@sema-ai/registry-core 0.10.3

package/dist/resolve-roster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-roster.js","sourceRoot":"","sources":["../src/resolve-roster.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,4EAA4E;AAC5E,4FAA4F;AAC5F,wEAAwE;AACxE,sBAAsB;AAEtB,sCAAsC;AACtC,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,CAAyC,CAAC;AAC9G,oCAAoC;AACpC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,UAAU,EAAE,WAAW,CAAyC,CAAC;AAEpG;;qEAEqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,CAAmD;IACnF,MAAM,GAAG,GAA2C,EAAE,CAAC;IACvD,IAAI,CAAC,CAAC,YAAY;QAAE,KAAK,MAAM,IAAI,IAAI,oBAAoB;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;IACnG,IAAI,CAAC,CAAC,UAAU;QAAE,KAAK,MAAM,IAAI,IAAI,kBAAkB;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC;IAC7F,OAAO,GAAG,CAAC;AACb,CAAC;AAYD;+EAC+E;AAC/E,SAAS,SAAS,CAAmC,KAAU,EAAE,UAAyB;IACxF,IAAI,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;AACtF,CAAC;AAED;;;;;+EAK+E;AAC/E,SAAS,OAAO,CAAC,GAAoB,EAAE,MAAoB,EAAE,UAAyB;IACpF,OAAO;QACL,GAAG,GAAG;QACN,MAAM;QACN,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACxB,4GAA4G;QAC5G,kHAAkH;QAClH,WAAW,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE;QAC7E,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QAC9E,GAAG,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE;KACzD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,GAAoB,EAAE,MAAiC;IAC/F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC;IACtG,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5F,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,kGAAkG;QAClG,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC;IAChH,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,qCAAqC;IACzG,MAAM,cAAc,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;IACtG,4FAA4F;IAC5F,6GAA6G;IAC7G,wGAAwG;IACxG,wFAAwF;IACxF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,YAAY,GAAG,MAAM,CAAC,gBAAgB,IAAI,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC;IAC5E,sGAAsG;IACtG,yGAAyG;IACzG,2GAA2G;IAC3G,4GAA4G;IAC5G,mGAAmG;IACnG,iEAAiE;IACjE,wGAAwG;IACxG,wGAAwG;IACxG,6GAA6G;IAC7G,yGAAyG;IACzG,2GAA2G;IAC3G,iGAAiG;IACjG,MAAM,QAAQ,GAAG,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;IAChG,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9H,4GAA4G;IAC5G,yGAAyG;IACzG,4GAA4G;IAC5G,oGAAoG;IACpG,+GAA+G;IAC/G,MAAM,aAAa,GAAG,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,8EAA8E;IAC9E,iEAAiE;IACjE,2EAA2E;IAC3E,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnD,GAAG,CAAC;QACJ,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAgD;KAChK,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAiB;QAC3B,MAAM,EAAE,cAAc;QACtB,KAAK;QACL,gBAAgB,EAAE,YAAY,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa;QACvI,UAAU;QACV,eAAe,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe;KAC5C,CAAC;IACF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC;IAC1D,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;AAChF,CAAC"}

package/dist/safety-merge-spec.d.ts

@@ -0,0 +1,328 @@
+/**
+ * #14 SAFETY MERGE-SPEC — the ONE machine-readable per-category merge/enforcement table that every settings
+ * resolver (TOC shell-adapter + TOB center/service) reads, so they never re-implement (and drift on) the merge
+ * law. This formalizes settings-core's v2-design §3 merge-spec into a published-data contract; the SEMANTIC
+ * author is settings-core, center maintains the formalized artifact here (registry-core), the axis VALUE domains
+ * are core's (@sema-ai/core SAFETY_AXIS_VOCABULARY — validated by a dev-only conformance test, never a runtime
+ * import). Each consumer keeps its OWN key→category map (client's SemaSettings KEY_CONTRACTS, center's
+ * config-field→category map); THIS file is only the shared category spec they all cite — no third copy of the law.
+ *
+ * Per-category behavior is fully determined by `mergeShape` + `minTrust` + `tighten` + `enforcement`; a resolver
+ * reads this table and has NO per-key special-casing.
+ */
+import { z } from "zod";
+/** How values from different layers/principals combine for a category. */
+export declare const MergeShape: z.ZodEnum<["denyFirst", "replace", "runAll", "overrideByName", "concat"]>;
+export type MergeShape = z.infer<typeof MergeShape>;
+/** The MINIMUM trust tier a layer/principal must have to set this category (ascending trust). */
+export declare const MinTrust: z.ZodEnum<["local", "session", "project", "global", "managed"]>;
+export type MinTrust = z.infer<typeof MinTrust>;
+/** WHERE the category is enforced (STRENGTH) — MUST stay in lockstep with `EffectiveKey.enforcement` (types.ts).
+ *  gate=data-plane engine, server=control-plane/TOB boundary, resolver=merger correctness, client=UI only. */
+export declare const SpecEnforcement: z.ZodEnum<["gate", "server", "resolver", "client"]>;
+export type SpecEnforcement = z.infer<typeof SpecEnforcement>;
+/** Fail direction when enforcement can't be evaluated. fail-OPEN is allowed for `client` OR `resolver`
+ *  enforcement on NON-secret keys (additive merges like mcpServers/rules/env); `gate`/`server`/secret → CLOSED. */
+export declare const FailMode: z.ZodEnum<["closed", "open"]>;
+export type FailMode = z.infer<typeof FailMode>;
+/** The monotone tighten-only direction for a category (which way is "stricter"). `enumRank.order` lists values
+ *  from LOOSEST→STRICTEST; `boolStricter.strict` is the bool value that is the tighter one; `setNarrower` = a
+ *  subset is tighter; `policyDenyWins` = deny beats allow; `none` = not rank-tightenable (replace / conflict-reject). */
+export declare const TightenRule: z.ZodDiscriminatedUnion<"rule", [z.ZodObject<{
+    rule: z.ZodLiteral<"none">;
+}, "strip", z.ZodTypeAny, {
+    rule: "none";
+}, {
+    rule: "none";
+}>, z.ZodObject<{
+    rule: z.ZodLiteral<"policyDenyWins">;
+}, "strip", z.ZodTypeAny, {
+    rule: "policyDenyWins";
+}, {
+    rule: "policyDenyWins";
+}>, z.ZodObject<{
+    rule: z.ZodLiteral<"setNarrower">;
+}, "strip", z.ZodTypeAny, {
+    rule: "setNarrower";
+}, {
+    rule: "setNarrower";
+}>, z.ZodObject<{
+    rule: z.ZodLiteral<"boolStricter">;
+    strict: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    strict: boolean;
+    rule: "boolStricter";
+}, {
+    strict: boolean;
+    rule: "boolStricter";
+}>, z.ZodObject<{
+    rule: z.ZodLiteral<"enumRank">;
+    order: z.ZodArray<z.ZodString, "many">;
+}, "strip", z.ZodTypeAny, {
+    rule: "enumRank";
+    order: string[];
+}, {
+    rule: "enumRank";
+    order: string[];
+}>]>;
+export type TightenRule = z.infer<typeof TightenRule>;
+export declare const MergeCategorySpec: z.ZodObject<{
+    mergeShape: z.ZodEnum<["denyFirst", "replace", "runAll", "overrideByName", "concat"]>;
+    minTrust: z.ZodEnum<["local", "session", "project", "global", "managed"]>;
+    tighten: z.ZodDiscriminatedUnion<"rule", [z.ZodObject<{
+        rule: z.ZodLiteral<"none">;
+    }, "strip", z.ZodTypeAny, {
+        rule: "none";
+    }, {
+        rule: "none";
+    }>, z.ZodObject<{
+        rule: z.ZodLiteral<"policyDenyWins">;
+    }, "strip", z.ZodTypeAny, {
+        rule: "policyDenyWins";
+    }, {
+        rule: "policyDenyWins";
+    }>, z.ZodObject<{
+        rule: z.ZodLiteral<"setNarrower">;
+    }, "strip", z.ZodTypeAny, {
+        rule: "setNarrower";
+    }, {
+        rule: "setNarrower";
+    }>, z.ZodObject<{
+        rule: z.ZodLiteral<"boolStricter">;
+        strict: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        strict: boolean;
+        rule: "boolStricter";
+    }, {
+        strict: boolean;
+        rule: "boolStricter";
+    }>, z.ZodObject<{
+        rule: z.ZodLiteral<"enumRank">;
+        order: z.ZodArray<z.ZodString, "many">;
+    }, "strip", z.ZodTypeAny, {
+        rule: "enumRank";
+        order: string[];
+    }, {
+        rule: "enumRank";
+        order: string[];
+    }>]>;
+    enforcement: z.ZodEnum<["gate", "server", "resolver", "client"]>;
+    fail: z.ZodEnum<["closed", "open"]>;
+    /** The compile target / seam this category lands on (free text, for traceability). */
+    seam: z.ZodString;
+    /** When the category's VALUE domain is core's, the cited `SAFETY_AXIS_VOCABULARY` dimension (conformance-checked). */
+    coreAxis: z.ZodOptional<z.ZodEnum<["toolEffect", "egress", "irreversibility", "safetyAxis", "severity", "shellGate", "permissionDecision"]>>;
+}, "strip", z.ZodTypeAny, {
+    enforcement: "gate" | "server" | "resolver" | "client";
+    mergeShape: "concat" | "replace" | "denyFirst" | "runAll" | "overrideByName";
+    minTrust: "local" | "session" | "global" | "project" | "managed";
+    tighten: {
+        rule: "none";
+    } | {
+        rule: "policyDenyWins";
+    } | {
+        rule: "setNarrower";
+    } | {
+        strict: boolean;
+        rule: "boolStricter";
+    } | {
+        rule: "enumRank";
+        order: string[];
+    };
+    fail: "closed" | "open";
+    seam: string;
+    coreAxis?: "permissionDecision" | "toolEffect" | "egress" | "irreversibility" | "safetyAxis" | "severity" | "shellGate" | undefined;
+}, {
+    enforcement: "gate" | "server" | "resolver" | "client";
+    mergeShape: "concat" | "replace" | "denyFirst" | "runAll" | "overrideByName";
+    minTrust: "local" | "session" | "global" | "project" | "managed";
+    tighten: {
+        rule: "none";
+    } | {
+        rule: "policyDenyWins";
+    } | {
+        rule: "setNarrower";
+    } | {
+        strict: boolean;
+        rule: "boolStricter";
+    } | {
+        rule: "enumRank";
+        order: string[];
+    };
+    fail: "closed" | "open";
+    seam: string;
+    coreAxis?: "permissionDecision" | "toolEffect" | "egress" | "irreversibility" | "safetyAxis" | "severity" | "shellGate" | undefined;
+}>;
+export type MergeCategorySpec = z.infer<typeof MergeCategorySpec>;
+/** The category spec. Keys = the unified settings categories both seats map their concrete keys/fields into.
+ *  Faithful to settings-core v2-design §3 (the semantic source of record). */
+export declare const SAFETY_MERGE_SPEC: {
+    readonly permissions: {
+        readonly mergeShape: "denyFirst";
+        readonly minTrust: "global";
+        readonly tighten: {
+            readonly rule: "policyDenyWins";
+        };
+        readonly enforcement: "gate";
+        readonly fail: "closed";
+        readonly seam: "toolPolicy + deny-narrowing (SessionPolicyStore)";
+        readonly coreAxis: "permissionDecision";
+    };
+    readonly permissionMode: {
+        readonly mergeShape: "replace";
+        readonly minTrust: "global";
+        readonly tighten: {
+            readonly rule: "enumRank";
+            readonly order: ["bypassPermissions", "acceptEdits", "default", "plan"];
+        };
+        readonly enforcement: "gate";
+        readonly fail: "closed";
+        readonly seam: "derive → toolPolicy / onAsk / handsReadOnly (§6.4); bypass = launch-flag only + MANAGED kill-switch";
+    };
+    readonly handsReadOnly: {
+        readonly mergeShape: "replace";
+        readonly minTrust: "global";
+        readonly tighten: {
+            readonly rule: "boolStricter";
+            readonly strict: true;
+        };
+        readonly enforcement: "gate";
+        readonly fail: "closed";
+        readonly seam: "handsReadOnly";
+    };
+    readonly shellGate: {
+        readonly mergeShape: "replace";
+        readonly minTrust: "global";
+        readonly tighten: {
+            readonly rule: "enumRank";
+            readonly order: ["off", "classify", "always"];
+        };
+        readonly enforcement: "gate";
+        readonly fail: "closed";
+        readonly seam: "shellGate";
+        readonly coreAxis: "shellGate";
+    };
+    readonly approver: {
+        readonly mergeShape: "replace";
+        readonly minTrust: "global";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "gate";
+        readonly fail: "closed";
+        readonly seam: "onAsk (conflict → reject)";
+    };
+    readonly sandboxNetwork: {
+        readonly mergeShape: "denyFirst";
+        readonly minTrust: "global";
+        readonly tighten: {
+            readonly rule: "setNarrower";
+        };
+        readonly enforcement: "gate";
+        readonly fail: "closed";
+        readonly seam: "ExecutionEnv (fs+net) + sensitive-path";
+        readonly coreAxis: "egress";
+    };
+    readonly hooks: {
+        readonly mergeShape: "runAll";
+        readonly minTrust: "project";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "gate";
+        readonly fail: "closed";
+        readonly seam: "hooks (single source or adapter-composed)";
+    };
+    readonly mcpServers: {
+        readonly mergeShape: "overrideByName";
+        readonly minTrust: "project";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "resolver";
+        readonly fail: "open";
+        readonly seam: "spec.mcp + allowTools";
+    };
+    readonly rulesInstructions: {
+        readonly mergeShape: "concat";
+        readonly minTrust: "project";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "resolver";
+        readonly fail: "open";
+        readonly seam: "appendSystemPrompt / memory (GLOBAL→PROJECT→SESSION)";
+    };
+    readonly model: {
+        readonly mergeShape: "replace";
+        readonly minTrust: "session";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "client";
+        readonly fail: "open";
+        readonly seam: "RoleSpec / TaskSpec.{model,thinking}";
+    };
+    readonly env: {
+        readonly mergeShape: "concat";
+        readonly minTrust: "project";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "resolver";
+        readonly fail: "open";
+        readonly seam: "NodeExecutionEnv.shellEnv (later layer overrides same name)";
+    };
+    readonly envSecret: {
+        readonly mergeShape: "replace";
+        readonly minTrust: "global";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "resolver";
+        readonly fail: "closed";
+        readonly seam: "§7 secret-ref resolution";
+    };
+    readonly memoryScopes: {
+        readonly mergeShape: "concat";
+        readonly minTrust: "global";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "client";
+        readonly fail: "open";
+        readonly seam: "MemoryStore";
+    };
+    readonly autoCompaction: {
+        readonly mergeShape: "replace";
+        readonly minTrust: "session";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "client";
+        readonly fail: "open";
+        readonly seam: "compaction config";
+    };
+    readonly ui: {
+        readonly mergeShape: "replace";
+        readonly minTrust: "local";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "client";
+        readonly fail: "open";
+        readonly seam: "shell-only (theme/keybindings/statusLine) — never touches the engine";
+    };
+    readonly org: {
+        readonly mergeShape: "replace";
+        readonly minTrust: "managed";
+        readonly tighten: {
+            readonly rule: "none";
+        };
+        readonly enforcement: "server";
+        readonly fail: "closed";
+        readonly seam: "config-center → governanceBaseline (SSO/SCIM/audit/budget, TOB-only)";
+    };
+};
+export type SafetyMergeCategory = keyof typeof SAFETY_MERGE_SPEC;
+//# sourceMappingURL=safety-merge-spec.d.ts.map

package/dist/safety-merge-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-merge-spec.d.ts","sourceRoot":"","sources":["../src/safety-merge-spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0EAA0E;AAC1E,eAAO,MAAM,UAAU,2EAAyE,CAAC;AACjG,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AAEpD,iGAAiG;AACjG,eAAO,MAAM,QAAQ,iEAA+D,CAAC;AACrF,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;8GAC8G;AAC9G,eAAO,MAAM,eAAe,qDAAmD,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAE9D;mHACmH;AACnH,eAAO,MAAM,QAAQ,+BAA6B,CAAC;AACnD,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD;;yHAEyH;AACzH,eAAO,MAAM,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAMtB,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,WAAW,CAAC,CAAC;AAEtD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;IAM5B,sFAAsF;;IAEtF,sHAAsH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAEtH,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;8EAC8E;AAC9E,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiBwB,CAAC;AAEvD,MAAM,MAAM,mBAAmB,GAAG,MAAM,OAAO,iBAAiB,CAAC"}

package/dist/safety-merge-spec.js

@@ -0,0 +1,65 @@
+/**
+ * #14 SAFETY MERGE-SPEC — the ONE machine-readable per-category merge/enforcement table that every settings
+ * resolver (TOC shell-adapter + TOB center/service) reads, so they never re-implement (and drift on) the merge
+ * law. This formalizes settings-core's v2-design §3 merge-spec into a published-data contract; the SEMANTIC
+ * author is settings-core, center maintains the formalized artifact here (registry-core), the axis VALUE domains
+ * are core's (@sema-ai/core SAFETY_AXIS_VOCABULARY — validated by a dev-only conformance test, never a runtime
+ * import). Each consumer keeps its OWN key→category map (client's SemaSettings KEY_CONTRACTS, center's
+ * config-field→category map); THIS file is only the shared category spec they all cite — no third copy of the law.
+ *
+ * Per-category behavior is fully determined by `mergeShape` + `minTrust` + `tighten` + `enforcement`; a resolver
+ * reads this table and has NO per-key special-casing.
+ */
+import { z } from "zod";
+/** How values from different layers/principals combine for a category. */
+export const MergeShape = z.enum(["denyFirst", "replace", "runAll", "overrideByName", "concat"]);
+/** The MINIMUM trust tier a layer/principal must have to set this category (ascending trust). */
+export const MinTrust = z.enum(["local", "session", "project", "global", "managed"]);
+/** WHERE the category is enforced (STRENGTH) — MUST stay in lockstep with `EffectiveKey.enforcement` (types.ts).
+ *  gate=data-plane engine, server=control-plane/TOB boundary, resolver=merger correctness, client=UI only. */
+export const SpecEnforcement = z.enum(["gate", "server", "resolver", "client"]);
+/** Fail direction when enforcement can't be evaluated. fail-OPEN is allowed for `client` OR `resolver`
+ *  enforcement on NON-secret keys (additive merges like mcpServers/rules/env); `gate`/`server`/secret → CLOSED. */
+export const FailMode = z.enum(["closed", "open"]);
+/** The monotone tighten-only direction for a category (which way is "stricter"). `enumRank.order` lists values
+ *  from LOOSEST→STRICTEST; `boolStricter.strict` is the bool value that is the tighter one; `setNarrower` = a
+ *  subset is tighter; `policyDenyWins` = deny beats allow; `none` = not rank-tightenable (replace / conflict-reject). */
+export const TightenRule = z.discriminatedUnion("rule", [
+    z.object({ rule: z.literal("none") }),
+    z.object({ rule: z.literal("policyDenyWins") }),
+    z.object({ rule: z.literal("setNarrower") }),
+    z.object({ rule: z.literal("boolStricter"), strict: z.boolean() }),
+    z.object({ rule: z.literal("enumRank"), order: z.array(z.string()).min(2) }),
+]);
+export const MergeCategorySpec = z.object({
+    mergeShape: MergeShape,
+    minTrust: MinTrust,
+    tighten: TightenRule,
+    enforcement: SpecEnforcement,
+    fail: FailMode,
+    /** The compile target / seam this category lands on (free text, for traceability). */
+    seam: z.string(),
+    /** When the category's VALUE domain is core's, the cited `SAFETY_AXIS_VOCABULARY` dimension (conformance-checked). */
+    coreAxis: z.enum(["toolEffect", "egress", "irreversibility", "safetyAxis", "severity", "shellGate", "permissionDecision"]).optional(),
+});
+/** The category spec. Keys = the unified settings categories both seats map their concrete keys/fields into.
+ *  Faithful to settings-core v2-design §3 (the semantic source of record). */
+export const SAFETY_MERGE_SPEC = {
+    permissions: { mergeShape: "denyFirst", minTrust: "global", tighten: { rule: "policyDenyWins" }, enforcement: "gate", fail: "closed", seam: "toolPolicy + deny-narrowing (SessionPolicyStore)", coreAxis: "permissionDecision" },
+    permissionMode: { mergeShape: "replace", minTrust: "global", tighten: { rule: "enumRank", order: ["bypassPermissions", "acceptEdits", "default", "plan"] }, enforcement: "gate", fail: "closed", seam: "derive → toolPolicy / onAsk / handsReadOnly (§6.4); bypass = launch-flag only + MANAGED kill-switch" },
+    handsReadOnly: { mergeShape: "replace", minTrust: "global", tighten: { rule: "boolStricter", strict: true }, enforcement: "gate", fail: "closed", seam: "handsReadOnly" },
+    shellGate: { mergeShape: "replace", minTrust: "global", tighten: { rule: "enumRank", order: ["off", "classify", "always"] }, enforcement: "gate", fail: "closed", seam: "shellGate", coreAxis: "shellGate" },
+    approver: { mergeShape: "replace", minTrust: "global", tighten: { rule: "none" }, enforcement: "gate", fail: "closed", seam: "onAsk (conflict → reject)" },
+    sandboxNetwork: { mergeShape: "denyFirst", minTrust: "global", tighten: { rule: "setNarrower" }, enforcement: "gate", fail: "closed", seam: "ExecutionEnv (fs+net) + sensitive-path", coreAxis: "egress" },
+    hooks: { mergeShape: "runAll", minTrust: "project", tighten: { rule: "none" }, enforcement: "gate", fail: "closed", seam: "hooks (single source or adapter-composed)" },
+    mcpServers: { mergeShape: "overrideByName", minTrust: "project", tighten: { rule: "none" }, enforcement: "resolver", fail: "open", seam: "spec.mcp + allowTools" },
+    rulesInstructions: { mergeShape: "concat", minTrust: "project", tighten: { rule: "none" }, enforcement: "resolver", fail: "open", seam: "appendSystemPrompt / memory (GLOBAL→PROJECT→SESSION)" },
+    model: { mergeShape: "replace", minTrust: "session", tighten: { rule: "none" }, enforcement: "client", fail: "open", seam: "RoleSpec / TaskSpec.{model,thinking}" },
+    env: { mergeShape: "concat", minTrust: "project", tighten: { rule: "none" }, enforcement: "resolver", fail: "open", seam: "NodeExecutionEnv.shellEnv (later layer overrides same name)" },
+    envSecret: { mergeShape: "replace", minTrust: "global", tighten: { rule: "none" }, enforcement: "resolver", fail: "closed", seam: "§7 secret-ref resolution" },
+    memoryScopes: { mergeShape: "concat", minTrust: "global", tighten: { rule: "none" }, enforcement: "client", fail: "open", seam: "MemoryStore" },
+    autoCompaction: { mergeShape: "replace", minTrust: "session", tighten: { rule: "none" }, enforcement: "client", fail: "open", seam: "compaction config" },
+    ui: { mergeShape: "replace", minTrust: "local", tighten: { rule: "none" }, enforcement: "client", fail: "open", seam: "shell-only (theme/keybindings/statusLine) — never touches the engine" },
+    org: { mergeShape: "replace", minTrust: "managed", tighten: { rule: "none" }, enforcement: "server", fail: "closed", seam: "config-center → governanceBaseline (SSO/SCIM/audit/budget, TOB-only)" },
+};
+//# sourceMappingURL=safety-merge-spec.js.map

package/dist/safety-merge-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety-merge-spec.js","sourceRoot":"","sources":["../src/safety-merge-spec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,0EAA0E;AAC1E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGjG,iGAAiG;AACjG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAGrF;8GAC8G;AAC9G,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAGhF;mHACmH;AACnH,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAGnD;;yHAEyH;AACzH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtD,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACrC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;IAC/C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;IAC5C,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IAClE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;CAC7E,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,UAAU,EAAE,UAAU;IACtB,QAAQ,EAAE,QAAQ;IAClB,OAAO,EAAE,WAAW;IACpB,WAAW,EAAE,eAAe;IAC5B,IAAI,EAAE,QAAQ;IACd,sFAAsF;IACtF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,sHAAsH;IACtH,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,QAAQ,EAAE,iBAAiB,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,oBAAoB,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtI,CAAC,CAAC;AAGH;8EAC8E;AAC9E,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,WAAW,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,kDAAkD,EAAE,QAAQ,EAAE,oBAAoB,EAAE;IAChO,cAAc,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,mBAAmB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,qGAAqG,EAAE;IAC9S,aAAa,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE;IACzK,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE;IAC5M,QAAQ,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,2BAA2B,EAAE;IAC1J,cAAc,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,wCAAwC,EAAE,QAAQ,EAAE,QAAQ,EAAE;IAC1M,KAAK,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,2CAA2C,EAAE;IACvK,UAAU,EAAE,EAAE,UAAU,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAClK,iBAAiB,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sDAAsD,EAAE;IAChM,KAAK,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,EAAE;IACnK,GAAG,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,6DAA6D,EAAE;IACzL,SAAS,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC9J,YAAY,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE;IAC/I,cAAc,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE;IACzJ,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,sEAAsE,EAAE;IAC9L,GAAG,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,sEAAsE,EAAE;CAC/I,CAAC"}

package/dist/scheduler-store-node.d.ts

@@ -0,0 +1,15 @@
+import { type SchedulerRecord, type SchedulerStore } from './scheduler-store.js';
+/**
+ * Load the durable store. A MISSING file OR unreadable content ⇒ `[]` (fail-soft); the pure parser drops corrupt
+ * records and preserves well-formed ones (forward-compatible).
+ */
+export declare function loadSchedulerStore(path: string): SchedulerRecord[];
+/**
+ * Persist ATOMICALLY: `mkdir -p` the parent, write a uniquely-named `.tmp` sibling (mode 0o600 — owner-only, the
+ * records may carry principal/session identifiers), then `rename` over the target (atomic on POSIX, so a
+ * concurrent reader never sees a partial file). Throws on IO failure (caller maps to a domain error).
+ */
+export declare function saveSchedulerStore(path: string, records: SchedulerRecord[]): void;
+/** A filesystem-backed {@link SchedulerStore} bound to a path (convenience for the daemon/backend constructors). */
+export declare function fileSchedulerStore(path: string): SchedulerStore;
+//# sourceMappingURL=scheduler-store-node.d.ts.map

package/dist/scheduler-store-node.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler-store-node.d.ts","sourceRoot":"","sources":["../src/scheduler-store-node.ts"],"names":[],"mappings":"AAWA,OAAO,EAAgD,KAAK,eAAe,EAAE,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAA;AAE9H;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAMlE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAKjF;AAED,oHAAoH;AACpH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAK/D"}

package/dist/scheduler-store-node.js

@@ -0,0 +1,43 @@
+/**
+ * @sema-ai/registry-core/node — the Node filesystem BINDING of the scheduler-store contract. Split out of the
+ * pure barrel (it pulls `node:fs`/`node:path`/`node:crypto`) per registry-core's browser-safe discipline. Both
+ * the server-side writer and the TOC shell daemon import THIS for the on-disk store; the FORMAT lives in the
+ * pure `./scheduler-store` contract, so there is one shape and no drift.
+ *
+ * Store path = caller-supplied; both sides agree on `SEMA_CONFIG_DIR` → `~/.sema/scheduled_tasks.json`.
+ */
+import { mkdirSync, readFileSync, writeFileSync, renameSync } from 'node:fs';
+import { dirname } from 'node:path';
+import { randomBytes } from 'node:crypto';
+import { parseSchedulerStore, serializeSchedulerStore } from './scheduler-store.js';
+/**
+ * Load the durable store. A MISSING file OR unreadable content ⇒ `[]` (fail-soft); the pure parser drops corrupt
+ * records and preserves well-formed ones (forward-compatible).
+ */
+export function loadSchedulerStore(path) {
+    try {
+        return parseSchedulerStore(readFileSync(path, 'utf-8'));
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Persist ATOMICALLY: `mkdir -p` the parent, write a uniquely-named `.tmp` sibling (mode 0o600 — owner-only, the
+ * records may carry principal/session identifiers), then `rename` over the target (atomic on POSIX, so a
+ * concurrent reader never sees a partial file). Throws on IO failure (caller maps to a domain error).
+ */
+export function saveSchedulerStore(path, records) {
+    mkdirSync(dirname(path), { recursive: true });
+    const tmp = `${path}.${randomBytes(6).toString('hex')}.tmp`;
+    writeFileSync(tmp, serializeSchedulerStore(records), { mode: 0o600 });
+    renameSync(tmp, path); // atomic over the target
+}
+/** A filesystem-backed {@link SchedulerStore} bound to a path (convenience for the daemon/backend constructors). */
+export function fileSchedulerStore(path) {
+    return {
+        load: () => loadSchedulerStore(path),
+        save: (records) => saveSchedulerStore(path, records),
+    };
+}
+//# sourceMappingURL=scheduler-store-node.js.map

package/dist/scheduler-store-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler-store-node.js","sourceRoot":"","sources":["../src/scheduler-store-node.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAA6C,MAAM,sBAAsB,CAAA;AAE9H;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY,EAAE,OAA0B;IACzE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAA;IAC3D,aAAa,CAAC,GAAG,EAAE,uBAAuB,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACrE,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA,CAAC,yBAAyB;AACjD,CAAC;AAED,oHAAoH;AACpH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO;QACL,IAAI,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC;QACpC,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC;KACrD,CAAA;AACH,CAAC"}

package/dist/scheduler-store.d.ts

@@ -0,0 +1,65 @@
+/**
+ * @sema-ai/registry-core/scheduler-store — the PURE, dep-free CONTRACT for the self-wake scheduler store
+ * (R7 自唤醒). The shared seam between the WRITER (server-side `SchedulerCapability`, persists the model's
+ * CronCreate/Sleep intents) and the READER (TOC shell `SchedulerDaemon`, fires due intents). One canonical
+ * on-disk SHAPE + parse/serialize ⇒ the two independently-built sides never drift on the format.
+ *
+ * 🔴 Contract discipline (this is a third-party contract lib, not an impl dump):
+ *   - ABSTRACT: this module is the type + the parse/serialize FORMAT + the `SchedulerStore` interface. It has
+ *     ZERO runtime IO and ZERO deps (no `@sema-ai/*`, no `node:*`) so it lives in the browser-safe barrel.
+ *     The concrete filesystem binding is `@sema-ai/registry-core/node` (`loadSchedulerStore`/`saveSchedulerStore`).
+ *   - EXTENSIBLE: `parseSchedulerStore` is FORWARD-COMPATIBLE — it validates only the required shape and
+ *     PRESERVES unknown fields, so a newer writer can add fields without an older reader dropping them on
+ *     round-trip. New optional `SchedulerRecord` fields are additive (no breaking change).
+ *   - CONTRACTUAL: `when` is an inlined structural union kept byte-compatible with core `ScheduledIntent['when']`
+ *     but NOT imported — the contract stands alone, independent of the engine.
+ *
+ * 🔴 `principal` is pinned by the writer from Runner-held ctx (never the model); persisted opaquely, passed
+ * through to `runTask` unchanged by the daemon (no privilege escalation).
+ */
+/** A scheduled `when` — structurally identical to core `ScheduledIntent['when']`, inlined (contract stands alone). */
+export type SchedulerWhen = {
+    kind: 'cron';
+    expr: string;
+} | {
+    kind: 'at';
+    atMs: number;
+} | {
+    kind: 'delay';
+    delaySec: number;
+};
+/**
+ * A persisted scheduled record (durable across restarts). Required: id/scope/prompt/when/createdMs. Optional
+ * fields are additive — a future field is a non-breaking extension (readers preserve unknown fields on round-trip).
+ */
+export interface SchedulerRecord {
+    id: string;
+    scope: string;
+    /** 🔴 pinned from ctx (Runner-held), never the model; passed through to runTask unchanged. */
+    principal?: string;
+    sessionId?: string;
+    prompt: string;
+    when: SchedulerWhen;
+    label?: string;
+    createdMs: number;
+    nextRunMs?: number;
+}
+/**
+ * The store ABSTRACTION the two sides depend on (writer saves, reader loads). The `@sema-ai/registry-core/node`
+ * file binding implements it; a server with a DB backend could implement it differently against the same shape.
+ */
+export interface SchedulerStore {
+    load(): SchedulerRecord[];
+    save(records: SchedulerRecord[]): void;
+}
+/** Structural validation of one record (required fields + a well-formed `when`). Unknown fields are allowed. */
+export declare function isSchedulerRecord(v: unknown): v is SchedulerRecord;
+/**
+ * Parse the durable store from its serialized form. FAIL-SOFT + FORWARD-COMPATIBLE: corrupt/non-array/non-JSON
+ * ⇒ `[]`; malformed individual records are dropped (the store self-heals on next save); well-formed records keep
+ * ALL their fields (incl. unknown future ones) so a newer writer's data survives an older reader's round-trip.
+ */
+export declare function parseSchedulerStore(text: string): SchedulerRecord[];
+/** Serialize the store to its canonical on-disk form (stable, pretty JSON). The WRITE half of the format contract. */
+export declare function serializeSchedulerStore(records: SchedulerRecord[]): string;
+//# sourceMappingURL=scheduler-store.d.ts.map

package/dist/scheduler-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler-store.d.ts","sourceRoot":"","sources":["../src/scheduler-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,sHAAsH;AACtH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC5B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAA;AAEvC;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,8FAA8F;IAC9F,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,aAAa,CAAA;IACnB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,IAAI,eAAe,EAAE,CAAA;IACzB,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,IAAI,CAAA;CACvC;AAED,gHAAgH;AAChH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,eAAe,CAUlE;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CASnE;AAED,sHAAsH;AACtH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,eAAe,EAAE,GAAG,MAAM,CAE1E"}

package/dist/scheduler-store.js

@@ -0,0 +1,59 @@
+/**
+ * @sema-ai/registry-core/scheduler-store — the PURE, dep-free CONTRACT for the self-wake scheduler store
+ * (R7 自唤醒). The shared seam between the WRITER (server-side `SchedulerCapability`, persists the model's
+ * CronCreate/Sleep intents) and the READER (TOC shell `SchedulerDaemon`, fires due intents). One canonical
+ * on-disk SHAPE + parse/serialize ⇒ the two independently-built sides never drift on the format.
+ *
+ * 🔴 Contract discipline (this is a third-party contract lib, not an impl dump):
+ *   - ABSTRACT: this module is the type + the parse/serialize FORMAT + the `SchedulerStore` interface. It has
+ *     ZERO runtime IO and ZERO deps (no `@sema-ai/*`, no `node:*`) so it lives in the browser-safe barrel.
+ *     The concrete filesystem binding is `@sema-ai/registry-core/node` (`loadSchedulerStore`/`saveSchedulerStore`).
+ *   - EXTENSIBLE: `parseSchedulerStore` is FORWARD-COMPATIBLE — it validates only the required shape and
+ *     PRESERVES unknown fields, so a newer writer can add fields without an older reader dropping them on
+ *     round-trip. New optional `SchedulerRecord` fields are additive (no breaking change).
+ *   - CONTRACTUAL: `when` is an inlined structural union kept byte-compatible with core `ScheduledIntent['when']`
+ *     but NOT imported — the contract stands alone, independent of the engine.
+ *
+ * 🔴 `principal` is pinned by the writer from Runner-held ctx (never the model); persisted opaquely, passed
+ * through to `runTask` unchanged by the daemon (no privilege escalation).
+ */
+/** Structural validation of one record (required fields + a well-formed `when`). Unknown fields are allowed. */
+export function isSchedulerRecord(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const r = v;
+    if (typeof r.id !== 'string' || typeof r.scope !== 'string' || typeof r.prompt !== 'string' || typeof r.createdMs !== 'number')
+        return false;
+    const w = r.when;
+    if (typeof w !== 'object' || w === null)
+        return false;
+    if (w.kind === 'cron')
+        return typeof w.expr === 'string';
+    if (w.kind === 'at')
+        return typeof w.atMs === 'number';
+    if (w.kind === 'delay')
+        return typeof w.delaySec === 'number';
+    return false;
+}
+/**
+ * Parse the durable store from its serialized form. FAIL-SOFT + FORWARD-COMPATIBLE: corrupt/non-array/non-JSON
+ * ⇒ `[]`; malformed individual records are dropped (the store self-heals on next save); well-formed records keep
+ * ALL their fields (incl. unknown future ones) so a newer writer's data survives an older reader's round-trip.
+ */
+export function parseSchedulerStore(text) {
+    let parsed;
+    try {
+        parsed = JSON.parse(text);
+    }
+    catch {
+        return [];
+    }
+    if (!Array.isArray(parsed))
+        return [];
+    return parsed.filter(isSchedulerRecord);
+}
+/** Serialize the store to its canonical on-disk form (stable, pretty JSON). The WRITE half of the format contract. */
+export function serializeSchedulerStore(records) {
+    return JSON.stringify(records, null, 2);
+}
+//# sourceMappingURL=scheduler-store.js.map

package/dist/scheduler-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scheduler-store.js","sourceRoot":"","sources":["../src/scheduler-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAkCH,gHAAgH;AAChH,MAAM,UAAU,iBAAiB,CAAC,CAAU;IAC1C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACrD,MAAM,CAAC,GAAG,CAA4B,CAAA;IACtC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC5I,MAAM,CAAC,GAAG,CAAC,CAAC,IAA2C,CAAA;IACvD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACrD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAA;IACxD,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAA;IACtD,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAA;IAC7D,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAA;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;AACzC,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,uBAAuB,CAAC,OAA0B;IAChE,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;AACzC,CAAC"}