@steerable/agent-harness 0.2.0

package/LICENSE

@@ -0,0 +1,91 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction,
+and distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by
+the copyright owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all
+other entities that control, are controlled by, or are under common
+control with that entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity
+exercising permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications.
+
+"Object" form shall mean any form resulting from mechanical
+transformation or translation of a Source form.
+
+"Work" shall mean the work of authorship made available under the
+License.
+
+"Derivative Works" shall mean any work based on the Work.
+
+"Contribution" shall mean any work of authorship intentionally
+submitted to Licensor for inclusion in the Work.
+
+"Contributor" shall mean Licensor and any individual or Legal Entity
+on behalf of whom a Contribution has been received by Licensor.
+
+2. Grant of Copyright License.
+Subject to the terms and conditions of this License, each Contributor
+hereby grants to You a perpetual, worldwide, non-exclusive, no-charge,
+royalty-free, irrevocable copyright license to reproduce, prepare
+Derivative Works of, publicly display, publicly perform, sublicense,
+and distribute the Work and such Derivative Works in Source or Object
+form.
+
+3. Grant of Patent License.
+Subject to the terms and conditions of this License, each Contributor
+hereby grants to You a perpetual, worldwide, non-exclusive, no-charge,
+royalty-free, irrevocable patent license to make, have made, use,
+offer to sell, sell, import, and otherwise transfer the Work.
+
+4. Redistribution.
+You may reproduce and distribute copies of the Work or Derivative
+Works thereof in any medium, with or without modifications, and in
+Source or Object form, provided that You meet the following conditions:
+
+(a) You must give any other recipients of the Work or Derivative
+Works a copy of this License; and
+(b) You must cause any modified files to carry prominent notices
+stating that You changed the files; and
+(c) You must retain, in the Source form of any Derivative Works that
+You distribute, all copyright, patent, trademark, and attribution
+notices from the Source form of the Work; and
+(d) If the Work includes a "NOTICE" text file as part of its
+distribution, then any Derivative Works that You distribute must
+include a readable copy of the attribution notices contained within
+such NOTICE file.
+
+5. Submission of Contributions.
+Unless You explicitly state otherwise, any Contribution intentionally
+submitted for inclusion in the Work shall be under the terms and
+conditions of this License.
+
+6. Trademarks.
+This License does not grant permission to use the trade names,
+trademarks, service marks, or product names of the Licensor.
+
+7. Disclaimer of Warranty.
+Unless required by applicable law or agreed to in writing, Licensor
+provides the Work on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS
+OF ANY KIND.
+
+8. Limitation of Liability.
+In no event and under no legal theory shall any Contributor be liable
+to You for damages arising as a result of this License or out of the
+use or inability to use the Work.
+
+9. Accepting Warranty or Additional Liability.
+While redistributing the Work or Derivative Works thereof, You may
+choose to offer, and charge a fee for, acceptance of support, warranty,
+indemnity, or other liability obligations.

package/dist/budget.d.ts

@@ -0,0 +1,19 @@
+export interface BudgetLimit {
+    maxTokens: number;
+    maxSteps: number;
+    maxToolCalls: number;
+}
+export interface BudgetState {
+    tokensUsed: number;
+    stepsUsed: number;
+    toolCallsUsed: number;
+}
+export interface BudgetConsumeOptions {
+    tokens?: number;
+    step?: boolean;
+    toolCall?: boolean;
+}
+export declare function consumeBudget(state: BudgetState, limits: BudgetLimit, options?: BudgetConsumeOptions): {
+    state: BudgetState;
+    exhausted: boolean;
+};

package/dist/budget.js

@@ -0,0 +1,11 @@
+export function consumeBudget(state, limits, options = {}) {
+    const nextState = {
+        tokensUsed: state.tokensUsed + Math.max(options.tokens ?? 0, 0),
+        stepsUsed: state.stepsUsed + (options.step ? 1 : 0),
+        toolCallsUsed: state.toolCallsUsed + (options.toolCall ? 1 : 0),
+    };
+    const exhausted = nextState.tokensUsed > limits.maxTokens ||
+        nextState.stepsUsed > limits.maxSteps ||
+        nextState.toolCallsUsed > limits.maxToolCalls;
+    return { state: nextState, exhausted };
+}

package/dist/completion.d.ts

@@ -0,0 +1 @@
+export declare function isTerminalResult(result: Record<string, unknown> | null | undefined): boolean;

package/dist/completion.js

@@ -0,0 +1,9 @@
+export function isTerminalResult(result) {
+    if (!result)
+        return false;
+    if (result.terminal === true)
+        return true;
+    if (result.success === false && result.needsFollowup !== true)
+        return true;
+    return false;
+}

package/dist/generated/AgentSession.d.ts

@@ -0,0 +1,49 @@
+/**
+ * A persistent agent execution session. One session corresponds to a single chat-thread/agent-stage finite-state-machine instance.
+ */
+export interface AgentSession {
+    /**
+     * Internal primary key (cuid). Optional in transit; generated by storage layer if omitted.
+     */
+    id?: string;
+    /**
+     * Globally unique session identifier (visible to clients and used for resume).
+     */
+    sessionId: string;
+    /**
+     * Owner user id.
+     */
+    userId: string;
+    /**
+     * Optional owning project id.
+     */
+    projectId?: string | null;
+    /**
+     * The chat thread this session is bound to. One chat may host multiple sequential sessions.
+     */
+    chatId: string;
+    /**
+     * Current FSM stage name (e.g. 'plan', 'execute', 'review').
+     */
+    currentStage: string;
+    /**
+     * Pre-computed next stage hint, may be overridden by policy.
+     */
+    nextStage?: string | null;
+    /**
+     * Scenario tag used to select the FSM definition (e.g. 'agent-entry', 'cflog-operator').
+     */
+    scenario?: string;
+    /**
+     * Free-form per-stage state bag. Should remain JSON-serializable.
+     */
+    stageData?: {
+        [k: string]: any;
+    } | null;
+    /**
+     * Whether the session is still accepting new turns.
+     */
+    isActive: boolean;
+    createdAt: string;
+    updatedAt: string;
+}

package/dist/generated/AgentSession.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/ChatAgent.d.ts

@@ -0,0 +1,18 @@
+export interface ChatAgent {
+    id: string;
+    slug?: string;
+    name: string;
+    icon?: string;
+    color?: string;
+    description?: string;
+    rolePrompt?: string;
+    forbiddenPrompt?: string;
+    skillIds?: string[];
+    allowExternalSkills?: boolean;
+    isBuiltin?: boolean;
+    isArchived?: boolean;
+    sortOrder?: number;
+    createdAt: string;
+    updatedAt: string;
+    [k: string]: any;
+}

package/dist/generated/ChatAgent.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/ChatMessage.d.ts

@@ -0,0 +1,14 @@
+import type { ToolCall } from "./ToolCall.js";
+import type { ToolResult } from "./ToolResult.js";
+export interface ChatMessage {
+    id: string;
+    chatId?: string;
+    role: "user" | "assistant" | "tool" | "system";
+    content: string;
+    agentId?: string;
+    toolCalls?: ToolCall[];
+    toolResult?: ToolResult;
+    createdAt: string;
+    updatedAt?: string;
+    [k: string]: any;
+}

package/dist/generated/ChatMessage.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/CommandSafetyPattern.d.ts

@@ -0,0 +1,9 @@
+export interface CommandSafetyPattern {
+    id: string;
+    label: string;
+    description: string;
+    pattern: string;
+    category: string;
+    severity: "critical" | "warning";
+    platform: "all" | "unix" | "windows";
+}

package/dist/generated/CommandSafetyPattern.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/HarnessTrace.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Run-scoped trace summary for one harness execution (one user turn). Pairs with TraceSpan and TraceEvent records.
+ */
+export interface HarnessTrace {
+    /**
+     * Unique trace identifier (e.g. 'tr_<hex>'). Stable across the lifetime of a single run.
+     */
+    traceId: string;
+    userId?: string | null;
+    chatId?: string | null;
+    sessionId?: string | null;
+    /**
+     * The chat message id this trace was attached to once persisted.
+     */
+    assistantMessageId?: string | null;
+    status: "running" | "completed" | "error" | "cancelled" | "budget_exhausted";
+    durationMs?: number | null;
+    hadError: boolean;
+    errorMessage?: string | null;
+    eventCount: number;
+    spanCount: number;
+    totalTokens?: number | null;
+    /**
+     * Primary LLM model identifier used during this trace.
+     */
+    modelId?: string | null;
+    /**
+     * Epoch milliseconds when the run started.
+     */
+    startedAtMs?: number | null;
+    createdAt: string;
+    updatedAt: string;
+}

package/dist/generated/HarnessTrace.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/SSEEvent.d.ts

@@ -0,0 +1,15 @@
+export interface SSEEvent {
+    type: "content" | "error" | "agent" | "orchestration" | "loader-hint" | "keepalive" | "done" | "budget_exhausted" | "tool_call" | "tool_result";
+    event?: string;
+    content?: string;
+    hint?: string;
+    message?: string;
+    code?: string;
+    orchestrationGroupId?: string;
+    taskId?: string;
+    messageId?: string;
+    payload?: {
+        [k: string]: any;
+    };
+    [k: string]: any;
+}

package/dist/generated/SSEEvent.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/SidecarError.d.ts

@@ -0,0 +1,20 @@
+/**
+ * JSON-RPC 2.0 error object with steerable-specific extensions.
+ */
+export interface SidecarError {
+    /**
+     * Numeric code. Reuses JSON-RPC reserved codes: -32700 ParseError, -32600 InvalidRequest, -32601 MethodNotFound, -32602 InvalidParams, -32603 InternalError. Steerable extension range -32099..-32000.
+     */
+    code: number;
+    message: string;
+    /**
+     * Optional structured details (e.g. budget snapshot, tool stack trace, retry advice).
+     */
+    data?: {
+        [k: string]: any;
+    } | any[] | string | number | boolean | null;
+    /**
+     * Steerable-specific failure category, parallel to numeric `code`.
+     */
+    kind?: "parse" | "invalid_request" | "method_not_found" | "invalid_params" | "internal" | "budget_exhausted" | "policy_denied" | "tool_failed" | "transport_closed" | "timeout" | "cancelled";
+}

package/dist/generated/SidecarError.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/SidecarHealth.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Result payload for the `system.ping` health-check method.
+ */
+export interface SidecarHealth {
+    status: "ok" | "degraded" | "starting" | "shutting_down";
+    /**
+     * Sidecar package version (steerable-agent-runtime).
+     */
+    version: string;
+    /**
+     * Highest spec/sidecar protocol version this sidecar speaks (semver).
+     */
+    protocolVersion?: string;
+    uptimeMs: number;
+    pid?: number;
+    pythonVersion?: string;
+    /**
+     * OS/arch tag (e.g. 'darwin-arm64', 'linux-x64', 'win32-x64').
+     */
+    platform?: string;
+    /**
+     * LLM provider ids currently registered.
+     */
+    loadedProviders?: string[];
+    loadedTools?: number;
+    activeTraces?: number;
+    /**
+     * Per-subsystem health snapshot.
+     */
+    checks?: {
+        [k: string]: {
+            status: "ok" | "warn" | "error";
+            message?: string;
+            latencyMs?: number;
+        };
+    };
+}

package/dist/generated/SidecarHealth.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/SidecarNotification.d.ts

@@ -0,0 +1,13 @@
+/**
+ * JSON-RPC 2.0 notification frame (no id, no response). Used by the sidecar to push streaming SSE chunks, lifecycle events, and trace updates back to the host.
+ */
+export interface SidecarNotification {
+    jsonrpc: "2.0";
+    /**
+     * Notification namespace. Reserved: 'stream.chunk', 'stream.done', 'lifecycle.ready', 'lifecycle.shutdown', 'trace.event', 'log.line'.
+     */
+    method: string;
+    params?: {
+        [k: string]: any;
+    } | any[] | null;
+}

package/dist/generated/SidecarNotification.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/SidecarRequest.d.ts

@@ -0,0 +1,20 @@
+/**
+ * JSON-RPC 2.0 request frame for the steerable-sidecar stdio transport.
+ */
+export interface SidecarRequest {
+    jsonrpc: "2.0";
+    /**
+     * Request id; null is reserved for notifications.
+     */
+    id: string | number | null;
+    /**
+     * Method name. Reserved namespaces: 'system.*' (lifecycle), 'agent.*' (sessions/turns), 'tool.*' (tool router), 'stream.*' (incremental SSE chunks).
+     */
+    method: string;
+    /**
+     * Method-specific arguments. Object form preferred.
+     */
+    params?: {
+        [k: string]: any;
+    } | any[] | null;
+}

package/dist/generated/SidecarRequest.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/SidecarResponse.d.ts

@@ -0,0 +1,15 @@
+import type { SidecarError } from "./SidecarError.js";
+/**
+ * JSON-RPC 2.0 response frame. Exactly one of `result` or `error` MUST be present.
+ */
+export interface SidecarResponse {
+    jsonrpc: "2.0";
+    id: string | number | null;
+    /**
+     * Method-specific success payload.
+     */
+    result?: {
+        [k: string]: any;
+    };
+    error?: SidecarError;
+}

package/dist/generated/SidecarResponse.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/ToolCall.d.ts

@@ -0,0 +1,7 @@
+export interface ToolCall {
+    id: string;
+    name: string;
+    arguments: {
+        [k: string]: any;
+    };
+}

package/dist/generated/ToolCall.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/ToolResult.d.ts

@@ -0,0 +1,12 @@
+export interface ToolResult {
+    success: boolean;
+    terminal?: boolean;
+    needsFollowup?: boolean;
+    nextAction?: string;
+    message?: string;
+    error?: string;
+    data?: {
+        [k: string]: any;
+    };
+    [k: string]: any;
+}

package/dist/generated/ToolResult.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/TraceEvent.d.ts

@@ -0,0 +1,38 @@
+/**
+ * A point-in-time event inside a HarnessTrace. Use this for things that have no measurable duration (notifications, decisions, lifecycle markers).
+ */
+export interface TraceEvent {
+    /**
+     * Optional storage primary key (cuid).
+     */
+    id?: string;
+    traceId: string;
+    /**
+     * Coarse classification used for filtering/UI grouping.
+     */
+    kind: "lifecycle" | "policy" | "budget" | "retry" | "tool_call" | "tool_result" | "llm_request" | "llm_response" | "completion" | "error" | "log" | "custom";
+    /**
+     * Event name (e.g. 'tool.invoked', 'budget.tokens.exhausted').
+     */
+    name: string;
+    /**
+     * Monotonic per-trace ordering value. Stored uniquely with traceId.
+     */
+    sequence: number;
+    /**
+     * Epoch milliseconds when the event was recorded.
+     */
+    timestampMs: number;
+    /**
+     * Optional duration when an event spans a brief work unit.
+     */
+    durationMs?: number | null;
+    status?: "ok" | "warning" | "error" | null;
+    /**
+     * JSON-serializable payload, secret-redacted.
+     */
+    payload?: {
+        [k: string]: any;
+    } | null;
+    createdAt?: string;
+}

package/dist/generated/TraceEvent.js

@@ -0,0 +1 @@
+export {};

package/dist/generated/TraceSpan.d.ts

@@ -0,0 +1,38 @@
+/**
+ * A timed span within a HarnessTrace. Each span captures a logical step (LLM call, tool call, planning step, etc.).
+ */
+export interface TraceSpan {
+    /**
+     * Span identifier, unique within its parent trace (e.g. 'step_3').
+     */
+    spanId: string;
+    /**
+     * Parent HarnessTrace id. Optional for in-flight spans before flush.
+     */
+    traceId?: string | null;
+    /**
+     * Optional parent span for nested execution graphs.
+     */
+    parentSpanId?: string | null;
+    /**
+     * Logical operation name (e.g. 'llm.generate', 'tool.shell.exec', 'policy.decide').
+     */
+    name: string;
+    kind?: "llm" | "tool" | "policy" | "budget" | "retry" | "completion" | "transport" | "storage" | "custom";
+    /**
+     * Epoch milliseconds when the span opened.
+     */
+    startMs: number;
+    /**
+     * Epoch milliseconds when the span closed. Null while still in flight.
+     */
+    endMs?: number | null;
+    durationMs?: number | null;
+    status: "ok" | "error" | "timeout" | "cancelled" | "running";
+    /**
+     * Free-form, JSON-serializable, secret-redacted attributes.
+     */
+    attrs?: {
+        [k: string]: any;
+    };
+}

package/dist/generated/TraceSpan.js

@@ -0,0 +1 @@
+export {};

package/dist/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./policy.js";
+export * from "./budget.js";
+export * from "./retry.js";
+export * from "./completion.js";
+export * from "./tracing.js";
+export * from "./safety-patterns.js";

package/dist/index.js

@@ -0,0 +1,6 @@
+export * from "./policy.js";
+export * from "./budget.js";
+export * from "./retry.js";
+export * from "./completion.js";
+export * from "./tracing.js";
+export * from "./safety-patterns.js";

package/dist/policy.d.ts

@@ -0,0 +1,7 @@
+export type ToolMode = "read" | "safe_write" | "destructive" | "other";
+export interface PolicyDecision {
+    allowed: boolean;
+    toolMode: ToolMode;
+    reason: string;
+}
+export declare function decideToolMode(toolName: string): ToolMode;

package/dist/policy.js

@@ -0,0 +1,20 @@
+export function decideToolMode(toolName) {
+    const normalized = toolName.toLowerCase();
+    if (normalized.startsWith("get_") || normalized.startsWith("list_") || normalized.startsWith("read_")) {
+        return "read";
+    }
+    if (normalized.startsWith("create_") ||
+        normalized.startsWith("update_") ||
+        normalized.startsWith("set_") ||
+        normalized.startsWith("write_") ||
+        normalized.startsWith("apply_")) {
+        return "safe_write";
+    }
+    if (normalized.startsWith("delete_") ||
+        normalized.startsWith("drop_") ||
+        normalized.startsWith("remove_") ||
+        normalized.startsWith("destroy_")) {
+        return "destructive";
+    }
+    return "other";
+}

package/dist/retry.d.ts

@@ -0,0 +1,7 @@
+export interface RetryPolicy {
+    maxAttempts: number;
+    baseDelayMs: number;
+    maxDelayMs: number;
+    jitter: boolean;
+}
+export declare function nextRetryDelayMs(policy: RetryPolicy, attempt: number): number;

package/dist/retry.js

@@ -0,0 +1,7 @@
+export function nextRetryDelayMs(policy, attempt) {
+    const safeAttempt = Math.max(attempt, 1);
+    const raw = Math.min(policy.baseDelayMs * 2 ** (safeAttempt - 1), policy.maxDelayMs);
+    if (!policy.jitter)
+        return raw;
+    return Math.max(0, Math.floor(raw * (0.8 + Math.random() * 0.4)));
+}

package/dist/safety-patterns.d.ts

@@ -0,0 +1,16 @@
+export type PatternSeverity = "critical" | "warning";
+export type PatternPlatform = "all" | "unix" | "windows";
+export interface SafetyPatternDef {
+    id: string;
+    label: string;
+    description: string;
+    pattern: string;
+    category: string;
+    severity: PatternSeverity;
+    platform: PatternPlatform;
+}
+export declare const BUILTIN_PATTERNS: SafetyPatternDef[];
+export declare function classifyShellCommand(command: string): {
+    severity: "safe" | PatternSeverity;
+    matchedRules: string[];
+};

package/dist/safety-patterns.js

@@ -0,0 +1,71 @@
+export const BUILTIN_PATTERNS = [
+    {
+        id: "rm",
+        label: "rm 删除",
+        description: "匹配 rm 命令",
+        pattern: "\\brm\\s",
+        category: "file_ops",
+        severity: "warning",
+        platform: "unix",
+    },
+    {
+        id: "rm_rf_root",
+        label: "rm -rf /",
+        description: "递归删除根目录",
+        pattern: "rm\\s+-rf\\s+\\/(?:\\s|$)",
+        category: "file_ops",
+        severity: "critical",
+        platform: "unix",
+    },
+    {
+        id: "sudo",
+        label: "sudo 提权",
+        description: "以超级用户权限执行",
+        pattern: "\\bsudo\\s",
+        category: "system",
+        severity: "critical",
+        platform: "unix",
+    },
+    {
+        id: "curl_pipe_sh",
+        label: "curl | sh",
+        description: "从网络下载并直接执行脚本",
+        pattern: "\\bcurl\\s.*\\|\\s*(sh|bash|zsh)",
+        category: "network",
+        severity: "warning",
+        platform: "unix",
+    },
+    {
+        id: "git_push",
+        label: "git push / reset --hard",
+        description: "Git 远程推送或硬重置",
+        pattern: "\\bgit\\s+(push|reset\\s+--hard|clean\\s+-fd)",
+        category: "vcs",
+        severity: "warning",
+        platform: "all",
+    },
+    {
+        id: "win_del_force",
+        label: "del /f /s /q 强制删除",
+        description: "强制递归删除整个驱动器",
+        pattern: "\\bdel\\s+\\/f\\s+\\/s\\s+\\/q\\s+[a-z]:\\\\",
+        category: "windows",
+        severity: "critical",
+        platform: "windows",
+    },
+];
+export function classifyShellCommand(command) {
+    const normalized = command.trim();
+    if (!normalized)
+        return { severity: "safe", matchedRules: [] };
+    const matches = BUILTIN_PATTERNS.filter((rule) => {
+        const flags = rule.platform === "windows" ? "i" : undefined;
+        return new RegExp(rule.pattern, flags).test(normalized);
+    });
+    if (!matches.length)
+        return { severity: "safe", matchedRules: [] };
+    return {
+        severity: matches.some((m) => m.severity === "critical") ? "critical" : "warning",
+        matchedRules: matches.map((m) => m.id),
+    };
+}

package/dist/tracing.d.ts

@@ -0,0 +1,9 @@
+export interface TraceSpan {
+    spanId: string;
+    name: string;
+    startAt: string;
+    endAt?: string;
+    attrs?: Record<string, unknown>;
+}
+export declare function createSpan(spanId: string, name: string): TraceSpan;
+export declare function finishSpan(span: TraceSpan): TraceSpan;

package/dist/tracing.js

@@ -0,0 +1,14 @@
+export function createSpan(spanId, name) {
+    return {
+        spanId,
+        name,
+        startAt: new Date().toISOString(),
+        attrs: {},
+    };
+}
+export function finishSpan(span) {
+    return {
+        ...span,
+        endAt: span.endAt ?? new Date().toISOString(),
+    };
+}

package/package.json

@@ -0,0 +1,49 @@
+{
+  "name": "@steerable/agent-harness",
+  "version": "0.2.0",
+  "description": "Steerable framework Tier 2 — TypeScript facade over the Python harness (policy, budget, retry, completion, tracing) used for cross-language conformance tests. Production code should depend on the Python harness.",
+  "license": "Apache-2.0",
+  "homepage": "https://pathlyapp.github.io/steerable-framework/",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/pathlyapp/steerable-framework.git",
+    "directory": "packages/agent-harness/ts"
+  },
+  "bugs": {
+    "url": "https://github.com/pathlyapp/steerable-framework/issues"
+  },
+  "keywords": [
+    "steerable",
+    "agent",
+    "harness",
+    "policy",
+    "budget",
+    "tracing",
+    "typescript"
+  ],
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "dependencies": {
+    "@steerable/agent-protocol": "0.2.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.8.3",
+    "vitest": "^3.2.4"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "scripts": {
+    "gen": "node ../../../scripts/generate_ts.mjs",
+    "build": "tsc -p tsconfig.json",
+    "test": "vitest run --passWithNoTests",
+    "lint": "tsc -p tsconfig.json --noEmit",
+    "check:drift": "node ../../../scripts/check_ts_drift.mjs"
+  }
+}