@peterxiaoyang/superspec 0.1.14 → 0.1.15-alpha

package/dist/src/hooks/types.d.ts

@@ -1,72 +0,0 @@
-import type { JsonMap, Reason } from "../util.ts";
-export declare const HOOK_ADAPTER_VERSION = "superspec-hook@2";
-export type HookTrust = "trusted" | "audit-only" | "untrusted";
-export type HookStrictProfile = "available" | "unavailable";
-export type HookEvent = JsonMap & {
-    hook_event_name?: string;
-    session_id?: string;
-    turn_id?: string;
-    cwd?: string;
-    tool_name?: string;
-    tool_use_id?: string;
-    tool_input?: JsonMap;
-    tool_response?: JsonMap;
-    agent_id?: string;
-    agent_type?: string;
-};
-export type HookDecision = {
-    allowed: boolean;
-    decision: "allow" | "block" | "status";
-    change_id: string;
-    gate: string;
-    strict_profile: HookStrictProfile;
-    enforcement: "pass-through" | "guarded" | "deny" | "audit-only";
-    trust: HookTrust;
-    block_reasons: Reason[];
-    audit_only_reasons: Reason[];
-    target_paths?: string[];
-    tool_name?: string;
-    hook_event_name?: string;
-    hook_event_id?: string;
-    actions?: JsonMap[];
-    next_allowed_actions: string[];
-    trust_warnings: string[];
-};
-export type HookSessionRecord = {
-    schema_version: 2;
-    kind: "hook_active_session";
-    trust: HookTrust;
-    change_id: string;
-    repo_root: string;
-    session_id: string;
-    workflow: string;
-    started_at: string;
-    expires_at: string;
-    guard_version: string;
-    adapter_version: string;
-    hook_manifest_hash: string | null;
-    strict_profile: HookStrictProfile;
-    audit_only_reasons: Reason[];
-};
-export type HookRunlogRecord = {
-    schema_version: 2;
-    kind: "subagent_start" | "subagent_stop";
-    trust: HookTrust;
-    hook_event_id: string;
-    hook_event_name: string;
-    hook_provenance: JsonMap;
-    session_id: string;
-    turn_id?: string;
-    run_id: string;
-    agent_id: string;
-    agent_type: string;
-    cwd?: string;
-    prompt_hash?: string;
-    prompt_ref?: string;
-    output_ref?: string;
-    output_hash?: string;
-    status?: string;
-    error?: string;
-    started_at?: string;
-    stopped_at?: string;
-};

package/dist/src/hooks/types.js

@@ -1 +0,0 @@
-export const HOOK_ADAPTER_VERSION = "superspec-hook@2";

package/dist/src/hooks/validation.d.ts

@@ -1,3 +0,0 @@
-import type { JsonMap, Reason } from "../util.ts";
-export declare function strictRoleRunlogReasons(changeRoot: string, ev: JsonMap): Reason[];
-export declare function strictRuntimeEvidenceReasons(ev: JsonMap): Reason[];

package/dist/src/hooks/validation.js

@@ -1,70 +0,0 @@
-import { existsSync, readFileSync, statSync } from "node:fs";
-import { join } from "node:path";
-import { isObject, reason, safe_within, sha256_file } from "../util.js";
-import { superspec_dir } from "../paths.js";
-function runlogPath(changeRoot) {
-    return join(superspec_dir(changeRoot), "subagent-runlog.jsonl");
-}
-export function strictRoleRunlogReasons(changeRoot, ev) {
-    if (ev.trust !== "runtime-verified" && ev.requires_hook_runlog !== true)
-        return [];
-    const problems = [
-        reason("hook_runlog_strict_profile_unavailable", `${ev._path}: strict hook runlog validation is unavailable until R-1 deny and hook provenance pass`),
-    ];
-    const target = runlogPath(changeRoot);
-    if (!existsSync(target) || !statSync(target).isFile()) {
-        problems.push(reason("hook_runlog_missing", `${ev._path}: strict role evidence requires SuperSpec hook subagent runlog`));
-        return problems;
-    }
-    const records = readFileSync(target, "utf8").split(/\r?\n/u).filter(Boolean).flatMap((line) => {
-        try {
-            const parsed = JSON.parse(line);
-            return isObject(parsed) ? [parsed] : [];
-        }
-        catch {
-            return [];
-        }
-    });
-    const agentId = String(ev.agent_id ?? "");
-    const role = String(ev.agent_role ?? "");
-    const starts = records.filter((item) => item.kind === "subagent_start" && item.agent_id === agentId && item.agent_type === role && item.trust === "trusted");
-    const stops = records.filter((item) => item.kind === "subagent_stop" && item.agent_id === agentId && item.agent_type === role && item.trust === "trusted");
-    if (starts.length === 0)
-        problems.push(reason("hook_runlog_start_missing", `${ev._path}: strict role evidence has no trusted matching SubagentStart`, [agentId]));
-    if (stops.length === 0)
-        problems.push(reason("hook_runlog_stop_missing", `${ev._path}: strict role evidence has no trusted matching SubagentStop`, [agentId]));
-    const outputRef = typeof ev.output_ref === "string" ? ev.output_ref : "";
-    const outputPath = outputRef ? safe_within(changeRoot, outputRef) : null;
-    const outputSha = outputPath && existsSync(outputPath) && statSync(outputPath).isFile() ? sha256_file(outputPath) : null;
-    if (outputSha && stops.length > 0 && !stops.some((item) => item.output_hash === outputSha || item.output_ref === outputRef)) {
-        problems.push(reason("hook_runlog_output_mismatch", `${ev._path}: strict role evidence output_ref does not match trusted SubagentStop output hash/ref`, [agentId]));
-    }
-    return problems;
-}
-export function strictRuntimeEvidenceReasons(ev) {
-    if (ev.trust !== "runtime-verified")
-        return [];
-    const problems = [
-        reason("runtime_evidence_strict_profile_unavailable", `${ev._path}: strict runtime evidence is unavailable until R-1 deny and hook provenance pass`),
-    ];
-    if (typeof ev.hook_event_id !== "string" || !ev.hook_event_id)
-        problems.push(reason("runtime_evidence_missing_hook_event", `${ev._path}: runtime-verified evidence requires hook_event_id`));
-    if (!isObject(ev.hook_provenance) || ev.hook_provenance.validation !== "trusted")
-        problems.push(reason("runtime_evidence_untrusted_provenance", `${ev._path}: runtime-verified evidence requires trusted hook_provenance`));
-    if (!isObject(ev.token_binding))
-        problems.push(reason("runtime_evidence_missing_token", `${ev._path}: runtime-verified evidence requires Guard token_binding`));
-    if (typeof ev.command_fingerprint !== "string" || !ev.command_fingerprint.startsWith("sha256:"))
-        problems.push(reason("runtime_evidence_missing_command_fingerprint", `${ev._path}: runtime-verified evidence requires command_fingerprint`));
-    if (!Array.isArray(ev.raw_log_pinned_refs) || ev.raw_log_pinned_refs.length === 0)
-        problems.push(reason("runtime_evidence_missing_raw_log_pin", `${ev._path}: runtime-verified evidence requires raw_log_pinned_refs`));
-    if (typeof ev.exit_code !== "number") {
-        problems.push(reason("runtime_evidence_missing_exit_code", `${ev._path}: runtime-verified evidence requires numeric exit_code`));
-    }
-    else if ((ev.kind === "final_test" || ev.semantic_status === "expected_success") && ev.exit_code !== 0) {
-        problems.push(reason("runtime_evidence_exit_code_mismatch", `${ev._path}: expected_success/final_test runtime evidence requires exit_code=0`));
-    }
-    else if (ev.semantic_status === "expected_failure" && ev.exit_code === 0) {
-        problems.push(reason("runtime_evidence_exit_code_mismatch", `${ev._path}: RED runtime evidence requires non-zero exit_code`));
-    }
-    return problems;
-}

package/dist/src/i18n.d.ts

@@ -1,21 +0,0 @@
-export type ZhHint = {
-    label_zh: string;
-    hint_zh: string;
-};
-export type WorkflowTermHint = {
-    term: string;
-    label_zh: string;
-    hint_zh: string;
-};
-export declare function command_zh(command: string): ZhHint;
-export declare function gate_zh(gate: string): ZhHint;
-export declare function reason_zh(code: string): ZhHint;
-export declare function decision_zh(decision: string): string;
-export declare function translate_action_zh(action: string): string;
-export declare function reason_message_zh(code: string, rawMessage: string, refs?: string[]): string;
-export declare function trust_warning_zh(warning: string): string;
-export declare function action_status_zh(status: string): string;
-export declare function action_label_zh(action: string): string;
-export declare function action_detail_zh(detail: string): string;
-export declare function system_failure_zh(raw: string, fallback?: string): string;
-export declare function workflow_terms_zh_for(command: string | undefined, _gate: string, reasonCodes: string[]): WorkflowTermHint[];