attention-manifest-protocol 0.4.3 → 0.4.5

package/CHANGELOG.md

@@ -7,6 +7,20 @@ project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
+## [0.4.5] - 2026-10-31
+
+### Fixed
+
+- Bound discovery tree construction and subtree lookahead under small output limits, deep or cyclic input, and exhausted traversal budgets; extensionless file filters now work consistently.
+- Enforced filesystem session read/write/create permissions across MCP tools, sanitized classified failures, and kept stdio sessions alive after malformed or escaping requests.
+- Checked excluded paths against case-folded Windows paths and resolved symlink targets; preserved selected-root routing for multi-root outlines and dependency graphs.
+- Applied session and service read/tree/graph budgets consistently and report truncation instead of returning incomplete results as complete.
+
+### Changed
+
+- Standardized TypeScript tool filenames on lowerCamelCase and updated repository documentation and references.
+- Advanced the npm package version to 0.4.5.
+
 ### Added
 
 - `amp_tool_workspace_project`: offline brand detection from manifest/lockfile evidence (npm/pnpm/yarn/bun, Maven, Gradle, CMake, Cargo, Go, Python, Make, Composer, .NET, Bundler, Swift, sbt) plus host-delegated `build`/`compile`/`run`/`test`. The agent never supplies a command string; the brand table produces one and `WorkspaceServiceOptions.runner` decides whether to run it (`run_unavailable`, `unsupported_action`, bounded tail of stdout/stderr).
@@ -19,8 +33,8 @@ project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 - Agent workspace: a `File`/`Directory` tree, paged reads, CAS atomic writes, strategy-based outlines, import/export/dependency graphs and Office parsing (DOCX/XLSX/PPTX, with best-effort DOC/XLS/PPT/PUB/ACCDB).
 - Session module: `ses_` identity, one-time bearer token, TTL, suspend/revoke/rotate, fork, per-session context isolation and quotas; SQLite adapters `SqliteWorkspaceSessionStore` / `SqliteWorkspaceSessionContextStore`.
 - `src/hook`: `useRead`, `useWrite`, `useDiff`, `useParse`, `useDependency`, `useExportation`, `useImportation`, `useOutline`, `useCode`, `useProject`. Every hook is read-only except `useWrite`, and runs are recorded in `hook_runs`.
-- `amp_tool_filesystem_*` (ten tools), the `amp_tool_globalfs_*` global naming adapter, and `amp_service_filesystem` / `amp_protocol_filesystem`.
-- Lossless read-only syntax trees: `amp_tool_filesystem_ast`, `useAst`, `src/syntax/syntaxTree.ts` and `src/syntax/syntaxRegistry.ts`; languages, token kinds and node kinds are registry data, every token keeps UTF-8 byte and line ranges, and the target file is never executed.
+- `amp_tool_file_*` (ten tools), the `amp_tool_globalfs_*` global naming adapter, and `amp_service_filesystem` / `amp_protocol_filesystem`.
+- Lossless read-only syntax trees: `amp_tool_file_ast`, `useAst`, `src/syntax/syntaxTree.ts` and `src/syntax/syntaxRegistry.ts`; languages, token kinds and node kinds are registry data, every token keeps UTF-8 byte and line ranges, and the target file is never executed.
 - SQLite tables: `workspace_sessions`, `session_roots`, `session_context`, `file_nodes`, `file_annotations`, `file_writes`, `file_outlines`, `file_imports`, `file_exports`, `file_dependencies`, `hook_runs`.
 - Data structures: `Trie`, `ByteLineIndex` (segment-tree prefix sums) and `OutlineIndex` (AST + Trie + SegmentTree).
 - Outline strategies cover code (TS/JS/Python/Java/C/C++/C#/Go/Rust), Vue, project manifests (npm/Maven/Gradle/CMake/Cargo/Go/pyproject/Make), prose (Markdown/TeX/plain text), HTML/CSS/SCSS/Sass/XML/OPML and Office; `outlineCoverageCheck` verifies 74 cases.

package/CHANGELOG.zh-CN.md

@@ -7,13 +7,27 @@
 
 ## [未发布]
 
+## [0.4.5] - 2026-10-31
+
+### 修复
+
+- 对小输出限额、深层或循环输入以及遍历预算耗尽场景限制 discovery 树构建和子树探测；无扩展名文件过滤现在保持一致。
+- 在 MCP 工具中落实 filesystem session 的读取、写入和创建权限，统一错误分类并隐藏主机路径；畸形或越界请求后 stdio 会话仍可继续处理。
+- 路径排除检查覆盖 Windows 大小写折叠及符号链接真实目标；多根 workspace 的大纲和依赖查询保持所选根目录。
+- 一致执行 session 与 service 的读取、目录树和依赖图预算；结果截断时明确标记，不再伪报完整。
+
+### 变更
+
+- TypeScript 工具文件名统一为小写开头的 camelCase，并更新仓库内路径引用和文档。
+- npm 包版本升至 0.4.5。
+
 ### 新增
 
 - Agent 工作区：`File`/`Directory` 树、分页读、CAS 原子写、策略化大纲、import/export/dependency 图与 Office（DOCX/XLSX/PPTX，DOC/XLS/PPT/PUB/ACCDB best-effort）解析。
 - Session 模块：`ses_` 身份、一次性 bearer 令牌、TTL、暂停/撤销/rotate、fork、每会话上下文隔离与配额；SQLite 适配器 `SqliteWorkspaceSessionStore` / `SqliteWorkspaceSessionContextStore`。
 - `src/hook` 组合层：`useRead`、`useWrite`、`useDiff`、`useParse`、`useDependency`、`useExportation`、`useImportation`、`useOutline`、`useCode`、`useProject`；除 `useWrite` 外只读，并记录 `hook_runs`。
-- `amp_tool_filesystem_*` 十个工具与 `amp_tool_globalfs_*` 全局命名适配器；`amp_service_filesystem` / `amp_protocol_filesystem`。
-- 无损只读语法树：`amp_tool_filesystem_ast`、`useAst`、`src/syntax/syntaxTree.ts` 与 `src/syntax/syntaxRegistry.ts`；语言/Token/节点类别由注册中心管理，全部 token 保留 UTF-8 字节与行范围，不执行目标文件。`syntaxTreeCheck` 8 例，完整 verify 135/135。
+- `amp_tool_file_*` 十个工具与 `amp_tool_globalfs_*` 全局命名适配器；`amp_service_filesystem` / `amp_protocol_filesystem`。
+- 无损只读语法树：`amp_tool_file_ast`、`useAst`、`src/syntax/syntaxTree.ts` 与 `src/syntax/syntaxRegistry.ts`；语言/Token/节点类别由注册中心管理，全部 token 保留 UTF-8 字节与行范围，不执行目标文件。`syntaxTreeCheck` 8 例，完整 verify 135/135。
 - SQLite 表：`workspace_sessions`、`session_roots`、`session_context`、`file_nodes`、`file_annotations`、`file_writes`、`file_outlines`、`file_imports`、`file_exports`、`file_dependencies`、`hook_runs`。
 - 数据结构：`Trie`、`ByteLineIndex`（SegmentTree 前缀和）、`OutlineIndex`（AST + Trie + SegmentTree）。
 - 大纲策略覆盖代码（TS/JS/Python/Java/C/C++/C#/Go/Rust）、Vue、项目清单（npm/Maven/Gradle/CMake/Cargo/Go/pyproject/Make）、文章（Markdown/TeX/plain text）、HTML/CSS/SCSS/Sass/XML/OPML 与 Office；`outlineCoverageCheck` 74 例逐项验证。

package/README.md

@@ -2,7 +2,7 @@
 
 **English** · [简体中文](README.zh-CN.md) · [Changelog](CHANGELOG.md)
 
-AMP is a metacognitive protocol for agents: declare knowledge and obligations, allocate finite attention, obtain evidence, and record costs and outcomes. The reference implementation is version `0.4.2`, requires **Node.js 24 or later**, and uses Apache-2.0.
+AMP is a metacognitive protocol for agents: declare knowledge and obligations, allocate finite attention, obtain evidence, and record costs and outcomes. The reference implementation is version `0.4.5`, requires **Node.js 24 or later**, and uses Apache-2.0.
 
 ## Architecture
 
@@ -85,7 +85,7 @@ import { ToolIds, parseId } from "attention-manifest-protocol/naming";
 
 `npm run build:lib` rebuilds `lib/` and `prepublishOnly` runs it before publishing. The build compiles only the library; the Vite demo entry (`src/main.ts`) is not part of it.
 
-Focused checks: `npm run workspace-agent-check`, `workspace-project-check`, `workspace-diff-check`, `workspace-reactive-diff-check` and the `workspace-*-boundary-check` suites, `workspace-context-check`, `document-context-check`, `tex-context-check`, `governance-check`, `assignment-check`, `interaction-binding-check`, `discover-check`, `discover-agent-check`, `typecheck` and `typecheck:tools`. `verify` runs the full chain and both type checks. Evaluation inputs/reports remain in [docs/eval](docs/eval/) and [docs/probes](docs/probes/) as JSON; fixture and recorded-probe results are not independent human studies or production-quality evidence.
+Focused checks can be run directly with the corresponding camelCase tools, such as `node tools/workspaceAgentCheck.ts`, `node tools/workspaceProjectCheck.ts`, `node tools/workspaceDiffCheck.ts`, `node tools/workspaceReactiveDiffCheck.ts`, `node tools/discoverCheck.ts` and `node tools/discoverAgentCheck.ts`. `verify` runs the full chain and both type checks. Evaluation inputs/reports remain in [docs/eval](docs/eval/) and [docs/probes](docs/probes/) as JSON; fixture and recorded-probe results are not independent human studies or production-quality evidence.
 
 ## Agent tools
 
@@ -116,20 +116,20 @@ The `amp_protocol_workspace` v1 response contains `protocol`, `version`, `revisi
 
 ### Filesystem tools
 
-`amp_tool_filesystem_*` is bound to one authenticated Session; the bearer token never appears in a tool argument. Every tool except `write` is read-only.
+`amp_tool_file_*` is bound to one authenticated Session; the bearer token never appears in a tool argument. Every tool except `write` is read-only.
 
 | Tool | Purpose |
 | --- | --- |
-| `amp_tool_filesystem_session` | Current identity, roots, permissions, remaining TTL and quotas |
-| `amp_tool_filesystem_file` | One File/Directory node; `depth`/`offset`/`limit` bound the subtree |
-| `amp_tool_filesystem_directory` | Flat listing of direct children |
-| `amp_tool_filesystem_read` | 1-based line page with fingerprint, charset and the next line |
-| `amp_tool_filesystem_write` | Atomic write; create/overwrite/upsert/append, CAS, dry-run |
-| `amp_tool_filesystem_outline` | Structural outline with `query`/`startLine`/`endLine` filters |
-| `amp_tool_filesystem_import` | Outgoing, incoming or two-way imports |
-| `amp_tool_filesystem_export` | Exported symbols, signatures and re-export edges |
-| `amp_tool_filesystem_dependency` | Cycles, topological order and bounded closures |
-| `amp_tool_filesystem_ast` | Lossless syntax tree: every non-whitespace token, declaration/markup hierarchy, UTF-8/line ranges; read-only, never executes |
+| `amp_tool_file_session` | Current identity, roots, permissions, remaining TTL and quotas |
+| `amp_tool_file_file` | One File/Directory node; `depth`/`offset`/`limit` bound the subtree |
+| `amp_tool_file_directory` | Flat listing of direct children |
+| `amp_tool_file_read` | 1-based line page with fingerprint, charset and the next line |
+| `amp_tool_file_write` | Atomic write; create/overwrite/upsert/append, CAS, dry-run |
+| `amp_tool_file_outline` | Structural outline with `query`/`startLine`/`endLine` filters |
+| `amp_tool_file_import` | Outgoing, incoming or two-way imports |
+| `amp_tool_file_export` | Exported symbols, signatures and re-export edges |
+| `amp_tool_file_dependency` | Cycles, topological order and bounded closures |
+| `amp_tool_file_ast` | Lossless syntax tree: every non-whitespace token, declaration/markup hierarchy, UTF-8/line ranges; read-only, never executes |
 
 The global variant is `amp_tool_globalfs_*`, a naming adapter in [src/global/filesystem.ts](src/global/filesystem.ts) that grants no new root or permission. Outline nodes carry `isFile`/`isDirectory`/`file?`/`directory?`/`path` (for example `add.py#add`) and `range` (UTF-8 bytes plus 1-based lines as bigint; decimal strings on the wire). Strategies cover code, Vue, project manifests, Markdown/TeX/plain text, CSS/SCSS/Sass, HTML, XML/OPML and Office; Office parsing covers DOCX/XLSX/PPTX and treats DOC/XLS/PPT/PUB/ACCDB as best-effort CFB.
 
@@ -153,8 +153,8 @@ await diff.run({ path: "src/new.ts", before: "" });
 ### MCP stdio
 
 ```sh
-npm run workspace-agent-demo
-npm run workspace-agent -- --config .cache/workspace-agent.local
+node tools/workspaceAgentDemo.ts
+node tools/workspaceAgentServer.ts --config .cache/workspace-agent.local
 ```
 
 For an MCP client, start Node directly to keep package-manager banners out of stdout. Replace absolute paths with your checkout location:

package/README.zh-CN.md

@@ -2,7 +2,7 @@
 
 [English](README.md) · **简体中文** · [更新日志](CHANGELOG.zh-CN.md)
 
-AMP 是供 agent 使用的元认知协议：声明知识和义务，分配有限注意力，获取证据，记录成本与结果。当前参考实现为 `0.4.2`，要求 **Node.js 24 或以上**，使用 Apache-2.0 许可证。
+AMP 是供 agent 使用的元认知协议：声明知识和义务，分配有限注意力，获取证据，记录成本与结果。当前参考实现为 `0.4.5`，要求 **Node.js 24 或以上**，使用 Apache-2.0 许可证。
 
 ## 架构
 
@@ -85,7 +85,7 @@ import { ToolIds, parseId } from "attention-manifest-protocol/naming";
 
 `npm run build:lib` 重新构建 `lib/`，发布前由 `prepublishOnly` 自动执行。该构建只编译库代码，Vite 演示入口（`src/main.ts`）不在其中。
 
-专项检查为 `npm run workspace-agent-check`、`workspace-project-check`、`workspace-diff-check`、`workspace-reactive-diff-check` 与 `workspace-*-boundary-check` 系列、`workspace-context-check`、`document-context-check`、`tex-context-check`、`governance-check`、`assignment-check`、`interaction-binding-check`、`discover-check`、`discover-agent-check`、`typecheck` 与 `typecheck:tools`。`verify` 执行完整验证链和两份类型检查。评测输入/结果以 JSON 保存在 [docs/eval](docs/eval/) 与 [docs/probes](docs/probes/)，夹具与录制探针不等同于独立的人类研究或生产质量证明。
+专项检查可直接运行对应的 camelCase 工具，例如 `node tools/workspaceAgentCheck.ts`、`node tools/workspaceProjectCheck.ts`、`node tools/workspaceDiffCheck.ts`、`node tools/workspaceReactiveDiffCheck.ts`、`node tools/discoverCheck.ts` 与 `node tools/discoverAgentCheck.ts`。`verify` 执行完整验证链和两份类型检查。评测输入/结果以 JSON 保存在 [docs/eval](docs/eval/) 与 [docs/probes](docs/probes/)，夹具与录制探针不等同于独立的人类研究或生产质量证明。
 
 ## Agent 工具
 
@@ -116,20 +116,20 @@ import { ToolIds, parseId } from "attention-manifest-protocol/naming";
 
 ### 文件系统工具
 
-`amp_tool_filesystem_*` 绑定一个已认证 Session；令牌不出现在工具参数里。除 `write` 外全部只读。
+`amp_tool_file_*` 绑定一个已认证 Session；令牌不出现在工具参数里。除 `write` 外全部只读。
 
 | 工具 | 用途 |
 | --- | --- |
-| `amp_tool_filesystem_session` | 当前身份、根、权限、剩余 TTL 与配额 |
-| `amp_tool_filesystem_file` | 返回一个 File/Directory 节点；`depth`/`offset`/`limit` 控制子树与分页 |
-| `amp_tool_filesystem_directory` | 平铺列出一级子节点 |
-| `amp_tool_filesystem_read` | 按 1-based 行号读取文本页；返回指纹、字符集与下一页行号 |
-| `amp_tool_filesystem_write` | 原子写入；create/overwrite/upsert/append、CAS、dry-run |
-| `amp_tool_filesystem_outline` | 结构化大纲；支持 `query`/`startLine`/`endLine` 过滤 |
-| `amp_tool_filesystem_import` | 出边/入边/两向导入关系 |
-| `amp_tool_filesystem_export` | 导出符号、签名与 re-export 边 |
-| `amp_tool_filesystem_dependency` | 环、拓扑序、依赖/被依赖闭包 |
-| `amp_tool_filesystem_ast` | 无损语法树：每个非空白 token、声明/块/标签层级、UTF-8 字节与行范围；只读，不执行 |
+| `amp_tool_file_session` | 当前身份、根、权限、剩余 TTL 与配额 |
+| `amp_tool_file_file` | 返回一个 File/Directory 节点；`depth`/`offset`/`limit` 控制子树与分页 |
+| `amp_tool_file_directory` | 平铺列出一级子节点 |
+| `amp_tool_file_read` | 按 1-based 行号读取文本页；返回指纹、字符集与下一页行号 |
+| `amp_tool_file_write` | 原子写入；create/overwrite/upsert/append、CAS、dry-run |
+| `amp_tool_file_outline` | 结构化大纲；支持 `query`/`startLine`/`endLine` 过滤 |
+| `amp_tool_file_import` | 出边/入边/两向导入关系 |
+| `amp_tool_file_export` | 导出符号、签名与 re-export 边 |
+| `amp_tool_file_dependency` | 环、拓扑序、依赖/被依赖闭包 |
+| `amp_tool_file_ast` | 无损语法树：每个非空白 token、声明/块/标签层级、UTF-8 字节与行范围；只读，不执行 |
 
 全局变体为 `amp_tool_globalfs_*`，由 [src/global/filesystem.ts](src/global/filesystem.ts) 做命名适配；它不扩大任何根或权限。
 大纲节点带 `isFile`/`isDirectory`/`file?`/`directory?`/`path`（如 `add.py#add`）与 `range`（UTF-8 字节 + 1-based 行，bigint；JSON 中为十进制字符串）。策略覆盖代码、Vue、项目清单、Markdown/TeX/纯文本、CSS/SCSS/Sass、HTML、XML/OPML 与 Office；Office 文件由 `office.ts` 解析 DOCX/XLSX/PPTX，DOC/XLS/PPT/PUB/ACCDB 为 CFB best-effort。
@@ -154,8 +154,8 @@ await diff.run({ path: "src/new.ts", before: "" });
 ### MCP stdio 接入
 
 ```sh
-npm run workspace-agent-demo
-npm run workspace-agent -- --config .cache/workspace-agent.local
+node tools/workspaceAgentDemo.ts
+node tools/workspaceAgentServer.ts --config .cache/workspace-agent.local
 ```
 
 真实 MCP 客户端应直接启动 Node，避免包管理器提示混入协议 stdout。将以下绝对路径替换为实际项目目录：

package/docs/schemas/collaboration.schema.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://amp.dev/schema/0.1/collaboration.schema.json",
+  "title": "AMP collaboration objects (delegation | lease | result-contract)",
+  "type": "object",
+  "oneOf": [
+    {
+      "type": "object",
+      "required": ["amp", "kind", "id", "granter", "delegatee", "goal_digest", "scope", "budget", "deadline", "may_redelegate", "depth"],
+      "properties": {
+        "amp": { "const": "0.1" },
+        "kind": { "const": "delegation" },
+        "id": { "$ref": "common.schema.json#/$defs/id" },
+        "parent": { "$ref": "common.schema.json#/$defs/id" },
+        "granter": { "$ref": "common.schema.json#/$defs/id" },
+        "delegatee": { "$ref": "common.schema.json#/$defs/id" },
+        "goal_digest": { "$ref": "common.schema.json#/$defs/digest" },
+        "scope": { "type": "array", "items": { "type": "string" } },
+        "budget": { "$ref": "common.schema.json#/$defs/budget" },
+        "deadline": { "$ref": "common.schema.json#/$defs/ts" },
+        "may_redelegate": { "type": "boolean" },
+        "depth": { "type": "integer", "minimum": 0, "maximum": 2 }
+      },
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "required": ["amp", "kind", "id", "delegation", "task_id", "holder", "fence", "goal_digest", "budget", "deadline", "status"],
+      "properties": {
+        "amp": { "const": "0.1" },
+        "kind": { "const": "lease" },
+        "id": { "$ref": "common.schema.json#/$defs/id" },
+        "delegation": { "$ref": "common.schema.json#/$defs/id" },
+        "task_id": { "$ref": "common.schema.json#/$defs/id" },
+        "holder": { "$ref": "common.schema.json#/$defs/id" },
+        "fence": { "type": "integer", "minimum": 1 },
+        "goal_digest": { "$ref": "common.schema.json#/$defs/digest" },
+        "budget": { "$ref": "common.schema.json#/$defs/budget" },
+        "deadline": { "$ref": "common.schema.json#/$defs/ts" },
+        "status": { "type": "string", "enum": ["active", "done", "cancelled"] }
+      },
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "required": ["amp", "kind", "id", "lease", "goal_digest", "claims", "evidence", "unknowns", "artifacts", "status"],
+      "properties": {
+        "amp": { "const": "0.1" },
+        "kind": { "const": "result-contract" },
+        "id": { "$ref": "common.schema.json#/$defs/id" },
+        "lease": { "$ref": "common.schema.json#/$defs/id" },
+        "goal_digest": { "$ref": "common.schema.json#/$defs/digest" },
+        "claims": { "type": "array", "items": { "$ref": "common.schema.json#/$defs/ref" } },
+        "evidence": { "type": "array", "items": { "$ref": "common.schema.json#/$defs/ref" } },
+        "unknowns": { "type": "array", "items": { "type": "string" } },
+        "artifacts": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["id", "digest"],
+            "properties": {
+              "id": { "$ref": "common.schema.json#/$defs/id" },
+              "digest": { "$ref": "common.schema.json#/$defs/digest" }
+            },
+            "additionalProperties": false
+          }
+        },
+        "status": { "type": "string", "enum": ["ok", "partial", "failed"] }
+      },
+      "additionalProperties": false
+    }
+  ]
+}

package/docs/schemas/common.schema.json

@@ -0,0 +1,125 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://amp.dev/schema/0.1/common.schema.json",
+  "title": "AMP common definitions",
+  "$defs": {
+    "id": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9._:-]{0,63}$"
+    },
+    "digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "ts": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "confidence": {
+      "type": "number",
+      "minimum": 0,
+      "maximum": 1
+    },
+    "trust": {
+      "type": "string",
+      "enum": ["self", "verified", "trusted", "asserted", "inferred", "external"]
+    },
+    "tier": {
+      "type": "string",
+      "enum": ["T0", "T1", "T2", "T3", "T4"]
+    },
+    "refKind": {
+      "type": "string",
+      "enum": [
+        "entity", "concept", "process", "thread", "question", "hypothesis", "claim",
+        "evidence", "goal", "plan", "task", "tool", "memory", "other",
+        "human", "event", "handle", "frame", "self", "unknown", "common-ground",
+        "capability", "agent", "receipt", "org"
+      ]
+    },
+    "ref": {
+      "type": "object",
+      "required": ["kind", "id"],
+      "properties": {
+        "kind": { "$ref": "#/$defs/refKind" },
+        "id": { "$ref": "#/$defs/id" },
+        "label": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "provenance": {
+      "type": "object",
+      "required": ["source"],
+      "properties": {
+        "source": { "type": "string" },
+        "kind": {
+          "type": "string",
+          "enum": ["observation", "testimony", "inference", "tool", "memory", "document", "simulation"]
+        },
+        "trust": { "$ref": "#/$defs/trust" },
+        "at": { "$ref": "#/$defs/ts" },
+        "digest": { "$ref": "#/$defs/digest" },
+        "note": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "budget": {
+      "type": "object",
+      "properties": {
+        "tokens": { "type": "integer", "minimum": 0 },
+        "ms": { "type": "integer", "minimum": 0 },
+        "calls": { "type": "integer", "minimum": 0 },
+        "interrupts": { "type": "integer", "minimum": 0 },
+        "money": { "type": "number", "minimum": 0 }
+      },
+      "additionalProperties": false
+    },
+    "usage": {
+      "type": "object",
+      "properties": {
+        "tokens": { "type": "integer", "minimum": 0 },
+        "ms": { "type": "integer", "minimum": 0 },
+        "calls": { "type": "integer", "minimum": 0 },
+        "interrupts": { "type": "integer", "minimum": 0 },
+        "money": { "type": "number", "minimum": 0 }
+      },
+      "additionalProperties": false
+    },
+    "signature": {
+      "type": "object",
+      "required": ["role", "alg", "kid", "sig"],
+      "properties": {
+        "role": { "type": "string", "enum": ["self", "host", "registry", "org", "tenant"] },
+        "alg": { "type": "string", "const": "ed25519" },
+        "kid": { "type": "string" },
+        "sig": { "type": "string" }
+      },
+      "additionalProperties": false
+    },
+    "criterion": {
+      "type": "object",
+      "required": ["id", "statement", "check"],
+      "properties": {
+        "id": { "$ref": "#/$defs/id" },
+        "statement": { "type": "string" },
+        "check": { "type": "string" },
+        "kind": { "type": "string", "enum": ["observe", "query", "assert"] }
+      },
+      "additionalProperties": false
+    },
+    "handle": {
+      "type": "object",
+      "required": ["id", "kind", "scope"],
+      "properties": {
+        "id": { "type": "string" },
+        "kind": { "type": "string", "enum": ["table", "text", "tree", "blob", "graph"] },
+        "tokens": { "type": "integer", "minimum": 0 },
+        "bytes": { "type": "integer", "minimum": 0 },
+        "preview": { "type": "string" },
+        "scope": { "type": "string", "enum": ["turn", "session", "task"] },
+        "ttl_ms": { "type": "integer", "minimum": 0 }
+      },
+      "additionalProperties": false
+    }
+  }
+}

package/docs/schemas/compaction.schema.json

@@ -0,0 +1,121 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://amp.dev/schema/0.1/compaction.schema.json",
+  "title": "AMP checkpoint | prune plan",
+  "type": "object",
+  "oneOf": [
+    {
+      "type": "object",
+      "required": [
+        "amp",
+        "kind",
+        "id",
+        "agent",
+        "from",
+        "to",
+        "count",
+        "tip",
+        "root",
+        "created",
+        "policy"
+      ],
+      "properties": {
+        "amp": { "const": "0.1" },
+        "kind": { "const": "checkpoint" },
+        "id": { "$ref": "common.schema.json#/$defs/id" },
+        "agent": { "$ref": "common.schema.json#/$defs/id" },
+        "from": { "type": "integer", "minimum": 0 },
+        "to": { "type": "integer", "minimum": 0 },
+        "count": { "type": "integer", "minimum": 1 },
+        "tip": { "$ref": "common.schema.json#/$defs/digest" },
+        "root": { "$ref": "common.schema.json#/$defs/digest" },
+        "created": { "$ref": "common.schema.json#/$defs/ts" },
+        "policy": {
+          "type": "object",
+          "required": ["keepRecent"],
+          "properties": {
+            "keepRecent": { "type": "integer", "minimum": 0 }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "required": [
+        "amp",
+        "kind",
+        "agent",
+        "sourceTip",
+        "sourceCount",
+        "kept",
+        "dropped",
+        "reclaimedBytes",
+        "estimatedTokens",
+        "policy"
+      ],
+      "properties": {
+        "amp": { "const": "0.1" },
+        "kind": { "const": "prune-plan" },
+        "agent": { "$ref": "common.schema.json#/$defs/id" },
+        "sourceTip": { "$ref": "common.schema.json#/$defs/digest" },
+        "sourceCount": { "type": "integer", "minimum": 0 },
+        "kept": {
+          "type": "array",
+          "items": { "type": "integer", "minimum": 0 }
+        },
+        "dropped": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["seq", "kind", "id", "reason", "revisit_if", "bytes"],
+            "properties": {
+              "seq": { "type": "integer", "minimum": 0 },
+              "kind": {
+                "enum": [
+                  "event",
+                  "frame",
+                  "receipt",
+                  "claim",
+                  "hypothesis",
+                  "unknown",
+                  "goal",
+                  "plan"
+                ]
+              },
+              "id": { "$ref": "common.schema.json#/$defs/id" },
+              "reason": { "enum": ["superseded", "closed", "resolved"] },
+              "revisit_if": { "type": "string", "minLength": 1 },
+              "bytes": { "type": "integer", "minimum": 0 }
+            },
+            "additionalProperties": false
+          }
+        },
+        "reclaimedBytes": { "type": "integer", "minimum": 0 },
+        "estimatedTokens": { "type": "integer", "minimum": 0 },
+        "policy": {
+          "type": "object",
+          "required": [
+            "amp",
+            "kind",
+            "keepRecent",
+            "dropSupersededClaims",
+            "dropClosedHypotheses",
+            "dropResolvedUnknowns"
+          ],
+          "properties": {
+            "amp": { "const": "0.1" },
+            "kind": { "const": "prune-policy" },
+            "keepRecent": { "type": "integer", "minimum": 0 },
+            "dropSupersededClaims": { "type": "boolean" },
+            "dropClosedHypotheses": { "type": "boolean" },
+            "dropResolvedUnknowns": { "type": "boolean" }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    }
+  ]
+}

package/docs/schemas/concept-compaction.schema.json

@@ -0,0 +1,73 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://amp.dev/schema/0.1/concept-compaction.schema.json",
+  "title": "AMP concept prune plan | concept checkpoint",
+  "type": "object",
+  "oneOf": [
+    {
+      "type": "object",
+      "required": ["amp", "kind", "concept", "version", "dropped", "reclaimedBytes", "budget"],
+      "properties": {
+        "amp": { "const": "0.1" },
+        "kind": { "const": "concept-prune-plan" },
+        "concept": { "$ref": "common.schema.json#/$defs/id" },
+        "version": { "type": "integer", "minimum": 1 },
+        "dropped": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["slot", "index", "summary", "reason", "revisit_if"],
+            "properties": {
+              "slot": { "enum": ["example", "relation", "extension"] },
+              "index": { "type": "integer", "minimum": 0 },
+              "summary": { "type": "string", "minLength": 1 },
+              "reason": { "enum": ["duplicate", "over-budget", "dangling"] },
+              "revisit_if": { "type": "string", "minLength": 1 }
+            },
+            "additionalProperties": false
+          }
+        },
+        "reclaimedBytes": { "type": "integer", "minimum": 0 },
+        "budget": {
+          "type": "object",
+          "required": ["amp", "kind", "maxExamples", "minExamples", "maxRelations", "keepVersions"],
+          "properties": {
+            "amp": { "const": "0.1" },
+            "kind": { "const": "concept-budget" },
+            "maxExamples": { "type": "integer", "minimum": 0 },
+            "minExamples": { "type": "integer", "minimum": 0 },
+            "maxRelations": { "type": "integer", "minimum": 0 },
+            "keepVersions": { "type": "integer", "minimum": 1 }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    },
+    {
+      "type": "object",
+      "required": ["amp", "kind", "id", "concept", "from", "to", "count", "tip", "root", "created", "budget"],
+      "properties": {
+        "amp": { "const": "0.1" },
+        "kind": { "const": "concept-checkpoint" },
+        "id": { "$ref": "common.schema.json#/$defs/id" },
+        "concept": { "$ref": "common.schema.json#/$defs/id" },
+        "from": { "type": "integer", "minimum": 1 },
+        "to": { "type": "integer", "minimum": 1 },
+        "count": { "type": "integer", "minimum": 1 },
+        "tip": { "$ref": "common.schema.json#/$defs/digest" },
+        "root": { "$ref": "common.schema.json#/$defs/digest" },
+        "created": { "$ref": "common.schema.json#/$defs/ts" },
+        "budget": {
+          "type": "object",
+          "required": ["keepVersions"],
+          "properties": {
+            "keepVersions": { "type": "integer", "minimum": 1 }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    }
+  ]
+}