@forgeax/engine-pack 0.1.31 → 0.1.33

package/README.md

@@ -495,9 +495,9 @@ this package does not publish an independent executable.
 
 | Subcommand | Description | Exit code |
 |:--|:--|:--|
-| `forgeax asset list --root <project> --json` | Print discovered `PackEntry` objects | 0 on valid roots |
+| `forgeax asset list --root <project> --json` | Print a bounded page (default `limit=100`, maximum 256); add `--type` and `--cursor` to continue | 0 on valid roots |
 | `forgeax asset inspect --subject <guid> --root <project> --json` | Print matching asset evidence | 0 found / 1 not found |
-| `forgeax asset verify --root <project> --json` | Run the fail-fast scanner and return the first structured `PackError` | 0 clean / 1 error |
+| `forgeax asset verify --root <project> --json` | Run the fail-fast scanner and return a bounded `asset-verification-v1` source/output report | 0 clean / 1 error |
 
 ```bash
 # Direct invocation (after pnpm -F @forgeax/engine-pack build)

package/dist/build.d.ts

@@ -17,7 +17,7 @@ export { type FinalizedPackageProduct, finalizePackageProduct, finalizePackageTr
 export { validateProducerContract, validateProducerOutputs } from './producer-contract.js';
 export { resolveAssetSource } from './resolve-asset-source.js';
 export { parsePackV2, validateMeta, validatePack, validatePackV2 } from './runtime.js';
-export { createRuntimePackPublication, type RuntimePackAssetInput, type RuntimePackEnvelope, type RuntimePackInput, type RuntimePackPublication, type RuntimePackPublicationInput, } from './runtime-publication.js';
+export { bindRuntimePackScope, createRuntimePackPublication, type RuntimePackAssetInput, type RuntimePackEnvelope, type RuntimePackInput, type RuntimePackPublication, type RuntimePackPublicationInput, stripRuntimePackLifecycle, } from './runtime-publication.js';
 export { type InventoryDeclaration, type LegacyPackInventoryDocument, type PackInventoryAsset, type PackInventoryDocument, type PackSourceInventoryDocument, type ScanInventory, type ScanOptions, type ScanSourceDeclaration, type ScriptablePackInventoryDeclaration, type ScriptablePackScanOptions, STANDARD_SCRIPTABLE_PACK_SCAN_OPTIONS, scanInventory, } from './scanner.js';
 export { type AssetReader, isScriptablePackAssetKind, projectScriptablePackSceneComponents, SCRIPTABLE_PACK_ASSET_KINDS, type ScriptablePackAssetKind, type ScriptablePackReadError, type ScriptablePackSourceClosureEntry, } from './scriptable-pack.js';
 export { calculateTopologyDiff, diffTopology } from './topology.js';

package/dist/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,aAAa,EACb,cAAc,EACd,KAAK,EACL,cAAc,EACd,aAAa,EACb,SAAS,EACT,aAAa,EACb,SAAS,EACT,MAAM,EACN,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,UAAU,GACX,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,EAClC,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,oBAAoB,EACpB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,oBAAoB,EACpB,oBAAoB,EACpB,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,6BAA6B,EAC7B,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,oBAAoB,EACzB,uBAAuB,EACvB,4BAA4B,EAC5B,KAAK,oBAAoB,EACzB,KAAK,+BAA+B,EACpC,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,2BAA2B,EAC3B,6BAA6B,EAC7B,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,GACV,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,2BAA2B,EAC3B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EACL,oCAAoC,EACpC,iCAAiC,EACjC,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,uBAAuB,EAC5B,sBAAsB,EACtB,8BAA8B,EAC9B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EACL,4BAA4B,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,GACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,kCAAkC,EACvC,KAAK,yBAAyB,EAC9B,qCAAqC,EACrC,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,WAAW,EAChB,yBAAyB,EACzB,oCAAoC,EACpC,2BAA2B,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,GACtC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../src/build.ts"],"names":[],"mappings":"AAGA,YAAY,EACV,aAAa,EACb,cAAc,EACd,KAAK,EACL,cAAc,EACd,aAAa,EACb,SAAS,EACT,aAAa,EACb,SAAS,EACT,MAAM,EACN,WAAW,EACX,mBAAmB,EACnB,mBAAmB,EACnB,YAAY,EACZ,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,UAAU,GACX,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EACL,sBAAsB,EACtB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,qBAAqB,EAC1B,KAAK,6BAA6B,EAClC,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,yBAAyB,EAC9B,oBAAoB,EACpB,eAAe,GAChB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,oBAAoB,EACpB,oBAAoB,EACpB,6BAA6B,EAC7B,KAAK,mBAAmB,EACxB,yBAAyB,EACzB,6BAA6B,EAC7B,qBAAqB,EACrB,wBAAwB,EACxB,KAAK,sBAAsB,GAC5B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,oBAAoB,EACzB,uBAAuB,EACvB,4BAA4B,EAC5B,KAAK,oBAAoB,EACzB,KAAK,+BAA+B,EACpC,KAAK,mBAAmB,EACxB,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,gBAAgB,EACrB,2BAA2B,EAC3B,6BAA6B,EAC7B,4BAA4B,EAC5B,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAChG,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,oBAAoB,EACpB,kBAAkB,EAClB,SAAS,GACV,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAClF,OAAO,EACL,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,uBAAuB,GACxB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,2BAA2B,EAC3B,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,kBAAkB,GACnB,MAAM,wBAAwB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,OAAO,EACL,oCAAoC,EACpC,iCAAiC,EACjC,KAAK,8BAA8B,EACnC,KAAK,8BAA8B,GACpC,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,uBAAuB,EAC5B,sBAAsB,EACtB,8BAA8B,EAC9B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,wBAAwB,GACzB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAC3F,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EACL,oBAAoB,EACpB,4BAA4B,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,2BAA2B,EAChC,yBAAyB,GAC1B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,kCAAkC,EACvC,KAAK,yBAAyB,EAC9B,qCAAqC,EACrC,aAAa,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,WAAW,EAChB,yBAAyB,EACzB,oCAAoC,EACpC,2BAA2B,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,gCAAgC,GACtC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC"}

package/dist/build.mjs

@@ -9254,11 +9254,11 @@ function record(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
 var STANDARD_SCRIPTABLE_PACK_SCAN_OPTIONS = Object.freeze({
-  // Scriptable Packs execute in an isolated worker.  A cold worker must
-  // compile the authored source closure before it can return metadata;
-  // heavy procedural packs otherwise make the shared catalog fall back to
-  // an empty degraded projection at the old 15-second budget.
-  timeoutMs: 6e4
+  // Scriptable Packs execute in an isolated worker. A cold worker must compile
+  // the authored source closure before it can return metadata. Keep the bound
+  // finite while allowing a heavy character/scene closure to complete on a
+  // busy host.
+  timeoutMs: 12e4
 });
 var BLACKLIST = /* @__PURE__ */ new Set([
   "node_modules",
@@ -10971,6 +10971,7 @@ function decodeMeshBinHeader(bytes, sourceKey2 = "<unknown mesh source>") {
     }
   };
 }
+var VERIFY_PROVENANCE_LIMIT = 256;
 function isRecord3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -11267,6 +11268,54 @@ async function readMaterialized(options, operation) {
   );
   return ok(materialized);
 }
+async function readAdditionalKnownGuids(options, operation) {
+  let rawGuids;
+  try {
+    rawGuids = await options.additionalKnownGuids?.() ?? [];
+  } catch (cause) {
+    return err(
+      makeError(
+        "pack-parameter-invalid",
+        "the additionalKnownGuids callback to return current Catalog GUIDs",
+        "repair the build-owner Catalog projection callback, then retry the Pack operation",
+        {
+          requestId: operation.requestId,
+          cause: cause instanceof Error ? cause.message : String(cause)
+        }
+      )
+    );
+  }
+  if (!Array.isArray(rawGuids)) {
+    return err(
+      makeError(
+        "pack-parameter-invalid",
+        "additionalKnownGuids to be an array of AssetGuid strings",
+        "repair the build-owner Catalog projection before querying Pack authoring",
+        { requestId: operation.requestId, actual: typeof rawGuids }
+      )
+    );
+  }
+  const guids = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const candidate of rawGuids) {
+    if (typeof candidate !== "string" || !isValidAssetGuidString(candidate)) {
+      return err(
+        makeError(
+          "pack-parameter-invalid",
+          "additionalKnownGuids to contain valid AssetGuid strings",
+          "repair the build-owner Catalog projection before querying Pack authoring",
+          { requestId: operation.requestId, guid: candidate }
+        )
+      );
+    }
+    const guid = candidate.toLowerCase();
+    if (!seen.has(guid)) {
+      seen.add(guid);
+      guids.push(guid);
+    }
+  }
+  return ok(guids);
+}
 async function createSnapshot(options, operation) {
   const scanned = options.inventory === void 0 ? await scanInventory(scanRoots(options)) : await options.inventory();
   if (!scanned.ok) return err(scanFailure(operation, scanned.error));
@@ -11322,6 +11371,8 @@ async function createSnapshot(options, operation) {
   }
   const materializedResult = await readMaterialized(options, operation);
   if (!materializedResult.ok) return materializedResult;
+  const additionalKnownGuidsResult = await readAdditionalKnownGuids(options, operation);
+  if (!additionalKnownGuidsResult.ok) return additionalKnownGuidsResult;
   const materialized = materializedResult.value;
   const guidOwners = /* @__PURE__ */ new Map();
   const directPairs = /* @__PURE__ */ new Set();
@@ -11373,7 +11424,8 @@ async function createSnapshot(options, operation) {
   const knownGuids = /* @__PURE__ */ new Set([
     ...scanned.value.inventory.map((entry) => entry.guid.toLowerCase()),
     ...directAssets.map((asset) => asset.guid),
-    ...materialized.map((asset) => asset.guid)
+    ...materialized.map((asset) => asset.guid),
+    ...additionalKnownGuidsResult.value
   ]);
   return ok({ inventory: scanned.value, subjects, directAssets, materialized, knownGuids });
 }
@@ -11514,6 +11566,15 @@ async function inspectAsset(gameRoot, snapshot, operation) {
   const selected = subjectFor(gameRoot, snapshot, operation);
   if (!selected.ok) return selected;
   const subject = selected.value;
+  const source = await readConfined({ gameRoot }, operation, subject.relativePath);
+  if (!source.ok) return source;
+  const inspectedSource = {
+    ...sourceResult(subject, operation),
+    revision: source.value.revision,
+    ...subject.format === "source" ? {
+      assets: snapshot.materialized.filter((asset) => asset.packageId === packageKey(subject.packageId)).map((asset) => ({ ...asset }))
+    } : {}
+  };
   if (operation.sourceKey !== void 0) {
     if (!isValidPackSourceKey(operation.sourceKey)) {
       return err(
@@ -11546,7 +11607,7 @@ async function inspectAsset(gameRoot, snapshot, operation) {
         (candidate) => candidate.packageId === packageKey(subject.packageId) && candidate.sourceKey === operation.sourceKey
       );
       return ok({
-        ...sourceResult(subject, operation),
+        ...inspectedSource,
         sourceKey: asset.sourceKey,
         guid: asset.guid,
         kind: asset.kind,
@@ -11559,7 +11620,7 @@ async function inspectAsset(gameRoot, snapshot, operation) {
         (candidate) => candidate.packageId === packageKey(subject.packageId) && candidate.sourceKey === operation.sourceKey
       );
       return ok({
-        ...sourceResult(subject, operation),
+        ...inspectedSource,
         sourceKey: operation.sourceKey,
         guid,
         ...materialized === void 0 ? { status: "identity" } : {
@@ -11583,7 +11644,7 @@ async function inspectAsset(gameRoot, snapshot, operation) {
     const resolved = await resolveInstance(snapshot, subject);
     if (!resolved.ok) return resolved;
     return ok({
-      ...sourceResult(subject, operation),
+      ...inspectedSource,
       parameters: resolved.value.parameters.map((parameter) => ({
         name: parameter.name,
         type: parameter.type,
@@ -11597,7 +11658,7 @@ async function inspectAsset(gameRoot, snapshot, operation) {
       parentChain: resolved.value.parentChain
     });
   }
-  return ok(sourceResult(subject, operation));
+  return ok(inspectedSource);
 }
 function listAssets(snapshot, operation) {
   const assets = snapshotAssets(snapshot).map((asset) => ({
@@ -11880,7 +11941,164 @@ async function resolveAsset(gameRoot, snapshot, operation) {
     }
   });
 }
-async function verify(snapshot, operation) {
+function verificationSourceFormat(gameRoot, sourcePath, fallback = "pack.ts") {
+  if (sourcePath === void 0) return fallback;
+  const absolute = resolve(gameRoot, sourcePath);
+  if (absolute.endsWith(".meta.json")) return "meta.json";
+  if (absolute.endsWith(".pack.json")) return "pack.json";
+  if (absolute.endsWith(".pack.ts")) return "pack.ts";
+  return fallback;
+}
+function verificationAuthorFacts(snapshot, entry) {
+  const declaration = snapshot.inventory.declarations.get(entry.sourcePath);
+  if (declaration?.format === "meta.json") {
+    const asset = declaration.value.subAssets.find(
+      (candidate) => candidate.guid.toLowerCase() === entry.guid.toLowerCase()
+    );
+    return {
+      ...asset?.name === void 0 && asset?.sourceKey === void 0 ? {} : { name: asset.name ?? asset.sourceKey },
+      dependencies: []
+    };
+  }
+  if (declaration?.format === "pack.json") {
+    if (declaration.value.schemaVersion === "3.0.0") {
+      const parsed = parsePackSourceJson(declaration.value);
+      if (parsed.ok && parsed.value.format === "direct" && entry.sourceKey !== void 0) {
+        const asset = parsed.value.assets[entry.sourceKey];
+        return {
+          ...asset?.name === void 0 ? {} : { name: asset.name },
+          dependencies: asset?.refs ?? []
+        };
+      }
+    } else {
+      const asset = declaration.value.assets.find(
+        (candidate) => candidate.guid.toLowerCase() === entry.guid.toLowerCase()
+      );
+      return {
+        ...asset?.name === void 0 ? {} : { name: asset.name },
+        dependencies: asset?.refs ?? []
+      };
+    }
+  }
+  return { dependencies: [] };
+}
+function verificationOutput(materialized, legacyPublished = false) {
+  if (materialized !== void 0) {
+    return {
+      status: materialized.ready ? "produced" : "unknown",
+      availability: materialized.ready ? "available" : "unknown",
+      freshness: "unknown"
+    };
+  }
+  if (legacyPublished) {
+    return {
+      status: "produced",
+      availability: "unknown",
+      freshness: "unknown"
+      // A legacy Pack row is a validated published declaration. The bytes
+      // remain outside this read-only gateway, so availability is unknown.
+    };
+  }
+  return { status: "unproduced", availability: "unknown", freshness: "unknown" };
+}
+function createGatewayVerificationReport(gameRoot, snapshot) {
+  const materializedByGuid = new Map(
+    snapshot.materialized.map((asset) => [asset.guid.toLowerCase(), asset])
+  );
+  const rows = /* @__PURE__ */ new Map();
+  for (const entry of snapshot.inventory.inventory) {
+    const declaration = snapshot.inventory.declarations.get(entry.sourcePath);
+    const format = declaration?.format ?? verificationSourceFormat(gameRoot, entry.sourcePath);
+    const facts = verificationAuthorFacts(snapshot, entry);
+    const materialized = materializedByGuid.get(entry.guid.toLowerCase());
+    const legacyPublished = declaration?.format === "pack.json" && declaration.value.schemaVersion !== "3.0.0";
+    rows.set(entry.guid.toLowerCase(), {
+      guid: entry.guid,
+      type: entry.kind,
+      source: {
+        path: entry.sourcePath,
+        format,
+        role: "author",
+        ...entry.sourceRevision === void 0 ? {} : { revision: entry.sourceRevision }
+      },
+      output: verificationOutput(materialized, legacyPublished),
+      dependencies: facts.dependencies,
+      producer: {
+        state: materialized !== void 0 ? "published" : legacyPublished ? "published" : "not-run"
+      },
+      ...facts.name === void 0 ? {} : { name: facts.name },
+      ...entry.sourceKey === void 0 ? {} : { sourceKey: entry.sourceKey },
+      ...entry.sourceIndex === void 0 ? {} : { sourceIndex: entry.sourceIndex }
+    });
+  }
+  for (const asset of snapshot.materialized) {
+    const key = asset.guid.toLowerCase();
+    if (rows.has(key)) continue;
+    const sourcePath = asset.sourcePath === void 0 ? void 0 : resolve(gameRoot, asset.sourcePath);
+    const declaration = sourcePath === void 0 ? void 0 : snapshot.inventory.declarations.get(sourcePath);
+    const format = declaration?.format ?? verificationSourceFormat(gameRoot, asset.sourcePath);
+    rows.set(key, {
+      guid: asset.guid,
+      type: asset.kind,
+      source: {
+        path: sourcePath ?? `${asset.packageId}/${asset.sourceKey}`,
+        format,
+        role: "author",
+        ...declaration === void 0 ? {} : { revision: declaration.sourceRevision }
+      },
+      output: verificationOutput(asset),
+      dependencies: asset.refs ?? [],
+      producer: { state: "published" },
+      sourceKey: asset.sourceKey
+    });
+  }
+  const assets = [...rows.values()].sort(
+    (left, right) => `${left.source.path}:${left.guid}`.localeCompare(`${right.source.path}:${right.guid}`)
+  );
+  const emitted = assets.slice(0, VERIFY_PROVENANCE_LIMIT);
+  const sourcePaths = [...snapshot.inventory.declarations.keys()].sort();
+  const scriptablePackSources = [...snapshot.inventory.declarations.values()].filter((declaration) => declaration.format === "pack.ts").sort((left, right) => left.sourcePath.localeCompare(right.sourcePath));
+  const unmaterializedScriptable = scriptablePackSources.filter(
+    (source) => !snapshot.materialized.some(
+      (asset) => asset.packageId === source.value.packageId.toLowerCase() || asset.sourcePath !== void 0 && resolve(gameRoot, asset.sourcePath) === source.sourcePath
+    )
+  );
+  return {
+    schemaVersion: "asset-verification-v1",
+    root: resolve(gameRoot),
+    operation: "asset.verify",
+    requestId: "gateway",
+    scope: {
+      sourceCount: sourcePaths.length,
+      assetCount: assets.length,
+      sourcePaths: sourcePaths.slice(0, VERIFY_PROVENANCE_LIMIT),
+      omittedSourceCount: Math.max(0, sourcePaths.length - VERIFY_PROVENANCE_LIMIT),
+      assetLimit: VERIFY_PROVENANCE_LIMIT,
+      truncated: assets.length > VERIFY_PROVENANCE_LIMIT,
+      scriptablePackSourceCount: scriptablePackSources.length,
+      scriptablePackSources: unmaterializedScriptable.slice(0, VERIFY_PROVENANCE_LIMIT).map((source) => ({
+        sourcePath: source.sourcePath,
+        packageId: source.value.packageId,
+        output: "unproduced",
+        reason: "producer-not-run"
+      })),
+      omittedScriptablePackSourceCount: Math.max(
+        0,
+        unmaterializedScriptable.length - VERIFY_PROVENANCE_LIMIT
+      )
+    },
+    assets: emitted,
+    summary: {
+      assetCount: assets.length,
+      emittedAssetCount: emitted.length,
+      materialCount: assets.filter((asset) => asset.type === "material").length,
+      unproducedAssetCount: assets.filter((asset) => asset.output.status === "unproduced").length,
+      unknownAssetCount: assets.filter((asset) => asset.output.status === "unknown").length,
+      unmaterializedScriptablePackCount: unmaterializedScriptable.length
+    }
+  };
+}
+async function verify(gameRoot, snapshot, operation) {
   for (const subject of snapshot.subjects.values()) {
     if (subject.format === "instance") {
       const resolved = await resolveInstance(snapshot, subject);
@@ -11925,14 +12143,8 @@ async function verify(snapshot, operation) {
       );
     }
   }
-  return ok({
-    operation: operation.operation,
-    requestId: operation.requestId,
-    snapshot: {
-      sourceCount: snapshot.subjects.size,
-      assetCount: snapshotAssets(snapshot).length
-    }
-  });
+  const report = createGatewayVerificationReport(gameRoot, snapshot);
+  return ok({ ...report, operation: operation.operation, requestId: operation.requestId });
 }
 function packageIdFromOperation(snapshot, operation) {
   const value = operation.packageId === void 0 ? ok(PackageId.random()) : PackageId.parse(operation.packageId);
@@ -12032,7 +12244,8 @@ async function executeRaw(options, operation) {
   if (!snapshot.ok) return snapshot;
   if (operation.operation === "asset.resolve")
     return resolveAsset(options.gameRoot, snapshot.value, operation);
-  if (operation.operation === "asset.verify") return verify(snapshot.value, operation);
+  if (operation.operation === "asset.verify")
+    return verify(options.gameRoot, snapshot.value, operation);
   if (operation.operation === "asset-source.create") {
     const path = confinedPath(
       options.gameRoot,
@@ -12545,7 +12758,8 @@ async function executeRaw(options, operation) {
       refreshed.value.source,
       selected.value.packageId,
       {
-        format: refreshed.value.relative.endsWith(".pack.json") ? "pack.json" : "pack.ts"
+        format: refreshed.value.relative.endsWith(".pack.json") ? "pack.json" : "pack.ts",
+        assets: refreshedSnapshot.value.materialized.filter((asset) => asset.packageId === packageKey(selected.value.packageId)).map((asset) => ({ ...asset }))
       }
     );
   }
@@ -12799,6 +13013,22 @@ function parsePackV2(value) {
   }
   return ok(value);
 }
+function isRuntimePackEnvelope(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+  const record2 = value;
+  return record2.schemaVersion === "2.0.0" && record2.kind === "internal-text-package" && typeof record2.scopeId === "string" && record2.scopeId.length > 0 && typeof record2.generation === "number" && Number.isSafeInteger(record2.generation) && record2.generation > 0 && Array.isArray(record2.assets);
+}
+function stripRuntimePackLifecycle(value) {
+  if (!isRuntimePackEnvelope(value)) return value;
+  const { scopeId: _scopeId, generation: _generation, ...semantic } = value;
+  return semantic;
+}
+function bindRuntimePackScope(value, scopeId, generation) {
+  if (value === null || typeof value !== "object" || Array.isArray(value) || value.schemaVersion !== "2.0.0" || value.kind !== "internal-text-package" || !Array.isArray(value.assets)) {
+    return value;
+  }
+  return { ...value, scopeId, generation };
+}
 function stable(value) {
   if (value instanceof Uint8Array) return `bytes:${Buffer.from(value).toString("base64")}`;
   if (Array.isArray(value)) return `[${value.map(stable).join(",")}]`;
@@ -12908,6 +13138,6 @@ function createRuntimePackPublication(input) {
   };
 }
 
-export { AssetGuid, MESH_BIN_DIGEST_BYTES, MESH_BIN_HEADER_V4_BYTES, MESH_BIN_PROJECTION_VERSION, MESH_BIN_VERSION, PACK_AUTHORING_OPERATION_DESCRIPTORS, PACK_AUTHORING_OPERATION_IDS, PACK_PARAMETER_TYPES, PACK_SOURCE_KEY_RE, PackageId, SCRIPTABLE_PACK_ASSET_KINDS, STANDARD_SCRIPTABLE_PACK_SCAN_OPTIONS, buildCatalogProjection, buildOfflineAssetEvidence, calculateCatalogDelta, calculateTopologyDiff, catalogProjectionFor, catalogSourcePathFor, collectMaterialCookRefs, createFileSystemPackAuthoringGateway, createFileSystemPackAuthoringPort, createMaterialArtifactDigest, createPackAuthoringGateway, createRuntimePackPublication, currentProjectionFor, decodeMeshBinHeader, definePack, definePackageId, diffTopology, finalizePackageProduct, finalizePackageTransportSource, findReservedAssetKindConflict, hasPackParameters, inventoryDigest, isScriptablePackAssetKind, isValidAssetGuidString, isValidPackSourceKey, metaPathForGuid, packageTransportRevision, packageVerification, parsePackSourceJson, parsePackV2, projectAssetRefs, projectCookedMaterialRecord, projectCookedPackageEntry, projectDirectPackJson, projectExternalCatalogEntries, projectPackageCatalog, projectRuntimeCatalogRow, projectSceneEntityRefs, projectScriptablePackMeta, projectScriptablePackSceneComponents, resolveAssetSource, resolvePackInheritance, resolvePackParameterInheritance, resolvePackParameterValues, scanInventory, serializeCookedMaterialRecord, serializeMaterialCookReceipt, syncAuthorInventory, validateArtifactPath, validateAuthorInventory, validateCookedMaterialRecord, validateMaterialCookReceipt, validateMeta, validatePack, validatePackDefinition, validatePackV2, validateProducerContract, validateProducerOutputs, writeMeshBinHeader };
+export { AssetGuid, MESH_BIN_DIGEST_BYTES, MESH_BIN_HEADER_V4_BYTES, MESH_BIN_PROJECTION_VERSION, MESH_BIN_VERSION, PACK_AUTHORING_OPERATION_DESCRIPTORS, PACK_AUTHORING_OPERATION_IDS, PACK_PARAMETER_TYPES, PACK_SOURCE_KEY_RE, PackageId, SCRIPTABLE_PACK_ASSET_KINDS, STANDARD_SCRIPTABLE_PACK_SCAN_OPTIONS, bindRuntimePackScope, buildCatalogProjection, buildOfflineAssetEvidence, calculateCatalogDelta, calculateTopologyDiff, catalogProjectionFor, catalogSourcePathFor, collectMaterialCookRefs, createFileSystemPackAuthoringGateway, createFileSystemPackAuthoringPort, createMaterialArtifactDigest, createPackAuthoringGateway, createRuntimePackPublication, currentProjectionFor, decodeMeshBinHeader, definePack, definePackageId, diffTopology, finalizePackageProduct, finalizePackageTransportSource, findReservedAssetKindConflict, hasPackParameters, inventoryDigest, isScriptablePackAssetKind, isValidAssetGuidString, isValidPackSourceKey, metaPathForGuid, packageTransportRevision, packageVerification, parsePackSourceJson, parsePackV2, projectAssetRefs, projectCookedMaterialRecord, projectCookedPackageEntry, projectDirectPackJson, projectExternalCatalogEntries, projectPackageCatalog, projectRuntimeCatalogRow, projectSceneEntityRefs, projectScriptablePackMeta, projectScriptablePackSceneComponents, resolveAssetSource, resolvePackInheritance, resolvePackParameterInheritance, resolvePackParameterValues, scanInventory, serializeCookedMaterialRecord, serializeMaterialCookReceipt, stripRuntimePackLifecycle, syncAuthorInventory, validateArtifactPath, validateAuthorInventory, validateCookedMaterialRecord, validateMaterialCookReceipt, validateMeta, validatePack, validatePackDefinition, validatePackV2, validateProducerContract, validateProducerOutputs, writeMeshBinHeader };
 //# sourceMappingURL=build.mjs.map
 //# sourceMappingURL=build.mjs.map