@runfile-ai/schemas 0.4.0 → 0.5.0

package/dist/canonical.d.ts

@@ -21,10 +21,36 @@ export { stringify as canonicalStringify };
  */
 export declare function canonicalSha256(value: unknown): string;
 /**
- * Computes the event_hash for a RunfileEvent.
+ * Fields NOT covered by `event_hash`.
  *
- * Per the canonicalisation spec: the `event_hash` field itself is excluded from
- * canonicalisation — serialise with `event_hash` omitted, compute SHA-256, then set.
+ * The hash commits to the SDK-authored capture fields only — never the
+ * server-set ones. This is what makes the chain work end to end:
+ *   - the SDK can reproduce the hash, so `prev_event_hash_intent` (the previous
+ *     event's `event_hash` as the SDK computed it) is a real integrity claim,
+ *     not noise — a mismatch is a genuine `chain_break`;
+ *   - fields written AFTER the hash is computed (`merkle_inclusion` by the
+ *     Merkle Builder, server-appended `anomaly_flags`) don't retroactively
+ *     invalidate it, so the Verifier re-checks the same bytes the server hashed.
+ *
+ * Exclusion-based (not a whitelist) so additive minor-version fields are
+ * hash-protected automatically. This set is the cross-language chain contract —
+ * the TS reference here, `canonical.go`, and `canonical.py` MUST agree, and the
+ * Verifier CLI must use the same projection. Changing it is chain-breaking:
+ * bump the schema major and re-anchor.
+ */
+export declare const NON_HASHED_EVENT_FIELDS: readonly ["event_hash", "tenant_id", "received_at", "anomaly_flags", "merkle_inclusion", "prev_event_hash_intent"];
+/**
+ * Projects an event onto the fields covered by `event_hash` — i.e. drops the
+ * server-set / transport-only fields in {@link NON_HASHED_EVENT_FIELDS}. Every
+ * consumer hashes `canonicalEventForHash(event)`, so they agree regardless of
+ * which server-set fields happen to be present on the object.
+ */
+export declare function canonicalEventForHash<T extends {
+    event_hash?: unknown;
+}>(event: T): Record<string, unknown>;
+/**
+ * Computes the `event_hash` for a RunfileEvent: SHA-256 over the canonical JSON
+ * of {@link canonicalEventForHash}(event).
  */
 export declare function computeEventHash<T extends {
     event_hash?: unknown;

package/dist/canonical.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAMhD;AAED,+EAA+E;AAC/E,OAAO,EAAE,SAAS,IAAI,kBAAkB,EAAE,CAAC;AAE3C;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEtD;AAMD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAGrF"}
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAMhD;AAED,+EAA+E;AAC/E,OAAO,EAAE,SAAS,IAAI,kBAAkB,EAAE,CAAC;AAE3C;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEtD;AAMD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,uBAAuB,oHAO1B,CAAC;AAIX;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,SAAS;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,EACtE,KAAK,EAAE,CAAC,GACP,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAMzB;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,SAAS;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,CAErF"}

package/dist/canonical.js

@@ -34,13 +34,51 @@ function sha256Hex(input) {
     return createHash('sha256').update(input).digest('hex');
 }
 /**
- * Computes the event_hash for a RunfileEvent.
+ * Fields NOT covered by `event_hash`.
  *
- * Per the canonicalisation spec: the `event_hash` field itself is excluded from
- * canonicalisation — serialise with `event_hash` omitted, compute SHA-256, then set.
+ * The hash commits to the SDK-authored capture fields only — never the
+ * server-set ones. This is what makes the chain work end to end:
+ *   - the SDK can reproduce the hash, so `prev_event_hash_intent` (the previous
+ *     event's `event_hash` as the SDK computed it) is a real integrity claim,
+ *     not noise — a mismatch is a genuine `chain_break`;
+ *   - fields written AFTER the hash is computed (`merkle_inclusion` by the
+ *     Merkle Builder, server-appended `anomaly_flags`) don't retroactively
+ *     invalidate it, so the Verifier re-checks the same bytes the server hashed.
+ *
+ * Exclusion-based (not a whitelist) so additive minor-version fields are
+ * hash-protected automatically. This set is the cross-language chain contract —
+ * the TS reference here, `canonical.go`, and `canonical.py` MUST agree, and the
+ * Verifier CLI must use the same projection. Changing it is chain-breaking:
+ * bump the schema major and re-anchor.
+ */
+export const NON_HASHED_EVENT_FIELDS = [
+    'event_hash', //              the hash field itself
+    'tenant_id', //               server-resolved from the API key, never SDK-sent
+    'received_at', //             server receive stamp
+    'anomaly_flags', //           server may append flags after the hash is computed
+    'merkle_inclusion', //        populated later by the Merkle Builder
+    'prev_event_hash_intent', //  wire-only advisory; the hash commits to prev_event_hash
+];
+const NON_HASHED = new Set(NON_HASHED_EVENT_FIELDS);
+/**
+ * Projects an event onto the fields covered by `event_hash` — i.e. drops the
+ * server-set / transport-only fields in {@link NON_HASHED_EVENT_FIELDS}. Every
+ * consumer hashes `canonicalEventForHash(event)`, so they agree regardless of
+ * which server-set fields happen to be present on the object.
+ */
+export function canonicalEventForHash(event) {
+    const out = {};
+    for (const [key, value] of Object.entries(event)) {
+        if (!NON_HASHED.has(key))
+            out[key] = value;
+    }
+    return out;
+}
+/**
+ * Computes the `event_hash` for a RunfileEvent: SHA-256 over the canonical JSON
+ * of {@link canonicalEventForHash}(event).
  */
 export function computeEventHash(event) {
-    const { event_hash: _omit, ...rest } = event;
-    return canonicalSha256(rest);
+    return canonicalSha256(canonicalEventForHash(event));
 }
 //# sourceMappingURL=canonical.js.map

package/dist/canonical.js.map

@@ -1 +1 @@
-{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,UAAU,EAAmB,MAAM,aAAa,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,OAAO,EAAE,SAAS,IAAI,kBAAkB,EAAE,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,UAAU,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAqC,KAAQ;IAC3E,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAC7C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../src/canonical.ts"],"names":[],"mappings":"AAAA,OAAO,YAAY,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,UAAU,EAAmB,MAAM,aAAa,CAAC;AAE1D;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,iEAAiE,CAAC,CAAC;IACzF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,OAAO,EAAE,SAAS,IAAI,kBAAkB,EAAE,CAAC;AAE3C;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,UAAU,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACjD,CAAC;AAED,SAAS,SAAS,CAAC,KAAiB;IAClC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,YAAY,EAAE,qCAAqC;IACnD,WAAW,EAAE,iEAAiE;IAC9E,aAAa,EAAE,mCAAmC;IAClD,eAAe,EAAE,+DAA+D;IAChF,kBAAkB,EAAE,+CAA+C;IACnE,wBAAwB,EAAE,2DAA2D;CAC7E,CAAC;AAEX,MAAM,UAAU,GAAG,IAAI,GAAG,CAAS,uBAAuB,CAAC,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAQ;IAER,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAqC,KAAQ;IAC3E,OAAO,eAAe,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/event.d.ts

@@ -623,10 +623,10 @@ export declare const RunfileRunSchema: z.ZodObject<{
         merkle_root: string;
     }>, "many">>;
 }, "strict", z.ZodTypeAny, {
+    tenant_id: string;
     agent_identity: string;
     run_id: string;
     schema_version: string;
-    tenant_id: string;
     lifecycle_state: "awaiting_webhook" | "awaiting_schedule" | "active" | "awaiting_human" | "ended";
     started_at: string;
     redaction_policy_version: string;
@@ -678,10 +678,10 @@ export declare const RunfileRunSchema: z.ZodObject<{
         merkle_root: string;
     }[] | undefined;
 }, {
+    tenant_id: string;
     agent_identity: string;
     run_id: string;
     schema_version: string;
-    tenant_id: string;
     lifecycle_state: "awaiting_webhook" | "awaiting_schedule" | "active" | "awaiting_human" | "ended";
     started_at: string;
     redaction_policy_version: string;
@@ -1154,16 +1154,16 @@ export declare const RunfileEventSchema: z.ZodEffects<z.ZodObject<{
     }>>;
 }, "strict", z.ZodTypeAny, {
     event_hash: string;
+    tenant_id: string;
+    received_at: string;
     run_id: string;
     event_id: string;
     schema_version: string;
-    tenant_id: string;
     redaction_policy_version: string;
     parent_event_id: string | null;
     segment_index: number;
     local_seq: number;
     captured_at: string;
-    received_at: string;
     wall_clock_source: "unknown" | "aws_time_sync" | "ntp" | "host_system";
     sdk: {
         framework: "langgraph" | "openai_agents" | "claude_agent_sdk" | "vercel_ai_sdk" | "manual" | "langgraph_js" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "pydantic_ai" | "crewai" | "mcp_client" | "otel_generic";
@@ -1188,6 +1188,16 @@ export declare const RunfileEventSchema: z.ZodEffects<z.ZodObject<{
         duration_ms?: number | undefined;
     };
     prev_event_hash: string;
+    anomaly_flags?: {
+        code: "missing_ambient_context" | "chain_break" | "sequence_gap" | "causality_violation" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning" | "agent_identity_mismatch_with_run" | "suspension_sla_exceeded" | "apparent_crash_detected" | "active_duration_exceeds_threshold" | "framework_signal_unrecognised" | "otel_attribute_missing" | "delegation_loop_detected";
+        severity: "info" | "warning" | "error" | "critical";
+        detail?: string | undefined;
+    }[] | undefined;
+    merkle_inclusion?: {
+        manifest_uri: string;
+        leaf_index: number;
+        merkle_root: string;
+    } | undefined;
     decision?: {
         outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
         outcome_label?: string | undefined;
@@ -1283,28 +1293,18 @@ export declare const RunfileEventSchema: z.ZodEffects<z.ZodObject<{
         gen_ai_conversation_id?: string | undefined;
         extra?: Record<string, string | number | boolean> | undefined;
     } | undefined;
-    anomaly_flags?: {
-        code: "missing_ambient_context" | "chain_break" | "sequence_gap" | "causality_violation" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning" | "agent_identity_mismatch_with_run" | "suspension_sla_exceeded" | "apparent_crash_detected" | "active_duration_exceeds_threshold" | "framework_signal_unrecognised" | "otel_attribute_missing" | "delegation_loop_detected";
-        severity: "info" | "warning" | "error" | "critical";
-        detail?: string | undefined;
-    }[] | undefined;
-    merkle_inclusion?: {
-        manifest_uri: string;
-        leaf_index: number;
-        merkle_root: string;
-    } | undefined;
 }, {
     event_hash: string;
+    tenant_id: string;
+    received_at: string;
     run_id: string;
     event_id: string;
     schema_version: string;
-    tenant_id: string;
     redaction_policy_version: string;
     parent_event_id: string | null;
     segment_index: number;
     local_seq: number;
     captured_at: string;
-    received_at: string;
     wall_clock_source: "unknown" | "aws_time_sync" | "ntp" | "host_system";
     sdk: {
         framework: "langgraph" | "openai_agents" | "claude_agent_sdk" | "vercel_ai_sdk" | "manual" | "langgraph_js" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "pydantic_ai" | "crewai" | "mcp_client" | "otel_generic";
@@ -1329,6 +1329,16 @@ export declare const RunfileEventSchema: z.ZodEffects<z.ZodObject<{
         duration_ms?: number | undefined;
     };
     prev_event_hash: string;
+    anomaly_flags?: {
+        code: "missing_ambient_context" | "chain_break" | "sequence_gap" | "causality_violation" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning" | "agent_identity_mismatch_with_run" | "suspension_sla_exceeded" | "apparent_crash_detected" | "active_duration_exceeds_threshold" | "framework_signal_unrecognised" | "otel_attribute_missing" | "delegation_loop_detected";
+        severity: "info" | "warning" | "error" | "critical";
+        detail?: string | undefined;
+    }[] | undefined;
+    merkle_inclusion?: {
+        manifest_uri: string;
+        leaf_index: number;
+        merkle_root: string;
+    } | undefined;
     decision?: {
         outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
         outcome_label?: string | undefined;
@@ -1424,28 +1434,18 @@ export declare const RunfileEventSchema: z.ZodEffects<z.ZodObject<{
         gen_ai_conversation_id?: string | undefined;
         extra?: Record<string, string | number | boolean> | undefined;
     } | undefined;
-    anomaly_flags?: {
-        code: "missing_ambient_context" | "chain_break" | "sequence_gap" | "causality_violation" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning" | "agent_identity_mismatch_with_run" | "suspension_sla_exceeded" | "apparent_crash_detected" | "active_duration_exceeds_threshold" | "framework_signal_unrecognised" | "otel_attribute_missing" | "delegation_loop_detected";
-        severity: "info" | "warning" | "error" | "critical";
-        detail?: string | undefined;
-    }[] | undefined;
-    merkle_inclusion?: {
-        manifest_uri: string;
-        leaf_index: number;
-        merkle_root: string;
-    } | undefined;
 }>, {
     event_hash: string;
+    tenant_id: string;
+    received_at: string;
     run_id: string;
     event_id: string;
     schema_version: string;
-    tenant_id: string;
     redaction_policy_version: string;
     parent_event_id: string | null;
     segment_index: number;
     local_seq: number;
     captured_at: string;
-    received_at: string;
     wall_clock_source: "unknown" | "aws_time_sync" | "ntp" | "host_system";
     sdk: {
         framework: "langgraph" | "openai_agents" | "claude_agent_sdk" | "vercel_ai_sdk" | "manual" | "langgraph_js" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "pydantic_ai" | "crewai" | "mcp_client" | "otel_generic";
@@ -1470,6 +1470,16 @@ export declare const RunfileEventSchema: z.ZodEffects<z.ZodObject<{
         duration_ms?: number | undefined;
     };
     prev_event_hash: string;
+    anomaly_flags?: {
+        code: "missing_ambient_context" | "chain_break" | "sequence_gap" | "causality_violation" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning" | "agent_identity_mismatch_with_run" | "suspension_sla_exceeded" | "apparent_crash_detected" | "active_duration_exceeds_threshold" | "framework_signal_unrecognised" | "otel_attribute_missing" | "delegation_loop_detected";
+        severity: "info" | "warning" | "error" | "critical";
+        detail?: string | undefined;
+    }[] | undefined;
+    merkle_inclusion?: {
+        manifest_uri: string;
+        leaf_index: number;
+        merkle_root: string;
+    } | undefined;
     decision?: {
         outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
         outcome_label?: string | undefined;
@@ -1565,28 +1575,18 @@ export declare const RunfileEventSchema: z.ZodEffects<z.ZodObject<{
         gen_ai_conversation_id?: string | undefined;
         extra?: Record<string, string | number | boolean> | undefined;
     } | undefined;
-    anomaly_flags?: {
-        code: "missing_ambient_context" | "chain_break" | "sequence_gap" | "causality_violation" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning" | "agent_identity_mismatch_with_run" | "suspension_sla_exceeded" | "apparent_crash_detected" | "active_duration_exceeds_threshold" | "framework_signal_unrecognised" | "otel_attribute_missing" | "delegation_loop_detected";
-        severity: "info" | "warning" | "error" | "critical";
-        detail?: string | undefined;
-    }[] | undefined;
-    merkle_inclusion?: {
-        manifest_uri: string;
-        leaf_index: number;
-        merkle_root: string;
-    } | undefined;
 }, {
     event_hash: string;
+    tenant_id: string;
+    received_at: string;
     run_id: string;
     event_id: string;
     schema_version: string;
-    tenant_id: string;
     redaction_policy_version: string;
     parent_event_id: string | null;
     segment_index: number;
     local_seq: number;
     captured_at: string;
-    received_at: string;
     wall_clock_source: "unknown" | "aws_time_sync" | "ntp" | "host_system";
     sdk: {
         framework: "langgraph" | "openai_agents" | "claude_agent_sdk" | "vercel_ai_sdk" | "manual" | "langgraph_js" | "openai_agents_js" | "anthropic_claude" | "anthropic_claude_js" | "mastra" | "pydantic_ai" | "crewai" | "mcp_client" | "otel_generic";
@@ -1611,6 +1611,16 @@ export declare const RunfileEventSchema: z.ZodEffects<z.ZodObject<{
         duration_ms?: number | undefined;
     };
     prev_event_hash: string;
+    anomaly_flags?: {
+        code: "missing_ambient_context" | "chain_break" | "sequence_gap" | "causality_violation" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning" | "agent_identity_mismatch_with_run" | "suspension_sla_exceeded" | "apparent_crash_detected" | "active_duration_exceeds_threshold" | "framework_signal_unrecognised" | "otel_attribute_missing" | "delegation_loop_detected";
+        severity: "info" | "warning" | "error" | "critical";
+        detail?: string | undefined;
+    }[] | undefined;
+    merkle_inclusion?: {
+        manifest_uri: string;
+        leaf_index: number;
+        merkle_root: string;
+    } | undefined;
     decision?: {
         outcome: "custom" | "approved" | "denied" | "escalated" | "deferred" | "no_action";
         outcome_label?: string | undefined;
@@ -1706,16 +1716,6 @@ export declare const RunfileEventSchema: z.ZodEffects<z.ZodObject<{
         gen_ai_conversation_id?: string | undefined;
         extra?: Record<string, string | number | boolean> | undefined;
     } | undefined;
-    anomaly_flags?: {
-        code: "missing_ambient_context" | "chain_break" | "sequence_gap" | "causality_violation" | "out_of_order_arrival" | "model_version_drift" | "unknown_agent_identity" | "data_classification_mismatch" | "policy_threshold_without_hitl" | "unauthorized_tool_invocation" | "redaction_policy_mismatch" | "schema_version_warning" | "agent_identity_mismatch_with_run" | "suspension_sla_exceeded" | "apparent_crash_detected" | "active_duration_exceeds_threshold" | "framework_signal_unrecognised" | "otel_attribute_missing" | "delegation_loop_detected";
-        severity: "info" | "warning" | "error" | "critical";
-        detail?: string | undefined;
-    }[] | undefined;
-    merkle_inclusion?: {
-        manifest_uri: string;
-        leaf_index: number;
-        merkle_root: string;
-    } | undefined;
 }>;
 export type RunfileEvent = z.infer<typeof RunfileEventSchema>;
 export declare const ZERO_PREV_HASH: `sha256:${string}`;