sealbridge 0.2.1 → 0.3.0

package/dist/spec/examples/sample-task-manifest.0.2.0.json

@@ -0,0 +1,173 @@
+{
+  "protocolVersion": "0.2.0",
+  "taskId": "task_01J8Z9M0Q4X8K2R7V5N3P1W9",
+  "createdAt": "2026-10-25T12:00:00Z",
+  "deadline": "2026-10-25T18:00:00Z",
+  "requester": {
+    "ownerDid": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+    "agentDid": "did:key:z6MkpTHR8VNsBxYAAWHut2Geadd9jSwuBV8xRoAnwWsdvktH",
+    "displayName": "Alice Planner Agent",
+    "relayEndpoint": "wss://relay.example.org/v1"
+  },
+  "worker": {
+    "ownerDid": "did:key:z6MkjchhfUsD6mmvni8mCdXHw216Xrm9bQe2mBH1P5RDjVJG",
+    "agentDid": "did:key:z6MknGc3ocHs3zdPiJbnaaqDi58NGb4pk1Sp9WxWufuXSdxf",
+    "displayName": "Bob Security Auditor Agent",
+    "relayEndpoint": "wss://relay.example.org/v1"
+  },
+  "task": {
+    "title": "Summarize architecture documents after owner opening",
+    "description": "After connection admission, inspection and owner opening, read the provided documents through the scoped capability and return the agreed structured summary.",
+    "acceptanceCriteria": [
+      {
+        "id": "ac_schema_valid",
+        "description": "Output JSON strictly conforms to io.outputSchema.",
+        "required": true
+      },
+      {
+        "id": "ac_citations_present",
+        "description": "Every finding includes a source document SHA-256 digest and line range.",
+        "required": true
+      }
+    ]
+  },
+  "io": {
+    "inputSchema": {
+      "type": "object",
+      "required": [
+        "docUris"
+      ],
+      "properties": {
+        "docUris": {
+          "type": "array",
+          "items": {
+            "type": "string"
+          }
+        }
+      }
+    },
+    "outputSchema": {
+      "type": "object",
+      "required": [
+        "summary",
+        "findings"
+      ],
+      "properties": {
+        "summary": {
+          "type": "string"
+        },
+        "findings": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": [
+              "id",
+              "severity",
+              "sourceDigest"
+            ],
+            "properties": {
+              "id": {
+                "type": "string"
+              },
+              "severity": {
+                "type": "string",
+                "enum": [
+                  "LOW",
+                  "MEDIUM",
+                  "HIGH",
+                  "CRITICAL"
+                ]
+              },
+              "sourceDigest": {
+                "type": "string",
+                "pattern": "^sha256:[a-f0-9]{64}$"
+              }
+            }
+          }
+        }
+      }
+    },
+    "inputArtifacts": [
+      {
+        "name": "docs/spec-draft.md",
+        "digest": "sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
+        "mediaType": "text/markdown",
+        "sizeBytes": 4096
+      }
+    ]
+  },
+  "verification": {
+    "mode": "hybrid",
+    "requireUsageReceipt": true,
+    "requireExecutionAttestation": true,
+    "maxRetries": 2,
+    "checks": [
+      {
+        "checkId": "chk_schema",
+        "kind": "json_schema",
+        "target": "artifact://report.json",
+        "expectedExitCode": 0
+      },
+      {
+        "checkId": "chk_owner_review",
+        "kind": "human_review",
+        "target": "GATE_DELIVERY_ACCEPT"
+      }
+    ]
+  },
+  "budget": {
+    "costBearer": "worker_byok",
+    "maxInputTokens": 50000,
+    "maxOutputTokens": 10000,
+    "maxToolInvocations": 10,
+    "maxWallClockSeconds": 600,
+    "onOverrun": "request_hitl_amendment"
+  },
+  "permissions": {
+    "maxDelegationDepth": 0,
+    "grantedCapabilities": [
+      {
+        "capabilityId": "cap_read_docs_01",
+        "resource": "mcp://alice-gateway/docs/spec-draft.md",
+        "allowedTools": [
+          "resources/read"
+        ],
+        "argConstraints": {
+          "type": "object",
+          "required": [
+            "uri"
+          ],
+          "properties": {
+            "uri": {
+              "const": "mcp://alice-gateway/docs/spec-draft.md"
+            }
+          }
+        },
+        "maxInvocations": 5,
+        "expiresAt": "2026-10-25T18:00:00Z"
+      }
+    ]
+  },
+  "sandboxPolicy": {
+    "isolationLevel": "oci_container",
+    "networkAccess": "none",
+    "filesystemScope": "ephemeral_workspace_only"
+  },
+  "hitlPolicy": {
+    "requiredGates": [
+      "GATE_CONTRACT_ACCEPT",
+      "GATE_EXTERNAL_SIDE_EFFECT",
+      "GATE_BUDGET_OVERRUN",
+      "GATE_DELIVERY_ACCEPT"
+    ]
+  },
+  "signatures": {
+    "requesterSignature": {
+      "signerDid": "did:key:z6MkhaXgBZDvotDkL5257faiztiGiC2QtKLGpbnnEGta2doK",
+      "canonicalization": "RFC8785-JCS",
+      "payloadDigest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "signedAt": "2026-10-25T12:00:05Z",
+      "signature": "ed25519:dGhpcyBpcyBhIHNhbXBsZSBzY2hlbWEtdmFsaWRhdGVkIGVkMjU1MTkgc2lnbmF0dXJlIGJsb2NrIGZvciBkcmFmdCB2MC4x"
+    }
+  }
+}

package/dist/spec/task-manifest.0.1.0.schema.json

@@ -0,0 +1,422 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://acp-spec.local/schemas/v0.1/task-manifest.schema.json",
+  "title": "TaskManifest",
+  "description": "Cross-owner agent collaboration task manifest and contract specification.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "protocolVersion",
+    "taskId",
+    "createdAt",
+    "deadline",
+    "requester",
+    "task",
+    "io",
+    "verification",
+    "budget",
+    "permissions",
+    "sandboxPolicy",
+    "hitlPolicy"
+  ],
+  "properties": {
+    "protocolVersion": {
+      "type": "string",
+      "const": "0.1.0",
+      "description": "Protocol specification version."
+    },
+    "taskId": {
+      "type": "string",
+      "pattern": "^task_[a-zA-Z0-9_-]{8,64}$",
+      "description": "Globally unique task identifier."
+    },
+    "parentTaskId": {
+      "type": "string",
+      "pattern": "^task_[a-zA-Z0-9_-]{8,64}$",
+      "description": "Optional parent task identifier when sub-delegating."
+    },
+    "createdAt": {
+      "type": "string",
+      "format": "date-time"
+    },
+    "deadline": {
+      "type": "string",
+      "format": "date-time",
+      "description": "Hard UTC timestamp deadline after which the task transitions to TIMED_OUT."
+    },
+    "requester": {
+      "$ref": "#/$defs/partyDescriptor"
+    },
+    "worker": {
+      "$ref": "#/$defs/partyDescriptor",
+      "description": "Target worker party if directed; omitted in open proposals before ACCEPT."
+    },
+    "task": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["title", "description", "acceptanceCriteria"],
+      "properties": {
+        "skillId": { "type": "string", "minLength": 1 },
+        "taskType": { "type": "string", "minLength": 1 },
+        "title": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 200
+        },
+        "description": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 32768,
+          "description": "Task instructions. Must be treated as untrusted data by the worker runtime."
+        },
+        "acceptanceCriteria": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 50,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["id", "description", "required"],
+            "properties": {
+              "id": {
+                "type": "string",
+                "pattern": "^ac_[a-zA-Z0-9_-]{1,32}$"
+              },
+              "description": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 1000
+              },
+              "required": {
+                "type": "boolean"
+              }
+            }
+          }
+        }
+      }
+    },
+    "io": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["inputSchema", "outputSchema"],
+      "properties": {
+        "inputSchema": {
+          "type": "object",
+          "description": "JSON Schema describing the structured task input payload."
+        },
+        "outputSchema": {
+          "type": "object",
+          "description": "JSON Schema describing the required structured output artifact."
+        },
+        "inputArtifacts": {
+          "type": "array",
+          "maxItems": 100,
+          "items": {
+            "$ref": "#/$defs/artifactRef"
+          }
+        }
+      }
+    },
+    "verification": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["mode", "requireUsageReceipt", "requireExecutionAttestation", "maxRetries"],
+      "properties": {
+        "mode": {
+          "type": "string",
+          "enum": ["schema_only", "automated_checks", "human_in_the_loop", "hybrid"],
+          "description": "How the requester gateway verifies delivered artifacts."
+        },
+        "requireUsageReceipt": {
+          "type": "boolean"
+        },
+        "requireExecutionAttestation": {
+          "type": "boolean"
+        },
+        "maxRetries": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 10
+        },
+        "checks": {
+          "type": "array",
+          "maxItems": 20,
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["checkId", "kind", "target"],
+            "properties": {
+              "checkId": {
+                "type": "string",
+                "pattern": "^chk_[a-zA-Z0-9_-]{1,32}$"
+              },
+              "kind": {
+                "type": "string",
+                "enum": ["json_schema", "sha256_match", "deterministic_command", "human_review"]
+              },
+              "target": {
+                "type": "string",
+                "minLength": 1,
+                "maxLength": 512
+              },
+              "expectedExitCode": {
+                "type": "integer",
+                "default": 0
+              }
+            }
+          }
+        }
+      }
+    },
+    "budget": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "costBearer",
+        "maxInputTokens",
+        "maxOutputTokens",
+        "maxToolInvocations",
+        "maxWallClockSeconds",
+        "onOverrun"
+      ],
+      "properties": {
+        "costBearer": {
+          "type": "string",
+          "enum": ["worker_byok", "bilateral_quota", "external_settlement_plugin"],
+          "description": "Who bears the LLM/API inference cost. Never shares raw API keys across owners."
+        },
+        "maxInputTokens": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 100000000
+        },
+        "maxOutputTokens": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 100000000
+        },
+        "maxToolInvocations": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 100000
+        },
+        "maxWallClockSeconds": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 604800
+        },
+        "onOverrun": {
+          "type": "string",
+          "enum": ["hard_stop", "request_hitl_amendment"]
+        },
+        "settlementExtension": {
+          "type": "object",
+          "description": "Optional plugin metadata for off-protocol settlement or bilateral ledger accounting."
+        }
+      }
+    },
+    "permissions": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["maxDelegationDepth", "grantedCapabilities"],
+      "properties": {
+        "maxDelegationDepth": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 5,
+          "description": "0 forbids sub-delegation to any third-party agent."
+        },
+        "grantedCapabilities": {
+          "type": "array",
+          "maxItems": 50,
+          "items": {
+            "$ref": "#/$defs/capabilityGrantSpec"
+          }
+        }
+      }
+    },
+    "sandboxPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["isolationLevel", "networkAccess", "filesystemScope"],
+      "properties": {
+        "allowSubprocessFallback": {
+          "type": "boolean",
+          "description": "Explicitly permit a restricted subprocess when OCI isolation is requested."
+        },
+        "isolationLevel": {
+          "type": "string",
+          "enum": ["subprocess_restricted", "oci_container", "wasm", "microvm"]
+        },
+        "networkAccess": {
+          "type": "string",
+          "enum": ["none", "allowlist_only"]
+        },
+        "allowedHosts": {
+          "type": "array",
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 253
+          }
+        },
+        "filesystemScope": {
+          "type": "string",
+          "enum": ["ephemeral_workspace_only", "read_only_inputs"]
+        }
+      }
+    },
+    "hitlPolicy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["requiredGates"],
+      "properties": {
+        "requiredGates": {
+          "type": "array",
+          "uniqueItems": true,
+          "items": {
+            "type": "string",
+            "enum": [
+              "GATE_CONTRACT_ACCEPT",
+              "GATE_EXTERNAL_SIDE_EFFECT",
+              "GATE_BUDGET_OVERRUN",
+              "GATE_SUB_DELEGATION",
+              "GATE_DELIVERY_ACCEPT"
+            ]
+          }
+        }
+      }
+    },
+    "signatures": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "requesterSignature": {
+          "$ref": "#/$defs/signatureBlock"
+        },
+        "workerSignature": {
+          "$ref": "#/$defs/signatureBlock"
+        }
+      }
+    }
+  },
+  "$defs": {
+    "didKey": {
+      "type": "string",
+      "pattern": "^did:key:z[1-9A-HJ-NP-Za-km-z]{32,128}$"
+    },
+    "sha256Digest": {
+      "type": "string",
+      "pattern": "^sha256:[a-f0-9]{64}$"
+    },
+    "partyDescriptor": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ownerDid", "agentDid"],
+      "properties": {
+        "ownerDid": {
+          "$ref": "#/$defs/didKey"
+        },
+        "agentDid": {
+          "$ref": "#/$defs/didKey"
+        },
+        "displayName": {
+          "type": "string",
+          "maxLength": 100
+        },
+        "relayEndpoint": {
+          "type": "string",
+          "format": "uri"
+        }
+      }
+    },
+    "artifactRef": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "digest", "mediaType", "sizeBytes"],
+      "properties": {
+        "name": {
+          "type": "string",
+          "pattern": "^[a-zA-Z0-9._/-]{1,255}$"
+        },
+        "digest": {
+          "$ref": "#/$defs/sha256Digest"
+        },
+        "mediaType": {
+          "type": "string",
+          "maxLength": 128
+        },
+        "sizeBytes": {
+          "type": "integer",
+          "minimum": 0,
+          "maximum": 1073741824
+        }
+      }
+    },
+    "capabilityGrantSpec": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["capabilityId", "resource", "allowedTools", "maxInvocations", "expiresAt"],
+      "properties": {
+        "capabilityId": {
+          "type": "string",
+          "pattern": "^cap_[a-zA-Z0-9_-]{4,64}$"
+        },
+        "resource": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 512,
+          "description": "Scoped URI or MCP resource prefix (e.g. mcp://owner-a/docs/public/*)."
+        },
+        "allowedTools": {
+          "type": "array",
+          "minItems": 1,
+          "maxItems": 50,
+          "items": {
+            "type": "string",
+            "minLength": 1,
+            "maxLength": 128
+          }
+        },
+        "argConstraints": {
+          "type": "object",
+          "description": "Optional JSON Schema constraining tool arguments."
+        },
+        "maxInvocations": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 10000
+        },
+        "expiresAt": {
+          "type": "string",
+          "format": "date-time"
+        }
+      }
+    },
+    "signatureBlock": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["signerDid", "canonicalization", "payloadDigest", "signedAt", "signature"],
+      "properties": {
+        "signerDid": {
+          "$ref": "#/$defs/didKey"
+        },
+        "canonicalization": {
+          "type": "string",
+          "const": "RFC8785-JCS"
+        },
+        "payloadDigest": {
+          "$ref": "#/$defs/sha256Digest"
+        },
+        "signedAt": {
+          "type": "string",
+          "format": "date-time"
+        },
+        "signature": {
+          "type": "string",
+          "pattern": "^ed25519:[a-zA-Z0-9+/=_-]{64,180}$"
+        }
+      }
+    }
+  }
+}