@jinn-network/client 0.1.9 → 0.2.0

package/dist/task-creator/proofs/public-repo-fixtures.d.ts

@@ -0,0 +1,53 @@
+import { type EnvironmentBuildRecipeV1 } from '../environment/contracts.js';
+export type PublicRepoProofFixture = {
+    readonly id: 'jinn-mono' | 'unjs-destr';
+    readonly repo: string;
+    readonly baseCommit: string;
+    readonly fixCommit: string;
+    readonly instanceId: string;
+    readonly language: 'typescript';
+    readonly problemStatement: string;
+    /** Synthetic names used solely to exercise the trusted parser contract. */
+    readonly syntheticParserContractTests: readonly string[];
+    /** Public paths represented by the synthetic parser-contract test patch. */
+    readonly testPaths: readonly string[];
+    /** Synthetic parser contract only; never a source-derived or live result. */
+    readonly evidenceKind: 'synthetic-parser-contract';
+};
+/**
+ * The real #1422 source identity. Unlike the parser-contract fixture below,
+ * this identity becomes usable only with a generated differential-admission
+ * receipt whose contents and bindings have been verified.
+ */
+export type JinnDifferentialProofSource = {
+    readonly id: 'jinn-mono';
+    readonly repo: 'Jinn-Network/mono';
+    readonly baseCommit: 'ae8093a8848e70e581f46d66dcdb56789c0808a3';
+    readonly fixCommit: 'ef9608876511b4dff000cda1537ff7c1a227677d';
+    readonly instanceId: 'Jinn-Network__mono__echo-ef9608876511';
+    readonly language: 'typescript';
+    readonly testPaths: readonly [
+        'client/test/daemon/daemon-recovery-nonblocking.test.ts',
+        'client/test/harnesses/engine/recovery.test.ts'
+    ];
+    readonly evidenceKind: 'differential-admission-receipt-required';
+};
+export declare const JINN_MONO_DIFFERENTIAL_PROOF_SOURCE: JinnDifferentialProofSource;
+/**
+ * G0b's first non-Rebench fixture identity.  The historical supplied commit
+ * is a documentation-only change, so this declaration is deliberately a
+ * synthetic parser-contract fixture rather than an assertion that it already
+ * has live empirical F2P evidence. The live runbook requires a reviewed,
+ * independently observed test patch before mint admission.
+ */
+export declare const JINN_MONO_VITEST_JSON_PARSER_CONTRACT_FIXTURE: PublicRepoProofFixture;
+/** Portable proof: the same trusted Vitest parser and recipe adapter. */
+export declare const UNJS_DESTR_PUBLIC_REPO_PROOF: PublicRepoProofFixture;
+/**
+ * Resolve the existing approved explicit recipe against an immutable fixture
+ * base commit.  Supplying a full SHA is intentional: prefix-only values can
+ * never become evaluator-environment contracts.
+ */
+export declare function resolvePublicRepoProofRecipe(fixture: Pick<PublicRepoProofFixture, 'id' | 'repo' | 'baseCommit'>, baseCommit?: string): EnvironmentBuildRecipeV1;
+/** A deterministic non-secret digest for a hermetic mock-registry image. */
+export declare function fixtureSha256(scope: string): `sha256:${string}`;

package/dist/task-creator/proofs/public-repo-fixtures.js

@@ -0,0 +1,93 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Public, hermetic fixture declarations for the G0b portability proof.
+ *
+ * These are intentionally metadata and recipe bindings only: a fixture never
+ * carries a gold patch.  Gold material stays in the local admission input,
+ * while the test patch and evaluator contract are public row material.
+ */
+import { createHash } from 'node:crypto';
+import { EnvironmentBuildRecipeV1Schema, } from '../environment/contracts.js';
+import { JINN_MONO_RECIPE_V1, UNJS_DESTR_RECIPE_V1 } from '../environment/recipes.js';
+export const JINN_MONO_DIFFERENTIAL_PROOF_SOURCE = {
+    id: 'jinn-mono',
+    repo: 'Jinn-Network/mono',
+    baseCommit: 'ae8093a8848e70e581f46d66dcdb56789c0808a3',
+    fixCommit: 'ef9608876511b4dff000cda1537ff7c1a227677d',
+    instanceId: 'Jinn-Network__mono__echo-ef9608876511',
+    language: 'typescript',
+    testPaths: [
+        'client/test/daemon/daemon-recovery-nonblocking.test.ts',
+        'client/test/harnesses/engine/recovery.test.ts',
+    ],
+    evidenceKind: 'differential-admission-receipt-required',
+};
+/**
+ * G0b's first non-Rebench fixture identity.  The historical supplied commit
+ * is a documentation-only change, so this declaration is deliberately a
+ * synthetic parser-contract fixture rather than an assertion that it already
+ * has live empirical F2P evidence. The live runbook requires a reviewed,
+ * independently observed test patch before mint admission.
+ */
+export const JINN_MONO_VITEST_JSON_PARSER_CONTRACT_FIXTURE = {
+    id: 'jinn-mono',
+    repo: 'Jinn-Network/mono',
+    baseCommit: 'c7701007c7c7c3b1005e263ce151adf700465b58',
+    fixCommit: '5b76bade319857bd09a72c3c4aaf0949cfe078ee',
+    instanceId: 'Jinn-Network__mono__echo-5b76bade3198',
+    language: 'typescript',
+    problemStatement: 'Vitest JSON parser-contract coverage; not empirical Jinn admission evidence.',
+    syntheticParserContractTests: [
+        'daemon recovery starts watchdog loops before recovery completes',
+        'engine recovery reserves the request before duplicate scheduling',
+    ],
+    testPaths: [
+        'client/test/daemon/daemon-recovery-nonblocking.test.ts',
+        'client/test/harnesses/engine/recovery.test.ts',
+    ],
+    evidenceKind: 'synthetic-parser-contract',
+};
+/** Portable proof: the same trusted Vitest parser and recipe adapter. */
+export const UNJS_DESTR_PUBLIC_REPO_PROOF = {
+    id: 'unjs-destr',
+    repo: 'unjs/destr',
+    baseCommit: '37210516ccef951dcc870f17a5abee52122a3122',
+    fixCommit: 'd9ba16d7ad5c3afb6d8c8e84f6d24dba616013fe',
+    instanceId: 'unjs__destr__echo-d9ba16d7ad5c',
+    language: 'typescript',
+    problemStatement: 'Synthetic parser-contract fixture: parsing decimals and scientific notation.',
+    syntheticParserContractTests: [
+        'destr parses decimal values',
+        'destr parses scientific notation values',
+    ],
+    testPaths: ['test/index.test.ts'],
+    evidenceKind: 'synthetic-parser-contract',
+};
+/**
+ * Resolve the existing approved explicit recipe against an immutable fixture
+ * base commit.  Supplying a full SHA is intentional: prefix-only values can
+ * never become evaluator-environment contracts.
+ */
+export function resolvePublicRepoProofRecipe(fixture, baseCommit = fixture.baseCommit) {
+    if (!/^[0-9a-f]{40}$/u.test(baseCommit)) {
+        throw new Error('public-repository proof recipe requires a 40-hex base commit');
+    }
+    const preset = fixture.id === 'jinn-mono' ? JINN_MONO_RECIPE_V1 : UNJS_DESTR_RECIPE_V1;
+    const { repo: expectedRepo, repoUrl, ...recipe } = preset;
+    if (fixture.repo !== expectedRepo)
+        throw new Error('public-repository proof fixture does not match its approved recipe');
+    return EnvironmentBuildRecipeV1Schema.parse({
+        ...recipe,
+        source: { repo: fixture.repo, repoUrl, baseCommit },
+        inputRights: preset.inputRights.map((rights) => ({
+            ...rights,
+            inputRef: rights.inputRef.replace('$baseCommit', baseCommit),
+            rightsRef: rights.rightsRef.replace('$baseCommit', baseCommit),
+        })),
+    });
+}
+/** A deterministic non-secret digest for a hermetic mock-registry image. */
+export function fixtureSha256(scope) {
+    return `sha256:${createHash('sha256').update(scope).digest('hex')}`;
+}
+//# sourceMappingURL=public-repo-fixtures.js.map

package/dist/task-creator/proofs/public-repo-fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-repo-fixtures.js","sourceRoot":"","sources":["../../../src/task-creator/proofs/public-repo-fixtures.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;GAMG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,8BAA8B,GAE/B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAqCtF,MAAM,CAAC,MAAM,mCAAmC,GAAgC;IAC9E,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,mBAAmB;IACzB,UAAU,EAAE,0CAA0C;IACtD,SAAS,EAAE,0CAA0C;IACrD,UAAU,EAAE,uCAAuC;IACnD,QAAQ,EAAE,YAAY;IACtB,SAAS,EAAE;QACT,wDAAwD;QACxD,+CAA+C;KAChD;IACD,YAAY,EAAE,yCAAyC;CACxD,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6CAA6C,GAA2B;IACnF,EAAE,EAAE,WAAW;IACf,IAAI,EAAE,mBAAmB;IACzB,UAAU,EAAE,0CAA0C;IACtD,SAAS,EAAE,0CAA0C;IACrD,UAAU,EAAE,uCAAuC;IACnD,QAAQ,EAAE,YAAY;IACtB,gBAAgB,EAAE,8EAA8E;IAChG,4BAA4B,EAAE;QAC5B,iEAAiE;QACjE,kEAAkE;KACnE;IACD,SAAS,EAAE;QACT,wDAAwD;QACxD,+CAA+C;KAChD;IACD,YAAY,EAAE,2BAA2B;CAC1C,CAAC;AAEF,yEAAyE;AACzE,MAAM,CAAC,MAAM,4BAA4B,GAA2B;IAClE,EAAE,EAAE,YAAY;IAChB,IAAI,EAAE,YAAY;IAClB,UAAU,EAAE,0CAA0C;IACtD,SAAS,EAAE,0CAA0C;IACrD,UAAU,EAAE,gCAAgC;IAC5C,QAAQ,EAAE,YAAY;IACtB,gBAAgB,EAAE,8EAA8E;IAChG,4BAA4B,EAAE;QAC5B,6BAA6B;QAC7B,yCAAyC;KAC1C;IACD,SAAS,EAAE,CAAC,oBAAoB,CAAC;IACjC,YAAY,EAAE,2BAA2B;CAC1C,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAC1C,OAAmE,EACnE,aAAqB,OAAO,CAAC,UAAU;IAEvC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,oBAAoB,CAAC;IACvF,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAC;IAC1D,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IACzH,OAAO,8BAA8B,CAAC,KAAK,CAAC;QAC1C,GAAG,MAAM;QACT,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE;QACnD,WAAW,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAC/C,GAAG,MAAM;YACT,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC;YAC5D,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE,UAAU,CAAC;SAC/D,CAAC,CAAC;KACJ,CAAC,CAAC;AACL,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,UAAU,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtE,CAAC"}

package/dist/task-creator/proofs/vitest-json-fixture.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Hermetic oracle for the `vitest-json.v1` evaluator parser contract.  It
+ * mirrors only the public JSON shape accepted by the signed upstream bundle;
+ * production grading remains in the pinned evaluator bundle itself.
+ */
+import { deriveF2pP2pFromReports } from '../../solver-types/_swe-rebench-v2-empirical-tests.js';
+import type { MintedEnvironmentBindingV1 } from '../../solver-types/_swe-rebench-v2-minted-pool.js';
+import type { EnvironmentBuildRecipeV1 } from '../environment/contracts.js';
+import { type PublicRepoProofFixture } from './public-repo-fixtures.js';
+export type ParsedVitestFixtureReport = {
+    passed: string[];
+    failed: string[];
+};
+export type PublicRepoFixtureRun = {
+    proof: PublicRepoProofFixture;
+    recipe: EnvironmentBuildRecipeV1;
+    environment: MintedEnvironmentBindingV1;
+    testPatch: string;
+    installConfig: {
+        install: string[];
+        test_cmd: string[];
+        log_parser: 'vitest-json.v1';
+    };
+    parity: ReturnType<typeof deriveF2pP2pFromReports>;
+    verdicts: {
+        empty: boolean;
+        gold: boolean;
+        broken: boolean;
+    };
+};
+/** Parse the stable assertion subset of Vitest’s JSON reporter output. */
+export declare function parseVitestJsonV1(log: string): ParsedVitestFixtureReport;
+/**
+ * Build pure-data Vitest JSON parser-contract coverage. The mock registry
+ * reference is digest-qualified and all three synthetic states are parsed
+ * through the same trusted parser contract. This is not source-derived
+ * empirical evidence and cannot admit, mint, or claim a Jinn task. No gold
+ * patch is returned or serialized.
+ */
+export declare function runPublicRepoParityFixture(proof: PublicRepoProofFixture): PublicRepoFixtureRun;

package/dist/task-creator/proofs/vitest-json-fixture.js

@@ -0,0 +1,115 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Hermetic oracle for the `vitest-json.v1` evaluator parser contract.  It
+ * mirrors only the public JSON shape accepted by the signed upstream bundle;
+ * production grading remains in the pinned evaluator bundle itself.
+ */
+import { deriveF2pP2pFromReports } from '../../solver-types/_swe-rebench-v2-empirical-tests.js';
+import { commandSpecToEvaluatorCommand } from '../../solver-types/_swe-rebench-v2-harvest.js';
+import { parseMintedEnvironmentBindingV1 } from '../../solver-types/_swe-rebench-v2-minted-pool.js';
+import { fixtureSha256, resolvePublicRepoProofRecipe, } from './public-repo-fixtures.js';
+/** Parse the stable assertion subset of Vitest’s JSON reporter output. */
+export function parseVitestJsonV1(log) {
+    let report;
+    for (let offset = 0; offset < log.length; offset += 1) {
+        if (log[offset] !== '{')
+            continue;
+        try {
+            const candidate = JSON.parse(log.slice(offset));
+            if (isRecord(candidate) && Array.isArray(candidate['testResults']))
+                report = candidate;
+        }
+        catch {
+            // Reporter output can be prefixed with runner diagnostics; continue
+            // until we encounter a complete JSON object.
+        }
+    }
+    if (!isRecord(report) || !Array.isArray(report['testResults'])) {
+        throw new Error('vitest-json.v1: no Vitest JSON report found');
+    }
+    const passed = [];
+    const failed = [];
+    for (const suite of report['testResults']) {
+        if (!isRecord(suite) || !Array.isArray(suite['assertionResults']))
+            continue;
+        for (const assertion of suite['assertionResults']) {
+            if (!isRecord(assertion) || typeof assertion['fullName'] !== 'string')
+                continue;
+            if (assertion['status'] === 'passed')
+                passed.push(assertion['fullName']);
+            if (assertion['status'] === 'failed')
+                failed.push(assertion['fullName']);
+        }
+    }
+    return { passed: [...new Set(passed)].sort(), failed: [...new Set(failed)].sort() };
+}
+/**
+ * Build pure-data Vitest JSON parser-contract coverage. The mock registry
+ * reference is digest-qualified and all three synthetic states are parsed
+ * through the same trusted parser contract. This is not source-derived
+ * empirical evidence and cannot admit, mint, or claim a Jinn task. No gold
+ * patch is returned or serialized.
+ */
+export function runPublicRepoParityFixture(proof) {
+    const recipe = resolvePublicRepoProofRecipe(proof);
+    const imageDigest = fixtureSha256(`public-repo-fixture:image:${proof.id}`);
+    const environmentHash = fixtureSha256(`public-repo-fixture:environment:${proof.id}`);
+    const environment = parseMintedEnvironmentBindingV1({
+        environmentSpecCid: `bafy-public-repo-${proof.id}-environment`,
+        environmentHash,
+        attestation: {
+            scheme: 'eip191',
+            algo: 'secp256k1',
+            environmentHash,
+            operatorSafe: `0x${'1'.repeat(40)}`,
+            signer: `0x${'2'.repeat(40)}`,
+            signature: `0x${'3'.repeat(130)}`,
+        },
+        parser: recipe.parser,
+        image: {
+            reference: `localhost:5000/jinn-task-environment/${proof.id}@${imageDigest}`,
+            digest: imageDigest,
+        },
+        platform: 'linux/amd64',
+    });
+    const stable = 'public-repo fixture stable control';
+    const empty = parseVitestJsonV1(vitestJson([
+        ...proof.syntheticParserContractTests.map((fullName) => ({ fullName, status: 'failed' })),
+        { fullName: stable, status: 'passed' },
+    ]));
+    const gold = parseVitestJsonV1(vitestJson([
+        ...proof.syntheticParserContractTests.map((fullName) => ({ fullName, status: 'passed' })),
+        { fullName: stable, status: 'passed' },
+    ]));
+    const broken = parseVitestJsonV1(vitestJson([
+        ...proof.syntheticParserContractTests.map((fullName, index) => ({ fullName, status: index === 0 ? 'passed' : 'failed' })),
+        { fullName: stable, status: 'passed' },
+    ]));
+    const allTests = [...proof.syntheticParserContractTests, stable];
+    const parity = deriveF2pP2pFromReports({ ...empty, passed_match: false }, { ...gold, passed_match: true }, allTests);
+    const verdict = (report) => proof.syntheticParserContractTests.every((name) => report.passed.includes(name)) &&
+        !report.failed.some((name) => allTests.includes(name));
+    return {
+        proof,
+        recipe,
+        environment,
+        testPatch: publicTestPatch(proof.testPaths),
+        installConfig: {
+            install: recipe.installCommands.map(commandSpecToEvaluatorCommand),
+            test_cmd: recipe.testCommands.map(commandSpecToEvaluatorCommand),
+            log_parser: 'vitest-json.v1',
+        },
+        parity,
+        verdicts: { empty: verdict(empty), gold: verdict(gold), broken: verdict(broken) },
+    };
+}
+function vitestJson(assertionResults) {
+    return `Vitest fixture diagnostics\n${JSON.stringify({ testResults: [{ assertionResults }] })}`;
+}
+function publicTestPatch(paths) {
+    return paths.map((path) => `diff --git a/${path} b/${path}\n--- a/${path}\n+++ b/${path}`).join('\n');
+}
+function isRecord(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value);
+}
+//# sourceMappingURL=vitest-json-fixture.js.map

package/dist/task-creator/proofs/vitest-json-fixture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vitest-json-fixture.js","sourceRoot":"","sources":["../../../src/task-creator/proofs/vitest-json-fixture.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;GAIG;AAEH,OAAO,EAAE,uBAAuB,EAAE,MAAM,uDAAuD,CAAC;AAChG,OAAO,EAAE,6BAA6B,EAAE,MAAM,+CAA+C,CAAC;AAC9F,OAAO,EAAE,+BAA+B,EAAE,MAAM,mDAAmD,CAAC;AAGpG,OAAO,EACL,aAAa,EACb,4BAA4B,GAE7B,MAAM,2BAA2B,CAAC;AA0BnC,0EAA0E;AAC1E,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,MAAe,CAAC;IACpB,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,GAAG;YAAE,SAAS;QAClC,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAY,CAAC;YAC3D,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;gBAAE,MAAM,GAAG,SAAS,CAAC;QACzF,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,6CAA6C;QAC/C,CAAC;IACH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QAC/D,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;YAAE,SAAS;QAC5E,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,kBAAkB,CAAC,EAAE,CAAC;YAClD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,UAAU,CAAC,KAAK,QAAQ;gBAAE,SAAS;YAChF,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;YACzE,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,QAAQ;gBAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACtF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAA6B;IACtE,MAAM,MAAM,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,aAAa,CAAC,6BAA6B,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,aAAa,CAAC,mCAAmC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IACrF,MAAM,WAAW,GAAG,+BAA+B,CAAC;QAClD,kBAAkB,EAAE,oBAAoB,KAAK,CAAC,EAAE,cAAc;QAC9D,eAAe;QACf,WAAW,EAAE;YACX,MAAM,EAAE,QAAQ;YAChB,IAAI,EAAE,WAAW;YACjB,eAAe;YACf,YAAY,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YACnC,MAAM,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAC7B,SAAS,EAAE,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAClC;QACD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE;YACL,SAAS,EAAE,wCAAwC,KAAK,CAAC,EAAE,IAAI,WAAW,EAAE;YAC5E,MAAM,EAAE,WAAW;SACpB;QACD,QAAQ,EAAE,aAAa;KACxB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,oCAAoC,CAAC;IACpD,MAAM,KAAK,GAAG,iBAAiB,CAAC,UAAU,CAAC;QACzC,GAAG,KAAK,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC,CAAC;QAClG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAiB,EAAE;KAChD,CAAC,CAAC,CAAC;IACJ,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC;QACxC,GAAG,KAAK,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC,CAAC;QAClG,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAiB,EAAE;KAChD,CAAC,CAAC,CAAC;IACJ,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC;QAC1C,GAAG,KAAK,CAAC,4BAA4B,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,QAAiB,EAAE,CAAC,CAAC;QAC3I,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAiB,EAAE;KAChD,CAAC,CAAC,CAAC;IACJ,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,4BAA4B,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,uBAAuB,CACpC,EAAE,GAAG,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,EACjC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,EAC/B,QAAQ,CACT,CAAC;IACF,MAAM,OAAO,GAAG,CAAC,MAAiC,EAAW,EAAE,CAC7D,KAAK,CAAC,4BAA4B,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChF,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,OAAO;QACL,KAAK;QACL,MAAM;QACN,WAAW;QACX,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC;QAC3C,aAAa,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,6BAA6B,CAAC;YAClE,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,6BAA6B,CAAC;YAChE,UAAU,EAAE,gBAAgB;SAC7B;QACD,MAAM;QACN,QAAQ,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE;KAClF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,gBAAmC;IACrD,OAAO,+BAA+B,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;AAClG,CAAC;AAED,SAAS,eAAe,CAAC,KAAwB;IAC/C,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,IAAI,MAAM,IAAI,WAAW,IAAI,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC"}

package/dist/trajectory/emit.d.ts

@@ -10,6 +10,7 @@
 import { type Hex } from 'viem';
 import { type ArtifactScrubConfig } from '../harnesses/engine/artifact-scrub.js';
 import type { TrajectoryCollector } from './collector.js';
+import type { ScrubPipeline } from './scrub/pipeline.js';
 import type { JinnTrajectoryV1 } from './schema.js';
 export interface EmitTrajectoryParams {
     collector: TrajectoryCollector;
@@ -20,6 +21,11 @@ export interface EmitTrajectoryParams {
     signerAddress: `0x${string}`;
     ipfsRegistryUrl: string;
     scrub?: ArtifactScrubConfig;
+    /**
+     * Seller-side scrub pipeline (secretlint + openredaction + optional ML PII).
+     * When provided, every span is scrubbed through it before signing.
+     */
+    scrubPipeline?: ScrubPipeline;
 }
 export interface EmitTrajectoryResult {
     cid: string;

package/dist/trajectory/emit.js

@@ -11,6 +11,7 @@ import { createHash } from 'node:crypto';
 import { signCanonical } from '../harnesses/engine/signing.js';
 import { uploadToIpfs } from '../adapters/mech/ipfs.js';
 import { scrubArtifactBytes, } from '../harnesses/engine/artifact-scrub.js';
+import { scrubSpansForEmit } from './scrub/emit-scrub.js';
 function sha256Hex(bytes) {
     return createHash('sha256').update(bytes, 'utf8').digest('hex');
 }
@@ -55,7 +56,14 @@ function scrubSnapshot(spans, redactionManifest, scrub) {
 }
 export async function emitTrajectory(p) {
     const snap = p.collector.snapshot();
-    const scrubbed = scrubSnapshot(snap.spans, snap.redactionManifest, p.scrub);
+    let spans = snap.spans;
+    let manifest = snap.redactionManifest;
+    if (p.scrubPipeline) {
+        const piped = await scrubSpansForEmit(spans, p.scrubPipeline, p.collector.taskCid);
+        spans = piped.spans;
+        manifest = piped.redactionManifest;
+    }
+    const scrubbed = scrubSnapshot(spans, manifest, p.scrub);
     const unsigned = {
         schemaVersion: 'jinn.trajectory.v1',
         runId: p.runId,

package/dist/trajectory/emit.js.map

@@ -1 +1 @@
-{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../src/trajectory/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EACL,kBAAkB,GAEnB,MAAM,uCAAuC,CAAC;AAqB/C,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAAC,IAAU,EAAE,KAA0B;IACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACjE,IAAI,CAAC;QACH,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;YACvD,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,KAAa,EACb,iBAAoC,EACpC,KAAsC;IAEtC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAChD,MAAM,aAAa,GAAW,EAAE,CAAC;IACjC,MAAM,oBAAoB,GAA+B,EAAE,CAAC;IAC5D,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,oBAAoB,CAAC,IAAI,CAAC;gBACxB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,GAAG,EAAE,CAAC;aACpE,CAAC,CAAC;YACH,eAAe,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,iBAAiB,EAAE;YACjB,KAAK,EAAE,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,oBAAoB,CAAC;YAC5D,eAAe,EAAE,iBAAiB,CAAC,eAAe,GAAG,eAAe;SACrE;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,CAAuB;IAEvB,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;IACpC,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG;QACf,aAAa,EAAE,oBAA6B;QAC5C,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;QAC9C,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;KAC9C,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IAE/E,MAAM,MAAM,GAAqB;QAC/B,GAAG,QAAQ;QACX,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,CAAC,CAAC,aAAa;YACvB,IAAI,EAAE,GAAG,CAAC,IAAW;YACrB,GAAG,EAAE,GAAG,CAAC,GAAU;SACpB;KACF,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAE1D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC"}
+{"version":3,"file":"emit.js","sourceRoot":"","sources":["../../src/trajectory/emit.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AAE/D,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AACxD,OAAO,EACL,kBAAkB,GAEnB,MAAM,uCAAuC,CAAC;AAG/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAyB1D,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAAC,IAAU,EAAE,KAA0B;IACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,KAAK,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACjE,IAAI,CAAC;QACH,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAS;YACvD,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,KAAa,EACb,iBAAoC,EACpC,KAAsC;IAEtC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC;IAChD,MAAM,aAAa,GAAW,EAAE,CAAC;IACjC,MAAM,oBAAoB,GAA+B,EAAE,CAAC;IAC5D,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACnC,oBAAoB,CAAC,IAAI,CAAC;gBACxB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,GAAG,EAAE,CAAC;aACpE,CAAC,CAAC;YACH,eAAe,IAAI,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO;QACL,KAAK,EAAE,aAAa;QACpB,iBAAiB,EAAE;YACjB,KAAK,EAAE,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,GAAG,oBAAoB,CAAC;YAC5D,eAAe,EAAE,iBAAiB,CAAC,eAAe,GAAG,eAAe;SACrE;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,CAAuB;IAEvB,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC;IACpC,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;IACvB,IAAI,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC;IACtC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACnF,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QACpB,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACrC,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG;QACf,aAAa,EAAE,oBAA6B;QAC5C,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,IAAI,IAAI;QAC9C,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,iBAAiB,EAAE,QAAQ,CAAC,iBAAiB;KAC9C,CAAC;IAEF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IAE/E,MAAM,MAAM,GAAqB;QAC/B,GAAG,QAAQ;QACX,SAAS,EAAE;YACT,IAAI,EAAE,WAAW;YACjB,MAAM,EAAE,CAAC,CAAC,aAAa;YACvB,IAAI,EAAE,GAAG,CAAC,IAAW;YACrB,GAAG,EAAE,GAAG,CAAC,GAAU;SACpB;KACF,CAAC;IAEF,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,CAAC,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAE1D,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC"}

package/dist/trajectory/harness-bundle-schema.d.ts

@@ -1,4 +1,4 @@
-import { z } from 'zod';
+import { z } from 'zod/v3';
 /**
  * harness-bundle.v1 — the operator's resolved harness configuration at
  * session capture time. The bundle's deterministic sha256 becomes
@@ -51,8 +51,8 @@ export declare const HarnessBundleManifestSchema: z.ZodObject<{
         path: string;
         sha256: string;
     }[];
-    capturePath: "A" | "B" | "C" | "D";
     bundleSha256: string;
+    capturePath: "A" | "B" | "C" | "D";
     tool: {
         name: string;
         version?: string | undefined;
@@ -64,8 +64,8 @@ export declare const HarnessBundleManifestSchema: z.ZodObject<{
         path: string;
         sha256: string;
     }[];
-    capturePath: "A" | "B" | "C" | "D";
     bundleSha256: string;
+    capturePath: "A" | "B" | "C" | "D";
     tool: {
         name: string;
         version?: string | undefined;

package/dist/trajectory/harness-bundle-schema.js

@@ -1,4 +1,4 @@
-import { z } from 'zod';
+import { z } from 'zod/v3';
 /**
  * harness-bundle.v1 — the operator's resolved harness configuration at
  * session capture time. The bundle's deterministic sha256 becomes

package/dist/trajectory/harness-bundle-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"harness-bundle-schema.js","sourceRoot":"","sources":["../../src/trajectory/harness-bundle-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAA4B,CAAC;AAEzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC;IACF;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACX,CAAC,CAAC"}
+{"version":3,"file":"harness-bundle-schema.js","sourceRoot":"","sources":["../../src/trajectory/harness-bundle-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAA4B,CAAC;AAEzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAC7C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;QACb,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC/B,CAAC;IACF;;;;;OAKG;IACH,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC;QAC1C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACX,CAAC,CAAC"}

package/dist/trajectory/hash-chain.d.ts

@@ -1,18 +1 @@
-/**
- * In-run per-span hash chain.
- *
- * Scope: §3.1 trajectory-signing-granularity row — "each span carries
- * jinn.prevSpanHash linking to the previous span's hash; first span
- * links to a run-start genesis value derived from envelope task CID."
- *
- * Motivation: a crashed run that failed to upload the signed trajectory
- * blob still produces a verifiable-as-prefix trace if spans are recovered
- * elsewhere (enclave memory dump, challenger capture). Partial authenticity
- * is not zero.
- */
-import { type Hex } from 'viem';
-import type { Span } from './schema.js';
-/** Genesis value for the chain — keccak256(JCS({runStart: taskCid})). */
-export declare function computeGenesisHash(taskCid: string): Hex;
-/** Hash of a finalized span, to be set as jinn.prevSpanHash on the next one. */
-export declare function computePrevSpanHash(span: Span): Hex;
+export { computeGenesisHash, computePrevSpanHash, type Hex, } from '@jinn-network/core/trajectory';

package/dist/trajectory/hash-chain.js

@@ -1,23 +1,2 @@
-/**
- * In-run per-span hash chain.
- *
- * Scope: §3.1 trajectory-signing-granularity row — "each span carries
- * jinn.prevSpanHash linking to the previous span's hash; first span
- * links to a run-start genesis value derived from envelope task CID."
- *
- * Motivation: a crashed run that failed to upload the signed trajectory
- * blob still produces a verifiable-as-prefix trace if spans are recovered
- * elsewhere (enclave memory dump, challenger capture). Partial authenticity
- * is not zero.
- */
-import { keccak256, toBytes } from 'viem';
-import { canonicalJson } from '../harnesses/engine/canonical-json.js';
-/** Genesis value for the chain — keccak256(JCS({runStart: taskCid})). */
-export function computeGenesisHash(taskCid) {
-    return keccak256(toBytes(canonicalJson({ runStart: taskCid })));
-}
-/** Hash of a finalized span, to be set as jinn.prevSpanHash on the next one. */
-export function computePrevSpanHash(span) {
-    return keccak256(toBytes(canonicalJson(span)));
-}
+export { computeGenesisHash, computePrevSpanHash, } from '@jinn-network/core/trajectory';
 //# sourceMappingURL=hash-chain.js.map

package/dist/trajectory/hash-chain.js.map

@@ -1 +1 @@
-{"version":3,"file":"hash-chain.js","sourceRoot":"","sources":["../../src/trajectory/hash-chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,SAAS,EAAE,OAAO,EAAY,MAAM,MAAM,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,uCAAuC,CAAC;AAGtE,yEAAyE;AACzE,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,OAAO,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,IAAU;IAC5C,OAAO,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC"}
+{"version":3,"file":"hash-chain.js","sourceRoot":"","sources":["../../src/trajectory/hash-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,mBAAmB,GAEpB,MAAM,+BAA+B,CAAC"}

package/dist/trajectory/index.d.ts

@@ -26,3 +26,5 @@ export { createLlmProxyApp, startLlmProxyServer } from './llm-proxy.js';
 export type { LlmProxyConfig, LlmProxyServer } from './llm-proxy.js';
 export { exchangeToSpanAttributes, emitLlmProxyExchange } from './llm-proxy-spans.js';
 export type { LlmProxyExchange, LlmProxyProvider } from './llm-proxy-spans.js';
+export { getTranscriptSpanParser } from './transcript-to-spans/index.js';
+export type { TranscriptSpanParser, TranscriptSpanParserResolution } from './transcript-to-spans/types.js';

package/dist/trajectory/index.js

@@ -25,4 +25,6 @@ export { tracedSpawn } from './wrappers/subprocess.js';
 // Path C LLM API proxy
 export { createLlmProxyApp, startLlmProxyServer } from './llm-proxy.js';
 export { exchangeToSpanAttributes, emitLlmProxyExchange } from './llm-proxy-spans.js';
+// Transcript-to-spans (DR-2026-07-14, #1473)
+export { getTranscriptSpanParser } from './transcript-to-spans/index.js';
 //# sourceMappingURL=index.js.map

package/dist/trajectory/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/trajectory/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,yBAAyB;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrD,UAAU;AACV,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG3C,qBAAqB;AACrB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,4BAA4B;AAC5B,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAUrB,4DAA4D;AAC5D,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,4BAA4B,CAAC;AAGpC,uBAAuB;AACvB,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,uBAAuB;AACvB,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAG3B,sBAAsB;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAQpD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,uBAAuB;AACvB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/trajectory/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,yBAAyB;AACzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAGrD,UAAU;AACV,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAG3C,qBAAqB;AACrB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAE1E,4BAA4B;AAC5B,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,uBAAuB,EACvB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAUrB,4DAA4D;AAC5D,OAAO,EACL,2BAA2B,EAC3B,4BAA4B,GAC7B,MAAM,4BAA4B,CAAC;AAGpC,uBAAuB;AACvB,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,YAAY,GACb,MAAM,mBAAmB,CAAC;AAE3B,uBAAuB;AACvB,OAAO,EACL,YAAY,EACZ,mBAAmB,EACnB,yBAAyB,GAC1B,MAAM,mBAAmB,CAAC;AAG3B,sBAAsB;AACtB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAQpD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGlD,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAGvD,uBAAuB;AACvB,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAExE,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAGtF,6CAA6C;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC"}

package/dist/trajectory/processors/identity-scrub.js

@@ -1,14 +1,22 @@
 export const IDENTITY_SCRUB_VERSION = '1.0.0';
 // Octet-bounded so version strings like "22.1.0.0" don't trigger false positives
-// — each segment must be a valid 0-255 octet.
+// - each segment must be a valid 0-255 octet.
 const IPV4_PATTERN = /\b(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]\d|\d)\.){3}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]\d|\d)\b/g;
-export function scrubIdentityString(s, cfg) {
+// Reserved-protocol tokens (jinn.span.kind, jinn.artifact.emit, ...) must pass
+// through identity scrubbing untouched, so an identity token that is a substring
+// of a protocol token (e.g. username === 'jinn') cannot deface the protocol
+// namespace (#1474). We achieve this by splitting the input on protocol tokens
+// and scrubbing only the non-protocol segments - there is no sentinel to leak or
+// collide with. The protection is confined to this shared function so all
+// consumers (trajectory span-processor, artifact-scrub, capture export) inherit it.
+// Scrub one non-protocol segment via the ordered identity replacements.
+function scrubSegment(s, cfg) {
+    let out = s;
     // Order matters: email and full git-author name resolve first as
     // composite identifiers. Email-before-username avoids mangling addresses
     // whose local-part matches a username; gitAuthorName-before-hostname/
     // machineId avoids the symmetric trap where a name fragment is masked
     // by an earlier scrub.
-    let out = s;
     if (cfg.gitAuthorEmail)
         out = out.split(cfg.gitAuthorEmail).join('<EMAIL>');
     if (cfg.gitAuthorName)
@@ -22,6 +30,17 @@ export function scrubIdentityString(s, cfg) {
     out = out.replace(IPV4_PATTERN, '<IPV4>');
     return out;
 }
+export function scrubIdentityString(s, cfg) {
+    // Split on protocol tokens; the capturing group keeps them in the array at
+    // odd indices. Even indices are ordinary text to scrub; odd indices are
+    // jinn.-prefixed protocol tokens that pass through verbatim (#1474) - so an
+    // identity token that is a substring of a protocol token cannot deface it,
+    // and there is no sentinel to collide with.
+    return s
+        .split(/(\bjinn\.[A-Za-z0-9_.-]+)/g)
+        .map((part, i) => (i % 2 === 1 ? part : scrubSegment(part, cfg)))
+        .join('');
+}
 export class IdentityScrubProcessor {
     cfg;
     constructor(cfg) {

package/dist/trajectory/processors/identity-scrub.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity-scrub.js","sourceRoot":"","sources":["../../../src/trajectory/processors/identity-scrub.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAU9C,iFAAiF;AACjF,8CAA8C;AAC9C,MAAM,YAAY,GAChB,0FAA0F,CAAC;AAE7F,MAAM,UAAU,mBAAmB,CAAC,CAAS,EAAE,GAAwB;IACrE,iEAAiE;IACjE,yEAAyE;IACzE,sEAAsE;IACtE,sEAAsE;IACtE,uBAAuB;IACvB,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,CAAC,cAAc;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,aAAa;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,GAAG,CAAC,QAAQ;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,QAAQ;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,SAAS;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,GAAwB;QAAxB,QAAG,GAAH,GAAG,CAAqB;IAAG,CAAC;IAEzD,UAAU,KAAK,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1C,QAAQ,KAAK,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,KAAI,CAAC;IAEZ,KAAK,CAAC,IAAkB;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAqC,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,KAAK,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"identity-scrub.js","sourceRoot":"","sources":["../../../src/trajectory/processors/identity-scrub.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,sBAAsB,GAAG,OAAO,CAAC;AAU9C,iFAAiF;AACjF,8CAA8C;AAC9C,MAAM,YAAY,GAChB,0FAA0F,CAAC;AAE7F,+EAA+E;AAC/E,iFAAiF;AACjF,4EAA4E;AAC5E,+EAA+E;AAC/E,iFAAiF;AACjF,0EAA0E;AAC1E,oFAAoF;AAEpF,wEAAwE;AACxE,SAAS,YAAY,CAAC,CAAS,EAAE,GAAwB;IACvD,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,iEAAiE;IACjE,yEAAyE;IACzE,sEAAsE;IACtE,sEAAsE;IACtE,uBAAuB;IACvB,IAAI,GAAG,CAAC,cAAc;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC5E,IAAI,GAAG,CAAC,aAAa;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3E,IAAI,GAAG,CAAC,QAAQ;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,QAAQ;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC/D,IAAI,GAAG,CAAC,SAAS;QAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACpE,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,CAAS,EAAE,GAAwB;IACrE,2EAA2E;IAC3E,wEAAwE;IACxE,4EAA4E;IAC5E,2EAA2E;IAC3E,4CAA4C;IAC5C,OAAO,CAAC;SACL,KAAK,CAAC,4BAA4B,CAAC;SACnC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;SAChE,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,GAAwB;QAAxB,QAAG,GAAH,GAAG,CAAqB;IAAG,CAAC;IAEzD,UAAU,KAAK,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IAC1C,QAAQ,KAAK,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACxC,OAAO,KAAI,CAAC;IAEZ,KAAK,CAAC,IAAkB;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAqC,CAAC;QACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;YACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAC1B,KAAK,CAAC,GAAG,CAAC,GAAG,mBAAmB,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;IACH,CAAC;CACF"}