@skill-harness/adapters 0.17.0 → 0.18.0

package/dist/prompt-provenance.d.ts

@@ -1,22 +0,0 @@
-import { PROMPT_NORMALIZATION_RULE, type PromptMechanism, type PromptProvenance } from "@skill-harness/core";
-export { PROMPT_NORMALIZATION_RULE } from "@skill-harness/core";
-/** Registry entry 1: replace exactly Pi's dynamic cwd line, preserving every other byte. */
-export declare function normalizePromptPayload(value: unknown, rule: typeof PROMPT_NORMALIZATION_RULE): unknown;
-export declare function promptCaptureIsTrusted(extensionCount: number, hasRuntimeInjection?: boolean): boolean;
-export interface AuthenticatedPromptObservation {
-    observation: PromptProvenance;
-    mac: string;
-}
-export interface AuthenticatedPromptSummary {
-    summary: {
-        count: number;
-    };
-    mac: string;
-}
-export declare function authenticatePromptObservation(observation: PromptProvenance, authenticationKey: string): AuthenticatedPromptObservation;
-export declare function authenticatePromptSummary(count: number, authenticationKey: string): AuthenticatedPromptSummary;
-export declare function verifyPromptSummary(value: unknown, expectedCount: number, authenticationKey: string): boolean;
-/** Compute observation from final provider payload prompt bytes; caller supplies content, never status. */
-export declare function observeProviderPayload(payload: unknown, contract: string, mechanism: PromptMechanism, requestIndex: number): PromptProvenance;
-/** Parent-side binding: never accept contract identity or status from the child observer. */
-export declare function bindPromptObservation(value: unknown, contract: string, mechanism: PromptMechanism, requestIndex: number, authenticationKey: string, observerRequestIndex?: number): PromptProvenance;

package/dist/prompt-provenance.js

@@ -1,146 +0,0 @@
-import { createHash, createHmac, timingSafeEqual } from "node:crypto";
-import { PROMPT_NORMALIZATION_FLAGS, PROMPT_NORMALIZATION_PATTERN, PROMPT_NORMALIZATION_REPLACEMENT, PROMPT_NORMALIZATION_RULE } from "@skill-harness/core";
-export { PROMPT_NORMALIZATION_RULE } from "@skill-harness/core";
-function sha(bytes) {
-    return createHash("sha256").update(bytes, "utf8").digest("hex");
-}
-/** Registry entry 1: replace exactly Pi's dynamic cwd line, preserving every other byte. */
-export function normalizePromptPayload(value, rule) {
-    if (rule !== PROMPT_NORMALIZATION_RULE)
-        throw new Error(`unknown prompt normalization rule ${String(rule)}`);
-    if (typeof value === "string")
-        return value.replace(new RegExp(PROMPT_NORMALIZATION_PATTERN, PROMPT_NORMALIZATION_FLAGS), PROMPT_NORMALIZATION_REPLACEMENT);
-    if (Array.isArray(value))
-        return value.map((entry) => normalizePromptPayload(entry, rule));
-    if (value && typeof value === "object")
-        return Object.fromEntries(Object.entries(value).map(([key, entry]) => [key, normalizePromptPayload(entry, rule)]));
-    return value;
-}
-function countInStrings(value, needle) {
-    if (typeof value === "string") {
-        if (!needle)
-            return 0;
-        let count = 0, at = 0;
-        while ((at = value.indexOf(needle, at)) !== -1) {
-            count++;
-            at += needle.length;
-        }
-        return count;
-    }
-    if (Array.isArray(value))
-        return value.reduce((sum, entry) => sum + countInStrings(entry, needle), 0);
-    if (value && typeof value === "object") {
-        const record = value;
-        // A scenario may quote the contract. User-authored text is stimulus, never
-        // delivery, but providers also place tool results inside role=user messages.
-        if (record.role === "user") {
-            const content = Array.isArray(record.content) ? record.content : Array.isArray(record.parts) ? record.parts : [];
-            return content
-                .filter(block => block && typeof block === "object" && (["tool_result", "tool_response", "function_response"].includes(String(block.type ?? "")) ||
-                "functionResponse" in block || "function_response" in block))
-                .reduce((sum, block) => sum + countInStrings(block, needle), 0);
-        }
-        return Object.values(record).reduce((sum, entry) => sum + countInStrings(entry, needle), 0);
-    }
-    return 0;
-}
-const PROMPT_FIELDS = new Set(["instructions", "input", "system", "messages", "prompt", "contents"]);
-function promptProjection(payload) {
-    if (!payload || typeof payload !== "object" || Array.isArray(payload))
-        return null;
-    const record = payload;
-    const projected = Object.fromEntries(Object.entries(record).filter(([key]) => PROMPT_FIELDS.has(key)));
-    const config = record.config && typeof record.config === "object" ? record.config : null;
-    if (config?.systemInstruction !== undefined)
-        projected.systemInstruction = config.systemInstruction;
-    return Object.keys(projected).length ? projected : null;
-}
-export function promptCaptureIsTrusted(extensionCount, hasRuntimeInjection = false) {
-    return extensionCount === 0 && !hasRuntimeInjection;
-}
-function observationMac(observation, authenticationKey) {
-    return createHmac("sha256", authenticationKey).update(JSON.stringify(observation)).digest("hex");
-}
-export function authenticatePromptObservation(observation, authenticationKey) {
-    return { observation, mac: observationMac(observation, authenticationKey) };
-}
-export function authenticatePromptSummary(count, authenticationKey) {
-    const summary = { count };
-    return { summary, mac: createHmac("sha256", authenticationKey).update(JSON.stringify(summary)).digest("hex") };
-}
-function validMac(supplied, expected) {
-    if (typeof supplied !== "string" || !/^[a-f0-9]{64}$/i.test(supplied))
-        return false;
-    const suppliedBytes = Buffer.from(supplied, "hex"), expectedBytes = Buffer.from(expected, "hex");
-    return suppliedBytes.length === expectedBytes.length && timingSafeEqual(suppliedBytes, expectedBytes);
-}
-export function verifyPromptSummary(value, expectedCount, authenticationKey) {
-    if (!value || typeof value !== "object")
-        return false;
-    const envelope = value;
-    if (!envelope.summary || envelope.summary.count !== expectedCount)
-        return false;
-    const expected = createHmac("sha256", authenticationKey).update(JSON.stringify(envelope.summary)).digest("hex");
-    return validMac(envelope.mac, expected);
-}
-function statusFor(occurrences, mechanism, observable) {
-    if (!observable)
-        return "ERROR";
-    return occurrences === (mechanism === "none" ? 0 : 1) ? "PASS" : "NOT-MEASURED";
-}
-/** Compute observation from final provider payload prompt bytes; caller supplies content, never status. */
-export function observeProviderPayload(payload, contract, mechanism, requestIndex) {
-    const projection = promptProjection(payload);
-    const raw = JSON.stringify(projection ?? {});
-    const normalized = JSON.stringify(normalizePromptPayload(projection ?? {}, PROMPT_NORMALIZATION_RULE));
-    const occurrences = countInStrings(projection ?? {}, contract);
-    const observable = projection !== null;
-    return {
-        capture_version: "prompt-provenance-v1",
-        request_index: requestIndex,
-        raw_sha256: sha(raw),
-        normalized_sha256: sha(normalized),
-        normalization_rule: PROMPT_NORMALIZATION_RULE,
-        bytes: Buffer.byteLength(raw),
-        contract_sha256: sha(contract),
-        contract_bytes: Buffer.byteLength(contract),
-        contract_occurrences: occurrences,
-        mechanism,
-        status: statusFor(occurrences, mechanism, observable),
-        ...(observable ? {} : { error: "provider payload has no supported model-visible prompt field" }),
-    };
-}
-/** Parent-side binding: never accept contract identity or status from the child observer. */
-export function bindPromptObservation(value, contract, mechanism, requestIndex, authenticationKey, observerRequestIndex = requestIndex) {
-    const fallback = { ...observeProviderPayload({}, contract, mechanism, requestIndex), status: "ERROR" };
-    if (!value || typeof value !== "object")
-        return { ...fallback, error: "prompt observer emitted a non-object record" };
-    const envelope = value;
-    if (!envelope.observation)
-        return { ...fallback, error: "prompt observation authentication missing" };
-    const expectedMac = observationMac(envelope.observation, authenticationKey);
-    if (!validMac(envelope.mac, expectedMac))
-        return { ...fallback, error: "prompt observation authentication failed" };
-    const record = envelope.observation;
-    if (record.request_index !== observerRequestIndex)
-        return { ...fallback, error: "prompt observation replay or ordering mismatch" };
-    const expectedDigest = sha(contract), expectedBytes = Buffer.byteLength(contract);
-    const valid = record.capture_version === "prompt-provenance-v1" &&
-        record.normalization_rule === PROMPT_NORMALIZATION_RULE && record.mechanism === mechanism &&
-        record.contract_sha256 === expectedDigest && record.contract_bytes === expectedBytes &&
-        typeof record.raw_sha256 === "string" && /^[a-f0-9]{64}$/i.test(record.raw_sha256) &&
-        typeof record.normalized_sha256 === "string" && /^[a-f0-9]{64}$/i.test(record.normalized_sha256) &&
-        Number.isInteger(record.bytes) && record.bytes >= 0 &&
-        Number.isInteger(record.contract_occurrences) && record.contract_occurrences >= 0;
-    if (!valid)
-        return { ...fallback, error: "prompt observation failed parent contract/provenance binding" };
-    const occurrences = record.contract_occurrences;
-    return {
-        capture_version: "prompt-provenance-v1", request_index: requestIndex,
-        raw_sha256: record.raw_sha256, normalized_sha256: record.normalized_sha256,
-        normalization_rule: PROMPT_NORMALIZATION_RULE, bytes: record.bytes,
-        contract_sha256: expectedDigest, contract_bytes: expectedBytes, contract_occurrences: occurrences,
-        mechanism, status: statusFor(occurrences, mechanism, true),
-    };
-}
-//# sourceMappingURL=prompt-provenance.js.map

package/dist/reviewed-archive-export.d.ts

@@ -1,42 +0,0 @@
-import { type GovernedArchiveRoute } from './archive-access.js';
-export interface ReviewedExportPolicy {
-    archiveRoot: string;
-    access?: GovernedArchiveRoute;
-    manifestIds: string[];
-    destination: string;
-    expiresAt: number;
-    redact: string[];
-    maxBytes: number;
-}
-/** Duration is a cooperative access lease, not physical erasure or revocation of
- * previously exported bytes. Existing archive/history is NEVER deleted. */
-export declare function createReviewedArchiveExport(path: string, raw: ReviewedExportPolicy, policyPermissions: string[]): {
-    preview(now: number): {
-        content: string;
-        digest: string;
-        expiresAt: number;
-    };
-    export(previewDigest: string, reviewPermissions: string[], now: number): {
-        delivery: "local-reviewed-file";
-        previewDigest: string;
-        sha256: string;
-        bytes: number;
-        expiresAt: number;
-        physicalErasure: boolean;
-    };
-};
-export declare function openReviewedArchiveExport(path: string): {
-    preview(now: number): {
-        content: string;
-        digest: string;
-        expiresAt: number;
-    };
-    export(previewDigest: string, reviewPermissions: string[], now: number): {
-        delivery: "local-reviewed-file";
-        previewDigest: string;
-        sha256: string;
-        bytes: number;
-        expiresAt: number;
-        physicalErasure: boolean;
-    };
-};

package/dist/reviewed-archive-export.js

@@ -1,78 +0,0 @@
-import { constants, openSync, closeSync, writeSync, fsyncSync, realpathSync, lstatSync } from 'node:fs';
-import { dirname, isAbsolute, resolve } from 'node:path';
-import { createHash } from 'node:crypto';
-import { learningJournal, learningCopy, learningHash, learningFile } from './learning-journal.js';
-import { readGovernedArchive } from './archive-access.js';
-import { readArchiveSource } from './evidence-archive.js';
-const sha = (b) => createHash('sha256').update(b).digest('hex');
-const credential = /(?:ghp_|github_pat_|sk-(?:live-|proj-)?)[A-Za-z0-9_-]{20,}|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:\s*bearer\s+\S+/i;
-/** Duration is a cooperative access lease, not physical erasure or revocation of
- * previously exported bytes. Existing archive/history is NEVER deleted. */
-export function createReviewedArchiveExport(path, raw, policyPermissions) {
-    const policy = learningCopy(raw), digest = learningHash(policy);
-    if (!policyPermissions.includes(digest))
-        throw Error('exact export policy permission required');
-    if (!isAbsolute(policy.archiveRoot) || !isAbsolute(policy.destination) || !Number.isSafeInteger(policy.expiresAt) || policy.expiresAt < 0 || !Number.isSafeInteger(policy.maxBytes) || policy.maxBytes < 1 || policy.maxBytes > 1024 * 1024 || !Array.isArray(policy.manifestIds) || !policy.manifestIds.length || policy.manifestIds.length > 16 || new Set(policy.manifestIds).size !== policy.manifestIds.length || policy.manifestIds.some(s => !/^[a-f0-9]{64}$/.test(s)) || !Array.isArray(policy.redact) || policy.redact.length > 64 || policy.redact.some(s => typeof s !== 'string' || !s.length || s.length > 4096))
-        throw Error('bounded reviewed export policy required');
-    learningJournal(path, { type: 'reviewed-export-v1', policy, policyDigest: digest });
-    return openReviewedArchiveExport(path);
-}
-export function openReviewedArchiveExport(path) {
-    const journal = learningJournal(path), first = journal.read()[0].value, policy = first.policy;
-    if (first.type !== 'reviewed-export-v1' || learningHash(policy) !== first.policyDigest)
-        throw Error('export policy changed');
-    const clock = (now) => { const rows = journal.read(), last = Math.max(0, ...rows.map(r => Number(r.value.now ?? 0))); if (!Number.isSafeInteger(now) || now < last)
-        throw Error('export clock rewind'); journal.append(rows.at(-1).id, { type: 'access', now }); if (now >= policy.expiresAt)
-        throw Error('export access lease expired'); };
-    const render = () => { let total = 0; const sources = policy.manifestIds.map(id => { const read = policy.access ? readGovernedArchive(policy.archiveRoot, id, policy.maxBytes - total, policy.access) : readArchiveSource(policy.archiveRoot, id, policy.maxBytes - total); if (read.status !== 'available')
-        throw Error('export source unavailable or over bound'); total += read.bytes.length; let content = new TextDecoder('utf-8', { fatal: true }).decode(read.bytes); for (const literal of policy.redact)
-        content = content.split(literal).join('[REDACTED]'); if (credential.test(content))
-        throw Error('credential pattern remains; revise explicit redaction policy'); return { manifestId: id, sourceSha256: sha(read.bytes), exportSha256: sha(content), representation: 'reviewed-view-not-authority', content }; }); const content = JSON.stringify({ version: 'reviewed-archive-export-v1', sources }, null, 2) + '\n'; if (Buffer.byteLength(content) > 2 * policy.maxBytes + 16384)
-        throw Error('redacted export size bound'); return { content, digest: learningHash({ policyDigest: first.policyDigest, content }), expiresAt: policy.expiresAt }; };
-    return { preview(now) { clock(now); const preview = render(), rows = journal.read(); journal.append(rows.at(-1).id, { type: 'previewed', digest: preview.digest, now }); return preview; },
-        export(previewDigest, reviewPermissions, now) {
-            clock(now);
-            if (!reviewPermissions.includes(previewDigest))
-                throw Error('exact reviewed preview permission required');
-            const rows = journal.read();
-            if (!rows.some(r => r.value.type === 'previewed' && r.value.digest === previewDigest))
-                throw Error('preview must precede export');
-            if (rows.some(r => r.value.type === 'export-claimed'))
-                throw Error('export already claimed; no automatic retry');
-            const preview = render();
-            if (preview.digest !== previewDigest)
-                throw Error('preview/source changed');
-            const parent = dirname(policy.destination), stat = lstatSync(parent);
-            if (!stat.isDirectory() || stat.isSymbolicLink() || realpathSync(parent) !== resolve(parent) || (stat.mode & 0o077) || (process.getuid && stat.uid !== process.getuid()))
-                throw Error('private owned export destination required');
-            const claim = journal.append(rows.at(-1).id, { type: 'export-claimed', digest: previewDigest, now });
-            const data = Buffer.from(preview.content), fd = openSync(policy.destination, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
-            try {
-                let offset = 0;
-                while (offset < data.length) {
-                    const n = writeSync(fd, data, offset, data.length - offset);
-                    if (!n)
-                        throw Error('export write stalled');
-                    offset += n;
-                }
-                fsyncSync(fd);
-            }
-            finally {
-                closeSync(fd);
-            }
-            const dir = openSync(parent, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
-            try {
-                fsyncSync(dir);
-            }
-            finally {
-                closeSync(dir);
-            }
-            if (!learningFile(policy.destination, data.length).equals(data))
-                throw Error('export readback mismatch');
-            const receipt = { delivery: 'local-reviewed-file', previewDigest, sha256: sha(data), bytes: data.length, expiresAt: policy.expiresAt, physicalErasure: false };
-            journal.append(claim.id, { type: 'exported', receipt, now });
-            return receipt;
-        },
-    };
-}
-//# sourceMappingURL=reviewed-archive-export.js.map

package/dist/session-observation.d.ts

@@ -1,50 +0,0 @@
-type Row = Record<string, any>;
-export interface SessionTimelineEntry {
-    line: number;
-    timestamp: string | null;
-    kind: string;
-    excerpt: string;
-}
-export interface SessionObservation {
-    version: 'pi-session-observation-v1';
-    sessionId: string;
-    cwd: string;
-    timeline: SessionTimelineEntry[];
-    toolCalls: Record<string, number>;
-    userMessages: number;
-    assistantMessages: number;
-    modelRecords: {
-        provider: string;
-        model: string;
-        messages: number;
-    }[];
-    usage: {
-        fields: Record<string, {
-            sum: number;
-            reportedMessages: number;
-        }>;
-        assistantMessages: number;
-        scope: 'this-transcript-only';
-    };
-    lastActivity: string | null;
-    lastAssistantStop: string | null;
-    gaps: string[];
-}
-export declare function sessionText(bytes: Uint8Array): string;
-export declare function sessionRows(bytes: Uint8Array): Row[];
-/** Chronological visible history, including abandoned branches. Never interprets prose as approval. */
-export declare function observePiSession(bytes: Uint8Array): SessionObservation;
-export interface SessionAttempt {
-    executionId: string;
-    parentExecutionId: string | null;
-    logicalChildId: string;
-    agent: string | null;
-    state: string;
-    pane: string | null;
-    startedAt: string | null;
-    endedAt: string | null;
-    runningSeconds: number | null;
-}
-export declare function observeSessionLedger(bytes: Uint8Array): SessionAttempt[];
-export declare function sessionScope(observation: SessionObservation, sourceSha256: string): string;
-export {};

package/dist/session-observation.js

@@ -1,186 +0,0 @@
-import { learningHash } from './learning-journal.js';
-import { normalizePiDaddyLedgerV3 } from './trajectory.js';
-export function sessionText(bytes) {
-    if (bytes.byteLength > 8 * 1024 * 1024)
-        throw Error('session source exceeds 8 MiB');
-    return new TextDecoder('utf-8', { fatal: true }).decode(bytes);
-}
-export function sessionRows(bytes) {
-    const text = sessionText(bytes);
-    if (!text.endsWith('\n'))
-        throw Error('incomplete session/ledger line; retry after the writer settles');
-    const lines = text.slice(0, -1).split('\n');
-    if (lines.length > 4096)
-        throw Error('session source exceeds 4096 records');
-    return lines.map((line, i) => {
-        let row;
-        try {
-            row = JSON.parse(line);
-        }
-        catch {
-            throw Error('invalid JSON record at line ' + (i + 1));
-        }
-        if (!row || typeof row !== 'object' || Array.isArray(row))
-            throw Error('object record required at line ' + (i + 1));
-        return row;
-    });
-}
-function value(v, max = 512) {
-    if (typeof v !== 'string' || !v.trim() || v.length > max)
-        throw Error('bounded session identifier required');
-    return v;
-}
-const stamp = (v) => typeof v === 'string' && Number.isFinite(Date.parse(v)) ? v : null;
-const excerpt = (v) => v.length > 512 ? v.slice(0, 512) + ' … [excerpt; inspect retained source for complete text]' : v;
-/** Chronological visible history, including abandoned branches. Never interprets prose as approval. */
-export function observePiSession(bytes) {
-    const rows = sessionRows(bytes), header = rows[0];
-    if (header?.type !== 'session' || header.version !== 3)
-        throw Error('Pi session format version 3 required');
-    const sessionId = value(header.id), cwd = value(header.cwd, 4096), ids = new Set();
-    const timeline = [], tools = new Map(), models = new Map();
-    const fields = {};
-    let userMessages = 0, assistantMessages = 0, lastAssistantStop = null, lastActivity = null, opaque = 0;
-    const add = (i, row, kind, text) => timeline.push({ line: i + 1, timestamp: stamp(row.timestamp), kind, excerpt: excerpt(text) });
-    rows.forEach((row, i) => {
-        if (i && row.type === 'session')
-            throw Error('multiple session headers');
-        if (row.id !== undefined) {
-            const id = value(row.id);
-            if (ids.has(id))
-                throw Error('duplicate session record id');
-            ids.add(id);
-        }
-        lastActivity = stamp(row.timestamp) ?? lastActivity;
-        if (row.type === 'model_change') {
-            add(i, row, 'model-setting', [row.provider, row.modelId].filter(x => typeof x === 'string').join('/'));
-            return;
-        }
-        if (row.type === 'thinking_level_change') {
-            add(i, row, 'thinking-setting', String(row.thinkingLevel ?? 'unknown'));
-            return;
-        }
-        if (row.type !== 'message')
-            return;
-        const m = row.message;
-        if (!m || typeof m !== 'object' || Array.isArray(m))
-            throw Error('invalid session message');
-        const content = typeof m.content === 'string' ? [{ type: 'text', text: m.content }] : m.content;
-        if (!Array.isArray(content))
-            throw Error('invalid session message content');
-        const text = content.filter(c => c?.type === 'text' && typeof c.text === 'string').map(c => c.text).join('\n');
-        if (m.role === 'user') {
-            userMessages++;
-            add(i, row, 'user-message', text);
-        }
-        else if (m.role === 'assistant') {
-            assistantMessages++;
-            lastAssistantStop = typeof m.stopReason === 'string' ? m.stopReason : null;
-            const provider = typeof m.provider === 'string' ? m.provider : 'unknown', model = typeof m.model === 'string' ? m.model : 'unknown';
-            const key = JSON.stringify([provider, model]), record = models.get(key) ?? { provider, model, messages: 0 };
-            record.messages++;
-            models.set(key, record);
-            if (text)
-                add(i, row, 'assistant-message', text);
-            for (const field of ['input', 'output', 'cacheRead', 'cacheWrite', 'totalTokens']) {
-                const n = m.usage?.[field];
-                if (n === undefined)
-                    continue;
-                if (!Number.isSafeInteger(n) || n < 0)
-                    throw Error('invalid provider-reported usage');
-                const f = fields[field] ?? { sum: 0, reportedMessages: 0 };
-                f.sum += n;
-                f.reportedMessages++;
-                if (!Number.isSafeInteger(f.sum))
-                    throw Error('usage sum overflow');
-                fields[field] = f;
-            }
-            for (const c of content)
-                if (c?.type === 'toolCall') {
-                    const name = value(c.name, 128);
-                    tools.set(name, (tools.get(name) ?? 0) + 1);
-                    add(i, row, 'tool-call', name);
-                }
-        }
-        else if (m.role === 'toolResult')
-            add(i, row, 'tool-result', String(m.toolName ?? 'unknown') + (m.isError === true ? ' — tool reported error' : ' — result recorded; success not inferred'));
-        else
-            opaque++;
-    });
-    const gaps = [
-        'Retrospective chronological transcript; branch selection and live continuity are not established.',
-        'Messages and tool results are evidence to inspect, not independently verified decisions, tests or acceptance.',
-        'Only explicit inputs are captured. Source revision, initial workspace and external user feedback may be missing.',
-        'Usage is provider-reported repeated-request usage, not unique context, billing or complete parent/child accounting.',
-    ];
-    if (opaque)
-        gaps.push(opaque + ' message(s) with other roles omitted from the timeline; retained source is complete.');
-    if (!assistantMessages || Object.values(fields).some(f => f.reportedMessages < assistantMessages) || Object.keys(fields).length < 5)
-        gaps.push('Usage fields are missing; sums cover only reported messages.');
-    if (lastAssistantStop !== 'stop')
-        gaps.push('No final assistant stop observed; this snapshot may represent unfinished work.');
-    return { version: 'pi-session-observation-v1', sessionId, cwd, timeline, toolCalls: Object.fromEntries(tools), userMessages, assistantMessages, modelRecords: [...models.values()], usage: { fields, assistantMessages, scope: 'this-transcript-only' }, lastActivity, lastAssistantStop, gaps };
-}
-export function observeSessionLedger(bytes) {
-    const rows = sessionRows(bytes);
-    normalizePiDaddyLedgerV3(sessionText(bytes));
-    const attempts = new Map(), decisions = new Set(), lifecycles = new Set(), deadlines = new Map(), displayed = new Set();
-    for (const row of rows) {
-        if (!['capability_decision', 'child_lifecycle', 'workspace_lease'].includes(row.event) || String(row.childId).startsWith('check:'))
-            continue;
-        const id = value(row.executionId), old = attempts.get(id);
-        if (old && (old.parentExecutionId !== row.parentExecutionId || old.logicalChildId !== row.childId))
-            throw Error('execution identity changed');
-        const a = old ?? { executionId: id, parentExecutionId: row.parentExecutionId, logicalChildId: row.childId, agent: null, state: 'unknown', pane: null, startedAt: null, endedAt: null, runningSeconds: null };
-        if (row.event === 'workspace_lease') {
-            attempts.set(id, a);
-            continue;
-        }
-        displayed.add(id);
-        if (row.event === 'capability_decision') {
-            if (decisions.has(id))
-                throw Error('duplicate capability decision for one execution');
-            decisions.add(id);
-            a.agent = row.agentType;
-            a.state = row.blocked ? 'refused' : a.state === 'unknown' ? 'authorised' : a.state;
-        }
-        else {
-            if (a.endedAt)
-                throw Error('lifecycle after terminal execution');
-            if (lifecycles.has(id) && row.state === 'starting')
-                throw Error('duplicate starting lifecycle event');
-            if (deadlines.has(id) && stamp(row.deadlineAt) && deadlines.get(id) !== row.deadlineAt)
-                throw Error('lifecycle deadline changed');
-            if (stamp(row.deadlineAt))
-                deadlines.set(id, row.deadlineAt);
-            lifecycles.add(id);
-            a.state = row.state;
-            a.pane = row.herdrPaneId ?? a.pane;
-            if (row.state === 'running')
-                a.startedAt = a.startedAt ?? row.ts;
-            if (['completed', 'failed'].includes(row.state))
-                a.endedAt = row.ts;
-        }
-        if (a.startedAt && a.endedAt) {
-            a.runningSeconds = (Date.parse(a.endedAt) - Date.parse(a.startedAt)) / 1000;
-            if (a.runningSeconds < 0)
-                throw Error('negative execution duration');
-        }
-        attempts.set(id, a);
-    }
-    for (const a of attempts.values()) {
-        const seen = new Set();
-        let cursor = a;
-        while (cursor) {
-            if (seen.has(cursor.executionId))
-                throw Error('execution parent cycle');
-            seen.add(cursor.executionId);
-            cursor = cursor.parentExecutionId ? attempts.get(cursor.parentExecutionId) : undefined;
-        }
-    }
-    return [...attempts.values()].filter(a => displayed.has(a.executionId));
-}
-export function sessionScope(observation, sourceSha256) {
-    return learningHash({ kind: 'retrospective-pi-session', sessionId: observation.sessionId, sourceSha256 });
-}
-//# sourceMappingURL=session-observation.js.map

package/dist/session-retention.d.ts

@@ -1,48 +0,0 @@
-import { observeSessionLedger, type SessionObservation } from './session-observation.js';
-export interface SessionSourceSelection {
-    kind: 'parent' | 'child' | 'ledger' | 'feedback' | 'artifact';
-    path: string;
-    executionId?: string;
-}
-export interface Source {
-    kind: SessionSourceSelection['kind'];
-    path: string;
-    sha256: string;
-    bytes: number;
-    executionId: string | null;
-}
-export interface SessionImportPreview {
-    version: 'session-import-preview-v1';
-    digest: string;
-    sources: Source[];
-    parent: SessionObservation;
-    children: {
-        source: number;
-        executionId: string | null;
-        session: SessionObservation;
-    }[];
-    attempts: ReturnType<typeof observeSessionLedger>;
-    gaps: string[];
-    acceptance: 'not-assessed';
-}
-/** Explicit local selection only. Does not scan session directories, follow links, or contact workers. */
-export declare function prepareSessionImport(selections: SessionSourceSelection[]): SessionImportPreview;
-export declare function retainSessionImport(root: string, preview: SessionImportPreview, expectedDigest: string): string;
-export declare function readRetainedSession(root: string, manifestId: string): {
-    acceptance: "not-assessed";
-    parent: SessionObservation;
-    children: {
-        source: number;
-        executionId: string | null;
-        session: SessionObservation;
-    }[];
-    attempts: import("./session-observation.js").SessionAttempt[];
-    gaps: string[];
-    version: "retrospective-session-v1";
-    manifestId: string;
-    selectionDigest: string;
-    sources: (Source & {
-        manifestId: string;
-    })[];
-};
-export declare function readRetainedSessionSource(root: string, manifestId: string, index: number): Buffer;