pi-daddy 0.28.0 → 0.32.0

package/dist/catalog.js

@@ -1,273 +0,0 @@
-/**
- * Live capability catalog — what *can* be granted, enumerated at runtime.
- *
- * Until now grants were checked against agent-type files alone, which covers `tool:` capabilities and
- * nothing else. That leaves two gaps: extension tools are invisible (so `ext:` grants cannot be
- * validated), and **skills were ungovernable** despite "skills and tools" being half the requirement.
- *
- * Sources, and why each is trusted:
- *  - **tools** — the `tools` array of a live provider request. Authoritative: it is exactly what pi sent
- *    the model, so it includes extension-registered tools and reflects any `--tools` allowlist already in
- *    force. Nothing else can see the real surface.
- *  - **skills** — `SKILL.md` directories and top-level `.md` files under pi's skill roots.
- *  - **definitions** — spawnable `SKILL.md` agents (ADR-0016), as `agent:<name>`.
- *
- * Provenance note: a provider payload gives tool NAMES, not owning packages, so extension tools cannot be
- * qualified as `ext:<pkg>/<tool>` from that source alone. They are catalogued as `tool:<name>` — which is
- * also how pi's `--tools` matches — and marked `kind: "extension"` for display. `ext:` ids remain
- * supported for hand-authored grants; `deriveOwnGrant` already matches them by bare name.
- */
-import { getAgentDir } from "@earendil-works/pi-coding-agent";
-import { resolveSkillResources, skillResourceName } from "./skill-resources.js";
-import { join } from "node:path";
-import { loadDefinitions } from "./definitions.js";
-import { PI_BUILTIN_TOOLS, WILDCARD } from "./pi-tools.js";
-import { AGENT_WILDCARD, WORKSPACE_WILDCARD } from "./resolve.js";
-import { loadWorkspaceRegistry } from "./workspace.js";
-import { isSafeWorkspaceId } from "./capabilities.js";
-/** Split observed tool names into pi built-ins and extension-provided tools. */
-export function classifyToolNames(observed) {
-    const builtins = new Set(PI_BUILTIN_TOOLS);
-    return [...new Set(observed)].sort().map((name) => ({
-        capability: `tool:${name}`,
-        kind: builtins.has(name) ? "builtin" : "extension",
-    }));
-}
-/** Skill roots pi discovers, project first. */
-export function skillDirs(cwd) {
-    return [join(cwd, ".pi", "skills"), join(getAgentDir(), "skills")];
-}
-/** Enumerate the same enabled Pi resource paths as definitions, preserving resolver precedence. */
-export async function loadSkills(cwd) {
-    const found = new Map();
-    for (const { path } of (await resolveSkillResources(cwd)).skills) {
-        const name = skillResourceName(path);
-        if (!found.has(name))
-            found.set(name, { capability: `skill:${name}`, kind: "skill", source: path });
-    }
-    return [...found.values()];
-}
-/**
- * Spawnable definitions, as `agent:<name>` capabilities.
- *
- * A definition is BOTH a skill (loadable into a session) and an agent (spawnable as a child) — ADR-0016
- * collapsed those into one file — so the same `SKILL.md` legitimately appears twice in the catalog under
- * two capability ids. That is not duplication: `skill:review` means "may load these instructions" and
- * `agent:review` means "may spawn a child running them", and a grant can hold either without the other.
- */
-export function definitionEntries(definitions) {
-    return [...definitions.values()].map((d) => ({
-        capability: `agent:${d.name}`,
-        kind: "agentType",
-        source: d.source,
-    }));
-}
-/**
- * Registered workspaces, as `workspace:<id>` capabilities (ADR-0035).
- *
- * For DISPLAY and SCAFFOLDING only — `/grants` listing what this session may route to, and `init` offering
- * the ids without choosing among them (ADR-0028). It is deliberately **not** what `unknownCapabilities`
- * checks against; see the comment there.
- *
- * The operator registry is the authority on which ids exist, exactly as it is at `resolveWorkspace`. This
- * enumerates it; it does not decide anything.
- */
-export function workspaceEntries(registry, source) {
-    return Object.keys(registry.workspaces)
-        .sort()
-        .map((id) => ({ capability: `workspace:${id}`, kind: "workspace", ...(source ? { source } : {}) }));
-}
-/** Assemble a catalog from parts. Pure, so it is testable without a filesystem. */
-export function makeCatalog(entries) {
-    const deduped = new Map();
-    for (const entry of entries)
-        if (!deduped.has(entry.capability))
-            deduped.set(entry.capability, entry);
-    const list = [...deduped.values()].sort((a, b) => a.capability.localeCompare(b.capability));
-    const ids = list.map((e) => e.capability);
-    const idSet = new Set(ids);
-    return {
-        entries: list,
-        all: ids,
-        byKind: (kind) => list.filter((e) => e.kind === kind).map((e) => e.capability),
-        has: (capability) => idSet.has(capability),
-    };
-}
-/** Build the live catalog. `observedTools` comes from a provider payload; null when not yet seen. */
-export async function buildCatalog(input) {
-    const [skills, definitions, workspaces] = await Promise.all([
-        loadSkills(input.cwd),
-        loadDefinitions(input.cwd),
-        // Fails SOFT, and only because nothing here is an authority. A malformed registry must not stop a
-        // session from starting — `loadWorkspaceRegistry` throws a GovernanceRefusal naming the file, and that
-        // refusal is the operator's signal at the point of USE, where routing actually depends on it. Swallowing
-        // it there would be unsafe; swallowing it here costs a display list.
-        input.registryPath
-            ? loadWorkspaceRegistry(input.registryPath).then((r) => workspaceEntries(r, input.registryPath), () => [])
-            : Promise.resolve([]),
-    ]);
-    return makeCatalog([
-        // pi's built-ins are seeded unconditionally, because they are known statically and the catalog is
-        // consulted BEFORE any provider request has happened — `/grants` runs at that point. Without this,
-        // every capability looked "unknown" until the first model call, so the preview refused grants that
-        // enforcement would have allowed: R-28's failure shape (a diagnostic disagreeing with the enforcer)
-        // reappearing through a different door.
-        //
-        // The trade-off, stated plainly: in a session started with `--tools read`, this still lists `bash`
-        // as an existing capability, so a delegation naming it passes the *unknown* check and is refused by
-        // the *grant* check instead ("this session does not hold it"). That is the better error anyway, and
-        // the grant check — not this catalog — is the authority. Nothing here grants anything.
-        ...PI_BUILTIN_TOOLS.map((name) => ({ capability: `tool:${name}`, kind: "builtin" })),
-        ...(input.observedTools ? classifyToolNames(input.observedTools) : []),
-        ...skills,
-        ...definitionEntries(definitions),
-        ...workspaces,
-    ]);
-}
-/**
- * Capabilities requested that the catalog does not contain.
- *
- * Reported separately from `denied` because the causes differ and so do the fixes: `denied` means the
- * delegator lacks authority, `unknown` means the capability does not exist here — usually a typo or a
- * stale grant referring to an uninstalled package. Silently treating unknown as denied hides that.
- */
-export function unknownCapabilities(requested, catalog) {
-    // Wildcards are GRAMMAR, not entries. Nothing enumerates them into the catalog — `definitionEntries`
-    // emits `agent:<name>` per discovered definition and `PI_BUILTIN_TOOLS` contains no `*` — so this check
-    // reported `agent:*` as *"not present in this session's catalog (typo, or an uninstalled package?)"* and
-    // refused it BEFORE `resolve` could apply ADR-0023's rule. That made the ADR's "a parent holding
-    // `agent:*` may hand down `agent:*`" false, and made a definition declaring `allowed-tools: agent:*`
-    // unspawnable from any grant. The wildcard is live only at the root without this.
-    //
-    // `workspace:` is exempt as a NAMESPACE, not merely at its wildcard, and that asymmetry is deliberate.
-    // ADR-0035 minted the namespace and taught `normaliseCapability`, `resolve` and `childEnv` about it, but
-    // not this line — so with a catalog present (and `delegationContext` always supplies one) every requested
-    // `workspace:<id>` was refused UNKNOWN_TOOL as *"a typo, or an uninstalled package"*. A child could
-    // therefore never be granted a workspace capability at all, which made routing stop dead below the root
-    // instead of attenuating, and made the ADR's own "two authorities, not one" unreachable in production.
-    //
-    // Exempt rather than catalogued-and-checked because the operator registry is the authority and it is
-    // consulted where it matters: `resolveWorkspace` refuses an unregistered id with WORKSPACE_NOT_REGISTERED,
-    // naming the registry. A second, weaker check here can only turn that precise refusal into a misleading
-    // one — and it would do so for reasons that have nothing to do with the id, like a registry this session
-    // cannot read. `buildCatalog` still ENUMERATES workspaces, for `/grants` and for `init`'s scaffold; that
-    // is display, and display is not authority. Same trade-off the built-ins comment above states and accepts.
-    // The workspace exemption requires a WELL-FORMED id, not merely the prefix. A bare `workspace:` names
-    // nothing, and exempting it let it reach a child's grant and the ledger as authority over no workspace at
-    // all — an exemption for ids the registry is authoritative about should not also cover ids no registry
-    // could contain.
-    // `WORKSPACE_WILDCARD` is listed with the other two because it is GRAMMAR, and `isSafeCapability` refuses
-    // wildcards by design — so folding it into the namespace test below un-exempts it. Caught by the tests for
-    // the previous two fixes, which is the checklist paying for itself.
-    const exempt = (c) => c === WILDCARD || c === AGENT_WILDCARD || c === WORKSPACE_WILDCARD
-        || (c.startsWith("workspace:") && isSafeWorkspaceId(c.slice("workspace:".length)));
-    return requested.filter((c) => !exempt(c) && !catalog.has(c)).sort();
-}
-/**
- * Tool names that exist in OTHER harnesses' vocabularies, mapped to the pi tool that does the same job.
- *
- * This is a hint for an error message and nothing else. `ceilingForDefinition` deliberately refuses to
- * translate names — lowercasing and no more — because a translation table there would have to decide what
- * `Glob` *means* and would either invent a grant or silently drop one. Naming a likely intent in the
- * refusal costs nothing and keeps that property: the delegation is still refused, and the author still
- * edits the file.
- *
- * Populated from the names an author actually reaches for. `allowed-tools` is an Agent Skills field, so
- * the frontmatter people copy in is usually written against Claude Code's toolset; `Glob` is the one that
- * bit a real consumer (principal-pi-skills, seven definitions), because pi's equivalent is `find`.
- */
-const FOREIGN_TOOL_NAMES = {
-    "tool:glob": "tool:find",
-    "tool:searchfiles": "tool:find",
-    "tool:bashtool": "tool:bash",
-    "tool:readfile": "tool:read",
-    "tool:writefile": "tool:write",
-    "tool:str_replace_editor": "tool:edit",
-    "tool:multiedit": "tool:edit",
-};
-/**
- * Optimal string alignment distance — Levenshtein plus adjacent transposition.
- *
- * Transposition counts as ONE edit, not two, because it is the typo people actually make: `raed` for
- * `read` is a single slip of the fingers, and plain Levenshtein scores it 2 — the same as two unrelated
- * substitutions. With the threshold this small, that difference is the whole feature.
- */
-function editDistance(a, b) {
-    // Three rows, because a transposition needs the row before last.
-    const rows = [
-        Array.from({ length: b.length + 1 }, (_, j) => j),
-        new Array(b.length + 1).fill(0),
-        new Array(b.length + 1).fill(0),
-    ];
-    let twoBack = rows[2];
-    let prev = rows[0];
-    let cur = rows[1];
-    for (let i = 1; i <= a.length; i++) {
-        cur[0] = i;
-        for (let j = 1; j <= b.length; j++) {
-            const cost = a[i - 1] === b[j - 1] ? 0 : 1;
-            let d = Math.min(prev[j] + 1, cur[j - 1] + 1, prev[j - 1] + cost);
-            if (i > 1 && j > 1 && a[i - 1] === b[j - 2] && a[i - 2] === b[j - 1]) {
-                d = Math.min(d, twoBack[j - 2] + 1);
-            }
-            cur[j] = d;
-        }
-        const spent = twoBack;
-        twoBack = prev;
-        prev = cur;
-        cur = spent;
-    }
-    return prev[b.length];
-}
-/**
- * The capability an unknown one was most likely meant to be, or null when nothing is close enough.
- *
- * Two sources, in order. A known foreign name wins outright — `Glob` is not a typo for `find`, so no
- * distance metric would ever connect them, and that is exactly the case worth naming. Otherwise the
- * nearest catalog entry within a small edit distance, which catches `raed`/`serach` and stops well short
- * of guessing: the threshold scales with the name's length and never exceeds two.
- */
-export function suggestForUnknown(unknown, catalog) {
-    const foreign = FOREIGN_TOOL_NAMES[unknown.toLowerCase()];
-    if (foreign && catalog.has(foreign))
-        return foreign;
-    // Only among capabilities of the same namespace: suggesting `skill:review` for a mistyped tool name
-    // would be a worse message than none, because it points the author at the wrong kind of fix.
-    const ns = unknown.slice(0, unknown.indexOf(":") + 1);
-    if (!ns)
-        return null;
-    const bare = unknown.slice(ns.length);
-    const limit = Math.min(2, Math.floor(bare.length / 3));
-    if (limit < 1)
-        return null;
-    let best = null;
-    let bestDistance = limit + 1;
-    for (const candidate of catalog.all) {
-        if (!candidate.startsWith(ns))
-            continue;
-        const d = editDistance(bare, candidate.slice(ns.length));
-        if (d < bestDistance) {
-            bestDistance = d;
-            best = candidate;
-        }
-    }
-    return bestDistance <= limit ? best : null;
-}
-/**
- * Skill name -> absolute path, for `planSpawn`'s `--skill` flags (R-32).
- *
- * Derived from the catalog's own `source` field rather than re-scanning, so what a child is handed
- * cannot drift from what was discovered and offered. A skill entry without a source is omitted, which
- * makes it *unresolvable* rather than silently absent — `planDelegation` refuses on that, because a
- * grant naming a skill the child never receives is a ledger line that lies.
- */
-export function skillPathsFromCatalog(catalog) {
-    const paths = {};
-    for (const entry of catalog.entries) {
-        if (entry.kind !== "skill" || !entry.source)
-            continue;
-        paths[entry.capability.slice("skill:".length)] = entry.source;
-    }
-    return paths;
-}
-//# sourceMappingURL=catalog.js.map

package/dist/catalog.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"catalog.js","sourceRoot":"","sources":["../src/catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAwB,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAmB,MAAM,cAAc,CAAC;AACnF,OAAO,EAAE,qBAAqB,EAA8B,MAAM,gBAAgB,CAAC;AACnF,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAmBtD,gFAAgF;AAChF,MAAM,UAAU,iBAAiB,CAAC,QAAkB;IAClD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAS,gBAAgB,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClD,UAAU,EAAE,QAAQ,IAAI,EAAE;QAC1B,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,SAAmB,CAAC,CAAC,CAAE,WAAqB;KACzE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAW;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAC9C,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACjE,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,WAAyC;IACzE,OAAO,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3C,UAAU,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE;QAC7B,IAAI,EAAE,WAAoB;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA+B,EAAE,MAAe;IAC/E,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC;SACpC,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,EAAgB,EAAE,IAAI,EAAE,WAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/H,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,WAAW,CAAC,OAAuB;IACjD,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,OAAO;QAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IACtG,MAAM,IAAI,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,OAAO;QACL,OAAO,EAAE,IAAI;QACb,GAAG,EAAE,GAAG;QACR,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9E,GAAG,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAKlC;IACC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1D,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC;QACrB,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC;QAC1B,kGAAkG;QAClG,uGAAuG;QACvG,yGAAyG;QACzG,qEAAqE;QACrE,KAAK,CAAC,YAAY;YAChB,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,IAAI,CAC5C,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,CAAC,EAAE,KAAK,CAAC,YAAY,CAAC,EAC9C,GAAG,EAAE,CAAC,EAAoB,CAC3B;YACH,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAoB,CAAC;KAC1C,CAAC,CAAC;IACH,OAAO,WAAW,CAAC;QACjB,kGAAkG;QAClG,mGAAmG;QACnG,mGAAmG;QACnG,oGAAoG;QACpG,wCAAwC;QACxC,EAAE;QACF,mGAAmG;QACnG,oGAAoG;QACpG,oGAAoG;QACpG,uFAAuF;QACvF,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,IAAI,EAAW,EAAE,IAAI,EAAE,SAAkB,EAAE,CAAC,CAAC;QACtG,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,GAAG,MAAM;QACT,GAAG,iBAAiB,CAAC,WAAW,CAAC;QACjC,GAAG,UAAU;KACd,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAuB,EAAE,OAAgB;IAC3E,qGAAqG;IACrG,wGAAwG;IACxG,yGAAyG;IACzG,iGAAiG;IACjG,qGAAqG;IACrG,kFAAkF;IAClF,EAAE;IACF,uGAAuG;IACvG,yGAAyG;IACzG,0GAA0G;IAC1G,oGAAoG;IACpG,wGAAwG;IACxG,uGAAuG;IACvG,EAAE;IACF,qGAAqG;IACrG,2GAA2G;IAC3G,wGAAwG;IACxG,yGAAyG;IACzG,yGAAyG;IACzG,2GAA2G;IAC3G,sGAAsG;IACtG,0GAA0G;IAC1G,uGAAuG;IACvG,iBAAiB;IACjB,0GAA0G;IAC1G,2GAA2G;IAC3G,oEAAoE;IACpE,MAAM,MAAM,GAAG,CAAC,CAAa,EAAE,EAAE,CAC/B,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,cAAc,IAAI,CAAC,KAAK,kBAAkB;WAC/D,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,iBAAiB,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,kBAAkB,GAAqC;IAC3D,WAAW,EAAE,WAAW;IACxB,kBAAkB,EAAE,WAAW;IAC/B,eAAe,EAAE,WAAW;IAC5B,eAAe,EAAE,WAAW;IAC5B,gBAAgB,EAAE,YAAY;IAC9B,yBAAyB,EAAE,WAAW;IACtC,gBAAgB,EAAE,WAAW;CAC9B,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,YAAY,CAAC,CAAS,EAAE,CAAS;IACxC,iEAAiE;IACjE,MAAM,IAAI,GAAe;QACvB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,KAAK,CAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,IAAI,KAAK,CAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;KACxC,CAAC;IACF,IAAI,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACnB,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAElB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACnC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;gBACrE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;YACD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC;QACtB,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,GAAG,GAAG,CAAC;QACX,GAAG,GAAG,KAAK,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAmB,EAAE,OAAgB;IACrE,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC1D,IAAI,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAEpD,oGAAoG;IACpG,6FAA6F;IAC7F,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACtD,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3B,IAAI,IAAI,GAAsB,IAAI,CAAC;IACnC,IAAI,YAAY,GAAG,KAAK,GAAG,CAAC,CAAC;IAC7B,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;YAAE,SAAS;QACxC,MAAM,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,YAAY,EAAE,CAAC;YACrB,YAAY,GAAG,CAAC,CAAC;YACjB,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,YAAY,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAgB;IACpD,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM;YAAE,SAAS;QACtD,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/chain.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../src/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAIH;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,QAAY,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,SAAU,CAAC;AAEtC,qHAAqH;AACrH,eAAO,MAAM,WAAW,eAAe,CAAC;AAkCxC;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CA2BnD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAWtF;AAED,iGAAiG;AACjG,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,OAAO,kBAAkB,EAAE,mBAAmB,CAAC;IAC7D,SAAS,CAAC,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,gBAAgB,EAAE,eAAe,CAAA;KAAE,CAAC;CACxF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAEtF"}

package/dist/chain.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"chain.js","sourceRoot":"","sources":["../src/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE3C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AAEtC,qHAAqH;AACrH,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAC;AAExC;;;;;;;;;;;;GAYG;AACH,SAAS,SAAS,CAAC,IAAY,EAAE,MAAc;IAC7C,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAC3B,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM;QAAE,OAAO,IAAI,CAAC;IAEnD,IAAI,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEvE,MAAM,MAAM,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;IAC9B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,IAAI,GAAG,IAAI,GAAG,MAAM;YAAE,MAAM;QAChC,IAAI,IAAI,IAAI,CAAC;QACb,KAAK,GAAG,CAAC,CAAC;IACZ,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACtC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAEjD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,wGAAwG;IACxG,4GAA4G;IAC5G,+GAA+G;IAC/G,cAAc;IACd,MAAM,MAAM,GAAG,SAAS;QACtB,CAAC,CAAC,aAAa,KAAK,0DAA0D,iBAAiB,YAAY;YACzG,GAAG,IAAI,sDAAsD;QAC/D,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,6GAA6G;QAC7G,gGAAgG;QAChG,sGAAsG;QACtG,yBAAyB,KAAK,KAAK;QACnC,IAAI;QACJ,MAAM,CAAC,SAAS,EAAE;QAClB,UAAU,KAAK,KAAK;KACrB;SACE,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;SACjC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,QAA4B;IAC5E,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,mHAAmH;IACnH,+GAA+G;IAC/G,mHAAmH;IACnH,kHAAkH;IAClH,kHAAkH;IAClH,gGAAgG;IAChG,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,QAAQ,CAAC,UAAU,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1F,OAAO,GAAG,QAAQ,OAAO,MAAM,EAAE,CAAC;AACpC,CAAC;AAcD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,aAAa,CAAC,IAAe,EAAE,QAA4B;IACzE,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;AACjE,CAAC"}

package/dist/check-runner.d.ts

@@ -1,66 +0,0 @@
-import { type RetentionStatus } from "./execution-retention.ts";
-import { type CorrelationMetadata } from "./correlation.ts";
-import { type ValidatedWorkspace, type WorkspaceAccess } from "./workspace.ts";
-export interface CheckDefinition {
-    /** Absolute operator-owned executable. PATH lookup is deliberately not part of the contract. */
-    executable: string;
-    /** Exact argv elements. Never a shell command string. */
-    argv: string[];
-    /** Fixed non-sensitive environment values. */
-    env?: Record<string, string>;
-    /** Explicit inherited names. Sensitive names are still removed. */
-    inherit_env?: string[];
-    timeout_ms?: number;
-    max_output_bytes?: number;
-    /** Checks are assumed capable of writing unless the operator declares read. */
-    workspace_access?: WorkspaceAccess;
-}
-export interface CheckRegistry {
-    version: 1;
-    checks: Record<string, CheckDefinition>;
-}
-export interface CheckReceipt {
-    schema_version: "1.0";
-    receipt_id: string;
-    check_id: string;
-    executable: string;
-    executable_sha256: string;
-    argv: string[];
-    argv_sha256: string;
-    cwd: string;
-    cwd_sha256: string;
-    started_at: string;
-    ended_at: string;
-    exit_code: number | null;
-    signal: NodeJS.Signals | null;
-    timed_out: boolean;
-    aborted: boolean;
-    truncated: boolean;
-    output_sha256: string;
-    workspace_id: string;
-    workspace_access: WorkspaceAccess;
-    head_sha: string;
-    tree_sha: string;
-    correlation?: CorrelationMetadata;
-}
-export declare function buildCheckEnvironment(definition: CheckDefinition, inherited?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
-export declare function runNamedCheck(input: {
-    checkId: string;
-    registry: CheckRegistry;
-    workspace: ValidatedWorkspace;
-    correlation?: CorrelationMetadata;
-    inheritedEnv?: NodeJS.ProcessEnv;
-    signal?: AbortSignal;
-    leaseDir?: string;
-    ledgerPath?: string;
-    /** Explicit host archive boundary; defaults to PI_GRANTS_EXECUTION_ARCHIVE, never correlation. */
-    retentionDirectory?: string;
-    toolCallId?: string;
-}): Promise<{
-    output: string;
-    exitCode: number | null;
-    signal: NodeJS.Signals | null;
-    receipt: CheckReceipt;
-    retention: RetentionStatus;
-}>;
-//# sourceMappingURL=check-runner.d.ts.map

package/dist/check-runner.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"check-runner.d.ts","sourceRoot":"","sources":["../src/check-runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAyD,KAAK,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAIvH,OAAO,EAAwB,KAAK,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAUlF,OAAO,EAGL,KAAK,kBAAkB,EACvB,KAAK,eAAe,EAGrB,MAAM,gBAAgB,CAAC;AAIxB,MAAM,WAAW,eAAe;IAC9B,gGAAgG;IAChG,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,8CAA8C;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7B,mEAAmE;IACnE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,+EAA+E;IAC/E,gBAAgB,CAAC,EAAE,eAAe,CAAC;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CAAC,CAAC;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,KAAK,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,eAAe,CAAC;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,mBAAmB,CAAC;CACnC;AAKD,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,eAAe,EAC3B,SAAS,GAAE,MAAM,CAAC,UAAwB,GACzC,MAAM,CAAC,UAAU,CAWnB;AAkCD,wBAAsB,aAAa,CAAC,KAAK,EAAE;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,aAAa,CAAC;IACxB,SAAS,EAAE,kBAAkB,CAAC;IAC9B,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACjC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kGAAkG;IAClG,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB,GAAG,OAAO,CAAC;IACV,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IAC9B,OAAO,EAAE,YAAY,CAAC;IACtB,SAAS,EAAE,eAAe,CAAC;CAC5B,CAAC,CAsPD"}