@skill-harness/adapters 0.17.0 → 0.19.0

package/dist/index.d.ts

@@ -1,36 +1,6 @@
-export * from './producer-product.js';
 import type { HarnessAdapter } from "@skill-harness/core";
 import { piAdapter } from "./pi.js";
 export declare function getAdapter(name: string): HarnessAdapter;
 export { piAdapter };
-export * from "./prompt-provenance.js";
 export * from "./trajectory.js";
 export * from "./pi-daddy-ledger-v3.js";
-export * from "./evidence-archive.js";
-export * from "./archive-checkpoint.js";
-export * from "./archive-policy.js";
-export * from "./execution-retention-archive.js";
-export * from "./work-candidates.js";
-export * from "./work-case-archive.js";
-export * from "./work-signal-observation.js";
-export * from "./work-signal-cases.js";
-export * from "./work-case-review.js";
-export * from "./archive-read-capability.js";
-export * from "./archived-work.js";
-export * from "./blind-intervention.js";
-export * from "./learning-lifecycle.js";
-export * from "./learning-workspace.js";
-export * from "./learning-trust-setup.js";
-export { learningHash, learningFile } from "./learning-journal.js";
-export * from "./learning-case.js";
-export * from "./archive-observer.js";
-export * from "./weekly-investigation.js";
-export * from "./intervention-run.js";
-export * from "./principal-payload-port.js";
-export * from "./reviewed-archive-export.js";
-export * from "./archive-access.js";
-export * from "./archive-facts.js";
-export * from "./trust-lifecycle.js";
-export * from "./producer-review.js";
-export * from './session-observation.js';
-export * from './session-retention.js';

package/dist/index.js

@@ -1,4 +1,3 @@
-export * from './producer-product.js';
 import { piAdapter } from "./pi.js";
 /**
  * Registered harnesses. pi is the only one (per project scope). The interface
@@ -15,35 +14,6 @@ export function getAdapter(name) {
     return a;
 }
 export { piAdapter };
-export * from "./prompt-provenance.js";
 export * from "./trajectory.js";
 export * from "./pi-daddy-ledger-v3.js";
-export * from "./evidence-archive.js";
-export * from "./archive-checkpoint.js";
-export * from "./archive-policy.js";
-export * from "./execution-retention-archive.js";
-export * from "./work-candidates.js";
-export * from "./work-case-archive.js";
-export * from "./work-signal-observation.js";
-export * from "./work-signal-cases.js";
-export * from "./work-case-review.js";
-export * from "./archive-read-capability.js";
-export * from "./archived-work.js";
-export * from "./blind-intervention.js";
-export * from "./learning-lifecycle.js";
-export * from "./learning-workspace.js";
-export * from "./learning-trust-setup.js";
-export { learningHash, learningFile } from "./learning-journal.js";
-export * from "./learning-case.js";
-export * from "./archive-observer.js";
-export * from "./weekly-investigation.js";
-export * from "./intervention-run.js";
-export * from "./principal-payload-port.js";
-export * from "./reviewed-archive-export.js";
-export * from "./archive-access.js";
-export * from "./archive-facts.js";
-export * from "./trust-lifecycle.js";
-export * from "./producer-review.js";
-export * from './session-observation.js';
-export * from './session-retention.js';
 //# sourceMappingURL=index.js.map

package/dist/model-pricing.d.ts

@@ -0,0 +1,3 @@
+import { type ExecutionTraceV1 } from "@skill-harness/core";
+/** Apply the repository's dated token prices to one Pi execution trace. */
+export declare function priceSubjectUsage(trace: ExecutionTraceV1): ExecutionTraceV1;

package/dist/model-pricing.js

@@ -0,0 +1,24 @@
+import { traceSha256 } from "@skill-harness/core";
+import table from "../prices/model-prices.json" with { type: "json" };
+const prices = table.models;
+const MILLION = 1_000_000;
+/** Apply the repository's dated token prices to one Pi execution trace. */
+export function priceSubjectUsage(trace) {
+    if (!trace.metrics)
+        return trace;
+    const price = prices[trace.subject.model];
+    const { input_tokens, output_tokens, cache_read_tokens } = trace.metrics;
+    const hasUsage = input_tokens !== null || output_tokens !== null || cache_read_tokens !== null;
+    const cost = price && hasUsage
+        ? ((input_tokens ?? 0) * price.input + (cache_read_tokens ?? 0) * price.cachedInput + (output_tokens ?? 0) * price.output) / MILLION
+        : null;
+    const metrics = {
+        ...trace.metrics,
+        cost_usd: cost !== null && cost > 0 ? cost : null,
+        cost_source: cost !== null && cost > 0 ? "price-table" : "unreported",
+        price_as_of: table.asOf,
+    };
+    const priced = { ...trace, cost_usd: metrics.cost_usd, metrics };
+    return { ...priced, trace_sha256: traceSha256(priced) };
+}
+//# sourceMappingURL=model-pricing.js.map

package/dist/pi.js

@@ -1,72 +1,10 @@
-import { existsSync, mkdtempSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { existsSync, mkdtempSync, readFileSync, statSync } from "node:fs";
 import { tmpdir, homedir } from "node:os";
-import { randomBytes } from "node:crypto";
 import { join, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
 import { runPiJson } from "./pi-json.js";
-import { collectTrajectorySources, normalizePiTraces, resequence } from "./trajectory.js";
-import { bindPromptObservation, observeProviderPayload, promptCaptureIsTrusted, verifyPromptSummary } from "./prompt-provenance.js";
-import { exec, onPath, envNum, traceSha256, withProviderFailure, splitPromptDoc } from "@skill-harness/core";
+import { priceSubjectUsage } from "./model-pricing.js";
+import { exec, onPath, envNum, traceSha256, withProviderFailure } from "@skill-harness/core";
 const PI_TIMEOUT_MS = envNum("PI_TIMEOUT_MS", 300_000);
-const PROMPT_CAPTURE_EXTENSION = fileURLToPath(new URL("./prompt-capture-extension.js", import.meta.url));
-function contractFor(req) {
-    if (req.systemPromptFile) {
-        const raw = readFileSync(req.systemPromptFile, "utf8");
-        return { text: raw, raw, mechanism: "system-prompt-file" };
-    }
-    const raw = readFileSync(join(requireSkillDir(req.skillDir, req.mode), "SKILL.md"), "utf8");
-    const body = splitPromptDoc(raw).body;
-    if (req.mode === "red")
-        return { text: body, raw, mechanism: "none" };
-    return { text: body, raw, mechanism: req.mode === "green" ? "pi-skill" : "append-system-prompt" };
-}
-const RUNTIME_INJECTION_ENV = ["NODE_OPTIONS", "NODE_PATH", "LD_PRELOAD", "DYLD_INSERT_LIBRARIES"];
-function hasRuntimeInjection(req) {
-    return Boolean(req.armEnv && Object.keys(req.armEnv).length) || RUNTIME_INJECTION_ENV.some(key => Boolean(process.env[key]));
-}
-function captureSetup(req, env, contract, counter) {
-    if (!req.onPromptObservation)
-        return { env, finish: () => { } };
-    // Arbitrary scenario/arm extensions and runtime-injection env execute in Pi's
-    // process with full Node authority. Refuse a forgeable positive observation.
-    if (!promptCaptureIsTrusted(req.extensions?.length ?? 0, hasRuntimeInjection(req)))
-        return { env, finish: () => {
-                const empty = observeProviderPayload({}, contract.text, contract.mechanism, counter.value++);
-                req.onPromptObservation?.({ ...empty, status: "ERROR", error: "prompt delivery provenance is unauthenticated when subject extensions or runtime-injection env share Pi's process" });
-            } };
-    const dir = mkdtempSync(join(tmpdir(), "skill-harness-prompt-"));
-    const path = join(dir, "observations.jsonl"), contractPath = join(dir, "contract.json");
-    const authenticationKey = randomBytes(32).toString("hex");
-    writeFileSync(path, "", { mode: 0o600 });
-    writeFileSync(contractPath, JSON.stringify({ text: contract.text, mechanism: contract.mechanism, authentication_key: authenticationKey }), { mode: 0o600 });
-    const finish = () => {
-        try {
-            const lines = readFileSync(path, "utf8").split("\n").filter(Boolean);
-            const parsed = lines.map(line => { try {
-                return JSON.parse(line);
-            }
-            catch {
-                return null;
-            } });
-            const records = parsed.slice(0, -1), summary = parsed.at(-1);
-            if (!verifyPromptSummary(summary, records.length, authenticationKey)) {
-                const empty = observeProviderPayload({}, contract.text, contract.mechanism, counter.value++);
-                req.onPromptObservation?.({ ...empty, status: "ERROR", error: "Pi prompt observation log is missing, truncated, replayed, or unauthenticated" });
-            }
-            else
-                records.forEach((record, observerRequestIndex) => {
-                    req.onPromptObservation?.(bindPromptObservation(record, contract.text, contract.mechanism, counter.value++, authenticationKey, observerRequestIndex));
-                });
-        }
-        finally {
-            rmSync(dir, { recursive: true, force: true });
-        }
-    };
-    return { env: { ...(env ?? process.env), SKILL_HARNESS_PROMPT_CAPTURE_FILE: path, SKILL_HARNESS_PROMPT_CONTRACT_FILE: contractPath }, finish };
-}
-function observerFlags(req) {
-    return req.onPromptObservation && promptCaptureIsTrusted(req.extensions?.length ?? 0, hasRuntimeInjection(req)) ? ["--extension", PROMPT_CAPTURE_EXTENSION] : [];
-}
 /**
  * stderr fragments that mean the provider refused the request, so the run measured
  * nothing about the model. Substring matching on a message pi passes through from
@@ -160,7 +98,7 @@ function header(turnNo, total, text) {
 }
 export const piAdapter = {
     name: "pi",
-    observesPrompts: true,
+    preferStructured: true,
     available() {
         return Promise.resolve(onPath("pi"));
     },
@@ -196,18 +134,14 @@ export const piAdapter = {
             "--no-context-files",
             "--no-extensions",
             ...extensionFlags(req.extensions),
-            ...observerFlags(req),
             "--provider",
             req.model.provider,
             "--model",
             req.model.model,
         ];
-        // Bind bytes once: argv and provenance must describe the same contract even if a file changes mid-run.
-        const contract = contractFor(req);
         const flags = req.systemPromptFile
-            ? ["--no-skills", "--append-system-prompt", contract.raw]
-            : skillFlags(req.mode, req.skillDir, contract.raw);
-        const requestCounter = { value: 0 };
+            ? ["--no-skills", "--append-system-prompt", readFileSync(req.systemPromptFile, "utf8")]
+            : skillFlags(req.mode, req.skillDir);
         const total = req.turns.length;
         const parts = [];
         // The arm's env, merged over the harness's own — undefined (not `process.env`)
@@ -222,14 +156,7 @@ export const piAdapter = {
         let providerFailure = null;
         if (total === 1) {
             const args = [...flags, ...common, "--no-session", "-p", req.turns[0]];
-            const capture = captureSetup(req, env, contract, requestCounter);
-            let r;
-            try {
-                r = await exec("pi", args, { cwd: req.cwd, timeoutMs: PI_TIMEOUT_MS, env: capture.env });
-            }
-            finally {
-                capture.finish();
-            }
+            const r = await exec("pi", args, { cwd: req.cwd, timeoutMs: PI_TIMEOUT_MS, env });
             parts.push(header(1, 1, req.turns[0]));
             parts.push(`<<< ASSISTANT:\n${r.stdout.trim()}\n`);
             if (r.code !== 0) {
@@ -243,14 +170,7 @@ export const piAdapter = {
         for (let i = 0; i < total; i++) {
             const turnFlags = i === 0 ? ["--session-dir", session] : ["--session-dir", session, "-c"];
             const args = [...flags, ...common, ...turnFlags, "-p", req.turns[i]];
-            const capture = captureSetup(req, env, contract, requestCounter);
-            let r;
-            try {
-                r = await exec("pi", args, { cwd: req.cwd, timeoutMs: PI_TIMEOUT_MS, env: capture.env });
-            }
-            finally {
-                capture.finish();
-            }
+            const r = await exec("pi", args, { cwd: req.cwd, timeoutMs: PI_TIMEOUT_MS, env });
             parts.push(header(i + 1, total, req.turns[i]));
             parts.push(`<<< ASSISTANT:\n${r.stdout.trim()}\n`);
             if (r.code !== 0) {
@@ -282,17 +202,14 @@ export const piAdapter = {
             "--no-context-files",
             "--no-extensions",
             ...extensionFlags(req.extensions),
-            ...observerFlags(req),
             "--provider",
             req.model.provider,
             "--model",
             req.model.model,
         ];
-        const contract = contractFor(req);
         const flags = req.systemPromptFile
-            ? ["--no-skills", "--append-system-prompt", contract.raw]
-            : skillFlags(req.mode, req.skillDir, contract.raw);
-        const requestCounter = { value: 0 };
+            ? ["--no-skills", "--append-system-prompt", readFileSync(req.systemPromptFile, "utf8")]
+            : skillFlags(req.mode, req.skillDir);
         const piVersion = await this.version();
         const total = req.turns.length;
         const traces = [];
@@ -309,26 +226,19 @@ export const piAdapter = {
                     ? ["--session-dir", session]
                     : ["--session-dir", session, "-c"];
             const args = [...flags, ...common, "--mode", "json", ...turnFlags, "-p", req.turns[i]];
-            const capture = captureSetup(req, env, contract, requestCounter);
-            let r;
-            try {
-                r = await runPiJson({
-                    args,
-                    cwd: req.cwd,
-                    timeoutMs: PI_TIMEOUT_MS,
-                    piVersion,
-                    subject: req.model,
-                    scenarioId: req.scenarioId ?? "(unknown)",
-                    mode: req.mode,
-                    rep: req.rep ?? 0,
-                    turn: i,
-                    homeDir: homedir(),
-                    env: capture.env,
-                });
-            }
-            finally {
-                capture.finish();
-            }
+            const r = await runPiJson({
+                args,
+                cwd: req.cwd,
+                timeoutMs: PI_TIMEOUT_MS,
+                piVersion,
+                subject: req.model,
+                scenarioId: req.scenarioId ?? "(unknown)",
+                mode: req.mode,
+                rep: req.rep ?? 0,
+                turn: i,
+                homeDir: homedir(),
+                env,
+            });
             // A stream with no terminal events at all is not evidence of a clean run.
             // Fail loudly here rather than let an empty trace satisfy a `forbid_calls`
             // gate — "the model called nothing" and "we recorded nothing" must not
@@ -350,35 +260,16 @@ export const piAdapter = {
             // leaves it unrecoverable from the saved transcript.
             if (providerFailure === null && r.providerFailure)
                 providerFailure = r.providerFailure;
-            traces.push(r.trace);
+            const pricedTrace = priceSubjectUsage(r.trace);
+            traces.push(pricedTrace);
             parts.push(header(i + 1, total, req.turns[i]));
-            parts.push(`<<< ASSISTANT:\n${r.trace.final_text.trim()}\n`);
+            parts.push(`<<< ASSISTANT:\n${pricedTrace.final_text.trim()}\n`);
             if (r.code !== 0)
                 parts.push(`[pi exited ${r.code} on turn ${i + 1}]\n${r.stderr.trim()}\n`);
         }
-        const native = req.eventSources?.length
-            ? collectTrajectorySources(req.cwd, req.eventSources)
-            : { events: [], errors: [] };
-        const piEvents = normalizePiTraces(traces);
-        const combined = [...piEvents, ...native.events];
-        const chronologyErrors = [];
-        if (piEvents.length && native.events.length) {
-            if (combined.some((event) => !event.at || !Number.isFinite(Date.parse(event.at)))) {
-                chronologyErrors.push("pi/native events cannot be globally ordered because at least one event has no valid `at` timestamp");
-            }
-            else {
-                const piTimes = new Set(piEvents.map((event) => Date.parse(event.at)));
-                if (native.events.some((event) => piTimes.has(Date.parse(event.at)))) {
-                    chronologyErrors.push("pi/native events contain equal timestamps, so strict cross-source order is ambiguous");
-                }
-            }
-        }
-        const eventErrors = [...native.errors, ...chronologyErrors];
         return {
             transcript: withProviderFailure(parts.join("\n"), providerFailure),
             traces,
-            events: resequence(combined),
-            ...(eventErrors.length ? { eventErrors } : {}),
             ...(providerFailure ? { providerFailure } : {}),
         };
     },

package/package.json

@@ -1,13 +1,14 @@
 {
     "name": "@skill-harness/adapters",
-    "version": "0.17.0",
+    "version": "0.19.0",
     "description": "skill-harness harness adapters — pi runner + claude-code judge routing (internal API)",
     "type": "module",
     "license": "MIT",
     "main": "./dist/index.js",
     "types": "./dist/index.d.ts",
     "exports": {
-        ".": "./dist/index.js"
+        ".": "./dist/index.js",
+        "./prices/*.json": "./prices/*.json"
     },
     "keywords": [
         "agent-skills",
@@ -23,6 +24,7 @@
     "files": [
         "dist/**/*.js",
         "dist/**/*.d.ts",
+        "prices/*.json",
         "LICENSE",
         "README.md"
     ],
@@ -40,7 +42,6 @@
         "prepack": "node ../../scripts/release-pack.mjs --guard"
     },
     "dependencies": {
-        "@skill-harness/core": "0.17.0",
-        "typebox": "1.3.4"
+        "@skill-harness/core": "0.19.0"
     }
 }

package/prices/model-prices.json

@@ -0,0 +1,43 @@
+{
+  "asOf": "2026-09-29",
+  "currency": "USD",
+  "unit": "per_million_tokens",
+  "models": {
+    "accounts/fireworks/models/deepseek-v4-flash-0731": {
+      "input": 0.14,
+      "cachedInput": 0.028,
+      "output": 0.28,
+      "source": "https://fireworks.ai/models/deepseek-ai/deepseek-v4-flash-0731"
+    },
+    "accounts/fireworks/models/deepseek-v4-pro": {
+      "input": 1.32,
+      "cachedInput": 0.044,
+      "output": 3.96,
+      "source": "https://fireworks.ai/models/deepseek-ai/deepseek-v4-pro-0813"
+    },
+    "accounts/fireworks/models/deepseek-v4-pro-0813": {
+      "input": 1.32,
+      "cachedInput": 0.044,
+      "output": 3.96,
+      "source": "https://fireworks.ai/models/deepseek-ai/deepseek-v4-pro-0813"
+    },
+    "accounts/fireworks/models/glm-5p2": {
+      "input": 1.4,
+      "cachedInput": 0.14,
+      "output": 4.4,
+      "source": "https://fireworks.ai/models/fireworks/glm-5p2"
+    },
+    "accounts/fireworks/models/glm-5p3-flash": {
+      "input": 0.15,
+      "cachedInput": 0.03,
+      "output": 0.5,
+      "source": "https://fireworks.ai/models/fireworks/glm-5p3-flash"
+    },
+    "accounts/fireworks/models/kimi-k3": {
+      "input": 3.0,
+      "cachedInput": 0.3,
+      "output": 15.0,
+      "source": "https://fireworks.ai/models/fireworks/kimi-k3"
+    }
+  }
+}

package/dist/archive-access.d.ts

@@ -1,58 +0,0 @@
-export interface ArchiveAccessPolicy {
-    archiveRoot: string;
-    id: string;
-    expiresAt: number;
-    maxCalls: number;
-    maxBytes: number;
-    purposes: string[];
-}
-export interface ArchiveConsent {
-    manifestId: string;
-    purpose: string;
-    expiresAt: number;
-}
-export interface GovernedArchiveRoute {
-    directory: string;
-    purpose: string;
-}
-export declare function createArchiveAccess(path: string, raw: ArchiveAccessPolicy, permissions: string[]): {
-    inspect: () => {
-        policy: ArchiveAccessPolicy;
-        lastObservedNow: number;
-        consents: {
-            id: unknown;
-            grant: ArchiveConsent;
-            state: string;
-        }[];
-        calls: number;
-        bytes: number;
-        pending: number;
-    };
-    previewConsent: (g: ArchiveConsent) => string;
-    previewRevocation: (id: string) => string;
-    consent(raw: ArchiveConsent, permissions: string[], now: number): string;
-    revoke(id: string, permissions: string[], now: number): void;
-    read(manifestId: string, purpose: string, maxBytes: number, now?: number): import("./evidence-archive.js").ArchiveRead;
-};
-/** Shared cooperative access owner. No history deletion, authentication, OS
- * deadline guarantee, or reinterpretation of legacy raw archive APIs. */
-export declare function openArchiveAccess(path: string): {
-    inspect: () => {
-        policy: ArchiveAccessPolicy;
-        lastObservedNow: number;
-        consents: {
-            id: unknown;
-            grant: ArchiveConsent;
-            state: string;
-        }[];
-        calls: number;
-        bytes: number;
-        pending: number;
-    };
-    previewConsent: (g: ArchiveConsent) => string;
-    previewRevocation: (id: string) => string;
-    consent(raw: ArchiveConsent, permissions: string[], now: number): string;
-    revoke(id: string, permissions: string[], now: number): void;
-    read(manifestId: string, purpose: string, maxBytes: number, now?: number): import("./evidence-archive.js").ArchiveRead;
-};
-export declare function readGovernedArchive(root: string, manifestId: string, maxBytes: number, route: GovernedArchiveRoute, now?: number): import("./evidence-archive.js").ArchiveRead;

package/dist/archive-access.js

@@ -1,61 +0,0 @@
-import { learningCopy, learningHash, learningJournal, registerLearningStore, verifyLearningStore } from './learning-journal.js';
-import { readArchiveSource } from './evidence-archive.js';
-export function createArchiveAccess(path, raw, permissions) {
-    const policy = learningCopy(raw), binding = learningHash(policy);
-    if (!permissions.includes(binding))
-        throw Error('exact archive policy permission required');
-    validate(policy);
-    registerLearningStore(policy.archiveRoot, 'access', learningHash(policy.id), path, binding);
-    learningJournal(path, { type: 'archive-access-v1', policy, binding });
-    return openArchiveAccess(path);
-}
-function validate(p) { if (typeof p.id !== 'string' || !p.id.length || p.id.length > 128 || !Number.isSafeInteger(p.expiresAt) || p.expiresAt < 0 || !Number.isSafeInteger(p.maxCalls) || p.maxCalls < 1 || p.maxCalls > 1024 || !Number.isSafeInteger(p.maxBytes) || p.maxBytes < 1 || p.maxBytes > 64 * 1024 * 1024 || !Array.isArray(p.purposes) || !p.purposes.length || p.purposes.length > 16 || new Set(p.purposes).size !== p.purposes.length || p.purposes.some(s => typeof s !== 'string' || !s.length || s.length > 128))
-    throw Error('bounded archive access policy required'); }
-/** Shared cooperative access owner. No history deletion, authentication, OS
- * deadline guarantee, or reinterpretation of legacy raw archive APIs. */
-export function openArchiveAccess(path) {
-    const journal = learningJournal(path), first = journal.read()[0].value, policy = learningCopy(first.policy);
-    validate(policy);
-    if (first.type !== 'archive-access-v1' || learningHash(policy) !== first.binding)
-        throw Error('archive policy changed');
-    const history = () => { verifyLearningStore(policy.archiveRoot, 'access', learningHash(policy.id), path, String(first.binding)); return journal.read(); };
-    const clock = (now) => { const rows = history(); if (!Number.isSafeInteger(now) || now < Math.max(0, ...rows.map(e => Number(e.value.now ?? 0))))
-        throw Error('archive access clock rewind'); journal.append(rows.at(-1).id, { type: 'clock', now }); if (now >= policy.expiresAt)
-        throw Error('archive access expired'); };
-    const consent = (raw) => { const g = learningCopy(raw); if (!/^[a-f0-9]{64}$/.test(g.manifestId) || !policy.purposes.includes(g.purpose) || !Number.isSafeInteger(g.expiresAt) || g.expiresAt < 0 || g.expiresAt > policy.expiresAt)
-        throw Error('consent outside policy'); return g; };
-    const digest = (g) => learningHash({ policy: String(first.binding), consent: consent(g) });
-    const revokeDigest = (id) => learningHash({ policy: String(first.binding), revoke: id });
-    const inspect = () => { const rows = history(), claims = rows.filter(e => e.value.type === 'read-claim'), lastObservedNow = Math.max(0, ...rows.map(e => Number(e.value.now ?? 0))); return { policy: learningCopy(policy), lastObservedNow, consents: rows.filter(e => e.value.type === 'consented').map(e => { const grant = e.value.grant; return { id: e.value.consentId, grant: learningCopy(grant), state: rows.some(r => r.value.type === 'revoked' && r.value.consentId === e.value.consentId) ? 'revoked' : lastObservedNow >= Math.min(policy.expiresAt, grant.expiresAt) ? 'expired' : 'not-revoked-at-last-observed-clock' }; }), calls: claims.length, bytes: claims.reduce((n, e) => { const settled = rows.find(s => s.value.type === 'read-settled' && s.value.claim === e.id); return n + Number(settled ? settled.value.bytes : e.value.reserved); }, 0), pending: claims.filter(e => !rows.some(s => s.value.type === 'read-settled' && s.value.claim === e.id)).length }; };
-    return { inspect, previewConsent: digest, previewRevocation: revokeDigest,
-        consent(raw, permissions, now) { clock(now); const g = consent(raw), id = digest(g), rows = history(); if (!permissions.includes(id) || now >= g.expiresAt)
-            throw Error('exact current consent permission required'); if (rows.some(e => e.value.type === 'revoked' && e.value.consentId === id))
-            throw Error('consent revoked'); if (!rows.some(e => e.value.type === 'consented' && e.value.consentId === id))
-            journal.append(rows.at(-1).id, { type: 'consented', consentId: id, grant: g, now }); return id; },
-        revoke(id, permissions, now) { clock(now); const rows = history(); if (!permissions.includes(revokeDigest(id)) || !rows.some(e => e.value.type === 'consented' && e.value.consentId === id))
-            throw Error('exact revocation permission required'); if (!rows.some(e => e.value.type === 'revoked' && e.value.consentId === id))
-            journal.append(rows.at(-1).id, { type: 'revoked', consentId: id, now }); },
-        read(manifestId, purpose, maxBytes, now = Date.now()) {
-            clock(now);
-            const rows = history(), valid = rows.filter(e => e.value.type === 'consented').filter(e => { const g = e.value.grant; return g.manifestId === manifestId && g.purpose === purpose && now < g.expiresAt && !rows.some(r => r.value.type === 'revoked' && r.value.consentId === e.value.consentId); });
-            if (valid.length !== 1)
-                throw Error('unique active manifest/purpose consent required');
-            if (!Number.isSafeInteger(maxBytes) || maxBytes < 0 || maxBytes > 8 * 1024 * 1024)
-                throw Error('archive read bound');
-            const used = inspect();
-            if (used.calls >= policy.maxCalls || maxBytes > policy.maxBytes - used.bytes)
-                throw Error('shared archive budget exhausted');
-            const claim = journal.append(rows.at(-1).id, { type: 'read-claim', manifestId, purpose, consentId: valid[0].value.consentId, reserved: maxBytes, now });
-            const result = readArchiveSource(policy.archiveRoot, manifestId, maxBytes);
-            journal.append(claim.id, { type: 'read-settled', claim: claim.id, bytes: result.status === 'available' ? result.bytes.length : 0, status: result.status, now });
-            return result;
-        },
-    };
-}
-export function readGovernedArchive(root, manifestId, maxBytes, route, now = Date.now()) {
-    const access = openArchiveAccess(route.directory);
-    if (access.inspect().policy.archiveRoot !== root)
-        throw Error('governed archive root mismatch');
-    return access.read(manifestId, route.purpose, maxBytes, now);
-}
-//# sourceMappingURL=archive-access.js.map

package/dist/archive-checkpoint.d.ts

@@ -1,47 +0,0 @@
-import { type ArchiveRead, type ArchiveSourceInput, type ArchiveRetention } from "./evidence-archive.js";
-export type SnapshotChange = "initial" | "append" | "replaced" | "unknown";
-export interface ArchiveCheckpoint {
-    version: "archive-checkpoint-v1";
-    sourceId: string;
-    sourceManifestId: string;
-    sourceSha256: string;
-    sourceBytes: number;
-    previousCheckpointId: string | null;
-    lineage: string;
-    declaredParser: {
-        id: string;
-        version: string;
-    };
-    reader: "jsonl-syntax-v1";
-    retention: ArchiveRetention;
-    change: SnapshotChange;
-    syntax: "complete" | "partial" | "error" | "unavailable";
-    completeBytes: number;
-    pendingBytes: number;
-    invalidLines: number;
-    issues: string[];
-    activeBranch: null;
-    acceptance: "not-assessed";
-}
-export interface ArchivedRecord {
-    id: string;
-    line: number;
-    start: number;
-    end: number;
-    value: unknown;
-}
-export interface CheckpointRead {
-    checkpoint: ArchiveCheckpoint;
-    source: ArchiveRead;
-    records: ArchivedRecord[];
-}
-/** Restart from the immutable checkpoint ID. This never advances a worker or invokes a gate. */
-export declare function readArchiveCheckpoint(root: string, checkpointId: string): CheckpointRead;
-/** Caller supplies an explicit snapshot, policy and prior receipt. No inferred active branch or acceptance. */
-export declare function ingestArchiveSnapshot(root: string, input: ArchiveSourceInput & {
-    previousCheckpointId?: string;
-}): CheckpointRead & {
-    checkpointId: string;
-    change: SnapshotChange | "repeat";
-    newRecords: ArchivedRecord[];
-};