@zanii/blackbox 0.8.0 → 0.10.0

package/README.md

@@ -83,6 +83,18 @@ verifyAnswerCredential(credential, lines, bodies, packs); // { ok, problems }: t
 
 The same checks run offline as pure functions: `toolHallucinations`, `groundingFindings`, `factsIn`, `loadReferencePacks`, `answerRisk`, `detectorAccuracy`.
 
+## New in 0.10.0
+
+- `setTenantPolicy` / `tenantPolicy` / `removeTenantPolicy`: a tenant's own rules, hot on the gateway. `setProviderKey` / `providerKeys` / `removeProviderKey`: a tenant's own model keys, sealed. `cancelRun(sessionId, runId)`: stop one run (calls carrying `x-blackbox-run`).
+- `loadPolicy` refuses an `args_match` that JavaScript and Python would read differently (`portableRegexError`).
+- `blackbox sessions --outcome success|failure|abandoned`.
+- Works with gateway v0.12: alert routing to PagerDuty, Teams, Alertmanager and Slack; the key passphrase from Vault or AWS KMS.
+
+## New in 0.9.0
+
+- `client(...).createKey(tenantId, {scope: "approve", expires_in_days})`: a key that only decides approvals (and labels findings), and keys that expire.
+- Works with gateway v0.11: Idempotency-Key kept in the database (shared by every instance), the admin audit log anchored on the ledger and naming the signed-in person, and `BLACKBOX_APPROVALS_NEED_PERSON`.
+
 ## New in 0.8.0
 
 - `blackbox drain --close` (and `drainSpools({close: true})` / `drain_spools(close=True)`): after shipping what a stopped agent left behind, each session is closed as `abandoned`.

package/dist/cli.js

@@ -15,7 +15,7 @@ const USAGE = `usage (spec/cli.md):
   blackbox verify <bundle.json> [--proofs] [--bodies <dir>]
   blackbox export <session_id> --out <bundle.json> [--bodies <dir>]
   blackbox export-all --from <date> --to <date> --out <file.ndjson>
-  blackbox sessions [--limit N] [--label L] [--open | --closed] [--before <session_id>] [--from <date>] [--to <date>] [--json]
+  blackbox sessions [--limit N] [--label L] [--open | --closed] [--outcome success|failure|abandoned] [--before <session_id>] [--from <date>] [--to <date>] [--json]
   blackbox sessions <session_id> [--json]
   blackbox summary <session_id>
   blackbox incident <session_id> [--lang en|ar]
@@ -388,6 +388,8 @@ async function sessionsCommand(rest) {
         q.set("from", f.from);
     if (f.to !== undefined)
         q.set("to", f.to);
+    if (f.outcome !== undefined)
+        q.set("outcome", f.outcome);
     if (f.open === "1")
         q.set("status", "open");
     if (f.closed === "1")

package/dist/client/index.d.ts

@@ -102,6 +102,10 @@ export declare function client(options: ClientOptions): {
     emergency: (id: string, o?: {
         note?: string;
     }) => Promise<Json>;
+    /** Refuses the session's later calls that name this run (x-blackbox-run), spec/control.md §3a. */
+    cancelRun: (id: string, runId: string, o?: {
+        note?: string;
+    }) => Promise<Json>;
     /** Hands the controls over (spec/authority.md): `human` takes over; `agent`/`supervised` hand back. */
     authority: (id: string, to: "human" | "agent" | "supervised", o?: {
         reason?: string;
@@ -139,8 +143,17 @@ export declare function client(options: ClientOptions): {
         disabled?: boolean;
     }) => Promise<Json>;
     createKey: (tenantId: string, o?: {
-        scope?: "full" | "read";
+        scope?: "full" | "read" | "approve";
+        expires_in_days?: number;
     }) => Promise<Json>;
     revokeKey: (tenantId: string, keyId: string) => Promise<Json>;
+    /** Operator only: a tenant's own rules (spec/policy.md §7a). */
+    tenantPolicy: (tenantId: string) => Promise<Json>;
+    setTenantPolicy: (tenantId: string, rules: object[]) => Promise<Json>;
+    removeTenantPolicy: (tenantId: string) => Promise<Json>;
+    /** Operator only: a tenant's own provider keys, sealed, never shown (spec/tenancy.md §5a). */
+    providerKeys: (tenantId: string) => Promise<Json>;
+    setProviderKey: (tenantId: string, provider: string, apiKey: string) => Promise<Json>;
+    removeProviderKey: (tenantId: string, provider: string) => Promise<Json>;
 };
 export type Client = ReturnType<typeof client>;

package/dist/client/index.js

@@ -187,6 +187,8 @@ export function client(options) {
         pause: (id, o = {}) => json("POST", ses(id, "pause"), compact(o)),
         /** The emergency stop (squawk 7700, spec/control.md). */
         emergency: (id, o = {}) => json("POST", ses(id, "emergency"), compact(o)),
+        /** Refuses the session's later calls that name this run (x-blackbox-run), spec/control.md §3a. */
+        cancelRun: (id, runId, o = {}) => json("POST", ses(id, `runs/${encodeURIComponent(runId)}/cancel`), compact(o), true),
         /** Hands the controls over (spec/authority.md): `human` takes over; `agent`/`supervised` hand back. */
         authority: (id, to, o = {}) => json("POST", ses(id, "authority"), compact({ to, ...o })),
         /** The pending approvals (spec/approvals.md). */
@@ -205,6 +207,14 @@ export function client(options) {
         updateTenant: (tenantId, o) => json("PATCH", `/v1/tenants/${encodeURIComponent(tenantId)}`, compact(o)),
         createKey: (tenantId, o = {}) => json("POST", `/v1/tenants/${encodeURIComponent(tenantId)}/keys`, compact(o)),
         revokeKey: (tenantId, keyId) => json("POST", `/v1/tenants/${encodeURIComponent(tenantId)}/keys/${encodeURIComponent(keyId)}/revoke`, {}, true),
+        /** Operator only: a tenant's own rules (spec/policy.md §7a). */
+        tenantPolicy: (tenantId) => json("GET", `/v1/tenants/${encodeURIComponent(tenantId)}/policy`),
+        setTenantPolicy: (tenantId, rules) => json("PUT", `/v1/tenants/${encodeURIComponent(tenantId)}/policy`, { policy: { rules } }, true),
+        removeTenantPolicy: (tenantId) => json("DELETE", `/v1/tenants/${encodeURIComponent(tenantId)}/policy`, undefined, true),
+        /** Operator only: a tenant's own provider keys, sealed, never shown (spec/tenancy.md §5a). */
+        providerKeys: (tenantId) => json("GET", `/v1/tenants/${encodeURIComponent(tenantId)}/providers`),
+        setProviderKey: (tenantId, provider, apiKey) => json("PUT", `/v1/tenants/${encodeURIComponent(tenantId)}/providers/${encodeURIComponent(provider)}`, { api_key: apiKey }, true),
+        removeProviderKey: (tenantId, provider) => json("DELETE", `/v1/tenants/${encodeURIComponent(tenantId)}/providers/${encodeURIComponent(provider)}`, undefined, true),
     };
     return api;
 }

package/dist/policy/index.d.ts

@@ -59,6 +59,9 @@ interface Compiled {
     args: RegExp | null;
 }
 /** Parses a policy file; throws on anything invalid (the server refuses to start). */
+/** spec/policy.md §1 (L6.5.4): null when `args_match` uses only syntax JavaScript and Python
+ * share, else what doesn't (vectors: spec/vectors/policy-regex.json). */
+export declare function portableRegexError(p: string): string | null;
 export declare function loadPolicy(bytes: Uint8Array): Policy;
 export declare function compilePolicy(policy: Policy): Compiled[];
 /** spec/api.md: the session's environment, from its `session.open` (the first line). */

package/dist/policy/index.js

@@ -58,6 +58,52 @@ const escapeRe = (s) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 /** A tool pattern: `*` is any run of characters, the rest is literal, anchored at both ends. */
 const glob = (pattern) => new RegExp(`^${pattern.split("*").map(escapeRe).join(".*")}$`);
 /** Parses a policy file; throws on anything invalid (the server refuses to start). */
+/** spec/policy.md §1 (L6.5.4): null when `args_match` uses only syntax JavaScript and Python
+ * share, else what doesn't (vectors: spec/vectors/policy-regex.json). */
+export function portableRegexError(p) {
+    const hex = (s) => /^[0-9A-Fa-f]+$/.test(s);
+    let inClass = false;
+    for (let i = 0; i < p.length; i++) {
+        const c = p[i];
+        if (c === "\\") {
+            const n = p[i + 1];
+            if (n === undefined)
+                return "a trailing \\";
+            if (n === "x" && !(p.length >= i + 4 && hex(p.slice(i + 2, i + 4))))
+                return "\\x needs 2 hex digits";
+            if (n === "u" && !(p.length >= i + 6 && hex(p.slice(i + 2, i + 6))))
+                return "\\u needs 4 hex digits";
+            if (/[A-Za-z]/.test(n) && !"dDwWsSbBnrtfvxu".includes(n))
+                return `\\${n}`;
+            i++;
+            continue;
+        }
+        if (inClass) {
+            if (c === "]")
+                inClass = false;
+            else if (c === "[" && p[i + 1] === ":")
+                return "[:";
+            continue;
+        }
+        if (c === "[") {
+            if (p[i + 1] === ":")
+                return "[:";
+            const first = p[i + 1] === "^" ? i + 2 : i + 1;
+            if (p[first] === "]")
+                return "an empty class";
+            inClass = true;
+            i = first - 1;
+            continue;
+        }
+        if (c === "(" && p[i + 1] === "?" && !":=!".includes(p[i + 2] ?? ""))
+            return "(? other than (?: (?= (?!";
+        if ("*+?}".includes(c) && p[i + 1] === "+" && !(c === "?" && "*+?}".includes(p[i - 1] ?? "")))
+            return "a possessive quantifier";
+        if (c === "{" && p[i + 1] === ",")
+            return "{,";
+    }
+    return null;
+}
 export function loadPolicy(bytes) {
     const doc = JSON.parse(new TextDecoder().decode(bytes));
     if (doc.version !== 1 || !Array.isArray(doc.rules))
@@ -77,6 +123,9 @@ export function loadPolicy(bytes) {
         if (r.args_match !== undefined) {
             if (typeof r.args_match !== "string" || r.args_match.length > 200)
                 throw new Error(`policy ${r.id}: args_match must be a regular expression of ≤ 200 characters`);
+            const unportable = portableRegexError(r.args_match);
+            if (unportable)
+                throw new Error(`policy ${r.id}: args_match uses syntax JavaScript and Python don't share (${unportable})`);
             new RegExp(r.args_match); // throws on bad syntax
         }
         if (r.audit !== undefined && typeof r.audit !== "boolean")

package/dist/version.d.ts

@@ -1 +1 @@
-export declare const VERSION = "0.8.0";
+export declare const VERSION = "0.10.0";

package/dist/version.js

@@ -1,2 +1,2 @@
 // The SDK version, on its own so the CLI can print it without loading the whole SDK.
-export const VERSION = "0.8.0";
+export const VERSION = "0.10.0";

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@zanii/blackbox",
   "license": "Apache-2.0",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "The flight recorder for AI agents: sessions, a zero-loss spool, framework hooks, approvals, and offline verification of the gateway's hash-chained record.",
   "keywords": [
     "ai-agents",