@treeseed/sdk 0.13.0-rc.119 → 0.13.0-rc.120

package/dist/capacity/agents/agent-capacity.d.ts

@@ -10,6 +10,8 @@ export * from '../../agent-capacity/contracts/capacity/communication/communicati
 export * from '../../agent-capacity/contracts/capacity/providers/supply-policy.js';
 export * from '../../agent-capacity/contracts/capacity/workdays/workday-records.js';
 export * from '../../agent-capacity/contracts/capacity/workdays/workday-allocation.js';
+export * from '../../agent-capacity/contracts/capacity/workdays/assignment-allocation.js';
+export * from '../../agent-capacity/contracts/capacity/workdays/capability-accounting.js';
 export * from '../../agent-capacity/contracts/configuration/configuration.js';
 export * from '../../agent-capacity/contracts/operations/research-workflow.js';
 export * from '../../agent-capacity/contracts/operations/agent-team-clone.js';

package/dist/capacity/agents/agent-capacity.js

@@ -8,6 +8,8 @@ export * from "../../agent-capacity/contracts/capacity/communication/communicati
 export * from "../../agent-capacity/contracts/capacity/providers/supply-policy.js";
 export * from "../../agent-capacity/contracts/capacity/workdays/workday-records.js";
 export * from "../../agent-capacity/contracts/capacity/workdays/workday-allocation.js";
+export * from "../../agent-capacity/contracts/capacity/workdays/assignment-allocation.js";
+export * from "../../agent-capacity/contracts/capacity/workdays/capability-accounting.js";
 export * from "../../agent-capacity/contracts/configuration/configuration.js";
 export * from "../../agent-capacity/contracts/operations/research-workflow.js";
 export * from "../../agent-capacity/contracts/operations/agent-team-clone.js";

package/dist/capacity-provider/client.d.ts

@@ -72,8 +72,10 @@ export declare class ProviderProtocolClient {
             };
             mode: "analysis" | "work";
             attempt: number;
-            publication: "denied" | "assignment-branch";
-            credentialBindingId: string;
+            publication: "denied" | "assignment-branch" | "simulation-branch";
+            acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+            publicationRef?: string | undefined;
+            credentialBindingId?: string | undefined;
         };
         credential: {
             id: string;
@@ -85,7 +87,7 @@ export declare class ProviderProtocolClient {
             tag: string;
             authorizationId: string;
             ephemeralPublicKey: string;
-        };
+        } | null;
     }>;
     respondToAssignmentDiscussion(assignmentId: string, request: ProviderDiscussionResponseRequest, idempotencyKey: string): Promise<{
         status: "responded" | "abstained";

package/dist/capacity-provider/contracts/capacity-facts.d.ts

@@ -36,6 +36,12 @@ export interface ExecutionProviderObservationCapacity {
     resetAt?: string | null;
     confidence?: NativeCapacityConfidence;
     metadata?: Record<string, unknown>;
+    /** UTC-day active execution accounting, keyed by the advertised capability. */
+    capabilityUsage?: Record<string, {
+        day: string;
+        activeSeconds: number;
+        reservedSeconds: number;
+    }>;
 }
 export interface ExecutionProviderNativeCapacity {
     id?: string;
@@ -50,6 +56,14 @@ export interface ExecutionProviderNativeCapacity {
     metadata?: Record<string, unknown>;
     nativeLimits?: ExecutionProviderNativeLimitCapacity[];
     observation?: ExecutionProviderObservationCapacity;
+    /** Shared by all capabilities exposed through this model configuration. */
+    modelConfigurationId?: string;
+    dailyActiveSecondsLimit?: number;
+    capabilityLimits?: Record<string, {
+        dailyActiveSecondsLimit: number;
+        minimumAssignmentSeconds?: number;
+        maximumAssignmentSeconds?: number;
+    }>;
 }
 export interface CapacityProviderNativeCapacity {
     executionProviders: ExecutionProviderNativeCapacity[];

package/dist/capacity-provider/contracts/governance.d.ts

@@ -1,5 +1,6 @@
 import type { ResearchSourcePolicy } from '../../agent-capacity/contracts/support/research-source-policy.js';
 import type { CapabilityOffer } from '../capability-ontology.js';
+import type { CapabilityAccountingObservation } from '../../agent-capacity/contracts/capacity/workdays/capability-accounting.js';
 export declare const CAPACITY_PROVIDER_IDENTITY_ALGORITHM: "Ed25519";
 export declare const CAPACITY_PROVIDER_PROOF_TTL_SECONDS = 300;
 export declare const CAPACITY_PROVIDER_ACCESS_TOKEN_TTL_SECONDS = 900;
@@ -295,6 +296,10 @@ export interface ProviderExecutionAdapterSnapshot {
     minimumAssignmentDuration?: MinimumAssignmentDuration;
     nativeLimits: Record<string, unknown>;
     observations?: Record<string, unknown>;
+    accountingObservation?: {
+        modelUsage: CapabilityAccountingObservation;
+        capabilityUsage: Record<string, CapabilityAccountingObservation>;
+    };
 }
 export interface ProviderAvailabilitySnapshot {
     sequence: number;
@@ -446,6 +451,7 @@ export interface CapacityProviderManifestV5 {
             endpointRef?: string;
             baseUrl?: string;
             model?: string;
+            reasoningEffort?: 'minimal' | 'low' | 'medium' | 'high' | 'xhigh';
         };
         credentialProfiles?: string[];
         laneIds: string[];

package/dist/capacity-provider/sandbox-contracts.d.ts

@@ -1,4 +1,6 @@
 import { z } from 'zod';
+export { assignmentTimingAwarenessReceiptSchema } from '../agent-capacity/contracts/capacity/assignments/agent-execution.js';
+export type { AssignmentTimingAwarenessReceipt } from '../agent-capacity/contracts/capacity/assignments/agent-execution.js';
 declare const sandboxProfile: z.ZodString;
 export declare const sandboxAssignmentSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<"treeseed.sandbox-assignment/v1">;
@@ -394,6 +396,37 @@ export declare const sandboxResultSchema: z.ZodObject<{
         mediaType: string;
         bytes: number;
     }>, "many">;
+    timingAwareness: z.ZodObject<{
+        schemaVersion: z.ZodLiteral<"treeseed.assignment-timing-awareness/v1">;
+        requiredChecks: z.ZodLiteral<2>;
+        completedChecks: z.ZodNumber;
+        firstTool: z.ZodLiteral<"treedx:treeseed_time_status">;
+        firstToolSucceeded: z.ZodLiteral<true>;
+        lastTool: z.ZodLiteral<"treedx:treeseed_time_status">;
+        lastToolSucceeded: z.ZodLiteral<true>;
+        firstToolCompliant: z.ZodLiteral<true>;
+        finalToolCompliant: z.ZodLiteral<true>;
+    }, "strict", z.ZodTypeAny, {
+        schemaVersion: "treeseed.assignment-timing-awareness/v1";
+        requiredChecks: 2;
+        completedChecks: number;
+        firstTool: "treedx:treeseed_time_status";
+        firstToolSucceeded: true;
+        lastTool: "treedx:treeseed_time_status";
+        lastToolSucceeded: true;
+        firstToolCompliant: true;
+        finalToolCompliant: true;
+    }, {
+        schemaVersion: "treeseed.assignment-timing-awareness/v1";
+        requiredChecks: 2;
+        completedChecks: number;
+        firstTool: "treedx:treeseed_time_status";
+        firstToolSucceeded: true;
+        lastTool: "treedx:treeseed_time_status";
+        lastToolSucceeded: true;
+        firstToolCompliant: true;
+        finalToolCompliant: true;
+    }>;
     usage: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     diagnostics: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     teardown: z.ZodObject<{
@@ -420,6 +453,17 @@ export declare const sandboxResultSchema: z.ZodObject<{
     summary: string;
     usage: Record<string, unknown>;
     diagnostics: Record<string, unknown>;
+    timingAwareness: {
+        schemaVersion: "treeseed.assignment-timing-awareness/v1";
+        requiredChecks: 2;
+        completedChecks: number;
+        firstTool: "treedx:treeseed_time_status";
+        firstToolSucceeded: true;
+        lastTool: "treedx:treeseed_time_status";
+        lastToolSucceeded: true;
+        firstToolCompliant: true;
+        finalToolCompliant: true;
+    };
     sandboxId: string;
     teardown: {
         completedAt: string | null;
@@ -438,6 +482,17 @@ export declare const sandboxResultSchema: z.ZodObject<{
         bytes: number;
     }[];
     summary: string;
+    timingAwareness: {
+        schemaVersion: "treeseed.assignment-timing-awareness/v1";
+        requiredChecks: 2;
+        completedChecks: number;
+        firstTool: "treedx:treeseed_time_status";
+        firstToolSucceeded: true;
+        lastTool: "treedx:treeseed_time_status";
+        lastToolSucceeded: true;
+        firstToolCompliant: true;
+        finalToolCompliant: true;
+    };
     sandboxId: string;
     teardown: {
         completedAt: string | null;
@@ -545,4 +600,3 @@ export type SandboxLeaseRenewal = z.infer<typeof sandboxLeaseRenewalSchema>;
 export type SandboxResult = z.infer<typeof sandboxResultSchema>;
 export type ProviderEnvironmentReceipt = z.infer<typeof providerEnvironmentReceiptSchema>;
 export type SandboxEnvironmentProfile = z.infer<typeof sandboxProfile>;
-export {};

package/dist/capacity-provider/sandbox-contracts.js

@@ -1,4 +1,6 @@
 import { z } from "zod";
+import { assignmentTimingAwarenessReceiptSchema } from "../agent-capacity/contracts/capacity/assignments/agent-execution.js";
+import { assignmentTimingAwarenessReceiptSchema as assignmentTimingAwarenessReceiptSchema2 } from "../agent-capacity/contracts/capacity/assignments/agent-execution.js";
 const identifier = z.string().regex(/^[a-z][a-z0-9._-]{0,127}$/u);
 const digest = z.string().regex(/^sha256:[a-f0-9]{64}$/u);
 const sandboxProfile = identifier;
@@ -60,6 +62,7 @@ const sandboxResultSchema = z.object({
   summary: z.string(),
   responseMarkdown: z.string().optional(),
   artifacts: z.array(z.object({ id: identifier, path: z.string().startsWith("/run/treeseed-output/"), digest, mediaType: z.string().min(1), bytes: z.number().int().nonnegative() }).strict()),
+  timingAwareness: assignmentTimingAwarenessReceiptSchema,
   usage: z.record(z.unknown()).default({}),
   diagnostics: z.record(z.unknown()).default({}),
   teardown: z.object({ verified: z.boolean(), completedAt: z.string().datetime().nullable() }).strict()
@@ -78,6 +81,7 @@ const providerEnvironmentReceiptSchema = z.object({
   signature: z.object({ keyId: identifier, algorithm: z.literal("Ed25519"), value: z.string().min(1) }).strict()
 }).strict();
 export {
+  assignmentTimingAwarenessReceiptSchema2 as assignmentTimingAwarenessReceiptSchema,
   providerEnvironmentReceiptSchema,
   sandboxAssignmentSchema,
   sandboxEventSchema,

package/dist/capacity-provider/source-workspace.d.ts

@@ -1,6 +1,7 @@
 import { z } from 'zod';
 /** The assignment identity already includes node revision and attempt. */
 export declare function assignmentSourceBranch(assignmentId: string): string;
+export declare function simulationSourceBranch(campaignId: string, workdayId: string, assignmentId: string): string;
 /** Portable identity of canonical source. Physical storage belongs exclusively to Deployment. */
 export declare const sourceWorkspaceKeySchema: z.ZodObject<{
     controlPlaneId: z.ZodString;
@@ -60,8 +61,10 @@ export declare const sourceWorkspaceAuthorizationSchema: z.ZodEffects<z.ZodObjec
         formatVersion: 1;
     }>;
     mode: z.ZodEnum<["analysis", "work"]>;
-    publication: z.ZodEnum<["denied", "assignment-branch"]>;
-    credentialBindingId: z.ZodString;
+    acquisition: z.ZodEnum<["upstream-public", "upstream-authorized", "simulation-local"]>;
+    publication: z.ZodEnum<["denied", "assignment-branch", "simulation-branch"]>;
+    publicationRef: z.ZodOptional<z.ZodString>;
+    credentialBindingId: z.ZodOptional<z.ZodString>;
     issuedAt: z.ZodString;
     expiresAt: z.ZodString;
 }, "strict", z.ZodTypeAny, {
@@ -82,8 +85,10 @@ export declare const sourceWorkspaceAuthorizationSchema: z.ZodEffects<z.ZodObjec
     };
     mode: "analysis" | "work";
     attempt: number;
-    publication: "denied" | "assignment-branch";
-    credentialBindingId: string;
+    publication: "denied" | "assignment-branch" | "simulation-branch";
+    acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+    publicationRef?: string | undefined;
+    credentialBindingId?: string | undefined;
 }, {
     id: string;
     expiresAt: string;
@@ -102,8 +107,10 @@ export declare const sourceWorkspaceAuthorizationSchema: z.ZodEffects<z.ZodObjec
     };
     mode: "analysis" | "work";
     attempt: number;
-    publication: "denied" | "assignment-branch";
-    credentialBindingId: string;
+    publication: "denied" | "assignment-branch" | "simulation-branch";
+    acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+    publicationRef?: string | undefined;
+    credentialBindingId?: string | undefined;
 }>, {
     id: string;
     expiresAt: string;
@@ -122,8 +129,10 @@ export declare const sourceWorkspaceAuthorizationSchema: z.ZodEffects<z.ZodObjec
     };
     mode: "analysis" | "work";
     attempt: number;
-    publication: "denied" | "assignment-branch";
-    credentialBindingId: string;
+    publication: "denied" | "assignment-branch" | "simulation-branch";
+    acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+    publicationRef?: string | undefined;
+    credentialBindingId?: string | undefined;
 }, {
     id: string;
     expiresAt: string;
@@ -142,8 +151,10 @@ export declare const sourceWorkspaceAuthorizationSchema: z.ZodEffects<z.ZodObjec
     };
     mode: "analysis" | "work";
     attempt: number;
-    publication: "denied" | "assignment-branch";
-    credentialBindingId: string;
+    publication: "denied" | "assignment-branch" | "simulation-branch";
+    acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+    publicationRef?: string | undefined;
+    credentialBindingId?: string | undefined;
 }>;
 export declare const sourceWorkspaceLeaseSchema: z.ZodObject<{
     schemaVersion: z.ZodLiteral<"treeseed.source-workspace-lease/v1">;
@@ -179,7 +190,8 @@ export declare const sourceWorkspaceLeaseSchema: z.ZodObject<{
     }>;
     workspaceDigest: z.ZodString;
     mode: z.ZodEnum<["analysis", "work"]>;
-    publication: z.ZodEnum<["denied", "assignment-branch"]>;
+    acquisition: z.ZodEnum<["upstream-public", "upstream-authorized", "simulation-local"]>;
+    publication: z.ZodEnum<["denied", "assignment-branch", "simulation-branch"]>;
     state: z.ZodEnum<["active", "exporting", "released", "quarantined"]>;
     createdAt: z.ZodString;
     expiresAt: z.ZodString;
@@ -202,7 +214,8 @@ export declare const sourceWorkspaceLeaseSchema: z.ZodObject<{
     };
     mode: "analysis" | "work";
     attempt: number;
-    publication: "denied" | "assignment-branch";
+    publication: "denied" | "assignment-branch" | "simulation-branch";
+    acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
     authorizationId: string;
     workspaceDigest: string;
 }, {
@@ -224,7 +237,8 @@ export declare const sourceWorkspaceLeaseSchema: z.ZodObject<{
     };
     mode: "analysis" | "work";
     attempt: number;
-    publication: "denied" | "assignment-branch";
+    publication: "denied" | "assignment-branch" | "simulation-branch";
+    acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
     authorizationId: string;
     workspaceDigest: string;
 }>;
@@ -309,8 +323,10 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
             formatVersion: 1;
         }>;
         mode: z.ZodEnum<["analysis", "work"]>;
-        publication: z.ZodEnum<["denied", "assignment-branch"]>;
-        credentialBindingId: z.ZodString;
+        acquisition: z.ZodEnum<["upstream-public", "upstream-authorized", "simulation-local"]>;
+        publication: z.ZodEnum<["denied", "assignment-branch", "simulation-branch"]>;
+        publicationRef: z.ZodOptional<z.ZodString>;
+        credentialBindingId: z.ZodOptional<z.ZodString>;
         issuedAt: z.ZodString;
         expiresAt: z.ZodString;
     }, "strict", z.ZodTypeAny, {
@@ -331,8 +347,10 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         };
         mode: "analysis" | "work";
         attempt: number;
-        publication: "denied" | "assignment-branch";
-        credentialBindingId: string;
+        publication: "denied" | "assignment-branch" | "simulation-branch";
+        acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+        publicationRef?: string | undefined;
+        credentialBindingId?: string | undefined;
     }, {
         id: string;
         expiresAt: string;
@@ -351,8 +369,10 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         };
         mode: "analysis" | "work";
         attempt: number;
-        publication: "denied" | "assignment-branch";
-        credentialBindingId: string;
+        publication: "denied" | "assignment-branch" | "simulation-branch";
+        acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+        publicationRef?: string | undefined;
+        credentialBindingId?: string | undefined;
     }>, {
         id: string;
         expiresAt: string;
@@ -371,8 +391,10 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         };
         mode: "analysis" | "work";
         attempt: number;
-        publication: "denied" | "assignment-branch";
-        credentialBindingId: string;
+        publication: "denied" | "assignment-branch" | "simulation-branch";
+        acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+        publicationRef?: string | undefined;
+        credentialBindingId?: string | undefined;
     }, {
         id: string;
         expiresAt: string;
@@ -391,8 +413,10 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         };
         mode: "analysis" | "work";
         attempt: number;
-        publication: "denied" | "assignment-branch";
-        credentialBindingId: string;
+        publication: "denied" | "assignment-branch" | "simulation-branch";
+        acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+        publicationRef?: string | undefined;
+        credentialBindingId?: string | undefined;
     }>;
     repository: z.ZodObject<{
         provider: z.ZodLiteral<"github">;
@@ -413,7 +437,7 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         ref: string;
         cloneUrl: string;
     }>;
-    credential: z.ZodObject<{
+    credential: z.ZodNullable<z.ZodObject<{
         schemaVersion: z.ZodLiteral<"treeseed.source-credential-delivery/v1">;
         id: z.ZodString;
         authorizationId: z.ZodString;
@@ -443,7 +467,7 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         tag: string;
         authorizationId: string;
         ephemeralPublicKey: string;
-    }>;
+    }>>;
 }, "strict", z.ZodTypeAny, {
     repository: {
         provider: "github";
@@ -470,8 +494,10 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         };
         mode: "analysis" | "work";
         attempt: number;
-        publication: "denied" | "assignment-branch";
-        credentialBindingId: string;
+        publication: "denied" | "assignment-branch" | "simulation-branch";
+        acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+        publicationRef?: string | undefined;
+        credentialBindingId?: string | undefined;
     };
     credential: {
         id: string;
@@ -483,7 +509,7 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         tag: string;
         authorizationId: string;
         ephemeralPublicKey: string;
-    };
+    } | null;
 }, {
     repository: {
         provider: "github";
@@ -510,8 +536,10 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         };
         mode: "analysis" | "work";
         attempt: number;
-        publication: "denied" | "assignment-branch";
-        credentialBindingId: string;
+        publication: "denied" | "assignment-branch" | "simulation-branch";
+        acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+        publicationRef?: string | undefined;
+        credentialBindingId?: string | undefined;
     };
     credential: {
         id: string;
@@ -523,7 +551,7 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         tag: string;
         authorizationId: string;
         ephemeralPublicKey: string;
-    };
+    } | null;
 }>, {
     repository: {
         provider: "github";
@@ -550,8 +578,10 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         };
         mode: "analysis" | "work";
         attempt: number;
-        publication: "denied" | "assignment-branch";
-        credentialBindingId: string;
+        publication: "denied" | "assignment-branch" | "simulation-branch";
+        acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+        publicationRef?: string | undefined;
+        credentialBindingId?: string | undefined;
     };
     credential: {
         id: string;
@@ -563,7 +593,7 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         tag: string;
         authorizationId: string;
         ephemeralPublicKey: string;
-    };
+    } | null;
 }, {
     repository: {
         provider: "github";
@@ -590,8 +620,10 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         };
         mode: "analysis" | "work";
         attempt: number;
-        publication: "denied" | "assignment-branch";
-        credentialBindingId: string;
+        publication: "denied" | "assignment-branch" | "simulation-branch";
+        acquisition: "upstream-public" | "upstream-authorized" | "simulation-local";
+        publicationRef?: string | undefined;
+        credentialBindingId?: string | undefined;
     };
     credential: {
         id: string;
@@ -603,7 +635,7 @@ export declare const sourceWorkspaceResponseSchema: z.ZodEffects<z.ZodObject<{
         tag: string;
         authorizationId: string;
         ephemeralPublicKey: string;
-    };
+    } | null;
 }>;
 export type SourceCredentialDelivery = z.infer<typeof sourceCredentialDeliverySchema>;
 export type SourceWorkspaceRequest = z.infer<typeof sourceWorkspaceRequestSchema>;

package/dist/capacity-provider/source-workspace.js

@@ -6,6 +6,12 @@ function assignmentSourceBranch(assignmentId) {
   if (!/^[A-Za-z0-9._-]+$/u.test(assignmentId)) throw new Error("Invalid assignment branch identity.");
   return `treeseed/assignments/${assignmentId}`;
 }
+function simulationSourceBranch(campaignId, workdayId, assignmentId) {
+  for (const [label, value] of Object.entries({ campaignId, workdayId, assignmentId })) {
+    if (!/^[A-Za-z0-9._-]+$/u.test(value)) throw new Error(`Invalid simulation ${label}.`);
+  }
+  return `simulation/${campaignId}/${workdayId}/${assignmentId}`;
+}
 const sourceWorkspaceKeySchema = z.object({
   controlPlaneId: id,
   teamId: id,
@@ -23,8 +29,10 @@ const sourceWorkspaceAuthorizationSchema = z.object({
   attempt: z.number().int().positive(),
   source: sourceWorkspaceKeySchema,
   mode: z.enum(["analysis", "work"]),
-  publication: z.enum(["denied", "assignment-branch"]),
-  credentialBindingId: id,
+  acquisition: z.enum(["upstream-public", "upstream-authorized", "simulation-local"]),
+  publication: z.enum(["denied", "assignment-branch", "simulation-branch"]),
+  publicationRef: id.optional(),
+  credentialBindingId: id.optional(),
   issuedAt: z.string().datetime(),
   expiresAt: z.string().datetime()
 }).strict().superRefine((value, context) => {
@@ -34,6 +42,24 @@ const sourceWorkspaceAuthorizationSchema = z.object({
   if (value.mode === "analysis" && value.publication !== "denied") {
     context.addIssue({ code: z.ZodIssueCode.custom, path: ["publication"], message: "Analysis cannot publish source changes." });
   }
+  if (value.publication === "denied" && value.publicationRef) {
+    context.addIssue({ code: z.ZodIssueCode.custom, path: ["publicationRef"], message: "Denied publication cannot name a destination ref." });
+  }
+  if (value.publication !== "denied" && !value.publicationRef) {
+    context.addIssue({ code: z.ZodIssueCode.custom, path: ["publicationRef"], message: "Work publication requires its exact destination ref." });
+  }
+  if (value.publication === "assignment-branch" && !value.credentialBindingId) {
+    context.addIssue({ code: z.ZodIssueCode.custom, path: ["credentialBindingId"], message: "Upstream publication requires a credential binding." });
+  }
+  if (value.publication === "simulation-branch" && value.credentialBindingId) {
+    context.addIssue({ code: z.ZodIssueCode.custom, path: ["credentialBindingId"], message: "Simulation cannot receive an upstream credential binding." });
+  }
+  if (value.acquisition === "upstream-authorized" && !value.credentialBindingId) {
+    context.addIssue({ code: z.ZodIssueCode.custom, path: ["credentialBindingId"], message: "Authorized acquisition requires a credential binding." });
+  }
+  if (value.acquisition !== "upstream-authorized" && value.credentialBindingId) {
+    context.addIssue({ code: z.ZodIssueCode.custom, path: ["credentialBindingId"], message: "Public and simulation-local acquisition cannot receive a credential binding." });
+  }
 });
 const sourceWorkspaceLeaseSchema = z.object({
   schemaVersion: z.literal("treeseed.source-workspace-lease/v1"),
@@ -45,7 +71,8 @@ const sourceWorkspaceLeaseSchema = z.object({
   source: sourceWorkspaceKeySchema,
   workspaceDigest: digest,
   mode: z.enum(["analysis", "work"]),
-  publication: z.enum(["denied", "assignment-branch"]),
+  acquisition: z.enum(["upstream-public", "upstream-authorized", "simulation-local"]),
+  publication: z.enum(["denied", "assignment-branch", "simulation-branch"]),
   state: z.enum(["active", "exporting", "released", "quarantined"]),
   createdAt: z.string().datetime(),
   expiresAt: z.string().datetime()
@@ -75,17 +102,21 @@ const sourceWorkspaceResponseSchema = z.object({
     cloneUrl: z.string().url().startsWith("https://github.com/"),
     ref: id
   }).strict(),
-  credential: sourceCredentialDeliverySchema
+  credential: sourceCredentialDeliverySchema.nullable()
 }).strict().superRefine((value, context) => {
   if (value.repository.cloneUrl !== `https://github.com/${value.repository.owner}/${value.repository.name}.git`) {
     context.addIssue({ code: z.ZodIssueCode.custom, path: ["repository", "cloneUrl"], message: "Source transport must match its provider repository." });
   }
-  if (value.credential.authorizationId !== value.authorization.id || value.credential.expiresAt !== value.authorization.expiresAt) {
+  if (value.credential && (value.credential.authorizationId !== value.authorization.id || value.credential.expiresAt !== value.authorization.expiresAt)) {
     context.addIssue({ code: z.ZodIssueCode.custom, path: ["credential"], message: "Source credential delivery must match exact authorization and lifetime." });
   }
+  if (Boolean(value.authorization.credentialBindingId) !== Boolean(value.credential)) {
+    context.addIssue({ code: z.ZodIssueCode.custom, path: ["credential"], message: "Credential delivery must match the declared binding." });
+  }
 });
 export {
   assignmentSourceBranch,
+  simulationSourceBranch,
   sourceCredentialDeliverySchema,
   sourceWorkspaceAuthorizationSchema,
   sourceWorkspaceKeySchema,

package/dist/content/validation/auxiliary-content-schemas.d.ts

@@ -220,8 +220,8 @@ export declare const workdayContentSchema: z.ZodObject<{
     visibility?: "team" | "public" | "private" | "authenticated" | undefined;
     teamId?: string | undefined;
     createdAt?: Date | undefined;
-    metadata?: Record<string, unknown> | undefined;
     endedAt?: Date | null | undefined;
+    metadata?: Record<string, unknown> | undefined;
     changedFiles?: string[] | undefined;
     reportKind?: string | undefined;
     dailyTaskCreditBudget?: number | undefined;
@@ -647,7 +647,7 @@ export declare const agentTestContentSchema: z.ZodEffects<z.ZodObject<{
     }>>;
     maxLatencyMs: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
-    kind: "handler" | "workday" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
+    kind: "workday" | "handler" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
     agent: string;
     id: string;
     trigger: Record<string, unknown>;
@@ -691,7 +691,7 @@ export declare const agentTestContentSchema: z.ZodEffects<z.ZodObject<{
     } | undefined;
     maxLatencyMs?: number | undefined;
 }, {
-    kind: "handler" | "workday" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
+    kind: "workday" | "handler" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
     agent: string;
     id: string;
     fixture?: string | undefined;
@@ -751,7 +751,7 @@ export declare const agentTestContentSchema: z.ZodEffects<z.ZodObject<{
     } | undefined;
     maxLatencyMs?: number | undefined;
 }>, {
-    kind: "handler" | "workday" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
+    kind: "workday" | "handler" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
     agent: string;
     id: string;
     trigger: Record<string, unknown>;
@@ -795,7 +795,7 @@ export declare const agentTestContentSchema: z.ZodEffects<z.ZodObject<{
     } | undefined;
     maxLatencyMs?: number | undefined;
 }, {
-    kind: "handler" | "workday" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
+    kind: "workday" | "handler" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
     agent: string;
     id: string;
     fixture?: string | undefined;
@@ -999,7 +999,7 @@ export declare const auxiliaryContentSchemas: {
         }>>;
         maxLatencyMs: z.ZodOptional<z.ZodNumber>;
     }, "strip", z.ZodTypeAny, {
-        kind: "handler" | "workday" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
+        kind: "workday" | "handler" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
         agent: string;
         id: string;
         trigger: Record<string, unknown>;
@@ -1043,7 +1043,7 @@ export declare const auxiliaryContentSchemas: {
         } | undefined;
         maxLatencyMs?: number | undefined;
     }, {
-        kind: "handler" | "workday" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
+        kind: "workday" | "handler" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
         agent: string;
         id: string;
         fixture?: string | undefined;
@@ -1103,7 +1103,7 @@ export declare const auxiliaryContentSchemas: {
         } | undefined;
         maxLatencyMs?: number | undefined;
     }>, {
-        kind: "handler" | "workday" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
+        kind: "workday" | "handler" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
         agent: string;
         id: string;
         trigger: Record<string, unknown>;
@@ -1147,7 +1147,7 @@ export declare const auxiliaryContentSchemas: {
         } | undefined;
         maxLatencyMs?: number | undefined;
     }, {
-        kind: "handler" | "workday" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
+        kind: "workday" | "handler" | "api" | "spec" | "message_chain" | "manager_worker" | "ui" | "context-query" | "context-query-set";
         agent: string;
         id: string;
         fixture?: string | undefined;
@@ -1428,8 +1428,8 @@ export declare const auxiliaryContentSchemas: {
         visibility?: "team" | "public" | "private" | "authenticated" | undefined;
         teamId?: string | undefined;
         createdAt?: Date | undefined;
-        metadata?: Record<string, unknown> | undefined;
         endedAt?: Date | null | undefined;
+        metadata?: Record<string, unknown> | undefined;
         changedFiles?: string[] | undefined;
         reportKind?: string | undefined;
         dailyTaskCreditBudget?: number | undefined;