agentfootprint 10.5.1 → 10.6.1

package/dist/esm/answer-validation/requirements.js

@@ -0,0 +1,103 @@
+/** Pure prerequisite checks over caller-authenticated producer reports. No IO or value comparison. */
+import { readRequirementResults, REQUIREMENT_RESULT_LIMITS, } from 'foottrace';
+import { copyJson, ownData } from '../lib/boundedJson.js';
+const POLICY_BYTES = 16 * 1024;
+const CHECK_ID_CHARACTERS = 128;
+function ref(value, maximum = REQUIREMENT_RESULT_LIMITS.name) {
+    if (typeof value !== 'string' ||
+        value.length === 0 ||
+        value.length > maximum ||
+        /\s/u.test(value))
+        throw new Error('Invalid reference.');
+    for (let index = 0; index < value.length; index++) {
+        const code = value.charCodeAt(index);
+        if (code <= 31 || (code >= 127 && code <= 159))
+            throw new Error('Invalid reference.');
+    }
+    return value;
+}
+/** Fixed diagnostics: never retain a hostile value or the exception raised while inspecting it. */
+function readPolicy(value) {
+    try {
+        const source = ownData(value, ['claimRef', 'findingRef', 'windowRef', 'requirementRefs']);
+        if (!Array.isArray(source.requirementRefs))
+            throw new Error();
+        const length = Object.getOwnPropertyDescriptor(source.requirementRefs, 'length')
+            ?.value;
+        if (typeof length !== 'number' || length < 1 || length > REQUIREMENT_RESULT_LIMITS.refs)
+            throw new Error();
+        const copied = ownData(copyJson(source, POLICY_BYTES, true));
+        const copiedRefs = copied.requirementRefs;
+        // Preflight limits the read; only the detached copy supplies admitted policy facts.
+        if (!Array.isArray(copiedRefs) ||
+            copiedRefs.length < 1 ||
+            copiedRefs.length > REQUIREMENT_RESULT_LIMITS.refs)
+            throw new Error();
+        const requirementRefs = copiedRefs.map((item) => ref(item));
+        if (new Set(requirementRefs).size !== requirementRefs.length)
+            throw new Error();
+        return Object.freeze({
+            claimRef: ref(copied.claimRef, CHECK_ID_CHARACTERS),
+            findingRef: ref(copied.findingRef),
+            windowRef: ref(copied.windowRef),
+            requirementRefs: Object.freeze(requirementRefs),
+        });
+    }
+    catch {
+        throw Object.assign(new TypeError('Invalid claim requirement policy.'), {
+            code: 'ERR_CLAIM_REQUIREMENT_POLICY',
+        });
+    }
+}
+function assessment(claimRef, resultRefs, reason) {
+    return Object.freeze({
+        check: Object.freeze({
+            id: claimRef,
+            disposition: reason === undefined ? 'checked-pass' : 'unreachable',
+            ...(reason === undefined ? {} : { reason }),
+        }),
+        requirementResultRefs: Object.freeze([...resultRefs]),
+    });
+}
+/**
+ * Check every expected prerequisite for one exact claim/finding/window binding.
+ * Any same-scope unresolved report affecting this claim denies it, including an
+ * extra obligation; a satisfied report never overrides that denial. Missing
+ * expected obligations are unreachable, not a successful empty check.
+ *
+ * The host must authenticate the producer and current query/run/scope, authorize
+ * receipt access and establish domain validity BEFORE supplying results. The
+ * public Foottrace reader admits structure only; neither it nor this helper
+ * verifies provenance, freshness, a claim's value, or permission to disclose it.
+ * Use the returned check only when the candidate actually asserts this claim.
+ * Requirement result IDs are selectors, never artifact evidence references.
+ *
+ * A malformed host policy throws code ERR_CLAIM_REQUIREMENT_POLICY. Malformed
+ * receipt sets produce unreachable/invalid-data without exposing parser errors.
+ */
+export function checkClaimRequirements(policy, results) {
+    const expected = readPolicy(policy);
+    let admitted;
+    try {
+        admitted = readRequirementResults(results);
+    }
+    catch {
+        return assessment(expected.claimRef, [], 'invalid-data');
+    }
+    const affected = admitted.filter((result) => result.affects.includes(expected.claimRef));
+    const applicable = affected
+        .filter((result) => result.findingRef === expected.findingRef && result.windowRef === expected.windowRef)
+        .sort((left, right) => (left.id < right.id ? -1 : left.id > right.id ? 1 : 0));
+    const resultRefs = applicable.map((result) => result.id);
+    const unresolved = applicable.find((result) => result.state === 'unresolved');
+    if (unresolved?.state === 'unresolved')
+        return assessment(expected.claimRef, resultRefs, unresolved.reason);
+    for (const requirementRef of expected.requirementRefs) {
+        if (!applicable.some((result) => result.requirementRef === requirementRef)) {
+            const foreign = affected.some((result) => result.requirementRef === requirementRef);
+            return assessment(expected.claimRef, resultRefs, foreign ? 'incompatible' : 'not-collected');
+        }
+    }
+    return assessment(expected.claimRef, resultRefs);
+}
+//# sourceMappingURL=requirements.js.map

package/dist/esm/answer-validation/requirements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requirements.js","sourceRoot":"","sources":["../../../src/answer-validation/requirements.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,OAAO,EACL,sBAAsB,EACtB,yBAAyB,GAE1B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAoB1D,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,CAAC;AAC/B,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC,SAAS,GAAG,CAAC,KAAc,EAAE,UAAkB,yBAAyB,CAAC,IAAI;IAC3E,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,KAAK,CAAC,MAAM,GAAG,OAAO;QACtB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QAEjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,IAAI,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,mGAAmG;AACnG,SAAS,UAAU,CAAC,KAA6B;IAC/C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,eAAe,CAAC;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAC9D,MAAM,MAAM,GAAG,MAAM,CAAC,wBAAwB,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC;YAC9E,EAAE,KAAgB,CAAC;QACrB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,GAAG,CAAC,IAAI,MAAM,GAAG,yBAAyB,CAAC,IAAI;YACrF,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC;QAC1C,oFAAoF;QACpF,IACE,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;YAC1B,UAAU,CAAC,MAAM,GAAG,CAAC;YACrB,UAAU,CAAC,MAAM,GAAG,yBAAyB,CAAC,IAAI;YAElD,MAAM,IAAI,KAAK,EAAE,CAAC;QACpB,MAAM,eAAe,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,IAAa,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,IAAI,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,IAAI,KAAK,eAAe,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QAChF,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC;YACnD,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC;YAClC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;YAChC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,mCAAmC,CAAC,EAAE;YACtE,IAAI,EAAE,8BAAuC;SAC9C,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CACjB,QAAgB,EAChB,UAA6B,EAC7B,MAA0B;IAE1B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,EAAE,EAAE,QAAQ;YACZ,WAAW,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,aAAa;YAClE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;SAC5C,CAAC;QACF,qBAAqB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;KACtD,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAA8B,EAC9B,OAAgB;IAEhB,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,QAAmD,CAAC;IACxD,IAAI,CAAC;QACH,QAAQ,GAAG,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,MAAM,UAAU,GAAG,QAAQ;SACxB,MAAM,CACL,CAAC,MAAM,EAAE,EAAE,CACT,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU,IAAI,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CACvF;SACA,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,UAAU,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,YAAY,CAAC,CAAC;IAC9E,IAAI,UAAU,EAAE,KAAK,KAAK,YAAY;QACpC,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACtE,KAAK,MAAM,cAAc,IAAI,QAAQ,CAAC,eAAe,EAAE,CAAC;QACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,EAAE,CAAC;YAC3E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,KAAK,cAAc,CAAC,CAAC;YACpF,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AACnD,CAAC"}

package/dist/esm/core/Agent.js

@@ -4675,8 +4675,8 @@ export class Agent extends RunnerBase {
             ...(argumentSources && { argumentSources: true }),
             ...((this.answerValidationConfig !== undefined || governsOutput) && {
                 suppressDraftTokens: true,
+                withholdDraftContent: true,
             }),
-            ...(governsOutput && { withholdDraftContent: true }),
             // Tool choice by classifier (9.105.0): the outcome row after the reply.
             ...(this.toolChoiceOptions !== undefined && { toolChoice: true }),
             // The declared ontology (9.106.0): the piece served from the run