sdd-agent-platform 0.4.2 → 0.5.1

package/node_modules/@sdd-agent-platform/core/src/registries/capability-sources.ts

@@ -1,253 +1,253 @@
-import { CAPABILITY_SOURCE_CATALOG_VERSION } from '../contracts.js';
-import type {
-  CapabilitySourceAllowedEvidenceType,
-  CapabilitySourceCatalogEntry,
-  CapabilitySourceKind,
-  CapabilitySourceQuarantineStatus,
-  CapabilityReuseDecision
-} from '../router/agent-runtime.js';
-
-const FORBIDDEN_RUNTIME_AUTHORITY = [
-  'lifecycle gate authority',
-  'stage completion decision',
-  'truth-alignment approval',
-  'ship readiness pass',
-  'permission escalation'
-];
-
-interface CapabilitySourceInput {
-  id: string;
-  name: string;
-  kind: CapabilitySourceKind;
-  sourceRef: string;
-  reuseDecision: CapabilityReuseDecision;
-  quarantineRequired: boolean;
-  quarantineStatus: CapabilitySourceQuarantineStatus;
-  permissionModel: string[];
-  provenanceRequirements: string[];
-  hostCompatibility: string[];
-  allowedEvidenceTypes: CapabilitySourceAllowedEvidenceType[];
-  forbiddenAuthority?: string[];
-  allowedUse: string;
-  attribution: string;
-  rationale: string;
-}
-
-function source(input: CapabilitySourceInput): CapabilitySourceCatalogEntry {
-  return {
-    version: CAPABILITY_SOURCE_CATALOG_VERSION,
-    forbiddenAuthority: input.forbiddenAuthority ?? FORBIDDEN_RUNTIME_AUTHORITY,
-    ...input
-  };
-}
-
-export const BUILT_IN_CAPABILITY_SOURCES: CapabilitySourceCatalogEntry[] = [
-  source({
-    id: 'claude_code_native',
-    name: 'Claude Code native capabilities',
-    kind: 'native_host',
-    sourceRef: 'Claude Code subagents/skills/MCP/hooks/settings/background tasks',
-    reuseDecision: 'reuse_direct',
-    quarantineRequired: false,
-    quarantineStatus: 'not_required',
-    permissionModel: ['host allow/ask/deny permissions', 'skill allowed-tools preapproval', 'subagent tool isolation', 'MCP server trust boundary'],
-    provenanceRequirements: ['managed entry path or host surface', 'host session/task id when delegated', 'tool summary or artifact reference'],
-    hostCompatibility: ['claude-code:supported'],
-    allowedEvidenceTypes: ['execution_record', 'command_output', 'external_reference'],
-    allowedUse: 'host-native execution, permission projection, and provenance capture',
-    attribution: 'Claude Code host runtime',
-    rationale: 'Reuse execution mechanics while SDD retains lifecycle, evidence, and completion authority.'
-  }),
-  source({
-    id: 'context7_mcp',
-    name: 'Context7 MCP',
-    kind: 'mcp_tool',
-    sourceRef: 'Context7 documentation MCP',
-    reuseDecision: 'reuse_direct',
-    quarantineRequired: false,
-    quarantineStatus: 'not_required',
-    permissionModel: ['MCP tool call with host approval policy', 'read-only external documentation lookup'],
-    provenanceRequirements: ['MCP server id', 'library id or source URL', 'retrieval timestamp or command evidence'],
-    hostCompatibility: ['mcp:supported', 'claude-code:supported'],
-    allowedEvidenceTypes: ['external_reference'],
-    allowedUse: 'current library/API documentation lookup with source evidence',
-    attribution: 'Context7 MCP',
-    rationale: 'Mature docs lookup should be declared as capability, not rebuilt.'
-  }),
-  source({
-    id: 'playwright_mcp',
-    name: 'Playwright browser capability',
-    kind: 'mcp_tool',
-    sourceRef: 'Playwright MCP/CLI',
-    reuseDecision: 'reuse_direct',
-    quarantineRequired: false,
-    quarantineStatus: 'not_required',
-    permissionModel: ['browser automation with host approval policy', 'project-scoped local/browser access'],
-    provenanceRequirements: ['browser snapshot or trace path', 'command output', 'target URL or local route'],
-    hostCompatibility: ['mcp:supported', 'cli:supported', 'claude-code:supported'],
-    allowedEvidenceTypes: ['browser_snapshot', 'command_output'],
-    allowedUse: 'browser/UI validation evidence mapped into SDD artifacts',
-    attribution: 'Playwright',
-    rationale: 'Browser verification should be ingested as evidence rather than replaced by prompts.'
-  }),
-  source({
-    id: 'codex_host_future',
-    name: 'Codex host adapter placeholder',
-    kind: 'future_adapter',
-    sourceRef: 'Codex CLI/agent host behavior requires project validation before routing',
-    reuseDecision: 'avoid',
-    quarantineRequired: true,
-    quarantineStatus: 'denied',
-    permissionModel: ['unsupported until Codex sandbox, approval, and MCP behavior are verified'],
-    provenanceRequirements: ['future host session id', 'future approval/sandbox record', 'future artifact mapping'],
-    hostCompatibility: ['codex:unsupported'],
-    allowedEvidenceTypes: ['none'],
-    allowedUse: 'unsupported future host adapter research only',
-    attribution: 'Codex public docs and issue review',
-    rationale: 'Current evidence is insufficient for stable active adapter fields; keep Codex out of routing until verified.'
-  }),
-  source({
-    id: 'opencode_patterns',
-    name: 'OpenCode mechanism patterns',
-    kind: 'mechanism_reference',
-    sourceRef: 'OpenCode / Oh My OpenCode',
-    reuseDecision: 'borrow_mechanism',
-    quarantineRequired: false,
-    quarantineStatus: 'not_required',
-    permissionModel: ['permission-shape reference only', 'allow/ask/deny normalized by SDD before use'],
-    provenanceRequirements: ['referenced OpenCode docs or source path', 'SDD adapter mapping decision'],
-    hostCompatibility: ['opencode:future_adapter'],
-    allowedEvidenceTypes: ['none'],
-    allowedUse: 'adapter, model policy, permission and session discipline references',
-    attribution: 'OpenCode ecosystem',
-    rationale: 'Borrow host-neutral mechanisms without coupling SDD core to OpenCode APIs.'
-  }),
-  source({
-    id: 'ohmy_team_mode',
-    name: 'Oh My team-mode pattern',
-    kind: 'mechanism_reference',
-    sourceRef: 'Oh My OpenCode team-mode',
-    reuseDecision: 'borrow_mechanism',
-    quarantineRequired: false,
-    quarantineStatus: 'not_required',
-    permissionModel: ['mechanism reference only', 'SDD-owned delegation waves and artifact requirements'],
-    provenanceRequirements: ['referenced source material', 'SDD team-mode policy id'],
-    hostCompatibility: ['opencode:future_adapter', 'host-neutral:supported'],
-    allowedEvidenceTypes: ['none'],
-    allowedUse: 'adaptive chief/member/team-message/delegation-wave contract shape',
-    attribution: 'Oh My OpenCode',
-    rationale: 'Team runtime remains host capability; SDD records policy and evidence.'
-  }),
-  source({
-    id: 'figma_design_future',
-    name: 'Figma design tooling placeholder',
-    kind: 'future_adapter',
-    sourceRef: 'Figma Dev Mode/MCP design context tooling',
-    reuseDecision: 'adapt_via_host_adapter',
-    quarantineRequired: true,
-    quarantineStatus: 'required',
-    permissionModel: ['read-only design context by default', 'write/generation actions unsupported', 'account/seat/tool limits must be checked'],
-    provenanceRequirements: ['Figma file or node reference', 'tool/server id', 'timestamped design context artifact'],
-    hostCompatibility: ['figma:future_adapter', 'mcp:future_adapter'],
-    allowedEvidenceTypes: ['design_context', 'external_reference'],
-    allowedUse: 'design context, tokens, variables, screenshots, and Code Connect mapping as candidate evidence',
-    attribution: 'Figma Dev Mode/MCP documentation',
-    rationale: 'Design tooling may inform UI/UX work, but write actions and readiness authority stay unsupported until adapter validation.'
-  }),
-  source({
-    id: 'ui_ux_pro_max_external',
-    name: 'ui-ux-pro-max external skill material',
-    kind: 'open_source_material',
-    sourceRef: 'ui-ux-pro-max external skill or user-global material',
-    reuseDecision: 'adapt_via_host_adapter',
-    quarantineRequired: true,
-    quarantineStatus: 'quarantined',
-    permissionModel: ['external skill material requires source review', 'no direct prompt import', 'no design-tool write authority'],
-    provenanceRequirements: ['material source path or registry id', 'license/source attribution', 'quarantine scan result'],
-    hostCompatibility: ['claude-code:future_adapter', 'host-neutral:future_adapter'],
-    allowedEvidenceTypes: ['candidate_evidence', 'design_context'],
-    allowedUse: 'UI/UX critique, heuristic review, and design deliverable metadata after quarantine',
-    attribution: 'ui-ux-pro-max external material',
-    rationale: 'Named external UI/UX skills are useful sources, but must be routed as mapped material rather than copied into baseline packs.'
-  }),
-  source({
-    id: 'roo_cline_permissions',
-    name: 'Roo/Cline tool permission envelope',
-    kind: 'mechanism_reference',
-    sourceRef: 'Roo Code / Cline modes and approvals',
-    reuseDecision: 'borrow_mechanism',
-    quarantineRequired: false,
-    quarantineStatus: 'not_required',
-    permissionModel: ['tool group and approval-policy reference only', 'SDD normalizes permissions before host projection'],
-    provenanceRequirements: ['referenced permission docs or source path', 'SDD permission policy id'],
-    hostCompatibility: ['host-neutral:supported'],
-    allowedEvidenceTypes: ['none'],
-    allowedUse: 'tool group, approval and runtime validation policy reference',
-    attribution: 'Roo Code / Cline',
-    rationale: 'Permission semantics should be structured, not natural-language prompt rules.'
-  }),
-  source({
-    id: 'cc_sdd_completion_gate',
-    name: 'cc-sdd dispatch and completion gates',
-    kind: 'mechanism_reference',
-    sourceRef: 'cc-sdd',
-    reuseDecision: 'borrow_mechanism',
-    quarantineRequired: false,
-    quarantineStatus: 'not_required',
-    permissionModel: ['mechanism reference only', 'SDD task graph remains authoritative'],
-    provenanceRequirements: ['referenced dispatch/completion source', 'SDD evidence mapping decision'],
-    hostCompatibility: ['host-neutral:supported'],
-    allowedEvidenceTypes: ['none'],
-    allowedUse: 'bounded delegation and completion gate reference',
-    attribution: 'cc-sdd',
-    rationale: 'Useful dispatch pattern, but SDD task graph and evidence remain authoritative.'
-  }),
-  source({
-    id: 'agency_agents_material',
-    name: 'Agency agents material library',
-    kind: 'open_source_material',
-    sourceRef: 'msitarzewski/agency-agents',
-    reuseDecision: 'adapt_via_host_adapter',
-    quarantineRequired: true,
-    quarantineStatus: 'quarantined',
-    permissionModel: ['external prompt pack quarantine', 'metadata extraction only before approval', 'no direct execution'],
-    provenanceRequirements: ['source repository/ref', 'license/source attribution', 'secret/dangerous-command scan result'],
-    hostCompatibility: ['host-neutral:future_adapter'],
-    allowedEvidenceTypes: ['candidate_evidence', 'external_reference'],
-    allowedUse: 'domain taxonomy, guardrail and deliverable metadata after quarantine',
-    attribution: 'agency-agents',
-    rationale: 'Large prompt packs are material sources only and must be mapped before routing use.'
-  }),
-  source({
-    id: 'wshobson_manifest',
-    name: 'wshobson/BuildWithClaude manifest patterns',
-    kind: 'mechanism_reference',
-    sourceRef: 'wshobson agents / BuildWithClaude',
-    reuseDecision: 'borrow_mechanism',
-    quarantineRequired: true,
-    quarantineStatus: 'required',
-    permissionModel: ['manifest mechanism reference after inspection', 'no copied agent body before quarantine'],
-    provenanceRequirements: ['source repository/ref', 'manifest ownership mapping', 'license/source attribution'],
-    hostCompatibility: ['claude-code:future_adapter', 'host-neutral:future_adapter'],
-    allowedEvidenceTypes: ['none'],
-    allowedUse: 'marketplace manifest and file ownership reference after inspection',
-    attribution: 'wshobson / BuildWithClaude',
-    rationale: 'Borrow manifest/file ownership mechanics without copying agents.'
-  }),
-  source({
-    id: 'crewai_autogen_langgraph',
-    name: 'CrewAI/AutoGen/LangGraph workflow frameworks',
-    kind: 'future_adapter',
-    sourceRef: 'CrewAI / AutoGen / LangGraph',
-    reuseDecision: 'avoid',
-    quarantineRequired: false,
-    quarantineStatus: 'not_required',
-    permissionModel: ['unsupported workflow-framework adapter'],
-    provenanceRequirements: ['future adapter analysis before any runtime use'],
-    hostCompatibility: ['workflow-framework:unsupported'],
-    allowedEvidenceTypes: ['none'],
-    allowedUse: 'future optional adapter only after Phase 6 contracts stabilize',
-    attribution: 'CrewAI / AutoGen / LangGraph',
-    rationale: 'Avoid adding a workflow OS or scheduler to Phase 6 core.'
-  })
-];
+import { CAPABILITY_SOURCE_CATALOG_VERSION } from '../contracts.js';
+import type {
+  CapabilitySourceAllowedEvidenceType,
+  CapabilitySourceCatalogEntry,
+  CapabilitySourceKind,
+  CapabilitySourceQuarantineStatus,
+  CapabilityReuseDecision
+} from '../router/agent-runtime.js';
+
+const FORBIDDEN_RUNTIME_AUTHORITY = [
+  'lifecycle gate authority',
+  'stage completion decision',
+  'sync-back apply decision',
+  'ship readiness pass',
+  'permission escalation'
+];
+
+interface CapabilitySourceInput {
+  id: string;
+  name: string;
+  kind: CapabilitySourceKind;
+  sourceRef: string;
+  reuseDecision: CapabilityReuseDecision;
+  quarantineRequired: boolean;
+  quarantineStatus: CapabilitySourceQuarantineStatus;
+  permissionModel: string[];
+  provenanceRequirements: string[];
+  hostCompatibility: string[];
+  allowedEvidenceTypes: CapabilitySourceAllowedEvidenceType[];
+  forbiddenAuthority?: string[];
+  allowedUse: string;
+  attribution: string;
+  rationale: string;
+}
+
+function source(input: CapabilitySourceInput): CapabilitySourceCatalogEntry {
+  return {
+    version: CAPABILITY_SOURCE_CATALOG_VERSION,
+    forbiddenAuthority: input.forbiddenAuthority ?? FORBIDDEN_RUNTIME_AUTHORITY,
+    ...input
+  };
+}
+
+export const BUILT_IN_CAPABILITY_SOURCES: CapabilitySourceCatalogEntry[] = [
+  source({
+    id: 'claude_code_native',
+    name: 'Claude Code native capabilities',
+    kind: 'native_host',
+    sourceRef: 'Claude Code subagents/skills/MCP/hooks/settings/background tasks',
+    reuseDecision: 'reuse_direct',
+    quarantineRequired: false,
+    quarantineStatus: 'not_required',
+    permissionModel: ['host allow/ask/deny permissions', 'skill allowed-tools preapproval', 'subagent tool isolation', 'MCP server trust boundary'],
+    provenanceRequirements: ['managed entry path or host surface', 'host session/task id when delegated', 'tool summary or artifact reference'],
+    hostCompatibility: ['claude-code:supported'],
+    allowedEvidenceTypes: ['execution_record', 'command_output', 'external_reference'],
+    allowedUse: 'host-native execution, permission projection, and provenance capture',
+    attribution: 'Claude Code host runtime',
+    rationale: 'Reuse execution mechanics while SDD retains lifecycle, evidence, and completion authority.'
+  }),
+  source({
+    id: 'context7_mcp',
+    name: 'Context7 MCP',
+    kind: 'mcp_tool',
+    sourceRef: 'Context7 documentation MCP',
+    reuseDecision: 'reuse_direct',
+    quarantineRequired: false,
+    quarantineStatus: 'not_required',
+    permissionModel: ['MCP tool call with host approval policy', 'read-only external documentation lookup'],
+    provenanceRequirements: ['MCP server id', 'library id or source URL', 'retrieval timestamp or command evidence'],
+    hostCompatibility: ['mcp:supported', 'claude-code:supported'],
+    allowedEvidenceTypes: ['external_reference'],
+    allowedUse: 'current library/API documentation lookup with source evidence',
+    attribution: 'Context7 MCP',
+    rationale: 'Mature docs lookup should be declared as capability, not rebuilt.'
+  }),
+  source({
+    id: 'playwright_mcp',
+    name: 'Playwright browser capability',
+    kind: 'mcp_tool',
+    sourceRef: 'Playwright MCP/CLI',
+    reuseDecision: 'reuse_direct',
+    quarantineRequired: false,
+    quarantineStatus: 'not_required',
+    permissionModel: ['browser automation with host approval policy', 'project-scoped local/browser access'],
+    provenanceRequirements: ['browser snapshot or trace path', 'command output', 'target URL or local route'],
+    hostCompatibility: ['mcp:supported', 'cli:supported', 'claude-code:supported'],
+    allowedEvidenceTypes: ['browser_snapshot', 'command_output'],
+    allowedUse: 'browser/UI validation evidence mapped into SDD artifacts',
+    attribution: 'Playwright',
+    rationale: 'Browser verification should be ingested as evidence rather than replaced by prompts.'
+  }),
+  source({
+    id: 'codex_host_future',
+    name: 'Codex host adapter placeholder',
+    kind: 'future_adapter',
+    sourceRef: 'Codex CLI/agent host behavior requires project validation before routing',
+    reuseDecision: 'avoid',
+    quarantineRequired: true,
+    quarantineStatus: 'denied',
+    permissionModel: ['unsupported until Codex sandbox, approval, and MCP behavior are verified'],
+    provenanceRequirements: ['future host session id', 'future approval/sandbox record', 'future artifact mapping'],
+    hostCompatibility: ['codex:unsupported'],
+    allowedEvidenceTypes: ['none'],
+    allowedUse: 'unsupported future host adapter research only',
+    attribution: 'Codex public docs and issue review',
+    rationale: 'Current evidence is insufficient for stable active adapter fields; keep Codex out of routing until verified.'
+  }),
+  source({
+    id: 'opencode_patterns',
+    name: 'OpenCode mechanism patterns',
+    kind: 'mechanism_reference',
+    sourceRef: 'OpenCode / Oh My OpenCode',
+    reuseDecision: 'borrow_mechanism',
+    quarantineRequired: false,
+    quarantineStatus: 'not_required',
+    permissionModel: ['permission-shape reference only', 'allow/ask/deny normalized by SDD before use'],
+    provenanceRequirements: ['referenced OpenCode docs or source path', 'SDD adapter mapping decision'],
+    hostCompatibility: ['opencode:future_adapter'],
+    allowedEvidenceTypes: ['none'],
+    allowedUse: 'adapter, model policy, permission and session discipline references',
+    attribution: 'OpenCode ecosystem',
+    rationale: 'Borrow host-neutral mechanisms without coupling SDD core to OpenCode APIs.'
+  }),
+  source({
+    id: 'ohmy_team_mode',
+    name: 'Oh My team-mode pattern',
+    kind: 'mechanism_reference',
+    sourceRef: 'Oh My OpenCode team-mode',
+    reuseDecision: 'borrow_mechanism',
+    quarantineRequired: false,
+    quarantineStatus: 'not_required',
+    permissionModel: ['mechanism reference only', 'SDD-owned delegation waves and artifact requirements'],
+    provenanceRequirements: ['referenced source material', 'SDD team-mode policy id'],
+    hostCompatibility: ['opencode:future_adapter', 'host-neutral:supported'],
+    allowedEvidenceTypes: ['none'],
+    allowedUse: 'adaptive chief/member/team-message/delegation-wave contract shape',
+    attribution: 'Oh My OpenCode',
+    rationale: 'Team runtime remains host capability; SDD records policy and evidence.'
+  }),
+  source({
+    id: 'figma_design_future',
+    name: 'Figma design tooling placeholder',
+    kind: 'future_adapter',
+    sourceRef: 'Figma Dev Mode/MCP design context tooling',
+    reuseDecision: 'adapt_via_host_adapter',
+    quarantineRequired: true,
+    quarantineStatus: 'required',
+    permissionModel: ['read-only design context by default', 'write/generation actions unsupported', 'account/seat/tool limits must be checked'],
+    provenanceRequirements: ['Figma file or node reference', 'tool/server id', 'timestamped design context artifact'],
+    hostCompatibility: ['figma:future_adapter', 'mcp:future_adapter'],
+    allowedEvidenceTypes: ['design_context', 'external_reference'],
+    allowedUse: 'design context, tokens, variables, screenshots, and Code Connect mapping as candidate evidence',
+    attribution: 'Figma Dev Mode/MCP documentation',
+    rationale: 'Design tooling may inform UI/UX work, but write actions and readiness authority stay unsupported until adapter validation.'
+  }),
+  source({
+    id: 'ui_ux_pro_max_external',
+    name: 'ui-ux-pro-max external skill material',
+    kind: 'open_source_material',
+    sourceRef: 'ui-ux-pro-max external skill or user-global material',
+    reuseDecision: 'adapt_via_host_adapter',
+    quarantineRequired: true,
+    quarantineStatus: 'quarantined',
+    permissionModel: ['external skill material requires source review', 'no direct prompt import', 'no design-tool write authority'],
+    provenanceRequirements: ['material source path or registry id', 'license/source attribution', 'quarantine scan result'],
+    hostCompatibility: ['claude-code:future_adapter', 'host-neutral:future_adapter'],
+    allowedEvidenceTypes: ['candidate_evidence', 'design_context'],
+    allowedUse: 'UI/UX critique, heuristic review, and design deliverable metadata after quarantine',
+    attribution: 'ui-ux-pro-max external material',
+    rationale: 'Named external UI/UX skills are useful sources, but must be routed as mapped material rather than copied into baseline packs.'
+  }),
+  source({
+    id: 'roo_cline_permissions',
+    name: 'Roo/Cline tool permission envelope',
+    kind: 'mechanism_reference',
+    sourceRef: 'Roo Code / Cline modes and approvals',
+    reuseDecision: 'borrow_mechanism',
+    quarantineRequired: false,
+    quarantineStatus: 'not_required',
+    permissionModel: ['tool group and approval-policy reference only', 'SDD normalizes permissions before host projection'],
+    provenanceRequirements: ['referenced permission docs or source path', 'SDD permission policy id'],
+    hostCompatibility: ['host-neutral:supported'],
+    allowedEvidenceTypes: ['none'],
+    allowedUse: 'tool group, approval and runtime validation policy reference',
+    attribution: 'Roo Code / Cline',
+    rationale: 'Permission semantics should be structured, not natural-language prompt rules.'
+  }),
+  source({
+    id: 'cc_sdd_completion_gate',
+    name: 'cc-sdd dispatch and completion gates',
+    kind: 'mechanism_reference',
+    sourceRef: 'cc-sdd',
+    reuseDecision: 'borrow_mechanism',
+    quarantineRequired: false,
+    quarantineStatus: 'not_required',
+    permissionModel: ['mechanism reference only', 'SDD task graph remains authoritative'],
+    provenanceRequirements: ['referenced dispatch/completion source', 'SDD evidence mapping decision'],
+    hostCompatibility: ['host-neutral:supported'],
+    allowedEvidenceTypes: ['none'],
+    allowedUse: 'bounded delegation and completion gate reference',
+    attribution: 'cc-sdd',
+    rationale: 'Useful dispatch pattern, but SDD task graph and evidence remain authoritative.'
+  }),
+  source({
+    id: 'agency_agents_material',
+    name: 'Agency agents material library',
+    kind: 'open_source_material',
+    sourceRef: 'msitarzewski/agency-agents',
+    reuseDecision: 'adapt_via_host_adapter',
+    quarantineRequired: true,
+    quarantineStatus: 'quarantined',
+    permissionModel: ['external prompt pack quarantine', 'metadata extraction only before approval', 'no direct execution'],
+    provenanceRequirements: ['source repository/ref', 'license/source attribution', 'secret/dangerous-command scan result'],
+    hostCompatibility: ['host-neutral:future_adapter'],
+    allowedEvidenceTypes: ['candidate_evidence', 'external_reference'],
+    allowedUse: 'domain taxonomy, guardrail and deliverable metadata after quarantine',
+    attribution: 'agency-agents',
+    rationale: 'Large prompt packs are material sources only and must be mapped before routing use.'
+  }),
+  source({
+    id: 'wshobson_manifest',
+    name: 'wshobson/BuildWithClaude manifest patterns',
+    kind: 'mechanism_reference',
+    sourceRef: 'wshobson agents / BuildWithClaude',
+    reuseDecision: 'borrow_mechanism',
+    quarantineRequired: true,
+    quarantineStatus: 'required',
+    permissionModel: ['manifest mechanism reference after inspection', 'no copied agent body before quarantine'],
+    provenanceRequirements: ['source repository/ref', 'manifest ownership mapping', 'license/source attribution'],
+    hostCompatibility: ['claude-code:future_adapter', 'host-neutral:future_adapter'],
+    allowedEvidenceTypes: ['none'],
+    allowedUse: 'marketplace manifest and file ownership reference after inspection',
+    attribution: 'wshobson / BuildWithClaude',
+    rationale: 'Borrow manifest/file ownership mechanics without copying agents.'
+  }),
+  source({
+    id: 'crewai_autogen_langgraph',
+    name: 'CrewAI/AutoGen/LangGraph workflow frameworks',
+    kind: 'future_adapter',
+    sourceRef: 'CrewAI / AutoGen / LangGraph',
+    reuseDecision: 'avoid',
+    quarantineRequired: false,
+    quarantineStatus: 'not_required',
+    permissionModel: ['unsupported workflow-framework adapter'],
+    provenanceRequirements: ['future adapter analysis before any runtime use'],
+    hostCompatibility: ['workflow-framework:unsupported'],
+    allowedEvidenceTypes: ['none'],
+    allowedUse: 'future optional adapter only after Phase 6 contracts stabilize',
+    attribution: 'CrewAI / AutoGen / LangGraph',
+    rationale: 'Avoid adding a workflow OS or scheduler to Phase 6 core.'
+  })
+];