@qmilab/lodestar-core 0.1.0

package/dist/schemas/action.d.ts

@@ -0,0 +1,378 @@
+import { z } from "zod";
+export declare const TrustLevelSchema: z.ZodNumber;
+export type TrustLevel = z.infer<typeof TrustLevelSchema>;
+export declare const BlastRadiusSchema: z.ZodEnum<["self", "session", "project", "external"]>;
+export type BlastRadius = z.infer<typeof BlastRadiusSchema>;
+export declare const ReversibilitySchema: z.ZodEnum<["reversible", "compensable", "irreversible"]>;
+export type Reversibility = z.infer<typeof ReversibilitySchema>;
+export declare const DataSensitivityForActionSchema: z.ZodEnum<["public", "private", "secret"]>;
+export type DataSensitivityForAction = z.infer<typeof DataSensitivityForActionSchema>;
+/**
+ * A precondition that must hold for an action to execute safely.
+ *
+ * Two-phase execution: preconditions are recorded at proposal time
+ * (`expected_at_approval`) and re-checked at execution time
+ * (`must_revalidate_at_execution`). If the world has changed between
+ * approval and execution, the kernel re-arbitrates or rejects.
+ *
+ * This closes the TOCTOU gap that pure approval-then-execute leaves open.
+ */
+export declare const ActionPreconditionSchema: z.ZodObject<{
+    check_id: z.ZodString;
+    parameters: z.ZodUnknown;
+    expected_at_approval: z.ZodUnknown;
+    must_revalidate_at_execution: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    check_id: string;
+    must_revalidate_at_execution: boolean;
+    parameters?: unknown;
+    expected_at_approval?: unknown;
+}, {
+    check_id: string;
+    must_revalidate_at_execution: boolean;
+    parameters?: unknown;
+    expected_at_approval?: unknown;
+}>;
+export type ActionPrecondition = z.infer<typeof ActionPreconditionSchema>;
+/**
+ * The contract that gates an action through the policy kernel.
+ *
+ * In v0, anything with network effect, credential use, publication,
+ * deploy, push, PR creation, or signing defaults to L4.
+ */
+export declare const ActionContractSchema: z.ZodObject<{
+    required_level: z.ZodNumber;
+    blast_radius: z.ZodEnum<["self", "session", "project", "external"]>;
+    reversibility: z.ZodEnum<["reversible", "compensable", "irreversible"]>;
+    scope: z.ZodObject<{
+        level: z.ZodEnum<["global", "organization", "user", "project", "repo", "session"]>;
+        identifier: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    }, {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    }>;
+    data_sensitivity: z.ZodEnum<["public", "private", "secret"]>;
+    preconditions: z.ZodArray<z.ZodObject<{
+        check_id: z.ZodString;
+        parameters: z.ZodUnknown;
+        expected_at_approval: z.ZodUnknown;
+        must_revalidate_at_execution: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        check_id: string;
+        must_revalidate_at_execution: boolean;
+        parameters?: unknown;
+        expected_at_approval?: unknown;
+    }, {
+        check_id: string;
+        must_revalidate_at_execution: boolean;
+        parameters?: unknown;
+        expected_at_approval?: unknown;
+    }>, "many">;
+}, "strip", z.ZodTypeAny, {
+    scope: {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    };
+    required_level: number;
+    blast_radius: "project" | "session" | "external" | "self";
+    reversibility: "reversible" | "compensable" | "irreversible";
+    data_sensitivity: "public" | "secret" | "private";
+    preconditions: {
+        check_id: string;
+        must_revalidate_at_execution: boolean;
+        parameters?: unknown;
+        expected_at_approval?: unknown;
+    }[];
+}, {
+    scope: {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    };
+    required_level: number;
+    blast_radius: "project" | "session" | "external" | "self";
+    reversibility: "reversible" | "compensable" | "irreversible";
+    data_sensitivity: "public" | "secret" | "private";
+    preconditions: {
+        check_id: string;
+        must_revalidate_at_execution: boolean;
+        parameters?: unknown;
+        expected_at_approval?: unknown;
+    }[];
+}>;
+export type ActionContract = z.infer<typeof ActionContractSchema>;
+/**
+ * Phases an action passes through.
+ */
+export declare const ActionPhaseSchema: z.ZodEnum<["proposed", "arbitrating", "approved", "rejected", "executing", "completed", "failed", "halted"]>;
+export type ActionPhase = z.infer<typeof ActionPhaseSchema>;
+/**
+ * Approval event from a human or policy reviewer.
+ */
+export declare const ApprovalEventSchema: z.ZodObject<{
+    approver_id: z.ZodString;
+    approved: z.ZodBoolean;
+    reason: z.ZodOptional<z.ZodString>;
+    at: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    at: string;
+    approved: boolean;
+    approver_id: string;
+    reason?: string | undefined;
+}, {
+    at: string;
+    approved: boolean;
+    approver_id: string;
+    reason?: string | undefined;
+}>;
+export type ApprovalEvent = z.infer<typeof ApprovalEventSchema>;
+/**
+ * Audit trail entry for an action.
+ */
+export declare const AuditEventSchema: z.ZodObject<{
+    phase: z.ZodEnum<["proposed", "arbitrating", "approved", "rejected", "executing", "completed", "failed", "halted"]>;
+    by_actor_id: z.ZodString;
+    at: z.ZodString;
+    detail: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    at: string;
+    by_actor_id: string;
+    phase: "rejected" | "proposed" | "arbitrating" | "approved" | "executing" | "completed" | "failed" | "halted";
+    detail?: string | undefined;
+}, {
+    at: string;
+    by_actor_id: string;
+    phase: "rejected" | "proposed" | "arbitrating" | "approved" | "executing" | "completed" | "failed" | "halted";
+    detail?: string | undefined;
+}>;
+export type AuditEvent = z.infer<typeof AuditEventSchema>;
+/**
+ * A proposed or executed side-effectful operation.
+ *
+ * Actions are the seventh link in the epistemic chain.
+ * The phase field tracks the action through propose → arbitrate
+ * → approved/rejected → executing → completed/failed/halted.
+ *
+ * Every Action carries an ActionContract. The Policy Kernel evaluates
+ * the contract against current trust assignments and approval requirements
+ * before phase advances past `arbitrating`.
+ */
+export declare const ActionSchema: z.ZodObject<{
+    id: z.ZodString;
+    decision_id: z.ZodOptional<z.ZodString>;
+    intent: z.ZodString;
+    tool: z.ZodString;
+    inputs: z.ZodUnknown;
+    contract: z.ZodObject<{
+        required_level: z.ZodNumber;
+        blast_radius: z.ZodEnum<["self", "session", "project", "external"]>;
+        reversibility: z.ZodEnum<["reversible", "compensable", "irreversible"]>;
+        scope: z.ZodObject<{
+            level: z.ZodEnum<["global", "organization", "user", "project", "repo", "session"]>;
+            identifier: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        }, {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        }>;
+        data_sensitivity: z.ZodEnum<["public", "private", "secret"]>;
+        preconditions: z.ZodArray<z.ZodObject<{
+            check_id: z.ZodString;
+            parameters: z.ZodUnknown;
+            expected_at_approval: z.ZodUnknown;
+            must_revalidate_at_execution: z.ZodBoolean;
+        }, "strip", z.ZodTypeAny, {
+            check_id: string;
+            must_revalidate_at_execution: boolean;
+            parameters?: unknown;
+            expected_at_approval?: unknown;
+        }, {
+            check_id: string;
+            must_revalidate_at_execution: boolean;
+            parameters?: unknown;
+            expected_at_approval?: unknown;
+        }>, "many">;
+    }, "strip", z.ZodTypeAny, {
+        scope: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        };
+        required_level: number;
+        blast_radius: "project" | "session" | "external" | "self";
+        reversibility: "reversible" | "compensable" | "irreversible";
+        data_sensitivity: "public" | "secret" | "private";
+        preconditions: {
+            check_id: string;
+            must_revalidate_at_execution: boolean;
+            parameters?: unknown;
+            expected_at_approval?: unknown;
+        }[];
+    }, {
+        scope: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        };
+        required_level: number;
+        blast_radius: "project" | "session" | "external" | "self";
+        reversibility: "reversible" | "compensable" | "irreversible";
+        data_sensitivity: "public" | "secret" | "private";
+        preconditions: {
+            check_id: string;
+            must_revalidate_at_execution: boolean;
+            parameters?: unknown;
+            expected_at_approval?: unknown;
+        }[];
+    }>;
+    phase: z.ZodEnum<["proposed", "arbitrating", "approved", "rejected", "executing", "completed", "failed", "halted"]>;
+    approval: z.ZodOptional<z.ZodObject<{
+        approver_id: z.ZodString;
+        approved: z.ZodBoolean;
+        reason: z.ZodOptional<z.ZodString>;
+        at: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        at: string;
+        approved: boolean;
+        approver_id: string;
+        reason?: string | undefined;
+    }, {
+        at: string;
+        approved: boolean;
+        approver_id: string;
+        reason?: string | undefined;
+    }>>;
+    audit: z.ZodArray<z.ZodObject<{
+        phase: z.ZodEnum<["proposed", "arbitrating", "approved", "rejected", "executing", "completed", "failed", "halted"]>;
+        by_actor_id: z.ZodString;
+        at: z.ZodString;
+        detail: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        at: string;
+        by_actor_id: string;
+        phase: "rejected" | "proposed" | "arbitrating" | "approved" | "executing" | "completed" | "failed" | "halted";
+        detail?: string | undefined;
+    }, {
+        at: string;
+        by_actor_id: string;
+        phase: "rejected" | "proposed" | "arbitrating" | "approved" | "executing" | "completed" | "failed" | "halted";
+        detail?: string | undefined;
+    }>, "many">;
+    outcome_id: z.ZodOptional<z.ZodString>;
+    proposed_at: z.ZodString;
+    proposed_by: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    tool: string;
+    phase: "rejected" | "proposed" | "arbitrating" | "approved" | "executing" | "completed" | "failed" | "halted";
+    intent: string;
+    contract: {
+        scope: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        };
+        required_level: number;
+        blast_radius: "project" | "session" | "external" | "self";
+        reversibility: "reversible" | "compensable" | "irreversible";
+        data_sensitivity: "public" | "secret" | "private";
+        preconditions: {
+            check_id: string;
+            must_revalidate_at_execution: boolean;
+            parameters?: unknown;
+            expected_at_approval?: unknown;
+        }[];
+    };
+    audit: {
+        at: string;
+        by_actor_id: string;
+        phase: "rejected" | "proposed" | "arbitrating" | "approved" | "executing" | "completed" | "failed" | "halted";
+        detail?: string | undefined;
+    }[];
+    proposed_at: string;
+    proposed_by: string;
+    outcome_id?: string | undefined;
+    decision_id?: string | undefined;
+    inputs?: unknown;
+    approval?: {
+        at: string;
+        approved: boolean;
+        approver_id: string;
+        reason?: string | undefined;
+    } | undefined;
+}, {
+    id: string;
+    tool: string;
+    phase: "rejected" | "proposed" | "arbitrating" | "approved" | "executing" | "completed" | "failed" | "halted";
+    intent: string;
+    contract: {
+        scope: {
+            level: "global" | "organization" | "user" | "project" | "repo" | "session";
+            identifier: string;
+        };
+        required_level: number;
+        blast_radius: "project" | "session" | "external" | "self";
+        reversibility: "reversible" | "compensable" | "irreversible";
+        data_sensitivity: "public" | "secret" | "private";
+        preconditions: {
+            check_id: string;
+            must_revalidate_at_execution: boolean;
+            parameters?: unknown;
+            expected_at_approval?: unknown;
+        }[];
+    };
+    audit: {
+        at: string;
+        by_actor_id: string;
+        phase: "rejected" | "proposed" | "arbitrating" | "approved" | "executing" | "completed" | "failed" | "halted";
+        detail?: string | undefined;
+    }[];
+    proposed_at: string;
+    proposed_by: string;
+    outcome_id?: string | undefined;
+    decision_id?: string | undefined;
+    inputs?: unknown;
+    approval?: {
+        at: string;
+        approved: boolean;
+        approver_id: string;
+        reason?: string | undefined;
+    } | undefined;
+}>;
+export type Action = z.infer<typeof ActionSchema>;
+export declare const OutcomeResultSchema: z.ZodEnum<["success", "failure", "partial", "unknown"]>;
+export type OutcomeResult = z.infer<typeof OutcomeResultSchema>;
+/**
+ * What happened when an action executed.
+ *
+ * Outcomes generate new observations that re-enter the cognitive core.
+ * Calibrators consume outcomes to update per-class confidence calibration.
+ */
+export declare const OutcomeSchema: z.ZodObject<{
+    id: z.ZodString;
+    action_id: z.ZodString;
+    result: z.ZodEnum<["success", "failure", "partial", "unknown"]>;
+    effect_observation_ids: z.ZodArray<z.ZodString, "many">;
+    side_effects_observed: z.ZodArray<z.ZodString, "many">;
+    duration_ms: z.ZodNumber;
+    observed_at: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    observed_at: string;
+    action_id: string;
+    result: "unknown" | "success" | "failure" | "partial";
+    effect_observation_ids: string[];
+    side_effects_observed: string[];
+    duration_ms: number;
+}, {
+    id: string;
+    observed_at: string;
+    action_id: string;
+    result: "unknown" | "success" | "failure" | "partial";
+    effect_observation_ids: string[];
+    side_effects_observed: string[];
+    duration_ms: number;
+}>;
+export type Outcome = z.infer<typeof OutcomeSchema>;
+//# sourceMappingURL=action.d.ts.map

package/dist/schemas/action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.d.ts","sourceRoot":"","sources":["../../src/schemas/action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAcvB,eAAO,MAAM,gBAAgB,aAAiC,CAAA;AAC9D,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAEzD,eAAO,MAAM,iBAAiB,uDAAqD,CAAA;AACnF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAE3D,eAAO,MAAM,mBAAmB,0DAAwD,CAAA;AACxF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D,eAAO,MAAM,8BAA8B,4CAA0C,CAAA;AACrF,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAA;AAErF;;;;;;;;;GASG;AACH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;EAKnC,CAAA;AACF,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAA;AAEzE;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAO/B,CAAA;AACF,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAA;AAEjE;;GAEG;AACH,eAAO,MAAM,iBAAiB,8GAS5B,CAAA;AACF,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAE3D;;GAEG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;EAK9B,CAAA;AACF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D;;GAEG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;EAK3B,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAEzD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAavB,CAAA;AACF,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAMjD,eAAO,MAAM,mBAAmB,yDAAuD,CAAA;AACvF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAA;AAE/D;;;;;GAKG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;EAQxB,CAAA;AACF,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAA"}

package/dist/schemas/action.js

@@ -0,0 +1,122 @@
+import { z } from "zod";
+import { ResourceScopeSchema, TimestampSchema } from "./common";
+// -----------------------------------------------------------------------------
+// Trust ladder
+//
+// L0: observe only — read state; never write or execute
+// L1: suggest only — produce proposals; nothing reaches the world
+// L2: isolated artifact — generate in tempfs; no effect on project state
+// L3: local reversible — modify project state with notification
+// L4: external/shared — requires approval (network, credentials, deploy, push)
+// L5: prohibited — cannot run in this context, ever
+// -----------------------------------------------------------------------------
+export const TrustLevelSchema = z.number().int().min(0).max(5);
+export const BlastRadiusSchema = z.enum(["self", "session", "project", "external"]);
+export const ReversibilitySchema = z.enum(["reversible", "compensable", "irreversible"]);
+export const DataSensitivityForActionSchema = z.enum(["public", "private", "secret"]);
+/**
+ * A precondition that must hold for an action to execute safely.
+ *
+ * Two-phase execution: preconditions are recorded at proposal time
+ * (`expected_at_approval`) and re-checked at execution time
+ * (`must_revalidate_at_execution`). If the world has changed between
+ * approval and execution, the kernel re-arbitrates or rejects.
+ *
+ * This closes the TOCTOU gap that pure approval-then-execute leaves open.
+ */
+export const ActionPreconditionSchema = z.object({
+    check_id: z.string().describe("e.g. 'git.head_unchanged'"),
+    parameters: z.unknown(),
+    expected_at_approval: z.unknown(),
+    must_revalidate_at_execution: z.boolean(),
+});
+/**
+ * The contract that gates an action through the policy kernel.
+ *
+ * In v0, anything with network effect, credential use, publication,
+ * deploy, push, PR creation, or signing defaults to L4.
+ */
+export const ActionContractSchema = z.object({
+    required_level: TrustLevelSchema,
+    blast_radius: BlastRadiusSchema,
+    reversibility: ReversibilitySchema,
+    scope: ResourceScopeSchema,
+    data_sensitivity: DataSensitivityForActionSchema,
+    preconditions: z.array(ActionPreconditionSchema),
+});
+/**
+ * Phases an action passes through.
+ */
+export const ActionPhaseSchema = z.enum([
+    "proposed",
+    "arbitrating",
+    "approved",
+    "rejected",
+    "executing",
+    "completed",
+    "failed",
+    "halted",
+]);
+/**
+ * Approval event from a human or policy reviewer.
+ */
+export const ApprovalEventSchema = z.object({
+    approver_id: z.string().describe("actor_id"),
+    approved: z.boolean(),
+    reason: z.string().optional(),
+    at: TimestampSchema,
+});
+/**
+ * Audit trail entry for an action.
+ */
+export const AuditEventSchema = z.object({
+    phase: ActionPhaseSchema,
+    by_actor_id: z.string(),
+    at: TimestampSchema,
+    detail: z.string().optional(),
+});
+/**
+ * A proposed or executed side-effectful operation.
+ *
+ * Actions are the seventh link in the epistemic chain.
+ * The phase field tracks the action through propose → arbitrate
+ * → approved/rejected → executing → completed/failed/halted.
+ *
+ * Every Action carries an ActionContract. The Policy Kernel evaluates
+ * the contract against current trust assignments and approval requirements
+ * before phase advances past `arbitrating`.
+ */
+export const ActionSchema = z.object({
+    id: z.string(),
+    decision_id: z.string().optional().describe("optional link to the deciding context"),
+    intent: z.string(),
+    tool: z.string().describe("tool registry key, e.g. 'git.push'"),
+    inputs: z.unknown().describe("validated against the tool's input schema"),
+    contract: ActionContractSchema,
+    phase: ActionPhaseSchema,
+    approval: ApprovalEventSchema.optional(),
+    audit: z.array(AuditEventSchema),
+    outcome_id: z.string().optional(),
+    proposed_at: TimestampSchema,
+    proposed_by: z.string().describe("actor_id"),
+});
+// -----------------------------------------------------------------------------
+// Outcome
+// -----------------------------------------------------------------------------
+export const OutcomeResultSchema = z.enum(["success", "failure", "partial", "unknown"]);
+/**
+ * What happened when an action executed.
+ *
+ * Outcomes generate new observations that re-enter the cognitive core.
+ * Calibrators consume outcomes to update per-class confidence calibration.
+ */
+export const OutcomeSchema = z.object({
+    id: z.string(),
+    action_id: z.string(),
+    result: OutcomeResultSchema,
+    effect_observation_ids: z.array(z.string()).describe("observations capturing the effect"),
+    side_effects_observed: z.array(z.string()),
+    duration_ms: z.number().int().nonnegative(),
+    observed_at: TimestampSchema,
+});
+//# sourceMappingURL=action.js.map

package/dist/schemas/action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action.js","sourceRoot":"","sources":["../../src/schemas/action.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAE/D,gFAAgF;AAChF,eAAe;AACf,EAAE;AACF,wDAAwD;AACxD,kEAAkE;AAClE,yEAAyE;AACzE,gEAAgE;AAChE,+EAA+E;AAC/E,oDAAoD;AACpD,gFAAgF;AAEhF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAG9D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAA;AAGnF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC,CAAA;AAGxF,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAA;AAGrF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC1D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE;IACjC,4BAA4B,EAAE,CAAC,CAAC,OAAO,EAAE;CAC1C,CAAC,CAAA;AAGF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,cAAc,EAAE,gBAAgB;IAChC,YAAY,EAAE,iBAAiB;IAC/B,aAAa,EAAE,mBAAmB;IAClC,KAAK,EAAE,mBAAmB;IAC1B,gBAAgB,EAAE,8BAA8B;IAChD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CACjD,CAAC,CAAA;AAGF;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,UAAU;IACV,aAAa;IACb,UAAU;IACV,UAAU;IACV,WAAW;IACX,WAAW;IACX,QAAQ;IACR,QAAQ;CACT,CAAC,CAAA;AAGF;;GAEG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,EAAE,EAAE,eAAe;CACpB,CAAC,CAAA;AAGF;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,KAAK,EAAE,iBAAiB;IACxB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,EAAE,EAAE,eAAe;IACnB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAA;AAGF;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IACpF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,oCAAoC,CAAC;IAC/D,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,2CAA2C,CAAC;IACzE,QAAQ,EAAE,oBAAoB;IAC9B,KAAK,EAAE,iBAAiB;IACxB,QAAQ,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,WAAW,EAAE,eAAe;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;CAC7C,CAAC,CAAA;AAGF,gFAAgF;AAChF,UAAU;AACV,gFAAgF;AAEhF,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;AAGvF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,MAAM,EAAE,mBAAmB;IAC3B,sBAAsB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,mCAAmC,CAAC;IACzF,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC3C,WAAW,EAAE,eAAe;CAC7B,CAAC,CAAA"}

package/dist/schemas/actor.d.ts

@@ -0,0 +1,87 @@
+import { z } from "zod";
+/**
+ * Kinds of actor that can produce events in the system.
+ * Every Observation, Claim, Decision, Action, and Revision records its actor.
+ */
+export declare const ActorKindSchema: z.ZodEnum<["human", "agent", "tool", "probe", "sentinel", "system", "imported"]>;
+export type ActorKind = z.infer<typeof ActorKindSchema>;
+/**
+ * Identity record for any entity that can act in the system.
+ *
+ * Sensitivity clearance bounds what content the actor may handle.
+ * Trust baseline is the default credibility weight for assertions
+ * by this actor; the Calibrator can adjust per-class trust over time.
+ */
+export declare const ActorSchema: z.ZodObject<{
+    id: z.ZodString;
+    kind: z.ZodEnum<["human", "agent", "tool", "probe", "sentinel", "system", "imported"]>;
+    display_name: z.ZodString;
+    authority_scope: z.ZodArray<z.ZodObject<{
+        level: z.ZodEnum<["global", "organization", "user", "project", "repo", "session"]>;
+        identifier: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    }, {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    }>, "many">;
+    signing_key_id: z.ZodOptional<z.ZodString>;
+    trust_baseline: z.ZodNumber;
+    sensitivity_clearance: z.ZodEnum<["public", "internal", "confidential", "secret"]>;
+    created_at: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    kind: "human" | "agent" | "tool" | "probe" | "sentinel" | "system" | "imported";
+    display_name: string;
+    authority_scope: {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    }[];
+    trust_baseline: number;
+    sensitivity_clearance: "public" | "internal" | "confidential" | "secret";
+    created_at: string;
+    signing_key_id?: string | undefined;
+}, {
+    id: string;
+    kind: "human" | "agent" | "tool" | "probe" | "sentinel" | "system" | "imported";
+    display_name: string;
+    authority_scope: {
+        level: "global" | "organization" | "user" | "project" | "repo" | "session";
+        identifier: string;
+    }[];
+    trust_baseline: number;
+    sensitivity_clearance: "public" | "internal" | "confidential" | "secret";
+    created_at: string;
+    signing_key_id?: string | undefined;
+}>;
+export type Actor = z.infer<typeof ActorSchema>;
+/**
+ * Ed25519 signature over a canonical payload.
+ *
+ * v0 scope: signatures are required for skills, policy versions,
+ * external imports, and secret-signing events. Routine internal
+ * events rely on the append-only log and content hashes, not
+ * cryptographic signatures.
+ */
+export declare const SignatureSchema: z.ZodObject<{
+    signer_id: z.ZodString;
+    payload_hash: z.ZodString;
+    algorithm: z.ZodLiteral<"ed25519">;
+    signature: z.ZodString;
+    at: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    at: string;
+    signer_id: string;
+    payload_hash: string;
+    algorithm: "ed25519";
+    signature: string;
+}, {
+    at: string;
+    signer_id: string;
+    payload_hash: string;
+    algorithm: "ed25519";
+    signature: string;
+}>;
+export type Signature = z.infer<typeof SignatureSchema>;
+//# sourceMappingURL=actor.d.ts.map

package/dist/schemas/actor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.d.ts","sourceRoot":"","sources":["../../src/schemas/actor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAGvB;;;GAGG;AACH,eAAO,MAAM,eAAe,kFAQ1B,CAAA;AACF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAEvD;;;;;;GAMG;AACH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAStB,CAAA;AACF,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAA;AAE/C;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;EAM1B,CAAA;AACF,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA"}

package/dist/schemas/actor.js

@@ -0,0 +1,48 @@
+import { z } from "zod";
+import { ResourceScopeSchema, SensitivitySchema, TimestampSchema } from "./common";
+/**
+ * Kinds of actor that can produce events in the system.
+ * Every Observation, Claim, Decision, Action, and Revision records its actor.
+ */
+export const ActorKindSchema = z.enum([
+    "human",
+    "agent",
+    "tool",
+    "probe",
+    "sentinel",
+    "system",
+    "imported",
+]);
+/**
+ * Identity record for any entity that can act in the system.
+ *
+ * Sensitivity clearance bounds what content the actor may handle.
+ * Trust baseline is the default credibility weight for assertions
+ * by this actor; the Calibrator can adjust per-class trust over time.
+ */
+export const ActorSchema = z.object({
+    id: z.string().describe("uuid-shaped identifier"),
+    kind: ActorKindSchema,
+    display_name: z.string(),
+    authority_scope: z.array(ResourceScopeSchema).describe("scopes this actor may operate within"),
+    signing_key_id: z.string().optional().describe("present for actors that sign artifacts"),
+    trust_baseline: z.number().min(0).max(1).describe("default credibility [0,1]"),
+    sensitivity_clearance: SensitivitySchema.describe("max sensitivity this actor may handle"),
+    created_at: TimestampSchema,
+});
+/**
+ * Ed25519 signature over a canonical payload.
+ *
+ * v0 scope: signatures are required for skills, policy versions,
+ * external imports, and secret-signing events. Routine internal
+ * events rely on the append-only log and content hashes, not
+ * cryptographic signatures.
+ */
+export const SignatureSchema = z.object({
+    signer_id: z.string().describe("actor_id of the signer"),
+    payload_hash: z.string().describe("sha-256 of canonical payload"),
+    algorithm: z.literal("ed25519"),
+    signature: z.string().describe("base64-encoded signature bytes"),
+    at: TimestampSchema,
+});
+//# sourceMappingURL=actor.js.map

package/dist/schemas/actor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actor.js","sourceRoot":"","sources":["../../src/schemas/actor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAElF;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,UAAU;IACV,QAAQ;IACR,UAAU;CACX,CAAC,CAAA;AAGF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACjD,IAAI,EAAE,eAAe;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,QAAQ,CAAC,sCAAsC,CAAC;IAC9F,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,wCAAwC,CAAC;IACxF,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,2BAA2B,CAAC;IAC9E,qBAAqB,EAAE,iBAAiB,CAAC,QAAQ,CAAC,uCAAuC,CAAC;IAC1F,UAAU,EAAE,eAAe;CAC5B,CAAC,CAAA;AAGF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,wBAAwB,CAAC;IACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,8BAA8B,CAAC;IACjE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC/B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,gCAAgC,CAAC;IAChE,EAAE,EAAE,eAAe;CACpB,CAAC,CAAA"}