sdd-agent-platform 0.3.0 → 0.4.1

package/node_modules/@sdd-agent-platform/core/src/router/routing.ts

@@ -0,0 +1,192 @@
+import {
+  AGENT_ROUTER_CONTRACT_VERSION,
+  ROUTE_CACHE_CONTRACT_VERSION
+} from '../contracts.js';
+import { parseSddBranch } from '../sdd-docs/task-parser.js';
+import { resolveSddContext } from '../sdd-docs/context.js';
+import { inspectSddTask } from '../sdd-docs/task-inspection.js';
+import { readRouteCache, routeCacheKey, runtimeProfileSpan, writeRouteCache } from './route-cache.js';
+import type { RuntimeProfileSpan, TeamModeActivation } from './route-cache.js';
+import { buildAgentSkillRuntimeRegistry } from './runtime-registry.js';
+import { buildTeamModePolicy, resolveTeamModeActivation } from './team-mode.js';
+import { matchRoutingRules } from './routing-rules.js';
+import { chooseRecommendedProfile, deriveAllowedProfiles, toAgentProfileId } from './profile-resolution.js';
+import { adapterMappingForProfile, buildAgentCapabilityRouteDecision, buildRejectedProfiles, buildToolPermissionSpec, modelPolicyForProfile, quarantineWarningsForSources, routeCategory, routeRegistrySources, selectRequiredSkillCapabilities } from './route-projection.js';
+import { lifecycleAutonomyCeilingFromDecision, ensureLifecycleRiskDecision } from '../orchestration/runtime.js';
+import { taskAutonomyCeiling } from './risk-policy.js';
+import { evaluateTaskWorkflowGate } from '../risk.js';
+import { nextDependencyTaskId, resolveTaskDependencyReadiness } from '../workflow-state/dependencies.js';
+import { selectLatestEligibleRunsByTask, type LatestEligibleRunSelection } from '../workflow-state/latest-eligible-run.js';
+import { readAllRunStates } from '../run-state/run-state.js';
+import type { RunState, RunStateTaskRuntime } from '../run-state/model.js';
+import { inspectAgentCapabilityCatalog } from '../registries/agent-capability-catalog.js';
+import type {
+  AgentRouterDecision,
+  TeamModePolicy
+} from './agent-runtime.js';
+
+
+
+export async function inspectTeamModePolicy(projectRoot: string, options: { taskId?: string; branch?: string; enabled?: boolean; teamModeActivation?: TeamModeActivation } = {}): Promise<TeamModePolicy> {
+  const registry = await buildAgentSkillRuntimeRegistry(projectRoot);
+  const activation = resolveTeamModeActivation({ teamModeEnabled: options.enabled, teamModeActivation: options.teamModeActivation }, options.taskId ? 'auto' : 'off');
+  if (!options.taskId) {
+    return buildTeamModePolicy({ activation });
+  }
+  const branch = options.branch ?? (await resolveSddContext(projectRoot)).branch;
+  const model = await parseSddBranch(projectRoot, branch);
+  const inspected = inspectSddTask(model, options.taskId);
+  const task = inspected.task;
+  const blockingGap = inspected.gaps.find((gap) => gap.severity === 'blocking');
+  const matchedRules = task && !blockingGap ? matchRoutingRules(task, registry) : [];
+  const allowedProfiles = task && !blockingGap ? deriveAllowedProfiles(task, registry, matchedRules).profiles : [];
+  const category = task ? routeCategory(task, blockingGap, allowedProfiles, matchedRules) : 'blocked';
+  const autonomyCeiling = task ? taskAutonomyCeiling(task) : 'research_before_implementation';
+  return buildTeamModePolicy({ activation, task, category, risk: task?.risk ?? [], autonomyCeiling, blockedReason: blockingGap?.message ?? null });
+}
+
+export async function routeSddTask(projectRoot: string, options: { taskId: string; branch?: string; agent?: string; teamModeEnabled?: boolean; teamModeActivation?: TeamModeActivation; profile?: boolean; cache?: boolean; approved?: boolean } = { taskId: '' }): Promise<AgentRouterDecision> {
+  const profileSpans: RuntimeProfileSpan[] = [];
+  const routeStart = Date.now();
+  const routeStartedAt = new Date(routeStart).toISOString();
+  const registry = await buildAgentSkillRuntimeRegistry(projectRoot);
+  const capabilityCatalog = await inspectAgentCapabilityCatalog(projectRoot);
+  profileSpans.push(runtimeProfileSpan('agent_runtime_registry', routeStart));
+  const branchStart = Date.now();
+  const context = await resolveSddContext(projectRoot, { branch: options.branch, branchSource: options.branch ? 'cli_option' : undefined });
+  const branch = context.partition;
+  const model = await parseSddBranch(projectRoot, branch);
+  const states = await readAllRunStates(projectRoot);
+  const runtimeByTask = latestRuntimeTaskStates(selectLatestEligibleRunsByTask({ states, model, partition: branch, currentGitBranch: context.currentGitBranch }), states);
+  profileSpans.push(runtimeProfileSpan('document_parse', branchStart));
+  const cacheKey = routeCacheKey({ taskId: options.taskId, branch, agent: options.agent ?? null, teamModeActivation: resolveTeamModeActivation(options, 'auto'), approved: options.approved, documents: model.documents });
+  const cachedDecision = options.cache ? await readRouteCache<AgentRouterDecision>(projectRoot, cacheKey) : null;
+  if (cachedDecision) {
+    return {
+      ...cachedDecision,
+      cache: { contract: ROUTE_CACHE_CONTRACT_VERSION, key: cacheKey, status: 'hit', source: 'content_addressed_derived_route', authoritative: false },
+      profile: options.profile ? [...(cachedDecision.profile ?? []), runtimeProfileSpan('route_total', routeStart, routeStartedAt)] : undefined
+    };
+  }
+  const computeStart = Date.now();
+  const inspected = inspectSddTask(model, options.taskId);
+  const task = inspected.task;
+  const blockingGap = inspected.gaps.find((gap) => gap.severity === 'blocking');
+  const matchedRules = task && !blockingGap ? matchRoutingRules(task, registry) : [];
+  const profileSelection = task && !blockingGap ? deriveAllowedProfiles(task, registry, matchedRules) : { profiles: [], resolvedAliases: [] };
+  const delegatedProfile = task && !blockingGap && options.agent ? toAgentProfileId(options.agent, registry) : null;
+  const allowedProfiles = delegatedProfile && !profileSelection.profiles.includes(delegatedProfile) ? [...profileSelection.profiles, delegatedProfile] : profileSelection.profiles;
+  const riskDecision = task ? await ensureLifecycleRiskDecision(projectRoot, model, { branch, task }) : null;
+  const workflowGate = evaluateTaskWorkflowGate({ task, taskId: options.taskId, riskDecision, approved: options.approved });
+  const lifecycleBlockedReason = workflowGate.blocksRoute
+    ? workflowGate.primaryReason
+    : null;
+  const dependencyReadiness = task ? resolveTaskDependencyReadiness(model, options.taskId, { runtimeByTask }) : null;
+  const dependencyBlockedReason = dependencyReadiness?.blockingReasons[0] ?? null;
+  const dependencyTaskId = task ? nextDependencyTaskId(model, options.taskId, { runtimeByTask }) : null;
+  const taskRecommendedProfile = task && !blockingGap && !dependencyBlockedReason && !lifecycleBlockedReason ? chooseRecommendedProfile(task, allowedProfiles, registry, matchedRules) : null;
+  const recommendedProfile = dependencyBlockedReason || lifecycleBlockedReason ? null : delegatedProfile ?? taskRecommendedProfile;
+  const category = task ? routeCategory(task, blockingGap, allowedProfiles, matchedRules) : 'blocked';
+  const autonomyCeiling = riskDecision ? lifecycleAutonomyCeilingFromDecision(riskDecision) : task ? taskAutonomyCeiling(task) : 'research_before_implementation';
+  const requiredCapabilities = task && recommendedProfile ? selectRequiredSkillCapabilities(task, recommendedProfile, registry, matchedRules) : [];
+  const sourceCapability = requiredCapabilities[0] ?? null;
+  const sourceCapabilityContract = sourceCapability ? registry.skillCapabilities.find((capability) => capability.id === sourceCapability) ?? null : null;
+  const blockedReason = !task ? `Task ${options.taskId} was not found.` : blockingGap?.message ?? dependencyBlockedReason ?? lifecycleBlockedReason;
+  const routedCategory = blockedReason ? 'blocked' : category;
+  const registrySources = routeRegistrySources(registry, recommendedProfile, requiredCapabilities);
+  const adapterMapping = recommendedProfile ? adapterMappingForProfile(registry, recommendedProfile) : null;
+  const capabilityDecision = buildAgentCapabilityRouteDecision(task ?? null, routedCategory, autonomyCeiling, registry, capabilityCatalog);
+  const decision: AgentRouterDecision = {
+    version: AGENT_ROUTER_CONTRACT_VERSION,
+    taskId: options.taskId,
+    branch,
+    category: routedCategory,
+    recommendedProfile,
+    allowedProfiles,
+    rejectedProfiles: buildRejectedProfiles(allowedProfiles, blockedReason, registry),
+    requiredCapabilities,
+    sourceCapability,
+    reuseDecision: sourceCapabilityContract?.reuseDecision ?? null,
+    toolPermission: task && recommendedProfile ? buildToolPermissionSpec(task, recommendedProfile, autonomyCeiling, registry) : null,
+    modelPolicy: modelPolicyForProfile(recommendedProfile, registry),
+    teamMode: buildTeamModePolicy({
+      activation: resolveTeamModeActivation(options, 'auto'),
+      task: task ?? null,
+      category: routedCategory,
+      risk: task?.risk ?? [],
+      autonomyCeiling,
+      blockedReason
+    }),
+    autonomyCeiling,
+    lifecycleGate: workflowGate.lifecycleGate,
+    lifecycleProfile: workflowGate.lifecycleProfile,
+    approvalPolicy: workflowGate.approvalPolicy,
+    requiredStages: workflowGate.requiredStages,
+    primaryReason: workflowGate.primaryReason,
+    requiredArtifacts: task?.requiredArtifacts ?? [],
+    blockedReason,
+    nextAction: routeNextAction({ taskId: options.taskId, taskExists: Boolean(task), hasBlockingGap: Boolean(blockingGap), dependencyTaskId, blockedReason, workflowGateNextAction: workflowGate.nextAction, recommendedProfile, requiredCapabilities }),
+    capabilityDecision,
+    registrySources,
+    resolvedAliases: profileSelection.resolvedAliases,
+    routingRuleHits: matchedRules.map((rule) => rule.id),
+    quarantineWarnings: quarantineWarningsForSources(registrySources),
+    adapterMapping,
+    cache: options.cache ? { contract: ROUTE_CACHE_CONTRACT_VERSION, key: cacheKey, status: 'miss', source: 'content_addressed_derived_route', authoritative: false } : undefined
+  };
+  profileSpans.push(runtimeProfileSpan('route_compute', computeStart));
+  if (options.cache) {
+    await writeRouteCache(projectRoot, cacheKey, decision);
+    decision.cache = { contract: ROUTE_CACHE_CONTRACT_VERSION, key: cacheKey, status: 'stored', source: 'content_addressed_derived_route', authoritative: false };
+  }
+  if (options.profile) {
+    decision.profile = [...profileSpans, runtimeProfileSpan('route_total', routeStart, routeStartedAt)];
+  }
+  return decision;
+}
+
+function latestRuntimeTaskStates(selections: LatestEligibleRunSelection[], states: RunState[]): Map<string, RunStateTaskRuntime> {
+  const stateByRunId = new Map(states.map((state) => [state.runId, state]));
+  const result = new Map<string, RunStateTaskRuntime>();
+  for (const selection of selections) {
+    const selected = selection.selected;
+    if (!selected) {
+      continue;
+    }
+    const taskState = stateByRunId.get(selected.runId)?.tasks[selected.taskId];
+    if (taskState) {
+      result.set(selected.taskId, taskState);
+    }
+  }
+  return result;
+}
+
+function routeNextAction(input: {
+  taskId: string;
+  taskExists: boolean;
+  hasBlockingGap: boolean;
+  dependencyTaskId: string | null;
+  blockedReason: string | null;
+  workflowGateNextAction: string;
+  recommendedProfile: string | null;
+  requiredCapabilities: string[];
+}): string {
+  if (!input.taskExists) {
+    return `Create or restore task ${input.taskId} before routing.`;
+  }
+  if (input.hasBlockingGap) {
+    return `Fix task gaps before routing ${input.taskId}.`;
+  }
+  if (input.dependencyTaskId) {
+    return input.blockedReason?.includes('has not passed required verification')
+      ? `Run sdd test task ${input.dependencyTaskId} before routing ${input.taskId}.`
+      : `Run sdd do task ${input.dependencyTaskId} before routing ${input.taskId}.`;
+  }
+  if (input.workflowGateNextAction) {
+    return input.workflowGateNextAction;
+  }
+  if (input.recommendedProfile) {
+    return `Use ${input.recommendedProfile} with ${input.requiredCapabilities.join(',') || 'no extra capability'} and preserve required artifacts before verify.`;
+  }
+  return `Declare a routable profile before routing ${input.taskId}.`;
+}

package/node_modules/@sdd-agent-platform/core/src/router/runtime-inspection.ts

@@ -0,0 +1,124 @@
+import {
+  AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION,
+  CAPABILITY_SOURCE_CATALOG_VERSION,
+  EXTERNAL_AGENT_PACK_IMPORT_POLICY_VERSION
+} from '../contracts.js';
+import {
+  BUILT_IN_EVIDENCE_INGESTION_CONTRACT,
+  BUILT_IN_HOST_ADAPTER_CONTRACT,
+  buildAgentSkillRuntimeRegistry
+} from './runtime-registry.js';
+import { buildTeamModePolicy } from './team-mode.js';
+import type {
+  AgentSkillTeamRuntimeInspection,
+  CapabilitySourceCatalog,
+  CapabilitySourceCatalogEntry,
+  ExternalAgentPackImportCheck,
+  ExternalAgentPackImportInspection,
+  SkillCapabilityContract,
+  SkillCapabilityRegistry
+} from './agent-runtime.js';
+
+export async function inspectAgentSkillTeamRuntime(projectRoot: string): Promise<AgentSkillTeamRuntimeInspection> {
+  const registry = await buildAgentSkillRuntimeRegistry(projectRoot);
+  return {
+    version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION,
+    profiles: registry.profiles,
+    skillCapabilities: registry.skillCapabilities,
+    capabilitySources: registry.capabilitySources,
+    hostAdapter: BUILT_IN_HOST_ADAPTER_CONTRACT,
+    evidenceIngestion: BUILT_IN_EVIDENCE_INGESTION_CONTRACT,
+    teamMode: buildTeamModePolicy({ activation: 'off' }),
+    reusePolicy: 'reuse_direct native host/MCP capabilities first; external prompt packs are quarantined material sources and projected only as structured metadata.',
+    registrySources: registry.registrySources,
+    aliases: registry.aliases,
+    routingRules: registry.routingRules,
+    adapterMappings: registry.adapterMappings
+  };
+}
+
+export async function listSkillCapabilities(projectRoot: string): Promise<SkillCapabilityRegistry> {
+  const registry = await buildAgentSkillRuntimeRegistry(projectRoot);
+  return {
+    version: AGENT_SKILL_TEAM_RUNTIME_CONTRACT_VERSION,
+    capabilities: registry.skillCapabilities,
+    registrySources: registry.registrySources.filter((source) => source.kind === 'skill_capability')
+  };
+}
+
+export async function inspectSkillCapability(projectRoot: string, capabilityId: string): Promise<SkillCapabilityContract | null> {
+  const registry = await listSkillCapabilities(projectRoot);
+  return registry.capabilities.find((capability) => capability.id === capabilityId) ?? null;
+}
+
+export async function listCapabilitySources(projectRoot: string): Promise<CapabilitySourceCatalog> {
+  const registry = await buildAgentSkillRuntimeRegistry(projectRoot);
+  return {
+    version: CAPABILITY_SOURCE_CATALOG_VERSION,
+    sources: registry.capabilitySources,
+    registrySources: registry.registrySources.filter((source) => source.kind === 'capability_source')
+  };
+}
+
+export async function inspectCapabilitySource(projectRoot: string, sourceId: string): Promise<CapabilitySourceCatalogEntry | null> {
+  const catalog = await listCapabilitySources(projectRoot);
+  return catalog.sources.find((source) => source.id === sourceId) ?? null;
+}
+
+export async function inspectExternalAgentPackImport(projectRoot: string, sourceId: string): Promise<ExternalAgentPackImportInspection> {
+  const registry = await buildAgentSkillRuntimeRegistry(projectRoot);
+  const source = registry.capabilitySources.find((entry) => entry.id === sourceId);
+  if (!source) {
+    return {
+      version: EXTERNAL_AGENT_PACK_IMPORT_POLICY_VERSION,
+      sourceId,
+      status: 'denied',
+      checks: [{ check: 'source_catalog', status: 'fail', evidence: 'Source id is not present in CapabilitySourceCatalog.' }],
+      mappingResult: 'no SDD mapping available',
+      allowedProfiles: [],
+      riskCeiling: 'research_before_implementation',
+      reason: 'Unknown external source cannot be routed.'
+    };
+  }
+  if (source.reuseDecision === 'avoid' || source.quarantineStatus === 'denied') {
+    return {
+      version: EXTERNAL_AGENT_PACK_IMPORT_POLICY_VERSION,
+      sourceId,
+      status: 'denied',
+      checks: [
+        { check: 'reuse_decision', status: source.reuseDecision === 'avoid' ? 'fail' : 'warn', evidence: `${source.id} reuse=${source.reuseDecision}.` },
+        { check: 'quarantine_status', status: source.quarantineStatus === 'denied' ? 'fail' : 'warn', evidence: `${source.id} quarantine_status=${source.quarantineStatus}.` },
+        { check: 'host_compatibility', status: source.hostCompatibility.some((item) => item.includes('unsupported')) ? 'fail' : 'warn', evidence: source.hostCompatibility.join(',') || 'not declared' }
+      ],
+      mappingResult: 'future adapter or unsupported source only',
+      allowedProfiles: [],
+      riskCeiling: 'research_before_implementation',
+      reason: source.rationale
+    };
+  }
+  const checks: ExternalAgentPackImportCheck[] = source.quarantineRequired
+    ? [
+      { check: 'license_source_attribution', status: 'not_run', evidence: 'Quarantine inspection must verify source and license before import.' },
+      { check: 'hidden_unicode_scan', status: 'not_run', evidence: 'External material has not been scanned for hidden Unicode.' },
+      { check: 'secret_scan', status: 'not_run', evidence: 'External material has not been scanned for secrets.' },
+      { check: 'dangerous_command_scan', status: 'not_run', evidence: 'External material has not been scanned for dangerous commands.' },
+      { check: 'permission_model', status: source.permissionModel.length > 0 ? 'pass' : 'fail', evidence: source.permissionModel.join(',') || 'No permission model declared.' },
+      { check: 'provenance_requirements', status: source.provenanceRequirements.length > 0 ? 'pass' : 'fail', evidence: source.provenanceRequirements.join(',') || 'No provenance requirements declared.' },
+      { check: 'sdd_frontmatter_mapping', status: 'not_run', evidence: 'External material has not been mapped to SDD capability/profile fields.' }
+    ]
+    : [
+      { check: 'source_catalog', status: 'pass', evidence: `${source.id} is cataloged as ${source.reuseDecision}.` },
+      { check: 'quarantine_required', status: 'pass', evidence: 'This source is a native capability or mechanism reference, not an imported prompt pack.' },
+      { check: 'provenance_requirements', status: source.provenanceRequirements.length > 0 ? 'pass' : 'fail', evidence: source.provenanceRequirements.join(',') || 'No provenance requirements declared.' }
+    ];
+  return {
+    version: EXTERNAL_AGENT_PACK_IMPORT_POLICY_VERSION,
+    sourceId,
+    status: source.quarantineRequired ? 'quarantined' : 'approved',
+    checks,
+    mappingResult: source.quarantineRequired ? 'pending structured metadata mapping' : 'available through host adapter or mechanism reference',
+    allowedProfiles: source.quarantineRequired ? ['domain_expert', 'researcher'] : ['researcher', 'architect', 'orchestrator'],
+    riskCeiling: source.quarantineRequired ? 'research_before_implementation' : 'compact_boundary_only',
+    reason: source.quarantineRequired ? 'External material is not routable until quarantine checks pass.' : source.rationale
+  };
+}

package/node_modules/@sdd-agent-platform/core/src/router/runtime-registry.ts

@@ -0,0 +1,123 @@
+import { contractIssue, type ContractValidationIssue } from '../contracts/issues.js';
+import { readProjectConfig as readProjectConfigFile } from '../config/project-config.js';
+import { BUILT_IN_CAPABILITY_SOURCES } from '../registries/capability-sources.js';
+import { BUILT_IN_SKILL_CAPABILITIES } from '../registries/skill-capabilities.js';
+import {
+  BUILT_IN_AGENT_PROFILES,
+  BUILT_IN_DELEGATION_WAVES,
+  BUILT_IN_EVIDENCE_INGESTION_CONTRACT,
+  BUILT_IN_HOST_ADAPTER_CONTRACT,
+  BUILT_IN_MODEL_POLICIES
+} from '../registries/agent-runtime-static.js';
+import { parseAgentRuntimeConfig } from './agent-runtime-config.js';
+import type {
+  AgentProfileContract,
+  AgentRuntimeAdapterMapping,
+  AgentRuntimeRoutingRule,
+  CapabilitySourceCatalogEntry,
+  ProjectAgentRuntimeConfig,
+  RuntimeRegistryEntrySource,
+  SkillCapabilityContract
+} from './agent-runtime.js';
+
+export {
+  BUILT_IN_AGENT_PROFILES,
+  BUILT_IN_DELEGATION_WAVES,
+  BUILT_IN_EVIDENCE_INGESTION_CONTRACT,
+  BUILT_IN_HOST_ADAPTER_CONTRACT,
+  BUILT_IN_MODEL_POLICIES
+};
+
+export interface AgentSkillRuntimeRegistry {
+  profiles: AgentProfileContract[];
+  skillCapabilities: SkillCapabilityContract[];
+  capabilitySources: CapabilitySourceCatalogEntry[];
+  registrySources: RuntimeRegistryEntrySource[];
+  aliases: Record<string, string>;
+  routingRules: AgentRuntimeRoutingRule[];
+  adapterMappings: AgentRuntimeAdapterMapping[];
+  issues: ContractValidationIssue[];
+}
+
+function emptyAgentRuntimeConfig(): ProjectAgentRuntimeConfig {
+  return {
+    profiles: [],
+    skillCapabilities: [],
+    capabilitySources: [],
+    aliases: {},
+    routingRules: [],
+    adapterMappings: []
+  };
+}
+
+export async function buildAgentSkillRuntimeRegistry(projectRoot: string): Promise<AgentSkillRuntimeRegistry> {
+  const config = await readProjectConfigFile<ProjectAgentRuntimeConfig>(projectRoot, parseAgentRuntimeConfig);
+  return mergeAgentSkillRuntimeRegistry(config.agentRuntime ?? emptyAgentRuntimeConfig());
+}
+
+export function mergeAgentSkillRuntimeRegistry(projectRuntime: ProjectAgentRuntimeConfig): AgentSkillRuntimeRegistry {
+  const issues: ContractValidationIssue[] = [];
+  const profiles = new Map<string, AgentProfileContract>();
+  const skillCapabilities = new Map<string, SkillCapabilityContract>();
+  const capabilitySources = new Map<string, CapabilitySourceCatalogEntry>();
+  const registrySources: RuntimeRegistryEntrySource[] = [];
+
+  for (const profile of BUILT_IN_AGENT_PROFILES) {
+    profiles.set(profile.id, profile);
+    registrySources.push({ id: profile.id, kind: 'profile', origin: 'built_in', sourceId: null, quarantineRequired: false });
+  }
+  for (const capability of BUILT_IN_SKILL_CAPABILITIES) {
+    skillCapabilities.set(capability.id, capability);
+    registrySources.push({ id: capability.id, kind: 'skill_capability', origin: 'built_in', sourceId: null, quarantineRequired: false });
+  }
+  for (const source of BUILT_IN_CAPABILITY_SOURCES) {
+    capabilitySources.set(source.id, source);
+    registrySources.push({ id: source.id, kind: 'capability_source', origin: 'built_in', sourceId: source.id, quarantineRequired: source.quarantineRequired });
+  }
+
+  for (const source of projectRuntime.capabilitySources) {
+    if (capabilitySources.has(source.id)) {
+      issues.push(contractIssue(`agent_runtime.capability_sources.${source.id}`, 'Capability source id duplicates an existing source.', 'Use a project-specific id; Phase 6.3 does not allow overriding built-ins.'));
+      continue;
+    }
+    capabilitySources.set(source.id, source);
+    registrySources.push({ id: source.id, kind: 'capability_source', origin: 'project_config', sourceId: source.id, quarantineRequired: source.quarantineRequired });
+  }
+
+  for (const capability of projectRuntime.skillCapabilities) {
+    if (skillCapabilities.has(capability.id)) {
+      issues.push(contractIssue(`agent_runtime.skill_capabilities.${capability.id}`, 'Skill capability id duplicates an existing capability.', 'Use a project-specific id; Phase 6.3 does not allow overriding built-ins.'));
+      continue;
+    }
+    skillCapabilities.set(capability.id, capability);
+    const source = capabilitySources.get(capability.sourceRef);
+    if (!source) {
+      issues.push(contractIssue(`agent_runtime.skill_capabilities.${capability.id}.source_ref`, `Skill capability references unknown source ${capability.sourceRef || '<empty>'}.`, 'Declare capability_sources entry first, or point source_ref at an existing capability source id.'));
+    }
+    registrySources.push({ id: capability.id, kind: 'skill_capability', origin: 'project_config', sourceId: source?.id ?? (capability.sourceRef || null), quarantineRequired: source?.quarantineRequired ?? false });
+  }
+
+  for (const profile of projectRuntime.profiles) {
+    if (profiles.has(profile.id)) {
+      issues.push(contractIssue(`agent_runtime.profiles.${profile.id}`, 'Agent profile id duplicates an existing profile.', 'Use a project-specific id; Phase 6.3 does not allow overriding built-ins.'));
+      continue;
+    }
+    profiles.set(profile.id, profile);
+    registrySources.push({ id: profile.id, kind: 'profile', origin: 'project_config', sourceId: null, quarantineRequired: false });
+  }
+
+  return {
+    profiles: [...profiles.values()].sort((left, right) => left.id.localeCompare(right.id)),
+    skillCapabilities: [...skillCapabilities.values()].sort((left, right) => left.id.localeCompare(right.id)),
+    capabilitySources: [...capabilitySources.values()].sort((left, right) => left.id.localeCompare(right.id)),
+    registrySources: [...registrySources].sort((left, right) => `${left.kind}:${left.id}`.localeCompare(`${right.kind}:${right.id}`)),
+    aliases: { ...projectRuntime.aliases },
+    routingRules: [...projectRuntime.routingRules],
+    adapterMappings: [...projectRuntime.adapterMappings],
+    issues
+  };
+}
+
+export function registrySourceFor(registry: AgentSkillRuntimeRegistry, kind: RuntimeRegistryEntrySource['kind'], id: string): RuntimeRegistryEntrySource | null {
+  return registry.registrySources.find((source) => source.kind === kind && source.id === id) ?? null;
+}