@skill-harness/adapters 0.24.2 → 0.24.3

package/dist/pi-daddy-record-v1.d.ts

@@ -0,0 +1,8 @@
+import { type TrajectoryEventV1 } from "@skill-harness/core";
+/**
+ * Current native grants.jsonl ingestion. Envelope and body contracts are separate,
+ * exact producer pins. An invalid line rejects the entire source, never a green
+ * intact prefix. Digests detect inconsistency, not authenticity or billing truth.
+ * One normalized observation per native body: no synthetic grants/approvals.
+ */
+export declare function normalizePiDaddyRecordLedgerV1(raw: string): TrajectoryEventV1[];

package/dist/pi-daddy-record-v1.js

@@ -0,0 +1,130 @@
+/** Read the separately pinned pi-daddy 0.44.3 record format. No compatibility guessing. */
+import { createHash } from "node:crypto";
+import { TRAJECTORY_EVENT_VERSION, deserializeTrajectoryEvents, redactArgs, redactText } from "@skill-harness/core";
+import { assertSupportedSchemaV3, declaredPropertyNames, validateClosedSchemaV3 } from "./closed-schema.js";
+import { PI_DADDY_RECORD_V1_SCHEMA, PI_DADDY_RECORD_V1_GOVERNANCE_SCHEMA, PI_DADDY_RECORD_V1_COMMIT } from "./pi-daddy-record-v1-contract.js";
+const sha = (text) => createHash("sha256").update(text, "utf8").digest("hex");
+function canonical(value) {
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(",")}]`;
+    return `{${Object.entries(value).sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([key, item]) => `${JSON.stringify(key)}:${canonical(item)}`).join(",")}}`;
+}
+function object(value) { return value && typeof value === "object" && !Array.isArray(value) ? value : undefined; }
+function text(value) { return typeof value === "string" ? value : undefined; }
+/** Reject sensitive authority/identity text instead of silently changing what it names. */
+function hasSensitiveIdentity(value) {
+    if (typeof value === "string")
+        return redactText(value) !== value;
+    if (Array.isArray(value))
+        return value.some(hasSensitiveIdentity);
+    if (value !== null && typeof value === "object") {
+        return Object.entries(value).some(([key, item]) => redactText(key) !== key || hasSensitiveIdentity(item));
+    }
+    return false;
+}
+const schemaNames = new WeakMap();
+function validate(schema, value, label) {
+    if (!schemaNames.has(schema)) {
+        assertSupportedSchemaV3(schema, label);
+        schemaNames.set(schema, declaredPropertyNames(schema));
+    }
+    const issues = validateClosedSchemaV3(schema, value, { knownFieldNames: schemaNames.get(schema) });
+    if (issues.length)
+        throw new Error(`${label}: ${redactText(issues[0].path || "(record)")} ${redactText(issues[0].message)} [pi-daddy ${PI_DADDY_RECORD_V1_COMMIT.slice(0, 12)}]`);
+}
+/**
+ * Current native grants.jsonl ingestion. Envelope and body contracts are separate,
+ * exact producer pins. An invalid line rejects the entire source, never a green
+ * intact prefix. Digests detect inconsistency, not authenticity or billing truth.
+ * One normalized observation per native body: no synthetic grants/approvals.
+ */
+export function normalizePiDaddyRecordLedgerV1(raw) {
+    if (!raw || !raw.endsWith("\n"))
+        throw new Error("pi-daddy record-v1 source is empty or has an unterminated tail");
+    const lines = raw.slice(0, -1).split("\n");
+    const events = [];
+    const highWater = new Map();
+    const ids = new Set();
+    let previous = null;
+    for (const [index, line] of lines.entries()) {
+        const where = `pi-daddy record-v1 line ${index + 1}`;
+        let parsed;
+        try {
+            parsed = JSON.parse(line);
+        }
+        catch {
+            throw new Error(`${where}: malformed JSON`);
+        }
+        validate(PI_DADDY_RECORD_V1_SCHEMA, parsed, where);
+        const record = parsed;
+        if (record.seq !== index + 1)
+            throw new Error(`${where}: sequence gap`);
+        if (record.prev !== previous)
+            throw new Error(`${where}: previous line hash mismatch`);
+        const { digest, ...unsigned } = record;
+        if (sha(canonical(unsigned)) !== digest)
+            throw new Error(`${where}: record digest mismatch`);
+        if (ids.has(record.id))
+            throw new Error(`${where}: duplicate record identity`);
+        ids.add(record.id);
+        validate(PI_DADDY_RECORD_V1_GOVERNANCE_SCHEMA, record.body, `${where} governance body`);
+        const body = record.body;
+        const native = body.event;
+        const expectedKind = native === "capability_decision" ? "capability" : native === "child_lifecycle" ? "lifecycle" : native === "workspace_lease" ? "lease" : "fact";
+        if (record.kind !== expectedKind)
+            throw new Error(`${where}: envelope kind disagrees with governance event`);
+        if (body.executionId !== undefined && body.parentExecutionId === body.executionId)
+            throw new Error(`${where}: execution cannot be its own parent`);
+        const at = body.ts;
+        const stream = text(body.executionId) ?? text(body.episodeId) ?? native;
+        const instant = Date.parse(at);
+        if (!Number.isFinite(instant))
+            throw new Error(`${where}: unsupported native timestamp`);
+        if (instant < (highWater.get(stream) ?? -Infinity))
+            throw new Error(`${where}: native timestamps move backwards within execution`);
+        highWater.set(stream, instant);
+        const uses = object(body.approvalUses);
+        for (const use of Object.values(uses ?? {})) {
+            const item = use;
+            if (item.remaining > item.max)
+                throw new Error(`${where}: approval remaining exceeds maximum`);
+        }
+        // These arrays name capability authority, even when retained only as attributes.
+        for (const field of ["requested", "parentGrant", "effective", "denied", "clipped", "gatedBlocked", "approved"]) {
+            if (hasSensitiveIdentity(body[field]))
+                throw new Error(`${where}: capability identity contains sensitive content`);
+        }
+        const correlation = object(body.correlation) ?? {};
+        const definition = object(body.definitionDigest) ?? {};
+        const refusal = object(body.refusal) ?? {};
+        const lifecycle = { starting: "child_started", running: "child_running", completed: "child_completed", failed: "child_failed" };
+        const type = native === "child_lifecycle" ? lifecycle[body.state]
+            : native === "capability_decision" && body.blocked === true ? "child_spawn_refused" : native;
+        const defined = (value) => Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
+        const attributes = redactArgs({ ...body, record_seq: record.seq, record_id: record.id, record_digest: record.digest, record_at: record.at, record_format: 1, native_event: native, contract_commit: PI_DADDY_RECORD_V1_COMMIT });
+        const event = defined({
+            event_version: TRAJECTORY_EVENT_VERSION, seq: index + 1, type, source: "pi-daddy-record-v1", at,
+            run_id: text(correlation.run_id), task_id: text(correlation.task_id), context_id: text(correlation.context_id), phase: text(correlation.phase),
+            workspace_id: text(body.workspaceId), parent_id: text(body.parentId), child_id: text(body.childId),
+            execution_id: text(body.executionId), parent_execution_id: body.parentExecutionId, task_from_execution_id: text(body.taskFromExecutionId),
+            deadline_at: text(body.deadlineAt), exit_code: Number.isInteger(body.exitCode) ? body.exitCode : undefined,
+            requested_capabilities: Array.isArray(body.requested) ? [...new Set(body.requested)] : undefined,
+            effective_capabilities: Array.isArray(body.effective) ? [...new Set(body.effective)] : undefined,
+            refusal_code: text(refusal.code),
+            digests: defined({ task: text(body.taskDigest), definition: text(definition.sha256), skill_definition: text(body.definitionHash) }), attributes,
+        });
+        // Free text was already redacted above. Check every retained string and map key,
+        // including normalized identity arrays that deliberately preserve exact values.
+        if (hasSensitiveIdentity(event))
+            throw new Error(`${where}: normalized identity contains sensitive content`);
+        events.push(event);
+        previous = sha(line);
+    }
+    if (!deserializeTrajectoryEvents(events.map(event => JSON.stringify(event)).join("\n") + "\n")) {
+        throw new Error("pi-daddy record-v1 cannot represent this source in the normalized trajectory contract");
+    }
+    return events;
+}
+//# sourceMappingURL=pi-daddy-record-v1.js.map

package/dist/trajectory.d.ts

@@ -1,4 +1,5 @@
 import type { ExecutionTraceV1, TrajectoryEventSource, TrajectoryEventV1 } from "@skill-harness/core";
+export { normalizePiDaddyRecordLedgerV1 } from "./pi-daddy-record-v1.js";
 export interface CollectedTrajectorySources {
     events: TrajectoryEventV1[];
     errors: string[];

package/dist/trajectory.js

@@ -3,6 +3,8 @@ import { readFileSync, readdirSync } from "node:fs";
 import { join } from "node:path";
 import { TRAJECTORY_EVENT_VERSION, deserializeTrajectoryEvents, matchesGlob, redactArgs, redactText } from "@skill-harness/core";
 import { assertSupportedSchema, assertSupportedSchemaV3, declaredPropertyNames, validateClosedSchema, validateClosedSchemaV3, } from "./closed-schema.js";
+import { normalizePiDaddyRecordLedgerV1 } from "./pi-daddy-record-v1.js";
+export { normalizePiDaddyRecordLedgerV1 } from "./pi-daddy-record-v1.js";
 import { PI_DADDY_CONTRACT_COMMIT, PI_DADDY_LEDGER_V2_SCHEMA } from "./pi-daddy-ledger-v2.js";
 import { PI_DADDY_LEDGER_V3_CONTRACT_COMMIT, PI_DADDY_LEDGER_V3_SCHEMA } from "./pi-daddy-ledger-v3.js";
 /** Read and normalize declared workspace-local native ledger files. */
@@ -33,14 +35,16 @@ export function collectTrajectorySources(cwd, sources) {
                         ? normalizePiDaddyLegacyLedger(text)
                         : source.adapter === "pi-daddy-ledger-v3"
                             ? normalizePiDaddyLedgerV3(text)
-                            : deserializeTrajectoryEvents(text);
+                            : source.adapter === "pi-daddy-record-v1"
+                                ? normalizePiDaddyRecordLedgerV1(text)
+                                : deserializeTrajectoryEvents(text);
                 if (!normalized)
                     throw new Error("normalized-v1 source is empty, malformed, or unsupported");
                 const times = normalized.map((event) => validTime(event.at) ? Date.parse(event.at) : null);
                 if (times.every((time) => time !== null)) {
                     const highWaterByStream = new Map();
                     for (let index = 0; index < times.length; index += 1) {
-                        const stream = source.adapter === "pi-daddy-v1" || source.adapter === "pi-daddy-ledger-v3"
+                        const stream = source.adapter === "pi-daddy-v1" || source.adapter === "pi-daddy-ledger-v3" || source.adapter === "pi-daddy-record-v1"
                             ? normalizedPiDaddyStreamKey(normalized[index], index)
                             : "source";
                         const highWater = highWaterByStream.get(stream);
@@ -425,7 +429,7 @@ function piDaddyStreamKey(record, index) {
 function normalizedPiDaddyStreamKey(event, index) {
     if (event.source === "pi-daddy-0.17")
         return JSON.stringify(["legacy", event.child_id ?? `missing-child:${index}`]);
-    if (event.source === "pi-daddy-v3") {
+    if (event.source === "pi-daddy-v3" || event.source === "pi-daddy-record-v1") {
         return event.workflow_fact_id
             ? JSON.stringify(["v3-fact", event.workflow_fact_id])
             : JSON.stringify(["v3-execution", event.execution_id ?? `missing-execution:${index}`]);

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@skill-harness/adapters",
-    "version": "0.24.2",
+    "version": "0.24.3",
     "description": "skill-harness Pi runner and judge adapter (internal API)",
     "type": "module",
     "license": "MIT",
@@ -42,6 +42,6 @@
         "prepack": "node ../../scripts/release-pack.mjs --guard"
     },
     "dependencies": {
-        "@skill-harness/core": "0.24.2"
+        "@skill-harness/core": "0.24.3"
     }
 }