agent-contracts 0.30.4 → 0.31.0

package/dist/index.d.ts

@@ -401,6 +401,7 @@ declare const DslSchema: z.ZodObject<{
             }>>;
         }, z.core.$loose>>>;
         context_loading: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
+        states: z.ZodDefault<z.ZodArray<z.ZodString>>;
     }, z.core.$loose>;
     agents: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodObject<{
         role_name: z.ZodString;
@@ -736,16 +737,29 @@ declare const DslSchema: z.ZodObject<{
             guardrail: z.ZodString;
             severity: z.ZodEnum<{
                 mandatory: "mandatory";
+                info: "info";
                 critical: "critical";
                 warning: "warning";
-                info: "info";
             }>;
-            action: z.ZodEnum<{
-                info: "info";
+            action: z.ZodUnion<readonly [z.ZodEnum<{
                 block: "block";
                 warn: "warn";
                 shadow: "shadow";
-            }>;
+                info: "info";
+            }>, z.ZodObject<{
+                default: z.ZodEnum<{
+                    block: "block";
+                    warn: "warn";
+                    shadow: "shadow";
+                    info: "info";
+                }>;
+                when: z.ZodRecord<z.ZodString, z.ZodEnum<{
+                    block: "block";
+                    warn: "warn";
+                    shadow: "shadow";
+                    info: "info";
+                }>>;
+            }, z.core.$strip>]>;
             allow_override: z.ZodDefault<z.ZodBoolean>;
             override_requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
             escalation: z.ZodOptional<z.ZodObject<{
@@ -830,20 +844,75 @@ declare const GuardrailPolicyRuleEscalationSchema: z.ZodObject<{
     condition: z.ZodOptional<z.ZodString>;
 }, z.core.$loose>;
 type GuardrailPolicyRuleEscalation = z.infer<typeof GuardrailPolicyRuleEscalationSchema>;
+declare const ActionEnum: z.ZodEnum<{
+    block: "block";
+    warn: "warn";
+    shadow: "shadow";
+    info: "info";
+}>;
+type ActionValue = z.infer<typeof ActionEnum>;
+declare const ConditionalActionSchema: z.ZodObject<{
+    default: z.ZodEnum<{
+        block: "block";
+        warn: "warn";
+        shadow: "shadow";
+        info: "info";
+    }>;
+    when: z.ZodRecord<z.ZodString, z.ZodEnum<{
+        block: "block";
+        warn: "warn";
+        shadow: "shadow";
+        info: "info";
+    }>>;
+}, z.core.$strip>;
+type ConditionalAction = z.infer<typeof ConditionalActionSchema>;
+declare const ActionSchema: z.ZodUnion<readonly [z.ZodEnum<{
+    block: "block";
+    warn: "warn";
+    shadow: "shadow";
+    info: "info";
+}>, z.ZodObject<{
+    default: z.ZodEnum<{
+        block: "block";
+        warn: "warn";
+        shadow: "shadow";
+        info: "info";
+    }>;
+    when: z.ZodRecord<z.ZodString, z.ZodEnum<{
+        block: "block";
+        warn: "warn";
+        shadow: "shadow";
+        info: "info";
+    }>>;
+}, z.core.$strip>]>;
+type Action = z.infer<typeof ActionSchema>;
 declare const GuardrailPolicyRuleSchema: z.ZodObject<{
     guardrail: z.ZodString;
     severity: z.ZodEnum<{
         mandatory: "mandatory";
+        info: "info";
         critical: "critical";
         warning: "warning";
-        info: "info";
     }>;
-    action: z.ZodEnum<{
-        info: "info";
+    action: z.ZodUnion<readonly [z.ZodEnum<{
         block: "block";
         warn: "warn";
         shadow: "shadow";
-    }>;
+        info: "info";
+    }>, z.ZodObject<{
+        default: z.ZodEnum<{
+            block: "block";
+            warn: "warn";
+            shadow: "shadow";
+            info: "info";
+        }>;
+        when: z.ZodRecord<z.ZodString, z.ZodEnum<{
+            block: "block";
+            warn: "warn";
+            shadow: "shadow";
+            info: "info";
+        }>>;
+    }, z.core.$strip>]>;
     allow_override: z.ZodDefault<z.ZodBoolean>;
     override_requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
     escalation: z.ZodOptional<z.ZodObject<{
@@ -858,16 +927,29 @@ declare const GuardrailPolicySchema: z.ZodObject<{
         guardrail: z.ZodString;
         severity: z.ZodEnum<{
             mandatory: "mandatory";
+            info: "info";
             critical: "critical";
             warning: "warning";
-            info: "info";
         }>;
-        action: z.ZodEnum<{
-            info: "info";
+        action: z.ZodUnion<readonly [z.ZodEnum<{
             block: "block";
             warn: "warn";
             shadow: "shadow";
-        }>;
+            info: "info";
+        }>, z.ZodObject<{
+            default: z.ZodEnum<{
+                block: "block";
+                warn: "warn";
+                shadow: "shadow";
+                info: "info";
+            }>;
+            when: z.ZodRecord<z.ZodString, z.ZodEnum<{
+                block: "block";
+                warn: "warn";
+                shadow: "shadow";
+                info: "info";
+            }>>;
+        }, z.core.$strip>]>;
         allow_override: z.ZodDefault<z.ZodBoolean>;
         override_requires: z.ZodOptional<z.ZodArray<z.ZodString>>;
         escalation: z.ZodOptional<z.ZodObject<{
@@ -967,6 +1049,7 @@ declare const SystemSchema: z.ZodObject<{
         }>>;
     }, z.core.$loose>>>;
     context_loading: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
+    states: z.ZodDefault<z.ZodArray<z.ZodString>>;
 }, z.core.$loose>;
 type System = z.infer<typeof SystemSchema>;
 
@@ -1536,7 +1619,7 @@ interface GuardrailEnforcementEntry {
     guardrail_id: string;
     description: string;
     severity: string;
-    action: string;
+    action: Action;
     scoped_agents: string[];
     scoped_tasks: string[];
     scoped_workflows: string[];
@@ -1564,7 +1647,7 @@ interface EntityGuardrailEntry {
     tags: string[];
     source: "entity" | "scope" | "both";
     severity?: string;
-    action?: string;
+    action?: Action;
 }
 interface EntityValidationEntry {
     validation_id: string;
@@ -1868,9 +1951,9 @@ declare const DslAuditResultSchema: z.ZodObject<{
             dsl_gap: "dsl_gap";
         }>>;
         severity: z.ZodOptional<z.ZodEnum<{
+            info: "info";
             critical: "critical";
             warning: "warning";
-            info: "info";
         }>>;
     }, z.core.$strip>>>;
     recommendations: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -2029,4 +2112,4 @@ declare function matchFileToArtifacts(filePath: string, artifacts: Record<string
 declare function buildCoverageReport(files: string[], artifacts: Record<string, ArtifactFileInfo>): ArtifactCoverageReport;
 declare function formatCoverageText(report: ArtifactCoverageReport): string;
 
-export { type Agent, type AgentContractsConfig, AgentContractsConfigSchema, AgentSchema, type AppendOperator, AppendOperatorSchema, type Artifact, type ArtifactCoverageReport, type ArtifactCoverageSummary, type ArtifactFileInfo, type ArtifactOperation, type ArtifactRoute, type ArtifactRouteStep, ArtifactSchema, type AuditOptions, type OutputFormat as AuditOutputFormat, type AuditConfig as AuditRunConfig, type AuditRunResult, type AuditType, BaseResolveError, type BindingGenerationContext, type BindingOutput, BindingOutputSchema, type BindingRenderTarget, BindingRenderTargetSchema, CONTEXT_TYPES, type Check, CheckSchema, type Command, CommandSchema, type CompiledArtifactNode, type Components, ComponentsSchema, ConfigLoadError, type ContextLoading, ContextLoadingSchema, type ContextType, ContextTypeSchema, type DelegatableTaskView, type DiagnosticMessage, type DimensionResult, type Dsl, DslLoadError, DslSchema, type EntityGuardrailEntry, type EntityValidationEntry, type EscalationCriterion, EscalationCriterionSchema, type ExecutionStep, ExecutionStepSchema, type Extends, ExtendsSchema, type ExternalParticipant, type GenerateDiagnostic, type GenerateGuardrailsOptions, type GenerateResult, type GlobalContext, type Guardrail, type GuardrailGenerationContext, type GuardrailPolicy, type GuardrailPolicyRule, type GuardrailPolicyRuleEscalation, GuardrailPolicyRuleEscalationSchema, GuardrailPolicyRuleSchema, GuardrailPolicySchema, GuardrailSchema, type GuardrailScope, GuardrailScopeSchema, type HandoffType, HandoffTypeSchema, ITERABLE_CONTEXT_TYPES, type InsertAfterOperator, InsertAfterOperatorSchema, type LintDiagnostic, type LintRule, type LoadResult, type LoadedBinding, type Matcher, MatcherSchema, MergeError, type MergeableRecord, type MergedBehavioralSpec, type OverlappingFile, type PathResolveResult, type PerAgentContext, type PerArtifactContext, type PerArtifactEntry, type PerGuardrailContext, type PerGuardrailPolicyContext, type PerHandoffTypeContext, type PerPolicyContext, type PerTaskContext, type PerToolContext, type PerValidationContext, type PerWorkflowContext, type Policy, PolicySchema, type PolicyWhen, PolicyWhenSchema, type PrependOperator, PrependOperatorSchema, type Prerequisite, PrerequisiteSchema, type ProjectNavigationIndex, type ReferenceDiagnostic, type RemoveOperator, RemoveOperatorSchema, type RenderTarget, RenderTargetSchema, type ReplaceOperator, ReplaceOperatorSchema, type Reporting, ReportingSchema, type ResolveChecksResult, type ResolveResult, type ResolvedCheck, type ResolvedConfig, type ResolvedRenderTarget, type Retry, type Rule, RuleSchema, SCOPE_NODE_TYPES, type SchemaValidationResult, type ScopeNodeType, ScopeNodeTypeSchema, type ScoreResult, type Section, SectionSchema, type Severity, type SoftwareBinding, SoftwareBindingSchema, type System, type SystemContext, SystemSchema, type Task, TaskSchema, type TeamImport, TeamImportSchema, type TeamInterface, type TeamInterfaceAcceptWorkflow, TeamInterfaceAcceptWorkflowSchema, TeamInterfaceSchema, type Tool, ToolSchema, type Validation, ValidationSchema, type VersionLiteral, VersionLiteralSchema, type Workflow, WorkflowSchema, type WorkflowStep, WorkflowStepSchema, type XExtensionDecl, XExtensionDeclSchema, buildArtifactContext, buildAuditContext, buildCoverageReport, buildGlobalContext, buildGuardrailContext, buildGuardrailPolicyContext, buildHandoffTypeContext, buildNavigationIndex, buildPerAgentContext, buildPolicyContext, buildSystemContext, buildTaskContext, buildToolContext, buildValidationContext, buildWorkflowContext, builtinRules, checkDriftFromConfig, checkReferences, computeExitCode, enumerateProjectFiles, expandDefaults, formatAuditResult, formatAuditResults, formatCoverageText, generateGuardrails, lint, loadBindings, loadConfig, loadDsl, matchFileToArtifacts, mergeDsl, renderFromConfig, resolve, resolveAllOf, resolveBase, resolveBindingTargetPath, resolveChecks, resolveDslPath, resolveEffectiveGuardrails, resolveEntityValidations, runAllAudits, runAudit, score, spectralLint, validateHandoffSchemas, validateSchema, yamlReservedKeySafetyRule };
+export { type Action, ActionEnum, ActionSchema, type ActionValue, type Agent, type AgentContractsConfig, AgentContractsConfigSchema, AgentSchema, type AppendOperator, AppendOperatorSchema, type Artifact, type ArtifactCoverageReport, type ArtifactCoverageSummary, type ArtifactFileInfo, type ArtifactOperation, type ArtifactRoute, type ArtifactRouteStep, ArtifactSchema, type AuditOptions, type OutputFormat as AuditOutputFormat, type AuditConfig as AuditRunConfig, type AuditRunResult, type AuditType, BaseResolveError, type BindingGenerationContext, type BindingOutput, BindingOutputSchema, type BindingRenderTarget, BindingRenderTargetSchema, CONTEXT_TYPES, type Check, CheckSchema, type Command, CommandSchema, type CompiledArtifactNode, type Components, ComponentsSchema, type ConditionalAction, ConditionalActionSchema, ConfigLoadError, type ContextLoading, ContextLoadingSchema, type ContextType, ContextTypeSchema, type DelegatableTaskView, type DiagnosticMessage, type DimensionResult, type Dsl, DslLoadError, DslSchema, type EntityGuardrailEntry, type EntityValidationEntry, type EscalationCriterion, EscalationCriterionSchema, type ExecutionStep, ExecutionStepSchema, type Extends, ExtendsSchema, type ExternalParticipant, type GenerateDiagnostic, type GenerateGuardrailsOptions, type GenerateResult, type GlobalContext, type Guardrail, type GuardrailGenerationContext, type GuardrailPolicy, type GuardrailPolicyRule, type GuardrailPolicyRuleEscalation, GuardrailPolicyRuleEscalationSchema, GuardrailPolicyRuleSchema, GuardrailPolicySchema, GuardrailSchema, type GuardrailScope, GuardrailScopeSchema, type HandoffType, HandoffTypeSchema, ITERABLE_CONTEXT_TYPES, type InsertAfterOperator, InsertAfterOperatorSchema, type LintDiagnostic, type LintRule, type LoadResult, type LoadedBinding, type Matcher, MatcherSchema, MergeError, type MergeableRecord, type MergedBehavioralSpec, type OverlappingFile, type PathResolveResult, type PerAgentContext, type PerArtifactContext, type PerArtifactEntry, type PerGuardrailContext, type PerGuardrailPolicyContext, type PerHandoffTypeContext, type PerPolicyContext, type PerTaskContext, type PerToolContext, type PerValidationContext, type PerWorkflowContext, type Policy, PolicySchema, type PolicyWhen, PolicyWhenSchema, type PrependOperator, PrependOperatorSchema, type Prerequisite, PrerequisiteSchema, type ProjectNavigationIndex, type ReferenceDiagnostic, type RemoveOperator, RemoveOperatorSchema, type RenderTarget, RenderTargetSchema, type ReplaceOperator, ReplaceOperatorSchema, type Reporting, ReportingSchema, type ResolveChecksResult, type ResolveResult, type ResolvedCheck, type ResolvedConfig, type ResolvedRenderTarget, type Retry, type Rule, RuleSchema, SCOPE_NODE_TYPES, type SchemaValidationResult, type ScopeNodeType, ScopeNodeTypeSchema, type ScoreResult, type Section, SectionSchema, type Severity, type SoftwareBinding, SoftwareBindingSchema, type System, type SystemContext, SystemSchema, type Task, TaskSchema, type TeamImport, TeamImportSchema, type TeamInterface, type TeamInterfaceAcceptWorkflow, TeamInterfaceAcceptWorkflowSchema, TeamInterfaceSchema, type Tool, ToolSchema, type Validation, ValidationSchema, type VersionLiteral, VersionLiteralSchema, type Workflow, WorkflowSchema, type WorkflowStep, WorkflowStepSchema, type XExtensionDecl, XExtensionDeclSchema, buildArtifactContext, buildAuditContext, buildCoverageReport, buildGlobalContext, buildGuardrailContext, buildGuardrailPolicyContext, buildHandoffTypeContext, buildNavigationIndex, buildPerAgentContext, buildPolicyContext, buildSystemContext, buildTaskContext, buildToolContext, buildValidationContext, buildWorkflowContext, builtinRules, checkDriftFromConfig, checkReferences, computeExitCode, enumerateProjectFiles, expandDefaults, formatAuditResult, formatAuditResults, formatCoverageText, generateGuardrails, lint, loadBindings, loadConfig, loadDsl, matchFileToArtifacts, mergeDsl, renderFromConfig, resolve, resolveAllOf, resolveBase, resolveBindingTargetPath, resolveChecks, resolveDslPath, resolveEffectiveGuardrails, resolveEntityValidations, runAllAudits, runAudit, score, spectralLint, validateHandoffSchemas, validateSchema, yamlReservedKeySafetyRule };

package/dist/index.js

@@ -48228,10 +48228,16 @@ var GuardrailPolicyRuleEscalationSchema = z6.object({
   target: z6.string(),
   condition: z6.string().optional()
 }).passthrough();
+var ActionEnum = z6.enum(["block", "warn", "shadow", "info"]);
+var ConditionalActionSchema = z6.object({
+  default: ActionEnum,
+  when: z6.record(z6.string(), ActionEnum)
+});
+var ActionSchema = z6.union([ActionEnum, ConditionalActionSchema]);
 var GuardrailPolicyRuleSchema = z6.object({
   guardrail: z6.string(),
   severity: z6.enum(["critical", "mandatory", "warning", "info"]),
-  action: z6.enum(["block", "warn", "shadow", "info"]),
+  action: ActionSchema,
   allow_override: z6.boolean().default(false),
   override_requires: z6.array(z6.string()).optional(),
   escalation: GuardrailPolicyRuleEscalationSchema.optional()
@@ -48263,7 +48269,8 @@ var SystemSchema = z8.object({
   name: z8.string(),
   default_workflow_order: z8.array(z8.string()),
   sections: z8.array(SectionSchema).optional(),
-  context_loading: ContextLoadingSchema
+  context_loading: ContextLoadingSchema,
+  states: z8.array(z8.string()).default([])
 }).passthrough();
 
 // src/schema/task.ts
@@ -50996,6 +51003,70 @@ var guardrailPolicyCoverageRule = {
   }
 };
 
+// src/linter/rules/guardrail-policy-action-state.ts
+function isConditionalAction(action) {
+  return typeof action === "object" && action !== null && "default" in action;
+}
+function collectReferencedWhenStates(dsl) {
+  const referenced = /* @__PURE__ */ new Set();
+  for (const policy of Object.values(dsl.guardrail_policies)) {
+    for (const rule of policy.rules) {
+      if (isConditionalAction(rule.action)) {
+        for (const state of Object.keys(rule.action.when)) {
+          referenced.add(state);
+        }
+      }
+    }
+  }
+  return referenced;
+}
+var guardrailPolicyActionStateUndefinedRule = {
+  id: "guardrail-policy-action-state-undefined",
+  description: "Policy rule action.when keys must reference states declared in system.states",
+  run(dsl) {
+    const diagnostics = [];
+    const systemStates = new Set(dsl.system.states ?? []);
+    for (const [policyId, policy] of Object.entries(dsl.guardrail_policies)) {
+      for (let ruleIndex = 0; ruleIndex < policy.rules.length; ruleIndex++) {
+        const rule = policy.rules[ruleIndex];
+        if (!isConditionalAction(rule.action)) continue;
+        for (const state of Object.keys(rule.action.when)) {
+          if (!systemStates.has(state)) {
+            diagnostics.push({
+              ruleId: "guardrail-policy-action-state-undefined",
+              severity: "error",
+              path: `guardrail_policies.${policyId}.rules[${ruleIndex}].action.when.${state}`,
+              message: `Policy rule references state "${state}" in action.when, but it is not declared in system.states`
+            });
+          }
+        }
+      }
+    }
+    return diagnostics;
+  }
+};
+var systemStatesUnusedRule = {
+  id: "system-states-unused",
+  description: "Each state in system.states should be referenced by at least one policy rule action.when",
+  run(dsl) {
+    const diagnostics = [];
+    const states = dsl.system.states ?? [];
+    if (states.length === 0) return diagnostics;
+    const referenced = collectReferencedWhenStates(dsl);
+    for (const state of states) {
+      if (!referenced.has(state)) {
+        diagnostics.push({
+          ruleId: "system-states-unused",
+          severity: "info",
+          path: `system.states`,
+          message: `State "${state}" is declared in system.states but not referenced by any policy rule action.when`
+        });
+      }
+    }
+    return diagnostics;
+  }
+};
+
 // src/linter/rules/yaml-reserved-key-safety.ts
 var YAML_11_RESERVED_KEYS = /* @__PURE__ */ new Set([
   "on",
@@ -51805,6 +51876,8 @@ var builtinRules = [
   artifactOwnershipRule,
   toolCommandsRule,
   guardrailPolicyCoverageRule,
+  guardrailPolicyActionStateUndefinedRule,
+  systemStatesUnusedRule,
   yamlReservedKeySafetyRule,
   artifactRequiredValidationWiringRule,
   taskOutputValidationCompletenessRule,
@@ -56434,6 +56507,8 @@ function groupByDirectory(files) {
   return Object.entries(dirs).sort((a3, b3) => b3[1] - a3[1]);
 }
 export {
+  ActionEnum,
+  ActionSchema,
   AgentContractsConfigSchema,
   AgentSchema,
   AppendOperatorSchema,
@@ -56445,6 +56520,7 @@ export {
   CheckSchema,
   CommandSchema,
   ComponentsSchema,
+  ConditionalActionSchema,
   ConfigLoadError,
   ContextLoadingSchema,
   ContextTypeSchema,