glirastes 0.3.2 → 0.5.0

package/dist/contracts/content-boundary.js

@@ -0,0 +1,91 @@
+const FORBIDDEN_CONTENT_KEYS = new Set([
+    'apikey',
+    'argument',
+    'arguments',
+    'authorization',
+    'content',
+    'cookie',
+    'cookies',
+    'credential',
+    'credentials',
+    'message',
+    'messages',
+    'password',
+    'prompt',
+    'result',
+    'secret',
+    'systemprompt',
+    'token',
+    'toolargument',
+    'toolarguments',
+    'toolresult',
+    'toolresults',
+]);
+function normalizeKey(key) {
+    return key.toLowerCase().replace(/[^a-z0-9]/g, '');
+}
+function isForbiddenContentKey(key) {
+    const normalized = normalizeKey(key);
+    return FORBIDDEN_CONTENT_KEYS.has(normalized)
+        || normalized.endsWith('apikey')
+        || normalized.endsWith('authorization')
+        || normalized.endsWith('cookie')
+        || normalized.endsWith('credential')
+        || normalized.endsWith('password')
+        || normalized.endsWith('secret')
+        || normalized.endsWith('token');
+}
+export function findForbiddenContentPath(value, path = []) {
+    if (Array.isArray(value)) {
+        for (let index = 0; index < value.length; index += 1) {
+            const match = findForbiddenContentPath(value[index], [...path, index]);
+            if (match)
+                return match;
+        }
+        return null;
+    }
+    if (value === null || typeof value !== 'object')
+        return null;
+    for (const [key, child] of Object.entries(value)) {
+        const nextPath = [...path, key];
+        if (isForbiddenContentKey(key))
+            return nextPath;
+        const match = findForbiddenContentPath(child, nextPath);
+        if (match)
+            return match;
+    }
+    return null;
+}
+const SENSITIVE_STRING_PATTERNS = [
+    /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/,
+    /\bBearer\s+[A-Za-z0-9._~+/-]{16,}={0,2}\b/i,
+    /\bsk-(?:or-v1-)?[A-Za-z0-9_-]{20,}\b/,
+];
+export function findSensitiveStringPath(value, path = []) {
+    if (typeof value === 'string') {
+        return SENSITIVE_STRING_PATTERNS.some((pattern) => pattern.test(value))
+            ? [...path]
+            : null;
+    }
+    if (Array.isArray(value)) {
+        for (let index = 0; index < value.length; index += 1) {
+            const match = findSensitiveStringPath(value[index], [...path, index]);
+            if (match)
+                return match;
+        }
+        return null;
+    }
+    if (value === null || typeof value !== 'object')
+        return null;
+    for (const [key, child] of Object.entries(value)) {
+        const match = findSensitiveStringPath(child, [...path, key]);
+        if (match)
+            return match;
+    }
+    return null;
+}
+export function findForbiddenPlatformContentPath(value, path = []) {
+    return findForbiddenContentPath(value, path)
+        ?? findSensitiveStringPath(value, path);
+}
+//# sourceMappingURL=content-boundary.js.map

package/dist/contracts/content-boundary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-boundary.js","sourceRoot":"","sources":["../../src/contracts/content-boundary.ts"],"names":[],"mappings":"AAAA,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,QAAQ;IACR,UAAU;IACV,WAAW;IACX,eAAe;IACf,SAAS;IACT,QAAQ;IACR,SAAS;IACT,YAAY;IACZ,aAAa;IACb,SAAS;IACT,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,OAAO;IACP,cAAc;IACd,eAAe;IACf,YAAY;IACZ,aAAa;CACd,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,GAAW;IAC/B,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW;IACxC,MAAM,UAAU,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACrC,OAAO,sBAAsB,CAAC,GAAG,CAAC,UAAU,CAAC;WACxC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;WAC7B,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC;WACpC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;WAC7B,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;WACjC,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC;WAC/B,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;WAC7B,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,KAAc,EACd,OAAuC,EAAE;IAEzC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACvE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,IAAI,qBAAqB,CAAC,GAAG,CAAC;YAAE,OAAO,QAAQ,CAAC;QAChD,MAAM,KAAK,GAAG,wBAAwB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxD,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,yBAAyB,GAAG;IAChC,mDAAmD;IACnD,4CAA4C;IAC5C,sCAAsC;CACvC,CAAC;AAEF,MAAM,UAAU,uBAAuB,CACrC,KAAc,EACd,OAAuC,EAAE;IAEzC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,yBAAyB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;YACX,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACtE,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE7D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;QAC7D,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;IAC1B,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,KAAc,EACd,OAAuC,EAAE;IAEzC,OAAO,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC;WACvC,uBAAuB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC"}

package/dist/contracts/events.d.ts

@@ -0,0 +1,273 @@
+import { z } from 'zod';
+export declare const TechnicalRuntimeEventSchema: z.ZodObject<{
+    eventId: z.ZodUUID;
+    occurredAt: z.ZodISODateTime;
+    eventType: z.ZodString;
+    tenantId: z.ZodUUID;
+    targetAppId: z.ZodUUID;
+    environmentId: z.ZodUUID;
+    agentRevisionId: z.ZodOptional<z.ZodUUID>;
+    policyRevisionId: z.ZodOptional<z.ZodUUID>;
+    manifestRevisionId: z.ZodOptional<z.ZodUUID>;
+    runId: z.ZodString;
+    status: z.ZodString;
+    durationMs: z.ZodOptional<z.ZodNumber>;
+    errorClass: z.ZodOptional<z.ZodString>;
+    budget: z.ZodOptional<z.ZodObject<{
+        modelSteps: z.ZodNumber;
+        toolCalls: z.ZodNumber;
+        inputTokens: z.ZodNumber;
+        outputTokens: z.ZodNumber;
+        estimatedCostUsd: z.ZodOptional<z.ZodNumber>;
+    }, z.core.$strict>>;
+    metadata: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+export type TechnicalRuntimeEvent = z.infer<typeof TechnicalRuntimeEventSchema>;
+export declare const RUNTIME_METRIC_EVENT_SCHEMA_VERSION = 2;
+/** Most events one ingest request carries (keeps a batch far below 256 KB). */
+export declare const RUNTIME_METRIC_MAX_BATCH = 50;
+/** Most distinct tools one turn event lists; further tools only count. */
+export declare const RUNTIME_METRIC_MAX_TOOLS = 32;
+/** Largest count or token number a metric carries (Postgres `integer`). */
+export declare const RUNTIME_METRIC_MAX_COUNT = 2147483647;
+/**
+ * A technical label (model slug, build id, instance id): no whitespace, no
+ * quotes, at most 200 characters. Free text cannot pass.
+ */
+export declare const RUNTIME_METRIC_LABEL_PATTERN: RegExp;
+export declare const RUNTIME_PRICING_VERSION_PATTERN: RegExp;
+export declare const RuntimeTurnStatusSchema: z.ZodEnum<{
+    error: "error";
+    completed: "completed";
+    "safety-stop": "safety-stop";
+    aborted: "aborted";
+}>;
+export declare const RuntimeTurnErrorCodeSchema: z.ZodEnum<{
+    model_error: "model_error";
+    pipeline_error: "pipeline_error";
+    budget_exhausted: "budget_exhausted";
+    step_limit: "step_limit";
+}>;
+export declare const RuntimeCostSourceSchema: z.ZodEnum<{
+    "provider-reported": "provider-reported";
+    "price-table": "price-table";
+}>;
+/**
+ * Cost of a turn with its provenance. Unknown stays `null`, never 0: a
+ * provider-reported amount (OpenRouter `usage.cost`) or a price-table
+ * estimate that names its pricing version.
+ */
+export declare const RuntimeTurnCostSchema: z.ZodObject<{
+    usd: z.ZodNullable<z.ZodNumber>;
+    source: z.ZodNullable<z.ZodEnum<{
+        "provider-reported": "provider-reported";
+        "price-table": "price-table";
+    }>>;
+    pricingVersion: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export declare const RuntimeTurnToolUsageSchema: z.ZodObject<{
+    toolId: z.ZodUUID;
+    calls: z.ZodNumber;
+    errors: z.ZodNumber;
+}, z.core.$strict>;
+export declare const TechnicalRuntimeEventV2Schema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<2>;
+    eventId: z.ZodUUID;
+    eventType: z.ZodLiteral<"turn.finished">;
+    occurredAt: z.ZodISODateTime;
+    appId: z.ZodUUID;
+    environmentId: z.ZodUUID;
+    buildId: z.ZodNullable<z.ZodString>;
+    instanceId: z.ZodString;
+    revisionId: z.ZodNullable<z.ZodUUID>;
+    model: z.ZodNullable<z.ZodString>;
+    status: z.ZodEnum<{
+        error: "error";
+        completed: "completed";
+        "safety-stop": "safety-stop";
+        aborted: "aborted";
+    }>;
+    errorCode: z.ZodNullable<z.ZodEnum<{
+        model_error: "model_error";
+        pipeline_error: "pipeline_error";
+        budget_exhausted: "budget_exhausted";
+        step_limit: "step_limit";
+    }>>;
+    inputTokens: z.ZodNumber;
+    outputTokens: z.ZodNumber;
+    cost: z.ZodObject<{
+        usd: z.ZodNullable<z.ZodNumber>;
+        source: z.ZodNullable<z.ZodEnum<{
+            "provider-reported": "provider-reported";
+            "price-table": "price-table";
+        }>>;
+        pricingVersion: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    latency: z.ZodObject<{
+        firstTokenMs: z.ZodNullable<z.ZodNumber>;
+        totalMs: z.ZodNumber;
+    }, z.core.$strict>;
+    toolCallCount: z.ZodNumber;
+    toolErrorCount: z.ZodNumber;
+    tools: z.ZodArray<z.ZodObject<{
+        toolId: z.ZodUUID;
+        calls: z.ZodNumber;
+        errors: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type TechnicalRuntimeEventV2 = z.infer<typeof TechnicalRuntimeEventV2Schema>;
+export type RuntimeTurnStatus = z.infer<typeof RuntimeTurnStatusSchema>;
+export type RuntimeTurnErrorCode = z.infer<typeof RuntimeTurnErrorCodeSchema>;
+export type RuntimeCostSource = z.infer<typeof RuntimeCostSourceSchema>;
+export type RuntimeTurnCost = z.infer<typeof RuntimeTurnCostSchema>;
+export type RuntimeTurnToolUsage = z.infer<typeof RuntimeTurnToolUsageSchema>;
+/** Statuses of an endpoint that refused a call its tool schema accepted. */
+export declare const TOOL_CONTRACT_REJECTED_STATUSES: readonly [400, 422];
+/**
+ * An endpoint refused a call that passed the tool's input schema (spec 4.7):
+ * the contract the model saw is wrong, so the tool belongs on the next work
+ * list or managed job. Content-free: tool, schema version and status, never
+ * arguments, response or message.
+ */
+export declare const ToolContractRejectedEventSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<2>;
+    eventId: z.ZodUUID;
+    eventType: z.ZodLiteral<"tool_contract_rejected">;
+    occurredAt: z.ZodISODateTime;
+    appId: z.ZodUUID;
+    environmentId: z.ZodUUID;
+    buildId: z.ZodNullable<z.ZodString>;
+    instanceId: z.ZodString;
+    revisionId: z.ZodNullable<z.ZodUUID>;
+    toolId: z.ZodUUID;
+    inputSchemaDigest: z.ZodString;
+    httpStatus: z.ZodUnion<readonly [z.ZodLiteral<400>, z.ZodLiteral<422>]>;
+}, z.core.$strict>;
+export type ToolContractRejectedEvent = z.infer<typeof ToolContractRejectedEventSchema>;
+/** Every content-free metric event of the runtime: finished turns and contract rejections. */
+export declare const RuntimeMetricEventSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    schemaVersion: z.ZodLiteral<2>;
+    eventId: z.ZodUUID;
+    eventType: z.ZodLiteral<"turn.finished">;
+    occurredAt: z.ZodISODateTime;
+    appId: z.ZodUUID;
+    environmentId: z.ZodUUID;
+    buildId: z.ZodNullable<z.ZodString>;
+    instanceId: z.ZodString;
+    revisionId: z.ZodNullable<z.ZodUUID>;
+    model: z.ZodNullable<z.ZodString>;
+    status: z.ZodEnum<{
+        error: "error";
+        completed: "completed";
+        "safety-stop": "safety-stop";
+        aborted: "aborted";
+    }>;
+    errorCode: z.ZodNullable<z.ZodEnum<{
+        model_error: "model_error";
+        pipeline_error: "pipeline_error";
+        budget_exhausted: "budget_exhausted";
+        step_limit: "step_limit";
+    }>>;
+    inputTokens: z.ZodNumber;
+    outputTokens: z.ZodNumber;
+    cost: z.ZodObject<{
+        usd: z.ZodNullable<z.ZodNumber>;
+        source: z.ZodNullable<z.ZodEnum<{
+            "provider-reported": "provider-reported";
+            "price-table": "price-table";
+        }>>;
+        pricingVersion: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>;
+    latency: z.ZodObject<{
+        firstTokenMs: z.ZodNullable<z.ZodNumber>;
+        totalMs: z.ZodNumber;
+    }, z.core.$strict>;
+    toolCallCount: z.ZodNumber;
+    toolErrorCount: z.ZodNumber;
+    tools: z.ZodArray<z.ZodObject<{
+        toolId: z.ZodUUID;
+        calls: z.ZodNumber;
+        errors: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>, z.ZodObject<{
+    schemaVersion: z.ZodLiteral<2>;
+    eventId: z.ZodUUID;
+    eventType: z.ZodLiteral<"tool_contract_rejected">;
+    occurredAt: z.ZodISODateTime;
+    appId: z.ZodUUID;
+    environmentId: z.ZodUUID;
+    buildId: z.ZodNullable<z.ZodString>;
+    instanceId: z.ZodString;
+    revisionId: z.ZodNullable<z.ZodUUID>;
+    toolId: z.ZodUUID;
+    inputSchemaDigest: z.ZodString;
+    httpStatus: z.ZodUnion<readonly [z.ZodLiteral<400>, z.ZodLiteral<422>]>;
+}, z.core.$strict>], "eventType">;
+export type RuntimeMetricEvent = z.infer<typeof RuntimeMetricEventSchema>;
+/**
+ * Body of `POST /v1/runtime/apps/:appId/environments/:environmentId/metrics/events`.
+ * One batch carries one event type, so a Platform that does not know a newer
+ * type refuses only that batch and keeps receiving turns.
+ */
+export declare const TechnicalRuntimeEventBatchSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<2>;
+    events: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+        schemaVersion: z.ZodLiteral<2>;
+        eventId: z.ZodUUID;
+        eventType: z.ZodLiteral<"turn.finished">;
+        occurredAt: z.ZodISODateTime;
+        appId: z.ZodUUID;
+        environmentId: z.ZodUUID;
+        buildId: z.ZodNullable<z.ZodString>;
+        instanceId: z.ZodString;
+        revisionId: z.ZodNullable<z.ZodUUID>;
+        model: z.ZodNullable<z.ZodString>;
+        status: z.ZodEnum<{
+            error: "error";
+            completed: "completed";
+            "safety-stop": "safety-stop";
+            aborted: "aborted";
+        }>;
+        errorCode: z.ZodNullable<z.ZodEnum<{
+            model_error: "model_error";
+            pipeline_error: "pipeline_error";
+            budget_exhausted: "budget_exhausted";
+            step_limit: "step_limit";
+        }>>;
+        inputTokens: z.ZodNumber;
+        outputTokens: z.ZodNumber;
+        cost: z.ZodObject<{
+            usd: z.ZodNullable<z.ZodNumber>;
+            source: z.ZodNullable<z.ZodEnum<{
+                "provider-reported": "provider-reported";
+                "price-table": "price-table";
+            }>>;
+            pricingVersion: z.ZodNullable<z.ZodString>;
+        }, z.core.$strict>;
+        latency: z.ZodObject<{
+            firstTokenMs: z.ZodNullable<z.ZodNumber>;
+            totalMs: z.ZodNumber;
+        }, z.core.$strict>;
+        toolCallCount: z.ZodNumber;
+        toolErrorCount: z.ZodNumber;
+        tools: z.ZodArray<z.ZodObject<{
+            toolId: z.ZodUUID;
+            calls: z.ZodNumber;
+            errors: z.ZodNumber;
+        }, z.core.$strict>>;
+    }, z.core.$strict>, z.ZodObject<{
+        schemaVersion: z.ZodLiteral<2>;
+        eventId: z.ZodUUID;
+        eventType: z.ZodLiteral<"tool_contract_rejected">;
+        occurredAt: z.ZodISODateTime;
+        appId: z.ZodUUID;
+        environmentId: z.ZodUUID;
+        buildId: z.ZodNullable<z.ZodString>;
+        instanceId: z.ZodString;
+        revisionId: z.ZodNullable<z.ZodUUID>;
+        toolId: z.ZodUUID;
+        inputSchemaDigest: z.ZodString;
+        httpStatus: z.ZodUnion<readonly [z.ZodLiteral<400>, z.ZodLiteral<422>]>;
+    }, z.core.$strict>], "eventType">>;
+}, z.core.$strict>;
+export type TechnicalRuntimeEventBatch = z.infer<typeof TechnicalRuntimeEventBatchSchema>;

package/dist/contracts/events.js

@@ -0,0 +1,227 @@
+import { z } from 'zod';
+import { findForbiddenContentPath, findForbiddenPlatformContentPath, } from './content-boundary.js';
+export const TechnicalRuntimeEventSchema = z.object({
+    eventId: z.uuid(),
+    occurredAt: z.iso.datetime({ offset: true }),
+    eventType: z.string().trim().min(1).max(100),
+    tenantId: z.uuid(),
+    targetAppId: z.uuid(),
+    environmentId: z.uuid(),
+    agentRevisionId: z.uuid().optional(),
+    policyRevisionId: z.uuid().optional(),
+    manifestRevisionId: z.uuid().optional(),
+    runId: z.string().trim().min(1).max(200),
+    status: z.string().trim().min(1).max(100),
+    durationMs: z.number().int().nonnegative().optional(),
+    errorClass: z.string().trim().min(1).max(200).optional(),
+    budget: z.object({
+        modelSteps: z.number().int().nonnegative(),
+        toolCalls: z.number().int().nonnegative(),
+        inputTokens: z.number().int().nonnegative(),
+        outputTokens: z.number().int().nonnegative(),
+        estimatedCostUsd: z.number().finite().nonnegative().optional(),
+    }).strict().optional(),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+}).strict().superRefine((event, context) => {
+    const path = findForbiddenContentPath(event.metadata, ['metadata']);
+    if (path) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Technical runtime events must not contain business content or credentials',
+            path,
+        });
+    }
+});
+// ---------------------------------------------------------------------------
+// TechnicalRuntimeEvent v2: one content-free metric event per chat turn
+// ---------------------------------------------------------------------------
+export const RUNTIME_METRIC_EVENT_SCHEMA_VERSION = 2;
+/** Most events one ingest request carries (keeps a batch far below 256 KB). */
+export const RUNTIME_METRIC_MAX_BATCH = 50;
+/** Most distinct tools one turn event lists; further tools only count. */
+export const RUNTIME_METRIC_MAX_TOOLS = 32;
+/** Largest count or token number a metric carries (Postgres `integer`). */
+export const RUNTIME_METRIC_MAX_COUNT = 2_147_483_647;
+/**
+ * A technical label (model slug, build id, instance id): no whitespace, no
+ * quotes, at most 200 characters. Free text cannot pass.
+ */
+export const RUNTIME_METRIC_LABEL_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:/@+-]{0,199}$/;
+export const RUNTIME_PRICING_VERSION_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,63}$/;
+const metricLabel = z.string().regex(RUNTIME_METRIC_LABEL_PATTERN);
+const metricCount = z.number().int().nonnegative().max(RUNTIME_METRIC_MAX_COUNT);
+const callCount = z.number().int().nonnegative().max(10_000);
+const durationMs = z.number().int().nonnegative().max(86_400_000);
+export const RuntimeTurnStatusSchema = z.enum([
+    'completed',
+    'safety-stop',
+    'aborted',
+    'error',
+]);
+export const RuntimeTurnErrorCodeSchema = z.enum([
+    'model_error',
+    'pipeline_error',
+    'budget_exhausted',
+    'step_limit',
+]);
+export const RuntimeCostSourceSchema = z.enum(['provider-reported', 'price-table']);
+const ERROR_CODES_BY_STATUS = {
+    error: ['model_error', 'pipeline_error'],
+    'safety-stop': ['budget_exhausted', 'step_limit'],
+};
+/**
+ * Cost of a turn with its provenance. Unknown stays `null`, never 0: a
+ * provider-reported amount (OpenRouter `usage.cost`) or a price-table
+ * estimate that names its pricing version.
+ */
+export const RuntimeTurnCostSchema = z.object({
+    usd: z.number().finite().nonnegative().max(1_000_000).nullable(),
+    source: RuntimeCostSourceSchema.nullable(),
+    pricingVersion: z.string().regex(RUNTIME_PRICING_VERSION_PATTERN).nullable(),
+}).strict().superRefine((cost, context) => {
+    if ((cost.usd === null) !== (cost.source === null)) {
+        context.addIssue({
+            code: 'custom',
+            message: 'A cost amount and its source are known together or not at all',
+            path: ['source'],
+        });
+    }
+    if ((cost.source === 'price-table') !== (cost.pricingVersion !== null)) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Exactly a price-table cost names its pricing version',
+            path: ['pricingVersion'],
+        });
+    }
+});
+export const RuntimeTurnToolUsageSchema = z.object({
+    toolId: z.uuid(),
+    calls: callCount.min(1),
+    errors: callCount,
+}).strict().refine((usage) => usage.errors <= usage.calls, {
+    message: 'A tool cannot fail more often than it was called',
+    path: ['errors'],
+});
+export const TechnicalRuntimeEventV2Schema = z.object({
+    schemaVersion: z.literal(RUNTIME_METRIC_EVENT_SCHEMA_VERSION),
+    eventId: z.uuid(),
+    eventType: z.literal('turn.finished'),
+    occurredAt: z.iso.datetime({ offset: true }),
+    appId: z.uuid(),
+    environmentId: z.uuid(),
+    buildId: metricLabel.nullable(),
+    instanceId: metricLabel,
+    revisionId: z.uuid().nullable(),
+    model: metricLabel.nullable(),
+    status: RuntimeTurnStatusSchema,
+    errorCode: RuntimeTurnErrorCodeSchema.nullable(),
+    inputTokens: metricCount,
+    outputTokens: metricCount,
+    cost: RuntimeTurnCostSchema,
+    latency: z.object({
+        firstTokenMs: durationMs.nullable(),
+        totalMs: durationMs,
+    }).strict(),
+    toolCallCount: callCount,
+    toolErrorCount: callCount,
+    tools: z.array(RuntimeTurnToolUsageSchema).max(RUNTIME_METRIC_MAX_TOOLS),
+}).strict().superRefine((event, context) => {
+    const allowed = ERROR_CODES_BY_STATUS[event.status];
+    if (allowed ? !event.errorCode || !allowed.includes(event.errorCode) : event.errorCode !== null) {
+        context.addIssue({
+            code: 'custom',
+            message: 'The error code does not match the turn status',
+            path: ['errorCode'],
+        });
+    }
+    if (event.latency.firstTokenMs !== null
+        && event.latency.firstTokenMs > event.latency.totalMs) {
+        context.addIssue({
+            code: 'custom',
+            message: 'The first token cannot arrive after the turn ended',
+            path: ['latency', 'firstTokenMs'],
+        });
+    }
+    if (event.toolErrorCount > event.toolCallCount) {
+        context.addIssue({
+            code: 'custom',
+            message: 'A turn cannot have more failed than started tool calls',
+            path: ['toolErrorCount'],
+        });
+    }
+    const toolIds = event.tools.map((tool) => tool.toolId);
+    if (new Set(toolIds).size !== toolIds.length) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Each tool is listed once',
+            path: ['tools'],
+        });
+    }
+    const listedCalls = event.tools.reduce((sum, tool) => sum + tool.calls, 0);
+    const listedErrors = event.tools.reduce((sum, tool) => sum + tool.errors, 0);
+    if (listedCalls > event.toolCallCount || listedErrors > event.toolErrorCount) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Listed tools cannot exceed the turn totals',
+            path: ['tools'],
+        });
+    }
+    const forbidden = findForbiddenPlatformContentPath(event);
+    if (forbidden) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Runtime metric events must not contain content or credentials',
+            path: forbidden,
+        });
+    }
+});
+/** Statuses of an endpoint that refused a call its tool schema accepted. */
+export const TOOL_CONTRACT_REJECTED_STATUSES = [400, 422];
+/**
+ * An endpoint refused a call that passed the tool's input schema (spec 4.7):
+ * the contract the model saw is wrong, so the tool belongs on the next work
+ * list or managed job. Content-free: tool, schema version and status, never
+ * arguments, response or message.
+ */
+export const ToolContractRejectedEventSchema = z.object({
+    schemaVersion: z.literal(RUNTIME_METRIC_EVENT_SCHEMA_VERSION),
+    eventId: z.uuid(),
+    eventType: z.literal('tool_contract_rejected'),
+    occurredAt: z.iso.datetime({ offset: true }),
+    appId: z.uuid(),
+    environmentId: z.uuid(),
+    buildId: metricLabel.nullable(),
+    instanceId: metricLabel,
+    revisionId: z.uuid().nullable(),
+    toolId: z.uuid(),
+    /** The manifest's digest of the input schema the call passed (same alphabet as the manifest). */
+    inputSchemaDigest: z.string().regex(/^sha256:[A-Za-z0-9+/=_-]{1,88}$/),
+    httpStatus: z.union([z.literal(400), z.literal(422)]),
+}).strict().superRefine((event, context) => {
+    const forbidden = findForbiddenPlatformContentPath(event);
+    if (forbidden) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Runtime metric events must not contain content or credentials',
+            path: forbidden,
+        });
+    }
+});
+/** Every content-free metric event of the runtime: finished turns and contract rejections. */
+export const RuntimeMetricEventSchema = z.discriminatedUnion('eventType', [
+    TechnicalRuntimeEventV2Schema,
+    ToolContractRejectedEventSchema,
+]);
+/**
+ * Body of `POST /v1/runtime/apps/:appId/environments/:environmentId/metrics/events`.
+ * One batch carries one event type, so a Platform that does not know a newer
+ * type refuses only that batch and keeps receiving turns.
+ */
+export const TechnicalRuntimeEventBatchSchema = z.object({
+    schemaVersion: z.literal(RUNTIME_METRIC_EVENT_SCHEMA_VERSION),
+    events: z.array(RuntimeMetricEventSchema).min(1).max(RUNTIME_METRIC_MAX_BATCH),
+}).strict().refine((batch) => new Set(batch.events.map((event) => event.eventType)).size === 1, {
+    message: 'A batch carries one event type',
+    path: ['events'],
+});
+//# sourceMappingURL=events.js.map

package/dist/contracts/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/contracts/events.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,wBAAwB,EACxB,gCAAgC,GACjC,MAAM,uBAAuB,CAAC;AAE/B,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,IAAI,EAAE;IAClB,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE;IACrB,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE;IACvB,eAAe,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACpC,gBAAgB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACrC,kBAAkB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IACvC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxD,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC3C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QAC5C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;KAC/D,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtB,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACpE,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,2EAA2E;YACpF,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,8EAA8E;AAC9E,wEAAwE;AACxE,8EAA8E;AAE9E,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC;AACrD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAC3C,2EAA2E;AAC3E,MAAM,CAAC,MAAM,wBAAwB,GAAG,aAAa,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,wCAAwC,CAAC;AACrF,MAAM,CAAC,MAAM,+BAA+B,GAAG,oCAAoC,CAAC;AAEpF,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;AACnE,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AACjF,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC7D,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAElE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5C,WAAW;IACX,aAAa;IACb,SAAS;IACT,OAAO;CACR,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC;IAC/C,aAAa;IACb,gBAAgB;IAChB,kBAAkB;IAClB,YAAY;CACb,CAAC,CAAC;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,aAAa,CAAC,CAAC,CAAC;AAEpF,MAAM,qBAAqB,GAGtB;IACH,KAAK,EAAE,CAAC,aAAa,EAAE,gBAAgB,CAAC;IACxC,aAAa,EAAE,CAAC,kBAAkB,EAAE,YAAY,CAAC;CAClD,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;IAChE,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC,QAAQ,EAAE;CAC7E,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;IACxC,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,+DAA+D;YACxE,IAAI,EAAE,CAAC,QAAQ,CAAC;SACjB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,sDAAsD;YAC/D,IAAI,EAAE,CAAC,gBAAgB,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;IAChB,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,SAAS;CAClB,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,EAAE;IACzD,OAAO,EAAE,kDAAkD;IAC3D,IAAI,EAAE,CAAC,QAAQ,CAAC;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE;IACvB,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,WAAW;IACvB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,uBAAuB;IAC/B,SAAS,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IAChD,WAAW,EAAE,WAAW;IACxB,YAAY,EAAE,WAAW;IACzB,IAAI,EAAE,qBAAqB;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,YAAY,EAAE,UAAU,CAAC,QAAQ,EAAE;QACnC,OAAO,EAAE,UAAU;KACpB,CAAC,CAAC,MAAM,EAAE;IACX,aAAa,EAAE,SAAS;IACxB,cAAc,EAAE,SAAS;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;CACzE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,MAAM,OAAO,GAAG,qBAAqB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAChG,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,+CAA+C;YACxD,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IACD,IACE,KAAK,CAAC,OAAO,CAAC,YAAY,KAAK,IAAI;WAChC,KAAK,CAAC,OAAO,CAAC,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,EACrD,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,oDAAoD;YAC7D,IAAI,EAAE,CAAC,SAAS,EAAE,cAAc,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QAC/C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,wDAAwD;YACjE,IAAI,EAAE,CAAC,gBAAgB,CAAC;SACzB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvD,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QAC7C,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,0BAA0B;YACnC,IAAI,EAAE,CAAC,OAAO,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC3E,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,WAAW,GAAG,KAAK,CAAC,aAAa,IAAI,YAAY,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7E,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,4CAA4C;YACrD,IAAI,EAAE,CAAC,OAAO,CAAC;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,SAAS,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,+DAA+D;YACxE,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AASH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,GAAG,EAAE,GAAG,CAAU,CAAC;AAEnE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC,MAAM,CAAC;IACtD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC;IAC7D,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE;IACjB,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC;IAC9C,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE;IACf,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE;IACvB,OAAO,EAAE,WAAW,CAAC,QAAQ,EAAE;IAC/B,UAAU,EAAE,WAAW;IACvB,UAAU,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE;IAChB,iGAAiG;IACjG,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iCAAiC,CAAC;IACtE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;CACtD,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,MAAM,SAAS,GAAG,gCAAgC,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,+DAA+D;YACxE,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAIH,8FAA8F;AAC9F,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,kBAAkB,CAAC,WAAW,EAAE;IACxE,6BAA6B;IAC7B,+BAA+B;CAChC,CAAC,CAAC;AAIH;;;;GAIG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,mCAAmC,CAAC;IAC7D,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC;CAC/E,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE;IAC9F,OAAO,EAAE,gCAAgC;IACzC,IAAI,EAAE,CAAC,QAAQ,CAAC;CACjB,CAAC,CAAC"}

package/dist/contracts/index.d.ts

@@ -0,0 +1,18 @@
+export { DelegationBudgetSchema, ExecutionBudgetSchema, PrincipalSchema, PromptPinSchema, RuntimeEnvironmentNameSchema, RuntimeEnvironmentSchema, } from './runtime.js';
+export type { DelegationBudget, ExecutionBudget, Principal, PromptPin, RuntimeEnvironment, } from './runtime.js';
+export { AgentRevisionSchema, ExecutionLeaseSchema, LocalBindingReferenceSchema, ManifestRevisionSchema, ManifestToolSchema, ToolPresentationSchema, RevisionSignatureSchema, RuntimeRevisionEnvelopeSchema, RuntimeDeploymentBundleSchema, RuntimeSyncBundleSchema, RuntimePolicyRevisionSchema, RuntimeToolPolicySchema, SecurityRevocationSchema, ToolRiskClassSchema, } from './revisions.js';
+export type { AgentRevision, ExecutionLease, LocalBindingReference, ManifestRevision, ManifestTool, RevisionSignature, RuntimeRevisionEnvelope, RuntimeDeploymentBundle, RuntimeSyncBundle, RuntimePolicyRevision, RuntimeToolPolicy, SecurityRevocation, ToolPresentation, ToolRiskClass, } from './revisions.js';
+export { RUNTIME_METRIC_EVENT_SCHEMA_VERSION, RUNTIME_METRIC_LABEL_PATTERN, RUNTIME_METRIC_MAX_BATCH, RUNTIME_METRIC_MAX_COUNT, RUNTIME_METRIC_MAX_TOOLS, RUNTIME_PRICING_VERSION_PATTERN, RuntimeCostSourceSchema, RuntimeTurnCostSchema, RuntimeTurnErrorCodeSchema, RuntimeTurnStatusSchema, RuntimeTurnToolUsageSchema, RuntimeMetricEventSchema, TechnicalRuntimeEventBatchSchema, TechnicalRuntimeEventSchema, TechnicalRuntimeEventV2Schema, TOOL_CONTRACT_REJECTED_STATUSES, ToolContractRejectedEventSchema, } from './events.js';
+export type { RuntimeCostSource, RuntimeMetricEvent, ToolContractRejectedEvent, RuntimeTurnCost, RuntimeTurnErrorCode, RuntimeTurnStatus, RuntimeTurnToolUsage, TechnicalRuntimeEvent, TechnicalRuntimeEventBatch, TechnicalRuntimeEventV2, } from './events.js';
+export { APP_SETUP_EXCLUSION_LIMITS, AppSetupArtifactSchema, AppSetupAssessmentModeSchema, AppSetupExclusionSchema, AppSetupOperationGroupSchema, AppSetupStatusSchema, AppSetupToolCandidateSchema, AppSetupToolProvenanceSchema, assertAppSetupSemanticParity, } from './app-setup.js';
+export { classifyToolSemanticChange } from './semantic-change.js';
+export type { SemanticChange, SemanticChangeClassification, ToolSemanticState, } from './semantic-change.js';
+export { TOOL_POLICY_RULES_VERSION, ToolOverrideDeltaSchema, ToolPolicyEntrySchema, ToolPolicyFileSchema, ToolPolicyPinSchema, confirmationFloor, confirmationRelaxationOutcome, deriveToolPolicyDefaults, intersectAllowedRoles, mostRestrictiveRiskClass, parseToolPolicyFile, platformMayRelaxConfirmation, resolveToolPolicy, riskTier, } from './tool-policy.js';
+export type { AllowedRolesIntersection, ConfirmationRelaxationOutcome, DeclaredEffect, EffectiveToolPolicy, PolicyOrigin, ResolveToolPolicyInput, ResolveToolPolicyResult, RiskTier, ToolPolicyDefaults, ToolPolicyDefaultsInput, ToolOverrideDelta, ToolPolicyEntry, ToolPolicyFile, ToolPolicyWarningCode, } from './tool-policy.js';
+export type { AppSetupArtifact, AppSetupAssessmentMode, AppSetupExclusion, AppSetupOperationGroup, AppSetupStatus, AppSetupToolCandidate, AppSetupToolProvenance, } from './app-setup.js';
+export { canonicalPromptBundleJson, PromptBundleSchema, PromptRevisionMetadataSchema, SignedPromptBindingSchema, } from './prompt-bundle.js';
+export type { PromptBundle, PromptRevisionMetadata, SignedPromptBinding, } from './prompt-bundle.js';
+export { PlatformPromptRevisionSchema, } from './platform-prompt-revision.js';
+export type { PlatformPromptRevision, } from './platform-prompt-revision.js';
+export { PairingStartRequestSchema, PairingStartResponseSchema, PairingTokenResultSchema, PlatformConnectionDescriptorSchema, } from './platform-connection.js';
+export type { PairingStartRequest, PairingStartResponse, PairingTokenResult, PlatformConnectionDescriptor, } from './platform-connection.js';

package/dist/contracts/index.js

@@ -0,0 +1,10 @@
+export { DelegationBudgetSchema, ExecutionBudgetSchema, PrincipalSchema, PromptPinSchema, RuntimeEnvironmentNameSchema, RuntimeEnvironmentSchema, } from './runtime.js';
+export { AgentRevisionSchema, ExecutionLeaseSchema, LocalBindingReferenceSchema, ManifestRevisionSchema, ManifestToolSchema, ToolPresentationSchema, RevisionSignatureSchema, RuntimeRevisionEnvelopeSchema, RuntimeDeploymentBundleSchema, RuntimeSyncBundleSchema, RuntimePolicyRevisionSchema, RuntimeToolPolicySchema, SecurityRevocationSchema, ToolRiskClassSchema, } from './revisions.js';
+export { RUNTIME_METRIC_EVENT_SCHEMA_VERSION, RUNTIME_METRIC_LABEL_PATTERN, RUNTIME_METRIC_MAX_BATCH, RUNTIME_METRIC_MAX_COUNT, RUNTIME_METRIC_MAX_TOOLS, RUNTIME_PRICING_VERSION_PATTERN, RuntimeCostSourceSchema, RuntimeTurnCostSchema, RuntimeTurnErrorCodeSchema, RuntimeTurnStatusSchema, RuntimeTurnToolUsageSchema, RuntimeMetricEventSchema, TechnicalRuntimeEventBatchSchema, TechnicalRuntimeEventSchema, TechnicalRuntimeEventV2Schema, TOOL_CONTRACT_REJECTED_STATUSES, ToolContractRejectedEventSchema, } from './events.js';
+export { APP_SETUP_EXCLUSION_LIMITS, AppSetupArtifactSchema, AppSetupAssessmentModeSchema, AppSetupExclusionSchema, AppSetupOperationGroupSchema, AppSetupStatusSchema, AppSetupToolCandidateSchema, AppSetupToolProvenanceSchema, assertAppSetupSemanticParity, } from './app-setup.js';
+export { classifyToolSemanticChange } from './semantic-change.js';
+export { TOOL_POLICY_RULES_VERSION, ToolOverrideDeltaSchema, ToolPolicyEntrySchema, ToolPolicyFileSchema, ToolPolicyPinSchema, confirmationFloor, confirmationRelaxationOutcome, deriveToolPolicyDefaults, intersectAllowedRoles, mostRestrictiveRiskClass, parseToolPolicyFile, platformMayRelaxConfirmation, resolveToolPolicy, riskTier, } from './tool-policy.js';
+export { canonicalPromptBundleJson, PromptBundleSchema, PromptRevisionMetadataSchema, SignedPromptBindingSchema, } from './prompt-bundle.js';
+export { PlatformPromptRevisionSchema, } from './platform-prompt-revision.js';
+export { PairingStartRequestSchema, PairingStartResponseSchema, PairingTokenResultSchema, PlatformConnectionDescriptorSchema, } from './platform-connection.js';
+//# sourceMappingURL=index.js.map

package/dist/contracts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/contracts/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,4BAA4B,EAC5B,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAStB,OAAO,EACL,mBAAmB,EACnB,oBAAoB,EACpB,2BAA2B,EAC3B,sBAAsB,EACtB,kBAAkB,EAClB,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,6BAA6B,EAC7B,uBAAuB,EACvB,2BAA2B,EAC3B,uBAAuB,EACvB,wBAAwB,EACxB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AAkBxB,OAAO,EACL,mCAAmC,EACnC,4BAA4B,EAC5B,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,+BAA+B,EAC/B,uBAAuB,EACvB,qBAAqB,EACrB,0BAA0B,EAC1B,uBAAuB,EACvB,0BAA0B,EAC1B,wBAAwB,EACxB,gCAAgC,EAChC,2BAA2B,EAC3B,6BAA6B,EAC7B,+BAA+B,EAC/B,+BAA+B,GAChC,MAAM,aAAa,CAAC;AAcrB,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,4BAA4B,EAC5B,uBAAuB,EACvB,4BAA4B,EAC5B,oBAAoB,EACpB,2BAA2B,EAC3B,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAOlE,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,iBAAiB,EACjB,6BAA6B,EAC7B,wBAAwB,EACxB,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,EACnB,4BAA4B,EAC5B,iBAAiB,EACjB,QAAQ,GACT,MAAM,kBAAkB,CAAC;AA2B1B,OAAO,EACL,yBAAyB,EACzB,kBAAkB,EAClB,4BAA4B,EAC5B,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAO5B,OAAO,EACL,4BAA4B,GAC7B,MAAM,+BAA+B,CAAC;AAKvC,OAAO,EACL,yBAAyB,EACzB,0BAA0B,EAC1B,wBAAwB,EACxB,kCAAkC,GACnC,MAAM,0BAA0B,CAAC"}