@aperant/framework 0.8.1 → 0.8.6

package/dist/cli/verify-proof/runtime-detect.mjs

@@ -0,0 +1,209 @@
+/**
+ * runtime-detect.mjs — pure project-shape capability detection.
+ *
+ * Extracted from packages/core/src/prompts/prompt-loader.ts:572-595 so the
+ * framework CLI is self-contained (no @aperant/core dep). Same heuristics:
+ * read package.json's dependencies + devDependencies, return a capability
+ * record the resolver can score against.
+ *
+ * Pattern: pure data in → pure data out. No filesystem walking, no exec.
+ * Use loadRuntimeCapabilities(projectDir) for the cwd-rooted variant.
+ *
+ * v0.8.6 — `loadRuntimeCapabilities` now ALSO walks `apps/*` by default
+ * (configurable via the second arg `{monorepo_globs}`) and OR-merges
+ * each match's `package.json` capabilities with the root. The default
+ * `['apps/*']` matches the canonical Aperant monorepo layout; adopters
+ * whose monorepo lives elsewhere (e.g. `packages/apps/*`) pass a
+ * custom `monorepo_globs`. Setting `monorepo_globs: []` disables the
+ * walk entirely (root-only escape hatch).
+ */
+import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
+import { join, resolve } from 'node:path';
+/**
+ * @typedef {Object} RuntimeCapabilities
+ * @property {boolean} is_electron
+ * @property {boolean} is_tauri
+ * @property {boolean} is_nextjs
+ * @property {boolean} is_nuxt
+ * @property {boolean} is_web_frontend
+ * @property {boolean} is_expo
+ * @property {boolean} is_react_native
+ * @property {boolean} has_node
+ */
+/** A capability record with every flag defaulted to false. */
+function emptyCapabilities() {
+    return {
+        is_electron: false,
+        is_tauri: false,
+        is_nextjs: false,
+        is_nuxt: false,
+        is_web_frontend: false,
+        is_expo: false,
+        is_react_native: false,
+        has_node: false,
+    };
+}
+/**
+ * Detect runtime capabilities from a parsed package.json object.
+ *
+ * @param {Record<string, unknown> | null} packageJson
+ * @returns {RuntimeCapabilities}
+ */
+export function detectFromPackageJson(packageJson) {
+    const capabilities = emptyCapabilities();
+    if (packageJson === null || typeof packageJson !== 'object')
+        return capabilities;
+    const allDeps = {
+        ...(packageJson.dependencies ?? {}) /** @type {Record<string,string>} */,
+        ...(packageJson.devDependencies ?? {}) /** @type {Record<string,string>} */,
+    };
+    const deps = new Set(Object.keys(allDeps).map((k) => k.toLowerCase()));
+    if (deps.has('electron') || [...deps].some((d) => d.startsWith('@electron'))) {
+        capabilities.is_electron = true;
+    }
+    if (deps.has('@tauri-apps/api') || deps.has('tauri')) {
+        capabilities.is_tauri = true;
+    }
+    if (deps.has('expo'))
+        capabilities.is_expo = true;
+    if (deps.has('react-native'))
+        capabilities.is_react_native = true;
+    // Web frontends — react/vue/svelte/angular/solid → frontend. BUT: an
+    // Electron app commonly bundles React as its renderer; in that case the
+    // runtime is "electron", not "web_frontend". Electron + react-native +
+    // expo + tauri all win over the web flag.
+    const isNativeContainer = capabilities.is_electron ||
+        capabilities.is_tauri ||
+        capabilities.is_react_native ||
+        capabilities.is_expo;
+    const webFrameworks = ['react', 'vue', 'svelte', 'angular', 'solid'];
+    if (!isNativeContainer && webFrameworks.some((f) => deps.has(f))) {
+        capabilities.is_web_frontend = true;
+    }
+    if (deps.has('next')) {
+        capabilities.is_nextjs = true;
+        capabilities.is_web_frontend = true;
+    }
+    if (deps.has('nuxt')) {
+        capabilities.is_nuxt = true;
+        capabilities.is_web_frontend = true;
+    }
+    if (deps.has('vite') && !isNativeContainer) {
+        capabilities.is_web_frontend = true;
+    }
+    // Node-ish? Anything with a package.json + an entry point counts.
+    if (typeof packageJson.main === 'string' || typeof packageJson.module === 'string') {
+        capabilities.has_node = true;
+    }
+    if (!capabilities.has_node && packageJson.scripts && typeof packageJson.scripts === 'object') {
+        capabilities.has_node = true;
+    }
+    return capabilities;
+}
+/**
+ * Load and detect capabilities from a project directory's package.json.
+ * v0.8.6 — also walks `monorepo_globs` (default `['apps/*']`) and
+ * OR-merges each match's capabilities with the root.
+ *
+ * @param {string} projectDir
+ * @param {{monorepo_globs?: string[]}} [opts]
+ * @returns {RuntimeCapabilities}
+ */
+export function loadRuntimeCapabilities(projectDir, opts) {
+    const root = resolve(projectDir);
+    const rootPkgPath = join(root, 'package.json');
+    let rootCaps = emptyCapabilities();
+    if (existsSync(rootPkgPath)) {
+        try {
+            rootCaps = detectFromPackageJson(JSON.parse(readFileSync(rootPkgPath, 'utf-8')));
+        }
+        catch {
+            /* fall through with empty caps */
+        }
+    }
+    // Default to the canonical Aperant monorepo layout. Passing `[]`
+    // disables the walk entirely (root-only escape hatch per spec ID-05).
+    const globs = opts && Array.isArray(opts.monorepo_globs) ? opts.monorepo_globs : ['apps/*'];
+    if (globs.length === 0)
+        return rootCaps;
+    let merged = rootCaps;
+    for (const glob of globs) {
+        const matches = expandSimpleGlob(root, glob);
+        for (const dir of matches) {
+            const childPkgPath = join(dir, 'package.json');
+            if (!existsSync(childPkgPath))
+                continue;
+            try {
+                const childCaps = detectFromPackageJson(JSON.parse(readFileSync(childPkgPath, 'utf-8')));
+                merged = orMergeCapabilities(merged, childCaps);
+            }
+            catch {
+                /* skip malformed package.json */
+            }
+        }
+    }
+    return merged;
+}
+/**
+ * Expand a simple `prefix/*` glob against the root. Supports ONLY the
+ * `<dir>/*` shape (matches each direct subdirectory of `<dir>`). Other
+ * glob syntax is intentionally rejected — v1 keeps the dep surface
+ * small. Fails closed on malformed patterns (returns []).
+ *
+ * @param {string} root
+ * @param {string} glob
+ * @returns {string[]}
+ */
+function expandSimpleGlob(root, glob) {
+    if (typeof glob !== 'string' || !glob.endsWith('/*'))
+        return [];
+    const prefix = glob.slice(0, -2);
+    if (prefix.length === 0 || prefix.includes('*'))
+        return [];
+    const dir = join(root, prefix);
+    if (!existsSync(dir))
+        return [];
+    let entries;
+    try {
+        entries = readdirSync(dir);
+    }
+    catch {
+        return [];
+    }
+    const matches = [];
+    for (const name of entries) {
+        const sub = join(dir, name);
+        try {
+            if (statSync(sub).isDirectory())
+                matches.push(sub);
+        }
+        catch {
+            /* skip unreadable entries */
+        }
+    }
+    return matches;
+}
+/**
+ * Boolean OR-merge of two capability records. Any flag true in either
+ * input is true in the output. The "Electron wins over web" rule from
+ * `detectFromPackageJson` is preserved when this is called repeatedly —
+ * each child's flags are honest about that child's own shape, and the
+ * OR-merge just unions them.
+ *
+ * @param {RuntimeCapabilities} a
+ * @param {RuntimeCapabilities} b
+ * @returns {RuntimeCapabilities}
+ */
+function orMergeCapabilities(a, b) {
+    return {
+        is_electron: a.is_electron || b.is_electron,
+        is_tauri: a.is_tauri || b.is_tauri,
+        is_nextjs: a.is_nextjs || b.is_nextjs,
+        is_nuxt: a.is_nuxt || b.is_nuxt,
+        is_web_frontend: a.is_web_frontend || b.is_web_frontend,
+        is_expo: a.is_expo || b.is_expo,
+        is_react_native: a.is_react_native || b.is_react_native,
+        has_node: a.has_node || b.has_node,
+    };
+}
+//# sourceMappingURL=runtime-detect.mjs.map

package/dist/cli/verify-proof/runtime-detect.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detect.mjs","sourceRoot":"","sources":["../../../src/cli/verify-proof/runtime-detect.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEzC;;;;;;;;;;GAUG;AAEH,8DAA8D;AAC9D,SAAS,iBAAiB;IACzB,OAAO;QACN,WAAW,EAAE,KAAK;QAClB,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,KAAK;QACtB,OAAO,EAAE,KAAK;QACd,eAAe,EAAE,KAAK;QACtB,QAAQ,EAAE,KAAK;KACf,CAAA;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAW;IAChD,MAAM,YAAY,GAAG,iBAAiB,EAAE,CAAA;IACxC,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAA;IAEhF,MAAM,OAAO,GAAG;QACf,GAAG,CAAC,WAAW,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,oCAAoC;QACxE,GAAG,CAAC,WAAW,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,oCAAoC;KAC3E,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;IAEtE,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;QAC9E,YAAY,CAAC,WAAW,GAAG,IAAI,CAAA;IAChC,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACtD,YAAY,CAAC,QAAQ,GAAG,IAAI,CAAA;IAC7B,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,YAAY,CAAC,OAAO,GAAG,IAAI,CAAA;IACjD,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,YAAY,CAAC,eAAe,GAAG,IAAI,CAAA;IAEjE,qEAAqE;IACrE,wEAAwE;IACxE,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,iBAAiB,GACtB,YAAY,CAAC,WAAW;QACxB,YAAY,CAAC,QAAQ;QACrB,YAAY,CAAC,eAAe;QAC5B,YAAY,CAAC,OAAO,CAAA;IACrB,MAAM,aAAa,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;IACpE,IAAI,CAAC,iBAAiB,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,YAAY,CAAC,eAAe,GAAG,IAAI,CAAA;IACpC,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,YAAY,CAAC,SAAS,GAAG,IAAI,CAAA;QAC7B,YAAY,CAAC,eAAe,GAAG,IAAI,CAAA;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,YAAY,CAAC,OAAO,GAAG,IAAI,CAAA;QAC3B,YAAY,CAAC,eAAe,GAAG,IAAI,CAAA;IACpC,CAAC;IACD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC5C,YAAY,CAAC,eAAe,GAAG,IAAI,CAAA;IACpC,CAAC;IAED,kEAAkE;IAClE,IAAI,OAAO,WAAW,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACpF,YAAY,CAAC,QAAQ,GAAG,IAAI,CAAA;IAC7B,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,QAAQ,IAAI,WAAW,CAAC,OAAO,IAAI,OAAO,WAAW,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC9F,YAAY,CAAC,QAAQ,GAAG,IAAI,CAAA;IAC7B,CAAC;IAED,OAAO,YAAY,CAAA;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAAU,EAAE,IAAI;IACvD,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAChC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;IAC9C,IAAI,QAAQ,GAAG,iBAAiB,EAAE,CAAA;IAClC,IAAI,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,QAAQ,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;QACjF,CAAC;QAAC,MAAM,CAAC;YACR,kCAAkC;QACnC,CAAC;IACF,CAAC;IAED,iEAAiE;IACjE,sEAAsE;IACtE,MAAM,KAAK,GAAG,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IAC3F,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAA;IAEvC,IAAI,MAAM,GAAG,QAAQ,CAAA;IACrB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QAC5C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAA;YAC9C,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;gBAAE,SAAQ;YACvC,IAAI,CAAC;gBACJ,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,CAAA;gBACxF,MAAM,GAAG,mBAAmB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;YAChD,CAAC;YAAC,MAAM,CAAC;gBACR,iCAAiC;YAClC,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,gBAAgB,CAAC,IAAI,EAAE,IAAI;IACnC,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAChC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IAC/B,IAAI,OAAO,CAAA;IACX,IAAI,CAAC;QACJ,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAA;IACV,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,CAAA;IAClB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;QAC3B,IAAI,CAAC;YACJ,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;gBAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QACnD,CAAC;QAAC,MAAM,CAAC;YACR,6BAA6B;QAC9B,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAA;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAAC,CAAC,EAAE,CAAC;IAChC,OAAO;QACN,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW;QAC3C,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ;QAClC,SAAS,EAAE,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS;QACrC,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO;QAC/B,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,eAAe;QACvD,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO;QAC/B,eAAe,EAAE,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,eAAe;QACvD,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ;KAClC,CAAA;AACF,CAAC"}

package/dist/cli/verify-proof/trust.d.mts

@@ -0,0 +1,70 @@
+/**
+ * Compute a stable manifest hash for TOFU + audit lines.
+ * @param {DriverManifest} manifest
+ * @returns {string}
+ */
+export function manifestSha256(manifest: DriverManifest): string;
+/**
+ * Read the TOFU lock file. Returns an empty object if missing or malformed.
+ * @param {string} projectDir
+ * @returns {Record<string, {manifest_sha256: string, artifact_digest?: string, approved_at: string, trust_tier: string}>}
+ */
+export function readTofuLock(projectDir: string): Record<string, {
+    manifest_sha256: string;
+    artifact_digest?: string;
+    approved_at: string;
+    trust_tier: string;
+}>;
+/**
+ * Persist a TOFU lock file (atomic-ish: write + rename not used since we
+ * append-only to a tiny JSON; conflicting writes from parallel agents
+ * would clobber an entry but `.aperant/driver-tofu.json` is per-project,
+ * not per-agent).
+ *
+ * @param {string} projectDir
+ * @param {Record<string, unknown>} tofu
+ */
+export function writeTofuLock(projectDir: string, tofu: Record<string, unknown>): void;
+/**
+ * Build the canonical TOFU key for a (driver, version) pair. The hash is
+ * NOT part of the key — the value's manifest_sha256 + artifact_digest
+ * detect drift.
+ * @param {string} driverId
+ * @param {string} version
+ * @returns {string}
+ */
+export function tofuKey(driverId: string, version: string): string;
+/**
+ * Read the project's policy file. Returns the default policy if missing.
+ * @param {string} projectDir
+ * @returns {{mode: 'first_party_only' | 'allowlist', allowed: string[], denied: string[]}}
+ */
+export function readPolicy(projectDir: string): {
+    mode: "first_party_only" | "allowlist";
+    allowed: string[];
+    denied: string[];
+};
+/**
+ * Decide whether a driver invocation is allowed.
+ *
+ * @param {DriverManifest} manifest
+ * @param {ReturnType<typeof readTofuLock>} tofu
+ * @param {ReturnType<typeof readPolicy>} policy
+ * @returns {{decision: 'allow' | 'deny' | 'requires_approval', reason: string, expected_manifest_sha256?: string}}
+ */
+export function decide(manifest: DriverManifest, tofu: ReturnType<typeof readTofuLock>, policy: ReturnType<typeof readPolicy>): {
+    decision: "allow" | "deny" | "requires_approval";
+    reason: string;
+    expected_manifest_sha256?: string;
+};
+/**
+ * Persist a one-time approval for a (driver, version) pair into the TOFU
+ * lock. The caller is responsible for actually prompting the user; this
+ * function just writes the entry.
+ *
+ * @param {string} projectDir
+ * @param {DriverManifest} manifest
+ */
+export function recordApproval(projectDir: string, manifest: DriverManifest): void;
+export type DriverManifest = import("@aperant/framework/driver-sdk").DriverManifest;
+//# sourceMappingURL=trust.d.mts.map

package/dist/cli/verify-proof/trust.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.d.mts","sourceRoot":"","sources":["../../../src/cli/verify-proof/trust.mjs"],"names":[],"mappings":"AA+BA;;;;GAIG;AACH,yCAHW,cAAc,GACZ,MAAM,CAKlB;AAED;;;;GAIG;AACH,yCAHW,MAAM,GACJ,MAAM,CAAC,MAAM,EAAE;IAAC,eAAe,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC,CAAC,CAUxH;AAED;;;;;;;;GAQG;AACH,0CAHW,MAAM,QACN,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAMjC;AAED;;;;;;;GAOG;AACH,kCAJW,MAAM,WACN,MAAM,GACJ,MAAM,CAIlB;AAED;;;;GAIG;AACH,uCAHW,MAAM,GACJ;IAAC,IAAI,EAAE,kBAAkB,GAAG,WAAW,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAC,CAgBzF;AAED;;;;;;;GAOG;AACH,iCALW,cAAc,QACd,UAAU,CAAC,OAAO,YAAY,CAAC,UAC/B,UAAU,CAAC,OAAO,UAAU,CAAC,GAC3B;IAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,mBAAmB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,wBAAwB,CAAC,EAAE,MAAM,CAAA;CAAC,CAwDjH;AAED;;;;;;;GAOG;AACH,2CAHW,MAAM,YACN,cAAc,QAYxB;6BAjKY,OAAO,+BAA+B,EAAE,cAAc"}

package/dist/cli/verify-proof/trust.mjs

@@ -0,0 +1,174 @@
+/**
+ * trust.mjs — driver trust enforcement (TOFU lock + policy file + decision).
+ *
+ * Implements ID-03:
+ *   - 4 trust tiers: first_party_signed (default-allow), community_verified,
+ *     community_unverified, local_unverified.
+ *   - Default policy: only first_party_signed auto-runs.
+ *   - Non-first-party drivers require one-time user approval; approval is
+ *     bound to a TOFU lock at .aperant/driver-tofu.json keyed by
+ *     {driver_id, version, manifest_sha256, artifact_digest}. Any drift
+ *     re-prompts.
+ *
+ * The audit log (audit.mjs) writes one line per decision (allow/deny).
+ * The execution layer (exec.mjs) enforces structured-only local_command.
+ *
+ * This module is decision-only: it does NOT prompt the user. The caller
+ * (workflow runner / apt-tools driver doctor) decides whether to invoke
+ * the prompt UX, then calls recordApproval() to persist the TOFU entry.
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { dirname, join, resolve } from 'node:path';
+/**
+ * @typedef {import('@aperant/framework/driver-sdk').DriverManifest} DriverManifest
+ */
+const TOFU_PATH = '.aperant/driver-tofu.json';
+const POLICY_PATH = '.aperant/policy.json';
+/**
+ * Compute a stable manifest hash for TOFU + audit lines.
+ * @param {DriverManifest} manifest
+ * @returns {string}
+ */
+export function manifestSha256(manifest) {
+    const stable = JSON.stringify(manifest, Object.keys(manifest).sort());
+    return createHash('sha256').update(stable).digest('hex');
+}
+/**
+ * Read the TOFU lock file. Returns an empty object if missing or malformed.
+ * @param {string} projectDir
+ * @returns {Record<string, {manifest_sha256: string, artifact_digest?: string, approved_at: string, trust_tier: string}>}
+ */
+export function readTofuLock(projectDir) {
+    const path = join(resolve(projectDir), TOFU_PATH);
+    if (!existsSync(path))
+        return {};
+    try {
+        return JSON.parse(readFileSync(path, 'utf-8'));
+    }
+    catch {
+        return {};
+    }
+}
+/**
+ * Persist a TOFU lock file (atomic-ish: write + rename not used since we
+ * append-only to a tiny JSON; conflicting writes from parallel agents
+ * would clobber an entry but `.aperant/driver-tofu.json` is per-project,
+ * not per-agent).
+ *
+ * @param {string} projectDir
+ * @param {Record<string, unknown>} tofu
+ */
+export function writeTofuLock(projectDir, tofu) {
+    const path = join(resolve(projectDir), TOFU_PATH);
+    mkdirSync(dirname(path), { recursive: true });
+    writeFileSync(path, JSON.stringify(tofu, null, 2) + '\n', 'utf-8');
+}
+/**
+ * Build the canonical TOFU key for a (driver, version) pair. The hash is
+ * NOT part of the key — the value's manifest_sha256 + artifact_digest
+ * detect drift.
+ * @param {string} driverId
+ * @param {string} version
+ * @returns {string}
+ */
+export function tofuKey(driverId, version) {
+    return `${driverId}@${version}`;
+}
+/**
+ * Read the project's policy file. Returns the default policy if missing.
+ * @param {string} projectDir
+ * @returns {{mode: 'first_party_only' | 'allowlist', allowed: string[], denied: string[]}}
+ */
+export function readPolicy(projectDir) {
+    const path = join(resolve(projectDir), POLICY_PATH);
+    const defaults = { mode: 'first_party_only', allowed: [], denied: [] };
+    if (!existsSync(path))
+        return defaults;
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+        return {
+            mode: parsed.mode === 'allowlist' ? 'allowlist' : 'first_party_only',
+            allowed: Array.isArray(parsed.allowed) ? parsed.allowed : [],
+            denied: Array.isArray(parsed.denied) ? parsed.denied : [],
+        };
+    }
+    catch {
+        return defaults;
+    }
+}
+/**
+ * Decide whether a driver invocation is allowed.
+ *
+ * @param {DriverManifest} manifest
+ * @param {ReturnType<typeof readTofuLock>} tofu
+ * @param {ReturnType<typeof readPolicy>} policy
+ * @returns {{decision: 'allow' | 'deny' | 'requires_approval', reason: string, expected_manifest_sha256?: string}}
+ */
+export function decide(manifest, tofu, policy) {
+    const tier = manifest.trust?.tier;
+    const driverId = manifest.driverId;
+    const version = manifest.version;
+    // Policy denylist always wins.
+    if (policy.denied.includes(driverId)) {
+        return { decision: 'deny', reason: `policy denies driver ${driverId}` };
+    }
+    // first_party_signed: default-allow under either policy mode (unless
+    // explicitly denied above).
+    if (tier === 'first_party_signed') {
+        return { decision: 'allow', reason: 'first_party_signed driver — default allow' };
+    }
+    // first_party_only mode blocks every other tier.
+    if (policy.mode === 'first_party_only') {
+        return {
+            decision: 'deny',
+            reason: `policy.mode=first_party_only blocks ${tier} driver`,
+        };
+    }
+    // allowlist mode: require explicit allow entry AND a valid TOFU lock.
+    if (!policy.allowed.includes(driverId)) {
+        return {
+            decision: 'deny',
+            reason: `policy.mode=allowlist but ${driverId} not in allowed[]`,
+        };
+    }
+    // Check TOFU lock.
+    const key = tofuKey(driverId, version);
+    const entry = tofu[key];
+    const currentHash = manifestSha256(manifest);
+    if (!entry) {
+        return {
+            decision: 'requires_approval',
+            reason: `no TOFU entry for ${key} — first run requires approval`,
+            expected_manifest_sha256: currentHash,
+        };
+    }
+    if (entry.manifest_sha256 !== currentHash) {
+        return {
+            decision: 'requires_approval',
+            reason: `TOFU manifest_sha256 drift for ${key} — driver changed since approval, re-prompt required`,
+            expected_manifest_sha256: currentHash,
+        };
+    }
+    return { decision: 'allow', reason: `TOFU entry valid for ${key}` };
+}
+/**
+ * Persist a one-time approval for a (driver, version) pair into the TOFU
+ * lock. The caller is responsible for actually prompting the user; this
+ * function just writes the entry.
+ *
+ * @param {string} projectDir
+ * @param {DriverManifest} manifest
+ */
+export function recordApproval(projectDir, manifest) {
+    const tofu = readTofuLock(projectDir);
+    const key = tofuKey(manifest.driverId, manifest.version);
+    tofu[key] = {
+        manifest_sha256: manifestSha256(manifest),
+        artifact_digest: manifest.trust?.integrity?.artifact_digest,
+        approved_at: new Date().toISOString(),
+        trust_tier: manifest.trust?.tier,
+    };
+    writeTofuLock(projectDir, tofu);
+}
+//# sourceMappingURL=trust.mjs.map

package/dist/cli/verify-proof/trust.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.mjs","sourceRoot":"","sources":["../../../src/cli/verify-proof/trust.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD;;GAEG;AAEH,MAAM,SAAS,GAAG,2BAA2B,CAAA;AAC7C,MAAM,WAAW,GAAG,sBAAsB,CAAA;AAE1C;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAQ;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACrE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,UAAU;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAA;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IAChC,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;IAC/C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAA;IACV,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAAC,UAAU,EAAE,IAAI;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,CAAA;IACjD,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7C,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAA;AACnE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,QAAQ,EAAE,OAAO;IACxC,OAAO,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAA;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,UAAU;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,CAAA;IACnD,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAA;IACtE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAA;IACtC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAA;QACtD,OAAO;YACN,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,kBAAkB;YACpE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;YAC5D,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;SACzD,CAAA;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,QAAQ,CAAA;IAChB,CAAC;AACF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;IACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;IAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAA;IAEhC,+BAA+B;IAC/B,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,wBAAwB,QAAQ,EAAE,EAAE,CAAA;IACxE,CAAC;IAED,qEAAqE;IACrE,4BAA4B;IAC5B,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,2CAA2C,EAAE,CAAA;IAClF,CAAC;IAED,iDAAiD;IACjD,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;QACxC,OAAO;YACN,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,uCAAuC,IAAI,SAAS;SAC5D,CAAA;IACF,CAAC;IAED,sEAAsE;IACtE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxC,OAAO;YACN,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,6BAA6B,QAAQ,mBAAmB;SAChE,CAAA;IACF,CAAC;IAED,mBAAmB;IACnB,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAA;IACvB,MAAM,WAAW,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IAE5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO;YACN,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,qBAAqB,GAAG,gCAAgC;YAChE,wBAAwB,EAAE,WAAW;SACrC,CAAA;IACF,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,KAAK,WAAW,EAAE,CAAC;QAC3C,OAAO;YACN,QAAQ,EAAE,mBAAmB;YAC7B,MAAM,EAAE,kCAAkC,GAAG,sDAAsD;YACnG,wBAAwB,EAAE,WAAW;SACrC,CAAA;IACF,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,wBAAwB,GAAG,EAAE,EAAE,CAAA;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,UAAU,EAAE,QAAQ;IAClD,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,CAAA;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,GAAG;QACX,eAAe,EAAE,cAAc,CAAC,QAAQ,CAAC;QACzC,eAAe,EAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,eAAe;QAC3D,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,UAAU,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI;KAChC,CAAA;IACD,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,CAAA;AAChC,CAAC"}

package/dist/driver-sdk/conformance.d.ts

@@ -0,0 +1,41 @@
+/**
+ * conformance.ts — shared conformance kit for driver authors + bundled drivers.
+ *
+ * `runConformanceKit({ manifest, driverModule })` returns a structured pass/fail
+ * report. Used by the four bundled drivers' tests (ST07–ST09). Re-exposed
+ * via the driver-sdk public surface for re-extraction readiness — see
+ * driver-sdk/index.ts header.
+ *
+ * Checks:
+ *  1. Every declared capability in manifest.capabilities[] has a matching
+ *     function export on driverModule.
+ *  2. Every function export returns a VerbResult-shaped object when invoked
+ *     with a dummy arg (status, evidence_paths, duration_ms, retry_count).
+ *  3. The manifest's transport field is structured (not a raw string).
+ *  4. The manifest's trust.tier is one of the four allowed values.
+ */
+import type { DriverModule } from './idl.js';
+import type { DriverManifest } from './manifest.js';
+export interface ConformanceCheck {
+    readonly id: string;
+    readonly description: string;
+    readonly status: 'pass' | 'fail';
+    readonly detail?: string;
+}
+export interface ConformanceReport {
+    readonly driver_id: string;
+    readonly version: string;
+    readonly overall: 'pass' | 'fail';
+    readonly checks: readonly ConformanceCheck[];
+}
+/**
+ * Run the conformance kit against a driver. Pass `dummyArgs` to control the
+ * fixture invocation; default is an empty object (most drivers ignore args
+ * in conformance mode and return a stub VerbResult).
+ */
+export declare function runConformanceKit(opts: {
+    manifest: DriverManifest;
+    driverModule: DriverModule;
+    dummyArgs?: Record<string, unknown>;
+}): Promise<ConformanceReport>;
+//# sourceMappingURL=conformance.d.ts.map

package/dist/driver-sdk/conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.d.ts","sourceRoot":"","sources":["../../src/driver-sdk/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IACjC,QAAQ,CAAC,MAAM,EAAE,SAAS,gBAAgB,EAAE,CAAA;CAC5C;AA2BD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC7C,QAAQ,EAAE,cAAc,CAAA;IACxB,YAAY,EAAE,YAAY,CAAA;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA8E7B"}

package/dist/driver-sdk/conformance.js

@@ -0,0 +1,123 @@
+/**
+ * conformance.ts — shared conformance kit for driver authors + bundled drivers.
+ *
+ * `runConformanceKit({ manifest, driverModule })` returns a structured pass/fail
+ * report. Used by the four bundled drivers' tests (ST07–ST09). Re-exposed
+ * via the driver-sdk public surface for re-extraction readiness — see
+ * driver-sdk/index.ts header.
+ *
+ * Checks:
+ *  1. Every declared capability in manifest.capabilities[] has a matching
+ *     function export on driverModule.
+ *  2. Every function export returns a VerbResult-shaped object when invoked
+ *     with a dummy arg (status, evidence_paths, duration_ms, retry_count).
+ *  3. The manifest's transport field is structured (not a raw string).
+ *  4. The manifest's trust.tier is one of the four allowed values.
+ */
+import { isVerbResult } from './idl.js';
+const ALLOWED_TRUST_TIERS = new Set([
+    'first_party_signed',
+    'community_verified',
+    'community_unverified',
+    'local_unverified',
+]);
+function isStructuredTransport(t) {
+    if (t === null || typeof t !== 'object' || Array.isArray(t))
+        return false;
+    const obj = t;
+    if (typeof obj.mcp_server_id === 'string')
+        return true;
+    if (typeof obj.http_endpoint === 'string')
+        return true;
+    if (typeof obj.npm_package === 'string')
+        return true;
+    if (obj.builtin === true)
+        return true;
+    if (obj.local_command !== null &&
+        typeof obj.local_command === 'object' &&
+        !Array.isArray(obj.local_command)) {
+        const lc = obj.local_command;
+        return typeof lc.binary === 'string' && Array.isArray(lc.args);
+    }
+    return false;
+}
+/**
+ * Run the conformance kit against a driver. Pass `dummyArgs` to control the
+ * fixture invocation; default is an empty object (most drivers ignore args
+ * in conformance mode and return a stub VerbResult).
+ */
+export async function runConformanceKit(opts) {
+    const { manifest, driverModule } = opts;
+    const dummyArgs = opts.dummyArgs ?? { target: { kind: 'css', value: '#stub' } };
+    const checks = [];
+    // Check 1: structured transport
+    checks.push({
+        id: 'transport-structured',
+        description: 'manifest.transport must be a structured oneOf, never a raw string',
+        status: isStructuredTransport(manifest.transport) ? 'pass' : 'fail',
+        detail: isStructuredTransport(manifest.transport)
+            ? undefined
+            : `transport is not a structured variant: ${JSON.stringify(manifest.transport)}`,
+    });
+    // Check 2: trust tier is one of the four allowed
+    checks.push({
+        id: 'trust-tier-allowed',
+        description: 'manifest.trust.tier must be one of the four allowed values',
+        status: ALLOWED_TRUST_TIERS.has(manifest.trust?.tier) ? 'pass' : 'fail',
+        detail: ALLOWED_TRUST_TIERS.has(manifest.trust?.tier)
+            ? undefined
+            : `trust.tier="${manifest.trust?.tier}" not in ${[...ALLOWED_TRUST_TIERS].join(', ')}`,
+    });
+    // Check 3: capabilities length >= 5
+    checks.push({
+        id: 'capabilities-min-five',
+        description: 'manifest.capabilities must declare at least 5 IDL verbs',
+        status: manifest.capabilities.length >= 5 ? 'pass' : 'fail',
+        detail: manifest.capabilities.length >= 5
+            ? undefined
+            : `only ${manifest.capabilities.length} capabilities declared`,
+    });
+    // Check 4: every declared capability has a function export
+    for (const cap of manifest.capabilities) {
+        const fn = driverModule[cap];
+        const ok = typeof fn === 'function';
+        checks.push({
+            id: `capability-export-${cap}`,
+            description: `manifest.capabilities[${cap}] has a matching function export`,
+            status: ok ? 'pass' : 'fail',
+            detail: ok ? undefined : `driverModule.${cap} is not a function`,
+        });
+    }
+    // Check 5: every declared capability returns a VerbResult shape
+    for (const cap of manifest.capabilities) {
+        const fn = driverModule[cap];
+        if (typeof fn !== 'function')
+            continue; // already failed Check 4
+        try {
+            const result = await fn(dummyArgs);
+            const ok = isVerbResult(result);
+            checks.push({
+                id: `capability-shape-${cap}`,
+                description: `driver.${cap}() returns a VerbResult shape`,
+                status: ok ? 'pass' : 'fail',
+                detail: ok ? undefined : `return shape: ${JSON.stringify(result)}`,
+            });
+        }
+        catch (err) {
+            checks.push({
+                id: `capability-shape-${cap}`,
+                description: `driver.${cap}() returns a VerbResult shape`,
+                status: 'fail',
+                detail: `threw: ${err instanceof Error ? err.message : String(err)}`,
+            });
+        }
+    }
+    const overall = checks.every((c) => c.status === 'pass') ? 'pass' : 'fail';
+    return {
+        driver_id: manifest.driverId,
+        version: manifest.version,
+        overall,
+        checks,
+    };
+}
+//# sourceMappingURL=conformance.js.map

package/dist/driver-sdk/conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"conformance.js","sourceRoot":"","sources":["../../src/driver-sdk/conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAiBvC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IACnC,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,kBAAkB;CAClB,CAAC,CAAA;AAEF,SAAS,qBAAqB,CAAC,CAAU;IACxC,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IACzE,MAAM,GAAG,GAAG,CAA4B,CAAA;IACxC,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACtD,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACtD,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACpD,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACrC,IACC,GAAG,CAAC,aAAa,KAAK,IAAI;QAC1B,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ;QACrC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAChC,CAAC;QACF,MAAM,EAAE,GAAG,GAAG,CAAC,aAAwC,CAAA;QACvD,OAAO,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAA;IAC/D,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAIvC;IACA,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,IAAI,CAAA;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAA;IAC/E,MAAM,MAAM,GAAuB,EAAE,CAAA;IAErC,gCAAgC;IAChC,MAAM,CAAC,IAAI,CAAC;QACX,EAAE,EAAE,sBAAsB;QAC1B,WAAW,EAAE,mEAAmE;QAChF,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACnE,MAAM,EAAE,qBAAqB,CAAC,QAAQ,CAAC,SAAS,CAAC;YAChD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,0CAA0C,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE;KACjF,CAAC,CAAA;IAEF,iDAAiD;IACjD,MAAM,CAAC,IAAI,CAAC;QACX,EAAE,EAAE,oBAAoB;QACxB,WAAW,EAAE,4DAA4D;QACzE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACvE,MAAM,EAAE,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;YACpD,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,eAAe,QAAQ,CAAC,KAAK,EAAE,IAAI,YAAY,CAAC,GAAG,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;KACvF,CAAC,CAAA;IAEF,oCAAoC;IACpC,MAAM,CAAC,IAAI,CAAC;QACX,EAAE,EAAE,uBAAuB;QAC3B,WAAW,EAAE,yDAAyD;QACtE,MAAM,EAAE,QAAQ,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC3D,MAAM,EACL,QAAQ,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC;YAChC,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,QAAQ,QAAQ,CAAC,YAAY,CAAC,MAAM,wBAAwB;KAChE,CAAC,CAAA;IAEF,2DAA2D;IAC3D,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,EAAE,GAAI,YAAmD,CAAC,GAAG,CAAC,CAAA;QACpE,MAAM,EAAE,GAAG,OAAO,EAAE,KAAK,UAAU,CAAA;QACnC,MAAM,CAAC,IAAI,CAAC;YACX,EAAE,EAAE,qBAAqB,GAAG,EAAE;YAC9B,WAAW,EAAE,yBAAyB,GAAG,kCAAkC;YAC3E,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC5B,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,GAAG,oBAAoB;SAChE,CAAC,CAAA;IACH,CAAC;IAED,gEAAgE;IAChE,KAAK,MAAM,GAAG,IAAI,QAAQ,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,EAAE,GAAI,YAA+E,CAAC,GAAG,CAAC,CAAA;QAChG,IAAI,OAAO,EAAE,KAAK,UAAU;YAAE,SAAQ,CAAC,yBAAyB;QAChE,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,CAAA;YAClC,MAAM,EAAE,GAAG,YAAY,CAAC,MAAM,CAAC,CAAA;YAC/B,MAAM,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,oBAAoB,GAAG,EAAE;gBAC7B,WAAW,EAAE,UAAU,GAAG,+BAA+B;gBACzD,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAC5B,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE;aAClE,CAAC,CAAA;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC;gBACX,EAAE,EAAE,oBAAoB,GAAG,EAAE;gBAC7B,WAAW,EAAE,UAAU,GAAG,+BAA+B;gBACzD,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,UAAU,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aACpE,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAA;IAC1E,OAAO;QACN,SAAS,EAAE,QAAQ,CAAC,QAAQ;QAC5B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,OAAO;QACP,MAAM;KACN,CAAA;AACF,CAAC"}