@xemahq/kernel-contracts 0.19.0 → 0.20.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "$schema": "https://xema.dev/schemas/awp-spec.v1.json",
3
- "emittedAt": "2026-06-28T11:16:43.604Z",
3
+ "emittedAt": "2026-06-28T12:57:15.829Z",
4
4
  "spec": {
5
5
  "id": "awp/v1",
6
6
  "version": "1.2.0",
@@ -1,4 +1,5 @@
1
1
  import { z } from 'zod';
2
+ import { AgentReachTier } from '../../agent-composition';
2
3
  import { type CapabilityRef } from '../../capability';
3
4
  import { ExecutionEnvironmentKind } from '../../execution-environment';
4
5
  import { DataClassification, type SpaceRef } from '../../space';
@@ -55,6 +56,7 @@ export interface ExecutionContext {
55
56
  constraints?: ExecutionContextConstraints;
56
57
  actorChain?: ActingForRef[];
57
58
  credentialBindingId?: string;
59
+ reachTier?: AgentReachTier;
58
60
  }
59
61
  export declare const ExecutionContextSchema: z.ZodType<ExecutionContext>;
60
62
  //# sourceMappingURL=execution-context.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EAEzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,EAGlB,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAWnB,oBAAY,cAAc;IACxB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,SAAS,cAAc;CACxB;AAED,eAAO,MAAM,oBAAoB,kCAA+B,CAAC;AAQjE,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,cAAc,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,2BAA2B,EAKlC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAavC,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,wBAAwB,CAAC;CAChC;AAED,eAAO,MAAM,iCAAiC,EAGxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAW7C,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,aAAa,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,gCAAgC,EAGvC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAW5C,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,kBAAkB,CAAC;CACpC;AAED,eAAO,MAAM,8BAA8B,EAGrC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAc1C,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,eAAO,MAAM,iCAAiC,EAMxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAa7C,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,WAAW,EAAE,2BAA2B,CAAC;IACzC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,UAAU,EAAE,0BAA0B,CAAC;IACvC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAO1C,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAO5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,sBAAsB,EAc7B,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC"}
1
+ {"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EAEf,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,wBAAwB,EAEzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,kBAAkB,EAGlB,KAAK,QAAQ,EACd,MAAM,aAAa,CAAC;AACrB,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,UAAU,CAAC;AACrD,OAAO,EAGL,KAAK,YAAY,EACjB,KAAK,UAAU,EAChB,MAAM,WAAW,CAAC;AAWnB,oBAAY,cAAc;IACxB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,SAAS,cAAc;CACxB;AAED,eAAO,MAAM,oBAAoB,kCAA+B,CAAC;AAQjE,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,cAAc,CAAC;IAC1B,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,2BAA2B,EAKlC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AAavC,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,wBAAwB,CAAC;CAChC;AAED,eAAO,MAAM,iCAAiC,EAGxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAW7C,MAAM,WAAW,0BAA0B;IACzC,GAAG,EAAE,aAAa,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,gCAAgC,EAGvC,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;AAW5C,MAAM,WAAW,wBAAwB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,kBAAkB,CAAC;CACpC;AAED,eAAO,MAAM,8BAA8B,EAGrC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAc1C,MAAM,WAAW,2BAA2B;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED,eAAO,MAAM,iCAAiC,EAMxC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;AAa7C,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,WAAW,EAAE,2BAA2B,CAAC;IACzC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IAC9B,UAAU,EAAE,0BAA0B,CAAC;IACvC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IACpC,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAO1C,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAO5B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAQ7B,SAAS,CAAC,EAAE,cAAc,CAAC;CAC5B;AAED,eAAO,MAAM,sBAAsB,EAe7B,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC"}
@@ -2,6 +2,7 @@
2
2
  Object.defineProperty(exports, "__esModule", { value: true });
3
3
  exports.ExecutionContextSchema = exports.ExecutionContextConstraintsSchema = exports.ExecutionContextResourceSchema = exports.ExecutionContextCapabilitySchema = exports.ExecutionContextEnvironmentSchema = exports.ExecutionContextBiomeSchema = exports.BiomeTrustTierSchema = exports.BiomeTrustTier = void 0;
4
4
  const zod_1 = require("zod");
5
+ const agent_composition_1 = require("../../agent-composition");
5
6
  const capability_1 = require("../../capability");
6
7
  const execution_environment_1 = require("../../execution-environment");
7
8
  const space_1 = require("../../space");
@@ -54,5 +55,6 @@ exports.ExecutionContextSchema = zod_1.z.object({
54
55
  constraints: exports.ExecutionContextConstraintsSchema.optional(),
55
56
  actorChain: zod_1.z.array(subject_1.ActingForRefSchema).optional(),
56
57
  credentialBindingId: zod_1.z.string().min(1).optional(),
58
+ reachTier: agent_composition_1.AgentReachTierSchema.optional(),
57
59
  });
58
60
  //# sourceMappingURL=execution-context.js.map
@@ -1 +1 @@
1
- {"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iDAG0B;AAC1B,uEAGqC;AACrC,uCAKqB;AACrB,qCAAqD;AACrD,uCAKmB;AAWnB,IAAY,cAKX;AALD,WAAY,cAAc;IACxB,uCAAqB,CAAA;IACrB,uCAAqB,CAAA;IACrB,yCAAuB,CAAA;IACvB,yCAAuB,CAAA;AACzB,CAAC,EALW,cAAc,8BAAd,cAAc,QAKzB;AAEY,QAAA,oBAAoB,GAAG,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAepD,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,4BAAoB;IAC/B,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC/B,CAAqC,CAAC;AAkB1B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,sDAA8B;CACrC,CAA2C,CAAC;AAgBhC,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,gCAAmB;IACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAA0C,CAAC;AAgB/B,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,cAAc,EAAE,gCAAwB;CACzC,CAAwC,CAAC;AAsB7B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC7D,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAA2C,CAAC;AAyChC,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,0BAAgB;IACzB,MAAM,EAAE,qBAAY;IACpB,KAAK,EAAE,sBAAc;IACrB,WAAW,EAAE,yCAAiC;IAC9C,KAAK,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,wCAAgC;IAC5C,QAAQ,EAAE,sCAA8B,CAAC,QAAQ,EAAE;IACnD,WAAW,EAAE,yCAAiC,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAkB,CAAC,CAAC,QAAQ,EAAE;IAClD,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAClD,CAAgC,CAAC"}
1
+ {"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../../src/execution-context/lib/execution-context.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,+DAGiC;AACjC,iDAG0B;AAC1B,uEAGqC;AACrC,uCAKqB;AACrB,qCAAqD;AACrD,uCAKmB;AAWnB,IAAY,cAKX;AALD,WAAY,cAAc;IACxB,uCAAqB,CAAA;IACrB,uCAAqB,CAAA;IACrB,yCAAuB,CAAA;IACvB,yCAAuB,CAAA;AACzB,CAAC,EALW,cAAc,8BAAd,cAAc,QAKzB;AAEY,QAAA,oBAAoB,GAAG,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAepD,QAAA,2BAA2B,GAAG,OAAC,CAAC,MAAM,CAAC;IAClD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,SAAS,EAAE,4BAAoB;IAC/B,iBAAiB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC/B,CAAqC,CAAC;AAkB1B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,sDAA8B;CACrC,CAA2C,CAAC;AAgBhC,QAAA,gCAAgC,GAAG,OAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,gCAAmB;IACxB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAA0C,CAAC;AAgB/B,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,cAAc,EAAE,gCAAwB;CACzC,CAAwC,CAAC;AAsB7B,QAAA,iCAAiC,GAAG,OAAC,CAAC,MAAM,CAAC;IACxD,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC7D,eAAe,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACvC,YAAY,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACpC,mBAAmB,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAA2C,CAAC;AAiDhC,QAAA,sBAAsB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC7C,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,OAAO,EAAE,0BAAgB;IACzB,MAAM,EAAE,qBAAY;IACpB,KAAK,EAAE,sBAAc;IACrB,WAAW,EAAE,yCAAiC;IAC9C,KAAK,EAAE,mCAA2B,CAAC,QAAQ,EAAE;IAC7C,UAAU,EAAE,wCAAgC;IAC5C,QAAQ,EAAE,sCAA8B,CAAC,QAAQ,EAAE;IACnD,WAAW,EAAE,yCAAiC,CAAC,QAAQ,EAAE;IACzD,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,4BAAkB,CAAC,CAAC,QAAQ,EAAE;IAClD,mBAAmB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjD,SAAS,EAAE,wCAAoB,CAAC,QAAQ,EAAE;CAC3C,CAAgC,CAAC"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@xemahq/kernel-contracts",
3
- "version": "0.19.0",
3
+ "version": "0.20.0",
4
4
  "description": "Consolidated Xema OS kernel wire contracts — pure types + zod schemas for the 32 kernel protocol surfaces. One package, one npm scope, wildcard per-surface subpath exports. No framework/runtime deps.",
5
5
  "publishConfig": {
6
6
  "registry": "https://registry.npmjs.org/",
@@ -1,4 +1,8 @@
1
1
  import { z } from 'zod';
2
+ import {
3
+ AgentReachTier,
4
+ AgentReachTierSchema,
5
+ } from '../../agent-composition';
2
6
  import {
3
7
  CapabilityRefSchema,
4
8
  type CapabilityRef,
@@ -183,6 +187,14 @@ export interface ExecutionContext {
183
187
  * (plan §W4 / Pillar 3.2).
184
188
  */
185
189
  credentialBindingId?: string;
190
+ /**
191
+ * The acting agent's permission ceiling ({@link AgentReachTier}), stamped by
192
+ * the capability-router from the session so the PDP can apply the tier
193
+ * constraint inside the verdict. Absent ⇒ `as-owner` (no constraint) — the
194
+ * agent's authority equals its owner's. The tier can only RESTRICT, never
195
+ * amplify (see {@link AgentReachTier}).
196
+ */
197
+ reachTier?: AgentReachTier;
186
198
  }
187
199
 
188
200
  export const ExecutionContextSchema = z.object({
@@ -199,4 +211,5 @@ export const ExecutionContextSchema = z.object({
199
211
  constraints: ExecutionContextConstraintsSchema.optional(),
200
212
  actorChain: z.array(ActingForRefSchema).optional(),
201
213
  credentialBindingId: z.string().min(1).optional(),
214
+ reachTier: AgentReachTierSchema.optional(),
202
215
  }) as z.ZodType<ExecutionContext>;