@agent-finops/core 0.9.6 → 0.9.8

package/README.md

@@ -41,9 +41,9 @@ keep provenance and confidence labels truthful: reserve `verified` for
 official provider-reported financial evidence, keep modeled/local value
 `estimated` or `missing`, and leave unvalidated adapters `untested`.
 
-This is the open foundation for aibill's financial-accountability mission. The
-published v0.9.1 package includes contracts for locally confirmed ownership,
-local self-attested approvals, and opt-in accepted GitHub outcomes. Those are
+This is the open foundation for aibill's financial-accountability mission. This
+package includes contracts for locally confirmed ownership, local
+self-attested approvals, and opt-in accepted GitHub outcomes. Those are
 not company-wide identity, RBAC, approval routing, invoice reconciliation, or
 verified business ROI.
 

package/dist/actionPlanner.js

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
 import { localAgentFormatDescriptor } from "./localAgentFormats/registry.js";
 import { MAX_TOKEN_EXPERIMENT_SESSIONS_PER_PHASE_V0, MAX_WASTE_FINDING_EVIDENCE_REFS_V0, TOKEN_REDUCTION_EXPERIMENT_V0_KIND, TOKEN_REDUCTION_EXPERIMENT_V0_VERSION, WASTE_FINDING_V0_KIND, WASTE_FINDING_V0_VERSION, createActionVerificationReference, createTokenReductionExperimentV0, createWasteFindingV0 } from "./actionVerification.js";
+import { safeUntrustedLabel, WITHHELD_FILE_LABEL } from "./untrustedLabel.js";
 const MINIMUM_SESSIONS = 3;
 const CONTEXT_RATIO_THRESHOLD = 1.5;
 const FRESH_MS = 72 * 60 * 60 * 1_000;
@@ -196,7 +197,9 @@ export function resolveWasteFindingTargetV0(input) {
                 status: "resolved",
                 kind: "repeated_read_file",
                 ref: finding.target.ref,
-                file: match.file,
+                // Already neutralized upstream; re-applied because a resolved target
+                // is written into the Apply artifact an agent reads.
+                file: safeUntrustedLabel(match.file, WITHHELD_FILE_LABEL),
                 readCount: match.readCount,
                 localOnly: true
             }

package/dist/actionVerification.d.ts

@@ -13,8 +13,8 @@ export declare const wasteFindingCaveatValues: readonly ["signal_not_cause", "no
 export type WasteFindingCaveat = typeof wasteFindingCaveatValues[number];
 export declare const actionVerificationEvidenceValues: readonly ["verified", "observed", "calculated", "user_declared", "modeled", "missing"];
 export declare const actionVerificationEvidenceSchema: z.ZodEnum<{
-    missing: "missing";
     verified: "verified";
+    missing: "missing";
     observed: "observed";
     calculated: "calculated";
     user_declared: "user_declared";
@@ -55,12 +55,12 @@ declare const wasteFindingBodySchema: z.ZodObject<{
     candidateAction: z.ZodObject<{
         kind: z.ZodEnum<{
             start_fresh: "start_fresh";
-            trim_context: "trim_context";
             inspect_scope: "inspect_scope";
             lazy_load: "lazy_load";
             disable: "disable";
             remove: "remove";
             reduce_repeated_reads: "reduce_repeated_reads";
+            trim_context: "trim_context";
         }>;
         provider: z.ZodString;
         surface: z.ZodEnum<{
@@ -95,9 +95,9 @@ declare const wasteFindingBodySchema: z.ZodObject<{
             failed: "failed";
         }>;
         freshness: z.ZodEnum<{
-            not_checked: "not_checked";
-            stale: "stale";
             fresh: "fresh";
+            stale: "stale";
+            not_checked: "not_checked";
         }>;
     }, z.core.$strict>;
     metric: z.ZodObject<{
@@ -109,9 +109,9 @@ declare const wasteFindingBodySchema: z.ZodObject<{
             configured_items: "configured_items";
         }>;
         unit: z.ZodEnum<{
+            items: "items";
             tokens: "tokens";
             events: "events";
-            items: "items";
             ratio: "ratio";
         }>;
         value: z.ZodNullable<z.ZodNumber>;
@@ -156,12 +156,12 @@ declare const wasteFindingObjectSchema: z.ZodObject<{
     candidateAction: z.ZodObject<{
         kind: z.ZodEnum<{
             start_fresh: "start_fresh";
-            trim_context: "trim_context";
             inspect_scope: "inspect_scope";
             lazy_load: "lazy_load";
             disable: "disable";
             remove: "remove";
             reduce_repeated_reads: "reduce_repeated_reads";
+            trim_context: "trim_context";
         }>;
         provider: z.ZodString;
         surface: z.ZodEnum<{
@@ -196,9 +196,9 @@ declare const wasteFindingObjectSchema: z.ZodObject<{
             failed: "failed";
         }>;
         freshness: z.ZodEnum<{
-            not_checked: "not_checked";
-            stale: "stale";
             fresh: "fresh";
+            stale: "stale";
+            not_checked: "not_checked";
         }>;
     }, z.core.$strict>;
     metric: z.ZodObject<{
@@ -210,9 +210,9 @@ declare const wasteFindingObjectSchema: z.ZodObject<{
             configured_items: "configured_items";
         }>;
         unit: z.ZodEnum<{
+            items: "items";
             tokens: "tokens";
             events: "events";
-            items: "items";
             ratio: "ratio";
         }>;
         value: z.ZodNullable<z.ZodNumber>;
@@ -240,8 +240,8 @@ declare const tokenSessionSchema: z.ZodObject<{
     model: z.ZodString;
     projectRef: z.ZodOptional<z.ZodString>;
     sessionType: z.ZodEnum<{
-        unknown: "unknown";
         subagent: "subagent";
+        unknown: "unknown";
         parent: "parent";
     }>;
     workTypeRef: z.ZodOptional<z.ZodString>;
@@ -277,9 +277,9 @@ declare const tokenSessionSchema: z.ZodObject<{
                 not_separately_reported: "not_separately_reported";
             }>;
             cacheWriteTokens: z.ZodEnum<{
-                partial: "partial";
                 observed: "observed";
                 not_separately_reported: "not_separately_reported";
+                partial: "partial";
             }>;
             toolTokens: z.ZodEnum<{
                 observed: "observed";
@@ -299,8 +299,8 @@ declare const tokenSessionSchema: z.ZodObject<{
                 calculated_partial: "calculated_partial";
             }>;
             reportedTotalTokens: z.ZodEnum<{
-                not_reported: "not_reported";
                 provider_reported: "provider_reported";
+                not_reported: "not_reported";
             }>;
         }, z.core.$strict>;
     }, z.core.$strict>;
@@ -311,8 +311,8 @@ declare const tokenSessionSchema: z.ZodObject<{
             passed: "passed";
         }>;
         evidence: z.ZodEnum<{
-            missing: "missing";
             verified: "verified";
+            missing: "missing";
             observed: "observed";
             user_declared: "user_declared";
         }>;
@@ -353,12 +353,12 @@ declare const experimentBodySchema: z.ZodObject<{
         candidateAction: z.ZodObject<{
             kind: z.ZodEnum<{
                 start_fresh: "start_fresh";
-                trim_context: "trim_context";
                 inspect_scope: "inspect_scope";
                 lazy_load: "lazy_load";
                 disable: "disable";
                 remove: "remove";
                 reduce_repeated_reads: "reduce_repeated_reads";
+                trim_context: "trim_context";
             }>;
             provider: z.ZodString;
             surface: z.ZodEnum<{
@@ -393,9 +393,9 @@ declare const experimentBodySchema: z.ZodObject<{
                 failed: "failed";
             }>;
             freshness: z.ZodEnum<{
-                not_checked: "not_checked";
-                stale: "stale";
                 fresh: "fresh";
+                stale: "stale";
+                not_checked: "not_checked";
             }>;
         }, z.core.$strict>;
         metric: z.ZodObject<{
@@ -407,9 +407,9 @@ declare const experimentBodySchema: z.ZodObject<{
                 configured_items: "configured_items";
             }>;
             unit: z.ZodEnum<{
+                items: "items";
                 tokens: "tokens";
                 events: "events";
-                items: "items";
                 ratio: "ratio";
             }>;
             value: z.ZodNullable<z.ZodNumber>;
@@ -471,8 +471,8 @@ declare const experimentBodySchema: z.ZodObject<{
         model: z.ZodString;
         projectRef: z.ZodOptional<z.ZodString>;
         sessionType: z.ZodEnum<{
-            unknown: "unknown";
             subagent: "subagent";
+            unknown: "unknown";
             parent: "parent";
         }>;
         workTypeRef: z.ZodOptional<z.ZodString>;
@@ -508,9 +508,9 @@ declare const experimentBodySchema: z.ZodObject<{
                     not_separately_reported: "not_separately_reported";
                 }>;
                 cacheWriteTokens: z.ZodEnum<{
-                    partial: "partial";
                     observed: "observed";
                     not_separately_reported: "not_separately_reported";
+                    partial: "partial";
                 }>;
                 toolTokens: z.ZodEnum<{
                     observed: "observed";
@@ -530,8 +530,8 @@ declare const experimentBodySchema: z.ZodObject<{
                     calculated_partial: "calculated_partial";
                 }>;
                 reportedTotalTokens: z.ZodEnum<{
-                    not_reported: "not_reported";
                     provider_reported: "provider_reported";
+                    not_reported: "not_reported";
                 }>;
             }, z.core.$strict>;
         }, z.core.$strict>;
@@ -542,8 +542,8 @@ declare const experimentBodySchema: z.ZodObject<{
                 passed: "passed";
             }>;
             evidence: z.ZodEnum<{
-                missing: "missing";
                 verified: "verified";
+                missing: "missing";
                 observed: "observed";
                 user_declared: "user_declared";
             }>;
@@ -557,8 +557,8 @@ declare const experimentBodySchema: z.ZodObject<{
                 explicit: "explicit";
             }>;
             evidence: z.ZodEnum<{
-                missing: "missing";
                 verified: "verified";
+                missing: "missing";
                 user_declared: "user_declared";
             }>;
             approvedAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
@@ -574,8 +574,8 @@ declare const experimentBodySchema: z.ZodObject<{
                 passed: "passed";
             }>;
             evidence: z.ZodEnum<{
-                missing: "missing";
                 verified: "verified";
+                missing: "missing";
                 observed: "observed";
                 user_declared: "user_declared";
             }>;
@@ -592,8 +592,8 @@ declare const experimentBodySchema: z.ZodObject<{
         model: z.ZodString;
         projectRef: z.ZodOptional<z.ZodString>;
         sessionType: z.ZodEnum<{
-            unknown: "unknown";
             subagent: "subagent";
+            unknown: "unknown";
             parent: "parent";
         }>;
         workTypeRef: z.ZodOptional<z.ZodString>;
@@ -629,9 +629,9 @@ declare const experimentBodySchema: z.ZodObject<{
                     not_separately_reported: "not_separately_reported";
                 }>;
                 cacheWriteTokens: z.ZodEnum<{
-                    partial: "partial";
                     observed: "observed";
                     not_separately_reported: "not_separately_reported";
+                    partial: "partial";
                 }>;
                 toolTokens: z.ZodEnum<{
                     observed: "observed";
@@ -651,8 +651,8 @@ declare const experimentBodySchema: z.ZodObject<{
                     calculated_partial: "calculated_partial";
                 }>;
                 reportedTotalTokens: z.ZodEnum<{
-                    not_reported: "not_reported";
                     provider_reported: "provider_reported";
+                    not_reported: "not_reported";
                 }>;
             }, z.core.$strict>;
         }, z.core.$strict>;
@@ -663,8 +663,8 @@ declare const experimentBodySchema: z.ZodObject<{
                 passed: "passed";
             }>;
             evidence: z.ZodEnum<{
-                missing: "missing";
                 verified: "verified";
+                missing: "missing";
                 observed: "observed";
                 user_declared: "user_declared";
             }>;
@@ -673,10 +673,10 @@ declare const experimentBodySchema: z.ZodObject<{
     }, z.core.$strict>>;
     invalidation: z.ZodOptional<z.ZodObject<{
         reason: z.ZodEnum<{
+            manual: "manual";
             scope_changed: "scope_changed";
             source_semantics_changed: "source_semantics_changed";
             concurrent_change: "concurrent_change";
-            manual: "manual";
         }>;
         invalidatedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     }, z.core.$strict>>;
@@ -684,11 +684,11 @@ declare const experimentBodySchema: z.ZodObject<{
 export type TokenReductionExperimentV0DraftInput = z.input<typeof experimentBodySchema>;
 declare const evaluationSchema: z.ZodObject<{
     status: z.ZodEnum<{
-        regressed: "regressed";
         collecting: "collecting";
         not_evaluated: "not_evaluated";
         measured_token_reduction: "measured_token_reduction";
         no_measured_change: "no_measured_change";
+        regressed: "regressed";
         inconclusive: "inconclusive";
     }>;
     metricEvidence: z.ZodEnum<{
@@ -696,19 +696,19 @@ declare const evaluationSchema: z.ZodObject<{
         calculated: "calculated";
     }>;
     matchingEvidence: z.ZodEnum<{
-        missing: "missing";
         verified: "verified";
+        missing: "missing";
         observed: "observed";
         user_declared: "user_declared";
     }>;
     qualityStatus: z.ZodEnum<{
-        insufficient: "insufficient";
-        held: "held";
         regressed: "regressed";
+        held: "held";
+        insufficient: "insufficient";
     }>;
     qualityEvidence: z.ZodEnum<{
-        missing: "missing";
         verified: "verified";
+        missing: "missing";
         observed: "observed";
         user_declared: "user_declared";
     }>;
@@ -795,12 +795,12 @@ declare const experimentObjectSchema: z.ZodObject<{
         candidateAction: z.ZodObject<{
             kind: z.ZodEnum<{
                 start_fresh: "start_fresh";
-                trim_context: "trim_context";
                 inspect_scope: "inspect_scope";
                 lazy_load: "lazy_load";
                 disable: "disable";
                 remove: "remove";
                 reduce_repeated_reads: "reduce_repeated_reads";
+                trim_context: "trim_context";
             }>;
             provider: z.ZodString;
             surface: z.ZodEnum<{
@@ -835,9 +835,9 @@ declare const experimentObjectSchema: z.ZodObject<{
                 failed: "failed";
             }>;
             freshness: z.ZodEnum<{
-                not_checked: "not_checked";
-                stale: "stale";
                 fresh: "fresh";
+                stale: "stale";
+                not_checked: "not_checked";
             }>;
         }, z.core.$strict>;
         metric: z.ZodObject<{
@@ -849,9 +849,9 @@ declare const experimentObjectSchema: z.ZodObject<{
                 configured_items: "configured_items";
             }>;
             unit: z.ZodEnum<{
+                items: "items";
                 tokens: "tokens";
                 events: "events";
-                items: "items";
                 ratio: "ratio";
             }>;
             value: z.ZodNullable<z.ZodNumber>;
@@ -913,8 +913,8 @@ declare const experimentObjectSchema: z.ZodObject<{
         model: z.ZodString;
         projectRef: z.ZodOptional<z.ZodString>;
         sessionType: z.ZodEnum<{
-            unknown: "unknown";
             subagent: "subagent";
+            unknown: "unknown";
             parent: "parent";
         }>;
         workTypeRef: z.ZodOptional<z.ZodString>;
@@ -950,9 +950,9 @@ declare const experimentObjectSchema: z.ZodObject<{
                     not_separately_reported: "not_separately_reported";
                 }>;
                 cacheWriteTokens: z.ZodEnum<{
-                    partial: "partial";
                     observed: "observed";
                     not_separately_reported: "not_separately_reported";
+                    partial: "partial";
                 }>;
                 toolTokens: z.ZodEnum<{
                     observed: "observed";
@@ -972,8 +972,8 @@ declare const experimentObjectSchema: z.ZodObject<{
                     calculated_partial: "calculated_partial";
                 }>;
                 reportedTotalTokens: z.ZodEnum<{
-                    not_reported: "not_reported";
                     provider_reported: "provider_reported";
+                    not_reported: "not_reported";
                 }>;
             }, z.core.$strict>;
         }, z.core.$strict>;
@@ -984,8 +984,8 @@ declare const experimentObjectSchema: z.ZodObject<{
                 passed: "passed";
             }>;
             evidence: z.ZodEnum<{
-                missing: "missing";
                 verified: "verified";
+                missing: "missing";
                 observed: "observed";
                 user_declared: "user_declared";
             }>;
@@ -999,8 +999,8 @@ declare const experimentObjectSchema: z.ZodObject<{
                 explicit: "explicit";
             }>;
             evidence: z.ZodEnum<{
-                missing: "missing";
                 verified: "verified";
+                missing: "missing";
                 user_declared: "user_declared";
             }>;
             approvedAt: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
@@ -1016,8 +1016,8 @@ declare const experimentObjectSchema: z.ZodObject<{
                 passed: "passed";
             }>;
             evidence: z.ZodEnum<{
-                missing: "missing";
                 verified: "verified";
+                missing: "missing";
                 observed: "observed";
                 user_declared: "user_declared";
             }>;
@@ -1034,8 +1034,8 @@ declare const experimentObjectSchema: z.ZodObject<{
         model: z.ZodString;
         projectRef: z.ZodOptional<z.ZodString>;
         sessionType: z.ZodEnum<{
-            unknown: "unknown";
             subagent: "subagent";
+            unknown: "unknown";
             parent: "parent";
         }>;
         workTypeRef: z.ZodOptional<z.ZodString>;
@@ -1071,9 +1071,9 @@ declare const experimentObjectSchema: z.ZodObject<{
                     not_separately_reported: "not_separately_reported";
                 }>;
                 cacheWriteTokens: z.ZodEnum<{
-                    partial: "partial";
                     observed: "observed";
                     not_separately_reported: "not_separately_reported";
+                    partial: "partial";
                 }>;
                 toolTokens: z.ZodEnum<{
                     observed: "observed";
@@ -1093,8 +1093,8 @@ declare const experimentObjectSchema: z.ZodObject<{
                     calculated_partial: "calculated_partial";
                 }>;
                 reportedTotalTokens: z.ZodEnum<{
-                    not_reported: "not_reported";
                     provider_reported: "provider_reported";
+                    not_reported: "not_reported";
                 }>;
             }, z.core.$strict>;
         }, z.core.$strict>;
@@ -1105,8 +1105,8 @@ declare const experimentObjectSchema: z.ZodObject<{
                 passed: "passed";
             }>;
             evidence: z.ZodEnum<{
-                missing: "missing";
                 verified: "verified";
+                missing: "missing";
                 observed: "observed";
                 user_declared: "user_declared";
             }>;
@@ -1115,10 +1115,10 @@ declare const experimentObjectSchema: z.ZodObject<{
     }, z.core.$strict>>;
     invalidation: z.ZodOptional<z.ZodObject<{
         reason: z.ZodEnum<{
+            manual: "manual";
             scope_changed: "scope_changed";
             source_semantics_changed: "source_semantics_changed";
             concurrent_change: "concurrent_change";
-            manual: "manual";
         }>;
         invalidatedAt: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
     }, z.core.$strict>>;
@@ -1126,20 +1126,20 @@ declare const experimentObjectSchema: z.ZodObject<{
     revisionId: z.ZodString;
     lifecycle: z.ZodEnum<{
         complete: "complete";
-        rolled_back: "rolled_back";
         draft: "draft";
         baseline_ready: "baseline_ready";
         applied: "applied";
         collecting: "collecting";
+        rolled_back: "rolled_back";
         invalidated: "invalidated";
     }>;
     evaluation: z.ZodObject<{
         status: z.ZodEnum<{
-            regressed: "regressed";
             collecting: "collecting";
             not_evaluated: "not_evaluated";
             measured_token_reduction: "measured_token_reduction";
             no_measured_change: "no_measured_change";
+            regressed: "regressed";
             inconclusive: "inconclusive";
         }>;
         metricEvidence: z.ZodEnum<{
@@ -1147,19 +1147,19 @@ declare const experimentObjectSchema: z.ZodObject<{
             calculated: "calculated";
         }>;
         matchingEvidence: z.ZodEnum<{
-            missing: "missing";
             verified: "verified";
+            missing: "missing";
             observed: "observed";
             user_declared: "user_declared";
         }>;
         qualityStatus: z.ZodEnum<{
-            insufficient: "insufficient";
-            held: "held";
             regressed: "regressed";
+            held: "held";
+            insufficient: "insufficient";
         }>;
         qualityEvidence: z.ZodEnum<{
-            missing: "missing";
             verified: "verified";
+            missing: "missing";
             observed: "observed";
             user_declared: "user_declared";
         }>;