@unbrained/pm-cli 2026.9.7 → 2026.9.8

package/dist/sdk/governance/provenance-health.js

@@ -1,283 +1,2 @@
-/**
- * @module sdk/governance/provenance-health
- *
- * Reads bounded, privacy-safe provenance resolver outcomes for health checks.
- */
-
-!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=(new e.Error).stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="cb3bf7ee-808f-5ff6-af84-edb034760c54")}catch(e){}}();
-import fs from "node:fs/promises";
-import path from "node:path";
-import { resealHistoryRewrite, verifyHistoryRecordHash, } from "../../core/history/history.js";
-const DEFAULT_PROVENANCE_HISTORY_BYTE_LIMIT = 8_388_608;
-const ATTEMPTED_PROVENANCE_OUTCOME_STATUSES = new Set(["resolved", "failed"]);
-const INVALID_PROVENANCE_VALUE_CLASSIFIERS = [
-    {
-        kind: "boolean",
-        matches: (value) => typeof value === "boolean" ||
-            (typeof value === "string" && /^(?:true|false)$/iu.test(value.trim())),
-    },
-    {
-        kind: "single_digit",
-        matches: (value) => (typeof value === "number" &&
-            Number.isInteger(value) &&
-            value >= 0 &&
-            value <= 9) ||
-            (typeof value === "string" && /^\d$/u.test(value.trim())),
-    },
-];
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function invalidProvenanceValueKind(value) {
-    return INVALID_PROVENANCE_VALUE_CLASSIFIERS.find((classifier) => classifier.matches(value))?.kind;
-}
-/**
- * Remove only provenance observations whose values violate the bounded domain.
- * History operations, patches, timestamps, authors, and hashes are retained;
- * the receipt exposes aggregate classes and counts but never the removed value.
- */
-export function normalizeInvalidHistoryProvenance(entries) {
-    const invalidValues = new Map();
-    let eventsChanged = 0;
-    let observationsRemoved = 0;
-    const normalized = entries.map((entry) => {
-        const provenance = isRecord(entry.agent_provenance)
-            ? entry.agent_provenance
-            : undefined;
-        if (provenance === undefined)
-            return entry;
-        if (!verifyHistoryRecordHash(entry).ok)
-            return entry;
-        const retained = {};
-        let eventChanged = false;
-        for (const [dimension, observation] of Object.entries(provenance)) {
-            const kind = isRecord(observation)
-                ? invalidProvenanceValueKind(observation.value)
-                : undefined;
-            if (kind === undefined) {
-                retained[dimension] = observation;
-                continue;
-            }
-            eventChanged = true;
-            observationsRemoved += 1;
-            const harness = entry.agent_harness ?? "unknown";
-            const key = `${harness}\0${dimension}\0${kind}`;
-            const aggregate = invalidValues.get(key) ?? {
-                harness,
-                dimension,
-                kind,
-                count: 0,
-            };
-            aggregate.count += 1;
-            invalidValues.set(key, aggregate);
-        }
-        if (!eventChanged)
-            return entry;
-        eventsChanged += 1;
-        const next = { ...entry };
-        if (Object.keys(retained).length === 0) {
-            delete next.agent_provenance;
-        }
-        else {
-            next.agent_provenance = retained;
-        }
-        return resealHistoryRewrite(entry, next, {
-            retainPriorRecord: true,
-            retainPriorRecordHash: false,
-        });
-    });
-    return {
-        entries: normalized,
-        receipt: {
-            changed: eventsChanged > 0,
-            events_changed: eventsChanged,
-            observations_removed: observationsRemoved,
-            invalid_values: [...invalidValues.values()].sort((left, right) => left.harness.localeCompare(right.harness) ||
-                left.dimension.localeCompare(right.dimension) ||
-                left.kind.localeCompare(right.kind)),
-        },
-    };
-}
-/** Find every history stream requiring provenance normalization without returning raw values. */
-export async function listInvalidProvenanceHistoryStreamIds(pmRoot) {
-    const ids = [];
-    for (const file of await listHistoryFiles(pmRoot)) {
-        try {
-            const content = await fs.readFile(path.join(pmRoot, "history", file), "utf8");
-            for (const line of content.split("\n")) {
-                if (line.trim().length === 0)
-                    continue;
-                const entry = parseHistoryEntry(line);
-                if (entry === null || !isRecord(entry.agent_provenance))
-                    continue;
-                const invalid = Object.values(entry.agent_provenance).some((observation) => isRecord(observation) &&
-                    invalidProvenanceValueKind(observation.value) !== undefined);
-                if (invalid) {
-                    ids.push(file.slice(0, -".jsonl".length));
-                    break;
-                }
-            }
-        }
-        catch {
-            // Integrity diagnostics own unreadable or malformed streams. This census
-            // only selects safely parseable streams for the explicit normalizer.
-        }
-    }
-    return ids;
-}
-async function listHistoryFiles(pmRoot) {
-    try {
-        return (await fs.readdir(path.join(pmRoot, "history")))
-            .filter((file) => file.endsWith(".jsonl"))
-            .sort();
-    }
-    catch {
-        return [];
-    }
-}
-async function readHistoryFile(pmRoot, file, byteLimit) {
-    let handle;
-    try {
-        handle = await fs.open(path.join(pmRoot, "history", file), "r");
-        const size = (await handle.stat()).size;
-        const length = Math.min(size, Math.max(0, byteLimit));
-        const buffer = Buffer.alloc(length);
-        const { bytesRead } = await handle.read(buffer, 0, length, 0);
-        const decoded = buffer.subarray(0, bytesRead).toString("utf8");
-        const complete = bytesRead >= size;
-        const finalNewline = decoded.lastIndexOf("\n");
-        let content = decoded;
-        if (!complete) {
-            content = finalNewline === -1 ? "" : decoded.slice(0, finalNewline + 1);
-        }
-        return {
-            content,
-            bytesRead,
-            complete,
-        };
-    }
-    catch {
-        return null;
-    }
-    finally {
-        await handle?.close();
-    }
-}
-function parseHistoryEntry(line) {
-    try {
-        const value = JSON.parse(line);
-        return isRecord(value) ? value : null;
-    }
-    catch {
-        return null;
-    }
-}
-function collectResolverOutcomes(entry, aggregates, invalidValues) {
-    const harness = typeof entry.agent_harness === "string" ? entry.agent_harness : undefined;
-    if (harness === undefined)
-        return;
-    const provenance = isRecord(entry.agent_provenance)
-        ? entry.agent_provenance
-        : {};
-    Object.entries(provenance).forEach(([dimension, observation]) => {
-        if (!isRecord(observation))
-            return;
-        const kind = invalidProvenanceValueKind(observation.value);
-        if (!kind)
-            return;
-        const key = `${harness}\0${dimension}\0${kind}`;
-        const aggregate = invalidValues.get(key) ?? {
-            harness,
-            dimension,
-            kind,
-            count: 0,
-        };
-        aggregate.count += 1;
-        invalidValues.set(key, aggregate);
-    });
-    if (!isRecord(entry.context))
-        return;
-    const outcomes = entry.context.agent_provenance_outcomes;
-    if (!isRecord(outcomes))
-        return;
-    Object.entries(outcomes).forEach(([dimension, rawOutcome]) => {
-        if (!isRecord(rawOutcome) || typeof rawOutcome.resolver !== "string") {
-            return;
-        }
-        if (!ATTEMPTED_PROVENANCE_OUTCOME_STATUSES.has(String(rawOutcome.status))) {
-            return;
-        }
-        const key = `${harness}\0${dimension}\0${rawOutcome.resolver}`;
-        const aggregate = aggregates.get(key) ?? {
-            harness,
-            dimension,
-            resolver: rawOutcome.resolver,
-            attempts: 0,
-            successes: 0,
-        };
-        aggregate.attempts += 1;
-        if (rawOutcome.status === "resolved")
-            aggregate.successes += 1;
-        aggregates.set(key, aggregate);
-    });
-}
-function collectHistoryContent(content, aggregates, invalidValues, eventLimit, initialEventsRead) {
-    let eventsRead = initialEventsRead;
-    for (const line of content.split("\n")) {
-        if (line.trim().length === 0)
-            continue;
-        if (eventsRead >= eventLimit)
-            return { eventsRead, truncated: true };
-        eventsRead += 1;
-        const entry = parseHistoryEntry(line);
-        if (entry)
-            collectResolverOutcomes(entry, aggregates, invalidValues);
-    }
-    return { eventsRead, truncated: false };
-}
-/** Scan immutable history without failing over malformed streams owned by integrity checks. */
-export async function scanProvenanceResolverHealth(pmRoot, eventLimit = 10_000) {
-    const aggregates = new Map();
-    const invalidValues = new Map();
-    let eventsRead = 0;
-    let bytesRead = 0;
-    let truncated = false;
-    for (const file of await listHistoryFiles(pmRoot)) {
-        const history = await readHistoryFile(pmRoot, file, Math.max(0, DEFAULT_PROVENANCE_HISTORY_BYTE_LIMIT - bytesRead));
-        if (history === null)
-            continue;
-        bytesRead += history.bytesRead;
-        const collected = collectHistoryContent(history.content, aggregates, invalidValues, eventLimit, eventsRead);
-        eventsRead = collected.eventsRead;
-        if (collected.truncated) {
-            truncated = true;
-            break;
-        }
-        if (!history.complete) {
-            truncated = true;
-            break;
-        }
-    }
-    const outcomes = [...aggregates.values()].sort((left, right) => left.harness.localeCompare(right.harness) ||
-        left.dimension.localeCompare(right.dimension) ||
-        left.resolver.localeCompare(right.resolver));
-    const invalidValueFindings = [...invalidValues.values()].sort((left, right) => left.harness.localeCompare(right.harness) ||
-        left.dimension.localeCompare(right.dimension) ||
-        left.kind.localeCompare(right.kind));
-    return {
-        outcomes,
-        invalid_values: invalidValueFindings,
-        warnings: truncated
-            ? []
-            : [
-                ...outcomes
-                    .filter((outcome) => outcome.attempts > 0 && outcome.successes === 0)
-                    .map((outcome) => `provenance_resolver_zero_success:${outcome.harness}:${outcome.dimension}:${outcome.resolver}:${String(outcome.attempts)}`),
-                ...invalidValueFindings.map((finding) => `provenance_value_domain_invalid:${finding.harness}:${finding.dimension}:${finding.kind}:${String(finding.count)}`),
-            ],
-        events_read: eventsRead,
-        truncated,
-    };
-}
+!(function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof globalThis?globalThis:"undefined"!=typeof self?self:{},n=new e.Error().stack;n&&(e._sentryDebugIds=e._sentryDebugIds||{},e._sentryDebugIds[n]="ca035b42-148d-5a43-9912-4641a6207750")}catch(e2){}})();import fs from"node:fs/promises";import path from"node:path";import{resealHistoryRewrite,verifyHistoryRecordHash}from"../../core/history/history.js";const DEFAULT_PROVENANCE_HISTORY_BYTE_LIMIT=8388608;const ATTEMPTED_PROVENANCE_OUTCOME_STATUSES=new Set(["resolved","failed"]);const INVALID_PROVENANCE_VALUE_CLASSIFIERS=[{kind:"boolean",matches:value=>typeof value==="boolean"||typeof value==="string"&&/^(?:true|false)$/iu.test(value.trim())},{kind:"single_digit",matches:value=>typeof value==="number"&&Number.isInteger(value)&&value>=0&&value<=9||typeof value==="string"&&/^\d$/u.test(value.trim())}];function isRecord(value){return typeof value==="object"&&value!==null&&!Array.isArray(value)}function invalidProvenanceValueKind(value){return INVALID_PROVENANCE_VALUE_CLASSIFIERS.find(classifier=>classifier.matches(value))?.kind}function normalizeInvalidHistoryProvenance(entries){const invalidValues=new Map;let eventsChanged=0;let observationsRemoved=0;const normalized=entries.map(entry=>{const provenance=isRecord(entry.agent_provenance)?entry.agent_provenance:void 0;if(provenance===void 0)return entry;if(!verifyHistoryRecordHash(entry).ok)return entry;const retained={};let eventChanged=false;for(const[dimension,observation]of Object.entries(provenance)){const kind=isRecord(observation)?invalidProvenanceValueKind(observation.value):void 0;if(kind===void 0){retained[dimension]=observation;continue}eventChanged=true;observationsRemoved+=1;const harness=entry.agent_harness??"unknown";const key=`${harness}\0${dimension}\0${kind}`;const aggregate=invalidValues.get(key)??{harness,dimension,kind,count:0};aggregate.count+=1;invalidValues.set(key,aggregate)}if(!eventChanged)return entry;eventsChanged+=1;const next={...entry};if(Object.keys(retained).length===0){delete next.agent_provenance}else{next.agent_provenance=retained}return resealHistoryRewrite(entry,next,{retainPriorRecord:true,retainPriorRecordHash:false})});return{entries:normalized,receipt:{changed:eventsChanged>0,events_changed:eventsChanged,observations_removed:observationsRemoved,invalid_values:[...invalidValues.values()].sort((left,right)=>left.harness.localeCompare(right.harness)||left.dimension.localeCompare(right.dimension)||left.kind.localeCompare(right.kind))}}}async function listInvalidProvenanceHistoryStreamIds(pmRoot){const ids=[];for(const file of await listHistoryFiles(pmRoot)){try{const content=await fs.readFile(path.join(pmRoot,"history",file),"utf8");for(const line of content.split("\n")){if(line.trim().length===0)continue;const entry=parseHistoryEntry(line);if(entry===null||!isRecord(entry.agent_provenance))continue;const invalid=Object.values(entry.agent_provenance).some(observation=>isRecord(observation)&&invalidProvenanceValueKind(observation.value)!==void 0);if(invalid){ids.push(file.slice(0,-".jsonl".length));break}}}catch{}}return ids}async function listHistoryFiles(pmRoot){try{return(await fs.readdir(path.join(pmRoot,"history"))).filter(file=>file.endsWith(".jsonl")).sort()}catch{return[]}}async function readHistoryFile(pmRoot,file,byteLimit){let handle;try{handle=await fs.open(path.join(pmRoot,"history",file),"r");const size=(await handle.stat()).size;const length=Math.min(size,Math.max(0,byteLimit));const buffer=Buffer.alloc(length);const{bytesRead}=await handle.read(buffer,0,length,0);const decoded=buffer.subarray(0,bytesRead).toString("utf8");const complete=bytesRead>=size;const finalNewline=decoded.lastIndexOf("\n");let content=decoded;if(!complete){content=finalNewline===-1?"":decoded.slice(0,finalNewline+1)}return{content,bytesRead,complete}}catch{return null}finally{await handle?.close()}}function parseHistoryEntry(line){try{const value=JSON.parse(line);return isRecord(value)?value:null}catch{return null}}function collectResolverOutcomes(entry,aggregates,invalidValues){const harness=typeof entry.agent_harness==="string"?entry.agent_harness:void 0;if(harness===void 0)return;const provenance=isRecord(entry.agent_provenance)?entry.agent_provenance:{};Object.entries(provenance).forEach(([dimension,observation])=>{if(!isRecord(observation))return;const kind=invalidProvenanceValueKind(observation.value);if(!kind)return;const key=`${harness}\0${dimension}\0${kind}`;const aggregate=invalidValues.get(key)??{harness,dimension,kind,count:0};aggregate.count+=1;invalidValues.set(key,aggregate)});if(!isRecord(entry.context))return;const outcomes=entry.context.agent_provenance_outcomes;if(!isRecord(outcomes))return;Object.entries(outcomes).forEach(([dimension,rawOutcome])=>{if(!isRecord(rawOutcome)||typeof rawOutcome.resolver!=="string"){return}if(!ATTEMPTED_PROVENANCE_OUTCOME_STATUSES.has(String(rawOutcome.status))){return}const key=`${harness}\0${dimension}\0${rawOutcome.resolver}`;const aggregate=aggregates.get(key)??{harness,dimension,resolver:rawOutcome.resolver,attempts:0,successes:0};aggregate.attempts+=1;if(rawOutcome.status==="resolved")aggregate.successes+=1;aggregates.set(key,aggregate)})}function collectHistoryContent(content,aggregates,invalidValues,eventLimit,initialEventsRead){let eventsRead=initialEventsRead;for(const line of content.split("\n")){if(line.trim().length===0)continue;if(eventsRead>=eventLimit)return{eventsRead,truncated:true};eventsRead+=1;const entry=parseHistoryEntry(line);if(entry)collectResolverOutcomes(entry,aggregates,invalidValues)}return{eventsRead,truncated:false}}async function scanProvenanceResolverHealth(pmRoot,eventLimit=1e4){const aggregates=new Map;const invalidValues=new Map;let eventsRead=0;let bytesRead=0;let truncated=false;for(const file of await listHistoryFiles(pmRoot)){const history=await readHistoryFile(pmRoot,file,Math.max(0,DEFAULT_PROVENANCE_HISTORY_BYTE_LIMIT-bytesRead));if(history===null)continue;bytesRead+=history.bytesRead;const collected=collectHistoryContent(history.content,aggregates,invalidValues,eventLimit,eventsRead);eventsRead=collected.eventsRead;if(collected.truncated){truncated=true;break}if(!history.complete){truncated=true;break}}const outcomes=[...aggregates.values()].sort((left,right)=>left.harness.localeCompare(right.harness)||left.dimension.localeCompare(right.dimension)||left.resolver.localeCompare(right.resolver));const invalidValueFindings=[...invalidValues.values()].sort((left,right)=>left.harness.localeCompare(right.harness)||left.dimension.localeCompare(right.dimension)||left.kind.localeCompare(right.kind));return{outcomes,invalid_values:invalidValueFindings,warnings:truncated?[]:[...outcomes.filter(outcome=>outcome.attempts>0&&outcome.successes===0).map(outcome=>`provenance_resolver_zero_success:${outcome.harness}:${outcome.dimension}:${outcome.resolver}:${String(outcome.attempts)}`),...invalidValueFindings.map(finding=>`provenance_value_domain_invalid:${finding.harness}:${finding.dimension}:${finding.kind}:${String(finding.count)}`)],events_read:eventsRead,truncated}}export{listInvalidProvenanceHistoryStreamIds,normalizeInvalidHistoryProvenance,scanProvenanceResolverHealth};
 //# sourceMappingURL=provenance-health.js.map
-//# debugId=cb3bf7ee-808f-5ff6-af84-edb034760c54