@cygnuxlabs/tracekit 1.4.1 → 1.5.0

package/dist/v2/rpc_schema.d.ts

@@ -1,3 +1,3 @@
 import type { Schema } from "./validate.js";
-export declare const RPC_VERSION = 19;
+export declare const RPC_VERSION = 20;
 export declare const REQUESTS: Record<string, Schema>;

package/dist/v2/rpc_schema.js

@@ -1,4 +1,4 @@
-export const RPC_VERSION = 19;
+export const RPC_VERSION = 20;
 export const REQUESTS = {
     "register_run": { "type": "object", "additionalProperties": false, "required": ["request_id", "agent"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "tenant": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "principal": { "type": "string", "maxLength": 256 }, "principal_token": { "type": "string", "maxLength": 16384 }, "source": { "const": "migrated" }, "analyzes": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "replay_of": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "investigation": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "parent": { "type": "object", "additionalProperties": false, "required": ["run_id", "run_token"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 } } }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "agent": { "type": "object", "additionalProperties": false, "required": ["name"], "properties": { "name": { "type": "string", "maxLength": 128, "minLength": 1 }, "version": { "type": "string", "maxLength": 64 } } } } },
     "decide": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "stream", "client_seq", "tool_call_id", "tool", "args_source", "args"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "stream": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "client_seq": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "caller": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "tool_call_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "attempt": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "tool": { "type": "string", "maxLength": 256, "minLength": 1 }, "tool_class_hint": { "type": "string", "maxLength": 64 }, "args_source": { "enum": ["raw", "parsed", "coerced"] }, "args": {} }, "if": { "properties": { "args_source": { "const": "raw" } } }, "then": { "properties": { "args": { "type": "string", "maxLength": 1048576 } } } },
@@ -42,4 +42,8 @@ export const REQUESTS = {
     "response_resume": { "type": "object", "additionalProperties": false, "required": ["request_id"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
     "suspend": { "type": "object", "additionalProperties": false, "required": ["request_id", "identity"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "identity": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
     "unsuspend": { "type": "object", "additionalProperties": false, "required": ["request_id", "identity"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "identity": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "reason": { "type": "string", "maxLength": 1024 } } },
+    "pcm_sign": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "message"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "message": { "type": "object", "additionalProperties": false, "required": ["from", "to", "intent"], "properties": { "to": { "type": "object", "additionalProperties": false, "required": ["agent"], "properties": { "agent": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" } } }, "intent": { "type": "object", "additionalProperties": false, "required": ["type", "args"], "properties": { "type": { "type": "string", "maxLength": 136, "pattern": "^[a-z][a-z0-9_.-]{0,63}@sha256:[0-9a-f]{64}(?![\\s\\S])" }, "args": {} } }, "claims": { "type": "array", "maxItems": 8, "items": { "type": "object", "additionalProperties": false, "required": ["type", "args"], "properties": { "type": { "enum": ["tests_passed", "approved_by", "reached_host", "file_written"] }, "args": {}, "evidence": { "type": "object", "additionalProperties": false, "required": ["checkpoint", "records"], "properties": { "checkpoint": { "type": "string", "maxLength": 16384, "minLength": 1 }, "records": { "type": "array", "minItems": 1, "maxItems": 16, "items": { "type": "object", "additionalProperties": false, "required": ["event", "hash", "proof"], "properties": { "event": {}, "hash": { "type": "string", "maxLength": 71, "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" }, "proof": { "type": "array", "maxItems": 64, "items": { "type": "string", "maxLength": 44 } }, "salt": { "type": "string", "maxLength": 64, "pattern": "^[0-9a-f]{64}(?![\\s\\S])" }, "args": {} } } } } } } } }, "grants": { "type": "array", "maxItems": 8, "items": { "type": "object", "additionalProperties": false, "required": ["pcm_grant", "ts", "issuer", "subject", "intent", "caveats", "expires_at", "delegable", "parent", "sig"], "properties": { "pcm_grant": { "type": "integer", "const": 0 }, "ts": { "type": "string", "maxLength": 27, "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{6}Z(?![\\s\\S])" }, "issuer": { "type": "object", "additionalProperties": false, "required": ["kind", "id", "run", "tenant"], "properties": { "kind": { "enum": ["person", "agent"] }, "id": { "type": "string", "maxLength": 256 }, "person": { "type": "string", "maxLength": 256 }, "run": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "tenant": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "approval_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } } }, "subject": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "intent": { "type": "string", "maxLength": 136, "pattern": "^[a-z][a-z0-9_.-]{0,63}@sha256:[0-9a-f]{64}(?![\\s\\S])" }, "caveats": { "type": "array", "maxItems": 16, "items": { "type": "object", "additionalProperties": false, "required": ["field", "op", "value"], "properties": { "field": { "type": "string", "maxLength": 64, "pattern": "^[a-z][a-z0-9_]*(?![\\s\\S])" }, "op": { "enum": ["==", "<=", ">=", "<", ">", "in"] }, "value": {} } } }, "expires_at": { "type": "string", "maxLength": 27, "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{6}Z(?![\\s\\S])" }, "delegable": { "type": "boolean" }, "parent": { "oneOf": [{ "type": "string", "maxLength": 71, "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" }, { "type": "null" }] }, "sig": { "type": "object", "additionalProperties": false, "required": ["key", "sig"], "properties": { "key": { "type": "string", "maxLength": 300, "minLength": 1 }, "sig": { "type": "string", "maxLength": 88 } } } } } }, "payload": { "oneOf": [{ "type": "object", "additionalProperties": false, "required": ["kind", "text"], "properties": { "kind": { "const": "text" }, "text": { "type": "string", "maxLength": 65536 } } }, { "type": "object", "additionalProperties": false, "required": ["kind", "data"], "properties": { "kind": { "const": "data" }, "data": {} } }] }, "from": { "type": "object", "additionalProperties": false, "required": ["agent", "run", "tenant"], "properties": { "agent": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "run": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "tenant": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } } } } } } },
+    "pcm_grant": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "tool_call_id", "args"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "tool_call_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "attempt": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 }, "args": { "type": "object", "additionalProperties": false, "required": ["subject", "intent", "expires_at", "delegable"], "properties": { "subject": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "intent": { "type": "string", "maxLength": 136, "pattern": "^[a-z][a-z0-9_.-]{0,63}@sha256:[0-9a-f]{64}(?![\\s\\S])" }, "caveats": { "type": "array", "maxItems": 16, "items": { "type": "object", "additionalProperties": false, "required": ["field", "op", "value"], "properties": { "field": { "type": "string", "maxLength": 64, "pattern": "^[a-z][a-z0-9_]*(?![\\s\\S])" }, "op": { "enum": ["==", "<=", ">=", "<", ">", "in"] }, "value": {} } } }, "expires_at": { "type": "string", "maxLength": 27, "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{6}Z(?![\\s\\S])" }, "delegable": { "type": "boolean" } } } } },
+    "pcm_delegate": { "type": "object", "additionalProperties": false, "required": ["request_id", "run_id", "run_token", "parent", "subject", "expires_at", "delegable"], "properties": { "request_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "parent": { "type": "object", "additionalProperties": false, "required": ["pcm_grant", "ts", "issuer", "subject", "intent", "caveats", "expires_at", "delegable", "parent", "sig"], "properties": { "pcm_grant": { "type": "integer", "const": 0 }, "ts": { "type": "string", "maxLength": 27, "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{6}Z(?![\\s\\S])" }, "issuer": { "type": "object", "additionalProperties": false, "required": ["kind", "id", "run", "tenant"], "properties": { "kind": { "enum": ["person", "agent"] }, "id": { "type": "string", "maxLength": 256 }, "person": { "type": "string", "maxLength": 256 }, "run": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "tenant": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "approval_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" } } }, "subject": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "intent": { "type": "string", "maxLength": 136, "pattern": "^[a-z][a-z0-9_.-]{0,63}@sha256:[0-9a-f]{64}(?![\\s\\S])" }, "caveats": { "type": "array", "maxItems": 16, "items": { "type": "object", "additionalProperties": false, "required": ["field", "op", "value"], "properties": { "field": { "type": "string", "maxLength": 64, "pattern": "^[a-z][a-z0-9_]*(?![\\s\\S])" }, "op": { "enum": ["==", "<=", ">=", "<", ">", "in"] }, "value": {} } } }, "expires_at": { "type": "string", "maxLength": 27, "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{6}Z(?![\\s\\S])" }, "delegable": { "type": "boolean" }, "parent": { "oneOf": [{ "type": "string", "maxLength": 71, "pattern": "^sha256:[0-9a-f]{64}(?![\\s\\S])" }, { "type": "null" }] }, "sig": { "type": "object", "additionalProperties": false, "required": ["key", "sig"], "properties": { "key": { "type": "string", "maxLength": 300, "minLength": 1 }, "sig": { "type": "string", "maxLength": 88 } } } } }, "subject": { "type": "string", "maxLength": 256, "pattern": "^[a-z0-9_]+:.+(?![\\s\\S])" }, "caveats": { "type": "array", "maxItems": 16, "items": { "type": "object", "additionalProperties": false, "required": ["field", "op", "value"], "properties": { "field": { "type": "string", "maxLength": 64, "pattern": "^[a-z][a-z0-9_]*(?![\\s\\S])" }, "op": { "enum": ["==", "<=", ">=", "<", ">", "in"] }, "value": {} } } }, "expires_at": { "type": "string", "maxLength": 27, "pattern": "^\\d{4}-\\d{2}-\\d{2}T\\d{2}:\\d{2}:\\d{2}\\.\\d{6}Z(?![\\s\\S])" }, "delegable": { "type": "boolean" } } },
+    "pcm_evidence": { "type": "object", "additionalProperties": false, "required": ["run_id", "run_token", "run_seqs"], "properties": { "run_id": { "type": "string", "maxLength": 128, "minLength": 1, "pattern": "^[A-Za-z0-9._:-]+(?![\\s\\S])" }, "run_token": { "type": "string", "maxLength": 1024, "minLength": 1 }, "run_seqs": { "type": "array", "minItems": 1, "maxItems": 16, "items": { "type": "integer", "minimum": 0, "maximum": 9007199254740991 } } } },
 };

package/dist/verify/index.d.ts

@@ -1,7 +1,7 @@
 export { MAX_ENTRIES, MAX_ENTRY, MAX_TOTAL, Unusable, readZip } from "./zip.js";
 export { StrictJSONError, canonicalize, strictParse, strictParseBytes } from "./jcs.js";
 /** The bundle format version this verifier implements: a bundle needing a later one is UNVERIFIABLE. */
-export declare const VERSION = "1.4.1";
+export declare const VERSION = "1.5.0";
 export declare const EXIT_OK = 0, EXIT_FAIL = 1, EXIT_BAD = 2, EXIT_WARN = 3;
 export type Check = {
     check: string;

package/dist/verify/index.js

@@ -25,7 +25,7 @@ import { MAX_ENTRY, Unusable, readZip } from "./zip.js";
 export { MAX_ENTRIES, MAX_ENTRY, MAX_TOTAL, Unusable, readZip } from "./zip.js";
 export { StrictJSONError, canonicalize, strictParse, strictParseBytes } from "./jcs.js";
 /** The bundle format version this verifier implements: a bundle needing a later one is UNVERIFIABLE. */
-export const VERSION = "1.4.1";
+export const VERSION = "1.5.0";
 /** The browser verifier of the latest release (docs/RELEASING.md). */
 const PAGE = "https://cygnux-labs.github.io/Tracekit/verify/";
 export const EXIT_OK = 0, EXIT_FAIL = 1, EXIT_BAD = 2, EXIT_WARN = 3;

package/dist/verify.html

@@ -3,7 +3,7 @@
 <head>
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
-<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'sha256-pRfyVCb1BGcA2IqTivZH4aPvN/utDHN3END16k0qCkg='; style-src 'sha256-hGOb6corVyDqUYHluhAwCLbaaMKqsxeEGQkVPYNw5lA='; worker-src blob:; connect-src 'none'">
+<meta http-equiv="Content-Security-Policy" content="default-src 'none'; script-src 'sha256-ewj7iTgJ08EgcgBkS8JtnA/aFjmA75WObFgJm10+jUc='; style-src 'sha256-hGOb6corVyDqUYHluhAwCLbaaMKqsxeEGQkVPYNw5lA='; worker-src blob:; connect-src 'none'">
 <title>tracekit verify</title>
 <style>
 main { overflow-wrap: anywhere; }
@@ -1086,7 +1086,7 @@ const { MAX_ENTRY: MAX_ENTRY, Unusable: Unusable, readZip: readZip } = __zip;
 
 
 /** The bundle format version this verifier implements: a bundle needing a later one is UNVERIFIABLE. */
-const VERSION = "1.4.1";
+const VERSION = "1.5.0";
 /** The browser verifier of the latest release (docs/RELEASING.md). */
 const PAGE = "https://cygnux-labs.github.io/Tracekit/verify/";
 const EXIT_OK = 0, EXIT_FAIL = 1, EXIT_BAD = 2, EXIT_WARN = 3;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cygnuxlabs/tracekit",
-  "version": "1.4.1",
+  "version": "1.5.0",
   "description": "Tracekit for TypeScript/JavaScript agents: a native client of the Tracekit signer: policy-gated tool calls and signed evidence, no runtime dependencies.",
   "keywords": ["ai-agents", "agent-security", "audit-log", "tamper-evident", "guardrails", "mcp", "openai-agents",
     "vercel-ai", "claude-agent-sdk", "observability", "provenance", "llm"],
@@ -27,10 +27,10 @@
     "test": "npm run build && node --test test/*.test.mjs"
   },
   "optionalDependencies": {
-    "@cygnuxlabs/tracekit-signer-darwin-arm64": "1.4.1",
-    "@cygnuxlabs/tracekit-signer-linux-x64-gnu": "1.4.1",
-    "@cygnuxlabs/tracekit-signer-linux-arm64-gnu": "1.4.1",
-    "@cygnuxlabs/tracekit-signer-win32-x64": "1.4.1"
+    "@cygnuxlabs/tracekit-signer-darwin-arm64": "1.5.0",
+    "@cygnuxlabs/tracekit-signer-linux-x64-gnu": "1.5.0",
+    "@cygnuxlabs/tracekit-signer-linux-arm64-gnu": "1.5.0",
+    "@cygnuxlabs/tracekit-signer-win32-x64": "1.5.0"
   },
   "peerDependencies": { "@openai/agents": ">=0.20.0", "ai": ">=7.0.0", "@anthropic-ai/claude-agent-sdk": ">=0.3.0" },
   "peerDependenciesMeta": {