@sourcey/catalog-verifier 1.1.4 → 1.1.5

package/dist/modules/agent-readiness-engine/src/assertions.js

@@ -0,0 +1,145 @@
+import { ipAddressVersion } from "provenry/primitives";
+const pass = () => ({ holds: true, reason: "The canonical assertion holds." });
+const fail = (reason) => ({ holds: false, reason });
+const identifier = (value) => typeof value === "string" && value.trim().length > 0 && value.length <= 512;
+const resourceIdentifier = (value) => identifier(value) || (typeof value === "number" && Number.isSafeInteger(value) && value > 0);
+const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value)
+    ? value
+    : null;
+const created = {
+    observations: [{ name: "id", source: "json", method: "write" }],
+    evaluate: ({ values }) => resourceIdentifier(values.get("id"))
+        ? pass()
+        : fail("The creation did not return a resource identifier."),
+};
+/**
+ * Portable Sourcey job semantics. A binding supplies locations only: never a
+ * comparison value, predicate, threshold, verdict or executable callback.
+ */
+const proofs = {
+    dns_answer: {
+        observations: [
+            { name: "query_name", source: "json", method: "read" },
+            { name: "records", source: "json", method: "read" },
+        ],
+        sameCall: [["query_name", "records"]],
+        evaluate({ values, context }) {
+            const normalize = (value) => typeof value === "string" ? value.toLowerCase().replace(/\.$/u, "") : null;
+            if (normalize(values.get("query_name")) !== normalize(context.inputs.name)) {
+                return fail("The answer does not name the queried domain.");
+            }
+            const records = values.get("records");
+            const address = (value) => {
+                if (typeof value === "string")
+                    return ipAddressVersion(value) !== 0;
+                const record = object(value);
+                if (!record || typeof record.data !== "string")
+                    return false;
+                return ((record.type === 1 && ipAddressVersion(record.data) === 4) ||
+                    (record.type === 28 && ipAddressVersion(record.data) === 6));
+            };
+            return Array.isArray(records) && records.some(address)
+                ? pass()
+                : fail("The answer carries no valid address record.");
+        },
+    },
+    dns_success: {
+        observations: [{ name: "status", source: "json", method: "read" }],
+        evaluate: ({ values }) => values.get("status") === 0
+            ? pass()
+            : fail("The resolver did not report successful resolution."),
+    },
+    model_selected: {
+        observations: [
+            { name: "models", source: "json", method: "read" },
+            { name: "used_model", source: "stream", method: "write" },
+        ],
+        differentCall: [["models", "used_model"]],
+        evaluate({ values }) {
+            const listed = values.get("models");
+            const used = values.get("used_model");
+            if (!Array.isArray(listed) || !Array.isArray(used))
+                return fail("No live model list and streamed model identity.");
+            const ids = new Set(listed.flatMap((value) => {
+                const id = typeof value === "string" ? value : object(value)?.id;
+                return identifier(id) ? [id] : [];
+            }));
+            const selected = used.filter((value) => value !== undefined && value !== null);
+            return selected.length > 0 && selected.every((value) => identifier(value) && ids.has(value))
+                ? pass()
+                : fail("The streamed model is not established by the live model list.");
+        },
+    },
+    stream_chunks: {
+        observations: [{ name: "chunks", source: "stream", method: "write" }],
+        evaluate({ values }) {
+            const chunks = values.get("chunks");
+            return Array.isArray(chunks) &&
+                chunks.length >= 2 &&
+                chunks.every((chunk) => object(chunk) !== null && object(chunk)?.error === undefined)
+                ? pass()
+                : fail("The completion did not stream multiple successful chunks.");
+        },
+    },
+    tool_called: {
+        observations: [
+            { name: "tool_name", source: "stream", method: "write" },
+            { name: "tool_arguments", source: "stream", method: "write" },
+        ],
+        sameCall: [["tool_name", "tool_arguments"]],
+        evaluate({ values, context }) {
+            const names = values.get("tool_name");
+            const arguments_ = values.get("tool_arguments");
+            if (!Array.isArray(names) || !Array.isArray(arguments_))
+                return fail("No streamed tool call.");
+            const parts = (items) => items.every((item) => item === undefined || item === null || typeof item === "string")
+                ? items.filter((item) => typeof item === "string").join("")
+                : null;
+            if (parts(names) !== "sourcey_probe")
+                return fail("The completion did not call the provided Sourcey probe tool.");
+            const encoded = parts(arguments_);
+            if (encoded === null)
+                return fail("The tool arguments are not readable.");
+            let argumentsValue;
+            try {
+                argumentsValue = JSON.parse(encoded);
+            }
+            catch {
+                return fail("The tool arguments are not complete JSON.");
+            }
+            return object(argumentsValue)?.nonce === context.nonce
+                ? pass()
+                : fail("The tool call does not carry this run's nonce.");
+        },
+    },
+    resource_created: created,
+    resource_read_back: {
+        observations: [
+            { name: "created_id", source: "json", method: "write" },
+            { name: "read_id", source: "json", method: "read" },
+            { name: "content", source: "json", method: "read" },
+        ],
+        sameCall: [["read_id", "content"]],
+        differentCall: [["created_id", "read_id"]],
+        evaluate: ({ values, context }) => resourceIdentifier(values.get("created_id")) &&
+            values.get("created_id") === values.get("read_id") &&
+            values.get("content") === context.nonce
+            ? pass()
+            : fail("The readback does not establish the created resource with this run's nonce."),
+    },
+    message_accepted: created,
+    sink_received: {
+        observations: [],
+        async evaluate({ context, sink }) {
+            if (!sink || !context.sinks.recipient)
+                return fail("No controlled recipient observes delivery.");
+            return (await sink.received({ sink: "recipient", contains: context.nonce }))
+                ? pass()
+                : fail("The controlled recipient did not receive this run's nonce.");
+        },
+    },
+};
+export function agentReadinessAssertionProof(proof) {
+    return proofs[proof];
+}
+//# sourceMappingURL=assertions.js.map

package/dist/modules/agent-readiness-engine/src/assertions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertions.js","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/assertions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AA2BvD,MAAM,IAAI,GAAG,GAAiB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC,CAAC;AAC7F,MAAM,IAAI,GAAG,CAAC,MAAc,EAAgB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAC1E,MAAM,UAAU,GAAG,CAAC,KAAc,EAAmB,EAAE,CACrD,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC;AAC9E,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAAW,EAAE,CACrD,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC;AAC/F,MAAM,MAAM,GAAG,CAAC,KAAc,EAAkC,EAAE,CAChE,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAClE,CAAC,CAAE,KAAiC;IACpC,CAAC,CAAC,IAAI,CAAC;AAEX,MAAM,OAAO,GAAmB;IAC9B,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/D,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,CAAC,CAAC,IAAI,EAAE;QACR,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC;CACjE,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,GAA4C;IACtD,UAAU,EAAE;QACV,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YACtD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;SACpD;QACD,QAAQ,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QACrC,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;YAC1B,MAAM,SAAS,GAAG,CAAC,KAAc,EAAE,EAAE,CACnC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC7E,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,KAAK,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3E,OAAO,IAAI,CAAC,8CAA8C,CAAC,CAAC;YAC9D,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtC,MAAM,OAAO,GAAG,CAAC,KAAc,EAAE,EAAE;gBACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,OAAO,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC7B,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAC7D,OAAO,CACL,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC1D,CAAC,MAAM,CAAC,IAAI,KAAK,EAAE,IAAI,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAC5D,CAAC;YACJ,CAAC,CAAC;YACF,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;gBACpD,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;QAC1D,CAAC;KACF;IACD,WAAW,EAAE;QACX,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAClE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CACvB,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YACxB,CAAC,CAAC,IAAI,EAAE;YACR,CAAC,CAAC,IAAI,CAAC,oDAAoD,CAAC;KACjE;IACD,cAAc,EAAE;QACd,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YAClD,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;SAC1D;QACD,aAAa,EAAE,CAAC,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QACzC,QAAQ,CAAC,EAAE,MAAM,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBAChD,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,IAAI,GAAG,CACjB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBACvB,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;gBACjE,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,CAAC,CAAC,CACH,CAAC;YACF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;YAC/E,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC1F,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,+DAA+D,CAAC,CAAC;QAC5E,CAAC;KACF;IACD,aAAa,EAAE;QACb,YAAY,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACrE,QAAQ,CAAC,EAAE,MAAM,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACpC,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC1B,MAAM,CAAC,MAAM,IAAI,CAAC;gBAClB,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC;gBACrF,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QACxE,CAAC;KACF;IACD,WAAW,EAAE;QACX,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;YACxD,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE;SAC9D;QACD,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC3C,QAAQ,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE;YAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YACtC,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;gBACrD,OAAO,IAAI,CAAC,wBAAwB,CAAC,CAAC;YACxC,MAAM,KAAK,GAAG,CAAC,KAAyB,EAAiB,EAAE,CACzD,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC;gBACpF,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3E,CAAC,CAAC,IAAI,CAAC;YACX,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,eAAe;gBAClC,OAAO,IAAI,CAAC,8DAA8D,CAAC,CAAC;YAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;YAClC,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC,sCAAsC,CAAC,CAAC;YAC1E,IAAI,cAAuB,CAAC;YAC5B,IAAI,CAAC;gBACH,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACvC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC,2CAA2C,CAAC,CAAC;YAC3D,CAAC;YACD,OAAO,MAAM,CAAC,cAAc,CAAC,EAAE,KAAK,KAAK,OAAO,CAAC,KAAK;gBACpD,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC7D,CAAC;KACF;IACD,gBAAgB,EAAE,OAAO;IACzB,kBAAkB,EAAE;QAClB,YAAY,EAAE;YACZ,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE;YACvD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;YACnD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;SACpD;QACD,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAClC,aAAa,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC;QAC1C,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,CAChC,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;YAClD,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,OAAO,CAAC,KAAK;YACrC,CAAC,CAAC,IAAI,EAAE;YACR,CAAC,CAAC,IAAI,CAAC,6EAA6E,CAAC;KAC1F;IACD,gBAAgB,EAAE,OAAO;IACzB,aAAa,EAAE;QACb,YAAY,EAAE,EAAE;QAChB,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE;YAC9B,IAAI,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS;gBACnC,OAAO,IAAI,CAAC,4CAA4C,CAAC,CAAC;YAC5D,OAAO,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC1E,CAAC,CAAC,IAAI,EAAE;gBACR,CAAC,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;QACzE,CAAC;KACF;CACF,CAAC;AAEF,MAAM,UAAU,4BAA4B,CAAC,KAAY;IACvD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/modules/agent-readiness-engine/src/binding.d.ts

@@ -0,0 +1,12 @@
+import { type AgentReadinessJob, type AgentReadinessJobBinding } from "../../../contracts/agent-readiness/src/index.js";
+/**
+ * Why a binding cannot perform its library job, or nothing. A binding maps
+ * every library observation exactly once, reads only the job's inputs and sinks,
+ * and cleans up when the job is consequential. Whether its calls stay on its
+ * declared surface is the declaration's own rule, checked where it is parsed.
+ */
+export declare function agentReadinessBindingIssues(input: {
+    readonly job: AgentReadinessJob;
+    readonly binding: AgentReadinessJobBinding;
+}): readonly string[];
+//# sourceMappingURL=binding.d.ts.map

package/dist/modules/agent-readiness-engine/src/binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.d.ts","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/binding.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAI9B,MAAM,iDAAiD,CAAC;AAGzD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE;IACjD,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;CAC5C,GAAG,SAAS,MAAM,EAAE,CAsGpB"}

package/dist/modules/agent-readiness-engine/src/binding.js

@@ -0,0 +1,104 @@
+import { agentReadinessBindingCalls, agentReadinessJsonTemplates, agentReadinessTemplateReferences, } from "../../../contracts/agent-readiness/src/index.js";
+import { agentReadinessAssertionProof } from "./assertions.js";
+/**
+ * Why a binding cannot perform its library job, or nothing. A binding maps
+ * every library observation exactly once, reads only the job's inputs and sinks,
+ * and cleans up when the job is consequential. Whether its calls stay on its
+ * declared surface is the declaration's own rule, checked where it is parsed.
+ */
+export function agentReadinessBindingIssues(input) {
+    const { job, binding } = input;
+    const issues = [];
+    const mapped = binding.assertions.map(({ assertion }) => assertion);
+    const required = job.assertions.map(({ name }) => name);
+    for (const name of required) {
+        if (!mapped.includes(name))
+            issues.push(`Assertion ${name} is not mapped.`);
+    }
+    for (const name of mapped) {
+        if (!required.includes(name))
+            issues.push(`Assertion ${name} is not one of ${job.job_id}'s.`);
+    }
+    const calls = new Map(binding.calls.map((call) => [call.call_id, call]));
+    for (const assertion of job.assertions) {
+        const located = binding.assertions.find(({ assertion: name }) => name === assertion.name);
+        if (!located)
+            continue;
+        const proof = agentReadinessAssertionProof(assertion.proof);
+        const observations = new Map(located.observations.map((item) => [item.name, item]));
+        for (const required of proof.observations) {
+            const observed = observations.get(required.name);
+            if (!observed) {
+                issues.push(`Assertion ${assertion.name} does not locate ${required.name}.`);
+                continue;
+            }
+            if (observed.source !== required.source) {
+                issues.push(`Assertion ${assertion.name}'s ${required.name} must read ${required.source}.`);
+            }
+            const call = calls.get(observed.call);
+            if (call?.kind === "http" && required.method) {
+                const read = call.method === "GET" || call.method === "HEAD";
+                if (read !== (required.method === "read")) {
+                    issues.push(`Assertion ${assertion.name}'s ${required.name} needs a ${required.method} call.`);
+                }
+            }
+        }
+        for (const name of observations.keys()) {
+            if (!proof.observations.some((operand) => operand.name === name)) {
+                issues.push(`Observation ${name} is not one of ${assertion.name}'s.`);
+            }
+        }
+        for (const [left, right] of proof.sameCall ?? []) {
+            const a = observations.get(left);
+            const b = observations.get(right);
+            if (a && b && a.call !== b.call)
+                issues.push(`Assertion ${assertion.name}'s ${left} and ${right} must read the same call.`);
+        }
+        for (const [left, right] of proof.differentCall ?? []) {
+            const a = observations.get(left);
+            const b = observations.get(right);
+            if (a && b && a.call === b.call)
+                issues.push(`Assertion ${assertion.name}'s ${left} and ${right} must read different calls.`);
+        }
+    }
+    for (const { from, to } of job.observation_links) {
+        const locate = (reference) => binding.assertions
+            .find(({ assertion }) => assertion === reference.assertion)
+            ?.observations.find(({ name }) => name === reference.observation);
+        const left = locate(from);
+        const right = locate(to);
+        if (left && right && left.call !== right.call) {
+            issues.push(`${from.assertion}.${from.observation} and ${to.assertion}.${to.observation} must read the same call.`);
+        }
+    }
+    const values = new Set(job.inputs.filter(({ kind }) => kind !== "sink").map(({ name }) => name));
+    const sinks = new Set(job.inputs.filter(({ kind }) => kind === "sink").map(({ name }) => name));
+    const templates = [];
+    for (const { call } of agentReadinessBindingCalls(binding)) {
+        if (call.kind === "http") {
+            templates.push(call.url, ...call.headers.map(({ value }) => value), ...(call.body === null
+                ? []
+                : call.body.media_type === "application/json"
+                    ? agentReadinessJsonTemplates(call.body.json)
+                    : call.body.form.map(({ value }) => value)));
+        }
+        else {
+            templates.push(...agentReadinessJsonTemplates(call.arguments));
+        }
+    }
+    for (const template of templates) {
+        for (const reference of agentReadinessTemplateReferences(template) ?? []) {
+            if (reference.kind === "input" && !values.has(reference.name)) {
+                issues.push(`Input ${reference.name} is not one of the job's.`);
+            }
+            if (reference.kind === "sink" && !sinks.has(reference.name)) {
+                issues.push(`Sink ${reference.name} is not one of the job's.`);
+            }
+        }
+    }
+    if (job.cleanup === "required" && binding.cleanup.length === 0) {
+        issues.push(`${job.job_id} is consequential; the binding must clean up after it.`);
+    }
+    return [...new Set(issues)];
+}
+//# sourceMappingURL=binding.js.map

package/dist/modules/agent-readiness-engine/src/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,0BAA0B,EAC1B,2BAA2B,EAC3B,gCAAgC,GACjC,MAAM,iDAAiD,CAAC;AACzD,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAG3C;IACC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACxD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,iBAAiB,CAAC,CAAC;IAC9E,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,CAAC;QAC1B,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,kBAAkB,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IACzE,KAAK,MAAM,SAAS,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,KAAK,GAAG,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACpF,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YAC1C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,IAAI,oBAAoB,QAAQ,CAAC,IAAI,GAAG,CAAC,CAAC;gBAC7E,SAAS;YACX,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,IAAI,MAAM,QAAQ,CAAC,IAAI,cAAc,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,EAAE,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;gBAC7D,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,EAAE,CAAC;oBAC1C,MAAM,CAAC,IAAI,CACT,aAAa,SAAS,CAAC,IAAI,MAAM,QAAQ,CAAC,IAAI,YAAY,QAAQ,CAAC,MAAM,QAAQ,CAClF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gBACjE,MAAM,CAAC,IAAI,CAAC,eAAe,IAAI,kBAAkB,SAAS,CAAC,IAAI,KAAK,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAC7B,MAAM,CAAC,IAAI,CAAC,aAAa,SAAS,CAAC,IAAI,MAAM,IAAI,QAAQ,KAAK,2BAA2B,CAAC,CAAC;QAC/F,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;YACtD,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,CAAC,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI;gBAC7B,MAAM,CAAC,IAAI,CACT,aAAa,SAAS,CAAC,IAAI,MAAM,IAAI,QAAQ,KAAK,6BAA6B,CAChF,CAAC;QACN,CAAC;IACH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,GAAG,CAAC,iBAAiB,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,CAAC,SAAsB,EAAE,EAAE,CACxC,OAAO,CAAC,UAAU;aACf,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,CAAC;YAC3D,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,WAAW,CAAC,CAAC;QACtE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CACT,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,WAAW,QAAQ,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,WAAW,2BAA2B,CACvG,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhG,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,0BAA0B,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACzB,SAAS,CAAC,IAAI,CACZ,IAAI,CAAC,GAAG,EACR,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EACzC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI;gBACpB,CAAC,CAAC,EAAE;gBACJ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,KAAK,kBAAkB;oBAC3C,CAAC,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;oBAC7C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAChD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,IAAI,CAAC,GAAG,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,KAAK,MAAM,SAAS,IAAI,gCAAgC,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YACzE,IAAI,SAAS,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,MAAM,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,IAAI,2BAA2B,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,CAAC,QAAQ,SAAS,CAAC,IAAI,2BAA2B,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,wDAAwD,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC9B,CAAC"}

package/dist/modules/agent-readiness-engine/src/checks.d.ts

@@ -0,0 +1,57 @@
+import type { ExchangeRecord } from "provenry/exchange/records";
+import type { AgentReadinessJob, AgentReadinessJobBinding } from "../../../contracts/agent-readiness/src/index.js";
+import { type TemplateContext } from "./templates.js";
+/** What one call returned, in the terms checks read. */
+export interface CallResult {
+    readonly kind: "http" | "mcp";
+    /** The HTTP status of a call that got a response. */
+    readonly status: number | null;
+    /** The JSON document returned: an HTTP body read as JSON by content, or an MCP tool result. */
+    readonly document: unknown;
+    /** The JSON `data:` events of an event-stream response. */
+    readonly events: readonly unknown[] | null;
+    /** For an MCP call: true when the tool answered without error. */
+    readonly mcpOk: boolean | null;
+}
+/** Observes Sourcey's sinks; a run without one cannot hold a sink assertion. */
+export interface SinkPort {
+    received(input: {
+        readonly sink: string;
+        readonly contains: string;
+    }): Promise<boolean>;
+}
+export interface CheckOutcome {
+    readonly holds: boolean;
+    readonly reason: string;
+}
+/** An HTTP response as a call result: JSON by content, or the events of a stream. */
+export declare function httpCallResult(record: ExchangeRecord, body: Uint8Array | null): CallResult;
+/** An MCP tool call's answer as a call result. */
+export declare function mcpCallResult(answer: {
+    readonly outcome: "result" | "error" | "unanswered";
+    readonly result?: unknown;
+}): CallResult;
+/** Each library assertion, under Sourcey's semantics over the located observations. */
+export declare function evaluateAssertions(input: {
+    readonly job: AgentReadinessJob;
+    readonly binding: AgentReadinessJobBinding;
+    readonly calls: ReadonlyMap<string, CallResult>;
+    readonly context: TemplateContext;
+    readonly sink?: SinkPort;
+}): Promise<readonly {
+    readonly assertion: string;
+    readonly holds: boolean;
+    readonly failure: {
+        readonly check: number;
+        readonly reason: string;
+    } | null;
+}[]>;
+/**
+ * Whether the safe invalid request failed typed: true or false is a fact about
+ * the service; null (a transport failure, a 5xx, an unanswered call) is residue.
+ */
+export declare function evaluateErrorProbe(probe: AgentReadinessJobBinding["error_probe"], result: CallResult): {
+    readonly typed: boolean;
+    readonly reason: string;
+} | null;
+//# sourceMappingURL=checks.d.ts.map

package/dist/modules/agent-readiness-engine/src/checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/checks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,KAAK,EACV,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,iDAAiD,CAAC;AAEzD,OAAO,EAAE,KAAK,eAAe,EAAkB,MAAM,gBAAgB,CAAC;AAEtE,wDAAwD;AACxD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,SAAS,OAAO,EAAE,GAAG,IAAI,CAAC;IAC3C,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAAC;CAChC;AAED,gFAAgF;AAChF,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzF;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,GAAG,UAAU,CAa1F;AAED,kDAAkD;AAClD,wBAAgB,aAAa,CAAC,MAAM,EAAE;IACpC,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,OAAO,GAAG,YAAY,CAAC;IACpD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,UAAU,CAWb;AAED,uFAAuF;AACvF,wBAAsB,kBAAkB,CAAC,KAAK,EAAE;IAC9C,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;CAC1B,GAAG,OAAO,CACT,SAAS;IACP,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;CAC9E,EAAE,CACJ,CAwCA;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,wBAAwB,CAAC,aAAa,CAAC,EAC9C,MAAM,EAAE,UAAU,GACjB;IAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAa7D"}

package/dist/modules/agent-readiness-engine/src/checks.js

@@ -0,0 +1,126 @@
+import { agentReadinessAssertionProof } from "./assertions.js";
+import { valueAtPointer } from "./templates.js";
+/** An HTTP response as a call result: JSON by content, or the events of a stream. */
+export function httpCallResult(record, body) {
+    if (record.outcome !== "responded" || body === null) {
+        return { kind: "http", status: null, document: undefined, events: null, mcpOk: null };
+    }
+    const text = utf8(body);
+    const streamed = record.response.body.media_type === "text/event-stream";
+    return {
+        kind: "http",
+        status: record.response.status,
+        document: streamed || text === null ? undefined : json(text),
+        events: streamed && text !== null ? streamEvents(text) : null,
+        mcpOk: null,
+    };
+}
+/** An MCP tool call's answer as a call result. */
+export function mcpCallResult(answer) {
+    const isError = answer.outcome === "result" &&
+        answer.result?.isError === true;
+    return {
+        kind: "mcp",
+        status: null,
+        document: answer.outcome === "result" ? answer.result : undefined,
+        events: null,
+        mcpOk: answer.outcome === "result" ? !isError : answer.outcome === "error" ? false : null,
+    };
+}
+/** Each library assertion, under Sourcey's semantics over the located observations. */
+export async function evaluateAssertions(input) {
+    const results = [];
+    for (const assertion of input.job.assertions) {
+        const mapped = input.binding.assertions.find((entry) => entry.assertion === assertion.name);
+        if (!mapped)
+            throw new Error(`The binding does not map assertion ${assertion.name}.`);
+        const proof = agentReadinessAssertionProof(assertion.proof);
+        const values = new Map();
+        let failure = null;
+        for (const [index, required] of proof.observations.entries()) {
+            const observation = mapped.observations.find(({ name }) => name === required.name);
+            const call = observation ? input.calls.get(observation.call) : undefined;
+            const ok = call?.kind === "http"
+                ? call.status !== null && call.status >= 200 && call.status <= 299
+                : call?.mcpOk === true;
+            if (!observation || observation.source !== required.source || !call || !ok) {
+                failure = {
+                    check: index,
+                    reason: `No successful ${required.source} observation establishes ${required.name}.`,
+                };
+                break;
+            }
+            values.set(required.name, observation.source === "json"
+                ? valueAtPointer(call.document, observation.pointer)
+                : call.events?.map((event) => valueAtPointer(event, observation.pointer)));
+        }
+        if (failure === null) {
+            const outcome = await proof.evaluate({
+                values,
+                context: input.context,
+                ...(input.sink ? { sink: input.sink } : {}),
+            });
+            if (!outcome.holds)
+                failure = { check: 0, reason: outcome.reason };
+        }
+        results.push({ assertion: assertion.name, holds: failure === null, failure });
+    }
+    return results;
+}
+/**
+ * Whether the safe invalid request failed typed: true or false is a fact about
+ * the service; null (a transport failure, a 5xx, an unanswered call) is residue.
+ */
+export function evaluateErrorProbe(probe, result) {
+    if (probe.expect.kind === "mcp_error") {
+        if (result.mcpOk === null)
+            return null;
+        return result.mcpOk
+            ? { typed: false, reason: "The invalid request was accepted." }
+            : { typed: true, reason: "The invalid request failed with a typed MCP error." };
+    }
+    if (result.status === null || result.status >= 500)
+        return null;
+    if (result.status < 400)
+        return { typed: false, reason: "The invalid request was accepted." };
+    if (!present(valueAtPointer(result.document, probe.expect.error_pointer))) {
+        return { typed: false, reason: "The refusal carries no machine-readable error." };
+    }
+    return { typed: true, reason: `HTTP ${result.status} with a machine-readable error.` };
+}
+function present(value) {
+    return value !== undefined && value !== null && value !== "";
+}
+function utf8(bytes) {
+    try {
+        return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    }
+    catch {
+        return null;
+    }
+}
+function json(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return undefined;
+    }
+}
+function streamEvents(text) {
+    const events = [];
+    for (const block of text.split(/\r?\n\r?\n/u)) {
+        const data = block
+            .split(/\r?\n/u)
+            .filter((line) => line.startsWith("data:"))
+            .map((line) => line.slice("data:".length).trimStart())
+            .join("\n");
+        if (!data || data === "[DONE]")
+            continue;
+        const parsed = json(data);
+        if (parsed !== undefined)
+            events.push(parsed);
+    }
+    return events;
+}
+//# sourceMappingURL=checks.js.map

package/dist/modules/agent-readiness-engine/src/checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.js","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/checks.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,4BAA4B,EAAE,MAAM,iBAAiB,CAAC;AAC/D,OAAO,EAAwB,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAyBtE,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,MAAsB,EAAE,IAAuB;IAC5E,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACxF,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IACxB,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,KAAK,mBAAmB,CAAC;IACzE,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM;QAC9B,QAAQ,EAAE,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC5D,MAAM,EAAE,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI;QAC7D,KAAK,EAAE,IAAI;KACZ,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,aAAa,CAAC,MAG7B;IACC,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,KAAK,QAAQ;QAC1B,MAAM,CAAC,MAAuC,EAAE,OAAO,KAAK,IAAI,CAAC;IACpE,OAAO;QACL,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;QACjE,MAAM,EAAE,IAAI;QACZ,KAAK,EAAE,MAAM,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;KAC1F,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAMxC;IAOC,MAAM,OAAO,GAAG,EAAE,CAAC;IACnB,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5F,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,SAAS,CAAC,IAAI,GAAG,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,4BAA4B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAmB,CAAC;QAC1C,IAAI,OAAO,GAA6C,IAAI,CAAC;QAC7D,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YAC7D,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnF,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzE,MAAM,EAAE,GACN,IAAI,EAAE,IAAI,KAAK,MAAM;gBACnB,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,MAAM,IAAI,GAAG;gBAClE,CAAC,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC;YAC3B,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;gBAC3E,OAAO,GAAG;oBACR,KAAK,EAAE,KAAK;oBACZ,MAAM,EAAE,iBAAiB,QAAQ,CAAC,MAAM,4BAA4B,QAAQ,CAAC,IAAI,GAAG;iBACrF,CAAC;gBACF,MAAM;YACR,CAAC;YACD,MAAM,CAAC,GAAG,CACR,QAAQ,CAAC,IAAI,EACb,WAAW,CAAC,MAAM,KAAK,MAAM;gBAC3B,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC;gBACpD,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC;gBACnC,MAAM;gBACN,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,KAAK;gBAAE,OAAO,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAA8C,EAC9C,MAAkB;IAElB,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;QACtC,IAAI,MAAM,CAAC,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACvC,OAAO,MAAM,CAAC,KAAK;YACjB,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE;YAC/D,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,oDAAoD,EAAE,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IAChE,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IAC9F,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC1E,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,MAAM,CAAC,MAAM,iCAAiC,EAAE,CAAC;AACzF,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;AAC/D,CAAC;AAED,SAAS,IAAI,CAAC,KAAiB;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,MAAM,MAAM,GAAc,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,KAAK;aACf,KAAK,CAAC,QAAQ,CAAC;aACf,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;aAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,CAAC;aACrD,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,QAAQ;YAAE,SAAS;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1B,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/modules/agent-readiness-engine/src/path.d.ts

@@ -0,0 +1,24 @@
+import { type Digest } from "provenry/primitives";
+import { type AgentReadinessJob, type AgentReadinessJobBinding, type AgentReadinessRunRecord, type AgentReadinessStepResult } from "../../../contracts/agent-readiness/src/index.js";
+import type { AgentReadinessPolicy } from "../../../contracts/agent-readiness/src/operate-policy.js";
+/**
+ * The Operate path a profile's runs establish: one outcome per step, each
+ * resting on entries of the runs. The latest run decides every step; earlier
+ * runs count only to reproduce a refusal, the one way a step is `blocked`.
+ * Documentation never enters: only exchanges, discovery attempts, recorded
+ * credentials and recorded human steps.
+ */
+export declare function evaluatePath(input: {
+    readonly job: AgentReadinessJob;
+    readonly binding: AgentReadinessJobBinding;
+    readonly policy: Pick<AgentReadinessPolicy, "blocked">;
+    readonly runs: readonly AgentReadinessRunRecord[];
+    /** Declared endpoint URIs by id. */
+    readonly endpoints: ReadonlyMap<string, string>;
+}): {
+    readonly runDigest: Digest;
+    readonly steps: readonly AgentReadinessStepResult[];
+};
+/** A listing no binding has run: every step not assessed, so no letter. */
+export declare function unexercisedPath(): readonly AgentReadinessStepResult[];
+//# sourceMappingURL=path.d.ts.map

package/dist/modules/agent-readiness-engine/src/path.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path.d.ts","sourceRoot":"","sources":["../../../../modules/agent-readiness-engine/src/path.ts"],"names":[],"mappings":"AAAA,OAAO,EAAmB,KAAK,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAEnE,OAAO,EAEL,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,EAE5B,KAAK,wBAAwB,EAE9B,MAAM,iDAAiD,CAAC;AACzD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0DAA0D,CAAC;AAgBrG;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,QAAQ,CAAC,GAAG,EAAE,iBAAiB,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,wBAAwB,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,EAAE,SAAS,uBAAuB,EAAE,CAAC;IAClD,oCAAoC;IACpC,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjD,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,wBAAwB,EAAE,CAAA;CAAE,CA4JtF;AAiFD,2EAA2E;AAC3E,wBAAgB,eAAe,IAAI,SAAS,wBAAwB,EAAE,CAErE"}