Capsulang

(module examples.claim_review
  (capsule "0")
  (profile agentic persistence.surrealdb external.a2a ui.a2ui)

  (store operational
    (backend surrealdb)
    (authority runtime-state))

  (store knowledge
    (backend typedb)
    (authority semantic-facts))

  (agent security_reviewer
    (protocol a2a)
    (skill review_claim))

  (surface claim_review_status
    (title "Claim review status")
    (route "/claims/status")
    (bind ClaimReview)
    (event SubmitClaim))

  (surface claim_review_decision
    (title "Claim review decision")
    (route "/claims/decision")
    (bind ClaimReview)
    (event ReviewCompleted))

  (surface claim_review_summary
    (title "Claim review summary")
    (route "/claims/summary")
    (bind ClaimReview)
    (event Approve Reject))

  (machine ClaimReview
    (version "0.3.0")
    (context
      (claim_id U64)
      (review_score U32)
      (approved Bool))
    (event SubmitClaim
      (claim_id U64))
    (event ReviewCompleted
      (review_score U32))
    (event Approve)
    (event Reject)
    (initial idle)
    (persistence
      (store operational)
      (event-log authoritative)
      (snapshot every-transition)
      (replay true))

    (state idle
      (on SubmitClaim
        (target awaiting_review)
        (assign
          (claim_id event.claim_id)
          (approved false))
        (effects
          (db.write operational.claims)
          (a2a.task security_reviewer.review_claim)
          (a2ui.emit claim_review_status))))

    (state awaiting_review
      (on ReviewCompleted
        (target awaiting_human_decision)
        (assign
          (review_score event.review_score))
        (effects
          (db.write operational.agent_tasks)
          (a2ui.emit claim_review_decision))))

    (state awaiting_human_decision
      (on Approve
        (guard (<= review_score 30))
        (target accepted)
        (assign
          (approved true))
        (effects
          (db.write operational.claims)
          (db.project operational.claims knowledge.typedb)
          (a2ui.emit claim_review_summary)))
      (on Reject
        (target rejected)
        (effects
          (db.write operational.claims)
          (a2ui.emit claim_review_summary))))

    (state accepted (type final))
    (state rejected (type final))))

(surface repo_review_ui
  (protocol a2ui "v0.9")
  (catalog "https://a2ui.org/specification/v0_9/basic_catalog.json")
  (state
    (repo Text)
    (issues Json)
    (approved Bool))
  (action approve_issue_creation
    (input
      (issue_title Text)
      (issue_body Text))
    (requires-user-confirmation true)))

caps check examples/30_protocol_native_a2ui.caps --json
caps protocol-plan examples/30_protocol_native_a2ui.caps --json
caps a2ui-manifest examples/30_protocol_native_a2ui.caps --json
caps a2ui-envelope examples/30_protocol_native_a2ui.caps repo_review_ui \
  --kind data --data '{"repo":"advatar/Capsulang","approved":false}' --json

(module ImprovementGovernanceDemo
  (capsule "0.7")

  (contract NoUnauthorizedEffects
    (summary "Successors must not acquire undeclared live authority."))

  (lineage CandidateLineage
    (parent "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa")
    (candidate "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb")
    (reason "Improve claim triage while preserving authority boundaries.")
    (proposed-by agent:ReviewImprover)
    (created-at "2026-05-16T00:00:00Z"))

  (objective BetterTriage
    (summary "Improve claim triage quality without expanding live authority.")
    (metric f1_score "evals/claim_triage_gold.jsonl")
    (metric latency_ms)
    (maximize f1_score)
    (constraint latency_ms <= 500)
    (constraint live_effects_added == 0))

  (eval-suite ClaimReviewRegression
    (summary "Regression suite for candidate claim-review successors.")
    (dataset "evals/claim_review_regression.jsonl")
    (metric exact_match >= 98)
    (metric unsafe_action_rate == 0)
    (must-pass examples)
    (must-pass replay "ledgers/golden/*.jsonl"))

  (verification-hook ImprovementSafety
    (summary "Safety obligations generated for the recursive improvement gate.")
    (target lean4)
    (status open)
    (subject successor-contract:SafeSuccessor)
    (subject gate:DeployCandidate)
    (obligation deploy_requires_eval_pass)
    (obligation deploy_requires_approval)
    (obligation effect_expansion_requires_security_approval))

  (successor-contract SafeSuccessor
    (summary "Successor candidates must preserve authority and evaluation invariants.")
    (preserve contract:NoUnauthorizedEffects)
    (forbid effect-expansion unless approval:SecurityOwner)
    (require eval-suite:ClaimReviewRegression)
    (require verification-status checked)
    (require ledgered true))

  (budget ImprovementBudget
    (summary "Bound the autonomous iteration envelope for candidate generation.")
    (max-iterations 3)
    (max-llm-calls 50)
    (max-ci-runs 10)
    (max-wall-clock-ms 3600000)
    (max-cost-usd 25)
    (allow-effects llm.call repo.diff repo.propose_patch repo.apply_patch.sandboxed ci.run eval.run proof.emit proof.verify approval.request risk.review deploy.shadow deploy.canary deploy.promote deploy.rollback)
    (deny-effects deploy.live secret.read model.train.frontier))

  (gate DeployCandidate
    (summary "A candidate can reach deployment only after eval, contract, proof, ledger, and human approval evidence.")
    (requires eval-suite ClaimReviewRegression passed)
    (requires successor-contract SafeSuccessor preserved)
    (requires approval SecurityOwner granted)
    (requires verification-status checked)
    (requires ledgered true)
    (on-fail quarantine)
    (on-pass canary))

  (deployment-policy CandidatePolicy
    (summary "Deploy successors through shadow and canary stages with rollback to the parent hash.")
    (mode shadow-first)
    (canary-percent 5)
    (rollback-to parent)
    (promote-gate DeployCandidate)
    (quarantine-on eval-regression policy-violation unexpected-effect missing-ledger-record))

  (improvement-record CandidateRecord
    (summary "Illustrative ledger record for one candidate successor.")
    (parent-hash "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa")
    (candidate-hash "sha256:bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb")
    (diff-hash "sha256:cccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccccc")
    (objective BetterTriage)
    (eval-result ClaimReviewRegression passed)
    (proof-result ImprovementSafety checked)
    (policy-decision DeployCandidate passed)
    (approval SecurityOwner approved "security@example.test")
    (deployment-outcome shadow ok)
    (rollback-pointer "sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa"))

  (machine ImprovementCycle
    (version "0.1")
    (event ProposeCandidate)
    (event StaticCheckPassed)
    (event EvalPassed)
    (event VerificationPassed)
    (event Approved)
    (event ShadowOk)
    (event CanaryOk)
    (event PolicyViolation)
    (initial drafting)

    (state drafting
      (on ProposeCandidate
        (target static_check)
        (effects
          (repo.propose_patch))))

    (state static_check
      (on StaticCheckPassed
        (target evaluate)
        (effects
          (ci.run))))

    (state evaluate
      (on EvalPassed
        (target verify)
        (effects
          (eval.run ClaimReviewRegression))))

    (state verify
      (on VerificationPassed
        (target human_review)
        (effects
          (proof.verify ImprovementSafety))))

    (state human_review
      (on Approved
        (target shadow_deploy)
        (effects
          (approval.request DeployCandidate))))

    (state shadow_deploy
      (on ShadowOk
        (target canary_deploy)
        (effects
          (deploy.shadow CandidatePolicy)))
      (on PolicyViolation
        (target quarantined)
        (effects
          (deploy.rollback CandidatePolicy))))

    (state canary_deploy
      (on CanaryOk
        (target promoted)
        (effects
          (deploy.canary CandidatePolicy)
          (deploy.promote CandidatePolicy)))
      (on PolicyViolation
        (target quarantined)
        (effects
          (deploy.rollback CandidatePolicy))))

    (state promoted (type final))
    (state quarantined (type final))))

caps capsule-check examples/29_capsule_refund_reviewer.capsule.yaml --json
caps capsule-ir examples/29_capsule_refund_reviewer.capsule.yaml
caps capsule-compile examples/29_capsule_refund_reviewer.capsule.yaml --out-dir build/capsule-refund --json
caps check build/capsule-refund/claims-refund-reviewer.caps --json

capsule: 0.1
module: claims.refund_reviewer
version: 1.2.0
purpose: "Review refund requests and issue approved small refunds through mediated gates."

identity:
  id: agent:RefundReviewer
  kind: agent
  cryptographic: required
  credentials: short_lived
  attestation: required
  owner: human:ClaimsLead

inputs:
  - RefundRequest

outputs:
  - RefundDecision

effects:
  - read: CustomerDB.claims
  - call: RefundAPI.issue_refund
    max_amount_usd: 100
    approval_required_above_usd: 50

telemetry:
  required: true
  tamper_evident: true
  export: [otel, siem, ledger]

policy:
  default: deny
  escalation:
    - if: amount_usd > 50
      require: [human_approval]

runtime:
  image: ghcr.io/acme/refund-reviewer@sha256:REPLACE_WITH_DIGEST
  command: [refund-reviewer, run]
  workdir: /workspace
  doorkeeper_endpoint: https://doorkeeper.internal/mcp
  backend_preference: [docker, seatbelt]

memory:
  default: isolated
  stores:
    - id: mem:refund-session
      isolation: per_session
      ttl: 24h
      source_attribution: required
      hash_validation: on_read

(module edl.claims_refund_reviewer
  (capsule "1.2.0")
  (profile agentic external.mcp persistence.ledger telemetry.otel)

  (store EnclosureLedger
    (backend file)
    (authority enclosure-receipts))

  (principal HumanClaimsLead
    (kind human)
    (identity passkey-or-oidc)
    (summary "EDL principal human:ClaimsLead"))

  (principal AgentRefundReviewer
    (kind agent)
    (identity cryptographic)
    (credential short-lived)
    (attestation required)
    (summary "EDL principal agent:RefundReviewer"))

  (mandate MandateClaimsRefundReviewer
    (issued-by HumanClaimsLead)
    (issued-to AgentRefundReviewer)
    (purpose "Review refund requests and issue approved small refunds through mediated gates.")
    (valid-for 30m)
    (revocable true)
  )

  (delegation DelegationClaimsRefundReviewer
    (from HumanClaimsLead)
    (to AgentRefundReviewer)
    (under MandateClaimsRefundReviewer)
    (may-delegate false)
    (expires-after 30m)
  )

  (port GateCapsule
    (protocol mcp)
    (endpoint "https://doorkeeper.internal/mcp")
    (tool db_read_customerdb_claims http_call_refundapi_issue_refund)
    (summary "EDL gate gate:capsule"))

  (gate HumanApprovalGate
    (summary "Human approval required for high-risk enclosed actions.")
    (requires approval HumanClaimsLead granted)
    (on-fail reject)
    (on-pass manual))

  (capability CapDbReadCustomerdbClaims
    (principal AgentRefundReviewer)
    (effect (mcp.call GateCapsule.db_read_customerdb_claims))
    (resource CustomerDB.claims)
    (valid-for 10m)
    (requires-mandate MandateClaimsRefundReviewer)
    (requires-delegation DelegationClaimsRefundReviewer)
  )

  (capability CapHttpCallRefundapiIssueRefund
    (principal AgentRefundReviewer)
    (effect (mcp.call GateCapsule.http_call_refundapi_issue_refund))
    (resource RefundAPI.issue_refund)
    (valid-for 5m)
    (requires-mandate MandateClaimsRefundReviewer)
    (requires-delegation DelegationClaimsRefundReviewer)
    (approval HumanClaimsLead)
    (limit single-use true)
  )

  (trust-boundary EncClaimsRefundReviewer
    (mode enforce)
    (fail-closed true)
    (sandbox required)
    (network deny-by-default)
    (filesystem root-read-only)
    (egress-only GateCapsule)
    (secrets ambient-deny)
    (requires-attestation true)
    (requires-profile-digest true)
    (capability CapDbReadCustomerdbClaims CapHttpCallRefundapiIssueRefund)
    (summary "EDL enclosure enc:claims-refund-reviewer"))

  (telemetry-obligation EnclosureTelemetry
    (must-emit invocation.start invocation.end enclosure.attested policy.evaluated capability.issued effect.intent effect.denied effect.escalated effect.executed receipt.emitted)
    (include trace_id span_id agent_id principal_id mandate_id delegation_id capability_jti contract_hash enclosure_id effect_intent_id policy_id gate_id)
    (export otel siem ledger)
    (tamper-evident true))

  (memory-policy MemRefundSession
    (isolation per-session)
    (ttl default 24h)
    (source-attribution required)
    (hash-validation on-read)
  )

  (authority-policy PolicyCapsule
    (input principal mandate delegation capability effect context risk)
    (outcome allow deny defer escalate)
    (default deny)
    (on allow (if "effect == \"db.read.CustomerDB.claims\""))
    (on escalate (if "effect == \"http.call.RefundAPI.issue_refund\" and (amount_usd > 50)"))
  )

  (machine EnclosedAgent
    (version "1.2.0")
    (context
      (repo Text)
      (branch Text)
      (request_id U64))
    (event ProposeChange
      (repo Text)
      (branch Text)
      (summary Text))
    (event RequestPrivilegedAction
      (repo Text)
      (branch Text)
      (request_id U64))
    (event HumanApproved
      (approval_id Text))
    (event HumanDenied
      (approval_id Text))
    (event Complete)
    (initial ready)
    (persistence
      (store EnclosureLedger)
      (event-log enclosure_events)
      (snapshot enclosure_snapshots)
      (replay true))
    (state ready
      (on ProposeChange
        (target ready)
        (effects
          (policy.evaluate PolicyCapsule)
          (mcp.call GateCapsule.db_read_customerdb_claims)
          (receipt.emit proposal_receipt)))
      (on RequestPrivilegedAction
        (target waiting_for_approval)
        (effects
          (policy.evaluate PolicyCapsule)
          (approval.request HumanApprovalGate)))
      (on Complete
        (target completed)
        (effects
          (receipt.emit enclosure_completed))))
    (state waiting_for_approval
      (on HumanApproved
        (target ready)
        (effects
          (capability.issue CapHttpCallRefundapiIssueRefund)
          (mcp.call GateCapsule.http_call_refundapi_issue_refund)
          (receipt.emit privileged_action_executed)))
      (on HumanDenied
        (target ready)
        (effects
          (receipt.emit privileged_action_denied))))
    (state completed (type final))))

caps zk-plan examples/24_private_deployment_risk_proof.caps --json
caps emit-noir examples/24_private_deployment_risk_proof.caps   --proof DeploymentRiskProof   --out-dir build/DeploymentRiskProof   --json
caps noir-compile build/DeploymentRiskProof --json
caps noir-execute build/DeploymentRiskProof --json

cd swift/CapsulangSwift
swift test

swift run caps-swift parse Examples/01_abs_i64.caps
swift run caps-swift check Examples/01_abs_i64.caps
swift run caps-swift examples Examples/11_text_ops.caps
swift run caps-swift call Examples/01_abs_i64.caps abs_i64 x=-7
swift run caps-swift hash Examples/17_imports.caps

import CapsulangCore

let url = Bundle.main.url(
    forResource: "01_abs_i64",
    withExtension: "caps"
)!
let loaded = try ModuleLoader.load(url)
guard let module = loaded.module else {
    fatalError("Capsulang module did not parse")
}

let check = checkModule(module)
guard !check.diagnostics.contains(where: { $0.isError }) else {
    fatalError(check.diagnostics.map { $0.render() }.joined(separator: "\n"))
}

let function = module.functions["abs_i64"]!
let result = Interpreter(module: module).evalFunction(
    function,
    inputs: ["x": .int(BigInt(-7))]
)

let runtime = try MachineRuntime(
    module: module,
    machineName: "SimpleGate"
)

let snapshot = runtime.start()
let transition = runtime.step(
    snapshot,
    event: MachineEvent(name: "Close")
)

// Present transition.effects to host policy and adapters.

{
  "schema_version": "0.2",
  "standard": "AFPS",
  "conformance_target": "AFPS-3",
  "project": {
    "id": "capsulang.reference",
    "name": "Capsulang Reference Implementation",
    "version": "0.7.0"
  },
  "validation": {
    "commands": [
      "python -m pytest -q",
      "caps check examples/01_abs_i64.caps",
      "caps architecture-plan examples/03_claim_review_machine.caps",
      "caps emit-riscv examples/01_abs_i64.caps",
      "caps machine-run examples/03_claim_review_machine.caps ClaimReview SubmitClaim --mode dry-run"
    ]
  },
  "operations": [
    {
      "id": "capsulang.check",
      "type": "cli_action",
      "command": "caps check <file>",
      "schemas": {
        "input": "agent/schemas/check-input.schema.json",
        "output": "agent/schemas/check-output.schema.json"
      },
      "examples": [
        "agent/examples/check.valid.json",
        "agent/examples/check.invalid.json"
      ],
      "external_effects": false
    },
    {
      "id": "capsulang.machine-run",
      "type": "cli_action",
      "command": "caps machine-run <file> <machine> <event>",
      "supports_dry_run": true,
      "external_effects": true
    },
    {
      "id": "capsulang.architecture-plan",
      "type": "cli_action",
      "command": "caps architecture-plan <file>",
      "external_effects": false
    },
    {
      "id": "capsulang.emit-riscv",
      "type": "cli_action",
      "command": "caps emit-riscv <file>",
      "external_effects": false
    }
  ]
}

{
  "compatibility": {
    "diagnostics": "Diagnostic codes are stable within a minor line unless explicitly deprecated.",
    "ir": "Canonical IR now includes improvement-governance and Authority IR declarations; semantic hash changes require a compatibility note and conformance fixture update.",
    "semantics": "Breaking semantic changes require a new standard version.",
    "syntax": "New syntax must be feature-gated or additive within a minor line."
  },
  "conformance_levels": [
    {
      "id": "CPS-0",
      "name": "Parsed",
      "requirement": "Source parses into AST",
      "scope": "parser"
    },
    {
      "id": "CPS-1",
      "name": "Checked",
      "requirement": "Types and effects validate",
      "scope": "checker"
    },
    {
      "id": "CPS-2",
      "name": "Interpretable",
      "requirement": "Pure functions and examples execute",
      "scope": "interpreter"
    },
    {
      "id": "CPS-3",
      "name": "Runtime-Capable",
      "requirement": "Machines step and run in dry-run / mock / live modes with deterministic timeout, retry, failure, and cancellation semantics",
      "scope": "runtime"
    },
    {
      "id": "CPS-4",
      "name": "Ledgered",
      "requirement": "Execution is persisted and replay-verifiable",
      "scope": "ledger"
    },
    {
      "id": "CPS-5",
      "name": "Traceable",
      "requirement": "Semantic trace events include trace/span ids, event kind, component, operation, diagnostics, and bounded breadcrumbs",
      "scope": "trace"
    },
    {
      "id": "CPS-6",
      "name": "Agent-Operable",
      "requirement": "Manifest, schemas, examples, and CI evidence exist",
      "scope": "agent"
    },
    {
      "id": "CPS-7",
      "name": "Verified",
      "requirement": "Configured proof obligations are accepted by a trusted verifier with no open proof markers",
      "scope": "verification"
    },
    {
      "id": "CPS-8",
      "name": "Improvement-Governed",
      "requirement": "Improvement lineage, objectives, eval suites, successor contracts, budgets, gates, deployment policies, and improvement records are parsed, checked, canonicalized, and ledger-ready",
      "scope": "improvement"
    },
    {
      "id": "CPS-9",
      "name": "Authority-Governed",
      "requirement": "Authority IR principals, mandates, delegations, capabilities, policies, trust boundaries, telemetry obligations, and memory policies are parsed, checked, canonicalized, and exportable as a host-policy artifact",
      "scope": "authority"
    },
    {
      "id": "CPS-10",
      "name": "Protocol-Native",
      "requirement": "MCP tools/resources/prompts, A2A discovery/auth/skills, A2UI surfaces/state/actions, protocol effect targets, protocol-plan export, and A2UI manifest/envelope export are parsed, checked, canonicalized, and runtime-adapter ready",
      "scope": "protocols"
    }
  ],
  "last_revised": "2026-06-12",
  "normative_artifacts": [
    {
      "description": "Normative language and implementation standard for Capsulang v0.7.",
      "id": "standard",
      "media_type": "text/markdown",
      "path": "specs/standard/capsulang-v0.7-standard.md"
    },
    {
      "description": "Construct implementation status by authoring, parser, checker, interpreter, runtime, and codegen support.",
      "id": "constructs",
      "media_type": "application/json",
      "path": "specs/standard/constructs.json"
    },
    {
      "description": "Known effect domains and determinism classifications.",
      "id": "effects",
      "media_type": "application/json",
      "path": "specs/standard/effects.json"
    },
    {
      "description": "Cumulative Capsulang conformance levels.",
      "id": "conformance",
      "media_type": "application/json",
      "path": "specs/standard/conformance.json"
    },
    {
      "description": "Backend code generation coverage, ABI notes, memory conventions, validation hooks, and unsupported feature matrix.",
      "id": "backend-capabilities",
      "media_type": "application/json",
      "path": "specs/standard/backend_capabilities.json"
    }
  ],
  "reference_mirrors": [
    {
      "base_path": "web/public/spec",
      "description": "Static artifacts published by the reference web site.",
      "id": "web-public"
    },
    {
      "base_path": "web/src/spec",
      "description": "Reference web source data imported by the UI.",
      "id": "web-src"
    }
  ],
  "standard": "Capsulang",
  "status": "Editor's Draft",
  "version": "0.7"
}

.caps source
  -> parser
  -> canonical IR
  -> type/effect checker
  -> Capsule Core
  -> backend-specific lowering

caps compile-backends
caps capsule-abi
caps compile-plan examples/01_abs_i64.caps --target all
caps compile --target wat examples/01_abs_i64.caps --out build/abs.wat --json
caps compile --target wasm examples/01_abs_i64.caps --out build/abs.wasm --allow-text-fallback --json
caps compile --target riscv64 examples/01_abs_i64.caps --out build/abs.s --json
caps compile --target react examples/30_protocol_native_a2ui.caps --out build/repo-review-react --json
caps compile --target native-aarch64 examples/01_abs_i64.caps --out build/native-plan.json --json
caps diff-compiled --target wasm examples/01_abs_i64.caps

scripts/install_agent_support.sh --repo
scripts/install_agent_support.sh --user
scripts/verify_agent_support.sh

caps check examples/23_change_approval_workflow.caps
caps agent-graph --json examples/23_change_approval_workflow.caps
caps release-preview --json examples/23_change_approval_workflow.caps

caps patterns list --json
caps patterns show regulated-deployment-approval --json
caps patterns show access-change-approval --template --json
caps new access-change-approval --out access_change.caps

caps check access_change.caps --json
caps test access_change.caps --json
caps agent-graph --json access_change.caps
caps cost --json access_change.caps
caps repair-plan --json access_change.caps
caps manifest access_change.caps --json
caps release-preview --json access_change.caps

caps explain E_EFFECT_NOT_DECLARED
caps fmt access_change.caps
caps skills list --json
caps skills get capsulang-builder --platform codex --full

caps check examples/23_change_approval_workflow.caps --json
caps visualize examples/23_change_approval_workflow.caps --kind machine
caps visualize examples/23_change_approval_workflow.caps --kind effects
caps test examples/23_change_approval_workflow.caps \
  --scenario examples/scenarios/change_approval_happy_path.json \
  --json
caps release-preview --json examples/23_change_approval_workflow.caps
caps compile-plan examples/23_change_approval_workflow.caps --target all
caps verify-report examples/23_change_approval_workflow.caps --format json

(module examples.change_approval
  (capsule "0")
  (profile agentic persistence.surrealdb external.mcp external.a2a ui.a2ui)

  (store operational
    (backend surrealdb)
    (authority runtime-state))

  (store knowledge
    (backend typedb)
    (authority semantic-facts))

  (port ci
    (protocol mcp)
    (tool deploy)
    (tool rollback))

  (agent security_reviewer
    (protocol a2a)
    (skill review_change))

  (surface change_status
    (title "Deployment change status")
    (route "/changes/status")
    (bind ChangeApproval)
    (event SubmitChange RiskReviewed SecurityApprove ManagerApprove Reject Deploy Rollback))

  (surface change_approval
    (title "Deployment change approval")
    (route "/changes/approval")
    (bind ChangeApproval)
    (event SecurityApprove ManagerApprove Reject))

  (surface change_deployment
    (title "Deployment execution")
    (route "/changes/deploy")
    (bind ChangeApproval)
    (event Deploy Rollback))

  (machine ChangeApproval
    (version "0.1.0")
    (context
      (change_id U64)
      (risk_score U32)
      (security_approved Bool)
      (manager_approved Bool)
      (deployed Bool))
    (event SubmitChange
      (change_id U64))
    (event RiskReviewed
      (risk_score U32))
    (event SecurityApprove)
    (event ManagerApprove)
    (event Reject)
    (event Deploy)
    (event Rollback)
    (initial idle)
    (persistence
      (store operational)
      (event-log authoritative)
      (snapshot every-transition)
      (replay true))

    (state idle
      (on SubmitChange
        (target awaiting_risk_review)
        (assign
          (change_id event.change_id)
          (risk_score 0)
          (security_approved false)
          (manager_approved false)
          (deployed false))
        (effects
          (db.write operational.change_requests)
          (a2a.task security_reviewer.review_change)
          (a2ui.emit change_status))))

    (state awaiting_risk_review
      (on RiskReviewed
        (target awaiting_approvals)
        (assign
          (risk_score event.risk_score))
        (effects
          (db.write operational.change_reviews)
          (a2ui.emit change_approval))))

    (state awaiting_approvals
      (on SecurityApprove
        (target awaiting_approvals)
        (assign
          (security_approved true))
        (effects
          (db.write operational.approvals)
          (a2ui.emit change_approval)))
      (on ManagerApprove
        (target ready_to_deploy)
        (guard security_approved)
        (assign
          (manager_approved true))
        (effects
          (db.write operational.approvals)
          (a2ui.emit change_deployment)))
      (on Reject
        (target rejected)
        (effects
          (db.write operational.approvals)
          (a2ui.emit change_status))))

    (state ready_to_deploy
      (on Deploy
        (guard (and security_approved manager_approved (<= risk_score 40)))
        (target deployed)
        (assign
          (deployed true))
        (effects
          (db.write operational.deployments)
          (mcp.call ci.deploy)
          (a2ui.emit change_deployment)))
      (on Reject
        (target rejected)
        (effects
          (db.write operational.approvals)
          (a2ui.emit change_status))))

    (state deployed
      (on Rollback
        (target rolled_back)
        (assign
          (deployed false))
        (effects
          (db.write operational.deployments)
          (mcp.call ci.rollback)
          (a2ui.emit change_deployment))))

    (state rolled_back (type final))
    (state rejected (type final))))

stateDiagram-v2
  title ChangeApproval
  [*] --> idle
  idle --> awaiting_risk_review: SubmitChange / assign, (db.write operational.change_requests), (a2a.task security_reviewer.review_change), (a2ui.emit change_status)
  awaiting_risk_review --> awaiting_approvals: RiskReviewed / assign, (db.write operational.change_reviews), (a2ui.emit change_approval)
  awaiting_approvals --> awaiting_approvals: SecurityApprove / assign, (db.write operational.approvals), (a2ui.emit change_approval)
  awaiting_approvals --> ready_to_deploy: ManagerApprove / assign, guard, (db.write operational.approvals), (a2ui.emit change_deployment)
  awaiting_approvals --> rejected: Reject / (db.write operational.approvals), (a2ui.emit change_status)
  ready_to_deploy --> deployed: Deploy / assign, guard, (db.write operational.deployments), (mcp.call ci.deploy), (a2ui.emit change_deployment)
  ready_to_deploy --> rejected: Reject / (db.write operational.approvals), (a2ui.emit change_status)
  deployed --> rolled_back: Rollback / assign, (db.write operational.deployments), (mcp.call ci.rollback), (a2ui.emit change_deployment)
  rolled_back --> [*]
  rejected --> [*]

flowchart LR
  subgraph M["machine ChangeApproval"]
    state_idle["idle"]
    state_awaiting_risk_review["awaiting_risk_review"]
    state_awaiting_approvals["awaiting_approvals"]
    state_ready_to_deploy["ready_to_deploy"]
    state_deployed["deployed"]
    state_rolled_back["rolled_back"]
    state_rejected["rejected"]
  end
  state_idle --> transition_idle_SubmitChange_0{"SubmitChange"}
  transition_idle_SubmitChange_0 --> state_awaiting_risk_review
  effect_0_db_write_operational_change_requests[["(db.write operational.change_requests)"]]
  transition_idle_SubmitChange_0 -. emits .-> effect_0_db_write_operational_change_requests
  effect_1_a2a_task_security_reviewer_review_change[["(a2a.task security_reviewer.review_change)"]]
  transition_idle_SubmitChange_0 -. emits .-> effect_1_a2a_task_security_reviewer_review_change
  effect_2_a2ui_emit_change_status[["(a2ui.emit change_status)"]]
  transition_idle_SubmitChange_0 -. emits .-> effect_2_a2ui_emit_change_status
  state_awaiting_risk_review --> transition_awaiting_risk_review_RiskReviewed_1{"RiskReviewed"}
  transition_awaiting_risk_review_RiskReviewed_1 --> state_awaiting_approvals
  effect_3_db_write_operational_change_reviews[["(db.write operational.change_reviews)"]]
  transition_awaiting_risk_review_RiskReviewed_1 -. emits .-> effect_3_db_write_operational_change_reviews
  effect_4_a2ui_emit_change_approval[["(a2ui.emit change_approval)"]]
  transition_awaiting_risk_review_RiskReviewed_1 -. emits .-> effect_4_a2ui_emit_change_approval
  state_awaiting_approvals --> transition_awaiting_approvals_SecurityApprove_2{"SecurityApprove"}
  transition_awaiting_approvals_SecurityApprove_2 --> state_awaiting_approvals
  effect_5_db_write_operational_approvals[["(db.write operational.approvals)"]]
  transition_awaiting_approvals_SecurityApprove_2 -. emits .-> effect_5_db_write_operational_approvals
  transition_awaiting_approvals_SecurityApprove_2 -. emits .-> effect_4_a2ui_emit_change_approval
  state_awaiting_approvals --> transition_awaiting_approvals_ManagerApprove_3{"ManagerApprove"}
  transition_awaiting_approvals_ManagerApprove_3 --> state_ready_to_deploy
  transition_awaiting_approvals_ManagerApprove_3 -. emits .-> effect_5_db_write_operational_approvals
  effect_6_a2ui_emit_change_deployment[["(a2ui.emit change_deployment)"]]
  transition_awaiting_approvals_ManagerApprove_3 -. emits .-> effect_6_a2ui_emit_change_deployment
  state_awaiting_approvals --> transition_awaiting_approvals_Reject_4{"Reject"}
  transition_awaiting_approvals_Reject_4 --> state_rejected
  transition_awaiting_approvals_Reject_4 -. emits .-> effect_5_db_write_operational_approvals
  transition_awaiting_approvals_Reject_4 -. emits .-> effect_2_a2ui_emit_change_status
  state_ready_to_deploy --> transition_ready_to_deploy_Deploy_5{"Deploy"}
  transition_ready_to_deploy_Deploy_5 --> state_deployed
  effect_7_db_write_operational_deployments[["(db.write operational.deployments)"]]
  transition_ready_to_deploy_Deploy_5 -. emits .-> effect_7_db_write_operational_deployments
  effect_8_mcp_call_ci_deploy[["(mcp.call ci.deploy)"]]
  transition_ready_to_deploy_Deploy_5 -. emits .-> effect_8_mcp_call_ci_deploy
  transition_ready_to_deploy_Deploy_5 -. emits .-> effect_6_a2ui_emit_change_deployment
  state_ready_to_deploy --> transition_ready_to_deploy_Reject_6{"Reject"}
  transition_ready_to_deploy_Reject_6 --> state_rejected
  transition_ready_to_deploy_Reject_6 -. emits .-> effect_5_db_write_operational_approvals
  transition_ready_to_deploy_Reject_6 -. emits .-> effect_2_a2ui_emit_change_status
  state_deployed --> transition_deployed_Rollback_7{"Rollback"}
  transition_deployed_Rollback_7 --> state_rolled_back
  transition_deployed_Rollback_7 -. emits .-> effect_7_db_write_operational_deployments
  effect_9_mcp_call_ci_rollback[["(mcp.call ci.rollback)"]]
  transition_deployed_Rollback_7 -. emits .-> effect_9_mcp_call_ci_rollback
  transition_deployed_Rollback_7 -. emits .-> effect_6_a2ui_emit_change_deployment

{"version":"v0.9","createSurface":{"surfaceId":"change_status","catalogId":"capsulang.basic","sendDataModel":true}}
{"version":"v0.9","updateComponents":{"surfaceId":"change_status","components":[{"id":"root","component":"Card","child":"body"},{"id":"body","component":"Column","children":["title","state","risk","actions"]},{"id":"title","component":"Text","text":"Deployment change #1001","variant":"h2"},{"id":"state","component":"Text","text":{"path":"/state"}},{"id":"risk","component":"Text","text":{"path":"/risk_summary"}},{"id":"actions","component":"Row","children":["approve_security","approve_manager","deploy"]},{"id":"approve_security","component":"Button","text":"Security approve","action":{"event":{"name":"SecurityApprove"}}},{"id":"approve_manager","component":"Button","text":"Manager approve","action":{"event":{"name":"ManagerApprove"}}},{"id":"deploy","component":"Button","text":"Deploy","action":{"event":{"name":"Deploy"}}}]}}
{"version":"v0.9","updateDataModel":{"surfaceId":"change_status","path":"/","value":{"state":"awaiting_approvals","risk_score":25,"risk_summary":"Low risk; deployment blocked until security and manager approvals are both recorded.","security_approved":false,"manager_approved":false,"deployed":false}}}

git clone https://github.com/advatar/Capsulang.git
cd Capsulang
scripts/install_capsulang.sh

caps check examples/01_abs_i64.caps
caps machine-run examples/03_claim_review_machine.caps \
  ClaimReview SubmitClaim --mode dry-run

cd swift/CapsulangSwift
swift test
swift run caps-swift call Examples/01_abs_i64.caps abs_i64 x=-7

caps capsule-check examples/29_capsule_refund_reviewer.capsule.yaml --json
caps capsule-compile examples/29_capsule_refund_reviewer.capsule.yaml --out-dir build/capsule-refund --json
caps check build/capsule-refund/claims-refund-reviewer.caps --json

caps check examples/30_protocol_native_a2ui.caps --json
caps protocol-plan examples/30_protocol_native_a2ui.caps --json
caps a2ui-manifest examples/30_protocol_native_a2ui.caps --json
caps a2ui-envelope examples/30_protocol_native_a2ui.caps repo_review_ui --kind create --json

caps compile --target react examples/30_protocol_native_a2ui.caps \
  --out build/repo-review-react \
  --json

export OPENAI_API_KEY=...
export OPENAI_MODEL=gpt-5.4

caps serve-authoring-ui --host 127.0.0.1 --port 8123