intentdna 1.9.0 → 1.9.3

package/dist/runtime/run-contracts.d.ts

@@ -1,3 +1,4 @@
+import type { ArtifactCaptureRef } from "./artifact-store.js";
 /**
  * Foundation Runtime contracts.
  *
@@ -11,6 +12,7 @@ export type RuntimeId<Kind extends string> = string & {
 };
 export type RunId = RuntimeId<"run_id">;
 export type StepId = RuntimeId<"step_id">;
+export type ActivationId = RuntimeId<"activation_id">;
 export type AttemptId = RuntimeId<"attempt_id">;
 export type WorkerSessionId = RuntimeId<"worker_session_id">;
 export type ResultId = RuntimeId<"result_id">;
@@ -19,10 +21,108 @@ export type ClaimToken = RuntimeId<"claim_token">;
 export type JsonValue = null | boolean | number | string | readonly JsonValue[] | {
     readonly [key: string]: JsonValue;
 };
+export declare const CALLER_ATTESTATION_SCHEMA_VERSION: "intentdna.harness_caller_attestation.v1";
+export interface CanonicalCallerAttestationPayload {
+    readonly schema_version: typeof CALLER_ATTESTATION_SCHEMA_VERSION;
+    readonly authority_id: string;
+    readonly agent_id: string;
+    readonly session_id: string;
+    readonly run_id: RunId;
+    readonly step_id: string;
+    readonly activation_id: string;
+    readonly attempt_id: string;
+    readonly claim_epoch: number;
+    readonly worker_session_id: WorkerSessionId;
+    readonly submission_key_digest: CanonicalResultDigest;
+    readonly execution_digest: CanonicalResultDigest;
+}
 export interface TaskKey {
     readonly run_id: RunId;
     readonly step_id: StepId;
 }
+/** One routed instance of a logical step, including loop iterations. */
+export interface ActivationKey extends TaskKey {
+    readonly activation_id: ActivationId;
+}
+export declare const CANONICAL_ACTIVATION_STATE_VALUES: readonly ["dormant", "dependency_blocked", "ready", "claimed", "running", "waiting_for_human", "succeeded", "failed", "skipped", "cancelled"];
+export type CanonicalActivationState = typeof CANONICAL_ACTIVATION_STATE_VALUES[number];
+export declare const CANONICAL_ACTIVATION_STATE_TRANSITIONS: {
+    readonly dormant: readonly ["dependency_blocked", "ready", "skipped", "cancelled"];
+    readonly dependency_blocked: readonly ["ready", "skipped", "cancelled"];
+    readonly ready: readonly ["claimed", "waiting_for_human", "skipped", "cancelled"];
+    readonly claimed: readonly ["ready", "running", "cancelled"];
+    readonly running: readonly ["ready", "succeeded", "failed", "cancelled"];
+    readonly waiting_for_human: readonly ["succeeded", "cancelled"];
+    readonly succeeded: readonly [];
+    readonly failed: readonly [];
+    readonly skipped: readonly [];
+    readonly cancelled: readonly [];
+};
+export interface CanonicalActivationRecord extends ActivationKey {
+    readonly workflow_round: number;
+    readonly state: CanonicalActivationState;
+    readonly attempt_count: number;
+    readonly current_attempt_id: AttemptId | null;
+    readonly committed_result_id: ResultId | null;
+    readonly created_at: string;
+    readonly updated_at: string;
+}
+export type AttemptExecutor = {
+    readonly kind: "worker";
+    readonly worker_session_id: WorkerSessionId;
+} | {
+    readonly kind: "system";
+    readonly service_instance_id: string;
+    readonly operation: string;
+} | {
+    readonly kind: "human";
+    readonly principal_ref: string;
+    readonly attestation_ref: string;
+};
+export interface CanonicalAttemptRecord extends ActivationKey {
+    readonly attempt_id: AttemptId;
+    readonly attempt_number: number;
+    readonly phase: AttemptPhase;
+    readonly executor: AttemptExecutor | null;
+    readonly started_at: string | null;
+    readonly completed_at: string | null;
+    readonly terminal_outcome: CanonicalAttemptOutcome | null;
+}
+export interface CanonicalAttemptClaim extends ActivationKey {
+    readonly attempt_id: AttemptId;
+    readonly claim_token: ClaimToken;
+    readonly claim_epoch: number;
+    readonly owner_id: string;
+    readonly claimed_record_version: number;
+    readonly driver_claim_lease: TaskLease;
+    readonly execution_deadline_at: string;
+}
+export type CanonicalWorkspacePlanPayload = {
+    readonly kind: "none";
+    readonly workspace_id: string;
+    readonly working_directory: string;
+    readonly authority_key: string;
+} | {
+    readonly kind: "worktree";
+    readonly workspace_id: string;
+    readonly working_directory: string;
+    readonly repository_root: string;
+    readonly worktree_root: string;
+    readonly branch_name: string;
+    readonly base_ref: string;
+    readonly base_commit: string;
+    readonly ownership_key: string;
+    readonly authority_key: string;
+};
+export interface CanonicalWorkspacePlan {
+    readonly workspace_plan_id: CanonicalResultDigest;
+    readonly payload: CanonicalWorkspacePlanPayload;
+}
+export type CanonicalWorkspaceAllocation = CanonicalWorkspacePlanPayload & {
+    readonly workspace_plan_id: CanonicalResultDigest;
+    readonly observed_head: string | null;
+    readonly observed_branch_ref: string | null;
+};
 /**
  * A worker_session_id is allocated once for one attempt and is carried through
  * its packet, provider events, provider result, and committed result.
@@ -118,6 +218,8 @@ export interface ReferenceHandoffBinding extends HandoffBindingBase {
     readonly reference: {
         readonly kind: "file" | "directory" | "artifact" | "uri";
         readonly value: string;
+        /** Immutable content identity. Legacy pre-canonical bindings use null. */
+        readonly artifact_id: string | null;
     };
 }
 export interface QuoteHandoffBinding extends HandoffBindingBase {
@@ -289,4 +391,477 @@ export interface RuntimeEvent {
     readonly occurred_at: string;
     readonly payload: JsonValue;
 }
+export declare const CANONICAL_RUNTIME_EVENT_TYPE_VALUES: readonly ["run_created", "run_cancel_requested", "run_closed", "run_terminal", "activation_state_changed", "attempt_claimed", "attempt_attached", "workspace_planned", "workspace_allocated", "attempt_heartbeat", "attempt_released", "attempt_started", "attempt_stop_requested", "attempt_terminal", "handoff_resolved", "artifact_captured", "result_committed", "gate_evaluated", "decision_evaluated", "route_selected", "retry_segment_scheduled", "retry_scheduled", "interaction_requested", "interaction_submitted"];
+export type CanonicalRuntimeEventType = typeof CANONICAL_RUNTIME_EVENT_TYPE_VALUES[number];
+export type CanonicalRuntimeEventPayloadMap = {
+    readonly run_created: {
+        readonly plan_id: string;
+        readonly run_binding_id: string;
+    };
+    readonly run_cancel_requested: {
+        readonly reason: string | null;
+    };
+    readonly run_closed: {
+        readonly reason_code: string;
+        readonly reason: string | null;
+    };
+    readonly run_terminal: {
+        readonly status: "succeeded" | "failed" | "cancelled";
+        readonly reason_code: string;
+        readonly reason: string | null;
+    };
+    readonly activation_state_changed: {
+        readonly from: CanonicalActivationState;
+        readonly to: CanonicalActivationState;
+        readonly reason_code: string;
+    };
+    readonly attempt_claimed: {
+        readonly claim_epoch: number;
+        readonly owner_id: string;
+        readonly claim_expires_at: string;
+        readonly execution_deadline_at: string;
+    };
+    readonly attempt_attached: {
+        readonly claim_epoch: number;
+        readonly executor: AttemptExecutor;
+    };
+    readonly workspace_planned: {
+        readonly workspace_plan_id: CanonicalResultDigest;
+        readonly plan: CanonicalWorkspacePlan;
+    };
+    readonly workspace_allocated: {
+        readonly workspace_plan_id: CanonicalResultDigest;
+        readonly allocation: CanonicalWorkspaceAllocation;
+    };
+    readonly attempt_heartbeat: {
+        readonly claim_epoch: number;
+        readonly heartbeat_at: string;
+        readonly claim_expires_at: string;
+    };
+    readonly attempt_released: {
+        readonly claim_epoch: number;
+        readonly owner_id: string;
+        readonly reason_code: string;
+    };
+    readonly attempt_started: {
+        readonly executor: AttemptExecutor;
+    };
+    readonly attempt_stop_requested: {
+        readonly intent: CanonicalAttemptStopIntent;
+    };
+    readonly attempt_terminal: {
+        readonly executor: AttemptExecutor;
+        readonly outcome: CanonicalAttemptOutcome;
+        readonly worker_stop_receipt: CanonicalWorkerStopReceipt | null;
+        readonly worker_nonlaunch_attestation: CanonicalWorkerNonlaunchAttestation | null;
+        readonly worker_already_stopped_evidence?: CanonicalWorkerAlreadyStoppedEvidence | null;
+    };
+    readonly handoff_resolved: {
+        readonly binding_id: string;
+        readonly source_result_id: ResultId;
+        readonly output_name: string;
+    };
+    readonly artifact_captured: {
+        readonly capture: ArtifactCaptureRef;
+    };
+    readonly result_committed: {
+        readonly result_digest: CanonicalResultDigest;
+        readonly submission_key_digest: CanonicalResultDigest;
+        readonly submission_digest: CanonicalResultDigest;
+        readonly worker_stop_receipt_digest: CanonicalResultDigest | null;
+        readonly workspace_allocation_digest: CanonicalResultDigest | null;
+        readonly mutation_authority_instance_id: string | null;
+        readonly mutation_fencing_epoch: number | null;
+        readonly finalization_purpose: "finalize_result" | "reconcile_published_result" | "system_operation";
+    };
+    readonly gate_evaluated: {
+        readonly gate_id: string;
+        readonly predicate: JsonValue;
+        readonly source_result_id: ResultId | null;
+        readonly passed: boolean;
+        readonly reason_code: string;
+    };
+    readonly decision_evaluated: {
+        readonly decision_id: string;
+        readonly value: JsonValue;
+        readonly source_result_id: ResultId | null;
+        readonly reason_code: string;
+    };
+    readonly route_selected: {
+        readonly route_id: string;
+        readonly source_activation_id: ActivationId;
+        readonly source_result_id: ResultId | null;
+        readonly successor_activation_ids: readonly ActivationId[];
+        readonly reason_code: string;
+    };
+    readonly retry_segment_scheduled: {
+        readonly retry_segment_id: string;
+        readonly from_round: number;
+        readonly to_round: number;
+        readonly prior_activation_ids: readonly ActivationId[];
+        readonly replacement_activation_ids: readonly ActivationId[];
+        readonly retry_from_activation_id: ActivationId;
+        readonly triggering_result_id: ResultId | null;
+        readonly delay_ms: number;
+        readonly ready_at: string;
+        readonly reason_code: string;
+    };
+    readonly retry_scheduled: {
+        readonly prior_attempt_id: AttemptId;
+        readonly replacement_attempt_id: AttemptId;
+        readonly next_attempt_number: number;
+        readonly delay_ms: number;
+        readonly reason_code: string;
+    };
+    readonly interaction_requested: {
+        readonly interaction_id: string;
+        readonly expected_principal_ref: string | null;
+    };
+    readonly interaction_submitted: {
+        readonly interaction_id: string;
+        readonly principal_ref: string;
+        readonly attestation_ref: string;
+    };
+};
+/** Semantic events always retain the activation that gave the event meaning. */
+export interface CanonicalSemanticEventEnvelope<Type extends CanonicalRuntimeEventType = CanonicalRuntimeEventType, Payload = CanonicalRuntimeEventPayloadMap[Type]> {
+    readonly event_id: EventId;
+    readonly run_id: RunId;
+    readonly step_id: StepId | null;
+    readonly activation_id: ActivationId | null;
+    readonly attempt_id: AttemptId | null;
+    readonly result_id: ResultId | null;
+    readonly sequence: number;
+    readonly idempotency_key: string;
+    readonly type: Type;
+    readonly occurred_at: string;
+    readonly payload: Payload;
+}
+export type GateEvaluatedEvent = CanonicalSemanticEventEnvelope<"gate_evaluated">;
+export type DecisionEvaluatedEvent = CanonicalSemanticEventEnvelope<"decision_evaluated">;
+export type RouteSelectedEvent = CanonicalSemanticEventEnvelope<"route_selected">;
+export type ResultCommittedEvent = CanonicalSemanticEventEnvelope<"result_committed">;
+export type RunTerminalEvent = CanonicalSemanticEventEnvelope<"run_terminal">;
+export type CanonicalRuntimeEvent = {
+    [Type in CanonicalRuntimeEventType]: CanonicalSemanticEventEnvelope<Type, CanonicalRuntimeEventPayloadMap[Type]>;
+}[CanonicalRuntimeEventType];
+export declare const CANONICAL_RESULT_SCHEMA_VERSION: "intentdna.canonical_result.v2";
+export type CanonicalResultOutput = {
+    readonly name: string;
+    readonly kind: "artifact";
+    readonly capture: ArtifactCaptureRef;
+} | {
+    readonly name: string;
+    readonly kind: "text";
+    readonly text: string;
+} | {
+    readonly name: string;
+    readonly kind: "structured";
+    readonly value: JsonValue;
+    readonly schema_ref: string | null;
+};
+export type CanonicalSystemOrigin = {
+    readonly kind: "run_input";
+    readonly input_names: readonly string[];
+} | {
+    readonly kind: "legacy_external";
+    readonly sources: readonly {
+        readonly source_path: string;
+        readonly expected_digest: CanonicalResultDigest;
+        readonly artifact_id: string;
+    }[];
+} | {
+    readonly kind: "canonical_import";
+    readonly origin_plan_id: CanonicalResultDigest;
+    readonly origin_run_ids: readonly RunId[];
+    readonly origin_result_ids: readonly ResultId[];
+    readonly origin_artifact_ids: readonly string[];
+    readonly policy_id: string | null;
+} | {
+    readonly kind: "current_run_results";
+    readonly source_result_ids: readonly ResultId[];
+};
+/** Executor-neutral result states plus the process facts unique to workers. */
+export type CanonicalAttemptOutcome = {
+    readonly kind: "succeeded";
+} | {
+    readonly kind: "failed";
+    readonly reason_code: string;
+    readonly message: string | null;
+} | {
+    readonly kind: "cancelled";
+    readonly reason: string | null;
+} | {
+    readonly kind: "worker_process";
+    readonly status: "succeeded" | "failed" | "cancelled";
+    readonly reason_code: string | null;
+    readonly message: string | null;
+    readonly process: TerminalOutcome;
+};
+/** @deprecated Use CanonicalAttemptOutcome for attempt and result truth. */
+export type CanonicalResultOutcome = CanonicalAttemptOutcome;
+export type CanonicalResultDigest = `sha256:${string}`;
+export declare const CANONICAL_ATTEMPT_STOP_INTENT_SCHEMA_VERSION: "intentdna.attempt_stop_intent.v1";
+export interface CanonicalAttemptStopIntent extends ActivationKey {
+    readonly schema_version: typeof CANONICAL_ATTEMPT_STOP_INTENT_SCHEMA_VERSION;
+    readonly attempt_id: AttemptId;
+    readonly claim_epoch: number;
+    readonly worker_session_id: WorkerSessionId;
+    readonly stop_idempotency_key: CanonicalResultDigest;
+    readonly purpose: "cancel" | "execution_deadline" | "peer_terminal";
+    readonly requested_at: string;
+    readonly started_at: string;
+    readonly requested_outcome: CanonicalAttemptOutcome;
+}
+/** A compact identity-bound pointer; source workspace paths never appear here. */
+export interface CanonicalResultRef extends ActivationKey {
+    readonly result_id: ResultId;
+    readonly attempt_id: AttemptId;
+    readonly result_digest: CanonicalResultDigest;
+}
+export declare const CANONICAL_WORKER_STOP_RECEIPT_SCHEMA_VERSION: "intentdna.worker_stop_receipt.v1";
+export interface CanonicalWorkerStopReceiptPayload extends ActivationKey {
+    readonly schema_version: typeof CANONICAL_WORKER_STOP_RECEIPT_SCHEMA_VERSION;
+    readonly attempt_id: AttemptId;
+    readonly claim_epoch: number;
+    readonly worker_session_id: WorkerSessionId;
+    readonly execution_instance_id: string;
+    readonly authority_kind: "local_process" | "host_attested";
+    readonly authority_instance_id: string;
+    readonly fencing_epoch: number;
+    readonly started_at: string;
+    readonly stopped_at: string;
+    readonly terminal_outcome: CanonicalAttemptOutcome;
+    readonly process_tree_drained: true;
+    readonly source_evidence_digest: CanonicalResultDigest;
+}
+export interface CanonicalWorkerStopReceipt {
+    readonly receipt_digest: CanonicalResultDigest;
+    readonly payload: CanonicalWorkerStopReceiptPayload;
+}
+export declare const CANONICAL_WORKER_ALREADY_STOPPED_EVIDENCE_SCHEMA_VERSION: "intentdna.worker_already_stopped_evidence.v1";
+export interface CanonicalWorkerAlreadyStoppedEvidencePayload extends ActivationKey {
+    readonly schema_version: typeof CANONICAL_WORKER_ALREADY_STOPPED_EVIDENCE_SCHEMA_VERSION;
+    readonly attempt_id: AttemptId;
+    readonly claim_epoch: number;
+    readonly worker_session_id: WorkerSessionId;
+    readonly execution_instance_id: string;
+    readonly authority_kind: "local_process" | "host_attested";
+    readonly authority_instance_id: string;
+    readonly fencing_epoch: number;
+    readonly started_at: string;
+    readonly completed_at: string;
+    readonly observed_outcome: CanonicalAttemptOutcome;
+    readonly process_tree_drained: true;
+    readonly stop_idempotency_key: CanonicalResultDigest;
+    readonly stop_requested_at: string;
+    readonly stop_purpose: "cancel" | "execution_deadline" | "peer_terminal";
+    readonly stop_requested_outcome: CanonicalAttemptOutcome;
+    readonly source_evidence_digest: CanonicalResultDigest;
+}
+export interface CanonicalWorkerAlreadyStoppedEvidence {
+    readonly evidence_digest: CanonicalResultDigest;
+    readonly payload: CanonicalWorkerAlreadyStoppedEvidencePayload;
+}
+export declare const CANONICAL_WORKER_NONLAUNCH_ATTESTATION_SCHEMA_VERSION: "intentdna.worker_nonlaunch_attestation.v1";
+export interface CanonicalWorkerNonlaunchAttestationPayload extends ActivationKey {
+    readonly schema_version: typeof CANONICAL_WORKER_NONLAUNCH_ATTESTATION_SCHEMA_VERSION;
+    readonly attempt_id: AttemptId;
+    readonly claim_epoch: number;
+    readonly worker_session_id: WorkerSessionId;
+    readonly execution_instance_id: string;
+    readonly authority_kind: "local_process" | "host_attested";
+    readonly authority_instance_id: string;
+    readonly fencing_epoch: number;
+    readonly started_at: string;
+    readonly attested_at: string;
+    readonly failure_idempotency_key: CanonicalResultDigest;
+    readonly launch_state: "never_launched";
+    readonly source_evidence_digest: CanonicalResultDigest;
+}
+export interface CanonicalWorkerNonlaunchAttestation {
+    readonly attestation_digest: CanonicalResultDigest;
+    readonly payload: CanonicalWorkerNonlaunchAttestationPayload;
+}
+export declare const CANONICAL_WORKSPACE_OBSERVATION_SCHEMA_VERSION: "intentdna.workspace_observation.v2";
+export interface CanonicalWorkspaceObservation {
+    readonly schema_version: typeof CANONICAL_WORKSPACE_OBSERVATION_SCHEMA_VERSION;
+    readonly workspace_id: string;
+    readonly scope: {
+        readonly kind: "attempt_workspace";
+        readonly relative_root: ".";
+        readonly excluded_relative_paths: readonly [".dna/runtime", ".dna/worktrees/runtime"];
+    };
+    readonly observed_digest: CanonicalResultDigest;
+    readonly entry_count: number;
+    readonly byte_count: number;
+    readonly git: {
+        readonly repository_identity_digest: CanonicalResultDigest;
+        readonly head: string;
+        readonly symbolic_branch: string | null;
+        readonly porcelain_v2_digest: CanonicalResultDigest;
+        readonly local_config_digest: CanonicalResultDigest;
+    } | null;
+}
+export declare const CANONICAL_VERIFIER_EXECUTION_RECEIPT_SCHEMA_VERSION: "intentdna.verifier_execution_receipt.v1";
+export interface CanonicalVerifierExecutionReceipt {
+    readonly schema_version: typeof CANONICAL_VERIFIER_EXECUTION_RECEIPT_SCHEMA_VERSION;
+    readonly evidence_mode: "historical_execution";
+    readonly plan_id: CanonicalResultDigest;
+    readonly verifier_id: string;
+    readonly verifier_definition_digest: CanonicalResultDigest;
+    readonly resolved_command_digest: CanonicalResultDigest;
+    readonly environment_binding_digest: CanonicalResultDigest;
+    readonly cwd_identity: {
+        readonly workspace_id: string;
+        readonly workspace_allocation_digest: CanonicalResultDigest;
+        readonly relative_working_directory: string;
+        readonly absolute_path_digest: CanonicalResultDigest;
+    };
+    readonly started_at: string;
+    readonly requested_at: string;
+    readonly completed_at: string;
+    readonly process_outcome: {
+        readonly kind: "exited";
+        readonly exit_code: number;
+        readonly signal: null;
+        readonly timed_out: false;
+        readonly launch_error: null;
+    } | {
+        readonly kind: "signaled";
+        readonly exit_code: null;
+        readonly signal: string;
+        readonly timed_out: false;
+        readonly launch_error: null;
+    } | {
+        readonly kind: "timed_out";
+        readonly exit_code: number | null;
+        readonly signal: string | null;
+        readonly timed_out: true;
+        readonly launch_error: null;
+    } | {
+        readonly kind: "launch_error";
+        readonly exit_code: null;
+        readonly signal: null;
+        readonly timed_out: false;
+        readonly launch_error: {
+            readonly code: string;
+            readonly message_digest: CanonicalResultDigest;
+        };
+    };
+    readonly stdout: {
+        readonly digest: CanonicalResultDigest;
+        readonly byte_length: number;
+        readonly truncated: boolean;
+    };
+    readonly stderr: {
+        readonly digest: CanonicalResultDigest;
+        readonly byte_length: number;
+        readonly truncated: boolean;
+    };
+    readonly truncation_policy: {
+        readonly kind: "digest_full_stream_diagnostics_only";
+        readonly raw_output_retained_bytes: 0;
+        readonly diagnostic_summary_max_bytes: number;
+        readonly diagnostic_line_max_bytes: number;
+    };
+    readonly observation_policy_digest: CanonicalResultDigest;
+    readonly workspace_observation_digest: CanonicalResultDigest;
+    readonly service_invocation: {
+        readonly service_instance_id: string;
+        readonly invocation_id: string;
+    };
+    readonly request_identity: {
+        readonly request_digest: CanonicalResultDigest;
+        readonly command_digest: CanonicalResultDigest;
+        readonly environment_digest: CanonicalResultDigest;
+        readonly authority_descriptor_digest: CanonicalResultDigest;
+        readonly launch_descriptor_digest: CanonicalResultDigest;
+    };
+    readonly supplied_environment: {
+        readonly inherit_parent: false;
+        readonly startup_files: false;
+        readonly variable_names: readonly string[];
+    };
+    readonly shell_policy: {
+        readonly executable: "bash";
+        readonly arguments: readonly ["--noprofile", "--norc", "-c"];
+    };
+    readonly network_policy: {
+        readonly mode: "deny_all" | "allow";
+        readonly enforced: boolean;
+        readonly enforcement_kind: "configured_adapter" | "not_required";
+        readonly enforcement_digest: CanonicalResultDigest | null;
+        readonly enforcement_descriptor: {
+            readonly schema_version: "intentdna.verifier_network_enforcement.v1";
+            readonly mode: "deny_all";
+            readonly adapter_kind: string;
+            readonly adapter_version: string;
+            readonly configuration_digest: CanonicalResultDigest;
+            readonly authority_descriptor_digest: CanonicalResultDigest;
+            readonly request_digest: CanonicalResultDigest;
+        } | null;
+    };
+    readonly execution_authority: {
+        readonly authority_instance_id: string;
+        readonly authority_descriptor_digest: CanonicalResultDigest;
+        readonly adapter_kind: string;
+        readonly adapter_version: string;
+        readonly configuration_digest: CanonicalResultDigest;
+        readonly process_tree_drained: true;
+    };
+}
+export interface CanonicalVerifierEvidenceRef {
+    readonly kind: "verifier_evidence";
+    readonly verifier_id: string;
+    readonly evidence_digest: CanonicalResultDigest;
+    readonly artifact_capture: ArtifactCaptureRef | null;
+    readonly workspace_observation: CanonicalWorkspaceObservation | null;
+    readonly execution_receipt: CanonicalVerifierExecutionReceipt | null;
+}
+/** Immutable evidence only; mutable workspace paths are intentionally absent. */
+export type CanonicalEvidenceRef = {
+    readonly kind: "artifact_capture";
+    readonly capture: ArtifactCaptureRef;
+} | {
+    readonly kind: "submission";
+    readonly submission_key_digest: CanonicalResultDigest;
+    readonly submission_digest: CanonicalResultDigest;
+} | {
+    readonly kind: "result";
+    readonly result: CanonicalResultRef;
+} | {
+    readonly kind: "caller_attestation";
+    readonly attestation_ref: string;
+    readonly attestation_digest: CanonicalResultDigest;
+    readonly payload?: CanonicalCallerAttestationPayload;
+} | {
+    readonly kind: "worker_stopped";
+    readonly receipt: CanonicalWorkerStopReceipt;
+} | CanonicalVerifierEvidenceRef;
+export interface CanonicalVerificationResult {
+    readonly verifier_id: string;
+    readonly authority: "service" | "additional";
+    readonly passed: boolean;
+    readonly reason_code: string;
+    readonly evidence_refs: readonly CanonicalVerifierEvidenceRef[];
+    readonly domain_value: JsonValue | null;
+}
+/** Full immutable authority for one terminal canonical attempt. */
+export interface CanonicalCommittedResult extends ActivationKey {
+    readonly schema_version: typeof CANONICAL_RESULT_SCHEMA_VERSION;
+    readonly result_id: ResultId;
+    readonly attempt_id: AttemptId;
+    readonly executor: AttemptExecutor;
+    readonly terminal_outcome: CanonicalAttemptOutcome;
+    readonly outputs: readonly CanonicalResultOutput[];
+    readonly started_at: string;
+    readonly completed_at: string;
+    readonly committed_at: string;
+    readonly stdout_reference: CanonicalEvidenceRef | null;
+    readonly stderr_reference: CanonicalEvidenceRef | null;
+    readonly evidence_refs: readonly CanonicalEvidenceRef[];
+    readonly verification_results: readonly CanonicalVerificationResult[];
+    readonly system_origin?: CanonicalSystemOrigin | null;
+}
 export {};

package/dist/runtime/run-contracts.js

@@ -1,10 +1,28 @@
-/**
- * Foundation Runtime contracts.
- *
- * These types describe durable run truth and the boundary to one disposable
- * worker session. They intentionally contain no storage, scheduling, provider,
- * CLI, or Hook behavior.
- */
+export const CALLER_ATTESTATION_SCHEMA_VERSION = "intentdna.harness_caller_attestation.v1";
+export const CANONICAL_ACTIVATION_STATE_VALUES = [
+    "dormant",
+    "dependency_blocked",
+    "ready",
+    "claimed",
+    "running",
+    "waiting_for_human",
+    "succeeded",
+    "failed",
+    "skipped",
+    "cancelled",
+];
+export const CANONICAL_ACTIVATION_STATE_TRANSITIONS = {
+    dormant: ["dependency_blocked", "ready", "skipped", "cancelled"],
+    dependency_blocked: ["ready", "skipped", "cancelled"],
+    ready: ["claimed", "waiting_for_human", "skipped", "cancelled"],
+    claimed: ["ready", "running", "cancelled"],
+    running: ["ready", "succeeded", "failed", "cancelled"],
+    waiting_for_human: ["succeeded", "cancelled"],
+    succeeded: [],
+    failed: [],
+    skipped: [],
+    cancelled: [],
+};
 export const TASK_STATE_VALUES = [
     "dependency_blocked",
     "ready",
@@ -66,3 +84,36 @@ export const RUNTIME_EVENT_TYPE_VALUES = [
     "workflow_round_advanced",
     "workflow_round_completed",
 ];
+export const CANONICAL_RUNTIME_EVENT_TYPE_VALUES = [
+    "run_created",
+    "run_cancel_requested",
+    "run_closed",
+    "run_terminal",
+    "activation_state_changed",
+    "attempt_claimed",
+    "attempt_attached",
+    "workspace_planned",
+    "workspace_allocated",
+    "attempt_heartbeat",
+    "attempt_released",
+    "attempt_started",
+    "attempt_stop_requested",
+    "attempt_terminal",
+    "handoff_resolved",
+    "artifact_captured",
+    "result_committed",
+    "gate_evaluated",
+    "decision_evaluated",
+    "route_selected",
+    "retry_segment_scheduled",
+    "retry_scheduled",
+    "interaction_requested",
+    "interaction_submitted",
+];
+export const CANONICAL_RESULT_SCHEMA_VERSION = "intentdna.canonical_result.v2";
+export const CANONICAL_ATTEMPT_STOP_INTENT_SCHEMA_VERSION = "intentdna.attempt_stop_intent.v1";
+export const CANONICAL_WORKER_STOP_RECEIPT_SCHEMA_VERSION = "intentdna.worker_stop_receipt.v1";
+export const CANONICAL_WORKER_ALREADY_STOPPED_EVIDENCE_SCHEMA_VERSION = "intentdna.worker_already_stopped_evidence.v1";
+export const CANONICAL_WORKER_NONLAUNCH_ATTESTATION_SCHEMA_VERSION = "intentdna.worker_nonlaunch_attestation.v1";
+export const CANONICAL_WORKSPACE_OBSERVATION_SCHEMA_VERSION = "intentdna.workspace_observation.v2";
+export const CANONICAL_VERIFIER_EXECUTION_RECEIPT_SCHEMA_VERSION = "intentdna.verifier_execution_receipt.v1";