@oscharko-dev/keiko 0.1.6 → 0.1.7

package/dist/ui/evidence.js

@@ -1,142 +0,0 @@
-// Evidence persistence for UI-initiated runs (ADR-0011 AC5; #10 audit public API only). The Wave 2
-// BFF never persisted evidence, so UI runs (including cancellations) never reached the evidence
-// browser. This module folds a terminated run into a redacted EvidenceManifest and writes it through
-// the #10 EvidenceStore, composing the audit layer's PUBLIC API UNCHANGED (no frozen-core edit).
-//
-// The WORKFLOW manifest mapping now lives in the shared audit module `workflow-evidence.ts` (ADR-0012
-// C2), so the evaluation harness and this BFF build it from one implementation. This module keeps the
-// EXPLAIN-PLAN harness path (whose `usage` shape differs) local, and adapts the UI RunKind/RunStatus
-// to the shared module's narrow workflow types. Persistence errors surface to the run engine so the
-// final registry payload cannot silently omit required evidence.
-import { buildEvidenceReport, createAuditRedactor, EVIDENCE_SCHEMA_VERSION, resolveCostClass, persistWorkflowEvidence as persistWorkflowEvidenceCore, } from "../audit/index.js";
-import { deepRedactStrings } from "../audit/redaction.js";
-import { HARNESS_VERSION } from "../harness/index.js";
-// Only the two model-driven workflow kinds map to the shared audit core; explain-plan and verify
-// follow their own manifest paths (different usage shape / no usage at all).
-function toWorkflowKind(kind) {
-    return kind === "bug-investigation" ? "bug-investigation" : "unit-tests";
-}
-// Persists a terminated WORKFLOW run (unit-tests / bug-investigation) via the shared audit core. The
-// report is the workflow's own typed report; only counts/summaries are folded in (never the raw diff).
-export function persistWorkflowEvidence(identity, report, events, ctx) {
-    return persistWorkflowEvidenceCore({
-        runId: identity.runId,
-        fingerprint: identity.fingerprint,
-        modelId: identity.modelId,
-        kind: toWorkflowKind(identity.kind),
-        status: identity.status,
-        startedAt: identity.startedAt,
-        finishedAt: identity.finishedAt,
-        ...(identity.workspaceRoot === undefined ? {} : { workspaceRoot: identity.workspaceRoot }),
-    }, report, events, ctx);
-}
-// Persists a terminated EXPLAIN-PLAN harness run. The RunResult carries the raw harness events whose
-// `usage` shape the audit fold understands; the usage is folded directly so the explain path keeps a
-// single manifest-build path independent of the shared workflow core (which folds top-level fields).
-export function persistExplainEvidence(identity, result, ctx) {
-    const manifest = buildExplainManifest(identity, result);
-    const redactor = createAuditRedactor({ additionalSecrets: ctx.additionalSecrets ?? [] }, ctx.env);
-    const redacted = deepRedactStrings(manifest, redactor);
-    const location = ctx.store.put(redacted.run.runId, JSON.stringify(redacted));
-    return buildEvidenceReport(redacted, location);
-}
-const KIND_TO_TASK_TYPE = {
-    "unit-tests": "generate-unit-tests",
-    "bug-investigation": "investigate-bug",
-    "explain-plan": "explain-plan",
-    verify: "verify",
-};
-// Persists a terminated VERIFY run. Verify never calls a model, so usageTotals are all zero and
-// stateTransitions/toolCalls/commandExecutions stay empty (the verification orchestrator's own
-// audit summarisation lives in `src/verification/summary.ts` and is out of scope for this leaf).
-export function persistVerifyEvidence(identity, ctx) {
-    const manifest = buildVerifyManifest(identity);
-    const redactor = createAuditRedactor({ additionalSecrets: ctx.additionalSecrets ?? [] }, ctx.env);
-    const redacted = deepRedactStrings(manifest, redactor);
-    const location = ctx.store.put(redacted.run.runId, JSON.stringify(redacted));
-    return buildEvidenceReport(redacted, location);
-}
-function buildVerifyManifest(identity) {
-    const context = identity.workspaceRoot === undefined
-        ? undefined
-        : {
-            workspaceRoot: identity.workspaceRoot,
-            totalCandidates: 0,
-            usedBytes: 0,
-            budgetBytes: 0,
-            droppedForBudget: 0,
-            entries: [],
-        };
-    return {
-        evidenceSchemaVersion: EVIDENCE_SCHEMA_VERSION,
-        run: {
-            runId: identity.runId,
-            fingerprint: identity.fingerprint,
-            harnessVersion: HARNESS_VERSION,
-            taskType: KIND_TO_TASK_TYPE[identity.kind],
-            outcome: identity.status,
-            startedAt: identity.startedAt,
-            finishedAt: identity.finishedAt,
-            durationMs: Math.max(0, identity.finishedAt - identity.startedAt),
-        },
-        model: { modelId: identity.modelId, costClass: resolveCostClass(identity.modelId) },
-        usageTotals: { promptTokens: 0, completionTokens: 0, requestCount: 0, totalLatencyMs: 0 },
-        ...(context === undefined ? {} : { context }),
-        stateTransitions: [],
-        toolCalls: [],
-        commandExecutions: [],
-        verification: undefined,
-        patch: undefined,
-        failure: undefined,
-    };
-}
-function buildExplainManifest(identity, result) {
-    const context = identity.workspaceRoot === undefined
-        ? undefined
-        : {
-            workspaceRoot: identity.workspaceRoot,
-            totalCandidates: 0,
-            usedBytes: 0,
-            budgetBytes: 0,
-            droppedForBudget: 0,
-            entries: [],
-        };
-    return {
-        evidenceSchemaVersion: EVIDENCE_SCHEMA_VERSION,
-        run: {
-            runId: identity.runId,
-            fingerprint: identity.fingerprint,
-            harnessVersion: HARNESS_VERSION,
-            taskType: KIND_TO_TASK_TYPE[identity.kind],
-            outcome: identity.status,
-            startedAt: identity.startedAt,
-            finishedAt: identity.finishedAt,
-            durationMs: Math.max(0, identity.finishedAt - identity.startedAt),
-        },
-        model: { modelId: identity.modelId, costClass: resolveCostClass(identity.modelId) },
-        usageTotals: foldHarnessUsage(result.events),
-        ...(context === undefined ? {} : { context }),
-        stateTransitions: [],
-        toolCalls: [],
-        commandExecutions: [],
-        verification: undefined,
-        patch: undefined,
-        failure: undefined,
-    };
-}
-function foldHarnessUsage(events) {
-    let promptTokens = 0;
-    let completionTokens = 0;
-    let requestCount = 0;
-    let totalLatencyMs = 0;
-    for (const event of events) {
-        if (event.type !== "model:call:completed") {
-            continue;
-        }
-        promptTokens += event.usage.promptTokens;
-        completionTokens += event.usage.completionTokens;
-        totalLatencyMs += event.usage.latencyMs;
-        requestCount += 1;
-    }
-    return { promptTokens, completionTokens, requestCount, totalLatencyMs };
-}

package/dist/ui/files-deny.d.ts

@@ -1,2 +0,0 @@
-export declare const DENIED_MESSAGE = "The requested path is excluded from the read surface.";
-export declare function pathIsDenied(relativePath: string): boolean;

package/dist/ui/files-deny.js

@@ -1,12 +0,0 @@
-// Deny-list wiring for the Files BFF (`/api/files/*`). Reuses
-// `src/workspace/ignore.ts` unchanged: `isDenied` is the always-on security
-// gate that filters secret/dep/build/vcs/log entries from both tree listings
-// and previews. See ADR-0016.
-import { isDenied } from "../workspace/ignore.js";
-// Generic, non-leaking deny message. NEVER include the requested path or the
-// matched pattern: the deny list is treated as a server-side safety invariant
-// the client must not be able to probe.
-export const DENIED_MESSAGE = "The requested path is excluded from the read surface.";
-export function pathIsDenied(relativePath) {
-    return isDenied(relativePath);
-}

package/dist/ui/files.d.ts

@@ -1,65 +0,0 @@
-import { type RouteContext, type RouteResult } from "./routes.js";
-import type { UiHandlerDeps } from "./deps.js";
-import type { UiStore } from "./store/index.js";
-export interface FilesDirectoryRoot {
-    readonly label: string;
-    readonly path: string;
-}
-export interface FilesDirectoryEntry {
-    readonly name: string;
-    readonly path: string;
-}
-export interface FilesDirectoryListing {
-    readonly path: string;
-    readonly parent: string | null;
-    readonly entries: readonly FilesDirectoryEntry[];
-    readonly roots: readonly FilesDirectoryRoot[];
-}
-export type FilesEntryKind = "directory" | "file" | "symlink";
-export interface FilesTreeEntry {
-    readonly name: string;
-    readonly path: string;
-    readonly kind: FilesEntryKind;
-    readonly sizeBytes: number;
-    readonly modifiedAt: number;
-    readonly extension: string | null;
-    readonly symlink: boolean;
-    readonly readable: boolean;
-}
-export interface FilesTreeResponse {
-    readonly root: string;
-    readonly path: string;
-    readonly entries: readonly FilesTreeEntry[];
-    readonly truncated: boolean;
-}
-interface FilesPreviewBase {
-    readonly root: string;
-    readonly path: string;
-    readonly name: string;
-    readonly sizeBytes: number;
-    readonly modifiedAt: number;
-    readonly extension: string | null;
-    readonly mime: string;
-    readonly symlink: boolean;
-}
-export type FilesPreviewResponse = (FilesPreviewBase & {
-    readonly kind: "text";
-    readonly content: string;
-    readonly truncated: boolean;
-    readonly maxBytes: number;
-}) | (FilesPreviewBase & {
-    readonly kind: "image";
-    readonly dataUrl: string;
-    readonly maxBytes: number;
-}) | (FilesPreviewBase & {
-    readonly kind: "binary";
-    readonly reason: "unsupported" | "too_large";
-    readonly maxBytes?: number | undefined;
-});
-export declare function listFilesDirectories(store: UiStore, rootInput: string | null, pathInput?: string): Promise<FilesDirectoryListing>;
-export declare function readFilesTree(store: UiStore, rootInput: string | null, pathInput: string | null): Promise<FilesTreeResponse>;
-export declare function readFilesPreview(store: UiStore, rootInput: string | null, pathInput: string | null, redactor: UiHandlerDeps["redactor"]): Promise<FilesPreviewResponse>;
-export declare function handleFilesDirectories(ctx: RouteContext, deps: UiHandlerDeps): Promise<RouteResult>;
-export declare function handleFilesTree(ctx: RouteContext, deps: UiHandlerDeps): Promise<RouteResult>;
-export declare function handleFilesPreview(ctx: RouteContext, deps: UiHandlerDeps): Promise<RouteResult>;
-export {};