@tangle-network/traces 0.15.0 → 0.15.3

package/dist/cli.js

@@ -34,7 +34,6 @@ import {
   locateSessions,
   mergeTracesConfig,
   normalizeTraceQuestions,
-  parseCorpusFlag,
   parseSession,
   parseSince,
   planUpload,
@@ -45,7 +44,6 @@ import {
   renderInspectionReport,
   renderSessionFacts,
   renderValidation,
-  renderVerifiedFindingsSection,
   resolveAdapter,
   resolveRunWatchTarget,
   runTraceImprovement,
@@ -62,7 +60,8 @@ import {
   totalAgenticFailureMessage,
   traceStreamEventsFromSpans,
   validationExitCode,
-  verifyFindings,
+  verifyFindingsInSandbox,
+  verifySessionBundle,
   watchRunTarget,
   watchSessions,
   writeInspectionReportFile,
@@ -71,13 +70,17 @@ import {
   writeSessionIndexFile,
   writeTraceEvidenceExportFile,
   writeTraceQuestionsArtifacts
-} from "./chunk-7DOBU7BJ.js";
+} from "./chunk-U4EB4HK7.js";
 
 // src/cli.ts
 import { readFileSync } from "fs";
 import { mkdir, mkdtemp, readFile, stat, writeFile } from "fs/promises";
 import { tmpdir } from "os";
 import { basename, join, resolve } from "path";
+import {
+  parseCorpusFlag,
+  renderVerifiedFindingsSection
+} from "@tangle-network/agent-eval/trajectory-replay";
 import {
   analyzeSupervisorRun,
   findSupervisorRunDirs,
@@ -683,6 +686,34 @@ async function cmdBundle(args) {
     `session bundle (${manifest.view} view) \u2192 ${result.directory}  (${manifest.files.length} file(s), ${manifest.ledgerSlices.length} ledger slice(s), ${manifest.absent.length} recorded absent)`
   );
 }
+async function cmdBundleVerify(argv) {
+  let dir;
+  let format = "text";
+  for (let i = 0; i < argv.length; i++) {
+    const arg = argv[i];
+    if (arg === "--format") format = argv[++i] ?? "";
+    else if (arg.startsWith("--")) throw new Error(`bundle verify: unknown flag ${arg}`);
+    else if (dir === void 0) dir = arg;
+    else throw new Error(`bundle verify: unexpected argument ${arg}`);
+  }
+  if (!dir) throw new Error("bundle verify needs the bundle directory: traces bundle verify <dir>");
+  if (format !== "json" && format !== "text") throw new Error(`bundle verify: --format must be json or text, got "${format}"`);
+  const result = await verifySessionBundle(dir);
+  if (format === "json") {
+    process.stdout.write(`${JSON.stringify(result, null, 2)}
+`);
+  } else {
+    const lines = [
+      `${result.ok ? "VERIFIED" : "FAILED"}  ${result.view} bundle ${result.directory}`,
+      `  ${result.matched}/${result.listed} listed file(s) match their recorded size and SHA-256`,
+      ...result.issues.map((issue) => `  ${issue.kind.padEnd(11)} ${issue.path}: ${issue.detail}`)
+    ];
+    if (result.source) lines.push(`  source bundle manifest: ${result.source.status} (${result.source.directory})`);
+    process.stdout.write(`${lines.join("\n")}
+`);
+  }
+  if (!result.ok) process.exitCode = 1;
+}
 var PROJECTABLE_VIEWS = ["evidence-only"];
 async function cmdBundleView(args) {
   if (!args.input) {
@@ -863,13 +894,13 @@ async function verifyAnalyzeFindings(args, result) {
     throw new Error("analyze --verify-findings: the analysis produced no findings to verify");
   }
   const out = args.verifyOut ?? (args.out ? `${args.out}.verify` : "traces-verify-findings");
-  return verifyFindings(result.findings, {
+  return verifyFindingsInSandbox(result.findings, {
     source: { kind: "corpus", corpora: args.replayCorpora.map(parseCorpusFlag) },
     out,
-    apiKey: process.env.SANDBOX_API_KEY,
-    baseUrl: process.env.SANDBOX_API_URL ?? DEFAULT_SANDBOX_BASE_URL,
-    onProgress: (message) => process.stderr.write(`${message}
-`)
+    sandbox: {
+      apiKey: process.env.SANDBOX_API_KEY ?? "",
+      baseUrl: process.env.SANDBOX_API_URL ?? DEFAULT_SANDBOX_BASE_URL
+    }
   });
 }
 async function cmdAnalyzeSupervisorRun(runDir, args) {
@@ -1427,6 +1458,11 @@ Commands:
             ledger sliced to the session window, git log, and a sha256 manifest
             (needs --session <id|path> and --out <new-dir>). This is the FULL
             view: it holds the session's own words, for a reader who cites them
+  bundle verify <bundle-dir>
+            Check a bundle against its manifest: every listed file present with
+            its recorded size and SHA-256, no unlisted or non-regular file beside
+            them, and for a view, the source manifest it was projected from.
+            Exit 1 on any difference (--format text|json)
   bundle-view <bundle-dir>
             Project an assembled bundle into a narrower view for a consumer that
             must NOT read the session's own words. --view evidence-only carries
@@ -1564,6 +1600,10 @@ async function main() {
     await cmdVerifyFindings(rawArgs.slice(1));
     return;
   }
+  if (rawArgs[0] === "bundle" && rawArgs[1] === "verify") {
+    await cmdBundleVerify(rawArgs.slice(2));
+    return;
+  }
   const parsedArgs = parseArgs(rawArgs);
   if (parsedArgs.help) {
     if (parsedArgs.command === "import-codetracebench" || parsedArgs.command === "help" && parsedArgs.input === "import-codetracebench") usageImportCodeTraceBench();