foottrace 1.2.0 → 1.4.0

package/dist/types/lib/evidence/codes.d.ts

@@ -0,0 +1,33 @@
+/** One vocabulary; true marks a domain evidence reason, false a trace/admission gap only. */
+export declare const GAP_CODES: Readonly<{
+    readonly 'not-collected': true;
+    readonly 'untracked-input': false;
+    readonly redacted: true;
+    readonly conservative: false;
+    readonly 'scope-boundary': false;
+    readonly 'invalid-data': true;
+    readonly unavailable: true;
+    readonly timeout: true;
+    readonly cancelled: false;
+    readonly cycle: false;
+    readonly 'node-limit': false;
+    readonly 'depth-limit': false;
+    readonly 'edge-limit': false;
+    readonly 'call-limit': false;
+    readonly truncated: false;
+    readonly 'strategy-failed': false;
+    readonly 'not-checked': true;
+    readonly 'no-match': true;
+    readonly ambiguous: true;
+    readonly stale: true;
+    readonly incompatible: true;
+    readonly unsupported: true;
+    readonly 'not-permitted': true;
+}>;
+export type GapCode = keyof typeof GAP_CODES;
+/** Producer-asserted evidence reasons, excluding traversal and admission bounds. */
+export type RequirementReason = {
+    [Code in GapCode]: (typeof GAP_CODES)[Code] extends true ? Code : never;
+}[GapCode];
+export declare const isGapCode: (value: unknown) => value is "not-collected" | "untracked-input" | "redacted" | "conservative" | "scope-boundary" | "invalid-data" | "unavailable" | "timeout" | "cancelled" | "cycle" | "node-limit" | "depth-limit" | "edge-limit" | "call-limit" | "truncated" | "strategy-failed" | "not-checked" | "no-match" | "ambiguous" | "stale" | "incompatible" | "unsupported" | "not-permitted";
+export declare const isRequirementReason: (value: unknown) => value is RequirementReason;

package/dist/types/lib/evidence/requirementTypes.d.ts

@@ -0,0 +1,46 @@
+import type { RequirementReason } from './codes.js';
+/**
+ * Existing check wire words; a disposition records a producer assertion, not authorization.
+ * `unreachable` means the check could not run; its reason identifies why.
+ */
+export type RequirementCheckDisposition = 'checked-pass' | 'checked-fail' | 'unreachable' | 'not-applicable';
+/** References to a real check and its retained evidence. No synthetic attempt is required or invented. */
+export interface RequirementCheck {
+    readonly checkRef: string;
+    readonly disposition: RequirementCheckDisposition;
+    readonly reason?: RequirementReason;
+    /** A namespaced adapter detail ID, never a message, subject or payload. */
+    readonly detail?: string;
+    readonly evidenceRefs: readonly string[];
+    readonly attemptRefs: readonly string[];
+}
+interface RequirementBinding {
+    /** This result's identity, not the enclosing artifact reference minted by storage. */
+    readonly id: string;
+    /** Reference to the requirement definition or policy. */
+    readonly requirementRef: string;
+    readonly findingRef: string;
+    readonly windowRef: string;
+    readonly affects: readonly string[];
+    readonly evidenceRefs: readonly string[];
+    readonly checks: readonly RequirementCheck[];
+    /** References into a host-owned closed action registry; never executable tool names or arguments. */
+    readonly actionRefs: readonly string[];
+    /** A namespaced adapter detail ID, never a message, subject or payload. */
+    readonly detail?: string;
+    /** Source validity and learned time are separate opaque references; no freshness inference is made. */
+    readonly validTimeRef?: string;
+    readonly learnedTimeRef?: string;
+}
+/**
+ * A producer assertion. Structural admission does not verify its source, scope, bindings, validity or truth.
+ * Hosts must verify those facts and must not let a satisfied record override an unresolved affected claim.
+ */
+export type RequirementResult = RequirementBinding & ({
+    readonly state: 'satisfied';
+    readonly reason?: never;
+} | {
+    readonly state: 'unresolved';
+    readonly reason: RequirementReason;
+});
+export {};

package/dist/types/lib/evidence/requirements.d.ts

@@ -0,0 +1,24 @@
+import { EvidenceRefusal } from './admission.js';
+import { type GapCode } from './codes.js';
+import type { RequirementResult } from './requirementTypes.js';
+/** Fixed per-call ceilings; characters are UTF-16 code units, not serialized transport bytes. */
+export declare const REQUIREMENT_RESULT_LIMITS: Readonly<{
+    results: 512;
+    checks: 16;
+    affects: 32;
+    refs: 16;
+    name: 512;
+    fields: 32768;
+    characters: 1048576;
+}>;
+/** No input, field value or originating exception is retained on a refusal. */
+export declare class RequirementValidationError extends EvidenceRefusal {
+    constructor(code?: GapCode);
+}
+/**
+ * Atomically project detached, frozen reference-only records. This is structural admission only.
+ * The host must authenticate producers, resolve authorized artifacts, verify current query/run/scope and
+ * domain validity, and enforce every unresolved affects reference before rendering any factual claim.
+ * Identifier grammar does not classify secrets; producers must supply non-secret identifiers only.
+ */
+export declare function readRequirementResults(value: unknown): readonly RequirementResult[];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "foottrace",
-  "version": "1.2.0",
+  "version": "1.4.0",
   "type": "commonjs",
   "description": "Execution records, replay, time travel and honest attribution \u2014 independent of the engine that produced them",
   "license": "MIT",
@@ -59,6 +59,10 @@
       "import": {
         "types": "./dist/esm/cause.d.ts",
         "default": "./dist/esm/cause.js"
+      },
+      "require": {
+        "types": "./dist/types/cause.d.ts",
+        "default": "./dist/cause.js"
       }
     }
   },
@@ -71,7 +75,7 @@
         "dist/types/paths.d.ts"
       ],
       "cause": [
-        "dist/esm/cause.d.ts"
+        "dist/types/cause.d.ts"
       ]
     }
   },
@@ -81,7 +85,7 @@
     "test:coverage": "vitest run --coverage",
     "typecheck": "tsc -p tsconfig.test.json",
     "check:layering": "node scripts/check-layering.mjs",
-    "check:package": "publint && attw --pack --exclude-entrypoints cause --profile strict && attw --pack --entrypoints cause --profile esm-only",
+    "check:package": "publint && attw --pack --profile strict && tsc -p test/consumer/cause/tsconfig.json",
     "lint": "eslint 'src/**/*.ts'",
     "format": "prettier --check 'src/**/*.ts' 'test/**/*.ts'",
     "test:examples": "tsc -p examples/tsconfig.json",