@zihanw/pi-forge 0.3.2 → 0.4.0

package/dist/subagent/types.d.ts

@@ -0,0 +1,268 @@
+import type { ThinkingLevel } from "@earendil-works/pi-agent-core";
+import type { AgentProfile, AgentProfileModelReference } from "../agent-profile.ts";
+import type { PromptStack } from "../types.ts";
+import type { AccessCapabilities, AccessLevel, AccessReceipt, AccessRequest, BackendCapabilities, BackendDescriptor, BackendTool, Diagnostic, DiagnosticLevel, EnforcedLimit, Fingerprint, LimitEnforcement, LimitName, LimitReceipt, LimitRequest, LimitRequirement, LimitRequirementLevel, MediaReference, MountMapping, NetworkPolicy, WorkspaceMode, WorkspaceRequest, WorkingDirectoryRequest, PreparedContentPart, PreparedMessage, PreparedMessageRole, PromptRuntime, PromptRuntimeOptions, PromptRuntimeSkill, RunError, RunUsage, ToolEffect, ExecutionBoundary } from "@zihanw/pi-subagent-runtime";
+export declare const SUBAGENT_CONTRACT_VERSION: 1;
+export type SubagentFingerprint = Fingerprint;
+export { FINGERPRINT_PREFIX as SUBAGENT_FINGERPRINT_PREFIX } from "@zihanw/pi-subagent-runtime";
+export type SubagentDiagnosticLevel = DiagnosticLevel;
+export type SubagentDiagnostic = Diagnostic;
+export type SubagentMediaReference = MediaReference;
+export type SubagentAccessLevel = AccessLevel;
+export type SubagentWorkspaceMode = WorkspaceMode;
+export type SubagentNetworkPolicy = NetworkPolicy;
+export type SubagentExecutionBoundary = ExecutionBoundary;
+export type SubagentWorkspaceRequest = WorkspaceRequest;
+export type SubagentWorkingDirectoryRequest = WorkingDirectoryRequest;
+export type SubagentAccessRequest = AccessRequest;
+export type SubagentLimitName = LimitName;
+export type SubagentLimitEnforcementPreference = LimitRequirementLevel;
+export type SubagentLimitRequirement = LimitRequirement;
+export type SubagentLimitRequest = LimitRequest;
+export type SubagentToolEffect = ToolEffect;
+export type SubagentBackendTool = BackendTool;
+export type SubagentAccessCapabilities = AccessCapabilities;
+export type SubagentLimitEnforcement = LimitEnforcement;
+export type SubagentMountMapping = MountMapping;
+export type SubagentEnforcedLimit = EnforcedLimit;
+export type SubagentLimitReceipt = LimitReceipt;
+export type SubagentPreparedMessageRole = PreparedMessageRole;
+export type SubagentPreparedContentPart = PreparedContentPart;
+export type SubagentPromptRuntimeSkill = PromptRuntimeSkill;
+export type SubagentPromptRuntimeOptions = PromptRuntimeOptions;
+export type SubagentUsage = RunUsage;
+export type SubagentError = RunError;
+export type SubagentAccessReceipt = AccessReceipt;
+export type SubagentPreparationRuntime = PromptRuntime;
+export type SubagentBackendCapabilities = BackendCapabilities & {
+    traceInspection: boolean;
+    artifactRetention: boolean;
+};
+export type SubagentBackendDescriptor = Omit<BackendDescriptor, "capabilities"> & {
+    capabilities: SubagentBackendCapabilities;
+};
+export type SubagentPreparedMessage = PreparedMessage & {
+    protectedTask?: boolean;
+    source?: "selected-context" | "prompt-stack" | "delegated-task";
+};
+export interface SubagentTaskInput {
+    text: string;
+    media?: SubagentMediaReference[];
+}
+export type SubagentContextItemKind = "summary" | "user-excerpt" | "assistant-excerpt" | "tool-result-excerpt" | "resource-excerpt";
+export interface SubagentContextProvenance {
+    source: string;
+    reference?: string;
+}
+export interface SubagentContextItem {
+    id: string;
+    kind: SubagentContextItemKind;
+    text: string;
+    required?: boolean;
+    provenance: SubagentContextProvenance;
+}
+export interface SubagentSelectedContext {
+    maxBytes: number;
+    items: SubagentContextItem[];
+}
+export interface AgentRequest {
+    schemaVersion: typeof SUBAGENT_CONTRACT_VERSION;
+    requestId: string;
+    profileId: string;
+    expectedProfileFingerprint?: SubagentFingerprint;
+    input: SubagentTaskInput;
+    selectedContext?: SubagentSelectedContext;
+    access: SubagentAccessRequest;
+    limits: SubagentLimitRequest;
+    resultProjection: {
+        maxChars: number;
+    };
+    parent: {
+        runId?: string;
+        sessionId?: string;
+        depth: number;
+        maxDepth: number;
+    };
+    remoteEgressConsent: boolean;
+}
+export type SubagentDependencyKind = "macro" | "slot";
+export interface SubagentPromptDependency {
+    kind: SubagentDependencyKind;
+    name: string;
+    identity: string;
+    source?: string;
+}
+export interface AgentProfileSnapshot {
+    schemaVersion: typeof SUBAGENT_CONTRACT_VERSION;
+    profile: AgentProfile;
+    promptStack: PromptStack | null;
+    dependencies: SubagentPromptDependency[];
+    profileFingerprint: SubagentFingerprint;
+    promptStackFingerprint: SubagentFingerprint | null;
+}
+export interface SubagentToolNegotiationResult {
+    effectiveToolIds: string[];
+    effectiveToolNames: string[];
+    stackSelectedToolNames: string[];
+    unmatchedAllowPatterns: string[];
+    diagnostics: SubagentDiagnostic[];
+}
+export interface SubagentContextBudgetReceipt {
+    maxBytes: number;
+    includedBytes: number;
+    includedItemIds: string[];
+    omittedItemIds: string[];
+}
+export interface BackendPreflightAccepted {
+    status: "accepted";
+    preflightId: string;
+    backend: SubagentBackendDescriptor;
+    model: AgentProfileModelReference;
+    thinkingLevel: ThinkingLevel;
+    toolCatalog: SubagentBackendTool[];
+    access: SubagentAccessReceipt;
+    limits: SubagentLimitReceipt;
+    promptRuntime?: SubagentPreparationRuntime;
+    diagnostics: SubagentDiagnostic[];
+}
+export interface BackendPreflightRejected {
+    status: "rejected";
+    preflightId: string;
+    backend: SubagentBackendDescriptor;
+    diagnostics: SubagentDiagnostic[];
+}
+export type BackendPreflightResult = BackendPreflightAccepted | BackendPreflightRejected;
+export interface SubagentPreparationBaseInput {
+    request: AgentRequest;
+    snapshot: AgentProfileSnapshot;
+    preflight: BackendPreflightAccepted;
+}
+export interface SubagentPreparationInput extends SubagentPreparationBaseInput {
+    runtime: SubagentPreparationRuntime;
+}
+export interface SubagentPreparationOutput {
+    systemPrompt: string;
+    messages: SubagentPreparedMessage[];
+    toolNegotiation: SubagentToolNegotiationResult;
+    contextBudget?: SubagentContextBudgetReceipt;
+    diagnostics: SubagentDiagnostic[];
+}
+export interface SubagentPreparationResult {
+    runtime: SubagentPreparationRuntime;
+    preparation: SubagentPreparationOutput;
+}
+export type SubagentHostPlanPreparer = (input: SubagentPreparationInput) => Promise<SubagentPreparationOutput> | SubagentPreparationOutput;
+export interface AgentExecutionPlan {
+    schemaVersion: typeof SUBAGENT_CONTRACT_VERSION;
+    runId: string;
+    requestId: string;
+    backendId: string;
+    preflightId: string;
+    preflight: BackendPreflightAccepted;
+    profile: AgentProfileSnapshot;
+    model: AgentProfileModelReference;
+    thinkingLevel: ThinkingLevel;
+    systemPrompt: string;
+    messages: SubagentPreparedMessage[];
+    effectiveToolIds: string[];
+    access: SubagentAccessReceipt;
+    limits: SubagentLimitReceipt;
+    contextBudget?: SubagentContextBudgetReceipt;
+    resultProjection: AgentRequest["resultProjection"];
+    promptRuntimeFingerprint: SubagentFingerprint;
+    /** Runtime-issued fingerprint of the sealed system prompt and ordered messages. */
+    conversationFingerprint: SubagentFingerprint;
+    /**
+     * Runtime-issued fingerprint binding the sealed conversation to the
+     * accepted backend, preflight, tools, and limits. The host never computes
+     * this value; it displays and propagates the sealed fingerprint so approval
+     * and execution stay bound to the exact plan the runtime sealed.
+     */
+    executionFingerprint: SubagentFingerprint;
+}
+export type SubagentArtifactLifetime = "run" | "session" | "persistent";
+export type SubagentArtifactAuthorization = "read" | "write";
+export interface SubagentArtifactReference {
+    id: string;
+    workspaceNamespace: string;
+    path: string;
+    authorization: SubagentArtifactAuthorization;
+    lifetime: SubagentArtifactLifetime;
+    cleanup: "backend" | "host" | "user";
+}
+export interface SubagentTraceReference {
+    handle: string;
+    backendId: string;
+    authorizationScope: string;
+    expiresAt?: string;
+}
+export interface AgentResponseCommon {
+    schemaVersion: typeof SUBAGENT_CONTRACT_VERSION;
+    requestId: string;
+    runId: string;
+    backendId: string;
+    profileFingerprint: SubagentFingerprint;
+    executionFingerprint: SubagentFingerprint;
+    model: AgentProfileModelReference;
+    effectiveToolIds: string[];
+    enforcement: {
+        access: SubagentAccessReceipt;
+        limits: SubagentLimitReceipt;
+    };
+    durationMs: number;
+    artifacts: SubagentArtifactReference[];
+    trace?: SubagentTraceReference;
+    usage?: SubagentUsage;
+}
+export interface AgentResponseCompleted extends AgentResponseCommon {
+    status: "completed";
+    output?: {
+        text: string;
+        partial: false;
+    };
+}
+export interface AgentResponseFailed extends AgentResponseCommon {
+    status: "failed";
+    error: SubagentError;
+    output?: {
+        text: string;
+        partial: true;
+    };
+}
+export interface AgentResponseCancelled extends AgentResponseCommon {
+    status: "cancelled";
+    reason: string;
+    output?: {
+        text: string;
+        partial: true;
+    };
+}
+export interface AgentResponseTimedOut extends AgentResponseCommon {
+    status: "timed-out";
+    reason: string;
+    enforcedTimeoutMs: number;
+    output?: {
+        text: string;
+        partial: true;
+    };
+}
+export interface AgentResponseLimitReached extends AgentResponseCommon {
+    status: "limit-reached";
+    reachedLimit: SubagentLimitName;
+    output?: {
+        text: string;
+        partial: true;
+    };
+}
+export type AgentResponse = AgentResponseCompleted | AgentResponseFailed | AgentResponseCancelled | AgentResponseTimedOut | AgentResponseLimitReached;
+export interface SubagentContextBudgetResult {
+    items: SubagentContextItem[];
+    receipt: SubagentContextBudgetReceipt;
+    diagnostics: SubagentDiagnostic[];
+}
+export interface SubagentInitialMessagesResult {
+    messages: SubagentPreparedMessage[];
+    contextBudget?: SubagentContextBudgetReceipt;
+    diagnostics: SubagentDiagnostic[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/subagent/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/subagent/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AACnE,OAAO,KAAK,EAAE,YAAY,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EACX,kBAAkB,EAClB,WAAW,EACX,aAAa,EACb,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,WAAW,EACX,UAAU,EACV,eAAe,EACf,aAAa,EACb,WAAW,EACX,gBAAgB,EAChB,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,aAAa,EACb,aAAa,EACb,gBAAgB,EAChB,uBAAuB,EACvB,mBAAmB,EACnB,eAAe,EACf,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,iBAAiB,EACjB,MAAM,6BAA6B,CAAC;AAErC,eAAO,MAAM,yBAAyB,EAAG,CAAU,CAAC;AAapD,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAC9C,OAAO,EAAE,kBAAkB,IAAI,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAChG,MAAM,MAAM,uBAAuB,GAAG,eAAe,CAAC;AACtD,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAC5C,MAAM,MAAM,sBAAsB,GAAG,cAAc,CAAC;AACpD,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAC9C,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAClD,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAClD,MAAM,MAAM,yBAAyB,GAAG,iBAAiB,CAAC;AAC1D,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AACxD,MAAM,MAAM,+BAA+B,GAAG,uBAAuB,CAAC;AACtE,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAClD,MAAM,MAAM,iBAAiB,GAAG,SAAS,CAAC;AAC1C,MAAM,MAAM,kCAAkC,GAAG,qBAAqB,CAAC;AACvE,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AACxD,MAAM,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAChD,MAAM,MAAM,kBAAkB,GAAG,UAAU,CAAC;AAC5C,MAAM,MAAM,mBAAmB,GAAG,WAAW,CAAC;AAC9C,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;AAC5D,MAAM,MAAM,wBAAwB,GAAG,gBAAgB,CAAC;AACxD,MAAM,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAChD,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAClD,MAAM,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAChD,MAAM,MAAM,2BAA2B,GAAG,mBAAmB,CAAC;AAC9D,MAAM,MAAM,2BAA2B,GAAG,mBAAmB,CAAC;AAC9D,MAAM,MAAM,0BAA0B,GAAG,kBAAkB,CAAC;AAC5D,MAAM,MAAM,4BAA4B,GAAG,oBAAoB,CAAC;AAChE,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;AACrC,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC;AACrC,MAAM,MAAM,qBAAqB,GAAG,aAAa,CAAC;AAClD,MAAM,MAAM,0BAA0B,GAAG,aAAa,CAAC;AAcvD,MAAM,MAAM,2BAA2B,GAAG,mBAAmB,GAAG;IAC/D,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG,IAAI,CAAC,iBAAiB,EAAE,cAAc,CAAC,GAAG;IACjF,YAAY,EAAE,2BAA2B,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAAG,eAAe,GAAG;IACvD,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,kBAAkB,GAAG,cAAc,GAAG,gBAAgB,CAAC;CAChE,CAAC;AAQF,MAAM,WAAW,iBAAiB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,sBAAsB,EAAE,CAAC;CACjC;AAED,MAAM,MAAM,uBAAuB,GAAG,SAAS,GAAG,cAAc,GAAG,mBAAmB,GAAG,qBAAqB,GAAG,kBAAkB,CAAC;AAEpI,MAAM,WAAW,yBAAyB;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,uBAAuB,CAAC;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,yBAAyB,CAAC;CACtC;AAED,MAAM,WAAW,uBAAuB;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,mBAAmB,EAAE,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC5B,aAAa,EAAE,OAAO,yBAAyB,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,0BAA0B,CAAC,EAAE,mBAAmB,CAAC;IACjD,KAAK,EAAE,iBAAiB,CAAC;IACzB,eAAe,CAAC,EAAE,uBAAuB,CAAC;IAC1C,MAAM,EAAE,qBAAqB,CAAC;IAC9B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,gBAAgB,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IACvC,MAAM,EAAE;QACP,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;KACjB,CAAC;IACF,mBAAmB,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,wBAAwB;IACxC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACpC,aAAa,EAAE,OAAO,yBAAyB,CAAC;IAChD,OAAO,EAAE,YAAY,CAAC;IACtB,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,YAAY,EAAE,wBAAwB,EAAE,CAAC;IACzC,kBAAkB,EAAE,mBAAmB,CAAC;IACxC,sBAAsB,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACnD;AAED,MAAM,WAAW,6BAA6B;IAC7C,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,WAAW,EAAE,kBAAkB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,4BAA4B;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACxC,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,yBAAyB,CAAC;IACnC,KAAK,EAAE,0BAA0B,CAAC;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,MAAM,EAAE,qBAAqB,CAAC;IAC9B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,aAAa,CAAC,EAAE,0BAA0B,CAAC;IAC3C,WAAW,EAAE,kBAAkB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACxC,MAAM,EAAE,UAAU,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,yBAAyB,CAAC;IACnC,WAAW,EAAE,kBAAkB,EAAE,CAAC;CAClC;AAED,MAAM,MAAM,sBAAsB,GAAG,wBAAwB,GAAG,wBAAwB,CAAC;AAEzF,MAAM,WAAW,4BAA4B;IAC5C,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,SAAS,EAAE,wBAAwB,CAAC;CACpC;AAED,MAAM,WAAW,wBAAyB,SAAQ,4BAA4B;IAC7E,OAAO,EAAE,0BAA0B,CAAC;CACpC;AAED,MAAM,WAAW,yBAAyB;IACzC,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,eAAe,EAAE,6BAA6B,CAAC;IAC/C,aAAa,CAAC,EAAE,4BAA4B,CAAC;IAC7C,WAAW,EAAE,kBAAkB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,yBAAyB;IACzC,OAAO,EAAE,0BAA0B,CAAC;IACpC,WAAW,EAAE,yBAAyB,CAAC;CACvC;AAED,MAAM,MAAM,wBAAwB,GAAG,CAAC,KAAK,EAAE,wBAAwB,KAAK,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB,CAAC;AAE3I,MAAM,WAAW,kBAAkB;IAClC,aAAa,EAAE,OAAO,yBAAyB,CAAC;IAChD,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,wBAAwB,CAAC;IACpC,OAAO,EAAE,oBAAoB,CAAC;IAC9B,KAAK,EAAE,0BAA0B,CAAC;IAClC,aAAa,EAAE,aAAa,CAAC;IAC7B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,MAAM,EAAE,qBAAqB,CAAC;IAC9B,MAAM,EAAE,oBAAoB,CAAC;IAC7B,aAAa,CAAC,EAAE,4BAA4B,CAAC;IAC7C,gBAAgB,EAAE,YAAY,CAAC,kBAAkB,CAAC,CAAC;IACnD,wBAAwB,EAAE,mBAAmB,CAAC;IAC9C,mFAAmF;IACnF,uBAAuB,EAAE,mBAAmB,CAAC;IAC7C;;;;;OAKG;IACH,oBAAoB,EAAE,mBAAmB,CAAC;CAC1C;AAED,MAAM,MAAM,wBAAwB,GAAG,KAAK,GAAG,SAAS,GAAG,YAAY,CAAC;AAExE,MAAM,MAAM,6BAA6B,GAAG,MAAM,GAAG,OAAO,CAAC;AAE7D,MAAM,WAAW,yBAAyB;IACzC,EAAE,EAAE,MAAM,CAAC;IACX,kBAAkB,EAAE,MAAM,CAAC;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,EAAE,wBAAwB,CAAC;IACnC,OAAO,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,sBAAsB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IACnC,aAAa,EAAE,OAAO,yBAAyB,CAAC;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,mBAAmB,CAAC;IACxC,oBAAoB,EAAE,mBAAmB,CAAC;IAC1C,KAAK,EAAE,0BAA0B,CAAC;IAClC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,WAAW,EAAE;QACZ,MAAM,EAAE,qBAAqB,CAAC;QAC9B,MAAM,EAAE,oBAAoB,CAAC;KAC7B,CAAC;IACF,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,yBAAyB,EAAE,CAAC;IACvC,KAAK,CAAC,EAAE,sBAAsB,CAAC;IAC/B,KAAK,CAAC,EAAE,aAAa,CAAC;CACtB;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IAClE,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,KAAK,CAAA;KAAE,CAAC;CAC1C;AAED,MAAM,WAAW,mBAAoB,SAAQ,mBAAmB;IAC/D,MAAM,EAAE,QAAQ,CAAC;IACjB,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;CACzC;AAED,MAAM,WAAW,sBAAuB,SAAQ,mBAAmB;IAClE,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;CACzC;AAED,MAAM,WAAW,qBAAsB,SAAQ,mBAAmB;IACjE,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;CACzC;AAED,MAAM,WAAW,yBAA0B,SAAQ,mBAAmB;IACrE,MAAM,EAAE,eAAe,CAAC;IACxB,YAAY,EAAE,iBAAiB,CAAC;IAChC,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,IAAI,CAAA;KAAE,CAAC;CACzC;AAED,MAAM,MAAM,aAAa,GACtB,sBAAsB,GACtB,mBAAmB,GACnB,sBAAsB,GACtB,qBAAqB,GACrB,yBAAyB,CAAC;AAE7B,MAAM,WAAW,2BAA2B;IAC3C,KAAK,EAAE,mBAAmB,EAAE,CAAC;IAC7B,OAAO,EAAE,4BAA4B,CAAC;IACtC,WAAW,EAAE,kBAAkB,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,6BAA6B;IAC7C,QAAQ,EAAE,uBAAuB,EAAE,CAAC;IACpC,aAAa,CAAC,EAAE,4BAA4B,CAAC;IAC7C,WAAW,EAAE,kBAAkB,EAAE,CAAC;CAClC"}

package/dist/subagent/types.js

@@ -0,0 +1,3 @@
+export const SUBAGENT_CONTRACT_VERSION = 1;
+export { FINGERPRINT_PREFIX as SUBAGENT_FINGERPRINT_PREFIX } from "@zihanw/pi-subagent-runtime";
+//# sourceMappingURL=types.js.map

package/dist/subagent/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/subagent/types.ts"],"names":[],"mappings":"AAuCA,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAU,CAAC;AAcpD,OAAO,EAAE,kBAAkB,IAAI,2BAA2B,EAAE,MAAM,6BAA6B,CAAC"}

package/dist/subagent/validation.d.ts

@@ -0,0 +1,35 @@
+import { FINGERPRINT_PATTERN, LIMIT_NAMES, OPAQUE_ID_PATTERN, error, hasErrors, isFingerprint, isRecord, isSafeRelativePath, validateAccessEnforcement } from "@zihanw/pi-subagent-runtime";
+import type { SubagentDiagnostic, SubagentPreparationRuntime } from "./types.ts";
+export { FINGERPRINT_PATTERN, LIMIT_NAMES as SUBAGENT_LIMIT_NAMES, OPAQUE_ID_PATTERN, error, hasErrors, hasErrors as hasSubagentErrors, isFingerprint, isRecord, isSafeRelativePath, validateAccessEnforcement, };
+export declare const NAMESPACE_PATTERN: RegExp;
+export declare function validateAccessRequest(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateLimitRequest(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateLimitReceipt(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateBackendDescriptor(value: Record<string, unknown>, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validatePreparationRuntime(value: unknown, path: string, diagnostics: SubagentDiagnostic[], expectedFidelity?: SubagentPreparationRuntime["fidelity"]): void;
+export declare function validateMediaReference(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateSelectedContext(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): SubagentDiagnostic[];
+export declare function validateToolCatalog(value: readonly unknown[], diagnostics: SubagentDiagnostic[]): void;
+/**
+ * Host access-receipt validation. The portable runtime validator intentionally
+ * checks less: the host additionally enforces mount uniqueness, access-level
+ * consistency, and the isolation claims a receipt may make for its execution
+ * boundary, because these cross-checks are the honesty terms of the host
+ * contract (a shared-user boundary must never claim OS isolation).
+ */
+export declare function validateAccessReceipt(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateAccessCapabilities(value: Record<string, unknown>, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validatePreparedMessage(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateContextBudgetReceipt(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateUniqueStringArray(value: readonly unknown[], path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateDiagnosticArray(value: readonly unknown[], path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateUsage(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateModelReference(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateOpaqueId(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateNamespace(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function validateFingerprint(value: unknown, path: string, diagnostics: SubagentDiagnostic[]): void;
+export declare function isIsoDate(value: unknown): boolean;
+export declare function isPositiveInteger(value: unknown): value is number;
+export declare function isNonNegativeInteger(value: unknown): value is number;
+export declare function isNonNegativeFinite(value: unknown): value is number;
+//# sourceMappingURL=validation.d.ts.map

package/dist/subagent/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../src/subagent/validation.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,mBAAmB,EACnB,WAAW,EACX,iBAAiB,EACjB,KAAK,EACL,SAAS,EACT,aAAa,EACb,QAAQ,EACR,kBAAkB,EAClB,yBAAyB,EAOzB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAcjF,OAAO,EACN,mBAAmB,EACnB,WAAW,IAAI,oBAAoB,EACnC,iBAAiB,EACjB,KAAK,EACL,SAAS,EACT,SAAS,IAAI,iBAAiB,EAC9B,aAAa,EACb,QAAQ,EACR,kBAAkB,EAClB,yBAAyB,GACzB,CAAC;AAEF,eAAO,MAAM,iBAAiB,QAAuC,CAAC;AAEtE,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAE3G;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAE1G;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAE1G;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAQ/H;AAED,wBAAgB,0BAA0B,CACzC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,kBAAkB,EAAE,EACjC,gBAAgB,CAAC,EAAE,0BAA0B,CAAC,UAAU,CAAC,GACvD,IAAI,CAEN;AAMD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAU5G;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,kBAAkB,EAAE,CA0B7H;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAatG;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAoD3G;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAMhI;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAsB7G;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAWlH;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAO1H;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAIxH;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAUnG;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAE5G;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAEtG;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAEvG;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAAG,IAAI,CAEzG;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAEjD;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEjE;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEpE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAEnE"}

package/dist/subagent/validation.js

@@ -0,0 +1,314 @@
+import { FINGERPRINT_PATTERN, LIMIT_NAMES, OPAQUE_ID_PATTERN, error, hasErrors, isFingerprint, isRecord, isSafeRelativePath, validateAccessEnforcement, validateAccessRequest as validatePortableAccessRequest, validateBackendDescriptor as validatePortableBackendDescriptor, validateLimitReceipt as validatePortableLimitReceipt, validateLimitRequest as validatePortableLimitRequest, validatePromptRuntime as validatePortablePromptRuntime, } from "@zihanw/pi-subagent-runtime";
+// ---------------------------------------------------------------------------
+// Portable leaves owned by @zihanw/pi-subagent-runtime core.
+//
+// The runtime package is the single source of truth for validators over the
+// portable execution contract. This module re-exports the identical helpers
+// and adapts the runtime's returning-style validators to the collecting-style
+// signatures the 0.4 host contract always used. Only host-specific artifacts
+// (selected context, context budgets, media references, usage, artifacts,
+// traces, and the richer host access-receipt checks) keep local
+// implementations below.
+// ---------------------------------------------------------------------------
+export { FINGERPRINT_PATTERN, LIMIT_NAMES as SUBAGENT_LIMIT_NAMES, OPAQUE_ID_PATTERN, error, hasErrors, hasErrors as hasSubagentErrors, isFingerprint, isRecord, isSafeRelativePath, validateAccessEnforcement, };
+export const NAMESPACE_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
+export function validateAccessRequest(value, path, diagnostics) {
+    diagnostics.push(...validatePortableAccessRequest(value, path));
+}
+export function validateLimitRequest(value, path, diagnostics) {
+    diagnostics.push(...validatePortableLimitRequest(value, path));
+}
+export function validateLimitReceipt(value, path, diagnostics) {
+    diagnostics.push(...validatePortableLimitReceipt(value, path));
+}
+export function validateBackendDescriptor(value, path, diagnostics) {
+    diagnostics.push(...repath(validatePortableBackendDescriptor(value), path));
+    // Host-only capability booleans the portable descriptor does not carry.
+    if (isRecord(value.capabilities)) {
+        for (const field of ["traceInspection", "artifactRetention"]) {
+            if (typeof value.capabilities[field] !== "boolean")
+                diagnostics.push(error("backend.boolean-capability", `${field} must be boolean.`, `${path}.capabilities.${field}`));
+        }
+    }
+}
+export function validatePreparationRuntime(value, path, diagnostics, expectedFidelity) {
+    diagnostics.push(...repath(validatePortablePromptRuntime(value, expectedFidelity), path));
+}
+// ---------------------------------------------------------------------------
+// Host-specific validators with no portable counterpart.
+// ---------------------------------------------------------------------------
+export function validateMediaReference(value, path, diagnostics) {
+    if (!isRecord(value)) {
+        diagnostics.push(error("request.media-item", "Media reference must be an object.", path));
+        return;
+    }
+    validateOpaqueId(value.id, `${path}.id`, diagnostics);
+    if (value.kind !== "image")
+        diagnostics.push(error("request.media-kind", "Only image media is supported in v1.", `${path}.kind`));
+    if (typeof value.mimeType !== "string" || !/^image\/[A-Za-z0-9.+-]+$/.test(value.mimeType))
+        diagnostics.push(error("request.media-mime", "mimeType must be an image MIME type.", `${path}.mimeType`));
+    validateFingerprint(value.digest, `${path}.digest`, diagnostics);
+    validateOpaqueId(value.resourceHandle, `${path}.resourceHandle`, diagnostics);
+}
+export function validateSelectedContext(value, path, diagnostics) {
+    if (!isRecord(value)) {
+        diagnostics.push(error("context.type", "selectedContext must be an object.", path));
+        return diagnostics;
+    }
+    if (!isPositiveInteger(value.maxBytes))
+        diagnostics.push(error("context.max-bytes", "maxBytes must be a positive integer.", `${path}.maxBytes`));
+    if (!Array.isArray(value.items)) {
+        diagnostics.push(error("context.items", "items must be an array.", `${path}.items`));
+        return diagnostics;
+    }
+    const ids = new Set();
+    value.items.forEach((item, index) => {
+        const itemPath = `${path}.items[${index}]`;
+        if (!isRecord(item)) {
+            diagnostics.push(error("context.item", "Context item must be an object.", itemPath));
+            return;
+        }
+        validateOpaqueId(item.id, `${itemPath}.id`, diagnostics);
+        if (typeof item.id === "string" && ids.has(item.id))
+            diagnostics.push(error("context.duplicate-id", `Duplicate context item id: ${item.id}`, `${itemPath}.id`));
+        if (typeof item.id === "string")
+            ids.add(item.id);
+        if (!["summary", "user-excerpt", "assistant-excerpt", "tool-result-excerpt", "resource-excerpt"].includes(String(item.kind)))
+            diagnostics.push(error("context.kind", "Unsupported context item kind.", `${itemPath}.kind`));
+        if (typeof item.text !== "string" || !item.text.trim())
+            diagnostics.push(error("context.text", "Context item text must not be empty.", `${itemPath}.text`));
+        if (item.required !== undefined && typeof item.required !== "boolean")
+            diagnostics.push(error("context.required", "required must be boolean.", `${itemPath}.required`));
+        if (!isRecord(item.provenance) || typeof item.provenance.source !== "string" || !item.provenance.source.trim())
+            diagnostics.push(error("context.provenance", "Context item provenance.source is required.", `${itemPath}.provenance`));
+    });
+    return diagnostics;
+}
+export function validateToolCatalog(value, diagnostics) {
+    const ids = new Set();
+    const names = new Set();
+    value.forEach((tool, index) => {
+        if (!isRecord(tool))
+            return diagnostics.push(error("tools.catalog-entry", "Tool catalog entry must be an object.", `toolCatalog[${index}]`));
+        validateOpaqueId(tool.id, `toolCatalog[${index}].id`, diagnostics);
+        validateOpaqueId(tool.name, `toolCatalog[${index}].name`, diagnostics);
+        if (typeof tool.id === "string" && ids.has(tool.id))
+            diagnostics.push(error("tools.duplicate-id", `Duplicate tool id: ${tool.id}`, `toolCatalog[${index}].id`));
+        if (typeof tool.name === "string" && names.has(tool.name))
+            diagnostics.push(error("tools.duplicate-name", `Duplicate tool name: ${tool.name}`, `toolCatalog[${index}].name`));
+        if (typeof tool.id === "string")
+            ids.add(tool.id);
+        if (typeof tool.name === "string")
+            names.add(tool.name);
+        if (!Array.isArray(tool.effects) || tool.effects.some((effect) => !["filesystem-read", "filesystem-write", "process", "network"].includes(String(effect))))
+            diagnostics.push(error("tools.effects", "Tool effects must be a valid effect array.", `toolCatalog[${index}].effects`));
+    });
+}
+/**
+ * Host access-receipt validation. The portable runtime validator intentionally
+ * checks less: the host additionally enforces mount uniqueness, access-level
+ * consistency, and the isolation claims a receipt may make for its execution
+ * boundary, because these cross-checks are the honesty terms of the host
+ * contract (a shared-user boundary must never claim OS isolation).
+ */
+export function validateAccessReceipt(value, path, diagnostics) {
+    if (!isRecord(value)) {
+        diagnostics.push(error("access-receipt.type", "Access receipt must be an object.", path));
+        return;
+    }
+    if (!["none", "read-only", "workspace-write"].includes(String(value.level)))
+        diagnostics.push(error("access-receipt.level", "Invalid access receipt level.", `${path}.level`));
+    if (!Array.isArray(value.mounts))
+        diagnostics.push(error("access-receipt.mounts", "Access receipt mounts must be an array.", `${path}.mounts`));
+    else {
+        const handles = new Set();
+        const mountIds = new Set();
+        value.mounts.forEach((mount, index) => {
+            if (!isRecord(mount))
+                return diagnostics.push(error("access-receipt.mount", "Mount mapping must be an object.", `${path}.mounts[${index}]`));
+            validateOpaqueId(mount.workspaceHandle, `${path}.mounts[${index}].workspaceHandle`, diagnostics);
+            validateOpaqueId(mount.mountId, `${path}.mounts[${index}].mountId`, diagnostics);
+            if (mount.mode !== "read-only" && mount.mode !== "read-write")
+                diagnostics.push(error("access-receipt.mount-mode", "Mount mode must be read-only or read-write.", `${path}.mounts[${index}].mode`));
+            if (typeof mount.workspaceHandle === "string" && handles.has(mount.workspaceHandle))
+                diagnostics.push(error("access-receipt.duplicate-workspace", `Duplicate workspace mapping: ${mount.workspaceHandle}`, `${path}.mounts[${index}].workspaceHandle`));
+            if (typeof mount.mountId === "string" && mountIds.has(mount.mountId))
+                diagnostics.push(error("access-receipt.duplicate-mount", `Duplicate mount id: ${mount.mountId}`, `${path}.mounts[${index}].mountId`));
+            if (typeof mount.workspaceHandle === "string")
+                handles.add(mount.workspaceHandle);
+            if (typeof mount.mountId === "string")
+                mountIds.add(mount.mountId);
+        });
+        if (value.level === "none" && value.mounts.length > 0)
+            diagnostics.push(error("access-receipt.none-mounts", "Access none cannot produce mount mappings.", `${path}.mounts`));
+        if (value.level === "read-only" && value.mounts.some((mount) => isRecord(mount) && mount.mode === "read-write"))
+            diagnostics.push(error("access-receipt.read-only-write", "Read-only access cannot produce a read-write mount.", `${path}.mounts`));
+        if (value.level === "workspace-write" && !value.mounts.some((mount) => isRecord(mount) && mount.mode === "read-write"))
+            diagnostics.push(error("access-receipt.write-missing", "workspace-write receipt requires a read-write mount.", `${path}.mounts`));
+        if (value.workingDirectory !== undefined) {
+            if (!isRecord(value.workingDirectory))
+                diagnostics.push(error("access-receipt.cwd", "workingDirectory must be an object.", `${path}.workingDirectory`));
+            else {
+                if (!mountIds.has(String(value.workingDirectory.mountId)))
+                    diagnostics.push(error("access-receipt.cwd-mount", "workingDirectory must reference a receipt mount.", `${path}.workingDirectory.mountId`));
+                if (!isSafeRelativePath(value.workingDirectory.path, true))
+                    diagnostics.push(error("access-receipt.cwd-path", "workingDirectory path must be normalized and relative.", `${path}.workingDirectory.path`));
+            }
+        }
+    }
+    if (value.network !== "deny" && value.network !== "allow")
+        diagnostics.push(error("access-receipt.network", "Invalid access receipt network policy.", `${path}.network`));
+    if (typeof value.process !== "boolean")
+        diagnostics.push(error("access-receipt.process", "Access receipt process must be boolean.", `${path}.process`));
+    if (value.process === true && value.level !== "workspace-write")
+        diagnostics.push(error("access-receipt.process-level", "Process access requires workspace-write.", `${path}.process`));
+    if (value.executionBoundary !== undefined && value.executionBoundary !== "isolated" && value.executionBoundary !== "shared-user") {
+        diagnostics.push(error("access-receipt.boundary", "executionBoundary must be isolated or shared-user.", `${path}.executionBoundary`));
+    }
+    const executionBoundary = value.executionBoundary ?? "isolated";
+    if (!isRecord(value.enforcement))
+        diagnostics.push(error("access-receipt.enforcement", "Access enforcement receipt is required.", `${path}.enforcement`));
+    else {
+        validateAccessCapabilities(value.enforcement, `${path}.enforcement`, diagnostics);
+        if (executionBoundary === "shared-user") {
+            for (const field of ["readOnlyMountIsolation", "readWriteMountIsolation", "symlinkSafeContainment", "processIsolation", "agentNetworkIsolation"]) {
+                if (value.enforcement[field] === true)
+                    diagnostics.push(error("access-receipt.shared-user-claim", `A shared-user boundary cannot claim ${field}.`, `${path}.enforcement.${field}`));
+            }
+        }
+        if (executionBoundary === "isolated" && value.level === "read-only" && (!value.enforcement.readOnlyMountIsolation || !value.enforcement.symlinkSafeContainment))
+            diagnostics.push(error("access-receipt.read-isolation", "Isolated read-only access requires mount isolation and symlink-safe containment.", `${path}.enforcement`));
+        if (value.level === "workspace-write" && (!value.enforcement.readWriteMountIsolation || !value.enforcement.symlinkSafeContainment))
+            diagnostics.push(error("access-receipt.write-isolation", "Workspace-write receipt requires write isolation and symlink-safe containment.", `${path}.enforcement`));
+        if (value.process === true && !value.enforcement.processIsolation)
+            diagnostics.push(error("access-receipt.process-isolation", "Process receipt requires process isolation.", `${path}.enforcement.processIsolation`));
+        if (value.network === "deny" && !value.enforcement.agentNetworkIsolation)
+            diagnostics.push(error("access-receipt.network-isolation", "Denied network receipt requires agent network isolation.", `${path}.enforcement.agentNetworkIsolation`));
+    }
+    if (value.level === "none" && value.workingDirectory !== undefined)
+        diagnostics.push(error("access-receipt.none-cwd", "Access none cannot produce a workingDirectory.", `${path}.workingDirectory`));
+}
+export function validateAccessCapabilities(value, path, diagnostics) {
+    for (const field of [
+        "readOnlyMountIsolation", "readWriteMountIsolation", "symlinkSafeContainment", "processIsolation", "agentNetworkIsolation",
+    ]) {
+        if (typeof value[field] !== "boolean")
+            diagnostics.push(error("access-capability.boolean", `${field} must be boolean.`, `${path}.${field}`));
+    }
+}
+export function validatePreparedMessage(value, path, diagnostics) {
+    if (!isRecord(value)) {
+        diagnostics.push(error("plan.message", "Prepared message must be an object.", path));
+        return;
+    }
+    if (!["user", "assistant", "custom"].includes(String(value.role)))
+        diagnostics.push(error("plan.message-role", "Unsupported prepared message role.", `${path}.role`));
+    if (!Array.isArray(value.content) || value.content.length === 0) {
+        diagnostics.push(error("plan.message-content", "Prepared message content must be a non-empty array.", `${path}.content`));
+        return;
+    }
+    value.content.forEach((part, index) => {
+        if (!isRecord(part))
+            return diagnostics.push(error("plan.content-part", "Content part must be an object.", `${path}.content[${index}]`));
+        if (part.type === "text") {
+            if (typeof part.text !== "string")
+                diagnostics.push(error("plan.text-part", "Text content requires text.", `${path}.content[${index}].text`));
+        }
+        else if (part.type === "media") {
+            validateOpaqueId(part.mediaId, `${path}.content[${index}].mediaId`, diagnostics);
+            if (typeof part.mimeType !== "string" || !part.mimeType.includes("/"))
+                diagnostics.push(error("plan.media-mime", "Media content requires mimeType.", `${path}.content[${index}].mimeType`));
+            validateFingerprint(part.digest, `${path}.content[${index}].digest`, diagnostics);
+            if (part.backendResourceId !== undefined)
+                validateOpaqueId(part.backendResourceId, `${path}.content[${index}].backendResourceId`, diagnostics);
+        }
+        else
+            diagnostics.push(error("plan.content-type", "Unsupported prepared content part type.", `${path}.content[${index}].type`));
+    });
+    if (value.protectedTask !== undefined && typeof value.protectedTask !== "boolean")
+        diagnostics.push(error("plan.protected-flag", "protectedTask must be boolean.", `${path}.protectedTask`));
+}
+export function validateContextBudgetReceipt(value, path, diagnostics) {
+    if (!isRecord(value)) {
+        diagnostics.push(error("context-receipt.type", "Context budget receipt must be an object.", path));
+        return;
+    }
+    if (!isPositiveInteger(value.maxBytes))
+        diagnostics.push(error("context-receipt.max", "maxBytes must be a positive integer.", `${path}.maxBytes`));
+    if (!isNonNegativeInteger(value.includedBytes) || (isPositiveInteger(value.maxBytes) && value.includedBytes > value.maxBytes))
+        diagnostics.push(error("context-receipt.bytes", "includedBytes must be non-negative and no greater than maxBytes.", `${path}.includedBytes`));
+    for (const field of ["includedItemIds", "omittedItemIds"]) {
+        if (!Array.isArray(value[field]))
+            diagnostics.push(error("context-receipt.ids", `${field} must be an array.`, `${path}.${field}`));
+        else
+            validateUniqueStringArray(value[field], `${path}.${field}`, diagnostics);
+    }
+}
+export function validateUniqueStringArray(value, path, diagnostics) {
+    const seen = new Set();
+    value.forEach((item, index) => {
+        if (typeof item !== "string")
+            diagnostics.push(error("array.string", "Expected a string.", `${path}[${index}]`));
+        else if (seen.has(item))
+            diagnostics.push(error("array.duplicate", `Duplicate value: ${item}`, `${path}[${index}]`));
+        else
+            seen.add(item);
+    });
+}
+export function validateDiagnosticArray(value, path, diagnostics) {
+    value.forEach((item, index) => {
+        if (!isRecord(item) || !["error", "warning", "info"].includes(String(item.level)) || typeof item.code !== "string" || typeof item.message !== "string")
+            diagnostics.push(error("diagnostic.invalid", "Diagnostic requires level, code, and message.", `${path}[${index}]`));
+    });
+}
+export function validateUsage(value, path, diagnostics) {
+    if (!isRecord(value)) {
+        diagnostics.push(error("usage.type", "usage must be an object.", path));
+        return;
+    }
+    if (value.tokens !== undefined) {
+        if (!isRecord(value.tokens) || !isNonNegativeInteger(value.tokens.input) || !isNonNegativeInteger(value.tokens.output) || !isNonNegativeInteger(value.tokens.total))
+            diagnostics.push(error("usage.tokens", "Token usage values must be non-negative integers.", `${path}.tokens`));
+        else if (value.tokens.total < value.tokens.input + value.tokens.output)
+            diagnostics.push(error("usage.token-total", "Token total cannot be less than input + output.", `${path}.tokens.total`));
+    }
+    if (value.cost !== undefined && (!isRecord(value.cost) || !isNonNegativeFinite(value.cost.amount) || typeof value.cost.currency !== "string" || !/^[A-Z]{3}$/.test(value.cost.currency)))
+        diagnostics.push(error("usage.cost", "Cost requires a non-negative amount and ISO 4217 currency code.", `${path}.cost`));
+}
+export function validateModelReference(value, path, diagnostics) {
+    if (!isRecord(value) || typeof value.provider !== "string" || !value.provider.trim() || typeof value.id !== "string" || !value.id.trim())
+        diagnostics.push(error("model.reference", "Model reference requires provider and id.", path));
+}
+export function validateOpaqueId(value, path, diagnostics) {
+    if (typeof value !== "string" || !OPAQUE_ID_PATTERN.test(value))
+        diagnostics.push(error("id.invalid", "Expected an opaque id using letters, numbers, dot, underscore, colon, or hyphen (max 128).", path));
+}
+export function validateNamespace(value, path, diagnostics) {
+    if (typeof value !== "string" || !NAMESPACE_PATTERN.test(value))
+        diagnostics.push(error("namespace.invalid", "Expected a namespace using letters, numbers, dot, underscore, or hyphen (max 128).", path));
+}
+export function validateFingerprint(value, path, diagnostics) {
+    if (!isFingerprint(value))
+        diagnostics.push(error("fingerprint.invalid", "Expected sha256:v1 followed by 64 lowercase hex characters.", path));
+}
+export function isIsoDate(value) {
+    return typeof value === "string" && !Number.isNaN(Date.parse(value)) && new Date(value).toISOString() === value;
+}
+export function isPositiveInteger(value) {
+    return Number.isSafeInteger(value) && value > 0;
+}
+export function isNonNegativeInteger(value) {
+    return Number.isSafeInteger(value) && value >= 0;
+}
+export function isNonNegativeFinite(value) {
+    return typeof value === "number" && Number.isFinite(value) && value >= 0;
+}
+/** Remap a runtime-core diagnostic rooted at "$" onto the caller's path. */
+function repath(diagnostics, path) {
+    return diagnostics.map((diagnostic) => {
+        if (!diagnostic.path || !diagnostic.path.startsWith("$"))
+            return diagnostic;
+        return { ...diagnostic, path: `${path}${diagnostic.path.slice(1)}` };
+    });
+}
+//# sourceMappingURL=validation.js.map