protect-context 0.0.0-stage → 1.0.0

package/extension/lib/verify.ts

@@ -0,0 +1,96 @@
+/**
+ * Evidence ledger (.agent-guard/verify_runs.jsonl) formatting (SPEC §1 #2, §2).
+ * Pure logic — no pi imports; command execution lives in index.ts.
+ */
+
+import { appendJsonl, readJsonl, verifyRunsPath } from "./store.ts";
+import { CMD_DISPLAY_MAX, truncLine } from "./brief.ts";
+
+export interface VerifyRun {
+  id: string;
+  ts: string;
+  session: string;
+  cmd: string;
+  exit: number;
+  ok: boolean;
+  digest: string;
+  ms: number;
+}
+
+/** FROZEN digest rule: last ≤2000 chars of combined stdout+stderr. */
+export function digestOf(stdout: string, stderr: string): string {
+  return `${stdout}${stderr}`.slice(-2000);
+}
+
+// Timeout clamps (mirrors verify._clamp_timeout on the Python side): a
+// model-supplied timeout_s can never wedge the session.
+export const TIMEOUT_MIN_S = 1;
+export const TIMEOUT_MAX_S = 900;
+export const TIMEOUT_DEFAULT_S = 180;
+
+/** Clamp a timeout to [TIMEOUT_MIN_S, TIMEOUT_MAX_S]; non-finite input falls
+ *  back to the default. Fractions are truncated to whole seconds. */
+export function clampTimeoutS(v: number | null | undefined): number {
+  const t = typeof v === "number" && Number.isFinite(v) ? Math.trunc(v) : TIMEOUT_DEFAULT_S;
+  return Math.max(TIMEOUT_MIN_S, Math.min(TIMEOUT_MAX_S, t));
+}
+
+/** Next evidence id "ev-NNNN" based on the max existing suffix. */
+export function nextEvidenceId(runs: readonly unknown[]): string {
+  let max = 0;
+  for (const r of runs) {
+    const id = r && typeof r === "object" ? (r as { id?: unknown }).id : null;
+    const m = typeof id === "string" ? id.match(/^ev-(\d+)$/) : null;
+    if (m) max = Math.max(max, Number(m[1]));
+  }
+  return `ev-${String(max + 1).padStart(4, "0")}`;
+}
+
+export function readVerifyRuns(cwd: string): VerifyRun[] {
+  return readJsonl<unknown>(verifyRunsPath(cwd)).filter(isVerifyRun);
+}
+
+/** Raw object rows are used only for collision-free id allocation. A damaged
+ * row with a valid ev-NNNN id still reserves that id, even though typed views
+ * correctly ignore the rest of the malformed record. */
+export function readVerifyRowsForIds(cwd: string): unknown[] {
+  return readJsonl<unknown>(verifyRunsPath(cwd));
+}
+
+function isVerifyRun(value: unknown): value is VerifyRun {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+  const row = value as Record<string, unknown>;
+  return (
+    typeof row.id === "string" &&
+    typeof row.ts === "string" &&
+    typeof row.session === "string" &&
+    typeof row.cmd === "string" &&
+    typeof row.exit === "number" &&
+    Number.isFinite(row.exit) &&
+    typeof row.ok === "boolean" &&
+    typeof row.digest === "string" &&
+    typeof row.ms === "number" &&
+    Number.isFinite(row.ms)
+  );
+}
+
+export function appendVerifyRun(cwd: string, run: VerifyRun): void {
+  appendJsonl(verifyRunsPath(cwd), run);
+}
+
+export function formatMs(ms: number | null): string {
+  if (ms === null || !Number.isFinite(ms)) return "?s";
+  return `${(ms / 1000).toFixed(1)}s`;
+}
+
+/** One compact evidence line: `ev-0002 exit=0 'npm test' 3.2s`. The command
+ *  is truncated (goal #12) — never inject an unbounded one-liner. */
+export function formatVerifyLine(run: VerifyRun): string {
+  const id = truncLine(run.id, 40) || "unknown-id";
+  const exit = Number.isFinite(run.exit) ? run.exit : "?";
+  return `${id} exit=${exit} '${truncLine(run.cmd, CMD_DISPLAY_MAX)}' ${formatMs(run.ms)}`;
+}
+
+export function runsForSession(runs: VerifyRun[], session: string): VerifyRun[] {
+  return runs.filter((r) => r.session === session);
+}

package/extension/lib/widget.ts

@@ -0,0 +1,28 @@
+/**
+ * Persistent single-line status widget (SPEC §5).
+ * Pure logic — no pi imports.
+ *
+ * Format (FROZEN example): `PC Δ+123L/4f 1loop ev2 ctx41%`
+ */
+
+export interface WidgetData {
+  diffLines: number;
+  diffFiles: number;
+  /** False until/unless the Git scope audit succeeds. */
+  diffAvailable?: boolean;
+  /** True when the line count stopped at a bounded untracked scan. */
+  diffLowerBound?: boolean;
+  /** Number of commands currently in a failing loop. */
+  loops: number;
+  /** Evidence (verify runs) recorded this session. */
+  evidence: number;
+  ctxPct: number | null;
+}
+
+export function renderWidget(d: WidgetData): string {
+  const pct = d.ctxPct === null ? 0 : Math.round(d.ctxPct);
+  const diff = d.diffAvailable === false
+    ? "Δ?"
+    : `${d.diffLowerBound ? "Δ≥" : "Δ+"}${d.diffLines}L/${d.diffFiles}f`;
+  return `PC ${diff} ${d.loops}loop ev${d.evidence} ctx${pct}%`;
+}

package/package.json

@@ -1,6 +1,56 @@
 {
   "name": "protect-context",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "1.0.0",
+  "description": "Pi extension that adds agent guardrails: context brief, verification evidence, loop blocking, diff-scope warnings, and a durable journal.",
+  "type": "module",
+  "license": "MIT",
+  "keywords": [
+    "pi-package",
+    "pi-extension",
+    "pi",
+    "guardrails",
+    "agent-safety",
+    "context"
+  ],
+  "homepage": "https://github.com/XJTLUmedia/Protect-Context-Pi-Coding-Agent",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/XJTLUmedia/Protect-Context-Pi-Coding-Agent.git"
+  },
+  "bugs": {
+    "url": "https://github.com/XJTLUmedia/Protect-Context-Pi-Coding-Agent/issues"
+  },
+  "pi": {
+    "extensions": [
+      "./extension/index.ts"
+    ],
+    "image": "./preview.png"
+  },
+  "files": [
+    "extension/index.ts",
+    "extension/lib",
+    "preview.png",
+    "LICENSE"
+  ],
+  "engines": {
+    "node": ">=22.19.0"
+  },
+  "scripts": {
+    "test": "node --experimental-strip-types --test extension/test/*.test.ts",
+    "typecheck": "tsc --noEmit -p extension/tsconfig.json",
+    "check": "npm run typecheck && npm test",
+    "prepublishOnly": "npm run check"
+  },
+  "peerDependencies": {
+    "@earendil-works/pi-ai": "*",
+    "@earendil-works/pi-coding-agent": "*",
+    "typebox": "*"
+  },
+  "devDependencies": {
+    "@earendil-works/pi-ai": "0.84.4",
+    "@earendil-works/pi-coding-agent": "0.84.4",
+    "@types/node": "22.20.1",
+    "typebox": "1.3.23",
+    "typescript": "7.0.2"
+  }
+}