@martinloop/mcp 0.3.8 → 0.3.9

package/dist/vendor/adapters/core/src/leash.d.ts

@@ -1,48 +0,0 @@
-import type { ApprovalPolicy, ExecutionProfile, LoopTask } from "../../../contracts/index.js";
-export type SafetySurface = "command" | "filesystem" | "secret" | "spend" | "network" | "dependency";
-export type SafetyViolationKind = "command_blocked" | "path_not_allowed" | "path_denied" | "path_outside_repo" | "network_blocked" | "dependency_approval_required" | "migration_approval_required" | "config_change_approval_required" | "secret_value" | "protected_path";
-export interface SafetyViolation {
-    kind: SafetyViolationKind;
-    message: string;
-    command?: string;
-    file?: string;
-    match?: string;
-}
-export interface SafetyLeashDecision {
-    allowed: boolean;
-    blocked: boolean;
-    riskLevel: "safe" | "blocked";
-    surface: SafetySurface;
-    profile?: ExecutionProfile;
-    blockedCommands: string[];
-    violations: SafetyViolation[];
-    reason?: string;
-}
-export interface ResolvedExecutionProfile {
-    name: ExecutionProfile;
-    networkMode: "off" | "allowlisted" | "open";
-    allowedNetworkDomains: string[];
-    requireDependencyApproval: boolean;
-    requireMigrationApproval: boolean;
-    requireConfigApproval: boolean;
-}
-export declare function evaluateVerificationLeash(task: Pick<LoopTask, "verificationPlan" | "verificationStack" | "executionProfile" | "allowedNetworkDomains">): SafetyLeashDecision;
-export declare function evaluateFilesystemLeash(input: {
-    repoRoot?: string;
-    changedFiles: string[];
-    allowedPaths?: string[];
-    deniedPaths?: string[];
-}): SafetyLeashDecision;
-export declare function evaluateSecretLeash(input: {
-    values: string[];
-}): SafetyLeashDecision;
-export declare function resolveExecutionProfile(input: {
-    executionProfile?: ExecutionProfile;
-    allowedNetworkDomains?: string[];
-}): ResolvedExecutionProfile;
-export declare function evaluateChangeApprovalLeash(input: {
-    changedFiles: string[];
-    executionProfile?: ExecutionProfile;
-    approvalPolicy?: ApprovalPolicy;
-}): SafetyLeashDecision;
-export declare function redactSecretsFromText(input: string): string;

package/dist/vendor/adapters/core/src/leash.js

@@ -1,497 +0,0 @@
-import { isAbsolute, relative, resolve } from "node:path";
-const BLOCKED_PATTERNS = [
-    /(^|[\s;&|`(])rm\s+-rf(\s|$)/iu,
-    /git\s+reset\s+--hard/iu,
-    /git\s+clean\s+-fd/iu,
-    /curl\b[^\n|]*\|\s*(sh|bash)/iu,
-    /wget\b[^\n|]*\|\s*(sh|bash)/iu,
-    /(^|[\s;&|`(])sudo(\s|$)/iu,
-    /(^|[\s;&|`(])mkfs(\.|\s|$)/iu,
-    /(^|[\s;&|`(])dd\s+if=/iu,
-    /(shutdown|reboot)(\s|$)/iu,
-    /:\(\)\s*\{\s*:\|:&\s*\}\s*;\s*:/iu,
-    /chmod\s+-R\s+777\s+\//iu,
-    /(kubectl|docker)\s+.*\b(delete|prune|rm)\b/iu,
-    /ssh\s+/iu,
-    /scp\s+/iu,
-    // bash/sh -c "<destructive command>" wrappers — flags the wrapper shape directly,
-    // since a naive regex on the outer command misses the destructive inner command.
-    /\b(?:bash|sh|zsh)\s+-c\s+["'`]/iu,
-    // recursive directory deletion via `find ... -delete` / `find ... -exec rm`
-    /\bfind\s+\S+(?:\s+-[a-z-]+(?:\s+\S+)?)*\s+-delete\b/iu,
-    /\bfind\s+\S+(?:\s+-[a-z-]+(?:\s+\S+)?)*\s+-exec\s+rm\b/iu,
-    // scripting-language recursive deletion one-liners
-    /\bshutil\.rmtree\s*\(/iu,
-    /\bos\.(?:remove|rmdir|removedirs|unlink)\s*\(/iu,
-    /\.(?:rm|rmdir|unlink)(?:Sync)?\s*\(/iu,
-    /\brimraf\s*\(/iu,
-    // Windows destructive deletion / formatting patterns
-    /\b(?:cmd(?:\.exe)?\s+\/c\s+)?del(?:\.exe)?\s+\/[^\n]*(?:\bs\b|\bq\b|\bf\b)/iu,
-    /\b(?:cmd(?:\.exe)?\s+\/c\s+)?rmdir(?:\.exe)?\s+\/[^\n]*\bs\b/iu,
-    /\bremove-item\b[^\n]*(?:-recurse|-r)\b[^\n]*(?:-force|-fo)\b/iu,
-    /\b(?:format-volume|diskpart)\b/iu
-];
-/**
- * Detects `rm` invocations that combine recursive + force flags regardless of
- * flag ordering/grouping (`-rf`, `-fr`, `-r -f`, `--recursive --force`),
- * absolute-path invocation (`/bin/rm`, `/usr/bin/rm`), case, or `${IFS}`-style
- * shell obfuscation — all of which slip past the literal `rm\s+-rf` pattern.
- */
-function commandContainsDestructiveRemoval(command) {
-    const normalized = command.replace(/\$\{?IFS\}?/giu, " ").toLowerCase();
-    const rmInvocation = /(?:^|[\s;&|`(])(?:[^\s;&|`(]+\/)?rm\s+([^\n;|`]+)/giu;
-    let match;
-    while ((match = rmInvocation.exec(normalized)) !== null) {
-        const args = match[1] ?? "";
-        const hasRecursive = /(?:^|\s)-[a-z]*r[a-z]*(?:\s|$)|--recursive\b/u.test(args);
-        const hasForce = /(?:^|\s)-[a-z]*f[a-z]*(?:\s|$)|--force\b/u.test(args);
-        if (hasRecursive && hasForce) {
-            return true;
-        }
-    }
-    return false;
-}
-const SECRET_PATTERNS = [
-    {
-        kind: "secret_value",
-        pattern: /\bOPENAI_API_KEY\s*=\s*[^\s"'`]+/giu,
-        replacement: "OPENAI_API_KEY=[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /\bsk-[A-Za-z0-9_-]{8,}\b/gu,
-        replacement: "[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /\bghp_[A-Za-z0-9_]{16,}\b/gu,
-        replacement: "[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /\bgithub_pat_[A-Za-z0-9_]{20,}\b/gu,
-        replacement: "[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /\b(?:gho|ghu|ghs|ghr)_[A-Za-z0-9_]{16,}\b/gu,
-        replacement: "[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /\bAKIA[0-9A-Z]{16}\b/gu,
-        replacement: "[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /\b(?:aws_secret_access_key|AWS_SECRET_ACCESS_KEY)\s*[:=]\s*[^\s"'`]+/giu,
-        replacement: "AWS_SECRET_ACCESS_KEY=[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/giu,
-        replacement: "[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /\bAIza[0-9A-Za-z_-]{30,}\b/gu,
-        replacement: "[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /-----BEGIN(?:\s+[A-Z0-9]+)*\s+PRIVATE KEY-----[\s\S]*?-----END(?:\s+[A-Z0-9]+)*\s+PRIVATE KEY-----/gu,
-        replacement: "[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /\beyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\b/gu,
-        replacement: "[REDACTED_SECRET]"
-    },
-    {
-        kind: "secret_value",
-        pattern: /\b(?:api[_-]?key|secret|password|passwd|token)\s*[:=]\s*["']?[A-Za-z0-9_\-/+=]{12,}["']?/giu,
-        replacement: "[REDACTED_SECRET]"
-    }
-];
-const PROTECTED_PATH_PATTERNS = [
-    {
-        kind: "protected_path",
-        pattern: /\B\.env(?!\.example\b)(?:\.[A-Za-z0-9._-]+)?\b/giu,
-        replacement: "[REDACTED_PATH]"
-    },
-    {
-        kind: "protected_path",
-        pattern: /\bid_rsa\b/giu,
-        replacement: "[REDACTED_PATH]"
-    },
-    {
-        kind: "protected_path",
-        pattern: /\b[A-Za-z0-9._/-]+\.(pem|p12|key)\b/giu,
-        replacement: "[REDACTED_PATH]"
-    }
-];
-export function evaluateVerificationLeash(task) {
-    const commands = [
-        ...(task.verificationPlan ?? []),
-        ...((task.verificationStack ?? []).map((step) => step.command))
-    ].filter(Boolean);
-    const profile = resolveExecutionProfile(task);
-    const blockedCommands = commands.filter((command) => BLOCKED_PATTERNS.some((pattern) => pattern.test(command)) ||
-        commandContainsDestructiveRemoval(command));
-    const violations = blockedCommands.map((command) => ({
-        kind: "command_blocked",
-        command,
-        message: `Blocked destructive verifier command: ${command}`
-    }));
-    if (blockedCommands.length > 0) {
-        return {
-            allowed: false,
-            blocked: true,
-            riskLevel: "blocked",
-            surface: "command",
-            profile: profile.name,
-            blockedCommands,
-            violations,
-            reason: "Safety leash blocked destructive or unbounded verifier commands."
-        };
-    }
-    const networkViolations = commands
-        .map((command) => buildNetworkViolation(command, profile))
-        .filter((violation) => Boolean(violation));
-    if (networkViolations.length > 0) {
-        return {
-            allowed: false,
-            blocked: true,
-            riskLevel: "blocked",
-            surface: "network",
-            profile: profile.name,
-            blockedCommands: commands.filter((command) => buildNetworkViolation(command, profile)),
-            violations: networkViolations,
-            reason: `Safety leash blocked outbound network access for the ${profile.name} profile.`
-        };
-    }
-    return {
-        allowed: true,
-        blocked: false,
-        riskLevel: "safe",
-        surface: "command",
-        profile: profile.name,
-        blockedCommands: [],
-        violations: []
-    };
-}
-export function evaluateFilesystemLeash(input) {
-    const violations = [];
-    for (const rawFile of input.changedFiles) {
-        const normalized = normalizeChangedFile(rawFile, input.repoRoot);
-        if (normalized.outsideRepo) {
-            violations.push({
-                kind: "path_outside_repo",
-                file: rawFile,
-                message: `Changed file is outside the configured repo root: ${rawFile}`
-            });
-            continue;
-        }
-        const file = normalized.file;
-        if (!file) {
-            continue;
-        }
-        if ((input.deniedPaths ?? []).some((pattern) => matchesPathPattern(file, pattern))) {
-            violations.push({
-                kind: "path_denied",
-                file,
-                message: `Changed file matches a denylisted path: ${file}`
-            });
-            continue;
-        }
-        const allowedPaths = input.allowedPaths ?? [];
-        if (allowedPaths.length > 0 && !allowedPaths.some((pattern) => matchesPathPattern(file, pattern))) {
-            violations.push({
-                kind: "path_not_allowed",
-                file,
-                message: `Changed file is outside the allowed paths: ${file}`
-            });
-        }
-    }
-    if (violations.length > 0) {
-        return {
-            allowed: false,
-            blocked: true,
-            riskLevel: "blocked",
-            surface: "filesystem",
-            blockedCommands: [],
-            violations,
-            reason: "Safety leash blocked file changes outside the allowed repo contract."
-        };
-    }
-    return {
-        allowed: true,
-        blocked: false,
-        riskLevel: "safe",
-        surface: "filesystem",
-        blockedCommands: [],
-        violations: []
-    };
-}
-export function evaluateSecretLeash(input) {
-    const violations = [];
-    for (const value of input.values) {
-        if (!value)
-            continue;
-        for (const rule of SECRET_PATTERNS) {
-            for (const match of value.matchAll(rule.pattern)) {
-                const matched = match[0];
-                if (!matched)
-                    continue;
-                violations.push({
-                    kind: rule.kind,
-                    match: matched,
-                    message: "Secret-like credential value detected in the runtime context."
-                });
-            }
-        }
-    }
-    if (violations.length > 0) {
-        return {
-            allowed: false,
-            blocked: true,
-            riskLevel: "blocked",
-            surface: "secret",
-            blockedCommands: [],
-            violations,
-            reason: "Safety leash blocked secret-like credential values from entering the runtime context."
-        };
-    }
-    return {
-        allowed: true,
-        blocked: false,
-        riskLevel: "safe",
-        surface: "secret",
-        blockedCommands: [],
-        violations: []
-    };
-}
-export function resolveExecutionProfile(input) {
-    const name = input.executionProfile ?? "strict_local";
-    const allowedNetworkDomains = [...(input.allowedNetworkDomains ?? [])];
-    switch (name) {
-        case "ci_safe":
-            return {
-                name,
-                networkMode: "off",
-                allowedNetworkDomains,
-                requireDependencyApproval: true,
-                requireMigrationApproval: true,
-                requireConfigApproval: true
-            };
-        case "staging_controlled":
-            return {
-                name,
-                networkMode: allowedNetworkDomains.length > 0 ? "allowlisted" : "off",
-                allowedNetworkDomains,
-                requireDependencyApproval: true,
-                requireMigrationApproval: true,
-                requireConfigApproval: true
-            };
-        case "research_untrusted":
-            return {
-                name,
-                networkMode: allowedNetworkDomains.length > 0 ? "allowlisted" : "open",
-                allowedNetworkDomains,
-                requireDependencyApproval: true,
-                requireMigrationApproval: true,
-                requireConfigApproval: true
-            };
-        case "strict_local":
-        default:
-            return {
-                name: "strict_local",
-                networkMode: "off",
-                allowedNetworkDomains,
-                requireDependencyApproval: true,
-                requireMigrationApproval: true,
-                requireConfigApproval: true
-            };
-    }
-}
-export function evaluateChangeApprovalLeash(input) {
-    const profile = resolveExecutionProfile({
-        executionProfile: input.executionProfile
-    });
-    const violations = [];
-    for (const file of input.changedFiles.map((entry) => entry.replace(/\\/gu, "/"))) {
-        if (isDependencyFile(file) && profile.requireDependencyApproval && !input.approvalPolicy?.dependencyAdds) {
-            violations.push({
-                kind: "dependency_approval_required",
-                file,
-                message: `Dependency-related file change requires approval in the ${profile.name} profile: ${file}`
-            });
-            continue;
-        }
-        if (isMigrationFile(file) && profile.requireMigrationApproval && !input.approvalPolicy?.migrations) {
-            violations.push({
-                kind: "migration_approval_required",
-                file,
-                message: `Migration change requires approval in the ${profile.name} profile: ${file}`
-            });
-            continue;
-        }
-        if (isConfigChangeFile(file) && profile.requireConfigApproval && !input.approvalPolicy?.configChanges) {
-            violations.push({
-                kind: "config_change_approval_required",
-                file,
-                message: `Deployment or configuration change requires approval in the ${profile.name} profile: ${file}`
-            });
-        }
-    }
-    if (violations.length > 0) {
-        return {
-            allowed: false,
-            blocked: true,
-            riskLevel: "blocked",
-            surface: "dependency",
-            profile: profile.name,
-            blockedCommands: [],
-            violations,
-            reason: "Safety leash blocked dependency, migration, or configuration changes that require approval."
-        };
-    }
-    return {
-        allowed: true,
-        blocked: false,
-        riskLevel: "safe",
-        surface: "dependency",
-        profile: profile.name,
-        blockedCommands: [],
-        violations: []
-    };
-}
-export function redactSecretsFromText(input) {
-    let output = input;
-    for (const rule of [...SECRET_PATTERNS, ...PROTECTED_PATH_PATTERNS]) {
-        output = output.replace(rule.pattern, rule.replacement);
-    }
-    return output;
-}
-function normalizeChangedFile(file, repoRoot) {
-    const normalizedInput = file.replace(/\\/gu, "/");
-    if (!repoRoot) {
-        return {
-            file: normalizedInput,
-            outsideRepo: normalizedInput.startsWith("../") || normalizedInput.includes("/../")
-        };
-    }
-    const absoluteRoot = resolve(repoRoot);
-    const absoluteFile = isAbsolute(file) ? resolve(file) : resolve(absoluteRoot, file);
-    const repoRelative = relative(absoluteRoot, absoluteFile).replace(/\\/gu, "/");
-    if (repoRelative.length === 0 ||
-        repoRelative === ".." ||
-        repoRelative.startsWith("../") ||
-        isAbsolute(repoRelative)) {
-        return { outsideRepo: true };
-    }
-    return {
-        file: repoRelative,
-        outsideRepo: false
-    };
-}
-function matchesPathPattern(file, pattern) {
-    const normalizedFile = normalizePathForMatching(file);
-    const normalizedPattern = normalizePathForMatching(pattern);
-    if (!normalizedPattern.includes("*")) {
-        return (normalizedFile === normalizedPattern ||
-            normalizedFile.startsWith(`${normalizedPattern.replace(/\/$/u, "")}/`));
-    }
-    const regexStr = normalizedPattern
-        .replace(/[.+^${}()|[\]\\]/gu, "\\$&")
-        .replace(/\*\*/gu, "__DOUBLESTAR__")
-        .replace(/\*/gu, "[^/]*")
-        .replace(/__DOUBLESTAR__/gu, ".*");
-    return new RegExp(`^${regexStr}$`, "u").test(normalizedFile);
-}
-function normalizePathForMatching(value) {
-    return value
-        .replace(/\\/gu, "/")
-        .replace(/^\.\//u, "")
-        .replace(/\/{2,}/gu, "/")
-        .replace(/\/$/u, "");
-}
-function buildNetworkViolation(command, profile) {
-    const targets = extractNetworkTargets(command);
-    if (targets.length === 0) {
-        return undefined;
-    }
-    if (profile.networkMode === "open") {
-        return undefined;
-    }
-    if (profile.networkMode === "allowlisted") {
-        const blockedTarget = targets.find((target) => !profile.allowedNetworkDomains.some((domain) => target === domain || target.endsWith(`.${domain}`)));
-        if (!blockedTarget) {
-            return undefined;
-        }
-        return {
-            kind: "network_blocked",
-            command,
-            match: blockedTarget,
-            message: `Network target is not allowlisted for the ${profile.name} profile: ${blockedTarget}`
-        };
-    }
-    return {
-        kind: "network_blocked",
-        command,
-        match: targets[0],
-        message: `Outbound network access is blocked for the ${profile.name} profile.`
-    };
-}
-function extractNetworkTargets(command) {
-    if (!/\b(curl|wget|invoke-webrequest|iwr|httpie|http)\b/iu.test(command)) {
-        return [];
-    }
-    return [...command.matchAll(/https?:\/\/([^/\s"'`]+)/giu)]
-        .map((match) => match[1]?.toLowerCase())
-        .filter((value) => Boolean(value));
-}
-function isDependencyFile(file) {
-    const normalized = file.replace(/\\/gu, "/");
-    return [
-        "package.json",
-        "package-lock.json",
-        "pnpm-lock.yaml",
-        "yarn.lock",
-        "bun.lock",
-        "bun.lockb",
-        "pyproject.toml",
-        "requirements.txt",
-        "Cargo.toml",
-        "Cargo.lock"
-    ].includes(normalized.split("/").at(-1) ?? normalized);
-}
-function isMigrationFile(file) {
-    const normalized = file.replace(/\\/gu, "/");
-    return (normalized.includes("/migrations/") ||
-        normalized.startsWith("migrations/") ||
-        normalized.includes("prisma/migrations/"));
-}
-function isConfigChangeFile(file) {
-    const normalized = file.replace(/\\/gu, "/");
-    const leaf = normalized.split("/").at(-1) ?? normalized;
-    if ([
-        "vercel.json",
-        "netlify.toml",
-        "wrangler.toml",
-        "docker-compose.yml",
-        "docker-compose.yaml",
-        "compose.yml",
-        "compose.yaml",
-        "fly.toml",
-        "railway.json"
-    ].includes(leaf)) {
-        return true;
-    }
-    return (normalized.startsWith(".github/workflows/") ||
-        normalized.startsWith("deploy/") ||
-        normalized.startsWith("deployment/") ||
-        normalized.startsWith("infra/") ||
-        normalized.startsWith("infrastructure/") ||
-        normalized.startsWith("ops/"));
-}

package/dist/vendor/adapters/core/src/persistence/compiler.d.ts

@@ -1,18 +0,0 @@
-import { type CompilerAdapterRequest, type PromptPacket } from "../compiler.js";
-import type { RunStore } from "./store.js";
-export interface CompileResult {
-    packet: PromptPacket;
-}
-/**
- * Compile a deterministic PromptPacket from the request state and, when a
- * store is provided, persist it as compiled-context.json in the attempt
- * artifact directory.
- *
- * R3.7: Context compiler produces deterministic compiled-context.json.
- * R3.8: Any attempt prompt can be reconstructed from disk artifacts alone.
- */
-export declare function compileAndPersistContext(request: CompilerAdapterRequest, options: {
-    attemptIndex: number;
-    store?: RunStore;
-    now?: string;
-}): Promise<CompileResult>;

package/dist/vendor/adapters/core/src/persistence/compiler.js

@@ -1,34 +0,0 @@
-import { compilePromptPacket } from "../compiler.js";
-import { makeLedgerEvent } from "./ledger.js";
-/**
- * Compile a deterministic PromptPacket from the request state and, when a
- * store is provided, persist it as compiled-context.json in the attempt
- * artifact directory.
- *
- * R3.7: Context compiler produces deterministic compiled-context.json.
- * R3.8: Any attempt prompt can be reconstructed from disk artifacts alone.
- */
-export async function compileAndPersistContext(request, options) {
-    const packet = compilePromptPacket(request);
-    const ts = options.now ?? new Date().toISOString();
-    if (options.store) {
-        // Write compiled-context.json to attempt artifact directory
-        await options.store.writeAttemptArtifacts(request.loopId, options.attemptIndex, {
-            compiledContext: packet
-        });
-        // Append prompt.compiled ledger event
-        await options.store.appendLedger(request.loopId, makeLedgerEvent({
-            kind: "prompt.compiled",
-            runId: request.loopId,
-            attemptIndex: options.attemptIndex,
-            payload: {
-                attemptId: request.attemptId,
-                attemptNumber: packet.attemptNumber,
-                priorFailurePatterns: packet.priorFailurePatterns,
-                budgetEnvelope: packet.budgetEnvelope
-            },
-            timestamp: ts
-        }));
-    }
-    return { packet };
-}

package/dist/vendor/adapters/core/src/persistence/index.d.ts

@@ -1,10 +0,0 @@
-export { makeLedgerEvent } from "./ledger.js";
-export type { LedgerEvent, LedgerEventDraft, LedgerEventKind } from "./ledger.js";
-export { resolveReceiptIntegrityPath, verifyReceiptIntegrityFromFiles, writeReceiptIntegrityMaterial } from "./integrity.js";
-export type { ReceiptIntegrityChainEntry, StoredReceiptIntegrityMaterial } from "./integrity.js";
-export { artifactDir, createFileRunStore, resolveRunsRoot, runDir } from "./store.js";
-export type { AttemptArtifacts, RunContract, RunStore } from "./store.js";
-export { readAllLoopRecords, readLatestLoopRecord, readLatestLoopRecordFromFile, readLoopRecordsFromFile } from "./runs-reader.js";
-export type { LoopAttemptRecord, LoopRunRecord } from "./runs-reader.js";
-export { compileAndPersistContext } from "./compiler.js";
-export type { CompileResult } from "./compiler.js";

package/dist/vendor/adapters/core/src/persistence/index.js

@@ -1,5 +0,0 @@
-export { makeLedgerEvent } from "./ledger.js";
-export { resolveReceiptIntegrityPath, verifyReceiptIntegrityFromFiles, writeReceiptIntegrityMaterial } from "./integrity.js";
-export { artifactDir, createFileRunStore, resolveRunsRoot, runDir } from "./store.js";
-export { readAllLoopRecords, readLatestLoopRecord, readLatestLoopRecordFromFile, readLoopRecordsFromFile } from "./runs-reader.js";
-export { compileAndPersistContext } from "./compiler.js";

package/dist/vendor/adapters/core/src/persistence/integrity.d.ts

@@ -1,39 +0,0 @@
-import type { LoopRecord, ReceiptIntegritySummary, ReceiptScope } from "../../../../contracts/index.js";
-export interface ReceiptIntegrityChainEntry {
-    index: number;
-    eventId?: string;
-    type?: string;
-    kind?: string;
-    timestamp?: string;
-    prevHash: string;
-    entryHash: string;
-}
-export interface StoredReceiptIntegrityMaterial {
-    schemaVersion: "martin.receipt-integrity.v1";
-    runId: string;
-    keyId: string;
-    signedAt: string;
-    scope?: ReceiptScope;
-    loopRecordSha256: string;
-    ledgerSha256: string;
-    ledgerHeadHash: string;
-    entryCount: number;
-    chain: ReceiptIntegrityChainEntry[];
-    signatureHmacSha256: string;
-}
-export declare function resolveReceiptIntegrityRoot(env?: NodeJS.ProcessEnv): string;
-export declare function writeReceiptIntegrityMaterial(input: {
-    runId: string;
-    runsRoot: string;
-    loopRecord: LoopRecord;
-    ledgerEntries: unknown[];
-    scope?: ReceiptScope;
-    signedAt?: string;
-}): Promise<StoredReceiptIntegrityMaterial | undefined>;
-export declare function verifyReceiptIntegrityFromFiles(input: {
-    runId: string;
-    runsRoot: string;
-    loopRecordPath: string;
-    ledgerPath: string;
-}): Promise<ReceiptIntegritySummary>;
-export declare function resolveReceiptIntegrityPath(runsRoot: string, runId: string): string;