@verax-ai/proxy 0.3.0 → 0.4.0

package/dist/reconcile.d.ts

@@ -67,7 +67,8 @@ export type CardCsvOpts = {
 };
 export declare function parseCardCsv(text: string, opts: CardCsvOpts): ParsedCardCsv;
 export declare function parseChannelJsonl(text: string): ChannelRow[];
-/** Read-only: does not take ledger.lock. */
+/** Decision refs, read the same way `verifyLedger` lists decision files. */
+export declare function loadDecisionRefsFromDir(stateDir: string): Set<string>;
 export declare function loadEffectsFromDir(stateDir: string): LedgerEffect[];
 export declare function reconcile(channelRows: readonly ChannelRow[], effects: readonly LedgerEffect[], opts?: {
     toleranceMs?: number;
@@ -78,4 +79,6 @@ export declare function reconcile(channelRows: readonly ChannelRow[], effects: r
     approvals?: readonly ApprovalRow[];
     skipped?: CardCsvSkip[];
     descriptorsByPayee?: Readonly<Record<string, readonly string[]>>;
+    /** Effect refs that have a decision. Absent means none: an effect is not a match. */
+    decisionRefs?: ReadonlySet<string>;
 }): ReconcileReport;

package/dist/reconcile.js

@@ -1,6 +1,7 @@
 import { createHash } from "node:crypto";
-import { readFileSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
+import { readLedgerManifest, requireLedgerPiecePath } from "./ledger-manifest.js";
 function asChannelRow(raw, line) {
     if (raw === null || typeof raw !== "object") {
         throw new Error(`channel-row-invalid:${line}`);
@@ -208,6 +209,39 @@ export function parseChannelJsonl(text) {
     return rows;
 }
 /** Read-only: does not take ledger.lock. */
+function decisionPaths(dir) {
+    const manifest = readLedgerManifest(dir);
+    if (manifest && Array.isArray(manifest.pieces) && manifest.pieces.length > 0) {
+        return manifest.pieces
+            .map((p) => requireLedgerPiecePath(dir, p.decisions))
+            .filter((p) => existsSync(p));
+    }
+    const tek = join(dir, "decisions.jsonl");
+    return existsSync(tek) ? [tek] : [];
+}
+/** Decision refs, read the same way `verifyLedger` lists decision files. */
+export function loadDecisionRefsFromDir(stateDir) {
+    const refs = new Set();
+    for (const path of decisionPaths(stateDir)) {
+        let text = "";
+        try {
+            text = readFileSync(path, "utf8");
+        }
+        catch (err) {
+            if (err.code === "ENOENT")
+                continue;
+            throw err;
+        }
+        for (const line of text.split("\n")) {
+            if (line === "")
+                continue;
+            const row = JSON.parse(line);
+            if (typeof row.claims?.ref === "string")
+                refs.add(row.claims.ref);
+        }
+    }
+    return refs;
+}
 export function loadEffectsFromDir(stateDir) {
     try {
         const text = readFileSync(join(stateDir, "effects.jsonl"), "utf8");
@@ -291,6 +325,8 @@ function descriptorsFor(effect, approvals, byPayee) {
 }
 export function reconcile(channelRows, effects, opts) {
     const toleranceMs = opts?.toleranceMs ?? 60_000;
+    const decisionRefs = opts?.decisionRefs ?? new Set();
+    const decided = (effect) => decisionRefs.has(effect.row.ref);
     if (channelRows.length === 0) {
         return {
             scope: { channel: "", windowStartMs: 0, windowEndMs: 0, rowCount: 0 },
@@ -326,6 +362,7 @@ export function reconcile(channelRows, effects, opts) {
         const marked = { ...row, toleranceMs: rowTol };
         if (typeof row.ref === "string" && row.ref !== "") {
             const idx = effects.findIndex((e, i) => !used.has(i) &&
+                decided(e) &&
                 (e.row.ref === row.ref ||
                     opts?.approvals?.some((a) => a.ref === row.ref && a.allowRef === e.row.ref)));
             if (idx === -1) {
@@ -359,7 +396,7 @@ export function reconcile(channelRows, effects, opts) {
         let unknownNear = false;
         let descriptorMiss = false;
         const near = effects.findIndex((e, i) => {
-            if (used.has(i) || e.row.effectClass !== row.subject)
+            if (used.has(i) || !decided(e) || e.row.effectClass !== row.subject)
                 return false;
             if (Math.abs(row.occurredAtMs - e.row.timestampMs) > rowTol)
                 return false;

package/dist/types.d.ts

@@ -45,11 +45,14 @@ export type Policy = {
     /** Document-root posture. Absent keeps today's optional `_inputs`. */
     requireInputs?: boolean;
     evaluate(call: ToolCall, principal: Principal, ctx?: PolicyEvalCtx): PolicyDecision;
+    /** Spend-rule day bucket. Absent means UTC, the same as `dayOffsetMinutes: 0`. */
+    dayOffsetMinutes?: number;
     rule(id: string | null): {
         id: string;
         text: string;
         spend?: {
             dailyMaxMinor?: number;
+            dayOffsetMinutes?: number;
         };
     } | null;
 };
@@ -115,8 +118,8 @@ export type DecisionInputs = {
         resolves: string;
     };
 };
-/** How an operator's approval reached the ledger: `verax approve` on the machine, or the body's `/api/approve`. */
-export type ApprovalChannel = "cli" | "http";
+/** How an operator's approval reached the ledger: a person at `verax approve`, a non-interactive `--from-script` run, or the body's `/api/approve`. */
+export type ApprovalChannel = "cli" | "cli-script" | "http";
 export type InputsLog = {
     append(ref: string, inputs: DecisionInputs): Promise<void>;
     get(ref: string): Promise<DecisionInputs | null>;

package/dist/verify-ledger.d.ts

@@ -16,10 +16,48 @@ export type VerifyResult = {
     effectsBound: number;
     effectsOrphaned: number;
     trust: VerifyTrust;
+    /** Which key answered for `self` effect rows. Same honesty rules as `trust`. */
+    effectTrust: VerifyTrust;
+    /** Which key answered for `same-org` effect rows. Agreement is not trust. */
+    witnessTrust: VerifyTrust;
+    /** Which key answered for checkpoint rows. Same honesty rules as `trust`. */
+    checkpointTrust: VerifyTrust;
+    /** What `index.jsonl` still names. Missing file is not a failure. */
+    index: VerifyIndex;
+    /**
+     * Absent index: effect completeness was not checked, and that absence is
+     * not itself a failure. Present index: every ref it marks was compared to
+     * a bound effect row.
+     */
+    effectCompleteness: string;
+    /** What the newest checkpoint covers, and the records after it. */
+    tail: VerifyTail;
     problems: string[];
 };
+export type VerifyIndex = {
+    present: boolean;
+    /** Index refs that are not decisions in the ledger. */
+    missing: number;
+    line: string;
+};
+export type VerifyTail = {
+    line: string;
+    /** Newest signed checkpoint, or null when the file has none. */
+    checkpoint: {
+        receiptCount: number | null;
+        chainHeadHash: string | null;
+        /** True when some decision's hash is the checkpoint head. Null when the checkpoint carries no head. */
+        ledgerHoldsRecord: boolean | null;
+    } | null;
+};
 export type VerifyOptions = {
-    /** Verify against this key instead of the one the records carry. */
+    /** Verify decision records against this key instead of the one they carry. */
     publicKeyPem?: string;
+    /** Verify `self` effect rows against this key instead of the one those rows carry. */
+    effectPublicKeyPem?: string;
+    /** Verify `same-org` effect rows against this key instead of the one those rows carry. */
+    witnessPublicKeyPem?: string;
+    /** Verify every checkpoint row against this key instead of one key taken from the file. */
+    checkpointPublicKeyPem?: string;
 };
 export declare function verifyLedger(dir: string, opts?: VerifyOptions): Promise<VerifyResult>;