@jinn-network/client 0.1.2 → 0.1.3-canary.262e5cda

package/dist/trajectory/collector.d.ts

@@ -0,0 +1,49 @@
+/**
+ * TrajectoryCollector — in-memory span accumulator.
+ *
+ * Invariants (enforced on add):
+ *   - span.traceId is shared across all spans in a run (set at construction)
+ *   - span.spanId is 16 hex chars unique per span
+ *   - span.attributes['jinn.prevSpanHash'] is set to genesis (for first span)
+ *     or the keccak256(JCS(previous finalized span)) on add — callers do NOT
+ *     set it.
+ *   - span.attributes['jinn.span.kind'] MUST be supplied by the caller.
+ *   - secrets are scrubbed from BOTH span.attributes AND span.events[*].attributes
+ *     before the span is appended; redacted keys are recorded against this
+ *     span's spanId in the redactionManifest.
+ */
+import type { Span, RedactionManifest } from './schema.js';
+export interface CollectorInit {
+    intentCid: string;
+    runId: string;
+    /** Override for tests. Defaults to randomBytes(16). */
+    traceId?: string;
+}
+/** Caller-supplied span input. Omits chain + id fields the collector assigns. */
+export interface SpanInput {
+    name: string;
+    kind: Span['kind'];
+    startTimeUnixNano: string;
+    endTimeUnixNano: string;
+    attributes: Record<string, unknown>;
+    events: Span['events'];
+    status: Span['status'];
+    parentSpanId?: string | null;
+}
+export declare class TrajectoryCollector {
+    readonly runId: string;
+    readonly intentCid: string;
+    private readonly traceId;
+    private readonly spans;
+    private readonly redactionEntries;
+    private totalRedactions;
+    private lastSpanHash;
+    constructor(init: CollectorInit);
+    /** Append a span; returns the finalized span (with assigned ids + chain hash). */
+    addSpan(input: SpanInput): Span;
+    /** Immutable snapshot for emit / tests. */
+    snapshot(): {
+        spans: Span[];
+        redactionManifest: RedactionManifest;
+    };
+}

package/dist/trajectory/collector.js

@@ -0,0 +1,86 @@
+/**
+ * TrajectoryCollector — in-memory span accumulator.
+ *
+ * Invariants (enforced on add):
+ *   - span.traceId is shared across all spans in a run (set at construction)
+ *   - span.spanId is 16 hex chars unique per span
+ *   - span.attributes['jinn.prevSpanHash'] is set to genesis (for first span)
+ *     or the keccak256(JCS(previous finalized span)) on add — callers do NOT
+ *     set it.
+ *   - span.attributes['jinn.span.kind'] MUST be supplied by the caller.
+ *   - secrets are scrubbed from BOTH span.attributes AND span.events[*].attributes
+ *     before the span is appended; redacted keys are recorded against this
+ *     span's spanId in the redactionManifest.
+ */
+import { randomBytes } from 'node:crypto';
+import { computeGenesisHash, computePrevSpanHash } from './hash-chain.js';
+import { scrubAttributes } from './secret-scrub.js';
+function hex(bytes) {
+    return randomBytes(bytes).toString('hex');
+}
+export class TrajectoryCollector {
+    runId;
+    intentCid;
+    traceId;
+    spans = [];
+    redactionEntries = [];
+    totalRedactions = 0;
+    lastSpanHash;
+    constructor(init) {
+        this.runId = init.runId;
+        this.intentCid = init.intentCid;
+        this.traceId = init.traceId ?? hex(16);
+        this.lastSpanHash = computeGenesisHash(init.intentCid);
+    }
+    /** Append a span; returns the finalized span (with assigned ids + chain hash). */
+    addSpan(input) {
+        if (typeof input.attributes['jinn.span.kind'] !== 'string') {
+            throw new Error('TrajectoryCollector.addSpan: jinn.span.kind attribute required');
+        }
+        const { scrubbed, redactedKeys } = scrubAttributes(input.attributes);
+        // Scrub event attributes — raw subprocess output (and any other event data)
+        // can contain tokens, passwords, or private keys in their attribute values.
+        const scrubbedEvents = input.events.map((event) => {
+            if (!event.attributes || Object.keys(event.attributes).length === 0)
+                return event;
+            const { scrubbed: scrubbedAttrs, redactedKeys: eventRedacted } = scrubAttributes(event.attributes);
+            for (const k of eventRedacted) {
+                redactedKeys.push(k);
+            }
+            return { ...event, attributes: scrubbedAttrs };
+        });
+        const span = {
+            traceId: this.traceId,
+            spanId: hex(8),
+            parentSpanId: input.parentSpanId ?? null,
+            name: input.name,
+            kind: input.kind,
+            startTimeUnixNano: input.startTimeUnixNano,
+            endTimeUnixNano: input.endTimeUnixNano,
+            attributes: {
+                ...scrubbed,
+                'jinn.prevSpanHash': this.lastSpanHash,
+            },
+            events: scrubbedEvents,
+            status: input.status,
+        };
+        this.spans.push(span);
+        this.lastSpanHash = computePrevSpanHash(span);
+        if (redactedKeys.length > 0) {
+            this.redactionEntries.push({ spanId: span.spanId, redactedKeys });
+            this.totalRedactions += redactedKeys.length;
+        }
+        return span;
+    }
+    /** Immutable snapshot for emit / tests. */
+    snapshot() {
+        return {
+            spans: this.spans.slice(),
+            redactionManifest: {
+                spans: this.redactionEntries.slice(),
+                totalRedactions: this.totalRedactions,
+            },
+        };
+    }
+}
+//# sourceMappingURL=collector.js.map

package/dist/trajectory/collector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collector.js","sourceRoot":"","sources":["../../src/trajectory/collector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,SAAS,GAAG,CAAC,KAAa;IACxB,OAAO,WAAW,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAqBD,MAAM,OAAO,mBAAmB;IACrB,KAAK,CAAS;IACd,SAAS,CAAS;IACV,OAAO,CAAS;IAChB,KAAK,GAAW,EAAE,CAAC;IACnB,gBAAgB,GAA+B,EAAE,CAAC;IAC3D,eAAe,GAAG,CAAC,CAAC;IACpB,YAAY,CAAS;IAE7B,YAAY,IAAmB;QAC7B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAChC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;QACvC,IAAI,CAAC,YAAY,GAAG,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,kFAAkF;IAClF,OAAO,CAAC,KAAgB;QACtB,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC3D,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QACpF,CAAC;QAED,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAErE,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,cAAc,GAAmB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YAChE,IAAI,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAClF,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE,GAAG,eAAe,CAC9E,KAAK,CAAC,UAAqC,CAC5C,CAAC;YACF,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;gBAC9B,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvB,CAAC;YACD,OAAO,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,MAAM,IAAI,GAAS;YACjB,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;YACd,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;YACxC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;YAC1C,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,UAAU,EAAE;gBACV,GAAG,QAAQ;gBACX,mBAAmB,EAAE,IAAI,CAAC,YAAY;aACvC;YACD,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,KAAK,CAAC,MAAM;SACrB,CAAC;QAEF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAE9C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;YAClE,IAAI,CAAC,eAAe,IAAI,YAAY,CAAC,MAAM,CAAC;QAC9C,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2CAA2C;IAC3C,QAAQ;QACN,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;YACzB,iBAAiB,EAAE;gBACjB,KAAK,EAAE,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE;gBACpC,eAAe,EAAE,IAAI,CAAC,eAAe;aACtC;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/trajectory/emit.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Emit a signed jinn.trajectory.v1 blob and upload it to IPFS.
+ *
+ * Signing mirrors envelope-assembly.ts (§4.2a mechanics):
+ *   hash = keccak256(JCS(trajectory minus signature))
+ *   → signed with agent EOA key
+ *   → signed blob uploaded to IPFS
+ *   → { cid, sha256 } returned for the envelope.
+ */
+import { type Hex } from 'viem';
+import type { TrajectoryCollector } from './collector.js';
+import type { JinnTrajectoryV1 } from './schema.js';
+export interface EmitTrajectoryParams {
+    collector: TrajectoryCollector;
+    runId: string;
+    /** Set to the parent restoration envelope CID for a verdict trajectory; null otherwise. */
+    parentEnvelopeCid?: string | null;
+    signerPrivateKey: Hex;
+    signerAddress: `0x${string}`;
+    ipfsRegistryUrl: string;
+}
+export interface EmitTrajectoryResult {
+    cid: string;
+    sha256: string;
+    signed: JinnTrajectoryV1;
+}
+export declare function emitTrajectory(p: EmitTrajectoryParams): Promise<EmitTrajectoryResult>;

package/dist/trajectory/emit.js

@@ -0,0 +1,40 @@
+/**
+ * Emit a signed jinn.trajectory.v1 blob and upload it to IPFS.
+ *
+ * Signing mirrors envelope-assembly.ts (§4.2a mechanics):
+ *   hash = keccak256(JCS(trajectory minus signature))
+ *   → signed with agent EOA key
+ *   → signed blob uploaded to IPFS
+ *   → { cid, sha256 } returned for the envelope.
+ */
+import { createHash } from 'node:crypto';
+import { signCanonical } from '../restorer/engine/signing.js';
+import { uploadToIpfs } from '../adapters/mech/ipfs.js';
+function sha256Hex(bytes) {
+    return createHash('sha256').update(bytes, 'utf8').digest('hex');
+}
+export async function emitTrajectory(p) {
+    const snap = p.collector.snapshot();
+    const unsigned = {
+        schemaVersion: 'jinn.trajectory.v1',
+        runId: p.runId,
+        parentEnvelopeCid: p.parentEnvelopeCid ?? null,
+        spans: snap.spans,
+        redactionManifest: snap.redactionManifest,
+    };
+    const sig = await signCanonical(unsigned, p.signerPrivateKey, p.signerAddress);
+    const signed = {
+        ...unsigned,
+        signature: {
+            algo: 'secp256k1',
+            signer: p.signerAddress,
+            hash: sig.hash,
+            sig: sig.sig,
+        },
+    };
+    const serialized = JSON.stringify(signed);
+    const sha256 = sha256Hex(serialized);
+    const cid = await uploadToIpfs(p.ipfsRegistryUrl, signed);
+    return { cid, sha256, signed };
+}
+//# sourceMappingURL=emit.js.map

package/dist/trajectory/emit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../src/trajectory/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAE9D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAoBxD,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,CAAuB;IAEvB,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG;QACf,aAAa,EAAE,oBAA6B;QAC5C,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;QAC9C,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;KAC1C,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IAE/E,MAAM,MAAM,GAAqB;QAC/B,GAAG,QAAQ;QACX,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,CAAC,CAAC,aAAa;YACvB,IAAI,EAAE,GAAG,CAAC,IAAW;YACrB,GAAG,EAAE,GAAG,CAAC,GAAU;SACpB;KACF,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAE1D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC"}

package/dist/trajectory/hash-chain.d.ts

@@ -0,0 +1,18 @@
+/**
+ * In-run per-span hash chain.
+ *
+ * Scope: §3.1 trajectory-signing-granularity row — "each span carries
+ * jinn.prevSpanHash linking to the previous span's hash; first span
+ * links to a run-start genesis value derived from envelope intent CID."
+ *
+ * Motivation: a crashed run that failed to upload the signed trajectory
+ * blob still produces a verifiable-as-prefix trace if spans are recovered
+ * elsewhere (enclave memory dump, challenger capture). Partial authenticity
+ * is not zero.
+ */
+import { type Hex } from 'viem';
+import type { Span } from './schema.js';
+/** Genesis value for the chain — keccak256(JCS({runStart: intentCid})). */
+export declare function computeGenesisHash(intentCid: string): Hex;
+/** Hash of a finalized span, to be set as jinn.prevSpanHash on the next one. */
+export declare function computePrevSpanHash(span: Span): Hex;

package/dist/trajectory/hash-chain.js

@@ -0,0 +1,23 @@
+/**
+ * In-run per-span hash chain.
+ *
+ * Scope: §3.1 trajectory-signing-granularity row — "each span carries
+ * jinn.prevSpanHash linking to the previous span's hash; first span
+ * links to a run-start genesis value derived from envelope intent CID."
+ *
+ * Motivation: a crashed run that failed to upload the signed trajectory
+ * blob still produces a verifiable-as-prefix trace if spans are recovered
+ * elsewhere (enclave memory dump, challenger capture). Partial authenticity
+ * is not zero.
+ */
+import { keccak256, toBytes } from 'viem';
+import { canonicalJson } from '../restorer/engine/canonical-json.js';
+/** Genesis value for the chain — keccak256(JCS({runStart: intentCid})). */
+export function computeGenesisHash(intentCid) {
+    return keccak256(toBytes(canonicalJson({ runStart: intentCid })));
+}
+/** Hash of a finalized span, to be set as jinn.prevSpanHash on the next one. */
+export function computePrevSpanHash(span) {
+    return keccak256(toBytes(canonicalJson(span)));
+}
+//# sourceMappingURL=hash-chain.js.map

package/dist/trajectory/hash-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash-chain.js","sourceRoot":"","sources":["../../src/trajectory/hash-chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAY,MAAM,MAAM,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,sCAAsC,CAAC;AAGrE,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,OAAO,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,IAAU;IAC5C,OAAO,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC"}

package/dist/trajectory/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * trajectory/index.ts — re-exports for consumers.
+ *
+ * Import path: '../../trajectory/index.js' (or '../trajectory/index.js' etc.)
+ * from any file within client/src/.
+ */
+export { TrajectoryCollector } from './collector.js';
+export type { CollectorInit, SpanInput } from './collector.js';
+export { emitTrajectory } from './emit.js';
+export type { EmitTrajectoryParams, EmitTrajectoryResult } from './emit.js';
+export { computeGenesisHash, computePrevSpanHash } from './hash-chain.js';
+export { JinnSpanKindSchema, SpanSchema, RedactionManifestSchema, JinnTrajectoryV1Schema, UnsignedTrajectorySchema, } from './schema.js';
+export type { JinnSpanKind, Span, RedactionManifest, JinnTrajectoryV1, UnsignedTrajectory, } from './schema.js';
+export { SECRET_NAME_PATTERNS, isSecretKey, scrubAttributes, scrubMcpArgs, } from './secret-scrub.js';
+export { SPAN_PROFILE, validateSpanProfile, findFirstProfileViolation, } from './span-profile.js';
+export type { SpanProfileResult } from './span-profile.js';
+export { tracedHttpCall } from './wrappers/http.js';
+export type { HttpRequestLike, HttpResponseLike, GenAiAttrs, TracedHttpCallParams, } from './wrappers/http.js';
+export { tracedMcpCall } from './wrappers/mcp.js';
+export type { TracedMcpCallParams } from './wrappers/mcp.js';
+export { tracedSpawn } from './wrappers/subprocess.js';
+export type { TracedSpawnParams, TracedSpawnResult } from './wrappers/subprocess.js';

package/dist/trajectory/index.js

@@ -0,0 +1,23 @@
+/**
+ * trajectory/index.ts — re-exports for consumers.
+ *
+ * Import path: '../../trajectory/index.js' (or '../trajectory/index.js' etc.)
+ * from any file within client/src/.
+ */
+// Collector + input type
+export { TrajectoryCollector } from './collector.js';
+// Emitter
+export { emitTrajectory } from './emit.js';
+// Hash chain helpers
+export { computeGenesisHash, computePrevSpanHash } from './hash-chain.js';
+// Schema types + validators
+export { JinnSpanKindSchema, SpanSchema, RedactionManifestSchema, JinnTrajectoryV1Schema, UnsignedTrajectorySchema, } from './schema.js';
+// Secret scrub helpers
+export { SECRET_NAME_PATTERNS, isSecretKey, scrubAttributes, scrubMcpArgs, } from './secret-scrub.js';
+// Span profile checker
+export { SPAN_PROFILE, validateSpanProfile, findFirstProfileViolation, } from './span-profile.js';
+// Traced I/O wrappers
+export { tracedHttpCall } from './wrappers/http.js';
+export { tracedMcpCall } from './wrappers/mcp.js';
+export { tracedSpawn } from './wrappers/subprocess.js';
+//# sourceMappingURL=index.js.map

package/dist/trajectory/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/trajectory/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,yBAAyB;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrD,UAAU;AACV,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG3C,qBAAqB;AACrB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,4BAA4B;AAC5B,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,GACzB,MAAM,aAAa,CAAC;AASrB,uBAAuB;AACvB,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,uBAAuB;AACvB,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAG3B,sBAAsB;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAQpD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC"}

package/dist/trajectory/schema.d.ts

@@ -55,9 +55,9 @@ export declare const SpanSchema: z.ZodObject<{
         timeUnixNano: string;
         attributes?: Record<string, unknown> | undefined;
     }[];
+    spanId: string;
     attributes: Record<string, unknown>;
     traceId: string;
-    spanId: string;
     parentSpanId: string | null;
     startTimeUnixNano: string;
     endTimeUnixNano: string;
@@ -73,9 +73,9 @@ export declare const SpanSchema: z.ZodObject<{
         timeUnixNano: string;
         attributes?: Record<string, unknown> | undefined;
     }[];
+    spanId: string;
     attributes: Record<string, unknown>;
     traceId: string;
-    spanId: string;
     parentSpanId: string | null;
     startTimeUnixNano: string;
     endTimeUnixNano: string;
@@ -167,9 +167,9 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
             timeUnixNano: string;
             attributes?: Record<string, unknown> | undefined;
         }[];
+        spanId: string;
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
@@ -185,9 +185,9 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
             timeUnixNano: string;
             attributes?: Record<string, unknown> | undefined;
         }[];
+        spanId: string;
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
@@ -253,7 +253,6 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
         sig: string;
     };
     schemaVersion: "jinn.trajectory.v1";
-    parentEnvelopeCid: string | null;
     spans: {
         name: string;
         status: {
@@ -266,14 +265,15 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
             timeUnixNano: string;
             attributes?: Record<string, unknown> | undefined;
         }[];
+        spanId: string;
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
     }[];
     runId: string;
+    parentEnvelopeCid: string | null;
     redactionManifest: {
         spans: {
             spanId: string;
@@ -289,7 +289,6 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
         sig: string;
     };
     schemaVersion: "jinn.trajectory.v1";
-    parentEnvelopeCid: string | null;
     spans: {
         name: string;
         status: {
@@ -302,14 +301,15 @@ export declare const JinnTrajectoryV1Schema: z.ZodObject<{
             timeUnixNano: string;
             attributes?: Record<string, unknown> | undefined;
         }[];
+        spanId: string;
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
     }[];
     runId: string;
+    parentEnvelopeCid: string | null;
     redactionManifest: {
         spans: {
             spanId: string;
@@ -368,9 +368,9 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
             timeUnixNano: string;
             attributes?: Record<string, unknown> | undefined;
         }[];
+        spanId: string;
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
@@ -386,9 +386,9 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
             timeUnixNano: string;
             attributes?: Record<string, unknown> | undefined;
         }[];
+        spanId: string;
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
@@ -448,7 +448,6 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
     }>;
 }, "signature">, "strip", z.ZodTypeAny, {
     schemaVersion: "jinn.trajectory.v1";
-    parentEnvelopeCid: string | null;
     spans: {
         name: string;
         status: {
@@ -461,14 +460,15 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
             timeUnixNano: string;
             attributes?: Record<string, unknown> | undefined;
         }[];
+        spanId: string;
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
     }[];
     runId: string;
+    parentEnvelopeCid: string | null;
     redactionManifest: {
         spans: {
             spanId: string;
@@ -478,7 +478,6 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
     };
 }, {
     schemaVersion: "jinn.trajectory.v1";
-    parentEnvelopeCid: string | null;
     spans: {
         name: string;
         status: {
@@ -491,14 +490,15 @@ export declare const UnsignedTrajectorySchema: z.ZodObject<Omit<{
             timeUnixNano: string;
             attributes?: Record<string, unknown> | undefined;
         }[];
+        spanId: string;
         attributes: Record<string, unknown>;
         traceId: string;
-        spanId: string;
         parentSpanId: string | null;
         startTimeUnixNano: string;
         endTimeUnixNano: string;
     }[];
     runId: string;
+    parentEnvelopeCid: string | null;
     redactionManifest: {
         spans: {
             spanId: string;

package/dist/trajectory/secret-scrub.d.ts

@@ -0,0 +1,32 @@
+/**
+ * V1 minimum secret-scrub conformance.
+ *
+ * Scope: §4.3 bullet — "attribute-name allowlist drops values for known
+ * credential fields (*.authorization, *.apiKey, *.bearer, *.password,
+ * *.secret, *.token, *.privateKey, plus MCP tool args matching these
+ * patterns). Scrubbed attributes are replaced with <redacted:name>
+ * markers; a run-level redaction manifest records *which* fields were
+ * scrubbed (not values) and is signed alongside spans."
+ *
+ * This is safety, not access control. IP-protection redaction lives in
+ * the deferred gating epic per scope §5.
+ */
+/** V1 pattern set. Case-insensitive; matches at end-of-key or after a dot. */
+export declare const SECRET_NAME_PATTERNS: readonly RegExp[];
+export declare function isSecretKey(key: string): boolean;
+/**
+ * Walk a flat attribute map and replace secret values with a marker.
+ * Returns a new object plus the list of keys that were redacted.
+ */
+export declare function scrubAttributes<T extends Record<string, unknown>>(attrs: T): {
+    scrubbed: Record<string, unknown>;
+    redactedKeys: string[];
+};
+/**
+ * Scrub MCP tool call arguments by argument name. V1 is top-level-only;
+ * deep recursion is Plan F tightening.
+ */
+export declare function scrubMcpArgs(args: Record<string, unknown>): {
+    scrubbed: Record<string, unknown>;
+    redactedKeys: string[];
+};

package/dist/trajectory/secret-scrub.js

@@ -0,0 +1,51 @@
+/**
+ * V1 minimum secret-scrub conformance.
+ *
+ * Scope: §4.3 bullet — "attribute-name allowlist drops values for known
+ * credential fields (*.authorization, *.apiKey, *.bearer, *.password,
+ * *.secret, *.token, *.privateKey, plus MCP tool args matching these
+ * patterns). Scrubbed attributes are replaced with <redacted:name>
+ * markers; a run-level redaction manifest records *which* fields were
+ * scrubbed (not values) and is signed alongside spans."
+ *
+ * This is safety, not access control. IP-protection redaction lives in
+ * the deferred gating epic per scope §5.
+ */
+/** V1 pattern set. Case-insensitive; matches at end-of-key or after a dot. */
+export const SECRET_NAME_PATTERNS = [
+    /(^|\.)authorization$/i,
+    /(^|\.)apikey$/i,
+    /(^|\.)api[_-]?key$/i,
+    /(^|\.)bearer$/i,
+    /(^|\.)password$/i,
+    /(^|\.)secret$/i,
+    /(^|\.)token$/i,
+    /(^|\.)privatekey$/i,
+    /(^|\.)private[_-]?key$/i,
+];
+export function isSecretKey(key) {
+    return SECRET_NAME_PATTERNS.some((p) => p.test(key));
+}
+/**
+ * Walk a flat attribute map and replace secret values with a marker.
+ * Returns a new object plus the list of keys that were redacted.
+ */
+export function scrubAttributes(attrs) {
+    const scrubbed = { ...attrs };
+    const redactedKeys = [];
+    for (const [k, _v] of Object.entries(attrs)) {
+        if (isSecretKey(k)) {
+            scrubbed[k] = `<redacted:${k}>`;
+            redactedKeys.push(k);
+        }
+    }
+    return { scrubbed, redactedKeys };
+}
+/**
+ * Scrub MCP tool call arguments by argument name. V1 is top-level-only;
+ * deep recursion is Plan F tightening.
+ */
+export function scrubMcpArgs(args) {
+    return scrubAttributes(args);
+}
+//# sourceMappingURL=secret-scrub.js.map

package/dist/trajectory/secret-scrub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scrub.js","sourceRoot":"","sources":["../../src/trajectory/secret-scrub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,8EAA8E;AAC9E,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,uBAAuB;IACvB,gBAAgB;IAChB,qBAAqB;IACrB,gBAAgB;IAChB,kBAAkB;IAClB,gBAAgB;IAChB,eAAe;IACf,oBAAoB;IACpB,yBAAyB;CAC1B,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAQ;IAER,MAAM,QAAQ,GAA4B,EAAE,GAAG,KAAK,EAAE,CAAC;IACvD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5C,IAAI,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;YACnB,QAAQ,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC;YAChC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAC1B,IAA6B;IAE7B,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;AAC/B,CAAC"}

package/dist/trajectory/span-profile.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Normative span profile per scope §3.1 K6 + §4.3.
+ *
+ * For each jinn.span.kind, declares required attribute keys. Consumers
+ * (Plan F conformance suite, manifest-validation layer) call
+ * validateSpanProfile to check each span in a trajectory.
+ *
+ * Required attributes at V1 (all tiers). Attested-tier extensions (TLS
+ * transcript CIDs) layer on top in V2.
+ */
+import type { Span, JinnSpanKind } from './schema.js';
+export declare const SPAN_PROFILE: Record<JinnSpanKind, readonly string[]>;
+export type SpanProfileResult = {
+    valid: true;
+} | {
+    valid: false;
+    missing: string[];
+    kind: string;
+};
+export declare function validateSpanProfile(span: Span): SpanProfileResult;
+/** Bulk-validate all spans in a trajectory. Returns first failure, or null if all pass. */
+export declare function findFirstProfileViolation(spans: Span[]): {
+    span: Span;
+    result: Exclude<SpanProfileResult, {
+        valid: true;
+    }>;
+} | null;

package/dist/trajectory/span-profile.js

@@ -0,0 +1,51 @@
+/**
+ * Normative span profile per scope §3.1 K6 + §4.3.
+ *
+ * For each jinn.span.kind, declares required attribute keys. Consumers
+ * (Plan F conformance suite, manifest-validation layer) call
+ * validateSpanProfile to check each span in a trajectory.
+ *
+ * Required attributes at V1 (all tiers). Attested-tier extensions (TLS
+ * transcript CIDs) layer on top in V2.
+ */
+export const SPAN_PROFILE = {
+    'jinn.phase': ['jinn.phase.name'],
+    'jinn.llm_call': [
+        'gen_ai.system',
+        'gen_ai.request.model',
+        'gen_ai.usage.input_tokens',
+        'gen_ai.usage.output_tokens',
+    ],
+    'jinn.mcp_call': ['mcp.server.name', 'mcp.tool.name'],
+    'jinn.artifact.emit': [
+        'jinn.artifact.cid',
+        'jinn.artifact.artifactType',
+        'jinn.artifact.sha256',
+    ],
+    'jinn.venue_io': [
+        'net.peer.name',
+        'http.request.method',
+        'http.response.status_code',
+    ],
+    'jinn.state_transition': ['jinn.state.from', 'jinn.state.to'],
+};
+export function validateSpanProfile(span) {
+    const kind = span.attributes['jinn.span.kind'];
+    const required = SPAN_PROFILE[kind];
+    if (!required)
+        return { valid: false, missing: ['<unknown-kind>'], kind };
+    const missing = required.filter((k) => span.attributes[k] === undefined);
+    if (missing.length > 0)
+        return { valid: false, missing, kind };
+    return { valid: true };
+}
+/** Bulk-validate all spans in a trajectory. Returns first failure, or null if all pass. */
+export function findFirstProfileViolation(spans) {
+    for (const s of spans) {
+        const r = validateSpanProfile(s);
+        if (!r.valid)
+            return { span: s, result: r };
+    }
+    return null;
+}
+//# sourceMappingURL=span-profile.js.map

package/dist/trajectory/span-profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"span-profile.js","sourceRoot":"","sources":["../../src/trajectory/span-profile.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,CAAC,MAAM,YAAY,GAA4C;IACnE,YAAY,EAAE,CAAC,iBAAiB,CAAC;IACjC,eAAe,EAAE;QACf,eAAe;QACf,sBAAsB;QACtB,2BAA2B;QAC3B,4BAA4B;KAC7B;IACD,eAAe,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;IACrD,oBAAoB,EAAE;QACpB,mBAAmB;QACnB,4BAA4B;QAC5B,sBAAsB;KACvB;IACD,eAAe,EAAE;QACf,eAAe;QACf,qBAAqB;QACrB,2BAA2B;KAC5B;IACD,uBAAuB,EAAE,CAAC,iBAAiB,EAAE,eAAe,CAAC;CAC9D,CAAC;AAMF,MAAM,UAAU,mBAAmB,CAAC,IAAU;IAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAiB,CAAC;IAC/D,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1E,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,yBAAyB,CAAC,KAAa;IAIrD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,CAAC,KAAK;YAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC9C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}