firedrill-run 2.2.5 → 3.0.0

package/dist/contracts/ci-setup-contracts.js

@@ -0,0 +1,88 @@
+import { gitHubId } from './github-directory-contracts.js';
+import { nativeMetadataCanonical } from './local-value-source-contracts.js';
+const uuid = (v) => typeof v === 'string'
+    && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(v);
+const sha = (v) => typeof v === 'string' && /^[a-f0-9]{64}$/.test(v);
+const integer = (v, minimum = 0) => typeof v === 'number' && Number.isSafeInteger(v) && v >= minimum;
+const text = (v, maximum) => typeof v === 'string'
+    && v.length > 0 && v.length <= maximum && !/[\x00-\x1f\x7f]/.test(v);
+const date = (v) => typeof v === 'string' && Number.isFinite(Date.parse(v));
+const requestKeys = ['title', 'world_id', 'source_id', 'source_revision', 'world_revision', 'configuration_id',
+    'configuration_revision', 'configuration_sha256', 'plan_id', 'plan_revision', 'plan_sha256', 'source_alias',
+    'component_source_id', 'component_revision', 'connection_id', 'installation_id', 'repository_id', 'repository',
+    'connection_access_revision', 'connection_verified_at', 'source_set_sha256', 'graph_sha256', 'triggers', 'mode',
+    'nightly_hour_utc', 'scenario_count', 'repetitions', 'planned_trials', 'scenario_policy'].sort();
+const requirements = new Set(['managed_plan_required', 'github_source_required', 'github_connection_required',
+    'repository_directory_required', 'repository_access_required', 'preparation_budget_review_required',
+    'simulation_budget_review_required', 'input_access_review_required', 'separate_activation_required', 'pr_plan_too_long']);
+export function ciSetupProposalId(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return null;
+    const row = value;
+    return row.schema === 'firedrill.ci-setup-proposal.v1' && uuid(row.ci_setup_proposal_id)
+        ? row.ci_setup_proposal_id : null;
+}
+export function ciSetupProposalMatches(value, world, id, actor) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const row = value;
+    const r = row.request;
+    if (row.schema !== 'firedrill.ci-setup-proposal.v1' || row.id !== id || row.world_id !== world
+        || ![row.id, row.actor_id, row.world_id].every(uuid) || actor !== undefined && row.actor_id !== actor
+        || !sha(row.request_sha256) || !r || typeof r !== 'object' || Array.isArray(r)
+        || Object.keys(r).sort().join(',') !== requestKeys.join(',') || r.world_id !== world
+        || ![r.world_id, r.source_id, r.configuration_id, r.plan_id, r.component_source_id, r.connection_id].every(uuid)
+        || ![r.world_revision, r.plan_revision, r.repetitions].every(v => integer(v, 1))
+        || ![r.configuration_revision, r.connection_access_revision].every(v => integer(v))
+        || ![r.configuration_sha256, r.plan_sha256].every(sha) || !text(r.source_revision, 128)
+        || !/^[a-f0-9]{40}$/.test(r.component_revision) || !/^[a-z][a-z0-9_-]{0,63}$/.test(r.source_alias)
+        || !gitHubId(r.installation_id) || !gitHubId(r.repository_id) || !text(r.repository, 512) || !text(r.title, 120)
+        || r.connection_verified_at !== null && !date(r.connection_verified_at)
+        || [r.source_set_sha256, r.graph_sha256].some(v => v !== null && !sha(v))
+        || !Array.isArray(r.triggers) || r.triggers.length < 1 || r.triggers.length > 3
+        || new Set(r.triggers).size !== r.triggers.length
+        || !r.triggers.every(v => ['pull_request', 'default_branch', 'nightly'].includes(v))
+        || !['report_only', 'hard_constraints'].includes(r.mode)
+        || (r.triggers.includes('nightly') ? !integer(r.nightly_hour_utc) || r.nightly_hour_utc > 23 : r.nightly_hour_utc !== null)
+        || !integer(r.scenario_count) || !integer(r.planned_trials) || r.planned_trials !== r.scenario_count * r.repetitions
+        || !r.scenario_policy || Object.keys(r.scenario_policy).sort().join(',') !== 'mandatory_scenario_ids,mode,sha256'
+        || !['all', 'change_relevant'].includes(r.scenario_policy.mode) || !sha(r.scenario_policy.sha256)
+        || !Array.isArray(r.scenario_policy.mandatory_scenario_ids) || r.scenario_policy.mandatory_scenario_ids.length > 100
+        || !r.scenario_policy.mandatory_scenario_ids.every(uuid)
+        || new Set(r.scenario_policy.mandatory_scenario_ids).size !== r.scenario_policy.mandatory_scenario_ids.length
+        || !['available', 'current', 'can_review'].every(key => typeof row[key] === 'boolean')
+        || row.can_review && (!row.available || !row.current)
+        || !Array.isArray(row.missing_requirements) || row.missing_requirements.length > 16
+        || new Set(row.missing_requirements).size !== row.missing_requirements.length
+        || !row.missing_requirements.every(v => typeof v === 'string' && requirements.has(v))
+        || row.handoff_path !== `/ci/new?world=${world}&proposal=${id}`
+        || row.requires_user_approval !== true || row.configuration_created !== false
+        || row.activation_started !== false || row.consent_granted !== false)
+        return false;
+    const summary = row.configuration_summary;
+    if (!summary || Object.keys(summary).sort().join(',') !== [
+        'variables', 'build_variables', 'runtime_variables', 'unresolved_variables', 'dependencies',
+        'simulated_dependencies', 'real_dependencies', 'model_connections'
+    ].sort().join(',')
+        || !Object.values(summary).every(v => integer(v)) || summary.build_variables > summary.variables
+        || summary.runtime_variables > summary.variables || summary.unresolved_variables > summary.variables
+        || summary.simulated_dependencies + summary.real_dependencies > summary.dependencies)
+        return false;
+    const plan = row.plan;
+    if (plan !== null && (!plan || plan.id !== r.plan_id || plan.world_id !== world || plan.revision !== r.plan_revision
+        || plan.scenario_count !== r.scenario_count || plan.planned_trials !== r.planned_trials
+        || typeof plan.world_name !== 'string' || !date(plan.created_at) || plan.source_sha !== r.component_revision
+        || !Array.isArray(plan.source_aliases) || plan.source_aliases.length !== 1
+        || plan.source_aliases[0]?.alias !== r.source_alias || plan.source_aliases[0]?.revision !== r.component_revision))
+        return false;
+    const repository = row.repository_option;
+    if (repository !== null && (!repository || repository.id !== r.repository_id || repository.full_name !== r.repository
+        || repository.default_branch !== null && !text(repository.default_branch, 512)))
+        return false;
+    return !row.can_review || plan !== null && repository !== null;
+}
+/** Check the original immutable request after the structural/context guard. */
+export async function ciSetupRequestDigest(request) {
+    const bytes = await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(nativeMetadataCanonical(request)));
+    return Array.from(new Uint8Array(bytes), one => one.toString(16).padStart(2, '0')).join('');
+}

package/dist/contracts/clip-contracts.js

@@ -0,0 +1,32 @@
+const uuid = (value) => /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/.test(value);
+export function captureClipMatches(row, prefix, expected) {
+    if (!uuid(row.id) || !uuid(row.request_key) || expected !== undefined && row.id !== expected
+        || row.origin !== 'browser_derived_capture_playback')
+        return false;
+    const path = `${prefix}/${row.id}/file`;
+    return row.file === null || row.state === 'retained' && row.file.path === path
+        && row.file.download_path === `${path}?download=1` && row.file.content_type === 'video/mp4';
+}
+export function sameCaptureSelection(actual, original) {
+    return actual.id === original.id && actual.request_key === original.request_key && actual.source_kind === original.source_kind
+        && actual.attempt_number === original.attempt_number && actual.frames === original.frames
+        && actual.started_at === original.started_at && actual.ended_at === original.ended_at
+        && actual.duration_us === original.duration_us && actual.source_sha256 === original.source_sha256
+        && actual.width === original.width && actual.height === original.height && actual.origin === original.origin;
+}
+/** Corroborate the original private destination before sending encoded bytes. */
+export function captureClipUploadDestination(ticket, prefix, clip) {
+    const workspace = prefix.match(/^\/api\/workspaces\/([a-f0-9-]{36})\/campaigns\/[a-f0-9-]{36}\/trials\/[a-f0-9-]{36}\/capture-clips$/)?.[1];
+    const url = new URL(ticket.upload_url);
+    const parts = url.pathname.split('/');
+    if (!workspace || !uuid(workspace) || url.origin !== 'https://storage.googleapis.com' || url.username || url.password || url.hash
+        || parts.length !== 7 || !parts[1] || parts[2] !== 'private' || !uuid(parts[3]) || parts[4] !== workspace
+        || parts[5] !== 'capture-clips' || parts[6] !== `${clip.id}.mp4`
+        || ticket.method !== 'PUT' || Object.keys(ticket.headers).sort().join(',') !== 'Content-Type,x-goog-if-generation-match,x-goog-meta-firedrill-clip-artifact,x-goog-meta-firedrill-clip-id'
+        || ticket.headers['Content-Type'] !== 'video/mp4' || ticket.headers['x-goog-if-generation-match'] !== '0'
+        || !uuid(ticket.headers['x-goog-meta-firedrill-clip-artifact']) || ticket.headers['x-goog-meta-firedrill-clip-id'] !== clip.id
+        || !Number.isFinite(Date.parse(ticket.expires_at)) || !captureClipMatches(ticket.clip, prefix, clip.id)
+        || !sameCaptureSelection(ticket.clip, clip) || ticket.clip.state !== 'uploading')
+        throw new Error('The original private clip upload could not be confirmed. No bytes were transferred.');
+    return url;
+}

package/dist/contracts/comparison-contracts.js

@@ -0,0 +1,53 @@
+import { memoryProbeMatches } from './revision-contracts.js';
+const count = (value) => Number.isSafeInteger(value) && value >= 0;
+function summaryMatches(value, cohort, kind) {
+    const c = value?.scenario;
+    if (!c || c.scope !== 'scenario_schedule' || !['planned', 'retained', 'invoked', 'completed', 'target_failed',
+        'platform_failed', 'timed_out', 'canceled', 'unfinished', 'changed_world', 'unconfirmed_world'].every(key => count(c[key]))
+        || c.invoked > c.retained || c.changed_world + c.unconfirmed_world > c.retained
+        || c.completed + c.target_failed + c.platform_failed + c.timed_out + c.canceled + c.unfinished !== c.retained
+        || ![value.observed, value.assessed, value.not_assessable, value.not_applicable, value.missing, value.without_assessment].every(count)
+        || value.observed + c.changed_world + c.unconfirmed_world + value.without_assessment !== c.retained
+        || value.assessed + value.not_assessable + value.not_applicable + value.missing !== value.observed
+        || [value.mean, value.minimum, value.maximum].some(one => one !== null && (!Number.isFinite(one) || one < 0))
+        || (value.assessed > 0) !== (value.mean !== null && value.minimum !== null && value.maximum !== null))
+        return false;
+    if (kind === 'style')
+        return true;
+    if (!('distribution' in value) || !Array.isArray(value.distribution) || value.distribution.length !== cohort.levels.length - 1)
+        return false;
+    return value.distribution.every((bin, index) => bin.index === index && bin.minimum === index && bin.maximum === index + 1
+        && bin.upper_inclusive === (index === value.distribution.length - 1) && count(bin.count))
+        && value.distribution.reduce((total, bin) => total + bin.count, 0) === value.assessed;
+}
+function cohortKindMatches(cohort, kind) {
+    return kind === 'memory' ? 'memory' in cohort && Array.isArray(cohort.memory.probes)
+        : kind === 'style' ? 'parser' in cohort && typeof cohort.parser === 'string' && !!cohort.parser
+            : !('memory' in cohort) && !('parser' in cohort);
+}
+function selectedRunsMatch(page, selected) {
+    return !!page && !!page.current && !!page.baseline && Number.isSafeInteger(page.count) && page.count >= 0
+        && Number.isSafeInteger(page.page_size) && page.page_size > 0 && page.page_size <= 100
+        && Array.isArray(page.results) && page.results.length <= page.page_size
+        && page.current.id === selected.current && page.baseline.id === selected.baseline
+        && selected.current !== selected.baseline && page.kind === selected.kind;
+}
+export function comparisonPageMatches(page, selected) {
+    return selectedRunsMatch(page, selected) && page.results.every(row => cohortKindMatches(row.cohort, selected.kind)
+        && summaryMatches(row.current, row.cohort, selected.kind) && summaryMatches(row.baseline, row.cohort, selected.kind));
+}
+export function comparisonObservationsMatch(page, selected) {
+    if (!selectedRunsMatch(page, selected) || page.cohort.assessment_id !== selected.assessment
+        || !cohortKindMatches(page.cohort, selected.kind)
+        || !summaryMatches(page.summary.current, page.cohort, selected.kind)
+        || !summaryMatches(page.summary.baseline, page.cohort, selected.kind)
+        || selected.cohort && page.cohort.identity !== selected.cohort.identity
+        || !page.results.every(row => (row.side === 'current' ? row.campaign_id === selected.current
+            : row.side === 'baseline' && row.campaign_id === selected.baseline)
+            && (selected.side === 'both' || row.side === selected.side)))
+        return false;
+    if (page.kind !== 'memory')
+        return page.probe === null && selected.probe === undefined;
+    const probe = page.cohort.memory.probes[selected.probe ?? 0];
+    return !!probe && !!page.probe && memoryProbeMatches(page.probe, probe);
+}

package/dist/contracts/composite-contracts.js

@@ -0,0 +1,34 @@
+function availableValueMatches(row) {
+    return row.state === 'available' ? row.value !== null && Number.isFinite(row.value) && row.value >= 0 && row.value <= 100
+        : row.value === null;
+}
+export function compositeMatches(value, campaign, execution) {
+    return value.campaign_id === campaign && (!execution || value.execution_id === execution) && availableValueMatches(value)
+        && (value.state === 'not_configured' ? value.dimensions.length === 0 && value.required_checks.length === 0
+            : value.dimensions.every(row => row.levels.length === row.values.length));
+}
+export function compositePageMatches(value, campaign) {
+    return value.campaign_id === campaign && value.results.every(row => compositeMatches(row, campaign));
+}
+function selectedRunsMatch(value, current, baseline) {
+    return current !== baseline && value.current.id === current && value.baseline.id === baseline;
+}
+function countsMatch(cohort) {
+    return [cohort.current, cohort.baseline].every(side => [side.planned, side.retained, side.changed_world, side.unconfirmed_world].every(value => Number.isSafeInteger(value) && value >= 0) && side.changed_world + side.unconfirmed_world <= side.retained);
+}
+export function compositeGroupsMatch(value, current, baseline) {
+    return selectedRunsMatch(value, current, baseline) && value.results.every(row => /^[a-f0-9]{64}$/.test(row.id)
+        && countsMatch(row) && row.dimensions.every(dimension => dimension.levels.length === dimension.values.length));
+}
+export function compositeModelsMatch(value, current, baseline, cohort) {
+    return selectedRunsMatch(value, current, baseline) && value.cohort.id === cohort && countsMatch(value.cohort);
+}
+export function compositeObservationsMatch(value, selected) {
+    return selectedRunsMatch(value, selected.current, selected.baseline) && value.cohort.id === selected.cohort
+        && countsMatch(value.cohort)
+        && value.results.every(row => (selected.side === 'both' || row.side === selected.side)
+            && (selected.status === 'all' || (row.value === null ? 'unavailable' : 'available') === selected.status)
+            && (selected.model === undefined || row.model === selected.model) && availableValueMatches(row)
+            && (row.side === 'current' ? row.campaign_id === selected.current
+                : row.side === 'baseline' && row.campaign_id === selected.baseline));
+}

package/dist/contracts/context-contracts.js

@@ -0,0 +1,76 @@
+const recordingId = (value) => typeof value === 'string' && /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/.test(value);
+export function recordingMatches(value, selectedId) {
+    const row = value;
+    return !!row && recordingId(row.id) && (!selectedId || row.id === selectedId) && typeof row.filename === 'string' && row.filename.length <= 255
+        && ['otlp_json', 'langfuse_json', 'incident_json', 'har_json'].includes(row.format)
+        && ['uploading', 'processing', 'review', 'accepted', 'rejected', 'revoked'].includes(row.state)
+        && typeof row.can_complete === 'boolean' && typeof row.source_revision === 'string' && row.source_revision.length <= 256
+        && Number.isFinite(Date.parse(row.created_at)) && (row.reviewed_at === null || Number.isFinite(Date.parse(row.reviewed_at)))
+        && (row.failure === null || typeof row.failure === 'string') && !!row.summary && typeof row.summary === 'object' && !Array.isArray(row.summary)
+        && (row.summary.record_count === undefined || Number.isSafeInteger(row.summary.record_count) && row.summary.record_count > 0)
+        && (row.summary.gaps === undefined || Array.isArray(row.summary.gaps) && row.summary.gaps.every(one => typeof one === 'string'));
+}
+function recordingPage(value, page, maximum = 100) {
+    return !!value && value.page === page && Number.isSafeInteger(value.count) && value.count >= 0 && Number.isSafeInteger(value.page_size)
+        && value.page_size > 0 && value.page_size <= maximum && Array.isArray(value.results) && value.results.length <= value.page_size && value.results.length <= value.count;
+}
+export function recordingsMatch(value, scope, page, query = '') {
+    return !!value && value.workspace_id === scope.workspace && value.world_id === scope.world && value.query === query.trim()
+        && recordingPage(value, page) && Number.isSafeInteger(value.limits?.max_upload_bytes) && value.limits.max_upload_bytes > 0
+        && value.results.every(row => recordingMatches(row));
+}
+export function recordingRequestMatches(value, scope, key) {
+    return !!value && value.workspace_id === scope.workspace && value.world_id === scope.world && value.request_key === key
+        && (value.state === 'not_retained' ? value.recording === null : value.state === 'received' && recordingMatches(value.recording));
+}
+export function recordedObservationsMatch(value, scope, context, page, query = '') {
+    return !!value && value.workspace_id === scope.workspace && value.world_id === scope.world && value.context_id === context
+        && value.query === query.trim() && recordingPage(value, page, 25) && value.results.every(row => !!row && typeof row.pointer === 'string'
+        && typeof row.content_omitted === 'boolean' && typeof row.name === 'string' && row.name.length <= 512
+        && ['tool', 'conversation', 'observation', 'task', 'policy'].includes(row.kind)
+        && (row.operation === null || typeof row.operation === 'string' && row.operation.length <= 512)
+        && (!row.content_omitted || row.input === null && row.output === null));
+}
+export function samePolicyVersion(actual, expected) {
+    return actual.id === expected.id && actual.agent_id === expected.agent_id
+        && actual.policy_id === expected.policy_id && actual.version === expected.version;
+}
+export function policyActionConfirmed(actual, before, action) {
+    return samePolicyVersion(actual, before) && Number.isSafeInteger(actual.latest_version)
+        && actual.latest_version >= before.latest_version && (action === 'archive' ? actual.archived
+        : action === 'restore' ? !actual.archived && !actual.removed
+            : action === 'remove' ? actual.removed && !actual.available
+                : actual.state === 'revoked' && !actual.available);
+}
+export function policyUploadDestination(ticket, workspace, format) {
+    const types = { text: 'text/plain', markdown: 'text/markdown',
+        pdf: 'application/pdf', docx: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document' };
+    const url = new URL(ticket.upload_url ?? '');
+    if (!/^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/.test(ticket.id)
+        || url.origin !== 'https://storage.googleapis.com' || url.username || url.password || url.hash
+        || !url.pathname.endsWith(`/${workspace}/policies/${ticket.id}/original`)
+        || ticket.method !== 'PUT' || !ticket.headers
+        || Object.keys(ticket.headers).sort().join(',') !== 'Content-Type,x-goog-if-generation-match'
+        || ticket.headers['Content-Type'] !== types[format] || ticket.headers['x-goog-if-generation-match'] !== '0') {
+        throw new Error('The private policy upload destination could not be confirmed. No document was transferred.');
+    }
+    return url.href;
+}
+export function recordingProcessingConfirmed(row, id) {
+    return row.id === id && ['processing', 'review', 'accepted'].includes(row.state);
+}
+export function recordingUploadDestination(ticket, workspace, expectedId) {
+    const uuid = (value) => /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/.test(value);
+    const url = new URL(ticket.upload_url);
+    if (!uuid(ticket.id) || expectedId && ticket.id !== expectedId || ticket.method !== 'PUT'
+        || url.origin !== 'https://storage.googleapis.com' || url.username || url.password || url.hash
+        || !url.pathname.endsWith(`/${workspace}/context/${ticket.id}/original`)
+        || Object.keys(ticket.headers).sort().join(',') !== 'Content-Type,x-goog-if-generation-match,x-goog-meta-firedrill-recording-artifact,x-goog-meta-firedrill-recording-context,x-goog-meta-firedrill-recording-purpose'
+        || ticket.headers['Content-Type'] !== 'application/json' || ticket.headers['x-goog-if-generation-match'] !== '0'
+        || !uuid(ticket.headers['x-goog-meta-firedrill-recording-artifact'])
+        || ticket.headers['x-goog-meta-firedrill-recording-context'] !== ticket.id
+        || ticket.headers['x-goog-meta-firedrill-recording-purpose'] !== 'recorded_context') {
+        throw new Error('The recording upload destination could not be confirmed. No file was transferred.');
+    }
+    return url.href;
+}

package/dist/contracts/continuation-report-contracts.js

@@ -0,0 +1 @@
+export {};

package/dist/contracts/continuity-requirements.js

@@ -0,0 +1,8 @@
+export function continuityRequirementsMatch(value, world, revision, selectionRevision) {
+    const row = value;
+    return !!row && typeof row === 'object' && row.schema === 'firedrill.continuity-requirements.v1'
+        && row.world_id === world && row.world_revision === revision && row.selection_revision === selectionRevision && /^[a-f0-9]{64}$/.test(row.selection_sha256)
+        && Number.isSafeInteger(row.continuous_scenarios) && row.continuous_scenarios >= 0
+        && Number.isSafeInteger(row.minimum_trial_seconds) && row.minimum_trial_seconds >= 0 && row.minimum_trial_seconds <= 2592000
+        && (row.continuous_scenarios === 0 ? row.minimum_trial_seconds === 0 : row.minimum_trial_seconds > 5);
+}

package/dist/contracts/coordinated-checkpoint-contracts.js

@@ -0,0 +1,34 @@
+const uuid = (value) => typeof value === 'string' && /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/.test(value);
+const count = (value) => typeof value === 'number' && Number.isSafeInteger(value) && value >= 0;
+export const nativeCheckpointScopes = ['owned_postgres_rows_sequences_and_sql_clock', 'declared_sqlite_files', 'owned_postgres_and_declared_sqlite_files'];
+export function coordinatedCheckpointMatches(value, world, selected = {}) {
+    return !!value && uuid(value.id) && value.world_id === world && uuid(value.session_id) && uuid(value.request_key)
+        && (selected.session === undefined || value.session_id === selected.session) && (selected.id === undefined || value.id === selected.id)
+        && (selected.key === undefined || value.request_key === selected.key) && (selected.name === undefined || value.name === selected.name)
+        && typeof value.name === 'string' && value.name.length > 0 && value.name.length <= 120
+        && ['pending', 'retained', 'unavailable'].includes(value.state) && typeof value.available === 'boolean'
+        && Number.isFinite(Date.parse(value.created_at)) && (value.captured_at === null || Number.isFinite(Date.parse(value.captured_at)))
+        && count(value.application_component_count) && value.application_component_count <= 1000 && count(value.excluded_count) && value.excluded_count <= 1000
+        && (value.native_scope === null || nativeCheckpointScopes.includes(value.native_scope))
+        && (value.controlled_services_included === null || value.controlled_services_included === true)
+        && ['application_consistent', 'mixed_or_crash_consistent', 'not_observed'].includes(value.consistency)
+        && ['source_attested_quiescence_and_native_capture', 'not_observed'].includes(value.consistency_basis)
+        && (value.problem === null || typeof value.problem === 'string')
+        && (!value.available || value.state === 'retained' && value.captured_at !== null && value.application_component_count > 0
+            && value.controlled_services_included === true && value.native_scope !== null && value.consistency !== 'not_observed'
+            && value.consistency_basis === 'source_attested_quiescence_and_native_capture');
+}
+export function coordinatedCheckpointDetailMatches(value, world, selected = {}) {
+    return coordinatedCheckpointMatches(value, world, selected) && Array.isArray(value.components) && value.components.length <= 1000
+        && value.components.every(one => !!one && typeof one.name === 'string' && one.name.length > 0
+            && ['application_memory', 'database', 'files', 'queue_cursor', 'conversation', 'scheduled_jobs'].includes(one.kind)
+            && ['application_consistent', 'crash_consistent'].includes(one.consistency))
+        && Array.isArray(value.excluded) && value.excluded.length <= 1000 && value.excluded.every(one => typeof one === 'string' && one.length > 0 && one.length <= 256)
+        && (value.event_watermark === null || typeof value.event_watermark === 'string' && value.event_watermark.length > 0 && value.event_watermark.length <= 256)
+        && typeof value.barrier_released === 'boolean' && (value.record_count === null || count(value.record_count))
+        && (value.collection_count === null || count(value.collection_count))
+        && (value.available ? value.components.length === value.application_component_count && value.excluded.length === value.excluded_count
+            && value.barrier_released && value.event_watermark !== null && value.record_count !== null && value.collection_count !== null
+            : value.components.length === 0 && value.excluded.length === 0 && !value.barrier_released && value.event_watermark === null
+                && value.record_count === null && value.collection_count === null);
+}

package/dist/contracts/dataset-contracts.js

@@ -0,0 +1,88 @@
+const uuid = /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/;
+const hash = /^[a-f0-9]{64}$/;
+const optionalId = (value) => value === null || uuid.test(value);
+export function datasetRead(value, matches) {
+    if (!matches)
+        throw new Error('The dataset response did not match this saved version or original request. Inspect its retained history.');
+    return value;
+}
+export function datasetScope(prefix, actor) {
+    const parts = prefix.split('/');
+    if (parts[0] !== '' || parts[1] !== 'api' || parts[2] !== 'workspaces' || !uuid.test(parts[3] ?? ''))
+        return null;
+    return parts.length === 5 && parts[4] === 'tools' ? { workspace: parts[3], actor, kind: 'tool' }
+        : parts.length === 6 && parts[4] === 'worlds' && uuid.test(parts[5] ?? '') ? { workspace: parts[3], actor, kind: 'world', world: parts[5] } : null;
+}
+export function datasetMatches(value, scope, selected = {}) {
+    if (!value || value.workspace_id !== scope.workspace || value.kind !== scope.kind
+        || ![value.id, value.workspace_id, value.actor_id, value.request_key, value.series_id].every(one => uuid.test(one))
+        || !optionalId(value.previous_version_id) || !hash.test(value.request_digest) || !Number.isSafeInteger(value.version) || value.version < 1
+        || !Number.isSafeInteger(value.edit_count) || value.edit_count < 0 || value.edit_count > 100000
+        || !['saving', 'retained', 'failed', 'withdrawn'].includes(value.state)
+        || selected.id !== undefined && selected.id !== value.id || selected.key !== undefined && (selected.key !== value.request_key || value.actor_id !== scope.actor)
+        || selected.digest !== undefined && selected.digest !== value.request_digest || selected.name !== undefined && selected.name !== value.name
+        || selected.previous !== undefined && selected.previous !== value.previous_version_id || selected.editCount !== undefined && selected.editCount !== value.edit_count
+        || selected.withdrawn && (value.state !== 'withdrawn' || !value.withdrawn_at || value.available)
+        || value.available !== (value.file !== null) || value.available && (value.state !== 'retained' || !!value.withdrawn_at)
+        || value.file && (!Number.isSafeInteger(value.file.size) || value.file.size < 1 || value.file.size > 8 * 1024 ** 2 || !hash.test(value.file.sha256)))
+        return false;
+    return value.kind === 'tool' ? uuid.test(value.implementation_id) && uuid.test(value.checkpoint_id)
+        && (!selected.source || selected.source === value.checkpoint_id) && (!selected.implementation || selected.implementation === value.implementation_id)
+        : scope.kind === 'world' && value.world_id === scope.world && uuid.test(value.observation_id)
+            && (!selected.source || selected.source === value.observation_id) && (!value.can_start_session || value.available);
+}
+export function datasetPageMatches(value, scope, filters = {}) {
+    if (!value || value.workspace_id !== scope.workspace || value.query !== (filters.query ?? '').trim()
+        || value.state_filter !== (filters.state ?? 'all') || value.series_id_filter !== (filters.series ?? null)
+        || !Number.isSafeInteger(value.page) || value.page < 1 || filters.page !== undefined && value.page !== filters.page
+        || !Number.isSafeInteger(value.page_size) || value.page_size < 1 || value.page_size > 100 || value.results.length > value.page_size
+        || !Number.isSafeInteger(value.count) || value.count < 0 || !Number.isSafeInteger(value.capacity.recipe_bytes)
+        || value.capacity.recipe_bytes < 1 || value.capacity.recipe_bytes > 8 * 1024 ** 2)
+        return false;
+    if ('world_id' in value ? scope.kind !== 'world' || value.world_id !== scope.world || value.observation_id_filter !== (filters.source ?? null)
+        || value.startable_filter !== (filters.startable ?? false)
+        : scope.kind !== 'tool' || value.checkpoint_id_filter !== (filters.source ?? null) || value.implementation_id_filter !== (filters.implementation ?? null))
+        return false;
+    return value.results.every(row => datasetMatches(row, scope, { source: filters.source, implementation: filters.implementation })
+        && (value.state_filter === 'all' || row.state === value.state_filter) && (!filters.series || row.series_id === filters.series));
+}
+export function datasetDocumentMatches(value, scope, row) {
+    if (!datasetMatches(row, scope) || !row.available || !value || value.id !== row.id || !Array.isArray(value.edits) || value.edits.length !== row.edit_count)
+        return false;
+    return value.schema === 'firedrill.tool-dataset.v1' ? row.kind === 'tool' && value.implementation_id === row.implementation_id
+        && value.checkpoint_id === row.checkpoint_id && [value.checkpoint_sha256, value.contract_digest, value.schema_digest].every(one => hash.test(one))
+        : row.kind === 'world' && value.world_id === row.world_id && value.observation_id === row.observation_id && uuid.test(value.source_id)
+            && Number.isSafeInteger(value.world_revision) && value.world_revision >= 1 && [value.configuration_digest, value.archive_digest, value.index_digest].every(one => hash.test(one));
+}
+function cell(value, depth = 0) {
+    if (!value || typeof value !== 'object' || Array.isArray(value) || depth > 24)
+        return false;
+    const item = value, keys = Object.keys(item).sort().join(',');
+    if (item.type === 'null')
+        return keys === 'type';
+    if (item.type === 'binary' && item.encoding === 'base64')
+        return keys === 'encoding,type,value' && typeof item.value === 'string';
+    if (keys !== 'type,value')
+        return false;
+    if (item.type === 'boolean')
+        return typeof item.value === 'boolean';
+    if (['string', 'integer', 'decimal', 'datetime', 'date', 'time', 'uuid', 'binary'].includes(String(item.type)))
+        return typeof item.value === 'string';
+    if (item.type === 'float')
+        return typeof item.value === 'number' && Number.isFinite(item.value) && (!Number.isInteger(item.value) || Number.isSafeInteger(item.value))
+            || typeof item.value === 'string' && ['nan', 'inf', '-inf'].includes(item.value);
+    if (item.type === 'array')
+        return Array.isArray(item.value) && item.value.every(one => cell(one, depth + 1));
+    return item.type === 'object' && !!item.value && typeof item.value === 'object' && !Array.isArray(item.value)
+        && Object.values(item.value).every(one => cell(one, depth + 1));
+}
+export function datasetEdits(value) {
+    return Array.isArray(value) && value.length <= 100000 && value.every(edit => {
+        if (!edit || typeof edit !== 'object' || Array.isArray(edit) || Object.keys(edit).sort().join(',') !== 'action,collection,position,values'
+            || typeof edit.collection !== 'string' || !hash.test(edit.collection) || !['insert', 'update', 'delete'].includes(edit.action)
+            || (edit.action === 'insert' ? edit.position !== null : !Number.isSafeInteger(edit.position) || edit.position < 0))
+            return false;
+        return edit.action === 'delete' ? edit.values === null : !!edit.values && typeof edit.values === 'object' && !Array.isArray(edit.values)
+            && (edit.action !== 'update' || Object.keys(edit.values).length > 0) && Object.values(edit.values).every(one => cell(one));
+    });
+}

package/dist/contracts/dependency-decision-contracts.js

@@ -0,0 +1,36 @@
+const object = (value) => Boolean(value && typeof value === 'object' && !Array.isArray(value));
+const sha = (value) => typeof value === 'string' && /^[a-f0-9]{64}$/.test(value);
+const id = (value) => typeof value === 'string' && /^[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}$/.test(value);
+export function dependencyDecisionMatches(value) {
+    if (!object(value))
+        return false;
+    const keys = Object.keys(value).sort().join(',');
+    return value.action === 'catalog' ? keys === 'acknowledge_coverage_gaps,action,candidate_id' && sha(value.candidate_id) && value.acknowledge_coverage_gaps === true
+        : value.action === 'generated' ? keys === 'acknowledge_coverage_gaps,action' && value.acknowledge_coverage_gaps === true
+            : value.action === 'continue' ? keys === 'action,continuation_digest' && sha(value.continuation_digest)
+                : value.action === 'withdraw' && keys === 'action';
+}
+export function dependencyDecisionCanonical(value) {
+    if (!dependencyDecisionMatches(value))
+        throw new Error('Choose the exact original dependency decision.');
+    return '{' + Object.keys(value).sort().map(key => JSON.stringify(key) + ':' + JSON.stringify(value[key])).join(',') + '}';
+}
+export async function dependencyDecisionDigest(value) {
+    const bytes = await globalThis.crypto.subtle.digest('SHA-256', new TextEncoder().encode(dependencyDecisionCanonical(value)));
+    return Array.from(new Uint8Array(bytes), one => one.toString(16).padStart(2, '0')).join('');
+}
+export function dependencyDecisionReceiptMatches(value, scope, digest) {
+    if (!object(value) || Object.keys(value).sort().join(',') !== 'accepted_at,accepted_state,action,actor_id,decision_digest,preparation_id,schema,state,workspace_id,world_id'
+        || value.schema !== 'firedrill.dependency-decision-receipt.v1' || value.actor_id !== scope.actor || !id(scope.actor)
+        || value.workspace_id !== scope.workspace || !id(scope.workspace) || value.world_id !== scope.world || !id(scope.world)
+        || value.preparation_id !== scope.preparation || !id(scope.preparation) || value.decision_digest !== digest || !sha(digest)
+        || !['accepted', 'not_observed', 'unavailable'].includes(String(value.state)))
+        return false;
+    const accepted = ['catalog', 'generated', 'withdraw', 'continue'].includes(String(value.action))
+        && ['queued', 'adopting', 'applied', 'withdrawn'].includes(String(value.accepted_state))
+        && (value.action === 'catalog' ? ['adopting', 'applied'].includes(String(value.accepted_state))
+            : value.action === 'generated' ? value.accepted_state === 'applied' : value.action === 'continue' ? value.accepted_state === 'queued' : value.accepted_state === 'withdrawn')
+        && typeof value.accepted_at === 'string' && Number.isFinite(Date.parse(value.accepted_at));
+    const absent = value.action === null && value.accepted_state === null && value.accepted_at === null;
+    return value.state === 'accepted' ? accepted : value.state === 'not_observed' ? absent : absent || accepted;
+}

package/dist/contracts/dependency-protocol-contracts.js

@@ -0,0 +1,43 @@
+const object = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+const names = (v, maximum = 100) => Array.isArray(v) && v.length <= maximum
+    && v.every(one => typeof one === 'string' && /^[A-Za-z0-9_.~-]{1,128}$/.test(one));
+const optionalName = (v) => v === null || typeof v === 'string' && /^[A-Za-z_][A-Za-z0-9_.~-]{0,127}$/.test(v);
+export function protocolProfileMatches(v) {
+    return object(v) && typeof v.available === 'boolean' && typeof v.http_declared === 'boolean'
+        && typeof v.aliases_declared === 'boolean' && (v.request_encoding === null || ['json', 'query', 'form', 'multipart', 'text', 'base64', 'none'].includes(String(v.request_encoding)))
+        && (v.response_encoding === null || ['json', 'text', 'binary'].includes(String(v.response_encoding)))
+        && names(v.mapped_header_names) && names(v.ignored_metadata_headers) && names(v.query_names) && names(v.multipart_part_names)
+        && v.multipart_part_names.every(name => /^[A-Za-z_][A-Za-z0-9_.-]{0,99}$/.test(name))
+        && optionalName(v.body_argument) && optionalName(v.content_type_argument) && (v.idempotency_header === null || v.idempotency_header === 'Idempotency-Key')
+        && optionalName(v.idempotency_argument) && names(v.mcp_aliases, 16);
+}
+export function protocolComparisonMatches(v) {
+    return object(v) && protocolProfileMatches(v.source) && protocolProfileMatches(v.package)
+        && (v.explicit_expectations_match === null || typeof v.explicit_expectations_match === 'boolean') && v.runtime_validated === false;
+}
+export function compatibilityPageMatches(v, request, candidate, page) {
+    return object(v) && v.request_id === request && v.candidate_id === candidate && v.page === page
+        && v.page_size === 25 && typeof v.count === 'number' && Number.isSafeInteger(v.count) && v.count >= 0
+        && v.behavior_validated === false && Array.isArray(v.results) && v.results.length <= 25 && v.results.every(one => object(one)
+        && (one.name === null || typeof one.name === 'string' && one.name.length <= 255)
+        && ['declaration_match', 'missing', 'mismatch', 'unsupported'].includes(String(one.state))
+        && (one.reason === null || typeof one.reason === 'string') && Array.isArray(one.gaps)
+        && one.gaps.length <= 30 && one.gaps.every(gap => typeof gap === 'string' && gap.length <= 2000)
+        && (one.protocol_metadata === undefined || protocolComparisonMatches(one.protocol_metadata)));
+}
+export function protocolProfileLines(value) {
+    if (!value.available)
+        return ['Protocol metadata is unavailable. Inspect the original declaration.'];
+    return [
+        ...(value.http_declared ? [`Request ${value.request_encoding}; response ${value.response_encoding}.`,
+            ...(value.mapped_header_names.length ? ['Mapped headers: ' + value.mapped_header_names.join(', ')] : []),
+            ...(value.ignored_metadata_headers.length ? ['Ignored request metadata: ' + value.ignored_metadata_headers.join(', ')] : []),
+            ...(value.query_names.length ? ['Query parameters: ' + value.query_names.join(', ')] : []),
+            ...(value.multipart_part_names.length ? ['Multipart parts: ' + value.multipart_part_names.join(', ')] : []),
+            ...(value.body_argument ? ['Body argument: ' + value.body_argument] : []),
+            ...(value.content_type_argument ? ['Body media type argument: ' + value.content_type_argument] : []),
+            ...(value.idempotency_header ? [`Idempotency: ${value.idempotency_header} from ${value.idempotency_argument}.`] : [])]
+            : ['HTTP data mapping not declared.']),
+        ...(value.mcp_aliases.length ? ['MCP aliases: ' + value.mcp_aliases.join(', ')] : []),
+    ];
+}

package/dist/contracts/director-execution.js

@@ -0,0 +1,51 @@
+const uuid = (value) => typeof value === 'string'
+    && /^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$/.test(value);
+const positive = (value) => Number.isSafeInteger(value) && Number(value) > 0;
+export function executionProposalId(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return null;
+    const row = value;
+    return row.schema === 'firedrill.director-execution-proposal.v1' && uuid(row.execution_proposal_id)
+        ? row.execution_proposal_id : null;
+}
+export function isExecutionProposal(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return false;
+    const row = value;
+    return row.schema === 'firedrill.director-execution-proposal.v1'
+        && ['id', 'actor_id', 'world_id', 'source_id', 'plan_request_key', 'admission_request_key', 'validation_request_key']
+            .every(key => uuid(row[key]))
+        && (row.previous_plan_id === null || uuid(row.previous_plan_id))
+        && typeof row.title === 'string' && row.title.length > 0 && row.title.length <= 160
+        && ['validate', 'simulate'].includes(row.action) && ['choose', 'managed', 'local'].includes(row.location)
+        && [row.world_revision, row.repetitions, row.parallelism, row.trial_seconds].every(positive)
+        && Number.isSafeInteger(row.configuration_revision) && row.configuration_revision >= 0
+        && Number.isSafeInteger(row.scenario_count) && row.scenario_count >= 0
+        && Number.isSafeInteger(row.planned_trials) && row.planned_trials === row.scenario_count * row.repetitions
+        && typeof row.selection_revision === 'string' && /^[a-z0-9-]{1,128}$/.test(row.selection_revision)
+        && typeof row.evaluation_revision === 'string' && /^[a-f0-9]{64}$/.test(row.evaluation_revision)
+        && ['available', 'current', 'can_execute'].every(key => typeof row[key] === 'boolean')
+        && !!row.selector && ['ids', 'all_matching'].includes(row.selector.mode) && row.selector.query === ''
+        && Array.isArray(row.selector.ids) && row.selector.ids.every(uuid)
+        && row.selector.ids.length <= 100 && new Set(row.selector.ids).size === row.selector.ids.length
+        && Array.isArray(row.selector.excluded) && row.selector.excluded.length === 0
+        && (row.selector.mode === 'ids' ? row.selector.ids.length > 0 : row.selector.ids.length === 0)
+        && (row.action === 'validate' ? row.scenario_count === 0 && row.planned_trials === 0
+            : row.scenario_count > 0 && (row.selector.mode !== 'ids' || row.scenario_count === row.selector.ids.length))
+        && (!row.can_execute || row.available && row.current)
+        && (row.plan === null || uuid(row.plan?.id) && typeof row.plan.current === 'boolean')
+        && (row.campaign === null || uuid(row.campaign?.id) && typeof row.campaign.state === 'string'
+            && ['managed', 'local'].includes(row.campaign.execution_location))
+        && (row.validation === null || uuid(row.validation?.id) && typeof row.validation.state === 'string'
+            && typeof row.validation.active === 'boolean' && typeof row.validation.current === 'boolean'
+            && ['managed', 'local'].includes(row.validation.execution_location));
+}
+export function executionPlanMatches(proposal, plan) {
+    const ids = (values) => [...new Set(values)].sort().join(',');
+    return !!plan && plan.current && plan.scenario_count === proposal.scenario_count
+        && plan.planned_trials === proposal.planned_trials && plan.repetitions === proposal.repetitions
+        && plan.parallelism === proposal.parallelism && plan.trial_seconds === proposal.trial_seconds
+        && (proposal.location === 'choose' || plan.execution.location === proposal.location)
+        && plan.selector.mode === proposal.selector.mode && plan.selector.query === ''
+        && ids(plan.selector.ids) === ids(proposal.selector.ids) && ids(plan.selector.excluded) === '';
+}