@dewtech/dare-cli 3.2.0 → 3.4.0

package/dist/verification/__tests__/security.test.js

@@ -0,0 +1,79 @@
+import { describe, it, expect } from 'vitest';
+import fs from 'fs-extra';
+import path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { sanitizeEnv } from '../../exec/safe-spawn.js';
+import { assertRelativeSafe } from '../../utils/path-safety.js';
+import { prerank, PRERANK_NEVER_AUTHORIZES_DONE, } from '../best-of-n/selector/prerank.js';
+import { createWorktree } from '../best-of-n/worktree.js';
+const SRC_ROOT = path.join(path.dirname(fileURLToPath(import.meta.url)), '../..');
+const SHELL_TRUE = /shell\s*:\s*true/;
+async function collectTsFiles(dir, base) {
+    const entries = await fs.readdir(dir, { withFileTypes: true });
+    const out = [];
+    for (const ent of entries) {
+        const full = path.join(dir, ent.name);
+        const rel = path.relative(base, full).replace(/\\/g, '/');
+        if (ent.isDirectory()) {
+            out.push(...(await collectTsFiles(full, base)));
+        }
+        else if (ent.name.endsWith('.ts')) {
+            out.push(rel);
+        }
+    }
+    return out;
+}
+function isTestFile(rel) {
+    return rel.includes('__tests__') || rel.endsWith('.spec.ts') || rel.endsWith('.test.ts');
+}
+describe('verification security audit', () => {
+    it('RS-06: no shell:true in production verification src', async () => {
+        const verificationDir = path.join(SRC_ROOT, 'verification');
+        const execDir = path.join(SRC_ROOT, 'exec');
+        const violations = [];
+        for (const dir of [verificationDir, execDir]) {
+            const files = await collectTsFiles(dir, SRC_ROOT);
+            for (const rel of files) {
+                if (isTestFile(rel))
+                    continue;
+                const content = await fs.readFile(path.join(SRC_ROOT, rel), 'utf8');
+                if (SHELL_TRUE.test(content))
+                    violations.push(rel);
+            }
+        }
+        expect(violations).toEqual([]);
+    });
+    it('RS-02: sanitizeEnv strips secret-like keys', () => {
+        const env = sanitizeEnv({ PATH: '/bin', API_KEY: 'secret', HOME: '/u' });
+        expect(env.API_KEY).toBeUndefined();
+        expect(env.PATH).toBe('/bin');
+    });
+    it('RS-07: prerank never authorizes DONE', () => {
+        expect(PRERANK_NEVER_AUTHORIZES_DONE).toBe(true);
+        const scores = prerank([{ id: 'c1', diff: '--- a\n+++ b\n@@\n+fail\n' }]);
+        for (const s of scores) {
+            expect(s).not.toHaveProperty('verdict');
+            expect(s).not.toHaveProperty('passed');
+            expect(s.score).toBeLessThanOrEqual(1);
+        }
+    });
+    it('RS-01: worktree rejects path traversal', async () => {
+        await expect(createWorktree(process.cwd(), '../evil')).rejects.toThrow();
+        expect(() => assertRelativeSafe('../evil')).toThrow();
+    });
+    it('RS-03: mutation adapters use safeSpawn not network fetch', async () => {
+        const mutationDir = path.join(SRC_ROOT, 'verification/gates/mutation');
+        const files = await collectTsFiles(mutationDir, SRC_ROOT);
+        const violations = [];
+        for (const rel of files) {
+            if (isTestFile(rel))
+                continue;
+            const content = await fs.readFile(path.join(SRC_ROOT, rel), 'utf8');
+            if (/\bfetch\s*\(/.test(content) || /\bhttp\.request\s*\(/.test(content)) {
+                violations.push(rel);
+            }
+        }
+        expect(violations).toEqual([]);
+    });
+});
+//# sourceMappingURL=security.test.js.map

package/dist/verification/__tests__/security.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/security.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EACL,OAAO,EACP,6BAA6B,GAC9B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CACxB,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAC5C,OAAO,CACR,CAAC;AAEF,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAEtC,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,IAAY;IACrD,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC1D,IAAI,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC;YACtB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC3F,CAAC;AAED,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC3C,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAa,EAAE,CAAC;QAEhC,KAAK,MAAM,GAAG,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAClD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,IAAI,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAC9B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;gBACpE,IAAI,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC;oBAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,6BAA6B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;YACxC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACvC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACzE,MAAM,CAAC,GAAG,EAAE,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;YACxB,IAAI,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC9B,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;YACpE,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACzE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QACD,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/selector-pareto.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=selector-pareto.test.d.ts.map

package/dist/verification/__tests__/selector-pareto.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selector-pareto.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/selector-pareto.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/selector-pareto.test.js

@@ -0,0 +1,77 @@
+import { describe, it, expect } from 'vitest';
+import { selectByPareto, NoViableCandidateError, } from '../best-of-n/selector/pareto.js';
+function worktree(id) {
+    return { id, path: `.dare/worktrees/${id}`, branch: `dare/cand-${id}` };
+}
+function aspect(name, verdict, score) {
+    return { aspect: name, verdict, score, reason: verdict, durationMs: 1 };
+}
+function candidate(id, aspects, mutationScore) {
+    const passed = !aspects.some((a) => a.verdict === 'FAIL');
+    return {
+        id,
+        worktree: worktree(id),
+        verification: {
+            taskId: 'task-bench',
+            passed,
+            aspects,
+            mutationScore,
+            durationMs: 5,
+        },
+    };
+}
+const allPass = (id, mutationScore) => candidate(id, [
+    aspect('test', 'PASS'),
+    aspect('lint', 'PASS'),
+    aspect('type', 'PASS'),
+    aspect('mutation', 'PASS', mutationScore),
+], mutationScore);
+describe('selectByPareto', () => {
+    it('should_pick_dominant', () => {
+        const winner = selectByPareto([
+            allPass('cand-2', 0.6),
+            allPass('cand-1', 0.9),
+        ]);
+        expect(winner.id).toBe('cand-1');
+    });
+    it('should_break_tie_by_mutation_score', () => {
+        const a = candidate('cand-a', [
+            aspect('test', 'PASS'),
+            aspect('lint', 'PASS'),
+            aspect('type', 'SKIP'),
+            aspect('mutation', 'PASS', 0.8),
+        ], 0.8);
+        const b = candidate('cand-b', [
+            aspect('test', 'PASS'),
+            aspect('lint', 'SKIP'),
+            aspect('type', 'PASS'),
+            aspect('mutation', 'PASS', 0.75),
+        ], 0.75);
+        expect(selectByPareto([a, b]).id).toBe('cand-a');
+    });
+    it('should_break_remaining_tie_by_id', () => {
+        const winner = selectByPareto([
+            allPass('cand-z', 0.85),
+            allPass('cand-a', 0.85),
+            allPass('cand-m', 0.85),
+        ]);
+        expect(winner.id).toBe('cand-a');
+    });
+    it('should_discard_failing_candidates', () => {
+        const failing = candidate('cand-fail', [
+            aspect('test', 'FAIL'),
+            aspect('lint', 'PASS'),
+            aspect('type', 'PASS'),
+            aspect('mutation', 'PASS', 0.99),
+        ]);
+        const winner = selectByPareto([failing, allPass('cand-ok', 0.5)]);
+        expect(winner.id).toBe('cand-ok');
+    });
+    it('should_throw_when_all_fail', () => {
+        expect(() => selectByPareto([
+            candidate('cand-1', [aspect('test', 'FAIL')]),
+            candidate('cand-2', [aspect('mutation', 'FAIL')]),
+        ])).toThrow(NoViableCandidateError);
+    });
+});
+//# sourceMappingURL=selector-pareto.test.js.map

package/dist/verification/__tests__/selector-pareto.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selector-pareto.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/selector-pareto.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,cAAc,EACd,sBAAsB,GACvB,MAAM,iCAAiC,CAAC;AAGzC,SAAS,QAAQ,CAAC,EAAU;IAC1B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,MAAM,CACb,IAA4B,EAC5B,OAAgC,EAChC,KAAc;IAEd,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAC1E,CAAC;AAED,SAAS,SAAS,CAChB,EAAU,EACV,OAAoC,EACpC,aAAsB;IAEtB,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAC1D,OAAO;QACL,EAAE;QACF,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtB,YAAY,EAAE;YACZ,MAAM,EAAE,YAAY;YACpB,MAAM;YACN,OAAO;YACP,aAAa;YACb,UAAU,EAAE,CAAC;SACd;KACF,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,aAAqB,EAAE,EAAE,CACpD,SAAS,CACP,EAAE,EACF;IACE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC;CAC1C,EACD,aAAa,CACd,CAAC;AAEJ,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;YACtB,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACvB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,SAAS,CACjB,QAAQ,EACR;YACE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,CAAC;SAChC,EACD,GAAG,CACJ,CAAC;QACF,MAAM,CAAC,GAAG,SAAS,CACjB,QAAQ,EACR;YACE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;SACjC,EACD,IAAI,CACL,CAAC;QACF,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,cAAc,CAAC;YAC5B,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;YACvB,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;YACvB,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,OAAO,GAAG,SAAS,CAAC,WAAW,EAAE;YACrC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;YACtB,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC;SACjC,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,EAAE,CACV,cAAc,CAAC;YACb,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAC7C,SAAS,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;SAClD,CAAC,CACH,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/telemetry.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=telemetry.test.d.ts.map

package/dist/verification/__tests__/telemetry.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/telemetry.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/telemetry.test.js

@@ -0,0 +1,116 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import os from 'node:os';
+import path from 'node:path';
+import fs from 'fs-extra';
+import { JsonGraph } from '../../graphrag/json-graph.js';
+import { recordVerification } from '../telemetry.js';
+function sampleResult(taskId) {
+    return {
+        taskId,
+        passed: true,
+        aspects: [
+            { aspect: 'test', verdict: 'PASS', reason: 'ok', durationMs: 2 },
+            { aspect: 'mutation', verdict: 'PASS', score: 0.82, reason: 'ok', durationMs: 3 },
+        ],
+        mutationScore: 0.82,
+        durationMs: 10,
+    };
+}
+class RejectingGraph {
+    constructor(filePath) {
+        this.rejectNewTypes = true;
+        this.inner = new JsonGraph(filePath);
+    }
+    async init() {
+        await this.inner.init();
+    }
+    setRejectNewTypes(value) {
+        this.rejectNewTypes = value;
+    }
+    addNode(node) {
+        if (this.rejectNewTypes && node.type === 'gate') {
+            throw new Error('unsupported node type: gate');
+        }
+        this.inner.addNode(node);
+    }
+    getNode(id) {
+        return this.inner.getNode(id);
+    }
+    queryNodes(type, limit) {
+        return this.inner.queryNodes(type, limit);
+    }
+    searchNodes(query, limit) {
+        return this.inner.searchNodes(query, limit);
+    }
+    deleteNode(id) {
+        this.inner.deleteNode(id);
+    }
+    addEdge(edge) {
+        if (this.rejectNewTypes && edge.type === 'verified_by') {
+            throw new Error('unsupported edge type: verified_by');
+        }
+        this.inner.addEdge(edge);
+    }
+    getEdges(nodeId, direction) {
+        return this.inner.getEdges(nodeId, direction);
+    }
+    getNodeDependencies(nodeId, depth) {
+        return this.inner.getNodeDependencies(nodeId, depth);
+    }
+    getStatistics() {
+        return this.inner.getStatistics();
+    }
+    exportToJson() {
+        return this.inner.exportToJson();
+    }
+    importFromJson(data) {
+        this.inner.importFromJson(data);
+    }
+    close() {
+        this.inner.close();
+    }
+}
+describe('recordVerification', () => {
+    let filePath;
+    let graph;
+    beforeEach(async () => {
+        filePath = path.join(os.tmpdir(), `dare-telemetry-${Date.now()}-${Math.random().toString(36).slice(2)}.json`);
+        graph = new JsonGraph(filePath);
+        await graph.init();
+        graph.addNode({ id: 'task:task-070', type: 'task', label: 'task-070' });
+    });
+    afterEach(async () => {
+        await fs.remove(filePath).catch(() => undefined);
+    });
+    it('should_add_gate_node_and_verified_by_edge', () => {
+        recordVerification(graph, sampleResult('task-070'));
+        const gate = graph.getNode('gate:task-070');
+        expect(gate?.type).toBe('gate');
+        expect(gate?.metadata?.passed).toBe(true);
+        expect(gate?.metadata?.mutationScore).toBe(0.82);
+        const edges = graph.getEdges('task:task-070', 'out');
+        expect(edges).toHaveLength(1);
+        expect(edges[0].type).toBe('verified_by');
+        expect(edges[0].targetId).toBe('gate:task-070');
+    });
+    it('should_fallback_to_task_metadata', async () => {
+        const rejecting = new RejectingGraph(filePath);
+        await rejecting.init();
+        rejecting.addNode({ id: 'task:task-fb', type: 'task', label: 'task-fb' });
+        recordVerification(rejecting, sampleResult('task-fb'));
+        const task = rejecting.getNode('task:task-fb');
+        const verification = task?.metadata?.verification;
+        expect(verification.passed).toBe(true);
+        expect(rejecting.getNode('gate:task-fb')).toBeNull();
+    });
+    it('should_be_idempotent', () => {
+        const result = sampleResult('task-idem');
+        graph.addNode({ id: 'task:task-idem', type: 'task', label: 'task-idem' });
+        recordVerification(graph, result);
+        recordVerification(graph, result);
+        const stats = graph.getStatistics();
+        expect(stats.nodesByType.gate).toBe(1);
+        expect(stats.edgesByType.verified_by).toBe(1);
+    });
+});
+//# sourceMappingURL=telemetry.test.js.map

package/dist/verification/__tests__/telemetry.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"telemetry.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/telemetry.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAC;AAIzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO;QACL,MAAM;QACN,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE;YACP,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE;YAChE,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE;SAClF;QACD,aAAa,EAAE,IAAI;QACnB,UAAU,EAAE,EAAE;KACf,CAAC;AACJ,CAAC;AAED,MAAM,cAAc;IAIlB,YAAY,QAAgB;QAFpB,mBAAc,GAAG,IAAI,CAAC;QAG5B,IAAI,CAAC,KAAK,GAAG,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,IAAI;QACR,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAED,iBAAiB,CAAC,KAAc;QAC9B,IAAI,CAAC,cAAc,GAAG,KAAK,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,IAAe;QACrB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAChD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,CAAC;IAED,UAAU,CAAC,IAAwB,EAAE,KAAc;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5C,CAAC;IAED,WAAW,CAAC,KAAa,EAAE,KAAc;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC9C,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC5B,CAAC;IAED,OAAO,CAAC,IAAe;QACrB,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,QAAQ,CAAC,MAAc,EAAE,SAAiC;QACxD,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAChD,CAAC;IAED,mBAAmB,CAAC,MAAc,EAAE,KAAc;QAChD,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC;IAED,aAAa;QACX,OAAO,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC;IACpC,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;IACnC,CAAC;IAED,cAAc,CAAC,IAAgD;QAC7D,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAClC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AAED,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,QAAgB,CAAC;IACrB,IAAI,KAAgB,CAAC;IAErB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,GAAG,IAAI,CAAC,IAAI,CAClB,EAAE,CAAC,MAAM,EAAE,EACX,kBAAkB,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAC3E,CAAC;QACF,KAAK,GAAG,IAAI,SAAS,CAAC,QAAQ,CAAC,CAAC;QAChC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,kBAAkB,CAAC,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAEpD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC5C,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjD,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;QACrD,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,MAAM,SAAS,GAAG,IAAI,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,SAAS,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAE1E,kBAAkB,CAAC,SAAS,EAAE,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QAEvD,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,YAAY,GAAG,IAAI,EAAE,QAAQ,EAAE,YAAmC,CAAC;QACzE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,MAAM,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QACzC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAE1E,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClC,kBAAkB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAElC,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/type-check.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=type-check.test.d.ts.map

package/dist/verification/__tests__/type-check.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-check.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/type-check.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/type-check.test.js

@@ -0,0 +1,52 @@
+import { describe, it, expect, vi, afterEach } from 'vitest';
+import * as safeSpawnMod from '../../exec/safe-spawn.js';
+import { checkTypes, typeCommandFor } from '../gates/type-check.js';
+describe('typeCommandFor', () => {
+    it('should_return_null_for_rust_stack', () => {
+        expect(typeCommandFor('rust-axum', '/tmp')).toBeNull();
+    });
+});
+describe('checkTypes', () => {
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it('should_skip_when_unavailable', async () => {
+        const result = await checkTypes({
+            stack: 'rust-axum',
+            cwd: '/tmp',
+            timeoutSeconds: 30,
+        });
+        expect(result.verdict).toBe('SKIP');
+        expect(result.reason).toContain('no type-checker');
+    });
+    it('should_pass_on_clean_ts', async () => {
+        vi.spyOn(safeSpawnMod, 'safeSpawn').mockResolvedValue({
+            code: 0,
+            stdout: '',
+            stderr: '',
+            timedOut: false,
+        });
+        const result = await checkTypes({
+            stack: 'mcp-server-node-ts',
+            cwd: '/tmp',
+            timeoutSeconds: 60,
+        });
+        expect(result.verdict).toBe('PASS');
+    });
+    it('should_fail_on_type_error', async () => {
+        vi.spyOn(safeSpawnMod, 'safeSpawn').mockResolvedValue({
+            code: 2,
+            stdout: '',
+            stderr: 'error TS2322: Type string is not assignable to type number',
+            timedOut: false,
+        });
+        const result = await checkTypes({
+            stack: 'mcp-server-node-ts',
+            cwd: '/tmp',
+            timeoutSeconds: 60,
+        });
+        expect(result.verdict).toBe('FAIL');
+        expect(result.reason).toContain('TS2322');
+    });
+});
+//# sourceMappingURL=type-check.test.js.map

package/dist/verification/__tests__/type-check.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type-check.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/type-check.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,KAAK,YAAY,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAEpE,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC1B,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,KAAK,EAAE,WAAW;YAClB,GAAG,EAAE,MAAM;YACX,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,iBAAiB,CAAC;YACpD,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,KAAK,EAAE,oBAAoB;YAC3B,GAAG,EAAE,MAAM;YACX,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,EAAE,CAAC,KAAK,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC,iBAAiB,CAAC;YACpD,IAAI,EAAE,CAAC;YACP,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,4DAA4D;YACpE,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;YAC9B,KAAK,EAAE,oBAAoB;YAC3B,GAAG,EAAE,MAAM;YACX,cAAc,EAAE,EAAE;SACnB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/__tests__/worktree.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=worktree.test.d.ts.map

package/dist/verification/__tests__/worktree.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree.test.d.ts","sourceRoot":"","sources":["../../../src/verification/__tests__/worktree.test.ts"],"names":[],"mappings":""}

package/dist/verification/__tests__/worktree.test.js

@@ -0,0 +1,41 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import fs from 'fs-extra';
+import path from 'node:path';
+import os from 'node:os';
+import { execSync } from 'node:child_process';
+import { createWorktree, listWorktrees, removeWorktree, } from '../best-of-n/worktree.js';
+function runGit(cwd, args) {
+    execSync(`git ${args}`, { cwd, stdio: 'pipe' });
+}
+describe('worktree', () => {
+    let repoRoot;
+    beforeEach(async () => {
+        repoRoot = await fs.mkdtemp(path.join(os.tmpdir(), 'dare-wt-'));
+        runGit(repoRoot, 'init');
+        runGit(repoRoot, 'config user.email "test@dare.local"');
+        runGit(repoRoot, 'config user.name "DARE Test"');
+        await fs.writeFile(path.join(repoRoot, 'README.md'), '# tmp\n');
+        runGit(repoRoot, 'add README.md');
+        runGit(repoRoot, 'commit -m "init"');
+    });
+    afterEach(async () => {
+        await fs.remove(repoRoot).catch(() => undefined);
+    });
+    it('should_create_and_list_worktree', async () => {
+        const wt = await createWorktree(repoRoot, 'cand-a');
+        expect(wt.path).toBe('.dare/worktrees/cand-a');
+        expect(wt.branch).toBe('dare/cand-cand-a');
+        const listed = await listWorktrees(repoRoot);
+        expect(listed.some((w) => w.id === 'cand-a')).toBe(true);
+    });
+    it('should_remove_worktree', async () => {
+        const wt = await createWorktree(repoRoot, 'cand-b');
+        await removeWorktree(repoRoot, wt);
+        const listed = await listWorktrees(repoRoot);
+        expect(listed.some((w) => w.id === 'cand-b')).toBe(false);
+    });
+    it('should_reject_unsafe_id', async () => {
+        await expect(createWorktree(repoRoot, '../evil')).rejects.toThrow(/must not contain|unsafe/i);
+    });
+});
+//# sourceMappingURL=worktree.test.js.map

package/dist/verification/__tests__/worktree.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree.test.js","sourceRoot":"","sources":["../../../src/verification/__tests__/worktree.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EACL,cAAc,EACd,aAAa,EACb,cAAc,GACf,MAAM,0BAA0B,CAAC;AAElC,SAAS,MAAM,CAAC,GAAW,EAAE,IAAY;IACvC,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,IAAI,QAAgB,CAAC;IAErB,UAAU,CAAC,KAAK,IAAI,EAAE;QACpB,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QAChE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;QACxD,MAAM,CAAC,QAAQ,EAAE,8BAA8B,CAAC,CAAC;QACjD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;QAChE,MAAM,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;QAClC,MAAM,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,KAAK,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC/C,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAE3C,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpD,MAAM,cAAc,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC/D,0BAA0B,CAC3B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/verification/bench/fixtures.d.ts

@@ -0,0 +1,11 @@
+export interface FixtureMeta {
+    readonly id: string;
+    readonly stack: string;
+    readonly description: string;
+    readonly patch: string;
+    readonly failToPass: string;
+    readonly passToPass: string;
+}
+export declare function loadFixture(suiteDir: string, id: string): Promise<FixtureMeta>;
+export declare function loadSuite(suiteDir: string): Promise<ReadonlyArray<FixtureMeta>>;
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/verification/bench/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../../src/verification/bench/fixtures.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AA6CD,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,WAAW,CAAC,CAiBtB;AAED,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,CAiBrF"}

package/dist/verification/bench/fixtures.js

@@ -0,0 +1,66 @@
+import path from 'node:path';
+import fs from 'fs-extra';
+import { assertRelativeSafe } from '../../utils/path-safety.js';
+const REQUIRED_FILES = [
+    'meta.json',
+    'patch.diff',
+    'fail_to_pass.txt',
+    'pass_to_pass.txt',
+];
+function fixtureDir(suiteDir, id) {
+    assertRelativeSafe(id);
+    return path.join(suiteDir, id);
+}
+async function assertFixtureFiles(suiteDir, id) {
+    const dir = fixtureDir(suiteDir, id);
+    for (const file of REQUIRED_FILES) {
+        const rel = path.posix.join(id, file);
+        assertRelativeSafe(rel);
+        const abs = path.join(dir, file);
+        if (!(await fs.pathExists(abs))) {
+            throw new Error(`fixture '${id}' missing required file: ${file}`);
+        }
+    }
+    const repoDir = path.join(dir, 'repo');
+    if (!(await fs.pathExists(repoDir))) {
+        throw new Error(`fixture '${id}' missing required directory: repo/`);
+    }
+    const repoEntries = await fs.readdir(repoDir);
+    if (repoEntries.length === 0) {
+        throw new Error(`fixture '${id}' repo/ must not be empty`);
+    }
+    return dir;
+}
+export async function loadFixture(suiteDir, id) {
+    await assertFixtureFiles(suiteDir, id);
+    const dir = fixtureDir(suiteDir, id);
+    const meta = (await fs.readJson(path.join(dir, 'meta.json')));
+    if (meta.id !== id) {
+        throw new Error(`fixture meta id mismatch: expected '${id}', got '${meta.id}'`);
+    }
+    return {
+        id: meta.id,
+        stack: meta.stack,
+        description: meta.description,
+        patch: 'patch.diff',
+        failToPass: 'fail_to_pass.txt',
+        passToPass: 'pass_to_pass.txt',
+    };
+}
+export async function loadSuite(suiteDir) {
+    const suitePath = path.join(suiteDir, 'suite.json');
+    if (!(await fs.pathExists(suitePath))) {
+        throw new Error(`suite.json not found in ${suiteDir}`);
+    }
+    const suite = (await fs.readJson(suitePath));
+    if (!Array.isArray(suite.fixtures) || suite.fixtures.length === 0) {
+        throw new Error(`suite.json in ${suiteDir} has no fixtures`);
+    }
+    const out = [];
+    for (const entry of suite.fixtures) {
+        assertRelativeSafe(entry.id);
+        out.push(await loadFixture(suiteDir, entry.id));
+    }
+    return out;
+}
+//# sourceMappingURL=fixtures.js.map

package/dist/verification/bench/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../../../src/verification/bench/fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAqBhE,MAAM,cAAc,GAAG;IACrB,WAAW;IACX,YAAY;IACZ,kBAAkB;IAClB,kBAAkB;CACV,CAAC;AAEX,SAAS,UAAU,CAAC,QAAgB,EAAE,EAAU;IAC9C,kBAAkB,CAAC,EAAE,CAAC,CAAC;IACvB,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,QAAgB,EAAE,EAAU;IAC5D,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;QACtC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,4BAA4B,IAAI,EAAE,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,qCAAqC,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,YAAY,EAAE,2BAA2B,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,QAAgB,EAChB,EAAU;IAEV,MAAM,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAe,CAAC;IAE5E,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,uCAAuC,EAAE,WAAW,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IAClF,CAAC;IAED,OAAO;QACL,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,YAAY;QACnB,UAAU,EAAE,kBAAkB;QAC9B,UAAU,EAAE,kBAAkB;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB;IAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,2BAA2B,QAAQ,EAAE,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAc,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CAAC,iBAAiB,QAAQ,kBAAkB,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,GAAG,GAAkB,EAAE,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC7B,GAAG,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/verification/bench/harness.d.ts

@@ -0,0 +1,19 @@
+import type { FixtureMeta } from './fixtures.js';
+import { type FixtureResult } from './report.js';
+export interface SuiteRunResult {
+    readonly passed: string[];
+    readonly failed: string[];
+}
+export interface HarnessDeps {
+    readonly runTestSuite: (cwd: string, stack: string) => Promise<SuiteRunResult>;
+    readonly copyRepo: (src: string, dest: string) => Promise<void>;
+    readonly applyPatch: (cwd: string, patchPath: string) => Promise<void>;
+}
+export declare function createRunFixture(deps?: Partial<HarnessDeps>): (meta: FixtureMeta, baseDir: string) => Promise<FixtureResult>;
+export declare const runFixture: (meta: FixtureMeta, baseDir: string) => Promise<FixtureResult>;
+export interface RunSuiteOptions {
+    readonly filter?: string;
+    readonly deps?: Partial<HarnessDeps>;
+}
+export declare function runSuite(suiteDir: string, opts?: RunSuiteOptions): Promise<FixtureResult[]>;
+//# sourceMappingURL=harness.d.ts.map

package/dist/verification/bench/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../../src/verification/bench/harness.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EAEL,KAAK,aAAa,EAEnB,MAAM,aAAa,CAAC;AASrB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,YAAY,EAAE,CACrB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,KACV,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,QAAQ,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAiFD,wBAAgB,gBAAgB,CAAC,IAAI,GAAE,OAAO,CAAC,WAAW,CAAM,IAI5D,MAAM,WAAW,EACjB,SAAS,MAAM,KACd,OAAO,CAAC,aAAa,CAAC,CA0C1B;AAED,eAAO,MAAM,UAAU,SA9Cb,WAAW,WACR,MAAM,KACd,OAAO,CAAC,aAAa,CA4CkB,CAAC;AAE7C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;CACtC;AAUD,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,MAAM,EAChB,IAAI,GAAE,eAAoB,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC,CAW1B"}