@xenosystem/agent-sdk 0.8.12

package/dist/research/index.cjs

@@ -0,0 +1,3 @@
+"use strict";var g=Object.defineProperty;var x=Object.getOwnPropertyDescriptor;var k=Object.getOwnPropertyNames;var T=Object.prototype.hasOwnProperty;var C=(e,t)=>{for(var n in t)g(e,n,{get:t[n],enumerable:!0})},$=(e,t,n,i)=>{if(t&&typeof t=="object"||typeof t=="function")for(let o of k(t))!T.call(e,o)&&o!==n&&g(e,o,{get:()=>t[o],enumerable:!(i=x(t,o))||i.enumerable});return e};var N=e=>$(g({},"__esModule",{value:!0}),e);var K={};C(K,{XENO_SOURCE_RESEARCH_SCHEMA_VERSION:()=>I,XenoSourceResearchValidationError:()=>c,assertValidXenoSourceResearchReport:()=>h,createXenoSourceResearchExcerpt:()=>D,createXenoSourceResearchReport:()=>O,normalizeSourceText:()=>l,xenoArtifactToSourceResearchReport:()=>L,xenoSourceResearchReportToArtifact:()=>F});module.exports=N(K);var A=require("node:crypto");var R=require("node:crypto");function s(e){return{algorithm:"sha256",value:(0,R.createHash)("sha256").update(e).digest("hex")}}function d(e){return JSON.stringify(v(e,new Set))}function f(e){return s(d(e))}function v(e,t){if(e===null||typeof e!="object"){if(typeof e=="number"&&!Number.isFinite(e))throw new TypeError("Artifact JSON cannot contain non-finite numbers");return e}if(t.has(e))throw new TypeError("Artifact JSON cannot contain cycles");if(t.add(e),Array.isArray(e)){let i=e.map(o=>v(o,t));return t.delete(e),i}let n={};for(let i of Object.keys(e).sort((o,r)=>o.localeCompare(r))){let o=e[i];if(o===void 0)throw new TypeError(`Artifact JSON property ${i} is undefined`);n[i]=v(o,t)}return t.delete(e),n}var V="[\\u0000-\\u001f\\u007f]",ne=new RegExp(V);var Ee=64*1024*1024;var ke=16*1024*1024;function X(e,t={}){for(let n of e){let i=n.codePointAt(0);if(i===127)return!0;if(!(i>31)&&!(i===9&&t.allowTab===!0)&&!((i===10||i===13)&&t.allowLineBreaks===!0))return!0}return!1}var I="xeno.source-research-report.v1",c=class extends Error{constructor(n){super(`XENO source-research report is invalid: ${n.join("; ")}`);this.issues=n;this.name="XenoSourceResearchValidationError"}issues;code="XENO_SOURCE_RESEARCH_INVALID"};function O(e){let t={schemaVersion:I,reportId:e.reportId??`research_${(0,A.randomUUID)()}`,runId:e.runId??`research_run_${(0,A.randomUUID)()}`,query:e.query.trim(),queryHash:_(e.query.trim()),repository:structuredClone(e.repository),collectedAt:e.collectedAt,completedAt:e.completedAt??new Date().toISOString(),model:structuredClone(e.model),files:structuredClone(e.files),excerpts:structuredClone(e.excerpts),answer:e.answer.trim(),answerExcerptIds:[...new Set(e.answerExcerptIds)],publicRationale:e.publicRationale.trim(),findings:structuredClone(e.findings),limitations:[...new Set((e.limitations??[]).map(n=>n.trim()).filter(Boolean))],usage:{inputTokens:S(e.usage?.inputTokens),outputTokens:S(e.usage?.outputTokens)}};return h(t),t}function D(e){return{excerptId:e.excerptId,path:e.path,startLine:e.startLine,endLine:e.endLine,text:l(e.text),contentHash:_(l(e.text)),sourceContentHash:structuredClone(e.sourceContentHash)}}function h(e){let t=[];e?.schemaVersion!==I&&t.push("schemaVersion must be xeno.source-research-report.v1"),p(e?.reportId,"reportId",t),p(e?.runId,"runId",t),a(e?.query,"query",t,128e3),m(e?.queryHash,"queryHash",t),typeof e?.query=="string"&&e.queryHash?.value!==s(e.query).value&&t.push("queryHash does not match query"),H(e?.repository,t),E(e?.collectedAt,"collectedAt",t),E(e?.completedAt,"completedAt",t),Date.parse(e?.completedAt)<Date.parse(e?.collectedAt)&&t.push("completedAt cannot precede collectedAt"),q(e?.model,t),a(e?.answer,"answer",t,512e3),a(e?.publicRationale,"publicRationale",t,256e3),J(e?.usage,t),(!Array.isArray(e?.files)||e.files.length<1||e.files.length>256)&&t.push("files must contain 1 through 256 source records");let n=new Map;for(let r of e?.files??[])M(r,t),n.has(r.path)&&t.push(`duplicate source file ${r.path}`),n.set(r.path,r);(!Array.isArray(e?.excerpts)||e.excerpts.length>1024)&&t.push("excerpts must contain at most 1024 records");let i=new Map;for(let r of e?.excerpts??[])j(r,n,t),i.has(r.excerptId)&&t.push(`duplicate excerpt ${r.excerptId}`),i.set(r.excerptId,r);(!Array.isArray(e?.answerExcerptIds)||e.answerExcerptIds.length<1)&&t.push("answerExcerptIds must cite at least one source excerpt");for(let r of e?.answerExcerptIds??[])i.has(r)||t.push(`answer references unknown excerpt ${r}`);(!Array.isArray(e?.findings)||e.findings.length>512)&&t.push("findings must contain at most 512 records");let o=new Set;for(let r of e?.findings??[]){p(r?.findingId,"findingId",t),o.has(r.findingId)&&t.push(`duplicate finding ${r.findingId}`),o.add(r.findingId),a(r?.title,`finding ${r.findingId} title`,t,2e3),a(r?.summary,`finding ${r.findingId} summary`,t,64e3),G(r?.severity)||t.push(`finding ${r.findingId} severity is invalid`),W(r?.confidence)||t.push(`finding ${r.findingId} confidence must be between 0 and 1`),(!Array.isArray(r?.excerptIds)||r.excerptIds.length<1)&&t.push(`finding ${r.findingId} requires source excerpts`);for(let w of r?.excerptIds??[])i.has(w)||t.push(`finding ${r.findingId} references unknown excerpt ${w}`)}(!Array.isArray(e?.limitations)||e.limitations.length>256)&&t.push("limitations must contain at most 256 records");for(let r of e?.limitations??[])a(r,"limitation",t,16e3);if(t.length>0)throw new c([...new Set(t)])}function F(e,t){h(e);let n=t.createdAt??e.completedAt,i=d(e);return{schemaVersion:1,artifactId:t.artifactId??`research_${s(`${e.runId}:${e.repository.commit}:${e.queryHash.value}`).value.slice(0,24)}`,revision:1,kind:"custom:source-research-report",title:`Source research: ${e.repository.repository}`,description:e.answer.slice(0,1e3),state:"pending_review",createdAt:n,mediaType:"application/vnd.xeno.source-research-report+json",sensitivity:t.sensitivity??"internal",identity:{...t.identity,runId:t.identity?.runId??e.runId,repositoryId:t.identity?.repositoryId??`${e.repository.provider}:${e.repository.repository}`},content:{hash:f(e),sizeBytes:Buffer.byteLength(i,"utf8"),storage:{type:"inline",text:i},encoding:"utf8",redactedPreview:e.answer.slice(0,2e3)},provenance:{producer:structuredClone(t.producer),attributes:{"xeno.research.provider":e.repository.provider,"xeno.research.repository":e.repository.repository,"xeno.research.commit":e.repository.commit,"xeno.research.model":`${e.model.providerId}/${e.model.model}`,"xeno.research.fileCount":e.files.length,"xeno.research.findingCount":e.findings.length}},anchors:e.excerpts.map(o=>({kind:"source-line",path:o.path,startLine:o.startLine,endLine:o.endLine,repositoryId:`${e.repository.provider}:${e.repository.repository}`,commit:e.repository.commit}))}}function L(e){if(e.kind!=="custom:source-research-report"||e.mediaType!=="application/vnd.xeno.source-research-report+json")throw new c([`Artifact ${e.artifactId} is not a source-research report`]);if(e.content.storage.type!=="inline"||typeof e.content.storage.text!="string")throw new c(["Source-research reports require inline JSON content"]);let t;try{t=JSON.parse(e.content.storage.text)}catch{throw new c(["Source-research artifact content is invalid JSON"])}if(h(t),f(t).value!==e.content.hash.value)throw new c(["Source-research content hash does not match the artifact"]);return structuredClone(t)}function l(e){return e.replace(/\r\n?/gu,`
+`)}function H(e,t){e?.provider!=="github"&&e?.provider!=="gitlab"&&t.push("repository provider must be github or gitlab"),B(e?.host,"repository host",t),z(e?.repository,t),a(e?.ref,"repository ref",t,512),(typeof e?.commit!="string"||!/^[a-f0-9]{7,64}$/u.test(e.commit))&&t.push("repository commit must be a lowercase hexadecimal object ID"),U(e?.url,"repository url",t)}function M(e,t){b(e?.path,"source file path",t),m(e?.contentHash,`source file ${e?.path} contentHash`,t),(!Number.isSafeInteger(e?.sizeBytes)||e.sizeBytes<0||e.sizeBytes>8*1024*1024)&&t.push(`source file ${e?.path} sizeBytes is invalid`),(!Number.isSafeInteger(e?.lineCount)||e.lineCount<1||e.lineCount>1e6)&&t.push(`source file ${e?.path} lineCount is invalid`),e?.blobId!==void 0&&a(e.blobId,`source file ${e.path} blobId`,t,256),e?.language!==void 0&&a(e.language,`source file ${e.path} language`,t,128)}function j(e,t,n){p(e?.excerptId,"excerptId",n),b(e?.path,`excerpt ${e?.excerptId} path`,n);let i=t.get(e?.path);i||n.push(`excerpt ${e?.excerptId} references unknown source file ${e?.path}`),(!Number.isSafeInteger(e?.startLine)||e.startLine<1)&&n.push(`excerpt ${e?.excerptId} startLine is invalid`),(!Number.isSafeInteger(e?.endLine)||e.endLine<e.startLine)&&n.push(`excerpt ${e?.excerptId} endLine is invalid`),i&&e.endLine>i.lineCount&&n.push(`excerpt ${e?.excerptId} exceeds source line count`),a(e?.text,`excerpt ${e?.excerptId} text`,n,256e3),m(e?.contentHash,`excerpt ${e?.excerptId} contentHash`,n),m(e?.sourceContentHash,`excerpt ${e?.excerptId} sourceContentHash`,n);let o=typeof e?.text=="string"?l(e.text):"";e?.contentHash?.value!==s(o).value&&n.push(`excerpt ${e?.excerptId} contentHash does not match text`),i&&e?.sourceContentHash?.value!==i.contentHash.value&&n.push(`excerpt ${e?.excerptId} is bound to a different source hash`),o&&o.split(`
+`).length!==e.endLine-e.startLine+1&&n.push(`excerpt ${e?.excerptId} line span does not match text`)}function q(e,t){p(e?.providerId,"model providerId",t),a(e?.model,"model",t,512),e?.connectionId!==void 0&&p(e.connectionId,"model connectionId",t)}function J(e,t){(!Number.isSafeInteger(e?.inputTokens)||e.inputTokens<0)&&t.push("usage.inputTokens must be a non-negative integer"),(!Number.isSafeInteger(e?.outputTokens)||e.outputTokens<0)&&t.push("usage.outputTokens must be a non-negative integer")}function m(e,t,n){(e?.algorithm!=="sha256"||!/^[a-f0-9]{64}$/u.test(e?.value??""))&&n.push(`${t} must be a lowercase SHA-256 digest`)}function p(e,t,n){(typeof e!="string"||!/^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,255}$/u.test(e))&&n.push(`${t} is invalid`)}function a(e,t,n,i){(typeof e!="string"||!e.trim()||e.length>i||X(e,{allowTab:!0,allowLineBreaks:!0}))&&n.push(`${t} must be non-empty bounded text`)}function E(e,t,n){(typeof e!="string"||!Number.isFinite(Date.parse(e))||new Date(e).toISOString()!==e)&&n.push(`${t} must be an ISO-8601 UTC timestamp`)}function B(e,t,n){(typeof e!="string"||e.length>253||!/^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/u.test(e))&&n.push(`${t} is invalid`)}function z(e,t){(typeof e!="string"||e.length>2048||e.startsWith("/")||e.endsWith("/")||e.split("/").some(n=>!n||n==="."||n===".."))&&t.push("repository name is invalid")}function b(e,t,n){(typeof e!="string"||e.length>4096||e.startsWith("/")||/^[A-Za-z]:[\\/]/u.test(e)||e.includes("\\")||e.split("/").some(i=>!i||i==="."||i===".."))&&n.push(`${t} must be repository-relative`)}function U(e,t,n){try{let i=new URL(String(e));(i.protocol!=="https:"||i.username||i.password)&&n.push(`${t} must be credential-free HTTPS`)}catch{n.push(`${t} is invalid`)}}function S(e){return Number.isSafeInteger(e)&&(e??-1)>=0?e:0}function _(e){return{algorithm:"sha256",value:s(e).value}}function W(e){return typeof e=="number"&&Number.isFinite(e)&&e>=0&&e<=1}function G(e){return e==="info"||e==="low"||e==="medium"||e==="high"||e==="critical"}0&&(module.exports={XENO_SOURCE_RESEARCH_SCHEMA_VERSION,XenoSourceResearchValidationError,assertValidXenoSourceResearchReport,createXenoSourceResearchExcerpt,createXenoSourceResearchReport,normalizeSourceText,xenoArtifactToSourceResearchReport,xenoSourceResearchReportToArtifact});

package/dist/research/index.d.cts

@@ -0,0 +1,285 @@
+declare const XENO_ARTIFACT_SCHEMA_VERSION: 1;
+type XenoJsonPrimitive = string | number | boolean | null;
+type XenoJsonValue = XenoJsonPrimitive | XenoJsonObject | XenoJsonValue[];
+interface XenoJsonObject {
+    [key: string]: XenoJsonValue;
+}
+type XenoArtifactKind = "plan" | "requirements" | "design" | "task-graph" | "patch" | "diff" | "file" | "document" | "diagram" | "screenshot" | "recording" | "browser-snapshot" | "test-report" | "review-report" | "security-report" | "performance-report" | "release-report" | "sbom" | "provenance" | "attestation" | `custom:${string}`;
+type XenoArtifactState = "draft" | "pending_review" | "approved" | "rejected" | "superseded" | "archived";
+type XenoArtifactSensitivity = "public" | "internal" | "confidential" | "restricted";
+interface XenoContentHash {
+    algorithm: "sha256" | `custom:${string}`;
+    value: string;
+}
+type XenoArtifactStorageReference = {
+    type: "inline";
+    text?: string;
+    base64?: string;
+} | {
+    type: "file";
+    path: string;
+} | {
+    type: "blob";
+    uri: string;
+} | {
+    type: "git";
+    commit: string;
+    path: string;
+    repositoryId?: string;
+} | {
+    type: "url";
+    url: string;
+    expiresAt?: string;
+} | {
+    type: "external";
+    provider: string;
+    locator: string;
+};
+interface XenoArtifactContent {
+    hash: XenoContentHash;
+    sizeBytes: number;
+    storage: XenoArtifactStorageReference;
+    encoding?: "utf8" | "base64" | "binary" | `custom:${string}`;
+    redactedPreview?: string;
+}
+interface XenoArtifactIdentity {
+    runId?: string;
+    sessionId?: string;
+    turnId?: string;
+    taskId?: string;
+    agentId?: string;
+    workspaceId?: string;
+    repositoryId?: string;
+}
+type XenoArtifactActorKind = "agent" | "tool" | "user" | "system" | "integration";
+interface XenoArtifactActor {
+    kind: XenoArtifactActorKind;
+    id: string;
+    displayName?: string;
+    profileFingerprint?: string;
+}
+interface XenoArtifactProvenance {
+    producer: XenoArtifactActor;
+    eventId?: string;
+    toolCallId?: string;
+    operationId?: string;
+    executionContractFingerprint?: string;
+    capabilityLeaseIds?: string[];
+    sourceArtifactIds?: string[];
+    attributes?: XenoJsonObject;
+}
+type XenoEvidenceNodeType = "requirement" | "design-decision" | "risk" | "task" | "agent" | "run" | "tool-call" | "edit" | "commit" | "test-case" | "test-run" | "finding" | "approval" | "artifact" | "release" | "claim" | `custom:${string}`;
+type XenoEvidenceEdgeType = "decomposes" | "depends_on" | "implements" | "changes" | "tests" | "verifies" | "finds" | "fixes" | "reviews" | "approves" | "rejects" | "supersedes" | "derived_from" | "produced_by" | "supports_claim" | "contradicts_claim" | "released_as" | `custom:${string}`;
+interface XenoEvidenceReference {
+    type: XenoEvidenceNodeType;
+    id: string;
+    revision?: number;
+}
+interface XenoArtifactRelationship {
+    relation: XenoEvidenceEdgeType;
+    target: XenoEvidenceReference;
+    description?: string;
+    attributes?: XenoJsonObject;
+}
+type XenoArtifactAnchor = {
+    kind: "file";
+    path: string;
+    repositoryId?: string;
+    commit?: string;
+} | {
+    kind: "source-line";
+    path: string;
+    startLine: number;
+    endLine?: number;
+    repositoryId?: string;
+    commit?: string;
+} | {
+    kind: "diff-hunk";
+    path: string;
+    hunkId: string;
+    artifactId?: string;
+    revision?: number;
+} | {
+    kind: "symbol";
+    path: string;
+    symbol: string;
+    repositoryId?: string;
+    commit?: string;
+} | {
+    kind: "dom-node";
+    pageId: string;
+    selector?: string;
+    accessibilityId?: string;
+    snapshotArtifactId?: string;
+} | {
+    kind: "timeline";
+    startMs: number;
+    endMs?: number;
+    recordingArtifactId: string;
+} | {
+    kind: "region";
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    mediaArtifactId: string;
+} | {
+    kind: "artifact";
+    artifactId: string;
+    revision?: number;
+} | {
+    kind: `custom:${string}`;
+    data: XenoJsonObject;
+};
+interface XenoArtifactRetention {
+    policyId?: string;
+    retainUntil?: string;
+    legalHold?: boolean;
+}
+interface XenoArtifactEnvelope {
+    schemaVersion: typeof XENO_ARTIFACT_SCHEMA_VERSION;
+    artifactId: string;
+    revision: number;
+    kind: XenoArtifactKind;
+    title: string;
+    description?: string;
+    state: XenoArtifactState;
+    createdAt: string;
+    updatedAt?: string;
+    mediaType: string;
+    sensitivity: XenoArtifactSensitivity;
+    identity?: XenoArtifactIdentity;
+    content: XenoArtifactContent;
+    provenance: XenoArtifactProvenance;
+    relationships?: XenoArtifactRelationship[];
+    anchors?: XenoArtifactAnchor[];
+    predecessorRevision?: number;
+    accessPolicyId?: string;
+    retention?: XenoArtifactRetention;
+    extensions?: Record<string, XenoJsonValue>;
+}
+declare const XENO_SOURCE_RESEARCH_SCHEMA_VERSION: "xeno.source-research-report.v1";
+type XenoRemoteSourceProvider = "github" | "gitlab";
+type XenoSourceResearchSeverity = "info" | "low" | "medium" | "high" | "critical";
+interface XenoRemoteRepositoryIdentity {
+    provider: XenoRemoteSourceProvider;
+    host: string;
+    repository: string;
+    ref: string;
+    commit: string;
+    url: string;
+}
+interface XenoRemoteSourceFile {
+    path: string;
+    contentHash: {
+        algorithm: "sha256";
+        value: string;
+    };
+    sizeBytes: number;
+    lineCount: number;
+    blobId?: string;
+    language?: string;
+    truncated?: boolean;
+}
+interface XenoSourceResearchExcerpt {
+    excerptId: string;
+    path: string;
+    startLine: number;
+    endLine: number;
+    text: string;
+    contentHash: {
+        algorithm: "sha256";
+        value: string;
+    };
+    sourceContentHash: {
+        algorithm: "sha256";
+        value: string;
+    };
+}
+interface XenoSourceResearchFinding {
+    findingId: string;
+    title: string;
+    summary: string;
+    severity: XenoSourceResearchSeverity;
+    confidence: number;
+    excerptIds: string[];
+}
+interface XenoSourceResearchModelIdentity {
+    providerId: string;
+    model: string;
+    connectionId?: string;
+}
+interface XenoSourceResearchReport {
+    schemaVersion: typeof XENO_SOURCE_RESEARCH_SCHEMA_VERSION;
+    reportId: string;
+    runId: string;
+    query: string;
+    queryHash: {
+        algorithm: "sha256";
+        value: string;
+    };
+    repository: XenoRemoteRepositoryIdentity;
+    collectedAt: string;
+    completedAt: string;
+    model: XenoSourceResearchModelIdentity;
+    files: XenoRemoteSourceFile[];
+    excerpts: XenoSourceResearchExcerpt[];
+    answer: string;
+    answerExcerptIds: string[];
+    publicRationale: string;
+    findings: XenoSourceResearchFinding[];
+    limitations: string[];
+    usage: {
+        inputTokens: number;
+        outputTokens: number;
+    };
+}
+interface CreateXenoSourceResearchReportInput {
+    reportId?: string;
+    runId?: string;
+    query: string;
+    repository: XenoRemoteRepositoryIdentity;
+    collectedAt: string;
+    completedAt?: string;
+    model: XenoSourceResearchModelIdentity;
+    files: XenoRemoteSourceFile[];
+    excerpts: XenoSourceResearchExcerpt[];
+    answer: string;
+    answerExcerptIds: string[];
+    publicRationale: string;
+    findings: XenoSourceResearchFinding[];
+    limitations?: string[];
+    usage?: {
+        inputTokens?: number;
+        outputTokens?: number;
+    };
+}
+interface XenoSourceResearchArtifactContext {
+    artifactId?: string;
+    producer: XenoArtifactActor;
+    identity?: XenoArtifactIdentity;
+    sensitivity?: XenoArtifactSensitivity;
+    createdAt?: string;
+}
+declare class XenoSourceResearchValidationError extends Error {
+    readonly issues: string[];
+    readonly code = "XENO_SOURCE_RESEARCH_INVALID";
+    constructor(issues: string[]);
+}
+declare function createXenoSourceResearchReport(input: CreateXenoSourceResearchReportInput): XenoSourceResearchReport;
+declare function createXenoSourceResearchExcerpt(input: {
+    excerptId: string;
+    path: string;
+    startLine: number;
+    endLine: number;
+    text: string;
+    sourceContentHash: {
+        algorithm: "sha256";
+        value: string;
+    };
+}): XenoSourceResearchExcerpt;
+declare function assertValidXenoSourceResearchReport(report: XenoSourceResearchReport): void;
+declare function xenoSourceResearchReportToArtifact(report: XenoSourceResearchReport, context: XenoSourceResearchArtifactContext): XenoArtifactEnvelope;
+declare function xenoArtifactToSourceResearchReport(artifact: XenoArtifactEnvelope): XenoSourceResearchReport;
+declare function normalizeSourceText(value: string): string;
+export { type CreateXenoSourceResearchReportInput, XENO_SOURCE_RESEARCH_SCHEMA_VERSION, type XenoRemoteRepositoryIdentity, type XenoRemoteSourceFile, type XenoRemoteSourceProvider, type XenoSourceResearchArtifactContext, type XenoSourceResearchExcerpt, type XenoSourceResearchFinding, type XenoSourceResearchModelIdentity, type XenoSourceResearchReport, type XenoSourceResearchSeverity, XenoSourceResearchValidationError, assertValidXenoSourceResearchReport, createXenoSourceResearchExcerpt, createXenoSourceResearchReport, normalizeSourceText, xenoArtifactToSourceResearchReport, xenoSourceResearchReportToArtifact };

package/dist/research/index.d.ts

@@ -0,0 +1,285 @@
+declare const XENO_ARTIFACT_SCHEMA_VERSION: 1;
+type XenoJsonPrimitive = string | number | boolean | null;
+type XenoJsonValue = XenoJsonPrimitive | XenoJsonObject | XenoJsonValue[];
+interface XenoJsonObject {
+    [key: string]: XenoJsonValue;
+}
+type XenoArtifactKind = "plan" | "requirements" | "design" | "task-graph" | "patch" | "diff" | "file" | "document" | "diagram" | "screenshot" | "recording" | "browser-snapshot" | "test-report" | "review-report" | "security-report" | "performance-report" | "release-report" | "sbom" | "provenance" | "attestation" | `custom:${string}`;
+type XenoArtifactState = "draft" | "pending_review" | "approved" | "rejected" | "superseded" | "archived";
+type XenoArtifactSensitivity = "public" | "internal" | "confidential" | "restricted";
+interface XenoContentHash {
+    algorithm: "sha256" | `custom:${string}`;
+    value: string;
+}
+type XenoArtifactStorageReference = {
+    type: "inline";
+    text?: string;
+    base64?: string;
+} | {
+    type: "file";
+    path: string;
+} | {
+    type: "blob";
+    uri: string;
+} | {
+    type: "git";
+    commit: string;
+    path: string;
+    repositoryId?: string;
+} | {
+    type: "url";
+    url: string;
+    expiresAt?: string;
+} | {
+    type: "external";
+    provider: string;
+    locator: string;
+};
+interface XenoArtifactContent {
+    hash: XenoContentHash;
+    sizeBytes: number;
+    storage: XenoArtifactStorageReference;
+    encoding?: "utf8" | "base64" | "binary" | `custom:${string}`;
+    redactedPreview?: string;
+}
+interface XenoArtifactIdentity {
+    runId?: string;
+    sessionId?: string;
+    turnId?: string;
+    taskId?: string;
+    agentId?: string;
+    workspaceId?: string;
+    repositoryId?: string;
+}
+type XenoArtifactActorKind = "agent" | "tool" | "user" | "system" | "integration";
+interface XenoArtifactActor {
+    kind: XenoArtifactActorKind;
+    id: string;
+    displayName?: string;
+    profileFingerprint?: string;
+}
+interface XenoArtifactProvenance {
+    producer: XenoArtifactActor;
+    eventId?: string;
+    toolCallId?: string;
+    operationId?: string;
+    executionContractFingerprint?: string;
+    capabilityLeaseIds?: string[];
+    sourceArtifactIds?: string[];
+    attributes?: XenoJsonObject;
+}
+type XenoEvidenceNodeType = "requirement" | "design-decision" | "risk" | "task" | "agent" | "run" | "tool-call" | "edit" | "commit" | "test-case" | "test-run" | "finding" | "approval" | "artifact" | "release" | "claim" | `custom:${string}`;
+type XenoEvidenceEdgeType = "decomposes" | "depends_on" | "implements" | "changes" | "tests" | "verifies" | "finds" | "fixes" | "reviews" | "approves" | "rejects" | "supersedes" | "derived_from" | "produced_by" | "supports_claim" | "contradicts_claim" | "released_as" | `custom:${string}`;
+interface XenoEvidenceReference {
+    type: XenoEvidenceNodeType;
+    id: string;
+    revision?: number;
+}
+interface XenoArtifactRelationship {
+    relation: XenoEvidenceEdgeType;
+    target: XenoEvidenceReference;
+    description?: string;
+    attributes?: XenoJsonObject;
+}
+type XenoArtifactAnchor = {
+    kind: "file";
+    path: string;
+    repositoryId?: string;
+    commit?: string;
+} | {
+    kind: "source-line";
+    path: string;
+    startLine: number;
+    endLine?: number;
+    repositoryId?: string;
+    commit?: string;
+} | {
+    kind: "diff-hunk";
+    path: string;
+    hunkId: string;
+    artifactId?: string;
+    revision?: number;
+} | {
+    kind: "symbol";
+    path: string;
+    symbol: string;
+    repositoryId?: string;
+    commit?: string;
+} | {
+    kind: "dom-node";
+    pageId: string;
+    selector?: string;
+    accessibilityId?: string;
+    snapshotArtifactId?: string;
+} | {
+    kind: "timeline";
+    startMs: number;
+    endMs?: number;
+    recordingArtifactId: string;
+} | {
+    kind: "region";
+    x: number;
+    y: number;
+    width: number;
+    height: number;
+    mediaArtifactId: string;
+} | {
+    kind: "artifact";
+    artifactId: string;
+    revision?: number;
+} | {
+    kind: `custom:${string}`;
+    data: XenoJsonObject;
+};
+interface XenoArtifactRetention {
+    policyId?: string;
+    retainUntil?: string;
+    legalHold?: boolean;
+}
+interface XenoArtifactEnvelope {
+    schemaVersion: typeof XENO_ARTIFACT_SCHEMA_VERSION;
+    artifactId: string;
+    revision: number;
+    kind: XenoArtifactKind;
+    title: string;
+    description?: string;
+    state: XenoArtifactState;
+    createdAt: string;
+    updatedAt?: string;
+    mediaType: string;
+    sensitivity: XenoArtifactSensitivity;
+    identity?: XenoArtifactIdentity;
+    content: XenoArtifactContent;
+    provenance: XenoArtifactProvenance;
+    relationships?: XenoArtifactRelationship[];
+    anchors?: XenoArtifactAnchor[];
+    predecessorRevision?: number;
+    accessPolicyId?: string;
+    retention?: XenoArtifactRetention;
+    extensions?: Record<string, XenoJsonValue>;
+}
+declare const XENO_SOURCE_RESEARCH_SCHEMA_VERSION: "xeno.source-research-report.v1";
+type XenoRemoteSourceProvider = "github" | "gitlab";
+type XenoSourceResearchSeverity = "info" | "low" | "medium" | "high" | "critical";
+interface XenoRemoteRepositoryIdentity {
+    provider: XenoRemoteSourceProvider;
+    host: string;
+    repository: string;
+    ref: string;
+    commit: string;
+    url: string;
+}
+interface XenoRemoteSourceFile {
+    path: string;
+    contentHash: {
+        algorithm: "sha256";
+        value: string;
+    };
+    sizeBytes: number;
+    lineCount: number;
+    blobId?: string;
+    language?: string;
+    truncated?: boolean;
+}
+interface XenoSourceResearchExcerpt {
+    excerptId: string;
+    path: string;
+    startLine: number;
+    endLine: number;
+    text: string;
+    contentHash: {
+        algorithm: "sha256";
+        value: string;
+    };
+    sourceContentHash: {
+        algorithm: "sha256";
+        value: string;
+    };
+}
+interface XenoSourceResearchFinding {
+    findingId: string;
+    title: string;
+    summary: string;
+    severity: XenoSourceResearchSeverity;
+    confidence: number;
+    excerptIds: string[];
+}
+interface XenoSourceResearchModelIdentity {
+    providerId: string;
+    model: string;
+    connectionId?: string;
+}
+interface XenoSourceResearchReport {
+    schemaVersion: typeof XENO_SOURCE_RESEARCH_SCHEMA_VERSION;
+    reportId: string;
+    runId: string;
+    query: string;
+    queryHash: {
+        algorithm: "sha256";
+        value: string;
+    };
+    repository: XenoRemoteRepositoryIdentity;
+    collectedAt: string;
+    completedAt: string;
+    model: XenoSourceResearchModelIdentity;
+    files: XenoRemoteSourceFile[];
+    excerpts: XenoSourceResearchExcerpt[];
+    answer: string;
+    answerExcerptIds: string[];
+    publicRationale: string;
+    findings: XenoSourceResearchFinding[];
+    limitations: string[];
+    usage: {
+        inputTokens: number;
+        outputTokens: number;
+    };
+}
+interface CreateXenoSourceResearchReportInput {
+    reportId?: string;
+    runId?: string;
+    query: string;
+    repository: XenoRemoteRepositoryIdentity;
+    collectedAt: string;
+    completedAt?: string;
+    model: XenoSourceResearchModelIdentity;
+    files: XenoRemoteSourceFile[];
+    excerpts: XenoSourceResearchExcerpt[];
+    answer: string;
+    answerExcerptIds: string[];
+    publicRationale: string;
+    findings: XenoSourceResearchFinding[];
+    limitations?: string[];
+    usage?: {
+        inputTokens?: number;
+        outputTokens?: number;
+    };
+}
+interface XenoSourceResearchArtifactContext {
+    artifactId?: string;
+    producer: XenoArtifactActor;
+    identity?: XenoArtifactIdentity;
+    sensitivity?: XenoArtifactSensitivity;
+    createdAt?: string;
+}
+declare class XenoSourceResearchValidationError extends Error {
+    readonly issues: string[];
+    readonly code = "XENO_SOURCE_RESEARCH_INVALID";
+    constructor(issues: string[]);
+}
+declare function createXenoSourceResearchReport(input: CreateXenoSourceResearchReportInput): XenoSourceResearchReport;
+declare function createXenoSourceResearchExcerpt(input: {
+    excerptId: string;
+    path: string;
+    startLine: number;
+    endLine: number;
+    text: string;
+    sourceContentHash: {
+        algorithm: "sha256";
+        value: string;
+    };
+}): XenoSourceResearchExcerpt;
+declare function assertValidXenoSourceResearchReport(report: XenoSourceResearchReport): void;
+declare function xenoSourceResearchReportToArtifact(report: XenoSourceResearchReport, context: XenoSourceResearchArtifactContext): XenoArtifactEnvelope;
+declare function xenoArtifactToSourceResearchReport(artifact: XenoArtifactEnvelope): XenoSourceResearchReport;
+declare function normalizeSourceText(value: string): string;
+export { type CreateXenoSourceResearchReportInput, XENO_SOURCE_RESEARCH_SCHEMA_VERSION, type XenoRemoteRepositoryIdentity, type XenoRemoteSourceFile, type XenoRemoteSourceProvider, type XenoSourceResearchArtifactContext, type XenoSourceResearchExcerpt, type XenoSourceResearchFinding, type XenoSourceResearchModelIdentity, type XenoSourceResearchReport, type XenoSourceResearchSeverity, XenoSourceResearchValidationError, assertValidXenoSourceResearchReport, createXenoSourceResearchExcerpt, createXenoSourceResearchReport, normalizeSourceText, xenoArtifactToSourceResearchReport, xenoSourceResearchReportToArtifact };

package/dist/research/index.js

@@ -0,0 +1,3 @@
+import{randomUUID as I}from"node:crypto";import{createHash as b}from"node:crypto";function s(e){return{algorithm:"sha256",value:b("sha256").update(e).digest("hex")}}function c(e){return JSON.stringify(m(e,new Set))}function d(e){return s(c(e))}function m(e,t){if(e===null||typeof e!="object"){if(typeof e=="number"&&!Number.isFinite(e))throw new TypeError("Artifact JSON cannot contain non-finite numbers");return e}if(t.has(e))throw new TypeError("Artifact JSON cannot contain cycles");if(t.add(e),Array.isArray(e)){let r=e.map(o=>m(o,t));return t.delete(e),r}let n={};for(let r of Object.keys(e).sort((o,i)=>o.localeCompare(i))){let o=e[r];if(o===void 0)throw new TypeError(`Artifact JSON property ${r} is undefined`);n[r]=m(o,t)}return t.delete(e),n}var _="[\\u0000-\\u001f\\u007f]",J=new RegExp(_);var pe=64*1024*1024;var ve=16*1024*1024;function A(e,t={}){for(let n of e){let r=n.codePointAt(0);if(r===127)return!0;if(!(r>31)&&!(r===9&&t.allowTab===!0)&&!((r===10||r===13)&&t.allowLineBreaks===!0))return!0}return!1}var X="xeno.source-research-report.v1",f=class extends Error{constructor(n){super(`XENO source-research report is invalid: ${n.join("; ")}`);this.issues=n;this.name="XenoSourceResearchValidationError"}issues;code="XENO_SOURCE_RESEARCH_INVALID"};function et(e){let t={schemaVersion:X,reportId:e.reportId??`research_${I()}`,runId:e.runId??`research_run_${I()}`,query:e.query.trim(),queryHash:S(e.query.trim()),repository:structuredClone(e.repository),collectedAt:e.collectedAt,completedAt:e.completedAt??new Date().toISOString(),model:structuredClone(e.model),files:structuredClone(e.files),excerpts:structuredClone(e.excerpts),answer:e.answer.trim(),answerExcerptIds:[...new Set(e.answerExcerptIds)],publicRationale:e.publicRationale.trim(),findings:structuredClone(e.findings),limitations:[...new Set((e.limitations??[]).map(n=>n.trim()).filter(Boolean))],usage:{inputTokens:R(e.usage?.inputTokens),outputTokens:R(e.usage?.outputTokens)}};return v(t),t}function tt(e){return{excerptId:e.excerptId,path:e.path,startLine:e.startLine,endLine:e.endLine,text:g(e.text),contentHash:S(g(e.text)),sourceContentHash:structuredClone(e.sourceContentHash)}}function v(e){let t=[];e?.schemaVersion!==X&&t.push("schemaVersion must be xeno.source-research-report.v1"),p(e?.reportId,"reportId",t),p(e?.runId,"runId",t),a(e?.query,"query",t,128e3),l(e?.queryHash,"queryHash",t),typeof e?.query=="string"&&e.queryHash?.value!==s(e.query).value&&t.push("queryHash does not match query"),k(e?.repository,t),w(e?.collectedAt,"collectedAt",t),w(e?.completedAt,"completedAt",t),Date.parse(e?.completedAt)<Date.parse(e?.collectedAt)&&t.push("completedAt cannot precede collectedAt"),$(e?.model,t),a(e?.answer,"answer",t,512e3),a(e?.publicRationale,"publicRationale",t,256e3),N(e?.usage,t),(!Array.isArray(e?.files)||e.files.length<1||e.files.length>256)&&t.push("files must contain 1 through 256 source records");let n=new Map;for(let i of e?.files??[])T(i,t),n.has(i.path)&&t.push(`duplicate source file ${i.path}`),n.set(i.path,i);(!Array.isArray(e?.excerpts)||e.excerpts.length>1024)&&t.push("excerpts must contain at most 1024 records");let r=new Map;for(let i of e?.excerpts??[])C(i,n,t),r.has(i.excerptId)&&t.push(`duplicate excerpt ${i.excerptId}`),r.set(i.excerptId,i);(!Array.isArray(e?.answerExcerptIds)||e.answerExcerptIds.length<1)&&t.push("answerExcerptIds must cite at least one source excerpt");for(let i of e?.answerExcerptIds??[])r.has(i)||t.push(`answer references unknown excerpt ${i}`);(!Array.isArray(e?.findings)||e.findings.length>512)&&t.push("findings must contain at most 512 records");let o=new Set;for(let i of e?.findings??[]){p(i?.findingId,"findingId",t),o.has(i.findingId)&&t.push(`duplicate finding ${i.findingId}`),o.add(i.findingId),a(i?.title,`finding ${i.findingId} title`,t,2e3),a(i?.summary,`finding ${i.findingId} summary`,t,64e3),F(i?.severity)||t.push(`finding ${i.findingId} severity is invalid`),D(i?.confidence)||t.push(`finding ${i.findingId} confidence must be between 0 and 1`),(!Array.isArray(i?.excerptIds)||i.excerptIds.length<1)&&t.push(`finding ${i.findingId} requires source excerpts`);for(let y of i?.excerptIds??[])r.has(y)||t.push(`finding ${i.findingId} references unknown excerpt ${y}`)}(!Array.isArray(e?.limitations)||e.limitations.length>256)&&t.push("limitations must contain at most 256 records");for(let i of e?.limitations??[])a(i,"limitation",t,16e3);if(t.length>0)throw new f([...new Set(t)])}function nt(e,t){v(e);let n=t.createdAt??e.completedAt,r=c(e);return{schemaVersion:1,artifactId:t.artifactId??`research_${s(`${e.runId}:${e.repository.commit}:${e.queryHash.value}`).value.slice(0,24)}`,revision:1,kind:"custom:source-research-report",title:`Source research: ${e.repository.repository}`,description:e.answer.slice(0,1e3),state:"pending_review",createdAt:n,mediaType:"application/vnd.xeno.source-research-report+json",sensitivity:t.sensitivity??"internal",identity:{...t.identity,runId:t.identity?.runId??e.runId,repositoryId:t.identity?.repositoryId??`${e.repository.provider}:${e.repository.repository}`},content:{hash:d(e),sizeBytes:Buffer.byteLength(r,"utf8"),storage:{type:"inline",text:r},encoding:"utf8",redactedPreview:e.answer.slice(0,2e3)},provenance:{producer:structuredClone(t.producer),attributes:{"xeno.research.provider":e.repository.provider,"xeno.research.repository":e.repository.repository,"xeno.research.commit":e.repository.commit,"xeno.research.model":`${e.model.providerId}/${e.model.model}`,"xeno.research.fileCount":e.files.length,"xeno.research.findingCount":e.findings.length}},anchors:e.excerpts.map(o=>({kind:"source-line",path:o.path,startLine:o.startLine,endLine:o.endLine,repositoryId:`${e.repository.provider}:${e.repository.repository}`,commit:e.repository.commit}))}}function it(e){if(e.kind!=="custom:source-research-report"||e.mediaType!=="application/vnd.xeno.source-research-report+json")throw new f([`Artifact ${e.artifactId} is not a source-research report`]);if(e.content.storage.type!=="inline"||typeof e.content.storage.text!="string")throw new f(["Source-research reports require inline JSON content"]);let t;try{t=JSON.parse(e.content.storage.text)}catch{throw new f(["Source-research artifact content is invalid JSON"])}if(v(t),d(t).value!==e.content.hash.value)throw new f(["Source-research content hash does not match the artifact"]);return structuredClone(t)}function g(e){return e.replace(/\r\n?/gu,`
+`)}function k(e,t){e?.provider!=="github"&&e?.provider!=="gitlab"&&t.push("repository provider must be github or gitlab"),V(e?.host,"repository host",t),P(e?.repository,t),a(e?.ref,"repository ref",t,512),(typeof e?.commit!="string"||!/^[a-f0-9]{7,64}$/u.test(e.commit))&&t.push("repository commit must be a lowercase hexadecimal object ID"),O(e?.url,"repository url",t)}function T(e,t){E(e?.path,"source file path",t),l(e?.contentHash,`source file ${e?.path} contentHash`,t),(!Number.isSafeInteger(e?.sizeBytes)||e.sizeBytes<0||e.sizeBytes>8*1024*1024)&&t.push(`source file ${e?.path} sizeBytes is invalid`),(!Number.isSafeInteger(e?.lineCount)||e.lineCount<1||e.lineCount>1e6)&&t.push(`source file ${e?.path} lineCount is invalid`),e?.blobId!==void 0&&a(e.blobId,`source file ${e.path} blobId`,t,256),e?.language!==void 0&&a(e.language,`source file ${e.path} language`,t,128)}function C(e,t,n){p(e?.excerptId,"excerptId",n),E(e?.path,`excerpt ${e?.excerptId} path`,n);let r=t.get(e?.path);r||n.push(`excerpt ${e?.excerptId} references unknown source file ${e?.path}`),(!Number.isSafeInteger(e?.startLine)||e.startLine<1)&&n.push(`excerpt ${e?.excerptId} startLine is invalid`),(!Number.isSafeInteger(e?.endLine)||e.endLine<e.startLine)&&n.push(`excerpt ${e?.excerptId} endLine is invalid`),r&&e.endLine>r.lineCount&&n.push(`excerpt ${e?.excerptId} exceeds source line count`),a(e?.text,`excerpt ${e?.excerptId} text`,n,256e3),l(e?.contentHash,`excerpt ${e?.excerptId} contentHash`,n),l(e?.sourceContentHash,`excerpt ${e?.excerptId} sourceContentHash`,n);let o=typeof e?.text=="string"?g(e.text):"";e?.contentHash?.value!==s(o).value&&n.push(`excerpt ${e?.excerptId} contentHash does not match text`),r&&e?.sourceContentHash?.value!==r.contentHash.value&&n.push(`excerpt ${e?.excerptId} is bound to a different source hash`),o&&o.split(`
+`).length!==e.endLine-e.startLine+1&&n.push(`excerpt ${e?.excerptId} line span does not match text`)}function $(e,t){p(e?.providerId,"model providerId",t),a(e?.model,"model",t,512),e?.connectionId!==void 0&&p(e.connectionId,"model connectionId",t)}function N(e,t){(!Number.isSafeInteger(e?.inputTokens)||e.inputTokens<0)&&t.push("usage.inputTokens must be a non-negative integer"),(!Number.isSafeInteger(e?.outputTokens)||e.outputTokens<0)&&t.push("usage.outputTokens must be a non-negative integer")}function l(e,t,n){(e?.algorithm!=="sha256"||!/^[a-f0-9]{64}$/u.test(e?.value??""))&&n.push(`${t} must be a lowercase SHA-256 digest`)}function p(e,t,n){(typeof e!="string"||!/^[A-Za-z0-9][A-Za-z0-9._:@/-]{0,255}$/u.test(e))&&n.push(`${t} is invalid`)}function a(e,t,n,r){(typeof e!="string"||!e.trim()||e.length>r||A(e,{allowTab:!0,allowLineBreaks:!0}))&&n.push(`${t} must be non-empty bounded text`)}function w(e,t,n){(typeof e!="string"||!Number.isFinite(Date.parse(e))||new Date(e).toISOString()!==e)&&n.push(`${t} must be an ISO-8601 UTC timestamp`)}function V(e,t,n){(typeof e!="string"||e.length>253||!/^(?:[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?\.)+[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/u.test(e))&&n.push(`${t} is invalid`)}function P(e,t){(typeof e!="string"||e.length>2048||e.startsWith("/")||e.endsWith("/")||e.split("/").some(n=>!n||n==="."||n===".."))&&t.push("repository name is invalid")}function E(e,t,n){(typeof e!="string"||e.length>4096||e.startsWith("/")||/^[A-Za-z]:[\\/]/u.test(e)||e.includes("\\")||e.split("/").some(r=>!r||r==="."||r===".."))&&n.push(`${t} must be repository-relative`)}function O(e,t,n){try{let r=new URL(String(e));(r.protocol!=="https:"||r.username||r.password)&&n.push(`${t} must be credential-free HTTPS`)}catch{n.push(`${t} is invalid`)}}function R(e){return Number.isSafeInteger(e)&&(e??-1)>=0?e:0}function S(e){return{algorithm:"sha256",value:s(e).value}}function D(e){return typeof e=="number"&&Number.isFinite(e)&&e>=0&&e<=1}function F(e){return e==="info"||e==="low"||e==="medium"||e==="high"||e==="critical"}export{X as XENO_SOURCE_RESEARCH_SCHEMA_VERSION,f as XenoSourceResearchValidationError,v as assertValidXenoSourceResearchReport,tt as createXenoSourceResearchExcerpt,et as createXenoSourceResearchReport,g as normalizeSourceText,it as xenoArtifactToSourceResearchReport,nt as xenoSourceResearchReportToArtifact};

package/dist/research/metafile-cjs.json

@@ -0,0 +1 @@
+{"inputs":{"src/artifacts/types.ts":{"bytes":9397,"imports":[],"format":"esm"},"src/artifacts/hash.ts":{"bytes":1530,"imports":[{"path":"node:crypto","kind":"import-statement","external":true}],"format":"esm"},"src/artifacts/validation.ts":{"bytes":25931,"imports":[{"path":"node:buffer","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"./hash.js"},{"path":"src/artifacts/types.ts","kind":"import-statement","original":"./types.js"}],"format":"esm"},"src/artifacts/evidence-graph.ts":{"bytes":9299,"imports":[{"path":"src/artifacts/types.ts","kind":"import-statement","original":"./types.js"}],"format":"esm"},"src/artifacts/repository.ts":{"bytes":30001,"imports":[{"path":"src/artifacts/types.ts","kind":"import-statement","original":"./types.js"},{"path":"src/artifacts/validation.ts","kind":"import-statement","original":"./validation.js"}],"format":"esm"},"src/control-plane/lock.ts":{"bytes":2591,"imports":[{"path":"node:fs","kind":"import-statement","external":true},{"path":"node:os","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true}],"format":"esm"},"src/version.ts":{"bytes":38,"imports":[],"format":"esm"},"src/artifacts/file-repository.ts":{"bytes":16811,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"node:fs/promises","kind":"import-statement","external":true},{"path":"node:path","kind":"import-statement","external":true},{"path":"src/control-plane/lock.ts","kind":"import-statement","original":"../control-plane/lock.js"},{"path":"src/version.ts","kind":"import-statement","original":"../version.js"},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"./hash.js"},{"path":"src/artifacts/repository.ts","kind":"import-statement","original":"./repository.js"},{"path":"src/artifacts/types.ts","kind":"import-statement","original":"./types.js"}],"format":"esm"},"src/artifacts/diff-artifact.ts":{"bytes":18491,"imports":[{"path":"node:buffer","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"./hash.js"},{"path":"src/artifacts/types.ts","kind":"import-statement","original":"./types.js"},{"path":"src/artifacts/validation.ts","kind":"import-statement","original":"./validation.js"}],"format":"esm"},"src/artifacts/review-service.ts":{"bytes":8903,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/diff-artifact.ts","kind":"import-statement","original":"./diff-artifact.js"},{"path":"src/artifacts/repository.ts","kind":"import-statement","original":"./repository.js"}],"format":"esm"},"src/artifacts/spec-lifecycle.ts":{"bytes":31787,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"./hash.js"},{"path":"src/artifacts/review-service.ts","kind":"import-statement","original":"./review-service.js"},{"path":"src/artifacts/types.ts","kind":"import-statement","original":"./types.js"}],"format":"esm"},"src/artifacts/multi-agent-review.ts":{"bytes":30924,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"./hash.js"},{"path":"src/artifacts/types.ts","kind":"import-statement","original":"./types.js"},{"path":"src/artifacts/validation.ts","kind":"import-statement","original":"./validation.js"}],"format":"esm"},"src/artifacts/legacy-adapters.ts":{"bytes":11181,"imports":[{"path":"node:buffer","kind":"import-statement","external":true},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"./hash.js"},{"path":"src/artifacts/types.ts","kind":"import-statement","original":"./types.js"},{"path":"src/artifacts/validation.ts","kind":"import-statement","original":"./validation.js"},{"path":"src/artifacts/diff-artifact.ts","kind":"import-statement","original":"./diff-artifact.js"}],"format":"esm"},"src/artifacts/index.ts":{"bytes":396,"imports":[{"path":"src/artifacts/types.ts","kind":"import-statement","original":"./types.js"},{"path":"src/artifacts/validation.ts","kind":"import-statement","original":"./validation.js"},{"path":"src/artifacts/hash.ts","kind":"import-statement","original":"./hash.js"},{"path":"src/artifacts/evidence-graph.ts","kind":"import-statement","original":"./evidence-graph.js"},{"path":"src/artifacts/repository.ts","kind":"import-statement","original":"./repository.js"},{"path":"src/artifacts/file-repository.ts","kind":"import-statement","original":"./file-repository.js"},{"path":"src/artifacts/diff-artifact.ts","kind":"import-statement","original":"./diff-artifact.js"},{"path":"src/artifacts/review-service.ts","kind":"import-statement","original":"./review-service.js"},{"path":"src/artifacts/spec-lifecycle.ts","kind":"import-statement","original":"./spec-lifecycle.js"},{"path":"src/artifacts/multi-agent-review.ts","kind":"import-statement","original":"./multi-agent-review.js"},{"path":"src/artifacts/legacy-adapters.ts","kind":"import-statement","original":"./legacy-adapters.js"}],"format":"esm"},"src/utils/text-security.ts":{"bytes":833,"imports":[],"format":"esm"},"src/research/source-research.ts":{"bytes":19344,"imports":[{"path":"node:crypto","kind":"import-statement","external":true},{"path":"src/artifacts/index.ts","kind":"import-statement","original":"../artifacts/index.js"},{"path":"src/utils/text-security.ts","kind":"import-statement","original":"../utils/text-security.js"}],"format":"esm"},"src/research/index.ts":{"bytes":39,"imports":[{"path":"src/research/source-research.ts","kind":"import-statement","original":"./source-research.js"}],"format":"esm"}},"outputs":{"dist/research/index.cjs":{"imports":[{"path":"node:crypto","kind":"require-call","external":true},{"path":"node:crypto","kind":"require-call","external":true}],"exports":[],"entryPoint":"src/research/index.ts","inputs":{"src/research/index.ts":{"bytesInOutput":343},"src/research/source-research.ts":{"bytesInOutput":9356},"src/artifacts/index.ts":{"bytesInOutput":0},"src/artifacts/hash.ts":{"bytesInOutput":715},"src/artifacts/validation.ts":{"bytesInOutput":50},"src/artifacts/file-repository.ts":{"bytesInOutput":20},"src/artifacts/diff-artifact.ts":{"bytesInOutput":20},"src/utils/text-security.ts":{"bytesInOutput":179}},"bytes":11390}}}