@vizuh/sabi 0.1.3 → 0.1.4

package/mod/sabi.mjs

@@ -1,4 +1,4 @@
-// @vizuh/sabi 0.1.3 — generated by pack.mjs from packages/adapters/command-code/mod/sabi.ts.
+// @vizuh/sabi 0.1.4 — generated by pack.mjs from packages/adapters/command-code/mod/sabi.ts.
 // Source and docs: https://github.com/vizuh/sabi
 
 // packages/core/src/state.ts
@@ -331,8 +331,8 @@ function servesInputModalities(declared, required) {
   return required.every((modality) => declared.includes(modality));
 }
 function firstServingTier(tiers, required, declared) {
-  for (const [name, tier] of Object.entries(tiers)) {
-    if (servesInputModalities(declared(tier), required)) return name;
+  for (const name of Object.keys(tiers).sort()) {
+    if (servesInputModalities(declared(tiers[name]), required)) return name;
   }
   return void 0;
 }
@@ -441,6 +441,9 @@ function validateModelMetadata(value, label) {
       if (!Array.isArray(items) || items.some((item) => typeof item !== "string" || !item.trim())) {
         fail(`capabilities.${field}`, "must be an array of nonempty strings");
       }
+      if ((field === "inputModalities" || field === "outputModalities") && items.length === 0) {
+        fail(`capabilities.${field}`, "must not be empty");
+      }
       const strings = items;
       if (new Set(strings).size !== strings.length) fail(`capabilities.${field}`, "must not contain duplicates");
       const allowed = field.endsWith("Modalities") ? MODALITIES : field === "structuredOutput" ? ["json_object", "json_schema"] : void 0;
@@ -530,11 +533,30 @@ function validateConfig(value, source = "<inline>") {
       throw new Error(`Sabi config ${source}: alias '${alias}' targets unknown tier '${target}'`);
     }
   }
+  const knownRules = new Set(POLICY_ORDER);
   for (const [condition, tier] of Object.entries(policy)) {
+    if (!knownRules.has(condition)) {
+      throw new Error(`Sabi config ${source}: policy rule '${condition}' is not a known rule (${POLICY_ORDER.join(", ")})`);
+    }
     if (typeof tier !== "string" || tier !== "off" && !Object.hasOwn(models, tier)) {
       throw new Error(`Sabi config ${source}: policy rule '${condition}' targets unknown tier '${tier}'`);
     }
   }
+  if (Object.values(aliases).includes("auto")) {
+    const fallbackTier = typeof policy.unclassified === "string" && policy.unclassified !== "off" ? policy.unclassified : "cheap";
+    if (!Object.hasOwn(models, fallbackTier)) {
+      throw new Error(`Sabi config ${source}: policy.unclassified must resolve to a declared tier (got '${String(policy.unclassified)}')`);
+    }
+  }
+  const transportFallback = config.transportFallback;
+  if (transportFallback !== void 0) {
+    if (!isObject(transportFallback)) {
+      throw new Error(`Sabi config ${source}: transportFallback must be an object`);
+    }
+    if (transportFallback.enabled !== void 0 && typeof transportFallback.enabled !== "boolean") {
+      throw new Error(`Sabi config ${source}: transportFallback.enabled must be a boolean`);
+    }
+  }
   const judge = config.judge;
   if (judge !== void 0) {
     if (typeof judge !== "object" || judge === null || typeof judge.enabled !== "boolean") {
@@ -556,6 +578,14 @@ function validateConfig(value, source = "<inline>") {
         if (!Array.isArray(judge.callOn) || judge.callOn.some((rule) => typeof rule !== "string")) {
           throw new Error(`Sabi config ${source}: judge.callOn must be an array of policy rule names`);
         }
+        for (const rule of judge.callOn) {
+          if (!knownRules.has(rule)) {
+            throw new Error(`Sabi config ${source}: judge.callOn rule '${rule}' is not a known rule (${POLICY_ORDER.join(", ")})`);
+          }
+        }
+      }
+      if (judge.includeSnippets !== void 0 && typeof judge.includeSnippets !== "boolean") {
+        throw new Error(`Sabi config ${source}: judge.includeSnippets must be a boolean`);
       }
       for (const [name, value2] of Object.entries(judge.thresholds ?? {})) {
         if (typeof value2 !== "number" || value2 < 0 || value2 > 1) {
@@ -632,25 +662,126 @@ function validateConfig(value, source = "<inline>") {
       if (tier.minPlan !== void 0 && typeof tier.minPlan !== "string") {
         throw new Error(`Sabi config ${source}: harness.tiers.${tierName}.minPlan must be a string`);
       }
+      if (tier.inputModalities !== void 0) {
+        if (!Array.isArray(tier.inputModalities) || tier.inputModalities.length === 0 || tier.inputModalities.some((modality) => typeof modality !== "string" || !MODALITIES.includes(modality))) {
+          throw new Error(`Sabi config ${source}: harness.tiers.${tierName}.inputModalities must be a nonempty array of: ${MODALITIES.join(", ")}`);
+        }
+        if (new Set(tier.inputModalities).size !== tier.inputModalities.length) {
+          throw new Error(`Sabi config ${source}: harness.tiers.${tierName}.inputModalities must not contain duplicates`);
+        }
+      }
+      if (tier.contextWindow !== void 0 && (typeof tier.contextWindow !== "number" || !Number.isSafeInteger(tier.contextWindow) || tier.contextWindow < 1)) {
+        throw new Error(`Sabi config ${source}: harness.tiers.${tierName}.contextWindow must be a safe integer >= 1`);
+      }
     }
   }
   return { ...config, upstreams, models, aliases, policy };
 }
 
 // packages/core/src/log.ts
-import { appendFileSync, existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2 } from "node:fs";
-import { createHash, randomUUID } from "node:crypto";
+import { appendFileSync, chmodSync, existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, writeFileSync } from "node:fs";
+import { createHmac, randomBytes, randomUUID } from "node:crypto";
+import os2 from "node:os";
 import path2 from "node:path";
 function defaultLogPath() {
   return process.env.SABI_LOG?.trim() || path2.join(process.cwd(), ".sabi", "decisions.jsonl");
 }
+function appendPrivateLine(logFile, line) {
+  const dir = path2.dirname(logFile);
+  mkdirSync(dir, { recursive: true, mode: 448 });
+  appendFileSync(logFile, line, { mode: 384 });
+  if (process.platform !== "win32") {
+    chmodSync(dir, 448);
+    chmodSync(logFile, 384);
+  }
+}
+function identitySaltPath(env = process.env) {
+  const override = env.SABI_ID_SALT_FILE?.trim();
+  if (override) return override;
+  const base = env.XDG_CONFIG_HOME?.trim() || path2.join(os2.homedir(), ".config");
+  return path2.join(base, "sabi", ".identity-salt");
+}
+var cachedSalt;
+var cachedSaltSource;
+var ephemeralSaltWarned = false;
+function loadOrCreateSalt(source) {
+  try {
+    if (existsSync2(source)) {
+      const stored = readFileSync2(source, "utf8").trim();
+      if (stored.length >= 16) return stored;
+    }
+    const fresh = randomBytes(32).toString("hex");
+    mkdirSync(path2.dirname(source), { recursive: true });
+    writeFileSync(source, `${fresh}
+`, { mode: 384 });
+    try {
+      chmodSync(source, 384);
+    } catch {
+    }
+    return fresh;
+  } catch {
+    return void 0;
+  }
+}
+function getIdentitySalt(env = process.env) {
+  const override = env.SABI_ID_SALT?.trim();
+  if (override) return override;
+  const source = identitySaltPath(env);
+  if (cachedSalt !== void 0 && cachedSaltSource === source) return cachedSalt;
+  const salt = loadOrCreateSalt(source);
+  if (salt === void 0) {
+    if (!ephemeralSaltWarned) {
+      ephemeralSaltWarned = true;
+      console.warn(`Sabi: identity salt at ${source} is unreadable \u2014 using an ephemeral per-process salt`);
+    }
+    cachedSalt = randomBytes(32).toString("hex");
+    cachedSaltSource = source;
+    return cachedSalt;
+  }
+  cachedSalt = salt;
+  cachedSaltSource = source;
+  return salt;
+}
+var logWriteFailures = 0;
+var warnedLogFiles = /* @__PURE__ */ new Set();
+function logWriteFailurePath(logFile) {
+  return `${logFile}.write-failures.json`;
+}
+function recordLogWriteFailure(logFile, error) {
+  logWriteFailures += 1;
+  if (!warnedLogFiles.has(logFile)) {
+    warnedLogFiles.add(logFile);
+    console.warn(`Sabi: could not append to the decision log at ${logFile}: ${error?.message ?? error} (telemetry degraded, will retry next round)`);
+  }
+  try {
+    const sidecar = logWriteFailurePath(logFile);
+    let failures = 0;
+    try {
+      const prior = JSON.parse(readFileSync2(sidecar, "utf8"));
+      if (typeof prior.failures === "number" && Number.isFinite(prior.failures)) failures = Math.floor(prior.failures);
+    } catch {
+    }
+    const state = {
+      failures: failures + 1,
+      lastTs: (/* @__PURE__ */ new Date()).toISOString(),
+      lastError: String(error?.message ?? error).slice(0, 120)
+    };
+    mkdirSync(path2.dirname(sidecar), { recursive: true });
+    writeFileSync(sidecar, `${JSON.stringify(state)}
+`);
+  } catch {
+  }
+}
 function appendDecision(record, logFile = defaultLogPath()) {
-  mkdirSync(path2.dirname(logFile), { recursive: true });
-  appendFileSync(logFile, `${JSON.stringify(record)}
+  try {
+    appendPrivateLine(logFile, `${JSON.stringify(record)}
 `);
+  } catch (error) {
+    recordLogWriteFailure(logFile, error);
+  }
 }
 function hashIdentity(kind, ...parts) {
-  return createHash("sha256").update(JSON.stringify([kind, ...parts])).digest("hex");
+  return createHmac("sha256", getIdentitySalt()).update(JSON.stringify([kind, ...parts])).digest("hex");
 }
 function sessionIdFor(session, client = "unknown") {
   return session === void 0 ? randomUUID() : hashIdentity("session", client, session);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vizuh/sabi",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Adaptive inference scheduling for Command Code: one bundled mod that routes each continuing round by model, effort and trajectory state.",
   "type": "module",
   "license": "MIT",

package/sabi.config.json

@@ -68,6 +68,9 @@
     "exploration": "cheap",
     "unclassified": "cheap"
   },
+  "transportFallback": {
+    "enabled": false
+  },
   "telemetry": {
     "allowlistOnly": true,
     "captureSnippets": false,