@dharma-ai-labs/agent-fabric 0.2.185 → 0.2.186

package/dist/namedSessionBudget.d.ts

@@ -16,6 +16,12 @@ export declare class NamedSessionBudget {
         receiptHash: import("node:sqlite").SQLOutputValue | undefined;
         updatedAt: import("node:sqlite").SQLOutputValue | undefined;
     } | null;
+    getWork(workId: string): {
+        workId: string;
+        state: string;
+        receiptHash: string;
+        updatedAt: string;
+    } | null;
     close(): void;
 }
 //# sourceMappingURL=namedSessionBudget.d.ts.map

package/dist/namedSessionBudget.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"namedSessionBudget.d.ts","sourceRoot":"","sources":["../src/namedSessionBudget.ts"],"names":[],"mappings":"AAGA,qBAAa,kBAAkB;;gBAEjB,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;IAgB7D,MAAM;;;;;IAKN,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAWxC,sBAAsB;IAItB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;IAQhD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM;IAIhF,QAAQ;;;;;;IAIR,KAAK;CACN"}
+{"version":3,"file":"namedSessionBudget.d.ts","sourceRoot":"","sources":["../src/namedSessionBudget.ts"],"names":[],"mappings":"AAGA,qBAAa,kBAAkB;;gBAEjB,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;IAgB7D,MAAM;;;;;IAKN,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;IAWxC,sBAAsB;IAItB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;IAQhD,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,QAAQ,EAAE,WAAW,EAAE,MAAM;IAIhF,QAAQ;;;;;;IAIR,OAAO,CAAC,MAAM,EAAE,MAAM;;;;;;IAMtB,KAAK;CACN"}

package/dist/namedSessionBudget.js

@@ -65,6 +65,13 @@ export class NamedSessionBudget {
         const result = this.#db.prepare('select request_id, state, payload_hash, updated_at from work_receipts order by rowid desc limit 1').get();
         return result ? { workId: result.request_id, state: result.state, receiptHash: result.payload_hash, updatedAt: result.updated_at } : null;
     }
+    getWork(workId) {
+        if (!/^[A-Za-z0-9_-]{1,128}$(?![\s\S])/.test(workId))
+            throw new Error('named_session_work_invalid');
+        const row = this.#db.prepare('select request_id, state, payload_hash, updated_at from work_receipts where request_id=?').get(workId);
+        return row ? { workId: String(row.request_id), state: String(row.state), receiptHash: String(row.payload_hash),
+            updatedAt: String(row.updated_at) } : null;
+    }
     close() { this.#db.close(); }
 }
 //# sourceMappingURL=namedSessionBudget.js.map

package/dist/namedSessionBudget.js.map

@@ -1 +1 @@
-{"version":3,"file":"namedSessionBudget.js","sourceRoot":"","sources":["../src/namedSessionBudget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,mFAAmF;AACnF,MAAM,OAAO,kBAAkB;IAC7B,GAAG,CAAe;IAClB,YAAY,IAAY,EAAE,KAAa,EAAE,YAAoB;QAC3D,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,KAAK,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;;+DAI6C,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,+EAA+E,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC3H,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;YAC7F,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,MAAM;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAAG,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,EAAG,CAAC;QAClG,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3G,CAAC;IACD,OAAO,CAAC,SAAiB,EAAE,KAAa;QACtC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;mBACjF,IAAI,CAAC,aAAa,GAAG,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YAC/F,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9G,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IAC7D,CAAC;IACD,sBAAsB;QACpB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,oFAAoF,CAAC;aACnG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,SAAS,CAAC,SAAiB,EAAE,WAAmB;QAC9C,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC7F,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,yDAAyD,CAAC;aACxE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,UAAU,CAAC,SAAiB,EAAE,KAA6B,EAAE,WAAmB;QAC9E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,mFAAmF,CAAC;aAClG,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;IAClE,CAAC;IACD,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,mGAAmG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC3I,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5I,CAAC;IACD,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CAC9B"}
+{"version":3,"file":"namedSessionBudget.js","sourceRoot":"","sources":["../src/namedSessionBudget.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,mFAAmF;AACnF,MAAM,OAAO,kBAAkB;IAC7B,GAAG,CAAe;IAClB,YAAY,IAAY,EAAE,KAAa,EAAE,YAAoB;QAC3D,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,GAAG,CAAC,IAAI,YAAY,GAAG,KAAK,EAAE,CAAC;YAC9F,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAClD,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;;;;+DAI6C,CAAC,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,+EAA+E,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC3H,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,yCAAyC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;YAC7F,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,MAAM;QACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kCAAkC,CAAC,CAAC,GAAG,EAAG,CAAC;QACxE,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,2DAA2D,CAAC,CAAC,GAAG,EAAG,CAAC;QAClG,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3G,CAAC;IACD,OAAO,CAAC,SAAiB,EAAE,KAAa;QACtC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACzG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACjC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAC3B,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,iDAAiD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;mBACjF,IAAI,CAAC,aAAa,GAAG,KAAK,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC;gBAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;YAC/F,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,2CAA2C,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;YAC9G,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAC,OAAO,IAAI,CAAC;QACvC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;IAC7D,CAAC;IACD,sBAAsB;QACpB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,oFAAoF,CAAC;aACnG,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IACnC,CAAC;IACD,SAAS,CAAC,SAAiB,EAAE,WAAmB;QAC9C,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC7F,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gDAAgD,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,yDAAyD,CAAC;aACxE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,UAAU,CAAC,SAAiB,EAAE,KAA6B,EAAE,WAAmB;QAC9E,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,mFAAmF,CAAC;aAClG,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,CAAC;IAClE,CAAC;IACD,QAAQ;QACN,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,mGAAmG,CAAC,CAAC,GAAG,EAAE,CAAC;QAC3I,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5I,CAAC;IACD,OAAO,CAAC,MAAc;QACpB,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,0FAA0F,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACrI,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC;YAC5G,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/C,CAAC;IACD,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CAC9B"}

package/dist/namedSessionBudget.test.js

@@ -37,4 +37,25 @@ test('restart records interrupted work without replay or releasing its reserved
     assert.equal(budget.lastWork()?.state, 'completed');
     budget.close();
 });
+test('exact-work audit lookup preserves reservations and never falls back to the latest work', async () => {
+    const root = await mkdtemp(join(tmpdir(), 'dharma-audit-budget-'));
+    const budget = new NamedSessionBudget(join(root, 'budget.sqlite'), 'audit-scope', 50);
+    try {
+        budget.beginWork('older-work', 'sha256:' + 'a'.repeat(64));
+        budget.reserve('older-work', 25);
+        budget.finishWork('older-work', 'completed', 'sha256:' + 'b'.repeat(64));
+        budget.beginWork('newer-work', 'sha256:' + 'c'.repeat(64));
+        const reader = budget;
+        const before = budget.status();
+        assert.equal(reader.getWork('older-work')?.receiptHash, 'sha256:' + 'b'.repeat(64));
+        assert.equal(reader.getWork('older-work')?.state, 'completed');
+        assert.equal(reader.getWork('newer-work')?.state, 'executing');
+        assert.equal(reader.getWork('absent-work'), null);
+        assert.throws(() => reader.getWork('../foreign'), /named_session_work_invalid/);
+        assert.deepEqual(budget.status(), before);
+    }
+    finally {
+        budget.close();
+    }
+});
 //# sourceMappingURL=namedSessionBudget.test.js.map

package/dist/namedSessionBudget.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"namedSessionBudget.test.js","sourceRoot":"","sources":["../src/namedSessionBudget.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC5G,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACnH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,sBAAsB,EAAE,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC3F,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACzC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,2BAA2B,CAAC,CAAC;IACtE,MAAM,CAAC,sBAAsB,EAAE,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"namedSessionBudget.test.js","sourceRoot":"","sources":["../src/namedSessionBudget.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAE7D,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;IACrE,IAAI,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAChF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,iBAAiB,CAAC,CAAC;IAC5G,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,eAAe,EAAE,EAAE,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACnH,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;IAChG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IACzC,IAAI,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACzD,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,KAAK,EAAE,CAAC;IACf,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,sBAAsB,EAAE,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;IACtD,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE,uBAAuB,CAAC,CAAC;IAC3F,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACzC,MAAM,CAAC,UAAU,CAAC,QAAQ,EAAE,WAAW,EAAE,2BAA2B,CAAC,CAAC;IACtE,MAAM,CAAC,sBAAsB,EAAE,CAAC;IAChC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,EAAE,CAAC;AACjB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wFAAwF,EAAE,KAAK,IAAI,EAAE;IACxG,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,WAAW,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,MAAM,CAAC,SAAS,CAAC,YAAY,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAuG,CAAC;QACvH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,WAAW,EAAE,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC,CAAC;QAClD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,4BAA4B,CAAC,CAAC;QAChF,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC;IAC5C,CAAC;YAAS,CAAC;QAAA,MAAM,CAAC,KAAK,EAAE,CAAC;IAAA,CAAC;AAC7B,CAAC,CAAC,CAAC"}

package/dist/namedSessionNativeAudit.d.ts

@@ -0,0 +1,78 @@
+import type { LocalVault, ScopedLocalVault, LocalProviderSessionBinding } from '@dharma-ai-labs/agent-fabric-local-vault';
+declare const kinds: readonly ["commandExecution", "mcpToolCall", "dynamicToolCall", "fileChange"];
+export interface NamedSessionNativeAuditEvent {
+    kind: typeof kinds[number];
+    sequence: number;
+    receivedAt: string;
+    itemHash: string;
+    itemIdHash: string | null;
+    commandHash: string | null;
+    cwdHash: string | null;
+    outputHash: string | null;
+    argumentsHash: string | null;
+    resultHash: string | null;
+    dynamicContentHash: string | null;
+    dynamicResponseHash: string | null;
+    errorHash: string | null;
+    toolStatus: 'inProgress' | 'completed' | 'failed' | null;
+    toolSuccess: boolean | null;
+    exitCode: number | null;
+    durationMs: number | null;
+    pathHashes: string[];
+    pathsTruncated: boolean;
+    commandShape: 'node_version' | 'node_test' | 'npm_test' | 'other';
+    reportedNodeVersion: string | null;
+    reportedTapSummary: {
+        tests: number;
+        pass: number;
+        fail: number;
+        cancelled: number;
+        skipped: number;
+    } | null;
+}
+/** Project exact-work evidence inside its existing owner; never export native text or arbitrary vault locators. */
+export declare function readNamedSessionNativeAudit(input: {
+    vault: Pick<LocalVault | ScopedLocalVault, 'getBlob'>;
+    binding: LocalProviderSessionBinding;
+    work: {
+        workId: string;
+        state: string;
+        receiptHash: string;
+    } | null;
+}): Promise<{
+    ok: true;
+    schema: "dharma.named-session-native-audit/v1";
+    organizationId: string;
+    repositoryBindingId: string;
+    workspaceId: string;
+    endpointId: string;
+    membershipId: string;
+    deviceId: string;
+    bindingId: string;
+    provider: import("@dharma-ai-labs/agent-fabric-contracts").ProviderId;
+    sessionId: string;
+    workId: string;
+    receiptHash: string;
+    workState: string;
+    captureWorkOutcome: "failed" | "completed";
+    captureId: string;
+    captureHash: string;
+    eventsHash: string;
+    startedAt: string;
+    closedAt: string;
+    observedAt: string;
+    providerTurnId: string | null;
+    providerTurnState: "failed" | "completed" | "unconfirmed" | "interrupted";
+    coverage: "unavailable" | "partial" | "observed";
+    droppedEvents: number;
+    qualifyingItems: number;
+    captureLimitations: ("conflicting_turn_identity" | "unscoped_notification" | "invalid_notification" | "capture_limit" | "credential_excluded" | "turn_unconfirmed" | "terminal_unconfirmed")[];
+    unrecognizedCaptureLimitationCount: number;
+    truncated: boolean;
+    rawContentExported: false;
+    acceptedLearningObservation: false;
+    limitations: string[];
+    events: NamedSessionNativeAuditEvent[];
+}>;
+export {};
+//# sourceMappingURL=namedSessionNativeAudit.d.ts.map

package/dist/namedSessionNativeAudit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedSessionNativeAudit.d.ts","sourceRoot":"","sources":["../src/namedSessionNativeAudit.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAC,UAAU,EAAE,gBAAgB,EAAE,2BAA2B,EAAC,MAAM,0CAA0C,CAAC;AASxH,QAAA,MAAM,KAAK,+EAAgF,CAAC;AAI5F,MAAM,WAAW,4BAA4B;IAC3C,IAAI,EAAE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9G,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACvI,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAChG,UAAU,EAAE,YAAY,GAAG,WAAW,GAAG,QAAQ,GAAG,IAAI,CAAC;IAAC,WAAW,EAAE,OAAO,GAAG,IAAI,CAAC;IACtF,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,cAAc,EAAE,OAAO,CAAC;IAClG,YAAY,EAAE,cAAc,GAAG,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC;IAClE,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,EAAE;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAC,GAAG,IAAI,CAAC;CAC5G;AA6BD,mHAAmH;AACnH,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,KAAK,EAAE,IAAI,CAAC,UAAU,GAAG,gBAAgB,EAAE,SAAS,CAAC,CAAC;IACtD,OAAO,EAAE,2BAA2B,CAAC;IACrC,IAAI,EAAE;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAC,GAAG,IAAI,CAAC;CACnE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6FA"}

package/dist/namedSessionNativeAudit.js

@@ -0,0 +1,158 @@
+import { createHash } from 'node:crypto';
+import { join } from 'node:path';
+import { validateContract } from '@dharma-ai-labs/agent-fabric-contracts';
+import { codexWorkCaptureSchemaId } from '@dharma-ai-labs/agent-fabric-provider-adapters/experimental/codex-session';
+const digest = (value) => `sha256:${createHash('sha256').update(value).digest('hex')}`;
+const object = (value) => value && typeof value === 'object' && !Array.isArray(value)
+    ? value : {};
+const hash = (value) => value === undefined ? null : digest(JSON.stringify(value));
+const contentHash = (value) => typeof value === 'string' ? digest(value) : hash(value);
+const validHash = (value) => typeof value === 'string' && /^sha256:[a-f0-9]{64}$/.test(value);
+const kinds = ['commandExecution', 'mcpToolCall', 'dynamicToolCall', 'fileChange'];
+const captureLimitations = ['conflicting_turn_identity', 'unscoped_notification', 'invalid_notification', 'capture_limit',
+    'credential_excluded', 'turn_unconfirmed', 'terminal_unconfirmed'];
+function reportedCommandFacts(command, output) {
+    const facts = {
+        commandShape: 'other', reportedNodeVersion: null, reportedTapSummary: null
+    };
+    if (typeof command !== 'string' || typeof output !== 'string' || /[\r\n]/.test(command))
+        return facts;
+    const node = '(?:node|/[A-Za-z0-9_./-]+/node)';
+    if (new RegExp(`^${node} (?:--version|-v)$`).test(command)) {
+        facts.commandShape = 'node_version';
+        if (/^v[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\s*$/.test(output))
+            facts.reportedNodeVersion = output.trim();
+    }
+    else if (new RegExp(`^${node} --test(?: [A-Za-z0-9_./*-]+)*$`).test(command) || /^(?:npm test|npm run test)$/.test(command)) {
+        facts.commandShape = command.startsWith('npm ') ? 'npm_test' : 'node_test';
+        const counts = {};
+        for (const key of ['tests', 'pass', 'fail', 'cancelled', 'skipped']) {
+            const lines = [...output.matchAll(new RegExp(`^# ${key}\\b[^\\n]*$`, 'gm'))];
+            const count = lines.length === 1 ? lines[0][0].match(new RegExp(`^# ${key} ([0-9]{1,7})\\r?$`)) : null;
+            if (!count || Number(count[1]) > 1_000_000)
+                return facts;
+            counts[key] = Number(count[1]);
+        }
+        const todoLines = [...output.matchAll(/^# todo\b[^\n]*$/gm)];
+        if (todoLines.length > 1 || (todoLines.length === 1 && !/^# todo 0\r?$/.test(todoLines[0][0])))
+            return facts;
+        if (counts.pass + counts.fail + counts.cancelled + counts.skipped === counts.tests) {
+            facts.reportedTapSummary = counts;
+        }
+    }
+    return facts;
+}
+/** Project exact-work evidence inside its existing owner; never export native text or arbitrary vault locators. */
+export async function readNamedSessionNativeAudit(input) {
+    const { vault, binding, work } = input;
+    if (!work || !/^[A-Za-z0-9_-]{1,128}$(?![\s\S])/.test(work.workId)
+        || !['completed', 'failed'].includes(work.state) || !validHash(work.receiptHash)) {
+        throw new Error('named_session_audit_unavailable');
+    }
+    const read = async (id, maximumBytes) => {
+        const bytes = await vault.getBlob(id);
+        if (bytes.length > maximumBytes || digest(bytes) !== id)
+            throw new Error('named_session_audit_integrity_failed');
+        try {
+            return object(JSON.parse(bytes.toString('utf8')));
+        }
+        catch {
+            throw new Error('named_session_audit_integrity_failed');
+        }
+    };
+    const receipt = await read(work.receiptHash, 65536), evidence = object(receipt.nativeEvidence);
+    if (receipt.workId !== work.workId || !validHash(evidence.contentHash))
+        throw new Error('named_session_audit_scope_mismatch');
+    const raw = await read(evidence.contentHash, 4 * 1024 * 1024);
+    if (raw.schema !== 'dharma.codex-local-work-capture/v1' && raw.schema !== 'dharma.codex-local-work-capture/v2') {
+        throw new Error('named_session_audit_integrity_failed');
+    }
+    const capture = raw;
+    if (!(await validateContract(join(import.meta.dirname, 'schemas'), codexWorkCaptureSchemaId(capture), capture)).ok
+        || digest(JSON.stringify(capture.events)) !== capture.eventsHash || Date.parse(capture.startedAt) > Date.parse(capture.closedAt)) {
+        throw new Error('named_session_audit_integrity_failed');
+    }
+    for (const key of ['organizationId', 'repositoryBindingId', 'workspaceId', 'endpointId', 'membershipId', 'deviceId', 'bindingId', 'provider']) {
+        if (capture[key] !== binding[key])
+            throw new Error('named_session_audit_scope_mismatch');
+    }
+    if (capture.workId !== work.workId || capture.captureId !== evidence.captureId || capture.providerThreadId !== binding.sessionId) {
+        throw new Error('named_session_audit_scope_mismatch');
+    }
+    if (capture.schema === 'dharma.codex-local-work-capture/v2'
+        && (capture.request.params.threadId !== binding.sessionId || capture.request.params.cwd !== binding.workspaceRoot
+            || digest(JSON.stringify(capture.request)) !== capture.requestHash))
+        throw new Error('named_session_audit_integrity_failed');
+    const events = [], completed = new Map();
+    let qualifyingItems = 0;
+    const add = (value, sequence, receivedAt) => {
+        const item = object(value), kind = kinds.find(kind => kind === item.type);
+        if (!kind)
+            return;
+        const itemHash = digest(JSON.stringify(item)), id = typeof item.id === 'string' ? digest(item.id) : null;
+        const key = `${kind}:${id ?? itemHash}`;
+        if (completed.has(key)) {
+            if (completed.get(key) !== itemHash)
+                throw new Error('named_session_audit_integrity_failed');
+            return;
+        }
+        completed.set(key, itemHash);
+        qualifyingItems++;
+        if (events.length >= 32)
+            return;
+        const changes = Array.isArray(item.changes) ? item.changes : [];
+        const output = item.aggregatedOutput ?? item.output;
+        const dynamic = kind === 'dynamicToolCall', tool = dynamic || kind === 'mcpToolCall';
+        const toolStatus = tool && ['inProgress', 'completed', 'failed'].includes(String(item.status))
+            ? item.status : null;
+        const dynamicResponse = dynamic && toolStatus !== null
+            && (item.success === null || typeof item.success === 'boolean')
+            && (item.contentItems === null || Array.isArray(item.contentItems))
+            ? { contentItems: item.contentItems, success: item.success, status: toolStatus } : undefined;
+        events.push({ kind, sequence, receivedAt, itemHash, itemIdHash: id,
+            ...reportedCommandFacts(kind === 'commandExecution' ? item.command : undefined, output),
+            commandHash: typeof item.command === 'string' ? digest(item.command) : null,
+            cwdHash: kind === 'commandExecution' && typeof item.cwd === 'string' ? digest(item.cwd) : null,
+            outputHash: dynamic ? null : contentHash(output), argumentsHash: hash(item.arguments),
+            resultHash: dynamic ? null : hash(item.result),
+            dynamicContentHash: dynamicResponse && Array.isArray(dynamicResponse.contentItems) ? hash(dynamicResponse.contentItems) : null,
+            dynamicResponseHash: hash(dynamicResponse), errorHash: kind === 'mcpToolCall' && item.error != null ? hash(item.error) : null,
+            toolStatus, toolSuccess: dynamic && typeof item.success === 'boolean' ? item.success : null,
+            exitCode: Number.isSafeInteger(item.exitCode) ? Number(item.exitCode) : null,
+            durationMs: Number.isSafeInteger(item.durationMs) && Number(item.durationMs) >= 0 ? Number(item.durationMs) : null,
+            pathsTruncated: changes.length > 4,
+            pathHashes: changes.slice(0, 4).map(object).filter(change => typeof change.path === 'string')
+                .map(change => digest(change.path)) });
+    };
+    for (const event of capture.events) {
+        const params = object(event.notification.params), turn = object(params.turn);
+        if (params.threadId !== capture.providerThreadId || params.turnId !== undefined && params.turnId !== capture.providerTurnId
+            || turn.id !== undefined && turn.id !== capture.providerTurnId)
+            throw new Error('named_session_audit_scope_mismatch');
+        if (event.notification.method === 'item/completed')
+            add(params.item, event.sequence, event.receivedAt);
+        if (event.notification.method === 'turn/completed') {
+            if (turn.status !== capture.providerTurnState)
+                throw new Error('named_session_audit_integrity_failed');
+            if (Array.isArray(turn.items))
+                for (const item of turn.items)
+                    add(item, event.sequence, event.receivedAt);
+        }
+    }
+    return { ok: true, schema: 'dharma.named-session-native-audit/v1',
+        organizationId: binding.organizationId, repositoryBindingId: binding.repositoryBindingId, workspaceId: binding.workspaceId,
+        endpointId: binding.endpointId, membershipId: binding.membershipId, deviceId: binding.deviceId, bindingId: binding.bindingId,
+        provider: binding.provider, sessionId: binding.sessionId, workId: work.workId, receiptHash: work.receiptHash,
+        workState: work.state, captureWorkOutcome: capture.workOutcome,
+        captureId: capture.captureId, captureHash: evidence.contentHash, eventsHash: capture.eventsHash,
+        startedAt: capture.startedAt, closedAt: capture.closedAt, observedAt: new Date().toISOString(),
+        providerTurnId: capture.providerTurnId, providerTurnState: capture.providerTurnState,
+        coverage: capture.coverage, droppedEvents: capture.droppedEvents, qualifyingItems,
+        captureLimitations: captureLimitations.filter(value => capture.limitations.includes(value)),
+        unrecognizedCaptureLimitationCount: capture.limitations.filter(value => !captureLimitations.some(known => value === known)).length,
+        truncated: qualifyingItems > events.length || events.some(event => event.pathsTruncated),
+        rawContentExported: false, acceptedLearningObservation: false,
+        limitations: ['hashed_native_items_not_raw_transcripts', 'provider_reports_not_independent_grading',
+            'hashed_command_and_path_match_required', 'retained_context_unavailable', 'executed_model_unreported'], events };
+}
+//# sourceMappingURL=namedSessionNativeAudit.js.map

package/dist/namedSessionNativeAudit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedSessionNativeAudit.js","sourceRoot":"","sources":["../src/namedSessionNativeAudit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,IAAI,EAAC,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAC,gBAAgB,EAAC,MAAM,wCAAwC,CAAC;AAExE,OAAO,EAAC,wBAAwB,EAA6B,MAAM,2EAA2E,CAAC;AAE/I,MAAM,MAAM,GAAG,CAAC,KAA0B,EAAE,EAAE,CAAC,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5G,MAAM,MAAM,GAAG,CAAC,KAAc,EAA2B,EAAE,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IACrH,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1C,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5F,MAAM,WAAW,GAAG,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChG,MAAM,SAAS,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxH,MAAM,KAAK,GAAG,CAAC,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,YAAY,CAAU,CAAC;AAC5F,MAAM,kBAAkB,GAAG,CAAC,2BAA2B,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,eAAe;IACvH,qBAAqB,EAAE,kBAAkB,EAAE,sBAAsB,CAAU,CAAC;AAa9E,SAAS,oBAAoB,CAAC,OAAgB,EAAE,MAAe;IAE7D,MAAM,KAAK,GAAsG;QAC/G,YAAY,EAAE,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI;KAAC,CAAC;IAC9E,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACtG,MAAM,IAAI,GAAG,iCAAiC,CAAC;IAC/C,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,oBAAoB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,KAAK,CAAC,YAAY,GAAG,cAAc,CAAC;QACpC,IAAI,0CAA0C,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,KAAK,CAAC,mBAAmB,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IACzG,CAAC;SAAM,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,iCAAiC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,6BAA6B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9H,KAAK,CAAC,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC;QAC3E,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC;YACpE,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,aAAa,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAC7E,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACxG,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS;gBAAE,OAAO,KAAK,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC7D,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QAC9G,IAAI,MAAM,CAAC,IAAK,GAAG,MAAM,CAAC,IAAK,GAAG,MAAM,CAAC,SAAU,GAAG,MAAM,CAAC,OAAQ,KAAK,MAAM,CAAC,KAAM,EAAE,CAAC;YACxF,KAAK,CAAC,kBAAkB,GAAG,MAAyE,CAAC;QACvG,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,KAIjD;IACC,MAAM,EAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAC,GAAG,KAAK,CAAC;IACrC,IAAI,CAAC,IAAI,IAAI,CAAC,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;WAC7D,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,EAAE,EAAU,EAAE,YAAoB,EAAE,EAAE;QACtD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,KAAK,CAAC,MAAM,GAAG,YAAY,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACjH,IAAI,CAAC;YAAA,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAAA,CAAC;IAC3H,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC/F,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC9H,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC;IAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,oCAAoC,IAAI,GAAG,CAAC,MAAM,KAAK,oCAAoC,EAAE,CAAC;QAC/G,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,OAAO,GAAG,GAAuC,CAAC;IACxD,IAAI,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,wBAAwB,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE;WAC7G,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnI,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,qBAAqB,EAAE,aAAa,EAAE,YAAY,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,CAAU,EAAE,CAAC;QACvJ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,gBAAgB,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACjI,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,oCAAoC;WACtD,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,KAAK,OAAO,CAAC,aAAa;eAC5G,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACjI,MAAM,MAAM,GAAmC,EAAE,EAAE,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzF,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,CAAC,KAAc,EAAE,QAAgB,EAAE,UAAkB,EAAE,EAAE;QACnE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACzG,MAAM,GAAG,GAAG,GAAG,IAAI,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;QACxC,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,IAAI,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAAC,eAAe,EAAE,CAAC;QAChD,IAAI,MAAM,CAAC,MAAM,IAAI,EAAE;YAAE,OAAO;QAChC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,CAAC,gBAAgB,IAAI,IAAI,CAAC,MAAM,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,KAAK,iBAAiB,EAAE,IAAI,GAAG,OAAO,IAAI,IAAI,KAAK,aAAa,CAAC;QACrF,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC5F,CAAC,CAAC,IAAI,CAAC,MAAoD,CAAC,CAAC,CAAC,IAAI,CAAC;QACrE,MAAM,eAAe,GAAG,OAAO,IAAI,UAAU,KAAK,IAAI;eACjD,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC;eAC5D,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACnE,CAAC,CAAC,EAAC,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7F,MAAM,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE;YAC/D,GAAG,oBAAoB,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC;YACvF,WAAW,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;YAC3E,OAAO,EAAE,IAAI,KAAK,kBAAkB,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9F,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;YACrF,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9C,kBAAkB,EAAE,eAAe,IAAI,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;YAC9H,mBAAmB,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,SAAS,EAAE,IAAI,KAAK,aAAa,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;YAC7H,UAAU,EAAE,WAAW,EAAE,OAAO,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;YAC3F,QAAQ,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAC5E,UAAU,EAAE,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI;YAClH,cAAc,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC;YAClC,UAAU,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC;iBAC1F,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAc,CAAC,CAAC,EAAC,CAAC,CAAC;IACtD,CAAC,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7E,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,gBAAgB,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,cAAc;eACtH,IAAI,CAAC,EAAE,KAAK,SAAS,IAAI,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxH,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,gBAAgB;YAAE,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QACvG,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACnD,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,CAAC,iBAAiB;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACvG,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK;oBAAE,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;IACD,OAAO,EAAC,EAAE,EAAE,IAAa,EAAE,MAAM,EAAE,sCAA+C;QAChF,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW;QAC1H,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5H,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW;QAC5G,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,CAAC,WAAW;QAC9D,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU;QAC/F,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAC9F,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QACpF,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,eAAe;QACjF,kBAAkB,EAAE,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3F,kCAAkC,EAAE,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM;QAClI,SAAS,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;QACxF,kBAAkB,EAAE,KAAc,EAAE,2BAA2B,EAAE,KAAc;QAC/E,WAAW,EAAE,CAAC,yCAAyC,EAAE,0CAA0C;YACjG,wCAAwC,EAAE,8BAA8B,EAAE,2BAA2B,CAAC,EAAE,MAAM,EAAC,CAAC;AACtH,CAAC"}

package/dist/namedSessionNativeAudit.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=namedSessionNativeAudit.test.d.ts.map

package/dist/namedSessionNativeAudit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"namedSessionNativeAudit.test.d.ts","sourceRoot":"","sources":["../src/namedSessionNativeAudit.test.ts"],"names":[],"mappings":""}

package/dist/namedSessionNativeAudit.test.js

@@ -0,0 +1,238 @@
+import assert from 'node:assert/strict';
+import { createHash, randomUUID } from 'node:crypto';
+import { join } from 'node:path';
+import test from 'node:test';
+import { validateContract } from '@dharma-ai-labs/agent-fabric-contracts';
+import { readNamedSessionNativeAudit } from './namedSessionNativeAudit.js';
+const digest = (value) => `sha256:${createHash('sha256').update(value).digest('hex')}`;
+function fixture() {
+    const at = new Date().toISOString(), identity = { organizationId: 'org_audit', repositoryBindingId: randomUUID(),
+        workspaceId: randomUUID(), endpointId: randomUUID(), membershipId: randomUUID(), deviceId: randomUUID(), provider: 'codex' };
+    const binding = { schema: 'dharma.local-provider-session-binding/v1', ...identity,
+        bindingId: randomUUID(), owner: 'dharma_bridge', sessionId: randomUUID(), workspaceRoot: '/synthetic/checkout',
+        createdAt: at, expiresAt: new Date(Date.now() + 60000).toISOString(), maximumProviderCostCents: 25 };
+    const turnId = randomUUID(), command = 'node --test test/public.test.js';
+    const item = { id: 'native-command', type: 'commandExecution', command, exitCode: 0, durationMs: 123,
+        aggregatedOutput: 'TEST_OUTPUT_PRIVATE_CANARY' };
+    const events = [
+        { method: 'item/started', params: { threadId: binding.sessionId, turnId, item } },
+        { method: 'item/completed', params: { threadId: binding.sessionId, turnId, item } },
+        { method: 'item/completed', params: { threadId: binding.sessionId, turnId, item: { id: 'reasoning', type: 'reasoning', text: 'PROTECTED_REASONING_CANARY' } } },
+        { method: 'turn/completed', params: { threadId: binding.sessionId, turn: { id: turnId, status: 'completed', items: [item,
+                        { id: 'answer', type: 'agentMessage', text: 'UNTRUSTED_ASSISTANT_CLAIM_CANARY' }] } } },
+    ].map((notification, sequence) => ({ notification, sequence, receivedAt: at }));
+    const capture = { schema: 'dharma.codex-local-work-capture/v1', ...identity, bindingId: binding.bindingId,
+        captureId: randomUUID(), workId: randomUUID(), providerThreadId: binding.sessionId, providerTurnId: turnId,
+        startedAt: at, closedAt: at, workOutcome: 'completed', providerTurnState: 'completed', captureScope: 'turn_notifications',
+        coverage: 'partial', limitations: [], droppedEvents: 0, acceptedLearningObservation: false, executedModel: null,
+        events, eventsHash: digest(JSON.stringify(events)) };
+    const blobs = new Map(), reads = [];
+    const store = (value) => { const bytes = Buffer.from(JSON.stringify(value)), id = digest(bytes); blobs.set(id, bytes); return id; };
+    const prepare = () => {
+        capture.eventsHash = digest(JSON.stringify(capture.events));
+        const captureHash = store(capture), receiptHash = store({ workId: capture.workId, nativeEvidence: { captureId: capture.captureId,
+                contentHash: captureHash, secret: 'RECEIPT_SECRET_CANARY' } });
+        return { vault: { getBlob: async (id) => { reads.push(id); assert.ok(blobs.has(id)); return blobs.get(id); } }, binding,
+            work: { workId: capture.workId, state: 'completed', receiptHash } };
+    };
+    return { capture, binding, prepare, blobs, reads, command };
+}
+test('exact-work audit hashes native facts, excludes transcripts and validates its bounded contract', async () => {
+    const f = fixture(), input = f.prepare(), result = await readNamedSessionNativeAudit(input);
+    assert.equal(result.captureId, f.capture.captureId);
+    assert.equal(result.workId, f.capture.workId);
+    assert.equal(result.workState, 'completed');
+    assert.equal(result.captureWorkOutcome, 'completed');
+    assert.equal(result.events.length, 1);
+    assert.equal(result.events[0].commandHash, digest(f.command));
+    assert.equal(result.events[0].exitCode, 0);
+    assert.equal(result.events[0].durationMs, 123);
+    assert.equal(result.events[0].outputHash, digest('TEST_OUTPUT_PRIVATE_CANARY'));
+    assert.equal(result.acceptedLearningObservation, false);
+    assert.equal(result.rawContentExported, false);
+    for (const canary of ['TEST_OUTPUT_PRIVATE_CANARY', 'PROTECTED_REASONING_CANARY', 'UNTRUSTED_ASSISTANT_CLAIM_CANARY',
+        'RECEIPT_SECRET_CANARY', f.command])
+        assert.equal(JSON.stringify(result).includes(canary), false);
+    assert.equal((await validateContract(join(import.meta.dirname, 'schemas'), 'https://schemas.dharma-ai.io/named-session-native-audit/v1', result)).ok, true);
+    assert.equal((await validateContract(join(import.meta.dirname, 'schemas'), 'https://schemas.dharma-ai.io/named-session-native-audit/v1', { ...result, raw: 'SECRET' })).ok, false);
+    assert.equal(f.reads.length, 2);
+});
+for (const field of ['organizationId', 'repositoryBindingId', 'workspaceId', 'endpointId', 'membershipId', 'deviceId', 'bindingId', 'providerThreadId', 'workId']) {
+    test(`audit rejects foreign ${field} instead of returning another work item`, async () => {
+        const f = fixture(), input = f.prepare();
+        f.capture[field] = field === 'organizationId' ? 'org_foreign' : randomUUID();
+        const foreign = f.prepare();
+        await assert.rejects(readNamedSessionNativeAudit({ ...foreign, work: { ...foreign.work, workId: input.work.workId } }), /audit_(scope_mismatch|integrity_failed)/);
+    });
+}
+test('audit rejects absent, unfinished, corrupt and tampered captures without arbitrary reads', async () => {
+    const f = fixture(), input = f.prepare();
+    for (const state of ['executing', 'interrupted'])
+        await assert.rejects(readNamedSessionNativeAudit({ ...input, work: { ...input.work, state } }), /audit_unavailable/);
+    await assert.rejects(readNamedSessionNativeAudit({ ...input, work: null }), /audit_unavailable/);
+    assert.equal(f.reads.length, 0);
+    f.blobs.set(input.work.receiptHash, Buffer.from('{"secret":"TAMPERED"}'));
+    await assert.rejects(readNamedSessionNativeAudit(input), /audit_integrity_failed/);
+    const g = fixture();
+    g.capture.eventsHash = 'sha256:' + '0'.repeat(64);
+    const good = g.prepare();
+    const raw = JSON.parse(g.blobs.get(good.work.receiptHash).toString());
+    const bytes = g.blobs.get(raw.nativeEvidence.contentHash);
+    const tampered = JSON.parse(bytes.toString());
+    tampered.eventsHash = 'sha256:' + '0'.repeat(64);
+    const changed = Buffer.from(JSON.stringify(tampered)), changedHash = digest(changed);
+    g.blobs.set(changedHash, changed);
+    raw.nativeEvidence.contentHash = changedHash;
+    const receipt = Buffer.from(JSON.stringify(raw)), receiptHash = digest(receipt);
+    g.blobs.set(receiptHash, receipt);
+    await assert.rejects(readNamedSessionNativeAudit({ ...good, work: { ...good.work, receiptHash } }), /audit_integrity_failed/);
+});
+test('audit surfaces bounded truncation and hashes paths/tool arguments without exporting secrets', async () => {
+    const f = fixture(), sample = f.capture.events[1];
+    f.capture.events = Array.from({ length: 70 }, (_, sequence) => ({ ...sample, sequence, notification: {
+            method: 'item/completed', params: { threadId: f.binding.sessionId, turnId: f.capture.providerTurnId,
+                item: { id: `item-${sequence}`, type: sequence ? 'fileChange' : 'dynamicToolCall',
+                    arguments: { password: 'ARGUMENT_SECRET_CANARY' }, result: { secret: 'RESULT_SECRET_CANARY' },
+                    changes: [{ path: '/private/PATH_SECRET_CANARY', diff: 'DIFF_SECRET_CANARY' }] } }
+        } }));
+    const result = await readNamedSessionNativeAudit(f.prepare());
+    assert.equal(result.events.length, 32);
+    assert.equal(result.qualifyingItems, 70);
+    assert.equal(result.truncated, true);
+    for (const text of ['ARGUMENT_SECRET_CANARY', 'RESULT_SECRET_CANARY', 'PATH_SECRET_CANARY', 'DIFF_SECRET_CANARY']) {
+        assert.equal(JSON.stringify(result).includes(text), false);
+    }
+    assert.ok(Buffer.byteLength(JSON.stringify(result)) < 50000);
+});
+test('audit rejects a foreign native event even with a self-consistent content hash', async () => {
+    const f = fixture();
+    f.capture.events[1].notification.params.threadId = randomUUID();
+    await assert.rejects(readNamedSessionNativeAudit(f.prepare()), /audit_scope_mismatch/);
+});
+test('typed native output facts are limited to exact version/test commands and complete bounded TAP totals', async () => {
+    const sampleOutput = '# tests 11\n# pass 11\n# fail 0\n# cancelled 0\n# skipped 0\nSECRET_OUTSIDE_THE_TYPED_TOTALS';
+    for (const [command, output, shape, nodeVersion, pass] of [
+        ['node --version', 'v22.22.3\n', 'node_version', 'v22.22.3', null],
+        ['/usr/local/bin/node -v', 'v22.22.3\nSECRET', 'node_version', null, null],
+        ['node --test test/public.test.js', sampleOutput, 'node_test', null, 11],
+        ['npm test', sampleOutput, 'npm_test', null, 11],
+        ['echo node --version', 'v22.22.3', 'other', null, null],
+        ['node --version\necho SECRET', 'v22.22.3', 'other', null, null],
+        ['npm test', sampleOutput + '\n# pass 11', 'npm_test', null, null],
+        ['npm test', sampleOutput.replace('# pass 11', '# pass 12'), 'npm_test', null, null],
+    ]) {
+        const f = fixture(), item = f.capture.events[1].notification.params.item;
+        item.command = command;
+        item.aggregatedOutput = output;
+        const result = await readNamedSessionNativeAudit(f.prepare()), event = result.events[0];
+        assert.equal(event.commandShape, shape);
+        assert.equal(event.reportedNodeVersion, nodeVersion);
+        assert.equal(event.reportedTapSummary?.pass ?? null, pass);
+        assert.equal(JSON.stringify(result).includes('SECRET'), false);
+        assert.equal((await validateContract(join(import.meta.dirname, 'schemas'), 'https://schemas.dharma-ai.io/named-session-native-audit/v1', result)).ok, true);
+    }
+});
+test('typed TAP totals reject unexplained gaps and nonzero or malformed TODO categories', async () => {
+    for (const suffix of ['', '\n# todo 1', '\n# todo nope', '\n# todo 0\n# todo 0']) {
+        const f = fixture(), item = f.capture.events[1].notification.params.item;
+        item.command = 'node --test test/public.test.js';
+        item.aggregatedOutput = '# tests 11\n# pass 10\n# fail 0\n# cancelled 0\n# skipped 0' + suffix;
+        assert.equal((await readNamedSessionNativeAudit(f.prepare())).events[0].reportedTapSummary, null);
+    }
+    for (const suffix of ['\n# todo 1', '\n# todo nope', '\n# todo 0\n# todo 0']) {
+        const f = fixture(), item = f.capture.events[1].notification.params.item;
+        item.command = 'npm test';
+        item.aggregatedOutput = '# tests 11\n# pass 11\n# fail 0\n# cancelled 0\n# skipped 0' + suffix;
+        assert.equal((await readNamedSessionNativeAudit(f.prepare())).events[0].reportedTapSummary, null);
+    }
+    const f = fixture(), item = f.capture.events[1].notification.params.item;
+    item.command = 'npm test';
+    item.aggregatedOutput = '# tests 11\n# pass 11\n# fail 0\n# cancelled 0\n# skipped 0\n# todo 0';
+    assert.deepEqual((await readNamedSessionNativeAudit(f.prepare())).events[0].reportedTapSummary, { tests: 11, pass: 11, fail: 0, cancelled: 0, skipped: 0 });
+});
+test('v2 audit checks request integrity and original workspace without upgrading partial coverage', async () => {
+    const f = fixture();
+    const request = { method: 'turn/start', params: { threadId: f.binding.sessionId,
+            input: [{ type: 'text', text: 'PRIVATE_REQUEST_CANARY' }],
+            cwd: f.binding.workspaceRoot, approvalPolicy: 'never', permissions: 'dharma_work' } };
+    Object.assign(f.capture, { schema: 'dharma.codex-local-work-capture/v2', captureScope: 'turn_request_and_notifications',
+        request, requestHash: digest(JSON.stringify(request)), limitations: ['credential_excluded'], droppedEvents: 3 });
+    const result = await readNamedSessionNativeAudit(f.prepare());
+    assert.equal(result.coverage, 'partial');
+    assert.equal(JSON.stringify(result).includes('PRIVATE_REQUEST_CANARY'), false);
+    assert.deepEqual(result.captureLimitations, ['credential_excluded']);
+    assert.equal(result.droppedEvents, 3);
+    assert.equal(result.unrecognizedCaptureLimitationCount, 0);
+    f.capture.limitations.push('PRIVATE_LIMITATION_CANARY');
+    await assert.rejects(readNamedSessionNativeAudit(f.prepare()), /audit_integrity_failed/);
+    f.capture.limitations.pop();
+    request.params.cwd = '/foreign/checkout';
+    await assert.rejects(readNamedSessionNativeAudit(f.prepare()), /audit_integrity_failed/);
+});
+test('audit retains path truncation instead of silently claiming complete file-change evidence', async () => {
+    const f = fixture(), item = f.capture.events[1].notification.params.item;
+    item.type = 'fileChange';
+    item.changes = Array.from({ length: 9 }, (_, n) => ({ path: `src/file${n}.ts` }));
+    const result = await readNamedSessionNativeAudit(f.prepare());
+    assert.equal(result.events[0].pathHashes.length, 4);
+    assert.equal(result.events[0].pathsTruncated, true);
+    assert.equal(result.truncated, true);
+});
+test('audit rejects contradictory repeated completion items instead of choosing the successful result', async () => {
+    const f = fixture(), item = f.capture.events[1].notification.params.item;
+    const clone = JSON.parse(JSON.stringify(item));
+    clone.exitCode = 1;
+    const final = f.capture.events[3].notification.params.turn;
+    final.items[0] = clone;
+    await assert.rejects(readNamedSessionNativeAudit(f.prepare()), /audit_integrity_failed/);
+});
+test('official dynamic-tool responses hash content and outcome without substituting MCP result fields', async () => {
+    for (const [status, success, contentItems] of [
+        ['completed', true, [{ type: 'inputText', text: 'PEER_RESPONSE_PRIVATE_CANARY' }]],
+        ['failed', false, [{ type: 'inputText', text: 'PEER_FAILURE_PRIVATE_CANARY' }]],
+        ['completed', null, null],
+    ]) {
+        const f = fixture(), item = f.capture.events[1].notification.params.item;
+        Object.keys(item).forEach(key => delete item[key]);
+        Object.assign(item, { id: 'dynamic-native', type: 'dynamicToolCall', namespace: 'dharma', tool: 'peer_answer',
+            arguments: { questionId: 'SYNTHETIC_QUESTION' }, status, success, contentItems, durationMs: 12 });
+        const result = await readNamedSessionNativeAudit(f.prepare()), event = result.events[0];
+        assert.equal(event.dynamicContentHash, contentItems === null ? null : digest(JSON.stringify(contentItems)));
+        assert.equal(event.dynamicResponseHash, digest(JSON.stringify({ contentItems, success, status })));
+        assert.equal(event.toolSuccess, success);
+        assert.equal(event.toolStatus, status);
+        assert.equal(event.outputHash, null);
+        assert.equal(event.resultHash, null);
+        assert.equal(event.cwdHash, null);
+        assert.equal(JSON.stringify(result).includes('PRIVATE_CANARY'), false);
+        assert.equal((await validateContract(join(import.meta.dirname, 'schemas'), 'https://schemas.dharma-ai.io/named-session-native-audit/v1', result)).ok, true);
+        delete item.contentItems;
+        const missing = (await readNamedSessionNativeAudit(f.prepare())).events[0];
+        assert.equal(missing.dynamicContentHash, null);
+        assert.equal(missing.dynamicResponseHash, null);
+    }
+});
+test('command cwd is independently matchable while MCP results and errors retain separate hashes', async () => {
+    const f = fixture(), item = f.capture.events[1].notification.params.item;
+    item.cwd = '/synthetic/checkout';
+    const first = (await readNamedSessionNativeAudit(f.prepare())).events[0];
+    item.cwd = '/foreign/PRIVATE_CWD_CANARY';
+    const other = (await readNamedSessionNativeAudit(f.prepare())).events[0];
+    assert.equal(first.cwdHash, digest('/synthetic/checkout'));
+    assert.equal(other.cwdHash, digest(String(item.cwd)));
+    assert.notEqual(first.cwdHash, other.cwdHash);
+    assert.equal(first.commandHash, other.commandHash);
+    assert.equal(first.outputHash, other.outputHash);
+    assert.equal(JSON.stringify(other).includes('PRIVATE_CWD_CANARY'), false);
+    Object.keys(item).forEach(key => delete item[key]);
+    Object.assign(item, { id: 'mcp-native', type: 'mcpToolCall', server: 'dharma', tool: 'peer_answer', status: 'failed',
+        arguments: { questionId: 'SYNTHETIC_QUESTION' }, result: null, error: { message: 'PRIVATE_MCP_ERROR_CANARY' } });
+    const mcp = (await readNamedSessionNativeAudit(f.prepare())).events[0];
+    assert.equal(mcp.errorHash, digest(JSON.stringify(item.error)));
+    assert.equal(mcp.toolStatus, 'failed');
+    assert.equal(mcp.toolSuccess, null);
+    assert.equal(mcp.dynamicResponseHash, null);
+    assert.equal(mcp.cwdHash, null);
+    assert.equal(JSON.stringify(mcp).includes('PRIVATE_MCP_ERROR_CANARY'), false);
+});
+//# sourceMappingURL=namedSessionNativeAudit.test.js.map