@momentiq/dark-factory-cli 2.8.0 → 2.10.0

package/dist/commands/publish.js

@@ -0,0 +1,168 @@
+// `df publish` — Cycle 331.1 verifiable-objectives Phase 2
+// (momentiq-ai/dark-factory#207). Persist the `df verify` evidence bundle.
+//
+// In CI, after `df verify` (re)produces the diffHash-bound gate JSON +
+// screenshots, `df publish` uploads them to Cerebe object storage and emits a
+// `PublishedEvidence` pointer manifest (`{routeId → upload_id, diffHash}`,
+// provenance `consumer-attested`) for the hosted worker (Phase 3) to join
+// against `.darkfactory/objectives.yaml`.
+//
+// Degrade-and-pass (spec §5): when Cerebe is unconfigured (the air-gap / OSS
+// baseline path — `CEREBE_API_URL`/`CEREBE_API_KEY` unset) or an upload fails,
+// `df publish` emits a `status: "degraded"` manifest and still EXITS 0, so the
+// merge verdict is never blocked by a storage outage. Exit non-zero only for a
+// usage error (2) or a config/git error (1).
+import { writeFileSync } from "node:fs";
+import { loadAgentReviewConfig } from "../policy/config.js";
+import { resolveCommit } from "../git.js";
+import { CerebeStorage, resolveCerebeConfig, } from "../evidence/cerebe.js";
+import { buildPublishManifest, collectPublishArtifacts, } from "../evidence/publish.js";
+const HELP = [
+    "df publish — upload the `df verify` evidence bundle to Cerebe + emit pointers.",
+    "",
+    "Usage:",
+    "  df publish [--commit <ref>] [--cwd <path>] [--out <file>]",
+    "",
+    "Reads the per-SHA quality-gate evidence `df verify` wrote (the diffHash-bound",
+    "gate JSON + any UI screenshots), uploads each artifact to Cerebe object",
+    "storage, and writes a `PublishedEvidence` pointer manifest (schemaVersion 1,",
+    "provenance consumer-attested) the hosted worker joins against the objectives",
+    "manifest.",
+    "",
+    "Cerebe is configured via the environment:",
+    "  CEREBE_API_URL   Base URL of the Cerebe storage API (required to publish).",
+    "  CEREBE_API_KEY   API key sent as the `X-API-Key` header (required).",
+    "  CEREBE_PROJECT   Optional project scope (`X-Cerebe-Project` header).",
+    "  CEREBE_USER_ID   Optional upload identity (multipart `user_id`; default",
+    "                   `dark-factory`). Set it to your CI service identity.",
+    "",
+    "When Cerebe is not configured, or an upload fails, publish emits a",
+    '`status: "degraded"` manifest and still exits 0 (degrade-and-pass) — the',
+    "merge verdict is never blocked by a storage outage.",
+    "",
+    "Flags:",
+    "  --commit <ref>  Commit ref (anything `git rev-parse` accepts; default HEAD).",
+    "  --cwd <path>    Repository root to operate in (default: process cwd).",
+    "  --out <file>    Write the manifest to <file> (default: stdout).",
+    "  --help, -h      Show this message.",
+    "",
+    "Exit codes:",
+    "  0  manifest emitted (complete OR degraded), or nothing to publish",
+    "  1  config load failure or bad commit ref",
+    "  2  usage / flag error",
+    "",
+].join("\n");
+function parsePublishArgs(rest) {
+    let commit = "HEAD";
+    let cwd = process.cwd();
+    let out = null;
+    for (let i = 0; i < rest.length; i++) {
+        const a = rest[i] ?? "";
+        if (a === "--commit" || a === "--cwd" || a === "--out") {
+            const next = rest[i + 1];
+            if (next === undefined || next.startsWith("--")) {
+                return { error: `${a} requires a value.` };
+            }
+            if (a === "--commit")
+                commit = next;
+            else if (a === "--cwd")
+                cwd = next;
+            else
+                out = next;
+            i++;
+            continue;
+        }
+        if (a.startsWith("--commit=")) {
+            commit = a.slice("--commit=".length);
+            continue;
+        }
+        if (a.startsWith("--cwd=")) {
+            cwd = a.slice("--cwd=".length);
+            continue;
+        }
+        if (a.startsWith("--out=")) {
+            out = a.slice("--out=".length);
+            continue;
+        }
+        return { error: `unknown flag or positional arg: ${a}` };
+    }
+    return { commit, cwd, out };
+}
+export async function cmdPublish(rest, io, deps = {}) {
+    if (rest.includes("--help") || rest.includes("-h")) {
+        io.stdout(`${HELP}`);
+        return 0;
+    }
+    const parsed = parsePublishArgs(rest);
+    if ("error" in parsed) {
+        io.stderr(`df publish: ${parsed.error}\nRun \`df publish --help\` for usage.\n`);
+        return 2;
+    }
+    let loaded;
+    try {
+        loaded = await loadAgentReviewConfig({ cwd: parsed.cwd });
+    }
+    catch (err) {
+        io.stderr(`df publish: ${err.message}\n`);
+        return 1;
+    }
+    let sha;
+    try {
+        sha = await resolveCommit(parsed.commit, parsed.cwd);
+    }
+    catch (err) {
+        io.stderr(`df publish: ${err.message}\n`);
+        return 1;
+    }
+    const short = sha.slice(0, 12);
+    let collected;
+    try {
+        collected = await collectPublishArtifacts(loaded, sha, parsed.cwd);
+    }
+    catch (err) {
+        io.stderr(`df publish: failed to read evidence for ${short}: ${err.message}\n`);
+        return 1;
+    }
+    if (collected === null) {
+        io.stdout(`df publish: no quality-gate evidence found for ${short} — run \`df verify\` first; nothing to publish.\n`);
+        return 0;
+    }
+    const env = deps.env ?? process.env;
+    const resolveCerebe = deps.resolveCerebe ?? resolveCerebeConfig;
+    const makeUploader = deps.makeUploader ?? ((config) => new CerebeStorage(config));
+    const cerebe = resolveCerebe(env);
+    const uploader = cerebe ? makeUploader(cerebe) : null;
+    const manifest = await buildPublishManifest({
+        commit: sha,
+        ...(collected.diffHash !== undefined ? { diffHash: collected.diffHash } : {}),
+        ...(collected.gate !== undefined ? { gate: collected.gate } : {}),
+        routes: collected.routes,
+        uploader,
+        sessionId: `df-publish:${short}`,
+        userId: (env["CEREBE_USER_ID"] ?? "dark-factory").trim() || "dark-factory",
+    });
+    const serialized = `${JSON.stringify(manifest, null, 2)}\n`;
+    if (parsed.out !== null) {
+        try {
+            writeFileSync(parsed.out, serialized, "utf8");
+        }
+        catch (err) {
+            io.stderr(`df publish: failed to write ${parsed.out}: ${err.message}\n`);
+            return 1;
+        }
+        io.stdout(`df publish: wrote manifest to ${parsed.out}\n`);
+    }
+    else {
+        io.stdout(serialized);
+    }
+    const uploaded = (manifest.gateEvidence ? 1 : 0) +
+        Object.values(manifest.routes).reduce((n, r) => n + r.artifacts.length, 0);
+    if (manifest.status === "degraded") {
+        io.stderr(`df publish: status=degraded (${short}) — ${manifest.degradedReason ?? "unknown reason"}\n`);
+    }
+    else {
+        io.stderr(`df publish: status=complete (${short}) — ${uploaded} artifact(s) uploaded.\n`);
+    }
+    return 0;
+}
+//# sourceMappingURL=publish.js.map

package/dist/commands/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../../src/commands/publish.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,2EAA2E;AAC3E,EAAE;AACF,uEAAuE;AACvE,8EAA8E;AAC9E,2EAA2E;AAC3E,0EAA0E;AAC1E,0CAA0C;AAC1C,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,6CAA6C;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EACL,aAAa,EACb,mBAAmB,GAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,GAExB,MAAM,wBAAwB,CAAC;AAqBhC,MAAM,IAAI,GAAG;IACX,gFAAgF;IAChF,EAAE;IACF,QAAQ;IACR,6DAA6D;IAC7D,EAAE;IACF,+EAA+E;IAC/E,yEAAyE;IACzE,8EAA8E;IAC9E,8EAA8E;IAC9E,WAAW;IACX,EAAE;IACF,2CAA2C;IAC3C,8EAA8E;IAC9E,uEAAuE;IACvE,wEAAwE;IACxE,2EAA2E;IAC3E,yEAAyE;IACzE,EAAE;IACF,oEAAoE;IACpE,0EAA0E;IAC1E,qDAAqD;IACrD,EAAE;IACF,QAAQ;IACR,gFAAgF;IAChF,yEAAyE;IACzE,mEAAmE;IACnE,sCAAsC;IACtC,EAAE;IACF,aAAa;IACb,qEAAqE;IACrE,4CAA4C;IAC5C,yBAAyB;IACzB,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,SAAS,gBAAgB,CAAC,IAAc;IACtC,IAAI,MAAM,GAAG,MAAM,CAAC;IACpB,IAAI,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IACxB,IAAI,GAAG,GAAkB,IAAI,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,OAAO,EAAE,CAAC;YACvD,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACzB,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,oBAAoB,EAAE,CAAC;YAC7C,CAAC;YACD,IAAI,CAAC,KAAK,UAAU;gBAAE,MAAM,GAAG,IAAI,CAAC;iBAC/B,IAAI,CAAC,KAAK,OAAO;gBAAE,GAAG,GAAG,IAAI,CAAC;;gBAC9B,GAAG,GAAG,IAAI,CAAC;YAChB,CAAC,EAAE,CAAC;YACJ,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC9B,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACrC,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3B,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,mCAAmC,CAAC,EAAE,EAAE,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAc,EACd,EAAa,EACb,OAAoB,EAAE;IAEtB,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QACrB,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,MAAM,EAAE,CAAC;QACtB,EAAE,CAAC,MAAM,CAAC,eAAe,MAAM,CAAC,KAAK,0CAA0C,CAAC,CAAC;QACjF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,qBAAqB,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,MAAM,CAAC,eAAgB,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,MAAM,CAAC,eAAgB,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAE/B,IAAI,SAAS,CAAC;IACd,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,EAAE,CAAC,MAAM,CAAC,2CAA2C,KAAK,KAAM,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;QAC3F,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,EAAE,CAAC,MAAM,CACP,kDAAkD,KAAK,mDAAmD,CAC3G,CAAC;QACF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACpC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,mBAAmB,CAAC;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,MAAoB,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAEtD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC;QAC1C,MAAM,EAAE,GAAG;QACX,GAAG,CAAC,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,QAAQ;QACR,SAAS,EAAE,cAAc,KAAK,EAAE;QAChC,MAAM,EAAE,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,cAAc,CAAC,CAAC,IAAI,EAAE,IAAI,cAAc;KAC3E,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC5D,IAAI,MAAM,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,aAAa,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,EAAE,CAAC,MAAM,CAAC,+BAA+B,MAAM,CAAC,GAAG,KAAM,GAAa,CAAC,OAAO,IAAI,CAAC,CAAC;YACpF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,EAAE,CAAC,MAAM,CAAC,iCAAiC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACxB,CAAC;IAED,MAAM,QAAQ,GACZ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7E,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACnC,EAAE,CAAC,MAAM,CACP,gCAAgC,KAAK,OAAO,QAAQ,CAAC,cAAc,IAAI,gBAAgB,IAAI,CAC5F,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,MAAM,CAAC,gCAAgC,KAAK,OAAO,QAAQ,0BAA0B,CAAC,CAAC;IAC5F,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/evidence/cerebe.d.ts

@@ -0,0 +1,48 @@
+export interface CerebeConfig {
+    baseUrl: string;
+    apiKey: string;
+    project?: string;
+}
+export interface CerebeUploadInput {
+    bytes: Uint8Array;
+    filename: string;
+    contentType: string;
+    sessionId: string;
+    userId: string;
+    purpose?: string;
+    tenantId?: string;
+}
+export interface CerebeUploadResult {
+    uploadId: string;
+    sha256: string;
+    sizeBytes: number;
+    contentType: string;
+    cdnUrl?: string;
+    status?: string;
+}
+export declare class CerebeAuthError extends Error {
+    constructor(message: string);
+}
+export declare class CerebeUploadError extends Error {
+    readonly status?: number | undefined;
+    constructor(message: string, status?: number | undefined);
+}
+type FetchFn = (input: string, init?: RequestInit) => Promise<Response>;
+export interface CerebeStorageOptions {
+    fetch?: FetchFn;
+    maxRetries?: number;
+    retryBaseMs?: number;
+    sleep?: (ms: number) => Promise<void>;
+}
+export declare function resolveCerebeConfig(env?: Record<string, string | undefined>): CerebeConfig | null;
+export declare function sha256Hex(bytes: Uint8Array): string;
+export declare class CerebeStorage {
+    private readonly config;
+    private readonly options;
+    constructor(config: CerebeConfig, options?: CerebeStorageOptions);
+    uploadFile(input: CerebeUploadInput): Promise<CerebeUploadResult>;
+    private headers;
+    private buildForm;
+}
+export {};
+//# sourceMappingURL=cerebe.d.ts.map

package/dist/evidence/cerebe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cerebe.d.ts","sourceRoot":"","sources":["../../src/evidence/cerebe.ts"],"names":[],"mappings":"AAwBA,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IAGpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IAGjB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAI5B;AAID,qBAAa,iBAAkB,SAAQ,KAAK;IAGxC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM;gBADxB,OAAO,EAAE,MAAM,EACN,MAAM,CAAC,EAAE,MAAM,YAAA;CAK3B;AAED,KAAK,OAAO,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAExE,MAAM,WAAW,oBAAoB;IAEnC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAKD,wBAAgB,mBAAmB,CACjC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,YAAY,GAAG,IAAI,CAUrB;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEnD;AAKD,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,MAAM,EAAE,YAAY,EACpB,OAAO,GAAE,oBAAyB;IAG/C,UAAU,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAkFvE,OAAO,CAAC,OAAO;IAOf,OAAO,CAAC,SAAS;CAkBlB"}

package/dist/evidence/cerebe.js

@@ -0,0 +1,163 @@
+// Cycle 331.1 verifiable-objectives Phase 2 (momentiq-ai/dark-factory#207) —
+// the Cerebe object-storage facade. A thin, typed wrapper over the Cerebe
+// storage REST API, used by `df publish` to persist `df verify` evidence
+// durably in CI.
+//
+// Why raw `fetch` instead of the `cerebe` SDK: the taxpilot2a facade
+// (`backend/shared/services/storage.py`, the contract reference) wraps the
+// Python SDK, but this CLI ships Apache-2.0 + air-gap-capable, so the publish
+// path must (a) add no network-SDK dependency and (b) FAIL SOFT when Cerebe is
+// not configured. The wire contract is pinned from cerebe-platform's server
+// route + SDK: `POST /storage/upload` (multipart: file/session_id/user_id/
+// purpose/tenant_id) authenticated by the `X-API-Key` header, → 201
+// `{ upload_id, cdn_url, status, … }`.
+//
+// `resolveCerebeConfig` returns `null` when the env is absent — the caller
+// degrades-and-passes rather than erroring (spec §5). `uploadFile` retries
+// transient failures (5xx/429/network) and distinguishes an auth failure
+// (`CerebeAuthError`, never retried) from an exhausted/unrecoverable upload
+// (`CerebeUploadError`).
+import { createHash } from "node:crypto";
+// An authentication failure (401/403). Distinct from a transient error so the
+// caller surfaces "check CEREBE_API_KEY" instead of retrying a doomed request.
+export class CerebeAuthError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "CerebeAuthError";
+    }
+}
+// A non-auth upload failure: a request-level 4xx, an exhausted transient retry
+// budget, or a malformed success response.
+export class CerebeUploadError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+        this.name = "CerebeUploadError";
+    }
+}
+// Resolve Cerebe config from the environment. Returns `null` when either
+// CEREBE_API_URL or CEREBE_API_KEY is missing/blank — the fail-soft signal
+// that publish should degrade rather than error (air-gap / OSS baseline).
+export function resolveCerebeConfig(env = process.env) {
+    const baseUrl = (env["CEREBE_API_URL"] ?? "").trim();
+    const apiKey = (env["CEREBE_API_KEY"] ?? "").trim();
+    if (baseUrl === "" || apiKey === "")
+        return null;
+    const project = (env["CEREBE_PROJECT"] ?? "").trim();
+    return {
+        baseUrl: baseUrl.replace(/\/+$/, ""),
+        apiKey,
+        ...(project !== "" ? { project } : {}),
+    };
+}
+export function sha256Hex(bytes) {
+    return createHash("sha256").update(bytes).digest("hex");
+}
+const DEFAULT_MAX_RETRIES = 3;
+const DEFAULT_RETRY_BASE_MS = 500;
+export class CerebeStorage {
+    config;
+    options;
+    constructor(config, options = {}) {
+        this.config = config;
+        this.options = options;
+    }
+    async uploadFile(input) {
+        const fetchFn = this.options.fetch ?? globalThis.fetch;
+        const maxRetries = this.options.maxRetries ?? DEFAULT_MAX_RETRIES;
+        const retryBaseMs = this.options.retryBaseMs ?? DEFAULT_RETRY_BASE_MS;
+        const sleep = this.options.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
+        const sha256 = sha256Hex(input.bytes);
+        const sizeBytes = input.bytes.byteLength;
+        const url = `${this.config.baseUrl}/storage/upload`;
+        let lastError;
+        for (let attempt = 0; attempt <= maxRetries; attempt++) {
+            let res;
+            try {
+                res = await fetchFn(url, {
+                    method: "POST",
+                    headers: this.headers(),
+                    body: this.buildForm(input),
+                });
+            }
+            catch (err) {
+                // Network/transport error — retryable.
+                lastError = new CerebeUploadError(`network error uploading ${input.filename}: ${err.message}`);
+                if (attempt < maxRetries) {
+                    await sleep(retryBaseMs * 2 ** attempt);
+                    continue;
+                }
+                break;
+            }
+            if (res.status === 401 || res.status === 403) {
+                throw new CerebeAuthError(`Cerebe rejected the API key (HTTP ${res.status}) — check CEREBE_API_KEY.`);
+            }
+            if (res.status === 429 || res.status >= 500) {
+                // Transient — back off and retry, honoring Retry-After when present.
+                lastError = new CerebeUploadError(`Cerebe upload failed (HTTP ${res.status})`, res.status);
+                if (attempt < maxRetries) {
+                    await sleep(retryAfterMs(res) ?? retryBaseMs * 2 ** attempt);
+                    continue;
+                }
+                break;
+            }
+            if (!res.ok) {
+                // A non-auth 4xx — a request-level problem; retrying won't help.
+                throw new CerebeUploadError(`Cerebe upload failed (HTTP ${res.status}): ${await safeText(res)}`, res.status);
+            }
+            const data = (await res.json().catch(() => ({})));
+            if (!data.upload_id) {
+                throw new CerebeUploadError(`Cerebe upload of ${input.filename} returned no upload_id`);
+            }
+            return {
+                uploadId: data.upload_id,
+                sha256,
+                sizeBytes,
+                contentType: input.contentType,
+                ...(data.cdn_url ? { cdnUrl: data.cdn_url } : {}),
+                ...(data.status ? { status: data.status } : {}),
+            };
+        }
+        throw (lastError ??
+            new CerebeUploadError(`Cerebe upload of ${input.filename} failed after ${maxRetries} retries`));
+    }
+    headers() {
+        return {
+            "X-API-Key": this.config.apiKey,
+            ...(this.config.project ? { "X-Cerebe-Project": this.config.project } : {}),
+        };
+    }
+    buildForm(input) {
+        const form = new FormData();
+        // Native Blob/FormData (Node 18+ / undici): `fetch` sets the multipart
+        // Content-Type + boundary itself, so `headers()` must NOT set it.
+        // `as BlobPart`: a Uint8Array is a valid Blob part at runtime, but TS 5.7's
+        // stricter `Uint8Array<ArrayBufferLike>` doesn't structurally match the
+        // lib's `BlobPart` (which excludes SharedArrayBuffer-backed views).
+        form.append("file", new Blob([input.bytes], { type: input.contentType }), input.filename);
+        form.append("session_id", input.sessionId);
+        form.append("user_id", input.userId);
+        form.append("purpose", input.purpose ?? "general");
+        form.append("tenant_id", input.tenantId ?? "cerebe");
+        return form;
+    }
+}
+function retryAfterMs(res) {
+    const raw = res.headers.get("retry-after");
+    if (!raw)
+        return undefined;
+    const seconds = Number(raw);
+    if (Number.isFinite(seconds) && seconds >= 0)
+        return seconds * 1000;
+    return undefined;
+}
+async function safeText(res) {
+    try {
+        return (await res.text()).slice(0, 200);
+    }
+    catch {
+        return "<no body>";
+    }
+}
+//# sourceMappingURL=cerebe.js.map

package/dist/evidence/cerebe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cerebe.js","sourceRoot":"","sources":["../../src/evidence/cerebe.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,0EAA0E;AAC1E,yEAAyE;AACzE,iBAAiB;AACjB,EAAE;AACF,qEAAqE;AACrE,2EAA2E;AAC3E,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,2EAA2E;AAC3E,oEAAoE;AACpE,uCAAuC;AACvC,EAAE;AACF,2EAA2E;AAC3E,2EAA2E;AAC3E,yEAAyE;AACzE,4EAA4E;AAC5E,yBAAyB;AAEzB,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAiCzC,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,+EAA+E;AAC/E,2CAA2C;AAC3C,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAG/B;IAFX,YACE,OAAe,EACN,MAAe;QAExB,KAAK,CAAC,OAAO,CAAC,CAAC;QAFN,WAAM,GAAN,MAAM,CAAS;QAGxB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAaD,yEAAyE;AACzE,2EAA2E;AAC3E,0EAA0E;AAC1E,MAAM,UAAU,mBAAmB,CACjC,MAA0C,OAAO,CAAC,GAAG;IAErD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,IAAI,OAAO,KAAK,EAAE,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACrD,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;QACpC,MAAM;QACN,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,KAAiB;IACzC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAElC,MAAM,OAAO,aAAa;IAEL;IACA;IAFnB,YACmB,MAAoB,EACpB,UAAgC,EAAE;QADlC,WAAM,GAAN,MAAM,CAAc;QACpB,YAAO,GAAP,OAAO,CAA2B;IAClD,CAAC;IAEJ,KAAK,CAAC,UAAU,CAAC,KAAwB;QACvC,MAAM,OAAO,GAAY,IAAI,CAAC,OAAO,CAAC,KAAK,IAAK,UAAU,CAAC,KAAiB,CAAC;QAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAClE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC;QACtE,MAAM,KAAK,GACT,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QAEtF,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,iBAAiB,CAAC;QAEpD,IAAI,SAAwC,CAAC;QAC7C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,UAAU,EAAE,OAAO,EAAE,EAAE,CAAC;YACvD,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;oBACvB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;oBACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBAC5B,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,uCAAuC;gBACvC,SAAS,GAAG,IAAI,iBAAiB,CAC/B,2BAA2B,KAAK,CAAC,QAAQ,KAAM,GAAa,CAAC,OAAO,EAAE,CACvE,CAAC;gBACF,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACzB,MAAM,KAAK,CAAC,WAAW,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;oBACxC,SAAS;gBACX,CAAC;gBACD,MAAM;YACR,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,IAAI,eAAe,CACvB,qCAAqC,GAAG,CAAC,MAAM,2BAA2B,CAC3E,CAAC;YACJ,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;gBAC5C,qEAAqE;gBACrE,SAAS,GAAG,IAAI,iBAAiB,CAAC,8BAA8B,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;gBAC3F,IAAI,OAAO,GAAG,UAAU,EAAE,CAAC;oBACzB,MAAM,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,OAAO,CAAC,CAAC;oBAC7D,SAAS;gBACX,CAAC;gBACD,MAAM;YACR,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,iEAAiE;gBACjE,MAAM,IAAI,iBAAiB,CACzB,8BAA8B,GAAG,CAAC,MAAM,MAAM,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,EACnE,GAAG,CAAC,MAAM,CACX,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAI/C,CAAC;YACF,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,IAAI,iBAAiB,CAAC,oBAAoB,KAAK,CAAC,QAAQ,wBAAwB,CAAC,CAAC;YAC1F,CAAC;YACD,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,SAAS;gBACxB,MAAM;gBACN,SAAS;gBACT,WAAW,EAAE,KAAK,CAAC,WAAW;gBAC9B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC;QACJ,CAAC;QAED,MAAM,CACJ,SAAS;YACT,IAAI,iBAAiB,CACnB,oBAAoB,KAAK,CAAC,QAAQ,iBAAiB,UAAU,UAAU,CACxE,CACF,CAAC;IACJ,CAAC;IAEO,OAAO;QACb,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM;YAC/B,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5E,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,KAAwB;QACxC,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,uEAAuE;QACvE,kEAAkE;QAClE,4EAA4E;QAC5E,wEAAwE;QACxE,oEAAoE;QACpE,IAAI,CAAC,MAAM,CACT,MAAM,EACN,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,KAAiB,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,EAChE,KAAK,CAAC,QAAQ,CACf,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,IAAI,SAAS,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAC,CAAC;QACrD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED,SAAS,YAAY,CAAC,GAAa;IACjC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAC3C,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC;QAAE,OAAO,OAAO,GAAG,IAAI,CAAC;IACpE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa;IACnC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC"}

package/dist/evidence/prove.d.ts

@@ -0,0 +1,24 @@
+import { type BoundProofRecord, type CriticStatus, type Objective, type ReviewVerdict } from "@momentiq/dark-factory-schemas";
+export interface RouteEvidenceInput {
+    exitCode: number;
+}
+export interface CriticEvidenceInput {
+    status: CriticStatus;
+    verdict?: ReviewVerdict;
+}
+export interface ProofInputs {
+    commit: string;
+    headDiffHash?: string;
+    objectives: Objective[];
+    gateResults: Record<string, RouteEvidenceInput>;
+    evidenceDiffHash?: string;
+    criticResults: Record<string, CriticEvidenceInput>;
+    uploadIds?: Record<string, string>;
+}
+export declare function buildProofRecord(inputs: ProofInputs, generatedAt: string): BoundProofRecord;
+export interface CollectedProofInputs {
+    inputs: ProofInputs;
+    resolvedSha: string;
+}
+export declare function collectProofInputs(cwd: string, commit: string): Promise<CollectedProofInputs | null>;
+//# sourceMappingURL=prove.d.ts.map

package/dist/evidence/prove.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prove.d.ts","sourceRoot":"","sources":["../../src/evidence/prove.ts"],"names":[],"mappings":"AAsBA,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,YAAY,EAEjB,KAAK,SAAS,EAId,KAAK,aAAa,EACnB,MAAM,gCAAgC,CAAC;AASxC,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;CAClB;AAGD,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,YAAY,CAAC;IACrB,OAAO,CAAC,EAAE,aAAa,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IAEf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,SAAS,EAAE,CAAC;IAExB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAEhD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;IAEnD,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAqED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,GAAG,gBAAgB,CAsB3F;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,WAAW,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAQD,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAiEtC"}

package/dist/evidence/prove.js

@@ -0,0 +1,170 @@
+// Cycle 331.1 verifiable-objectives — the closeout proof readout behind
+// `df prove` (momentiq-ai/dark-factory#207). Joins each declared objective
+// (`.darkfactory/objectives.yaml`) against the local evidence that attests it —
+// route exit codes (`df verify`), critic verdicts (`df review`) — resolving every
+// binding to proven / pending / failed and assembling a `BoundProofRecord`.
+//
+// Two layers, split for testability:
+//   - `buildProofRecord` — the pure join (no disk, no git); takes already-loaded
+//     inputs, returns the record. The trichotomy + worst-of rollup live here.
+//   - `collectProofInputs` — reads the manifest + gate evidence + review artifact
+//     from disk for a commit.
+//
+// Trust boundary: this readout is agent-attested, evidence-backed — the agent
+// authored both the code and the objectives. It is stronger than free-text "done"
+// (every status is DERIVED from diffHash-bound artifacts, not asserted) but is NOT
+// independent verification. See the design spec (§2).
+import { existsSync, readFileSync } from "node:fs";
+import { resolve } from "node:path";
+import { parse as parseYaml } from "yaml";
+import { parseObjectivesManifest, } from "@momentiq/dark-factory-schemas";
+import { loadAgentReviewConfig } from "../policy/config.js";
+import { commitDiff, diffHash, repoRoot, resolveCommit, safeParentOrThrow } from "../git.js";
+import { readQualityGateEvidence } from "./quality-gates.js";
+import { loadForCommit } from "../lib/show-status-core.js";
+const STATUS_RANK = { proven: 0, pending: 1, failed: 2 };
+function worstOf(statuses) {
+    let worst = "proven";
+    for (const s of statuses) {
+        if (STATUS_RANK[s] > STATUS_RANK[worst])
+            worst = s;
+    }
+    return worst;
+}
+function resolveRouteLike(kind, ref, inputs) {
+    const uploadId = inputs.uploadIds?.[ref];
+    const base = { kind, ref, ...(uploadId ? { uploadId } : {}) };
+    const r = inputs.gateResults[ref];
+    if (!r) {
+        return { ...base, status: "pending", detail: "no route evidence — run `df verify`" };
+    }
+    if (r.exitCode !== 0) {
+        return { ...base, status: "failed", detail: `route exited ${r.exitCode}` };
+    }
+    const bound = inputs.evidenceDiffHash !== undefined &&
+        inputs.headDiffHash !== undefined &&
+        inputs.evidenceDiffHash === inputs.headDiffHash;
+    if (bound) {
+        return { ...base, status: "proven", detail: "exit 0, diffHash-bound" };
+    }
+    return {
+        ...base,
+        status: "pending",
+        detail: "exit 0 but evidence not bound to HEAD's diff (stale or SHA-only)",
+    };
+}
+function resolveCritic(criticId, inputs) {
+    const uploadId = inputs.uploadIds?.[criticId];
+    const base = { kind: "critic", ref: criticId, ...(uploadId ? { uploadId } : {}) };
+    const c = inputs.criticResults[criticId];
+    if (!c) {
+        return { ...base, status: "pending", detail: "awaiting critic verdict — fleet has not run on HEAD" };
+    }
+    if (c.verdict === "APPROVED") {
+        return { ...base, status: "proven", detail: "critic APPROVED" };
+    }
+    if (c.verdict === "CHANGES_REQUESTED") {
+        return { ...base, status: "failed", detail: "critic CHANGES_REQUESTED" };
+    }
+    return { ...base, status: "pending", detail: `critic ${c.status}, no verdict yet` };
+}
+function resolveBinding(b, inputs) {
+    switch (b.kind) {
+        case "route":
+            return resolveRouteLike("route", b.routeId, inputs);
+        case "test":
+            return resolveRouteLike("test", b.ref, inputs);
+        case "critic":
+            return resolveCritic(b.criticId, inputs);
+    }
+}
+// Pure join: objectives × evidence → BoundProofRecord. `generatedAt` is supplied
+// by the caller (keeps this deterministic + testable).
+export function buildProofRecord(inputs, generatedAt) {
+    const objectives = inputs.objectives.map((o) => {
+        const bindings = o.attestedBy.map((b) => resolveBinding(b, inputs));
+        // An objective with no bindings is declared-but-unbound → pending, never
+        // silently proven. Otherwise it's the worst of its bindings.
+        const status = bindings.length === 0 ? "pending" : worstOf(bindings.map((b) => b.status));
+        return { id: o.id, text: o.text, enforced: o.enforced, status, bindings };
+    });
+    const summary = { proven: 0, pending: 0, failed: 0, total: objectives.length };
+    for (const o of objectives)
+        summary[o.status] += 1;
+    return {
+        schemaVersion: 1,
+        commit: inputs.commit,
+        ...(inputs.headDiffHash !== undefined ? { diffHash: inputs.headDiffHash } : {}),
+        provenance: "consumer-attested",
+        generatedAt,
+        objectives,
+        summary,
+    };
+}
+const OBJECTIVES_MANIFEST_REL = ".darkfactory/objectives.yaml";
+// Read the objectives manifest + gate evidence + review artifact from disk for a
+// commit. Returns `null` when no manifest is present (nothing to prove). Throws
+// (caller → exit 1) on a malformed manifest or unreadable config — a real error
+// in the PR's own diff.
+export async function collectProofInputs(cwd, commit) {
+    // Resolve the manifest against the git repo root, not cwd, so `df prove` works
+    // from a subdirectory (the common case). Fall back to cwd outside a git repo.
+    let root = cwd;
+    try {
+        root = await repoRoot(cwd);
+    }
+    catch {
+        root = cwd;
+    }
+    const manifestPath = resolve(root, OBJECTIVES_MANIFEST_REL);
+    if (!existsSync(manifestPath))
+        return null;
+    const manifest = parseObjectivesManifest(parseYaml(readFileSync(manifestPath, "utf8")), OBJECTIVES_MANIFEST_REL);
+    const loaded = await loadAgentReviewConfig({ cwd });
+    const sha = await resolveCommit(commit, cwd);
+    // HEAD's gated diff hash (the binding target). Fail-soft: a transient git
+    // error leaves it undefined → route bindings degrade to pending, never
+    // false-proven.
+    let headDiffHash;
+    try {
+        const parent = await safeParentOrThrow(sha, cwd);
+        headDiffHash = diffHash(await commitDiff(parent, sha, cwd));
+    }
+    catch {
+        headDiffHash = undefined;
+    }
+    // Route/test evidence.
+    const gateResults = {};
+    let evidenceDiffHash;
+    const { evidence } = await readQualityGateEvidence(loaded, sha);
+    if (evidence && evidence.commit === sha) {
+        evidenceDiffHash = evidence.diffHash;
+        for (const [routeId, res] of Object.entries(evidence.gateResults ?? {})) {
+            gateResults[routeId] = { exitCode: res.exitCode };
+        }
+    }
+    // Critic evidence (the per-SHA ReviewArtifact). Absent → empty → critic
+    // bindings resolve to pending.
+    const criticResults = {};
+    const { artifact } = await loadForCommit(cwd, sha);
+    if (artifact) {
+        for (const c of artifact.criticResults) {
+            criticResults[c.criticId] = {
+                status: c.status,
+                ...(c.verdict !== undefined ? { verdict: c.verdict } : {}),
+            };
+        }
+    }
+    return {
+        inputs: {
+            commit: sha,
+            ...(headDiffHash !== undefined ? { headDiffHash } : {}),
+            objectives: manifest.objectives,
+            gateResults,
+            ...(evidenceDiffHash !== undefined ? { evidenceDiffHash } : {}),
+            criticResults,
+        },
+        resolvedSha: sha,
+    };
+}
+//# sourceMappingURL=prove.js.map

package/dist/evidence/prove.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prove.js","sourceRoot":"","sources":["../../src/evidence/prove.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,2EAA2E;AAC3E,gFAAgF;AAChF,kFAAkF;AAClF,4EAA4E;AAC5E,EAAE;AACF,qCAAqC;AACrC,iFAAiF;AACjF,8EAA8E;AAC9E,kFAAkF;AAClF,8BAA8B;AAC9B,EAAE;AACF,8EAA8E;AAC9E,kFAAkF;AAClF,mFAAmF;AACnF,sDAAsD;AAEtD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EACL,uBAAuB,GAUxB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC7F,OAAO,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AA6B3D,MAAM,WAAW,GAAgC,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;AAEtF,SAAS,OAAO,CAAC,QAAuB;IACtC,IAAI,KAAK,GAAgB,QAAQ,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,KAAK,CAAC;YAAE,KAAK,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAsB,EACtB,GAAW,EACX,MAAmB;IAEnB,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,KAAK,GACT,MAAM,CAAC,gBAAgB,KAAK,SAAS;QACrC,MAAM,CAAC,YAAY,KAAK,SAAS;QACjC,MAAM,CAAC,gBAAgB,KAAK,MAAM,CAAC,YAAY,CAAC;IAClD,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACzE,CAAC;IACD,OAAO;QACL,GAAG,IAAI;QACP,MAAM,EAAE,SAAS;QACjB,MAAM,EAAE,kEAAkE;KAC3E,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,MAAmB;IAC1D,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAiB,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC3F,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,qDAAqD,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;QAC7B,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;QACtC,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,MAAM,kBAAkB,EAAE,CAAC;AACtF,CAAC;AAED,SAAS,cAAc,CAAC,CAAkB,EAAE,MAAmB;IAC7D,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,gBAAgB,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,KAAK,MAAM;YACT,OAAO,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACjD,KAAK,QAAQ;YACX,OAAO,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,uDAAuD;AACvD,MAAM,UAAU,gBAAgB,CAAC,MAAmB,EAAE,WAAmB;IACvE,MAAM,UAAU,GAAqB,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAC/D,MAAM,QAAQ,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACpE,yEAAyE;QACzE,6DAA6D;QAC7D,MAAM,MAAM,GACV,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC7E,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAiB,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC;IAC7F,KAAK,MAAM,CAAC,IAAI,UAAU;QAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAEnD,OAAO;QACL,aAAa,EAAE,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,UAAU,EAAE,mBAAmB;QAC/B,WAAW;QACX,UAAU;QACV,OAAO;KACR,CAAC;AACJ,CAAC;AAOD,MAAM,uBAAuB,GAAG,8BAA8B,CAAC;AAE/D,iFAAiF;AACjF,gFAAgF;AAChF,gFAAgF;AAChF,wBAAwB;AACxB,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,MAAc;IAEd,+EAA+E;IAC/E,8EAA8E;IAC9E,IAAI,IAAI,GAAG,GAAG,CAAC;IACf,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,GAAG,CAAC;IACb,CAAC;IACD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC5D,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,QAAQ,GAAG,uBAAuB,CACtC,SAAS,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,EAC7C,uBAAuB,CACxB,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAE7C,0EAA0E;IAC1E,uEAAuE;IACvE,gBAAgB;IAChB,IAAI,YAAgC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACjD,YAAY,GAAG,QAAQ,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,YAAY,GAAG,SAAS,CAAC;IAC3B,CAAC;IAED,uBAAuB;IACvB,MAAM,WAAW,GAAuC,EAAE,CAAC;IAC3D,IAAI,gBAAoC,CAAC;IACzC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,uBAAuB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAChE,IAAI,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxC,gBAAgB,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACrC,KAAK,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC,EAAE,CAAC;YACxE,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,+BAA+B;IAC/B,MAAM,aAAa,GAAwC,EAAE,CAAC;IAC9D,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnD,IAAI,QAAQ,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;YACvC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG;gBAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE;YACN,MAAM,EAAE,GAAG;YACX,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,WAAW;YACX,GAAG,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,aAAa;SACd;QACD,WAAW,EAAE,GAAG;KACjB,CAAC;AACJ,CAAC"}

package/dist/evidence/publish.d.ts

@@ -0,0 +1,35 @@
+import type { EvidenceProvenance, PublishedEvidence } from "@momentiq/dark-factory-schemas";
+import type { LoadedConfig } from "../policy/config.js";
+import type { CerebeUploadInput, CerebeUploadResult } from "./cerebe.js";
+export interface EvidenceUploader {
+    uploadFile(input: CerebeUploadInput): Promise<CerebeUploadResult>;
+}
+export interface ArtifactSource {
+    path: string;
+    contentType: string;
+    bytes: Uint8Array;
+}
+export interface RouteArtifacts {
+    routeId: string;
+    exitCode: number;
+    sources: ArtifactSource[];
+}
+export interface BuildPublishManifestInput {
+    commit: string;
+    diffHash?: string;
+    gate?: ArtifactSource;
+    routes: RouteArtifacts[];
+    uploader: EvidenceUploader | null;
+    sessionId: string;
+    userId: string;
+    provenance?: EvidenceProvenance;
+}
+export declare function buildPublishManifest(input: BuildPublishManifestInput): Promise<PublishedEvidence>;
+export interface CollectedArtifacts {
+    gate?: ArtifactSource;
+    routes: RouteArtifacts[];
+    diffHash?: string;
+}
+export declare function collectPublishArtifacts(loaded: LoadedConfig, commit: string, cwd: string): Promise<CollectedArtifacts | null>;
+export declare function contentTypeForPath(p: string): string;
+//# sourceMappingURL=publish.d.ts.map