agent-contracts 0.12.3 → 0.12.4

package/README.md

@@ -999,10 +999,10 @@ Each `context` type provides a different rendering scope:
 | Context | Scope | Output | Key variables |
 |---------|-------|--------|---------------|
 | `system` | Single file | `output` as-is | `system`, `dsl`, `guardrailEnforcement`\*, `bindings`\* |
-| `agent` | Per agent | `{agent.id}` in output path | `agent`, `receivableTasks`, `delegatableTasks`, `relatedArtifacts`, `relatedTools`, `relatedHandoffTypes`, `mergedBehavior`, `dsl` |
-| `task` | Per task | `{task.id}` in output path | `task`, `targetAgent`, `dsl` |
-| `artifact` | Per artifact | `{artifact.id}` in output path | `artifact`, `relatedTools`, `relatedValidations`, `producerAgents`, `consumerAgents`, `editorAgents`, `createdInWorkflows`, `dsl` |
-| `tool` | Per tool | `{tool.id}` in output path | `tool`, `invokableAgents`, `inputArtifactDetails`, `outputArtifactDetails`, `dsl` |
+| `agent` | Per agent | `{agent.id}` in output path | `agent`, `receivableTasks`, `delegatableTasks`, `relatedArtifacts`, `relatedTools`, `relatedHandoffTypes`, `mergedBehavior`, `relatedGuardrails`, `relatedValidations`, `dsl` |
+| `task` | Per task | `{task.id}` in output path | `task`, `targetAgent`, `relatedGuardrails`, `relatedValidations`, `dsl` |
+| `artifact` | Per artifact | `{artifact.id}` in output path | `artifact`, `relatedTools`, `relatedValidations`, `relatedGuardrails`, `producerAgents`, `consumerAgents`, `editorAgents`, `createdInWorkflows`, `dsl` |
+| `tool` | Per tool | `{tool.id}` in output path | `tool`, `invokableAgents`, `inputArtifactDetails`, `outputArtifactDetails`, `relatedGuardrails`, `relatedValidations`, `dsl` |
 | `validation` | Per validation | `{validation.id}` in output path | `validation`, `dsl` |
 | `handoff_type` | Per handoff type | `{handoff_type.id}` in output path | `handoff_type`, `relatedTasks`, `dsl` |
 | `workflow` | Per workflow phase | `{workflow.id}` in output path | `workflow`, `relatedAgents`, `relatedTasks`, `relatedTools`, `relatedArtifacts`, `relatedValidations`, `dsl` |
@@ -1027,6 +1027,23 @@ Each `context` type provides a different rendering scope:
 * `producerAgents` / `consumerAgents` / `editorAgents` — resolved agent records
 * `createdInWorkflows` — workflow phases where this artifact is written
 
+**`agent` context** provides merged behavioral specs and cross-references:
+
+* `relatedGuardrails` — guardrails bound via `agent.guardrails[]` or guardrail `scope.agents[]`, merged and deduplicated
+* `relatedValidations` — validations from `agent.can_perform_validations`, resolved into full entries (kind, target_artifact, executor_type, blocking)
+
+**`task` context** provides execution details:
+
+* `relatedGuardrails` — guardrails bound via `task.guardrails[]` or guardrail `scope.tasks[]`
+* `relatedValidations` — validations from `task.validations[]`, resolved into full entries
+
+**`tool` context** provides invocation and artifact details:
+
+* `relatedGuardrails` — guardrails bound via `tool.guardrails[]` or guardrail `scope.tools[]`
+* `relatedValidations` — validations where `executor_type` is `"tool"` and `executor` matches this tool ID
+* `invokableAgents` — agents listed in `invokable_by`
+* `inputArtifactDetails` / `outputArtifactDetails` — resolved artifact records
+
 **`system` context** includes binding-aware guardrail enforcement data when `bindings` and `active_guardrail_policy` are configured:
 
 * `guardrailEnforcement` — array of enforcement entries, each with `guardrail_id`, `description`, `severity`, `action`, scoped entities (`scoped_agents`, `scoped_tasks`, `scoped_workflows`, `scoped_tools`, `scoped_artifacts`), `allow_override`, `override_requires`, `trigger` (from binding matcher type), and `escalation`
@@ -1039,11 +1056,6 @@ These fields are only populated when the config specifies `bindings` and `active
 * `guardrailCoverageMatrix` — generates a Guardrail Coverage Matrix table (guardrail × severity × action × scoped entities × trigger × override × escalation)
 * `taskGuardrailMatrix` — generates a Task × Guardrail cross-reference table showing which action applies to each task
 
-**`tool` context** resolves agent and artifact references:
-
-* `invokableAgents` — agents listed in `invokable_by`
-* `inputArtifactDetails` / `outputArtifactDetails` — resolved artifact records
-
 ### Handlebars helpers
 
 Templates can use these built-in helpers:
@@ -1306,6 +1318,7 @@ Checks:
 * artifact ownership — `produces_artifact`/`reads_artifact` in execution steps vs. artifact producers/editors/consumers
 * tool commands — `commands[].reads`/`commands[].writes` reference valid artifacts and align with `output_artifacts`
 * semantic validation phase coverage — warns when `semantic` or `fidelity` validations only appear in late workflow phases (e.g., audit) but not earlier phases (e.g., specify, plan)
+* validation executor context wiring — warns when a validation's executor (agent or tool) exists in the DSL but the validation is not surfaced in the executor's prompt context
 * YAML safety — warns when YAML 1.1 reserved words (`on`, `yes`, `no`, `true`, `false`, etc.) are used in positions where they may be misinterpreted by non-1.2 parsers
 * naming/style issues through Spectral rules
 

package/dist/cli.js

@@ -53009,6 +53009,40 @@ var guardrailOrphanedRule = {
   }
 };
 
+// src/linter/rules/validation-executor-no-context.ts
+var validationExecutorNoContextRule = {
+  id: "validation-executor-no-context",
+  description: "Validation executor is not wired so the validation appears in the executor's rendered context",
+  run(dsl) {
+    const diagnostics = [];
+    for (const [validationId, val] of Object.entries(dsl.validations)) {
+      if (val.executor_type === "agent") {
+        const agent = dsl.agents[val.executor];
+        if (!agent) continue;
+        const allowed = new Set(agent.can_perform_validations ?? []);
+        if (!allowed.has(validationId)) {
+          diagnostics.push({
+            ruleId: "validation-executor-no-context",
+            severity: "warning",
+            path: `agents.${val.executor}.can_perform_validations`,
+            message: `Validation "${validationId}" is executed by agent "${val.executor}" but is not listed in can_perform_validations, so it will be missing from that agent's prompt context`
+          });
+        }
+      } else if (val.executor_type === "tool") {
+        if (!dsl.tools[val.executor]) {
+          diagnostics.push({
+            ruleId: "validation-executor-no-context",
+            severity: "warning",
+            path: `validations.${validationId}.executor`,
+            message: `Validation "${validationId}" references tool executor "${val.executor}" which is not defined in tools`
+          });
+        }
+      }
+    }
+    return diagnostics;
+  }
+};
+
 // src/linter/linter.ts
 var builtinRules = [
   validationCoverageRule,
@@ -53024,7 +53058,8 @@ var builtinRules = [
   semanticValidationPhaseCoverageRule,
   entityGuardrailUndefinedRule,
   entityNoGuardrailsRule,
-  guardrailOrphanedRule
+  guardrailOrphanedRule,
+  validationExecutorNoContextRule
 ];
 function lint(dsl, rules = builtinRules) {
   const diagnostics = [];
@@ -53813,13 +53848,54 @@ function resolveEffectiveGuardrails(dsl, entityType, entityId) {
   }
   return entries;
 }
+function validationToEntityEntry(validationId, validation) {
+  return {
+    validation_id: validationId,
+    kind: validation.kind,
+    target_artifact: validation.target_artifact,
+    executor_type: validation.executor_type,
+    blocking: validation.blocking,
+    produces_evidence: validation.produces_evidence
+  };
+}
+function resolveEntityValidations(dsl, entityType, entityId) {
+  if (entityType === "agents") {
+    const agent = dsl.agents[entityId];
+    if (!agent) return [];
+    const entries2 = [];
+    for (const vid of agent.can_perform_validations ?? []) {
+      const v2 = dsl.validations[vid];
+      if (v2) entries2.push(validationToEntityEntry(vid, v2));
+    }
+    return entries2;
+  }
+  if (entityType === "tasks") {
+    const task = dsl.tasks[entityId];
+    if (!task) return [];
+    const entries2 = [];
+    for (const vid of task.validations ?? []) {
+      const v2 = dsl.validations[vid];
+      if (v2) entries2.push(validationToEntityEntry(vid, v2));
+    }
+    return entries2;
+  }
+  const entries = [];
+  for (const [vid, v2] of Object.entries(dsl.validations)) {
+    if (v2.executor_type === "tool" && v2.executor === entityId) {
+      entries.push(validationToEntityEntry(vid, v2));
+    }
+  }
+  entries.sort((a3, b3) => a3.validation_id.localeCompare(b3.validation_id));
+  return entries;
+}
 function buildTaskContext(dsl, taskId) {
   const taskDef = dsl.tasks[taskId];
   const task = { ...taskDef, id: taskId };
   const agentDef = dsl.agents[taskDef.target_agent];
   const targetAgent = agentDef ? { ...agentDef, id: taskDef.target_agent } : null;
   const relatedGuardrails = resolveEffectiveGuardrails(dsl, "tasks", taskId);
-  return { task, targetAgent, relatedGuardrails, dsl };
+  const relatedValidations = resolveEntityValidations(dsl, "tasks", taskId);
+  return { task, targetAgent, relatedGuardrails, relatedValidations, dsl };
 }
 function buildArtifactContext(dsl, artifactId) {
   const artifactDef = dsl.artifacts[artifactId];
@@ -53890,12 +53966,14 @@ function buildToolContext(dsl, toolId) {
     return result;
   };
   const relatedGuardrails = resolveEffectiveGuardrails(dsl, "tools", toolId);
+  const relatedValidations = resolveEntityValidations(dsl, "tools", toolId);
   return {
     tool,
     invokableAgents,
     inputArtifactDetails: pickArtifacts(toolDef.input_artifacts),
     outputArtifactDetails: pickArtifacts(toolDef.output_artifacts),
     relatedGuardrails,
+    relatedValidations,
     dsl
   };
 }
@@ -54128,6 +54206,7 @@ function buildPerAgentContext(dsl, agent) {
   const rawReceivableTasks = receivableTasks.map(({ id: _id, ...rest }) => rest);
   const mergedBehavior = mergeBehavioralSpec(agent, rawReceivableTasks);
   const relatedGuardrails = resolveEffectiveGuardrails(dsl, "agents", agentId);
+  const relatedValidations = resolveEntityValidations(dsl, "agents", agentId);
   return {
     agent,
     tasks: receivableTasks,
@@ -54138,6 +54217,7 @@ function buildPerAgentContext(dsl, agent) {
     relatedHandoffTypes,
     mergedBehavior,
     relatedGuardrails,
+    relatedValidations,
     dsl
   };
 }