@xenosystem/agent-sdk 0.8.12

package/ownership/templates/provenance-review.md

@@ -0,0 +1,51 @@
+# Independent Provenance Review
+
+## Review identity
+
+- Component:
+- Replacement milestone:
+- Implementation record path:
+- Candidate revision:
+- Reviewer:
+- Domain reviewer (if required):
+- Review date (UTC):
+- Reviewer independent of implementation: yes/no
+
+## Evidence checks
+
+- [ ] Behavioral contract predates or is independent from implementation work.
+- [ ] Normative and public sources are listed with revisions and evidence paths.
+- [ ] Contributor source-exposure disclosures are complete.
+- [ ] Required separation/counsel decisions are attached.
+- [ ] No copied source, comments, tests, identifiers, non-normative constants, or distinctive internal structure were found.
+- [ ] AI inputs and human review satisfy the contributor guide.
+- [ ] Intentional incompatibilities are approved and versioned.
+- [ ] Conformance, malformed-input, security, resource-limit, and fuzz evidence meets the component gate.
+- [ ] Bundle graph, native hashes, SBOM, ownership inventory, and clean-install graph agree.
+- [ ] Licenses, patents, trademarks, and specification terms have an explicit disposition.
+
+## Similarity and provenance review method
+
+- Files and revisions reviewed:
+- Comparison method and tools:
+- Findings:
+- False positives and disposition:
+
+## Verification summary
+
+| Gate | Evidence | Result | Notes |
+| --- | --- | --- | --- |
+| Contract compatibility |  |  |  |
+| Security/resource limits |  |  |  |
+| Fuzz/conformance |  |  |  |
+| Cross-platform |  |  |  |
+| Artifact ownership |  |  |  |
+
+## Decision
+
+- Engineering provenance decision: approve/reject/needs-work
+- Capability gate may be marked achieved: yes/no
+- Public clean-room/proprietary claim approved by this review: no
+- Required follow-up:
+- Reviewer signature/date:
+- Counsel approval reference (required for public claim):

package/package.json

@@ -0,0 +1,209 @@
+{
+  "name": "@xenosystem/agent-sdk",
+  "version": "0.8.12",
+  "description": "XENO Agent SDK built from the same engine as XENO CODE",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    },
+    "./package.json": "./package.json",
+    "./ui": {
+      "types": "./dist/ui/index.d.ts",
+      "import": "./dist/ui/index.js",
+      "require": "./dist/ui/index.cjs"
+    },
+    "./providers": {
+      "types": "./dist/providers/index.d.ts",
+      "import": "./dist/providers/index.js",
+      "require": "./dist/providers/index.cjs"
+    },
+    "./electron": {
+      "types": "./dist/electron/index.d.ts",
+      "import": "./dist/electron/index.js",
+      "require": "./dist/electron/index.cjs"
+    },
+    "./session": {
+      "types": "./dist/session/index.d.ts",
+      "import": "./dist/session/index.js",
+      "require": "./dist/session/index.cjs"
+    },
+    "./terminal": {
+      "types": "./dist/terminal/index.d.ts",
+      "import": "./dist/terminal/index.js",
+      "require": "./dist/terminal/index.cjs"
+    },
+    "./mcp": {
+      "types": "./dist/mcp/index.d.ts",
+      "import": "./dist/mcp/index.js",
+      "require": "./dist/mcp/index.cjs"
+    },
+    "./utils": {
+      "types": "./dist/utils/index.d.ts",
+      "import": "./dist/utils/index.js",
+      "require": "./dist/utils/index.cjs"
+    },
+    "./control-plane": {
+      "types": "./dist/control-plane/index.d.ts",
+      "import": "./dist/control-plane/index.js",
+      "require": "./dist/control-plane/index.cjs"
+    },
+    "./control-room": {
+      "types": "./dist/control-room/index.d.ts",
+      "import": "./dist/control-room/index.js",
+      "require": "./dist/control-room/index.cjs"
+    },
+    "./agents": {
+      "types": "./dist/agents/index.d.ts",
+      "import": "./dist/agents/index.js",
+      "require": "./dist/agents/index.cjs"
+    },
+    "./automation": {
+      "types": "./dist/automation/index.d.ts",
+      "import": "./dist/automation/index.js",
+      "require": "./dist/automation/index.cjs"
+    },
+    "./artifacts": {
+      "types": "./dist/artifacts/index.d.ts",
+      "import": "./dist/artifacts/index.js",
+      "require": "./dist/artifacts/index.cjs"
+    },
+    "./artifacts/browser": {
+      "types": "./dist/artifacts/browser.d.ts",
+      "import": "./dist/artifacts/browser.js",
+      "require": "./dist/artifacts/browser.cjs"
+    },
+    "./skills": {
+      "types": "./dist/skills/index.d.ts",
+      "import": "./dist/skills/index.js",
+      "require": "./dist/skills/index.cjs"
+    },
+    "./hooks": {
+      "types": "./dist/hooks/index.d.ts",
+      "import": "./dist/hooks/index.js",
+      "require": "./dist/hooks/index.cjs"
+    },
+    "./governance": {
+      "types": "./dist/governance/index.d.ts",
+      "import": "./dist/governance/index.js",
+      "require": "./dist/governance/index.cjs"
+    },
+    "./intelligence": {
+      "types": "./dist/intelligence/index.d.ts",
+      "import": "./dist/intelligence/index.js",
+      "require": "./dist/intelligence/index.cjs"
+    },
+    "./sharing": {
+      "types": "./dist/sharing/index.d.ts",
+      "import": "./dist/sharing/index.js",
+      "require": "./dist/sharing/index.cjs"
+    },
+    "./hosted": {
+      "types": "./dist/hosted/index.d.ts",
+      "import": "./dist/hosted/index.js",
+      "require": "./dist/hosted/index.cjs"
+    },
+    "./oracle": {
+      "types": "./dist/oracle/index.d.ts",
+      "import": "./dist/oracle/index.js",
+      "require": "./dist/oracle/index.cjs"
+    },
+    "./research": {
+      "types": "./dist/research/index.d.ts",
+      "import": "./dist/research/index.js",
+      "require": "./dist/research/index.cjs"
+    },
+    "./recipes": {
+      "types": "./dist/recipes/index.d.ts",
+      "import": "./dist/recipes/index.js",
+      "require": "./dist/recipes/index.cjs"
+    },
+    "./soul": {
+      "types": "./dist/soul/index.d.ts",
+      "import": "./dist/soul/index.js",
+      "require": "./dist/soul/index.cjs"
+    }
+  },
+  "files": [
+    "dist",
+    "native/mxc",
+    "ownership",
+    "README.md",
+    "LICENSE"
+  ],
+  "license": "UNLICENSED",
+  "publishConfig": {
+    "access": "public"
+  },
+  "homepage": "https://xenostudio.ai",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/XENO-CORPORATION/xeno-agent-sdk.git"
+  },
+  "bugs": {
+    "url": "https://xenostudio.ai/contact"
+  },
+  "scripts": {
+    "build": "node scripts/build-sdk.mjs",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "typecheck:tests": "tsc --noEmit -p tsconfig.tests.json",
+    "typecheck:compat": "tsc6 --noEmit -p tsconfig.json && tsc6 --noEmit -p tsconfig.tests.json",
+    "lint": "eslint .",
+    "compliance:provenance": "node scripts/provenance-guard.mjs",
+    "compliance:licenses": "node scripts/license-inventory.mjs --write",
+    "compliance:ownership": "node ownership/audit.mjs --repo sdk --root . --write",
+    "compliance:ownership:artifacts": "node ownership/audit.mjs --repo sdk --root . --write --artifacts",
+    "compliance:encoding": "node scripts/verify-encoding-integrity.mjs --verify",
+    "compliance:release-actions": "node scripts/verify-release-actions.mjs",
+    "compliance:observability": "node scripts/write-observability-report.mjs --write",
+    "compliance": "npm run compliance:provenance && npm run compliance:licenses && npm run compliance:ownership && npm run compliance:encoding && npm run compliance:release-actions && npm run compliance:observability",
+    "test": "npm run build && node --test --test-concurrency=1 \"tests/**/*.test.*\"",
+    "test:media": "npm run build && node --test tests/xeno-deflate.test.mjs tests/xeno-png.test.mjs tests/xeno-jpeg.test.mjs tests/xeno-gif.test.mjs tests/xeno-vp8.test.mjs tests/xeno-webp.test.mjs tests/xeno-svg.test.mjs tests/read-image-preview.test.mjs tests/external-media-coverage-fuzz.test.mjs",
+    "test:media:external": "npm run build && node scripts/run-external-media-corpora.mjs",
+    "test:media:fuzz": "npm run build && node scripts/fuzz-external-media.mjs --duration-ms 60000",
+    "test:media:fuzz:coverage": "npm run build && node scripts/fuzz-external-media-coverage.mjs --duration-ms 300000",
+    "test:ui:browser": "npm run build && node scripts/run-ui-browser-smoke.mjs",
+    "test:e2e": "npm run build && node --test tests/e2e.test.ts",
+    "test:release": "npm run build && node scripts/run-release-smoke.mjs",
+    "test:stress": "npm run build && node --test tests/agent-loop-parallel.test.mjs tests/agentic-runtime.test.mjs tests/orchestration.test.mjs tests/tool-result-transport.test.mjs",
+    "test:prod": "npm run build && node --test tests/permissions-project-state.test.mjs tests/agentic-runtime.test.mjs tests/e2e.test.ts",
+    "test:containment": "npm run build && node --test tests/policy-enforcer.test.mjs tests/platform-process-containment.test.mjs tests/windows-process-containment.test.mjs tests/containment-certification.test.mjs",
+    "test:containment:native": "npm run build && node scripts/run-containment-conformance.mjs",
+    "containment:approve": "npm run build && node scripts/sign-containment-approval.mjs",
+    "containment:certify": "npm run build && node scripts/sign-containment-certification.mjs",
+    "test:context-compaction": "npm run build && node --test tests/context-recovery.test.mjs tests/ported-context-manager.test.mjs",
+    "test:provider-conformance": "npm run build && node --test tests/direct-provider.test.mjs tests/provider-injection.test.mjs tests/provider-conformance.test.mjs tests/tool-schema-projection.test.mjs && node scripts/write-provider-conformance-report.mjs",
+    "test:provider-live": "npm run build && node --test tests/provider-live.test.mjs",
+    "test:app-server-v2": "npm run build && node --test tests/app-server.test.mjs tests/app-server-v2.test.mjs tests/app-server-v2-client.test.mjs && node scripts/write-app-server-v2-conformance-report.mjs",
+    "test:observability": "npm run build && node --test tests/telemetry.test.mjs && node scripts/benchmark-observability.mjs --write && npm run compliance:observability",
+    "test:runtime-coordination": "npm run build && node --test tests/shutdown-coordination.test.mjs tests/version-contract.test.mjs",
+    "test:tool-schema-conformance": "npm run build && node --test tests/json-schema-2020-12.test.mjs tests/tool-input-validation.test.mjs tests/tool-schema-projection.test.mjs",
+    "test:tool-failure-guard": "npm run build && node --test tests/tool-integrity.test.mjs",
+    "test:package-candidate": "npm run test:release",
+    "test:release-evidence": "node --test tests/release-certification.test.mjs tests/release-gate-observability.test.mjs",
+    "compliance:runtime-platform": "node scripts/collect-runtime-platform-evidence.mjs",
+    "test:ga:engineering": "npm run typecheck && npm run compliance && npm run test:runtime-coordination && npm run test:tool-schema-conformance && npm run test:tool-failure-guard && npm run test:containment && npm run test:context-compaction && npm run test:provider-conformance && npm run test:app-server-v2 && npm run test:observability && npm run test:package-candidate && npm run test:release-evidence",
+    "test:ga": "npm run test:ga:engineering && node scripts/verify-release-version.mjs --manifest package.json --require-unused --require-greater-than-latest && node scripts/verify-sdk-ga-evidence.mjs",
+    "bench:coding-tools": "npm run build && node scripts/run-benchmark.mjs",
+    "prepublishOnly": "npm run build && npm run typecheck"
+  },
+  "devDependencies": {
+    "@eslint/js": "^9.39.4",
+    "@types/node": "^22.12.0",
+    "@typescript/native": "npm:typescript@^7.0.2",
+    "eslint": "^9.39.4",
+    "tsup": "^8.5.1",
+    "typescript": "npm:@typescript/typescript6@^6.0.2",
+    "typescript-eslint": "^8.61.0"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "overrides": {
+    "esbuild": "0.28.1"
+  }
+}