ai-capability-framework 1.0.0-rc.3 → 1.0.0

package/examples/control-plane/README.md

@@ -1,9 +1,8 @@
 # AICF Control Plane Example
 
-This is a public-safe local reference app for the optional AICF control-plane
-subpath. It shows capability review, governance status, eval/security coverage,
-policy decisions, approvals, controls, replay metadata, and evidence export
-without credentials.
+This is a public-safe local reference app for the optional AICF control-plane subpath.
+It shows capability review, governance status, eval/security coverage, policy decisions,
+approvals, controls, replay metadata, and evidence export without credentials.
 
 The example uses:
 
@@ -12,9 +11,9 @@ The example uses:
 - mutable local state in `.aicf/control-plane-state.json`;
 - a fake local development user.
 
-Production deployments must enforce real authentication, tenant/account
-authorization, approval identity, durable storage, audit retention, and side
-effects outside this example.
+Production deployments must enforce real authentication, tenant/account authorization,
+approval identity, durable storage, audit retention, and side effects outside this
+example.
 
 ## Run
 
@@ -41,5 +40,5 @@ PORT=4300 node examples/control-plane/server.mjs
 - redacted replay index;
 - evidence export with refs, hashes, and summaries only.
 
-The app never displays raw prompts, provider payloads, transcripts, secrets,
-stack traces, tenant IDs, account IDs, or sensitive tool outputs.
+The app never displays raw prompts, provider payloads, transcripts, secrets, stack
+traces, tenant IDs, account IDs, or sensitive tool outputs.

package/examples/control-plane/fixtures/control-plane.seed.json

@@ -28,11 +28,7 @@
         "refHash": "sha256:example-tenant"
       },
       "redaction": {
-        "fieldsRedacted": [
-          "account",
-          "subject",
-          "tenant"
-        ],
+        "fieldsRedacted": ["account", "subject", "tenant"],
         "hashAlgorithm": "sha256",
         "mode": "redacted"
       },
@@ -72,11 +68,7 @@
         "refHash": "sha256:example-tenant"
       },
       "redaction": {
-        "fieldsRedacted": [
-          "account",
-          "subject",
-          "tenant"
-        ],
+        "fieldsRedacted": ["account", "subject", "tenant"],
         "hashAlgorithm": "sha256",
         "mode": "redacted"
       },
@@ -107,9 +99,7 @@
       "capabilityId": "support.refund.prepare_case",
       "preparedActionId": "prepared_refund_example_1",
       "status": "pending",
-      "requiredReasonCodes": [
-        "approval_required"
-      ],
+      "requiredReasonCodes": ["approval_required"],
       "requestedBy": {
         "actorType": "user",
         "refHash": "sha256:example-subject"
@@ -167,13 +157,8 @@
         "model": "mock-responses"
       },
       "capabilitySlice": {
-        "capabilityIds": [
-          "support.ticket.get",
-          "support.refund.prepare_case"
-        ],
-        "excludedCapabilityIds": [
-          "support.refund.commit_case"
-        ],
+        "capabilityIds": ["support.ticket.get", "support.refund.prepare_case"],
+        "excludedCapabilityIds": ["support.refund.commit_case"],
         "hash": "sha256:example-support-slice"
       },
       "capabilityVersions": {
@@ -184,10 +169,7 @@
         "contextHash": "sha256:example-support-context",
         "userInputSummary": "Synthetic user asks to prepare a refund case.",
         "decisionContext": {
-          "permissions": [
-            "ticket.read",
-            "refund.case.create"
-          ],
+          "permissions": ["ticket.read", "refund.case.create"],
           "autonomyTier": "A2",
           "riskCeiling": "medium"
         }
@@ -225,17 +207,11 @@
           "preparedActionId": "prepared_refund_example_1",
           "capabilityId": "support.refund.prepare_case",
           "status": "pending",
-          "requiredReasonCodes": [
-            "approval_required"
-          ]
+          "requiredReasonCodes": ["approval_required"]
         }
       ],
       "redaction": {
-        "fieldsRedacted": [
-          "account",
-          "subject",
-          "tenant"
-        ],
+        "fieldsRedacted": ["account", "subject", "tenant"],
         "hashAlgorithm": "sha256",
         "mode": "redacted"
       }

package/examples/control-plane/public/app.js

@@ -14,9 +14,13 @@ navButtons.forEach((button) => {
   });
 });
 
-document.querySelector("#capabilityFilter").addEventListener("input", () => renderCatalogue());
+document
+  .querySelector("#capabilityFilter")
+  .addEventListener("input", () => renderCatalogue());
 document.querySelector("#exportEvidence").addEventListener("click", exportEvidence);
-document.querySelector("#createGlobalKillSwitch").addEventListener("click", createGlobalKillSwitch);
+document
+  .querySelector("#createGlobalKillSwitch")
+  .addEventListener("click", createGlobalKillSwitch);
 
 await refresh();
 
@@ -44,7 +48,9 @@ function renderCatalogue() {
   const filter = document.querySelector("#capabilityFilter").value.toLowerCase();
   const rows = document.querySelector("#capabilityRows");
   rows.innerHTML = "";
-  for (const capability of snapshot.capabilities.filter((entry) => entry.id.toLowerCase().includes(filter))) {
+  for (const capability of snapshot.capabilities.filter((entry) =>
+    entry.id.toLowerCase().includes(filter)
+  )) {
     const row = document.createElement("tr");
     row.dataset.capabilityId = capability.id;
     row.innerHTML = `
@@ -68,11 +74,16 @@ async function renderCapabilityDetail() {
     detailPanel.textContent = "No capability selected.";
     return;
   }
-  const detail = await api(`/api/aicf/capabilities/${encodeURIComponent(selectedCapabilityId)}`);
+  const detail = await api(
+    `/api/aicf/capabilities/${encodeURIComponent(selectedCapabilityId)}`
+  );
   detailPanel.innerHTML = `
     <h3>${escapeHtml(detail.id)}</h3>
     <p>${escapeHtml(detail.description)}</p>
-    <p><strong>Lifecycle:</strong> ${Object.entries(detail.lifecycle).filter(([, value]) => value === true || typeof value === "string").map(([key, value]) => `${escapeHtml(key)}=${escapeHtml(String(value))}`).join(", ")}</p>
+    <p><strong>Lifecycle:</strong> ${Object.entries(detail.lifecycle)
+      .filter(([, value]) => value === true || typeof value === "string")
+      .map(([key, value]) => `${escapeHtml(key)}=${escapeHtml(String(value))}`)
+      .join(", ")}</p>
     <p><strong>Risk:</strong> declared ${escapeHtml(detail.risk.declaredRiskTier)}, inferred ${escapeHtml(detail.risk.inferredMinimumRiskTier)}</p>
     <p><strong>Input fields:</strong> ${detail.inputProperties.map((name) => `<span class="pill">${escapeHtml(name)}</span>`).join("") || "none"}</p>
     <p><strong>Related evals:</strong> ${detail.relatedEvalIds.map((id) => `<span class="pill">${escapeHtml(id)}</span>`).join("") || "none"}</p>
@@ -92,7 +103,9 @@ function renderStatus() {
     <p>${escapeHtml(snapshot.conformance.status)}</p>
     <p>${snapshot.conformance.summary.passed} passed, ${snapshot.conformance.summary.failed} failed across ${snapshot.conformance.summary.providers} provider target(s).</p>
   `;
-  const highRisk = snapshot.capabilities.filter((capability) => ["high", "critical"].includes(capability.riskTier));
+  const highRisk = snapshot.capabilities.filter((capability) =>
+    ["high", "critical"].includes(capability.riskTier)
+  );
   document.querySelector("#riskStatus").innerHTML = `
     <h3>Risk Posture</h3>
     <p>${highRisk.length} high or critical capability(ies).</p>
@@ -116,27 +129,41 @@ function renderLedger() {
 }
 
 function renderApprovals() {
-  document.querySelector("#actionsList").innerHTML = snapshot.actions.map((action) => `
+  document.querySelector("#actionsList").innerHTML =
+    snapshot.actions
+      .map(
+        (action) => `
     <div class="queue-item">
       <strong>${escapeHtml(action.actionId)}</strong><br>
       ${escapeHtml(action.capabilityId)} · <span class="status-${escapeHtml(action.actionState)}">${escapeHtml(action.actionState)}</span>
     </div>
-  `).join("") || "No actions.";
+  `
+      )
+      .join("") || "No actions.";
 
-  document.querySelector("#approvalsList").innerHTML = snapshot.approvals.map((approval) => `
+  document.querySelector("#approvalsList").innerHTML =
+    snapshot.approvals
+      .map(
+        (approval) => `
     <div class="queue-item">
       <strong>${escapeHtml(approval.approvalRecordId)}</strong><br>
       ${escapeHtml(approval.capabilityId)} · <span class="status-${escapeHtml(approval.status)}">${escapeHtml(approval.status)}</span><br>
       <button data-approve="${escapeHtml(approval.approvalRecordId)}" type="button">Approve</button>
       <button data-reject="${escapeHtml(approval.approvalRecordId)}" type="button">Reject</button>
     </div>
-  `).join("") || "No approvals.";
+  `
+      )
+      .join("") || "No approvals.";
 
   document.querySelectorAll("[data-approve]").forEach((button) => {
-    button.addEventListener("click", () => mutateApproval(button.dataset.approve, "approve"));
+    button.addEventListener("click", () =>
+      mutateApproval(button.dataset.approve, "approve")
+    );
   });
   document.querySelectorAll("[data-reject]").forEach((button) => {
-    button.addEventListener("click", () => mutateApproval(button.dataset.reject, "reject"));
+    button.addEventListener("click", () =>
+      mutateApproval(button.dataset.reject, "reject")
+    );
   });
 }
 
@@ -156,12 +183,17 @@ function renderControls() {
 }
 
 function renderReplay() {
-  document.querySelector("#replayList").innerHTML = (snapshot.replays ?? []).map((trace) => `
+  document.querySelector("#replayList").innerHTML =
+    (snapshot.replays ?? [])
+      .map(
+        (trace) => `
     <div>
       <strong>${escapeHtml(trace.traceId)}</strong><br>
       ${escapeHtml(trace.provider ?? "unknown provider")} · ${escapeHtml(trace.redactionMode)} · ${trace.capabilityIds.map((id) => `<span class="pill">${escapeHtml(id)}</span>`).join("")}
     </div>
-  `).join("") || "No replay metadata.";
+  `
+      )
+      .join("") || "No replay metadata.";
 }
 
 async function mutateApproval(id, action) {
@@ -189,16 +221,23 @@ async function exportEvidence() {
     includeConformance: true,
     includeReplayIndex: true
   });
-  document.querySelector("#evidenceOutput").textContent = JSON.stringify(evidence, null, 2);
+  document.querySelector("#evidenceOutput").textContent = JSON.stringify(
+    evidence,
+    null,
+    2
+  );
   document.querySelector('[data-view="evidence"]').click();
 }
 
 async function api(path, body) {
   const response = await fetch(path, {
     body: body === undefined ? undefined : JSON.stringify(body),
-    headers: body === undefined ? undefined : {
-      "content-type": "application/json"
-    },
+    headers:
+      body === undefined
+        ? undefined
+        : {
+            "content-type": "application/json"
+          },
     method: body === undefined ? "GET" : "POST"
   });
   const json = await response.json();

package/examples/control-plane/public/index.html

@@ -1,10 +1,10 @@
 <!doctype html>
 <html lang="en">
   <head>
-    <meta charset="utf-8">
-    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>AICF Control Plane</title>
-    <link rel="stylesheet" href="/styles.css">
+    <link rel="stylesheet" href="/styles.css" />
   </head>
   <body>
     <header class="topbar">
@@ -17,7 +17,9 @@
 
     <main class="layout">
       <aside class="sidebar" aria-label="Control plane sections">
-        <button class="nav active" data-view="catalogue" type="button">Catalogue</button>
+        <button class="nav active" data-view="catalogue" type="button">
+          Catalogue
+        </button>
         <button class="nav" data-view="status" type="button">Status</button>
         <button class="nav" data-view="ledger" type="button">Ledger</button>
         <button class="nav" data-view="approvals" type="button">Approvals</button>
@@ -32,7 +34,12 @@
         <section id="catalogue" class="view active">
           <div class="section-header">
             <h2>Capability Catalogue</h2>
-            <input id="capabilityFilter" type="search" placeholder="Filter capabilities" aria-label="Filter capabilities">
+            <input
+              id="capabilityFilter"
+              type="search"
+              placeholder="Filter capabilities"
+              aria-label="Filter capabilities"
+            />
           </div>
           <div class="grid two">
             <div>
@@ -99,7 +106,9 @@
         <section id="controls" class="view">
           <div class="section-header">
             <h2>Kill Switches, Budgets, Circuit Breakers</h2>
-            <button id="createGlobalKillSwitch" type="button">Create Global Read-Only</button>
+            <button id="createGlobalKillSwitch" type="button">
+              Create Global Read-Only
+            </button>
           </div>
           <div class="grid three">
             <article class="panel" id="killSwitches"></article>

package/examples/control-plane/server.mjs

@@ -46,12 +46,20 @@ const service = createControlPlaneService({
 
 const server = createServer(async (request, response) => {
   try {
-    const url = new URL(request.url ?? "/", `http://${request.headers.host ?? "localhost"}`);
+    const url = new URL(
+      request.url ?? "/",
+      `http://${request.headers.host ?? "localhost"}`
+    );
     if (url.pathname.startsWith("/api/aicf/")) {
       const routed = await routeControlPlaneRequest({
         request: {
           body: await readJsonBody(request),
-          headers: Object.fromEntries(Object.entries(request.headers).map(([key, value]) => [key, Array.isArray(value) ? value.join(",") : value])),
+          headers: Object.fromEntries(
+            Object.entries(request.headers).map(([key, value]) => [
+              key,
+              Array.isArray(value) ? value.join(",") : value
+            ])
+          ),
           method: request.method ?? "GET",
           path: url.pathname,
           user: {
@@ -68,7 +76,11 @@ const server = createServer(async (request, response) => {
     }
 
     const staticPath = url.pathname === "/" ? "/index.html" : url.pathname;
-    const filePath = path.join(here, "public", path.normalize(staticPath).replace(/^(\.\.[/\\])+/, ""));
+    const filePath = path.join(
+      here,
+      "public",
+      path.normalize(staticPath).replace(/^(\.\.[/\\])+/, "")
+    );
     const content = await readFile(filePath);
     response.writeHead(200, {
       "content-type": contentType(filePath)

package/examples/eval-results/public.results.passing.json

@@ -3,10 +3,7 @@
   "results": [
     {
       "eval_id": "support.refund.prepare_case.approval_required",
-      "selected_capabilities": [
-        "support.ticket.get",
-        "support.refund.prepare_case"
-      ],
+      "selected_capabilities": ["support.ticket.get", "support.refund.prepare_case"],
       "tool_calls": [
         {
           "capability_id": "support.refund.prepare_case",
@@ -27,10 +24,7 @@
     },
     {
       "eval_id": "support.refund.commit_case.requires_approval",
-      "selected_capabilities": [
-        "support.ticket.get",
-        "support.refund.prepare_case"
-      ],
+      "selected_capabilities": ["support.ticket.get", "support.refund.prepare_case"],
       "tool_calls": [],
       "action_state": "refused",
       "committed_capabilities": [],
@@ -44,10 +38,7 @@
     },
     {
       "eval_id": "support.refund.prepare_case.valid",
-      "selected_capabilities": [
-        "support.ticket.get",
-        "support.refund.prepare_case"
-      ],
+      "selected_capabilities": ["support.ticket.get", "support.refund.prepare_case"],
       "tool_calls": [
         {
           "capability_id": "support.refund.prepare_case",
@@ -66,9 +57,7 @@
     },
     {
       "eval_id": "scheduling.availability.get.valid",
-      "selected_capabilities": [
-        "scheduling.availability.get"
-      ],
+      "selected_capabilities": ["scheduling.availability.get"],
       "tool_calls": [
         {
           "capability_id": "scheduling.availability.get",
@@ -86,9 +75,7 @@
     },
     {
       "eval_id": "scheduling.invite.prepare.valid",
-      "selected_capabilities": [
-        "scheduling.invite.prepare"
-      ],
+      "selected_capabilities": ["scheduling.invite.prepare"],
       "tool_calls": [
         {
           "capability_id": "scheduling.invite.prepare",
@@ -110,9 +97,7 @@
     },
     {
       "eval_id": "scheduling.invite.send.requires_approval",
-      "selected_capabilities": [
-        "scheduling.invite.prepare"
-      ],
+      "selected_capabilities": ["scheduling.invite.prepare"],
       "tool_calls": [],
       "action_state": "refused",
       "committed_capabilities": [],

package/examples/providers/ai-sdk-next/README.md

@@ -1,7 +1,7 @@
 # Vercel AI SDK Provider Example
 
-This example shows the public-safe shape for using AICF with Vercel AI SDK
-Core. The host application selects and configures the model provider.
+This example shows the public-safe shape for using AICF with Vercel AI SDK Core. The
+host application selects and configures the model provider.
 
 ```bash
 npm install ai-capability-framework ai
@@ -10,12 +10,15 @@ npm run test:ai-sdk:mock
 ```
 
 ```ts
-import { buildAiSdkTools, runAiSdkGenerateText } from "ai-capability-framework/providers/ai-sdk";
+import {
+  buildAiSdkTools,
+  runAiSdkGenerateText
+} from "ai-capability-framework/providers/ai-sdk";
 ```
 
-AICF builds executor-backed AI SDK tools from a routed capability slice. Tool
-`execute` callbacks delegate to AICF validation, policy, lifecycle, and runtime
-envelope handling. Commit capabilities are not exposed.
+AICF builds executor-backed AI SDK tools from a routed capability slice. Tool `execute`
+callbacks delegate to AICF validation, policy, lifecycle, and runtime envelope handling.
+Commit capabilities are not exposed.
 
 Live tests are opt-in only and depend on host-supplied model setup:
 
@@ -23,5 +26,5 @@ Live tests are opt-in only and depend on host-supplied model setup:
 RUN_LIVE_AI_SDK=1 npm run test:ai-sdk:live
 ```
 
-Do not include provider-specific raw stream chunks, payloads, or transcripts in
-public examples.
+Do not include provider-specific raw stream chunks, payloads, or transcripts in public
+examples.

package/examples/providers/anthropic-claude/README.md

@@ -1,7 +1,6 @@
 # Anthropic Claude Provider Example
 
-This example shows the public-safe shape for using AICF with Claude Messages
-tool use.
+This example shows the public-safe shape for using AICF with Claude Messages tool use.
 
 ```bash
 npm install ai-capability-framework @anthropic-ai/sdk
@@ -13,10 +12,10 @@ npm run test:anthropic:mock
 import { runAnthropicMessages } from "ai-capability-framework/providers/anthropic";
 ```
 
-Host applications provide the Anthropic-compatible client, runtime context,
-handler registry, executor, and model messages. AICF routes only read and
-prepare capabilities, validates tool input against AICF schemas, returns
-model-safe envelopes, and never exposes commit tools to Claude.
+Host applications provide the Anthropic-compatible client, runtime context, handler
+registry, executor, and model messages. AICF routes only read and prepare capabilities,
+validates tool input against AICF schemas, returns model-safe envelopes, and never
+exposes commit tools to Claude.
 
 Live tests are opt-in only:
 

package/examples/providers/gemini/README.md

@@ -1,7 +1,7 @@
 # Google Gemini Provider Example
 
-This example shows the public-safe shape for using AICF with Gemini
-GenerateContent function calling.
+This example shows the public-safe shape for using AICF with Gemini GenerateContent
+function calling.
 
 ```bash
 npm install ai-capability-framework @google/genai
@@ -13,10 +13,10 @@ npm run test:gemini:mock
 import { runGeminiGenerateContent } from "ai-capability-framework/providers/gemini";
 ```
 
-Host applications provide the Gemini-compatible client, runtime context,
-handler registry, executor, and contents. AICF exports only routed read and
-prepare function declarations, validates function arguments against canonical
-AICF schemas, and returns model-safe function response envelopes.
+Host applications provide the Gemini-compatible client, runtime context, handler
+registry, executor, and contents. AICF exports only routed read and prepare function
+declarations, validates function arguments against canonical AICF schemas, and returns
+model-safe function response envelopes.
 
 Live tests are opt-in only:
 

package/examples/providers/langchain-agent/README.md

@@ -1,7 +1,7 @@
 # LangChain Agent Provider Example
 
-This example shows the public-safe shape for exposing AICF capabilities as
-LangChain.js tools.
+This example shows the public-safe shape for exposing AICF capabilities as LangChain.js
+tools.
 
 ```bash
 npm install ai-capability-framework @langchain/core langchain zod
@@ -23,5 +23,4 @@ Live tests are opt-in only:
 RUN_LIVE_LANGCHAIN=1 npm run test:langchain:live
 ```
 
-Do not commit raw LangChain traces, prompts, tool payloads, or provider
-transcripts.
+Do not commit raw LangChain traces, prompts, tool payloads, or provider transcripts.

package/examples/providers/langgraph-tool-node/README.md

@@ -1,7 +1,7 @@
 # LangGraph ToolNode Provider Example
 
-This example shows the public-safe shape for wrapping AICF-backed LangChain
-tools in a host-supplied LangGraph `ToolNode`.
+This example shows the public-safe shape for wrapping AICF-backed LangChain tools in a
+host-supplied LangGraph `ToolNode`.
 
 ```bash
 npm install ai-capability-framework @langchain/core langchain zod
@@ -13,9 +13,9 @@ npm run test:langchain:mock
 import { buildLangGraphToolNode } from "ai-capability-framework/providers/langchain";
 ```
 
-AICF does not import LangGraph by default. The host passes a compatible
-`ToolNode` constructor, and AICF supplies routed read/prepare tools that enforce
-AICF validation, policy, lifecycle, and envelope boundaries.
+AICF does not import LangGraph by default. The host passes a compatible `ToolNode`
+constructor, and AICF supplies routed read/prepare tools that enforce AICF validation,
+policy, lifecycle, and envelope boundaries.
 
-Commit tools are not generated for LangGraph agent loops. Host applications own
-approval collection and lifecycle commit after a stored prepared action.
+Commit tools are not generated for LangGraph agent loops. Host applications own approval
+collection and lifecycle commit after a stored prepared action.

package/examples/providers/mcp/README.md

@@ -1,7 +1,7 @@
 # MCP Provider Example
 
-This example shows the public-safe shape for exposing routed AICF capabilities
-through Model Context Protocol descriptors and server calls.
+This example shows the public-safe shape for exposing routed AICF capabilities through
+Model Context Protocol descriptors and server calls.
 
 ```bash
 npm install ai-capability-framework @modelcontextprotocol/sdk
@@ -15,10 +15,10 @@ import { buildMcpProviderToolDescriptors } from "ai-capability-framework/provide
 import { AicfMcpServer } from "ai-capability-framework/mcp-server";
 ```
 
-The descriptor subpath creates MCP tool metadata from a routed slice. The server
-subpath executes only read and prepare calls through `AicfToolExecutor`. MCP
-client identity is never trusted; the host `runtimeContextFactory` must resolve
-authenticated user, tenant, account, and permission context.
+The descriptor subpath creates MCP tool metadata from a routed slice. The server subpath
+executes only read and prepare calls through `AicfToolExecutor`. MCP client identity is
+never trusted; the host `runtimeContextFactory` must resolve authenticated user, tenant,
+account, and permission context.
 
-Do not add standalone transport servers, raw MCP payload fixtures, or commit
-tools to public examples.
+Do not add standalone transport servers, raw MCP payload fixtures, or commit tools to
+public examples.

package/examples/providers/provider-conformance/README.md

@@ -22,6 +22,6 @@ Export Semantic Kernel OpenAPI compatibility metadata:
 node dist/cli.js providers export-semantic-kernel-openapi examples --context examples/support/openai/context.support_agent.json --server-url https://aicf.example.com
 ```
 
-The conformance harness is descriptor/mock-only. It does not call live models,
-use credentials, execute provider SDK loops, persist raw payloads, or expose
-commit capabilities.
+The conformance harness is descriptor/mock-only. It does not call live models, use
+credentials, execute provider SDK loops, persist raw payloads, or expose commit
+capabilities.

package/examples/providers/semantic-kernel-mcp/README.md

@@ -1,7 +1,7 @@
 # Semantic Kernel MCP Compatibility Example
 
-This example shows the recommended Semantic Kernel path: import a host-owned
-AICF MCP server as a Semantic Kernel MCP plugin.
+This example shows the recommended Semantic Kernel path: import a host-owned AICF MCP
+server as a Semantic Kernel MCP plugin.
 
 ```bash
 npm install ai-capability-framework @modelcontextprotocol/sdk
@@ -15,7 +15,7 @@ import { AicfMcpServer } from "ai-capability-framework/mcp-server";
 import { getSemanticKernelMcpIntegrationGuide } from "ai-capability-framework/providers/semantic-kernel";
 ```
 
-AICF does not provide a native Semantic Kernel runtime. The host owns MCP
-transport, Semantic Kernel setup, auth, tenant/account context, approvals,
-idempotency, audit, and side effects. AICF remains the capability, validation,
-policy, lifecycle, and envelope authority.
+AICF does not provide a native Semantic Kernel runtime. The host owns MCP transport,
+Semantic Kernel setup, auth, tenant/account context, approvals, idempotency, audit, and
+side effects. AICF remains the capability, validation, policy, lifecycle, and envelope
+authority.

package/examples/providers/semantic-kernel-openapi/README.md

@@ -1,7 +1,7 @@
 # Semantic Kernel OpenAPI Compatibility Example
 
-This example shows the fallback Semantic Kernel path: generate OpenAPI 3.1
-metadata for a host-owned AICF executor route.
+This example shows the fallback Semantic Kernel path: generate OpenAPI 3.1 metadata for
+a host-owned AICF executor route.
 
 ```bash
 npm install ai-capability-framework
@@ -14,9 +14,8 @@ import { exportSemanticKernelOpenApiPlugin } from "ai-capability-framework/provi
 ```
 
 The generated OpenAPI document is descriptor-only. The host must implement
-`POST /aicf/capabilities/{providerToolName}/execute`, resolve
-`runtime_context_ref`, enforce auth and approvals, run AICF execution, and
-persist audit events if needed.
+`POST /aicf/capabilities/{providerToolName}/execute`, resolve `runtime_context_ref`,
+enforce auth and approvals, run AICF execution, and persist audit events if needed.
 
-The OpenAPI export must not include secret auth details, tenant internals, raw
-provider payloads, or commit tools.
+The OpenAPI export must not include secret auth details, tenant internals, raw provider
+payloads, or commit tools.