@crewhaus/tool-proof 0.0.0-stage → 0.8.1

package/dist/lib/roots.d.ts

@@ -0,0 +1,44 @@
+import { type Tenant } from "@crewhaus/tenancy";
+/** A tenant's own root: the parent of its sessions, state and tool results. */
+export declare function tenantRootOf(tenant: Tenant): string;
+/**
+ * The proofs root for `specName`: `<tenantRoot>/proofs/<spec>` under a
+ * tenant, `<workspaceRoot>/.crewhaus/proofs/<spec>` otherwise. The spec
+ * name is checked by provability's rule either way.
+ */
+export declare function defaultProofsRoot(workspaceRoot: string, specName: string, tenant: Tenant | undefined): string;
+/**
+ * The session-log root a preflight reads when nobody named one: the active
+ * tenant's `sessionRoot`, else `CREWHAUS_SESSION_DIR` — runtime-core's
+ * `resolveSessionRootDir` order, so the tools read where the runtime wrote.
+ * Undefined leaves event-log's default (`.crewhaus/sessions`).
+ */
+export declare function defaultSessionRoot(tenant: Tenant | undefined): string | undefined;
+/** `dir`, resolved, after checking it lies inside the active tenant's root (when there is one). */
+export declare function fenced(dir: string, tenant: Tenant | undefined): string;
+/**
+ * Environment variables that relocate the runtime's own state: sessions,
+ * datasets, watch-me records, the shared directory and the tenants' roots.
+ */
+export declare const STATE_ENV_VARS: ReadonlyArray<string>;
+/**
+ * The directories, beyond the workspace's `.crewhaus/`, where this run keeps
+ * its own record — the verifier's `VerifyOptions.stateRoots` (design §1
+ * principle 1: evidence is a source the run read, never what the model
+ * said). A session log holds every answer verbatim, a bundle every claim, a
+ * spilled result what a tool returned; read back and cited, each grounds the
+ * model's own text. So a path under the session root the gate reads, the
+ * proofs root, the active tenant's root and spill root, or a directory an
+ * environment variable relocated state to, is no source. The gate and the
+ * preflight read the same list, so they agree (design §6).
+ *
+ * A directory that holds the workspace itself is left out: refusing it
+ * would refuse every file the run read.
+ */
+export declare function runtimeStateRoots(input: {
+    readonly workspaceRoot: string;
+    readonly sessionRootDir?: string;
+    readonly proofsRoot?: string;
+    readonly tenant?: Tenant;
+    readonly env?: Readonly<Record<string, string | undefined>>;
+}): string[];

package/dist/lib/roots.js

@@ -0,0 +1,105 @@
+/**
+ * Where the proof tools file artifacts and read session logs, tenant-aware
+ * (design §5.3, §8: proofs are tenant-fenced on the managed shape).
+ *
+ * Outside a tenant scope the proofs root is provability's
+ * `proofsRoot(workspaceRoot, spec)`, `<cwd>/.crewhaus/proofs/<spec>`. Every
+ * managed turn runs inside its request's `withTenant`, and there the
+ * tenant's root stands where `.crewhaus/` does: `<tenantRoot>/proofs/<spec>`,
+ * beside the tenant's sessions, tool results and state. One tenant's claims,
+ * statements and proofs then never share a directory with another's, and a
+ * preflight reads only its own tenant's artifacts. The tenant's root is the
+ * parent of its `sessionRoot`, the rule continuity-store and wiki-store
+ * fence by.
+ *
+ * Under a tenant, any root the tools would use — a caller's explicit
+ * `proofsRoot` or `sessionRootDir` included — that resolves outside the
+ * tenant's root fails closed (`TenancyError`, CWE-1230), as every
+ * tenant-aware store does. A tools instance built once with a fixed root
+ * and shared by every tenant would otherwise pool them all.
+ */
+import { isAbsolute, join, relative, resolve } from "node:path";
+import { proofsRoot } from "@crewhaus/provability";
+import { assertSamePath } from "@crewhaus/tenancy";
+/** A tenant's own root: the parent of its sessions, state and tool results. */
+export function tenantRootOf(tenant) {
+    return resolve(tenant.sessionRoot, "..");
+}
+/**
+ * The proofs root for `specName`: `<tenantRoot>/proofs/<spec>` under a
+ * tenant, `<workspaceRoot>/.crewhaus/proofs/<spec>` otherwise. The spec
+ * name is checked by provability's rule either way.
+ */
+export function defaultProofsRoot(workspaceRoot, specName, tenant) {
+    const plain = proofsRoot(workspaceRoot, specName);
+    return tenant === undefined ? plain : join(tenantRootOf(tenant), "proofs", specName);
+}
+/**
+ * The session-log root a preflight reads when nobody named one: the active
+ * tenant's `sessionRoot`, else `CREWHAUS_SESSION_DIR` — runtime-core's
+ * `resolveSessionRootDir` order, so the tools read where the runtime wrote.
+ * Undefined leaves event-log's default (`.crewhaus/sessions`).
+ */
+export function defaultSessionRoot(tenant) {
+    if (tenant !== undefined)
+        return tenant.sessionRoot;
+    const fromEnv = process.env["CREWHAUS_SESSION_DIR"];
+    return fromEnv !== undefined && fromEnv !== "" ? fromEnv : undefined;
+}
+/** `dir`, resolved, after checking it lies inside the active tenant's root (when there is one). */
+export function fenced(dir, tenant) {
+    const abs = resolve(dir);
+    if (tenant !== undefined)
+        assertSamePath(abs, tenantRootOf(tenant));
+    return abs;
+}
+/**
+ * Environment variables that relocate the runtime's own state: sessions,
+ * datasets, watch-me records, the shared directory and the tenants' roots.
+ */
+export const STATE_ENV_VARS = [
+    "CREWHAUS_SESSION_DIR",
+    "CREWHAUS_DATASETS_DIR",
+    "CREWHAUS_WATCHME_ROOT",
+    "CREWHAUS_SHARED_DIR",
+    "CREWHAUS_TENANTS_ROOT",
+];
+/**
+ * The directories, beyond the workspace's `.crewhaus/`, where this run keeps
+ * its own record — the verifier's `VerifyOptions.stateRoots` (design §1
+ * principle 1: evidence is a source the run read, never what the model
+ * said). A session log holds every answer verbatim, a bundle every claim, a
+ * spilled result what a tool returned; read back and cited, each grounds the
+ * model's own text. So a path under the session root the gate reads, the
+ * proofs root, the active tenant's root and spill root, or a directory an
+ * environment variable relocated state to, is no source. The gate and the
+ * preflight read the same list, so they agree (design §6).
+ *
+ * A directory that holds the workspace itself is left out: refusing it
+ * would refuse every file the run read.
+ */
+export function runtimeStateRoots(input) {
+    const env = input.env ?? process.env;
+    const workspace = resolve(input.workspaceRoot);
+    const named = [
+        input.sessionRootDir,
+        input.proofsRoot,
+        ...(input.tenant !== undefined
+            ? [input.tenant.toolResultRoot, tenantRootOf(input.tenant)]
+            : []),
+        ...STATE_ENV_VARS.map((name) => env[name]),
+    ];
+    const out = [];
+    for (const dir of named) {
+        if (dir === undefined || dir.trim() === "")
+            continue;
+        const abs = resolve(workspace, dir);
+        const up = relative(abs, workspace);
+        // The workspace is the directory or under it.
+        if (up === "" || (!up.startsWith("..") && !isAbsolute(up)))
+            continue;
+        if (!out.includes(abs))
+            out.push(abs);
+    }
+    return out;
+}

package/package.json

@@ -1,6 +1,57 @@
 {
   "name": "@crewhaus/tool-proof",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.8.1",
+  "type": "module",
+  "description": "ProofCheckers, ProofCheck and ProvabilityPreflight: the tools a harness uses to prove claims and check a draft before it answers",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "test": "bun test src"
+  },
+  "dependencies": {
+    "@crewhaus/errors": "0.8.1",
+    "@crewhaus/event-log": "0.8.1",
+    "@crewhaus/proof-checker": "0.8.1",
+    "@crewhaus/provability": "0.8.1",
+    "@crewhaus/sandbox": "0.8.1",
+    "@crewhaus/tenancy": "0.8.1",
+    "@crewhaus/tool-builder": "0.8.1",
+    "@crewhaus/tool-catalog": "0.8.1",
+    "@crewhaus/tool-categories": "0.8.1",
+    "@crewhaus/trace-event-bus": "0.8.1",
+    "zod": "^3.23.8"
+  },
+  "devDependencies": {
+    "@crewhaus/tool-executor": "workspace:*",
+    "@crewhaus/tool-result-store": "workspace:*"
+  },
+  "license": "Apache-2.0",
+  "author": {
+    "name": "Max Meier",
+    "email": "max@crewhaus.ai",
+    "url": "https://crewhaus.ai"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/crewhaus/factory.git",
+    "directory": "packages/tool-proof"
+  },
+  "homepage": "https://github.com/crewhaus/factory/tree/main/packages/tool-proof#readme",
+  "bugs": {
+    "url": "https://github.com/crewhaus/factory/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": ["dist", "README.md", "LICENSE", "NOTICE"],
+  "engines": {
+    "bun": ">=1.3.14"
+  }
+}