@skill-harness/core 0.11.0 → 0.12.0

package/dist/qualification-runner.d.ts

@@ -0,0 +1,203 @@
+import type { QualificationJudgePanelMember } from "./qualification-panels.js";
+import { type QualificationOutputReceipt } from "./qualification-capture.js";
+export { redactQualificationOutput } from "./qualification-capture.js";
+export type { QualificationOutputReceipt } from "./qualification-capture.js";
+import { type QualificationProcessIdentity } from "./qualification-process.js";
+export { qualificationProcessIdentity, qualificationProcessMatches } from "./qualification-process.js";
+export type { QualificationProcessIdentity } from "./qualification-process.js";
+import { QUALIFICATION_OAUTH_DIRECTORY_POLICY_V2, QUALIFICATION_TERMINAL_RECEIPT_VERSION_V3 } from "./qualification-config.js";
+import { type QualificationOAuthDirectoryInventoryV2 } from "./qualification-oauth-directory.js";
+import { validateQualificationSpool, type QualificationInvocationInputBindingV1, type QualificationLifecycleV1, type QualificationTerminalStatus } from "./qualification-store.js";
+export declare const QUALIFICATION_AUTH_EVIDENCE_VERSION: "qualification-auth-evidence-v1";
+export declare const QUALIFICATION_AUTH_EVIDENCE_VERSION_V2: "qualification-auth-evidence-v2";
+export declare const QUALIFICATION_TERMINAL_RECEIPT_VERSION: "qualification-terminal-receipt-v1";
+export declare const QUALIFICATION_TERMINAL_RECEIPT_VERSION_V2: "qualification-terminal-receipt-v2";
+export declare const QUALIFICATION_LAUNCH_ATTEMPT_VERSION: "qualification-launch-attempt-v1";
+export declare const QUALIFICATION_LAUNCH_ATTEMPT_VERSION_V2: "qualification-launch-attempt-v2";
+export declare const QUALIFICATION_INPUT_LAUNCH_CLAIM_VERSION: "qualification-input-launch-claim-v1";
+export interface QualificationFilesystemOccurrence {
+    realpath: string;
+    device: number;
+    inode: number;
+    mtime_ms: number;
+    bytes: number;
+}
+export interface QualificationAuthEvidenceV1 {
+    schema_version: typeof QUALIFICATION_AUTH_EVIDENCE_VERSION;
+    checked_at: string;
+    provider: string;
+    requested_model: string;
+    model_identity_observed: false;
+    status: "ready";
+    auth_type: "oauth";
+    source: "pi-auth-check-json";
+    credentials_included: false;
+    readiness_only: true;
+    removed_parent_environment_names: string[];
+    child_environment_names: string[];
+    executable_sha256: string;
+    launch_authority_sha256: string;
+    oauth_agent_directory_identity: QualificationFilesystemOccurrence | null;
+    oauth_auth_file_identity: QualificationFilesystemOccurrence | null;
+    oauth_models_file_identity: QualificationFilesystemOccurrence | null;
+    oauth_directory_entries: string[];
+    evidence_sha256: string;
+}
+export interface QualificationAuthEvidenceV2 extends Omit<QualificationAuthEvidenceV1, "schema_version" | "oauth_agent_directory_identity" | "oauth_auth_file_identity" | "oauth_models_file_identity" | "oauth_directory_entries"> {
+    schema_version: typeof QUALIFICATION_AUTH_EVIDENCE_VERSION_V2;
+    oauth_directory_policy: typeof QUALIFICATION_OAUTH_DIRECTORY_POLICY_V2;
+    oauth_directory_validations: {
+        before_oauth_readiness: QualificationOAuthDirectoryInventoryV2;
+        after_oauth_readiness: QualificationOAuthDirectoryInventoryV2;
+    };
+}
+export type QualificationAuthEvidence = QualificationAuthEvidenceV1 | QualificationAuthEvidenceV2;
+export interface QualificationOAuthDirectoryValidationsV2 {
+    before_oauth_readiness: QualificationOAuthDirectoryInventoryV2 | null;
+    after_oauth_readiness: QualificationOAuthDirectoryInventoryV2 | null;
+    before_launch_claim: QualificationOAuthDirectoryInventoryV2 | null;
+    immediately_before_pi_launch: QualificationOAuthDirectoryInventoryV2 | null;
+    after_child_termination: QualificationOAuthDirectoryInventoryV2 | null;
+}
+export interface QualificationTerminalReceiptV1 {
+    schema_version: typeof QUALIFICATION_TERMINAL_RECEIPT_VERSION;
+    invocation_id: string;
+    terminal_status: QualificationTerminalStatus;
+    attempt: 0 | 1;
+    started_at: string | null;
+    finished_at: string;
+    deadline_at: string | null;
+    requested_timeout_ms: number;
+    effective_timeout_ms: number;
+    supervisor: QualificationProcessIdentity;
+    child: QualificationProcessIdentity | null;
+    exit_code: number | null;
+    signal: NodeJS.Signals | null;
+    requested: {
+        provider: string;
+        model: string;
+    };
+    actual: {
+        provider: string;
+        model: string;
+    } | null;
+    provider_model_identity_observed: boolean;
+    successful_execution: boolean;
+    fallback_detected: boolean;
+    authentication: {
+        evidence_sha256: string;
+        status: "ready";
+        auth_type: "oauth";
+        readiness_only: true;
+    } | null;
+    accounting_event_sha256: string | null;
+    continuation_authority_sha256: string | null;
+    stdout: QualificationOutputReceipt;
+    stderr: QualificationOutputReceipt;
+    artifact: {
+        path: string;
+        type: "pi-jsonl";
+        bytes: number;
+        sha256: string;
+    } | null;
+    error: string | null;
+}
+export interface QualificationTerminalReceiptV2 extends Omit<QualificationTerminalReceiptV1, "schema_version"> {
+    schema_version: typeof QUALIFICATION_TERMINAL_RECEIPT_VERSION_V2;
+    oauth_directory_policy: typeof QUALIFICATION_OAUTH_DIRECTORY_POLICY_V2;
+    oauth_directory_validations: QualificationOAuthDirectoryValidationsV2;
+}
+export interface QualificationTerminalReceiptV3 extends Omit<QualificationTerminalReceiptV2, "schema_version"> {
+    schema_version: typeof QUALIFICATION_TERMINAL_RECEIPT_VERSION_V3;
+    configuration_sha256: string;
+    invocation_sha256: string;
+    invocation_input: QualificationInvocationInputBindingV1;
+    input_launch_claim_sha256: string | null;
+    launch_attempt_sha256: string | null;
+    child_occurrence_sha256: string | null;
+}
+export type QualificationTerminalReceipt = QualificationTerminalReceiptV1 | QualificationTerminalReceiptV2 | QualificationTerminalReceiptV3;
+export interface QualificationInvocationStatus {
+    invocation_id: string;
+    phase: QualificationLifecycleV1["phase"];
+    terminal_status: QualificationTerminalStatus | null;
+    attempt: 0 | 1;
+    requested: {
+        provider: string;
+        model: string;
+    };
+    actual: {
+        provider: string;
+        model: string;
+    } | null;
+    deadline_at: string | null;
+    effective_timeout_ms: number | null;
+    output: {
+        stdout: QualificationOutputReceipt;
+        stderr: QualificationOutputReceipt;
+    } | null;
+    supervisor: QualificationProcessIdentity | null;
+    child: QualificationProcessIdentity | null;
+    supervisor_alive: boolean | null;
+    child_alive: boolean | null;
+}
+/**
+ * Verify that the Pi agent directory exposed to a production child contains an
+ * OAuth credential for openai-codex, no stored API-key credentials, and no
+ * models.json override capable of redirecting that provider. No credential
+ * value or digest leaves this function.
+ */
+export declare function assertQualificationOAuthCredentialBoundary(env: NodeJS.ProcessEnv): {
+    agent_directory: string;
+    provider: "openai-codex";
+    auth_type: "oauth";
+    agent_directory_identity: QualificationFilesystemOccurrence;
+    auth_file_identity: QualificationFilesystemOccurrence;
+    models_file_identity: QualificationFilesystemOccurrence | null;
+    directory_entries: string[];
+};
+export declare function checkQualificationAuthentication(options: {
+    spool_dir: string;
+    invocation_id: string;
+    parent_env?: NodeJS.ProcessEnv;
+    now?: () => string;
+}): Promise<{
+    evidence: QualificationAuthEvidence;
+    child_env: NodeJS.ProcessEnv;
+    launch_authority: string;
+}>;
+/**
+ * Execute one previously prepared invocation. There is deliberately no retry
+ * parameter and exactly one model-process spawn site in this function.
+ */
+export declare function superviseQualificationInvocation(options: {
+    spool_dir: string;
+    invocation_id: string;
+    child_env: NodeJS.ProcessEnv;
+    authentication_authority?: string;
+    continuation_authority?: string;
+    now?: () => string;
+    /** Deterministic race injection for offline tests only; production rejects it. */
+    test_hooks?: {
+        immediately_before_child_input_validation?: () => void;
+    };
+}): Promise<void>;
+export declare function readValidatedQualificationTerminalReceipt(spoolDir: string, invocationId: string): QualificationTerminalReceipt;
+/** Convert one fully validated judge invocation into the shared panel vote shape. */
+export declare function readQualificationJudgePanelMember(spoolDir: string, invocationId: string): QualificationJudgePanelMember;
+export declare function qualificationInvocationStatus(spoolDir: string, invocationId: string): QualificationInvocationStatus;
+export declare function pollQualificationInvocation(options: {
+    spool_dir: string;
+    invocation_id: string;
+    wait_ms?: number;
+    interval_ms?: number;
+}): Promise<QualificationInvocationStatus>;
+export declare function abortQualificationInvocation(options: {
+    spool_dir: string;
+    invocation_id: string;
+    reason: string;
+    now?: () => string;
+}): Promise<QualificationInvocationStatus>;
+export declare function validateQualificationBaseSpool(spoolDir: string): ReturnType<typeof validateQualificationSpool> & {
+    terminal: number;
+};