@guilz-dev/belay 0.9.0 → 0.9.2

package/dist/egress-daemon.js

@@ -1,9 +1,10 @@
 import { mkdir, writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { belayStateDir, loadApprovalState, loadConfigFile, repoLocalStateDirFor, } from './config-io.js';
+import { serializeAuditRecordV3 } from './core/audit-serialize.js';
 import { scrubOptionsFromConfig } from './core/config.js';
 import { startEgressProxy as bindEgressProxy } from './core/egress/proxy-server.js';
-import { scrubValue } from './core/scrub.js';
+import { resolveActiveAuditCohort } from './runtime-provenance.js';
 import { clearEgressDaemonState, createEgressApprovalStore, writeEgressDaemonState, } from './services/egress-service.js';
 async function main() {
     const repoRoot = process.env.BELAY_EGRESS_REPO_ROOT;
@@ -30,9 +31,24 @@ async function main() {
         },
         async onAudit(event) {
             await mkdir(path.dirname(auditPath), { recursive: true });
-            const record = { timestamp: new Date().toISOString(), ...event };
-            const scrubbed = scrubValue(record, scrubOptionsFromConfig(config));
-            await writeFile(auditPath, `${JSON.stringify(scrubbed)}\n`, { encoding: 'utf8', flag: 'a' });
+            const cohort = await resolveActiveAuditCohort(repoRoot, config);
+            const record = {
+                timestamp: new Date().toISOString(),
+                ...(cohort
+                    ? {
+                        runtimeBuildStamp: cohort.runtimeBuildStamp,
+                        ...(cohort.runtimeArtifactHash
+                            ? { runtimeArtifactHash: cohort.runtimeArtifactHash }
+                            : {}),
+                        decisionConfigFingerprint: cohort.decisionConfigFingerprint,
+                        boundaryProfile: cohort.boundaryProfile,
+                        configFingerprint: cohort.configFingerprint,
+                    }
+                    : {}),
+                ...event,
+            };
+            const serialized = serializeAuditRecordV3(record, scrubOptionsFromConfig(config));
+            await writeFile(auditPath, `${JSON.stringify(serialized)}\n`, { encoding: 'utf8', flag: 'a' });
         },
     });
     await writeEgressDaemonState({ stateDir, pid: process.pid, host, port, repoRoot });

package/dist/installer.js

@@ -8,6 +8,7 @@ import { getAdapter } from './adapters/registry.js';
 import { dogfoodProject } from './commands/dogfood.js';
 import { detectAdapterName, loadConfigFile, mergeAndWriteConfig, writeConfigFile, } from './config-io.js';
 import { appendCliAuditEvent } from './core/audit-io.js';
+import { archiveLegacyAuditLogIfNeeded } from './core/audit-legacy-archive.js';
 import { isFreshConfigInput, mergeConfig, normalizeConfig, } from './core/config.js';
 import { runtimeIntegrityFiles, writeIntegrityManifest } from './core/integrity.js';
 import { hasValidCloudConsent, isCloudJudgeConfig, migrateImplicitLocalJudgeIfNeeded, resolveInitJudgeConfig, } from './core/judge-config.js';
@@ -72,6 +73,7 @@ export async function initCursorProject(options = {}) {
     await mkdir(path.dirname(paths.hooksSettingsPath), { recursive: true });
     await writeFile(paths.hooksSettingsPath, `${JSON.stringify(mergedHooks, null, 2)}\n`, 'utf8');
     await writeIntegrityManifest(repoRoot, cursorLayout, runtimeIntegrityFiles(cursorLayout, paths));
+    await archiveLegacyAuditLogIfNeeded(repoRoot, config);
     return { repoRoot, withSkill };
 }
 export async function upgradeCursorProject(options = {}) {
@@ -89,6 +91,7 @@ export async function upgradeCursorProject(options = {}) {
         await writeSkillArtifacts('cursor', paths);
     }
     await writeIntegrityManifest(repoRoot, cursorLayout, runtimeIntegrityFiles(cursorLayout, paths));
+    await archiveLegacyAuditLogIfNeeded(repoRoot, config);
     return { repoRoot };
 }
 function resolveAdapterName(options, repoRoot) {

package/dist/runtime-provenance.d.ts

@@ -3,6 +3,16 @@ import type { BelayConfigV3 } from './core/config.js';
 export interface InstalledRuntimeProvenance {
     stamp?: string;
     version?: string;
+    artifactHash?: string;
 }
+export interface RuntimeBuildProvenanceInput {
+    runtimeVersion?: unknown;
+    runtimeBuildStamp?: unknown;
+    runtimeArtifactHash?: unknown;
+}
+export { hashDecisionConfig } from './core/decision-config-fingerprint.js';
+export declare function resolveRuntimeArtifactHash(artifactHash?: string): string | undefined;
+export declare function buildAuditProvenanceFields(config: BelayConfigV3, runtime?: RuntimeBuildProvenanceInput): Record<string, string>;
+export declare function matchesAuditCohort(record: Record<string, unknown>, cohort: AuditCohortIdentity): boolean;
 export declare function readInstalledRuntimeProvenance(corePath: string): Promise<InstalledRuntimeProvenance>;
 export declare function resolveActiveAuditCohort(repoRoot: string, config: BelayConfigV3): Promise<AuditCohortIdentity | null>;

package/dist/runtime-provenance.js

@@ -3,15 +3,72 @@ import path from 'node:path';
 import { getAdapterLayout } from './adapters/layouts/index.js';
 import { resolveScopedPaths } from './adapters/layouts/scope.js';
 import { resolveAdapterName } from './config-io.js';
+import { isValidAuditFingerprint } from './core/audit-serialize.js';
+import { resolveBoundaryProfile } from './core/capability/boundary-profile.js';
+import { hashDecisionConfig } from './core/decision-config-fingerprint.js';
 import { canonicalStringify, hashValue } from './core/fingerprint.js';
+import { PACKAGE_VERSION } from './version.js';
+export { hashDecisionConfig } from './core/decision-config-fingerprint.js';
+export function resolveRuntimeArtifactHash(artifactHash) {
+    if (typeof artifactHash === 'string' && isValidAuditFingerprint(artifactHash)) {
+        return artifactHash;
+    }
+    return undefined;
+}
+export function buildAuditProvenanceFields(config, runtime) {
+    const runtimeVersion = typeof runtime?.runtimeVersion === 'string' ? runtime.runtimeVersion : PACKAGE_VERSION;
+    const runtimeBuildStamp = typeof runtime?.runtimeBuildStamp === 'string'
+        ? runtime.runtimeBuildStamp
+        : `${PACKAGE_VERSION}@source`;
+    const fields = {
+        runtimeVersion,
+        runtimeBuildStamp,
+        decisionConfigFingerprint: hashDecisionConfig(config),
+        boundaryProfile: resolveBoundaryProfile({ config }),
+        configFingerprint: hashValue(canonicalStringify(config)),
+    };
+    const runtimeArtifactHash = resolveRuntimeArtifactHash(typeof runtime?.runtimeArtifactHash === 'string' ? runtime.runtimeArtifactHash : undefined);
+    if (runtimeArtifactHash) {
+        fields.runtimeArtifactHash = runtimeArtifactHash;
+    }
+    return fields;
+}
+export function matchesAuditCohort(record, cohort) {
+    const artifactHash = typeof record.runtimeArtifactHash === 'string' ? record.runtimeArtifactHash : undefined;
+    const decisionFingerprint = typeof record.decisionConfigFingerprint === 'string'
+        ? record.decisionConfigFingerprint
+        : undefined;
+    const boundaryProfile = typeof record.boundaryProfile === 'string' ? record.boundaryProfile : undefined;
+    const hasPartialV3Field = artifactHash !== undefined || decisionFingerprint !== undefined || boundaryProfile !== undefined;
+    if (hasPartialV3Field) {
+        if (!artifactHash ||
+            !decisionFingerprint ||
+            !boundaryProfile ||
+            !isValidAuditFingerprint(artifactHash)) {
+            return false;
+        }
+        if (artifactHash !== cohort.runtimeArtifactHash ||
+            decisionFingerprint !== cohort.decisionConfigFingerprint) {
+            return false;
+        }
+        if (boundaryProfile !== cohort.boundaryProfile) {
+            return false;
+        }
+        return true;
+    }
+    return (record.runtimeBuildStamp === cohort.runtimeBuildStamp &&
+        record.configFingerprint === cohort.configFingerprint);
+}
 export async function readInstalledRuntimeProvenance(corePath) {
     try {
         const content = await readFile(corePath, 'utf8');
         const stampMatch = content.match(/RUNTIME_BUILD_STAMP\s*=\s*"([^"]+)"/);
         const versionMatch = content.match(/RUNTIME_PACKAGE_VERSION\s*=\s*"([^"]+)"/);
+        const artifactMatch = content.match(/RUNTIME_ARTIFACT_HASH\s*=\s*"([^"]+)"/);
         return {
             stamp: stampMatch?.[1],
             version: versionMatch?.[1],
+            artifactHash: artifactMatch?.[1],
         };
     }
     catch {
@@ -27,7 +84,13 @@ export async function resolveActiveAuditCohort(repoRoot, config) {
     if (!runtime.stamp) {
         return null;
     }
+    const boundaryProfile = resolveBoundaryProfile({ config });
+    const decisionConfigFingerprint = hashDecisionConfig(config);
+    const runtimeArtifactHash = resolveRuntimeArtifactHash(runtime.artifactHash) ?? '';
     return {
+        runtimeArtifactHash,
+        decisionConfigFingerprint,
+        boundaryProfile,
         runtimeBuildStamp: runtime.stamp,
         configFingerprint: hashValue(canonicalStringify(config)),
     };

package/dist/templates.js

@@ -1,6 +1,7 @@
 import { readFile } from 'node:fs/promises';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
+import { hashValue } from './core/fingerprint.js';
 import { PACKAGE_VERSION } from './version.js';
 function inlineJson(value) {
     return JSON.stringify(value, null, 2);
@@ -45,17 +46,21 @@ async function readRuntimeBundle(adapter = 'cursor') {
 }
 export async function renderRuntimeCore(adapter = 'cursor') {
     const bundle = await readRuntimeBundle(adapter);
-    const runtimeBuildStamp = `${PACKAGE_VERSION}@${new Date().toISOString()}`;
+    const withoutStamp = bundle
+        .replace(/^export const RUNTIME_BUILD_STAMP = .*;\n/gm, '')
+        .replace(/^export const RUNTIME_PACKAGE_VERSION = .*;\n/gm, '')
+        .replace(/^export const RUNTIME_ARTIFACT_HASH = .*;\n/gm, '')
+        .replace(/^var RUNTIME_PACKAGE_VERSION = .*;\n/gm, '')
+        .replace(/\n {2}RUNTIME_PACKAGE_VERSION,\n/, '\n');
+    const runtimeArtifactHash = hashValue(withoutStamp);
+    const runtimeBuildStamp = `${PACKAGE_VERSION}@${runtimeArtifactHash.slice(0, 16)}`;
     const stamp = `export const RUNTIME_BUILD_STAMP = ${JSON.stringify(runtimeBuildStamp)};\n`;
+    const artifactHashLine = `export const RUNTIME_ARTIFACT_HASH = ${JSON.stringify(runtimeArtifactHash)};\n`;
     const versionLine = `export const RUNTIME_PACKAGE_VERSION = ${JSON.stringify(PACKAGE_VERSION)};\n`;
     const provenance = `globalThis[Symbol.for("agent-belay.runtime-provenance")] = ${JSON.stringify({
         runtimeVersion: PACKAGE_VERSION,
         runtimeBuildStamp,
+        runtimeArtifactHash,
     })};\n`;
-    const withoutStamp = bundle
-        .replace(/^export const RUNTIME_BUILD_STAMP = .*;\n/gm, '')
-        .replace(/^export const RUNTIME_PACKAGE_VERSION = .*;\n/gm, '')
-        .replace(/^var RUNTIME_PACKAGE_VERSION = .*;\n/gm, '')
-        .replace(/\n {2}RUNTIME_PACKAGE_VERSION,\n/, '\n');
-    return `${versionLine}${stamp}${provenance}${withoutStamp}`;
+    return `${versionLine}${artifactHashLine}${stamp}${provenance}${withoutStamp}`;
 }

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const PACKAGE_VERSION = "0.9.0";
+export declare const PACKAGE_VERSION = "0.9.2";

package/dist/version.js

@@ -1,2 +1,2 @@
 // Generated by scripts/sync-version.mjs — do not edit.
-export const PACKAGE_VERSION = '0.9.0';
+export const PACKAGE_VERSION = '0.9.2';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@guilz-dev/belay",
-  "version": "0.9.0",
+  "version": "0.9.2",
   "description": "Belay-style approval and audit gating for agent runtimes.",
   "type": "module",
   "license": "MIT",
@@ -57,6 +57,7 @@
     "typecheck": "tsc --noEmit",
     "test": "pnpm build && vitest run",
     "test:structural": "pnpm build && vitest run src/__tests__/verdict/structural-suite.test.ts",
+    "test:docker": "pnpm build && vitest run src/__tests__/capability/boundary-container-isolation.test.ts src/__tests__/capability/boundary-driver-container.test.ts",
     "test:stable": "pnpm build && vitest run && vitest run && vitest run",
     "corpus": "pnpm build && node scripts/corpus.mjs",
     "probe:adversarial": "pnpm build && node scripts/adversarial-probe.mjs",