@runfile-ai/schemas 0.1.0

package/dist/evidence.d.ts

@@ -0,0 +1,955 @@
+import { z } from 'zod';
+/**
+ * Evidence bundle — the exportable, offline-verifiable package consumed by the
+ * Verifier CLI. Combines a slice of events with the manifests that anchor them.
+ *
+ * Structure roughly follows JSON-LD conventions (the PDF rendering is produced
+ * separately by the Evidence Builder service).
+ */
+export declare const EvidenceBundleSchema: z.ZodObject<{
+    bundle_version: z.ZodString;
+    bundle_id: z.ZodString;
+    generated_at: z.ZodString;
+    tenant_id: z.ZodString;
+    engagement_id: z.ZodOptional<z.ZodString>;
+    period: z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        from: string;
+        to: string;
+    }, {
+        from: string;
+        to: string;
+    }>;
+    events: z.ZodArray<z.ZodEffects<z.ZodObject<{
+        schema_version: z.ZodString;
+        event_id: z.ZodString;
+        tenant_id: z.ZodString;
+        agent_run_id: z.ZodString;
+        parent_event_id: z.ZodNullable<z.ZodString>;
+        captured_at: z.ZodString;
+        received_at: z.ZodString;
+        wall_clock_source: z.ZodEnum<["aws_time_sync", "ntp", "host_system", "unknown"]>;
+        sdk: z.ZodObject<{
+            name: z.ZodEnum<["runfile-py", "@runfile/sdk"]>;
+            version: z.ZodString;
+            framework: z.ZodEnum<["langgraph", "langgraph_js", "openai_agents", "openai_agents_js", "anthropic_claude", "anthropic_claude_js", "mastra", "vercel_ai_sdk", "mcp_client", "otel_generic", "manual"]>;
+            framework_version: z.ZodOptional<z.ZodString>;
+            host: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            framework: "langgraph" | "langgraph_js" | "openai_agents" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "vercel_ai_sdk" | "mcp_client" | "otel_generic" | "manual";
+            name: "runfile-py" | "@runfile/sdk";
+            version: string;
+            framework_version?: string | undefined;
+            host?: string | undefined;
+        }, {
+            framework: "langgraph" | "langgraph_js" | "openai_agents" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "vercel_ai_sdk" | "mcp_client" | "otel_generic" | "manual";
+            name: "runfile-py" | "@runfile/sdk";
+            version: string;
+            framework_version?: string | undefined;
+            host?: string | undefined;
+        }>;
+        actor: z.ZodEffects<z.ZodObject<{
+            type: z.ZodEnum<["agent", "human", "tool", "system"]>;
+            agent_identity: z.ZodOptional<z.ZodString>;
+            human_principal: z.ZodOptional<z.ZodString>;
+            delegation_chain: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+            tool_id: z.ZodOptional<z.ZodString>;
+            tool_version_hash: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            type: "agent" | "human" | "tool" | "system";
+            delegation_chain: string[];
+            agent_identity?: string | undefined;
+            human_principal?: string | undefined;
+            tool_id?: string | undefined;
+            tool_version_hash?: string | undefined;
+        }, {
+            type: "agent" | "human" | "tool" | "system";
+            agent_identity?: string | undefined;
+            human_principal?: string | undefined;
+            delegation_chain?: string[] | undefined;
+            tool_id?: string | undefined;
+            tool_version_hash?: string | undefined;
+        }>, {
+            type: "agent" | "human" | "tool" | "system";
+            delegation_chain: string[];
+            agent_identity?: string | undefined;
+            human_principal?: string | undefined;
+            tool_id?: string | undefined;
+            tool_version_hash?: string | undefined;
+        }, {
+            type: "agent" | "human" | "tool" | "system";
+            agent_identity?: string | undefined;
+            human_principal?: string | undefined;
+            delegation_chain?: string[] | undefined;
+            tool_id?: string | undefined;
+            tool_version_hash?: string | undefined;
+        }>;
+        action: z.ZodObject<{
+            kind: z.ZodEnum<["agent_run_start", "agent_run_end", "graph_node_enter", "graph_node_exit", "llm_call", "tool_call", "tool_result", "state_read", "state_write", "decision", "handoff", "human_approval", "human_input", "policy_check", "anomaly_flag", "sdk_diagnostic"]>;
+            name: z.ZodString;
+            outcome: z.ZodOptional<z.ZodEnum<["success", "failure", "partial", "timeout", "cancelled"]>>;
+            duration_ms: z.ZodOptional<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            kind: "agent_run_start" | "agent_run_end" | "graph_node_enter" | "graph_node_exit" | "llm_call" | "tool_call" | "tool_result" | "state_read" | "state_write" | "decision" | "handoff" | "human_approval" | "human_input" | "policy_check" | "anomaly_flag" | "sdk_diagnostic";
+            name: string;
+            outcome?: "success" | "failure" | "partial" | "timeout" | "cancelled" | undefined;
+            duration_ms?: number | undefined;
+        }, {
+            kind: "agent_run_start" | "agent_run_end" | "graph_node_enter" | "graph_node_exit" | "llm_call" | "tool_call" | "tool_result" | "state_read" | "state_write" | "decision" | "handoff" | "human_approval" | "human_input" | "policy_check" | "anomaly_flag" | "sdk_diagnostic";
+            name: string;
+            outcome?: "success" | "failure" | "partial" | "timeout" | "cancelled" | undefined;
+            duration_ms?: number | undefined;
+        }>;
+        subject: z.ZodObject<{
+            resource_urn: z.ZodOptional<z.ZodString>;
+            data_classification: z.ZodOptional<z.ZodEnum<["public", "internal", "confidential", "pii", "phi", "pci", "fci"]>>;
+            regulatory_tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        }, "strict", z.ZodTypeAny, {
+            regulatory_tags?: string[] | undefined;
+            resource_urn?: string | undefined;
+            data_classification?: "public" | "internal" | "confidential" | "pii" | "phi" | "pci" | "fci" | undefined;
+        }, {
+            regulatory_tags?: string[] | undefined;
+            resource_urn?: string | undefined;
+            data_classification?: "public" | "internal" | "confidential" | "pii" | "phi" | "pci" | "fci" | undefined;
+        }>;
+        model_ref: z.ZodOptional<z.ZodObject<{
+            provider: z.ZodEnum<["anthropic", "openai", "google", "aws_bedrock", "azure_openai", "ollama", "self_hosted", "other"]>;
+            model_id: z.ZodString;
+            model_version_hash: z.ZodOptional<z.ZodString>;
+            system_prompt_hash: z.ZodOptional<z.ZodString>;
+            tools_hash: z.ZodOptional<z.ZodString>;
+            input_tokens: z.ZodOptional<z.ZodNumber>;
+            output_tokens: z.ZodOptional<z.ZodNumber>;
+            temperature: z.ZodOptional<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            provider: "anthropic" | "openai" | "google" | "aws_bedrock" | "azure_openai" | "ollama" | "self_hosted" | "other";
+            model_id: string;
+            model_version_hash?: string | undefined;
+            system_prompt_hash?: string | undefined;
+            tools_hash?: string | undefined;
+            input_tokens?: number | undefined;
+            output_tokens?: number | undefined;
+            temperature?: number | undefined;
+        }, {
+            provider: "anthropic" | "openai" | "google" | "aws_bedrock" | "azure_openai" | "ollama" | "self_hosted" | "other";
+            model_id: string;
+            model_version_hash?: string | undefined;
+            system_prompt_hash?: string | undefined;
+            tools_hash?: string | undefined;
+            input_tokens?: number | undefined;
+            output_tokens?: number | undefined;
+            temperature?: number | undefined;
+        }>>;
+        decision: z.ZodOptional<z.ZodObject<{
+            outcome: z.ZodEnum<["approved", "denied", "escalated", "deferred", "no_action", "custom"]>;
+            outcome_label: z.ZodOptional<z.ZodString>;
+            confidence: z.ZodOptional<z.ZodNumber>;
+            human_in_the_loop: z.ZodOptional<z.ZodBoolean>;
+            policy_thresholds_crossed: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            reversed_by_event: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
+            outcome_label?: string | undefined;
+            confidence?: number | undefined;
+            human_in_the_loop?: boolean | undefined;
+            policy_thresholds_crossed?: string[] | undefined;
+            reversed_by_event?: string | undefined;
+        }, {
+            outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
+            outcome_label?: string | undefined;
+            confidence?: number | undefined;
+            human_in_the_loop?: boolean | undefined;
+            policy_thresholds_crossed?: string[] | undefined;
+            reversed_by_event?: string | undefined;
+        }>>;
+        payload_ref: z.ZodOptional<z.ZodObject<{
+            s3_uri: z.ZodString;
+            sha256: z.ZodString;
+            size_bytes: z.ZodNumber;
+            encryption: z.ZodObject<{
+                algorithm: z.ZodLiteral<"aes-256-gcm">;
+                data_key_wrapped: z.ZodString;
+                kms_key_arn: z.ZodOptional<z.ZodString>;
+            }, "strict", z.ZodTypeAny, {
+                algorithm: "aes-256-gcm";
+                data_key_wrapped: string;
+                kms_key_arn?: string | undefined;
+            }, {
+                algorithm: "aes-256-gcm";
+                data_key_wrapped: string;
+                kms_key_arn?: string | undefined;
+            }>;
+            content_type: z.ZodOptional<z.ZodEnum<["application/json", "text/plain", "application/vnd.runfile.llm-request+json", "application/vnd.runfile.llm-response+json", "application/vnd.runfile.tool-call+json", "application/vnd.runfile.tool-result+json", "application/vnd.runfile.state-snapshot+json"]>>;
+            redaction_applied: z.ZodOptional<z.ZodObject<{
+                redacted_classes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                tokenized_classes: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+                classifier_version: z.ZodOptional<z.ZodString>;
+            }, "strict", z.ZodTypeAny, {
+                redacted_classes?: string[] | undefined;
+                tokenized_classes?: string[] | undefined;
+                classifier_version?: string | undefined;
+            }, {
+                redacted_classes?: string[] | undefined;
+                tokenized_classes?: string[] | undefined;
+                classifier_version?: string | undefined;
+            }>>;
+        }, "strict", z.ZodTypeAny, {
+            sha256: string;
+            s3_uri: string;
+            size_bytes: number;
+            encryption: {
+                algorithm: "aes-256-gcm";
+                data_key_wrapped: string;
+                kms_key_arn?: string | undefined;
+            };
+            content_type?: "application/json" | "text/plain" | "application/vnd.runfile.llm-request+json" | "application/vnd.runfile.llm-response+json" | "application/vnd.runfile.tool-call+json" | "application/vnd.runfile.tool-result+json" | "application/vnd.runfile.state-snapshot+json" | undefined;
+            redaction_applied?: {
+                redacted_classes?: string[] | undefined;
+                tokenized_classes?: string[] | undefined;
+                classifier_version?: string | undefined;
+            } | undefined;
+        }, {
+            sha256: string;
+            s3_uri: string;
+            size_bytes: number;
+            encryption: {
+                algorithm: "aes-256-gcm";
+                data_key_wrapped: string;
+                kms_key_arn?: string | undefined;
+            };
+            content_type?: "application/json" | "text/plain" | "application/vnd.runfile.llm-request+json" | "application/vnd.runfile.llm-response+json" | "application/vnd.runfile.tool-call+json" | "application/vnd.runfile.tool-result+json" | "application/vnd.runfile.state-snapshot+json" | undefined;
+            redaction_applied?: {
+                redacted_classes?: string[] | undefined;
+                tokenized_classes?: string[] | undefined;
+                classifier_version?: string | undefined;
+            } | undefined;
+        }>>;
+        redaction_policy_version: z.ZodString;
+        regulatory_scope_version: z.ZodOptional<z.ZodString>;
+        anomaly_flags: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            code: z.ZodEnum<["missing_ambient_context", "chain_break", "out_of_order_arrival", "model_version_drift", "unknown_agent_identity", "data_classification_mismatch", "policy_threshold_without_hitl", "unauthorized_tool_invocation", "redaction_policy_mismatch", "schema_version_warning"]>;
+            severity: z.ZodEnum<["info", "warning", "error", "critical"]>;
+            detail: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            code: "missing_ambient_context" | "chain_break" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning";
+            severity: "info" | "warning" | "error" | "critical";
+            detail?: string | undefined;
+        }, {
+            code: "missing_ambient_context" | "chain_break" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning";
+            severity: "info" | "warning" | "error" | "critical";
+            detail?: string | undefined;
+        }>, "many">>;
+        environment: z.ZodOptional<z.ZodEnum<["production", "staging", "development"]>>;
+        labels: z.ZodOptional<z.ZodEffects<z.ZodRecord<z.ZodString, z.ZodString>, Record<string, string>, Record<string, string>>>;
+        prev_hash: z.ZodString;
+        event_hash: z.ZodString;
+        merkle_inclusion: z.ZodOptional<z.ZodObject<{
+            manifest_uri: z.ZodString;
+            leaf_index: z.ZodNumber;
+            merkle_root: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            manifest_uri: string;
+            leaf_index: number;
+            merkle_root: string;
+        }, {
+            manifest_uri: string;
+            leaf_index: number;
+            merkle_root: string;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        event_hash: string;
+        schema_version: string;
+        event_id: string;
+        tenant_id: string;
+        agent_run_id: string;
+        parent_event_id: string | null;
+        captured_at: string;
+        received_at: string;
+        wall_clock_source: "unknown" | "aws_time_sync" | "ntp" | "host_system";
+        sdk: {
+            framework: "langgraph" | "langgraph_js" | "openai_agents" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "vercel_ai_sdk" | "mcp_client" | "otel_generic" | "manual";
+            name: "runfile-py" | "@runfile/sdk";
+            version: string;
+            framework_version?: string | undefined;
+            host?: string | undefined;
+        };
+        actor: {
+            type: "agent" | "human" | "tool" | "system";
+            delegation_chain: string[];
+            agent_identity?: string | undefined;
+            human_principal?: string | undefined;
+            tool_id?: string | undefined;
+            tool_version_hash?: string | undefined;
+        };
+        action: {
+            kind: "agent_run_start" | "agent_run_end" | "graph_node_enter" | "graph_node_exit" | "llm_call" | "tool_call" | "tool_result" | "state_read" | "state_write" | "decision" | "handoff" | "human_approval" | "human_input" | "policy_check" | "anomaly_flag" | "sdk_diagnostic";
+            name: string;
+            outcome?: "success" | "failure" | "partial" | "timeout" | "cancelled" | undefined;
+            duration_ms?: number | undefined;
+        };
+        subject: {
+            regulatory_tags?: string[] | undefined;
+            resource_urn?: string | undefined;
+            data_classification?: "public" | "internal" | "confidential" | "pii" | "phi" | "pci" | "fci" | undefined;
+        };
+        redaction_policy_version: string;
+        prev_hash: string;
+        decision?: {
+            outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
+            outcome_label?: string | undefined;
+            confidence?: number | undefined;
+            human_in_the_loop?: boolean | undefined;
+            policy_thresholds_crossed?: string[] | undefined;
+            reversed_by_event?: string | undefined;
+        } | undefined;
+        model_ref?: {
+            provider: "anthropic" | "openai" | "google" | "aws_bedrock" | "azure_openai" | "ollama" | "self_hosted" | "other";
+            model_id: string;
+            model_version_hash?: string | undefined;
+            system_prompt_hash?: string | undefined;
+            tools_hash?: string | undefined;
+            input_tokens?: number | undefined;
+            output_tokens?: number | undefined;
+            temperature?: number | undefined;
+        } | undefined;
+        payload_ref?: {
+            sha256: string;
+            s3_uri: string;
+            size_bytes: number;
+            encryption: {
+                algorithm: "aes-256-gcm";
+                data_key_wrapped: string;
+                kms_key_arn?: string | undefined;
+            };
+            content_type?: "application/json" | "text/plain" | "application/vnd.runfile.llm-request+json" | "application/vnd.runfile.llm-response+json" | "application/vnd.runfile.tool-call+json" | "application/vnd.runfile.tool-result+json" | "application/vnd.runfile.state-snapshot+json" | undefined;
+            redaction_applied?: {
+                redacted_classes?: string[] | undefined;
+                tokenized_classes?: string[] | undefined;
+                classifier_version?: string | undefined;
+            } | undefined;
+        } | undefined;
+        regulatory_scope_version?: string | undefined;
+        anomaly_flags?: {
+            code: "missing_ambient_context" | "chain_break" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning";
+            severity: "info" | "warning" | "error" | "critical";
+            detail?: string | undefined;
+        }[] | undefined;
+        environment?: "production" | "staging" | "development" | undefined;
+        labels?: Record<string, string> | undefined;
+        merkle_inclusion?: {
+            manifest_uri: string;
+            leaf_index: number;
+            merkle_root: string;
+        } | undefined;
+    }, {
+        event_hash: string;
+        schema_version: string;
+        event_id: string;
+        tenant_id: string;
+        agent_run_id: string;
+        parent_event_id: string | null;
+        captured_at: string;
+        received_at: string;
+        wall_clock_source: "unknown" | "aws_time_sync" | "ntp" | "host_system";
+        sdk: {
+            framework: "langgraph" | "langgraph_js" | "openai_agents" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "vercel_ai_sdk" | "mcp_client" | "otel_generic" | "manual";
+            name: "runfile-py" | "@runfile/sdk";
+            version: string;
+            framework_version?: string | undefined;
+            host?: string | undefined;
+        };
+        actor: {
+            type: "agent" | "human" | "tool" | "system";
+            agent_identity?: string | undefined;
+            human_principal?: string | undefined;
+            delegation_chain?: string[] | undefined;
+            tool_id?: string | undefined;
+            tool_version_hash?: string | undefined;
+        };
+        action: {
+            kind: "agent_run_start" | "agent_run_end" | "graph_node_enter" | "graph_node_exit" | "llm_call" | "tool_call" | "tool_result" | "state_read" | "state_write" | "decision" | "handoff" | "human_approval" | "human_input" | "policy_check" | "anomaly_flag" | "sdk_diagnostic";
+            name: string;
+            outcome?: "success" | "failure" | "partial" | "timeout" | "cancelled" | undefined;
+            duration_ms?: number | undefined;
+        };
+        subject: {
+            regulatory_tags?: string[] | undefined;
+            resource_urn?: string | undefined;
+            data_classification?: "public" | "internal" | "confidential" | "pii" | "phi" | "pci" | "fci" | undefined;
+        };
+        redaction_policy_version: string;
+        prev_hash: string;
+        decision?: {
+            outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
+            outcome_label?: string | undefined;
+            confidence?: number | undefined;
+            human_in_the_loop?: boolean | undefined;
+            policy_thresholds_crossed?: string[] | undefined;
+            reversed_by_event?: string | undefined;
+        } | undefined;
+        model_ref?: {
+            provider: "anthropic" | "openai" | "google" | "aws_bedrock" | "azure_openai" | "ollama" | "self_hosted" | "other";
+            model_id: string;
+            model_version_hash?: string | undefined;
+            system_prompt_hash?: string | undefined;
+            tools_hash?: string | undefined;
+            input_tokens?: number | undefined;
+            output_tokens?: number | undefined;
+            temperature?: number | undefined;
+        } | undefined;
+        payload_ref?: {
+            sha256: string;
+            s3_uri: string;
+            size_bytes: number;
+            encryption: {
+                algorithm: "aes-256-gcm";
+                data_key_wrapped: string;
+                kms_key_arn?: string | undefined;
+            };
+            content_type?: "application/json" | "text/plain" | "application/vnd.runfile.llm-request+json" | "application/vnd.runfile.llm-response+json" | "application/vnd.runfile.tool-call+json" | "application/vnd.runfile.tool-result+json" | "application/vnd.runfile.state-snapshot+json" | undefined;
+            redaction_applied?: {
+                redacted_classes?: string[] | undefined;
+                tokenized_classes?: string[] | undefined;
+                classifier_version?: string | undefined;
+            } | undefined;
+        } | undefined;
+        regulatory_scope_version?: string | undefined;
+        anomaly_flags?: {
+            code: "missing_ambient_context" | "chain_break" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning";
+            severity: "info" | "warning" | "error" | "critical";
+            detail?: string | undefined;
+        }[] | undefined;
+        environment?: "production" | "staging" | "development" | undefined;
+        labels?: Record<string, string> | undefined;
+        merkle_inclusion?: {
+            manifest_uri: string;
+            leaf_index: number;
+            merkle_root: string;
+        } | undefined;
+    }>, {
+        event_hash: string;
+        schema_version: string;
+        event_id: string;
+        tenant_id: string;
+        agent_run_id: string;
+        parent_event_id: string | null;
+        captured_at: string;
+        received_at: string;
+        wall_clock_source: "unknown" | "aws_time_sync" | "ntp" | "host_system";
+        sdk: {
+            framework: "langgraph" | "langgraph_js" | "openai_agents" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "vercel_ai_sdk" | "mcp_client" | "otel_generic" | "manual";
+            name: "runfile-py" | "@runfile/sdk";
+            version: string;
+            framework_version?: string | undefined;
+            host?: string | undefined;
+        };
+        actor: {
+            type: "agent" | "human" | "tool" | "system";
+            delegation_chain: string[];
+            agent_identity?: string | undefined;
+            human_principal?: string | undefined;
+            tool_id?: string | undefined;
+            tool_version_hash?: string | undefined;
+        };
+        action: {
+            kind: "agent_run_start" | "agent_run_end" | "graph_node_enter" | "graph_node_exit" | "llm_call" | "tool_call" | "tool_result" | "state_read" | "state_write" | "decision" | "handoff" | "human_approval" | "human_input" | "policy_check" | "anomaly_flag" | "sdk_diagnostic";
+            name: string;
+            outcome?: "success" | "failure" | "partial" | "timeout" | "cancelled" | undefined;
+            duration_ms?: number | undefined;
+        };
+        subject: {
+            regulatory_tags?: string[] | undefined;
+            resource_urn?: string | undefined;
+            data_classification?: "public" | "internal" | "confidential" | "pii" | "phi" | "pci" | "fci" | undefined;
+        };
+        redaction_policy_version: string;
+        prev_hash: string;
+        decision?: {
+            outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
+            outcome_label?: string | undefined;
+            confidence?: number | undefined;
+            human_in_the_loop?: boolean | undefined;
+            policy_thresholds_crossed?: string[] | undefined;
+            reversed_by_event?: string | undefined;
+        } | undefined;
+        model_ref?: {
+            provider: "anthropic" | "openai" | "google" | "aws_bedrock" | "azure_openai" | "ollama" | "self_hosted" | "other";
+            model_id: string;
+            model_version_hash?: string | undefined;
+            system_prompt_hash?: string | undefined;
+            tools_hash?: string | undefined;
+            input_tokens?: number | undefined;
+            output_tokens?: number | undefined;
+            temperature?: number | undefined;
+        } | undefined;
+        payload_ref?: {
+            sha256: string;
+            s3_uri: string;
+            size_bytes: number;
+            encryption: {
+                algorithm: "aes-256-gcm";
+                data_key_wrapped: string;
+                kms_key_arn?: string | undefined;
+            };
+            content_type?: "application/json" | "text/plain" | "application/vnd.runfile.llm-request+json" | "application/vnd.runfile.llm-response+json" | "application/vnd.runfile.tool-call+json" | "application/vnd.runfile.tool-result+json" | "application/vnd.runfile.state-snapshot+json" | undefined;
+            redaction_applied?: {
+                redacted_classes?: string[] | undefined;
+                tokenized_classes?: string[] | undefined;
+                classifier_version?: string | undefined;
+            } | undefined;
+        } | undefined;
+        regulatory_scope_version?: string | undefined;
+        anomaly_flags?: {
+            code: "missing_ambient_context" | "chain_break" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning";
+            severity: "info" | "warning" | "error" | "critical";
+            detail?: string | undefined;
+        }[] | undefined;
+        environment?: "production" | "staging" | "development" | undefined;
+        labels?: Record<string, string> | undefined;
+        merkle_inclusion?: {
+            manifest_uri: string;
+            leaf_index: number;
+            merkle_root: string;
+        } | undefined;
+    }, {
+        event_hash: string;
+        schema_version: string;
+        event_id: string;
+        tenant_id: string;
+        agent_run_id: string;
+        parent_event_id: string | null;
+        captured_at: string;
+        received_at: string;
+        wall_clock_source: "unknown" | "aws_time_sync" | "ntp" | "host_system";
+        sdk: {
+            framework: "langgraph" | "langgraph_js" | "openai_agents" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "vercel_ai_sdk" | "mcp_client" | "otel_generic" | "manual";
+            name: "runfile-py" | "@runfile/sdk";
+            version: string;
+            framework_version?: string | undefined;
+            host?: string | undefined;
+        };
+        actor: {
+            type: "agent" | "human" | "tool" | "system";
+            agent_identity?: string | undefined;
+            human_principal?: string | undefined;
+            delegation_chain?: string[] | undefined;
+            tool_id?: string | undefined;
+            tool_version_hash?: string | undefined;
+        };
+        action: {
+            kind: "agent_run_start" | "agent_run_end" | "graph_node_enter" | "graph_node_exit" | "llm_call" | "tool_call" | "tool_result" | "state_read" | "state_write" | "decision" | "handoff" | "human_approval" | "human_input" | "policy_check" | "anomaly_flag" | "sdk_diagnostic";
+            name: string;
+            outcome?: "success" | "failure" | "partial" | "timeout" | "cancelled" | undefined;
+            duration_ms?: number | undefined;
+        };
+        subject: {
+            regulatory_tags?: string[] | undefined;
+            resource_urn?: string | undefined;
+            data_classification?: "public" | "internal" | "confidential" | "pii" | "phi" | "pci" | "fci" | undefined;
+        };
+        redaction_policy_version: string;
+        prev_hash: string;
+        decision?: {
+            outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
+            outcome_label?: string | undefined;
+            confidence?: number | undefined;
+            human_in_the_loop?: boolean | undefined;
+            policy_thresholds_crossed?: string[] | undefined;
+            reversed_by_event?: string | undefined;
+        } | undefined;
+        model_ref?: {
+            provider: "anthropic" | "openai" | "google" | "aws_bedrock" | "azure_openai" | "ollama" | "self_hosted" | "other";
+            model_id: string;
+            model_version_hash?: string | undefined;
+            system_prompt_hash?: string | undefined;
+            tools_hash?: string | undefined;
+            input_tokens?: number | undefined;
+            output_tokens?: number | undefined;
+            temperature?: number | undefined;
+        } | undefined;
+        payload_ref?: {
+            sha256: string;
+            s3_uri: string;
+            size_bytes: number;
+            encryption: {
+                algorithm: "aes-256-gcm";
+                data_key_wrapped: string;
+                kms_key_arn?: string | undefined;
+            };
+            content_type?: "application/json" | "text/plain" | "application/vnd.runfile.llm-request+json" | "application/vnd.runfile.llm-response+json" | "application/vnd.runfile.tool-call+json" | "application/vnd.runfile.tool-result+json" | "application/vnd.runfile.state-snapshot+json" | undefined;
+            redaction_applied?: {
+                redacted_classes?: string[] | undefined;
+                tokenized_classes?: string[] | undefined;
+                classifier_version?: string | undefined;
+            } | undefined;
+        } | undefined;
+        regulatory_scope_version?: string | undefined;
+        anomaly_flags?: {
+            code: "missing_ambient_context" | "chain_break" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning";
+            severity: "info" | "warning" | "error" | "critical";
+            detail?: string | undefined;
+        }[] | undefined;
+        environment?: "production" | "staging" | "development" | undefined;
+        labels?: Record<string, string> | undefined;
+        merkle_inclusion?: {
+            manifest_uri: string;
+            leaf_index: number;
+            merkle_root: string;
+        } | undefined;
+    }>, "many">;
+    manifests: z.ZodArray<z.ZodObject<{
+        manifest_version: z.ZodString;
+        schema_version: z.ZodString;
+        tenant_id: z.ZodString;
+        day_utc: z.ZodString;
+        built_at: z.ZodString;
+        leaf_count: z.ZodNumber;
+        merkle_root: z.ZodString;
+        prev_manifest_root: z.ZodNullable<z.ZodString>;
+        leaves: z.ZodArray<z.ZodObject<{
+            event_id: z.ZodString;
+            event_hash: z.ZodString;
+            leaf_index: z.ZodNumber;
+        }, "strict", z.ZodTypeAny, {
+            event_hash: string;
+            leaf_index: number;
+            event_id: string;
+        }, {
+            event_hash: string;
+            leaf_index: number;
+            event_id: string;
+        }>, "many">;
+        kms_signature: z.ZodObject<{
+            kms_key_arn: z.ZodString;
+            signing_algorithm: z.ZodString;
+            signature_base64: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            kms_key_arn: string;
+            signing_algorithm: string;
+            signature_base64: string;
+        }, {
+            kms_key_arn: string;
+            signing_algorithm: string;
+            signature_base64: string;
+        }>;
+        attestation_document: z.ZodNullable<z.ZodString>;
+        rekor_entry: z.ZodOptional<z.ZodObject<{
+            log_index: z.ZodNumber;
+            log_id: z.ZodString;
+            inclusion_proof: z.ZodString;
+        }, "strict", z.ZodTypeAny, {
+            log_index: number;
+            log_id: string;
+            inclusion_proof: string;
+        }, {
+            log_index: number;
+            log_id: string;
+            inclusion_proof: string;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        merkle_root: string;
+        schema_version: string;
+        tenant_id: string;
+        manifest_version: string;
+        day_utc: string;
+        built_at: string;
+        leaf_count: number;
+        prev_manifest_root: string | null;
+        leaves: {
+            event_hash: string;
+            leaf_index: number;
+            event_id: string;
+        }[];
+        kms_signature: {
+            kms_key_arn: string;
+            signing_algorithm: string;
+            signature_base64: string;
+        };
+        attestation_document: string | null;
+        rekor_entry?: {
+            log_index: number;
+            log_id: string;
+            inclusion_proof: string;
+        } | undefined;
+    }, {
+        merkle_root: string;
+        schema_version: string;
+        tenant_id: string;
+        manifest_version: string;
+        day_utc: string;
+        built_at: string;
+        leaf_count: number;
+        prev_manifest_root: string | null;
+        leaves: {
+            event_hash: string;
+            leaf_index: number;
+            event_id: string;
+        }[];
+        kms_signature: {
+            kms_key_arn: string;
+            signing_algorithm: string;
+            signature_base64: string;
+        };
+        attestation_document: string | null;
+        rekor_entry?: {
+            log_index: number;
+            log_id: string;
+            inclusion_proof: string;
+        } | undefined;
+    }>, "many">;
+    schema_versions_used: z.ZodArray<z.ZodString, "many">;
+    notes: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    tenant_id: string;
+    bundle_version: string;
+    bundle_id: string;
+    generated_at: string;
+    period: {
+        from: string;
+        to: string;
+    };
+    events: {
+        event_hash: string;
+        schema_version: string;
+        event_id: string;
+        tenant_id: string;
+        agent_run_id: string;
+        parent_event_id: string | null;
+        captured_at: string;
+        received_at: string;
+        wall_clock_source: "unknown" | "aws_time_sync" | "ntp" | "host_system";
+        sdk: {
+            framework: "langgraph" | "langgraph_js" | "openai_agents" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "vercel_ai_sdk" | "mcp_client" | "otel_generic" | "manual";
+            name: "runfile-py" | "@runfile/sdk";
+            version: string;
+            framework_version?: string | undefined;
+            host?: string | undefined;
+        };
+        actor: {
+            type: "agent" | "human" | "tool" | "system";
+            delegation_chain: string[];
+            agent_identity?: string | undefined;
+            human_principal?: string | undefined;
+            tool_id?: string | undefined;
+            tool_version_hash?: string | undefined;
+        };
+        action: {
+            kind: "agent_run_start" | "agent_run_end" | "graph_node_enter" | "graph_node_exit" | "llm_call" | "tool_call" | "tool_result" | "state_read" | "state_write" | "decision" | "handoff" | "human_approval" | "human_input" | "policy_check" | "anomaly_flag" | "sdk_diagnostic";
+            name: string;
+            outcome?: "success" | "failure" | "partial" | "timeout" | "cancelled" | undefined;
+            duration_ms?: number | undefined;
+        };
+        subject: {
+            regulatory_tags?: string[] | undefined;
+            resource_urn?: string | undefined;
+            data_classification?: "public" | "internal" | "confidential" | "pii" | "phi" | "pci" | "fci" | undefined;
+        };
+        redaction_policy_version: string;
+        prev_hash: string;
+        decision?: {
+            outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
+            outcome_label?: string | undefined;
+            confidence?: number | undefined;
+            human_in_the_loop?: boolean | undefined;
+            policy_thresholds_crossed?: string[] | undefined;
+            reversed_by_event?: string | undefined;
+        } | undefined;
+        model_ref?: {
+            provider: "anthropic" | "openai" | "google" | "aws_bedrock" | "azure_openai" | "ollama" | "self_hosted" | "other";
+            model_id: string;
+            model_version_hash?: string | undefined;
+            system_prompt_hash?: string | undefined;
+            tools_hash?: string | undefined;
+            input_tokens?: number | undefined;
+            output_tokens?: number | undefined;
+            temperature?: number | undefined;
+        } | undefined;
+        payload_ref?: {
+            sha256: string;
+            s3_uri: string;
+            size_bytes: number;
+            encryption: {
+                algorithm: "aes-256-gcm";
+                data_key_wrapped: string;
+                kms_key_arn?: string | undefined;
+            };
+            content_type?: "application/json" | "text/plain" | "application/vnd.runfile.llm-request+json" | "application/vnd.runfile.llm-response+json" | "application/vnd.runfile.tool-call+json" | "application/vnd.runfile.tool-result+json" | "application/vnd.runfile.state-snapshot+json" | undefined;
+            redaction_applied?: {
+                redacted_classes?: string[] | undefined;
+                tokenized_classes?: string[] | undefined;
+                classifier_version?: string | undefined;
+            } | undefined;
+        } | undefined;
+        regulatory_scope_version?: string | undefined;
+        anomaly_flags?: {
+            code: "missing_ambient_context" | "chain_break" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning";
+            severity: "info" | "warning" | "error" | "critical";
+            detail?: string | undefined;
+        }[] | undefined;
+        environment?: "production" | "staging" | "development" | undefined;
+        labels?: Record<string, string> | undefined;
+        merkle_inclusion?: {
+            manifest_uri: string;
+            leaf_index: number;
+            merkle_root: string;
+        } | undefined;
+    }[];
+    manifests: {
+        merkle_root: string;
+        schema_version: string;
+        tenant_id: string;
+        manifest_version: string;
+        day_utc: string;
+        built_at: string;
+        leaf_count: number;
+        prev_manifest_root: string | null;
+        leaves: {
+            event_hash: string;
+            leaf_index: number;
+            event_id: string;
+        }[];
+        kms_signature: {
+            kms_key_arn: string;
+            signing_algorithm: string;
+            signature_base64: string;
+        };
+        attestation_document: string | null;
+        rekor_entry?: {
+            log_index: number;
+            log_id: string;
+            inclusion_proof: string;
+        } | undefined;
+    }[];
+    schema_versions_used: string[];
+    engagement_id?: string | undefined;
+    notes?: string | undefined;
+}, {
+    tenant_id: string;
+    bundle_version: string;
+    bundle_id: string;
+    generated_at: string;
+    period: {
+        from: string;
+        to: string;
+    };
+    events: {
+        event_hash: string;
+        schema_version: string;
+        event_id: string;
+        tenant_id: string;
+        agent_run_id: string;
+        parent_event_id: string | null;
+        captured_at: string;
+        received_at: string;
+        wall_clock_source: "unknown" | "aws_time_sync" | "ntp" | "host_system";
+        sdk: {
+            framework: "langgraph" | "langgraph_js" | "openai_agents" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "vercel_ai_sdk" | "mcp_client" | "otel_generic" | "manual";
+            name: "runfile-py" | "@runfile/sdk";
+            version: string;
+            framework_version?: string | undefined;
+            host?: string | undefined;
+        };
+        actor: {
+            type: "agent" | "human" | "tool" | "system";
+            agent_identity?: string | undefined;
+            human_principal?: string | undefined;
+            delegation_chain?: string[] | undefined;
+            tool_id?: string | undefined;
+            tool_version_hash?: string | undefined;
+        };
+        action: {
+            kind: "agent_run_start" | "agent_run_end" | "graph_node_enter" | "graph_node_exit" | "llm_call" | "tool_call" | "tool_result" | "state_read" | "state_write" | "decision" | "handoff" | "human_approval" | "human_input" | "policy_check" | "anomaly_flag" | "sdk_diagnostic";
+            name: string;
+            outcome?: "success" | "failure" | "partial" | "timeout" | "cancelled" | undefined;
+            duration_ms?: number | undefined;
+        };
+        subject: {
+            regulatory_tags?: string[] | undefined;
+            resource_urn?: string | undefined;
+            data_classification?: "public" | "internal" | "confidential" | "pii" | "phi" | "pci" | "fci" | undefined;
+        };
+        redaction_policy_version: string;
+        prev_hash: string;
+        decision?: {
+            outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
+            outcome_label?: string | undefined;
+            confidence?: number | undefined;
+            human_in_the_loop?: boolean | undefined;
+            policy_thresholds_crossed?: string[] | undefined;
+            reversed_by_event?: string | undefined;
+        } | undefined;
+        model_ref?: {
+            provider: "anthropic" | "openai" | "google" | "aws_bedrock" | "azure_openai" | "ollama" | "self_hosted" | "other";
+            model_id: string;
+            model_version_hash?: string | undefined;
+            system_prompt_hash?: string | undefined;
+            tools_hash?: string | undefined;
+            input_tokens?: number | undefined;
+            output_tokens?: number | undefined;
+            temperature?: number | undefined;
+        } | undefined;
+        payload_ref?: {
+            sha256: string;
+            s3_uri: string;
+            size_bytes: number;
+            encryption: {
+                algorithm: "aes-256-gcm";
+                data_key_wrapped: string;
+                kms_key_arn?: string | undefined;
+            };
+            content_type?: "application/json" | "text/plain" | "application/vnd.runfile.llm-request+json" | "application/vnd.runfile.llm-response+json" | "application/vnd.runfile.tool-call+json" | "application/vnd.runfile.tool-result+json" | "application/vnd.runfile.state-snapshot+json" | undefined;
+            redaction_applied?: {
+                redacted_classes?: string[] | undefined;
+                tokenized_classes?: string[] | undefined;
+                classifier_version?: string | undefined;
+            } | undefined;
+        } | undefined;
+        regulatory_scope_version?: string | undefined;
+        anomaly_flags?: {
+            code: "missing_ambient_context" | "chain_break" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning";
+            severity: "info" | "warning" | "error" | "critical";
+            detail?: string | undefined;
+        }[] | undefined;
+        environment?: "production" | "staging" | "development" | undefined;
+        labels?: Record<string, string> | undefined;
+        merkle_inclusion?: {
+            manifest_uri: string;
+            leaf_index: number;
+            merkle_root: string;
+        } | undefined;
+    }[];
+    manifests: {
+        merkle_root: string;
+        schema_version: string;
+        tenant_id: string;
+        manifest_version: string;
+        day_utc: string;
+        built_at: string;
+        leaf_count: number;
+        prev_manifest_root: string | null;
+        leaves: {
+            event_hash: string;
+            leaf_index: number;
+            event_id: string;
+        }[];
+        kms_signature: {
+            kms_key_arn: string;
+            signing_algorithm: string;
+            signature_base64: string;
+        };
+        attestation_document: string | null;
+        rekor_entry?: {
+            log_index: number;
+            log_id: string;
+            inclusion_proof: string;
+        } | undefined;
+    }[];
+    schema_versions_used: string[];
+    engagement_id?: string | undefined;
+    notes?: string | undefined;
+}>;
+export type EvidenceBundle = z.infer<typeof EvidenceBundleSchema>;
+//# sourceMappingURL=evidence.d.ts.map