agentskeptic 4.2.0 → 6.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (134) hide show
  1. package/dist/actionableFailure.remediationExhaustive.test.js +1 -1
  2. package/dist/bootstrap/runBootstrapSubcommand.js +1 -1
  3. package/dist/ciLock.js +1 -1
  4. package/dist/ciLock.js.map +1 -1
  5. package/dist/cli.js +2 -2
  6. package/dist/commercial/trustDecisionRecord.d.ts.map +1 -1
  7. package/dist/commercial/trustDecisionRecord.js +7 -3
  8. package/dist/commercial/trustDecisionRecord.js.map +1 -1
  9. package/dist/commercial/trustDecisionRecord.schema.test.js +24 -2
  10. package/dist/commercial/trustDecisionRecord.schema.test.js.map +1 -1
  11. package/dist/commercial/verifyOutcomeBeaconBody.d.ts.map +1 -1
  12. package/dist/commercial/verifyOutcomeBeaconBody.js +2 -1
  13. package/dist/commercial/verifyOutcomeBeaconBody.js.map +1 -1
  14. package/dist/compare.acceptance.test.js +1 -1
  15. package/dist/decisionBlocker.d.ts +1 -11
  16. package/dist/decisionBlocker.d.ts.map +1 -1
  17. package/dist/decisionBlocker.js +1 -41
  18. package/dist/decisionBlocker.js.map +1 -1
  19. package/dist/decisionEvidenceBundle/validateDecisionEvidenceBundle.js +1 -1
  20. package/dist/decisionEvidenceBundle/writeDecisionEvidenceBundle.js +2 -2
  21. package/dist/decisionEvidenceBundle.test.js +50 -3
  22. package/dist/decisionEvidenceBundle.test.js.map +1 -1
  23. package/dist/decisionGate.assertSafe.test.js +1 -1
  24. package/dist/decisionGate.assertSafe.test.js.map +1 -1
  25. package/dist/decisionGate.js +1 -1
  26. package/dist/enforceStateful.js +2 -2
  27. package/dist/enforceStateful.js.map +1 -1
  28. package/dist/evidenceCompleteness.d.ts +54 -0
  29. package/dist/evidenceCompleteness.d.ts.map +1 -0
  30. package/dist/evidenceCompleteness.js +263 -0
  31. package/dist/evidenceCompleteness.js.map +1 -0
  32. package/dist/execution-identity.v1.json +1 -1
  33. package/dist/failureSpine.d.ts +37 -0
  34. package/dist/failureSpine.d.ts.map +1 -0
  35. package/dist/failureSpine.js +218 -0
  36. package/dist/failureSpine.js.map +1 -0
  37. package/dist/failureSpine.test.d.ts +2 -0
  38. package/dist/failureSpine.test.d.ts.map +1 -0
  39. package/dist/failureSpine.test.js +28 -0
  40. package/dist/failureSpine.test.js.map +1 -0
  41. package/dist/formatEvidenceCompletenessHuman.d.ts +12 -0
  42. package/dist/formatEvidenceCompletenessHuman.d.ts.map +1 -0
  43. package/dist/formatEvidenceCompletenessHuman.js +47 -0
  44. package/dist/formatEvidenceCompletenessHuman.js.map +1 -0
  45. package/dist/formatFailureSpineHuman.d.ts +4 -0
  46. package/dist/formatFailureSpineHuman.d.ts.map +1 -0
  47. package/dist/formatFailureSpineHuman.js +18 -0
  48. package/dist/formatFailureSpineHuman.js.map +1 -0
  49. package/dist/governanceEvidence.d.ts +9 -3
  50. package/dist/governanceEvidence.d.ts.map +1 -1
  51. package/dist/governanceEvidence.js +10 -5
  52. package/dist/governanceEvidence.js.map +1 -1
  53. package/dist/governanceEvidence.test.js +31 -4
  54. package/dist/governanceEvidence.test.js.map +1 -1
  55. package/dist/index.d.ts +7 -3
  56. package/dist/index.d.ts.map +1 -1
  57. package/dist/index.js +5 -2
  58. package/dist/index.js.map +1 -1
  59. package/dist/langGraphCheckpointTrustGate.js +1 -1
  60. package/dist/langGraphCheckpointTrustIneligibleCertificate.js +1 -1
  61. package/dist/loop/loopOutput.d.ts +0 -4
  62. package/dist/loop/loopOutput.d.ts.map +1 -1
  63. package/dist/loop/loopOutput.js +3 -6
  64. package/dist/loop/loopOutput.js.map +1 -1
  65. package/dist/loop/runLoopSubcommand.d.ts.map +1 -1
  66. package/dist/loop/runLoopSubcommand.js +0 -2
  67. package/dist/loop/runLoopSubcommand.js.map +1 -1
  68. package/dist/outcomeCertificate.d.ts +20 -10
  69. package/dist/outcomeCertificate.d.ts.map +1 -1
  70. package/dist/outcomeCertificate.js +85 -8
  71. package/dist/outcomeCertificate.js.map +1 -1
  72. package/dist/outcomeCertificate.test.js +1 -1
  73. package/dist/publicDistribution.generated.d.ts +1 -1
  74. package/dist/publicDistribution.generated.js +1 -1
  75. package/dist/quickVerify/formatQuickVerifyHumanReport.test.js +8 -3
  76. package/dist/quickVerify/formatQuickVerifyHumanReport.test.js.map +1 -1
  77. package/dist/quickVerify/quickParamPointerNegatives.test.js +5 -2
  78. package/dist/quickVerify/quickParamPointerNegatives.test.js.map +1 -1
  79. package/dist/quickVerify/quickParamPointerPromotionGoldens.test.js +7 -4
  80. package/dist/quickVerify/quickParamPointerPromotionGoldens.test.js.map +1 -1
  81. package/dist/quickVerify/runQuickVerify.d.ts +3 -1
  82. package/dist/quickVerify/runQuickVerify.d.ts.map +1 -1
  83. package/dist/quickVerify/runQuickVerify.js +24 -3
  84. package/dist/quickVerify/runQuickVerify.js.map +1 -1
  85. package/dist/redactEvidenceString.d.ts +5 -0
  86. package/dist/redactEvidenceString.d.ts.map +1 -0
  87. package/dist/redactEvidenceString.js +17 -0
  88. package/dist/redactEvidenceString.js.map +1 -0
  89. package/dist/remediationConsumptionGuard.test.js +3 -0
  90. package/dist/remediationConsumptionGuard.test.js.map +1 -1
  91. package/dist/remediationMessage.d.ts +6 -0
  92. package/dist/remediationMessage.d.ts.map +1 -0
  93. package/dist/remediationMessage.js +30 -0
  94. package/dist/remediationMessage.js.map +1 -0
  95. package/dist/remediationWireSurfaceGuard.test.js +3 -0
  96. package/dist/remediationWireSurfaceGuard.test.js.map +1 -1
  97. package/dist/schemaLoad.d.ts +1 -1
  98. package/dist/schemaLoad.d.ts.map +1 -1
  99. package/dist/schemaLoad.js +25 -1
  100. package/dist/schemaLoad.js.map +1 -1
  101. package/dist/sdk/_generated/openapi-types.d.ts +25 -15
  102. package/dist/sdk/_generated/openapi-types.d.ts.map +1 -1
  103. package/dist/shareReport/postPublicVerificationReport.d.ts +3 -3
  104. package/dist/shareReport/postPublicVerificationReport.js +1 -1
  105. package/dist/shareReport/postPublicVerificationReport.js.map +1 -1
  106. package/dist/standardVerifyWorkflowCli.d.ts +7 -7
  107. package/dist/standardVerifyWorkflowCli.js +3 -3
  108. package/dist/trustDecision.d.ts +7 -2
  109. package/dist/trustDecision.d.ts.map +1 -1
  110. package/dist/trustDecision.js +14 -7
  111. package/dist/trustDecision.js.map +1 -1
  112. package/dist/verify/batchVerifyTelemetrySubcommand.js +2 -2
  113. package/package.json +4 -3
  114. package/schemas/decision-evidence-exit-v1.schema.json +1 -1
  115. package/schemas/evidence-completeness-v1.schema.json +87 -0
  116. package/schemas/failure-spine-v1.schema.json +38 -0
  117. package/schemas/material-truth-v2.schema.json +83 -0
  118. package/schemas/openapi-commercial-v1.in.yaml +46 -21
  119. package/schemas/openapi-commercial-v1.yaml +47 -22
  120. package/schemas/outcome-certificate-v2.schema.json +93 -0
  121. package/schemas/outcome-certificate-v3.schema.json +97 -0
  122. package/schemas/public-verification-report-v3.schema.json +15 -0
  123. package/schemas/quick-verify-report.schema.json +6 -2
  124. package/schemas/regression-artifact-v1.schema.json +1 -1
  125. package/schemas/trust-decision-record-v1.schema.json +3 -3
  126. package/scripts/discovery-payload.lib.cjs +140 -18
  127. package/dist/decisionBlocker.contract.test.d.ts +0 -2
  128. package/dist/decisionBlocker.contract.test.d.ts.map +0 -1
  129. package/dist/decisionBlocker.contract.test.js +0 -51
  130. package/dist/decisionBlocker.contract.test.js.map +0 -1
  131. package/dist/loop/failureHints.d.ts +0 -6
  132. package/dist/loop/failureHints.d.ts.map +0 -1
  133. package/dist/loop/failureHints.js +0 -36
  134. package/dist/loop/failureHints.js.map +0 -1
@@ -1 +0,0 @@
1
- {"version":3,"file":"decisionBlocker.contract.test.d.ts","sourceRoot":"","sources":["../src/decisionBlocker.contract.test.ts"],"names":[],"mappings":""}
@@ -1,51 +0,0 @@
1
- import { readFileSync, mkdtempSync, rmSync } from "node:fs";
2
- import { join, dirname } from "node:path";
3
- import { tmpdir } from "node:os";
4
- import { fileURLToPath } from "node:url";
5
- import { DatabaseSync } from "node:sqlite";
6
- import { afterAll, beforeAll, describe, expect, it } from "vitest";
7
- import { buildOutcomeCertificateFromWorkflowResult } from "./outcomeCertificate.js";
8
- import { formatDecisionBlockerForHumans } from "./decisionBlocker.js";
9
- import { verifyWorkflow } from "./pipeline.js";
10
- const root = join(dirname(fileURLToPath(import.meta.url)), "..");
11
- describe("formatDecisionBlockerForHumans contract", () => {
12
- /** Seeded SQLite under tmp — `examples/demo.db` is gitignored and absent on clean CI. */
13
- let workDir;
14
- let dbPath;
15
- beforeAll(() => {
16
- workDir = mkdtempSync(join(tmpdir(), "agentskeptic-decision-blocker-"));
17
- dbPath = join(workDir, "demo.db");
18
- const sql = readFileSync(join(root, "examples", "seed.sql"), "utf8");
19
- const db = new DatabaseSync(dbPath);
20
- db.exec(sql);
21
- db.close();
22
- });
23
- afterAll(() => {
24
- rmSync(workDir, { recursive: true, force: true });
25
- });
26
- it("emits exactly six lines with required tokens for wf_missing certificate", async () => {
27
- const eventsPath = join(root, "examples", "events.ndjson");
28
- const registryPath = join(root, "examples", "tools.json");
29
- const result = await verifyWorkflow({
30
- workflowId: "wf_missing",
31
- eventsPath,
32
- registryPath,
33
- database: { kind: "sqlite", path: dbPath },
34
- logStep: () => { },
35
- truthReport: () => { },
36
- });
37
- const certificate = buildOutcomeCertificateFromWorkflowResult(result, "contract_sql");
38
- const { lines, trustDecision } = formatDecisionBlockerForHumans(certificate);
39
- expect(trustDecision).toBe("unsafe");
40
- expect(lines).toHaveLength(6);
41
- expect(lines[0]).toMatch(/^Trust: unsafe$/);
42
- expect(lines[1]).toMatch(/^Workflow: wf_missing$/);
43
- expect(lines[2]).toMatch(/^First problem step: seq=/);
44
- expect(lines[2]).toContain("tool=crm.upsert_contact");
45
- expect(lines[2]).toContain("status=missing");
46
- expect(lines[3]).toContain("ROW_ABSENT");
47
- expect(lines[4]).toMatch(/^Expected: /);
48
- expect(lines[5]).toMatch(/^Observed: /);
49
- });
50
- });
51
- //# sourceMappingURL=decisionBlocker.contract.test.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"decisionBlocker.contract.test.js","sourceRoot":"","sources":["../src/decisionBlocker.contract.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACnE,OAAO,EAAE,yCAAyC,EAAE,MAAM,yBAAyB,CAAC;AACpF,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAEjE,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,yFAAyF;IACzF,IAAI,OAAe,CAAC;IACpB,IAAI,MAAc,CAAC;IAEnB,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gCAAgC,CAAC,CAAC,CAAC;QACxE,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,EAAE,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,CAAC;QACpC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,GAAG,EAAE;QACZ,MAAM,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yEAAyE,EAAE,KAAK,IAAI,EAAE;QACvF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC;YAClC,UAAU,EAAE,YAAY;YACxB,UAAU;YACV,YAAY;YACZ,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE;YAC1C,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC;YACjB,WAAW,EAAE,GAAG,EAAE,GAAE,CAAC;SACtB,CAAC,CAAC;QACH,MAAM,WAAW,GAAG,yCAAyC,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;QACtF,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,GAAG,8BAA8B,CAAC,WAAW,CAAC,CAAC;QAC7E,MAAM,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC5C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;QACnD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACxC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
@@ -1,6 +0,0 @@
1
- import type { OutcomeCertificateV1 } from "../outcomeCertificate.js";
2
- export declare function buildFailureHint(certificate: OutcomeCertificateV1): {
3
- likelyCause: string;
4
- nextAction: string;
5
- };
6
- //# sourceMappingURL=failureHints.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"failureHints.d.ts","sourceRoot":"","sources":["../../src/loop/failureHints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAyBrE,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,oBAAoB,GAAG;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAW/G"}
@@ -1,36 +0,0 @@
1
- const HINTS = [
2
- {
3
- codePrefix: "UNKNOWN_TOOL",
4
- likelyCause: "Observed tool usage is missing from the registry mapping.",
5
- nextAction: "Add or fix the tool mapping in your registry file, then rerun `agentskeptic loop`.",
6
- },
7
- {
8
- codePrefix: "MISSING",
9
- likelyCause: "Expected persisted row/effect was not found in the target data store.",
10
- nextAction: "Verify your write path completed and committed to the expected database, then rerun.",
11
- },
12
- {
13
- codePrefix: "INCONSISTENT",
14
- likelyCause: "Persisted values differ from expected contract values.",
15
- nextAction: "Inspect declared expected values vs stored values, fix the mismatch source, then rerun.",
16
- },
17
- {
18
- codePrefix: "INCOMPLETE",
19
- likelyCause: "Verification could not establish a complete, determinate state.",
20
- nextAction: "Fix event completeness/registry coverage and rerun after a fresh workflow execution.",
21
- },
22
- ];
23
- export function buildFailureHint(certificate) {
24
- const details = certificate.explanation.details ?? [];
25
- for (const d of details) {
26
- const code = String(d.code ?? "").toUpperCase();
27
- const hit = HINTS.find((h) => code.startsWith(h.codePrefix));
28
- if (hit)
29
- return { likelyCause: hit.likelyCause, nextAction: hit.nextAction };
30
- }
31
- return {
32
- likelyCause: certificate.relianceRationale,
33
- nextAction: "Inspect the WHY section and fix the cited mismatch/incompleteness, then rerun `agentskeptic loop`.",
34
- };
35
- }
36
- //# sourceMappingURL=failureHints.js.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"failureHints.js","sourceRoot":"","sources":["../../src/loop/failureHints.ts"],"names":[],"mappings":"AAEA,MAAM,KAAK,GAA2E;IACpF;QACE,UAAU,EAAE,cAAc;QAC1B,WAAW,EAAE,2DAA2D;QACxE,UAAU,EAAE,oFAAoF;KACjG;IACD;QACE,UAAU,EAAE,SAAS;QACrB,WAAW,EAAE,uEAAuE;QACpF,UAAU,EAAE,sFAAsF;KACnG;IACD;QACE,UAAU,EAAE,cAAc;QAC1B,WAAW,EAAE,wDAAwD;QACrE,UAAU,EAAE,yFAAyF;KACtG;IACD;QACE,UAAU,EAAE,YAAY;QACxB,WAAW,EAAE,iEAAiE;QAC9E,UAAU,EAAE,sFAAsF;KACnG;CACF,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,WAAiC;IAChE,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QAC7D,IAAI,GAAG;YAAE,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO;QACL,WAAW,EAAE,WAAW,CAAC,iBAAiB;QAC1C,UAAU,EAAE,oGAAoG;KACjH,CAAC;AACJ,CAAC"}