engineering-behavior-observatory 0.2.1

package/dist/src/exports.d.ts

@@ -0,0 +1,69 @@
+import type { RunBundleEvidenceDescriptor, RunManifest } from "./run-bundles.js";
+type DigestString = `sha256:${string}`;
+type PortableKind = Exclude<RunBundleEvidenceDescriptor["kind"], "export-manifest">;
+type TransformationAction = "sanitized" | "canonicalized" | "removed-field" | "redacted-secret" | "redacted-local-identifier" | "rewritten-correlation" | "truncated";
+export type PortableExportPolicy = {
+    sharingClass: "partner" | "public";
+    maxArtifactBytes: number;
+    maxStringBytes: number;
+    sensitiveValues?: readonly string[];
+};
+export type PortableExportArtifact = {
+    id: string;
+    sourceArtifactId: string;
+    kind: PortableKind;
+    mediaType: string;
+    digest: DigestString;
+    sizeBytes: number;
+    relativePath: string;
+    sourceDigest: DigestString;
+    diagnosticSource?: {
+        verifierId: string;
+        stream: "stdout" | "stderr";
+        locatorDigest: DigestString;
+        sizeBytes: number;
+    };
+};
+export type PortableExportManifest = {
+    schemaVersion: "export-manifest/v1";
+    bundleId: string;
+    status: "ready" | "exported";
+    sharingClass: "partner" | "public";
+    assessmentMode: RunManifest["run"]["assessmentMode"];
+    policyDigest: DigestString;
+    artifactIds: string[];
+    sourceManifestDigest: DigestString;
+    correlations: {
+        bundleId: string;
+        runId: string;
+        attemptId: string;
+        sessionId?: string;
+        traceId?: string;
+    };
+    artifacts: PortableExportArtifact[];
+    transformations: Array<{
+        artifactId: string;
+        action: TransformationAction;
+        count: number;
+    }>;
+    excludedArtifacts: Array<{
+        artifactId: string;
+        reason: "source-export-manifest" | "unsupported-workspace-snapshot";
+    }>;
+};
+export type CreatePortableRunBundleExportOptions = {
+    sourceRoot: string;
+    destinationRoot: string;
+    policy: PortableExportPolicy;
+};
+/** Sanitize a caller-allowlisted derived document; this does not grant sharing approval. */
+export declare function sanitizeDerivedExport(value: unknown, policy: PortableExportPolicy, correlations?: readonly string[]): unknown;
+/** Create one separately rooted, sanitized derivative of an M2 run bundle. */
+export declare function createPortableRunBundleExport(options: CreatePortableRunBundleExportOptions): Promise<PortableExportManifest>;
+/** Read back and revalidate a completed portable export tree. */
+export declare function readPortableRunBundleExport(exportRoot: string, policy: PortableExportPolicy, sourceManifest?: RunManifest, sourceRoot?: string): Promise<PortableExportManifest>;
+/** Use the export pipeline's fail-closed credential patterns on release material. */
+export declare function containsPortableSecretPattern(text: string, mediaType: string): boolean;
+/** Detect user-identifying home paths without rejecting documented generic paths. */
+export declare function containsPortableLocalHomePath(text: string, mediaType?: string): boolean;
+export {};