pluribus-context 0.3.21 → 0.3.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (93) hide show
  1. package/CHANGELOG.md +31 -3
  2. package/README.md +2 -2
  3. package/docs/community-review-packet.md +4 -2
  4. package/docs/context-budget-receipts.md +150 -0
  5. package/docs/context-input-evidence.md +397 -0
  6. package/docs/context-receipts-for-agent-observability.md +177 -0
  7. package/docs/orchestration-search-receipts.md +102 -0
  8. package/docs/portability-fidelity-report.md +10 -6
  9. package/examples/context-input-evidence/AGENTS.md +12 -0
  10. package/examples/context-input-evidence/agent-overlay-log.jsonl +4 -0
  11. package/examples/context-input-evidence/agent-overlay-otel-trace.json +548 -0
  12. package/examples/context-input-evidence/agent-overlay-receipt.ndjson +3 -0
  13. package/examples/context-input-evidence/agentgateway-progressive-disclosure-otel-trace.json +393 -0
  14. package/examples/context-input-evidence/agentgateway-progressive-disclosure-receipt.ndjson +4 -0
  15. package/examples/context-input-evidence/brain-remediation-otel-trace.json +645 -0
  16. package/examples/context-input-evidence/brain-remediation-receipt.ndjson +7 -0
  17. package/examples/context-input-evidence/claudekit-mcp-manager-otel-trace.json +417 -0
  18. package/examples/context-input-evidence/claudekit-mcp-manager-receipt.ndjson +5 -0
  19. package/examples/context-input-evidence/cli-progressive-disclosure-otel-trace.json +399 -0
  20. package/examples/context-input-evidence/cli-progressive-disclosure-receipt.ndjson +4 -0
  21. package/examples/context-input-evidence/compaction-otel-trace.json +711 -0
  22. package/examples/context-input-evidence/compaction-receipt.ndjson +6 -0
  23. package/examples/context-input-evidence/context-selection-otel-trace.json +627 -0
  24. package/examples/context-input-evidence/context-selection-receipt.ndjson +7 -0
  25. package/examples/context-input-evidence/convert-agent-overlay-log.mjs +156 -0
  26. package/examples/context-input-evidence/convert-agentgateway-progressive-disclosure-log.mjs +251 -0
  27. package/examples/context-input-evidence/convert-brain-remediation-log.mjs +241 -0
  28. package/examples/context-input-evidence/convert-claudekit-mcp-manager-log.mjs +253 -0
  29. package/examples/context-input-evidence/convert-cli-progressive-disclosure-log.mjs +251 -0
  30. package/examples/context-input-evidence/convert-compaction-log.mjs +224 -0
  31. package/examples/context-input-evidence/convert-context-selection-log.mjs +247 -0
  32. package/examples/context-input-evidence/convert-mcp-tool-search-log.mjs +242 -0
  33. package/examples/context-input-evidence/convert-memory-consolidation-log.mjs +240 -0
  34. package/examples/context-input-evidence/convert-memory-governance-delete-log.mjs +223 -0
  35. package/examples/context-input-evidence/convert-memory-log.mjs +226 -0
  36. package/examples/context-input-evidence/convert-memory-provenance-log.mjs +263 -0
  37. package/examples/context-input-evidence/convert-secret-scanning-log.mjs +233 -0
  38. package/examples/context-input-evidence/convert-session-log.mjs +186 -0
  39. package/examples/context-input-evidence/convert-skill-log.mjs +161 -0
  40. package/examples/context-input-evidence/convert-skill-registry-log.mjs +246 -0
  41. package/examples/context-input-evidence/convert-skill-routing-log.mjs +253 -0
  42. package/examples/context-input-evidence/convert-subagent-context-budget-log.mjs +267 -0
  43. package/examples/context-input-evidence/convert-subagent-delegation-log.mjs +264 -0
  44. package/examples/context-input-evidence/export-otel-trace.mjs +128 -0
  45. package/examples/context-input-evidence/generate-receipt.mjs +188 -0
  46. package/examples/context-input-evidence/mcp-tool-search-otel-trace.json +477 -0
  47. package/examples/context-input-evidence/mcp-tool-search-receipt.ndjson +5 -0
  48. package/examples/context-input-evidence/memory-consolidation-otel-trace.json +492 -0
  49. package/examples/context-input-evidence/memory-consolidation-receipt.ndjson +4 -0
  50. package/examples/context-input-evidence/memory-governance-delete-otel-trace.json +614 -0
  51. package/examples/context-input-evidence/memory-governance-delete-receipt.ndjson +5 -0
  52. package/examples/context-input-evidence/memory-otel-trace.json +645 -0
  53. package/examples/context-input-evidence/memory-provenance-otel-trace.json +711 -0
  54. package/examples/context-input-evidence/memory-provenance-receipt.ndjson +5 -0
  55. package/examples/context-input-evidence/memory-receipt.ndjson +4 -0
  56. package/examples/context-input-evidence/otel-trace.json +1119 -0
  57. package/examples/context-input-evidence/receipt.ndjson +6 -0
  58. package/examples/context-input-evidence/sample-agentgateway-progressive-disclosure-log.jsonl +5 -0
  59. package/examples/context-input-evidence/sample-brain-remediation-log.jsonl +9 -0
  60. package/examples/context-input-evidence/sample-claudekit-mcp-manager-log.jsonl +6 -0
  61. package/examples/context-input-evidence/sample-cli-progressive-disclosure-log.jsonl +5 -0
  62. package/examples/context-input-evidence/sample-compaction-log.jsonl +7 -0
  63. package/examples/context-input-evidence/sample-context-selection-log.jsonl +7 -0
  64. package/examples/context-input-evidence/sample-mcp-tool-search-log.jsonl +6 -0
  65. package/examples/context-input-evidence/sample-memory-consolidation-log.jsonl +5 -0
  66. package/examples/context-input-evidence/sample-memory-governance-delete-log.jsonl +6 -0
  67. package/examples/context-input-evidence/sample-memory-provenance-log.jsonl +6 -0
  68. package/examples/context-input-evidence/sample-memory-retrieval-log.jsonl +6 -0
  69. package/examples/context-input-evidence/sample-secret-scanning-log.jsonl +7 -0
  70. package/examples/context-input-evidence/sample-session-log.jsonl +6 -0
  71. package/examples/context-input-evidence/sample-skill-registry-log.jsonl +5 -0
  72. package/examples/context-input-evidence/sample-skill-routing-log.jsonl +7 -0
  73. package/examples/context-input-evidence/sample-subagent-context-budget-log.jsonl +6 -0
  74. package/examples/context-input-evidence/sample-subagent-delegation-log.jsonl +5 -0
  75. package/examples/context-input-evidence/secret-scanning-otel-trace.json +794 -0
  76. package/examples/context-input-evidence/secret-scanning-receipt.ndjson +6 -0
  77. package/examples/context-input-evidence/session-otel-trace.json +411 -0
  78. package/examples/context-input-evidence/session-receipt.ndjson +2 -0
  79. package/examples/context-input-evidence/skill-invocation-log.jsonl +4 -0
  80. package/examples/context-input-evidence/skill-otel-trace.json +548 -0
  81. package/examples/context-input-evidence/skill-receipt.ndjson +3 -0
  82. package/examples/context-input-evidence/skill-registry-otel-trace.json +471 -0
  83. package/examples/context-input-evidence/skill-registry-receipt.ndjson +5 -0
  84. package/examples/context-input-evidence/skill-routing-otel-trace.json +567 -0
  85. package/examples/context-input-evidence/skill-routing-receipt.ndjson +6 -0
  86. package/examples/context-input-evidence/subagent-context-budget-otel-trace.json +507 -0
  87. package/examples/context-input-evidence/subagent-context-budget-receipt.ndjson +5 -0
  88. package/examples/context-input-evidence/subagent-delegation-otel-trace.json +388 -0
  89. package/examples/context-input-evidence/subagent-delegation-receipt.ndjson +4 -0
  90. package/package.json +6 -2
  91. package/schemas/audit-result.schema.json +468 -43
  92. package/src/commands/audit.js +105 -5
  93. package/src/utils/version.js +1 -1
@@ -0,0 +1,393 @@
1
+ {
2
+ "resourceSpans": [
3
+ {
4
+ "resource": {
5
+ "attributes": [
6
+ {
7
+ "key": "service.name",
8
+ "value": {
9
+ "stringValue": "pluribus-agentgateway-progressive-disclosure-receipt-demo"
10
+ }
11
+ },
12
+ {
13
+ "key": "service.version",
14
+ "value": {
15
+ "stringValue": "0.0.0-fixture"
16
+ }
17
+ },
18
+ {
19
+ "key": "deployment.environment.name",
20
+ "value": {
21
+ "stringValue": "local-fixture"
22
+ }
23
+ }
24
+ ]
25
+ },
26
+ "scopeSpans": [
27
+ {
28
+ "scope": {
29
+ "name": "pluribus.context_input_evidence.agentgateway_progressive_disclosure_demo",
30
+ "version": "0.0.0-fixture"
31
+ },
32
+ "spans": [
33
+ {
34
+ "traceId": "6c7f27e5402aa7055eebe070133c66af",
35
+ "spanId": "fb7787cf8d274469",
36
+ "parentSpanId": "",
37
+ "name": "agent.session.mcp.gateway.progressive_disclosure",
38
+ "kind": 1,
39
+ "startTimeUnixNano": "1779631505000000000",
40
+ "endTimeUnixNano": "1779631550000000000",
41
+ "attributes": [
42
+ {
43
+ "key": "session.id",
44
+ "value": {
45
+ "stringValue": "sess_agentgateway_2026_05_24"
46
+ }
47
+ },
48
+ {
49
+ "key": "gen_ai.conversation.id",
50
+ "value": {
51
+ "stringValue": "conv_private_gateway_triage"
52
+ }
53
+ },
54
+ {
55
+ "key": "agent.name",
56
+ "value": {
57
+ "stringValue": "Claude Code"
58
+ }
59
+ },
60
+ {
61
+ "key": "workspace.name",
62
+ "value": {
63
+ "stringValue": "gateway-demo-workspace"
64
+ }
65
+ },
66
+ {
67
+ "key": "gen_ai.request.model",
68
+ "value": {
69
+ "stringValue": "claude-sonnet-4.5"
70
+ }
71
+ },
72
+ {
73
+ "key": "mcp.gateway.name",
74
+ "value": {
75
+ "stringValue": "agentgateway"
76
+ }
77
+ },
78
+ {
79
+ "key": "mcp.gateway.tool_mode",
80
+ "value": {
81
+ "stringValue": "Search"
82
+ }
83
+ },
84
+ {
85
+ "key": "mcp.gateway.disclosure.strategy",
86
+ "value": {
87
+ "stringValue": "visible_index_then_get_tool_invoke_tool"
88
+ }
89
+ }
90
+ ],
91
+ "events": [
92
+ {
93
+ "name": "mcp.gateway.index.loaded",
94
+ "timeUnixNano": "1779631505000000000",
95
+ "attributes": [
96
+ {
97
+ "key": "session.id",
98
+ "value": {
99
+ "stringValue": "sess_agentgateway_2026_05_24"
100
+ }
101
+ },
102
+ {
103
+ "key": "gen_ai.conversation.id",
104
+ "value": {
105
+ "stringValue": "conv_private_gateway_triage"
106
+ }
107
+ },
108
+ {
109
+ "key": "agent.name",
110
+ "value": {
111
+ "stringValue": "Claude Code"
112
+ }
113
+ },
114
+ {
115
+ "key": "mcp.gateway.name",
116
+ "value": {
117
+ "stringValue": "agentgateway"
118
+ }
119
+ },
120
+ {
121
+ "key": "mcp.gateway.tool_mode",
122
+ "value": {
123
+ "stringValue": "Search"
124
+ }
125
+ },
126
+ {
127
+ "key": "mcp.gateway.visible_tools_hash",
128
+ "value": {
129
+ "stringValue": "sha256:742f6c98b38cadf004347b7a5f49d88cd430652fd2876aa6d36bda085f9c9d87"
130
+ }
131
+ },
132
+ {
133
+ "key": "mcp.gateway.visible_tool_count",
134
+ "value": {
135
+ "intValue": "2"
136
+ }
137
+ },
138
+ {
139
+ "key": "mcp.gateway.upstream_server_hash",
140
+ "value": {
141
+ "stringValue": "sha256:84697d2be544"
142
+ }
143
+ },
144
+ {
145
+ "key": "mcp.gateway.upstream_tool_count_bucket",
146
+ "value": {
147
+ "stringValue": "under_100"
148
+ }
149
+ },
150
+ {
151
+ "key": "mcp.gateway.full_schema_token_count_bucket",
152
+ "value": {
153
+ "stringValue": "over_50k"
154
+ }
155
+ },
156
+ {
157
+ "key": "mcp.gateway.visible_index_token_count_bucket",
158
+ "value": {
159
+ "stringValue": "under_1k"
160
+ }
161
+ },
162
+ {
163
+ "key": "mcp.gateway.full_upstream_schemas_loaded_at_startup",
164
+ "value": {
165
+ "boolValue": false
166
+ }
167
+ },
168
+ {
169
+ "key": "privacy.raw_index_recorded",
170
+ "value": {
171
+ "boolValue": false
172
+ }
173
+ },
174
+ {
175
+ "key": "privacy.raw_upstream_tool_schemas_recorded",
176
+ "value": {
177
+ "boolValue": false
178
+ }
179
+ }
180
+ ]
181
+ },
182
+ {
183
+ "name": "mcp.gateway.tool_schema.loaded",
184
+ "timeUnixNano": "1779631521000000000",
185
+ "attributes": [
186
+ {
187
+ "key": "session.id",
188
+ "value": {
189
+ "stringValue": "sess_agentgateway_2026_05_24"
190
+ }
191
+ },
192
+ {
193
+ "key": "gen_ai.conversation.id",
194
+ "value": {
195
+ "stringValue": "conv_private_gateway_triage"
196
+ }
197
+ },
198
+ {
199
+ "key": "mcp.gateway.name",
200
+ "value": {
201
+ "stringValue": "agentgateway"
202
+ }
203
+ },
204
+ {
205
+ "key": "mcp.tool.name_hash",
206
+ "value": {
207
+ "stringValue": "sha256:196b075dce74"
208
+ }
209
+ },
210
+ {
211
+ "key": "mcp.tool.schema_command_hash",
212
+ "value": {
213
+ "stringValue": "sha256:0773d87b947b"
214
+ }
215
+ },
216
+ {
217
+ "key": "mcp.tool.schema_hash",
218
+ "value": {
219
+ "stringValue": "sha256:3ce3c1f0b68c15d6dc631b29aca16319aefb02cef4280e7694d1f7b5368ec05b"
220
+ }
221
+ },
222
+ {
223
+ "key": "mcp.tool.schema_token_count_bucket",
224
+ "value": {
225
+ "stringValue": "under_10k"
226
+ }
227
+ },
228
+ {
229
+ "key": "mcp.tool.schema_load_reason_hash",
230
+ "value": {
231
+ "stringValue": "sha256:581058a001e2"
232
+ }
233
+ },
234
+ {
235
+ "key": "mcp.tool.unselected_tools_hash",
236
+ "value": {
237
+ "stringValue": "sha256:51601f67afad8411ac8e48c35e977a2db469176845e28ddc56547cbb4c53a800"
238
+ }
239
+ },
240
+ {
241
+ "key": "mcp.tool.unselected_schema_loaded_count",
242
+ "value": {
243
+ "intValue": "0"
244
+ }
245
+ },
246
+ {
247
+ "key": "privacy.raw_tool_schema_recorded",
248
+ "value": {
249
+ "boolValue": false
250
+ }
251
+ },
252
+ {
253
+ "key": "privacy.raw_unselected_tool_names_recorded",
254
+ "value": {
255
+ "boolValue": false
256
+ }
257
+ }
258
+ ]
259
+ },
260
+ {
261
+ "name": "mcp.gateway.tool_invoked",
262
+ "timeUnixNano": "1779631546000000000",
263
+ "attributes": [
264
+ {
265
+ "key": "session.id",
266
+ "value": {
267
+ "stringValue": "sess_agentgateway_2026_05_24"
268
+ }
269
+ },
270
+ {
271
+ "key": "gen_ai.conversation.id",
272
+ "value": {
273
+ "stringValue": "conv_private_gateway_triage"
274
+ }
275
+ },
276
+ {
277
+ "key": "mcp.gateway.name",
278
+ "value": {
279
+ "stringValue": "agentgateway"
280
+ }
281
+ },
282
+ {
283
+ "key": "mcp.tool.name_hash",
284
+ "value": {
285
+ "stringValue": "sha256:196b075dce74"
286
+ }
287
+ },
288
+ {
289
+ "key": "mcp.tool_call.status",
290
+ "value": {
291
+ "stringValue": "success"
292
+ }
293
+ },
294
+ {
295
+ "key": "mcp.tool_call.arguments_hash",
296
+ "value": {
297
+ "stringValue": "sha256:9710bd00830be1b091516f875629abef5db0cc09d78a84a7a2791c952a126a29"
298
+ }
299
+ },
300
+ {
301
+ "key": "mcp.tool_call.result_sample_hash",
302
+ "value": {
303
+ "stringValue": "sha256:af08ddc157885f2e617447813791c0ee2a2d596b5ccb409917f45a19a0b5969e"
304
+ }
305
+ },
306
+ {
307
+ "key": "mcp.tool_call.result_count_bucket",
308
+ "value": {
309
+ "stringValue": "under_5"
310
+ }
311
+ },
312
+ {
313
+ "key": "mcp.tool_call.latency_ms",
314
+ "value": {
315
+ "intValue": "740"
316
+ }
317
+ },
318
+ {
319
+ "key": "mcp.tool_call.response_size_bucket",
320
+ "value": {
321
+ "stringValue": "under_10kb"
322
+ }
323
+ },
324
+ {
325
+ "key": "privacy.raw_tool_arguments_recorded",
326
+ "value": {
327
+ "boolValue": false
328
+ }
329
+ },
330
+ {
331
+ "key": "privacy.raw_tool_results_recorded",
332
+ "value": {
333
+ "boolValue": false
334
+ }
335
+ }
336
+ ]
337
+ },
338
+ {
339
+ "name": "mcp.gateway.session.completed",
340
+ "timeUnixNano": "1779631550000000000",
341
+ "attributes": [
342
+ {
343
+ "key": "session.id",
344
+ "value": {
345
+ "stringValue": "sess_agentgateway_2026_05_24"
346
+ }
347
+ },
348
+ {
349
+ "key": "gen_ai.conversation.id",
350
+ "value": {
351
+ "stringValue": "conv_private_gateway_triage"
352
+ }
353
+ },
354
+ {
355
+ "key": "mcp.gateway.session.status",
356
+ "value": {
357
+ "stringValue": "completed"
358
+ }
359
+ },
360
+ {
361
+ "key": "mcp.gateway.full_upstream_schemas_loaded",
362
+ "value": {
363
+ "boolValue": false
364
+ }
365
+ },
366
+ {
367
+ "key": "mcp.gateway.loaded_tool_schema_count",
368
+ "value": {
369
+ "intValue": "1"
370
+ }
371
+ },
372
+ {
373
+ "key": "mcp.gateway.invoked_tool_count",
374
+ "value": {
375
+ "intValue": "1"
376
+ }
377
+ },
378
+ {
379
+ "key": "mcp.gateway.progressive_disclosure.audit_gap",
380
+ "value": {
381
+ "stringValue": "receipt_proves_gateway_disclosure_boundary_not_tool_result_correctness"
382
+ }
383
+ }
384
+ ]
385
+ }
386
+ ]
387
+ }
388
+ ]
389
+ }
390
+ ]
391
+ }
392
+ ]
393
+ }
@@ -0,0 +1,4 @@
1
+ {"trace_id":"6c7f27e5402aa7055eebe070133c66af","span_id":"fb7787cf8d274469","name":"mcp.gateway.index.loaded","time":"2026-05-24T14:05:05.000Z","attributes":{"session.id":"sess_agentgateway_2026_05_24","gen_ai.conversation.id":"conv_private_gateway_triage","agent.name":"Claude Code","mcp.gateway.name":"agentgateway","mcp.gateway.tool_mode":"Search","mcp.gateway.visible_tools_hash":"sha256:742f6c98b38cadf004347b7a5f49d88cd430652fd2876aa6d36bda085f9c9d87","mcp.gateway.visible_tool_count":2,"mcp.gateway.upstream_server_hash":"sha256:84697d2be544","mcp.gateway.upstream_tool_count_bucket":"under_100","mcp.gateway.full_schema_token_count_bucket":"over_50k","mcp.gateway.visible_index_token_count_bucket":"under_1k","mcp.gateway.full_upstream_schemas_loaded_at_startup":false,"privacy.raw_index_recorded":false,"privacy.raw_upstream_tool_schemas_recorded":false}}
2
+ {"trace_id":"6c7f27e5402aa7055eebe070133c66af","span_id":"fb7787cf8d274469","name":"mcp.gateway.tool_schema.loaded","time":"2026-05-24T14:05:21.000Z","attributes":{"session.id":"sess_agentgateway_2026_05_24","gen_ai.conversation.id":"conv_private_gateway_triage","mcp.gateway.name":"agentgateway","mcp.tool.name_hash":"sha256:196b075dce74","mcp.tool.schema_command_hash":"sha256:0773d87b947b","mcp.tool.schema_hash":"sha256:3ce3c1f0b68c15d6dc631b29aca16319aefb02cef4280e7694d1f7b5368ec05b","mcp.tool.schema_token_count_bucket":"under_10k","mcp.tool.schema_load_reason_hash":"sha256:581058a001e2","mcp.tool.unselected_tools_hash":"sha256:51601f67afad8411ac8e48c35e977a2db469176845e28ddc56547cbb4c53a800","mcp.tool.unselected_schema_loaded_count":0,"privacy.raw_tool_schema_recorded":false,"privacy.raw_unselected_tool_names_recorded":false}}
3
+ {"trace_id":"6c7f27e5402aa7055eebe070133c66af","span_id":"fb7787cf8d274469","name":"mcp.gateway.tool_invoked","time":"2026-05-24T14:05:46.000Z","attributes":{"session.id":"sess_agentgateway_2026_05_24","gen_ai.conversation.id":"conv_private_gateway_triage","mcp.gateway.name":"agentgateway","mcp.tool.name_hash":"sha256:196b075dce74","mcp.tool_call.status":"success","mcp.tool_call.arguments_hash":"sha256:9710bd00830be1b091516f875629abef5db0cc09d78a84a7a2791c952a126a29","mcp.tool_call.result_sample_hash":"sha256:af08ddc157885f2e617447813791c0ee2a2d596b5ccb409917f45a19a0b5969e","mcp.tool_call.result_count_bucket":"under_5","mcp.tool_call.latency_ms":740,"mcp.tool_call.response_size_bucket":"under_10kb","privacy.raw_tool_arguments_recorded":false,"privacy.raw_tool_results_recorded":false}}
4
+ {"trace_id":"6c7f27e5402aa7055eebe070133c66af","span_id":"fb7787cf8d274469","name":"mcp.gateway.session.completed","time":"2026-05-24T14:05:50.000Z","attributes":{"session.id":"sess_agentgateway_2026_05_24","gen_ai.conversation.id":"conv_private_gateway_triage","mcp.gateway.session.status":"completed","mcp.gateway.full_upstream_schemas_loaded":false,"mcp.gateway.loaded_tool_schema_count":1,"mcp.gateway.invoked_tool_count":1,"mcp.gateway.progressive_disclosure.audit_gap":"receipt_proves_gateway_disclosure_boundary_not_tool_result_correctness"}}