agentskeptic 3.0.0 → 3.2.0

package/schemas/material-truth-v1.schema.json

@@ -0,0 +1,62 @@
+{
+  "$id": "https://agentskeptic.com/schemas/material-truth-v1.schema.json",
+  "title": "MaterialTruthV1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schemaVersion",
+    "workflowId",
+    "runKind",
+    "stateRelation",
+    "reasonCodes",
+    "steps",
+    "checkpointVerdicts"
+  ],
+  "properties": {
+    "schemaVersion": { "type": "integer", "const": 1 },
+    "workflowId": { "type": "string", "minLength": 1, "maxLength": 512 },
+    "runKind": {
+      "type": "string",
+      "enum": ["contract_sql", "contract_sql_langgraph_checkpoint_trust", "quick_preview"]
+    },
+    "stateRelation": {
+      "type": "string",
+      "enum": ["matches_expectations", "does_not_match", "not_established"]
+    },
+    "reasonCodes": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1, "maxLength": 256 }
+    },
+    "steps": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["seq", "toolId", "declaredAction", "expectedOutcome", "observedOutcome"],
+        "properties": {
+          "seq": { "type": "integer", "minimum": 0 },
+          "toolId": { "type": "string", "maxLength": 512 },
+          "declaredAction": { "type": "string", "minLength": 1, "maxLength": 4096 },
+          "expectedOutcome": { "type": "string", "minLength": 1, "maxLength": 4096 },
+          "observedOutcome": { "type": "string", "minLength": 1, "maxLength": 8192 }
+        }
+      }
+    },
+    "checkpointVerdicts": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["checkpointKey", "verdict", "seqs"],
+        "properties": {
+          "checkpointKey": { "type": "string", "minLength": 1, "maxLength": 2048 },
+          "verdict": { "type": "string", "enum": ["verified", "inconsistent", "incomplete"] },
+          "seqs": {
+            "type": "array",
+            "items": { "type": "integer", "minimum": 0 }
+          }
+        }
+      }
+    }
+  }
+}

package/schemas/openapi-commercial-v1.in.yaml

@@ -125,7 +125,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: "#/components/schemas/EnforcementProjectionRequest"
+              $ref: "#/components/schemas/EnforcementEvidenceRequestV2"
       responses:
         "200":
           description: Baseline created or replaced
@@ -156,7 +156,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: "#/components/schemas/EnforcementProjectionRequest"
+              $ref: "#/components/schemas/EnforcementEvidenceRequestV2"
       responses:
         "200":
           description: Comparison result (ok or drift)
@@ -181,7 +181,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: "#/components/schemas/EnforcementProjectionRequest"
+              $ref: "#/components/schemas/EnforcementEvidenceRequestV2"
       responses:
         "200":
           description: Drift accepted
@@ -213,6 +213,47 @@ paths:
             application/json:
               schema:
                 $ref: "#/components/schemas/EnforcementHistoryResponse"
+  /api/v1/governance/export:
+    get:
+      operationId: exportGovernanceAuditBundle
+      summary: Export governance audit bundle for one workflow (session auth)
+      parameters:
+        - name: workflow_id
+          in: query
+          required: true
+          schema:
+            type: string
+        - name: from
+          in: query
+          required: false
+          schema:
+            type: string
+            format: date-time
+        - name: to
+          in: query
+          required: false
+          schema:
+            type: string
+            format: date-time
+      responses:
+        "200":
+          description: Governance audit bundle
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/GovernanceAuditBundleV1"
+        "400":
+          description: Invalid request
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ProblemDetails"
+        "401":
+          description: Not authenticated
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ProblemDetails"
   /api/public/verification-reports:
     post:
       operationId: createPublicVerificationReport
@@ -503,19 +544,24 @@ components:
       scheme: bearer
       bearerFormat: API key
   schemas:
-    EnforcementProjectionRequest:
+    EnforcementEvidenceRequestV2:
       type: object
-      required: [run_id, workflow_id, projection_hash, projection]
+      required: [schema_version, run_id, workflow_id, outcome_certificate_v1, material_truth_sha256, certificate_sha256]
       properties:
+        schema_version:
+          type: integer
+          const: 2
         run_id:
           type: string
         workflow_id:
           type: string
-        projection_hash:
-          type: string
-        projection:
+        outcome_certificate_v1:
           type: object
           additionalProperties: true
+        material_truth_sha256:
+          type: string
+        certificate_sha256:
+          type: string
     EnforcementStateResponse:
       type: object
       required: [schema_version, status, workflow_id]
@@ -551,6 +597,39 @@ components:
           items:
             type: object
             additionalProperties: true
+    GovernanceAuditBundleV1:
+      type: object
+      required: [schemaVersion, generatedAt, userId, workflowId, baseline, events]
+      properties:
+        schemaVersion:
+          type: integer
+          const: 1
+        generatedAt:
+          type: string
+          format: date-time
+        userId:
+          type: string
+        workflowId:
+          type: string
+        window:
+          type: object
+          required: [from, to]
+          properties:
+            from:
+              type: string
+              format: date-time
+            to:
+              type: string
+              format: date-time
+        baseline:
+          type: object
+          nullable: true
+          additionalProperties: true
+        events:
+          type: array
+          items:
+            type: object
+            additionalProperties: true
     ProblemDetails:
       type: object
       required: [type, title, status, detail]

package/schemas/openapi-commercial-v1.yaml

@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 info:
   title: AgentSkeptic commercial license API
-  version: "3.0.0"
+  version: "3.2.0"
   contact:
     url: https://agentskeptic.com
   x-agentskeptic-distribution:
@@ -125,7 +125,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: "#/components/schemas/EnforcementProjectionRequest"
+              $ref: "#/components/schemas/EnforcementEvidenceRequestV2"
       responses:
         "200":
           description: Baseline created or replaced
@@ -156,7 +156,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: "#/components/schemas/EnforcementProjectionRequest"
+              $ref: "#/components/schemas/EnforcementEvidenceRequestV2"
       responses:
         "200":
           description: Comparison result (ok or drift)
@@ -181,7 +181,7 @@ paths:
         content:
           application/json:
             schema:
-              $ref: "#/components/schemas/EnforcementProjectionRequest"
+              $ref: "#/components/schemas/EnforcementEvidenceRequestV2"
       responses:
         "200":
           description: Drift accepted
@@ -213,6 +213,47 @@ paths:
             application/json:
               schema:
                 $ref: "#/components/schemas/EnforcementHistoryResponse"
+  /api/v1/governance/export:
+    get:
+      operationId: exportGovernanceAuditBundle
+      summary: Export governance audit bundle for one workflow (session auth)
+      parameters:
+        - name: workflow_id
+          in: query
+          required: true
+          schema:
+            type: string
+        - name: from
+          in: query
+          required: false
+          schema:
+            type: string
+            format: date-time
+        - name: to
+          in: query
+          required: false
+          schema:
+            type: string
+            format: date-time
+      responses:
+        "200":
+          description: Governance audit bundle
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/GovernanceAuditBundleV1"
+        "400":
+          description: Invalid request
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ProblemDetails"
+        "401":
+          description: Not authenticated
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/ProblemDetails"
   /api/public/verification-reports:
     post:
       operationId: createPublicVerificationReport
@@ -503,19 +544,24 @@ components:
       scheme: bearer
       bearerFormat: API key
   schemas:
-    EnforcementProjectionRequest:
+    EnforcementEvidenceRequestV2:
       type: object
-      required: [run_id, workflow_id, projection_hash, projection]
+      required: [schema_version, run_id, workflow_id, outcome_certificate_v1, material_truth_sha256, certificate_sha256]
       properties:
+        schema_version:
+          type: integer
+          const: 2
         run_id:
           type: string
         workflow_id:
           type: string
-        projection_hash:
-          type: string
-        projection:
+        outcome_certificate_v1:
           type: object
           additionalProperties: true
+        material_truth_sha256:
+          type: string
+        certificate_sha256:
+          type: string
     EnforcementStateResponse:
       type: object
       required: [schema_version, status, workflow_id]
@@ -551,6 +597,39 @@ components:
           items:
             type: object
             additionalProperties: true
+    GovernanceAuditBundleV1:
+      type: object
+      required: [schemaVersion, generatedAt, userId, workflowId, baseline, events]
+      properties:
+        schemaVersion:
+          type: integer
+          const: 1
+        generatedAt:
+          type: string
+          format: date-time
+        userId:
+          type: string
+        workflowId:
+          type: string
+        window:
+          type: object
+          required: [from, to]
+          properties:
+            from:
+              type: string
+              format: date-time
+            to:
+              type: string
+              format: date-time
+        baseline:
+          type: object
+          nullable: true
+          additionalProperties: true
+        events:
+          type: array
+          items:
+            type: object
+            additionalProperties: true
     ProblemDetails:
       type: object
       required: [type, title, status, detail]

package/scripts/validate-marketing.cjs

@@ -70,7 +70,6 @@ function validateMarketingValue(m) {
     "readmeFold",
     "shareableTerminalDemo",
     "cliFollowupLines",
-    "r2",
     "site",
     "integratePage",
     "problemIndex",
@@ -81,6 +80,11 @@ function validateMarketingValue(m) {
       throw new Error(`marketing: missing required key ${k}`);
     }
   }
+  if ("r2" in m) {
+    throw new Error(
+      "marketing: top-level key r2 removed — homepage framework footer is driven by config/buyer-truth.v1.json",
+    );
+  }
   if (!Array.isArray(m.keywords) || m.keywords.length === 0) {
     throw new Error("marketing: keywords must be a non-empty array");
   }
@@ -116,11 +120,10 @@ function validateMarketingValue(m) {
   if (!cmd.includes("tools.json")) {
     throw new Error("marketing: packLedCommand must reference tools.json");
   }
-  if (!Array.isArray(m.integratePage.requirements) || m.integratePage.requirements.length < 1) {
-    throw new Error("marketing: integratePage.requirements must be a non-empty array");
-  }
-  if (m.integratePage.requirements.length < 1 || m.integratePage.requirements.length > 5) {
-    throw new Error("marketing: integratePage.requirements must have 1–5 items");
+  if ("requirements" in m.integratePage) {
+    throw new Error(
+      "marketing: integratePage.requirements removed — use Buyer Truth integrateRequirements (/integrate page)",
+    );
   }
   const v = String(m.visitorProblemAnswer);
   if (v.toLowerCase().includes("causality")) {

package/dist/enforcementProjection.d.ts

@@ -1,17 +0,0 @@
-import type { WorkflowResult } from "./types.js";
-import { stableStringify } from "./jsonStableStringify.js";
-export type EnforcementProjectionV1 = {
-    schemaVersion: 1;
-    workflowId: string;
-    status: WorkflowResult["status"];
-    verificationPolicy: WorkflowResult["verificationPolicy"];
-    runLevelReasonCodes: string[];
-    stepReasonCodes: Array<{
-        seq: number;
-        toolId: string;
-        reasonCodes: string[];
-    }>;
-};
-export declare function workflowResultToEnforcementProjectionV1(result: WorkflowResult): EnforcementProjectionV1;
-export { stableStringify };
-//# sourceMappingURL=enforcementProjection.d.ts.map

package/dist/enforcementProjection.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"enforcementProjection.d.ts","sourceRoot":"","sources":["../src/enforcementProjection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAM3D,MAAM,MAAM,uBAAuB,GAAG;IACpC,aAAa,EAAE,CAAC,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;IACjC,kBAAkB,EAAE,cAAc,CAAC,oBAAoB,CAAC,CAAC;IACzD,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,eAAe,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAChF,CAAC;AAEF,wBAAgB,uCAAuC,CAAC,MAAM,EAAE,cAAc,GAAG,uBAAuB,CAavG;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}

package/dist/enforcementProjection.js

@@ -1,20 +0,0 @@
-import { stableStringify } from "./jsonStableStringify.js";
-function sortedUniqueStrings(arr) {
-    return [...new Set(arr)].sort((a, b) => a.localeCompare(b));
-}
-export function workflowResultToEnforcementProjectionV1(result) {
-    return {
-        schemaVersion: 1,
-        workflowId: result.workflowId,
-        status: result.status,
-        verificationPolicy: result.verificationPolicy,
-        runLevelReasonCodes: sortedUniqueStrings(result.runLevelReasons.map((r) => r.code)),
-        stepReasonCodes: result.steps.map((s) => ({
-            seq: s.seq,
-            toolId: s.toolId,
-            reasonCodes: sortedUniqueStrings(s.reasons.map((r) => r.code)),
-        })),
-    };
-}
-export { stableStringify };
-//# sourceMappingURL=enforcementProjection.js.map

package/dist/enforcementProjection.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"enforcementProjection.js","sourceRoot":"","sources":["../src/enforcementProjection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAE3D,SAAS,mBAAmB,CAAC,GAAa;IACxC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAWD,MAAM,UAAU,uCAAuC,CAAC,MAAsB;IAC5E,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;QAC7C,mBAAmB,EAAE,mBAAmB,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnF,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxC,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC/D,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,CAAC"}