orizu 0.5.26 → 0.5.28

package/src/instruction-set-lock/schema.v1.ts

@@ -0,0 +1,155 @@
+export const instructionSetLockSchemaV1 = {
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://orizu.ai/schemas/instruction-set-lock/v1",
+  "title": "Orizu instruction set Lock v1",
+  "type": "object",
+  "required": [
+    "lockfileVersion",
+    "project",
+    "instructionSets"
+  ],
+  "additionalProperties": false,
+  "properties": {
+    "lockfileVersion": {
+      "const": 1
+    },
+    "project": {
+      "type": "string",
+      "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*/[a-z0-9]+(?:-[a-z0-9]+)*$"
+    },
+    "instructionSets": {
+      "type": "object",
+      "additionalProperties": false,
+      "patternProperties": {
+        "^[a-z0-9]+(?:-[a-z0-9]+)*$": {
+          "$ref": "#/$defs/instructionSet"
+        }
+      }
+    },
+    "helpers": {
+      "type": "object",
+      "propertyNames": {
+        "pattern": "^helpers\\/(?!\\.{1,2}(?:\\/|$))(?!.*\\/\\.{1,2}(?:\\/|$))[A-Za-z0-9._-]+(?:\\/[A-Za-z0-9._-]+)*$"
+      },
+      "additionalProperties": {
+        "$ref": "#/$defs/sha256"
+      }
+    },
+    "pins": {
+      "type": "array",
+      "uniqueItems": true,
+      "items": {
+        "type": "string",
+        "pattern": "^[a-z0-9]+(?:-[a-z0-9]+)*/[^\\s]+@v[1-9][0-9]*$"
+      }
+    }
+  },
+  "$defs": {
+    "sha256": {
+      "type": "string",
+      "pattern": "^sha256:[0-9a-f]{64}$"
+    },
+    "instructionSet": {
+      "type": "object",
+      "required": [
+        "instructionSetId",
+        "default",
+        "profiles"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "instructionSetId": {
+          "type": "string",
+          "format": "uuid",
+          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89aAbB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
+        },
+        "default": {
+          "type": "string",
+          "pattern": "^[a-z0-9][a-z0-9._-]*__[a-z0-9][a-z0-9._-]*$"
+        },
+        "profiles": {
+          "type": "object",
+          "minProperties": 1,
+          "additionalProperties": false,
+          "patternProperties": {
+            "^[a-z0-9][a-z0-9._-]*__[a-z0-9][a-z0-9._-]*$": {
+              "$ref": "#/$defs/profile"
+            }
+          }
+        }
+      }
+    },
+    "profile": {
+      "type": "object",
+      "required": [
+        "production",
+        "versions"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "modelConfigIdentity": {
+          "type": "string",
+          "minLength": 1
+        },
+        "production": {
+          "type": [
+            "string",
+            "null"
+          ],
+          "pattern": "^v[1-9][0-9]*$"
+        },
+        "versions": {
+          "type": "object",
+          "minProperties": 1,
+          "additionalProperties": false,
+          "patternProperties": {
+            "^v[1-9][0-9]*$": {
+              "$ref": "#/$defs/version"
+            }
+          }
+        }
+      }
+    },
+    "version": {
+      "type": "object",
+      "required": [
+        "profileVersionId",
+        "versionNumber",
+        "digest",
+        "components",
+        "syncedAt"
+      ],
+      "additionalProperties": false,
+      "properties": {
+        "profileVersionId": {
+          "type": "string",
+          "format": "uuid",
+          "pattern": "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89aAbB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$"
+        },
+        "versionNumber": {
+          "type": "integer",
+          "minimum": 1,
+          "maximum": 2147483647
+        },
+        "digest": {
+          "$ref": "#/$defs/sha256"
+        },
+        "components": {
+          "type": "object",
+          "minProperties": 1,
+          "propertyNames": {
+            "pattern": "^(?!\\.)[A-Za-z0-9._-]+$"
+          },
+          "additionalProperties": {
+            "$ref": "#/$defs/sha256"
+          }
+        },
+        "syncedAt": {
+          "type": "string",
+          "format": "date-time",
+          "pattern": "^(?:(?:[0-9]{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12][0-9]|3[01])|(?:0[469]|11)-(?:0[1-9]|[12][0-9]|30)|02-(?:0[1-9]|1[0-9]|2[0-8])))|(?:(?:[0-9]{2}(?:0[48]|[2468][048]|[13579][26])|(?:00|0[48]|[2468][048]|[13579][26])00)-02-29))T(?:[01][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9]\\.[0-9]{3}Z$"
+        }
+      }
+    }
+  }
+} as const

package/src/instruction-set-provenance.ts

@@ -0,0 +1,89 @@
+import { existsSync, readFileSync } from 'node:fs'
+import { join } from 'node:path'
+
+import { parseLock, parseSpecifier } from './instruction-set-lock/index.js'
+import { profileSlug } from './instruction-set-sync/index.js'
+
+export const PROVENANCE_ATTRIBUTE_NAMES = {
+  instructionSetId: 'orizu.instruction_set.id',
+  profileVersionId: 'orizu.profile_version.id',
+  digest: 'orizu.instruction_set.digest',
+} as const
+
+export interface InstructionSetProvenanceTriple {
+  instructionSetId: string
+  profileVersionId: string
+  digest: string
+}
+
+export function resolveInstructionSetProvenance({
+  specifier,
+  root = '.',
+  project,
+}: {
+  specifier: string
+  root?: string
+  project: string
+}): InstructionSetProvenanceTriple {
+  const lockPath = join(root, 'orizu', 'orizu.lock.json')
+  if (!existsSync(lockPath)) throw new Error(`instruction_set_lock_missing:${lockPath}`)
+  const lock = parseLock(readFileSync(lockPath, 'utf8'))
+  const projectSegments = project.split('/').map(segment => segment.trim().toLowerCase())
+  if (projectSegments.length !== 2 || projectSegments.some(segment => segment.length === 0)) {
+    throw new Error(`instruction_set_project_invalid:${projectSegments.join('/')}`)
+  }
+  const normalizedProject = projectSegments.join('/')
+  if (lock.project !== normalizedProject) {
+    throw new Error(`instruction_set_lock_project_mismatch:${lock.project}!=${normalizedProject}`)
+  }
+
+  const parsed = parseSpecifier(specifier)
+  const instructionSet = lock.instructionSets[parsed.set]
+  if (!instructionSet) throw new Error('instruction_set_specifier_unknown')
+  const selectedProfile = parsed.profile === undefined
+    ? instructionSet.default
+    : profileSlug(parsed.profile)
+  const profile = instructionSet.profiles[selectedProfile]
+  if (!profile) throw new Error('instruction_set_specifier_unknown')
+  const selectedVersion = parsed.versionNumber === undefined
+    ? profile.production
+    : `v${parsed.versionNumber}`
+  if (profile.modelConfigIdentity === undefined) {
+    const repairVersion = selectedVersion ?? Object.keys(profile.versions).sort()[0]!
+    const legacyIdentity = selectedProfile.replace('__', '/')
+    throw new Error(
+      `instruction_set_lock_profile_identity_missing:${parsed.set}/${selectedProfile}; repair with orizu instructions sync ${parsed.set}/${legacyIdentity}@${repairVersion}`
+    )
+  }
+  if (parsed.profile !== undefined && profile.modelConfigIdentity !== parsed.profile) {
+    throw new Error(`instruction_set_specifier_profile_mismatch:${profile.modelConfigIdentity}`)
+  }
+  if (selectedVersion === null) {
+    throw new Error('instruction_set_pointer_unresolved:production')
+  }
+  const version = profile.versions[selectedVersion]
+  if (!version) throw new Error('instruction_set_specifier_unknown')
+
+  return {
+    instructionSetId: instructionSet.instructionSetId,
+    profileVersionId: version.profileVersionId,
+    digest: version.digest,
+  }
+}
+
+export function provenanceRequestFields(triple: InstructionSetProvenanceTriple | null) {
+  return triple ? {
+    [PROVENANCE_ATTRIBUTE_NAMES.instructionSetId]: triple.instructionSetId,
+    [PROVENANCE_ATTRIBUTE_NAMES.profileVersionId]: triple.profileVersionId,
+    [PROVENANCE_ATTRIBUTE_NAMES.digest]: triple.digest,
+  } : {}
+}
+
+export function noSubmitScorerOutput(
+  data: Record<string, unknown>,
+  instructionSetProvenance: Record<string, unknown>
+): Record<string, unknown> {
+  const scoreResult = data.scoreResult
+  if (typeof scoreResult !== 'object' || scoreResult === null || Array.isArray(scoreResult)) return data
+  return { ...scoreResult, provenance: data.provenance, ...instructionSetProvenance }
+}