@ashlr/hub 2.2.0 → 3.0.0

package/dist/core/run/sandboxed-engine.d.ts

@@ -0,0 +1,66 @@
+/**
+ * sandboxed-engine.ts — M45: run an external agent CLI (Claude Code / Codex)
+ * INSIDE a throwaway git worktree and capture ONLY its diff as a PENDING inbox
+ * proposal. This is the keystone that lets the autonomous fleet drive frontier
+ * backends without ever touching the live tree.
+ *
+ * SECURITY MODEL (external CLIs are black boxes):
+ *  - Edits are confined to an M21 sandbox worktree (cwd = worktreePath). The
+ *    worktree shares the source repo's .git, so it inherits remotes — therefore
+ *    we sever git's PUSH credential channel (see buildContainedEnv): no token
+ *    env vars, no ssh-agent, GIT_TERMINAL_PROMPT=0, and a per-invocation
+ *    `core.hooksPath` (via GIT_CONFIG_* env — NO shared-config mutation) whose
+ *    `pre-push` hook hard-fails every push.
+ *  - The agent still authenticates to ITS OWN vendor (Claude/Codex subscription)
+ *    via its on-disk session reached through the preserved real HOME — a
+ *    different credential channel from git push, which we cut.
+ *  - We consume ONLY the captured worktree diff. The agent's own commits land on
+ *    the throwaway scratch branch and are discarded with the sandbox.
+ *  - RESIDUAL (documented): the filesystem is not jailed — the agent can READ
+ *    outside the worktree. True OS isolation (container/VM) is a later milestone.
+ *
+ * ENTIRELY GATED: only reached when cfg.foundry opts in (or opts.sandboxEngine).
+ * Default builtin-only behavior is unaffected.
+ */
+import type { AshlrConfig, EngineId, EngineTier, RunBudget, RunState, Sandbox } from '../types.js';
+export interface SandboxedEngineResult {
+    /** Delegated RunState (status/usage/engineModel/engineTier). */
+    state: RunState;
+    /** Inbox proposal id when a non-empty diff was captured. */
+    proposalId?: string;
+}
+export interface RunEngineSandboxedOptions {
+    /** Absolute source repo the worktree forks from. */
+    sourceRepo: string;
+    /** Model id for the backend (else cfg.foundry.models[engine]). */
+    model?: string;
+    /** Budget hints recorded on the RunState. */
+    budget?: Partial<RunBudget>;
+    /** File the diff as a PENDING proposal (default true). */
+    propose?: boolean;
+    /** Reuse an existing worktree (e.g. the swarm's) instead of creating one. */
+    existingWorktree?: Sandbox;
+    /** Pre-generated run id (else one is generated). */
+    runId?: string;
+}
+/**
+ * Trust tier of a backend. M50: read from the declarative engine registry (single
+ * source of truth) rather than a hardcoded set — so a config-added backend is
+ * tiered by its declared `tier`. An unknown engine is 'local' (never implicitly
+ * frontier). The builtin registry maps {claude, codex} → 'frontier', all else →
+ * 'local', identical to the pre-M50 FRONTIER_ENGINES behavior.
+ */
+export declare function engineTierOf(engine: EngineId, cfg?: AshlrConfig): EngineTier;
+/**
+ * Build the contained env for an external agent subprocess. Preserves the agent's
+ * OWN auth (real HOME + its config-home overrides) while severing git push creds.
+ * `hooksDir` holds the pre-push blocker installed via per-invocation git config.
+ */
+export declare function buildContainedEnv(cfg: AshlrConfig, hooksDir: string): NodeJS.ProcessEnv;
+/**
+ * Run `engine` on `goal` inside a sandbox worktree of `opts.sourceRepo`, capturing
+ * the diff as a PENDING proposal. Never throws; failures surface as a 'failed'
+ * RunState. Does NOT fall back to a raw (unsandboxed) run — that would defeat the
+ * containment, so a sandbox-creation failure is terminal here.
+ */
+export declare function runEngineSandboxed(engine: EngineId, goal: string, cfg: AshlrConfig, opts: RunEngineSandboxedOptions): Promise<SandboxedEngineResult>;

package/dist/core/run/sandboxed-engine.js

@@ -0,0 +1,262 @@
+/**
+ * sandboxed-engine.ts — M45: run an external agent CLI (Claude Code / Codex)
+ * INSIDE a throwaway git worktree and capture ONLY its diff as a PENDING inbox
+ * proposal. This is the keystone that lets the autonomous fleet drive frontier
+ * backends without ever touching the live tree.
+ *
+ * SECURITY MODEL (external CLIs are black boxes):
+ *  - Edits are confined to an M21 sandbox worktree (cwd = worktreePath). The
+ *    worktree shares the source repo's .git, so it inherits remotes — therefore
+ *    we sever git's PUSH credential channel (see buildContainedEnv): no token
+ *    env vars, no ssh-agent, GIT_TERMINAL_PROMPT=0, and a per-invocation
+ *    `core.hooksPath` (via GIT_CONFIG_* env — NO shared-config mutation) whose
+ *    `pre-push` hook hard-fails every push.
+ *  - The agent still authenticates to ITS OWN vendor (Claude/Codex subscription)
+ *    via its on-disk session reached through the preserved real HOME — a
+ *    different credential channel from git push, which we cut.
+ *  - We consume ONLY the captured worktree diff. The agent's own commits land on
+ *    the throwaway scratch branch and are discarded with the sandbox.
+ *  - RESIDUAL (documented): the filesystem is not jailed — the agent can READ
+ *    outside the worktree. True OS isolation (container/VM) is a later milestone.
+ *
+ * ENTIRELY GATED: only reached when cfg.foundry opts in (or opts.sandboxEngine).
+ * Default builtin-only behavior is unaffected.
+ */
+import { mkdtempSync, writeFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { buildEngineCommand, spawnEngine } from './engines.js';
+import { resolveEngineSpec } from './engine-registry.js';
+import { buildSandboxLauncher, confinementProfileFor } from '../sandbox/confine.js';
+import { audit as auditConfinement } from '../sandbox/audit.js';
+import { newUsage, estCostUsd } from './budget.js';
+import { withToolEnv } from '../env-bridge.js';
+import { scrubSecrets } from '../knowledge/index.js';
+import { selectInboxStore } from '../seams/inbox.js';
+import { hashDiff, signProvenance } from '../foundry/provenance.js';
+/** Default hard wall-clock for an autonomous external run (20 min). */
+const DEFAULT_TIMEOUT_MS = 20 * 60_000;
+/** Credential-shaped env var names that must never reach the agent subprocess. */
+const CRED_ENV_DENY = /(_|^)(TOKEN|SECRET|KEY|PASSWORD|PASSWD|CREDENTIALS?)$/i;
+/**
+ * Trust tier of a backend. M50: read from the declarative engine registry (single
+ * source of truth) rather than a hardcoded set — so a config-added backend is
+ * tiered by its declared `tier`. An unknown engine is 'local' (never implicitly
+ * frontier). The builtin registry maps {claude, codex} → 'frontier', all else →
+ * 'local', identical to the pre-M50 FRONTIER_ENGINES behavior.
+ */
+export function engineTierOf(engine, cfg) {
+    return resolveEngineSpec(engine, cfg)?.tier ?? 'local';
+}
+const PRE_PUSH_BLOCK = '#!/bin/sh\n' +
+    '# ashlr M45: pushes are forbidden from a sandboxed-engine worktree.\n' +
+    'echo "ashlr: git push is blocked inside the sandbox" >&2\n' +
+    'exit 1\n';
+/**
+ * Build the contained env for an external agent subprocess. Preserves the agent's
+ * OWN auth (real HOME + its config-home overrides) while severing git push creds.
+ * `hooksDir` holds the pre-push blocker installed via per-invocation git config.
+ */
+export function buildContainedEnv(cfg, hooksDir) {
+    const realHome = process.env.HOME ?? process.env.USERPROFILE ?? '';
+    const base = {};
+    base.PATH = process.env.PATH ?? process.env.Path ?? '';
+    if (realHome)
+        base.HOME = realHome;
+    base.LANG = process.env.LANG ?? 'C';
+    if (process.env.TERM)
+        base.TERM = process.env.TERM;
+    if (process.env.TMPDIR)
+        base.TMPDIR = process.env.TMPDIR;
+    if (process.platform === 'win32') {
+        if (realHome)
+            base.USERPROFILE = realHome;
+        for (const k of ['SystemRoot', 'windir', 'PATHEXT', 'COMSPEC', 'TEMP', 'TMP', 'APPDATA', 'LOCALAPPDATA']) {
+            const v = process.env[k];
+            if (v)
+                base[k] = v;
+        }
+    }
+    // Preserve the agent CLIs' OWN config homes — their subscription auth lives here.
+    for (const k of ['CODEX_HOME', 'CLAUDE_CONFIG_DIR', 'XDG_CONFIG_HOME', 'XDG_DATA_HOME']) {
+        const v = process.env[k];
+        if (v)
+            base[k] = v;
+    }
+    // Layer ashlr non-secret config (OLLAMA_HOST, provider chain, paths, …).
+    const env = withToolEnv(cfg, base);
+    // Defensive: strip any credential-shaped var that slipped through.
+    for (const k of Object.keys(env)) {
+        if (CRED_ENV_DENY.test(k))
+            delete env[k];
+    }
+    // Sever git's PUSH credential channels (the agent's vendor auth via HOME is untouched).
+    env.GIT_TERMINAL_PROMPT = '0';
+    env.GIT_ASKPASS = '';
+    env.SSH_ASKPASS = '';
+    env.GIT_SSH_COMMAND = 'ssh -oBatchMode=yes';
+    delete env.SSH_AUTH_SOCK;
+    env.GIT_CONFIG_NOSYSTEM = '1';
+    // Per-invocation core.hooksPath (no shared-config mutation) → pre-push blocker.
+    env.GIT_CONFIG_COUNT = '1';
+    env.GIT_CONFIG_KEY_0 = 'core.hooksPath';
+    env.GIT_CONFIG_VALUE_0 = hooksDir;
+    return env;
+}
+/** Create a temp hooks dir containing a pre-push blocker. Returns its path. */
+function installPrePushBlocker() {
+    const hooksDir = mkdtempSync(join(tmpdir(), 'ashlr-hooks-'));
+    writeFileSync(join(hooksDir, 'pre-push'), PRE_PUSH_BLOCK, { mode: 0o755 });
+    return hooksDir;
+}
+/**
+ * Run `engine` on `goal` inside a sandbox worktree of `opts.sourceRepo`, capturing
+ * the diff as a PENDING proposal. Never throws; failures surface as a 'failed'
+ * RunState. Does NOT fall back to a raw (unsandboxed) run — that would defeat the
+ * containment, so a sandbox-creation failure is terminal here.
+ */
+export async function runEngineSandboxed(engine, goal, cfg, opts) {
+    const model = opts.model ?? cfg.foundry?.models?.[engine];
+    const engineModel = `${engine}:${model ?? 'default'}`;
+    const tier = engineTierOf(engine, cfg);
+    const id = opts.runId ?? `run-${Date.now().toString(36)}-${Math.random().toString(36).slice(2, 8)}`;
+    const mk = (over) => ({
+        id,
+        goal,
+        engine,
+        provider: 'external',
+        engineModel,
+        engineTier: tier,
+        createdAt: new Date().toISOString(),
+        updatedAt: new Date().toISOString(),
+        budget: {
+            maxTokens: opts.budget?.maxTokens ?? 0,
+            maxSteps: opts.budget?.maxSteps ?? 0,
+            allowCloud: opts.budget?.allowCloud ?? false,
+        },
+        usage: newUsage(),
+        tasks: [],
+        steps: [],
+        status: 'running',
+        ...over,
+    });
+    const wt = await import('../sandbox/worktree.js');
+    // Acquire a worktree (reuse the caller's when provided).
+    let sb;
+    let createdHere = false;
+    if (opts.existingWorktree) {
+        sb = opts.existingWorktree;
+    }
+    else {
+        try {
+            sb = wt.createSandbox(opts.sourceRepo);
+            createdHere = true;
+        }
+        catch (err) {
+            const msg = err instanceof Error ? err.message : String(err);
+            return { state: mk({ status: 'failed', result: `sandbox unavailable: ${msg}` }) };
+        }
+    }
+    const hooksDir = installPrePushBlocker();
+    const env = buildContainedEnv(cfg, hooksDir);
+    let proposalId;
+    try {
+        const cmd = buildEngineCommand(engine, goal, cfg, {
+            cwd: sb.worktreePath,
+            model,
+            autonomous: true,
+        });
+        if (!cmd) {
+            return { state: mk({ status: 'failed', result: `no command for engine "${engine}"` }) };
+        }
+        // M52: compute the OS-level sandbox launcher for this engine.
+        // confinementProfileFor is pure; buildSandboxLauncher may throw when
+        // onUnsupported:'fail' and the platform has no jail binary — that
+        // propagates as a failed run (caught in spawnEngine's never-throw wrapper).
+        // buildContainedEnv, the pre-push hook, and the diff/provenance logic are
+        // all unchanged — the launcher wraps the final spawn only.
+        const confinementProfile = confinementProfileFor(engine, cfg);
+        const launcher = buildSandboxLauncher(confinementProfile, {
+            worktree: sb.worktreePath,
+            home: process.env.HOME ?? process.env.USERPROFILE,
+            env: env,
+        });
+        // Emit confinement audit event (append-only, never throws).
+        auditConfinement({
+            action: 'confinement.run',
+            repo: sb.worktreePath,
+            sandboxId: sb.id,
+            summary: `engine=${engine} mode=${confinementProfile.mode ?? 'off'} platform=${process.platform} launched=${launcher !== null} networkEgress=${confinementProfile.networkEgress ?? false}`,
+            result: 'ok',
+        });
+        const res = spawnEngine(cmd, cfg, {
+            env,
+            timeoutMs: cfg.foundry?.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+            launcher: launcher ?? undefined,
+        });
+        const usage = res.usage
+            ? {
+                tokensIn: res.usage.tokensIn,
+                tokensOut: res.usage.tokensOut,
+                steps: 1,
+                estCostUsd: estCostUsd(engine, res.usage.tokensIn, res.usage.tokensOut),
+            }
+            : newUsage();
+        if (!res.ok) {
+            return {
+                state: mk({ status: 'failed', result: `engine "${engine}" failed: ${res.error ?? 'unknown error'}`, usage }),
+            };
+        }
+        // Capture the worktree diff (best-effort) and file it as a PENDING proposal.
+        if (opts.propose !== false) {
+            try {
+                const diff = wt.sandboxDiff(sb);
+                if (diff.files > 0 && diff.patch.trim().length > 0) {
+                    // M47.1 (H3): scrub ONCE and reuse the same scrubbed string for BOTH
+                    // the stored diff and the signed hash — so the merge gate recomputes
+                    // an identical hash. Bind {engineModel, tier, diffHash} with an HMAC
+                    // so a forged on-disk record cannot claim frontier merge-authority.
+                    const scrubbed = scrubSecrets(diff.patch);
+                    const diffHash = hashDiff(scrubbed);
+                    const provenanceSig = signProvenance(engineModel, tier, diffHash);
+                    const proposal = selectInboxStore(cfg).create({
+                        repo: sb.sourceRepo,
+                        origin: 'agent',
+                        kind: 'patch',
+                        title: `${engine} run: ${goal.slice(0, 80)}`,
+                        summary: `Sandboxed ${engineModel} run produced ${diff.files} file(s) ` +
+                            `(+${diff.insertions}/-${diff.deletions}). Review before applying.`,
+                        diff: scrubbed,
+                        diffHash,
+                        provenanceSig,
+                        sandboxId: sb.id,
+                        engineModel,
+                        engineTier: tier,
+                    });
+                    proposalId = proposal.id;
+                }
+            }
+            catch {
+                // diff/proposal capture is best-effort — never fail the run on it.
+            }
+        }
+        return { state: mk({ status: 'done', result: res.output, usage }), proposalId };
+    }
+    finally {
+        try {
+            rmSync(hooksDir, { recursive: true, force: true });
+        }
+        catch {
+            // best-effort cleanup
+        }
+        if (createdHere) {
+            try {
+                wt.removeSandbox(sb);
+            }
+            catch {
+                // removal is idempotent
+            }
+        }
+    }
+}
+//# sourceMappingURL=sandboxed-engine.js.map

package/dist/core/run/sandboxed-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandboxed-engine.js","sourceRoot":"","sources":["../../../src/core/run/sandboxed-engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAUjC,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACpF,OAAO,EAAE,KAAK,IAAI,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAwBpE,uEAAuE;AACvE,MAAM,kBAAkB,GAAG,EAAE,GAAG,MAAM,CAAC;AAEvC,kFAAkF;AAClF,MAAM,aAAa,GAAG,wDAAwD,CAAC;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,MAAgB,EAAE,GAAiB;IAC9D,OAAO,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,IAAI,IAAI,OAAO,CAAC;AACzD,CAAC;AAED,MAAM,cAAc,GAClB,aAAa;IACb,uEAAuE;IACvE,4DAA4D;IAC5D,UAAU,CAAC;AAEb;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAgB,EAAE,QAAgB;IAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;IACnE,MAAM,IAAI,GAAsB,EAAE,CAAC;IACnC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IACvD,IAAI,QAAQ;QAAE,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;IACnC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC;IACpC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI;QAAE,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IACnD,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM;QAAE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;IAEzD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,IAAI,QAAQ;YAAE,IAAI,CAAC,WAAW,GAAG,QAAQ,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,cAAc,CAAC,EAAE,CAAC;YACzG,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACzB,IAAI,CAAC;gBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,eAAe,CAAC,EAAE,CAAC;QACxF,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC;YAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,yEAAyE;IACzE,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAEnC,mEAAmE;IACnE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED,wFAAwF;IACxF,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC;IACrB,GAAG,CAAC,WAAW,GAAG,EAAE,CAAC;IACrB,GAAG,CAAC,eAAe,GAAG,qBAAqB,CAAC;IAC5C,OAAO,GAAG,CAAC,aAAa,CAAC;IACzB,GAAG,CAAC,mBAAmB,GAAG,GAAG,CAAC;IAC9B,gFAAgF;IAChF,GAAG,CAAC,gBAAgB,GAAG,GAAG,CAAC;IAC3B,GAAG,CAAC,gBAAgB,GAAG,gBAAgB,CAAC;IACxC,GAAG,CAAC,kBAAkB,GAAG,QAAQ,CAAC;IAClC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,SAAS,qBAAqB;IAC5B,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,cAAc,CAAC,CAAC,CAAC;IAC7D,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3E,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAgB,EAChB,IAAY,EACZ,GAAgB,EAChB,IAA+B;IAE/B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,WAAW,GAAG,GAAG,MAAM,IAAI,KAAK,IAAI,SAAS,EAAE,CAAC;IACtD,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvC,MAAM,EAAE,GACN,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IAE3F,MAAM,EAAE,GAAG,CAAC,IAAuB,EAAY,EAAE,CAAC,CAAC;QACjD,EAAE;QACF,IAAI;QACJ,MAAM;QACN,QAAQ,EAAE,UAAU;QACpB,WAAW;QACX,UAAU,EAAE,IAAI;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,MAAM,EAAE;YACN,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC;YACtC,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,IAAI,CAAC;YACpC,UAAU,EAAE,IAAI,CAAC,MAAM,EAAE,UAAU,IAAI,KAAK;SAC7C;QACD,KAAK,EAAE,QAAQ,EAAE;QACjB,KAAK,EAAE,EAAE;QACT,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,SAAS;QACjB,GAAG,IAAI;KACR,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;IAElD,yDAAyD;IACzD,IAAI,EAAW,CAAC;IAChB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC1B,EAAE,GAAG,IAAI,CAAC,gBAAgB,CAAC;IAC7B,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvC,WAAW,GAAG,IAAI,CAAC;QACrB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;QACpF,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;IACzC,MAAM,GAAG,GAAG,iBAAiB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,UAA8B,CAAC;IAEnC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE;YAChD,GAAG,EAAE,EAAE,CAAC,YAAY;YACpB,KAAK;YACL,UAAU,EAAE,IAAI;SACjB,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,0BAA0B,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;QAC1F,CAAC;QAED,8DAA8D;QAC9D,qEAAqE;QACrE,kEAAkE;QAClE,4EAA4E;QAC5E,0EAA0E;QAC1E,2DAA2D;QAC3D,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,oBAAoB,CAAC,kBAAkB,EAAE;YACxD,QAAQ,EAAE,EAAE,CAAC,YAAY;YACzB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;YACjD,GAAG,EAAE,GAAG;SACT,CAAC,CAAC;QAEH,4DAA4D;QAC5D,gBAAgB,CAAC;YACf,MAAM,EAAE,iBAAiB;YACzB,IAAI,EAAE,EAAE,CAAC,YAAY;YACrB,SAAS,EAAE,EAAE,CAAC,EAAE;YAChB,OAAO,EAAE,UAAU,MAAM,SAAS,kBAAkB,CAAC,IAAI,IAAI,KAAK,aAAa,OAAO,CAAC,QAAQ,aAAa,QAAQ,KAAK,IAAI,kBAAkB,kBAAkB,CAAC,aAAa,IAAI,KAAK,EAAE;YAC1L,MAAM,EAAE,IAAI;SACb,CAAC,CAAC;QAEH,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE;YAChC,GAAG;YACH,SAAS,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,kBAAkB;YACvD,QAAQ,EAAE,QAAQ,IAAI,SAAS;SAChC,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK;YACrB,CAAC,CAAC;gBACE,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ;gBAC5B,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS;gBAC9B,KAAK,EAAE,CAAC;gBACR,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC;aACxE;YACH,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEf,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO;gBACL,KAAK,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,MAAM,aAAa,GAAG,CAAC,KAAK,IAAI,eAAe,EAAE,EAAE,KAAK,EAAE,CAAC;aAC7G,CAAC;QACJ,CAAC;QAED,6EAA6E;QAC7E,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBAChC,IAAI,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACnD,qEAAqE;oBACrE,qEAAqE;oBACrE,qEAAqE;oBACrE,oEAAoE;oBACpE,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBACpC,MAAM,aAAa,GAAG,cAAc,CAAC,WAAW,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;oBAClE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;wBAC5C,IAAI,EAAE,EAAE,CAAC,UAAU;wBACnB,MAAM,EAAE,OAAO;wBACf,IAAI,EAAE,OAAO;wBACb,KAAK,EAAE,GAAG,MAAM,SAAS,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;wBAC5C,OAAO,EACL,aAAa,WAAW,iBAAiB,IAAI,CAAC,KAAK,WAAW;4BAC9D,KAAK,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,SAAS,4BAA4B;wBACrE,IAAI,EAAE,QAAQ;wBACd,QAAQ;wBACR,aAAa;wBACb,SAAS,EAAE,EAAE,CAAC,EAAE;wBAChB,WAAW;wBACX,UAAU,EAAE,IAAI;qBACjB,CAAC,CAAC;oBACH,UAAU,GAAG,QAAQ,CAAC,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,mEAAmE;YACrE,CAAC;QACH,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;IAClF,CAAC;YAAS,CAAC;QACT,IAAI,CAAC;YACH,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC;gBACH,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/core/run/verify-commands.d.ts

@@ -0,0 +1,83 @@
+/**
+ * M43: Structured verification primitives — detect & run typecheck/test/lint.
+ *
+ * The hub runs local-model tasks (`runTask`). After a task completes, M43 runs a
+ * STRUCTURED verification (typecheck/test/lint). This module provides the two
+ * low-level halves the orchestrator's repair loop wires together:
+ *
+ *   detectVerifyCommands() — READ-ONLY introspection of a workspace to decide
+ *     which verification commands exist (never installs, never mutates).
+ *   runVerifyCommand()     — runs ONE detected command in the workspace with a
+ *     hard timeout and arg arrays only; captures + scrubs + caps output. Uses a
+ *     shell ONLY on Windows so PATHEXT can resolve npm.cmd/npx.cmd shims.
+ *
+ * Rules (mirroring git.ts):
+ *   - Node builtins only; zero third-party deps.
+ *   - Subprocesses run with execFileSync / spawnSync via ARG ARRAYS, NO shell,
+ *     and a tight timeout so a hung verify can never block the orchestrator.
+ *   - runVerifyCommand never throws — any failure resolves to { ok:false } with
+ *     the error captured in `output`.
+ */
+import type { SpawnSyncOptionsWithStringEncoding } from 'node:child_process';
+import type { AshlrConfig } from '../types.js';
+/** A single verification command to run, classified by what it checks. */
+export interface VerifyCommand {
+    kind: 'typecheck' | 'test' | 'lint';
+    /** Exact argv (executable + args). NEVER passed through a shell. */
+    cmd: string[];
+}
+/** Outcome of running one VerifyCommand. */
+export interface VerifyCommandResult {
+    ok: boolean;
+    /** Human-readable command (the argv joined) for logs / verdicts. */
+    command: string;
+    exitCode: number;
+    /** Combined stdout+stderr, secret-scrubbed and size-capped (≤32KB). */
+    output: string;
+    timedOut: boolean;
+}
+/**
+ * READ-ONLY detection of the verification commands available in `workspaceRoot`.
+ * Never installs, never spawns — purely inspects package.json + config files.
+ *
+ * Preference order per kind:
+ *   typecheck: package.json `typecheck` script → else `tsc --noEmit` when a
+ *              tsconfig.json exists.
+ *   test:      package.json `test` script → else `vitest run` when vitest is a
+ *              dep or a vitest.config.* exists.
+ *   lint:      package.json `lint` script (no fallback).
+ *
+ * Scripts run through the detected package manager (`<pm> run <script>`);
+ * fallbacks run through `npx`. Returns [] when nothing is detected — the caller
+ * treats an empty list as a no-op.
+ */
+export declare function detectVerifyCommands(workspaceRoot: string): VerifyCommand[];
+/**
+ * Build the spawnSync options for a verify command, made cross-platform.
+ *
+ * On Windows the package-manager runners we spawn (`npm`, `npx`, `pnpm`,
+ * `yarn`, `bun`) are not real executables but `.cmd`/`.ps1` shims on PATH.
+ * `spawnSync` does NOT consult PATHEXT, so `spawnSync('npm', …)` fails with
+ * ENOENT and the command silently does nothing. Running through the shell
+ * (`shell: true`) lets the OS resolve `npm.cmd`/`npx.cmd` etc. via PATHEXT.
+ * Our argv arrays are simple, space-free tokens (e.g. ['npm','run','typecheck'],
+ * ['npx','tsc','--noEmit']), so shell quoting is a non-issue. `windowsHide`
+ * keeps a console window from flashing up. (git/node/tsc are real binaries and
+ * resolve fine either way; the shell route is harmless for them.)
+ *
+ * `platform` is injected (defaults to `process.platform`) purely so this can be
+ * unit-tested without switching the host OS.
+ */
+export declare function spawnOptionsFor(workspaceRoot: string, timeout: number, platform?: NodeJS.Platform): SpawnSyncOptionsWithStringEncoding;
+/**
+ * Run ONE verification command in `workspaceRoot` (cwd). Arg array, shell only
+ * on Windows (see spawnOptionsFor), with a hard timeout (default 120s, capped at
+ * 600s). Captures stdout+stderr,
+ * scrubs + caps via renderToolText, and audits the outcome.
+ *
+ * Never throws — a spawn failure or timeout resolves to { ok:false } with the
+ * error in `output`.
+ */
+export declare function runVerifyCommand(vc: VerifyCommand, workspaceRoot: string, _cfg: AshlrConfig, opts?: {
+    timeoutMs?: number;
+}): VerifyCommandResult;

package/dist/core/run/verify-commands.js

@@ -0,0 +1,234 @@
+/**
+ * M43: Structured verification primitives — detect & run typecheck/test/lint.
+ *
+ * The hub runs local-model tasks (`runTask`). After a task completes, M43 runs a
+ * STRUCTURED verification (typecheck/test/lint). This module provides the two
+ * low-level halves the orchestrator's repair loop wires together:
+ *
+ *   detectVerifyCommands() — READ-ONLY introspection of a workspace to decide
+ *     which verification commands exist (never installs, never mutates).
+ *   runVerifyCommand()     — runs ONE detected command in the workspace with a
+ *     hard timeout and arg arrays only; captures + scrubs + caps output. Uses a
+ *     shell ONLY on Windows so PATHEXT can resolve npm.cmd/npx.cmd shims.
+ *
+ * Rules (mirroring git.ts):
+ *   - Node builtins only; zero third-party deps.
+ *   - Subprocesses run with execFileSync / spawnSync via ARG ARRAYS, NO shell,
+ *     and a tight timeout so a hung verify can never block the orchestrator.
+ *   - runVerifyCommand never throws — any failure resolves to { ok:false } with
+ *     the error captured in `output`.
+ */
+import { spawnSync } from 'node:child_process';
+import { existsSync, readFileSync, readdirSync } from 'node:fs';
+import { join } from 'node:path';
+import { renderToolText } from '../mcp-native.js';
+import { audit } from '../sandbox/audit.js';
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Default per-command timeout (ms). */
+const DEFAULT_TIMEOUT_MS = 120_000;
+/** Hard ceiling on the per-command timeout (ms). */
+const MAX_TIMEOUT_MS = 600_000;
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+/**
+ * Detect the package-manager runner from the lockfile present in `root`.
+ * Order matters only insofar as a repo should have exactly one lockfile;
+ * pnpm → yarn → bun → npm (default).
+ */
+function detectPackageManager(root) {
+    if (existsSync(join(root, 'pnpm-lock.yaml')))
+        return 'pnpm';
+    if (existsSync(join(root, 'yarn.lock')))
+        return 'yarn';
+    if (existsSync(join(root, 'bun.lockb')))
+        return 'bun';
+    return 'npm';
+}
+/** Build the argv to run a package.json script named `script` via `pm`. */
+function runScriptArgv(pm, script) {
+    // npm/pnpm/yarn/bun all accept `<pm> run <script>`.
+    return [pm, 'run', script];
+}
+/** Read & parse package.json once; returns the parsed object or null on any error. */
+function readPackageJson(root) {
+    try {
+        const raw = readFileSync(join(root, 'package.json'), 'utf8');
+        return JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+}
+/** Extract the string-valued scripts map from a parsed package.json; {} when absent. */
+function scriptsOf(pkg) {
+    const scripts = pkg?.scripts;
+    if (!scripts || typeof scripts !== 'object')
+        return {};
+    const out = {};
+    for (const [k, v] of Object.entries(scripts)) {
+        if (typeof v === 'string')
+            out[k] = v;
+    }
+    return out;
+}
+/** True when the parsed package.json declares `dep` in deps or devDeps. */
+function hasDep(pkg, dep) {
+    if (!pkg)
+        return false;
+    return ((pkg.dependencies !== undefined && dep in pkg.dependencies) ||
+        (pkg.devDependencies !== undefined && dep in pkg.devDependencies));
+}
+/** True when a file matching `<prefix>.<ext>` exists for any common config ext. */
+function hasConfigFile(root, prefix) {
+    try {
+        const entries = readdirSync(root);
+        return entries.some((f) => f === prefix || f.startsWith(`${prefix}.`));
+    }
+    catch {
+        return false;
+    }
+}
+// ---------------------------------------------------------------------------
+// Public: detectVerifyCommands
+// ---------------------------------------------------------------------------
+/**
+ * READ-ONLY detection of the verification commands available in `workspaceRoot`.
+ * Never installs, never spawns — purely inspects package.json + config files.
+ *
+ * Preference order per kind:
+ *   typecheck: package.json `typecheck` script → else `tsc --noEmit` when a
+ *              tsconfig.json exists.
+ *   test:      package.json `test` script → else `vitest run` when vitest is a
+ *              dep or a vitest.config.* exists.
+ *   lint:      package.json `lint` script (no fallback).
+ *
+ * Scripts run through the detected package manager (`<pm> run <script>`);
+ * fallbacks run through `npx`. Returns [] when nothing is detected — the caller
+ * treats an empty list as a no-op.
+ */
+export function detectVerifyCommands(workspaceRoot) {
+    const commands = [];
+    const pkg = readPackageJson(workspaceRoot);
+    const scripts = scriptsOf(pkg);
+    const pm = detectPackageManager(workspaceRoot);
+    // --- typecheck ---
+    if (scripts['typecheck']) {
+        commands.push({ kind: 'typecheck', cmd: runScriptArgv(pm, 'typecheck') });
+    }
+    else if (existsSync(join(workspaceRoot, 'tsconfig.json'))) {
+        commands.push({ kind: 'typecheck', cmd: ['npx', 'tsc', '--noEmit'] });
+    }
+    // --- test ---
+    if (scripts['test']) {
+        commands.push({ kind: 'test', cmd: runScriptArgv(pm, 'test') });
+    }
+    else if (hasDep(pkg, 'vitest') || hasConfigFile(workspaceRoot, 'vitest.config')) {
+        commands.push({ kind: 'test', cmd: ['npx', 'vitest', 'run'] });
+    }
+    // --- lint ---
+    if (scripts['lint']) {
+        commands.push({ kind: 'lint', cmd: runScriptArgv(pm, 'lint') });
+    }
+    return commands;
+}
+// ---------------------------------------------------------------------------
+// Public: spawnOptionsFor
+// ---------------------------------------------------------------------------
+/**
+ * Build the spawnSync options for a verify command, made cross-platform.
+ *
+ * On Windows the package-manager runners we spawn (`npm`, `npx`, `pnpm`,
+ * `yarn`, `bun`) are not real executables but `.cmd`/`.ps1` shims on PATH.
+ * `spawnSync` does NOT consult PATHEXT, so `spawnSync('npm', …)` fails with
+ * ENOENT and the command silently does nothing. Running through the shell
+ * (`shell: true`) lets the OS resolve `npm.cmd`/`npx.cmd` etc. via PATHEXT.
+ * Our argv arrays are simple, space-free tokens (e.g. ['npm','run','typecheck'],
+ * ['npx','tsc','--noEmit']), so shell quoting is a non-issue. `windowsHide`
+ * keeps a console window from flashing up. (git/node/tsc are real binaries and
+ * resolve fine either way; the shell route is harmless for them.)
+ *
+ * `platform` is injected (defaults to `process.platform`) purely so this can be
+ * unit-tested without switching the host OS.
+ */
+export function spawnOptionsFor(workspaceRoot, timeout, platform = process.platform) {
+    const isWin = platform === 'win32';
+    return {
+        cwd: workspaceRoot,
+        timeout,
+        stdio: 'pipe',
+        encoding: 'utf8',
+        shell: isWin, // resolve npm.cmd/npx.cmd etc. via PATHEXT on Windows
+        windowsHide: true,
+    };
+}
+// ---------------------------------------------------------------------------
+// Public: runVerifyCommand
+// ---------------------------------------------------------------------------
+/**
+ * Run ONE verification command in `workspaceRoot` (cwd). Arg array, shell only
+ * on Windows (see spawnOptionsFor), with a hard timeout (default 120s, capped at
+ * 600s). Captures stdout+stderr,
+ * scrubs + caps via renderToolText, and audits the outcome.
+ *
+ * Never throws — a spawn failure or timeout resolves to { ok:false } with the
+ * error in `output`.
+ */
+export function runVerifyCommand(vc, workspaceRoot, _cfg, opts) {
+    const command = vc.cmd.join(' ');
+    const timeout = Math.min(MAX_TIMEOUT_MS, Math.max(1, opts?.timeoutMs ?? DEFAULT_TIMEOUT_MS));
+    const bin = vc.cmd[0];
+    if (!bin) {
+        const output = renderToolText(`verify command "${vc.kind}" has an empty argv`);
+        audit({
+            action: 'verify:command',
+            repo: workspaceRoot,
+            sandboxId: null,
+            summary: `${vc.kind}: empty argv`,
+            result: 'error',
+        });
+        return { ok: false, command, exitCode: -1, output, timedOut: false };
+    }
+    try {
+        const res = spawnSync(bin, vc.cmd.slice(1), spawnOptionsFor(workspaceRoot, timeout));
+        const timedOut = res.error !== undefined && res.error.code === 'ETIMEDOUT';
+        // spawn-level failure (binary not found, timeout, …): res.status is null.
+        if (res.error) {
+            const output = renderToolText(`${command}\n${(res.stdout ?? '')}${res.stderr ?? ''}\n${res.error.message}`);
+            audit({
+                action: 'verify:command',
+                repo: workspaceRoot,
+                sandboxId: null,
+                summary: `${vc.kind}: ${command} → ${timedOut ? 'timed out' : 'spawn error'}`,
+                result: 'error',
+            });
+            return { ok: false, command, exitCode: -1, output, timedOut };
+        }
+        const exitCode = res.status ?? -1;
+        const ok = exitCode === 0;
+        const output = renderToolText(`${(res.stdout ?? '')}${res.stderr ?? ''}`);
+        audit({
+            action: 'verify:command',
+            repo: workspaceRoot,
+            sandboxId: null,
+            summary: `${vc.kind}: ${command} → exit ${exitCode}`,
+            result: ok ? 'ok' : 'error',
+        });
+        return { ok, command, exitCode, output, timedOut: false };
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        const output = renderToolText(`${command}\n${msg}`);
+        audit({
+            action: 'verify:command',
+            repo: workspaceRoot,
+            sandboxId: null,
+            summary: `${vc.kind}: ${command} → threw: ${msg}`,
+            result: 'error',
+        });
+        return { ok: false, command, exitCode: -1, output, timedOut: false };
+    }
+}
+//# sourceMappingURL=verify-commands.js.map