@askdkc/kiokuko 0.1.24 → 0.1.25

package/dist/memory/checkpoint-contract.js

@@ -0,0 +1,105 @@
+import * as z from 'zod/v4';
+import { ENTRY_KINDS } from '../serialization/validate.js';
+import { CHECKPOINT_OUTCOMES, CHECKPOINT_RUN_ID_DESCRIPTION, MAX_CHECKPOINT_FEEDBACK_ITEMS, MAX_CHECKPOINT_MEMORY_ITEMS, checkpointEvidenceSchema, checkpointFeedbackSchema, hasCheckpointEvidenceContent, } from '../ledger/checkpoint-contract.js';
+const memoryKind = z.enum(ENTRY_KINDS);
+const memoryClass = z.enum([
+    'implementation-pattern', 'troubleshooting', 'tool-usage', 'extension-usage',
+    'configuration', 'workflow', 'gotcha', 'reference', 'preference',
+]);
+const applicability = z.object({
+    languages: z.array(z.string().trim().min(1).max(500)).max(100).optional(),
+    frameworks: z.array(z.object({
+        name: z.string().trim().min(1).max(500),
+        version: z.string().trim().min(1).max(100).optional(),
+    }).strict()).max(50).optional(),
+    databases: z.array(z.string().trim().min(1).max(500)).max(100).optional(),
+    runtimes: z.array(z.string().trim().min(1).max(500)).max(100).optional(),
+    tools: z.array(z.string().trim().min(1).max(500)).max(100).optional(),
+    platforms: z.array(z.string().trim().min(1).max(500)).max(100).optional(),
+}).strict();
+const signals = z.object({
+    symbols: z.array(z.string().trim().min(1).max(500)).max(100).optional(),
+    paths: z.array(z.string().trim().min(1).max(500)).max(100).optional(),
+    errors: z.array(z.string().trim().min(1).max(500)).max(100).optional(),
+    packages: z.array(z.string().trim().min(1).max(500)).max(100).optional(),
+    commands: z.array(z.string().trim().min(1).max(500)).max(100).optional(),
+}).strict();
+export const checkpointMemorySchema = z.object({
+    kind: memoryKind,
+    title: z.string().trim().min(1).max(300),
+    body: z.string().max(20_000),
+    summary: z.string().max(2000).optional(),
+    scope: z.enum(['project', 'global']).default('project'),
+    retrievalScope: z.enum(['project-only', 'ecosystem', 'global']).optional(),
+    tags: z.array(z.string().trim().min(1).max(200)).max(20).optional(),
+    confidence: z.number().min(0).max(1).default(0.7),
+    memoryClass: memoryClass.optional(),
+    applicability: applicability.optional(),
+    signals: signals.optional(),
+    portableReason: z.string().trim().min(1).max(2000).optional(),
+}).strict();
+const checkpointRunId = z.string().min(1).max(256).refine((value) => value.trim() === value && !/\p{Cc}/u.test(value), { message: 'runId must be a canonical bounded identity' }).describe(CHECKPOINT_RUN_ID_DESCRIPTION);
+const checkpointDeliveryId = z.string().min(1).max(256).refine((value) => value.trim() === value && !/\p{Cc}/u.test(value), { message: 'deliveryId must be a canonical bounded identity' });
+function hasCheckpointContent(value) {
+    return (value.memories?.length ?? 0) > 0
+        || (value.feedback?.length ?? 0) > 0
+        || hasCheckpointEvidenceContent(value.evidence);
+}
+function addIssue(context, path, message) {
+    context.addIssue({ code: 'custom', path, message });
+}
+function refineRunBoundCheckpoint(value, context) {
+    if (value.outcome === undefined)
+        addIssue(context, ['outcome'], 'outcome is required when runId is supplied');
+    if (!hasCheckpointContent(value))
+        addIssue(context, [], 'A run-bound checkpoint requires memory, feedback, or non-empty evidence');
+    if ((value.feedback?.length ?? 0) > 0 && value.deliveryId === undefined) {
+        addIssue(context, ['deliveryId'], 'deliveryId is required when feedback is supplied');
+    }
+}
+export const runBoundCheckpointSchema = z.object({
+    cwd: z.string().min(1).optional(),
+    runId: checkpointRunId,
+    deliveryId: checkpointDeliveryId.optional(),
+    outcome: z.enum(CHECKPOINT_OUTCOMES),
+    memories: z.array(checkpointMemorySchema).max(MAX_CHECKPOINT_MEMORY_ITEMS).optional(),
+    feedback: z.array(checkpointFeedbackSchema).max(MAX_CHECKPOINT_FEEDBACK_ITEMS).optional(),
+    evidence: checkpointEvidenceSchema.optional(),
+}).strict().superRefine((value, context) => refineRunBoundCheckpoint(value, context));
+export const standaloneMemoryCheckpointSchema = z.object({
+    cwd: z.string().min(1).optional(),
+    memories: z.array(checkpointMemorySchema).min(1).max(MAX_CHECKPOINT_MEMORY_ITEMS),
+}).strict();
+export const memoryCheckpointVariantsSchema = z.union([
+    runBoundCheckpointSchema,
+    standaloneMemoryCheckpointSchema,
+]);
+function refineCheckpointInput(value, context) {
+    if (value.runId !== undefined) {
+        refineRunBoundCheckpoint(value, context);
+        return;
+    }
+    if ((value.memories?.length ?? 0) === 0)
+        addIssue(context, ['memories'], 'Without runId, at least one memory is required');
+    if (value.outcome !== undefined)
+        addIssue(context, ['outcome'], 'outcome is only valid for a run-bound checkpoint');
+    if (value.deliveryId !== undefined)
+        addIssue(context, ['deliveryId'], 'deliveryId requires runId');
+    if (value.feedback !== undefined)
+        addIssue(context, ['feedback'], 'feedback requires runId');
+    if (value.evidence !== undefined)
+        addIssue(context, ['evidence'], 'evidence requires runId');
+}
+// The MCP SDK only serializes object schemas in tools/list; a union would be
+// advertised as an empty schema. This closed object retains the same runtime
+// cross-field contract while keeping the public property schema visible.
+export const memoryCheckpointInputSchema = z.object({
+    cwd: z.string().min(1).optional(),
+    memories: z.array(checkpointMemorySchema).max(MAX_CHECKPOINT_MEMORY_ITEMS).optional(),
+    runId: checkpointRunId.optional(),
+    deliveryId: checkpointDeliveryId.optional(),
+    outcome: z.enum(CHECKPOINT_OUTCOMES).optional(),
+    feedback: z.array(checkpointFeedbackSchema).max(MAX_CHECKPOINT_FEEDBACK_ITEMS).optional(),
+    evidence: checkpointEvidenceSchema.optional(),
+}).strict().superRefine((value, context) => refineCheckpointInput(value, context));
+//# sourceMappingURL=checkpoint-contract.js.map

package/dist/memory/checkpoint-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkpoint-contract.js","sourceRoot":"","sources":["../../src/memory/checkpoint-contract.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAC3D,OAAO,EACL,mBAAmB,EACnB,6BAA6B,EAC7B,6BAA6B,EAC7B,2BAA2B,EAC3B,wBAAwB,EACxB,wBAAwB,EACxB,4BAA4B,GAC7B,MAAM,kCAAkC,CAAC;AAE1C,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AACvC,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,CAAC;IACzB,wBAAwB,EAAE,iBAAiB,EAAE,YAAY,EAAE,iBAAiB;IAC5E,eAAe,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,YAAY;CACjE,CAAC,CAAC;AACH,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QACvC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACtD,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/B,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACzE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC1E,CAAC,CAAC,MAAM,EAAE,CAAC;AACZ,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACvE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACtE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACzE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,IAAI,EAAE,UAAU;IAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;IAC5B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;IACxC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACvD,cAAc,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1E,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IACjD,WAAW,EAAE,WAAW,CAAC,QAAQ,EAAE;IACnC,aAAa,EAAE,aAAa,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CACvD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAC3D,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAC1D,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAC;AAC1C,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAC5D,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAC3D,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAC/D,CAAC;AAQF,SAAS,oBAAoB,CAAC,KAAwB;IACpD,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;WACnC,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC;WACjC,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AACpD,CAAC;AAED,SAAS,QAAQ,CAAC,OAAwB,EAAE,IAAc,EAAE,OAAe;IACzE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAsE,EAAE,OAAwB;IAChI,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,4CAA4C,CAAC,CAAC;IAC9G,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC;QAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,yEAAyE,CAAC,CAAC;IACnI,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QACxE,QAAQ,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,kDAAkD,CAAC,CAAC;IACxF,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,KAAK,EAAE,eAAe;IACtB,UAAU,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IACrF,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,QAAQ,EAAE;IACzF,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAEtF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC;IACvD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC;CAClF,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,KAAK,CAAC;IACpD,wBAAwB;IACxB,gCAAgC;CACjC,CAAC,CAAC;AAEH,SAAS,qBAAqB,CAAC,KAI9B,EAAE,OAAwB;IACzB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC9B,wBAAwB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACzC,OAAO;IACT,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC;QAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,gDAAgD,CAAC,CAAC;IAC3H,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,kDAAkD,CAAC,CAAC;IACpH,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,EAAE,2BAA2B,CAAC,CAAC;IACnG,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;IAC7F,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,yBAAyB,CAAC,CAAC;AAC/F,CAAC;AAED,6EAA6E;AAC7E,6EAA6E;AAC7E,yEAAyE;AACzE,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACjC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAC,QAAQ,EAAE;IACrF,KAAK,EAAE,eAAe,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC3C,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE;IAC/C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC,QAAQ,EAAE;IACzF,QAAQ,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CAC9C,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,qBAAqB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC"}

package/dist/memory/scoped-memory.d.ts

@@ -5,6 +5,7 @@ import { type EntryKind } from '../serialization/validate.js';
 import { type Applicability, type MemoryClass, type MemorySignals, type RetrievalScope } from './structured-memory.js';
 import { type FederatedScope, type FederatedRecallResult } from './federated-retrieval.js';
 import type { ProjectFingerprint } from '../repository/project-fingerprint.js';
+import { type CheckpointOutcome } from '../ledger/checkpoint-contract.js';
 interface GitProvenanceExecOptions {
     cwd: string;
     encoding: 'utf8';
@@ -42,15 +43,20 @@ export interface CheckpointMemory {
     signals?: MemorySignals;
     portableReason?: string;
 }
-export interface ScopedCheckpointInput {
+export interface ScopedCheckpointStandaloneInput {
     cwd?: string;
     memories: CheckpointMemory[];
-    runId?: string;
+}
+export interface ScopedCheckpointRunInput {
+    cwd?: string;
+    memories: CheckpointMemory[];
+    runId: string;
     deliveryId?: string;
-    outcome?: 'completed' | 'failed' | 'cancelled' | 'interrupted';
+    outcome: CheckpointOutcome;
     feedback?: unknown[];
     evidence?: unknown;
 }
+export type ScopedCheckpointInput = ScopedCheckpointStandaloneInput | ScopedCheckpointRunInput;
 export interface ScopedCheckpointResult {
     project: ResolvedProjectWorkspace | null;
     entries: Array<Pick<EntryRecord, 'id' | 'workspace' | 'kind' | 'status' | 'title' | 'revision'>>;

package/dist/memory/scoped-memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scoped-memory.d.ts","sourceRoot":"","sources":["../../src/memory/scoped-memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGvD,OAAO,EAAmD,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AACjG,OAAO,EAKL,KAAK,wBAAwB,EAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAkD,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACvK,OAAO,EAA2B,KAAK,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAYpH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAK/E,UAAU,wBAAwB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,KAAK,qBAAqB,GAAG,CAC3B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,wBAAwB,KAC9B,MAAM,CAAC;AAoBZ,iGAAiG;AACjG,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,qBAA4C,GACpD,MAAM,GAAG,IAAI,CAuBf;AAED,MAAM,MAAM,WAAW,GAAG,cAAc,CAAC;AAEzC,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,wBAAwB,CAAC;IACnC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,aAAa,CAAC;IAC/D,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACzC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC;IACjG,GAAG,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,uBAAuB,EAAE,MAAM,CAAA;KAAE,CAAC;CAChJ;AA6HD,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAWxH;AAED,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CA4OpI"}
+{"version":3,"file":"scoped-memory.d.ts","sourceRoot":"","sources":["../../src/memory/scoped-memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGvD,OAAO,EAAmD,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AACjG,OAAO,EAKL,KAAK,wBAAwB,EAC9B,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAiB,KAAK,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAC7E,OAAO,EAAkD,KAAK,aAAa,EAAE,KAAK,WAAW,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACvK,OAAO,EAA2B,KAAK,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAYpH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAC/E,OAAO,EAgBL,KAAK,iBAAiB,EAGvB,MAAM,kCAAkC,CAAC;AAK1C,UAAU,wBAAwB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;CACxB;AAED,KAAK,qBAAqB,GAAG,CAC3B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EAAE,EACd,OAAO,EAAE,wBAAwB,KAC9B,MAAM,CAAC;AAoBZ,iGAAiG;AACjG,wBAAgB,6BAA6B,CAC3C,cAAc,EAAE,MAAM,EACtB,OAAO,GAAE,qBAA4C,GACpD,MAAM,GAAG,IAAI,CAuBf;AAED,MAAM,MAAM,WAAW,GAAG,cAAc,CAAC;AAEzC,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,wBAAwB,CAAC;IACnC,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAEvD,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,SAAS,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,+BAA+B;IAC9C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,wBAAwB;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,MAAM,qBAAqB,GAAG,+BAA+B,GAAG,wBAAwB,CAAC;AAE/F,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,wBAAwB,GAAG,IAAI,CAAC;IACzC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,WAAW,GAAG,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,UAAU,CAAC,CAAC,CAAC;IACjG,GAAG,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAAC,uBAAuB,EAAE,MAAM,CAAA;KAAE,CAAC;CAChJ;AAgQD,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAWxH;AAED,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAkNpI"}

package/dist/memory/scoped-memory.js

@@ -15,6 +15,7 @@ import { findSecret } from './secrets.js';
 import { assertContextFeedbackRecordable, recordContextFeedbackInTransaction } from '../context/feedback.js';
 import { readContextDelivery } from '../context/delivery.js';
 import { recordKnowledgePathsInTransaction } from '../akinator/knowledge-path.js';
+import { CHECKPOINT_COMMAND_FIELD_NAMES, CHECKPOINT_EVIDENCE_FIELD_NAMES, CHECKPOINT_FEEDBACK_FIELD_NAMES, CHECKPOINT_OUTCOMES, CHECKPOINT_RESULT_OUTCOMES, CHECKPOINT_TEST_FIELD_NAMES, CHECKPOINT_VERIFICATION_FIELD_NAMES, MAX_CHECKPOINT_EVIDENCE_ITEMS, MAX_CHECKPOINT_EXECUTABLE_CHARS, MAX_CHECKPOINT_PATHS, MAX_CHECKPOINT_SHORT_TEXT_CHARS, MAX_CHECKPOINT_SIGNALS, } from '../ledger/checkpoint-contract.js';
 const GIT_PROVENANCE_TIMEOUT_MS = 5_000;
 const GIT_PROVENANCE_MAX_BUFFER = 64 * 1024;
 const executeGitProvenance = (executable, args, options) => execFileSync(executable, args, options);
@@ -67,8 +68,8 @@ const CHECKPOINT_MEMORY_FIELDS = new Set([
     'kind', 'title', 'body', 'summary', 'scope', 'retrievalScope', 'tags', 'confidence',
     'memoryClass', 'applicability', 'signals', 'portableReason',
 ]);
-const CHECKPOINT_FEEDBACK_FIELDS = new Set(['entryId', 'entryRevision', 'verdict', 'comment']);
-const CHECKPOINT_OUTCOMES = new Set(['completed', 'failed', 'cancelled', 'interrupted']);
+const CHECKPOINT_INPUT_FIELDS = new Set(['cwd', 'memories', 'runId', 'deliveryId', 'outcome', 'feedback', 'evidence']);
+const CHECKPOINT_FEEDBACK_FIELDS = new Set(CHECKPOINT_FEEDBACK_FIELD_NAMES);
 function assertCheckpointEligible(status) {
     const eligibility = checkpointEligibility(status);
     if (eligibility.allowed)
@@ -86,9 +87,12 @@ function checkpointObject(value, allowed, message) {
     if (prototype !== Object.prototype && prototype !== null) {
         throw new KiokukoError('VALIDATION_ERROR', message);
     }
+    const keys = Reflect.ownKeys(value);
+    if (keys.length > allowed.size)
+        throw new KiokukoError('VALIDATION_ERROR', message);
     const result = Object.create(null);
     const descriptors = Object.getOwnPropertyDescriptors(value);
-    for (const key of Reflect.ownKeys(value)) {
+    for (const key of keys) {
         if (typeof key !== 'string' || !allowed.has(key)) {
             throw new KiokukoError('VALIDATION_ERROR', message);
         }
@@ -107,87 +111,192 @@ function sameProject(left, right) {
         && left.repositoryId === right.repositoryId
         && left.workspace === right.workspace;
 }
-function boundedEvidence(raw) {
-    if (raw === undefined)
-        return { changedPaths: [], errorSignatures: [], commands: [], tests: [] };
-    if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
-        throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-    let canonicalEvidence;
-    try {
-        canonicalEvidence = canonicalJson(raw);
+function checkpointArray(value, maximum, message) {
+    if (!Array.isArray(value) || isProxy(value) || value.length > maximum) {
+        throw new KiokukoError('VALIDATION_ERROR', message);
     }
-    catch (error) {
-        if (error instanceof RangeError || (error instanceof KiokukoError && error.code === 'VALIDATION_ERROR')) {
-            throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
+    const keys = Reflect.ownKeys(value);
+    if (keys.length !== value.length + 1 || !keys.includes('length') || keys.some((key) => typeof key !== 'string')) {
+        throw new KiokukoError('VALIDATION_ERROR', message);
+    }
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    const result = [];
+    for (let index = 0; index < value.length; index += 1) {
+        const descriptor = descriptors[String(index)];
+        if (descriptor === undefined || !('value' in descriptor) || descriptor.enumerable !== true) {
+            throw new KiokukoError('VALIDATION_ERROR', message);
         }
-        throw error;
+        result.push(descriptor.value);
     }
-    if (findSecret(canonicalEvidence))
-        throw new KiokukoError('SECURITY_REJECTION', 'Evidence resembles a secret and was not stored');
-    const value = raw;
-    if (Object.keys(value).some((field) => !['changedPaths', 'errorSignatures', 'commands', 'tests', 'verification'].includes(field)))
-        throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-    const strings = (value, max) => {
-        if (value === undefined)
+    return result;
+}
+function boundedEvidence(raw) {
+    if (raw === undefined)
+        return { changedPaths: [], errorSignatures: [], commands: [], tests: [] };
+    const value = checkpointObject(raw, new Set(CHECKPOINT_EVIDENCE_FIELD_NAMES), 'Evidence is invalid');
+    const evidenceError = () => new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
+    const pathError = () => new KiokukoError('VALIDATION_ERROR', 'Evidence path is invalid');
+    const strings = (candidate, maximum) => {
+        if (candidate === undefined)
             return [];
-        if (!Array.isArray(value) || value.length > max || value.some((item) => typeof item !== 'string' || item.length === 0 || item.length > 500 || /[\u0000-\u001f\u007f]/u.test(item)))
-            throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-        return [...new Set(value)];
+        const values = checkpointArray(candidate, maximum, 'Evidence is invalid');
+        return [...new Set(values.map((item) => {
+                if (typeof item !== 'string' || item.length === 0 || item.length > MAX_CHECKPOINT_SHORT_TEXT_CHARS || /[\u0000-\u001f\u007f]/u.test(item)) {
+                    throw evidenceError();
+                }
+                return item;
+            }))];
     };
-    const changedPaths = strings(value.changedPaths, 200).map((item) => {
-        if (item.startsWith('/') || /^[A-Za-z]:[\\/]/u.test(item) || item.split(/[\\/]/u).includes('..'))
-            throw new KiokukoError('VALIDATION_ERROR', 'Evidence path is invalid');
+    const changedPaths = strings(value.changedPaths, MAX_CHECKPOINT_PATHS).map((item) => {
+        if (item.startsWith('/') || item.startsWith('\\') || /^[A-Za-z]:/u.test(item) || item.split(/[\\/]/u).includes('..'))
+            throw pathError();
         return item.replaceAll('\\', '/');
     });
-    const errorSignatures = strings(value.errorSignatures, 200);
+    const errorSignatures = strings(value.errorSignatures, MAX_CHECKPOINT_SIGNALS);
     const normalizeItems = (items, kind) => {
         if (items === undefined)
             return [];
-        if (!Array.isArray(items) || items.length > 100)
-            throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-        return items.map((item) => {
-            if (typeof item !== 'object' || item === null || Array.isArray(item))
-                throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-            const record = item;
-            const allowedFields = kind === 'command' ? ['executable', 'classification', 'exitCode', 'outcome', 'digest'] : ['runner', 'target', 'outcome', 'digest'];
-            if (Object.keys(record).some((field) => !allowedFields.includes(field)))
-                throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-            const required = kind === 'command' ? 'executable' : 'runner';
-            if (typeof record[required] !== 'string' || record[required].length === 0 || record[required].length > 200)
-                throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-            if (typeof record.outcome !== 'string' || !['passed', 'failed', 'unknown'].includes(record.outcome))
-                throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-            const result = { [required]: record[required], outcome: record.outcome };
-            for (const field of kind === 'command' ? ['classification', 'digest'] : ['target', 'digest']) {
-                if (record[field] !== undefined) {
-                    if (typeof record[field] !== 'string' || record[field].length === 0 || record[field].length > 500)
-                        throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-                    result[field] = record[field];
-                }
+        const values = checkpointArray(items, MAX_CHECKPOINT_EVIDENCE_ITEMS, 'Evidence is invalid');
+        const allowedFields = new Set(kind === 'command' ? CHECKPOINT_COMMAND_FIELD_NAMES : CHECKPOINT_TEST_FIELD_NAMES);
+        const optionalFields = kind === 'command' ? ['classification', 'digest'] : ['target', 'digest'];
+        const required = kind === 'command' ? 'executable' : 'runner';
+        return values.map((item) => {
+            const record = checkpointObject(item, allowedFields, 'Evidence is invalid');
+            const requiredValue = record[required];
+            if (typeof requiredValue !== 'string' || requiredValue.length === 0
+                || requiredValue.length > MAX_CHECKPOINT_EXECUTABLE_CHARS
+                || /[\u0000-\u001f\u007f]/u.test(requiredValue))
+                throw evidenceError();
+            const rawOutcome = record.outcome;
+            if (typeof rawOutcome !== 'string' || !CHECKPOINT_RESULT_OUTCOMES.includes(rawOutcome))
+                throw evidenceError();
+            const outcome = rawOutcome;
+            const optional = {};
+            for (const field of optionalFields) {
+                const optionalValue = record[field];
+                if (optionalValue === undefined)
+                    continue;
+                if (typeof optionalValue !== 'string' || optionalValue.length === 0
+                    || optionalValue.length > MAX_CHECKPOINT_SHORT_TEXT_CHARS
+                    || /[\u0000-\u001f\u007f]/u.test(optionalValue))
+                    throw evidenceError();
+                if (field === 'classification' || field === 'target' || field === 'digest')
+                    optional[field] = optionalValue;
             }
-            if (kind === 'command' && record.exitCode !== undefined) {
+            if (kind === 'command') {
                 const exitCode = record.exitCode;
-                if (typeof exitCode !== 'number' || !Number.isSafeInteger(exitCode) || exitCode < 0)
-                    throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-                result.exitCode = exitCode;
+                if (exitCode !== undefined && (typeof exitCode !== 'number' || !Number.isSafeInteger(exitCode) || exitCode < 0))
+                    throw evidenceError();
+                return {
+                    executable: requiredValue,
+                    outcome,
+                    ...(optional.classification === undefined ? {} : { classification: optional.classification }),
+                    ...(exitCode === undefined ? {} : { exitCode }),
+                    ...(optional.digest === undefined ? {} : { digest: optional.digest }),
+                };
             }
-            return result;
+            return {
+                runner: requiredValue,
+                outcome,
+                ...(optional.target === undefined ? {} : { target: optional.target }),
+                ...(optional.digest === undefined ? {} : { digest: optional.digest }),
+            };
         });
     };
-    const verification = value.verification === undefined ? undefined : (() => {
-        if (typeof value.verification !== 'object' || value.verification === null || Array.isArray(value.verification))
-            throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-        const verificationValue = value.verification;
-        if (Object.keys(verificationValue).some((field) => field !== 'outcome'))
-            throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-        const outcome = verificationValue.outcome;
-        if (typeof outcome !== 'string' || !['fresh', 'stale', 'failed', 'unknown'].includes(outcome))
-            throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
-        return { outcome };
-    })();
     const commands = normalizeItems(value.commands, 'command');
     const tests = normalizeItems(value.tests, 'test');
-    return { changedPaths, errorSignatures, commands, tests, ...(verification === undefined ? {} : { verification }) };
+    const verification = value.verification === undefined ? undefined : (() => {
+        const verificationValue = checkpointObject(value.verification, new Set(CHECKPOINT_VERIFICATION_FIELD_NAMES), 'Evidence is invalid');
+        const rawOutcome = verificationValue.outcome;
+        if (typeof rawOutcome !== 'string' || !['fresh', 'stale', 'failed', 'unknown'].includes(rawOutcome))
+            throw evidenceError();
+        return { outcome: rawOutcome };
+    })();
+    const normalized = {
+        changedPaths,
+        errorSignatures,
+        commands,
+        tests,
+        ...(verification === undefined ? {} : { verification }),
+    };
+    let canonicalEvidence;
+    try {
+        canonicalEvidence = canonicalJson(normalized);
+    }
+    catch (error) {
+        if (error instanceof RangeError || (error instanceof KiokukoError && error.code === 'VALIDATION_ERROR')) {
+            throw new KiokukoError('VALIDATION_ERROR', 'Evidence is invalid');
+        }
+        throw error;
+    }
+    if (findSecret(canonicalEvidence))
+        throw new KiokukoError('SECURITY_REJECTION', 'Evidence resembles a secret and was not stored');
+    return normalized;
+}
+function checkpointIdentifier(value, label) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'string' || value.length === 0 || value.length > 256 || value.trim() !== value || /\p{Cc}/u.test(value)) {
+        throw new KiokukoError('VALIDATION_ERROR', `${label} is invalid`);
+    }
+    return value;
+}
+function normalizeCheckpointInput(input) {
+    const value = checkpointObject(input, CHECKPOINT_INPUT_FIELDS, 'Checkpoint input is invalid');
+    const cwd = value.cwd === undefined
+        ? undefined
+        : typeof value.cwd === 'string' && value.cwd.length > 0 && !/\p{Cc}/u.test(value.cwd)
+            ? value.cwd
+            : (() => { throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint cwd is invalid'); })();
+    const memoryValues = value.memories === undefined
+        ? []
+        : checkpointArray(value.memories, 20, 'Checkpoint memories must be an array');
+    const memories = memoryValues.map((memory) => checkpointObject(memory, CHECKPOINT_MEMORY_FIELDS, 'Checkpoint memory is invalid'));
+    const feedbackValues = value.feedback === undefined
+        ? []
+        : checkpointArray(value.feedback, 100, 'Checkpoint feedback is invalid');
+    const feedback = feedbackValues.map((item) => checkpointObject(item, CHECKPOINT_FEEDBACK_FIELDS, 'Checkpoint feedback is invalid'));
+    const evidence = boundedEvidence(value.evidence);
+    const runId = checkpointIdentifier(value.runId, 'Checkpoint runId');
+    const deliveryId = checkpointIdentifier(value.deliveryId, 'Checkpoint deliveryId');
+    const rawOutcome = value.outcome;
+    if (runId === undefined) {
+        if (memories.length === 0)
+            throw new KiokukoError('VALIDATION_ERROR', 'Without runId, at least one memory is required');
+        if (rawOutcome !== undefined)
+            throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint outcome requires runId');
+        if (deliveryId !== undefined)
+            throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint deliveryId requires runId');
+        if (value.feedback !== undefined)
+            throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint feedback requires runId');
+        if (value.evidence !== undefined)
+            throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint evidence requires runId');
+        return { ...(cwd === undefined ? {} : { cwd }), memories };
+    }
+    if (typeof rawOutcome !== 'string' || !CHECKPOINT_OUTCOMES.includes(rawOutcome)) {
+        throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint outcome is required and invalid');
+    }
+    const outcome = rawOutcome;
+    const hasEvidence = evidence.changedPaths.length > 0
+        || evidence.errorSignatures.length > 0
+        || evidence.commands.length > 0
+        || evidence.tests.length > 0
+        || evidence.verification !== undefined;
+    if (memories.length === 0 && feedback.length === 0 && !hasEvidence) {
+        throw new KiokukoError('VALIDATION_ERROR', 'An empty checkpoint is not allowed');
+    }
+    if (feedback.length > 0 && deliveryId === undefined) {
+        throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint feedback requires deliveryId');
+    }
+    return {
+        ...(cwd === undefined ? {} : { cwd }),
+        memories,
+        runId,
+        ...(deliveryId === undefined ? {} : { deliveryId }),
+        outcome,
+        feedback,
+        evidence,
+    };
 }
 export async function recallScopedMemory(database, input) {
     return retrieveFederatedMemory(database, {
@@ -202,49 +311,27 @@ export async function recallScopedMemory(database, input) {
     });
 }
 export async function checkpointScopedMemory(database, input) {
-    if (!Array.isArray(input.memories))
-        throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint memories must be an array');
-    if (input.memories.length === 0 && input.runId === undefined)
-        throw new KiokukoError('VALIDATION_ERROR', 'A checkpoint requires a run or at least one memory');
-    if (input.memories.length > 20)
-        throw new KiokukoError('VALIDATION_ERROR', 'At most 20 memories may be checkpointed at once');
-    const memories = input.memories.map((memory) => checkpointObject(memory, CHECKPOINT_MEMORY_FIELDS, 'Checkpoint memory is invalid'));
-    if (input.feedback !== undefined && (!Array.isArray(input.feedback) || input.feedback.length > 100)) {
-        throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint feedback is invalid');
-    }
-    const feedback = (input.feedback ?? []).map((item) => checkpointObject(item, CHECKPOINT_FEEDBACK_FIELDS, 'Checkpoint feedback is invalid'));
-    if (input.outcome !== undefined && !CHECKPOINT_OUTCOMES.has(input.outcome)) {
-        throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint outcome is invalid');
-    }
-    if (input.deliveryId !== undefined && input.runId === undefined) {
-        throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint deliveryId requires runId');
-    }
-    if (input.runId === undefined && feedback.length > 0) {
-        throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint feedback requires runId');
-    }
-    if (feedback.length > 0 && input.deliveryId === undefined) {
-        throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint feedback requires deliveryId');
-    }
-    const evidence = boundedEvidence(input.evidence);
-    const hasEvidence = evidence.changedPaths.length > 0 || evidence.errorSignatures.length > 0 || evidence.commands.length > 0 || evidence.tests.length > 0 || evidence.verification !== undefined;
-    if (input.runId === undefined && hasEvidence) {
-        throw new KiokukoError('VALIDATION_ERROR', 'Checkpoint evidence requires runId');
-    }
-    const run = input.runId === undefined ? undefined : new LedgerStore(database).readRun(input.runId);
-    if (input.runId !== undefined && run === undefined)
+    const request = normalizeCheckpointInput(input);
+    const runId = 'runId' in request ? request.runId : undefined;
+    const deliveryId = 'runId' in request ? request.deliveryId : undefined;
+    const outcome = 'runId' in request ? request.outcome : undefined;
+    const feedback = 'runId' in request ? request.feedback : [];
+    const evidence = 'runId' in request
+        ? request.evidence
+        : { changedPaths: [], errorSignatures: [], commands: [], tests: [] };
+    const memories = request.memories;
+    const run = runId === undefined ? undefined : new LedgerStore(database).readRun(runId);
+    if (runId !== undefined && run === undefined)
         throw new KiokukoError('NOT_FOUND', 'Checkpoint run was not found');
     if (run !== undefined)
         assertCheckpointEligible(run.status);
-    if (input.deliveryId !== undefined) {
-        const delivery = readContextDelivery(database, { workspace: run.workspace, deliveryId: input.deliveryId });
+    if (deliveryId !== undefined) {
+        const delivery = readContextDelivery(database, { workspace: run.workspace, deliveryId });
         if (delivery.runId !== run.runId)
             throw new KiokukoError('NOT_FOUND', 'Checkpoint delivery was not found for this run');
     }
-    if (memories.length === 0 && feedback.length === 0 && !hasEvidence) {
-        throw new KiokukoError('VALIDATION_ERROR', 'An empty checkpoint is not allowed');
-    }
     const needsProject = memories.some((memory) => (memory.scope ?? 'project') === 'project');
-    const plannedProject = await resolveProjectWorkspaceReadOnly(database, input.cwd);
+    const plannedProject = await resolveProjectWorkspaceReadOnly(database, request.cwd);
     if (needsProject && !plannedProject) {
         throw new KiokukoError('NOT_FOUND', 'No Git repository or .kiokuko.json binding was found for project-scoped memory; use scope "global" only for cross-project preferences or lessons');
     }
@@ -325,7 +412,7 @@ export async function checkpointScopedMemory(database, input) {
             ...(plannedProject === undefined ? {} : { sourceRepositoryId: plannedProject.repositoryId, sourceWorkspace: plannedProject.workspace }),
             ...(sourceCommit === null ? {} : { sourceCommit }),
             ...(run === undefined ? {} : { runId: run.runId }),
-            ...(input.deliveryId === undefined ? {} : { deliveryId: input.deliveryId }),
+            ...(deliveryId === undefined ? {} : { deliveryId }),
             ...(evidenceIds.length === 0 ? {} : { evidenceIds }),
             ...(evidence.changedPaths.length === 0 ? {} : { sourcePaths: evidence.changedPaths }),
             clientKind: 'mcp',
@@ -336,7 +423,7 @@ export async function checkpointScopedMemory(database, input) {
     const preparedFeedback = feedback.map((value, index) => {
         const record = {
             workspace: run.workspace,
-            deliveryId: input.deliveryId,
+            deliveryId: deliveryId,
             entryId: value.entryId,
             entryRevision: value.entryRevision,
             verdict: value.verdict,
@@ -350,7 +437,7 @@ export async function checkpointScopedMemory(database, input) {
         assertContextFeedbackRecordable(database, record);
         return record;
     });
-    const project = await resolveProjectWorkspace(database, input.cwd);
+    const project = await resolveProjectWorkspace(database, request.cwd);
     if (!sameProject(plannedProject, project)) {
         throw new KiokukoError('CONFLICT', 'Checkpoint project identity changed after validation');
     }
@@ -394,8 +481,10 @@ export async function checkpointScopedMemory(database, input) {
         const memoryAck = transactionRun === undefined || memoryEvents.length === 0 ? { eventIds: [] } : store.appendBatchInTransaction(transactionRun.runId, { events: memoryEvents });
         const eventId = evidenceAck.eventIds[0] ?? memoryAck.eventIds[0] ?? null;
         if (transactionRun !== undefined) {
+            if (outcome === undefined)
+                throw new KiokukoError('INTEGRITY_ERROR', 'Run-bound checkpoint outcome is missing');
             for (const entry of saved) {
-                database.prepare('INSERT INTO ledger_memory_links (link_id, run_id, event_id, delivery_id, entry_id, created_at) VALUES (?, ?, ?, ?, ?, ?)').run(randomUUID(), transactionRun.runId, eventId, input.deliveryId ?? null, entry.id, now);
+                database.prepare('INSERT INTO ledger_memory_links (link_id, run_id, event_id, delivery_id, entry_id, created_at) VALUES (?, ?, ?, ?, ?, ?)').run(randomUUID(), transactionRun.runId, eventId, deliveryId ?? null, entry.id, now);
             }
             for (const feedbackRecord of preparedFeedback) {
                 recordContextFeedbackInTransaction(database, feedbackRecord);
@@ -404,7 +493,7 @@ export async function checkpointScopedMemory(database, input) {
                 runId: transactionRun.runId,
                 workspace: transactionRun.workspace,
                 entries: saved,
-                outcome: input.outcome ?? 'completed',
+                outcome,
                 verification: {
                     fresh: evidence.verification?.outcome === 'fresh',
                     passedTests: evidence.tests.filter((test) => test.outcome === 'passed').length,
@@ -413,7 +502,7 @@ export async function checkpointScopedMemory(database, input) {
                 },
                 createdAt: now,
             });
-            const updated = new LedgerStore(database).updateRunStatusInTransaction(transactionRun.runId, input.outcome ?? 'completed', now);
+            const updated = new LedgerStore(database).updateRunStatusInTransaction(transactionRun.runId, outcome, now);
             return {
                 saved,
                 run: {