@dsh-enhanced/assistant-skills 0.1.30

package/lib/external-holdout.js

@@ -0,0 +1,212 @@
+import { spawn } from 'node:child_process';
+import { createPublicKey } from 'node:crypto';
+import { isAbsolute } from 'node:path';
+import { StringDecoder } from 'node:string_decoder';
+import { holdoutPathsOverlap, validateCanaryAdmission, validateHoldoutExecution } from './holdout-qualification.js';
+import { validateCanaryAdmissionTemplate } from './repair-admission.js';
+function reject() { throw new Error('assistant-skills: invalid external holdout configuration'); }
+function plain(value) {
+    return value !== null && typeof value === 'object' && Object.getPrototypeOf(value) === Object.prototype
+        && Object.getOwnPropertySymbols(value).length === 0 && Object.values(Object.getOwnPropertyDescriptors(value)).every(item => item.enumerable && 'value' in item);
+}
+function exact(value, required, optional = []) {
+    return plain(value) && required.every(key => Object.hasOwn(value, key)) && Object.keys(value).every(key => required.includes(key) || optional.includes(key));
+}
+function freeze(value) { if (value && typeof value === 'object') {
+    for (const child of Object.values(value))
+        freeze(child);
+    Object.freeze(value);
+} return value; }
+function validateAuthority(authority) {
+    if (!exact(authority, ['executable', 'args', 'publicKey'], ['datasetDigest', 'generatorDigest']) || typeof authority.executable !== 'string' || !isAbsolute(authority.executable) || authority.executable.includes('\0')
+        || !Array.isArray(authority.args) || authority.args.length > 64 || authority.args.some(arg => typeof arg !== 'string' || arg.includes('\0')) || Buffer.byteLength(JSON.stringify(authority.args)) > 16384
+        || typeof authority.publicKey !== 'string' || authority.publicKey.length > 16384
+        || Object.hasOwn(authority, 'datasetDigest') === Object.hasOwn(authority, 'generatorDigest')
+        || typeof (authority.datasetDigest ?? authority.generatorDigest) !== 'string' || !/^[a-f0-9]{64}$/u.test((authority.datasetDigest ?? authority.generatorDigest)))
+        reject();
+    try {
+        if (createPublicKey(authority.publicKey).asymmetricKeyType !== 'ed25519')
+            reject();
+    }
+    catch {
+        reject();
+    }
+}
+export function validateExternalHoldoutProfiles(values) {
+    if (!Array.isArray(values) || values.length > 16)
+        reject();
+    const ids = new Set(), commands = new Set(), roots = [];
+    for (const value of values) {
+        if (!exact(value, ['id', 'version', 'scope', 'execution', 'authority', 'maxComparisons'], ['inputs', 'files', 'canaryAdmission', 'canaryAdmissionTemplate']) || typeof value.id !== 'string' || !/^[a-zA-Z0-9][a-zA-Z0-9_-]{0,63}$/u.test(value.id) || ids.has(value.id)
+            || !Number.isSafeInteger(value.version) || value.version < 1 || value.maxComparisons !== 1
+            || !exact(value.scope, ['principalId', 'principalRecordId', 'principalVersion', 'workspace', 'preset']) || ['principalId', 'principalRecordId', 'workspace', 'preset'].some(key => typeof value.scope[key] !== 'string' || !value.scope[key])
+            || !Number.isSafeInteger(value.scope.principalVersion) || value.scope.principalVersion < 1 || !isAbsolute(value.scope.workspace))
+            reject();
+        validateAuthority(value.authority);
+        validateHoldoutExecution(value.execution);
+        if (holdoutPathsOverlap(value.scope.workspace, value.execution.stateRoot) || roots.some(root => holdoutPathsOverlap(root, value.execution.stateRoot)))
+            reject();
+        const command = JSON.stringify([value.authority.executable, value.authority.args]);
+        if (commands.has(command) || value.inputs !== undefined && !plain(value.inputs) || value.files !== undefined && (!Array.isArray(value.files) || value.files.length > 32 || value.files.some((file) => !exact(file, ['path', 'content']) || typeof file.path !== 'string' || typeof file.content !== 'string'))
+            || value.canaryAdmission !== undefined && value.canaryAdmissionTemplate !== undefined
+            || (value.canaryAdmission !== undefined || value.canaryAdmissionTemplate !== undefined) && value.authority.generatorDigest === undefined)
+            reject();
+        if (value.canaryAdmission !== undefined) {
+            try {
+                validateCanaryAdmission(value.canaryAdmission);
+            }
+            catch {
+                reject();
+            }
+        }
+        if (value.canaryAdmissionTemplate !== undefined) {
+            try {
+                validateCanaryAdmissionTemplate(value.canaryAdmissionTemplate);
+            }
+            catch {
+                reject();
+            }
+        }
+        if (Buffer.byteLength(JSON.stringify({ inputs: value.inputs, files: value.files })) > value.execution.maxBytes)
+            reject();
+        ids.add(value.id);
+        commands.add(command);
+        roots.push(value.execution.stateRoot);
+    }
+    return freeze(JSON.parse(JSON.stringify(values)));
+}
+/** One bounded NDJSON pipe per qualification; malformed/uncertain responses poison the channel. */
+export async function openHoldoutProcess(authority, signal) {
+    validateAuthority(authority);
+    signal.throwIfAborted();
+    const child = spawn(authority.executable, [...authority.args], { stdio: ['pipe', 'pipe', 'pipe'], detached: process.platform !== 'win32', shell: false });
+    const decoder = new StringDecoder('utf8');
+    let buffer = '', ready = false, ended = false, closing = false, serial = 0, failed;
+    let pending;
+    let acceptReady, rejectReady;
+    const handshake = new Promise((resolve, rejectPromise) => { acceptReady = resolve; rejectReady = rejectPromise; });
+    const terminal = new Promise(resolve => { child.once('close', () => { ended = true; fail('authority closed'); resolve(); }); });
+    const kill = (kind) => { if (ended || !child.pid)
+        return; try {
+        if (process.platform !== 'win32')
+            process.kill(-child.pid, kind);
+        else
+            child.kill(kind);
+    }
+    catch { /* Already exited. */ } };
+    function fail(reason) {
+        if (failed)
+            return;
+        failed = new Error(`assistant-skills: holdout ${reason}`);
+        rejectReady(failed);
+        pending?.reject(failed);
+        pending = undefined;
+        if (!closing) {
+            child.stdin.destroy();
+            kill('SIGTERM');
+        }
+    }
+    const abort = () => fail('authority cancelled');
+    signal.addEventListener('abort', abort, { once: true });
+    child.once('error', () => fail('authority unavailable'));
+    child.stdin.on('error', () => fail('authority pipe failed'));
+    child.stdout.on('error', () => fail('authority output failed'));
+    child.stderr.on('data', () => { });
+    child.stdout.on('data', (chunk) => {
+        if (failed)
+            return;
+        buffer += decoder.write(chunk);
+        if (Buffer.byteLength(buffer) > 1048576) {
+            fail('authority response too large');
+            return;
+        }
+        let at;
+        while ((at = buffer.indexOf('\n')) >= 0 && !failed) {
+            const line = buffer.slice(0, at);
+            buffer = buffer.slice(at + 1);
+            let message;
+            try {
+                const parsed = JSON.parse(line);
+                if (!plain(parsed))
+                    throw new Error();
+                message = parsed;
+            }
+            catch {
+                fail('authority protocol rejected');
+                return;
+            }
+            if (!ready) {
+                if (message.event !== 'ready' || message.protocol !== 'assistant-skills/holdout-ipc/v1') {
+                    fail('authority protocol rejected');
+                    return;
+                }
+                ready = true;
+                acceptReady();
+                continue;
+            }
+            if (!pending || message.id !== pending.id || typeof message.ok !== 'boolean') {
+                fail('authority response identity rejected');
+                return;
+            }
+            if (!message.ok) {
+                fail('authority request rejected');
+                return;
+            }
+            const current = pending;
+            pending = undefined;
+            current.resolve(message.value);
+        }
+    });
+    let cleanup;
+    const close = () => cleanup ??= (async () => {
+        closing = true;
+        signal.removeEventListener('abort', abort);
+        if (!ended)
+            child.stdin.end();
+        const soft = setTimeout(() => kill('SIGTERM'), 1000), hard = setTimeout(() => kill('SIGKILL'), 2000);
+        try {
+            await Promise.race([terminal, new Promise((_resolve, rejectPromise) => {
+                    const timer = setTimeout(() => rejectPromise(new Error('assistant-skills: holdout process termination unconfirmed')), 4000);
+                    void terminal.then(() => clearTimeout(timer));
+                })]);
+        }
+        finally {
+            clearTimeout(soft);
+            clearTimeout(hard);
+        }
+    })();
+    const handshakeTimer = setTimeout(() => fail('authority ready deadline exceeded'), 10000);
+    try {
+        if (signal.aborted)
+            abort();
+        await handshake;
+    }
+    catch (error) {
+        await close();
+        throw error;
+    }
+    finally {
+        clearTimeout(handshakeTimer);
+    }
+    return { close, transport: { async request(operation, value, requestSignal) {
+                if (failed || closing || ended || pending || !['begin', 'next', 'record', 'finish'].includes(operation))
+                    throw new Error('assistant-skills: holdout pipe unavailable');
+                signal.throwIfAborted();
+                requestSignal?.throwIfAborted();
+                const id = `request-${++serial}`, body = JSON.stringify({ id, operation, ...(value === undefined ? {} : { value }) }) + '\n';
+                if (Buffer.byteLength(body) > 1048576)
+                    throw new Error('assistant-skills: holdout request too large');
+                const cancelled = () => fail('authority request cancelled');
+                const timer = setTimeout(() => fail('authority response deadline exceeded'), 300000);
+                requestSignal?.addEventListener('abort', cancelled, { once: true });
+                try {
+                    return await new Promise((resolve, rejectPromise) => { pending = { id, resolve, reject: rejectPromise }; child.stdin.write(body, error => { if (error)
+                        fail('authority write failed'); }); });
+                }
+                finally {
+                    clearTimeout(timer);
+                    requestSignal?.removeEventListener('abort', cancelled);
+                }
+            } } };
+}
+//# sourceMappingURL=external-holdout.js.map

package/lib/external-holdout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-holdout.js","sourceRoot":"","sources":["../src/external-holdout.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,wBAAwB,EAAqF,MAAM,4BAA4B,CAAA;AACtM,OAAO,EAAE,+BAA+B,EAAgC,MAAM,uBAAuB,CAAA;AAkBrG,SAAS,MAAM,KAAY,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAA,CAAC,CAAC;AACxG,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,SAAS;WAClG,MAAM,CAAC,qBAAqB,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,OAAO,IAAI,IAAI,CAAC,CAAA;AACnK,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,QAA2B,EAAE,WAA8B,EAAE;IAC1F,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAA;AAC9J,CAAC;AACD,SAAS,MAAM,CAAI,KAAQ,IAAO,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;IAAC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAAC,CAAC,CAAC,OAAO,KAAK,CAAA,CAAC,CAAC;AAC1K,SAAS,iBAAiB,CAAC,SAA8C;IACvE,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,IAAI,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;WACnN,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK;WACtM,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,KAAK;WAC7E,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,KAAK,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,iBAAiB,CAAC;WACzF,OAAO,CAAC,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,eAAe,CAAC,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,IAAI,SAAS,CAAC,eAAe,CAAE,CAAC;QAAE,MAAM,EAAE,CAAA;IAC7K,IAAI,CAAC;QAAC,IAAI,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,iBAAiB,KAAK,SAAS;YAAE,MAAM,EAAE,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,EAAE,CAAA;IAAC,CAAC;AAC/G,CAAC;AAED,MAAM,UAAU,+BAA+B,CAAC,MAAyC;IACvF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,EAAE,CAAA;IAC1D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,EAAE,QAAQ,GAAG,IAAI,GAAG,EAAU,EAAE,KAAK,GAAa,EAAE,CAAA;IACjF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;eACnQ,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,IAAI,KAAK,CAAC,cAAc,KAAK,CAAC;eACvF,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,aAAa,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,EAAE,mBAAmB,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAsB,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAsB,CAAC,CAAC;eAChR,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC;YAAE,MAAM,EAAE,CAAA;QAC5I,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAAC,wBAAwB,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAC7E,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAAE,MAAM,EAAE,CAAA;QAC/J,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAA;QAClF,IAAI,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAyC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC;eAC9U,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS;eAClF,CAAC,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,eAAe,KAAK,SAAS;YAAE,MAAM,EAAE,CAAA;QACpJ,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,uBAAuB,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,EAAE,CAAA;YAAC,CAAC;QAAC,CAAC;QACtH,IAAI,KAAK,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC;gBAAC,+BAA+B,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,EAAE,CAAA;YAAC,CAAC;QAAC,CAAC;QAC9I,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,QAAQ;YAAE,MAAM,EAAE,CAAA;QACxH,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACjF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAA6B,CAAC,CAAA;AAC/E,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,SAA8C,EAAE,MAAmB;IAC1G,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAAC,MAAM,CAAC,cAAc,EAAE,CAAA;IACrD,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,EAAE,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;IACzJ,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,MAAM,GAAG,EAAE,EAAE,KAAK,GAAG,KAAK,EAAE,KAAK,GAAG,KAAK,EAAE,OAAO,GAAG,KAAK,EAAE,MAAM,GAAG,CAAC,EAAE,MAAyB,CAAA;IACrG,IAAI,OAA8F,CAAA;IAClG,IAAI,WAAwB,EAAE,WAAoC,CAAA;IAClE,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,WAAW,GAAG,OAAO,CAAC,CAAC,WAAW,GAAG,aAAa,CAAA,CAAC,CAAC,CAAC,CAAA;IACvH,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,EAAE,CAAA,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;IACnI,MAAM,IAAI,GAAG,CAAC,IAAoB,EAAE,EAAE,GAAG,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG;QAAE,OAAO,CAAC,IAAI,CAAC;QAAC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;;YAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3M,SAAS,IAAI,CAAC,MAAc;QAC1B,IAAI,MAAM;YAAE,OAAM;QAClB,MAAM,GAAG,IAAI,KAAK,CAAC,6BAA6B,MAAM,EAAE,CAAC,CAAA;QACzD,WAAW,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,GAAG,SAAS,CAAA;QACjE,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAA;IAC/C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACvD,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAA;IACxD,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAA;IAC5D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,CAAA;IAC/D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,GAAyE,CAAC,CAAC,CAAA;IACxG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QACxC,IAAI,MAAM;YAAE,OAAM;QAClB,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;QAC9B,IAAI,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,GAAG,OAAO,EAAE,CAAC;YAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;YAAC,OAAM;QAAC,CAAC;QACzF,IAAI,EAAU,CAAA;QACd,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACnD,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;YAC/D,IAAI,OAAgC,CAAA;YACpC,IAAI,CAAC;gBAAC,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;oBAAE,MAAM,IAAI,KAAK,EAAE,CAAC;gBAAC,OAAO,GAAG,MAAM,CAAA;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC/J,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,iCAAiC,EAAE,CAAC;oBAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;oBAAC,OAAM;gBAAC,CAAC;gBACxI,KAAK,GAAG,IAAI,CAAC;gBAAC,WAAW,EAAE,CAAC;gBAAC,SAAQ;YACvC,CAAC;YACD,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,IAAI,OAAO,OAAO,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;gBAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YACtI,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;gBAAC,OAAM;YAAC,CAAC;YAC/D,MAAM,OAAO,GAAG,OAAO,CAAC;YAAC,OAAO,GAAG,SAAS,CAAC;YAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC,CAAC,CAAA;IACF,IAAI,OAAkC,CAAA;IACtC,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;QAC1C,OAAO,GAAG,IAAI,CAAC;QAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC1D,IAAI,CAAC,KAAK;YAAE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,CAAA;QAC7B,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;QACpG,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,EAAE;oBAC3E,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;oBAC3H,KAAK,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAA;gBAC/C,CAAC,CAAC,CAAC,CAAC,CAAA;QACN,CAAC;gBAAS,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QAAC,CAAC;IACtD,CAAC,CAAC,EAAE,CAAA;IACJ,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,mCAAmC,CAAC,EAAE,KAAK,CAAC,CAAA;IACzF,IAAI,CAAC;QAAC,IAAI,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAC;QAAC,MAAM,SAAS,CAAA;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,EAAE,CAAC;QAAC,MAAM,KAAK,CAAA;IAAC,CAAC;YAAS,CAAC;QAAC,YAAY,CAAC,cAAc,CAAC,CAAA;IAAC,CAAC;IAC1I,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,aAAa;gBACxE,IAAI,MAAM,IAAI,OAAO,IAAI,KAAK,IAAI,OAAO,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;gBACtK,MAAM,CAAC,cAAc,EAAE,CAAC;gBAAC,aAAa,EAAE,cAAc,EAAE,CAAA;gBACxD,MAAM,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,CAAA;gBAC5H,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,OAAO;oBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAA;gBACrG,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAA;gBAC3D,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,sCAAsC,CAAC,EAAE,MAAM,CAAC,CAAA;gBACpF,aAAa,EAAE,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;gBACnE,IAAI,CAAC;oBACH,OAAO,MAAM,IAAI,OAAO,CAAU,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,GAAG,OAAO,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,KAAK;wBAAE,IAAI,CAAC,wBAAwB,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAC,CAAA;gBACtM,CAAC;wBAAS,CAAC;oBAAC,YAAY,CAAC,KAAK,CAAC,CAAC;oBAAC,aAAa,EAAE,mBAAmB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;gBAAC,CAAC;YAC3F,CAAC,EAAE,EAAE,CAAA;AACP,CAAC"}

package/lib/holdout-authority.d.ts

@@ -0,0 +1,123 @@
+import { KeyObject } from 'node:crypto';
+import { type ProspectiveHoldoutCertificate } from './prospective-holdout.js';
+export type HoldoutCaseKind = 'replay' | 'evaluation' | 'regression';
+export type CellVerdict = 'achieved' | 'not-achieved' | 'unknown';
+export type ObservationStatus = 'completed' | 'failed' | 'unknown';
+export type StopReason = 'expired' | 'recovered-outstanding' | 'non-quiescent' | 'execution-unknown';
+export interface HoldoutCase {
+    readonly id: string;
+    readonly kind: HoldoutCaseKind;
+    readonly stdin: string;
+    readonly expectedStdout: string;
+    readonly expectedExitCode: number;
+}
+export interface HoldoutDataset {
+    readonly id: string;
+    readonly version: string;
+    readonly cases: readonly HoldoutCase[];
+}
+export interface QualificationBinding {
+    readonly scopeDigest: string;
+    readonly baselineDigest: string;
+    readonly candidateDigest: string;
+    readonly budgetDigest: string;
+    /** Optional exact canary admission policy/configuration pin. */
+    readonly admissionDigest?: string;
+    readonly expiresAt: number;
+    readonly repeats: number;
+}
+export interface HoldoutLimits {
+    readonly maxToolCalls: number;
+    readonly maxOutputBytes: number;
+}
+export interface ToolCall {
+    readonly name: string;
+    readonly inputDigest: string;
+    readonly outputDigest?: string;
+}
+export interface CellObservation {
+    readonly cellId: string;
+    readonly armDigest: string;
+    readonly stdout: string;
+    readonly exitCode: number | null;
+    readonly quiescent: boolean;
+    readonly status: ObservationStatus;
+    readonly artifactDigest: string;
+    readonly toolCalls: readonly ToolCall[];
+}
+export interface BeginResult {
+    readonly sessionId: string;
+    readonly planDigest: string;
+    readonly datasetDigest: string;
+    readonly publicKey: string;
+    readonly scopeDigest: string;
+    readonly baselineDigest: string;
+    readonly candidateDigest: string;
+    readonly budgetDigest: string;
+    readonly admissionDigest?: string;
+    readonly expiresAt: number;
+    readonly repeats: number;
+    readonly limits: HoldoutLimits;
+    readonly cellCount: number;
+    /** Present only for a prospective dataset generated after the binding was frozen. */
+    readonly prospective?: ProspectiveHoldoutCertificate;
+}
+export interface SignedCell {
+    readonly sessionId: string;
+    readonly planDigest: string;
+    readonly cellId: string;
+    readonly armDigest: string;
+    readonly stdin: string;
+    readonly signature: string;
+}
+export interface PublicCellVerdict {
+    readonly cellId: string;
+    readonly armDigest: string;
+    readonly caseId: string;
+    readonly kind: HoldoutCaseKind;
+    readonly repeat: number;
+    readonly verdict: CellVerdict;
+    readonly observationDigest?: string;
+}
+export interface HoldoutReceipt extends BeginResult {
+    /** False means one or more cells were made unknown by expiry, recovery, or non-quiescence. */
+    readonly complete: boolean;
+    readonly stoppedReason?: StopReason;
+    readonly cellVerdicts: readonly PublicCellVerdict[];
+    readonly observationDigest: string;
+    readonly signature: string;
+}
+export interface AuthorityOptions {
+    readonly dataset: HoldoutDataset;
+    readonly privateKey: KeyObject | string | Buffer;
+    readonly limits: HoldoutLimits;
+    readonly prospective?: ProspectiveHoldoutCertificate;
+    /** Deterministic clock hook for tests; production callers should omit it. */
+    readonly now?: () => number;
+}
+/** A synchronous, stateful authority. It has no Cordis dependency and never claims an OS seal or promotion authority. */
+export declare class HoldoutAuthority {
+    #private;
+    private constructor();
+    static create(options: AuthorityOptions): HoldoutAuthority;
+    /** Public operator pins; inspecting them does not issue a cell or create a qualification. */
+    metadata(): Readonly<{
+        publicKey: string;
+        datasetDigest: string;
+        limits: HoldoutLimits;
+    }>;
+    static restore(serialized: string, options: AuthorityOptions): HoldoutAuthority;
+    begin(binding: QualificationBinding): BeginResult;
+    next(): SignedCell | undefined;
+    record(observation: CellObservation): CellVerdict;
+    finish(): HoldoutReceipt;
+    serialize(): string;
+    private validateRestoredState;
+    private validateObservation;
+    private caseFor;
+    private assertBegun;
+    private expireOutstanding;
+}
+/** Verifies a signed next-cell or receipt payload with the public key emitted by begin. */
+export declare function verifyHoldoutSignature(payload: Record<string, unknown>, publicKey: string): boolean;
+//# sourceMappingURL=holdout-authority.d.ts.map

package/lib/holdout-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"holdout-authority.d.ts","sourceRoot":"","sources":["../src/holdout-authority.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiD,SAAS,EAA4B,MAAM,aAAa,CAAA;AAChH,OAAO,EAAwF,KAAK,6BAA6B,EAAE,MAAM,0BAA0B,CAAA;AAEnK,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,YAAY,GAAG,YAAY,CAAA;AACpE,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,cAAc,GAAG,SAAS,CAAA;AACjE,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,CAAA;AAClE,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,uBAAuB,GAAG,eAAe,GAAG,mBAAmB,CAAA;AAEpG,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAA;CAClC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,WAAW,EAAE,CAAA;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAChC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,SAAS,EAAE,SAAS,QAAQ,EAAE,CAAA;CACxC;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;IAChC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAA;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,qFAAqF;IACrF,QAAQ,CAAC,WAAW,CAAC,EAAE,6BAA6B,CAAA;CACrD;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAA;CACpC;AAED,MAAM,WAAW,cAAe,SAAQ,WAAW;IACjD,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;IAC1B,QAAQ,CAAC,aAAa,CAAC,EAAE,UAAU,CAAA;IACnC,QAAQ,CAAC,YAAY,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACnD,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAA;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,UAAU,EAAE,SAAS,GAAG,MAAM,GAAG,MAAM,CAAA;IAChD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,6BAA6B,CAAA;IACpD,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAC5B;AA4FD,yHAAyH;AACzH,qBAAa,gBAAgB;;IAc3B,OAAO;IAsBP,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,gBAAgB,GAAG,gBAAgB;IAE1D,6FAA6F;IAC7F,QAAQ,IAAI,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,aAAa,CAAA;KAAE,CAAC;IAIzF,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,gBAAgB;IAsB/E,KAAK,CAAC,OAAO,EAAE,oBAAoB,GAAG,WAAW;IAmBjD,IAAI,IAAI,UAAU,GAAG,SAAS;IAW9B,MAAM,CAAC,WAAW,EAAE,eAAe,GAAG,WAAW;IAkBjD,MAAM,IAAI,cAAc;IASxB,SAAS,IAAI,MAAM;IAKnB,OAAO,CAAC,qBAAqB;IAoB7B,OAAO,CAAC,mBAAmB;IAgB3B,OAAO,CAAC,OAAO;IACf,OAAO,CAAC,WAAW;IACnB,OAAO,CAAC,iBAAiB;CAC1B;AAED,2FAA2F;AAC3F,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAGnG"}

package/lib/holdout-authority.js

@@ -0,0 +1,263 @@
+import { createHash, createPrivateKey, createPublicKey, KeyObject, randomUUID, sign, verify } from 'node:crypto';
+import { isProspectiveGeneratorName, prospectiveGeneratorDigest, verifyProspectiveCertificate } from './prospective-holdout.js';
+const digestPattern = /^[a-f0-9]{64}$/u;
+const kinds = ['replay', 'evaluation', 'regression'];
+const maxStringBytes = 256 * 1024;
+function canonical(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(',')}]`;
+    const record = value;
+    return `{${Object.keys(record).sort().map(key => `${JSON.stringify(key)}:${canonical(record[key])}`).join(',')}}`;
+}
+function sha256(value) {
+    return createHash('sha256').update(canonical(value)).digest('hex');
+}
+function byteLength(value) { return Buffer.byteLength(value, 'utf8'); }
+function signature(payload, privateKey) {
+    return sign(null, Buffer.from(canonical(payload)), privateKey).toString('base64url');
+}
+function validDigest(value) { return typeof value === 'string' && digestPattern.test(value); }
+function assert(condition, message) { if (!condition)
+    throw new Error(`holdout-authority: ${message}`); }
+function exact(value, required, optional = []) {
+    if (!value || typeof value !== 'object' || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype || Object.getOwnPropertySymbols(value).length)
+        return false;
+    const descriptors = Object.getOwnPropertyDescriptors(value);
+    return required.every(key => Object.hasOwn(descriptors, key)) && Object.entries(descriptors).every(([key, descriptor]) => (required.includes(key) || optional.includes(key)) && descriptor.enumerable && 'value' in descriptor);
+}
+function validateLimits(limits) {
+    assert(exact(limits, ['maxToolCalls', 'maxOutputBytes']), 'limits shape is invalid');
+    assert(Number.isInteger(limits.maxToolCalls) && limits.maxToolCalls >= 1 && limits.maxToolCalls <= 32, 'maxToolCalls must be an integer from 1 to 32');
+    assert(Number.isInteger(limits.maxOutputBytes) && limits.maxOutputBytes >= 0 && limits.maxOutputBytes <= 262144, 'maxOutputBytes must be an integer no greater than 262144');
+}
+function validateDataset(dataset, limits) {
+    assert(exact(dataset, ['id', 'version', 'cases']), 'dataset shape is invalid');
+    assert(dataset && typeof dataset.id === 'string' && dataset.id.length > 0 && dataset.id.length <= 128, 'dataset id is invalid');
+    assert(typeof dataset.version === 'string' && dataset.version.length > 0 && dataset.version.length <= 128, 'dataset version is invalid');
+    assert(Array.isArray(dataset.cases) && dataset.cases.length >= 3 && dataset.cases.length <= 12, 'dataset requires 3 to 12 cases');
+    const ids = new Set();
+    const seenKinds = new Set();
+    let total = byteLength(dataset.id) + byteLength(dataset.version);
+    for (const item of dataset.cases) {
+        assert(exact(item, ['id', 'kind', 'stdin', 'expectedStdout', 'expectedExitCode']), 'case shape is invalid');
+        assert(item && typeof item.id === 'string' && item.id.length > 0 && item.id.length <= 128 && !ids.has(item.id), 'case ids must be unique bounded strings');
+        ids.add(item.id);
+        assert(kinds.includes(item.kind), 'case kind is invalid');
+        seenKinds.add(item.kind);
+        assert(typeof item.stdin === 'string' && typeof item.expectedStdout === 'string', 'case input and expected output must be strings');
+        assert(Number.isInteger(item.expectedExitCode) && item.expectedExitCode >= 0 && item.expectedExitCode <= 255, 'expected exit code must be an integer from 0 to 255');
+        assert(byteLength(item.expectedStdout) <= limits.maxOutputBytes, 'expected output exceeds maxOutputBytes');
+        total += byteLength(item.id) + byteLength(item.stdin) + byteLength(item.expectedStdout);
+    }
+    assert(seenKinds.size === kinds.length, 'dataset must contain replay, evaluation, and regression cases');
+    assert(total <= maxStringBytes, 'dataset strings exceed 256KiB');
+}
+function validateBinding(binding, now) {
+    assert(exact(binding, ['scopeDigest', 'baselineDigest', 'candidateDigest', 'budgetDigest', 'expiresAt', 'repeats'], ['admissionDigest']), 'binding shape is invalid');
+    for (const value of [binding.scopeDigest, binding.baselineDigest, binding.candidateDigest, binding.budgetDigest])
+        assert(validDigest(value), 'binding digests must be lowercase SHA-256 hex');
+    assert(binding.admissionDigest === undefined || validDigest(binding.admissionDigest), 'admissionDigest must be lowercase SHA-256 hex');
+    assert(Number.isInteger(binding.repeats) && binding.repeats >= 2 && binding.repeats <= 4, 'repeats must be an integer from 2 to 4');
+    assert(Number.isSafeInteger(binding.expiresAt) && binding.expiresAt > now && binding.expiresAt <= now + 7 * 24 * 60 * 60 * 1000, 'expiresAt must be a future timestamp within seven days');
+}
+function bindingFromBegin(begin) {
+    return { scopeDigest: begin.scopeDigest, baselineDigest: begin.baselineDigest, candidateDigest: begin.candidateDigest, budgetDigest: begin.budgetDigest,
+        ...(begin.admissionDigest === undefined ? {} : { admissionDigest: begin.admissionDigest }), expiresAt: begin.expiresAt, repeats: begin.repeats };
+}
+/** A synchronous, stateful authority. It has no Cordis dependency and never claims an OS seal or promotion authority. */
+export class HoldoutAuthority {
+    #dataset;
+    #datasetDigest;
+    #privateKey;
+    #publicKey;
+    #limits;
+    #prospective;
+    #now;
+    #createdAt;
+    #begin;
+    #cells = [];
+    #stopped = false;
+    #stoppedReason;
+    constructor(options) {
+        validateLimits(options.limits);
+        validateDataset(options.dataset, options.limits);
+        this.#dataset = structuredClone(options.dataset);
+        this.#datasetDigest = sha256(this.#dataset);
+        this.#privateKey = options.privateKey instanceof KeyObject ? options.privateKey : createPrivateKey(options.privateKey);
+        assert(this.#privateKey.type === 'private' && this.#privateKey.asymmetricKeyType === 'ed25519', 'private key must be Ed25519');
+        this.#publicKey = createPublicKey(this.#privateKey).export({ format: 'pem', type: 'spki' }).toString();
+        this.#limits = Object.freeze({ ...options.limits });
+        if (options.prospective !== undefined) {
+            assert(isProspectiveGeneratorName(options.dataset.version), 'prospective dataset generator is invalid');
+            assert(options.prospective.generatorDigest === prospectiveGeneratorDigest(options.dataset.version), 'prospective certificate generator does not match dataset');
+            if (options.prospective.profileVersion !== undefined || options.prospective.profileDigest !== undefined) {
+                assert(options.prospective.profileVersion === options.dataset.version && options.prospective.profileDigest === options.prospective.generatorDigest, 'prospective certificate profile does not match dataset');
+            }
+            assert(verifyProspectiveCertificate(options.prospective, options.prospective.binding, this.#publicKey, options.prospective.generatorDigest), 'prospective certificate is invalid');
+            assert(options.prospective.datasetDigest === this.#datasetDigest, 'prospective certificate dataset does not match');
+            this.#prospective = Object.freeze(structuredClone(options.prospective));
+        }
+        this.#now = options.now ?? Date.now;
+        this.#createdAt = this.#now();
+    }
+    static create(options) { return new HoldoutAuthority(options); }
+    /** Public operator pins; inspecting them does not issue a cell or create a qualification. */
+    metadata() {
+        return Object.freeze({ publicKey: this.#publicKey, datasetDigest: this.#datasetDigest, limits: this.#limits });
+    }
+    static restore(serialized, options) {
+        assert(typeof serialized === 'string' && byteLength(serialized) <= 1024 * 1024, 'serialized state is invalid');
+        let parsed;
+        try {
+            parsed = JSON.parse(serialized);
+        }
+        catch {
+            throw new Error('holdout-authority: serialized state is invalid JSON');
+        }
+        assert(parsed && parsed.state && typeof parsed.signature === 'string', 'serialized state is malformed');
+        const authority = new HoldoutAuthority(options);
+        assert(parsed.state.version === 1 && parsed.state.datasetDigest === authority.#datasetDigest && parsed.state.publicKey === authority.#publicKey && canonical(parsed.state.limits) === canonical(authority.#limits), 'serialized state does not match operator dataset, key, or limits');
+        assert(verify(null, Buffer.from(canonical(parsed.state)), createPublicKey(options.privateKey), Buffer.from(parsed.signature, 'base64url')), 'serialized state signature is invalid');
+        if (parsed.state.begin)
+            authority.#begin = parsed.state.begin;
+        authority.#cells = parsed.state.cells.map(cell => ({ ...cell }));
+        authority.#stopped = parsed.state.stopped;
+        if (parsed.state.stoppedReason)
+            authority.#stoppedReason = parsed.state.stoppedReason;
+        assert(Number.isSafeInteger(parsed.state.createdAt), 'serialized creation timestamp is invalid');
+        authority.#createdAt = parsed.state.createdAt;
+        authority.validateRestoredState();
+        // An issued cell could have run while the authority was down. It is never reissued or accepted after recovery.
+        const hadOutstanding = authority.#cells.some(cell => cell.issued && !cell.verdict);
+        for (const cell of authority.#cells)
+            if (cell.issued && !cell.verdict)
+                cell.verdict = 'unknown';
+        if (hadOutstanding)
+            authority.expireOutstanding('recovered-outstanding');
+        return authority;
+    }
+    begin(binding) {
+        assert(!this.#begin, 'qualification has already begun');
+        assert(binding?.expiresAt > this.#now(), 'expiresAt must be a finite future timestamp');
+        validateBinding(binding, this.#createdAt);
+        const sessionId = randomUUID();
+        const cells = [];
+        let index = 0;
+        for (let repeat = 1; repeat <= binding.repeats; repeat++)
+            for (const item of this.#dataset.cases) {
+                const arms = (index++ % 2 === 0) ? [binding.baselineDigest, binding.candidateDigest] : [binding.candidateDigest, binding.baselineDigest];
+                for (const armDigest of arms)
+                    cells.push({ cellId: `cell-${cells.length + 1}`, armDigest, caseId: item.id, kind: item.kind, repeat, issued: false });
+            }
+        assert(binding.baselineDigest !== binding.candidateDigest, 'baseline and candidate digests must differ');
+        const planDigest = sha256({ sessionId, datasetDigest: this.#datasetDigest, binding, limits: this.#limits, cells: cells.map(({ cellId, armDigest, caseId, kind, repeat }) => ({ cellId, armDigest, caseId, kind, repeat })) });
+        if (this.#prospective)
+            assert(verifyProspectiveCertificate(this.#prospective, binding, this.#publicKey, this.#prospective.generatorDigest), 'prospective certificate binding does not match');
+        this.#begin = Object.freeze({ sessionId, planDigest, datasetDigest: this.#datasetDigest, publicKey: this.#publicKey, ...binding, limits: this.#limits, cellCount: cells.length, ...(this.#prospective ? { prospective: this.#prospective } : {}) });
+        this.#cells = cells;
+        return { ...this.#begin };
+    }
+    next() {
+        this.assertBegun();
+        if (this.#stopped || this.#now() >= this.#begin.expiresAt) {
+            this.expireOutstanding('expired');
+            return undefined;
+        }
+        assert(!this.#cells.some(item => item.issued && !item.verdict), 'an issued cell must be settled before requesting another');
+        const cell = this.#cells.find(item => !item.issued && !item.verdict);
+        if (!cell)
+            return undefined;
+        cell.issued = true;
+        const stdin = this.caseFor(cell).stdin;
+        const unsigned = { sessionId: this.#begin.sessionId, planDigest: this.#begin.planDigest, cellId: cell.cellId, armDigest: cell.armDigest, stdin };
+        return { ...unsigned, signature: signature(unsigned, this.#privateKey) };
+    }
+    record(observation) {
+        this.assertBegun();
+        assert(!this.#stopped, 'qualification is stopped');
+        if (this.#now() >= this.#begin.expiresAt) {
+            this.expireOutstanding('expired');
+            throw new Error('holdout-authority: qualification has expired');
+        }
+        this.validateObservation(observation);
+        const cell = this.#cells.find(item => item.cellId === observation.cellId);
+        assert(cell && cell.issued, 'cell was not issued');
+        assert(!cell.verdict, 'cell has already been settled');
+        assert(cell.armDigest === observation.armDigest, 'cell arm digest does not match');
+        const expected = this.caseFor(cell);
+        const verdict = !observation.quiescent || observation.status === 'unknown' || observation.exitCode === null
+            ? 'unknown'
+            : observation.stdout === expected.expectedStdout && observation.exitCode === expected.expectedExitCode ? 'achieved' : 'not-achieved';
+        cell.verdict = verdict;
+        cell.observationDigest = sha256({ cellId: observation.cellId, armDigest: observation.armDigest, stdout: observation.stdout, exitCode: observation.exitCode, quiescent: observation.quiescent, status: observation.status, artifactDigest: observation.artifactDigest, toolCalls: observation.toolCalls });
+        if (verdict === 'unknown')
+            this.expireOutstanding(!observation.quiescent ? 'non-quiescent' : 'execution-unknown');
+        return verdict;
+    }
+    finish() {
+        this.assertBegun();
+        if (this.#now() >= this.#begin.expiresAt)
+            this.expireOutstanding('expired');
+        assert(this.#cells.every(cell => !!cell.verdict), 'all cells must be terminal before finish');
+        const cellVerdicts = this.#cells.map(({ cellId, armDigest, caseId, kind, repeat, verdict, observationDigest }) => ({ cellId, armDigest, caseId, kind, repeat, verdict: verdict, ...(observationDigest ? { observationDigest } : {}) }));
+        const observationDigest = sha256(cellVerdicts.map(cell => ({ cellId: cell.cellId, observationDigest: cell.observationDigest ?? null, verdict: cell.verdict })));
+        const unsigned = { ...this.#begin, complete: !cellVerdicts.some(cell => cell.verdict === 'unknown'), ...(this.#stoppedReason ? { stoppedReason: this.#stoppedReason } : {}), cellVerdicts, observationDigest };
+        return { ...unsigned, signature: signature(unsigned, this.#privateKey) };
+    }
+    serialize() {
+        const state = { version: 1, datasetDigest: this.#datasetDigest, publicKey: this.#publicKey, createdAt: this.#createdAt, limits: this.#limits, ...(this.#begin ? { begin: this.#begin } : {}), cells: this.#cells, stopped: this.#stopped, ...(this.#stoppedReason ? { stoppedReason: this.#stoppedReason } : {}) };
+        return canonical({ state, signature: signature(state, this.#privateKey) });
+    }
+    validateRestoredState() {
+        if (!this.#begin) {
+            assert(this.#cells.length === 0 && !this.#stopped && !this.#stoppedReason, 'unbegun serialized state is inconsistent');
+            return;
+        }
+        assert(exact(this.#begin, ['sessionId', 'planDigest', 'datasetDigest', 'publicKey', 'scopeDigest', 'baselineDigest', 'candidateDigest', 'budgetDigest', 'expiresAt', 'repeats', 'limits', 'cellCount'], ['admissionDigest', 'prospective']), 'restored begin shape is invalid');
+        const restoredBinding = bindingFromBegin(this.#begin);
+        validateBinding(restoredBinding, this.#createdAt);
+        assert(typeof this.#begin.sessionId === 'string' && validDigest(this.#begin.planDigest) && Number.isSafeInteger(this.#begin.cellCount), 'restored begin identity is invalid');
+        assert(this.#begin.baselineDigest !== this.#begin.candidateDigest && this.#begin.datasetDigest === this.#datasetDigest && this.#begin.publicKey === this.#publicKey && canonical(this.#begin.limits) === canonical(this.#limits), 'restored qualification binding is invalid');
+        if (this.#prospective)
+            assert(this.#begin.prospective && this.#begin.prospective.generatorDigest === this.#prospective.generatorDigest && verifyProspectiveCertificate(this.#begin.prospective, restoredBinding, this.#publicKey, this.#prospective.generatorDigest), 'restored prospective certificate is invalid');
+        else
+            assert(this.#begin.prospective === undefined, 'restored prospective certificate is inconsistent');
+        const expectedCount = this.#dataset.cases.length * this.#begin.repeats * 2;
+        assert(this.#cells.length === expectedCount && this.#begin.cellCount === expectedCount, 'restored cell count is invalid');
+        const seen = new Set();
+        for (const cell of this.#cells) {
+            assert(!seen.has(cell.cellId) && /^cell-[1-9][0-9]*$/u.test(cell.cellId) && validDigest(cell.armDigest) && this.#dataset.cases.some(item => item.id === cell.caseId) && kinds.includes(cell.kind) && Number.isInteger(cell.repeat) && cell.repeat >= 1 && cell.repeat <= this.#begin.repeats && typeof cell.issued === 'boolean' && (cell.verdict === undefined || ['achieved', 'not-achieved', 'unknown'].includes(cell.verdict)), 'restored cell is invalid');
+            seen.add(cell.cellId);
+        }
+        const planDigest = sha256({ sessionId: this.#begin.sessionId, datasetDigest: this.#datasetDigest, binding: restoredBinding, limits: this.#limits, cells: this.#cells.map(({ cellId, armDigest, caseId, kind, repeat }) => ({ cellId, armDigest, caseId, kind, repeat })) });
+        assert(planDigest === this.#begin.planDigest, 'restored plan digest is invalid');
+    }
+    validateObservation(observation) {
+        assert(exact(observation, ['cellId', 'armDigest', 'stdout', 'exitCode', 'quiescent', 'status', 'artifactDigest', 'toolCalls']), 'observation shape is invalid');
+        assert(observation && typeof observation.cellId === 'string' && /^cell-[1-9][0-9]*$/u.test(observation.cellId) && validDigest(observation.armDigest), 'observation cell identity is invalid');
+        assert(typeof observation.stdout === 'string' && byteLength(observation.stdout) <= this.#limits.maxOutputBytes, 'observation stdout exceeds maxOutputBytes');
+        assert((observation.exitCode === null || (Number.isInteger(observation.exitCode) && observation.exitCode >= 0 && observation.exitCode <= 255)) && typeof observation.quiescent === 'boolean' && ['completed', 'failed', 'unknown'].includes(observation.status), 'observation execution status is invalid');
+        assert(validDigest(observation.artifactDigest), 'observation artifact digest is invalid');
+        assert(Array.isArray(observation.toolCalls) && observation.toolCalls.length <= this.#limits.maxToolCalls, 'observation tool calls exceed maxToolCalls');
+        let total = byteLength(observation.stdout);
+        for (const call of observation.toolCalls) {
+            assert(exact(call, ['name', 'inputDigest'], ['outputDigest']), 'tool observation shape is invalid');
+            assert(call && typeof call.name === 'string' && call.name.length > 0 && call.name.length <= 128 && validDigest(call.inputDigest) && (call.outputDigest === undefined || validDigest(call.outputDigest)), 'observation tool call is invalid');
+            total += byteLength(call.name) + byteLength(call.inputDigest) + (call.outputDigest ? byteLength(call.outputDigest) : 0);
+        }
+        assert(total <= maxStringBytes, 'observation strings exceed 256KiB');
+    }
+    caseFor(cell) { return this.#dataset.cases.find(item => item.id === cell.caseId); }
+    assertBegun() { assert(this.#begin, 'qualification has not begun'); }
+    expireOutstanding(reason) { for (const cell of this.#cells)
+        if (!cell.verdict)
+            cell.verdict = 'unknown'; this.#stopped = true; this.#stoppedReason ??= reason; }
+}
+/** Verifies a signed next-cell or receipt payload with the public key emitted by begin. */
+export function verifyHoldoutSignature(payload, publicKey) {
+    const { signature: value, ...unsigned } = payload;
+    return typeof value === 'string' && typeof publicKey === 'string' && verify(null, Buffer.from(canonical(unsigned)), publicKey, Buffer.from(value, 'base64url'));
+}
+//# sourceMappingURL=holdout-authority.js.map