macp-sdk-typescript 0.14.0 → 0.15.0

package/dist/constants.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.INVALID_POLICY_DEFINITION = exports.UNKNOWN_POLICY_VERSION = exports.INVALID_SESSION_ID = exports.POLICY_DENIED = exports.INTERNAL_ERROR = exports.RATE_LIMITED = exports.PAYLOAD_TOO_LARGE = exports.DUPLICATE_MESSAGE = exports.UNAUTHENTICATED = exports.FORBIDDEN = exports.MODE_NOT_SUPPORTED = exports.SESSION_NOT_OPEN = exports.SESSION_NOT_FOUND = exports.SESSION_ALREADY_EXISTS = exports.INVALID_ENVELOPE = exports.UNSUPPORTED_PROTOCOL_VERSION = exports.STANDARD_MODES = exports.MODE_MULTI_ROUND = exports.MODE_QUORUM = exports.MODE_HANDOFF = exports.MODE_TASK = exports.MODE_PROPOSAL = exports.MODE_DECISION = exports.DEFAULT_POLICY_VERSION = exports.DEFAULT_CONFIGURATION_VERSION = exports.DEFAULT_MODE_VERSION = exports.MACP_VERSION = void 0;
+exports.KNOWN_DENY_CODES = exports.DENY_UNSPECIFIED = exports.DENY_INVALID_RULES = exports.DENY_UNSUPPORTED_SCHEMA_VERSION = exports.DENY_REASSIGNMENT_NOT_ALLOWED = exports.DENY_OUTPUT_REQUIRED = exports.DENY_CRITERION_NOT_MET = exports.DENY_DECLINE_NOT_BACKED = exports.DENY_DECLINE_OVER_APPROVAL = exports.DENY_NO_VOTES = exports.DENY_EVALUATION_REQUIRED = exports.DENY_CONFIDENCE_BELOW_MINIMUM = exports.DENY_THRESHOLD_NOT_MET = exports.DENY_QUORUM_NOT_MET = exports.DENY_VETO_HOLD = exports.DENY_VETO = exports.AGENT_NOT_FOUND = exports.STREAM_LAGGED = exports.INVALID_REQUEST = exports.REGISTRY_READ_ONLY = exports.INVALID_POLICY_DEFINITION = exports.UNKNOWN_POLICY_VERSION = exports.INVALID_SESSION_ID = exports.POLICY_DENIED = exports.INTERNAL_ERROR = exports.RATE_LIMITED = exports.PAYLOAD_TOO_LARGE = exports.DUPLICATE_MESSAGE = exports.UNAUTHENTICATED = exports.FORBIDDEN = exports.MODE_NOT_SUPPORTED = exports.SESSION_NOT_OPEN = exports.SESSION_NOT_FOUND = exports.SESSION_ALREADY_EXISTS = exports.INVALID_ENVELOPE = exports.UNSUPPORTED_PROTOCOL_VERSION = exports.STANDARD_MODES = exports.MODE_MULTI_ROUND = exports.MODE_QUORUM = exports.MODE_HANDOFF = exports.MODE_TASK = exports.MODE_PROPOSAL = exports.MODE_DECISION = exports.DEFAULT_POLICY_VERSION = exports.DEFAULT_CONFIGURATION_VERSION = exports.DEFAULT_MODE_VERSION = exports.MACP_VERSION = void 0;
 exports.MACP_VERSION = '1.0';
 exports.DEFAULT_MODE_VERSION = '1.0.0';
 exports.DEFAULT_CONFIGURATION_VERSION = 'config.default';
@@ -34,3 +34,52 @@ exports.POLICY_DENIED = 'POLICY_DENIED';
 exports.INVALID_SESSION_ID = 'INVALID_SESSION_ID';
 exports.UNKNOWN_POLICY_VERSION = 'UNKNOWN_POLICY_VERSION';
 exports.INVALID_POLICY_DEFINITION = 'INVALID_POLICY_DEFINITION';
+// Control-plane codes added in runtime 0.9.0 (carried in `macp-error-code`
+// metadata; see `MacpTransportError.macpErrorCode` / `MacpAckError.macpErrorCode`).
+/** Register/UnregisterPolicy against a file-loaded (read-only) policy registry — FAILED_PRECONDITION. */
+exports.REGISTRY_READ_ONLY = 'REGISTRY_READ_ONLY';
+/** Malformed control-plane request (bad page_size/page_token, missing descriptor, …) — INVALID_ARGUMENT. */
+exports.INVALID_REQUEST = 'INVALID_REQUEST';
+/** Stream/watch subscriber fell behind — RESOURCE_EXHAUSTED; resubscribe with `afterSequence`. */
+exports.STREAM_LAGGED = 'STREAM_LAGGED';
+/** GetManifest for an agent this runtime does not host — NOT_FOUND. */
+exports.AGENT_NOT_FOUND = 'AGENT_NOT_FOUND';
+// Structured POLICY_DENIED denial codes (`PolicyDenial.code`, runtime ≥ 0.9.0;
+// RFC-MACP-0012 §6.2). Open set — names match python-sdk's exports.
+exports.DENY_VETO = 'veto';
+exports.DENY_VETO_HOLD = 'veto_hold';
+exports.DENY_QUORUM_NOT_MET = 'quorum_not_met';
+exports.DENY_THRESHOLD_NOT_MET = 'threshold_not_met';
+exports.DENY_CONFIDENCE_BELOW_MINIMUM = 'confidence_below_minimum';
+exports.DENY_EVALUATION_REQUIRED = 'evaluation_required';
+exports.DENY_NO_VOTES = 'no_votes';
+exports.DENY_DECLINE_OVER_APPROVAL = 'decline_over_approval';
+exports.DENY_DECLINE_NOT_BACKED = 'decline_not_backed';
+exports.DENY_CRITERION_NOT_MET = 'criterion_not_met';
+exports.DENY_OUTPUT_REQUIRED = 'output_required';
+exports.DENY_REASSIGNMENT_NOT_ALLOWED = 'reassignment_not_allowed';
+exports.DENY_UNSUPPORTED_SCHEMA_VERSION = 'unsupported_schema_version';
+exports.DENY_INVALID_RULES = 'invalid_rules';
+exports.DENY_UNSPECIFIED = 'unspecified';
+/**
+ * The denial codes the reference evaluator emits. A custom evaluator may send
+ * others — `PolicyDenial.code` passes them through unchanged, so treat a code
+ * not in this set as {@link DENY_UNSPECIFIED}.
+ */
+exports.KNOWN_DENY_CODES = new Set([
+    exports.DENY_VETO,
+    exports.DENY_VETO_HOLD,
+    exports.DENY_QUORUM_NOT_MET,
+    exports.DENY_THRESHOLD_NOT_MET,
+    exports.DENY_CONFIDENCE_BELOW_MINIMUM,
+    exports.DENY_EVALUATION_REQUIRED,
+    exports.DENY_NO_VOTES,
+    exports.DENY_DECLINE_OVER_APPROVAL,
+    exports.DENY_DECLINE_NOT_BACKED,
+    exports.DENY_CRITERION_NOT_MET,
+    exports.DENY_OUTPUT_REQUIRED,
+    exports.DENY_REASSIGNMENT_NOT_ALLOWED,
+    exports.DENY_UNSUPPORTED_SCHEMA_VERSION,
+    exports.DENY_INVALID_RULES,
+    exports.DENY_UNSPECIFIED,
+]);

package/dist/decision.js

@@ -95,7 +95,10 @@ class DecisionSession {
     }
     async raiseObjection(input) {
         (0, validation_1.validateRequiredField)('proposalId', input.proposalId);
-        const severity = input.severity ? (0, validation_1.validateSeverity)(input.severity) : input.severity;
+        // Always send an explicit lowercase severity: runtime ≥ 0.9.0 sessions
+        // (semantics_rev 4) reject an empty one instead of defaulting to
+        // "medium", so the SDK applies that default itself (python-sdk parity).
+        const severity = (0, validation_1.validateSeverity)(input.severity ?? 'medium');
         const envelope = (0, envelope_1.buildEnvelope)({
             mode: constants_1.MODE_DECISION,
             messageType: 'Objection',

package/dist/errors.d.ts

@@ -8,12 +8,62 @@ export declare class MacpTransportError extends MacpSdkError {
      * `UNAUTHENTICATED`) when the underlying transport failure carried one.
      * Lets consumers distinguish, for example, watch-stream consumer lag
      * (`RESOURCE_EXHAUSTED` → reconnect) from an auth failure (`UNAUTHENTICATED`
-     * → do not reconnect), or a passive-subscribe resume below a compacted base
-     * (`FAILED_PRECONDITION`). Absent for locally-raised transport errors.
+     * → do not reconnect). Absent for locally-raised transport errors. For a
+     * runtime-raised MACP error prefer {@link macpErrorCode}.
      */
     readonly code?: string;
-    constructor(message: string, code?: string);
+    /**
+     * MACP error-codes registry code (e.g. `SESSION_NOT_FOUND`, `POLICY_DENIED`)
+     * from the status's `macp-error-code` trailing metadata (runtime ≥ 0.9.0).
+     * Branch on this rather than {@link code}: since 0.9.0 the gRPC status
+     * follows the registry's gRPC column, and several registry codes share one
+     * status (e.g. `INVALID_ENVELOPE` and `INVALID_SESSION_ID` are both
+     * `INVALID_ARGUMENT`). Absent for older runtimes, for statuses the runtime
+     * raised without a registry code, and for locally-raised errors.
+     */
+    readonly macpErrorCode?: string;
+    constructor(message: string, code?: string, macpErrorCode?: string);
+}
+/**
+ * One structured `POLICY_DENIED` reason (RFC-MACP-0012 §6.2, runtime ≥ 0.9.0).
+ *
+ * `code` is an open set: the reference evaluator emits `veto`, `veto_hold`,
+ * `quorum_not_met`, `threshold_not_met`, `confidence_below_minimum`,
+ * `evaluation_required`, `no_votes`, `decline_over_approval`,
+ * `decline_not_backed`, `criterion_not_met`, `output_required`,
+ * `reassignment_not_allowed`, `unsupported_schema_version`, `invalid_rules`
+ * and `unspecified` (exported as the `DENY_*` constants and
+ * {@link KNOWN_DENY_CODES}), but a custom evaluator may mint its own. `code`
+ * is the wire value passed through unchanged — treat one not in
+ * `KNOWN_DENY_CODES` as `unspecified`. `participants` lists the participant
+ * ids the reason concerns (e.g. a veto's objectors); since 0.9.0 they are no
+ * longer embedded in `message`.
+ */
+export interface PolicyDenial {
+    code: string;
+    message: string;
+    participants: string[];
 }
+/** Parsed MACP error `details` JSON: legacy `reasons` strings plus structured `denials`. */
+export interface MacpErrorDetails {
+    reasons: string[];
+    denials: PolicyDenial[];
+}
+/**
+ * Parse the JSON `details` the runtime attaches to a `POLICY_DENIED` error —
+ * found on `Ack.error.details`, an inline stream `MACPError.details`, or the
+ * `macp-error-details-bin` trailing metadata. Never throws: missing,
+ * non-JSON, or malformed input yields empty arrays; a `denials` entry that is
+ * not an object is dropped, and one without a string `message` is kept with
+ * `message: ''`. Pre-0.9.0 runtimes send `reasons` only,
+ * so `denials` is `[]` for them.
+ */
+export declare function parseErrorDetails(details: Buffer | Uint8Array | string | null | undefined): MacpErrorDetails;
+/** Value of the `macp-error-code` trailing-metadata key, if present (runtime ≥ 0.9.0). */
+export declare function macpErrorCodeFromMetadata(grpcMetadata?: Array<{
+    key: string;
+    value: string | Buffer;
+}>): string | undefined;
 /**
  * Structured NACK record. Mirrors python-sdk's `AckFailure` dataclass so
  * cross-SDK code can share the same shape when logging or persisting a
@@ -25,6 +75,11 @@ export interface AckFailure {
     sessionId: string;
     messageId: string;
     reasons: string[];
+    /**
+     * Structured policy-denial reasons (runtime ≥ 0.9.0). Empty for non-policy
+     * NACKs and for older runtimes, which send `reasons` strings only.
+     */
+    denials: PolicyDenial[];
 }
 export declare class MacpAckError extends MacpSdkError {
     readonly ack: Ack;
@@ -35,13 +90,19 @@ export declare class MacpAckError extends MacpSdkError {
     }>;
     /** Structured NACK record — parity with python-sdk `MacpAckError.failure`. */
     readonly failure: AckFailure;
+    /**
+     * The registry code from the `macp-error-code` metadata (runtime ≥ 0.9.0)
+     * when this NACK was synthesized from a gRPC status. Usually equal to
+     * `failure.code`; differs on the registry-mutation RPCs, which keep
+     * `failure.code: 'FAILED_PRECONDITION'` for compatibility while this names
+     * the precise cause (e.g. `REGISTRY_READ_ONLY`).
+     */
+    readonly macpErrorCode?: string;
     constructor(ack: Ack, grpcMetadata?: Array<{
         key: string;
         value: string | Buffer;
     }>);
-    private static _extractReasons;
-    private static _parseAckReasons;
-    private static _parseGrpcMetadataReasons;
+    private static _extractDetails;
 }
 export declare class MacpSessionError extends MacpSdkError {
     constructor(message: string);

package/dist/errors.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MacpIdentityMismatchError = exports.MacpRetryError = exports.MacpTimeoutError = exports.MacpSessionError = exports.MacpAckError = exports.MacpTransportError = exports.MacpSdkError = void 0;
+exports.parseErrorDetails = parseErrorDetails;
+exports.macpErrorCodeFromMetadata = macpErrorCodeFromMetadata;
 class MacpSdkError extends Error {
     constructor(message) {
         super(message);
@@ -14,80 +16,121 @@ class MacpTransportError extends MacpSdkError {
      * `UNAUTHENTICATED`) when the underlying transport failure carried one.
      * Lets consumers distinguish, for example, watch-stream consumer lag
      * (`RESOURCE_EXHAUSTED` → reconnect) from an auth failure (`UNAUTHENTICATED`
-     * → do not reconnect), or a passive-subscribe resume below a compacted base
-     * (`FAILED_PRECONDITION`). Absent for locally-raised transport errors.
+     * → do not reconnect). Absent for locally-raised transport errors. For a
+     * runtime-raised MACP error prefer {@link macpErrorCode}.
      */
     code;
-    constructor(message, code) {
+    /**
+     * MACP error-codes registry code (e.g. `SESSION_NOT_FOUND`, `POLICY_DENIED`)
+     * from the status's `macp-error-code` trailing metadata (runtime ≥ 0.9.0).
+     * Branch on this rather than {@link code}: since 0.9.0 the gRPC status
+     * follows the registry's gRPC column, and several registry codes share one
+     * status (e.g. `INVALID_ENVELOPE` and `INVALID_SESSION_ID` are both
+     * `INVALID_ARGUMENT`). Absent for older runtimes, for statuses the runtime
+     * raised without a registry code, and for locally-raised errors.
+     */
+    macpErrorCode;
+    constructor(message, code, macpErrorCode) {
         super(message);
         this.name = 'MacpTransportError';
         this.code = code;
+        if (macpErrorCode !== undefined)
+            this.macpErrorCode = macpErrorCode;
     }
 }
 exports.MacpTransportError = MacpTransportError;
+/**
+ * Parse the JSON `details` the runtime attaches to a `POLICY_DENIED` error —
+ * found on `Ack.error.details`, an inline stream `MACPError.details`, or the
+ * `macp-error-details-bin` trailing metadata. Never throws: missing,
+ * non-JSON, or malformed input yields empty arrays; a `denials` entry that is
+ * not an object is dropped, and one without a string `message` is kept with
+ * `message: ''`. Pre-0.9.0 runtimes send `reasons` only,
+ * so `denials` is `[]` for them.
+ */
+function parseErrorDetails(details) {
+    const empty = { reasons: [], denials: [] };
+    if (details === null || details === undefined)
+        return empty;
+    let parsed;
+    try {
+        const raw = typeof details === 'string' ? details : Buffer.from(details).toString('utf-8');
+        if (raw.length === 0)
+            return empty;
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return empty;
+    }
+    if (typeof parsed !== 'object' || parsed === null)
+        return empty;
+    const obj = parsed;
+    const reasons = Array.isArray(obj.reasons) ? obj.reasons.filter((r) => typeof r === 'string') : [];
+    const denials = [];
+    if (Array.isArray(obj.denials)) {
+        for (const d of obj.denials) {
+            if (typeof d !== 'object' || d === null)
+                continue;
+            const { code, message, participants } = d;
+            denials.push({
+                code: typeof code === 'string' && code.length > 0 ? code : 'unspecified',
+                // A denial without a string message is kept with '' (python-sdk
+                // parity, issue #168) — its code and participants still matter.
+                message: typeof message === 'string' ? message : '',
+                participants: Array.isArray(participants) ? participants.filter((p) => typeof p === 'string') : [],
+            });
+        }
+    }
+    return { reasons, denials };
+}
+/** Value of the `macp-error-code` trailing-metadata key, if present (runtime ≥ 0.9.0). */
+function macpErrorCodeFromMetadata(grpcMetadata) {
+    const entry = grpcMetadata?.find((item) => item.key === 'macp-error-code');
+    if (!entry)
+        return undefined;
+    const value = typeof entry.value === 'string' ? entry.value : entry.value.toString('utf-8');
+    return value.length > 0 ? value : undefined;
+}
 class MacpAckError extends MacpSdkError {
     ack;
     /** Optional gRPC trailing metadata for extracting additional error details. */
     grpcMetadata;
     /** Structured NACK record — parity with python-sdk `MacpAckError.failure`. */
     failure;
+    /**
+     * The registry code from the `macp-error-code` metadata (runtime ≥ 0.9.0)
+     * when this NACK was synthesized from a gRPC status. Usually equal to
+     * `failure.code`; differs on the registry-mutation RPCs, which keep
+     * `failure.code: 'FAILED_PRECONDITION'` for compatibility while this names
+     * the precise cause (e.g. `REGISTRY_READ_ONLY`).
+     */
+    macpErrorCode;
     constructor(ack, grpcMetadata) {
         super(`${ack.error?.code ?? 'UNKNOWN'}: ${ack.error?.message ?? 'runtime returned nack'}`);
         this.name = 'MacpAckError';
         this.ack = ack;
         this.grpcMetadata = grpcMetadata;
-        const reasons = MacpAckError._extractReasons(ack, grpcMetadata);
+        const { reasons, denials } = MacpAckError._extractDetails(ack, grpcMetadata);
         this.failure = {
             code: ack.error?.code ?? 'UNKNOWN',
             message: ack.error?.message ?? 'runtime returned nack',
             sessionId: ack.sessionId ?? ack.error?.sessionId ?? '',
             messageId: ack.messageId ?? ack.error?.messageId ?? '',
             reasons,
+            denials,
         };
+        const macpErrorCode = macpErrorCodeFromMetadata(grpcMetadata);
+        if (macpErrorCode !== undefined)
+            this.macpErrorCode = macpErrorCode;
     }
-    static _extractReasons(ack, grpcMetadata) {
-        // First try: parse from ack.error.details (matches Python _parse_ack_reasons)
-        const fromDetails = MacpAckError._parseAckReasons(ack);
-        if (fromDetails.length > 0)
-            return fromDetails;
-        // Second try: parse from gRPC trailing metadata (matches Python _parse_grpc_metadata_reasons)
-        return MacpAckError._parseGrpcMetadataReasons(grpcMetadata);
-    }
-    static _parseAckReasons(ack) {
-        if (!ack.error?.details)
-            return [];
-        try {
-            const details = ack.error.details;
-            const raw = Buffer.isBuffer(details) ? details.toString('utf-8') : String(details);
-            const parsed = JSON.parse(raw);
-            const reasons = parsed.reasons;
-            return Array.isArray(reasons) ? reasons : [];
-        }
-        catch {
-            return [];
-        }
-    }
-    static _parseGrpcMetadataReasons(grpcMetadata) {
-        if (!grpcMetadata)
-            return [];
-        try {
-            for (const item of grpcMetadata) {
-                if (item.key === 'macp-error-details-bin') {
-                    const data = Buffer.isBuffer(item.value)
-                        ? item.value.toString('utf-8')
-                        : typeof item.value === 'string'
-                            ? item.value
-                            : Buffer.from(item.value).toString('utf-8');
-                    const parsed = JSON.parse(data);
-                    const reasons = parsed.reasons;
-                    return Array.isArray(reasons) ? reasons : [];
-                }
-            }
-        }
-        catch {
-            // Intentionally swallowed — matches Python's bare except
-        }
-        return [];
+    static _extractDetails(ack, grpcMetadata) {
+        // First try: ack.error.details (matches Python _parse_ack_reasons)
+        const fromAck = parseErrorDetails(ack.error?.details);
+        if (fromAck.reasons.length > 0 || fromAck.denials.length > 0)
+            return fromAck;
+        // Second try: gRPC trailing metadata (matches Python _parse_grpc_metadata_reasons)
+        const entry = grpcMetadata?.find((item) => item.key === 'macp-error-details-bin');
+        return parseErrorDetails(entry?.value);
     }
 }
 exports.MacpAckError = MacpAckError;

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 export { Auth, type AuthConfig, type BearerAuthOptions } from './auth';
 export * from './base-session';
 export * from './client';
-export { commitmentHash, isCanonicalCommitmentHash } from './commitment-hash';
+export { commitmentHash, isCanonicalCommitmentHash, verifyCommitmentHash, type VerifyOutcome } from './commitment-hash';
 export * from './constants';
 export * from './decision';
 export * from './envelope';

package/dist/index.js

@@ -36,7 +36,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.agent = exports.VERSION = exports.logger = exports.configureLogging = exports.isCanonicalCommitmentHash = exports.commitmentHash = exports.Auth = void 0;
+exports.agent = exports.VERSION = exports.logger = exports.configureLogging = exports.verifyCommitmentHash = exports.isCanonicalCommitmentHash = exports.commitmentHash = exports.Auth = void 0;
 // Auth: export only the public constructors and types. The helpers
 // `validateAuth`, `authSender`, `assertSenderMatchesIdentity`, and
 // `metadataFromAuth` are SDK-internal — importable from the `./auth`
@@ -46,7 +46,8 @@ var auth_1 = require("./auth");
 Object.defineProperty(exports, "Auth", { enumerable: true, get: function () { return auth_1.Auth; } });
 __exportStar(require("./base-session"), exports);
 __exportStar(require("./client"), exports);
-// Commitment hash: export `commitmentHash` and `isCanonicalCommitmentHash`.
+// Commitment hash: export `commitmentHash`, `isCanonicalCommitmentHash`, and
+// the RFC-MACP-0013 §6.1 verifier `verifyCommitmentHash`.
 // `canonicalizeCommitmentPayload` is the projection/JCS half of the
 // algorithm — importable from the `./commitment-hash` submodule (as the
 // vector-runner tests do) but kept off the top-level surface to match
@@ -55,6 +56,7 @@ __exportStar(require("./client"), exports);
 var commitment_hash_1 = require("./commitment-hash");
 Object.defineProperty(exports, "commitmentHash", { enumerable: true, get: function () { return commitment_hash_1.commitmentHash; } });
 Object.defineProperty(exports, "isCanonicalCommitmentHash", { enumerable: true, get: function () { return commitment_hash_1.isCanonicalCommitmentHash; } });
+Object.defineProperty(exports, "verifyCommitmentHash", { enumerable: true, get: function () { return commitment_hash_1.verifyCommitmentHash; } });
 __exportStar(require("./constants"), exports);
 __exportStar(require("./decision"), exports);
 __exportStar(require("./envelope"), exports);

package/dist/policy.js

@@ -105,9 +105,13 @@ function buildDecisionPolicy(policyId, description, rules, options) {
         }
         for (const [participant, weight] of Object.entries(weights)) {
             // weight <= 0 alone would let a NaN weight slip through (NaN <= 0 is
-            // false); the runtime guards this explicitly (registry.rs:596), mirrored
-            // here even though the Python reference does not check it separately.
-            if (weight <= 0 || Number.isNaN(weight)) {
+            // false); the runtime guards this explicitly (registry.rs:596).
+            // !Number.isFinite(weight) is true for NaN, +Infinity, and -Infinity
+            // alike -- the exact mirror of Python's own guard, policy.py:186:
+            // `if not math.isfinite(weight) or weight <= 0:` (issue #152; a
+            // +Infinity weight previously slipped past the old Number.isNaN-only
+            // check and serialized to JSON `null`, which is schema-invalid).
+            if (weight <= 0 || !Number.isFinite(weight)) {
                 throw new errors_1.MacpSessionError(`weights['${participant}'] must be > 0, got ${weight} -- a weight-0 observer is expressed by ` +
                     'omission from the map, not by an explicit 0');
             }

package/dist/projections/base.d.ts

@@ -226,4 +226,18 @@ export declare abstract class BaseProjection {
      * `MACP_LOG_LEVEL` environment variable.
      */
     protected recordAnomaly(anomaly: ProjectionAnomaly): void;
+    /**
+     * Assign `this.phase`, guarding against regression out of the terminal
+     * `'Committed'` state — parity with macp-sdk-python's `_set_phase`
+     * (`base_projection.py:289-313`). `applyEnvelope` sets `this.phase =
+     * 'Committed'` directly on a `Commitment` envelope and returns before
+     * `applyMode` is ever called (see `applyEnvelope` above), so this method is
+     * never asked to move *into* `'Committed'` — only ever *out of* it, which is
+     * exactly the case it exists to reject. Every subclass `applyMode`
+     * implementation must call this instead of assigning `this.phase` directly;
+     * the one exception is each subclass's own field initializer, which sets
+     * the starting phase before any message has been applied and can never
+     * observe `'Committed'`.
+     */
+    protected setPhase(phase: string): void;
 }

package/dist/projections/base.js

@@ -249,5 +249,23 @@ class BaseProjection {
         this.anomalies.push(anomaly);
         logging_1.logger.warn('projection anomaly', anomaly);
     }
+    /**
+     * Assign `this.phase`, guarding against regression out of the terminal
+     * `'Committed'` state — parity with macp-sdk-python's `_set_phase`
+     * (`base_projection.py:289-313`). `applyEnvelope` sets `this.phase =
+     * 'Committed'` directly on a `Commitment` envelope and returns before
+     * `applyMode` is ever called (see `applyEnvelope` above), so this method is
+     * never asked to move *into* `'Committed'` — only ever *out of* it, which is
+     * exactly the case it exists to reject. Every subclass `applyMode`
+     * implementation must call this instead of assigning `this.phase` directly;
+     * the one exception is each subclass's own field initializer, which sets
+     * the starting phase before any message has been applied and can never
+     * observe `'Committed'`.
+     */
+    setPhase(phase) {
+        if (this.phase === 'Committed')
+            return;
+        this.phase = phase;
+    }
 }
 exports.BaseProjection = BaseProjection;

package/dist/projections/decision.js

@@ -22,7 +22,15 @@ class DecisionProjection extends base_1.BaseProjection {
                     rationale: record.rationale,
                     sender: envelope.sender,
                 });
-                this.phase = 'Evaluation';
+                // RFC-MACP-0007 §5 rule 6: a runtime MUST reject any Proposal/
+                // Evaluation/Objection after the first accepted Vote. A replayed/
+                // retried Proposal (same proposalId, a distinct messageId that still
+                // passes applyEnvelope's message_id dedup gate) must therefore not
+                // rewind `phase` from 'Voting' back to 'Evaluation' (issue #153).
+                // Guarding on the initial phase value — mirrors macp-sdk-python's
+                // identical `if self.phase == "Proposal": self._set_phase(...)`.
+                if (this.phase === 'Proposal')
+                    this.setPhase('Evaluation');
                 break;
             }
             case 'Evaluation': {
@@ -80,20 +88,19 @@ class DecisionProjection extends base_1.BaseProjection {
                 // runtime rejects any session-scoped message once the session is
                 // non-OPEN, so a `Vote` cannot legally follow a `Commitment` in
                 // accepted history. If one reaches here anyway (the caller violated
-                // the accepted-only contract — see `applyEnvelope`'s docblock), do
-                // not regress `phase` out of `'Committed'`. Note "phase" itself is
-                // not a normative MACP term (it appears once, in passing, at
-                // RFC-MACP-0012 `:211`); this guard is justified by session
-                // terminality, not by a phase specification. An anomaly would be
-                // recorded here too, but unlike five of the six sites that were
-                // "frozen pending cross-SDK agreement" (issue #126/#128, now
-                // resolved for `duplicate_task_accept`/`settled_handoff` — see
-                // `base.ts`), this one is a session-terminality phase-regression
-                // guard, not a settlement discard, and remains genuinely undecided
-                // per #128's own explicit scoping. No behavior change here.
-                if (this.phase !== 'Committed') {
-                    this.phase = 'Voting';
-                }
+                // the accepted-only contract — see `applyEnvelope`'s docblock),
+                // `setPhase` (see `base.ts`) is what keeps `phase` from regressing
+                // out of `'Committed'`. Note "phase" itself is not a normative MACP
+                // term (it appears once, in passing, at RFC-MACP-0012 `:211`); this
+                // guard is justified by session terminality, not by a phase
+                // specification. An anomaly would be recorded here too, but unlike
+                // five of the six sites that were "frozen pending cross-SDK
+                // agreement" (issue #126/#128, now resolved for
+                // `duplicate_task_accept`/`settled_handoff` — see `base.ts`), this
+                // one is a session-terminality phase-regression guard, not a
+                // settlement discard, and remains genuinely undecided per #128's own
+                // explicit scoping. No behavior change here.
+                this.setPhase('Voting');
                 break;
             }
             default:

package/dist/projections/handoff.js

@@ -21,7 +21,7 @@ class HandoffProjection extends base_1.BaseProjection {
                     sender: envelope.sender,
                     status: 'offered',
                 });
-                this.phase = 'OfferPending';
+                this.setPhase('OfferPending');
                 break;
             }
             case 'HandoffContext': {
@@ -40,7 +40,7 @@ class HandoffProjection extends base_1.BaseProjection {
                     }
                     handoff.contextContentType = record.contentType;
                     if (this.phase === 'OfferPending')
-                        this.phase = 'ContextSharing';
+                        this.setPhase('ContextSharing');
                 }
                 break;
             }
@@ -72,7 +72,7 @@ class HandoffProjection extends base_1.BaseProjection {
                     // (proto-registry), so this is always a real boolean once proto 0.1.6
                     // is loaded — `true` marks a runtime synthetic implicit accept.
                     handoff.implicit = record.implicit ?? false;
-                    this.phase = 'Accepted';
+                    this.setPhase('Accepted');
                 }
                 else {
                     this.recordAnomaly({
@@ -107,7 +107,7 @@ class HandoffProjection extends base_1.BaseProjection {
                 if (handoff.status === 'offered' || handoff.status === 'context_sent') {
                     handoff.status = 'declined';
                     handoff.declinedBy = record.declinedBy;
-                    this.phase = 'Declined';
+                    this.setPhase('Declined');
                 }
                 else {
                     this.recordAnomaly({

package/dist/projections/proposal.d.ts

@@ -38,6 +38,19 @@ export interface ProposalRejectRecord {
     reason?: string;
     sender: string;
 }
+/**
+ * The three reachable `ProposalRecord.status` values, as a runtime array —
+ * cross-SDK contract pinned by the spec repo's `schemas/parity/contract.json`
+ * (`proposal_disposition.projection_status_values`, `contract_version`
+ * 1.3.0, issue #156). `satisfies readonly ProposalRecord['status'][]` links
+ * this array to the type above at compile time, and `_ProposalStatusIsFrozen`
+ * below closes the loop in the other direction — together they prove at
+ * `npm run check` time, not just in a docblock, that `status` can never hold
+ * an acceptance-shaped value like `'accepted'` (see `ProposalRecord.status`'s
+ * own docblock above for why acceptance is tracked separately). See
+ * `tests/parity/contract.test.ts`.
+ */
+export declare const PROPOSAL_STATUS_VALUES: readonly ["open", "rejected", "withdrawn"];
 export declare class ProposalProjection extends BaseProjection {
     protected readonly mode = "macp.mode.proposal.v1";
     readonly proposals: Map<string, ProposalRecord>;

package/dist/projections/proposal.js

@@ -1,8 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ProposalProjection = void 0;
+exports.ProposalProjection = exports.PROPOSAL_STATUS_VALUES = void 0;
 const constants_1 = require("../constants");
 const base_1 = require("./base");
+/**
+ * The three reachable `ProposalRecord.status` values, as a runtime array —
+ * cross-SDK contract pinned by the spec repo's `schemas/parity/contract.json`
+ * (`proposal_disposition.projection_status_values`, `contract_version`
+ * 1.3.0, issue #156). `satisfies readonly ProposalRecord['status'][]` links
+ * this array to the type above at compile time, and `_ProposalStatusIsFrozen`
+ * below closes the loop in the other direction — together they prove at
+ * `npm run check` time, not just in a docblock, that `status` can never hold
+ * an acceptance-shaped value like `'accepted'` (see `ProposalRecord.status`'s
+ * own docblock above for why acceptance is tracked separately). See
+ * `tests/parity/contract.test.ts`.
+ */
+exports.PROPOSAL_STATUS_VALUES = [
+    'open',
+    'rejected',
+    'withdrawn',
+];
 class ProposalProjection extends base_1.BaseProjection {
     mode = constants_1.MODE_PROPOSAL;
     proposals = new Map();
@@ -86,7 +103,7 @@ class ProposalProjection extends base_1.BaseProjection {
                     const proposal = this.proposals.get(record.proposalId);
                     if (proposal) {
                         proposal.status = 'rejected';
-                        this.phase = 'TerminalRejected';
+                        this.setPhase('TerminalRejected');
                     }
                 }
                 break;

package/dist/projections/quorum.js

@@ -15,7 +15,7 @@ class QuorumProjection extends base_1.BaseProjection {
             case 'ApprovalRequest': {
                 const record = payload;
                 this.requests.set(record.requestId, { ...record, sender: envelope.sender });
-                this.phase = 'Voting';
+                this.setPhase('Voting');
                 break;
             }
             case 'Approve': {

package/dist/projections/task.d.ts

@@ -33,12 +33,19 @@ export interface TaskFailRecord {
     retryable: boolean;
     sender: string;
 }
+export interface TaskRejectRecord {
+    taskId: string;
+    assignee: string;
+    reason?: string;
+    sender: string;
+}
 export declare class TaskProjection extends BaseProjection {
     protected readonly mode = "macp.mode.task.v1";
     readonly tasks: Map<string, TaskRecord>;
     readonly updates: TaskUpdateRecord[];
     readonly completions: TaskCompleteRecord[];
     readonly failures: TaskFailRecord[];
+    readonly rejections: TaskRejectRecord[];
     phase: 'Pending' | 'Requested' | 'InProgress' | 'Completed' | 'Failed' | 'Committed';
     /**
      * The **session-level** active assignment: who currently holds the session's