@skill-harness/adapters 0.16.0 → 0.18.0

package/dist/index.d.ts

@@ -1,34 +1,6 @@
-export * from './producer-product.js';
 import type { HarnessAdapter } from "@skill-harness/core";
 import { piAdapter } from "./pi.js";
 export declare function getAdapter(name: string): HarnessAdapter;
 export { piAdapter };
-export * from "./prompt-provenance.js";
 export * from "./trajectory.js";
 export * from "./pi-daddy-ledger-v3.js";
-export * from "./evidence-archive.js";
-export * from "./archive-checkpoint.js";
-export * from "./archive-policy.js";
-export * from "./execution-retention-archive.js";
-export * from "./work-candidates.js";
-export * from "./work-case-archive.js";
-export * from "./work-signal-observation.js";
-export * from "./work-signal-cases.js";
-export * from "./work-case-review.js";
-export * from "./archive-read-capability.js";
-export * from "./archived-work.js";
-export * from "./blind-intervention.js";
-export * from "./learning-lifecycle.js";
-export * from "./learning-workspace.js";
-export * from "./learning-trust-setup.js";
-export { learningHash, learningFile } from "./learning-journal.js";
-export * from "./learning-case.js";
-export * from "./archive-observer.js";
-export * from "./weekly-investigation.js";
-export * from "./intervention-run.js";
-export * from "./principal-payload-port.js";
-export * from "./reviewed-archive-export.js";
-export * from "./archive-access.js";
-export * from "./archive-facts.js";
-export * from "./trust-lifecycle.js";
-export * from "./producer-review.js";

package/dist/index.js

@@ -1,4 +1,3 @@
-export * from './producer-product.js';
 import { piAdapter } from "./pi.js";
 /**
  * Registered harnesses. pi is the only one (per project scope). The interface
@@ -15,33 +14,6 @@ export function getAdapter(name) {
     return a;
 }
 export { piAdapter };
-export * from "./prompt-provenance.js";
 export * from "./trajectory.js";
 export * from "./pi-daddy-ledger-v3.js";
-export * from "./evidence-archive.js";
-export * from "./archive-checkpoint.js";
-export * from "./archive-policy.js";
-export * from "./execution-retention-archive.js";
-export * from "./work-candidates.js";
-export * from "./work-case-archive.js";
-export * from "./work-signal-observation.js";
-export * from "./work-signal-cases.js";
-export * from "./work-case-review.js";
-export * from "./archive-read-capability.js";
-export * from "./archived-work.js";
-export * from "./blind-intervention.js";
-export * from "./learning-lifecycle.js";
-export * from "./learning-workspace.js";
-export * from "./learning-trust-setup.js";
-export { learningHash, learningFile } from "./learning-journal.js";
-export * from "./learning-case.js";
-export * from "./archive-observer.js";
-export * from "./weekly-investigation.js";
-export * from "./intervention-run.js";
-export * from "./principal-payload-port.js";
-export * from "./reviewed-archive-export.js";
-export * from "./archive-access.js";
-export * from "./archive-facts.js";
-export * from "./trust-lifecycle.js";
-export * from "./producer-review.js";
 //# sourceMappingURL=index.js.map

package/dist/pi.js

@@ -1,72 +1,9 @@
-import { existsSync, mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, mkdtempSync, readFileSync, statSync } from "node:fs";
 import { tmpdir, homedir } from "node:os";
-import { randomBytes } from "node:crypto";
 import { join, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
 import { runPiJson } from "./pi-json.js";
-import { collectTrajectorySources, normalizePiTraces, resequence } from "./trajectory.js";
-import { bindPromptObservation, observeProviderPayload, promptCaptureIsTrusted, verifyPromptSummary } from "./prompt-provenance.js";
-import { exec, onPath, envNum, traceSha256, withProviderFailure, splitPromptDoc } from "@skill-harness/core";
+import { exec, onPath, envNum, traceSha256, withProviderFailure } from "@skill-harness/core";
 const PI_TIMEOUT_MS = envNum("PI_TIMEOUT_MS", 300_000);
-const PROMPT_CAPTURE_EXTENSION = fileURLToPath(new URL("./prompt-capture-extension.js", import.meta.url));
-function contractFor(req) {
-    if (req.systemPromptFile) {
-        const raw = readFileSync(req.systemPromptFile, "utf8");
-        return { text: raw, raw, mechanism: "system-prompt-file" };
-    }
-    const raw = readFileSync(join(requireSkillDir(req.skillDir, req.mode), "SKILL.md"), "utf8");
-    const body = splitPromptDoc(raw).body;
-    if (req.mode === "red")
-        return { text: body, raw, mechanism: "none" };
-    return { text: body, raw, mechanism: req.mode === "green" ? "pi-skill" : "append-system-prompt" };
-}
-const RUNTIME_INJECTION_ENV = ["NODE_OPTIONS", "NODE_PATH", "LD_PRELOAD", "DYLD_INSERT_LIBRARIES"];
-function hasRuntimeInjection(req) {
-    return Boolean(req.armEnv && Object.keys(req.armEnv).length) || RUNTIME_INJECTION_ENV.some(key => Boolean(process.env[key]));
-}
-function captureSetup(req, env, contract, counter) {
-    if (!req.onPromptObservation)
-        return { env, finish: () => { } };
-    // Arbitrary scenario/arm extensions and runtime-injection env execute in Pi's
-    // process with full Node authority. Refuse a forgeable positive observation.
-    if (!promptCaptureIsTrusted(req.extensions?.length ?? 0, hasRuntimeInjection(req)))
-        return { env, finish: () => {
-                const empty = observeProviderPayload({}, contract.text, contract.mechanism, counter.value++);
-                req.onPromptObservation?.({ ...empty, status: "ERROR", error: "prompt delivery provenance is unauthenticated when subject extensions or runtime-injection env share Pi's process" });
-            } };
-    const dir = mkdtempSync(join(tmpdir(), "skill-harness-prompt-"));
-    const path = join(dir, "observations.jsonl"), contractPath = join(dir, "contract.json");
-    const authenticationKey = randomBytes(32).toString("hex");
-    writeFileSync(path, "", { mode: 0o600 });
-    writeFileSync(contractPath, JSON.stringify({ text: contract.text, mechanism: contract.mechanism, authentication_key: authenticationKey }), { mode: 0o600 });
-    const finish = () => {
-        try {
-            const lines = readFileSync(path, "utf8").split("\n").filter(Boolean);
-            const parsed = lines.map(line => { try {
-                return JSON.parse(line);
-            }
-            catch {
-                return null;
-            } });
-            const records = parsed.slice(0, -1), summary = parsed.at(-1);
-            if (!verifyPromptSummary(summary, records.length, authenticationKey)) {
-                const empty = observeProviderPayload({}, contract.text, contract.mechanism, counter.value++);
-                req.onPromptObservation?.({ ...empty, status: "ERROR", error: "Pi prompt observation log is missing, truncated, replayed, or unauthenticated" });
-            }
-            else
-                records.forEach((record, observerRequestIndex) => {
-                    req.onPromptObservation?.(bindPromptObservation(record, contract.text, contract.mechanism, counter.value++, authenticationKey, observerRequestIndex));
-                });
-        }
-        finally {
-            rmSync(dir, { recursive: true, force: true });
-        }
-    };
-    return { env: { ...(env ?? process.env), SKILL_HARNESS_PROMPT_CAPTURE_FILE: path, SKILL_HARNESS_PROMPT_CONTRACT_FILE: contractPath }, finish };
-}
-function observerFlags(req) {
-    return req.onPromptObservation && promptCaptureIsTrusted(req.extensions?.length ?? 0, hasRuntimeInjection(req)) ? ["--extension", PROMPT_CAPTURE_EXTENSION] : [];
-}
 /**
  * stderr fragments that mean the provider refused the request, so the run measured
  * nothing about the model. Substring matching on a message pi passes through from
@@ -160,7 +97,6 @@ function header(turnNo, total, text) {
 }
 export const piAdapter = {
     name: "pi",
-    observesPrompts: true,
     available() {
         return Promise.resolve(onPath("pi"));
     },
@@ -196,18 +132,14 @@ export const piAdapter = {
             "--no-context-files",
             "--no-extensions",
             ...extensionFlags(req.extensions),
-            ...observerFlags(req),
             "--provider",
             req.model.provider,
             "--model",
             req.model.model,
         ];
-        // Bind bytes once: argv and provenance must describe the same contract even if a file changes mid-run.
-        const contract = contractFor(req);
         const flags = req.systemPromptFile
-            ? ["--no-skills", "--append-system-prompt", contract.raw]
-            : skillFlags(req.mode, req.skillDir, contract.raw);
-        const requestCounter = { value: 0 };
+            ? ["--no-skills", "--append-system-prompt", readFileSync(req.systemPromptFile, "utf8")]
+            : skillFlags(req.mode, req.skillDir);
         const total = req.turns.length;
         const parts = [];
         // The arm's env, merged over the harness's own — undefined (not `process.env`)
@@ -222,14 +154,7 @@ export const piAdapter = {
         let providerFailure = null;
         if (total === 1) {
             const args = [...flags, ...common, "--no-session", "-p", req.turns[0]];
-            const capture = captureSetup(req, env, contract, requestCounter);
-            let r;
-            try {
-                r = await exec("pi", args, { cwd: req.cwd, timeoutMs: PI_TIMEOUT_MS, env: capture.env });
-            }
-            finally {
-                capture.finish();
-            }
+            const r = await exec("pi", args, { cwd: req.cwd, timeoutMs: PI_TIMEOUT_MS, env });
             parts.push(header(1, 1, req.turns[0]));
             parts.push(`<<< ASSISTANT:\n${r.stdout.trim()}\n`);
             if (r.code !== 0) {
@@ -243,14 +168,7 @@ export const piAdapter = {
         for (let i = 0; i < total; i++) {
             const turnFlags = i === 0 ? ["--session-dir", session] : ["--session-dir", session, "-c"];
             const args = [...flags, ...common, ...turnFlags, "-p", req.turns[i]];
-            const capture = captureSetup(req, env, contract, requestCounter);
-            let r;
-            try {
-                r = await exec("pi", args, { cwd: req.cwd, timeoutMs: PI_TIMEOUT_MS, env: capture.env });
-            }
-            finally {
-                capture.finish();
-            }
+            const r = await exec("pi", args, { cwd: req.cwd, timeoutMs: PI_TIMEOUT_MS, env });
             parts.push(header(i + 1, total, req.turns[i]));
             parts.push(`<<< ASSISTANT:\n${r.stdout.trim()}\n`);
             if (r.code !== 0) {
@@ -282,17 +200,14 @@ export const piAdapter = {
             "--no-context-files",
             "--no-extensions",
             ...extensionFlags(req.extensions),
-            ...observerFlags(req),
             "--provider",
             req.model.provider,
             "--model",
             req.model.model,
         ];
-        const contract = contractFor(req);
         const flags = req.systemPromptFile
-            ? ["--no-skills", "--append-system-prompt", contract.raw]
-            : skillFlags(req.mode, req.skillDir, contract.raw);
-        const requestCounter = { value: 0 };
+            ? ["--no-skills", "--append-system-prompt", readFileSync(req.systemPromptFile, "utf8")]
+            : skillFlags(req.mode, req.skillDir);
         const piVersion = await this.version();
         const total = req.turns.length;
         const traces = [];
@@ -309,26 +224,19 @@ export const piAdapter = {
                     ? ["--session-dir", session]
                     : ["--session-dir", session, "-c"];
             const args = [...flags, ...common, "--mode", "json", ...turnFlags, "-p", req.turns[i]];
-            const capture = captureSetup(req, env, contract, requestCounter);
-            let r;
-            try {
-                r = await runPiJson({
-                    args,
-                    cwd: req.cwd,
-                    timeoutMs: PI_TIMEOUT_MS,
-                    piVersion,
-                    subject: req.model,
-                    scenarioId: req.scenarioId ?? "(unknown)",
-                    mode: req.mode,
-                    rep: req.rep ?? 0,
-                    turn: i,
-                    homeDir: homedir(),
-                    env: capture.env,
-                });
-            }
-            finally {
-                capture.finish();
-            }
+            const r = await runPiJson({
+                args,
+                cwd: req.cwd,
+                timeoutMs: PI_TIMEOUT_MS,
+                piVersion,
+                subject: req.model,
+                scenarioId: req.scenarioId ?? "(unknown)",
+                mode: req.mode,
+                rep: req.rep ?? 0,
+                turn: i,
+                homeDir: homedir(),
+                env,
+            });
             // A stream with no terminal events at all is not evidence of a clean run.
             // Fail loudly here rather than let an empty trace satisfy a `forbid_calls`
             // gate — "the model called nothing" and "we recorded nothing" must not
@@ -356,29 +264,9 @@ export const piAdapter = {
             if (r.code !== 0)
                 parts.push(`[pi exited ${r.code} on turn ${i + 1}]\n${r.stderr.trim()}\n`);
         }
-        const native = req.eventSources?.length
-            ? collectTrajectorySources(req.cwd, req.eventSources)
-            : { events: [], errors: [] };
-        const piEvents = normalizePiTraces(traces);
-        const combined = [...piEvents, ...native.events];
-        const chronologyErrors = [];
-        if (piEvents.length && native.events.length) {
-            if (combined.some((event) => !event.at || !Number.isFinite(Date.parse(event.at)))) {
-                chronologyErrors.push("pi/native events cannot be globally ordered because at least one event has no valid `at` timestamp");
-            }
-            else {
-                const piTimes = new Set(piEvents.map((event) => Date.parse(event.at)));
-                if (native.events.some((event) => piTimes.has(Date.parse(event.at)))) {
-                    chronologyErrors.push("pi/native events contain equal timestamps, so strict cross-source order is ambiguous");
-                }
-            }
-        }
-        const eventErrors = [...native.errors, ...chronologyErrors];
         return {
             transcript: withProviderFailure(parts.join("\n"), providerFailure),
             traces,
-            events: resequence(combined),
-            ...(eventErrors.length ? { eventErrors } : {}),
             ...(providerFailure ? { providerFailure } : {}),
         };
     },

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@skill-harness/adapters",
-    "version": "0.16.0",
+    "version": "0.18.0",
     "description": "skill-harness harness adapters — pi runner + claude-code judge routing (internal API)",
     "type": "module",
     "license": "MIT",
@@ -40,7 +40,6 @@
         "prepack": "node ../../scripts/release-pack.mjs --guard"
     },
     "dependencies": {
-        "@skill-harness/core": "0.16.0",
-        "typebox": "1.3.4"
+        "@skill-harness/core": "0.18.0"
     }
 }

package/dist/archive-access.d.ts

@@ -1,58 +0,0 @@
-export interface ArchiveAccessPolicy {
-    archiveRoot: string;
-    id: string;
-    expiresAt: number;
-    maxCalls: number;
-    maxBytes: number;
-    purposes: string[];
-}
-export interface ArchiveConsent {
-    manifestId: string;
-    purpose: string;
-    expiresAt: number;
-}
-export interface GovernedArchiveRoute {
-    directory: string;
-    purpose: string;
-}
-export declare function createArchiveAccess(path: string, raw: ArchiveAccessPolicy, permissions: string[]): {
-    inspect: () => {
-        policy: ArchiveAccessPolicy;
-        lastObservedNow: number;
-        consents: {
-            id: unknown;
-            grant: ArchiveConsent;
-            state: string;
-        }[];
-        calls: number;
-        bytes: number;
-        pending: number;
-    };
-    previewConsent: (g: ArchiveConsent) => string;
-    previewRevocation: (id: string) => string;
-    consent(raw: ArchiveConsent, permissions: string[], now: number): string;
-    revoke(id: string, permissions: string[], now: number): void;
-    read(manifestId: string, purpose: string, maxBytes: number, now?: number): import("./evidence-archive.js").ArchiveRead;
-};
-/** Shared cooperative access owner. No history deletion, authentication, OS
- * deadline guarantee, or reinterpretation of legacy raw archive APIs. */
-export declare function openArchiveAccess(path: string): {
-    inspect: () => {
-        policy: ArchiveAccessPolicy;
-        lastObservedNow: number;
-        consents: {
-            id: unknown;
-            grant: ArchiveConsent;
-            state: string;
-        }[];
-        calls: number;
-        bytes: number;
-        pending: number;
-    };
-    previewConsent: (g: ArchiveConsent) => string;
-    previewRevocation: (id: string) => string;
-    consent(raw: ArchiveConsent, permissions: string[], now: number): string;
-    revoke(id: string, permissions: string[], now: number): void;
-    read(manifestId: string, purpose: string, maxBytes: number, now?: number): import("./evidence-archive.js").ArchiveRead;
-};
-export declare function readGovernedArchive(root: string, manifestId: string, maxBytes: number, route: GovernedArchiveRoute, now?: number): import("./evidence-archive.js").ArchiveRead;

package/dist/archive-access.js

@@ -1,61 +0,0 @@
-import { learningCopy, learningHash, learningJournal, registerLearningStore, verifyLearningStore } from './learning-journal.js';
-import { readArchiveSource } from './evidence-archive.js';
-export function createArchiveAccess(path, raw, permissions) {
-    const policy = learningCopy(raw), binding = learningHash(policy);
-    if (!permissions.includes(binding))
-        throw Error('exact archive policy permission required');
-    validate(policy);
-    registerLearningStore(policy.archiveRoot, 'access', learningHash(policy.id), path, binding);
-    learningJournal(path, { type: 'archive-access-v1', policy, binding });
-    return openArchiveAccess(path);
-}
-function validate(p) { if (typeof p.id !== 'string' || !p.id.length || p.id.length > 128 || !Number.isSafeInteger(p.expiresAt) || p.expiresAt < 0 || !Number.isSafeInteger(p.maxCalls) || p.maxCalls < 1 || p.maxCalls > 1024 || !Number.isSafeInteger(p.maxBytes) || p.maxBytes < 1 || p.maxBytes > 64 * 1024 * 1024 || !Array.isArray(p.purposes) || !p.purposes.length || p.purposes.length > 16 || new Set(p.purposes).size !== p.purposes.length || p.purposes.some(s => typeof s !== 'string' || !s.length || s.length > 128))
-    throw Error('bounded archive access policy required'); }
-/** Shared cooperative access owner. No history deletion, authentication, OS
- * deadline guarantee, or reinterpretation of legacy raw archive APIs. */
-export function openArchiveAccess(path) {
-    const journal = learningJournal(path), first = journal.read()[0].value, policy = learningCopy(first.policy);
-    validate(policy);
-    if (first.type !== 'archive-access-v1' || learningHash(policy) !== first.binding)
-        throw Error('archive policy changed');
-    const history = () => { verifyLearningStore(policy.archiveRoot, 'access', learningHash(policy.id), path, String(first.binding)); return journal.read(); };
-    const clock = (now) => { const rows = history(); if (!Number.isSafeInteger(now) || now < Math.max(0, ...rows.map(e => Number(e.value.now ?? 0))))
-        throw Error('archive access clock rewind'); journal.append(rows.at(-1).id, { type: 'clock', now }); if (now >= policy.expiresAt)
-        throw Error('archive access expired'); };
-    const consent = (raw) => { const g = learningCopy(raw); if (!/^[a-f0-9]{64}$/.test(g.manifestId) || !policy.purposes.includes(g.purpose) || !Number.isSafeInteger(g.expiresAt) || g.expiresAt < 0 || g.expiresAt > policy.expiresAt)
-        throw Error('consent outside policy'); return g; };
-    const digest = (g) => learningHash({ policy: String(first.binding), consent: consent(g) });
-    const revokeDigest = (id) => learningHash({ policy: String(first.binding), revoke: id });
-    const inspect = () => { const rows = history(), claims = rows.filter(e => e.value.type === 'read-claim'), lastObservedNow = Math.max(0, ...rows.map(e => Number(e.value.now ?? 0))); return { policy: learningCopy(policy), lastObservedNow, consents: rows.filter(e => e.value.type === 'consented').map(e => { const grant = e.value.grant; return { id: e.value.consentId, grant: learningCopy(grant), state: rows.some(r => r.value.type === 'revoked' && r.value.consentId === e.value.consentId) ? 'revoked' : lastObservedNow >= Math.min(policy.expiresAt, grant.expiresAt) ? 'expired' : 'not-revoked-at-last-observed-clock' }; }), calls: claims.length, bytes: claims.reduce((n, e) => { const settled = rows.find(s => s.value.type === 'read-settled' && s.value.claim === e.id); return n + Number(settled ? settled.value.bytes : e.value.reserved); }, 0), pending: claims.filter(e => !rows.some(s => s.value.type === 'read-settled' && s.value.claim === e.id)).length }; };
-    return { inspect, previewConsent: digest, previewRevocation: revokeDigest,
-        consent(raw, permissions, now) { clock(now); const g = consent(raw), id = digest(g), rows = history(); if (!permissions.includes(id) || now >= g.expiresAt)
-            throw Error('exact current consent permission required'); if (rows.some(e => e.value.type === 'revoked' && e.value.consentId === id))
-            throw Error('consent revoked'); if (!rows.some(e => e.value.type === 'consented' && e.value.consentId === id))
-            journal.append(rows.at(-1).id, { type: 'consented', consentId: id, grant: g, now }); return id; },
-        revoke(id, permissions, now) { clock(now); const rows = history(); if (!permissions.includes(revokeDigest(id)) || !rows.some(e => e.value.type === 'consented' && e.value.consentId === id))
-            throw Error('exact revocation permission required'); if (!rows.some(e => e.value.type === 'revoked' && e.value.consentId === id))
-            journal.append(rows.at(-1).id, { type: 'revoked', consentId: id, now }); },
-        read(manifestId, purpose, maxBytes, now = Date.now()) {
-            clock(now);
-            const rows = history(), valid = rows.filter(e => e.value.type === 'consented').filter(e => { const g = e.value.grant; return g.manifestId === manifestId && g.purpose === purpose && now < g.expiresAt && !rows.some(r => r.value.type === 'revoked' && r.value.consentId === e.value.consentId); });
-            if (valid.length !== 1)
-                throw Error('unique active manifest/purpose consent required');
-            if (!Number.isSafeInteger(maxBytes) || maxBytes < 0 || maxBytes > 8 * 1024 * 1024)
-                throw Error('archive read bound');
-            const used = inspect();
-            if (used.calls >= policy.maxCalls || maxBytes > policy.maxBytes - used.bytes)
-                throw Error('shared archive budget exhausted');
-            const claim = journal.append(rows.at(-1).id, { type: 'read-claim', manifestId, purpose, consentId: valid[0].value.consentId, reserved: maxBytes, now });
-            const result = readArchiveSource(policy.archiveRoot, manifestId, maxBytes);
-            journal.append(claim.id, { type: 'read-settled', claim: claim.id, bytes: result.status === 'available' ? result.bytes.length : 0, status: result.status, now });
-            return result;
-        },
-    };
-}
-export function readGovernedArchive(root, manifestId, maxBytes, route, now = Date.now()) {
-    const access = openArchiveAccess(route.directory);
-    if (access.inspect().policy.archiveRoot !== root)
-        throw Error('governed archive root mismatch');
-    return access.read(manifestId, route.purpose, maxBytes, now);
-}
-//# sourceMappingURL=archive-access.js.map

package/dist/archive-checkpoint.d.ts

@@ -1,47 +0,0 @@
-import { type ArchiveRead, type ArchiveSourceInput, type ArchiveRetention } from "./evidence-archive.js";
-export type SnapshotChange = "initial" | "append" | "replaced" | "unknown";
-export interface ArchiveCheckpoint {
-    version: "archive-checkpoint-v1";
-    sourceId: string;
-    sourceManifestId: string;
-    sourceSha256: string;
-    sourceBytes: number;
-    previousCheckpointId: string | null;
-    lineage: string;
-    declaredParser: {
-        id: string;
-        version: string;
-    };
-    reader: "jsonl-syntax-v1";
-    retention: ArchiveRetention;
-    change: SnapshotChange;
-    syntax: "complete" | "partial" | "error" | "unavailable";
-    completeBytes: number;
-    pendingBytes: number;
-    invalidLines: number;
-    issues: string[];
-    activeBranch: null;
-    acceptance: "not-assessed";
-}
-export interface ArchivedRecord {
-    id: string;
-    line: number;
-    start: number;
-    end: number;
-    value: unknown;
-}
-export interface CheckpointRead {
-    checkpoint: ArchiveCheckpoint;
-    source: ArchiveRead;
-    records: ArchivedRecord[];
-}
-/** Restart from the immutable checkpoint ID. This never advances a worker or invokes a gate. */
-export declare function readArchiveCheckpoint(root: string, checkpointId: string): CheckpointRead;
-/** Caller supplies an explicit snapshot, policy and prior receipt. No inferred active branch or acceptance. */
-export declare function ingestArchiveSnapshot(root: string, input: ArchiveSourceInput & {
-    previousCheckpointId?: string;
-}): CheckpointRead & {
-    checkpointId: string;
-    change: SnapshotChange | "repeat";
-    newRecords: ArchivedRecord[];
-};

package/dist/archive-checkpoint.js

@@ -1,116 +0,0 @@
-import { createHash } from "node:crypto";
-import { parseArchivedJsonl, readArchiveSource, retainArchiveSource, } from "./evidence-archive.js";
-const hash = (value) => createHash("sha256").update(value).digest("hex");
-const SHA = /^[a-f0-9]{64}$/;
-const LIMIT = 8 * 1024 * 1024;
-const parserEqual = (a, b) => a.id === b.id && a.version === b.version;
-function reject() { throw new Error("invalid archive checkpoint"); }
-function parseCheckpoint(bytes) {
-    const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-    const v = JSON.parse(text);
-    if (JSON.stringify(v) !== text)
-        reject();
-    const names = ["version", "sourceId", "sourceManifestId", "sourceSha256", "sourceBytes", "previousCheckpointId", "lineage", "declaredParser", "reader", "retention", "change", "syntax", "completeBytes", "pendingBytes", "invalidLines", "issues", "activeBranch", "acceptance"];
-    if (!v || Object.keys(v).length !== names.length || Object.keys(v).some(k => !names.includes(k))
-        || v.version !== "archive-checkpoint-v1" || v.reader !== "jsonl-syntax-v1"
-        || typeof v.sourceId !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(v.sourceId)
-        || ![v.sourceManifestId, v.sourceSha256, v.lineage].every(h => typeof h === "string" && SHA.test(h))
-        || !(v.previousCheckpointId === null || (typeof v.previousCheckpointId === "string" && SHA.test(v.previousCheckpointId)))
-        || ![v.sourceBytes, v.completeBytes, v.pendingBytes, v.invalidLines].every(n => Number.isSafeInteger(n) && n >= 0 && n <= LIMIT)
-        || v.completeBytes + v.pendingBytes !== v.sourceBytes
-        || !v.declaredParser || Object.keys(v.declaredParser).sort().join() !== "id,version"
-        || ![v.declaredParser.id, v.declaredParser.version].every(s => typeof s === "string" && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(s))
-        || !["exact", "redacted", "reference-only"].includes(v.retention)
-        || !["initial", "append", "replaced", "unknown"].includes(v.change)
-        || !["complete", "partial", "error", "unavailable"].includes(v.syntax)
-        || (v.retention === "reference-only" && (v.syntax !== "unavailable" || v.completeBytes !== 0 || v.invalidLines !== 0))
-        || !Array.isArray(v.issues) || v.issues.length > 16 || v.issues.some(i => typeof i !== "string" || i.length > 128)
-        || v.activeBranch !== null || v.acceptance !== "not-assessed")
-        reject();
-    return v;
-}
-function records(checkpoint, source) {
-    if (source.status !== "available")
-        return [];
-    const parsed = parseArchivedJsonl(source.bytes);
-    return parsed.records.map(record => ({
-        ...record, id: hash(JSON.stringify([checkpoint.sourceId, checkpoint.lineage, record.start, hash(source.bytes.subarray(record.start, record.end))])),
-    }));
-}
-/** Restart from the immutable checkpoint ID. This never advances a worker or invokes a gate. */
-export function readArchiveCheckpoint(root, checkpointId) {
-    const stored = readArchiveSource(root, checkpointId);
-    if (stored.status !== "available" || stored.reference.retention !== "exact")
-        reject();
-    const checkpoint = parseCheckpoint(stored.bytes);
-    const source = readArchiveSource(root, checkpoint.sourceManifestId);
-    if (source.status === "available") {
-        const ref = source.reference;
-        if (ref.sourceId !== checkpoint.sourceId || ref.sha256 !== checkpoint.sourceSha256 || ref.bytes !== checkpoint.sourceBytes
-            || ref.retention !== checkpoint.retention || !parserEqual(ref.parser, checkpoint.declaredParser))
-            reject();
-        const actual = parseArchivedJsonl(source.bytes);
-        if (actual.status !== checkpoint.syntax || actual.completeBytes !== checkpoint.completeBytes
-            || actual.pendingBytes !== checkpoint.pendingBytes || actual.errors.length !== checkpoint.invalidLines)
-            reject();
-    }
-    return { checkpoint, source, records: records(checkpoint, source) };
-}
-/** Caller supplies an explicit snapshot, policy and prior receipt. No inferred active branch or acceptance. */
-export function ingestArchiveSnapshot(root, input) {
-    // Inspect the prior bytes BEFORE storing this snapshot, so reacquisition cannot disguise a prior gap.
-    const previous = input.previousCheckpointId ? readArchiveCheckpoint(root, input.previousCheckpointId) : undefined;
-    if (previous && previous.checkpoint.sourceId !== input.sourceId)
-        throw new Error("checkpoint source mismatch");
-    const captured = retainArchiveSource(root, input);
-    const source = readArchiveSource(root, captured.manifestId);
-    const issues = [];
-    let change = previous ? "unknown" : "initial";
-    let lineage = captured.manifestId;
-    if (previous) {
-        if (!parserEqual(previous.checkpoint.declaredParser, captured.reference.parser) || previous.checkpoint.retention !== input.retention) {
-            issues.push("parser-or-representation-changed");
-        }
-        else if (previous.source.status !== "available") {
-            issues.push("previous-content-unavailable");
-        }
-        else if (input.retention !== "exact") {
-            issues.push("non-exact-continuity-unknown");
-        }
-        else if (source.status === "available") {
-            if (captured.manifestId === previous.checkpoint.sourceManifestId) {
-                return { ...previous, checkpointId: input.previousCheckpointId, change: "repeat", newRecords: [] };
-            }
-            if (source.bytes.length >= previous.source.bytes.length && source.bytes.subarray(0, previous.source.bytes.length).equals(previous.source.bytes)) {
-                change = "append";
-                lineage = previous.checkpoint.lineage;
-            }
-            else {
-                change = "replaced";
-                issues.push("source-replaced");
-            }
-        }
-    }
-    if (input.retention === "redacted")
-        issues.push("redacted-representation");
-    if (source.status !== "available")
-        issues.push("content-not-retained");
-    const syntax = source.status === "available" ? parseArchivedJsonl(source.bytes) : undefined;
-    const checkpoint = {
-        version: "archive-checkpoint-v1", sourceId: input.sourceId,
-        sourceManifestId: captured.manifestId, sourceSha256: captured.reference.sha256, sourceBytes: captured.reference.bytes,
-        previousCheckpointId: input.previousCheckpointId ?? null, lineage,
-        declaredParser: captured.reference.parser, reader: "jsonl-syntax-v1", retention: input.retention, change,
-        syntax: syntax?.status ?? "unavailable", completeBytes: syntax?.completeBytes ?? 0,
-        pendingBytes: syntax?.pendingBytes ?? captured.reference.bytes, invalidLines: syntax?.errors.length ?? 0,
-        issues, activeBranch: null, acceptance: "not-assessed",
-    };
-    const result = retainArchiveSource(root, {
-        sourceId: `checkpoint-${hash(input.sourceId)}`, parser: { id: "archive-checkpoint", version: "1" },
-        retention: "exact", bytes: Buffer.from(JSON.stringify(checkpoint)),
-    });
-    const all = records(checkpoint, source);
-    return { checkpointId: result.manifestId, checkpoint, source, records: all, change,
-        newRecords: change === "append" ? all.filter(record => record.start >= previous.checkpoint.completeBytes) : all };
-}
-//# sourceMappingURL=archive-checkpoint.js.map

package/dist/archive-facts.d.ts

@@ -1,19 +0,0 @@
-import type { WorkSignalFacts } from '@skill-harness/core';
-import { type GovernedArchiveRoute } from './archive-access.js';
-/** Operational fixed-order fact adapter, not arbitrary model/host fact inference.
- * The caller supplies independent scope/source pins; all actual bytes use consent. */
-export declare function readFixedOrderFacts(root: string, manifestId: string, route: GovernedArchiveRoute, raw: {
-    producerCommit: string;
-    scopeDigest: string;
-    population: string;
-    obligations: string[];
-}, now?: number): {
-    facts: WorkSignalFacts;
-    source: {
-        manifestId: string;
-        sha256: string;
-        producerCommit: string;
-    };
-    unknownNodes: any;
-    acceptance: "not-assessed";
-};

package/dist/archive-facts.js

@@ -1,20 +0,0 @@
-import { createHash } from 'node:crypto';
-import { readGovernedArchive } from './archive-access.js';
-import { learningCopy } from './learning-journal.js';
-/** Operational fixed-order fact adapter, not arbitrary model/host fact inference.
- * The caller supplies independent scope/source pins; all actual bytes use consent. */
-export function readFixedOrderFacts(root, manifestId, route, raw, now = Date.now()) {
-    const expected = learningCopy(raw);
-    if (!/^[a-f0-9]{40}$/.test(expected.producerCommit) || !/^[a-f0-9]{64}$/.test(expected.scopeDigest) || typeof expected.population !== 'string' || !expected.population.length || expected.population.length > 512 || /[\u0000-\u001f\u007f]/.test(expected.population) || !Array.isArray(expected.obligations) || expected.obligations.length > 128 || expected.obligations.some(h => !/^[a-f0-9]{64}$/.test(h)))
-        throw Error('explicit fact source/scope pins required');
-    const read = readGovernedArchive(root, manifestId, 1024 * 1024, route, now);
-    if (read.status !== 'available' || read.reference.retention !== 'exact' || read.reference.parser.id !== 'factory-order-readback' || read.reference.parser.version !== '1')
-        throw Error('exact governed order readback required');
-    const value = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(read.bytes));
-    if (value.kind !== 'actual-fixed-profile-order' || value.producerCommit !== expected.producerCommit || !Array.isArray(value.nodes) || !value.nodes.length || value.nodes.length > 128 || value.nodes.some((n) => !n || !expected.obligations.includes(n.obligation?.digest) || typeof n.state !== 'string'))
-        throw Error('order facts source/scope mismatch');
-    const digest = createHash('sha256').update(read.bytes).digest('hex');
-    const facts = { scopeDigest: expected.scopeDigest, version: 'fixed-order-facts-v1', population: expected.population, expectedWaits: [], checkpoints: [], violations: value.nodes.filter((n) => n.state === 'exhausted').map((n) => ({ obligationDigest: n.obligation.digest, status: 'FAIL', evidence: digest })), priorAccepted: [] };
-    return { facts, source: { manifestId, sha256: digest, producerCommit: expected.producerCommit }, unknownNodes: value.nodes.filter((n) => !['satisfied', 'exhausted'].includes(n.state)).length, acceptance: 'not-assessed' };
-}
-//# sourceMappingURL=archive-facts.js.map