glirastes 0.3.2 → 0.5.0

package/dist/contracts/revisions.js

@@ -0,0 +1,298 @@
+import { z } from 'zod';
+import { ExecutionBudgetSchema } from './runtime.js';
+import { findForbiddenContentPath } from './content-boundary.js';
+import { ToolOverrideDeltaSchema, ToolRiskClassSchema } from './tool-policy-entry.js';
+export { ToolRiskClassSchema } from './tool-policy-entry.js';
+const uuid = z.uuid();
+const identifier = z.string().trim().min(1).max(200);
+const digest = z.string().regex(/^sha256:[A-Za-z0-9+/=_-]+$/);
+const publishedAt = z.iso.datetime({ offset: true });
+export const RevisionSignatureSchema = z.object({
+    algorithm: z.literal('Ed25519'),
+    keyId: identifier,
+    value: z.string().trim().min(8).max(1_024),
+}).strict();
+export const LocalBindingReferenceSchema = z.object({
+    bindingId: identifier,
+    kind: z.enum(['model', 'tool', 'prompt', 'store']),
+    providerAlias: identifier.optional(),
+}).strict();
+/**
+ * Curated, locale-specific labels for operator-facing surfaces. These values
+ * describe the operation; they never replace policy or execution checks.
+ */
+export const ToolPresentationSchema = z.object({
+    locale: z.string().trim().min(2).max(35)
+        .regex(/^[A-Za-z0-9]+(?:-[A-Za-z0-9]+)*$/),
+    singular: z.string().trim().min(1).max(200),
+    plural: z.string().trim().min(1).max(200),
+    approval: z.string().trim().min(1).max(500),
+}).strict();
+const ManifestToolBaseSchema = z.object({
+    toolId: uuid,
+    sourceFingerprint: digest,
+    name: identifier,
+    description: z.string().trim().min(1).max(4_000),
+    modelName: z.string().regex(/^[A-Za-z0-9_-]+$/).max(200).optional(),
+    module: identifier.optional(),
+    sharedWith: z.array(identifier).max(50).optional(),
+    usageHints: z.array(z.string().trim().min(1).max(500)).min(1).max(20)
+        .optional(),
+    presentation: ToolPresentationSchema.optional(),
+    riskClass: ToolRiskClassSchema,
+    enabled: z.boolean(),
+    tombstone: z.boolean(),
+    inputSchemaDigest: digest,
+    outputSchemaDigest: digest,
+});
+const ManifestEndpointToolSchema = ManifestToolBaseSchema.extend({
+    executionKind: z.literal('endpoint'),
+    method: z.enum(['GET', 'HEAD', 'POST', 'PUT', 'PATCH', 'DELETE']),
+    path: z.string().startsWith('/').max(2_048),
+    authBindingRef: identifier,
+}).strict();
+const ManifestUiToolSchema = ManifestToolBaseSchema.extend({
+    executionKind: z.literal('ui'),
+    actionBindingRef: identifier,
+}).strict();
+export const ManifestToolSchema = z.discriminatedUnion('executionKind', [
+    ManifestEndpointToolSchema,
+    ManifestUiToolSchema,
+]).superRefine((tool, context) => {
+    if (tool.tombstone && tool.enabled) {
+        context.addIssue({
+            code: 'custom',
+            message: 'A tombstoned tool cannot remain enabled',
+            path: ['enabled'],
+        });
+    }
+});
+export const ManifestRevisionSchema = z.object({
+    revisionId: uuid,
+    revision: z.number().int().positive(),
+    tenantId: uuid,
+    targetAppId: uuid,
+    environmentId: uuid,
+    sourceDigest: digest,
+    tools: z.array(ManifestToolSchema),
+    publishedAt,
+    signature: RevisionSignatureSchema,
+}).strict();
+export const AgentRevisionSchema = z.object({
+    revisionId: uuid,
+    revision: z.number().int().positive(),
+    agentId: uuid,
+    tenantId: uuid,
+    name: z.string().trim().min(1).max(200),
+    objective: z.string().trim().min(1).max(4_000),
+    modelAlias: identifier,
+    promptBindingRef: identifier,
+    toolAllowlist: z.array(uuid),
+    budget: ExecutionBudgetSchema,
+    publishedAt,
+    signature: RevisionSignatureSchema,
+}).strict();
+/**
+ * The v2 app-scoped planner payload the Platform publishes from a setup run.
+ * It references a budget profile instead of carrying a concrete budget; the
+ * concrete budget is pinned by the policy revision of the same deployment.
+ */
+export const PlannerRevisionPayloadSchema = z.object({
+    schemaVersion: z.literal(1),
+    plannerId: identifier,
+    modelBindingRef: identifier,
+    promptBindingRef: identifier,
+    budgetProfileRef: identifier,
+    toolAllowlist: z.array(uuid),
+}).strict();
+export const RuntimeToolPolicySchema = z.object({
+    toolId: uuid,
+    enabled: z.boolean(),
+    riskClass: ToolRiskClassSchema,
+    requiresApproval: z.boolean(),
+    allowedRoles: z.array(identifier).max(100),
+}).strict();
+export const RuntimePolicyRevisionSchema = z.object({
+    revisionId: uuid,
+    revision: z.number().int().positive(),
+    tenantId: uuid,
+    environmentId: uuid,
+    budget: ExecutionBudgetSchema,
+    toolPolicies: z.array(RuntimeToolPolicySchema),
+    /**
+     * Signed Platform decisions as deltas (P08b shared contract item 2): only
+     * fields an operator decided, one entry per tool. Absent on revisions
+     * without decisions, which therefore keep their bytes.
+     */
+    toolOverrides: z.array(ToolOverrideDeltaSchema).max(5_000).default([])
+        .superRefine((deltas, context) => {
+        const seen = new Set();
+        deltas.forEach((delta, index) => {
+            if (seen.has(delta.toolId)) {
+                context.addIssue({
+                    code: 'custom',
+                    message: 'A tool has more than one Platform decision',
+                    path: [index, 'toolId'],
+                });
+            }
+            seen.add(delta.toolId);
+        });
+    }),
+    publishedAt,
+    signature: RevisionSignatureSchema,
+}).strict();
+export const SecurityRevocationSchema = z.object({
+    revocationId: uuid,
+    environmentId: uuid,
+    effectiveAt: publishedAt,
+    reasonCode: identifier,
+    toolIds: z.array(uuid).default([]),
+    agentRevisionIds: z.array(uuid).default([]),
+    policyRevisionIds: z.array(uuid).default([]),
+    signature: RevisionSignatureSchema,
+}).strict();
+export const ExecutionLeaseSchema = z.object({
+    schemaVersion: z.literal(1),
+    leaseId: uuid,
+    tenantId: uuid,
+    targetAppId: uuid,
+    environmentId: uuid,
+    runnerId: uuid,
+    deploymentId: uuid,
+    agentRevisionId: uuid,
+    triggerId: identifier,
+    allowedRiskClasses: z.array(ToolRiskClassSchema).min(1),
+    budget: ExecutionBudgetSchema,
+    issuedAt: publishedAt,
+    expiresAt: publishedAt,
+    signature: RevisionSignatureSchema,
+}).strict().superRefine((lease, context) => {
+    if (Date.parse(lease.expiresAt) <= Date.parse(lease.issuedAt)) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Execution lease must expire after it is issued',
+            path: ['expiresAt'],
+        });
+    }
+});
+export const RuntimeRevisionEnvelopeSchema = z.object({
+    schemaVersion: z.literal(1),
+    revisionId: uuid,
+    revisionType: z.enum(['tool', 'manifest', 'agent', 'policy', 'config']),
+    revision: z.number().int().positive(),
+    tenantId: uuid,
+    targetAppId: uuid,
+    environmentId: uuid.optional(),
+    subjectId: uuid.optional(),
+    contentHash: digest,
+    payload: z.unknown(),
+    publishedAt,
+    signature: RevisionSignatureSchema,
+}).strict().superRefine((revisionEnvelope, context) => {
+    if (['manifest', 'policy'].includes(revisionEnvelope.revisionType)
+        && !revisionEnvelope.environmentId) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Environment-scoped revisions require environmentId',
+            path: ['environmentId'],
+        });
+    }
+    if (['tool', 'agent'].includes(revisionEnvelope.revisionType)
+        && !revisionEnvelope.subjectId) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Subject-scoped revisions require subjectId',
+            path: ['subjectId'],
+        });
+    }
+    const forbiddenPath = findForbiddenContentPath(revisionEnvelope.payload, ['payload']);
+    if (forbiddenPath) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Runtime revision payload contains raw content or credentials',
+            path: forbiddenPath,
+        });
+    }
+});
+/**
+ * Signed desired-state pin for one prompt bundle. The Platform signs the
+ * binding; the bundle contents stay in the customer-controlled registry and are
+ * proven by the content digest. Defined here (not in prompt-bundle.ts) because
+ * the deployment bundle below carries it and prompt-bundle already imports from
+ * this module.
+ */
+export const SignedPromptBindingSchema = z.object({
+    schemaVersion: z.literal(1),
+    appId: uuid,
+    revisionId: uuid,
+    revision: z.number().int().positive(),
+    bundleDigest: digest,
+    artifactRef: z.string().trim().min(1).max(2_048),
+    activatedAt: publishedAt,
+    signature: RevisionSignatureSchema,
+}).strict();
+const DEPLOYMENT_BINDING_FIELDS = [
+    'configRevision',
+    'runtimeDigest',
+    'promptDigest',
+    'promptBinding',
+];
+export const RuntimeDeploymentBundleSchema = z.object({
+    deploymentId: uuid,
+    environmentId: uuid,
+    status: z.enum(['pending', 'active']),
+    rolloutMode: z.enum(['stable', 'canary']),
+    targetPercentage: z.number().int().min(1).max(100),
+    pinned: z.boolean(),
+    healthStatus: z.enum(['unknown', 'healthy', 'degraded', 'unhealthy']),
+    agentRevision: RuntimeRevisionEnvelopeSchema.refine((revision) => revision.revisionType === 'agent', 'Expected agent revision'),
+    manifestRevision: RuntimeRevisionEnvelopeSchema.refine((revision) => revision.revisionType === 'manifest', 'Expected manifest revision'),
+    policyRevision: RuntimeRevisionEnvelopeSchema.refine((revision) => revision.revisionType === 'policy', 'Expected policy revision'),
+    // Artifact bindings: present on every deployment created since the Platform
+    // binds runtime and prompt artifacts; absent on the transitional shape.
+    configRevision: RuntimeRevisionEnvelopeSchema.refine((revision) => revision.revisionType === 'config', 'Expected config revision').optional(),
+    runtimeDigest: digest.optional(),
+    promptDigest: digest.optional(),
+    promptBinding: SignedPromptBindingSchema.optional(),
+    updatedAt: publishedAt,
+}).strict().superRefine((deployment, context) => {
+    // The server emits all four binding fields or none. A partial set means
+    // something was stripped or tampered with and must not pass as either shape.
+    const bindingsPresent = DEPLOYMENT_BINDING_FIELDS
+        .filter((field) => deployment[field] !== undefined);
+    if (bindingsPresent.length > 0
+        && bindingsPresent.length < DEPLOYMENT_BINDING_FIELDS.length) {
+        for (const field of DEPLOYMENT_BINDING_FIELDS) {
+            if (deployment[field] === undefined) {
+                context.addIssue({
+                    code: 'custom',
+                    message: 'Deployment artifact bindings are all-or-nothing',
+                    path: [field],
+                });
+            }
+        }
+    }
+    if (deployment.rolloutMode === 'stable'
+        && deployment.targetPercentage !== 100) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Stable rollout must target 100 percent',
+            path: ['targetPercentage'],
+        });
+    }
+    if (deployment.rolloutMode === 'canary'
+        && deployment.targetPercentage >= 100) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Canary rollout must target less than 100 percent',
+            path: ['targetPercentage'],
+        });
+    }
+});
+export const RuntimeSyncBundleSchema = z.object({
+    cursor: publishedAt,
+    activeSnapshotComplete: z.literal(true),
+    deployments: z.array(RuntimeDeploymentBundleSchema),
+    revocations: z.array(SecurityRevocationSchema),
+}).strict();
+//# sourceMappingURL=revisions.js.map

package/dist/contracts/revisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revisions.js","sourceRoot":"","sources":["../../src/contracts/revisions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAEtF,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACtB,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC;AAC9D,MAAM,WAAW,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAErD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC/B,KAAK,EAAE,UAAU;IACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;CAC3C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,SAAS,EAAE,UAAU;IACrB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClD,aAAa,EAAE,UAAU,CAAC,QAAQ,EAAE;CACrC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;SACrC,KAAK,CAAC,kCAAkC,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC5C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,IAAI;IACZ,iBAAiB,EAAE,MAAM;IACzB,IAAI,EAAE,UAAU;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACnE,MAAM,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC7B,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;SAClE,QAAQ,EAAE;IACb,YAAY,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,mBAAmB;IAC9B,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,iBAAiB,EAAE,MAAM;IACzB,kBAAkB,EAAE,MAAM;CAC3B,CAAC,CAAC;AAEH,MAAM,0BAA0B,GAAG,sBAAsB,CAAC,MAAM,CAAC;IAC/D,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC3C,cAAc,EAAE,UAAU;CAC3B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,sBAAsB,CAAC,MAAM,CAAC;IACzD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,gBAAgB,EAAE,UAAU;CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,eAAe,EAAE;IACtE,0BAA0B;IAC1B,oBAAoB;CACrB,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE;IAC/B,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,yCAAyC;YAClD,IAAI,EAAE,CAAC,SAAS,CAAC;SAClB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,IAAI;IACnB,YAAY,EAAE,MAAM;IACpB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;IAClC,WAAW;IACX,SAAS,EAAE,uBAAuB;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,IAAI;IACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAC9C,UAAU,EAAE,UAAU;IACtB,gBAAgB,EAAE,UAAU;IAC5B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IAC5B,MAAM,EAAE,qBAAqB;IAC7B,WAAW;IACX,SAAS,EAAE,uBAAuB;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,UAAU;IACrB,eAAe,EAAE,UAAU;IAC3B,gBAAgB,EAAE,UAAU;IAC5B,gBAAgB,EAAE,UAAU;IAC5B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;CAC7B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,IAAI;IACZ,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,SAAS,EAAE,mBAAmB;IAC9B,gBAAgB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC7B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CAC3C,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;IACnB,MAAM,EAAE,qBAAqB;IAC7B,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IAC9C;;;;OAIG;IACH,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;SACnE,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;QAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;YAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3B,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,4CAA4C;oBACrD,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC;iBACxB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IACJ,WAAW;IACX,SAAS,EAAE,uBAAuB;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IACnB,WAAW,EAAE,WAAW;IACxB,UAAU,EAAE,UAAU;IACtB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,SAAS,EAAE,uBAAuB;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,IAAI;IACnB,QAAQ,EAAE,IAAI;IACd,YAAY,EAAE,IAAI;IAClB,eAAe,EAAE,IAAI;IACrB,SAAS,EAAE,UAAU;IACrB,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvD,MAAM,EAAE,qBAAqB;IAC7B,QAAQ,EAAE,WAAW;IACrB,SAAS,EAAE,WAAW;IACtB,SAAS,EAAE,uBAAuB;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACzC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gDAAgD;YACzD,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,IAAI;IAChB,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,IAAI;IACjB,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE;IAC9B,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE;IAC1B,WAAW,EAAE,MAAM;IACnB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,WAAW;IACX,SAAS,EAAE,uBAAuB;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,gBAAgB,EAAE,OAAO,EAAE,EAAE;IACpD,IACE,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,YAAY,CAAC;WAC3D,CAAC,gBAAgB,CAAC,aAAa,EAClC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,oDAAoD;YAC7D,IAAI,EAAE,CAAC,eAAe,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;IACD,IACE,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC,YAAY,CAAC;WACtD,CAAC,gBAAgB,CAAC,SAAS,EAC9B,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,4CAA4C;YACrD,IAAI,EAAE,CAAC,WAAW,CAAC;SACpB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,aAAa,GAAG,wBAAwB,CAC5C,gBAAgB,CAAC,OAAO,EACxB,CAAC,SAAS,CAAC,CACZ,CAAC;IACF,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,8DAA8D;YACvE,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,IAAI;IACX,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,MAAM;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC;IAChD,WAAW,EAAE,WAAW;IACxB,SAAS,EAAE,uBAAuB;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,yBAAyB,GAAG;IAChC,gBAAgB;IAChB,eAAe;IACf,cAAc;IACd,eAAe;CACP,CAAC;AAEX,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,IAAI;IACnB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACrC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACzC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClD,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACrE,aAAa,EAAE,6BAA6B,CAAC,MAAM,CACjD,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,OAAO,EAC/C,yBAAyB,CAC1B;IACD,gBAAgB,EAAE,6BAA6B,CAAC,MAAM,CACpD,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,UAAU,EAClD,4BAA4B,CAC7B;IACD,cAAc,EAAE,6BAA6B,CAAC,MAAM,CAClD,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAChD,0BAA0B,CAC3B;IACD,4EAA4E;IAC5E,wEAAwE;IACxE,cAAc,EAAE,6BAA6B,CAAC,MAAM,CAClD,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,YAAY,KAAK,QAAQ,EAChD,0BAA0B,CAC3B,CAAC,QAAQ,EAAE;IACZ,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE;IAChC,YAAY,EAAE,MAAM,CAAC,QAAQ,EAAE;IAC/B,aAAa,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,WAAW;CACvB,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE;IAC9C,wEAAwE;IACxE,6EAA6E;IAC7E,MAAM,eAAe,GAAG,yBAAyB;SAC9C,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC;IACtD,IACE,eAAe,CAAC,MAAM,GAAG,CAAC;WACvB,eAAe,CAAC,MAAM,GAAG,yBAAyB,CAAC,MAAM,EAC5D,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,yBAAyB,EAAE,CAAC;YAC9C,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC;gBACpC,OAAO,CAAC,QAAQ,CAAC;oBACf,IAAI,EAAE,QAAQ;oBACd,OAAO,EAAE,iDAAiD;oBAC1D,IAAI,EAAE,CAAC,KAAK,CAAC;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,IACE,UAAU,CAAC,WAAW,KAAK,QAAQ;WAChC,UAAU,CAAC,gBAAgB,KAAK,GAAG,EACtC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,wCAAwC;YACjD,IAAI,EAAE,CAAC,kBAAkB,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;IACD,IACE,UAAU,CAAC,WAAW,KAAK,QAAQ;WAChC,UAAU,CAAC,gBAAgB,IAAI,GAAG,EACrC,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,kDAAkD;YAC3D,IAAI,EAAE,CAAC,kBAAkB,CAAC;SAC3B,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,WAAW;IACnB,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC;IACnD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC;CAC/C,CAAC,CAAC,MAAM,EAAE,CAAC"}

package/dist/contracts/runtime.d.ts

@@ -0,0 +1,55 @@
+import { z } from 'zod';
+export declare const RuntimeEnvironmentNameSchema: z.ZodString;
+export declare const RuntimeEnvironmentSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    tenantId: z.ZodUUID;
+    targetAppId: z.ZodUUID;
+    name: z.ZodString;
+    status: z.ZodEnum<{
+        disconnected: "disconnected";
+        connecting: "connecting";
+        connected: "connected";
+        degraded: "degraded";
+        disabled: "disabled";
+    }>;
+}, z.core.$strict>;
+export declare const PrincipalSchema: z.ZodObject<{
+    subjectId: z.ZodString;
+    tenantId: z.ZodString;
+    roles: z.ZodArray<z.ZodString>;
+    attributes: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strict>;
+/**
+ * Immutable prompt-revision identity pinned for the lifetime of one turn.
+ */
+export declare const PromptPinSchema: z.ZodObject<{
+    revisionId: z.ZodUUID;
+    revision: z.ZodNumber;
+    bundleDigest: z.ZodString;
+}, z.core.$strict>;
+export declare const DelegationBudgetSchema: z.ZodObject<{
+    maxDepth: z.ZodNumber;
+    maxBreadth: z.ZodNumber;
+    sharedBudget: z.ZodBoolean;
+}, z.core.$strict>;
+export declare const ExecutionBudgetSchema: z.ZodObject<{
+    maxModelSteps: z.ZodNumber;
+    maxToolCalls: z.ZodNumber;
+    totalTimeoutMs: z.ZodNumber;
+    toolTimeoutMs: z.ZodNumber;
+    maxInputTokens: z.ZodNumber;
+    maxOutputTokens: z.ZodNumber;
+    maxEstimatedCostUsd: z.ZodNumber;
+    maxRepeatedFingerprint: z.ZodNumber;
+    maxConsecutiveErrors: z.ZodNumber;
+    delegation: z.ZodObject<{
+        maxDepth: z.ZodNumber;
+        maxBreadth: z.ZodNumber;
+        sharedBudget: z.ZodBoolean;
+    }, z.core.$strict>;
+}, z.core.$strict>;
+export type RuntimeEnvironment = z.infer<typeof RuntimeEnvironmentSchema>;
+export type Principal = z.infer<typeof PrincipalSchema>;
+export type DelegationBudget = z.infer<typeof DelegationBudgetSchema>;
+export type ExecutionBudget = z.infer<typeof ExecutionBudgetSchema>;
+export type PromptPin = z.infer<typeof PromptPinSchema>;

package/dist/contracts/runtime.js

@@ -0,0 +1,65 @@
+import { z } from 'zod';
+import { findForbiddenContentPath } from './content-boundary.js';
+const identifier = z.string().trim().min(1).max(200);
+const uuid = z.uuid();
+export const RuntimeEnvironmentNameSchema = z.string()
+    .trim()
+    .min(1)
+    .max(64)
+    .regex(/^[a-z][a-z0-9-]*$/);
+export const RuntimeEnvironmentSchema = z.object({
+    id: uuid,
+    tenantId: uuid,
+    targetAppId: uuid,
+    name: RuntimeEnvironmentNameSchema,
+    status: z.enum(['disconnected', 'connecting', 'connected', 'degraded', 'disabled']),
+}).strict();
+export const PrincipalSchema = z.object({
+    subjectId: identifier,
+    tenantId: identifier,
+    roles: z.array(identifier).max(100),
+    attributes: z.record(z.string(), z.unknown()).default({}),
+}).strict().superRefine((principal, context) => {
+    const path = findForbiddenContentPath(principal.attributes, ['attributes']);
+    if (path) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Principal attributes must not contain raw credentials',
+            path,
+        });
+    }
+});
+/**
+ * Immutable prompt-revision identity pinned for the lifetime of one turn.
+ */
+export const PromptPinSchema = z.object({
+    revisionId: uuid,
+    revision: z.number().int().positive(),
+    bundleDigest: z.string().regex(/^sha256:(?:[A-Za-z0-9_-]{43}|[A-Za-z0-9+/]{43}=)$/),
+}).strict();
+export const DelegationBudgetSchema = z.object({
+    maxDepth: z.number().int().min(0).max(32),
+    maxBreadth: z.number().int().min(0).max(128),
+    sharedBudget: z.boolean(),
+}).strict();
+export const ExecutionBudgetSchema = z.object({
+    maxModelSteps: z.number().int().positive(),
+    maxToolCalls: z.number().int().positive(),
+    totalTimeoutMs: z.number().int().positive(),
+    toolTimeoutMs: z.number().int().positive(),
+    maxInputTokens: z.number().int().positive(),
+    maxOutputTokens: z.number().int().positive(),
+    maxEstimatedCostUsd: z.number().finite().nonnegative(),
+    maxRepeatedFingerprint: z.number().int().positive(),
+    maxConsecutiveErrors: z.number().int().positive(),
+    delegation: DelegationBudgetSchema,
+}).strict().superRefine((budget, context) => {
+    if (budget.toolTimeoutMs > budget.totalTimeoutMs) {
+        context.addIssue({
+            code: 'custom',
+            message: 'Tool timeout cannot exceed total timeout',
+            path: ['toolTimeoutMs'],
+        });
+    }
+});
+//# sourceMappingURL=runtime.js.map

package/dist/contracts/runtime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/contracts/runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAEjE,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrD,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAEtB,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,EAAE;KACnD,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,EAAE,CAAC;KACP,KAAK,CAAC,mBAAmB,CAAC,CAAC;AAE9B,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,EAAE,EAAE,IAAI;IACR,QAAQ,EAAE,IAAI;IACd,WAAW,EAAE,IAAI;IACjB,IAAI,EAAE,4BAA4B;IAClC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;CACpF,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,SAAS,EAAE,UAAU;IACrB,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1D,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IAC7C,MAAM,IAAI,GAAG,wBAAwB,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5E,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uDAAuD;YAChE,IAAI;SACL,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAC5B,mDAAmD,CACpD;CACF,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACzC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC5C,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;CAC1B,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACzC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC3C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC5C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACtD,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACnD,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACjD,UAAU,EAAE,sBAAsB;CACnC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;IAC1C,IAAI,MAAM,CAAC,aAAa,GAAG,MAAM,CAAC,cAAc,EAAE,CAAC;QACjD,OAAO,CAAC,QAAQ,CAAC;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,0CAA0C;YACnD,IAAI,EAAE,CAAC,eAAe,CAAC;SACxB,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/contracts/semantic-change.d.ts

@@ -0,0 +1,27 @@
+import { type ToolPresentation, type ToolRiskClass } from './revisions.js';
+export type SemanticChangeClassification = 'unchanged' | 'added' | 'hardening' | 'neutral' | 'loosening';
+export interface ToolSemanticState {
+    toolId: string;
+    enabled: boolean;
+    requiresApproval: boolean;
+    riskClass: ToolRiskClass;
+    allowedRoles?: ReadonlyArray<string>;
+    description?: string;
+    modelName?: string;
+    module?: string;
+    sharedWith?: ReadonlyArray<string>;
+    usageHints?: ReadonlyArray<string>;
+    presentation?: ToolPresentation;
+}
+export interface SemanticChange {
+    toolId: string;
+    classification: SemanticChangeClassification;
+    fields: string[];
+    requiresConfirmation: boolean;
+}
+/**
+ * Compares only the explicit curated and authorization-bearing semantic
+ * fields. Loosening dominates a mixed change so confirmation can never be
+ * hidden by simultaneous hardening or copy changes.
+ */
+export declare function classifyToolSemanticChange(before: ToolSemanticState, after: ToolSemanticState): SemanticChange;

package/dist/contracts/semantic-change.js

@@ -0,0 +1,101 @@
+import { ToolRiskClassSchema, } from './revisions.js';
+import { FoundationDiagnosticError } from '../diagnostics/index.js';
+import { riskTier } from './tool-policy.js';
+function incomparable(toolId) {
+    throw new FoundationDiagnosticError({
+        code: 'E-SEMANTICS-003',
+        operation: 'setup.semantic-change',
+        message: 'A semantic change cannot be classified safely.',
+        remediation: 'review-semantic-change',
+        identifier: toolId,
+    });
+}
+function compareRisk(before, after, toolId) {
+    if (before === after)
+        return 'unchanged';
+    // An out-of-enum label cannot be ranked; never guess a direction.
+    if (!ToolRiskClassSchema.safeParse(before).success
+        || !ToolRiskClassSchema.safeParse(after).success) {
+        return incomparable(toolId);
+    }
+    const beforeTier = riskTier(before);
+    const afterTier = riskTier(after);
+    // Equal-tier relabels (the unassessed 'unknown' counts as tier 3) change
+    // no protection, so they never need confirmation.
+    if (beforeTier === afterTier)
+        return 'neutral';
+    return afterTier > beforeTier ? 'hardening' : 'loosening';
+}
+function normalizedSet(values) {
+    return [...new Set(values ?? [])].sort();
+}
+function compareRoles(beforeValue, afterValue, toolId) {
+    const before = normalizedSet(beforeValue);
+    const after = normalizedSet(afterValue);
+    if (before.length === after.length && before.every((role, i) => role === after[i])) {
+        return 'unchanged';
+    }
+    // An empty role list means no additional role restriction at authorization.
+    if (before.length === 0)
+        return 'hardening';
+    if (after.length === 0)
+        return 'loosening';
+    const afterNarrowsBefore = after.every((role) => before.includes(role));
+    const afterWidensBefore = before.every((role) => after.includes(role));
+    if (afterNarrowsBefore)
+        return 'hardening';
+    if (afterWidensBefore)
+        return 'loosening';
+    return incomparable(toolId);
+}
+function equalValue(left, right) {
+    return JSON.stringify(left) === JSON.stringify(right);
+}
+/**
+ * Compares only the explicit curated and authorization-bearing semantic
+ * fields. Loosening dominates a mixed change so confirmation can never be
+ * hidden by simultaneous hardening or copy changes.
+ */
+export function classifyToolSemanticChange(before, after) {
+    if (before.toolId !== after.toolId)
+        return incomparable(after.toolId);
+    const changes = [];
+    const add = (field, classification) => {
+        if (classification !== 'unchanged')
+            changes.push({ field, classification });
+    };
+    if (before.enabled !== after.enabled) {
+        add('enabled', after.enabled ? 'loosening' : 'hardening');
+    }
+    if (before.requiresApproval !== after.requiresApproval) {
+        add('requiresApproval', after.requiresApproval ? 'hardening' : 'loosening');
+    }
+    add('riskClass', compareRisk(before.riskClass, after.riskClass, after.toolId));
+    add('allowedRoles', compareRoles(before.allowedRoles, after.allowedRoles, after.toolId));
+    const neutralFields = [
+        'description',
+        'modelName',
+        'module',
+        'sharedWith',
+        'usageHints',
+        'presentation',
+    ];
+    for (const field of neutralFields) {
+        if (!equalValue(before[field], after[field]))
+            add(field, 'neutral');
+    }
+    const classification = changes.some((change) => change.classification === 'loosening')
+        ? 'loosening'
+        : changes.some((change) => change.classification === 'hardening')
+            ? 'hardening'
+            : changes.length > 0
+                ? 'neutral'
+                : 'unchanged';
+    return {
+        toolId: after.toolId,
+        classification,
+        fields: changes.map((change) => change.field),
+        requiresConfirmation: classification === 'loosening',
+    };
+}
+//# sourceMappingURL=semantic-change.js.map

package/dist/contracts/semantic-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"semantic-change.js","sourceRoot":"","sources":["../../src/contracts/semantic-change.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,GAGpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AA8B5C,SAAS,YAAY,CAAC,MAAc;IAClC,MAAM,IAAI,yBAAyB,CAAC;QAClC,IAAI,EAAE,iBAAiB;QACvB,SAAS,EAAE,uBAAuB;QAClC,OAAO,EAAE,gDAAgD;QACzD,WAAW,EAAE,wBAAwB;QACrC,UAAU,EAAE,MAAM;KACnB,CAAC,CAAC;AACL,CAAC;AAED,SAAS,WAAW,CAClB,MAAqB,EACrB,KAAoB,EACpB,MAAc;IAEd,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,WAAW,CAAC;IACzC,kEAAkE;IAClE,IACE,CAAC,mBAAmB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO;WAC3C,CAAC,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,EAChD,CAAC;QACD,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAClC,yEAAyE;IACzE,kDAAkD;IAClD,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC/C,OAAO,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CAAC,MAAyC;IAC9D,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CACnB,WAA8C,EAC9C,UAA6C,EAC7C,MAAc;IAEd,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,4EAA4E;IAC5E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,WAAW,CAAC;IAC3C,MAAM,kBAAkB,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,iBAAiB,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACvE,IAAI,kBAAkB;QAAE,OAAO,WAAW,CAAC;IAC3C,IAAI,iBAAiB;QAAE,OAAO,WAAW,CAAC;IAC1C,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,IAAa,EAAE,KAAc;IAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,MAAyB,EACzB,KAAwB;IAExB,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAEtE,MAAM,OAAO,GAGR,EAAE,CAAC;IACR,MAAM,GAAG,GAAG,CACV,KAAa,EACb,cAA4C,EAC5C,EAAE;QACF,IAAI,cAAc,KAAK,WAAW;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC;IAEF,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACrC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,MAAM,CAAC,gBAAgB,KAAK,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACvD,GAAG,CACD,kBAAkB,EAClB,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CACnD,CAAC;IACJ,CAAC;IACD,GAAG,CACD,WAAW,EACX,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAC7D,CAAC;IACF,GAAG,CACD,cAAc,EACd,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,CACpE,CAAC;IAEF,MAAM,aAAa,GAAG;QACpB,aAAa;QACb,WAAW;QACX,QAAQ;QACR,YAAY;QACZ,YAAY;QACZ,cAAc;KACN,CAAC;IACX,KAAK,MAAM,KAAK,IAAI,aAAa,EAAE,CAAC;QAClC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAAE,GAAG,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,cAAc,GAAiC,OAAO,CAAC,IAAI,CAC/D,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,WAAW,CAClD;QACC,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,WAAW,CAAC;YACjE,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;gBACpB,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,WAAW,CAAC;IAEhB,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc;QACd,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QAC7C,oBAAoB,EAAE,cAAc,KAAK,WAAW;KACrD,CAAC;AACJ,CAAC"}

package/dist/contracts/tool-exclude-pattern.d.ts

@@ -0,0 +1,12 @@
+export interface ExcludePattern {
+    /** Absent for `*` and for a pattern without a method: any method. */
+    method: string | undefined;
+    /** Path segments; `*` is one segment, `**` any number of segments. */
+    segments: string[];
+}
+/**
+ * The grammar of `.glirastes/tool-policy.json` `exclude[].match`:
+ * `[METHOD|*] /path/glob`, upper-case methods only. Undefined for anything
+ * else, because such a pattern would exclude nothing and say so to nobody.
+ */
+export declare function parseExcludePattern(pattern: string): ExcludePattern | undefined;

package/dist/contracts/tool-exclude-pattern.js

@@ -0,0 +1,27 @@
+// PAGE matches app pages (navigation destinations and filtered views).
+const EXCLUDE_PATTERN = /^(?:(GET|POST|PUT|PATCH|DELETE|HEAD|PAGE|\*)\s+)?(\/\S*)$/;
+function isValidSegment(segment) {
+    if (segment === '*' || segment === '**')
+        return true;
+    // Route paths carry `:id` and `*slug`, never the Next.js file-system spelling.
+    if (/^\[.*\]$/.test(segment) || /^\(.*\)$/.test(segment))
+        return false;
+    // `*slug` is a catch-all stable-key segment and matches literally; any other `*` is a partial glob.
+    return !segment.includes('*') || /^\*[^*]+$/.test(segment);
+}
+/**
+ * The grammar of `.glirastes/tool-policy.json` `exclude[].match`:
+ * `[METHOD|*] /path/glob`, upper-case methods only. Undefined for anything
+ * else, because such a pattern would exclude nothing and say so to nobody.
+ */
+export function parseExcludePattern(pattern) {
+    const match = EXCLUDE_PATTERN.exec(pattern.trim());
+    if (!match)
+        return undefined;
+    const [, method, path] = match;
+    const segments = path.split('/').filter(Boolean);
+    if (!segments.every(isValidSegment))
+        return undefined;
+    return { method: method === '*' ? undefined : method, segments };
+}
+//# sourceMappingURL=tool-exclude-pattern.js.map

package/dist/contracts/tool-exclude-pattern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-exclude-pattern.js","sourceRoot":"","sources":["../../src/contracts/tool-exclude-pattern.ts"],"names":[],"mappings":"AAOA,uEAAuE;AACvE,MAAM,eAAe,GAAG,2DAA2D,CAAC;AAEpF,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACrD,+EAA+E;IAC/E,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACvE,oGAAoG;IACpG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,cAAc,CAAC;QAAE,OAAO,SAAS,CAAC;IACtD,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC"}