@rpamis/comet 0.4.0-beta.6 → 0.4.0-beta.7

package/dist/domains/comet-native/native-check-receipt-storage.js

@@ -0,0 +1,196 @@
+import { constants as fsConstants, promises as fs } from 'node:fs';
+import path from 'node:path';
+import { atomicWriteJson } from './native-atomic-file.js';
+import { nativeChangeDir } from './native-change.js';
+import { parseNativeCheckReceipt } from './native-check-receipt-model.js';
+import { isInsidePath, resolveContainedNativePath } from './native-paths.js';
+const HASH_PATTERN = /^[a-f0-9]{64}$/u;
+const RECEIPT_REF_PATTERN = /^runtime\/evidence\/check-receipts\/([a-f0-9]{64})\.json$/u;
+const MAX_NATIVE_CHECK_RECEIPT_BYTES = 512 * 1024;
+function sameDirectoryIdentity(identity, stat) {
+    if (identity.dev !== 0 || identity.ino !== 0 || stat.dev !== 0 || stat.ino !== 0) {
+        return identity.dev === stat.dev && identity.ino === stat.ino;
+    }
+    return identity.birthtimeMs === stat.birthtimeMs;
+}
+function sameFileIdentity(left, right) {
+    if (left.dev !== 0 || left.ino !== 0 || right.dev !== 0 || right.ino !== 0) {
+        return left.dev === right.dev && left.ino === right.ino;
+    }
+    return (left.birthtimeMs === right.birthtimeMs &&
+        left.ctimeMs === right.ctimeMs &&
+        left.size === right.size);
+}
+async function captureDirectoryChain(root, directory) {
+    const lexicalRoot = path.resolve(root);
+    const lexicalDirectory = path.resolve(directory);
+    if (!isInsidePath(lexicalRoot, lexicalDirectory)) {
+        throw new Error('Native check receipt parent is outside the Native root');
+    }
+    const chain = [];
+    let cursor = lexicalRoot;
+    for (const segment of [
+        '',
+        ...path.relative(lexicalRoot, lexicalDirectory).split(path.sep).filter(Boolean),
+    ]) {
+        if (segment)
+            cursor = path.join(cursor, segment);
+        const stat = await fs.lstat(cursor);
+        if (!stat.isDirectory() || stat.isSymbolicLink()) {
+            throw new Error(`Native check receipt parent must be a real directory: ${cursor}`);
+        }
+        const realPath = await fs.realpath(cursor);
+        if (chain.length > 0 && !isInsidePath(chain[0].realPath, realPath)) {
+            throw new Error('Native check receipt parent resolves outside the Native root');
+        }
+        chain.push({
+            path: cursor,
+            realPath,
+            dev: stat.dev,
+            ino: stat.ino,
+            birthtimeMs: stat.birthtimeMs,
+        });
+    }
+    return chain;
+}
+async function verifyDirectoryChain(chain) {
+    for (const identity of chain) {
+        const stat = await fs.lstat(identity.path);
+        if (!stat.isDirectory() ||
+            stat.isSymbolicLink() ||
+            !sameDirectoryIdentity(identity, stat) ||
+            (await fs.realpath(identity.path)) !== identity.realPath) {
+            throw new Error(`Native check receipt parent changed while reading: ${identity.path}`);
+        }
+    }
+}
+export function nativeCheckReceiptRef(hash) {
+    if (!HASH_PATTERN.test(hash))
+        throw new Error('Native check receipt hash is invalid');
+    return `runtime/evidence/check-receipts/${hash}.json`;
+}
+function receiptHashFromRef(ref) {
+    const match = RECEIPT_REF_PATTERN.exec(ref);
+    if (!match)
+        throw new Error('Native check receipt ref is invalid');
+    return match[1];
+}
+function receiptFile(paths, name, hash) {
+    return path.join(nativeChangeDir(paths, name), ...nativeCheckReceiptRef(hash).split('/'));
+}
+async function readBoundedReceipt(file, changeRoot, nativeRoot) {
+    const chain = await captureDirectoryChain(nativeRoot, path.dirname(file));
+    const before = await fs.lstat(file);
+    if (!before.isFile() || before.isSymbolicLink()) {
+        throw new Error('Native check receipt must be a regular file');
+    }
+    if (before.size > MAX_NATIVE_CHECK_RECEIPT_BYTES) {
+        throw new Error(`Native check receipt exceeds ${MAX_NATIVE_CHECK_RECEIPT_BYTES} bytes`);
+    }
+    const [realChangeRoot, beforeRealPath] = await Promise.all([
+        fs.realpath(changeRoot),
+        fs.realpath(file),
+    ]);
+    if (!isInsidePath(realChangeRoot, beforeRealPath)) {
+        throw new Error('Native check receipt resolves outside its change');
+    }
+    const openFlags = process.platform === 'win32'
+        ? 'r'
+        : fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW | fsConstants.O_NONBLOCK;
+    const handle = await fs.open(file, openFlags).catch((error) => {
+        if (error.code === 'ELOOP' || error.code === 'ENXIO') {
+            throw new Error('Native check receipt became unsafe while opening');
+        }
+        throw error;
+    });
+    try {
+        const [opened, pathAfterOpen, realPathAfterOpen] = await Promise.all([
+            handle.stat(),
+            fs.lstat(file),
+            fs.realpath(file),
+        ]);
+        await verifyDirectoryChain(chain);
+        if (!opened.isFile() ||
+            !pathAfterOpen.isFile() ||
+            pathAfterOpen.isSymbolicLink() ||
+            realPathAfterOpen !== beforeRealPath ||
+            !sameFileIdentity(before, opened) ||
+            !sameFileIdentity(opened, pathAfterOpen)) {
+            throw new Error('Native check receipt changed while opening');
+        }
+        const chunks = [];
+        let total = 0;
+        const buffer = Buffer.allocUnsafe(16 * 1024);
+        while (true) {
+            const remaining = MAX_NATIVE_CHECK_RECEIPT_BYTES + 1 - total;
+            const read = await handle.read(buffer, 0, Math.min(buffer.length, remaining), null);
+            if (read.bytesRead === 0)
+                break;
+            total += read.bytesRead;
+            if (total > MAX_NATIVE_CHECK_RECEIPT_BYTES) {
+                throw new Error(`Native check receipt exceeds ${MAX_NATIVE_CHECK_RECEIPT_BYTES} bytes`);
+            }
+            chunks.push(Buffer.from(buffer.subarray(0, read.bytesRead)));
+        }
+        const [afterHandle, afterPath, afterRealPath] = await Promise.all([
+            handle.stat(),
+            fs.lstat(file),
+            fs.realpath(file),
+        ]);
+        await verifyDirectoryChain(chain);
+        if (!afterPath.isFile() ||
+            afterPath.isSymbolicLink() ||
+            afterRealPath !== beforeRealPath ||
+            !isInsidePath(realChangeRoot, afterRealPath) ||
+            !sameFileIdentity(opened, afterHandle) ||
+            !sameFileIdentity(opened, afterPath)) {
+            throw new Error('Native check receipt changed while reading');
+        }
+        return JSON.parse(Buffer.concat(chunks, total).toString('utf8'));
+    }
+    finally {
+        await handle.close();
+    }
+}
+export async function readNativeCheckReceipt(paths, name, ref) {
+    const expectedHash = receiptHashFromRef(ref);
+    const changeRoot = nativeChangeDir(paths, name);
+    const file = receiptFile(paths, name, expectedHash);
+    await resolveContainedNativePath(paths.nativeRoot, file);
+    const receipt = parseNativeCheckReceipt(await readBoundedReceipt(file, changeRoot, paths.nativeRoot));
+    if (receipt.change !== name || receipt.receiptHash !== expectedHash) {
+        throw new Error('Native check receipt ref/hash/change mismatch');
+    }
+    return receipt;
+}
+export async function writeNativeCheckReceipt(options) {
+    const receipt = parseNativeCheckReceipt(options.receipt);
+    if (receipt.change !== options.name) {
+        throw new Error('Native check receipt change mismatch');
+    }
+    const ref = nativeCheckReceiptRef(receipt.receiptHash);
+    const file = receiptFile(options.paths, options.name, receipt.receiptHash);
+    const serializedBytes = Buffer.byteLength(JSON.stringify(receipt, null, 2) + '\n', 'utf8');
+    if (serializedBytes > MAX_NATIVE_CHECK_RECEIPT_BYTES) {
+        throw new Error(`Native check receipt exceeds ${MAX_NATIVE_CHECK_RECEIPT_BYTES} bytes`);
+    }
+    await resolveContainedNativePath(options.paths.nativeRoot, file);
+    try {
+        const existing = await readNativeCheckReceipt(options.paths, options.name, ref);
+        if (JSON.stringify(existing) !== JSON.stringify(receipt)) {
+            throw new Error(`Native check receipt hash collision for ${receipt.receiptHash}`);
+        }
+        return ref;
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT')
+            throw error;
+    }
+    await atomicWriteJson(file, receipt, { containedRoot: options.paths.nativeRoot });
+    const persisted = await readNativeCheckReceipt(options.paths, options.name, ref);
+    if (JSON.stringify(persisted) !== JSON.stringify(receipt)) {
+        throw new Error('Native check receipt changed while being persisted');
+    }
+    return ref;
+}
+//# sourceMappingURL=native-check-receipt-storage.js.map

package/dist/domains/comet-native/native-check-receipt-storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-check-receipt-storage.js","sourceRoot":"","sources":["../../../domains/comet-native/native-check-receipt-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,uBAAuB,EAA2B,MAAM,iCAAiC,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAG7E,MAAM,YAAY,GAAG,iBAAiB,CAAC;AACvC,MAAM,mBAAmB,GAAG,4DAA4D,CAAC;AACzF,MAAM,8BAA8B,GAAG,GAAG,GAAG,IAAI,CAAC;AAUlD,SAAS,qBAAqB,CAC5B,QAA2B,EAC3B,IAA6B;IAE7B,IAAI,QAAQ,CAAC,GAAG,KAAK,CAAC,IAAI,QAAQ,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;QACjF,OAAO,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,CAAC;IAChE,CAAC;IACD,OAAO,QAAQ,CAAC,WAAW,KAAK,IAAI,CAAC,WAAW,CAAC;AACnD,CAAC;AAED,SAAS,gBAAgB,CAAC,IAA6B,EAAE,KAA8B;IACrF,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;QAC3E,OAAO,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;IAC1D,CAAC;IACD,OAAO,CACL,IAAI,CAAC,WAAW,KAAK,KAAK,CAAC,WAAW;QACtC,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAC9B,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CACzB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,IAAY,EACZ,SAAiB;IAEjB,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,CAAC,YAAY,CAAC,WAAW,EAAE,gBAAgB,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,KAAK,GAAwB,EAAE,CAAC;IACtC,IAAI,MAAM,GAAG,WAAW,CAAC;IACzB,KAAK,MAAM,OAAO,IAAI;QACpB,EAAE;QACF,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;KAChF,EAAE,CAAC;QACF,IAAI,OAAO;YAAE,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;YACjD,MAAM,IAAI,KAAK,CAAC,yDAAyD,MAAM,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAClF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,MAAM;YACZ,QAAQ;YACR,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,IAAI,CAAC,WAAW;SAC9B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,KAAmC;IACrE,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC3C,IACE,CAAC,IAAI,CAAC,WAAW,EAAE;YACnB,IAAI,CAAC,cAAc,EAAE;YACrB,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC;YACtC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,QAAQ,CAAC,QAAQ,EACxD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sDAAsD,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IACtF,OAAO,mCAAmC,IAAI,OAAO,CAAC;AACxD,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACnE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,WAAW,CAAC,KAAyB,EAAE,IAAY,EAAE,IAAY;IACxE,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,IAAY,EACZ,UAAkB,EAClB,UAAkB;IAElB,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,GAAG,8BAA8B,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,gCAAgC,8BAA8B,QAAQ,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,CAAC,cAAc,EAAE,cAAc,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACzD,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC;QACvB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;KAClB,CAAC,CAAC;IACH,IAAI,CAAC,YAAY,CAAC,cAAc,EAAE,cAAc,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,SAAS,GACb,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC;IAC7E,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAA4B,EAAE,EAAE;QACnF,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,iBAAiB,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnE,MAAM,CAAC,IAAI,EAAE;YACb,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;SAClB,CAAC,CAAC;QACH,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAClC,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;YAChB,CAAC,aAAa,CAAC,MAAM,EAAE;YACvB,aAAa,CAAC,cAAc,EAAE;YAC9B,iBAAiB,KAAK,cAAc;YACpC,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC;YACjC,CAAC,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,EACxC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;QAC7C,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,8BAA8B,GAAG,CAAC,GAAG,KAAK,CAAC;YAC7D,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;YACpF,IAAI,IAAI,CAAC,SAAS,KAAK,CAAC;gBAAE,MAAM;YAChC,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC;YACxB,IAAI,KAAK,GAAG,8BAA8B,EAAE,CAAC;gBAC3C,MAAM,IAAI,KAAK,CAAC,gCAAgC,8BAA8B,QAAQ,CAAC,CAAC;YAC1F,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAChE,MAAM,CAAC,IAAI,EAAE;YACb,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;YACd,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;SAClB,CAAC,CAAC;QACH,MAAM,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAClC,IACE,CAAC,SAAS,CAAC,MAAM,EAAE;YACnB,SAAS,CAAC,cAAc,EAAE;YAC1B,aAAa,KAAK,cAAc;YAChC,CAAC,YAAY,CAAC,cAAc,EAAE,aAAa,CAAC;YAC5C,CAAC,gBAAgB,CAAC,MAAM,EAAE,WAAW,CAAC;YACtC,CAAC,gBAAgB,CAAC,MAAM,EAAE,SAAS,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;IAC9E,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAyB,EACzB,IAAY,EACZ,GAAW;IAEX,MAAM,YAAY,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,UAAU,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IACpD,MAAM,0BAA0B,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,uBAAuB,CACrC,MAAM,kBAAkB,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAC7D,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,WAAW,KAAK,YAAY,EAAE,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,OAI7C;IACC,MAAM,OAAO,GAAG,uBAAuB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3E,MAAM,eAAe,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3F,IAAI,eAAe,GAAG,8BAA8B,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,gCAAgC,8BAA8B,QAAQ,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,0BAA0B,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChF,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,2CAA2C,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;IACD,MAAM,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjF,IAAI,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/domains/comet-native/native-check-receipt.d.ts

@@ -0,0 +1,19 @@
+import { type NativeCheckReceipt } from './native-check-receipt-model.js';
+import type { NativeChangeState, NativeProjectPaths } from './native-types.js';
+export { NATIVE_CHECK_LIMITS, NATIVE_CHECK_POLICY, NATIVE_CHECK_POLICY_VERSION, NATIVE_CHECK_RECEIPT_SCHEMA, NATIVE_CHECKER_HASH, parseNativeCheckReceipt, type NativeCheckIssue, type NativeCheckIssueKind, type NativeCheckReceipt, type NativeCheckReceiptStaleReason, } from './native-check-receipt-model.js';
+export interface ExecutedNativeCheckReceipt {
+    receipt: NativeCheckReceipt;
+    ref: string;
+}
+/**
+ * Run Comet's bounded text-safety policy against the current implementation scope.
+ *
+ * This function executes no command and reads no path outside the content-addressed scope. Binary
+ * files are hash-checked and counted as skipped because this policy makes no claim about them.
+ */
+export declare function executeNativeCheckReceipt(options: {
+    paths: NativeProjectPaths;
+    state: NativeChangeState;
+    clock?: () => Date;
+}): Promise<ExecutedNativeCheckReceipt>;
+//# sourceMappingURL=native-check-receipt.d.ts.map

package/dist/domains/comet-native/native-check-receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native-check-receipt.d.ts","sourceRoot":"","sources":["../../../domains/comet-native/native-check-receipt.ts"],"names":[],"mappings":"AAMA,OAAO,EAML,KAAK,kBAAkB,EAExB,MAAM,iCAAiC,CAAC;AAMzC,OAAO,KAAK,EACV,iBAAiB,EAEjB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAQ3B,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,2BAA2B,EAC3B,2BAA2B,EAC3B,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,gBAAgB,EACrB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,6BAA6B,GACnC,MAAM,iCAAiC,CAAC;AA4CzC,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,kBAAkB,CAAC;IAC5B,GAAG,EAAE,MAAM,CAAC;CACb;AAqVD;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,KAAK,EAAE,kBAAkB,CAAC;IAC1B,KAAK,EAAE,iBAAiB,CAAC;IACzB,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;CACpB,GAAG,OAAO,CAAC,0BAA0B,CAAC,CA8HtC"}

package/dist/domains/comet-native/native-check-receipt.js

@@ -0,0 +1,446 @@
+import { createHash } from 'node:crypto';
+import { constants as fsConstants, promises as fs } from 'node:fs';
+import path from 'node:path';
+import { TextDecoder } from 'node:util';
+import { nativeChangeDir } from './native-change.js';
+import { buildNativeCheckReceipt, NATIVE_CHECK_LIMITS, parseNativeCheckReceipt, } from './native-check-receipt-model.js';
+import { writeNativeCheckReceipt } from './native-check-receipt-storage.js';
+import { collectNativeContractFiles } from './native-contract-files.js';
+import { readNativeImplementationScopeBundle } from './native-evidence-storage.js';
+import { isInsidePath } from './native-paths.js';
+import { createNativeContentSnapshot } from './native-snapshot.js';
+import { buildNativeImplementationScopeBundle, } from './native-verification-scope.js';
+export { NATIVE_CHECK_LIMITS, NATIVE_CHECK_POLICY, NATIVE_CHECK_POLICY_VERSION, NATIVE_CHECK_RECEIPT_SCHEMA, NATIVE_CHECKER_HASH, parseNativeCheckReceipt, } from './native-check-receipt-model.js';
+const ISSUE_KIND_RANK = {
+    'conflict-marker': 0,
+    'trailing-whitespace': 1,
+    'space-before-tab': 2,
+    'scope-mismatch': 3,
+    'unsafe-file': 4,
+    'scan-limit': 5,
+};
+class ScopedFileError extends Error {
+    kind;
+    constructor(kind, message) {
+        super(message);
+        this.kind = kind;
+    }
+}
+function projectionManifest(projection) {
+    return {
+        schema: 'comet.native.content-snapshot.v1',
+        origin: projection.origin,
+        ...(projection.capture ? { capture: projection.capture } : {}),
+        createdAt: '1970-01-01T00:00:00.000Z',
+        complete: projection.complete,
+        limits: projection.limits,
+        entries: projection.entries,
+        omitted: projection.omitted,
+        omittedCount: projection.omittedCount,
+        ...(projection.omissionOverflow ? { omissionOverflow: projection.omissionOverflow } : {}),
+    };
+}
+async function collectBoundFacts(options) {
+    const [contract, snapshot] = await Promise.all([
+        collectNativeContractFiles({
+            changeDir: nativeChangeDir(options.paths, options.state.name),
+            briefRef: options.state.brief,
+            specChanges: options.state.spec_changes,
+        }),
+        createNativeContentSnapshot(options.paths, { origin: 'explicit' }),
+    ]);
+    const currentBundle = buildNativeImplementationScopeBundle({
+        baseline: projectionManifest(options.scope.baseline),
+        current: snapshot,
+        contractHash: options.scope.authority.contractHash,
+        declaredArtifacts: options.scope.authority.declaredArtifacts,
+        noCodeReason: options.scope.authority.noCodeReason,
+        ...(options.scope.authority.gitChangedPaths
+            ? { gitChangedPaths: options.scope.authority.gitChangedPaths }
+            : {}),
+    });
+    return {
+        contractHash: contract.contract.contractHash,
+        snapshotHash: currentBundle.scope.currentProjectionHash,
+    };
+}
+function receiptTime(clock, label) {
+    const value = (clock ?? (() => new Date()))();
+    if (!(value instanceof Date) || !Number.isFinite(value.getTime())) {
+        throw new Error(`Native check ${label} time is invalid`);
+    }
+    return value.toISOString();
+}
+function staleReasons(before, after, scope) {
+    const reasons = [];
+    const expectedContractHash = scope.scope.contractHash;
+    const expectedSnapshotHash = scope.scope.currentProjectionHash;
+    if (before.contractHash !== expectedContractHash) {
+        reasons.push('contract-before-does-not-match-scope');
+    }
+    if (before.snapshotHash !== expectedSnapshotHash) {
+        reasons.push('implementation-before-does-not-match-scope');
+    }
+    if (after.contractHash !== before.contractHash) {
+        reasons.push('contract-changed-during-check');
+    }
+    if (after.snapshotHash !== before.snapshotHash) {
+        reasons.push('implementation-changed-during-check');
+    }
+    if (after.contractHash === before.contractHash && after.contractHash !== expectedContractHash) {
+        reasons.push('contract-after-does-not-match-scope');
+    }
+    if (after.snapshotHash === before.snapshotHash && after.snapshotHash !== expectedSnapshotHash) {
+        reasons.push('implementation-after-does-not-match-scope');
+    }
+    return reasons;
+}
+function sameDirectoryIdentity(identity, stat) {
+    const stableMetadata = identity.birthtimeMs === stat.birthtimeMs && identity.ctimeMs === stat.ctimeMs;
+    if (identity.dev !== 0 || identity.ino !== 0 || stat.dev !== 0 || stat.ino !== 0) {
+        return stableMetadata && identity.dev === stat.dev && identity.ino === stat.ino;
+    }
+    return stableMetadata;
+}
+function sameFileIdentity(left, right) {
+    const stableMetadata = left.birthtimeMs === right.birthtimeMs &&
+        left.ctimeMs === right.ctimeMs &&
+        left.mtimeMs === right.mtimeMs &&
+        left.size === right.size;
+    if (left.dev !== 0 || left.ino !== 0 || right.dev !== 0 || right.ino !== 0) {
+        return stableMetadata && left.dev === right.dev && left.ino === right.ino;
+    }
+    return stableMetadata;
+}
+async function captureProjectDirectoryChain(projectRoot, directory) {
+    const lexicalRoot = path.resolve(projectRoot);
+    const lexicalDirectory = path.resolve(directory);
+    if (!isInsidePath(lexicalRoot, lexicalDirectory)) {
+        throw new ScopedFileError('unsafe-file', 'Scoped file parent escapes the project root');
+    }
+    const chain = [];
+    let cursor = lexicalRoot;
+    for (const segment of [
+        '',
+        ...path.relative(lexicalRoot, lexicalDirectory).split(path.sep).filter(Boolean),
+    ]) {
+        if (segment)
+            cursor = path.join(cursor, segment);
+        let stat;
+        try {
+            stat = await fs.lstat(cursor);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                throw new ScopedFileError('scope-mismatch', 'Scoped file parent no longer exists');
+            }
+            throw error;
+        }
+        if (!stat.isDirectory() || stat.isSymbolicLink()) {
+            throw new ScopedFileError('unsafe-file', 'Scoped file parent is not a real directory');
+        }
+        const realPath = await fs.realpath(cursor);
+        if (chain.length > 0 && !isInsidePath(chain[0].realPath, realPath)) {
+            throw new ScopedFileError('unsafe-file', 'Scoped file parent resolves outside the project');
+        }
+        chain.push({
+            path: cursor,
+            realPath,
+            dev: stat.dev,
+            ino: stat.ino,
+            birthtimeMs: stat.birthtimeMs,
+            ctimeMs: stat.ctimeMs,
+        });
+    }
+    return { physicalRoot: chain[0].realPath, chain };
+}
+async function verifyProjectDirectoryChain(chain) {
+    for (const identity of chain) {
+        let stat;
+        try {
+            stat = await fs.lstat(identity.path);
+        }
+        catch (error) {
+            if (error.code === 'ENOENT') {
+                throw new ScopedFileError('unsafe-file', 'Scoped file parent changed while reading');
+            }
+            throw error;
+        }
+        if (!stat.isDirectory() ||
+            stat.isSymbolicLink() ||
+            !sameDirectoryIdentity(identity, stat) ||
+            (await fs.realpath(identity.path)) !== identity.realPath) {
+            throw new ScopedFileError('unsafe-file', 'Scoped file parent changed while reading');
+        }
+    }
+}
+async function readScopedFile(options) {
+    const lexicalFile = path.resolve(options.projectRoot, ...options.file.path.split('/'));
+    if (!isInsidePath(options.projectRoot, lexicalFile)) {
+        throw new ScopedFileError('unsafe-file', 'Scoped file path escapes the project root');
+    }
+    const { physicalRoot, chain } = await captureProjectDirectoryChain(options.projectRoot, path.dirname(lexicalFile));
+    let before;
+    try {
+        before = await fs.lstat(lexicalFile);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT') {
+            throw new ScopedFileError('scope-mismatch', 'Scoped file no longer exists');
+        }
+        throw error;
+    }
+    if (!before.isFile() || before.isSymbolicLink()) {
+        throw new ScopedFileError('unsafe-file', 'Scoped file is not a real regular file');
+    }
+    if (before.size !== options.file.expected.size) {
+        throw new ScopedFileError('scope-mismatch', 'Scoped file size no longer matches its projection');
+    }
+    const beforeRealPath = await fs.realpath(lexicalFile);
+    if (!isInsidePath(physicalRoot, beforeRealPath)) {
+        throw new ScopedFileError('unsafe-file', 'Scoped file resolves outside the project root');
+    }
+    const openFlags = process.platform === 'win32'
+        ? 'r'
+        : fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW | fsConstants.O_NONBLOCK;
+    const handle = await fs.open(lexicalFile, openFlags).catch((error) => {
+        if (error.code === 'ENOENT') {
+            throw new ScopedFileError('scope-mismatch', 'Scoped file no longer exists');
+        }
+        if (error.code === 'ELOOP' || error.code === 'ENXIO') {
+            throw new ScopedFileError('unsafe-file', 'Scoped file became unsafe while opening');
+        }
+        throw error;
+    });
+    try {
+        const [opened, pathAfterOpen, realPathAfterOpen] = await Promise.all([
+            handle.stat(),
+            fs.lstat(lexicalFile),
+            fs.realpath(lexicalFile),
+        ]);
+        await verifyProjectDirectoryChain(chain);
+        if (!opened.isFile() ||
+            !pathAfterOpen.isFile() ||
+            pathAfterOpen.isSymbolicLink() ||
+            realPathAfterOpen !== beforeRealPath ||
+            !sameFileIdentity(before, opened) ||
+            !sameFileIdentity(opened, pathAfterOpen)) {
+            throw new ScopedFileError('unsafe-file', 'Scoped file changed while opening');
+        }
+        const chunks = [];
+        const digest = createHash('sha256');
+        const buffer = Buffer.allocUnsafe(64 * 1024);
+        let total = 0;
+        while (true) {
+            const remaining = options.file.expected.size + 1 - total;
+            if (remaining < 1) {
+                throw new ScopedFileError('scope-mismatch', 'Scoped file exceeds its projected size');
+            }
+            const read = await handle.read(buffer, 0, Math.min(buffer.length, remaining), null);
+            if (read.bytesRead === 0)
+                break;
+            total += read.bytesRead;
+            if (total > options.file.expected.size) {
+                throw new ScopedFileError('scope-mismatch', 'Scoped file exceeds its projected size');
+            }
+            const chunk = Buffer.from(buffer.subarray(0, read.bytesRead));
+            chunks.push(chunk);
+            digest.update(chunk);
+        }
+        const [afterHandle, afterPath, afterRealPath] = await Promise.all([
+            handle.stat(),
+            fs.lstat(lexicalFile),
+            fs.realpath(lexicalFile),
+        ]);
+        await verifyProjectDirectoryChain(chain);
+        if (total !== options.file.expected.size ||
+            digest.digest('hex') !== options.file.expected.hash) {
+            throw new ScopedFileError('scope-mismatch', 'Scoped file content no longer matches its projection');
+        }
+        if (!afterHandle.isFile() ||
+            !afterPath.isFile() ||
+            afterPath.isSymbolicLink() ||
+            afterRealPath !== beforeRealPath ||
+            !isInsidePath(physicalRoot, afterRealPath) ||
+            !sameFileIdentity(opened, afterHandle) ||
+            !sameFileIdentity(opened, afterPath)) {
+            throw new ScopedFileError('unsafe-file', 'Scoped file changed while reading');
+        }
+        const content = Buffer.concat(chunks, total);
+        if (content.includes(0))
+            return { bytes: total, text: null };
+        try {
+            return { bytes: total, text: new TextDecoder('utf-8', { fatal: true }).decode(content) };
+        }
+        catch {
+            return { bytes: total, text: null };
+        }
+    }
+    finally {
+        await handle.close();
+    }
+}
+function selectedScopedFiles(scope) {
+    const current = new Map(scope.current.entries.map((entry) => [entry.path, entry]));
+    const files = [];
+    const mismatches = [];
+    for (const change of scope.scope.changes) {
+        if (!change.after)
+            continue;
+        const entry = current.get(change.path);
+        if (!entry ||
+            entry.hash !== change.after.hash ||
+            entry.size !== change.after.size ||
+            entry.type !== 'file') {
+            mismatches.push(change.path);
+            continue;
+        }
+        files.push({ path: change.path, expected: change.after });
+    }
+    files.sort((left, right) => left.path.localeCompare(right.path, 'en'));
+    mismatches.sort((left, right) => left.localeCompare(right, 'en'));
+    return { files, mismatches };
+}
+function inspectText(pathRef, text, addIssue) {
+    const lines = text.split('\n');
+    for (let index = 0; index < lines.length; index += 1) {
+        const line = lines[index].endsWith('\r') ? lines[index].slice(0, -1) : lines[index];
+        const lineNumber = index + 1;
+        if (/^(?:<{7}|={7}|>{7})(?: |$)/u.test(line)) {
+            addIssue({ path: pathRef, line: lineNumber, kind: 'conflict-marker' });
+        }
+        if (/[ \t]+$/u.test(line)) {
+            addIssue({ path: pathRef, line: lineNumber, kind: 'trailing-whitespace' });
+        }
+        if (/^ +\t/u.test(line)) {
+            addIssue({ path: pathRef, line: lineNumber, kind: 'space-before-tab' });
+        }
+    }
+}
+/**
+ * Run Comet's bounded text-safety policy against the current implementation scope.
+ *
+ * This function executes no command and reads no path outside the content-addressed scope. Binary
+ * files are hash-checked and counted as skipped because this policy makes no claim about them.
+ */
+export async function executeNativeCheckReceipt(options) {
+    if (!options.state.implementation_scope) {
+        throw new Error('Native scoped check requires an implementation scope');
+    }
+    const scope = await readNativeImplementationScopeBundle(options.paths, options.state.name, options.state.implementation_scope);
+    const before = await collectBoundFacts({ paths: options.paths, state: options.state, scope });
+    const startedAt = receiptTime(options.clock, 'start');
+    const selected = selectedScopedFiles(scope);
+    const issues = [];
+    let issueCount = 0;
+    const addIssue = (issue) => {
+        issueCount += 1;
+        if (issues.length < NATIVE_CHECK_LIMITS.maxIssues)
+            issues.push(issue);
+    };
+    let candidates = selected.files;
+    const selectedCount = selected.files.length + selected.mismatches.length;
+    const scopeDetailOverflow = scope.scope.unresolvedScopes.some((unresolved) => unresolved.kind === 'scope-detail-overflow');
+    if (scopeDetailOverflow) {
+        const overflowPath = scope.scope.changes.at(-1)?.path ??
+            scope.current.entries.at(-1)?.path ??
+            scope.baseline.entries.at(-1)?.path;
+        if (!overflowPath) {
+            throw new Error('Native implementation scope overflow has no bounded diagnostic path');
+        }
+        addIssue({ path: overflowPath, line: 1, kind: 'scan-limit' });
+        candidates = [];
+    }
+    else if (selectedCount > NATIVE_CHECK_LIMITS.maxFiles) {
+        const selectedPaths = [...selected.files.map((file) => file.path), ...selected.mismatches].sort((left, right) => left.localeCompare(right, 'en'));
+        addIssue({
+            path: selectedPaths[NATIVE_CHECK_LIMITS.maxFiles],
+            line: 1,
+            kind: 'scan-limit',
+        });
+        candidates = [];
+    }
+    else {
+        let total = 0;
+        for (const file of selected.files) {
+            if (file.expected.size > NATIVE_CHECK_LIMITS.maxFileBytes) {
+                addIssue({ path: file.path, line: 1, kind: 'scan-limit' });
+                candidates = [];
+                break;
+            }
+            total += file.expected.size;
+            if (total > NATIVE_CHECK_LIMITS.maxTotalBytes) {
+                addIssue({ path: file.path, line: 1, kind: 'scan-limit' });
+                candidates = [];
+                break;
+            }
+        }
+    }
+    for (const mismatch of selected.mismatches) {
+        addIssue({ path: mismatch, line: 1, kind: 'scope-mismatch' });
+    }
+    let filesScanned = 0;
+    let binaryFilesSkipped = 0;
+    let bytesScanned = 0;
+    for (const file of candidates) {
+        try {
+            const scanned = await readScopedFile({ projectRoot: options.paths.projectRoot, file });
+            bytesScanned += scanned.bytes;
+            if (scanned.text === null) {
+                binaryFilesSkipped += 1;
+            }
+            else {
+                filesScanned += 1;
+                inspectText(file.path, scanned.text, addIssue);
+            }
+        }
+        catch (error) {
+            if (!(error instanceof ScopedFileError))
+                throw error;
+            addIssue({ path: file.path, line: 1, kind: error.kind });
+        }
+    }
+    const after = await collectBoundFacts({ paths: options.paths, state: options.state, scope });
+    const endedAt = receiptTime(options.clock, 'end');
+    const reasons = staleReasons(before, after, scope);
+    issues.sort((left, right) => left.path.localeCompare(right.path, 'en') ||
+        left.line - right.line ||
+        ISSUE_KIND_RANK[left.kind] - ISSUE_KIND_RANK[right.kind]);
+    const receipt = buildNativeCheckReceipt({
+        change: options.state.name,
+        sourceRevision: options.state.revision,
+        status: issueCount === 0 && reasons.length === 0 ? 'passed' : 'failed',
+        startedAt,
+        endedAt,
+        contract: {
+            expectedHash: scope.scope.contractHash,
+            beforeHash: before.contractHash,
+            afterHash: after.contractHash,
+        },
+        implementation: {
+            scopeHash: scope.scope.scopeHash,
+            expectedSnapshotHash: scope.scope.currentProjectionHash,
+            beforeSnapshotHash: before.snapshotHash,
+            afterSnapshotHash: after.snapshotHash,
+        },
+        counts: {
+            filesSelected: selectedCount,
+            filesScanned,
+            binaryFilesSkipped,
+            bytesScanned,
+            issueCount,
+            recordedIssueCount: issues.length,
+        },
+        issues,
+        issuesTruncated: issueCount > issues.length,
+        stale: reasons.length > 0,
+        staleReasons: reasons,
+    });
+    const ref = await writeNativeCheckReceipt({
+        paths: options.paths,
+        name: options.state.name,
+        receipt,
+    });
+    return { receipt: parseNativeCheckReceipt(receipt), ref };
+}
+//# sourceMappingURL=native-check-receipt.js.map