@jeger-ai/opengantry 3.2.4 → 3.2.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -3
- package/dist/cli/commands/events-push.d.ts +9 -0
- package/dist/cli/commands/events-push.d.ts.map +1 -0
- package/dist/cli/commands/events-push.js +84 -0
- package/dist/cli/commands/events-push.js.map +1 -0
- package/dist/cli/commands/report.d.ts +8 -0
- package/dist/cli/commands/report.d.ts.map +1 -0
- package/dist/cli/commands/report.js +23 -0
- package/dist/cli/commands/report.js.map +1 -0
- package/dist/cli/commands/tmvc-guard.d.ts.map +1 -1
- package/dist/cli/commands/tmvc-guard.js +20 -0
- package/dist/cli/commands/tmvc-guard.js.map +1 -1
- package/dist/cli/commands/verify.d.ts.map +1 -1
- package/dist/cli/commands/verify.js +28 -0
- package/dist/cli/commands/verify.js.map +1 -1
- package/dist/cli/kernel.d.ts +3 -2
- package/dist/cli/kernel.d.ts.map +1 -1
- package/dist/cli/kernel.js +2 -1
- package/dist/cli/kernel.js.map +1 -1
- package/dist/cli/lib/atomic-fs.d.ts +3 -0
- package/dist/cli/lib/atomic-fs.d.ts.map +1 -1
- package/dist/cli/lib/atomic-fs.js +39 -0
- package/dist/cli/lib/atomic-fs.js.map +1 -1
- package/dist/cli/lib/constants.d.ts +2 -0
- package/dist/cli/lib/constants.d.ts.map +1 -1
- package/dist/cli/lib/constants.js +2 -0
- package/dist/cli/lib/constants.js.map +1 -1
- package/dist/cli/lib/context-feed-remediation.d.ts +2 -2
- package/dist/cli/lib/context-feed-remediation.d.ts.map +1 -1
- package/dist/cli/lib/context-feed-remediation.js +28 -26
- package/dist/cli/lib/context-feed-remediation.js.map +1 -1
- package/dist/cli/lib/context-feed-store.d.ts +10 -2
- package/dist/cli/lib/context-feed-store.d.ts.map +1 -1
- package/dist/cli/lib/context-feed-store.js +8 -28
- package/dist/cli/lib/context-feed-store.js.map +1 -1
- package/dist/cli/lib/event-spool.d.ts +17 -0
- package/dist/cli/lib/event-spool.d.ts.map +1 -0
- package/dist/cli/lib/event-spool.js +57 -0
- package/dist/cli/lib/event-spool.js.map +1 -0
- package/dist/cli/lib/gate-log-writer.d.ts +5 -0
- package/dist/cli/lib/gate-log-writer.d.ts.map +1 -0
- package/dist/cli/lib/gate-log-writer.js +29 -0
- package/dist/cli/lib/gate-log-writer.js.map +1 -0
- package/dist/cli/lib/git-metrics.d.ts +12 -0
- package/dist/cli/lib/git-metrics.d.ts.map +1 -1
- package/dist/cli/lib/git-metrics.js +34 -11
- package/dist/cli/lib/git-metrics.js.map +1 -1
- package/dist/cli/lib/gxt-error-codes.d.ts +1 -0
- package/dist/cli/lib/gxt-error-codes.d.ts.map +1 -1
- package/dist/cli/lib/gxt-error-codes.js +1 -0
- package/dist/cli/lib/gxt-error-codes.js.map +1 -1
- package/dist/cli/lib/ingest-wait.d.ts +21 -0
- package/dist/cli/lib/ingest-wait.d.ts.map +1 -0
- package/dist/cli/lib/ingest-wait.js +24 -0
- package/dist/cli/lib/ingest-wait.js.map +1 -0
- package/dist/cli/lib/org-export-config.d.ts +2 -0
- package/dist/cli/lib/org-export-config.d.ts.map +1 -1
- package/dist/cli/lib/org-export-config.js +11 -2
- package/dist/cli/lib/org-export-config.js.map +1 -1
- package/dist/cli/lib/report-demo-fixtures.d.ts +8 -0
- package/dist/cli/lib/report-demo-fixtures.d.ts.map +1 -0
- package/dist/cli/lib/report-demo-fixtures.js +48 -0
- package/dist/cli/lib/report-demo-fixtures.js.map +1 -0
- package/dist/cli/lib/report-demo-mode.d.ts +8 -0
- package/dist/cli/lib/report-demo-mode.d.ts.map +1 -0
- package/dist/cli/lib/report-demo-mode.js +33 -0
- package/dist/cli/lib/report-demo-mode.js.map +1 -0
- package/dist/cli/lib/report-overview-projector.d.ts +53 -0
- package/dist/cli/lib/report-overview-projector.d.ts.map +1 -0
- package/dist/cli/lib/report-overview-projector.js +179 -0
- package/dist/cli/lib/report-overview-projector.js.map +1 -0
- package/dist/cli/lib/report-projector.d.ts +60 -0
- package/dist/cli/lib/report-projector.d.ts.map +1 -0
- package/dist/cli/lib/report-projector.js +166 -0
- package/dist/cli/lib/report-projector.js.map +1 -0
- package/dist/cli/lib/report-server.d.ts +20 -0
- package/dist/cli/lib/report-server.d.ts.map +1 -0
- package/dist/cli/lib/report-server.js +221 -0
- package/dist/cli/lib/report-server.js.map +1 -0
- package/dist/cli/lib/report-template-css.d.ts +4 -0
- package/dist/cli/lib/report-template-css.d.ts.map +1 -0
- package/dist/cli/lib/report-template-css.js +196 -0
- package/dist/cli/lib/report-template-css.js.map +1 -0
- package/dist/cli/lib/report-template-html.d.ts +6 -0
- package/dist/cli/lib/report-template-html.d.ts.map +1 -0
- package/dist/cli/lib/report-template-html.js +189 -0
- package/dist/cli/lib/report-template-html.js.map +1 -0
- package/dist/cli/lib/report-template-overview.d.ts +3 -0
- package/dist/cli/lib/report-template-overview.d.ts.map +1 -0
- package/dist/cli/lib/report-template-overview.js +200 -0
- package/dist/cli/lib/report-template-overview.js.map +1 -0
- package/dist/cli/lib/report-template-shared.d.ts +8 -0
- package/dist/cli/lib/report-template-shared.d.ts.map +1 -0
- package/dist/cli/lib/report-template-shared.js +52 -0
- package/dist/cli/lib/report-template-shared.js.map +1 -0
- package/dist/cli/lib/runtime-exec.d.ts.map +1 -1
- package/dist/cli/lib/runtime-exec.js +1 -1
- package/dist/cli/lib/runtime-exec.js.map +1 -1
- package/dist/cli/lib/telemetry-log.d.ts +1 -1
- package/dist/cli/lib/telemetry-log.d.ts.map +1 -1
- package/dist/cli/lib/telemetry-log.js +14 -1
- package/dist/cli/lib/telemetry-log.js.map +1 -1
- package/dist/cli/lib/verdict-expected.d.ts +5 -1
- package/dist/cli/lib/verdict-expected.d.ts.map +1 -1
- package/dist/cli/lib/verdict-expected.js +33 -9
- package/dist/cli/lib/verdict-expected.js.map +1 -1
- package/dist/cli/lib/verify-engine.d.ts +6 -2
- package/dist/cli/lib/verify-engine.d.ts.map +1 -1
- package/dist/cli/lib/verify-engine.js +58 -171
- package/dist/cli/lib/verify-engine.js.map +1 -1
- package/dist/cli/lib/verify-export.d.ts.map +1 -1
- package/dist/cli/lib/verify-export.js +18 -2
- package/dist/cli/lib/verify-export.js.map +1 -1
- package/dist/cli/lib/verify-failure.d.ts +2 -0
- package/dist/cli/lib/verify-failure.d.ts.map +1 -1
- package/dist/cli/lib/verify-finding-fingerprint.d.ts +26 -0
- package/dist/cli/lib/verify-finding-fingerprint.d.ts.map +1 -0
- package/dist/cli/lib/verify-finding-fingerprint.js +117 -0
- package/dist/cli/lib/verify-finding-fingerprint.js.map +1 -0
- package/dist/cli/lib/verify-finding-gate-projector.d.ts +4 -0
- package/dist/cli/lib/verify-finding-gate-projector.d.ts.map +1 -0
- package/dist/cli/lib/verify-finding-gate-projector.js +53 -0
- package/dist/cli/lib/verify-finding-gate-projector.js.map +1 -0
- package/dist/cli/lib/verify-finding.d.ts +16 -3
- package/dist/cli/lib/verify-finding.d.ts.map +1 -1
- package/dist/cli/lib/verify-finding.js +9 -3
- package/dist/cli/lib/verify-finding.js.map +1 -1
- package/dist/cli/lib/verify-options.d.ts +15 -0
- package/dist/cli/lib/verify-options.d.ts.map +1 -1
- package/dist/cli/lib/verify-payload.d.ts +4 -3
- package/dist/cli/lib/verify-payload.d.ts.map +1 -1
- package/dist/cli/lib/verify-payload.js +13 -13
- package/dist/cli/lib/verify-payload.js.map +1 -1
- package/dist/cli/lib/verify-phase-clock.d.ts +16 -0
- package/dist/cli/lib/verify-phase-clock.d.ts.map +1 -0
- package/dist/cli/lib/verify-phase-clock.js +41 -0
- package/dist/cli/lib/verify-phase-clock.js.map +1 -0
- package/dist/cli/lib/verify-phase-steps.d.ts +54 -0
- package/dist/cli/lib/verify-phase-steps.d.ts.map +1 -0
- package/dist/cli/lib/verify-phase-steps.js +158 -0
- package/dist/cli/lib/verify-phase-steps.js.map +1 -0
- package/dist/cli/lib/verify-presenters.d.ts +2 -0
- package/dist/cli/lib/verify-presenters.d.ts.map +1 -1
- package/dist/cli/lib/verify-presenters.js +87 -14
- package/dist/cli/lib/verify-presenters.js.map +1 -1
- package/dist/cli/lib/verify-remediation-pipeline.d.ts +34 -0
- package/dist/cli/lib/verify-remediation-pipeline.d.ts.map +1 -0
- package/dist/cli/lib/verify-remediation-pipeline.js +96 -0
- package/dist/cli/lib/verify-remediation-pipeline.js.map +1 -0
- package/dist/cli/lib/verify-run-ring.d.ts +56 -0
- package/dist/cli/lib/verify-run-ring.d.ts.map +1 -0
- package/dist/cli/lib/verify-run-ring.js +165 -0
- package/dist/cli/lib/verify-run-ring.js.map +1 -0
- package/dist/cli/lib/verify-run.d.ts.map +1 -1
- package/dist/cli/lib/verify-run.js +36 -6
- package/dist/cli/lib/verify-run.js.map +1 -1
- package/dist/cli/lib/version.gen.d.ts +1 -1
- package/dist/cli/lib/version.gen.js +1 -1
- package/dist/cli/lib/virtual-scratch-store.d.ts.map +1 -1
- package/dist/cli/lib/virtual-scratch-store.js +2 -16
- package/dist/cli/lib/virtual-scratch-store.js.map +1 -1
- package/dist/cli/program-core.d.ts.map +1 -1
- package/dist/cli/program-core.js +17 -0
- package/dist/cli/program-core.js.map +1 -1
- package/dist/cli/program-workflow.d.ts.map +1 -1
- package/dist/cli/program-workflow.js +13 -0
- package/dist/cli/program-workflow.js.map +1 -1
- package/package.json +1 -1
- package/templates/.gitagent/foreman/SUBSTRATE.version.json +1 -1
- package/templates/.github/workflows/gxt-attest-ingest.yml +26 -0
- package/templates/integrations/compatibility.json +1 -1
|
@@ -3,7 +3,7 @@ import fs from "node:fs";
|
|
|
3
3
|
import path from "node:path";
|
|
4
4
|
import { GantryUserError } from "./errors.js";
|
|
5
5
|
import { parseMissionFile, assertMissionGatePresent } from "./missions/parser.js";
|
|
6
|
-
import {
|
|
6
|
+
import { REL_ORG_EXPORT_LOCAL, resolveOrgId } from "./org-export-config.js";
|
|
7
7
|
/** Canonical digest for a passed verify with zero advisory findings. */
|
|
8
8
|
export const PASSED_FINDINGS_DIGEST = crypto
|
|
9
9
|
.createHash("sha256")
|
|
@@ -15,7 +15,20 @@ function sha256File(absPath) {
|
|
|
15
15
|
function missionAbsPath(repoRoot, missionRelPath) {
|
|
16
16
|
return path.isAbsolute(missionRelPath) ? missionRelPath : path.join(repoRoot, missionRelPath);
|
|
17
17
|
}
|
|
18
|
-
|
|
18
|
+
function orgExportMtimeMs(repoRoot) {
|
|
19
|
+
const abs = path.join(repoRoot, REL_ORG_EXPORT_LOCAL);
|
|
20
|
+
try {
|
|
21
|
+
return fs.statSync(abs).mtimeMs;
|
|
22
|
+
}
|
|
23
|
+
catch {
|
|
24
|
+
return undefined;
|
|
25
|
+
}
|
|
26
|
+
}
|
|
27
|
+
const claimsCache = new Map();
|
|
28
|
+
function cacheKey(repoRoot, missionRelPath, missionMtimeMs, missionSize, orgMtimeMs) {
|
|
29
|
+
return `${repoRoot}\0${missionRelPath}\0${missionMtimeMs}\0${missionSize}\0${orgMtimeMs ?? ""}`;
|
|
30
|
+
}
|
|
31
|
+
/** Build server-side verdict claims (uncached primitive). */
|
|
19
32
|
export function buildVerdictExpectedClaims(repoRoot, missionRelPath) {
|
|
20
33
|
const missionAbs = missionAbsPath(repoRoot, missionRelPath);
|
|
21
34
|
const mission = parseMissionFile(repoRoot, missionRelPath);
|
|
@@ -24,13 +37,7 @@ export function buildVerdictExpectedClaims(repoRoot, missionRelPath) {
|
|
|
24
37
|
if (!msnId) {
|
|
25
38
|
throw new GantryUserError("MISSION_MSN_MISSING", "buildVerdictExpectedClaims: mission msn_id required", missionRelPath, 2);
|
|
26
39
|
}
|
|
27
|
-
|
|
28
|
-
try {
|
|
29
|
-
org_id = resolveOrgExportConfig(repoRoot).org_id;
|
|
30
|
-
}
|
|
31
|
-
catch (e) {
|
|
32
|
-
throw new GantryUserError("ORG_EXPORT_CONFIG_MISSING", "buildVerdictExpectedClaims requires org export config (GANTRY_ORG_ID + GANTRY_ORG_PEPPER or ORG.export.local)", e instanceof Error ? e.message : String(e), 2);
|
|
33
|
-
}
|
|
40
|
+
const org_id = resolveOrgId(repoRoot);
|
|
34
41
|
return {
|
|
35
42
|
msn_id: msnId,
|
|
36
43
|
mission_sha256: sha256File(missionAbs),
|
|
@@ -39,4 +46,21 @@ export function buildVerdictExpectedClaims(repoRoot, missionRelPath) {
|
|
|
39
46
|
org_id,
|
|
40
47
|
};
|
|
41
48
|
}
|
|
49
|
+
/** Memoized promote-path entry: recomputes when mission or org export file changes. */
|
|
50
|
+
export function verdictClaimsFor(repoRoot, missionRelPath) {
|
|
51
|
+
const missionAbs = missionAbsPath(repoRoot, missionRelPath);
|
|
52
|
+
const missionStat = fs.statSync(missionAbs);
|
|
53
|
+
const orgMtime = orgExportMtimeMs(repoRoot);
|
|
54
|
+
const key = cacheKey(repoRoot, missionRelPath, missionStat.mtimeMs, missionStat.size, orgMtime);
|
|
55
|
+
const hit = claimsCache.get(key);
|
|
56
|
+
if (hit)
|
|
57
|
+
return hit;
|
|
58
|
+
const claims = buildVerdictExpectedClaims(repoRoot, missionRelPath);
|
|
59
|
+
claimsCache.set(key, claims);
|
|
60
|
+
return claims;
|
|
61
|
+
}
|
|
62
|
+
/** Test-only: clear memoization between cases. */
|
|
63
|
+
export function clearVerdictClaimsCache() {
|
|
64
|
+
claimsCache.clear();
|
|
65
|
+
}
|
|
42
66
|
//# sourceMappingURL=verdict-expected.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verdict-expected.js","sourceRoot":"","sources":["../../../src/cli/lib/verdict-expected.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,
|
|
1
|
+
{"version":3,"file":"verdict-expected.js","sourceRoot":"","sources":["../../../src/cli/lib/verdict-expected.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAE5E,wEAAwE;AACxE,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM;KACzC,UAAU,CAAC,QAAQ,CAAC;KACpB,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;KACpB,MAAM,CAAC,KAAK,CAAC,CAAC;AAUjB,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,cAAsB;IAC9D,OAAO,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;AAChG,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAgB;IACxC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IACtD,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,WAAW,GAAG,IAAI,GAAG,EAAiC,CAAC;AAE7D,SAAS,QAAQ,CACf,QAAgB,EAChB,cAAsB,EACtB,cAAsB,EACtB,WAAmB,EACnB,UAA8B;IAE9B,OAAO,GAAG,QAAQ,KAAK,cAAc,KAAK,cAAc,KAAK,WAAW,KAAK,UAAU,IAAI,EAAE,EAAE,CAAC;AAClG,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,0BAA0B,CACxC,QAAgB,EAChB,cAAsB;IAEtB,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,gBAAgB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC3D,wBAAwB,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IACpC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CACvB,qBAAqB,EACrB,qDAAqD,EACrD,cAAc,EACd,CAAC,CACF,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO;QACL,MAAM,EAAE,KAAK;QACb,cAAc,EAAE,UAAU,CAAC,UAAU,CAAC;QACtC,eAAe,EAAE,sBAAsB;QACvC,YAAY,EAAE,OAAO,CAAC,IAAK,CAAC,OAAO,CAAC,IAAI,EAAE;QAC1C,MAAM;KACP,CAAC;AACJ,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,gBAAgB,CAC9B,QAAgB,EAChB,cAAsB;IAEtB,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,QAAQ,CAClB,QAAQ,EACR,cAAc,EACd,WAAW,CAAC,OAAO,EACnB,WAAW,CAAC,IAAI,EAChB,QAAQ,CACT,CAAC;IACF,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG;QAAE,OAAO,GAAG,CAAC;IACpB,MAAM,MAAM,GAAG,0BAA0B,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACpE,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,uBAAuB;IACrC,WAAW,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC"}
|
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
import type { KpiFinding, Manifest, ParsedMission } from "./types.js";
|
|
2
|
-
import { type TraceVerifyWarning } from "./trace.js";
|
|
3
2
|
import type { VerifyPhaseFailure } from "./verify-failure.js";
|
|
3
|
+
import type { TraceVerifyWarning } from "./trace.js";
|
|
4
4
|
import type { VerifyOptions } from "./verify-options.js";
|
|
5
|
+
import { type VerifyPhaseTiming } from "./verify-phase-clock.js";
|
|
5
6
|
/** Discover mission files changed between baseRef and HEAD (inclusive triple-dot). */
|
|
6
7
|
export declare function discoverChangedMissionFiles(repoRoot: string, baseRef: string): string[];
|
|
7
8
|
export interface VerifyPhaseSuccess {
|
|
@@ -16,8 +17,11 @@ export interface VerifyPhaseSuccess {
|
|
|
16
17
|
defensiveWarnings?: string[];
|
|
17
18
|
defensiveAudits?: string[];
|
|
18
19
|
traceEvidenceSkippedUncommitted?: number;
|
|
20
|
+
phaseTimings: VerifyPhaseTiming[];
|
|
19
21
|
}
|
|
20
|
-
export type VerifyPhaseResult = VerifyPhaseFailure
|
|
22
|
+
export type VerifyPhaseResult = (VerifyPhaseFailure & {
|
|
23
|
+
phaseTimings: VerifyPhaseTiming[];
|
|
24
|
+
}) | VerifyPhaseSuccess;
|
|
21
25
|
export declare function resolveExecutorLogPath(root: string, options: VerifyOptions): string;
|
|
22
26
|
/** Single source of truth for verify phase evaluation (no logging or exit codes). */
|
|
23
27
|
export declare function evaluateVerifyPhases(root: string, mission: ParsedMission, options: VerifyOptions, manifest: Manifest): VerifyPhaseResult;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-engine.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-engine.ts"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"verify-engine.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-engine.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAY,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhF,OAAO,KAAK,EAAsB,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAClF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAOrD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAwC,KAAK,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAsBvG,sFAAsF;AACtF,wBAAgB,2BAA2B,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAcvF;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,IAAI,CAAC;IACT,OAAO,EAAE,MAAM,GAAG,eAAe,CAAC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,mBAAmB,CAAC,EAAE,UAAU,EAAE,CAAC;IACnC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,+BAA+B,CAAC,EAAE,MAAM,CAAC;IACzC,YAAY,EAAE,iBAAiB,EAAE,CAAC;CACnC;AAED,MAAM,MAAM,iBAAiB,GACzB,CAAC,kBAAkB,GAAG;IAAE,YAAY,EAAE,iBAAiB,EAAE,CAAA;CAAE,CAAC,GAC5D,kBAAkB,CAAC;AAEvB,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,MAAM,CAEnF;AA+ED,qFAAqF;AACrF,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,QAAQ,GACjB,iBAAiB,CAgFnB"}
|
|
@@ -4,18 +4,15 @@
|
|
|
4
4
|
* verify-hints (remediation) → verify-presenters (sinks) → verify-run (orchestration).
|
|
5
5
|
*/
|
|
6
6
|
import path from "node:path";
|
|
7
|
-
import { toPosixRel } from "./cli-io.js";
|
|
7
|
+
import { formatRepoRelative, toPosixRel } from "./cli-io.js";
|
|
8
8
|
import { gitRunOk } from "./git.js";
|
|
9
|
-
import {
|
|
10
|
-
import { gatePassed, runGate, resolveGateWorkDir } from "./gate.js";
|
|
11
|
-
import { evaluateKpiPhase } from "./kpi-engine.js";
|
|
12
|
-
import { evaluateDefensiveGuardPhase } from "./verify-defensive-phase.js";
|
|
9
|
+
import { REL_MISSIONS_PREFIX } from "./git-proof.js";
|
|
13
10
|
import { isLegislativeStub } from "./missions/formatter.js";
|
|
14
|
-
import {
|
|
15
|
-
import { evaluateInterrogationPhase } from "./verify-interrogation.js";
|
|
16
|
-
import { isPendingStatus, verifyTraceEvidenceFreshness, verifyTraceRows, defaultExecutorLogPath } from "./trace.js";
|
|
17
|
-
import { errorMessage } from "./cli-io.js";
|
|
11
|
+
import { defaultExecutorLogPath } from "./trace.js";
|
|
18
12
|
import { createVirtualFlightId, purgeVirtualFlightDir, scavengeStaleVirtualFlights, writeGateCaptureSync, } from "./virtual-scratch-store.js";
|
|
13
|
+
import { VerifyPhaseClock } from "./verify-phase-clock.js";
|
|
14
|
+
import { evaluateInterrogationPhase } from "./verify-interrogation.js";
|
|
15
|
+
import { evaluateDefensivePhase, evaluateGatePhase, evaluateGitProof, evaluateKpiGatePhase, evaluateTracePhase, } from "./verify-phase-steps.js";
|
|
19
16
|
const MISSION_EXTENSIONS = new Set([".yaml", ".yml", ".md"]);
|
|
20
17
|
function isMissionFile(repoRel) {
|
|
21
18
|
const norm = repoRel.replace(/\\/g, "/");
|
|
@@ -41,109 +38,9 @@ export function discoverChangedMissionFiles(repoRoot, baseRef) {
|
|
|
41
38
|
.filter((line) => line.length > 0 && isMissionFile(line))
|
|
42
39
|
.map((rel) => toPosixRel(repoRoot, path.join(repoRoot, rel)));
|
|
43
40
|
}
|
|
44
|
-
function gitProofFailure(executorLogPath, message) {
|
|
45
|
-
return {
|
|
46
|
-
ok: false,
|
|
47
|
-
phase: "git_proof",
|
|
48
|
-
message,
|
|
49
|
-
exitCode: 1,
|
|
50
|
-
executorLogPath,
|
|
51
|
-
gitProofMessage: message,
|
|
52
|
-
};
|
|
53
|
-
}
|
|
54
41
|
export function resolveExecutorLogPath(root, options) {
|
|
55
42
|
return options.executorLog ? path.resolve(root, options.executorLog) : defaultExecutorLogPath(root);
|
|
56
43
|
}
|
|
57
|
-
function evaluateGitProof(root, mission, options, executorLogPath) {
|
|
58
|
-
try {
|
|
59
|
-
const gitProofWarnings = [];
|
|
60
|
-
const proofMsnId = assertPlannerMissionProof(root, mission.rawPath, {
|
|
61
|
-
msnId: mission.msnId ?? undefined,
|
|
62
|
-
scanDepth: options.scanDepth,
|
|
63
|
-
warnings: gitProofWarnings,
|
|
64
|
-
});
|
|
65
|
-
return { kind: "ok", proofMsnId, warnings: gitProofWarnings };
|
|
66
|
-
}
|
|
67
|
-
catch (e) {
|
|
68
|
-
return { kind: "fail", failure: gitProofFailure(executorLogPath, errorMessage(e)) };
|
|
69
|
-
}
|
|
70
|
-
}
|
|
71
|
-
function evaluateGatePhase(root, gate, options, executorLogPath) {
|
|
72
|
-
const gateResult = runGate(resolveGateWorkDir(root, options), gate);
|
|
73
|
-
if (gatePassed(gateResult, gate.successSubstring))
|
|
74
|
-
return { failure: null, gateResult };
|
|
75
|
-
return {
|
|
76
|
-
failure: {
|
|
77
|
-
ok: false,
|
|
78
|
-
phase: "gate",
|
|
79
|
-
message: "GATE FAILED",
|
|
80
|
-
exitCode: 1,
|
|
81
|
-
executorLogPath,
|
|
82
|
-
gateCommand: gate.command,
|
|
83
|
-
gateStdout: gateResult.stdout,
|
|
84
|
-
gateStderr: gateResult.stderr,
|
|
85
|
-
gateExitCode: gateResult.exitCode ?? undefined,
|
|
86
|
-
},
|
|
87
|
-
gateResult,
|
|
88
|
-
};
|
|
89
|
-
}
|
|
90
|
-
function evaluateTracePhase(input) {
|
|
91
|
-
const { root, manifest, mission, options, executorLogPath } = input;
|
|
92
|
-
const hasPending = mission.traceRows.some((row) => isPendingStatus(row.status));
|
|
93
|
-
if (hasPending) {
|
|
94
|
-
return {
|
|
95
|
-
kind: "fail",
|
|
96
|
-
failure: {
|
|
97
|
-
ok: false,
|
|
98
|
-
phase: "trace_pending",
|
|
99
|
-
message: "Trace rows still PENDING — executor must execute, update mission trace row, then verify",
|
|
100
|
-
exitCode: 1,
|
|
101
|
-
executorLogPath,
|
|
102
|
-
gateCommand: mission.gate?.command,
|
|
103
|
-
},
|
|
104
|
-
};
|
|
105
|
-
}
|
|
106
|
-
const traceResult = verifyTraceRows(executorLogPath, mission.traceRows, {
|
|
107
|
-
fuzzyNumericAnchor: options.fuzzyTrace === true,
|
|
108
|
-
strictTrace: options.strictTrace === true,
|
|
109
|
-
});
|
|
110
|
-
if (traceResult.failures.length > 0) {
|
|
111
|
-
const first = traceResult.failures[0];
|
|
112
|
-
return {
|
|
113
|
-
kind: "fail",
|
|
114
|
-
failure: {
|
|
115
|
-
ok: false,
|
|
116
|
-
phase: "trace",
|
|
117
|
-
message: first.reason,
|
|
118
|
-
exitCode: 1,
|
|
119
|
-
executorLogPath,
|
|
120
|
-
traceKind: first.kind,
|
|
121
|
-
traceQuote: first.row.traceQuote,
|
|
122
|
-
traceReason: first.reason,
|
|
123
|
-
},
|
|
124
|
-
};
|
|
125
|
-
}
|
|
126
|
-
const evidence = verifyTraceEvidenceFreshness(root, manifest, mission.skillKey, executorLogPath, traceResult.resolvedLines, { skipStaleEvidence: options.skipStaleEvidence === true });
|
|
127
|
-
if (evidence.failures.length > 0) {
|
|
128
|
-
const first = evidence.failures[0];
|
|
129
|
-
return {
|
|
130
|
-
kind: "fail",
|
|
131
|
-
failure: {
|
|
132
|
-
ok: false,
|
|
133
|
-
phase: "trace",
|
|
134
|
-
message: first.reason,
|
|
135
|
-
exitCode: 1,
|
|
136
|
-
executorLogPath,
|
|
137
|
-
traceKind: "stale_evidence",
|
|
138
|
-
traceQuote: first.row.traceQuote,
|
|
139
|
-
traceReason: first.reason,
|
|
140
|
-
attestationCommit: first.attestationCommit,
|
|
141
|
-
stalePaths: first.stalePaths,
|
|
142
|
-
},
|
|
143
|
-
};
|
|
144
|
-
}
|
|
145
|
-
return { kind: "ok", warnings: traceResult.warnings, skippedUncommitted: evidence.skippedUncommitted };
|
|
146
|
-
}
|
|
147
44
|
function beginVirtualCapture(root, mission) {
|
|
148
45
|
if (!mission.virtualCapture)
|
|
149
46
|
return null;
|
|
@@ -161,68 +58,58 @@ function recordVirtualGateCapture(root, flightId, gate, gateResult) {
|
|
|
161
58
|
stderr: gateResult.stderr,
|
|
162
59
|
});
|
|
163
60
|
}
|
|
164
|
-
function
|
|
165
|
-
|
|
166
|
-
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
return
|
|
174
|
-
|
|
175
|
-
|
|
176
|
-
|
|
177
|
-
|
|
178
|
-
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
182
|
-
return { kind: "fail", failure: kpiOutcome.failure };
|
|
183
|
-
if (kpiOutcome?.kind === "ok") {
|
|
184
|
-
kpiWarnings = kpiOutcome.warnings;
|
|
185
|
-
if (kpiOutcome.advisoryFindings && kpiOutcome.advisoryFindings.length > 0) {
|
|
186
|
-
kpiAdvisoryFindings = kpiOutcome.advisoryFindings;
|
|
187
|
-
}
|
|
61
|
+
function failurePhaseToClockId(phase) {
|
|
62
|
+
switch (phase) {
|
|
63
|
+
case "git_proof":
|
|
64
|
+
return "git_proof";
|
|
65
|
+
case "interrogation":
|
|
66
|
+
return "interrogation";
|
|
67
|
+
case "gate":
|
|
68
|
+
return "gate";
|
|
69
|
+
case "defensive":
|
|
70
|
+
return "defensive";
|
|
71
|
+
case "kpi":
|
|
72
|
+
return "kpi";
|
|
73
|
+
case "trace":
|
|
74
|
+
case "trace_pending":
|
|
75
|
+
return "trace";
|
|
76
|
+
default: {
|
|
77
|
+
const _exhaustive = phase;
|
|
78
|
+
return _exhaustive;
|
|
188
79
|
}
|
|
189
80
|
}
|
|
190
|
-
|
|
191
|
-
|
|
192
|
-
|
|
193
|
-
};
|
|
81
|
+
}
|
|
82
|
+
function failWithTimings(failure, clock) {
|
|
83
|
+
clock.markFailed(failurePhaseToClockId(failure.phase));
|
|
84
|
+
return { ...failure, phaseTimings: clock.finalize() };
|
|
194
85
|
}
|
|
195
86
|
function buildFullVerifySuccess(input) {
|
|
196
|
-
const { proofMsnId, executorLogPath, trace, gitProofWarnings,
|
|
87
|
+
const { proofMsnId, executorLogPath, trace, gitProofWarnings, defensive, kpi, phaseTimings } = input;
|
|
197
88
|
return {
|
|
198
89
|
ok: true,
|
|
199
90
|
outcome: "full",
|
|
200
91
|
proofMsnId,
|
|
201
92
|
executorLogPath,
|
|
202
93
|
traceWarnings: trace.warnings,
|
|
94
|
+
phaseTimings,
|
|
203
95
|
...(gitProofWarnings.length > 0 ? { gitProofWarnings } : {}),
|
|
204
|
-
...(
|
|
205
|
-
...(
|
|
206
|
-
|
|
207
|
-
|
|
208
|
-
...(extras.defensiveWarnings && extras.defensiveWarnings.length > 0
|
|
209
|
-
? { defensiveWarnings: extras.defensiveWarnings }
|
|
210
|
-
: {}),
|
|
211
|
-
...(extras.defensiveAudits && extras.defensiveAudits.length > 0
|
|
212
|
-
? { defensiveAudits: extras.defensiveAudits }
|
|
213
|
-
: {}),
|
|
96
|
+
...(kpi.warnings.length > 0 ? { kpiWarnings: kpi.warnings } : {}),
|
|
97
|
+
...(kpi.advisoryFindings.length > 0 ? { kpiAdvisoryFindings: kpi.advisoryFindings } : {}),
|
|
98
|
+
...(defensive.warnings.length > 0 ? { defensiveWarnings: defensive.warnings } : {}),
|
|
99
|
+
...(defensive.audits.length > 0 ? { defensiveAudits: defensive.audits } : {}),
|
|
214
100
|
traceEvidenceSkippedUncommitted: trace.skippedUncommitted > 0 ? trace.skippedUncommitted : undefined,
|
|
215
101
|
};
|
|
216
102
|
}
|
|
217
103
|
/** Single source of truth for verify phase evaluation (no logging or exit codes). */
|
|
218
104
|
export function evaluateVerifyPhases(root, mission, options, manifest) {
|
|
105
|
+
const clock = new VerifyPhaseClock();
|
|
219
106
|
const executorLogPath = resolveExecutorLogPath(root, options);
|
|
220
|
-
const proof = evaluateGitProof(root, mission, options, executorLogPath);
|
|
107
|
+
const proof = clock.timed("git_proof", () => evaluateGitProof(root, mission, options, executorLogPath));
|
|
221
108
|
if (proof.kind === "fail")
|
|
222
|
-
return proof.failure;
|
|
109
|
+
return failWithTimings(proof.failure, clock);
|
|
223
110
|
const { proofMsnId, warnings: proofWarnings } = proof;
|
|
224
111
|
const missionRel = formatRepoRelative(root, mission.rawPath);
|
|
225
|
-
const interrogation = evaluateInterrogationPhase({
|
|
112
|
+
const interrogation = clock.timed("interrogation", () => evaluateInterrogationPhase({
|
|
226
113
|
root,
|
|
227
114
|
manifest,
|
|
228
115
|
mission,
|
|
@@ -230,9 +117,9 @@ export function evaluateVerifyPhases(root, mission, options, manifest) {
|
|
|
230
117
|
options,
|
|
231
118
|
proofMsnId,
|
|
232
119
|
executorLogPath,
|
|
233
|
-
});
|
|
120
|
+
}));
|
|
234
121
|
if (interrogation.failure)
|
|
235
|
-
return interrogation.failure;
|
|
122
|
+
return failWithTimings(interrogation.failure, clock);
|
|
236
123
|
const gitProofWarnings = [...proofWarnings, ...interrogation.warnings];
|
|
237
124
|
if (options.prePush === true && isLegislativeStub(mission)) {
|
|
238
125
|
return {
|
|
@@ -241,45 +128,45 @@ export function evaluateVerifyPhases(root, mission, options, manifest) {
|
|
|
241
128
|
proofMsnId,
|
|
242
129
|
executorLogPath,
|
|
243
130
|
traceWarnings: [],
|
|
131
|
+
phaseTimings: clock.finalize(),
|
|
244
132
|
...(gitProofWarnings.length > 0 ? { gitProofWarnings } : {}),
|
|
245
133
|
};
|
|
246
134
|
}
|
|
247
135
|
const gate = mission.gate;
|
|
248
136
|
if (!gate) {
|
|
249
|
-
return {
|
|
137
|
+
return failWithTimings({
|
|
250
138
|
ok: false,
|
|
251
139
|
phase: "gate",
|
|
252
140
|
message: "Mission has no gate_command",
|
|
253
141
|
exitCode: 1,
|
|
254
142
|
executorLogPath,
|
|
255
|
-
};
|
|
143
|
+
}, clock);
|
|
256
144
|
}
|
|
257
145
|
const virtualFlightId = beginVirtualCapture(root, mission);
|
|
258
|
-
const
|
|
146
|
+
const phaseCtx = { root, manifest, mission, options, executorLogPath };
|
|
147
|
+
const gateOutcome = clock.timed("gate", () => evaluateGatePhase(root, gate, options, executorLogPath));
|
|
259
148
|
recordVirtualGateCapture(root, virtualFlightId, gate, gateOutcome.gateResult);
|
|
260
149
|
if (gateOutcome.failure)
|
|
261
|
-
return gateOutcome.failure;
|
|
262
|
-
const
|
|
263
|
-
|
|
264
|
-
|
|
265
|
-
|
|
266
|
-
|
|
267
|
-
|
|
268
|
-
|
|
269
|
-
if (postGate.kind === "fail")
|
|
270
|
-
return postGate.failure;
|
|
271
|
-
const trace = evaluateTracePhase({ root, manifest, mission, options, executorLogPath });
|
|
150
|
+
return failWithTimings(gateOutcome.failure, clock);
|
|
151
|
+
const defensive = clock.timed("defensive", () => evaluateDefensivePhase(phaseCtx));
|
|
152
|
+
if (defensive.kind === "fail")
|
|
153
|
+
return failWithTimings(defensive.failure, clock);
|
|
154
|
+
const kpi = clock.timed("kpi", () => evaluateKpiGatePhase(phaseCtx));
|
|
155
|
+
if (kpi.kind === "fail")
|
|
156
|
+
return failWithTimings(kpi.failure, clock);
|
|
157
|
+
const trace = clock.timed("trace", () => evaluateTracePhase(phaseCtx));
|
|
272
158
|
if (trace.kind === "fail")
|
|
273
|
-
return trace.failure;
|
|
274
|
-
if (virtualFlightId)
|
|
159
|
+
return failWithTimings(trace.failure, clock);
|
|
160
|
+
if (virtualFlightId)
|
|
275
161
|
purgeVirtualFlightDir(root, virtualFlightId);
|
|
276
|
-
}
|
|
277
162
|
return buildFullVerifySuccess({
|
|
278
163
|
proofMsnId,
|
|
279
164
|
executorLogPath,
|
|
280
165
|
trace,
|
|
281
166
|
gitProofWarnings,
|
|
282
|
-
|
|
167
|
+
defensive,
|
|
168
|
+
kpi,
|
|
169
|
+
phaseTimings: clock.finalize(),
|
|
283
170
|
});
|
|
284
171
|
}
|
|
285
172
|
//# sourceMappingURL=verify-engine.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-engine.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-engine.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;
|
|
1
|
+
{"version":3,"file":"verify-engine.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-engine.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AAKpD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,2BAA2B,EAC3B,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,gBAAgB,EAA8C,MAAM,yBAAyB,CAAC;AACvG,OAAO,EAAE,0BAA0B,EAAE,MAAM,2BAA2B,CAAC;AACvE,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,kBAAkB,GAInB,MAAM,yBAAyB,CAAC;AAEjC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAE7D,SAAS,aAAa,CAAC,OAAe;IACpC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,2BAA2B,CAAC,QAAgB,EAAE,OAAe;IAC3E,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE;QACxC,MAAM;QACN,aAAa;QACb,GAAG,OAAO,SAAS;QACnB,IAAI;QACJ,mBAAmB;KACpB,CAAC,CAAC;IACH,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,CAAC;IACnB,OAAO,MAAM;SACV,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAqBD,MAAM,UAAU,sBAAsB,CAAC,IAAY,EAAE,OAAsB;IACzE,OAAO,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACtG,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAY,EAAE,OAAsB;IAC/D,IAAI,CAAC,OAAO,CAAC,cAAc;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,QAAQ,GAAG,qBAAqB,EAAE,CAAC;IACzC,2BAA2B,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjE,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,wBAAwB,CAC/B,IAAY,EACZ,QAAuB,EACvB,IAAc,EACd,UAAqC;IAErC,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU;QAAE,OAAO;IACrC,oBAAoB,CAAC,IAAI,EAAE,QAAQ,EAAE;QACnC,YAAY,EAAE,IAAI,CAAC,OAAO;QAC1B,SAAS,EAAE,UAAU,CAAC,QAAQ;QAC9B,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,MAAM,EAAE,UAAU,CAAC,MAAM;KAC1B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAyB;IACtD,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,eAAe;YAClB,OAAO,eAAe,CAAC;QACzB,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf,KAAK,OAAO,CAAC;QACb,KAAK,eAAe;YAClB,OAAO,OAAO,CAAC;QACjB,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,KAAK,CAAC;YACjC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAA2B,EAAE,KAAuB;IAC3E,KAAK,CAAC,UAAU,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,GAAG,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,sBAAsB,CAAC,KAQ/B;IACC,MAAM,EAAE,UAAU,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,GAAG,EAAE,YAAY,EAAE,GAC1F,KAAK,CAAC;IACR,OAAO;QACL,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,MAAM;QACf,UAAU;QACV,eAAe;QACf,aAAa,EAAE,KAAK,CAAC,QAAQ;QAC7B,YAAY;QACZ,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,+BAA+B,EAC7B,KAAK,CAAC,kBAAkB,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;KACtE,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,oBAAoB,CAClC,IAAY,EACZ,OAAsB,EACtB,OAAsB,EACtB,QAAkB;IAElB,MAAM,KAAK,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACrC,MAAM,eAAe,GAAG,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAC1C,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,CAAC,CAC1D,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,GAAG,KAAK,CAAC;IAEtD,MAAM,UAAU,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,EAAE,CACtD,0BAA0B,CAAC;QACzB,IAAI;QACJ,QAAQ;QACR,OAAO;QACP,UAAU;QACV,OAAO;QACP,UAAU;QACV,eAAe;KAChB,CAAC,CACH,CAAC;IACF,IAAI,aAAa,CAAC,OAAO;QAAE,OAAO,eAAe,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChF,MAAM,gBAAgB,GAAG,CAAC,GAAG,aAAa,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IAEvE,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,EAAE,EAAE,IAAI;YACR,OAAO,EAAE,eAAe;YACxB,UAAU;YACV,eAAe;YACf,aAAa,EAAE,EAAE;YACjB,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE;YAC9B,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,eAAe,CACpB;YACE,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,MAAM;YACb,OAAO,EAAE,6BAA6B;YACtC,QAAQ,EAAE,CAAC;YACX,eAAe;SAChB,EACD,KAAK,CACN,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IAEvE,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,CAC3C,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,eAAe,CAAC,CACxD,CAAC;IACF,wBAAwB,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC;IAC9E,IAAI,WAAW,CAAC,OAAO;QAAE,OAAO,eAAe,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAE5E,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnF,IAAI,SAAS,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEhF,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACrE,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAEpE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAExE,IAAI,eAAe;QAAE,qBAAqB,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;IAElE,OAAO,sBAAsB,CAAC;QAC5B,UAAU;QACV,eAAe;QACf,KAAK;QACL,gBAAgB;QAChB,SAAS;QACT,GAAG;QACH,YAAY,EAAE,KAAK,CAAC,QAAQ,EAAE;KAC/B,CAAC,CAAC;AACL,CAAC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-export.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-export.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAa5D,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAaR;
|
|
1
|
+
{"version":3,"file":"verify-export.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-export.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAa5D,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,mBAAmB,EAC5B,MAAM,EAAE,kBAAkB,GACzB,MAAM,CAaR;AAuBD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA4DxF;AAuBD,wBAAgB,aAAa,CAAC,OAAO,EAAE,mBAAmB,GAAG,MAAM,CAoBlE"}
|
|
@@ -22,12 +22,28 @@ export function buildVerifyExportDocument(payload, format) {
|
|
|
22
22
|
}
|
|
23
23
|
}
|
|
24
24
|
}
|
|
25
|
+
function sarifRegionForFinding(finding) {
|
|
26
|
+
const region = {
|
|
27
|
+
startLine: finding.line > 0 ? finding.line : 1,
|
|
28
|
+
};
|
|
29
|
+
if (finding.end_line !== undefined && finding.end_line > 0) {
|
|
30
|
+
region.endLine = finding.end_line;
|
|
31
|
+
}
|
|
32
|
+
if (finding.start_column !== undefined && finding.start_column > 0) {
|
|
33
|
+
region.startColumn = finding.start_column;
|
|
34
|
+
}
|
|
35
|
+
if (finding.end_column !== undefined && finding.end_column > 0) {
|
|
36
|
+
region.endColumn = finding.end_column;
|
|
37
|
+
}
|
|
38
|
+
return region;
|
|
39
|
+
}
|
|
25
40
|
export function buildSarifDocument(payload) {
|
|
26
41
|
const results = [];
|
|
27
42
|
if (payload.status === "failed") {
|
|
28
43
|
for (const finding of payload.findings ?? []) {
|
|
44
|
+
const ruleId = finding.rule_id ?? finding.failed_gate;
|
|
29
45
|
results.push({
|
|
30
|
-
ruleId
|
|
46
|
+
ruleId,
|
|
31
47
|
level: finding.severity === "warning" ? "warning" : "error",
|
|
32
48
|
message: { text: finding.resolution_hint },
|
|
33
49
|
...(finding.offending_file
|
|
@@ -36,7 +52,7 @@ export function buildSarifDocument(payload) {
|
|
|
36
52
|
{
|
|
37
53
|
physicalLocation: {
|
|
38
54
|
artifactLocation: { uri: finding.offending_file },
|
|
39
|
-
region:
|
|
55
|
+
region: sarifRegionForFinding(finding),
|
|
40
56
|
},
|
|
41
57
|
},
|
|
42
58
|
],
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-export.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAK/C,MAAM,YAAY,GAChB,gGAAgG,CAAC;AAEnG,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAA4B,EAC5B,MAA0B;IAE1B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,KAAK,OAAO;YACV,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,MAAM,CAAC;YAClC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,OAAO,GAA8B,EAAE,CAAC;IAE9C,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC7C,OAAO,CAAC,IAAI,CAAC
|
|
1
|
+
{"version":3,"file":"verify-export.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-export.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAK/C,MAAM,YAAY,GAChB,gGAAgG,CAAC;AAEnG,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAA4B,EAC5B,MAA0B;IAE1B,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC1C,KAAK,OAAO;YACV,OAAO,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC9D,KAAK,OAAO;YACV,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,MAAM,CAAC;YAClC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,OAK9B;IACC,MAAM,MAAM,GAA2B;QACrC,SAAS,EAAE,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAC/C,CAAC;IACF,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QACnE,MAAM,CAAC,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAC5C,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC;IACxC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,OAAO,GAA8B,EAAE,CAAC;IAE9C,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM;gBACN,KAAK,EAAE,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBAC3D,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,eAAe,EAAE;gBAC1C,GAAG,CAAC,OAAO,CAAC,cAAc;oBACxB,CAAC,CAAC;wBACE,SAAS,EAAE;4BACT;gCACE,gBAAgB,EAAE;oCAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE;oCACjD,MAAM,EAAE,qBAAqB,CAAC,OAAO,CAAC;iCACvC;6BACF;yBACF;qBACF;oBACH,CAAC,CAAC,EAAE,CAAC;gBACP,UAAU,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE;aACzD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,OAAO,CAAC,UAAU;gBAC1B,KAAK,EAAE,OAAO;gBACd,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE;aACnC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;YACvC,OAAO,CAAC,IAAI,CAAC;gBACX,MAAM,EAAE,iBAAiB;gBACzB,KAAK,EAAE,SAAS;gBAChB,OAAO,EAAE;oBACP,IAAI,EAAE,OAAO,CAAC,CAAC,MAAM,mBAAmB,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,WAAW,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE;iBACjG;aACF,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,WAAW;wBACpB,cAAc,EAAE,sBAAsB;qBACvC;iBACF;gBACD,OAAO;aACR;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAA4B;IAIlD,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,MAAM,GACV,OAAO,CAAC,KAAK,KAAK,eAAe;YAC/B,CAAC,CAAC,CAAC,WAAW,CAAC;YACf,CAAC,CAAC,OAAO,CAAC,KAAK,KAAK,aAAa;gBAC/B,CAAC,CAAC,CAAC,aAAa,CAAC;gBACjB,CAAC,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,QAAQ,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAC9F,IAAI,CACL,CAAC;IACF,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAA4B;IACxD,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACvD,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC;IAChG,MAAM,KAAK,GAAG;QACZ,wCAAwC;QACxC,qBAAqB,QAAQ,YAAY,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,IAAI;QAChG,sBAAsB,SAAS,CAAC,SAAS,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,MAAM,CAAC,QAAQ,CAAC,IAAI;KAC9G,CAAC;IACF,KAAK,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;YACf,KAAK,CAAC,IAAI,CACR,iDAAiD,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,uBAAuB,SAAS,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,SAAS,CAAC,EAAE,CAAC,OAAO,CAAC,uBAAuB,CACnN,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,IAAI,CAAC,iDAAiD,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC;IAC9C,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}
|
|
@@ -49,6 +49,8 @@ export interface TraceFailure extends VerifyFailureBase {
|
|
|
49
49
|
traceKind: TraceFailureKind;
|
|
50
50
|
traceReason: string;
|
|
51
51
|
traceQuote: string;
|
|
52
|
+
/** 1-based declared line from mission trace anchor when numeric; else 0. */
|
|
53
|
+
declaredLine?: number;
|
|
52
54
|
attestationCommit?: string;
|
|
53
55
|
stalePaths?: string[];
|
|
54
56
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verify-failure.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-failure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,MAAM,GACN,WAAW,GACX,KAAK,GACL,eAAe,GACf,OAAO,GACP,eAAe,CAAC;AAEpB,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC;AAEzF,UAAU,iBAAiB;IACzB,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAY,SAAQ,iBAAiB;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,UAAW,SAAQ,iBAAiB;IACnD,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAa,SAAQ,iBAAiB;IACrD,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,KAAK,EAAE,eAAe,CAAC;IACvB,iBAAiB,EAAE,YAAY,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAC1B,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,UAAU,GACV,mBAAmB,GACnB,YAAY,GACZ,oBAAoB,CAAC"}
|
|
1
|
+
{"version":3,"file":"verify-failure.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-failure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,MAAM,GACN,WAAW,GACX,KAAK,GACL,eAAe,GACf,OAAO,GACP,eAAe,CAAC;AAEpB,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC;AAEzF,UAAU,iBAAiB;IACzB,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAY,SAAQ,iBAAiB;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,UAAW,SAAQ,iBAAiB;IACnD,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAa,SAAQ,iBAAiB;IACrD,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,KAAK,EAAE,eAAe,CAAC;IACvB,iBAAiB,EAAE,YAAY,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAC1B,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,UAAU,GACV,mBAAmB,GACnB,YAAY,GACZ,oBAAoB,CAAC"}
|
|
@@ -0,0 +1,26 @@
|
|
|
1
|
+
import type { VerifyFailedGate, VerifyFinding } from "./verify-finding.js";
|
|
2
|
+
export declare const EVIDENCE_BYTE_LIMIT: 2048;
|
|
3
|
+
export declare const EVIDENCE_TRUNCATION_SENTINEL: "\n[...truncated]";
|
|
4
|
+
export declare const DIGEST_RING_CAP: 4;
|
|
5
|
+
/** Byte-safe UTF-8 truncation at newline or code-point boundary, then sentinel. */
|
|
6
|
+
export declare function truncateEvidenceBytes(text: string): string;
|
|
7
|
+
/** Normalize evidence for semantic fingerprint (NFC, whitespace, strip diff hunk headers). */
|
|
8
|
+
export declare function normalizeEvidenceForSemantic(text: string): string;
|
|
9
|
+
export interface FingerprintInput {
|
|
10
|
+
failed_gate: VerifyFailedGate;
|
|
11
|
+
offending_file: string;
|
|
12
|
+
line: number;
|
|
13
|
+
end_line?: number;
|
|
14
|
+
start_column?: number;
|
|
15
|
+
end_column?: number;
|
|
16
|
+
rule_id?: string;
|
|
17
|
+
evidence?: string;
|
|
18
|
+
}
|
|
19
|
+
export declare function computeExactFingerprint(input: FingerprintInput): string;
|
|
20
|
+
export declare function computeSemanticFingerprint(input: FingerprintInput): string;
|
|
21
|
+
export declare function finalizeVerifyFinding(finding: Omit<VerifyFinding, "fingerprint" | "semantic_fingerprint">): VerifyFinding;
|
|
22
|
+
export declare function finalizeVerifyFindings(findings: VerifyFinding[]): VerifyFinding[];
|
|
23
|
+
export declare function computeFindingsDigest(findings: readonly VerifyFinding[]): string;
|
|
24
|
+
export declare function appendDigestToRing(ring: readonly string[], digest: string): string[];
|
|
25
|
+
export declare function digestRecurredInRing(ring: readonly string[], digest: string): boolean;
|
|
26
|
+
//# sourceMappingURL=verify-finding-fingerprint.d.ts.map
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
{"version":3,"file":"verify-finding-fingerprint.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-finding-fingerprint.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE3E,eAAO,MAAM,mBAAmB,EAAG,IAAa,CAAC;AACjD,eAAO,MAAM,4BAA4B,EAAG,kBAA2B,CAAC;AACxE,eAAO,MAAM,eAAe,EAAG,CAAU,CAAC;AAE1C,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoB1D;AAED,8FAA8F;AAC9F,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAavE;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAgB1E;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,GAAG,sBAAsB,CAAC,GACnE,aAAa,CAsBf;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,aAAa,EAAE,CAejF;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,MAAM,CAKhF;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAOpF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAErF"}
|