@cygnuxlabs/tracekit 0.0.0-stage → 1.2.2

package/dist/v2/executor.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The actions of a tool executor (`tracekit executor`, docs/executor.md) as framework tools. The agent holds only its
+ * run: the executor holds the actions' credentials and decides, runs and records each call in the signer (tier T2).
+ *
+ *   import { tool } from "@openai/agents";
+ *   import { jsonSchema } from "ai";
+ *   import { executorActions, openaiAgentsTool, vercelTool } from "@cygnuxlabs/tracekit/v2/executor";
+ *   const actions = await executorActions("https://executor.internal:8090", run, { headers: { authorization: `Bearer ${token}` } });
+ *   new Agent({ tools: actions.map((a) => openaiAgentsTool(tool, a)) });
+ *   generateText({ tools: Object.fromEntries(actions.map((a) => [a.name, vercelTool(a, jsonSchema)])) });
+ *
+ * `headers` authenticate the agent to the executor (a bearer or service-account token); for a client certificate pass
+ * a `fetch` that presents one. The tools carry EXECUTOR, so the Tracekit adapters leave them to the executor, which
+ * decides and records them (T2). A
+ * refusal (deny, an approval not given, the signer unreachable) throws ExecutorRefused with the executor's message,
+ * which the framework hands the model as the tool's error.
+ */
+import type { Frame, RunHandle } from "./client.js";
+export declare class ExecutorRefused extends Error {
+}
+/** Set on the tools built here: the Tracekit adapters don't gate them. */
+export declare const EXECUTOR: unique symbol;
+/** The Claude Agent SDK hooks leave the tools of an MCP server of this name (mcp__tracekit-executor__<action>) alone. */
+export declare const SERVER = "tracekit-executor";
+export type Action = {
+    name: string;
+    description: string;
+    args: Frame;
+    /** {status: the upstream's HTTP status, result: its JSON or text}; rejects with ExecutorRefused when it did not run. */
+    call(args: unknown, toolCallId?: string): Promise<Frame>;
+};
+type Options = {
+    headers?: Record<string, string>;
+    fetch?: typeof globalThis.fetch;
+};
+/** The executor's actions, each callable for `run`. */
+export declare function executorActions(url: string, run: RunHandle, { headers, fetch }?: Options): Promise<Action[]>;
+/** An @openai/agents function tool; `build` is the SDK's `tool`. */
+export declare const openaiAgentsTool: <T>(build: (options: any) => T, a: Action) => T;
+/** A Vercel AI SDK tool; `jsonSchema` is the `ai` package's. */
+export declare const vercelTool: (a: Action, jsonSchema: (s: any) => unknown) => {
+    [EXECUTOR]: boolean;
+    description: string;
+    inputSchema: unknown;
+    execute: (input: unknown, opts?: {
+        toolCallId?: string;
+    }) => Promise<Frame>;
+};
+export {};

package/dist/v2/executor.js

@@ -0,0 +1,57 @@
+export class ExecutorRefused extends Error {
+}
+/** Set on the tools built here: the Tracekit adapters don't gate them. */
+export const EXECUTOR = Symbol.for("tracekit.executor");
+/** The Claude Agent SDK hooks leave the tools of an MCP server of this name (mcp__tracekit-executor__<action>) alone. */
+export const SERVER = "tracekit-executor";
+/** Why `url` may not receive the run token and the agent's credential, or null: https, or plain http to loopback. */
+function remoteUrlError(url) {
+    let u;
+    try {
+        u = new URL(url);
+    }
+    catch {
+        return "invalid URL";
+    }
+    if (u.username || u.password)
+        return "URL must not contain user@ credentials";
+    if (u.protocol === "https:" || (u.protocol === "http:" && ["localhost", "127.0.0.1", "[::1]"].includes(u.hostname)))
+        return null;
+    return "URL must use https (plain http only for localhost, 127.0.0.1 or ::1)";
+}
+/** The executor's actions, each callable for `run`. */
+export async function executorActions(url, run, { headers = {}, fetch = globalThis.fetch } = {}) {
+    const why = remoteUrlError(url);
+    if (why)
+        throw new Error(`${url.slice(0, 256)}: ${why}`); // the run token and the credential never go in clear
+    let base = url;
+    while (base.endsWith("/"))
+        base = base.slice(0, -1);
+    // the agent's credential for the executor never follows a redirect
+    const get = async (path, init = {}) => {
+        const r = await fetch(base + path, { ...init, redirect: "manual", headers: { ...headers, ...init.headers } });
+        const body = await r.json().catch(() => null);
+        if (!r.ok)
+            throw new ExecutorRefused(body?.error?.message ?? `tracekit executor: HTTP ${r.status}`);
+        return body;
+    };
+    const { actions } = await get("/v1/actions");
+    return actions.map((a) => ({
+        ...a,
+        call: (args, toolCallId) => get(`/v1/actions/${encodeURIComponent(a.name)}`, {
+            method: "POST",
+            headers: { "content-type": "application/json", "x-tracekit-run": `${run.runId}.${run.runToken}` },
+            body: JSON.stringify({ args, ...(toolCallId ? { tool_call_id: toolCallId } : {}) }),
+        }),
+    }));
+}
+/** An @openai/agents function tool; `build` is the SDK's `tool`. */
+export const openaiAgentsTool = (build, a) => Object.assign(build({
+    name: a.name, description: a.description, parameters: a.args, strict: false,
+    execute: async (input, _ctx, details) => JSON.stringify(await a.call(input, details?.toolCall?.callId)),
+}), { [EXECUTOR]: true });
+/** A Vercel AI SDK tool; `jsonSchema` is the `ai` package's. */
+export const vercelTool = (a, jsonSchema) => ({
+    [EXECUTOR]: true, description: a.description, inputSchema: jsonSchema(a.args),
+    execute: (input, opts) => a.call(input, opts?.toolCallId),
+});

package/dist/v2/jcs.d.ts

@@ -0,0 +1,5 @@
+export { canonicalize, strictParse, StrictJSONError } from "../verify/jcs.js";
+/** sha256(JCS(v)), as tracekit/format/canon.py `event_hash`. */
+export declare function digest(v: unknown): string;
+/** sha256(JCS({tool, args})): `args` is the model's raw arguments string (strictly parsed first) or a parsed value. */
+export declare function argsDigest(tool: string, args: unknown): string;

package/dist/v2/jcs.js

@@ -0,0 +1,12 @@
+/** Content digests of the native client; JCS and the strict parser are shared with the verifier (src/verify/jcs.ts). */
+import { createHash } from "node:crypto";
+import { canonicalize, strictParse } from "../verify/jcs.js";
+export { canonicalize, strictParse, StrictJSONError } from "../verify/jcs.js";
+/** sha256(JCS(v)), as tracekit/format/canon.py `event_hash`. */
+export function digest(v) {
+    return "sha256:" + createHash("sha256").update(canonicalize(v), "utf8").digest("hex");
+}
+/** sha256(JCS({tool, args})): `args` is the model's raw arguments string (strictly parsed first) or a parsed value. */
+export function argsDigest(tool, args) {
+    return digest({ tool, args: typeof args === "string" ? strictParse(args) : args });
+}

package/dist/v2/launcher.d.ts

@@ -0,0 +1,10 @@
+export declare const INSTALL_HINT: string;
+/** This platform's signer package suffix, as the optionalDependencies name them; null where none is built. */
+export declare function platformKey(): string | null;
+/** The command line that runs `tracekit`, or null when there is none. */
+export declare function signerCommand(env?: NodeJS.ProcessEnv): string[] | null;
+/**
+ * The environment to run `cmd` in: it adds cmd[0] to $TRACEKIT_LAUNCHER_TRIED, so when the `tracekit` found on PATH is
+ * this launcher again (npm's .bin link, a pnpm shim), that run looks past it instead of starting itself forever.
+ */
+export declare function signerEnv(cmd: string[], env?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;

package/dist/v2/launcher.js

@@ -0,0 +1,50 @@
+/**
+ * Where the `tracekit` command is: $TRACEKIT_PYTHON's `-m tracekit`, else a pip-installed `tracekit` on PATH, else the
+ * Python bundled in the installed @cygnuxlabs/tracekit-signer-<platform> package. Used by bin/tracekit.mjs and the v2
+ * client's dev auto-spawn.
+ */
+import { existsSync } from "node:fs";
+import { createRequire } from "node:module";
+import { delimiter, dirname, join } from "node:path";
+export const INSTALL_HINT = "no Tracekit signer found. Install one: `pip install 'tracekit-ai[signer]'` (puts `tracekit` " +
+    "on PATH), or reinstall @cygnuxlabs/tracekit without --omit=optional so npm adds the signer package for this platform";
+/** This platform's signer package suffix, as the optionalDependencies name them; null where none is built. */
+export function platformKey() {
+    let key = `${process.platform}-${process.arch}`;
+    if (process.platform === "linux") {
+        const header = process.report?.getReport()?.header;
+        if (!header?.glibcVersionRuntime)
+            return null; // musl: no bundle
+        key += "-gnu";
+    }
+    return ["darwin-arm64", "linux-x64-gnu", "linux-arm64-gnu", "win32-x64"].includes(key) ? key : null;
+}
+/** The command line that runs `tracekit`, or null when there is none. */
+export function signerCommand(env = process.env) {
+    if (env.TRACEKIT_PYTHON)
+        return [env.TRACEKIT_PYTHON, "-m", "tracekit"];
+    const tried = (env.TRACEKIT_LAUNCHER_TRIED ?? "").split(delimiter);
+    const exe = process.platform === "win32" ? "tracekit.exe" : "tracekit";
+    for (const dir of (env.PATH ?? "").split(delimiter)) {
+        const p = join(dir, exe);
+        if (dir && existsSync(p) && !tried.includes(p))
+            return [p];
+    }
+    const key = platformKey();
+    if (!key)
+        return null;
+    try {
+        const pkg = dirname(createRequire(import.meta.url).resolve(`@cygnuxlabs/tracekit-signer-${key}/package.json`));
+        return [join(pkg, process.platform === "win32" ? "python/python.exe" : "python/bin/python3"), "-m", "tracekit"];
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * The environment to run `cmd` in: it adds cmd[0] to $TRACEKIT_LAUNCHER_TRIED, so when the `tracekit` found on PATH is
+ * this launcher again (npm's .bin link, a pnpm shim), that run looks past it instead of starting itself forever.
+ */
+export function signerEnv(cmd, env = process.env) {
+    return { ...env, TRACEKIT_LAUNCHER_TRIED: [env.TRACEKIT_LAUNCHER_TRIED, cmd[0]].filter(Boolean).join(delimiter) };
+}

package/dist/v2/rpc_schema.d.ts

@@ -0,0 +1,3 @@
+import type { Schema } from "./validate.js";
+export declare const RPC_VERSION = 16;
+export declare const REQUESTS: Record<string, Schema>;

package/dist/v2/rpc_schema.js

@@ -0,0 +1,43 @@
+export const RPC_VERSION = 16;
+export const REQUESTS = {
+    "register_run": { "type": "object", "additionalProperties": false, "required": ["request_id", "agent"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "tenant": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "principal": { "type": "string", "maxLength": 256 }, "principal_token": { "type": "string", "maxLength": 16384 }, "source": { "const": "migrated" }, "analyzes": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "replay_of": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "investigation": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "parent": { "type": "object", "additionalProperties": false, "required": ["run_id", "run_token"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 } } }, "agent": { "type": "object", "additionalProperties": false, "required": ["name"], "properties": { "name": { "type": "string", "maxLength": 128, "minLength": 1 }, "version": { "type": "string", "maxLength": 64 } } } } },
+    "decide": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "stream", "client_seq", "tool_call_id", "tool", "args_source", "args"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "stream": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "client_seq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "tool_call_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "attempt": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "tool": { "type": "string", "maxLength": 256, "minLength": 1 }, "tool_class_hint": { "type": "string", "maxLength": 64 }, "args_source": { "enum": ["raw", "parsed", "coerced"] }, "args": {} }, "if": { "properties": { "args_source": { "const": "raw" } } }, "then": { "properties": { "args": { "type": "string", "maxLength": 1048576 } } } },
+    "complete": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "stream", "client_seq", "tool_call_id", "decision_id", "args_digest", "status"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "stream": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "client_seq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "tool_call_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "attempt": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "decision_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "args_digest": { "type": "string", "maxLength": 71, "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" }, "status": { "enum": ["ok", "error"] }, "result": {}, "error": { "type": "string", "maxLength": 4096 }, "redacted": { "const": true }, "redaction": { "type": "object", "additionalProperties": false, "required": [], "properties": { "rules": { "type": "array", "maxItems": 32, "items": { "type": "string", "maxLength": 64 } }, "count": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } } } } },
+    "observe": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "stream", "client_seq", "source", "trust", "value"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "stream": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "client_seq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "source": { "type": "string", "maxLength": 256, "minLength": 1 }, "trust": { "enum": ["trusted", "untrusted"] }, "value": {} } },
+    "state_write": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "stream", "client_seq", "key", "value_digest"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "stream": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "client_seq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "key": { "type": "string", "maxLength": 256, "minLength": 1 }, "value_digest": { "type": "string", "maxLength": 71, "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" }, "prev_digest": { "oneOf": [{ "type": "string", "maxLength": 71, "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" }, { "type": "null" }] } } },
+    "model_event": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "stream", "client_seq", "provider", "model", "phase"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "stream": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "client_seq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "provider": { "type": "string", "maxLength": 64 }, "model": { "type": "string", "maxLength": 128 }, "phase": { "enum": ["request", "response"] }, "content_digest": { "type": "string", "maxLength": 71, "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" }, "exchange_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "streamed": { "type": "boolean" }, "stop_reason": { "type": "string", "maxLength": 100 }, "error": { "type": "string", "maxLength": 1024 }, "usage": { "type": "object", "additionalProperties": false, "required": [], "properties": { "input_tokens": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "output_tokens": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "cache_read_tokens": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "cache_write_tokens": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "reasoning_tokens": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } } }, "tool_uses": { "type": "array", "maxItems": 128, "items": { "type": "object", "additionalProperties": false, "required": ["id", "name", "executed_by"], "properties": { "id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "name": { "type": "string", "maxLength": 256, "minLength": 1 }, "executed_by": { "enum": ["client", "provider"] }, "args_source": { "enum": ["raw", "parsed", "coerced"] }, "args_digest": { "type": "string", "maxLength": 71, "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" }, "args_unparseable": { "const": true }, "id_synthetic": { "const": true } }, "oneOf": [{ "additionalProperties": false, "properties": { "id": {}, "name": {}, "executed_by": { "const": "provider" }, "id_synthetic": {} } }, { "required": ["args_source", "args_digest"], "additionalProperties": false, "properties": { "id": {}, "name": {}, "executed_by": { "const": "provider" }, "id_synthetic": {}, "args_source": {}, "args_digest": {} } }, { "required": ["args_source", "args_digest"], "properties": { "executed_by": { "const": "client" } } }, { "required": ["args_source", "args_unparseable"], "properties": { "executed_by": { "const": "client" } } }] } }, "tool_results_sent": { "type": "array", "maxItems": 1024, "items": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "body": {} } },
+    "approval_request": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "tool_call_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "tool_call_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "attempt": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "approval_decide": { "type": "object", "additionalProperties": false, "required": ["request_id", "approval_id", "decision"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "approval_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "decision": { "enum": ["approve", "reject", "escalate"] }, "reason": { "type": "string", "maxLength": 1024 }, "on_behalf": { "type": "object", "additionalProperties": false, "required": ["subject", "person"], "properties": { "subject": { "type": "string", "maxLength": 256, "minLength": 1 }, "person": { "type": "string", "maxLength": 256, "minLength": 1 }, "groups": { "type": "array", "maxItems": 64, "items": { "type": "string", "maxLength": 256 } }, "tenant": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } } }, "passkey": { "type": "object", "additionalProperties": false, "required": ["credential_id", "client_data_json", "authenticator_data", "signature"], "properties": { "credential_id": { "type": "string", "maxLength": 4096, "minLength": 1, "pattern": "^[A-Za-z0-9_-]+(?![\\s\\S])" }, "client_data_json": { "type": "string", "maxLength": 4096, "minLength": 1, "pattern": "^[A-Za-z0-9_-]+(?![\\s\\S])" }, "authenticator_data": { "type": "string", "maxLength": 4096, "minLength": 1, "pattern": "^[A-Za-z0-9_-]+(?![\\s\\S])" }, "signature": { "type": "string", "maxLength": 4096, "minLength": 1, "pattern": "^[A-Za-z0-9_-]+(?![\\s\\S])" } } }, "asserted": { "type": "object", "additionalProperties": false, "required": [], "properties": { "model": { "type": "string", "maxLength": 128 }, "version": { "type": "string", "maxLength": 64 }, "prompt_hash": { "type": "string", "maxLength": 71, "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" } } } } },
+    "approval_decide_on_behalf": { "type": "object", "additionalProperties": false, "required": ["request_id", "approval_id", "decision", "approver"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "approval_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "decision": { "enum": ["approve", "reject"] }, "approver": { "type": "string", "maxLength": 64, "pattern": "^slack:[A-Z0-9]+/[A-Z0-9]+(?![\\s\\S])" }, "groups": { "type": "array", "maxItems": 32, "items": { "type": "string", "maxLength": 64, "pattern": "^slack:[A-Z0-9]+/[A-Z0-9]+(?![\\s\\S])" } } } },
+    "approval_wait": { "type": "object", "additionalProperties": false, "required": ["run_id", "run_token", "approval_id"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "approval_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "timeout_ms": { "type": "integer", "minimum": 0, "maximum": 300000 } } },
+    "approval_consume": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "tool_call_id", "tool", "args_source", "args"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "tool_call_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "attempt": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "tool": { "type": "string", "maxLength": 256, "minLength": 1 }, "args_source": { "enum": ["raw", "parsed", "coerced"] }, "args": {}, "approval_id_hint": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } }, "if": { "properties": { "args_source": { "const": "raw" } } }, "then": { "properties": { "args": { "type": "string", "maxLength": 1048576 } } } },
+    "approval_get": { "type": "object", "additionalProperties": false, "required": ["approval_id"], "properties": { "approval_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "on_behalf": { "type": "object", "additionalProperties": false, "required": ["subject", "person"], "properties": { "subject": { "type": "string", "maxLength": 256, "minLength": 1 }, "person": { "type": "string", "maxLength": 256, "minLength": 1 }, "groups": { "type": "array", "maxItems": 64, "items": { "type": "string", "maxLength": 256 } }, "tenant": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } } } } },
+    "approval_list": { "type": "object", "additionalProperties": false, "required": [], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "cursor": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "limit": { "type": "integer", "minimum": 1, "maximum": 1000 }, "on_behalf": { "type": "object", "additionalProperties": false, "required": ["subject", "person"], "properties": { "subject": { "type": "string", "maxLength": 256, "minLength": 1 }, "person": { "type": "string", "maxLength": 256, "minLength": 1 }, "groups": { "type": "array", "maxItems": 64, "items": { "type": "string", "maxLength": 256 } }, "tenant": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } } }, "state": { "enum": ["requested", "approved", "rejected", "expired", "consumed"] }, "escalated": { "type": "boolean" }, "for": { "enum": ["agent", "person"] } } },
+    "approval_review": { "type": "object", "additionalProperties": false, "required": ["approval_id"], "properties": { "approval_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } } },
+    "approval_revoke": { "type": "object", "additionalProperties": false, "required": ["request_id", "approval_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "approval_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 }, "on_behalf": { "type": "object", "additionalProperties": false, "required": ["subject", "person"], "properties": { "subject": { "type": "string", "maxLength": 256, "minLength": 1 }, "person": { "type": "string", "maxLength": 256, "minLength": 1 }, "groups": { "type": "array", "maxItems": 64, "items": { "type": "string", "maxLength": 256 } }, "tenant": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } } } } },
+    "approval_agents": { "type": "object", "additionalProperties": false, "required": ["request_id", "enabled"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "enabled": { "type": "boolean" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "approval_abandon": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "approval_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "approval_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "close_run": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "reason": { "type": "string", "maxLength": 256 }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "last_client_seq": { "type": "array", "maxItems": 64, "items": { "type": "object", "additionalProperties": false, "required": ["stream", "client_seq"], "properties": { "stream": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "client_seq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } } } } } },
+    "delegate_run": { "type": "object", "additionalProperties": false, "required": ["run_id", "run_token", "identity"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "identity": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" } } },
+    "tailer_lost": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "reason", "offset"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "reason": { "type": "string", "maxLength": 1024 }, "offset": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } } },
+    "tailer_heartbeat": { "type": "object", "additionalProperties": false, "required": ["run_id", "run_token"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 } } },
+    "observe_effect": { "type": "object", "additionalProperties": false, "required": ["request_id", "instance", "effects"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "instance": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "effects": { "type": "array", "maxItems": 256, "items": { "type": "object", "additionalProperties": false, "required": ["kind", "host", "port", "bytes_out", "bytes_in", "connections", "first_ts", "last_ts"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "kind": { "const": "net" }, "host": { "type": "string", "maxLength": 253, "minLength": 1, "pattern": "^[a-z0-9._:-]+(?![\\s\\S])" }, "port": { "type": "integer", "minimum": 1, "maximum": 65535 }, "bytes_out": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "bytes_in": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "connections": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "first_ts": { "type": "string", "maxLength": 27, "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{6}Z(?![\\s\\S])" }, "last_ts": { "type": "string", "maxLength": 27, "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{6}Z(?![\\s\\S])" } } } }, "check": { "type": "object", "additionalProperties": false, "required": ["run_id", "run_token"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 } } } } },
+    "status": { "type": "object", "additionalProperties": false, "required": [], "properties": {} },
+    "read": { "type": "object", "additionalProperties": false, "required": ["run_id", "run_token"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "from_seq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "limit": { "type": "integer", "minimum": 1, "maximum": 1000 } } },
+    "checkpoint_nudge": { "type": "object", "additionalProperties": false, "required": [], "properties": {} },
+    "decision_import": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "system", "decision", "tool_call_id", "tool", "record"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "system": { "type": "string", "maxLength": 64, "minLength": 1 }, "decision": { "enum": ["allow", "deny", "ask"] }, "tool_call_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "tool": { "type": "string", "maxLength": 256, "minLength": 1 }, "rule_ids": { "type": "array", "maxItems": 32, "items": { "type": "string", "maxLength": 64 } }, "reason": { "type": "string", "maxLength": 1024 }, "record": { "type": "string", "maxLength": 65536, "minLength": 1 }, "signature": { "type": "string", "maxLength": 128 } } },
+    "passkey_register": { "type": "object", "additionalProperties": false, "required": ["on_behalf", "credential_id", "public_key"], "properties": { "on_behalf": { "type": "object", "additionalProperties": false, "required": ["subject", "person"], "properties": { "subject": { "type": "string", "maxLength": 256, "minLength": 1 }, "person": { "type": "string", "maxLength": 256, "minLength": 1 }, "groups": { "type": "array", "maxItems": 64, "items": { "type": "string", "maxLength": 256 } }, "tenant": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } } }, "credential_id": { "type": "string", "maxLength": 4096, "minLength": 1, "pattern": "^[A-Za-z0-9_-]+(?![\\s\\S])" }, "public_key": { "type": "string", "maxLength": 4096, "minLength": 1, "pattern": "^[A-Za-z0-9_-]+(?![\\s\\S])" } } },
+    "content_get": { "type": "object", "additionalProperties": false, "required": ["run_id", "seqs", "purpose"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "seqs": { "type": "array", "maxItems": 1000, "items": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } }, "purpose": { "type": "string", "maxLength": 512, "minLength": 1 } } },
+    "content_erase": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "why_finding": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "finding"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "finding": { "type": "object", "additionalProperties": false, "required": ["target", "intervention", "n", "p_with", "p_without", "effect", "interval", "verdict", "replay_runs", "models", "rung", "off_tape", "investigation", "looks", "family", "min_effect", "applied", "stopped"], "properties": { "target": { "type": "string", "maxLength": 1024 }, "intervention": { "type": "string", "maxLength": 1024 }, "n": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "p_with": { "type": "number", "minimum": 0, "maximum": 1 }, "p_without": { "type": "number", "minimum": 0, "maximum": 1 }, "effect": { "type": "number", "minimum": -1, "maximum": 1 }, "interval": { "type": "array", "minItems": 2, "maxItems": 2, "items": { "type": "number", "minimum": -1, "maximum": 1 } }, "verdict": { "enum": ["causal", "suppressive", "ruled-out", "inconclusive", "not-applied"] }, "replay_runs": { "type": "array", "maxItems": 4096, "items": { "type": "object", "additionalProperties": false, "required": ["run_id", "arm", "hit"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "arm": { "enum": ["control", "ablated"] }, "hit": { "type": "boolean" } } } }, "models": { "type": "array", "maxItems": 32, "items": { "type": "string", "maxLength": 128 } }, "rung": { "enum": [1, 2] }, "off_tape": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "investigation": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "looks": { "type": "integer", "minimum": 1, "maximum": 4096 }, "family": { "type": "integer", "minimum": 1, "maximum": 4096 }, "min_effect": { "type": "number", "minimum": 0, "maximum": 1 }, "applied": { "type": "boolean" }, "stopped": { "enum": ["decisive", "futility", "n_max", "budget"] }, "uncounted": { "type": "array", "maxItems": 4096, "items": { "type": "object", "additionalProperties": false, "required": ["run_id", "reason"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "enum": ["ranking", "budget"] } } } } } } } },
+    "incident_list": { "type": "object", "additionalProperties": false, "required": [], "properties": { "state": { "enum": ["open", "resolved"] }, "cursor": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "limit": { "type": "integer", "minimum": 1, "maximum": 1000 } } },
+    "incident_show": { "type": "object", "additionalProperties": false, "required": ["incident_id"], "properties": { "incident_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } } },
+    "incident_resolve": { "type": "object", "additionalProperties": false, "required": ["request_id", "incident_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "incident_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "run_hold": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "run_quarantine": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "run_resume": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "response_pause": { "type": "object", "additionalProperties": false, "required": ["request_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "response_resume": { "type": "object", "additionalProperties": false, "required": ["request_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "suspend": { "type": "object", "additionalProperties": false, "required": ["request_id", "identity"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "identity": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "unsuspend": { "type": "object", "additionalProperties": false, "required": ["request_id", "identity"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "identity": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+};

package/dist/v2/validate.d.ts

@@ -0,0 +1,6 @@
+/** The JSON Schema subset of tracekit/schema.py `_check`, as rpc_schema.validate uses it (patterns searched, not anchored). */
+export type Schema = {
+    [keyword: string]: any;
+};
+/** Error strings for `v` against `s` (empty when valid); throws on a keyword it doesn't implement, like `_check`. */
+export declare function validate(s: Schema, v: any, path?: string, errs?: string[]): string[];

package/dist/v2/validate.js

@@ -0,0 +1,70 @@
+const TYPES = {
+    object: (v) => typeof v === "object" && v !== null && !Array.isArray(v),
+    array: Array.isArray,
+    string: (v) => typeof v === "string",
+    integer: Number.isInteger,
+    number: (v) => typeof v === "number",
+    boolean: (v) => typeof v === "boolean",
+    null: (v) => v === null,
+};
+const KEYWORDS = new Set(["type", "const", "enum", "pattern", "minLength", "maxLength", "minimum", "maximum", "minItems", "maxItems",
+    "items", "required", "properties", "additionalProperties", "oneOf", "if", "then"]);
+/** Error strings for `v` against `s` (empty when valid); throws on a keyword it doesn't implement, like `_check`. */
+export function validate(s, v, path = "$", errs = []) {
+    const unknown = Object.keys(s).filter((k) => !KEYWORDS.has(k));
+    if (unknown.length)
+        throw new Error(`unsupported schema keywords at ${path}: ${unknown.join(", ")}`);
+    if ("type" in s) {
+        const ts = Array.isArray(s.type) ? s.type : [s.type];
+        if (!ts.some((t) => TYPES[t](v))) {
+            errs.push(`${path}: expected ${ts.join("/")}`);
+            return errs;
+        }
+    }
+    if ("const" in s && v !== s.const)
+        errs.push(`${path}: must be ${JSON.stringify(s.const)}`);
+    if ("enum" in s && !s.enum.includes(v))
+        errs.push(`${path}: ${JSON.stringify(v)} not in ${JSON.stringify(s.enum)}`);
+    if (typeof v === "string") {
+        if ("pattern" in s && !new RegExp(s.pattern).test(v))
+            errs.push(`${path}: does not match ${s.pattern}`);
+        const n = [...v].length; // code points, like Python's len
+        if ("minLength" in s && n < s.minLength)
+            errs.push(`${path}: shorter than ${s.minLength}`);
+        if ("maxLength" in s && n > s.maxLength)
+            errs.push(`${path}: longer than ${s.maxLength}`);
+    }
+    if (typeof v === "number" && "minimum" in s && v < s.minimum)
+        errs.push(`${path}: below ${s.minimum}`);
+    if (typeof v === "number" && "maximum" in s && v > s.maximum)
+        errs.push(`${path}: above ${s.maximum}`);
+    if (Array.isArray(v)) {
+        if ("maxItems" in s && v.length > s.maxItems)
+            errs.push(`${path}: more than ${s.maxItems} items`);
+        if ("minItems" in s && v.length < s.minItems)
+            errs.push(`${path}: fewer than ${s.minItems} items`);
+        if ("items" in s)
+            v.forEach((it, i) => validate(s.items, it, `${path}[${i}]`, errs));
+    }
+    if (TYPES.object(v)) {
+        for (const k of s.required ?? [])
+            if (!Object.hasOwn(v, k))
+                errs.push(`${path}: missing required '${k}'`);
+        for (const [k, val] of Object.entries(v)) {
+            if (s.properties && Object.hasOwn(s.properties, k))
+                validate(s.properties[k], val, `${path}.${k}`, errs);
+            else if (s.additionalProperties === false)
+                errs.push(`${path}: unexpected field '${k}'`);
+            else if (typeof s.additionalProperties === "object")
+                validate(s.additionalProperties, val, `${path}.${k}`, errs);
+        }
+    }
+    if ("oneOf" in s) {
+        const matched = s.oneOf.filter((sub) => !validate(sub, v, path).length).length;
+        if (matched !== 1)
+            errs.push(`${path}: must match exactly one alternative (matched ${matched})`);
+    }
+    if ("if" in s && !validate(s.if, v, path).length && "then" in s)
+        validate(s.then, v, path, errs);
+    return errs;
+}

package/dist/verify/cli.d.ts

@@ -0,0 +1 @@
+export declare function main(argv: string[]): Promise<number>;

package/dist/verify/cli.js

@@ -0,0 +1,46 @@
+/**
+ * `npx @cygnuxlabs/tracekit verify BUNDLE --trust trust.json [--json] [--strict]`: the TypeScript verifier, with the reference
+ * CLI's report and exit codes (0 verified, 1 failed, 2 unusable or unverifiable, 3 a warning under --strict).
+ */
+import { readFile } from "node:fs/promises";
+import { EXIT_BAD, EXIT_OK, EXIT_WARN, formatReport, verify } from "./index.js";
+const USAGE = "usage: tracekit verify BUNDLE --trust TRUST.json [--json] [--strict]";
+export async function main(argv) {
+    let bundle, trust, json = false, strict = false;
+    for (let i = 0; i < argv.length; i++) {
+        const a = argv[i];
+        if (a === "--trust" && i + 1 < argv.length)
+            trust = argv[++i];
+        else if (a === "--json")
+            json = true;
+        else if (a === "--strict")
+            strict = true;
+        else if (!a.startsWith("-") && bundle === undefined)
+            bundle = a;
+        else {
+            console.error(`tracekit verify: ${a} is not supported by the TypeScript verifier (the format bridge, monitor reports `
+                + `and revocations need the reference verifier: pip install tracekit)\n${USAGE}`);
+            return EXIT_BAD;
+        }
+    }
+    if (!bundle || !trust) {
+        console.error(USAGE);
+        return EXIT_BAD;
+    }
+    let data;
+    try {
+        data = [await readFile(bundle), await readFile(trust)];
+    }
+    catch (e) {
+        console.error(`tracekit verify: ${e.message}`);
+        return EXIT_BAD;
+    }
+    const { report, code: verdict } = await verify(...data);
+    const code = verdict === EXIT_OK && strict && report.warnings.length ? EXIT_WARN : verdict;
+    if (json)
+        console.log(JSON.stringify({ exit_code: code, checks: report.checks, failures: report.failures,
+            warnings: report.warnings, integrity: report.integrity, assurance: report.assurance, notes: report.notes }, null, 2));
+    else
+        process.stdout.write(formatReport(report));
+    return code;
+}

package/dist/verify/detect.d.ts

@@ -0,0 +1,41 @@
+/**
+ * tracekit/signer/detect.py's Detector, without the decision's `detect` view: which incidents a run's records fire,
+ * for the verifier's `incidents` check. A port kept in step with the reference by tests/test_ts_verifier.py.
+ */
+type J = any;
+type Fired = [string, string[], string, {
+    kind: string;
+    id: string;
+}, [string, number][]];
+export declare class Detector {
+    label: Map<string, string>;
+    untrusted: Set<string>;
+    deny: Set<string>;
+    sequences: J[];
+    limits: J[];
+    respond: Map<string, any>;
+    every: Map<string, number>;
+    idle: number;
+    tools: Record<string, string>;
+    constructor(policy: J);
+    toolClass(tool: string): string;
+    names(ids: string[]): Set<string>;
+    on(trigger: string): boolean;
+    static state(): {
+        runs: Map<string, any>;
+        scopes: Map<string, any>;
+        minute: Map<string, number[]>;
+    };
+    scope(det: J, e: J, run: J, kind: string): [string, {
+        kind: string;
+        id: string;
+    }, J];
+    /** The incident records (type, data without ids) record `e` fires, after indexing it into `det`. */
+    observe(det: J, e: J): [string, J][];
+    /** As detect.py's _count: `unless` exempts only a call the policy's own reading names, never one a hint added. */
+    count(det: J, e: J, run: J, names: Set<string>, unknown: boolean, sums: J, hinted: boolean, cite: [string, number], fired: Fired[]): void;
+    denied(det: J, e: J, run: J, t: number, cite: [string, number], fired: Fired[]): void;
+    incidents(det: J, e: J, run: J, t: number, fired: Fired[]): [string, J][];
+    countIncident(det: J, e: J, run: J, t: number): void;
+}
+export {};