@jinn-network/client 0.1.2 → 0.1.3-canary.24b69ea4

package/dist/trajectory/schema.d.ts

@@ -50,6 +50,7 @@ export declare const SpanSchema: z.ZodObject<{
         message?: string | undefined;
     };
     kind: "INTERNAL" | "CLIENT" | "SERVER" | "PRODUCER" | "CONSUMER";
+    spanId: string;
     events: {
         name: string;
         timeUnixNano: string;
@@ -57,7 +58,6 @@ export declare const SpanSchema: z.ZodObject<{
     }[];
     attributes: Record<string, unknown>;
     traceId: string;
-    spanId: string;
     parentSpanId: string | null;
     startTimeUnixNano: string;
     endTimeUnixNano: string;
@@ -68,6 +68,7 @@ export declare const SpanSchema: z.ZodObject<{
         message?: string | undefined;
     };
     kind: "INTERNAL" | "CLIENT" | "SERVER" | "PRODUCER" | "CONSUMER";
+    spanId: string;
     events: {
         name: string;
         timeUnixNano: string;
@@ -75,7 +76,6 @@ export declare const SpanSchema: z.ZodObject<{
     }[];
     attributes: Record<string, unknown>;
     traceId: string;
-    spanId: string;
     parentSpanId: string | null;
     startTimeUnixNano: string;
     endTimeUnixNano: string;
@@ -162,6 +162,7 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
             message?: string | undefined;
         };
         kind: "INTERNAL" | "CLIENT" | "SERVER" | "PRODUCER" | "CONSUMER";
+        spanId: string;
         events: {
             name: string;
             timeUnixNano: string;
@@ -169,7 +170,6 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
         }[];
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
@@ -180,6 +180,7 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
             message?: string | undefined;
         };
         kind: "INTERNAL" | "CLIENT" | "SERVER" | "PRODUCER" | "CONSUMER";
+        spanId: string;
         events: {
             name: string;
             timeUnixNano: string;
@@ -187,7 +188,6 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
         }[];
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
@@ -253,7 +253,6 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
         sig: string;
     };
     schemaVersion: "jinn.trajectory.v1";
-    parentEnvelopeCid: string | null;
     spans: {
         name: string;
         status: {
@@ -261,6 +260,7 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
             message?: string | undefined;
         };
         kind: "INTERNAL" | "CLIENT" | "SERVER" | "PRODUCER" | "CONSUMER";
+        spanId: string;
         events: {
             name: string;
             timeUnixNano: string;
@@ -268,12 +268,12 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
         }[];
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
     }[];
     runId: string;
+    parentEnvelopeCid: string | null;
     redactionManifest: {
         spans: {
             spanId: string;
@@ -289,7 +289,6 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
         sig: string;
     };
     schemaVersion: "jinn.trajectory.v1";
-    parentEnvelopeCid: string | null;
     spans: {
         name: string;
         status: {
@@ -297,6 +296,7 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
             message?: string | undefined;
         };
         kind: "INTERNAL" | "CLIENT" | "SERVER" | "PRODUCER" | "CONSUMER";
+        spanId: string;
         events: {
             name: string;
             timeUnixNano: string;
@@ -304,12 +304,12 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
         }[];
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
     }[];
     runId: string;
+    parentEnvelopeCid: string | null;
     redactionManifest: {
         spans: {
             spanId: string;
@@ -363,6 +363,7 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
             message?: string | undefined;
         };
         kind: "INTERNAL" | "CLIENT" | "SERVER" | "PRODUCER" | "CONSUMER";
+        spanId: string;
         events: {
             name: string;
             timeUnixNano: string;
@@ -370,7 +371,6 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
         }[];
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
@@ -381,6 +381,7 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
             message?: string | undefined;
         };
         kind: "INTERNAL" | "CLIENT" | "SERVER" | "PRODUCER" | "CONSUMER";
+        spanId: string;
         events: {
             name: string;
             timeUnixNano: string;
@@ -388,7 +389,6 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
         }[];
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
@@ -448,7 +448,6 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
     }>;
 }, "signature">, "strip", z.ZodTypeAny, {
     schemaVersion: "jinn.trajectory.v1";
-    parentEnvelopeCid: string | null;
     spans: {
         name: string;
         status: {
@@ -456,6 +455,7 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
             message?: string | undefined;
         };
         kind: "INTERNAL" | "CLIENT" | "SERVER" | "PRODUCER" | "CONSUMER";
+        spanId: string;
         events: {
             name: string;
             timeUnixNano: string;
@@ -463,12 +463,12 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
         }[];
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
     }[];
     runId: string;
+    parentEnvelopeCid: string | null;
     redactionManifest: {
         spans: {
             spanId: string;
@@ -478,7 +478,6 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
     };
 }, {
     schemaVersion: "jinn.trajectory.v1";
-    parentEnvelopeCid: string | null;
     spans: {
         name: string;
         status: {
@@ -486,6 +485,7 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
             message?: string | undefined;
         };
         kind: "INTERNAL" | "CLIENT" | "SERVER" | "PRODUCER" | "CONSUMER";
+        spanId: string;
         events: {
             name: string;
             timeUnixNano: string;
@@ -493,12 +493,12 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
         }[];
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
     }[];
     runId: string;
+    parentEnvelopeCid: string | null;
     redactionManifest: {
         spans: {
             spanId: string;
@@ -508,3 +508,91 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
     };
 }>;
 export type UnsignedTrajectory = z.infer<typeof UnsignedTrajectorySchema>;
+/**
+ * Per-run capture manifest — records the operator's authorisation and
+ * coarse harness-bundle metadata for telemetry capture. v0 deliberately
+ * keeps operator control at the bundle level (no per-file curation) per
+ * DR-2026-05-07-g; the audit surface is "what did the operator authorise
+ * the daemon to read?" not "what did the daemon ultimately read?"
+ *
+ * Spec: spec/2026-05-07-telemetry-collector-and-task-generator.md §3.3
+ */
+export declare const CaptureManifestSchema: z.ZodObject<{
+    scrubProcessors: z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        version: z.ZodString;
+        config: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    }, "strip", z.ZodTypeAny, {
+        name: string;
+        version: string;
+        config?: Record<string, unknown> | undefined;
+    }, {
+        name: string;
+        version: string;
+        config?: Record<string, unknown> | undefined;
+    }>, "many">;
+    reviewedBy: z.ZodObject<{
+        safeAddress: z.ZodString;
+        reviewedAt: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        safeAddress: string;
+        reviewedAt: string;
+    }, {
+        safeAddress: string;
+        reviewedAt: string;
+    }>;
+    trustedRepoToggle: z.ZodBoolean;
+    harnessBundle: z.ZodObject<{
+        included: z.ZodBoolean;
+        sha256: z.ZodString;
+        allowedDirectoriesHash: z.ZodString;
+        capturePath: z.ZodEnum<["A", "B", "C", "D"]>;
+    }, "strip", z.ZodTypeAny, {
+        sha256: string;
+        included: boolean;
+        allowedDirectoriesHash: string;
+        capturePath: "A" | "B" | "C" | "D";
+    }, {
+        sha256: string;
+        included: boolean;
+        allowedDirectoriesHash: string;
+        capturePath: "A" | "B" | "C" | "D";
+    }>;
+}, "strip", z.ZodTypeAny, {
+    scrubProcessors: {
+        name: string;
+        version: string;
+        config?: Record<string, unknown> | undefined;
+    }[];
+    reviewedBy: {
+        safeAddress: string;
+        reviewedAt: string;
+    };
+    trustedRepoToggle: boolean;
+    harnessBundle: {
+        sha256: string;
+        included: boolean;
+        allowedDirectoriesHash: string;
+        capturePath: "A" | "B" | "C" | "D";
+    };
+}, {
+    scrubProcessors: {
+        name: string;
+        version: string;
+        config?: Record<string, unknown> | undefined;
+    }[];
+    reviewedBy: {
+        safeAddress: string;
+        reviewedAt: string;
+    };
+    trustedRepoToggle: boolean;
+    harnessBundle: {
+        sha256: string;
+        included: boolean;
+        allowedDirectoriesHash: string;
+        capturePath: "A" | "B" | "C" | "D";
+    };
+}>;
+export type CaptureManifest = z.infer<typeof CaptureManifestSchema>;
+/** sha256 of an empty (no-files) bundle. Used when the operator opts out of harness-bundle capture. */
+export declare const EMPTY_BUNDLE_SHA256 = "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855";

package/dist/trajectory/schema.js

@@ -71,4 +71,33 @@ export const JinnTrajectoryV1Schema = z.object({
 });
 /** Unsigned form — what we hash + sign. */
 export const UnsignedTrajectorySchema = JinnTrajectoryV1Schema.omit({ signature: true });
+/**
+ * Per-run capture manifest — records the operator's authorisation and
+ * coarse harness-bundle metadata for telemetry capture. v0 deliberately
+ * keeps operator control at the bundle level (no per-file curation) per
+ * DR-2026-05-07-g; the audit surface is "what did the operator authorise
+ * the daemon to read?" not "what did the daemon ultimately read?"
+ *
+ * Spec: spec/2026-05-07-telemetry-collector-and-task-generator.md §3.3
+ */
+export const CaptureManifestSchema = z.object({
+    scrubProcessors: z.array(z.object({
+        name: z.string(),
+        version: z.string(),
+        config: z.record(z.unknown()).optional(),
+    })),
+    reviewedBy: z.object({
+        safeAddress: z.string(),
+        reviewedAt: z.string().datetime(),
+    }),
+    trustedRepoToggle: z.boolean(),
+    harnessBundle: z.object({
+        included: z.boolean(),
+        sha256: z.string().regex(/^[0-9a-f]{64}$/),
+        allowedDirectoriesHash: z.string().regex(/^[0-9a-f]{64}$/),
+        capturePath: z.enum(['A', 'B', 'C', 'D']),
+    }),
+});
+/** sha256 of an empty (no-files) bundle. Used when the operator opts out of harness-bundle capture. */
+export const EMPTY_BUNDLE_SHA256 = 'e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855';
 //# sourceMappingURL=schema.js.map

package/dist/trajectory/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/trajectory/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,YAAY;IACZ,eAAe;IACf,eAAe;IACf,oBAAoB;IACpB,eAAe;IACf,uBAAuB;CACxB,CAAC,CAAC;AAGH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACtE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,UAAU,EAAE,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,KAAK,QAAQ,EAAE;QACtD,OAAO,EAAE,mCAAmC;KAC7C,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,KAAK,QAAQ,EAAE;QACzD,OAAO,EAAE,sCAAsC;KAChD,CAAC;IACJ,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC5B,MAAM,EAAE,gBAAgB;CACzB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,CACZ,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC1C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAClC,CAAC,CACH;IACD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAChD,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,EACvF,EAAE,OAAO,EAAE,yDAAyD,EAAE,CACvE,CAAC;AAGJ,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,eAAe;IACrB,GAAG,EAAE,eAAe;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC1B,iBAAiB,EAAE,uBAAuB;IAC1C,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAGH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/trajectory/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,YAAY;IACZ,eAAe;IACf,eAAe;IACf,oBAAoB;IACpB,eAAe;IACf,uBAAuB;CACxB,CAAC,CAAC;AAGH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC,CAAC;AAEH,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,yDAAyD;AACzD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE;IAC3D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;IACtE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE;IAC7B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,UAAU,EAAE,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,gBAAgB,CAAC,KAAK,QAAQ,EAAE;QACtD,OAAO,EAAE,mCAAmC;KAC7C,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,mBAAmB,CAAC,KAAK,QAAQ,EAAE;QACzD,OAAO,EAAE,sCAAsC;KAChD,CAAC;IACJ,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC5B,MAAM,EAAE,gBAAgB;CACzB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,KAAK,CACZ,CAAC,CAAC,MAAM,CAAC;QACP,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC1C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KAClC,CAAC,CACH;IACD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAChD,CAAC;KACD,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,EACvF,EAAE,OAAO,EAAE,yDAAyD,EAAE,CACvE,CAAC;AAGJ,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC5B,MAAM,EAAE,eAAe;IACvB,IAAI,EAAE,eAAe;IACrB,GAAG,EAAE,eAAe;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC1B,iBAAiB,EAAE,uBAAuB;IAC1C,SAAS,EAAE,eAAe;CAC3B,CAAC,CAAC;AAGH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAGzF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;QACnB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;KACzC,CAAC,CAAC;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;QACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAClC,CAAC;IACF,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;QACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC1C,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC1D,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;KAC1C,CAAC;CACH,CAAC,CAAC;AAIH,uGAAuG;AACvG,MAAM,CAAC,MAAM,mBAAmB,GAC9B,kEAAkE,CAAC"}

package/dist/trajectory/secret-scrub.d.ts

@@ -0,0 +1,32 @@
+/**
+ * V1 minimum secret-scrub conformance.
+ *
+ * Scope: §4.3 bullet — "attribute-name allowlist drops values for known
+ * credential fields (*.authorization, *.apiKey, *.bearer, *.password,
+ * *.secret, *.token, *.privateKey, plus MCP tool args matching these
+ * patterns). Scrubbed attributes are replaced with <redacted:name>
+ * markers; a run-level redaction manifest records *which* fields were
+ * scrubbed (not values) and is signed alongside spans."
+ *
+ * This is safety, not access control. IP-protection redaction lives in
+ * the deferred gating epic per scope §5.
+ */
+/** V1 pattern set. Case-insensitive; matches at end-of-key or after a dot. */
+export declare const SECRET_NAME_PATTERNS: readonly RegExp[];
+export declare function isSecretKey(key: string): boolean;
+/**
+ * Walk a flat attribute map and replace secret values with a marker.
+ * Returns a new object plus the list of keys that were redacted.
+ */
+export declare function scrubAttributes<T extends Record<string, unknown>>(attrs: T): {
+    scrubbed: Record<string, unknown>;
+    redactedKeys: string[];
+};
+/**
+ * Scrub MCP tool call arguments by argument name. V1 is top-level-only;
+ * deep recursion is Plan F tightening.
+ */
+export declare function scrubMcpArgs(args: Record<string, unknown>): {
+    scrubbed: Record<string, unknown>;
+    redactedKeys: string[];
+};

package/dist/trajectory/secret-scrub.js

@@ -0,0 +1,51 @@
+/**
+ * V1 minimum secret-scrub conformance.
+ *
+ * Scope: §4.3 bullet — "attribute-name allowlist drops values for known
+ * credential fields (*.authorization, *.apiKey, *.bearer, *.password,
+ * *.secret, *.token, *.privateKey, plus MCP tool args matching these
+ * patterns). Scrubbed attributes are replaced with <redacted:name>
+ * markers; a run-level redaction manifest records *which* fields were
+ * scrubbed (not values) and is signed alongside spans."
+ *
+ * This is safety, not access control. IP-protection redaction lives in
+ * the deferred gating epic per scope §5.
+ */
+/** V1 pattern set. Case-insensitive; matches at end-of-key or after a dot. */
+export const SECRET_NAME_PATTERNS = [
+    /(^|\.)authorization$/i,
+    /(^|\.)apikey$/i,
+    /(^|\.)api[_-]?key$/i,
+    /(^|\.)bearer$/i,
+    /(^|\.)password$/i,
+    /(^|\.)secret$/i,
+    /(^|\.)token$/i,
+    /(^|\.)privatekey$/i,
+    /(^|\.)private[_-]?key$/i,
+];
+export function isSecretKey(key) {
+    return SECRET_NAME_PATTERNS.some((p) => p.test(key));
+}
+/**
+ * Walk a flat attribute map and replace secret values with a marker.
+ * Returns a new object plus the list of keys that were redacted.
+ */
+export function scrubAttributes(attrs) {
+    const scrubbed = { ...attrs };
+    const redactedKeys = [];
+    for (const [k, _v] of Object.entries(attrs)) {
+        if (isSecretKey(k)) {
+            scrubbed[k] = `<redacted:${k}>`;
+            redactedKeys.push(k);
+        }
+    }
+    return { scrubbed, redactedKeys };
+}
+/**
+ * Scrub MCP tool call arguments by argument name. V1 is top-level-only;
+ * deep recursion is Plan F tightening.
+ */
+export function scrubMcpArgs(args) {
+    return scrubAttributes(args);
+}
+//# sourceMappingURL=secret-scrub.js.map

package/dist/trajectory/secret-scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scrub.js","sourceRoot":"","sources":["../../src/trajectory/secret-scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,uBAAuB;IACvB,gBAAgB;IAChB,qBAAqB;IACrB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,oBAAoB;IACpB,yBAAyB;CAC1B,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAQ;IAER,MAAM,QAAQ,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACvD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,QAAQ,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC;YAChC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,IAA6B;IAE7B,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/trajectory/span-profile.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Normative span profile per scope §3.1 K6 + §4.3.
+ *
+ * For each jinn.span.kind, declares required attribute keys. Consumers
+ * (Plan F conformance suite, manifest-validation layer) call
+ * validateSpanProfile to check each span in a trajectory.
+ *
+ * Required attributes at V1 (all tiers). Attested-tier extensions (TLS
+ * transcript CIDs) layer on top in V2.
+ */
+import type { Span, JinnSpanKind } from './schema.js';
+export declare const SPAN_PROFILE: Record<JinnSpanKind, readonly string[]>;
+export type SpanProfileResult = {
+    valid: true;
+} | {
+    valid: false;
+    missing: string[];
+    kind: string;
+};
+export declare function validateSpanProfile(span: Span): SpanProfileResult;
+/** Bulk-validate all spans in a trajectory. Returns first failure, or null if all pass. */
+export declare function findFirstProfileViolation(spans: Span[]): {
+    span: Span;
+    result: Exclude<SpanProfileResult, {
+        valid: true;
+    }>;
+} | null;

package/dist/trajectory/span-profile.js

@@ -0,0 +1,51 @@
+/**
+ * Normative span profile per scope §3.1 K6 + §4.3.
+ *
+ * For each jinn.span.kind, declares required attribute keys. Consumers
+ * (Plan F conformance suite, manifest-validation layer) call
+ * validateSpanProfile to check each span in a trajectory.
+ *
+ * Required attributes at V1 (all tiers). Attested-tier extensions (TLS
+ * transcript CIDs) layer on top in V2.
+ */
+export const SPAN_PROFILE = {
+    'jinn.phase': ['jinn.phase.name'],
+    'jinn.llm_call': [
+        'gen_ai.system',
+        'gen_ai.request.model',
+        'gen_ai.usage.input_tokens',
+        'gen_ai.usage.output_tokens',
+    ],
+    'jinn.mcp_call': ['mcp.server.name', 'mcp.tool.name'],
+    'jinn.artifact.emit': [
+        'jinn.artifact.cid',
+        'jinn.artifact.artifactType',
+        'jinn.artifact.sha256',
+    ],
+    'jinn.venue_io': [
+        'net.peer.name',
+        'http.request.method',
+        'http.response.status_code',
+    ],
+    'jinn.state_transition': ['jinn.state.from', 'jinn.state.to'],
+};
+export function validateSpanProfile(span) {
+    const kind = span.attributes['jinn.span.kind'];
+    const required = SPAN_PROFILE[kind];
+    if (!required)
+        return { valid: false, missing: ['<unknown-kind>'], kind };
+    const missing = required.filter((k) => span.attributes[k] === undefined);
+    if (missing.length > 0)
+        return { valid: false, missing, kind };
+    return { valid: true };
+}
+/** Bulk-validate all spans in a trajectory. Returns first failure, or null if all pass. */
+export function findFirstProfileViolation(spans) {
+    for (const s of spans) {
+        const r = validateSpanProfile(s);
+        if (!r.valid)
+            return { span: s, result: r };
+    }
+    return null;
+}
+//# sourceMappingURL=span-profile.js.map

package/dist/trajectory/span-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"span-profile.js","sourceRoot":"","sources":["../../src/trajectory/span-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,CAAC,MAAM,YAAY,GAA4C;IACnE,YAAY,EAAE,CAAC,iBAAiB,CAAC;IACjC,eAAe,EAAE;QACf,eAAe;QACf,sBAAsB;QACtB,2BAA2B;QAC3B,4BAA4B;KAC7B;IACD,eAAe,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;IACrD,oBAAoB,EAAE;QACpB,mBAAmB;QACnB,4BAA4B;QAC5B,sBAAsB;KACvB;IACD,eAAe,EAAE;QACf,eAAe;QACf,qBAAqB;QACrB,2BAA2B;KAC5B;IACD,uBAAuB,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;CAC9D,CAAC;AAMF,MAAM,UAAU,mBAAmB,CAAC,IAAU;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAiB,CAAC;IAC/D,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1E,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,yBAAyB,CAAC,KAAa;IAIrD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/trajectory/synthetic-span-builder.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Synthetic span builder — bridges canonical TranscriptEvents (Task 3.1)
+ * into OTel spans landing in the embedded receiver (Task 1.1).
+ *
+ * Path B (transcript-tail) traversal: a per-tool parser observes new bytes
+ * appended to a transcript file, normalises into TranscriptEvent, and feeds
+ * each event through this module. The result is a span emitted via OTLP/HTTP
+ * to the embedded receiver, which dispatches it through the same processor
+ * stack as path-A native OTel spans (identity-scrub, path-scrub,
+ * credential-scrub, manifest-builder, sqlite-exporter). That uniformity is
+ * the whole point — by the time scrubbing + persistence run, path provenance
+ * has been erased.
+ *
+ * Per-session traceId stability is provided via a session-root span: the
+ * first event for a sessionId starts a long-lived "session" span; every
+ * subsequent event for that session is emitted as a child within the
+ * session's active context. Child spans inherit the session's traceId. The
+ * session-root span is held open for the life of the provider; the watcher
+ * dispatcher (Task 3.9) will own end-of-session lifecycle later.
+ *
+ * Spec: spec/2026-05-07-telemetry-collector-and-task-generator.md §4.2 path B.
+ */
+import { type Span, type Tracer } from '@opentelemetry/api';
+import type { TranscriptEvent, TranscriptParser } from './transcript-parsers/types.js';
+export interface SyntheticSpanProviderConfig {
+    /**
+     * Where to export spans. Defaults to the OTLP/HTTP exporter's own default
+     * (`http://localhost:4318/v1/traces`). In tests, point at the embedded
+     * receiver's ephemeral httpPort.
+     */
+    otlpHttpEndpoint?: string;
+}
+export interface SyntheticSpanProvider {
+    /** Force-flush pending spans to the OTLP exporter. Safe to call repeatedly. */
+    flush(): Promise<void>;
+    /** Shut down the provider — ends any open session-root spans, flushes, closes the exporter. */
+    shutdown(): Promise<void>;
+    /** @internal Tracer used by emitSyntheticSpan; exposed for testability. */
+    readonly tracer: Tracer;
+    /** @internal Map<sessionId, session-root span>. */
+    readonly sessionRoots: Map<string, Span>;
+}
+export type TranscriptTool = TranscriptParser['tool'];
+export interface EmitInput {
+    tool: TranscriptTool;
+    sessionId: string;
+    event: TranscriptEvent;
+}
+export declare function startSyntheticSpanProvider(cfg?: SyntheticSpanProviderConfig): SyntheticSpanProvider;
+export declare function emitSyntheticSpan(provider: SyntheticSpanProvider, input: EmitInput): void;