agent IDs involved in the workflow */\n    agents_involved: z.array(z.string().max(256)).max(WORKFLOW_LIMITS.maxAgentsInvolved),\n\n    // Outcome\n    /** SHA-256 hash of final output artifact (optional) */\n    final_result_hash: z\n      .string()\n      .regex(/^sha256:[a-f0-9]{64}$/)\n      .optional(),\n\n    /** Error context if workflow failed */\n    error_context: WorkflowErrorContextSchema.optional(),\n  })\n  .strict()\n  .refine(\n    (data) => {\n      // Must have either receipt_refs or receipt_merkle_root (or both)\n      return data.receipt_refs !== undefined || data.receipt_merkle_root !== undefined;\n    },\n    {\n      message: 'Workflow summary must include receipt_refs or receipt_merkle_root',\n    }\n  )\n  .refine(\n    (data) => {\n      // If using Merkle root, must include receipt_count\n      if (data.receipt_merkle_root !== undefined && data.receipt_count === undefined) {\n        return false;\n      }\n      return true;\n    },\n    {\n      message: 'receipt_count is required when using receipt_merkle_root',\n    }\n  );\n\n/**\n * Workflow summary attestation schema\n *\n * A signed attestation containing the workflow summary evidence.\n */\nexport const WorkflowSummaryAttestationSchema = z\n  .object({\n    /** Attestation type (must be 'peac/workflow-summary') */\n    type: z.literal(WORKFLOW_SUMMARY_TYPE),\n\n    /** Who issued this attestation (HTTPS URL) */\n    issuer: z.string().url().startsWith('https://'),\n\n    /** When this attestation was issued (ISO 8601) */\n    issued_at: z.string().datetime(),\n\n    /** When this attestation expires (ISO 8601, optional) */\n    expires_at: z.string().datetime().optional(),\n\n    /** The workflow summary evidence */\n    evidence: WorkflowSummaryEvidenceSchema,\n  })\n  .strict();\n\n// ============================================================================\n// TypeScript Types (inferred from Zod schemas)\n// ============================================================================\n\nexport type WorkflowId = z.infer<typeof WorkflowIdSchema>;\nexport type StepId = z.infer<typeof StepIdSchema>;\nexport type WorkflowStatus = z.infer<typeof WorkflowStatusSchema>;\nexport type OrchestrationFramework = z.infer<typeof OrchestrationFrameworkSchema>;\nexport type WorkflowContext = z.infer<typeof WorkflowContextSchema>;\nexport type WorkflowErrorContext = z.infer<typeof WorkflowErrorContextSchema>;\nexport type WorkflowSummaryEvidence = z.infer<typeof WorkflowSummaryEvidenceSchema>;\nexport type WorkflowSummaryAttestation = z.infer<typeof WorkflowSummaryAttestationSchema>;\n\n// ============================================================================\n// Ordered Validation (Conformance)\n// ============================================================================\n\n/**\n * Result of ordered workflow context validation.\n *\n * Returns a canonical error code per Section 6.5.1 validation ordering\n * instead of Zod error messages, enabling language-neutral conformance testing.\n */\nexport type WorkflowValidationResult =\n  | { valid: true; value: WorkflowContext }\n  | { valid: false; error_code: string; error: string };\n\n/**\n * Validate a WorkflowContext with explicit evaluation ordering.\n *\n * Implements Section 6.5.1 of WORKFLOW-CORRELATION.md:\n * 1. Required field format (rules 4, 5)\n * 2. Structural constraints (rule 3)\n * 3. Optional field format (rules 6, 7)\n * 4. Semantic DAG checks (rules 1, 2)\n *\n * This function does NOT depend on Zod's internal validation ordering.\n * Cross-language implementations MUST produce identical error_code values\n * for the same invalid input.\n *\n * @param input - Raw input to validate\n * @returns Validation result with canonical error code on failure\n */\nexport function validateWorkflowContextOrdered(input: unknown): WorkflowValidationResult {\n  if (typeof input !== 'object' || input === null) {\n    return {\n      valid: false,\n      error_code: 'E_WORKFLOW_CONTEXT_INVALID',\n      error: 'Input must be an object',\n    };\n  }\n\n  const obj = input as Record<string, unknown>;\n\n  // Step 1: Required field format (rules 4, 5)\n  if (\n    typeof obj.workflow_id !== 'string' ||\n    !WORKFLOW_ID_PATTERN.test(obj.workflow_id) ||\n    obj.workflow_id.length > WORKFLOW_LIMITS.maxWorkflowIdLength\n  ) {\n    return {\n      valid: false,\n      error_code: 'E_WORKFLOW_ID_INVALID',\n      error: 'Invalid workflow ID format',\n    };\n  }\n\n  if (\n    typeof obj.step_id !== 'string' ||\n    !STEP_ID_PATTERN.test(obj.step_id) ||\n    obj.step_id.length > WORKFLOW_LIMITS.maxStepIdLength\n  ) {\n    return {\n      valid: false,\n      error_code: 'E_WORKFLOW_STEP_ID_INVALID',\n      error: 'Invalid step ID format',\n    };\n  }\n\n  // Step 2: Structural constraints (rule 3)\n  const parentStepIds = obj.parent_step_ids;\n  if (Array.isArray(parentStepIds) && parentStepIds.length > WORKFLOW_LIMITS.maxParentSteps) {\n    return {\n      valid: false,\n      error_code: 'E_WORKFLOW_LIMIT_EXCEEDED',\n      error: 'Exceeds maximum parent steps',\n    };\n  }\n\n  // Step 3: Optional field format (rules 6, 7)\n  if (obj.framework !== undefined) {\n    if (\n      typeof obj.framework !== 'string' ||\n      !FRAMEWORK_ID_PATTERN.test(obj.framework) ||\n      obj.framework.length > WORKFLOW_LIMITS.maxFrameworkLength\n    ) {\n      return {\n        valid: false,\n        error_code: 'E_WORKFLOW_CONTEXT_INVALID',\n        error: 'Invalid framework identifier grammar',\n      };\n    }\n  }\n\n  if (obj.prev_receipt_hash !== undefined) {\n    if (\n      typeof obj.prev_receipt_hash !== 'string' ||\n      !/^sha256:[a-f0-9]{64}$/.test(obj.prev_receipt_hash)\n    ) {\n      return {\n        valid: false,\n        error_code: 'E_WORKFLOW_CONTEXT_INVALID',\n        error: 'Invalid hash format',\n      };\n    }\n  }\n\n  // Step 4: Semantic DAG checks (rules 1, 2)\n  if (Array.isArray(parentStepIds)) {\n    if (parentStepIds.includes(obj.step_id)) {\n      return {\n        valid: false,\n        error_code: 'E_WORKFLOW_DAG_INVALID',\n        error: 'Self-parent cycle detected',\n      };\n    }\n    const uniqueParents = new Set(parentStepIds);\n    if (uniqueParents.size !== parentStepIds.length) {\n      return {\n        valid: false,\n        error_code: 'E_WORKFLOW_DAG_INVALID',\n        error: 'Duplicate parent step IDs',\n      };\n    }\n  }\n\n  // Full schema validation for remaining structural rules (types, strict mode, etc.)\n  const result = WorkflowContextSchema.safeParse(input);\n  if (!result.success) {\n    return {\n      valid: false,\n      error_code: 'E_WORKFLOW_CONTEXT_INVALID',\n      error: result.error.issues[0]?.message || 'Schema validation failed',\n    };\n  }\n\n  return { valid: true, value: result.data };\n}\n\n// ============================================================================\n// Helper Functions\n// ============================================================================\n\n/**\n * Generate a workflow ID with the wf_ prefix\n *\n * @param id - ULID or UUID payload (without prefix)\n * @returns Prefixed workflow ID\n */\nexport function createWorkflowId(id: string): WorkflowId {\n  const workflowId = `wf_${id}`;\n  return WorkflowIdSchema.parse(workflowId);\n}\n\n/**\n * Generate a step ID with the step_ prefix\n *\n * @param id - ULID or UUID payload (without prefix)\n * @returns Prefixed step ID\n */\nexport function createStepId(id: string): StepId {\n  const stepId = `step_${id}`;\n  return StepIdSchema.parse(stepId);\n}\n\n/**\n * Validate a workflow context object\n *\n * @param context - Object to validate\n * @returns Validated WorkflowContext\n * @throws ZodError if validation fails\n */\nexport function validateWorkflowContext(context: unknown): WorkflowContext {\n  return WorkflowContextSchema.parse(context);\n}\n\n/**\n * Check if an object is a valid workflow context (non-throwing)\n *\n * @param context - Object to check\n * @returns True if valid WorkflowContext\n */\nexport function isValidWorkflowContext(context: unknown): context is WorkflowContext {\n  return WorkflowContextSchema.safeParse(context).success;\n}\n\n/**\n * Validate a workflow summary attestation\n *\n * @param attestation - Object to validate\n * @returns Validated WorkflowSummaryAttestation\n * @throws ZodError if validation fails\n */\nexport function validateWorkflowSummaryAttestation(\n  attestation: unknown\n): WorkflowSummaryAttestation {\n  return WorkflowSummaryAttestationSchema.parse(attestation);\n}\n\n/**\n * Check if an object is a workflow summary attestation (non-throwing)\n *\n * @param attestation - Object to check\n * @returns True if valid WorkflowSummaryAttestation\n */\nexport function isWorkflowSummaryAttestation(\n  attestation: unknown\n): attestation is WorkflowSummaryAttestation {\n  return WorkflowSummaryAttestationSchema.safeParse(attestation).success;\n}\n\n/**\n * Check if a workflow summary is in a terminal state\n *\n * @param status - Workflow status\n * @returns True if completed, failed, or cancelled\n */\nexport function isTerminalWorkflowStatus(status: WorkflowStatus): boolean {\n  return status === 'completed' || status === 'failed' || status === 'cancelled';\n}\n\n/**\n * Check if workflow context has valid DAG semantics (no self-parent)\n *\n * @param context - Workflow context to check\n * @returns True if DAG semantics are valid\n */\nexport function hasValidDagSemantics(context: WorkflowContext): boolean {\n  // Step cannot be its own parent\n  if (context.parent_step_ids.includes(context.step_id)) {\n    return false;\n  }\n  // No duplicate parents\n  const uniqueParents = new Set(context.parent_step_ids);\n  if (uniqueParents.size !== context.parent_step_ids.length) {\n    return false;\n  }\n  return true;\n}\n\n/**\n * Create a workflow context for attaching to a receipt\n *\n * @param params - Workflow context parameters\n * @returns Validated WorkflowContext\n */\nexport function createWorkflowContext(params: {\n  workflow_id: string;\n  step_id: string;\n  parent_step_ids?: string[];\n  orchestrator_id?: string;\n  orchestrator_receipt_ref?: string;\n  step_index?: number;\n  step_total?: number;\n  tool_name?: string;\n  framework?: string;\n  prev_receipt_hash?: string;\n}): WorkflowContext {\n  const context: WorkflowContext = {\n    workflow_id: params.workflow_id as WorkflowId,\n    step_id: params.step_id as StepId,\n    parent_step_ids: (params.parent_step_ids ?? []) as StepId[],\n    ...(params.orchestrator_id && { orchestrator_id: params.orchestrator_id }),\n    ...(params.orchestrator_receipt_ref && {\n      orchestrator_receipt_ref: params.orchestrator_receipt_ref,\n    }),\n    ...(params.step_index !== undefined && { step_index: params.step_index }),\n    ...(params.step_total !== undefined && { step_total: params.step_total }),\n    ...(params.tool_name && { tool_name: params.tool_name }),\n    ...(params.framework && { framework: params.framework }),\n    ...(params.prev_receipt_hash && { prev_receipt_hash: params.prev_receipt_hash }),\n  };\n\n  // Validate\n  const validated = validateWorkflowContext(context);\n\n  // Check DAG semantics\n  if (!hasValidDagSemantics(validated)) {\n    throw new Error(\n      'Invalid DAG semantics: step cannot be its own parent or have duplicate parents'\n    );\n  }\n\n  return validated;\n}\n\n/**\n * Create parameters for a workflow summary attestation\n */\nexport interface CreateWorkflowSummaryParams {\n  workflow_id: string;\n  status: WorkflowStatus;\n  started_at: string;\n  completed_at?: string;\n  orchestrator_id: string;\n  agents_involved: string[];\n  receipt_refs?: string[];\n  receipt_merkle_root?: string;\n  receipt_count?: number;\n  final_result_hash?: string;\n  error_context?: WorkflowErrorContext;\n  issuer: string;\n  issued_at: string;\n  expires_at?: string;\n}\n\n/**\n * Create a workflow summary attestation\n *\n * @param params - Attestation parameters\n * @returns Validated WorkflowSummaryAttestation\n */\nexport function createWorkflowSummaryAttestation(\n  params: CreateWorkflowSummaryParams\n): WorkflowSummaryAttestation {\n  const attestation: WorkflowSummaryAttestation = {\n    type: WORKFLOW_SUMMARY_TYPE,\n    issuer: params.issuer,\n    issued_at: params.issued_at,\n    ...(params.expires_at && { expires_at: params.expires_at }),\n    evidence: {\n      workflow_id: params.workflow_id as WorkflowId,\n      status: params.status,\n      started_at: params.started_at,\n      ...(params.completed_at && { completed_at: params.completed_at }),\n      ...(params.receipt_refs && { receipt_refs: params.receipt_refs }),\n      ...(params.receipt_merkle_root && { receipt_merkle_root: params.receipt_merkle_root }),\n      ...(params.receipt_count !== undefined && { receipt_count: params.receipt_count }),\n      orchestrator_id: params.orchestrator_id,\n      agents_involved: params.agents_involved,\n      ...(params.final_result_hash && { final_result_hash: params.final_result_hash }),\n      ...(params.error_context && { error_context: params.error_context }),\n    },\n  };\n\n  return validateWorkflowSummaryAttestation(attestation);\n}\n"]}

package/package.json

@@ -1,9 +1,48 @@
 {
   "name": "@peac/schema",
-  "version": "0.10.9",
+  "version": "0.10.10",
   "description": "PEAC Protocol JSON schemas, OpenAPI specs, and TypeScript types",
-  "main": "dist/index.js",
+  "main": "dist/index.cjs",
   "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "require": "./dist/index.cjs",
+      "default": "./dist/index.mjs"
+    },
+    "./receipt-parser": {
+      "types": "./dist/receipt-parser.d.ts",
+      "import": "./dist/receipt-parser.mjs",
+      "require": "./dist/receipt-parser.cjs"
+    },
+    "./attestation": {
+      "types": "./dist/attestation-receipt.d.ts",
+      "import": "./dist/attestation-receipt.mjs",
+      "require": "./dist/attestation-receipt.cjs"
+    },
+    "./workflow": {
+      "types": "./dist/workflow.d.ts",
+      "import": "./dist/workflow.mjs",
+      "require": "./dist/workflow.cjs"
+    },
+    "./interaction": {
+      "types": "./dist/interaction.d.ts",
+      "import": "./dist/interaction.mjs",
+      "require": "./dist/interaction.cjs"
+    },
+    "./attribution": {
+      "types": "./dist/attribution.d.ts",
+      "import": "./dist/attribution.mjs",
+      "require": "./dist/attribution.cjs"
+    },
+    "./normalize": {
+      "types": "./dist/normalize.d.ts",
+      "import": "./dist/normalize.mjs",
+      "require": "./dist/normalize.cjs"
+    },
+    "./package.json": "./package.json"
+  },
   "repository": {
     "type": "git",
     "url": "https://github.com/peacprotocol/peac.git",
@@ -24,17 +63,22 @@
   },
   "dependencies": {
     "zod": "^3.22.4",
-    "@peac/kernel": "0.10.9"
+    "@peac/kernel": "0.10.10"
   },
   "devDependencies": {
     "@types/node": "^20.10.0",
     "typescript": "^5.3.3",
-    "vitest": "^1.1.0"
+    "vitest": "^4.0.0",
+    "tsup": "^8.0.0"
   },
   "scripts": {
-    "build": "tsc",
+    "prebuild": "rm -rf dist",
+    "build": "pnpm run build:js && pnpm run build:types",
     "test": "vitest run",
     "test:watch": "vitest",
-    "clean": "rm -rf dist"
+    "bench": "vitest bench --run",
+    "clean": "rm -rf dist",
+    "build:js": "tsup",
+    "build:types": "rm -f dist/.tsbuildinfo && tsc && rm -f dist/.tsbuildinfo"
   }
 }