overlane 0.1.126 → 0.1.128

package/dist/overlane.mjs

@@ -23358,6 +23358,151 @@ var init_code_map = __esm({
   }
 });
 
+// ../contracts/src/agent.ts
+function classifyMethod(method) {
+  const m = method.toUpperCase();
+  return m === "GET" || m === "HEAD" || m === "OPTIONS" ? "read" : "write";
+}
+function blockedClassFor(op) {
+  const words = op.operationId.replace(/([a-z0-9])([A-Z])/g, "$1-$2").toLowerCase();
+  const text = `${op.path.toLowerCase()} ${words}`;
+  if (op.method.toUpperCase() === "DELETE" || DESTRUCTIVE.test(text)) return "destructive";
+  if (BILLING.test(text)) return "billing";
+  if (SECRETS.test(text)) return "secrets";
+  return null;
+}
+var AGENT_PLANS, AgentPlan, AGENT_PROVIDERS, AgentProvider, TOOL_CLASSES, AgentToolClass, BLOCKED_CLASSES, BlockedClass, BILLING, SECRETS, DESTRUCTIVE, AgentOperation, AgentToolDefinition, AGENT_REFUSAL_CODES, AgentRefusalCode, AgentRefusal, AgentDiffEntry, APPROVAL_STATES, AgentApprovalState, AgentInverseChange, AgentApproval, AgentWriteToolResult, AgentReadToolResult, AgentToolResult, AgentCitation, MESSAGE_ORIGINS, AgentMessageOrigin, AgentMessage, AgentChatRequest, AgentFeedback, AGENT_AUDIT_RESULTS, AgentAuditResult, AgentAuditEvent, AgentReadOnlyMode, RouteIndexEntry, RouteIndex, AgentRouteHit;
+var init_agent = __esm({
+  "../contracts/src/agent.ts"() {
+    "use strict";
+    init_zod();
+    init_common();
+    init_identity();
+    AGENT_PLANS = ["free", "pro", "team", "business", "enterprise"];
+    AgentPlan = external_exports.enum(AGENT_PLANS);
+    AGENT_PROVIDERS = ["overlane", "github", "gitlab", "linear", "jira"];
+    AgentProvider = external_exports.enum(AGENT_PROVIDERS);
+    TOOL_CLASSES = ["read", "write"];
+    AgentToolClass = external_exports.enum(TOOL_CLASSES);
+    BLOCKED_CLASSES = ["billing", "secrets", "destructive"];
+    BlockedClass = external_exports.enum(BLOCKED_CLASSES);
+    BILLING = /(^|[\s\/_.-])(billing|invoices?|payments?|subscriptions?|checkout|seats|plan-change)([\s\/_.-]|$)/i;
+    SECRETS = /(^|[\s\/_.-])(secrets?|tokens?|api-?keys?|credentials?|keys|signing|sso|scim)([\s\/_.-]|$)/i;
+    DESTRUCTIVE = /(^|[\s\/_.-])(purge|delete|destroy|erase|wipe|drop|revoke|remove|truncate|reset)([\s\/_.-]|$)/i;
+    AgentOperation = external_exports.object({
+      operationId: external_exports.string().min(1).max(100),
+      method: external_exports.enum(["GET", "HEAD", "OPTIONS", "POST", "PUT", "PATCH", "DELETE"]),
+      path: external_exports.string().min(1).max(300).startsWith("/"),
+      /** Where the operation is defined: the OpenAPI document, a contract fixture until the API route exists (REQ-WEB-11), or local code that makes no API call (docs search, navigation). */
+      source: external_exports.enum(["openapi", "contract-fixture", "local"])
+    }).strict();
+    AgentToolDefinition = external_exports.object({
+      tenantId: TenantId,
+      name: external_exports.string().regex(/^[a-z][A-Za-z0-9]{1,48}$/),
+      description: external_exports.string().min(1).max(300),
+      class: AgentToolClass,
+      operation: AgentOperation,
+      /** Lowest role that may call the tool (REQ-AGT-05). The role table in identity.ts still decides per action. */
+      minRole: Role,
+      /** JSON-schema-like description of the arguments, property name to a short hint. */
+      arguments: external_exports.record(external_exports.string().min(1).max(64), external_exports.string().max(200))
+    }).strict().refine((t) => t.class === classifyMethod(t.operation.method), { message: "class must match the HTTP method (REQ-AGT-09)", path: ["class"] }).refine((t) => blockedClassFor(t.operation) === null, { message: "billing, secrets and destructive operations are never tools (REQ-AGT-08)", path: ["operation"] });
+    AGENT_REFUSAL_CODES = [
+      "role_forbidden",
+      "read_only_mode",
+      "blocked_class",
+      "unknown_tool",
+      "invalid_arguments",
+      "approval_required",
+      "approval_expired",
+      "approval_not_pending",
+      "rate_limited",
+      "unavailable"
+    ];
+    AgentRefusalCode = external_exports.enum(AGENT_REFUSAL_CODES);
+    AgentRefusal = external_exports.object({ kind: external_exports.literal("refusal"), tenantId: TenantId, code: AgentRefusalCode, tool: external_exports.string().max(100).optional(), reason: external_exports.string().min(1).max(300) }).strict();
+    AgentDiffEntry = external_exports.object({ field: external_exports.string().min(1).max(200), before: external_exports.string().max(2e3).nullable(), after: external_exports.string().max(2e3).nullable() }).strict();
+    APPROVAL_STATES = ["pending", "approved", "executed", "rejected", "expired", "failed"];
+    AgentApprovalState = external_exports.enum(APPROVAL_STATES);
+    AgentInverseChange = external_exports.object({
+      tenantId: TenantId,
+      approvalId: external_exports.string().min(1).max(128),
+      tool: external_exports.string().min(1).max(100),
+      arguments: external_exports.record(external_exports.string(), external_exports.unknown()),
+      summary: external_exports.string().min(1).max(500)
+    }).strict();
+    AgentApproval = external_exports.object({
+      tenantId: TenantId,
+      id: external_exports.string().min(1).max(128),
+      conversationId: external_exports.string().min(1).max(128),
+      requestedBy: UserId,
+      tool: external_exports.string().min(1).max(100),
+      summary: external_exports.string().min(1).max(500),
+      diff: external_exports.array(AgentDiffEntry).max(50),
+      argumentsDigest: Sha256Digest,
+      state: AgentApprovalState,
+      createdAt: Timestamp,
+      expiresAt: Timestamp,
+      decidedAt: Timestamp.optional(),
+      /** Present once executed, when the tool has an inverse. */
+      inverse: AgentInverseChange.optional(),
+      /** Set when this approval is itself the undo of another. */
+      undoOf: external_exports.string().min(1).max(128).optional()
+    }).strict();
+    AgentWriteToolResult = external_exports.object({ kind: external_exports.literal("approval"), tenantId: TenantId, approval: AgentApproval }).strict();
+    AgentReadToolResult = external_exports.object({ kind: external_exports.literal("result"), tenantId: TenantId, tool: external_exports.string().min(1).max(100), data: external_exports.unknown() }).strict();
+    AgentToolResult = external_exports.discriminatedUnion("kind", [AgentWriteToolResult, AgentReadToolResult, AgentRefusal]);
+    AgentCitation = external_exports.object({
+      tenantId: TenantId,
+      sourceId: external_exports.string().min(1).max(200),
+      title: external_exports.string().min(1).max(200),
+      /** Docs page or app route. Always a path on an Overlane host; checked by the route index. */
+      url: external_exports.string().min(1).max(500),
+      snippet: external_exports.string().max(600).optional()
+    }).strict();
+    MESSAGE_ORIGINS = ["user", "assistant", "retrieved", "tool"];
+    AgentMessageOrigin = external_exports.enum(MESSAGE_ORIGINS);
+    AgentMessage = external_exports.object({
+      tenantId: TenantId,
+      id: external_exports.string().min(1).max(128),
+      conversationId: external_exports.string().min(1).max(128),
+      origin: AgentMessageOrigin,
+      content: external_exports.string().max(8e3),
+      citations: external_exports.array(AgentCitation).max(10).default([]),
+      /** "not_found" when the answer is the deterministic below-threshold reply. */
+      outcome: external_exports.enum(["answer", "not_found", "navigation", "tool_result", "approval", "refusal", "info"]).optional(),
+      createdAt: Timestamp
+    }).strict();
+    AgentChatRequest = external_exports.object({ tenantId: TenantId, conversationId: external_exports.string().min(1).max(128), text: external_exports.string().min(1).max(4e3), currentPath: external_exports.string().max(300).optional(), escalate: external_exports.boolean().optional() }).strict();
+    AgentFeedback = external_exports.object({ tenantId: TenantId, messageId: external_exports.string().min(1).max(128), rating: external_exports.enum(["up", "down"]), note: external_exports.string().max(500).optional(), at: Timestamp }).strict();
+    AGENT_AUDIT_RESULTS = ["ok", "refused", "error", "approval_proposed", "approval_decided"];
+    AgentAuditResult = external_exports.enum(AGENT_AUDIT_RESULTS);
+    AgentAuditEvent = external_exports.object({
+      tenantId: TenantId,
+      id: external_exports.string().min(1).max(128),
+      at: Timestamp,
+      actor: external_exports.object({ userId: UserId, role: Role }).strict(),
+      conversationId: external_exports.string().min(1).max(128),
+      tool: external_exports.string().min(1).max(100),
+      argumentsDigest: Sha256Digest,
+      result: AgentAuditResult,
+      detail: external_exports.string().max(300).optional(),
+      approvalId: external_exports.string().min(1).max(128).optional()
+    }).strict();
+    AgentReadOnlyMode = external_exports.object({ tenantId: TenantId, enabled: external_exports.boolean(), setBy: UserId, setAt: Timestamp }).strict();
+    RouteIndexEntry = external_exports.object({
+      path: external_exports.string().regex(/^\/[A-Za-z0-9\/_.-]*$/),
+      title: external_exports.string().min(1).max(120),
+      description: external_exports.string().min(1).max(300),
+      keywords: external_exports.array(external_exports.string().min(1).max(40)).max(20).default([]),
+      roles: external_exports.array(Role).min(1),
+      plan: AgentPlan
+    }).strict();
+    RouteIndex = external_exports.object({ version: external_exports.literal("1"), routes: external_exports.array(RouteIndexEntry).min(1) }).strict();
+    AgentRouteHit = external_exports.object({ tenantId: TenantId, path: external_exports.string().startsWith("/"), title: external_exports.string().min(1).max(120), score: external_exports.number().nonnegative() }).strict();
+  }
+});
+
 // ../contracts/src/plans.ts
 var PLAN_IDS, BillingPlanId, CHECKOUT_PLANS, CheckoutPlanId, METERS, Meter, AllowanceValue, PlanAllowances, PlanData, OverageRates, FreeTierControls, PlanCatalog, TenantPlanLimits;
 var init_plans = __esm({
@@ -23727,6 +23872,78 @@ var init_billing = __esm({
   }
 });
 
+// ../contracts/src/decision.ts
+var DECISION_MODELS, DecisionModel, MAX_QUESTIONS, MAX_IMAGES, QuestionId, Text, NoulQuestion, ChoiceQuestion, ScoreQuestion, ClefQuestion, ClefQuestions, JsonValue, Base64Image, ClefRequest, Probability, NoulAnswer, ChoiceAnswer, ScoreAnswer, ClefAnswer, ClefResponse, DECISION_USES, DecisionUse, DECISION_OUTCOMES, DecisionOutcome, FALLBACK_REASONS, FallbackReason, DecisionRecord;
+var init_decision = __esm({
+  "../contracts/src/decision.ts"() {
+    "use strict";
+    init_zod();
+    init_common();
+    DECISION_MODELS = ["clef", "clef-flash"];
+    DecisionModel = external_exports.enum(DECISION_MODELS);
+    MAX_QUESTIONS = 64;
+    MAX_IMAGES = 4;
+    QuestionId = external_exports.string().min(1).max(64).regex(/^[A-Za-z0-9][A-Za-z0-9_.:-]*$/);
+    Text = external_exports.string().min(1).max(2e3);
+    NoulQuestion = external_exports.object({ type: external_exports.literal("noul"), instructions: Text, criteria: external_exports.object({ true: Text, false: Text }).strict().optional() }).strict();
+    ChoiceQuestion = external_exports.object({
+      type: external_exports.literal("choice"),
+      instructions: Text,
+      criteria: external_exports.record(external_exports.string().min(1).max(64), Text).refine((value) => Object.keys(value).length >= 2 && Object.keys(value).length <= 255, "choice.criteria needs 2 to 255 options")
+    }).strict();
+    ScoreQuestion = external_exports.object({ type: external_exports.literal("score"), instructions: Text, criteria: external_exports.array(Text).min(2).max(10) }).strict();
+    ClefQuestion = external_exports.discriminatedUnion("type", [NoulQuestion, ChoiceQuestion, ScoreQuestion]);
+    ClefQuestions = external_exports.record(QuestionId, ClefQuestion).refine((value) => Object.keys(value).length >= 1 && Object.keys(value).length <= MAX_QUESTIONS, "1 to 64 questions");
+    JsonValue = external_exports.lazy(() => external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean(), external_exports.null(), external_exports.array(JsonValue), external_exports.record(external_exports.string(), JsonValue)]));
+    Base64Image = external_exports.string().min(8).regex(/^[A-Za-z0-9+/]+={0,2}$/, "images must be base64, not URLs");
+    ClefRequest = external_exports.object({
+      model: DecisionModel,
+      /** Text or JSON, within a 64K context. */
+      state: external_exports.union([external_exports.string().min(1), external_exports.record(external_exports.string(), JsonValue), external_exports.array(JsonValue)]),
+      questions: ClefQuestions,
+      /** Up to four base64 images. Overlane's own uses send none. */
+      images: external_exports.array(Base64Image).max(MAX_IMAGES).optional()
+    }).strict();
+    Probability = external_exports.number().min(0).max(1);
+    NoulAnswer = external_exports.object({ noul: Probability }).passthrough();
+    ChoiceAnswer = external_exports.object({ choice: external_exports.string(), probabilities: external_exports.record(external_exports.string(), Probability), confidence: Probability.optional() }).passthrough();
+    ScoreAnswer = external_exports.object({ score: external_exports.number(), legend: external_exports.union([external_exports.string(), external_exports.array(external_exports.string())]).optional(), probabilities: external_exports.union([external_exports.record(external_exports.string(), Probability), external_exports.array(Probability)]), confidence: Probability.optional() }).passthrough();
+    ClefAnswer = external_exports.union([ChoiceAnswer, ScoreAnswer, NoulAnswer]);
+    ClefResponse = external_exports.object({
+      answers: external_exports.record(QuestionId, ClefAnswer),
+      usage: external_exports.object({ input_tokens: external_exports.number().int().nonnegative() }).passthrough().optional()
+    }).passthrough();
+    DECISION_USES = ["review_risk", "hostile_content"];
+    DecisionUse = external_exports.enum(DECISION_USES);
+    DECISION_OUTCOMES = ["used", "undecided", "fallback", "rejected"];
+    DecisionOutcome = external_exports.enum(DECISION_OUTCOMES);
+    FALLBACK_REASONS = ["below_threshold", "below_margin", "undecided", "disabled", "no_escape_option", "use_not_allowed", "model_error", "bad_response", "budget", "none"];
+    FallbackReason = external_exports.enum(FALLBACK_REASONS);
+    DecisionRecord = external_exports.object({
+      tenantId: TenantId,
+      id: external_exports.string().min(1).max(80),
+      /** One model call can answer several questions; its rows share this ID. The call's input tokens sit on the first row. */
+      callId: external_exports.string().min(1).max(80).optional(),
+      use: DecisionUse,
+      /** The question set's version; any change to a question's text or options bumps it. */
+      questionSetVersion: external_exports.string().min(1).max(64),
+      questionId: external_exports.string().min(1).max(64),
+      /** Every allowed answer with its probability. Empty when no call was made. */
+      probabilities: external_exports.record(external_exports.string(), Probability),
+      /** The top answer, when there was one. Present even when the gate then rejected it. */
+      top: external_exports.string().nullable(),
+      threshold: Probability,
+      margin: Probability,
+      outcome: DecisionOutcome,
+      fallbackReason: FallbackReason,
+      model: external_exports.string().min(1).max(80),
+      latencyMs: external_exports.number().int().nonnegative(),
+      inputTokens: external_exports.number().int().nonnegative(),
+      at: external_exports.string().datetime()
+    }).strict();
+  }
+});
+
 // ../contracts/src/index.ts
 var init_src = __esm({
   "../contracts/src/index.ts"() {
@@ -23758,8 +23975,10 @@ var init_src = __esm({
     init_review();
     init_guardrails();
     init_code_map();
+    init_agent();
     init_plans();
     init_billing();
+    init_decision();
   }
 });
 
@@ -31112,7 +31331,7 @@ var VERSION;
 var init_assets = __esm({
   "src/assets.ts"() {
     "use strict";
-    VERSION = true ? "0.1.126" : "0.0.0-dev";
+    VERSION = true ? "0.1.128" : "0.0.0-dev";
   }
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "overlane",
-  "version": "0.1.126",
+  "version": "0.1.128",
   "description": "Overlane: connect a GitHub project to your coding agents. One portable CLI with project memory, tasks, a code index, guardrails and the Claude Code and Codex plugin.",
   "keywords": [
     "overlane",

package/plugins/claude/plugins/mvrx-harness/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mvrx-harness",
-  "version": "0.1.126",
+  "version": "0.1.128",
   "description": "Overlane context at session start and the shared Overlane skills.",
   "author": {
     "name": "owenob1"