@apexops/testkit 0.10.0-next.0

package/dist/determinism.js

@@ -0,0 +1,38 @@
+export class FakeClock {
+    #currentMs;
+    constructor(initial = "2026-01-01T00:00:00.000Z") {
+        this.#currentMs = new Date(initial).getTime();
+        if (!Number.isFinite(this.#currentMs)) {
+            throw new Error("FakeClock requires a valid initial time");
+        }
+    }
+    now = () => new Date(this.#currentMs);
+    advance(milliseconds) {
+        if (!Number.isFinite(milliseconds)) {
+            throw new Error("FakeClock advance must be finite");
+        }
+        this.#currentMs += milliseconds;
+        return this.now();
+    }
+    set(value) {
+        const nextMs = new Date(value).getTime();
+        if (!Number.isFinite(nextMs)) {
+            throw new Error("FakeClock requires a valid time");
+        }
+        this.#currentMs = nextMs;
+        return this.now();
+    }
+}
+export class SequenceIds {
+    prefix;
+    #next;
+    constructor(prefix = "id", start = 1) {
+        this.prefix = prefix;
+        if (!Number.isSafeInteger(start) || start < 0) {
+            throw new Error("SequenceIds start must be a non-negative safe integer");
+        }
+        this.#next = start;
+    }
+    next = () => `${this.prefix}-${String(this.#next++).padStart(4, "0")}`;
+}
+//# sourceMappingURL=determinism.js.map

package/dist/determinism.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"determinism.js","sourceRoot":"","sources":["../src/determinism.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,SAAS;IACpB,UAAU,CAAS;IAEnB,YAAY,OAAO,GAA2B,0BAA0B;QACtE,IAAI,CAAC,UAAU,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC;IAEQ,GAAG,GAAG,GAAS,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAErD,OAAO,CAAC,YAAoB;QAC1B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,CAAC,UAAU,IAAI,YAAY,CAAC;QAChC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;IAED,GAAG,CAAC,KAA6B;QAC/B,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;QACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;QACzB,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;IACpB,CAAC;CACF;AAED,MAAM,OAAO,WAAW;IAIH,MAAM;IAHzB,KAAK,CAAS;IAEd,YACmB,MAAM,GAAG,IAAI,EAC9B,KAAK,GAAG,CAAC;sBADQ,MAAM;QAGvB,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC3E,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAEQ,IAAI,GAAG,GAAW,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;CACzF"}

package/dist/faults.d.ts

@@ -0,0 +1,8 @@
+export declare class InjectedFault extends Error {
+    constructor(point: string);
+}
+export declare function crashBefore<T>(callback: () => T | Promise<T>, point?: string): Promise<never>;
+export declare function crashAfter<T>(callback: () => T | Promise<T>, point?: string): Promise<never>;
+export declare function staleEpoch(currentEpoch: number): number;
+export declare function staleHead(currentHead: string): string;
+//# sourceMappingURL=faults.d.ts.map

package/dist/faults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"faults.d.ts","sourceRoot":"","sources":["../src/faults.ts"],"names":[],"mappings":"AAEA,qBAAa,aAAc,SAAQ,KAAK;IACtC,YAAY,KAAK,EAAE,MAAM,EAGxB;CACF;AAED,wBAAsB,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,SAAoB,GAAG,OAAO,CAAC,KAAK,CAAC,CAG9G;AAED,wBAAsB,UAAU,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,SAAmB,GAAG,OAAO,CAAC,KAAK,CAAC,CAG5G;AAED,wBAAgB,UAAU,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAKvD;AAED,wBAAgB,SAAS,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAGrD"}

package/dist/faults.js

@@ -0,0 +1,26 @@
+import { fixtureHash } from "./fixtures.js";
+export class InjectedFault extends Error {
+    constructor(point) {
+        super(`Injected fault: ${point}`);
+        this.name = "InjectedFault";
+    }
+}
+export async function crashBefore(callback, point = "before-callback") {
+    void callback;
+    throw new InjectedFault(point);
+}
+export async function crashAfter(callback, point = "after-callback") {
+    await callback();
+    throw new InjectedFault(point);
+}
+export function staleEpoch(currentEpoch) {
+    if (!Number.isInteger(currentEpoch) || currentEpoch <= 1) {
+        throw new Error("A stale epoch requires a current epoch greater than one");
+    }
+    return currentEpoch - 1;
+}
+export function staleHead(currentHead) {
+    const stale = fixtureHash(`stale:${currentHead}`);
+    return stale === currentHead ? fixtureHash(`stale-again:${currentHead}`) : stale;
+}
+//# sourceMappingURL=faults.js.map

package/dist/faults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"faults.js","sourceRoot":"","sources":["../src/faults.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,MAAM,OAAO,aAAc,SAAQ,KAAK;IACtC,YAAY,KAAa;QACvB,KAAK,CAAC,mBAAmB,KAAK,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;IAC9B,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAI,QAA8B,EAAE,KAAK,GAAG,iBAAiB;IAC5F,KAAK,QAAQ,CAAC;IACd,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAI,QAA8B,EAAE,KAAK,GAAG,gBAAgB;IAC1F,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,IAAI,aAAa,CAAC,KAAK,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,YAAoB;IAC7C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,YAAY,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,WAAmB;IAC3C,MAAM,KAAK,GAAG,WAAW,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IAClD,OAAO,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,eAAe,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACnF,CAAC"}

package/dist/fixtures.d.ts

@@ -0,0 +1,18 @@
+import type { ApprovalEvidenceV1, DeploymentPreviewV1, IacBindingV1, ImplementationIntentV1, OperationRecordV1, ProjectConfigV1, RequirementsV1, ResourceInventoryV1, RunConfigV1, RuntimeBundleLockV1, TaskEnvelopeV1 } from "@apexops/contracts";
+export declare const FIXTURE_TIME = "2026-01-01T00:00:00.000Z";
+export declare const FIXTURE_EXPIRY = "2026-01-01T01:00:00.000Z";
+export declare function fixtureHash(label: string): string;
+export declare function runtimeLockFixture(overrides?: Partial<RuntimeBundleLockV1>): RuntimeBundleLockV1;
+export declare function projectFixture(overrides?: Partial<ProjectConfigV1>): ProjectConfigV1;
+export declare function runFixture(overrides?: Partial<RunConfigV1>): RunConfigV1;
+export declare function taskFixture(overrides?: Partial<TaskEnvelopeV1>): TaskEnvelopeV1;
+export declare function requirementsFixture(overrides?: Partial<RequirementsV1>): RequirementsV1;
+export declare function intentFixture(overrides?: Partial<ImplementationIntentV1>): ImplementationIntentV1;
+export declare function bindingFixture(overrides?: Partial<IacBindingV1>): IacBindingV1;
+export declare function previewFixture(overrides?: Partial<DeploymentPreviewV1>): DeploymentPreviewV1;
+export declare function approvalFixture(overrides?: Partial<Extract<ApprovalEvidenceV1, {
+    mechanism: "tty";
+}>>): ApprovalEvidenceV1;
+export declare function operationFixture(overrides?: Partial<OperationRecordV1>): OperationRecordV1;
+export declare function inventoryFixture(overrides?: Partial<ResourceInventoryV1>): ResourceInventoryV1;
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../src/fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,sBAAsB,EACtB,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,mBAAmB,EACnB,cAAc,EACf,MAAM,oBAAoB,CAAC;AAK5B,eAAO,MAAM,YAAY,6BAA6B,CAAC;AACvD,eAAO,MAAM,cAAc,6BAA6B,CAAC;AAEzD,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED,wBAAgB,kBAAkB,CAAC,SAAS,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAG,mBAAmB,CAapG;AAED,wBAAgB,cAAc,CAAC,SAAS,GAAE,OAAO,CAAC,eAAe,CAAM,GAAG,eAAe,CASxF;AAED,wBAAgB,UAAU,CAAC,SAAS,GAAE,OAAO,CAAC,WAAW,CAAM,GAAG,WAAW,CAe5E;AAED,wBAAgB,WAAW,CAAC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GAAG,cAAc,CAkBnF;AAED,wBAAgB,mBAAmB,CAAC,SAAS,GAAE,OAAO,CAAC,cAAc,CAAM,GAAG,cAAc,CAmB3F;AAED,wBAAgB,aAAa,CAAC,SAAS,GAAE,OAAO,CAAC,sBAAsB,CAAM,GAAG,sBAAsB,CAkBrG;AAED,wBAAgB,cAAc,CAAC,SAAS,GAAE,OAAO,CAAC,YAAY,CAAM,GAAG,YAAY,CAgBlF;AAED,wBAAgB,cAAc,CAAC,SAAS,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAG,mBAAmB,CAsBhG;AAED,wBAAgB,eAAe,CAC7B,SAAS,GAAE,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE;IAAE,SAAS,EAAE,KAAK,CAAA;CAAE,CAAC,CAAM,GACzE,kBAAkB,CAkBpB;AAED,wBAAgB,gBAAgB,CAAC,SAAS,GAAE,OAAO,CAAC,iBAAiB,CAAM,GAAG,iBAAiB,CAe9F;AAED,wBAAgB,gBAAgB,CAAC,SAAS,GAAE,OAAO,CAAC,mBAAmB,CAAM,GAAG,mBAAmB,CAmBlG"}

package/dist/fixtures.js

@@ -0,0 +1,207 @@
+import { CONTRACT_VERSION } from "@apexops/contracts";
+import { sha256 } from "@apexops/capabilities";
+import { sha256Text } from "@apexops/kernel";
+export const FIXTURE_TIME = "2026-01-01T00:00:00.000Z";
+export const FIXTURE_EXPIRY = "2026-01-01T01:00:00.000Z";
+export function fixtureHash(label) {
+    return sha256Text(`apex-testkit:${label}`);
+}
+export function runtimeLockFixture(overrides = {}) {
+    return {
+        schemaVersion: CONTRACT_VERSION,
+        cliVersion: "0.10.0-next.0",
+        customizationVersion: "0.10.0-next.0",
+        workflowHash: fixtureHash("workflow"),
+        defaultsHash: fixtureHash("defaults"),
+        validatorHash: fixtureHash("validator"),
+        qualityScorecardHash: fixtureHash("quality-scorecard"),
+        improvementPolicyHash: fixtureHash("improvement-policy"),
+        requiredCapabilityPacks: ["iac"],
+        ...overrides,
+    };
+}
+export function projectFixture(overrides = {}) {
+    return {
+        schemaVersion: CONTRACT_VERSION,
+        projectId: "test-project",
+        displayName: "Test Project",
+        createdAt: FIXTURE_TIME,
+        defaultIacTool: "bicep",
+        ...overrides,
+    };
+}
+export function runFixture(overrides = {}) {
+    const dependencyHash = overrides.runtimeLockHash ?? fixtureHash("runtime-lock");
+    return {
+        schemaVersion: CONTRACT_VERSION,
+        projectId: "test-project",
+        runId: "run-0001",
+        environment: "test",
+        targetScope: "/subscriptions/00000000-0000-0000-0000-000000000000",
+        iacTool: "bicep",
+        createdAt: FIXTURE_TIME,
+        runtimeLockHash: dependencyHash,
+        ownerEpoch: 1,
+        gates: [1, 2, 3, 4].map((gate) => ({ gate, state: "closed", dependencyHash })),
+        ...overrides,
+    };
+}
+export function taskFixture(overrides = {}) {
+    return {
+        schemaVersion: CONTRACT_VERSION,
+        projectId: "test-project",
+        runId: "run-0001",
+        taskId: "task-0001",
+        role: "test-agent",
+        taskType: "render",
+        expectedHead: fixtureHash("journal-head"),
+        ownerEpoch: 1,
+        createdAt: FIXTURE_TIME,
+        expiresAt: FIXTURE_EXPIRY,
+        inputRefs: [fixtureHash("input")],
+        allowedOutputKinds: ["implementation-intent"],
+        capabilityGrants: [{ capability: "filesystem.read", sideEffect: "none", expiresAt: FIXTURE_EXPIRY }],
+        maxOutputBytes: 1024 * 1024,
+        ...overrides,
+    };
+}
+export function requirementsFixture(overrides = {}) {
+    return {
+        schemaVersion: CONTRACT_VERSION,
+        projectId: "test-project",
+        workload: "test workload",
+        environment: "test",
+        requirements: [
+            {
+                id: "req-001",
+                statement: "Provision deterministic infrastructure",
+                priority: "must",
+                status: "confirmed",
+                source: "test",
+            },
+        ],
+        assumptions: [],
+        unknowns: [],
+        ...overrides,
+    };
+}
+export function intentFixture(overrides = {}) {
+    return {
+        schemaVersion: CONTRACT_VERSION,
+        projectId: "test-project",
+        runId: "run-0001",
+        sourceHashes: { requirements: fixtureHash("requirements") },
+        resources: [
+            {
+                id: "storage",
+                type: "Microsoft.Storage/storageAccounts",
+                purpose: "Store artifacts",
+                dependsOn: [],
+                controls: ["https-only"],
+            },
+        ],
+        outputs: ["storageResourceId"],
+        ...overrides,
+    };
+}
+export function bindingFixture(overrides = {}) {
+    return {
+        schemaVersion: CONTRACT_VERSION,
+        projectId: "test-project",
+        runId: "run-0001",
+        track: "bicep",
+        intentHash: fixtureHash("intent"),
+        resourceBindings: {
+            storage: {
+                implementation: "br/public:avm/res/storage/storage-account",
+                version: "0.31.0",
+                parameters: { location: "swedencentral" },
+            },
+        },
+        ...overrides,
+    };
+}
+export function previewFixture(overrides = {}) {
+    const body = {
+        schemaVersion: CONTRACT_VERSION,
+        projectId: "test-project",
+        runId: "run-0001",
+        environment: "test",
+        track: "bicep",
+        operation: "apply",
+        target: "/subscriptions/00000000-0000-0000-0000-000000000000",
+        commit: fixtureHash("commit"),
+        dependencyRevision: fixtureHash("commit"),
+        ownerEpoch: 1,
+        inputHash: fixtureHash("input"),
+        iacHash: fixtureHash("iac"),
+        policyHash: fixtureHash("policy"),
+        changes: [{ resourceId: "storage", action: "create", material: true }],
+        blockers: [],
+        createdAt: FIXTURE_TIME,
+        expiresAt: FIXTURE_EXPIRY,
+        ...without(overrides, "previewHash"),
+    };
+    return { ...body, previewHash: overrides.previewHash ?? sha256(body) };
+}
+export function approvalFixture(overrides = {}) {
+    const previewHash = overrides.previewHash ?? fixtureHash("preview");
+    return {
+        schemaVersion: CONTRACT_VERSION,
+        projectId: "test-project",
+        runId: "run-0001",
+        gate: 4,
+        decision: "approved",
+        actor: "test-user",
+        mechanism: "tty",
+        dependencyHash: previewHash,
+        previewHash,
+        writerEpoch: 1,
+        recipientIdentity: "test-writer",
+        decidedAt: FIXTURE_TIME,
+        expiresAt: FIXTURE_EXPIRY,
+        ...overrides,
+    };
+}
+export function operationFixture(overrides = {}) {
+    return {
+        schemaVersion: CONTRACT_VERSION,
+        operationId: "operation-0001",
+        projectId: "test-project",
+        runId: "run-0001",
+        providerOperationId: "fake-operation-0001",
+        operation: "apply",
+        state: "succeeded",
+        previewHash: fixtureHash("preview"),
+        approvalHash: fixtureHash("approval"),
+        ownerEpoch: 1,
+        updatedAt: FIXTURE_TIME,
+        ...overrides,
+    };
+}
+export function inventoryFixture(overrides = {}) {
+    const resources = overrides.resources ?? [
+        {
+            logicalId: "storage",
+            resourceId: "/subscriptions/test/resourceGroups/test/providers/Microsoft.Storage/storageAccounts/test",
+            type: "Microsoft.Storage/storageAccounts",
+            location: "swedencentral",
+            properties: { httpsOnly: true },
+        },
+    ];
+    return {
+        schemaVersion: CONTRACT_VERSION,
+        projectId: "test-project",
+        runId: "run-0001",
+        deploymentHash: sha256(resources),
+        collectedAt: FIXTURE_TIME,
+        ...overrides,
+        resources,
+    };
+}
+function without(value, key) {
+    const copy = { ...value };
+    delete copy[key];
+    return copy;
+}
+//# sourceMappingURL=fixtures.js.map

package/dist/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../src/fixtures.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,MAAM,CAAC,MAAM,YAAY,GAAG,0BAA0B,CAAC;AACvD,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAEzD,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,UAAU,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAS,GAAiC,EAAE;IAC7E,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,UAAU,EAAE,eAAe;QAC3B,oBAAoB,EAAE,eAAe;QACrC,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC;QACrC,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC;QACrC,aAAa,EAAE,WAAW,CAAC,WAAW,CAAC;QACvC,oBAAoB,EAAE,WAAW,CAAC,mBAAmB,CAAC;QACtD,qBAAqB,EAAE,WAAW,CAAC,oBAAoB,CAAC;QACxD,uBAAuB,EAAE,CAAC,KAAK,CAAC;QAChC,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAS,GAA6B,EAAE;IACrE,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,cAAc;QACzB,WAAW,EAAE,cAAc;QAC3B,SAAS,EAAE,YAAY;QACvB,cAAc,EAAE,OAAO;QACvB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,SAAS,GAAyB,EAAE;IAC7D,MAAM,cAAc,GAAG,SAAS,CAAC,eAAe,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IAChF,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,MAAM;QACnB,WAAW,EAAE,qDAAqD;QAClE,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,YAAY;QACvB,eAAe,EAAE,cAAc;QAC/B,UAAU,EAAE,CAAC;QACb,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;QAC9E,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,SAAS,GAA4B,EAAE;IACjE,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,UAAU;QACjB,MAAM,EAAE,WAAW;QACnB,IAAI,EAAE,YAAY;QAClB,QAAQ,EAAE,QAAQ;QAClB,YAAY,EAAE,WAAW,CAAC,cAAc,CAAC;QACzC,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,YAAY;QACvB,SAAS,EAAE,cAAc;QACzB,SAAS,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACjC,kBAAkB,EAAE,CAAC,uBAAuB,CAAC;QAC7C,gBAAgB,EAAE,CAAC,EAAE,UAAU,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;QACpG,cAAc,EAAE,IAAI,GAAG,IAAI;QAC3B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,SAAS,GAA4B,EAAE;IACzE,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,cAAc;QACzB,QAAQ,EAAE,eAAe;QACzB,WAAW,EAAE,MAAM;QACnB,YAAY,EAAE;YACZ;gBACE,EAAE,EAAE,SAAS;gBACb,SAAS,EAAE,wCAAwC;gBACnD,QAAQ,EAAE,MAAM;gBAChB,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,MAAM;aACf;SACF;QACD,WAAW,EAAE,EAAE;QACf,QAAQ,EAAE,EAAE;QACZ,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,SAAS,GAAoC,EAAE;IAC3E,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,UAAU;QACjB,YAAY,EAAE,EAAE,YAAY,EAAE,WAAW,CAAC,cAAc,CAAC,EAAE;QAC3D,SAAS,EAAE;YACT;gBACE,EAAE,EAAE,SAAS;gBACb,IAAI,EAAE,mCAAmC;gBACzC,OAAO,EAAE,iBAAiB;gBAC1B,SAAS,EAAE,EAAE;gBACb,QAAQ,EAAE,CAAC,YAAY,CAAC;aACzB;SACF;QACD,OAAO,EAAE,CAAC,mBAAmB,CAAC;QAC9B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAS,GAA0B,EAAE;IAClE,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,OAAO;QACd,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC;QACjC,gBAAgB,EAAE;YAChB,OAAO,EAAE;gBACP,cAAc,EAAE,2CAA2C;gBAC3D,OAAO,EAAE,QAAQ;gBACjB,UAAU,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE;aAC1C;SACF;QACD,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAS,GAAiC,EAAE;IACzE,MAAM,IAAI,GAA6C;QACrD,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,MAAM;QACnB,KAAK,EAAE,OAAO;QACd,SAAS,EAAE,OAAO;QAClB,MAAM,EAAE,qDAAqD;QAC7D,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC;QAC7B,kBAAkB,EAAE,WAAW,CAAC,QAAQ,CAAC;QACzC,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,WAAW,CAAC,OAAO,CAAC;QAC/B,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC;QAC3B,UAAU,EAAE,WAAW,CAAC,QAAQ,CAAC;QACjC,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QACtE,QAAQ,EAAE,EAAE;QACZ,SAAS,EAAE,YAAY;QACvB,SAAS,EAAE,cAAc;QACzB,GAAG,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC;KACrC,CAAC;IACF,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,WAAW,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,SAAS,GAA+D,EAAE;IAE1E,MAAM,WAAW,GAAG,SAAS,CAAC,WAAW,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;IACpE,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,UAAU;QACjB,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,WAAW;QAClB,SAAS,EAAE,KAAK;QAChB,cAAc,EAAE,WAAW;QAC3B,WAAW;QACX,WAAW,EAAE,CAAC;QACd,iBAAiB,EAAE,aAAa;QAChC,SAAS,EAAE,YAAY;QACvB,SAAS,EAAE,cAAc;QACzB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAS,GAA+B,EAAE;IACzE,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,WAAW,EAAE,gBAAgB;QAC7B,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,UAAU;QACjB,mBAAmB,EAAE,qBAAqB;QAC1C,SAAS,EAAE,OAAO;QAClB,KAAK,EAAE,WAAW;QAClB,WAAW,EAAE,WAAW,CAAC,SAAS,CAAC;QACnC,YAAY,EAAE,WAAW,CAAC,UAAU,CAAC;QACrC,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,YAAY;QACvB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAS,GAAiC,EAAE;IAC3E,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,IAAI;QACvC;YACE,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,0FAA0F;YACtG,IAAI,EAAE,mCAAmC;YACzC,QAAQ,EAAE,eAAe;YACzB,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;SAChC;KACF,CAAC;IACF,OAAO;QACL,aAAa,EAAE,gBAAgB;QAC/B,SAAS,EAAE,cAAc;QACzB,KAAK,EAAE,UAAU;QACjB,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC;QACjC,WAAW,EAAE,YAAY;QACzB,GAAG,SAAS;QACZ,SAAS;KACV,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAsC,KAAQ,EAAE,GAAM;IACpE,MAAM,IAAI,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export * from "./determinism.js";
+export * from "./faults.js";
+export * from "./fixtures.js";
+export * from "./malicious.js";
+export * from "./parity.js";
+export * from "./qualification.js";
+export * from "./quality.js";
+export * from "./scorecard-samples.js";
+export * from "./scenario.js";
+export * from "./workspace.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,11 @@
+export * from "./determinism.js";
+export * from "./faults.js";
+export * from "./fixtures.js";
+export * from "./malicious.js";
+export * from "./parity.js";
+export * from "./qualification.js";
+export * from "./quality.js";
+export * from "./scorecard-samples.js";
+export * from "./scenario.js";
+export * from "./workspace.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC"}

package/dist/malicious.d.ts

@@ -0,0 +1,9 @@
+export declare const maliciousPaths: readonly string[];
+export declare const secretFixtures: Readonly<{
+    azureClientSecret: "not-a-real-client-secret";
+    githubToken: "ghp_notARealToken000000000000000000000";
+    privateKey: "-----BEGIN PRIVATE KEY-----\nnot-a-real-key\n-----END PRIVATE KEY-----";
+}>;
+export declare function oversizedFixture(maxBytes: number, fill?: number): Buffer;
+export declare function symlinkFixture(linkPath: string, targetPath: string): Promise<string>;
+//# sourceMappingURL=malicious.d.ts.map

package/dist/malicious.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"malicious.d.ts","sourceRoot":"","sources":["../src/malicious.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,cAAc,mBAMzB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;EAIzB,CAAC;AAEH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,SAAO,GAAG,MAAM,CAKtE;AAED,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI1F"}

package/dist/malicious.js

@@ -0,0 +1,26 @@
+import { mkdir, symlink } from "node:fs/promises";
+import { dirname } from "node:path";
+export const maliciousPaths = Object.freeze([
+    "../outside",
+    "../../etc/passwd",
+    "/absolute/path",
+    "nested/../../../outside",
+    "..\\outside",
+]);
+export const secretFixtures = Object.freeze({
+    azureClientSecret: "not-a-real-client-secret",
+    githubToken: "ghp_notARealToken000000000000000000000",
+    privateKey: "-----BEGIN PRIVATE KEY-----\nnot-a-real-key\n-----END PRIVATE KEY-----",
+});
+export function oversizedFixture(maxBytes, fill = 0x61) {
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 0) {
+        throw new Error("maxBytes must be a non-negative safe integer");
+    }
+    return Buffer.alloc(maxBytes + 1, fill);
+}
+export async function symlinkFixture(linkPath, targetPath) {
+    await mkdir(dirname(linkPath), { recursive: true });
+    await symlink(targetPath, linkPath);
+    return linkPath;
+}
+//# sourceMappingURL=malicious.js.map

package/dist/malicious.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"malicious.js","sourceRoot":"","sources":["../src/malicious.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,YAAY;IACZ,kBAAkB;IAClB,gBAAgB;IAChB,yBAAyB;IACzB,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;IAC1C,iBAAiB,EAAE,0BAA0B;IAC7C,WAAW,EAAE,wCAAwC;IACrD,UAAU,EAAE,wEAAwE;CACrF,CAAC,CAAC;AAEH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,IAAI,GAAG,IAAI;IAC5D,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,UAAkB;IACvE,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,OAAO,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/parity.d.ts

@@ -0,0 +1,3 @@
+import type { ResourceInventoryV1 } from "@apexops/contracts";
+export declare function assertLogicalInventoryParity(bicep: ResourceInventoryV1, terraform: ResourceInventoryV1): void;
+//# sourceMappingURL=parity.d.ts.map

package/dist/parity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parity.d.ts","sourceRoot":"","sources":["../src/parity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAe9D,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,mBAAmB,EAAE,SAAS,EAAE,mBAAmB,GAAG,IAAI,CAE7G"}

package/dist/parity.js

@@ -0,0 +1,10 @@
+import assert from "node:assert/strict";
+function logicalResources(inventory) {
+    return inventory.resources
+        .map(({ logicalId, type, location, properties }) => ({ logicalId, type, location, properties }))
+        .sort((left, right) => left.logicalId.localeCompare(right.logicalId));
+}
+export function assertLogicalInventoryParity(bicep, terraform) {
+    assert.deepStrictEqual(logicalResources(bicep), logicalResources(terraform));
+}
+//# sourceMappingURL=parity.js.map

package/dist/parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parity.js","sourceRoot":"","sources":["../src/parity.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAUxC,SAAS,gBAAgB,CAAC,SAA8B;IACtD,OAAO,SAAS,CAAC,SAAS;SACvB,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;SAC/F,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAA0B,EAAE,SAA8B;IACrG,MAAM,CAAC,eAAe,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,gBAAgB,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/E,CAAC"}

package/dist/qualification.d.ts

@@ -0,0 +1,53 @@
+import { benchmarkKernel } from "@apexops/kernel";
+import { FakeClock, SequenceIds } from "./determinism.js";
+export type QualificationTrack = "bicep" | "terraform";
+export type QualificationCheckStatus = "pass" | "fail";
+export interface QualificationCheck {
+    id: string;
+    status: QualificationCheckStatus;
+    durationMs: number;
+    detail?: string;
+}
+export interface QualificationTrackReport {
+    track: QualificationTrack;
+    status: QualificationCheckStatus;
+    checks: QualificationCheck[];
+    eventCount: number;
+    gateRevisionLoops?: number;
+    taskContextBytes?: number;
+    hashes: Record<string, string>;
+}
+export interface QualificationReport {
+    schemaVersion: "1.0.0";
+    status: QualificationCheckStatus;
+    durationMs: number;
+    tracks: QualificationTrackReport[];
+    checks: QualificationCheck[];
+    eventCount: number;
+    hashes: Record<string, string>;
+}
+export interface QualificationOptions {
+    workspaceRoot: string;
+    customizationsSource: string;
+    clock?: FakeClock;
+    ids?: SequenceIds;
+    injectFailure?: string;
+}
+export interface BenchmarkBudgets {
+    appendP95Ms: number;
+    replayP95Ms: number;
+    statusP95Ms: number;
+}
+export interface QualificationBenchmarkReport {
+    schemaVersion: "1.0.0";
+    status: QualificationCheckStatus;
+    eventCount: number;
+    budgets: BenchmarkBudgets;
+    metrics: ReturnType<typeof benchmarkKernel>;
+    checks: QualificationCheck[];
+}
+export declare function runQualification(options: QualificationOptions): Promise<QualificationReport>;
+export declare function qualificationStatus(checks: readonly QualificationCheck[]): QualificationCheckStatus;
+export declare function qualificationJson(report: QualificationReport): string;
+export declare function runQualificationBenchmark(eventCount: number, budgets: BenchmarkBudgets): QualificationBenchmarkReport;
+//# sourceMappingURL=qualification.d.ts.map

package/dist/qualification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"qualification.d.ts","sourceRoot":"","sources":["../src/qualification.ts"],"names":[],"mappings":"AAGA,OAAO,EAA2C,eAAe,EAA+B,MAAM,iBAAiB,CAAC;AAIxH,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE1D,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,WAAW,CAAC;AACvD,MAAM,MAAM,wBAAwB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,wBAAwB,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,kBAAkB,CAAC;IAC1B,MAAM,EAAE,wBAAwB,CAAC;IACjC,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,wBAAwB,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACnC,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,4BAA4B;IAC3C,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,wBAAwB,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC;IAC5C,MAAM,EAAE,kBAAkB,EAAE,CAAC;CAC9B;AAiBD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAkClG;AAED,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,GAAG,wBAAwB,CAEnG;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,mBAAmB,GAAG,MAAM,CAErE;AAED,wBAAgB,yBAAyB,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,4BAA4B,CAQrH"}