@sigloch/graph-api-core 3.0.0 → 3.1.0

package/dist/audit.d.ts

@@ -40,6 +40,41 @@ export interface AuditEntry {
      * at exactly the records it affected.
      */
     rulesetVersion?: string;
+    /**
+     * PROVENANCE (CR-GC-354) — the four fields that make a record answer the base question
+     * of an audit trail: WHO, with WHICH PROMPT, reached WHICH RESULT. The result half was
+     * always there; these are the other two.
+     *
+     * All four are DERIVED at the recording site, never self-declared by the consumer.
+     * `consumerId` is the counter-example that motivated this: it IS a self-declared field
+     * and 40% of the records carry its anonymous default. A prompt a model writes about
+     * itself is a paraphrase — it already contains the interpretation a later consumer
+     * would want to predict — so it is worthless as provenance.
+     *
+     * Session this record was written in — groups the records of ONE conversation.
+     * Assigned by the recording host, not accepted from the caller.
+     */
+    sessionId?: string;
+    /**
+     * The LLM that emitted the commands (e.g. the executor's configured model). The
+     * dimension rule calibration breaks down by ("R-01 dominated rejections: Haiku 26/29,
+     * Opus 17/18, devstral 10/23") and the one a client-side transcript cannot supply for
+     * a local or third-party model, because no transcript exists there.
+     */
+    model?: string;
+    /**
+     * The triggering prompt VERBATIM, truncated by the recording host's policy (the
+     * contract states that it is truncated, the host states where).
+     *
+     * Same absence asymmetry as `rulesPassed`: a missing field means NOT RECORDED, never
+     * "empty prompt". A consumer must not read absence as "no prompt was given".
+     */
+    intent?: string;
+    /**
+     * `true` when `intent` was truncated. Present only in that case — no silent cut, and
+     * no `false` noise on the overwhelming majority of records that fit.
+     */
+    intentTruncated?: boolean;
 }
 export interface AuditLog {
     record(entry: AuditEntry): Promise<void>;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sigloch/graph-api-core",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -21,11 +21,11 @@
     "prepublishOnly": "npm run build && npm run test"
   },
   "dependencies": {
-    "@sigloch/contracts": "^4.0.0",
+    "@sigloch/contracts": "^4.1.0",
     "zod": "^4.3.6"
   },
   "license": "MIT",
-  "description": "Framework-agnostic graph engine core \u2014 ontology-typed nodes/traces, rule evaluation, views",
+  "description": "Framework-agnostic graph engine core — ontology-typed nodes/traces, rule evaluation, views",
   "author": "sigloch-consulting",
   "repository": {
     "type": "git",