@dewtech/dare-cli 3.2.0 → 3.3.0

package/dist/verification/__tests__/prerank.test.js

@@ -0,0 +1,44 @@
+import { describe, it, expect } from 'vitest';
+import { prerank, reorderByPrerank, PRERANK_NEVER_AUTHORIZES_DONE, } from '../best-of-n/selector/prerank.js';
+describe('prerank', () => {
+    it('should_score_in_zero_one_range', () => {
+        const scores = prerank([
+            { id: 'a', diff: '--- a/x\n+++ b/x\n@@\n-old\n+new\n' },
+            { id: 'b', diff: '+'.repeat(500) },
+        ]);
+        for (const s of scores) {
+            expect(s.score).toBeGreaterThanOrEqual(0);
+            expect(s.score).toBeLessThanOrEqual(1);
+        }
+    });
+    it('should_be_deterministic', () => {
+        const input = [{ id: 'x', diff: '--- a/f.ts\n+++ b/f.ts\n@@\n+test\n' }];
+        expect(prerank(input)).toEqual(prerank(input));
+    });
+    it('should_prefer_smaller_diff', () => {
+        const scores = prerank([
+            { id: 'small', diff: '--- a/x\n+++ b/x\n@@\n+1\n' },
+            { id: 'large', diff: '--- a/x\n+++ b/x\n' + '+line\n'.repeat(100) },
+        ]);
+        const small = scores.find((s) => s.id === 'small').score;
+        const large = scores.find((s) => s.id === 'large').score;
+        expect(small).toBeGreaterThan(large);
+    });
+    it('should_reorder_by_score', () => {
+        const items = [{ id: 'a' }, { id: 'b' }];
+        const scores = prerank([
+            { id: 'a', diff: '--- a/x\n+++ b/x\n' + '+line\n'.repeat(80) },
+            { id: 'b', diff: '--- a/x\n+++ b/x\n@@\n+1\n' },
+        ]);
+        const ordered = reorderByPrerank(items, scores);
+        expect(ordered[0].id).toBe('b');
+    });
+    it('should_never_authorize_done_rs07', () => {
+        expect(PRERANK_NEVER_AUTHORIZES_DONE).toBe(true);
+        const scores = prerank([{ id: 'fail', diff: '' }]);
+        expect(scores[0].score).toBeLessThanOrEqual(1);
+        expect(scores[0]).not.toHaveProperty('verdict');
+        expect(scores[0]).not.toHaveProperty('passed');
+    });
+});
+//# sourceMappingURL=prerank.test.js.map

package/dist/verification/__tests__/prerank.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prerank.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/prerank.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAE1C,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC;YACrB,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,oCAAoC,EAAE;YACvD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACnC,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC;YACrB,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,4BAA4B,EAAE;YACnD,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACpE,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAE,CAAC,KAAK,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAE,CAAC,KAAK,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC;YACrB,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAC9D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/runner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runner.test.d.ts.map

package/dist/verification/__tests__/runner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/runner.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/runner.test.js

@@ -0,0 +1,200 @@
+import { describe, it, expect, vi } from 'vitest';
+import { DEFAULTS } from '../config.js';
+import { createRunVerification, } from '../runner.js';
+import { FailToPassMissingError } from '../gates/fail-to-pass.js';
+import { MutationToolNotFoundError } from '../gates/mutation/adapter.js';
+function passAspect(aspect, reason = 'ok') {
+    return { aspect, verdict: 'PASS', reason, durationMs: 1 };
+}
+function failAspect(aspect, reason = 'failed') {
+    return { aspect, verdict: 'FAIL', reason, durationMs: 1 };
+}
+function enabledConfig(patch = {}) {
+    return {
+        ...DEFAULTS,
+        enabled: true,
+        failToPass: { required: true },
+        antiTamper: { enabled: false },
+        typeCheck: { enabled: false },
+        mutation: {
+            ...DEFAULTS.mutation,
+            enabled: true,
+            minScore: 0.7,
+        },
+        ...patch,
+    };
+}
+function baseOpts(patch = {}) {
+    return {
+        taskId: 'task-runner',
+        stack: 'mcp-server-node-ts',
+        cwd: '/tmp/project',
+        config: enabledConfig(),
+        changedFiles: ['src/a.ts'],
+        ...patch,
+    };
+}
+function mockAdapter(overrides = {}) {
+    return {
+        tool: 'stryker',
+        stacks: ['mcp-server-node-ts'],
+        isAvailable: async () => true,
+        run: async () => ({
+            killed: 8,
+            survived: 2,
+            noCoverage: 0,
+            timedOut: false,
+            tool: 'stryker',
+            score: 0.8,
+        }),
+        ...overrides,
+    };
+}
+function makeDeps(overrides = {}) {
+    return {
+        readArtifact: async () => ({
+            specGlob: 'spec.test.ts',
+            failToPassBaseline: {
+                recordedAt: '2026-01-01',
+                ranAgainst: 'abc',
+                failed: ['spec.test.ts::x'],
+                allFailed: true,
+            },
+        }),
+        checkFailToPass: async () => passAspect('fail-to-pass'),
+        checkAntiTamper: async () => passAspect('anti-tamper'),
+        checkTypes: async () => passAspect('type'),
+        adapterForStack: async () => mockAdapter(),
+        ...overrides,
+    };
+}
+describe('runVerification', () => {
+    it('should_noop_when_disabled', async () => {
+        const run = createRunVerification(makeDeps());
+        const result = await run(baseOpts({ config: { ...DEFAULTS, enabled: false } }));
+        expect(result.passed).toBe(true);
+        expect(result.aspects).toHaveLength(0);
+    });
+    it('should_throw_fail_to_pass_missing', async () => {
+        const run = createRunVerification(makeDeps({ readArtifact: async () => undefined }));
+        await expect(run(baseOpts())).rejects.toThrow(FailToPassMissingError);
+    });
+    it('should_short_circuit_on_fail_to_pass_fail', async () => {
+        const checkFailToPass = vi.fn(async () => failAspect('fail-to-pass'));
+        const checkAntiTamper = vi.fn(async () => passAspect('anti-tamper'));
+        const adapterForStack = vi.fn(async () => mockAdapter());
+        const run = createRunVerification(makeDeps({ checkFailToPass, checkAntiTamper, adapterForStack }));
+        const result = await run(baseOpts());
+        expect(result.passed).toBe(false);
+        expect(result.aspects).toHaveLength(1);
+        expect(result.aspects[0]?.aspect).toBe('fail-to-pass');
+        expect(checkAntiTamper).not.toHaveBeenCalled();
+        expect(adapterForStack).not.toHaveBeenCalled();
+    });
+    it('should_throw_tool_not_found', async () => {
+        const run = createRunVerification(makeDeps({
+            adapterForStack: async () => mockAdapter({ isAvailable: async () => false }),
+        }));
+        await expect(run(baseOpts())).rejects.toThrow(MutationToolNotFoundError);
+    });
+    it('should_skip_mutation_when_zero_mutants', async () => {
+        const run = createRunVerification(makeDeps({
+            adapterForStack: async () => mockAdapter({
+                run: async () => ({
+                    killed: 0,
+                    survived: 0,
+                    noCoverage: 0,
+                    timedOut: false,
+                    tool: 'stryker',
+                    score: Number.NaN,
+                }),
+            }),
+        }));
+        const result = await run(baseOpts());
+        const mutation = result.aspects.find((a) => a.aspect === 'mutation');
+        expect(result.passed).toBe(true);
+        expect(mutation?.verdict).toBe('SKIP');
+    });
+    it('should_run_mutation_last_and_fail_below_minScore', async () => {
+        const order = [];
+        const run = createRunVerification(makeDeps({
+            checkFailToPass: async () => {
+                order.push('fail-to-pass');
+                return passAspect('fail-to-pass');
+            },
+            checkTypes: async () => {
+                order.push('type');
+                return passAspect('type');
+            },
+            adapterForStack: async () => {
+                order.push('mutation-adapter');
+                return mockAdapter({
+                    run: async () => {
+                        order.push('mutation-run');
+                        return {
+                            killed: 2,
+                            survived: 8,
+                            noCoverage: 0,
+                            timedOut: false,
+                            tool: 'stryker',
+                            score: 0.2,
+                        };
+                    },
+                });
+            },
+        }));
+        const result = await run(baseOpts({
+            config: enabledConfig({
+                antiTamper: { enabled: false },
+                typeCheck: { enabled: true },
+                mutation: { ...DEFAULTS.mutation, enabled: true, minScore: 0.7 },
+            }),
+        }));
+        expect(order).toEqual([
+            'fail-to-pass',
+            'type',
+            'mutation-adapter',
+            'mutation-run',
+        ]);
+        expect(result.passed).toBe(false);
+        const mutation = result.aspects.find((a) => a.aspect === 'mutation');
+        expect(mutation?.verdict).toBe('FAIL');
+        expect(mutation?.score).toBeCloseTo(0.2, 5);
+    });
+    it('should_pass_when_all_aspects_pass', async () => {
+        const run = createRunVerification(makeDeps({
+            readArtifact: async () => ({
+                specGlob: 'spec.test.ts',
+                failToPassBaseline: {
+                    recordedAt: '2026-01-01',
+                    ranAgainst: 'abc',
+                    failed: ['spec.test.ts::x'],
+                    allFailed: true,
+                },
+                tamperSnapshot: {
+                    assertionCount: 5,
+                    testFiles: ['spec.test.ts'],
+                },
+            }),
+            checkFailToPass: async () => passAspect('fail-to-pass'),
+            checkAntiTamper: async () => passAspect('anti-tamper'),
+            checkTypes: async () => passAspect('type'),
+            adapterForStack: async () => mockAdapter(),
+        }));
+        const result = await run(baseOpts({
+            config: enabledConfig({
+                antiTamper: { enabled: true },
+                typeCheck: { enabled: true },
+            }),
+        }));
+        expect(result.passed).toBe(true);
+        expect(result.mutationScore).toBeCloseTo(0.8, 5);
+        expect(result.aspects.map((a) => a.aspect)).toEqual([
+            'fail-to-pass',
+            'anti-tamper',
+            'type',
+            'mutation',
+        ]);
+    });
+});
+//# sourceMappingURL=runner.test.js.map

package/dist/verification/__tests__/runner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/runner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,OAAO,EACL,qBAAqB,GAGtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,SAAS,UAAU,CACjB,MAA8B,EAC9B,MAAM,GAAG,IAAI;IAEb,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,UAAU,CACjB,MAA8B,EAC9B,MAAM,GAAG,QAAQ;IAEjB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CACpB,QAAqC,EAAE;IAEvC,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC9B,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;QAC9B,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;QAC7B,QAAQ,EAAE;YACR,GAAG,QAAQ,CAAC,QAAQ;YACpB,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,GAAG;SACd;QACD,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,QAAyC,EAAE;IAE3C,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,oBAAoB;QAC3B,GAAG,EAAE,cAAc;QACnB,MAAM,EAAE,aAAa,EAAE;QACvB,YAAY,EAAE,CAAC,UAAU,CAAC;QAC1B,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,YAAsC,EAAE;IAExC,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,CAAC,oBAAoB,CAAC;QAC9B,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QAC7B,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAChB,MAAM,EAAE,CAAC;YACT,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG;SACX,CAAC;QACF,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,YAAuC,EAAE;IACzD,OAAO;QACL,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACzB,QAAQ,EAAE,cAAc;YACxB,kBAAkB,EAAE;gBAClB,UAAU,EAAE,YAAY;gBACxB,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,CAAC,iBAAiB,CAAC;gBAC3B,SAAS,EAAE,IAAI;aAChB;SACF,CAAC;QACF,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;QACvD,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;QACtD,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1C,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1C,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,GAAG,GAAG,qBAAqB,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CACtD,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,CAClD,CAAC;QAEF,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QACrE,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC,CAChE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAErC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC/C,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC;YACP,eAAe,EAAE,KAAK,IAAI,EAAE,CAC1B,WAAW,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;SAClD,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC;YACP,eAAe,EAAE,KAAK,IAAI,EAAE,CAC1B,WAAW,CAAC;gBACV,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBAChB,MAAM,EAAE,CAAC;oBACT,QAAQ,EAAE,CAAC;oBACX,UAAU,EAAE,CAAC;oBACb,QAAQ,EAAE,KAAK;oBACf,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,MAAM,CAAC,GAAG;iBAClB,CAAC;aACH,CAAC;SACL,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC;YACP,eAAe,EAAE,KAAK,IAAI,EAAE;gBAC1B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC3B,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;YACpC,CAAC;YACD,UAAU,EAAE,KAAK,IAAI,EAAE;gBACrB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;YACD,eAAe,EAAE,KAAK,IAAI,EAAE;gBAC1B,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBAC/B,OAAO,WAAW,CAAC;oBACjB,GAAG,EAAE,KAAK,IAAI,EAAE;wBACd,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;wBAC3B,OAAO;4BACL,MAAM,EAAE,CAAC;4BACT,QAAQ,EAAE,CAAC;4BACX,UAAU,EAAE,CAAC;4BACb,QAAQ,EAAE,KAAK;4BACf,IAAI,EAAE,SAAS;4BACf,KAAK,EAAE,GAAG;yBACX,CAAC;oBACJ,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,QAAQ,CAAC;YACP,MAAM,EAAE,aAAa,CAAC;gBACpB,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC9B,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC5B,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;aACjE,CAAC;SACH,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,cAAc;YACd,MAAM;YACN,kBAAkB;YAClB,cAAc;SACf,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACrE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC;YACP,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACzB,QAAQ,EAAE,cAAc;gBACxB,kBAAkB,EAAE;oBAClB,UAAU,EAAE,YAAY;oBACxB,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,CAAC,iBAAiB,CAAC;oBAC3B,SAAS,EAAE,IAAI;iBAChB;gBACD,cAAc,EAAE;oBACd,cAAc,EAAE,CAAC;oBACjB,SAAS,EAAE,CAAC,cAAc,CAAC;iBAC5B;aACF,CAAC;YACF,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;YACvD,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;YACtD,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1C,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,EAAE;SAC3C,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,QAAQ,CAAC;YACP,MAAM,EAAE,aAAa,CAAC;gBACpB,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC7B,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;aAC7B,CAAC;SACH,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAClD,cAAc;YACd,aAAa;YACb,MAAM;YACN,UAAU;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/safe-spawn.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=safe-spawn.test.d.ts.map

package/dist/verification/__tests__/safe-spawn.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-spawn.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/safe-spawn.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/safe-spawn.test.js

@@ -0,0 +1,36 @@
+import { describe, it, expect } from 'vitest';
+import os from 'node:os';
+import { safeSpawn, sanitizeEnv } from '../../exec/safe-spawn.js';
+describe('safeSpawn', () => {
+    it('should_run_argv_without_shell', async () => {
+        const result = await safeSpawn(process.execPath, ['-e', "process.stdout.write('ok')"], { cwd: os.tmpdir(), timeoutSeconds: 30 });
+        expect(result.code).toBe(0);
+        expect(result.stdout).toBe('ok');
+        expect(result.timedOut).toBe(false);
+    });
+    it('should_not_interpret_shell_metachars', async () => {
+        const result = await safeSpawn(process.execPath, ['-e', "process.stdout.write('literal')"], { cwd: os.tmpdir(), timeoutSeconds: 30 });
+        expect(result.stdout).toBe('literal');
+    });
+    it('should_timeout', async () => {
+        const result = await safeSpawn(process.execPath, ['-e', "setTimeout(() => {}, 60000)"], { cwd: os.tmpdir(), timeoutSeconds: 1, maxChars: 500 });
+        expect(result.timedOut).toBe(true);
+        expect(result.code).not.toBe(0);
+        expect(result.stderr).toContain('timed out');
+    });
+    it('should_truncate_output', async () => {
+        const result = await safeSpawn(process.execPath, ['-e', "process.stdout.write('x'.repeat(5000))"], { cwd: os.tmpdir(), timeoutSeconds: 30, maxChars: 100 });
+        expect(result.stdout.length).toBeLessThanOrEqual(100);
+    });
+    it('should_sanitize_env', () => {
+        const env = sanitizeEnv({
+            PATH: '/bin',
+            MY_SECRET: 'super-secret',
+            HOME: '/home/user',
+        });
+        expect(env.PATH).toBe('/bin');
+        expect(env.HOME).toBe('/home/user');
+        expect(env.MY_SECRET).toBeUndefined();
+    });
+});
+//# sourceMappingURL=safe-spawn.test.js.map

package/dist/verification/__tests__/safe-spawn.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-spawn.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/safe-spawn.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAElE,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,4BAA4B,CAAC,EACpC,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CACzC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,iCAAiC,CAAC,EACzC,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CACzC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,6BAA6B,CAAC,EACrC,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CACvD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,wCAAwC,CAAC,EAChD,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CACxD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,GAAG,GAAG,WAAW,CAAC;YACtB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,cAAc;YACzB,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/security.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security.test.d.ts.map

package/dist/verification/__tests__/security.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/security.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/security.test.js

@@ -0,0 +1,79 @@
+import { describe, it, expect } from 'vitest';
+import fs from 'fs-extra';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { sanitizeEnv } from '../../exec/safe-spawn.js';
+import { assertRelativeSafe } from '../../utils/path-safety.js';
+import { prerank, PRERANK_NEVER_AUTHORIZES_DONE, } from '../best-of-n/selector/prerank.js';
+import { createWorktree } from '../best-of-n/worktree.js';
+const SRC_ROOT = path.join(path.dirname(fileURLToPath(import.meta.url)), '../..');
+const SHELL_TRUE = /shell\s*:\s*true/;
+async function collectTsFiles(dir, base) {
+    const entries = await fs.readdir(dir, { withFileTypes: true });
+    const out = [];
+    for (const ent of entries) {
+        const full = path.join(dir, ent.name);
+        const rel = path.relative(base, full).replace(/\\/g, '/');
+        if (ent.isDirectory()) {
+            out.push(...(await collectTsFiles(full, base)));
+        }
+        else if (ent.name.endsWith('.ts')) {
+            out.push(rel);
+        }
+    }
+    return out;
+}
+function isTestFile(rel) {
+    return rel.includes('__tests__') || rel.endsWith('.spec.ts') || rel.endsWith('.test.ts');
+}
+describe('verification security audit', () => {
+    it('RS-06: no shell:true in production verification src', async () => {
+        const verificationDir = path.join(SRC_ROOT, 'verification');
+        const execDir = path.join(SRC_ROOT, 'exec');
+        const violations = [];
+        for (const dir of [verificationDir, execDir]) {
+            const files = await collectTsFiles(dir, SRC_ROOT);
+            for (const rel of files) {
+                if (isTestFile(rel))
+                    continue;
+                const content = await fs.readFile(path.join(SRC_ROOT, rel), 'utf8');
+                if (SHELL_TRUE.test(content))
+                    violations.push(rel);
+            }
+        }
+        expect(violations).toEqual([]);
+    });
+    it('RS-02: sanitizeEnv strips secret-like keys', () => {
+        const env = sanitizeEnv({ PATH: '/bin', API_KEY: 'secret', HOME: '/u' });
+        expect(env.API_KEY).toBeUndefined();
+        expect(env.PATH).toBe('/bin');
+    });
+    it('RS-07: prerank never authorizes DONE', () => {
+        expect(PRERANK_NEVER_AUTHORIZES_DONE).toBe(true);
+        const scores = prerank([{ id: 'c1', diff: '--- a\n+++ b\n@@\n+fail\n' }]);
+        for (const s of scores) {
+            expect(s).not.toHaveProperty('verdict');
+            expect(s).not.toHaveProperty('passed');
+            expect(s.score).toBeLessThanOrEqual(1);
+        }
+    });
+    it('RS-01: worktree rejects path traversal', async () => {
+        await expect(createWorktree(process.cwd(), '../evil')).rejects.toThrow();
+        expect(() => assertRelativeSafe('../evil')).toThrow();
+    });
+    it('RS-03: mutation adapters use safeSpawn not network fetch', async () => {
+        const mutationDir = path.join(SRC_ROOT, 'verification/gates/mutation');
+        const files = await collectTsFiles(mutationDir, SRC_ROOT);
+        const violations = [];
+        for (const rel of files) {
+            if (isTestFile(rel))
+                continue;
+            const content = await fs.readFile(path.join(SRC_ROOT, rel), 'utf8');
+            if (/\bfetch\s*\(/.test(content) || /\bhttp\.request\s*\(/.test(content)) {
+                violations.push(rel);
+            }
+        }
+        expect(violations).toEqual([]);
+    });
+});
+//# sourceMappingURL=security.test.js.map

package/dist/verification/__tests__/security.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/security.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,OAAO,EACP,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,OAAO,CACR,CAAC;AAEF,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,IAAY;IACrD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC3F,CAAC;AAED,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAClD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC9B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;gBACpE,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACzE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;YACpE,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/selector-pareto.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=selector-pareto.test.d.ts.map

package/dist/verification/__tests__/selector-pareto.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selector-pareto.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/selector-pareto.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/selector-pareto.test.js

@@ -0,0 +1,77 @@
+import { describe, it, expect } from 'vitest';
+import { selectByPareto, NoViableCandidateError, } from '../best-of-n/selector/pareto.js';
+function worktree(id) {
+    return { id, path: `.dare/worktrees/${id}`, branch: `dare/cand-${id}` };
+}
+function aspect(name, verdict, score) {
+    return { aspect: name, verdict, score, reason: verdict, durationMs: 1 };
+}
+function candidate(id, aspects, mutationScore) {
+    const passed = !aspects.some((a) => a.verdict === 'FAIL');
+    return {
+        id,
+        worktree: worktree(id),
+        verification: {
+            taskId: 'task-bench',
+            passed,
+            aspects,
+            mutationScore,
+            durationMs: 5,
+        },
+    };
+}
+const allPass = (id, mutationScore) => candidate(id, [
+    aspect('test', 'PASS'),
+    aspect('lint', 'PASS'),
+    aspect('type', 'PASS'),
+    aspect('mutation', 'PASS', mutationScore),
+], mutationScore);
+describe('selectByPareto', () => {
+    it('should_pick_dominant', () => {
+        const winner = selectByPareto([
+            allPass('cand-2', 0.6),
+            allPass('cand-1', 0.9),
+        ]);
+        expect(winner.id).toBe('cand-1');
+    });
+    it('should_break_tie_by_mutation_score', () => {
+        const a = candidate('cand-a', [
+            aspect('test', 'PASS'),
+            aspect('lint', 'PASS'),
+            aspect('type', 'SKIP'),
+            aspect('mutation', 'PASS', 0.8),
+        ], 0.8);
+        const b = candidate('cand-b', [
+            aspect('test', 'PASS'),
+            aspect('lint', 'SKIP'),
+            aspect('type', 'PASS'),
+            aspect('mutation', 'PASS', 0.75),
+        ], 0.75);
+        expect(selectByPareto([a, b]).id).toBe('cand-a');
+    });
+    it('should_break_remaining_tie_by_id', () => {
+        const winner = selectByPareto([
+            allPass('cand-z', 0.85),
+            allPass('cand-a', 0.85),
+            allPass('cand-m', 0.85),
+        ]);
+        expect(winner.id).toBe('cand-a');
+    });
+    it('should_discard_failing_candidates', () => {
+        const failing = candidate('cand-fail', [
+            aspect('test', 'FAIL'),
+            aspect('lint', 'PASS'),
+            aspect('type', 'PASS'),
+            aspect('mutation', 'PASS', 0.99),
+        ]);
+        const winner = selectByPareto([failing, allPass('cand-ok', 0.5)]);
+        expect(winner.id).toBe('cand-ok');
+    });
+    it('should_throw_when_all_fail', () => {
+        expect(() => selectByPareto([
+            candidate('cand-1', [aspect('test', 'FAIL')]),
+            candidate('cand-2', [aspect('mutation', 'FAIL')]),
+        ])).toThrow(NoViableCandidateError);
+    });
+});
+//# sourceMappingURL=selector-pareto.test.js.map

package/dist/verification/__tests__/selector-pareto.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selector-pareto.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/selector-pareto.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,cAAc,EACd,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAGzC,SAAS,QAAQ,CAAC,EAAU;IAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,MAAM,CACb,IAA4B,EAC5B,OAAgC,EAChC,KAAc;IAEd,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,SAAS,CAChB,EAAU,EACV,OAAoC,EACpC,aAAsB;IAEtB,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAC1D,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtB,YAAY,EAAE;YACZ,MAAM,EAAE,YAAY;YACpB,MAAM;YACN,OAAO;YACP,aAAa;YACb,UAAU,EAAE,CAAC;SACd;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,aAAqB,EAAE,EAAE,CACpD,SAAS,CACP,EAAE,EACF;IACE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC;CAC1C,EACD,aAAa,CACd,CAAC;AAEJ,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;YACtB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,SAAS,CACjB,QAAQ,EACR;YACE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC;SAChC,EACD,GAAG,CACJ,CAAC;QACF,MAAM,CAAC,GAAG,SAAS,CACjB,QAAQ,EACR;YACE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;SACjC,EACD,IAAI,CACL,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;YACvB,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;YACvB,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE;YACrC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;SACjC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,EAAE,CACV,cAAc,CAAC;YACb,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7C,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;SAClD,CAAC,CACH,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/telemetry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=telemetry.test.d.ts.map

package/dist/verification/__tests__/telemetry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/telemetry.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/telemetry.test.js

@@ -0,0 +1,116 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import os from 'node:os';
+import path from 'node:path';
+import fs from 'fs-extra';
+import { JsonGraph } from '../../graphrag/json-graph.js';
+import { recordVerification } from '../telemetry.js';
+function sampleResult(taskId) {
+    return {
+        taskId,
+        passed: true,
+        aspects: [
+            { aspect: 'test', verdict: 'PASS', reason: 'ok', durationMs: 2 },
+            { aspect: 'mutation', verdict: 'PASS', score: 0.82, reason: 'ok', durationMs: 3 },
+        ],
+        mutationScore: 0.82,
+        durationMs: 10,
+    };
+}
+class RejectingGraph {
+    constructor(filePath) {
+        this.rejectNewTypes = true;
+        this.inner = new JsonGraph(filePath);
+    }
+    async init() {
+        await this.inner.init();
+    }
+    setRejectNewTypes(value) {
+        this.rejectNewTypes = value;
+    }
+    addNode(node) {
+        if (this.rejectNewTypes && node.type === 'gate') {
+            throw new Error('unsupported node type: gate');
+        }
+        this.inner.addNode(node);
+    }
+    getNode(id) {
+        return this.inner.getNode(id);
+    }
+    queryNodes(type, limit) {
+        return this.inner.queryNodes(type, limit);
+    }
+    searchNodes(query, limit) {
+        return this.inner.searchNodes(query, limit);
+    }
+    deleteNode(id) {
+        this.inner.deleteNode(id);
+    }
+    addEdge(edge) {
+        if (this.rejectNewTypes && edge.type === 'verified_by') {
+            throw new Error('unsupported edge type: verified_by');
+        }
+        this.inner.addEdge(edge);
+    }
+    getEdges(nodeId, direction) {
+        return this.inner.getEdges(nodeId, direction);
+    }
+    getNodeDependencies(nodeId, depth) {
+        return this.inner.getNodeDependencies(nodeId, depth);
+    }
+    getStatistics() {
+        return this.inner.getStatistics();
+    }
+    exportToJson() {
+        return this.inner.exportToJson();
+    }
+    importFromJson(data) {
+        this.inner.importFromJson(data);
+    }
+    close() {
+        this.inner.close();
+    }
+}
+describe('recordVerification', () => {
+    let filePath;
+    let graph;
+    beforeEach(async () => {
+        filePath = path.join(os.tmpdir(), `dare-telemetry-${Date.now()}-${Math.random().toString(36).slice(2)}.json`);
+        graph = new JsonGraph(filePath);
+        await graph.init();
+        graph.addNode({ id: 'task:task-070', type: 'task', label: 'task-070' });
+    });
+    afterEach(async () => {
+        await fs.remove(filePath).catch(() => undefined);
+    });
+    it('should_add_gate_node_and_verified_by_edge', () => {
+        recordVerification(graph, sampleResult('task-070'));
+        const gate = graph.getNode('gate:task-070');
+        expect(gate?.type).toBe('gate');
+        expect(gate?.metadata?.passed).toBe(true);
+        expect(gate?.metadata?.mutationScore).toBe(0.82);
+        const edges = graph.getEdges('task:task-070', 'out');
+        expect(edges).toHaveLength(1);
+        expect(edges[0].type).toBe('verified_by');
+        expect(edges[0].targetId).toBe('gate:task-070');
+    });
+    it('should_fallback_to_task_metadata', async () => {
+        const rejecting = new RejectingGraph(filePath);
+        await rejecting.init();
+        rejecting.addNode({ id: 'task:task-fb', type: 'task', label: 'task-fb' });
+        recordVerification(rejecting, sampleResult('task-fb'));
+        const task = rejecting.getNode('task:task-fb');
+        const verification = task?.metadata?.verification;
+        expect(verification.passed).toBe(true);
+        expect(rejecting.getNode('gate:task-fb')).toBeNull();
+    });
+    it('should_be_idempotent', () => {
+        const result = sampleResult('task-idem');
+        graph.addNode({ id: 'task:task-idem', type: 'task', label: 'task-idem' });
+        recordVerification(graph, result);
+        recordVerification(graph, result);
+        const stats = graph.getStatistics();
+        expect(stats.nodesByType.gate).toBe(1);
+        expect(stats.edgesByType.verified_by).toBe(1);
+    });
+});
+//# sourceMappingURL=telemetry.test.js.map