@c4a/context 0.6.19 → 0.7.0

package/indexerProfileMetricAudit.d.ts

@@ -0,0 +1,218 @@
+import { z } from "zod";
+export declare const indexerProfileMetricResultSchema: z.ZodObject<{
+    metric_id: z.ZodEffects<z.ZodString, string, string>;
+    operator: z.ZodEffects<z.ZodString, string, string>;
+    unit: z.ZodEnum<["count", "ratio"]>;
+    numerator: z.ZodNumber;
+    denominator: z.ZodNumber;
+    actual: z.ZodNumber;
+    recommended: z.ZodObject<{
+        min: z.ZodNullable<z.ZodNumber>;
+        max: z.ZodNullable<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        min: number | null;
+        max: number | null;
+    }, {
+        min: number | null;
+        max: number | null;
+    }>;
+    hard: z.ZodObject<{
+        min: z.ZodNullable<z.ZodNumber>;
+        max: z.ZodNullable<z.ZodNumber>;
+    }, "strict", z.ZodTypeAny, {
+        min: number | null;
+        max: number | null;
+    }, {
+        min: number | null;
+        max: number | null;
+    }>;
+    status: z.ZodEnum<["passed", "warning", "failed"]>;
+    evidence: z.ZodArray<z.ZodString, "many">;
+    missing: z.ZodArray<z.ZodString, "many">;
+    repair_guidance: z.ZodArray<z.ZodString, "many">;
+}, "strict", z.ZodTypeAny, {
+    status: "passed" | "warning" | "failed";
+    denominator: number;
+    operator: string;
+    unit: "count" | "ratio";
+    recommended: {
+        min: number | null;
+        max: number | null;
+    };
+    missing: string[];
+    metric_id: string;
+    evidence: string[];
+    numerator: number;
+    actual: number;
+    hard: {
+        min: number | null;
+        max: number | null;
+    };
+    repair_guidance: string[];
+}, {
+    status: "passed" | "warning" | "failed";
+    denominator: number;
+    operator: string;
+    unit: "count" | "ratio";
+    recommended: {
+        min: number | null;
+        max: number | null;
+    };
+    missing: string[];
+    metric_id: string;
+    evidence: string[];
+    numerator: number;
+    actual: number;
+    hard: {
+        min: number | null;
+        max: number | null;
+    };
+    repair_guidance: string[];
+}>;
+export declare const indexerProfileMetricAuditSchema: z.ZodObject<{
+    protocol: z.ZodLiteral<"context.indexer.profile-metric-audit/v1">;
+    profile_id: z.ZodEffects<z.ZodString, string, string>;
+    profile_contract_digest: z.ZodString;
+    artifact_policy_variant_id: z.ZodEffects<z.ZodString, string, string>;
+    metrics: z.ZodArray<z.ZodObject<{
+        metric_id: z.ZodEffects<z.ZodString, string, string>;
+        operator: z.ZodEffects<z.ZodString, string, string>;
+        unit: z.ZodEnum<["count", "ratio"]>;
+        numerator: z.ZodNumber;
+        denominator: z.ZodNumber;
+        actual: z.ZodNumber;
+        recommended: z.ZodObject<{
+            min: z.ZodNullable<z.ZodNumber>;
+            max: z.ZodNullable<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            min: number | null;
+            max: number | null;
+        }, {
+            min: number | null;
+            max: number | null;
+        }>;
+        hard: z.ZodObject<{
+            min: z.ZodNullable<z.ZodNumber>;
+            max: z.ZodNullable<z.ZodNumber>;
+        }, "strict", z.ZodTypeAny, {
+            min: number | null;
+            max: number | null;
+        }, {
+            min: number | null;
+            max: number | null;
+        }>;
+        status: z.ZodEnum<["passed", "warning", "failed"]>;
+        evidence: z.ZodArray<z.ZodString, "many">;
+        missing: z.ZodArray<z.ZodString, "many">;
+        repair_guidance: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        status: "passed" | "warning" | "failed";
+        denominator: number;
+        operator: string;
+        unit: "count" | "ratio";
+        recommended: {
+            min: number | null;
+            max: number | null;
+        };
+        missing: string[];
+        metric_id: string;
+        evidence: string[];
+        numerator: number;
+        actual: number;
+        hard: {
+            min: number | null;
+            max: number | null;
+        };
+        repair_guidance: string[];
+    }, {
+        status: "passed" | "warning" | "failed";
+        denominator: number;
+        operator: string;
+        unit: "count" | "ratio";
+        recommended: {
+            min: number | null;
+            max: number | null;
+        };
+        missing: string[];
+        metric_id: string;
+        evidence: string[];
+        numerator: number;
+        actual: number;
+        hard: {
+            min: number | null;
+            max: number | null;
+        };
+        repair_guidance: string[];
+    }>, "many">;
+    failed_metric_ids: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    audit_digest: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    protocol: "context.indexer.profile-metric-audit/v1";
+    metrics: {
+        status: "passed" | "warning" | "failed";
+        denominator: number;
+        operator: string;
+        unit: "count" | "ratio";
+        recommended: {
+            min: number | null;
+            max: number | null;
+        };
+        missing: string[];
+        metric_id: string;
+        evidence: string[];
+        numerator: number;
+        actual: number;
+        hard: {
+            min: number | null;
+            max: number | null;
+        };
+        repair_guidance: string[];
+    }[];
+    profile_id: string;
+    profile_contract_digest: string;
+    audit_digest: string;
+    failed_metric_ids: string[];
+    artifact_policy_variant_id: string;
+}, {
+    protocol: "context.indexer.profile-metric-audit/v1";
+    metrics: {
+        status: "passed" | "warning" | "failed";
+        denominator: number;
+        operator: string;
+        unit: "count" | "ratio";
+        recommended: {
+            min: number | null;
+            max: number | null;
+        };
+        missing: string[];
+        metric_id: string;
+        evidence: string[];
+        numerator: number;
+        actual: number;
+        hard: {
+            min: number | null;
+            max: number | null;
+        };
+        repair_guidance: string[];
+    }[];
+    profile_id: string;
+    profile_contract_digest: string;
+    audit_digest: string;
+    failed_metric_ids: string[];
+    artifact_policy_variant_id: string;
+}>;
+export type IndexerProfileMetricResult = z.infer<typeof indexerProfileMetricResultSchema>;
+export type IndexerProfileMetricAudit = z.infer<typeof indexerProfileMetricAuditSchema>;
+export declare function validateIndexerProfileMetricAudit(value: unknown): IndexerProfileMetricAudit;
+export declare function validateCurrentIndexerProfileMetricAudit(input: {
+    audit: unknown;
+    profile_id: string;
+    profile_contract_digest: string;
+    artifact_policy_variant_id: string;
+}): IndexerProfileMetricAudit;
+export declare function buildIndexerProfileMetricAudit(input: {
+    profile_id: string;
+    profile_contract_digest: string;
+    artifact_policy_variant_id: string;
+    metrics: IndexerProfileMetricResult[];
+}): IndexerProfileMetricAudit;

package/indexerProgramExecutionAuthorization.d.ts

@@ -0,0 +1,227 @@
+import { z } from "zod";
+import { type IndexerExecution, type IndexerProviderManifest } from "./indexerProvider.js";
+import { type IndexerProgramAuthorization, type ResolvedProviderBundle } from "./indexerProviderResolution.js";
+export declare const indexerProgramExecutionAuthorizationReportSchema: z.ZodObject<{
+    protocol: z.ZodLiteral<"context.indexer.program-execution-authorization-report/v1">;
+    project_ref: z.ZodString;
+    provider: z.ZodObject<{
+        indexer_id: z.ZodEffects<z.ZodString, string, string>;
+        provider_id: z.ZodEffects<z.ZodString, string, string>;
+        skill: z.ZodEffects<z.ZodString, string, string>;
+        version: z.ZodString;
+        bundle_integrity: z.ZodString;
+        manifest_digest: z.ZodString;
+        provider_fingerprint: z.ZodString;
+        issuer: z.ZodEffects<z.ZodString, string, string>;
+        declared_trust: z.ZodEnum<["first-party", "verified", "project-authorized", "untrusted"]>;
+    }, "strict", z.ZodTypeAny, {
+        skill: string;
+        version: string;
+        indexer_id: string;
+        provider_id: string;
+        manifest_digest: string;
+        issuer: string;
+        provider_fingerprint: string;
+        bundle_integrity: string;
+        declared_trust: "first-party" | "verified" | "project-authorized" | "untrusted";
+    }, {
+        skill: string;
+        version: string;
+        indexer_id: string;
+        provider_id: string;
+        manifest_digest: string;
+        issuer: string;
+        provider_fingerprint: string;
+        bundle_integrity: string;
+        declared_trust: "first-party" | "verified" | "project-authorized" | "untrusted";
+    }>;
+    resource: z.ZodLiteral<"program">;
+    program: z.ZodDiscriminatedUnion<"origin", [z.ZodObject<{
+        origin: z.ZodLiteral<"provider-bundle">;
+        path: z.ZodEffects<z.ZodString, string, string>;
+        content_digest: z.ZodString;
+        program_digest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        path: string;
+        program_digest: string;
+        origin: "provider-bundle";
+        content_digest: string;
+    }, {
+        path: string;
+        program_digest: string;
+        origin: "provider-bundle";
+        content_digest: string;
+    }>, z.ZodObject<{
+        origin: z.ZodLiteral<"project-local">;
+        path: z.ZodEffects<z.ZodString, string, string>;
+        content_digest: z.ZodString;
+        program_digest: z.ZodString;
+    }, "strict", z.ZodTypeAny, {
+        path: string;
+        program_digest: string;
+        origin: "project-local";
+        content_digest: string;
+    }, {
+        path: string;
+        program_digest: string;
+        origin: "project-local";
+        content_digest: string;
+    }>]>;
+    execution: z.ZodObject<{
+        runtime: z.ZodLiteral<"node">;
+        entry: z.ZodEffects<z.ZodString, string, string>;
+        args: z.ZodArray<z.ZodEffects<z.ZodString, string, string>, "many">;
+    }, "strict", z.ZodTypeAny, {
+        entry: string;
+        args: string[];
+        runtime: "node";
+    }, {
+        entry: string;
+        args: string[];
+        runtime: "node";
+    }>;
+    execution_digest: z.ZodString;
+    capabilities: z.ZodArray<z.ZodEnum<["source.read", "parser-facts.read", "indexer-result.write"]>, "many">;
+    capability_set_digest: z.ZodString;
+    dependency_set_digest: z.ZodString;
+    scope_digest: z.ZodString;
+    limits: z.ZodObject<{
+        timeout_ms: z.ZodNumber;
+        max_stdin_bytes: z.ZodNumber;
+        max_stdout_bytes: z.ZodNumber;
+        max_stderr_bytes: z.ZodNumber;
+    }, "strict", z.ZodTypeAny, {
+        timeout_ms: number;
+        max_stdin_bytes: number;
+        max_stdout_bytes: number;
+        max_stderr_bytes: number;
+    }, {
+        timeout_ms: number;
+        max_stdin_bytes: number;
+        max_stdout_bytes: number;
+        max_stderr_bytes: number;
+    }>;
+    execution_policy_digest: z.ZodString;
+    requested_level: z.ZodLiteral<"trusted-program">;
+    sandboxed_program: z.ZodLiteral<false>;
+    report_digest: z.ZodString;
+}, "strict", z.ZodTypeAny, {
+    protocol: "context.indexer.program-execution-authorization-report/v1";
+    provider: {
+        skill: string;
+        version: string;
+        indexer_id: string;
+        provider_id: string;
+        manifest_digest: string;
+        issuer: string;
+        provider_fingerprint: string;
+        bundle_integrity: string;
+        declared_trust: "first-party" | "verified" | "project-authorized" | "untrusted";
+    };
+    capabilities: ("source.read" | "parser-facts.read" | "indexer-result.write")[];
+    scope_digest: string;
+    resource: "program";
+    execution: {
+        entry: string;
+        args: string[];
+        runtime: "node";
+    };
+    program: {
+        path: string;
+        program_digest: string;
+        origin: "provider-bundle";
+        content_digest: string;
+    } | {
+        path: string;
+        program_digest: string;
+        origin: "project-local";
+        content_digest: string;
+    };
+    sandboxed_program: false;
+    project_ref: string;
+    execution_digest: string;
+    capability_set_digest: string;
+    dependency_set_digest: string;
+    execution_policy_digest: string;
+    report_digest: string;
+    limits: {
+        timeout_ms: number;
+        max_stdin_bytes: number;
+        max_stdout_bytes: number;
+        max_stderr_bytes: number;
+    };
+    requested_level: "trusted-program";
+}, {
+    protocol: "context.indexer.program-execution-authorization-report/v1";
+    provider: {
+        skill: string;
+        version: string;
+        indexer_id: string;
+        provider_id: string;
+        manifest_digest: string;
+        issuer: string;
+        provider_fingerprint: string;
+        bundle_integrity: string;
+        declared_trust: "first-party" | "verified" | "project-authorized" | "untrusted";
+    };
+    capabilities: ("source.read" | "parser-facts.read" | "indexer-result.write")[];
+    scope_digest: string;
+    resource: "program";
+    execution: {
+        entry: string;
+        args: string[];
+        runtime: "node";
+    };
+    program: {
+        path: string;
+        program_digest: string;
+        origin: "provider-bundle";
+        content_digest: string;
+    } | {
+        path: string;
+        program_digest: string;
+        origin: "project-local";
+        content_digest: string;
+    };
+    sandboxed_program: false;
+    project_ref: string;
+    execution_digest: string;
+    capability_set_digest: string;
+    dependency_set_digest: string;
+    execution_policy_digest: string;
+    report_digest: string;
+    limits: {
+        timeout_ms: number;
+        max_stdin_bytes: number;
+        max_stdout_bytes: number;
+        max_stderr_bytes: number;
+    };
+    requested_level: "trusted-program";
+}>;
+export type IndexerProgramExecutionAuthorizationReport = z.infer<typeof indexerProgramExecutionAuthorizationReportSchema>;
+export declare function validateIndexerProgramExecutionAuthorizationReport(value: unknown): IndexerProgramExecutionAuthorizationReport;
+export declare function buildIndexerProgramExecutionAuthorizationReport(input: {
+    project_ref: string;
+    manifest: IndexerProviderManifest;
+    bundle: ResolvedProviderBundle;
+    dependency_set_digest: string;
+    scope_digest: string;
+    limits: IndexerProgramExecutionAuthorizationReport["limits"];
+}): IndexerProgramExecutionAuthorizationReport;
+export declare function buildProjectLocalIndexerProgramExecutionAuthorizationReport(input: {
+    project_ref: string;
+    base_manifest: IndexerProviderManifest;
+    base_bundle: ResolvedProviderBundle;
+    program_path: string;
+    program_content_digest: string;
+    execution: IndexerExecution;
+    capabilities: IndexerProgramExecutionAuthorizationReport["capabilities"];
+    dependency_set_digest: string;
+    scope_digest: string;
+    limits: IndexerProgramExecutionAuthorizationReport["limits"];
+}): IndexerProgramExecutionAuthorizationReport;
+export declare function authorizeIndexerProgramExecution(input: {
+    report: unknown;
+    authority_ref: string;
+    authority_scope_digest: string;
+}): IndexerProgramAuthorization;