@dewtech/dare-cli 3.2.0 → 3.4.0

package/dist/verification/__tests__/mutation-stryker.test.js

@@ -0,0 +1,88 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
+import fs from 'fs-extra';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import * as safeSpawnMod from '../../exec/safe-spawn.js';
+import { strykerAdapter, parseStrykerReport, buildStrykerArgv, } from '../gates/mutation/stryker.js';
+import { MutationToolNotFoundError } from '../gates/mutation/adapter.js';
+const FIXTURE = path.join(path.dirname(fileURLToPath(import.meta.url)), 'fixtures', 'stryker.mutation.json');
+describe('parseStrykerReport', () => {
+    it('should_parse_real_stryker_report', async () => {
+        const raw = (await fs.readJson(FIXTURE));
+        const output = parseStrykerReport(raw);
+        expect(output.killed).toBe(3);
+        expect(output.survived).toBe(1);
+        expect(output.noCoverage).toBe(1);
+        expect(output.score).toBeCloseTo(0.75, 5);
+        expect(output.tool).toBe('stryker');
+    });
+    it('should_skip_when_zero_mutants', () => {
+        const output = parseStrykerReport({ files: {} });
+        expect(output.killed).toBe(0);
+        expect(output.survived).toBe(0);
+        expect(Number.isNaN(output.score)).toBe(true);
+    });
+});
+describe('buildStrykerArgv', () => {
+    it('should_build_incremental_argv', () => {
+        const argv = buildStrykerArgv({
+            cwd: '/tmp',
+            changedFiles: ['src/a.ts', 'src/b.js', 'README.md'],
+            incremental: true,
+            maxMutants: 50,
+            timeoutSeconds: 60,
+        });
+        expect(argv).toContain('--incremental');
+        expect(argv.filter((a) => a === '--mutate')).toHaveLength(2);
+        expect(argv).toContain('src/a.ts');
+        expect(argv).toContain('src/b.js');
+        expect(argv).not.toContain('README.md');
+        expect(argv).toContain('--maxMutants');
+        expect(argv).toContain('50');
+    });
+});
+describe('strykerAdapter', () => {
+    beforeEach(() => {
+        vi.restoreAllMocks();
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('should_throw_when_unavailable', async () => {
+        vi.spyOn(safeSpawnMod, 'safeSpawn').mockResolvedValue({
+            code: 1,
+            stdout: '',
+            stderr: 'not found',
+            timedOut: false,
+        });
+        await expect(strykerAdapter.run({
+            cwd: process.cwd(),
+            changedFiles: [],
+            incremental: false,
+            maxMutants: 10,
+            timeoutSeconds: 30,
+        })).rejects.toThrow(MutationToolNotFoundError);
+    });
+    it('should_run_and_parse_report', async () => {
+        const fixture = await fs.readJson(FIXTURE);
+        vi.spyOn(safeSpawnMod, 'safeSpawn').mockResolvedValue({
+            code: 0,
+            stdout: '',
+            stderr: '',
+            timedOut: false,
+        });
+        vi.spyOn(fs, 'pathExists').mockImplementation(async () => true);
+        vi.spyOn(fs, 'readJson').mockResolvedValue(fixture);
+        const output = await strykerAdapter.run({
+            cwd: '/tmp/project',
+            changedFiles: ['src/math.ts'],
+            incremental: true,
+            maxMutants: 200,
+            timeoutSeconds: 900,
+        });
+        expect(output.killed).toBe(3);
+        expect(output.survived).toBe(1);
+        expect(output.score).toBeCloseTo(0.75, 5);
+    });
+});
+//# sourceMappingURL=mutation-stryker.test.js.map

package/dist/verification/__tests__/mutation-stryker.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mutation-stryker.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/mutation-stryker.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,KAAK,YAAY,MAAM,0BAA0B,CAAC;AACzD,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,gBAAgB,GACjB,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAEzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CACvB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,UAAU,EACV,uBAAuB,CACxB,CAAC;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAW,CAAC;QACnD,MAAM,MAAM,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAEvC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,IAAI,GAAG,gBAAgB,CAAC;YAC5B,GAAG,EAAE,MAAM;YACX,YAAY,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC;YACnD,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACxC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,UAAU,CAAC,GAAG,EAAE;QACd,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,iBAAiB,CAAC;YACpD,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,WAAW;YACnB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,MAAM,MAAM,CACV,cAAc,CAAC,GAAG,CAAC;YACjB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;YAClB,YAAY,EAAE,EAAE;YAChB,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,EAAE;YACd,cAAc,EAAE,EAAE;SACnB,CAAC,CACH,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3C,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,iBAAiB,CAAC;YACpD,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QACH,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC,kBAAkB,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC;QAChE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAEpD,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC;YACtC,GAAG,EAAE,cAAc;YACnB,YAAY,EAAE,CAAC,aAAa,CAAC;YAC7B,WAAW,EAAE,IAAI;YACjB,UAAU,EAAE,GAAG;YACf,cAAc,EAAE,GAAG;SACpB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/no-shell-true.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=no-shell-true.test.d.ts.map

package/dist/verification/__tests__/no-shell-true.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-shell-true.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/no-shell-true.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/no-shell-true.test.js

@@ -0,0 +1,43 @@
+import { describe, it, expect } from 'vitest';
+import fs from 'fs-extra';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+const SRC_ROOT = path.join(path.dirname(fileURLToPath(import.meta.url)), '../..');
+const SHELL_TRUE = /shell\s*:\s*true/;
+/** No production allowlist after task-010 (RS-06). */
+const ALLOWLIST = new Set();
+function isTestFile(rel) {
+    return (rel.includes('__tests__') ||
+        rel.endsWith('.spec.ts') ||
+        rel.endsWith('.test.ts'));
+}
+async function collectTsFiles(dir, base) {
+    const entries = await fs.readdir(dir, { withFileTypes: true });
+    const out = [];
+    for (const ent of entries) {
+        const full = path.join(dir, ent.name);
+        const rel = path.relative(base, full).replace(/\\/g, '/');
+        if (ent.isDirectory()) {
+            out.push(...(await collectTsFiles(full, base)));
+        }
+        else if (ent.name.endsWith('.ts')) {
+            out.push(rel);
+        }
+    }
+    return out;
+}
+describe('no shell:true in production src', () => {
+    it('should_find_no_shell_true_in_production', async () => {
+        const files = await collectTsFiles(SRC_ROOT, SRC_ROOT);
+        const violations = [];
+        for (const rel of files) {
+            if (isTestFile(rel) || ALLOWLIST.has(path.normalize(rel)))
+                continue;
+            const content = await fs.readFile(path.join(SRC_ROOT, rel), 'utf8');
+            if (SHELL_TRUE.test(content))
+                violations.push(rel);
+        }
+        expect(violations).toEqual([]);
+    });
+});
+//# sourceMappingURL=no-shell-true.test.js.map

package/dist/verification/__tests__/no-shell-true.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-shell-true.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/no-shell-true.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,OAAO,CACR,CAAC;AAEF,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC,sDAAsD;AACtD,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;AAEpC,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,CACL,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC;QACxB,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CACzB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,IAAY;IACrD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBAAE,SAAS;YACpE,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;YACpE,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,CAAC;QAED,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/path-safety.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=path-safety.test.d.ts.map

package/dist/verification/__tests__/path-safety.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/path-safety.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/path-safety.test.js

@@ -0,0 +1,59 @@
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { describe, it, expect } from 'vitest';
+import { assertRelativeSafe, assertWithinRoot, resolveSafePath, PathEscapeError, PATH_ESCAPE_MESSAGE, } from '../../utils/path-safety.js';
+describe('assertRelativeSafe', () => {
+    it('should_accept_relative_safe_path', () => {
+        expect(() => assertRelativeSafe('a/b/c.txt')).not.toThrow();
+    });
+    it('should_reject_absolute', () => {
+        expect(() => assertRelativeSafe('/x')).toThrow(/absolute/);
+        if (process.platform === 'win32') {
+            expect(() => assertRelativeSafe('C:\\x')).toThrow(/absolute/);
+        }
+    });
+    it('should_reject_dotdot', () => {
+        expect(() => assertRelativeSafe('../x')).toThrow(/\.\./);
+        expect(() => assertRelativeSafe('a/../../b')).toThrow(/\.\./);
+    });
+});
+describe('resolveSafePath', () => {
+    it('should_resolve_safe_child', () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), 'dare-path-safe-'));
+        const result = resolveSafePath(root, 'DARE', 'TASKS.md');
+        expect(result).toBe(path.resolve(root, 'DARE', 'TASKS.md'));
+        expect(() => assertWithinRoot(root, result)).not.toThrow();
+    });
+    it('should_reject_dotdot_escape', () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), 'dare-path-safe-'));
+        expect(() => resolveSafePath(root, '..', 'etc', 'passwd')).toThrow(PathEscapeError);
+        expect(() => resolveSafePath(root, '..', 'etc', 'passwd')).toThrow(PATH_ESCAPE_MESSAGE);
+    });
+    it('should_reject_absolute_segment', () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), 'dare-path-safe-'));
+        expect(() => resolveSafePath(root, '/etc/passwd')).toThrow(/absolute/);
+    });
+    it('should_reject_outside_root', () => {
+        const root = fs.mkdtempSync(path.join(os.tmpdir(), 'dare-path-safe-'));
+        const outside = fs.mkdtempSync(path.join(os.tmpdir(), 'dare-path-out-'));
+        const escaped = path.join(outside, 'secret.txt');
+        expect(() => assertWithinRoot(root, escaped)).toThrow(PathEscapeError);
+        expect(() => assertWithinRoot(root, escaped)).toThrow(PATH_ESCAPE_MESSAGE);
+    });
+    it('should_reject_unc_root', () => {
+        if (process.platform !== 'win32')
+            return;
+        expect(() => resolveSafePath('\\\\server\\share', 'file.txt')).toThrow(PathEscapeError);
+        expect(() => resolveSafePath('\\\\server\\share', 'file.txt')).toThrow(/UNC/);
+    });
+    it('windows_drive_fixture', () => {
+        if (process.platform !== 'win32')
+            return;
+        const root = path.resolve('C:\\proj');
+        const inside = resolveSafePath(root, 'DARE', 'TASKS.md');
+        expect(inside.toLowerCase()).toBe(path.resolve(root, 'DARE', 'TASKS.md').toLowerCase());
+        expect(() => assertWithinRoot(root, 'D:\\other\\file.txt')).toThrow(PathEscapeError);
+    });
+});
+//# sourceMappingURL=path-safety.test.js.map

package/dist/verification/__tests__/path-safety.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/path-safety.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,mBAAmB,GACpB,MAAM,4BAA4B,CAAC;AAEpC,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC3D,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAEjD,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO;QACzC,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACxF,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO;QAEzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;QACzD,MAAM,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAExF,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACvF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/prerank.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=prerank.test.d.ts.map

package/dist/verification/__tests__/prerank.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prerank.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/prerank.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/prerank.test.js

@@ -0,0 +1,44 @@
+import { describe, it, expect } from 'vitest';
+import { prerank, reorderByPrerank, PRERANK_NEVER_AUTHORIZES_DONE, } from '../best-of-n/selector/prerank.js';
+describe('prerank', () => {
+    it('should_score_in_zero_one_range', () => {
+        const scores = prerank([
+            { id: 'a', diff: '--- a/x\n+++ b/x\n@@\n-old\n+new\n' },
+            { id: 'b', diff: '+'.repeat(500) },
+        ]);
+        for (const s of scores) {
+            expect(s.score).toBeGreaterThanOrEqual(0);
+            expect(s.score).toBeLessThanOrEqual(1);
+        }
+    });
+    it('should_be_deterministic', () => {
+        const input = [{ id: 'x', diff: '--- a/f.ts\n+++ b/f.ts\n@@\n+test\n' }];
+        expect(prerank(input)).toEqual(prerank(input));
+    });
+    it('should_prefer_smaller_diff', () => {
+        const scores = prerank([
+            { id: 'small', diff: '--- a/x\n+++ b/x\n@@\n+1\n' },
+            { id: 'large', diff: '--- a/x\n+++ b/x\n' + '+line\n'.repeat(100) },
+        ]);
+        const small = scores.find((s) => s.id === 'small').score;
+        const large = scores.find((s) => s.id === 'large').score;
+        expect(small).toBeGreaterThan(large);
+    });
+    it('should_reorder_by_score', () => {
+        const items = [{ id: 'a' }, { id: 'b' }];
+        const scores = prerank([
+            { id: 'a', diff: '--- a/x\n+++ b/x\n' + '+line\n'.repeat(80) },
+            { id: 'b', diff: '--- a/x\n+++ b/x\n@@\n+1\n' },
+        ]);
+        const ordered = reorderByPrerank(items, scores);
+        expect(ordered[0].id).toBe('b');
+    });
+    it('should_never_authorize_done_rs07', () => {
+        expect(PRERANK_NEVER_AUTHORIZES_DONE).toBe(true);
+        const scores = prerank([{ id: 'fail', diff: '' }]);
+        expect(scores[0].score).toBeLessThanOrEqual(1);
+        expect(scores[0]).not.toHaveProperty('verdict');
+        expect(scores[0]).not.toHaveProperty('passed');
+    });
+});
+//# sourceMappingURL=prerank.test.js.map

package/dist/verification/__tests__/prerank.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prerank.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/prerank.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,OAAO,EACP,gBAAgB,EAChB,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAE1C,QAAQ,CAAC,SAAS,EAAE,GAAG,EAAE;IACvB,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC;YACrB,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,oCAAoC,EAAE;YACvD,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACnC,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;YAC1C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,qCAAqC,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,OAAO,CAAC;YACrB,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,4BAA4B,EAAE;YACnD,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACpE,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAE,CAAC,KAAK,CAAC;QAC1D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAE,CAAC,KAAK,CAAC;QAC1D,MAAM,CAAC,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,KAAK,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,OAAO,CAAC;YACrB,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,oBAAoB,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;YAC9D,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,4BAA4B,EAAE;SAChD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/runner.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=runner.test.d.ts.map

package/dist/verification/__tests__/runner.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/runner.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/runner.test.js

@@ -0,0 +1,200 @@
+import { describe, it, expect, vi } from 'vitest';
+import { DEFAULTS } from '../config.js';
+import { createRunVerification, } from '../runner.js';
+import { FailToPassMissingError } from '../gates/fail-to-pass.js';
+import { MutationToolNotFoundError } from '../gates/mutation/adapter.js';
+function passAspect(aspect, reason = 'ok') {
+    return { aspect, verdict: 'PASS', reason, durationMs: 1 };
+}
+function failAspect(aspect, reason = 'failed') {
+    return { aspect, verdict: 'FAIL', reason, durationMs: 1 };
+}
+function enabledConfig(patch = {}) {
+    return {
+        ...DEFAULTS,
+        enabled: true,
+        failToPass: { required: true },
+        antiTamper: { enabled: false },
+        typeCheck: { enabled: false },
+        mutation: {
+            ...DEFAULTS.mutation,
+            enabled: true,
+            minScore: 0.7,
+        },
+        ...patch,
+    };
+}
+function baseOpts(patch = {}) {
+    return {
+        taskId: 'task-runner',
+        stack: 'mcp-server-node-ts',
+        cwd: '/tmp/project',
+        config: enabledConfig(),
+        changedFiles: ['src/a.ts'],
+        ...patch,
+    };
+}
+function mockAdapter(overrides = {}) {
+    return {
+        tool: 'stryker',
+        stacks: ['mcp-server-node-ts'],
+        isAvailable: async () => true,
+        run: async () => ({
+            killed: 8,
+            survived: 2,
+            noCoverage: 0,
+            timedOut: false,
+            tool: 'stryker',
+            score: 0.8,
+        }),
+        ...overrides,
+    };
+}
+function makeDeps(overrides = {}) {
+    return {
+        readArtifact: async () => ({
+            specGlob: 'spec.test.ts',
+            failToPassBaseline: {
+                recordedAt: '2026-01-01',
+                ranAgainst: 'abc',
+                failed: ['spec.test.ts::x'],
+                allFailed: true,
+            },
+        }),
+        checkFailToPass: async () => passAspect('fail-to-pass'),
+        checkAntiTamper: async () => passAspect('anti-tamper'),
+        checkTypes: async () => passAspect('type'),
+        adapterForStack: async () => mockAdapter(),
+        ...overrides,
+    };
+}
+describe('runVerification', () => {
+    it('should_noop_when_disabled', async () => {
+        const run = createRunVerification(makeDeps());
+        const result = await run(baseOpts({ config: { ...DEFAULTS, enabled: false } }));
+        expect(result.passed).toBe(true);
+        expect(result.aspects).toHaveLength(0);
+    });
+    it('should_throw_fail_to_pass_missing', async () => {
+        const run = createRunVerification(makeDeps({ readArtifact: async () => undefined }));
+        await expect(run(baseOpts())).rejects.toThrow(FailToPassMissingError);
+    });
+    it('should_short_circuit_on_fail_to_pass_fail', async () => {
+        const checkFailToPass = vi.fn(async () => failAspect('fail-to-pass'));
+        const checkAntiTamper = vi.fn(async () => passAspect('anti-tamper'));
+        const adapterForStack = vi.fn(async () => mockAdapter());
+        const run = createRunVerification(makeDeps({ checkFailToPass, checkAntiTamper, adapterForStack }));
+        const result = await run(baseOpts());
+        expect(result.passed).toBe(false);
+        expect(result.aspects).toHaveLength(1);
+        expect(result.aspects[0]?.aspect).toBe('fail-to-pass');
+        expect(checkAntiTamper).not.toHaveBeenCalled();
+        expect(adapterForStack).not.toHaveBeenCalled();
+    });
+    it('should_throw_tool_not_found', async () => {
+        const run = createRunVerification(makeDeps({
+            adapterForStack: async () => mockAdapter({ isAvailable: async () => false }),
+        }));
+        await expect(run(baseOpts())).rejects.toThrow(MutationToolNotFoundError);
+    });
+    it('should_skip_mutation_when_zero_mutants', async () => {
+        const run = createRunVerification(makeDeps({
+            adapterForStack: async () => mockAdapter({
+                run: async () => ({
+                    killed: 0,
+                    survived: 0,
+                    noCoverage: 0,
+                    timedOut: false,
+                    tool: 'stryker',
+                    score: Number.NaN,
+                }),
+            }),
+        }));
+        const result = await run(baseOpts());
+        const mutation = result.aspects.find((a) => a.aspect === 'mutation');
+        expect(result.passed).toBe(true);
+        expect(mutation?.verdict).toBe('SKIP');
+    });
+    it('should_run_mutation_last_and_fail_below_minScore', async () => {
+        const order = [];
+        const run = createRunVerification(makeDeps({
+            checkFailToPass: async () => {
+                order.push('fail-to-pass');
+                return passAspect('fail-to-pass');
+            },
+            checkTypes: async () => {
+                order.push('type');
+                return passAspect('type');
+            },
+            adapterForStack: async () => {
+                order.push('mutation-adapter');
+                return mockAdapter({
+                    run: async () => {
+                        order.push('mutation-run');
+                        return {
+                            killed: 2,
+                            survived: 8,
+                            noCoverage: 0,
+                            timedOut: false,
+                            tool: 'stryker',
+                            score: 0.2,
+                        };
+                    },
+                });
+            },
+        }));
+        const result = await run(baseOpts({
+            config: enabledConfig({
+                antiTamper: { enabled: false },
+                typeCheck: { enabled: true },
+                mutation: { ...DEFAULTS.mutation, enabled: true, minScore: 0.7 },
+            }),
+        }));
+        expect(order).toEqual([
+            'fail-to-pass',
+            'type',
+            'mutation-adapter',
+            'mutation-run',
+        ]);
+        expect(result.passed).toBe(false);
+        const mutation = result.aspects.find((a) => a.aspect === 'mutation');
+        expect(mutation?.verdict).toBe('FAIL');
+        expect(mutation?.score).toBeCloseTo(0.2, 5);
+    });
+    it('should_pass_when_all_aspects_pass', async () => {
+        const run = createRunVerification(makeDeps({
+            readArtifact: async () => ({
+                specGlob: 'spec.test.ts',
+                failToPassBaseline: {
+                    recordedAt: '2026-01-01',
+                    ranAgainst: 'abc',
+                    failed: ['spec.test.ts::x'],
+                    allFailed: true,
+                },
+                tamperSnapshot: {
+                    assertionCount: 5,
+                    testFiles: ['spec.test.ts'],
+                },
+            }),
+            checkFailToPass: async () => passAspect('fail-to-pass'),
+            checkAntiTamper: async () => passAspect('anti-tamper'),
+            checkTypes: async () => passAspect('type'),
+            adapterForStack: async () => mockAdapter(),
+        }));
+        const result = await run(baseOpts({
+            config: enabledConfig({
+                antiTamper: { enabled: true },
+                typeCheck: { enabled: true },
+            }),
+        }));
+        expect(result.passed).toBe(true);
+        expect(result.mutationScore).toBeCloseTo(0.8, 5);
+        expect(result.aspects.map((a) => a.aspect)).toEqual([
+            'fail-to-pass',
+            'anti-tamper',
+            'type',
+            'mutation',
+        ]);
+    });
+});
+//# sourceMappingURL=runner.test.js.map

package/dist/verification/__tests__/runner.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/runner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAGxC,OAAO,EACL,qBAAqB,GAGtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,8BAA8B,CAAC;AAGzE,SAAS,UAAU,CACjB,MAA8B,EAC9B,MAAM,GAAG,IAAI;IAEb,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,UAAU,CACjB,MAA8B,EAC9B,MAAM,GAAG,QAAQ;IAEjB,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,aAAa,CACpB,QAAqC,EAAE;IAEvC,OAAO;QACL,GAAG,QAAQ;QACX,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC9B,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;QAC9B,SAAS,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;QAC7B,QAAQ,EAAE;YACR,GAAG,QAAQ,CAAC,QAAQ;YACpB,OAAO,EAAE,IAAI;YACb,QAAQ,EAAE,GAAG;SACd;QACD,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CACf,QAAyC,EAAE;IAE3C,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,KAAK,EAAE,oBAAoB;QAC3B,GAAG,EAAE,cAAc;QACnB,MAAM,EAAE,aAAa,EAAE;QACvB,YAAY,EAAE,CAAC,UAAU,CAAC;QAC1B,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAClB,YAAsC,EAAE;IAExC,OAAO;QACL,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,CAAC,oBAAoB,CAAC;QAC9B,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;QAC7B,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YAChB,MAAM,EAAE,CAAC;YACT,QAAQ,EAAE,CAAC;YACX,UAAU,EAAE,CAAC;YACb,QAAQ,EAAE,KAAK;YACf,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,GAAG;SACX,CAAC;QACF,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,YAAuC,EAAE;IACzD,OAAO;QACL,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;YACzB,QAAQ,EAAE,cAAc;YACxB,kBAAkB,EAAE;gBAClB,UAAU,EAAE,YAAY;gBACxB,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,CAAC,iBAAiB,CAAC;gBAC3B,SAAS,EAAE,IAAI;aAChB;SACF,CAAC;QACF,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;QACvD,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;QACtD,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAC1C,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,EAAE;QAC1C,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,GAAG,GAAG,qBAAqB,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,QAAQ,CAAC,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CACtD,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC,EAAE,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC,CAClD,CAAC;QAEF,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC;QACtE,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QACrE,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;QAEzD,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC,EAAE,eAAe,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC,CAChE,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QAErC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QACvD,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC/C,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,KAAK,IAAI,EAAE;QAC3C,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC;YACP,eAAe,EAAE,KAAK,IAAI,EAAE,CAC1B,WAAW,CAAC,EAAE,WAAW,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;SAClD,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC;YACP,eAAe,EAAE,KAAK,IAAI,EAAE,CAC1B,WAAW,CAAC;gBACV,GAAG,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBAChB,MAAM,EAAE,CAAC;oBACT,QAAQ,EAAE,CAAC;oBACX,UAAU,EAAE,CAAC;oBACb,QAAQ,EAAE,KAAK;oBACf,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE,MAAM,CAAC,GAAG;iBAClB,CAAC;aACH,CAAC;SACL,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QAErE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC;YACP,eAAe,EAAE,KAAK,IAAI,EAAE;gBAC1B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;gBAC3B,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;YACpC,CAAC;YACD,UAAU,EAAE,KAAK,IAAI,EAAE;gBACrB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACnB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC;YAC5B,CAAC;YACD,eAAe,EAAE,KAAK,IAAI,EAAE;gBAC1B,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;gBAC/B,OAAO,WAAW,CAAC;oBACjB,GAAG,EAAE,KAAK,IAAI,EAAE;wBACd,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;wBAC3B,OAAO;4BACL,MAAM,EAAE,CAAC;4BACT,QAAQ,EAAE,CAAC;4BACX,UAAU,EAAE,CAAC;4BACb,QAAQ,EAAE,KAAK;4BACf,IAAI,EAAE,SAAS;4BACf,KAAK,EAAE,GAAG;yBACX,CAAC;oBACJ,CAAC;iBACF,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,QAAQ,CAAC;YACP,MAAM,EAAE,aAAa,CAAC;gBACpB,UAAU,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;gBAC9B,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC5B,QAAQ,EAAE,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;aACjE,CAAC;SACH,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,cAAc;YACd,MAAM;YACN,kBAAkB;YAClB,cAAc;SACf,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC;QACrE,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,GAAG,GAAG,qBAAqB,CAC/B,QAAQ,CAAC;YACP,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;gBACzB,QAAQ,EAAE,cAAc;gBACxB,kBAAkB,EAAE;oBAClB,UAAU,EAAE,YAAY;oBACxB,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,CAAC,iBAAiB,CAAC;oBAC3B,SAAS,EAAE,IAAI;iBAChB;gBACD,cAAc,EAAE;oBACd,cAAc,EAAE,CAAC;oBACjB,SAAS,EAAE,CAAC,cAAc,CAAC;iBAC5B;aACF,CAAC;YACF,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;YACvD,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC;YACtD,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1C,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,EAAE;SAC3C,CAAC,CACH,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,GAAG,CACtB,QAAQ,CAAC;YACP,MAAM,EAAE,aAAa,CAAC;gBACpB,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;gBAC7B,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE;aAC7B,CAAC;SACH,CAAC,CACH,CAAC;QAEF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;YAClD,cAAc;YACd,aAAa;YACb,MAAM;YACN,UAAU;SACX,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/safe-spawn.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=safe-spawn.test.d.ts.map

package/dist/verification/__tests__/safe-spawn.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-spawn.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/safe-spawn.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/safe-spawn.test.js

@@ -0,0 +1,36 @@
+import { describe, it, expect } from 'vitest';
+import os from 'node:os';
+import { safeSpawn, sanitizeEnv } from '../../exec/safe-spawn.js';
+describe('safeSpawn', () => {
+    it('should_run_argv_without_shell', async () => {
+        const result = await safeSpawn(process.execPath, ['-e', "process.stdout.write('ok')"], { cwd: os.tmpdir(), timeoutSeconds: 30 });
+        expect(result.code).toBe(0);
+        expect(result.stdout).toBe('ok');
+        expect(result.timedOut).toBe(false);
+    });
+    it('should_not_interpret_shell_metachars', async () => {
+        const result = await safeSpawn(process.execPath, ['-e', "process.stdout.write('literal')"], { cwd: os.tmpdir(), timeoutSeconds: 30 });
+        expect(result.stdout).toBe('literal');
+    });
+    it('should_timeout', async () => {
+        const result = await safeSpawn(process.execPath, ['-e', "setTimeout(() => {}, 60000)"], { cwd: os.tmpdir(), timeoutSeconds: 1, maxChars: 500 });
+        expect(result.timedOut).toBe(true);
+        expect(result.code).not.toBe(0);
+        expect(result.stderr).toContain('timed out');
+    });
+    it('should_truncate_output', async () => {
+        const result = await safeSpawn(process.execPath, ['-e', "process.stdout.write('x'.repeat(5000))"], { cwd: os.tmpdir(), timeoutSeconds: 30, maxChars: 100 });
+        expect(result.stdout.length).toBeLessThanOrEqual(100);
+    });
+    it('should_sanitize_env', () => {
+        const env = sanitizeEnv({
+            PATH: '/bin',
+            MY_SECRET: 'super-secret',
+            HOME: '/home/user',
+        });
+        expect(env.PATH).toBe('/bin');
+        expect(env.HOME).toBe('/home/user');
+        expect(env.MY_SECRET).toBeUndefined();
+    });
+});
+//# sourceMappingURL=safe-spawn.test.js.map

package/dist/verification/__tests__/safe-spawn.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-spawn.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/safe-spawn.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAElE,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;QAC7C,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,4BAA4B,CAAC,EACpC,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CACzC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,iCAAiC,CAAC,EACzC,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,CACzC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gBAAgB,EAAE,KAAK,IAAI,EAAE;QAC9B,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,6BAA6B,CAAC,EACrC,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,CACvD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,MAAM,GAAG,MAAM,SAAS,CAC5B,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,wCAAwC,CAAC,EAChD,EAAE,GAAG,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CACxD,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qBAAqB,EAAE,GAAG,EAAE;QAC7B,MAAM,GAAG,GAAG,WAAW,CAAC;YACtB,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,cAAc;YACzB,IAAI,EAAE,YAAY;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,aAAa,EAAE,CAAC;IACxC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/security.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=security.test.d.ts.map

package/dist/verification/__tests__/security.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/security.test.ts"],"names":[],"mappings":""}