@bjoernrochel/sevro 1.0.0 → 1.1.1

package/dist/src/provenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provenance.js","sourceRoot":"","sources":["provenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,0BAAuB;AAC3D,OAAO,EAAE,SAAS,EAAE,6BAA0B;AAE9C,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,yBAAyB;AAChF,OAAO,EAAE,MAAM,EAAE,gBAAgB;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,kBAAkB;AAClE,OAAO,EAAE,UAAU,EAAE,mBAAgB;AACrC,OAAO,EAAE,aAAa,EAAE,iBAAiB;AACzC,OAAO,WAAW,2BAAwB,OAAO,IAAI,EAAE,MAAM,EAAE,CAAC;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAmB;AAC9C,OAAO,EAAE,iBAAiB,EAAE,2BAAwB;AAEpD,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,eAAe,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,MAAM,eAAe,GAAG,IAAI,CAAC;AAI7B,SAAS,SAAS,CAAC,IAAe,EAAE,KAAgB;IAClD,OAAO,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,aAAa;IAGG;IAFX,KAAK,GAAgB,EAAE,CAAC;IACzB,KAAK,GAAG,CAAC,CAAC;IAClB,YAAoB,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;IAAG,CAAC;IACpC,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EACpC,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE;YACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE;gBAClD,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IACO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,QAAgB,EAChB,IAAW;QAEX,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACzE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,eAAe,IAAI,IAAI,CAAC,KAAK,GAAG,eAAe;YACtE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;CACF;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAI,GAAG,UAAU;IACxD,MAAM,QAAQ,GAAG,IAAI,aAAa,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI;QACjB,cAAc;QACd,WAAW;QACX,MAAM;QACN,UAAU;QACV,SAAS;QACT,KAAK;QACL,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC;QACC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/B,OAAO,QAAQ,CAAC;QACd,MAAM,EAAE,gBAAgB;QACxB,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,eAAe;IAIT;IACA;IAJD,KAAK,GAAkB,EAAE,CAAC;IAC3B,KAAK,GAAG,CAAC,CAAC;IAClB,YACU,IAAY,EACZ,QAAqB;QADrB,SAAI,GAAJ,IAAI,CAAQ;QACZ,aAAQ,GAAR,QAAQ,CAAa;IAC5B,CAAC;IACI,UAAU,CAAC,IAAY;QAC7B,OAAO,IAAI,KAAK,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACpD,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,IAAY;QACxB,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,EACpC,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,cAAc,EAAE;YACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC/C,CAAC;IACO,KAAK,CAAC,gBAAgB,CAC5B,IAAY,EACZ,QAAgB;QAEhB,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE;YAClD,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IAChE,CAAC;IACO,KAAK,CAAC,WAAW,CACvB,IAAY,EACZ,QAAgB,EAChB,IAAW;QAEX,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,UAAU,CAAC;QAC/B,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,eAAe,IAAI,IAAI,CAAC,KAAK,GAAG,eAAe;YACtE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAC7D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAC/B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC;YACrB,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;SACvC,CAAC,CAAC;IACL,CAAC;CACF;AACD,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,UAAwE,EACxE,gBAA0B,EAAE;IAE5B,IAAI,UAAU,CAAC,QAAQ;QACrB,OAAO,QAAQ,CAAC;YACd,MAAM,EAAE,kBAAkB;YAC1B,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;SAC9C,CAAC,CAAC;IACL,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,EAC/B,QAAQ,GAAG,IAAI,GAAG,CAChB,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAClE,CAAC;IACJ,MAAM,QAAQ,GAAG,IAAI,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC5D,MAAM,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3B,OAAO,QAAQ,CAAC;QACd,MAAM,EAAE,kBAAkB;QAC1B,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;KACtC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,GAAG,UAAoB;IAChD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,EAAE;QAC3D,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,eAAe,EAAE,MAAM,EAAE,GAAG,EAAE;QAC/D,MAAM,EAAE,MAAM;QACd,MAAM,EAAE,QAAQ;KACjB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC1E,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,GAAG,eAAe;QAC5C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,OAAe,EACf,aAAuB;IAEvB,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACpE,MAAM,cAAc,GAAG,GAAG,CACxB,OAAO,EACP,UAAU,EACV,UAAU,EACV,oBAAoB,EACpB,IAAI,CACL;SACE,QAAQ,CAAC,MAAM,CAAC;SAChB,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CACL,CAAC,IAAI,EAAE,EAAE,CACP,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAC3B,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAChD,CACJ;SACA,IAAI,EAAE,CAAC;IACV,IAAI,UAAU,GAAG,YAAY,CAAC,UAAU,CAAC;IACzC,MAAM,SAAS,GAAuC,EAAE,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1D,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;QAC/B,IAAI,UAAU,GAAG,eAAe;YAC9B,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,YAAY,CAAC,UAAU,IAAI,SAAS,CAAC,MAAM;QAChD,CAAC,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,CAAC;QAC7D,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY,EAAE,QAAgB;IAC9D,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;AACjE,CAAC;AACD,KAAK,UAAU,sBAAsB,CACnC,IAAY,EACZ,IAAY;IAEZ,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACrC,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,IAAI,CAAC,cAAc,EAAE;QACvB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,MAAM,EAAE;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;AACrE,CAAC;AAED,gEAAgE;AAChE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY,EAAE,WAAmB;IACxE,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CACrE,CAAC;IACF,IAAI,OAAO,KAAK,aAAa;QAC3B,MAAM,IAAI,KAAK,CACb,6DAA6D,CAC9D,CAAC;IACJ,MAAM,QAAQ,GAAG,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IAC3E,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAC9D,OAAO;QACL,MAAM,EAAE,UAAmB;QAC3B,IAAI,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC,IAAI;QACvC,QAAQ;QACR,gBAAgB,EAAE,MAAM,gBAAgB,CAAC,aAAa,EAAE,EAAE,CAAC;QAC3D,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAY;IAC1C,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,SAAS,CAAC;QACR,IAAI,MAAM,aAAa,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,GAAG,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;QAC3C,OAAO,CAAC,CAAC,MAAM,4BAA4B,CAAC,IAAI,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QACrE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,SAAiB,EACjB,YAAoB,EACpB,QAAe;IAEf,2EAA2E;IAC3E,OAAO,CACL,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC5B,CAAC,SAAS,KAAK,MAAM,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChD,QAAQ,CAAC,WAAW,EAAE;QACtB,CAAC,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAC3C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAY,EACZ,aAAwB;IAExB,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,MAAM,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAC3D,IAAI,CAAC,YAAY;QACf,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC,IAAI;YACvC,QAAQ,EAAE,IAAI;YACd,gBAAgB,EAAE,IAAI;SACvB,CAAC;IACJ,MAAM,OAAO,GAAG,MAAM,QAAQ,CAC5B,GAAG,CAAC,aAAa,EAAE,WAAW,EAAE,iBAAiB,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CACrE,CAAC;IACF,IAAI,OAAO,KAAK,YAAY;QAC1B,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QACtC,OAAO;YACL,IAAI,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC,IAAI;YACvC,QAAQ,EAAE,IAAI;YACd,gBAAgB,EAAE,IAAI;SACvB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO;QACL,IAAI,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC,IAAI;QACvC,QAAQ;QACR,gBAAgB,EAAE,MAAM,kBAAkB,CAAC,OAAO,EAAE,aAAa,CAAC;KACnE,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,aAAmC;IAEnC,OAAO,gBAAgB,CAAC,IAAI,EAAE,aAAa,IAAI,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,WAAmB,EACnB,YAAqB;IAErB,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,QAAQ,CAAC,YAAY,CAAC,CAAC,KAAK,UAAU;YAC/C,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;QACJ,OAAO,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;IACrD,CAAC;IACD,OAAO;QACL,MAAM,EAAE,SAAkB;QAC1B,WAAW,EAAE,WAAW,CAAC,IAAI;QAC7B,OAAO,EAAE,WAAW,CAAC,OAAO;QAC5B,WAAW;KACZ,CAAC;AACJ,CAAC","sourcesContent":["import { runnerRoot, sourceRuntime } from \"./runner-paths\";\nimport { spawnSync } from \"./runtime-process\";\nimport type { Stats } from \"node:fs\";\nimport { lstat, readFile, readdir, readlink, realpath } from \"node:fs/promises\";\nimport { tmpdir } from \"node:os\";\nimport { dirname, join, relative, resolve, sep } from \"node:path\";\nimport { insideRoot } from \"./paths\";\nimport { pathToFileURL } from \"node:url\";\nimport packageJson from \"../package.json\" with { type: \"json\" };\nimport { hashJson, sha256 } from \"./identity\";\nimport { insideRuntimeRoot } from \"./runtime/paths\";\n\nconst MAX_DIRTY_BYTES = 32 * 1024 * 1024;\nconst MAX_BUILD_BYTES = 64 * 1024 * 1024;\nconst MAX_BUILD_FILES = 4096;\n\ntype BuildFile = { path: string; sha256: string };\ntype ProjectFile = BuildFile & { executable: boolean };\nfunction fileOrder(left: BuildFile, right: BuildFile): number {\n  return left.path < right.path ? -1 : left.path > right.path ? 1 : 0;\n}\n\nclass BuildSnapshot {\n  readonly files: BuildFile[] = [];\n  private bytes = 0;\n  constructor(private root: string) {}\n  async collect(path: string): Promise<void> {\n    const absolute = join(this.root, path),\n      info = await lstat(absolute);\n    if (info.isSymbolicLink())\n      throw new Error(\"package build contains a symbolic link\");\n    if (info.isDirectory()) {\n      for (const entry of (await readdir(absolute)).sort())\n        await this.collect(join(path, entry));\n      return;\n    }\n    await this.collectFile(path, absolute, info);\n  }\n  private async collectFile(\n    path: string,\n    absolute: string,\n    info: Stats,\n  ): Promise<void> {\n    if (!info.isFile()) throw new Error(\"package build contains a non-file\");\n    const bytes = await readFile(absolute);\n    this.bytes += bytes.byteLength;\n    if (this.files.length >= MAX_BUILD_FILES || this.bytes > MAX_BUILD_BYTES)\n      throw new Error(\"package build exceeds the size limit\");\n    this.files.push({ path: path.split(sep).join(\"/\"), sha256: sha256(bytes) });\n  }\n}\n\n/** Digest the packaged runtime and public contract files in path order. */\nexport async function packageBuildDigest(root = runnerRoot): Promise<string> {\n  const snapshot = new BuildSnapshot(await realpath(root));\n  for (const path of [\n    \"package.json\",\n    \"README.md\",\n    \"docs\",\n    \"examples\",\n    \"schemas\",\n    \"src\",\n    ...(!sourceRuntime ? [\"dist\"] : []),\n  ])\n    await snapshot.collect(path);\n  return hashJson({\n    format: \"sevro.build.v1\",\n    files: snapshot.files.sort(fileOrder),\n  });\n}\n\nclass ProjectSnapshot {\n  readonly files: ProjectFile[] = [];\n  private bytes = 0;\n  constructor(\n    private root: string,\n    private excluded: Set<string>,\n  ) {}\n  private isExcluded(path: string): boolean {\n    return path === \".git\" || this.excluded.has(path);\n  }\n  async collect(path: string): Promise<void> {\n    if (this.isExcluded(path)) return;\n    const absolute = join(this.root, path),\n      info = await lstat(absolute);\n    if (info.isSymbolicLink())\n      throw new Error(\"project snapshot contains a symbolic link\");\n    if (info.isDirectory()) {\n      await this.collectDirectory(path, absolute);\n      return;\n    }\n    await this.collectFile(path, absolute, info);\n  }\n  private async collectDirectory(\n    path: string,\n    absolute: string,\n  ): Promise<void> {\n    for (const entry of (await readdir(absolute)).sort())\n      await this.collect(path === \"\" ? entry : join(path, entry));\n  }\n  private async collectFile(\n    path: string,\n    absolute: string,\n    info: Stats,\n  ): Promise<void> {\n    if (!info.isFile()) throw new Error(\"project snapshot contains a non-file\");\n    const bytes = await readFile(absolute);\n    this.bytes += bytes.byteLength;\n    if (this.files.length >= MAX_BUILD_FILES || this.bytes > MAX_BUILD_BYTES)\n      throw new Error(\"project snapshot exceeds the size limit\");\n    this.files.push({\n      path: path.split(sep).join(\"/\"),\n      sha256: sha256(bytes),\n      executable: Boolean(info.mode & 0o111),\n    });\n  }\n}\nexport async function projectIdentityDigest(\n  root: string,\n  provenance: { revision: string | null; dirtyPatchDigest: string | null },\n  excludedRoots: string[] = [],\n): Promise<string> {\n  if (provenance.revision)\n    return hashJson({\n      format: \"sevro.project.v1\",\n      revision: provenance.revision,\n      dirtyPatchDigest: provenance.dirtyPatchDigest,\n    });\n  const projectRoot = resolve(root),\n    excluded = new Set(\n      excludedRoots.map((path) => relative(projectRoot, resolve(path))),\n    );\n  const snapshot = new ProjectSnapshot(projectRoot, excluded);\n  await snapshot.collect(\"\");\n  return hashJson({\n    format: \"sevro.project.v1\",\n    files: snapshot.files.sort(fileOrder),\n  });\n}\n\nfunction git(root: string, ...arguments_: string[]): Buffer {\n  const result = spawnSync([\"git\", \"-C\", root, ...arguments_], {\n    env: { PATH: process.env.PATH ?? \"/usr/bin:/bin\", LC_ALL: \"C\" },\n    stdout: \"pipe\",\n    stderr: \"ignore\",\n  });\n  if (result.exitCode !== 0) throw new Error(\"Git identity is unavailable\");\n  if (result.stdout.byteLength > MAX_DIRTY_BYTES)\n    throw new Error(\"Git identity exceeds the size limit\");\n  return Buffer.from(result.stdout);\n}\n\nasync function dirtyPatchDigest(\n  gitRoot: string,\n  excludedRoots: string[],\n): Promise<string | null> {\n  const trackedPatch = git(gitRoot, \"diff\", \"--binary\", \"HEAD\", \"--\");\n  const untrackedPaths = git(\n    gitRoot,\n    \"ls-files\",\n    \"--others\",\n    \"--exclude-standard\",\n    \"-z\",\n  )\n    .toString(\"utf8\")\n    .split(\"\\0\")\n    .filter(Boolean)\n    .filter(\n      (path) =>\n        !excludedRoots.some((root) =>\n          insideRuntimeRoot(root, resolve(gitRoot, path)),\n        ),\n    )\n    .sort();\n  let dirtyBytes = trackedPatch.byteLength;\n  const untracked: { path: string; sha256: string }[] = [];\n  for (const path of untrackedPaths) {\n    const bytes = await untrackedIdentityBytes(gitRoot, path);\n    dirtyBytes += bytes.byteLength;\n    if (dirtyBytes > MAX_DIRTY_BYTES)\n      throw new Error(\"Git identity exceeds the size limit\");\n    untracked.push({ path, sha256: sha256(bytes) });\n  }\n  return trackedPatch.byteLength || untracked.length\n    ? hashJson({ trackedPatch: sha256(trackedPatch), untracked })\n    : null;\n}\n\nfunction requireSafeUntrackedPath(root: string, absolute: string): void {\n  if (!insideRoot(root, absolute))\n    throw new Error(\"Git checkout has an unsafe untracked path\");\n}\nasync function untrackedIdentityBytes(\n  root: string,\n  path: string,\n): Promise<Buffer> {\n  const absolute = resolve(root, path);\n  requireSafeUntrackedPath(root, absolute);\n  const info = await lstat(absolute);\n  if (info.isSymbolicLink())\n    return Buffer.from(await readlink(absolute), \"utf8\");\n  if (info.isFile()) return readFile(absolute);\n  throw new Error(\"Git checkout has an unsupported untracked entry\");\n}\n\n/** Local development identity; packaged use never calls Git. */\nexport async function checkoutProvenance(root: string, buildDigest: string) {\n  const canonicalRoot = await realpath(root);\n  const gitRoot = await realpath(\n    git(canonicalRoot, \"rev-parse\", \"--show-toplevel\").toString().trim(),\n  );\n  if (gitRoot !== canonicalRoot)\n    throw new Error(\n      \"local Sevro checkout root does not match its Git repository\",\n    );\n  const revision = git(canonicalRoot, \"rev-parse\", \"HEAD\").toString().trim();\n  if (!/^[a-f0-9]{40,64}$/.test(revision))\n    throw new Error(\"local Sevro checkout revision is invalid\");\n  return {\n    source: \"checkout\" as const,\n    root: pathToFileURL(canonicalRoot).href,\n    revision,\n    dirtyPatchDigest: await dirtyPatchDigest(canonicalRoot, []),\n    buildDigest,\n  };\n}\n\nasync function enclosingGitRoot(root: string): Promise<string | null> {\n  let path = root;\n  for (;;) {\n    if (await gitMetadataAt(path)) return path;\n    const parent = dirname(path);\n    if (parent === path) return null;\n    path = parent;\n  }\n}\n\nasync function gitMetadataAt(path: string): Promise<boolean> {\n  try {\n    const metadataPath = join(path, \".git\");\n    const metadata = await lstat(metadataPath);\n    return !(await emptyTemporaryGitPlaceholder(path, metadataPath, metadata));\n  } catch (error) {\n    if ((error as NodeJS.ErrnoException).code === \"ENOENT\") return false;\n    throw error;\n  }\n}\n\nasync function emptyTemporaryGitPlaceholder(\n  directory: string,\n  metadataPath: string,\n  metadata: Stats,\n): Promise<boolean> {\n  // Codex's Linux sandbox can leave an empty mount placeholder at /tmp/.git.\n  return (\n    process.platform === \"linux\" &&\n    (directory === \"/tmp\" || directory === tmpdir()) &&\n    metadata.isDirectory() &&\n    (await readdir(metadataPath)).length === 0\n  );\n}\n\nexport async function projectProvenance(\n  root: string,\n  excludedRoots?: string[],\n) {\n  const canonicalRoot = await realpath(root);\n  const gitEntryRoot = await enclosingGitRoot(canonicalRoot);\n  if (!gitEntryRoot)\n    return {\n      root: pathToFileURL(canonicalRoot).href,\n      revision: null,\n      dirtyPatchDigest: null,\n    };\n  const gitRoot = await realpath(\n    git(canonicalRoot, \"rev-parse\", \"--show-toplevel\").toString().trim(),\n  );\n  if (gitRoot !== gitEntryRoot)\n    throw new Error(\"project Git root does not match its repository entry\");\n  let revision: string;\n  try {\n    revision = git(gitRoot, \"rev-parse\", \"HEAD\").toString().trim();\n  } catch {\n    git(gitRoot, \"status\", \"--porcelain\");\n    return {\n      root: pathToFileURL(canonicalRoot).href,\n      revision: null,\n      dirtyPatchDigest: null,\n    };\n  }\n  if (!/^[a-f0-9]{40,64}$/.test(revision))\n    throw new Error(\"project Git revision is invalid\");\n  return {\n    root: pathToFileURL(canonicalRoot).href,\n    revision,\n    dirtyPatchDigest: await projectDirtyDigest(gitRoot, excludedRoots),\n  };\n}\n\nasync function projectDirtyDigest(\n  root: string,\n  excludedRoots: string[] | undefined,\n) {\n  return dirtyPatchDigest(root, excludedRoots ?? []);\n}\n\nexport async function runnerProvenance(\n  buildDigest: string,\n  checkoutRoot?: string,\n) {\n  if (checkoutRoot) {\n    const actualRoot = await realpath(runnerRoot);\n    if ((await realpath(checkoutRoot)) !== actualRoot)\n      throw new Error(\n        \"local Sevro checkout root does not match the running package\",\n      );\n    return checkoutProvenance(actualRoot, buildDigest);\n  }\n  return {\n    source: \"package\" as const,\n    packageName: packageJson.name,\n    version: packageJson.version,\n    buildDigest,\n  };\n}\n"]}

package/dist/src/prune.js

@@ -0,0 +1,228 @@
+import { lstat, readFile, readdir, realpath, rm, stat } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
+import { parseArgs } from "node:util";
+import { assertCliResult, assertRunEvidence } from "./schema.js";
+import { createReport } from "./report.js";
+import { atomicWriteJson } from "./storage.js";
+import { isRecord } from "./value-guards.js";
+import { acquireResultsLock, retainedFile, withResultsLock, } from "./results-lock.js";
+import { pruneNativeTranscripts } from "./transcript-retention.js";
+const durationUnits = {
+    ms: 1,
+    s: 1000,
+    m: 60_000,
+    h: 3_600_000,
+    d: 86_400_000,
+    w: 604_800_000,
+};
+function duration(value) {
+    const match = /^([1-9]\d*)(ms|s|m|h|d|w)$/.exec(value);
+    if (!match)
+        throw new Error("--older-than requires a positive integer and ms, s, m, h, d or w");
+    const amount = Number.parseInt(value, 10) *
+        Number(durationUnits[value.replace(/^\d+/, "")]);
+    if (!Number.isSafeInteger(amount))
+        throw new Error("--older-than exceeds the safe duration range");
+    return amount;
+}
+function count(value) {
+    const amount = Number(value);
+    if (!/^[1-9]\d*$/.test(value) || !Number.isSafeInteger(amount))
+        throw new Error("--keep must be a positive safe integer");
+    return amount;
+}
+function parseInvocation(args) {
+    const { values } = parseArgs({
+        args,
+        strict: true,
+        options: {
+            "results-root": { type: "string" },
+            keep: { type: "string" },
+            latest: { type: "boolean" },
+            "older-than": { type: "string" },
+            "native-transcripts": { type: "boolean" },
+        },
+    });
+    return values;
+}
+function policy(values) {
+    if (values.latest)
+        return { keep: 1, cutoff: null };
+    if (values["older-than"] !== undefined)
+        return { keep: null, cutoff: Date.now() - duration(values["older-than"]) };
+    if (values.keep !== undefined)
+        return { keep: count(values.keep), cutoff: null };
+    return { keep: values["native-transcripts"] ? 0 : 10, cutoff: null };
+}
+function invocation(args) {
+    const values = parseInvocation(args);
+    const policies = [values.latest, values.keep, values["older-than"]].filter((value) => value !== undefined);
+    if (policies.length > 1)
+        throw new Error("retention policies are exclusive");
+    if (values["results-root"] === "")
+        throw new Error("--results-root must not be empty");
+    return {
+        root: resolve(values["results-root"] ?? ".sevro/results"),
+        policy: policy(values),
+        nativeTranscripts: values["native-transcripts"] === true,
+    };
+}
+async function retainedResults(root, directories) {
+    const results = [];
+    for (const directory of directories) {
+        const path = join(directory, "result.json");
+        await retainedFile(path);
+        const result = JSON.parse(await readFile(path, "utf8"));
+        assertCliResult(result);
+        if (!(await finalizedAncestors(root, directory, result.runId)))
+            continue;
+        if (result.evidencePath !== join(directory, "run.json"))
+            throw new Error(`retained result references evidence outside its directory: ${path}`);
+        await retainedFile(result.evidencePath);
+        const evidence = JSON.parse(await readFile(result.evidencePath, "utf8"));
+        assertRunEvidence(evidence);
+        await createReport([path]);
+        results.push({
+            directory,
+            result,
+            evidence,
+            time: (await stat(path)).mtimeMs,
+        });
+    }
+    return results.sort((left, right) => right.time - left.time || left.directory.localeCompare(right.directory));
+}
+async function resultDirectories(parent, storage) {
+    let children = await resultChildren(parent);
+    if (!storage.roots.includes(parent) &&
+        ((await resultsRoot(parent)) || children.results.length > 0)) {
+        storage.releases.push(await acquireResultsLock(parent));
+        storage.roots.push(parent);
+        children = await resultChildren(parent);
+    }
+    storage.directories.push(...children.results);
+    for (const directory of children.containers)
+        await resultDirectories(directory, storage);
+}
+async function resultChildren(parent) {
+    const results = [];
+    const containers = [];
+    const entries = await readdir(parent, { withFileTypes: true });
+    for (const entry of entries.sort((left, right) => left.name.localeCompare(right.name))) {
+        if (!entry.isDirectory())
+            continue;
+        const directory = join(parent, entry.name);
+        if (await retainedFile(join(directory, "result.json")))
+            results.push(directory);
+        else
+            containers.push(directory);
+    }
+    return { results, containers };
+}
+async function resultsRoot(directory) {
+    const active = await lstat(join(directory, "active")).catch((cause) => {
+        if (cause.code === "ENOENT")
+            return null;
+        throw cause;
+    });
+    if (active && !active.isDirectory())
+        throw new Error(`retained ownership must be a directory: ${directory}`);
+    return Boolean(active || (await retainedFile(join(directory, ".retention-lock.sqlite"))));
+}
+async function finalized(root, runId) {
+    if (!runId || basename(runId) !== runId)
+        return false;
+    const path = join(root, "active", `${runId}.json`);
+    if (!(await retainedFile(path)))
+        return true;
+    const value = JSON.parse(await readFile(path, "utf8"));
+    if (!isRecord(value))
+        return false;
+    return finalizedRecord(value, runId);
+}
+async function finalizedAncestors(root, directory, runId) {
+    let ancestor = dirname(directory);
+    while (ancestor !== dirname(root)) {
+        if (!(await finalized(ancestor, runId)))
+            return false;
+        ancestor = dirname(ancestor);
+    }
+    return true;
+}
+function finalizedRecord(value, runId) {
+    return (value.format === "sevro.active-run.v1" &&
+        value.runId === runId &&
+        ["complete", "interrupted", "diagnostic"].includes(String(value.status)));
+}
+function retainedByPolicy(results, policy) {
+    const cutoff = policy.cutoff;
+    return cutoff === null
+        ? results.slice(0, policy.keep)
+        : results.filter((result) => result.time >= cutoff);
+}
+async function pruneResults(root, policy, storage) {
+    const results = await retainedResults(root, storage.directories);
+    const remaining = retainedByPolicy(results, policy);
+    for (const resultsRoot of storage.roots) {
+        const latest = remaining.find((item) => item.directory.startsWith(`${resultsRoot}/`));
+        if (latest)
+            await atomicWriteJson(join(resultsRoot, "latest.json"), latest.result);
+        else
+            await rm(join(resultsRoot, "latest.json"), { force: true });
+    }
+    const removed = results.filter((result) => !remaining.includes(result));
+    for (const result of removed)
+        await rm(result.directory, { recursive: true });
+    return { removed: removed.length, kept: remaining.length };
+}
+async function pruneTranscripts(root, policy, directories) {
+    const results = await retainedResults(root, directories);
+    const preserved = retainedByPolicy(results, policy);
+    let removed = 0;
+    for (const { evidence } of results.filter((item) => !preserved.includes(item))) {
+        removed += await pruneNativeTranscripts(evidence);
+    }
+    return { removed, kept: results.length };
+}
+async function prune(options) {
+    const root = await realpath(options.root).catch((cause) => {
+        if (cause.code === "ENOENT")
+            return null;
+        throw cause;
+    });
+    if (root === null)
+        return { removed: 0, kept: 0 };
+    return withResultsLock(root, async () => {
+        const storage = {
+            directories: [],
+            roots: [root],
+            releases: [],
+        };
+        try {
+            await resultDirectories(root, storage);
+            return options.nativeTranscripts
+                ? await pruneTranscripts(root, options.policy, storage.directories)
+                : await pruneResults(root, options.policy, storage);
+        }
+        finally {
+            for (const release of storage.releases.reverse())
+                release();
+        }
+    });
+}
+/** Explicitly remove old retained runs while keeping report's latest index usable. */
+export async function pruneCommand(args) {
+    try {
+        const options = invocation(args);
+        const result = await prune(options);
+        const unit = options.nativeTranscripts
+            ? "native transcript bundle(s)"
+            : "result(s)";
+        process.stdout.write(`Removed ${result.removed} ${unit}; kept ${result.kept}${options.nativeTranscripts ? " result(s)" : ""}.\n`);
+        return 0;
+    }
+    catch (error) {
+        process.stderr.write(`sevro prune: ${error instanceof Error ? error.message : "pruning failed"}\n`);
+        return 64;
+    }
+}
+//# sourceMappingURL=prune.js.map

package/dist/src/prune.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prune.js","sourceRoot":"","sources":["prune.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,yBAAyB;AAChF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB;AAC7D,OAAO,EAAE,SAAS,EAAE,kBAAkB;AACtC,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,oBAAiB;AAE9D,OAAO,EAAE,YAAY,EAAE,oBAAiB;AACxC,OAAO,EAAE,eAAe,EAAE,qBAAkB;AAC5C,OAAO,EAAE,QAAQ,EAAE,0BAAuB;AAC1C,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,eAAe,GAChB,0BAAuB;AACxB,OAAO,EAAE,sBAAsB,EAAE,kCAA+B;AAkBhE,MAAM,aAAa,GAA2B;IAC5C,EAAE,EAAE,CAAC;IACL,CAAC,EAAE,IAAI;IACP,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,WAAW;CACf,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAa;IAC7B,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,KAAK;QACR,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,MAAM,MAAM,GACV,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;QAC1B,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,KAAK,CAAC,KAAa;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CAAC,IAAc;IACrC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;QAC3B,IAAI;QACJ,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE;YACP,cAAc,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAClC,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxB,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;YAC3B,YAAY,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;YAChC,oBAAoB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;SAC1C;KACF,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,MAAM,CAAC,MAA0C;IACxD,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpD,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,SAAS;QACpC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;IAC7E,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS;QAC3B,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACpD,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CACxE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAC/B,CAAC;IACF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE;QAC/B,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACtD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,gBAAgB,CAAC;QACzD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,iBAAiB,EAAE,MAAM,CAAC,oBAAoB,CAAC,KAAK,IAAI;KACzD,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,IAAY,EACZ,WAAqB;IAErB,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,KAAK,MAAM,SAAS,IAAI,WAAW,EAAE,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC5C,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACzB,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACjE,eAAe,CAAC,MAAM,CAAC,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,kBAAkB,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAAE,SAAS;QACzE,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC;YACrD,MAAM,IAAI,KAAK,CACb,8DAA8D,IAAI,EAAE,CACrE,CAAC;QACJ,MAAM,YAAY,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAY,IAAI,CAAC,KAAK,CAClC,MAAM,QAAQ,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAC5C,CAAC;QACF,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC5B,MAAM,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC;YACX,SAAS;YACT,MAAM;YACN,QAAQ;YACR,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO;SACjC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,CACjB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACd,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,MAAc,EACd,OAAwB;IAExB,IAAI,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC5C,IACE,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAC/B,CAAC,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,EAC5D,CAAC;QACD,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC3B,QAAQ,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC9C,KAAK,MAAM,SAAS,IAAI,QAAQ,CAAC,UAAU;QACzC,MAAM,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAc;IAC1C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAC/C,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CACpC,EAAE,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,SAAS;QACnC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;;YACrB,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,SAAiB;IAC1C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CACzD,CAAC,KAAc,EAAE,EAAE;QACjB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC,CACF,CAAC;IACF,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE;QACjC,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;IAC1E,OAAO,OAAO,CACZ,MAAM,IAAI,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,wBAAwB,CAAC,CAAC,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,IAAY,EAAE,KAAoB;IACzD,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,SAAiB,EACjB,KAAoB;IAEpB,IAAI,QAAQ,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,OAAO,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACtD,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,eAAe,CACtB,KAA8B,EAC9B,KAAa;IAEb,OAAO,CACL,KAAK,CAAC,MAAM,KAAK,qBAAqB;QACtC,KAAK,CAAC,KAAK,KAAK,KAAK;QACrB,CAAC,UAAU,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CACzE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAyB,EAAE,MAAuB;IAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,OAAO,MAAM,KAAK,IAAI;QACpB,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC;QAC/B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,YAAY,CACzB,IAAY,EACZ,MAAuB,EACvB,OAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IACjE,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,KAAK,MAAM,WAAW,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,CAC7C,CAAC;QACF,IAAI,MAAM;YACR,MAAM,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;;YACpE,MAAM,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACxE,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,MAAM,EAAE,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9E,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,IAAY,EACZ,MAAuB,EACvB,WAAqB;IAErB,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACpD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,EAAE,QAAQ,EAAE,IAAI,OAAO,CAAC,MAAM,CACvC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,CACpC,EAAE,CAAC;QACF,OAAO,IAAI,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,OAAsC;IACzD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;QACjE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACpE,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAClD,OAAO,eAAe,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,OAAO,GAAoB;YAC/B,WAAW,EAAE,EAAE;YACf,KAAK,EAAE,CAAC,IAAI,CAAC;YACb,QAAQ,EAAE,EAAE;SACb,CAAC;QACF,IAAI,CAAC;YACH,MAAM,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACvC,OAAO,OAAO,CAAC,iBAAiB;gBAC9B,CAAC,CAAC,MAAM,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC;gBACnE,CAAC,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE;gBAAE,OAAO,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAc;IAC/C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,OAAO,CAAC,iBAAiB;YACpC,CAAC,CAAC,6BAA6B;YAC/B,CAAC,CAAC,WAAW,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,WAAW,MAAM,CAAC,OAAO,IAAI,IAAI,UAAU,MAAM,CAAC,IAAI,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,KAAK,CAC5G,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,gBAAgB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAC9E,CAAC;QACF,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC","sourcesContent":["import { lstat, readFile, readdir, realpath, rm, stat } from \"node:fs/promises\";\nimport { basename, dirname, join, resolve } from \"node:path\";\nimport { parseArgs } from \"node:util\";\nimport { assertCliResult, assertRunEvidence } from \"./schema\";\nimport type { CliResultData, RunEvidenceData } from \"./schema-types\";\nimport { createReport } from \"./report\";\nimport { atomicWriteJson } from \"./storage\";\nimport { isRecord } from \"./value-guards\";\nimport {\n  acquireResultsLock,\n  retainedFile,\n  withResultsLock,\n} from \"./results-lock\";\nimport { pruneNativeTranscripts } from \"./transcript-retention\";\n\ninterface RetainedResult {\n  directory: string;\n  result: CliResultData;\n  evidence: RunEvidenceData;\n  time: number;\n}\n\ninterface RetainedStorage {\n  directories: string[];\n  roots: string[];\n  releases: (() => void)[];\n}\n\ntype RetentionPolicy =\n  { keep: number; cutoff: null } | { keep: null; cutoff: number };\n\nconst durationUnits: Record<string, number> = {\n  ms: 1,\n  s: 1000,\n  m: 60_000,\n  h: 3_600_000,\n  d: 86_400_000,\n  w: 604_800_000,\n};\n\nfunction duration(value: string): number {\n  const match = /^([1-9]\\d*)(ms|s|m|h|d|w)$/.exec(value);\n  if (!match)\n    throw new Error(\n      \"--older-than requires a positive integer and ms, s, m, h, d or w\",\n    );\n  const amount =\n    Number.parseInt(value, 10) *\n    Number(durationUnits[value.replace(/^\\d+/, \"\")]);\n  if (!Number.isSafeInteger(amount))\n    throw new Error(\"--older-than exceeds the safe duration range\");\n  return amount;\n}\n\nfunction count(value: string): number {\n  const amount = Number(value);\n  if (!/^[1-9]\\d*$/.test(value) || !Number.isSafeInteger(amount))\n    throw new Error(\"--keep must be a positive safe integer\");\n  return amount;\n}\n\nfunction parseInvocation(args: string[]) {\n  const { values } = parseArgs({\n    args,\n    strict: true,\n    options: {\n      \"results-root\": { type: \"string\" },\n      keep: { type: \"string\" },\n      latest: { type: \"boolean\" },\n      \"older-than\": { type: \"string\" },\n      \"native-transcripts\": { type: \"boolean\" },\n    },\n  });\n  return values;\n}\n\nfunction policy(values: ReturnType<typeof parseInvocation>): RetentionPolicy {\n  if (values.latest) return { keep: 1, cutoff: null };\n  if (values[\"older-than\"] !== undefined)\n    return { keep: null, cutoff: Date.now() - duration(values[\"older-than\"]) };\n  if (values.keep !== undefined)\n    return { keep: count(values.keep), cutoff: null };\n  return { keep: values[\"native-transcripts\"] ? 0 : 10, cutoff: null };\n}\n\nfunction invocation(args: string[]) {\n  const values = parseInvocation(args);\n  const policies = [values.latest, values.keep, values[\"older-than\"]].filter(\n    (value) => value !== undefined,\n  );\n  if (policies.length > 1) throw new Error(\"retention policies are exclusive\");\n  if (values[\"results-root\"] === \"\")\n    throw new Error(\"--results-root must not be empty\");\n  return {\n    root: resolve(values[\"results-root\"] ?? \".sevro/results\"),\n    policy: policy(values),\n    nativeTranscripts: values[\"native-transcripts\"] === true,\n  };\n}\n\nasync function retainedResults(\n  root: string,\n  directories: string[],\n): Promise<RetainedResult[]> {\n  const results: RetainedResult[] = [];\n  for (const directory of directories) {\n    const path = join(directory, \"result.json\");\n    await retainedFile(path);\n    const result: unknown = JSON.parse(await readFile(path, \"utf8\"));\n    assertCliResult(result);\n    if (!(await finalizedAncestors(root, directory, result.runId))) continue;\n    if (result.evidencePath !== join(directory, \"run.json\"))\n      throw new Error(\n        `retained result references evidence outside its directory: ${path}`,\n      );\n    await retainedFile(result.evidencePath);\n    const evidence: unknown = JSON.parse(\n      await readFile(result.evidencePath, \"utf8\"),\n    );\n    assertRunEvidence(evidence);\n    await createReport([path]);\n    results.push({\n      directory,\n      result,\n      evidence,\n      time: (await stat(path)).mtimeMs,\n    });\n  }\n  return results.sort(\n    (left, right) =>\n      right.time - left.time || left.directory.localeCompare(right.directory),\n  );\n}\n\nasync function resultDirectories(\n  parent: string,\n  storage: RetainedStorage,\n): Promise<void> {\n  let children = await resultChildren(parent);\n  if (\n    !storage.roots.includes(parent) &&\n    ((await resultsRoot(parent)) || children.results.length > 0)\n  ) {\n    storage.releases.push(await acquireResultsLock(parent));\n    storage.roots.push(parent);\n    children = await resultChildren(parent);\n  }\n  storage.directories.push(...children.results);\n  for (const directory of children.containers)\n    await resultDirectories(directory, storage);\n}\n\nasync function resultChildren(parent: string) {\n  const results: string[] = [];\n  const containers: string[] = [];\n  const entries = await readdir(parent, { withFileTypes: true });\n  for (const entry of entries.sort((left, right) =>\n    left.name.localeCompare(right.name),\n  )) {\n    if (!entry.isDirectory()) continue;\n    const directory = join(parent, entry.name);\n    if (await retainedFile(join(directory, \"result.json\")))\n      results.push(directory);\n    else containers.push(directory);\n  }\n  return { results, containers };\n}\n\nasync function resultsRoot(directory: string): Promise<boolean> {\n  const active = await lstat(join(directory, \"active\")).catch(\n    (cause: unknown) => {\n      if ((cause as NodeJS.ErrnoException).code === \"ENOENT\") return null;\n      throw cause;\n    },\n  );\n  if (active && !active.isDirectory())\n    throw new Error(`retained ownership must be a directory: ${directory}`);\n  return Boolean(\n    active || (await retainedFile(join(directory, \".retention-lock.sqlite\"))),\n  );\n}\n\nasync function finalized(root: string, runId: string | null): Promise<boolean> {\n  if (!runId || basename(runId) !== runId) return false;\n  const path = join(root, \"active\", `${runId}.json`);\n  if (!(await retainedFile(path))) return true;\n  const value: unknown = JSON.parse(await readFile(path, \"utf8\"));\n  if (!isRecord(value)) return false;\n  return finalizedRecord(value, runId);\n}\n\nasync function finalizedAncestors(\n  root: string,\n  directory: string,\n  runId: string | null,\n): Promise<boolean> {\n  let ancestor = dirname(directory);\n  while (ancestor !== dirname(root)) {\n    if (!(await finalized(ancestor, runId))) return false;\n    ancestor = dirname(ancestor);\n  }\n  return true;\n}\n\nfunction finalizedRecord(\n  value: Record<string, unknown>,\n  runId: string,\n): boolean {\n  return (\n    value.format === \"sevro.active-run.v1\" &&\n    value.runId === runId &&\n    [\"complete\", \"interrupted\", \"diagnostic\"].includes(String(value.status))\n  );\n}\n\nfunction retainedByPolicy(results: RetainedResult[], policy: RetentionPolicy) {\n  const cutoff = policy.cutoff;\n  return cutoff === null\n    ? results.slice(0, policy.keep)\n    : results.filter((result) => result.time >= cutoff);\n}\n\nasync function pruneResults(\n  root: string,\n  policy: RetentionPolicy,\n  storage: RetainedStorage,\n) {\n  const results = await retainedResults(root, storage.directories);\n  const remaining = retainedByPolicy(results, policy);\n  for (const resultsRoot of storage.roots) {\n    const latest = remaining.find((item) =>\n      item.directory.startsWith(`${resultsRoot}/`),\n    );\n    if (latest)\n      await atomicWriteJson(join(resultsRoot, \"latest.json\"), latest.result);\n    else await rm(join(resultsRoot, \"latest.json\"), { force: true });\n  }\n  const removed = results.filter((result) => !remaining.includes(result));\n  for (const result of removed) await rm(result.directory, { recursive: true });\n  return { removed: removed.length, kept: remaining.length };\n}\n\nasync function pruneTranscripts(\n  root: string,\n  policy: RetentionPolicy,\n  directories: string[],\n) {\n  const results = await retainedResults(root, directories);\n  const preserved = retainedByPolicy(results, policy);\n  let removed = 0;\n  for (const { evidence } of results.filter(\n    (item) => !preserved.includes(item),\n  )) {\n    removed += await pruneNativeTranscripts(evidence);\n  }\n  return { removed, kept: results.length };\n}\n\nasync function prune(options: ReturnType<typeof invocation>) {\n  const root = await realpath(options.root).catch((cause: unknown) => {\n    if ((cause as NodeJS.ErrnoException).code === \"ENOENT\") return null;\n    throw cause;\n  });\n  if (root === null) return { removed: 0, kept: 0 };\n  return withResultsLock(root, async () => {\n    const storage: RetainedStorage = {\n      directories: [],\n      roots: [root],\n      releases: [],\n    };\n    try {\n      await resultDirectories(root, storage);\n      return options.nativeTranscripts\n        ? await pruneTranscripts(root, options.policy, storage.directories)\n        : await pruneResults(root, options.policy, storage);\n    } finally {\n      for (const release of storage.releases.reverse()) release();\n    }\n  });\n}\n\n/** Explicitly remove old retained runs while keeping report's latest index usable. */\nexport async function pruneCommand(args: string[]): Promise<number> {\n  try {\n    const options = invocation(args);\n    const result = await prune(options);\n    const unit = options.nativeTranscripts\n      ? \"native transcript bundle(s)\"\n      : \"result(s)\";\n    process.stdout.write(\n      `Removed ${result.removed} ${unit}; kept ${result.kept}${options.nativeTranscripts ? \" result(s)\" : \"\"}.\\n`,\n    );\n    return 0;\n  } catch (error) {\n    process.stderr.write(\n      `sevro prune: ${error instanceof Error ? error.message : \"pruning failed\"}\\n`,\n    );\n    return 64;\n  }\n}\n"]}

package/dist/src/report.js

@@ -0,0 +1,276 @@
+import { readFile } from "node:fs/promises";
+import { isAbsolute, join, resolve } from "node:path";
+import { parseArgs } from "node:util";
+import { canonicalJson } from "./identity.js";
+import { assertCliResult, assertReport, assertRunEvidence } from "./schema.js";
+import { canonicalRuntimeRoot } from "./runtime/paths.js";
+import { nativeTranscriptRetention } from "./transcript-retention.js";
+function sumKnown(values) {
+    return values.length && values.every((value) => value != null)
+        ? values.reduce((total, value) => total + value, 0)
+        : null;
+}
+function passRate(trials) {
+    if (!trials.length ||
+        trials.some((trial) => trial.execution.status !== "completed" ||
+            trial.grading.status !== "completed" ||
+            trial.task.verdict === "not_assessed"))
+        return null;
+    return (trials.filter((trial) => trial.task.verdict === "passed").length /
+        trials.length);
+}
+async function loadResult(path) {
+    if (!isAbsolute(path))
+        throw new Error("report result paths must be absolute");
+    const result = JSON.parse(await readFile(path, "utf8"));
+    assertCliResult(result);
+    return result;
+}
+async function loadEvidence(result) {
+    const path = retainedEvidencePath(result);
+    if (path === null)
+        return null;
+    const value = JSON.parse(await readFile(path, "utf8"));
+    assertRunEvidence(value);
+    const evidence = value;
+    if (evidence.runId !== result.runId ||
+        canonicalJson(evidence.result) !== canonicalJson(result))
+        throw new Error("retained evidence differs from report result");
+    return evidence;
+}
+function retainedEvidencePath(result) {
+    if (!result.evidencePath) {
+        if (result.cases.length || result.exitCode === 0)
+            throw new Error("completed result has no retained evidence");
+        return null;
+    }
+    if (!isAbsolute(result.evidencePath))
+        throw new Error("evidence path must be absolute");
+    return result.evidencePath;
+}
+function trialEvidence(caseId, trials, evidence) {
+    if (!evidence)
+        return [];
+    const matching = evidence.trials.filter((item) => item.caseId === caseId);
+    if (matching.length !== trials.length ||
+        trials.some((trial) => matching.filter((item) => item.trial === trial.trial).length !== 1))
+        throw new Error("retained trial evidence differs from report result");
+    return matching;
+}
+function reportRow(path, result, selected, evidence, transcripts) {
+    const retained = trialEvidence(selected.caseId, selected.trials, evidence);
+    const candidateRoute = retainedCandidateRoute(evidence);
+    const usage = retainedUsage(retained);
+    return {
+        resultFile: path,
+        evidencePath: result.evidencePath,
+        runId: result.runId,
+        caseId: selected.caseId,
+        execution: selected.execution.status,
+        grading: selected.grading.status,
+        task: selected.task.verdict,
+        exitCode: result.exitCode,
+        trialCount: selected.trials.length,
+        taskPassRate: passRate(selected.trials),
+        candidateDurationMs: sumKnown(retained.map((trial) => trial.candidateDurationMs)),
+        ...usage,
+        ...retainedIdentity(evidence),
+        candidateRoute,
+        nativeTranscripts: {
+            retained: transcripts.filter((item) => item.caseId === selected.caseId && !item.pruned).length,
+            pruned: transcripts.filter((item) => item.caseId === selected.caseId && item.pruned).length,
+        },
+        domainOutcomes: selected.trials.flatMap((trial) => (trial.domainOutcomes ?? []).map((outcome) => ({
+            trial: trial.trial,
+            id: outcome.id,
+            status: outcome.status,
+        }))),
+    };
+}
+function retainedCandidateRoute(evidence) {
+    if (!evidence)
+        return null;
+    const routes = evidence.routes.filter((route) => route.role === "candidate"), [route] = routes;
+    if (routes.length !== 1 || route === undefined)
+        throw new Error("retained candidate route is ambiguous");
+    return { host: route.host, model: route.model, effort: route.effort };
+}
+function retainedUsage(retained) {
+    const complete = retained.length > 0 && retained.every((trial) => trial.usage.complete);
+    return {
+        inputTokens: complete
+            ? sumKnown(retained.map((trial) => trial.usage.inputTokens))
+            : null,
+        outputTokens: complete
+            ? sumKnown(retained.map((trial) => trial.usage.outputTokens))
+            : null,
+        costUsd: complete
+            ? sumKnown(retained.map((trial) => trial.usage.costUsd))
+            : null,
+    };
+}
+function retainedIdentity(evidence) {
+    if (!evidence)
+        return {
+            runnerBuildDigest: null,
+            evaluationDigest: null,
+            requestedCondition: null,
+            actualCondition: null,
+            routes: [],
+        };
+    return {
+        runnerBuildDigest: evidence.runner.buildDigest,
+        evaluationDigest: evidence.evaluationIdentity.digest,
+        requestedCondition: evidence.condition.requested,
+        actualCondition: evidence.condition.actual,
+        routes: evidence.routes,
+    };
+}
+export async function createReport(paths) {
+    if (!paths.length || new Set(paths).size !== paths.length)
+        throw new Error("report needs distinct result files");
+    const rows = [];
+    const inputs = [];
+    for (const path of paths) {
+        const result = await loadResult(path);
+        const evidence = await loadEvidence(result);
+        const transcripts = await nativeTranscriptRetention(evidence);
+        inputs.push({
+            resultFile: path,
+            execution: result.execution.status,
+            grading: result.grading.status,
+            task: result.task.verdict,
+            exitCode: result.exitCode,
+            caseCount: result.cases.length,
+        });
+        for (const selected of result.cases)
+            rows.push(reportRow(path, result, selected, evidence, transcripts));
+    }
+    const report = {
+        format: "sevro.report.v1",
+        inputs,
+        rows,
+        summary: {
+            cases: rows.length,
+            passed: rows.filter((row) => row.task === "passed").length,
+            failed: rows.filter((row) => row.task === "failed").length,
+            notAssessed: rows.filter((row) => row.task === "not_assessed").length,
+        },
+    };
+    assertReport(report);
+    return report;
+}
+function cell(value) {
+    return value.replaceAll("|", "\\|").replaceAll(/[\r\n]/g, " ");
+}
+function measured(value, digits = 0) {
+    return value === null ? "unknown" : value.toFixed(digits);
+}
+function seconds(value) {
+    return value === null ? "unknown" : `${(value / 1000).toFixed(2)}s`;
+}
+export function renderReport(report) {
+    const lines = [
+        "# Sevro evaluation report",
+        "",
+        "Task verdict, execution, and grading are separate. Unknown measurements are not zero. Rows do not claim matched comparisons.",
+        "",
+        `Cases: ${report.summary.cases}; passed: ${report.summary.passed}; failed: ${report.summary.failed}; not assessed: ${report.summary.notAssessed}.`,
+        "",
+        "## Input runs",
+        "",
+        "| Result file | Exit | Execution | Grading | Task | Cases |",
+        "| --- | ---: | --- | --- | --- | ---: |",
+        ...report.inputs.map((input) => `| ${cell(input.resultFile)} | ${input.exitCode} | ${input.execution} | ${input.grading} | ${input.task} | ${input.caseCount} |`),
+        "",
+        "## Case outcomes",
+        "",
+        "| Case | Task | Execution | Grading | Pass rate | Candidate time | Candidate tokens | Candidate cost | Condition | Candidate route |",
+        "| --- | --- | --- | --- | ---: | ---: | ---: | ---: | --- | --- |",
+        ...report.rows.map(caseOutcomeLine),
+        "",
+        "## Retained evidence",
+        "",
+        ...report.rows.map((row) => `- ${cell(row.caseId)}: ${row.evidencePath ?? "unavailable"}${transcriptSummary(row)}`),
+        "",
+    ];
+    const outcomes = report.rows.flatMap((row) => row.domainOutcomes.map((outcome) => ({ caseId: row.caseId, ...outcome })));
+    if (outcomes.length)
+        lines.push("## Domain outcomes", "", "Domain outcomes are independent of the task verdict.", "", "| Case | Trial | Outcome | Status |", "| --- | ---: | --- | --- |", ...outcomes.map((outcome) => `| ${cell(outcome.caseId)} | ${outcome.trial} | ${cell(outcome.id)} | ${outcome.status} |`), "");
+    lines.push("## Routes", "", "| Case | Role | Host | Model | Effort |", "| --- | --- | --- | --- | --- |", ...report.rows.flatMap((row) => row.routes.map((route) => `| ${cell(row.caseId)} | ${route.role} | ${cell(route.host)} | ${cell(route.model)} | ${cell(route.effort)} |`)), "");
+    return lines.join("\n");
+}
+function transcriptSummary(row) {
+    if (!row.nativeTranscripts)
+        return "";
+    return `; native transcripts: ${row.nativeTranscripts.retained} retained, ${row.nativeTranscripts.pruned} pruned`;
+}
+function passRateCell(rate) {
+    return rate === null ? "unknown" : `${(rate * 100).toFixed(0)}%`;
+}
+function costCell(cost) {
+    return cost === null ? "unknown" : `$${cost.toFixed(4)}`;
+}
+function routeCell(route) {
+    return route
+        ? cell(`${route.host}/${route.model}@${route.effort}`)
+        : "unknown";
+}
+function conditionCell(row) {
+    return `${row.requestedCondition ?? "unknown"} / ${row.actualCondition ?? "unknown"}`;
+}
+function caseOutcomeLine(row) {
+    return `| ${cell(row.caseId)} | ${row.task} | ${row.execution} | ${row.grading} | ${passRateCell(row.taskPassRate)} | ${seconds(row.candidateDurationMs)} | ${measured(row.inputTokens)} / ${measured(row.outputTokens)} | ${costCell(row.costUsd)} | ${conditionCell(row)} | ${routeCell(row.candidateRoute)} |`;
+}
+export async function reportCommand(argv) {
+    try {
+        const values = reportInvocation(argv);
+        const report = await createReport(await reportPaths(values));
+        process.stdout.write(values.json ? `${JSON.stringify(report)}\n` : renderReport(report));
+        return 0;
+    }
+    catch (error) {
+        process.stderr.write(`${reportErrorMessage(error)}\n`);
+        return 64;
+    }
+}
+function reportInvocation(argv) {
+    const { values, positionals } = parseArgs({
+        args: argv,
+        allowPositionals: true,
+        strict: true,
+        options: {
+            json: { type: "boolean" },
+            "result-file": { type: "string", multiple: true },
+            latest: { type: "boolean" },
+            "results-root": { type: "string" },
+        },
+    });
+    if (positionals.length !== 1 || positionals[0] !== "report")
+        throw new Error("expected the report command");
+    return values;
+}
+async function reportPaths(values) {
+    validateReportSource(values);
+    const paths = selectedReportPaths(values);
+    if (paths.some((path) => !path.trim()))
+        throw new Error("--result-file must name a readable retained result file");
+    return Promise.all(paths.map((path) => canonicalRuntimeRoot(resolve(path))));
+}
+function validateReportSource(values) {
+    if (values.latest && values["result-file"] !== undefined)
+        throw new Error("--latest and --result-file are exclusive");
+    if (values["results-root"] !== undefined && !values.latest)
+        throw new Error("--results-root requires --latest");
+}
+function selectedReportPaths(values) {
+    return values.latest
+        ? [
+            join(values["results-root"] ?? join(process.cwd(), ".sevro", "results"), "latest.json"),
+        ]
+        : (values["result-file"] ?? []);
+}
+function reportErrorMessage(error) {
+    return error instanceof Error ? error.message : "invalid report input";
+}
+//# sourceMappingURL=report.js.map