Module contracts 

camelCase wire contracts for computer-use-mcp.

These types round-trip the JSON payloads shared with the TypeScript runtime and enforce disclosure-safe invariants on deserialization (digest-only postconditions, value-free sensitivity evidence, bounded approval scopes). They carry no desktop-actuation logic — the computer-use-mcp server remains authoritative for policy, identity, leases, and idempotency.

The submodules group related contracts:

• action — action classification, resource context, provenance, postconditions, and the ActionEnvelope
• target — target evidence and value-free sensitivity signals
• approval — disclosure-safe ApprovalGrant scopes
• receipt — capabilities, policy decisions, previews, and receipts
• lease — one-writer control leases and target reservations
• session — session lifecycle, events, follow-ups, and deletion results
• safety — the versioned cross-runtime safety corpus

Re-exports

pub use action::ActionClass;

pub use action::ActionEnvelope;

pub use action::ActionPostcondition;

pub use action::ActionProvenance;

pub use action::ActionResourceContext;

pub use action::ExecutionMode;

pub use approval::ApprovalGrant;

pub use approval::ApprovalGrantScope;

pub use lease::ControlLease;

pub use lease::LeaseBoundaries;

pub use lease::TargetReservation;

pub use lease::TargetReservationScope;

pub use receipt::ActionPreview;

pub use receipt::ExecutionCapability;

pub use receipt::ExecutionReceipt;

pub use receipt::PolicyDecision;

pub use receipt::ReceiptStatus;

pub use safety::SafetyCorpus;

pub use safety::SafetyExpectation;

pub use safety::SafetyScenario;

pub use session::PostconditionEvidence;

pub use session::RuntimeSession;

pub use session::SessionCompletionEvidence;

pub use session::SessionDeletionResult;

pub use session::SessionEvent;

pub use session::SessionFollowUp;

pub use session::SessionFollowUpPage;

pub use target::Bounds;

pub use target::TargetEvidence;

pub use target::TargetSensitivityAssessment;

pub use target::TargetSensitivityEvidence;

pub use target::TargetSensitivitySignal;

pub use target::TargetSensitivitySource;

Modules

action

Action classification, resource context, provenance, postconditions, and the immutable ActionEnvelope proposed by the graph and enforced by the runtime.

approval

Disclosure-safe approval grants returned by the runtime approval boundary.

lease

One-writer control leases and non-authoritative target reservations.

receipt

Capability, policy, preview, and execution-receipt contracts.

safety

Versioned cross-runtime deterministic safety corpus shared with the TypeScript fake-desktop harness.

session

Session lifecycle, event, follow-up, and deletion contracts.

target

Target evidence and value-free accessibility sensitivity contracts.