usesteady 0.1.0-alpha.1

package/dist/src/claude/delivery-gate.js

@@ -0,0 +1,231 @@
+/**
+ * Claude Delivery Gate — Phase 8B.
+ *
+ * ── Role ──────────────────────────────────────────────────────────────────────
+ *
+ *   The delivery gate is the ONLY path through which a ClaudeAgentHandoffArtifact
+ *   reaches Claude Managed Agents. It enforces these invariants before any delivery:
+ *
+ *     1. Eligibility: artifact.eligibility === "approved_for_agent"
+ *     2. Tool policy: toolPolicy.networkAccess === "deny" (V1 lock, A2)
+ *     3. Tool policy: toolPolicy.filesystemMode === "scoped_only"
+ *     4. Tool policy: allowedTools is non-empty
+ *     5. Persistence: ucp.claude_handoff.v1 persisted before Claude is called
+ *     6. Immutability: artifact delivered === artifact persisted (same id)
+ *
+ *   After delivery, it persists either ucp.claude_receipt.v1 (accepted) or
+ *   ucp.claude_refused.v1 (refused) based on Claude's response.
+ *
+ * ── Three delivery paths ──────────────────────────────────────────────────────
+ *
+ *   Path A (happy):  persist handoff → call Claude → accepted → persist receipt
+ *   Path B (scope):  persist handoff → call Claude → refused_due_to_scope
+ *                      → persist refused → surface scope question
+ *   Path C (error):  persist handoff → call Claude → refused_due_to_execution_error
+ *                      → persist refused → rejected
+ *
+ *   Unknown response kinds → treated as refused_due_to_execution_error (fail-closed).
+ *
+ * ── Plugin contract ───────────────────────────────────────────────────────────
+ *
+ *   ClaudeAgentPlugin.receive() is the only call the gate makes into Claude.
+ *   The plugin must:
+ *     - Accept only ClaudeDeliveryRequest
+ *     - Return only ClaudeDeliveryResponse (one of three kinds)
+ *     - NOT reach back into the intake pipeline (A4)
+ *     - NOT call persistEnvelope (the gate owns all persistence)
+ *
+ * ── Persistence semantics ─────────────────────────────────────────────────────
+ *
+ *   ucp.claude_handoff.v1  — safety-critical (persistStrict): blocks delivery if fails
+ *   ucp.claude_receipt.v1  — audit-critical (persistBestEffort): logs gap if fails
+ *   ucp.claude_refused.v1  — audit-critical (persistBestEffort): logs gap if fails
+ *
+ * ── deliveryId semantics ──────────────────────────────────────────────────────
+ *
+ *   deliveryId is a delivery-attempt identifier, NOT a content identifier.
+ *   Never use it for provenance chain links — use artifact.artifactId for those.
+ *
+ * See: docs/claude-agent-phase-a-architecture.md
+ */
+import { hashObject } from "../ucp/hashes.js";
+import { persistEnvelope, persistEnvelopeOrThrow } from "../ucp/persistence/write.js";
+import { createClaudeHandoffEnvelope, createClaudeReceiptEnvelope, createClaudeRefusedEnvelope, } from "../ucp/envelope.js";
+// ─── Delivery gate ────────────────────────────────────────────────────────────
+export class ClaudeDeliveryGate {
+    plugin;
+    storeDir;
+    persistStrict;
+    persistBestEffort;
+    constructor(plugin, storeDir, deps = {}) {
+        this.plugin = plugin;
+        this.storeDir = storeDir;
+        this.persistStrict = deps.persistStrict
+            ?? ((e) => persistEnvelopeOrThrow(storeDir, e));
+        this.persistBestEffort = deps.persistBestEffort
+            ?? ((e) => persistEnvelope(storeDir, e));
+    }
+    /**
+     * Deliver a ClaudeAgentHandoffArtifact to Claude Managed Agents.
+     *
+     * CONTRACT — callers must ensure:
+     *   - artifact.eligibility === "approved_for_agent" (gate re-checks and blocks if not)
+     *   - artifact.toolPolicy.networkAccess === "deny" (gate re-checks, A2)
+     *   - artifact.approvedAt is set (H has confirmed)
+     *
+     * CONTRACT — this function guarantees:
+     *   - ucp.claude_handoff.v1 persisted BEFORE Claude is called
+     *   - If persistence fails, Claude is NOT called (blocked_persistence_failure)
+     *   - ucp.claude_receipt.v1 persisted when Claude returns "accepted"
+     *   - ucp.claude_refused.v1 persisted when Claude returns any refusal
+     *   - Receipt/refusal persistence failures do not block the state transition
+     *   - Unknown response kinds map to refused_due_to_execution_error (fail-closed)
+     */
+    async deliver(artifact) {
+        // ── Eligibility check ─────────────────────────────────────────────────────
+        if (artifact.eligibility !== "approved_for_agent") {
+            return {
+                outcome: "blocked_ineligible",
+                reason: `Artifact eligibility is "${artifact.eligibility}", not "approved_for_agent".`,
+            };
+        }
+        // ── Tool policy checks (A2: networkAccess must be "deny" in V1) ───────────
+        if (artifact.toolPolicy.networkAccess !== "deny") {
+            return {
+                outcome: "blocked_tool_policy",
+                reason: `toolPolicy.networkAccess is "${artifact.toolPolicy.networkAccess}". ` +
+                    `Only "deny" is executable in V1. "allow_limited" is reserved and blocked.`,
+            };
+        }
+        if (artifact.toolPolicy.filesystemMode !== "scoped_only") {
+            return {
+                outcome: "blocked_tool_policy",
+                reason: `toolPolicy.filesystemMode is "${artifact.toolPolicy.filesystemMode}". ` +
+                    `Only "scoped_only" is allowed.`,
+            };
+        }
+        if (artifact.allowedTools.length === 0) {
+            return {
+                outcome: "blocked_tool_policy",
+                reason: "allowedTools is empty. Claude must have at least one tool to execute.",
+            };
+        }
+        const sentAt = Date.now();
+        const deliveryId = computeDeliveryId(artifact.artifactId, sentAt);
+        // ── Point 1: Persist handoff BEFORE calling Claude ────────────────────────
+        const handoffEnvelope = createClaudeHandoffEnvelope({
+            intentId: artifact.intentId,
+            responseId: artifact.responseId,
+            eligibility: "approved_for_agent",
+            ocdClearance: artifact.ocdClearance,
+            executionDomain: artifact.executionDomain,
+            allowedFiles: [...artifact.allowedFiles],
+            allowedTools: [...artifact.allowedTools],
+            confirmedByHuman: true,
+            confirmedAt: artifact.approvedAt ?? sentAt,
+        }, { parentId: artifact.responseId, rootId: artifact.intentId });
+        try {
+            this.persistStrict(handoffEnvelope);
+        }
+        catch (err) {
+            return {
+                outcome: "blocked_persistence_failure",
+                reason: `Failed to persist ucp.claude_handoff.v1 before delivery: ${String(err)}`,
+            };
+        }
+        // ── Call Claude ───────────────────────────────────────────────────────────
+        const request = { deliveryId, sentAt, artifact };
+        let response;
+        try {
+            response = await this.plugin.receive(request);
+        }
+        catch (err) {
+            // Plugin threw — treat as execution error (fail-closed)
+            response = {
+                kind: "refused_due_to_execution_error",
+                code: "plugin_threw",
+                message: String(err),
+            };
+        }
+        // ── Normalize unknown response kinds (fail-closed) ────────────────────────
+        if (response.kind !== "accepted" &&
+            response.kind !== "refused_due_to_scope" &&
+            response.kind !== "refused_due_to_execution_error") {
+            response = {
+                kind: "refused_due_to_execution_error",
+                code: "unknown_response_kind",
+                message: `Unknown Claude response kind received. Treating as execution error.`,
+            };
+        }
+        // ── Point 2a: accepted ────────────────────────────────────────────────────
+        if (response.kind === "accepted") {
+            const receiptEnvelope = createClaudeReceiptEnvelope({
+                deliveryId,
+                handoffId: handoffEnvelope.id,
+                artifactId: artifact.artifactId,
+                sessionId: response.sessionId,
+                receivedAt: sentAt,
+            }, { parentId: handoffEnvelope.id, rootId: artifact.intentId });
+            this.tryPersistBestEffort(receiptEnvelope);
+            return {
+                outcome: "accepted",
+                deliveryId,
+                handoffEnvelopeId: handoffEnvelope.id,
+                receiptEnvelopeId: receiptEnvelope.id,
+                sessionId: response.sessionId,
+            };
+        }
+        // ── Point 2b: refused_due_to_scope ────────────────────────────────────────
+        if (response.kind === "refused_due_to_scope") {
+            const refusedEnvelope = createClaudeRefusedEnvelope({
+                deliveryId,
+                handoffId: handoffEnvelope.id,
+                artifactId: artifact.artifactId,
+                receivedAt: sentAt,
+                refusalKind: "refused_due_to_scope",
+                scopeQuestionKind: response.question.questionKind,
+                scopeCandidates: [...response.question.candidates],
+            }, { parentId: handoffEnvelope.id, rootId: artifact.intentId });
+            this.tryPersistBestEffort(refusedEnvelope);
+            return {
+                outcome: "refused_due_to_scope",
+                deliveryId,
+                handoffEnvelopeId: handoffEnvelope.id,
+                refusedEnvelopeId: refusedEnvelope.id,
+                scopeQuestion: response.question,
+            };
+        }
+        // ── Point 2c: refused_due_to_execution_error ──────────────────────────────
+        const execError = response;
+        const refusedEnvelope = createClaudeRefusedEnvelope({
+            deliveryId,
+            handoffId: handoffEnvelope.id,
+            artifactId: artifact.artifactId,
+            receivedAt: sentAt,
+            refusalKind: "refused_due_to_execution_error",
+            errorCode: execError.code,
+        }, { parentId: handoffEnvelope.id, rootId: artifact.intentId });
+        this.tryPersistBestEffort(refusedEnvelope);
+        return {
+            outcome: "refused_due_to_execution_error",
+            deliveryId,
+            handoffEnvelopeId: handoffEnvelope.id,
+            refusedEnvelopeId: refusedEnvelope.id,
+            errorCode: execError.code,
+            message: execError.message,
+        };
+    }
+    tryPersistBestEffort(envelope) {
+        try {
+            this.persistBestEffort(envelope);
+        }
+        catch {
+            // Best-effort: do not throw, do not block
+        }
+    }
+}
+// ─── Internal ─────────────────────────────────────────────────────────────────
+function computeDeliveryId(artifactId, sentAt) {
+    return hashObject({ artifactId, sentAt });
+}
+//# sourceMappingURL=delivery-gate.js.map

package/dist/src/claude/delivery-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-gate.js","sourceRoot":"","sources":["../../../src/claude/delivery-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAoC,kBAAkB,CAAC;AAC5E,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,MAAO,6BAA6B,CAAC;AACvF,OAAO,EACL,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,oBAAoB,CAAC;AAmF5B,iFAAiF;AAEjF,MAAM,OAAO,kBAAkB;IAKV;IACA;IALF,aAAa,CAA+C;IAC5D,iBAAiB,CAA2C;IAE7E,YACmB,MAA2B,EAC3B,QAAgB,EACjC,OAAuB,EAAE;QAFR,WAAM,GAAN,MAAM,CAAqB;QAC3B,aAAQ,GAAR,QAAQ,CAAQ;QAGjC,IAAI,CAAC,aAAa,GAAO,IAAI,CAAC,aAAa;eACtC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,iBAAiB;eAC1C,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,OAAO,CAAC,QAAoC;QAChD,6EAA6E;QAC7E,IAAI,QAAQ,CAAC,WAAW,KAAK,oBAAoB,EAAE,CAAC;YAClD,OAAO;gBACL,OAAO,EAAE,oBAAoB;gBAC7B,MAAM,EAAG,4BAA4B,QAAQ,CAAC,WAAW,8BAA8B;aACxF,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,IAAI,QAAQ,CAAC,UAAU,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;YACjD,OAAO;gBACL,OAAO,EAAE,qBAAqB;gBAC9B,MAAM,EAAG,gCAAgC,QAAQ,CAAC,UAAU,CAAC,aAAa,KAAK;oBACtE,2EAA2E;aACrF,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,cAAc,KAAK,aAAa,EAAE,CAAC;YACzD,OAAO;gBACL,OAAO,EAAE,qBAAqB;gBAC9B,MAAM,EAAG,iCAAiC,QAAQ,CAAC,UAAU,CAAC,cAAc,KAAK;oBACxE,gCAAgC;aAC1C,CAAC;QACJ,CAAC;QACD,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,qBAAqB;gBAC9B,MAAM,EAAG,uEAAuE;aACjF,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAO,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,iBAAiB,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAElE,6EAA6E;QAC7E,MAAM,eAAe,GAAG,2BAA2B,CACjD;YACE,QAAQ,EAAW,QAAQ,CAAC,QAAQ;YACpC,UAAU,EAAS,QAAQ,CAAC,UAAU;YACtC,WAAW,EAAQ,oBAAoB;YACvC,YAAY,EAAO,QAAQ,CAAC,YAAY;YACxC,eAAe,EAAI,QAAQ,CAAC,eAAe;YAC3C,YAAY,EAAO,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC;YAC7C,YAAY,EAAO,CAAC,GAAG,QAAQ,CAAC,YAAY,CAAC;YAC7C,gBAAgB,EAAG,IAAI;YACvB,WAAW,EAAQ,QAAQ,CAAC,UAAU,IAAI,MAAM;SACjD,EACD,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAC7D,CAAC;QAEF,IAAI,CAAC;YACH,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL,OAAO,EAAE,6BAA6B;gBACtC,MAAM,EAAG,4DAA4D,MAAM,CAAC,GAAG,CAAC,EAAE;aACnF,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,MAAM,OAAO,GAA0B,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACxE,IAAI,QAAgC,CAAC;QAErC,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wDAAwD;YACxD,QAAQ,GAAG;gBACT,IAAI,EAAK,gCAAgC;gBACzC,IAAI,EAAK,cAAc;gBACvB,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;aACrB,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,IACE,QAAQ,CAAC,IAAI,KAAK,UAAU;YAC5B,QAAQ,CAAC,IAAI,KAAK,sBAAsB;YACxC,QAAQ,CAAC,IAAI,KAAK,gCAAgC,EAClD,CAAC;YACD,QAAQ,GAAG;gBACT,IAAI,EAAK,gCAAgC;gBACzC,IAAI,EAAK,uBAAuB;gBAChC,OAAO,EAAE,qEAAqE;aAC/E,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,IAAI,QAAQ,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACjC,MAAM,eAAe,GAAG,2BAA2B,CACjD;gBACE,UAAU;gBACV,SAAS,EAAG,eAAe,CAAC,EAAE;gBAC9B,UAAU,EAAE,QAAQ,CAAC,UAAU;gBAC/B,SAAS,EAAG,QAAQ,CAAC,SAAS;gBAC9B,UAAU,EAAE,MAAM;aACnB,EACD,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAC5D,CAAC;YACF,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAE3C,OAAO;gBACL,OAAO,EAAY,UAAU;gBAC7B,UAAU;gBACV,iBAAiB,EAAE,eAAe,CAAC,EAAE;gBACrC,iBAAiB,EAAE,eAAe,CAAC,EAAE;gBACrC,SAAS,EAAU,QAAQ,CAAC,SAAS;aACtC,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,IAAI,QAAQ,CAAC,IAAI,KAAK,sBAAsB,EAAE,CAAC;YAC7C,MAAM,eAAe,GAAG,2BAA2B,CACjD;gBACE,UAAU;gBACV,SAAS,EAAS,eAAe,CAAC,EAAE;gBACpC,UAAU,EAAQ,QAAQ,CAAC,UAAU;gBACrC,UAAU,EAAQ,MAAM;gBACxB,WAAW,EAAO,sBAAsB;gBACxC,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,YAAY;gBACjD,eAAe,EAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC;aACpD,EACD,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAC5D,CAAC;YACF,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;YAE3C,OAAO;gBACL,OAAO,EAAY,sBAAsB;gBACzC,UAAU;gBACV,iBAAiB,EAAE,eAAe,CAAC,EAAE;gBACrC,iBAAiB,EAAE,eAAe,CAAC,EAAE;gBACrC,aAAa,EAAM,QAAQ,CAAC,QAAQ;aACrC,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,MAAM,SAAS,GAAG,QAA4C,CAAC;QAC/D,MAAM,eAAe,GAAG,2BAA2B,CACjD;YACE,UAAU;YACV,SAAS,EAAI,eAAe,CAAC,EAAE;YAC/B,UAAU,EAAG,QAAQ,CAAC,UAAU;YAChC,UAAU,EAAG,MAAM;YACnB,WAAW,EAAE,gCAAgC;YAC7C,SAAS,EAAI,SAAS,CAAC,IAAI;SAC5B,EACD,EAAE,QAAQ,EAAE,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAC5D,CAAC;QACF,IAAI,CAAC,oBAAoB,CAAC,eAAe,CAAC,CAAC;QAE3C,OAAO;YACL,OAAO,EAAY,gCAAgC;YACnD,UAAU;YACV,iBAAiB,EAAE,eAAe,CAAC,EAAE;YACrC,iBAAiB,EAAE,eAAe,CAAC,EAAE;YACrC,SAAS,EAAU,SAAS,CAAC,IAAI;YACjC,OAAO,EAAY,SAAS,CAAC,OAAO;SACrC,CAAC;IACJ,CAAC;IAEO,oBAAoB,CAAC,QAA8B;QACzD,IAAI,CAAC;YACH,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACP,0CAA0C;QAC5C,CAAC;IACH,CAAC;CACF;AAED,iFAAiF;AAEjF,SAAS,iBAAiB,CAAC,UAAkB,EAAE,MAAc;IAC3D,OAAO,UAAU,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC"}

package/dist/src/claude/index.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Claude Managed Agents integration — V1 public API (Phase 8C).
+ *
+ * This module exports the complete V1 seam: artifact mapper, delivery gate,
+ * stub adapter (tests), and real API adapter (production).
+ *
+ * See: docs/claude-v1-baseline.md — full invariant set (A1–A4, RA1–RA6)
+ *
+ * Reserved slots (NOT exported, not built in V1):
+ *   - ucp.claude_session.v1
+ *   - ucp.claude_result.v1
+ *   - networkAccess: "allow_limited" semantics
+ *   - session resumability
+ *   - multi-session orchestration
+ */
+export type { ClaudeAgentHandoffArtifact, ClaudeHandoffEligibility, ClaudeExecutionDomain, ClaudeTaskSpec, ClaudeToolPolicy, ClaudeDeliveryRequest, ClaudeDeliveryResponse, ClaudeAccepted, ClaudeRefusedDueToScope, ClaudeRefusedDueToExecutionError, ClaudeScopeQuestion, } from "./types.js";
+export { buildClaudeHandoffArtifact, approveClaudeArtifact, narrowClaudeArtifactScope, } from "./artifact-mapper.js";
+export type { ClaudeOCDPolicy } from "./artifact-mapper.js";
+export type { ClaudeAgentPlugin, ClaudeDeliveryGateResult, ClaudeGateDeps } from "./delivery-gate.js";
+export { ClaudeDeliveryGate } from "./delivery-gate.js";
+export { ClaudeStubAdapter } from "./adapters/stub-adapter.js";
+export { ClaudeApiAdapter } from "./adapters/api-adapter.js";
+export type { ClaudeApiAdapterConfig } from "./adapters/api-adapter.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/claude/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/claude/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAGH,YAAY,EACV,0BAA0B,EAC1B,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,uBAAuB,EACvB,gCAAgC,EAChC,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5D,YAAY,EAAE,iBAAiB,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACtG,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAGxD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAG/D,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,YAAY,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/src/claude/index.js

@@ -0,0 +1,23 @@
+/**
+ * Claude Managed Agents integration — V1 public API (Phase 8C).
+ *
+ * This module exports the complete V1 seam: artifact mapper, delivery gate,
+ * stub adapter (tests), and real API adapter (production).
+ *
+ * See: docs/claude-v1-baseline.md — full invariant set (A1–A4, RA1–RA6)
+ *
+ * Reserved slots (NOT exported, not built in V1):
+ *   - ucp.claude_session.v1
+ *   - ucp.claude_result.v1
+ *   - networkAccess: "allow_limited" semantics
+ *   - session resumability
+ *   - multi-session orchestration
+ */
+// Artifact mapper
+export { buildClaudeHandoffArtifact, approveClaudeArtifact, narrowClaudeArtifactScope, } from "./artifact-mapper.js";
+export { ClaudeDeliveryGate } from "./delivery-gate.js";
+// Stub adapter (testing + development)
+export { ClaudeStubAdapter } from "./adapters/stub-adapter.js";
+// Real API adapter (Phase 8C)
+export { ClaudeApiAdapter } from "./adapters/api-adapter.js";
+//# sourceMappingURL=index.js.map

package/dist/src/claude/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/claude/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAiBH,kBAAkB;AAClB,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,yBAAyB,GAC1B,MAAM,sBAAsB,CAAC;AAK9B,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExD,uCAAuC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,8BAA8B;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/src/claude/types.d.ts

@@ -0,0 +1,223 @@
+/**
+ * Claude Managed Agents Integration types — Phase 8B.
+ *
+ * ── Role ──────────────────────────────────────────────────────────────────────
+ *
+ *   This module defines the seam between UseSteady's authority system and
+ *   Claude Managed Agents. It is the type contract for:
+ *
+ *     - ClaudeAgentHandoffArtifact: the approved, constrained artifact Claude receives
+ *     - ClaudeDeliveryRequest: what the delivery gate sends to Claude
+ *     - ClaudeDeliveryResponse: the three response kinds Claude may return
+ *     - ClaudeScopeQuestion: Claude's structured scope clarification request
+ *     - ClaudeToolPolicy: explicit tool + network + filesystem scope at handoff time
+ *
+ * ── Authority model ───────────────────────────────────────────────────────────
+ *
+ *   Claude Managed Agents: execute only.
+ *   No upstream reach-back. No re-interpretation. No intent re-classification.
+ *
+ * ── Phase A locked truths (A1–A4) ────────────────────────────────────────────
+ *
+ *   A1 — executionDomain is mapper-derived, never reclassified downstream.
+ *        The delivery gate may only validate presence and allowed values.
+ *
+ *   A2 — networkAccess: "allow_limited" is reserved and V1-blocked.
+ *        "deny" is the only executable V1 value.
+ *        The delivery gate rejects any artifact using "allow_limited".
+ *
+ *   A3 — Interrupted Claude sessions are non-resumable in V1.
+ *        Interruption maps to refused_due_to_execution_error with
+ *        code "session_interrupted". No resume path.
+ *
+ *   A4 — No callback loop from Claude to Intake exists in V1.
+ *        The only mid-flight feedback path is structured scope clarification
+ *        via ClaudeScopeQuestion, mediated by H.
+ *
+ * ── Key invariants ────────────────────────────────────────────────────────────
+ *
+ *   - ClaudeAgentHandoffArtifact never carries the original input string
+ *   - eligibility === "approved_for_agent" is the only value that opens delivery
+ *   - H may narrow scope only, never widen
+ *   - Maximum one scope clarification per delivery attempt
+ *   - toolPolicy.networkAccess must be "deny" in V1 (gate enforces)
+ *   - toolPolicy.filesystemMode must be "scoped_only" (gate enforces)
+ *   - Unknown response kinds are treated as refused_due_to_execution_error (fail-closed)
+ *
+ * ── Provenance chain ──────────────────────────────────────────────────────────
+ *
+ *   ucp.intent.v1 → ucp.response.v1 → ucp.claude_handoff.v1
+ *     → ucp.claude_receipt.v1
+ *       → [ucp.claude_result.v1 — RESERVED FUTURE SLOT]
+ *         → ucp.execution_trace.v1 → ucp.replay_report.v1
+ *
+ *   Refusal path:
+ *     ucp.claude_handoff.v1 → ucp.claude_refused.v1 (dead end or retry trigger)
+ *
+ *   Reserved future slots (not built in V1):
+ *     ucp.claude_session.v1 — for managed session event history
+ *     ucp.claude_result.v1  — for structured agent output
+ *
+ * See: docs/claude-agent-phase-a-architecture.md
+ */
+/**
+ * ClaudeToolPolicy — explicit tool and runtime scope for a Claude delivery.
+ *
+ *   allowedTools    — closed set of tools Claude may use. Empty = no tools.
+ *   networkAccess   — V1: always "deny". "allow_limited" is reserved but blocked by gate.
+ *   filesystemMode  — always "scoped_only". No alternative in V1.
+ *
+ * The delivery gate enforces all three fields before delivery proceeds.
+ */
+export type ClaudeToolPolicy = {
+    readonly allowedTools: readonly string[];
+    /**
+     * V1: must be "deny". Gate rejects any artifact using "allow_limited".
+     * "allow_limited" is reserved in the type for forward compatibility.
+     * Its semantics (domain allowlist, egress-only, port restrictions) are deferred.
+     */
+    readonly networkAccess: "deny" | "allow_limited";
+    readonly filesystemMode: "scoped_only";
+};
+/**
+ * ClaudeAgentHandoffArtifact — the approved, constrained artifact Claude receives.
+ *
+ *   artifactId      — UCP content-addressed identity (sha256 of content fields)
+ *   mode            — always "execute"; only execute flows reach Claude (A1)
+ *   executionDomain — mapper-derived; gate validates presence only (A1)
+ *   taskSpec        — approved task description; never includes raw user input
+ *   allowedFiles    — H-narrowable file set; gate-enforced; empty = open within prohibitions
+ *   prohibitedPatterns — OCD-constrained; gate-enforced; takes precedence over allowedFiles
+ *   allowedTools    — explicit tool allowlist; gate-enforced
+ *   toolPolicy      — tool + network + filesystem constraints
+ *   ocdClearance    — "clear" or "conflict_accepted"; never "conflict_detected" at delivery
+ *   eligibility     — must be "approved_for_agent" for delivery to proceed
+ *   intentId        — links back to ucp.intent.v1 for provenance
+ *   responseId      — links back to ucp.response.v1 for provenance
+ *   approvedAt      — epoch ms when H approved; set by approveArtifact()
+ */
+export type ClaudeAgentHandoffArtifact = {
+    readonly artifactId: string;
+    readonly mode: "execute";
+    readonly executionDomain: ClaudeExecutionDomain;
+    readonly taskSpec: ClaudeTaskSpec;
+    readonly allowedFiles: readonly string[];
+    readonly prohibitedPatterns: readonly string[];
+    readonly allowedTools: readonly string[];
+    readonly toolPolicy: ClaudeToolPolicy;
+    readonly ocdClearance: "clear" | "conflict_accepted";
+    readonly eligibility: ClaudeHandoffEligibility;
+    readonly intentId: string;
+    readonly responseId: string;
+    readonly approvedAt?: number;
+};
+/**
+ * ClaudeExecutionDomain — the class of task Claude is being asked to perform.
+ *
+ *   code_edit      — modify source files within allowedFiles
+ *   ops_task       — operational action (deploy, restart, etc.)
+ *   analysis_task  — read/analyze; no write authority
+ *
+ * INVARIANT (A1): this value is derived by the artifact mapper from
+ * InterpretationResult.category. It is never re-classified downstream.
+ * The delivery gate validates presence and allowed values only.
+ */
+export type ClaudeExecutionDomain = "code_edit" | "ops_task" | "analysis_task";
+/**
+ * ClaudeTaskSpec — the approved task description passed to Claude.
+ *
+ * Never carries the raw user input string.
+ * parsedChange is present only when a structured edit command was parsed.
+ */
+export type ClaudeTaskSpec = {
+    readonly category: string;
+    readonly summary: string;
+    readonly parsedChange?: {
+        readonly filePath?: string;
+        readonly oldValue?: string;
+        readonly newValue?: string;
+    };
+};
+/**
+ * ClaudeHandoffEligibility — the approval state of the artifact.
+ *
+ *   pending_confirmation — OCD cleared; awaiting H confirmation.
+ *   approved_for_agent   — H confirmed. Only value that opens the delivery gate.
+ *   rejected             — H rejected, timed out, or execution error occurred.
+ */
+export type ClaudeHandoffEligibility = "pending_confirmation" | "approved_for_agent" | "rejected";
+/**
+ * ClaudeDeliveryRequest — what the delivery gate sends to the Claude plugin.
+ *
+ *   deliveryId — delivery-attempt identifier. NOT a content identifier.
+ *                Never use for provenance chain links; use artifactId for those.
+ *   sentAt     — epoch ms of the delivery attempt.
+ *   artifact   — the approved ClaudeAgentHandoffArtifact.
+ */
+export type ClaudeDeliveryRequest = {
+    readonly deliveryId: string;
+    readonly sentAt: number;
+    readonly artifact: ClaudeAgentHandoffArtifact;
+};
+/**
+ * ClaudeAccepted — Claude accepted and started a managed session.
+ *
+ *   sessionId — the Anthropic managed agent session ID.
+ *               Persisted in ucp.claude_receipt.v1 for audit.
+ *               Not resumable in V1 (A3): if interrupted, maps to execution error.
+ */
+export type ClaudeAccepted = {
+    readonly kind: "accepted";
+    readonly sessionId: string;
+};
+/**
+ * ClaudeRefusedDueToScope — Claude encountered a scope ambiguity before starting.
+ *
+ *   question — structured clarification request. H must answer from candidates.
+ *
+ * Rules:
+ *   - One clarification round maximum per delivery.
+ *   - H may choose only from question.candidates (candidate-bounded).
+ *   - H may narrow only, never widen.
+ *   - Second refusal ends the flow as rejected.
+ */
+export type ClaudeRefusedDueToScope = {
+    readonly kind: "refused_due_to_scope";
+    readonly question: ClaudeScopeQuestion;
+};
+/**
+ * ClaudeRefusedDueToExecutionError — Claude refused due to a runtime error.
+ *
+ *   code    — machine-readable error code (e.g. "session_interrupted", "tool_denied")
+ *   message — human-readable description
+ *
+ * Special code: "session_interrupted" maps to A3 (non-resumable session).
+ */
+export type ClaudeRefusedDueToExecutionError = {
+    readonly kind: "refused_due_to_execution_error";
+    readonly code: string;
+    readonly message: string;
+};
+/**
+ * ClaudeDeliveryResponse — the closed set of responses Claude may return.
+ *
+ * INVARIANT: unknown response kinds must be treated as refused_due_to_execution_error
+ * by the delivery gate (fail-closed). This is identical to the Cursor seam rule.
+ */
+export type ClaudeDeliveryResponse = ClaudeAccepted | ClaudeRefusedDueToScope | ClaudeRefusedDueToExecutionError;
+/**
+ * ClaudeScopeQuestion — structured clarification request from Claude.
+ *
+ *   questionKind  — semantic kind of the ambiguity Claude encountered
+ *   candidates    — the complete set of valid choices (H must pick from these only)
+ *   explanation   — human-readable description of what Claude needs
+ *
+ * Claude may NOT generate a scope question that expands file or tool scope
+ * beyond what was in the approved artifact.
+ */
+export type ClaudeScopeQuestion = {
+    readonly questionKind: "need_file_path" | "need_scope_selection" | "need_tool_permission" | "ambiguous_old_value";
+    readonly candidates: readonly string[];
+    readonly explanation: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/src/claude/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/claude/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AAIH;;;;;;;;GAQG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,YAAY,EAAK,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAI,MAAM,GAAG,eAAe,CAAC;IACnD,QAAQ,CAAC,cAAc,EAAG,aAAa,CAAC;CACzC,CAAC;AAIF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,0BAA0B,GAAG;IACvC,QAAQ,CAAC,UAAU,EAAW,MAAM,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAiB,SAAS,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAM,qBAAqB,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAa,cAAc,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAS,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,kBAAkB,EAAG,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,YAAY,EAAS,SAAS,MAAM,EAAE,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAW,gBAAgB,CAAC;IAC/C,QAAQ,CAAC,YAAY,EAAS,OAAO,GAAG,mBAAmB,CAAC;IAC5D,QAAQ,CAAC,WAAW,EAAU,wBAAwB,CAAC;IACvD,QAAQ,CAAC,QAAQ,EAAa,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAW,MAAM,CAAC;IACrC,QAAQ,CAAC,UAAU,CAAC,EAAU,MAAM,CAAC;CACtC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,qBAAqB,GAAG,WAAW,GAAG,UAAU,GAAG,eAAe,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,QAAQ,EAAM,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAO,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE;QACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;KAC5B,CAAC;CACH,CAAC;AAIF;;;;;;GAMG;AACH,MAAM,MAAM,wBAAwB,GAChC,sBAAsB,GACtB,oBAAoB,GACpB,UAAU,CAAC;AAIf;;;;;;;GAOG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAI,0BAA0B,CAAC;CACjD,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,IAAI,EAAO,UAAU,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF;;;;;;;;;;GAUG;AACH,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,CAAC,IAAI,EAAM,sBAAsB,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC;CACxC,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,gCAAgC,GAAG;IAC7C,QAAQ,CAAC,IAAI,EAAK,gCAAgC,CAAC;IACnD,QAAQ,CAAC,IAAI,EAAK,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAC9B,cAAc,GACd,uBAAuB,GACvB,gCAAgC,CAAC;AAIrC;;;;;;;;;GASG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,YAAY,EACjB,gBAAgB,GAChB,sBAAsB,GACtB,sBAAsB,GACtB,qBAAqB,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAI,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAG,MAAM,CAAC;CAC/B,CAAC"}

package/dist/src/claude/types.js

@@ -0,0 +1,64 @@
+/**
+ * Claude Managed Agents Integration types — Phase 8B.
+ *
+ * ── Role ──────────────────────────────────────────────────────────────────────
+ *
+ *   This module defines the seam between UseSteady's authority system and
+ *   Claude Managed Agents. It is the type contract for:
+ *
+ *     - ClaudeAgentHandoffArtifact: the approved, constrained artifact Claude receives
+ *     - ClaudeDeliveryRequest: what the delivery gate sends to Claude
+ *     - ClaudeDeliveryResponse: the three response kinds Claude may return
+ *     - ClaudeScopeQuestion: Claude's structured scope clarification request
+ *     - ClaudeToolPolicy: explicit tool + network + filesystem scope at handoff time
+ *
+ * ── Authority model ───────────────────────────────────────────────────────────
+ *
+ *   Claude Managed Agents: execute only.
+ *   No upstream reach-back. No re-interpretation. No intent re-classification.
+ *
+ * ── Phase A locked truths (A1–A4) ────────────────────────────────────────────
+ *
+ *   A1 — executionDomain is mapper-derived, never reclassified downstream.
+ *        The delivery gate may only validate presence and allowed values.
+ *
+ *   A2 — networkAccess: "allow_limited" is reserved and V1-blocked.
+ *        "deny" is the only executable V1 value.
+ *        The delivery gate rejects any artifact using "allow_limited".
+ *
+ *   A3 — Interrupted Claude sessions are non-resumable in V1.
+ *        Interruption maps to refused_due_to_execution_error with
+ *        code "session_interrupted". No resume path.
+ *
+ *   A4 — No callback loop from Claude to Intake exists in V1.
+ *        The only mid-flight feedback path is structured scope clarification
+ *        via ClaudeScopeQuestion, mediated by H.
+ *
+ * ── Key invariants ────────────────────────────────────────────────────────────
+ *
+ *   - ClaudeAgentHandoffArtifact never carries the original input string
+ *   - eligibility === "approved_for_agent" is the only value that opens delivery
+ *   - H may narrow scope only, never widen
+ *   - Maximum one scope clarification per delivery attempt
+ *   - toolPolicy.networkAccess must be "deny" in V1 (gate enforces)
+ *   - toolPolicy.filesystemMode must be "scoped_only" (gate enforces)
+ *   - Unknown response kinds are treated as refused_due_to_execution_error (fail-closed)
+ *
+ * ── Provenance chain ──────────────────────────────────────────────────────────
+ *
+ *   ucp.intent.v1 → ucp.response.v1 → ucp.claude_handoff.v1
+ *     → ucp.claude_receipt.v1
+ *       → [ucp.claude_result.v1 — RESERVED FUTURE SLOT]
+ *         → ucp.execution_trace.v1 → ucp.replay_report.v1
+ *
+ *   Refusal path:
+ *     ucp.claude_handoff.v1 → ucp.claude_refused.v1 (dead end or retry trigger)
+ *
+ *   Reserved future slots (not built in V1):
+ *     ucp.claude_session.v1 — for managed session event history
+ *     ucp.claude_result.v1  — for structured agent output
+ *
+ * See: docs/claude-agent-phase-a-architecture.md
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/claude/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/claude/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG"}