agentskeptic 8.0.1 → 8.2.0

package/dist/witnessCoverageRollup.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Canonical witness modality rollup for certificate evidence completeness.
+ * Modality strings align with `.github/actions/agentskeptic-check/witnessKindFromCode.mjs` outputs.
+ */
+import type { StepOutcome, StepVerificationRequest } from "./types.js";
+export declare const CANONICAL_WITNESS_KINDS: readonly ["sql", "http_witness", "object_storage", "vector_document", "mongo_document", "state_witness"];
+export type CanonicalWitnessRollupKind = (typeof CANONICAL_WITNESS_KINDS)[number];
+export type WitnessCoverageSupportLabel = "meaningful_multi_witness" | "sql_only_contract" | "single_non_sql_contract" | "thin_or_unknown" | "coverage_incomplete_or_failed";
+export type WitnessCoverageRollupJson = {
+    schemaVersion: 1;
+    exercisedKinds: CanonicalWitnessRollupKind[];
+    fullySatisfiedKinds: CanonicalWitnessRollupKind[];
+    notFullySatisfiedKinds: CanonicalWitnessRollupKind[];
+    supportLabel: WitnessCoverageSupportLabel;
+    summaryLine?: string;
+};
+/**
+ * Maps a resolved verification request to canonical rollup modality buckets.
+ * All SQL-shaped checks collapse to `sql`.
+ */
+export declare function witnessKindsFromVerificationRequest(req: StepVerificationRequest): CanonicalWitnessRollupKind[];
+export declare function buildWitnessCoverageFromSteps(steps: StepOutcome[]): WitnessCoverageRollupJson;
+//# sourceMappingURL=witnessCoverageRollup.d.ts.map

package/dist/witnessCoverageRollup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"witnessCoverageRollup.d.ts","sourceRoot":"","sources":["../src/witnessCoverageRollup.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAc,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAEnF,eAAO,MAAM,uBAAuB,0GAO1B,CAAC;AAEX,MAAM,MAAM,0BAA0B,GAAG,CAAC,OAAO,uBAAuB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElF,MAAM,MAAM,2BAA2B,GACnC,0BAA0B,GAC1B,mBAAmB,GACnB,yBAAyB,GACzB,iBAAiB,GACjB,+BAA+B,CAAC;AAEpC,MAAM,MAAM,yBAAyB,GAAG;IACtC,aAAa,EAAE,CAAC,CAAC;IACjB,cAAc,EAAE,0BAA0B,EAAE,CAAC;IAC7C,mBAAmB,EAAE,0BAA0B,EAAE,CAAC;IAClD,sBAAsB,EAAE,0BAA0B,EAAE,CAAC;IACrD,YAAY,EAAE,2BAA2B,CAAC;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAmBF;;;GAGG;AACH,wBAAgB,mCAAmC,CAAC,GAAG,EAAE,uBAAuB,GAAG,0BAA0B,EAAE,CAiB9G;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,yBAAyB,CAmC7F"}

package/dist/witnessCoverageRollup.js

@@ -0,0 +1,138 @@
+/**
+ * Canonical witness modality rollup for certificate evidence completeness.
+ * Modality strings align with `.github/actions/agentskeptic-check/witnessKindFromCode.mjs` outputs.
+ */
+export const CANONICAL_WITNESS_KINDS = [
+    "sql",
+    "http_witness",
+    "object_storage",
+    "vector_document",
+    "mongo_document",
+    "state_witness",
+];
+/** Rank per step touching a modality: higher = farther from verified. */
+const STATUS_RANK = {
+    verified: 0,
+    uncertain: 1,
+    incomplete_verification: 2,
+    partially_verified: 3,
+    missing: 4,
+    inconsistent: 5,
+};
+const MAX_KINDS_DISPLAY = 24;
+function sortedUniqueKinds(list) {
+    const set = new Set(list);
+    return [...set].sort((a, b) => a.localeCompare(b)).slice(0, MAX_KINDS_DISPLAY);
+}
+/**
+ * Maps a resolved verification request to canonical rollup modality buckets.
+ * All SQL-shaped checks collapse to `sql`.
+ */
+export function witnessKindsFromVerificationRequest(req) {
+    if (req === null)
+        return [];
+    switch (req.kind) {
+        case "sql_row":
+        case "sql_row_absent":
+        case "sql_effects":
+        case "sql_relational":
+            return ["sql"];
+        case "http_witness":
+            return ["http_witness"];
+        case "vector_document":
+            return ["vector_document"];
+        case "object_storage_object":
+            return ["object_storage"];
+        case "mongo_document":
+            return ["mongo_document"];
+    }
+}
+export function buildWitnessCoverageFromSteps(steps) {
+    /** Worst status rank touching each modality across steps */
+    const worstByKind = new Map();
+    for (const step of steps) {
+        const kinds = witnessKindsFromVerificationRequest(step.verificationRequest);
+        if (kinds.length === 0)
+            continue;
+        const r = STATUS_RANK[step.status];
+        for (const k of kinds) {
+            const prev = worstByKind.get(k) ?? -1;
+            worstByKind.set(k, Math.max(prev, r));
+        }
+    }
+    const exercised = sortedUniqueKinds([...worstByKind.keys()]);
+    const fullySatisfied = [];
+    const notFullySatisfied = [];
+    for (const k of exercised) {
+        const w = worstByKind.get(k) ?? 5;
+        if (w <= 0)
+            fullySatisfied.push(k);
+        else
+            notFullySatisfied.push(k);
+    }
+    const supportLabel = deriveSupportLabel(exercised, fullySatisfied, notFullySatisfied, worstByKind);
+    const summaryLine = formatSummaryLine(exercised, fullySatisfied, notFullySatisfied, supportLabel);
+    return {
+        schemaVersion: 1,
+        exercisedKinds: exercised,
+        fullySatisfiedKinds: sortedUniqueKinds(fullySatisfied),
+        notFullySatisfiedKinds: sortedUniqueKinds(notFullySatisfied),
+        supportLabel,
+        ...(summaryLine.length > 0 ? { summaryLine } : {}),
+    };
+}
+function deriveSupportLabel(exercisedKinds, fullySatisfiedKinds, notFullySatisfiedKinds, worstByKind) {
+    if (exercisedKinds.length === 0)
+        return "thin_or_unknown";
+    if (notFullySatisfiedKinds.length > 0) {
+        void worstByKind;
+        return "coverage_incomplete_or_failed";
+    }
+    if (fullySatisfiedKinds.length === exercisedKinds.length && exercisedKinds.length >= 2) {
+        return "meaningful_multi_witness";
+    }
+    if (fullySatisfiedKinds.length === 1 &&
+        fullySatisfiedKinds[0] === "sql" &&
+        exercisedKinds.length === 1) {
+        return "sql_only_contract";
+    }
+    if (exercisedKinds.length === 1 &&
+        fullySatisfiedKinds.length === 1 &&
+        exercisedKinds[0] !== undefined &&
+        exercisedKinds[0] !== "sql") {
+        return "single_non_sql_contract";
+    }
+    return "coverage_incomplete_or_failed";
+}
+function formatSummaryLine(exercised, fullySatisfied, notFullySatisfied, label) {
+    if (exercised.length === 0)
+        return "No verification modalities exercised on captured steps with resolved verification targets.";
+    const ex = exercised.join(",");
+    const ok = fullySatisfied.join(",");
+    const bad = notFullySatisfied.join(",") || "(none)";
+    let body = "";
+    switch (label) {
+        case "meaningful_multi_witness":
+            body = "Multiple modalities satisfied.";
+            break;
+        case "sql_only_contract":
+            body = "SQL-only contract checks satisfied.";
+            break;
+        case "single_non_sql_contract":
+            body = "Single non-SQL modality satisfied.";
+            break;
+        case "thin_or_unknown":
+            body = "Thin or unknown witness footprint.";
+            break;
+        case "coverage_incomplete_or_failed":
+            body = "One or more modalities incomplete, partial, mismatched, or failed.";
+            break;
+        default: {
+            const _e = label;
+            return _e;
+        }
+    }
+    const raw = `[${body}] modalities_exercised=${ex} modalities_fully_satisfied=${ok} modalities_not_fully_satisfied=${bad}`;
+    return raw.length <= 320 ? raw : `${raw.slice(0, 316)}…`;
+}
+//# sourceMappingURL=witnessCoverageRollup.js.map

package/dist/witnessCoverageRollup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"witnessCoverageRollup.js","sourceRoot":"","sources":["../src/witnessCoverageRollup.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,KAAK;IACL,cAAc;IACd,gBAAgB;IAChB,iBAAiB;IACjB,gBAAgB;IAChB,eAAe;CACP,CAAC;AAoBX,yEAAyE;AACzE,MAAM,WAAW,GAA+B;IAC9C,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,CAAC;IACZ,uBAAuB,EAAE,CAAC;IAC1B,kBAAkB,EAAE,CAAC;IACrB,OAAO,EAAE,CAAC;IACV,YAAY,EAAE,CAAC;CAChB,CAAC;AAEF,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B,SAAS,iBAAiB,CAAC,IAAkC;IAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1B,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mCAAmC,CAAC,GAA4B;IAC9E,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAC5B,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC;QACjB,KAAK,SAAS,CAAC;QACf,KAAK,gBAAgB,CAAC;QACtB,KAAK,aAAa,CAAC;QACnB,KAAK,gBAAgB;YACnB,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,KAAK,cAAc;YACjB,OAAO,CAAC,cAAc,CAAC,CAAC;QAC1B,KAAK,iBAAiB;YACpB,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC7B,KAAK,uBAAuB;YAC1B,OAAO,CAAC,gBAAgB,CAAC,CAAC;QAC5B,KAAK,gBAAgB;YACnB,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,KAAoB;IAChE,4DAA4D;IAC5D,MAAM,WAAW,GAAG,IAAI,GAAG,EAAsC,CAAC;IAElE,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACtC,WAAW,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,cAAc,GAAiC,EAAE,CAAC;IACxD,MAAM,iBAAiB,GAAiC,EAAE,CAAC;IAE3D,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,CAAC;YAAE,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;;YAC9B,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,YAAY,GAAG,kBAAkB,CAAC,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC;IACnG,MAAM,WAAW,GAAG,iBAAiB,CAAC,SAAS,EAAE,cAAc,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAElG,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,cAAc,EAAE,SAAS;QACzB,mBAAmB,EAAE,iBAAiB,CAAC,cAAc,CAAC;QACtD,sBAAsB,EAAE,iBAAiB,CAAC,iBAAiB,CAAC;QAC5D,YAAY;QACZ,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,cAA4C,EAC5C,mBAAiD,EACjD,sBAAoD,EACpD,WAA4D;IAE5D,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,iBAAiB,CAAC;IAE1D,IAAI,sBAAsB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,WAAW,CAAC;QACjB,OAAO,+BAA+B,CAAC;IACzC,CAAC;IAED,IAAI,mBAAmB,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACvF,OAAO,0BAA0B,CAAC;IACpC,CAAC;IACD,IACE,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAChC,mBAAmB,CAAC,CAAC,CAAC,KAAK,KAAK;QAChC,cAAc,CAAC,MAAM,KAAK,CAAC,EAC3B,CAAC;QACD,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IACE,cAAc,CAAC,MAAM,KAAK,CAAC;QAC3B,mBAAmB,CAAC,MAAM,KAAK,CAAC;QAChC,cAAc,CAAC,CAAC,CAAC,KAAK,SAAS;QAC/B,cAAc,CAAC,CAAC,CAAC,KAAK,KAAK,EAC3B,CAAC;QACD,OAAO,yBAAyB,CAAC;IACnC,CAAC;IACD,OAAO,+BAA+B,CAAC;AACzC,CAAC;AAED,SAAS,iBAAiB,CACxB,SAAuC,EACvC,cAA4C,EAC5C,iBAA+C,EAC/C,KAAkC;IAElC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QACxB,OAAO,4FAA4F,CAAC;IACtG,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC;IACpD,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,0BAA0B;YAC7B,IAAI,GAAG,gCAAgC,CAAC;YACxC,MAAM;QACR,KAAK,mBAAmB;YACtB,IAAI,GAAG,qCAAqC,CAAC;YAC7C,MAAM;QACR,KAAK,yBAAyB;YAC5B,IAAI,GAAG,oCAAoC,CAAC;YAC5C,MAAM;QACR,KAAK,iBAAiB;YACpB,IAAI,GAAG,oCAAoC,CAAC;YAC5C,MAAM;QACR,KAAK,+BAA+B;YAClC,IAAI,GAAG,oEAAoE,CAAC;YAC5E,MAAM;QACR,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,EAAE,GAAU,KAAK,CAAC;YACxB,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,IAAI,0BAA0B,EAAE,+BAA+B,EAAE,mCAAmC,GAAG,EAAE,CAAC;IAC1H,OAAO,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC;AAC3D,CAAC"}

package/dist/witnessCoverageRollup.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=witnessCoverageRollup.test.d.ts.map

package/dist/witnessCoverageRollup.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"witnessCoverageRollup.test.d.ts","sourceRoot":"","sources":["../src/witnessCoverageRollup.test.ts"],"names":[],"mappings":""}

package/dist/witnessCoverageRollup.test.js

@@ -0,0 +1,187 @@
+import { describe, expect, it } from "vitest";
+import { buildWitnessCoverageFromSteps, CANONICAL_WITNESS_KINDS, witnessKindsFromVerificationRequest, } from "./witnessCoverageRollup.js";
+function baseStep(partial) {
+    return {
+        seq: partial.seq,
+        toolId: partial.toolId,
+        releaseCritical: partial.releaseCritical ?? false,
+        intendedEffect: partial.intendedEffect ?? { narrative: "n" },
+        observedExecution: partial.observedExecution ?? { paramsCanonical: "{}" },
+        verificationRequest: partial.verificationRequest ?? null,
+        status: partial.status ?? "verified",
+        reasons: partial.reasons ?? [],
+        evidenceSummary: partial.evidenceSummary ?? {},
+        repeatObservationCount: partial.repeatObservationCount ?? 1,
+        evaluatedObservationOrdinal: partial.evaluatedObservationOrdinal ?? 1,
+        ...("failureDiagnostic" in partial ? { failureDiagnostic: partial.failureDiagnostic } : {}),
+        ...("langgraphCheckpointKey" in partial ? { langgraphCheckpointKey: partial.langgraphCheckpointKey } : {}),
+    };
+}
+describe("witnessKindsFromVerificationRequest", () => {
+    it("maps sql families to sql", () => {
+        expect(witnessKindsFromVerificationRequest({ kind: "sql_row", table: "t", identityEq: [], requiredFields: {} })).toEqual([
+            "sql",
+        ]);
+        expect(witnessKindsFromVerificationRequest({ kind: "sql_effects", effects: [] })).toEqual(["sql"]);
+    });
+    it("maps non-SQL witnesses distinctly", () => {
+        expect(witnessKindsFromVerificationRequest({
+            kind: "http_witness",
+            method: "GET",
+            url: "https://x",
+            expectedStatus: 200,
+        })).toEqual(["http_witness"]);
+        expect(witnessKindsFromVerificationRequest({
+            kind: "vector_document",
+            provider: "pinecone",
+            documentId: "d",
+            indexName: "i",
+        })).toEqual(["vector_document"]);
+    });
+    it("null yields empty kinds", () => {
+        expect(witnessKindsFromVerificationRequest(null)).toEqual([]);
+    });
+});
+describe("buildWitnessCoverageFromSteps", () => {
+    it("empty steps → thin_or_unknown", () => {
+        const r = buildWitnessCoverageFromSteps([]);
+        expect(r).toMatchObject({
+            schemaVersion: 1,
+            exercisedKinds: [],
+            fullySatisfiedKinds: [],
+            notFullySatisfiedKinds: [],
+            supportLabel: "thin_or_unknown",
+        });
+        expect(r.summaryLine).toBeDefined();
+        expect(String(r.summaryLine)).toContain("No verification modalities");
+    });
+    it("SQL verified only → sql_only_contract", () => {
+        const r = buildWitnessCoverageFromSteps([
+            baseStep({
+                seq: 0,
+                toolId: "x",
+                status: "verified",
+                verificationRequest: {
+                    kind: "sql_row",
+                    table: "contacts",
+                    identityEq: [{ column: "id", value: "1" }],
+                    requiredFields: { name: "a" },
+                },
+            }),
+        ]);
+        expect(r.exercisedKinds).toEqual(["sql"]);
+        expect(r.fullySatisfiedKinds).toEqual(["sql"]);
+        expect(r.notFullySatisfiedKinds).toEqual([]);
+        expect(r.supportLabel).toBe("sql_only_contract");
+    });
+    it("partially_verified SQL → modality not fully satisfied + coverage label", () => {
+        const r = buildWitnessCoverageFromSteps([
+            baseStep({
+                seq: 0,
+                toolId: "x",
+                status: "partially_verified",
+                verificationRequest: { kind: "sql_effects", effects: [] },
+                reasons: [{ code: "MULTI_EFFECT_PARTIAL", message: "m" }],
+            }),
+        ]);
+        expect(r.exercisedKinds).toEqual(["sql"]);
+        expect(r.fullySatisfiedKinds).toEqual([]);
+        expect(r.notFullySatisfiedKinds).toEqual(["sql"]);
+        expect(r.supportLabel).toBe("coverage_incomplete_or_failed");
+    });
+    it("two modalities both verified → meaningful_multi_witness", () => {
+        const rows = [
+            baseStep({
+                seq: 0,
+                toolId: "a",
+                status: "verified",
+                verificationRequest: {
+                    kind: "sql_row",
+                    table: "t",
+                    identityEq: [],
+                    requiredFields: {},
+                },
+            }),
+            baseStep({
+                seq: 1,
+                toolId: "b",
+                status: "verified",
+                verificationRequest: {
+                    kind: "http_witness",
+                    method: "GET",
+                    url: "https://api",
+                    expectedStatus: 200,
+                },
+            }),
+        ];
+        const r = buildWitnessCoverageFromSteps(rows);
+        expect(r.exercisedKinds.sort()).toEqual(["http_witness", "sql"]);
+        expect(r.fullySatisfiedKinds.sort()).toEqual(["http_witness", "sql"]);
+        expect(r.notFullySatisfiedKinds).toEqual([]);
+        expect(r.supportLabel).toBe("meaningful_multi_witness");
+    });
+    it("HTTP only verified → single_non_sql_contract", () => {
+        const r = buildWitnessCoverageFromSteps([
+            baseStep({
+                seq: 0,
+                toolId: "api",
+                status: "verified",
+                verificationRequest: {
+                    kind: "http_witness",
+                    method: "GET",
+                    url: "https://h",
+                    expectedStatus: 200,
+                },
+            }),
+        ]);
+        expect(r.supportLabel).toBe("single_non_sql_contract");
+        expect(r.fullySatisfiedKinds).toEqual(["http_witness"]);
+    });
+    it("worst rank dominates across steps for same modality", () => {
+        const r = buildWitnessCoverageFromSteps([
+            baseStep({
+                seq: 0,
+                toolId: "good",
+                status: "verified",
+                verificationRequest: {
+                    kind: "sql_row",
+                    table: "t",
+                    identityEq: [],
+                    requiredFields: {},
+                },
+            }),
+            baseStep({
+                seq: 1,
+                toolId: "bad",
+                status: "missing",
+                verificationRequest: {
+                    kind: "sql_row_absent",
+                    table: "t",
+                    identityEq: [],
+                    filterEq: [],
+                },
+                reasons: [{ code: "ROW_ABSENT", message: "" }],
+            }),
+        ]);
+        expect(r.notFullySatisfiedKinds).toContain("sql");
+        expect(r.fullySatisfiedKinds).not.toContain("sql");
+        expect(r.supportLabel).toBe("coverage_incomplete_or_failed");
+    });
+});
+describe("CANONICAL_WITNESS_KINDS parity with composite action literals", () => {
+    /** Mirror `.github/actions/agentskeptic-check/witnessKindFromCode.mjs` string constants — update both if taxonomy changes */
+    const LITERAL_EXPECTED_SORTED = [
+        "http_witness",
+        "mongo_document",
+        "object_storage",
+        "sql",
+        "state_witness",
+        "vector_document",
+    ];
+    it("exported tuple matches rollup enum order used by witnessKindFromCode.mjs VALUE set", () => {
+        expect([...CANONICAL_WITNESS_KINDS].sort((a, b) => a.localeCompare(b))).toEqual([
+            ...LITERAL_EXPECTED_SORTED,
+        ].sort((a, b) => a.localeCompare(b)));
+    });
+});
+//# sourceMappingURL=witnessCoverageRollup.test.js.map

package/dist/witnessCoverageRollup.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"witnessCoverageRollup.test.js","sourceRoot":"","sources":["../src/witnessCoverageRollup.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,6BAA6B,EAC7B,uBAAuB,EACvB,mCAAmC,GAGpC,MAAM,4BAA4B,CAAC;AAGpC,SAAS,QAAQ,CACf,OAEsB;IAEtB,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,KAAK;QACjD,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE;QAC5D,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;QACzE,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI,IAAI;QACxD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,UAAU;QACpC,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE;QAC9B,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,EAAE;QAC9C,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,IAAI,CAAC;QAC3D,2BAA2B,EAAE,OAAO,CAAC,2BAA2B,IAAI,CAAC;QACrE,GAAI,CAAC,mBAAmB,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAY;QACvG,GAAI,CAAC,wBAAwB,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAY;KACxG,CAAC;AACnB,CAAC;AAED,QAAQ,CAAC,qCAAqC,EAAE,GAAG,EAAE;IACnD,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,mCAAmC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YACvH,KAAK;SACN,CAAC,CAAC;QACH,MAAM,CAAC,mCAAmC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACrG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CACJ,mCAAmC,CAAC;YAClC,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,WAAW;YAChB,cAAc,EAAE,GAAG;SACpB,CAAC,CACH,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;QAC5B,MAAM,CACJ,mCAAmC,CAAC;YAClC,IAAI,EAAE,iBAAiB;YACvB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,GAAG;YACf,SAAS,EAAE,GAAG;SACf,CAAC,CACH,CAAC,OAAO,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,mCAAmC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,GAAG,6BAA6B,CAAC,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACtB,aAAa,EAAE,CAAC;YAChB,cAAc,EAAE,EAAE;YAClB,mBAAmB,EAAE,EAAE;YACvB,sBAAsB,EAAE,EAAE;YAC1B,YAAY,EAAE,iBAAiB;SAChC,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,4BAA4B,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,GAAG,6BAA6B,CAAC;YACtC,QAAQ,CAAC;gBACP,GAAG,EAAE,CAAC;gBACN,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,UAAU;gBAClB,mBAAmB,EAAE;oBACnB,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,UAAU;oBACjB,UAAU,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;oBAC1C,cAAc,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE;iBAC9B;aACF,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,CAAC,GAAG,6BAA6B,CAAC;YACtC,QAAQ,CAAC;gBACP,GAAG,EAAE,CAAC;gBACN,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,oBAAoB;gBAC5B,mBAAmB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,EAAE,EAAE;gBACzD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;aAC1D,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1C,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAkB;YAC1B,QAAQ,CAAC;gBACP,GAAG,EAAE,CAAC;gBACN,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,UAAU;gBAClB,mBAAmB,EAAE;oBACnB,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,GAAG;oBACV,UAAU,EAAE,EAAE;oBACd,cAAc,EAAE,EAAE;iBACnB;aACF,CAAC;YACF,QAAQ,CAAC;gBACP,GAAG,EAAE,CAAC;gBACN,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,UAAU;gBAClB,mBAAmB,EAAE;oBACnB,IAAI,EAAE,cAAc;oBACpB,MAAM,EAAE,KAAK;oBACb,GAAG,EAAE,aAAa;oBAClB,cAAc,EAAE,GAAG;iBACpB;aACF,CAAC;SACH,CAAC;QACF,MAAM,CAAC,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QAC9C,MAAM,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;QACjE,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,CAAC,GAAG,6BAA6B,CAAC;YACtC,QAAQ,CAAC;gBACP,GAAG,EAAE,CAAC;gBACN,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,UAAU;gBAClB,mBAAmB,EAAE;oBACnB,IAAI,EAAE,cAAc;oBACpB,MAAM,EAAE,KAAK;oBACb,GAAG,EAAE,WAAW;oBAChB,cAAc,EAAE,GAAG;iBACpB;aACF,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACvD,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,GAAG,6BAA6B,CAAC;YACtC,QAAQ,CAAC;gBACP,GAAG,EAAE,CAAC;gBACN,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU;gBAClB,mBAAmB,EAAE;oBACnB,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,GAAG;oBACV,UAAU,EAAE,EAAE;oBACd,cAAc,EAAE,EAAE;iBACnB;aACF,CAAC;YACF,QAAQ,CAAC;gBACP,GAAG,EAAE,CAAC;gBACN,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,SAAS;gBACjB,mBAAmB,EAAE;oBACnB,IAAI,EAAE,gBAAgB;oBACtB,KAAK,EAAE,GAAG;oBACV,UAAU,EAAE,EAAE;oBACd,QAAQ,EAAE,EAAE;iBACb;gBACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;aAC/C,CAAC;SACH,CAAC,CAAC;QACH,MAAM,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC/D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+DAA+D,EAAE,GAAG,EAAE;IAC7E,6HAA6H;IAC7H,MAAM,uBAAuB,GAAG;QAC9B,cAAc;QACd,gBAAgB;QAChB,gBAAgB;QAChB,KAAK;QACL,eAAe;QACf,iBAAiB;KACqB,CAAC;IAEzC,EAAE,CAAC,oFAAoF,EAAE,GAAG,EAAE;QAC5F,MAAM,CAAC,CAAC,GAAI,uBAA6C,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;YACrG,GAAG,uBAAuB;SAC3B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentskeptic",
-  "version": "8.0.1",
+  "version": "8.2.0",
   "description": "Tool activity vs downstream state at verify: SQL, HTTP, vectors, documents, S3 objects—deterministic verdict artifacts (verification-state-stores.md).",
   "license": "MIT",
   "type": "module",

package/schemas/evidence-completeness-v1.schema.json

@@ -2,6 +2,56 @@
   "$id": "https://agentskeptic.com/schemas/evidence-completeness-v1.schema.json",
   "$schema": "https://json-schema.org/draft/2020-12/schema",
   "title": "EvidenceCompletenessV1",
+  "$defs": {
+    "witnessRollupKindString": {
+      "type": "string",
+      "enum": ["sql", "http_witness", "object_storage", "vector_document", "mongo_document", "state_witness"]
+    },
+    "witnessCoverageV1": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schemaVersion",
+        "exercisedKinds",
+        "fullySatisfiedKinds",
+        "notFullySatisfiedKinds",
+        "supportLabel"
+      ],
+      "properties": {
+        "schemaVersion": { "type": "integer", "const": 1 },
+        "exercisedKinds": {
+          "type": "array",
+          "maxItems": 24,
+          "items": { "$ref": "#/$defs/witnessRollupKindString" }
+        },
+        "fullySatisfiedKinds": {
+          "type": "array",
+          "maxItems": 24,
+          "items": { "$ref": "#/$defs/witnessRollupKindString" }
+        },
+        "notFullySatisfiedKinds": {
+          "type": "array",
+          "maxItems": 24,
+          "items": { "$ref": "#/$defs/witnessRollupKindString" }
+        },
+        "supportLabel": {
+          "type": "string",
+          "enum": [
+            "meaningful_multi_witness",
+            "sql_only_contract",
+            "single_non_sql_contract",
+            "thin_or_unknown",
+            "coverage_incomplete_or_failed"
+          ]
+        },
+        "summaryLine": {
+          "type": "string",
+          "minLength": 1,
+          "maxLength": 320
+        }
+      }
+    }
+  },
   "type": "object",
   "additionalProperties": false,
   "required": [
@@ -261,6 +311,9 @@
           "text": { "type": "string", "minLength": 1, "maxLength": 500 }
         }
       }
+    },
+    "witnessCoverage": {
+      "$ref": "#/$defs/witnessCoverageV1"
     }
   }
 }

package/schemas/openapi-commercial-v1.yaml

@@ -1,7 +1,7 @@
 openapi: "3.0.3"
 info:
   title: AgentSkeptic commercial license API
-  version: "8.0.1"
+  version: "8.2.0"
   contact:
     url: https://agentskeptic.com
   x-agentskeptic-distribution: