
Research
/Security News
Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.
@agent-pattern-labs/iso-contract
Advanced tools
Deterministic artifact contracts for AI-agent workflows: validate, parse, and render structured records without model calls.
Deterministic artifact contracts for agent workflows.
Agents are good at prose and weak at remembering exact artifact formats.
iso-contract moves those formats into local JSON contracts that scripts
and agents can validate, parse, and render without model calls.
It is local-only, dependency-free, and MCP-free. Use it for records such as tracker rows, batch outcomes, report headers, scan candidates, or any other workflow artifact that must remain machine-readable.
npm install -D @agent-pattern-labs/iso-contract
iso-contract list --contracts contracts.json
iso-contract explain jobforge.tracker-row --contracts contracts.json
iso-contract validate jobforge.tracker-row \
--contracts contracts.json \
--input @tracker-row.json
iso-contract render jobforge.tracker-row \
--contracts contracts.json \
--input @tracker-row.json \
--format tsv
iso-contract parse jobforge.tracker-row \
--contracts contracts.json \
--format tsv \
--input "812 2026-04-26 Example Labs Staff Agent Engineer Applied 4.2/5 yes [812](reports/812-example-labs-2026-04-26.md) Submitted"
Every command accepts --json for machine-readable output.
{
"contracts": [
{
"name": "jobforge.tracker-row",
"version": "1.0.0",
"fields": [
{ "name": "num", "type": "integer", "required": true },
{ "name": "date", "type": "date", "required": true },
{ "name": "status", "type": "enum", "values": ["Evaluated", "Applied"] },
{ "name": "score", "type": "score" }
],
"formats": {
"tsv": {
"style": "delimited",
"delimiter": "tab",
"fields": ["num", "date", "status", "score"]
}
}
}
]
}
Supported field types:
stringintegernumberbooleanenumdatedatetimeurlmarkdown-linkscorejsonSupported render/parse formats:
jsontsvmarkdown-table-row formatsimport {
getContract,
loadContractCatalog,
renderRecord,
validateRecord,
} from "@agent-pattern-labs/iso-contract";
const catalog = loadContractCatalog(JSON.parse(rawContracts));
const contract = getContract(catalog, "jobforge.tracker-row");
const validation = validateRecord(contract, record);
const tsv = renderRecord(contract, record, "tsv").text;
iso-contract defines artifact shape.iso-ledger records domain events about those artifacts.iso-orchestrator controls durable workflow execution.iso-guard audits whether workflow policy was followed.iso-trace observes what agents actually did.For JobForge, contracts can replace repeated prompt prose for TSV rows, pipeline entries, scan candidates, report headers, and subagent outcomes.
FAQs
Deterministic artifact contracts for AI-agent workflows: validate, parse, and render structured records without model calls.
We found that @agent-pattern-labs/iso-contract demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.

Security News
Rolldown paused Rust React Compiler integration after a 5MB binary size increase raised concerns about shipping React-specific code to all Vite users.

Security News
/Research
Mini Shai-Hulud expands into the Go ecosystem after hitting LeoPlatform npm packages and targeting GitHub Actions workflows.