iop/agent-contract/index.md

Agent Contract Index

읽기 규칙

• 현재 작업이 API, wire protocol, 런타임 호출, event/config schema, 프로젝트 간 또는 내부 프로세스/컴포넌트 간 요청/응답 계약에 닿을 때만 이 문서를 사용한다.
• 매칭되는 계약 문서만 읽는다.
• 계약 문서 경로가 없으면 계약을 추정하지 않고 사용자에게 확인한다.
• 계약 원문은 agent-contract/outer/** 또는 agent-contract/inner/** 한 곳에 둔다.
• docs/, README, rules.md에는 계약 원문을 복제하지 않고 계약 원문 경로만 둔다.

Outer Contracts

id	읽는 조건	원본 경로	path
iop.openai-compatible-api	OpenAI-compatible API, Responses API, Chat Completions, legacy Completions, error envelope/SSE terminal error, model route, managed projection principal auth and slot-route binding, managed-versus-legacy provider credential selection, model-driven passthrough/normalized routing, provider-pool admission/unavailable error, safe credential-slot attribution, Codex/CLI workspace, generic authoring metadata, and provider-native extension fields such as chat_template_kwargs	apps/edge/internal/openai/*, apps/edge/internal/authprojection/*, apps/edge/internal/service/provider_tunnel.go, packages/go/config/config.go, configs/edge.yaml	agent-contract/outer/openai-compatible-api.md
iop.anthropic-compatible-api	Anthropic Messages API, count_tokens, models list, bearer or X-Api-Key principal auth, active managed projection auth and slot-route binding, anthropic-version routing, native Anthropic tunnel, Chat bridge, provider-pool-only admission, profile capability checks, managed-versus-legacy provider credentials, and current no-OpenAI-metric status	apps/edge/internal/openai/anthropic_handler.go, apps/edge/internal/openai/anthropic_native.go, apps/edge/internal/openai/anthropic_bridge.go, apps/edge/internal/openai/anthropic_stream.go, apps/edge/internal/openai/anthropic_types.go, apps/edge/internal/openai/routes.go, apps/edge/internal/openai/principal.go, apps/edge/internal/authprojection/*, apps/edge/internal/openai/provider_tunnel.go, apps/edge/internal/openai/provider_model_rewrite.go, packages/go/config/protocol_profile.go	agent-contract/outer/anthropic-compatible-api.md
iop.a2a-json-rpc-api	A2A JSON-RPC API, message/send, tasks/get, tasks/cancel, A2A task state, agent card, a2a.bearer_token, Edge A2A input surface	apps/edge/internal/input/a2a/*, packages/go/config/config.go, configs/edge.yaml	agent-contract/outer/a2a-json-rpc-api.md

Inner Contracts

id	읽는 조건	원본 경로	path
iop.edge-node-runtime-wire	Edge-Node mTLS/protobuf, workload identity, Node initial/reconnect supervision, connection generation fencing, RegisterRequest, NodeReadyRequest, RunRequest, RunEvent, signed/sealed CredentialLease, CredentialLeaseBinding, ProviderTunnelRequest, ProviderTunnelFrame, cancel, command, and config payload/refresh	proto/iop/runtime.proto, apps/edge/internal/transport/*, apps/node/internal/transport/*, apps/node/internal/bootstrap/runtime_supervisor.go, apps/node/internal/node/tunnel_handler.go, apps/edge/internal/node/mapper.go, apps/node/internal/adapters/config_set.go	agent-contract/inner/edge-node-runtime-wire.md
iop.control-plane-edge-wire	Control Plane-Edge mTLS wire, authenticated workload identity, EdgeHello*, active PrincipalProjection* hello/refresh, authenticated AcquireLease*, status/command/event relay, Edge connection registry, and configured offline Node/provider snapshot	proto/iop/control.proto, apps/control-plane/internal/wire/*, apps/control-plane/internal/credentialstore/projection.go, apps/control-plane/internal/credentiallease/*, apps/edge/internal/authprojection/*, apps/edge/internal/controlplane/*	agent-contract/inner/control-plane-edge-wire.md
iop.client-control-plane-wire	Client-Control Plane /client WebSocket hello plus the adjacent server-authenticated credential HTTPS, principal bearer authorization, host-local bootstrap, and slot/route lifecycle boundary	proto/iop/control.proto, apps/control-plane/internal/wire/client.go, apps/control-plane/cmd/control-plane/credential_http_handlers.go, apps/client/lib/iop_wire/*	agent-contract/inner/client-control-plane-wire.md
iop.edge-config-runtime-refresh	Edge config schema, provider pool, protocol profiles, credential_plane, managed-versus-legacy auth exclusivity, required TLS/key material, models[], nodes[].providers[], openai.model_routes, and restart/applied refresh classification	packages/go/config/edge_types.go, packages/go/config/provider_types.go, packages/go/config/load.go, packages/go/config/validate.go, configs/edge.yaml, apps/edge/internal/configrefresh/*, proto/iop/runtime.proto	agent-contract/inner/edge-config-runtime-refresh.md
iop.agent-runtime	Common Agent Runtime, CLI Provider, AgentTaskManager manual start/auto-resume/explicit dependency/isolated dispatch/review/serial integration, workspace guardrail admission, executable InvocationConfinement, agent provider catalog YAML, provider/model/profile discovery/readiness, Provider, ExecutionSpec, RuntimeEvent, run/stream/resume/cancel, terminal exactly-once, status/quota, typed failure codec, and Node runtime bridge	packages/go/agentruntime/*, packages/go/agenttask/*, packages/go/agentguard/*, packages/go/agentworkspace/*, packages/go/agentconfig/*, packages/go/agentprovider/cli/*, packages/go/agentprovider/catalog/*, configs/iop-agent.providers.yaml, apps/node/internal/node/runtime_bridge.go	agent-contract/inner/agent-runtime.md
iop.agent-cli-runtime	Standalone iop-agent host lifecycle; RuntimeConfig, ProjectRegistration, SelectionPolicy, and PreviewRequest; device singleton, host-local checkpoint, opaque recovery locators, and failure budgets; exact-root WorkspaceSnapshot, OverlayWorkspace, executable confinement, ChangeSet, and IntegrationRecord; ProjectLogRecord and IntegrationStatus; and the client-neutral local control boundary: AgentLocalEnvelope, request/response/event/error payloads, peer authorization, replay, and Flutter/Unity client-process commands (S05-S09, S11, S15, S18-S19)	S05 implementation: packages/go/agentconfig/runtime_config.go, packages/go/agentconfig/watcher.go. S09 implementation: packages/go/agentstate/store.go and packages/go/agenttask/*. S11 implementation: proto/iop/agent.proto and apps/agent/internal/localcontrol/*. S18 implementation: packages/go/agentworkspace/snapshot.go, packages/go/agentworkspace/overlay.go, and packages/go/agentworkspace/confinement*.go. Shared runtime semantics remain owned by iop.agent-runtime; remaining standalone host paths are added by S06-S08/S15/S19. Design input: agent-roadmap/archive/sdd/automation-runtime-bridge/iop-agent-cli-runtime/SDD.md	agent-contract/inner/iop-agent-cli-runtime.md