@forgeax/engine-pack 0.1.31 → 0.1.33

package/dist/cli-asset.d.ts

@@ -1,10 +1,67 @@
 #!/usr/bin/env node
+import { type ScanSourceDeclaration } from './scanner.js';
 export { runAtlas } from './atlas/run-atlas.js';
 export interface PackEntry {
     readonly guid: string;
     readonly kind: string;
     readonly sourcePath: string;
     readonly name?: string;
+    readonly sourceKey?: string;
+    readonly sourceIndex?: number;
+    readonly sourceRevision?: string;
+}
+export interface AssetVerificationReport {
+    readonly schemaVersion: 'asset-verification-v1';
+    readonly root: string;
+    /** The bounded source scope used for this read-only report. */
+    readonly scope: {
+        readonly sourceCount: number;
+        readonly assetCount: number;
+        readonly sourcePaths: readonly string[];
+        readonly omittedSourceCount: number;
+        readonly assetLimit: number;
+        readonly truncated: boolean;
+        readonly scriptablePackSourceCount: number;
+        readonly scriptablePackSources: readonly {
+            readonly sourcePath: string;
+            readonly packageId: string;
+            readonly output: 'unproduced';
+            readonly reason: 'producer-not-run';
+        }[];
+        readonly omittedScriptablePackSourceCount: number;
+    };
+    readonly assets: readonly {
+        readonly guid: string;
+        readonly type: string;
+        readonly source: {
+            readonly path: string;
+            readonly format: 'meta.json' | 'pack.json' | 'pack.ts';
+            readonly revision?: string;
+            readonly role: 'author';
+        };
+        readonly output: {
+            readonly status: 'produced' | 'unproduced' | 'unknown';
+            readonly availability: 'available' | 'missing' | 'unknown';
+            readonly freshness: 'unknown';
+            readonly packagePath?: string;
+            readonly artifactPaths?: readonly string[];
+        };
+        readonly dependencies: readonly string[];
+        readonly producer: {
+            readonly state: 'not-run' | 'published' | 'unknown';
+        };
+        readonly name?: string;
+        readonly sourceKey?: string;
+        readonly sourceIndex?: number;
+    }[];
+    readonly summary: {
+        readonly assetCount: number;
+        readonly emittedAssetCount: number;
+        readonly materialCount: number;
+        readonly unproducedAssetCount: number;
+        readonly unknownAssetCount: number;
+        readonly unmaterializedScriptablePackCount: number;
+    };
 }
 interface AssetCtx {
     readonly stdoutWrite: (line: string) => void;
@@ -15,8 +72,14 @@ interface AssetCtx {
 export declare function scanEntries(roots: readonly string[], ctx: AssetCtx): Promise<{
     ok: true;
     value: PackEntry[];
+    declarations: ReadonlyMap<string, ScanSourceDeclaration>;
 } | {
     ok: false;
 }>;
 export declare function runCliAsset(rest: string[], ctx: AssetCtx): Promise<number>;
+/** Build the bounded provenance projection from one validated scanner pass. */
+export declare function createAssetVerificationReport(root: string, result: {
+    readonly value: readonly PackEntry[];
+    readonly declarations: ReadonlyMap<string, ScanSourceDeclaration>;
+}): AssetVerificationReport;
 //# sourceMappingURL=cli-asset.d.ts.map

package/dist/cli-asset.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-asset.d.ts","sourceRoot":"","sources":["../src/cli-asset.ts"],"names":[],"mappings":";AA+BA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,UAAU,QAAQ;IAChB,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,mFAAmF;IACnF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAwBD,wBAAsB,WAAW,CAC/B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,GAAG,EAAE,QAAQ,GACZ,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAAC,CAgF3D;AAyBD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAiChF"}
+{"version":3,"file":"cli-asset.d.ts","sourceRoot":"","sources":["../src/cli-asset.ts"],"names":[],"mappings":";AA0BA,OAAO,EAAE,KAAK,qBAAqB,EAAiB,MAAM,cAAc,CAAC;AAKzE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEhD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE;QACd,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;QACxC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;QACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;QAC5B,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;QAC3C,QAAQ,CAAC,qBAAqB,EAAE,SAAS;YACvC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;YAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;YAC3B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;YAC9B,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;SACrC,EAAE,CAAC;QACJ,QAAQ,CAAC,gCAAgC,EAAE,MAAM,CAAC;KACnD,CAAC;IACF,QAAQ,CAAC,MAAM,EAAE,SAAS;QACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,GAAG,SAAS,CAAC;YACvD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;YAC3B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;SACzB,CAAC;QACF,QAAQ,CAAC,MAAM,EAAE;YACf,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;YACvD,QAAQ,CAAC,YAAY,EAAE,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;YAC3D,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;YAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;SAC5C,CAAC;QACF,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;QACzC,QAAQ,CAAC,QAAQ,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAA;SAAE,CAAC;QAC3E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;KAC/B,EAAE,CAAC;IACJ,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;QACtC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;QACnC,QAAQ,CAAC,iCAAiC,EAAE,MAAM,CAAC;KACpD,CAAC;CACH;AASD,UAAU,QAAQ;IAChB,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7C,mFAAmF;IACnF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB;AAwBD,wBAAsB,WAAW,CAC/B,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,GAAG,EAAE,QAAQ,GACZ,OAAO,CACN;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,SAAS,EAAE,CAAC;IAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAA;CAAE,GAC1F;IAAE,EAAE,EAAE,KAAK,CAAA;CAAE,CAChB,CAuFA;AA0BD,wBAAsB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAiChF;AAkPD,+EAA+E;AAC/E,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE;IACN,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC;CACnE,GACA,uBAAuB,CA2DzB"}

package/dist/cli-asset.mjs

@@ -9767,6 +9767,7 @@ function parsePackV2(value) {
 }
 
 // src/cli-asset.ts
+var ASSET_VERIFY_LIMIT = 256;
 function isRecord3(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
@@ -9805,6 +9806,8 @@ async function scanEntries(roots, ctx) {
         guid: asset.guid,
         kind: asset.kind,
         sourcePath,
+        sourceIndex: asset.sourceIndex,
+        sourceRevision: declaration.sourceRevision,
         ...name === void 0 ? {} : { name }
       });
     }
@@ -9834,6 +9837,9 @@ async function scanEntries(roots, ctx) {
       guid: inventoryEntry.guid,
       kind: inventoryEntry.kind,
       sourcePath: inventoryEntry.sourcePath,
+      sourceRevision: inventoryEntry.sourceRevision,
+      ...inventoryEntry.sourceKey === void 0 ? {} : { sourceKey: inventoryEntry.sourceKey },
+      ...inventoryEntry.sourceIndex === void 0 ? {} : { sourceIndex: inventoryEntry.sourceIndex },
       ...name === void 0 ? {} : { name },
       ...declaration?.format === "pack.json" && declaration.value.schemaVersion === "3.0.0" && inventoryEntry.sourceKey !== void 0 && name === void 0 ? { name: inventoryEntry.sourceKey } : {}
     });
@@ -9841,7 +9847,7 @@ async function scanEntries(roots, ctx) {
   entries.sort(
     (left, right) => `${left.sourcePath}:${left.guid}`.localeCompare(`${right.sourcePath}:${right.guid}`)
   );
-  return { ok: true, value: entries };
+  return { ok: true, value: entries, declarations: result.value.declarations };
 }
 function helpBody() {
   return [
@@ -9851,6 +9857,7 @@ function helpBody() {
     "  forgeax asset list --root <project> --json",
     "  forgeax asset inspect --subject <guid> --root <project> --json",
     "  forgeax asset verify --root <project> --json",
+    "    output is bounded to 256 assets and includes the scanned source scope",
     "  forgeax asset inspect --subject <source.pack.ts> --root <project> --json",
     "  forgeax asset atlas --input <glob> --name <prefix> --root <project> [--output <dir>]",
     "",
@@ -10014,6 +10021,81 @@ async function runLookup(rest, ctx) {
   ctx.stdoutWrite(JSON.stringify(entry));
   return 0;
 }
+function artifactPaths(value) {
+  if (!isRecord3(value)) return [];
+  return Object.values(value).flatMap(
+    (descriptor) => isRecord3(descriptor) && typeof descriptor.path === "string" ? [descriptor.path] : []
+  );
+}
+function unknownVerificationFacts() {
+  return {
+    dependencies: [],
+    output: {
+      status: "unknown",
+      availability: "unknown",
+      freshness: "unknown"
+    },
+    producer: { state: "unknown" }
+  };
+}
+function sourceVerificationFacts(entry, declaration) {
+  if (declaration === void 0) return unknownVerificationFacts();
+  if (declaration.format === "meta.json" || declaration.format === "pack.ts") {
+    return {
+      dependencies: [],
+      output: {
+        status: "unproduced",
+        availability: "unknown",
+        freshness: "unknown"
+      },
+      producer: { state: "not-run" }
+    };
+  }
+  if (declaration.value.schemaVersion === "3.0.0") {
+    const parsed = parsePackSourceJson(declaration.value);
+    if (!parsed.ok || parsed.value.format !== "direct" || entry.sourceKey === void 0) {
+      return {
+        dependencies: [],
+        output: {
+          status: "unproduced",
+          availability: "unknown",
+          freshness: "unknown"
+        },
+        producer: { state: "not-run" }
+      };
+    }
+    const asset2 = parsed.value.assets[entry.sourceKey];
+    return {
+      dependencies: asset2?.refs ?? [],
+      output: {
+        status: "unproduced",
+        availability: "unknown",
+        freshness: "unknown"
+      },
+      producer: { state: "not-run" }
+    };
+  }
+  const asset = declaration.value.assets.find(
+    (candidate) => candidate.guid.toLowerCase() === entry.guid.toLowerCase()
+  );
+  if (asset === void 0 || asset.execution !== "direct" && asset.execution !== "cooked") {
+    return unknownVerificationFacts();
+  }
+  return {
+    dependencies: asset.refs,
+    output: {
+      // A validated legacy package row is the only published evidence this
+      // offline command reads. Artifact bytes and cook receipts remain
+      // producer-owned, so availability/freshness stay explicitly unknown.
+      status: "produced",
+      availability: "unknown",
+      freshness: "unknown",
+      packagePath: entry.sourcePath,
+      ...asset.artifacts === void 0 ? {} : { artifactPaths: artifactPaths(asset.artifacts) }
+    },
+    producer: { state: "published" }
+  };
+}
 async function runVerify(rest, ctx) {
   if (rest.some((value) => value === "--guid")) return runEvidence(rest, ctx);
   try {
@@ -10035,10 +10117,66 @@ async function runVerify(rest, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const result = await scanEntries([cwd], ctx);
   if (!result.ok) return 1;
-  const materialCount = result.value.filter((e) => e.kind === "material").length;
-  ctx.stdoutWrite(`material-validated: ${materialCount}`);
+  ctx.stdoutWrite(JSON.stringify(createAssetVerificationReport(cwd, result)));
   return 0;
 }
+function createAssetVerificationReport(root, result) {
+  const declarations = result.declarations;
+  const sourcePaths = [...declarations.keys()].sort();
+  const scriptablePackSources = [...declarations.values()].filter(
+    (declaration) => declaration.format === "pack.ts"
+  ).sort((left, right) => left.sourcePath.localeCompare(right.sourcePath));
+  const emittedEntries = result.value.slice(0, ASSET_VERIFY_LIMIT);
+  const facts = emittedEntries.map(
+    (entry) => sourceVerificationFacts(entry, declarations.get(entry.sourcePath))
+  );
+  const materialCount = result.value.filter((e) => e.kind === "material").length;
+  return {
+    schemaVersion: "asset-verification-v1",
+    root,
+    scope: {
+      sourceCount: sourcePaths.length,
+      assetCount: result.value.length,
+      sourcePaths: sourcePaths.slice(0, ASSET_VERIFY_LIMIT),
+      omittedSourceCount: Math.max(0, sourcePaths.length - ASSET_VERIFY_LIMIT),
+      assetLimit: ASSET_VERIFY_LIMIT,
+      truncated: result.value.length > ASSET_VERIFY_LIMIT,
+      scriptablePackSourceCount: scriptablePackSources.length,
+      scriptablePackSources: scriptablePackSources.slice(0, ASSET_VERIFY_LIMIT).map((source) => ({
+        sourcePath: source.sourcePath,
+        packageId: source.value.packageId,
+        output: "unproduced",
+        reason: "producer-not-run"
+      })),
+      omittedScriptablePackSourceCount: Math.max(
+        0,
+        scriptablePackSources.length - ASSET_VERIFY_LIMIT
+      )
+    },
+    assets: emittedEntries.map((entry, index) => ({
+      guid: entry.guid,
+      type: entry.kind,
+      source: {
+        path: entry.sourcePath,
+        format: declarations.get(entry.sourcePath)?.format ?? "pack.json",
+        role: "author",
+        ...entry.sourceRevision === void 0 ? {} : { revision: entry.sourceRevision }
+      },
+      ...facts[index],
+      ...entry.name === void 0 ? {} : { name: entry.name },
+      ...entry.sourceKey === void 0 ? {} : { sourceKey: entry.sourceKey },
+      ...entry.sourceIndex === void 0 ? {} : { sourceIndex: entry.sourceIndex }
+    })),
+    summary: {
+      assetCount: result.value.length,
+      emittedAssetCount: emittedEntries.length,
+      materialCount,
+      unproducedAssetCount: facts.filter((value) => value.output.status === "unproduced").length,
+      unknownAssetCount: facts.filter((value) => value.output.status === "unknown").length,
+      unmaterializedScriptablePackCount: scriptablePackSources.length
+    }
+  };
+}
 function parseEvidenceOptions(rest, ctx) {
   try {
     const parsed = parseArgs({
@@ -10215,6 +10353,6 @@ if (isBinEntry) {
   process.exit(exitCode);
 }
 
-export { runAtlas, runCliAsset, scanEntries };
+export { createAssetVerificationReport, runAtlas, runCliAsset, scanEntries };
 //# sourceMappingURL=cli-asset.mjs.map
 //# sourceMappingURL=cli-asset.mjs.map