@sealkeeper/schema 0.4.0 → 0.4.1

package/NOTICE

@@ -1,2 +1,2 @@
 Vouched schema
-Copyright 2026 Carel Meyer
+Copyright 2026 The SealKeeper Authors

package/README.md

@@ -1,9 +1,9 @@
 # @sealkeeper/schema
 
-Shared schemas and helpers for [Vouched](https://vouched.run), the reputation layer for AI agents.
+Shared schemas and helpers for [SealKeeper](https://sealkeeper.run), the reputation layer for AI agents.
 
-- `@sealkeeper/schema` exports the Zod schemas, the event taxonomy, the JWS signing helpers, credential verification and the agent id helper. No database dependency. The `vouched` CLI bundles this entrypoint.
-- `@sealkeeper/schema/db` exports the Drizzle tables the Vouched API uses. It needs `drizzle-orm` and `postgres`, which are optional peer dependencies, so installing the package for verification pulls neither. Install both yourself to use this entrypoint.
+- `@sealkeeper/schema` exports the Zod schemas, the event taxonomy, the JWS signing helpers, credential verification and the agent id helper. No database dependency. The `sealkeeper` CLI bundles this entrypoint.
+- `@sealkeeper/schema/db` exports the Drizzle tables the SealKeeper API uses. It needs `drizzle-orm` and `postgres`, which are optional peer dependencies, so installing the package for verification pulls neither. Install both yourself to use this entrypoint.
 
 ```sh
 npm install @sealkeeper/schema

package/dist/agent-name.js

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 // An agent's name, unique per operator. Together with the operator's GitHub
-// login it makes the handle, as in carelmeyer/claude-code. The agent id (the
+// login it makes the handle, as in alice/claude-code. The agent id (the
 // public key) stays the permanent key, the name can change.
 //
 // Lowercase letters, digits and hyphens, 2 to 39 characters, starting and

package/dist/api.d.ts

@@ -42,6 +42,7 @@ export declare const AgentResponse: z.ZodObject<{
         login: z.ZodString;
     }, z.core.$strict>;
     createdAt: z.ZodISODateTime;
+    operatedBySealKeeper: z.ZodOptional<z.ZodBoolean>;
     operatedByVouched: z.ZodOptional<z.ZodBoolean>;
     handle: z.ZodOptional<z.ZodString>;
     previousName: z.ZodOptional<z.ZodNullable<z.ZodString>>;
@@ -156,7 +157,8 @@ export declare const AgentSummary: z.ZodObject<{
     operator: z.ZodObject<{
         login: z.ZodString;
     }, z.core.$strict>;
-    operatedByVouched: z.ZodBoolean;
+    operatedBySealKeeper: z.ZodBoolean;
+    operatedByVouched: z.ZodOptional<z.ZodBoolean>;
     createdAt: z.ZodISODateTime;
     lastSeenAt: z.ZodNullable<z.ZodISODateTime>;
     topScores: z.ZodArray<z.ZodObject<{
@@ -203,7 +205,8 @@ export declare const AgentsListResponse: z.ZodObject<{
         operator: z.ZodObject<{
             login: z.ZodString;
         }, z.core.$strict>;
-        operatedByVouched: z.ZodBoolean;
+        operatedBySealKeeper: z.ZodBoolean;
+        operatedByVouched: z.ZodOptional<z.ZodBoolean>;
         createdAt: z.ZodISODateTime;
         lastSeenAt: z.ZodNullable<z.ZodISODateTime>;
         topScores: z.ZodArray<z.ZodObject<{
@@ -626,7 +629,8 @@ export declare const LeaderboardEntry: z.ZodObject<{
     value: z.ZodNumber;
     verifiedTasks: z.ZodInt;
     seedTasks: z.ZodOptional<z.ZodInt>;
-    operatedByVouched: z.ZodBoolean;
+    operatedBySealKeeper: z.ZodBoolean;
+    operatedByVouched: z.ZodOptional<z.ZodBoolean>;
     level: z.ZodOptional<z.ZodEnum<{
         bronze: "bronze";
         gold: "gold";
@@ -670,7 +674,8 @@ export declare const LeaderboardResponse: z.ZodObject<{
         value: z.ZodNumber;
         verifiedTasks: z.ZodInt;
         seedTasks: z.ZodOptional<z.ZodInt>;
-        operatedByVouched: z.ZodBoolean;
+        operatedBySealKeeper: z.ZodBoolean;
+        operatedByVouched: z.ZodOptional<z.ZodBoolean>;
         level: z.ZodOptional<z.ZodEnum<{
             bronze: "bronze";
             gold: "gold";

package/dist/api.js

@@ -41,7 +41,7 @@ export const RegisterAgentRequest = z.strictObject({
 // loose so a client never refuses an answer over a name.
 const Name = z.string().min(1).max(64);
 const Operator = z.strictObject({ login: z.string().min(1).max(39) });
-// login/name, as in carelmeyer/claude-code. Built by the API from the
+// login/name, as in alice/claude-code. Built by the API from the
 // operator's current login and the agent's current name, so clients show
 // and link it as they got it and never assemble it.
 export const AgentHandle = z.string().min(3).max(79);
@@ -69,13 +69,17 @@ export const AgentResponse = z.strictObject({
     version: Version,
     operator: Operator,
     createdAt: Timestamp,
-    // True for an agent Vouched runs itself, such as the one that posts the
+    // True for an agent SealKeeper runs itself, such as the one that posts the
     // seed tasks. GET /v1/agents/:id always sends it. The registration answer
     // leaves it out, because CLI 0.1.0 parses that answer strictly and would
     // refuse a key it does not know.
+    operatedBySealKeeper: z.boolean().optional(),
+    // Deprecated. The old name of operatedBySealKeeper, sent with the same
+    // value wherever the new one is, because CLI 0.4.2 and earlier read only
+    // this one. Removed in VOU-77.
     operatedByVouched: z.boolean().optional(),
     // Sent by every read and by rename, left out of the registration answer
-    // for the same reason as operatedByVouched.
+    // for the same reason as operatedBySealKeeper.
     handle: AgentHandle.optional(),
     // The name before the latest rename, when that rename was in the last
     // RENAME_REDIRECT_DAYS days, else null. Sent with handle.
@@ -215,7 +219,10 @@ export const AgentSummary = z.strictObject({
     handle: AgentHandle,
     version: Version,
     operator: Operator,
-    operatedByVouched: z.boolean(),
+    // True for an agent SealKeeper runs itself. See AgentResponse.
+    operatedBySealKeeper: z.boolean(),
+    // Deprecated, the old name with the same value. Removed in VOU-77.
+    operatedByVouched: z.boolean().optional(),
     createdAt: Timestamp,
     lastSeenAt: Timestamp.nullable(),
     topScores: z.array(TopScore).max(2),
@@ -405,8 +412,10 @@ export const LeaderboardEntry = z.strictObject({
     // How many of verifiedTasks the seed agent posted. The API always sends
     // it. Optional so the web still reads an answer from an older API.
     seedTasks: Count.optional(),
-    // True for an agent Vouched runs itself. See AgentResponse.
-    operatedByVouched: z.boolean(),
+    // True for an agent SealKeeper runs itself. See AgentResponse.
+    operatedBySealKeeper: z.boolean(),
+    // Deprecated, the old name with the same value. Removed in VOU-77.
+    operatedByVouched: z.boolean().optional(),
     // As on AgentResponse. Optional so the web reads an older API's answer.
     level: Level.optional(),
     standing: Standing.optional(),

package/dist/db/client.d.ts

@@ -1,5 +1,8 @@
 import postgres from 'postgres';
-export declare function createDb(url: string): import("drizzle-orm/postgres-js").PostgresJsDatabase<{
+export type DbOptions = {
+    max?: number;
+};
+export declare function createDb(url: string, options?: DbOptions): import("drizzle-orm/postgres-js").PostgresJsDatabase<{
     operators: import("drizzle-orm/pg-core").PgTableWithColumns<{
         name: "operators";
         schema: undefined;
@@ -1887,7 +1890,7 @@ export declare function createDb(url: string): import("drizzle-orm/postgres-js")
         dialect: 'pg';
     }>;
 }> & {
-    $client: postgres.Sql<never>;
+    $client: postgres.Sql<{}>;
 };
 export type Db = ReturnType<typeof createDb>;
 export type Tx = Parameters<Parameters<Db['transaction']>[0]>[0];

package/dist/db/client.js

@@ -29,6 +29,8 @@ const schema = {
     agentRenames,
     deletedOperators,
 };
-export function createDb(url) {
-    return drizzle(postgres(...pgArgs(url)), { schema });
+export function createDb(url, options = {}) {
+    const [conn, pgOptions] = pgArgs(url);
+    const max = options.max === undefined ? {} : { max: options.max };
+    return drizzle(postgres(conn, { ...pgOptions, ...max }), { schema });
 }

package/dist/db/index.d.ts

@@ -15,7 +15,7 @@ export { DrizzleQueryError } from 'drizzle-orm/errors';
 export { agentRenames } from './agent-renames.js';
 export type { Agent, NewAgent } from './agents.js';
 export { agents } from './agents.js';
-export { createDb, type Db, type Tx } from './client.js';
+export { createDb, type Db, type DbOptions, type Tx } from './client.js';
 export { credentials } from './credentials.js';
 export { deletedOperators } from './deleted-operators.js';
 export { events } from './events.js';

package/dist/tasks.js

@@ -72,9 +72,39 @@ function redactSubschema(node) {
         return node;
     return isJsonObject(node) ? redactJsonSchema(node) : {};
 }
+const BOUNDS = [
+    'minimum',
+    'maximum',
+    'exclusiveMinimum',
+    'exclusiveMaximum',
+];
+const finite = (v) => typeof v === 'number' && Number.isFinite(v) ? v : undefined;
+// True when the numeric bounds leave room for one value only, such as
+// minimum 42 with maximum 42, or an integer above 41 and below 43. Those
+// pin the answer as surely as const, so the redacted copy drops all four
+// bounds (VOU-107). Not exported, so the schema package's exports stay
+// the ones on npm.
+function boundsPinOneValue(schema) {
+    const [min, max, xmin, xmax] = BOUNDS.map((k) => finite(schema[k]));
+    if (min !== undefined && min === max)
+        return true;
+    // Null never meets a numeric bound, so a nullable integer leaks the
+    // same one value as a plain integer.
+    const types = Array.isArray(schema.type) ? schema.type : [schema.type];
+    const numeric = types.filter((t) => t !== 'null');
+    if (numeric.length === 0 || !numeric.every((t) => t === 'integer')) {
+        return false;
+    }
+    const lo = Math.max(min === undefined ? -Infinity : Math.ceil(min), xmin === undefined ? -Infinity : Math.floor(xmin) + 1);
+    const hi = Math.min(max === undefined ? Infinity : Math.floor(max), xmax === undefined ? Infinity : Math.ceil(xmax) - 1);
+    return lo === hi;
+}
 export function redactJsonSchema(schema) {
+    const pinned = boundsPinOneValue(schema);
     const out = {};
     for (const [key, value] of Object.entries(schema)) {
+        if (pinned && BOUNDS.includes(key))
+            continue;
         if (SHAPE_DATA.has(key)) {
             out[key] = Array.isArray(value) ? [...value] : value;
         }

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@sealkeeper/schema",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "private": false,
-  "description": "Zod schemas, event taxonomy and signing helpers for Vouched.",
+  "description": "Zod schemas, event taxonomy and signing helpers for SealKeeper.",
   "license": "Apache-2.0",
   "homepage": "https://sealkeeper.run/seal/standard",
   "repository": {