@timurproko/a1 0.1.8-dev.50ebb19 → 0.1.8-dev.510

package/dist/src/foundation/launch-guardian/main.js

@@ -1,165 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { PRODUCT_IDENTITY } from "../../product-identity.js";
-import { resolve } from "node:path";
-import { assertLaunchProfileId } from "../lifecycle/index.js";
-import { closeVerifiedContainment, LinuxNativeProcessInspector, NativeGuardianContainment, resolveProcessGuardianPath, verifyProcessGuardianArtifact, WindowsNativeProcessInspector, } from "../process-containment/index.js";
-import { SupervisorClient } from "../protocol/index.js";
-import { resolveProductPaths } from "../supervision/index.js";
-export async function runLaunchGuardian(options) {
-    assertLaunchProfileId(options.profileId);
-    const environment = { ...(options.environment ?? process.env) };
-    const paths = resolveProductPaths(environment);
-    const instanceId = randomUUID();
-    const helperPath = options.helperPath ?? resolveProcessGuardianPath(options.releaseRoot, environment);
-    const inspector = options.inspector ?? platformInspector(helperPath);
-    await (options.ensureHelper ?? verifyProcessGuardianArtifact)(helperPath);
-    const guardianIdentity = await inspector.observe(process.pid);
-    if (!guardianIdentity)
-        throw diagnosticError("launch guardian cannot verify its own native process identity", "PROCESS_IDENTITY_UNAVAILABLE");
-    const client = options.control ?? new SupervisorClient(environment[PRODUCT_IDENTITY.environment.releaseId]);
-    await client.connect(paths.endpoint);
-    const containment = options.containment ?? new NativeGuardianContainment(instanceId, helperPath, resolve(paths.runtimeDir, "launch-instances", `${instanceId}.ready.json`));
-    const stop = stopRequests(client, instanceId);
-    let rootIdentity = null;
-    try {
-        await requireAccepted(client, {
-            type: "create-launch-instance",
-            requestId: randomUUID(),
-            instanceId,
-            profileId: options.profileId,
-            shutdownPolicy: "terminate-tree-on-close",
-            guardianIdentity,
-        });
-        let handle;
-        try {
-            handle = await containment.spawn(process.execPath, [options.uiEntry], {
-                cwd: options.cwd ?? process.cwd(),
-                environment: environmentEntries(environment),
-                ...(environment.TERM ? { terminalType: environment.TERM } : {}),
-            });
-            rootIdentity = handle.identity;
-            await requireAccepted(client, {
-                type: "activate-launch-instance",
-                requestId: randomUUID(),
-                instanceId,
-                rootIdentity,
-                containmentIdentity: containment.identity,
-            });
-        }
-        catch (error) {
-            const outcome = failureOutcome(error, "guardian-error");
-            await completeBestEffort(client, instanceId, "completed", outcome);
-            throw error;
-        }
-        const outcome = await Promise.race([
-            handle.outcome,
-            stop.requested.then(async (reason) => {
-                if (reason !== "supervisor-disconnect") {
-                    await requireAccepted(client, {
-                        type: "begin-launch-instance-stop",
-                        requestId: randomUUID(),
-                        instanceId,
-                        reason,
-                    });
-                }
-                if (!rootIdentity)
-                    return failureOutcome(new Error("launch root identity is unavailable"), "cleanup-error");
-                const result = await closeVerifiedContainment(containment, inspector, rootIdentity, reason);
-                await containment.close();
-                if (reason === "supervisor-disconnect" && result.outcome.kind === "stopped") {
-                    return {
-                        kind: "interrupted",
-                        reason,
-                        message: "supervisor disconnected after local launch-instance containment closed",
-                    };
-                }
-                return result.outcome;
-            }),
-        ]);
-        await containment.close();
-        if (outcome.kind !== "interrupted" || outcome.reason !== "supervisor-disconnect") {
-            await completeBestEffort(client, instanceId, outcome.kind === "interrupted" || outcome.kind === "cleanup-error" ? "interrupted" : "completed", outcome);
-        }
-        return exitCode(outcome);
-    }
-    catch (error) {
-        await containment.close().catch(() => undefined);
-        throw error;
-    }
-    finally {
-        stop.dispose();
-        client.close();
-    }
-}
-function platformInspector(helperPath) {
-    if (process.platform === "win32")
-        return new WindowsNativeProcessInspector(helperPath);
-    if (process.platform === "linux")
-        return new LinuxNativeProcessInspector();
-    throw diagnosticError(`launch-instance process containment is unsupported on ${process.platform}`, "CONTAINMENT_UNSUPPORTED");
-}
-function stopRequests(client, instanceId) {
-    let resolveStop;
-    let settled = false;
-    const requested = new Promise(resolvePromise => { resolveStop = resolvePromise; });
-    const request = (reason) => {
-        if (settled)
-            return;
-        settled = true;
-        resolveStop(reason);
-    };
-    const onStopIntent = (intent) => {
-        if (intent.instanceId === instanceId)
-            request(intent.reason);
-    };
-    const onDisconnect = () => request("supervisor-disconnect");
-    const onSigterm = () => request("user-request");
-    const onSigint = () => undefined;
-    client.on("stopIntent", onStopIntent);
-    client.on("disconnect", onDisconnect);
-    process.once("SIGTERM", onSigterm);
-    process.on("SIGINT", onSigint);
-    return {
-        requested,
-        dispose() {
-            client.off("stopIntent", onStopIntent);
-            client.off("disconnect", onDisconnect);
-            process.off("SIGTERM", onSigterm);
-            process.off("SIGINT", onSigint);
-        },
-    };
-}
-async function requireAccepted(client, command) {
-    const result = await client.command(command);
-    if (!result.ok)
-        throw diagnosticError(result.error?.message ?? `supervisor rejected ${command.type}`, result.error?.code ?? "SUPERVISOR_REJECTED");
-}
-async function completeBestEffort(client, instanceId, terminalState, outcome) {
-    await requireAccepted(client, {
-        type: "complete-launch-instance",
-        requestId: randomUUID(),
-        instanceId,
-        terminalState,
-        outcome,
-    }).catch(() => undefined);
-}
-function environmentEntries(environment) {
-    return Object.fromEntries(Object.entries(environment).filter((entry) => entry[1] !== undefined));
-}
-function failureOutcome(error, kind) {
-    return {
-        kind,
-        message: error instanceof Error ? error.message : String(error),
-        code: error instanceof Error && "code" in error && typeof error.code === "string" ? error.code : null,
-    };
-}
-function exitCode(outcome) {
-    if (outcome.kind === "exited")
-        return outcome.exitCode;
-    if (outcome.kind === "stopped")
-        return 0;
-    return 1;
-}
-function diagnosticError(message, code) {
-    return Object.assign(new Error(`A1: ${message}`), { code });
-}

package/dist/src/foundation/lifecycle/index.d.ts

@@ -1,4 +0,0 @@
-export * from "./commands.js";
-export * from "./launch-instance.js";
-export * from "./model.js";
-export * from "./paths.js";

package/dist/src/foundation/lifecycle/index.js

@@ -1,4 +0,0 @@
-export * from "./commands.js";
-export * from "./launch-instance.js";
-export * from "./model.js";
-export * from "./paths.js";

package/dist/src/foundation/lifecycle/model.d.ts

@@ -1,64 +0,0 @@
-export type LaunchProfileId = "a1" | "pi" | "sandbox";
-export type GenerationId = string;
-export type DriverProfileId = string;
-export type RequestId = string;
-export interface TerminalDimensions {
-    readonly columns: number;
-    readonly rows: number;
-}
-export interface TransparentTerminalLaunchProfile {
-    readonly id: DriverProfileId;
-    readonly terminalCapability: "transparent";
-    readonly executable: string;
-    readonly arguments: readonly string[];
-    readonly cwd: string;
-    readonly environment: Readonly<Record<string, string>>;
-    readonly terminalType: string;
-    readonly dimensions: TerminalDimensions;
-    readonly ownerDisconnect: "stop" | "detach";
-    readonly recovery: "detach-only" | "none";
-    readonly surface: "none";
-    readonly visualReconnection: "none";
-}
-export interface NativeProcessIdentity {
-    readonly pid: number;
-    readonly startIdentity: string;
-}
-export type TransparentTerminalLifecycleOutcome = {
-    readonly kind: "exited";
-    readonly exitCode: number;
-} | {
-    readonly kind: "signaled";
-    readonly signal: string;
-} | {
-    readonly kind: "stopped";
-    readonly reason: "owner-disconnect" | "user-request" | "update";
-} | {
-    readonly kind: "detached";
-    readonly reason: "owner-disconnect";
-} | {
-    readonly kind: "spawn-error" | "broker-error";
-    readonly message: string;
-    readonly code: string | null;
-};
-export interface SupervisorSnapshot {
-    readonly revision: number;
-    readonly activeInstances: readonly {
-        readonly id: string;
-        readonly profileId: LaunchProfileId;
-        readonly state: "requested" | "active" | "stopping";
-    }[];
-}
-export interface CommandResult {
-    readonly requestId: RequestId;
-    readonly ok: boolean;
-    readonly revision: number;
-    readonly error?: {
-        readonly code: "invalid-command" | "not-found" | "stale-generation" | "capability-error" | "containment-unsupported" | "ownership-error" | "driver-error";
-        readonly message: string;
-    };
-}
-export declare function assertLaunchProfileId(value: unknown): asserts value is LaunchProfileId;
-export declare function assertDimensions(dimensions: TerminalDimensions): void;
-export declare function assertTransparentTerminalLaunchProfile(profile: TransparentTerminalLaunchProfile): void;
-export declare function assertNativeProcessIdentity(identity: NativeProcessIdentity): void;

package/dist/src/foundation/lifecycle/model.js

@@ -1,40 +0,0 @@
-import { PRODUCT_TEXT } from "../../product-identity.js";
-export function assertLaunchProfileId(value) {
-    if (value !== "a1" && value !== "pi" && value !== "sandbox")
-        throw new TypeError(PRODUCT_TEXT.diagnostic(`launch profile is invalid: ${String(value)}`));
-}
-export function assertDimensions(dimensions) {
-    if (!Number.isInteger(dimensions.columns) || dimensions.columns < 2 || dimensions.columns > 500) {
-        throw new RangeError("terminal columns must be an integer from 2 to 500");
-    }
-    if (!Number.isInteger(dimensions.rows) || dimensions.rows < 1 || dimensions.rows > 300) {
-        throw new RangeError("terminal rows must be an integer from 1 to 300");
-    }
-}
-export function assertTransparentTerminalLaunchProfile(profile) {
-    if (!profile.id || profile.terminalCapability !== "transparent")
-        throw new TypeError("invalid transparent terminal profile identity");
-    if (!profile.executable || profile.executable.includes("\0"))
-        throw new TypeError("transparent executable must be non-empty and contain no null byte");
-    if (!profile.cwd || profile.cwd.includes("\0"))
-        throw new TypeError("transparent working directory must be non-empty and contain no null byte");
-    if (profile.arguments.some(value => typeof value !== "string" || value.includes("\0")))
-        throw new TypeError("transparent arguments must contain no null byte");
-    if (Object.entries(profile.environment).some(([name, value]) => !name || name.includes("=") || name.includes("\0") || value.includes("\0"))) {
-        throw new TypeError("transparent environment contains an invalid name or value");
-    }
-    if (!profile.terminalType || profile.terminalType.includes("\0"))
-        throw new TypeError("transparent terminal type is invalid");
-    assertDimensions(profile.dimensions);
-    if (profile.surface !== "none" || profile.visualReconnection !== "none")
-        throw new TypeError("transparent profiles cannot declare a surface or visual reconnection");
-    if (profile.ownerDisconnect === "detach" && profile.recovery !== "detach-only")
-        throw new TypeError("transparent detach policy requires detach-only recovery");
-    if (profile.ownerDisconnect === "stop" && profile.recovery !== "none")
-        throw new TypeError("transparent stop policy requires no recovery claim");
-}
-export function assertNativeProcessIdentity(identity) {
-    if (!Number.isSafeInteger(identity.pid) || identity.pid <= 0 || !identity.startIdentity || identity.startIdentity.includes("\0")) {
-        throw new TypeError("invalid native process identity");
-    }
-}

package/dist/src/foundation/lifecycle/paths.d.ts

@@ -1,10 +0,0 @@
-export interface ProductPaths {
-    readonly configDir: string;
-    readonly dataDir: string;
-    readonly runtimeDir: string;
-    readonly databasePath: string;
-    readonly endpoint: string;
-    readonly endpointMetadataPath: string;
-    readonly supervisorLogPath: string;
-}
-export declare function resolveProductPaths(environment?: NodeJS.ProcessEnv, hostPlatform?: NodeJS.Platform, fallbackHome?: string): ProductPaths;

package/dist/src/foundation/lifecycle/paths.js

@@ -1,42 +0,0 @@
-import { createHash } from "node:crypto";
-import { homedir, platform } from "node:os";
-import { posix, win32 } from "node:path";
-import { PRODUCT_IDENTITY } from "../../product-identity.js";
-export function resolveProductPaths(environment = process.env, hostPlatform = platform(), fallbackHome = homedir()) {
-    const windows = hostPlatform === "win32";
-    const path = windows ? win32 : posix;
-    const home = environment.HOME ?? environment.USERPROFILE ?? fallbackHome;
-    const configOverride = environment[PRODUCT_IDENTITY.environment.configDir];
-    const dataOverride = environment[PRODUCT_IDENTITY.environment.dataDir];
-    const runtimeOverride = environment[PRODUCT_IDENTITY.environment.runtimeDir];
-    const databaseOverride = environment[PRODUCT_IDENTITY.environment.databasePath];
-    const endpointOverride = environment[PRODUCT_IDENTITY.environment.endpoint];
-    const configDir = path.resolve(configOverride
-        ?? (windows
-            ? path.join(environment.APPDATA ?? home, PRODUCT_IDENTITY.state.windowsControlDirectory)
-            : path.join(environment.XDG_CONFIG_HOME ?? path.join(home, ".config"), PRODUCT_IDENTITY.state.unixControlDirectory)));
-    const dataDir = path.resolve(dataOverride
-        ?? (windows
-            ? path.join(environment.LOCALAPPDATA ?? home, PRODUCT_IDENTITY.state.windowsControlDirectory)
-            : path.join(environment.XDG_DATA_HOME ?? path.join(home, ".local", "share"), PRODUCT_IDENTITY.state.unixControlDirectory)));
-    const runtimeDir = path.resolve(runtimeOverride
-        ?? (windows
-            ? path.join(dataDir, "runtime")
-            : environment.XDG_RUNTIME_DIR
-                ? path.join(environment.XDG_RUNTIME_DIR, PRODUCT_IDENTITY.state.unixControlDirectory)
-                : path.join(dataDir, "runtime")));
-    const namespace = createHash("sha256").update(runtimeDir.toLowerCase()).digest("hex").slice(0, 20);
-    const endpoint = endpointOverride
-        ?? (windows
-            ? `\\\\.\\pipe\\${PRODUCT_IDENTITY.endpoint.windowsPipeStem}-${namespace}`
-            : path.join(runtimeDir, PRODUCT_IDENTITY.endpoint.unixSocketFilename));
-    return {
-        configDir,
-        dataDir,
-        runtimeDir,
-        databasePath: path.resolve(databaseOverride ?? path.join(dataDir, PRODUCT_IDENTITY.endpoint.databaseFilename)),
-        endpoint,
-        endpointMetadataPath: path.join(runtimeDir, PRODUCT_IDENTITY.endpoint.metadataFilename),
-        supervisorLogPath: path.join(runtimeDir, PRODUCT_IDENTITY.endpoint.supervisorLogFilename),
-    };
-}

package/dist/src/foundation/native-host-protocol/codec.d.ts

@@ -1,11 +0,0 @@
-import { type NativeHostProofMessage } from "./messages.js";
-export declare class NativeHostProtocolError extends Error {
-    readonly code: "frame-too-large" | "malformed-frame" | "invalid-message";
-    constructor(code: "frame-too-large" | "malformed-frame" | "invalid-message", message: string);
-}
-export declare class NativeHostFrameCodec {
-    #private;
-    encode(message: NativeHostProofMessage): string;
-    push(chunk: Buffer | string): NativeHostProofMessage[];
-    private decodeLine;
-}

package/dist/src/foundation/native-host-protocol/codec.js

@@ -1,56 +0,0 @@
-import { MAX_NATIVE_HOST_MESSAGE_BYTES, assertNativeHostProofMessage, } from "./messages.js";
-export class NativeHostProtocolError extends Error {
-    code;
-    constructor(code, message) {
-        super(message);
-        this.code = code;
-        this.name = "NativeHostProtocolError";
-    }
-}
-export class NativeHostFrameCodec {
-    #buffer = "";
-    encode(message) {
-        assertNativeHostProofMessage(message);
-        const encoded = `${JSON.stringify(message)}\n`;
-        if (Buffer.byteLength(encoded, "utf8") > MAX_NATIVE_HOST_MESSAGE_BYTES) {
-            throw new NativeHostProtocolError("frame-too-large", "native-host message exceeds the 1 MiB proof frame limit");
-        }
-        return encoded;
-    }
-    push(chunk) {
-        this.#buffer += typeof chunk === "string" ? chunk : chunk.toString("utf8");
-        if (Buffer.byteLength(this.#buffer, "utf8") > MAX_NATIVE_HOST_MESSAGE_BYTES) {
-            this.#buffer = "";
-            throw new NativeHostProtocolError("frame-too-large", "native-host buffered frame exceeds the 1 MiB proof frame limit");
-        }
-        const messages = [];
-        let newline = this.#buffer.indexOf("\n");
-        while (newline >= 0) {
-            const line = this.#buffer.slice(0, newline);
-            this.#buffer = this.#buffer.slice(newline + 1);
-            if (line.length > 0)
-                messages.push(this.decodeLine(line));
-            newline = this.#buffer.indexOf("\n");
-        }
-        return messages;
-    }
-    decodeLine(line) {
-        let value;
-        try {
-            value = JSON.parse(line);
-        }
-        catch {
-            throw new NativeHostProtocolError("malformed-frame", "native-host frame is not valid JSON");
-        }
-        if (!isProofMessage(value))
-            throw new NativeHostProtocolError("invalid-message", "native-host frame does not match the proof message contract");
-        assertNativeHostProofMessage(value);
-        return value;
-    }
-}
-function isProofMessage(value) {
-    return typeof value === "object"
-        && value !== null
-        && typeof value.type === "string"
-        && ["hello", "hello-result", "command", "command-result", "event", "error"].includes(value.type);
-}

package/dist/src/foundation/native-host-protocol/evidence.d.ts

@@ -1,67 +0,0 @@
-export declare const NATIVE_SPIKE_EVIDENCE_SCHEMA: string;
-export declare const NATIVE_SPIKE_WORKLOADS: readonly ["four-concurrent-sessions", "input-routing", "unicode-cursor-modes", "alternate-screen", "paste", "mouse", "ime", "live-resize", "dpi", "high-rate-output", "pane-abnormal-exit", "host-cleanup"];
-export type NativeSpikeWorkloadId = typeof NATIVE_SPIKE_WORKLOADS[number];
-export interface NativeSpikeMetricSummary {
-    readonly minimum: number;
-    readonly p50: number;
-    readonly p95: number;
-    readonly maximum: number;
-    readonly samples: number;
-}
-export interface NativeSpikePaintDiagnostics {
-    readonly requestedFrames: number;
-    readonly presentedFrames: number;
-    readonly coalescedFrames: number;
-    readonly missedFrames: number;
-    readonly resizePaintGaps: number;
-}
-export interface NativeSpikeResourceObservation {
-    readonly cpuPercentMaximum: number;
-    readonly residentMemoryBytesMaximum: number;
-    readonly gpuMemoryBytesMaximum: number | null;
-}
-export interface NativeSpikeWorkloadResult {
-    readonly id: NativeSpikeWorkloadId;
-    readonly status: "passed" | "failed" | "not-run";
-    readonly durationMs: number;
-    readonly details: Readonly<Record<string, unknown>>;
-}
-export interface NativeSpikeEvidence {
-    readonly schema: typeof NATIVE_SPIKE_EVIDENCE_SCHEMA;
-    readonly artifact: {
-        readonly path: string;
-        readonly sha256: string;
-        readonly sizeBytes: number;
-    };
-    readonly source: {
-        readonly "a1Commit": string;
-        readonly libghosttyVtCommit: string;
-        readonly portablePtyVersion: string;
-        readonly crosstermVersion: string;
-    };
-    readonly environment: {
-        readonly platform: "windows";
-        readonly architecture: "x64" | "arm64";
-        readonly osRelease: string;
-        readonly zig: string;
-        readonly isolatedWorker: boolean;
-    };
-    readonly workloads: readonly NativeSpikeWorkloadResult[];
-    readonly latency: {
-        readonly inputToProcessMs: NativeSpikeMetricSummary;
-        readonly outputToPresentMs: NativeSpikeMetricSummary;
-    };
-    readonly paint: NativeSpikePaintDiagnostics;
-    readonly resources: NativeSpikeResourceObservation;
-    readonly physical: {
-        readonly method: "not-run" | "manual" | "isolated-worker";
-        readonly activeWorkstationAutomation: false;
-        readonly verdict: "pending" | "accepted" | "rejected";
-        readonly evidenceReference: string | null;
-    };
-    readonly summary: {
-        readonly technical: "passed" | "failed" | "incomplete";
-        readonly overall: "pending" | "accepted" | "rejected";
-    };
-}
-export declare function assertNativeSpikeEvidence(value: NativeSpikeEvidence): void;

package/dist/src/foundation/native-host-protocol/evidence.js

@@ -1,141 +0,0 @@
-import { PRODUCT_IDENTITY, PRODUCT_TEXT } from "../../product-identity.js";
-export const NATIVE_SPIKE_EVIDENCE_SCHEMA = PRODUCT_IDENTITY.evidence.nativeSpikeSchema;
-export const NATIVE_SPIKE_WORKLOADS = [
-    "four-concurrent-sessions",
-    "input-routing",
-    "unicode-cursor-modes",
-    "alternate-screen",
-    "paste",
-    "mouse",
-    "ime",
-    "live-resize",
-    "dpi",
-    "high-rate-output",
-    "pane-abnormal-exit",
-    "host-cleanup",
-];
-const EXPECTED_LIBGHOSTTY_VT = "c5a21edfcbc2d5b46540ad91b7980aca31f5f1f3";
-const EXPECTED_PORTABLE_PTY = "0.9.0";
-const EXPECTED_CROSSTERM = "0.29.0";
-const FORBIDDEN_EVIDENCE_KEYS = new Set([
-    "pty" + "Bytes",
-    "terminal" + "Bytes",
-    "terminal" + "Output",
-    "input" + "Bytes",
-    "rendered" + "Cells",
-    "cell" + "Grid",
-    "screen" + "Buffer",
-    "ansi" + "Stream",
-    "raw" + "Terminal",
-]);
-export function assertNativeSpikeEvidence(value) {
-    if (value.schema !== NATIVE_SPIKE_EVIDENCE_SCHEMA)
-        throw new TypeError("native spike evidence schema is invalid");
-    if (!/^[a-f0-9]{64}$/.test(value.artifact.sha256))
-        throw new TypeError("native spike artifact hash must be SHA-256");
-    if (!Number.isSafeInteger(value.artifact.sizeBytes) || value.artifact.sizeBytes <= 0)
-        throw new RangeError("native spike artifact size is invalid");
-    if (!/^[a-f0-9]{40}$/.test(value.source["a1Commit"]))
-        throw new TypeError(PRODUCT_TEXT.diagnostic("native spike commit is invalid"));
-    if (value.source.libghosttyVtCommit !== EXPECTED_LIBGHOSTTY_VT ||
-        value.source.portablePtyVersion !== EXPECTED_PORTABLE_PTY ||
-        value.source.crosstermVersion !== EXPECTED_CROSSTERM) {
-        throw new TypeError("native spike terminal-core sources do not match the pinned provenance");
-    }
-    if (value.environment.platform !== "windows")
-        throw new TypeError("native spike evidence must identify Windows");
-    if (!["x64", "arm64"].includes(value.environment.architecture))
-        throw new TypeError("native spike architecture is invalid");
-    if (!/^0\.15\.(?:[2-9]|[1-9][0-9])$/.test(value.environment.zig))
-        throw new TypeError("native spike Zig version must be 0.15.2 or newer");
-    if (value.environment.isolatedWorker !== true)
-        throw new TypeError("native spike evidence requires an isolated worker");
-    const expected = new Set(NATIVE_SPIKE_WORKLOADS);
-    const seen = new Set();
-    for (const workload of value.workloads) {
-        if (!expected.has(workload.id))
-            throw new TypeError(`unknown native spike workload: ${String(workload.id)}`);
-        if (seen.has(workload.id))
-            throw new TypeError(`duplicate native spike workload: ${workload.id}`);
-        seen.add(workload.id);
-        if (!["passed", "failed", "not-run"].includes(workload.status))
-            throw new TypeError("native spike workload status is invalid");
-        assertNonNegative(workload.durationMs, "native spike workload duration");
-        assertJsonObject(workload.details, "native spike workload details");
-    }
-    if (seen.size !== expected.size)
-        throw new TypeError("native spike evidence is missing one or more mandatory workloads");
-    assertMetric(value.latency.inputToProcessMs, "input-to-process latency");
-    assertMetric(value.latency.outputToPresentMs, "output-to-present latency");
-    assertNonNegative(value.paint.requestedFrames, "requested frames");
-    assertNonNegative(value.paint.presentedFrames, "presented frames");
-    assertNonNegative(value.paint.coalescedFrames, "coalesced frames");
-    assertNonNegative(value.paint.missedFrames, "missed frames");
-    assertNonNegative(value.paint.resizePaintGaps, "resize paint gaps");
-    if (value.paint.presentedFrames > value.paint.requestedFrames)
-        throw new RangeError("presented frames cannot exceed requested frames");
-    if (value.paint.missedFrames > value.paint.requestedFrames)
-        throw new RangeError("missed frames cannot exceed requested frames");
-    assertNonNegative(value.resources.cpuPercentMaximum, "maximum CPU observation");
-    assertNonNegative(value.resources.residentMemoryBytesMaximum, "maximum resident memory observation");
-    if (value.resources.gpuMemoryBytesMaximum !== null)
-        assertNonNegative(value.resources.gpuMemoryBytesMaximum, "maximum GPU memory observation");
-    if (value.physical.activeWorkstationAutomation !== false)
-        throw new TypeError("active-workstation automation is forbidden");
-    if (!["not-run", "manual", "isolated-worker"].includes(value.physical.method))
-        throw new TypeError("native spike physical method is invalid");
-    if (!["pending", "accepted", "rejected"].includes(value.physical.verdict))
-        throw new TypeError("native spike physical verdict is invalid");
-    if (value.physical.verdict === "accepted" && value.physical.method === "not-run")
-        throw new TypeError("physical acceptance requires manual or isolated-worker evidence");
-    if (value.physical.verdict !== "pending" && !value.physical.evidenceReference)
-        throw new TypeError("non-pending physical verdict requires evidence reference");
-    const failed = value.workloads.some(workload => workload.status === "failed");
-    const incomplete = value.workloads.some(workload => workload.status === "not-run");
-    const expectedTechnical = failed ? "failed" : incomplete ? "incomplete" : "passed";
-    if (value.summary.technical !== expectedTechnical)
-        throw new TypeError(`native spike technical summary must be ${expectedTechnical}`);
-    if (value.summary.overall === "accepted" && (expectedTechnical !== "passed" || value.physical.verdict !== "accepted")) {
-        throw new TypeError("overall native spike acceptance requires technical and physical acceptance");
-    }
-    if (value.summary.overall === "rejected" && !failed && value.physical.verdict !== "rejected") {
-        throw new TypeError("overall native spike rejection requires a failed workload or physical rejection");
-    }
-    assertNoForbiddenEvidenceKeys(value);
-}
-function assertMetric(metric, name) {
-    assertNonNegative(metric.minimum, `${name} minimum`);
-    assertNonNegative(metric.p50, `${name} p50`);
-    assertNonNegative(metric.p95, `${name} p95`);
-    assertNonNegative(metric.maximum, `${name} maximum`);
-    if (!Number.isSafeInteger(metric.samples) || metric.samples <= 0)
-        throw new RangeError(`${name} sample count is invalid`);
-    if (!(metric.minimum <= metric.p50 && metric.p50 <= metric.p95 && metric.p95 <= metric.maximum)) {
-        throw new RangeError(`${name} measurements must be ordered`);
-    }
-}
-function assertNoForbiddenEvidenceKeys(value) {
-    if (Array.isArray(value)) {
-        for (const item of value)
-            assertNoForbiddenEvidenceKeys(item);
-        return;
-    }
-    if (typeof value !== "object" || value === null)
-        return;
-    for (const [key, item] of Object.entries(value)) {
-        if (FORBIDDEN_EVIDENCE_KEYS.has(key))
-            throw new TypeError(`native spike evidence may not contain hot-path payload field ${key}`);
-        assertNoForbiddenEvidenceKeys(item);
-    }
-}
-function assertNonNegative(value, name) {
-    if (!Number.isFinite(value) || value < 0)
-        throw new RangeError(`${name} must be a non-negative finite number`);
-}
-function assertJsonObject(value, name) {
-    if (typeof value !== "object" || value === null || Array.isArray(value))
-        throw new TypeError(`${name} must be an object`);
-    const encoded = JSON.stringify(value);
-    if (!encoded || encoded.length > 64_000)
-        throw new RangeError(`${name} exceeds the bounded evidence detail limit`);
-}

package/dist/src/foundation/native-host-protocol/index.d.ts

@@ -1,4 +0,0 @@
-export * from "./codec.js";
-export * from "./evidence.js";
-export * from "./messages.js";
-export * from "./proof-gate.js";

package/dist/src/foundation/native-host-protocol/index.js

@@ -1,4 +0,0 @@
-export * from "./codec.js";
-export * from "./evidence.js";
-export * from "./messages.js";
-export * from "./proof-gate.js";